Installer[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

Installer.zip
Size

4.9MB
MD5

57fe01c53d877f027fa8750c92c74398
SHA1

5a12361ef012fa4733b982c6c0cc2bc9f131c2ca
SHA256

07ddf1da2deb1de5bc2beed64dec45699b706f124d2a8e2a3c0326667da2a01a
SHA512

66f37c16c4127373e9f83ac8cbed22bd1634642649f54b7dd315d43a0438654a54c2f7d3b29a9ebf629a9007dff872392327517aeed78c2fd2c7a7e440419136
SSDEEP

98304:5vtkqFpM2Qqa7x8D5+hQ1MbpZINUhPPtVtLpTiXmyt95wqriA:5vtDy9mFSbPImRPtVh69WO

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/Data/en-US/Setup.exe	upx

Files

Installer.zip
.zip

Password: 2023
Data/1d7bf2070e3108092a14eeb1d055cb7c8e4343cc.png
.png
Data/4UaGrENHsxJlGDuGo1OIlL3Awp5MKg.woff2
Data/4UaGrENHsxJlGDuGo1OIlL3Bwp5MKg.woff2
Data/4UaGrENHsxJlGDuGo1OIlL3Kwp5MKg.woff2
Data/4UaGrENHsxJlGDuGo1OIlL3Nwp5MKg.woff2
Data/4UaGrENHsxJlGDuGo1OIlL3Owp4.woff2
Data/4UabrENHsxJlGDuGo1OIlLU94Yt3CwZ-Pw.woff2
Data/4UabrENHsxJlGDuGo1OIlLU94Yt8CwZ-Pw.woff2
Data/4UabrENHsxJlGDuGo1OIlLU94Yt9CwZ-Pw.woff2
Data/4UabrENHsxJlGDuGo1OIlLU94YtwCwZ-Pw.woff2
Data/4UabrENHsxJlGDuGo1OIlLU94YtzCwY.woff2
Data/804c406b11ef5c686de470752e4bac1fa9c3082f.png
.png
Data/865f624ce7ae679eb3e5f319df37d7491d04b191.gif
.gif
Data/ActiveXInstallService.admx
Data/AddRemovePrograms.admx
Data/AppCompat.admx
Data/AppXRuntime.admx
.xml
Data/AppxPackageManager.admx
Data/AttachmentManager.admx
Data/AuditSettings.admx
.xml
Data/AutoPlay.admx
Data/Biometrics.admx
Data/Bits.admx
Data/CEIPEnable.admx
Data/COM.admx
Data/CipherSuiteOrder.admx
Data/Conf.admx
Data/ControlPanel.admx
Data/ControlPanelDisplay.admx
Data/Cpls.admx
Data/CredSsp.admx
Data/CredUI.admx
Data/CredentialProviders.admx
Data/CtrlAltDel.admx
Data/DCOM.admx
Data/DFS.admx
Data/DWM.admx
Data/Desktop.admx
Data/DeviceCompat.admx
Data/DeviceInstallation.admx
Data/DeviceSetup.admx
Data/DigitalLocker.admx
Data/DiskDiagnostic.admx
Data/DiskNVCache.admx
Data/DiskQuota.admx
Data/DistributedLinkTracking.admx
Data/DnsClient.admx
Data/EAIME.admx
Data/EarlyLaunchAM.admx
Data/EdgeUI.admx
Data/EncryptFilesonMove.admx
Data/ErrorReporting.admx
Data/EventForwarding.admx
.xml
Data/EventLog.admx
Data/EventViewer.admx
Data/Explorer.admx
Data/ExternalBoot.admx
.xml
Data/FileHistory.admx
Data/FileRecovery.admx
Data/FileRevocation.admx
Data/FileServerVSSProvider.admx
Data/FileSys.admx
.xml
Data/Globalization.admx
Data/GroupPolicy-Server.admx
Data/GroupPolicy.admx
Data/GroupPolicyPreferences.admx
Data/Help.admx
Data/HelpAndSupport.admx
Data/ICM.admx
Data/IIS.admx
Data/InkWatson.admx
Data/Kerberos.admx
Data/LanmanServer.admx
Data/LeakDiagnostic.admx
Data/LinkLayerTopologyDiscovery.admx
Data/LocationProviderAdm.admx
Data/Logon.admx
Data/MMC.admx
Data/MMCSnapIns2.admx
Data/MMCSnapins.admx
Data/MSDT.admx
Data/MSI.admx
Data/MediaCenter.admx
Data/MobilePCMobilityCenter.admx
Data/MobilePCPresentationSettings.admx
Data/Msi-FileRecovery.admx
Data/NAPXPQec.admx
Data/NCSI.admx
Data/Netlogon.admx
Data/NetworkConnections.admx
Data/NetworkIsolation.admx
Data/NetworkProjection.admx
Data/OfflineFiles.admx
Data/P2P-pnrp.admx
Data/ParentalControls.admx
Data/PeerToPeerCaching.admx
Data/PenTraining.admx
Data/PerformanceDiagnostics.admx
Data/PerformancePerftrack.admx
Data/Power.admx
Data/PowerShellExecutionPolicy.admx
Data/PreviousVersions.admx
Data/Printing.admx
Data/Printing2.admx
Data/Programs.admx
Data/PswdSync.admx
Data/QOS.admx
Data/RPC.admx
Data/RacWmiProv.admx
Data/Radar.admx
Data/ReAgent.admx
Data/Reliability.admx
Data/RemoteAssistance.admx
Data/RemovableStorage.admx
Data/Scripts.admx
Data/Securitycenter.admx
Data/Sensors.admx
Data/ServerManager.admx
Data/Servicing.admx
Data/SettingSync.admx
Data/Setup.admx
Data/SharedFolders.admx
Data/Sharing.admx
Data/Shell-CommandPrompt-RegEditTools.admx
Data/ShellWelcomeCenter.admx
Data/Sidebar.admx
Data/SkyDrive.admx
.xml
Data/Smartcard.admx
Data/Snis.admx
Data/Snmp.admx
Data/SoundRec.admx
Data/StartMenu.admx
Data/SystemRestore.admx
Data/TPM.admx
Data/TabletPCInputPanel.admx
Data/TabletShell.admx
Data/TaskScheduler.admx
Data/Taskbar.admx
Data/TerminalServer-Server.admx
Data/TerminalServer.admx
Data/Thumbnails.admx
Data/TouchInput.admx
Data/UserProfiles.admx
Data/VolumeEncryption.admx
Data/W32Time.admx
Data/WCM.admx
Data/WDI.admx
Data/WPN.admx
Data/WinCal.admx
.xml
Data/WinInit.admx
Data/WinLogon.admx
Data/Windows.admx
Data/WindowsAnytimeUpgrade.admx
Data/WindowsBackup.admx
Data/WindowsColorSystem.admx
Data/WindowsConnectNow.admx
Data/WindowsDefender.admx
Data/WindowsExplorer.admx
Data/WindowsFileProtection.admx
Data/WindowsFirewall.admx
Data/WindowsMail.admx
Data/WindowsMediaDRM.admx
Data/WindowsMediaPlayer.admx
Data/WindowsMessenger.admx
Data/WindowsProducts.admx
Data/WindowsRemoteManagement.admx
Data/WindowsRemoteShell.admx
Data/WindowsServer.admx
Data/WindowsUpdate.admx
Data/Winsrv.admx
Data/WordWheel.admx
Data/WorkFolders-Client.admx
Data/WorkplaceJoin.admx
.xml
Data/chrome_web_store-32.png
.png
Data/common-64d82d8bc25b46502043dc430960d017.png
.png
Data/consumer-eeb1a3e062434c40fad0ecc5072e007e.png
.png
Data/consumer-hdpi-f75e2c3e83fa68b33d9ddf94cd390bba.png
.png
Data/en-US/ActiveXInstallService.adml
.xml
Data/en-US/AddRemovePrograms.adml
.xml
Data/en-US/AppCompat.adml
.xml
Data/en-US/AppXRuntime.adml
.xml
Data/en-US/AppxPackageManager.adml
.xml
Data/en-US/AttachmentManager.adml
.xml
Data/en-US/AuditSettings.adml
.xml
Data/en-US/AutoPlay.adml
.xml
Data/en-US/Biometrics.adml
.xml
Data/en-US/Bits.adml
.xml
Data/en-US/CEIPEnable.adml
.xml
Data/en-US/COM.adml
.xml
Data/en-US/CipherSuiteOrder.adml
.xml
Data/en-US/Conf.adml
.xml
Data/en-US/ControlPanel.adml
.xml
Data/en-US/ControlPanelDisplay.adml
.xml
Data/en-US/Cpls.adml
.xml
Data/en-US/CredSsp.adml
.xml
Data/en-US/CredUI.adml
.xml
Data/en-US/CredentialProviders.adml
.xml
Data/en-US/CtrlAltDel.adml
.xml
Data/en-US/DCOM.adml
.xml
Data/en-US/DFS.adml
.xml
Data/en-US/DWM.adml
.xml
Data/en-US/Desktop.adml
.xml
Data/en-US/DeviceCompat.adml
.xml
Data/en-US/DeviceInstallation.adml
.xml
Data/en-US/DeviceSetup.adml
.xml
Data/en-US/DigitalLocker.adml
.xml
Data/en-US/DiskDiagnostic.adml
.xml
Data/en-US/DiskNVCache.adml
.xml
Data/en-US/DiskQuota.adml
.xml
Data/en-US/DistributedLinkTracking.adml
.xml
Data/en-US/DnsClient.adml
.xml
Data/en-US/EAIME.adml
.xml
Data/en-US/EarlyLaunchAM.adml
Data/en-US/EdgeUI.adml
.xml
Data/en-US/EncryptFilesonMove.adml
.xml
Data/en-US/ErrorReporting.adml
.xml
Data/en-US/EventForwarding.adml
.xml
Data/en-US/EventLog.adml
.xml
Data/en-US/EventViewer.adml
.xml
Data/en-US/Explorer.adml
.xml
Data/en-US/ExternalBoot.adml
.xml
Data/en-US/FileHistory.adml
.xml
Data/en-US/FileRecovery.adml
.xml
Data/en-US/FileRevocation.adml
.xml
Data/en-US/FileServerVSSProvider.adml
.xml
Data/en-US/FileSys.adml
.xml
Data/en-US/FolderRedirection.adml
.xml
Data/en-US/FramePanes.adml
.xml
Data/en-US/GameExplorer.adml
.xml
Data/en-US/Globalization.adml
.xml
Data/en-US/GroupPolicy-Server.adml
.xml
Data/en-US/GroupPolicy.adml
.xml
Data/en-US/GroupPolicyPreferences.adml
.xml
Data/en-US/Help.adml
.xml
Data/en-US/HelpAndSupport.adml
.xml
Data/en-US/ICM.adml
.xml
Data/en-US/IIS.adml
.xml
Data/en-US/InetRes.adml
.xml
Data/en-US/InkWatson.adml
.xml
Data/en-US/KDC.adml
.xml
Data/en-US/Kerberos.adml
.xml
Data/en-US/LanmanServer.adml
.xml
Data/en-US/LeakDiagnostic.adml
.xml
Data/en-US/LinkLayerTopologyDiscovery.adml
.xml
Data/en-US/LocationProviderAdm.adml
.xml
Data/en-US/Logon.adml
.xml
Data/en-US/MMC.adml
.xml
Data/en-US/MMCSnapIns2.adml
.xml
Data/en-US/MMCSnapins.adml
.xml
Data/en-US/MSDT.adml
.xml
Data/en-US/MSI.adml
.xml
Data/en-US/MediaCenter.adml
.xml
Data/en-US/MobilePCMobilityCenter.adml
.xml
Data/en-US/MobilePCPresentationSettings.adml
.xml
Data/en-US/Msi-FileRecovery.adml
.xml
Data/en-US/NAPXPQec.adml
.xml
Data/en-US/NCSI.adml
.xml
Data/en-US/Netlogon.adml
.xml
Data/en-US/NetworkConnections.adml
.xml
Data/en-US/NetworkIsolation.adml
Data/en-US/NetworkProjection.adml
.xml
Data/en-US/OfflineFiles.adml
.xml
Data/en-US/P2P-pnrp.adml
.xml
Data/en-US/ParentalControls.adml
.xml
Data/en-US/PeerToPeerCaching.adml
.xml
Data/en-US/PenTraining.adml
.xml
Data/en-US/PerformanceDiagnostics.adml
.xml
Data/en-US/PerformancePerftrack.adml
.xml
Data/en-US/Power.adml
.xml
Data/en-US/PowerShellExecutionPolicy.adml
.xml
Data/en-US/PreviousVersions.adml
.xml
Data/en-US/Printing.adml
.xml
Data/en-US/Printing2.adml
.xml
Data/en-US/Programs.adml
.xml
Data/en-US/PswdSync.adml
.xml
Data/en-US/QOS.adml
.xml
Data/en-US/RPC.adml
.xml
Data/en-US/RacWmiProv.adml
.xml
Data/en-US/Radar.adml
.xml
Data/en-US/ReAgent.adml
.xml
Data/en-US/Reliability.adml
.xml
Data/en-US/RemoteAssistance.adml
.xml
Data/en-US/RemovableStorage.adml
.xml
Data/en-US/Scripts.adml
.xml
Data/en-US/Securitycenter.adml
.xml
Data/en-US/Sensors.adml
.xml
Data/en-US/ServerManager.adml
.xml
Data/en-US/Servicing.adml
.xml
Data/en-US/SettingSync.adml
.xml
Data/en-US/Setup.adml
.xml
Data/en-US/Setup.exe
.exe windows x86

Password: 2023

Code Sign

0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2031, 00:00

Subject

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:1c:d3:ee:a4:7e:dd:a7:a0:32:57:3b:01:4d:0a:fd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

09/04/2021, 00:00

Not After

19/06/2024, 23:59

Subject

CN=Mozilla Corporation,OU=Firefox Engineering Operations,O=Mozilla Corporation,L=Mountain View,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7e:89:b9:df:00:6b:d1:aa:4c:48:d8:65:03:96:34:ca
Certificate

Issuer

CN=Dummy

Not Before

01/01/2013, 07:00

Not After

02/01/2013, 07:00

Subject

CN=Dummy

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

11:2b:16:fb:19:28:ea:fd:53:66:b7:9f:b9:5f:42:a8:7c:5f:6b:96:e0:50:51:a6:8f:e9:c1:b7:a7:f0:54:22
Signer

Actual PE Digest

11:2b:16:fb:19:28:ea:fd:53:66:b7:9f:b9:5f:42:a8:7c:5f:6b:96:e0:50:51:a6:8f:e9:c1:b7:a7:f0:54:22

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=Mozilla Corporation,OU=Firefox Engineering Operations,O=Mozilla Corporation,L=Mountain View,ST=California,C=US

12/01/2023, 20:21
Valid: true

Chain 1

CN=Mozilla Corporation,OU=Firefox Engineering Operations,O=Mozilla Corporation,L=Mountain View,ST=California,C=US

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 144KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 64KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 63KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 105KB - Virtual size: 105KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Data/en-US/SharedFolders.adml
.xml
Data/en-US/Sharing.adml
.xml
Data/en-US/Shell-CommandPrompt-RegEditTools.adml
.xml
Data/en-US/ShellWelcomeCenter.adml
.xml
Data/en-US/Sidebar.adml
.xml
Data/en-US/SkyDrive.adml
.xml
Data/en-US/Smartcard.adml
.xml
Data/en-US/Snis.adml
.xml
Data/en-US/Snmp.adml
.xml
Data/en-US/SoundRec.adml
.xml
Data/en-US/StartMenu.adml
.xml
Data/en-US/SystemRestore.adml
.xml
Data/en-US/TPM.adml
.xml
Data/en-US/TabletPCInputPanel.adml
.xml
Data/en-US/TabletShell.adml
.xml
Data/en-US/TaskScheduler.adml
.xml
Data/en-US/Taskbar.adml
.xml
Data/en-US/TerminalServer-Server.adml
.xml
Data/en-US/TerminalServer.adml
.xml
Data/en-US/Thumbnails.adml
.xml
Data/en-US/TouchInput.adml
.xml
Data/en-US/UserProfiles.adml
.xml
Data/en-US/VolumeEncryption.adml
.xml
Data/en-US/W32Time.adml
.xml
Data/en-US/WCM.adml
.xml
Data/en-US/WDI.adml
.xml
Data/en-US/WPN.adml
.xml
Data/en-US/WinCal.adml
.xml
Data/en-US/WinInit.adml
.xml
Data/en-US/WinLogon.adml
.xml
Data/en-US/Windows.adml
.xml
Data/en-US/WindowsAnytimeUpgrade.adml
.xml
Data/en-US/WindowsBackup.adml
.xml
Data/en-US/WindowsColorSystem.adml
.xml
Data/en-US/WindowsConnectNow.adml
.xml
Data/en-US/WindowsDefender.adml
Data/en-US/WindowsExplorer.adml
.xml
Data/en-US/WindowsFileProtection.adml
.xml
Data/en-US/WindowsFirewall.adml
.xml
Data/en-US/WindowsMail.adml
.xml
Data/en-US/WindowsMediaDRM.adml
.xml
Data/en-US/WindowsMediaPlayer.adml
.xml
Data/en-US/WindowsMessenger.adml
.xml
Data/en-US/WindowsProducts.adml
.xml
Data/en-US/WindowsRemoteManagement.adml
.xml
Data/en-US/WindowsRemoteShell.adml
.xml
Data/en-US/WindowsServer.adml
.xml
Data/en-US/WindowsUpdate.adml
.xml
Data/en-US/Winsrv.adml
.xml
Data/en-US/WordWheel.adml
.xml
Data/en-US/WorkFolders-Client.adml
.xml
Data/en-US/WorkplaceJoin.adml
.xml
Data/en-US/fthsvc.adml
.xml
Data/en-US/hotspotauth.adml
.xml
Data/en-US/iSCSI.adml
.xml
Data/en-US/img-16.png
.png
Data/en-US/msched.adml
.xml
Data/en-US/nca.adml
Data/en-US/pca.adml
.xml
Data/en-US/sdiageng.adml
.xml
Data/en-US/srm-fci.adml
.xml
Data/en-US/tcpip.adml
.xml
Data/en-US/wlansvc.adml
.xml
Data/en-US/wwansvc.adml
.xml
Data/hotspotauth.admx
Data/iSCSI.admx
Data/icon_144px.png
.png
Data/icon_48px.png
.png
Data/icon_96px.png
.png
Data/inetres.admx
.xml
Data/kdc.admx
Data/mem5YaGs126MiZpBA-UN_r8OUehpOqc.woff2
Data/mem5YaGs126MiZpBA-UN_r8OUuhp.woff2
Data/mem5YaGs126MiZpBA-UN_r8OVuhpOqc.woff2
Data/mem5YaGs126MiZpBA-UN_r8OX-hpOqc.woff2
Data/mem5YaGs126MiZpBA-UN_r8OXOhpOqc.woff2
Data/mem5YaGs126MiZpBA-UN_r8OXehpOqc.woff2
Data/mem5YaGs126MiZpBA-UN_r8OXuhpOqc.woff2
Data/mem8YaGs126MiZpBA-UFUZ0bbck.woff2
Data/mem8YaGs126MiZpBA-UFVZ0b.woff2
Data/mem8YaGs126MiZpBA-UFVp0bbck.woff2
Data/mem8YaGs126MiZpBA-UFW50bbck.woff2
Data/mem8YaGs126MiZpBA-UFWJ0bbck.woff2
Data/mem8YaGs126MiZpBA-UFWZ0bbck.woff2
Data/mem8YaGs126MiZpBA-UFWp0bbck.woff2
Data/msched.admx
.xml
Data/mspin_googcolor_medium.css
Data/mspin_googcolor_medium.svg
Data/nca.admx
Data/pca.admx
Data/sdiageng.admx
Data/srm-fci.admx
Data/tcpip.admx
.xml
Data/unnamed-1.jpg
.jpg
Data/unnamed-1.png
.png
Data/unnamed-10.jpg
.jpg
Data/unnamed-100.jpg
.jpg
Data/unnamed-101.jpg
.jpg
Data/unnamed-102.jpg
.jpg
Data/unnamed-103.jpg
.jpg
Data/unnamed-104.jpg
.jpg
Data/unnamed-105.jpg
.jpg
Data/unnamed-106.jpg
.jpg
Data/unnamed-107.jpg
.jpg
Data/unnamed-108.jpg
.jpg
Data/unnamed-109.jpg
.jpg
Data/unnamed-11.jpg
.jpg
Data/unnamed-110.jpg
.jpg
Data/unnamed-111.jpg
.jpg
Data/unnamed-112.jpg
.jpg
Data/unnamed-113.jpg
.jpg
Data/unnamed-114.jpg
.jpg
Data/unnamed-115.jpg
.jpg
Data/unnamed-116.jpg
.jpg
Data/unnamed-117.jpg
.jpg
Data/unnamed-118.jpg
.jpg
Data/unnamed-119.jpg
.jpg
Data/unnamed-12.jpg
.jpg
Data/unnamed-120.jpg
.jpg
Data/unnamed-121.jpg
.jpg
Data/unnamed-122.jpg
.jpg
Data/unnamed-123.jpg
.jpg
Data/unnamed-124.jpg
.jpg
Data/unnamed-125.jpg
.jpg
Data/unnamed-126.jpg
.jpg
Data/unnamed-127.jpg
.jpg
Data/unnamed-128.jpg
.jpg
Data/unnamed-129.jpg
.jpg
Data/unnamed-13.jpg
.jpg
Data/unnamed-130.jpg
.jpg
Data/unnamed-131.jpg
.jpg
Data/unnamed-132.jpg
.jpg
Data/unnamed-133.jpg
.jpg
Data/unnamed-134.jpg
.jpg
Data/unnamed-135.jpg
.jpg
Data/unnamed-136.jpg
.jpg
Data/unnamed-137.jpg
.jpg
Data/unnamed-138.jpg
.jpg
Data/unnamed-139.jpg
.jpg
Data/unnamed-14.jpg
.jpg
Data/unnamed-140.jpg
.jpg
Data/unnamed-141.jpg
.jpg
Data/unnamed-142.jpg
.jpg
Data/unnamed-143.jpg
.jpg
Data/unnamed-144.jpg
.jpg
Data/unnamed-145.jpg
.jpg
Data/unnamed-146.jpg
.jpg
Data/unnamed-147.jpg
.jpg
Data/unnamed-148.jpg
.jpg
Data/unnamed-149.jpg
.jpg
Data/unnamed-15.jpg
.jpg
Data/unnamed-150.jpg
.jpg
Data/unnamed-151.jpg
.jpg
Data/unnamed-152.jpg
.jpg
Data/unnamed-153.jpg
.jpg
Data/unnamed-154.jpg
.jpg
Data/unnamed-155.jpg
.jpg
Data/unnamed-156.jpg
.jpg
Data/unnamed-157.jpg
.jpg
Data/unnamed-158.jpg
.jpg
Data/unnamed-159.jpg
.jpg
Data/unnamed-16.jpg
.jpg
Data/unnamed-160.jpg
.jpg
Data/unnamed-161.jpg
.jpg
Data/unnamed-162.jpg
.jpg
Data/unnamed-163.jpg
.jpg
Data/unnamed-164.jpg
.jpg
Data/unnamed-165.jpg
.jpg
Data/unnamed-166.jpg
.jpg
Data/unnamed-167.jpg
.jpg
Data/unnamed-168.jpg
.jpg
Data/unnamed-169.jpg
.jpg
Data/unnamed-17.jpg
.jpg
Data/unnamed-170.jpg
.jpg
Data/unnamed-171.jpg
.jpg
Data/unnamed-172.jpg
.jpg
Data/unnamed-173.jpg
.jpg
Data/unnamed-174.jpg
.jpg
Data/unnamed-175.jpg
.jpg
Data/unnamed-176.jpg
.jpg
Data/unnamed-177.jpg
.jpg
Data/unnamed-178.jpg
.jpg
Data/unnamed-179.jpg
.jpg
Data/unnamed-18.jpg
.jpg
Data/unnamed-180.jpg
.jpg
Data/unnamed-181.jpg
.jpg
Data/unnamed-182.jpg
.jpg
Data/unnamed-183.jpg
.jpg
Data/unnamed-184.jpg
.jpg
Data/unnamed-185.jpg
.jpg
Data/unnamed-186.jpg
.jpg
Data/unnamed-187.jpg
.jpg
Data/unnamed-188.jpg
.jpg
Data/unnamed-189.jpg
.jpg
Data/unnamed-19.jpg
.jpg
Data/unnamed-190.jpg
.jpg
Data/unnamed-191.jpg
.jpg
Data/unnamed-192.jpg
.jpg
Data/unnamed-193.jpg
.jpg
Data/unnamed-194.jpg
.jpg
Data/unnamed-195.jpg
.jpg
Data/unnamed-196.jpg
.jpg
Data/unnamed-197.jpg
.jpg
Data/unnamed-198.jpg
.jpg
Data/unnamed-199.jpg
.jpg
Data/unnamed-2.jpg
.jpg
Data/unnamed-2.png
.png
Data/unnamed-20.jpg
.jpg
Data/unnamed-200.jpg
.jpg
Data/unnamed-201.jpg
.jpg
Data/unnamed-202.jpg
.jpg
Data/unnamed-203.jpg
.jpg
Data/unnamed-204.jpg
.jpg
Data/unnamed-205.jpg
.jpg
Data/unnamed-206.jpg
.jpg
Data/unnamed-207.jpg
.jpg
Data/unnamed-208.jpg
.jpg
Data/unnamed-209.jpg
.jpg
Data/unnamed-21.jpg
.jpg
Data/unnamed-210.jpg
.jpg
Data/unnamed-211.jpg
.jpg
Data/unnamed-212.jpg
.jpg
Data/unnamed-213.jpg
.jpg
Data/unnamed-214.jpg
.jpg
Data/unnamed-215.jpg
.jpg
Data/unnamed-22.jpg
.jpg
Data/unnamed-23.jpg
.jpg
Data/unnamed-24.jpg
.jpg
Data/unnamed-25.jpg
.jpg
Data/unnamed-26.jpg
.jpg
Data/unnamed-27.jpg
.jpg
Data/unnamed-28.jpg
.jpg
Data/unnamed-29.jpg
.jpg
Data/unnamed-3.jpg
.jpg
Data/unnamed-3.png
.png
Data/unnamed-30.jpg
.jpg
Data/unnamed-31.jpg
.jpg
Data/unnamed-32.jpg
.jpg
Data/unnamed-33.jpg
.jpg
Data/unnamed-34.jpg
.jpg
Data/unnamed-35.jpg
.jpg
Data/unnamed-36.jpg
.jpg
Data/unnamed-37.jpg
.jpg
Data/unnamed-38.jpg
.jpg
Data/unnamed-39.jpg
.jpg
Data/unnamed-4.jpg
.jpg
Data/unnamed-40.jpg
.jpg
Data/unnamed-41.jpg
.jpg
Data/unnamed-42.jpg
.jpg
Data/unnamed-43.jpg
.jpg
Data/unnamed-44.jpg
.jpg
Data/unnamed-45.jpg
.jpg
Data/unnamed-46.jpg
.jpg
Data/unnamed-47.jpg
.jpg
Data/unnamed-48.jpg
.jpg
Data/unnamed-49.jpg
.jpg
Data/unnamed-5.jpg
.jpg
Data/unnamed-50.jpg
.jpg
Data/unnamed-51.jpg
.jpg
Data/unnamed-52.jpg
.jpg
Data/unnamed-53.jpg
.jpg
Data/unnamed-54.jpg
.jpg
Data/unnamed-55.jpg
.jpg
Data/unnamed-56.jpg
.jpg
Data/unnamed-57.jpg
.jpg
Data/unnamed-58.jpg
.jpg
Data/unnamed-59.jpg
.jpg
Data/unnamed-6.jpg
.jpg
Data/unnamed-60.jpg
.jpg
Data/unnamed-61.jpg
.jpg
Data/unnamed-62.jpg
.jpg
Data/unnamed-63.jpg
.jpg
Data/unnamed-64.jpg
.jpg
Data/unnamed-65.jpg
.jpg
Data/unnamed-66.jpg
.jpg
Data/unnamed-67.jpg
.jpg
Data/unnamed-68.jpg
.jpg
Data/unnamed-69.jpg
.jpg
Data/unnamed-7.jpg
.jpg
Data/unnamed-70.jpg
.jpg
Data/unnamed-71.jpg
.jpg
Data/unnamed-72.jpg
.jpg
Data/unnamed-73.jpg
.jpg
Data/unnamed-74.jpg
.jpg
Data/unnamed-75.jpg
.jpg
Data/unnamed-76.jpg
.jpg
Data/unnamed-77.jpg
.jpg
Data/unnamed-78.jpg
.jpg
Data/unnamed-79.jpg
.jpg
Data/unnamed-8.jpg
.jpg
Data/unnamed-80.jpg
.jpg
Data/unnamed-81.jpg
.jpg
Data/unnamed-82.jpg
.jpg
Data/unnamed-83.jpg
.jpg
Data/unnamed-84.jpg
.jpg
Data/unnamed-85.jpg
.jpg
Data/unnamed-86.jpg
.jpg
Data/unnamed-87.jpg
.jpg
Data/unnamed-88.jpg
.jpg
Data/unnamed-89.jpg
.jpg
Data/unnamed-9.jpg
.jpg
Data/unnamed-90.jpg
.jpg
Data/unnamed-91.jpg
.jpg
Data/unnamed-92.jpg
.jpg
Data/unnamed-93.jpg
.jpg
Data/unnamed-94.jpg
.jpg
Data/unnamed-95.jpg
.jpg
Data/unnamed-96.jpg
.jpg
Data/unnamed-97.jpg
.jpg
Data/unnamed-98.jpg
.jpg
Data/unnamed-99.jpg
.jpg
Data/unnamed.jpg
.jpg
Data/unnamed.png
.png
Data/wlansvc.admx
.xml
Data/wwansvc.admx
.xml
Installer.exe
.exe windows x86

Password: 2023

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:02:cc:8e:b5:96:a6:bd:d1:c9:4e:00:00:00:00:02:cc
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/05/2022, 20:46

Not After

11/05/2023, 20:46

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5f:6a:bb:9c:cc:55:56:e1:1c:2a:31:81:7a:75:9c:7c:6a:ca:65:40:1e:f7:6c:aa:75:63:b7:48:22:b8:e4:f7
Signer

Actual PE Digest

5f:6a:bb:9c:cc:55:56:e1:1c:2a:31:81:7a:75:9c:7c:6a:ca:65:40:1e:f7:6c:aa:75:63:b7:48:22:b8:e4:f7

Digest Algorithm

sha256

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

07/02/2023, 20:42
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: 2023

Password: 2023

Code Sign

0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39Certificate

Key Usages

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

0c:1c:d3:ee:a4:7e:dd:a7:a0:32:57:3b:01:4d:0a:fdCertificate

Extended Key Usages

Key Usages

7e:89:b9:df:00:6b:d1:aa:4c:48:d8:65:03:96:34:caCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5aCertificate

Extended Key Usages

Key Usages

11:2b:16:fb:19:28:ea:fd:53:66:b7:9f:b9:5f:42:a8:7c:5f:6b:96:e0:50:51:a6:8f:e9:c1:b7:a7:f0:54:22Signer

Signature Validations

Verification

12/01/2023, 20:21 Valid: true

Chain 1

Headers

File Characteristics

Sections

UPX0 Size: - Virtual size: 144KB

UPX1 Size: 64KB - Virtual size: 68KB

.rsrc Size: 63KB - Virtual size: 64KB

Headers

File Characteristics

Sections

.text Size: 105KB - Virtual size: 105KB

.rdata Size: 16KB - Virtual size: 15KB

.data Size: 2KB - Virtual size: 10KB

.rsrc Size: 63KB - Virtual size: 63KB

Password: 2023

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:02:cc:8e:b5:96:a6:bd:d1:c9:4e:00:00:00:00:02:ccCertificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

5f:6a:bb:9c:cc:55:56:e1:1c:2a:31:81:7a:75:9c:7c:6a:ca:65:40:1e:f7:6c:aa:75:63:b7:48:22:b8:e4:f7Signer

Signature Validations

Verification

07/02/2023, 20:42 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 1.4MB - Virtual size: 1.4MB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39
Certificate

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

0c:1c:d3:ee:a4:7e:dd:a7:a0:32:57:3b:01:4d:0a:fd
Certificate

7e:89:b9:df:00:6b:d1:aa:4c:48:d8:65:03:96:34:ca
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

11:2b:16:fb:19:28:ea:fd:53:66:b7:9f:b9:5f:42:a8:7c:5f:6b:96:e0:50:51:a6:8f:e9:c1:b7:a7:f0:54:22
Signer

12/01/2023, 20:21
Valid: true

UPX0
Size: - Virtual size: 144KB

UPX1
Size: 64KB - Virtual size: 68KB

.rsrc
Size: 63KB - Virtual size: 64KB

.text
Size: 105KB - Virtual size: 105KB

.rdata
Size: 16KB - Virtual size: 15KB

.data
Size: 2KB - Virtual size: 10KB

.rsrc
Size: 63KB - Virtual size: 63KB

33:00:00:02:cc:8e:b5:96:a6:bd:d1:c9:4e:00:00:00:00:02:cc
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

5f:6a:bb:9c:cc:55:56:e1:1c:2a:31:81:7a:75:9c:7c:6a:ca:65:40:1e:f7:6c:aa:75:63:b7:48:22:b8:e4:f7
Signer

07/02/2023, 20:42
Valid: false

.text
Size: 1.4MB - Virtual size: 1.4MB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B