General

  • Target
    Zentimo.xStorage.Manager-3.4.1.1304.exe
  • Size 3.7MB
  • Sample260813-2wtplahk21
  • SHA256 c526e479370ca81067d366765db5936b086cd0b085e5f94fafd01d0041626210
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

  • Untrusted Codesign Signers 4 IoCs

    Codesigned file was signed by an untrusted entity.

  • NSIS installer 2 IoCs

File Explorer

  • Zentimo.xStorage.Manager-3.4.1.1304.exe
    .exe 3.7MB
  • $PLUGINSDIR/Aero.dll
    .dll 17KB
  • $PLUGINSDIR/BrandingURL.dll
    .dll 4KB
  • $PLUGINSDIR/LangDLL.dll
    .dll 9KB
  • $PLUGINSDIR/System.dll
    .dll 15KB
  • $PLUGINSDIR/ToolTips.dll
    .dll 4KB
  • $PLUGINSDIR/eng-r.bmp
    119KB
  • $PLUGINSDIR/modern-header.bmp
    25KB
  • $PLUGINSDIR/modern-wizard.bmp
    150KB
  • $PLUGINSDIR/nsDialogs.dll
    .dll 9KB
  • $PLUGINSDIR/rus-r.bmp
    119KB
  • $PLUGINSDIR/ukr-r.bmp
    119KB
  • DeviceImages/Battery.ico
    14KB
  • DeviceImages/Bluetooth.ico
    14KB
  • DeviceImages/CD-DVD player.ico
    14KB
  • DeviceImages/Card reader (black).ico
    14KB
  • DeviceImages/Card reader (green).ico
    14KB
  • DeviceImages/Card reader (red).ico
    14KB
  • DeviceImages/Card reader.ico
    14KB
  • DeviceImages/Fingerprint.ico
    14KB
  • DeviceImages/Flash drive (black).ico
    14KB
  • DeviceImages/Flash drive (gray).ico
    14KB
  • DeviceImages/Flash drive (green).ico
    14KB
  • DeviceImages/Flash drive (light).ico
    14KB
  • DeviceImages/Flash drive (orange).ico
    14KB
  • DeviceImages/Flash drive (pink).ico
    14KB
  • DeviceImages/Flash drive (white).ico
    14KB
  • DeviceImages/Flash drive (wine).ico
    14KB
  • DeviceImages/Flash drive 2 (black).ico
    14KB
  • DeviceImages/Flash drive 2 (gray).ico
    14KB
  • DeviceImages/Flash drive 2 (green).ico
    14KB
  • DeviceImages/Flash drive 2 (light).ico
    14KB
  • DeviceImages/Flash drive 2 (pink).ico
    14KB
  • DeviceImages/Flash drive 2 (wine).ico
    14KB
  • DeviceImages/Flash drive 2.ico
    14KB
  • DeviceImages/Flash drive.ico
    14KB
  • DeviceImages/Graphics-tablet.ico
    14KB
  • DeviceImages/HDD (black).ico
    14KB
  • DeviceImages/HDD (blue).ico
    14KB
  • DeviceImages/HDD (red).ico
    14KB
  • DeviceImages/HDD (yellow).ico
    14KB
  • DeviceImages/HDD 2.ico
    14KB
  • DeviceImages/HDD Firewire.ico
    14KB
  • DeviceImages/HDD SATA.ico
    14KB
  • DeviceImages/HDD SCSI.ico
    14KB
  • DeviceImages/HDD USB (white).ico
    14KB
  • DeviceImages/HDD USB.ico
    14KB
  • DeviceImages/HDD.ico
    14KB
  • DeviceImages/Headphones.ico
    14KB
  • DeviceImages/Joypad.ico
    14KB
  • DeviceImages/Joystick.ico
    14KB
  • DeviceImages/Keyboard (black).ico
    14KB
  • DeviceImages/Keyboard.ico
    14KB
  • DeviceImages/Loudspeaker.ico
    14KB
  • DeviceImages/MP3 player.ico
    14KB
  • DeviceImages/Memory card CF.ico
    14KB
  • DeviceImages/Memory card MS.ico
    14KB
  • DeviceImages/Memory card SD.ico
    14KB
  • DeviceImages/Memory card XD.ico
    14KB
  • DeviceImages/Microphone.ico
    14KB
  • DeviceImages/Mobile phone.ico
    14KB
  • DeviceImages/Modem.ico
    14KB
  • DeviceImages/Mouse.ico
    14KB
  • DeviceImages/PCI-card.ico
    14KB
  • DeviceImages/PDA.ico
    14KB
  • DeviceImages/Printer.ico
    14KB
  • DeviceImages/Radio.ico
    14KB
  • DeviceImages/RemoteControl.ico
    14KB
  • DeviceImages/SCSI logo.ico
    14KB
  • DeviceImages/Scanner.ico
    14KB
  • DeviceImages/Smartcard.ico
    14KB
  • DeviceImages/TV-tuner.ico
    14KB
  • DeviceImages/UPS.ico
    14KB
  • DeviceImages/USB device.ico
    14KB
  • DeviceImages/USB logo.ico
    14KB
  • DeviceImages/USB wireless.ico
    14KB
  • DeviceImages/Webcam.ico
    14KB
  • DeviceImages/Wi-Fi logo.ico
    14KB
  • DeviceImages/iPod.ico
    14KB
  • History.txt
    38KB
  • Languages/Bulgarian.lng
    130KB
  • Languages/Catalan.lng
    91KB
  • Languages/Chinese-Simplified.lng
    .vbs 82KB
  • Languages/Chinese-Traditional.lng
    .vbs 84KB
  • Languages/Czech.lng
    93KB
  • Languages/Dutch-Netherlands.lng
    96KB
  • Languages/French.lng
    97KB
  • Languages/German.lng
    99KB
  • Languages/Greek.lng
    134KB
  • Languages/Hungarian.lng
    96KB
  • Languages/Indonesian.lng
    86KB
  • Languages/Italian.lng
    96KB
  • Languages/Japanese.lng
    .vbs 98KB
  • Languages/Korean.lng
    94KB
  • Languages/Polish.lng
    .bat 95KB
  • Languages/Portuguese-Brazilian.lng
    91KB
  • Languages/Romanian.lng
    93KB
  • Languages/Russian.lng
    130KB
  • Languages/Serbian-Cyrillic.lng
    111KB
  • Languages/Serbian-Latin.lng
    84KB
  • Languages/Slovenian.lng
    89KB
  • Languages/Spanish.lng
    97KB
  • Languages/Swedish.lng
    86KB
  • Languages/Turkish.lng
    95KB
  • License.txt
    4KB
  • Skins/Black Contrast/browse_drive_active.png
    .png 1KB
  • Skins/Black Contrast/browse_drive_passive.png
    .png 918B
  • Skins/Black Contrast/close_balloon_active.png
    .png 212B
  • Skins/Black Contrast/close_balloon_passive.png
    .png 214B
  • Skins/Black Contrast/close_hidden_device_list_active.png
    .png 195B
  • Skins/Black Contrast/close_hidden_device_list_passive.png
    .png 202B
  • Skins/Black Contrast/close_info_active.png
    .png 322B
  • Skins/Black Contrast/close_info_passive.png
    .png 345B
  • Skins/Black Contrast/close_menu_active.png
    .png 683B
  • Skins/Black Contrast/close_menu_passive.png
    .png 745B
  • Skins/Black Contrast/colorscheme.ini
    1KB
  • Skins/Black Contrast/drive.png
    .png 306B
  • Skins/Black Contrast/eject_drive_active.png
    .png 834B
  • Skins/Black Contrast/eject_drive_passive.png
    .png 649B
  • Skins/Black Contrast/fixed_letter_sign.png
    .png 353B
  • Skins/Black Contrast/hot_key.png
    .png 582B
  • Skins/Black Contrast/open_hidden_device_list_active.png
    .png 192B
  • Skins/Black Contrast/open_hidden_device_list_passive.png
    .png 200B
  • Skins/Black Contrast/options_active.png
    .png 645B
  • Skins/Black Contrast/options_passive.png
    .png 703B
  • Skins/Black Contrast/quick_launch_active.png
    .png 918B
  • Skins/Black Contrast/quick_launch_passive.png
    .png 736B
  • Skins/Black Contrast/reg_key_active.png
    .png 456B
  • Skins/Black Contrast/reg_key_passive.png
    .png 448B
  • Skins/Black Contrast/return_drive_active.png
    .png 837B
  • Skins/Black Contrast/return_drive_passive.png
    .png 658B
  • Skins/Black Contrast/stop_all_active.png
    .png 326B
  • Skins/Black Contrast/stop_all_interrupt_active.png
    .png 382B
  • Skins/Black Contrast/stop_all_interrupt_passive.png
    .png 398B
  • Skins/Black Contrast/stop_all_passive.png
    .png 382B
  • Skins/Black Contrast/update_hardware_active.png
    .png 366B
  • Skins/Black Contrast/update_hardware_passive.png
    .png 470B
  • Skins/Black Contrast/warning_letter_sign.png
    .png 189B
  • Skins/Black Velvet/colorscheme.ini
    1KB
  • Skins/Black Velvet/stop_all_active.png
    .png 380B
  • Skins/Black Velvet/stop_all_passive.png
    .png 385B
  • Skins/Black Velvet/update_hardware_active.png
    .png 448B
  • Skins/Black Velvet/update_hardware_passive.png
    .png 480B
  • Skins/Classic/browse_drive_active.png
    .png 1KB
  • Skins/Classic/browse_drive_passive.png
    .png 1KB
  • Skins/Classic/close_balloon_active.png
    .png 2KB
  • Skins/Classic/close_balloon_passive.png
    .png 2KB
  • Skins/Classic/close_hidden_device_list_active.png
    .png 197B
  • Skins/Classic/close_hidden_device_list_passive.png
    .png 199B
  • Skins/Classic/close_info_active.png
    .png 189B
  • Skins/Classic/close_info_passive.png
    .png 190B
  • Skins/Classic/close_menu_active.png
    .png 662B
  • Skins/Classic/close_menu_passive.png
    .png 710B
  • Skins/Classic/colorscheme.ini
    1KB
  • Skins/Classic/drive.png
    .png 311B
  • Skins/Classic/eject_drive_active.png
    .png 821B
  • Skins/Classic/eject_drive_passive.png
    .png 885B
  • Skins/Classic/fixed_letter_sign.png
    .png 353B
  • Skins/Classic/hot_key.png
    .png 582B
  • Skins/Classic/open_hidden_device_list_active.png
    .png 190B
  • Skins/Classic/open_hidden_device_list_passive.png
    .png 199B
  • Skins/Classic/options_active.png
    .png 686B
  • Skins/Classic/options_passive.png
    .png 711B
  • Skins/Classic/quick_launch_active.png
    .png 888B
  • Skins/Classic/quick_launch_passive.png
    .png 907B
  • Skins/Classic/reg_key_active.png
    .png 438B
  • Skins/Classic/reg_key_passive.png
    .png 466B
  • Skins/Classic/return_drive_active.png
    .png 815B
  • Skins/Classic/return_drive_passive.png
    .png 882B
  • Skins/Classic/stop_all_active.png
    .png 363B
  • Skins/Classic/stop_all_interrupt_active.png
    .png 382B
  • Skins/Classic/stop_all_interrupt_passive.png
    .png 398B
  • Skins/Classic/stop_all_passive.png
    .png 374B
  • Skins/Classic/update_hardware_active.png
    .png 566B
  • Skins/Classic/update_hardware_passive.png
    .png 582B
  • Skins/Classic/warning_letter_sign.png
    .png 214B
  • Skins/Win10 Dark/browse_drive_active.png
    .png 990B
  • Skins/Win10 Dark/browse_drive_passive.png
    .png 971B
  • Skins/Win10 Dark/close_balloon_active.png
    .png 318B
  • Skins/Win10 Dark/close_balloon_passive.png
    .png 316B
  • Skins/Win10 Dark/close_hidden_device_list_active.png
    .png 293B
  • Skins/Win10 Dark/close_hidden_device_list_passive.png
    .png 293B
  • Skins/Win10 Dark/close_info_active.png
    .png 337B
  • Skins/Win10 Dark/close_info_passive.png
    .png 338B
  • Skins/Win10 Dark/close_menu_active.png
    .png 432B
  • Skins/Win10 Dark/close_menu_passive.png
    .png 420B
  • Skins/Win10 Dark/colorscheme.ini
    3KB
  • Skins/Win10 Dark/drive.png
    .png 281B
  • Skins/Win10 Dark/eject_drive_active.png
    .png 749B
  • Skins/Win10 Dark/eject_drive_passive.png
    .png 561B
  • Skins/Win10 Dark/fixed_letter_sign.png
    .png 242B
  • Skins/Win10 Dark/hot_key.png
    .png 217B
  • Skins/Win10 Dark/open_hidden_device_list_active.png
    .png 277B
  • Skins/Win10 Dark/open_hidden_device_list_passive.png
    .png 277B
  • Skins/Win10 Dark/options_active.png
    .png 838B
  • Skins/Win10 Dark/options_active_white.png
    .png 844B
  • Skins/Win10 Dark/options_active_yell.png
    .png 838B
  • Skins/Win10 Dark/options_passive.png
    .png 811B
  • Skins/Win10 Dark/options_passive1.png
    .png 743B
  • Skins/Win10 Dark/options_passive_orig.png
    .png 542B
  • Skins/Win10 Dark/quick_launch_active.png
    .png 573B
  • Skins/Win10 Dark/quick_launch_passive.png
    .png 573B
  • Skins/Win10 Dark/reg_key_active.png
    .png 634B
  • Skins/Win10 Dark/reg_key_passive.png
    .png 735B
  • Skins/Win10 Dark/return_drive_active.png
    .png 716B
  • Skins/Win10 Dark/return_drive_passive.png
    .png 482B
  • Skins/Win10 Dark/stop_all_active.png
    .png 463B
  • Skins/Win10 Dark/stop_all_interrupt_active.png
    .png 404B
  • Skins/Win10 Dark/stop_all_interrupt_passive.png
    .png 404B
  • Skins/Win10 Dark/stop_all_passive.png
    .png 464B
  • Skins/Win10 Dark/update_hardware_active.png
    .png 473B
  • Skins/Win10 Dark/update_hardware_active_dark.png
    .png 432B
  • Skins/Win10 Dark/update_hardware_passive.png
    .png 472B
  • Skins/Win10 Dark/warning_letter_sign.png
    .png 219B
  • Skins/Win10 Light/colorscheme.ini
    3KB
  • Skins/Win10 Light/options_active.png
    .png 547B
  • Skins/Win10 Light/options_passive.png
    .png 541B
  • Skins/Win10 Light/reg_key_active.png
    .png 664B
  • Skins/Win10 Light/reg_key_passive.png
    .png 658B
  • Skins/Win8ModernUI/browse_drive_active.png
    .png 813B
  • Skins/Win8ModernUI/browse_drive_passive.png
    .png 798B
  • Skins/Win8ModernUI/close_balloon_active.png
    .png 199B
  • Skins/Win8ModernUI/close_balloon_passive.png
    .png 152B
  • Skins/Win8ModernUI/close_hidden_device_list_active.png
    .png 293B
  • Skins/Win8ModernUI/close_hidden_device_list_passive.png
    .png 293B
  • Skins/Win8ModernUI/close_info_active.png
    .png 337B
  • Skins/Win8ModernUI/close_info_passive.png
    .png 338B
  • Skins/Win8ModernUI/close_menu_active.png
    .png 432B
  • Skins/Win8ModernUI/close_menu_passive.png
    .png 420B
  • Skins/Win8ModernUI/colorscheme.ini
    3KB
  • Skins/Win8ModernUI/drive.png
    .png 281B
  • Skins/Win8ModernUI/eject_drive_active.png
    .png 563B
  • Skins/Win8ModernUI/eject_drive_passive.png
    .png 561B
  • Skins/Win8ModernUI/fixed_letter_sign.png
    .png 245B
  • Skins/Win8ModernUI/hot_key.png
    .png 210B
  • Skins/Win8ModernUI/open_hidden_device_list_active.png
    .png 277B
  • Skins/Win8ModernUI/open_hidden_device_list_passive.png
    .png 277B
  • Skins/Win8ModernUI/options_active.png
    .png 564B
  • Skins/Win8ModernUI/options_passive.png
    .png 542B
  • Skins/Win8ModernUI/quick_launch_active.png
    .png 573B
  • Skins/Win8ModernUI/quick_launch_passive.png
    .png 573B
  • Skins/Win8ModernUI/reg_key_active.png
    .png 646B
  • Skins/Win8ModernUI/reg_key_passive.png
    .png 634B
  • Skins/Win8ModernUI/return_drive_active.png
    .png 484B
  • Skins/Win8ModernUI/return_drive_passive.png
    .png 482B
  • Skins/Win8ModernUI/stop_all_active.png
    .png 397B
  • Skins/Win8ModernUI/stop_all_interrupt_active.png
    .png 404B
  • Skins/Win8ModernUI/stop_all_interrupt_passive.png
    .png 404B
  • Skins/Win8ModernUI/stop_all_passive.png
    .png 396B
  • Skins/Win8ModernUI/update_hardware_active.png
    .png 432B
  • Skins/Win8ModernUI/update_hardware_passive.png
    .png 431B
  • Skins/Win8ModernUI/warning_letter_sign.png
    .png 214B
  • USRFindHandle.sys
    .dll 14KB
  • Zentimo.exe
    .exe 6.7MB
  • ZentimoService.exe
    .exe 1.4MB
  • usr.exe
    .exe 1.9MB

Zentimo.xStorage.Manager-3.4.1.1304.exe

  • IMPHASH 099c0646ea7282d232219f8807883be0
  • SHA256 c526e479370ca81067d366765db5936b086cd0b085e5f94fafd01d0041626210
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Unsigned PE

    Checks for missing Authenticode signature.

  • NSIS installer

Minor OS version
0
Major OS version
4
Entry point
12860
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths