51cbe326ac9be2c9a4dfe83937370909ddb175df327622d8f0af037534406666

Analysis

max time kernel
898s
max time network
477s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
24/05/2026, 16:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
toolcoin-1.4.1-windows-setup.exe
Size 16.7MB
Sample260524-tmlzdsdz2v
SHA256 51cbe326ac9be2c9a4dfe83937370909ddb175df327622d8f0af037534406666
MD5 7b115a87cd615fb4d7c3553d793c55b0
SHA1 6b0d48d49a91791d4ba10530a76923be2f5d4335
SHA512 30e24ff83cc10a9a6bef68bdd93817414169775dcdc9af0b2f1ba431c505fb9b6950e85e6a7ffb5347499fdb3ee1d8396e80bf275d9dcbcf78f2125f3844b01d
SSDEEP 393216:4nZrVgz2LdzJKPjjHz94G+Zuq4I6r79RGLO/YavyeME/lTl:AZmzqEzGG+0IY9sLPe8Ef
TLSH
T161073327B24E673DE4BA9A354A72AD14883F7A60550ACCA7D6F00D4CCE6D0A11D3EF47
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery installer

Malware Config

Signatures

Executes dropped EXE 2 IoCs

pid	Process
5212	toolcoin-1.4.1-windows-setup.tmp
3500	ToolCoin.exe

Loads dropped DLL 12 IoCs

pid	Process
5212	toolcoin-1.4.1-windows-setup.tmp
5212	toolcoin-1.4.1-windows-setup.tmp
3500	ToolCoin.exe
3500	ToolCoin.exe
3500	ToolCoin.exe
3500	ToolCoin.exe
3500	ToolCoin.exe
3500	ToolCoin.exe
3500	ToolCoin.exe
3500	ToolCoin.exe
3500	ToolCoin.exe
3500	ToolCoin.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Program Files directory 63 IoCs

description	ioc	Process
File created	C:\Program Files\alphtoolcoin\data\flutter_assets\assets\is-5J6A2.tmp	toolcoin-1.4.1-windows-setup.tmp
File created	C:\Program Files\alphtoolcoin\data\flutter_assets\assets\is-6PQAP.tmp	toolcoin-1.4.1-windows-setup.tmp
File created	C:\Program Files\alphtoolcoin\is-Q667P.tmp	toolcoin-1.4.1-windows-setup.tmp
File created	C:\Program Files\alphtoolcoin\data\flutter_assets\is-33E53.tmp	toolcoin-1.4.1-windows-setup.tmp
File created	C:\Program Files\alphtoolcoin\data\flutter_assets\assets\is-6AKQJ.tmp	toolcoin-1.4.1-windows-setup.tmp
File opened for modification	C:\Program Files\alphtoolcoin\downloadsfolder_plugin.dll	toolcoin-1.4.1-windows-setup.tmp
File opened for modification	C:\Program Files\alphtoolcoin\flutter_windows.dll	toolcoin-1.4.1-windows-setup.tmp
File created	C:\Program Files\alphtoolcoin\is-A4CVA.tmp	toolcoin-1.4.1-windows-setup.tmp
File created	C:\Program Files\alphtoolcoin\data\flutter_assets\is-M5A1U.tmp	toolcoin-1.4.1-windows-setup.tmp
File created	C:\Program Files\alphtoolcoin\data\flutter_assets\assets\is-8KH71.tmp	toolcoin-1.4.1-windows-setup.tmp
File opened for modification	C:\Program Files\alphtoolcoin\ToolCoin.exe	toolcoin-1.4.1-windows-setup.tmp
File opened for modification	C:\Program Files\alphtoolcoin\gal_plugin.dll	toolcoin-1.4.1-windows-setup.tmp
File created	C:\Program Files\alphtoolcoin\data\flutter_assets\assets\is-I3LGU.tmp	toolcoin-1.4.1-windows-setup.tmp
File created	C:\Program Files\alphtoolcoin\data\flutter_assets\assets\is-EH91Q.tmp	toolcoin-1.4.1-windows-setup.tmp
File created	C:\Program Files\alphtoolcoin\is-SHQD4.tmp	toolcoin-1.4.1-windows-setup.tmp
File created	C:\Program Files\alphtoolcoin\data\flutter_assets\is-4NMSE.tmp	toolcoin-1.4.1-windows-setup.tmp
File created	C:\Program Files\alphtoolcoin\data\flutter_assets\assets\is-EL8R4.tmp	toolcoin-1.4.1-windows-setup.tmp
File created	C:\Program Files\alphtoolcoin\data\flutter_assets\assets\is-O1Q4R.tmp	toolcoin-1.4.1-windows-setup.tmp
File opened for modification	C:\Program Files\alphtoolcoin\zlib.dll	toolcoin-1.4.1-windows-setup.tmp
File created	C:\Program Files\alphtoolcoin\is-OL1KK.tmp	toolcoin-1.4.1-windows-setup.tmp
File created	C:\Program Files\alphtoolcoin\data\flutter_assets\shaders\is-QVINP.tmp	toolcoin-1.4.1-windows-setup.tmp
File created	C:\Program Files\alphtoolcoin\data\flutter_assets\assets\is-IVCKI.tmp	toolcoin-1.4.1-windows-setup.tmp
File created	C:\Program Files\alphtoolcoin\data\flutter_assets\assets\is-DJ5FU.tmp	toolcoin-1.4.1-windows-setup.tmp
File created	C:\Program Files\alphtoolcoin\data\flutter_assets\assets\is-3B3NB.tmp	toolcoin-1.4.1-windows-setup.tmp
File opened for modification	C:\Program Files\alphtoolcoin\decrypt.dll	toolcoin-1.4.1-windows-setup.tmp
File created	C:\Program Files\alphtoolcoin\is-3QLG5.tmp	toolcoin-1.4.1-windows-setup.tmp
File created	C:\Program Files\alphtoolcoin\data\flutter_assets\assets\is-3L0AI.tmp	toolcoin-1.4.1-windows-setup.tmp
File created	C:\Program Files\alphtoolcoin\data\flutter_assets\assets\is-S9P62.tmp	toolcoin-1.4.1-windows-setup.tmp
File created	C:\Program Files\alphtoolcoin\is-EBSJR.tmp	toolcoin-1.4.1-windows-setup.tmp
File created	C:\Program Files\alphtoolcoin\data\flutter_assets\assets\is-B9IN3.tmp	toolcoin-1.4.1-windows-setup.tmp
File created	C:\Program Files\alphtoolcoin\data\flutter_assets\assets\is-IG582.tmp	toolcoin-1.4.1-windows-setup.tmp
File created	C:\Program Files\alphtoolcoin\data\flutter_assets\fonts\is-CPGV4.tmp	toolcoin-1.4.1-windows-setup.tmp
File created	C:\Program Files\alphtoolcoin\is-RJK6F.tmp	toolcoin-1.4.1-windows-setup.tmp
File created	C:\Program Files\alphtoolcoin\data\flutter_assets\is-9J5K2.tmp	toolcoin-1.4.1-windows-setup.tmp
File created	C:\Program Files\alphtoolcoin\data\flutter_assets\assets\is-O28AU.tmp	toolcoin-1.4.1-windows-setup.tmp
File created	C:\Program Files\alphtoolcoin\data\flutter_assets\fonts\is-6J8J3.tmp	toolcoin-1.4.1-windows-setup.tmp
File created	C:\Program Files\alphtoolcoin\data\flutter_assets\shaders\is-TLF2H.tmp	toolcoin-1.4.1-windows-setup.tmp
File created	C:\Program Files\alphtoolcoin\unins000.msg	toolcoin-1.4.1-windows-setup.tmp
File created	C:\Program Files\alphtoolcoin\is-13FO4.tmp	toolcoin-1.4.1-windows-setup.tmp
File created	C:\Program Files\alphtoolcoin\is-L09QH.tmp	toolcoin-1.4.1-windows-setup.tmp
File created	C:\Program Files\alphtoolcoin\data\flutter_assets\assets\is-EEKH7.tmp	toolcoin-1.4.1-windows-setup.tmp
File created	C:\Program Files\alphtoolcoin\unins000.dat	toolcoin-1.4.1-windows-setup.tmp
File created	C:\Program Files\alphtoolcoin\is-T4GUR.tmp	toolcoin-1.4.1-windows-setup.tmp
File created	C:\Program Files\alphtoolcoin\data\flutter_assets\assets\is-412S9.tmp	toolcoin-1.4.1-windows-setup.tmp
File opened for modification	C:\Program Files\alphtoolcoin\app_links_plugin.dll	toolcoin-1.4.1-windows-setup.tmp
File opened for modification	C:\Program Files\alphtoolcoin\url_launcher_windows_plugin.dll	toolcoin-1.4.1-windows-setup.tmp
File created	C:\Program Files\alphtoolcoin\is-LDHB4.tmp	toolcoin-1.4.1-windows-setup.tmp
File created	C:\Program Files\alphtoolcoin\data\is-QF1T6.tmp	toolcoin-1.4.1-windows-setup.tmp
File created	C:\Program Files\alphtoolcoin\data\flutter_assets\assets\is-38L8R.tmp	toolcoin-1.4.1-windows-setup.tmp
File created	C:\Program Files\alphtoolcoin\data\flutter_assets\assets\is-9OGFM.tmp	toolcoin-1.4.1-windows-setup.tmp
File opened for modification	C:\Program Files\alphtoolcoin\native_zip.dll	toolcoin-1.4.1-windows-setup.tmp
File created	C:\Program Files\alphtoolcoin\is-J3P0A.tmp	toolcoin-1.4.1-windows-setup.tmp
File created	C:\Program Files\alphtoolcoin\data\flutter_assets\assets\is-M7EB9.tmp	toolcoin-1.4.1-windows-setup.tmp
File created	C:\Program Files\alphtoolcoin\data\flutter_assets\assets\is-5810B.tmp	toolcoin-1.4.1-windows-setup.tmp
File opened for modification	C:\Program Files\alphtoolcoin\zip.dll	toolcoin-1.4.1-windows-setup.tmp
File created	C:\Program Files\alphtoolcoin\is-1ULIE.tmp	toolcoin-1.4.1-windows-setup.tmp
File created	C:\Program Files\alphtoolcoin\data\flutter_assets\assets\is-I0763.tmp	toolcoin-1.4.1-windows-setup.tmp
File created	C:\Program Files\alphtoolcoin\data\flutter_assets\assets\is-J0LDA.tmp	toolcoin-1.4.1-windows-setup.tmp
File created	C:\Program Files\alphtoolcoin\data\flutter_assets\assets\is-PDQ97.tmp	toolcoin-1.4.1-windows-setup.tmp
File opened for modification	C:\Program Files\alphtoolcoin\unins000.dat	toolcoin-1.4.1-windows-setup.tmp
File opened for modification	C:\Program Files\alphtoolcoin\flutter_local_notifications_windows.dll	toolcoin-1.4.1-windows-setup.tmp
File opened for modification	C:\Program Files\alphtoolcoin\permission_handler_windows_plugin.dll	toolcoin-1.4.1-windows-setup.tmp
File created	C:\Program Files\alphtoolcoin\data\is-SKI98.tmp	toolcoin-1.4.1-windows-setup.tmp

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	toolcoin-1.4.1-windows-setup.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	toolcoin-1.4.1-windows-setup.tmp

Inno Setup is an open-source installation builder for Windows applications. 3 IoCs

Inno Setup installer

installer

resource	yara_rule
behavioral2/memory/812-1-0x0000000000F10000-0x0000000000FED000-memory.dmp	innosetup
behavioral2/memory/812-12-0x0000000000F10000-0x0000000000FED000-memory.dmp	innosetup
behavioral2/memory/812-149-0x0000000000F10000-0x0000000000FED000-memory.dmp	innosetup

Modifies registry class 6 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\ms-xal-0000000048183522\URL Protocol	ToolCoin.exe
Key created	\REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\ms-xal-0000000048183522\shell\open\command	ToolCoin.exe
Key created	\REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\ms-xal-0000000048183522\shell	ToolCoin.exe
Key created	\REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\ms-xal-0000000048183522\shell\open	ToolCoin.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\ms-xal-0000000048183522\shell\open\command\ = "\"C:\\Program Files\\alphtoolcoin\\ToolCoin.exe\" \"%1\""	ToolCoin.exe
Key created	\REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\ms-xal-0000000048183522	ToolCoin.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5212	toolcoin-1.4.1-windows-setup.tmp
5212	toolcoin-1.4.1-windows-setup.tmp

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
5212	toolcoin-1.4.1-windows-setup.tmp

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3500	ToolCoin.exe
3500	ToolCoin.exe

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 812 wrote to memory of 5212	812	toolcoin-1.4.1-windows-setup.exe	80
PID 5212 wrote to memory of 3500	5212	toolcoin-1.4.1-windows-setup.tmp	82

C:\Users\Admin\AppData\Local\Temp\toolcoin-1.4.1-windows-setup.exe
"C:\Users\Admin\AppData\Local\Temp\toolcoin-1.4.1-windows-setup.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:812
- C:\Users\Admin\AppData\Local\Temp\is-IP608.tmp\toolcoin-1.4.1-windows-setup.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-IP608.tmp\toolcoin-1.4.1-windows-setup.tmp" /SL5="$50116,16507052,841728,C:\Users\Admin\AppData\Local\Temp\toolcoin-1.4.1-windows-setup.exe"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Drops file in Program Files directory
  - System Location Discovery: System Language Discovery
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:5212
- - C:\Program Files\alphtoolcoin\ToolCoin.exe
    "C:\Program Files\alphtoolcoin\\ToolCoin.exe"
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Modifies registry class
    - Suspicious use of SetWindowsHookEx
    PID:3500

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

ToolCoin.exe

Path C:\Program Files\alphtoolcoin\ToolCoin.exe
Size 110KB
SHA256 aab59a26e73c4f9a84af72ad4c1f6929c1e08e9030b64ecdbc2cea9b083a8e82
MD5 69768319039b5f078875089be877e7c5
SHA1 196ae79bb0e7db5c90c92f1b1aa0868d9777cae2
SHA512 6a48abc55ced1c2525c9fe37d91da896b5828d806f1bf5d25a755ca579f6d25c1aa6fc61115fe94c7440b4932f87ade20a5cae6e1f52b0eeeba9d733dcce349c
SSDEEP 1536:fuAO3WvDQhbTlMI60Gxhlr9D4ptl8+oBpLWPl0xPa3wf72:fuARvDQhXr61brhaQ+oBpL8l0xx72
TLSH
T1C3B3072A972950AAD17BF87DCA834645CF60BC950790E7CFC75109D63EE69F41E3E201
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app_links_plugin.dll

Path C:\Program Files\alphtoolcoin\app_links_plugin.dll
Size 136KB
SHA256 60a319d7484c4f51aa1b59f03ca90b82ee1e72d619e65c4fe4fd9905f3af91c4
MD5 65936998ff650a375b11fb58c93f31f4
SHA1 f6f820acb3004ec9157d2e70c7b92e6b18a081a8
SHA512 155fb6555c8f3806307e1d380ff46cc5ae15ff37e158147a2149980390f784fbd49a5096b5238158ce462bf8b9c303b631385ed993a1c57c89fdb156f8777623
SSDEEP 3072:q4nQVLA7en6mv/shPwHh0MpZdCdcCQf9GTGCp:q4nQVVn6mX+MpZdCdcCQoTGC
TLSH
T163D35C2BFB1940A7E21AC17CC9534946EB72B8954BA197CF17500B9A1F27FE84E7E310
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app.so

Path C:\Program Files\alphtoolcoin\data\app.so
Size 9.5MB
SHA256 8a031b14fd97bbefd290bc4f34d8257554bcecc03601085ead086ce9f3572bac
MD5 75e8e83c688d886607f9392258606a14
SHA1 0296e69e788730c5f0a6fdbb473ef4c49ca3aff0
SHA512 1f37574b9e2cd67745cad317c3ca43abe51dc80f8d8445ab8f7ff52de9167bfb0f7b53b062e40a708564cb7c4470c784b54f59fa22b1d9149bb9dc9febb61551
SSDEEP 98304:vF6XmyYN693cEikDDVsw+eRQOaONFHItSD:MXmyYNcMzkDDVsw+gQNKFHItS
TLSH
T101A60A67D0E84760E472E772B75F66A25E147CDC4F34B74A06885A263EC7DE04ACE232
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FontManifest.json

Path C:\Program Files\alphtoolcoin\data\flutter_assets\FontManifest.json
Size 156B
SHA256 34a38100e7e5fa85f1c3099615fbae73d0bb997687bc059e65b80df3451ac07a
MD5 e311da65638e49f71ab85ae2abb03150
SHA1 87b1774a5914ff3915a8cc9f85c8920d16fd27df
SHA512 b3dccea5c015419169788a0227bbb4b25bb18f4cd84e2de11232cea64732b3904b96970d1600dc8e0ab6f5364eb763b3d2738bf38f5b6a3b938a5c2c11075fd8
TLSH
T133C0800F40261ED474CDD085F1F23153B0602917054EF4DEE170078463F1290133D343
MD5 SHA1 SHA512 TLSH

Submit Download

NativeAssetsManifest.json

Path C:\Program Files\alphtoolcoin\data\flutter_assets\NativeAssetsManifest.json
Size 45B
SHA256 9548a31e4a048135c1d94f919328bfb62ae2c7bb3cab96557c7941daa97776cb
MD5 f3a664e105b4f792c6c7fe4e4d22c398
SHA1 adee29ec4f2b3cb2ec37ec3368f37ff805695d36
SHA512 b7df555970e20c6a50f650cd0df6ab782fba7004782b3f7921ccfd314db53bfb61523986628d2e05d085f4c2263dfcf54000ffdfc946b0158c5766fc6f1d0a86
MD5 SHA1 SHA512

Submit Download

keys.tsv

Path C:\Program Files\alphtoolcoin\data\flutter_assets\assets\keys.tsv
Size 1.1MB
SHA256 3d1ddc036c6ff65343a52f1485d0739adf919d2467f702e6ff6bd9c95d35274e
MD5 5924fbb128a0e9b466524097ede0c7b9
SHA1 6d0b65a0ceebacdbfd617a4c7e356753b5ed12fc
SHA512 daa351afa092dea5e55209ace7bed73efec9dda98afc991144dd013430a12b1eb6ed4b904be5ed2456771552e0f373881dc749a931ae515ae8757f3c6697f2bc
SSDEEP 24576:1mbUlb1Co+q8t87Hf+rBWj/UTVW8nzYKwV4VPXVvDF8t:fEEawt
TLSH
T15C455BC6E375EB5CE77B0E7EDE061FD9C47A41128F0A818B50E6478B7952A264BBC430
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MaterialIcons-Regular.otf

Path C:\Program Files\alphtoolcoin\data\flutter_assets\fonts\MaterialIcons-Regular.otf
Size 1.6MB
SHA256 d9865b671a09d683d13a863089d8825e0f61a37696ce5d7d448bc8023aa62453
MD5 e7069dfd19b331be16bed984668fe080
SHA1 fc25284ee3d0aaa75ec5fc8e4fd96926157ed8c4
SHA512 27d9662a22c3e9fe66c261c45bf309e81be7a738ae5dc5b07ad90d207d9901785f3f11dc227c75ca683186b4553b0aa5a621f541c039475b0f032b7688aaa484
SSDEEP 24576:PsSIRolMKvGXtkXKLkMp2fXrNsAxI6zD2/qxDoq4eeeDrG2eOeGr2lkzhlTMrRoV:P9njdzbwc9
TLSH
T1787529100276EF4CC1EF507D43B74A48F4C59AFEA53ABB1AF9B64795220BDBDA1C8181
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icudtl.dat

Path C:\Program Files\alphtoolcoin\data\icudtl.dat
Size 842KB
SHA256 998367809a821d595928089c197b3f7959f0420f81f79d4d0daee53378492ed5
MD5 018361032ba13dfeab636138ab6b9831
SHA1 8f9c259d3a330786ab8bbd49e7e79abfa1d552ed
SHA512 d7d3fffb41576cf2c90cd260727cc0ea23c5a4c458f84b01426c2a4578004b94168047c7282222e9ffade2f082e189cf167146cc3303bd7dbbb252a593236967
SSDEEP 12288:8Mlhw771h0jM7ykPG07rr4c8w0P4N48Rkjt3dPHz982VYhq:Zhw3zVtjLbGu4RjTPHzMhq
TLSH
T199056A17B0435E6FE0C48277C652E7B65637838DEB3317EAB698B5593E8A1C20241BCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

downloadsfolder_plugin.dll

Path C:\Program Files\alphtoolcoin\downloadsfolder_plugin.dll
Size 77KB
SHA256 42a6d7d881b6c6e58266705c51d7a340252ea5193321d26e7402f7e4af33cf45
MD5 45a662cf7122d5593a9c204a6f124037
SHA1 b0449a8bc5cd1bab53b8c26a2309c406b9489e03
SHA512 2d7fc0b3bc63867b6a361c292e6fc7d05fd25b856f1e9e4150dd4aca136dd695b6e013de2112e69ab6df38c5a7cc68c13b122bfd6b5b2da60d8e1bb0fdff2b23
SSDEEP 1536:Z9/Vf6iCVx43LDm5dvH3ZLM8mKJANcPlVh:Z9R6/baLmdvH3FM8mKJANcd
TLSH
T14B731A2BEA5950A7E219C5BCCA434A45CB72BC8157D1A7CF57940BDB0E27BE84F3E201
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

flutter_local_notifications_windows.dll

Path C:\Program Files\alphtoolcoin\flutter_local_notifications_windows.dll
Size 89KB
SHA256 847b3cb3f03577094d9f247000ce3a80b957aee86d3cf748c27b78894444defe
MD5 1adc86a60626fd472d25100633fb0643
SHA1 55dcaaa9318dcfe5c68d4cec08fa4198ceb9b0a0
SHA512 04bdb6077030122a77478ea8872df6d2119118fa955d3e149c47fe75eed85c5f337c6597add8186fa27ebb8ff405e5f01887012785e07307e518cfd1b2568982
SSDEEP 1536:G4fxHG3g0O6RcgHZXL8qaZ5rYOc3ewoGjZkJNnSRtFV+Sm:G4fxm3gYcORkZ5rO3ewUp
TLSH
T166934A17FA5941BAC26AC5B8CD430D06CB727C965BA163CF67810EDA0F72BD49F36602
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

flutter_windows.dll

Path C:\Program Files\alphtoolcoin\flutter_windows.dll
Size 19.8MB
SHA256 d11221cbdf328ab47e50315e3171ee9a00f2387cf3f6302a6717475620cbe7f0
MD5 a5fdea31aca8a14c5fa9ed5c5a910f5c
SHA1 e30cd219d79f9fb11f3d86a282af940fb47a67e1
SHA512 afa2956044a6e781e4955ad35868660616df78e99ab928a8a7432d198f42d24f4defeed6fbb45498380234f59eb2bd133ce5ea121d1a268a7d06cc3bd16e32df
SSDEEP 98304:iPe71P0UiyfxPUBJt4D5hrwgRk244TtFkJp7KYx8m3aIw3v8sDM0p1Vw3/tJjkaU:i+CYrwgRPLYFUZw3vjRfIS5XzX/I
TLSH
T10B276B03F29640EDC459E178971BAA23F671B8490720BADF27584B223F66FE05B3E754
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gal_plugin.dll

Path C:\Program Files\alphtoolcoin\gal_plugin.dll
Size 177KB
SHA256 7c7d25980f1c92c567c5e8616726cb838571bf4e1f91b261a683fbe589ea6c82
MD5 2578ca6320f180fe6a1bcbba6e8aed69
SHA1 7d9bc634bc36ab15be4ce21c0163a590b187b3a1
SHA512 91b1fec0035a5bc201b3b392b9614d99fe4912f1a5d76edc206628aaecb817a52f972bf091c0564f04d3346d99664e43be5c4f86b626dc2fc559b317560ed72a
SSDEEP 3072:Ln40LwVLERDrqq6EXQKLMcmhSqruDdmxCM8rtBHvEEqqGThu:Ln409D6EAw1OCM8rtBHvEEqqEh
TLSH
T17D043957B7698197D16BA17CCD838A46E731B8810B60E3CB175107BB0E23BE99E7F640
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

permission_handler_windows_plugin.dll

Path C:\Program Files\alphtoolcoin\permission_handler_windows_plugin.dll
Size 117KB
SHA256 6a82aef37b058cda45dd17345a5785f84c4e3c2380bc5735e0cef34e5a7fbb96
MD5 67b3d4871bb4a815213162d19f08556e
SHA1 f3cd7143ab2bbf15b4ddd2e903feaa540f34708d
SHA512 c1e74473f6b6caa0913339e6acaee7edc4a01db06948311e81e91a89578b43513866e8de204c6cd48f09b4cfad519c7c60f3c00800ff2ab372fa70909a3cf9fb
SSDEEP 1536:mVWL9vTTnNpLYBD6KUrnxcxB6XEbtmopSPhbAMAY4NPJQtbQ1PojkANqAJ2AGpPh:mV29vnnN6d6tdcxvmGEaMAY4NAQ1Plj
TLSH
T125C32B2BBB6941A7D22AD57CCE874945CB72B88517A097CF17510F9B0F27BE44E3E201
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

url_launcher_windows_plugin.dll

Path C:\Program Files\alphtoolcoin\url_launcher_windows_plugin.dll
Size 96KB
SHA256 c0bd34a5f191d6592a3a93bfc5e6c5e1bec36ecb0d5bc5681af80d973354364f
MD5 bac5a2283f3057ef76929922045bd828
SHA1 c11c20b683ada76fa27d7ac0564450ccdb52f8a6
SHA512 649fa79a8d4889b089e402c85feca7c6eb68ef45cfb2e38cf94fb36c31507cd92c4938a1ebdf9829ed8b6291e3f1e09c77a482ee8c48aa4ca4021400a7c43884
SSDEEP 1536:4GpJk8hcotFnvx6p1C6qSjzbABXJ9legdXBaM8aV/5itHrU:40xhcotFp6W6zAL0M8aV/5itHQ
TLSH
T1CBA3193BA71D10ABD269D5BCCA934941DB72BC854791A7CF17A00ADB0F67BE44E3E201
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_isdecmp.dll

Path C:\Users\Admin\AppData\Local\Temp\is-FA1F4.tmp\_isetup\_isdecmp.dll
Size 28KB
SHA256 8287d0e287a66ee78537c8d1d98e426562b95c50f569b92cea9ce36a9fa57e64
MD5 077cb4461a2767383b317eb0c50f5f13
SHA1 584e64f1d162398b7f377ce55a6b5740379c4282
SHA512 b1fcb0265697561ef497e6a60fcee99dc5ea0cf02b4010da9f5ed93bce88bdfea6bfe823a017487b8059158464ea29636aad8e5f9dd1e8b8a1b6eaaab670e547
SSDEEP 768:BD7FEAbd+EDsIOmF+OiR9rikW/F+M9OAriXiRQU:M07sIOYRiPWkWNl9WXil
TLSH
T197D24CB31E692BA2EDF95E3492C9162FCD72B3811E4504B3707CC5865A933652B291CF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

toolcoin-1.4.1-windows-setup.tmp

Path C:\Users\Admin\AppData\Local\Temp\is-IP608.tmp\toolcoin-1.4.1-windows-setup.tmp
Size 3.4MB
SHA256 f5f96eaec7b8e9a9720667755c07c32f8bea4cb7376fbd715ce282b4bfecfc3e
MD5 f4e6cdc3f0b4f1df9c3d2fa83c9c63d1
SHA1 91e7506278d3fb9750b98cea9b194de18548f21d
SHA512 fbab7d050c9402249c9ef009c3950be6b53817e7757ba37b4f15606047dba44d1673dae0d403bdcf34c6c10c2ad83a50c83b42c35e5ad49f4095f8d578d15144
SSDEEP 49152:e/TEMS7OtZsSllCqph5ZsR8yp1QTKV9affqR2QKBLq333kg:e/Ttyq5ZDyp1hV9MfGKBLq333J
TLSH
T1F3F57C13F345A33ED0571A3B3937AA84983FB6606A128D5797FC2E8C8F751812D2A747
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/812-12-0x0000000000F10000-0x0000000000FED000-memory.dmp

Download

memory/812-149-0x0000000000F10000-0x0000000000FED000-memory.dmp

Download

memory/812-1-0x0000000000F10000-0x0000000000FED000-memory.dmp

Download

memory/3500-142-0x0000011A88710000-0x0000011A89085000-memory.dmp

Download

memory/3500-141-0x0000011A88710000-0x0000011A89085000-memory.dmp

Download

memory/3500-140-0x0000011A88710000-0x0000011A89085000-memory.dmp

Download

memory/3500-143-0x0000011A88020000-0x0000011A88021000-memory.dmp

Download

memory/3500-139-0x0000011A88010000-0x0000011A88011000-memory.dmp

Download

memory/5212-148-0x0000000000F10000-0x000000000128E000-memory.dmp

Download

memory/5212-16-0x0000000000F10000-0x000000000128E000-memory.dmp

Download

memory/5212-13-0x0000000000F10000-0x000000000128E000-memory.dmp

Download

memory/5212-14-0x0000000000F00000-0x0000000000F01000-memory.dmp

Download

memory/5212-5-0x0000000000F00000-0x0000000000F01000-memory.dmp

Download