NеwInst_[UPD!][.]exe

NеwInst_[UPD!].exe

IMPHASH bf95d1fc1d10de18b32654b123ad5e1f
SHA256 2b50a04763845869d8306d400a502e7cb3c8bee4eaa2c164d0f2887026d65f57
MD5 6f317dc55d6cac3f5595fca6e5e854b7
SHA1 a0ca304923af7dbbd6b1c268ae21d2f0bb68105d
SHA512 cfd2106ff4a2563e7721c553181cffdc37c23788ef759d9f59e432a2bc5be5b7de05d5c2395781ecc249fabb7938c51d9eb487447a6a6a45766838af519634f2
SSDEEP 24576:j0aqMoP9shtVBfkdS4QlYgT05HUzyZdKbXyQJCwRHkMBcF:jO9shLBwS4z5H5ZgRREMY
MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest

44:10:16:76:7b:b1:c5:21:fa:62:02:04:29:60:d2:02:b4:d3:6a:f3:b2:4e:1a:1f:22:cd:b3:ed:b8:d0:a1:c3:00:7b:cf:24:36:93:d5:84:5b:f7:b8:ab:bd:0c:f4:7a:28:7c:b9:49:e3:26:3c:77:b9:12:d4:b9:c9:34:5e:f8

Digest Algorithm

sha512

PE Digests Matches

Not matched

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=14843353,CN=BrowserWorks Ltd,O=BrowserWorks Ltd,STREET=153-157 Cleveland Street,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

May 22, 2025

Minor OS version

0

Major OS version

5

Entry point

13289

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFileTime CompareFileTime SearchPathW GetShortPathNameW GetFullPathNameW MoveFileW SetCurrentDirectoryW GetFileAttributesW GetLastError CreateDirectoryW SetFileAttributesW Sleep GetTickCount GetFileSize GetModuleFileNameW GetCurrentProcess CopyFileW ExitProcess GetWindowsDirectoryW GetTempPathW GetCommandLineW SetErrorMode lstrcpynA CloseHandle lstrcpynW GetDiskFreeSpaceW GlobalUnlock GlobalLock CreateThread LoadLibraryW CreateProcessW lstrcmpiA CreateFileW GetTempFileNameW lstrcatW GetProcAddress LoadLibraryA GetModuleHandleA OpenProcess lstrcpyW GetVersionExW GetSystemDirectoryW GetVersion lstrcpyA RemoveDirectoryW lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalAlloc WaitForSingleObject GetExitCodeProcess GlobalFree GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW WideCharToMultiByte MulDiv lstrlenA WriteFile ReadFile MultiByteToWideChar SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW lstrlenW

user32

ScreenToClient GetMessagePos CallWindowProcW IsWindowVisible LoadBitmapW CloseClipboard SetClipboardData EmptyClipboard OpenClipboard TrackPopupMenu GetWindowRect AppendMenuW CreatePopupMenu GetSystemMetrics EndDialog EnableMenuItem GetSystemMenu SetClassLongW IsWindowEnabled SetWindowPos DialogBoxParamW CheckDlgButton CreateWindowExW SystemParametersInfoW RegisterClassW SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharNextA CharUpperW CharPrevW DispatchMessageW PeekMessageW wsprintfA DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW LoadCursorW SetCursor GetWindowLongW GetSysColor CharNextW GetClassInfoW ExitWindowsEx FindWindowExW GetDlgItem SetWindowLongW LoadImageW GetDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint IsWindow

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor SelectObject

shell32

SHBrowseForFolderW SHGetPathFromIDListW SHGetFileInfoW ShellExecuteW SHFileOperationW SHGetSpecialFolderLocation

advapi32

RegEnumKeyW RegOpenKeyExW RegCloseKey RegDeleteKeyW RegDeleteValueW RegCreateKeyExW RegSetValueExW RegQueryValueExW RegEnumValueW

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

$TEMP/Level.csv

SHA256 1f4ac86036e4c0e097b079dd6f7ddace4eca59ff489a00bf9332f33be4943b5a
MD5 be52e3de3a7284f4a674f6a07fb19013
SHA1 5a4ae76538ed0b23116bf6c24c86a278baa0a7b2
SHA512 86273d79bd09c68bc04ae6511608f0f620a408d71792579575bbd9b4108193bbae52441e761224e14082d0408a8cb988173313a1a2a8d2fbbb53a7953666c3d5
SSDEEP 768:yAFd9zkJFr1ysnloidZhpC60M8jI1Mi9eoBYedv:/u1Zloivaq9eoBTdv
MD5 SHA1 SHA512 SSDEEP

$TEMP/Live.csv

SHA256 4f83eba75e2cc7e2ce169abdecd306a7dd959d15b6c30d0bdf19076e913e5e6c
MD5 7f2f9536c6e93fe1d4d5dbd9836f8c91
SHA1 ae594b7fa8da21aa5c6854da068d9baa3b47e8ff
SHA512 eadb4296fae4df6a616e43f8c2649b9ba25b0090376012e4e7dec9229cdcf5c831ff5416c159598ba64c44141d87f820b281fc9b2cc3c74f6861e24d9805827d
SSDEEP 1536:mDSO+Pffvp+SHAy57Qocg9Cj+1DkiAVRMBmmTYEJ2/doxXOz4YW:pHrgyp9U8DkiAVRbGxIW
MD5 SHA1 SHA512 SSDEEP

$TEMP/Operator.csv

SHA256 ec2a31e8a7e453cb1e1a47633d35cce3fd7b223ebe977f9b0f3c530afcb04a2f
MD5 ec206aa82cfe47b372ce60c20380b39b
SHA1 f5549721640185807d8176f594bff8b0ec6f74d5
SHA512 8e660bf26e493fe0286e81c0452507c70ce9fc011a93118d09b6334a44006c217fd1133d2bfbaf9cd297e5616a73e79179e77df0c2bb330b09de3ec45213707d
SSDEEP 1536:fxj3lwyp3kfP5usooaSkIdu02L03erIUMVjLjhVC2sB9qxpm2:fD1U3nXvdu0RurqjmfvqXm2
MD5 SHA1 SHA512 SSDEEP

$TEMP/Refund.csv

SHA256 55c5b425eb5da2cdbf869ca0d080361994d5b5a052b3af0ad2c0777f46535e09
MD5 d49401d0c33a43b275a6cfc0e4e1a0ea
SHA1 bfd06a99c4bf9e4c2b1ec66ce6fcf7891f18a834
SHA512 7816de1401b1869413aad372bdeb26f7afef8ba44a3849d2a246057014e7162933249e259120b6410bdbef82bd9b7813ecaba1223a71110ded3a61e7b3d39155
SSDEEP 12288:3SP5rN1RTN4O984a+YXnUt+neT75Ts5eXfQc:3AdTSS84yw+shs5eXfQc
MD5 SHA1 SHA512 SSDEEP

Advice

SHA256 d14ee583feeaf3b8ce75977052d1d4006ef84782d160291ae65583c3c4c7f994
MD5 2eb1a3dbca1476fcc399d57d728c6be4
SHA1 a04dbd70955b2ad7aa534dee673ca562939d2926
SHA512 11178530bb62d2fbf03dd6992992e43d812e2ae312b291552e9b892b02aa1de9934d54fb5edc0ca656c0a0f87727a6ab8079ce862557aa9d44bac188b289156d
SSDEEP 3072:Sg5PXPeiR6MKkjGWoUlJUPdgQa8Bp/LxyA3laW2UDQWf05S:l5vPeDkjGgQaE/loUDtf0U
MD5 SHA1 SHA512 SSDEEP

Bracelet

SHA256 b85e6ec15f7bb09f231fcc91334d4b01bf5c5cb527931e66227e8e31d6a80561
MD5 d34022d9a0f09ffd6cc4961ced7c352c
SHA1 7eb2771d33c00f949c956aee3400266239e8d539
SHA512 795d11b84b610d0383daff7a37cd3c6271b8d2ef954c3497da2b4c3277d4ae568dc25111283092d8f5f26d405549ee5f9daa6f0f36f1f1093dfd509b9fbc2f3c
SSDEEP 3072:PmowS2u5hVOoQ7t8T6pUkBJR8CThpmESv+AqVnBypD:Ptb2j6AUkB0CThp6vmVna
MD5 SHA1 SHA512 SSDEEP

Designers

SHA256 aa2eecb2e736c94f2ec717bfb8e508dc9f5a484f846c4c62c387fe9cb1002013
MD5 5ef9fab76aa0d59d46d86322b126486b
SHA1 032cc018a44bba7d136d671167593bbf4a186b56
SHA512 67502f0bd2d6f0ca8ce5924fb84342cbffa00dcc2e25c541ea35dc0f52b5c30ecf9084e19e05f15fb679d323c8a97534c0e72414e4d121ae40c801a78c947710
SSDEEP 1536:fHsWccd0vtmgMbFuz08QuklMBNIimuzaAwusPq:fLeAg0Fuz08XvBNbjaAtsPq
MD5 SHA1 SHA512 SSDEEP

Disorder

SHA256 c02ab13424ba2abd02608c3ec7cda7034f78195709fae5ad7aebe149415c68d8
MD5 e8505df47d5f69247794ed8b7aa5c305
SHA1 09743264c0badbdc5edcca741d6af3799cd7ab4d
SHA512 79d6d79abea28b9755a9c2ef8330a6ec59526e4b754ee071fcff49039f3c44285d89e13b8f60b8b57eec0b8adfe6f600eebbcdd47f344622b4333ed9a5379ad8
MD5 SHA1 SHA512

Encouraged

SHA256 a6cd44fed81adbdc4a9547ca591a349101018db836feb1ab4d2ce15637c0f8d7
MD5 06468f3f14672cdddf7c14bdaddd5b1c
SHA1 a729f548874b10fc42b7fdc3a34ddd7b16ca591e
SHA512 bb87fb7ff2bcbb8122c1fb9ebca8f0a019353c09f97e9251913a90aa923c04261a37113916b60b513a2244622932baeaff7e7fee239744852935f68c77bd5f87
SSDEEP 1536:D8yDGVFE5gOHu1CwCMIBZwneAJu7QnswIPumV3BxZxu6/sPYcSyRXzW8/up:D80PtCZEMnVIPPBxT/sZs
MD5 SHA1 SHA512 SSDEEP

Factor

SHA256 83d36f57f24eb4cc5b7129dc094c103a5fd83f52d5aa644204d9b939d25fe716
MD5 ad870edaab07a8ec122f5153dcdbe3f1
SHA1 35be3554e6c2862223ce9fbd02fce7809342d3c1
SHA512 2ac9e81391b6547e4175c955d31d3e20d93be3ae6efd4bc1fe1fd566c46cd26b04e387d9b26bd5d592c009a1fb5b95dd5bc8f5b496a72cc08cdff46f9afb0795
SSDEEP 384:/HcIcK/2ETHwWV8tnwmTihbn929MwO/ChZrzmZGhLdXVaeCVrVEVFJ8ZcGwGBk7t:/HfR/ZByLiFuO/ChgZ45VatJVEV3GPkZ
MD5 SHA1 SHA512 SSDEEP

Feeling

SHA256 4dd282006998a7dac28869d1a0cb6c52eb0530e43cc5dc25c2ad5d893ac99d9f
MD5 77775be7fbaca7265d0643fb656a0665
SHA1 da6188a56412e74d61b5b0094815392e731afdd3
SHA512 9476878e02c33a55318d544e38d0cbd5c0829313c18a4fafa6b1b4f2eed279b8c8a595af71be73ffc517a334bad68b1a5b59004b0653babaf3ffd8b147636f82
SSDEEP 3072:Ebv18mLthfhnueoMmOqDoioO5bLezW9FfTut/Dde6u640ewy4Za9coRC2jfTq8u:WphfhnvO5bLezWWt/Dd314V14ZgP0B
MD5 SHA1 SHA512 SSDEEP

Large

SHA256 aa9236502aec47e579a1708bdb4cc983d9b525a8712deb755fd2a8f35f2ab9f8
MD5 95f6f3a9c0c38a7b3b6bd5bc85a1ef26
SHA1 d8eb851e64ca4d3e8988b5717f01db2078b50664
SHA512 27c11758db2e01a02b5cb64c393c946c8ed957d763fdb4ff9d0177db7de0a82f9c289deff968b985a9ff61c076af9f50735b6003c3bc442eb6fad442e851cdf9
SSDEEP 3072:3jccBiqXvpgF4qv+32eOyKODOSpQSAU4CE0Imbc:TccB3gBmmLsiS+SAhClbc
MD5 SHA1 SHA512 SSDEEP

Nipple

SHA256 51cd842f3667a4da01e8eb5f94393695582f1a0ca2fb600a4f5765e1d33a56ab
MD5 48ef01ca1efc7da5d44a43e7eadfcca2
SHA1 98ec44391ba82f8eb3c7bdf35b59bd151808028b
SHA512 75690ee458f7f0c2bcef65877c02cc74d920ca3492aa25a61e88f7f369e2a621c037dba0bd590f6f7327161b0c881def116772b263a650e561a56778c658c4f5
SSDEEP 1536:gKaj6iTcPAsAhxjgarB/5el3EYrDWyu0uZo2+9BGmdATGODv7xvr:26whxjgarB/5elDWy4ZNoGmROL7Fr
MD5 SHA1 SHA512 SSDEEP

Spy

SHA256 031ae2a8733d5ce89e9bef463447e362695c8a21513ca101e588743ff4c69d61
MD5 5bc1826720aba56cfac7bdcf85660536
SHA1 01567265de0719a8ad162f7045150f2fa09f162a
SHA512 833f1ce092571f15fed760779cc10a8d0f8bfa7c68ac8ab4d6a36ee5db8c120ec7e4004d27f04a8c039db398d2f1b97cdd7cec1130c3c556dbb76710d68e8eeb
SSDEEP 1536:U6LdTmHwANUQlHS3cctlxWboHdMJ3RraSXL21rKoUn9r5C03Eq30BcrTrhCX/:JdTmRxlHS3NxrHSBRtNPnj0nEoX/
MD5 SHA1 SHA512 SSDEEP

$TEMP/Reproduced.csv

SHA256 b4c20888b119b900f790361bc58ed9293c31309478b9f62766ce64cbcd90636a
MD5 3b12569dffbbd1c02d35da8b5295d013
SHA1 56f4975f6e84281e34966d5b604d988dc333ad70
SHA512 09b924aa3dd51c5cff90b7518894fc7228e85563cb6bad3ed5b639719d31acb08a5234f501efb4261ded42d5718b927c24ab537f4dcfcd95563d9ae1446f8715
SSDEEP 1536:yk8Zpufq0ziCXDdPGD54c22M0gO2FC2fovBguC2faKmxWU8A2tGp9Y55j:SpOq0RX5eD54cjM0g9C2Ae4fgd8AuGp0
MD5 SHA1 SHA512 SSDEEP

$TEMP/Subsidiaries.csv

SHA256 9d792db19a43864fcd1b12a7d5e97515fcfea2696caf75444c016fbaa496a681
MD5 7ca52e838fdb9680f73bade668722615
SHA1 6d9963930a279e015cf8f6511828161220cfd8f9
SHA512 083e9a461c9cdea4ea5ed816688a8bd8c10e47b311e069ca386a20a1b931c9784b22ed94c5d680db71238ea309097ad93d802d20920d6a167333c8362967cd81
SSDEEP 1536:BDEKGsRwc/bILX5A5zYjf4qspT5zdRHCVjghfKfLla8za3BPF:JEKfLILJAlYb0phdtCVjUfKjkF
MD5 SHA1 SHA512 SSDEEP

$TEMP/Trades.csv

SHA256 d486066f569068a43fa6720aae71900d18e4bcec051918a06d31c9fd5d7ac154
MD5 3b9ff3dbe0e6074c3f337459aa7ea269
SHA1 74e8fd5c6695da80c3592412ca3ad2f5ab3076a8
SHA512 b1115d91db802af0caa10c74c4dcf4bc447dc6a92d854a169652efd54341b946e02c7a9eda041d0746291e2bed209cb0595290a34d68d0b5da7f0b4fd4a56c52
SSDEEP 1536:qNcqKi4FbOQzN+N0j7FidUy7btum/RFam/:qNcqO5zUN0jYtpvam/
MD5 SHA1 SHA512 SSDEEP

WagePizza/Named.csv

SHA256 7fd8b7025a5da5ea94b3d56f0db0ae3e8166127287681488d02a9c73a549517c
MD5 272675e44aee51cc78151084b3a4070b
SHA1 87bb0a81dddbb5f13c720891e648c5a0aaa903be
SHA512 96c47cdad8ce5b8e75fce8b55682483881dac8ce0d134296a6f1623ba4a62570b5a1d2b93440da06ca76ea5f5955426f16b11e07155c4dd71b15d8d5f07cb8c1
SSDEEP 1536:K8UP+cKk6wgsp1Itks8gELTMN4ZKSr6z6HGRh:fceqp1wcgKTqyK9zCGRh
MD5 SHA1 SHA512 SSDEEP

Sharing

General

Malware Config

Signatures

File Explorer