Downloads.rar
- SHA256 50b46544cc687f8c315618d7bcd1c1f25c28a6c5c762f65a4dd902b9546ac40f
Overview
overview
7Static
static
3HaronVisua....4.jar
windows11-ltsc_2024-x64
1JLab.Deskt...up.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...dl.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...nu.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...gs.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...ls.dll
windows11-ltsc_2024-x64
3jlab-desktop.exe
windows11-ltsc_2024-x64
6Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
HaronVisuals 1.21.4.jar
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
JLab.Desktop_0.5.5_x64-setup.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
14 signatures
150 seconds
Behavioral task
behavioral3
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral6
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral7
Sample
$PLUGINSDIR/nsis_tauri_utils.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral8
Sample
jlab-desktop.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
9 signatures
150 seconds
General
- Target Downloads.rar
- Size 13.9MB
- Sample260724-nkbsrayekf
- SHA256 50b46544cc687f8c315618d7bcd1c1f25c28a6c5c762f65a4dd902b9546ac40f
- MD5 60304b217cdcf7d128a5250a512cc529
- SHA1 eb60208916bc53fce554a0a7b6b10936e608fdba
- SHA512 35ccc63ecaabe68921b9dc601cac1f086bb92a646718b4c4bf978bc5e530953333893b69de0bca9a51489720cd89466577124d326cc25fe58b9e1eeb9b20fcaa
- SSDEEP 393216:tgZRpFjpEXEDcZcx9EHjt+c/I7GgmCNhSagZawud6IFzpmN5:tgZRO0DgcxSEe4mvvaxpFVO
- TLSH T1D2E633DF5B08B8A0AD2222AD5BFC951D0619B17CD9E60E72316F76F6F04F3608274B25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned JAR 1 IoCs
Checks for missing JAR codesign signature.
resource unpack001/HaronVisuals 1.21.4.jar - Unsigned PE 7 IoCs
Checks for missing Authenticode signature.
resource unpack001/JLab.Desktop_0.5.5_x64-setup.exe unpack002/$PLUGINSDIR/NSISdl.dll unpack002/$PLUGINSDIR/StartMenu.dll unpack002/$PLUGINSDIR/System.dll unpack002/$PLUGINSDIR/nsDialogs.dll unpack002/$PLUGINSDIR/nsis_tauri_utils.dll unpack002/jlab-desktop.exe
File Explorer
-
Downloads.rar.rar 13.9MB
-
HaronVisuals 1.21.4.jar.jar 12.0MB
-
JLab.Desktop_0.5.5_x64-setup.exe.exe 2.3MB
-
$PLUGINSDIR/NSISdl.dll.dll 15KB
-
$PLUGINSDIR/StartMenu.dll.dll 7KB
-
$PLUGINSDIR/System.dll.dll 12KB
-
$PLUGINSDIR/modern-wizard.bmp25KB
-
$PLUGINSDIR/nsDialogs.dll.dll 9KB
-
$PLUGINSDIR/nsis_tauri_utils.dll.dll 33KB
-
jlab-desktop.exe.exe 5.7MB
HaronVisuals 1.21.4.jar
- SHA256 7b30c1514552782b9c7d8f8c967c8b848cff513b889ad87c847662ff639f43b4
- MD5 3d0e90ccb0d66790232193d8d2e49487
- SHA1 49252ac7c280f1ce88bd4d9870b02b0d768552f7
- SHA512 5189d5a18d79ebba4bfedb14ede887cd91362f3322203d7714b7331262ff42f00b12c15218f76b57bd527078b835b0d45d52a1e21acc721fc4b4fc44405a6ba6
- SSDEEP 196608:dIoAGyGFHJoH6mHxzmsCQkjNWOr2ur7KL/jGsJS1933tWg2HxZ:dX/yyoHbRzmsCf4Q2os/jGoSD9W1RZ
- TLSH T10EC63368795C407ED48B8338C40188E6372B220E854B365F69B04A6F8DFED6F5B17F96
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned JAR
Checks for missing JAR codesign signature.
JLab.Desktop_0.5.5_x64-setup.exe
- IMPHASH 46ce5c12b293febbeb513b196aa7f843
- SHA256 97b7c8923497f285179c2dfbbef8842c7359b6bc7505e71d219ce7c2dac3bb53
- MD5 d233910c64d2e904879e6f1372792565
- SHA1 b31a44b88e74c69f1921d896a5a5b61f7560072e
- SHA512 b2ccefc0900b0e832b831deac53a71f43717dd8e01242e6fc454459556b806ebb9e820f96a77fc6c086fc8c5e2b982f7c90ebc09a68e9dc1517c6b8106c18cec
- SSDEEP 49152:myaWz5OaSSTDCSCpnKEemATAAgoVIGJBior2ccfrV9K4gGps2qD8:myaWz5O7A3snK7VlJBYcSamsH8
- TLSH T14CB5337AA991C57BC83715348ADB28413DF5F464C60F074CBA246FDD293B624CA3CAE9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
13983
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
advapi32
RegEnumValueW
RegEnumKeyW
RegQueryValueExW
RegSetValueExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegOpenKeyExW
RegCreateKeyExW
shell32
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetFileInfoW
SHFileOperationW
ShellExecuteExW
ole32
CoCreateInstance
OleUninitialize
OleInitialize
IIDFromString
CoTaskMemFree
comctl32
ImageList_Destroy
ord17
ImageList_AddMasked
ImageList_Create
user32
MessageBoxIndirectW
GetDlgItemTextW
SetDlgItemTextW
CreatePopupMenu
AppendMenuW
TrackPopupMenu
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
IsWindowVisible
CallWindowProcW
GetMessagePos
CheckDlgButton
LoadCursorW
SetCursor
GetSysColor
SetWindowPos
GetWindowLongW
IsWindowEnabled
SetClassLongW
GetSystemMenu
EnableMenuItem
GetWindowRect
ScreenToClient
EndDialog
RegisterClassW
SystemParametersInfoW
CharPrevW
GetClassInfoW
DialogBoxParamW
CharNextW
ExitWindowsEx
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
FindWindowExW
IsWindow
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
ReleaseDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
EndPaint
CharNextA
wsprintfA
DispatchMessageW
CreateWindowExW
PeekMessageW
GetSystemMetrics
gdi32
GetDeviceCaps
SetBkColor
SelectObject
DeleteObject
CreateBrushIndirect
CreateFontIndirectW
SetBkMode
SetTextColor
kernel32
RemoveDirectoryW
lstrcmpiA
GetTempFileNameW
CreateProcessW
CreateDirectoryW
CreateThread
GlobalLock
GlobalUnlock
GetDiskFreeSpaceW
WideCharToMultiByte
lstrcpynW
lstrlenW
SetErrorMode
GetVersionExW
GetCommandLineW
GetTempPathW
GetWindowsDirectoryW
SetEnvironmentVariableW
CopyFileW
WriteFile
GetCurrentProcess
GetModuleFileNameW
GetLastError
GetFileSize
CreateFileW
GetTickCount
Sleep
SetFileAttributesW
GetFileAttributesW
SetCurrentDirectoryW
MoveFileW
GetFullPathNameW
GetShortPathNameW
SearchPathW
CompareFileTime
SetFileTime
CloseHandle
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalFree
GlobalAlloc
GetModuleHandleW
LoadLibraryExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
lstrlenA
MultiByteToWideChar
ReadFile
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW
MulDiv
lstrcpyA
MoveFileExW
lstrcatW
GetSystemDirectoryW
GetProcAddress
GetModuleHandleA
GetExitCodeProcess
WaitForSingleObject
ExitProcess
Name
.text
Size
26KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
126KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.ndata
Size
Virtual Size
184KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
51KB
Virtual Size
50KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=2, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=163, id=1, productName=Unmarked objects,
count=15, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=10, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
$PLUGINSDIR/NSISdl.dll
- IMPHASH db80d5e142e716e818b7f4614dcade3c
- SHA256 ddf40229dd9d6b268902d8dea88c8a04aacf1af218dd29f6dcd35babc54ac08d
- MD5 8eabbe36e8b52e69322780d0f541fd19
- SHA1 e5fa3eca8d2035e4fa006b7123c348348e4e6de4
- SHA512 4189fabff409be4bc7a8e81be58fb18e32398e4ef4c01a70cf823d79e76f47c4681734808fd61db8728c73d2bcad890b09aa09d5a0f0b0c3ad581be1beaf9ce7
- SSDEEP 384:jrSQMCOUILnCaSPy/yhJzmGSMRWyOUKie:jrSQMCOp0yamMRWysie
- TLSH T17B623C16B62084F5DBB2167034D73B3E6BB28F6A1A2848C34BF35C4E9E52307B675D85
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
9321
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
wsock32
WSAStartup
WSACleanup
send
WSAGetLastError
recv
select
__WSAFDIsSet
connect
shutdown
closesocket
socket
htons
inet_ntoa
ioctlsocket
gethostbyname
user32
CharPrevA
SetWindowLongW
RegisterWindowMessageW
CallWindowProcW
DestroyWindow
EnableWindow
SetDlgItemTextA
CreateWindowExW
GetWindowRect
GetClientRect
ShowWindow
IsWindowVisible
GetFocus
GetDlgItem
FindWindowExW
SetWindowTextA
SendMessageW
wsprintfA
GetWindowLongW
kernel32
MultiByteToWideChar
WideCharToMultiByte
lstrcpynW
lstrcpyW
CreateFileW
WriteFile
Sleep
DeleteFileW
GetTickCount
MulDiv
GlobalFree
GlobalAlloc
lstrcatA
lstrlenA
lstrcpynA
WaitForSingleObject
CloseHandle
lstrcmpiA
lstrcpyA
CreateThread
download
download_quiet
Name
.text
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1024B
Virtual Size
896B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=4, id=14, version=7299,
count=59, id=1, productName=Unmarked objects,
count=9, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=48, version=9044,
count=5, id=49, version=9044,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
$PLUGINSDIR/StartMenu.dll
- IMPHASH 646971a3aef724d6f553f40ae84fe26b
- SHA256 fe330320459637d8dd2b5d84d07925c38ec264152ffd3b1760a4d44d76536caa
- MD5 b9b71990b37e04a56cadbcbfa694f30f
- SHA1 3b7627deb793446d6b12b7b94266cc592982a5c2
- SHA512 b4aa947aba471ce0ba37ab859391f6a157887c882c920a3081d482f63a83317ae75b428ebae226f835798517abb676114ee42bf13bd4c4291cebbb5e9658f2e5
- SSDEEP 96:VIt3J2Gl0eVe0+Cfo0UkXt6+o69UiGdPh5/utta/x3lkCTcaqHCI:ShE+A0+sF6piUFkA1lncviI
- TLSH T1FFF1C776F3D20673F9AB427428632F231B2AF521576581A7890316CE7A61DE3FD34B11
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
6430
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetModuleHandleW
lstrcatW
FindClose
FindNextFileW
lstrcmpW
MulDiv
GlobalFree
lstrcpynW
GlobalAlloc
lstrcmpiW
FindFirstFileW
lstrcpyW
user32
TranslateMessage
GetMessageW
IsDialogMessageW
DispatchMessageW
CallWindowProcW
GetWindowLongW
CheckDlgButton
ShowWindow
LoadIconW
GetClientRect
MoveWindow
ScreenToClient
GetWindowRect
ReleaseDC
GetDC
EnableWindow
SetWindowTextW
SendMessageW
IsDlgButtonChecked
GetWindowTextW
DestroyWindow
GetDlgItem
CreateDialogParamW
SetWindowLongW
wsprintfW
PostMessageW
gdi32
GetTextMetricsW
SelectObject
shell32
SHGetSpecialFolderLocation
SHGetPathFromIDListW
ole32
CoTaskMemFree
Init
Select
Show
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
296B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
578B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=45, id=1, productName=Unmarked objects,
count=11, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=2, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
$PLUGINSDIR/System.dll
- IMPHASH 509a34b3a68a773e0afb4259e68f9f82
- SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
- MD5 9b38a1b07a0ebc5c7e59e63346ecc2db
- SHA1 97332a2ffcf12a3e3f27e7c05213b5d7faa13735
- SHA512 26e77f8e10f6d8693c92bd036b53a3f6e0c523090ef8dfe479815f556ecd2b57fc90ce9f7cceebe70460d464decb27ad1fe240819fd56997764e96506b6a439c
- SSDEEP 192:kjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZ40QPi:U/Qlt7wiij/lMRv/9V4b4r
- TLSH T1E8427C1297B089F2F151093419667F2A6FBEAC5D17F405A3CFE304C63D212CB9839243
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10879
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GlobalAlloc
GlobalFree
GlobalSize
lstrcpynW
lstrcpyW
GetProcAddress
WideCharToMultiByte
VirtualFree
FreeLibrary
lstrlenW
LoadLibraryW
GetModuleHandleW
MultiByteToWideChar
VirtualAlloc
VirtualProtect
GetLastError
user32
wsprintfW
ole32
StringFromGUID2
CLSIDFromString
Alloc
Call
Copy
Free
Get
Int64Op
Store
StrAlloc
Name
.text
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
867B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
120B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1024B
Virtual Size
662B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=7, id=14, version=7299,
count=20, id=1, productName=Unmarked objects,
count=7, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=4, id=48, version=9044,
count=1, id=42, version=8803,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
$PLUGINSDIR/modern-wizard.bmp
- SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
- MD5 cbe40fd2b1ec96daedc65da172d90022
- SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
- SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
- SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
- TLSH T139C29757DE6B6EA4BE0804EF1A0694931C71FE211AB0CD0561D2B767B4FC93B19A0B3C
- MD5 SHA1 SHA512 SSDEEP TLSH
$PLUGINSDIR/nsDialogs.dll
- IMPHASH 3b477381217c97b22146297f93df2a92
- SHA256 b1350f487692057c8ffde75dcc55287a52a3272240d4d4912f24464b27551fc0
- MD5 8f0e7415f33843431df308bb8e06af81
- SHA1 1314272e6ad3be1985d4a1607b890a34b0bde8b5
- SHA512 5450b2070c40b257c28ba9a472d762f91b78928d1e8d4d88e0576992065a61fb9a6513006e6b5947c415c9e02ae80a90a85b58da7e016a424331c8cd596ed684
- SSDEEP 96:obEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YHNqkzfFc:obEvCu5e81785qHFcU0PuAw0uytIFc
- TLSH T19D12F892E2A454B3C5D6523B36AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
7527
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
lstrcpyW
GetFileAttributesW
lstrcmpiW
MulDiv
lstrlenW
HeapFree
GetProcessHeap
GetCurrentDirectoryW
HeapReAlloc
GlobalFree
lstrcpynW
GlobalAlloc
HeapAlloc
SetCurrentDirectoryW
user32
GetPropW
DestroyWindow
CallWindowProcW
SetCursor
LoadCursorW
RemovePropW
CharPrevW
GetWindowLongW
DrawTextW
GetWindowTextW
SetWindowLongW
GetDlgItem
GetSysColor
SetWindowPos
CreateDialogParamW
MapWindowPoints
GetWindowRect
SetPropW
CreateWindowExW
IsWindow
SetTimer
KillTimer
DispatchMessageW
TranslateMessage
GetMessageW
IsDialogMessageW
ShowWindow
wsprintfW
MapDialogRect
GetClientRect
CharNextW
SendMessageW
DrawFocusRect
gdi32
SetTextColor
shell32
SHBrowseForFolderW
SHGetPathFromIDListW
comdlg32
GetSaveFileNameW
GetOpenFileNameW
CommDlgExtendedError
ole32
CoTaskMemFree
Create
CreateControl
CreateItem
CreateTimer
GetUserData
KillTimer
OnBack
OnChange
OnClick
OnNotify
SelectFileDialog
SelectFolderDialog
SetRTL
SetUserData
Show
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
152B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
638B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=56, id=1, productName=Unmarked objects,
count=13, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=5, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
$PLUGINSDIR/nsis_tauri_utils.dll
- IMPHASH 2030931b38a854dde8cdd69245a8096a
- SHA256 5ba143b5db4a87d32d6e7802e033330aae56cbceabe0d1e3ba41948385ad4709
- MD5 948eaa3cb78c2dcdd9eb1ab120ae0f65
- SHA1 75197fee3c6a814fe035788d1c34ead39349b860
- SHA512 f7c511e8c73ef6ee9b72c88cd73b2d454a6ffc12144118df2276ea3f5c34175df0d9d15a435035575ca2b171789fe348d7a9028b702b47dda749ee17e03ae7c1
- SSDEEP 768:K/wOD4gzTVpAVk2h5Rsekk55aCukBFKpnp0jdhK7W+qVG:8wODZzTrAV5Oevq4DtXHVG
- TLSH T188F24A48FDC57EBAE2CF05710809467E4A6FC8081700C96BE3722EA3D5A67329ED525F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
nsis_tauri_utils.pdb
kernel32
GetCurrentProcess
GetLastError
GlobalFree
CloseHandle
TerminateProcess
ExitProcess
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
OpenProcess
GetCurrentProcessId
HeapFree
GetProcessHeap
HeapAlloc
HeapReAlloc
GlobalAlloc
lstrcpyW
advapi32
EqualSid
LookupPrivilegeValueW
CreateProcessWithTokenW
DuplicateTokenEx
OpenProcessToken
GetTokenInformation
AdjustTokenPrivileges
user32
GetShellWindow
GetWindowThreadProcessId
shell32
ShellExecuteW
DllMain
FindProcess
FindProcessCurrentUser
KillProcess
KillProcessCurrentUser
RunAsUser
SemverCompare
StrReplace
memcmp
memcpy
memset
Name
.text
Size
17KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
8B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
384B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=27, id=1, productName=Unmarked objects,
count=13, productName=Unmarked objects (old),
count=1, id=256, version=35222,
count=1, id=258, version=35222,
jlab-desktop.exe
- IMPHASH 6a53fcfad7dc36e7b781fb9117b46803
- SHA256 7fd745a45e5ba79def5cbc98f614af83fedd65fcdcfd60681e79c1b48c9d9311
- MD5 4240bff8571cb3c93d48b9dde4c29095
- SHA1 98d9575a20c94c9d9cec9d8a998e023c38de2543
- SHA512 287dee0fc8a71a3bcbd749f334c37b5788dbaa14f8937eb6842163664ee2f8422c73caea91c0ed7927ced69c4fabc7d9f4673d13b6c95edab7fc2236fce19554
- SSDEEP 98304:wOX4SSx7TqItUGt+A6C9bZEAXs0eJ8c8n+9Ha:Ev72I/TioeHa
- TLSH T143566C03F1A180ECC06EC5B9C35AA637EB32B88D493472AF5BE45B212E65F506F1D749
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
4290216
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
jlab_desktop.pdb
bcryptprimitives
ProcessPrng
ntdll
NtWriteFile
NtCancelIoFileEx
RtlNtStatusToDosError
NtCreateNamedPipeFile
NtDeviceIoControlFile
NtCreateFile
RtlGetVersion
NtOpenFile
NtReadFile
kernel32
ReleaseMutex
CopyFileExW
GetFullPathNameW
SetLastError
GetSystemTimePreciseAsFileTime
GetCurrentThreadId
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
GetSystemTimeAsFileTime
IsDebuggerPresent
LCIDToLocaleName
GetUserDefaultUILanguage
LoadLibraryA
IsProcessorFeaturePresent
TerminateProcess
RtlPcToFileHeader
RaiseException
EncodePointer
GetModuleHandleW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InitializeSListHead
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlUnwindEx
FindClose
ReleaseSemaphore
SwitchToThread
LoadLibraryW
WaitForSingleObjectEx
GetFileInformationByHandleEx
GetFileInformationByHandle
lstrlenW
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
GetCommandLineW
RtlLookupFunctionEntry
GetCurrentProcess
GetCurrentProcessId
WideCharToMultiByte
WaitForSingleObject
MultiByteToWideChar
HeapAlloc
SleepEx
FormatMessageW
SetHandleInformation
SetFileTime
SetFileInformationByHandle
GetFinalPathNameByHandleW
ExitProcess
CompareStringOrdinal
GetSystemDirectoryW
GetWindowsDirectoryW
GetFileAttributesW
GetModuleFileNameW
DuplicateHandle
GetTempPathW
DeleteFileW
MoveFileExW
SetWaitableTimer
FindNextFileW
SetFilePointerEx
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
QueryPerformanceFrequency
GetEnvironmentVariableW
GetCurrentDirectoryW
RtlVirtualUnwind
RtlCaptureContext
SetEnvironmentVariableW
HeapReAlloc
HeapFree
AddVectoredExceptionHandler
CreateWaitableTimerExW
CreateProcessW
CreateDirectoryW
CreateThread
WriteFileEx
ReadFileEx
WriteConsoleW
GetConsoleOutputCP
GetConsoleMode
GetStdHandle
CreateMutexA
SetNamedPipeHandleState
CancelIo
ReadDirectoryChangesW
CreateFileW
CancelIoEx
CreateIoCompletionPort
GetQueuedCompletionStatusEx
GetProcessHeap
ReadFile
PostQueuedCompletionStatus
WriteFile
GetOverlappedResult
CreateMutexW
DeviceIoControl
InitializeCriticalSectionAndSpinCount
GetCurrentThread
CreateSemaphoreW
SetThreadStackGuarantee
FindFirstFileExW
GetModuleHandleA
Sleep
GetProcAddress
GetLastError
LoadLibraryExW
OutputDebugStringW
OutputDebugStringA
FreeLibrary
LoadLibraryExA
CloseHandle
GetSystemInfo
DeleteCriticalSection
SetFileCompletionNotificationModes
advapi32
RegSetValueExW
RegQueryValueExW
RegDeleteValueW
RegOpenKeyExW
SystemFunction036
EventSetInformation
RegGetValueW
EventUnregister
EventWriteTransfer
RegCloseKey
RegCreateKeyExW
EventRegister
shell32
SHOpenFolderAndSelectItems
ILFree
SHCreateItemFromParsingName
ILCreateFromPathW
ShellExecuteExW
DragFinish
Shell_NotifyIconGetRect
SHGetKnownFolderPath
SHAppBarMessage
Shell_NotifyIconW
SetCurrentProcessExplicitAppUserModelID
ShellExecuteW
DragQueryFileW
ole32
RegisterDragDrop
CoCreateFreeThreadedMarshaler
CoInitializeEx
CoTaskMemFree
CoUninitialize
CoIncrementMTAUsage
CoCreateInstance
OleInitialize
CoInitialize
CoTaskMemAlloc
RevokeDragDrop
api-ms-win-core-synch-l1-2-0
WakeByAddressSingle
WakeByAddressAll
WaitOnAddress
user32
SetFocus
GetKeyboardState
GetWindow
IsIconic
SetWindowTextW
IsWindowEnabled
GetWindowTextW
GetWindowTextLengthW
SetWindowDisplayAffinity
MonitorFromRect
MonitorFromPoint
EnumDisplayMonitors
AdjustWindowRect
RedrawWindow
PostMessageW
IsWindow
ToUnicodeEx
GetWindowLongPtrW
SetParent
MapVirtualKeyExW
GetKeyboardLayout
ClipCursor
GetSystemMetrics
SetCapture
GetClipCursor
ShowCursor
SystemParametersInfoW
RegisterClassExW
CreateWindowExW
FlashWindowEx
GetTouchInputInfo
SetWindowLongW
GetSystemMenu
ScreenToClient
GetMonitorInfoW
SetWindowPos
GetMessageA
TranslateMessage
DispatchMessageA
EnumChildWindows
SetTimer
GetWindowPlacement
SetWindowPlacement
ChangeDisplaySettingsExW
RegisterRawInputDevices
AdjustWindowRectEx
GetMenu
GetWindowLongW
InvalidateRgn
ReleaseCapture
GetKeyState
GetParent
RegisterWindowMessageA
KillTimer
GetForegroundWindow
CloseTouchInputHandle
IsProcessDPIAware
MonitorFromWindow
TrackPopupMenu
EnableWindow
ClientToScreen
TrackMouseEvent
GetCursorPos
EnableMenuItem
DrawIconEx
GetDC
VkKeyScanW
AppendMenuW
InsertMenuW
SendInput
CheckMenuItem
DrawTextW
ReleaseDC
FillRect
GetWindowDC
OffsetRect
GetWindowRect
MapWindowPoints
GetClientRect
GetMenuBarInfo
ShowWindow
PostQuitMessage
SystemParametersInfoA
GetActiveWindow
SetMenu
RemoveMenu
CreateIcon
SetMenuItemInfoW
DrawMenuBar
CreatePopupMenu
CreateMenu
CreateAcceleratorTableW
DestroyAcceleratorTable
DestroyIcon
DestroyMenu
LoadCursorW
DefWindowProcW
FindWindowW
SetCursor
SetWindowRgn
SetPropW
SetCursorPos
GetAsyncKeyState
FindWindowExW
TranslateAcceleratorW
MsgWaitForMultipleObjectsEx
MapVirtualKeyW
GetUpdateRect
PeekMessageW
PostThreadMessageW
ValidateRect
GetRawInputData
GetMenuItemInfoW
SendMessageW
ChangeWindowMessageFilterEx
RegisterClassW
SetWindowLongPtrW
InvalidateRect
DispatchMessageW
GetMessageW
SetForegroundWindow
DestroyWindow
IsWindowVisible
UpdateWindow
RegisterTouchWindow
comctl32
TaskDialogIndirect
RemoveWindowSubclass
SetWindowSubclass
DefSubclassProc
oleaut32
GetErrorInfo
SysStringLen
SetErrorInfo
SysFreeString
shlwapi
SHCreateMemStream
dwmapi
DwmGetWindowAttribute
DwmSetWindowAttribute
DwmEnableBlurBehindWindow
gdi32
DeleteObject
DeleteDC
CreateDIBSection
GetDeviceCaps
CreateRectRgn
CreateSolidBrush
CreateCompatibleDC
SetTextColor
BitBlt
SetBkMode
SelectObject
CombineRgn
api-ms-win-core-winrt-l1-1-0
RoGetActivationFactory
ws2_32
shutdown
send
freeaddrinfo
getaddrinfo
WSACleanup
WSAStartup
setsockopt
bind
WSASend
connect
ioctlsocket
WSASocketW
recv
closesocket
WSAIoctl
getsockname
WSAGetLastError
getpeername
getsockopt
bcrypt
BCryptGenRandom
api-ms-win-crt-string-l1-1-0
strlen
strcpy_s
wcscmp
_wcsicmp
strcmp
wcslen
wcsncmp
api-ms-win-crt-math-l1-1-0
fmod
pow
__setusermatherr
round
trunc
roundf
floor
api-ms-win-crt-convert-l1-1-0
_wtoi
_ultow_s
wcstol
api-ms-win-crt-runtime-l1-1-0
_exit
exit
_initialize_onexit_table
_register_onexit_function
_configure_narrow_argv
abort
_initialize_narrow_environment
_initterm
_crt_atexit
_register_thread_local_exe_atexit_callback
_seh_filter_exe
_c_exit
_cexit
__p___argv
_set_app_type
__p___argc
terminate
_initterm_e
_get_initial_narrow_environment
api-ms-win-crt-stdio-l1-1-0
_set_fmode
__p__commode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-heap-l1-1-0
_callnewh
free
calloc
malloc
_set_new_mode
Name
.text
Size
4.2MB
Virtual Size
4.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1.3MB
Virtual Size
1.3MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
95KB
Virtual Size
94KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
48KB
Virtual Size
47KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
21KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=14, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=9, id=259, version=35207,
count=13, id=260, version=35207,
count=47, id=261, version=35207,
count=12, id=260, version=35226,
count=396, id=1, productName=Unmarked objects,
count=70, productName=Unmarked objects (old),
count=1, id=255, version=35227,
count=1, id=258, version=35227,