HPSmartclbl[.]zip | Triage™

Resubmissions

23/01/2026, 17:57

260123-wj35lscz8g10

23/01/2026, 17:50

260123-wevyfacx7f10

Sharing

Copy URL Twitter E-mail

General

Target
HPSmartclbl.zip
Size 3.2MB
Sample260123-wevyfacx7f
SHA256 d05255f0fa586e5eca2e7d5c15451843e20810139596dc5695a8deaa4c3d7882
MD5 70cafc597a942c2d71538f76dc22d884
SHA1 1802d7d5a6ce6ef275bdc3fd8d3644c3973e603b
SHA512 5a6f519d2d06f6baf98eb15acd2fb40bc7f7120604397ddffddabb2b07a5cc4639f689a81322c18ddd93ad3f7c0e65ad4dd659969dd8c2420d7e91665d6f482c
SSDEEP 98304:AhJuZ49y5Ac4DcqUO1HRaud+FrkkXAAfKLu+:Afv9a6cqUOhld7kXn+
TLSH
T13EF533C2D5A566C31124EA62127A79CF02880D2977EFDB2C63A0FB377D96DD2311C4A7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/HPReport.exe
unpack001/InstanceFinderDlgUI.dll

Untrusted Codesign Signers 1 IoCs

Codesigned binary was signed by an untrusted entity.

resource
unpack001/HPSmart.exe

File Explorer

HPSmartclbl.zip

.zip 3.2MB
HPReport.exe

.exe 3.3MB
HPSmart.exe

.exe 1.9MB
InstanceFinderDlg.dat

469KB
InstanceFinderDlgUI.dll

.dll 754KB

HPSmartclbl.zip

SHA256 d05255f0fa586e5eca2e7d5c15451843e20810139596dc5695a8deaa4c3d7882
MD5 70cafc597a942c2d71538f76dc22d884
SHA1 1802d7d5a6ce6ef275bdc3fd8d3644c3973e603b
SHA512 5a6f519d2d06f6baf98eb15acd2fb40bc7f7120604397ddffddabb2b07a5cc4639f689a81322c18ddd93ad3f7c0e65ad4dd659969dd8c2420d7e91665d6f482c
SSDEEP 98304:AhJuZ49y5Ac4DcqUO1HRaud+FrkkXAAfKLu+:Afv9a6cqUOhld7kXn+
TLSH
T13EF533C2D5A566C31124EA62127A79CF02880D2977EFDB2C63A0FB377D96DD2311C4A7
MD5 SHA1 SHA512 SSDEEP TLSH

HPReport.exe

IMPHASH ca621755881915e216dd8a5a2f9cf568
SHA256 492df82529abe6cb8e927fb1513a4e250c293ec86d802a313515d944d6ea7018
MD5 5ccecdd7a28ebb0401cc98e7fd89ba71
SHA1 b5bafbe629650150c87f4b0fe0c7ddaf1eb7751e
SHA512 0ebb40aadcd8da7bb5de423417026d01ac64dbe882737cf58a98807ca2105f0a8cb7547c9b8d8138d0a4cbd609e8fc0ce0988973d0e25b18d5eeeb168c730e74
SSDEEP 98304:R/Fuk7b1n4vJfqvK+MiKibCh2VhFLOAkGkzdnEVomFHKnPtPv:RbbJKibCh2LFLOyomFHKnPtn
TLSH
T1D4F5BE513E88B86AD4530E31BE99F67FF1EEBCB41A3B03471191B6197A326414B1DC2B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1362130

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetStdHandle GetFileType SetStdHandle QueryPerformanceFrequency VirtualQuery VirtualAlloc GetSystemInfo HeapQueryInformation ExitThread CreateThread GetCommandLineW GetCommandLineA RtlUnwind OutputDebugStringW ExitProcess LCMapStringW GetModuleHandleExW GetTimeZoneInformation GetConsoleOutputCP GetConsoleMode SetFilePointerEx FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetStringTypeW GetStartupInfoW IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime QueryPerformanceCounter WaitForSingleObjectEx ResetEvent IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter GetTempFileNameW FindResourceExW GetWindowsDirectoryW SearchPathW GetProfileIntW GetTickCount SystemTimeToTzSpecificLocalTime GetFileTime GetFileSizeEx GetFileAttributesExW FileTimeToLocalFileTime SetErrorMode VirtualProtect lstrcmpiW GetCurrentProcess DuplicateHandle UnlockFile SetFilePointer SetEndOfFile LockFile GetVolumeInformationW GetFullPathNameW FlushFileBuffers FindFirstFileW FindClose FileTimeToSystemTime GlobalGetAtomNameW GetFileSize VerifyVersionInfoW VerSetConditionMask GetThreadLocale GlobalFlags GetUserDefaultUILanguage GetSystemDefaultUILanguage GetLocaleInfoW GetCurrentDirectoryW LocalReAlloc LocalAlloc GlobalHandle GlobalReAlloc TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSection InitializeCriticalSectionAndSpinCount CompareStringW GlobalFindAtomW GetSystemDirectoryW EncodePointer GlobalAddAtomW ResumeThread SetThreadPriority CreateEventW WaitForSingleObject SetEvent CopyFileW FormatMessageW MulDiv LocalFree GlobalSize GetCurrentProcessId GlobalUnlock WritePrivateProfileStringW GetPrivateProfileStringW GetPrivateProfileIntW LoadLibraryA lstrcpyW GlobalFree WideCharToMultiByte MultiByteToWideChar lstrcmpW lstrcmpA GlobalDeleteAtom GlobalLock GlobalAlloc LoadLibraryExW GetModuleHandleW GetModuleHandleA FreeLibrary GetVersionExW GetCurrentThreadId GetCurrentThread SetLastError OutputDebugStringA DeleteCriticalSection DecodePointer RaiseException HeapReAlloc GetLastError HeapSize InitializeCriticalSectionEx LeaveCriticalSection EnterCriticalSection DeleteFileW SetFileAttributesW CreateDirectoryW GetFileAttributesW GetModuleFileNameW GetProcAddress LoadLibraryW HeapFree ReadFile CloseHandle WriteFile GetProcessHeap SizeofResource HeapAlloc CreateFileW GetTempPathW Sleep FindResourceW LoadResource LockResource FreeLibraryAndExitThread WriteConsoleW

user32

GetNextDlgGroupItem IntersectRect SetRect InvalidateRgn CopyAcceleratorTableW CharNextW KillTimer SetTimer RealChildWindowFromPoint DeleteMenu CopyImage LoadCursorW WindowFromPoint ReleaseCapture SetCapture WaitMessage GetMonitorInfoW MonitorFromWindow WinHelpW GetScrollInfo SetScrollInfo GetTopWindow GetClassLongW EqualRect AdjustWindowRectEx RemovePropW GetPropW SetPropW ShowScrollBar GetScrollRange SetScrollRange GetScrollPos SetScrollPos ScrollWindow SetForegroundWindow GetForegroundWindow TrackPopupMenu SetMenu GetMenu GetCapture EndDeferWindowPos DeferWindowPos BeginDeferWindowPos SetWindowPlacement GetWindowPlacement IsChild IsMenu CreateWindowExW GetClassInfoExW GetClassInfoW RegisterClassW CallWindowProcW DefWindowProcW GetMessageTime GetMessagePos SystemParametersInfoW CopyRect GetMenuItemInfoW DestroyMenu GetClassNameW InvalidateRect SetCursor ShowOwnedPopups ValidateRect GetKeyState MessageBeep DispatchMessageW TranslateMessage GetMessageW LoadBitmapW SetMenuItemInfoW GetMenuCheckMarkDimensions SetMenuItemBitmaps EnableMenuItem CheckMenuItem CallNextHookEx UnhookWindowsHookEx SetWindowsHookExW PtInRect GetCursorPos ScreenToClient ClientToScreen EnableScrollBar BeginPaint ReleaseDC GetWindowDC GetDC TabbedTextOutW GrayStringW DrawTextExW DrawTextW RemoveMenu InsertMenuW GetMenuItemCount GetMenuItemID GetSubMenu GetMenuState GetMenuStringW GetLastActivePopup GetWindowThreadProcessId MessageBoxW IsDialogMessageW SetWindowLongW GetWindowTextLengthW GetWindowTextW SetWindowTextW SetFocus GetDoubleClickTime GetIconInfo CopyIcon UpdateWindow LoadIconW GetSystemMenu AppendMenuW SendMessageW GetDlgCtrlID CheckDlgButton MoveWindow ShowWindow GetDesktopWindow GetWindowLongW SetActiveWindow IsWindowEnabled SetLayeredWindowAttributes SetRectEmpty EnumDisplayMonitors OpenClipboard CloseClipboard SetClipboardData EmptyClipboard DestroyIcon LoadImageW SetParent MonitorFromPoint TrackMouseEvent IsZoomed CharUpperW GetActiveWindow GetNextDlgTabItem GetAsyncKeyState LoadMenuW NotifyWinEvent SetCursorPos UnionRect BringWindowToTop CreatePopupMenu PeekMessageW IsIconic GetSystemMetrics GetClientRect DrawIcon EnableWindow wsprintfW FindWindowW UnregisterClassW PostMessageW PostQuitMessage SetWindowPos SetWindowContextHelpId GetParent GetWindow MapDialogRect RegisterWindowMessageW DrawEdge DrawFrameControl IsWindowVisible GetFocus DrawStateW SetWindowRgn RedrawWindow GetWindowRect MapWindowPoints GetSysColor GetSysColorBrush DrawFocusRect FillRect InflateRect OffsetRect IsRectEmpty DrawIconEx IsWindow DestroyWindow CreateDialogIndirectParamW EndDialog GetDlgItem GetMenuDefaultItem SetMenuDefaultItem ModifyMenuW DestroyAcceleratorTable LockWindowUpdate SetClassLongW InvertRect HideCaret GetWindowRgn DestroyCursor CreateMenu GetComboBoxInfo TranslateMDISysAccel DefMDIChildProcW DefFrameProcW DrawMenuBar MapVirtualKeyExW IsCharLowerW PostThreadMessageW IsClipboardFormatAvailable FrameRect CharUpperBuffW SubtractRect GetKeyNameTextW CreateAcceleratorTableW MapVirtualKeyW GetKeyboardState GetKeyboardLayout ToUnicodeEx RegisterClipboardFormatW ReuseDDElParam UnpackDDElParam InsertMenuItemW TranslateAcceleratorW LoadAcceleratorsW UpdateLayeredWindow SendDlgItemMessageA EndPaint GetUpdateRect

gdi32

CreateDCW GetDeviceCaps BitBlt CreateBitmap CreateCompatibleDC CreatePen CreatePatternBrush DeleteObject Escape ExcludeClipRect GetClipBox GetObjectType GetPixel GetStockObject GetViewportExtEx GetWindowExtEx IntersectClipRect LineTo PtVisible RectVisible RestoreDC SaveDC SelectClipRgn ExtSelectClipRgn SelectObject SelectPalette SetBkColor SetBkMode SetMapMode SetLayout GetLayout SetPolyFillMode SetROP2 SetTextColor SetTextAlign GetObjectW MoveToEx TextOutW CopyMetaFileW SetViewportExtEx SetViewportOrgEx SetWindowExtEx SetWindowOrgEx OffsetViewportOrgEx OffsetWindowOrgEx ScaleViewportExtEx ScaleWindowExtEx CreateFontIndirectW GetRgnBox GetMapMode SetRectRgn DPtoLP CreateCompatibleBitmap CreateDIBitmap EnumFontFamiliesW GetTextCharsetInfo RealizePalette SetPixel StretchBlt CreateDIBSection SetDIBColorTable CreateRoundRectRgn Rectangle OffsetRgn RoundRect CreatePalette GetPaletteEntries GetNearestPaletteIndex GetSystemPaletteEntries EnumFontFamiliesExW ExtFloodFill SetPaletteEntries FillRgn FrameRgn GetBoundsRect PtInRegion GetViewportOrgEx LPtoDP GetWindowOrgEx SetPixelV GetTextFaceW GetTextMetricsW Polyline Polygon CreatePolygonRgn ExtTextOutW PatBlt GetTextExtentPoint32W GetTextColor Ellipse CreateSolidBrush CreateRectRgnIndirect CreateRectRgn CreateHatchBrush CreateEllipticRgn CombineRgn GetBkColor DeleteDC

msimg32

TransparentBlt AlphaBlend

winspool.drv

OpenPrinterW DocumentPropertiesW ClosePrinter

advapi32

RegOpenKeyExW RegEnumKeyExW RegEnumValueW RegQueryValueW RegEnumKeyW RegCloseKey RegSetValueExW RegDeleteValueW RegDeleteKeyW RegCreateKeyExW RegQueryValueExW

shell32

SHGetPathFromIDListW SHGetSpecialFolderLocation SHBrowseForFolderW SHGetDesktopFolder SHAppBarMessage SHGetFileInfoW ShellExecuteW DragFinish DragQueryFileW SHGetMalloc

comctl32

InitCommonControlsEx

shlwapi

PathFindExtensionW PathStripToRootW StrFormatKBSizeW PathRemoveFileSpecW PathIsUNCW PathFindFileNameW

uxtheme

GetThemeSysColor IsThemeBackgroundPartiallyTransparent GetThemePartSize GetWindowTheme DrawThemeParentBackground OpenThemeData CloseThemeData DrawThemeBackground GetThemeColor GetCurrentThemeName IsAppThemed DrawThemeText

ole32

OleUninitialize OleFlushClipboard OleIsCurrentClipboard DoDragDrop OleGetClipboard CoLockObjectExternal RegisterDragDrop RevokeDragDrop OleLockRunning CoInitializeEx CoRevokeClassObject CoRegisterMessageFilter OleCreateMenuDescriptor OleDestroyMenuDescriptor OleTranslateAccelerator IsAccelerator OleInitialize CoFreeUnusedLibraries CoDisconnectObject CreateStreamOnHGlobal CreateILockBytesOnHGlobal StgOpenStorageOnILockBytes StgCreateDocfileOnILockBytes CoGetClassObject ReleaseStgMedium OleDuplicateData CoTaskMemFree CoTaskMemAlloc CoInitialize CoCreateInstance CLSIDFromProgID CLSIDFromString CoCreateGuid CoUninitialize

oleaut32

SysStringLen SystemTimeToVariantTime VariantTimeToSystemTime SafeArrayDestroy LoadTypeLi OleCreateFontIndirect VariantCopy VarBstrFromDate SysFreeString VariantChangeType VariantInit SysAllocStringLen VariantClear SysAllocString

oledlg

OleUIBusyW

gdiplus

GdipDrawImageRectI GdipSetInterpolationMode GdipCreateFromHDC GdipCreateBitmapFromHBITMAP GdipDrawImageI GdipDeleteGraphics GdipBitmapUnlockBits GdipBitmapLockBits GdipCreateBitmapFromScan0 GdipCreateBitmapFromStream GdipGetImagePaletteSize GdipGetImagePalette GdipGetImagePixelFormat GdipGetImageHeight GdipGetImageWidth GdipGetImageGraphicsContext GdipDisposeImage GdipCloneImage GdiplusStartup GdipFree GdipAlloc GdiplusShutdown

oleacc

AccessibleObjectFromWindow LresultFromObject CreateStdAccessibleObject

imm32

ImmReleaseContext ImmGetOpenStatus ImmGetContext

winmm

PlaySoundW

HPSmart.exe

IMPHASH 2d50523264ea61d5d194e83217778fed
SHA256 b30239064a8ff5ede80b2a97508fb58ad8c39d6bbe27b3ce5d6dc9564dcf766b
MD5 5475767bdb89f712cd6272797857af04
SHA1 3508fc2ba5a3508f88cfcffdbb0808b498a04b03
SHA512 316caf60955a3b7b3ac5beca07e48d941cb9ab27d8a697ae90e98a59e955adee686b415f38d1276cc181c68d80ead4f5d7bd239a37352cdf2d048866d96ed849
SSDEEP 49152:cCqBiiacEvl6ooqyE+DGgW0fQi6WKsGMCrPqrKxRkfUzavFg9SirFDGIiCGgPLZj:mMiaXliqy3GgWyF6WKsGDrPq2LkLFtiP
TLSH
T173958E3177F2D077D2733A30952EE379A6B9B6700E39434B52904E3D2EB15C2992876B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned binary was signed by an untrusted entity.

PE Signature issue

Digest

ae:ae:63:ef:fe:ed:71:8d:fb:ca:15:21:34:55:18:1e:d9:52:3d:8f

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Hewlett Packard,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Desktop Consumer Solutions,O=Hewlett Packard,L=San Diego,ST=California,C=US

Chains

Mar 6, 2014

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

Serial Number

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageNetscapeServerGatedCrypto

Timespan

Nov 8, 2006 - Nov 7, 2021

Subject

CN=Hewlett Packard,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Desktop Consumer Solutions,O=Hewlett Packard,L=San Diego,ST=California,C=US

Serial Number

44:23:9c:21:87:ef:ae:7b:a9:f3:cd:89:c4:fe:9d:84

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 27, 2012 - Sep 3, 2015

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

Major OS version

Entry point

1175591

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

f:\jnks\workspace\K12_Prod_Active_Build\build188\SxS\src\Release\InstanceFinderDlg.pdb

msimg32

AlphaBlend TransparentBlt

comctl32

ImageList_GetIconSize

shlwapi

PathStripToRootW PathRemoveFileSpecW PathFindFileNameW PathIsFileSpecW PathFindExtensionW PathIsUNCW

psapi

EnumProcessModules EnumProcesses GetModuleFileNameExW GetModuleBaseNameW

oleacc

AccessibleObjectFromWindow CreateStdAccessibleObject LresultFromObject

gdiplus

GdipCreateBitmapFromStream GdipFree GdipAlloc GdipDeleteGraphics GdipCreateBitmapFromScan0 GdipBitmapLockBits GdipBitmapUnlockBits GdipGetImageGraphicsContext GdipDisposeImage GdipCreateBitmapFromHBITMAP GdiplusStartup GdiplusShutdown GdipCreateFromHDC GdipSetInterpolationMode GdipDrawImageRectI GdipCloneImage GdipGetImageWidth GdipGetImageHeight GdipGetImagePixelFormat GdipGetImagePaletteSize GdipDrawImageI GdipGetImagePalette

imm32

ImmGetContext ImmGetOpenStatus ImmReleaseContext

winmm

PlaySoundW

kernel32

RtlUnwind RaiseException HeapReAlloc ExitThread CreateThread HeapSize HeapQueryInformation ExitProcess VirtualAlloc GetSystemInfo VirtualQuery SetStdHandle GetFileType TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent GetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount HeapCreate GetTimeZoneInformation GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringW GetStringTypeW GetConsoleCP GetConsoleMode GetLocaleInfoA EnumSystemLocalesA IsValidLocale WriteConsoleW SetEnvironmentVariableA InterlockedCompareExchange ReleaseSemaphore CreateSemaphoreW SetHandleInformation VerSetConditionMask WritePrivateProfileStringA GetPrivateProfileStringA RemoveDirectoryW VerifyVersionInfoW MoveFileExW DeviceIoControl ProcessIdToSessionId GetUserDefaultLangID SetCurrentDirectoryW GetComputerNameExW FindNextFileW GetSystemDefaultLCID FlushViewOfFile OpenFileMappingW GlobalMemoryStatusEx CreatePipe WaitForMultipleObjects TryEnterCriticalSection GetEnvironmentVariableW PeekNamedPipe CreateDirectoryW OpenMutexW GetSystemTime GetLocalTime ResetEvent OpenEventW TerminateThread GetExitCodeProcess GetExitCodeThread GetDiskFreeSpaceExW CreateProcessW GetLastError SetLastError QueryPerformanceCounter GetModuleFileNameW ExpandEnvironmentStringsW InitializeCriticalSection GetCurrentProcessId MultiByteToWideChar EnterCriticalSection LeaveCriticalSection DeleteCriticalSection GetTickCount CreateFileW Sleep SetFilePointer WriteFile CloseHandle OutputDebugStringW GetCurrentThreadId OpenProcess GetFileAttributesExW GetCommandLineW GetTempFileNameW GetLongPathNameW SearchPathW FormatMessageW LocalFree CreateMutexW WaitForSingleObject CreateFileMappingW MapViewOfFile ReleaseMutex UnmapViewOfFile LoadLibraryW GetProcAddress FreeLibrary QueryPerformanceFrequency LocalAlloc TlsGetValue GlobalLock GlobalReAlloc GlobalUnlock GlobalHandle GlobalAlloc TlsAlloc TlsSetValue LocalReAlloc GlobalFree TlsFree DeactivateActCtx ReleaseActCtx ActivateActCtx InterlockedDecrement SizeofResource LockResource LoadResource FindResourceW WideCharToMultiByte lstrlenW MulDiv GlobalSize CopyFileW SetThreadPriority ResumeThread SetEvent CreateEventW GetModuleHandleW InterlockedIncrement CompareStringW GlobalGetAtomNameW lstrcmpA lstrlenA FileTimeToSystemTime lstrcmpW InitializeCriticalSectionAndSpinCount GetVersionExW GlobalDeleteAtom GlobalFindAtomW GlobalAddAtomW FreeResource GlobalFlags lstrcmpiW DeleteFileW ReadFile FlushFileBuffers LockFile UnlockFile SetEndOfFile GetFileSize DuplicateHandle GetCurrentProcess FindClose FindFirstFileW GetVolumeInformationW GetFullPathNameW GetShortPathNameW InterlockedExchange GetLocaleInfoW GetSystemDefaultUILanguage GetUserDefaultUILanguage GetSystemDirectoryW lstrcpyW SetFileAttributesW FileTimeToLocalFileTime GetFileAttributesW GetFileSizeEx GetFileTime GetCurrentDirectoryW WritePrivateProfileStringW GetPrivateProfileStringW GetTempPathW GetWindowsDirectoryW GetNumberFormatW GetProfileIntW VirtualProtect GetUserDefaultLCID FindResourceExW EncodePointer DecodePointer HeapSetInformation GetStartupInfoW HeapFree GetSystemTimeAsFileTime GetTimeFormatW GetDateFormatW HeapAlloc

user32

MoveWindow SetWindowTextW IsDialogMessageW CheckDlgButton RegisterWindowMessageW LoadIconW SendDlgItemMessageW SendDlgItemMessageA WinHelpW IsChild GetCapture GetClassLongW GetClassNameW SetPropW GetPropW RemovePropW IsWindow SetFocus GetForegroundWindow SetActiveWindow BeginDeferWindowPos EndDeferWindowPos GetDlgItem GetTopWindow DestroyWindow GetMessageTime GetMessagePos MonitorFromWindow GetMonitorInfoW MapWindowPoints ScrollWindow TrackPopupMenu SetMenu SetScrollRange GetScrollRange SetScrollPos GetScrollPos ShowScrollBar RedrawWindow UpdateWindow GetClientRect PostMessageW CreateWindowExW RealChildWindowFromPoint GetClassInfoW RegisterClassW AdjustWindowRectEx GetWindowRect ScreenToClient EqualRect DeferWindowPos GetScrollInfo SetScrollInfo SetCursorPos GetDlgCtrlID DefWindowProcW CallWindowProcW GetMenu SetWindowLongW SetWindowPos CopyRect PtInRect GetWindow SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapW GetFocus ModifyMenuW BringWindowToTop LockWindowUpdate GetDesktopWindow DestroyIcon CharUpperW EnableMenuItem CheckMenuItem GetWindowTextLengthW GetWindowTextW InflateRect GetMenuItemInfoW DestroyMenu SetRect SystemParametersInfoW GetMenuDefaultItem InvertRect FillRect SendMessageCallbackW TabbedTextOutW DrawTextW DrawTextExW GrayStringW GetWindowDC BeginPaint EndPaint PostQuitMessage CopyImage SetRectEmpty EnumDisplayMonitors SetLayeredWindowAttributes IsIconic InvalidateRect IntersectRect SetCursor AllowSetForegroundWindow ExitWindowsEx CloseDesktop OpenDesktopW SetThreadDesktop GetThreadDesktop SetProcessWindowStation GetProcessWindowStation CloseWindowStation OpenWindowStationW GetWindowPlacement ClientToScreen ShowOwnedPopups DeleteMenu SetTimer KillTimer IsRectEmpty OffsetRect IsZoomed SetWindowRgn SetParent DestroyAcceleratorTable CreatePopupMenu WindowFromPoint NotifyWinEvent GetAsyncKeyState SetClassLongW LoadMenuW GetSystemMenu SetCapture ReleaseCapture MessageBeep DrawStateW DrawIconEx DrawEdge DrawFrameControl DrawFocusRect CopyAcceleratorTableW ToUnicodeEx MapVirtualKeyW HideCaret GetKeyboardLayout GetKeyboardState LoadAcceleratorsW CreateAcceleratorTableW GetClassInfoExW GetWindowRgn DestroyCursor MsgWaitForMultipleObjects wsprintfW WaitForInputIdle MsgWaitForMultipleObjectsEx ShowWindow SetForegroundWindow UnhookWindowsHookEx MessageBoxW EnableWindow IsWindowEnabled GetLastActivePopup GetWindowLongW GetParent SendMessageW GetWindowThreadProcessId RemoveMenu GetSubMenu GetMenuItemCount InsertMenuW GetMenuItemID AppendMenuW GetMenuStringW GetMenuState ValidateRect GetCursorPos PeekMessageW GetKeyState IsWindowVisible DrawIcon MapDialogRect SubtractRect MapVirtualKeyExW GetKeyNameTextW IsCharLowerW GetDoubleClickTime CharUpperBuffW CopyIcon RegisterClipboardFormatW EmptyClipboard CloseClipboard SetClipboardData OpenClipboard GetUpdateRect FrameRect IsClipboardFormatAvailable SetMenuDefaultItem WaitMessage PostThreadMessageW CreateMenu IsMenu UpdateLayeredWindow UnionRect MonitorFromPoint TranslateMDISysAccel DrawMenuBar DefMDIChildProcW DefFrameProcW UnpackDDElParam ReuseDDElParam InsertMenuItemW TranslateAcceleratorW CreateDialogIndirectParamW EndDialog GetNextDlgGroupItem LoadImageW GetIconInfo GetNextDlgTabItem EnableScrollBar SetWindowPlacement GetActiveWindow DispatchMessageW TranslateMessage GetMessageW LoadCursorW GetSystemMetrics GetDC ReleaseDC GetSysColor GetSysColorBrush SetWindowsHookExW CallNextHookEx

gdi32

SaveDC GetTextExtentPoint32W ExtTextOutW BitBlt CreateCompatibleDC RestoreDC SetBkMode SetPolyFillMode SetROP2 CreateFontIndirectW DeleteObject GetObjectW SetBkColor CreateBitmap CreateDCW CopyMetaFileW SetTextColor SetPixelV GetTextFaceW SetPaletteEntries ExtFloodFill GetBoundsRect FrameRgn FillRgn PtInRegion GetViewportOrgEx GetWindowOrgEx LPtoDP EnumFontFamiliesExW Rectangle SetPixel StretchBlt SetDIBColorTable GetRgnBox OffsetRgn GetSystemPaletteEntries RealizePalette GetNearestPaletteIndex GetPaletteEntries CreatePalette Polygon Ellipse Polyline CreateEllipticRgn GetTextColor GetBkColor CreatePolygonRgn CreateRoundRectRgn CreateDIBSection DPtoLP PatBlt CombineRgn SetRectRgn GetTextCharsetInfo EnumFontFamiliesW GetTextMetricsW CreateRectRgnIndirect CreateCompatibleBitmap CreateDIBitmap CreateHatchBrush CreateSolidBrush CreatePen GetObjectType SelectPalette GetStockObject CreatePatternBrush DeleteDC ExtSelectClipRgn ScaleWindowExtEx SetWindowExtEx OffsetWindowOrgEx SetWindowOrgEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape TextOutW RectVisible PtVisible GetPixel GetWindowExtEx GetViewportExtEx CreateRectRgn SelectClipRgn SetLayout GetLayout SetTextAlign MoveToEx LineTo IntersectClipRect ExcludeClipRect GetClipBox SetMapMode GetDeviceCaps

winspool.drv

ClosePrinter GetJobW DocumentPropertiesW FindClosePrinterChangeNotification FindNextPrinterChangeNotification FindFirstPrinterChangeNotification EndDocPrinter EndPagePrinter WritePrinter StartPagePrinter StartDocPrinterW EnumPortsW EnumMonitorsW DeleteMonitorW AddMonitorW ord203 ord204 EnumJobsW SetJobW SetPrinterW EnumPrinterDriversW GetPrinterDriverDirectoryW DeletePrinterDriverExW GetPrinterW XcvDataW GetPrinterDriverW AddPrinterDriverW SetPrinterDataExW GetPrinterDataExW EnumPrintersW DeletePrinter AddPrinterW OpenPrinterW

comdlg32

GetFileTitleW

advapi32

AllocateAndInitializeSid RegEnumKeyExW OpenProcessToken CheckTokenMembership OpenSCManagerW OpenServiceW CloseServiceHandle QueryServiceStatus StartServiceW ControlService RegOpenKeyExW RegCloseKey RegCreateKeyExW RegQueryValueExW RegDeleteKeyW RegDeleteValueW RegSetValueExW GetUserNameW RegQueryInfoKeyW SetEntriesInAclW InitializeSecurityDescriptor SetSecurityDescriptorDacl BackupEventLogW CloseEventLog OpenEventLogW FreeSid QueryServiceConfigW CreateProcessAsUserW ChangeServiceConfigW RegEnumValueW

shell32

ShellExecuteExW SHBrowseForFolderW SHAppBarMessage DragQueryFileW DragFinish ShellExecuteW SHGetSpecialFolderLocation SHGetPathFromIDListW SHGetDesktopFolder SHGetFileInfoW ExtractIconW CommandLineToArgvW SHGetFolderPathW SHGetSpecialFolderPathW

ole32

PropVariantClear OleGetClipboard RegisterDragDrop CoLockObjectExternal RevokeDragDrop OleUninitialize OleInitialize CoCreateInstance CLSIDFromString CoUninitialize CoTaskMemFree ReleaseStgMedium CoTaskMemAlloc OleDuplicateData CoCreateGuid CoInitializeSecurity CoSetProxyBlanket CoInitializeEx OleCreateMenuDescriptor OleDestroyMenuDescriptor OleTranslateAccelerator IsAccelerator OleLockRunning CreateStreamOnHGlobal DoDragDrop CoInitialize

oleaut32

SysAllocStringLen SysStringLen SystemTimeToVariantTime VariantTimeToSystemTime VariantCopy VarBstrFromDate VariantClear SysFreeString SysAllocString VariantInit VariantChangeType

version

GetFileVersionInfoSizeW VerQueryValueW GetFileVersionInfoW

setupapi

CM_Locate_DevNodeW CM_Get_DevNode_Status CM_Get_Device_IDW CM_Get_DevNode_Registry_PropertyW CM_Set_DevNode_Registry_PropertyW CM_Disable_DevNode SetupDiGetClassDevsW SetupDiCreateDeviceInfoList SetupDiDestroyDeviceInfoList SetupDiEnumDeviceInfo SetupDiGetDeviceRegistryPropertyW SetupDiOpenDeviceInfoW SetupDiCreateDeviceInfoW SetupDiEnumDeviceInterfaces SetupDiGetDeviceInterfaceDetailW SetupDiGetDeviceInstallParamsW SetupDiSetDeviceInstallParamsW SetupDiCallClassInstaller SetupDiOpenClassRegKey SetupDiCreateDevRegKeyW SetupDiOpenDevRegKey SetupDiBuildDriverInfoList SetupDiDestroyDriverInfoList SetupDiRemoveDevice SetupDiGetSelectedDriverW SetupDiGetDriverInfoDetailW SetupOpenInfFileW SetupFindFirstLineW SetupGetLineTextW SetupCloseInfFile CMP_WaitNoPendingInstallEvents SetupDiSetClassInstallParamsW

ws2_32

WSACreateEvent WSAAddressToStringW freeaddrinfo getaddrinfo send recv accept listen bind WSADuplicateSocketW WSACloseEvent closesocket shutdown WSAResetEvent WSAEnumNetworkEvents WSAConnect WSAEventSelect setsockopt WSASocketW WSACleanup WSAStringToAddressW WSAStartup WSAGetLastError

secur32

GetUserNameExW

iphlpapi

GetAdaptersAddresses GetIfEntry GetInterfaceInfo IpReleaseAddress GetAdaptersInfo AddIPAddress DeleteIPAddress IcmpCreateFile IcmpSendEcho IcmpCloseHandle NotifyAddrChange IpRenewAddress

InstanceFinderDlgUI.dll

IMPHASH 0e0f54339d44ea7798a18dc4b7345231
SHA256 4a0dfe9a33ce169986ffef8d40a44f2ae868b15976443b5b87756c8146d27478
MD5 dd0a9a725528bbf363ee7ad0a4fabdea
SHA1 150fd577f5017d590cfdeb93b2160d21816b59c4
SHA512 fbf277a37fe8a214b4fde6ce5d9994f55f7c42cc59eb0f855ae540c6317163a7a729b8326ff2125a9241244658a3a4d853b8c4ea9cd315dacbd6ec67bf62ed09
SSDEEP 12288:hvhS4iOAZRC3E+L6IR+KVDh4WKpUHg5XuuZKlEGq8H9WN/4r2fi7OBzDp:hZS4nAZRMUKJhEpSg5XlhGq8HQNQifio
TLSH
T1F0F45C5149CE40E2F5C51AB328FBF75A25B2377295708EDBC2A8AD4DD3643E242C391E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

647170

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

HPSmartclbl.zip

HPReport.exe

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

gdiplus

oleacc

imm32

winmm

generic

HPSmart.exe

PE Signature issue

msimg32

comctl32

shlwapi

psapi

oleacc

gdiplus

imm32

winmm

kernel32

user32

gdi32

winspool.drv

comdlg32

advapi32

shell32

ole32

oleaut32

version

setupapi

ws2_32

secur32

iphlpapi

generic

InstanceFinderDlg.dat

InstanceFinderDlgUI.dll

kernel32

generic