!!BEST TWEAKS-20240629T211201Z-001[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

!!BEST TWEAKS-20240629T211201Z-001.zip
Size

121KB
MD5

32e0ac27e012842548302513bc20fcf5
SHA1

f8d541037cf654940d624aeedda9915185cc802e
SHA256

2b40d424237ca996aeb4106ede91f3a831dc106781f7f79196fe10b9efbe98de
SHA512

9e16b6f5b07befd39dc9d86e6adde6cfa1ddb40d19875a3687ba80e3b36d22f32b68c34169df57f0ff4dec2d9a4251eb6ff0479673d34a41f05b5164d0a1b1d2
SSDEEP

3072:ZtnkjoZW1MgsAzptMNMS3y+zfnyjzv6lWLYMj:Lk8Z6vMNZDyjuS

Score

1^/10

Malware Config

Signatures

Files

!!BEST TWEAKS-20240629T211201Z-001.zip
.zip
!!BEST TWEAKS/PC Cleanup/Clear Memory Cache.exe
.exe windows:6 windows x86 arch:x86

ede74345354aaddd93e9ce5d8e8b1431

Code Sign

04:0c:b4:1e:4f:b3:70:c4:5c:43:44:76:51:62:58:2f
Certificate

Issuer

CN=DigiCert SHA2 High Assurance Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

30-10-2013 00:00

Not After

04-01-2017 12:00

Subject

CN=Wen Jia Liu,O=Wen Jia Liu,L=Sydney,ST=New South Wales,C=AU

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0b:7e:10:90:3c:38:49:0f:fa:2f:67:9a:87:a1:a7:b9
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 High Assurance Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2014 00:00

Not After

22-10-2024 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2021 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e2:6c:75:f3:b8:e8:f8:7e:b4:72:02:66:a5:5e:d6:e0:8d:ea:9d:74
Signer

Actual PE Digest

e2:6c:75:f3:b8:e8:f8:7e:b4:72:02:66:a5:5e:d6:e0:8d:ea:9d:74

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\projects\TestPh\Release\TestPh.pdb

Imports

ntdll

RtlNtStatusToDosError
RtlFindMessage
RtlInterlockedPopEntrySList
RtlMultiByteToUnicodeSize
RtlMultiByteToUnicodeN
RtlInitializeSListHead
RtlInterlockedPushEntrySList
RtlRaiseStatus
NtReleaseSemaphore
NtCreateKeyedEvent
NtWaitForKeyedEvent
NtReleaseKeyedEvent
RtlCreateHeap
RtlGetVersion
RtlReleasePrivilege
RtlAcquirePrivilege
RtlLengthSecurityDescriptor
RtlAllocateHeap
RtlUpcaseUnicodeChar
NtSetInformationFile
RtlUnwind
NtWaitForSingleObject
NtFreeVirtualMemory
NtSetSystemInformation
NtQuerySystemInformation
NtCreateSemaphore
NtQueryInformationToken
NtOpenProcessToken
RtlFreeHeap
NtWriteFile
NtDeviceIoControlFile
NtClose

kernel32

IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
IsProcessorFeaturePresent
TerminateProcess
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetModuleFileNameW
FindFirstFileExW
FindNextFileW
GetEnvironmentStringsW
FreeEnvironmentStringsW
InitializeCriticalSectionAndSpinCount
TlsFree
FreeLibrary
LoadLibraryExW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetStringTypeW
MultiByteToWideChar
GetACP
RaiseException
GetStdHandle
WideCharToMultiByte
GetModuleHandleExW
GetCommandLineA
GetCommandLineW
CompareStringW
LCMapStringW
GetFileType
DecodePointer
GetCPInfo
IsValidCodePage
GetOEMCP
CloseHandle
FindClose
GetCurrentProcess
SetLastError
TlsGetValue
TlsAlloc
TlsSetValue
GetSystemDefaultLangID
GetUserDefaultLangID
LocalAlloc
GetTickCount
HeapFree
HeapAlloc
QueryPerformanceCounter
GetProcAddress
GetModuleHandleW
ExitProcess
GetLastError
WriteFile
CreateFileW
SetEnvironmentVariableW
SetStdHandle
GetProcessHeap
FlushFileBuffers
GetConsoleCP
GetConsoleMode
HeapSize
HeapReAlloc
SetFilePointerEx
WriteConsoleW

advapi32

SystemFunction036

Sections

.text
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
!!BEST TWEAKS/Registry _ Batch/26 Hex.reg
!!BEST TWEAKS/Registry _ Batch/AMD CPU Priority.reg
!!BEST TWEAKS/Registry _ Batch/Boost System Responsiveness.reg
!!BEST TWEAKS/Registry _ Batch/CPU Speed.reg
!!BEST TWEAKS/Registry _ Batch/Decrease Delay.reg
!!BEST TWEAKS/Registry _ Batch/Disable Background Apps.reg
!!BEST TWEAKS/Registry _ Batch/Disable Download Maps Manager.reg
!!BEST TWEAKS/Registry _ Batch/Disable GPU Energy Driver.reg
!!BEST TWEAKS/Registry _ Batch/Disable GPU Preemption.reg
!!BEST TWEAKS/Registry _ Batch/Disable Game DVR.reg
!!BEST TWEAKS/Registry _ Batch/Disable GpuEnergyDriver.reg
!!BEST TWEAKS/Registry _ Batch/Disable Network Throttling.reg
!!BEST TWEAKS/Registry _ Batch/Disable Power Saving Modes.reg
!!BEST TWEAKS/Registry _ Batch/Disable Spectre and Meltdown.reg
!!BEST TWEAKS/Registry _ Batch/Disable USB Powersaving.bat
!!BEST TWEAKS/Registry _ Batch/EnableFSE.bat
!!BEST TWEAKS/Registry _ Batch/Fix Keyboard Input Delay.reg
!!BEST TWEAKS/Registry _ Batch/GPU Tweaks.reg
!!BEST TWEAKS/Registry _ Batch/Game Priority Optimizations.reg
!!BEST TWEAKS/Registry _ Batch/Improves Network and SResponsiveness.reg
!!BEST TWEAKS/Registry _ Batch/Increase Power Efficiency.reg
!!BEST TWEAKS/Registry _ Batch/Memory Management Optimizations.reg
!!BEST TWEAKS/Registry _ Batch/Monitor Latency Tolerance.reg
!!BEST TWEAKS/Registry _ Batch/Prioritize Gaming Responsivness.reg
!!BEST TWEAKS/Registry _ Batch/Thread Priority.reg
!!BEST TWEAKS/Windows Post-Installation Pack/# Get Network Drivers/# Get Network Adapter Name.lnk
.lnk
!!BEST TWEAKS/Windows Post-Installation Pack/# Get Network Drivers/# IF your adapter isn_t any of those.txt
!!BEST TWEAKS/Windows Post-Installation Pack/# Get Network Drivers/Intel Ethernet Drivers.url
.url
!!BEST TWEAKS/Windows Post-Installation Pack/# Get Network Drivers/Intel Wifi Drivers.url
.url
!!BEST TWEAKS/Windows Post-Installation Pack/# Get Network Drivers/Realtek Ethernet Drivers.url
.url
!!BEST TWEAKS/Windows Post-Installation Pack/1 Disable WUs/1 Disable UAC - Then Restart.reg
!!BEST TWEAKS/Windows Post-Installation Pack/1 Disable WUs/2 Disable WUs.cmd
!!BEST TWEAKS/Windows Post-Installation Pack/2 Debloat Windows/Safe Method/# Revert/How To Revert.txt
!!BEST TWEAKS/Windows Post-Installation Pack/2 Debloat Windows/Safe Method/# Revert/PowerShell.lnk
.lnk
!!BEST TWEAKS/Windows Post-Installation Pack/2 Debloat Windows/Safe Method/# Uninstall Apps.lnk
.lnk
!!BEST TWEAKS/Windows Post-Installation Pack/2 Debloat Windows/Safe Method/Uninstall 3D Builder.ps1
!!BEST TWEAKS/Windows Post-Installation Pack/2 Debloat Windows/Safe Method/Uninstall 3D Viewer - Mixed Reality Viewer.ps1
!!BEST TWEAKS/Windows Post-Installation Pack/2 Debloat Windows/Safe Method/Uninstall Alarms and Clock.ps1
!!BEST TWEAKS/Windows Post-Installation Pack/2 Debloat Windows/Safe Method/Uninstall Bing Sports.ps1
!!BEST TWEAKS/Windows Post-Installation Pack/2 Debloat Windows/Safe Method/Uninstall Calculator.ps1
!!BEST TWEAKS/Windows Post-Installation Pack/2 Debloat Windows/Safe Method/Uninstall Calendar and Mail.ps1
!!BEST TWEAKS/Windows Post-Installation Pack/2 Debloat Windows/Safe Method/Uninstall Camera.ps1
!!BEST TWEAKS/Windows Post-Installation Pack/2 Debloat Windows/Safe Method/Uninstall Cortana.ps1
!!BEST TWEAKS/Windows Post-Installation Pack/2 Debloat Windows/Safe Method/Uninstall FeedBack Hub.ps1
!!BEST TWEAKS/Windows Post-Installation Pack/2 Debloat Windows/Safe Method/Uninstall Get Help.ps1
!!BEST TWEAKS/Windows Post-Installation Pack/2 Debloat Windows/Safe Method/Uninstall Get Started.ps1
!!BEST TWEAKS/Windows Post-Installation Pack/2 Debloat Windows/Safe Method/Uninstall Groove Music.ps1
!!BEST TWEAKS/Windows Post-Installation Pack/2 Debloat Windows/Safe Method/Uninstall HEIF Image Extension.ps1
!!BEST TWEAKS/Windows Post-Installation Pack/2 Debloat Windows/Safe Method/Uninstall Maps.ps1
!!BEST TWEAKS/Windows Post-Installation Pack/2 Debloat Windows/Safe Method/Uninstall Messaging.ps1
!!BEST TWEAKS/Windows Post-Installation Pack/2 Debloat Windows/Safe Method/Uninstall Mixed Reality Portal.ps1
!!BEST TWEAKS/Windows Post-Installation Pack/2 Debloat Windows/Safe Method/Uninstall Mobile Plans.ps1
!!BEST TWEAKS/Windows Post-Installation Pack/2 Debloat Windows/Safe Method/Uninstall Money App.ps1
!!BEST TWEAKS/Windows Post-Installation Pack/2 Debloat Windows/Safe Method/Uninstall Movies _ TV.ps1
!!BEST TWEAKS/Windows Post-Installation Pack/2 Debloat Windows/Safe Method/Uninstall Paint 3D.ps1
!!BEST TWEAKS/Windows Post-Installation Pack/2 Debloat Windows/Safe Method/Uninstall People.ps1
!!BEST TWEAKS/Windows Post-Installation Pack/2 Debloat Windows/Safe Method/Uninstall Phone App.ps1
!!BEST TWEAKS/Windows Post-Installation Pack/2 Debloat Windows/Safe Method/Uninstall Photos Apps.ps1
!!BEST TWEAKS/Windows Post-Installation Pack/2 Debloat Windows/Safe Method/Uninstall Print 3D.ps1
!!BEST TWEAKS/Windows Post-Installation Pack/2 Debloat Windows/Safe Method/Uninstall Snip _ Sketch.ps1
!!BEST TWEAKS/Windows Post-Installation Pack/2 Debloat Windows/Safe Method/Uninstall Sticky Notes.ps1
!!BEST TWEAKS/Windows Post-Installation Pack/2 Debloat Windows/Safe Method/Uninstall Voice Recorder.ps1
!!BEST TWEAKS/Windows Post-Installation Pack/2 Debloat Windows/Safe Method/Uninstall Web Media Extensions.ps1
!!BEST TWEAKS/Windows Post-Installation Pack/2 Debloat Windows/Safe Method/Uninstall Webp Image Extension.ps1
!!BEST TWEAKS/Windows Post-Installation Pack/2 Debloat Windows/Safe Method/Uninstall Xbox App.ps1
!!BEST TWEAKS/Windows Post-Installation Pack/2 Debloat Windows/Safe Method/Uninstall Xbox Bar.ps1
!!BEST TWEAKS/Windows Post-Installation Pack/2 Debloat Windows/Safe Method/Uninstall Xbox Game Speech.ps1
!!BEST TWEAKS/Windows Post-Installation Pack/3 Download GPU Drivers/AMD Drivers.url
.url
!!BEST TWEAKS/Windows Post-Installation Pack/3 Download GPU Drivers/NVIDIA Drivers.url
.url

Sharing

General

Malware Config

Signatures

Files

ede74345354aaddd93e9ce5d8e8b1431

Code Sign

04:0c:b4:1e:4f:b3:70:c4:5c:43:44:76:51:62:58:2fCertificate

Extended Key Usages

Key Usages

0b:7e:10:90:3c:38:49:0f:fa:2f:67:9a:87:a1:a7:b9Certificate

Extended Key Usages

Key Usages

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66Certificate

Extended Key Usages

Key Usages

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1bCertificate

Extended Key Usages

Key Usages

e2:6c:75:f3:b8:e8:f8:7e:b4:72:02:66:a5:5e:d6:e0:8d:ea:9d:74Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

ntdll

kernel32

advapi32

Sections

.text Size: 76KB - Virtual size: 76KB

.rdata Size: 36KB - Virtual size: 36KB

.data Size: 9KB - Virtual size: 17KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 5KB - Virtual size: 5KB

04:0c:b4:1e:4f:b3:70:c4:5c:43:44:76:51:62:58:2f
Certificate

0b:7e:10:90:3c:38:49:0f:fa:2f:67:9a:87:a1:a7:b9
Certificate

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

e2:6c:75:f3:b8:e8:f8:7e:b4:72:02:66:a5:5e:d6:e0:8d:ea:9d:74
Signer

.text
Size: 76KB - Virtual size: 76KB

.rdata
Size: 36KB - Virtual size: 36KB

.data
Size: 9KB - Virtual size: 17KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 5KB - Virtual size: 5KB