10f646d0f55a847b724707b505a52e038deb95d411351a281cbe7c25556d52c5

Analysis

user interaction
yes
max time kernel
149s
max time network
137s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
23/06/2026, 12:44

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
spywareterminatorsetup [2-37060].exe
Size 7.4MB
Sample260623-pyqphacy5p
SHA256 10f646d0f55a847b724707b505a52e038deb95d411351a281cbe7c25556d52c5
MD5 af3e2c5ba45cd500a168d3a1d7246cc2
SHA1 43f48ff28ff94d7611cedbd308fe10b02db07ae3
SHA512 8686aa301aca7278eb4a2ac0fe68b3050db37a9de184bd262a58e244ef5c87c24833edb2a5e10f447c79a428c942ea728baf64d782d926d67729820187695396
SSDEEP 196608:TTzw56RbPePToRzoEEIJ0Q3EBD1xZpgKptS:veYPV1oLRQ3EBD1xZpgKpE
TLSH
T187763353C2A370B4D320CD7DDA4C673480A5E44A6FBCA267E980999F0EFBCF0595179A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery installer persistence spyware stealer

Malware Config

Signatures

Uses Session Manager for persistence 2 TTPs 1 IoCs

Creates Session Manager registry key to run executable early in system boot.

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (data)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager\BootExecute = 6100750074006f0063006800650063006b0020006100750074006f00630068006b0020002a00000000000000	SpywareTerminator.exe

Executes dropped EXE 5 IoCs

pid	Process
640	spywareterminatorsetup [2-37060].tmp
1492	SpywareTerminator.exe
4076	sp_rsser.exe
3628	SpywareTerminator.exe
4140	SpywareTerminator.exe

Loads dropped DLL 8 IoCs

pid	Process
1492	SpywareTerminator.exe
1492	SpywareTerminator.exe
1492	SpywareTerminator.exe
1492	SpywareTerminator.exe
3628	SpywareTerminator.exe
3628	SpywareTerminator.exe
3628	SpywareTerminator.exe
3628	SpywareTerminator.exe

Modifies system executable filetype association 2 TTPs 6 IoCs

persistence

Modify Registry

T1112

Change Default File Association

T1546.001

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\piffile\shellex\	SpywareTerminator.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\piffile\shellex\ContextMenuHandlers	SpywareTerminator.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\piffile\shellex\ContextMenuHandlers\	SpywareTerminator.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\piffile\shellex\ContextMenuHandlers\SPTContMenu	SpywareTerminator.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\piffile\shellex\ContextMenuHandlers\SPTContMenu\ = "{BD88A479-9623-4897-8546-BC62B9628F44}"	SpywareTerminator.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\piffile\shellex	SpywareTerminator.exe

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Program Files directory 40 IoCs

description	ioc	Process
File created	C:\Program Files (x86)\Spyware Terminator\Languages\ST_POLISH.cab	SpywareTerminator.exe
File created	C:\Program Files (x86)\Spyware Terminator\Languages\ST_SPANISH.cab	SpywareTerminator.exe
File created	C:\Program Files (x86)\Spyware Terminator\update\sp_rsdrv2.sys	SpywareTerminator.exe
File created	C:\Program Files (x86)\Spyware Terminator\update\sptcontmenu.dll	SpywareTerminator.exe
File created	C:\Program Files (x86)\Spyware Terminator\Languages\ST_BOSNIAN.cab	SpywareTerminator.exe
File created	C:\Program Files (x86)\Spyware Terminator\Languages\ST_CZECH.cab	SpywareTerminator.exe
File created	C:\Program Files (x86)\Spyware Terminator\Languages\ST_ENGLISH.cab	SpywareTerminator.exe
File created	C:\Program Files (x86)\Spyware Terminator\Languages\ST_PORTUGUESE.cab	SpywareTerminator.exe
File created	C:\Program Files (x86)\Spyware Terminator\Languages\ST_TURKISH.cab	SpywareTerminator.exe
File created	C:\Program Files (x86)\Spyware Terminator\update\fileobjinfo.sys	SpywareTerminator.exe
File created	C:\Program Files (x86)\Spyware Terminator\update\history.txt	SpywareTerminator.exe
File created	C:\Program Files (x86)\Spyware Terminator\Languages\ST_GERMAN.cab	SpywareTerminator.exe
File created	C:\Program Files (x86)\Spyware Terminator\update\SpywareTerminatorShield.Exe	SpywareTerminator.exe
File created	C:\Program Files (x86)\Spyware Terminator\is-HGUUI.tmp	spywareterminatorsetup [2-37060].tmp
File created	C:\Program Files (x86)\Spyware Terminator\update\BIN_RSCSDA.SPF	SpywareTerminator.exe
File created	C:\Program Files (x86)\Spyware Terminator\is-JFOM9.tmp	spywareterminatorsetup [2-37060].tmp
File created	C:\Program Files (x86)\Spyware Terminator\Languages\ST_CATALAN.cab	SpywareTerminator.exe
File created	C:\Program Files (x86)\Spyware Terminator\Languages\ST_HUNGARIAN.cab	SpywareTerminator.exe
File created	C:\Program Files (x86)\Spyware Terminator\Languages\ST_SWEDISH.cab	SpywareTerminator.exe
File created	C:\Program Files (x86)\Spyware Terminator\update\sp_rsser.exe	SpywareTerminator.exe
File created	C:\Program Files (x86)\Spyware Terminator\update\BIN_RSCSDA.SPF	SpywareTerminator.exe
File created	C:\Program Files (x86)\Spyware Terminator\BIN_STUIUS.SPT	SpywareTerminator.exe
File created	C:\Program Files (x86)\Spyware Terminator\update\SpywareTerminatorShield.Exe	SpywareTerminator.exe
File created	C:\Program Files (x86)\Spyware Terminator\update\sp_rsdrv2.sys	SpywareTerminator.exe
File created	C:\Program Files (x86)\Spyware Terminator\update\fileobjinfo.sys	SpywareTerminator.exe
File created	C:\Program Files (x86)\Spyware Terminator\Languages\ST_DUTCH.cab	SpywareTerminator.exe
File created	C:\Program Files (x86)\Spyware Terminator\Languages\ST_FRENCH.cab	SpywareTerminator.exe
File created	C:\Program Files (x86)\Spyware Terminator\Languages\ST_ITALIANO.cab	SpywareTerminator.exe
File created	C:\Program Files (x86)\Spyware Terminator\Languages\ST_RUSSIAN.cab	SpywareTerminator.exe
File created	C:\Program Files (x86)\Spyware Terminator\Languages\ST_VALENCIAN.cab	SpywareTerminator.exe
File created	C:\Program Files (x86)\Spyware Terminator\unins000.dat	spywareterminatorsetup [2-37060].tmp
File created	C:\Program Files (x86)\Spyware Terminator\Languages\ST_SERBIAN.cab	SpywareTerminator.exe
File created	C:\Program Files (x86)\Spyware Terminator\update\sp_rsser.exe	SpywareTerminator.exe
File created	C:\Program Files (x86)\Spyware Terminator\update\sp_rsdel.exe	SpywareTerminator.exe
File created	C:\Program Files (x86)\Spyware Terminator\update\history.txt	SpywareTerminator.exe
File created	C:\Program Files (x86)\Spyware Terminator\Languages\ST_BRAZILIANS.cab	SpywareTerminator.exe
File created	C:\Program Files (x86)\Spyware Terminator\update\sp_rsdel.exe	SpywareTerminator.exe
File created	C:\Program Files (x86)\Spyware Terminator\update\sptcontmenu.dll	SpywareTerminator.exe
File opened for modification	C:\Program Files (x86)\Spyware Terminator\BIN_STUIUS.SPT	SpywareTerminator.exe
File opened for modification	C:\Program Files (x86)\Spyware Terminator\unins000.dat	spywareterminatorsetup [2-37060].tmp

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 6 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	SpywareTerminator.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	SpywareTerminator.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	spywareterminatorsetup [2-37060].exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	spywareterminatorsetup [2-37060].tmp
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	SpywareTerminator.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	sp_rsser.exe

Inno Setup is an open-source installation builder for Windows applications. 3 IoCs

Inno Setup installer

installer

resource	yara_rule
behavioral1/memory/3912-0-0x0000000000400000-0x0000000000418000-memory.dmp	innosetup
behavioral1/memory/3912-15-0x0000000000400000-0x0000000000418000-memory.dmp	innosetup
behavioral1/memory/3912-117-0x0000000000400000-0x0000000000418000-memory.dmp	innosetup

Modifies registry class 29 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\SPTContMenu	SpywareTerminator.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\SPTContMenu	SpywareTerminator.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\SPTContMenu\ = "{BD88A479-9623-4897-8546-BC62B9628F44}"	SpywareTerminator.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{BD88A479-9623-4897-8546-BC62B9628F44}\InprocServer32	SpywareTerminator.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Folder\shellex	SpywareTerminator.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\piffile\shellex	SpywareTerminator.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\piffile\shellex\ContextMenuHandlers\SPTContMenu\ = "{BD88A479-9623-4897-8546-BC62B9628F44}"	SpywareTerminator.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\*\shellex\ContextMenuHandlers	SpywareTerminator.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Folder\shellex\	SpywareTerminator.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{BD88A479-9623-4897-8546-BC62B9628F44}\ = "SPTHandler"	SpywareTerminator.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\SPTContMenu\ = "{BD88A479-9623-4897-8546-BC62B9628F44}"	SpywareTerminator.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\AllFilesystemObjects\shellex\	SpywareTerminator.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{BD88A479-9623-4897-8546-BC62B9628F44}\InprocServer32\ThreadingModel = "Apartment"	SpywareTerminator.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers	SpywareTerminator.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\SPTContMenu	SpywareTerminator.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{BD88A479-9623-4897-8546-BC62B9628F44}	SpywareTerminator.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\piffile\shellex\	SpywareTerminator.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\piffile\shellex\ContextMenuHandlers\	SpywareTerminator.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\piffile\shellex\ContextMenuHandlers\SPTContMenu	SpywareTerminator.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\*\shellex\ContextMenuHandlers\	SpywareTerminator.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\AllFilesystemObjects\shellex	SpywareTerminator.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers	SpywareTerminator.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\	SpywareTerminator.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\*\shellex	SpywareTerminator.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\*\shellex\	SpywareTerminator.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\	SpywareTerminator.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{BD88A479-9623-4897-8546-BC62B9628F44}\InprocServer32\ = "C:\\Program Files (x86)\\Spyware Terminator\\sptcontmenu.dll"	SpywareTerminator.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\piffile\shellex\ContextMenuHandlers	SpywareTerminator.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\SPTContMenu\ = "{BD88A479-9623-4897-8546-BC62B9628F44}"	SpywareTerminator.exe

Suspicious behavior: EnumeratesProcesses 8 IoCs

pid	Process
3628	SpywareTerminator.exe
3628	SpywareTerminator.exe
3628	SpywareTerminator.exe
3628	SpywareTerminator.exe
3628	SpywareTerminator.exe
3628	SpywareTerminator.exe
3628	SpywareTerminator.exe
3628	SpywareTerminator.exe

Suspicious behavior: LoadsDriver 2 IoCs

pid	Process
656	Process not Found
656	Process not Found

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeDebugPrivilege	4076	sp_rsser.exe
Token: SeDebugPrivilege	3628	SpywareTerminator.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 3912 wrote to memory of 640	3912	spywareterminatorsetup [2-37060].exe	87
PID 640 wrote to memory of 1492	640	spywareterminatorsetup [2-37060].tmp	99
PID 640 wrote to memory of 3628	640	spywareterminatorsetup [2-37060].tmp	102
PID 3628 wrote to memory of 4140	3628	SpywareTerminator.exe	105

C:\Users\Admin\AppData\Local\Temp\spywareterminatorsetup [2-37060].exe
"C:\Users\Admin\AppData\Local\Temp\spywareterminatorsetup [2-37060].exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:3912
- C:\Users\Admin\AppData\Local\Temp\is-Q3QO3.tmp\spywareterminatorsetup [2-37060].tmp
  "C:\Users\Admin\AppData\Local\Temp\is-Q3QO3.tmp\spywareterminatorsetup [2-37060].tmp" /SL5="$901EA,7288175,66048,C:\Users\Admin\AppData\Local\Temp\spywareterminatorsetup [2-37060].exe"
  2⤵
  - Executes dropped EXE
  - Drops file in Program Files directory
  - System Location Discovery: System Language Discovery
  - Suspicious use of WriteProcessMemory
  PID:640
- - C:\Program Files (x86)\Spyware Terminator\SpywareTerminator.exe
    "C:\Program Files (x86)\Spyware Terminator\SpywareTerminator.exe" /INSTALL
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Modifies system executable filetype association
    - Drops file in Program Files directory
    - System Location Discovery: System Language Discovery
    - Modifies registry class
    PID:1492
- - C:\Program Files (x86)\Spyware Terminator\SpywareTerminator.exe
    "C:\Program Files (x86)\Spyware Terminator\SpywareTerminator.exe" /SETUP
    3⤵
    - Uses Session Manager for persistence
    - Executes dropped EXE
    - Loads dropped DLL
    - Drops file in Program Files directory
    - System Location Discovery: System Language Discovery
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    - Suspicious use of WriteProcessMemory
    PID:3628
  - - C:\Program Files (x86)\Spyware Terminator\SpywareTerminator.exe
      "C:\Program Files (x86)\Spyware Terminator\SpywareTerminator.exe" /PREPARETOSCAN
      4⤵
      Executes dropped EXE
      System Location Discovery: System Language Discovery
      PID:4140

C:\Program Files (x86)\Spyware Terminator\sp_rsser.exe
"C:\Program Files (x86)\Spyware Terminator\sp_rsser.exe"
1⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
PID:4076

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Event Triggered Execution

T1546

Change Default File Association

T1546.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Event Triggered Execution

T1546

Change Default File Association

T1546.001

Defense Evasion

Modify Registry

T1112

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BIN_STUIUS.SPT

Path C:\Program Files (x86)\Spyware Terminator\BIN_STUIUS.SPT
Size 268B
SHA256 d3335b95caf02bb39cffb88652d68f624e08999a46e6a55582f857d2be20b946
MD5 39e1d045976470e39b5b24caca022c79
SHA1 13418b8c3b112e9da5d12ce834f1d9dc2c378714
SHA512 39f0cbf8eeb164f1418127fe477cfa78d1fd54017891b83d64515a8f846c6e2cab04b45976acc4a33c3cc46ad2e42954f1e1a4e210537e65b0ca23085fc4e4b0
TLSH
T118D02B4E1353420949EA8C05274A88704A3534585A07BB0BAEC5E2B28DB5564E216255
MD5 SHA1 SHA512 TLSH

Submit Download

SpywareTerminator.exe

Path C:\Program Files (x86)\Spyware Terminator\SpywareTerminator.exe
Size 8.8MB
SHA256 51fe8da20812ce5adfd769e6685beb4d7ea0e18f70772b0326bbcd1206824210
MD5 7b699c4aa9992cc00658e2db547cbce4
SHA1 d70c14c846c96703bac95a65a439c141401bb5f5
SHA512 33b1d896882813e3487b3362f8f72ac808866f1f08b2d3a02944fd669e2bd7e2ee36b587238221de64124f268b2530347759a22bc63ba4a0792c4809946386d1
SSDEEP 196608:QuIe2fRbXks+D8imuxa4TxeNvqaPop+cwwE2G:QuIe2fRbI8imuxaLNv5Po+cwnp
TLSH
T12196AD29F2438C33C26666388D57679ADB1D7E105E1D544B3FE83E4CEEBA640F42624B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ST_BOSNIAN.cab

Path C:\Program Files (x86)\Spyware Terminator\languages\ST_BOSNIAN.cab
Size 52KB
SHA256 69e225facdcfc7c7906d4078b23d54dab87bf3e4271c3931ea2e252f1f3bddce
MD5 3cdea3aadd45291193022300b81991c1
SHA1 260464cd0c07f248928f790335cfac706805789f
SHA512 840d58a5fdd766f1e93f8bf369dd918d44d8155aad493ff364161ecde165008b33481fdca698fb2b4078e4d1167dab806d2b879630b19d925adcd79057597335
SSDEEP 1536:EcXcum5K2sE5IzcanZHUHbGAuoTLQLISQul9p+CQVm8U:8lK+IRHUlfTL22ul9p+LVBU
TLSH
T11F33F192E0A1FA5ECD2338FE4154FBAF691338AB50FAD759481B17D1846473A0D23B0E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ST_BRAZILIANS.cab

Path C:\Program Files (x86)\Spyware Terminator\languages\ST_BRAZILIANS.cab
Size 47KB
SHA256 74f92e9e44a3e11e0e51f656225ec26c2b3c5f099b8a9c6e806cff8d61f61ec9
MD5 923bfc59ffb2bce2c4b63f399d0f91fe
SHA1 c45741ea230d6cf40c8bbbf4b1393e5039ae1d27
SHA512 825224cd0955ebd621eac5d967ff189e780ce517e06ce5ba387f9ac0f81ea3f82d7d1efd69fc93b28cdd2ccfc0ef1ebc2b729c8ec91342635e70d5bc1e4352f0
SSDEEP 768:bDGN84ST6c2dn/1gypLJuGp3A2ABsJRjkP7zorL1b8Zlxdl4yeMRyiPT77gV9HUI:fs8zTHOU6J1ozorRQRl4ye8yiPTIVeXY
TLSH
T11923F12302C3F27EFD11A525A8ED25C1E8169AE1AD3BED57184C193912643B74E798FC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ST_CATALAN.cab

Path C:\Program Files (x86)\Spyware Terminator\languages\ST_CATALAN.cab
Size 47KB
SHA256 e725647bdbd6b4b5e4951ae885c97899a6096f313d43f3893d6a0efe7714ef44
MD5 94c996b17430dacd2e0017b575a43756
SHA1 2746d4449954d944fae022343c41a98c6f885b7b
SHA512 e89654622c64fd74cb639396b4dd6d2143b3284f9e6073e8331ef6804428386c186ec8fb7dc0ef7632c7521b1d8c19f3ef98948469235da283815c7e294672b8
SSDEEP 768:3TEThZee2rn/UvliZcX0GZrhyKEszQv540GM/vE8AL1KQAaaYOfc6q860+XmMbIH:3iie2jF+7vQRNn/vE841KagwlbKpS7K
TLSH
T19823F267A2F5E061C4472AE59BE16D83464CB901129FF1F7BA5E2320095B3CB9CD4FC8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ST_CZECH.cab

Path C:\Program Files (x86)\Spyware Terminator\languages\ST_CZECH.cab
Size 49KB
SHA256 ea8d14b264285b0ba5d2ae011774b6f4f6299af772c147dee56c6211053d34ae
MD5 1edded7e593d173077b3dead8728a197
SHA1 cd318b41e2c9df4a9bf56c8a4b0ad7d76bcdf3ec
SHA512 40ad03b00fca76621a2aaf619f3e25c5201de3200e3071502f05c975674e81067552fa0001297c82a1aba13e7d067ad90447f9777e8def5c887463e21537e78a
SSDEEP 1536:g2W7J1f1LVFDV+8ZRhl2hXYCZBSr7rLAFmiwSy:gJVRj0ob7r0kiO
TLSH
T17833F1170E65F58CB2010EB448FE97B41963CCB1B2FFDBAD045913A640799B2C506AEF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ST_DUTCH.cab

Path C:\Program Files (x86)\Spyware Terminator\languages\ST_DUTCH.cab
Size 47KB
SHA256 91e4299c82b00b2042f65362d01661a4d675c41b98ec1e991c353712bc8d2e2b
MD5 369990127934b835da5e1b05e98773e5
SHA1 0615759e300875591ebe2c759c501325a8c49526
SHA512 3c8157bdf9768922991afee9fc368de02538a3548ab7514cf79789d385634d4c4580af9c8cd9113ae25def2efcaa20719aabb8d22f9b795b154eecac69c6c15b
SSDEEP 768:vEeYDkC4h2ssgncUVUrbBFsmh5Y1Qv6XVOtjCVVfxrXBnIq/bUFFLAFmiYjbXAX5:ZYDkoMhVUrF2m7YitEfx7BNoLAFmi2AJ
TLSH
T1092301D03709D89C86B181BEC0BEE986D2DCAFD626F6F758C8C4125E1EC47D81E50A4D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ST_ENGLISH.cab

Path C:\Program Files (x86)\Spyware Terminator\languages\ST_ENGLISH.cab
Size 45KB
SHA256 4e8003c4efb1cec10f3a72183de20f33480700db281cedd71e09915a087cdd40
MD5 df6fab6422a927c8f86aaf53b140a08c
SHA1 6bc3d8690d6a61921845d9c3e0eca1e2bfef928d
SHA512 3ad15b1230d75d9da97c59bb4643ce1a9d5094ff2d448779aa3b0aabca6b3f8111c8e89fb753f01e435213211ddc5e49f96cd373f193851a1e032106b7fe80c9
SSDEEP 768:f1o/mYZ53YjfMHBDBsKiQLCmPTh8J6tJXQVlBw+jTaanc/qVRoUrZCtW:O/mY7ojfyB9sdQW3J6tJWw+jTDc/qA8n
TLSH
T1D72302035AB382AD06C8A054DA92B611C732CDB7BB2CDD057B63F40126F6F6C75EE549
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ST_FRENCH.cab

Path C:\Program Files (x86)\Spyware Terminator\languages\ST_FRENCH.cab
Size 49KB
SHA256 aa30e5bf742ed4f0bc7edbb6f8f2c8285f11cb791400be723da04cbd028e55c2
MD5 e10e8edb6def9b1c9a7fcd0229e8d7b9
SHA1 f51f1bd899739f52b4665c8f1c9372ba3fed7583
SHA512 de83f9d950033d5a018bbca84da07e580d283e1765c00aaabd5927ed7d1cf59024ffa2ad1e3cf743a1904e8c34f41bac8626b63a14ec06f0a9df32ea9959f982
SSDEEP 768:S3t93rXDHZq6HOy0PxMythHTr3KyRi8hXtfQI8ufT5lOE0UXsbXKFW307amp:aVDc6HsPWWHTrTzh9YFuv8UQaM3c
TLSH
T1BA33F2075BB8E707F69C02BAC6E81978E02B8DAE256CF645389051352D633C6DE03D6E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ST_GERMAN.cab

Path C:\Program Files (x86)\Spyware Terminator\languages\ST_GERMAN.cab
Size 50KB
SHA256 84554c8666fd07cc7c677e183d737c64c788cafc0da8585802c6229d1e0f3aa8
MD5 2e424cda915f9f502bb9804dc5d87b6a
SHA1 00e2d1b82e30359720d49b57009938409129de2a
SHA512 468d2f84b6da0957747580376c3713c93bd1665957a9f489fa5eed2dba86d7c10d10ce5c14105ab7822858542f543e5ccc9a01eb1e90814979281f2fc7906805
SSDEEP 768:PQFN7R9SlK1n1vS5VFwcXV+dQiCEgaDut5svkBaG6yTRxpzIq0lKs7:Iv193sVFwcFUzDe5MkBaGRTRxbSKs7
TLSH
T19F33F294B3C8EAFFF483250DE58DF68E385D5852C0DBB628D061E9836EB520D2D9624D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ST_HUNGARIAN.cab

Path C:\Program Files (x86)\Spyware Terminator\languages\ST_HUNGARIAN.cab
Size 47KB
SHA256 7c30477afbe49f9f4c04585bd8b6f4144f629d27601aea8b70b7ff62eb4c23d3
MD5 52de51c5c83b5c829dd3a7c5800ea6a9
SHA1 176fc6f2f0a394e505c8b8b86f1417557efd16c9
SHA512 9992694ba1254b611ae2d9381f70e6504f10731d3d7a5c603962172000fec626a608f0d1e0d170c8bb6e529647cf0b01670cf7928e078d8a5bf760fbc5769b6e
SSDEEP 768:0ruNOmuJ/Uy8Cu9INVmlujCACyDcAoNtOyIpA88uwW0KMlU+NqzYlYN1urpx2uvT:8jdAz0clNtBr8UW0KMlUuAutx2u+aMhm
TLSH
T1C923029393D0D146834C04FCD79FE3A1CA16BEF1817488B6931A2694985BFDB197AA2C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ST_ITALIANO.cab

Path C:\Program Files (x86)\Spyware Terminator\languages\ST_ITALIANO.cab
Size 48KB
SHA256 88f4bb594b09becd7df14c070179da455dc2044699bbf32140d612b94a8d41e4
MD5 ee20ef77b128b700b4b06492c06a84a1
SHA1 70f7f6a91d36d0526c319d75a2b5040e339fde96
SHA512 1034134a21baf40ca75526b0c1fd82b0f4aced49b82302acd126194427d4a04ec5074c460c42034ee7d8f14ccf6a1b755fb9ff974d9d59c72e0575390de95351
SSDEEP 1536:bw/sUFQJarPNpPt6D7s+5UJdjMd7rLAFmi4hAG:bw/sP2NpVgQ+GtMd7r0ki8X
TLSH
T1B223F2E0F355F25DE29090B7E5EE2B308178EDB2E5FB984C44CC510E819FB71B9092A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ST_POLISH.cab

Path C:\Program Files (x86)\Spyware Terminator\languages\ST_POLISH.cab
Size 49KB
SHA256 6ad59aea1971edf4072a1f82d5b0c4b950f73b6b42d48b6ebba531194ff1c811
MD5 71b096dd30f2979821a33b495a4c237f
SHA1 b401c129cd1d2b3146e89bdb7fe9f8c2c5b49ec4
SHA512 18db171c198aa4ba876535c53900907ac024376e8c1c895d53181f3df2a5085ef043105458453a739e6ab7a6c920946f8b147e69c79660f1cbe3aba835b7dec8
SSDEEP 1536:fqQz0vZZ3r4cuu+8jzuct+e7oibDmMQea:fqQz0vf3ryk3psibDmMm
TLSH
T1283312138355DA9AD8E35BFB88650E3D07EB7FA8C87D41C2158A512CF87B2D3869D884
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ST_PORTUGUESE.cab

Path C:\Program Files (x86)\Spyware Terminator\languages\ST_PORTUGUESE.cab
Size 48KB
SHA256 c1d4361a8ef0a8d74aacefb7196444c3b781bdea5771b440edf7a54e16bc0825
MD5 c21b9be945e5a5fd6444dc45d8dba4ce
SHA1 1521f3491551118ab686650c243737737f6201ba
SHA512 b2f8bf351fc477b23d9205774c0c146a744d4bda8a397f9c323bcc2080e0fbf54f327bac6644c16e5bef3a6f92ee9f52a7462e317cd1e91a25720034172ee53b
SSDEEP 1536:OXNspROm8JXTDDxi9eWuZwSYOS+M2kMrO6lm:hAJFI9eWWzYIz/m
TLSH
T16023F295F0CDAD867ABE5EF990B08012E0841BCF97B253754858255C35E12F6A1FF39C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ST_RUSSIAN.cab

Path C:\Program Files (x86)\Spyware Terminator\languages\ST_RUSSIAN.cab
Size 56KB
SHA256 e207703cb4708ef5c52c093e228a1b70ea877daaf7b7af50490e267b2e866c71
MD5 82e5b890b3a7c6773c314df08f78206c
SHA1 c1a914cd2ba08ce2fdbe449ad0bdcd1ae4853270
SHA512 ffc5235bd3dadd02bef6ab80066750a24b1296b5f01c05316e21d33c604da2adcdaab80408fe3068eb367af8430eb0f4a2910e248d60e15e6f6f14e3f15b49c3
SSDEEP 1536:0RXJu3cEU/Ek35kFsHbnPmfwiGxN/HTulNmvIiuqRRKiFcQ:0RXJuhUDRTPAneHTWNDyUip
TLSH
T19E43026E29F2DEDC817C36B354BA5AF644F6B8A4527B74074030D3B17E8830998D94EC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ST_SERBIAN.cab

Path C:\Program Files (x86)\Spyware Terminator\languages\ST_SERBIAN.cab
Size 48KB
SHA256 3331ece51d515c66cc5b9c6d2c61574a41072fcb6bfee656d5cb60e75651d344
MD5 fc7ace0e585abb7d115e991ce15db881
SHA1 4fa126436b4f809da9865993eea1cd1aed5b08c8
SHA512 f5ed52b523871c2a1944dd0444070df3ccc48dbe0a1b278d8cc016710d0769c5a653d338f99e614d8fcf22ba3125da0dbfad509d86b6bb63af3126c1fe82d1de
SSDEEP 1536:p5bMmmlLXAS1BbauKvQGB146T3biUTsAyBQAL:p5wZ25j3TWOs3x
TLSH
T1BF2302E391A5F824C9F44BDBDDB37207D9200C7B27B9D0DE89180A17A6E57D6B4E11C2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ST_SPANISH.cab

Path C:\Program Files (x86)\Spyware Terminator\languages\ST_SPANISH.cab
Size 49KB
SHA256 4d53c127f5f6f70427fb526de90bdea04cb6d2154184a2693f5f3dba4e3b31b4
MD5 d63acbc5e20d6c807531da9800366b7e
SHA1 1048d8048a0d9a0b1b07563982153a81517968af
SHA512 876914b18607d3c04fdcd19fbffd899b43766502ce621e1430a9ddbc1b0550b1d7151f562e7547395542489249f663bf9a639844b8ec13a0eca6c8971ea69949
SSDEEP 1536:Fs8qksoi5aeN/EPQyiTbm+diF7TqzyxJH:FsT7Zk+TVAHqz8JH
TLSH
T174330202D00DF82F54C41AB4F4F1922DB89EEB725429E719A1D8F25620FD7AF1C1AACD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ST_SWEDISH.cab

Path C:\Program Files (x86)\Spyware Terminator\languages\ST_SWEDISH.cab
Size 48KB
SHA256 3af1af35105da15624d857c97cbb0989a178a458598828e33a6705f7c6ed31ec
MD5 34b4a35394ef5a1552300ef6fe09b828
SHA1 acdc9e29ef3505cbb4cebae490012720647e8cbd
SHA512 44302f8d11fd12991efd9d7f102774e7966049a3ddec939f050bb6869c2fe3a944e55caeba0b67e187447f4cb517f3a6d3ded7f27d8da2e83ba70686ff7277ab
SSDEEP 1536:+jbG85TkphjTOffW4u2C7mk3Nc7f5tyUT:+P9Mhwf5ulNCf5tTT
TLSH
T1FD23F19AE434C0C9A5171423CFB81DE097889FAF04FAEBA3646165453DB0F8F5998BCC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ST_TURKISH.cab

Path C:\Program Files (x86)\Spyware Terminator\languages\ST_TURKISH.cab
Size 49KB
SHA256 b7901d6cf625d5c43e4b0543303498d5a7878e42e6d3191a560463ac78233ebf
MD5 f5adcbe091c3b249e77fc4ad4de355e5
SHA1 112ebd23e3e14707064d3a24959c7502406d77c4
SHA512 a03af708585f24c99c889765833c9d7a1d30d6deabc80eca14e4bcf3b7eb9d8fc9c6b0f93b018a35bede12c7ca38abebc482a77c73a3efd0cbed57e372fbb340
SSDEEP 768:TP6XRonCo6nW721o4aFsy9K971DkVprN6anLaOnZACEX52CbrFGxgF8nggeZz6ky:DARon/6nWC+JTcbkVxtHI52C2veJVx5S
TLSH
T10A33F1D8419C9C5CC94791F5DC09609AC97A3FB5616FB6CA8389818E3E1C3A30FF9348
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ST_VALENCIAN.cab

Path C:\Program Files (x86)\Spyware Terminator\languages\ST_VALENCIAN.cab
Size 48KB
SHA256 08acc85d2b8151e5059858f2b1b7a4c7e7fa012b321ac079f47c0d78b739354d
MD5 3e02a630ed3fe1d28137a6578ac09177
SHA1 4be77655f2a695f962cc8ed0d4e63ee7f6724a42
SHA512 ddd957a21586e53ce537a9ce936acae46573654b866e6743033103c8b0efe61325f0a1e2c880e3949fbf1d50f550d1bf79d8e48dac29b017b4ab2a516f2127da
SSDEEP 1536:A0O5NTctVaEzQwS2pUTKkeqrLAFmix6HMY:A0mNTctVcwS2pdw0kix61
TLSH
T19C23F138401984E5A6F2C2A3D9F2E1F1D375EBD213B5D2DCC0445E4D889ABB51EB7CA0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sp_rsser.exe

Path C:\Program Files (x86)\Spyware Terminator\sp_rsser.exe
Size 592KB
SHA256 0997e92041d7ba4e2c0eaa3338e9a71be5beb35249ded98b715b4fe68d5e5fd5
MD5 20cc04b6dc942027b294415cc7689204
SHA1 087b7854e72f22cdb3714013078ffaa0ad00fd26
SHA512 9a838fca0af7a21ef666c9aa66dd03a697cf06cb1b8b85e3b23c3aa5bac66f82c4068fe0d09c07aa3f8db987a9bd56082c245b3c37ababe3891c66fa01983900
SSDEEP 12288:e4hmT87xHW5uyWcmUmfrOF6giTvb+t/PxnpmnSF:emmoE5uyWcmUmjOYgdtxpmnS
TLSH
T1C4D44B32F640C037E2B72638EC5792D598297F542E28680B35D42F4CEF796927E27396
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sptcontmenu.dll

Path C:\Program Files (x86)\Spyware Terminator\sptcontmenu.dll
Size 160KB
SHA256 6c9dab8ff663c9f00ed6ab41a22c3b9a704c617e906136447f07288ebecda166
MD5 a5e97b2b88cc48fc178e88bf6e02f5ec
SHA1 9e93cbaed8ca6b4f3cbcb6ec84ef1ea46c4ea455
SHA512 18e47d7319670ee16aabb5c1da3c3e4d45e38b725ab76eb10dc880e01b65e96869be3be4cc6c323a73950f38df1337372e379d208a3b441f22fbfc5c6501a0a4
SSDEEP 3072:P3DzOaNTGQFcHEBpaerGFWYtpuEpwHF9wtY12TFd4W3Eb8xOJ5iNYV9/:P2aNtBBpaeuDuQY1UFd4W0t2Y
TLSH
T140F35C26F1C04C72E1F21A7C9D5AA2E5543EBE123E3C640F76E50E4C493A2E599B83D7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

unins000.exe

Path C:\Program Files (x86)\Spyware Terminator\unins000.exe
Size 1.0MB
SHA256 587e52af2f3f40c0afdaa62e0c614f1bff5df8c96d62bd3df38ec3dc21cd0cca
MD5 212174199721c88d5899debc1a0d4065
SHA1 235c25ec05f8f5bf9fdd3938313f5dede4ce152b
SHA512 bd1785e4eee8830cffd86c91d0c87e5ba71f17f4b1ecb5a4b80a1701d1b6657d436df54f1cb047e337b080502bc014a86fea95f6ea5cf98db1b8064d1f13a0a7
SSDEEP 24576:K+WRqE5/SQNE9/ZzaJ0sOotB3cV4tOM1c9ZtmYNYdLxYF:K+WRqeXqsJ0WU4tOCCtmiY98
TLSH
T19D357D23F2D08437D1731A749D5B82A95835BE142E38A48B7BF85E4C5F3A7817A392D3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BIN_RSCSDA.SPF

Path C:\Program Files (x86)\Spyware Terminator\update\BIN_RSCSDA.SPF
Size 391KB
SHA256 c87e7814a4dbd1599fcc0c1517492804fd9250a026d24fa28d967acb0fdff8bd
MD5 ac9693e3fc2d05694ddf630935c31e06
SHA1 1b9c7fe664c76dfbf8c08e519fb82435e0726738
SHA512 bf030448b8e4bebf8e5a43c3f517eb311db0be4a265ac92fdf808cdc1438d2eb5b538718bec393f1e3f71e9d7c2813ccd28530edadd82443e5d984fccce4c545
SSDEEP 6144:sDYsGjRLC0iazg33H0/MDK0yItRzABeGLS9kEtomZJDzaVZoTmJcOTmJcv:TRCsz6H0/d6tFGLS9vQz5
TLSH
T16A84D099CE229F77C63E9C9F4DEF54198320338BBE063A5F2816B84411B27532E9B51D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SpywareTerminatorShield.Exe

Path C:\Program Files (x86)\Spyware Terminator\update\SpywareTerminatorShield.Exe
Size 1.7MB
SHA256 0a8df87c2ea0f6b3d321e9122f85712c8d55372a0a28ceefa1d25bcdcfd5d8c0
MD5 0a4f9d900f31d5a71e3735d9fced37f7
SHA1 012c96950233434ba6a1892a615eac01c194b729
SHA512 3aaf6797833b1c28da4444f856db146031f146994b0b862eef01413b5fc1351c163d74e384c98d3affbcbb300879c9df49bb4cc851c8fdca9f49ed9d76c3717f
SSDEEP 24576:oLqJik8+AfvpJoMHadGVd59P8VHn+eN38MMJEOmmoE5uyWcmUmjOYgdtxpmnS:A8ip9X7Z8fN38MMJEzmwcmUkOBxpmS
TLSH
T14C857D31F640C137D2B32A399C5793E55429BF106E28A84B36E83F4CAF396917D26397
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

history.txt

Path C:\Program Files (x86)\Spyware Terminator\update\history.txt
Size 14KB
SHA256 e4ffbc738f9e34b2684a97e32c2d4e017a1b8875dac059302f832bf74e130e19
MD5 6edb6744089f2daf451f86b96ccd72f5
SHA1 e89ca341e17280bf405966999997b23ad74deed7
SHA512 b7720fe33ed2e743507bd245e340eb836b48a715cd396f2060b0c0a0f803564724c38bfd55c8adb048527abe2e9651383e237f1d10b6d3d50773566637b1d45f
SSDEEP 384:3BzIJexKxwaB1KdzuU1V16PrERJ6Xy+ZmLZquUm+KSJvObbVt:3B0JexHbdzuU1V1uOCdX6bH
TLSH
T1FF6243996D3AF1B534B2C747A3252563EBB5512487A0442C21AAC05F3BE50BFE7EE03D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Spyware Terminator.lnk

Path C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spyware Terminator\Spyware Terminator.lnk
Size 1KB
SHA256 df335539bfa3a1c54f6fa146037292b9c89e95dc967f46b750ba62335cf0a39c
MD5 57b4bc090afa8ac47b0338f8fea21c32
SHA1 9722402e64893c51f070a7ff1fc33705f1593d7e
SHA512 507bc6786651c9a3e3630a1c65e37a600398276a1b0223f49f94b6c6066b350d5efddc1b7f66698ce35da19c485178b5e5610306abe35d11e6794ab04f25bd82
TLSH
T17621AB091BEA272AF3FBE27255F672129537BC10F2A44F5E04C3934805376085A6CFAB
MD5 SHA1 SHA512 TLSH

Submit Download

Uninstall Spyware Terminator.lnk

Path C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spyware Terminator\Uninstall Spyware Terminator.lnk
Size 1KB
SHA256 0ba1caba17715d2ad120bfe6f72904ee5db1ca0edb4e2636f68500a3d310c9ef
MD5 fa2b14c6195529b2c082b84d88801583
SHA1 864ba6d60cc0711221ffbefa1a2a7ddfe94ca830
SHA512 06a9b07b8ccfd4f2ecc9ef412b65a500ed89a93d97094417ade8890eb5033cafc4929a0bd3dc25bb2bd5d1f0b9ae8f6c090beba6f1325f47c1000f20f47c12b4
TLSH
T15311E3094AE51B26F6EBD27564F623234937BD00F6A51F1E04C39748486600558ACF7F
MD5 SHA1 SHA512 TLSH

Submit Download

BIN_STDATA2.SPT

Path C:\ProgramData\Spyware Terminator\BIN_STDATA2.SPT
Size 1.9MB
SHA256 46879f8f5a7102712c1d8d415e535673ec315c42f106c46219f7bab05d25481e
MD5 9a7a48165f75433336694fa6ed3c0c9d
SHA1 59b65739dcdc5733de50830a181825150bf451e4
SHA512 257ac6833744d39a44434be8074f2f77b5ff31cd31f8fbbf5c6503ce6a08d87f9949d82c3b4846b064ceb3f93f70e3fba79a5941fa798b1cf19f35542bc71016
SSDEEP 24576:PLr6sP9TkY0tWPUbwpsAP/WjsQ2IxqkX+Jimuxa:zr6sPmY0tW8bwp3/WjsQ2UqkX2imuxa
TLSH
T18F95076ED2DF4C78464D658D06A83F1BDB8D38A5824C94A9AFFC7985DC8F448E01A34F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fileobjinfo.sys

Path C:\ProgramData\Spyware Terminator\fileobjinfo.sys
Size 5KB
SHA256 e01a783347bf9d28ae3b473a167a9f72f0c89eb9d0d5712b0c24d3814f334e6c
MD5 3b172367379fa5cd6388f93657a7e9a4
SHA1 e8b57f45ade61bfe44a0102f38eea1260c65768d
SHA512 8e707ff7c0017e54c2cd1c8e33e4e7c9b7d6df964ed634e3f7e64f9cd7392067704528851633f0d8164d08eeb517dc33e8de5e92316f275b1485776fc460d1a3
SSDEEP 96:lRaSJszqCvR4An4ZWPMR7esi3hEWwSwWw:l9RC+ANERoCWwSwW
TLSH
T154C1453573E42939F6B71A31347B279E507C79581BA2819F0B80E55C2B316B1E9347B3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sp_rsdel.exe

Path C:\ProgramData\Spyware Terminator\sp_rsdel.exe
Size 6KB
SHA256 6318ee235ab989a497fe78648a77928eb537519b1c177ecd957118183ba78575
MD5 8c411b348d2d161f7b098cd85bc8b3a1
SHA1 59c93725316cdb327da613c708cb0c9a9082e496
SHA512 6fdbc71e32cb6d676c76035d8df7fca6c2eeab664ac401b789d479f8b29e40a5e486a040648aaf83f3eadc950ba8fc1319912a7fca0d50942712a51d9e22f149
SSDEEP 96:ax0IgY906tVpN+ZtLJUoVZmdUpiQaVcYVH1ZLON:YjEmzcZddoQaVlbLK
TLSH
T127C1E782B3A6533DF1FB06B084B13712763F3C608275D79ED741099A4D268A5E63177B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

spywareterminatorsetup [2-37060].tmp

Path C:\Users\Admin\AppData\Local\Temp\is-Q3QO3.tmp\spywareterminatorsetup [2-37060].tmp
Size 1.0MB
SHA256 3ffd1626ec210bf9382003e21eb61c7d761c93d7c6116d613bdcf10db0887342
MD5 b94be038babf3cc61b47f69d1966e545
SHA1 6bcbb624f5a0be2e7c1ea55aa7bd31dc242e0d0b
SHA512 95b89dad95291f4fb261bd939fabf55c20b374eb06bca391288654c3e40111cfb3802545479e25586ce87167d6a395aa36ae7d5ea9bcb202f1f721c52534cc7b
SSDEEP 24576:y+WRqE5/SQNE9/ZzaJ0sOotB3cV4tOM1c9ZtmYNYdLxY:y+WRqeXqsJ0WU4tOCCtmiY9
TLSH
T123356D23F2D08437D1731E749D6B82A95835BE102E28A49B7BF85E4C5F397817A392D3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Enhance_security.rtf

Path C:\Users\Admin\AppData\Roaming\Spyware Terminator\LanguageAct\Enhance_security.rtf
Size 679B
SHA256 d8dcd1c7d5ea7b8bf14eba040e85a0c76129a68f27f1437d7e6ff18bcafd70ad
MD5 c400287d98da1770755ccb911a57454a
SHA1 fbeb2b7a1ca184fe21e723a2d8ba1ef589b69c93
SHA512 aa913bf5e8c534365c4434de49c0d175ccdb3cfa943809cdccd0945fc743543892e96e4b087a7491e7719ef39e7dc8ebfa8ce74b1408ec13b5aee77fe7c52ff9
TLSH
T13301F474829CE44C074B67DF1382504A3FCF40729BEAE050B4D94E5034B335C955DCD0
MD5 SHA1 SHA512 TLSH

Submit Download

Install_wsg.rtf

Path C:\Users\Admin\AppData\Roaming\Spyware Terminator\LanguageAct\Install_wsg.rtf
Size 828B
SHA256 bb75de1c4a58e0cf5b7629ee190f2a92c1f9c500d00e1cd69f9ba64f55a55293
MD5 cc3a7eda5cc5a311595b03cb076b37ca
SHA1 d1f71c590cac8dc316971fd7a38900a494f0b178
SHA512 cf324e86027b4c144388e2154e2240fffa81b2b37ce207f94e9f5663d53d1df5897df931e1eb6e35236d058a84db3740e678998737a59b1b1c1bea0efaac7879
TLSH
T15301167D511CB3F9478F43FB5396D1975E4C40AD9875E0A0319557743AD246C609D0D8
MD5 SHA1 SHA512 TLSH

Submit Download

ScanAdvanced2.rtf

Path C:\Users\Admin\AppData\Roaming\Spyware Terminator\LanguageAct\ScanAdvanced2.rtf
Size 288B
SHA256 acd011280bab50dde01d3149b733a4a8d8a6db82f0f80aa77596eccf63b6d301
MD5 4d8243e7e23cf511c2841c7e45a3dd6f
SHA1 eafa6b19d61d676356406736b1d4a660fb16b31a
SHA512 f3b6b6d6eceb55966c6fba82929d359f56bf190dff61f08b622f5f2422d6632114f54d7e6852969dc1b55a21c20c0662afb40162a3c202c2a299a772e8219721
TLSH
T195D0EB23D00C22F80487729A1EB1425E8B9F41A8DA26F023907F1FA9FD3752D30D24A0
MD5 SHA1 SHA512 TLSH

Submit Download

ScanExtension2.rtf

Path C:\Users\Admin\AppData\Roaming\Spyware Terminator\LanguageAct\ScanExtension2.rtf
Size 347B
SHA256 41ce2845c41c85c67cfec2b287689f9f38c8ea62cb18f95e983e3fb5989e11c2
MD5 a1a44b61c03fa0b133810bf5b56952d8
SHA1 c3e2ed1cb997c888a94036092fa74a84d52f623d
SHA512 75dfbd0dbd4166128dc0b19edd5d7f116acf9fa816b01edca8790f72724d51bb83bbd94445ee01709b3365c1ec73d51c1c42569de82388c428684920bfb58b68
TLSH
T1F6E0C025C00811910442518CDB90C1AF4F6BC16AF56EF56371DAAF21B83F82CA0E6C64
MD5 SHA1 SHA512 TLSH

Submit Download

Scanfullvirus2.rtf

Path C:\Users\Admin\AppData\Roaming\Spyware Terminator\LanguageAct\Scanfullvirus2.rtf
Size 527B
SHA256 1de32434ebc2eab220e86270534a1359d6a38cb2d505ba1f9574162f214e79d8
MD5 75b5d6ee92afc7dc09471aade9d26501
SHA1 2e743e09e494846d6ada6034468ff8166b7ffe96
SHA512 dffb2d5387464bb6d38b3888c16eabedbe9e1400738e52f38012cda5490873ded891534acb73887040a13f4c2b91f41d0ecf139af714e4669a8b1004deae1747
TLSH
T1ACF0262966188250105301047F45810F4F4FC1DFE377F852709E89B4F4B601E25C1C50
MD5 SHA1 SHA512 TLSH

Submit Download

Scanvirus2a.rtf

Path C:\Users\Admin\AppData\Roaming\Spyware Terminator\LanguageAct\Scanvirus2a.rtf
Size 417B
SHA256 ba1aaf85598c998af660d53c4b325f576d706a83161dd2a36e27c7b90b065c93
MD5 4e59c38f3f9205ef25309980f25c714b
SHA1 887ab7cfcbb160df6e782257457f7a054d9a480c
SHA512 e36625b85a51fa3d89f45203808ba87467816fe5dab91b2df0ae5235624ce5d14ca38be5848eb5e35419117790edacc3136b83ef6154e10bb81c8022a0214c7b
TLSH
T122E0A31BE53C01A4240311953F80D18FCF4781DA9756F11291B98E50757E06E6587490
MD5 SHA1 SHA512 TLSH

Submit Download

Scanvirus2b.rtf

Path C:\Users\Admin\AppData\Roaming\Spyware Terminator\LanguageAct\Scanvirus2b.rtf
Size 417B
SHA256 735c5cd2f8f0f652049039de19a7b40cbed5276e2348c390405e7820f7d7d797
MD5 15fd00cf8097b0fab66b1e631ac42211
SHA1 2b8ce40bf444f59d86b6477c37dfe6556dc41c9e
SHA512 f9ac64f7b5d642b96b730498f1e110767c86e241cb8f22adf6a96f3ee1ae217e694c7a26de5d2108818904affc03d8d626f197f96fb990dc27fca664b464f4f4
TLSH
T180E0AB1FE63D01A4240311983F80D1CFCF8B81DA9766F122A1BA8E9079BE06E6587890
MD5 SHA1 SHA512 TLSH

Submit Download

Scanvirus2c.rtf

Path C:\Users\Admin\AppData\Roaming\Spyware Terminator\LanguageAct\Scanvirus2c.rtf
Size 411B
SHA256 3dacbb77458cbc0eee5682989c95347e568a26afe50bf19216e1e10bbcb7e29a
MD5 0183bf40c1f282254adb0901681a1e2a
SHA1 21e6f8d4f07628141185d5f29ef381bf8506b045
SHA512 6ec974687a5b74c3341fb8c1322666cf1fa192e80ff002649df90f578b2f20f843c17396b5194a29ea05f9ade8471b893ad8f407622c20fd72a8ed4da4636eb4
TLSH
T188E0AB16941C53B0254252882698D29ECF8FD265B366D122A5BD8F35B93B53D22C7494
MD5 SHA1 SHA512 TLSH

Submit Download

appguard0.rtf

Path C:\Users\Admin\AppData\Roaming\Spyware Terminator\LanguageAct\appguard0.rtf
Size 627B
SHA256 ba37111b1ec993a5df9a57f5383277de38d981d403c4c861614a3868e91abe1b
MD5 9e1b85febf63bcc771e262cf2ee53f4a
SHA1 590bf8f1b0f7950ab5c692820f7254d30face56b
SHA512 e2c0d5b0d6e1e3d1d9c4b56d292dd2ebe683196f97a58235d2644827b5ce89c292673ee68c3f9b9a43169ad9b5b659895c1a6cf9caf0f0ae432b485dda374524
TLSH
T1A0F0D3D3510432D40BC762AA4981C2CF0F3BC06DA9D2F0855267DA71546253D2363055
MD5 SHA1 SHA512 TLSH

Submit Download

appguard1.rtf

Path C:\Users\Admin\AppData\Roaming\Spyware Terminator\LanguageAct\appguard1.rtf
Size 514B
SHA256 a5a811d2aae72d986a5dcea63057e12083de96ff9cc6bab4e69bbb82405d73a2
MD5 ccf774c73c2d870ea4dab567aacfea13
SHA1 c13640fd3e21269f4c073a40391b32e4ffa283fe
SHA512 0231b0356d9ed6b9519b82ef8472166ef76fcd3efee66e926e604c57258c309adb637aa3ee59bf6a11e6ae5163a1cc32e8c7f04dca6e94edb111030d8f38bc02
TLSH
T194F0C017514010D01FC2219A4D90836F0F77D15AF886D2D29556ED31AA3681E5392CA3
MD5 SHA1 SHA512 TLSH

Submit Download

appguard2.rtf

Path C:\Users\Admin\AppData\Roaming\Spyware Terminator\LanguageAct\appguard2.rtf
Size 557B
SHA256 1d37ac5d4f26bba701ea6a06d14c5a9b868e2cc821f45561cd00f0477d5bbaa4
MD5 3160e6c48128c4e38919ed1e1cc9b025
SHA1 e56628285e2f56f0b3ac372022289c80a952c3a6
SHA512 af06f13f476cc00f27434fbdf0edec94eb0c3014ecd0165bbbf2d9d05158eda4d52dee465fddbe02522bc2465d0e306658ec237ce3b1282cfd8cc03dd1c88916
TLSH
T179F0265DA08472D41AC372DA4B41C2DF0F3BC15BBA47E15293EBCD71A87242E17534B0
MD5 SHA1 SHA512 TLSH

Submit Download

appguard3.rtf

Path C:\Users\Admin\AppData\Roaming\Spyware Terminator\LanguageAct\appguard3.rtf
Size 590B
SHA256 117273dad1dbd716394d9fdf89f05c99e73bdb5f585786240c2ff3ccc4f66ffc
MD5 056df32ebc90e3e8d96f30cd9433867f
SHA1 117fcb744dc8ab30c9f20fa12c4a55e1f7f38fe7
SHA512 bf865fc9713a502a4a3d49758be137f1cec5b62bc7aa9ab009a9e45aef648fe9c26a7b271dc39a958120c7e035b8740a65bc54567bc7beec04616a31d7bb2934
TLSH
T1ABF0A226D40871881067568D5746814F0F5F82AE6A95E8A2D7A74E90B47342C3653C64
MD5 SHA1 SHA512 TLSH

Submit Download

appguard4.rtf

Path C:\Users\Admin\AppData\Roaming\Spyware Terminator\LanguageAct\appguard4.rtf
Size 629B
SHA256 1b4c298e2765e3a174ea041f9a8a7d22a00ae3dd5dc894be39e04ee9f81fcc4a
MD5 3598b745fe9fab1c7a0162d577e5fff7
SHA1 8770b4c83263895bc471cd193af42f8a999cc0e8
SHA512 6bb650081c77029008800d6bf85464bac13b9cce33b3841e6136a0bbab274b22bbadcf4108432052a8ce20e634938b3a6a957d9b4c5659298ff06307c35c5b31
TLSH
T175F02306D58250E019C2314E1E12826F4F7BD169B186F18293FEC571A4F7C1D02974A1
MD5 SHA1 SHA512 TLSH

Submit Download

bg01.gif

Path C:\Users\Admin\AppData\Roaming\Spyware Terminator\LanguageAct\bg01.gif
Size 93B
SHA256 65c70f5dd75176b97b6c458dc70c23c222531aa8db911fcc51ee354c146fdff5
MD5 91708339cf289ea7602afc5c01bb360a
SHA1 217f41bd7c2dd38719866ae4611b33ec74d50b5e
SHA512 84f415d11431050dd46108742125e3fbdfe3c79835330eadca8b5dd82ecdde7e13af9ea108608e478ba2de97a347b755493f42ec7ccec9ecb99ebd7886c35277
TLSH
T1A6B01261C42010A3C11570398A4C6CC0320287742C245F03412E30096C142230410544
MD5 SHA1 SHA512 TLSH

Submit Download

bg02.gif

Path C:\Users\Admin\AppData\Roaming\Spyware Terminator\LanguageAct\bg02.gif
Size 2KB
SHA256 cf63d0144f3e95ce51c2115b7b05b668fc48dec24e66cd3a59925e4bb21cdd77
MD5 d92276878fbd2ff61bab80a437123e17
SHA1 d41c4503993029dea39f3b0157f17a2fae95936b
SHA512 0de8e68180db34e29da7b8f7f73f6589046ca6a916f4fc45f63f7d8fe852122447d8119fe3c0f5c8c2daa11deea0f278f8484850fb9b9309837df42c0c5cc931
TLSH
T1D5512906C2143CBACC2E00BB0A3581E6F99755E0D131D9BE8AB6D13BADDA7624308AC0
MD5 SHA1 SHA512 TLSH

Submit Download

bg07.gif

Path C:\Users\Admin\AppData\Roaming\Spyware Terminator\LanguageAct\bg07.gif
Size 144B
SHA256 68d3e6314a3fbbbfe9cd7a23db3248aba46bfb1583c52262ce9bdbab2bcd2878
MD5 b9fc88f97522602aaa0ba1eec781e1ce
SHA1 c71033777d7ae14f2f04e6f9d16b88ab93cee2eb
SHA512 7ffb3d2448b34d2bfb99a872dcf5fe0b5916b55cb38a8a6b1b48a722967a405f5c5e21fd3851e4c3afd1992c6b1637e0d9ef20a7e0eb8249841b47f8f7a70326
TLSH
T18CC02BEBC11815C0C15DC3BF4ACBF683225102601C055C03450DC1B338182C23C081B0
MD5 SHA1 SHA512 TLSH

Submit Download

clamguard0.rtf

Path C:\Users\Admin\AppData\Roaming\Spyware Terminator\LanguageAct\clamguard0.rtf
Size 534B
SHA256 7bd7fd9266a1df63a97d6bdc9f78e1e08573a7fd301399bb946dcc894aec973f
MD5 ce999e53b1b72648465df5e73aaf1e68
SHA1 ccd029d2037f2a3dae088c01420714220e1d40d0
SHA512 e4d6b0fb7b30ab5997ec18a57352825172129c020b311bfeddf7487583c6d059504037e65ea1e0335ad2e22cbbd2fb4a177b5e5360043481d44744e2c338148b
TLSH
T1FBF0C013955832A925C663998B42C29F0FCFC079FE65F1D291AA9EA43A7241C16A3868
MD5 SHA1 SHA512 TLSH

Submit Download

clamguard1.rtf

Path C:\Users\Admin\AppData\Roaming\Spyware Terminator\LanguageAct\clamguard1.rtf
Size 550B
SHA256 ede42b70ee50114345c70f2cc7985c17aecb2d7f51ff2f528e517e8f73a0bc07
MD5 03836facd5416c45be8b7a92bdfad24e
SHA1 3e302ed163c501d8a95252404d12ce7e2e1d668f
SHA512 d0f2c735dcc3950af29c4be05955d8f29f9bdd6c37b59c82b4e6f84ab4375f2723c9fbaf9e64fff40eef84cdc82401c99279dd5cc827626011586a1f761b96da
TLSH
T1F4F02653E11833E921C353474F01C29F0F5BC06DBB65F291DE9B8D707A3241C2293490
MD5 SHA1 SHA512 TLSH

Submit Download

info.ini

Path C:\Users\Admin\AppData\Roaming\Spyware Terminator\LanguageAct\info.ini
Size 92B
SHA256 ca0f87b529287a85f1dc5234470397e1d8c1d4854fb419e6ef9f61e6a891f591
MD5 7f2b4863aa5987e1482b453d226435b1
SHA1 0b08af4fab42ec0cafd97e1ce3a53178f739c9c8
SHA512 d50fc1be57eeeeaed832a41d9e06062a0e069ccf952746ec971a0280dd57f0b046aa7736d7f62fee5307a8e1bae2f619e9e0d54bc85b323589832f389d912318
TLSH
T19BB012001009323D2988461D64B570CAC5D843F1C0605758960435770B0083C3027211
MD5 SHA1 SHA512 TLSH

Submit Download

intguard0.rtf

Path C:\Users\Admin\AppData\Roaming\Spyware Terminator\LanguageAct\intguard0.rtf
Size 630B
SHA256 6fb2b255cdea08938fefc7872f5b2eae8c113176e113e94991dfbf5287bbe3d5
MD5 1e0bd79d4e51b6212a82f513a5e86e9b
SHA1 abb78f540704fcf05779a63f7b948d52ef5078e1
SHA512 b5231eab118ab360037054ce09278b0c63f06e84c97a14ea6397087fa03e2d13f7e3a1e86ce9957b8bbb6e6ca7f6e550b12044768836f0edb6d14aae44bf14a0
TLSH
T157F0D315B61D215405C361495A4181AE0F2B8165F791E1D663AFDFB0F97B01C83D3795
MD5 SHA1 SHA512 TLSH

Submit Download

intguard1.rtf

Path C:\Users\Admin\AppData\Roaming\Spyware Terminator\LanguageAct\intguard1.rtf
Size 661B
SHA256 904e88006b7646eabff1c52a2a7801c54ec6edbedcb061ba4d009f739a67cae7
MD5 5eb540a10b7c1dab37e11cd600f3cceb
SHA1 b0ffe95c4c53804ce421c56d76c41a01407fe508
SHA512 bdd8450b29e23c58aa1657a2b5013d544e082cfefc635e6b7696ded8061c903774b24cfa85159aac4cfc9778206c5dc832ea73b528c0e7ca4789ae7e1f22c25e
TLSH
T13C01FE43710C32A011C362C64646818E0F3FC0AEDAD5E2C1FAB746F1A97342C22639A4
MD5 SHA1 SHA512 TLSH

Submit Download

intguard2.rtf

Path C:\Users\Admin\AppData\Roaming\Spyware Terminator\LanguageAct\intguard2.rtf
Size 733B
SHA256 e037d947f156e0c696b8e9bc74b92657eb803c4a0a2a4a94a022b77ac947fc1f
MD5 4daa5235692a5a54e28c17ebf32b226d
SHA1 3b72ee63fae65e8dcc0cfe81436420042d8ce455
SHA512 1b377a6b6aca3e8c18fb8e7c18bfee2c88ae9ac8e6af9b8a3a1428322a2ae2f0f8f1dee88ac5fa82ef37a18e5cf02bf08642691ceb64d3f1b2e8686c04f5c3a1
TLSH
T1AD016569C4C81190078511486283513A4B0ED1A8AF4BE6E35868D33DB2BF30CD1E0FCA
MD5 SHA1 SHA512 TLSH

Submit Download

intguard3.rtf

Path C:\Users\Admin\AppData\Roaming\Spyware Terminator\LanguageAct\intguard3.rtf
Size 597B
SHA256 b2f24593ad3363aa218ff7b655ab55855aff027b346ce483c57f3ea015a9bad4
MD5 b947f4ab1593036f3542eb8cf19c4c48
SHA1 f89ae7dadbd7aaf734d4061582ac67662083d47b
SHA512 b418d02c856aa477c747e8f3dc9ac676708c195a580440ff1591372aeade2ed2a1a361454846a914872308f5d27a2d31ee9a7ee47b38dc0b50bb6d43b1c08dc5
TLSH
T179F00282B10D22A011C3A1CE09C5C2DF0F2FC16AEA92E1C2E5A78BF0A9B746C1386485
MD5 SHA1 SHA512 TLSH

Submit Download

intguard4.rtf

Path C:\Users\Admin\AppData\Roaming\Spyware Terminator\LanguageAct\intguard4.rtf
Size 649B
SHA256 c829ed45758b208edd78bef0aa8c8c2bd2f8efa0b6d345a2676b7b3b01431c6c
MD5 33a659d18427cfe9a5ccc2c3e9256886
SHA1 be2e0e86ed73e12329eb3c95ca8753065da6984a
SHA512 b6fe25ee6e1f3bf744df56b052ca565842c9a4e3fedf53e79060c2e510ecb84835590add84fcf1eb72e23698069098f21b0ba9283ad2e8c49dff8c13ab492f02
TLSH
T171F028277058319411C332818546C15F0F2BD1BABA91D1D3B7678670EDF342CA2439E0
MD5 SHA1 SHA512 TLSH

Submit Download

intguard5.rtf

Path C:\Users\Admin\AppData\Roaming\Spyware Terminator\LanguageAct\intguard5.rtf
Size 553B
SHA256 40e9fdce02563dc986b308eb74aed26bd7ad645f55c27a39f442ef44be25a54a
MD5 3287acea32307c38043ceaf6dbba25fd
SHA1 c45a1f16eff97a92e50a3987075cf570a8f54b78
SHA512 45a61b2df5c4b852bd6b0abc76ccfe7f6d3ee5d8058bb5089f0e804e0b85924ddc23a7839e23ac98cec517847226d9b3b7ab6d3578c9ce60200a62ed46c1d455
TLSH
T1A1F0E142614D12A424C3524A4681D28F0F1F8050E9D5E199F3AB8FB07C7B01C5245580
MD5 SHA1 SHA512 TLSH

Submit Download

language.inf

Path C:\Users\Admin\AppData\Roaming\Spyware Terminator\LanguageAct\language.inf
Size 73B
SHA256 3390d5e40e973387d0a20fd35cadfcfae4c391cc2f03c6d458faaea9bae17716
MD5 ae7051a0f21aba7915c6f48e71a3cb61
SHA1 0856b93dddb8adc6fcc2fb3130ca06d79cbcaa78
SHA512 f874e941e61b542307683dc89b4d18b4b4998a49a4febd39ca6d5701942212fbd425e3cb1c4de92c8a9f98dcf9677c9ea3e43e4ade0515b1cb50ff901aac3be6
TLSH
T143A022823200203EB880000C3C28A3CEEBEC00F30C83283808E0228A88820ACB003E00
MD5 SHA1 SHA512 TLSH

Submit Download

language.ini

Path C:\Users\Admin\AppData\Roaming\Spyware Terminator\LanguageAct\language.ini
Size 88KB
SHA256 a2028ae0fd1b635bb6806196b0b2f5048774974e92ad9ff52b9ff8ec5cd132b5
MD5 3c13920ff4d104d28afb60732153cbc5
SHA1 8cde4724eee7264fbfa27dcbdbb999b6b0249a89
SHA512 5babdb317f43c22c647f869de73d83569b9737a1b2d7f2ba3d54598bc60cbb8dc3474205317276c084b93c821452beec0f02e5cef00213a95434503a95c3aca1
SSDEEP 1536:kY+a9PrQz7azboTnrQHJyXswh6zpn3XDPwGPcBacG+sOweAeIFuHaqHqPpyvi2or:nz2UmstGGPE+uJHiZ
TLSH
T19E93D70E7AE9A370C6D36353E38177D2BA3583E853A2446A784DC09C3295786CF375A7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

li.gif

Path C:\Users\Admin\AppData\Roaming\Spyware Terminator\LanguageAct\li.gif
Size 54B
SHA256 2f6c795a94fc4e979baf3aa6fa4f9c7b88036bac28aaad6a04ddc7545c9c933d
MD5 5feba7f3595086cc3188e05da8ea556e
SHA1 f089d0af0844d4aeaa35a4bd33ee27c2fff19f9a
SHA512 ad09550c76b9a9d71ce0c929b1c2d90d2eb2054eec9d0b0ebbdbed590f5fda558440d04f636d5ae48eb4bf38a60648b107c8a671e05acffcae40b413216b63c5
TLSH
T149900205CAC18A44D072B2303A6747123B64C105D7043755196964515D8605B0503094
MD5 SHA1 SHA512 TLSH

Submit Download

li2.gif

Path C:\Users\Admin\AppData\Roaming\Spyware Terminator\LanguageAct\li2.gif
Size 55B
SHA256 ea043680eafb342b52dc4357eac1a8d95f3671d837d08ddff8ebc3a9671a46a3
MD5 9e47811e71f5617ada8760c513054773
SHA1 9dc6ba38031c2deaf2bf14e966645dc9fa499fbd
SHA512 e235d40baec921182282b295137956175a840c4efb53f603ea30c6fb8d75edc4284a2a3c42785d03d278bf85500f1ce63a9ab614af552b2bcecd829582be6296
TLSH
T12F900255CAD29748D062A330366A97106B94C50196443355426A65505D9D0534517590
MD5 SHA1 SHA512 TLSH

Submit Download

offlinehelp.html

Path C:\Users\Admin\AppData\Roaming\Spyware Terminator\LanguageAct\offlinehelp.html
Size 3KB
SHA256 d3e940b03620df104189dafc2e5e4f686699cce05d8e0b80712f9d33cabe7446
MD5 bc9cdfd73c56fad8a9b81aeab75bc114
SHA1 036d166f7d5caad69c99cb4ebcca97be9050a934
SHA512 73f66d0b3e25149ff70d830c92f41ee3e21a3de300959d8bdcf7b8fcfb6c4e14327e670f3e68214e697ee56265b87dd4a3239206959dd5fd208a68248a2d592a
TLSH
T1248194342AA4623EE237C1B2B17577563121D047E2B31F25E7E8E778E1C51CAA5323E5
MD5 SHA1 SHA512 TLSH

Submit Download

scancustom.rtf

Path C:\Users\Admin\AppData\Roaming\Spyware Terminator\LanguageAct\scancustom.rtf
Size 342B
SHA256 e4455d615beb892a73cae7e9c9cc3515977aba934476f590d59ee388e0fc5701
MD5 3c41dddf8d11932f818693f8bca3edea
SHA1 b4daa3544a2b0907f9a9ca7ff03d7cfb15957a7a
SHA512 5094d9f44acca45648ce665162d9dbd92c6e57b07a6c9dca0883f63c90b437b1e7f6486ced930d1d628c4128b31a0822d9bc8f563f094f40615e9cb894219f41
TLSH
T112E0C03E521C12A01043CA183BD442EF4B8F4268EA93F96291AD0F30F5B623E28A1094
MD5 SHA1 SHA512 TLSH

Submit Download

scancustom2.rtf

Path C:\Users\Admin\AppData\Roaming\Spyware Terminator\LanguageAct\scancustom2.rtf
Size 382B
SHA256 b6be48932e95d4184a81d7e421b96f674dea6bfa322a68d5899777e40995dfcb
MD5 c0d95f86f4a8378c5d8f82f9514d8061
SHA1 d63d798f28cdf0f51c79abfc63ffd608d2900504
SHA512 06ddc06ca65f96c37f46370256c66922b0e6b999f3ffc558175d8c4033231bed8909a953b947a5086ec077683507e349908972f9409661871212d2f00381df77
TLSH
T114E0F127425411D4244216485F44822F4F8BC25AF747ED63615D8E31747F53D36928D0
MD5 SHA1 SHA512 TLSH

Submit Download

scanfast.rtf

Path C:\Users\Admin\AppData\Roaming\Spyware Terminator\LanguageAct\scanfast.rtf
Size 409B
SHA256 89cb63b2c846aaee9fa816d1890f6ce9d5e4313695d248fd39cc3a36b809602f
MD5 6c7967d6f6c53b09458b2000f7e00b96
SHA1 ae7215ce09d913bf05e2e750f05552dc318b80a5
SHA512 067f9869362cf88360629ac65853fca504da1f78cf4d92f147fdbcfe900c6e42274594f4a38d0e757d87314fb0904de17eb94bf05f9b373a00608d1025fc923d
TLSH
T1C7E0AB11952C62A80053614C1B9182DE8F0F02A4F6A5F81289EECFF2F5B305D2C910A8
MD5 SHA1 SHA512 TLSH

Submit Download

scanfast2.rtf

Path C:\Users\Admin\AppData\Roaming\Spyware Terminator\LanguageAct\scanfast2.rtf
Size 451B
SHA256 7c4559c2ff99dd38d23d2dc80759df313a596f1e8512a5eff4ec5b3cd7ff8446
MD5 125dd30dd9a82dcec56742a1930e118b
SHA1 f9a18b85c8d12518bef17beb4b0b92558594c190
SHA512 f72ba8fd92f9e04277e23f04ddd9b08a32c14c27d710f6d58a7fd12990a911bc5ce0fbe20dc07fd1e51549890e7f27a059dbc6d3bc84b1455fe2a14bbd9141be
TLSH
T15CF0D411B42C2091149121491FC0C05F8F4FD0ADF35AD50219CD8BB5F57F06F25A79D0
MD5 SHA1 SHA512 TLSH

Submit Download

scanfull.rtf

Path C:\Users\Admin\AppData\Roaming\Spyware Terminator\LanguageAct\scanfull.rtf
Size 365B
SHA256 08254fd5d649327bf073252373f41b9a89c1f9d4733d7daa9308d619e5ed0756
MD5 ea72d744accee262d160f4b1ea8bab53
SHA1 7772db088e7d727ef40721adc3f3dc57114bd76f
SHA512 750b51d16991908dfa42da29377c1bbc0deb3dd2156a809001620073fd88c3808455265c90e46b7649d99b364167ff5702a3cd5eb1bdd3209202eb2512fe4b76
TLSH
T1FAE06A11503811E02143112C2FE440AE0B5E01D4FB70F50140BCCFB2F07314E1DD04F4
MD5 SHA1 SHA512 TLSH

Submit Download

scanfull2.rtf

Path C:\Users\Admin\AppData\Roaming\Spyware Terminator\LanguageAct\scanfull2.rtf
Size 427B
SHA256 77ce0685ed5e7fbea81eb5c6c32141b117615cddf302e9c18fc4cb6dadf4099c
MD5 ad6762f188d901d1488b32e38e6284f9
SHA1 24a4637195b4cb45e847ee22340f480f0ef2b38a
SHA512 816b743f42a10f474934bbbef915919a083e91debb39c0005fa2f8034ea398a08e6003cc68de08101c75b46e2d37a052540cf5a9a0839c3d94b09482d033ec1e
TLSH
T178E0DC259A5802A0109311086F80822E0F4BC19EF773E952204C8D74B47A45D26D18A0
MD5 SHA1 SHA512 TLSH

Submit Download

scansmart2.rtf

Path C:\Users\Admin\AppData\Roaming\Spyware Terminator\LanguageAct\scansmart2.rtf
Size 364B
SHA256 517f20a9a266f47c0a4c8d4285c8ddc25d96cfb75ef3491b96388d41f2303448
MD5 9e6188bd2a2886adac561798465772a3
SHA1 38f068731269a5152cd5bf4e264f44e55793ec39
SHA512 8399f1c55e0d67a7cfcf631dc4013cb5ac74892dca982c0014c2b0e4a13eb999af8653674a1a287a3c0539765c44e42d2ae681cf8473b41e6eeb7d8dc045456b
TLSH
T11EE06815D00893A91583918957A8C25F0F9A9122A6E3F03762AE4E64E9B383E3965898
MD5 SHA1 SHA512 TLSH

Submit Download

sysguard0.rtf

Path C:\Users\Admin\AppData\Roaming\Spyware Terminator\LanguageAct\sysguard0.rtf
Size 526B
SHA256 17ed47c5b708222ddd6b45410a70436d4a2f79f6b69cec69ff851a204c931faa
MD5 56cd6c0f3603955acf254167399f9bdc
SHA1 8647bf1803dca8746533b80a55386a0ac1d8d042
SHA512 6a5876d647ace4e8e61e8da93ecfa19efd7f813724f5e89d2d9539eb18a0158ce9175da5c253d6dff84b4814ecf92bea3c55d297c5b88dd9d044958bde00586a
TLSH
T19FF0C061799822A515CB61A44B54C3AF0B7BC05CE511D28191BFDF50D93751C13D79AC
MD5 SHA1 SHA512 TLSH

Submit Download

sysguard1.rtf

Path C:\Users\Admin\AppData\Roaming\Spyware Terminator\LanguageAct\sysguard1.rtf
Size 607B
SHA256 d3bd3b385a59b257a91b4991978de04e0ae33674d03642617d20d157bbd03d5b
MD5 217bd7a6bd4115135e6ff1abb606a4f3
SHA1 f1ad5b96b7da4614ee5b203984bd867b321353da
SHA512 f94b511de2c3537207c2d3ec7c85b64770b905069d409a19e2e2bf06786c4800a17e4b7ba633968663b0b38051c37c0c7f7c933203d8ec94b3bfef3da61c45b3
TLSH
T167F06203A488529024C3B2890604C3EF0F3FC098B2A2F092D9DE8AB0AD7282C0383894
MD5 SHA1 SHA512 TLSH

Submit Download

sysguard2.rtf

Path C:\Users\Admin\AppData\Roaming\Spyware Terminator\LanguageAct\sysguard2.rtf
Size 578B
SHA256 74d6ce83e8551f0d0ad7f04717cfea4b215952096face33ef051cd845bdb2379
MD5 6dda518404969616471c07b4fbe34cb7
SHA1 b35e37bc34e5d49f22873835cfbd2998678a1c1f
SHA512 3e4b6253399f7227205e00d487400add17d9bdba043c9ef9c56891dc53e71e744372fb42693ce254bdc7c054d736c104909c18d38f4f340ae1c943c391da43af
TLSH
T10AF0E143559C23E415C7A29E4B44C3CF0F7BC06CBBA5F192E1A68AB4687252C17C64D4
MD5 SHA1 SHA512 TLSH

Submit Download

sysguard3.rtf

Path C:\Users\Admin\AppData\Roaming\Spyware Terminator\LanguageAct\sysguard3.rtf
Size 578B
SHA256 ceeacb4d6560ba5be1c387ac7984ef206b6a25dabaa3b21fad1b519d07252eb1
MD5 4903d11bf0b9342094c42f5cb16c86ba
SHA1 74646cbe4dae6a27fac304e3c708f33211e06192
SHA512 3816645091a7ee0a47d8812a54ef753a8283268453737cb607152d394719f63bf31616236916fa8fa5edf3a70d17545baa14f1eeffca21d070750a5d50739653
TLSH
T174F0E156A58832A011C762DF064183DF0F6BC1DCA795D4D6EDBACA606C3742C13874F4
MD5 SHA1 SHA512 TLSH

Submit Download

top.gif

Path C:\Users\Admin\AppData\Roaming\Spyware Terminator\LanguageAct\top.gif
Size 11KB
SHA256 d9b464f8956f033293ad3f201d5a2b7bff8d4e1966e39fe730291591b8e45746
MD5 779a235d4f1c6472fd0418a035941da1
SHA1 6c38c0ea08d2b6abbf90e961eac6ec443c2cd460
SHA512 ab4a2aaf8a7c8d1eb4bc797177b6ded02395bae6bf5c62cc4a612e427ddc914513d5a3e23ba18d227f554e4944ce04f9d865b802faed99cce086ce9df220cd85
SSDEEP 192:H7OjyfWiNcAkM06FobO2OJFwQNmTVFWbg9XOqtPAf74yPlC08KZwAAy9rhOR3liP:H7O5gFFtpLWVFmrqtYjbPjVRAUh03liP
TLSH
T14742C0B81E3111EAF0949DBD8963B7BA1082F6A752939F1D11CC4ABAC1D8A70190E83D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

util01.rtf

Path C:\Users\Admin\AppData\Roaming\Spyware Terminator\LanguageAct\util01.rtf
Size 297B
SHA256 aa1bb839b1a7b11e5c671f1f20f44bb37b92c8a99146b42381db910bc93f79f4
MD5 49f8b4e4af3b89986277b4cf5a45bdf0
SHA1 10715c4cfeb72580269a09284484ebf5c03240ac
SHA512 b772df18e4ff875d339360d0c4d6947ac6f9be5091ffea20599559db3d17403684e39fdb6ce430b612c541bf5feb6549ddeeefc114918e8fd025a2b12533419f
TLSH
T12AE07D1A800E6269004352654A68C2AF4B8B01AA7663F02290E60EA0F93353D2058490
MD5 SHA1 SHA512 TLSH

Submit Download

util02.rtf

Path C:\Users\Admin\AppData\Roaming\Spyware Terminator\LanguageAct\util02.rtf
Size 454B
SHA256 5cdf6bc7de0087963500ae8c8aefcd8190875bcf12d50c5c4cd10d47fd9fa78a
MD5 88b5fbb44de76abd91bbfab2456038f5
SHA1 550da1536958ad99587164ed10e24b84100fb15e
SHA512 36bbd565bebfe3822381ecd345b5232083a8205669746aedb01aeb5f46d43c7ed4c3eb340935f06d26b59de3240e526e4ef174ae588debab0335bd1e5110d6d6
TLSH
T101F02E57C909237A04434355779CC17409AD10F57BA2B415A4DF4899B65151533B78A4
MD5 SHA1 SHA512 TLSH

Submit Download

util03.rtf

Path C:\Users\Admin\AppData\Roaming\Spyware Terminator\LanguageAct\util03.rtf
Size 510B
SHA256 068b804a861eb1001df96789bfd01bfa36a2086cd4dd3a834f0fb4ac574acc60
MD5 fa1b33547308a0a2cb6e518632cd56bb
SHA1 7f460f6768925765de38284ff5322284f55d90d3
SHA512 2666d302ceb8d882ddc4fb50f867e4c943b7f50b64d52bcff177f71d59e09dcdd67fa822c526c411f0047e6367813ca99520f43c71921a0ce3cf072c2a15e13d
TLSH
T198F00E13584C13F6014A02AD4BCC53D9C3AB01BE7FF7E49170A84CB97622A7630E80F8
MD5 SHA1 SHA512 TLSH

Submit Download

util04.rtf

Path C:\Users\Admin\AppData\Roaming\Spyware Terminator\LanguageAct\util04.rtf
Size 370B
SHA256 0a1bed7444bbaeed3c1a51eacd3ffcece2c95e02bd35c613107268ce8503bfe9
MD5 ea210451a8cca7cd1c6939f6844cc085
SHA1 85f09542ee2eb7214050b783fbbccff848c8fc99
SHA512 237ecd5c09e84e8bdfa4cc915868963d4f38e0d231e87add3b3b7c8496e5375ae43eeb71b34d4a5b87df27ea074f549189a45626be0704c5e1d79b873c9218bd
TLSH
T103E0680A461822A4118752959B8062ED4B5A40FCBB73F491B0AB0E997A6BA9531A00E0
MD5 SHA1 SHA512 TLSH

Submit Download

reports.dat

Path C:\Users\Admin\AppData\Roaming\Spyware Terminator\Reports\reports.dat
Size 91B
SHA256 da0ada48530fbcd359e38243f9c4c43e51fdb65c9effccc9f887c148f1337e7f
MD5 609d7120fa18581c41b79f2dfa88f2d0
SHA1 0343d72679f83740c605024de4d6325beee47436
SHA512 6653057dfedabce4c1f504127543a0b78d33105f263133f77249f9ffbb3915cbc6a70ec6096ae3d2c2ff37612aa86f8b538617139aff8a3f97303e9f0f737a39
TLSH
T1F2B012645C35DCD9452001C335704408118021D0C9D4048571B2366135E8323C99C543
MD5 SHA1 SHA512 TLSH

Submit Download

scan_0001.dat

Path C:\Users\Admin\AppData\Roaming\Spyware Terminator\Reports\scan_0001.dat
Size 8KB
SHA256 483f8fbc5950deda73a3df501ab4180a4889e3e9c7308953de28659393463cbd
MD5 80585e912dcc857dc40f52b7e8897f9c
SHA1 92a90b1b1c4037281c29e251284b873258d05ba4
SHA512 fd4204ab2a49965fbae3b76d59595455dd23b5c14edb55b20d77af701e7bbb27fdb79f9857c3ea18e424a9d5127be009e6b48f2127e088d099050e123c1aab59
SSDEEP 192:vHZXL4M9I3rNLYBX3U0421ebf14fiYG8nlkJS810R9UVhU6d8kcuqD:v5bZRj1K1YGYw0R9URd82qD
TLSH
T1D3129E447C424BD6B639D1A64041712EBF82E817ABEDF50F40AF64336672E31211B5CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

scanConfig.xml

Path C:\Users\Admin\AppData\Roaming\Spyware Terminator\scanConfig.xml
Size 1KB
SHA256 c5170862e5fa3815d7991716b643b9a40052f69e0b11ded6c3d19316a03c69ce
MD5 64be3a7e6ac8c73156ab9222220b1b6b
SHA1 cd58605875aba14fbb87b51841b51bade0b68311
SHA512 4a3a9ec9702183cf5f9491b7119b73d182344aa17cc1648c5504cbfa688560bedd117756839b37d010c0fddd48eea2cbd5d048ffd1b98326b339b23360bc9714
TLSH
T119213112DBB19B59B7798208AF138993E56FD2C906242849345C6B377AD3ACF0DE7078
MD5 SHA1 SHA512 TLSH

Submit Download

sp_rsdrv2.sys

Path C:\Windows\SysWOW64\drivers\sp_rsdrv2.sys
Size 138KB
SHA256 e1361cbbb2fc75c2698c695cf80ddd09c24f336c202718bc64987722f491eea2
MD5 ccd6e6c387e3efa3ba5fe0e7883821c1
SHA1 69240cce55f60cf43cd320f7f5db90b23fe0194f
SHA512 ea38b8ecba7c312c1b74e15d107b75347f104ffe4405129b75ba0c579461523a063e09f69d48102e5da9eef6372a65fd50b4dc330b2a6a9d04a640e3b0141bf7
SSDEEP 768:acwmc0L/inkIOJb7La90wZAVAaHur08ZiFY1b4x1h:E0LOkIOJbP7jA/iu1bCT
TLSH
T1F8D3E721B091D4B2F66720B38D6AE212D27F74204F1BE2C777951B9F1D642D0BA392E3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/640-7-0x0000000000400000-0x000000000051E000-memory.dmp

Download

memory/640-14-0x0000000000400000-0x000000000051E000-memory.dmp

Download

memory/640-115-0x0000000000400000-0x000000000051E000-memory.dmp

Download

memory/640-8-0x0000000000400000-0x000000000051E000-memory.dmp

Download

memory/640-17-0x0000000000400000-0x000000000051E000-memory.dmp

Download

memory/640-16-0x0000000000400000-0x000000000051E000-memory.dmp

Download

memory/640-110-0x0000000000400000-0x000000000051E000-memory.dmp

Download

memory/1492-102-0x0000000000400000-0x0000000000CE3000-memory.dmp

Download

memory/1492-101-0x0000000000400000-0x0000000000CE3000-memory.dmp

Download

memory/1492-72-0x0000000000400000-0x0000000000CE3000-memory.dmp

Download

memory/3628-628-0x0000000000400000-0x0000000000CE3000-memory.dmp

Download

memory/3628-611-0x0000000000400000-0x0000000000CE3000-memory.dmp

Download

memory/3628-606-0x0000000000400000-0x0000000000CE3000-memory.dmp

Download

memory/3912-15-0x0000000000400000-0x0000000000418000-memory.dmp

Download

memory/3912-0-0x0000000000400000-0x0000000000418000-memory.dmp

Download

memory/3912-2-0x0000000000410000-0x0000000000411000-memory.dmp

Download

memory/3912-117-0x0000000000400000-0x0000000000418000-memory.dmp

Download

memory/4076-100-0x0000000000400000-0x00000000004A2000-memory.dmp

Download

memory/4076-99-0x0000000000400000-0x00000000004A2000-memory.dmp

Download

memory/4076-98-0x0000000000400000-0x00000000004A2000-memory.dmp

Download

memory/4076-111-0x0000000000400000-0x00000000004A2000-memory.dmp

Download

memory/4140-601-0x0000000000400000-0x0000000000CE3000-memory.dmp

Download