SETUP.zip
- SHA256 1f641efb2dd89c1651c95fd111bb41bc3df0a14d1aeec0703caf2d1cfbcfdbba
Overview
overview
5Static
static
5X64/cached...t.html
windows10-2004-x64
4X64/cached...t.html
windows11-21h2-x64
4X64/cached...n.html
windows10-2004-x64
4X64/cached...n.html
windows11-21h2-x64
4X64/cached...n.html
windows10-2004-x64
4X64/cached...n.html
windows11-21h2-x64
4X64/cached...h.html
windows10-2004-x64
4X64/cached...h.html
windows11-21h2-x64
4X64/cached...h.html
windows10-2004-x64
4X64/cached...h.html
windows11-21h2-x64
4X64/cached...h.html
windows10-2004-x64
4X64/cached...h.html
windows11-21h2-x64
4X64/cached...h.html
windows10-2004-x64
4X64/cached...h.html
windows11-21h2-x64
4X64/cached...h.html
windows10-2004-x64
4X64/cached...h.html
windows11-21h2-x64
4X64/cached...h.html
windows10-2004-x64
4X64/cached...h.html
windows11-21h2-x64
4X64/cached...n.html
windows10-2004-x64
4X64/cached...n.html
windows11-21h2-x64
4X64/cached...k.html
windows10-2004-x64
4X64/cached...k.html
windows11-21h2-x64
4X64/cached...n.html
windows10-2004-x64
4X64/cached...n.html
windows11-21h2-x64
4X64/cached...n.html
windows10-2004-x64
3X64/cached...n.html
windows11-21h2-x64
4X64/cached...n.html
windows10-2004-x64
4X64/cached...n.html
windows11-21h2-x64
4X64/cached...e.html
windows10-2004-x64
4X64/cached...e.html
windows11-21h2-x64
4X64/cached...n.html
windows10-2004-x64
3X64/cached...n.html
windows11-21h2-x64
4Static task
static1
Behavioral task
behavioral1
Sample
X64/cached/PayPalReceipt.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
X64/cached/PayPalReceipt.html
Resource
win11-20260513-en
Behavioral task
behavioral3
Sample
X64/cached/offline_brazilian.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
X64/cached/offline_brazilian.html
Resource
win11-20260513-en
Behavioral task
behavioral5
Sample
X64/cached/offline_bulgarian.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
X64/cached/offline_bulgarian.html
Resource
win11-20260513-en
Behavioral task
behavioral7
Sample
X64/cached/offline_czech.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
X64/cached/offline_czech.html
Resource
win11-20260513-en
Behavioral task
behavioral9
Sample
X64/cached/offline_danish.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
X64/cached/offline_danish.html
Resource
win11-20260513-en
Behavioral task
behavioral11
Sample
X64/cached/offline_dutch.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
X64/cached/offline_dutch.html
Resource
win11-20260513-en
Behavioral task
behavioral13
Sample
X64/cached/offline_english.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
X64/cached/offline_english.html
Resource
win11-20260513-en
Behavioral task
behavioral15
Sample
X64/cached/offline_finnish.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
X64/cached/offline_finnish.html
Resource
win11-20260513-en
Behavioral task
behavioral17
Sample
X64/cached/offline_french.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
X64/cached/offline_french.html
Resource
win11-20260513-en
Behavioral task
behavioral19
Sample
X64/cached/offline_german.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
X64/cached/offline_german.html
Resource
win11-20260513-en
Behavioral task
behavioral21
Sample
X64/cached/offline_greek.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
X64/cached/offline_greek.html
Resource
win11-20260513-en
Behavioral task
behavioral23
Sample
X64/cached/offline_hungarian.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
X64/cached/offline_hungarian.html
Resource
win11-20260513-en
Behavioral task
behavioral25
Sample
X64/cached/offline_indonesian.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
X64/cached/offline_indonesian.html
Resource
win11-20260513-en
Behavioral task
behavioral27
Sample
X64/cached/offline_italian.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
X64/cached/offline_italian.html
Resource
win11-20260513-en
Behavioral task
behavioral29
Sample
X64/cached/offline_japanese.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
X64/cached/offline_japanese.html
Resource
win11-20260513-en
Behavioral task
behavioral31
Sample
X64/cached/offline_korean.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
X64/cached/offline_korean.html
Resource
win11-20260513-en
File was altered after it was signed.
| resource |
|---|
| unpack001/python37.dll |
Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.
| resource |
|---|
| unpack001/python37.dll |
Apr 28, 2026
CN=Valve Corp.,O=Valve Corp.,L=Bellevue,ST=Washington,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Valve Corp.,O=Valve Corp.,L=Bellevue,ST=Washington,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Jun 27, 2018
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=StartCom Class 3 Object CA,OU=StartCom Certification Authority,O=StartCom Ltd.,C=IL
CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, productName=VS2017 v15.6.6 build 26131, version=26131,
count=1, id=259, productName=VS2017 v15.6.6 build 26131, version=26131,
count=18, id=261, productName=VS2017 v15.6.6 build 26131, version=26131,
count=12, id=260, productName=VS2017 v15.6.6 build 26131, version=26131,
count=3, id=257, productName=VS2017 v15.7.4 build 26431, version=26431,
count=2, id=257, version=25203,
count=46, id=1, productName=Unmarked objects,
count=1, id=264, version=26431,
count=1, id=255, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=258, productName=VS2017 v15.7.4 build 26431, version=26431,
Oct 27, 2025
CN=Valve Corp.,O=Valve Corp.,L=Bellevue,ST=Washington,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Valve Corp.,O=Valve Corp.,L=Bellevue,ST=Washington,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Codesign digest Mismatch
File was altered after it was signed.
DLL Hijacking vulnerability
Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.
Oct 7, 2018
CN=Oracle America\, Inc.,OU=Software Engineering,O=Oracle America\, Inc.,L=Redwood City,ST=California,C=US
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
count=24, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, productName=VS2017 v15.6.6 build 26131, version=26131,
count=15, id=199, version=41118,
count=11, id=259, productName=VS2017 v15.6.6 build 26131, version=26131,
count=10, id=261, productName=VS2017 v15.6.6 build 26131, version=26131,
count=10, id=260, productName=VS2017 v15.6.6 build 26131, version=26131,
count=11, id=257, version=25203,
count=345, id=1, productName=Unmarked objects,
count=193, id=264, version=26431,
count=1, id=256, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=255, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=258, productName=VS2017 v15.7.4 build 26431, version=26431,
Jun 10, 2016
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Jun 10, 2016
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=2, id=203, version=65501,
count=11, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=40, id=1, productName=Unmarked objects,
count=16, id=260, version=24123,
count=19, id=259, version=24123,
count=4, id=261, version=24123,
count=24, id=264, version=24123,
count=1, id=256, version=24123,
count=1, id=255, version=24123,
count=1, id=258, version=24123,