General

  • Target

    WindowSetupLaunch.rar

  • Size

    12.3MB

  • MD5

    6e6fefb878e0b74019b8c8cfec426cf4

  • SHA1

    478b907954eb5a9d7f920c5bf0d6985c21fd238b

  • SHA256

    d5dbda5fcd91459db34c44d1e34cfebd628c729682d44c6ba9c417013dd66fdb

  • SHA512

    669d171671b79127935702048dbe7bf3e1acf2f3029db7daf2a4df3fc554cb9f36062109b86882a02df35891b8c1d25f914aadaabdd6b85f821714bd98ab83f7

  • SSDEEP

    393216:1UYWbfxVew/lHbJghJMSwEpH49Lrjk5Dq:Kbu41aH493k52

Score
1/10

Malware Config

Signatures

Files

  • WindowSetupLaunch.rar
    .rar

    Password: 2023

  • WindowSetupLaunch/Cursors/SortDefault.nls
  • WindowSetupLaunch/Cursors/SortServer2003Compat.nls
  • WindowSetupLaunch/Cursors/SortServer2008Compat.nls
  • WindowSetupLaunch/Cursors/SortVistaCompat.nls
  • WindowSetupLaunch/Cursors/SortWindows61.nls
  • WindowSetupLaunch/Globalization/Time Zone/timezoneMapping.xml
  • WindowSetupLaunch/Globalization/Time Zone/timezones.xml
  • WindowSetupLaunch/Globalization/icuin58.dll
    .dll windows x64

    Password: 2023

    829c4c937f75bd6e9b5cf6c3ae8508aa


    Headers

    Imports

    Exports

    Sections

  • WindowSetupLaunch/Globalization/icuuc58.dll
    .dll windows x64

    Password: 2023

    704ddd6dc3d01cfb3b3d0468752a34c8


    Headers

    Imports

    Exports

    Sections

  • WindowSetupLaunch/Language/Chinese Traditional.xml
    .xml
  • WindowSetupLaunch/Language/Chinese.xml
    .xml
  • WindowSetupLaunch/Language/Croatian.xml
    .xml
  • WindowSetupLaunch/Language/Czech.xml
    .xml
  • WindowSetupLaunch/Language/Danish.xml
    .xml
  • WindowSetupLaunch/Language/Deutsch.xml
    .xml
  • WindowSetupLaunch/Language/Dutch.xml
    .xml
  • WindowSetupLaunch/Language/English.xml
    .xml
  • WindowSetupLaunch/Language/Finnish.xml
    .xml
  • WindowSetupLaunch/Language/French.xml
    .xml
  • WindowSetupLaunch/Language/Greek.xml
    .xml
  • WindowSetupLaunch/Language/Hebrew.xml
    .xml
  • WindowSetupLaunch/Language/Japanese.xml
    .xml
  • WindowSetupLaunch/Language/Korean.xml
    .xml
  • WindowSetupLaunch/Language/Persian.xml
    .xml
  • WindowSetupLaunch/Language/Polski.xml
    .xml
  • WindowSetupLaunch/Language/Portuguese.xml
    .xml
  • WindowSetupLaunch/Language/Romanian.xml
    .xml
  • WindowSetupLaunch/Language/Russian.xml
    .xml
  • WindowSetupLaunch/Language/Slovak.xml
  • WindowSetupLaunch/Language/Slovenian.xml
    .xml
  • WindowSetupLaunch/Language/Spanish.xml
    .xml
  • WindowSetupLaunch/Language/Swedish.xml
    .xml
  • WindowSetupLaunch/Language/Turkish.xml
    .xml
  • WindowSetupLaunch/Language/Ukrainian.xml
    .xml
  • WindowSetupLaunch/Language/italiano.xml
    .xml
  • WindowSetupLaunch/Resource files/5EA02A401DF23650s
  • WindowSetupLaunch/Resource files/649D9AB8E2BBE9D8s
  • WindowSetupLaunch/Resource files/6709E3A5B243A42As
  • WindowSetupLaunch/Resource files/941BE86F42042ACDs
  • WindowSetupLaunch/Resource files/ABF76DFA3E45BFBBs
  • WindowSetupLaunch/Resource files/ActiveXInstallService.admx
  • WindowSetupLaunch/Resource files/AddRemovePrograms.admx
  • WindowSetupLaunch/Resource files/AppCompat.admx
  • WindowSetupLaunch/Resource files/AppXRuntime.admx
    .xml
  • WindowSetupLaunch/Resource files/AppxPackageManager.admx
  • WindowSetupLaunch/Resource files/AttachmentManager.admx
  • WindowSetupLaunch/Resource files/AuditSettings.admx
    .xml
  • WindowSetupLaunch/Resource files/AutoPlay.admx
  • WindowSetupLaunch/Resource files/Biometrics.admx
  • WindowSetupLaunch/Resource files/CEIPEnable.admx
  • WindowSetupLaunch/Resource files/COM.admx
  • WindowSetupLaunch/Resource files/CipherSuiteOrder.admx
  • WindowSetupLaunch/Resource files/ControlPanel.admx
  • WindowSetupLaunch/Resource files/Cpls.admx
  • WindowSetupLaunch/Resource files/CredUI.admx
  • WindowSetupLaunch/Resource files/CredentialProviders.admx
  • WindowSetupLaunch/Resource files/CtrlAltDel.admx
  • WindowSetupLaunch/Resource files/D877F783D5D3EF8Cs
  • WindowSetupLaunch/Resource files/DCOM.admx
  • WindowSetupLaunch/Resource files/DFS.admx
  • WindowSetupLaunch/Resource files/DWM.admx
  • WindowSetupLaunch/Resource files/DeviceCompat.admx
  • WindowSetupLaunch/Resource files/DeviceSetup.admx
  • WindowSetupLaunch/Resource files/DigitalLocker.admx
  • WindowSetupLaunch/Resource files/DiskDiagnostic.admx
  • WindowSetupLaunch/Resource files/DiskNVCache.admx
  • WindowSetupLaunch/Resource files/DiskQuota.admx
  • WindowSetupLaunch/Resource files/DistributedLinkTracking.admx
  • WindowSetupLaunch/Resource files/EAIME.admx
  • WindowSetupLaunch/Resource files/EarlyLaunchAM.admx
  • WindowSetupLaunch/Resource files/EdgeUI.admx
  • WindowSetupLaunch/Resource files/EncryptFilesonMove.admx
  • WindowSetupLaunch/Resource files/EventForwarding.admx
    .xml
  • WindowSetupLaunch/Resource files/EventViewer.admx
  • WindowSetupLaunch/Resource files/Explorer.admx
  • WindowSetupLaunch/Resource files/ExternalBoot.admx
    .xml
  • WindowSetupLaunch/Resource files/FileHistory.admx
  • WindowSetupLaunch/Resource files/FileRecovery.admx
  • WindowSetupLaunch/Resource files/FileRevocation.admx
  • WindowSetupLaunch/Resource files/FileServerVSSProvider.admx
  • WindowSetupLaunch/Resource files/FileSys.admx
    .xml
  • WindowSetupLaunch/Resource files/FolderRedirection.admx
  • WindowSetupLaunch/Resource files/FramePanes.admx
  • WindowSetupLaunch/Resource files/GameExplorer.admx
  • WindowSetupLaunch/Resource files/GroupPolicy-Server.admx
  • WindowSetupLaunch/Resource files/Help.admx
  • WindowSetupLaunch/Resource files/HelpAndSupport.admx
  • WindowSetupLaunch/Resource files/IIS.admx
  • WindowSetupLaunch/Resource files/InkWatson.admx
  • WindowSetupLaunch/Resource files/Kerberos.admx
  • WindowSetupLaunch/Resource files/LanmanServer.admx
  • WindowSetupLaunch/Resource files/LeakDiagnostic.admx
  • WindowSetupLaunch/Resource files/LinkLayerTopologyDiscovery.admx
  • WindowSetupLaunch/Resource files/LocationProviderAdm.admx
  • WindowSetupLaunch/Resource files/MMC.admx
  • WindowSetupLaunch/Resource files/MMCSnapIns2.admx
  • WindowSetupLaunch/Resource files/MSDT.admx
  • WindowSetupLaunch/Resource files/MediaCenter.admx
  • WindowSetupLaunch/Resource files/MobilePCMobilityCenter.admx
  • WindowSetupLaunch/Resource files/MobilePCPresentationSettings.admx
  • WindowSetupLaunch/Resource files/Msi-FileRecovery.admx
  • WindowSetupLaunch/Resource files/NAPXPQec.admx
  • WindowSetupLaunch/Resource files/NCSI.admx
  • WindowSetupLaunch/Resource files/NetworkIsolation.admx
  • WindowSetupLaunch/Resource files/NetworkProjection.admx
  • WindowSetupLaunch/Resource files/P2P-pnrp.admx
  • WindowSetupLaunch/Resource files/ParentalControls.admx
  • WindowSetupLaunch/Resource files/PeerToPeerCaching.admx
  • WindowSetupLaunch/Resource files/PenTraining.admx
  • WindowSetupLaunch/Resource files/PerformanceDiagnostics.admx
  • WindowSetupLaunch/Resource files/PerformancePerftrack.admx
  • WindowSetupLaunch/Resource files/PowerShellExecutionPolicy.admx
  • WindowSetupLaunch/Resource files/PreviousVersions.admx
  • WindowSetupLaunch/Resource files/Programs.admx
  • WindowSetupLaunch/Resource files/PswdSync.admx
  • WindowSetupLaunch/Resource files/RPC.admx
  • WindowSetupLaunch/Resource files/RacWmiProv.admx
  • WindowSetupLaunch/Resource files/Radar.admx
  • WindowSetupLaunch/Resource files/ReAgent.admx
  • WindowSetupLaunch/Resource files/Reliability.admx
  • WindowSetupLaunch/Resource files/RemoteAssistance.admx
  • WindowSetupLaunch/Resource files/Scripts.admx
  • WindowSetupLaunch/Resource files/Securitycenter.admx
  • WindowSetupLaunch/Resource files/Sensors.admx
  • WindowSetupLaunch/Resource files/ServerManager.admx
  • WindowSetupLaunch/Resource files/Servicing.admx
  • WindowSetupLaunch/Resource files/Setup.admx
  • WindowSetupLaunch/Resource files/SharedFolders.admx
  • WindowSetupLaunch/Resource files/Sharing.admx
  • WindowSetupLaunch/Resource files/Shell-CommandPrompt-RegEditTools.admx
  • WindowSetupLaunch/Resource files/ShellWelcomeCenter.admx
  • WindowSetupLaunch/Resource files/Sidebar.admx
  • WindowSetupLaunch/Resource files/SkyDrive.admx
    .xml
  • WindowSetupLaunch/Resource files/Snis.admx
  • WindowSetupLaunch/Resource files/Snmp.admx
  • WindowSetupLaunch/Resource files/SoundRec.admx
  • WindowSetupLaunch/Resource files/SystemRestore.admx
  • WindowSetupLaunch/Resource files/TPM.admx
  • WindowSetupLaunch/Resource files/TaskScheduler.admx
  • WindowSetupLaunch/Resource files/Thumbnails.admx
  • WindowSetupLaunch/Resource files/TouchInput.admx
  • WindowSetupLaunch/Resource files/W32Time.admx
  • WindowSetupLaunch/Resource files/WCM.admx
  • WindowSetupLaunch/Resource files/WDI.admx
  • WindowSetupLaunch/Resource files/WPN.admx
  • WindowSetupLaunch/Resource files/WinCal.admx
    .xml
  • WindowSetupLaunch/Resource files/WinInit.admx
  • WindowSetupLaunch/Resource files/WinLogon.admx
  • WindowSetupLaunch/Resource files/WindowsAnytimeUpgrade.admx
  • WindowSetupLaunch/Resource files/WindowsBackup.admx
  • WindowSetupLaunch/Resource files/WindowsColorSystem.admx
  • WindowSetupLaunch/Resource files/WindowsConnectNow.admx
  • WindowSetupLaunch/Resource files/WindowsFileProtection.admx
  • WindowSetupLaunch/Resource files/WindowsMail.admx
  • WindowSetupLaunch/Resource files/WindowsMediaDRM.admx
  • WindowSetupLaunch/Resource files/WindowsMessenger.admx
  • WindowSetupLaunch/Resource files/WindowsProducts.admx
  • WindowSetupLaunch/Resource files/WindowsRemoteShell.admx
  • WindowSetupLaunch/Resource files/WindowsServer.admx
  • WindowSetupLaunch/Resource files/Winsrv.admx
  • WindowSetupLaunch/Resource files/WordWheel.admx
  • WindowSetupLaunch/Resource files/WorkFolders-Client.admx
  • WindowSetupLaunch/Resource files/WorkplaceJoin.admx
    .xml
  • WindowSetupLaunch/Resource files/countries
  • WindowSetupLaunch/Resource files/fthsvc.admx
  • WindowSetupLaunch/Resource files/hotspotauth.admx
  • WindowSetupLaunch/Resource files/iSCSI.admx
  • WindowSetupLaunch/Resource files/icuin58.dll
    .dll windows x64

    Password: 2023

    829c4c937f75bd6e9b5cf6c3ae8508aa


    Headers

    Imports

    Exports

    Sections

  • WindowSetupLaunch/Resource files/icuuc58.dll
    .dll windows x64

    Password: 2023

    704ddd6dc3d01cfb3b3d0468752a34c8


    Headers

    Imports

    Exports

    Sections

  • WindowSetupLaunch/Resource files/kdc.admx
  • WindowSetupLaunch/Resource files/key_datas
  • WindowSetupLaunch/Resource files/msched.admx
    .xml
  • WindowSetupLaunch/Resource files/nca.admx
  • WindowSetupLaunch/Resource files/pca.admx
  • WindowSetupLaunch/Resource files/prefix
  • WindowSetupLaunch/Resource files/sdiageng.admx
  • WindowSetupLaunch/Resource files/settingss
  • WindowSetupLaunch/Resource files/shortcuts-custom.json
  • WindowSetupLaunch/Resource files/shortcuts-default.json
  • WindowSetupLaunch/Resource files/srm-fci.admx
  • WindowSetupLaunch/Resource files/usertag
  • WindowSetupLaunch/Resource files/wlansvc.admx
    .xml
  • WindowSetupLaunch/Resource files/wwansvc.admx
    .xml
  • WindowSetupLaunch/Uses of Additional Files/WinAll/BeholdTV/amd64/bhkspex.x64
    .dll regsvr32 windows x64

    Password: 2023

    c2b63eb78a633a8cf029f36d00413c44


    Headers

    Imports

    Exports

    Sections

  • WindowSetupLaunch/Uses of Additional Files/WinAll/BeholdTV/amd64/cxpolir.sys
    .exe windows x64

    Password: 2023

    ea7483a8eb714ec3ea508bf58b81a559


    Headers

    Imports

    Sections

  • WindowSetupLaunch/Uses of Additional Files/WinAll/BeholdTV/amd64/ttm6010.sys
    .exe windows x64

    Password: 2023

    647437779ebf46177e2c6e415361ea9b


    Headers

    Imports

    Sections

  • WindowSetupLaunch/Uses of Additional Files/WinAll/BeholdTV/beholder.cat
  • WindowSetupLaunch/Uses of Additional Files/WinAll/BeholdTV/beholder.inf
  • WindowSetupLaunch/Uses of Additional Files/WinAll/BeholdTV/bhkspex.dll
    .dll regsvr32 windows x86

    Password: 2023

    24ed8993fd619d7b830ee8a6485904da


    Headers

    Imports

    Exports

    Sections

  • WindowSetupLaunch/Uses of Additional Files/WinAll/BeholdTV/bhkspex.x64
    .dll regsvr32 windows x64

    c2b63eb78a633a8cf029f36d00413c44


    Headers

    Imports

    Exports

    Sections

  • WindowSetupLaunch/Uses of Additional Files/WinAll/BeholdTV/cx2310x.sys
    .exe windows x86

    72758abb4fd59d040b279c65c0752ea7


    Headers

    Imports

    Sections

  • WindowSetupLaunch/Uses of Additional Files/WinAll/BeholdTV/cxpolir.sys
    .exe windows x86

    42c0ab85aed4e3f6e63353e7577f9e01


    Headers

    Imports

    Sections

  • WindowSetupLaunch/Uses of Additional Files/WinAll/BeholdTV/i386/bhkspex.dll
    .dll regsvr32 windows x86

    24ed8993fd619d7b830ee8a6485904da


    Headers

    Imports

    Exports

    Sections

  • WindowSetupLaunch/Uses of Additional Files/WinAll/BeholdTV/i386/cxpolir.sys
    .exe windows x86

    42c0ab85aed4e3f6e63353e7577f9e01


    Headers

    Imports

    Sections

  • WindowSetupLaunch/Uses of Additional Files/WinAll/BeholdTV/install.x64
    .exe windows x64

    5292520ce02adff7057028b73fd61d03


    Headers

    Imports

    Sections

  • WindowSetupLaunch/Uses of Additional Files/WinAll/BeholdTV/saa713x.sys
    .exe windows x86

    dccc7d9930f7acdf7504c66ef621047a


    Headers

    Imports

    Sections

  • WindowSetupLaunch/Uses of Additional Files/WinAll/BeholdTV/saa7231.sys
    .exe windows x86

    4e6dd13ddad7dd7d1927110593fdd162


    Headers

    Imports

    Sections

  • WindowSetupLaunch/Uses of Additional Files/WinAll/BeholdTV/ttm6010.sys
    .exe windows x86

    1e8df125497f0e9c4f965b821e5f1dcb


    Headers

    Imports

    Sections

  • WindowSetupLaunch/Uses of Additional Files/opengl32sw.dll
    .dll windows x86

    96787902f59fced940d332fc8148bd5c


    Headers

    Imports

    Exports

    Sections

  • WindowSetupLaunch/WindowSetupLaunch.exe
    .exe windows x86

    3e081a820fe6244a01fb0c6235a1ea08


    Code Sign

    Headers

    Imports

    Sections

  • WindowSetupLaunch/plugins/Config/nppPluginList.dll
    .dll windows x64

    10033053d04f10f8dd58e18b71fecb77


    Code Sign

    Headers

    Imports

    Sections

  • WindowSetupLaunch/plugins/DSpellCheck/DSpellCheck.dll
    .dll windows x64

    d78f77f872531e7e85c0d48b3121e134


    Headers

    Imports

    Exports

    Sections

  • WindowSetupLaunch/plugins/NppConverter/NppConverter.dll
    .dll windows x64

    c1f049407ab796f51bc6dc486a89941e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • WindowSetupLaunch/plugins/NppExport/NppExport.dll
    .dll windows x64

    17ff9a294f3152c5c744802081c5e1c4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • WindowSetupLaunch/plugins/mimeTools/mimeTools.dll
    .dll windows x64

    2120549f0f488cc1a263553fac68a39f


    Code Sign

    Headers

    Imports

    Exports

    Sections