fd-v10[.]2[.]0-x86_64-pc-windows-msvc[.]zip

resource
unpack001/fd-v10.2.0-x86_64-pc-windows-msvc/fd.exe

fd-v10.2.0-x86_64-pc-windows-msvc.zip

SHA256 92ac9e6b0a0c6ecdab638ffe210dc786403fff4c66373604cf70df27be45e4fe
MD5 9d5b7e87409f0bf4b3d2b0828737d9a6
SHA1 4d314c51582781216fef3e323cfa3a5dcc6a8bb6
SHA512 a0e6e28cb70970db57aaf2f717c77c4e6fd7809133b0d21fb035e5e6171787240cbfa77bc45786ac599a315dbf91dd1f5ed8c33e28724772535b6ec4b59f081d
SSDEEP 24576:zr5QK4epAFrSzJOwxJW0LZKsYwQUJg+Se04ZJ47/XGmD6agFgNa:zr59htXW0ks/Qv+I4n4DXG8cFgNa
TLSH
T1CC55336B2DE2D96CE1BE11B0639D1308C3FE1743524982B96951BB36BDC3366468CC6F
MD5 SHA1 SHA512 SSDEEP TLSH

fd-v10.2.0-x86_64-pc-windows-msvc/CHANGELOG.md

SHA256 23fdfcb2b0f24284de55d5649b19b3413ec9fc72c6bd98a38a04f231a93bab08
MD5 e50750234541376169e84440d0cbd957
SHA1 42234f7bfea11aaecf52e67d33adbb5e61854e01
SHA512 da1401ca24f28882e56bab71b2098f8366b21d1a99d9adde95f3ef8f468d316f276afa54e0de7bfcde8b606d2872c1cb84d23bc994b6409b3e8e95396cfa1dc5
SSDEEP 768:udJtFwsr3iM/S/8p7/UD+cpaG29R801uWRf17H:EJHjr3iV/8Rc5paG29R88uK
TLSH
T1E0E2F88B76472366067301B7634650B9F326D7BCB7762A1470888319734E9E193BF9BC
MD5 SHA1 SHA512 SSDEEP TLSH

fd-v10.2.0-x86_64-pc-windows-msvc/LICENSE-APACHE

SHA256 5406ff8da3fb52d20c70938295dc6d8178de6fc4ff1ae163bd4990eacc2c1451
MD5 ec8fe16fe1aaf3cebe7ae1d01d28782d
SHA1 11dc1cce18d1b18fc77267fdc6580dc3b84c809c
SHA512 18ac847b04bf048b5cd3bd42ee618d02f6d4f7fdb999b3b8bb00d198114344b23db06c655c871957eb9c82616c944fc7efef1f913560e96a1a170b42ea091e12
SSDEEP 192:NfTkS8V8V0tEj2R1aMFWiYFjSoJ34Ghq3DRlnDcVHJx2YlEaz13kTscyVHa:Nqq06jk19cX/lyzrAZ2YS83kTscyk
TLSH
T1A532846BBA4903771AF20162BB47A4CBF31EA03D37591525316CC0682F7B96183FB69D
MD5 SHA1 SHA512 SSDEEP TLSH

fd-v10.2.0-x86_64-pc-windows-msvc/LICENSE-MIT

SHA256 7255d831d8873121ca5bcf278d8d5485d1221612b02742529703432e8134e87b
MD5 8b205ad7c9aafc0713254cf0318e2570
SHA1 23f77bba1a3d967a2a7e06f5b7aa435bda768d8f
SHA512 9ca8582d7173d8094fae0600dbff75270807e9c0413a7f6b35aab1af032fc174c3d7213c68e2184c503c6fa1ec0d88e770502d13ce9a4440551dc8d099b18698
TLSH
T17811B62E72950363188207600569ECC6F23BB05E7F6B1A80306DF2091326018C5FFC64
MD5 SHA1 SHA512 TLSH

fd-v10.2.0-x86_64-pc-windows-msvc/README.md

SHA256 45234ac5768646aa9b72372ff5d6066b67cbf33c9ec8ec74bb83dc7d46ad692f
MD5 4e5a814fd30c38ff75a8873878e50a6e
SHA1 d5e7d362b9c8b75b32044ccd497c42426dc354e7
SHA512 74fea95c0c9580e98d31736ecaea6a4f9526c3a0e35db6678e3f422c6b8f3f3afdc3ac0eca0cb9b3ea21f686977f0f73f0b71dd7541a1772bc759373ce096562
SSDEEP 384:eWtNUuCNGVo+PU42DFlN4ucVGpmcQNdCy0MtQM6n4S7aC1+/6KsXEtOETQJJ9Rhh:eW4Yo8UV6umcYd/WMFfSCq
TLSH
T14CC2FA27624623BE0E9316E6630DA1D9F326E03D2B19746570EE433C73169A282FF4DD
MD5 SHA1 SHA512 SSDEEP TLSH

fd-v10.2.0-x86_64-pc-windows-msvc/autocomplete/_fd

SHA256 39c180b06f3d2a29481b2c7441aa268952ffade605a805a2003eef6f978832b0
MD5 da653c703a226b41e4a12b592857f89b
SHA1 42df8dd9beb94cb5ab7a9fa616bd12d02d8c3cf5
SHA512 a8c01d448dc117108489756ebe098f87cbfd27669438706cf2dff79776b797e658a955b5ab3ee0487204c714d9c795b0fa2f8faadcc9bf00f4048f694a4bbe37
SSDEEP 192:pRFCHTz80agCJU1akL9X4W2MeVsMvG6oM97NaL4V+rs4rs2vl73Bf3fA/c:pRFCHP80tKU1akxX4W2MPMq+7Na8Ers+
TLSH
T1B142C8231ED123732173D287BB4DA589E717C01723544918B59C02442FFAA6BE2AE57F
MD5 SHA1 SHA512 SSDEEP TLSH

fd-v10.2.0-x86_64-pc-windows-msvc/autocomplete/fd.bash

SHA256 54e72682ccc4543841452c1ccbdea7f11fd0245b757e127eb576cfe17d184cf5
MD5 578d7f9649087634d93d5c8aeeeb84e9
SHA1 1c47034bfde71fe09f1284583f2b995a0b7f9362
SHA512 b04b47e3f5dd3a062501cd18725bdfd15d4d194255e030c0caed5571558b9526a3d2f289da3f1be0726d0a9be99673169fbc974b23fcfacebbf0acf61cb77892
SSDEEP 48:70T1rvoIui/L4aqgLYhSPgcKn/B//BYID8HIDvQvc35/d7Q9u3QP5VD3rBFbG5Sd:4ou/saqgmn/V/nNasO77TEXu
TLSH
T19ED105B26D8A71B1C307D23D27C25903A32A5FB3915BA970F39E97A45F72530D2AC0C2
MD5 SHA1 SHA512 SSDEEP TLSH

fd-v10.2.0-x86_64-pc-windows-msvc/autocomplete/fd.fish

SHA256 384735d4786511483d2acdab052dbb1bc17dca75b92839c600ce1f76c3cb27b4
MD5 7b30bc0ccb0cd272adad6a37c73954a8
SHA1 ced91b1d1c88fa8d061aa9840c251fc44b81d8ab
SHA512 8fc6ca4520dd788c3895988bce4eb21e0b2ae0bbb01d22b2b60804621ff0717def51f9fe4c03ffc5b23ebd80784d7d56ad201550237ec20fad1474ece5f23716
SSDEEP 96:dmVmF+SJNoiHOq0mOubZGF1xhFlQJA/RlBVCCBoW2q+:2g+SJhtKHwJAXBVCZ
TLSH
T1A9C1FEA32791A2332387C6ACF320E7F5CB5294EC13D53084939D7968790CEB5D6AD9E1
MD5 SHA1 SHA512 SSDEEP TLSH

fd-v10.2.0-x86_64-pc-windows-msvc/autocomplete/fd.ps1

SHA256 a4e9f84915fa5e687edda8b1c8f2c1294f1bf18020d341a934c5765ae3739470
MD5 7b93fe002b6facba383708bb43d45f75
SHA1 0572880dce691517b43fef93f233863e0aee96c9
SHA512 fc564d5eedb1d6b1d3a1cd4254e033f1fa5b0d798497573bb52dc269b75a107ee270b5b8fbba8b45c7d598f77bac82b5533c932721e2e314b41fd0f8ba7b2e9b
SSDEEP 192:SNhANncegQmgJOjJmyyf6q75tYSPtKMpdcCOU:chANn3gQmgJOjJmyA75mSPtTphV
TLSH
T169525B11234AC24A1343439CD39B957A6DF5E1F527AF350A79EC9E24476BE32E00B6F8
MD5 SHA1 SHA512 SSDEEP TLSH

fd-v10.2.0-x86_64-pc-windows-msvc/fd.1

SHA256 370b9cd034758b91fb08c49446399c39f96578ee21d374270f7587c0a2a818be
MD5 041239c6689fcad9cd0bb9cf0aa54626
SHA1 7ee361965dc673b1fcc15abceb8149b26dcd2c71
SHA512 4cd0d6a175d0627fed51f4e3878d4af530da7bb8689a82cd824aef5123e893f88573baa361d2de6ae9ed19a2c49de7cbf90d2fa0b32fcb6e59044356ba73a363
SSDEEP 384:0BR+Ks9F690im79oq1VFmUzvdhj/j/E+APBaj8qKzH3FePlw+3dW:0BaS+7aqsMbBQUM3X+4
TLSH
T1DF82C7532AC813B314730180F7D895A5E316D2BC23A9A69275AC636C333B87547FABDD
MD5 SHA1 SHA512 SSDEEP TLSH

fd-v10.2.0-x86_64-pc-windows-msvc/fd.exe

IMPHASH 8687766fa49d97fd742126971a179df7
SHA256 c089c9ee1e412a111d65c917a95c757b4e192041f316a52535bfaa3e9e03429f
MD5 88ef068fdb7b2ee55802d349ce7913b8
SHA1 79573ce975ae3fa13e3dc8d6237351520bb3a063
SHA512 7724de76c99cc5454790d8b9e9b112a1ce58e8b96e451d64d58c320b4b375ee8dd723ce0587b15f0a0a30e1b596bc205ef27447e92a500ef2e7029d8d2bd491e
SSDEEP 49152:MCvrWUWxTiWKqlZEgtUc8zfIiSb6ziueQr/4mstZtXpe+PuOSsHgwZZ+u1YnQwCx:f0mq5Ur7YJXZJWnjC2dlvMx
TLSH
T1E9F51912BA9B58EDC09AC4B483464B631A2174CB0B35BAFF41D481343F6ABB56F3D719
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

2463292

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

ReleaseMutex RtlCaptureContext RtlVirtualUnwind RtlLookupFunctionEntry GetEnvironmentVariableW GetCurrentProcess InitializeSListHead GetModuleFileNameW GetCommandLineW SetFileInformationByHandle GetFileInformationByHandleEx GetCurrentThreadId FindNextFileW FindFirstFileW ReadFileEx SleepEx GetEnvironmentStringsW LoadLibraryA CompareStringOrdinal GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetFileAttributesW DuplicateHandle InitializeProcThreadAttributeList CreateMutexA DeleteProcThreadAttributeList CreateNamedPipeW CreateThread WriteFileEx WaitForSingleObjectEx WaitForMultipleObjects GetOverlappedResult CreateEventW CancelIo ReadFile ExitProcess QueryPerformanceCounter QueryPerformanceFrequency GetSystemTimeAsFileTime GetProcessHeap HeapAlloc AcquireSRWLockShared ReleaseSRWLockShared GetFinalPathNameByHandleW GetFileType SetCurrentDirectoryW GetCurrentDirectoryW FormatMessageW GetModuleHandleW SetLastError UpdateProcThreadAttribute WriteConsoleW MultiByteToWideChar IsDebuggerPresent UnhandledExceptionFilter GetProcAddress GetModuleHandleA GetCurrentProcessId CreateFileW GetFullPathNameW GetFileInformationByHandle SetFilePointerEx ReleaseSemaphore SetWaitableTimer Sleep CreateWaitableTimerExW GetTimeZoneInformationForYear GetConsoleScreenBufferInfo SetConsoleTextAttribute SetConsoleMode GetConsoleMode SetThreadStackGuarantee AddVectoredExceptionHandler GetSystemInfo GetStdHandle SetConsoleCtrlHandler CreateSemaphoreA SetUnhandledExceptionFilter LocalFree GetCurrentThread FindClose GetExitCodeProcess GetLastError WaitForSingleObject SwitchToThread CloseHandle TryAcquireSRWLockExclusive ReleaseSRWLockExclusive AcquireSRWLockExclusive HeapReAlloc FreeEnvironmentStringsW HeapFree IsProcessorFeaturePresent

advapi32

IsValidSid GetSidIdentifierAuthority ImpersonateSelf GetNamedSecurityInfoW SystemFunction036 OpenThreadToken RevertToSelf MapGenericMask AccessCheck OpenProcessToken

shell32

SHGetKnownFolderPath

ole32

CoTaskMemFree

bcrypt

BCryptGenRandom

ntdll

NtReadFile RtlNtStatusToDosError NtWriteFile

userenv

GetUserProfileDirectoryW

vcruntime140

_CxxThrowException __C_specific_handler __current_exception_context memcpy __CxxFrameHandler3 memcmp memmove memset __current_exception

api-ms-win-crt-string-l1-1-0

wcslen

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment _configure_narrow_argv _get_initial_narrow_environment __p___argc _set_app_type _seh_filter_exe terminate __p___argv exit _c_exit _register_thread_local_exe_atexit_callback _initterm _exit _initialize_onexit_table _register_onexit_function _crt_atexit _initterm_e _cexit

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode free

Sharing

General

Malware Config

Signatures

File Explorer