93bf590a2af855ee00af6b488e97ab1b1ddffe10188a9bd73e8a1117f0366958

Analysis

user interaction
yes
max time kernel
127s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
25/05/2026, 16:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Fortect (1).exe
Size 826KB
Sample260525-tp87psds6l
SHA256 93bf590a2af855ee00af6b488e97ab1b1ddffe10188a9bd73e8a1117f0366958
MD5 1af0c4a3d377f96de60a7fd1f0760238
SHA1 125ddcb68afb6319b5d167b2c2ed52171c37c73e
SHA512 f0cfd31d3fde5255282b0aa54675e2a32388642926e30786a3a41b655ce7468d82da43760ac959f3cb7c7bc7bc2c6b906d9fa91a0eb97e33a09da2242e162a5b
SSDEEP 12288:tYl+bLrEzUxNKNIq95DjuWKqxMaYyBePU5777epjLFerRUklT:tYl+bFQIWjuKSFzQRJ
TLSH
T1BB05CF73EA0CC499C05E43BF9361C37B85996D5DA7E780C2E641AAAD103254CFF385BA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

bootkit discovery lateral_movement persistence

Malware Config

Signatures

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Fortect = "\"C:\\Program Files\\Fortect\\bin\\FortectTray.exe\""	Fortect (1).exe

Maps connected drives based on registry 3 TTPs 4 IoCs

Disk information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\services\disk\Enum	MainService.exe
Key queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\disk\Enum	MainService.exe
Key value enumerated	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\disk\Enum	MainService.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\disk\Enum\0	MainService.exe

Remote Services: SMB/Windows Admin Shares 1 TTPs 1 IoCs

Adversaries may use Valid Accounts to interact with a remote network share using Server Message Block (SMB).

lateral_movement

SMB/Windows Admin Shares

T1021.002

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\LanmanServer\Parameters\NullSessionPipes	MainService.exe

Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

Bootkits write to the MBR to gain persistence at a level below the operating system.

bootkit persistence

Bootkit

T1542.003

description	ioc	Process
File opened for modification	\??\PHYSICALDRIVE0	MainService.exe

Checks computer location settings 2 TTPs 3 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000\Control Panel\International\Geo\Nation	FortectMain.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000\Control Panel\International\Geo\Nation	FortectMain.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000\Control Panel\International\Geo\Nation	Fortect (1).exe

Drops file in System32 directory 39 IoCs

description	ioc	Process
File created	C:\Windows\System32\DriverStore\FileRepository\disk.inf_amd64_cc4dba2066ccf53c\disk.PNF	MainService.exe
File created	C:\Windows\System32\DriverStore\FileRepository\volume.inf_amd64_bfabc750039f8ac1\volume.PNF	MainService.exe
File created	C:\Windows\System32\DriverStore\FileRepository\netrtl64.inf_amd64_8e9c2368fe308df2\netrtl64.PNF	MainService.exe
File created	C:\Windows\System32\DriverStore\FileRepository\spaceport.inf_amd64_6383331cfa0a32be\spaceport.PNF	MainService.exe
File created	C:\Windows\System32\DriverStore\FileRepository\hdaudio.inf_amd64_fe5b23ea7991a359\hdaudio.PNF	MainService.exe
File created	C:\Windows\System32\DriverStore\FileRepository\acpi.inf_amd64_605a5cafbbd86f6a\acpi.PNF	MainService.exe
File created	C:\Windows\System32\DriverStore\FileRepository\swenum.inf_amd64_16a14542b63c02af\swenum.PNF	MainService.exe
File created	C:\Windows\System32\DriverStore\FileRepository\kdnic.inf_amd64_6649425cdcae9b5f\kdnic.PNF	MainService.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_swdevice.inf_amd64_12050f4158021fcb\c_swdevice.PNF	MainService.exe
File created	C:\Windows\System32\DriverStore\FileRepository\compositebus.inf_amd64_7500cffa210c6946\compositebus.PNF	MainService.exe
File created	C:\Windows\system32\cbfilterevtmsg.dll	MainProtection.exe
File created	C:\Windows\System32\DriverStore\FileRepository\vdrvroot.inf_amd64_5dbe5e81fafe4636\vdrvroot.PNF	MainService.exe
File created	C:\Windows\System32\DriverStore\FileRepository\pci.inf_amd64_66614bed5c0a20d8\pci.PNF	MainService.exe
File created	C:\Windows\System32\DriverStore\FileRepository\hdaudbus.inf_amd64_533c8d455025cc59\hdaudbus.PNF	MainService.exe
File created	C:\Windows\System32\DriverStore\FileRepository\basicrender.inf_amd64_df49c4daa6251397\basicrender.PNF	MainService.exe
File created	C:\Windows\System32\DriverStore\FileRepository\cpu.inf_amd64_0abeab1ee6572232\cpu.PNF	MainService.exe
File created	C:\Windows\System32\DriverStore\FileRepository\machine.inf_amd64_b748590104fe1c15\machine.PNF	MainService.exe
File created	C:\Windows\System32\DriverStore\FileRepository\audioendpoint.inf_amd64_4fc4a632c1490033\audioendpoint.PNF	MainService.exe
File created	C:\Windows\System32\DriverStore\FileRepository\msmouse.inf_amd64_1793a485b491b199\msmouse.PNF	MainService.exe
File created	C:\Windows\System32\DriverStore\FileRepository\usbport.inf_amd64_254cd5ae09de6b08\usbport.PNF	MainService.exe
File created	C:\Windows\System32\DriverStore\FileRepository\keyboard.inf_amd64_5938c699b80ebb8f\keyboard.PNF	MainService.exe
File created	C:\Windows\System32\DriverStore\FileRepository\basicdisplay.inf_amd64_65ab9a260dbf7467\basicdisplay.PNF	MainService.exe
File created	C:\Windows\System32\DriverStore\FileRepository\wvid.inf_amd64_7c50642b144b870d\wvid.PNF	MainService.exe
File created	C:\Windows\System32\DriverStore\FileRepository\umbus.inf_amd64_b78a9c5b6fd62c27\umbus.PNF	MainService.exe
File created	C:\Windows\System32\DriverStore\FileRepository\cdrom.inf_amd64_28c103304ddff3c0\cdrom.PNF	MainService.exe
File created	C:\Windows\System32\DriverStore\FileRepository\ndisvirtualbus.inf_amd64_e8d548ad6f0a613a\ndisvirtualbus.PNF	MainService.exe
File created	C:\Windows\System32\DriverStore\FileRepository\printqueue.inf_amd64_12d9f43eb5d02987\printqueue.PNF	MainService.exe
File created	C:\Windows\System32\DriverStore\FileRepository\sensorsalsdriver.inf_amd64_a6da30fe583368a4\sensorsalsdriver.PNF	MainService.exe
File created	C:\Windows\System32\DriverStore\FileRepository\vhdmp.inf_amd64_aa94d04ecf56de1f\vhdmp.PNF	MainService.exe
File created	C:\Windows\System32\DriverStore\FileRepository\rdpbus.inf_amd64_05ebd3b4422f62ba\rdpbus.PNF	MainService.exe
File created	C:\Windows\system32\cbprocessevtmsg.dll	MainProtection.exe
File created	C:\Windows\system32\cbregistryevtmsg.dll	MainProtection.exe
File created	C:\Windows\System32\DriverStore\FileRepository\volmgr.inf_amd64_b98e2b928f71a2b1\volmgr.PNF	MainService.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_amd64_0d06b6638bdb4763\mshdc.PNF	MainService.exe
File created	C:\Windows\System32\DriverStore\FileRepository\monitor.inf_amd64_8a98af5011ee4dc6\monitor.PNF	MainService.exe
File created	C:\Windows\System32\DriverStore\FileRepository\volsnap.inf_amd64_ce438b6e0c5b1af2\volsnap.PNF	MainService.exe
File created	C:\Windows\System32\DriverStore\FileRepository\hal.inf_amd64_fd0ae947345ac7bf\hal.PNF	MainService.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mssmbios.inf_amd64_9fc7fe03de136fc1\mssmbios.PNF	MainService.exe
File created	C:\Windows\System32\DriverStore\FileRepository\input.inf_amd64_adeb6424513f60a2\input.PNF	MainService.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\Fortect\locales\bg.pak	Fortect (1).exe
File created	C:\Program Files\Fortect\on_access\win64\win8\avkmgr.sys	Fortect (1).exe
File created	C:\Program Files\Fortect\apcfile.dll	Fortect (1).exe
File created	C:\Program Files\Fortect\d3dcompiler_47.dll	Fortect (1).exe
File created	C:\Program Files\Fortect\locales\en-US.pak	Fortect (1).exe
File created	C:\Program Files\Fortect\locales\ml.pak	Fortect (1).exe
File created	C:\Program Files\Fortect\vk_swiftshader.dll	Fortect (1).exe
File created	C:\Program Files\Fortect\on_access\win64\win7\avgntflt.cat	Fortect (1).exe
File created	C:\Program Files\Fortect\FortectMain.exe	Fortect (1).exe
File created	C:\Program Files\Fortect\LICENSE	Fortect (1).exe
File opened for modification	C:\Program Files\Fortect\on_access\win64\win7	Fortect (1).exe
File created	C:\Program Files\Fortect\on_access\win64\win8\avgio.dll	Fortect (1).exe
File created	C:\Program Files\Fortect\snapshot_blob.bin	Fortect (1).exe
File opened for modification	C:\Program Files\Fortect\elam_ppl\win64\win10RS6	Fortect (1).exe
File created	C:\Program Files\Fortect\locales\hu.pak	Fortect (1).exe
File created	C:\Program Files\Fortect\on_access\win64\win8\avipbb.sys	Fortect (1).exe
File created	C:\Program Files\Fortect\cbregistry24.sys	MainProtection.exe
File created	C:\Program Files\Fortect\apc_random_id_generator.exe	Fortect (1).exe
File created	C:\Program Files\Fortect\AvProxy.exe	Fortect (1).exe
File created	C:\Program Files\Fortect\resources.pak	Fortect (1).exe
File created	C:\Program Files\Fortect\drivers\installer\x64\CBFilterInst.dll	Fortect (1).exe
File created	C:\Program Files\Fortect\locales\de.pak	Fortect (1).exe
File created	C:\Program Files\Fortect\locales\ro.pak	Fortect (1).exe
File created	C:\Program Files\Fortect\on_access\win64\win7\avkmgr.cat	Fortect (1).exe
File created	C:\Program Files\Fortect\on_access\win64\win8\avgntflt.sys	Fortect (1).exe
File created	C:\Program Files\Fortect\elam_ppl\win32\win10RS6\amselam.sys	Fortect (1).exe
File created	C:\Program Files\Fortect\locales\gu.pak	Fortect (1).exe
File created	C:\Program Files\Fortect\locales\ta.pak	Fortect (1).exe
File created	C:\Program Files\Fortect\cbfsfilter24.dll	Fortect (1).exe
File created	C:\Program Files\Fortect\locales\da.pak	Fortect (1).exe
File created	C:\Program Files\Fortect\locales\el.pak	Fortect (1).exe
File created	C:\Program Files\Fortect\apchash.dll	Fortect (1).exe
File created	C:\Program Files\Fortect\nfapi.dll	Fortect (1).exe
File created	C:\Program Files\Fortect\bin\FortectTray.exe	Fortect (1).exe
File created	C:\Program Files\Fortect\drivers\cbregistry.cab	Fortect (1).exe
File created	C:\Program Files\Fortect\on_access\win64\win7\avkmgr.inf	Fortect (1).exe
File created	C:\Program Files\Fortect\cacert.crt	Fortect (1).exe
File created	C:\Program Files\Fortect\MainProtection.exe	Fortect (1).exe
File opened for modification	C:\Program Files\Fortect\elam_ppl	Fortect (1).exe
File created	C:\Program Files\Fortect\elam_ppl\win64\win10RS6\amselam.sys	Fortect (1).exe
File created	C:\Program Files\Fortect\locales\te.pak	Fortect (1).exe
File created	C:\Program Files\Fortect\elam_ppl\AMSAgent.exe	Fortect (1).exe
File opened for modification	C:\Program Files\Fortect\elam_ppl\win32	Fortect (1).exe
File opened for modification	C:\Program Files\Fortect\elam_ppl\win64	Fortect (1).exe
File created	C:\Program Files\Fortect\fns\fns.cat	Fortect (1).exe
File created	C:\Program Files\Fortect\locales\vi.pak	Fortect (1).exe
File created	C:\Program Files\Fortect\v8_context_snapshot.bin	Fortect (1).exe
File created	C:\Program Files\Fortect\locales\bn.pak	Fortect (1).exe
File created	C:\Program Files\Fortect\Fortect.exe	Fortect (1).exe
File created	C:\Program Files\Fortect\chrome_200_percent.pak	Fortect (1).exe
File created	C:\Program Files\Fortect\MainService.exe	Fortect (1).exe
File created	C:\Program Files\Fortect\locales\es.pak	Fortect (1).exe
File opened for modification	C:\Program Files\Fortect\on_access	Fortect (1).exe
File created	C:\Program Files\Fortect\ams_setup.exe	Fortect (1).exe
File created	C:\Program Files\Fortect\libEGL.dll	Fortect (1).exe
File created	C:\Program Files\Fortect\libGLESv2.dll	Fortect (1).exe
File created	C:\Program Files\Fortect\locales\lv.pak	Fortect (1).exe
File created	C:\Program Files\Fortect\cbfilter24.sys	MainProtection.exe
File created	C:\Program Files\Fortect\sqlite.dll	Fortect (1).exe
File opened for modification	C:\Program Files\Fortect\bin	Fortect (1).exe
File created	C:\Program Files\Fortect\locales\id.pak	Fortect (1).exe
File created	C:\Program Files\Fortect\locales\mr.pak	Fortect (1).exe
File opened for modification	C:\Program Files\Fortect\resources	Fortect (1).exe
File opened for modification	C:\Program Files\Fortect\drivers\installer	Fortect (1).exe

Executes dropped EXE 16 IoCs

pid	Process
3108	MainDaemon.exe
668	MainDaemon.exe
1156	MainDaemon.exe
5144	MainService.exe
5760	FortectTray.exe
1496	MainService.exe
5980	MainProtection.exe
1744	MainProtection.exe
1052	cbprocess24.sys
3600	cbfilter24.sys
3028	cbregistry24.sys
5144	FortectTray.exe
6056	FortectMain.exe
116	FortectMain.exe
5676	FortectMain.exe
5164	FortectMain.exe

Loads dropped DLL 64 IoCs

pid	Process
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
5144	MainService.exe
5144	MainService.exe
1496	MainService.exe
4544	Fortect (1).exe
5980	MainProtection.exe
4544	Fortect (1).exe
1744	MainProtection.exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
6056	FortectMain.exe
116	FortectMain.exe
116	FortectMain.exe
116	FortectMain.exe
116	FortectMain.exe
116	FortectMain.exe
5164	FortectMain.exe
4544	Fortect (1).exe
4544	Fortect (1).exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Fortect (1).exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4740	chrome.exe

Checks SCSI registry key(s) 3 TTPs 20 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName	MainService.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	MainService.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\FriendlyName	MainService.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Properties\{a45c254e-df1c-4efd-8020-67d146a850e0}\0025	MainService.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Driver	MainService.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\HardwareID	MainService.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	MainService.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{a45c254e-df1c-4efd-8020-67d146a850e0}\0025	MainService.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Driver	MainService.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	MainService.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\LocationInformation	MainService.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	MainService.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Service	MainService.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\CompatibleIDs	MainService.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\HardwareID	MainService.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\CompatibleIDs	MainService.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\LocationInformation	MainService.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000	MainService.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Service	MainService.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000	MainService.exe

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	MainService.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	MainService.exe

Enumerates system info in registry 2 TTPs 8 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	MainService.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	MainService.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	MainService.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BIOSVendor	MainService.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BIOSVersion	MainService.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe

Modifies data under HKEY_USERS 43 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed	MainService.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs	MainService.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\Certificates	MainService.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot	MainService.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CTLs	MainService.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\Certificates	MainService.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CRLs	MainService.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CRLs	MainService.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CTLs	MainService.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust	MainService.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople	MainService.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust	MainService.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\Certificates	MainService.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA	MainService.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CTLs	MainService.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CTLs	MainService.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed	MainService.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates	MainService.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CRLs	MainService.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\Certificates	MainService.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134241993557573696"	chrome.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CTLs	MainService.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\Certificates	MainService.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CRLs	MainService.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\Certificates	MainService.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates	MainService.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CTLs	MainService.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing	MainService.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\Certificates	MainService.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CRLs	MainService.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA	MainService.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CRLs	MainService.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CTLs	MainService.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates	MainService.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CRLs	MainService.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople	MainService.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs	MainService.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs	MainService.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root	MainService.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs	MainService.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CRLs	MainService.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CTLs	MainService.exe

Modifies registry class 8 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\fortect\shell\open\command\ = "\"C:\\Program Files\\Fortect\\FortectMain.exe\" \"C:\\Program Files\\Fortect\\--lang=en\" \"%1\""	FortectMain.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\fortect	FortectMain.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\fortect\URL Protocol	FortectMain.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\fortect\ = "URL:fortect"	FortectMain.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\fortect\shell\open\command	FortectMain.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\fortect\shell	FortectMain.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\fortect\shell\open	FortectMain.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
3856	chrome.exe
3856	chrome.exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
3856	chrome.exe
3856	chrome.exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
3108	MainDaemon.exe
3108	MainDaemon.exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
4544	Fortect (1).exe
5144	MainService.exe
5144	MainService.exe
1496	MainService.exe
1496	MainService.exe
1496	MainService.exe
1496	MainService.exe

Suspicious behavior: LoadsDriver 3 IoCs

pid	Process
672	Process not Found
672	Process not Found
672	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3856	chrome.exe
3856	chrome.exe
3856	chrome.exe
3856	chrome.exe
3856	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3856	chrome.exe
Token: SeCreatePagefilePrivilege	3856	chrome.exe
Token: SeShutdownPrivilege	3856	chrome.exe
Token: SeCreatePagefilePrivilege	3856	chrome.exe
Token: SeShutdownPrivilege	3856	chrome.exe
Token: SeCreatePagefilePrivilege	3856	chrome.exe
Token: SeShutdownPrivilege	3856	chrome.exe
Token: SeCreatePagefilePrivilege	3856	chrome.exe
Token: SeShutdownPrivilege	3856	chrome.exe
Token: SeCreatePagefilePrivilege	3856	chrome.exe
Token: SeShutdownPrivilege	3856	chrome.exe
Token: SeCreatePagefilePrivilege	3856	chrome.exe
Token: SeShutdownPrivilege	3856	chrome.exe
Token: SeCreatePagefilePrivilege	3856	chrome.exe
Token: SeShutdownPrivilege	3856	chrome.exe
Token: SeCreatePagefilePrivilege	3856	chrome.exe
Token: SeShutdownPrivilege	3856	chrome.exe
Token: SeCreatePagefilePrivilege	3856	chrome.exe
Token: SeShutdownPrivilege	3856	chrome.exe
Token: SeCreatePagefilePrivilege	3856	chrome.exe
Token: SeShutdownPrivilege	3856	chrome.exe
Token: SeCreatePagefilePrivilege	3856	chrome.exe
Token: SeShutdownPrivilege	3856	chrome.exe
Token: SeCreatePagefilePrivilege	3856	chrome.exe
Token: SeShutdownPrivilege	3856	chrome.exe
Token: SeCreatePagefilePrivilege	3856	chrome.exe
Token: SeShutdownPrivilege	3856	chrome.exe
Token: SeCreatePagefilePrivilege	3856	chrome.exe
Token: SeShutdownPrivilege	3856	chrome.exe
Token: SeCreatePagefilePrivilege	3856	chrome.exe
Token: SeShutdownPrivilege	3856	chrome.exe
Token: SeCreatePagefilePrivilege	3856	chrome.exe
Token: SeShutdownPrivilege	3856	chrome.exe
Token: SeCreatePagefilePrivilege	3856	chrome.exe
Token: SeShutdownPrivilege	3856	chrome.exe
Token: SeCreatePagefilePrivilege	3856	chrome.exe
Token: SeShutdownPrivilege	3856	chrome.exe
Token: SeCreatePagefilePrivilege	3856	chrome.exe
Token: SeShutdownPrivilege	3856	chrome.exe
Token: SeCreatePagefilePrivilege	3856	chrome.exe
Token: SeShutdownPrivilege	3856	chrome.exe
Token: SeCreatePagefilePrivilege	3856	chrome.exe
Token: SeShutdownPrivilege	3856	chrome.exe
Token: SeCreatePagefilePrivilege	3856	chrome.exe
Token: SeShutdownPrivilege	3856	chrome.exe
Token: SeCreatePagefilePrivilege	3856	chrome.exe
Token: SeShutdownPrivilege	3856	chrome.exe
Token: SeCreatePagefilePrivilege	3856	chrome.exe
Token: SeShutdownPrivilege	3856	chrome.exe
Token: SeCreatePagefilePrivilege	3856	chrome.exe
Token: SeShutdownPrivilege	3856	chrome.exe
Token: SeCreatePagefilePrivilege	3856	chrome.exe
Token: SeShutdownPrivilege	3856	chrome.exe
Token: SeCreatePagefilePrivilege	3856	chrome.exe
Token: SeShutdownPrivilege	3856	chrome.exe
Token: SeCreatePagefilePrivilege	3856	chrome.exe
Token: SeShutdownPrivilege	3856	chrome.exe
Token: SeCreatePagefilePrivilege	3856	chrome.exe
Token: SeShutdownPrivilege	3856	chrome.exe
Token: SeCreatePagefilePrivilege	3856	chrome.exe
Token: SeShutdownPrivilege	3856	chrome.exe
Token: SeCreatePagefilePrivilege	3856	chrome.exe
Token: SeShutdownPrivilege	3856	chrome.exe
Token: SeCreatePagefilePrivilege	3856	chrome.exe

Suspicious use of FindShellTrayWindow 40 IoCs

pid	Process
3856	chrome.exe
3856	chrome.exe
3856	chrome.exe
3856	chrome.exe
3856	chrome.exe
3856	chrome.exe
3856	chrome.exe
3856	chrome.exe
3856	chrome.exe
3856	chrome.exe
3856	chrome.exe
3856	chrome.exe
3856	chrome.exe
3856	chrome.exe
3856	chrome.exe
3856	chrome.exe
3856	chrome.exe
3856	chrome.exe
3856	chrome.exe
3856	chrome.exe
3856	chrome.exe
3856	chrome.exe
3856	chrome.exe
3856	chrome.exe
3856	chrome.exe
3856	chrome.exe
3856	chrome.exe
3856	chrome.exe
3856	chrome.exe
3856	chrome.exe
3856	chrome.exe
3856	chrome.exe
3856	chrome.exe
3856	chrome.exe
4544	Fortect (1).exe
5760	FortectTray.exe
5760	FortectTray.exe
5760	FortectTray.exe
5760	FortectTray.exe
5144	FortectTray.exe

Suspicious use of SendNotifyMessage 37 IoCs

pid	Process
3856	chrome.exe
3856	chrome.exe
3856	chrome.exe
3856	chrome.exe
3856	chrome.exe
3856	chrome.exe
3856	chrome.exe
3856	chrome.exe
3856	chrome.exe
3856	chrome.exe
3856	chrome.exe
3856	chrome.exe
3856	chrome.exe
3856	chrome.exe
3856	chrome.exe
3856	chrome.exe
3856	chrome.exe
3856	chrome.exe
3856	chrome.exe
3856	chrome.exe
3856	chrome.exe
3856	chrome.exe
3856	chrome.exe
3856	chrome.exe
3856	chrome.exe
3856	chrome.exe
3856	chrome.exe
3856	chrome.exe
3856	chrome.exe
3856	chrome.exe
3856	chrome.exe
3856	chrome.exe
5760	FortectTray.exe
5760	FortectTray.exe
5760	FortectTray.exe
5760	FortectTray.exe
5144	FortectTray.exe

Suspicious use of WriteProcessMemory 28 IoCs

description	pid	Process	procid_target
PID 3856 wrote to memory of 2788	3856	chrome.exe	98
PID 3856 wrote to memory of 4740	3856	chrome.exe	99
PID 3856 wrote to memory of 3732	3856	chrome.exe	100
PID 3856 wrote to memory of 3732	3856	chrome.exe	100
PID 3856 wrote to memory of 3548	3856	chrome.exe	104
PID 3856 wrote to memory of 3548	3856	chrome.exe	104
PID 3856 wrote to memory of 1064	3856	chrome.exe	102
PID 3856 wrote to memory of 1064	3856	chrome.exe	102
PID 3856 wrote to memory of 1496	3856	chrome.exe	103
PID 3856 wrote to memory of 1496	3856	chrome.exe	103
PID 3856 wrote to memory of 4940	3856	chrome.exe	105
PID 3856 wrote to memory of 4940	3856	chrome.exe	105
PID 3856 wrote to memory of 1848	3856	chrome.exe	107
PID 3856 wrote to memory of 1848	3856	chrome.exe	107
PID 3856 wrote to memory of 5144	3856	chrome.exe	113
PID 3856 wrote to memory of 5304	3856	chrome.exe	115
PID 3856 wrote to memory of 5304	3856	chrome.exe	115
PID 3856 wrote to memory of 5288	3856	chrome.exe	123
PID 3856 wrote to memory of 4600	3856	chrome.exe	124
PID 3856 wrote to memory of 4768	3856	chrome.exe	125
PID 4544 wrote to memory of 3108	4544	Fortect (1).exe	137
PID 4544 wrote to memory of 5144	4544	Fortect (1).exe	142
PID 4544 wrote to memory of 5980	4544	Fortect (1).exe	148
PID 4544 wrote to memory of 1744	4544	Fortect (1).exe	153
PID 6056 wrote to memory of 116	6056	FortectMain.exe	160
PID 6056 wrote to memory of 116	6056	FortectMain.exe	160
PID 6056 wrote to memory of 5676	6056	FortectMain.exe	161
PID 6056 wrote to memory of 5164	6056	FortectMain.exe	162

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Users\Admin\AppData\Local\Temp\Fortect (1).exe
"C:\Users\Admin\AppData\Local\Temp\Fortect (1).exe"
1⤵
- Adds Run key to start application
- Checks computer location settings
- Drops file in Program Files directory
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:4544
- C:\Program Files\Fortect\bin\MainDaemon.exe
  "C:\Program Files\Fortect\bin\MainDaemon.exe" --install --hostId c0fa8cd97dab1f9342a95ac78a9b21ce6c4beea37d9cebdbc012b120209c87be
  2⤵
  - Executes dropped EXE
  - Suspicious behavior: EnumeratesProcesses
  PID:3108
- C:\Program Files\Fortect\MainService.exe
  "C:\Program Files\Fortect\MainService.exe" --install --hostId c0fa8cd97dab1f9342a95ac78a9b21ce6c4beea37d9cebdbc012b120209c87be
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious behavior: EnumeratesProcesses
  PID:5144
- C:\Program Files\Fortect\MainProtection.exe
  "C:\Program Files\Fortect\MainProtection.exe" -install
  2⤵
  - Drops file in System32 directory
  - Drops file in Program Files directory
  - Executes dropped EXE
  - Loads dropped DLL
  PID:5980
- C:\Program Files\Fortect\MainProtection.exe
  "C:\Program Files\Fortect\MainProtection.exe" -start
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:1744

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:3232

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3856
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffc5b50c728,0x7ffc5b50c734,0x7ffc5b50c740
  2⤵
  PID:2788
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2188,i,4817141387036535754,4825421552687152969,524288 --field-trial-handle=2088,i,10816169078621028487,11638244895479360030,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2212 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4740
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1776,i,17997536310929526020,4820699506668842285,262144 --field-trial-handle=2088,i,10816169078621028487,11638244895479360030,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2076 /prefetch:2
  2⤵
  PID:3732
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2428,i,17089346897858575437,1663327342865576795,524288 --field-trial-handle=2088,i,10816169078621028487,11638244895479360030,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2612 /prefetch:8
  2⤵
  PID:1064
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3068,i,6931567790441848232,13344611427073606327,2097152 --field-trial-handle=2088,i,10816169078621028487,11638244895479360030,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3088 /prefetch:1
  2⤵
  PID:1496
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3076,i,18272399792027825375,15588521627973784408,2097152 --field-trial-handle=2088,i,10816169078621028487,11638244895479360030,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3144 /prefetch:1
  2⤵
  PID:3548
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4356,i,9808097564545567482,9979234060079192224,2097152 --field-trial-handle=2088,i,10816169078621028487,11638244895479360030,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4364 /prefetch:2
  2⤵
  PID:4940
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4756,i,8538341561065743006,6641195840971405037,2097152 --field-trial-handle=2088,i,10816169078621028487,11638244895479360030,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4760 /prefetch:1
  2⤵
  PID:1848
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5528,i,2675696469045997843,17462438828399189962,524288 --field-trial-handle=2088,i,10816169078621028487,11638244895479360030,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5452 /prefetch:8
  2⤵
  PID:5144
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5792,i,17666272964621282193,11021061284131995006,2097152 --field-trial-handle=2088,i,10816169078621028487,11638244895479360030,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5848 /prefetch:1
  2⤵
  PID:5304
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3316,i,16308914327489010560,13767430722051898798,524288 --field-trial-handle=2088,i,10816169078621028487,11638244895479360030,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2976 /prefetch:8
  2⤵
  PID:5288
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5564,i,13560622332025468321,10315420884289496729,524288 --field-trial-handle=2088,i,10816169078621028487,11638244895479360030,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3068 /prefetch:8
  2⤵
  PID:4600
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3088,i,11135154708341166034,18057987400702349573,524288 --field-trial-handle=2088,i,10816169078621028487,11638244895479360030,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5980 /prefetch:8
  2⤵
  PID:4768
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5968,i,10283486754389039983,18389574644849039909,262144 --field-trial-handle=2088,i,10816169078621028487,11638244895479360030,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6044 /prefetch:8
  2⤵
  PID:4652

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3212

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:5236

C:\Program Files\Fortect\bin\MainDaemon.exe
"C:\Program Files\Fortect\bin\MainDaemon.exe"
1⤵
- Executes dropped EXE
PID:668

C:\Program Files\Fortect\bin\MainDaemon.exe
"C:\Program Files\Fortect\bin\MainDaemon.exe"
1⤵
- Executes dropped EXE
PID:1156

C:\Program Files\Fortect\bin\FortectTray.exe
"C:\Program Files\Fortect\bin\FortectTray.exe"
1⤵
- Executes dropped EXE
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:5760

C:\Program Files\Fortect\MainService.exe
"C:\Program Files\Fortect\MainService.exe"
1⤵
- Maps connected drives based on registry
- Remote Services: SMB/Windows Admin Shares
- Writes to the Master Boot Record (MBR)
- Drops file in System32 directory
- Executes dropped EXE
- Loads dropped DLL
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
PID:1496

C:\Program Files\Fortect\cbfilter24.sys
"C:\Program Files\Fortect\cbfilter24.sys"
1⤵
- Executes dropped EXE
PID:3600

C:\Program Files\Fortect\cbprocess24.sys
"C:\Program Files\Fortect\cbprocess24.sys"
1⤵
- Executes dropped EXE
PID:1052

C:\Program Files\Fortect\cbregistry24.sys
"C:\Program Files\Fortect\cbregistry24.sys"
1⤵
- Executes dropped EXE
PID:3028

C:\Program Files\Fortect\bin\FortectTray.exe
"C:\Program Files\Fortect\bin\FortectTray.exe" 0
1⤵
- Executes dropped EXE
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:5144

C:\Program Files\Fortect\FortectMain.exe
"C:\Program Files\Fortect\FortectMain.exe" --lang=en --firstRun --runId=80fd8aa3-8724-46a0-93c9-bb0209ae4b35 --vpnRolloutUpgrade
1⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
- Modifies registry class
- Suspicious use of WriteProcessMemory
PID:6056
- C:\Program Files\Fortect\FortectMain.exe
  "C:\Program Files\Fortect\FortectMain.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\Fortect" --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=1952,i,5808675195416624444,1881315510495588959,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=1948 /prefetch:2
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:116
- C:\Program Files\Fortect\FortectMain.exe
  "C:\Program Files\Fortect\FortectMain.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\Fortect" --field-trial-handle=1952,i,5808675195416624444,1881315510495588959,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=2344 /prefetch:3
  2⤵
  - Executes dropped EXE
  PID:5676
- C:\Program Files\Fortect\FortectMain.exe
  "C:\Program Files\Fortect\FortectMain.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Fortect" --app-user-model-id=" " --app-path="C:\Program Files\Fortect\resources\app.asar" --no-sandbox --no-zygote --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --field-trial-handle=1952,i,5808675195416624444,1881315510495588959,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=2744 /prefetch:1
  2⤵
  - Checks computer location settings
  - Executes dropped EXE
  - Loads dropped DLL
  PID:5164

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Pre-OS Boot

T1542

Bootkit

T1542.003

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Pre-OS Boot

T1542

Bootkit

T1542.003

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Remote Services

T1021

SMB/Windows Admin Shares

T1021.002

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

7z.dll

Path C:\Program Files\Fortect\7z.dll
Size 1.6MB
SHA256 aab15d2aa72dcf7ed94cfb0e5a01ae61160e7a13fbeb7fc9bb1c5c95e7827d73
MD5 f7e66a7f2d6177ab3e2c3e99deefbc39
SHA1 b10ae634f0b301ef4f835514a4141c09a436405d
SHA512 ef51ec4fc2f54ce9126543e443ced8a44fba08b99a29a2c34dca2eeb9f456d34b02d03e91c9ffd3c07c77d5a2aa3ad52fb259f22d4680a84c06df672f23ba8bf
SSDEEP 24576:T+clx4tCQJSVAFja8i/RwQQmzgO67V3bYgR+zypEqxr2VSlLPo:KclmJSVARa86xzW3xRoyqqxrT8
TLSH
T16E754B6BF6748260D0B7C075C5D2AB96EEB134868B3096C752859B3D2F17BF6C939320
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Fortect.exe

Path C:\Program Files\Fortect\Fortect.exe
Size 826KB
SHA256 93bf590a2af855ee00af6b488e97ab1b1ddffe10188a9bd73e8a1117f0366958
MD5 1af0c4a3d377f96de60a7fd1f0760238
SHA1 125ddcb68afb6319b5d167b2c2ed52171c37c73e
SHA512 f0cfd31d3fde5255282b0aa54675e2a32388642926e30786a3a41b655ce7468d82da43760ac959f3cb7c7bc7bc2c6b906d9fa91a0eb97e33a09da2242e162a5b
SSDEEP 12288:tYl+bLrEzUxNKNIq95DjuWKqxMaYyBePU5777epjLFerRUklT:tYl+bFQIWjuKSFzQRJ
TLSH
T1BB05CF73EA0CC499C05E43BF9361C37B85996D5DA7E780C2E641AAAD103254CFF385BA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

last_server_response_json.json

Path C:\ProgramData\Fortect\conf\last_server_response_json.json
Size 272B
SHA256 43d36d70c3fe06d9124d4e691921127ad4818dc6b29e1aea5dce56021668cb0a
MD5 9fe04509d98144131bb01e1aecf077c2
SHA1 563baf61cc5b128e53cfbc52bc94d02a710c1f00
SHA512 932a77e3051268a9de6e1240c97ae550a1e1408037e3172ff9669e799ba22ed80121a2e074384267763658a7c56e816707b5cb2f88c369bd307f65cf9a57e7a9
TLSH
T1B3D02B652952A4B6792067929B2591996E3062FAD6104C4126882866D411CC866B4178
MD5 SHA1 SHA512 TLSH

Submit Download

license.json

Path C:\ProgramData\Fortect\conf\license.json
Size 320B
SHA256 1fc86aee9bc7fbf8c932bd47fa4a203a6439d1921e4214182fdd8c2690ae7c9e
MD5 8a1cf2739dc6ce7e85aa6ac8df51bc89
SHA1 f4781a7a1f86e2f170e3719890b6bffba33ed3ba
SHA512 8f5382522cf03f738077c7f7e4ff0032d1abba56f378515b289dfb71fca739bac5bcec056380c070babe196cd60a655f3ce8753c16595b3e49e22ba867c9cb1d
TLSH
T147E07D95C0A07BCF813A0696C71E447D94623688865BC87F61BA1836F1171ED17B83B1
MD5 SHA1 SHA512 TLSH

Submit Download

license_witness.json

Path C:\ProgramData\Fortect\conf\license_witness.json
Size 144B
SHA256 cf062c8b4975dd9636b1bcdee3690f6e02b4a902729b337c73e0b5a18ae9d100
MD5 ec36d4ecb6bde5e4f2fef09b65f8f240
SHA1 04d5fc16e117cc0d644a542db273d76ebbcdde60
SHA512 cf0ca5c303e5baeafa31e6bff6841914ddf3dd7cfe236caf11e8c66f5055fa55b6ba43fdf939c6fa86073a2ca4c5e6990f222ccefb32840d131f7acc57a51519
TLSH
T17FC02B838B23314449D98B019C1A0F3DF54C081304043091A46C1913BD0D0F88E49482
MD5 SHA1 SHA512 TLSH

Submit Download

settings_user.json

Path C:\ProgramData\Fortect\conf\settings_user.json
Size 416B
SHA256 810f46d0167643ce7c715e036f7f45cbea755abc753e32b9506dade8947ff493
MD5 56418ea389ad92cbf56ac9952808a46a
SHA1 915b60eab9da2cb8007629f75b61f5b645aa350d
SHA512 db9bfaafd529eafaa51d753329c2b6c2b9f02e05b534c3c115fbc0873fc2c2c08a28a3592aee8e81ef47ef48c9388f10ab818e264476a03c8c7e70f599b6b67d
TLSH
T150E0ABEC53A58213AA5B765A6662CEA3828A8060065381964F777BC5B1BC9679A73400
MD5 SHA1 SHA512 TLSH

Submit Download

driverUpdater_res.json

Path C:\ProgramData\Fortect\res\driverUpdater_res.json
Size 96B
SHA256 7014dfa6c6c839d1c8cac94bed8d425161f60ab58ff5ebf607febc8b3ee0dea5
MD5 49f301a14dec9d757e6c0c72e702024d
SHA1 3dbc9a85f455653ee3e34e8bdeb2edf7f4c57cc5
SHA512 aa6dde3d815cadda8ebc87dcba6537af7193a1ca4c47d3be49bac9f182fcd05dbf63620d869e9026f6c1a602eb71bf2c10a882d33d94d80437dab508fd9d563c
TLSH
T1C0B0124518130C17590D99804CBB5619318170E05153C03338D1514B9C359E87C35090
MD5 SHA1 SHA512 TLSH

Submit Download

44419f55-b458-4fa1-ae86-e874516cb736.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\44419f55-b458-4fa1-ae86-e874516cb736.tmp
Size 649B
SHA256 0ca47489791d8465e1a0927e573a5676aa735199002e70a197274011a7b33a1e
MD5 2107239d509f29c06a672178991ba57e
SHA1 2f9d343a9af9c65fc141a6c45e1ee8209e6b87c9
SHA512 67d2a9048f1b60d06d0bafb239712cad3708b0a94db1cdda59dcc323a3d9f7f5e4f88fffed5242116cd21d6eda3e264e05b5307a90de52561db26aa50e8ff1f2
TLSH
T14CF0F4B5CA22AC3728FC1B2974A94B0BE751135B3740985B3B3D820C4FB463B859681C
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 96B
SHA256 16b1b3edff932d6041b660069a48e34f0c51091ddf9d6a600ecac9848df431d4
MD5 35cfe0e845de731349bb3c54625e2f07
SHA1 edd3418b214ef95c10ae45732f011e0f4767bc7d
SHA512 3092ba219fe94b0f26fdd832e86e29c2c20d6767ed8af4e4e38681bbd67f3d7422031b9c2294ad54d6c6843ba23a898a3befc6c57dc42540f8b85d442e051583
TLSH
T17CB0112022880003CB80033A2EE0022033200C3E0B030AA383E880A080F2AB2AB0B208
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 528B
SHA256 d953ff1e079804814d63bedc4e0be4a7a9a0e71e94a9aa812c801ede2939ff17
MD5 0fa54760d015984d5541e2fb7c93dc47
SHA1 cded91ee0f3ae1943fd17ffa2213f21f32dfaba8
SHA512 05e86c8e79d756bec06e0d75efa7988d696560bf3831a00dc79d7c260352a7bb73aa33bcc5ce24b0217db462c66156fa7dfec149573562e9451b7221bf93b91a
TLSH
T1EFF068F1424D9242E7D4437E39E97EA46B0198261213342BD3B5C027A7EBDF271B9D45
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 8e9cfb87fa14ad0d6e024e85411f4cc5624e4a4d6cad16c5b76b877b04ee60cd
MD5 4d6cc1899b9e90d0f9cad0aca5667c47
SHA1 7e3d4311e499237b9fef0948ccade57996a9eea1
SHA512 51eb0572ecb78b641ab1003bbb883846c2ddfe96c73dba5ecea2ba400848ea2cb25c802f538572b39fd984701e4f049102829577011574e4ae8d896f6bd61bf9
SSDEEP 96:DTCGNx90lLibmMPcTqTSNh/Ty+Z3cf9/m/3/z/JK:DTCGNxalLibmMPcTqTSNdTy+Z3w5Avrs
TLSH
T1A2C17CB3C7ECC52DC81156F4A7256E1FCE291A14532C3D26C8D8AF4B93E28B2D21169E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 b53729a884a473b9d2729d9f2fc447dd8d41e2e945a60851b748774923b776f7
MD5 4e76b15eb8e759ddc9a84e1aa0616a83
SHA1 dc25f0997d37b4ba6fe9fe43c54e920d7346d12d
SHA512 58b6f55e01a2484f1eaeb2c642fa1c4e12636cf3398b2848ca99592bdc3a4e45a04733fe16386f942d252c58134378958f24717ebb7b26d177c08a45c176e5d0
SSDEEP 192:YRvcBzZY6pjkShv7MF+pAPRp2zdQ9HHsb+WNn304Fq2Q42XeIOgVyIsnAUgtaJ:YRvmzZwSxgoUXz1wEX2N2L8
TLSH
T16E42C92FAE1169776CCAC22AFD667757E7F5102221C41D84EAFCCA2C15E76CC221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 9c0709b018de46cfb22796c6284f0c04d2d8b50fa6465f971163f36399191eff
MD5 412e8a2e772024acbb9412661ee02ed4
SHA1 47bee1c4fb3592de2b1333b15b762bfa3ce8ca3a
SHA512 a742f65965225126553d2d35f53a98f08f5bbfe5debd21d2c0303fe5894eea8691be074bd874d2a05d16497fc4dc40b393c7df28df14aba89ac5140063b73151
SSDEEP 192:YRvcBzZc6pjkShv7MF+pjPRpkzdQ9HHsb+WNn304rBYI742XeIO/VyIsnAUgraJ:YRvmzZESxgoNXx1wEKYV20e
TLSH
T1EA52C82FAD1069776CCAC26AFA56BB57D7F5102221D41D84EAFCCB2C19E76CC221701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 34d3b150d9ebc3413240a436dcd8cc4d2da0e46d00a681d2118263aea9d32f3e
MD5 73285efb9f7ee0bd384426865ccccf8e
SHA1 51903f2b7a36fa90857257254c2bebdfe5da7eef
SHA512 e9bab3e8a04453bd7ca516137298f57170d38058ccd5df170108532fdb6eefb2d5ae94de47967a5242cb07be597050bef4f69d7f740877c626e131f01424e28d
SSDEEP 384:TRjPq7KxkXqKf/pUZNCgVLH2HfgslT37pLuLcSjFgXODPO+ErU3voHGjBm2oR0h9:TxPq7KxkXqKf/pUZNCgVLH2HfgsV37pM
TLSH
T1287219676C4C8E7B0F94CACCDC167F4F9DB5025B65EA886482FA582903D5ADF01061FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 671e252909c1dc5253a63a84fa21e3db5b2cfd97cb589c93b23876bee75c0017
MD5 04bd6c36d789ae2cec48c1e0e1bbc3c3
SHA1 9633727ba6458dd72067f821e6c700a247448439
SHA512 0940ec0ae0332e81b4262ec202b1d570205a67a433a626458081cba72446e0719ead43d65d5dbd11bb7bb464387f5026310edbc6ecb1a7dcc1577a4ada83f400
TLSH
T10AB0125084015201C00606F8315228C872189F10960A170547E0BE3288261609125160
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58b9d5.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58b9d5.TMP
Size 96B
SHA256 5dbb285f25875f8574be9ab3b0f66642c65e83765492dccb46f01a688f654d46
MD5 f8e22443422d6bd986c95fa623c1e92f
SHA1 b9e4337c741ac87805ad7be95be6b1078496d1bb
SHA512 8ba2513d8527f5c27a3e74da1be2a0ac0ac7721565659a9bc3d3560817121d431773084f2a45ecbf0bdbbedb7f835cb6fc04b6c84551bb3baf7866361b3af108
TLSH
T163B02280C0023303C0020BF02880A3EC3E30CF20C203220B83E00A23CC302B08230820
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 f58876df8173eff47560ca554164dc6f8355c1320e7506a75d979706286d3d34
MD5 da60d4f506b276287ce5a6740fc75d32
SHA1 0cd3fa9a383e2f25384c05f47857dea7e4c0ab8a
SHA512 098268df858aa61a5390ae26c1ac940b8ae53492ac8cb27b7c9427e593d0beac97d445107b25f4bd7f93195c5043a18753f952f6af30615a49d26118284577f2
TLSH
T17BA0026131C1AE12CD1482F020D1AB4467146A104601EBC7B39044549DAE1A082CA348
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 cfa3b6a8e87f3718d316ec312d8ae455ac85148401934f62dd5009eb35b10d0f
MD5 a27f2dd5bf31f400c238c4a2d719d455
SHA1 fc5abac64dc512e4bb18eb9ca9e8bddb88f2c0f0
SHA512 57d7537d4cc7a52f169e81b4883dd0700ca88f8a7018d18af1d8cfe6fa3f81661c1b413ffab914cdfa28955fc59a23168c3487faffd1db0fada1820933257dad
SSDEEP 3072:/IGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMM:/jm7Rkm1tYpBeh2BAoM
TLSH
T1FBC312275E75E8375878BB4EB08E0B1F1EF14AA6D930DA92C8D86B0467F97CC1A05D34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 232KB
SHA256 ed8cb135c571acdf1be157d52665e93ad8462890b4b9704525255a142e18a71e
MD5 cc3d80db69e3527b28e5c43f8d671341
SHA1 f54be5d2de6e8664c0d9a0ea7efc9e837ef24b7e
SHA512 922ac40f5d2ca0cc9c974035281046cfe5f4526df886dc53d9db85babc21a98cc9a0e15f3cc0dfbafa6bf7555fabf032316b3da0375c5bc3195cc23cc6c62569
SSDEEP 6144:DoS/m/kPmN86MiPEURFgI1PTDvm7Rkm1tYpBeh2BAot:DOcONRsi+9oBGcAot
TLSH
T1D03412379D1BBD360978BB5AB14D622F0EF1AA7BCD254E89C4C84F449ABD8851F04D38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 231KB
SHA256 7ab666a73973cb29524d45e3a5c299c894261ec14528dfb129021229665c92f1
MD5 c496dc7fb9778dafdc3ca9bf0e75f5e7
SHA1 127923701e2d247fc66a94d5013bef645875af78
SHA512 e23411d622a8cc0205b1c93cd1ba61283fc511477d0063b8896d3ac242eb6ee8bab11cb07abf540fa704094c0ca4c6467eced0bd2fc1d4d3e16811879f4cb960
SSDEEP 6144:wK/m/kPmN86MiPEURFgI1PTDvm7Rkm1tYpBeh2BAot:wncONRsi+9oBGcAot
TLSH
T1483422279D2FBD3B1938B756B14D632F0EB1957ADD264EC9C8C84B809BBC9851B04C38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 231KB
SHA256 c8847a161d4c1972cfbd1ad482c0d32ba3abddafd1bcc7da3d45b0256283f753
MD5 e27dd76f13e382746e9259dd76ce1a3a
SHA1 5feb04f110a63fcfd229e38f6fb35945ecd46a9f
SHA512 84b20f0b38de1d68fd586c2b8ab253f52f5fef54427c092d23b391652f28e7b55e3d0cd59f6ecdd2abf0640d55a97f5d533f80cd25ebae8690a88bd71e97c700
SSDEEP 6144:DK/m/kPmN86MiPEURFgI1PTDvm7Rkm1tYpBeh2BAot:DncONRsi+9oBGcAot
TLSH
T1FF3422279D2FBD371938B756B14D632F0EB1957ADD264EC9C8C84B845BBC9891B04C38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events[2].htm

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\V93YYQQI\events[2].htm
Size 2B
SHA256 2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
MD5 444bcb3a3fcf8389296c49467f27e1d6
SHA1 7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
SHA512 9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570
MD5 SHA1 SHA512

Submit Download

HBEDV.KEY

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programdata\av\HBEDV.KEY
Size 1024B
SHA256 1fe68946a99b7d6d57cdc7666df1123a9822b2ddab595b22aea5507fb3b98bda
MD5 43ae0011496c84ff2ca58626b819a9e2
SHA1 cce8e40f8c0bd54de798a116b85f45c5117760e6
SHA512 3bc3e6ec20b53e37f986e92c62a0d488a2d6a795e315484de8eaea4e886470bdb8e900d46946fad657c0d8a9ed0b64e915a7ae5f542f101db69703cc2697ad49
TLSH
T1BC1198411962954FE56140BBD6611E10B4B30A414DDFC9508D0B3654A837FBD9757B52
MD5 SHA1 SHA512 TLSH

Submit Download

avupdate.exe

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programdata\av\avupdate.exe
Size 5.3MB
SHA256 aa48b6fa009600eff64bb7f10ec0eab267a62d0bfad486a525ab67aee839cedf
MD5 5d57f93fd079904ee347eac67aedd328
SHA1 027e9c84ecac63492909a5ca941e54decffd0158
SHA512 b810a0867f3b8ce6db1d053fd1b181ce33300a5224e192d76abf87d0123b35b47c9253386d22768c1041ff68943b38752b0d9a05eeb0e3acec6f9659e48c6568
SSDEEP 49152:oGtlqZIU6iGBVwASOJthh9Nyh8JCf4Jec0iWDWLIh330FUvHA2PJhRZbJKan2b4Q:H+UZdA4JGj/vxdvnXkW/EjzBWGdtJ
TLSH
T1EC468DA9B6BC00DAD87AC1BDC2865227E771B41513B057CB5A648AFA1F23ED01F7B740
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

avupdate_msg.avr

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programdata\av\avupdate_msg.avr
Size 6KB
SHA256 17a0c15c839a7be1a57f8abab56efef5983e212c732e0b33b6f012f989ae8d1c
MD5 fdab440f4d6a09f0620c6e097f0ec658
SHA1 571c6bd17f0d641545c279dd4b0cce140e90522d
SHA512 787ae96499d8b63f7239bbdc6384a9f9bfd7ad27bb160074290b2c1355ee8272abbab1adfb955ced14d1f82d4114dc894663c12ce3387d031f48601a44b8c8c7
SSDEEP 192:q2NivlgzhouXkYVrvhWpxrjRFJKnnNsWNt5knl3f:ivQhoutTh+rjRFwN8nB
TLSH
T1DED17D390051E952F3B795B9408A888E8FD28C53563E43F19CD355C679D2B290AB5437
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

scew.dll

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programdata\av\scew.dll
Size 314KB
SHA256 dfa555b946e894757c403a44bed8f50ec42edd27040c4bc2b04d9a9e6c5d611f
MD5 22624d392cf31f572c535acdd72da78d
SHA1 53189e0d70633554593df60b0e703136166b99ca
SHA512 71c996fd3e2a1418a68a01965362781dc3f782fcec894f09c510456efb620df1ffb8b5d188949f9081d54e799e274ac7e6735a62f4c222cfdff90b2ae45ad968
SSDEEP 6144:NhDOH0LUz0Zot8P/saMtR/22ku1a1kU/4RnN0ALEiyqB:vDhxZot8P0av2+b/WnWY/B
TLSH
T123647D6A72E680B6E4E3813CC9A30516D3F279610762D7DF17A0866D6F37BC15A3E360
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

conf.json

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programdata\conf\conf.json
Size 348KB
SHA256 b7b39f5bf92f6b5bf7c06ed13043114289fdd93723fa117e8cf22b616c717ef7
MD5 5d079db712b775c07b91029108f373f4
SHA1 bd1a0a388687cbe39d2f6d63a459f638d100549f
SHA512 2facb98daf3a2d8e15bd598b84b09b60a95126e194505fc845a298af6132dca1791adaf69814b0632c5e3e2b36bbb1fb90540d97bd0f83269032270982be567f
SSDEEP 6144:jc2fYlMVFV2cJ3LhselAz6ydmF75cw9zLdVAZxZ7j4RdOa148otlt/yLt5nnHF/b:jcRmH2S3LhnAz9oP79SZDoRdOa1l+ltk
TLSH
T14B7423552F31DE030BF524CD076608BAAA19EF75526226D8B3DE39F6E7F8011F693881
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cron_MainNetShield.json

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programdata\conf\cron_MainNetShield.json
Size 1KB
SHA256 e22e41dd0e1683201262bf8bcc6e06599de1989e4b1b9aed3362c88a908ee087
MD5 02e100031a02b9ce4a5a12a4b64a96e9
SHA1 163a6cee924d631c689b832f87299e87c0a7fd8c
SHA512 7d4647017fe2a0a5374d86d2698983518a07332c7281a7a159fb01d7c12b8db6f6b66df104d4d5aec0d567f881375b559ce513245ebd585918cba4e7e9406657
TLSH
T13011B930EC3B7567899A244A8C046A779E37E24553986E58DE1AC2D66CCB510E1CB451
MD5 SHA1 SHA512 TLSH

Submit Download

cron_MainService.json

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programdata\conf\cron_MainService.json
Size 2KB
SHA256 75c28a70b709700376251d42565f54682c9fb7467027b9ddc52524910836afe1
MD5 4a8563ce5d3bd929f10d3cd60198f6aa
SHA1 70062d7163ad7098053195d96b1d55756bc2096c
SHA512 ce716aa55caff155aaf9a06004e18f72afa68415a14098c942ba1b98dda0a3d35852e57e670f3d43623ee2d268226758d07e64fb7474e41f21a593144b846a0e
TLSH
T186413DC75015519B03F6E75C45482A15961934E088D7D87A83731BF0DCFA0412452EDE
MD5 SHA1 SHA512 TLSH

Submit Download

netShield.json

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programdata\conf\netShield.json
Size 4KB
SHA256 96d6639f6cd138888fd6dac7179aa2560a8405ae209b74cbb3d595f51fb8d7de
MD5 7458cfd72830839d637eed5543819e1a
SHA1 3f5be72db8ef8885d1f6acccc1e6d444dc9dbe13
SHA512 77b10fd232d1c87991270808c5d4e5787419ab8983ac7edfb528e87ecfe7c9e9f3c498c53f487a7b78dc6dd736252cef4b71fe4de29561a840cb261d46a20681
SSDEEP 96:bjxh+34VW+uxfQdvUesTqFT8jcRIFuaChkwJ7lYOu7UcvSFL5vKDnKbrDK:bs+uJmUtncRIFhCD7lNu7Ucv+90KbrW
TLSH
T122A1AE2282620C476E267D732E02EC4296A85DBBD34277F2B18751B70C17D996D252FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

netshield_user_setting.json

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programdata\conf\netshield_user_setting.json
Size 16B
SHA256 b1e12a43a5408c7829aa5a6ff7181034a4e485028a7f7c7a9c1d386cbf726376
MD5 51ea1a64bdefacab9dc02ea17f9aac9e
SHA1 6951953106c3e0218d492231812a56993f9403d2
SHA512 60d7ea7f0fbad362900c11fbd575fa06140f6b819f4411a75914147a571723a057a3d50c71fbb748f87f09e0ea60c4142fd5831e11bd1bdb9ea7a492400c8451
MD5 SHA1 SHA512

Submit Download

settings.json

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programdata\conf\settings.json
Size 69KB
SHA256 95b9520b8a5cba561fe4abaaa8c0216378075ace1a93f07d6d3882ac655ef78c
MD5 aea22adff5eb590cef01dff68601ca6a
SHA1 1faf877d7857181530514be5c7f6e1d6fa0cbf71
SHA512 37464987eee04b45e132de007987210f13af8dbf3d9bdff45aae8f206398fdfb385a7b7386b13a9d3f5072bfbace265281a67053ed5e8e83b54bcf2a3d05b876
SSDEEP 1536:TbpwvGRkoP+3006mztl6XZiyoRGjPLGt1+wy2AkZ//cZdt20t:Tbaqks+XZztl6XZiyHjPLGtkfkZELt
TLSH
T1DA6302C1BCA5D4424E5994822EAD3C4ADF6E24C8950E3D4DB82BC4BC27CF5705EAA671
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings_user.json

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programdata\conf\settings_user.json
Size 400B
SHA256 bfd410927ef16994229865873aa0c530650a21555682b8b45571167f719c3c3c
MD5 dcd031540d8a4fc74d78019bf661487a
SHA1 ea7d537e79e2cd7578c331b78ffe532f1f5c63f7
SHA512 462e75cc3364ebe5af223be886c689d9278d945fa39100d11577397b8c337f99220de4fba9ed4b41ba5e762dcd5cf0b645fdb58a3df261731167d181cfa0f36b
TLSH
T153E0F116D3FC07D5429F4EA1A96783DDC7FA134005E1E4847B7C6B97226C016842A100
MD5 SHA1 SHA512 TLSH

Submit Download

sil.json

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programdata\conf\sil.json
Size 209KB
SHA256 9f0b69c72c4e7d89e6fef292727a5290e31daa1747bbf5d5ab20b40d89e6104a
MD5 05b71568dc6d1faba191ed9d5a31942e
SHA1 413e01d4aa8ae80735f44150a2b43809d6ecbdaf
SHA512 960ae0b9e74a00b90f0a2f6a3d03d6a007a96d9237e5ac2c690b57a05fa4d2e03e373e8d84df000079bd876d6105ce989c887aeebbfe3ca95a9f57566cb6818f
SSDEEP 6144:Z9KupmrtJbTR2ikU7O8W6S7gNZ7u9Fpp/ERrhWy/D9ph:Z9wtdIikWO8WbyZGS9Wybh
TLSH
T1EF242322E58381A722F8D7AF8C5EEAEB7AE135D645D48CF4D71063A6614BFD9CD44004
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vp.json

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programdata\conf\vp.json
Size 1KB
SHA256 d1d339afbe36471183e96eef1f942836a83ed53b73aff0da400aa6560eb224ae
MD5 3254e00e45a352340e9990d79640a506
SHA1 ed7bf880439fbe7865e107d3de5cefec44800f46
SHA512 39f7b98de323df4505bbd3b756a0843caa3f7409d085687658fb7b96aa31149b6e5aceaed6b0473494da2430b40933c30e535a50b89a0c842a778432f6c8b400
TLSH
T1FC21F61BD81EC7087AF1C446920D0CFBA38A99791C02B823EAD8F190970E5A47C5A56B
MD5 SHA1 SHA512 TLSH

Submit Download

AvProxy.exe

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\AvProxy.exe
Size 4.6MB
SHA256 a4cd3bfa6f7cb388f7f11b9a0d1f424cbf9e2b34de0fb808b0acdf1b77dd260d
MD5 dcc7a918d5ff03aa410ba4afa7ded97e
SHA1 8eb3579dc5b6857e06936888e57abd66348b84df
SHA512 c509ba1cd06ccb9ca02d1588b8be4441a9fd0f14526c528eaddbff86fd2a36ed7cfdbe00c74436b9d91d9c17a64186a350dd96ad1f36a108fe50414c0c36de51
SSDEEP 49152:L/le0V9zFE7h76pHOYylCdHoFmqIloUgPIvjD/g94N6JEL+SioHYSdmwsm:L/L9rHICQCJvgnJGHYSdpsm
TLSH
T15D266C35A69901E4C0BED37F8B424137CAA2741493F346EB45D1499A1F17AECBE3AF21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\LICENSE
Size 1KB
SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
MD5 4d42118d35941e0f664dddbd83f633c5
SHA1 2b21ec5f20fe961d15f2b58efb1368e66d202e5c
SHA512 3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63
TLSH
T1B511861E726453721C56136055766C84F12F725FBAAF2784246EF384233746CE5FF844
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSES.chromium.html

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\LICENSES.chromium.html
Size 11.7MB
SHA256 8df32d3dd7520440f46d7d8693aa57933099c38a242e6ab036095275bdae2757
MD5 9db1a2808df22fdad734c55df6ccb5d4
SHA1 3ffe916ce559386545c9d749f25e6f57f649f3c5
SHA512 42c1035aa8f2b3ad92d1a607b648518bf9449f767fe184c45f180d61ec14f45864676cbf1ecd0baf51e310fd695a286e8579898638567ee6e93b268d6784e526
SSDEEP 24576:S9dQL6poq6jBCjK6D3UwRmETlmfPKjZ6ojK6QjZ6UjK6ajK64jK6cjZ6ijK6b6ck:Sv7eGAyWPbX8meu
TLSH
T152C6A52F7B48037306C642A26B8B65CAF31F903F3B561654345CD1681F6BA2983FF699
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MainNetShield.exe

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\MainNetShield.exe
Size 5.0MB
SHA256 395a12e5f6f33e6a0c7bd4573744e18eb6ad9f3f58cbd2d1bf0f2ff9820b7cac
MD5 a6a952ce9e04235ee3093d06c57e0633
SHA1 ed6f0fced63e509ef532344db134ba0a9f6574be
SHA512 977ae84e3c99793e2f0039904c953602df24d62565ce7b8124bb6bf6a0f937ea7d9b0a007c3a8d24c87e79f49d9916462d360b35debc97d3255c566ee6bf6e05
SSDEEP 49152:ax6Qbunyo6zacgaLowLAiRPRjO00qcB0HwphadGkoXAF3LYSdN2wRatK:ihbiyTz1kwL3S50mwdLYSdgwktK
TLSH
T1F7365C35A6A800E4C0BED37FCB524137DAB2741583F386DB4591495A1F17AECBE3AB21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MainProtection.exe

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\MainProtection.exe
Size 4.7MB
SHA256 c7c6eb1f2f243bc53e399ddc8c97c4b895f47f8e25755ad2fb86c1fa20ed7493
MD5 1ea077b87248b413403517409c0c1ea6
SHA1 9056b1ce579b4059d27b1d59ce64af774ddc1b7d
SHA512 b4e7cd679dd7e89191caa6567d0899a3f7b36e577804e58f116c234b15e3291c878c11add626a5322d2118ebae0f4bac81632e0a644465e5c4cfb01c57a998ff
SSDEEP 49152:Pd/rtnhJQqOwN7sIE/s16D/5VW5oCrfYjL/4hKUBriFmFmA4y/Ioc/VYSddat1:PdTR48E/PqM4hFmA4ecdYSddat1
TLSH
T138365D36669801E4C0BED37FCB024137DAA2785443F386DB45D2495A5F17AECBE3AB21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MainService.exe

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\MainService.exe
Size 7.2MB
SHA256 d1c15fcab88f98d22065fc5cf2ab623417f923c2da9764e5e147d95123869db5
MD5 e3adeba6534e1057c5ff0f596467c6e3
SHA1 9c32d856f1f474afb9fb1941e132f39bdeb26d31
SHA512 c11661d7af850358b7b8f4daae5643543ecbd235e7ae02ab4f46cde9948e8f3db70308a059b0a5f3cfde8a70ba1a5ab2e9aeb6fbe666e5a56a17cf5e04813323
SSDEEP 98304:uFMrP6fII2yAKxBqm+nGnngDArHCVTisBO2rrYSdMJLt1:u2rP6fIjgIm+nGngDAr7sw24SdMR
TLSH
T110763B39679801E4D0BED3BFCB420133DAB2785447F385DB469149594F2BAECBE39A21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ProtocolFilters.dll

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\ProtocolFilters.dll
Size 1.3MB
SHA256 eafeffdc2a91cd938b3c2d3359a66b6ed307adfd8119638c5ebe27b40cef14b2
MD5 2ea82e47e6d57bfced12bad3543f2c84
SHA1 bd8cdaa729dea24c9fafe4b602556cf2af09fdf1
SHA512 90242d00cae0d3ab0abacd2faba1248e5ea790eff610a058753f1830a44c117529c2023dc2e9295642bdda9de88adb6e8a05a8d48e693902666af4142caa9223
SSDEEP 12288:xOyzbIGFtPCLNMGkjRJmlOG9A8VFxYk6XzTfY7zAHhlysWkZLWheP:x3IGnKLNMp7oOG9VvB6XzTSzAxNkeP
TLSH
T14F55281BEA7A02E5C4B6D138C553663BFDB0745A833493D793895B5B1B22BE0E93E340
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ams_setup.exe

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\ams_setup.exe
Size 192KB
SHA256 b5673a04bbda393d3507f56a3aec7c6f0addeae6872cc8e070298c4b61171c89
MD5 f8d3d3e00490bb667e57d8aeed5272fd
SHA1 d8b2df16e4f3bf6937c18e83580ad2827eba2c68
SHA512 a43a16203b0bc6ac32691191d3a492a8f8f07302f0487b93383fcca49555d07a319ce1251483bf39a509da93ca87fc2f2d626c461686b9a5392425e6bd4633b5
SSDEEP 3072:/xLXuj5yAlmW5BAhvBmS+mWsfLljwPWLSZlYmYBoVgGV9gXZ6SVrsgiyM6wD1:pLXujhxA9MSDff9w+tXZvrsgS1
TLSH
T115144A41A3E400F9F1B7A738DD714611E9B3BC515B30DA9F076442BA9E72790ED3AB22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

amswsccomm.dll

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\amswsccomm.dll
Size 326KB
SHA256 74b037b15d2850512921b7c66f3a6895d1a1006e8a5cf9a7337664a929999e87
MD5 25cee1278be56fe10db8f3b5a8902480
SHA1 284448ea19578a4945f4e0c1850753a2ce3dddaa
SHA512 a27fd38c31073e81f68910ce88e6cf2743352bb291a74af3b4ac64ceb9307c57fd851165d256cd1f08dd9583320cea4302fbaea5f64490a37cc2c9586357a494
SSDEEP 6144:GDahM//beDcefjklZggUvlhV0N1QB3ohfLFiW:GDahM//b3erkFshV0N1QBox
TLSH
T1ED647D59B3A500B9F477823DC9A34906EBB2BC161771D6EF1360465A3F33BD0993AB21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

apc_random_id_generator.exe

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\apc_random_id_generator.exe
Size 343KB
SHA256 cadd8110928108d983fecc16da4d3594ed3b27bb8c13826cd093f84d9f6f94a0
MD5 e4c3f5a71b10af7e23deddcb7c1e0b0b
SHA1 ae968f59b5e42e322e9ebd507e9ce566d56256c4
SHA512 6186531f6568e39e7bc255aeb9b08461b2f40d6701db47ae1d77f65d905efa07b0abacebfe1aaeb261208aaff287a68836baf463a77714d5bcd7317bded9b9d5
SSDEEP 6144:V4hh7SgXVNR/djQKNadxXwmeT2oD5xF4sH9Pqe4fEx6pIv5XHxxzsQ8cN3AOI/V:OXRvNadxXwDtF4sdieg+K0hTPI/V
TLSH
T154743947FAB210E0E8FBD13885526217F9B1786543749BC767A48A576F32BE0AD3E340
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

apcfile.dll

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\apcfile.dll
Size 5.9MB
SHA256 9296c27eeabc0304dbb539ff2a497935fa7ced0b950553050f7509db2bba67a6
MD5 b57342b89ce429592fc9ae55c67483f9
SHA1 0d19bcc02ab837bfb1b71fb3396d3fc0067bee6f
SHA512 e265750ad365d6f0a235f0162810d4df934a5b5a5d227f72eac112e866702cd5d3ecb5bf8ab88cbd40ad8ad08677ef6d468f923994fc35473115cb5eb38c3344
SSDEEP 49152:rGtlq/IU6iCkVwASOZkSZKbcqNNhF9ppgFf8fYKgyVLPBYVC3+qI5jVRq+0Kttqj:i+pZ6vaeYfqIRv0fp874RAsK8H
TLSH
T1CD56AEAAA6BC00A9DC7AC178C393A227E772B51553B057CF566086F91F63BE0167F700
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

apchash.dll

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\apchash.dll
Size 3.6MB
SHA256 4dd9939cd5884696352d3417457018741cfe7c94cad83feaa6c0ea9c161b1469
MD5 02262a1e3985fb98a437d0760e898dae
SHA1 b645f3eaf19ff8bfdaae9f3367a966a42ef03916
SHA512 66da53e84c96ff66aeae053d6c13ca5cb512566e93ccab82fee023ebc6c79aa1675ae58995253dcddf7e4b56cd650b34ed382c59e10e75d11fd6e0f34e8116ec
SSDEEP 49152:3GtlqHIU6iDVwASOMpNCn+0+aZmYK57uP3WAZHehDBVcqn7gVTvqSgEzqPDl3:O+MNACRyZkDuVTvRgV3
TLSH
T161069EB9A57C005AE86A56B9C3875227D3717A1563F013CF6E249AF90F63FD012BBB40
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FortectTray.exe

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\bin\FortectTray.exe
Size 3.3MB
SHA256 2ee43bd069def824b1a8dc1e07a106d9c81e9283b37f9b934e689aef954d0f38
MD5 3d3181cd38f11d86f7d9a52652229415
SHA1 425c47061c8b8755b91ae3af71935e6abd52fa79
SHA512 d4eb3f64cf51ee0387ddaead7e94224ab736ee2e70bdcdd3238be4fb77d51923d5d6d2e6a7eefc181a4dfb5b94826030f416b0c25028b986d77e94656f541fa3
SSDEEP 49152:EuvbQXmCBJiQocCRz4tQG2l060gDdtJ11pOzogmgDo:Euvb2opD3WSDmEgTDo
TLSH
T145F55C76665801E4C0BED37F87424137CAA1741583F383DB46A2499A1F17AEDBF3AE21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cacert.crt

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\cacert.crt
Size 5KB
SHA256 c38123acd05cd0cfe4375417f766a9a465327117f5025b16e4403cfd2e07f045
MD5 9956b172b62aeb41ca988999947a488e
SHA1 199e3607abeafd168b02b062697656a847fe4de7
SHA512 5d365e0b88a15b43bf84650f0e98bb05fd6e0257cbd73b2227bc27b94cad3086df2a65fa227ddfdf484447d91297c48800a1ed111a6bc880da53195b8657f189
SSDEEP 96:LrBwgYufFy6nfwJeMmFtBuyuCk+Plvz49wC5UnhVhdnZrYGjWwbhliiuD:HBwgY2FLfFpbunCXlv09wfnXhNZrXxfq
TLSH
T198B17D275FA5240353B3E73DD53F2D5B49028292C8F441B3692FBD18D6046A89ABF4C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cbfsfilter24.dll

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\cbfsfilter24.dll
Size 983KB
SHA256 32b370ff90b31185c5cd0631fb93036e628568ea742a41f6bb04dcd53d69e4a3
MD5 305668fa58c15b4935e5c0507b6eb6f2
SHA1 37812dd3c66ab78cb869b0ec06712da398fdd35a
SHA512 f9036a145d5e6c96e96438e8b48c7efe4cc430c2278bdc2a9d4aa2971cb5657acd2ea20fbb48b31acb264abc63f23ced8499d5df1c94f5125355275290c061b6
SSDEEP 12288:5DFkHpo+nHyP0p9Lw6SBbrzj6tfeZONKWcX6n3iNPfKKZWpA9IX/58oQ0O1NgA:oDSXxsfoONdcX6nAPf/ZWpi8/5kz1NH
TLSH
T11D256D9AF3B241DDD47BC17ECB16566BFB70784D8234A20F5AD48B866F23760A12E311
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chrome_100_percent.pak

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\chrome_100_percent.pak
Size 144KB
SHA256 6ce0ccf6a0cc4ea8be11262d168a344bc3ee78a4a6365d755ffb5570bc48d6d5
MD5 facae785097b1c688da1dd683207b47e
SHA1 ac937080ebeb034a8cefa4f1c62442a30ef1c38b
SHA512 18daee712567e7ec259d3c4fccbb32ced1b2a51cee6f3a3466943d3828ab417456b752c27b5ba27339568086fdb7187356a354dc1430014ac7f044c8878cf3cb
SSDEEP 3072:iz8rCGIQRTwsWr8o9RHi/T9P1L2o418Gb0+VRLf0ld0GY3cQ3ERVh2I:iz8DI2TOr8EC/T95K18Gb0OV8ld0GecH
TLSH
T17EE3E0D3B3F4ED7DD79716B7A2160072ECF3466906A1424B168AD8712A76B88CCC47D3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chrome_200_percent.pak

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\chrome_200_percent.pak
Size 215KB
SHA256 68e92cde2557d68eddcf8df21ce4d1ef7a85581fb28cd5ab93db20812217e073
MD5 3c2498da8019596dfd760412e71e019c
SHA1 40c8d082822dcaba3f67d3533a1e19fe53df4cf4
SHA512 9ad9fe63673b3bae1a6dc17c056896f21baf4781a20a415734be978dc5ed00617b334375fda42b0e18890925520b5a45ae4d5bd5a1c919d01fef1e8290bd6234
SSDEEP 6144:LDQYaBN6svyAEWnIEb7r8EC/T9ugx5GMRejnbdZnVE6Yoppx4:4fBN6svyA1F4B79a6edhVELoXx4
TLSH
T16824F1C7B3F89D3DC5630AB7622601F1FCB211390AB6554B17CBEC747996AC989C9283
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d3dcompiler_47.dll

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\d3dcompiler_47.dll
Size 4.7MB
SHA256 b1e537351e66c6e0347eb039fd11fd991cc26679855d8794c9e2c701e6b32ab1
MD5 3ce7cf52c6bc9fd6e435f523c9a4d80d
SHA1 47d25f5c95195ddab5ffeece24ddadb7cba1fa72
SHA512 dbffd19436878118c26878d49650fe4832fa96015a3b33f353ede0ae0088c5b934e77715b73fda222385feae9ed50a865409e29460432dc4897ef51d1926c3cd
SSDEEP 49152:lCZnRO4XyM53Rkq4ypQqdoRpmruVNYvkaRwvdiD0N+YEzI4og/RfzHLeHTRhFRN6:kG2QCwmHjnog/pzHAo/Ayv
TLSH
T1B3367C5673E640B9C1ABD178CE479213EBB1781403345BEB4190C669AF73BE26A3E734
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cbfilter.cab

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\drivers\cbfilter.cab
Size 606KB
SHA256 679a36fdacb809eba188eb1e54ee3ff5be57b555f44aaadb38031a4de8a2c43e
MD5 ee07debe19821b5034858acacd8c0be3
SHA1 eb549760c689d199ae1e1d77b426cc37e8add38e
SHA512 7c86b9a0587610902ea4e885d2ce6b31a99184ddd40bd04ce3e7ca9649fdbce325b6d50ea9befc2b26844ef92d803b77f47045c8b31ee13040c5681de393078e
SSDEEP 12288:E/EgmdtItjDuYSxn/5mZvMb+6eOEJqLfYW0KAFffZOYF8ZqHREPm:3gwItjSYSzmVCeOZ7YW0VPOOx4m
TLSH
T16AD423B6E371D9051981ABA7E8F3BAA3CD7CD937A48D3943215AC41B84B6F0197DF108
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cbprocess.cab

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\drivers\cbprocess.cab
Size 153KB
SHA256 459e1460e23cf13426f0656a54fc542535f799c66b8ac80d9458be1c76555f2f
MD5 d93dedc0d62153ce2bfa1bd678a029ef
SHA1 0ecd5cca968b44dcfa18c081d5f8e4bfcf9cb453
SHA512 139bc32e3cf75516ca38be733716d2578ce3ab9d13b0a9febfc778a4efedf9b05f12575d9ad1bb72c3cb797ec4633793d76da399166bf9be433e3602b910db85
SSDEEP 3072:j6NTpYr6tYpaUdTtx/O71w37zVY7ms99bSqmtMEqRDfLK:cTR2paUdT7/O7aC7THmtd
TLSH
T19FE312A186348C56DBC238F824D579710FB5B9F6C8D0FAD72756D38645A8B02AAFC0F1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cbregistry.cab

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\drivers\cbregistry.cab
Size 221KB
SHA256 f75f4898fe17b0c9a47aaa06dc4f9b9f311c024cd6db162ca71da6393bfa3734
MD5 3df3707ba69cb6a398e2cd3dfc2f04e1
SHA1 2a77a2d998fbee4ea8bb489fbb9f9b084a53b176
SHA512 bf97581fc64fd66eac39e7cff42ed1c15d78d0ba06a3998ca25f99ffa1f50741939c01b094332bf95cc72cf7e8b4e37583baa503b61a9d7ab3f109d7b58928c4
SSDEEP 6144:06EoDe0rZg17frDk74PkzuycCqANPJXgmp9eWo:0boy0rZgxcMjov/6p
TLSH
T1D02422B7CD686C059B07DF37B6E026339D3521CB5C104A12E2AF86AA4146202FDB65FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CBFilterInst.dll

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\drivers\installer\x64\CBFilterInst.dll
Size 213KB
SHA256 8a4965e7e5de1d54556f751983edda5281e13f5f4361ba7fdf3eed127095c83b
MD5 dcf5b276dfc37d8edaf110016411373f
SHA1 925384edcfd809ffe9b6ae29a32a96fbb0f270be
SHA512 21bf8f8051542e908414a89dd9dc40bd9ac5f4e23e4a16dcd64e59bf60d65e36035b82f1630c1c98a3835c78f1f3b9bcfe5c55349322cc9414670bfc318fd068
SSDEEP 6144:5Z+jT1BmFz0jY7GL4yJL7aD44YbG639Ezp:6jT1BmNSY6s9044n9op
TLSH
T1B6245A01B3A110F9EC67913889635512F6B378111370EAAF476087B6AF3F7D1B63AB61
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CBProcessInst.dll

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\drivers\installer\x64\CBProcessInst.dll
Size 209KB
SHA256 d9d2080e95d0c08c6b311b3ad67c0387d5a1e97e11f504d488f777442dd20a02
MD5 9546041ec9aea91ceed26d67d0a6d80b
SHA1 715b5e53881bbdaacfe81fc9bd140b79b121378a
SHA512 28b232a292e934ba14d5d97c8469fff456967268a13a199b6228c7fe39e4f307a49bf5c5a7e88481228f8ec8c330ebfee816627a0d9e83b4c49c1a3a258ae410
SSDEEP 6144:4QCoNNOr18WugdSNZuFt9Xp9MYHGYM58KwI:JCo/g1QaSK/p9M8a51
TLSH
T17E245A01B3A110F9EC67A138C9A35512F6B378111770AA9F4B608375AF3FBD1B63A761
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CBRegistryInst.dll

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\drivers\installer\x64\CBRegistryInst.dll
Size 212KB
SHA256 fc27ddffb467e15d1bcd0106a590ce3797f1ad681be4cc0c3427edf7eeadaf6a
MD5 1c1ef8b130e67f4c382585adecf8aff8
SHA1 d3d725ca27c78ee9a7d3b64d2cb1f86c4258425d
SHA512 79788dc5cdc3d15d961fefa724c54db01445ed5e613239b057f056e961579742a1f6908601f5b8357ea42439c831d619568d88ee503edafc39a7f7c5d7a5cdc7
SSDEEP 3072:PBy37iT2Jq/aKX/2ErvV/5TjzlMyYWzBrtsGs9cdCJyYzCGFtNKyuEvvdBQw5z9D:PBAWKq//X/T7ZMulBs5KY+GZvXzzp
TLSH
T137244A01B3A100F9ED679138C9A35512F6B378111720EA9F4B608775AF3FB91B63EB61
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AMSAgent.exe

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\elam_ppl\AMSAgent.exe
Size 1.1MB
SHA256 429092df22f0312932d79529a872494cb271888c80de8522b4186b4005775d40
MD5 a3deb4d720484b67ea8e417cbf3e98b8
SHA1 1f8b3152397812ccdb2db9a1aca756aef68d3e74
SHA512 c1ab72eb11bf9c3a51c78b16e665c5922881be3de4b7caf31612b65411b648adfe90c6b1a41208bc81f37242ad56035c6ed0ab08fcce5f458de4b24eeb579167
SSDEEP 24576:FrJssaNT1+u+dM5ELn7XS6bW9eKKce1THOhqt2IoeVMP/P+QQ4yv:FrJsFNQuB5EL7XSeROqt2IP8/PpQ4yv
TLSH
T157458D3039928036EAB321714D7CE66954AEBD300B7645DFA3C85A3E1F719C25936B3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AMSProtectedService.exe

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\elam_ppl\AMSProtectedService.exe
Size 624KB
SHA256 98fcbacccd356a5309626a0cfd398702f5f2b582e0ceddbc8aab55dac1a0271d
MD5 831dd67d23fd157956b010ac05f1b162
SHA1 f509362297d79f85a25e66df5cfd720bd3fe3cf0
SHA512 b044ad38f78a15eb387654f653524987aaf82371e47558d947b7d0cc8910dc22d750fdded549fb9931c7318012ca1afd437394f00d976bf938116d3e469b99e4
SSDEEP 12288:k7NMkvTvIrlhqbfYHdled/51eqrNXF7+yHdnjLv0JvNQsHskP5U6Bo1+N00KX+l:k7NLQx8bfYHbedR1eqBXUSlv0JNTMkP3
TLSH
T13AD49E1274C2C436DA7213714968FB6554BFB9344F314ACB6384472E6F39AE25E32A3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SecurityProductInformation.ini

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\elam_ppl\SecurityProductInformation.ini
Size 97B
SHA256 b5a28f239fc6367f6bc210805a62c25c909df2351aff10777972d1d29894cd4d
MD5 9f2c981d809df58f8910c7a80aa1bacc
SHA1 fbd2c4a9df0a1f883f960ad40ecbee4d27200292
SHA512 37bce017475a2a52ca7758d7552cc29379ddf27eb0454c25a61ec8e0246cf396a9c2f0f093036af5e8332db01e1c95f4b1499ed37061900b90bc5e2fadf1a8d5
TLSH
T16EB01224151C712E01D40462C562E529355061FC40254254F2803C00E001399EE0224D
MD5 SHA1 SHA512 TLSH

Submit Download

concrt140.dll

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\elam_ppl\concrt140.dll
Size 238KB
SHA256 6567e9d90e91c3a146f1b9b6f30b2ab6ba04df11991647941b750bc141a718c0
MD5 cbaa2b13d56ebe7426e7d705e68bc0a1
SHA1 a866f6d22156b3628a7178cc72fc9f7e1dd94614
SHA512 b637a48144160b08fdd2c5f8702224e73a89cbacccef2e3f3190118f375285498161f680f66239de99d1fa0d75a86e95592f5386ff36e401c1fad6b1ff438b90
SSDEEP 6144:t2ALMk1VUyYI1hG3QYFruh7o/ehe1fjpsRV8JC0yD7+Rk6WvbZLl12z/gulAL:K8inIe1f2P7nFSz
TLSH
T13A344DA1380084B7F79F033684689A6B91FEE75027E981D71F78D65A2FA09C1EE31593
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mfc140u.dll

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\elam_ppl\mfc140u.dll
Size 4.9MB
SHA256 be03d1dabf873ebe9790e955e63229c8d00cf1ffb4f15cf9a114c6951522a7ad
MD5 2b05c61f3c97b3926d871ef073d2b737
SHA1 b45a22ebc5c8ad4bce1b5cc8f2eac62a55852a3c
SHA512 ae07c5bc3f346ccb773eda796583dec3cd2a213fbe2cd31cf8759a12c508ffed595ef8eff79b36241e0784a201989a0ea5f0e8f1c847f9201367d55c44143018
SSDEEP 98304:geAM+5SzS7t2x6aaZlQk3yXujcPLb71vrQ4XOE07MmretFLOAkGkzdnEVomFHKnR:I5SzCtXN871Xn07MmOFLOyomFHKnPws/
TLSH
T16E368D4339C460F2F45A1C3816BEB374F2AE7EB15B2621476390F6191CB62528BDA737
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msvcp140.dll

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\elam_ppl\msvcp140.dll
Size 433KB
SHA256 038a419c6225eda86802dd2bfbc636cc4f7d175c64937f51acded8f1785e8a12
MD5 fcdc4950a9f9bc8da12eae2b1cfd582a
SHA1 ab4fc2d8154b8b141f61711e3be1fbab379e13f3
SHA512 8949df41cd37ae67e421375fa8c74c0fcf92da39d1a5f8ee52de55e0b05982afd4a73d8e9ac6d2b5f06245fb3ded985a41fc7a7406cff147ad4575753cf357d9
SSDEEP 12288:CnIPHMVwD9dq5/iNJ6PJ0F5HCrdhUgiW6QR7t5s03Ooc8dHkC2eseG1:CnIPHMVwD0iNJy0FdN03Ooc8dHkC2e/K
TLSH
T13F944B227B424DF1E59E13BA71C6472193FAFC2407A1F3C393DAE0252F566C26673A91
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcruntime140.dll

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\elam_ppl\vcruntime140.dll
Size 71KB
SHA256 ee2d1077b36102794673334095fc60262cb03d7f66a42a3e9c93804338276987
MD5 711b62e03fa4749550f538a5c6ff97d7
SHA1 e67833c3642e41acd6aae9890444b5a0ad9688f9
SHA512 2ae853dc5cd708281a732610789d63d3c324a028b9ab57089ff2216692b7c69caa1068daf660bcec30f1feae394fae814619948954baf8d5c8692e5788cbe622
SSDEEP 1536:usK8Oxv5v9RslezBDbbqVoZ9Sh1gfobWBecbYbU00:usK5v9Gl6tbb6oKhCtecbYbP0
TLSH
T1FF638F21B4D280BFC669853962B6AA13173DB9204FF19EDBAF990C485F789C1A730257
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

amselam.sys

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\elam_ppl\win32\win10RS6\amselam.sys
Size 19KB
SHA256 9d2479cfe101d6734b01f053398e3ba17154d456c774d8bc619c544831895052
MD5 b3844014d965c15f8b6b8c3a8cf1e7ec
SHA1 c1a7f8f550c2365f57e6f80b01d91b201fdef30d
SHA512 8e7262bff3cde9fa8632efef4bee3534c8965d71be58747ddda7e4b7607b4d5a329db9c3c8bfb25764f028462dc16314aad5804c4923e27df0c7e5286aa2bac0
SSDEEP 192:xjM9t+HnCCUHFrw4372weX5wwyMAx6um6JonC7fo8k9CUqoOWiVdDIVWQ4PGWIQ3:2SHdUHNsXb6Joo+9Fq0/oK6ldCE
TLSH
T183926CA38AFC4053F7F2AF3011A6D6937C3E73E12E12819B11A5E49828537C0AE1167F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

amselam.sys

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\elam_ppl\win64\win10RS6\amselam.sys
Size 21KB
SHA256 927fa480ef9d4ffa528e3813604e1373983d3c1bdfd25808d0d886392d43958e
MD5 2c89a100c30bcff13fe0e6aab0e77f44
SHA1 d2508a3ec992926ded7be789de611a2645b3f454
SHA512 bdab44365c26b65eeefd7caa70ecfdaba1ac04c93559a938a665adf45da0b0c8fc0efa3b9486a7a6b893e7de0799f79a0da330a40adca3a9ebe3c03de2328975
SSDEEP 384:pRd4e6GW43CbZPYPufVUIFfoxOp1x09lEmEAO:p8e6GWjNQ21FwxOpwjO
TLSH
T16FA25D4756A80092F0E7AE7482F5CA637D3CF6C62F2152D701A5E2A52E637C09F3172E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ffmpeg.dll

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\ffmpeg.dll
Size 2.9MB
SHA256 5211cbe4110570e01104276df30262b2257fcc2c2a820eb5e5d4ba185dfee1ce
MD5 11c6f923ed65fe9073c3c1e16414fe90
SHA1 bc6dc24163527b314f67cb23ff8c1c4934abb48c
SHA512 f0d1a963830984b0e7476bb7651adf635ec8c81163c662115e92b55003fa15496ddd65b9bbd463239367123c8a812848a58ee340dd54139b102ac703dad8a69f
SSDEEP 49152:BJ2o28BhFrhzXIbk8HV22QNPa12wLOA1AdL10SApX7jCf1Xh/+Gk1ekxjGsDefoV:BCWFrIb1HV22QcSAZ7jCf1Xh/+Gk1ek5
TLSH
T133E5AD07F6D6109DD029C070979F9213F671344A8B2056EF26D08A243FABFD86E7E769
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fns.cat

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\fns\fns.cat
Size 10KB
SHA256 3d117cd3d3ba63f801a9af4211a0cf863dbbce8c2dd3142f868bc1e8aae12400
MD5 4362702be3d9e76b0b4ee06e61f028e5
SHA1 99e8d1726a7acfb686e315f65125ab1a84931b2f
SHA512 35164736bd33d4d27ed835c59cc8c8baba6533c433b246f7ebb7134917474e1ccc7cd86f1dc3dee66094a6f040ccc135c6f023fb690648a4d08856a0c1e89181
SSDEEP 192:l/AoQy7JCxLhLxyKR/2FWQFI6AgfcMbnoQNpX01k9z3A5UyQsuf:p07eFRi6/7R9zYVQsW
TLSH
T1043219F14A2D40C2DC976C6053D8E5977C3D6BDB2D00A56936EBF76419A23C8EB3802E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fns.inf

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\fns\fns.inf
Size 1KB
SHA256 bdda3a39ee75de412824286509a45e6dfbaca39292c84db63480f0f82a0f12fa
MD5 901404f67ac80d74cc2239ce91e31ec5
SHA1 2bed7333eda8b06f86f88b4df1908bddfa88c072
SHA512 58c8e3f7c0b298cb3ae045c65b1ce3e9c2c1dd0b03923e02b2c2c08682280a163794aae668db2d543ea6492730be4ed2ffa179e5a93d0c4301d27c2ae675c351
TLSH
T15931399D6583C6F839A532F11E035482AAC12004617E7165BBFF59C6EBD1C0CDA6D2EF
MD5 SHA1 SHA512 TLSH

Submit Download

fns.sys

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\fns\fns.sys
Size 107KB
SHA256 7c78255f6823b1354ae5b0cb4b5b3e7f2f6200622d635ab18d19330e72a3eec5
MD5 7b273bdee23b592cbfd25669d36c6de4
SHA1 0a6f0cb57e511f59cb97a316373fb32df1706923
SHA512 a9b474dd4f412fd1b2bc1851582fd3eb32ea16789419ebf20e84f0a4175f2f22cd0b32c8c610f2136ace89bdf90f04b20ff142083e344c0073a7948f79efa1e3
SSDEEP 1536:CdUAVWVW3I2sfpejeRVbHfSzAspsUV3QWueuBd1076zAUrzjHt73C2:ALN0fpejeRVjSzWWyd10a/tB
TLSH
T1B6B36A6A53B418D8ED9BD5B4D6A4DA1BEBF1B4412BA193CF0360C4410F637C16F392E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icudtl.dat

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\icudtl.dat
Size 10.0MB
SHA256 a9f6072e858ea29cb66501847856d403c862f23d03cac2656d1e0fa2865fdc7b
MD5 ba9e45bfca3621e4086e6a1870f8cc41
SHA1 8d1b2d42707812608907f8000041c16e7755532a
SHA512 07ac486039098753d77b53ce0638a172c583620d6feae0447da9b8931fe9e0f8b108ca7c8282b6596bdcfb252b3600bdfe7cb01c96b3564605084a932dc7298b
SSDEEP 196608:fwPBhORiYAXHiXUxY/iJ53IWhlVjEeIu2YEs:fswkpHiXUxY/iJ53IWhlVjEeIHs
TLSH
T199B63807A2FB8DC6F9F76F30E8F452679567BD496E32805911042F3B1D332A08661BB6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libEGL.dll

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\libEGL.dll
Size 502KB
SHA256 22bb87910a955608d26450c35e6e687381fd1be51d412bbdf36e2cfe63c1704c
MD5 a7b6a0b12015811dd844d6bcf3a06894
SHA1 1a7e18740f455c6e789cb29b97b09e90d4bf1e9b
SHA512 1423173901f22fa71aad72f9a9441a40961e057fca0012b4cdcd9edd56c22154bc2f3b255d696283bbb8801d569e9fc010a99690a59546d086eee0c052ff0543
SSDEEP 6144:3qQPf2bILvlflS9XHaT9ZrgDUypbrzi4uBcFObfckF0fcSM91M:X2q49XHu9ZrgDVVi4nFObfckIcH2
TLSH
T1E7B49E15B7E454A8E06AD5348A434642DE77B4920F65FBDF03A493392F37BE85B3A320
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libGLESv2.dll

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\libGLESv2.dll
Size 7.7MB
SHA256 3582d63bdbc630e1ff29d5e1ca61a706dfa5b4f84b097e4e8f4206699f54de2e
MD5 f10e38ebbef2cceb69f4e22eaf320e22
SHA1 daeb12e73d2f7269475d4ae4531c21536a86082a
SHA512 793f40fa311baa76d317cf5ceb6d2a3f19f799723250615d661d4016c7817a1a5e587607256706d15db79bba63f9129e1007bd4f41bbb8efccc484828241648c
SSDEEP 98304:WXQ27zNwptqCK5M8twgfM+P9hKBswndb1GXJij3:m7zEwPP90XdQi3
TLSH
T179868B03F39A40D9D04DE2B8C7579626FA35B8850724B6CF279413292F67BE0EB7A714
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libcrypto-3-x64.dll

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\libcrypto-3-x64.dll
Size 6.6MB
SHA256 95d97a2adbd163c212b8efc8eb4d9e4163483e9cc0889a5affba5e4ce12fc99a
MD5 06d675b8b143ded6f98c7aa938bb90b6
SHA1 87b176896d03375bb2013d83a52af79a19421df5
SHA512 78816372643279255d2bab654e2d9c7a110c24e3285cb0632ecfb8ae43a300423d123ac6d17bd41ad0971d10cc6d5df95b9c2fc89492fc2b72b5e76fc42850a9
SSDEEP 98304:+W+aYE7BYm56ff/4/aCCmPw1CPwDvt3uFTDCC:NIE7BYm56ff/UaCCmY1CPwDvt3uFTDCC
TLSH
T1E2668BADA2BC010AE4BB91BDC2974327D7B1B95553B013CF196186F90F23FD92A7A740
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libssl-3-x64.dll

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\libssl-3-x64.dll
Size 1.4MB
SHA256 c7f19f91fe9db02bb5e24efdec705c9ca73b61e8aed0fec255f7d52ad6b398ec
MD5 11ae4168c333f8dbac5abe89ce6194ac
SHA1 1b423cefc97a62b6b10d28409a2d99464449b23d
SHA512 abd0c4cbae485e0462bd5a98c8ac978e27fac45d234edf7f8fef350ed9ece0c96a1de51466db5551afe2e87e599d05374b8ab514f73ebe78c62e07e9e16a27a0
SSDEEP 24576:v6vxBRIKsuqkuAj1F2S2WaAdBaIIQqkAFX01sQiW:vylYuqkuARFv5qkAB01sQiW
TLSH
T194657C6A77B80599D5B7D13C86838F17E6B6F8051330A7CF06948A791F23BD81A3E394
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

af.pak

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\locales\af.pak
Size 536KB
SHA256 842fa605183eb7cb2764af9ef34eade4a6dbf59ffa726b240a799ec4f829cacd
MD5 b8f0228434ec80697f573a760a3b9b80
SHA1 0c331951de170c05d1b7da27cea9e3e7312ef033
SHA512 9c59ede73b93bde2289045f3bb35abb59c09df884cf89d30ebc45c49490b59115677e9fce5c6b212dfb406258bbf0f3d35bb70b484794e2fa2660ecd7fdb8c3b
SSDEEP 12288:0gA3ntmEcPtRGtxGXQzsaFGRKCwa+H2JynkjRv75IXsgo0vhkIDge2TP+FPXl2O2:qntmEetRGtxGXisaFlCwa+H2JynkjRvT
TLSH
T11AC41C0AEB80273D09A076D6BB0845F7BB9CA26CD770B2B6DD9D823105A6EFC117D1D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

am.pak

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\locales\am.pak
Size 868KB
SHA256 ecbadbf260e62099e6140327f0acb40d79ac010676d48f4fd557085f6668f43d
MD5 4be3c0beb9cf85c71f9f93d47ca29dd9
SHA1 70b480894112695dbb171ec2c6225749cd1df6b8
SHA512 232305e486b51432b92d2d08a5683529502557859b2a616f1a2a12d1d258539219b72566e67c90ca403299e08fd0e0e111bd4a7cc25edfd8643f6f774f800325
SSDEEP 24576:tTz1JnhTCNUyjFxGQ3cjTuYuzeXHB5kFwM84VVq+XG/6gZqP8D:F5n
TLSH
T1AA15BB547EF9F7170F8E8A1994320E4EA594AE4652813C38C35AE3FC2B2DF1B4DDA215
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ar.pak

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\locales\ar.pak
Size 954KB
SHA256 eb80f7d9b8ef4895f4b122616ae97ec63a5123b37ae68d68ecb5f332095ec2ab
MD5 7092b169943f82d35069c57055abaef6
SHA1 766ec88af7d5ab966097e176c15afd7f751dae00
SHA512 dd74279db77c61bdd67df4541f301e6df3d3e29b49fafe5aaf661f7f630c9c87876cb5c5269a2b4b1b0f40b30dcf2a597ec078b992aea593126a2f12202a3ff5
SSDEEP 12288:iWEC4p6bB0oXyXLN3DfeUIvPUrb3Qk6bSU5qNZdSQjCfBPfU:mC5zQz
TLSH
T1A3258AE21B2984720B96DF0FD1E23668E872BD23EB4BFC3124934A2156D7513E74E674
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bg.pak

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\locales\bg.pak
Size 991KB
SHA256 12b755ee6a50f30b327980e59d086e9f178c6e1bccd0c2bf387696e2c538a5b7
MD5 53c135b4bcc75e3a1bc6fbfd4db60758
SHA1 3d0c3af07fa41cb9b65d2d75e2381c6d35711f29
SHA512 c232faf8ec5868a8d49bcfc770f81215bc3d2d92cfd035d49551c24cba440a64ce33332d1db1c90bd1e8b271b88ce1e19f14017853e2f9a7b61a146ab3e09543
SSDEEP 24576:LBWURW7CMLYRzQkECjUUVb1Xojdg373ZxP3ADKvmVDF9n74umpG7As5MGLEFhoFZ:VnRW7CMLY28UUVb1Xojdg373ZZ3AImVD
TLSH
T1B72525A15B9A689F0101F45F98087E093CEB84FE3FE7879241652DBD39F10B487BA64D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bn.pak

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\locales\bn.pak
Size 1.2MB
SHA256 43a0c8bf652288c7a1efaf19926d25275507fa03e9134cfe5e3a580e8e7cd203
MD5 3ca79bfe2a397c6c0a58d9b1d5fff24e
SHA1 cc127f3be3931c79d9e3030b6804b6a099934c08
SHA512 714ab7385e5e14aa7d7a7ce9b65ef812a589074578874d436b2f9026d3128403d55597583ff3d3b10f8b3892544f306f44a5d28e776472e1a02136d37a48b1fb
SSDEEP 3072:oyfvjBW3rA+a4f8xm72s/vRTcTfxufkComzBrmBboTzQC5Ltbrqj6:oQvj0bA+au8x5ComzBrmBb65hqG
TLSH
T1CA55EF209C6E81B6A8C5CDC9434C6370C5236E9B9B65F74DDC17A25938ADC3C8CADDB8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ca.pak

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\locales\ca.pak
Size 602KB
SHA256 5a03f4f7ba62998eabf8ccdbd55a49b06398bf5f7aa3eb3f0ae26cfe8a65c31f
MD5 bd8bf8f1b2d0cd21644e6c299d02e407
SHA1 865aeebe6228c9f6ee5504e0dbeb7fc51a6d2223
SHA512 1e14675f8eadbe324a5407e87f66829cf33d91cc07746af3b75a25ff0cce0b77c03b28e68e63dcf721b660cbcd276a1d6366d2f5fc59c84a4a04ad6e1fcf7b1d
SSDEEP 12288:sYMNN7ryDCie8G3RWUpf5PsFWN3Mw2juwHzejm0t3lt+S7TdYXwXLw/jeO9FlxQw:5s0wjfLymFpZMNWpWW574Ub8
TLSH
T141D4F8239FC93B7704D3330AFB46C257B48CA9847B16D254E4AE1B1622CCA9CC677AD5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cs.pak

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\locales\cs.pak
Size 622KB
SHA256 0a11d902fcf7f082ea6d602cba67d2befcc639de500c5fef56a7055a0b444a9f
MD5 b94b7dd6554b67b4e31fbff5a6ce411d
SHA1 ab395c6558dd5acba26727aa901f0afbcccb27b7
SHA512 682e19b970868d324ef34691a65a3ca527e6060f399b4e2fb9a42e808a4b099f2013f99dd2888ed96fc50b11485d73a19fc096b0fc7b36a395d53cb8933d684a
SSDEEP 6144:rxb+KdZ+9c+3FiGjff+Ywo5Am3hxAQ1r5GCFRZZ8OdLJSBwl8Q8:0KEcey7o5Amxz5GCFRZZ8OlJSt
TLSH
T1EDD4491EEEA36435588002487FBE4128BD1E83540B2EA9BB6CDF9D91217577E8FF0D58
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

da.pak

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\locales\da.pak
Size 562KB
SHA256 1145dc560e49c746fd7466f064b1dcd1ec25d22b4b38a13261174aad5505caf8
MD5 8bc86467fdc4e261522efa66dd90b027
SHA1 17b0542dc306e60180e090451c40472b5a0e7c59
SHA512 e0a7e00adb47818258edac2d6395565caa1ae367f4562a13d59da79e1d5d647aef9384e84d483733a5c666854ee4b0065d48ff471b20e46bb499ee98991b35db
SSDEEP 6144:/ZOfsIW4hryC7xR2qmzV0J5y+pZfC/erbGwlA+6JwN/ob+IYa0s75k/57dDs/ldM:/AXZyC7xwqxp1bfpm5k/VdBH
TLSH
T1A1C46B4BCC9C732F89A90B64F7118DA7EB5D543CC684264FA5D8943A05CFDA093BE2C6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

de.pak

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\locales\de.pak
Size 601KB
SHA256 3695fb21a7d356c5dbaf7f8393d3e53554e4c19c2979358c0e59411fac67a5e3
MD5 c42fcc4e7f100e1c395533d290459422
SHA1 1dc22ed0e1eb92815a4d7aac5f1a441fcffdadb4
SHA512 a019703b259f38acafb8b57eb1a994bbe1e4b08f03695239145967fcca5acbbee25697f1b01740e2a54140b5e43ad46adbf8c2d7ddb5cb1bc1f3c3d1de0dbe81
SSDEEP 12288:wfL8hT3K7Up4gra6MzxI85YaM/URiaCfM:wf+T3K7Up4gra6WZ57MexCfM
TLSH
T142D40703ADDF621EC78673607705CDB77B19E36BC346322688EDD12B614B5B283AD522
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

el.pak

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\locales\el.pak
Size 1.1MB
SHA256 55a09ed6d1bd58e73161450c828ac59cf86162a9cd18f83b246fb19ffa50e83c
MD5 bc3f9a5c56e8a33c0ff04474f368440a
SHA1 507a3f9c9b40c0d8f7085e42804b04f2100a6614
SHA512 9ed20b00bb27ae0291b1cf9a489e5c62037744431d86775b317c387deadc366a8835a4e07ef4468b50f5cbcb68d66d31b7e8b3b388e6bb1207436e6a745a7787
SSDEEP 24576:ZQTNraHCFbr4DQDYh9Dk2tKZubIJXDsSyjmogpM42sB2ypMjvmpgVoyTIWYNQKOw:ANaHCFbr4DQDYh9Dk2tKZubIJXDsSyj4
TLSH
T1CE35CFEFB4542DED8086950785D8B07C2BC66D6CE749CBD86229CB60BDFC0719A22D1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

en-GB.pak

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\locales\en-GB.pak
Size 487KB
SHA256 dedf16f15baa50b05832c27d1f9d030c60bcefac7e4a8cdb30df20fda4e39a7d
MD5 467ecd23b2c072c6f3e14c7bcffdd1e4
SHA1 03a7d6a51e441fc688bcaa95fa327f9b78c10ac7
SHA512 56fea02e6c6ede33e1d1b9b17a22230beca630e863185499b629af7a46414c64cc2635efa03fd11622371bb2d69e82558a2fc16ad42444e6b345782b02048c9a
SSDEEP 6144:IZtLlFZR0jLc6b9WFhFGdMP9eFQbKTfaYcp8+3pw5pHx95BcyRlh:IZplvRk5bdMIQbKF/5BxB
TLSH
T123B42C1FF7841269069312A27F0AA562FF22D07CB35116667CBD801C33B676A83776E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

en-US.pak

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\locales\en-US.pak
Size 492KB
SHA256 cc7d18d3a6606b645ede826de9417c961d6ebb815f7250bad3a930da89dcd3a3
MD5 9b020e4af087feccbc7e243c4094f748
SHA1 36c9e0ec82a744ff991ad6e8ec13ae44d4a084b8
SHA512 3a0185e918b0877c1998ab253ce88587556dcd6fa2a689901dcf562eadae3e198be47a810e63caf5810878e084fc550bb8d5f1fafb5dfa11f94613e96ce2fd6e
SSDEEP 6144:+Z2t9t+G2qFmg4MP9eQQxt3faY7J3O4N5DBxaQngm8/PZwB:+AL/J4MbQxt3x51xAwB
TLSH
T1ABB44C1FF744126906A352A27F0995B2FF32D06CA35112563CBD812C33B7B6A83776E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

es-419.pak

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\locales\es-419.pak
Size 593KB
SHA256 ab6f9a95d333e5bb14d5420e49c5636703d8fc965212cb748e2522505b6bec91
MD5 c8782fcb8c8ddcbbbcd40bd490746ea4
SHA1 77b7c399b00f2a0c73595edbc9a38cfb8b766181
SHA512 adabb159566a7a7126fe24517df2c8ec8a7fd0d0a207a8da7224d9eec3647a4d40734698f8b631aa6b3f42de24856d9f02ee899fbd6d8e1ab1c5b36a2087e5f3
SSDEEP 6144:hk2bftPKl8Tyf1AiOjY+7RoZOl5Ge7rQ+w/axs:TfXTyuR5GeA+ls
TLSH
T1CAD40922BAC81F5310E3A388B743D753E4D89545B408D29BE8EB876562CCF8CC967ED5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

es.pak

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\locales\es.pak
Size 592KB
SHA256 590238a02b3cc14b05aaf21d5285035b45ff55575dd533264461e5170583cead
MD5 d9c5871d304d9a373f817c4246fa8baa
SHA1 b298d0ad0789db602631a10753040acfdbce50bc
SHA512 911761feda28d4f434174c01526dd6fbf88fd754c91ec5c71a9d3dad44469d95cb7026f09b6f711dd496fca6851c3446bec39c04a8e334d297f33b580d00bceb
SSDEEP 6144:LL/HNNmREPUPb79R1i/I/gtCy+J2AiOTjP8jm5Jlu2v2vqHa6PZOIx:LLNwgUPf9KIG9AiMP8jm562uvqaY
TLSH
T150D40722AACC1F6350E3A389F743D753E8989545B508C25BD8EB876612CCF8CC967ED1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

et.pak

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\locales\et.pak
Size 539KB
SHA256 605996ff0c8a43f772dc64274ab309c4313ced4e8c936f82bcd797b54cb5c6e6
MD5 f2b5f2fe124c3b6b29f6ac0164948052
SHA1 9aa41d3bd2d59a3ff5829edfa8cc80f8b0b175e7
SHA512 02272db14755694fe2a88f2ea495fb99b9db742b87a4007ad5877b0f97b4dd2debf1fc9b606b2dc6764303a6a66270a5391827f88a18127d2396a31dbbea1e1f
SSDEEP 6144:iYllmzrbW1TPoj9Sja+DDXuyL08mFZksMqpJ1mO18iNPPii6OMll5JMbTiiCKMZ8:7llmz3W1Q+RDXjmFZ/ZFMll5JM8W
TLSH
T142C44C42A17D771B282412F9E737AD27DC9EE7D8B4000D9668960A1970FEFCC38B6B54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fa.pak

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\locales\fa.pak
Size 885KB
SHA256 8dd8cb4a8fdcd5833f73ef7947649ec24ed0538b3d5f079d82cf441cf955d6b7
MD5 6dc7257142ba4605cdd9336470755bc5
SHA1 a123b54a7db212e069bdd0198df63f603ab61171
SHA512 fa521c3a9e23ffa9465ba3204cc07c9053903f43c640dacb92e79c46a92384f35f8895be8cf9a16fe045308393987c45ace72cd01590c0ee1a1a480904056dd3
SSDEEP 24576:EADz28u313uyqoT+sPqJRmX5loTUOmdAQifaQ2XxFtJGk62YhHoiiLYMX4qOpUWu:A58g
TLSH
T16C15C3956AAC9AB15747CA0341E33834C773EF12D34DFE40ACA1076609A5B139F5EA3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fi.pak

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\locales\fi.pak
Size 550KB
SHA256 1517fe8463e2bfb502e01667d7f9ed0027369f5b976b1e0a38feefe82caa2c7e
MD5 da2d2a9192194609a4bc646c25ffbe18
SHA1 08f216ce7bd5945c0bc8b7a530b1b1e2dfc96eab
SHA512 7e91e014f2e84e527254347440cc6f9f91f0f9d6ebec02469cf7d3d27da983eb06e24fedd7efeb0bbd59431bc2a11b5e35a1ff8d3a0cb0fd3f5b3d8b177b7e69
SSDEEP 6144:TLMJqqvShJ2719cR8yiJSHrqFwuAsURwOEbHhzaQ7LY500nUX0/n1p/WaVpkpd1R:TOh19Y1Bq/aH500nUk/n1p/WaL74YM
TLSH
T120C46D915219C22237C8D29E7DB0903EF5E5E3DCCC284D9AE843C7D849E99887D7276E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fil.pak

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\locales\fil.pak
Size 623KB
SHA256 b87306fed8f471279c134d460581ecc13d17b533c184be7c1241d6bcf74d32e3
MD5 1e8b4e035fd73deba82d87d1a2ccb8bd
SHA1 4ae76522d5664d7bcaa6e2d9077f794002f98ef4
SHA512 508dcd565e1f88da78fdc32453208c164b98b9309ca2417dd63f6ff72be4e8ef6c34d6be3ba63a5050fcde7e01904cd4b02c6ef050f3a1758db2a1496be8054d
SSDEEP 6144:HfKT72Ag3wDvKbNuyFyeDQvc+nStKAhdTkN5Ztf748moVoA0HTK:HfK32Ag3wDvt35j7j
TLSH
T1FAD4B61577402748DBC352E55360682FAAE560B83F82386E0FBF269B7BE7CD5D270192
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fr.pak

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\locales\fr.pak
Size 642KB
SHA256 2ae85ac2b90ebaabe034b979ffb53c50f3dbe2fa9bd7420d370839da5538cef7
MD5 a270dc3ba8720e22e23498c6d0f77913
SHA1 7185fac8329ce7bc03ff82f8e57605805647cc3d
SHA512 73ac9059286386477df363db98e402e07e2d3248c98f824d23fbcf6e56de084ab07df82d72a4d29286a9cee881557770cab6ad80f1a1212afcc633422df71db6
SSDEEP 12288:kJ0ARyFXZLBAXt5QpKZXg6QuahVUezIQg3PeZCMYnYm+v7r3TBc6/yaDzYiZ85x2:kRbCV85q5pR
TLSH
T166E4E66FADD431CB1AC602B7FB12D663DD348248F215E340D89F4295129A8ECD39F6E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gu.pak

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\locales\gu.pak
Size 1.2MB
SHA256 8da2aef78a775083f19573a14e0861a96a8990866920b3dd4b1aa4d43552159a
MD5 12ead2bbf611d89b6580b801be02f56a
SHA1 f5e978a09bf6a2a0e18cff25df9661cf8b7636a5
SHA512 40b1cb3d955c5895114a2164065ce7c174608e1e4938826ce419ae42b3460b22cb966c367261d0638c2be30e530fbe28697a62dcc211064f22240123a769237c
SSDEEP 6144:pr4XHwtmpIM0nKUDRRoLNr5qRGhg1vsKfG:l4uGIrn1DTer5qMhMsQG
TLSH
T1DD5518D0D7B9F07019DA9F7E819E512086695343D67E230051CEEE898801DDF3EEEA9B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

he.pak

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\locales\he.pak
Size 777KB
SHA256 4948fa44871e8ed5a0ed2d553f4dd698548b60618b55619239045181a8ec519e
MD5 df48f9cec499745310ddbba7ea4d0cdb
SHA1 92d01619f52b2aeb8c927a2dab8acda7ef75d289
SHA512 57399050439e357d9d57e99da833568c2e1c29cb4f07cca419722efa6db84a3ac41cf5a2f2091c55494162e2bd8766f4bd583c9231698515fc145d9b370829f6
SSDEEP 12288:2TJrlnTIhwlCRi1TzBxrlNdxNAlJWq+/3cAZJXA7+XkzeQCajq5AgL1+EbxnP5IM:IdP53+u
TLSH
T14905AAC4B2E452255131AAC39FA5FA286FF3CAB53CA23512CB14526CAC774F4BE530B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hi.pak

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\locales\hi.pak
Size 1.3MB
SHA256 8ddded9b2dea1787367869152f2b27f93556ec515f7da6f361a73ac61fdcb73a
MD5 379e95b2e172b69cc374b569aa4a91e2
SHA1 3921c9294ceadfd9e7147dbf1a26e9d404ee11e5
SHA512 2b1fd581409a83812dac2b539f8937c3ed15a2625ecf0b2a6aa6f0e528bd082a0869ab80bebb9f3c961c89ee09b4769b0792eb88900d69197f79b9620c46a624
SSDEEP 3072:DtIKoh27FdOBGvqq30Pzlt0pRh29V/B90ZV1d3uGlYvrf+3yM6OEOTByntDPtDrh:Dt027Fdks8BQRhXy5psK1hrN
TLSH
T11855060CEBBEF3B55DEC3C8A32890D37D59D3674A3E5521348D5B3EB9444CB8146A2A2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hr.pak

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\locales\hr.pak
Size 599KB
SHA256 9a7a1dea1bd0bf594acbc356ddac9fb64d993fa96f5d3cc1f38f9486abc888bd
MD5 14635f2596afd5cff5dd604520701885
SHA1 eaf2a7313b179da5632c4a54d13e0a061eedb6b3
SHA512 8f9faf8795d58abfd9af7b3a7c6f338c9932d351b223278feb74c1b87a14b31c01af773f3be146d49fadec8c739c28c9e0b85be82f938b2abe0fe764285291a0
SSDEEP 3072:ijZXgjWwnjfP50NmaLV08N0Gy+wZHz1r0jj8YxhQlyiOSAqZPFskT60uPin3ybXJ:iVXubjwbtwDuhBjr757GWYwaSLKxK
TLSH
T10ED42A7DBEF2970A0897B346EFA643447DBE08DCE52597B7684F522E0003F4D6AB8149
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hu.pak

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\locales\hu.pak
Size 645KB
SHA256 8e00a8562e32713abf7c99fb9543f65505f8f6d0509ad6b6b7607896f689e2e7
MD5 894cd4375b2f048f6a799a8c0024fa83
SHA1 b6b93f6d3963d5f6c84107d48bd11795f5e703ec
SHA512 f77cd5f8a35d671083cb7a8fecc89d391173ac39e3132a2f15bf530fac0d6a9196a05b256ba4a1de4aed4aa4be9f77ea4f0a23d869d54052446917241390c3ba
SSDEEP 6144:hg7PebyTW8qBTLEHi7pgufA4jtSuyd5Ss8zZ9pG9DOYh8wWxt+ehMqnjDu54RDvn:KLe2C8qFAtd5Ss8CKbs5t+l
TLSH
T19DE45C7793769059BCAC17C778643F15992E481BAF3B36FB2887846D20A178D0D83C9E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

id.pak

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\locales\id.pak
Size 532KB
SHA256 6d46b40dea9ba42a9ca6dda6e7ff81a3dbcd86b61fb2d7a5fe946d06bdce5d30
MD5 1b395ed9f7a3913cab79c1803658bad7
SHA1 354a30277c130c58291fb018163dfb814fa86c0a
SHA512 059dd1d5ed6fdf2dafde05abe72d22135ba8c02671382e461905be834f721c0edef55d68a5c2bfe22c519f2021584a83fac54c844414c5d9eeb5b265481a56a3
SSDEEP 6144:XsqRpNgO9eTqGJhQbZ8IUauf+eTFjlFgTmBwoqj5I5sp66TOBkkmgiT8kz/HT:Tv4r0b5mTFjlFEmCoP5sp6eT
TLSH
T1EAC4F8636ECD300C494803D5B2CDAA1E7CCD233BAF05B76E8E748F7055A67686726B94
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

it.pak

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\locales\it.pak
Size 585KB
SHA256 e5fb1e10e15d55c42cdd937e133a9725739259157b1b3f134333cad7110e5978
MD5 2a28ddf702d04decae777fa655ffbf2b
SHA1 df299d78666c47074e01646ac029e6a35c9d378c
SHA512 6bd8e6b93a6b5826db9658bfb2cfe0fd23aaca9be08d3e9cc6ce407e0a7a5df4de800e4092c98d7111136cf47bac9ec353661ca2fffc6aee85f665cb084e1f69
SSDEEP 6144:fnLp9wC3pmx99r5Nh/2NdogSIqRRRs61wtUve/RT9Tb+Dw4pzzmDxrcdqpzSj9fC:fnEkZZSw6m8ncbfXztL5VGI8m
TLSH
T18BD42B3AA5D6211559976359E621B085FB6EFCCCFF417218C99B031C23CFE80E2ADA47
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ja.pak

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\locales\ja.pak
Size 712KB
SHA256 91461c3b4a426688b16926d3279a44590cab75d65d797b6fd2567e0ec5cde60e
MD5 1a56f2009d910b137e94e16403a85b4d
SHA1 cf1632a49c3b53bc5050629179618ca0c026e344
SHA512 e18a0aab16b1ee334d2e0e4714e8ad4c10e89e55c355d7cc174470a5817ca806cd9087f3a5207a690f203a4ae9efeb41ad02d5ed3500ac0ed4c63807aa3bab8d
SSDEEP 6144:ZMEbDG0s+2sPvrf82pjuaWTo80D8ZeQ2EIcPZbs5zpEx2HgHVV:ZMVTwf8Yju1C8ZeQ2EIOi5zy2HG
TLSH
T182F43F7CE3C569369D6152A22C0E76E57606AC5FFCA23A3A443DC070BD70BCEE415AB4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

kn.pak

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\locales\kn.pak
Size 1.4MB
SHA256 81a6a8d7f817bb6fbccfdf8d73f1229cd3bf74aeec0a64373a853e8bff744e8e
MD5 df25e3a43168d9b9352fa6754980d78b
SHA1 4794f3d2184d50b28235d3b8913d8b17e1fd8c29
SHA512 882a35b3c2d80f9362ce51eb879b1f68387150ac22320951e82be004262021bcbd0648b618a3d07ce65b8bfaf71e40ead4019323cbf07aac19e035c1c4ec868d
SSDEEP 12288:+vfXffpV+tzUvu/0m+jtC65qI7L5sDWn4iZNUt+:svfp5l5cWZ
TLSH
T1DA65CD18ADBA7D301BD5106B24EC643ECFF16BD29CAA07C2F4DDD7802C66C6A90865DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ko.pak

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\locales\ko.pak
Size 602KB
SHA256 67f8b13860dfc28eb3ee150750fab39c0b41e8638f06920f240f434ce08ec753
MD5 ff9e46176e5ab605659873573fcd77a1
SHA1 154f46cf87a4c25b2a94b3edc5c516e28c1dbc4e
SHA512 1d89cbb9f9996054630e3ce234ff39c10547adef5923b9676bc2d707e1e9eda6c9e4cc4d0eda58d7021b0769669e6dab235023a689f00f8a26e26cdfb8d58196
SSDEEP 12288:EgPjkbqsDMgNqifYj4ZGRy311p761HHRh6zdI+zx2SAG0G1zLhw84vRt8SnNhrJ2:EfbqsDgc5eKqAWS
TLSH
T1B8D4D6F238DB63CD1193CD82AEF4FA198382D976F7530294ED44CE449E245D74886ABE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lt.pak

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\locales\lt.pak
Size 650KB
SHA256 bae83903640041b5f949398d7af1975d67070467c4925950c7a838edd73ed956
MD5 5382a30462ced516155ce67d8d11915f
SHA1 2d35d3a5cd94366830812c70fc87ccd53ff4d7f8
SHA512 aa4a6378bb95a14a6ae299e308c4d48169fe5aa09201e1b4e3300b68b3480e1276abf9a8c93c36f8ca5befb7af1ab4a6e2e83959c9fea5ca9ef7ce117e4287c8
SSDEEP 6144:c1JaU35SXMpPeYwKSR+PEW0M8dwPyHFAsx55r4r7KFEWAKYyfmMYz6SZ2ItM:c1MSSXMpGYw588WPCT/5m7Oiyfmz6SDM
TLSH
T1DCE43C0069E3BEFB9A4467C982A48AB8DEFD50005727BC61EC69C79BC43BF452560F35
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lv.pak

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\locales\lv.pak
Size 648KB
SHA256 229b518ee95bc1960be7e72c8af33633fc8b9a32ee09900ae6d64b771c40d359
MD5 7d0f0e46b980575e27d82b0b681eff19
SHA1 500662569e3991f84967439bd970e76b1da7761c
SHA512 179cc09cb3247f26db22ddac7db2cab4eab035a0ac1ca20dc8a27eefe5b0572eb2c531543955b1a9adcbaf32617f3019a5f0a9321426fd1bf0c8f77435b0286c
SSDEEP 6144:5x39JtW+5283ASwK4oNrtVFTN5YyzJUmAsz/7bOy52cnafF/Tjqo233pz2egDPOQ:vtu+KSXjvBzyu7Oy5oF/Tjq3SO5+
TLSH
T10CE43A959EC68FA94D908EC7732AD123A8CCD740FE07E112DD7D4B3A550F52822B5EE2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ml.pak

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\locales\ml.pak
Size 1.5MB
SHA256 a973e6ce2c5cbba8f41e54d9aecef31bdabb070bf06e470afce1c4ed263be671
MD5 7462d084f2b11f1a4917b8214db8cb28
SHA1 2cec8960b822b349075ac2456c82ede9c3c3b2ea
SHA512 a88973341cbb013b87136f513d5844559b3349733e2d673e25a7c56062a7bfba31cbba59c11c37d7f643976f4c14d038de5583b1700babb2a4859d020f9d1a3d
SSDEEP 24576:sd+9y9XBkx/mQKfJB3+zX/o5zsnK2335n66aqG3g:B53
TLSH
T132659D5BA036CD3B0FD102167B4E2FABCD5B9F9140AF668B5869F2628C59F7D0C99031
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mr.pak

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\locales\mr.pak
Size 1.2MB
SHA256 0eae188c9a81bd3257a21dc28448b5e9e5c3f4f4de4dc8e178e7f13cab06d6f7
MD5 b7fd0eb57e0a1266990bdd0b405675b2
SHA1 74becbfb683508912e703f31c650cb29057f1f74
SHA512 e6fb9760d62051f1185b060e8288c56b95e3e8d701767d8645ee9cd464993b76c78aff365f401a56e391d63857307827d716ba026bb5e4712444b09b0ddeea4b
SSDEEP 3072:rMfCBVYlp+n/4xasCPLmFZfr1iuJvm89/njU6TkeInVEwFEyGRg3R5QodgEPYyla:Q6DYL+CZTYgKZOa3Vq9X5km/Iwp
TLSH
T10345C24DF7BAF3685DACBC8E36540D3BD8FD21B1C3E9925648E1B3E74884CB401596A2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ms.pak

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\locales\ms.pak
Size 558KB
SHA256 185a275d0fb6263471ca1844c8df7fe91d2e98b209379b4a7ec18981ae642c53
MD5 28a0fe169f021f14d0392721285c11b9
SHA1 7db2861024d910f1aa6412c1c9f792262eb1e7d5
SHA512 b6d8184a02ff9a79618d403507794accf2b0a3c9d2e550d038ce29053077b573b2573c011ef73242315370d026790d82ffb056d6dfff90af8013ce30e5cd5925
SSDEEP 6144:59gGbI7XPmPt5I2ox3X2czrZNHuqwxCDctMxGlx5bQKyGY7uB9ce:59gGE7fKCxn2+PHuqwxIMx5AGYS
TLSH
T19CC4B6169EDE3118045943D9D2DE6A1B7CDD3332B305AF2B8DA08FB0126E7E53316B99
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb.pak

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\locales\nb.pak
Size 539KB
SHA256 bc11695694983516a9806eaef25e380a5d705c2c8e91324192a0983a50d1291e
MD5 cede00793ec9a3f60083a3b23f2ee398
SHA1 8822e750cd455b40906585845e988d0ef8aa63ae
SHA512 dc8ba9b5a9496ff253e3d9a112d422dfa82ba39087452965c68c73ad5d0f6385c1391e366a04bc0f359715b19aea32a21d0934756037bec9690b3d28a78d5063
SSDEEP 12288:EaWDAV1ja0nkzF3uoOp7f7g9CfO2Oh5b6+bDlc/wSt:cDAra0G3YnfO2Oh5++b5wH
TLSH
T10EC40883EE46B72EF2A44794F41886579B7D942CCE98199B94CCC63E18C7EF092BD1C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nl.pak

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\locales\nl.pak
Size 560KB
SHA256 124b702f9f31eb34f307cae79074812873307f36c9a72f53696567a26ea13ba8
MD5 1119f7c68f283d96c533fb0a73ca1ed6
SHA1 03482c63f2d026b5a342a4dc1468ac563113b09c
SHA512 679c758ec98bdc6f329578bab7579997f5e47476bdd89b321210846d31e68e017aa3ff3c066cde0f8d589ad512a03c478fb16791ec0525f993ab6244aa91057f
SSDEEP 12288:6VY+8E/lbJ9WQusuUpEgw5JO/P45btAqzYvGqHnGfmTy:sY+8ElbJ9WQusuUW5JO/P45bKqzY+qHY
TLSH
T1F8C4FA17A84E253E59C1B385FA098FBBBF2ED22CC26CE67D94DDC1341443F68826D589
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pl.pak

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\locales\pl.pak
Size 622KB
SHA256 55d1f22dcb6fdea4f641984a386b3497cf6d29fdb4c069d1e906efa4404d9550
MD5 b121490a37ba8cc7abadc0b8da501c4c
SHA1 3bb39e4f5c1113b006872a810aa7ea0983aa1e9e
SHA512 20de463f1ee1b512eac8538bc8b4fffca55670d3aefa58088d1e40fbb2432d2e668160dda91b650e5a2ce0779c228333b0d5016f9d58c643b245ffe313b8f4de
SSDEEP 12288:BgZN26NWoOBAJr4OfQfuzSJaVHAbPtPyCUdve3m0DUwAMvmI1QhT95Tewolhpky:BCAKGHAMB1QhZ5qp
TLSH
T1DCD45C0D56E59A4E4CB008E6F2E70B7CBCDCC808F209D35FE46F452AA15B19EC9BE594
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pt-BR.pak

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\locales\pt-BR.pak
Size 584KB
SHA256 8ab2fce26c0612520d152147637929c23a979ef059ef37757ac6988a9fdd26e1
MD5 afc6a3c82361bdca41cdd35da5f1ee4a
SHA1 0ab9f66dcc66087a62e24b1466680ea3b0d899c1
SHA512 7404c513ee21fd8f9bb4055e620a2a70098aecdf46580e6940c487af91acd4cd84021c04d4f92abf6c3c2fa7c713392c572df468e8bf07a1237a6904b3f0e6d8
SSDEEP 6144:UC50VkP0ZNBXBLLMOWylW5N2X54N1sRLJX2Z:UC+Q5EX4sR1X+
TLSH
T141D42B2A6DCA136605225350B74EEB47E5880745FE0ACB87DCFF4B05A3DDE40DA33AA5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pt-PT.pak

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\locales\pt-PT.pak
Size 589KB
SHA256 56974d3f5c4c614fed58eae2b3889898a79b4cd6a13b3468c4f370e2c09470a9
MD5 8653e54d26a1016ca92bf8ab698dadfe
SHA1 4f1c1d239228d3df0d7913463e1707206acaf934
SHA512 2cc5ac9abb93731a9ee3a7aa02db11f3302b807b973e045e15cd9d8401a44ca12b98a30d3cf23cc515a704043c582521475e34ad56647595cf75eb67fb120867
SSDEEP 6144:7yLqfoAbw4gOrHu0WieJVJJxhLdGmdmfztj5aj8s4SRow:7yLNAbGiH9Hj5aj8pSRP
TLSH
T1BBD41A286EDA132605135381B70ADB43FAC85655F809CB87C9EF0B4672CDF84D6B7B62
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ro.pak

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\locales\ro.pak
Size 610KB
SHA256 309118023eacfe9aeb3405f2606a323982e75b1e33887e85be9235fc2ceeae5b
MD5 b827207cb0f6b7d6e723d793482df438
SHA1 3089768ae04e82dea5059bf22a5555b87fad6946
SHA512 baa81a2af80327f679409221d31dc59adb83708bc5c267fc21925f376da85c186a50874cabbc0e88994e053bc867935454fe8dd4dc63b2b56894553a4bf3592a
SSDEEP 6144:NooK8ZC7AFqm+vOFNXOJHE+ZToucfgW5Ja0+9oGXl5tsPUuXhs2kD/Nrgf:PKL7Ad7XOS+ZTo7VXaTtl5t+U8uD/Of
TLSH
T170D42C23A1C81A97199152B2F73624D3E88E105DF641D28DA4EEC97D10CDDDBC62EECB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ru.pak

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\locales\ru.pak
Size 1006KB
SHA256 e042ce451d72fc1e2fa10a66fbc0490a4d9fdbc34caad64d06307d787ff5ced0
MD5 2480bd65179a61000c4b0a9b7f9e6d9e
SHA1 fcc0f8951dc7c9a1602af921fd0c142c33ff3ba4
SHA512 3418c8dd8a768f72f77bd159ef6b51769cc8bf601cfaaca7d8f8d922ed14914d5bbaf08260db861c8c39309d919e7ab3cccf91ce8c2a8429728afe2f8ace7969
SSDEEP 12288:Gp+ZLmafQeRo4YwyspPzJ9LF1WfaWLQx6HzW/oqSvDse2DmATXeEYHWO3j/ETeXU:GkZr475k3/b
TLSH
T18D257660669E64DE1101F01BDD08BE0D3CEB45FE3FAAA35219A42D7F35F2024C67E65A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sk.pak

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\locales\sk.pak
Size 633KB
SHA256 aed563cc711b2b65d4734eb6c21aca2fe5fe4411b47681b31af8996245adadf0
MD5 73a99bfd6a4729525e89c9ea8c5ffb19
SHA1 f85224dc7eb7f91dbc9341dc08d651d50a5e3fd7
SHA512 531a4826ab88be01a77a656b86b0b6a63de8d86b8adbf7b2fdab53c75e3bcd05acf4f4fa9b19d257006de8192619feddcedb3f427e4ee87dc5a661206e7b984e
SSDEEP 12288:g1qzXr7kKyxAtieiUeq52noEwwEPfpTjsxt9/H:gEz74MiW5wwvqthH
TLSH
T196D45D3FDFE6181E8E8D0148EFEA7110F9BE46508A4EB4A5940F374714E26EDCA78E54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sl.pak

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\locales\sl.pak
Size 606KB
SHA256 495125af6d3cdc85bb24ea4a211ea808208d19ce7af8dbea44e1e9317e91bd5a
MD5 8db4694bb55a04792ccf28b872200449
SHA1 337c6cf7ff38fcab1b9e07a585d1646fdafc2dd6
SHA512 e31a2d732c180af19effc9ddee00dc95124e13a2f58bee9fda2eb458957034a19603f920b46df32c1ea968b9fba20c441e710514d266db2f3deeb0b45f0a5ad6
SSDEEP 12288:7HZJ5kGcB2A3RDcm5q8fYWOq8MSi/fzYlqc:75oFDcm5q8fOi/fzY7
TLSH
T19CD43B397AA79E0F0D9BB2CAFEA602007FDC044CD256A661EC8F337D5015A3827BD595
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sr.pak

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\locales\sr.pak
Size 935KB
SHA256 9d98eefbf8d84ad054f58a286b4891d51ae8da99f82047a09886e4b661db13d0
MD5 e05d3b99fd720f8acf91c34422aa2d84
SHA1 0089a2db814ac9a694a8f87db36eb4434b88a121
SHA512 86ec42459d429cfdf6c9a86d1e4a2bd072df76dd28c4b05d43fa7afc2ee4af2835b8fdb1365423715fc6f17f9f2077510202b7adbc21344fca2e1881947ca5bf
SSDEEP 12288:Jhr5KmyfwWlIluGS5dRI2Mi4pDbXv95YZ4C5ubxIzj37TSRKU/k/1:HoHFcl5ouOp
TLSH
T1EA1546A19B9E64DB0901F41BD808BE493DAF41FE3FAB975211601DBD34E10B847B939E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sv.pak

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\locales\sv.pak
Size 543KB
SHA256 e663b723c4dec60526182c70c943c9caa4976de09831ded69d59c9fe4114283e
MD5 77d964218a607e3fb80423d83908c1d9
SHA1 d1ad9b66d70b086eff174cc4bac5c2d7108da400
SHA512 c3b2b4675da25bd092a2df5a9557c0b86b229332ce08bff0de7475d603edb6a946ef8e6ee16d2f3afb3c0f31ce9ac96f90977740a49f0c8c5e8bd6bcb8d6005b
SSDEEP 6144:HuJlDvawV6wny2+wBj4xhsxgyUlutzL5vRFcz5RtGuA+SF45kFMUOSOrs5r0pOrK:HElDSwvnfGh6l5LratLh
TLSH
T174C42D438A10F526FBB2134DBA08115B0AEDE25CE7E2954DB8D9883DAD8BD5805FF347
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sw.pak

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\locales\sw.pak
Size 574KB
SHA256 c83bb0238ca67b1137dd73e2ccdbfdbc3c2312d8c95aa2636940cc7dfac13cf0
MD5 5414bd4a3e622ac2bb795a526bbabfd0
SHA1 1645602d8ac7aaa2eb736af09c9f54a8c3be6e52
SHA512 8c32bce7b485e00f1630c3d021e69ef6ce00870eb41ddb63daa415111f40ae44f772588a3cc7c4508917f517dd0062bc20e926493bd79dc6431d354c8994f0d3
SSDEEP 12288:h2m+pe7sCDxGl2qL95zmedqkGjRdjh5sbQh49oN/vm5E+aKpTb8jNUitVaBaYfgn:PSiN5M8z
TLSH
T153C4E6629871E0191233618603DDFF731BDCED5C2A2B29935A46BF0F218F58C57ABE49
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ta.pak

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\locales\ta.pak
Size 1.5MB
SHA256 b76188eff81ffd0a0d9ea7e547eff7bc05069baecd650e1c1e11aa707b40e99c
MD5 e99b01879a05367b46ee5cfb071aa439
SHA1 f915ab0259c2c61358cddab6a31651004b68a319
SHA512 5a3b004bdb3baee82ee9cd38b5963521fe2f606809e34874093f966d6e003ef94306feb106b66ef68ff8bfbc9a361cf4521b02357313130ec112916b6d7185f5
SSDEEP 6144:G2Glm8LybpTpO6DGfP5gsytRditm1vYpiMyX:eUcybvpDGX5gsNtm1vYpiMyX
TLSH
T12C650DCE923EEE890F93288F0319536912986155C07BE3A67C766E1198ECC5DDF3427E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

te.pak

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\locales\te.pak
Size 1.3MB
SHA256 471e766e6647e4315c45b15f702dfb2a8253ce91044e141034ce37ca9e0ede68
MD5 14cb2297344dbb493bc54d69f33baaf8
SHA1 23f647b50f799181ba626fb8adf5f6c72678754e
SHA512 ba9ef80197bbd574868e1e4aad44fc746daca9b9acbc09dbe7484fa1179258f534116f6c495741b2167e638e50cc925b4f4ff428456e19247f374a288c4f90cf
SSDEEP 12288:/9cp203Y7McKNUy5zBPF602HgpC8ymoRRT56bGrW3p98W1pu3p1FPn/BogCel22u:/jUef5xOHIs
TLSH
T1735592023A6AD310DAE60273752CF66C49781B8161D6732C1EAFA357FB87D7E0843676
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

th.pak

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\locales\th.pak
Size 1.1MB
SHA256 010ec4d2cf97d45ed2a1934372fa389e49dc32567a97946162271af1c3a6e7e2
MD5 4fc14b42e18597a81d72f1d0bfb27e86
SHA1 adacb612c8954a4553d30a6780a000d34e32e3fb
SHA512 85d5183721986aa77485be86ea326efa1e06a5be5312e4b1065329515b45fbe57021e7bcd17e0122de8e24f278582ce617c89716bf395472f3c81fc777473696
SSDEEP 12288:/6GN9LyZYAvzYLihxs7UrkJUsEP5eXe1M+iyKx1qsG5U12dNL3flj8QRUnfnRk1O:/6l5aNZ
TLSH
T10B453BB37247DDD479441B5B262A7789673DAE693F73F8E00089215A73F071A8422EE3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tr.pak

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\locales\tr.pak
Size 584KB
SHA256 801df6a4a8d52b1ebb99da0ea788d933804643cca2bf8bbc46064eb6016e17b6
MD5 e869387a65fb72e88154924327b2c6fe
SHA1 53ce6a248bc3089fb070a31df1f9dab60f70de66
SHA512 71a0aade54b053c8a358193880ab842fe8cdf1515be9c855d1cc9291751c75d0a5f6a2f7dc41aee06966c3290fc28c54ddb0ee54337e0b9509fb076b2ed56948
SSDEEP 12288:17I/muGZAUG34LHzNsgNDPqZFYjO6gkS5MyJ+:5I4GI3gkS5zJ+
TLSH
T187D4FB8178EF281C8BB9278FD6E90666F8DF0766B331F5469A268636774535303E360C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

uk.pak

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\locales\uk.pak
Size 1009KB
SHA256 aa204656b9efbad5069943054f70fc0a6fc1e9f660b4bc59bcfa90cde3c3b0fe
MD5 f7fba7d95264630c8a281cebe24ff6c4
SHA1 4a27b41afdd65bb6e2af2a997970a386e25a3c2b
SHA512 4025cd7503d74c25ef37bdcac7f7e8610d96f439850e78229deadf9e3b24d0d1fbf8a1fb3ac4caf4209886d2d98e15614d086b453d59f71e61b943fb77e21b81
SSDEEP 12288:rAn+Mk066h9CvzAFlsSr+8hU53CKw4yAIJIPc5jB3IjGltAhLroO2ueLNiXEIqUW:Mn+KK05+r4
TLSH
T1E42599A19A9D58DF0106F05BE94C7A0D7DA701FE7FA6471625A43DBF38F20248A3C35A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ur.pak

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\locales\ur.pak
Size 879KB
SHA256 b26fa64bc9d26991d7c2f1d20934e3dbd467d64096053887cde9ce99d7d0456c
MD5 f1a329040d2440fe49c316fefd7025fe
SHA1 3090b6acd68495bec66a57fcbc0cf5abfdf46dda
SHA512 33566fcf50a0833dee4771ae90d4e69ff3a601d425a948d4601c83fabcec604160c4c3ef80d3a2be05cb089d47c6607fc2809149c7cb788cc91b5b0033f8a207
SSDEEP 12288:plEy2o9Z8PMASGqtdQjt9ayc4uKT5QdYE2HC7OEtrnQYrkYjwadcJKwU5ugco/9l:zEyr25lCkM
TLSH
T18E15FFD2E6BC96B24A21D92780D33C34CB635F13D34BF285E56246C54E9A0139F6DE3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vi.pak

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\locales\vi.pak
Size 693KB
SHA256 06b752bff885c13260adf91b51d56d3ef5048ea0058f69bb24a1db3b45bfa969
MD5 32b655cc6de01d6ef9e9e9543c76404b
SHA1 ddd600a1637ad2704556f822cf56ab3360a42050
SHA512 19309326670f075a738976e129c79d94e5c76fae3c0adff0d169887f77defe80ffe966f2b83c952df5c8e144d2b5d551f1544b52be955e0d8540765fae492197
SSDEEP 12288:W2O0T8yAcaV+cCIdoE4tV4ES4a10fKgNfg4b3QI/mf5a8iTzcFjvOG6ziDHobrdY:WH0T8yrS+cC5VY440PN4qU5a8Ez6bOGL
TLSH
T112E4851217E1302680AC553EC6CE540D6FCAE42FF7C1CFE56FE4297476221A46F25AAE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zh-CN.pak

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\locales\zh-CN.pak
Size 498KB
SHA256 82717aa331b1ab869046cd691ddc9589882a34715a2522577313f0864acd083b
MD5 ac6459b0ac8593378f821448e175da82
SHA1 375e0eb634cf9b4d041a9d4a078ce5a88279bb69
SHA512 f630edce216e1ca1b0fa7da7640d2b7d2d0fd587c8cf485eff4f61fad58ab465430460a2ad35a30ce325f7db46b30a647a569e4035413f68e6d54ed7ccd7528c
SSDEEP 6144:uzXb8PpbmJAO9J1f88zXVfnA7irfrT1+359mkda3j3k452E7nc9fDklk:ICKJhU8zXJnVrfrT1g5oTz04P7kZ
TLSH
T1AFB47DA911F9BDEC044650E03B29623D7C407207F667AF76ADD248DD2AA2FAD0717E07
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zh-TW.pak

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\locales\zh-TW.pak
Size 492KB
SHA256 61709875e1ede0ecc2582a282896ef6398b0c2f4fec07cfabc68c696ba6dd35a
MD5 e50910238176ec56c64280e5e564ab90
SHA1 6dc939c9428f67983538f3ec5c4051da0b7ed4cf
SHA512 13d6a44fafa0489c97da31382e30e5326d839d8f588dc57372aff3c42fddb30760c4cf2a480a35f1d353ea337173fc2a0444a4a5f5135552c29f888481517f2d
SSDEEP 6144:ZsE2aCffSD4l0ZxUTVJR2r6bl2iucncgF56z73nvD6J1z62iieMTe:F2zfAXUx2yLncgF5073n+jE
TLSH
T175B47DBA09FBDAEF0901F884B7CD563EBC8B342CDD777636FC8518D42E66A540A61046
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nfapi.dll

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\nfapi.dll
Size 234KB
SHA256 bed8b0d01dc93c3588b90e1a7e4a93b56efcf83e9b8c2aeb353e65818dc2ff4f
MD5 5d7f3b706fcf5b92c2049bfae2ccb665
SHA1 32efa689ce83d72b6f51404e6b6547be43181273
SHA512 dc34b49e943c8e49d6f1f5d4d007acf47cf8ba00f5096b7bd8382c329f93f0291d7d83a0fd1a4c7ac3d0b47679500bb51a385b16d14326e72339a8a2a3be45cc
SSDEEP 3072:dZ2W1+w2qaWfsQSN+Qnw8WJku6VYEHwnqD9tZHZ57uKVVUZLg0eeb:dZJp2SUZyGu6VlD9tZHTuKVcF
TLSH
T1D9347C5AB2A404AAEC77C239C9939A06F67278050B50DBDB03A48375EF2F7E1553E721
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

README

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\on_access\README
Size 526B
SHA256 006380095181e4291a88e1edd5c00258cdecd1c34e9d07a54ebca0a67b621578
MD5 8c4504c84273e7ec7be437cbd723cabd
SHA1 a10fb9ed6dbaaae70116726f5c002df7ab94542d
SHA512 5864d1a7140369857af54aa5db1437e1bcf2df127bb46f483a455f31a6950707b2a263e2911ae905cb659d4a47da4bb8f211c4df1a853525fa32d63385fa48c6
TLSH
T185F08B47AE592D627CB1C7D528E7B1A4ABD982C4A6B22A9220DF720450032382617466
MD5 SHA1 SHA512 TLSH

Submit Download

avgio.dll

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\on_access\win64\win7\avgio.dll
Size 188KB
SHA256 17a28a18e578d7e154cc93c29b344f70d9b63ecfc74a147229d0421db6d4b660
MD5 00d5a0e59f25b95b04670984fed34c63
SHA1 6977454d3763b9847ff97a4105254818152bef44
SHA512 8ee56d9edef156e0d69669332427f4837b20727c77acf73c3756e8d640858dbc13d11187651be4a70f93585a1f60a87004e30b0bc2ec145c2e3fc43c5eefac16
SSDEEP 3072:6jxaj6melnbKjlTvEdrjx3R3497y+1IqBXejUbwbBvZDtB9:6jxaj4b+TvEdrvoe40tz
TLSH
T117147E5BB3E400BAE9778278C9971616F672785107309BDF07604339AF2B7D0AA3DB25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

avgntflt.cat

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\on_access\win64\win7\avgntflt.cat
Size 9KB
SHA256 7f49d676b342ab08d809cac3326e8101c21fb9776d51853a9ce2fb5e8b92c245
MD5 f3018b52949cdcbf666ffaf6c17f985d
SHA1 9b4692f754d090cd8b2afb9c4ddce60a05aefc9e
SHA512 69b1b5c607e37d6cb0e7049fb0ce1ee79b720992a354aee73b67e9b87dc1e2c16548ae55786dbb65ec4e8bcfffd39586edc660d5b41d58d69746b8c25b627af0
SSDEEP 192:r2p32qXooyKfPFWQFTWQ0dPLrMhEqnajKsKmEU1Isb:6vrPFRoBjlGs6Ul
TLSH
T1E21229D28E7C54C3DE53686043E8E9937C3D67DB1C5080A920ABE2A50E93BCAF70443E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

avgntflt.inf

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\on_access\win64\win7\avgntflt.inf
Size 2KB
SHA256 2d220946e718fbd41e68d9324caf2458a95beb1446e8447edaa2b99c8eb265da
MD5 0d87b337d3a44a6b7de7bf6c4bbbabd6
SHA1 692a736647a575278c65dcde5996410071df09ba
SHA512 6910581b8f3b88596a5e8da43beac9ea68f6aa3644b8e634eefa8f12c3be1c243ad31eff0122904d8c61462f040667569a47c9f19950e5dac7e1a6c8f89aede2
TLSH
T1E651EF4AA3A18570696721046F033C43E5163C90F1D56625B2DD8DCEE384E6E86F47EE
MD5 SHA1 SHA512 TLSH

Submit Download

avgntflt.sys

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\on_access\win64\win7\avgntflt.sys
Size 216KB
SHA256 31a3f5c4b19040eb20bc15b4609068128fb6028e137e98f2b2c6c679d0311c4d
MD5 d9f90202659f8ce4d5db6e83d24b46dd
SHA1 29a7b1068a5090ee59db422364b42d2c8f072a46
SHA512 b0a9a0c0f18446e6a2b9ad3200dbd2cb94acae5df553beb971b41220304941219d12d3e94ed91dec254e6b907dac6fcb1aa72a822a09a8e523cc76071b221c31
SSDEEP 3072:vMPogiYZ1dqoWYYCGxbceUW8bUDsQWBsMPelkz4IQ9RLNM/qIn20aqB:vooQZ1ddW5VUWvDTMGls4IQ9ZN
TLSH
T1CA245B52F29508E4D9FBD1B986A69227FAB238080335DBCF05608A551B23FD4FD3A35D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

avipbb.cat

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\on_access\win64\win7\avipbb.cat
Size 9KB
SHA256 3ad3712e2d8e420fa4ea033110e202da3b70288b4f42b4f676e12a0b72f4a632
MD5 351a7acf84d15a92dc75d3fc2f504f0e
SHA1 1d316b5d3a8729c0f03a140ac55066399fbc808f
SHA512 f705ee3bb4aa9328e808d0a8793692e1b525c0413e2005bd5f1d442be4da23e05b9549d85ccc8c1ae1f9c818a4ccc19207f0feffcd11d7b2b3039ed4e20c3b23
SSDEEP 192:Wh32QmwBYyKaWFWQFqtQjWMvN/qnaj9D6ad:WlPCFRkq/l5D6ad
TLSH
T17B1209E2867C54C2D9936C6043D8F4937C3D6BDB2C2088B921DBF6A51D937C6A70856E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

avipbb.inf

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\on_access\win64\win7\avipbb.inf
Size 1KB
SHA256 4bdc3b2fb007febf3718c453e08c590d00378fea4e2628431f85ccbb1099605f
MD5 b9a877ecc51ee9f13d9e5451f8b12895
SHA1 45a8abeb8c295295e4952893452c54850f721868
SHA512 079cd60a4d3f6bc990119574a4d493571afbb24209f1a15bb0202d3c24c66fcec3151e132d84ca036f46cceabac34d1a20c7d1034f0bc487fe9feb2740fb95fc
TLSH
T14541014D96D7C5F1A7D62245AE037402AFC0348511A96D2071EECDC6C7C2CAE5371B39
MD5 SHA1 SHA512 TLSH

Submit Download

avipbb.sys

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\on_access\win64\win7\avipbb.sys
Size 172KB
SHA256 e442e66d3e24d54696c8687d1bd1a9ab41ed34b723d2b25af195589d11c4fcde
MD5 b49a44df6fe77ccb861985f5a5dd7ba5
SHA1 6e5163e191dd789f8cc33a531ce9ddd9bed2a842
SHA512 d53f56966c8750edc513c86c8e9b47fa1f0445a86a1d92621f1aa5fc9b9400a4a7f65b9ae0d2e537c9dde1b23b16fbd56af8ab74d62a8a777106e9b16e58be89
SSDEEP 3072:sUnNOdMrlqdSL3W3TRjWLKcudx0TzBrt6Ozv7druQuxAmP9FrN:PnQurlLLmxQu/0SOzZSBxDX
TLSH
T113047B46F39410A7E56ADA79CAD99613FBF3B845431163CF0220DAA56F277E0F938309
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

avkmgr.cat

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\on_access\win64\win7\avkmgr.cat
Size 7KB
SHA256 901c32f032fcb4782217c4d2f3f570e932107dda74a173f1f3d8cdb993bd1007
MD5 f3324c2c121d360f8ce3553e221c3ce6
SHA1 85939054d39067cc7e1089de71138b4b4283f800
SHA512 045db8fab56ab1c4ff0cea326cd44624c3bbab2d042b3065541707bec0021b669e6a49fcb2adf502fbea38dd4823e85fe0f2c588f93efeae4108239ae1271c78
SSDEEP 96:SZR2gYJUzSDaSDqhRwUWcGDvbop6WDfeRDUzxwLhPjkFokPXhVEM0YDfez6rEfga:S32HmX0c0YWEhV0+3Ef5KYpBjSwrQa
TLSH
T17DF10AE78A7C94D2EDC39D3147D9DA87BD39E7D76C000A1E516B9BA81C833E0A70842D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

avkmgr.inf

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\on_access\win64\win7\avkmgr.inf
Size 1KB
SHA256 f79a54cfa9f0901ff965e577cea1139583d1c73de9568170f895ac2b46c9b305
MD5 176af3c43b608af665f48a35f497bae1
SHA1 e992df632b9758b3df7b4ea69c632f12a03daaf6
SHA512 03cec71f9ca56d99304b6dff1b90a2ca5d04bf5cf7cd0e41e1134cdb1cac50540d6e3bec18313f970420af4bf29d76653e9c5a9fa1351d1747989dfafc208493
TLSH
T13841004E8A93C9B46EDE2A55AF03B4B2A410B0C410B8B51072EF4AD7C7C1D5C6331AED
MD5 SHA1 SHA512 TLSH

Submit Download

avkmgr.sys

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\on_access\win64\win7\avkmgr.sys
Size 35KB
SHA256 f8d33bbf769786163105c0fa794970054bad34cc5985416af553df1d9a64039b
MD5 eb5c2402e2f402a19504bf6ca9c3e06a
SHA1 63aa9690c36d743951558422d841276c25cde77d
SHA512 9b6b7c06e904cf36aefc17e14a108e9636c3a8920a34960dcb26fa520326c7ff47f03c24bacaec6ba91440237fb16afde0df01c299cdd7a89c40cc489a3f0151
SSDEEP 768:p5UbgvCkoe+nuPwoz4dC2xfDKKdqe0nKUbZ:88axeLwos42xfDpqevq
TLSH
T1B7F229828F582843ED9F5F3081EECB967F38B7D21B51879B4151B160AD83BC4BF24619
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

avgntflt.cat

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\on_access\win64\win8\avgntflt.cat
Size 9KB
SHA256 099e028f17154e5dafdf66a9963dbccb25442b0c570c29aeaae1e9d02539a8be
MD5 3ece229fca8ecdf8e4889e062abbf95a
SHA1 47aa2952646097710297f5bded9b115e418bac00
SHA512 985d4005541e25f39bc7abf80c05b97fe57220bf02bcbb7ff41f792283af5aba87d7db433217ffcea002d35dd113913bbb6e980fbf99778126f129a799b58573
SSDEEP 192:NfafyZYxJCxuXooyKfPFWQFzWzQPIiQLCamylqnajsq3rQe:Nc0IrPFRI3iQ3Jllgkrb
TLSH
T1FB12F9E28A7C54C3E9A7786013E8F8973C3DA7CB1C1089A8109BF6651DD3BC5EB0416E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

avgntflt.inf

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\on_access\win64\win8\avgntflt.inf
Size 2KB
SHA256 c17477ce4372a43268b01e398f438efa52729bb3718324be9ee1508849374f09
MD5 6fae3f1bb20b9e1f2ea6d8e0a1c35e68
SHA1 d281eaf5659ac3b6dfa501bb2206b8a7af86f230
SHA512 f77032a6451e43e0b0c7e881afde1ee83fc542412ff6ee3dc9932608f1c61943f18da31200c4347e9373f575f5e6f2ee3ebca655cf9f190adbc12e5f7e7b5ac6
TLSH
T1B951EF4AA3A28670696721046F033C43E5163C90F1D56625B2CD8DCEE384E6E86F47EE
MD5 SHA1 SHA512 TLSH

Submit Download

avgntflt.sys

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\on_access\win64\win8\avgntflt.sys
Size 204KB
SHA256 868ecdf543865035a3703e8837869441683b8ab396eaadf6aaa0e455e8393c5e
MD5 ec059af10524644bddcc073916e78375
SHA1 93a9466afee21f61f643f540b2ab82ac7db60b62
SHA512 88310251e07eb6edda3eb28d057a18fd7d1ea7a9adc5f861fa7ad127561bfb035468974fd11685b66654fc37dc3577d7d720e2e9e4f4fc38d116c1089ee9afe7
SSDEEP 6144:S2M8JRGRI16YO/HqUU2miFjq5K3vPRTh9EsRbmN6:S25ERI16htvo5K3vPRr+
TLSH
T189148DA3B29409F4E8ABD2B486E55117EBF279011732D7CF02A085551F27BE0BA3D35E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

avipbb.cat

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\on_access\win64\win8\avipbb.cat
Size 9KB
SHA256 f456a7783dfe46bb46547464579498f7b4801258424b4caa264d8c6f57c1150f
MD5 209bedcc941da626c2db370a80e3513e
SHA1 c88910bf5a4b35893e60d92828568d20420a9caf
SHA512 ddef0175e3e2919c4504f99d054b314e48f4ed0ac5c1b3153e1581b3614f304fe3850a8d465163cb4c502d4b026986121d6e4e30fc421d2c583b689ec933a10f
SSDEEP 192:CEbRVRDy8nJCx0mwBYyKaWFWQF259Q8I+XqnajlGupG8hod:njJn00PCFRO7ImlORd
TLSH
T1DD121AE28A7C54C3E9A3686053D8F4973C3D77CB1C2094A9219BF7651EA2BC6F70852D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

avipbb.sys

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\on_access\win64\win8\avipbb.sys
Size 194KB
SHA256 80d9d7444623175794a51b6710f99e911943bb58a7a9621bc53d0d4bde304daa
MD5 c8d33c5b49a4760f2d81710eba839ba2
SHA1 8f41e4333dabe52bfd988a68785d0687599f1154
SHA512 451dca816d38538e082c7388aac0997eb04f5e8fc288fe44aeb661ece1e717060d73f24d60c7576403a68a5fbda3f931161602a2a8b98f506b56ff64c095cd78
SSDEEP 3072:lRgvKNe0BiAKLgBy6IdaJHIcVOmBvU6vHCSEQuqQ3TJu7Gyz:l2069oIMbVOcvU6vxEBDJI7z
TLSH
T163147C46B39415A7E96AC6B4CA9A8617EBF37842173297CF0320D6712F237E0F939315
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

avkmgr.cat

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\on_access\win64\win8\avkmgr.cat
Size 9KB
SHA256 71e8546ba1c9716ffc8072f97feb945cc466d832ddbf53b090af179094d473bf
MD5 88ae7b9879c9ac3a65ef73424600ba65
SHA1 67f74e5f569aed30bda54b5a6467d86d0110e448
SHA512 5b87166c206dee390e81a3ad334578a9b1ca7274b677af3cfeb2c6cfe46b756a59df78b0ea5ab7c1e11d3465f5955e58bac8dd45daeda61ac683ae53388c3dc8
SSDEEP 192:niBT2KJC2tpyKWFWQF8ESQ85SD7Zqnaje1cwrxFh:+mFRTS9Ell61cwrxn
TLSH
T198120AF28A2C98C3EDE379604398E8937C3DA7C71D608168259BF6B51D92BC5E30456E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

avkmgr.inf

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\on_access\win64\win8\avkmgr.inf
Size 1KB
SHA256 bf526004b80b6698f782082cd3da58abf4e52a5f390d2f8d0d131b80f19775d2
MD5 fabaac0d5c0ef083150dec8615a8b2bb
SHA1 23b864f150922bd020b679e018b1b0ee59a7353f
SHA512 51cac3b029a5ec11ba36e8b7ad86b720da7e6546cb4ba8cad319200892ff143e9664e4a29d915a79f4a302b15078e44f0bc934715b8fcf8deaef4d7e3dde5801
TLSH
T15241004E8A93C9B46EDE2A55AF03B4A2A410B0C510B8B51072EF4AD7C7C1D5C6331AED
MD5 SHA1 SHA512 TLSH

Submit Download

avkmgr.sys

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\on_access\win64\win8\avkmgr.sys
Size 45KB
SHA256 c754dd80f8f3e19144ffb01a17aace2176cb5a8dd404a38ce6ec4ed88b6af759
MD5 40786e1ac650f9f7e8b67a672b5eb69e
SHA1 f529c7b666b029e19a301a30463abcadd59f4b0b
SHA512 da8453b4d97dc4994a6db2fbdb741119513bd007078bc352b664f77790a7c7de876f038943cf826dbab81962bc5551f506dc04e7d69945bf324f3a23a5e9e6ba
SSDEEP 768:Z6e6av+nuPwoz4d0ggKdeql0dsKI2Nr3h+1y:ZuavLwosugz3aHR3h+s
TLSH
T1302328C64B292883EE9B5F7491DDC6677F38F3D22A90839B4062F1A1AD82BC17F1451D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

remediation.exe

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\remediation.exe
Size 4.5MB
SHA256 ea8ef0d8cd1998f30964cbb4c4e45a30b4beda1d5ca88da5d0d0e9aed16ecfab
MD5 9756a2d8aecf7b6ec0c6df403186c313
SHA1 5b1741294f9dee9f1d0b16776a21ccbaca8277e5
SHA512 49456dbc4aa3bc398b5c10b0b293d941e1f9333d9e0fe5a99ccc77ea44d846623ed67873dc30657a34aab1a485aa105603d74eb0b5eef5f7c7ac784c19fa0d4f
SSDEEP 49152:dMCqdKN37+IfuzzOuKNtMSfRTLpb37yW/Twrq1jS9Punyo3fYSdhksz:VUa36PzzONFfbh8rxud3fYSdOsz
TLSH
T10D266D36625840E4C0BED37FCB424237CAA1745493F386DB46D2495A5F17AECBE3AB21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

resources.pak

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\resources.pak
Size 5.7MB
SHA256 a22d25e6d4fcfd8e3f86f925beaf6fd2ab1e2b6c5f54cdfe8d2a7f5e56f335f0
MD5 f53fa40b75411487f23d01a515d3108c
SHA1 c214fff12c9f55a0b95dd2675552659e990d92b9
SHA512 663c014bd06e2a9ba16684f5d7fe426d6c50e0b3bd737f1c607ab75ea176b66e82559fcfe90e3f47928b4dbef283dfbb36eff63440558a9f7ff88dc44ce9a658
SSDEEP 98304:d9gxIA9hPOXD1VXGhJiqQN9HOMh/rwrTO/jV0nlkMt2OMLAqWpwUkz1VuO2:4WIhWXD1689HD/krS/zMgOMJda
TLSH
T1155633FE72252CBBE44D8379025984B2478E706C2395B6B684AD7436AD7252DAFD003F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

savapi.dll

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\savapi.dll
Size 5.6MB
SHA256 4a39ddf931fb3a7bbb74e19cd6887cb537af6d998570e69b18fb2a945923d0b3
MD5 3bd648ac7f07106410a94e70470bf8ac
SHA1 12e1c7a8b7a2fb4f1c42c7717f845b1edba0d668
SHA512 9846e708cf77cd36db8f9e71f2111a5add1ef4c32c9d115bacb83deb240772c592b792a05a91e0ad29240506e40286915c4bfdd0a752fa981e8c108d152e0308
SSDEEP 49152:LGtlq+IU6iKVwASO+1GmQn63hhCabIXabXCR/P7fu+rM1k67P6avopRVqvEnF3Gh:z+/RQQgao9A1kUtAPFMG22vIo3TTK
TLSH
T112469EAEB6BD00A9DC7AD178C2979227E772B41503B057CB1A2486F91F63BE0177E740
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

snapshot_blob.bin

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\snapshot_blob.bin
Size 324KB
SHA256 69d9b2ecbc649fed6c41ca18e94f3a36b6770ff7038e9a0d07ae1ab824d9f7fb
MD5 524b841cbf33512fef8bc039fc4cb6f4
SHA1 dd36eb99f15bba3a44e9649ef43cd0746c9f1d51
SHA512 f2fc7f5185a178e2dd46699a3f49e1235ea9f2e24cd136485c88bd758b119dddca8b7c3b4c67dcdb6bd073f2cfecfa60d3fe8210654287ebbfa9bb1651a4dff6
SSDEEP 3072:Oeg51RKswRMbt+x29IGS/sMta+Y83Il/Pzn8qm:3g51RG+t+8JMRz4l3zU
TLSH
T11A648646B709CB36C6882671CCF9AB893AB5B1CE9FC6420B7549437F34B163C0965B9C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sqlite.dll

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\sqlite.dll
Size 1.1MB
SHA256 9cbb1d0bcfce5061fea3478b5c865eda15e8c5c821fc68b01c4e826f4c68af17
MD5 8003282115a01489f5d6d0d4ba3d4397
SHA1 4c552cd4b33b47ecfa83dba306f79b1ef20ea048
SHA512 62ca8d5620cc9a489f769101294fd42afb5ac1f7a1b92afd6aa53f66b8a41e042be220e6dcc31cf8bf623e47b6485302057a5d7d477cdef462bfb5740607e6ed
SSDEEP 24576:HkSggTEyQaFvl1brgqB9CXEdPH0d3DfEdneksS0ZKuzW:4yBlx37P0YEEMFW
TLSH
T115458E47B2B900B8C4A7C179C5171A07EBB1780617B49BDB9590C66E7F23FE2267E324
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

uninst.exe

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\uninst.exe
Size 565KB
SHA256 ca3fd34297b91bee464be18741783ac755eec2a4c309ca74c8d437bed17b66f4
MD5 6a4c0b6480021d1b83a76d7e08fe2499
SHA1 d2be65017b48422d534b8719b45fe0a453d546b6
SHA512 d95b05c260396a695c6a18e944a633de84bd15fdab738cf09e9d864fb0be8dcfae0eb0ff8eef83f0daad326c40f3c9571229c84f5a8ad016a28f61c7471de4d8
SSDEEP 6144:4Ya6i22jBdbIfScDkhRe5ymlIBrg7TeOaAGtYfD:4YM7/IfRs8SyzzfD
TLSH
T137C45BB3E60C9489C45E43BF9761C37A85586D5DA7E780C2E641AAAD103310CFF7CAB9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

v8_context_snapshot.bin

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\v8_context_snapshot.bin
Size 685KB
SHA256 462919f1b49c9e913042f9e9a738e9510884d5920a426a8a5f1b188e28c4da91
MD5 d4b195232a23682da49bb49b43dac7a9
SHA1 24671a21f74cc904f0d5cc48816f6aa95c3e3f72
SHA512 ca5f7b4e72313b365362d0ea4cb07eabc3cb08ce2a54afe4c53803f12a87909c827cd1a4c1724841468bf5647e4bdc61936a7bd5fdf2feaada1c694cfc3e4526
SSDEEP 6144:ri2g51RJBR+t+8mfdz4l3znkF52BhbV/n8Xn4xFoR:rr8ZYDkF5yn24/A
TLSH
T182E4A1D6F30DDB27C3CC59B6DDF9EA453CB5B08EAF4B821B3119077E60356680969288
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vk_swiftshader.dll

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\vk_swiftshader.dll
Size 5.3MB
SHA256 41c5d04f407184e32db40a42c79173be9fe48cc99ee8c43aaf1b5929786095c6
MD5 95c01fba487c907546106111d46fdca8
SHA1 9dedd6b554297696445ba5286bdca231ffb8d4dd
SHA512 fa0aab0e2b9024ac065cce194fabb7a8c0c56dc336d8ddfa89c0e9c2b21b7366f6d4b28394e50da7af4fd4d0a1186c93503b886b9fbd262fdadf0f7eef437936
SSDEEP 49152:C3K9WuPafgKQFAxxA8p1CcrRjB2c2OWEgT1+E2wCFBwxZpdrm43hFKfPT4RDZX33:CGPakHiO7+GTL/nVZ
TLSH
T13E463903F28580A9F05DD579875FA622F272B8811B62B6DF52A01F192E37FE06B3D711
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vk_swiftshader_icd.json

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\vk_swiftshader_icd.json
Size 106B
SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
MD5 8642dd3a87e2de6e991fae08458e302b
SHA1 9c06735c31cec00600fd763a92f8112d085bd12a
SHA512 f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f
TLSH
T1A6B01211430088B36062AF3C41811F468765411C36020D491040540E83BBDB6A102394
MD5 SHA1 SHA512 TLSH

Submit Download

vulkan-1.dll

Path C:\Users\Admin\AppData\Local\Temp\Fortect\63CF68BBA43C\programfiles\vulkan-1.dll
Size 903KB
SHA256 21a23748d30dc735e2aae5a8727b19d78dc4c2c878c56ef099ad00b21cb9b63c
MD5 a25fad3ee5b3a28093c534ce66723274
SHA1 2a2a9c1bf2f020538f7a2a3d55ecb0b25a90e6be
SHA512 360242306fc78d6a150fd2411607542cea9c3c88700c6029a9cbb537f9b2ce60d66917384659bfdbd2e7df8f23d37fb15b264b84c58a65133aa4201a1af7c105
SSDEEP 24576:+oe2R6c3e3JI5dcIOEEQFL6Z5W5DYsHY6g3P0zAk7Yu:re2Le5I5dcIOE1L6Z5W5DYsHY6g3P0zJ
TLSH
T16C156C23D6544969D47A8034C9C28A03CAF174925326B9CF02A85718BF6FFF87B7DB25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MainDaemon.exe

Path C:\Users\Admin\AppData\Local\Temp\Fortect\F0067975B41D\programfiles\MainDaemon.exe
Size 5.1MB
SHA256 26588e7a7ba12c21b286035aa0f07a982e8bbc55def742b7aaf3af3eced361ac
MD5 bc9c0c14b2c4af0004984c48a20f1ec3
SHA1 ee902d418a51bcdc033ef58b592b93025a5ca99b
SHA512 1a72b0c8c56e298fd241433f1fb893cf74294d59ade8f4f985a0ff0f6200fea7d65de685f32cc07a5ac644556caaecb74ae4e18c6a0536dde3565a28a13ee816
SSDEEP 49152:z7pHlvzSfDlpkl9FpVu9G8pVIaJHrv86Ay9GgnX1Rex+p9XNro2mJYSdZ3x4Fsti:zlHlGD+p03drvThnIaeXYSdhx8sti
TLSH
T1E0364B39629900E4C0BED3BFCB424137DAA2741583F346DB45D1495A5F27AECBE3BA21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FortectProtection64.7z

Path C:\Users\Admin\AppData\Local\Temp\Fortect\FortectProtection64.7z
Size 1.6MB
SHA256 de8c8cef1f5142e35cd71b96e11df8ad29c2ec36e2f81aa34147c1c85dbe26b0
MD5 e62f9430dbf32bc602bb675b92934431
SHA1 f67810dd382b9d0167f750ad0b3fb89e6838756b
SHA512 ad030e3306f21ea39f18a64d1a104a0887c1935266745e91ea26814cfd0caa13918f60caf93a8c241f3382734a6381b2db1dfac53a4c84ca8bc4e3887df57ad7
SSDEEP 49152:+/92LFAv+afUO4xJm8N4ykBDp1ElZN+mKZXGYGusAYZb:y2FAv+c25rkB9+Zcm4GYGusR5
TLSH
T13975334592D68934F1C27E8DBAD1E55E044D4CEC31979BA6CADEF984F03A8433C28B60
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Banner.dll

Path C:\Users\Admin\AppData\Local\Temp\Fortect\plugins\Banner.dll
Size 24KB
SHA256 6e09be529a79118083e62132e891b9b09abc2027dc90b2a14e6fd0d2271c7f9d
MD5 b5cc66b6e6f18ee1de837bf2ccf87fd1
SHA1 b71741e05462f3f71bd40bc4bce8250e54082f9e
SHA512 d9d156a014673013ea59336935b2a0ef6f7f8bc9e4ccadbb4090c5d5361e8829e73e59ceed12427a02e0809cae67fd1feae66f55572cc69c6fffd6dec97842d1
SSDEEP 384:XCD/NyEIYi2mL4/y8RX4gVo+IIYiqZKy8RbmL4nNy1/:SoYiDLk5ZUmYiqQ5ALj
TLSH
T100B26CB388906C45DD679D30B4C0A937FD72B6952AC0C1C7711AC1A5D7813877BED2AE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Crypto.dll

Path C:\Users\Admin\AppData\Local\Temp\Fortect\plugins\Crypto.dll
Size 24KB
SHA256 490ec3a42d0353a3dca7fdb3f4d2392487a1e7cb2dd30927710e31c7baa75cf8
MD5 5032a6520bf0142111825f5ca1e5ffeb
SHA1 2b3d179fa07db3980bc4d8b865dc98ec8be1232c
SHA512 f633458357d218a6f332ce123fbbcd3ab7d8ed437b1547ba91f7fb0e559c893af8617b9108b2d34cf7f1c4df25bde9b2e5468ad5da615b037278eada7f38cdc4
SSDEEP 384:1CwKj4itsglNyEIYi2mL4/y8RX1PjIYiqzLwQ+y8RbmL4nNyHl44C:1CxbtYYiDLk5ZKYiq4P5AL1C
TLSH
T1CFB24BA788906C09DD67AD3075C0E937EEB2B19529D0C1CB711AC255DB903837BED2BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EnVar.dll

Path C:\Users\Admin\AppData\Local\Temp\Fortect\plugins\EnVar.dll
Size 30KB
SHA256 c8f7a62d677301e465b808fae51f4a78d11c4a1ac835daf778f3a3c9e65a6ed1
MD5 93bafae8231a2765bfc173bfeaba961c
SHA1 97d64a93844f423b71d483f8f54ebe9cf6e19e9c
SHA512 acb047a5a06463d0e853911baa2812cb03bc8044f4aeaa92bb305c82a4952c136a5198ead56503d75eeccdbb0c80ae013306c14e6a6cc4249044f1552a12181e
SSDEEP 384:v9BXI4cqxCa+WFAzUeC6CNyEIYi2mL4/y8RXP/UYbIYiqUEy8RbmL4nNyihTkb:v9BoeSzNC6/YiDLk5ZXJkYiqn5AL2TQ
TLSH
T190E24A53C990DC75EC639AB0B1E4947FBE75BA841BC185C32156D1958B803823FBE3BA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ExecDos.dll

Path C:\Users\Admin\AppData\Local\Temp\Fortect\plugins\ExecDos.dll
Size 27KB
SHA256 511b74f60f5da3ee22f869340f5f2250ab13e7a1f3322e98ad4aad888304c4f2
MD5 bf306fe60fabf7f619929c7ae4cb58ac
SHA1 d002e9a421ecdb7ffa059623dd2cd22dbb541a1d
SHA512 23e1631e0662f6e83883c8da867baa61b0283acb2f688751d34a01585ba83d171cbb40059a9f08ed6ee198dd2098e53bf8f3ef282df87871d312ae15f1ef6853
SSDEEP 384:/CqAUtwYjH1cEXhxNyEIYi2mL4/y8RXrhucJl0rIYiqQnYy8RbmL4nNyKJpZwY:/FcIFhuYiDLk5ZtTGUYiq35ALG2Y
TLSH
T1F8C27C7389D01C02DD7B9D3078C0A537AEB6B5951A90C1DA321AC1968B90782BFDD3FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

INetC.dll

Path C:\Users\Admin\AppData\Local\Temp\Fortect\plugins\INetC.dll
Size 45KB
SHA256 1b5e463950832acb7f9c0706e844182e63496c09984db8d73bb9beb20fd37183
MD5 6e083c476a77a08076e48817d53056a6
SHA1 4f386e3293ef3be8d111d19aadc729d98b1dbc5b
SHA512 80de01d84391f210195109962ba873478f7d7e95b255ed309a3dd1d0dd18ad52d4f95593c363db814b8259651e85e6cdf24c4f98e4d167b4fdc22b4a9b561ffc
SSDEEP 768:wAvE90GuY2tO93oLrJRM7Z4EFYiDLk5ZvGoYiqMB5ALDj:PE+GjnmbM7F78Go7i
TLSH
T15A235BA24AD41949FAA7AF3074E4E6379D7ABC511890C8CF6127824D4762342FE7837B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LogEx.dll

Path C:\Users\Admin\AppData\Local\Temp\Fortect\plugins\LogEx.dll
Size 64KB
SHA256 91a421c5ef3f37bf82b351fff7881c6b4e02c216617dcb88e598e432810aea9c
MD5 c53181ec8eb8771dacc78badc5db9892
SHA1 ccc464d51c45bc7c4696e6e88e8885ba12eb321b
SHA512 d02cd7b4608a1949821318ed5d6e89ba8ed2d7e34b7b594e21c52b06545378f04821819f0f06909fde06b7ff877af8a6b9dce341361a1f66a233e273680e4b79
SSDEEP 768:/oaF+ATCQye/I3KWmxj00Jyb8EnovpYiDLk5ZBOYiqL5ALa6:zF+ATCNmVjj8pox7gO7Z
TLSH
T12D5390A298800852CA5F9A3074D0DB37BEBB76502AD084C37769C5964F613E2F77E35B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ShellExecAsUser.dll

Path C:\Users\Admin\AppData\Local\Temp\Fortect\plugins\ShellExecAsUser.dll
Size 63KB
SHA256 c9fa24f38a92a005ef34996ab6862c442226e62c66e346c5068ec208118cfd19
MD5 543cc2b4eddfc2b828a926605e9c1717
SHA1 e8f82bcdc24918d09fd7fce0739639942241a55b
SHA512 45779cbb1d19a9167d4f18d50198835bc2e3b5f9c1ce650338f91dc10a63394ea033d2138958360a8040e47c3e787c2663bd0738d42154c0ff83690ed6562722
SSDEEP 768:9A49ATJ9ONLkh9J5lDYDzG8yVAf7hiJFkkAqnTEDlV4vihdkxYiDLk5ZDpYiqj5v:9A4CJ9OFpXf0AfNiTkIMrhdkx7c7C
TLSH
T19B538D0165E08872E967593064E4A6325E7EB9416AF080C73F6E837A9F713C15B7C3BB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\Fortect\plugins\System.dll
Size 32KB
SHA256 afa34914c1fb8c094d21c62d8395f5d1ea2e2a1ca4ec91caf565d92ac61cb318
MD5 bf0fb6c72c526969ac4f989a0ec1818c
SHA1 97237e90c2bd646de85dc2d6fc4af415a808d998
SHA512 7086d7445168f8148d60639949b743340cc4f473180ac59e3a2d394435ba5c0da7d75cdd92c0b9a3fe69acfdff708fdf872dbdac7bc1da00d3fa451194bb3626
SSDEEP 384:6HQlt70mij/lQRv/9VMjzrpNyEIYi2mL4/y8RXHjBtIYiqbzejy8RbmL4nNyL4m:6iqmijmpcWYiDLk5Zt6YiqGj5AL6m
TLSH
T110E28E6389904CA0ED539D3074D0F93BBFB6A5992AD081C3735AC1569B403C36FED2AB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UserInfo.dll

Path C:\Users\Admin\AppData\Local\Temp\Fortect\plugins\UserInfo.dll
Size 24KB
SHA256 211bc1bdf322751acd5cc2b2fcfe6fd3f88cecb662d687ce1655d8f02a4f14b4
MD5 c2c2cd1ef628cc3f4c8377eac8e36523
SHA1 8370a3d47bcb586ef627555a8381883882788f71
SHA512 9520f6fa3b750bf43b96f725e78286ec4b36d1023ce5be60f15d0445ae7103b0a20b61c1ae82d0a1133169fe9211912230774d4dee8ae1e7be869f9c4c25594e
SSDEEP 384:7WH+DNyEIYi2mL4/y8RXMmGx+t+IYiqSuwvy8RbmL4nNyJfu6:7hgYiDLk5ZsaYiqZm5ALru6
TLSH
T185B25CB789901C05DC679E71B4D4A837FDB2A6951AD0C1D7321AC26687803837FED2BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fUtil.dll

Path C:\Users\Admin\AppData\Local\Temp\Fortect\plugins\fUtil.dll
Size 243KB
SHA256 34208ce8735852fd589010c51f18be1814a1e48c59eda19475324eb68045ad2f
MD5 fce78d97db2b39c0a99f5d1b07c56219
SHA1 929e98a45d866fcc6db9052e984823c6d4235b8f
SHA512 fb4bd879547263ab29d8129abe46f05ff5ac8d488f0ffa4a27d2de5b0b7808b0e6b1a3efffd83461beb4a889de774ed6ac69bbf5412f7a80995a96a5bee99ffb
SSDEEP 3072:ebkagTeOEvxaBcbrQli2fzn+7Mf8txAnRDznBhPiflPGHpQqWvS2j7USkeIcjgq2:tkxaBc+lpfoKhnBhaftyAUSk5cv4Nvr
TLSH
T130348D017480C431D8AE16311574DFB65BBEB8704FE1D6CFAB944D7A8F312C2AB35A6A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsDialogs.dll

Path C:\Users\Admin\AppData\Local\Temp\Fortect\plugins\nsDialogs.dll
Size 30KB
SHA256 c8e3952e66bbe4947dee852592a40d362dc7e33eed5b9b85a761801ed5e51798
MD5 d706af80a3f0527000c28eecb9c9ce69
SHA1 08ad5171b6900740be9150484263a934332a539c
SHA512 000e79913db8efb1d94d466bb3ec0373cee7afed7e6f44346d7573237b0e32a320155bcabc0daa11c9c3b86de0144913a2b792f7443a36b95c4a999899358322
SSDEEP 384:Wo7Q8F8pMv0WAgkBuIFcdNyEIYi2mL4/y8RXqlVLYfIYiqgAy8RbmL4nNy2ZSq:TRapMv/Agk0gYiDLk5ZdgYiqb5AL3q
TLSH
T1ABD27DA3C8D06C62CC975E3174C4A93FEEB6625524C1D5C2722AC6599B503933FFC2AE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsJSON.dll

Path C:\Users\Admin\AppData\Local\Temp\Fortect\plugins\nsJSON.dll
Size 44KB
SHA256 767d08af275a46029feda2db75055027cc692eebb69199afee15be1b519556f3
MD5 5d703c4aa51edab4adb1ad4e7c5cf705
SHA1 338b6f9372e1b49b08121e35178a391cc0c1366a
SHA512 38f3053a7417f0bd3fdf415fc66a7dd7dd21a5984fb8dd042a4d0aa2fe4c34f01d373ed522a68190e4dd160873403c1c338c81bb1600c4fbbeb581a9aa0ac3f8
SSDEEP 768:soZ1ZnhrTfldqk7Yyy94RxOcVQJrT3YiDLk5ZRYiqxqc5ALm:Zpi52vOcqlT37U7Yt
TLSH
T1A7136B5389A05C94FC379D75B4A06D33AE7EB9092890C1CBE22785199B50743BF7D33A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsProcess.dll

Path C:\Users\Admin\AppData\Local\Temp\Fortect\plugins\nsProcess.dll
Size 26KB
SHA256 d805b5712b959b350d695dd520720284f20be7fb1aab7043ae8e85864b912a91
MD5 36062cfb98d5ea486dbe1adf44cb8bc8
SHA1 4d997445bc3ca9c841ebd614c8b89d03d6ac1afb
SHA512 320eb6e18b059d8d56ba3bc5925390cdf543952eed6a449ed8e716eac5a01820b99f5f55373f35e0f6376ae9e5be650818050cef692aab23b17e6799ab089e0b
SSDEEP 384:Jgz60LitAZGlxNyEIYi2mL4/y8RXTHL3liiIYiqe9t4y8RbmL4nNyJd5j:JgOYihuYiDLk5Z3EYiqi45ALPj
TLSH
T1A6C24BB38AD05C44DD576E70B8C0E437BEB562A51AD081D6321AC5668FD0383BBDD2BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsis7z.dll

Path C:\Users\Admin\AppData\Local\Temp\Fortect\plugins\nsis7z.dll
Size 479KB
SHA256 fd572b7d3a4be030f68a661461ce66831ef56237b5d0635010b4e29e4dfa328d
MD5 fbc5319c1df03c1ad2faad46734f675b
SHA1 7a7870e622e8a360d1c35444186cff7d7dba29cf
SHA512 cb0aea9a9d7502e7534b88af21646c1286bc7fbe2b141cf92ffc510522dea7e6ce34031229dde58d5eac22821b2e95ddb002e25d3aa728cf8d3f8c9e83421b63
SSDEEP 6144:qb2ny5pcPMln1+MtUEVNRRUF7wvFg5bvaIJzsOiNF+3BgL8ysyekcI/5o71crHK:qb5Dl9tU6/ve9aiZcF+3S3ekcMw1SHK
TLSH
T1E2A49E23B691C076D62E03308A19F7A929BFB3710A2999DB77985B7F1FF04C19718607
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cbfilterEvtMsg.dll

Path C:\Users\Admin\AppData\Local\Temp\{9708314C-3899-4815-8C18-89EAB63250DF}\cbfilterEvtMsg.dll
Size 11KB
SHA256 fec1e009231cb8167e1c3f6aecde9ee684f585d1f35e3c2b5c0bb2d5ed6b775c
MD5 ea9359b0f80fb561d443e458aa211bd6
SHA1 02157f2a38629b9e66fd51b47de99129efb64fbe
SHA512 173e7d7b5e63e1595aa53bd333af8560e9c2e9c8499f353b98457c2d6a9788ae07ec98f76c5f19b82eac5198607c95ec0c166fb47cc517b792ba92a3b21bdf73
SSDEEP 192:s0WYX7cn1DS35IVnEy2sE9jBF0NyQ37Ui15FhV:s0WHDSJIVE8E9VF0NyeQi15PV
TLSH
T1AE322B46CBA41C06FC634F7074E54A269E7CBA435DA082DFA319C2014B81B467FD63F5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cbprocessEvtMsg.dll

Path C:\Users\Admin\AppData\Local\Temp\{9708314C-3899-4815-8C18-89EAB63250DF}\cbprocessEvtMsg.dll
Size 11KB
SHA256 96e5e431a61c7ab4144920ed855f1aca05f395aa65620babe0954d2f66aef4fd
MD5 9af37c3d77df1f6d7ce9460c41c812b9
SHA1 6be02e56f8cbe89e4b497330231200dc33c0e516
SHA512 58957477843423d89cea18887cd391ebd04f723d877bdc53dcf9bebc63859ea1471a36ba1ed0c9b1dd0a2a0eccf02f94a1a8d35b405eabdb8d0ada73f17e4f06
SSDEEP 192:3KpWY87cn1DS35IVnEy2sE9jBF0NyLCFe/k:6pW0DSJIVE8E9VF0NyGs/k
TLSH
T14D322B868BA41C06F8634F70B5E54A269E7CBF435EA082DF6315C2064F81B427ED67F5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cbregistryEvtMsg.dll

Path C:\Users\Admin\AppData\Local\Temp\{9708314C-3899-4815-8C18-89EAB63250DF}\cbregistryEvtMsg.dll
Size 11KB
SHA256 15727012f3bf0ad831cc4496cbae958bf1d4e4deb35c420b579eafe3cd2ba779
MD5 4c17f6d6c72b2298e1092ba0fe3cec18
SHA1 ec34f2f8fd6f73037195ec34a1e072cfa76ad75f
SHA512 a50fcdc55b57c99c2a2fc67bd53cc50a9a24e2e47ab352ac991454435aba9080a41774b2a91db42cfe012505a86815179b7bbcff4a30d12031254b5f5b70a135
SSDEEP 192:cJWYn7cn1DS35IVnEy2sE9jBF0NyBR1RJA:cJWXDSJIVE8E9VF0Ny7zJ
TLSH
T11C323B86CBA41C06F8624F71B4E59A265D7CBB435DA0C1DF6319C2014F90B42BADA7F6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cbfilter24.sys

Path C:\Users\Admin\AppData\Local\Temp\{9708314C-3899-4815-8C18-89EAB63250DF}\x64\cbfilter24.sys
Size 397KB
SHA256 d1b5fdb8340a568588dab928f62167b133a686b9f648626a54d77d952181afb0
MD5 dbbd4452c4800bd5ad867315531b4ea4
SHA1 8f3cc06114782efa8915ff7ad83ce048cb81aa27
SHA512 95199160cee95fbefae3f121d6b87850462be18297767d25eb2e0c6c87750d3ceb886fb6c34794387069c2b5e4aefdde6a957e1cb76ccf371f76d97a01727ac7
SSDEEP 6144:9t4upylA6Y4AA6aLsc3Qp34syKDJYFOoK7wcyN6UwLNegtoa0H:9t4u83rAA6Hw8yOJYFOnU/ZwLm
TLSH
T113846BA2B2A851D5E5BBC1B48557490BFBF0B81607349ACF02E0D6A61B3BFE1753E314
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cbprocess24.sys

Path C:\Users\Admin\AppData\Local\Temp\{9708314C-3899-4815-8C18-89EAB63250DF}\x64\cbprocess24.sys
Size 89KB
SHA256 7649a6acaee5b8cc1cfbef2f40ab7253fde82d842df3217ca2989825e97df195
MD5 b689b78ceaa0db5201ea64db990557d5
SHA1 7b50dd207606022accc8b5ea89de53b6bf887044
SHA512 c916dbc1b8ce40500c6b51f207a9bdb762a6c5a50bdf42703d60a54bceb86b7d90bf28a61a98407567ca81a037007250f5a706816181ec9604650e89c514df26
SSDEEP 1536:ZwtvJzRDTsDD3o9B27tXtOynHxVnADI+8UlGzlKps5rL6gxoewJzfTYp5zg:Zy1TsXOs7TnHxV+VloCsFLDxKo70
TLSH
T151937C96B2A809E5E57A4171C6E6890BE7F0BD02173A87CF0760C6451F37BE19E3D31A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cbregistry24.sys

Path C:\Users\Admin\AppData\Local\Temp\{9708314C-3899-4815-8C18-89EAB63250DF}\x64\cbregistry24.sys
Size 140KB
SHA256 2d8312d29146a6dc6edde1aa8aa298889854a66565afa8f63f9bf920a3f0a3ed
MD5 9dff5831aa683175b854d18e9dd3435f
SHA1 3e2a92943080e066470d155046df74c3a527f0d4
SHA512 567ac341ab1ebe949e15fa49fe1100c38799af890ddd246ea3b796cf68e2b114b585d6481b021caae9cdbbb10d3a90899853c240f7541f389ea9d6f981bd61fa
SSDEEP 3072:rYyFsWdGPSY8ojhVsS58zvJRBz1Z3as+sJqQRn6yVoCUrorYp:rY1dao7s17JVnsQRn6ProS
TLSH
T138E35B6AF1E414A5E4FB87B2C595891BFBB1B906073A83CF039087651B33BE1993D319
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

machine.PNF

Path C:\Windows\System32\DriverStore\FileRepository\machine.inf_amd64_b748590104fe1c15\machine.PNF
Size 150KB
SHA256 e1b1d0b1b9c732d8ae8a6d775a92b993caea43ce7a43c1dc8413b0a4bdc1c0e5
MD5 560110bdd11a5b7186e456b1049299cb
SHA1 02227bb8c180512067b4b5541ed3b479824588d9
SHA512 7a56dce027f85c2570de51dad3eda19f5a62a67e0355479e1be2f65452bb723930aba2a9c677ef67637c25bcb3e5a4a4d7016c0305dd4e1c33dc82f9a3cf6bf9
SSDEEP 1536:5LYNx039SyASl0jaPknfBpOk6hzz/sYyqNRjE1mjiUUzcaOm5MZy6A3Bi:5LYo3MyASlOaPkewqN5E1mQcXEQ
TLSH
T172E3990976C84D29F76370B4AFE2D2AF2915FCF6AE02E72A5884330F55B2D419F51239
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

printqueue.PNF

Path C:\Windows\System32\DriverStore\FileRepository\printqueue.inf_amd64_12d9f43eb5d02987\printqueue.PNF
Size 7KB
SHA256 e018ba02d4a212198a749e83ef7675ef4a1e6c187addd429b8dcac7fff847a54
MD5 ef33ab7f5d5245b908ebfe806988f93a
SHA1 9b72280ab2ba0451a6f4526093ac6d4a2bf8c670
SHA512 461da394331463bf30917ec1745ad3e18c9ca0a94478220eabff4003fbc422f30b7114927d408de13f9ac94551df8506aa6d6cd57c916801ed024c40273ddbb8
SSDEEP 96:OjlSemk9MkeMVSzOW4Fd2C09BkCfytw75IT:4bukeESzO309WSST
TLSH
T134E16616F3E58E04F2B25FB46CF961E94966BC921D01DA2F2164730D1C72E84EBA073A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download