Submission Summary:


Technical Details:


File System Modifications

#Filename(s)File SizeFile HashAlias
1 %Temp%\Arcanum Multiverse Edition\credits.ini 506 bytes MD5: 0xE6CEA02A9642AC577C15BE0364D0108B
SHA-1: 0x973DBCA3E037577A65B7F3F60852D85F0C4CD127
(not available)
2 %Temp%\Arcanum Multiverse Edition\libeay32.dll 1,179,648 bytes MD5: 0x8D7C62103F36238D47920B33595CBFE2
SHA-1: 0x4204EB8752BE56D71B7BE1A9AEBC9C6A6CFC29CE
(not available)
3 %Temp%\Arcanum Multiverse Edition\msvcr90.dll 655,872 bytes MD5: 0xE7D91D008FE76423962B91C43C88E4EB
SHA-1: 0x29268EF0CD220AD3C5E9812BEFD3F5759B27A266
(not available)
4 %Temp%\Arcanum Multiverse Edition\ssleay32.dll 274,432 bytes MD5: 0xDBCCF27D0CCD4A09712148E18391FCB8
SHA-1: 0xE132F5E5A216CAFF2BC5C1C80B131C47BC03B8CA
(not available)
5 [file and pathname of the sample #1] 4,989,952 bytes MD5: 0x552D1D23DF389B04322C93A1A23EF06D
SHA-1: 0x96E90D97B9E9DAA34D463CD140BDDC6976A3A80E
packed with UPX [Kaspersky Lab]


Registry Modifications


Other details

Russian Federation



All content ("Information") contained in this report is the copyrighted work of Threat Expert Ltd and its associated companies ("ThreatExpert") and may not be copied without the express permission of ThreatExpert.

The Information is provided on an "as is" basis. ThreatExpert disclaims all warranties, whether express or implied, to the maximum extent permitted by law, including the implied warranties that the Information is merchantable, of satisfactory quality, accurate, fit for a particular purpose or need, or non-infringing, unless such implied warranties are legally incapable of exclusion. Further, ThreatExpert does not warrant or make any representations regarding the use or the results of the use of the Information in terms of their correctness, accuracy, reliability, or otherwise.

Copyright © 2018 ThreatExpert. All rights reserved.