General

  • Target

    ParseHub Setup.exe

  • Size

    82.4MB

  • MD5

    bc4819ebfc4ad3e49650f26bfcdec870

  • SHA1

    78402287e8c736bba97c85b1f85e9bb33feef767

  • SHA256

    bd94fe954348a7edaf0a194b6a994e87a3625e6af88dd7a66204cef5c566fa6c

  • SHA512

    1e1a1428ad19983d065dbe4d1caeecc4242dd2652cffc03a216c08402098009d4907f832d8dbe6fed988b1912c3fdef2da9f65e0d775e36698fd803b95ece95d

  • SSDEEP

    1572864:RJeesg1z1wiMbBg37IO2++QnUOxw6wIkbjH3zunhY8iTuLHY:RJRDXMdg3QQntxX2jXzunzGR

Score
3/10

Malware Config

Signatures

  • Unsigned PE 19 IoCs

    Checks for missing Authenticode signature.

Files

  • ParseHub Setup.exe
    .exe windows:4 windows x86 arch:x86

    b34f154ec913d2d2c435cbd644e91687


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/StdUtils.dll
    .dll windows:5 windows x86 arch:x86

    7b79709c0d5576549eb261e3410f95f8


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    0ef725341a4aecf8398c0e2132f38049


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/WinShell.dll
    .dll windows:4 windows x86 arch:x86

    a75c904bad153f5af2c37cfdf66eba5c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/app-64.7z
    .7z
  • LICENSE.electron.txt
  • LICENSES.chromium.html
  • ParseHub.exe
    .exe windows:5 windows x64 arch:x64

    2ca6e285ed5439f02cf1a614871db8b9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • chrome_100_percent.pak
  • chrome_200_percent.pak
  • d3dcompiler_47.dll
    .dll windows:10 windows x64 arch:x64

    8235041cfd6fffb926142c2c78013446


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • dxcompiler.dll
    .dll windows:5 windows x64 arch:x64

    86379d9f4693f2aa059197611ab2ffc7


    Headers

    Imports

    Exports

    Sections

  • dxil.dll
    .dll windows:10 windows x64 arch:x64

    42e0b0387affe2aaa84bcec72eb74baf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ffmpeg.dll
    .dll windows:5 windows x64 arch:x64

    14338d2168d869b1b53d66354179e8c5


    Headers

    Imports

    Exports

    Sections

  • icudtl.dat
  • libEGL.dll
    .dll windows:5 windows x64 arch:x64

    592e6e55d4fe33d1bd84e3b3016fe3b2


    Headers

    Imports

    Exports

    Sections

  • libGLESv2.dll
    .dll windows:5 windows x64 arch:x64

    5585f5d849dffc51c08f9c2876f039ac


    Headers

    Imports

    Exports

    Sections

  • locales/af.pak
  • locales/am.pak
  • locales/ar.pak
  • locales/bg.pak
  • locales/bn.pak
  • locales/ca.pak
  • locales/cs.pak
  • locales/da.pak
  • locales/de.pak
  • locales/el.pak
  • locales/en-GB.pak
  • locales/en-US.pak
  • locales/es-419.pak
  • locales/es.pak
  • locales/et.pak
  • locales/fa.pak
  • locales/fi.pak
  • locales/fil.pak
  • locales/fr.pak
  • locales/gu.pak
  • locales/he.pak
  • locales/hi.pak
  • locales/hr.pak
  • locales/hu.pak
  • locales/id.pak
  • locales/it.pak
  • locales/ja.pak
  • locales/kn.pak
  • locales/ko.pak
  • locales/lt.pak
  • locales/lv.pak
  • locales/ml.pak
  • locales/mr.pak
  • locales/ms.pak
  • locales/nb.pak
  • locales/nl.pak
  • locales/pl.pak
  • locales/pt-BR.pak
  • locales/pt-PT.pak
  • locales/ro.pak
  • locales/ru.pak
  • locales/sk.pak
  • locales/sl.pak
  • locales/sr.pak
  • locales/sv.pak
  • locales/sw.pak
  • locales/ta.pak
  • locales/te.pak
  • locales/th.pak
  • locales/tr.pak
  • locales/uk.pak
  • locales/ur.pak
  • locales/vi.pak
  • locales/zh-CN.pak
  • locales/zh-TW.pak
  • resources.pak
  • resources/app-update.yml
  • resources/app/app/css/bootstrap-parsehub.less
  • resources/app/app/css/bootstrap/alerts.less
  • resources/app/app/css/bootstrap/badges.less
  • resources/app/app/css/bootstrap/bootstrap.less
  • resources/app/app/css/bootstrap/breadcrumbs.less
  • resources/app/app/css/bootstrap/button-groups.less
  • resources/app/app/css/bootstrap/buttons.less
  • resources/app/app/css/bootstrap/carousel.less
  • resources/app/app/css/bootstrap/close.less
  • resources/app/app/css/bootstrap/code.less
  • resources/app/app/css/bootstrap/component-animations.less
  • resources/app/app/css/bootstrap/dropdowns.less
  • resources/app/app/css/bootstrap/forms.less
  • resources/app/app/css/bootstrap/glyphicons.less
  • resources/app/app/css/bootstrap/grid.less
  • resources/app/app/css/bootstrap/input-groups.less
  • resources/app/app/css/bootstrap/jumbotron.less
  • resources/app/app/css/bootstrap/labels.less
  • resources/app/app/css/bootstrap/list-group.less
  • resources/app/app/css/bootstrap/media.less
  • resources/app/app/css/bootstrap/mixins.less
  • resources/app/app/css/bootstrap/modals.less
  • resources/app/app/css/bootstrap/navbar.less
  • resources/app/app/css/bootstrap/navs.less
  • resources/app/app/css/bootstrap/normalize.less
  • resources/app/app/css/bootstrap/pager.less
  • resources/app/app/css/bootstrap/pagination.less
  • resources/app/app/css/bootstrap/panels.less
  • resources/app/app/css/bootstrap/popovers.less
  • resources/app/app/css/bootstrap/print.less
  • resources/app/app/css/bootstrap/progress-bars.less
  • resources/app/app/css/bootstrap/responsive-utilities.less
  • resources/app/app/css/bootstrap/scaffolding.less
  • resources/app/app/css/bootstrap/tables.less
  • resources/app/app/css/bootstrap/theme.less
  • resources/app/app/css/bootstrap/thumbnails.less
  • resources/app/app/css/bootstrap/tooltip.less
  • resources/app/app/css/bootstrap/type.less
  • resources/app/app/css/bootstrap/utilities.less
  • resources/app/app/css/bootstrap/variables.less
  • resources/app/app/css/bootstrap/wells.less
  • resources/app/app/css/breadcrumb.less
  • resources/app/app/css/buttons.less
  • resources/app/app/css/client-animations.less
  • resources/app/app/css/client.less
  • resources/app/app/css/electron/phclient.css
  • resources/app/app/css/electron/toy_browser.css
  • resources/app/app/css/electron/toy_snapshottp_browser.css
  • resources/app/app/css/font-awesome.less
  • resources/app/app/css/forms.less
  • resources/app/app/css/highlights.less
  • resources/app/app/css/ios_switch.less
  • resources/app/app/css/jasmine.css
  • resources/app/app/css/jqCron.less
  • resources/app/app/css/main.css
  • resources/app/app/css/main.less
  • resources/app/app/css/parsehub-variables.less
  • resources/app/app/css/popup_modal.less
  • resources/app/app/css/style.less
  • resources/app/app/css/tabulator.less
  • resources/app/app/css/util.less
  • resources/app/app/fonts/FontAwesome.otf
  • resources/app/app/fonts/OpenSans-Bold.ttf
  • resources/app/app/fonts/OpenSans-Light.ttf
  • resources/app/app/fonts/OpenSans-Regular.ttf
  • resources/app/app/fonts/PT_Sans.ttf
  • resources/app/app/fonts/fontawesome-webfont.eot
  • resources/app/app/fonts/fontawesome-webfont.svg
    .xml
  • resources/app/app/fonts/fontawesome-webfont.ttf
  • resources/app/app/fonts/fontawesome-webfont.woff
  • resources/app/app/fonts/fontawesome-webfont.woff2
  • resources/app/app/fonts/glyphicons-halflings-regular.eot
  • resources/app/app/fonts/glyphicons-halflings-regular.svg
    .xml
  • resources/app/app/fonts/glyphicons-halflings-regular.ttf
  • resources/app/app/fonts/glyphicons-halflings-regular.woff
  • resources/app/app/images/click_modal_next_btns.png
    .png
  • resources/app/app/images/cursor_relative_select.png
    .png
  • resources/app/app/images/desktop.png
    .png
  • resources/app/app/images/enter.svg
  • resources/app/app/images/integrations_dropbox.svg
    .xml
  • resources/app/app/images/integrations_s3.svg
    .xml
  • resources/app/app/images/lightbulb.png
    .png
  • resources/app/app/images/newProject.png
    .png
  • resources/app/app/images/only_next_btns.jpg
    .jpg
  • resources/app/app/images/parsehub_logo2.svg
    .xml
  • resources/app/app/images/parsehub_logo3.svg
  • resources/app/app/images/penguin-icon.png
    .png
  • resources/app/app/images/phmini2.svg
    .xml
  • resources/app/app/images/relsel_vistut.gif
    .gif
  • resources/app/app/images/searchcheck.svg
  • resources/app/app/images/select_vistut.gif
    .gif
  • resources/app/app/images/tools.svg
  • resources/app/app/js/build/165.bundle.js
    .js
  • resources/app/app/js/build/98.bundle.js
    .js
  • resources/app/app/js/build/app.bundle.js
    .js
  • resources/app/app/js/build/app.bundle.js.LICENSE.txt
  • resources/app/app/js/build/external.js
    .js
  • resources/app/app/js/build/external.js.LICENSE.txt
  • resources/app/app/js/build/page-main-world.bundle.js
    .js
  • resources/app/app/js/build/page-snapshottp.bundle.js
    .js
  • resources/app/app/js/build/page-snapshottp.bundle.js.LICENSE.txt
  • resources/app/app/js/build/page.bundle.js
    .js
  • resources/app/app/js/build/page.bundle.js.LICENSE.txt
  • resources/app/app/js/build/phclient-main.bundle.js
    .js
  • resources/app/app/js/build/phclient-main.bundle.js.LICENSE.txt
  • resources/app/app/js/build/phclient-renderer.bundle.js
    .js
  • resources/app/app/js/build/phclient-renderer.bundle.js.LICENSE.txt
  • resources/app/app/js/build/preload.bundle.js
  • resources/app/app/js/build/snapshottp-preload.bundle.js
    .js
  • resources/app/app/js/build/snapshottp-preload.bundle.js.LICENSE.txt
  • resources/app/app/js/build/snapshottp-replay-iframe.bundle.js
    .js
  • resources/app/app/js/build/src.bundle.js
    .js
  • resources/app/app/js/build/src.bundle.js.LICENSE.txt
  • resources/app/app/js/build/subpages.bundle.js
    .js
  • resources/app/app/js/build/subpages.external.js
    .js
  • resources/app/app/js/build/subpages.external.js.LICENSE.txt
  • resources/app/app/js/build/testapp.bundle.js
    .js
  • resources/app/app/js/build/testapp.bundle.js.LICENSE.txt
  • resources/app/app/js/build/testsetup.bundle.js
    .js
  • resources/app/app/js/build/toy-browser-main.bundle.js
    .js
  • resources/app/app/js/build/toy-browser-main.bundle.js.LICENSE.txt
  • resources/app/app/js/build/toy-browser-renderer.bundle.js
    .js
  • resources/app/app/js/build/toy-browser-renderer.bundle.js.LICENSE.txt
  • resources/app/app/js/build/toy-snapshottp-browser-main.bundle.js
    .js
  • resources/app/app/js/build/toy-snapshottp-browser-main.bundle.js.LICENSE.txt
  • resources/app/app/js/build/toy-snapshottp-browser-renderer.bundle.js
    .js
  • resources/app/app/js/build/toy-snapshottp-browser-renderer.bundle.js.LICENSE.txt
  • resources/app/app/views/account.html
  • resources/app/app/views/breadcrumb.html
  • resources/app/app/views/connecting.html
  • resources/app/app/views/croninfo.html
  • resources/app/app/views/debug_treeview.html
  • resources/app/app/views/editor.html
  • resources/app/app/views/editor_buttons.html
  • resources/app/app/views/electron/phclient.html
    .html
  • resources/app/app/views/electron/snapshottp_replay_iframe.html
    .html
  • resources/app/app/views/electron/toy_browser.html
    .html
  • resources/app/app/views/electron/toy_snapshottp_browser.html
    .html
  • resources/app/app/views/footer.html
  • resources/app/app/views/hilite.html
    .html
  • resources/app/app/views/hotkeys.html
    .html .js polyglot
  • resources/app/app/views/index.html
    .html .js polyglot
  • resources/app/app/views/integration.html
  • resources/app/app/views/integrations.html
  • resources/app/app/views/landing.html
  • resources/app/app/views/loading.html
    .html
  • resources/app/app/views/login.html
  • resources/app/app/views/modal.html
    .html
  • resources/app/app/views/moment.html
    .html
  • resources/app/app/views/myprojects.html
  • resources/app/app/views/myruns.html
  • resources/app/app/views/newproject.html
  • resources/app/app/views/nodecreator.html
  • resources/app/app/views/project_button.html
  • resources/app/app/views/project_options.html
  • resources/app/app/views/projectrules.html
  • resources/app/app/views/projectslist.html
  • resources/app/app/views/recentprojectlist.html
  • resources/app/app/views/recentrunslist.html
  • resources/app/app/views/results.html
    .html
  • resources/app/app/views/run.html
  • resources/app/app/views/runinfo.html
  • resources/app/app/views/runslist.html
  • resources/app/app/views/selectable_tokens.html
    .html
  • resources/app/app/views/server_snapshot.html
  • resources/app/app/views/sidebar.html
  • resources/app/app/views/test_buttons.html
  • resources/app/app/views/testlandingrenderer.html
    .html
  • resources/app/app/views/toast.html
    .html
  • resources/app/app/views/toolbar.html
    .html
  • resources/app/app/views/topmenu.html
  • resources/app/app/views/treepieces.html
    .html
  • resources/app/app/views/treeview.html
  • resources/app/app/views/tutorial_transition.html
  • resources/app/app/views/tutorials.html
  • resources/app/app/views/tutorialtext.html
  • resources/app/app/views/unit_test_index.html
    .html .js polyglot
  • resources/app/app/views/website_inkblot.html
    .html
  • resources/app/package.json
  • resources/elevate.exe
    .exe windows:6 windows x86 arch:x86

    c3afe98a750f2d4f1ed5d2ac323cb5e0


    Code Sign

    Headers

    Imports

    Sections

  • snapshot_blob.bin
  • v8_context_snapshot.bin
  • vk_swiftshader.dll
    .dll windows:5 windows x64 arch:x64

    c6d5499631d983c25f3393a4b4b13399


    Headers

    Imports

    Exports

    Sections

  • vk_swiftshader_icd.json
  • vulkan-1.dll
    .dll windows:5 windows x64 arch:x64

    49ed29c3ff417b26c7cd92ecc9b7dcb3


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    6b5c4f7d679059f68f1269aad3a5cecd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    d31c5eb927119d00232e4d4b0e32fcdb


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsis7z.dll
    .dll windows:6 windows x86 arch:x86

    2656ea25cde98f31a490513c2db04ae8


    Headers

    Imports

    Exports

    Sections

  • $R0/Uninstall ParseHub.exe
    .exe windows:4 windows x86 arch:x86

    b34f154ec913d2d2c435cbd644e91687


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/StdUtils.dll
    .dll windows:5 windows x86 arch:x86

    7b79709c0d5576549eb261e3410f95f8


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    0ef725341a4aecf8398c0e2132f38049


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/WinShell.dll
    .dll windows:4 windows x86 arch:x86

    a75c904bad153f5af2c37cfdf66eba5c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    6b5c4f7d679059f68f1269aad3a5cecd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    d31c5eb927119d00232e4d4b0e32fcdb


    Headers

    Imports

    Exports

    Sections