General

  • Target

    UplayInstaller.exe

  • Size

    113.4MB

  • MD5

    1c2d115033a6a5f422c2074a44ad23b9

  • SHA1

    b78f9c2b8c0d01b057c9802b0f692b9328c02bd2

  • SHA256

    dfe0de3d74ff5dd4b9f20c2c52a2e9d4ddbf848457e1099cebcf926fa93df530

  • SHA512

    bf9047b3925bc270408990a5e899a1fed16ea0378b7319a1bddfb526cc2212fbec12f4549aac3340ad4d35dcd9ead6d1d23d07522940b2e109d7c220b110b97a

  • SSDEEP

    3145728:QUVKULMGpWPsGwrsyv8FfPRkwy+KF7hK5PzJI4Z:JoUpWPsBrsykFfPROv4R6g

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 16 IoCs

    Checks for missing Authenticode signature.

Files

  • UplayInstaller.exe
    .exe windows:4 windows x86 arch:x86

    7eae418c7423834ffc3d79b4300bd6fb


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/AccessControl.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    3e8d18bb71c7ebbda2ddc2a4bb03547b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsArray.dll
    .dll windows:6 windows x86 arch:x86

    af03e0dafc67ec37f6adde926d93d334


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    6b5c4f7d679059f68f1269aad3a5cecd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/registry.dll
    .dll windows:4 windows x86 arch:x86

    421a02aae559045e04759aae146087eb


    Headers

    Imports

    Exports

    Sections

  • UbisoftGameLauncher.exe
    .exe windows:6 windows x86 arch:x86

    29d775e3375fe89890d8658d86234eeb


    Code Sign

    Headers

    Imports

    Sections

  • UbisoftGameLauncher64.exe
    .exe windows:6 windows x64 arch:x64

    e16310fb406e4b427d37c9ab147eeac4


    Code Sign

    Headers

    Imports

    Sections

  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    7eae418c7423834ffc3d79b4300bd6fb


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    3e8d18bb71c7ebbda2ddc2a4bb03547b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    6b5c4f7d679059f68f1269aad3a5cecd


    Headers

    Imports

    Exports

    Sections

  • Uplay.exe
    .exe windows:5 windows x86 arch:x86

    247cb33ca499df05bb6d72db78e9d5d6


    Code Sign

    Headers

    Imports

    Sections

  • UplayCrashReporter.exe
    .exe windows:6 windows x86 arch:x86

    59e9fd565637d0aac9b29372817c6813


    Code Sign

    Headers

    Imports

    Sections

  • UplayService.exe
    .exe windows:6 windows x86 arch:x86

    ca1b7fb51956f28d83936839684cd3ae


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • UplayWebCore.exe
    .exe windows:6 windows x86 arch:x86

    5dac53bda6cdc9cfb4c8f3c2ff030313


    Code Sign

    Headers

    Imports

    Sections

  • cef.pak
  • cef_100_percent.pak
    .js
  • cef_200_percent.pak
    .js
  • cef_extensions.pak
    .js
  • chrome_elf.dll
    .dll windows:5 windows x86 arch:x86

    edeb071b0e4add85aa13234c896cce75


    Headers

    Imports

    Exports

    Sections

  • data/loc/cs-CZ_loc.txt
  • data/loc/da-DK_loc.txt
  • data/loc/de-DE_loc.txt
  • data/loc/en-CA_loc.txt
  • data/loc/en-US_loc.txt
  • data/loc/en-US_release_notes.txt
  • data/loc/es-ES_loc.txt
  • data/loc/es-MX_loc.txt
  • data/loc/fi-FI_loc.txt
  • data/loc/fr-FR_loc.txt
  • data/loc/hu-HU_loc.txt
  • data/loc/it-IT_loc.txt
  • data/loc/ja-JP_loc.txt
  • data/loc/ko-KO_loc.txt
  • data/loc/nb-NO_loc.txt
  • data/loc/nl-NL_loc.txt
  • data/loc/pl-PL_loc.txt
  • data/loc/pt-BR_loc.txt
  • data/loc/pt-PT_loc.txt
  • data/loc/ru-RU_loc.txt
  • data/loc/sv-SE_loc.txt
  • data/loc/tr-TR_loc.txt
  • data/loc/zh-CN_loc.txt
  • data/loc/zh-TW_loc.txt
  • data/resources/LICENSES.txt
  • data/resources/default_avatar.png
    .png
  • data/resources/default_avatar_100.png
    .png
  • data/resources/default_avatar_128.png
    .png
  • data/resources/default_avatar_256.jpg
    .jpg
  • data/resources/default_avatar_256.png
    .png
  • data/resources/default_avatar_64.png
    .png
  • data/resources/free_game_configs_schema.yml
  • data/resources/group_avatar_128.png
    .png
  • data/resources/group_avatar_256.png
    .png
  • data/resources/group_avatar_64.png
    .png
  • data/resources/incoming_invite_from_user.wav
  • data/resources/noise.png
    .png
  • data/resources/other_user_joined.wav
  • data/resources/other_user_leaves.wav
  • data/resources/overlay_cursor.png
    .png
  • data/resources/preorder_config_schema_3_0.yml
  • data/resources/product_add_on_config_schema_3_0.yml
  • data/resources/product_config_schema_1_0.yml
  • data/resources/product_config_schema_1_5.yml
  • data/resources/product_config_schema_1_7.yml
  • data/resources/product_config_schema_2_0.yml
  • data/resources/product_config_schema_2_0_offline.yml
  • data/resources/product_game_pre_order_config_schema_3_0.yml
  • data/resources/product_template_config_schema_4.4.yml
  • data/resources/promo_config_schema.yml
  • data/resources/rich_presence_schema.yml
  • data/resources/sprite_frame.png
    .png
  • data/resources/sprite_frame_x.png
    .png
  • data/resources/sprite_nav_btn_small.png
    .png
  • data/resources/sprite_nav_tabs.png
    .png
  • data/resources/sprite_shop_buttons.png
    .png
  • data/resources/sprite_uplay_dropdown.png
    .png
  • data/resources/sprite_window_controls.png
    .png
  • data/resources/uat.png
    .png
  • data/resources/uplay_enabled_game_configuration_schema_3_0.yml
  • data/resources/uplayplus_config_schema.yml
  • data/resources/voice_chat_active.wav
  • data/resources/voice_chat_disconnect.wav
  • discord-rpc.x64.dll
    .dll windows:6 windows x64 arch:x64

    e73f5454d2c0774715d68b4d2bae36dc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • discord-rpc.x86.dll
    .dll windows:6 windows x86 arch:x86

    e995bdb0f582700bbcb5852d2c59fe2e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • gear_core_win32DLL.dll
    .dll windows:6 windows x86 arch:x86

    5121ebd1c67fb3214a4f835c367f13d4


    Headers

    Imports

    Exports

    Sections

  • gear_detection_win32DLL.dll
    .dll windows:6 windows x86 arch:x86

    bbafe8b296b950e80409914fef9ebdf7


    Headers

    Imports

    Exports

    Sections

  • gpudatabase_win32.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Sections

  • icudtl.dat
  • libUbiCustomEvent.dll
    .dll windows:5 windows x86 arch:x86

    5ab462c0a08c2bd662e00992c746d14e


    Headers

    Imports

    Exports

    Sections

  • libcef.dll
    .dll windows:5 windows x86 arch:x86

    e1f22831f0c2501c468a960d2b50e5bb


    Headers

    Imports

    Exports

    Sections

  • locales/1/am.pak
  • locales/1/ar.pak
  • locales/1/bg.pak
  • locales/1/bn.pak
  • locales/1/ca.pak
  • locales/1/cs.pak
  • locales/1/da.pak
  • locales/1/de.pak
  • locales/1/el.pak
  • locales/1/en-GB.pak
  • locales/1/en-US.pak
  • locales/1/es-419.pak
  • locales/1/es.pak
  • locales/1/et.pak
  • locales/1/fa.pak
  • locales/1/fi.pak
  • locales/1/fil.pak
  • locales/1/fr.pak
  • locales/1/gu.pak
  • locales/1/he.pak
  • locales/1/hi.pak
  • locales/1/hr.pak
  • locales/1/hu.pak
  • locales/1/id.pak
  • locales/1/it.pak
  • locales/1/ja.pak
  • locales/1/kn.pak
  • locales/1/ko.pak
  • locales/1/lt.pak
  • locales/1/lv.pak
  • locales/1/ml.pak
  • locales/1/mr.pak
  • locales/1/ms.pak
  • locales/1/nb.pak
  • locales/1/nl.pak
  • locales/1/pl.pak
  • locales/1/pt-BR.pak
  • locales/1/pt-PT.pak
  • locales/1/ro.pak
  • locales/1/ru.pak
  • locales/1/sk.pak
  • locales/1/sl.pak
  • locales/1/sr.pak
  • locales/1/sv.pak
  • locales/1/sw.pak
  • locales/1/ta.pak
  • locales/1/te.pak
  • locales/1/th.pak
  • locales/1/tr.pak
  • locales/1/uk.pak
  • locales/1/vi.pak
  • locales/1/zh-CN.pak
  • locales/1/zh-TW.pak
  • natives_blob.bin
    .js
  • npuplaypc.dll
    .dll windows:5 windows x86 arch:x86

    5f6f9e525bf5a31a7b44f71e560251ef


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • npuplaypchub.dll
    .dll windows:5 windows x86 arch:x86

    5f6f9e525bf5a31a7b44f71e560251ef


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • overlay.dll
    .dll windows:6 windows x86 arch:x86

    0843c9ac73b9dae95a5304bda3eb176a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • overlay64.dll
    .dll windows:6 windows x64 arch:x64

    fa67b7738fe2b94c0184d36df672ad99


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • snapshot_blob.bin
  • steam_api.dll
    .dll windows:5 windows x86 arch:x86

    505799f8a745662a7ae4877b9db0f7be


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • steam_api64.dll
    .dll windows:5 windows x64 arch:x64

    477f42e8df284016fc9a7250f8f9a472


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ubiorbitapi_r2.dll
    .dll windows:6 windows x86 arch:x86

    a6dcb5aea264cd454ec277552732b968


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ubiorbitapi_r264.dll
    .dll windows:6 windows x64 arch:x64

    689ff199fb7bbb786a1b91371ee279cc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ui.pak
    .gz
  • ui.pak
    .js
  • uicommon.pak
    .gz
  • uicommon.pak
    .js
  • uicr.pak
    .gz
  • uicr.pak
    .js
  • upc.exe
    .exe windows:6 windows x86 arch:x86

    a66920c2ce30df4802b2ae0904f85075


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • uplay_aux_r1.dll
    .dll windows:6 windows x86 arch:x86

    c1e9ac249d6b59d0b30fa74c19ee8459


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • uplay_aux_r164.dll
    .dll windows:6 windows x64 arch:x64

    a00c3b2b66cbcb5bfe879a479d25106a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • uplay_r1.dll
    .dll windows:6 windows x86 arch:x86

    8ba80511828ac59a67ba5513abec579f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • uplay_r164.dll
    .dll windows:6 windows x64 arch:x64

    3a1a7347d13a304b1858f3f4f2e0ddb9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • uplay_r2.dll
    .dll windows:6 windows x86 arch:x86

    227a72e52a540562ecebc10f4b43dcbf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • uplay_r264.dll
    .dll windows:6 windows x64 arch:x64

    e5bbbbc9a6a04ba186c4bf045f14030e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • v8_context_snapshot.bin
  • version.txt
  • xinput1_3.dll
    .dll windows:5 windows x86 arch:x86

    50f64a1d9783342119da2ac75a894235


    Code Sign

    Headers

    Imports

    Exports

    Sections