Analysis

  • max time kernel
    144s
  • max time network
    149s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    07/08/2026, 00:15

General

  • Target
    Installer.exe
  • Size 2.0MB
  • Sample260807-aj7bdatfrc
  • SHA256 527c5898197833458807dda016cd37bc54ca82294d11ede24302d5084ec858b0
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Installer.exe
    "C:\Users\Admin\AppData\Local\Temp\Installer.exe"
    1⤵
    • Enumerates system info in registry
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:3356
    • C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\ProjectAvelis.exe
      "C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\ProjectAvelis.exe"
      2⤵
      • Executes dropped EXE
      PID:2748

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        AvelisPortable.zip

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\AvelisPortable.zip
        • Size 4.5MB
        • SHA256 d4949acc4521b9b8e426b2b3cf4efeae7a12cbd7e64c08371f330f86c85716ea
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Avelis2.ico

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\Avelis2.ico
        • Size 422KB
        • SHA256 74c165a2c6157eb5d163e54802b3331467cca0a969dfc26cd7ae0c8ada5cc943
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Comfortaa-VariableFont_wght.ttf

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\Fonts\Comfortaa-VariableFont_wght.ttf
        • Size 199KB
        • SHA256 e4012e720b6d0f74b435e2aeeb6ea8bd301882d8884f07ea804949fb53e9f2b7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Microsoft.Web.WebView2.Core.xml

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\Microsoft.Web.WebView2.Core.xml
        • Size 567KB
        • SHA256 ea7eca798d272116776e51fda84fc841259e74fefdf3326db1c213cffbe757d1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Microsoft.Web.WebView2.WinForms.xml

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\Microsoft.Web.WebView2.WinForms.xml
        • Size 40KB
        • SHA256 96e468637ee3322db9851e38c0a3d7c32f0d11f60566b47ace2c91ec66179ac8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Microsoft.Web.WebView2.Wpf.xml

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\Microsoft.Web.WebView2.Wpf.xml
        • Size 139KB
        • SHA256 3c68c150d60d39fbbe8b0801ffe773d353b211988eca095671bb3fc8192643c3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Newtonsoft.Json.xml

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\Newtonsoft.Json.xml
        • Size 716KB
        • SHA256 a9c6be122c118de22c72f9f9e5d9ef787492d24ad91d2c9c23b8d1f0e5f2ef3c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ProjectAvelis.exe

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe
        • Size 3.4MB
        • SHA256 0ace5e8b0d49f1150d1e95eaa45e71543c3d57d236429c394193a11de125ce55
        • MD5 SHA1 SHA512 SSDEEP TLSH

        BrowserMetrics-6A28B25A-6790.pma

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\BrowserMetrics\BrowserMetrics-6A28B25A-6790.pma
        • Size 1.2MB
        • SHA256 a8092a23e3e8eb66ec30b63fb390dfc8065ea06a6e77f6d88c958d2234098af7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        settings.dat

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Crashpad\settings.dat
        • Size 288B
        • SHA256 ce40fe6a73c1ea03bebb5c4974ad6718929deb038166a1144c8852be5b5f7287
        • MD5 SHA1 SHA512 TLSH

        throttle_store.dat

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Crashpad\throttle_store.dat
        • Size 20B
        • SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
        • MD5 SHA1 SHA512

        BookmarkMergedSurfaceOrdering

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\BookmarkMergedSurfaceOrdering
        • Size 6B
        • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
        • MD5 SHA1 SHA512

        BrowsingTopicsSiteData

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\BrowsingTopicsSiteData
        • Size 28KB
        • SHA256 c2cd3160364596ca2b2138fe2a79cf50ac2cfd7e06a3a7442d03169e89fe5602
        • MD5 SHA1 SHA512 SSDEEP TLSH

        BrowsingTopicsState

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\BrowsingTopicsState
        • Size 414B
        • SHA256 8ffa55d050788339d053725de7d9215ff3ef44c74b8af3711b53961c4cc81323
        • MD5 SHA1 SHA512 TLSH

        55403185ca18d95d_0

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\Code Cache\js\55403185ca18d95d_0
        • Size 252B
        • SHA256 f53ac0855017ee4913a28f14bffb91f77f24e1f69e91257dc185bbc91f06476c
        • MD5 SHA1 SHA512 TLSH

        60b45edeca7f9e4d_0

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\Code Cache\js\60b45edeca7f9e4d_0
        • Size 256B
        • SHA256 86f4fcac35a0a1b82a3986db6277e2405749434092490733abb7eb544028ffd2
        • MD5 SHA1 SHA512 TLSH

        797bdede150ad255_0

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\Code Cache\js\797bdede150ad255_0
        • Size 697B
        • SHA256 0d292a75b041b879d034ebdb172c3bd370b2d8be90cc30c9124e6be0c45295a6
        • MD5 SHA1 SHA512 TLSH

        8d63adecd11b7dd1_0

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\Code Cache\js\8d63adecd11b7dd1_0
        • Size 47KB
        • SHA256 a3253470ec087397105941b04021f676ff5ad4e0d1a28d7a69187714191a5864
        • MD5 SHA1 SHA512 SSDEEP TLSH

        8f45b2e9411d4405_0

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\Code Cache\js\8f45b2e9411d4405_0
        • Size 28KB
        • SHA256 e9bae879da1eb5d59c75595e25315e8905fe230d04f5ba9dece261787c5fb890
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bb35bb80298224a7_0

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\Code Cache\js\bb35bb80298224a7_0
        • Size 240B
        • SHA256 4f088cd117e395ccdc397e54da91172d8de1e3cdf51807db81152a7c8cbc1890
        • MD5 SHA1 SHA512 TLSH

        cfc115e29f3cc8c8_0

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\Code Cache\js\cfc115e29f3cc8c8_0
        • Size 811KB
        • SHA256 8e55141964839e77adc22a84ee185ccdeb25b08a6f81fa9f0b882c677b319526
        • MD5 SHA1 SHA512 SSDEEP TLSH

        the-real-index

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
        • Size 216B
        • SHA256 8633123915de9794899bbb6aa233199f7666f5e615865347f4482b56f8db96f1
        • MD5 SHA1 SHA512 TLSH

        index

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\Code Cache\wasm\index
        • Size 24B
        • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
        • MD5 SHA1 SHA512

        the-real-index

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\Code Cache\wasm\index-dir\the-real-index
        • Size 48B
        • SHA256 6abf597e483fea8bd85335ae493f5f80ecb164eec165d34eebe2cc456993d2bd
        • MD5 SHA1 SHA512

        DIPS

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\DIPS
        • Size 36KB
        • SHA256 a52b3474ff0d458f52a62e6769e7da96f8250726dd253949331527c5f58da55f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        index

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\DawnGraphiteCache\index
        • Size 256KB
        • SHA256 4ab43d9d703f6af375a4a23c5e1aef3a8ef205788bd0611757ad2827af39fa98
        • MD5 SHA1 SHA512 SSDEEP

        data_0

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\DawnWebGPUCache\data_0
        • Size 8KB
        • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
        • MD5 SHA1 SHA512 SSDEEP

        data_1

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\DawnWebGPUCache\data_1
        • Size 264KB
        • SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
        • MD5 SHA1 SHA512 SSDEEP

        data_2

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\DawnWebGPUCache\data_2
        • Size 8KB
        • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
        • MD5 SHA1 SHA512 SSDEEP

        data_3

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\DawnWebGPUCache\data_3
        • Size 8KB
        • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
        • MD5 SHA1 SHA512 SSDEEP

        index

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\DawnWebGPUCache\index
        • Size 256KB
        • SHA256 8ab6a625930976871d91f907a05440a8da85eacf03d12d75027f63eb034938de
        • MD5 SHA1 SHA512 SSDEEP

        EdgeJourneys.db

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\EdgeJourneys\EdgeJourneys.db
        • Size 112KB
        • SHA256 f0179416d953aa59a6f182472384021e6d03c2292494c8c8ab87a7e25476f522
        • MD5 SHA1 SHA512 SSDEEP TLSH

        LOG

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\Extension Rules\LOG
        • Size 395B
        • SHA256 0094660a9b8d6bea0d226e58fe7d31c50b02ab06f8ddf9e1c700d7062e3d4815
        • MD5 SHA1 SHA512 TLSH

        000003.log

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\Extension Scripts\000003.log
        • Size 38B
        • SHA256 1c43a1bda1e458863c46dfae7fb43bfb3e27802169f37320399b1dd799a819ac
        • MD5 SHA1 SHA512

        CURRENT

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\Extension Scripts\CURRENT
        • Size 16B
        • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
        • MD5 SHA1 SHA512

        LOG

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\Extension Scripts\LOG
        • Size 399B
        • SHA256 53f8a749c7af00baf67816d485c1fd10a92a7a0a80b600268b86aa85a50251e0
        • MD5 SHA1 SHA512 TLSH

        MANIFEST-000001

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\Extension Scripts\MANIFEST-000001
        • Size 41B
        • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
        • MD5 SHA1 SHA512

        000003.log

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\Extension State\000003.log
        • Size 114B
        • SHA256 e2610960c3757d1757f206c7b84378efa22d86dcf161a98096a5f0e56e1a367e
        • MD5 SHA1 SHA512

        LOG

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\Extension State\LOG
        • Size 433B
        • SHA256 7d71a39b65bdfaf1d9357da07d7ea1265431597c50fab0393f7993b07de5a96a
        • MD5 SHA1 SHA512 TLSH

        LOG.old

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\Extension State\LOG.old
        • Size 430B
        • SHA256 93a37968ac04b54badcafedcec83f8a80855f41d8aecbd1a5ff8dfc4f6c208db
        • MD5 SHA1 SHA512 TLSH

        ExtensionActivityEdge

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\ExtensionActivityEdge
        • Size 32KB
        • SHA256 342d1bc8648476f13af9c880a64d8d0746dc21930a3fbf5480922b5d39006ad6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Favicons

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\Favicons
        • Size 20KB
        • SHA256 661a02e5b0fc01297749298ee1f26d89a4cbb28f155be20ce75fb7a32d883687
        • MD5 SHA1 SHA512 SSDEEP TLSH

        index

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\GPUCache\index
        • Size 256KB
        • SHA256 b605a57aef492f93cfa4fa79f936236b69b60585d562f479ff859a7bbf8e56bf
        • MD5 SHA1 SHA512 SSDEEP

        History

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\History
        • Size 204KB
        • SHA256 5cefa7de7581ea0e1c69af07f80c6f9c79af5c1a3dfb9dbad3a613cdf74e8e51
        • MD5 SHA1 SHA512 SSDEEP TLSH

        000003.log

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\Local Storage\leveldb\000003.log
        • Size 30B
        • SHA256 8bd2ea70a0b70c91de138a5b87c7936c6a6fa7c4275c54b97f4ef0ccc5b79bb4
        • MD5 SHA1 SHA512

        LOG

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\Local Storage\leveldb\LOG
        • Size 445B
        • SHA256 bd7afc1e08dba3b804aefad48b6d7720d223a50d257ce6daaf8d03da723e7044
        • MD5 SHA1 SHA512 TLSH

        LOG.old

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\Local Storage\leveldb\LOG.old
        • Size 448B
        • SHA256 90ac4f1df675fc1d4037f1fd7b4090d752f3f3d7abc685964ac8564772e4c2f8
        • MD5 SHA1 SHA512 TLSH

        Login Data For Account

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\Login Data For Account
        • Size 42KB
        • SHA256 baa9bf07cf8be89ad1dad08fc5db89c9d7114ec70c95c0906ffcb4a9171231f7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Network Action Predictor

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\Network Action Predictor
        • Size 52KB
        • SHA256 e3da67b420aaba6e24542b6614f3f7de2744a18732f3f9cebe9456e4a1813fc6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Device Bound Sessions

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\Network\Device Bound Sessions
        • Size 20KB
        • SHA256 943cd4adbef538c63d8202c83394d0b683a97c477ecf125fc16246f823d6c31b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Network Persistent State

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\Network\Network Persistent State
        • Size 111B
        • SHA256 f5e224a52f6ad7e0c235d238c3e2983c5c0b314c552f20ff2affb4472ac866f5
        • MD5 SHA1 SHA512 TLSH

        Reporting and NEL

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\Network\Reporting and NEL
        • Size 36KB
        • SHA256 777ce9ea5c5b6dfd02d8f5fa19004809a3351ef158757b96fccd642d4df8d22d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        SCT Auditing Pending Reports

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\Network\SCT Auditing Pending Reports
        • Size 2B
        • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
        • MD5 SHA1 SHA512

        Sdch Dictionaries

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\Network\Sdch Dictionaries
        • Size 40B
        • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
        • MD5 SHA1 SHA512

        Trust Tokens

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\Network\Trust Tokens
        • Size 36KB
        • SHA256 96c6bb59ca9c0e33bc09bf2d28b682e1785ee5c6d4f6d15cee322833cc643143
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Preferences

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\Preferences
        • Size 9KB
        • SHA256 7e516a71e60d51c016e49911ccecf2011d1870f8967462cfe7ab1f421a6a87ad
        • MD5 SHA1 SHA512 SSDEEP TLSH

        README

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\README
        • Size 182B
        • SHA256 a0c9abae18599f0a65fc654ad36251f6330794bea66b718a09d8b297f3e38e87
        • MD5 SHA1 SHA512 TLSH

        Safe Browsing Cookies

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\Safe Browsing Network\Safe Browsing Cookies
        • Size 20KB
        • SHA256 10a593409c1fdffdf2f4cf71702c8e6a1452a91f0924f421ce0be5984d969ef6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Secure Preferences

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\Secure Preferences
        • Size 9KB
        • SHA256 e606f3839c73f31dfe47d4586079605ee6b406f3a8f108f3faa4de880e14ae62
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ServerCertificate

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\ServerCertificate
        • Size 20KB
        • SHA256 3f3c52eb59e5232a77d706b68b4b33b2a08cf4931f9204b422a7a4f4cc31b8d5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        000003.log

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\Session Storage\000003.log
        • Size 2KB
        • SHA256 bee53113d6ed7f24f5854ff5741f6bf304d87e1baf9c4e0c17134e42aa037bf8
        • MD5 SHA1 SHA512 TLSH

        LOG

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\Session Storage\LOG
        • Size 433B
        • SHA256 7ebba522f37c4c54f3f63f7bbf13257c903f89ed22e135d55522335b1cd20139
        • MD5 SHA1 SHA512 TLSH

        LOG.old

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\Session Storage\LOG.old
        • Size 436B
        • SHA256 f8e1dc2acebf209b2fbd1f4e218a65ed7bbabd428ccd2747f380aca393d85371
        • MD5 SHA1 SHA512 TLSH

        the-real-index

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\Shared Dictionary\cache\index-dir\the-real-index
        • Size 48B
        • SHA256 2e739384e7d4447b4d07c753f700776c834397cb6421f6091f01221ab665d68e
        • MD5 SHA1 SHA512

        db

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\Shared Dictionary\db
        • Size 44KB
        • SHA256 b87da9786c3fb75b92ca41e78f7a8cacba24040a26ad85674782ad2cbf5ad814
        • MD5 SHA1 SHA512 SSDEEP TLSH

        000003.log

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\Site Characteristics Database\000003.log
        • Size 688B
        • SHA256 d551961116f663807aca2a2e330460e2f4bf470a7409f6e47b772a27947eef88
        • MD5 SHA1 SHA512 TLSH

        LOG

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\Site Characteristics Database\LOG
        • Size 464B
        • SHA256 698d0c5e46a5ed2ddae9ede7737527fdfb58f8dd74d89c55ad9e12e12acca66b
        • MD5 SHA1 SHA512 TLSH

        LOG.old

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\Site Characteristics Database\LOG.old
        • Size 464B
        • SHA256 290497833ce2d9c6f487e24d2ff34c33d9ae80bbfa5f56288e26d00904667741
        • MD5 SHA1 SHA512 TLSH

        000003.log

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\Sync Data\LevelDB\000003.log
        • Size 65B
        • SHA256 8ff00d859349a3ea206706cdd3fa2762ae7c8efe2fdd33a95a72fee45aac6bc4
        • MD5 SHA1 SHA512 TLSH

        LOG

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\Sync Data\LevelDB\LOG
        • Size 437B
        • SHA256 1db96cb719a9b22d0c162856a300f09eb3ff5175d5c5f0b2a51c5478567d8342
        • MD5 SHA1 SHA512 TLSH

        LOG.old

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\Sync Data\LevelDB\LOG.old
        • Size 440B
        • SHA256 1765026b3b51e7fc2479aa475b945e7b65bc4f58e8b9e868323e772355849ded
        • MD5 SHA1 SHA512 TLSH

        Top Sites

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\Top Sites
        • Size 20KB
        • SHA256 f1f8ca9ebf356b2bd59235bb8f2f371e49e6a0559b1b73a3d058f311ed301ed9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Vpn Tokens

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\Vpn Tokens
        • Size 28KB
        • SHA256 160ff751f2df2a94235a1f4bcf67edd7b4a7d81bb4e5ee51fd742ca48fe1fb65
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Web Data

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\Web Data
        • Size 222KB
        • SHA256 c4940fb5af161434cf62fb8710f4c77711c0149eb59c07cce95a3aad2db735f8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        favorites_diagnostic.log

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\favorites_diagnostic.log
        • Size 620B
        • SHA256 b12c52015d6278df1a1a7c88516671995802051a7b7b35fc7d74fd5f3609977b
        • MD5 SHA1 SHA512 TLSH

        heavy_ad_intervention_opt_out.db

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\heavy_ad_intervention_opt_out.db
        • Size 16KB
        • SHA256 5a5f703468585e4cf747dc1baf0457a275d2dd31e84f2de9d18aab3e6d6bf568
        • MD5 SHA1 SHA512 SSDEEP TLSH

        000003.log

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\shared_proto_db\000003.log
        • Size 4KB
        • SHA256 23551850e337204cb71d0e5d4f56e006b8063475bbe7e3419cf218b4f7476c17
        • MD5 SHA1 SHA512 SSDEEP TLSH

        LOG

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\shared_proto_db\LOG
        • Size 436B
        • SHA256 f7fdda3a0077be0c222cc26b02a9b36e3227510b330da6c39a09aa486231d572
        • MD5 SHA1 SHA512 TLSH

        LOG.old

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\shared_proto_db\LOG.old
        • Size 430B
        • SHA256 e390711cfe208823c1b7e34ddc4a581ebbb858ce70736686be73c89bb5452772
        • MD5 SHA1 SHA512 TLSH

        000003.log

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\shared_proto_db\metadata\000003.log
        • Size 1KB
        • SHA256 01cb1c7ae25a0d9085506a73c4aba0d88ced1d9d7994f48cdad8c057b32b52f9
        • MD5 SHA1 SHA512 TLSH

        LOG

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\shared_proto_db\metadata\LOG
        • Size 454B
        • SHA256 270d62de4971a210ea617568c3e9bc532737fc1f8c0a7c362958185f40fb74f3
        • MD5 SHA1 SHA512 TLSH

        LOG.old

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Default\shared_proto_db\metadata\LOG.old
        • Size 448B
        • SHA256 f5e6de1bb2e16a79a155713e7b3127388e91f13d4db682eec82245436483d67d
        • MD5 SHA1 SHA512 TLSH

        data_0

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\GrShaderCache\data_0
        • Size 44KB
        • SHA256 319f6b2366094edd178019651e6e2cd0ac7ac7064ead428a11e003014d79bea0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        data_1

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\GrShaderCache\data_1
        • Size 264KB
        • SHA256 f74a504a4fa8056b2586d35107508c1b2ed7f4aea9b6cb361f7a7538d8eb40c7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        data_3

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\GrShaderCache\data_3
        • Size 4.0MB
        • SHA256 d65b84456a51e157e72858973b5419240508db9b8c414b2f87720e82ad2e6806
        • MD5 SHA1 SHA512 SSDEEP TLSH

        f_000001

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\GrShaderCache\f_000001
        • Size 16KB
        • SHA256 e0e29d2e86fbd9da234656df47d7316f52e0577916fa2dd8231b1da89d28b16e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        index

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\GrShaderCache\index
        • Size 256KB
        • SHA256 597827bd4142c2e04911fd8d1e63c6f5f50baa59ca0f3e85aee080ab0d795d8c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        index

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\GraphiteDawnCache\index
        • Size 256KB
        • SHA256 0da53c71fc811fb4da37e7bf9c32da8ac6f678dadd40a9d3eb10d8454e1bb146
        • MD5 SHA1 SHA512 SSDEEP

        Last Version

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Last Version
        • Size 13B
        • SHA256 10e55d7ef6033c5e9eb364082fd645c5663769c9f2eacae869b52c18fefe1e24
        • MD5 SHA1 SHA512

        Local State

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Local State
        • Size 10KB
        • SHA256 572ff48089337a814b227120a0b2d9d2d5087222d199f2313e695627b6c57f67
        • MD5 SHA1 SHA512 SSDEEP TLSH

        index

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\ShaderCache\index
        • Size 256KB
        • SHA256 7d9dfbddb435fc0d189318c724c292cf4fa119b721e96bbe5a8bb1ef67f9efe8
        • MD5 SHA1 SHA512 SSDEEP

        customSettings

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\SmartScreen\RemoteData\customSettings
        • Size 47B
        • SHA256 d8d672f953e823063955bd9981532fc3453800c2e74c0cc3653d091088abd3b3
        • MD5 SHA1 SHA512

        customSettings_F95BA787499AB4FA9EFFF472CE383A14

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\SmartScreen\RemoteData\customSettings_F95BA787499AB4FA9EFFF472CE383A14
        • Size 35B
        • SHA256 2bae8302f9bd2d87ae26acf692663df1639b8e2068157451da4773bd8bd30a2b
        • MD5 SHA1 SHA512

        edgeSettings

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\SmartScreen\RemoteData\edgeSettings
        • Size 18B
        • SHA256 42ccb5159b168dbe5d5ddf026e5f7ed3dbf50873cfe47c7c3ef0677bb07b90d4
        • MD5 SHA1 SHA512

        edgeSettings_2.0-0

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\SmartScreen\RemoteData\edgeSettings_2.0-0
        • Size 3KB
        • SHA256 e6beb5ac43dfa3e05ca3c40c4e5de7d763e2e0580203ad9034c6f0527ac0e45b
        • MD5 SHA1 SHA512 TLSH

        topTraffic

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\SmartScreen\RemoteData\topTraffic
        • Size 50B
        • SHA256 eb28e8ed7c014f211bd81308853f407df86aebb5f80f8e4640c608cd772544c2
        • MD5 SHA1 SHA512 TLSH

        topTraffic_170540185939602997400506234197983529371

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\SmartScreen\RemoteData\topTraffic_170540185939602997400506234197983529371
        • Size 561KB
        • SHA256 c1ce928fbef4ef5a4207abafd9ab6382cc29d11ddecc215314b0522749ef6a5a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        uriCache

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\SmartScreen\local\uriCache
        • Size 9B
        • SHA256 3d6f3f8f1456d7ce78dd9dfa8187318b38e731a658e513f561ee178766e74d39
        • MD5 SHA1 SHA512

        uriCache_

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\SmartScreen\local\uriCache_
        • Size 209B
        • SHA256 e4fb027f6e46207a08b272129859f7e15519a3d52b64f5929c1deb29c089f18c
        • MD5 SHA1 SHA512 TLSH

        Variations

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\Variations
        • Size 85B
        • SHA256 b26da4f8c7e283aa74386da0229d66af14a37986b8ca828e054fc932f68dd557
        • MD5 SHA1 SHA512 TLSH

        metadata.json

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\ProjectAvelis.exe.WebView2\EBWebView\component_crx_cache\metadata.json
        • Size 13B
        • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
        • MD5 SHA1 SHA512

        script.luau

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\Scripts\script.luau
        • Size 41B
        • SHA256 14436fd01d068f54b23e0ab39841b93f5899b9a147acd7075b67d80ad1273304
        • MD5 SHA1 SHA512

        tabs.json

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\Scripts\tabs.json
        • Size 246B
        • SHA256 75678cf7be3ac8b00dfcc3dd2af908cc632b7adb9bd57ce9b9f4d4bddd628516
        • MD5 SHA1 SHA512 TLSH

        System.CodeDom.xml

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\System.CodeDom.xml
        • Size 366KB
        • SHA256 96e5c9847ce6eb70b7d054c16da430a5f66d722289881ec11a5dc679e087c913
        • MD5 SHA1 SHA512 SSDEEP TLSH

        WebView2Loader.dll

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\runtimes\win-x64\native\WebView2Loader.dll
        • Size 155KB
        • SHA256 bb5fda5f2d3aae5e0977ab28d8a8a00acfd63d73748aaac32daf4fc6645b6677
        • MD5 SHA1 SHA512 SSDEEP TLSH

        version.txt

        • Path C:\Users\Admin\AppData\Local\Avelis\1.1.3.5\extracted\Obfuscated\version.txt
        • Size 7B
        • SHA256 1aa5664faf78719fe2e4fe1a9acddc06774e0fac36ab5658597fe60059a0fbda
        • MD5 SHA1 SHA512

        memory/2748-9373-0x00007FFE51830000-0x00007FFE521D4000-memory.dmp

        memory/2748-9375-0x00007FFE51830000-0x00007FFE521D4000-memory.dmp

        memory/2748-9374-0x00007FFE51830000-0x00007FFE521D4000-memory.dmp

        memory/2748-9364-0x00007FFE51830000-0x00007FFE521D4000-memory.dmp

        memory/2748-9372-0x00007FFE51830000-0x00007FFE521D4000-memory.dmp

        memory/2748-9370-0x000002A230B20000-0x000002A230BC2000-memory.dmp

        memory/2748-9371-0x00007FFE51830000-0x00007FFE521D4000-memory.dmp

        memory/2748-9369-0x00007FFE51830000-0x00007FFE521D4000-memory.dmp

        memory/2748-9367-0x00007FFE51830000-0x00007FFE521D4000-memory.dmp

        memory/2748-9368-0x000002A218170000-0x000002A21817E000-memory.dmp

        memory/2748-9366-0x00007FFE51830000-0x00007FFE521D4000-memory.dmp

        memory/2748-9365-0x000002A216150000-0x000002A2164B0000-memory.dmp

        memory/3356-12-0x00007FFE51830000-0x00007FFE521D4000-memory.dmp

        memory/3356-9-0x00007FFE51830000-0x00007FFE521D4000-memory.dmp

        memory/3356-3-0x00007FFE51830000-0x00007FFE521D4000-memory.dmp

        memory/3356-2-0x00007FFE51830000-0x00007FFE521D4000-memory.dmp

        memory/3356-1-0x000001CA55050000-0x000001CA5525E000-memory.dmp

        memory/3356-5-0x00007FFE51830000-0x00007FFE521D4000-memory.dmp

        memory/3356-6-0x00007FFE51830000-0x00007FFE521D4000-memory.dmp

        memory/3356-7-0x00007FFE51830000-0x00007FFE521D4000-memory.dmp

        memory/3356-8-0x00007FFE51830000-0x00007FFE521D4000-memory.dmp

        memory/3356-4-0x000001CA6F7C0000-0x000001CA6F9DE000-memory.dmp

        memory/3356-10-0x00007FFE51830000-0x00007FFE521D4000-memory.dmp

        memory/3356-11-0x00007FFE51830000-0x00007FFE521D4000-memory.dmp

        memory/3356-15-0x000001CA73DE0000-0x000001CA73DF2000-memory.dmp

        memory/3356-0-0x00007FFE519BF000-0x00007FFE519C0000-memory.dmp

        memory/3356-454-0x00007FFE51830000-0x00007FFE521D4000-memory.dmp

        memory/3356-453-0x00007FFE51830000-0x00007FFE521D4000-memory.dmp

        memory/3356-16-0x000001CA73DC0000-0x000001CA73DCA000-memory.dmp

        memory/3356-9376-0x00007FFE51830000-0x00007FFE521D4000-memory.dmp