bb663415cf556364227851305dd427a42bb499cc7ad3626b9cb4aa7927ffdf6c

Analysis

user interaction
yes
max time kernel
148s
max time network
153s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260629-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
01/07/2026, 20:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
polarbytes-auto-clicker-2-installer.exe
Size 2.0MB
Sample260701-y2vbjaes5r
SHA256 bb663415cf556364227851305dd427a42bb499cc7ad3626b9cb4aa7927ffdf6c
MD5 e1a14a79e7a30fb0d68ea88f03ba320a
SHA1 799c29978497c88d30c07e37e57fde9642b5a210
SHA512 d0d809c313f51552984e15d810ed061a46f0fb1835eb1753c879850a28dda4354b322b8b4ae53da966e08bf022caf9dde0540cb589a18e69e2e0a497d6e01a55
SSDEEP 49152:6uI5h55c1DYJjNU3id/fPilfX/Dr8iuqjjb:65/55cpGNUw/fPi5rQSb
TLSH
T1DAA5D03FB28B753EE06E5A367A72E210583B7A6165134C1696F4C88CCF251B01E3E797
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery installer

Malware Config

Signatures

Executes dropped EXE 1 IoCs

pid	Process
1740	polarbytes-auto-clicker-2-installer.tmp

Checks for any installed AV software in registry 1 TTPs 9 IoCs

Security Software Discovery

T1518.001

description	ioc	Process
Key opened	\REGISTRY\USER\S-1-5-21-1991999443-3181470666-3272020885-1000\SOFTWARE\AVG\AV\Dir	polarbytes-auto-clicker-2-installer.tmp
Key opened	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\AVAST Software\Avast	polarbytes-auto-clicker-2-installer.tmp
Key opened	\REGISTRY\USER\S-1-5-21-1991999443-3181470666-3272020885-1000\SOFTWARE\AVAST Software\Avast	polarbytes-auto-clicker-2-installer.tmp
Key opened	\REGISTRY\MACHINE\SOFTWARE\Avast Software\Avast	polarbytes-auto-clicker-2-installer.tmp
Key opened	\REGISTRY\USER\S-1-5-21-1991999443-3181470666-3272020885-1000\SOFTWARE\Avast Software\Avast	polarbytes-auto-clicker-2-installer.tmp
Key opened	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\AVG\AV\Dir	polarbytes-auto-clicker-2-installer.tmp
Key opened	\REGISTRY\MACHINE\SOFTWARE\AVG\AV\Dir	polarbytes-auto-clicker-2-installer.tmp
Key opened	\REGISTRY\MACHINE\SOFTWARE\AVAST Software\Avast	polarbytes-auto-clicker-2-installer.tmp
Key opened	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avast Software\Avast	polarbytes-auto-clicker-2-installer.tmp

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
behavioral2/files/0x000d00000001c4cc-234.dat	autoit_exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Program crash 2 IoCs

pid	pid_target	Process	procid_target
5832	1740	WerFault.exe	88
5864	1740	WerFault.exe	88

System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	polarbytes-auto-clicker-2-installer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	polarbytes-auto-clicker-2-installer.tmp

Inno Setup is an open-source installation builder for Windows applications. 3 IoCs

Inno Setup installer

installer

resource	yara_rule
behavioral2/memory/6068-0-0x00000000006D0000-0x00000000007AC000-memory.dmp	innosetup
behavioral2/memory/6068-12-0x00000000006D0000-0x00000000007AC000-memory.dmp	innosetup
behavioral2/memory/6068-225-0x00000000006D0000-0x00000000007AC000-memory.dmp	innosetup

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	polarbytes-auto-clicker-2-installer.tmp
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\	polarbytes-auto-clicker-2-installer.tmp

Suspicious behavior: EnumeratesProcesses 16 IoCs

pid	Process
1740	polarbytes-auto-clicker-2-installer.tmp
1740	polarbytes-auto-clicker-2-installer.tmp
1740	polarbytes-auto-clicker-2-installer.tmp
1740	polarbytes-auto-clicker-2-installer.tmp
1740	polarbytes-auto-clicker-2-installer.tmp
1740	polarbytes-auto-clicker-2-installer.tmp
1740	polarbytes-auto-clicker-2-installer.tmp
1740	polarbytes-auto-clicker-2-installer.tmp
1740	polarbytes-auto-clicker-2-installer.tmp
1740	polarbytes-auto-clicker-2-installer.tmp
1740	polarbytes-auto-clicker-2-installer.tmp
1740	polarbytes-auto-clicker-2-installer.tmp
1740	polarbytes-auto-clicker-2-installer.tmp
1740	polarbytes-auto-clicker-2-installer.tmp
1740	polarbytes-auto-clicker-2-installer.tmp
1740	polarbytes-auto-clicker-2-installer.tmp

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1740	polarbytes-auto-clicker-2-installer.tmp

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 6068 wrote to memory of 1740	6068	polarbytes-auto-clicker-2-installer.exe	88

C:\Users\Admin\AppData\Local\Temp\polarbytes-auto-clicker-2-installer.exe
"C:\Users\Admin\AppData\Local\Temp\polarbytes-auto-clicker-2-installer.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:6068
- C:\Users\Admin\AppData\Local\Temp\is-65OOE28LMW.tmp\polarbytes-auto-clicker-2-installer.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-65OOE28LMW.tmp\polarbytes-auto-clicker-2-installer.tmp" /SL5="$502DC,847735,840192,C:\Users\Admin\AppData\Local\Temp\polarbytes-auto-clicker-2-installer.exe"
  2⤵
  - Executes dropped EXE
  - Checks for any installed AV software in registry
  - System Location Discovery: System Language Discovery
  - Checks processor information in registry
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of FindShellTrayWindow
  PID:1740
- - C:\Users\Admin\AppData\Local\Temp\is-Z66QYS65RQ.tmp\component0_extract\OperaGXSetup.exe
    "C:\Users\Admin\AppData\Local\Temp\is-Z66QYS65RQ.tmp\component0_extract\OperaGXSetup.exe" --silent --allusers=0 --otd=utm.medium:apb,utm.source:ais,utm.campaign:operagx,utm.id:BjYV7wS28vdip7DL3ditz7zYE0fKRUxxowgQyISAkgymOlZHSgEAMHqM1tdGk5RqeVwjDNC7X6vPoSq
    3⤵
    PID:1128
  - - C:\Users\Admin\AppData\Local\Temp\7zS864DF359\setup.exe
      C:\Users\Admin\AppData\Local\Temp\7zS864DF359\setup.exe --silent --allusers=0 --otd=utm.medium:apb,utm.source:ais,utm.campaign:operagx,utm.id:BjYV7wS28vdip7DL3ditz7zYE0fKRUxxowgQyISAkgymOlZHSgEAMHqM1tdGk5RqeVwjDNC7X6vPoSq --server-tracking-blob=ZTlkNzM2OWE0ZmQ4NmRjMzMxY2ZkYzc3NDNiOGNjOWVlYzY4NTQ1ZWE3ZGI3MGQ3M2VjZjg1N2MzNmRmNjI5ZDp7ImNvdW50cnkiOiJVUyIsImVkaXRpb24iOiJzdGQtMiIsImluc3RhbGxlcl9uYW1lIjoiT3BlcmFHWFNldHVwLmV4ZSIsInByb2R1Y3QiOiJvcGVyYV9neCIsInF1ZXJ5IjoiL29wZXJhX2d4L3N0YWJsZS9lZGl0aW9uL3N0ZC0yIiwidGltZXN0YW1wIjoiMTc1Nzg0NzYzNS4zNjE1IiwidXNlcmFnZW50IjoicHl0aG9uLXJlcXVlc3RzLzIuMzIuMyIsInV0bSI6e30sInV1aWQiOiIyYjBlYWY3NC00NGQ4LTQ2NjktYWNiZC1lYzUzNmZmMzhhYzYifQ==
      4⤵
      PID:3188
    - - C:\Users\Admin\AppData\Local\Temp\7zS864DF359\setup.exe
        
        C:\Users\Admin\AppData\Local\Temp\7zS864DF359\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=121.0.5600.81 --initial-client-data=0x29c,0x2a0,0x2a4,0x278,0x2a8,0x7ffc6eb78ef0,0x7ffc6eb78efc,0x7ffc6eb78f08
        5⤵
        
        PID:260
    - - C:\Users\Admin\AppData\Local\Temp\.opera\d6a21155-4018-4404-b8a7-c8ed759e29ed Opera GX Installer Temp\setup.exe
        
        "C:\Users\Admin\AppData\Local\Temp\.opera\d6a21155-4018-4404-b8a7-c8ed759e29ed Opera GX Installer Temp\setup.exe" --version
        5⤵
        
        PID:2572
    - - C:\Users\Admin\AppData\Local\Temp\7zS864DF359\setup.exe
        
        "C:\Users\Admin\AppData\Local\Temp\7zS864DF359\setup.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --initial-pid=3188 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\d6a21155-4018-4404-b8a7-c8ed759e29ed Opera GX Installer Temp\opera_package_20260701211804" --session-guid=79276670-42a4-4758-9dbb-66ce1fc1ec19 --server-tracking-blob="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 " --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=8C08000000000000
        5⤵
        
        PID:5076
      - C:\Users\Admin\AppData\Local\Temp\7zS864DF359\setup.exe
        
        C:\Users\Admin\AppData\Local\Temp\7zS864DF359\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=121.0.5600.81 --initial-client-data=0x2a8,0x2ac,0x2b0,0x278,0x2b4,0x7ffc6d098ef0,0x7ffc6d098efc,0x7ffc6d098f08
        6⤵
        
        PID:5188
      - C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.110\installer.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.110\installer.exe" --backend --initial-pid=3188 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\d6a21155-4018-4404-b8a7-c8ed759e29ed Opera GX Installer Temp\opera_package_202607012118041" --session-guid=79276670-42a4-4758-9dbb-66ce1fc1ec19 --server-tracking-blob="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 " --silent --desktopshortcut=1 --install-subfolder=132.0.5905.110
        6⤵
        
        PID:20096
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.110\installer.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.110\installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.110 --initial-client-data=0x2a0,0x2a4,0x2a8,0x27c,0x2ac,0x7ff6cedf6e08,0x7ff6cedf6e14,0x7ff6cedf6e20
        7⤵
        
        PID:20116
        
        C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --start-maximized
        7⤵
        
        PID:8056
    - - C:\Users\Admin\AppData\Local\Temp\.opera\d6a21155-4018-4404-b8a7-c8ed759e29ed Opera GX Installer Temp\opera_package_202607012118041\assistant\Opera_GX_assistant_132.0.5905.28_Setup.exe_sfx.exe
        
        "C:\Users\Admin\AppData\Local\Temp\.opera\d6a21155-4018-4404-b8a7-c8ed759e29ed Opera GX Installer Temp\opera_package_202607012118041\assistant\Opera_GX_assistant_132.0.5905.28_Setup.exe_sfx.exe"
        5⤵
        
        PID:5512
    - - C:\Users\Admin\AppData\Local\Temp\.opera\d6a21155-4018-4404-b8a7-c8ed759e29ed Opera GX Installer Temp\opera_package_202607012118041\assistant\assistant_installer.exe
        
        "C:\Users\Admin\AppData\Local\Temp\.opera\d6a21155-4018-4404-b8a7-c8ed759e29ed Opera GX Installer Temp\opera_package_202607012118041\assistant\assistant_installer.exe" --version
        5⤵
        
        PID:4156
      - C:\Users\Admin\AppData\Local\Temp\.opera\d6a21155-4018-4404-b8a7-c8ed759e29ed Opera GX Installer Temp\opera_package_202607012118041\assistant\assistant_installer.exe
        
        "C:\Users\Admin\AppData\Local\Temp\.opera\d6a21155-4018-4404-b8a7-c8ed759e29ed Opera GX Installer Temp\opera_package_202607012118041\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.28 --initial-client-data=0x24c,0x250,0x254,0xec,0x258,0x1134b80,0x1134b8c,0x1134b98
        6⤵
        
        PID:5628
- - C:\Users\Admin\AppData\Local\Temp\is-Z66QYS65RQ.tmp\component1_extract\cookie_mmm_irs_ppi_008_585.exe
    "C:\Users\Admin\AppData\Local\Temp\is-Z66QYS65RQ.tmp\component1_extract\cookie_mmm_irs_ppi_008_585.exe" /silent /ws /psh:agiSfNdEgb2qHcU54rjOp8P6Y4facOmcLTyArrQUjVebfq4xSCuccCfSYOi1wvsAnqJCF5rUFyIGPb2nu6 /cookie:mmm_irs_ppi_008_585_a
    3⤵
    PID:2100
  - - C:\Windows\Temp\asw-b1dc0ab6-f70a-46c8-bd97-07bc70c1f220\common\icarus.exe
      C:\Windows\Temp\asw-b1dc0ab6-f70a-46c8-bd97-07bc70c1f220\common\icarus.exe /icarus-info-path:C:\Windows\Temp\asw-b1dc0ab6-f70a-46c8-bd97-07bc70c1f220\icarus-info.xml /install /silent /ws /psh:agiSfNdEgb2qHcU54rjOp8P6Y4facOmcLTyArrQUjVebfq4xSCuccCfSYOi1wvsAnqJCF5rUFyIGPb2nu6 /cookie:mmm_irs_ppi_008_585_a
      4⤵
      PID:5900
    - - C:\Windows\Temp\asw-b1dc0ab6-f70a-46c8-bd97-07bc70c1f220\avast-av-vps\icarus.exe
        
        C:\Windows\Temp\asw-b1dc0ab6-f70a-46c8-bd97-07bc70c1f220\avast-av-vps\icarus.exe /silent /ws /psh:agiSfNdEgb2qHcU54rjOp8P6Y4facOmcLTyArrQUjVebfq4xSCuccCfSYOi1wvsAnqJCF5rUFyIGPb2nu6 /cookie:mmm_irs_ppi_008_585_a /er_master:master_ep_98bc1509-31f9-4020-85c8-c540e8294d24 /er_slave:avast-av-vps_slave_ep_03662044-2fd1-4a7b-9f04-bc08629f3ead /slave:avast-av-vps
        5⤵
        
        PID:2904
    - - C:\Windows\Temp\asw-b1dc0ab6-f70a-46c8-bd97-07bc70c1f220\avast-suite\icarus.exe
        
        C:\Windows\Temp\asw-b1dc0ab6-f70a-46c8-bd97-07bc70c1f220\avast-suite\icarus.exe /silent /ws /psh:agiSfNdEgb2qHcU54rjOp8P6Y4facOmcLTyArrQUjVebfq4xSCuccCfSYOi1wvsAnqJCF5rUFyIGPb2nu6 /cookie:mmm_irs_ppi_008_585_a /er_master:master_ep_98bc1509-31f9-4020-85c8-c540e8294d24 /er_slave:avast-suite_slave_ep_62023dcf-1d7b-45cb-a11f-80f8d2393c63 /slave:avast-suite
        5⤵
        
        PID:3220
- - C:\Windows\SysWOW64\explorer.exe
    "C:\Windows\System32\explorer.exe" /select,"C:\Users\Admin\Downloads\polarbytes-auto-clicker-2-installer.exe"
    3⤵
    PID:3964
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 1740 -s 948
    3⤵
    - Program crash
    PID:5832
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 1740 -s 948
    3⤵
    - Program crash
    PID:5864

C:\Windows\explorer.exe
C:\Windows\explorer.exe /factory,{75dff2b7-6936-4c06-a8bb-676a7b00b24b} -Embedding
1⤵
PID:1880
- C:\Users\Admin\Downloads\polarbytes-auto-clicker-2-installer.exe
  "C:\Users\Admin\Downloads\polarbytes-auto-clicker-2-installer.exe"
  2⤵
  PID:5024
- C:\Users\Admin\Downloads\polarbytes-auto-clicker-2-installer.exe
  "C:\Users\Admin\Downloads\polarbytes-auto-clicker-2-installer.exe"
  2⤵
  PID:1732

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:2420

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 1740 -ip 1740
1⤵
PID:3404

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 576 -p 1740 -ip 1740
1⤵
PID:5184

C:\Windows\system32\sihost.exe
sihost.exe
1⤵
PID:1560
- C:\Windows\explorer.exe
  explorer.exe /LOADSAVEDWINDOWS
  2⤵
  PID:364

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:5016

C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
"C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
1⤵
PID:4636

C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
"C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
1⤵
PID:2420

C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
"C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe"
1⤵
PID:7896
- C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
  2⤵
  PID:7932

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:4548

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

Software Discovery

T1518

Security Software Discovery

T1518.001

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

AavmRpch.dll

Path C:\Program Files\Avast Software\Suite\AavmRpch.dll
Size 744KB
SHA256 b4919612f69d72940396b073254568312a7a8f1d8019f6bbb88daa116ff2b593
MD5 65f87da32faf14a4b708c3f9dd8a8748
SHA1 763a2b630d1c2af2d03f8dd106838f6c8c3ed877
SHA512 c1a7cfcfd0b7b95cd64e79dcf1ea9d0ac28fcc637f2034720c03280f55fc54c2a1920b1c3a1cfad739c5b4458a85b5243e1ced6c28548fae72255d644d2c574c
SSDEEP 12288:OwxusiQhytX7S7NFph0lhSMXlip/WSFvw53+AHyCbGD9ylsQV:O9siztLgXh0lhSMXl+/WSFvw53+AHyCz
TLSH
T167F46B2EBE2D04A9C1EFC17A85974519FFB2B861434693CBA6D4CE250F535E42F3AB40
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AvBugReport.exe

Path C:\Program Files\Avast Software\Suite\AvBugReport.exe
Size 2.2MB
SHA256 802a62bda934b4d54a891d3fb8f6d31787ca31c209762f4712bc45a6ec449a81
MD5 ad47160ac16d728c5958a0a92aa336e0
SHA1 4291159aea3d59d9b2c83e6e0d8bf84b493667a8
SHA512 a5a16efd47b1a3efcaf9685ca23b5e81c8b24ddb29eb29ffeb0b4b3bd1129cf23b491672aa7a500b7c48d2ca30433626e71e88718298b8b29b940dd9250c8825
SSDEEP 49152:a2dWHml4xW8LISqDgOYVkl99ifai5kN171/y:CIDGkjU
TLSH
T17DB54B1F65AC11E8C0FFD0698A0AE91BFAF1345A433166DB1AF18D561F13AF1AA3D701
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AvDump.exe

Path C:\Program Files\Avast Software\Suite\AvDump.exe
Size 2.2MB
SHA256 4c1c904e904ef35f5154fab1fe2e2db6f126862b2171b3ef5685d97571d753ea
MD5 1c7bb8044d152e6b2ccf5e957effb20f
SHA1 ea509469d7d29504e9fdbc94daf516d069804796
SHA512 0feaabee6d7f94283911b898638f2bea119fa28e71c3763ebbdf496eb8a286019b2750cc061f5dbadffd05f7842ccc560c9c5dc19177476c6dc64fdd599ba2c7
SSDEEP 49152:bflK7tLG283ydO5PHO6PF/YshS2rKAeBvBZP:hYOlE
TLSH
T1BBB56C1F65AC10E8C0FED0798A47A91BFAB1345A4335A6DB26F18D551F23EF06A3E701
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Boost.txt

Path C:\Program Files\Avast Software\Suite\Licenses\Boost.txt
Size 1KB
SHA256 beb8e42e9d6b4284e03304d05a81a0755200a965fc8d0a5e0aea1e84cf805d6e
MD5 b51058fead1aa71840b79527f5bffd3d
SHA1 bc3c4d41d4cc7753bea8e7a77fdb7cd384adbb59
SHA512 f1a8d21ccbb6436d289ecfae65b9019278e40552a2383aaf6c1dfed98affe6e7bbf364d67597a131642b62446a0c40495e66a7efca7e6dff72727c6fd3776407
TLSH
T12D21B62C7361072108E017509998ADE7F51F627BF3962B88BC3CE119533B81CD3FA550
MD5 SHA1 SHA512 TLSH

Submit Download

aswPEAntivirus.exe

Path C:\Program Files\Avast Software\Suite\RescueDisk\aswPEAntivirus.exe
Size 2.8MB
SHA256 ff1417228624ed39dc3ecdf37b16926cf0850ac1a3d69808e394ee0d13712eee
MD5 4f13fb0f33fa93ba5862071d1d2ed488
SHA1 1a541124acb69d499cb255f73836c1c7d09e73a3
SHA512 89547fc439b75b0cb2facc16745c6a75b2b28ecd4c5006a00a556a7643c9014eb400e2b5362313f411ee29f01bc035b0580f9f9beb30e6b1065a1daae9dd5cb6
SSDEEP 49152:5b3fQAXvyRq2sr+8m3kYpM0sB2zwSYxh6Kzh81ROhPQWYHY5SbQ2B3jDjs5hjZgw:5/jwjlYjD
TLSH
T149D55D2F66AC11E4C4FED0BDC606991BFAB0385A033566DB5AF19D461F27AF0693E700
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TuneupSvc.exe

Path C:\Program Files\Avast Software\Suite\TuneupSvc.exe
Size 2.2MB
SHA256 2fcb3fa6f2cb67ca5b6559859ae7b9461b8bb09c752d4814773b153911ad10ad
MD5 75af332ab1c9b2a63ac5c22cacb3bd29
SHA1 f53c481b55428bfc8b13c309ccc22e15b9db0012
SHA512 865c98b9b440abe1d2857fbeed1bd49b7dc53c6beac58d732dc99404b35abd4a9c2a08cdac44556025a83042c0ea1dcb0201e07962467343145c5ee3d0f4b1c2
SSDEEP 49152:a96hv2nFnfDyX/2YkhpH7MpvKkgY1FtcnVqo8k5zmS4:iFSee48n
TLSH
T14CB56D1F76A951F9C4FED0A9C606981BEAB1348A033166DB17F1CD9A1F23AF0593E740
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

afwRpc.dll

Path C:\Program Files\Avast Software\Suite\afwRpc.dll
Size 407KB
SHA256 409bac504f7a34b52e3fe3252080fa502ccefeb7bd535f9c941328f43ec4674b
MD5 c408a20938406a2df4b25ac3e0d7543e
SHA1 a4d7d2371e222d103bc91654bc4ffee5ae76c20c
SHA512 7b048269dcf4c1997d80cd078e08a4cdbd68e6405b3730ff897f7b2d781ec7794fbffc3ce6c1651c839865ab1453eae1649302961220748f03896bacc671ba09
SSDEEP 6144:DXFMqfa3kkJPYNJdUYoph0lhSMXlBXBWnJ7onxsrgLncIu52jou:5bqJP4UYoph0lhSMXliJM6gLnc9u
TLSH
T1A9949D1BFB9490A5E16FC07848774A0AFA72749D434293DB27E8CA161F676E13E3E701
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

autoreactivator.exe

Path C:\Program Files\Avast Software\Suite\autoreactivator.exe
Size 2.2MB
SHA256 23507bf1f7742ae8d15de9f76841d7bb0874f91bf945cd8a0009634f3614416c
MD5 f3f3a8e57690d6921d97add05a216fb1
SHA1 406063e1e3d74b9a7a62cf9dcd03575a0ceb2346
SHA512 49bb341e15d47bfab54bb77652a0f4909730aff0f47b07000ecf0200880230e6c63bc1b53defa76b98b121703358b0ad4a33c95bd466630b59fc2cc0e5153e80
SSDEEP 24576:QDHW8dI41D1vA4HP1x5p8scmYjUk9Lq/pnZVABnteGRlMtggGLb5KoPT9SEb3cee:QjWOB/IgPJlRYAw2ZdWlhq+wcce0ig5
TLSH
T1B5B54A1F69AC10F8C1FED0798647A81FEEB1349A433596DB6AE08D551B23EF05A3E701
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

driver_bridge.dll

Path C:\Program Files\Avast Software\Suite\driver_bridge.dll
Size 917KB
SHA256 2e3c203fe9f5b9929c52d3727d6cb0e8f44cf3416e107800010e3c7d99eac2ec
MD5 5a5b87644d53a5aa5c6b2e97bfb03e43
SHA1 71f8e555a9b4c459fbae2810e30bdb3abd8010b2
SHA512 3ff03513c1f2490ec585f4c696b6f4edb3a9b77db074ad9e5c994cc255cd49637acb16a119e78eef22facc007859b383a3fd0806bc2f861049687f47ba7ddb8c
SSDEEP 24576:DJt1wwHCIBxeOdLfh0lhSMXl+L3Ycy4dHQ:9bwwoqeuTw
TLSH
T198157C2FBA1C01E5C6BED0794597891AEA727451036597C7B2E0CE1A3F2BBF41E3A301
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gf2hlp.exe

Path C:\Program Files\Avast Software\Suite\gf2hlp.exe
Size 2.2MB
SHA256 6fb937da01f80e60bdf2373b6b97216835f30368fded19ba088f9bdf57094388
MD5 dc69e234fc849eba3c26f00b8ecaae25
SHA1 195590b8453e4de94068cf5e80bebd98fff1ffab
SHA512 ab5a3867817e01d719a350a3174d427281417e0a2f1ac62c13406952532fd6cbe4489107086c03dd0b3816504662878a171021de22d421f56c4e6f760fcbd82f
SSDEEP 49152:kH6YpZejb1bxLp5DCIZ0IB2QwIcVg7I6hsVt:kHkZdcD
TLSH
T1E7B54B5A61AC10E9C4FED0A9CA56D81BFEB1341A433197DB17E0DE561B63EF0A93E700
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

i-m-087.svg

Path C:\Program Files\Avast Software\Suite\gui_resources\default_av\assets\illustrations\dark\i-m-087.svg
Size 36KB
SHA256 ee74424515d56fa7b30ee8e5ac717f29cf41dca2e2ceaf418717096efd9c591a
MD5 841cff70ddd87b6e6ec4d896f86169e3
SHA1 77526b1c58b9207c2a54478d6bc52b0fda9e334f
SHA512 0fc393d6a9134bb0a764995371a2d64c48ae08b69363b09f8a8b1b5b5f9c578945f6201e7806b2c4d8c83b0783b1831c2ae73e9588dee6119a331493156cf44b
SSDEEP 768:ZGrKZNd6xI/9dPohrdnBM2nxTsyH/XgAqYMED5:BDgsQg0
TLSH
T1A7F2A4DD2BB05CE98DC887D7FF0161BD3017957799958A0CC2284F6C2991D2EED3AAC2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

i-s-713.svg

Path C:\Program Files\Avast Software\Suite\gui_resources\default_av\assets\illustrations\dark\i-s-713.svg
Size 23KB
SHA256 31877ddae254b0b2a30ec2537a4223f425f0156de2117bc57d1ea53cb113796a
MD5 3bf3590afb6097d5e1c8e051862b4332
SHA1 940096741a606ad3ce9206e862f73c52ce19e2c5
SHA512 ae26972459e3c5533ad71d12f09967a7607c9ca98ba3c63d0f5fc76ed7adf7ce5364e98322b404ef99df1ed3aa6901bc12b8dd7ab2b0b92e97027b3c27e1bcb4
SSDEEP 384:daK9k0CAe8ab3R5BvXhFXYQO7WBM/1MfF1wV8jso5ZDs4xT9YLupPMSASvF:1CADQO7eM4vAo5ZDBxT9jPMSASt
TLSH
T137B2C8EDB7685CB6F896D2EDEB029035701941F76AC14370C2A9AF2E34218D95D1FEC2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

i-s-715.svg.ipending.4364d1bf

Path C:\Program Files\Avast Software\Suite\gui_resources\default_av\assets\illustrations\dark\i-s-715.svg.ipending.4364d1bf
Size 22KB
SHA256 d42b5020579ab72e953791f3142f340d29e6f95aa4574189c44d1347d79a22dd
MD5 d0eb120cd11d17bbbfa8a9138f5685b7
SHA1 4f5ff2c79251a6b563d97f4741acc39279c6f766
SHA512 69892d50521b0f3a9f5852985a0bc93c9cc3bfa59ea11b1ba7630727d1dd9997d292f1dc8429b5222fbde4d268265700b65b11279cdd06a592b92e89b401a274
SSDEEP 384:yquCiHimeYAyqdIvX76w5niWtDoCNDjZPdA/3a7nB8OWzTozHdo7baw+xwV3GQU3:ylCkOdI5nnXZPqa7B8QzHqJVdUhLam
TLSH
T118A2D9534A1FB6965D243EBB83DA3C4EA508F2C28E8393CCE1E71DE8D0DE759490426D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

i-s-727.svg

Path C:\Program Files\Avast Software\Suite\gui_resources\default_av\assets\illustrations\dark\i-s-727.svg
Size 28KB
SHA256 a262ce0c876fd0538049684858942e772a3f899810d202c13765b5535b7fa027
MD5 c3fddf180b55c02831efd39707d27cb7
SHA1 0b9e298f9556836db472fe987c2620d1dc4b7efd
SHA512 6df4d6ea0c3f650b61d7e528fe9b5bbff1d1b10662bdfb17fca39861cd9536b8b59a5f51aaf9ed46d93df0e84bcc1fe6d7690b5db1ae9e03dd4c252e13602367
SSDEEP 384:ECsDFMxyRZpUsCVsio5zcVfSHUCdhI49Zfdxa+XpkYffS4oY3cQo9Hnq:ECcFOyRJweU2UOR9FDaWkgffoY3cQoA
TLSH
T1BDD2C853060FB2A54D783FFB879ABC4AB514F1D24E939789F4D62CE8E0ADB18064136D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

i-s-715.svg.ipending.4364d1bf

Path C:\Program Files\Avast Software\Suite\gui_resources\default_av\assets\illustrations\light\i-s-715.svg.ipending.4364d1bf
Size 22KB
SHA256 34d703d5589d20ea30b73122551c7aa16d8571d792121177020aac3d2923a8e1
MD5 23d69b624339729d8798a8ed9ae64223
SHA1 a8994318fe476b77e93455860cafd854db858437
SHA512 692dc7cea82a74870deead332f4e21d4d9f90fe954ab87647660ca81698706b8666f2a7c29a3df1f21005eb0c9b96f8a51fbb06f2d449fccefa78998b2726184
SSDEEP 384:BQ96aKmZHOUzFXZFMVpKiLELw5DCohz4DNLEeliFdb3DuiEqcrs5Uatb8FtWOD:BQ96xmZOU9MVp35DttOiEq2kgCOD
TLSH
T14BA2B963490F76964D643EB786DA3C8DA50CF1C28E9393C8E1EA0DECD09E7594A443BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

locale-ro.json

Path C:\Program Files\Avast Software\Suite\gui_resources\default_av\locale-ro.json
Size 1.1MB
SHA256 25858cae51836b521cb7f51e1d629b1e0562112537eddf980a6bd64279517def
MD5 59f1b858cb4fef5e50dc651d949a50e5
SHA1 c670008b369936ad4dd7b80e834da4931e9c6a89
SHA512 1eef2847eba3c872311da21bde1ed5c3dc5812c2a91fbe2f39813420e5b3be0c1e92dcf58b83e6aa48240e4debf6c006fc86c6cf3092effd4c2234e1d80a7313
SSDEEP 12288:b4FcbZ3t3/bIstwLjmDPROTI02mXVwD0Q:b4FcbZ3t3/bQLjIPRO3XVwD0Q
TLSH
T1DD352A12A0982D7B0FC102E7B61A2687E68D1048B49560DCDBDDC5B8519DECBF27F9CE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hns_tools.dll

Path C:\Program Files\Avast Software\Suite\hns_tools.dll
Size 756KB
SHA256 fa2fb3faa083088e86b8b6417089fe694224281e76506de52ca34a5710ce9454
MD5 5ab524903b91cba062a66947091ff8a8
SHA1 ac81aaef1882ea9e99bbe1e4b02a3b2ff824bb84
SHA512 e4ccd951397056593231230ef9f833c7f2d0816be62f5beede4f9cea2f9a238c40f6099d657f3b445eb50f66ef6bdaaf11b314eb02a2faa1f19ad0caf915d0cb
SSDEEP 12288:61VPaS7gZk4eDIeoCJxXySdph0lhSMXlidfQeL5m7yGRAWH:6HajZaDIeTryS/h0lhSMXlGfN5m7hAWH
TLSH
T170F49D1FBE6D00E5C1AED07A8957890AFBB27455036197CB27E4CE660F67AE42D3E700
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libwaapi.dll

Path C:\Program Files\Avast Software\Suite\libwaapi.dll
Size 1.2MB
SHA256 ca39d593e08cb1fecb5f154bf4ae68fee14cbab15ea9038e34cb06047b87d6c5
MD5 d04368bcaa8ad6601bb566c3dad8fe41
SHA1 97eb384521f986c8c5698a85b03d1902a9cc447e
SHA512 5802be43d77e0824105ead133ee6ff284dd12b4b2f701b833dfc2b92fba36a655ec8e5555d7576b1d9252d3c0194dc8e90c02be2c4468e32f377147a4580da42
SSDEEP 24576:TW8QdYT4s7u3K22T8FetimgMDBHqK/L9tDBf1koTjcfH+uVj:g47GK22IAimgMDBHqYL97Djcf9
TLSH
T148456D1A6FAC81B1D0B6C178C9974546F7B278010B35E7EF12D2A66E1F337D18A39722
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libwaheap.dll

Path C:\Program Files\Avast Software\Suite\libwaheap.dll
Size 102KB
SHA256 137500a80b1f17394e01613bfcc3735776553fc4724781b3431aab797eddaba7
MD5 a201c4a48f268c362fd64c6a7efbab1a
SHA1 521e1977f9468fc35806ad5da9431a576e7b3439
SHA512 f3def15532927049f08d5d2b3695979afe2553daeedf3a4125fd94fc84c426e18237d8d4e042805d5744d26a14eae1f6cf2f7010a8cb1aa12c1425bff8ced97c
SSDEEP 3072:VsEMdY59enGtW/zc7fKJP5M2Ehpnq5FZZCnVK:U4iGtAz0fUVnZonVK
TLSH
T168A35B4777A500BBE566863888A30E16DB72F9521B61CBBF0260425E1F773D15E3AF32
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libwalocal.dll

Path C:\Program Files\Avast Software\Suite\libwalocal.dll
Size 1.9MB
SHA256 15bc5649ea44a5c5eaebb0cb9d632e7fec9ec189d25eb491a8bc508369395058
MD5 97bfbc95d211988f4370d98b51da6828
SHA1 ac8e1714dd8bd2d2bdea41e9c9d662e9ff0d86ae
SHA512 1e0f0bacf9ffa7318a2f963b1583cb1d7dc88c8418002cac8fd88735d94d720e2a820da2aac9aced3301ca68ae3a67da5a7f4f9309d8603d42967fb1d7c37f37
SSDEEP 49152:ULexBCh1q8RWEmen7RNmxd/wxETl9uaSiq7dk:J8hrRlRud/reY
TLSH
T1EA957C166BA801B4D1BBD274CA578A4BF7B278055B34E7DF12E0469E1F23BE1463E321
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libwaresource.dll

Path C:\Program Files\Avast Software\Suite\libwaresource.dll
Size 2.1MB
SHA256 9a22e43cafd2e32e9b3fb51c929ad8921bfc8fca234e00ea52b91a1d88fba928
MD5 01832e77d74e2331df12cf14477b387e
SHA1 4801b9d7b564fdd863a94c70053d86b3bc6b4d04
SHA512 5bfd9e6b14e078633578dd6f5f75c31465747d3fb9012a2d5f6775f143c18b2d3f926b9f9997bb9e302b4fa2d56809a9deef1262721d292988c30cd786eec74c
SSDEEP 49152:IxVEt16zpgiDopnQdhCxgchS9SBbHbLliov+8I5dkJwXrHyo3un+H:xOzpTopjysB/Lwom8I4JaGI
TLSH
T1BBA533FAE6638A15CE3BD2B9D4010EF90BA3BF303E0716211F67A55076A9B930774D64
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libwautils.dll

Path C:\Program Files\Avast Software\Suite\libwautils.dll
Size 2.1MB
SHA256 28ce357b7fb1f6532234c6a0a6f3d381e496bcab1aa00b21c3f588c979e8a221
MD5 cabb18a4e9959589849c22ce9a7aefa8
SHA1 a66cd0ff29118a83b052c575cef69a729050c7d6
SHA512 f23afe2823deb5f3e93f028a9c284badb5482e32bd3bc8f10d81e0c4d5babbd076e26c56a93f644f9c15ee306884ea723a69a334c2c1f07103271da96eab9c8e
SSDEEP 24576:4brfsVKDQPx1CjllqEKQoDA+V4nHl1VKO8+d5HsMqmPYfK9rx9kCBtPZqMbFe2JC:4BlqEKQoItMMqxubFbRvHP22y8YEw
TLSH
T19EA54A1B7EA433B4C2FAD658CB468507F3B234050336A9FB81E645855F2BEF1963E942
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libwavmodapi.dll

Path C:\Program Files\Avast Software\Suite\libwavmodapi.dll
Size 2.1MB
SHA256 455f6aa372cfc5d7091b8a477f3179ae2a654b4a97a8379b73f05c73d8ba0323
MD5 3fda3aa473538bd22052aebec22f4f80
SHA1 db22d29ca2cc6dcc153896d5fc60666b1cfd14d6
SHA512 06c0be42856efc6c2eb3687d451a31197036c3f3aae4714f5f62dffb51331b32f10484598d7de723704200b33829572b660674bf25340c76beb9a4a1d60e7730
SSDEEP 49152:ORO2OwXxSmnoiwTHiSpO8WybJeR5kc17nQ0s/hrSD5FzO:bwzPs/gvzO
TLSH
T1CFA5291C665813F0C2BAE2A8C79B8457E6B13408933695FB8A22D551DF37EF5833BE11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pdfix.exe

Path C:\Program Files\Avast Software\Suite\pdfix.exe
Size 2.2MB
SHA256 e12015a689a246ae56cbdb08b160b4b281c11324396026200caccd7273f76f52
MD5 c775e4489ecf6303dfb4119b03f4e2f5
SHA1 3dc25dbe059b2012469b0a739eb3c7740615d76a
SHA512 6ac6aec940f78032ed605bb5e1cef2a786f66e561fcce5a06d92f72daf1bb6b5650bdfc99ca1238afe4c204a81142a0db1afe865784ce5db50c838c9b7d8a0bf
SSDEEP 24576:tlZApe1XCnAX6mNT8ziT3ppOIo+nMNXFsAhlk5O/FpNYqljE9J4/Iwe1ikSXCVCg:x1XCntfWACMtyALsADljE9RwedCIAwTV
TLSH
T192B56C5A62BD00F8C4BBD0A9C91A961BEAF174190331A7DB56F0DD561F23EF12A3E311
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

config.def

Path C:\Program Files\Avast Software\Suite\setup\config.def
Size 45KB
SHA256 066fe3c317bd2427cab994319310faae4e37efdbf267e209130aea1852a000be
MD5 62dc58006219683f242c79e886af7bfa
SHA1 bf07eca08c60de7d48390d7445df8ac61640c4f2
SHA512 2d4da11a79b641ef16e084c1bdbb68c9c8b3d9af1abd577171557d415d7329676248d5e7d8fc5aeed1b9d4dc09f4701c3f18efd3f9045f8069e88a871c1682dc
SSDEEP 768:49l1Gtd0UTB76anCST1a7reDSA8xJu/jijXAbqo1IzJc/E6v562PJQ8xLT:il1GoUdjZT1aG2i+KIzJcM6v562PJXT
TLSH
T185235CE357510AAC8DD7C6E9AEE6B2511CB734CA58C090A1C7C1DCDA7DB0793708E26B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

config.ini

Path C:\Program Files\Avast Software\Suite\setup\config.ini
Size 2KB
SHA256 d6ee669174217104b57804ef1a2798ec9f3d9b87dce028dcad5758b158838cbe
MD5 c186541bd4cafc9d863ea7051dc6836a
SHA1 0d8a513f954afb16e47b3123f91bd740942e8f34
SHA512 9a96d1be7259879d5e92c5ee8873a2b4203f1df737ae356ccf500b91aaf52d4df9052379787e8760f3039aeb3c4fd05c333b53af8a5a3aa75c90c8f5eff00c85
TLSH
T10F51B1562FFA0129F9F78F56A9B82851683AFCC72C01EE2C1181119D1E76B54E8B0F37
MD5 SHA1 SHA512 TLSH

Submit Download

su_adapter.dll

Path C:\Program Files\Avast Software\Suite\su_adapter.dll
Size 2.1MB
SHA256 3badda8400923f077f824fba44a7b7b51004ae929403e21771b271d7f50bddee
MD5 1f42ea3fb39de0d152320585bc24e937
SHA1 c995ac8c12bcd469c89242e773a5c411ffbc8544
SHA512 294aef0215d3de2d3f38a8e594a76839af54aee01cecc1ea7d73389bcbac4aff058c284b2f4eaf4dcf636eae4d34b7fcd59e1f33613afe5cb8039867636c88a3
SSDEEP 49152:l5uudYos+J3tVWvlS0tefmk4lRVfZokJHgCUwA7grKq/:TunF+WckJHgCUwA7g
TLSH
T1EDA5295E79AC41B5C1AEC0788647990BEEB13899033996E76BE0DE611F13DF16E3E700
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

su_common.dll

Path C:\Program Files\Avast Software\Suite\su_common.dll
Size 280KB
SHA256 8b7299e67e15a484249bc6a9c1c6cfd6e7b73ea9d773755cad939320abf55c78
MD5 17779380e442c8fc5562cdd894433714
SHA1 7ac7871ce017f32a93015d93a96607f30abdee0c
SHA512 9c9907bca85372e3c34b0f442d49cb5fb27de1b9430e80839b08451152d56785ece320269fb37f54acb899564beb5d10257aab6929bfb1fb4ef0084b22131508
SSDEEP 6144:utbahtPtf8A1NRph0lhSMXlBXBWnR7iYcM8zwo5:zhtC2ph0lhSMXliR2YcJ5
TLSH
T15454CF17B7949CA9F50D817948AB0B4AE73378504342D3DF27A4D6162F637E22E3E706
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

su_controller.dll

Path C:\Program Files\Avast Software\Suite\su_controller.dll
Size 1.8MB
SHA256 12bec687aa2fa32c0bdcce4cdad81e0812873ac9340843ca25e31429a2c3e4dd
MD5 1ec9a7f88a98409627956687e96b9461
SHA1 a1632a243d8a47670c7c1db48e77ff511c3ba604
SHA512 ea082406f249f7eb087eeb6cb9acd9b921bbddf406abd09180375bf1c1941ccd74a4b376aa8f189567c7950336e91fe9cc5777db27f8089adf7fe13bb9e92909
SSDEEP 24576:cO1joxoll4/zp6qm9YhJAoX7weh0lhSMXlEzjD1saHo+Y:1ox6lmF6f+J6UjD
TLSH
T1EE957D0EBB1D41E5C1AED07D8657D80AFE7174810B6AA6CB62D0DE9A0F53AF05E3E701
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

su_worker.exe

Path C:\Program Files\Avast Software\Suite\su_worker.exe
Size 2.2MB
SHA256 f657b6b1ab8bb8c34166f0ac0fd5e1e448913533565b74a619cd788d5b736d1b
MD5 27b6b93dacd564e7a76c108f468aa2dc
SHA1 d3619c0b1b914d59bdc38a7ba46c354b94e0c46e
SHA512 87a5c647a76eaead6326d5d816c62e126ec9c55eaef6c355a9730fc226201b6c05cd5342f6ab27f0dd2e40031beebc45df3f388a218770c30924d63061c47023
SSDEEP 49152:N2dzHdl40tFHkH8wVB3dn6VShC6B7UL5SMxnFD4ll:UFyAUHll
TLSH
T1A8B55B1F65AC11E9C0FED0698606D81BFAF13C5A433166DB1AF18E561F53AF0AA3E701
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

wa_3rd_party_host_32.exe

Path C:\Program Files\Avast Software\Suite\wa_3rd_party_host_32.exe
Size 2.1MB
SHA256 51ae2413e80133a4351670895b7ecc6c1503d74e069e89799b966281e80b3e4f
MD5 a86ed46c4ed64448bd7786e730b6f938
SHA1 40d304d92c24ba6b60b1058e93ccf5b627e6a3d1
SHA512 484776c1004c6aba9617138d36b6ddb21c8b1ce53e075334bb8a1e89d580c0400503260a806f6affb8d5331a727abba5889e1bfa5519a4032cf69c1dcedcba4f
SSDEEP 49152:krNVr5ZtDAf7nZIT/mBGTCOxY+AGwp73hTieXR4ZaZH:kHr5ZtrAGwZ3hTjR4k
TLSH
T143A57E13B6D38071ECE341B1957D7DAA883C7664032998CBD2D05B3E69729C36732B6E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

wa_3rd_party_host_64.exe

Path C:\Program Files\Avast Software\Suite\wa_3rd_party_host_64.exe
Size 2.2MB
SHA256 389ee9826d76f3ea58e5deae127c693bf35822dcf9b7a74eed304dee073965d3
MD5 49ac7e283fdc4566e277fcfe22f51f41
SHA1 25cde19fc1c233d2ce4ee90d30bee5729ce752ef
SHA512 61caea94422bf3fc1511891078e35ec46a0745e12ef7dd514ae55dbe842dade1a701679ff940071771caa138462c3f10ec55104e1c2e7ae9e94d9b4f66055f7e
SSDEEP 49152:MutZ0rEZjBS3IimCIp09aP7p9td37SQQql5A3CFU:HZrxBeNmCIn5AaU
TLSH
T192B57D1BB6E901E8C577D178C656A407E3B1344A1335ABEF0260C7B62F23EE2567B319
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

config.xml.ipending.4364d1bf

Path C:\ProgramData\Avast Software\Avast\fw\config.xml.ipending.4364d1bf
Size 2KB
SHA256 be79affc10f1d93f9ae438c6320feed7846bcb0950cd32e8a564eeb59203b6ea
MD5 60424032333d4723d7f4ff7543a7aa76
SHA1 1fa9fa26b21439adcd5258727f9cd0b954d0f5a1
SHA512 859a800dfd2de9f0bc0f5e81a8f0ab80eefcb56fe0a9e634ab8cd13881ffd26e13448529d9a0d096a61d5f1e410eead06dac75a91b09faf7f692d8884a41456c
TLSH
T121413B0387F4154CB6B3A648BF7111945BA3BC826E5CCB9D12F21C0C90E6F94789ABE7
MD5 SHA1 SHA512 TLSH

Submit Download

macaddr.db.ipending.4364d1bf

Path C:\ProgramData\Avast Software\Avast\fw\macaddr.db.ipending.4364d1bf
Size 400KB
SHA256 397c21a562d5824dd87e2c34a60f2b3e8b678d52a7bc7297ba5828e4d7b9cf4b
MD5 4d0a40f5714712c5f1175769a93666ac
SHA1 2c57f1bdebe1bea9ccfa06bf42c967154d35dd41
SHA512 953ead668e3f48e820209674dd894a1fc6482bc53d3143ddd45a37ebf416982f126825eeb7f8a9f43644d53c2c47b420f95c95289427765ab14b28ec476f1e89
SSDEEP 12288:2Vq2bFZpip5xYk6rqHJp2WiJjz81+lj6FLSl0X:OFfip516rqHJp2WiJjz8glj6FLSlK
TLSH
T1F494099ABE5E6772EB0D263A73C64EC6317877D8F798271530688081A1F601B07DB53E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

networks.xml.ipending.4364d1bf

Path C:\ProgramData\Avast Software\Avast\fw\networks.xml.ipending.4364d1bf
Size 2KB
SHA256 130a4428ee45f3a17252aa797cfaa35d8e71070dcccbc6059b31eaa087c5f5f8
MD5 75128eadc720b56babb24ac629172155
SHA1 83bc1da43e4f51326713e43a44625987507b4467
SHA512 da45704247caf68c7deb59f587f392eb431a1ad89a653b78b7d6af286f6c6af7676575fcbc310679e4043040038f5ca3e0ef0167f6f6aa199bd4007291a39c57
TLSH
T1D1418D2C89B8131A6877EB4B99F25447E572BC2EF8289F5D04D30F4D0523910B893E6D
MD5 SHA1 SHA512 TLSH

Submit Download

TUBrowserCleanupTC.tudb

Path C:\ProgramData\Avast Software\Cleanup\TUBrowserCleanupTC.tudb
Size 1.2MB
SHA256 bb7a4a5a1876c82573416be7fd1dd2d07fd8388b50f6db578f262374e4dfb47e
MD5 18a56639759fae7d4cb1f09d52d3e7ee
SHA1 7197845f296c3c22956fc2e08eb3831f785d3ccf
SHA512 b18f433944ae36335006a1ad96c4b73178abd1f2ac4c43f46df9dbdfd82d69bd10dbf2cd252248f4a24ad57f9d83a2374358bca6704b9a16bb12961678fcd337
SSDEEP 12288:iSaxdPvrPa9HCvEkSOW4oWMixUK8apQg6tjYqXnqyk:n+TPQCsULoTiz0tjYqXO
TLSH
T1FF454CF88D6DB1E9DFE60439784972482D40622EF4FDDAE7EF7CB506128048172968F9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

config.def

Path C:\ProgramData\Avast Software\Cleanup\config.def
Size 5KB
SHA256 98cd35a947dfadeaedf1bd2f3d85508fdede2a186349a3e3760e7e5b2e823329
MD5 cb64c3e1a9a66c177b78be527db673d4
SHA1 25148acf0b9b490a55383329656f199d38190df3
SHA512 f7ad6c3d88ba28eadff8d1b84384362ec7643798c3cf075c6a34f893d450641a09680ee99bba7c78776b1b30dc8f4f501774449c54870b0d0de5c17ec08ec54a
SSDEEP 96:+MpVT26WSoO4TDLK+nIirmJXVtfChXGYQXXQXSM8bT/TG4X1c4X++9o+BIf:HpVT260LO+IZfCnQ9TzpY+m+8
TLSH
T197C1FA83C7468DED6E15E264B4C9A84D3D31859804D31698D7C52CCBA48FA9778EE0BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

usercfg.ini

Path C:\ProgramData\Avast Software\Cleanup\usercfg.ini
Size 1019B
SHA256 5e74d140ccdbc53f3eba7e4a512a124678b991bbc260c6f3ef5478fc89f624fe
MD5 955152f0b20bbc49f2c5a0b5e5679624
SHA1 caaf652b678ce990112c38833de5926e9b9a6319
SHA512 b3c708961e316ad5918ec1844e3c223eb409708029145e087dd9358185059b499b0a54bf1575fc487573c9034feb7a081f2795fdab97c11dfc33226ea5475ece
TLSH
T18B114F630842296C0836CC3F9CD40705317B8F9F117A52227A0A18CB8D9A3472989E7E
MD5 SHA1 SHA512 TLSH

Submit Download

icarus.log

Path C:\ProgramData\Avast Software\Icarus\Logs\icarus.log
Size 57KB
SHA256 121f8c5b6064c8626181e7c02309e84e7d6e2ab75c1352cdb7a34df63eaeea8c
MD5 d1de6f803e96ba2d85db22d9af64439d
SHA1 f1a502de8891f4e17e6bba547ccc64b227a950d2
SHA512 741707ca532afd524be46966c37e6cb4051900d8d06a0d3fb2f4189666370f7e7c717413f4cb4be83c4c58e600fe36fb6a6ca02ad2c9f22883a60ef2380f08b0
SSDEEP 1536:XbQToONdLREC8vc3eVmaCkk8DBpIq2XBitLvk91MAu:LOLREfVmaCkk8DBpIq2XBit/
TLSH
T14343710A40AFF4B217325AC4E1A13FDFE17076575A8C28953BDD360C777A921AB8F168
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icarus.log

Path C:\ProgramData\Avast Software\Icarus\Logs\icarus.log
Size 67KB
SHA256 d5415a6eb4fccf49bec8c0c6f3e092f2adfa5cc7cae5321f977cf1b1370f5dbb
MD5 211fdd653b0b5a3dcfa2b9d105ab60d7
SHA1 00f0505b2284a9067333dcb22dcff16f9fb37fd4
SHA512 cf3ccb0dcd1e57c1781dafd393027276701ceca5b73f187a5af79ac2f5fd2a03d7d310bf37f329cb0680f07cd3ff8eacc56df7c841ab38a8a4f87027c903625c
SSDEEP 1536:XbQToONdLREC8vc3eVmaCkk8DBpIq2XBitLvk91MAn8sE/lkCvPbV4aP9Vy/:LOLREfVmaCkk8DBpIq2XBitrBrro
TLSH
T17A634F0944AFF4B207361AD4E1A13FDFD1B073571A8C24957BDC3A0C776A911AB8F2A8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icarus.log

Path C:\ProgramData\Avast Software\Icarus\Logs\icarus.log
Size 66KB
SHA256 334636cd4de3e512768008f25b29b07ff8e8496df7ed49b6912ccf4e668a9e0a
MD5 a22f0b9079e3547ef59104d9f610c1ab
SHA1 26b4d08a235e941c8ecbd02c02b3c949e3ab31a3
SHA512 fd0f4f46e43a1499689a6736d2ec0ba0c00d4c7d688f520e02fad6532e4664217f5efd1d66d41d746fd87b6f83057ffb5b7c1449292ef7aee996e0a27cc9faf6
SSDEEP 1536:XbQToONdLREC8vc3eVmaCkk8DBpIq2XBitLvk91MAn8sE/lkCvPbV40:LOLREfVmaCkk8DBpIq2XBitrBZ
TLSH
T11F634F0944AFF4B217321AD4E1A17FDFD1B073571A8C24957BDC3A0C776A911AB8F2A8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icarus.log

Path C:\ProgramData\Avast Software\Icarus\Logs\icarus.log
Size 104KB
SHA256 34d505ec6826f81e92b6d1e3908aad4798fca3b8e66ef5731ef7f93aae14e923
MD5 5b05f5a3e6481c4d4dae86db0a886c03
SHA1 fd582b2171d7ef7993c8032379bdc2d0ce2e76b7
SHA512 75cbcd733abc1d32093436cc4a04e6d8077b86843f95af976f0c3300f8ee134613a73316deebd331692a50afcac00c6479344c1c9ca80c78f6504dca74a046bb
SSDEEP 3072:LOLREfVmaCkk8DBpIq2XBitrBrrtdvcanbggtXyQfXMDozY+ZQuCd2Psxzevbz2/:LTs
TLSH
T11DA3535984AFF47217372AC4E5903FDAD2B173531A8C18953BDC3B0C3B6A905AB8F5A4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sfx.log

Path C:\ProgramData\Avast Software\Icarus\Logs\sfx.log
Size 11KB
SHA256 7a442ce981f58991dfa1036ae06b5bbcb57b905053121d81a2d61a828b3fbb46
MD5 7bf1e2106753c730583057ff6ead79d1
SHA1 6497ba0d3a306563c0bbca6222041187ce9c70da
SHA512 dc0b8bc23875cfe05cfaabf843fe77af379b702b993da9359002f5d8832591e822cc80e972fb32686f4bb453d41bfe3a621cef8a6c2a162f24ea93472ae6eb43
SSDEEP 192:OpbKKFTO8TG4b2k5ej1y7aak5eQ1U7gsRmbFbbmbFs54VOOXIfQgIGrsJUFRWowH:U5iK56cQ5xCN6uPRgfrB/e5r/H
TLSH
T11D425525497FB4F21A2E5798F080BFFC67B4B2175A8C09103ECD261C67B1532EA0B55B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icarus.ini

Path C:\ProgramData\Avast Software\Icarus\avast-av-vps\icarus.ini
Size 182B
SHA256 313f170792e252ac6da732ec24987befe2161f44f4736157ede27c0f274b2640
MD5 5aee8d0b2a4b472a33eb170220449e38
SHA1 ca82458df7b98b654d76422993ac5b578edcd2f1
SHA512 ff3130e921a689336e3d88dca8cfb45e21ecf89eec66d3b1015c5b420e51c44bc9ac6239824fb0c1cc199f47003413b864916e0d5d0b8de84c5077da32fdbca8
TLSH
T144C01255F13052966424E26483305CB42FA67F86BED5409143C57A29A289B451314364
MD5 SHA1 SHA512 TLSH

Submit Download

icarus.ini

Path C:\ProgramData\Avast Software\Icarus\avast-suite\icarus.ini
Size 732B
SHA256 c2afddccb3ba6a7d73a84a73a90038aeb4e7820ad6b5db2d94f0feda1a96e0e0
MD5 2c43e432de70fca479c4654e1f8dd3d8
SHA1 38a869837aac15afc67ffd442357d1da0aaab081
SHA512 83a7ffbe2b0739a3d68c776d6c7cc3ffbb36e3bcbb49f345867a729f212373c601d9730c7c3d79896a01186821fb49dabdff3a16932a980a9a889b63405586f9
TLSH
T154019799F96ACB924436C7B8C3200EF1B58D30139C2362C273CFB939B1C6A183A5C05D
MD5 SHA1 SHA512 TLSH

Submit Download

icarus.ini

Path C:\ProgramData\Avast Software\Icarus\avast-suite\icarus.ini
Size 8KB
SHA256 72128b1f5a79d7e12bdbbefd798030cdd6c2e276a8aa1e8394c877270315f9c5
MD5 62e1fa3ee6c2fbb9c8462c16ce706cfe
SHA1 711d7e96b6a6a5f6c141e756671c1a7aa5e28c35
SHA512 4bdaeb97387d6768bb18ca0d88365312a8cf2d4586a41ba198859830b3359d72e2c065416a9c85b7aac4b6d77f1aa4f28683c61936b3f29ca8cc6bf0d80f51c5
SSDEEP 96:jN57l6ZEfe8V719dLrqScZ8ndkM2zjr8nniS8mzocABwUySU:p5koeMR9dLrqScZ8ndkM2zjKni9NQ
TLSH
T16102A31CA5248C2EA15DD0F0A1B229B57BFF2685CD167A83FE31F8A79CD91C86CC604D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temporary_proxy.ini

Path C:\ProgramData\Avast Software\Icarus\settings\temporary_proxy.ini
Size 278B
SHA256 8e511706c04e382e58153c274138e99a298e87e29e12548d39b7f3d3442878b9
MD5 b8853a8e6228549b5d3ad97752d173d4
SHA1 cd471a5d57e0946c19a694a6be8a3959cef30341
SHA512 cf4edd9ee238c1e621501f91a4c3338ec0cb07ca2c2df00aa7c44d3db7c4f3798bc4137c11c15379d0c71fab1c5c61f19be32ba3fc39dc242313d0947461a787
TLSH
T194D05E5307FA0008F1B74A58EBB898F2573378152F4DC02CC0C0121F84F2805892BBE3
MD5 SHA1 SHA512 TLSH

Submit Download

prep_Activatable Class_Hermes_perf.cache

Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\prep_Activatable Class_Hermes_perf.cache
Size 599B
SHA256 b536a3dae9ea5c69081f0491eed829e3b57e32401fdf49a63031bcd6b20e6fdb
MD5 658ab8c32d4cc5deb36ac5f63da4658b
SHA1 30c12cd871ff0c2c4098d794e9ae4f2540586813
SHA512 a73030c008ef3c2e274f11c90bfe79fa8ae402f76801c710bed8cc1ab1218a84858ea566b772be4bade8ef639a019c57d297028df15b64b3753482cf0f3c8f85
TLSH
T12AF05C83EB6A1B72C456123DC8EE56E47B31D1846EC11367A2107B1D3C2B7192D174BD
MD5 SHA1 SHA512 TLSH

Submit Download

Opera GX Browser.lnk

Path C:\Users\Admin\AppData\Local\Temp\.opera\d6a21155-4018-4404-b8a7-c8ed759e29ed Opera GX Installer Temp\opera_package_202607012118041\Opera GX Browser.lnk
Size 1KB
SHA256 c8b6ae727ecb73dd5d36acde1e1145c303b780581d57dd8d88f743068b4a455e
MD5 812667f84867f59b3cd5ab871f25ab58
SHA1 14890283d440296c2f2d591ee40e84ccfe593ae6
SHA512 4d6483262acff6cbc35179e1db7ae6a5daaa196ddd350d50d781b48535d4e1e61c0e22ec69dea28db458fbf6a4176aaa5d0af0233c7d8e3c46979dbc6fa93237
TLSH
T1E521ED513ECD2B26F3BBDA3546B63675423AF890AF0A9F0D020153480971602A899F5F
MD5 SHA1 SHA512 TLSH

Submit Download

additional_file0.tmp

Path C:\Users\Admin\AppData\Local\Temp\.opera\d6a21155-4018-4404-b8a7-c8ed759e29ed Opera GX Installer Temp\opera_package_202607012118041\additional_file0.tmp
Size 2.8MB
SHA256 0f50bda78a34e09ccfd5e33a7958de9eebe9863cc3d875e8b9c52dec3f3a9992
MD5 1bed04ab23ee645cad438456a6d465fa
SHA1 68b7d9eb6ff0bd159281a2fd55a7a24860ba765c
SHA512 9ca295d1c574e88eb8506ba3bb4096ff3860e605b7870fe11a2eff27c85a551894345b7524485fb4fd5ed5e9cfbefb917f735ed51085cfd3adbabd9a28909f23
SSDEEP 49152:MkinoAcJ53ld/JCHyHuw+yIfBfnDWUKT5qDztnvkbPsGaW6EYFZoMzu3ug:MkioJJ57RCH2uryIfi0mz+W6Eory3ug
TLSH
T1E0D533317D918476D22392330DD5FBEC66BFF5B22F229A9B3388072EAF201A24715557
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

assistant_installer.exe

Path C:\Users\Admin\AppData\Local\Temp\.opera\d6a21155-4018-4404-b8a7-c8ed759e29ed Opera GX Installer Temp\opera_package_202607012118041\assistant\assistant_installer.exe
Size 2.5MB
SHA256 e86907d20a18c6b99e270a4422e0c279079e8a118b6bd7fbb4001161ddc881f4
MD5 31f5e82954b11ee1cbaf09294f7d5d6d
SHA1 580d39bfee5fad23b31ea4869561b4f9d15f322e
SHA512 e3ec7a6c238faaa1561b12b67217edac16e5c63ff68483daf4e7d7bf6b1bdcc16e2dda5b11a7b69434dcfd864cab6e427854d8d70a2cd7cbf744ca8b15a6fe9f
SSDEEP 49152:6P/Ojp1psS7+BMvcOZ+XMxNBfAlVH5p6h7yMo:6nOjp1psS7+BMvpiMnBfAPH5p6hGp
TLSH
T1CBC59D02B89194B5DC963032361CF77E9A345E114B364DC79B90BCD16FB9AE2223739B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dbgcore.DLL

Path C:\Users\Admin\AppData\Local\Temp\.opera\d6a21155-4018-4404-b8a7-c8ed759e29ed Opera GX Installer Temp\opera_package_202607012118041\assistant\dbgcore.DLL
Size 196KB
SHA256 a2777992696c953c001dabade3f236f731987b58061efd8c894815f9939f979c
MD5 874334b4e7891772e6543f666e6d2411
SHA1 d9f0ca0263a50f254c6516aa9c8fbc671d978025
SHA512 c5b205cd580c75df43e69215028874bd233cede85c1829e4bbc67a2160c786a59124ef49681351aee383c27ce764fb7e47fc22e8b454b0eed8f0bb4020edca1f
SSDEEP 6144:pASh0NdOkBakZykbp/eyhr+SJors+k0L3nTd:8YIqFLnT
TLSH
T169148C6296840833DD9F11B8B29F333795FEEFB0139194C362549AE4E5647C06E3A2DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dbghelp.dll

Path C:\Users\Admin\AppData\Local\Temp\.opera\d6a21155-4018-4404-b8a7-c8ed759e29ed Opera GX Installer Temp\opera_package_202607012118041\assistant\dbghelp.dll
Size 1.8MB
SHA256 102419e70ed462dd1ef4a30d94b714c4317ea838d7acc85ae030dfca19f609ab
MD5 7660d7d4afc11706c9b4f03aaef74a9e
SHA1 38136ffc06c49fde4dc4210e9f9f580b5aeecd53
SHA512 e8f2f71ec524dd7435515c012ccbbe2e29d0de866a64fcfe604c0a9888425f0b6a7f89baac8078a1715f6c7dc411a5da4d5c0b92c720195d9ef00eb57ef4fa1f
SSDEEP 24576:gDOSE7VspFPxh+EqYbt6lyn2GyQWKACVOxHTdMgh9IVbMAQyvyXiuVKHeeKKwsf0:gqhRcFPxhHYCBRnyHO6W6NIyX/kQs2Rp
TLSH
T1E8856A20E784813CE4EA0177E67D7A79866DE134073440CBAAD45B69782D7C3AF386DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

installer_prefs_include.json

Path C:\Users\Admin\AppData\Local\Temp\.opera\d6a21155-4018-4404-b8a7-c8ed759e29ed Opera GX Installer Temp\opera_package_202607012118041\installer_prefs_include.json
Size 258B
SHA256 daea7cf56490ab451f885ba1917a74aab39a87eddebf8cdc71c513e70557e0b4
MD5 013b8e2ee7f9ab0d4d3206c7fba7003d
SHA1 2a47aab28e15ddb926199d69484630388e840e38
SHA512 3e0f4e6a6b1d9b132d5092e6861c586c67c4246c9023c98147f8a7b9d0784b06cdbc321f138529a507ef8f990d504e5806b5de0ea237da0311399e9face17712
TLSH
T159D02B424151C0520952C6532C733A4DE4F3251146B1745EE79B2220803989378DAD8A
MD5 SHA1 SHA512 TLSH

Submit Download

installer_prefs_include.json

Path C:\Users\Admin\AppData\Local\Temp\.opera\d6a21155-4018-4404-b8a7-c8ed759e29ed Opera GX Installer Temp\opera_package_202607012118041\installer_prefs_include.json
Size 273B
SHA256 20c21e6ad71f7ca90175caf1887bf3efd8ce836405d322ccbf8fd02dfad86151
MD5 e297c1cb930ef0c46a79497b372ed919
SHA1 704464ae11cd8b1c7cc4d861ba9e4a1629c032c3
SHA512 ce1ad32c4ce3ebf062a9934db9459def865906c78f3ca88846254b2c9d213e17a7e4e214ff136728bd1be4d11c1dd4fda668fca3df827ed3f795970235117313
TLSH
T15AD02B464151C1620A62C7572C733F4DE4F3251146B1749EE7DB232080398D378DED8A
MD5 SHA1 SHA512 TLSH

Submit Download

installer_prefs_include.json

Path C:\Users\Admin\AppData\Local\Temp\.opera\d6a21155-4018-4404-b8a7-c8ed759e29ed Opera GX Installer Temp\opera_package_202607012118041\installer_prefs_include.json
Size 794B
SHA256 10c6b595b5315678a298d9656f7f9ad19a4a2d0a3c8b507291458bb370ea0f66
MD5 e831f12dcce223e55bba8c45fd4903d7
SHA1 171fd9b6a02dd68242ebbbef235aba7a3c0c73c9
SHA512 fa1de983eb6adb6a48bd04401f8c5471de3ce36ffda48355c92a782712e8871a939b1cba1de79913e0d281cae5cfa6aec9d560726a23fa593ca649f960181bed
TLSH
T13A01C5170181A022AA36C2BF8C431E09A8236512622421CEF6D7453010EFCC22FBA617
MD5 SHA1 SHA512 TLSH

Submit Download

setup.exe

Path C:\Users\Admin\AppData\Local\Temp\7zS864DF359\setup.exe
Size 8.1MB
SHA256 8be09d18795860b08ce3ee4f21c05b3205fba0541ac174cfae1a66d19b21b8ea
MD5 d63c07838f3e41bdc17e273487509c77
SHA1 e4e6908c4a4842bce89344df18edaebefb231fc5
SHA512 e70390900ac7cf9a875811d36a0e4d22b8ddefe229a60879919c9b76640b775742ef014a90292da336691358bdadc45a01a6ad72c7c5251aa546f3a6b29ddcf8
SSDEEP 98304:Xpp/1c07niyCsCZbVz7ZTlS25vSOdFBI3++wteEmn:3177W77ZT35KB3+Bqn
TLSH
T161869E43F3E901A8E0AFE9749B3A5222D5757C864B34A2DF06D43A251E72FD45B3CB21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Opera_installer_2607012018033993188.dll

Path C:\Users\Admin\AppData\Local\Temp\Opera_installer_2607012018033993188.dll
Size 7.5MB
SHA256 7cac08fa3fc954671ddbeeae0a9c6c44b31b1e47ee8cf0591f6ce4f012fc0b02
MD5 69e432e06ab253be69c119ade50d2935
SHA1 b0f34191da482d1dd62f0356d63032a68e4ea687
SHA512 2856bb9c16099bc3a23a67d69c647decdcbe36552bd281dc63e1bbdaed0f6680652c10698af1234a78f25db4ed671b0bcf6577add4fdc89a6e9c22f8f5859265
SSDEEP 98304:M/1c07niyCsCZbVz7ZTlS25vSOdFBI3++wteEmL:K177W77ZT35KB3+BqL
TLSH
T182869E43F3E900A8E0AFED749B3A562295757C864B34A2DF06D43A251E72FD4973CB21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

polarbytes-auto-clicker-2-installer.tmp

Path C:\Users\Admin\AppData\Local\Temp\is-65OOE28LMW.tmp\polarbytes-auto-clicker-2-installer.tmp
Size 4.1MB
SHA256 ad44ccbfc69fda66fef3c812fe4aab5eafaf8bd654f8b707081c30233677544a
MD5 908bb8ead7e3505cf64796786b844c3e
SHA1 23e3ce3af8b4780f4560d3e447614d8fa9cd8b08
SHA512 a61c513964e17a234b8f66aad823bb4e7e61bb9d664661746b499ede1f2289d14aa94150615574fed10e8d1b3687adb0f126fd8858f7e369855e0818b232bcc0
SSDEEP 98304:b3U5HY/KwjoYY1j48UWm2eTMFdC+JM333E:Y4/1jorPmEL
TLSH
T1D1168F03B348753EE4671A3A583FA680983F7A213A26CD4B6BF40D5C8F396416D3A757
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

100.png

Path C:\Users\Admin\AppData\Local\Temp\is-Z66QYS65RQ.tmp\100.png
Size 152KB
SHA256 2f116cdef55e05549d6f06913afe39a91b715b188e110188c7fbf7f5eb69b318
MD5 4e2421d76f1b0c5627f732d4e945a023
SHA1 89e3de5bcbfe50c18f17b5ee731dd24213f1812d
SHA512 13c97b5ec52344b605d1b9658dbe15ca05841fdb786f2e06ab52a4f80ca6398adfa7c0dda304ec343ab733df85d9a9da29012ac21d96e680a19ecbbfeb0b9001
SSDEEP 3072:zkL8PqE1l4NJoxLiog7R+1tNx+ZEaLbplAfkFO/lb95N:zFowWo7tv8bpyp9j
TLSH
T138E3121A702324BAB44EF4D6F1DB65C2EC22AAFD214D10A7D79A5C7428C0B66FC5D2C7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

101.png

Path C:\Users\Admin\AppData\Local\Temp\is-Z66QYS65RQ.tmp\101.png
Size 42KB
SHA256 2ddd50ca3bb30387c309b0a627cc14f2820352679caa1d59f0dd35aed9540453
MD5 faff96fb8080a98bd1def3c4f9cce9c1
SHA1 466c66dfaed49d93dd7d8a1e42919a4f03613efa
SHA512 ad87ccc0bcb0115d5e7255935c5bd2b5eeb85b75f46206987d85f0f5e04afce054b0b3cee3d7577039db6ddbff1f0fdfdca657b7877376e4f97c80c5ed7514b7
SSDEEP 768:53E5YnNz2SLHvDYgWfGHV8L77Yy/oksC+x8+RfWpzrdYnsi2anUpMQb3HGJ2:536Ynl2SLrYHAWHDgEqCSskn0nqA
TLSH
T11613F1B8B8DE416DDDDED6B8FCE66FF564816437CC84D1EA800CB028518E784366636B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SUCCESS.png

Path C:\Users\Admin\AppData\Local\Temp\is-Z66QYS65RQ.tmp\SUCCESS.png
Size 1KB
SHA256 2b394e114deb3a0700c70feb80d74328c4c8668aa221b0e427de783d1ab8371e
MD5 e8c9048faf21f1cc959d73a0de5534fd
SHA1 9c27462a55fa51788102f7102614927a5561ddca
SHA512 87f26c7ccdf3e4ff4d2008504d43eecc5f563f91e22eaf7a85530c41b741253ec648ab7a7c1bfcc608336b2b87df666bab14d4a31df221a111d0e1819c6232fc
TLSH
T16D21426BDB812D97C19922382BF28B40FB3011E14712035744273970C4E8B893F0960E
MD5 SHA1 SHA512 TLSH

Submit Download

component0.zip

Path C:\Users\Admin\AppData\Local\Temp\is-Z66QYS65RQ.tmp\component0.zip
Size 3.6MB
SHA256 52ea32c4123bc367fc61f6624d0ac7a3d677a7eb169687c3daa3d975fbea4a5b
MD5 dc29d3a3d119cde5912aa66d95f26062
SHA1 2aaa52b1a53867706888eb2f3bf530454c2a690f
SHA512 25d975174a9d3d5417eb025083c8ea33b46d7e2b53f0574a9f4d2c950885b8e7ca1bd115a30bc0022ce870063a0adb76477064bfeffb81b1b3421dbc48d33c2c
SSDEEP 49152:NVAbwQwEiXhnkSxkrFHQ1YUyWuT+SNBRk2ZatSkJsfofgWJZ9C3c1yUH5MQdds3L:rA/iXtsWiUyjHNBRkhQkn4WjV9b00AW8
TLSH
T165062331BBC1E472E7A321324F78F3599A7EF6940E550A977B480A5D8F70282A635F07
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperaGXSetup.exe

Path C:\Users\Admin\AppData\Local\Temp\is-Z66QYS65RQ.tmp\component0_extract\OperaGXSetup.exe
Size 3.6MB
SHA256 47e56b4975eeb5ed4c5f492046c069e735173c3d1b6f10a8f2dbeac5210a20a3
MD5 9fd9ddb996e1e4327d2dc25034d2280d
SHA1 2094bac602b2e0c62a854e09b2fdf77871cc6eab
SHA512 5c7f788f41eeb63580d3e52a46a45497648eca3c5b34687585f9f178329792a6cc2619d85ea7e2bf9e24ebfab22dababfcfa91248759ecc34198fac384926d0c
SSDEEP 49152:MVAbwQwEiXhnkSxkrFHQ1YUyWuT+SNBRk2ZatSkJsfofgWJZ9C3c1yUH5MQdds3U:AA/iXtsWiUyjHNBRkhQkn4WjV9b00AWb
TLSH
T1D4062331BBC1E472E7A321324F78F3599A7EF6940E550A977B480A5D8F70282A635F07
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

component1.zip

Path C:\Users\Admin\AppData\Local\Temp\is-Z66QYS65RQ.tmp\component1.zip
Size 782KB
SHA256 4a59596213b8e401401fad6249213596400943f72f98d8810c48538374137f52
MD5 2c7be73f369c90ce32bbf5b6edcd9cd4
SHA1 aabd8f656ea80ea72dd17f2819fbee64e6f4b560
SHA512 312502f64439a7debfee5b47197e481eab490604803bd07eda5fa3d1a1e8e7de3e6e687693932ee5aee85e56ee059b790a7f47a3754f6818e14fa1cf6a0a7815
SSDEEP 12288:YV/ZeZ0C6U6lQzc2+KcqaYTmydhmdfLNz+g5WOcmpMi2VWmSKAf+4l:g/MZ0RTv2hnKydhEz0OcoMiCWNfj
TLSH
T1FA053380AE40F676EB81CA213FA7E5DF35538D923BC1797D61548088322DB6EF5CB258
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cookie_mmm_irs_ppi_008_585.exe

Path C:\Users\Admin\AppData\Local\Temp\is-Z66QYS65RQ.tmp\component1_extract\cookie_mmm_irs_ppi_008_585.exe
Size 1.7MB
SHA256 2ab4329fb77df9f5b70ac45d9fc005f019c8ef930eabf82e6a10052f9cbeec2d
MD5 11a225495371d91ef254a5c69c967ea6
SHA1 ab136cbac42cc54a6aa15f7eb43eec1c6647dc74
SHA512 5012d9fbc9401b5c5a377f100560c637adc98d319749bb599a0a0487417915f647032430ef027c69cf1a8fecc2d63a741f1aaec71611dcf292db109a35c45023
SSDEEP 24576:tuRu5fl3AFG8CWgd3jEDigqqP9WhavTXeS0h0lhSMXlOncOy9x6mWFI/RV:bJlQU8CJjqF0wuS5icLxxWe
TLSH
T198859E207B42C07AD49A01B1992CBBAAC16DAE744F6550DB73F03F2D6D711C22B35BA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

image.png

Path C:\Users\Admin\AppData\Local\Temp\is-Z66QYS65RQ.tmp\image.png
Size 137KB
SHA256 595cc60ade2129241bc7754106a0c3f40bc91c95a89aaffbdf10776d41633f44
MD5 382b77d42de155aaf9c42b37a17e07b0
SHA1 8f480e1d8653f670d90ca7dfc70e016cee76db77
SHA512 d4943b4a8ece6ab2fc8477f9e684b31ee6a2cb350eda17604c03180263a0136f550a5491da8e96a02a2322083c8666b009c7f45b9e6539821050124d206c4baf
SSDEEP 3072:rsqc/2MuGCofG7OD5F/7p5P5Gtfmtvjs/hHVn0dClo1scs5j7Q2Ux8VY:IqzMEoJ5Pg70dg+xf2aEY
TLSH
T149D312D9B8854EB4E916694653632FA412AE305C849C0C49D2ECB51DFCFF81EB366F32
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports\settings.dat
Size 40B
SHA256 048bddb324fb751e9f6e6a90f766dca154be8e5db39271a2c9b76c39658c4361
MD5 be746b694ec314ac39584ec464480fe6
SHA1 080486b19cb488d77e8cc029d9de6f0f8a597bbf
SHA512 a92a64cb18abd68f4c4c68fc768fa14311d880f6cdf25ef4da3942fd44f6517b094bd08870caa50689bdd9be07d9bbabd63d321329780c1df8da571484cd5ee0
MD5 SHA1 SHA512

Submit Download

polarbytes-auto-clicker-2-installer.exe

Path C:\Users\Admin\Downloads\polarbytes-auto-clicker-2-installer.exe
Size 945KB
SHA256 a216974db6be5217a831c21850fa98a0145de733eecad436b0c43c0655558ed3
MD5 581d1cc53b553c69b573bd760d4c4e15
SHA1 2eada3ef03863f012a8b9090786b9fbd99ef640d
SHA512 579fc1d72866f7b622da838a68c33413ec282ae40538295a78616e5c4fdbaeff93c40d283596d467c1bb96948419c9a4632d410b41c24827c6615a837f0e439b
SSDEEP 12288:vaWzgMg7v3qnCi1ErQohh0F43CJ8lnyjQVs20G50+SQh2BCauhdM:yaHMv6CRrjLnyjQVs/GRHaus
TLSH
T1B625D012B7D680B6DE9379B52977E32BEB34A9180317C5879BE02E73AF211405B37352
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

config.def

Path C:\Windows\Temp\asw-b1dc0ab6-f70a-46c8-bd97-07bc70c1f220\avast-av-vps\config.def
Size 561B
SHA256 35399608c4d9a10e093b28095dc917891daf3ca37d9e0629ec8a72b66d9b14f8
MD5 0eeab83c0188952d4db11ff2b11e9b07
SHA1 d0b790d1efbf283e07bc7d15eac356640ce78b8f
SHA512 3f7f31fe1033ad0381df3fead547e55d06d70a7462797daae7f43bf4768e1abfd5a054430e8d089fefc71d37b0a00733c90c0c7b5d845d1f8205f2b1972359fb
TLSH
T1EDF026F74949640F4961D9D891265AC4AB90028049C2DC219B51774B9FC9BA41CFF5B9
MD5 SHA1 SHA512 TLSH

Submit Download

icarus_product.dll

Path C:\Windows\Temp\asw-b1dc0ab6-f70a-46c8-bd97-07bc70c1f220\avast-av-vps\icarus_product.dll
Size 1.3MB
SHA256 f72207de8ffeb10b514238eda0e70200436887c91c459456ad1b80fcfe4fb23c
MD5 e6d6c536da124ead887723cfca93668d
SHA1 ee0f4eefbc6c8e134f9f3f5efa4624f58b0b6494
SHA512 fd172d46afdf29eec974c7e8f7231f732cf455db09848996e3b3d7f738853b6798f6e076122acf1afb4bc1e7957e9fc87c32cb2255a8fd5d8b4cdf761606af1e
SSDEEP 24576:X+alDv4KOL+a62q2idq1hIRNnz5Wgh0lhSMXlGHxceqV:ualDvNgp62q24qQRLEN
TLSH
T1B2558D1A7AAC41F5C6BEC13989A3891EFAB17451436197DB66EC8E091F13BF11E3E301
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

product-def.xml

Path C:\Windows\Temp\asw-b1dc0ab6-f70a-46c8-bd97-07bc70c1f220\avast-av-vps\product-def.xml
Size 66KB
SHA256 a1369269d45dab9e70175669b213794309bff9a780339254488cc4b5c54e76b4
MD5 a10a3054b5e9da34c33f1d154cec8ffb
SHA1 85bc6f9611c5cff0fe07b3410fbe31c8434a0400
SHA512 ab85e925f5a51effff280c50e3ca6b0051552cee5ee5e758c3c86ceeefb00559397e13b33f86e348c31f4b2f5abbe90952cf8673553bed448d5e3ca5131ec8fd
SSDEEP 1536:fbtZqt7rI7Ih7p76IZtBb3M6mY/3iMaqzIzGlkfVvGD/nM7CZgblyszTtdG2CDff:EASN7yVRO
TLSH
T13D63E26977DF7D6A318790D7E440BCC4A38FEC7886D80C93B5337590991ADE29D28A70
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

product-info.xml

Path C:\Windows\Temp\asw-b1dc0ab6-f70a-46c8-bd97-07bc70c1f220\avast-av-vps\product-info.xml
Size 5KB
SHA256 9c8cc149b0b92f77de5108a8d2ea87acdf8c9817a969108adc5cdc70add65318
MD5 958dfe337cccb08b1ca29ef4bdd33aa0
SHA1 489da99d32f40dda0fe30824afbc9132182a8035
SHA512 cd318e2a12a50d9f8c69f2bc16f7a136d64b90d752bef72145c3d5aa1571d6871a167bfc0bfaf7dea9336665c308dd791cc08364902fd2de2d4524655867ec0e
SSDEEP 96:AhYHhOCX1EslOyenSU8wkOuQAzKsj33BQ0edffCBm/eG8VzSn+8+M:AhYHhOCFEssyenSU8wkO1AzJ3xQ0C3C0
TLSH
T121C1ED32342DFF27711F90D7B4D5B982A6AFFC9D9E841C1781073680A3AB9796A0D934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

policy.def

Path C:\Windows\Temp\asw-b1dc0ab6-f70a-46c8-bd97-07bc70c1f220\avast-suite\brandingdata\av\licensing\policy.def
Size 3KB
SHA256 cbb89ba45fba45a07164fe8cc95f6fbaa123e0246aabf3a7e5bddbaef88ddeee
MD5 729968a6d451c419ae6e06b0cd7698de
SHA1 c0214adcd4473b020a1bf7ddc83607d6e94541b9
SHA512 a576ec3fce7e0ea4b4660a53083551d2ebf2e25f5e72b095108379c92f9e227c422b62855cb416ca24803c73f0cc70c648963a4b0cf57c8aceda88516e3edc0f
TLSH
T1CF71525C2C15A2FF3E87A7B7AE025FFA7DF984C18F2811A475AE9E0D11A498C05DC00B
MD5 SHA1 SHA512 TLSH

Submit Download

policy.def

Path C:\Windows\Temp\asw-b1dc0ab6-f70a-46c8-bd97-07bc70c1f220\avast-suite\brandingdata\bg\licensing\policy.def
Size 718B
SHA256 25cb063707d322d112c4f6d9b10dde10a8e381bcbf56f5e50ba853232c79d0dd
MD5 2f86ce9f00990bdd5574ba9c85651280
SHA1 042e0d369b4131dda69b79bd89139dc53db511ea
SHA512 4bc5873be7a70143735470b81bdcc38dc4a9ccb41444c55d01540bde92c9cb12b2864a66852f2a0251f64b3c32fd5b163b1a3437c33a83f6727dea64527d7987
TLSH
T19E01DB8C6C1696EF3A8BA3B3AA515BF77CF855859F285194309EAD08025998C41CC01F
MD5 SHA1 SHA512 TLSH

Submit Download

policy.def

Path C:\Windows\Temp\asw-b1dc0ab6-f70a-46c8-bd97-07bc70c1f220\avast-suite\brandingdata\tu\licensing\policy.def
Size 2KB
SHA256 24df25d5fa773fcdafa29e5b6604ea2fa2e7e67756da64aeea96162c2171bb10
MD5 146b3932acc0b7bcee6beb9d550ee2d1
SHA1 2f9ebc6913b92a6ec36f8751ae66b2fed30b696f
SHA512 05cf2d9b911f1416ea4b348b952e51a2cf7382713d5131fe776a35123836e600f9c6688a0e245b93000a6b94db10634e9928cf86f0485df1b4217193322d42a8
TLSH
T155417A5C2D16E6BF3A87A7B79E025FFA7CF884809F1861A0749EAE0D02D458C41DC01B
MD5 SHA1 SHA512 TLSH

Submit Download

config.def

Path C:\Windows\Temp\asw-b1dc0ab6-f70a-46c8-bd97-07bc70c1f220\avast-suite\config.def
Size 848B
SHA256 01524970aef7b592abba7ea8d6dc8a9c573ad6869546aca4042824025f13a7f1
MD5 c16afbc632861cf8da5a11ebc0e8895d
SHA1 edbb246536e4cd1276091b76d2dbff73589e6206
SHA512 d85c00a958d53996a51471849e77ee500ae4dd3265b83e365badf1b0aa6dc185374b594d8647f7f55dc30c5a6e1e96da976f7f56372d666352a26f1fc1086f0a
TLSH
T198011EA3C594900D0E1059C86227E3C9A36002C88DC3C8A195A3974FEF973B51DEE2FF
MD5 SHA1 SHA512 TLSH

Submit Download

icarus_product.dll

Path C:\Windows\Temp\asw-b1dc0ab6-f70a-46c8-bd97-07bc70c1f220\avast-suite\icarus_product.dll
Size 7.9MB
SHA256 b876f85bdcb911d45da1c333bc1d86979e684be1f6ca38f1ba3b48f24a223c53
MD5 546bccaa814e3fe27a48facdb2a84c17
SHA1 a0644c662f3275f0d7abff57ee9c399362015595
SHA512 640d85b1ff33f6ce89ce50bf9b522188dc73bbb367989bd526453c1769abbbf58adb7dfadfb4697ed0947078db5e5cbcf5fa159fc013d73ef84792be05982c5a
SSDEEP 49152:a2dgHml4Xv2vRyolz03LQSvwEPVm8uPrEJo9oV3xEP5C/T6bNMz+hZpQm/GOEWcd:JIZhG/Q7vfoJetWOMcp99xnJOBhlRc
TLSH
T162866B1E7A6C00A9D1BFD17CCA57950AEAB178994334A3DB5AE08E150F13BF09E3E711
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icarus_rvrt.exe

Path C:\Windows\Temp\asw-b1dc0ab6-f70a-46c8-bd97-07bc70c1f220\avast-suite\icarus_rvrt.exe
Size 54KB
SHA256 097709779bf6e7a3f93b65510c1df2a6d28c2c8052874b39d560addfccc44493
MD5 9509e1083e6c87ed87fea572faf4707c
SHA1 d1edbd6a19219182d44daee650d7ccdb5f577073
SHA512 881d3ebc9da69fa08346a288b47381437c9325800b42f1034980fdd765cdb25a758f7985f4114bc9f6cf19eecff97834ec237fbf7b67d65d6adc16b5e7932fb1
SSDEEP 768:Skew5tXCQd8uLs7c9kyrHFLEPZqnF6AmbL/hamzxOW9zRrA:Sk75so8uLs7MDBEPZCF6VBamzUizZA
TLSH
T14F435B1323A850C0E67E8478A3F49923AEB236D617206A5F3164D46829A5FD1F73D36E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bug_report.exe

Path C:\Windows\Temp\asw-b1dc0ab6-f70a-46c8-bd97-07bc70c1f220\common\bug_report.exe
Size 6.3MB
SHA256 f60160b99f07fe70454382d6f74eeee21264a3f8f853d10e305a8909cb6a4c92
MD5 29789a9d6df79a9445f5bf5fbdd87fe2
SHA1 1b6bec57661ffecf2394f41198c373eda37d33d2
SHA512 804a8efba4cc55956190dfea884e1573374d8e9575483e433742d2de8295e7fea36b4ccacb9201e74f0f72118ccd2db9a7aa5f1d58a77708358b2f44a9da22f4
SSDEEP 49152:92dJHVl4HiAn2UheYeIQDtJ/SUeB1k6Y26Q2or6cR4GCivE/kWQT5BRHxysfBuyY:b1iekJ8rr447Eb9KOoD1/1g0mqcbI
TLSH
T1EF668C1E7A6D00F9C1BFE1798A87950BEAB17852033597CB66E18E550F13AF19E3E700
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dump_process.exe

Path C:\Windows\Temp\asw-b1dc0ab6-f70a-46c8-bd97-07bc70c1f220\common\dump_process.exe
Size 3.9MB
SHA256 bd9a56bce5fc2345355d10a457414fcc6e275daee24337c2da0c88ce1af6cad1
MD5 aeb6910cbaa7015a90371eb989d296e2
SHA1 dc81f0575c9cc0f2f7321fb41452090a653ab833
SHA512 e478fd6189dc6f43abd872173ceaddfcf022abc638bf4f36bbdf4525e0e7ca0e67f1473722ce6b668a78c720f0e194bcd1d9e67f5658c114bce38edcd7688983
SSDEEP 49152:IuXGfh+DIJ3wv7oAQ4ki0ixM0H7wfdyTfD5TAlNtNtMtU+pfTy1dyGJCXN0b5ntg:II7v7ThN0
TLSH
T1D2166C0F7A1D00E9C1FEE17D8A8A550BEA713C96433597CB66E09E590F23AE15E7E700
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icarus.exe

Path C:\Windows\Temp\asw-b1dc0ab6-f70a-46c8-bd97-07bc70c1f220\common\icarus.exe
Size 9.3MB
SHA256 97427e9692e0c5ec88752a2a048c0ffb4d534a961ccb762939e4efb0bdafe7d5
MD5 97a5abddd81705a39b6afb080cd3a2f2
SHA1 576680b61d850f57b7638960a834d6938cc6d24f
SHA512 88bbf95a41eed263c59684a115a522a89ba0ef18073012382b186d8303a7460708e047147c3f1cd229c8e4c4bc55b09b62f549722fd34a329ad4e69aadd73aec
SSDEEP 98304:+j+3Tf+cUvglKasRQazXER/h/PPy8HSLWD8Qj:+j+3Tf+pvrmUXER/h/PPy8yLWA2
TLSH
T186A66C1EBA6D01E5C1BEE1788647940BEE717C95033997DB66E08E561F23AF09E3E700
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icarus_mod.dll

Path C:\Windows\Temp\asw-b1dc0ab6-f70a-46c8-bd97-07bc70c1f220\common\icarus_mod.dll
Size 16KB
SHA256 52e07dfe261985b53d95759721c6ec3dd7af79d6a8ef646058f825f009aeaa68
MD5 65f14473143dbe869bc2627084534616
SHA1 be26a21b83035c8e97030685327d78be618a3f23
SHA512 3f4967aab7904ae1c20b390a9758510a64669ec568949fdd38f90c1751768bc0b5f2734ae10b3592837aae2ff05fbc4cd829a3e6ddc1fe09fd3ea38b64c53795
SSDEEP 384:3DYO+foCqpwKNsZqnkwn7ldei2WSx7bLus+:7CZqnfuAmbL
TLSH
T12F724A473F246642EEC78D74B4C88BB7AD7072726F6144D719304198ADA1BD23F6902F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icarus_ui.exe

Path C:\Windows\Temp\asw-b1dc0ab6-f70a-46c8-bd97-07bc70c1f220\common\icarus_ui.exe
Size 12.4MB
SHA256 0e76cfd4740a474d0a6ab8732b29b59b7628cf486fb6a96887c4d1badff3f33e
MD5 e6c14d4f0aaf707addaf35bdfa631463
SHA1 03f9ac8496ab135cf338035ea70d82384510da82
SHA512 580be70958908162373d0c1a4df93291629d68e3f1ca8414f1f7ad933c504494710506620dc1b69e04f73d2835c8ab0f8a66fcc2ec02d6995cb7fda710b77ef1
SSDEEP 98304:Ixh9LfRtNqt/u+HKLoQXZgrwLX2zXm2dlA2SnnPFCrqNvIpE:IzJfRtNqc+qLoQXZgaXcD74PFCrqN2E
TLSH
T1BED68D6A76A480D5C1BFC07CCA5A950BEBB37895133097CF12E25A5A1F276F09E7E310
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

product-def.xml

Path C:\Windows\Temp\asw-b1dc0ab6-f70a-46c8-bd97-07bc70c1f220\common\product-def.xml
Size 2.1MB
SHA256 8d6c7b441f177fbc27ff015b2f948196f9b031da605d0cc933c734ad9727935f
MD5 efea84b3fa87c89c7cc485d3ad51c09b
SHA1 3a7b9e68623abd6d081121483bbbd05fcd684f60
SHA512 39a518458beb14ff595555ad24dbf1d1d73112c1d5beac7351b985121a3f47f1aa339ef130c3f0a7a3b8373d942babeaed235a9952d762c32003f3d8ff69e9e7
SSDEEP 24576:D89+p1uhlrMmMJncXNObqnDcIER1roDwrJPr9JwF:XpghCm6i8cDEB3c
TLSH
T105A56175359E7DBB704B40E7B880BC80629FDD78CAE46853F1B37240A252E725E79A70
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

product-info.xml

Path C:\Windows\Temp\asw-b1dc0ab6-f70a-46c8-bd97-07bc70c1f220\common\product-info.xml
Size 11KB
SHA256 56afc2e724885776c69dcd4dbdeb98dafa91650acc69093a2796553ae746d2a5
MD5 3477593afd3daa5e6932bd1f122dabec
SHA1 e1ff08cc3c640b8155f116d9945865240d6f4dc6
SHA512 f748bf48ab8ed3af6dd5211c04ec60db75f08680c3163f577097e2822326e1b413a8a26fffa6b246d945983eaf7c4a438d4a20a1b5c31d7e34797b9e4b73b542
SSDEEP 192:2Y4hORFYXmAmNp4jSmlzKunU8wmOx4zk3xF0j3Cv/enKD9d1W8PuLsWcNvGPkm:2hHxmNpUvk83An5TWK7Csm
TLSH
T1CB325375311DFF2B321FA0E3E0D5BA82319FFC2D9FA42813E0273190A65B579A949974
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

setupui.cont

Path C:\Windows\Temp\asw-b1dc0ab6-f70a-46c8-bd97-07bc70c1f220\common\setupui.cont
Size 649KB
SHA256 a56cd0901aaaf0fc31e01903e49a720b8a5722191c1cd2b83e683c4770acf8a0
MD5 522217654ce4e89c3d2997c1989d5d8c
SHA1 dd9a2fc96421b51b236d4741b72a3cc29eb9882c
SHA512 c90a74f91ac7eba6150a031e8a900ce3cd9b745a804d02390c5079b1a80a7563907c9fb979a9a364482882331f546945413a0d32a44092780294cecc5f6038df
SSDEEP 12288:1JcbjFp2BUERtWvm0waBYVi/UyItXaRNQl0fycaubn9B5NVujZidFFSavLj:qjbiUCa2Vi/vRil0lfBfQjuFXvLj
TLSH
T148E423BAF51078A9A6437BD08A3C0926D50F451203D1CD2DD64FDB4C5CA97D32A6EA3F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

epps.edat

Path C:\Windows\Temp\asw-b1dc0ab6-f70a-46c8-bd97-07bc70c1f220\epps.edat
Size 80B
SHA256 c6528b50bbe1265eeb1beb88535e7f6257075daaa245ed693e9ac38511b297bf
MD5 5438e42d44c84deaf1c0d2ff11760e49
SHA1 87a6d26a9a158a169f2808ea1702daa188865498
SHA512 ff1f32e2379a4f6d0b642d31baaf558090dbe2ed6031f88f25438d0100f89651cea3af3690dbef151f3c3fce0582d0fbf5b85b7392ad7a885815d957cd8041a5
TLSH
T195A00188D40182F320A0D20073889187301A00C45E49318D79FAF94A2389B8B9AA84E0
MD5 SHA1 SHA512 TLSH

Submit Download

giet.edat

Path C:\Windows\Temp\asw-b1dc0ab6-f70a-46c8-bd97-07bc70c1f220\giet.edat
Size 8B
SHA256 c2cb92b00918d830aa68e4d5496ca412e3bc86f88444cb3de9d52e62a877b93f
MD5 faeee7fa0a7dd54b32eb730697448ac2
SHA1 85314fe3f7a2a838afb9b5ae64f00577cdaeb664
SHA512 1640cb35c92e0214808fe14ca3658549a927817195bb16b82f87bb3cf2e7e6e623bf04f42147ee97c66a52fbb11a55f253688d5a8363f3a836044e65b21d5b3a
MD5 SHA1 SHA512

Submit Download

icarus-info.xml

Path C:\Windows\Temp\asw-b1dc0ab6-f70a-46c8-bd97-07bc70c1f220\icarus-info.xml
Size 2KB
SHA256 00b0414dda229aa2778e856fc8e51843e06fb101c029e90caac67b91fd5139fc
MD5 bd0e122777e42c03a86e0dae284efab6
SHA1 77f4ac7c87853b059a03381e76301d3130412406
SHA512 fc3c5e1c8538bb19756f7e75b32309052c825a2482a4a3c9415481f208392a65f110ad6fd0371fc06d02afaf4ad4d6b66f8cd87174019ae1351fb395046a70a0
TLSH
T1365142B8A03DDD2B372A99EFF184F8C463EFBD569B94496341077041DC6B4F02952178
MD5 SHA1 SHA512 TLSH

Submit Download

memory/1740-23-0x0000000006140000-0x0000000006280000-memory.dmp

Download

memory/1740-28-0x0000000006140000-0x0000000006280000-memory.dmp

Download

memory/1740-36-0x0000000006140000-0x0000000006280000-memory.dmp

Download

memory/1740-31-0x0000000000F40000-0x0000000001376000-memory.dmp

Download

memory/1740-224-0x0000000006140000-0x0000000006280000-memory.dmp

Download

memory/1740-13-0x0000000000F40000-0x0000000001376000-memory.dmp

Download

memory/1740-14-0x0000000000F20000-0x0000000000F21000-memory.dmp

Download

memory/1740-6-0x0000000000F20000-0x0000000000F21000-memory.dmp

Download

memory/1740-197-0x0000000000F40000-0x0000000001376000-memory.dmp

Download

memory/1740-22-0x0000000006140000-0x0000000006280000-memory.dmp

Download

memory/1740-29-0x0000000006140000-0x0000000006280000-memory.dmp

Download

memory/1740-32-0x0000000006140000-0x0000000006280000-memory.dmp

Download

memory/1740-136-0x0000000006140000-0x0000000006280000-memory.dmp

Download

memory/1740-72-0x0000000006140000-0x0000000006280000-memory.dmp

Download

memory/1740-54-0x0000000000F40000-0x0000000001376000-memory.dmp

Download

memory/1740-38-0x0000000006140000-0x0000000006280000-memory.dmp

Download

memory/1740-37-0x0000000006140000-0x0000000006280000-memory.dmp

Download

memory/1880-257-0x000000000D790000-0x000000000DAB7000-memory.dmp

Download

memory/2420-349-0x0000025001900000-0x0000025001920000-memory.dmp

Download

memory/2420-339-0x00000250001E0000-0x00000250002E0000-memory.dmp

Download

memory/2420-370-0x0000025001B40000-0x0000025001B60000-memory.dmp

Download

memory/2420-351-0x0000025001D00000-0x0000025001E00000-memory.dmp

Download

memory/2420-387-0x00000250146E0000-0x0000025014700000-memory.dmp

Download

memory/2420-340-0x00000250001E0000-0x00000250002E0000-memory.dmp

Download

memory/2420-341-0x00000250001E0000-0x00000250002E0000-memory.dmp

Download

memory/6068-0-0x00000000006D0000-0x00000000007AC000-memory.dmp

Download

memory/6068-225-0x00000000006D0000-0x00000000007AC000-memory.dmp

Download

memory/6068-12-0x00000000006D0000-0x00000000007AC000-memory.dmp

Download