MangoDisk-1[.]0[.]3-windows[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
MangoDisk-1.0.3-windows.exe
Size 5.3MB
Sample260816-vpcdeasfjd
SHA256 48c57d40d4385a664b142fce547c927619f8ae3b3e8658c85897113ac90c900a
MD5 b8ccd066745221560ac6d8c5ab0a52ba
SHA1 30a27b3244c975575158d1f10840d0a7de9a4d28
SHA512 59f409934dfac4ccd4b96e51e101f6ad26393f3a3ebf1323f3edf64b5318481c8cb96d0fad6bf679d7e623d39a36f2d2faf42136167adf26a061c79199776a5d
SSDEEP 98304:QngaqE58YICLhejSociCZN8G9dKlk+lTqzCDIvlSEkDoTIZu2NQ2mYL2EXh:Qnd5TICcWD8ACttqzLSERTIZkZY1
TLSH
T10C4633321F439566DC2C18F441FBD086B853E0B382E149FA1798F36A3B64D749AFA764
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

MangoDisk-1.0.3-windows.exe

.exe 5.3MB
$PLUGINSDIR/NSISdl.dll

.dll 25KB
$PLUGINSDIR/StartMenu.dll

.dll 17KB
$PLUGINSDIR/System.dll

.dll 22KB
$PLUGINSDIR/modern-header.bmp

25KB
$PLUGINSDIR/modern-wizard.bmp

150KB
$PLUGINSDIR/nsDialogs.dll

.dll 19KB
$PLUGINSDIR/nsis_tauri_utils.dll

.dll 43KB
MangoDisk.exe

.exe 20.6MB

MangoDisk-1.0.3-windows.exe

IMPHASH 46ce5c12b293febbeb513b196aa7f843
SHA256 48c57d40d4385a664b142fce547c927619f8ae3b3e8658c85897113ac90c900a
MD5 b8ccd066745221560ac6d8c5ab0a52ba
SHA1 30a27b3244c975575158d1f10840d0a7de9a4d28
SHA512 59f409934dfac4ccd4b96e51e101f6ad26393f3a3ebf1323f3edf64b5318481c8cb96d0fad6bf679d7e623d39a36f2d2faf42136167adf26a061c79199776a5d
SSDEEP 98304:QngaqE58YICLhejSociCZN8G9dKlk+lTqzCDIvlSEkDoTIZu2NQ2mYL2EXh:Qnd5TICcWD8ACttqzLSERTIZkZY1
TLSH
T10C4633321F439566DC2C18F441FBD086B853E0B382E149FA1798F36A3B64D749AFA764
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

b3:23:46:6d:63:42:b9:e4:00:99:09:81:a0:a1:58:4f:2a:7a:52:d4:a9:74:4d:ce:a8:36:5e:7c:70:40:97:90

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=1840921,CN=Apowersoft Ltd,O=Apowersoft Ltd,L=Kowloon,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Chains

Aug 14, 2026

SERIALNUMBER=1840921,CN=Apowersoft Ltd,O=Apowersoft Ltd,L=Kowloon,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=1840921,CN=Apowersoft Ltd,O=Apowersoft Ltd,L=Kowloon,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

SERIALNUMBER=1840921,CN=Apowersoft Ltd,O=Apowersoft Ltd,L=Kowloon,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Serial Number

0c:b8:97:01:ee:2f:dc:d8:ef:74:a9:db:a6:26:78:0a

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 12, 2023 - Dec 12, 2026

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

13983

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegEnumValueW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegOpenKeyExW RegCreateKeyExW

shell32

SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW ShellExecuteExW

ole32

CoCreateInstance OleUninitialize OleInitialize IIDFromString CoTaskMemFree

comctl32

ImageList_Destroy ord17 ImageList_AddMasked ImageList_Create

user32

MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW CreatePopupMenu AppendMenuW TrackPopupMenu OpenClipboard EmptyClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetSysColor SetWindowPos GetWindowLongW IsWindowEnabled SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CharPrevW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint CharNextA wsprintfA DispatchMessageW CreateWindowExW PeekMessageW GetSystemMetrics

gdi32

GetDeviceCaps SetBkColor SelectObject DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor

kernel32

RemoveDirectoryW lstrcmpiA GetTempFileNameW CreateProcessW CreateDirectoryW CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersionExW GetCommandLineW GetTempPathW GetWindowsDirectoryW SetEnvironmentVariableW CopyFileW WriteFile GetCurrentProcess GetModuleFileNameW GetLastError GetFileSize CreateFileW GetTickCount Sleep SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW MulDiv lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject ExitProcess

$PLUGINSDIR/NSISdl.dll

IMPHASH db80d5e142e716e818b7f4614dcade3c
SHA256 842a7c64d216a9900c7d83e7cf6c5a746d391f428a4ac6c4e72ff4f8c19efa6a
MD5 0f6751fe9950de33f3e6dcf4cbce4913
SHA1 a262feb3448eea71ff734938112f373a9a653735
SHA512 3b4ff2888a38c91a11bc7e081cf0c121815a257b78eaab199fbd4c652ce2065ac6284ad8f512a1d350695f44b05a66328d69eea1dac013d91fad6df3741f9023
SSDEEP 768:frSQMCOp0yamMRWysiegYicgoDP5AL+NX:fzS2yaVnN7GD9NX
TLSH
T1D0C27D5399508CF1CF63193030C63A3AAEB29E96295085C363B78C5EDF5234377BE599
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

d4:af:1e:26:87:53:62:57:41:89:7d:aa:5a:4a:0e:8e:44:21:57:4c:c9:c9:e0:dc:db:5f:91:1d:d1:ed:59:8d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=1840921,CN=Apowersoft Ltd,O=Apowersoft Ltd,L=Kowloon,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Chains

Aug 14, 2026

SERIALNUMBER=1840921,CN=Apowersoft Ltd,O=Apowersoft Ltd,L=Kowloon,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=1840921,CN=Apowersoft Ltd,O=Apowersoft Ltd,L=Kowloon,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

SERIALNUMBER=1840921,CN=Apowersoft Ltd,O=Apowersoft Ltd,L=Kowloon,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Serial Number

0c:b8:97:01:ee:2f:dc:d8:ef:74:a9:db:a6:26:78:0a

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 12, 2023 - Dec 12, 2026

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

9321

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/StartMenu.dll

IMPHASH 646971a3aef724d6f553f40ae84fe26b
SHA256 9bf451c74198330da74689b8bc8827984987a2c28d55190ec1ee027950a75701
MD5 1fcf0c83add40ec6812c7a60c0f77195
SHA1 5373a4d287739e9a803648e2b8bc334cc99e6909
SHA512 ddef62d4baa8ace201034bd760f4ed8a4edae56b8bf5ce4c9bde34bc949af040179f9b5534d3210dedf97f8ae50c4b7de97e44ab8e6324043b897ddbbdca5a0f
SSDEEP 384:vuTF64UqAfncvrEIYicgl/G9xy8RbmL4nNyLX:WTF64X1Yicgof5ALp
TLSH
T1CB825BB3D6D00C22EC27993034D26A376F76BA511B81C2D76106C1DA9B90B93BF7C369
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

ce:4b:5f:ca:79:2c:97:ec:4f:db:81:5a:27:58:ae:61:bf:92:0f:a0:c2:65:57:3c:31:61:63:88:97:6b:5c:fa

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=1840921,CN=Apowersoft Ltd,O=Apowersoft Ltd,L=Kowloon,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Chains

Aug 14, 2026

SERIALNUMBER=1840921,CN=Apowersoft Ltd,O=Apowersoft Ltd,L=Kowloon,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=1840921,CN=Apowersoft Ltd,O=Apowersoft Ltd,L=Kowloon,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

SERIALNUMBER=1840921,CN=Apowersoft Ltd,O=Apowersoft Ltd,L=Kowloon,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Serial Number

0c:b8:97:01:ee:2f:dc:d8:ef:74:a9:db:a6:26:78:0a

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 12, 2023 - Dec 12, 2026

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

6430

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/System.dll

IMPHASH 509a34b3a68a773e0afb4259e68f9f82
SHA256 276505e4f47760f706338720199ac9dd9391aed134ede25a9da49058dbbd0c47
MD5 4477db0614ea134e6a5ed631a47be009
SHA1 08422a9711f59bf76ef12701945b23dc05592c39
SHA512 e4d6fa4a878c83c6410c388ed9e6faf158008a8ccd63b18e420588d65e5514d3e9c8cf07ae0d500b79229939b5a0ad7a577009593b1bcecf51301911f6b7cc36
SSDEEP 384:E/Qlt7wiij/lMRv/9V4b4rAIYicgl/GO3fy8RbmL4nNyK2f:EaeiijipNJYicgoGf5AL5f
TLSH
T18FA27D5386A08CF1ED125C3034D46F3BAF7A79991AD085D3A3E6C091AF503C76ABD297
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

32:e2:dd:5c:bb:84:b8:2a:05:d0:1b:81:81:41:e4:c0:f5:01:8c:f3:f4:3b:ca:45:1d:82:40:88:53:6a:7d:af

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=1840921,CN=Apowersoft Ltd,O=Apowersoft Ltd,L=Kowloon,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Chains

Aug 14, 2026

SERIALNUMBER=1840921,CN=Apowersoft Ltd,O=Apowersoft Ltd,L=Kowloon,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=1840921,CN=Apowersoft Ltd,O=Apowersoft Ltd,L=Kowloon,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

SERIALNUMBER=1840921,CN=Apowersoft Ltd,O=Apowersoft Ltd,L=Kowloon,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Serial Number

0c:b8:97:01:ee:2f:dc:d8:ef:74:a9:db:a6:26:78:0a

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 12, 2023 - Dec 12, 2026

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

10879

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/nsDialogs.dll

IMPHASH 3b477381217c97b22146297f93df2a92
SHA256 d0b94e77d18f9d2188723eac0d921c30ca16ab87275b51ab82bc9a078f1d669c
MD5 55c44aa8b8a3990a97dd88740c13b83e
SHA1 908328337715790c5d7c2434e17786ea9d23a01d
SHA512 5361f68628031b7317dc9ab148d589f81ea361580f4622e627c4b5199de866f4fce826929cf3bd717dfd9be4f94814b175774f8c5b3f6e070ff1d1af49af91c1
SSDEEP 384:5A7k8985U30WAw0htIFc5IYicgl/GsePrfy8RbmL4nNyVHlv:aNi5U3/Aw0fkYicgosqrf5ALrx
TLSH
T15C928ED385D02C33CC93593034D41A3EDEB9675464D19DC2A267C9496B613623F7C3AA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

65:c9:93:51:55:cb:57:a4:8e:f4:dc:52:eb:9c:e2:7f:53:97:8a:df:39:6e:04:b2:3b:66:4c:c4:b1:fa:69:f5

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=1840921,CN=Apowersoft Ltd,O=Apowersoft Ltd,L=Kowloon,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Chains

Aug 14, 2026

SERIALNUMBER=1840921,CN=Apowersoft Ltd,O=Apowersoft Ltd,L=Kowloon,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=1840921,CN=Apowersoft Ltd,O=Apowersoft Ltd,L=Kowloon,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

SERIALNUMBER=1840921,CN=Apowersoft Ltd,O=Apowersoft Ltd,L=Kowloon,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Serial Number

0c:b8:97:01:ee:2f:dc:d8:ef:74:a9:db:a6:26:78:0a

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 12, 2023 - Dec 12, 2026

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

7527

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/nsis_tauri_utils.dll

IMPHASH 2030931b38a854dde8cdd69245a8096a
SHA256 6011fc421b32d9c2717e6e078988ac0e19588a390f72d7498b054345172d2ae1
MD5 2f62051ad4d19ad7e061a8ade69d24e6
SHA1 bedb6d65e5a8484c4d753077e2de885c3d6caefe
SHA512 dce04c6cb471e39406676681942da89f45f14333db8824dff004cd5988238cb8ae736714dae505da5494d7bd16092a059dd8722c8c8ad3e46e0aa66de92d0a12
SSDEEP 768:y/wOD4gzTVpAVk2h5Rsekk55aCukBFKpnp0jdhK7W+qVG/Yicgo75AL3:0wODZzTrAV5Oevq4DtXHVG/7GW
TLSH
T10F137C49FDC47D66D6CF04702488463E9A7FC8081A40C99BE3615EA3CAD2332AED916F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Digest

83:3a:0c:a6:a9:ea:fe:42:8b:8c:66:14:d5:bb:78:4d:6e:28:98:d1:44:45:77:45:9c:98:93:7f:05:54:8f:4a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=1840921,CN=Apowersoft Ltd,O=Apowersoft Ltd,L=Kowloon,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Chains

Aug 14, 2026

SERIALNUMBER=1840921,CN=Apowersoft Ltd,O=Apowersoft Ltd,L=Kowloon,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=1840921,CN=Apowersoft Ltd,O=Apowersoft Ltd,L=Kowloon,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

SERIALNUMBER=1840921,CN=Apowersoft Ltd,O=Apowersoft Ltd,L=Kowloon,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Serial Number

0c:b8:97:01:ee:2f:dc:d8:ef:74:a9:db:a6:26:78:0a

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 12, 2023 - Dec 12, 2026

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

nsis_tauri_utils.pdb

MangoDisk.exe

IMPHASH 73d4443d743d80638b9cb01e58017242
SHA256 be25c46dec4b459aabddf733bcb4923e95b8ffc806c226784b6db6eda50da9ac
MD5 2f8cec1313670dc640551ff53323ab47
SHA1 88bf853d2c8d6447a4ebf2e81a25fded8b3228db
SHA512 a598d805deaf1a1294a538b0dfc7577e73080e969e2103d81c4048a562d23d22f74bfed98889c8a1dbe3f7e26f87cd2ed1139055f780df6a795699ddef453af7
SSDEEP 196608:N2AgD2zYEVg5N+BONjkSkGe8Ccu6KafVj8:JggVg5jjkkeRcu6KaNg
TLSH
T16427F5247A5AA96DC19AC474834B8A724E7030CB0B35B9FF44D496782F6DBF42F38359
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Digest

04:88:22:a7:8e:e1:a8:71:11:57:ba:8e:61:72:88:42:b0:75:43:77:c1:a9:e8:8a:28:96:59:4f:2f:16:c3:ec

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=1840921,CN=Apowersoft Ltd,O=Apowersoft Ltd,L=Kowloon,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Chains

Aug 14, 2026

SERIALNUMBER=1840921,CN=Apowersoft Ltd,O=Apowersoft Ltd,L=Kowloon,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=1840921,CN=Apowersoft Ltd,O=Apowersoft Ltd,L=Kowloon,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

SERIALNUMBER=1840921,CN=Apowersoft Ltd,O=Apowersoft Ltd,L=Kowloon,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Serial Number

0c:b8:97:01:ee:2f:dc:d8:ef:74:a9:db:a6:26:78:0a

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 12, 2023 - Dec 12, 2026

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

14767372

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

mangodisk.pdb

bcryptprimitives

ProcessPrng

kernel32

CancelIoEx ReadFile SetHandleInformation GetOverlappedResult SetFileCompletionNotificationModes WriteFile GetFileAttributesW OutputDebugStringA OutputDebugStringW GetModuleFileNameW GetProcessHeap HeapFree LoadLibraryExW FreeLibrary GetFileInformationByHandle SetLastError GetCurrentProcess DuplicateHandle GetFileInformationByHandleEx TlsFree UnlockFile FindClose FindFirstFileExW FindNextFileW GetLogicalDrives ReleaseMutex GetVolumeInformationW GetProcAddress GetDriveTypeW GetUserDefaultUILanguage Sleep GetSystemWindowsDirectoryW GetWindowsDirectoryW GetQueuedCompletionStatusEx GetProcessId GetEnvironmentVariableW OpenProcess WaitForSingleObject GetExitCodeProcess PostQueuedCompletionStatus ReleaseSRWLockExclusive GetFinalPathNameByHandleW GetVolumeNameForVolumeMountPointW AcquireSRWLockExclusive GetModuleHandleA GetLastError MoveFileExW GetUserPreferredUILanguages GetSystemInfo GetNativeSystemInfo CloseHandle CreateIoCompletionPort TlsSetValue TlsGetValue GetCurrentThreadId GetFullPathNameW LoadLibraryA WakeAllConditionVariable LoadLibraryW SleepConditionVariableSRW GetSystemTimeAsFileTime GetModuleHandleW IsDebuggerPresent IsProcessorFeaturePresent RtlPcToFileHeader RaiseException LCIDToLocaleName EncodePointer GetDiskFreeSpaceExW lstrlenW TlsAlloc GetComputerNameExW SetFileInformationByHandle SetNamedPipeHandleState OpenFileById Process32NextW CreateFileW LoadLibraryExA GetSystemDirectoryW HeapAlloc Process32FirstW CreateToolhelp32Snapshot LockFileEx DeviceIoControl FormatMessageW GetConsoleMode CreateMutexW RtlUnwindEx SetUnhandledExceptionFilter UnhandledExceptionFilter InitializeSListHead DeleteCriticalSection InitializeCriticalSectionAndSpinCount RtlVirtualUnwind SystemTimeToTzSpecificLocalTime SystemTimeToFileTime FreeEnvironmentStringsW CompareStringOrdinal AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread SwitchToThread CreateWaitableTimerExW SetWaitableTimer QueryPerformanceCounter RtlCaptureContext RtlLookupFunctionEntry GetCurrentDirectoryW GetEnvironmentStringsW GetCommandLineW FlushFileBuffers SetFilePointerEx GetStdHandle GetCurrentProcessId WriteFileEx SleepEx TerminateProcess QueryPerformanceFrequency GetSystemTimePreciseAsFileTime RemoveDirectoryW HeapReAlloc CreateEventW CancelIo ExitProcess CreateNamedPipeW ReadFileEx WaitForMultipleObjects CreateThread GetTempPathW SetEnvironmentVariableW CreateDirectoryW DeleteFileW CreateSymbolicLinkW CreateProcessW GetConsoleOutputCP MultiByteToWideChar WriteConsoleW WideCharToMultiByte WaitForSingleObjectEx CreateMutexA

ntdll

RtlGetVersion RtlNtStatusToDosError NtDeviceIoControlFile NtCancelIoFileEx NtOpenFile NtWriteFile NtReadFile NtCreateFile

advapi32

RegQueryInfoKeyW RegEnumKeyExW OpenProcessToken GetTokenInformation CreateProcessWithTokenW RegGetValueW RegQueryValueExW RegOpenKeyExW RegCloseKey EventRegister EventWriteTransfer EventSetInformation EventUnregister SystemFunction036

user32

GetRawInputData DestroyIcon SetMenuItemInfoW MonitorFromPoint ReleaseCapture SetCapture MsgWaitForMultipleObjectsEx RegisterRawInputDevices SetPropW EnableMenuItem SetParent MapWindowPoints GetWindow RegisterWindowMessageA SetFocus ShowWindow GetSystemMenu AppendMenuW DestroyWindow GetMenuItemInfoW SetWindowRgn SystemParametersInfoA GetWindowRect GetParent FindWindowExW EnumDisplayMonitors InsertMenuW IsWindowEnabled EnableWindow ReleaseDC CreateAcceleratorTableW GetDC IsProcessDPIAware DestroyAcceleratorTable CreatePopupMenu CreateMenu ShowCursor DestroyMenu RemoveMenu RegisterClassExW DrawMenuBar SetMenu GetWindowLongPtrW SetWindowLongPtrW VkKeyScanW CreateIcon GetAsyncKeyState GetKeyboardState ToUnicodeEx GetKeyState MapVirtualKeyExW SendInput SetForegroundWindow GetWindowTextW SetWindowLongW IsWindowVisible GetClipCursor ClipCursor SetWindowDisplayAffinity TranslateAcceleratorW RegisterTouchWindow IsWindow AdjustWindowRectEx FlashWindowEx GetActiveWindow CreateWindowExW DefWindowProcW CheckMenuItem GetMenu FindWindowW SendMessageW GetWindowThreadProcessId GetShellWindow AdjustWindowRect UpdateWindow InvalidateRect SetCursorPos GetWindowTextLengthW LoadCursorW InvalidateRgn GetWindowPlacement SetWindowPlacement ChangeDisplaySettingsExW GetUpdateRect MapVirtualKeyW ValidateRect GetMonitorInfoW MonitorFromWindow GetCursorPos SetCursor GetSystemMetrics CloseTouchInputHandle GetTouchInputInfo TrackMouseEvent SystemParametersInfoW SetWindowTextW FillRect GetKeyboardLayout MonitorFromRect GetForegroundWindow ClientToScreen GetClientRect GetWindowLongW ScreenToClient DrawTextW GetWindowDC PostThreadMessageW PostMessageW PeekMessageW DispatchMessageW GetMessageW OffsetRect GetMenuBarInfo IsIconic EnumChildWindows PostQuitMessage TrackPopupMenu DispatchMessageA TranslateMessage GetMessageA SetWindowPos DrawIconEx RedrawWindow

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

ole32

CoTaskMemFree CoCreateInstance CoUninitialize RegisterDragDrop CoTaskMemAlloc CoInitialize RevokeDragDrop CoInitializeEx CoCreateFreeThreadedMarshaler OleInitialize

comctl32

TaskDialogIndirect DefSubclassProc RemoveWindowSubclass SetWindowSubclass

gdi32

BitBlt DeleteDC GetDeviceCaps CreateDIBSection CombineRgn CreateCompatibleDC CreateRectRgn DeleteObject CreateSolidBrush SelectObject SetTextColor SetBkMode

dwmapi

DwmSetWindowAttribute DwmGetWindowAttribute DwmEnableBlurBehindWindow

shlwapi

SHCreateMemStream AssocQueryStringW

shell32

SHGetFileInfoW DragFinish SHAppBarMessage ShellExecuteExW SHOpenFolderAndSelectItems ILFree ILCreateFromPathW SHCreateItemFromParsingName ShellExecuteW SHGetKnownFolderPath SHQueryRecycleBinW SHEmptyRecycleBinW DragQueryFileW

oleaut32

SysFreeString SetErrorInfo SysStringLen GetErrorInfo

ws2_32

getaddrinfo freeaddrinfo send WSAStartup WSACleanup closesocket WSAGetLastError getpeername getsockopt getsockname WSASocketW bind connect ioctlsocket shutdown recv WSAIoctl setsockopt WSASend

crypt32

CertAddEncodedCertificateToStore CertOpenStore CertFreeCertificateContext CertGetCertificateChain CertSetCertificateContextProperty CertVerifyCertificateChainPolicy CertFreeCertificateChain CertCloseStore CertFreeCertificateChainEngine CertCreateCertificateChainEngine

bcrypt

BCryptGenRandom

msi

MsiConfigureProductExW MsiEnumProductsExW MsiQueryProductStateW MsiGetProductInfoW

userenv

CreateEnvironmentBlock DestroyEnvironmentBlock

api-ms-win-crt-string-l1-1-0

strlen wcslen wcscmp strcpy_s wcsncmp _wcsicmp

api-ms-win-crt-math-l1-1-0

floor roundf pow trunc __setusermatherr round

api-ms-win-crt-convert-l1-1-0

wcstol _wtoi _ultow_s

api-ms-win-crt-runtime-l1-1-0

_crt_atexit _initterm _get_initial_narrow_environment _initialize_narrow_environment abort _initterm_e _configure_narrow_argv _register_thread_local_exe_atexit_callback _c_exit _exit _cexit __p___argv exit _register_onexit_function _set_app_type __p___argc _seh_filter_exe terminate _initialize_onexit_table

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

malloc _callnewh _set_new_mode free calloc

Sharing

General

Malware Config

Signatures

File Explorer

MangoDisk-1.0.3-windows.exe

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

generic

$PLUGINSDIR/NSISdl.dll

advapi32

wsock32

user32

kernel32

generic

$PLUGINSDIR/StartMenu.dll

kernel32

user32

gdi32

shell32

ole32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

$PLUGINSDIR/modern-header.bmp

$PLUGINSDIR/modern-wizard.bmp

$PLUGINSDIR/nsDialogs.dll

kernel32

user32

gdi32

shell32

comdlg32

ole32

generic

$PLUGINSDIR/nsis_tauri_utils.dll

kernel32

advapi32

user32

shell32

generic

MangoDisk.exe

bcryptprimitives

kernel32

ntdll

advapi32

user32

api-ms-win-core-synch-l1-2-0

ole32

comctl32

gdi32

dwmapi

shlwapi

shell32

oleaut32

ws2_32

crypt32

bcrypt

msi

userenv

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic