General

  • Target

    Grabber_v7.10.1_x64.zip

  • Size

    58.3MB

  • MD5

    1da92b77d87f2e723abf6e691b03abae

  • SHA1

    624cc1d68b90c3793fbd63874d179d1e056fd8b0

  • SHA256

    b3524ce3777715cf3ce6bad1f5a624e4236cfa3357f431f01a77f4a3063ef6e4

  • SHA512

    155ee976a84e47eac5f52437b3d76ac5f576d20a49dd5eb9299008e2e1c019c7e0870b848f88d52b29b5347201da753e39301e549a3433f4c6cf29545f085aa7

  • SSDEEP

    1572864:TcC7P3xJUiIBTTXZq+b95fzD1aTppyb7Owy8C4vxd:Tp7FIJA+B91ipyby8C45d

Score
3/10

Malware Config

Signatures

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

Files

  • Grabber_v7.10.1_x64.zip
    .zip
  • CDR.exe
    .exe windows:4 windows x86

    57b1d95b21a08ff18e600c8ec526b6e6


    Headers

    Imports

    Sections

  • D3Dcompiler_47.dll
    .dll windows:6 windows x64

    2ce80dc262aecd9b9f45ee13d6b30c08


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Grabber-cli.exe
    .exe windows:6 windows x64

    48c2076e789393b226df9f517844f1d2


    Headers

    Imports

    Sections

  • Grabber-cli.pdb
  • Grabber.exe
    .exe windows:6 windows x64

    f6fc054f66ab6e987776ca9733d0f6e7


    Headers

    Imports

    Sections

  • Grabber.pdb
  • Qt5Core.dll
    .dll windows:6 windows x64

    6d44a16d5801e1cdb9b3ba4cb45314b0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5Gui.dll
    .dll windows:6 windows x64

    ddcb78f3a4297344c620aa83af64ddfd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5Multimedia.dll
    .dll windows:6 windows x64

    7600665a844daa64d88eb4f04005092e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5MultimediaWidgets.dll
    .dll windows:6 windows x64

    94357730fdeef3ebdb79c07f273a12dc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5Network.dll
    .dll windows:6 windows x64

    c0e2c58de25ce77b283ad911460cea11


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5NetworkAuth.dll
    .dll windows:6 windows x64

    af431b9d3d756e4fd831f5c72173f01d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5Qml.dll
    .dll windows:6 windows x64

    17c45f48289bee293cec012345a8096d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5Sql.dll
    .dll windows:6 windows x64

    f5ad3dcde1acf335cee21a88fd9c22a4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5Svg.dll
    .dll windows:6 windows x64

    6c684f5759e91250e01af7b49c78ca3f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5Widgets.dll
    .dll windows:6 windows x64

    8ac796c200bcdb47fab6297f47883022


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5WinExtras.dll
    .dll windows:6 windows x64

    305a2818bcbbe98ea06ae2866db77790


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5Xml.dll
    .dll windows:6 windows x64

    24d9a9d9da6c15ddc1476bd55d0caeea


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • acknowledgements.txt
  • audio/qtaudio_wasapi.dll
    .dll windows:6 windows x64

    97893cf9ba330ec2980ec6da9403f43f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • audio/qtaudio_windows.dll
    .dll windows:6 windows x64

    1c5ff8da39b1af9d7b7a3c16edd04032


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • authors.txt
  • bearer/qgenericbearer.dll
    .dll windows:6 windows x64

    7e5a6b3fee029b445d01034aff7a919d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • c_rehash.pl
    .pl .sh linux
  • changes.txt
  • faq.txt
  • iconengines/qsvgicon.dll
    .dll windows:6 windows x64

    cb7bcafac90ccee76bfa5d1af9cbb951


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • imageformats/qgif.dll
    .dll windows:6 windows x64

    83ab23a3497602da865da8cb952268f4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • imageformats/qicns.dll
    .dll windows:6 windows x64

    68eb3d9bbb362d72fd269c31936761fe


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • imageformats/qico.dll
    .dll windows:6 windows x64

    35e88ae047c52cbe14244b0b041c3d03


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • imageformats/qjpeg.dll
    .dll windows:6 windows x64

    bb20e83974c98263f528b6a929a02bdf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • imageformats/qsvg.dll
    .dll windows:6 windows x64

    2cf21fe757a0a84f5b8a5594668ca036


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • imageformats/qtga.dll
    .dll windows:6 windows x64

    870b9d72e7052f0dd8d119bd2bf4aa05


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • imageformats/qtiff.dll
    .dll windows:6 windows x64

    9fe4e69f865bd693d0a0abfdb4d03dc3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • imageformats/qwbmp.dll
    .dll windows:6 windows x64

    305f5f129c922b027d0dae792141dfe6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • imageformats/qwebp.dll
    .dll windows:6 windows x64

    75ef711dbfdc9de487f7cfea43217256


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • languages/languages.ini
  • libEGL.dll
    .dll windows:6 windows x64

    2571158206a6160a4e001934364aa256


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libGLESv2.dll
    .dll windows:6 windows x64

    f703387b50fa5341f52a2bbf457da55a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libcrypto-1_1-x64.dll
    .dll windows:6 windows x64

    9e838455ae7ea799f93ad26b13f1cafa


    Headers

    Imports

    Exports

    Sections

  • libmysql.dll
    .dll windows:6 windows x64

    e9ae16f9d597368c2d5b2069328b1876


    Headers

    Imports

    Exports

    Sections

  • libssl-1_1-x64.dll
    .dll windows:6 windows x64

    4b21179026a998f2d40c03582a6213b6


    Headers

    Imports

    Exports

    Sections

  • license.txt
  • mediaservice/dsengine.dll
    .dll windows:6 windows x64

    889d8030c65f580ddd002fbfacbe74a4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • mediaservice/qtmedia_audioengine.dll
    .dll windows:6 windows x64

    e7cf9d1c85056f7d41bfc28554075538


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • mediaservice/wmfengine.dll
    .dll windows:6 windows x64

    52a5b8315ff73abbd15ef15794f718e8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • news.txt
  • platforms/qwindows.dll
    .dll windows:6 windows x64

    b8287a581b45f1f245f12be7c017f17f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • playlistformats/qtmultimedia_m3u.dll
    .dll windows:6 windows x64

    93ae6ffdaf392b7c9ce037ac23e5e56c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • readme.txt
  • sites/Anime pictures/anime-pictures.net/defaults.ini
  • sites/Anime pictures/anime-pictures.net/tag-types.txt
  • sites/Anime pictures/icon.png
    .png
  • sites/Anime pictures/model.js
    .js
  • sites/Anime pictures/sites.txt
  • sites/Anime pictures/supported.txt
  • sites/ArtStation/icon.png
    .png
  • sites/ArtStation/model.js
    .js
  • sites/ArtStation/sites.txt
  • sites/ArtStation/supported.txt
  • sites/ArtStation/www.artstation.com/defaults.ini
  • sites/Booru.io/booru.io/defaults.ini
  • sites/Booru.io/icon.png
    .png
  • sites/Booru.io/model.js
    .js
  • sites/Booru.io/sites.txt
  • sites/Booru.io/supported.txt
  • sites/Danbooru (2.0)/danbooru.donmai.us/defaults.ini
  • sites/Danbooru (2.0)/danbooru.donmai.us/tag-types.txt
  • sites/Danbooru (2.0)/icon.png
    .png
  • sites/Danbooru (2.0)/model.js
    .js
  • sites/Danbooru (2.0)/sites.txt
  • sites/Danbooru (2.0)/supported.txt
  • sites/Danbooru/behoimi.org/defaults.ini
  • sites/Danbooru/behoimi.org/tag-types.txt
  • sites/Danbooru/icon.png
    .png
  • sites/Danbooru/model.js
    .js
  • sites/Danbooru/sites.txt
  • sites/Danbooru/supported.txt
  • sites/DeviantArt/icon.png
    .png
  • sites/DeviantArt/model.js
    .js
  • sites/DeviantArt/sites.txt
  • sites/DeviantArt/supported.txt
  • sites/DeviantArt/www.deviantart.com/defaults.ini
  • sites/E-Hentai/e-hentai.org/defaults.ini
  • sites/E-Hentai/exhentai.org/defaults.ini
  • sites/E-Hentai/icon.png
    .png
  • sites/E-Hentai/model.js
    .js
  • sites/E-Hentai/sites.txt
  • sites/E-Hentai/supported.txt
  • sites/E-Shuushuu/e-shuushuu.net/defaults.ini
  • sites/E-Shuushuu/e-shuushuu.net/tag-types.txt
  • sites/E-Shuushuu/icon.png
    .png
  • sites/E-Shuushuu/model.js
    .js
  • sites/E621/e621.net/defaults.ini
  • sites/E621/e621.net/tag-types.txt
  • sites/E621/icon.png
    .png
  • sites/E621/model.js
    .js
  • sites/E621/sites.txt
  • sites/E621/supported.txt
  • sites/FurAffinity/icon.png
    .png
  • sites/FurAffinity/model.js
    .js
  • sites/FurAffinity/www.furaffinity.net/defaults.ini
  • sites/Gelbooru (0.1)/icon.png
    .png
  • sites/Gelbooru (0.1)/model.js
    .js
  • sites/Gelbooru (0.2)/gelbooru.com/defaults.ini
  • sites/Gelbooru (0.2)/icon.png
    .png
  • sites/Gelbooru (0.2)/model.js
    .js
  • sites/Gelbooru (0.2)/sites.txt
  • sites/Gelbooru (0.2)/supported.txt
  • sites/Gfycat/downloader.js
    .js
  • sites/Mastodon/icon.png
    .png
  • sites/Mastodon/model.js
    .js
  • sites/Mastodon/sites.txt
  • sites/Mastodon/supported.txt
  • sites/Moebooru/icon.png
    .png
  • sites/Moebooru/model.js
    .js
  • sites/Moebooru/sites.txt
  • sites/Moebooru/supported.txt
  • sites/NHentai/icon.png
    .png
  • sites/NHentai/model.js
    .js
  • sites/NHentai/nhentai.net/defaults.ini
  • sites/NHentai/sites.txt
  • sites/NHentai/supported.txt
  • sites/Nijie/icon.png
    .png
  • sites/Nijie/model.js
    .js
  • sites/Nijie/nijie.info/defaults.ini
  • sites/Nijie/sites.txt
  • sites/Nijie/supported.txt
  • sites/Philomena/derpibooru.org/defaults.ini
  • sites/Philomena/icon.png
    .png
  • sites/Philomena/model.js
    .js
  • sites/Philomena/sites.txt
  • sites/Philomena/supported.txt
  • sites/Pixiv/icon.png
    .png
  • sites/Pixiv/model.js
    .js
  • sites/Pixiv/sites.txt
  • sites/Pixiv/supported.txt
  • sites/Pixiv/www.pixiv.net/defaults.ini
  • sites/Reddit/icon.png
    .png
  • sites/Reddit/model.js
    .js
  • sites/Reddit/sites.txt
  • sites/Reddit/supported.txt
  • sites/Reddit/www.reddit.com/defaults.ini
  • sites/Rule34.us Gelbooru/icon.png
    .png
  • sites/Rule34.us Gelbooru/model.js
    .js
  • sites/Rule34.us Gelbooru/sites.txt
  • sites/Shimmie/icon.png
    .png
  • sites/Shimmie/model.js
    .js
  • sites/Shimmie/sites.txt
  • sites/Shimmie/supported.txt
  • sites/Slushe/icon.png
    .png
  • sites/Slushe/model.js
    .js
  • sites/Slushe/sites.txt
  • sites/Slushe/slushe.com/defaults.ini
  • sites/Slushe/supported.txt
  • sites/Szurubooru/icon.png
    .png
  • sites/Szurubooru/model.js
    .js
  • sites/Twitter/api.twitter.com/defaults.ini
  • sites/Twitter/icon.png
    .png
  • sites/Twitter/model.js
    .js
  • sites/Twitter/sites.txt
  • sites/Twitter/supported.txt
  • sites/WallHaven/icon.png
    .png
  • sites/WallHaven/model.js
    .js
  • sites/WallHaven/sites.txt
  • sites/WallHaven/supported.txt
  • sites/WallHaven/wallhaven.cc/defaults.ini
  • sites/Zerochan/icon.png
    .png
  • sites/Zerochan/model.js
    .js
  • sites/Zerochan/sites.txt
  • sites/Zerochan/supported.txt
  • sites/Zerochan/www.zerochan.net/defaults.ini
  • sites/helper.js
    .js
  • sqldrivers/qsqlite.dll
    .dll windows:6 windows x64

    81126aba7f7a6189db40b88afea54148


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • sqldrivers/qsqlmysql.dll
    .dll windows:6 windows x64

    7c5f31e112114e3b58c208189b722c31


    Headers

    Imports

    Exports

    Sections

  • sqldrivers/qsqlodbc.dll
    .dll windows:6 windows x64

    acfce55392947a30501ebe5acbe751c4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • sqldrivers/qsqlpsql.dll
    .dll windows:6 windows x64

    5dacbf05e8cc156bb50566cd20eecc08


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • start.bat
  • styles/qwindowsvistastyle.dll
    .dll windows:6 windows x64

    3d3040efa646d84bc8bc2fb2d65abf99


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • themes/QDarkStyleSheet/img/Hmovetoolbar.png
    .png
  • themes/QDarkStyleSheet/img/Hsepartoolbar.png
    .png
  • themes/QDarkStyleSheet/img/Vmovetoolbar.png
    .png
  • themes/QDarkStyleSheet/img/Vsepartoolbar.png
    .png
  • themes/QDarkStyleSheet/img/branch_closed-on.png
    .png
  • themes/QDarkStyleSheet/img/branch_closed.png
    .png
  • themes/QDarkStyleSheet/img/branch_open-on.png
    .png
  • themes/QDarkStyleSheet/img/branch_open.png
    .png
  • themes/QDarkStyleSheet/img/checkbox_checked.png
    .png
  • themes/QDarkStyleSheet/img/checkbox_checked_disabled.png
    .png
  • themes/QDarkStyleSheet/img/checkbox_checked_focus.png
    .png
  • themes/QDarkStyleSheet/img/checkbox_indeterminate.png
    .png
  • themes/QDarkStyleSheet/img/checkbox_indeterminate_disabled.png
    .png
  • themes/QDarkStyleSheet/img/checkbox_indeterminate_focus.png
    .png
  • themes/QDarkStyleSheet/img/checkbox_unchecked.png
    .png
  • themes/QDarkStyleSheet/img/checkbox_unchecked_disabled.png
    .png
  • themes/QDarkStyleSheet/img/checkbox_unchecked_focus.png
    .png
  • themes/QDarkStyleSheet/img/close-hover.png
    .png
  • themes/QDarkStyleSheet/img/close-pressed.png
    .png
  • themes/QDarkStyleSheet/img/close.png
    .png
  • themes/QDarkStyleSheet/img/down_arrow.png
    .png
  • themes/QDarkStyleSheet/img/down_arrow_disabled.png
    .png
  • themes/QDarkStyleSheet/img/left_arrow.png
    .png
  • themes/QDarkStyleSheet/img/left_arrow_disabled.png
    .png
  • themes/QDarkStyleSheet/img/radio_checked.png
    .png
  • themes/QDarkStyleSheet/img/radio_checked_disabled.png
    .png
  • themes/QDarkStyleSheet/img/radio_checked_focus.png
    .png
  • themes/QDarkStyleSheet/img/radio_unchecked.png
    .png
  • themes/QDarkStyleSheet/img/radio_unchecked_disabled.png
    .png
  • themes/QDarkStyleSheet/img/radio_unchecked_focus.png
    .png
  • themes/QDarkStyleSheet/img/right_arrow.png
    .png
  • themes/QDarkStyleSheet/img/right_arrow_disabled.png
    .png
  • themes/QDarkStyleSheet/img/sizegrip.png
    .png
  • themes/QDarkStyleSheet/img/stylesheet-branch-end.png
    .png
  • themes/QDarkStyleSheet/img/stylesheet-branch-more.png
    .png
  • themes/QDarkStyleSheet/img/stylesheet-vline.png
    .png
  • themes/QDarkStyleSheet/img/transparent.png
    .png
  • themes/QDarkStyleSheet/img/undock.png
    .png
  • themes/QDarkStyleSheet/img/up_arrow.png
    .png
  • themes/QDarkStyleSheet/img/up_arrow_disabled.png
    .png
  • themes/QDarkStyleSheet/style.css
  • translations/qt_ar.qm
  • translations/qt_bg.qm
  • translations/qt_ca.qm
  • translations/qt_cs.qm
  • translations/qt_da.qm
  • translations/qt_de.qm
  • translations/qt_en.qm
  • translations/qt_es.qm
  • translations/qt_fi.qm
  • translations/qt_fr.qm
  • translations/qt_gd.qm
  • translations/qt_he.qm
  • translations/qt_hu.qm
  • translations/qt_it.qm
  • translations/qt_ja.qm
  • translations/qt_ko.qm
  • translations/qt_lv.qm
  • translations/qt_pl.qm
  • translations/qt_ru.qm
  • translations/qt_sk.qm
  • translations/qt_tr.qm
  • translations/qt_uk.qm
  • translations/qt_zh_TW.qm
  • unins000.dat
  • unins000.exe
    .exe windows:1 windows x86


    Headers

    Sections

  • vc_redist.x64.exe
    .exe windows:5 windows x86

    1a5cdbf711fee14b077e599d13fddab2


    Code Sign

    Headers

    Imports

    Sections

  • webservices/1.ico
  • webservices/2.ico
  • webservices/3.ico
  • webservices/4.ico
  • webservices/5.ico
  • webservices/6.ico
  • words.txt