LenovoVantage-(SEDiagnosisAddin).zip
- SHA256 720edfa57bad68027b5864434d19b708a43fd2824489411267ee9c89eca5faf3
Static task
static1
Behavioral task
behavioral1
Sample
LenovoVantage-(SEDiagnosisAddin).zip
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
LenovoVantage-(SEDiagnosisAddin).zip
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
LenovoVantage-(SEDiagnosisAddin).exe
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
LenovoVantage-(SEDiagnosisAddin).exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target LenovoVantage-(SEDiagnosisAddin).zip
- Size 26KB
- Sample261009-pwh7msgv4x
- SHA256 720edfa57bad68027b5864434d19b708a43fd2824489411267ee9c89eca5faf3
- MD5 d5333bdd2a1344770215971a25b2d0a7
- SHA1 d5a357dc5c5d4b8227eeedde922422c1dcdda8dd
- SHA512 53c008097b32250c9cb058eaf293a3f23d5c11501ae2b5dce4e0b8b7dfaf15b7605b850d824c1550beabc5f59b4a099565d36042d747800aabc0e9839d2a7631
- SSDEEP 384:vycP53NWwy5LOKk22w/6f/QM16fygMq7AgTg6p+2P+Ep8AevgSD4U0iyNfgH:vjB3AwZ922wG6hMq7V8l2rl8gXU0iyFa
- TLSH T18DC2E1581204B511AB18F537E19434FE5D798B3E0A45DF0FB92117BB60D92CB3B96B8C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
File Explorer
-
LenovoVantage-(SEDiagnosisAddin).zip.zip 26KB
-
LenovoVantage-(SEDiagnosisAddin).exe.exe 45KB
LenovoVantage-(SEDiagnosisAddin).exe
- SHA256 401a2faed3e46d6b962961a6f363465df60dab63686297dc08848e1e0c8c4356
- MD5 d3fdc7c582abb9ccd879632de935c3b0
- SHA1 57672a2f041d7e0bee3e673bce3f2e244e3a4924
- SHA512 e8b3beb1c50fde7e7844513756a1298b58925f223343863c0aac586a7e0db97401163500fe1d687364145d94209d356f9856cbd4cc9c76cdf41594ae1607e997
- SSDEEP 768:ECFKeXz3s/MvFNCGUcy9tYcFmVR6KJ5YiDLk5jc9zjB:Znz80ZUcyVmVRlX7IUzjB
- TLSH T1A923AE41C6E84A02CE7F4D717AB9D5236E75B7872C00D39939CCD0991FA33C5AA253BA
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
c4:32:9e:0c:f8:c8:56:d5:60:0e:11:7a:53:b0:bf:0f:5a:8c:d6:94:f4:f5:6e:ed:cb:35:b7:e0:45:9e:03:69
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Aug 19, 2026
CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Digest
c4:32:9e:0c:f8:c8:56:d5:60:0e:11:7a:53:b0:bf:0f:5a:8c:d6:94:f4:f5:6e:ed:cb:35:b7:e0:45:9e:03:69
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Lenovo,OU=G17,O=Lenovo,L=Morrisville,ST=North Carolina,C=US
Chains
Aug 19, 2026
CN=Lenovo,OU=G17,O=Lenovo,L=Morrisville,ST=North Carolina,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Lenovo,OU=G17,O=Lenovo,L=Morrisville,ST=North Carolina,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2013 - Jan 15, 2038
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 4, 2025 - Sep 3, 2036
Subject
CN=Lenovo,OU=G17,O=Lenovo,L=Morrisville,ST=North Carolina,C=US
Serial Number
07:b4:d0:ca:4c:b1:77:23:ac:10:8d:17:1d:04:20:05
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jan 31, 2026 - Feb 10, 2027
Subject
CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:3c:4a:61:fb:35:78:d2:b6:dd:00:00:00:00:01:3c
Issuer
CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Nov 13, 2025 - Nov 10, 2026
Subject
CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0b:aa:c1:00:00:00:00:00:09
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Apr 18, 2012 - Apr 18, 2027
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:591A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:14:8d:cd:23:44:ee:06:df:72:00:01:00:00:02:14
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Aug 14, 2025 - Nov 13, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\home\jenkins\agent\workspace\nes_Creed_VantageService_develop\src\ExternalProcess\AddinHost\Lenovo.Vantage.AddinHost.Amd64\obj\Release\net472\Lenovo.Vantage.AddinHost.Amd64.pdb
Name
.text
Size
19KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ