General

  • Target

    MultiCommander_win32_(14.2.0.3026).exe

  • Size

    8.8MB

  • MD5

    d19ac2824473f183bb9edb82e95dae0a

  • SHA1

    2b4fa655ae82fbc6ade10baf1ccdbc70fb45cc64

  • SHA256

    293cc5af85b115fb8573a48dee50d383e8cf02aea2bbf118888b5edbde10d4ad

  • SHA512

    a3fd452dc2dc6a78cb4581035b93ec41807e5caa593b522e30244309d53f3e6c3a42731d2b5f16c69d98bab08fea9bb1edf0a51bbe2572f88f2d9b62204605fc

  • SSDEEP

    196608:rZVQrRepRrp7Qk600phwohWHQqWLI+Hsi6sGctLVaVQDlNa:rZVQtenp7Qk600phw3Hc0SvtLwyDlk

Score
3/10

Malware Config

Signatures

  • Unsigned PE 29 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • MultiCommander_win32_(14.2.0.3026).exe
    .exe windows:4 windows x86 arch:x86

    Password: infected

    b76363e9cb88bf9390860da8e50999d2


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    Password: infected

    738dc9bb91549f627cf1953c2000e1d6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    Password: infected

    f2ac1ab587d5531d5f1bf76c094aef4c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    Password: infected

    2274cc1534607459cdd304a928601ef9


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    Password: infected

    f03b2bab186574d8892d3d73fa9fd3fd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:4 windows x86 arch:x86

    Password: infected

    c9fc7f6df8fedf8f8f1f9f820c072664


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsisunz.dll
    .dll windows:4 windows x86 arch:x86

    Password: infected

    0f92772da9c737d2bac38919e9863980


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/registry.dll
    .dll windows:4 windows x86 arch:x86

    Password: infected

    421a02aae559045e04759aae146087eb


    Headers

    Imports

    Exports

    Sections

  • ChangeLog.txt
  • Config/Aliases.xml
    .xml
  • Config/CfgProfiles/CommanderStyle-Color-ExplorerPanel.xml
    .xml
  • Config/CfgProfiles/CommanderStyle-Color-MultiCommander.xml
    .xml
  • Config/CfgProfiles/CommanderStyle-ColorAlternating-ExplorerPanel.xml
    .xml
  • Config/CfgProfiles/CommanderStyle-ColorAlternating-MultiCommander.xml
    .xml
  • Config/CfgProfiles/CommanderStyle-ColorDarkMode-ExplorerPanel.xml
    .xml
  • Config/CfgProfiles/CommanderStyle-ColorDarkMode-MultiCommander.xml
    .xml
  • Config/CfgProfiles/CommanderStyle-ColorNC-ExplorerPanel.xml
    .xml
  • Config/CfgProfiles/CommanderStyle-ColorNC-MultiCommander.xml
    .xml
  • Config/CfgProfiles/CommanderStyle-Dark-ExplorerPanel.xml
    .xml
  • Config/CfgProfiles/CommanderStyle-Dark-MultiCommander.xml
    .xml
  • Config/CfgProfiles/CommanderStyle-Keyboard-CustomKeymappings.xml
    .xml
  • Config/CfgProfiles/CommanderStyle-Keyboard-ExplorerPanel.xml
    .xml
  • Config/CfgProfiles/CommanderStyle-Mouse-ExplorerPanel.xml
    .xml
  • Config/CfgProfiles/CommanderStyle-Overall-ExplorerPanel.xml
    .xml
  • Config/CfgProfiles/WindowsExplorer-Color-ExplorerPanel.xml
    .xml
  • Config/CfgProfiles/WindowsExplorer-Color-MultiCommander.xml
    .xml
  • Config/CfgProfiles/WindowsExplorer-ColorDarkMode-ExplorerPanel.xml
    .xml
  • Config/CfgProfiles/WindowsExplorer-ColorDarkMode-MultiCommander.xml
    .xml
  • Config/CfgProfiles/WindowsExplorer-Keyboard-CustomKeymappings.xml
    .xml
  • Config/CfgProfiles/WindowsExplorer-Keyboard-ExplorerPanel.xml
    .xml
  • Config/CfgProfiles/WindowsExplorer-Mouse-ExplorerPanel.xml
    .xml
  • Config/CfgProfiles/WindowsExplorer-Overall-ExplorerPanel.xml
    .xml
  • Config/ColorRules.xml
    .xml
  • Config/ConfigProfiles.xml
    .xml
  • Config/DataPreviewTemplates_tpl.xml
    .xml
  • Config/ExplorerPanel.xml
    .xml
  • Config/ExplorerPanel_def.xml
    .xml
  • Config/FSLocal_def.xml
    .xml
  • Config/FSZip_def.xml
    .xml
  • Config/FileOpPluginProfiles.xml
    .xml
  • Config/Modules.xml
    .xml
  • Config/MultiButtons.xml
    .xml
  • Config/MultiCommander.xml
    .xml
  • Config/MultiCommander_def.xml
  • Config/MultiCrashReport.ini
  • Config/Presets/ExplorerPanel/Colors - Black.xml
    .xml
  • Config/Presets/ExplorerPanel/Colors - Explorer.xml
    .xml
  • Config/Presets/ExplorerPanel/Colors - White.xml
    .xml
  • Config/Presets/ExplorerPanel/Colors and Style - Default.xml
    .xml
  • Config/Presets/ExplorerPanel/Colors and Style - Explorer.xml
    .xml
  • Config/Presets/ExplorerPanel/Style - Commander Clone.xml
    .xml
  • Config/Presets/ExplorerPanel/Style - Explorer.xml
    .xml
  • Config/Scripts/Examples/Examples.zip
    .zip

    Password: infected

  • CalculateSHA1HashForAllSelected.udc
  • CloseAllTabsInLeftPanel.udc
  • CopyNameToClipbord_ReplaceSpaces.udc
  • Copy_NoDlg_NewQueue.udc
  • Create365Folders.udc
  • CreateAndUseFilterToSelectFiles.udc
  • CreateDateFolder.udc
  • CreateFolderWithTodaysDate.udc
  • DeleteFiles.udc
  • Delete_CC_NoDlg.udc
  • DownloadFile.udc
  • Download_Sysinternals.udc
  • EnterSameFolderInBothPanel.udc
  • EnviromentVariables.udc
  • FTP_PutFile_GetFile.udc
  • FindAndReplaceInFile.udc
  • FormatDate_Examples.udc
  • GetExtendedFileProp_MP3Genre.udc
  • GetItemsFromPanel.udc
  • GetSelectedFilesAndProcessThem.udc
  • GetWindowsShortcutPath.udc
  • LoadSelectionFromFile.udc
  • MapNetworkDrive.udc
  • Move_NoDlg_NewQueue.udc
  • MultiRename_Files_Without_UI.udc
  • MultiRename_Open_Autoload_Profile.udc
  • MultiTagsExample.udc
  • Parse_DateTime.udc
  • Rename.udc
  • ResizeImages.udc
  • RunNotePadAndWaitUntilClosed.udc
  • RunNotepadWithParamters.udc
  • SaveTextToFile.udc
  • SelectAllMP3LongerThen5Min.udc
  • SelectAllTextFiles.udc
  • SetViewFilterToTxtFiles.udc
  • ShowSelectedFilesInNotepad.udc
  • SizeFolders.udc
  • SortLinesInFile.udc
  • StartVideoInFolder.udc
  • StringExamples.udc
  • ToggleFilter.udc
  • Unpack_ZipFile2.udc
  • Unpack_ZipFile_Multiscript.udc
  • VerifyChecksumAllSelected.udc
  • __README_DO_NOT_MODIFY__.txt
  • Config/SupportedLanguages.xml
  • Config/TOTD/back.png
    .png
  • Config/TOTD/backup.png
    .png
  • Config/TOTD/btneditor.png
    .png
  • Config/TOTD/btnpanel.png
    .png
  • Config/TOTD/change_case.png
    .png
  • Config/TOTD/checksum.png
    .png
  • Config/TOTD/compareviews.png
    .png
  • Config/TOTD/convertcrlf.png
    .png
  • Config/TOTD/copymovefilter.png
    .png
  • Config/TOTD/copypath.png
    .png
  • Config/TOTD/copyplugins.png
    .png
  • Config/TOTD/custkeys.png
    .png
  • Config/TOTD/deletefilter.png
    .png
  • Config/TOTD/devsel.png
    .png
  • Config/TOTD/disconnect.png
    .png
  • Config/TOTD/expandsel.png
    .png
  • Config/TOTD/explorersetup.png
    .png
  • Config/TOTD/findopenfiles.png
    .png
  • Config/TOTD/foldersize.png
    .png
  • Config/TOTD/fsreg.png
    .png
  • Config/TOTD/fullwidth.png
    .png
  • Config/TOTD/gotoroot.png
    .png
  • Config/TOTD/history.png
    .png
  • Config/TOTD/loadsavesel.png
    .png
  • Config/TOTD/mkdir.png
    .png
  • Config/TOTD/pathrow.png
    .png
  • Config/TOTD/prop.png
    .png
  • Config/TOTD/quicksetup.png
    .png
  • Config/TOTD/refresh.png
    .png
  • Config/TOTD/saveclip.png
    .png
  • Config/TOTD/syncview.png
    .png
  • Config/TOTD/tab.png
    .png
  • Config/TOTD/totd.xml
    .xml
  • Config/TOTD/viewfilter.png
    .png
  • Extensions/FS7Zip/7za.dll
    .dll windows:6 windows x86 arch:x86

    8e5f29c3f5c5eaecf050ce32cddeb52c


    Headers

    Imports

    Exports

    Sections

  • Extensions/FS7Zip/FS7Zip.dll
    .dll windows:6 windows x86 arch:x86

    8135dc1c1bc18470779d99b9e2265c1a


    Headers

    Imports

    Exports

    Sections

  • Extensions/FSFTP/FSFTP.dll
    .dll windows:6 windows x86 arch:x86

    cb2329f3a9ecfa8c534cf80b9a8926ec


    Headers

    Imports

    Exports

    Sections

  • Extensions/FSFTP/FSFTP.xml
    .xml
  • Extensions/FSPortable/FSPortable.dll
    .dll windows:6 windows x86 arch:x86

    897f33a187889f5cd6ee339c541b72b4


    Headers

    Imports

    Exports

    Sections

  • Extensions/FSPortable/FSPortable.xml
    .xml
  • Extensions/FSPortable/FSPortable_def.xml
    .xml
  • Extensions/FSRAR/FSRAR.dll
    .dll windows:6 windows x86 arch:x86

    3f6cfacc30a07f19d4b8e70d62b96543


    Headers

    Imports

    Exports

    Sections

  • Extensions/FSRegistry/FSRegistry.dll
    .dll windows:6 windows x86 arch:x86

    3dad586e1a1f1fefcf5731558d2c1cfb


    Headers

    Imports

    Exports

    Sections

  • Extensions/MCAudioTools/MCAudioTools.dll
    .dll windows:6 windows x86 arch:x86

    770d0bc6f5821fb3ac203330ebcfe10a


    Headers

    Imports

    Exports

    Sections

  • Extensions/MCLanEditor/MCLanEditor.dll
    .dll windows:6 windows x86 arch:x86

    775693150cb426ec7646fbd9dcf9a17a


    Headers

    Imports

    Exports

    Sections

  • Extensions/MCPictureTools/ExifWin.dll
    .dll windows:5 windows x86 arch:x86

    2637bacb059f77cb26ce5683b3977d42


    Headers

    Imports

    Exports

    Sections

  • Extensions/MCPictureTools/MCPictureTools.dll
    .dll windows:6 windows x86 arch:x86

    1a46f470de83c5bef75e869d41cc9440


    Headers

    Imports

    Exports

    Sections

  • Extensions/MCSpecial/MCSpecial.dll
    .dll windows:6 windows x86 arch:x86

    3a2eac40377d65a30d1383774a5554fd


    Headers

    Imports

    Exports

    Sections

  • Extensions/MCUtils/MCUtils.dll
    .dll windows:6 windows x86 arch:x86

    9a0077be1f75d798ce89c0816686082b


    Headers

    Imports

    Exports

    Sections

  • Extensions/MCVideoTools/MCVideoTools.dll
    .dll windows:6 windows x86 arch:x86

    050d7935212cb9872855fc51fa016111


    Headers

    Imports

    Exports

    Sections

  • Extensions/MFTools/MFTools.dll
    .dll windows:6 windows x86 arch:x86

    9be73eb8ba138cf8827840abc32fd2f2


    Headers

    Imports

    Exports

    Sections

  • Extensions/MultiFileViewer/ColorFormatting.xml
    .xml
  • Extensions/MultiFileViewer/MultiFileViewer.dll
    .dll windows:6 windows x86 arch:x86

    f6f95f83467ec0eeb06620254d5c9286


    Headers

    Imports

    Exports

    Sections

  • Extensions/MultiFileViewer/MultiFileViewer.xml
    .xml
  • Languages/MC_LangPack_bg.zip
    .zip
  • Languages/MC_LangPack_cn.zip
    .zip
  • Languages/MC_LangPack_cz.zip
    .zip
  • Languages/MC_LangPack_de.zip
    .zip
  • Languages/MC_LangPack_en.zip
    .zip
  • Languages/MC_LangPack_es.zip
    .zip
  • Languages/MC_LangPack_fr.zip
    .zip
  • Languages/MC_LangPack_hu.zip
    .zip
  • Languages/MC_LangPack_it.zip
    .zip
  • Languages/MC_LangPack_jp.zip
    .zip
  • Languages/MC_LangPack_ko.zip
    .zip
  • Languages/MC_LangPack_lt.zip
    .zip
  • Languages/MC_LangPack_nl.zip
    .zip
  • Languages/MC_LangPack_no.zip
    .zip
  • Languages/MC_LangPack_pl.zip
    .zip
  • Languages/MC_LangPack_pt-BR.zip
    .zip
  • Languages/MC_LangPack_pt.zip
    .zip
  • Languages/MC_LangPack_ro.zip
    .zip
  • Languages/MC_LangPack_ru.zip
    .zip
  • Languages/MC_LangPack_se.zip
    .zip
  • Languages/MC_LangPack_sl-SI.zip
    .zip
  • Languages/MC_LangPack_tr.zip
    .zip
  • Languages/MC_LangPack_tw.zip
    .zip
  • Languages/MC_LangPack_uk.zip
    .zip
  • MCAdmin.exe
    .exe windows:6 windows x86 arch:x86

    5046094905a44e4e54ca4f73f13d9e1d


    Headers

    Imports

    Sections

  • MCIcons.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • MultiCommander.exe
    .exe windows:6 windows x86 arch:x86

    e908982b499664059d5fd7062e3f657e


    Headers

    Imports

    Sections

  • MultiCrashReport.exe
    .exe windows:6 windows x86 arch:x86

    f25ab2b89cf57e9099f9e15a113c344d


    Headers

    Imports

    Sections

  • MultiUpdate.exe
    .exe windows:6 windows x86 arch:x86

    ad841b85b02f1cd4d4ef194cfa14360a


    Headers

    Imports

    Sections

  • Uninstall MultiCommander.exe
    .exe windows:4 windows x86 arch:x86

    b76363e9cb88bf9390860da8e50999d2


    Headers

    Imports

    Sections