General

  • Target

    ubisoft-connect-138-3-10824.exe

  • Size

    238.3MB

  • MD5

    50858416210d1e27c63c56caf5ac1934

  • SHA1

    1ee71629ace79627e4822399fa8bb458996b49c8

  • SHA256

    269a9768d787ffdff9edf551221a84a7a389564681cf2780fe9d450e3f74dd20

  • SHA512

    783d6f1d007ef3f4d332f22bd49e30ba0b0c97fa583ffefed5f052592b29257c380c84155d01a8e03702eabab55a33bef6c62a64c443395c252b5e63bb61eaf6

  • SSDEEP

    6291456:DXXzFEcmVszdemlcfrNOmPcrHS7mQGbJolbaJfOi:Dnz6cgsz8TDNOmPcmjGbe+v

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

Files

  • ubisoft-connect-138-3-10824.exe
    .exe windows:4 windows x86 arch:x86

    Password: infected

    7eae418c7423834ffc3d79b4300bd6fb


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/AccessControl.dll
    .dll windows:5 windows x86 arch:x86

    Password: infected


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    Password: infected

    3e8d18bb71c7ebbda2ddc2a4bb03547b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    Password: infected

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsArray.dll
    .dll windows:6 windows x86 arch:x86

    Password: infected

    af03e0dafc67ec37f6adde926d93d334


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    Password: infected

    6b5c4f7d679059f68f1269aad3a5cecd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/registry.dll
    .dll windows:4 windows x86 arch:x86

    Password: infected

    421a02aae559045e04759aae146087eb


    Headers

    Imports

    Exports

    Sections

  • UbisoftConnect.exe
    .exe windows:5 windows x86 arch:x86

    Password: infected

    247cb33ca499df05bb6d72db78e9d5d6


    Code Sign

    Headers

    Imports

    Sections

  • UbisoftGameLauncher.exe
    .exe windows:6 windows x86 arch:x86

    Password: infected

    ffc68d751dc9a7ce5ce775c9f7141a78


    Code Sign

    Headers

    Imports

    Sections

  • UbisoftGameLauncher64.exe
    .exe windows:6 windows x64 arch:x64

    966fca2ac25b3dc97594eb7f3a1196af


    Code Sign

    Headers

    Imports

    Sections

  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    7eae418c7423834ffc3d79b4300bd6fb


    Code Sign

    Headers

    Imports

    Sections

  • UplayCrashReporter.exe
    .exe windows:6 windows x86 arch:x86

    644454aa66143c37e94edce834200fe2


    Code Sign

    Headers

    Imports

    Sections

  • UplayService.exe
    .exe windows:6 windows x86 arch:x86

    e4d3aa2a7954bc1763ea6d6bcd79ab8e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • UplayWebCore.exe
    .exe windows:6 windows x86 arch:x86

    7524d6077dbabef462273416dd8fe935


    Code Sign

    Headers

    Imports

    Sections

  • chrome_100_percent.pak
  • chrome_200_percent.pak
  • chrome_elf.dll
    .dll windows:5 windows x86 arch:x86

    e2ff03f39a17979bf251491b2fad0099


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • data/loc/cs-CZ_loc.txt
  • data/loc/da-DK_loc.txt
  • data/loc/de-DE_loc.txt
  • data/loc/en-CA_loc.txt
  • data/loc/en-US_loc.txt
  • data/loc/en-US_release_notes.txt
  • data/loc/es-ES_loc.txt
  • data/loc/es-MX_loc.txt
  • data/loc/fi-FI_loc.txt
  • data/loc/fr-FR_loc.txt
  • data/loc/hu-HU_loc.txt
  • data/loc/it-IT_loc.txt
  • data/loc/ja-JP_loc.txt
  • data/loc/ko-KO_loc.txt
  • data/loc/nb-NO_loc.txt
  • data/loc/nl-NL_loc.txt
  • data/loc/pl-PL_loc.txt
  • data/loc/pt-BR_loc.txt
  • data/loc/pt-PT_loc.txt
  • data/loc/ru-RU_loc.txt
  • data/loc/sv-SE_loc.txt
  • data/loc/th-TH_loc.txt
  • data/loc/tr-TR_loc.txt
  • data/loc/uk-UA_loc.txt
  • data/loc/zh-CN_loc.txt
  • data/loc/zh-TW_loc.txt
  • data/resources/LICENSES.txt
  • data/resources/default_avatar.png
    .png
  • data/resources/default_avatar_100.png
    .png
  • data/resources/default_avatar_128.png
    .png
  • data/resources/default_avatar_256.jpg
    .jpg
  • data/resources/default_avatar_256.png
    .png
  • data/resources/default_avatar_64.png
    .png
  • data/resources/free_game_configs_schema.yml
  • data/resources/grey_border.png
    .png
  • data/resources/group_avatar_128.png
    .png
  • data/resources/group_avatar_256.png
    .png
  • data/resources/group_avatar_64.png
    .png
  • data/resources/incoming_invite_from_user.wav
  • data/resources/noise.png
    .png
  • data/resources/other_user_joined.wav
  • data/resources/other_user_leaves.wav
  • data/resources/overlay_cursor.png
    .png
  • data/resources/preorder_config_schema_3_0.yml
  • data/resources/product_add_on_config_schema_3_0.yml
  • data/resources/product_config_schema_1_0.yml
  • data/resources/product_config_schema_1_5.yml
  • data/resources/product_config_schema_1_7.yml
  • data/resources/product_config_schema_2_0.yml
  • data/resources/product_config_schema_2_0_offline.yml
  • data/resources/product_game_pre_order_config_schema_3_0.yml
  • data/resources/product_template_config_schema_4.4.yml
  • data/resources/promo_config_schema.yml
  • data/resources/rich_presence_schema.yml
  • data/resources/sprite_frame.png
    .png
  • data/resources/sprite_frame_x.png
    .png
  • data/resources/sprite_nav_btn_small.png
    .png
  • data/resources/sprite_nav_tabs.png
    .png
  • data/resources/sprite_shop_buttons.png
    .png
  • data/resources/sprite_uplay_dropdown.png
    .png
  • data/resources/sprite_window_controls.png
    .png
  • data/resources/uat.png
    .png
  • data/resources/uplay_enabled_game_configuration_schema_3_0.yml
  • data/resources/uplayplus_config_schema.yml
  • discord-rpc.x64.dll
    .dll windows:6 windows x64 arch:x64

    2177107986463a53e3bbfb09526233c4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • discord-rpc.x86.dll
    .dll windows:6 windows x86 arch:x86

    000f244af601e1634d7613fdbad3c79c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • gear_core_win32DLL.dll
    .dll windows:6 windows x86 arch:x86

    5121ebd1c67fb3214a4f835c367f13d4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • gear_detection_win32DLL.dll
    .dll windows:6 windows x86 arch:x86

    bbafe8b296b950e80409914fef9ebdf7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • gpudatabase_win32.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • icudtl.dat
  • libEGL.dll
    .dll windows:5 windows x86 arch:x86

    a32ffcd967e457067532831d39837d11


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libGLESv2.dll
    .dll windows:5 windows x86 arch:x86

    bd8ab9de398a8ff13ef9bc4a6c2e8348


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libUbiCustomEvent.dll
    .dll windows:5 windows x86 arch:x86

    5ab462c0a08c2bd662e00992c746d14e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libcef.dll
    .dll windows:5 windows x86 arch:x86

    2f621c1ba818b5de7cf5c4f56eb4ab70


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • license/Licence_cs-CZ.txt
  • license/Licence_da-DK.txt
  • license/Licence_de-DE.txt
  • license/Licence_en-CA.txt
  • license/Licence_en-US.txt
  • license/Licence_es-ES.txt
  • license/Licence_es-MX.txt
  • license/Licence_fi-FI.txt
  • license/Licence_fr-FR.txt
  • license/Licence_hu-HU.txt
  • license/Licence_it-IT.txt
  • license/Licence_ja-JP.txt
  • license/Licence_ko-KO.txt
  • license/Licence_nb-NO.txt
  • license/Licence_nl-NL.txt
  • license/Licence_pl-PL.txt
  • license/Licence_pt-BR.txt
  • license/Licence_pt-PT.txt
  • license/Licence_ru-RU.txt
  • license/Licence_sv-SE.txt
  • license/Licence_th-TH.txt
  • license/Licence_tr-TR.txt
  • license/Licence_zh-CN.txt
  • license/Licence_zh-TW.txt
  • locales/1/af.pak
  • locales/1/am.pak
  • locales/1/ar.pak
  • locales/1/bg.pak
  • locales/1/bn.pak
  • locales/1/ca.pak
  • locales/1/cs.pak
  • locales/1/da.pak
  • locales/1/de.pak
  • locales/1/el.pak
  • locales/1/en-GB.pak
  • locales/1/en-US.pak
  • locales/1/es-419.pak
  • locales/1/es.pak
  • locales/1/et.pak
  • locales/1/fa.pak
  • locales/1/fi.pak
  • locales/1/fil.pak
  • locales/1/fr.pak
  • locales/1/gu.pak
  • locales/1/he.pak
  • locales/1/hi.pak
  • locales/1/hr.pak
  • locales/1/hu.pak
  • locales/1/id.pak
  • locales/1/it.pak
  • locales/1/ja.pak
  • locales/1/kn.pak
  • locales/1/ko.pak
  • locales/1/lt.pak
  • locales/1/lv.pak
  • locales/1/ml.pak
  • locales/1/mr.pak
  • locales/1/ms.pak
  • locales/1/nb.pak
  • locales/1/nl.pak
  • locales/1/pl.pak
  • locales/1/pt-BR.pak
  • locales/1/pt-PT.pak
  • locales/1/ro.pak
  • locales/1/ru.pak
  • locales/1/sk.pak
  • locales/1/sl.pak
  • locales/1/sr.pak
  • locales/1/sv.pak
  • locales/1/sw.pak
  • locales/1/ta.pak
  • locales/1/te.pak
  • locales/1/th.pak
  • locales/1/tr.pak
  • locales/1/uk.pak
  • locales/1/ur.pak
  • locales/1/vi.pak
  • locales/1/zh-CN.pak
  • locales/1/zh-TW.pak
  • npuplaypc.dll
    .dll windows:5 windows x86 arch:x86

    5f6f9e525bf5a31a7b44f71e560251ef


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • npuplaypchub.dll
    .dll windows:5 windows x86 arch:x86

    5f6f9e525bf5a31a7b44f71e560251ef


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • overlay.dll
    .dll windows:6 windows x86 arch:x86

    719c2ea8c514e2314c53677a59c7d86a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • overlay64.dll
    .dll windows:6 windows x64 arch:x64

    96a3e2856f494569274c0776107db5cc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resources.pak
  • shareplay/LICENSES.txt
  • shareplay/Qt5Core.dll
    .dll windows:6 windows x64 arch:x64

    be86738a23c271515336a1510dc6f59d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • shareplay/Qt5Gui.dll
    .dll windows:6 windows x64 arch:x64

    fdc54c05180259f80673c5c6f1fd8ed9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • shareplay/Qt5Multimedia.dll
    .dll windows:6 windows x64 arch:x64

    fd39877d0041120bd1eccfe1114b6beb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • shareplay/Qt5Network.dll
    .dll windows:6 windows x64 arch:x64

    ceb282a7d38ffb39ba699d285800111f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • shareplay/Qt5Positioning.dll
    .dll windows:6 windows x64 arch:x64

    c2cd89ae1540dd91b2655a71c1396a94


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • shareplay/Qt5PrintSupport.dll
    .dll windows:6 windows x64 arch:x64

    26700ef02be327db2fd1fa8e3d9ec912


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • shareplay/Qt5Qml.dll
    .dll windows:6 windows x64 arch:x64

    1787c4d6ff55e2768939a80eca59ed22


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • shareplay/Qt5QmlModels.dll
    .dll windows:6 windows x64 arch:x64

    699c20a4cef0fad5c1d0803b8a37f011


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • shareplay/Qt5Quick.dll
    .dll windows:6 windows x64 arch:x64

    2fce56b278157c5e779dfe8cc1ae885f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • shareplay/Qt5QuickWidgets.dll
    .dll windows:6 windows x64 arch:x64

    40bb98469621836cfc1965635ac18cd1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • shareplay/Qt5WebChannel.dll
    .dll windows:6 windows x64 arch:x64

    ed9a1d29d9a08241308f4f5657d9be81


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • shareplay/Qt5WebEngineCore.dll
    .dll windows:5 windows x64 arch:x64

    eac52921134f6bbaeccb575e9f157684


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • shareplay/Qt5WebEngineWidgets.dll
    .dll windows:6 windows x64 arch:x64

    b300e15dfac25e847b8975ae46f4d6c1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • shareplay/Qt5Widgets.dll
    .dll windows:6 windows x64 arch:x64

    a8055f8f63e7f0f503c71acbc8a54e34


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • shareplay/QtWebEngineProcess.exe
    .exe windows:5 windows x64 arch:x64

    4fad2d39ce1d140d3e59a6f5e717d018


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • shareplay/SharePlayClient.exe
    .exe windows:6 windows x64 arch:x64

    a54ee160cd526a1376832b68bb3a3f23


    Headers

    Imports

    Sections

  • shareplay/audio/qtaudio_wasapi.dll
    .dll windows:6 windows x64 arch:x64

    576fdf0c2d462c79252b1df291f49517


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • shareplay/audio/qtaudio_windows.dll
    .dll windows:6 windows x64 arch:x64

    beef32f58acb14c0c6c90fdad8baf26f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • shareplay/bearer/qgenericbearer.dll
    .dll windows:6 windows x64 arch:x64

    babdd36d2bc26e25444bf9ca9576e834


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • shareplay/concrt140.dll
    .dll windows:6 windows x64 arch:x64

    0e53a682f1331df9628488b9ca56f28b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • shareplay/msvcp140.dll
    .dll windows:6 windows x64 arch:x64

    adf99b9ea3a1f76c33522f96772bc4dd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • shareplay/platforms/qwindows.dll
    .dll windows:6 windows x64 arch:x64

    000bf617809aea4e05b328030bf44966


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • shareplay/resources/icudtl.dat
  • shareplay/resources/qtwebengine_resources.pak
    .js
  • shareplay/resources/qtwebengine_resources_100p.pak
    .js
  • shareplay/resources/qtwebengine_resources_200p.pak
    .js
  • shareplay/styles/qwindowsvistastyle.dll
    .dll windows:6 windows x64 arch:x64

    c722262ec36cb12999ef527277acda61


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • shareplay/translations/qtwebengine_locales/en-US.pak
  • shareplay/upc_r2_loader64.dll
    .dll windows:6 windows x64 arch:x64

    2df45ffef1f8d49fe471052171f53998


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • shareplay/vcruntime140.dll
    .dll windows:6 windows x64 arch:x64

    2cb5da5225e972a08f32d04b8085dc7e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • snapshot_blob.bin
  • steam_api.dll
    .dll windows:5 windows x86 arch:x86

    5244871a7e6bf3a82e903bbb5da1d05f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • steam_api64.dll
    .dll windows:5 windows x64 arch:x64

    289b2254a2c1e14995dd9995d1686fdb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ubiorbitapi_r2.dll
    .dll windows:6 windows x86 arch:x86

    86018f518cbf09b0ec8191a6fbd6d240


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ubiorbitapi_r264.dll
    .dll windows:6 windows x64 arch:x64

    1b3fd0958a980332fff83dd74592b4ee


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ui.pak
    .gz
  • uicommon.pak
    .gz
  • uicr.pak
    .gz
  • upc.exe
    .exe windows:6 windows x86 arch:x86

    95ce9180b73de9f6223d11b987e13561


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • uplay_aux_r1.dll
    .dll windows:6 windows x86 arch:x86

    c8a603d3a989f9c41616a23f15f4b980


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • uplay_aux_r164.dll
    .dll windows:6 windows x64 arch:x64

    aab6744bfbe79066c654af2ed27bfeba


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • uplay_r1.dll
    .dll windows:6 windows x86 arch:x86

    04240b0d9249f936f7e5be6d29da65b2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • uplay_r164.dll
    .dll windows:6 windows x64 arch:x64

    42e09f471c6d715ca5d60496ff56643a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • uplay_r2.dll
    .dll windows:6 windows x86 arch:x86

    77b753fa3a543918b0ec4ce65490925c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • uplay_r264.dll
    .dll windows:6 windows x64 arch:x64

    0f1c9ef6275278a9aec7f841faeda234


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • v8_context_snapshot.bin
  • version.txt
  • vk_swiftshader.dll
    .dll windows:5 windows x86 arch:x86

    e4ad26ec9334769567aee040de43484d


    Headers

    Imports

    Exports

    Sections

  • vulkan-1.dll
    .dll windows:5 windows x86 arch:x86

    555db08aac990c6cbb99d14d12be6861


    Headers

    Imports

    Exports

    Sections

  • xinput1_3.dll
    .dll windows:5 windows x86 arch:x86

    50f64a1d9783342119da2ac75a894235


    Code Sign

    Headers

    Imports

    Exports

    Sections