xred | Potato Graphics Pack[.]zip

resource
unpack001/Potato Graphics Pack (Updated)/Nvidia/nvidiaProfileInspector.exe

Potato Graphics Pack.zip

SHA256 163d0d286239e9db0695a33ef518151d8a9c8d2c3065e95ded06e9e276bf98ce
MD5 779949121fc5a73e3c4a6528242fc90f
SHA1 3ad2d7ab2d75d94db1bb9d4a4857880396d5b40f
SHA512 1ddaf3a7b5891cd64cf281ecc9c5eaafe40fbf3a10687c42ac128bc9ab90b8e0af3c02deae1b370a30c9fe083a928042264f5a04f7121fd434bfcf054aae6792
SSDEEP 12288:Zik4c9XBdPCcDo+MRbMZdA9+iNaAxeiElvfOxkuuGlpCNI3a7SnEqMS:gc9XPCh+6giaAFEJfOhvANIhnD
TLSH
T13E052325010F1E38F18F99FBEE9B0E948BDAC81098D7E575F6488E33F5CD2A5892491D
MD5 SHA1 SHA512 SSDEEP TLSH

Potato Graphics Pack (Updated)/AMD-Intel/Poatato Graphics For AMD-Intel.bat

SHA256 c8b23ed5f875785c6606b910901ca0304fb411077a90648136164475a61cf212
MD5 6585082b1172872e4de405067fd27336
SHA1 1b313584538c896e9d0ad3e75607adca62af6836
SHA512 a4efd15d1500c12238d61ad13df2ecf9bcd75da50b7f5f07d7f9b7e89649656db78cf2d9472d61476837ef17a89f1ed89953b0ecd7c8785651419ed03a5b96e7
SSDEEP 384:qFVOP9FnSXE9ADGNWV4bso10f23a9hMXI8xITv+F+azOBgtsnD65Ck5QLk5QL6hb:FnxVHuibk3ilv
TLSH
T1A743E40257FD4177DE5567283362F506492CE432AB8CBB372AE8269BF6CC34861F16E4
MD5 SHA1 SHA512 SSDEEP TLSH

Potato Graphics Pack (Updated)/Nvidia/Fortnite_Balanced.nip

SHA256 97d869f11d2f4c065a76b1e272d577a7c9454cb4d752f22d00d66573d30b2e91
MD5 d4302ffdbf5eb5f94ae1b7509d501cf1
SHA1 7dba0634d8a6172ee28969fd65ae7ea0898adb4a
SHA512 8f199803fc65616ab1fa15ebda58bb64aea7bf2decdf715260e8ab20645e130033857697cd282ce357bc0dffb024adb0f6a19baf1288a04c9c6c1d710dace8a9
SSDEEP 96:j+nOog/OE/Oe/5/O8/N/OUuQldfltkflUflmfGflDtdP:Wg/p/n/5/5/N/RLldflqflUflmfGfl5t
TLSH
T1F391B30357EE145CF2E71A3CA93544366AA7BC2A1F78E56C009D204DDBF3E224D54B7A
MD5 SHA1 SHA512 SSDEEP TLSH

Potato Graphics Pack (Updated)/Nvidia/Fortnite_Potato.nip

SHA256 a2e150099a815948abbedcba35c942190242ceab0a975758dc132a87eafdc241
MD5 4d0cde31d48562b78f89c982d668b594
SHA1 d98a5196fcb34fcfe91cd508d86e1ce2ac3d7211
SHA512 5a23b5633655e415857597d3678f1bffe3ca949986cd9f2507cc7d70100e35d54007e15a1e6bedd604a8c763db666e538c5df3fe4dd193241b008ebf587f10ed
SSDEEP 96:j+nOog/OE/Oe/5/O8/N/OUuQldfltkflzflmfGflD/dP:Wg/p/n/5/5/N/RLldflqflzflmfGfl7t
TLSH
T12291B30357EE145CF2E71A3CA93544366AA7BC2A1F78E56C009D204DDBF3E224D54B7A
MD5 SHA1 SHA512 SSDEEP TLSH

Potato Graphics Pack (Updated)/Nvidia/Fortnite_Recommended.nip

SHA256 56da843a5cc850622b76d30a75888e39c259fc3d3e0cd735233fde7eb2a621bb
MD5 c8575bafa0dff32935572ef82c0b11b6
SHA1 3e6962e37b050d91fd3f41d3b6a37f1bd6992ec6
SHA512 44389f3670ed68c9bfa733230bef824707f4e959ff0f9455e92117cc2f1ce419ab0e4f045af780a4706295596c93649b9494369fbd70ed21a4140d8312f22ee0
SSDEEP 96:j+nOog/OE/Oe/5/O8/N/OUuQldfltkflpflmfGflDjdP:Wg/p/n/5/5/N/RLldflqflpflmfGfl3t
TLSH
T16691B30357EE145CF2E71A3CA93544366AA7BC2A1F78E56C009D204DDBF3E224D54B7A
MD5 SHA1 SHA512 SSDEEP TLSH

Potato Graphics Pack (Updated)/Nvidia/Reference.xml

SHA256 0ea7b055aee5c543047243d2dd7abdd1b8c6d96f5d2b7bb5fe17be8130e005ef
MD5 db4988a5cbee15e057f825d441c31a37
SHA1 84557c4422dbeedd40065d37e4527fa4f06fc483
SHA512 8f776246a046bcc6bd7c1cbdb0aed823df8d57def153cdb08f81e9cf91a815caa61abac86bc0005e23d2efc6e7761820f643953b1f6e195739325f35eacd3bdd
SSDEEP 12288:bhgFrksC2HD3RFUlDKNrgehpyOO5Rl+9nrKSEDMNSFhejk0AXUfBqNjpv+J9+GhE:bhghksC2Dib
TLSH
T1A805F64D34ECA5AAAB0400F3F53F32299A6FFE5947D51268A93826733052DD926D0D3F
MD5 SHA1 SHA512 SSDEEP TLSH

Potato Graphics Pack (Updated)/Nvidia/nvidiaProfileInspector.exe

SHA256 bd69d43b587411c874fa28d57abb14c389f19769896a2abe94cb323f0771baf2
MD5 c652aaf8533b1e1690063ea2d26a28ed
SHA1 79c4676e9ac660f5d5e2d7a09898143511dca593
SHA512 0b284ea830480c698a456a1fe0a18f8246c796efcf714c9c2e4dcead75366999edf33f7d03bf57207258b0da5fa3969cfb838fa9ee9446b4ecbc0d1647bd48ff
SSDEEP 24576:SnsJ39LyjbJkQFMhmC+6GD9cjrT7UdfICR5l3apYF9izdMGk1:SnsHyjtk2MYC5GDfICR5Bf
TLSH
T15485080E71EC987ADB0505F2F43F2229992FFE550A95121C79BC3A777862EC52580A3F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

633728

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

615KB

Virtual Size

614KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

11KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

16B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

57B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

42KB

Virtual Size

42KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1.1MB

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Potato Graphics Pack (Updated)/Nvidia/nvidiaProfileInspector.exe.config

SHA256 051099983b896673909e01a1f631b6652abb88da95c9f06f3efef4be033091fa
MD5 2a2df45a07478a1c77d5834c21f3d7fd
SHA1 f949e331f0d75ba38d33a072f74e2327c870d916
SHA512 1a6dd48f92ea6b68ee23b86ba297cd1559f795946ecda17ade68aea3dda188869bba380e3ea3472e08993f4ae574c528b34c3e25503ee6119fd4f998835e09d7
TLSH
T101C08C1940E8BD278D328F27A352C926EBB0B2A6A064080CF02FA9670B3108D8247326
MD5 SHA1 SHA512 TLSH

Potato Graphics Pack (Updated)/Nvidia/nvidiaProfileInspector.pdb

SHA256 512ec4f35cbe4fe233ee4c59b8952b19b7706e23231612c612c35ebaa0bf9d84
MD5 4b5652061d15ee9d9e2c89254536846c
SHA1 e3e9ea07bb7471a7562878de5191e9f719dcb644
SHA512 7f14cf804a1da788691f49ca89c9c8871de807b8d07e4dac309e47c02d1dbb4042e6d58901491c63f2719b1122fe6195bf4892d7f349f1680b53c55425a5d1e5
SSDEEP 3072:fUm2yWkPXJ1lHIkLtvpblkHWFC09a1E88rR:sm2yZPrlonHOF
TLSH
T1A7043A1AD389C62ECA6627BB44A751537774C114E7078F0362AEB731BC633581BCBA9C
MD5 SHA1 SHA512 SSDEEP TLSH

Sharing

General

Malware Config

Extracted

Signatures

File Explorer

Potato Graphics Pack.zip

Potato Graphics Pack (Updated)/AMD-Intel/Poatato Graphics For AMD-Intel.bat

Potato Graphics Pack (Updated)/Nvidia/Fortnite_Balanced.nip

Potato Graphics Pack (Updated)/Nvidia/Fortnite_Potato.nip

Potato Graphics Pack (Updated)/Nvidia/Fortnite_Recommended.nip

Potato Graphics Pack (Updated)/Nvidia/Reference.xml

Potato Graphics Pack (Updated)/Nvidia/nvidiaProfileInspector.exe

generic

Potato Graphics Pack (Updated)/Nvidia/nvidiaProfileInspector.exe.config

Potato Graphics Pack (Updated)/Nvidia/nvidiaProfileInspector.pdb