Overview
overview
6Static
static
4FPSDoctor_...SS.rar
windows10-2004-x64
3FPSDoctor_...SS.rar
windows11-ltsc_2024-x64
1FPSDoctor_...de.bat
windows10-2004-x64
3FPSDoctor_...de.bat
windows11-ltsc_2024-x64
3FPSDoctor_...de.bat
windows10-2004-x64
3FPSDoctor_...de.bat
windows11-ltsc_2024-x64
3FPSDoctor_...OI.pdf
windows10-2004-x64
3FPSDoctor_...OI.pdf
windows11-ltsc_2024-x64
3FPSDoctor_...nt.bat
windows10-2004-x64
3FPSDoctor_...nt.bat
windows11-ltsc_2024-x64
3FPSDoctor_...es.bat
windows10-2004-x64
3FPSDoctor_...es.bat
windows11-ltsc_2024-x64
3FPSDoctor_...ed.bat
windows10-2004-x64
6FPSDoctor_...ed.bat
windows11-ltsc_2024-x64
6FPSDoctor_...ed.reg
windows10-2004-x64
1FPSDoctor_...ed.reg
windows11-ltsc_2024-x64
1FPSDoctor_...ed.reg
windows10-2004-x64
1FPSDoctor_...ed.reg
windows11-ltsc_2024-x64
1FPSDoctor_...ed.reg
windows10-2004-x64
1FPSDoctor_...ed.reg
windows11-ltsc_2024-x64
1FPSDoctor_...de.reg
windows10-2004-x64
1FPSDoctor_...de.reg
windows11-ltsc_2024-x64
1FPSDoctor_...de.bat
windows10-2004-x64
3FPSDoctor_...de.bat
windows11-ltsc_2024-x64
3FPSDoctor_...le.bat
windows10-2004-x64
3FPSDoctor_...le.bat
windows11-ltsc_2024-x64
3FPSDoctor_...ed.bat
windows10-2004-x64
3FPSDoctor_...ed.bat
windows11-ltsc_2024-x64
3FPSDoctor_...ed.bat
windows10-2004-x64
3FPSDoctor_...ed.bat
windows11-ltsc_2024-x64
3FPSDoctor_...ed.bat
windows10-2004-x64
3FPSDoctor_...ed.bat
windows11-ltsc_2024-x64
3General
- Target FPSDoctor_OPTI_EXPRESS.rar
- Size 3.8MB
- Sample260824-v71tqa1fkd
- SHA256 d26985eef4c5540c59d807b3155abf54fdc2615705b4a331a114144acd2254a0
- MD5 8a5535ff64ee7d7a2f8619d54ac12572
- SHA1 8a4dbcb051741b95dfb447053220f61034cc7fed
- SHA512 0da29c142fe85f91d3f7d20feaac9aeba6c61b4fe4f41cb31c8fa799d904fddf38d0ace8d01215688b67e8b45f564366f9bb80069d3d9ec5e139849980f5ebe9
- SSDEEP 98304:kKpmkhT74LtrHzHAhAWQYUixBl5jVDixFkkpZkY:nmQTwtrHzHa8Azl5jVoFkkpZkY
- TLSH T1E41633E0DE45D0EC88B380AEFA1E6E3B7352D5DDB71C56E6842C4E1C6459BE044983FA
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
FPSDoctor_OPTI_EXPRESS.rar
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
FPSDoctor_OPTI_EXPRESS.rar
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
FPSDoctor_OPTI_EXPRESS/FPSDoctorBoostMode.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
FPSDoctor_OPTI_EXPRESS/FPSDoctorBoostMode.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
FPSDoctor_OPTI_EXPRESS/FPSDoctorSafeMode.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
FPSDoctor_OPTI_EXPRESS/FPSDoctorSafeMode.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
FPSDoctor_OPTI_EXPRESS/LISEZ_MOI.pdf
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
FPSDoctor_OPTI_EXPRESS/LISEZ_MOI.pdf
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
FPSDoctor_OPTI_EXPRESS/Scripts_BoostMode/FPSDoctorCreateRestorePoint.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
FPSDoctor_OPTI_EXPRESS/Scripts_BoostMode/FPSDoctorCreateRestorePoint.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
FPSDoctor_OPTI_EXPRESS/Scripts_BoostMode/FPSDoctorRemoveTempFiles.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
FPSDoctor_OPTI_EXPRESS/Scripts_BoostMode/FPSDoctorRemoveTempFiles.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
FPSDoctor_OPTI_EXPRESS/Scripts_BoostMode/FPSDoctor_Disable_Hibernation_Advanced.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
FPSDoctor_OPTI_EXPRESS/Scripts_BoostMode/FPSDoctor_Disable_Hibernation_Advanced.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
FPSDoctor_OPTI_EXPRESS/Scripts_BoostMode/FPSDoctor_Disable_Location_Advanced.reg
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
FPSDoctor_OPTI_EXPRESS/Scripts_BoostMode/FPSDoctor_Disable_Location_Advanced.reg
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
FPSDoctor_OPTI_EXPRESS/Scripts_BoostMode/FPSDoctor_Disable_Telemetry_Advanced.reg
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
FPSDoctor_OPTI_EXPRESS/Scripts_BoostMode/FPSDoctor_Disable_Telemetry_Advanced.reg
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
FPSDoctor_OPTI_EXPRESS/Scripts_BoostMode/FPSDoctor_Disable_Tracking_Advanced.reg
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
FPSDoctor_OPTI_EXPRESS/Scripts_BoostMode/FPSDoctor_Disable_Tracking_Advanced.reg
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
FPSDoctor_OPTI_EXPRESS/Scripts_BoostMode/FPSDoctor_Effets_Visuels_SafeMode.reg
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
FPSDoctor_OPTI_EXPRESS/Scripts_BoostMode/FPSDoctor_Effets_Visuels_SafeMode.reg
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
FPSDoctor_OPTI_EXPRESS/Scripts_BoostMode/FPSDoctor_Gaming_Tweaks_SafeMode.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
FPSDoctor_OPTI_EXPRESS/Scripts_BoostMode/FPSDoctor_Gaming_Tweaks_SafeMode.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
FPSDoctor_OPTI_EXPRESS/Scripts_BoostMode/FPSDoctor_Mode_Performance_Optimale.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
FPSDoctor_OPTI_EXPRESS/Scripts_BoostMode/FPSDoctor_Mode_Performance_Optimale.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
FPSDoctor_OPTI_EXPRESS/Scripts_BoostMode/FPSDoctor_Remove_Bloatware_Advanced.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
FPSDoctor_OPTI_EXPRESS/Scripts_BoostMode/FPSDoctor_Remove_Bloatware_Advanced.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
FPSDoctor_OPTI_EXPRESS/Scripts_BoostMode/FPSDoctor_Reset_Network_Advanced.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
FPSDoctor_OPTI_EXPRESS/Scripts_BoostMode/FPSDoctor_Reset_Network_Advanced.bat
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral31
Sample
FPSDoctor_OPTI_EXPRESS/Scripts_BoostMode/FPSDoctor_Services_Advanced.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
FPSDoctor_OPTI_EXPRESS/Scripts_BoostMode/FPSDoctor_Services_Advanced.bat
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target FPSDoctor_OPTI_EXPRESS.rar
- Size 3.8MB
- SHA256 d26985eef4c5540c59d807b3155abf54fdc2615705b4a331a114144acd2254a0
- MD5 8a5535ff64ee7d7a2f8619d54ac12572
- SHA1 8a4dbcb051741b95dfb447053220f61034cc7fed
- SHA512 0da29c142fe85f91d3f7d20feaac9aeba6c61b4fe4f41cb31c8fa799d904fddf38d0ace8d01215688b67e8b45f564366f9bb80069d3d9ec5e139849980f5ebe9
- SSDEEP 98304:kKpmkhT74LtrHzHAhAWQYUixBl5jVDixFkkpZkY:nmQTwtrHzHa8Azl5jVoFkkpZkY
- TLSH T1E41633E0DE45D0EC88B380AEFA1E6E3B7352D5DDB71C56E6842C4E1C6459BE044983FA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target FPSDoctor_OPTI_EXPRESS/FPSDoctorBoostMode.bat
- Size 1KB
- SHA256 34df62897f22bfc1dfcbf965a986e9dddee35d23f856dcdeb06acbda395d96d8
- MD5 03d58af5e1156bbdc516362ac0b98e85
- SHA1 34963fdb4b17aff5fa68a761839345c38bb1faf6
- SHA512 eec5fa33a4f73883dd283e6e5df41bb2332ed5e50d7d6b57f9d1fdc6d6033ae9c58872f813ddebb2c494868069d0c3f05d0ad05d7a9b49d5e1e020ea974ccfc7
- TLSH T10241AACB76497076084210132D3E419C2659A4C7E2DCFD647A9E8C686E4CFD47BD9B72
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target FPSDoctor_OPTI_EXPRESS/FPSDoctorSafeMode.bat
- Size 1KB
- SHA256 53c4f15816c704a4ae7cb221b099813da3a5bf650923a4ce1f0ed8ca3f142666
- MD5 dfcf8a13394063dc13eda1e625ae61a0
- SHA1 81ff50c808d4127abe3862e9e138579041a73921
- SHA512 67b11f7aac923f75e358d85c60bda0afd0cbcd7fdd9c8fd87bcc17425955f37eeb419e399c4801a675a5f5c22b7e6c6be2a4c1268d0fa258126cea0d1074ce95
- TLSH T1E4319ECFA40DA1750C451153391E50CC3A9664F290E8F86CF75A0CA82F1DFD4BB5EE6A
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target FPSDoctor_OPTI_EXPRESS/LISEZ_MOI.pdf
- Size 3.8MB
- SHA256 857284ea34fcf3070b7e0fc3375f87dfa337c4b82e5a9bab77fc1f7a8f4866aa
- MD5 cc621f287440690e378510564b0c0df5
- SHA1 32a3d4623bb0d49820bb2d684920ea1407d26492
- SHA512 3c0c7340852fa8360daf8fd637dd68b7c06c83f8638f9440a92633b5c301429dbf919b03bf9f9da56ab56557909ba9eea549a3318da07058cea0ce6eebe9a1ee
- SSDEEP 98304:h4MSM+Tl6kugvhRxa06qJMCt2t5tZ8Oscz2iD8:P+x6kuM/PitNRD8
- TLSH T114163324EAC43B56C9DDA2F2AA2C7A58EC74BA5D07CA5A11359DC49FC35CE3CBF51080
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target FPSDoctor_OPTI_EXPRESS/Scripts_BoostMode/FPSDoctorCreateRestorePoint.bat
- Size 840B
- SHA256 237f73a43209846a69ba6e500543e86a1e2a9e5e8191223846898955cdf889e7
- MD5 f675bc6b9d5dab63c3899c4fe7e15b8c
- SHA1 07fe1484f4e5df56646864691f73ef23084b1c28
- SHA512 6fe25636b93d6c004d4bb1da2c58aa5b47bf20887760d283f7a1cd6720e91b79282cc742e79bf3d0a1880ff6f077465dd838360d642bbf4fa62031f0b774e442
- TLSH T1F501C096B189760404C7C4237D555417F1B8B80F4288BDA4F8CE4424AF887E03FBE752
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target FPSDoctor_OPTI_EXPRESS/Scripts_BoostMode/FPSDoctorRemoveTempFiles.bat
- Size 1KB
- SHA256 41f2bb1e4b343b3fad069ca73048596866e002a8e74e0553999a3c1bd06e7430
- MD5 5aeb9f707084b7ed5c0ceb1d3c976e70
- SHA1 0aa3619ef68d7bec2b5407f52a8cd1ac0bf51a7a
- SHA512 ddbca6d7774853e57b9ec79a8f24824e23139eb580047e421a4bf66d9d092f4d131d3862d259c5197e299e2d86cf34525ccb41e33214c48b78a79d7216b1671d
- TLSH T17721B17E744404610650A122AE4B61437FA8C17B5361BC02A4931491D7A6FF76BBFAE3
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target FPSDoctor_OPTI_EXPRESS/Scripts_BoostMode/FPSDoctor_Disable_Hibernation_Advanced.bat
- Size 109B
- SHA256 9a7f17d9fc4a5b3b6aa77e55b02af758612757528526e7c944471d0c2c850bab
- MD5 e78ded0232eb6c98ef5f1e213630e1f5
- SHA1 a8de3a3269290c85d5afa9c787da9b4159a01b2c
- SHA512 f9362471b49d239512ec2cacbb7faf8e074113a5937dc34f9ac0d004c14a498f4732489a1605274c35ae104c6367d77e857fdb35c55400b4f79f405629e69e3f
- TLSH T1ECB092B65048313B04C7C176384961833DAA268311108DA7F99AA2658E409FDAB8A632
- MD5 SHA1 SHA512 TLSH
Score6/10-
Power Settings
powercfg controls all configurable power system settings on a Windows system and can be abused to prevent an infected host from locking or shutting down.
-
- Target FPSDoctor_OPTI_EXPRESS/Scripts_BoostMode/FPSDoctor_Disable_Location_Advanced.reg
- Size 147B
- SHA256 cf8ec3eb9be118ceec58b3a8daf5a1824357b8b5a05518741726462ac854a7dc
- MD5 e6763bbfc6f0202158e1787d36a306b1
- SHA1 730d4fa578cdf2d602774d542f90222734f10d46
- SHA512 c826ad4537b0e7a32059bcc576fc9cf9e5e9a94a9d054ed8ab22e99edc6684576428b13ddea8881d0249aeceaa4c8b63d440ffe7e0a3cfc1769d5692eba93e3a
- TLSH T12EC08CBA81118102E3E26600CC476582277A70AF28E39A1100C090C036C38CF831A097
- MD5 SHA1 SHA512 TLSH
Score1/10 -
- Target FPSDoctor_OPTI_EXPRESS/Scripts_BoostMode/FPSDoctor_Disable_Telemetry_Advanced.reg
- Size 142B
- SHA256 61c8608b1d2fa89e2336d6143fd31d2c9ff16fe4542aff858c04ab8e8c3fadc7
- MD5 756ce4bb21da724054bea1f10de85b96
- SHA1 3cc0fef0d40e01f9af90023da1b2b3df2102d473
- SHA512 d48f164c0e78edbfa34cb338123cb1ecca0b2703f15a19b91db32cba48f65e835f50aec9f8df800f80052d10aecade3babbc2ad9217237b626fe06984e341ff1
- TLSH T16DC02B918012A303E2F5F4044D47F1622779F42238E38B2410A0D1D17DC38C3023C05B
- MD5 SHA1 SHA512 TLSH
Score1/10 -
- Target FPSDoctor_OPTI_EXPRESS/Scripts_BoostMode/FPSDoctor_Disable_Tracking_Advanced.reg
- Size 464B
- SHA256 28f2f158e7e12552b0b6d748b65da2a3055f94b2827e2054844fafd0fd31d7b8
- MD5 eff1ebb25ad594dda64c536e577ecc4e
- SHA1 64ffcf81e5654f99790fa3954486492b2b6916a5
- SHA512 1bad88102cd8c2559f2852d360e8f2cf9ac38319cfe35dae1530eb42e4971c7235b869e88eb18dd0b2f58159e2deecc6f0593e07cc122e89c061f8d7e2bd6fa8
- TLSH T108F027614023A247F2A2E0010A53F8522B7AB57731E3AA2000A091527DE3CC2816C0AB
- MD5 SHA1 SHA512 TLSH
Score1/10 -
- Target FPSDoctor_OPTI_EXPRESS/Scripts_BoostMode/FPSDoctor_Effets_Visuels_SafeMode.reg
- Size 422B
- SHA256 48fb51cc5f0070ada0be6e8de74152f5aa1091d1e96297dfa8da90e4280a9d79
- MD5 9b6beaf2bc42015ec09a513ede52942b
- SHA1 38ffc15d258087649d559dc1a6bc9d096dbee427
- SHA512 7234f27d7ab389693329ca7c73837f5af29565b5f7f06e2bbc1e09cad7bb28705358b7b4d2d7df77abc2633cd8d2bcd93d7eea68b2a1b94544ad20aad836336c
- TLSH T151E0A3569C2A6035D2D3332444636B4397E57B8934D680CCD0B814525DC2E47C36B2B3
- MD5 SHA1 SHA512 TLSH
Score1/10 -
- Target FPSDoctor_OPTI_EXPRESS/Scripts_BoostMode/FPSDoctor_Gaming_Tweaks_SafeMode.bat
- Size 1KB
- SHA256 eafd76d3567f5e92cf2ff1cdbbc17a3a07eb6e5c9d977b535807e001e1f78f29
- MD5 2cace58eb4f246bd66292886fc081500
- SHA1 e2078337cbf04b9f5869cf6e395c7751939bf4bd
- SHA512 1c8e946dae0ee8fe6c9a456f20faafb169cbce5de3f0ba0dcbdb6350c8fe882bec101511d3ea1b25cf3ae95ff7e33f8d0cc308d7506bd67a0d46c61d39f222e0
- TLSH T1C131AC53B8406019D983A273BC068412FB3685C355426FD6B9CFA127261BFED537A2D7
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target FPSDoctor_OPTI_EXPRESS/Scripts_BoostMode/FPSDoctor_Mode_Performance_Optimale.bat
- Size 1KB
- SHA256 8a4a47c0c0ea5368eb438af0c2f20f3582a769463cc21f4a368e467d12e91b29
- MD5 0e6424f8a6a779f980730d63185ab2ad
- SHA1 df2f64c62d19e82b1f83e24d21855d804cfe8d73
- SHA512 4ce500cbe35e8c268949809038fbce7fa17062279401444ae1277804103ea8eb7477a8157bb5ca651908c295393895253d480abe5b943ffdf0087625d9915936
- TLSH T1CD1102D7F1646072088B17832C9B51027B58354BD518EC2BF47B847152AAFE6B3FE618
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target FPSDoctor_OPTI_EXPRESS/Scripts_BoostMode/FPSDoctor_Remove_Bloatware_Advanced.bat
- Size 1KB
- SHA256 4cfb5adb9088b2eec9870e53a2b16bbe4fe858264f06f87b40c54d3d91c4dba8
- MD5 2621fd47255bc198815d13787cc13adb
- SHA1 49374e121f84d9551b8d5448a9af46e2c525eae2
- SHA512 55e5f2c83a9796a46b26f2c7f8784f2fdbf20ab77345bc7687cc5cb802c9563664ed92c4ab99455cb2b4f4bd22d71d1533f7fa1cb20f620074bfa8b0a6e715e3
- TLSH T108210DAD71420F9085DB32B7487290927E04F1BED16C9D78E0D3D817AB88BE627DDB21
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target FPSDoctor_OPTI_EXPRESS/Scripts_BoostMode/FPSDoctor_Reset_Network_Advanced.bat
- Size 350B
- SHA256 2bf0acd7e7bbe411a619835a51a224fa87e7732a69bdda24eb7978cb1aee7d42
- MD5 244f6b7027e8eae803858d786732fa77
- SHA1 2b7a3b92ac897dfe18226ba48cc28d96943a68d5
- SHA512 8946361e1de0d9c6f092b0ef248cdea39ce9eca1f384b4abf403d00a89c0264e5a1607e2fdc8d31a5ecbb087f7d064be02b750416e88a13e3554545bdf956451
- TLSH T164E0C603B076683BCC8198037D2499A66A39EC82E780FF03D4E318B381020F23F2C588
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target FPSDoctor_OPTI_EXPRESS/Scripts_BoostMode/FPSDoctor_Services_Advanced.bat
- Size 3KB
- SHA256 42d55005d849471749eaf94b007ce8e562708316a45710ead395c0c36fbb077d
- MD5 b795035d7d3dd9e0d6d6aa3eec166a5d
- SHA1 d501e8d86060b1c26ecff98687351bb4887115b7
- SHA512 58c8119f1bcbef4a65cf32f7315ff03aab291bcf3ecf09dc90881e680c787686019fa6d226ff4ce892a08e214ab4fd427f55e71bebf898c541706b637b5d80a9
- TLSH T15271BA13BCD83C794653A882DCE3109373552A4B41103EF8E6F772A626E9FDDA34E908
- MD5 SHA1 SHA512 TLSH
Score3/10