26b5d80ff37fd17654e5a4642a6c9c3e30381633f059272718dc65ba7a2c6c65

Analysis

max time kernel
150s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
11/05/2026, 12:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
inkscape-1.4.3-installer.exe
Size 2.0MB
Sample260511-peg81scx2r
SHA256 26b5d80ff37fd17654e5a4642a6c9c3e30381633f059272718dc65ba7a2c6c65
MD5 270d4c8058a3c1d13f21f5648bc74c2d
SHA1 3b055df20adfbc7d2baa6634ec31e95811b13dbd
SHA512 e4583955d5d5f134de02820767ea5bb812f8389d37482cb6eb21078c467923924f26f5c84c3d1150b997579d670b46ee7344aab25806d7a1368afea0bd82146d
SSDEEP 49152:5uI5hL4wc1DYJjNU3id/fPilfX/Dr8iuqjj9:55/MwcpGNUw/fPi5rQS9
TLSH
T101A5D03FB28B753EE06E5A367A72E210593B7A6165134C1696F4C88CCF250B01E3E797
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

bootkit defense_evasion discovery installer persistence spyware stealer trojan

Malware Config

Signatures

Checks for any installed AV software in registry 1 TTPs 10 IoCs

Security Software Discovery

T1518.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avast Software\Avast	inkscape-1.4.3-installer.tmp
Key opened	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avast Software\Avast	icarus.exe
Key opened	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\AVAST Software\Avast	inkscape-1.4.3-installer.tmp
Key opened	\REGISTRY\MACHINE\SOFTWARE\AVAST Software\Avast	inkscape-1.4.3-installer.tmp
Key opened	\REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast	inkscape-1.4.3-installer.tmp
Key opened	\REGISTRY\USER\S-1-5-21-914486190-3969805341-592249730-1000\SOFTWARE\Avast Software\Avast	inkscape-1.4.3-installer.tmp
Key opened	\REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast	icarus.exe
Key opened	\REGISTRY\MACHINE\Software\AVAST Software\Avast	icarus.exe
Key opened	\REGISTRY\MACHINE\Software\Avast Software\Avast	icarus.exe
Key opened	\REGISTRY\USER\S-1-5-21-914486190-3969805341-592249730-1000\SOFTWARE\AVAST Software\Avast	inkscape-1.4.3-installer.tmp

Downloads MZ/PE file 2 IoCs

flow	pid	Process
60	2320	installer.exe
76	2056	cookie_mmm_irs_ppi_008_537.exe

Enumerates connected drives 3 TTPs 4 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\D:	installer.exe
File opened (read-only)	\??\F:	installer.exe
File opened (read-only)	\??\D:	installer.exe
File opened (read-only)	\??\F:	installer.exe

Writes to the Master Boot Record (MBR) 1 TTPs 5 IoCs

Bootkits write to the MBR to gain persistence at a level below the operating system.

bootkit persistence

Bootkit

T1542.003

description	ioc	Process
File opened for modification	\??\PhysicalDrive0	icarus.exe
File opened for modification	\??\PhysicalDrive0	icarus.exe
File opened for modification	\??\PhysicalDrive0	icarus.exe
File opened for modification	\??\PhysicalDrive0	cookie_mmm_irs_ppi_008_537.exe
File opened for modification	\??\PhysicalDrive0	avast_free_antivirus_online_setup.exe

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-914486190-3969805341-592249730-1000\Control Panel\International\Geo\Nation	inkscape-1.4.3-installer.tmp

Executes dropped EXE 15 IoCs

pid	Process
5080	inkscape-1.4.3-installer.tmp
4292	OperaSetup.exe
2320	installer.exe
2056	cookie_mmm_irs_ppi_008_537.exe
1648	installer.exe
5260	installer.exe
4016	installer.exe
5964	installer.exe
2020	Assistant_130.0.5847.41_Setup.exe_sfx.exe
3956	assistant_installer.exe
3512	assistant_installer.exe
4240	avast_free_antivirus_online_setup.exe
2648	icarus.exe
5720	icarus.exe
5900	icarus.exe

Loads dropped DLL 8 IoCs

pid	Process
3956	assistant_installer.exe
3956	assistant_installer.exe
3512	assistant_installer.exe
3512	assistant_installer.exe
2056	cookie_mmm_irs_ppi_008_537.exe
4240	avast_free_antivirus_online_setup.exe
5900	icarus.exe
5720	icarus.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082
Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

System Location Discovery: System Language Discovery 1 TTPs 8 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	avast_free_antivirus_online_setup.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	inkscape-1.4.3-installer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	inkscape-1.4.3-installer.tmp
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	OperaSetup.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cookie_mmm_irs_ppi_008_537.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	assistant_installer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Assistant_130.0.5847.41_Setup.exe_sfx.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	assistant_installer.exe

System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 3 IoCs

Adversaries may check for Internet connectivity on compromised systems.

discovery

Internet Connection Discovery

T1016.001

pid	Process
9620	opera.exe
5148	opera.exe
9832	opera.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
9620	opera.exe

Inno Setup is an open-source installation builder for Windows applications. 2 IoCs

Inno Setup installer

installer

resource	yara_rule
behavioral1/memory/1808-0-0x00000000008E0000-0x00000000009BC000-memory.dmp	innosetup
behavioral1/memory/1808-9-0x00000000008E0000-0x00000000009BC000-memory.dmp	innosetup

Checks processor information in registry 2 TTPs 9 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	icarus.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	icarus.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	inkscape-1.4.3-installer.tmp
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	icarus.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	icarus.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	icarus.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\	inkscape-1.4.3-installer.tmp
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	icarus.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	icarus.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	installer.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	installer.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	installer.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	installer.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	assistant_installer.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	assistant_installer.exe

Modifies registry class 4 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\C06AEB9D-8774-46E7-8160-8321BCD14D9F\7CCD586D-2ABC-42FF-A23B-3731F4F183D9 = "0EC03442A4E93B807782D73BF46C389D"	avast_free_antivirus_online_setup.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\C06AEB9D-8774-46E7-8160-8321BCD14D9F\5E1D6A55-0134-486E-A166-38C2E4919BB1 = "AQAAANCMnd8BFdERjHoAwE/Cl+sBAAAAn+UK9Ipv00qx+HGwV+yoPQQAAAACAAAAAAAQZgAAAAEAACAAAACK2RTup4j9JjlVWKS+UshLLyYmDmHm2SzKVb8c2rpVbAAAAAAOgAAAAAIAACAAAADoMNQTlDHwTpY7pBkTzzec0Asa61zR+l++dpB+aSUtRIAAAABmRPLVi1uQ9oHSXW/Gx55bJgvJ3sCLImoP6Qv58h3PmKOM5clMfheOndL+O/L6iy8qilwtKjrR8JK6qtBPvtiu77nHTtUysJEUCg+uNQY8D3CCspjXFkiB1IOI8rwrKwT+YM22cHetufLY/nMrsBwYHtWDsSfidIY14NVzG3vNXUAAAAAeeR4URbMhzV+SG2DCDs/Ik4Yk2T2RJHEM9jsIm3NjAq6b4+zGUPjjRbb0OzP+48QQy9LvvK4HZF0xC9bVl6oq"	avast_free_antivirus_online_setup.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\C06AEB9D-8774-46E7-8160-8321BCD14D9F\56C7A9DA-4B11-406A-8B1A-EFF157C294D6 = "f0090fa1-6ed5-4071-b82b-ad05b499480f"	avast_free_antivirus_online_setup.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\C06AEB9D-8774-46E7-8160-8321BCD14D9F	avast_free_antivirus_online_setup.exe

Modifies system certificate store 2 TTPs 5 IoCs

defense_evasion spyware trojan

Install Root Certificate

T1553.004

Modify Registry

T1112

description	ioc	Process
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 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	installer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4	installer.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 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	installer.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 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	installer.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 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	installer.exe

Script User-Agent 1 IoCs

Uses user-agent string associated with script host/environment.

description	flow	ioc
HTTP User-Agent header	4	Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)

Suspicious behavior: EnumeratesProcesses 12 IoCs

pid	Process
5080	inkscape-1.4.3-installer.tmp
5080	inkscape-1.4.3-installer.tmp
5080	inkscape-1.4.3-installer.tmp
5080	inkscape-1.4.3-installer.tmp
5080	inkscape-1.4.3-installer.tmp
5080	inkscape-1.4.3-installer.tmp
5080	inkscape-1.4.3-installer.tmp
5080	inkscape-1.4.3-installer.tmp
5080	inkscape-1.4.3-installer.tmp
5080	inkscape-1.4.3-installer.tmp
5080	inkscape-1.4.3-installer.tmp
5080	inkscape-1.4.3-installer.tmp

Suspicious use of AdjustPrivilegeToken 27 IoCs

description	pid	Process
Token: SeRestorePrivilege	2648	icarus.exe
Token: SeTakeOwnershipPrivilege	2648	icarus.exe
Token: SeRestorePrivilege	2648	icarus.exe
Token: SeTakeOwnershipPrivilege	2648	icarus.exe
Token: SeRestorePrivilege	2648	icarus.exe
Token: SeTakeOwnershipPrivilege	2648	icarus.exe
Token: SeRestorePrivilege	2648	icarus.exe
Token: SeTakeOwnershipPrivilege	2648	icarus.exe
Token: SeDebugPrivilege	2648	icarus.exe
Token: SeRestorePrivilege	5900	icarus.exe
Token: SeTakeOwnershipPrivilege	5900	icarus.exe
Token: SeRestorePrivilege	5720	icarus.exe
Token: SeTakeOwnershipPrivilege	5720	icarus.exe
Token: SeRestorePrivilege	5900	icarus.exe
Token: SeTakeOwnershipPrivilege	5900	icarus.exe
Token: SeRestorePrivilege	5720	icarus.exe
Token: SeTakeOwnershipPrivilege	5720	icarus.exe
Token: SeRestorePrivilege	5900	icarus.exe
Token: SeTakeOwnershipPrivilege	5900	icarus.exe
Token: SeRestorePrivilege	5720	icarus.exe
Token: SeTakeOwnershipPrivilege	5720	icarus.exe
Token: SeRestorePrivilege	5900	icarus.exe
Token: SeRestorePrivilege	5720	icarus.exe
Token: SeTakeOwnershipPrivilege	5900	icarus.exe
Token: SeTakeOwnershipPrivilege	5720	icarus.exe
Token: SeDebugPrivilege	5720	icarus.exe
Token: SeDebugPrivilege	5900	icarus.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
5080	inkscape-1.4.3-installer.tmp

Suspicious use of WriteProcessMemory 15 IoCs

description	pid	Process	procid_target
PID 1808 wrote to memory of 5080	1808	inkscape-1.4.3-installer.exe	86
PID 5080 wrote to memory of 4292	5080	inkscape-1.4.3-installer.tmp	95
PID 4292 wrote to memory of 2320	4292	OperaSetup.exe	96
PID 5080 wrote to memory of 2056	5080	inkscape-1.4.3-installer.tmp	97
PID 2320 wrote to memory of 1648	2320	installer.exe	98
PID 2320 wrote to memory of 5260	2320	installer.exe	100
PID 2320 wrote to memory of 4016	2320	installer.exe	102
PID 4016 wrote to memory of 5964	4016	installer.exe	103
PID 2320 wrote to memory of 2020	2320	installer.exe	108
PID 2320 wrote to memory of 3956	2320	installer.exe	111
PID 3956 wrote to memory of 3512	3956	assistant_installer.exe	112
PID 2056 wrote to memory of 4240	2056	cookie_mmm_irs_ppi_008_537.exe	117
PID 4240 wrote to memory of 2648	4240	avast_free_antivirus_online_setup.exe	119
PID 2648 wrote to memory of 5720	2648	icarus.exe	120
PID 2648 wrote to memory of 5900	2648	icarus.exe	121

C:\Users\Admin\AppData\Local\Temp\inkscape-1.4.3-installer.exe
"C:\Users\Admin\AppData\Local\Temp\inkscape-1.4.3-installer.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:1808
- C:\Users\Admin\AppData\Local\Temp\is-Z9L0OR9SLH.tmp\inkscape-1.4.3-installer.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-Z9L0OR9SLH.tmp\inkscape-1.4.3-installer.tmp" /SL5="$80250,847735,840192,C:\Users\Admin\AppData\Local\Temp\inkscape-1.4.3-installer.exe"
  2⤵
  - Checks for any installed AV software in registry
  - Checks computer location settings
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Checks processor information in registry
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:5080
- - C:\Users\Admin\AppData\Local\Temp\is-KH0Y3QLLVQ.tmp\component0_extract\OperaSetup.exe
    "C:\Users\Admin\AppData\Local\Temp\is-KH0Y3QLLVQ.tmp\component0_extract\OperaSetup.exe" --silent --allusers=0 --otd=utm.medium:apb,utm.source:ais,utm.campaign:a,utm.id:agiSfNdCX7yMnGNNHcMDJOWIPkhraTa8AhsVWrw9PLV1LD5IiUVuQkB3cc2uOrNXf5CAUoIJQNTt4G7YMK
    3⤵
    - Executes dropped EXE
    - System Location Discovery: System Language Discovery
    - Suspicious use of WriteProcessMemory
    PID:4292
  - - C:\Users\Admin\AppData\Local\Temp\7zS4C05EF39\installer.exe
      C:\Users\Admin\AppData\Local\Temp\7zS4C05EF39\installer.exe --silent --allusers=0 --otd=utm.medium:apb,utm.source:ais,utm.campaign:a,utm.id:agiSfNdCX7yMnGNNHcMDJOWIPkhraTa8AhsVWrw9PLV1LD5IiUVuQkB3cc2uOrNXf5CAUoIJQNTt4G7YMK --server-tracking-blob=NDM5MTRkYTQ2OGRhNDNiMTMxMzIyYjNkODFjMGI3M2I1NjE2ODFiNTE2YzA0OGQ0NDNhZWU0ODNjNmQ3MzMwZDp7ImNvdW50cnkiOiJVUyIsImZhc3Rfb25ib2FyZGluZyI6e30sImluc3RhbGxlcl9uYW1lIjoiT3BlcmFTZXR1cC5leGUiLCJwcm9kdWN0Ijoib3BlcmEiLCJxdWVyeSI6Ii9vcGVyYS9zdGFibGUvd2luZG93cyIsInRpbWVzdGFtcCI6IjE3Nzg0MTA4NDUuNzczNCIsInVzZXJhZ2VudCI6InB5dGhvbi1yZXF1ZXN0cy8yLjMyLjMiLCJ1dG0iOnt9LCJ1dWlkIjoiNmY3NDhkNjAtY2RmMS00MTRiLWJhZWEtNmFhNzEzZTliYjFhIn0=
      4⤵
      Downloads MZ/PE file
      Enumerates connected drives
      Executes dropped EXE
      Enumerates system info in registry
      Modifies system certificate store
      Suspicious use of WriteProcessMemory
      PID:2320
    - - C:\Users\Admin\AppData\Local\Temp\7zS4C05EF39\installer.exe
        
        C:\Users\Admin\AppData\Local\Temp\7zS4C05EF39\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=131.0.5877.24 --initial-client-data=0x26c,0x270,0x274,0x248,0x278,0x7ff735722e98,0x7ff735722ea4,0x7ff735722eb0
        5⤵
        Executes dropped EXE
        
        PID:1648
    - - C:\Users\Admin\AppData\Local\Temp\.opera\268a8efd-f812-40ea-a96d-f99878c89e0d Opera Installer Temp\installer.exe
        
        "C:\Users\Admin\AppData\Local\Temp\.opera\268a8efd-f812-40ea-a96d-f99878c89e0d Opera Installer Temp\installer.exe" --version
        5⤵
        Executes dropped EXE
        
        PID:5260
    - - C:\Users\Admin\AppData\Local\Temp\7zS4C05EF39\installer.exe
        
        "C:\Users\Admin\AppData\Local\Temp\7zS4C05EF39\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --show-intro-overlay --server-tracking-data=server_tracking_data --initial-pid=2320 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\268a8efd-f812-40ea-a96d-f99878c89e0d Opera Installer Temp\opera_package_20260511133107" --session-guid=2dd74c59-a037-4558-a49e-b0ebaf57d621 --server-tracking-blob=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 --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=A408000000000000
        5⤵
        Enumerates connected drives
        Executes dropped EXE
        Enumerates system info in registry
        Suspicious use of WriteProcessMemory
        
        PID:4016
      - C:\Users\Admin\AppData\Local\Temp\7zS4C05EF39\installer.exe
        
        C:\Users\Admin\AppData\Local\Temp\7zS4C05EF39\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=131.0.5877.24 --initial-client-data=0x278,0x27c,0x280,0x248,0x284,0x7ff735722e98,0x7ff735722ea4,0x7ff735722eb0
        6⤵
        Executes dropped EXE
        
        PID:5964
      - C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.24\installer.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.24\installer.exe" --backend --initial-pid=2320 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --server-tracking-data=server_tracking_data --show-intro-overlay --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\268a8efd-f812-40ea-a96d-f99878c89e0d Opera Installer Temp\opera_package_202605111331071" --session-guid=2dd74c59-a037-4558-a49e-b0ebaf57d621 --server-tracking-blob=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 --silent --desktopshortcut=1 --install-subfolder=131.0.5877.24
        6⤵
        
        PID:6752
        
        C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.24\installer.exe
        
        C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.24\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=131.0.5877.24 --initial-client-data=0x27c,0x280,0x284,0x250,0x288,0x7ff6bf582e98,0x7ff6bf582ea4,0x7ff6bf582eb0
        7⤵
        
        PID:6716
        
        C:\Users\Admin\AppData\Local\Temp\.opera\268a8efd-f812-40ea-a96d-f99878c89e0d Opera Installer Temp\opera_package_202605111331071\assistant\assistant_installer.exe
        
        "C:\Users\Admin\AppData\Local\Temp\.opera\268a8efd-f812-40ea-a96d-f99878c89e0d Opera Installer Temp\opera_package_202605111331071\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --copyonly=0 --allusers=0
        7⤵
        
        PID:6156
        
        C:\Users\Admin\AppData\Local\Temp\.opera\268a8efd-f812-40ea-a96d-f99878c89e0d Opera Installer Temp\opera_package_202605111331071\assistant\assistant_installer.exe
        
        "C:\Users\Admin\AppData\Local\Temp\.opera\268a8efd-f812-40ea-a96d-f99878c89e0d Opera Installer Temp\opera_package_202605111331071\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x220,0x224,0x228,0x1fc,0x22c,0xfb4040,0xfb404c,0xfb4058
        8⤵
        
        PID:6168
        
        C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --run-assistant --allusers=0
        8⤵
        
        PID:2824
        
        C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
        
        C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x220,0x224,0x228,0x1fc,0x22c,0x724040,0x72404c,0x724058
        9⤵
        
        PID:5816
        
        C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe"
        9⤵
        
        PID:1956
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
        10⤵
        
        PID:4308
        
        C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.24\opera_crashreporter.exe
        
        C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=131.0.5877.24 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ffeada98fc0,0x7ffeada98fd0,0x7ffeada98fe0
        11⤵
        
        PID:5436
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
        10⤵
        
        PID:3200
        
        C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.24\opera_crashreporter.exe
        
        C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=131.0.5877.24 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ffeada98fc0,0x7ffeada98fd0,0x7ffeada98fe0
        11⤵
        
        PID:4908
        
        C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
        
        C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x26c,0x270,0x274,0x240,0x278,0xc9c830,0xc9c83c,0xc9c848
        10⤵
        
        PID:5592
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
        11⤵
        
        PID:2328
        
        C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.24\opera_crashreporter.exe
        
        C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=131.0.5877.24 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ffeada98fc0,0x7ffeada98fd0,0x7ffeada98fe0
        12⤵
        
        PID:1580
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
        11⤵
        
        PID:1984
        
        C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.24\opera_crashreporter.exe
        
        C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=131.0.5877.24 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ffeada98fc0,0x7ffeada98fd0,0x7ffeada98fe0
        12⤵
        
        PID:4516
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
        11⤵
        
        PID:2404
        
        C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.24\opera_crashreporter.exe
        
        C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=131.0.5877.24 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ffeada98fc0,0x7ffeada98fd0,0x7ffeada98fe0
        12⤵
        
        PID:4812
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --ran-launcher --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\268a8efd-f812-40ea-a96d-f99878c89e0d Opera Installer Temp\opera_package_202605111331071\de932af914ba00303d4a2778a383ac9c831101e2.crx"
        7⤵
        
        PID:5136
        
        C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.24\opera_crashreporter.exe
        
        C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=131.0.5877.24 --initial-client-data=0x250,0x254,0x258,0x24c,0x25c,0x7ffeada98fc0,0x7ffeada98fd0,0x7ffeada98fe0
        8⤵
        
        PID:5420
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-ebay-attributions=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1716,i,11709626354102607601,1342832949160404330,262144 --field-trial-handle=1944,i,8268037509543619719,4559910523506454202,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1948,i,2199008889422466619,17788695877342021284,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1872 /prefetch:2
        8⤵
        System Network Configuration Discovery: Internet Connection Discovery
        
        PID:5148
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-ebay-attributions=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2108,i,16081655855089689519,9128307829683522494,524288 --field-trial-handle=1944,i,8268037509543619719,4559910523506454202,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1948,i,2199008889422466619,17788695877342021284,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2120 /prefetch:3
        8⤵
        System Network Configuration Discovery: Internet Connection Discovery
        System Time Discovery
        
        PID:9620
        
        C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-ebay-attributions=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2348,i,15180461038656289313,4352004379238177793,524288 --field-trial-handle=1944,i,8268037509543619719,4559910523506454202,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1948,i,2199008889422466619,17788695877342021284,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2360 /prefetch:8
        8⤵
        System Network Configuration Discovery: Internet Connection Discovery
        
        PID:9832
    - - C:\Users\Admin\AppData\Local\Temp\.opera\268a8efd-f812-40ea-a96d-f99878c89e0d Opera Installer Temp\opera_package_202605111331071\assistant\Assistant_130.0.5847.41_Setup.exe_sfx.exe
        
        "C:\Users\Admin\AppData\Local\Temp\.opera\268a8efd-f812-40ea-a96d-f99878c89e0d Opera Installer Temp\opera_package_202605111331071\assistant\Assistant_130.0.5847.41_Setup.exe_sfx.exe"
        5⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        
        PID:2020
    - - C:\Users\Admin\AppData\Local\Temp\.opera\268a8efd-f812-40ea-a96d-f99878c89e0d Opera Installer Temp\opera_package_202605111331071\assistant\assistant_installer.exe
        
        "C:\Users\Admin\AppData\Local\Temp\.opera\268a8efd-f812-40ea-a96d-f99878c89e0d Opera Installer Temp\opera_package_202605111331071\assistant\assistant_installer.exe" --version
        5⤵
        Executes dropped EXE
        Loads dropped DLL
        System Location Discovery: System Language Discovery
        Enumerates system info in registry
        Suspicious use of WriteProcessMemory
        
        PID:3956
      - C:\Users\Admin\AppData\Local\Temp\.opera\268a8efd-f812-40ea-a96d-f99878c89e0d Opera Installer Temp\opera_package_202605111331071\assistant\assistant_installer.exe
        
        "C:\Users\Admin\AppData\Local\Temp\.opera\268a8efd-f812-40ea-a96d-f99878c89e0d Opera Installer Temp\opera_package_202605111331071\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x220,0x224,0x228,0x1fc,0x22c,0xfb4040,0xfb404c,0xfb4058
        6⤵
        Executes dropped EXE
        Loads dropped DLL
        System Location Discovery: System Language Discovery
        
        PID:3512
- - C:\Users\Admin\AppData\Local\Temp\is-KH0Y3QLLVQ.tmp\component1_extract\cookie_mmm_irs_ppi_008_537.exe
    "C:\Users\Admin\AppData\Local\Temp\is-KH0Y3QLLVQ.tmp\component1_extract\cookie_mmm_irs_ppi_008_537.exe" /silent /ws /psh:2bJ1krltje4Et2z38oHgX4hXmquiVS6DPUogEr3oHJoILzbcHF6KtlCbvBEV5oxKlOlCQnEv6rl7U /cookie:mmm_irs_ppi_008_537_a
    3⤵
    - Downloads MZ/PE file
    - Writes to the Master Boot Record (MBR)
    - Executes dropped EXE
    - Loads dropped DLL
    - System Location Discovery: System Language Discovery
    - Suspicious use of WriteProcessMemory
    PID:2056
  - - C:\Windows\Temp\asw.7750c2969b416ac4\avast_free_antivirus_online_setup.exe
      "C:\Windows\Temp\asw.7750c2969b416ac4\avast_free_antivirus_online_setup.exe" /silent /ws /psh:2bJ1krltje4Et2z38oHgX4hXmquiVS6DPUogEr3oHJoILzbcHF6KtlCbvBEV5oxKlOlCQnEv6rl7U /cookie:mmm_irs_ppi_008_537_a /cookie:mmm_irs_ppi_008_537_a /ga_clientid:ba8e43ff-e22a-400e-aa2f-dbaa7abd94eb /edat_dir:C:\Windows\Temp\asw.7750c2969b416ac4 /geo:GB
      4⤵
      Writes to the Master Boot Record (MBR)
      Executes dropped EXE
      Loads dropped DLL
      System Location Discovery: System Language Discovery
      Modifies registry class
      Suspicious use of WriteProcessMemory
      PID:4240
    - - C:\Windows\Temp\asw-ba8e43ff-e22a-400e-aa2f-dbaa7abd94eb\common\icarus.exe
        
        C:\Windows\Temp\asw-ba8e43ff-e22a-400e-aa2f-dbaa7abd94eb\common\icarus.exe /icarus-info-path:C:\Windows\Temp\asw-ba8e43ff-e22a-400e-aa2f-dbaa7abd94eb\icarus-info.xml /install /silent /ws /psh:2bJ1krltje4Et2z38oHgX4hXmquiVS6DPUogEr3oHJoILzbcHF6KtlCbvBEV5oxKlOlCQnEv6rl7U /cookie:mmm_irs_ppi_008_537_a /edat_dir:C:\Windows\Temp\asw.7750c2969b416ac4 /geo:GB /track-guid:ba8e43ff-e22a-400e-aa2f-dbaa7abd94eb
        5⤵
        Writes to the Master Boot Record (MBR)
        Executes dropped EXE
        Checks processor information in registry
        Suspicious use of AdjustPrivilegeToken
        Suspicious use of WriteProcessMemory
        
        PID:2648
      - C:\Windows\Temp\asw-ba8e43ff-e22a-400e-aa2f-dbaa7abd94eb\avast-av\icarus.exe
        
        C:\Windows\Temp\asw-ba8e43ff-e22a-400e-aa2f-dbaa7abd94eb\avast-av\icarus.exe /silent /ws /psh:2bJ1krltje4Et2z38oHgX4hXmquiVS6DPUogEr3oHJoILzbcHF6KtlCbvBEV5oxKlOlCQnEv6rl7U /cookie:mmm_irs_ppi_008_537_a /edat_dir:C:\Windows\Temp\asw.7750c2969b416ac4 /geo:GB /track-guid:ba8e43ff-e22a-400e-aa2f-dbaa7abd94eb /er_master:master_ep_661b09f0-9cae-4e42-af6f-bccaa2f20bb3 /er_slave:avast-av_slave_ep_e56b71e7-7849-4c47-9834-7d41dbf9f4f4 /slave:avast-av
        6⤵
        Checks for any installed AV software in registry
        Writes to the Master Boot Record (MBR)
        Executes dropped EXE
        Loads dropped DLL
        Checks processor information in registry
        Suspicious use of AdjustPrivilegeToken
        
        PID:5720
      - C:\Windows\Temp\asw-ba8e43ff-e22a-400e-aa2f-dbaa7abd94eb\avast-av-vps\icarus.exe
        
        C:\Windows\Temp\asw-ba8e43ff-e22a-400e-aa2f-dbaa7abd94eb\avast-av-vps\icarus.exe /silent /ws /psh:2bJ1krltje4Et2z38oHgX4hXmquiVS6DPUogEr3oHJoILzbcHF6KtlCbvBEV5oxKlOlCQnEv6rl7U /cookie:mmm_irs_ppi_008_537_a /edat_dir:C:\Windows\Temp\asw.7750c2969b416ac4 /geo:GB /track-guid:ba8e43ff-e22a-400e-aa2f-dbaa7abd94eb /er_master:master_ep_661b09f0-9cae-4e42-af6f-bccaa2f20bb3 /er_slave:avast-av-vps_slave_ep_9724a94a-ec56-417d-9772-2ea4cf853c1f /slave:avast-av-vps
        6⤵
        Writes to the Master Boot Record (MBR)
        Executes dropped EXE
        Loads dropped DLL
        Checks processor information in registry
        Suspicious use of AdjustPrivilegeToken
        
        PID:5900

C:\Windows\SysWOW64\DllHost.exe
C:\Windows\SysWOW64\DllHost.exe /Processid:{60A90A2F-858D-42AF-8929-82BE9D99E8A1}
1⤵
PID:6420

C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\wbem\unsecapp.exe -Embedding
1⤵
PID:5704

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Pre-OS Boot

T1542

Bootkit

T1542.003

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Pre-OS Boot

T1542

Bootkit

T1542.003

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

Software Discovery

T1518

Security Software Discovery

T1518.001

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

System Time Discovery

T1124

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BreachGuardSdk.dll

Path C:\Program Files\Avast Software\Avast\BreachGuardSdk.dll
Size 5.5MB
SHA256 992050fa99b7d6b04e1dabe673b42b29f643502f65c2553b2147ca6444b38096
MD5 73f925862bb848ea8535ace0598668a1
SHA1 67a5192e659786ec073da051b8731ac3e42bdbdd
SHA512 e7118f524d765088592ec41b02a5280ad9202a3420843cf393a503b7afc9072c7bd22e54faba9a54e23d353756c5d0fc77da59d822d550efd78df70c8343cdd1
SSDEEP 49152:vYCjn/In/3Gmg7UaUCOf29TK6KWcy0vcno4LPvHgPh8dnsG1xN476ESu8ENsYEf0:vbTY/3eTKNWACXK7Yqs/bcIwlL
TLSH
T1D1464A6F316C0198E1BAD1BDCBDB8E07D672340547229BCF09E1829A1E57EDD4DBE620
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

aswArDisk.sys

Path C:\Program Files\Avast Software\Avast\Inf\x64\aswArDisk.sys
Size 20KB
SHA256 cf76975df9d6ba8572e891d94b5b6ab2ac76814aa88b46a8902b5fe5ff1cf25d
MD5 52c6ad38ceb3e9b7363f3f2ece885839
SHA1 b74a9f921d37e0788248a040aaac8e5f1dd1e8a6
SHA512 9ae59836289a9f8956a5552e8d583a1399fc64881e350bcc96104c7b01769e4888d9399e3f405cface4bd8ff7b17de5cd112a51e7eaa99535092fbab2827cc3e
SSDEEP 192:nDw153fL8fHes1VILtT9dddu12gJt55+PW7/lyKFFWQFs9MAAUYX01k9z3A9GHo:Dw15PgfH33y0JJX5OiZFRyMgYR9zMGH
TLSH
T122925AE2967858C2E8AB9C3443A9C683387CF7922B1189EF4191E5281D537C5FB3563E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

i-s-715.svg.ipending.94d44b71

Path C:\Program Files\Avast Software\Avast\gui_resources\default_av\assets\illustrations\dark\i-s-715.svg.ipending.94d44b71
Size 22KB
SHA256 d42b5020579ab72e953791f3142f340d29e6f95aa4574189c44d1347d79a22dd
MD5 d0eb120cd11d17bbbfa8a9138f5685b7
SHA1 4f5ff2c79251a6b563d97f4741acc39279c6f766
SHA512 69892d50521b0f3a9f5852985a0bc93c9cc3bfa59ea11b1ba7630727d1dd9997d292f1dc8429b5222fbde4d268265700b65b11279cdd06a592b92e89b401a274
SSDEEP 384:yquCiHimeYAyqdIvX76w5niWtDoCNDjZPdA/3a7nB8OWzTozHdo7baw+xwV3GQU3:ylCkOdI5nnXZPqa7B8QzHqJVdUhLam
TLSH
T118A2D9534A1FB6965D243EBB83DA3C4EA508F2C28E8393CCE1E71DE8D0DE759490426D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

i-s-691.svg

Path C:\Program Files\Avast Software\Avast\gui_resources\default_av\assets\illustrations\light\i-s-691.svg
Size 4KB
SHA256 c0573a7ffee0709ab904618ba5e6c17592a08c627c6527d9336eae7490d06034
MD5 f56aae4e7543b00c9523ee0e78fee372
SHA1 adb7631fb18e318da355676d9432bb2b4fc136bd
SHA512 0177330994bf62c976dc30f6c9d087cc5b20d7c22fcab5359b10fd7ef21e4e14ba7a35dd23b633c9db02ed0c352f185db24469f139d123f71e6b930a3123edb4
SSDEEP 96:XLGuTyCtYSMS6HGfmPmQWK80p+CTr/542MXpr38iKsQn68z4vZEK:SCftYi6eQWn0ZT+2+pz8mQn68z4R7
TLSH
T1889161DE33B407B9E441C2F2EF2970B9251E50FA11D2CD20C6550D18689B9AFDD676E2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

i-s-692.svg

Path C:\Program Files\Avast Software\Avast\gui_resources\default_av\assets\illustrations\light\i-s-692.svg
Size 6KB
SHA256 57b656dd5c27448279f0ba831331e5eacaa29cffe37fa118e01a4abf66094b9c
MD5 78ebb8807e0421e0fdc14e2ea44dbc10
SHA1 0bc3effcfec062a6b924df3942023dca620fe4e4
SHA512 afdf0f6ab46f785fa7f8220aba0c0f1ab45791c695757e5d7e8ebc697af5180fc0fa9d0da027de443cd5b558c0833d7a7af97ac630e264d3eb81ec435b6070ae
SSDEEP 96:FrBQmW+FJf9/vUjj5RfCm3cMhrysJdFE3k4yfJU6TgD83L6e:JBQf+LfatC8ccO2fNfqg/Z
TLSH
T19DD1A6CD3BB448ECF902D7E2DF06B179682B4AAB36C11624C5044E79384502EEE2BEC5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

i-s-695.svg

Path C:\Program Files\Avast Software\Avast\gui_resources\default_av\assets\illustrations\light\i-s-695.svg
Size 5KB
SHA256 e8cd031ba4ffaa1ebefe7b3f8862aff4dbb23dc5c3b54d840551059ce93828e0
MD5 2c7a225740d368957abbf918ad6579ae
SHA1 ba6b2e67c73e89442742fd0a5535207e753abfdd
SHA512 e0410a3e7fa2ee1ef0f502b4ca94fbf423b74ec4b1d718165a036677c1de259c6de365fe28d0251d5de3e7083cd0f87145cdfa2c7efcfebc33401bbb5b230ec3
SSDEEP 96:4PRmT5JVYzbVpOYKW8ipXsAC3w5OYKW8GsfK5NNNnktUHfysfK5NNe:ERmFUbTOYKcrCA5OYKYsfKjktU/ysfKY
TLSH
T1BAB173CEAB5847FCF89242E6DF057279310B04E91F985BE0C6A90D296960A6D9D37CC3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

i-s-696.svg

Path C:\Program Files\Avast Software\Avast\gui_resources\default_av\assets\illustrations\light\i-s-696.svg
Size 6KB
SHA256 8124133cf6403138fcb0e7c93a70399f1d8ebd28f0d193ddaf944c30d7444e50
MD5 b2b25ec72095ce7b78a048d7f3c8c50b
SHA1 fbe79b74bd70cd7f4eefdcb938e3baeda8c72fd8
SHA512 4643c8f5bc79d290073fdef075586ed9c803ee4472d338ec63dc02f59354e3d74b4f3de41d4fc9514d77d09a9f0376e752da7f1cb0c962ba7eeffd7a842eeb20
SSDEEP 96:7aCcIPIUfGA9f9aV9+uN2M56Rd9VaTQzXavbiDzldaCcI/2XrYg8Ou6d+5Y9u:7ZQUOuFCtoc6RdvakGvbiDzfZ/Ag
TLSH
T1A6D1B5CD73641AFDEA22A6D6DB09A475300E40F6098249ADC7296F783C04C1EEDA9CC7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

i-s-697.svg

Path C:\Program Files\Avast Software\Avast\gui_resources\default_av\assets\illustrations\light\i-s-697.svg
Size 7KB
SHA256 58167776fb8917e0701b4f8eaf4b0805aa6a89f661c4dfd163d619ce7c1bc435
MD5 12768fe25111bd37199bd00430e4158d
SHA1 a51473a33840d01c3f69b114f51fdd2ebd61e6c7
SHA512 c512cbd9d8931dfb28510ead0b621a359d205e981015829f5d4b46cda7b08d3ccd5f6f613350ae3f5f75641728603d1fd79e8d0c3105a5eac0683286491a607e
SSDEEP 192:EUggn9xnJi1b1yq0uMJ4n+ECA+oCBfeBfH0ICPGNjCxK:Ein9xnsb1OjJ4lHJCPGf
TLSH
T1B8E14FCE33180DBCF46192F9E70530B8312F61F76A405A60CA62193A7A525AD6E7BDC7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

i-s-698.svg

Path C:\Program Files\Avast Software\Avast\gui_resources\default_av\assets\illustrations\light\i-s-698.svg
Size 13KB
SHA256 fc9d02970ea023de1a4f4b8ef68a91773f518fbc750e99eff562e9ba15a6f43f
MD5 f1ea724409890bdc2ce5cf0dadfd2836
SHA1 a2a89ee422e19a108c2b54d368f9ae75e9b911fb
SHA512 c4395f4561937e83eb8fa57d322d30e740ba36a54cee2f6595ec94ae726be249fd2e0a0f5d1d6266fd35e70ec17fbd31dd898a9e44c848e132efb83e66c327fa
SSDEEP 384:Rq754cvzj4RsxwTJNLoEohkv7xl4XeElbsr:H2jeowTJNEAmXq
TLSH
T1C652D8CE333848BCFC4196FAEB0731B8342761E726855244C6356E39784295EAE3BCD6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

i-s-699.svg

Path C:\Program Files\Avast Software\Avast\gui_resources\default_av\assets\illustrations\light\i-s-699.svg
Size 24KB
SHA256 b11b537b2545ff65809c25f6eb90daaece1a91d80ee0bc3b73398ff18c4147e7
MD5 6037bc7f9602700fd7c596406d746203
SHA1 9ba4a516d4af9c0326cf5af3b5d7006798713d1c
SHA512 c0583da83bfed0518c8b79d8d8be0c9f068a84b0646d8d6082bdfadb9d9f07a9bb7b2d9101ee8161b30de2b840d1985e2830060af3208808321be44b1c88fc98
SSDEEP 384:ZgPWOnqgz2xELwViyiTLkwGAG4Y6GaAc6wPGhXYX+bq6JKnqwnQsI:lPiymowGAG4YFaAc6wPGhXYXgq6R
TLSH
T189B2A7DD37680ABCF85193E2EB0322B8751F10F776859724C6261E3529858ADAD3FDC1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

i-s-703.svg

Path C:\Program Files\Avast Software\Avast\gui_resources\default_av\assets\illustrations\light\i-s-703.svg
Size 13KB
SHA256 a1af7cb60039a8fe3a0c95f571ad4668c14d8c7e8461ccc40516e5c23f3e602c
MD5 975d5ea1beb29e9be48a5f78e143ba8e
SHA1 bdaa12d45e267281f7661a5cb8b10be07a6a1a3d
SHA512 8450f0dcc418bd6b8e1983b398b31b8cdd25ea3a21c36c44052b4e47762f42547dcb3c8049aae46289c12618152c99780902969340abb5b955d7261c79fa20b8
SSDEEP 384:W6dqtP6ZpVDML1BRHxLZgoeqq8cJ6a+/4krn7uhx/AtALmuWYCThmuWYCJ:6S2LbLZneqq8c014kz7uzAtAJ
TLSH
T1E052B6ED372446F8F942E3F2CB2721A5791B90FA27918BB0C3615E1924564AECD1BCC3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

i-s-705.svg

Path C:\Program Files\Avast Software\Avast\gui_resources\default_av\assets\illustrations\light\i-s-705.svg
Size 6KB
SHA256 b778d45370cea7c7edd4a2d4de558911489f0a78ab6446604b013267f73e879b
MD5 126e963c1066a111d50ec082dbbe104d
SHA1 2c9cf4e034fe538a5f41a707be64daf86621769d
SHA512 9c011c96d6f3db8da851e651fcfe60ab07a97ed6979c1adf24a7a6a36065587a21af7c54426f8334e839c7f09b11858b8ca3be2f74b3b3540717c6107f804ab7
SSDEEP 192:IbvubYGiQ/6dffuPuBw7O9DYKGO9lhXeXCnzOEhZeXCn3:H1iQ/kffuPWeT8eo
TLSH
T181E145CE735C08FCB9A19790DF05367A262A04F71B816794C6326B39245657F6D3F8C0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

i-s-706.svg

Path C:\Program Files\Avast Software\Avast\gui_resources\default_av\assets\illustrations\light\i-s-706.svg
Size 16KB
SHA256 f8b646914bb67f7f70eb4b5b84b2a7b698e01078197fb0dd8366eab65bb05273
MD5 19b792c45afcdf2a951965bb96087436
SHA1 4aa9c18a97b625adda52fcb556f24364cb427115
SHA512 b091c27f7b2cad34a8d4b19989f9f9a8fb8e908c58e623a10eee5cd8ea5426ecd532c53db1edb71dfe4d517606542dc95ce83661e329ef47d5d87830890aa18b
SSDEEP 384:ClbGncd7ks/3jYl9JL+iNNUPDMDAP6yEL3I:CNGnm7ksvjCf6bMD3jI
TLSH
T1967283CF27280DFCF85193E9EB8231BC711A55BB1D415B70C6699E38299282DDC6BCC6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

i-s-707.svg

Path C:\Program Files\Avast Software\Avast\gui_resources\default_av\assets\illustrations\light\i-s-707.svg
Size 13KB
SHA256 e10036e070fe0a28270e21c0f0c60026187364473058a4e7eba6b28754764251
MD5 e8f57553388a1ff8953f52b914b8946d
SHA1 fbf19f17009219ea4bf61594290bf7c45917770d
SHA512 7bc89b8634a12a266791424dadc46dd6f983d7d515ea95b2c128c190e4944f975fc7a317b913e46583005a47f0db9b0902a0fb594b08573aa8d830ad03b00bcc
SSDEEP 192:OCuTfESqNFZzGz+dUz+dSybCj6j3HMIzK/xsLkK3t0HoAxamyzPORQb1gZRA/:Otf2NTzGzUUzUSyB3sHEGowamybZbGo
TLSH
T14C52B3CD37794DBCFA1187E4DB8A757C781610EE2D118654C3762C3928204AEE87BECA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

i-s-708.svg

Path C:\Program Files\Avast Software\Avast\gui_resources\default_av\assets\illustrations\light\i-s-708.svg
Size 6KB
SHA256 45d2fbc31289c289752521b7dcc696201c65b76b76b9e2af066c03929ee4cf83
MD5 cbff483ab47fdaa8595487517eace230
SHA1 a28ff0cb9c9fc6834216328aeb5eabe7ada0044e
SHA512 5a2278266afd8bee7bcc4a6f9cf16350427ad1914d90ed6fc23dd838003667e225ca893ef0420123fe987e223a506ed5a35b855d58f62d56f38afaa600f09d89
SSDEEP 96:XiueGpRMi46wQmmUhhRx/ci8JttjDRVK4RVEj02vC2vJ:yueGb46h2hnPUFDRVK4RVdKCKJ
TLSH
T1F7D165CD37540DBCF52287E9EB1672BA622711E366846634CA323D752B5086E6D3FCC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

i-s-709.svg

Path C:\Program Files\Avast Software\Avast\gui_resources\default_av\assets\illustrations\light\i-s-709.svg
Size 11KB
SHA256 3a30ae8ccdaffd61edac28d46f77595ee45393281f98e1212f38b5b901ee3052
MD5 9cf6d128f26a0bf067a72b9042373d00
SHA1 bedb6774a787d4093d0aa205f3a0fd90009e6d3b
SHA512 211458f16a31fde1bddb693c98b28469c30959212a152e8cbed54968a6416f749165cf7db60f4c0db32182dbc3660645ee582f4ae0bf61afb3e611f002d97a89
SSDEEP 192:4Lk8fvpVAsFumT56AhYAfxA1D9uO+CPfcSYZpH8dvYZpH8dO:mN5T564tAf33cSYLHivYLHiO
TLSH
T15532A5CD2B600EE9FC46E2FBD711109EB50F94EFAA805B34C3596E19B046459DD2ACCB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

i-s-710.svg

Path C:\Program Files\Avast Software\Avast\gui_resources\default_av\assets\illustrations\light\i-s-710.svg
Size 7KB
SHA256 55ad2a59553bb898a3738079688ae60095e11ba4c4144353333320688163f880
MD5 640c04774d2e942ea8ac1d42bbcd2889
SHA1 aa03d47b753d104a7e5367c5b1eab47a82c0f6ee
SHA512 73b091c597d9ecba842e40f0a4fcad6aa610c5a036519e321c909692ab3d189d14a66a7be528061dc3d4f10ae7f6f7c5f0ff508d6e30165c6782216a97eeb24d
SSDEEP 192:+G7XR4T6tf+xrCjCGFpnCagU1cifUf5gLnqYpG:34T6tflbU5gLnqYpG
TLSH
T1AAF151CF23481DFCFC89C7F6EB01713C211E00F676449BA4C69A9A79A85081ED93B9C6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

i-s-711.svg

Path C:\Program Files\Avast Software\Avast\gui_resources\default_av\assets\illustrations\light\i-s-711.svg
Size 13KB
SHA256 2b3574baf4304018b266723888b893c4a83c0a6e38d67e9a7346eda9a2dd1369
MD5 d64c60ee1fe1ed7e364b8bcc77c23f75
SHA1 29eae30216d9fef3ed905b87c2af2bc1364c7ed6
SHA512 88696488403e7953e0122d87a42b7fba64abd01310a9e2791a98483fad8c4be1af49e7470217438982c97c57cd016ad40cff7543d3774ccc9246218d8ef113b5
SSDEEP 192:oM36fDFmowJzeKyFDXFp5fM+CJB36Tm9857DvN2rckgkz+wYkUYdLFi7gz:v6LFmo0eXF7FTbCa698VTNiz+tgz
TLSH
T1435291CD27280EBCFE5197F8DB1971B9651B20EB66846B70C6311E38390242E9D7BDD1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

i-s-712.svg

Path C:\Program Files\Avast Software\Avast\gui_resources\default_av\assets\illustrations\light\i-s-712.svg
Size 6KB
SHA256 b683b257cad1a301611986780da6cc5225797d50dd9cb36cb60b46273955f1bc
MD5 5b4e7c04a7819ff19692e59cd1def52d
SHA1 276c9728318f232af193945b9e600150d8b46738
SHA512 28768acad92eec0af1f9f2d1f26de886c4a71eccd94b34679dee1a8309c4eb4bb217983c470c1960868bd7a7c0051504f172eb773549c9186e6115ca6d95a0aa
SSDEEP 192:EmCTDTET6ypFBzKYIuBzG0h0zYGfgy5DT:tCTDTETnpFBzNBzYYaBDT
TLSH
T118E196CE33240AF8FC1597E6E30B60BC351722EA46804224CB166D7579D59AE5D3BFC6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

i-s-713.svg

Path C:\Program Files\Avast Software\Avast\gui_resources\default_av\assets\illustrations\light\i-s-713.svg
Size 23KB
SHA256 98f6d36d66057ec882785a6727d1ae77f4321f66d4033a8c2fa152246af5a4bd
MD5 fbc206e389bd47eee39146d114ab446e
SHA1 6032271795331cebb591bfd8e639ee9a54cebd4c
SHA512 dd12e2c121f36b6afd1eba9b6c834ab05bb92c81fc05b2cdcd51f3c84b1cbc8d3ab4b4f6c0306373b28bd7c7116c1eb384fa098cc7a69762f1a6a162e9565023
SSDEEP 384:1czKXk0CAe8ab3R5BvXhFXYQO7WrM/LMhn1wVijTo5ZDIra5BwbYLspPoSASLh:1CADQO78M6B/o5ZDIekb1PoSAS9
TLSH
T1D9B2B7EDB7285CB6F896D2E9EB02A075701641F76AC14370C269EF2E34218D95D1FEC2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

i-s-715.svg.ipending.94d44b71

Path C:\Program Files\Avast Software\Avast\gui_resources\default_av\assets\illustrations\light\i-s-715.svg.ipending.94d44b71
Size 22KB
SHA256 34d703d5589d20ea30b73122551c7aa16d8571d792121177020aac3d2923a8e1
MD5 23d69b624339729d8798a8ed9ae64223
SHA1 a8994318fe476b77e93455860cafd854db858437
SHA512 692dc7cea82a74870deead332f4e21d4d9f90fe954ab87647660ca81698706b8666f2a7c29a3df1f21005eb0c9b96f8a51fbb06f2d449fccefa78998b2726184
SSDEEP 384:BQ96aKmZHOUzFXZFMVpKiLELw5DCohz4DNLEeliFdb3DuiEqcrs5Uatb8FtWOD:BQ96xmZOU9MVp35DttOiEq2kgCOD
TLSH
T14BA2B963490F76964D643EB786DA3C8DA50CF1C28E9393C8E1EA0DECD09E7594A443BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

i-s-717.svg

Path C:\Program Files\Avast Software\Avast\gui_resources\default_av\assets\illustrations\light\i-s-717.svg
Size 7KB
SHA256 6d127dc85f8f9f7ecc176b7d3b21509528234f9b3b3fdc9ba450897d1f1d12d1
MD5 a14e0d6b6b8bf118744416e259586214
SHA1 13257e17669273488ded36cdfd08d48d80ef02b9
SHA512 37465bd9029dc366a5351dc9be98396e5398c9f67a5825202ce1c8f8052375352ea6b3320adb73d323cbdc05574186a9ef6282cb9d4fbf40f5e8b33a662c5f12
SSDEEP 192:Ua/lQ9xf97L882BjbqRoqRyc3eyf1hqDn65VN5VnK:BQ9xi82Bjrc3Tqz65P5s
TLSH
T143E1B5578A1F65EA5C183EF702927C4DE000F1C39DA3DB9DE4B64DD8A0EEE58190027E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

i-s-718.svg

Path C:\Program Files\Avast Software\Avast\gui_resources\default_av\assets\illustrations\light\i-s-718.svg
Size 11KB
SHA256 2c48b1ae0fde7d5098f9eb08ee5f9b180e3fcf16b110d03ee09abbdf28f27551
MD5 3ee5fbc2388f30e7203d7d3d8f2dd5e3
SHA1 e2c0625b9b65011531b3cccd6475313fd1129053
SHA512 038754da910095f5b905bb1e74d58113d05fb4f73d4406bed22474df074adb2a00a43d6eddc5ece2757b0b71fedc0786e066f587ad4e78fb2117f1d22d1c3fd3
SSDEEP 192:Ua/11nfKyyVk5ZqRx+BqRZMo1qQzeCUU/y57w7nJzemTh6Us0VinAitYrBWJx8/k:7fByqQeQ6CKknJ6ah6U4AMYFee/TXKz
TLSH
T17742A427160FA6E61D243EB79A95BE4E6008F1D3AD13D7A8E5F60ED8D09E30416846AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

i-s-719.svg

Path C:\Program Files\Avast Software\Avast\gui_resources\default_av\assets\illustrations\light\i-s-719.svg
Size 44KB
SHA256 18a481a77e93e5a0606c6b46e96afab8f95a77c1bce8d37f72bcbbd07bca4da2
MD5 0e1ad5d8939141cdb803490f522c9024
SHA1 9c766f762c63805ad093de0917bddc878d57cb36
SHA512 74475be97bfa4e96fe5c7f15eeeb3471d942fcf1a17a7102a11bad71bc1fceee3053c0f0181dd9d97a6741d2ddac8b9dfc27d1b7d74f2312e69dba9bb8b3d85e
SSDEEP 768:vrfQBFsHBQIZgKhZgKRTXs3+Zr1HOfxl0Fia9x/l7+p0vD2M:vrEehQYlDlRTK+ZpHOfxlEiGF1+p072M
TLSH
T1501392635B0F76A54C143EBB9AD63C8AA404F1D38E539BCCE1DB0CE8919E79D49403AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

i-s-720.svg

Path C:\Program Files\Avast Software\Avast\gui_resources\default_av\assets\illustrations\light\i-s-720.svg
Size 11KB
SHA256 d830b5e31f220fdd1686a98ca8543e231eac12e3e4bc1135b347740a601df7fb
MD5 fd955ca3dab35e4e29aed81d2b14099d
SHA1 2c139bfbcdab1b866771fb5e9119b455de48876e
SHA512 ce0309761de38cffd607b6945b55275fdff176bbc6fbe3d557f415a49ed3170fca1a2b5eba026fd4575f701599ed640d9d6ebe00b8ce61e4088209fa1e514af9
SSDEEP 192:Ua/mgw3qRMH2kT4YLiQourQhdun9x2dp8hlQmg2rQKmFo0hUGG:0tT97IhEn9xkmQ12rPww
TLSH
T16D42C5530A0F72655C643EBB9BAA7C89B40CF2D14E1393D8F5E759E8E06E71C090539E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

i-s-721.svg

Path C:\Program Files\Avast Software\Avast\gui_resources\default_av\assets\illustrations\light\i-s-721.svg
Size 20KB
SHA256 16d786b222aacf467afd3d45a9854aefcc557a2fe9dceb3e8886bd56a406c000
MD5 c57841738c9e9f9eb43b148e559dc589
SHA1 8f03c3f964889b8d493fcffa7c0b907bd6f0e7a1
SHA512 b72c050c9afdd9b1a869db2c2cab77f18e737c532b96abe2dde001dbf7b0eb9a1c7b62df3331202cea9e5e092018b5904f25f2abeb133e0060f377134e4ef1ba
SSDEEP 384:S8D7ALG46ydx27dOaVgKjxyJjQpptBcq3vOJYwYSsXe:R7Aq4vxujgWxyFQFqivOJYwYSsO
TLSH
T1F492C497060FA2964D243FBB46DA7D8DA018F2C31E13C7C8F1E69DE8E0AE71815443AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

i-s-722.svg

Path C:\Program Files\Avast Software\Avast\gui_resources\default_av\assets\illustrations\light\i-s-722.svg
Size 5KB
SHA256 4aa2ec0f1bd620a4eda564a3a4106cdf996bdd713f73e3a1a534f1cb21604c3a
MD5 68115750fd8fe09e456a2490e3c8b481
SHA1 3963ba5d1197a1828a3f027c862c37e72c9389eb
SHA512 26d95dda4cc6ac013068fc2c9c0442a6afcda42ff5c8001819c97a4832273852fc9ab9d77ce5c37ddf599c55705f34e07208d980b9aa3c03dd559957ae891b8d
SSDEEP 96:Ua/nWvwGD2qRvwuLtc+CyRgikQjdFYsTdkYNoC2GtQhSMwk1qRJYsH4G6+m4g:Ua/+iqR/c+jRaQjdFYsTKaN2N1qRusH8
TLSH
T1D2C183A7130FB1D64CA43FF70595BE4A9008E1C35D43C79AF6F29D8CA09DA08415076E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

i-s-724.svg

Path C:\Program Files\Avast Software\Avast\gui_resources\default_av\assets\illustrations\light\i-s-724.svg
Size 25KB
SHA256 3e6bd18b56ebb51c3d46c9e0e0ff662080a06e96ac9adce983c023b07eccc60d
MD5 6fdc21274050565321a7d272037edb46
SHA1 ea4567e413cd9ca47a2c68af4e31c7612a175050
SHA512 fcdd05598a69c5851636ef17a6c87f7139cfcec22cc9c255ef9f1aeab89fae3492867b74682b0d7a450c4ed6cfa1c899b2f2a2ae1ff2ae976ae2cce7748c9537
SSDEEP 384:RubZKiUFF8jxW2gvVmwlFgwipQc/E0/qLQM7hwPdB2b:Mty8jo2Im1dQ7vhw6
TLSH
T13CC2A793460F719A8C643EB7D69A7C8AA404F2D34E8397C4E5D61CF8E1EEB4949443EC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

i-s-725.svg

Path C:\Program Files\Avast Software\Avast\gui_resources\default_av\assets\illustrations\light\i-s-725.svg
Size 23KB
SHA256 20cc6f934b76a9badbdfa8e344d5b71898af0f31ded0255201590f63478c06ac
MD5 b686270b8f10e5d1cddcf9b92d61b9fe
SHA1 412483a59cd2c88b18aeed95890dd3c1705ff2a7
SHA512 e208c8d7a191630c133a48bbe53241b3ef16711cc840ae355c0fdb3e60897e909fbd3a42a011ebd9dbcfe2b93bc3b322e1d36fcfb5229fd52e3616c02b731222
SSDEEP 384:ZGVCByqb2cFw9rE8IKlcMfxHxsSgykQzVNBt2A85fMvVol:ACByqKdmSxHx5gykQVtw5fMvV6
TLSH
T1D9B2C6930A1F72950D643EBB879A7C4EA418F2D34E4387C9F2E79DE8D19A75902503AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

i-s-726.svg

Path C:\Program Files\Avast Software\Avast\gui_resources\default_av\assets\illustrations\light\i-s-726.svg
Size 15KB
SHA256 f58e499ab5a0546fa55d894effbf0a25bf41d67de90426ed101f36ffbb0c8399
MD5 a640380c7e4b7d990ca761ed1441e39c
SHA1 d377dc3f40bce262ed5dae814295d938a36a7b0c
SHA512 57e3954c8c0144098e6c49ce0f5ed78e890425c1eecb80a6f6a739e78cd8f936eb39c6250d53792229604931d86b8dd946aa61cddb4322afdae156fd0f294d30
SSDEEP 384:CVL51GVadANiyJ+H2bk9iTLq4PyD08J+1aKXDz:2LeqAskDwxLbhKzz
TLSH
T1C972B693064FA2A60C783EBB8799BC4EE514F1D36D93C789F9EA5DE8D1AE314020571C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

i-s-727.svg

Path C:\Program Files\Avast Software\Avast\gui_resources\default_av\assets\illustrations\light\i-s-727.svg
Size 28KB
SHA256 eecb7297abab51a7e7aa9641f0ce817659640b5215681d1769f3b594a81d75ea
MD5 dfd0a0ea3b2664d0ecfc04cd21059c67
SHA1 0d8e1ab7d3d76e1f2ba9da0e0c57172264148e56
SHA512 18b86ee2ba9408c28d1e96b900ae3d269b2c62e472d7d906186ffe9fbdaba691de171401ca265cf49c91e67dc3bb4cd972cabcb2412f3942f48c2e82b45f7c54
SSDEEP 384:cCjstHck5fmbYEztRPEb9isjNgBi9JvQU9ryrxa+zubsbcKOgaJ4xcq999nqHC:do6VnbEtggIjFa+Lqgdxcq9J
TLSH
T163D2A6930A0FA1954D743EFB87DABC4AA408F1D24E93D789E4EA6CECE1DDB18064135D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

i-s-728.svg

Path C:\Program Files\Avast Software\Avast\gui_resources\default_av\assets\illustrations\light\i-s-728.svg
Size 17KB
SHA256 4327179fb84fa06a97c770900ebb0af37142639c08c779426ca7d120f791c326
MD5 4430e018bbec16b2db6742639a81871b
SHA1 fac2f8aaf7ae327270ca1793c069f94b5d29342e
SHA512 a1d41823ce4fa07f211f65c4f29ffe7ef3cf0141beebf2bd4344abbfba12b50485c0b7160d1964fe288325bda4ce5bc1bc0b1b62ba3c1baf88dd1d1e530a4bd0
SSDEEP 384:srzkXEeGsLEQz8qiAg9XFT4gSC5vqKUgdoWvF:nX0sAQJiAg9FSEF
TLSH
T15E82A4670A0F76C65C683EBB97967C89B404F2C34D53D7C9F5EA58E8D0AEA9C45003AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

i-s-729.svg

Path C:\Program Files\Avast Software\Avast\gui_resources\default_av\assets\illustrations\light\i-s-729.svg
Size 14KB
SHA256 6677ecfbde4d1869b7edde7c9ad1dc5854ad0cc25d36b8811663f37bf14d54e2
MD5 87ef924ee9263bdbd4ed030a222d9ec8
SHA1 06a4ccacec958ed4fb2c4dd74482e3fd4b5e4a87
SHA512 330100a4416efdbb8d724699658bc72c5613e26869103e27e2760f6ffa10b1dff463f7f3068fa8cc87d74159e46f9a4dd5b4f540c4588195809d771192a38fbb
SSDEEP 192:Ua/K22ESoFDiImR56gtj76delR62zg2dRNSZzf47I9PQijP2Fw8dRC6ZX9Z:222EnFDiILgMdeCZZVP2Fppn
TLSH
T19B6291575A0FB2969E183FBB97DA3D8AA004F1934C5397C9F1E69CE890DE74C46003AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

i-s-730.svg

Path C:\Program Files\Avast Software\Avast\gui_resources\default_av\assets\illustrations\light\i-s-730.svg
Size 13KB
SHA256 bdddd360ff4b98168de64a863cd7f357f20b3f1fd6a80a713c800025d94f372f
MD5 bf67969e9d7653c21a4c10231ab739f0
SHA1 8a9f25d78c436724deb7f80c764d4633b00b952b
SHA512 a1a0a5ceb4983f78e934a50c71e2b4c342da2e8edd931ccd0448d85a04b0626341713ddfbdbde993817961e9fcb3fae80e35b8f2a495e5c48e1dc3cba251cb77
SSDEEP 192:Ua/tuNkewqRrjtr+yAPR3zTaqRS/2Ec9RRdqR6bWxhqRpx3rG1EBZd2UBEqR/:gkenrJAhT82BLhrGEBGUj
TLSH
T1CA52A513090FA2650C643FFB9B96BC896019F1D38DA3C79CF4F6ADE491AAF88055176C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

i-s-731.svg

Path C:\Program Files\Avast Software\Avast\gui_resources\default_av\assets\illustrations\light\i-s-731.svg
Size 14KB
SHA256 b6578e8118a2396fb461214f4c7fc16f2b4b4e05a810ec06ec60dd73092f8803
MD5 023ddc524d24a165d982c266e50d0808
SHA1 80c8f1a50d8787fc93747770d796a665287a6ccf
SHA512 deec14ecdc23f76530c26e60947f6bb0e7083bc23d05c8eca019d49ebc2f4aa568623e4c4bb3f22cb74086b674d81de7d74e83432e3e651f59db84a5614f8a65
SSDEEP 192:Ua/hA1GIIHKUTrr9ugoyzBrFY7KgRPVAvi5QRmDRhqDbRYJRrhP1AukgSz455Oy0:tA12x1VrF2KgrEixyDlQVB143
TLSH
T17C62D857090F73951C283FB762AB3D8AA409F1D34D5383D8F5F65DE8D1A9B090A942EC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

i-s-732.svg

Path C:\Program Files\Avast Software\Avast\gui_resources\default_av\assets\illustrations\light\i-s-732.svg
Size 22KB
SHA256 f3951c364ced2d2ec46c177fda6b760601f61a3bbe25a96ae99adbc61e152d59
MD5 62c68dbc7481ffc660c757f6f57c7e66
SHA1 e2df73175ae1db3a0bebebfe68f31314991b0174
SHA512 c01ac2345b60a8d570c92923b46722f31d08678ce9a987ead834a36080c6955d16574f6eaa35bca50660a97e26f4b6ba7577343cf6e5ba995c7c1f662184f2b2
SSDEEP 384:cCBCs0Y8QW0WB35M2PEziHNDCHDffHDf1ptIaCg563kkEp/FizT1oqlmImRH:dOUWN35M8FtDCjnj1IaCg56Sp61fDk
TLSH
T139A2C5634A0FA2964CA83FFB57EB7C89A018E1935D13E7D4F5E66DF8D1AD248064035C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

i-s-733.svg

Path C:\Program Files\Avast Software\Avast\gui_resources\default_av\assets\illustrations\light\i-s-733.svg
Size 15KB
SHA256 a66ebf7ac6e789ad95ef7f974b46a2b463a9747ce30bba50b382ccc34275d0a8
MD5 c9db9942cddfb1464cb4bea0131e7a73
SHA1 1eddfb4ec8a7d8046e14fab284cd3971293254f3
SHA512 6fea59bdaf6edc29c5a65c8041527052a5f68f72e6ed341b9e04d041928211ab320a9278b3ce72ef20eb0d0e9bb7ab933dc7a004b6cf374f61c922570ebf422f
SSDEEP 192:Ua/cXqRrqRlqRb/amJt98mUTsIAP7/ZAqFFSfq/qhqve/NwFjkRv5Sbc5KazhSPX:FnUoIAP7/ZBReVwKJ5Slace3rO7l
TLSH
T16262A367090B739A4DB83FB78B9DBD8AA014F0E35D53CB99E0EA6DD8E15E744064036C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

i-s-734.svg

Path C:\Program Files\Avast Software\Avast\gui_resources\default_av\assets\illustrations\light\i-s-734.svg
Size 12KB
SHA256 be930770c4dc77341d286fc3a3e8d5c4bb87d8466634134208d96030f2feca9b
MD5 5534640e42b0ad47c38d41b45ed34df9
SHA1 6df0bc2aab2094b6a7651c153a748384c8539945
SHA512 b8ff9db0903ba6b478f3778b24b5fccfabdf0e546ee4aed1762efb13741b73c0292de2eacd2383a94073c653041984521c25f0d0b3790f53633044c6ff563d09
SSDEEP 192:Ua/L56cLlHYckmqNqJ3ztqR0UP2yvHv+qkfWiqRHVST6S6llOTtJgDKuu:ImwO9UP2kZk4cTz6y3Eu
TLSH
T1D342C6974E0F62925D283DB74BAA3C4CA119F1D35C93C3C8F5E66CE8E19E70886413AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

i-s-735.svg

Path C:\Program Files\Avast Software\Avast\gui_resources\default_av\assets\illustrations\light\i-s-735.svg
Size 17KB
SHA256 74e91467a8ecd2adc1e5fce3609b3d4f88d16ee66bbf651c91afda4da0eab4ec
MD5 79928e63ec89ca5cfd94fcd252cc2a80
SHA1 2095fad2a5e65d83705fa23724cc2cafa5973f7c
SHA512 41c205598cfa7ec6418132a08d9610cf02e982079b2431b72b59449fc4ae84e99cfd66dd6e1f022a05d19004137f43d6947d6d4f76ced7508ee219ff3112fdf3
SSDEEP 384:LwQnI2gvVwZCg8IxdE5WJd0ALT7XzvyQXuLTXhWJEu:LwqYKZCg8MkuTrzvyQ+Ty
TLSH
T1AC72A6934A0F72945D543F7B8ACB3D4EA404F1D38E83C788E1E66DE8E1AEB5845413AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

i-s-736.svg

Path C:\Program Files\Avast Software\Avast\gui_resources\default_av\assets\illustrations\light\i-s-736.svg
Size 19KB
SHA256 201558385d5db6db003e92f23b2095383f33b790d2537b452d48886d28b6a5f9
MD5 fe9b1c1b1c4e77467daf5b1d43b6273e
SHA1 23d92c46f9238852650d17ba26d011b535925278
SHA512 ceaa8c7804b276e1c33e852ba745d0c6396ea724b15fb2471f15c60f4cbe3aad7bcbbf78efb66ba05ef0449d102988ef72e11f75db49f1a0165d964314264bb9
SSDEEP 384:G0iDmM5J4vhFtDYdrLeG0qeRMwT6YqGKBXyETs:LMmhp/6eG00aIXyEw
TLSH
T14792D8574A0F72A99C643EFB86D67D4EA504F1928E8397C8E0E12DECD0DEB4946443EC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

i-s-737.svg

Path C:\Program Files\Avast Software\Avast\gui_resources\default_av\assets\illustrations\light\i-s-737.svg
Size 24KB
SHA256 c79aa83ec8155385b8137af850ed1ab568d9326c4135b26ed7b0202ba3a2ea2f
MD5 70e8a1cc882ba07c3f95c888174a4d22
SHA1 c1142db83cfb12f612e3a69684b355bd3d51bebf
SHA512 b26d8b8130a15e73d7a11ad0bbe8a9344fc13cdca67ac8a5555515e0be60145d612afe263d65162faf81e2553c684a71825b714158d441883509407cd325d0e2
SSDEEP 384:nLOQtSfRCjiRqFNmGVVVPQB0sF6rCkqpTwBEkfxPjbnS:nLOP0My5gz6CsWefS
TLSH
T1B2B2D563060FA2960DB43EBB4389BC8EE418E1D75D43DB88F5F65CD8E2AE748064075D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

i-s-738.svg

Path C:\Program Files\Avast Software\Avast\gui_resources\default_av\assets\illustrations\light\i-s-738.svg
Size 42KB
SHA256 aaae2019c40e40c7f843d1a5be32fcf49a5246d91eedf0fc9ac6959d715574a9
MD5 f78a53e13b208dfd3c6455bacbb657ae
SHA1 6dbacd6bc0e9815848413a2795a9dc1b8b370274
SHA512 d7cfaf8bffd65c08b6211654faea16ea502ab0781b0416b0ff4363e012281a3c69642b2f29ab4d2257a4d0a1ebce0464bd15c680d05328039a487b0d38eca81f
SSDEEP 768:rgdznGMDI3MYAVS25RtUsB6DQKDBs1JbH/:kBTRtB6DQOBsDD
TLSH
T1E713C3530A0FB2A55D583FBB9B967C4AA118F1C35E5397C8E4F66DE890EDB0906403EC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

i-sparkles-negative.svg

Path C:\Program Files\Avast Software\Avast\gui_resources\default_av\assets\illustrations\light\i-sparkles-negative.svg
Size 1KB
SHA256 0a3692290d86e83950b5c282f1bbd092e8e6d7672b8c7835ac9556d05e01e632
MD5 8da36a5aa00da275fa879f64e162afad
SHA1 b6fad3af6f05d082fc51435732ce87b63d080746
SHA512 2d2fc67a11b034f591988fd30870109b5595e946bddd60a631c634bf6ce90d72b0b56951bd6fec1efeb6bb7b2a79042fa0afbde6a95197f5759486d137fef11a
TLSH
T15431B90E2304EBF164D3D271EB3AB4BB382D14B48899338CB569456436691ECDD56DD3
MD5 SHA1 SHA512 TLSH

Submit Download

i-sparkles-positive.svg

Path C:\Program Files\Avast Software\Avast\gui_resources\default_av\assets\illustrations\light\i-sparkles-positive.svg
Size 1KB
SHA256 77080ab65d2a45cae51c9ac82bdaaa46b491d2037de9b0d909a073c30b170149
MD5 bfc7d24155881e57d0c8eb47c09e6365
SHA1 62877dac1a946c0d9d264b9908aee0bf19faa26e
SHA512 843dde371f7eebb91150e8f96a99090af40520597c0a26f7f8de0dfa1ca725120fb259a73d57430555ee6cc5bf07f02e0fb0c6412a4a1ca53774786a2c9fa07a
TLSH
T19D31000E3B60D7F07DA6D370BB69B426742908E8948C22586B621999B5548FCCF679C3
MD5 SHA1 SHA512 TLSH

Submit Download

i-toaster-critical.svg

Path C:\Program Files\Avast Software\Avast\gui_resources\default_av\assets\illustrations\light\i-toaster-critical.svg
Size 8KB
SHA256 20ed22771f76e0364b48411c5ae877c427fa0f874092424506c722fb6a34de86
MD5 126c796f3beb1ec88e42dd4d6d0f9368
SHA1 510f75ad45eb04e0b10ab0e247456a399d56b2cc
SHA512 25866990ea5fd8399789494afc0b8026fefe16041dcf7b131c93708d5e13db77dd1b356864b151913cc92196ca9c7fd3df2c6d12a16d23367886c20fca2f7c6e
SSDEEP 96:mkrsVcXXCKfiN99OugBpLs4NLAX3viPjGtxfx+muIKLK2jGf0LzNuGEaNgobdgus:XIcaNupY6k/6blIKNGYSoihXvemwQ6o
TLSH
T19612B3CC67A287EDE8C1E1F5FF10049D358F98FAB9890A5CCBAD4D5925168ACDD02C93
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

i-toaster-ok.svg

Path C:\Program Files\Avast Software\Avast\gui_resources\default_av\assets\illustrations\light\i-toaster-ok.svg
Size 1KB
SHA256 a1a4147048aeb0b69a9b2c6b27e6aebef48d10dfa189c2ae93b94e42bf1b0e05
MD5 43276baaf228f60d424115f18fdc9ac1
SHA1 dd7cadeea0d4f4381acb869f8bf0dc09e9d49f8e
SHA512 8ebdeae736d9af479a71516bb4533db3f44917facd490678d5e4db2dfc4ee7a5ba1d108c11cc0e01b53caf47fd831a01c1dfa8c50b8549ddc15a6d5ceecca188
TLSH
T1B421C90E1750E3E0AD01C672AF47F125508E20CEB85AB25CE5364B7679380BB499A4C3
MD5 SHA1 SHA512 TLSH

Submit Download

locale-cs.json.ipending.94d44b71

Path C:\Program Files\Avast Software\Avast\gui_resources\default_av\locale-cs.json.ipending.94d44b71
Size 621KB
SHA256 ce58ab8f803728144f12662f91f22c0879d0316458de04ef69821dd211ff61ac
MD5 b9bbf6d77bd013ea6323d9ad3760c638
SHA1 5b9558a455804fb91f9ccd72cd7d30a7e851a620
SHA512 a19927044dfd8deaef4d104b07f3ff7c1e97fa6daa4994cef3e55b6ccbc99d1045637c680683ddac7f843a7d69beb44a34fbc4bdc6249996de2d13b4432b55a3
SSDEEP 12288:ytOLVc40KsnBor4FIhxIosP6JLZg8ZE+mw4zd8X8O7BxO8Dz:ZLVc40KsnE4FIfIsJLZg8ZE+mw4zd7vi
TLSH
T1F6D42B0FB572BC7B1FC502D93DED1740B8AD020415AA54FC9EDFC46422BDA9BA5FA818
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

scans.js

Path C:\Program Files\Avast Software\Avast\gui_resources\default_av\scans.js
Size 275KB
SHA256 d323dfe924f7b1522c3311c99f20b1e422443cfd21808264b3539285276f7d2b
MD5 f3c50b73e785a1101479afe4645c4f94
SHA1 8bd0a057f969b9b80f66b1cd954ebee6869d07a0
SHA512 ff450002b00316f3d45c73fb0149a37670e52e3b5f278584815c6cae1d4675dfbeb8dae06d007e9ce754ef113911c15a962e40ee659a242bc015b7b179108778
SSDEEP 3072:hJeQ8ZfbYWXBJllpO0OA/V/isNdLHEMSfU8soDbPX/V7dvaZ99:hJSft7tLHEMgU1oDbPX/V7dm99
TLSH
T172542A42B014B2B56763589C85DB9143E3390498D84AD044D668EDAC7EFDCCFB373EAA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-environment-l1-1-0.dll

Path C:\Program Files\Avast Software\Avast\x86\local.crt\api-ms-win-crt-environment-l1-1-0.dll
Size 13KB
SHA256 f31b1e8d94d0625b0dc1cfce1edc368069e478cea63d21a16d38d46679a53e9f
MD5 2f562017dcb02a72768e9e21829b5920
SHA1 b86988730633ce31ad1014c53637b89771782d13
SHA512 1eb37470b15cbebfbba9fb4510f1e2cf1f472ba800df20ac02f66bc075041589bd60c922a599b5b0225ccdf5f16cfc6a9f8e09365dfdd83cb69373dd6a469b2c
SSDEEP 192:wRW2hWyyW1c31DSdVWQ4OWhxeo+DF9X01k9z3AE/K4I:wRW2hWh3IdKIp9R9zH/KX
TLSH
T170522B821BB85143F9DB6F7082F8EB933D3967C76940917A06A9F55C3893780FB2162D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RobotoCondensed-Bold.ttf

Path C:\ProgramData\Avast Software\Avast\Fonts\RobotoCondensed-Bold.ttf
Size 138KB
SHA256 28a1d37668b4cf94fff5256e9639f175baf4dd654ec84ba910485d38beefa6bd
MD5 52f9b35f9f7cfa1be2644bcbac61a983
SHA1 c348d9f1b95e103ac2d14d56682867368f385b1a
SHA512 de48b5e6751134c7fcaa8ee4c734e0f458e86fc59249ef19d9c45b7098eb7273c4119d5944332465080154a3d9c8acdb1aa84ccce011bbe5c7f32251acde6cad
SSDEEP 3072:mbSquVx4PRILqO/jXTGwiliI5Zju5TzLJEzEXGpNj/brFcaiqprTQgwYwO3QDqqs:mbT9IF7PIrUYohYQRG+tbM
TLSH
T1D1D3E707E202A658C993B6703D3CE7BE8D75E82D7C4AA40B7198DF21958E8419C75FF8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RobotoCondensed-Regular.ttf

Path C:\ProgramData\Avast Software\Avast\Fonts\RobotoCondensed-Regular.ttf
Size 137KB
SHA256 4a7c36df4318fee50a8159c3a0ebde4572abab65447ae4a651c2fe87212302b5
MD5 0e1821fdf320fddc0e1c2b272c422068
SHA1 c722696501a8663d64208d754e4db8165d3936f6
SHA512 948adb943bfae5807e0e88a23364d8e706a8bdfe8c4d00592a95cdd34081a64a8d44c4ba6e33a65874ac8a7117927c3de2b995fdc57c2746aedd7161df727293
SSDEEP 3072:LXd+rtH61MsgXbu4vDVjOvG0uvsb4hoNo6bdkuqYfh3h4/o+K5/j0VNXFYG2ZtCh:LXd+Bygrhvse0uZWJjNpG+tbM
TLSH
T1F8D3D643D2426669C683B6747D3CA3BE4D35E82D3D4AA41B70D8DF2985CB801AC65FF8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

proximanova-light.otf

Path C:\ProgramData\Avast Software\Avast\Fonts\proximanova-light.otf
Size 107KB
SHA256 1e90e49b182c8b5876ee6805ff3cd2e39a23fda79df33d2e8b57020d6f208334
MD5 b7913e898d3cddf10a49ad0dc3f615b8
SHA1 560917b699fe57632d13cf8ef2778f3833748343
SHA512 baee3e6114fb8b4f946cd85fac7bae19e1cc681820c6c5824092ad955e70ce7253ae471aaa28ad97412e67d4a9c741137bf3ff27233bd94b6d3a654f72adee16
SSDEEP 3072:ku0xdFTu4d506FUgH4hO4EPszuokgMPQfyKQkPXWWRS:ku0xdFTu4dOLhO4EPsJkFQfxhXWWRS
TLSH
T102B3BE317B0BAB0CDA36DC31EB7BD3316368FD65690EFB4BD546A2801DC81684EE1985
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

proximanova-regular.otf

Path C:\ProgramData\Avast Software\Avast\Fonts\proximanova-regular.otf
Size 107KB
SHA256 31daba103891abf8b4d0537661117a8689c9ee5d91ee264f74e64ef1bb37a61c
MD5 9372d1cc640df70d36b24914adf57110
SHA1 374508b24ea24906f25655de27e854e69cda2935
SHA512 8100e80e7c7a6283a348fb0c2f9339600dca96f8db21e49c3c875ca6c0129d87452ca0d678904e40f65404f5c78b37a82718def85efc085d5f2c9d0ff94182d4
SSDEEP 3072:1B00x3/lCcVKNttpkRdrZs+ElPxBHMbUSiuj+UKQkPXWWm:f00xvlC/9MVspPxegkYhXWWm
TLSH
T160B3AE29370BAF0CF916CD356AB7DB783360B8B9892BF75FF64291C04D912684DD0686
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Blocked.htm

Path C:\ProgramData\Avast Software\Avast\HtmlData\Blocked.htm
Size 1KB
SHA256 179fcd4c70b0e5958c56387c7849e4b49e695a284b75471a15a8e6c8637eeefd
MD5 94aa8569ec9b33e05f3088b136dda05a
SHA1 2e7779731351517e2e6df18b313e5df28079160b
SHA512 52cc30da7dc6e6ae7266bf171e4e9c9e16c0d8bf72abda793a0f03e2889eda6171044ed65960fd2c40251b135015a0fa62132c76cf16065ef6fa47476b6d8ff2
TLSH
T17D4115AAFE4C9D2BD733D472E3726E90AD441011A55E82D060793F1BDC86055AF93788
MD5 SHA1 SHA512 TLSH

Submit Download

image001.png

Path C:\ProgramData\Avast Software\Avast\HtmlData\image001.png
Size 11KB
SHA256 d1e88cc6880e3667b06b2d006f5fb8516f28467dd1153453c1bf954571fc4f00
MD5 c69e876c8bc4f3bca56ba333eaae7a71
SHA1 d00ac516dadf10b6a9fbaa8b6fd7f7800511d36e
SHA512 3453ec35e83ed63f2e88326c1a3f4ee23a6b979d272243131c37bb06ce8d2467585e311a3c01198f3384d852ee9fe525434f8a6eb58b7698c0c8c56b7a8f3b40
SSDEEP 192:YSRJLEI+qTCCRWajW1T2QQlRjPoIvORMbtoEEUufWFNWpMzyLtJlBQIrEHxFEU8x:Y4LEnMnxS1T2DfDsOtfueiqzyLZK2EHc
TLSH
T13242CF49B594C02EFCA2AE4324652501F1F761B2D00B4F03990F5579A7F3AE21FE9B57
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

config.xml.ipending.94d44b71

Path C:\ProgramData\Avast Software\Avast\fw\config.xml.ipending.94d44b71
Size 2KB
SHA256 be79affc10f1d93f9ae438c6320feed7846bcb0950cd32e8a564eeb59203b6ea
MD5 60424032333d4723d7f4ff7543a7aa76
SHA1 1fa9fa26b21439adcd5258727f9cd0b954d0f5a1
SHA512 859a800dfd2de9f0bc0f5e81a8f0ab80eefcb56fe0a9e634ab8cd13881ffd26e13448529d9a0d096a61d5f1e410eead06dac75a91b09faf7f692d8884a41456c
TLSH
T121413B0387F4154CB6B3A648BF7111945BA3BC826E5CCB9D12F21C0C90E6F94789ABE7
MD5 SHA1 SHA512 TLSH

Submit Download

dndrules.dat

Path C:\ProgramData\Avast Software\Avast\gaming_mode\dndrules.dat
Size 1KB
SHA256 9a41d1fd21a0856918071852fc2d6ccb319e824932b144debc134312af1f693d
MD5 95279a7955d2f849c9d0053a9c07d779
SHA1 654c45786f5fe93944f50478a9141726f5ca4ffc
SHA512 ca1a342397738fe8004d0a2cc523bc2205459e66ac8dd4ec7c2ab3371c198efda33b104f93e3605d1054946015a39726ac54ab07527c1a98ebf4af9064c96088
TLSH
T1E731F96B626108680F3578050BB66E5804EF5D5ABC05D003066FE9F8B6E8C5A6B17EE0
MD5 SHA1 SHA512 TLSH

Submit Download

icarus.log

Path C:\ProgramData\Avast Software\Icarus\Logs\icarus.log
Size 81KB
SHA256 d058577501ccca811604e28fd089ca7dd88dcf412e4ed2558125302af04bdc94
MD5 04791393c40fc5bd283a3d7088782b23
SHA1 2f9fcc955f63e67100b44e3a6065b013bc337a28
SHA512 7a7ec40a7476ea7ed78d26982d010950548ca910b906852c240097a3c9a2a9fc48e23e0153da22485594648267444b35bafee5ca7823c3dbc38a14008d4317b1
SSDEEP 1536:TC/wuKQR4dGFRcagksYwoD5RY2FB5O7OZRfsxrPwYiODTA0qBC81nJ3aQXw:TC/pKQR4VagksYwoD5RY2FB5O2Orfich
TLSH
T145836243892F78B303632E09F7986FD89F19372B2B4D54107B5C2A082776F1969DEA5C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icarus.log

Path C:\ProgramData\Avast Software\Icarus\Logs\icarus.log
Size 81KB
SHA256 fa9a17fa6b93d27dab20dbd24a4df486a20cf70acfd3446f1acd72b6e591bdb6
MD5 2f09842ef6e289ba5699bfc574f1d2e2
SHA1 9645945f0a6bfa4c8d754da380bf7396d4d36c7e
SHA512 407292486afceb25a9751bea2f0ddc4fc931100d2dcf5ea8460ac5238a7f943828743da224f4489b22b6439aa75df928dd53d9461e216396c8309092675a91a7
SSDEEP 1536:TC/wuKQR4dGFRcagksYwoD5RY2FB5O7OZRfsxrPwYiODTA0qBC81nJ3aQXW:TC/pKQR4VagksYwoD5RY2FB5O2Orficr
TLSH
T1E9836243892F78B303632E09F7986FD89F19372B2B4D54107B5C2A082776F1969DEA5C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icarus.log

Path C:\ProgramData\Avast Software\Icarus\Logs\icarus.log
Size 86KB
SHA256 8c99684479094e7c57a32c983e1f1b9661a5514a0bf718dc1e9c8aec148b0423
MD5 25464c9500e5c5078e9fe3f886f9203f
SHA1 ad6d87e2c2a31f56b1c003061b9b9239e5cc781a
SHA512 08a56124cb3135d66fed7b4d621da39ff301414437f4d0f89a7cbb694f415f93f78d40c9bc1e84f73ca4fbbdb9b52f303f8133b52c63339c6aef491f24c709dc
SSDEEP 1536:TC/wuKQR4dGFRcagksYwoD5RY2FB5O7OZRfsxrPwYiODTA0qBC81nJ3aQX2DW28j:TC/pKQR4VagksYwoD5RY2FB5O2OrficY
TLSH
T186835143892F78B703232E49F7982FD89F29372B1B4D58107B5C2E082775F19699EA5C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sfx.log

Path C:\ProgramData\Avast Software\Icarus\Logs\sfx.log
Size 13KB
SHA256 d45ce15146c7d10b6def61a150e183dfd5aae2366c3150c5fc65f8ede99b50f4
MD5 251b0cd400d2263579453ff2a198b425
SHA1 25d15ec5f8bb91f769faa9d154986844811ffb48
SHA512 a9364079237fa14b4d7d30862c9faaf82c1d2676b81088757af027884a2d8536775c4edaa2e1243f5e24107dbec64284155bde03c9d84de9129c46c319a55765
SSDEEP 192:jK8CN6vG1EhJbTTqd1EdqgsBNZmgjEtaVlwohZsg6Fd1EsF:j2KGmhJbTTqdmdqgsBfmyEtaV9sdmsF
TLSH
T1E4527403493F74F302163B5AF195BF9C2F59361B6F8D8060790E351C373AE2EA99961A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icarus.ini

Path C:\ProgramData\Avast Software\Icarus\avast-av\icarus.ini
Size 248B
SHA256 c4a4a5b13c62da69abbd93f1460b8992b997e00e8e616852d559bdafbc153acd
MD5 3d8648be6f767304d5ad68fc9952ebfa
SHA1 76c563ffc2cc2c4abce68e39463781b1fa3501b5
SHA512 f91b6fb1939732aba319517801cb0bdb0fdcd439ec3042650dfd9c4f7adf695f00761a531c2a74b66797c527277dfeeaf10d097e7e3d098a1ff184f24bbaa4e6
TLSH
T1C4D02E25E1B083D9203A9BB0033004F03FA5368BAE6601C133CAB73832C7B061309228
MD5 SHA1 SHA512 TLSH

Submit Download

temporary_proxy.ini

Path C:\ProgramData\Avast Software\Icarus\settings\temporary_proxy.ini
Size 278B
SHA256 8e511706c04e382e58153c274138e99a298e87e29e12548d39b7f3d3442878b9
MD5 b8853a8e6228549b5d3ad97752d173d4
SHA1 cd471a5d57e0946c19a694a6be8a3959cef30341
SHA512 cf4edd9ee238c1e621501f91a4c3338ec0cb07ca2c2df00aa7c44d3db7c4f3798bc4137c11c15379d0c71fab1c5c61f19be32ba3fc39dc242313d0947461a787
TLSH
T194D05E5307FA0008F1B74A58EBB898F2573378152F4DC02CC0C0121F84F2805892BBE3
MD5 SHA1 SHA512 TLSH

Submit Download

browser_assistant.exe

Path C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
Size 2.8MB
SHA256 77a9b5f732d405d5a8ce54dc6967079e6e125b5f6982aa947aaf68a7730d8f90
MD5 1a60aaefb3b372c69b4af3aa3d2f96f7
SHA1 56b92fa7f811f7b0903367802bb612a85354bfb7
SHA512 9bb2a10ca07f4c5dc2fed3b2675fe9357751e24203b1ca281fb0bf7c87c287ccb83e55e3c1a079d4a06044dd84d09a4581296990f4fa135fdb8b7a873b291bc4
SSDEEP 49152:P6666666666666666666666666666666x666666666666666fwwwwwwwwwwwwww4:P666666666666666666666666666666m
TLSH
T1CBD54DA157202178DC2EECB1282C7DAB98196167E32187DB9DEC1CB157709C2373EF5A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

opera.exe

Path C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
Size 2.6MB
SHA256 f4aebefff688b29b5cbffdd39856a4117338fa4995831f6e85a4374dfa3eb84a
MD5 a975e5a8fdad24a7576fa65c1a10ff9d
SHA1 e033e1821cf12d6f4726f60449443211506ddb95
SHA512 af1cb0cae3cdf51a67fba29c69f2892b0f2d3ed479758c4298a7c40d91281547ca73cd8cef3bf082f60d0dfe48be0050397038c1cda637b5d35ad6eff8c9acaa
SSDEEP 49152:SN3mz61b1ZGfZRj5yw0nuSKcxCOK2fZTAZBwClDjWD+C66ZyjfVK:YVR4Z/9ndOK5vwlv4NK
TLSH
T102C57C13F2D910D8C01DD1798B9A9632FA72BC450B3576DF0A90B6522F7AEE46B3D324
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Opera Browser.lnk

Path C:\Users\Admin\AppData\Local\Temp\.opera\268a8efd-f812-40ea-a96d-f99878c89e0d Opera Installer Temp\opera_package_202605111331071\Opera Browser.lnk
Size 1KB
SHA256 3a118682144eed32028cdf7505ff4f0791224b0cd99ee7c6471d366b80b26686
MD5 d1fd8bced5097d0e38b6419ada74ab54
SHA1 6c78f1081dd2e3bac4abffa00338a0003ae19c44
SHA512 5ed7b9bfbdd9817a237ac8b8691c64f85156d765b60b6bce7a6788d1e2adb070fb08acc7b877a4b1a0f2f5c5c987acafb9ab20e7a3a01ddedc13f82b6aabbce4
TLSH
T1F221F145BFD93B22F277857440F71A2A92B6F850FB0B5F0C0110978919751459558FBF
MD5 SHA1 SHA512 TLSH

Submit Download

additional_file0.tmp

Path C:\Users\Admin\AppData\Local\Temp\.opera\268a8efd-f812-40ea-a96d-f99878c89e0d Opera Installer Temp\opera_package_202605111331071\additional_file0.tmp
Size 2.8MB
SHA256 71a4cc628fd1716fd994689c4808d2ebbc00e8bd2ecb7600b9921baa8916c752
MD5 3b028b1188ac321e66add16f8ebadbec
SHA1 086bcb2b1c0d300be15c1390841aadadcec4eac7
SHA512 17c390e0df8e29ff9ad43e581db298ada2d8378fbb890dc5f4b17df8fbe21134f99ab203ea4752a419215d289c128a1d8bc14721bde80042e5bb4c3901dffb72
SSDEEP 49152:+kinoIZOrzV7AlDfo7eT/uAtH00raHx774jx4aGhcr0glyGIGE1HVyVNW272DS/Z:+kiocQzV89Tmeradk2ha0gdIT11yVQ2w
TLSH
T167D5233275A48C34D62312321CE0FAEDA5BE72701E6347DB73A42B1F9EB01979A1D562
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

assistant_installer.exe

Path C:\Users\Admin\AppData\Local\Temp\.opera\268a8efd-f812-40ea-a96d-f99878c89e0d Opera Installer Temp\opera_package_202605111331071\assistant\assistant_installer.exe
Size 2.4MB
SHA256 63187b388e01fb05d8c29957e1c566324af67aff2f7a2e3da9132248c79375a8
MD5 b0408fa2a406f483e42c3ac102d35e9b
SHA1 fbaca900ad54abc65ec2cb34d63727c87132d16b
SHA512 2e8b9af626fff68ecd0204d6a3151b4518749143ec78a2f8f99f959399d1c8ea59987f99c38c9e48fe38b518fd8c91381356daf3f17944fa3432337b882e5401
SSDEEP 49152:wJv8lBbu91xwyiZSwRDzWEibQojjHLQDpizF:wR8lBbu91xwyiZSwRWEKQWjHLOpc
TLSH
T10AC5AE12A86094B5D8563132321DEB3E9A30BE1657354DDBDB90BCC1BBB86E2353734B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dbgcore.DLL

Path C:\Users\Admin\AppData\Local\Temp\.opera\268a8efd-f812-40ea-a96d-f99878c89e0d Opera Installer Temp\opera_package_202605111331071\assistant\dbgcore.DLL
Size 222KB
SHA256 7bb46348c2ec97ef9ee7a8e0ae28c8e069513e8acaee2689134a2d906b5fdecf
MD5 b26ebc5cde9b1726ee9f9534dd6107d0
SHA1 de00af3ec4de63a158bcd50c6e95b046669d3353
SHA512 2e01c65b58369c1f5f4081cf377c3fedd87ae5fca63cfbc44dd7859a1e10a849d1bbdbb592349d793166f577dbd954cd8660f625dcbc9adc4d936d6a44f062bf
SSDEEP 6144:FASh0NdOEQzFh0ekr6nzwBaQGdppLIg2dFl96Fl:4MHZn1n+P96Fl
TLSH
T14C247C2269401533DCEF12F062AF363A96AEDD90239490C359A05BDDD6D4BC12E3D6EF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dbghelp.dll

Path C:\Users\Admin\AppData\Local\Temp\.opera\268a8efd-f812-40ea-a96d-f99878c89e0d Opera Installer Temp\opera_package_202605111331071\assistant\dbghelp.dll
Size 1.8MB
SHA256 6fd2b4bfc275ed306ce09008ff8437818b3373e69e4b3db3cbb79be91b2b9308
MD5 021b11c0fc1a09e49a2046ef07d1747a
SHA1 4b955c1e7150db4f07528929fc529fde9738a2b3
SHA512 6ca94fdf2b92928859152aa23f31df46944eeeac7988f6bb5d647341843d8d2aa91c2c810d17c8b58a03c99e4ca7d7e1ae6b6c2d9ea5029616d870b89794d6c8
SSDEEP 49152:xEDlXSohR86M5NKBlv/2yOFVnzM9F0KM7:uFhR86MHyl0fb
TLSH
T128856B20E784813CE4EA1177E67C7A7D85ADE524073440CBAAC45BA978297D32F387DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

installer_prefs_include.json

Path C:\Users\Admin\AppData\Local\Temp\.opera\268a8efd-f812-40ea-a96d-f99878c89e0d Opera Installer Temp\opera_package_202605111331071\installer_prefs_include.json
Size 258B
SHA256 6f974f53d3dfa6d21d0ab3dcb825066678aa7f68cd5bdba26dd78a49d9b7bfcc
MD5 7844a6100708da6ea4fa6eef3d38072f
SHA1 95737c41e7f74e8d5700dc345f895ccd3319a147
SHA512 618052e695bc68da6fec33ecb5b47e2d52a3cb58e2f7c6adf4c663528047c58cf3cc6abf856f01f40b5591da75c2473221e44c51eb8a2c10c9309a9d624389c7
TLSH
T19ED0955EC15EE4A70770C74F36A5334DC7435B1195A1B49FE7C24115C4B845269C7D39
MD5 SHA1 SHA512 TLSH

Submit Download

installer_prefs_include.json

Path C:\Users\Admin\AppData\Local\Temp\.opera\268a8efd-f812-40ea-a96d-f99878c89e0d Opera Installer Temp\opera_package_202605111331071\installer_prefs_include.json
Size 1KB
SHA256 eff6ad7156ba9fa73b6a23422cc5d7b849ec531593e6e78cac52921782bd4135
MD5 e6e8f77798930021aee1a4829e04a37d
SHA1 c046e1a9809c07becb87ab30c7a9de5e00d30747
SHA512 63aa60f958d17e0e76505c032d5b0350828c4d89488b7dc2d16a447077867ef1a1227d4e519cedb970bf8ec08ef2ad2ecf95d0b22a1bf4048b84adc9734b8644
TLSH
T1FA21C6948889F4235732D21FCAA71F89AE035903D45834CA96C70C2E58EE8520E82519
MD5 SHA1 SHA512 TLSH

Submit Download

installer_prefs_include.json.backup

Path C:\Users\Admin\AppData\Local\Temp\.opera\268a8efd-f812-40ea-a96d-f99878c89e0d Opera Installer Temp\opera_package_202605111331071\installer_prefs_include.json.backup
Size 243B
SHA256 695699ff5a1150d61cb491cbaabdf0b049686af5841185cc2558501766d8a642
MD5 3262f8bd6bf990129e122349e6188924
SHA1 929e72553df4be462ee0a4454bbd8c7bdb0889c0
SHA512 dfddf46fe29c2ff9fa7b96a64466b8167f2b630c31f7d420489a364b85b7ba8bdacc711591b94584030394d2f18c6a23c45b208d36662a77ded8cedb024e73b8
TLSH
T11AD0955AC15EE4530660C74736A5334DC702561195A1B45ED7814110C4B841269C3D39
MD5 SHA1 SHA512 TLSH

Submit Download

installer.exe

Path C:\Users\Admin\AppData\Local\Temp\7zS4C05EF39\installer.exe
Size 8.2MB
SHA256 91ac2dba5a5a1af1dc146459824f3614d026b7595ad0c6abc4c51fddf6f312bc
MD5 c90a72608d4602987999171b2be16d8b
SHA1 dea1e7c575c856da1a21e7b2d7286bb189e62917
SHA512 5143914eb732a14cf8dea411634922f833138b20b646793f40be4a56b481ceb6af042ded95c9ecb540ba0743f96704a75eb2416bf43fd2470b0e00b923b853ca
SSDEEP 98304:nBbNLLOs6UbrTVixfYxnGnajTpdrT6W9RDYNY8AF:JNLCUHKYv3RDXF
TLSH
T1CD967C43F3A601E8D06FCA748B7A5622A9757C564B30A3DF0AA436251E75FD46F3CB20
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

100.png

Path C:\Users\Admin\AppData\Local\Temp\is-KH0Y3QLLVQ.tmp\100.png
Size 51KB
SHA256 3f63f320e919830fb21fff8dbd82509ecc8330c89513163daedb1b7687a0a529
MD5 958233a25ac0c23fae9451963eca0de5
SHA1 8801e6dca9e4e4ad1f5b49caa097733877cf2e2e
SHA512 996177a1a878ca82c1ce02f8937f51285aa9b7c92471fe9c19b41892739e82aaaa7ebcb7f396d6d777da822578b1db1fea893ed55708521e4b8e31a81cacda0b
SSDEEP 1536:l7LeXprR91MWpD5Ko2ORwQWwyJUcbWb7H:ApzWTo2ORohKPH
TLSH
T1E33302A0B153C51FBA8B5211D2043975776E92F6F860FF4873CA016CAEE5D415B173CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

101.png

Path C:\Users\Admin\AppData\Local\Temp\is-KH0Y3QLLVQ.tmp\101.png
Size 59KB
SHA256 072fced130d77b4b09013d8fbc148439cf3c9a251f1e217abeb5e280cfb10f1c
MD5 784ba0eb640178ac19057ffd4bfc7630
SHA1 3b9790c2f61ad54303c2a57fc9f53ca84b95dba2
SHA512 2276c1485ae2c5e762c40d3f547890a05302cadb980785b5b59b397caf2b8d4366c19241c357056124c19ecb8c17e6b762e08b3aaa24c8a7e85fb0877ef3ecce
SSDEEP 1536:XjbL8PUdGG7dVQhzYai2ihoA1fMSbNXehCdKe6Nf:zbzGGbOY72i2AdlTVw
TLSH
T10853014AAD4E5D4DD0BB28721103728D9CA5BC0E77FE09813E27423DD5553F2B642AFA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

component0.zip

Path C:\Users\Admin\AppData\Local\Temp\is-KH0Y3QLLVQ.tmp\component0.zip
Size 3.1MB
SHA256 5e269065df25084224b76103610b34db175e2e881ab7828c8254101b9979f800
MD5 fa05f91bf90892803aff6e191c414818
SHA1 21fbf5c301d72492d4f3436aa6210082ca96d977
SHA512 15ebadd02e28b363e643cd4abee73db84213fcc7aceeebcd5686fbb41a042eee3e567a3000e9315be794ed52a28092b9b8eab6907820466c0b3ccebeadb4e0af
SSDEEP 49152:sVAbwoo9kcjKdkDC3wSwsl+8M8Xwm5NjkQCxsfqEw9mvs2H91sIqfG3zbnA+5:gAvoyP33wSwqtZLbPyEvHr1CG3D
TLSH
T16DE523627B80C436DA6221328F15F718467EFDA14E328A9773C46D1E9FB04C1A635F6B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperaSetup.exe

Path C:\Users\Admin\AppData\Local\Temp\is-KH0Y3QLLVQ.tmp\component0_extract\OperaSetup.exe
Size 3.1MB
SHA256 f1978035d7cdf416b40fcb4e7a4dafa3144c66189308553ea2fc7975deae2d65
MD5 7cf6f33cd29ce67865fc4c0b4e688322
SHA1 7a5f0776c7161343029ca991dc1bd2fd4d6c044c
SHA512 b947be7b71024b0d5aff9e60d3d3be71034281640815dbe2a7ff3a48f6e63483c0a6bee353cb1eeee7ac6633af839f21a6a312e79f57419bd7ecb106ac12c1b6
SSDEEP 49152:CVAbwoo9kcjKdkDC3wSwsl+8M8Xwm5NjkQCxsfqEw9mvs2H91sIqfG3zbnA+V:GAvoyP33wSwqtZLbPyEvHr1CG3v
TLSH
T16FE523627B80C436DA6221328F15F718467EFDA14E328A9773C46D1E9FB04C1A635F6B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

component1.zip

Path C:\Users\Admin\AppData\Local\Temp\is-KH0Y3QLLVQ.tmp\component1.zip
Size 133KB
SHA256 ff30d3e0750a31265b3781c16e782da8abe2304b3bf50e2e7aae4a4b9e20fef5
MD5 09a42b51a121279be6b88b308aeb09b8
SHA1 60efb129bb8694c29e7d8f6833f77443bac96b3c
SHA512 7f013f02f6cacd0b1a7384c9f0e4b24e6654a4ade5ed0ea5a9265f6d0e5c691607e10385b0f7768e3f693229fd027292090ddf6cc84b2a13ffb7f65acec63951
SSDEEP 3072:zx1MnFDK3I/rnmMChqZ1J4izuv4nHWLJRArukqv:zx1cFJjm2Z1mqujbGnc
TLSH
T101D3121788C763110767C6A521F7BA009EE0C706EBF44C5409AD0EB9ADD446D39BEBFA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cookie_mmm_irs_ppi_008_537.exe

Path C:\Users\Admin\AppData\Local\Temp\is-KH0Y3QLLVQ.tmp\component1_extract\cookie_mmm_irs_ppi_008_537.exe
Size 245KB
SHA256 6be180ea9a978907b1f39e54a6360404a094d59c21e4ebb1fcb456aef0ff4859
MD5 bd4dde991518a5d36553d2ac2796ac25
SHA1 189fd7476f8fbfe9d4ab5e8cd276eed1cac4f1dd
SHA512 46fde3444ee5e8016d6699534d27bff61d9ee22cdabbb3351d41edff0c28a2a05db3b3c87e22daef9532a84a5b36ac21050dadc25b04efd9b064a1b1c4703e7b
SSDEEP 6144:rrRG+16NMD16oK3bbLuaTBmmjQMeQ7zVFoUV:rrRxD1rK3fL/majJ6UV
TLSH
T1F4347C2275D18032F5B31A3419F88BB6983EBCB54F3484DF93945B6D1E30AD1AA35B27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

inkscape-1.4.3-installer.tmp

Path C:\Users\Admin\AppData\Local\Temp\is-Z9L0OR9SLH.tmp\inkscape-1.4.3-installer.tmp
Size 4.1MB
SHA256 ad44ccbfc69fda66fef3c812fe4aab5eafaf8bd654f8b707081c30233677544a
MD5 908bb8ead7e3505cf64796786b844c3e
SHA1 23e3ce3af8b4780f4560d3e447614d8fa9cd8b08
SHA512 a61c513964e17a234b8f66aad823bb4e7e61bb9d664661746b499ede1f2289d14aa94150615574fed10e8d1b3687adb0f126fd8858f7e369855e0818b232bcc0
SSDEEP 98304:b3U5HY/KwjoYY1j48UWm2eTMFdC+JM333E:Y4/1jorPmEL
TLSH
T1D1168F03B348753EE4671A3A583FA680983F7A213A26CD4B6BF40D5C8F396416D3A757
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat
Size 40B
SHA256 b1cf385a1f29e44e148833bb41b5f4fa59b44cc4155931b01910f5d5e3716b17
MD5 32678d7517f4fde31c045d756b684503
SHA1 d70f35de52b43e34dc9fff4c3dfe4ca50d4784a3
SHA512 6e898e228de7eab625920606333c0e947b82a65424a78280dd00c3308217b70142a4dc297ac72564dbf53d5e291f29cb510c9b02dffa376fb115e3ceacddc082
MD5 SHA1 SHA512

Submit Download

config.def

Path C:\Windows\Temp\asw-ba8e43ff-e22a-400e-aa2f-dbaa7abd94eb\avast-av-vps\config.def
Size 545B
SHA256 1269922e970019b60c110d9933eb3f002d3c75670ec0454218b369d759aeafe2
MD5 8f9230c2164055c775695e487df8c57f
SHA1 4aedd64726feb60cb91740f6814020f4c0046189
SHA512 1035f197bf146af44e598b6781e29777d63287f9e4c617a386a78b85dacc99d9dd3b673eadd4dd39aeab50d7ac9feb5238d378b8f4de720af9b4602ef818172f
TLSH
T159F0C6E79584902F5A21C5DA811251C153D007C44DC6D82599529B8FEDD6F6128DF279
MD5 SHA1 SHA512 TLSH

Submit Download

icarus_product.dll

Path C:\Windows\Temp\asw-ba8e43ff-e22a-400e-aa2f-dbaa7abd94eb\avast-av-vps\icarus_product.dll
Size 1.3MB
SHA256 111f167ee1161718d13019876bcbde37328ba7037076ee457b22bd9de95983dd
MD5 9345e18fce5fede10a8371e27b439a75
SHA1 8d791cd49b4fa84129e0247e82d3a62fbbaecba9
SHA512 efc703e5a714e7e1aae93fd43b334eeeb115680dfe333b4149a82f07de6d84438f160ada087c00536fd5e3e9d28fd1fdf9bbdac10445bdc0e072b3542b49472c
SSDEEP 24576:wOxUUh42JDBxarcz4vh0lhSMXlNQQIi8V:ZxThzJDBxaax
TLSH
T1D4558D1A7A6C41F9C2BEC03989A7491EEEB17455436197DB76E88E091F23BF05E3E301
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

product-def.xml

Path C:\Windows\Temp\asw-ba8e43ff-e22a-400e-aa2f-dbaa7abd94eb\avast-av-vps\product-def.xml
Size 62KB
SHA256 ad3401893e315cbd7d178100862151aa6619d25333e8c0100f22e6945b3e9037
MD5 d33a0951d9a8729df890e2915e8d8d50
SHA1 38d4a60bd8b22a642ff402d954c73491a0cf81fe
SHA512 a706d2587fe49ffc5f9390d3cc07a49ac3f544200e92f423ff68e3f6f930d3ab42044c39ad6f383a1c11a3536740c024c5efac48d2c6c7f738523981e909b558
SSDEEP 1536:fbtZqt7rI7Ih7p76IZcfE42Sxfq/G1GpfcWehs2PVdfOu+yjNBcrTK/p0IW9JXU6:ALxb/1vHq9a
TLSH
T1DF53DF6967EFBD6A728790D7E440F884A38FEC3C95C80C93F53375909919DE29D28A70
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

product-info.xml

Path C:\Windows\Temp\asw-ba8e43ff-e22a-400e-aa2f-dbaa7abd94eb\avast-av-vps\product-info.xml
Size 5KB
SHA256 db125a0ae9d4d702e65cf86a662b5ff07eecce4051db97fa5a3a32a8e0d28083
MD5 967a3522d8e6f47ebf0e1bf1908e69c0
SHA1 36af77d7f5259f56320711993c24cd0289ae70fc
SHA512 db9f94669a708f5dfb0cf93b072e5b59c5d4099b6cff592d62b34005c8575fd53ff01065527996d5c5906430b78b8c7faaeaf66cb18cc5d42042d7aaee46911b
SSDEEP 96:VJ/A1WpJdwUPGB8vQ+U8wqOQQRTj3XZM3nVdf2nNm/FuwVs/S+AL+pdobAM:b/A1WpJdwfB8vQ+U8wqODR33XZMX3OnA
TLSH
T156C1CB36242CBF6B722F84D7F4D5BA81629FFC5D8EC84C17C1173680A3AB9A4590A925
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

aswOfferTool.exe

Path C:\Windows\Temp\asw-ba8e43ff-e22a-400e-aa2f-dbaa7abd94eb\avast-av\aswOfferTool.exe
Size 2.9MB
SHA256 a7bf8a69b8de5bcbf8837ea99527cbd51af3663d4b383d7981d2e0ddabd29e96
MD5 a41711a343bb27fc6fc0677623e25068
SHA1 a701ecb4ae597be4068b2947b31c0d9c6bfe5328
SHA512 d9982ab5b2032f086f64b10588ba9db4ff5603ebf92b38c6e387102856aa5374c60038dd571af2c7c44562793384d1bacf3c2bffc1313777716b0a7b021aa775
SSDEEP 49152:ZZzOWTkFLsk2VHoMvXm/ONNmTAvAfAAEV1rnFTZT0krlGW+KhTxa:fTkF4k2OMvXN/8Ao7ELxTZT0krgK
TLSH
T17DE5BF10BA45C072E8820571A66EEF7B5A2DAA20076504C7F3D47DBCAE305D3673AF5B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bug_report.exe

Path C:\Windows\Temp\asw-ba8e43ff-e22a-400e-aa2f-dbaa7abd94eb\avast-av\bug_report.exe
Size 4.4MB
SHA256 816949eae9fbcb66c13eae778881a84b464abd8fbd39c41bea050e062f17118d
MD5 d9616105a3b9f63ebf0fd898e4d3d337
SHA1 607403c59cbff391e91e23166f476e157393af41
SHA512 b9047417812751f6363de14d778b02930210b12255e1a98a0a4c5b25aeb4287d6d89feeecbc9217e6975b21ea728cbc58be1312d89f6e18c30b5f8206c3caadb
SSDEEP 49152:12dgHml4i23xLuhzEjGKW8v1ENdSIGC7bN2rmy1nAJ/HEVJHLy+SY9kdYVEMi+zZ:5EQhMMmyZx9PWpwMsWPdwbNV7xqfMxR
TLSH
T17E265B1E696C00F8C1BED0799647A90FEEB13496033996DB6AE18E561F13EF15E3E700
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

config.def

Path C:\Windows\Temp\asw-ba8e43ff-e22a-400e-aa2f-dbaa7abd94eb\avast-av\config.def
Size 959B
SHA256 0216cf060aec609207ae88c6358e10b0bf3de5b21115540d6ec59305a8d137fd
MD5 64f687075c4298ea9be0a347ca931bc8
SHA1 b79fac636aea6fea3e090c4b80b58b5e0099068e
SHA512 37b6090f6c11f37744334c0f1609d07c2e1bd8d7c9f8d9e6acd9be49dad6811423950dab6b5a614cb894380ed92a0af4344b8c265a185929293e2ea2ce804f76
TLSH
T1F21144A3C580905E1E1194D5602FD3C4AE5041C50DC5D4918A91C6CFFF92BB469FF0BF
MD5 SHA1 SHA512 TLSH

Submit Download

config.def.edat

Path C:\Windows\Temp\asw-ba8e43ff-e22a-400e-aa2f-dbaa7abd94eb\avast-av\config.def.edat
Size 40KB
SHA256 b7ba99773f6b6ca4211fe4a95a6c19d683c5f7e1daaa3501478ebd4320b51ab2
MD5 dd697ef30f352b847229ae725c28a085
SHA1 d02f16ea98fd5077809fd8936e9757cc596885f2
SHA512 689f5f553ca52b3b0e615d7fd98cb75e90ffe071559f481e251e1c32e09606ba380071289b91144681603d1b4e08f5d96e69a38f01581c7f96ff085ca5be63f4
SSDEEP 768:qqi1bebyb/o9gDSrbxJu/kdYfbqo1IzJtTE6vPPPpoNc:xi1Sbyb/oy2ydIzJt46vPPPz
TLSH
T14E037CE347610A5C9ED6C2E69DA6F1511CBB74C988C0C4A1C7C0ECE9BE74797708E26B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

edition.edat

Path C:\Windows\Temp\asw-ba8e43ff-e22a-400e-aa2f-dbaa7abd94eb\avast-av\edition.edat
Size 1B
SHA256 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
MD5 c4ca4238a0b923820dcc509a6f75849b
SHA1 356a192b7913b04c54574d18c28d46e6395428ab
SHA512 4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a
MD5 SHA1 SHA512

Submit Download

icarus_product.dll

Path C:\Windows\Temp\asw-ba8e43ff-e22a-400e-aa2f-dbaa7abd94eb\avast-av\icarus_product.dll
Size 6.8MB
SHA256 a3d3d565a7ef1980df62806b896d83973e94d12478567376ab04f12950c04101
MD5 4c87960432d2e70b92476ada891bd3db
SHA1 a306b7bf1e817ac071e6551213448e7517bf1d00
SHA512 ac0047ccf8573b559642be0f16c307dd4403157359c1551515870826381d2875b49fe0b9a62dcf91e4be85e7830962f6a01778797085086a6d69d31888bf63c1
SSDEEP 49152:M2dmHel4taZ+i1meNas3g8RteIJD1/Y6/45p303YMqmc27Gjos1A09q7Bz3SAlQr:saA9eNbWqi7Xa3y
TLSH
T114766B1E7A6D00A9C1BFD17C9657940AEEB178954335A3DB5AE18E590F13BF08E3EB00
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icarus_rvrt.exe

Path C:\Windows\Temp\asw-ba8e43ff-e22a-400e-aa2f-dbaa7abd94eb\avast-av\icarus_rvrt.exe
Size 54KB
SHA256 097709779bf6e7a3f93b65510c1df2a6d28c2c8052874b39d560addfccc44493
MD5 9509e1083e6c87ed87fea572faf4707c
SHA1 d1edbd6a19219182d44daee650d7ccdb5f577073
SHA512 881d3ebc9da69fa08346a288b47381437c9325800b42f1034980fdd765cdb25a758f7985f4114bc9f6cf19eecff97834ec237fbf7b67d65d6adc16b5e7932fb1
SSDEEP 768:Skew5tXCQd8uLs7c9kyrHFLEPZqnF6AmbL/hamzxOW9zRrA:Sk75so8uLs7MDBEPZCF6VBamzUizZA
TLSH
T14F435B1323A850C0E67E8478A3F49923AEB236D617206A5F3164D46829A5FD1F73D36E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

setupui.cont

Path C:\Windows\Temp\asw-ba8e43ff-e22a-400e-aa2f-dbaa7abd94eb\avast-av\setupui.cont
Size 603KB
SHA256 8f8100437d29ff6c820480c68d5dd06b5e5db765bd896b0a1fccee9500f43959
MD5 b50b49743815635e8b8df044536fa382
SHA1 3ad7ac6f75350bec727a0bdc82939f8cac8f157d
SHA512 08462079333d6bd41bdd011d6904555db7e14b0a2898d071adca9b9a32a2bd3076d3e0cd8870079d0231575f38e3d216763d46e7b9a4dc57652cc0376e796c4c
SSDEEP 12288:o7t5RS0KIZPHMKbsbnokoJri0EOyxiEZEK23iX2F/ioDS/uR9HhxAZpVOL5D5M0l:MjwSJHhqnoXiTViEvXSiWeaBxsp8LgK
TLSH
T197D4235E19C655BECBED01EE683B91A30232EB4BE50D9210EF9C6AF7335D91785AC430
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bug_report.exe

Path C:\Windows\Temp\asw-ba8e43ff-e22a-400e-aa2f-dbaa7abd94eb\common\bug_report.exe
Size 6.3MB
SHA256 89815dcd9b7ab41334a3f65c6afc8d1c81c8e824bfdbe155334a3e87d751cf85
MD5 603ffc585c2f24377597625b2bcfaef1
SHA1 2190bff64ce1cd1c1bed40481793bd1823fc9f83
SHA512 59c247ee2eb80f0b044d8b7ff65f3592dc618e2ee5f11dcf6815bf98e9da5f41176cb0ffecc893a374e5ca82f8777ea93dd4bc312651e36548c6632ccc86eb80
SSDEEP 98304:5EQhMMmyZx9PWpwMsWPdwbNV7xqfMxR9g:5EQWEbdWIWPdwbNV7xqfM3C
TLSH
T1A4668D1EBA5D00E9C1BFE1788687950BEAB17855033697CB66E18E560F13BF19E3E700
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dump_process.exe

Path C:\Windows\Temp\asw-ba8e43ff-e22a-400e-aa2f-dbaa7abd94eb\common\dump_process.exe
Size 3.9MB
SHA256 7587a665360c2eafd73f37e5c9c258a46b7ddf42572699a0f410f0fcc849d1b4
MD5 78afaf37ce7e7d023058cad4f16da5e4
SHA1 e370393d2563f90b7bda18c69445df91ebd493e9
SHA512 2e91b16512a56237d6ac667199fa3f3de5d4a9ba1a6f5e7f925cf6159a147842557b966c68db44ec3c07cb9497892b024263d07691c5ccfee1746cf5441a6533
SSDEEP 49152:3/T/XRq3fuqjDmpWq7BmXtku2Js86zrSkLlWLZOtMteAlDtqdJD1GTZyhJaOPtJ:Tn6Du7BmXh8jyL
TLSH
T189166C0EBA1D00E9C1FED17C8A46650BEA717CA5837557DB66E0AE191F23AF05E3E700
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icarus.exe

Path C:\Windows\Temp\asw-ba8e43ff-e22a-400e-aa2f-dbaa7abd94eb\common\icarus.exe
Size 9.2MB
SHA256 4f5bfe58f16ce2571f8338dc2e65c06c988cffdc026a18039b8d5eda0c979faf
MD5 85a4c680f5c1f574055f311af6c53485
SHA1 c05382cb4a63f5bf708804eb5987cbe1aadf2b3c
SHA512 6dde19eaa394c34877accfeccb15cc4b760722088c01acaaf7c8f389ff7f2d5018bb566e5255def0748f758ba406c10952fcf9db2aa626fffc0d7ff32bea2722
SSDEEP 49152:V2dFHhl4hbC2WLl+PEPIZZkr/J1YR1bjVAC2n7QJWllFVvWo3s+8kG3b836fbZcI:xP8AAjjpTzDCZfBBaObo4pyxEFydE
TLSH
T157A66C1EBAAD01E5C1FED1788647651BEE717895033997DB66E08E160F23AF09E3E700
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icarus_mod.dll

Path C:\Windows\Temp\asw-ba8e43ff-e22a-400e-aa2f-dbaa7abd94eb\common\icarus_mod.dll
Size 16KB
SHA256 95decdcfcc9a780e8577ab4a0eaa706c245d6aa354d1c0dd5690d08465410a0f
MD5 e51aa2b462baa763c573022d4be1c126
SHA1 b3f5405998e2c9c8ad84d551dff5983d82873d39
SHA512 d81d2acefcf28f5469749014e9f8c6e7b3ca87e6d4681804f099cda938741a0504f3cca44b5706118c1630b8a52788deb789e86c88763f21daeaea758d648927
SSDEEP 384:3DsO1eoK5pwKNsZqnPqnJldei2WSx7bLw:T3ZqnXAmbL
TLSH
T180725A473F246582EFC78E74B0C98BA76D707366AF2544C7593081A8AD917E23E7806F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icarus_ui.exe

Path C:\Windows\Temp\asw-ba8e43ff-e22a-400e-aa2f-dbaa7abd94eb\common\icarus_ui.exe
Size 12.4MB
SHA256 0cdbf296a3fea0082edd8923818de16727165efd3a19f310654d2b2e8230b7b0
MD5 18dd0faccd7192ad080aba7b76726af9
SHA1 e47484632393eb1585b2dbc416209c57e79fe274
SHA512 4627328c94068b832fafb27fd0f5cefed0c9f72ae32360f00dcf042721ee0891b253a73f44af8d3ed60ebf682daa993c63396a460bfe50ec1bfa44112bf3ade0
SSDEEP 98304:US8GOM8jlLiuCkZAy25mOhWi2PVLv0l7DkhtDE6akvnxrqN2D:UvljjlLicZx2UOhWi2PFv0BWowxrqN2
TLSH
T100D68E6AB6A440E4C1FEC179DA4B950BEBB27C95033193CF11E15A5A1F23AF49E7E310
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

product-def.xml

Path C:\Windows\Temp\asw-ba8e43ff-e22a-400e-aa2f-dbaa7abd94eb\common\product-def.xml
Size 1.9MB
SHA256 d89af30c39b80ca702eadedf12d9035b8dd29611cdbdea4793b131bf52485832
MD5 510cc3099149cb3f82faeb1111adad12
SHA1 ed7697b2cd3b0c1e117b0db2f18e98e8c3981b54
SHA512 2a5dcf612e6da55ba189774d2ffdb58175169b3d54193f7cb43f6016551c8c9ce29e8d0cbfb3bd5aecb2ce7b679189f78fd74fbd164081b8380232cecac3d635
SSDEEP 24576:kA/MuVJrKwWwfcEz2FwZMnCrEy8Z6chVI:kAUuhWEXO9ZFHI
TLSH
T188954F76359E7D6B704B50E7B880BC80629FDD78C9E05C53F2B331509A63A729E71AB0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

product-info.xml

Path C:\Windows\Temp\asw-ba8e43ff-e22a-400e-aa2f-dbaa7abd94eb\common\product-info.xml
Size 12KB
SHA256 c6a49b659f3a70e16c7dcab4fdb6d29436affbfb6be7c06abc9b696374a8dc03
MD5 736fb3202290b739396acbe22458363b
SHA1 5198ecc3212c822f1febdd26981fac525e24deed
SHA512 a21ce4a03be9624aa1b22c058144c90e7544b68b93ba67b45313544f1889a5755a4feacc7b14801ecaf35b8caf6989e853e8520e05671f277d5bbd2cbcb5b828
SSDEEP 192:K/N1WsJGAksmNeFtob6rpU8wHOeM33XZMWFOnk/F3ZCyGdRWARajsWcNvGPkB0b7:KV1gAHmNcdS8VIkzl0W8aICsB0b7
TLSH
T1D5423136211CFF2F761F8497E1D2B581329FFC2D9BA80807E1273190A37F565A8069B4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gpid.edat

Path C:\Windows\Temp\asw-ba8e43ff-e22a-400e-aa2f-dbaa7abd94eb\gpid.edat
Size 7B
SHA256 98b48cc449adda0174b82b5bc4ac9179cb8fff98add04dcc14d0422d5b3908c7
MD5 585c03383897322264239eed29ffb5cf
SHA1 949cbae2ebbfbdb315c4eecff6be0ac8bd83b88f
SHA512 d23ab0becc53c5ce98a45afff600ce178339eac91889b3867baeaea424c7044a80218ea1752f1195d2c397f06e910a5c68ac1e465263598433f03524ba676568
MD5 SHA1 SHA512

Submit Download

gpud.edat

Path C:\Windows\Temp\asw-ba8e43ff-e22a-400e-aa2f-dbaa7abd94eb\gpud.edat
Size 6B
SHA256 3f42931cd0bbebbe3198dd8b8c11305c50a63f9575254c9d44aacc918eb7ae09
MD5 252842cfac83631f3184d7c071b2c26d
SHA1 d27b6cb5675c99421885a51676be9658de336b46
SHA512 b641dc789d6ab8d9c80d11cfce7a639f74641366647a565b29167ceeef055f7df4561bae6b6065e084cc12f3b0618f654f833bf9957d7ab49c15d176551bd6f6
MD5 SHA1 SHA512

Submit Download

icarus-info.xml

Path C:\Windows\Temp\asw-ba8e43ff-e22a-400e-aa2f-dbaa7abd94eb\icarus-info.xml
Size 2KB
SHA256 f541a9de9fed170d34b7ff68ad4508622c98fdadc15b2b70cc6e418b03a59b96
MD5 f0d2ee150dbf7b4933ec6b0f6a7622aa
SHA1 73af8610bfa8b2aae1f60a0bf7a13fd377f8c04f
SHA512 70579b633f2af18dfc5a7b60578365d9555887ec428a831cba021759f4c232a66b80a026bb7c63255958467bf2d446207ade1724ea578f02740217091ba54b35
TLSH
T1DE512179713D9E2B73167AEF7195F88427EFBD4A4FD8046302077081ECAA6F42D51260
MD5 SHA1 SHA512 TLSH

Submit Download

package.edat

Path C:\Windows\Temp\asw-ba8e43ff-e22a-400e-aa2f-dbaa7abd94eb\package.edat
Size 2B
SHA256 27a26bca625b223971909dd88fc93faeb050dc5b34d91c0871661740dcfb9d18
MD5 aac1259dfa2c6c5ead508f34e52bb990
SHA1 8ccb8a3f7ac5bd9c4f1ab74cb453f7f32903fb1b
SHA512 2a404c9768dc86190bcc7c98645afa7b6f74488371b974d14da48d7379b2cfae6c8c5bc878ed17d0f9f4c4e62138bfe416cf9a1be31eab07e062c0f5f55ef811
MD5 SHA1 SHA512

Submit Download

skup.edat

Path C:\Windows\Temp\asw-ba8e43ff-e22a-400e-aa2f-dbaa7abd94eb\skup.edat
Size 8B
SHA256 21e21939386de29943d6a7128d10c9bb4cbab8ca949698394c6d583912e74e4a
MD5 e3d5dd4fa9db9ef78ce048492c97739c
SHA1 e974733d553cf23430023f4b7b770dc7c17378ec
SHA512 678a9776934cecc34ce353bcaf624d5800200e76d01005172ac816d217d9172f8dc590a2f3e6e117144ee56c4746b2d57103d72bfdd19e4b48400f611675a170
MD5 SHA1 SHA512

Submit Download

avast_free_antivirus_online_setup.exe

Path C:\Windows\Temp\asw.7750c2969b416ac4\avast_free_antivirus_online_setup.exe
Size 1.7MB
SHA256 e8bbb149d622aa9fdc6f90b98ca531a8c41d4b73f19753292fdeaf22933316ea
MD5 3b031b4d315ebf70f50921a32c470a99
SHA1 35be5931dab8e20fe9a43366726d03c5e02aa9c5
SHA512 43b9b2a2ff3099adae5bebbf4b1c5c651ea5f46255bb0524897306c5f9d683d5825f4b3319cc79208464d6584065bae464910f89c093628b9ef8b6d163d5a7e2
SSDEEP 24576:IuRu5fl3AFG8CWgd3jEDigqqP9WhavTXeS0h0lhSMXlOncOy9t/mWFIN0QwV:cJlQU8CJjqF0wuS5icLt+WeN
TLSH
T1D3859E207E42C07AD49A01B1992CBBAAC16DAE744F6550DB73F03F2D6D711C22B35BA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1648-148-0x000001A94DC00000-0x000001A94DD2A000-memory.dmp

Download

memory/1808-9-0x00000000008E0000-0x00000000009BC000-memory.dmp

Download

memory/1808-0-0x00000000008E0000-0x00000000009BC000-memory.dmp

Download

memory/1984-9063-0x00000204B42D0000-0x00000204B43FA000-memory.dmp

Download

memory/2320-147-0x000001A5F4860000-0x000001A5F486C000-memory.dmp

Download

memory/2320-146-0x000001A5F2E10000-0x000001A5F2F3A000-memory.dmp

Download

memory/2328-9060-0x000001985CEE0000-0x000001985D00A000-memory.dmp

Download

memory/2404-9066-0x00000276566C0000-0x00000276567EA000-memory.dmp

Download

memory/2648-290-0x0000018EB5EE0000-0x0000018EB600A000-memory.dmp

Download

memory/3200-9056-0x000001B6AF640000-0x000001B6AF76A000-memory.dmp

Download

memory/4016-219-0x000002461E680000-0x000002461E7AA000-memory.dmp

Download

memory/4308-9052-0x0000025A3BAC0000-0x0000025A3BBEA000-memory.dmp

Download

memory/4812-9100-0x00000238FCB10000-0x00000238FCC3A000-memory.dmp

Download

memory/4908-9090-0x0000027A1F640000-0x0000027A1F76A000-memory.dmp

Download

memory/5080-23-0x0000000003940000-0x0000000003A80000-memory.dmp

Download

memory/5080-16-0x0000000003940000-0x0000000003A80000-memory.dmp

Download

memory/5080-33-0x0000000003940000-0x0000000003A80000-memory.dmp

Download

memory/5080-32-0x0000000000FC0000-0x00000000013F6000-memory.dmp

Download

memory/5080-30-0x0000000003940000-0x0000000003A80000-memory.dmp

Download

memory/5080-29-0x0000000003940000-0x0000000003A80000-memory.dmp

Download

memory/5080-129-0x0000000003940000-0x0000000003A80000-memory.dmp

Download

memory/5080-25-0x0000000003940000-0x0000000003A80000-memory.dmp

Download

memory/5080-24-0x0000000003940000-0x0000000003A80000-memory.dmp

Download

memory/5080-140-0x0000000000FC0000-0x00000000013F6000-memory.dmp

Download

memory/5080-35-0x0000000000FC0000-0x00000000013F6000-memory.dmp

Download

memory/5080-19-0x0000000000FC0000-0x00000000013F6000-memory.dmp

Download

memory/5080-17-0x0000000003940000-0x0000000003A80000-memory.dmp

Download

memory/5080-5-0x0000000000FB0000-0x0000000000FB1000-memory.dmp

Download

memory/5080-10-0x0000000000FC0000-0x00000000013F6000-memory.dmp

Download

memory/5080-11-0x0000000000FB0000-0x0000000000FB1000-memory.dmp

Download

memory/5080-36-0x0000000003940000-0x0000000003A80000-memory.dmp

Download

memory/5260-116-0x0000022AC29E0000-0x0000022AC2B0A000-memory.dmp

Download

memory/5704-9101-0x000002364E180000-0x000002364E2AA000-memory.dmp

Download

memory/5720-1085-0x0000022005830000-0x000002200595A000-memory.dmp

Download

memory/5900-1086-0x0000029DB96C0000-0x0000029DB97EA000-memory.dmp

Download

memory/5964-220-0x0000026142A70000-0x0000026142B9A000-memory.dmp

Download

memory/6752-9083-0x00000213E3250000-0x00000213E337A000-memory.dmp

Download