General

  • Target
    UnoPlay-Setup-1.0.0.exe
  • Size 148.3MB
  • Sample261027-wwggdawsfw
  • SHA256 96bfa1f76aa8498d41d568edf5b65ca3b581705e156c96fabf543ce7a01f8ca3
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Unsigned JAR 1 IoCs

    Checks for missing JAR codesign signature.

  • Unsigned PE 16 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • UnoPlay-Setup-1.0.0.exe
    .exe 148.3MB
  • $PLUGINSDIR/SpiderBanner.dll
    .dll 9KB
  • $PLUGINSDIR/StdUtils.dll
    .dll 100KB
  • $PLUGINSDIR/System.dll
    .dll 12KB
  • $PLUGINSDIR/WinShell.dll
    .dll 3KB
  • $PLUGINSDIR/app-64.7z
    .7z 147.6MB
  • LICENSE.electron.txt
    1KB
  • LICENSES.chromium.html
    9.0MB
  • MonopolyPlay.exe
    .exe 171.9MB
  • chrome_100_percent.pak
    148KB
  • chrome_200_percent.pak
    223KB
  • d3dcompiler_47.dll
    .dll 4.7MB
  • ffmpeg.dll
    .dll 2.6MB
  • icudtl.dat
    10.0MB
  • libEGL.dll
    .dll 470KB
  • libGLESv2.dll
    .dll 7.7MB
  • locales/af.pak
    494KB
  • locales/am.pak
    799KB
  • locales/ar.pak
    874KB
  • locales/bg.pak
    913KB
  • locales/bn.pak
    1.1MB
  • locales/ca.pak
    556KB
  • locales/cs.pak
    572KB
  • locales/da.pak
    518KB
  • locales/de.pak
    553KB
  • locales/el.pak
    1002KB
  • locales/en-GB.pak
    450KB
  • locales/en-US.pak
    454KB
  • locales/es-419.pak
    547KB
  • locales/es.pak
    547KB
  • locales/et.pak
    497KB
  • locales/fa.pak
    813KB
  • locales/fi.pak
    508KB
  • locales/fil.pak
    573KB
  • locales/fr.pak
    591KB
  • locales/gu.pak
    1.1MB
  • locales/he.pak
    713KB
  • locales/hi.pak
    1.2MB
  • locales/hr.pak
    551KB
  • locales/hu.pak
    595KB
  • locales/id.pak
    490KB
  • locales/it.pak
    539KB
  • locales/ja.pak
    659KB
  • locales/kn.pak
    1.3MB
  • locales/ko.pak
    557KB
  • locales/lt.pak
    597KB
  • locales/lv.pak
    596KB
  • locales/ml.pak
    1.3MB
  • locales/mr.pak
    1.1MB
  • locales/ms.pak
    514KB
  • locales/nb.pak
    499KB
  • locales/nl.pak
    516KB
  • locales/pl.pak
    574KB
  • locales/pt-BR.pak
    540KB
  • locales/pt-PT.pak
    543KB
  • locales/ro.pak
    562KB
  • locales/ru.pak
    924KB
  • locales/sk.pak
    580KB
  • locales/sl.pak
    556KB
  • locales/sr.pak
    859KB
  • locales/sv.pak
    501KB
  • locales/sw.pak
    529KB
  • locales/ta.pak
    1.3MB
  • locales/te.pak
    1.2MB
  • locales/th.pak
    1.0MB
  • locales/tr.pak
    539KB
  • locales/uk.pak
    923KB
  • locales/ur.pak
    808KB
  • locales/vi.pak
    639KB
  • locales/zh-CN.pak
    460KB
  • locales/zh-TW.pak
    455KB
  • resources.pak
    5.3MB
  • resources/app.asar
    .js 8KB
  • resources/elevate.exe
    .exe 105KB
  • resources/java/602de1a60ef3.jar
    .jar 33.9MB
  • resources/java/jre/bin/api-ms-win-core-console-l1-1-0.dll
    .dll 21KB
  • resources/java/jre/bin/api-ms-win-core-console-l1-2-0.dll
    .dll 21KB
  • resources/java/jre/bin/api-ms-win-core-datetime-l1-1-0.dll
    .dll 21KB
  • resources/java/jre/bin/api-ms-win-core-debug-l1-1-0.dll
    .dll 21KB
  • resources/java/jre/bin/api-ms-win-core-errorhandling-l1-1-0.dll
    .dll 21KB
  • resources/java/jre/bin/api-ms-win-core-fibers-l1-1-0.dll
    .dll 21KB
  • resources/java/jre/bin/api-ms-win-core-fibers-l1-1-1.dll
    .dll 21KB
  • resources/java/jre/bin/api-ms-win-core-file-l1-1-0.dll
    .dll 25KB
  • resources/java/jre/bin/api-ms-win-core-file-l1-2-0.dll
    .dll 21KB
  • resources/java/jre/bin/api-ms-win-core-file-l2-1-0.dll
    .dll 21KB
  • resources/java/jre/bin/api-ms-win-core-handle-l1-1-0.dll
    .dll 21KB
  • resources/java/jre/bin/api-ms-win-core-heap-l1-1-0.dll
    .dll 21KB
  • resources/java/jre/bin/api-ms-win-core-interlocked-l1-1-0.dll
    .dll 21KB
  • resources/java/jre/bin/api-ms-win-core-kernel32-legacy-l1-1-1.dll
    .dll 21KB
  • resources/java/jre/bin/api-ms-win-core-libraryloader-l1-1-0.dll
    .dll 21KB
  • resources/java/jre/bin/api-ms-win-core-localization-l1-2-0.dll
    .dll 21KB
  • resources/java/jre/bin/api-ms-win-core-memory-l1-1-0.dll
    .dll 21KB
  • resources/java/jre/bin/api-ms-win-core-namedpipe-l1-1-0.dll
    .dll 21KB
  • resources/java/jre/bin/api-ms-win-core-processenvironment-l1-1-0.dll
    .dll 21KB
  • resources/java/jre/bin/api-ms-win-core-processthreads-l1-1-0.dll
    .dll 21KB
  • resources/java/jre/bin/api-ms-win-core-processthreads-l1-1-1.dll
    .dll 21KB
  • resources/java/jre/bin/api-ms-win-core-profile-l1-1-0.dll
    .dll 21KB
  • resources/java/jre/bin/api-ms-win-core-rtlsupport-l1-1-0.dll
    .dll 21KB
  • resources/java/jre/bin/api-ms-win-core-string-l1-1-0.dll
    .dll 21KB
  • resources/java/jre/bin/api-ms-win-core-synch-l1-1-0.dll
    .dll 21KB
  • resources/java/jre/bin/api-ms-win-core-synch-l1-2-0.dll
    .dll 21KB
  • resources/java/jre/bin/api-ms-win-core-sysinfo-l1-1-0.dll
    .dll 21KB
  • resources/java/jre/bin/api-ms-win-core-sysinfo-l1-2-0.dll
    .dll 21KB
  • resources/java/jre/bin/api-ms-win-core-timezone-l1-1-0.dll
    .dll 21KB
  • resources/java/jre/bin/api-ms-win-core-util-l1-1-0.dll
    .dll 21KB
  • resources/java/jre/bin/api-ms-win-crt-conio-l1-1-0.dll
    .dll 21KB
  • resources/java/jre/bin/api-ms-win-crt-convert-l1-1-0.dll
    .dll 25KB
  • resources/java/jre/bin/api-ms-win-crt-environment-l1-1-0.dll
    .dll 21KB
  • resources/java/jre/bin/api-ms-win-crt-filesystem-l1-1-0.dll
    .dll 21KB
  • resources/java/jre/bin/api-ms-win-crt-heap-l1-1-0.dll
    .dll 21KB
  • resources/java/jre/bin/api-ms-win-crt-locale-l1-1-0.dll
    .dll 21KB
  • resources/java/jre/bin/api-ms-win-crt-math-l1-1-0.dll
    .dll 29KB
  • resources/java/jre/bin/api-ms-win-crt-multibyte-l1-1-0.dll
    .dll 29KB
  • resources/java/jre/bin/api-ms-win-crt-private-l1-1-0.dll
    .dll 73KB
  • resources/java/jre/bin/api-ms-win-crt-process-l1-1-0.dll
    .dll 21KB
  • resources/java/jre/bin/api-ms-win-crt-runtime-l1-1-0.dll
    .dll 25KB
  • resources/java/jre/bin/api-ms-win-crt-stdio-l1-1-0.dll
    .dll 25KB
  • resources/java/jre/bin/api-ms-win-crt-string-l1-1-0.dll
    .dll 25KB
  • resources/java/jre/bin/api-ms-win-crt-time-l1-1-0.dll
    .dll 21KB
  • resources/java/jre/bin/api-ms-win-crt-utility-l1-1-0.dll
    .dll 21KB
  • resources/java/jre/bin/awt.dll
    .dll 1.4MB
  • resources/java/jre/bin/fontmanager.dll
    .dll 1006KB
  • resources/java/jre/bin/freetype.dll
    .dll 547KB
  • resources/java/jre/bin/java.dll
    .dll 119KB
  • resources/java/jre/bin/java.exe
    .exe 49KB
  • resources/java/jre/bin/javajpeg.dll
    .dll 176KB
  • resources/java/jre/bin/javaw.exe
    .exe 49KB
  • resources/java/jre/bin/jawt.dll
    .dll 21KB
  • resources/java/jre/bin/jimage.dll
    .dll 33KB
  • resources/java/jre/bin/jli.dll
    .dll 87KB
  • resources/java/jre/bin/jsound.dll
    .dll 59KB
  • resources/java/jre/bin/keytool.exe
    .exe 24KB
  • resources/java/jre/bin/lcms.dll
    .dll 254KB
  • resources/java/jre/bin/mlib_image.dll
    .dll 509KB
  • resources/java/jre/bin/msvcp140.dll
    .dll 561KB
  • resources/java/jre/bin/net.dll
    .dll 58KB
  • resources/java/jre/bin/nio.dll
    .dll 78KB
  • resources/java/jre/bin/prefs.dll
    .dll 25KB
  • resources/java/jre/bin/rmi.dll
    .dll 20KB
  • resources/java/jre/bin/rmiregistry.exe
    .exe 24KB
  • resources/java/jre/bin/server/jvm.dll
    .dll 13.3MB
  • resources/java/jre/bin/splashscreen.dll
    .dll 211KB
  • resources/java/jre/bin/syslookup.dll
    .dll 28KB
  • resources/java/jre/bin/turbojpeg.dll
    .dll 841KB
  • resources/java/jre/bin/ucrtbase.dll
    .dll 1.3MB
  • resources/java/jre/bin/vcruntime140.dll
    .dll 117KB
  • resources/java/jre/bin/vcruntime140_1.dll
    .dll 48KB
  • resources/java/jre/bin/verify.dll
    .dll 53KB
  • resources/java/jre/bin/zip.dll
    .dll 85KB
  • resources/java/jre/conf/jaxp.properties
    7KB
  • resources/java/jre/conf/logging.properties
    2KB
  • resources/java/jre/conf/net.properties
    7KB
  • resources/java/jre/conf/security/java.policy
    2KB
  • resources/java/jre/conf/security/java.security
    71KB
  • resources/java/jre/conf/security/policy/README.txt
    2KB
  • resources/java/jre/conf/security/policy/limited/default_US_export.policy
    146B
  • resources/java/jre/conf/security/policy/limited/default_local.policy
    647B
  • resources/java/jre/conf/security/policy/limited/exempt_local.policy
    566B
  • resources/java/jre/conf/security/policy/unlimited/default_US_export.policy
    146B
  • resources/java/jre/conf/security/policy/unlimited/default_local.policy
    193B
  • resources/java/jre/conf/sound.properties
    1KB
  • resources/java/jre/legal/java.base/ADDITIONAL_LICENSE_INFO
    2KB
  • resources/java/jre/legal/java.base/ASSEMBLY_EXCEPTION
    1KB
  • resources/java/jre/legal/java.base/LICENSE
    18KB
  • resources/java/jre/legal/java.base/aes.md
    1KB
  • resources/java/jre/legal/java.base/asm.md
    1KB
  • resources/java/jre/legal/java.base/c-libutl.md
    1KB
  • resources/java/jre/legal/java.base/cldr.md
    9KB
  • resources/java/jre/legal/java.base/icu.md
    29KB
  • resources/java/jre/legal/java.base/public_suffix.md
    17KB
  • resources/java/jre/legal/java.base/siphash.md
    8KB
  • resources/java/jre/legal/java.base/unicode.md
    8KB
  • resources/java/jre/legal/java.base/wepoll.md
    1KB
  • resources/java/jre/legal/java.base/zlib.md
    1010B
  • resources/java/jre/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO
    49B
  • resources/java/jre/legal/java.datatransfer/ASSEMBLY_EXCEPTION
    44B
  • resources/java/jre/legal/java.datatransfer/LICENSE
    33B
  • resources/java/jre/legal/java.desktop/ADDITIONAL_LICENSE_INFO
    49B
  • resources/java/jre/legal/java.desktop/ASSEMBLY_EXCEPTION
    44B
  • resources/java/jre/legal/java.desktop/LICENSE
    33B
  • resources/java/jre/legal/java.desktop/colorimaging.md
    167B
  • resources/java/jre/legal/java.desktop/freetype.md
    29KB
  • resources/java/jre/legal/java.desktop/giflib.md
    1KB
  • resources/java/jre/legal/java.desktop/harfbuzz.md
    3KB
  • resources/java/jre/legal/java.desktop/jpeg.md
    3KB
  • resources/java/jre/legal/java.desktop/lcms.md
    2KB
  • resources/java/jre/legal/java.desktop/libpng.md
    7KB
  • resources/java/jre/legal/java.desktop/mesa3d.md
    5KB
  • resources/java/jre/legal/java.logging/ADDITIONAL_LICENSE_INFO
    49B
  • resources/java/jre/legal/java.logging/ASSEMBLY_EXCEPTION
    44B
  • resources/java/jre/legal/java.logging/LICENSE
    33B
  • resources/java/jre/legal/java.net.http/ADDITIONAL_LICENSE_INFO
    49B
  • resources/java/jre/legal/java.net.http/ASSEMBLY_EXCEPTION
    44B
  • resources/java/jre/legal/java.net.http/LICENSE
    33B
  • resources/java/jre/legal/java.prefs/ADDITIONAL_LICENSE_INFO
    49B
  • resources/java/jre/legal/java.prefs/ASSEMBLY_EXCEPTION
    44B
  • resources/java/jre/legal/java.prefs/LICENSE
    33B
  • resources/java/jre/legal/java.rmi/ADDITIONAL_LICENSE_INFO
    49B
  • resources/java/jre/legal/java.rmi/ASSEMBLY_EXCEPTION
    44B
  • resources/java/jre/legal/java.rmi/LICENSE
    33B
  • resources/java/jre/legal/java.sql/ADDITIONAL_LICENSE_INFO
    49B
  • resources/java/jre/legal/java.sql/ASSEMBLY_EXCEPTION
    44B
  • resources/java/jre/legal/java.sql/LICENSE
    33B
  • resources/java/jre/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO
    49B
  • resources/java/jre/legal/java.transaction.xa/ASSEMBLY_EXCEPTION
    44B
  • resources/java/jre/legal/java.transaction.xa/LICENSE
    33B
  • resources/java/jre/legal/java.xml/ADDITIONAL_LICENSE_INFO
    49B
  • resources/java/jre/legal/java.xml/ASSEMBLY_EXCEPTION
    44B
  • resources/java/jre/legal/java.xml/LICENSE
    33B
  • resources/java/jre/legal/java.xml/bcel.md
    10KB
  • resources/java/jre/legal/java.xml/dom.md
    3KB
  • resources/java/jre/legal/java.xml/jcup.md
    1KB
  • resources/java/jre/legal/java.xml/xalan.md
    13KB
  • resources/java/jre/legal/java.xml/xerces.md
    11KB
  • resources/java/jre/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO
    49B
  • resources/java/jre/legal/jdk.charsets/ASSEMBLY_EXCEPTION
    44B
  • resources/java/jre/legal/jdk.charsets/LICENSE
    33B
  • resources/java/jre/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO
    49B
  • resources/java/jre/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION
    44B
  • resources/java/jre/legal/jdk.crypto.ec/LICENSE
    33B
  • resources/java/jre/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO
    49B
  • resources/java/jre/legal/jdk.localedata/ASSEMBLY_EXCEPTION
    44B
  • resources/java/jre/legal/jdk.localedata/LICENSE
    33B
  • resources/java/jre/legal/jdk.localedata/cldr.md
    33B
  • resources/java/jre/legal/jdk.localedata/thaidict.md
    1KB
  • resources/java/jre/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO
    49B
  • resources/java/jre/legal/jdk.unsupported/ASSEMBLY_EXCEPTION
    44B
  • resources/java/jre/legal/jdk.unsupported/LICENSE
    33B
  • resources/java/jre/lib/classlist
    77KB
  • resources/java/jre/lib/fontconfig.bfc
    4KB
  • resources/java/jre/lib/fontconfig.properties.src
    12KB
  • resources/java/jre/lib/jawt.lib
    1KB
  • resources/java/jre/lib/jrt-fs.jar
    .jar 107KB
  • resources/java/jre/lib/jvm.cfg
    29B
  • resources/java/jre/lib/jvm.lib
    1.1MB
  • resources/java/jre/lib/modules
    35.8MB
  • resources/java/jre/lib/psfont.properties.ja
    3KB
  • resources/java/jre/lib/psfontj2d.properties
    11KB
  • resources/java/jre/lib/security/blocked.certs
    2KB
  • resources/java/jre/lib/security/cacerts
    149KB
  • resources/java/jre/lib/security/default.policy
    11KB
  • resources/java/jre/lib/security/public_suffix_list.dat
    .zip 223KB
  • resources/java/jre/lib/tzdb.dat
    100KB
  • resources/java/jre/lib/tzmappings
    21KB
  • resources/java/jre/release
    221B
  • snapshot_blob.bin
    302KB
  • v8_context_snapshot.bin
    646KB
  • vk_swiftshader.dll
    .dll 5.2MB
  • vk_swiftshader_icd.json
    106B
  • vulkan-1.dll
    .dll 938KB
  • $PLUGINSDIR/nsExec.dll
    .dll 6KB
  • $PLUGINSDIR/nsis7z.dll
    .dll 424KB
  • $R0/Uninstall MonopolyPlay.exe
    .exe 248KB

UnoPlay-Setup-1.0.0.exe

  • IMPHASH b34f154ec913d2d2c435cbd644e91687
  • SHA256 96bfa1f76aa8498d41d568edf5b65ca3b581705e156c96fabf543ce7a01f8ca3
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Unsigned PE

    Checks for missing Authenticode signature.

Password
ssss
Minor OS version
0
Major OS version
4
Entry point
13199
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths