Analysis

  • max time kernel
    149s
  • max time network
    145s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    14/11/2026, 00:44

General

  • Target
    2026-11-14_6777b0e0c69dfdf44197daf730eeea8f_amadey_dark-comet_darkgate_elex_gcleaner_glassworm_smoke-loader_stealc_stop.exe
  • Size 4.6MB
  • Sample261114-a3wc8abs3t
  • SHA256 bd9523ec35dccfbf6b830312c5e92fba054dfd6025c141b9595e6d2265191c3a
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • xred

C2
  • xred.mooo.com

Attributes
  • email

    [email protected]

  • payload_url

    http://freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978

    https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download

    https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dl=1

    http://xred.site50.net/syn/SUpdate.ini

    https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=download

    https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1

    http://xred.site50.net/syn/Synaptics.rar

    https://docs.google.com/uc?id=0BxsMXGfPIZfSTmlVYkxhSDg5TzQ&export=download

    https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=1

    http://xred.site50.net/syn/SSLLibrary.dll

Signatures

  • Family: Xred

    Xred is backdoor written in Delphi.

  • Checks computer location settings 2 TTPs 6 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 8 IoCs
  • Loads dropped DLL 26 IoCs
  • Adds Run key to start application 2 TTPs 1 IoCs
  • Drops file in System32 directory 2 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 6 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

  • System Location Discovery: System Language Discovery 1 TTPs 9 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Checks processor information in registry 2 TTPs 3 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies registry class 3 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 3 IoCs
  • Suspicious use of SetWindowsHookEx 9 IoCs
  • Suspicious use of WriteProcessMemory 7 IoCs
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-11-14_6777b0e0c69dfdf44197daf730eeea8f_amadey_dark-comet_darkgate_elex_gcleaner_glassworm_smoke-loader_stealc_stop.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-11-14_6777b0e0c69dfdf44197daf730eeea8f_amadey_dark-comet_darkgate_elex_gcleaner_glassworm_smoke-loader_stealc_stop.exe"
    1⤵
    • Checks computer location settings
    • Adds Run key to start application
    • System Location Discovery: System Language Discovery
    • Modifies registry class
    • Suspicious use of WriteProcessMemory
    PID:4756
    • C:\Users\Admin\AppData\Local\Temp\._cache_2026-11-14_6777b0e0c69dfdf44197daf730eeea8f_amadey_dark-comet_darkgate_elex_gcleaner_glassworm_smoke-loader_stealc_stop.exe
      "C:\Users\Admin\AppData\Local\Temp\._cache_2026-11-14_6777b0e0c69dfdf44197daf730eeea8f_amadey_dark-comet_darkgate_elex_gcleaner_glassworm_smoke-loader_stealc_stop.exe"
      2⤵
      • Checks computer location settings
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:1224
      • C:\Users\Admin\AppData\Local\Temp\cleaner\Cleaner-Install.exe
        "C:\Users\Admin\AppData\Local\Temp\cleaner\Cleaner-Install.exe" /install
        3⤵
        • Checks computer location settings
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:3456
        • C:\Users\Admin\AppData\Local\Temp\cleaner\avwebloader.exe
          "C:\Users\Admin\AppData\Local\Temp\cleaner\avwebloader.exe"
          4⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Loads dropped DLL
          • Reads the TCP/IP host and domain name from the registry
          • System Location Discovery: System Language Discovery
          • Suspicious use of SetWindowsHookEx
          • Suspicious use of WriteProcessMemory
          PID:4936
          • C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\Cleaner.exe
            "C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\Cleaner.exe"
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Reads the TCP/IP host and domain name from the registry
            • System Location Discovery: System Language Discovery
            • Suspicious use of SetWindowsHookEx
            PID:1272
    • C:\ProgramData\Synaptics\Synaptics.exe
      "C:\ProgramData\Synaptics\Synaptics.exe" InjUpdate
      2⤵
      • Checks computer location settings
      • Executes dropped EXE
      • Reads the TCP/IP host and domain name from the registry
      • System Location Discovery: System Language Discovery
      • Modifies registry class
      • Suspicious use of WriteProcessMemory
      PID:5676
      • C:\Users\Admin\AppData\Local\Temp\._cache_Synaptics.exe
        "C:\Users\Admin\AppData\Local\Temp\._cache_Synaptics.exe" InjUpdate
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        PID:1748
  • C:\ProgramData\Synaptics\Synaptics.exe
    C:\ProgramData\Synaptics\Synaptics.exe
    1⤵
    • Checks computer location settings
    • Executes dropped EXE
    • Drops file in System32 directory
    • System Location Discovery: System Language Discovery
    • Modifies registry class
    • Suspicious use of WriteProcessMemory
    PID:3340
    • C:\Windows\SysWOW64\._cache_Synaptics.exe
      "C:\Windows\system32\._cache_Synaptics.exe"
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      PID:5824
  • C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE
    "C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" /automation -Embedding
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious use of SetWindowsHookEx
    PID:4884
  • C:\Windows\system32\vssvc.exe
    C:\Windows\system32\vssvc.exe
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:2352

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        Synaptics.exe

        • Path C:\ProgramData\Synaptics\Synaptics.exe
        • Size 4.6MB
        • SHA256 bd9523ec35dccfbf6b830312c5e92fba054dfd6025c141b9595e6d2265191c3a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ._cache_2026-11-14_6777b0e0c69dfdf44197daf730eeea8f_amadey_dark-comet_darkgate_elex_gcleaner_glassworm_smoke-loader_stealc_stop.exe

        • Path C:\Users\Admin\AppData\Local\Temp\._cache_2026-11-14_6777b0e0c69dfdf44197daf730eeea8f_amadey_dark-comet_darkgate_elex_gcleaner_glassworm_smoke-loader_stealc_stop.exe
        • Size 3.9MB
        • SHA256 fd865fd51439d3c46c8b648fbca75cf1d7f0c59555c16d2a1ba85cf5975efad3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        LIBEAY32.dll

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\LIBEAY32.dll
        • Size 1.2MB
        • SHA256 6f499423a417061508fcbac1356a5bd50d56cb7a1a80a3707da323417c8f867d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        avmres.dll

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\avmres.dll
        • Size 67KB
        • SHA256 b9cc37e95ee11c16fcf8de95b372a27304d24e803f5361d72d72795dce860e2c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        avwebloader.dll

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\avwebloader.dll
        • Size 125KB
        • SHA256 91b5b752e39f36e91e589ae9279f69f2de0eccf21063304b8ef3bce13b6984b3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        avwebloader.exe

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\avwebloader.exe
        • Size 602KB
        • SHA256 6f91491a5f869da4ba4f8b99a6730a0147bd7986ecd8593010dc8c31fa831ec8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        avwebloadergui.dll

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\avwebloadergui.dll
        • Size 122KB
        • SHA256 db7dd65bf55e0f12defa5521ab8917b4a9bec52a58e2f2669e93d236ab02ca96
        • MD5 SHA1 SHA512 SSDEEP TLSH

        build.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\build.dat
        • Size 3KB
        • SHA256 242e4d2394d9d7b8198dde78fdb48d0224dcbbca18fafbd5b4476901e4888418
        • MD5 SHA1 SHA512 TLSH

        cleaner-install.exe

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\cleaner-install.exe
        • Size 516KB
        • SHA256 c48a52566773752d82467faee52f6a91a837bb327cb78f2b1d9576a238c60f40
        • MD5 SHA1 SHA512 SSDEEP TLSH

        cleaner.ico

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\cleaner.ico
        • Size 18KB
        • SHA256 3630f16cbaf4ea43b7902496ef34277641e1cfca7cb5e1d29031ad2fee3589a2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        cleaner_uninstall.ico

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\cleaner_uninstall.ico
        • Size 90KB
        • SHA256 60f1b1c812520efcafb6620a2f5a083ebc5aebe2365b56d9865f9943f12ec90e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        cleanerinstallrc.dll

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\cleanerinstallrc.dll
        • Size 20KB
        • SHA256 29eb99590b05a23140b6a073224419d4654653222d512c98069a3307181e65e4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        filelist.ini

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\filelist.ini
        • Size 133B
        • SHA256 998d9aaca350a689a54d7ab5e4a75d54fae8f43db528a0be38c9a344af0acea8
        • MD5 SHA1 SHA512 TLSH

        loadercontrol.xml

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\loadercontrol.xml
        • Size 2KB
        • SHA256 1c9587ab56204eee83e9cbdd2dfafc714c6b1c377d900913673bdc37349cafdb
        • MD5 SHA1 SHA512 TLSH

        mfc120u.dll

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\mfc120u.dll
        • Size 4.2MB
        • SHA256 c2d0e285e2333a9c620be04a5747881af0d5615da32226886e659ff31a9761cc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        msvcp120.dll

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\msvcp120.dll
        • Size 444KB
        • SHA256 87c42ca155473e4e71857d03497c8cbc28fa8ff7f2c8d72e8a1f39b71078f608
        • MD5 SHA1 SHA512 SSDEEP TLSH

        msvcr120.dll

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\msvcr120.dll
        • Size 948KB
        • SHA256 86e39b5995af0e042fcdaa85fe2aefd7c9ddc7ad65e6327bd5e7058bc3ab615f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ave2-win32-int.info

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\download\idx\ave2-win32-int.info
        • Size 19KB
        • SHA256 de2784ec2b9ba106e36f18a562cfcb30a26340f2be4d7d894073d7f796b9c746
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pccleaner-win32-en.info

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\download\idx\pccleaner-win32-en.info
        • Size 17KB
        • SHA256 303ccd1ae732ed2c1fb469b9844496e55b330a832ca6ae8941c0835545b73253
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vdf.info

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\download\idx\vdf.info
        • Size 56KB
        • SHA256 461c61b30b16d940715a637ae75878c2fecb98f38998fbc59a8c512fd3066b24
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbva0017.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\download\n_vdf\xbva0017.dat
        • Size 376B
        • SHA256 44afb0e5b3d5bc8d3e4bc44b174a805d51d129d70dccd68ef182e24b0bd906c2
        • MD5 SHA1 SHA512 TLSH

        xbva0017.dat.gz

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\download\n_vdf\xbva0017.dat.gz
        • Size 370B
        • SHA256 54a86303cd4e16451118053e6ada19e1ace6141d87f683e8c7adbc136d031ce1
        • MD5 SHA1 SHA512 TLSH

        xbvo7c.map

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\download\n_vdf\xbvo7c.map
        • Size 376B
        • SHA256 443d3abaca09afb892d3c303cdb4525d42a6e23547e25b23398c30722550a91a
        • MD5 SHA1 SHA512 TLSH

        xbvo7c.map.gz

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\download\n_vdf\xbvo7c.map.gz
        • Size 367B
        • SHA256 934d693317487678a0cdfee2186402dcfc5e57dd2d993231eccf3f7d620bc171
        • MD5 SHA1 SHA512 TLSH

        xbvw6c.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\download\n_vdf\xbvw6c.dat
        • Size 448B
        • SHA256 e6e97b467914bfc6490b73ad918e45cf3a0323b59be342fabc4aada3e843201f
        • MD5 SHA1 SHA512 TLSH

        xbvw6c.dat.gz

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\download\n_vdf\xbvw6c.dat.gz
        • Size 372B
        • SHA256 24863c33dc4c7f70f5ba50ef7f15bd5e51bd7c2bb231e47405586bbde2304a61
        • MD5 SHA1 SHA512 TLSH

        map-pccleaner.xml

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\download\pccleaner\win32\en\map-pccleaner.xml
        • Size 3KB
        • SHA256 eb10b2814399563bb0f0781da79af76641658c89d71fad526529c99abcd816f3
        • MD5 SHA1 SHA512 TLSH

        map-pccleaner.xml.gz

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\download\pccleaner\win32\en\map-pccleaner.xml.gz
        • Size 452B
        • SHA256 8897f2e068b5578fac70a8622ddbb58179b2afa7e155e40cf4d5ee8875571aac
        • MD5 SHA1 SHA512 TLSH

        aebb.dll

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\aebb.dll
        • Size 70KB
        • SHA256 cbcf727bb8b75864509ca1c7d68d4ef51d64a18b15b3e1145f94cd50f29746cc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        aecore.dll

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\aecore.dll
        • Size 280KB
        • SHA256 718ec0dbc2fc1b08e4945aa7415b1a338fca07222963df8b325e328de23ec170
        • MD5 SHA1 SHA512 SSDEEP TLSH

        aecrypto.dll

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\aecrypto.dll
        • Size 138KB
        • SHA256 5ef4587c5e57c4b54c321e715907c56d73ace1ef727abf3f6ae52aed644485ef
        • MD5 SHA1 SHA512 SSDEEP TLSH

        aedroid.dll

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\aedroid.dll
        • Size 2.7MB
        • SHA256 c5129e72bc8487c5b47ffc43801970515df2061c27ddb2e681461035bc37b226
        • MD5 SHA1 SHA512 SSDEEP TLSH

        aedroid_gwf.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\aedroid_gwf.dat
        • Size 4.2MB
        • SHA256 50a9af9ac743d6a7f2741a3ab39717c8c7e618630b7688dab60b57b97f840b9d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        aeemu.dll

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\aeemu.dll
        • Size 411KB
        • SHA256 daf4f56cffc30b604d238df30e96332dba84447399597cc7bfb94ab02cddec63
        • MD5 SHA1 SHA512 SSDEEP TLSH

        aeexp.dll

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\aeexp.dll
        • Size 394KB
        • SHA256 5114b2b29aa5ee2e3bd8eb2c52a9f75e2749a7933f59ecdcb3898d694f015fac
        • MD5 SHA1 SHA512 SSDEEP TLSH

        aeexp_gwf.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\aeexp_gwf.dat
        • Size 59KB
        • SHA256 2d7925f16b1b835b7265d1c04c38c599f2b25c5087a0005dec60dcd22e9f3dd7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        aegen.dll

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\aegen.dll
        • Size 717KB
        • SHA256 07e342b8f7ef9747411a5c692e317bf0f9c3f40138e3360a6fece5ae02e899d4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        aehelp.dll

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\aehelp.dll
        • Size 295KB
        • SHA256 f4cca57e7310c76ee4741132e5391089f4182caa0c13dad46c2e04022fd83cad
        • MD5 SHA1 SHA512 SSDEEP TLSH

        aeheur.dll

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\aeheur.dll
        • Size 10.4MB
        • SHA256 0284c3f61d48d57c4a1a723e54e5a8a4f7b732a11eaed610fa225cd67639d1dd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        aeheur_agen.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\aeheur_agen.dat
        • Size 2.0MB
        • SHA256 99509fc7cb2d87fe4b2e9c2f1d6d8d95f2b9db68deb8abc780fbedba53336e78
        • MD5 SHA1 SHA512 SSDEEP TLSH

        aeheur_gwf.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\aeheur_gwf.dat
        • Size 912B
        • SHA256 b90baa70bd07bc5b3573909b37a6cf4fcccc3d7c9702806c94bd843988d0ed5d
        • MD5 SHA1 SHA512 TLSH

        aeheur_mv.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\aeheur_mv.dat
        • Size 3.0MB
        • SHA256 b0dfdadc13abebdd2d53364c46fbaf41c195e96f209abbe130da6d8bd4cf4428
        • MD5 SHA1 SHA512 SSDEEP TLSH

        aelibinf.dll

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\aelibinf.dll
        • Size 78KB
        • SHA256 00da20e602fa16db217f0e947e810230bd9ddf859b902d32d9c1fde813be9f33
        • MD5 SHA1 SHA512 SSDEEP TLSH

        aelibinf_db.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\aelibinf_db.dat
        • Size 86KB
        • SHA256 0544403357dbff7551fc17f348a446d556a094d6c42e1121eb337de3ff88ca5c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        aelidb.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\aelidb.dat
        • Size 86KB
        • SHA256 ca5bb2f6c93eccc1ef5a2b2aae25b4976a2ce320a52d13d74f12b65205678e53
        • MD5 SHA1 SHA512 SSDEEP TLSH

        aemobile.dll

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\aemobile.dll
        • Size 353KB
        • SHA256 5096c9ab09e878d06596a20192d9b22ae7432bc660c8f4d8a24ea5daec509baf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        aeoffice.dll

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\aeoffice.dll
        • Size 772KB
        • SHA256 884c427ccbea8a115abb774e703397c65545e1d1fe4275fb98073052496fb888
        • MD5 SHA1 SHA512 SSDEEP TLSH

        aeoffice_gwf.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\aeoffice_gwf.dat
        • Size 30KB
        • SHA256 96e2488023689abf71cf9b951548420ff3ad9d6ff37116d4279a43b5b736968b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        aepack.dll

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\aepack.dll
        • Size 835KB
        • SHA256 f2dffa1e6fd9c49ad5a0eaf4f7166c9e1f1a321ba198c16c6fdc41fe875778e6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        aerdl.dll

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\aerdl.dll
        • Size 1.2MB
        • SHA256 f15ddc02864fce89707ec58b1f50ee5ab31be563da15d9d0e10c21746cb5f9cd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        aesbx.dll

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\aesbx.dll
        • Size 1.6MB
        • SHA256 7ea84faadc736e7f3c5dcb3b8df24fdefa413b3fcbad9e1ac992bcfd678ec9e9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        aescn.dll

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\aescn.dll
        • Size 159KB
        • SHA256 a89aed23a7fd7812d16a282dbbe4694d60f23ec3fcf21637d7bad955add52ee2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        aescript.dll

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\aescript.dll
        • Size 1.1MB
        • SHA256 d98b885b1e9bb56df565a332174c9434d28ca689060183520cab7012fcda0864
        • MD5 SHA1 SHA512 SSDEEP TLSH

        aeset.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\aeset.dat
        • Size 3KB
        • SHA256 1094bf06e2af1d636367760de38ac64d84e7aa6a00268816dd03e771594a6ccf
        • MD5 SHA1 SHA512 TLSH

        aevdf.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\aevdf.dat
        • Size 1KB
        • SHA256 b5af9fcc6dff99b26c263609c210d1ad5bb09de64e1d350f994c9994faeed31a
        • MD5 SHA1 SHA512 TLSH

        aevdf.dll

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\aevdf.dll
        • Size 150KB
        • SHA256 d3d2ab463a7a8e014baa9380688db62bbde9a8ecc93c78206660d080636cff34
        • MD5 SHA1 SHA512 SSDEEP TLSH

        aevps.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\aevps.dat
        • Size 2KB
        • SHA256 c430df964b1ede76e9f0220e39009ff2155caa905a23b869ad8f7cd2442e8852
        • MD5 SHA1 SHA512 TLSH

        antivir.oem

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\antivir.oem
        • Size 256B
        • SHA256 a2033f01fd221bf011219faf2e24b50bf52b7a42c2370947a3b92975bed9bfff
        • MD5 SHA1 SHA512 TLSH

        avevtlog.dll

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\avevtlog.dll
        • Size 98KB
        • SHA256 81206c457565a39d524d034b766a6a33d62161ef3e3b67eef8e2bcfee9c17881
        • MD5 SHA1 SHA512 SSDEEP TLSH

        avevtrc.dll

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\avevtrc.dll
        • Size 27KB
        • SHA256 2fcfd48fe7ed48d7324780576a88c54a54aa28780bcce2d748a1b03a08da536e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        avipc.dll

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\avipc.dll
        • Size 68KB
        • SHA256 3b4241503d95d309db33fc6032f1a5fc6c94d2fb71248a5913d85251dfe1cf51
        • MD5 SHA1 SHA512 SSDEEP TLSH

        avpref.dll

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\avpref.dll
        • Size 63KB
        • SHA256 1a5df20ef4de9978b2e86d3c95e79a32ec6f39644fb714442177cf0708e0f2fd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        avreg.dll

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\avreg.dll
        • Size 232KB
        • SHA256 6c7c2c0f86fb8334d913f62c2e3e2f09ea1c16226aaf220493fd19b042a5c26d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        avreg.yml

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\avreg.yml
        • Size 5KB
        • SHA256 0e4342767f7c709d62337f578e305c22a8ab68c601b2e78bfdf82f937078e872
        • MD5 SHA1 SHA512 SSDEEP TLSH

        avrep.dll

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\avrep.dll
        • Size 79KB
        • SHA256 9cbc08aee7f52e6badb71ebceb6cf6c33d8cf309ce9f234c2d13a62b4338211d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        avscan.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\avscan.dat
        • Size 1KB
        • SHA256 e3a09b67752ad886f0b923873c5c60ba1856af3e79f6cc539d79199ac46023fa
        • MD5 SHA1 SHA512 TLSH

        avscan.exe

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\avscan.exe
        • Size 822KB
        • SHA256 6d8908f3a2d0ea5868e771e8fced3a10f79f3bb6060be6647b7f96baa4d96be4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        avscanrc.dll

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\avscanrc.dll
        • Size 64KB
        • SHA256 b710d9d31ab2d5fd2d5f2173325d49549899aca7f48e2bea62f39a96d33436bc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        avscplr.dll

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\avscplr.dll
        • Size 104KB
        • SHA256 8fb2875d9575a9453db8309644161f94650be1865b4aec820edd421cb9950701
        • MD5 SHA1 SHA512 SSDEEP TLSH

        avwinll.dll

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\avwinll.dll
        • Size 37KB
        • SHA256 7c067f7014e5fd489e13611e30a1a210b291d61187925368a471cfc5f32dd98b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        build.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\build.dat
        • Size 6KB
        • SHA256 cb39a0bf64bb478122a23e47e026412695052543b6bb2c70ce1c4b350465f0ae
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ccavscanex.dll

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\ccavscanex.dll
        • Size 332KB
        • SHA256 b193ccc7deb0921fa85623da76459f71079758426876cd1a3a3bbd5530359545
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ccavscanexrc.dll

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\ccavscanexrc.dll
        • Size 32KB
        • SHA256 4f2026482162dc58f612f3d8458e1c32dbeca6227ba868a7c1f6c1ec6aa678f9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ccplg.xml

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\ccplg.xml
        • Size 523B
        • SHA256 d1aa5d9d83eef1befdcb589e39a424c36697be433c8440ffe811c8c6b36460d0
        • MD5 SHA1 SHA512 TLSH

        ccwkrlib.dll

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\ccwkrlib.dll
        • Size 764KB
        • SHA256 8529299019427948cf1be8c1dd114c4884f1889e8fa0d7394b359407b6c48764
        • MD5 SHA1 SHA512 SSDEEP TLSH

        cfglib.dll

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\cfglib.dll
        • Size 60KB
        • SHA256 3540ec6bec740f8948545d8ce97207c5191628148b9867cec0e7cf9c3de3b849
        • MD5 SHA1 SHA512 SSDEEP TLSH

        cleaner-launcher.exe

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\cleaner-launcher.exe
        • Size 342KB
        • SHA256 4247aa5c432f3be1ebe1cb6d35c03a53a4799e93717e0e635dd94ef2e37e4ff9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        cleaner.exe

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\cleaner.exe
        • Size 472KB
        • SHA256 a2637ddc86df6304928c40fe1198895758d9d3cdddc8569a10a82cdcedd6c7ea
        • MD5 SHA1 SHA512 SSDEEP TLSH

        cleaner.ini

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\cleaner.ini
        • Size 71B
        • SHA256 8e3742be34ceec198e173df4bd42b135e764fbd81d2f5b6e5a463032280f6304
        • MD5 SHA1 SHA512 TLSH

        cleanerlauncherrc.dll

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\cleanerlauncherrc.dll
        • Size 22KB
        • SHA256 a0ef364407cb78e0f346a50bbde33195f7a28d469cecaf78d65e4c68418188c1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        cleanerrc.dll

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\cleanerrc.dll
        • Size 256KB
        • SHA256 70f4680e78191803fdb32b50092bb0bab6336ef0fec4b875f0ecfe150bf52ca4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        eula.txt

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\eula.txt
        • Size 45KB
        • SHA256 ca5468e38e764d98698e06b4408c1ad6c8294beadb8a6d3528b4a088e0fe4ed6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        extdlgfw.dll

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\extdlgfw.dll
        • Size 111KB
        • SHA256 d5ac63b6a499886d82ca2d646318510fbbfeb6b35b7e9a69bc29a9fa5c904b0a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        hbedv.key

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\hbedv.key
        • Size 512B
        • SHA256 d8cf443018287746452ab646ef89824d28f7105859216479088a12e26af8d0ca
        • MD5 SHA1 SHA512 TLSH

        luke.dll

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\luke.dll
        • Size 77KB
        • SHA256 ef8e2e1350d941b31fa223feaa545719f517110db2428d39dc8d380322f8b759
        • MD5 SHA1 SHA512 SSDEEP TLSH

        prefix_msg.avr

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\prefix_msg.avr
        • Size 3KB
        • SHA256 3f19775d1b102674ae0e569b161e231ae86f3bf53b14bbf78a0a329a5ba526cb
        • MD5 SHA1 SHA512 TLSH

        quicksysscan.avp

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\quicksysscan.avp
        • Size 3KB
        • SHA256 dde53248fc0872b93865cb0296a91f18658fe87e57dcf36902ad333aebf9129a
        • MD5 SHA1 SHA512 TLSH

        rcimage.dll

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\rcimage.dll
        • Size 125KB
        • SHA256 8c5b70371abc75d3c7766d85d75c431680e225c59e7ae9dafcaf333c371e3345
        • MD5 SHA1 SHA512 SSDEEP TLSH

        rctext.dll

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\rctext.dll
        • Size 75KB
        • SHA256 2304201d10d912b6abf50b86472c2c03a72592c3131b7c917a677ff217803e57
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sqlite3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\sqlite3.dll
        • Size 460KB
        • SHA256 64887bf0d0258377d2b9381474d246af2415f9e153b4927125dd79265bba7826
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sysscan.avp

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\sysscan.avp
        • Size 3KB
        • SHA256 f8f14da6d241b8922f7040d28c089f626a750d0d65fcd4fb2c4cee985d5daeb7
        • MD5 SHA1 SHA512 TLSH

        vbase000.vdf

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\vbase000.vdf
        • Size 263KB
        • SHA256 6902b5c8a722279f4c6ea070bbbf673040d3ea8ee8b62f28d3b894c70df8bdef
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vbase001.vdf

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\vbase001.vdf
        • Size 5.6MB
        • SHA256 403a9c4d798f8cefa9206b0ec4acea820d1928245ed8e00795f78bdef0b067ad
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vbase002.vdf

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\vbase002.vdf
        • Size 2KB
        • SHA256 240769db556dcbab0c22320ebe22ba43984a978f9181e2e561f6914da5e64357
        • MD5 SHA1 SHA512 TLSH

        vbase003.vdf

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\vbase003.vdf
        • Size 2KB
        • SHA256 2259967638d710f340974b0ede173fd2cd9be4603ac06ff7b2848695cb9e1ceb
        • MD5 SHA1 SHA512 TLSH

        vbase004.vdf

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\vbase004.vdf
        • Size 2KB
        • SHA256 9c134a08d6d93cafc33423a64617fdd4a3f911f67271457bc733dd74440e31f3
        • MD5 SHA1 SHA512 TLSH

        vbase005.vdf

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\vbase005.vdf
        • Size 2KB
        • SHA256 3d1b9151099dee22d3d39366906cd02e43ed173b37e11d7a85d2cf9d6dc3d066
        • MD5 SHA1 SHA512 TLSH

        vbase006.vdf

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\vbase006.vdf
        • Size 2KB
        • SHA256 16b3d8c18b4eb95c014fe75b1134a69b7ad6b52fc57c1ae4539deee4801482d9
        • MD5 SHA1 SHA512 TLSH

        vbase007.vdf

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\vbase007.vdf
        • Size 2KB
        • SHA256 bd18c0abe3e1cce62f56a09574493c9e09e101f8bb8775b64cb235f74a9b3138
        • MD5 SHA1 SHA512 TLSH

        vbase008.vdf

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\vbase008.vdf
        • Size 2KB
        • SHA256 0e0bea5b0a52c370fd8314c2cc436bd9fd9d6976c81071e5efaee6d81dd9d7d8
        • MD5 SHA1 SHA512 TLSH

        vbase009.vdf

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\vbase009.vdf
        • Size 2KB
        • SHA256 c4f92edeca0794c29e030cb7ef420d907afe55bbca92900893b645e59425e570
        • MD5 SHA1 SHA512 TLSH

        vbase010.vdf

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\vbase010.vdf
        • Size 2KB
        • SHA256 48fbbada45d8bda5eb2658005a27dbf15365a40c8599be9d754c132180b1c0f4
        • MD5 SHA1 SHA512 TLSH

        vbase011.vdf

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\vbase011.vdf
        • Size 2KB
        • SHA256 b817e4cf2fb80dd9f55c186f590ee9fa88cb32184a272f2a30d1847e14105fa1
        • MD5 SHA1 SHA512 TLSH

        vbase012.vdf

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\vbase012.vdf
        • Size 2KB
        • SHA256 7e68c05fcf994c0814407d5629899c56b3b1e2b6dc3f9b5ae2e3049f033a81fe
        • MD5 SHA1 SHA512 TLSH

        vbase013.vdf

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\vbase013.vdf
        • Size 2KB
        • SHA256 a47487b606d832abdd1a8c212b30ad0f740c562a6fe2646fa540c88250b98bc8
        • MD5 SHA1 SHA512 TLSH

        vbase014.vdf

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\vbase014.vdf
        • Size 2KB
        • SHA256 582f5d4289a9567342cf291efcef512a7dae091cbce5174c23e582cdc97728e5
        • MD5 SHA1 SHA512 TLSH

        vbase015.vdf

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\vbase015.vdf
        • Size 2KB
        • SHA256 1254b2b536c07a183b49a1429b9a62d090abf64946ecf0c6701970c9475e5727
        • MD5 SHA1 SHA512 TLSH

        vbase016.vdf

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\vbase016.vdf
        • Size 2KB
        • SHA256 28aa6ec7e224212767df3180e2e4acc083f58ac0d81f497fcd9cd2fd54e5019f
        • MD5 SHA1 SHA512 TLSH

        vbase017.vdf

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\vbase017.vdf
        • Size 2KB
        • SHA256 5e3d327441d64b9613164c685e9760cb715b451f55e3b129785e04ec4c7e6faa
        • MD5 SHA1 SHA512 TLSH

        vbase018.vdf

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\vbase018.vdf
        • Size 2KB
        • SHA256 e5a88d675232bc3c382f8d4184246227aa6f0c2258da856ee2299e94097f1deb
        • MD5 SHA1 SHA512 TLSH

        vbase019.vdf

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\vbase019.vdf
        • Size 2KB
        • SHA256 1a9e909918c7c76122000377f38d3d688711055fa94e4a3da51490defae4e05f
        • MD5 SHA1 SHA512 TLSH

        vbase020.vdf

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\vbase020.vdf
        • Size 2KB
        • SHA256 d244777423439489a4393e3d33ae8aa7225fe5168a4e2a6016ea21d7c5d877eb
        • MD5 SHA1 SHA512 TLSH

        vbase021.vdf

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\vbase021.vdf
        • Size 2KB
        • SHA256 21d3672efcd363e4ac26952e2ab15ca52e24c66f9c6e9122c9f376fbd4c71742
        • MD5 SHA1 SHA512 TLSH

        vbase022.vdf

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\vbase022.vdf
        • Size 2KB
        • SHA256 8a70bda63f356463a99786b72010fc1c752c0bcfa8b573c80cd614b8106f9a99
        • MD5 SHA1 SHA512 TLSH

        vbase023.vdf

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\vbase023.vdf
        • Size 2KB
        • SHA256 62f18538912d288482c1a47958e4201db18c53942458dc9907e49c521362dad9
        • MD5 SHA1 SHA512 TLSH

        vbase024.vdf

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\vbase024.vdf
        • Size 2KB
        • SHA256 6a8215c449eba90dd2a39296661ef38fa6f406e5184c0f2450d69a1a97970bd2
        • MD5 SHA1 SHA512 TLSH

        vbase025.vdf

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\vbase025.vdf
        • Size 2KB
        • SHA256 d62396768c69f1a69a71ac8780b689077bb42ddbd1a2a275cbfdfe1a541c3995
        • MD5 SHA1 SHA512 TLSH

        vbase026.vdf

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\vbase026.vdf
        • Size 2KB
        • SHA256 3a654df0419bfab818c9e765d71a5435121864aff4e943f1c9f02eee712bf504
        • MD5 SHA1 SHA512 TLSH

        vbase027.vdf

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\vbase027.vdf
        • Size 2KB
        • SHA256 41f3682cb18cf34bc49790f71cabab03a1dba2967472cc0ade7d42099d797539
        • MD5 SHA1 SHA512 TLSH

        vbase028.vdf

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\vbase028.vdf
        • Size 2KB
        • SHA256 18fd95f361c49eaaa93a173d0814c14c186167e9bb53fd81e68a303e048c908b
        • MD5 SHA1 SHA512 TLSH

        vbase029.vdf

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\vbase029.vdf
        • Size 2KB
        • SHA256 3b385c7c629787cf50607e91a205c9b63fbaa1c77b91e8f95d564d1665814160
        • MD5 SHA1 SHA512 TLSH

        vbase030.vdf

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\vbase030.vdf
        • Size 2KB
        • SHA256 0f8a419d131032bfa0ec811eed7fecfbbfb06c0b06b4ff449cc8efa327ed49ee
        • MD5 SHA1 SHA512 TLSH

        vbase031.vdf

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\vbase031.vdf
        • Size 2.8MB
        • SHA256 a4e4843fd2e206070ab4a5759eed913b78763b1b3698fe475c04f56f2507c353
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbva0001.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbva0001.dat
        • Size 1.3MB
        • SHA256 14d2f1d2b9bcb30fb3522783c00baf303bb53334bcc7f3958a94617bff540604
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbva0002.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbva0002.dat
        • Size 1.3MB
        • SHA256 75385dd080b249cc6f90477f76a19d26a2c4fb9409fd5c9102c2c565db942c0a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbva0003.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbva0003.dat
        • Size 1.3MB
        • SHA256 93e03fa051dcf6d908391fa6bb4dbdf33c8ad3183bb003e622c7b8552c0fdcf3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbva0004.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbva0004.dat
        • Size 1.3MB
        • SHA256 1366f241eb6e3cbdefcffc93b987735971d10fbb8b09956b1ad1e87243159c2f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbva0005.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbva0005.dat
        • Size 1.3MB
        • SHA256 bcadba5fdd37299b45651970dec0b33724f4bd0bcc9c47aedf8835f2377c0d54
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbva0006.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbva0006.dat
        • Size 1.2MB
        • SHA256 5e3b8c851207aeff1ca6678cf997ce9bf7049253d95ea2021a3bae5b6ad4f6fb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbva0007.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbva0007.dat
        • Size 1.3MB
        • SHA256 19a47598f96d94ff97b70334ffeb26d2b6ee112725e34cd004104026be154e62
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbva0008.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbva0008.dat
        • Size 1.3MB
        • SHA256 5c7129c9a5ffc65c007ed01df06c8f618327a11c39cb5b21b28dc1a1b499aec6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbva0009.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbva0009.dat
        • Size 1.1MB
        • SHA256 b3914387497b2d36e122b36f96779907a509ae3be47dea3fc4b8f94a272aab68
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbva0010.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbva0010.dat
        • Size 1.1MB
        • SHA256 ab965780a95a4f354299561982b4b244e164e4a4e2c27db81fd65e36b4b7fa32
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbva0011.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbva0011.dat
        • Size 1.2MB
        • SHA256 7648670111911519052fb5eb33f5f8d39085eb1d3c53974486c82569bb3a1947
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbva0012.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbva0012.dat
        • Size 1.2MB
        • SHA256 8c019a82c4785cb1be51431cb19a36a057f318d9b5a66b9788481c29f1c3a859
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbva0013.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbva0013.dat
        • Size 1.3MB
        • SHA256 e5efe3d195b1428a3e279f063c29684350a6f8eeba56283b67eeaa7b76f52e23
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbva0014.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbva0014.dat
        • Size 1.3MB
        • SHA256 43b872a22194b39768dc3ede762f56ded6123c2dbbec535ada650416dcfc38ed
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbva0015.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbva0015.dat
        • Size 1.1MB
        • SHA256 4d581d733e274b3657dc28358c51f99723a12f628a0fe988d8560166db1e0ffa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbva0101.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbva0101.dat
        • Size 36KB
        • SHA256 020eaf0919d7958d1d52f75f065fa9c535a3d06156280f5cb502d8e319a2ca4a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbva0102.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbva0102.dat
        • Size 34KB
        • SHA256 4064d7cf5b5dedfe210c962e8614d17660324d6dff178baab084ae5f8b7f1bcd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbva0103.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbva0103.dat
        • Size 35KB
        • SHA256 d4027956dafeda6ffc497bf8c84cd48854a60a8a338403ba33f7664d5ff9b9c5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbva0104.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbva0104.dat
        • Size 36KB
        • SHA256 2494cc7068074759cde6d5199a29f719f89065adcbff9bc6208ac54b5327bbd9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbva0105.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbva0105.dat
        • Size 35KB
        • SHA256 bfdaeb8fa11334ec7cc39f1016c0c45c40e730ec28ccffe69aa9739543e589ad
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbva0106.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbva0106.dat
        • Size 38KB
        • SHA256 0930db3ec6a6d7618260633f1f679ab9b4422ae02d484f787d74f6a3e20d3a19
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbva0107.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbva0107.dat
        • Size 40KB
        • SHA256 188589b0dd9a559d4cf255eea5f361086373bedb44aca71dff3d87fb19ded660
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbva0108.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbva0108.dat
        • Size 41KB
        • SHA256 51d69ecd24347914c564af46258addaf78721d00be08b6b46f0fa5db2480dd4f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbva0109.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbva0109.dat
        • Size 39KB
        • SHA256 b57087b1af6c0508d1ee94969e624d7fb9a2c34e19d78893a5a4c7a327970582
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbva0110.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbva0110.dat
        • Size 38KB
        • SHA256 47586dc5ddac3f6aa1b21fffe5c55ff3d1c037227e3855647d2683d61c7398e3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbva0111.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbva0111.dat
        • Size 42KB
        • SHA256 c594e8d4f1c413ba1c78ddde71700e9eaa2ac4ac8f504c796eb439d4895532c3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbva0112.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbva0112.dat
        • Size 38KB
        • SHA256 67b13890082a707356648855ac14c89ebf191ee9ad05404b15d2df474865f7f9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbva0113.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbva0113.dat
        • Size 39KB
        • SHA256 94bbf05145998dc067c3b6b1a14fa0dc3d49d7aefa9e04113d1477fecea98a27
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbva0114.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbva0114.dat
        • Size 37KB
        • SHA256 5dd175db6a5f744afb823d0826c87c356cdda798542ec267ce999688c99d6d95
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbva0115.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbva0115.dat
        • Size 36KB
        • SHA256 3b49cb4c8b4febab8781d53d5e60ce9eb04455f6cfafa5f6dca602137696d942
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbva0116.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbva0116.dat
        • Size 35KB
        • SHA256 f14282ade4935b11197094a5dbf2f5f9f2bb96889e9ed07b790ccd7efe39910b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbva0117.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbva0117.dat
        • Size 36KB
        • SHA256 a9dd0ceffcff85736764e3bbebd1c74749d1ebeb2b03a4d9716b5bda25382f9a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbva0118.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbva0118.dat
        • Size 38KB
        • SHA256 f19112974a1fc390bdd2718dcbaa4d35c7869b1de8703f41b98609e1747474b9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbva0119.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbva0119.dat
        • Size 36KB
        • SHA256 333c05ed75e2e4531ea9bb6225f7a14d27e174172aca89077ba1d8c398624785
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbva0120.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbva0120.dat
        • Size 34KB
        • SHA256 22dfae00803fce911600ec7e5f383041e69af1f57d157adb46b3c5880cb8f30f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbva0121.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbva0121.dat
        • Size 35KB
        • SHA256 34e2bf8ed7da30dfe40576bef906816b37e5e031c682f267ff3c6403f29ea75d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbva0122.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbva0122.dat
        • Size 39KB
        • SHA256 68a300f1ae6d5873ba57dfa1d16826787fe02326ea697f0327b651f3cc4bb7b9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbva0123.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbva0123.dat
        • Size 42KB
        • SHA256 c24ffa41a31e02e3e1031e675c02a20c6457fef9e1adfc2204f774e4590e1ba6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbva0124.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbva0124.dat
        • Size 37KB
        • SHA256 f2ca6c0108e1dc95183fbf4a6fb8ea4f8b7d6841751ba185b75f03a060708336
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbva0125.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbva0125.dat
        • Size 38KB
        • SHA256 a8f9d25077a20c6f94de32727a77c85b80c660746930e799c2d3ecffab742e9c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbva0126.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbva0126.dat
        • Size 42KB
        • SHA256 e7e61cc3d81deefcf2dd4ad9747666a21c80c4fe616a95efb8266d01f4fb5485
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbva0127.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbva0127.dat
        • Size 41KB
        • SHA256 b67de628b9c79e5251e5ebc63ca8f7f946118ef274a4dc1ae81edf59f65222a5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbva0128.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbva0128.dat
        • Size 40KB
        • SHA256 e992a42354d7b594d5ad54210d6b19b48d31bcee6d1c6d0e76e7a2c2b0e1ecf1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbva0129.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbva0129.dat
        • Size 37KB
        • SHA256 f0110aeaa7f6c59b650ec4fa16e39d0ec9d21329b33c84d174b24c078c1f61cc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbva0130.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbva0130.dat
        • Size 34KB
        • SHA256 10023856c17888e663525cdc4dad758ffd39ca25246fba30f81eecda5d61a25d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbva0131.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbva0131.dat
        • Size 25KB
        • SHA256 0332654fbe3f6605f6f9082a763dc9b3499aa9e8db7f9d391b6b9955423c5aea
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbvagdx.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbvagdx.dat
        • Size 32KB
        • SHA256 c3597991bfb0bd2f6ac46239e6b4e8f9f76e3a4b4e864e2379d81b1a9583ef68
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbvas.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbvas.dat
        • Size 640B
        • SHA256 83bf5b94d4bb1aa7caaa00ac83103c750a2017fbf31efa732b2615edb0e80afd
        • MD5 SHA1 SHA512 TLSH

        xbvcmd.nmp

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbvcmd.nmp
        • Size 2KB
        • SHA256 6f75443bea17f6ffd197503770274ab5267c9b5139984bb06644e989ac997a87
        • MD5 SHA1 SHA512 TLSH

        xbvcmd.sig

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbvcmd.sig
        • Size 50KB
        • SHA256 94a4549b970ff2e9344310e5d5f69a4fa4c4d619c1292d806a4a77c98e4d1395
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbvdex.nmp

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbvdex.nmp
        • Size 16KB
        • SHA256 e249a367311c317a77998269614856b259b2bf3f26144db97efc06639d9acc83
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbvdex.sig

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbvdex.sig
        • Size 544KB
        • SHA256 11134ce856038293358661da65d9144ecd5665f0302d5f501a367e95689ea69f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbvdns.nmp

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbvdns.nmp
        • Size 424B
        • SHA256 a2d623862719dc84bacfacd446a9df635b8f2944296defaba286cd066a791315
        • MD5 SHA1 SHA512 TLSH

        xbvdns.sig

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbvdns.sig
        • Size 10KB
        • SHA256 06683e8cb1d931cdfbb25b9c1790cd9620fc9e7b8e1231230b61d87c10ec97e0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbvdsign.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbvdsign.dat
        • Size 10.3MB
        • SHA256 8680017bc50910a5226ac921bb54a72532e2d93f8eef281ad2c66c38327b2066
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbvdyna.sig

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbvdyna.sig
        • Size 408B
        • SHA256 68847f0f6df1f5b831cb889b75e8ed22b8cb1d3bdaacde6d5ca9901883ad37ce
        • MD5 SHA1 SHA512 TLSH

        xbvel.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbvel.dat
        • Size 22KB
        • SHA256 1073203e32ef5ba39f9012e625b59b29b9388bac1f2a7ffb00de153e77e576b9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbvelf.nmp

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbvelf.nmp
        • Size 5KB
        • SHA256 3b9590c778ee48c1b7cd03f89a49840d0aeb73e94253220877dc50603dd5f51a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbvelf.sig

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbvelf.sig
        • Size 84KB
        • SHA256 002ce7c28861916d09dc1ca30d65e44a9ed7dcae297aa4d45034277681fcf71f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbvelfa.nmp

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbvelfa.nmp
        • Size 3KB
        • SHA256 853393e75bef7104c9b57648f6183be6fd0c3ab2cd8a4452e5597737da4226f2
        • MD5 SHA1 SHA512 TLSH

        xbvelfa.sig

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbvelfa.sig
        • Size 52KB
        • SHA256 f953dfc87065292943407acb3154c6904764f144b1def109d16f99473a813249
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbvevoa.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbvevoa.dat
        • Size 980KB
        • SHA256 2272bd5fb292f0ce4d57f3eee3a4d93d6aa7405cda7bb442570c587bbce345d1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbvevope.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbvevope.dat
        • Size 2.5MB
        • SHA256 a1aef6878a7d3e21aad3c8fa0608d487e676ea9ad4525e23f91889c0a30e5ec6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbvfn.nmp

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbvfn.nmp
        • Size 1KB
        • SHA256 dee499625f93b259d24b91e478a6df1ae73b66dfee9f7c30ab0d3a7cf423d21b
        • MD5 SHA1 SHA512 TLSH

        xbvfn.sig

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbvfn.sig
        • Size 67KB
        • SHA256 f9130cb99960355159bcf5c9770430ddd5081c3ae9f3b2332d9550c15be0d92b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbvgvm.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbvgvm.dat
        • Size 11.5MB
        • SHA256 ad52781d36b13d4ec1e212d835632ebf47680577b84ab29ebfd98d30919784fa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbvjava.nmp

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbvjava.nmp
        • Size 5KB
        • SHA256 2e006f53aad04cfb34a6be8e9e0e36373bc0c67d9ef0190e8bd4e9f80b09150d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbvjava.sig

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbvjava.sig
        • Size 182KB
        • SHA256 3e0e7fcad5f9922aabbf54457b4449332772ed5b128c02f4af317e88fe2e32f0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbvjs.nmp

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbvjs.nmp
        • Size 84KB
        • SHA256 f2e80ad847ba47094aed2cad1fbb4366fb1f60d78f13619c07aa7d9f3e52e3c3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbvjs.sig

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbvjs.sig
        • Size 4.0MB
        • SHA256 e53829c56e7dca2f28f07e6f330edece6c68b6ad76511c2093252a5a294e33aa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbvmx4.nmp

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbvmx4.nmp
        • Size 448B
        • SHA256 9d22f891b8a68f89532877aad5d5c3dcf3552dcc2ce9eb9edd12b1dee8cd6fa4
        • MD5 SHA1 SHA512 TLSH

        xbvmx4.sig

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbvmx4.sig
        • Size 10KB
        • SHA256 c250c859987dd6b8fdfb19972b24e1a3b71c4522d0eefa397591f7eea47b131a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbvmx95.nmp

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbvmx95.nmp
        • Size 432B
        • SHA256 85eb2e5cb510e28fda89b996fe0885ff7b54dcc871e16fe1780252ea1a2ba59e
        • MD5 SHA1 SHA512 TLSH

        xbvmx95.sig

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbvmx95.sig
        • Size 10KB
        • SHA256 00866a638a43c673a10e3125c6b19b85dc22ec71371454c67d79a04daa12fc20
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbvo7.nmp

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbvo7.nmp
        • Size 2KB
        • SHA256 199c221a64022a745cd49c0e3e734ab16a9705ce153efac955f29d381186125a
        • MD5 SHA1 SHA512 TLSH

        xbvo7.sig

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbvo7.sig
        • Size 46KB
        • SHA256 74bf6b5ff6f21cb0a72ab7910f0a9cbc46dcbf5c99e05805cbb77f46078ceba2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbvob2.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbvob2.dat
        • Size 6.8MB
        • SHA256 4e2aea3400a9b54e0023c3ba53488c20f426c9f0d680bca4a3002d110d365fb4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbvpe.nmp

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbvpe.nmp
        • Size 115KB
        • SHA256 e7024544de623963e508ca44f0b6632bac38f640b32227994681c8153e22e4ab
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbvpe.sig

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbvpe.sig
        • Size 2.4MB
        • SHA256 3dda6b7b42c7e62af759557740665dd4cdcde1e92e64a4fbf82b63c5fb07ea27
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbvpe3.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbvpe3.dat
        • Size 9.1MB
        • SHA256 0bdbb284afac17fae374341a8325f5e4e923138464018fd4acfd0b10fec1c0be
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbvpph.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbvpph.dat
        • Size 45.1MB
        • SHA256 3010f5d231ec7590749dcfe2766bd51b8c541a051d812f5008eb4a0d7505ecd5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbvsl.nmp

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbvsl.nmp
        • Size 432B
        • SHA256 6133de8aba885552924be403847c82a01c15d3c94db4662c40e065fcde1b61d3
        • MD5 SHA1 SHA512 TLSH

        xbvsl.sig

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbvsl.sig
        • Size 11KB
        • SHA256 bd961378da4d87e5283e748148da1674476dfddb5a36a2510a61cb88e1f8858b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbvsn.nmp

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbvsn.nmp
        • Size 920B
        • SHA256 3bf20bf1bfef4fcaba7ca02c237267e50c9ce11a717f8a52f3525943e7b20a54
        • MD5 SHA1 SHA512 TLSH

        xbvsn.sig

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbvsn.sig
        • Size 18KB
        • SHA256 1a7df2e64458bdb96f4ec0d41a8f102b51b34cc919fccf4b31a216bfd8db59dd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbvsnh.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbvsnh.dat
        • Size 7.6MB
        • SHA256 0bd01229b924a42d9f077e12a9a3ac713d8730d976e04eda2b3e9fbf85bfd4fd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbvstr.nmp

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbvstr.nmp
        • Size 50KB
        • SHA256 c15b35d4dff75a05ce43a6bf25aba52870faedbaf4b373d30010a3b9681aa051
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbvstr.sig

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbvstr.sig
        • Size 813KB
        • SHA256 3c89d666501a24d423d730f2fa479067e89c31a09260bd3b714358c68fd1e7d7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbvswf.nmp

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbvswf.nmp
        • Size 928B
        • SHA256 af909e6e865ea3ed184a5f33a9bf50cabcea2c01e41e302b3eab0c9daa419ece
        • MD5 SHA1 SHA512 TLSH

        xbvswf.sig

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbvswf.sig
        • Size 16KB
        • SHA256 a0bbf708b28045f388157a79ae5787448e61896846cf17dfa8af1f9abed1c7c1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbvtx.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbvtx.dat
        • Size 1.4MB
        • SHA256 3e5effc1fbf162ec7b6f643b7534fab2ad189e59eb7d9dcae1cb89c2c62c6323
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbvw6.nmp

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbvw6.nmp
        • Size 688B
        • SHA256 1054b677fd79dd4c69e4000c85a63dbb29c7609014c342e28b77dfbcb28a35fe
        • MD5 SHA1 SHA512 TLSH

        xbvw6.sig

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbvw6.sig
        • Size 11KB
        • SHA256 431557d7676bb96e8ab73b505216a71a453794b431b3f12ba10995dff614aa62
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbvwat.nmp

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbvwat.nmp
        • Size 456B
        • SHA256 c12d6741c01972303dfa6b6741b05bf03b28258a0a5cfa3ee5b75eaab8568821
        • MD5 SHA1 SHA512 TLSH

        xbvwat.sig

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbvwat.sig
        • Size 10KB
        • SHA256 c2b9ae83ab3361c0a3ce608880d6a6dcf34d897ae59cc766c02d593242efd8ce
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xbvwh2.dat

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\pccleaner\setup\xbvwh2.dat
        • Size 14.3MB
        • SHA256 5578816ce74f45e6d2197d3a0e4346c21cbb1956c266f266ed7c4fe8126706aa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        rcimage.dll

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\rcimage.dll
        • Size 945KB
        • SHA256 8010c4e375a2449da398c4e036e33c3f488e7771154573e2934b8802d2dae874
        • MD5 SHA1 SHA512 SSDEEP TLSH

        rcnwload.dll

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\rcnwload.dll
        • Size 38KB
        • SHA256 905bc374232e3ee1248628b9352167ba4d9c27ad9f11f30fac78d9706624dfb0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        scewxmlw.dll

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\scewxmlw.dll
        • Size 146KB
        • SHA256 7ef2a109ecaf6d2d2e9a2aa4496275fe033a3df9167999d1c58dcc92df20f975
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ssleay32.dll

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\ssleay32.dll
        • Size 287KB
        • SHA256 723ac7e434018eefaa7ffd07216eb588289b02b684756fdc860c0209d08b21df
        • MD5 SHA1 SHA512 SSDEEP TLSH

        uninstall.vbs

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\uninstall.vbs
        • Size 1KB
        • SHA256 b1b76eaa3ee488bf9c82dba928c709b569397f9fd17e5d6958444e1321c736d4
        • MD5 SHA1 SHA512 TLSH

        update.dll

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\update.dll
        • Size 706KB
        • SHA256 c4bdf12152ada27335af924f7c0bb8505d409f77f411bafc9c675e72e8e49b00
        • MD5 SHA1 SHA512 SSDEEP TLSH

        updatemsg.avr

        • Path C:\Users\Admin\AppData\Local\Temp\cleaner\updatemsg.avr
        • Size 5KB
        • SHA256 dbbf3b0008daf977c1930e7aa58067469382818b5356c0b87e35ed022c881171
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory/3340-398-0x0000000000400000-0x000000000089C000-memory.dmp

        memory/4756-1-0x00000000004A0000-0x00000000004A1000-memory.dmp

        memory/4756-0-0x0000000000A50000-0x0000000000A51000-memory.dmp

        memory/4756-128-0x0000000000400000-0x000000000089C000-memory.dmp

        memory/4884-782-0x00007FF9F22D0000-0x00007FF9F22E0000-memory.dmp

        memory/4884-779-0x00007FF9F22D0000-0x00007FF9F22E0000-memory.dmp

        memory/4884-781-0x00007FF9F22D0000-0x00007FF9F22E0000-memory.dmp

        memory/4884-780-0x00007FF9F22D0000-0x00007FF9F22E0000-memory.dmp

        memory/4884-783-0x00007FF9F22D0000-0x00007FF9F22E0000-memory.dmp

        memory/4884-789-0x00007FF9F0220000-0x00007FF9F0230000-memory.dmp

        memory/4884-795-0x00007FF9F0220000-0x00007FF9F0230000-memory.dmp

        memory/5676-131-0x0000000000400000-0x000000000089C000-memory.dmp

        memory/5676-883-0x0000000000400000-0x000000000089C000-memory.dmp

        memory/5676-1195-0x0000000000400000-0x000000000089C000-memory.dmp

        memory/5676-518-0x0000000000400000-0x000000000089C000-memory.dmp

        memory/5676-2048-0x0000000000400000-0x000000000089C000-memory.dmp

        memory/5676-2053-0x0000000000400000-0x000000000089C000-memory.dmp