General

  • Target

    aescripts-flux-v1.15.exe

  • Size

    53.0MB

  • MD5

    fc3871bb5ea89b38331a5ede47266db0

  • SHA1

    c7bb5216081fe6ce5eb15fb33a0add556ab104e1

  • SHA256

    7a938c43d44edf8c548a32f1a7350ef79814c6b9c89af2e1642f691cabe03435

  • SHA512

    320d89c2198e5fb0c2885595977a1d0ea382634ac09972b04401265a8bb09271b976c1b03cb6fa018195c3a83448d07ecdc526fa11f801733cbb808bebacdf85

  • SSDEEP

    1572864:AhfHHmYQwCQcheYHT/4n/vFhwDyl9iZqdWNEGk:Ah/mYHCdZHT/K3FhwDylorNEf

Score
3/10

Malware Config

Signatures

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • aescripts-flux-v1.15.exe
    .exe windows:4 windows x86 arch:x86

    ced282d9b261d1462772017fe2f6972b


    Code Sign

    Headers

    Imports

    Sections

  • $1/Mettle/mettle-flux.aex
    .dll windows:6 windows x64 arch:x64

    00895987bc6ac008edf496506730a36e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $1/Mettle/mettle-globe.prm
    .dll windows:6 windows x64 arch:x64

    56cafdb55bfa85b97225e70ee7a345a9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $APPDATA/Mettle/mtm-log.cfg
  • $PLUGINSDIR/AccessControl.dll
    .dll windows:4 windows x86 arch:x86

    c6cc0e1af86ee61899c1ea1514b9e3c7


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    8c8a576201f68de1a3f26fc723b9f30f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    ebc2d915841be8afc8fa1ee9f6850960


    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES/Common Files/Adobe/CEP/extensions/mettle-flux-panel.zxp
    .zip
  • CSXS/manifest.xml
    .xml
  • META-INF/signatures.xml
  • build/bundle.js
    .js
  • css/jquery-ui.min.css
  • css/master.css
  • css/master.scss
  • css/roundslider.min.css
  • fonts/MyriadPro-BoldCond.otf
  • index-flux.html
    .html
  • jsx/hostscript.jsx
    .js
  • lib/CSInterface.js
    .js
  • lib/Vulcan.js
    .js
  • lib/jquery-3.1.1.js
    .js
  • lib/jquery-ui.min.js
    .js
  • lib/roundslider.min.js
    .js
  • lib/snap.svg.js
    .js
  • lib/underscore-min.js
    .js
  • mimetype
  • presets/Flux/MET 1.json
  • presets/Flux/MET 1.png
    .png
  • presets/Flux/MET 10.json
  • presets/Flux/MET 10.png
    .png
  • presets/Flux/MET 11.json
  • presets/Flux/MET 11.png
    .png
  • presets/Flux/MET 12.json
  • presets/Flux/MET 12.png
    .png
  • presets/Flux/MET 13.json
  • presets/Flux/MET 13.png
    .png
  • presets/Flux/MET 14.json
  • presets/Flux/MET 14.png
    .png
  • presets/Flux/MET 15.json
  • presets/Flux/MET 15.png
    .png
  • presets/Flux/MET 16.json
  • presets/Flux/MET 16.png
    .png
  • presets/Flux/MET 2.json
  • presets/Flux/MET 2.png
    .png
  • presets/Flux/MET 3.json
  • presets/Flux/MET 3.png
    .png
  • presets/Flux/MET 4.json
  • presets/Flux/MET 4.png
    .png
  • presets/Flux/MET 5.json
  • presets/Flux/MET 5.png
    .png
  • presets/Flux/MET 6.json
  • presets/Flux/MET 6.png
    .png
  • presets/Flux/MET 7.json
  • presets/Flux/MET 7.png
    .png
  • presets/Flux/MET 8.json
  • presets/Flux/MET 8.png
    .png
  • presets/Flux/MET 9.json
  • presets/Flux/MET 9.png
    .png
  • presets/Flux/RM 1.json
  • presets/Flux/RM 1.png
    .png
  • presets/Flux/RM 2.json
  • presets/Flux/RM 2.png
    .png
  • presets/Flux/RM 3.json
  • presets/Flux/RM 3.png
    .png
  • presets/Flux/RM 4.json
  • presets/Flux/RM 4.png
    .png
  • presets/Flux/RM 5.json
  • presets/Flux/RM 5.png
    .png
  • presets/Flux/RM 6.json
  • presets/Flux/RM 6.png
    .png
  • presets/Flux/RM 7.json
  • presets/Flux/RM 7.png
    .png
  • presets/Mantra/Audio Reactive.json
  • presets/Mantra/Audio Reactive.png
    .png
  • presets/Mantra/Bubbles.json
  • presets/Mantra/Bubbles.png
    .png
  • presets/Mantra/Chrome Spheres.json
  • presets/Mantra/Chrome Spheres.png
    .png
  • presets/Mantra/Diamonds.json
  • presets/Mantra/Diamonds.png
    .png
  • presets/Mantra/Escher Droste 1.json
  • presets/Mantra/Escher Droste 1.png
    .png
  • presets/Mantra/Escher Droste 2.json
  • presets/Mantra/Escher Droste 2.png
    .png
  • presets/Mantra/Ice Cage.json
  • presets/Mantra/Ice Cage.png
    .png
  • presets/Mantra/Kaleidoscope 1.json
  • presets/Mantra/Kaleidoscope 1.png
    .png
  • presets/Mantra/Kaleidoscope 2.json
  • presets/Mantra/Kaleidoscope 2.png
    .png
  • presets/Mantra/Little Planet 1.json
  • presets/Mantra/Little Planet 1.png
    .png
  • presets/Mantra/Little Planet 2.json
  • presets/Mantra/Little Planet 2.png
    .png
  • presets/Mantra/Turbulence.json
  • presets/Mantra/Turbulence.png
    .png
  • presets/Mantra/Virtual Dolly.json
  • presets/Mantra/Virtual Dolly.png
    .png
  • presets/Mantra/Waves.json
    .js
  • presets/Mantra/Waves.png
    .png
  • presets/Mantra/Wormhole.json
  • presets/Mantra/Wormhole.png
    .png
  • $PROGRAMFILES/Common Files/Adobe/CEP/extensions/mettle-globe.zxp
    .zip
  • CSXS/manifest.xml
    .xml
  • META-INF/signatures.xml
  • build/bundle.js
    .js
  • build/shadersPlane.js
    .js
  • build/shadersSphere.js
    .js
  • build/shadersUI.js
    .js
  • css/master.css
  • img/default.png
    .png
  • index.html
    .html
  • lib/CSInterface.js
    .js
  • lib/glUtils.js
    .js
  • lib/sylvester.js
    .js
  • mimetype
  • $PROGRAMFILES64/Mettle/CEF/cef.pak
    .js
  • $PROGRAMFILES64/Mettle/CEF/cef_100_percent.pak
  • $PROGRAMFILES64/Mettle/CEF/cef_200_percent.pak
  • $PROGRAMFILES64/Mettle/CEF/cef_extensions.pak
    .js
  • $PROGRAMFILES64/Mettle/CEF/d3dcompiler_43.dll
    .dll windows:6 windows x86 arch:x86

    6ba7b0e4e74a8eea96dca4fffc88b859


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES64/Mettle/CEF/d3dcompiler_47.dll
    .dll windows:10 windows x64 arch:x64

    66666a419522ef3008ac663e6bb8cc1c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES64/Mettle/CEF/devtools_resources.pak
    .js
  • $PROGRAMFILES64/Mettle/CEF/icudtl.dat
  • $PROGRAMFILES64/Mettle/CEF/libEGL.dll
    .dll windows:5 windows x64 arch:x64

    4c188770fae60332f03d8a0161e9ce58


    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES64/Mettle/CEF/libGLESv2.dll
    .dll windows:5 windows x64 arch:x64

    301ce1a143d65ccf630f2ce96fd5f83f


    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES64/Mettle/CEF/libcef.dll
    .dll windows:5 windows x64 arch:x64

    5526977b8b92e9d5f142ff53bdfc03e6


    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES64/Mettle/CEF/locales/am.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/ar.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/bg.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/bn.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/ca.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/cs.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/da.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/de.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/el.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/en-GB.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/en-US.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/es-419.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/es.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/et.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/fa.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/fi.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/fil.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/fr.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/gu.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/he.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/hi.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/hr.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/hu.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/id.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/it.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/ja.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/kn.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/ko.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/lt.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/lv.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/ml.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/mr.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/ms.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/nb.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/nl.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/pl.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/pt-BR.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/pt-PT.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/ro.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/ru.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/sk.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/sl.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/sr.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/sv.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/sw.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/ta.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/te.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/th.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/tr.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/uk.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/vi.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/zh-CN.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/zh-TW.pak
  • $PROGRAMFILES64/Mettle/CEF/natives_blob.bin
    .js
  • $PROGRAMFILES64/Mettle/CEF/snapshot_blob.bin
  • $PROGRAMFILES64/Mettle/ExManCmd/AID.dll
    .dll windows:6 windows x86 arch:x86

    788dffef19ed928bb54bd451f7fb269d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES64/Mettle/ExManCmd/AdobeExtensionsService.exe
    .exe windows:6 windows x86 arch:x86

    f4890ed364e28c37eba124c641a798f2


    Code Sign

    Headers

    Imports

    Sections

  • $PROGRAMFILES64/Mettle/ExManCmd/ExManCmd.exe
    .exe windows:6 windows x86 arch:x86

    220339eb2fc40a854cda6a1bafbbef7f


    Code Sign

    Headers

    Imports

    Sections

  • $PROGRAMFILES64/Mettle/ExManCmd/ExManCoreLib.dll
    .dll windows:6 windows x86 arch:x86

    cba2c5113baa52852f782bfc0bb26890


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES64/Mettle/ExManCmd/ExManCoreLib.lib
  • $PROGRAMFILES64/Mettle/ExManCmd/ExManZxpSign.dll
    .dll windows:6 windows x86 arch:x86

    118e41c778a6ae3b2e5c50106740208e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES64/Mettle/ExManCmd/ExtLib.dll
    .dll windows:6 windows x86 arch:x86

    a9cf826182a345caad375cb55b7afb70


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES64/Mettle/ExManCmd/README
  • $PROGRAMFILES64/Mettle/ExManCmd/VulcanControl.dll
    .dll windows:6 windows x86 arch:x86

    a0b03d109db8bdf216dcc6006f187111


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES64/Mettle/ExManCmd/XManConfig.xml
    .xml
  • $PROGRAMFILES64/Mettle/mtm-log.cfg
  • $PROGRAMFILES64/Mettle/mtm.exe
    .exe windows:6 windows x64 arch:x64

    4c9fa7c1c88c1e8126f01b8812c76516


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES64/Mettle/mtmapp.dll
    .dll windows:6 windows x64 arch:x64

    6e38cceec53e16d52cde5c7d8810be96


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES64/Mettle/precompile.exe
    .exe windows:6 windows x64 arch:x64

    2f815e2d17a2634a3038a7ddb08062c8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $WINDIR/System32/concrt140.dll
    .dll windows:6 windows x64 arch:x64

    8e90e23f58a96b4b6a90fc459d6e3958


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $WINDIR/System32/msvcp140.dll
    .dll windows:6 windows x64 arch:x64

    9687721f5dda03d1fbed0185473c6901


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $WINDIR/System32/msvcp140_1.dll
    .dll windows:6 windows x64 arch:x64

    bcc3afe694d58072ee6981b4d8a24ce2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $WINDIR/System32/vccorlib140.dll
    .dll windows:6 windows x64 arch:x64

    a048b4221952cc9a5b38e8db05a60786


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $WINDIR/System32/vcruntime140.dll
    .dll windows:6 windows x64 arch:x64

    34ed12abd07e17a465645d6935506a88


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • setup.ico
  • uninstall_flux.exe.nsis