activator[.]msi | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
activator.msi
Size 19.4MB
Sample260730-sa7jwsbc42
SHA256 cb77279bf1008421c06ed137b8c4988b4950406acba4c31d218ebe1aaa979565
MD5 d398725a292aeb301e72691ad3532123
SHA1 6a1788b0c710c324cfd6cc4b78ab24219aac03d5
SHA512 6c5f3ffcd2588bbb90886e9447e51560a0574cafe9bbec161b37c4604c161a18d42d2a970fcbe76ba24d649a852e560a0d14f75ad45f36b9bb260b15e7194bb7
SSDEEP 393216:HXcNFtQS3glVQv87upi4GCAKUd+Cu3et11Gqafg9i4:HcSpy06BA7dRIeDI4
TLSH
T1732733A66C272E83CA5526BB23431742AF310DB33B1187112D7AE92D1C7E1F94B5D39B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
activator.msi

File Explorer

activator.msi

.msi 19.4MB

activator.msi

SHA256 cb77279bf1008421c06ed137b8c4988b4950406acba4c31d218ebe1aaa979565
MD5 d398725a292aeb301e72691ad3532123
SHA1 6a1788b0c710c324cfd6cc4b78ab24219aac03d5
SHA512 6c5f3ffcd2588bbb90886e9447e51560a0574cafe9bbec161b37c4604c161a18d42d2a970fcbe76ba24d649a852e560a0d14f75ad45f36b9bb260b15e7194bb7
SSDEEP 393216:HXcNFtQS3glVQv87upi4GCAKUd+Cu3et11Gqafg9i4:HcSpy06BA7dRIeDI4
TLSH
T1732733A66C272E83CA5526BB23431742AF310DB33B1187112D7AE92D1C7E1F94B5D39B
MD5 SHA1 SHA512 SSDEEP TLSH

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

10f7b4d2c7f627baa12f5bb58a62868b46d1b5fe653e77e776da9f4874b6c8b45e920d9b7b15ac176121f5047ee67b43

Digest Algorithm

sha384

Digest Matches

Trusted

Not trusted

Prehash

Signing Certificate

CN=Rotator for PATH Variable,OU=Platform Operations,O=SunLake Media Tools Group,L=Ottawa,ST=ON,C=CA

Chains

Jul 30, 2026

CN=Rotator for PATH Variable,OU=Platform Operations,O=SunLake Media Tools Group,L=Ottawa,ST=ON,C=CA

Subject

CN=Rotator for PATH Variable,OU=Platform Operations,O=SunLake Media Tools Group,L=Ottawa,ST=ON,C=CA

Serial Number

3f:83:e3:f7:a6:82:31:a9:4b:b3:b7:ae:b8:39:16:53

Issuer

CN=Rotator for PATH Variable,OU=Platform Operations,O=SunLake Media Tools Group,L=Ottawa,ST=ON,C=CA

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 30, 2026 - Jul 30, 2031

Subject

CN=Globalsign R45 TSA for CodeSign 202510,O=GlobalSign nv-sa,C=BE

Serial Number

84:72:3f:c1:95:cc:16:f1:db:2b:a2:f6:60:df:2b:e4

Issuer

CN=GlobalSign Offline R45 Timestamping CA 2025,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 15, 2025 - Jan 10, 2037

Subject

CN=GlobalSign Offline R45 Timestamping CA 2025,O=GlobalSign nv-sa,C=BE

Serial Number

83:da:86:37:b7:9f:0c:84:0c:94:7b:84:0a:52:78:1f

Issuer

CN=GlobalSign Timestamping Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 16, 2025 - Jul 16, 2041

Subject

CN=GlobalSign Timestamping Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:4a:aa:81:73:66:9c:90:09:54:e4:21:c9:47:eb:c0

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Dec 9, 2020 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Dec 10, 2014 - Dec 10, 2034