Setup (1).zip
- SHA256 641ae0ac2321e65cc75014caa6b7d26a3562253320ae9615a835026e0e0c52c3
Overview
overview
8Static
static
5Launcher.exe
windows10-2004-x64
7Qt5Core.dll
windows10-2004-x64
3Qt5Core.dll
windows11-ltsc_2024-x64
3Setup.exe
windows10-2004-x64
5Setup.exe
windows11-ltsc_2024-x64
5bin/Setup 2.exe
windows10-2004-x64
5bin/Setup 2.exe
windows11-ltsc_2024-x64
5mpclient.dll
windows10-2004-x64
8mpclient.dll
windows11-ltsc_2024-x64
8msvcr120.dll
windows10-2004-x64
3msvcr120.dll
windows11-ltsc_2024-x64
3opengl32sw.dll
windows10-2004-x64
3opengl32sw.dll
windows11-ltsc_2024-x64
3Static task
static1
Behavioral task
behavioral1
Sample
Launcher.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Qt5Core.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral3
Sample
Qt5Core.dll
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral4
Sample
Setup.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral5
Sample
Setup.exe
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral6
Sample
bin/Setup 2.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral7
Sample
bin/Setup 2.exe
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral8
Sample
mpclient.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral9
Sample
mpclient.dll
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral10
Sample
msvcr120.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral11
Sample
msvcr120.dll
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral12
Sample
opengl32sw.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral13
Sample
opengl32sw.dll
Resource
win11ltsc2024-20260618-en
File was altered after it was signed.
| resource |
|---|
| unpack001/Qt5Core.dll |
Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.
| resource |
|---|
| unpack001/mpclient.dll |
File was codesigned using an insecure algorithm.
| resource |
|---|
| unpack001/opengl32sw.dll |
Codesigned file was signed by an untrusted entity.
| resource |
|---|
| unpack001/Setup.exe |
| unpack001/bin/Setup 2.exe |
| unpack001/mpclient.dll |
Nov 6, 2023
CN=Microsoft Windows Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=37, id=260, version=32595,
count=229, id=261, version=32595,
count=23, id=259, version=32595,
count=31, id=257, version=32595,
count=434, id=1, productName=Unmarked objects,
count=10, id=126, version=50727,
count=175, id=265, version=32595,
count=1, id=255, version=32595,
count=1, id=258, version=32595,
Codesign digest Mismatch
File was altered after it was signed.
Sep 9, 2019
CN=Artem Shevchenko,O=Artem Shevchenko,POSTALCODE=04050,STREET=Melnikova st. 15\, 5 apt.,L=Kiev,ST=Kiev,C=UA
CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
count=6, id=199, version=41118,
count=14, id=223, productName=VS2013 build 21005, version=21005,
count=14, id=224, productName=VS2013 build 21005, version=21005,
count=4, id=221, productName=VS2013 build 21005, version=21005,
count=8, id=225, productName=VS2013 build 21005, version=21005,
count=2, id=206, version=65501,
count=1, id=208, version=65501,
count=15, id=203, version=65501,
count=295, id=1, productName=Unmarked objects,
count=38, id=224, productName=VS2013 UPD5 build 40629, version=40629,
count=262, id=225, productName=VS2013 UPD5 build 40629, version=40629,
count=1, id=220, productName=VS2013 UPD5 build 40629, version=40629,
count=1, id=219, productName=VS2013 build 21005, version=21005,
count=1, id=151,
count=1, id=222, productName=VS2013 UPD5 build 40629, version=40629,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jun 21, 2026
CN=Event Log File Editor,OU=Development,O=SandWood Gate Digital Inc.,L=Austin,ST=TX,C=US
Jun 21, 2026
CN=Event Log File Editor,OU=Development,O=SandWood Gate Digital Inc.,L=Austin,ST=TX,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jun 21, 2026
CN=Crash Dump Inventory,OU=Software Publishing,O=RedCrest Technologies Inc.,L=Munich,C=DE
Jun 21, 2026
CN=Crash Dump Inventory,OU=Software Publishing,O=RedCrest Technologies Inc.,L=Munich,C=DE
DLL Hijacking vulnerability
Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jun 22, 2026
CN=grind.su,O=4vwXvu1W35vbc0,L=i0VYOLe,ST=oqCCb0L,C=US
Oct 5, 2013
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Oct 5, 2013
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=3, id=203, version=65501,
count=176, id=1, productName=Unmarked objects,
count=686, id=224, version=20806,
count=97, id=223, version=20806,
count=54, id=229, version=20806,
count=184, id=225, version=20806,
count=1, id=220, version=20806,
count=1, id=219, version=20806,
count=1, id=222, version=20806,
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Sep 9, 2019
CN=Artem Shevchenko,O=Artem Shevchenko,POSTALCODE=04050,STREET=Melnikova st. 15\, 5 apt.,L=Kiev,ST=Kiev,C=UA
CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
count=9, id=199, version=41118,
count=63, id=207, version=50929,
count=72, id=205, version=50929,
count=179, id=206, version=50929,
count=13, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=172, id=1, productName=Unmarked objects,
count=7, id=206, productName=VS2012 UPD4 build 61030, version=61030,
count=439, id=207, productName=VS2012 UPD4 build 61030, version=61030,
count=508, id=210, version=61030,
count=1, id=202, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=204, productName=VS2012 UPD4 build 61030, version=61030,