metal-calculator-windows[.]zip

Sharing

Copy URL Twitter E-mail

General

Target
metal-calculator-windows.zip
Size 11.3MB
Sample260816-15f97aycmd
SHA256 c4128c04af526299b8622c7012f4c2422753d9406e7b28f16db482f5a48db926
MD5 b1fe3e5fbc0f07255a96587699c40876
SHA1 9490bf47fa1af08d6083120f8a12bfe5989e23bf
SHA512 96f43187a6f8a4355eed57a9035af54650742a6bc655ee57c323ceab2652ec99f52604315f913f30d4a41831ff228d0dce2e1a01d254ec432d68b10e74f9592c
SSDEEP 196608:A8T9evIBkzfE50bTT1y7/FtHt1VnAw6D3Kdk64s6Tvpmai9AT:rT9evwkzfE5z7HtnnAw6zv64rTRmai9s
TLSH
T149C633EEE83821A4F02823153257CFAC8740C9D1D965B6A1BDEB9BFCB76DD91857C801
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 4 IoCs

Checks for missing Authenticode signature.

resource
unpack001/flutter_windows.dll
unpack001/metal_calculator.exe
unpack001/share_plus_plugin.dll
unpack001/url_launcher_windows_plugin.dll

File Explorer

metal-calculator-windows.zip

.zip 11.3MB
data/app.so

.elf 6.0MB
data/flutter_assets/AssetManifest.bin

117B
data/flutter_assets/AssetManifest.json

109B
data/flutter_assets/FontManifest.json

208B
data/flutter_assets/NOTICES.Z

.gz 83KB
NOTICES.Z

1.6MB
data/flutter_assets/NativeAssetsManifest.json

45B
data/flutter_assets/fonts/MaterialIcons-Regular.otf

1.6MB
data/flutter_assets/packages/cupertino_icons/assets/CupertinoIcons.ttf

251KB
data/flutter_assets/shaders/ink_sparkle.frag

20KB
data/icudtl.dat

760KB
flutter_windows.dll

.dll 18.2MB
metal_calculator.exe

.exe 89KB
native_assets.json

45B
share_plus_plugin.dll

.dll 135KB
url_launcher_windows_plugin.dll

.dll 96KB

metal-calculator-windows.zip

SHA256 c4128c04af526299b8622c7012f4c2422753d9406e7b28f16db482f5a48db926
MD5 b1fe3e5fbc0f07255a96587699c40876
SHA1 9490bf47fa1af08d6083120f8a12bfe5989e23bf
SHA512 96f43187a6f8a4355eed57a9035af54650742a6bc655ee57c323ceab2652ec99f52604315f913f30d4a41831ff228d0dce2e1a01d254ec432d68b10e74f9592c
SSDEEP 196608:A8T9evIBkzfE50bTT1y7/FtHt1VnAw6D3Kdk64s6Tvpmai9AT:rT9evwkzfE5z7HtnnAw6zv64rTRmai9s
TLSH
T149C633EEE83821A4F02823153257CFAC8740C9D1D965B6A1BDEB9BFCB76DD91857C801
MD5 SHA1 SHA512 SSDEEP TLSH

flutter_windows.dll

IMPHASH 515616e4a20c5d9a1c45a3323eb17840
SHA256 dd156c0e10ca662e10d7a556fc0c0efd4603c27f36980a5d9130fd3a3dc6ad95
MD5 e2a862b40ffed627c003f6f62eca5171
SHA1 3a4406cb673e276e38dbf26f86457bad05f03241
SHA512 927b0757d5c090d93e3dd332865caf1c659f6d5b62cd7a609043c25042494b3ac8e8dd6d62a9bcef46ca82a0469391880ad6e71fc5fcc4c908de0f2a94dd7a93
SSDEEP 196608:sxXv2LPvQsgzjTpIjKqqtPikHJ2Ax7EJJ/m:sFgPv8NIKqiikHJx9EW
TLSH
T154178D03F19640F9C48DE2788B5BA927F671B84A0635B5DF279807213FA7BA01B3E754
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

14271524

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\b\s\w\ir\cache\builder\engine\src\out\ci\host_release\flutter_windows.dll.pdb

advapi32

RegGetValueW RegOpenKeyExW RegCloseKey RegNotifyChangeKeyValue RegQueryInfoKeyW RegEnumKeyExW RegDeleteValueW RegSetValueExW RegCreateKeyExW RegDeleteKeyW

iphlpapi

GetAdaptersAddresses

ole32

CoTaskMemFree CoTaskMemAlloc CoSetProxyBlanket CoInitializeSecurity CoTaskMemRealloc CoUninitialize CoInitializeEx CoCreateInstance

oleaut32

VarUI4FromStr LoadTypeLi LoadRegTypeLi SysStringLen SysFreeString SafeArrayGetDim SafeArrayGetLBound SafeArrayGetUBound SysAllocString VariantClear SafeArrayCreateVector SafeArrayPutElement SafeArrayDestroy SafeArrayAccessData SafeArrayUnaccessData SysAllocStringLen VariantInit SafeArrayGetVartype VariantCopy VarBstrCmp

psapi

EnumProcessModules GetProcessMemoryInfo

shlwapi

PathIsRelativeW

rpcrt4

UuidCreateSequential UuidToStringW RpcStringFreeW

winmm

timeEndPeriod timeBeginPeriod

ws2_32

getaddrinfo closesocket shutdown freeaddrinfo setsockopt recv send socket ioctlsocket connect WSAGetLastError WSASetLastError WSARecv WSASend WSASendTo WSARecvFrom WSAIoctl GetHostNameW htons ntohs WSAAddressToStringW WSAStartup getsockname getpeername getnameinfo InetPtonW InetNtopW bind listen WSASocketW getsockopt

imm32

ImmGetCompositionStringW ImmReleaseContext ImmSetCompositionWindow ImmSetCompositionStringW ImmNotifyIME ImmGetContext ImmSetCandidateWindow

user32

GetSysColor SetClipboardData EmptyClipboard GetClipboardData IsClipboardFormatAvailable OpenClipboard CloseClipboard MessageBeep GetWindowInfo GetSystemMetrics SetCursor MoveWindow GetClientRect SetParent SetWindowPos GetWindowRect RegisterClassExW LoadIconW GetClassInfoExW GetAncestor GetKeyState CloseTouchInputHandle GetTouchInputInfo DestroyCaret ReleaseCapture CreateCaret SetCapture GetMessageExtraInfo DefWindowProcW RegisterTouchWindow SetWindowLongPtrW PostMessageW MapVirtualKeyW PeekMessageW RegisterClassW LoadCursorW GetWindowLongPtrW TrackMouseEvent ScreenToClient GetCursorPos SetFocus DestroyWindow SetTimer SetUserObjectInformationA CreateWindowExW SystemParametersInfoW ClientToScreen MonitorFromPoint MonitorFromWindow UnregisterClassW CreateIconIndirect ReleaseDC GetDC CharNextW NotifyWinEvent UnregisterClassA IsWindow GetClassInfoW WindowFromDC GetWindowThreadProcessId IsIconic InvalidateRect CreateWindowExA KillTimer GetMessageW TranslateMessage DispatchMessageW GetFocus SetCaretPos PostQuitMessage EnumThreadWindows SendMessageW GetParent ShowWindow

opengl32

wglGetProcAddress wglGetCurrentContext

bcrypt

BCryptGenRandom

api-ms-win-core-path-l1-1-0

PathCchCombineEx PathCchRemoveFileSpec PathAllocCanonicalize

ntdll

RtlAddGrowableFunctionTable VerSetConditionMask RtlUnwindEx RtlDeleteGrowableFunctionTable RtlUnwind

oleacc

LresultFromObject

uiautomationcore

UiaRaiseAutomationEvent UiaRaiseAutomationPropertyChangedEvent UiaGetReservedNotSupportedValue UiaGetReservedMixedAttributeValue UiaHostProviderFromHwnd

propsys

VariantCompare

dxgi

CreateDXGIFactory1 CreateDXGIFactory

gdi32

GetDeviceCaps DeleteDC SetPixel GetPixel SelectObject PatBlt GetObjectW CreateCompatibleDC CreateDIBSection DeleteObject GetPixelFormat CreateCompatibleBitmap ChoosePixelFormat SetPixelFormat DescribePixelFormat SwapBuffers SetDIBitsToDevice

d3d9

Direct3DCreate9 D3DPERF_GetStatus D3DPERF_BeginEvent D3DPERF_SetMarker D3DPERF_EndEvent

kernel32

TzSpecificLocalTimeToSystemTime GetCPInfo CompareStringEx FlsFree FlsSetValue FlsGetValue FlsAlloc LCMapStringEx InitializeCriticalSectionEx EncodePointer RtlPcToFileHeader GetStringTypeW InitOnceComplete InitOnceBeginInitialize GetExitCodeThread SwitchToThread GetFileInformationByHandleEx AreFileApisANSI FindFirstFileExW GetStartupInfoW IsProcessorFeaturePresent UnhandledExceptionFilter RtlVirtualUnwind ReadConsoleW HeapSize PeekNamedPipe GetDriveTypeW InterlockedPushEntrySList InterlockedFlushSList CreateThread ExitThread SystemTimeToFileTime HeapFree RtlLookupFunctionEntry RtlCaptureContext InitializeSListHead GetEnvironmentVariableW HeapAlloc GetTempFileNameA GetTempPathA GetModuleHandleExW GetFileAttributesExW GetModuleHandleExA LocaleNameToLCID lstrcmpiW SizeofResource LoadResource FindResourceW GetTimeZoneInformationForYear VirtualQuery OpenThread TlsFree CreatePipe SetEvent WakeAllConditionVariable TryAcquireSRWLockExclusive QueryPerformanceCounter QueryPerformanceFrequency SetFileTime DeviceIoControl MoveFileW CopyFileExW CreateSymbolicLinkW GetFullPathNameW UnlockFileEx LockFileEx VirtualProtect SetFilePointerEx SetFileAttributesW MoveFileExW GetConsoleScreenBufferInfo CreateNamedPipeW TerminateProcess OpenProcess GetExitCodeProcess WaitForMultipleObjects DeleteProcThreadAttributeList CreateProcessW UpdateProcThreadAttribute InitializeProcThreadAttributeList ExitProcess FreeEnvironmentStringsW GetEnvironmentStringsW GetUserDefaultLocaleName SetUnhandledExceptionFilter SetCurrentDirectoryW GetCurrentDirectoryW GetQueuedCompletionStatus ReadDirectoryChangesW WriteFile PostQueuedCompletionStatus GetFileType CancelIoEx CreateIoCompletionPort SetStdHandle SetConsoleMode GetConsoleMode GetStdHandle SetConsoleCP SetConsoleOutputCP GetConsoleOutputCP SetConsoleCtrlHandler GetFinalPathNameByHandleA LeaveCriticalSection EnterCriticalSection InitializeCriticalSection TlsSetValue TlsAlloc TlsGetValue ReleaseSRWLockShared AcquireSRWLockShared GetModuleHandleA VirtualAlloc VirtualFree GetSystemInfo WakeConditionVariable GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW HeapReAlloc GetProcessHeap IsValidCodePage GetACP GetOEMCP GetCommandLineA FreeLibraryAndExitThread SetEnvironmentVariableW ReleaseSRWLockExclusive SleepConditionVariableSRW AcquireSRWLockExclusive InitializeConditionVariable InitializeSRWLock Sleep InitializeCriticalSectionAndSpinCount GetLastError FormatMessageW DecodePointer DeleteCriticalSection LoadLibraryA GetProcAddress CreateEventW RegisterWaitForSingleObject ResetEvent UnregisterWait CloseHandle OutputDebugStringW LocalFree GetCurrentProcess GetModuleHandleW GetCurrentThread SetThreadPriority WideCharToMultiByte SetLastError GlobalAlloc GlobalFree GlobalLock GlobalUnlock GetLocaleInfoEx GetCurrentThreadId GetCurrentProcessId CreateToolhelp32Snapshot Thread32Next Thread32First FormatMessageA GetThreadPreferredUILanguages CreateSemaphoreW WaitForSingleObject ReleaseSemaphore WaitForSingleObjectEx RaiseException GetCommandLineW GetTempPathW CreateDirectoryW CreateFileW DuplicateHandle GetFileInformationByHandle GetFileAttributesW RemoveDirectoryW DeleteFileW SetFilePointer SetEndOfFile FlushViewOfFile FlushFileBuffers FindFirstFileW FindNextFileW FindClose GetFinalPathNameByHandleW GetFileSize CreateFileMappingW MapViewOfFile UnmapViewOfFile CreateWaitableTimerW VerifyVersionInfoW SetWaitableTimer LoadLibraryW FreeLibrary GetModuleFileNameW FileTimeToSystemTime SystemTimeToTzSpecificLocalTime GetTimeZoneInformation GetSystemTimeAsFileTime CreateFileA GetNativeSystemInfo LoadLibraryExW MultiByteToWideChar GetFileSizeEx ReadFile OutputDebugStringA LoadLibraryExA InitOnceExecuteOnce IsDebuggerPresent WriteConsoleW

crypt32

CertFreeCertificateContext CertEnumCertificatesInStore CertOpenStore CertCloseStore

FlutterDesktopEngineCreate FlutterDesktopEngineCreateViewController FlutterDesktopEngineDestroy FlutterDesktopEngineForId FlutterDesktopEngineGetMessenger FlutterDesktopEngineGetPluginRegistrar FlutterDesktopEngineGetTextureRegistrar FlutterDesktopEngineProcessExternalWindowMessage FlutterDesktopEngineProcessMessages FlutterDesktopEngineRegisterPlatformViewType FlutterDesktopEngineReloadSystemFonts FlutterDesktopEngineRun FlutterDesktopEngineSetNextFrameCallback FlutterDesktopGetDpiForHWND FlutterDesktopGetDpiForMonitor FlutterDesktopMessengerAddRef FlutterDesktopMessengerIsAvailable FlutterDesktopMessengerLock FlutterDesktopMessengerRelease FlutterDesktopMessengerSend FlutterDesktopMessengerSendResponse FlutterDesktopMessengerSendWithReply FlutterDesktopMessengerSetCallback FlutterDesktopMessengerUnlock FlutterDesktopPluginRegistrarGetMessenger FlutterDesktopPluginRegistrarGetView FlutterDesktopPluginRegistrarGetViewById FlutterDesktopPluginRegistrarRegisterTopLevelWindowProcDelegate FlutterDesktopPluginRegistrarSetDestructionHandler FlutterDesktopPluginRegistrarUnregisterTopLevelWindowProcDelegate FlutterDesktopRegistrarGetTextureRegistrar FlutterDesktopResyncOutputStreams FlutterDesktopTextureRegistrarMarkExternalTextureFrameAvailable FlutterDesktopTextureRegistrarRegisterExternalTexture FlutterDesktopTextureRegistrarUnregisterExternalTexture FlutterDesktopViewControllerCreate FlutterDesktopViewControllerDestroy FlutterDesktopViewControllerForceRedraw FlutterDesktopViewControllerGetEngine FlutterDesktopViewControllerGetView FlutterDesktopViewControllerGetViewId FlutterDesktopViewControllerHandleTopLevelWindowProc FlutterDesktopViewGetGraphicsAdapter FlutterDesktopViewGetHWND InternalFlutterGpu_CommandBuffer_Initialize InternalFlutterGpu_CommandBuffer_Submit InternalFlutterGpu_Context_GetDefaultColorFormat InternalFlutterGpu_Context_GetDefaultDepthStencilFormat InternalFlutterGpu_Context_GetDefaultStencilFormat InternalFlutterGpu_Context_GetMinimumUniformByteAlignment InternalFlutterGpu_Context_GetSupportsOffscreenMSAA InternalFlutterGpu_Context_InitializeDefault InternalFlutterGpu_DeviceBuffer_Flush InternalFlutterGpu_DeviceBuffer_Initialize InternalFlutterGpu_DeviceBuffer_InitializeWithHostData InternalFlutterGpu_DeviceBuffer_Overwrite InternalFlutterGpu_RenderPass_Begin InternalFlutterGpu_RenderPass_BindIndexBufferDevice InternalFlutterGpu_RenderPass_BindPipeline InternalFlutterGpu_RenderPass_BindTexture InternalFlutterGpu_RenderPass_BindUniformDevice InternalFlutterGpu_RenderPass_BindVertexBufferDevice InternalFlutterGpu_RenderPass_ClearBindings InternalFlutterGpu_RenderPass_Draw InternalFlutterGpu_RenderPass_Initialize InternalFlutterGpu_RenderPass_SetColorAttachment InternalFlutterGpu_RenderPass_SetColorBlendEnable InternalFlutterGpu_RenderPass_SetColorBlendEquation InternalFlutterGpu_RenderPass_SetCullMode InternalFlutterGpu_RenderPass_SetDepthCompareOperation InternalFlutterGpu_RenderPass_SetDepthStencilAttachment InternalFlutterGpu_RenderPass_SetDepthWriteEnable InternalFlutterGpu_RenderPass_SetPolygonMode InternalFlutterGpu_RenderPass_SetPrimitiveType InternalFlutterGpu_RenderPass_SetScissor InternalFlutterGpu_RenderPass_SetStencilConfig InternalFlutterGpu_RenderPass_SetStencilReference InternalFlutterGpu_RenderPass_SetViewport InternalFlutterGpu_RenderPass_SetWindingOrder InternalFlutterGpu_RenderPipeline_Initialize InternalFlutterGpu_ShaderLibrary_GetShader InternalFlutterGpu_ShaderLibrary_InitializeWithAsset InternalFlutterGpu_Shader_GetUniformMemberOffset InternalFlutterGpu_Shader_GetUniformStructSize InternalFlutterGpu_Texture_AsImage InternalFlutterGpu_Texture_BytesPerTexel InternalFlutterGpu_Texture_Initialize InternalFlutterGpu_Texture_Overwrite InternalFlutterGpu_Texture_SetCoordinateSystem InternalFlutterWindows_WindowManager_CreateRegularWindow InternalFlutterWindows_WindowManager_GetTopLevelWindowHandle InternalFlutterWindows_WindowManager_GetWindowContentSize InternalFlutterWindows_WindowManager_HasTopLevelWindows InternalFlutterWindows_WindowManager_Initialize InternalFlutterWindows_WindowManager_SetWindowContentSize

metal_calculator.exe

IMPHASH 4ecd7083bcaf0b96ce32df27df132111
SHA256 7022b47b9fd687912de857fd7416ce1b4c5400423b6248c40384ca0e0d0c6954
MD5 efeff1eb5096fdb1d4fd12a228201f9e
SHA1 008a54f1fedb149d0dcc7d8e66ed43890aea4e35
SHA512 12bebabdc700b5096c89e3b2a3fa248ee63404e6828c97d61f912d8c6aeb5341ee9c6df89c250abbd8fe4826602e7e119d523e9b56701a25de21bb7b8cffb2fa
SSDEEP 1536:13atU4coy8MNn688W4BiTVWiCrY1XDBz0:13atJyF6fWxTV5CrY1C
TLSH
T122933A4BD62E5696E3596CB8C6934909CE72FC934F9196CF53B09C970BA26E0DF39300
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

23572

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

dwmapi

DwmSetWindowAttribute

share_plus_plugin

SharePlusWindowsPluginCApiRegisterWithRegistrar

url_launcher_windows_plugin

UrlLauncherWindowsRegisterWithRegistrar

flutter_windows

FlutterDesktopViewControllerGetView FlutterDesktopViewGetHWND FlutterDesktopResyncOutputStreams FlutterDesktopMessengerUnlock FlutterDesktopMessengerLock FlutterDesktopMessengerIsAvailable FlutterDesktopMessengerRelease FlutterDesktopMessengerAddRef FlutterDesktopMessengerSetCallback FlutterDesktopMessengerSendResponse FlutterDesktopMessengerSendWithReply FlutterDesktopMessengerSend FlutterDesktopViewControllerCreate FlutterDesktopViewControllerDestroy FlutterDesktopViewControllerHandleTopLevelWindowProc FlutterDesktopViewControllerForceRedraw FlutterDesktopEngineSetNextFrameCallback FlutterDesktopEngineGetMessenger FlutterDesktopEngineGetPluginRegistrar FlutterDesktopEngineReloadSystemFonts FlutterDesktopEngineDestroy FlutterDesktopEngineCreate FlutterDesktopGetDpiForMonitor

kernel32

GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter IsProcessorFeaturePresent TerminateProcess GetCurrentProcess InitializeSListHead UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext SetUnhandledExceptionFilter LoadLibraryA GetProcAddress GetModuleHandleW FreeLibrary AllocConsole WideCharToMultiByte LocalFree GetStartupInfoW GetCommandLineW AttachConsole IsDebuggerPresent

user32

CreateWindowExW DestroyWindow ShowWindow MoveWindow SetWindowPos SetFocus GetClientRect UnregisterClassW SetWindowLongPtrW SetParent LoadCursorW LoadIconW MonitorFromPoint GetDpiForWindow GetMessageW RegisterClassW GetWindowLongPtrW PostQuitMessage TranslateMessage DispatchMessageW DefWindowProcW

shell32

CommandLineToArgvW

ole32

CoUninitialize CoInitializeEx

advapi32

RegGetValueW

msvcp140

?width@ios_base@std@@QEAA_J_J@Z ?width@ios_base@std@@QEBA_JXZ ?flags@ios_base@std@@QEBAHXZ ?good@ios_base@std@@QEBA_NXZ ?_Xbad_function_call@std@@YAXXZ ?sync_with_stdio@ios_base@std@@SA_N_N@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ ?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?_Raise_handler@std@@3P6AXAEBVexception@stdext@@@ZEA ?_Xlength_error@std@@YAXPEBD@Z ?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ

vcruntime140_1

__CxxFrameHandler4

vcruntime140

_CxxThrowException __std_exception_destroy __std_exception_copy __current_exception_context __current_exception __C_specific_handler memcmp __std_type_info_compare memmove __std_terminate memset memcpy

api-ms-win-crt-runtime-l1-1-0

_register_onexit_function _initialize_onexit_table _exit terminate _get_wide_winmain_command_line _crt_atexit _initterm _register_thread_local_exe_atexit_callback _c_exit exit _invoke_watson _initialize_wide_environment _configure_wide_argv _initterm_e _set_app_type _seh_filter_exe _cexit

api-ms-win-crt-string-l1-1-0

strlen wcslen

api-ms-win-crt-stdio-l1-1-0

freopen_s __acrt_iob_func _set_fmode __p__commode _fileno _dup2

api-ms-win-crt-heap-l1-1-0

_callnewh free _set_new_mode malloc

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

share_plus_plugin.dll

IMPHASH 377228a3701014663b3313242552a75c
SHA256 8f8465f1116030daad98cdcfd1884b691121e0b894a5b011d922fbeac2430477
MD5 6202b1690c9d6d7b1bc7dc907a65acb2
SHA1 6c9cc4e6d469a79191a3c4bce2f71df30e9b07a8
SHA512 c11a83b456c21386d4d5f51a22f5e69012705e68a0460765969cb3a656d9762543b83a1853b36bbf7d014eb36b79849a5e8b1b1628930f0f2218e7c5ce4b5fd0
SSDEEP 3072:Z/H3Kf6BAL8/MYdg2k2VhP6YvMfT4LtrVph:Z/H3Kf6BAL8/TrMfT4LtrV
TLSH
T109D32A27BA1D40E7D13A907C8D478A4AD772B8924F919BCB3751479F4E27BE80E3A301
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

63012

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

flutter_windows

FlutterDesktopPluginRegistrarGetView FlutterDesktopViewGetHWND FlutterDesktopPluginRegistrarGetMessenger FlutterDesktopRegistrarGetTextureRegistrar FlutterDesktopTextureRegistrarMarkExternalTextureFrameAvailable FlutterDesktopTextureRegistrarUnregisterExternalTexture FlutterDesktopTextureRegistrarRegisterExternalTexture FlutterDesktopMessengerUnlock FlutterDesktopMessengerLock FlutterDesktopMessengerIsAvailable FlutterDesktopMessengerRelease FlutterDesktopMessengerAddRef FlutterDesktopMessengerSetCallback FlutterDesktopMessengerSendResponse FlutterDesktopMessengerSendWithReply FlutterDesktopMessengerSend FlutterDesktopPluginRegistrarSetDestructionHandler

kernel32

IsDebuggerPresent InitializeSListHead DisableThreadLibraryCalls GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter IsProcessorFeaturePresent TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext SleepConditionVariableSRW RaiseException SleepEx MultiByteToWideChar ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable

user32

GetAncestor

ole32

CoTaskMemAlloc CoCreateFreeThreadedMarshaler

msvcp140

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z ?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ ?_Xlength_error@std@@YAXPEBD@Z ?_Raise_handler@std@@3P6AXAEBVexception@stdext@@@ZEA ?good@ios_base@std@@QEBA_NXZ ?flags@ios_base@std@@QEBAHXZ ?width@ios_base@std@@QEBA_JXZ ?width@ios_base@std@@QEAA_J_J@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?_Xbad_function_call@std@@YAXXZ ?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ ?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory

api-ms-win-core-winrt-string-l1-1-0

WindowsCreateString WindowsCreateStringReference

api-ms-win-core-winrt-error-l1-1-0

RoOriginateError

vcruntime140

__std_type_info_destroy_list __std_exception_destroy __std_exception_copy __C_specific_handler __std_terminate __std_type_info_compare _purecall _CxxThrowException memcmp memcpy memmove memset

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_invoke_watson _initterm _initterm_e _seh_filter_dll _configure_narrow_argv _initialize_narrow_environment _initialize_onexit_table _register_onexit_function _execute_onexit_table _crt_atexit _cexit

api-ms-win-crt-string-l1-1-0

strlen wcslen

api-ms-win-crt-heap-l1-1-0

_callnewh free malloc

url_launcher_windows_plugin.dll

IMPHASH 38966fb31f2087495afb89099286ae0b
SHA256 bbbe443621e788edc5855673aaad6636138d7b75dee4904966a68a216e9f2e53
MD5 c3d8d0d5fd9cb95a713fdfc86c75f858
SHA1 7c87a0c50edbd16e680af396619bcc2f237a9986
SHA512 17498a28f762005e66e7be6b42c2f79674fbcec0d88afe6925ab47a6c23867d283add04aba21dcc679e7a14b55555d2976bdfbb7e314d126015f29fbc58ed94e
SSDEEP 1536:35nd3bh8sIM5J7xkQTv6cBzCh6B3s1dOjCBaM8xVUimdY:35nhSsIG/nv63d1dONM8xVUimdY
TLSH
T1E1A3293BAB1910ABE259D478CA574941DB72BC854791A7CF57A00ADB0F27FE81F3E201
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

53076

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

shlwapi

UrlUnescapeA

flutter_windows

FlutterDesktopTextureRegistrarUnregisterExternalTexture FlutterDesktopTextureRegistrarRegisterExternalTexture FlutterDesktopMessengerUnlock FlutterDesktopMessengerLock FlutterDesktopMessengerIsAvailable FlutterDesktopMessengerRelease FlutterDesktopTextureRegistrarMarkExternalTextureFrameAvailable FlutterDesktopMessengerSetCallback FlutterDesktopMessengerSendResponse FlutterDesktopMessengerSendWithReply FlutterDesktopMessengerSend FlutterDesktopRegistrarGetTextureRegistrar FlutterDesktopPluginRegistrarGetMessenger FlutterDesktopPluginRegistrarGetView FlutterDesktopPluginRegistrarSetDestructionHandler FlutterDesktopMessengerAddRef

kernel32

GetCurrentProcessId QueryPerformanceCounter TerminateProcess GetCurrentProcess IsProcessorFeaturePresent SetUnhandledExceptionFilter GetCurrentThreadId IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext SleepConditionVariableSRW WakeAllConditionVariable MultiByteToWideChar GetSystemTimeAsFileTime AcquireSRWLockExclusive ReleaseSRWLockExclusive DisableThreadLibraryCalls UnhandledExceptionFilter InitializeSListHead

shell32

ShellExecuteW

advapi32

RegCloseKey RegQueryValueExW RegOpenKeyExW

msvcp140

?_Xlength_error@std@@YAXPEBD@Z ?_Raise_handler@std@@3P6AXAEBVexception@stdext@@@ZEA ?_Xout_of_range@std@@YAXPEBD@Z ?uncaught_exception@std@@YA_NXZ ?good@ios_base@std@@QEBA_NXZ ?flags@ios_base@std@@QEBAHXZ ?width@ios_base@std@@QEBA_JXZ ?width@ios_base@std@@QEAA_J_J@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ ?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ ?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?_Xbad_function_call@std@@YAXXZ ?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z ?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z ?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z ?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ

vcruntime140

_CxxThrowException memcpy memmove _purecall memcmp memset __std_type_info_compare __current_exception __current_exception_context __C_specific_handler __std_type_info_destroy_list __std_terminate __std_exception_destroy __std_exception_copy

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table _register_onexit_function _execute_onexit_table _configure_narrow_argv _cexit _initterm _initterm_e _seh_filter_dll terminate _invoke_watson _initialize_narrow_environment _crt_atexit

api-ms-win-crt-string-l1-1-0

strlen

api-ms-win-crt-heap-l1-1-0

free malloc _callnewh

Sharing

General

Malware Config

Signatures

File Explorer

metal-calculator-windows.zip

data/app.so

data/flutter_assets/AssetManifest.bin

data/flutter_assets/AssetManifest.json

data/flutter_assets/FontManifest.json

data/flutter_assets/NOTICES.Z

NOTICES.Z

data/flutter_assets/NativeAssetsManifest.json

data/flutter_assets/fonts/MaterialIcons-Regular.otf

data/flutter_assets/packages/cupertino_icons/assets/CupertinoIcons.ttf

data/flutter_assets/shaders/ink_sparkle.frag

data/icudtl.dat

flutter_windows.dll

advapi32

iphlpapi

ole32

oleaut32

psapi

shlwapi

rpcrt4

winmm

ws2_32

imm32

user32

opengl32

bcrypt

api-ms-win-core-path-l1-1-0

ntdll

oleacc

uiautomationcore

propsys

dxgi

gdi32

d3d9

kernel32

crypt32

generic

metal_calculator.exe

dwmapi

share_plus_plugin

url_launcher_windows_plugin

flutter_windows

kernel32

user32

shell32

ole32

advapi32

msvcp140

vcruntime140_1

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic

native_assets.json

share_plus_plugin.dll

flutter_windows

kernel32

user32

ole32

msvcp140

api-ms-win-core-winrt-l1-1-0

api-ms-win-core-winrt-string-l1-1-0

api-ms-win-core-winrt-error-l1-1-0

vcruntime140

vcruntime140_1

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic

url_launcher_windows_plugin.dll

shlwapi