Resubmissions

23-02-2024 14:34

240223-rxp3paca7y 7

25-01-2024 16:04

240125-th1a8abbek 10

General

  • Target

    windows_10_cmake_Release_graphviz-install-8.1.0-win64.exe

  • Size

    4.8MB

  • MD5

    54ecf446aadefeefc670db219d24aa42

  • SHA1

    6ea3f6fea9eb7e6742fe6860f2eb32ede4bf1160

  • SHA256

    e8f18a59a3c4a7b9d8f00c203d1c3cecb8b2353d79ba6546e78084796e36f56f

  • SHA512

    4ddba7e8c9b09ee816c475f84b803508b72312565a2cb310ac6e9b4982cde915b7b5ab9eb401059ff3bd4a8bccdb5240aa4b4495267b5d68275729b166b6c2f9

  • SSDEEP

    98304:iqPJFh3lBUKHpHYfB44ktUMnF7P9sPu1UYl+AfUVihNE3:dJD3TXVY51MnF7emoBIW

Score
3/10

Malware Config

Signatures

  • Unsigned PE 66 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • windows_10_cmake_Release_graphviz-install-8.1.0-win64.exe
    .exe windows:4 windows x86 arch:x86

    ced282d9b261d1462772017fe2f6972b


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    610235b90207a63ccf481f0d4375d329


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSIS.InstallOptions.ini
  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    17fb6a8708b9c0bb2d5d8687870eb415


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    8c8a576201f68de1a3f26fc723b9f30f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    d576645bcd8a66d2fe678a075f4cc6e0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    ced282d9b261d1462772017fe2f6972b


    Headers

    Imports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    d576645bcd8a66d2fe678a075f4cc6e0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • bin/acyclic.exe
    .exe windows:6 windows x64 arch:x64

    d2c4f97f826bb00d15c02fa51a33dc31


    Headers

    Imports

    Sections

  • bin/bcomps.exe
    .exe windows:6 windows x64 arch:x64

    65117a72a472ecbab9b80890a4b71372


    Headers

    Imports

    Sections

  • bin/cairo.dll
    .dll windows:6 windows x64 arch:x64

    c3cb378aeac481c1ac33b5fd9893c3d1


    Headers

    Imports

    Exports

    Sections

  • bin/ccomps.exe
    .exe windows:6 windows x64 arch:x64

    081ca5fc2b7362fb128fc8fd04d85f5c


    Headers

    Imports

    Sections

  • bin/cdt.dll
    .dll windows:6 windows x64 arch:x64

    fe1ad1e32c9ccdd9fcc098a4b0f0adcf


    Headers

    Imports

    Exports

    Sections

  • bin/cgraph++.dll
    .dll windows:6 windows x64 arch:x64

    356bd489d7d70dbc348329174797ae3c


    Headers

    Imports

    Exports

    Sections

  • bin/cgraph.dll
    .dll windows:6 windows x64 arch:x64

    35f64d5d9129f4c3fde95947cfb09aad


    Headers

    Imports

    Exports

    Sections

  • bin/circo.exe
    .exe windows:6 windows x64 arch:x64

    e44fad4390f5b1ac29c733cd1cee942b


    Headers

    Imports

    Sections

  • bin/cluster.exe
    .exe windows:6 windows x64 arch:x64

    2effc9cfbc95d61ebd81413929badb49


    Headers

    Imports

    Exports

    Sections

  • bin/concrt140.dll
    .dll windows:6 windows x64 arch:x64

    5f9b23bd4b0029001f687a1ad625be31


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/config6
  • bin/dijkstra.exe
    .exe windows:6 windows x64 arch:x64

    782794b182a622c099a0e8250b32c195


    Headers

    Imports

    Sections

  • bin/dot.exe
    .exe windows:6 windows x64 arch:x64

    e44fad4390f5b1ac29c733cd1cee942b


    Headers

    Imports

    Sections

  • bin/dot2gxl.exe
    .exe windows:6 windows x64 arch:x64

    fa6be9deb8aa034996c56596c602698f


    Headers

    Imports

    Sections

  • bin/dot_builtins.exe
    .exe windows:6 windows x64 arch:x64

    1272125f9b0576d31bc7ed99257566ea


    Headers

    Imports

    Sections

  • bin/edgepaint.exe
    .exe windows:6 windows x64 arch:x64

    f94edec3d01e4eac8700420b71d9f45f


    Headers

    Imports

    Exports

    Sections

  • bin/expat.dll
    .dll windows:6 windows x64 arch:x64

    3395832b38df8b64cd58112ea5380c54


    Headers

    Imports

    Exports

    Sections

  • bin/fdp.exe
    .exe windows:6 windows x64 arch:x64

    e44fad4390f5b1ac29c733cd1cee942b


    Headers

    Imports

    Sections

  • bin/fontconfig.dll
    .dll windows:6 windows x64 arch:x64

    c09526835d1cd44ecad6df89e614787a


    Headers

    Imports

    Exports

    Sections

  • bin/gc.exe
    .exe windows:6 windows x64 arch:x64

    93388d04d40868cf4417001d03fd2a7a


    Headers

    Imports

    Sections

  • bin/getopt.dll
    .dll windows:6 windows x64 arch:x64

    d241e1ebf18aef97a56fa5ddeaf11c4c


    Headers

    Imports

    Exports

    Sections

  • bin/glib-2.dll
    .dll windows:6 windows x64 arch:x64

    2bb2def0860cc5a78efbfe4d798cec79


    Headers

    Imports

    Exports

    Sections

  • bin/gml2gv.exe
    .exe windows:6 windows x64 arch:x64

    2a0d45ad89dffc0ac9ac649e228b1370


    Headers

    Imports

    Sections

  • bin/gobject-2.dll
    .dll windows:6 windows x64 arch:x64

    99973d66337e3f5aa65291b8f1c4dc57


    Headers

    Imports

    Exports

    Sections

  • bin/graphml2gv.exe
    .exe windows:6 windows x64 arch:x64

    40d36a9ce77c436cf0ba32b44bcc115a


    Headers

    Imports

    Sections

  • bin/gv2gml.exe
    .exe windows:6 windows x64 arch:x64

    ea6bc0303b281d5f9af3e9431cd30720


    Headers

    Imports

    Sections

  • bin/gv2gxl.exe
    .exe windows:6 windows x64 arch:x64

    fa6be9deb8aa034996c56596c602698f


    Headers

    Imports

    Sections

  • bin/gvc++.dll
    .dll windows:6 windows x64 arch:x64

    0e8802767367ca1344c93693cb6d0905


    Headers

    Imports

    Exports

    Sections

  • bin/gvc.dll
    .dll windows:6 windows x64 arch:x64

    701ce881e38d84b4fda39a43f6f8a467


    Headers

    Imports

    Exports

    Sections

  • bin/gvcolor.exe
    .exe windows:6 windows x64 arch:x64

    9552f9f1d62f58617d2bb5b58eaea072


    Headers

    Imports

    Sections

  • bin/gvgen.exe
    .exe windows:6 windows x64 arch:x64

    6c533fff76fa0eef3d2d46d0f2a4fbad


    Headers

    Imports

    Sections

  • bin/gvmap.exe
    .exe windows:6 windows x64 arch:x64

    2e5fd1f67fb778250a0c90203ae6596b


    Headers

    Imports

    Exports

    Sections

  • bin/gvmap.sh
    .sh linux
  • bin/gvpack.exe
    .exe windows:6 windows x64 arch:x64

    4fe95fe5a2ec7dc596b4a0c8ab76be8b


    Headers

    Imports

    Sections

  • bin/gvplugin_core.dll
    .dll windows:6 windows x64 arch:x64

    2676796de5f87813c4b3acdbbca9e1fd


    Headers

    Imports

    Exports

    Sections

  • bin/gvplugin_dot_layout.dll
    .dll windows:6 windows x64 arch:x64

    c0e847d4345d55c8d5351f8452036900


    Headers

    Imports

    Exports

    Sections

  • bin/gvplugin_gdiplus.dll
    .dll windows:6 windows x64 arch:x64

    ccc709ae058332479465ca2e32cb0f06


    Headers

    Imports

    Exports

    Sections

  • bin/gvplugin_neato_layout.dll
    .dll windows:6 windows x64 arch:x64

    80df0e720e9e47cd0b5e55379ddf44d2


    Headers

    Imports

    Exports

    Sections

  • bin/gvplugin_pango.dll
    .dll windows:6 windows x64 arch:x64

    65760abe565e3a74dc64d36870e0707f


    Headers

    Imports

    Exports

    Sections

  • bin/gvplugin_vt100.dll
    .dll windows:6 windows x64 arch:x64

    d140dc993d5afaf4a8909b07cc9072c2


    Headers

    Imports

    Sections

  • bin/gvpr.exe
    .exe windows:6 windows x64 arch:x64

    e585bc9330c0edbc9127c1c3b378b1ae


    Headers

    Imports

    Exports

    Sections

  • bin/gxl2dot.exe
    .exe windows:6 windows x64 arch:x64

    fa6be9deb8aa034996c56596c602698f


    Headers

    Imports

    Sections

  • bin/gxl2gv.exe
    .exe windows:6 windows x64 arch:x64

    fa6be9deb8aa034996c56596c602698f


    Headers

    Imports

    Sections

  • bin/libharfbuzz-0.dll
    .dll windows:6 windows x64 arch:x64

    1ea5cdb52b19532a631c410ada77b433


    Headers

    Imports

    Exports

    Sections

  • bin/mm2gv.exe
    .exe windows:6 windows x64 arch:x64

    640417e66de04138ed41e11ac6a933d3


    Headers

    Imports

    Sections

  • bin/msvcp140.dll
    .dll windows:6 windows x64 arch:x64

    2ba11fd5a511c8a409e705e9ab6b5dc1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/msvcp140_1.dll
    .dll windows:6 windows x64 arch:x64

    c1687527a3d5b7532fa653f66eba12e1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/msvcp140_2.dll
    .dll windows:6 windows x64 arch:x64

    2f8a18fefaba28c3707dae8605d51b60


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/msvcp140_atomic_wait.dll
    .dll windows:6 windows x64 arch:x64

    c1dfd2e42294117ca33d3c6b21826f93


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/msvcp140_codecvt_ids.dll
    .dll windows:6 windows x64 arch:x64

    536e29dae203b5f7347030aec0cba513


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/neato.exe
    .exe windows:6 windows x64 arch:x64

    e44fad4390f5b1ac29c733cd1cee942b


    Headers

    Imports

    Sections

  • bin/nop.exe
    .exe windows:6 windows x64 arch:x64

    33391033e576789cb11a95ce072310a6


    Headers

    Imports

    Sections

  • bin/osage.exe
    .exe windows:6 windows x64 arch:x64

    e44fad4390f5b1ac29c733cd1cee942b


    Headers

    Imports

    Sections

  • bin/pango-1.dll
    .dll windows:6 windows x64 arch:x64

    6ec4c02dc2fe227c6a58836f0681485d


    Headers

    Imports

    Exports

    Sections

  • bin/pangocairo-1.dll
    .dll windows:6 windows x64 arch:x64

    250aa4d2761e47af290ed2bfa1bb6f0a


    Headers

    Imports

    Exports

    Sections

  • bin/pangoft2-1.dll
    .dll windows:6 windows x64 arch:x64

    df518d572524b334bee360ef0fd5597c


    Headers

    Imports

    Exports

    Sections

  • bin/pangowin32-1.dll
    .dll windows:6 windows x64 arch:x64

    219df55454958572119fa6e025818813


    Headers

    Imports

    Exports

    Sections

  • bin/patchwork.exe
    .exe windows:6 windows x64 arch:x64

    e44fad4390f5b1ac29c733cd1cee942b


    Headers

    Imports

    Sections

  • bin/pathplan.dll
    .dll windows:6 windows x64 arch:x64

    254c53f23f1dedad55359f112fae424f


    Headers

    Imports

    Exports

    Sections

  • bin/pixman-1.dll
    .dll windows:6 windows x64 arch:x64

    7d4c078d4ab3f3c57247df5f9fb0a9cc


    Headers

    Imports

    Exports

    Sections

  • bin/prune.exe
    .exe windows:6 windows x64 arch:x64

    b8b001b34c11d06e3cfb6db5babe05b6


    Headers

    Imports

    Sections

  • bin/sccmap.exe
    .exe windows:6 windows x64 arch:x64

    f1ab9c17c5364d077c8b8f984c2280ac


    Headers

    Imports

    Sections

  • bin/sfdp.exe
    .exe windows:6 windows x64 arch:x64

    e44fad4390f5b1ac29c733cd1cee942b


    Headers

    Imports

    Sections

  • bin/tred.exe
    .exe windows:6 windows x64 arch:x64

    cc8ddbd821b4435f8184fa570d9578e5


    Headers

    Imports

    Sections

  • bin/twopi.exe
    .exe windows:6 windows x64 arch:x64

    e44fad4390f5b1ac29c733cd1cee942b


    Headers

    Imports

    Sections

  • bin/unflatten.exe
    .exe windows:6 windows x64 arch:x64

    49d8d679239c79f277c2faffeb138661


    Headers

    Imports

    Sections

  • bin/vcruntime140.dll
    .dll windows:6 windows x64 arch:x64

    44c3854843f7a3fccdf8ddbbea66f302


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/vcruntime140_1.dll
    .dll windows:6 windows x64 arch:x64

    ae0bde6314fa2027b54ce04898f6ab69


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/xdot.dll
    .dll windows:6 windows x64 arch:x64

    713b9eb4e5bc9882358cffae32587764


    Headers

    Imports

    Exports

    Sections

  • include/graphviz/AGraph.h
  • include/graphviz/GVContext.h
  • include/graphviz/GVLayout.h
  • include/graphviz/GVRenderData.h
  • include/graphviz/arith.h
  • include/graphviz/cdt.h
  • include/graphviz/cgraph.h
  • include/graphviz/color.h
  • include/graphviz/geom.h
  • include/graphviz/graphviz_version.h
  • include/graphviz/gvc.h
  • include/graphviz/gvcext.h
  • include/graphviz/gvcjob.h
  • include/graphviz/gvcommon.h
  • include/graphviz/gvconfig.h
  • include/graphviz/gvplugin.h
  • include/graphviz/gvplugin_device.h
  • include/graphviz/gvplugin_layout.h
  • include/graphviz/gvplugin_loadimage.h
  • include/graphviz/gvplugin_render.h
  • include/graphviz/gvplugin_textlayout.h
  • include/graphviz/pack.h
  • include/graphviz/pathgeom.h
  • include/graphviz/pathplan.h
  • include/graphviz/textspan.h
  • include/graphviz/types.h
  • include/graphviz/usershape.h
  • include/graphviz/xdot.h
  • lib/cdt.lib
  • lib/cgraph++.lib
  • lib/cgraph.lib
  • lib/gvc++.lib
  • lib/gvc.lib
  • lib/gvplugin_core.lib
  • lib/gvplugin_dot_layout.lib
  • lib/gvplugin_gdiplus.lib
  • lib/gvplugin_neato_layout.lib
  • lib/gvplugin_pango.lib
  • lib/pathplan.lib
  • lib/pkgconfig/libcdt.pc
  • lib/pkgconfig/libcgraph.pc
  • lib/pkgconfig/libgvc.pc
  • lib/pkgconfig/libgvpr.pc
  • lib/pkgconfig/liblab_gamut.pc
  • lib/pkgconfig/libpathplan.pc
  • lib/pkgconfig/libxdot.pc
  • lib/xdot.lib
  • share/graphviz/graphs/directed/KW91.gv
  • share/graphviz/graphs/directed/Latin1.gv
  • share/graphviz/graphs/directed/NaN.gv
  • share/graphviz/graphs/directed/abstract.gv
  • share/graphviz/graphs/directed/alf.gv
  • share/graphviz/graphs/directed/arrows.gv
  • share/graphviz/graphs/directed/awilliams.gv
  • share/graphviz/graphs/directed/biological.gv
  • share/graphviz/graphs/directed/clust.gv
  • share/graphviz/graphs/directed/clust1.gv
  • share/graphviz/graphs/directed/clust2.gv
  • share/graphviz/graphs/directed/clust3.gv
  • share/graphviz/graphs/directed/clust4.gv
  • share/graphviz/graphs/directed/clust5.gv
  • share/graphviz/graphs/directed/crazy.gv
  • share/graphviz/graphs/directed/ctext.gv
  • share/graphviz/graphs/directed/dfa.gv
  • share/graphviz/graphs/directed/fig6.gv
  • share/graphviz/graphs/directed/fsm.gv
  • share/graphviz/graphs/directed/grammar.gv
  • share/graphviz/graphs/directed/hashtable.gv
  • share/graphviz/graphs/directed/honda-tokoro.gv
  • share/graphviz/graphs/directed/japanese.gv
  • share/graphviz/graphs/directed/jcctree.gv
  • share/graphviz/graphs/directed/jsort.gv
  • share/graphviz/graphs/directed/ldbxtried.gv
  • share/graphviz/graphs/directed/longflat.gv
  • share/graphviz/graphs/directed/mike.gv
  • share/graphviz/graphs/directed/nhg.gv
  • share/graphviz/graphs/directed/oldarrows.gv
  • share/graphviz/graphs/directed/pgram.gv
  • share/graphviz/graphs/directed/pm2way.gv
  • share/graphviz/graphs/directed/pmpipe.gv
  • share/graphviz/graphs/directed/polypoly.gv
  • share/graphviz/graphs/directed/proc3d.gv
  • share/graphviz/graphs/directed/psfonttest.gv
  • share/graphviz/graphs/directed/record2.gv
  • share/graphviz/graphs/directed/records.gv
  • share/graphviz/graphs/directed/rowe.gv
  • share/graphviz/graphs/directed/russian.gv
  • share/graphviz/graphs/directed/sdh.gv
  • share/graphviz/graphs/directed/shells.gv
  • share/graphviz/graphs/directed/states.gv
  • share/graphviz/graphs/directed/structs.gv
  • share/graphviz/graphs/directed/switch.gv
  • share/graphviz/graphs/directed/table.gv
  • share/graphviz/graphs/directed/train11.gv
  • share/graphviz/graphs/directed/trapeziumlr.gv
  • share/graphviz/graphs/directed/tree.gv
  • share/graphviz/graphs/directed/triedds.gv
  • share/graphviz/graphs/directed/try.gv
  • share/graphviz/graphs/directed/unix.gv
  • share/graphviz/graphs/directed/unix2.gv
  • share/graphviz/graphs/directed/viewfile.gv
  • share/graphviz/graphs/directed/world.gv
  • share/graphviz/graphs/undirected/ER.gv
  • share/graphviz/graphs/undirected/Heawood.gv
  • share/graphviz/graphs/undirected/Petersen.gv
  • share/graphviz/graphs/undirected/ngk10_4.gv
  • share/graphviz/graphs/undirected/process.gv
  • share/man/man1/acyclic.1
  • share/man/man1/bcomps.1
  • share/man/man1/ccomps.1
  • share/man/man1/cluster.1
  • share/man/man1/dijkstra.1
  • share/man/man1/dot.1
  • share/man/man1/edgepaint.1
  • share/man/man1/gc.1
  • share/man/man1/gml2gv.1
  • share/man/man1/graphml2gv.1
  • share/man/man1/gvcolor.1
  • share/man/man1/gvgen.1
  • share/man/man1/gvmap.1
  • share/man/man1/gvpack.1
  • share/man/man1/gvpr.1
  • share/man/man1/gxl2gv.1
  • share/man/man1/mm2gv.1
  • share/man/man1/nop.1
  • share/man/man1/osage.1
  • share/man/man1/patchwork.1
  • share/man/man1/prune.1
  • share/man/man1/sccmap.1
  • share/man/man1/tred.1
  • share/man/man1/unflatten.1
  • share/man/man3/cdt.3
  • share/man/man3/cgraph.3
  • share/man/man3/gvc.3
  • share/man/man3/pack.3
  • share/man/man3/pathplan.3
  • share/man/man3/xdot.3