General

  • Target

    setup.exe

  • Size

    94.8MB

  • MD5

    346ab2415563a6e0237980da207d5869

  • SHA1

    c4eff0bffdc1bb2bd433256d4bc6acfa6557adee

  • SHA256

    4356617fc5b162787b18f0df3f4b595b54196de7b02223a85d95ceff3e9f973d

  • SHA512

    9f774b07467d20ee0bbefa932fa5f8be87f60d4004d6c4b15d7a861d7bbeca2208e760577323cf9c9a5a28ce56b54a45bac65f3300969054489d77c0e207127a

  • SSDEEP

    1572864:AZ2OkJoYA1y2Ds/7yoUtqU19vEhkV4BmRekgrGODKk6JrRIMnI9O03nsy5vxyVP4:AgGhbDsjyoUFkfDt65UO0Jy+qbs

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • setup.exe
    .exe windows:4 windows x86 arch:x86

    Password: hone

    b34f154ec913d2d2c435cbd644e91687


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/StdUtils.dll
    .dll windows:5 windows x86 arch:x86

    Password: hone

    7b79709c0d5576549eb261e3410f95f8


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    Password: hone

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    Password: hone

    0ef725341a4aecf8398c0e2132f38049


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/WinShell.dll
    .dll windows:4 windows x86 arch:x86

    Password: hone

    a75c904bad153f5af2c37cfdf66eba5c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/app-64.7z
    .7z
  • Hone.exe
    .exe windows:5 windows x64 arch:x64

    Password: hone

    9f9c967fe6d2c8482cb4e000bbd84034


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • LICENSE.electron.txt
  • LICENSES.chromium.html
  • chrome_100_percent.pak
  • chrome_200_percent.pak
  • d3dcompiler_47.dll
    .dll windows:10 windows x64 arch:x64

    Password: hone

    8235041cfd6fffb926142c2c78013446


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ffmpeg.dll
    .dll windows:5 windows x64 arch:x64

    Password: hone

    14338d2168d869b1b53d66354179e8c5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • icudtl.dat
  • libEGL.dll
    .dll windows:10 windows x64 arch:x64

    592e6e55d4fe33d1bd84e3b3016fe3b2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libGLESv2.dll
    .dll windows:10 windows x64 arch:x64

    181c5e1b8305f6185aa211878e735406


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • locales/af.pak
  • locales/am.pak
  • locales/ar.pak
  • locales/bg.pak
  • locales/bn.pak
  • locales/ca.pak
  • locales/cs.pak
  • locales/da.pak
  • locales/de.pak
  • locales/el.pak
  • locales/en-GB.pak
  • locales/en-US.pak
  • locales/es-419.pak
  • locales/es.pak
  • locales/et.pak
  • locales/fa.pak
  • locales/fi.pak
  • locales/fil.pak
  • locales/fr.pak
  • locales/gu.pak
  • locales/he.pak
  • locales/hi.pak
  • locales/hr.pak
  • locales/hu.pak
  • locales/id.pak
  • locales/it.pak
  • locales/ja.pak
  • locales/kn.pak
  • locales/ko.pak
  • locales/lt.pak
  • locales/lv.pak
  • locales/ml.pak
  • locales/mr.pak
  • locales/ms.pak
  • locales/nb.pak
  • locales/nl.pak
  • locales/pl.pak
  • locales/pt-BR.pak
  • locales/pt-PT.pak
  • locales/ro.pak
  • locales/ru.pak
  • locales/sk.pak
  • locales/sl.pak
  • locales/sr.pak
  • locales/sv.pak
  • locales/sw.pak
  • locales/ta.pak
  • locales/te.pak
  • locales/th.pak
  • locales/tr.pak
  • locales/uk.pak
  • locales/ur.pak
  • locales/vi.pak
  • locales/zh-CN.pak
  • locales/zh-TW.pak
  • owutility.dll
    .dll windows:6 windows x64 arch:x64

    f3abbf5a6606a0852fa4e0189ef358d8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resources.pak
  • resources/app-update.yml
  • resources/app.asar
  • resources/assets/assets.d.ts
  • resources/assets/fix.bat
  • resources/assets/fix.ps1
    .ps1
  • resources/assets/fonts/Raleway-Bold.ttf
  • resources/assets/fonts/Raleway-Medium.ttf
  • resources/assets/fonts/Raleway-Regular.ttf
  • resources/assets/fonts/Raleway-SemiBold.ttf
  • resources/assets/fonts/uni-sans-bold.ttf
  • resources/assets/fonts/uni-sans-book.ttf
  • resources/assets/fonts/uni-sans-heavy.ttf
  • resources/assets/fonts/uni-sans-light.ttf
  • resources/assets/fonts/uni-sans-semi-bold.ttf
  • resources/assets/games/APEX-LOGO.webp
  • resources/assets/games/APEX.webp
  • resources/assets/games/CODWZ-LOGO.webp
  • resources/assets/games/CODWZ.webp
  • resources/assets/games/CS2-LOGO.webp
  • resources/assets/games/CS2.webp
  • resources/assets/games/DBD-FAVICON.webp
  • resources/assets/games/DBD-LOGO.webp
  • resources/assets/games/DBD.webp
  • resources/assets/games/DESTINY2-LOGO.webp
  • resources/assets/games/DESTINY2.webp
  • resources/assets/games/DOTA2-LOGO.webp
  • resources/assets/games/DOTA2.webp
  • resources/assets/games/FORTNITE-LOGO.webp
  • resources/assets/games/FORTNITE.webp
  • resources/assets/games/GI-LOGO.webp
  • resources/assets/games/GI.webp
  • resources/assets/games/HALOINFINITE-LOGO.webp
  • resources/assets/games/HALOINFINITE.webp
  • resources/assets/games/LOL-LOGO.webp
  • resources/assets/games/LOL.webp
  • resources/assets/games/MINECRAFT-LOGO.webp
  • resources/assets/games/MINECRAFT.webp
  • resources/assets/games/OSU-LOGO.webp
  • resources/assets/games/OSU.webp
  • resources/assets/games/OVERWATCH-LOGO.webp
  • resources/assets/games/OVERWATCH.webp
  • resources/assets/games/PUBG-LOGO.webp
  • resources/assets/games/PUBG.webp
  • resources/assets/games/RL-LOGO.webp
  • resources/assets/games/RL.webp
  • resources/assets/games/ROBLOX-LOGO.webp
  • resources/assets/games/ROBLOX.webp
  • resources/assets/games/SMITE-LOGO.webp
  • resources/assets/games/SMITE.webp
  • resources/assets/games/TF2-LOGO.webp
  • resources/assets/games/TF2.webp
  • resources/assets/games/VALORANT-LOGO.webp
  • resources/assets/games/VALORANT.webp
  • resources/assets/hone-modal-bg.png
    .png
  • resources/assets/hone-resources/.git
  • resources/assets/hone-resources/Base_Profile.nip
  • resources/assets/hone-resources/GenshinCfg.exe
    .exe windows:6 windows x64 arch:x64

    5c16479801aac25e19e4d3e71f54842d


    Code Sign

    Headers

    Imports

    Sections

  • resources/assets/hone-resources/GenshinConfigurator_LICENSE.txt
  • resources/assets/hone-resources/HoneV4.pow
  • resources/assets/hone-resources/HoneV5.pow
  • resources/assets/hone-resources/Latency_and_Performances_Settings_by_Hone_Team3.nip
  • resources/assets/hone-resources/Nvidia_Profile_Inspector_LICENSE.txt
  • resources/assets/hone-resources/On.ps1
  • resources/assets/hone-resources/PowerRun.exe
    .exe windows:5 windows x64 arch:x64

    42b8d4fa3bc2c4336a20de1bdf1422d8


    Code Sign

    Headers

    Imports

    Sections

  • resources/assets/hone-resources/SetTimerResolution.exe
    .exe windows:6 windows x64 arch:x64

    51b4d6245ba673d7bc7bbd32358b03fc


    Code Sign

    Headers

    Imports

    Sections

  • resources/assets/hone-resources/TimerRes_Sed_LICENSE.txt
  • resources/assets/hone-resources/TotalReg.exe
    .exe windows:6 windows x64 arch:x64

    47608614f7825beeccb3fc51ce498473


    Code Sign

    Headers

    Imports

    Sections

  • resources/assets/hone-resources/TotalReg_LICENSE.txt
  • resources/assets/hone-resources/Win-RAIDCA.cer
  • resources/assets/hone-resources/hone-bios/SCEWIN.log
  • resources/assets/hone-resources/hone-bios/SCEWIN/SCEWIN_64.exe
    .exe windows:5 windows x64 arch:x64

    c6ad08a1589dd9cf353748c20ce378ce


    Code Sign

    Headers

    Imports

    Sections

  • resources/assets/hone-resources/hone-bios/SCEWIN/amifldrv64.sys
    .sys windows:6 windows x64 arch:x64

    4fbdc03e4487f98fb59360ea5b3e640d


    Code Sign

    Headers

    Imports

    Sections

  • resources/assets/hone-resources/hone-bios/SCEWIN/amigendrv64.sys
    .sys windows:10 windows x64 arch:x64

    07a42e80559d960b176c0fc8fd309bfe


    Code Sign

    Headers

    Imports

    Sections

  • resources/assets/hone-resources/hone-bios/hone-bios.exe
    .exe windows:4 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • resources/assets/hone-resources/hone-bios/nvram.txt
  • resources/assets/hone-resources/nvidiaProfileInspector.zip
    .zip
  • resources/assets/hone-resources/secnvme.cat
  • resources/assets/hone-resources/secnvme.inf
  • resources/assets/hone-resources/secnvme.sys
    .sys windows:10 windows x64 arch:x64

    ca7d94a4e2f9982db859dbdb9e4bd258


    Code Sign

    Headers

    Imports

    Sections

  • resources/assets/hone-resources/sed.dat
    .exe windows:6 windows x64 arch:x64

    90f3023833755f23449b158bebf8b716


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resources/assets/icon.ico
  • resources/assets/icons/1024x1024.png
    .png
  • resources/assets/icons/128x128.png
    .png
  • resources/assets/icons/16x16.png
    .png
  • resources/assets/icons/24x24.png
    .png
  • resources/assets/icons/256x256.png
    .png
  • resources/assets/icons/32x32.png
    .png
  • resources/assets/icons/48x48.png
    .png
  • resources/assets/icons/512x512.png
    .png
  • resources/assets/icons/64x64.png
    .png
  • resources/assets/icons/96x96.png
    .png
  • resources/assets/scriptHelper.exe
    .exe windows:6 windows x64 arch:x64

    66b10d8b5718b0fd6fb4865843d44280


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resources/elevate.exe
    .exe windows:6 windows x86 arch:x86

    c3afe98a750f2d4f1ed5d2ac323cb5e0


    Code Sign

    Headers

    Imports

    Sections

  • snapshot_blob.bin
  • v8_context_snapshot.bin
  • vk_swiftshader.dll
    .dll windows:10 windows x64 arch:x64

    c6d5499631d983c25f3393a4b4b13399


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • vk_swiftshader_icd.json
  • vulkan-1.dll
    .dll windows:10 windows x64 arch:x64

    67082af88118249115fd5249e678e93a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    6b5c4f7d679059f68f1269aad3a5cecd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    d31c5eb927119d00232e4d4b0e32fcdb


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsis7z.dll
    .dll windows:6 windows x86 arch:x86

    2656ea25cde98f31a490513c2db04ae8


    Headers

    Imports

    Exports

    Sections

  • $R0/Uninstall Hone.exe
    .exe windows:4 windows x86 arch:x86

    b34f154ec913d2d2c435cbd644e91687


    Code Sign

    Headers

    Imports

    Sections

  • resources/assets/videos/bios-intro.mp4