General

  • Target

    [Guru3D.com]-RTSS.zip

  • Size

    15.9MB

  • MD5

    b94b9c38fe197864654138b3a45e8f40

  • SHA1

    ff36716a109cd710b7ba397a5cfae73c4d262de7

  • SHA256

    20a0d1849cee429b8dda5b6d8be77f2286da9b219cd343a888fd75daf3da1441

  • SHA512

    6330cded69faaa623b65b7159f1b41bea073217be0ed90b878e31852afabe190d744b923aebb0cee2f58f0a6fc8a0f4e5ec47602aadb7edfacfd74f8148582d0

  • SSDEEP

    393216:PEUWrt4eMUVaaXHnnqtYbc2pD/jw3eCzqs4nukgevQsX:P4rqeMUVhXHnq+bcu/j3Cms4nSsX

Score
3/10

Malware Config

Signatures

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

Files

  • [Guru3D.com]-RTSS.zip
    .zip
  • Guru3D-RTSSSetup735.exe
    .exe windows:4 windows x86 arch:x86

    6e7f9a29f2c85394521a08b9f31f6275


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    3e8d18bb71c7ebbda2ddc2a4bb03547b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    80469f6834e579db68a646d49780b9d5


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    6b5c4f7d679059f68f1269aad3a5cecd


    Headers

    Imports

    Exports

    Sections

  • $R0
    .dll windows:6 windows x86 arch:x86

    738ffe5e32f854da1e1205178a94885a


    Headers

    Imports

    Exports

    Sections

  • Codec/rtvcvfw32.dll
    .dll windows:6 windows x86 arch:x86

    738ffe5e32f854da1e1205178a94885a


    Headers

    Imports

    Exports

    Sections

  • DesktopOverlayHost.exe
    .exe windows:6 windows x86 arch:x86

    bca3bb317990b0d4a50cbfe6c046c5ce


    Code Sign

    Headers

    Imports

    Sections

  • DesktopOverlayHostLoader.exe
    .exe windows:6 windows x86 arch:x86

    0171a9def2d9571fd9e4f19fa6c056ce


    Code Sign

    Headers

    Imports

    Sections

  • EncoderServer.cfg
  • EncoderServer.exe
    .exe windows:6 windows x86 arch:x86

    a0f3ff6e1deda9ba76340276602d9d01


    Code Sign

    Headers

    Imports

    Sections

  • EncoderServer64.exe
    .exe windows:6 windows x64 arch:x64

    c6d186d15b251b7b6ea3cbaf33e809fa


    Code Sign

    Headers

    Imports

    Sections

  • RTFC.dll
    .dll windows:6 windows x86 arch:x86

    3e8d48e95652b98c2e2613040452524c


    Headers

    Imports

    Exports

    Sections

  • RTMUI.dll
    .dll windows:6 windows x86 arch:x86

    43e8d250d4c3553f3fb27a3edbaa43aa


    Headers

    Imports

    Exports

    Sections

  • RTSS.dat
  • RTSS.exe
    .exe windows:6 windows x86 arch:x86

    cf1b59b1b5e356f8f33c057a7a360bd0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • RTSSHooks.dll.copy
    .dll windows:6 windows x86 arch:x86

    e83d7819fef9782d0379c0ef195add4d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • RTSSHooks64.dll.copy
    .dll windows:6 windows x64 arch:x64

    6d77a01efa80176a594537b8b0b5c816


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • RTSSHooksLoader.exe
    .exe windows:6 windows x86 arch:x86

    7e02abc564a4ae51a7e08111cf0aa154


    Code Sign

    Headers

    Imports

    Sections

  • RTSSHooksLoader64.exe
    .exe windows:6 windows x64 arch:x64

    da0e0fffa770290df3b503f45fd36b48


    Code Sign

    Headers

    Imports

    Sections

  • RTUI.dll
    .dll windows:6 windows x86 arch:x86

    1736c20c278ca344fece9599e128765d


    Headers

    Imports

    Exports

    Sections

  • SaveMedia.cfg
  • SaveMedia.dll
    .dll windows:6 windows x86 arch:x86

    7da849b65959d1ef74f20421b758aa9b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SaveMedia64.dll
    .dll windows:6 windows x64 arch:x64

    2c6f0dd6dd775104d66e19d47cff7ce6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libmfxsw32.dll
    .dll windows:5 windows x86 arch:x86

    3b6ea42b172600bb5a8950b6766adce0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libmfxsw64.dll
    .dll windows:5 windows x64 arch:x64

    ceb419a5aaa755241938db3b7db9fb65


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Guru3D.com/downloaded_from_www.guru3d.com.txt
  • Guru3D.com/guru3d.url
    .url