General

  • Target

    UbisoftConnectInstaller.exe

  • Size

    217.0MB

  • MD5

    aad1aba5a12b9a4db05fd83f4c55ce04

  • SHA1

    541aad7f21c36b236cd7ed4686b18ef9998cc63a

  • SHA256

    db8d8c8bd4c8fe9b03c5ea364d5fff74caf4ff1e820998e27d70f899b869e3cb

  • SHA512

    f4ea88a5e1c02c43465382a8dd13bddf48ad40cffe599d77912213b81bd384e212042ad69abe074308f5fc9269ff2583c33500594ca4ba6a30a6363de766bf3c

  • SSDEEP

    3145728:nzZ3u8v4b78uROXJ7L6WZErguwoWZiKSso+DdniQdSwx6uJWEFyJdS14kdjMcfI7:nz84V71L6WwsoWgKSMcnEF17jPQmJInJ

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

Files

  • UbisoftConnectInstaller.exe
    .exe windows:4 windows x86 arch:x86

    Password: infected

    7eae418c7423834ffc3d79b4300bd6fb


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/AccessControl.dll
    .dll windows:5 windows x86 arch:x86

    Password: infected


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    Password: infected

    3e8d18bb71c7ebbda2ddc2a4bb03547b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    Password: infected

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsArray.dll
    .dll windows:6 windows x86 arch:x86

    Password: infected

    af03e0dafc67ec37f6adde926d93d334


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    Password: infected

    6b5c4f7d679059f68f1269aad3a5cecd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/registry.dll
    .dll windows:4 windows x86 arch:x86

    Password: infected

    421a02aae559045e04759aae146087eb


    Headers

    Imports

    Exports

    Sections

  • GfnRuntimeSdkx86.dll
    .dll windows:6 windows x86 arch:x86

    Password: infected

    b1dc1ca271e23adf2eded5349a939bb1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Microsoft.Gaming.XboxApp.Extensions.winmd
    .dll windows:6 windows x86 arch:x86

    Password: infected


    Headers

    Sections

  • UbisoftConnect.exe
    .exe windows:5 windows x86 arch:x86

    247cb33ca499df05bb6d72db78e9d5d6


    Code Sign

    Headers

    Imports

    Sections

  • UbisoftExtension.exe
    .exe windows:6 windows x86 arch:x86

    06037531f4893098588e149f6be3fa3d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • UbisoftGameLauncher.exe
    .exe windows:6 windows x86 arch:x86

    0b275213fbfb25aff58ef4cc7625599a


    Code Sign

    Headers

    Imports

    Sections

  • UbisoftGameLauncher64.exe
    .exe windows:6 windows x64 arch:x64

    ef1c11fd19f571ed0ed7605f6165035a


    Code Sign

    Headers

    Imports

    Sections

  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    7eae418c7423834ffc3d79b4300bd6fb


    Code Sign

    Headers

    Imports

    Sections

  • UplayCrashReporter.exe
    .exe windows:6 windows x86 arch:x86

    bae0daaa0718f1a2874fb1a32d411bd7


    Code Sign

    Headers

    Imports

    Sections

  • UplayService.exe
    .exe windows:6 windows x86 arch:x86

    b90d72157b49a75373938be3ef7964d5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • UplayWebCore.exe
    .exe windows:6 windows x86 arch:x86

    c757f18db0e4b82273f3df3c7761eda1


    Code Sign

    Headers

    Imports

    Sections

  • chrome_100_percent.pak
  • chrome_200_percent.pak
  • chrome_elf.dll
    .dll windows:5 windows x86 arch:x86

    c389dbbc9ded08969dff0125470998db


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • data/loc/cs-CZ_loc.txt
  • data/loc/da-DK_loc.txt
  • data/loc/de-DE_loc.txt
  • data/loc/en-CA_loc.txt
  • data/loc/en-US_loc.txt
  • data/loc/en-US_release_notes.txt
  • data/loc/es-ES_loc.txt
  • data/loc/es-MX_loc.txt
  • data/loc/fi-FI_loc.txt
  • data/loc/fr-FR_loc.txt
  • data/loc/hu-HU_loc.txt
  • data/loc/it-IT_loc.txt
  • data/loc/ja-JP_loc.txt
  • data/loc/ko-KO_loc.txt
  • data/loc/nb-NO_loc.txt
  • data/loc/nl-NL_loc.txt
  • data/loc/pl-PL_loc.txt
  • data/loc/pt-BR_loc.txt
  • data/loc/pt-PT_loc.txt
  • data/loc/ru-RU_loc.txt
  • data/loc/sv-SE_loc.txt
  • data/loc/th-TH_loc.txt
  • data/loc/tr-TR_loc.txt
  • data/loc/uk-UA_loc.txt
  • data/loc/zh-CN_loc.txt
  • data/loc/zh-TW_loc.txt
  • data/resources/LICENSES.txt
  • data/resources/default_avatar.png
    .png
  • data/resources/default_avatar_100.png
    .png
  • data/resources/default_avatar_128.png
    .png
  • data/resources/default_avatar_256.jpg
    .jpg
  • data/resources/default_avatar_256.png
    .png
  • data/resources/default_avatar_64.png
    .png
  • data/resources/free_game_configs_schema.yml
  • data/resources/grey_border.png
    .png
  • data/resources/group_avatar_128.png
    .png
  • data/resources/group_avatar_256.png
    .png
  • data/resources/group_avatar_64.png
    .png
  • data/resources/incoming_invite_from_user.wav
  • data/resources/noise.png
    .png
  • data/resources/other_user_joined.wav
  • data/resources/other_user_leaves.wav
  • data/resources/overlay_cursor.png
    .png
  • data/resources/preorder_config_schema_3_0.yml
  • data/resources/product_add_on_config_schema_3_0.yml
  • data/resources/product_config_schema_1_0.yml
  • data/resources/product_config_schema_1_5.yml
  • data/resources/product_config_schema_1_7.yml
  • data/resources/product_config_schema_2_0.yml
  • data/resources/product_config_schema_2_0_offline.yml
  • data/resources/product_game_pre_order_config_schema_3_0.yml
  • data/resources/product_template_config_schema_4.4.yml
  • data/resources/promo_config_schema.yml
  • data/resources/rich_presence_schema.yml
  • data/resources/sprite_frame.png
    .png
  • data/resources/sprite_frame_x.png
    .png
  • data/resources/sprite_nav_btn_small.png
    .png
  • data/resources/sprite_nav_tabs.png
    .png
  • data/resources/sprite_shop_buttons.png
    .png
  • data/resources/sprite_uplay_dropdown.png
    .png
  • data/resources/sprite_window_controls.png
    .png
  • data/resources/uat.png
    .png
  • data/resources/uplay_enabled_game_configuration_schema_3_0.yml
  • data/resources/uplayplus_config_schema.yml
  • discord-rpc.x64.dll
    .dll windows:6 windows x64 arch:x64

    ebfefe85814359f23a9f1e7f8c643ec7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • discord-rpc.x86.dll
    .dll windows:6 windows x86 arch:x86

    5dbe064ee5b8fa70c9c3d4f604e4df61


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • gear_core_win32DLL.dll
    .dll windows:6 windows x86 arch:x86

    5121ebd1c67fb3214a4f835c367f13d4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • gear_detection_win32DLL.dll
    .dll windows:6 windows x86 arch:x86

    bbafe8b296b950e80409914fef9ebdf7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • gpudatabase_win32.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • icudtl.dat
  • libEGL.dll
    .dll windows:5 windows x86 arch:x86

    8f9a97bb419cdb8d7e18dd56a95cf8b0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libGLESv2.dll
    .dll windows:5 windows x86 arch:x86

    dc7598cbc16afe603ff003b7b38068f7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libUbiCustomEvent.dll
    .dll windows:5 windows x86 arch:x86

    5ab462c0a08c2bd662e00992c746d14e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libcef.dll
    .dll windows:5 windows x86 arch:x86

    cc61c42ec6ae20066f5cdf24a6f06b3d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • license/Licence_cs-CZ.txt
  • license/Licence_da-DK.txt
  • license/Licence_de-DE.txt
  • license/Licence_en-CA.txt
  • license/Licence_en-US.txt
  • license/Licence_es-ES.txt
  • license/Licence_es-MX.txt
  • license/Licence_fi-FI.txt
  • license/Licence_fr-FR.txt
  • license/Licence_hu-HU.txt
  • license/Licence_it-IT.txt
  • license/Licence_ja-JP.txt
  • license/Licence_ko-KO.txt
  • license/Licence_nb-NO.txt
  • license/Licence_nl-NL.txt
  • license/Licence_pl-PL.txt
  • license/Licence_pt-BR.txt
  • license/Licence_pt-PT.txt
  • license/Licence_ru-RU.txt
  • license/Licence_sv-SE.txt
  • license/Licence_th-TH.txt
  • license/Licence_tr-TR.txt
  • license/Licence_zh-CN.txt
  • license/Licence_zh-TW.txt
  • locales/1/af.pak
  • locales/1/am.pak
  • locales/1/ar.pak
  • locales/1/bg.pak
  • locales/1/bn.pak
  • locales/1/ca.pak
  • locales/1/cs.pak
  • locales/1/da.pak
  • locales/1/de.pak
  • locales/1/el.pak
  • locales/1/en-GB.pak
  • locales/1/en-US.pak
  • locales/1/es-419.pak
  • locales/1/es.pak
  • locales/1/et.pak
  • locales/1/fa.pak
  • locales/1/fi.pak
  • locales/1/fil.pak
  • locales/1/fr.pak
  • locales/1/gu.pak
  • locales/1/he.pak
  • locales/1/hi.pak
  • locales/1/hr.pak
  • locales/1/hu.pak
  • locales/1/id.pak
  • locales/1/it.pak
  • locales/1/ja.pak
  • locales/1/kn.pak
  • locales/1/ko.pak
  • locales/1/lt.pak
  • locales/1/lv.pak
  • locales/1/ml.pak
  • locales/1/mr.pak
  • locales/1/ms.pak
  • locales/1/nb.pak
  • locales/1/nl.pak
  • locales/1/pl.pak
  • locales/1/pt-BR.pak
  • locales/1/pt-PT.pak
  • locales/1/ro.pak
  • locales/1/ru.pak
  • locales/1/sk.pak
  • locales/1/sl.pak
  • locales/1/sr.pak
  • locales/1/sv.pak
  • locales/1/sw.pak
  • locales/1/ta.pak
  • locales/1/te.pak
  • locales/1/th.pak
  • locales/1/tr.pak
  • locales/1/uk.pak
  • locales/1/ur.pak
  • locales/1/vi.pak
  • locales/1/zh-CN.pak
  • locales/1/zh-TW.pak
  • npuplaypc.dll
    .dll windows:5 windows x86 arch:x86

    5f6f9e525bf5a31a7b44f71e560251ef


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • npuplaypchub.dll
    .dll windows:5 windows x86 arch:x86

    5f6f9e525bf5a31a7b44f71e560251ef


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • overlay.dll
    .dll windows:6 windows x86 arch:x86

    da207f8621b0523202e071e99e7c1d9d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • overlay64.dll
    .dll windows:6 windows x64 arch:x64

    a6cadd27c312e315923918d928d68a45


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resources.pak
  • shareplay/SharePlayClient.exe
    .exe windows:6 windows x64 arch:x64

    7c8ab9ec8948781e5068a8777c64221e


    Code Sign

    Headers

    Imports

    Sections

  • shareplay/aegir.dll
    .dll windows:6 windows x64 arch:x64

    ab3dfbc56b8453d982f2ed80b3f65342


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • shareplay/memorywrapper.dll
    .dll windows:6 windows x64 arch:x64

    894b54c3c53980ad207e2ed90caa6d31


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • shareplay/resources/notoemoji-regular.ttf
  • shareplay/resources/notosans-regular.ttf
  • shareplay/resources/notosansarabic-regular.ttf
  • shareplay/resources/notosansbengali-regular.ttf
  • shareplay/resources/notosansdevanagari-regular.ttf
  • shareplay/resources/notosansegyptianhieroglyphs-regular.ttf
  • shareplay/resources/notosansjp-regular.otf
  • shareplay/resources/notosanskr-regular.otf
  • shareplay/resources/notosanssc-regular.otf
  • shareplay/resources/notoserifhebrew-regular.ttf
  • shareplay/resources/notoserifthai-regular.ttf
  • shareplay/upc_r2_loader64.dll
    .dll windows:6 windows x64 arch:x64

    9197638402696b7e65efa57073e9ee86


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • snapshot_blob.bin
  • steam_api.dll
    .dll windows:5 windows x86 arch:x86

    5244871a7e6bf3a82e903bbb5da1d05f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • steam_api64.dll
    .dll windows:5 windows x64 arch:x64

    289b2254a2c1e14995dd9995d1686fdb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ubiorbitapi_r2.dll
    .dll windows:6 windows x86 arch:x86

    63b0e3c8c10ce8924f5b107bf83d5133


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ubiorbitapi_r264.dll
    .dll windows:6 windows x64 arch:x64

    8360ea10e372e9aef5cc19298f8985ff


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ui.pak
    .gz
  • uicommon.pak
    .gz
  • uicr.pak
    .gz
  • upc.exe
    .exe windows:6 windows x86 arch:x86

    4e44c4a6a932874d232f1b50483cffbc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • uplay_aux_r1.dll
    .dll windows:6 windows x86 arch:x86

    c350d6f01ee91410b4a10945dd7c6846


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • uplay_aux_r164.dll
    .dll windows:6 windows x64 arch:x64

    f3e40cf52a2583a82f4186f828564a7c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • uplay_r1.dll
    .dll windows:6 windows x86 arch:x86

    b4389958bff84808bb4068caca85cb0c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • uplay_r164.dll
    .dll windows:6 windows x64 arch:x64

    9695265da3809bc72ab55793b4c2a0c9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • uplay_r2.dll
    .dll windows:6 windows x86 arch:x86

    047bbd3354f2a576f234cd4b29f6fc26


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • uplay_r264.dll
    .dll windows:6 windows x64 arch:x64

    00f7c0eb39726883a2106cf9e821fa75


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • v8_context_snapshot.bin
  • version.txt
  • vk_swiftshader.dll
    .dll windows:5 windows x86 arch:x86

    f7e882b7cfe5d586618f23e681bc535b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • vulkan-1.dll
    .dll windows:5 windows x86 arch:x86

    b8337560667a09e045aeafcfa9865190


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • xinput1_3.dll
    .dll windows:5 windows x86 arch:x86

    50f64a1d9783342119da2ac75a894235


    Code Sign

    Headers

    Imports

    Exports

    Sections