setup.zip
- SHA256 3f86aac3627bc0050d3c823a3195f6c192f5fb15e080442c1f910453163078c2
Static task
static1
Behavioral task
behavioral1
Sample
setup.zip
Resource
win10v2004-20240802-en
windows10-2004-x64
36 signatures
300 seconds
General
- Target setup.zip
- Size 16.2MB
- Sample240908-vntajaxejr
- SHA256 3f86aac3627bc0050d3c823a3195f6c192f5fb15e080442c1f910453163078c2
- MD5 1baf851f46a5ea24e21ebd492d6b745c
- SHA1 308f821d54bdc34d51c0ab69353fdb7f013cf19b
- SHA512 14d4b66272b63293b94a481e138efdec8c399628b40f4ff6137b107c7f38f0b00a71c4471e39428c13ab1b40cff76675cf26c7db4adb3d1f443a92947c188bae
- SSDEEP 393216:QF4py1ZBh0aLCQp7eVChU4uWgSBW+n5irsxYwPzvid2:QF4s1ZX3j7HCLU5irsxJza2
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
File Explorer
-
setup.zip.zip 16.2MB
-
setup/PhysX.NVX.xml 21KB
-
setup/PhysX.nvi35KB
-
setup/PhysxExt.dll.dll 2.9MB
-
setup/Read it to me.txt637B
-
setup/V5.0/0000.ui.forms.xml 60KB
-
setup/V5.0/0000.ui.strings.xml 1KB
-
setup/V5.0/040a.ui.forms.xml 5KB
-
setup/V5.0/040a.ui.strings.xml 10KB
-
setup/V5.0/040b.ui.forms.xml 5KB
-
setup/V5.0/040b.ui.strings.xml 9KB
-
setup/V5.0/040c.ui.forms.xml 6KB
-
setup/V5.0/040c.ui.strings.xml 10KB
-
setup/V5.0/040d.ui.forms.xml 4KB
-
setup/V5.0/040d.ui.strings.xml 11KB
-
setup/V5.0/040e.ui.forms.xml 4KB
-
setup/myproject.exe.exe 54.0MB
setup/PhysX.NVX
- SHA256 abc4eb7e89a5f94f67ab40b7a8adb4bf9cb4900ddfdeb54bcdf5eb0e1c478b2d
- MD5 af726aff05a26badd36c25dc476e7a0e
- SHA1 13d7b19ada73fbcf082f5f2f7fbc6fd468585dd4
- SHA512 7f434eb1a5edabcf47cf7b6b7d6afeaf96a3ee85dab92ec9e4c4899c3c3a5d989e6486046b3376fb4ffc524ab324954bbca36c9bcaa7bab4bc3223faaf491e8e
- SSDEEP 384:U76oReNii9P2CLcmgigmJPC2KfuGIf0NNfhHk0fIx7fnCGfSRlFf58Xf7Glx6Cx7:U76oReNii9P2ComgigkC2Kf9IfMNftkW
- MD5 SHA1 SHA512 SSDEEP
setup/PhysX.nvi
- SHA256 f2d55232e244cfbf0c6ad3d062a3466dca57ace0d03bb8f590f94143051a9e10
- MD5 890542cc8613560c5e6431e53ffd5c02
- SHA1 da954ce5ccd4c2ca9440b67cdc047d65b09067be
- SHA512 2b8b0bb4d8d6b0b20ac457e9502f1e6b7a103929cbb7ea67f3017ee710d9562268f7f9b274cdfa52aafbb0bd6e8d355f419555643cdb288812b1a36529de51ba
- SSDEEP 768:xZ2czpU3IcdcC6tW3M3sFzxZhB6CW+WOF9WuBpsuz9hiaXPsYlRocSOUSjRA05Js:P2c9XcdaFsFzxZhB6CW+WOF9WuBpsuzS
- MD5 SHA1 SHA512 SSDEEP
setup/PhysxExt.dll
- IMPHASH 187d4e68194929760df6747382dba110
- SHA256 224ba9fe747ed7266a392961586db8a716553b85760fe3083e6d345034868d8f
- MD5 6ff985653d41e8d60bb1293f01729adf
- SHA1 1ae3086a16a91ea45c06d34071d8b3b87e058804
- SHA512 fd47a81000dcd98adc03d1f45a172c19b2e8aa3c8f13338bda0b00407f7b81b52e0fa9be3f9ef87fb1303231225e83b9dd8c39a0777ee56ccd54abc52d095b87
- SSDEEP 24576:fZJJSVBjkvvhwVxKKpQgRQ8sUOwDUsHeHfcKtaPRO/o5o4Z/5rLyv+Fe:xJegvvhTKTRcPDqho4F5rLyW4
- MD5 SHA1 SHA512 SSDEEP
Digest
c8:81:08:1e:0f:0d:3f:f7:7c:c2:8f:db:6c:07:25:10:9e:40:89:21:43:df:88:fb:6f:e2:45:c6:4c:c8:03:f9
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Nvidia Corporation,OU=IT-MIS,O=Nvidia Corporation,L=Santa Clara,ST=California,C=US
Chains
Jul 28, 2021
CN=Nvidia Corporation,OU=IT-MIS,O=Nvidia Corporation,L=Santa Clara,ST=California,C=US
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=Nvidia Corporation,OU=IT-MIS,O=Nvidia Corporation,L=Santa Clara,ST=California,C=US
Serial Number
02:66:ad:fa:17:63:89:d9:b4:30:1a:c8:7e:fd:6a:96
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 14, 2021 - Apr 16, 2024
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
0
Major OS version
5
Entry point
1328272
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\u\workspace\PhysXSoftware\sw\rel\gpu_drv\r375\r375_00\installer2.0\Build\Extensions\Out\PhysX\Win32\Debug\PhysxExt.pdb
sfc
SfcIsFileProtected
wintrust
WinVerifyTrust
msi
ord141
ord190
kernel32
WriteFile
WideCharToMultiByte
GetFileSizeEx
GetCurrentProcessId
GetTempPathW
lstrlenW
MultiByteToWideChar
SetEvent
CreateEventA
GetCurrentThreadId
FindResourceW
SizeofResource
LockResource
LoadResource
FindResourceExW
EnterCriticalSection
LeaveCriticalSection
SetEndOfFile
SetFilePointerEx
GetLocalTime
LocalFree
FormatMessageW
MoveFileExW
DeleteFileW
GetDriveTypeW
GlobalAlloc
GetFileAttributesW
GetFileAttributesExW
MapViewOfFile
CreateFileMappingW
CreateDirectoryW
FindNextFileW
FindFirstFileW
RemoveDirectoryW
CopyFileW
SetFileAttributesW
GetCurrentThread
DeviceIoControl
CopyFileExW
ReleaseMutex
GetCurrentDirectoryW
SetCurrentDirectoryW
GetSystemWindowsDirectoryW
GetWindowsDirectoryW
GetTempFileNameW
GetSystemDirectoryW
lstrcmpW
GetFileTime
SetFileTime
QueryDosDeviceW
UnmapViewOfFile
FindClose
GlobalFree
LoadLibraryW
FreeLibrary
GetModuleHandleExW
GetProcAddress
CreateActCtxW
ReleaseActCtx
ActivateActCtx
DeactivateActCtx
FileTimeToSystemTime
LocalAlloc
SystemTimeToFileTime
GetSystemTime
GetSystemInfo
GetModuleHandleW
LoadLibraryExW
CreateProcessW
CreateProcessA
GetFullPathNameW
VerifyVersionInfoW
VerSetConditionMask
lstrcmpA
IsDebuggerPresent
GetModuleHandleA
GetVersionExW
ResumeThread
WaitForSingleObject
CreateFileW
CreateMutexW
CloseHandle
ExpandEnvironmentStringsW
OutputDebugStringW
GetModuleFileNameW
GetCurrentProcess
GetProcessTimes
GetSystemTimeAsFileTime
QueryPerformanceFrequency
QueryPerformanceCounter
GetLastError
SetLastError
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSection
RaiseException
DeleteCriticalSection
ResetEvent
WaitForMultipleObjects
SetWaitableTimer
CreateWaitableTimerA
CreateMutexA
CreateThread
GetTickCount
SetEnvironmentVariableA
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoW
InitializeCriticalSectionAndSpinCount
VirtualQuery
SetFilePointer
ExitThread
ReadFile
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
VirtualFree
HeapCreate
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
SetHandleCount
GetTimeZoneInformation
IsValidCodePage
GetOEMCP
GetACP
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
SetConsoleCtrlHandler
ExitProcess
FatalAppExitA
DebugBreak
GetModuleFileNameA
CompareStringA
CompareStringW
GetStringTypeW
LCMapStringW
InterlockedCompareExchange
InterlockedExchange
Sleep
GetLocaleInfoA
GetFileAttributesExA
CreateFileA
RemoveDirectoryA
DeleteFileA
MoveFileW
GetShortPathNameW
MoveFileA
CopyFileA
FindFirstFileA
FindNextFileA
GetFileAttributesA
GetFileInformationByHandle
GetDiskFreeSpaceExW
CreateHardLinkW
GetDiskFreeSpaceExA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetFullPathNameA
CreateDirectoryA
CreateHardLinkA
FormatMessageA
OpenEventA
OutputDebugStringA
lstrlenA
GetProcessHeap
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
HeapDestroy
VirtualAlloc
CreateFileMappingA
OpenFileMappingA
RtlUnwind
WriteConsoleW
GetFileType
GetStdHandle
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetTimeFormatA
GetDateFormatA
GetCommandLineA
LoadLibraryA
GetCPInfo
HeapValidate
IsBadReadPtr
LCMapStringA
user32
GetUserObjectInformationW
MsgWaitForMultipleObjects
PeekMessageA
GetProcessWindowStation
GetMessageW
GetMessageA
TranslateMessage
DispatchMessageW
DispatchMessageA
UnregisterClassA
UnregisterClassW
IsWindowUnicode
advapi32
RevertToSelf
LsaNtStatusToWinError
RegGetKeySecurity
InitializeSecurityDescriptor
RegDeleteValueW
RegSetValueExW
RegEnumKeyExW
RegQueryInfoKeyW
RegOpenCurrentUser
RegDeleteKeyW
LookupPrivilegeValueW
AdjustTokenPrivileges
GetNamedSecurityInfoW
IsTextUnicode
OpenThreadToken
OpenProcessToken
DuplicateToken
GetFileSecurityW
MapGenericMask
AccessCheck
RegEnumValueW
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
SetThreadToken
shell32
SHGetFolderPathW
ole32
CoReleaseMarshalData
CoRevokeClassObject
CreateStreamOnHGlobal
CoMarshalInterface
CoCreateInstance
CoUnmarshalInterface
CoRegisterClassObject
oleaut32
SafeArrayGetUBound
SysFreeString
SafeArrayDestroy
VariantInit
VariantClear
LoadRegTypeLi
LoadTypeLi
SysAllocStringLen
VariantChangeType
SafeArrayGetLBound
SysStringLen
SafeArrayGetDim
SafeArrayCopy
SafeArrayCreate
SafeArrayUnlock
SafeArrayLock
SafeArrayGetVartype
VariantCopy
SysAllocString
shlwapi
UrlCreateFromPathW
UrlIsW
PathFindFileNameW
PathCreateFromUrlW
rpcrt4
UuidToStringW
RpcStringFreeW
UuidFromStringW
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
setupapi
SetupDiCreateDeviceInfoList
SetupDiOpenDeviceInfoW
SetupDiOpenDevRegKey
SetupDiGetINFClassW
SetupDiGetDriverInfoDetailW
SetupDiOpenClassRegKey
SetupOpenAppendInfFileW
SetupFindNextMatchLineW
SetupGetLineTextW
SetupDiGetClassDevsW
SetupDiDestroyDeviceInfoList
SetupGetFieldCount
SetupDiSetDriverInstallParamsW
SetupDiGetDriverInstallParamsW
CM_Get_Device_IDW
CM_Get_DevNode_Status
SetupGetStringFieldW
SetupDiGetActualSectionToInstallExW
SetupOpenInfFileW
SetupFindFirstLineW
SetupFindNextLine
SetupUninstallOEMInfW
SetupCopyOEMInfW
SetupDiGetSelectedDriverW
SetupDiInstallDevice
SetupDiSetClassInstallParamsW
SetupDiCallClassInstaller
SetupCloseInfFile
SetupGetIntField
SetupDiGetClassInstallParamsW
SetupDiEnumDriverInfoW
SetupDiCreateDeviceInfoW
SetupDiDeleteDeviceInfo
SetupDiEnumDeviceInfo
SetupDiSetDeviceInstallParamsW
SetupDiSetSelectedDriverW
SetupDiSetSelectedDevice
SetupDiGetDeviceInstanceIdW
SetupDiGetDeviceRegistryPropertyW
SetupDiGetClassRegistryPropertyW
SetupDiSetClassRegistryPropertyW
SetupDiBuildClassInfoList
SetupDiSetDeviceRegistryPropertyW
CM_Get_Device_ID_ListW
CM_Get_Device_ID_List_SizeW
SetupDiBuildDriverInfoList
SetupDiGetDeviceInstallParamsW
userenv
UnloadUserProfile
DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
Name
.text
Size
2.1MB
Virtual Size
2.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
648KB
Virtual Size
648KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
32KB
Virtual Size
43KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
1024B
Virtual Size
514B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
23KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
95KB
Virtual Size
95KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=25, id=149, productName=VS2008 build 21022, version=21022,
count=104, id=132, productName=VS2008 build 21022, version=21022,
count=184, id=131, productName=VS2008 build 21022, version=21022,
count=1, id=109, productName=VS2005 build 50727, version=50727,
count=24, id=123, productName=VS2005 build 50727, version=50727,
count=1, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=325, id=1, productName=Unmarked objects,
count=5, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=26, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=146, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=151,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
setup/Read it to me.txt
- SHA256 ab1efb123feeac5171f3613e694d81277d43a74554e943c1619a1e32cd8de16f
- MD5 63039ea52b96b6c0354eca7196c1c93f
- SHA1 76b013def08a47c2b9cdddd9c991b4c9cc7fcb73
- SHA512 04b7c81882802c0573640c3462256ffc62603fd49f84ca4cff01ed8bf05d5e90f19a3b5bd09b2c2d896f6eaa01d46e8a9dd5a5ba58d5c1f4e446b2afc49cf9f5
- MD5 SHA1 SHA512
setup/V5.0/0000.ui.forms
- SHA256 44783c068e6d2b30190006225d2bc586a98096d56f41f78e348bbae828cdbcc8
- MD5 a68a506afcfd78b3186b586c0bb17211
- SHA1 69107a6f6aaf8613b84b2ae55d932d48d7d29e1b
- SHA512 7e8eb1643f670772a7ce1a42910847bc8133f463adee428987934110cf2225954b4c8586890e0ebc6d894c406bc5b61fe430c63b67ded4765017186119aed75c
- SSDEEP 384:jvaw5hUay8ncuNkctpoEcQNmcvZnMmGX0aP5fbU8oUjoJUmoJ5UCoJ5+UgoJ5+tt:EsY
- MD5 SHA1 SHA512 SSDEEP
setup/V5.0/0000.ui.strings
- SHA256 e792f8a6666c05d723d9c19325aa3429e35df36a72cc4c229dc2cef0876de79d
- MD5 88b402cd5cf6c9145b6c9aba0de7fc20
- SHA1 71fa5024b381cf06c60874e41b7d42c263441f3d
- SHA512 579e7227c721d19ec5e52ee37bd7fad0cacd96e8f898bb6cf26063c4fedadf8c78781b11285e8e1d25263277b3b069b5df182158123655b74de4216d69e97ee8
- MD5 SHA1 SHA512
setup/V5.0/040a.ui.forms
- SHA256 cd9bbb99b5297e0eb206c46c3a49906cdc20dcbdb03f3ef4759a73016ae52d1e
- MD5 e3b162ccf4980ed314d76914eab0b152
- SHA1 adc8342dc84135f1807a22f5b4e6de61dc1872ee
- SHA512 d3601a24ae10f2050e39ee10a1457547e3bf8dd5cbf9360f6b5dbbe624c0d6d94f2e2ad2656e550405386ef039ceb54d5038b635dbf7aefa4b990db1f4a33b95
- SSDEEP 96:SULx2rCiVffJIJxhMzguLWv1Nf5V5q0vgZfNsZ77rhm4zXjZHPxfbfPHDl:SULx2rCiVffJBzguLWv1l5V5q0vgZfNm
- MD5 SHA1 SHA512 SSDEEP
setup/V5.0/040a.ui.strings
- SHA256 f1c701b8c4ab9ddbcc8d46084c4a20d4aa64bf3f2cf42afdd1010efe8d147f66
- MD5 b7d997d903869b30f78543142c8b890d
- SHA1 807840d713964e8029e3aa9b07b3626ce785b004
- SHA512 0440dd5ef3c4a5ee07b7e08ed9a9eb12ce55c7bbdd89c471cffea216970f2716a222934ea34daeda821e48a46652003a824d66d434f1071c122d296294ca59ef
- SSDEEP 96:qumjfCmD7DLbW5EuivbhMrJHIXEafqnbgKuWILGYZXZ7IcO2OOD:FmzCgbW5svbSFoXEtbQVZJ7IcOtOD
- MD5 SHA1 SHA512 SSDEEP
setup/V5.0/040b.ui.forms
- SHA256 71c4ea69fd7e0fc130b8dad26bc46aa63ad465a3faae99ad2a280d50f668505d
- MD5 400acc3967c50f2d904ce98095bce251
- SHA1 411b8a9bab5d161bbedfad69c35d6ed109718177
- SHA512 2a89dddcee340b07a478c508bee153223f367e7ecdc69d4462f2c0bc20c4580c5cfb5ebaebb26de3af6de9b7b3bcf202cdc04605de738dcb7f479fc5465a5e4d
- SSDEEP 48:cYxlBnrC7mJzffJOLn6fe8FsF4CyCLfASCELfQi29MMM9zv66fJIVqnIY7nIYPnK:NxrrCiVffJS+3KT3PLp73g
- MD5 SHA1 SHA512 SSDEEP
setup/V5.0/040b.ui.strings
- SHA256 3d1600a1e73b56fc03b16c359441468a3c2f4f4771174caab3ddc85039f1b7b6
- MD5 0a88f842daa2de8b94aa099d81e23d17
- SHA1 206210e83092544fc570f029e3113d96b0450b24
- SHA512 4bfbe8ef4bf073ac8dc995a09c638fa5ace4da6675d407ed0a86d5109ae3af279bd051d67b1ea934b59420ecf2b2e49f9d7531a685d076d255fba3327be5009f
- SSDEEP 192:hhnrV//tZzaicy9ZRq0G8QnAjaQvFmEDARpkakYgws90crBOdrOD:FFKy9ZRGtAjwR6H
- MD5 SHA1 SHA512 SSDEEP
setup/V5.0/040c.ui.forms
- SHA256 30acca5d175cb03d3acf39482eba243012870d072ac634226fbdcb8dfc5d1dc0
- MD5 192b2471d4913ef18d648890a98207d3
- SHA1 3836e7833745ee2b5fea372b73132303eae54e62
- SHA512 5f6e631d00d4fd1f0613be323879ca1bd79e468f03baf3b1460c33dd4a19ca2a1e97d0d10f1476486b3f2c4e0093d2f02b4507b51cb8b73b0e19e07d754176d3
- SSDEEP 96:9xMrCiVffJOaGp1Ic1TTz9lELR/RbRVR5M4YP:9xMrCiVffJDvVxzEP
- MD5 SHA1 SHA512 SSDEEP
setup/V5.0/040c.ui.strings
- SHA256 015b2337f6348ec810bdf06a68759dab7c1fc0543421784fdb956b1b3e27e5fe
- MD5 4a1993ac83570268ae11ee1879263a19
- SHA1 42adef3ddf560fe8f4387a040d092fb1b4c84033
- SHA512 f0ba640f1ec036d6ef1ea8954df7b04e920ff207d87cb11c134a50b9842709f5da0f30b3e257e9df99138861567f586567c638bb89057cca0e317e452c4be0d4
- SSDEEP 192:TMYp4g5z9WkoTmvlkzLMjQXE2fs8gdOlOD:gqrWkIm2Lc1
- MD5 SHA1 SHA512 SSDEEP
setup/V5.0/040d.ui.forms
- SHA256 4c6e5568e57ee199f924ca008cc9708d657db81f36eba379115e311fbf42d6a5
- MD5 a2ebb9e8f6bf8db4f47bd69578283532
- SHA1 c8784a4a2f21ee001dd0ca11cdd1dcb6a1995ea5
- SHA512 8625718c0ef01cfb4d78adef0d9dbf2f30e1d1f1a95945061dd4a868080908dca255108bb350c06793504a7fcbae18ffde4525d86b673397269911a4e77cfb14
- SSDEEP 48:cMxaqGpe3O34C4CLtA6COLtQi2TMZZIJqFbXarLAb:pxPGmst
- MD5 SHA1 SHA512 SSDEEP
setup/V5.0/040d.ui.strings
- SHA256 35601c7fa60df8dd79c1c4433da9babbdeb833f50e7eb18240f88cbbd7027cfc
- MD5 7660d8adec2934ff590edda344a3c5e7
- SHA1 94d611c2fa3d1f5ffa08232dda10f22e317cf4f3
- SHA512 4556bb801643767b4c301dc662d18fe553b95e6a711b2b7bcb295440e9e1282f0f76c9c79f64dd0804acd28251af615fbd9afd90262de26f5434212b9631c95c
- SSDEEP 96:qhXR563YqA0KDRbms3i16DXA2UB5jb511oUWywtiHOCELE2scM5pWOPOD:eh56ytRdojN11dwtiH5EA/cMvWOPOD
- MD5 SHA1 SHA512 SSDEEP
setup/V5.0/040e.ui.forms
- SHA256 6f4cee9e3f1674f260f63294ab208731a4b889cb09ac39b1e3e4a59e081a88cb
- MD5 df1bacadadf868d442275f8242b0ec50
- SHA1 84b4a86058b26acb5016f6bf6cebf43c302c3125
- SHA512 6b6262079598366f69e9a798a7daa62e88292532c3e33ec476baaaf64e13fa5193200dc368839701383a68e598cdb59a7bc35f76b1b15dd3e15e2341252df0aa
- SSDEEP 48:csxJDHPG/G4CJCLMAeClLMQi2qMKVzjInIaPL6g:RxJW2Y
- MD5 SHA1 SHA512 SSDEEP
setup/myproject.exe
- IMPHASH 07361a3a7f515bf56ca93120b2aca73b
- SHA256 596cd8828179620a09327770644d1cf820f37f0f977fea249e98fe7310650b3c
- MD5 5cf081e0f0ab191518dead71573c58f3
- SHA1 997cff1cc8383535fbcb7b2b708762ffbc49f84a
- SHA512 df1b30df1aeb04cca669c07147529e3f770e1d8f5853b2f374eb23fc0a6e2aff1540fa76f0b73fdd19a948c777ed6915eaa4c8a098b59b0886588ee2cd983574
- SSDEEP 196608:WPynKR8hBEZPXkxNJDlJ9WFlXX/+O8+x17yCnOQT/GTMzC0Wz28NlODaGdn:TnKRaBZDlJM3H8IP/GTMG0v8IR
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
27:12:33:18:21:1d:62:b5:bd:ff:68:8c:a5:06:d5:30:b1:fb:4a:3d:eb:75:98:2c:0f:d5:8e:dc:81:27:a3:80
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=BLACKBIRD SECURE BROWSING LTD,O=BLACKBIRD SECURE BROWSING LTD,ST=London,C=GB
Chains
Dec 4, 2023
CN=BLACKBIRD SECURE BROWSING LTD,O=BLACKBIRD SECURE BROWSING LTD,ST=London,C=GB
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Serial Number
48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 25, 2021 - Dec 31, 2028
Subject
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Serial Number
62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Issuer
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=BLACKBIRD SECURE BROWSING LTD,O=BLACKBIRD SECURE BROWSING LTD,ST=London,C=GB
Serial Number
12:1c:77:48:63:e3:ba:8e:7b:8b:f7:55:97:87:47:ae
Issuer
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 6, 2022 - Sep 5, 2025
Subject
CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB
Serial Number
39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Issuer
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 3, 2023 - Aug 2, 2034
Subject
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 2, 2019 - Jan 18, 2038
Minor OS version
1
Major OS version
6
Entry point
504128
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
WriteFile
WriteConsoleW
WerSetFlags
WerGetFlags
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
TlsAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetThreadPriority
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
RtlVirtualUnwind
RtlLookupFunctionEntry
ResumeThread
RaiseFailFastException
PostQueuedCompletionStatus
LoadLibraryW
LoadLibraryExW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetErrorMode
GetEnvironmentStringsW
GetCurrentThreadId
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateWaitableTimerA
CreateThread
CreateIoCompletionPort
CreateFileA
CreateEventA
CloseHandle
AddVectoredExceptionHandler
AddVectoredContinueHandler
Name
.text
Size
23.0MB
Virtual Size
23.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
28.4MB
Virtual Size
28.4MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1.6MB
Virtual Size
2.3MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
639KB
Virtual Size
639KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
512B
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
391KB
Virtual Size
391KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ