General

  • Target

    Setu_WINFile_x64x32.rar

  • Size

    11.9MB

  • MD5

    51758e35b89dac420595b974d17cd3e1

  • SHA1

    c0784ad432efa0ab92978a9050336ae27cce5c2d

  • SHA256

    40e2a4a10fafb03f8c2702b577cfd05de14fbdbd36d87d76c1a99cdf8e497dbb

  • SHA512

    ac5ad08dfb75520d59e4fe8d1d21f369af1db6ee3ccb1de007e73a14e92ce5ff414464a29dc99b2021ed4c233cb606095fb6f1ea6a82074c317fbe024d2f6fe4

  • SSDEEP

    196608:UWdJhtu32tt4579WDlks99FjCfV5MU7c1Uj9R03pKyzxXL0rKECdn1FSYD/wUzo9:57tltt0BWDl19fE5MF1+R0FzxXAidn1G

Score
1/10

Malware Config

Signatures

Files

  • Setu_WINFile_x64x32.rar
    .rar

    Password: 2023

  • Setu_WINFile_x64x32/Cursors/SortDefault.nls
  • Setu_WINFile_x64x32/Cursors/SortServer2003Compat.nls
  • Setu_WINFile_x64x32/Cursors/SortServer2008Compat.nls
  • Setu_WINFile_x64x32/Cursors/SortVistaCompat.nls
  • Setu_WINFile_x64x32/Cursors/SortWindows61.nls
  • Setu_WINFile_x64x32/Globalization/Time Zone/timezoneMapping.xml
  • Setu_WINFile_x64x32/Globalization/Time Zone/timezones.xml
  • Setu_WINFile_x64x32/Language/Chinese Traditional.xml
    .xml
  • Setu_WINFile_x64x32/Language/Chinese.xml
    .xml
  • Setu_WINFile_x64x32/Language/Croatian.xml
    .xml
  • Setu_WINFile_x64x32/Language/Czech.xml
    .xml
  • Setu_WINFile_x64x32/Language/Danish.xml
    .xml
  • Setu_WINFile_x64x32/Language/Deutsch.xml
    .xml
  • Setu_WINFile_x64x32/Language/Dutch.xml
    .xml
  • Setu_WINFile_x64x32/Language/English.xml
    .xml
  • Setu_WINFile_x64x32/Language/Finnish.xml
    .xml
  • Setu_WINFile_x64x32/Language/French.xml
    .xml
  • Setu_WINFile_x64x32/Language/Greek.xml
    .xml
  • Setu_WINFile_x64x32/Language/Hebrew.xml
    .xml
  • Setu_WINFile_x64x32/Language/Japanese.xml
    .xml
  • Setu_WINFile_x64x32/Language/Korean.xml
    .xml
  • Setu_WINFile_x64x32/Language/Persian.xml
    .xml
  • Setu_WINFile_x64x32/Language/Polski.xml
    .xml
  • Setu_WINFile_x64x32/Language/Portuguese.xml
    .xml
  • Setu_WINFile_x64x32/Language/Romanian.xml
    .xml
  • Setu_WINFile_x64x32/Language/Russian.xml
    .xml
  • Setu_WINFile_x64x32/Language/Slovak.xml
  • Setu_WINFile_x64x32/Language/Slovenian.xml
    .xml
  • Setu_WINFile_x64x32/Language/Spanish.xml
    .xml
  • Setu_WINFile_x64x32/Language/Swedish.xml
    .xml
  • Setu_WINFile_x64x32/Language/Turkish.xml
    .xml
  • Setu_WINFile_x64x32/Language/Ukrainian.xml
    .xml
  • Setu_WINFile_x64x32/Language/italiano.xml
    .xml
  • Setu_WINFile_x64x32/Locales/af.pak
  • Setu_WINFile_x64x32/Locales/am.pak
  • Setu_WINFile_x64x32/Locales/ar.pak
  • Setu_WINFile_x64x32/Locales/bg.pak
  • Setu_WINFile_x64x32/Locales/bn.pak
  • Setu_WINFile_x64x32/Locales/ca.pak
  • Setu_WINFile_x64x32/Locales/cs.pak
  • Setu_WINFile_x64x32/Locales/da.pak
  • Setu_WINFile_x64x32/Locales/de.pak
  • Setu_WINFile_x64x32/Locales/el.pak
  • Setu_WINFile_x64x32/Locales/en-GB.pak
  • Setu_WINFile_x64x32/Locales/en-US.pak
  • Setu_WINFile_x64x32/Locales/es-419.pak
  • Setu_WINFile_x64x32/Locales/es.pak
  • Setu_WINFile_x64x32/Locales/et.pak
  • Setu_WINFile_x64x32/Locales/fa.pak
  • Setu_WINFile_x64x32/Locales/fi.pak
  • Setu_WINFile_x64x32/Locales/fil.pak
  • Setu_WINFile_x64x32/Locales/fr.pak
  • Setu_WINFile_x64x32/Locales/gu.pak
  • Setu_WINFile_x64x32/Locales/he.pak
  • Setu_WINFile_x64x32/Locales/hi.pak
  • Setu_WINFile_x64x32/Locales/hr.pak
  • Setu_WINFile_x64x32/Locales/hu.pak
  • Setu_WINFile_x64x32/Locales/id.pak
  • Setu_WINFile_x64x32/Locales/it.pak
  • Setu_WINFile_x64x32/Locales/ja.pak
  • Setu_WINFile_x64x32/Locales/kn.pak
  • Setu_WINFile_x64x32/Locales/ko.pak
  • Setu_WINFile_x64x32/Locales/lt.pak
  • Setu_WINFile_x64x32/Locales/lv.pak
  • Setu_WINFile_x64x32/Locales/ml.pak
  • Setu_WINFile_x64x32/Locales/mr.pak
  • Setu_WINFile_x64x32/Locales/ms.pak
  • Setu_WINFile_x64x32/Locales/nb.pak
  • Setu_WINFile_x64x32/Locales/nl.pak
  • Setu_WINFile_x64x32/Locales/pl.pak
  • Setu_WINFile_x64x32/Locales/pt-BR.pak
  • Setu_WINFile_x64x32/Locales/pt-PT.pak
  • Setu_WINFile_x64x32/Locales/ro.pak
  • Setu_WINFile_x64x32/Locales/ru.pak
  • Setu_WINFile_x64x32/Locales/sk.pak
  • Setu_WINFile_x64x32/Locales/sl.pak
  • Setu_WINFile_x64x32/Locales/sr.pak
  • Setu_WINFile_x64x32/Locales/sv.pak
  • Setu_WINFile_x64x32/Locales/sw.pak
  • Setu_WINFile_x64x32/Locales/ta.pak
  • Setu_WINFile_x64x32/Locales/te.pak
  • Setu_WINFile_x64x32/Locales/th.pak
  • Setu_WINFile_x64x32/Locales/tr.pak
  • Setu_WINFile_x64x32/Locales/uk.pak
  • Setu_WINFile_x64x32/Locales/ur.pak
  • Setu_WINFile_x64x32/Locales/vi.pak
  • Setu_WINFile_x64x32/Locales/zh-CN.pak
  • Setu_WINFile_x64x32/Locales/zh-TW.pak
  • Setu_WINFile_x64x32/Resource files/ActiveXInstallService.admx
  • Setu_WINFile_x64x32/Resource files/AddRemovePrograms.admx
  • Setu_WINFile_x64x32/Resource files/AppCompat.admx
  • Setu_WINFile_x64x32/Resource files/AppXRuntime.admx
    .xml
  • Setu_WINFile_x64x32/Resource files/AppxPackageManager.admx
  • Setu_WINFile_x64x32/Resource files/AttachmentManager.admx
  • Setu_WINFile_x64x32/Resource files/AuditSettings.admx
    .xml
  • Setu_WINFile_x64x32/Resource files/AutoPlay.admx
  • Setu_WINFile_x64x32/Resource files/Biometrics.admx
  • Setu_WINFile_x64x32/Resource files/CEIPEnable.admx
  • Setu_WINFile_x64x32/Resource files/COM.admx
  • Setu_WINFile_x64x32/Resource files/CipherSuiteOrder.admx
  • Setu_WINFile_x64x32/Resource files/ControlPanel.admx
  • Setu_WINFile_x64x32/Resource files/Cpls.admx
  • Setu_WINFile_x64x32/Resource files/CredUI.admx
  • Setu_WINFile_x64x32/Resource files/CredentialProviders.admx
  • Setu_WINFile_x64x32/Resource files/CtrlAltDel.admx
  • Setu_WINFile_x64x32/Resource files/DCOM.admx
  • Setu_WINFile_x64x32/Resource files/DFS.admx
  • Setu_WINFile_x64x32/Resource files/DWM.admx
  • Setu_WINFile_x64x32/Resource files/DeviceCompat.admx
  • Setu_WINFile_x64x32/Resource files/DeviceSetup.admx
  • Setu_WINFile_x64x32/Resource files/DigitalLocker.admx
  • Setu_WINFile_x64x32/Resource files/DiskDiagnostic.admx
  • Setu_WINFile_x64x32/Resource files/DiskNVCache.admx
  • Setu_WINFile_x64x32/Resource files/DiskQuota.admx
  • Setu_WINFile_x64x32/Resource files/DistributedLinkTracking.admx
  • Setu_WINFile_x64x32/Resource files/EAIME.admx
  • Setu_WINFile_x64x32/Resource files/EarlyLaunchAM.admx
  • Setu_WINFile_x64x32/Resource files/EdgeUI.admx
  • Setu_WINFile_x64x32/Resource files/EncryptFilesonMove.admx
  • Setu_WINFile_x64x32/Resource files/EventForwarding.admx
    .xml
  • Setu_WINFile_x64x32/Resource files/EventViewer.admx
  • Setu_WINFile_x64x32/Resource files/Explorer.admx
  • Setu_WINFile_x64x32/Resource files/ExternalBoot.admx
    .xml
  • Setu_WINFile_x64x32/Resource files/FileHistory.admx
  • Setu_WINFile_x64x32/Resource files/FileRecovery.admx
  • Setu_WINFile_x64x32/Resource files/FileRevocation.admx
  • Setu_WINFile_x64x32/Resource files/FileServerVSSProvider.admx
  • Setu_WINFile_x64x32/Resource files/FileSys.admx
    .xml
  • Setu_WINFile_x64x32/Resource files/FolderRedirection.admx
  • Setu_WINFile_x64x32/Resource files/FramePanes.admx
  • Setu_WINFile_x64x32/Resource files/GameExplorer.admx
  • Setu_WINFile_x64x32/Resource files/GroupPolicy-Server.admx
  • Setu_WINFile_x64x32/Resource files/Help.admx
  • Setu_WINFile_x64x32/Resource files/HelpAndSupport.admx
  • Setu_WINFile_x64x32/Resource files/IIS.admx
  • Setu_WINFile_x64x32/Resource files/InkWatson.admx
  • Setu_WINFile_x64x32/Resource files/Kerberos.admx
  • Setu_WINFile_x64x32/Resource files/LanmanServer.admx
  • Setu_WINFile_x64x32/Resource files/LeakDiagnostic.admx
  • Setu_WINFile_x64x32/Resource files/LinkLayerTopologyDiscovery.admx
  • Setu_WINFile_x64x32/Resource files/LocationProviderAdm.admx
  • Setu_WINFile_x64x32/Resource files/MMC.admx
  • Setu_WINFile_x64x32/Resource files/MMCSnapIns2.admx
  • Setu_WINFile_x64x32/Resource files/MSDT.admx
  • Setu_WINFile_x64x32/Resource files/MediaCenter.admx
  • Setu_WINFile_x64x32/Resource files/MobilePCMobilityCenter.admx
  • Setu_WINFile_x64x32/Resource files/MobilePCPresentationSettings.admx
  • Setu_WINFile_x64x32/Resource files/Msi-FileRecovery.admx
  • Setu_WINFile_x64x32/Resource files/NAPXPQec.admx
  • Setu_WINFile_x64x32/Resource files/NCSI.admx
  • Setu_WINFile_x64x32/Resource files/NetworkIsolation.admx
  • Setu_WINFile_x64x32/Resource files/NetworkProjection.admx
  • Setu_WINFile_x64x32/Resource files/P2P-pnrp.admx
  • Setu_WINFile_x64x32/Resource files/ParentalControls.admx
  • Setu_WINFile_x64x32/Resource files/PeerToPeerCaching.admx
  • Setu_WINFile_x64x32/Resource files/PenTraining.admx
  • Setu_WINFile_x64x32/Resource files/PerformanceDiagnostics.admx
  • Setu_WINFile_x64x32/Resource files/PerformancePerftrack.admx
  • Setu_WINFile_x64x32/Resource files/PowerShellExecutionPolicy.admx
  • Setu_WINFile_x64x32/Resource files/PreviousVersions.admx
  • Setu_WINFile_x64x32/Resource files/Programs.admx
  • Setu_WINFile_x64x32/Resource files/PswdSync.admx
  • Setu_WINFile_x64x32/Resource files/RPC.admx
  • Setu_WINFile_x64x32/Resource files/RacWmiProv.admx
  • Setu_WINFile_x64x32/Resource files/Radar.admx
  • Setu_WINFile_x64x32/Resource files/ReAgent.admx
  • Setu_WINFile_x64x32/Resource files/Reliability.admx
  • Setu_WINFile_x64x32/Resource files/RemoteAssistance.admx
  • Setu_WINFile_x64x32/Resource files/Scripts.admx
  • Setu_WINFile_x64x32/Resource files/Securitycenter.admx
  • Setu_WINFile_x64x32/Resource files/Sensors.admx
  • Setu_WINFile_x64x32/Resource files/ServerManager.admx
  • Setu_WINFile_x64x32/Resource files/Servicing.admx
  • Setu_WINFile_x64x32/Resource files/Setup.admx
  • Setu_WINFile_x64x32/Resource files/SharedFolders.admx
  • Setu_WINFile_x64x32/Resource files/Sharing.admx
  • Setu_WINFile_x64x32/Resource files/Shell-CommandPrompt-RegEditTools.admx
  • Setu_WINFile_x64x32/Resource files/ShellWelcomeCenter.admx
  • Setu_WINFile_x64x32/Resource files/Sidebar.admx
  • Setu_WINFile_x64x32/Resource files/SkyDrive.admx
    .xml
  • Setu_WINFile_x64x32/Resource files/Snis.admx
  • Setu_WINFile_x64x32/Resource files/Snmp.admx
  • Setu_WINFile_x64x32/Resource files/SoundRec.admx
  • Setu_WINFile_x64x32/Resource files/SystemRestore.admx
  • Setu_WINFile_x64x32/Resource files/TPM.admx
  • Setu_WINFile_x64x32/Resource files/TaskScheduler.admx
  • Setu_WINFile_x64x32/Resource files/Thumbnails.admx
  • Setu_WINFile_x64x32/Resource files/TouchInput.admx
  • Setu_WINFile_x64x32/Resource files/W32Time.admx
  • Setu_WINFile_x64x32/Resource files/WCM.admx
  • Setu_WINFile_x64x32/Resource files/WDI.admx
  • Setu_WINFile_x64x32/Resource files/WPN.admx
  • Setu_WINFile_x64x32/Resource files/WinCal.admx
    .xml
  • Setu_WINFile_x64x32/Resource files/WinInit.admx
  • Setu_WINFile_x64x32/Resource files/WinLogon.admx
  • Setu_WINFile_x64x32/Resource files/WindowsAnytimeUpgrade.admx
  • Setu_WINFile_x64x32/Resource files/WindowsBackup.admx
  • Setu_WINFile_x64x32/Resource files/WindowsColorSystem.admx
  • Setu_WINFile_x64x32/Resource files/WindowsConnectNow.admx
  • Setu_WINFile_x64x32/Resource files/WindowsFileProtection.admx
  • Setu_WINFile_x64x32/Resource files/WindowsMail.admx
  • Setu_WINFile_x64x32/Resource files/WindowsMediaDRM.admx
  • Setu_WINFile_x64x32/Resource files/WindowsMessenger.admx
  • Setu_WINFile_x64x32/Resource files/WindowsProducts.admx
  • Setu_WINFile_x64x32/Resource files/WindowsRemoteShell.admx
  • Setu_WINFile_x64x32/Resource files/WindowsServer.admx
  • Setu_WINFile_x64x32/Resource files/Winsrv.admx
  • Setu_WINFile_x64x32/Resource files/WordWheel.admx
  • Setu_WINFile_x64x32/Resource files/WorkFolders-Client.admx
  • Setu_WINFile_x64x32/Resource files/WorkplaceJoin.admx
    .xml
  • Setu_WINFile_x64x32/Resource files/fthsvc.admx
  • Setu_WINFile_x64x32/Resource files/hotspotauth.admx
  • Setu_WINFile_x64x32/Resource files/iSCSI.admx
  • Setu_WINFile_x64x32/Resource files/kdc.admx
  • Setu_WINFile_x64x32/Resource files/msched.admx
    .xml
  • Setu_WINFile_x64x32/Resource files/nca.admx
  • Setu_WINFile_x64x32/Resource files/pca.admx
  • Setu_WINFile_x64x32/Resource files/sdiageng.admx
  • Setu_WINFile_x64x32/Resource files/srm-fci.admx
  • Setu_WINFile_x64x32/Resource files/wlansvc.admx
    .xml
  • Setu_WINFile_x64x32/Resource files/wwansvc.admx
    .xml
  • Setu_WINFile_x64x32/Set_WINFile_x64x32.exe
    .exe windows x86

    Password: 2023

    3e081a820fe6244a01fb0c6235a1ea08


    Code Sign

    Headers

    Imports

    Sections

  • Setu_WINFile_x64x32/Uses of Additional Files/WinAll/BeholdTV/amd64/bhkspex.x64
    .dll regsvr32 windows x64

    Password: 2023

    c2b63eb78a633a8cf029f36d00413c44


    Headers

    Imports

    Exports

    Sections

  • Setu_WINFile_x64x32/Uses of Additional Files/WinAll/BeholdTV/amd64/cxpolir.sys
    .exe windows x64

    Password: 2023

    ea7483a8eb714ec3ea508bf58b81a559


    Headers

    Imports

    Sections

  • Setu_WINFile_x64x32/Uses of Additional Files/WinAll/BeholdTV/amd64/ttm6010.sys
    .exe windows x64

    Password: 2023

    647437779ebf46177e2c6e415361ea9b


    Headers

    Imports

    Sections

  • Setu_WINFile_x64x32/Uses of Additional Files/WinAll/BeholdTV/beholder.cat
  • Setu_WINFile_x64x32/Uses of Additional Files/WinAll/BeholdTV/beholder.inf
  • Setu_WINFile_x64x32/Uses of Additional Files/WinAll/BeholdTV/bhkspex.dll
    .dll regsvr32 windows x86

    Password: 2023

    24ed8993fd619d7b830ee8a6485904da


    Headers

    Imports

    Exports

    Sections

  • Setu_WINFile_x64x32/Uses of Additional Files/WinAll/BeholdTV/bhkspex.x64
    .dll regsvr32 windows x64

    Password: 2023

    c2b63eb78a633a8cf029f36d00413c44


    Headers

    Imports

    Exports

    Sections

  • Setu_WINFile_x64x32/Uses of Additional Files/WinAll/BeholdTV/cx2310x.sys
    .exe windows x86

    Password: 2023

    72758abb4fd59d040b279c65c0752ea7


    Headers

    Imports

    Sections

  • Setu_WINFile_x64x32/Uses of Additional Files/WinAll/BeholdTV/cxpolir.sys
    .exe windows x86

    Password: 2023

    42c0ab85aed4e3f6e63353e7577f9e01


    Headers

    Imports

    Sections

  • Setu_WINFile_x64x32/Uses of Additional Files/WinAll/BeholdTV/i386/bhkspex.dll
    .dll regsvr32 windows x86

    24ed8993fd619d7b830ee8a6485904da


    Headers

    Imports

    Exports

    Sections

  • Setu_WINFile_x64x32/Uses of Additional Files/WinAll/BeholdTV/i386/cxpolir.sys
    .exe windows x86

    42c0ab85aed4e3f6e63353e7577f9e01


    Headers

    Imports

    Sections

  • Setu_WINFile_x64x32/Uses of Additional Files/WinAll/BeholdTV/install.x64
    .exe windows x64

    5292520ce02adff7057028b73fd61d03


    Headers

    Imports

    Sections

  • Setu_WINFile_x64x32/Uses of Additional Files/WinAll/BeholdTV/saa713x.sys
    .exe windows x86

    dccc7d9930f7acdf7504c66ef621047a


    Headers

    Imports

    Sections

  • Setu_WINFile_x64x32/Uses of Additional Files/WinAll/BeholdTV/saa7231.sys
    .exe windows x86

    4e6dd13ddad7dd7d1927110593fdd162


    Headers

    Imports

    Sections

  • Setu_WINFile_x64x32/Uses of Additional Files/WinAll/BeholdTV/ttm6010.sys
    .exe windows x86

    1e8df125497f0e9c4f965b821e5f1dcb


    Headers

    Imports

    Sections

  • Setu_WINFile_x64x32/config.txt
  • Setu_WINFile_x64x32/icuin58.dll
    .dll windows x64

    829c4c937f75bd6e9b5cf6c3ae8508aa


    Headers

    Imports

    Exports

    Sections

  • Setu_WINFile_x64x32/icuio58.dll
    .dll windows x64

    aedfc630eae0b53383402d2e82223458


    Headers

    Imports

    Exports

    Sections

  • Setu_WINFile_x64x32/icutu58.dll
    .dll windows x64

    15178b9c57c6f94cafd9095c26c0cd8f


    Headers

    Imports

    Exports

    Sections

  • Setu_WINFile_x64x32/icuuc58.dll
    .dll windows x64

    704ddd6dc3d01cfb3b3d0468752a34c8


    Headers

    Imports

    Exports

    Sections

  • Setu_WINFile_x64x32/plugins/Config/nppPluginList.dll
    .dll windows x64

    10033053d04f10f8dd58e18b71fecb77


    Code Sign

    Headers

    Imports

    Sections

  • Setu_WINFile_x64x32/plugins/DSpellCheck/DSpellCheck.dll
    .dll windows x64

    d78f77f872531e7e85c0d48b3121e134


    Headers

    Imports

    Exports

    Sections

  • Setu_WINFile_x64x32/plugins/NppConverter/NppConverter.dll
    .dll windows x64

    c1f049407ab796f51bc6dc486a89941e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Setu_WINFile_x64x32/plugins/NppExport/NppExport.dll
    .dll windows x64

    17ff9a294f3152c5c744802081c5e1c4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Setu_WINFile_x64x32/plugins/mimeTools/mimeTools.dll
    .dll windows x64

    2120549f0f488cc1a263553fac68a39f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Setu_WINFile_x64x32/unins000.dat