Main Setup.zip
- SHA256 0a9228a6220d19642e38d82923ac3cc03954a68852e82225e69d251e580ee944
Overview
overview
5Static
static
5Setup.exe
windows10-2004-x64
5Setup.exe
windows10-ltsc_2021-x64
5Setup.exe
windows11-21h2-x64
5dfrqwqxjx.dll
windows10-2004-x64
3dfrqwqxjx.dll
windows10-ltsc_2021-x64
3dfrqwqxjx.dll
windows11-21h2-x64
3libvlc.dll
windows10-2004-x64
3libvlc.dll
windows10-ltsc_2021-x64
3libvlc.dll
windows11-21h2-x64
3libvlccore.dll
windows10-2004-x64
5libvlccore.dll
windows10-ltsc_2021-x64
5libvlccore.dll
windows11-21h2-x64
5vcruntime140.dll
windows10-2004-x64
3vcruntime140.dll
windows10-ltsc_2021-x64
3vcruntime140.dll
windows11-21h2-x64
3Static task
static1
Behavioral task
behavioral1
Sample
Setup.exe
Resource
win10v2004-20250619-es
Behavioral task
behavioral2
Sample
Setup.exe
Resource
win10ltsc2021-20260130-es
Behavioral task
behavioral3
Sample
Setup.exe
Resource
win11-20260130-es
Behavioral task
behavioral4
Sample
dfrqwqxjx.dll
Resource
win10v2004-20260130-es
Behavioral task
behavioral5
Sample
dfrqwqxjx.dll
Resource
win10ltsc2021-20260130-es
Behavioral task
behavioral6
Sample
dfrqwqxjx.dll
Resource
win11-20260130-es
Behavioral task
behavioral7
Sample
libvlc.dll
Resource
win10v2004-20260130-es
Behavioral task
behavioral8
Sample
libvlc.dll
Resource
win10ltsc2021-20260130-es
Behavioral task
behavioral9
Sample
libvlc.dll
Resource
win11-20260130-es
Behavioral task
behavioral10
Sample
libvlccore.dll
Resource
win10v2004-20250619-es
Behavioral task
behavioral11
Sample
libvlccore.dll
Resource
win10ltsc2021-20260126-es
Behavioral task
behavioral12
Sample
libvlccore.dll
Resource
win11-20250610-es
Behavioral task
behavioral13
Sample
vcruntime140.dll
Resource
win10v2004-20260130-es
Behavioral task
behavioral14
Sample
vcruntime140.dll
Resource
win10ltsc2021-20260130-es
Behavioral task
behavioral15
Sample
vcruntime140.dll
Resource
win11-20260130-es
File was altered after it was signed.
| resource |
|---|
| unpack001/libvlccore.dll |
Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.
| resource |
|---|
| unpack001/libvlccore.dll |
Dec 31, 2025
CN=VideoLAN,O=VideoLAN,L=Paris,C=FR
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Dec 31, 2025
CN=VideoLAN,O=VideoLAN,L=Paris,C=FR
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Dec 31, 2025
CN=VideoLAN,O=VideoLAN,L=Paris,C=FR
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Dec 31, 2025
CN=VideoLAN,O=VideoLAN,L=Paris,C=FR
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Dec 31, 2025
CN=VideoLAN,O=VideoLAN,L=Paris,C=FR
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Dec 31, 2025
CN=VideoLAN,O=VideoLAN,L=Paris,C=FR
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Codesign digest Mismatch
File was altered after it was signed.
DLL Hijacking vulnerability
Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.
Mar 16, 2026
CN=TeamViewer Germany GmbH,O=TeamViewer Germany GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=TeamViewer Germany GmbH,O=TeamViewer Germany GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=TeamViewer Germany GmbH,O=TeamViewer Germany GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Jun 10, 2016
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Jun 10, 2016
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=2, id=203, version=65501,
count=11, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=40, id=1, productName=Unmarked objects,
count=16, id=260, version=24123,
count=19, id=259, version=24123,
count=4, id=261, version=24123,
count=24, id=264, version=24123,
count=1, id=256, version=24123,
count=1, id=255, version=24123,
count=1, id=258, version=24123,