331d8611-3c1b-4c4d-abb2-a82902d2b341.zip
- SHA256 863d072e7e3f3b83e1fabd0213d45a42eda929ee3cc4c9aebb8b2757ca7c7006
Static task
static1
Behavioral task
behavioral1
Sample
MuseHub.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
MuseHub.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
16 signatures
150 seconds
General
- Target 331d8611-3c1b-4c4d-abb2-a82902d2b341.zip
- Size 34.1MB
- Sample261030-pjd26ab16w
- SHA256 863d072e7e3f3b83e1fabd0213d45a42eda929ee3cc4c9aebb8b2757ca7c7006
- MD5 8b9c4c2d5eea797c62cd9ae17da996d8
- SHA1 6e6e58a0dbe34b048e1fa98f553c24c43179c2bd
- SHA512 433f00b7cfefd787c520a29030a33d6181412853dd61be0763e78a3fbfe06b7bb6f914fd6cc233ef49d8fd5ef7aa1b51645395c1ff3145bbe4daac26ac855f01
- SSDEEP 786432:npfJ0EezsBxpnOuMe1EMdaumh7yAKYSsFdnFq2HXWbK0DzgOr9:n70rzsHd11EMda/uShFq2I3D9
- TLSH T1E27733CC1AD7795678D8611CB09C8D3BA2C9DC1642AAC3C5E613442DB6EE5C6FA83F0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
File Explorer
-
331d8611-3c1b-4c4d-abb2-a82902d2b341.zip.zip 34.1MB
-
MuseHub.exe.exe 34.5MB
MuseHub.exe
- IMPHASH 1776c877b7988ac782f85b19c6f46258
- SHA256 cb6fe460113751f2240dcb7a88bb393af7d674dc0a464d255360697b1098b83e
- MD5 476f16de7a72cf7bc15b57389263f204
- SHA1 340fdb080b0b036fcb09bece2d77eef941918443
- SHA512 c2437a5b1e35a061e389e5a5251690d1495ef26c1c9d226d413ec968d5c49c4956398d21e6521b1a62d9bb774cd90e34f98943288202f3459a3bce424251bdcc
- SSDEEP 786432:rpj6UBlolzXN0mQAXaYN2sQRvy8koMUjTndU4JfKROuT/ouPy:16ulol9VXaYN2v6eTdU4Sjty
- TLSH T15C87335C57E941A6E0BAE378A4664507EBB3BC064774D3CF02A1841D2F6BAD0EA37F11
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
17:64:6a:b9:18:12:fc:b1:6b:d1:21:6c:63:5a:f0:2a:7f:72:1d:52:a2:0e:65:4e:bb:7a:16:02:e5:43:74:8b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=HE 411908,CN=MUSECY SM LTD,O=MUSECY SM LTD,ST=Lemesos,C=CY,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024359
Chains
Oct 27, 2026
SERIALNUMBER=HE 411908,CN=MUSECY SM LTD,O=MUSECY SM LTD,ST=Lemesos,C=CY,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024359
CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Subject
CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB
Serial Number
33:d7:08:a8:91:40:53:19:e2:a5:bb:d3:39:b9:ad:6e
Issuer
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Serial Number
36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Jan 18, 2038
Subject
SERIALNUMBER=HE 411908,CN=MUSECY SM LTD,O=MUSECY SM LTD,ST=Lemesos,C=CY,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024359
Serial Number
3c:65:60:9c:09:41:55:01:41:ab:69:ae:a8:29:58:b1
Issuer
CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 21, 2026 - Jul 21, 2027
Subject
CN=Sectigo Public Time Stamping CA R41,O=Sectigo Limited,C=GB
Serial Number
90:ac:08:72:20:fd:c5:a7:c4:6b:5c:c7:0d:f7:3d:06
Issuer
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 25, 2026 - Mar 24, 2041
Subject
CN=Sectigo Public Time Stamping Signer R37,O=Sectigo Limited,ST=Greater London,C=GB
Serial Number
e7:4e:f2:55:b0:50:4f:fa:db:a6:df:f7:fc:8b:a3:15
Issuer
CN=Sectigo Public Time Stamping CA R41,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 25, 2026 - Jun 24, 2037
Minor OS version
0
Major OS version
6
Entry point
438272
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\a\windows-musehub\windows-musehub\src\MuseHub.Installer\bin\x64\Release\MuseHub.Installer.pdb
kernel32
OpenProcess
CreateToolhelp32Snapshot
ProcessIdToSessionId
Sleep
Process32NextW
SetEvent
Process32FirstW
QueryFullProcessImageNameW
InitializeSListHead
GetSystemTimeAsFileTime
GetStartupInfoW
CreateDirectoryW
FindStringOrdinal
GetFileInformationByHandleEx
FindFirstFileW
GetFullPathNameW
FindNextFileW
RemoveDirectoryW
GetTempPathW
FindClose
LocalAlloc
SetFileAttributesW
MultiByteToWideChar
OpenEventW
GetFileInformationByHandle
GetFileAttributesW
GetTickCount64
RtlUnwindEx
SleepConditionVariableSRW
SetFileInformationByHandle
WakeAllConditionVariable
DeleteFileW
RtlPcToFileHeader
TerminateProcess
LocalFree
MoveFileExW
AcquireSRWLockExclusive
GetSystemWindowsDirectoryW
InterlockedPushEntrySList
CompareStringOrdinal
IsDebuggerPresent
FlsAlloc
ReleaseSRWLockExclusive
LCMapStringEx
DecodePointer
EncodePointer
SizeofResource
InitializeCriticalSectionEx
GetSystemTimePreciseAsFileTime
GetStringTypeW
DebugBreak
GetLocaleInfoEx
FormatMessageA
CreateSymbolicLinkW
CreateHardLinkW
CopyFile2
AreFileApisANSI
GetFinalPathNameByHandleW
FindFirstFileExW
WideCharToMultiByte
GetCurrentThread
LockResource
GlobalAlloc
GlobalFree
CreateThread
LoadResource
FindResourceW
GetModuleHandleW
GlobalLock
WaitForMultipleObjects
ResetEvent
WaitNamedPipeW
TransactNamedPipe
SetNamedPipeHandleState
LoadLibraryW
VirtualQueryEx
GetProcessId
GetStdHandle
FreeConsole
GetLocalTime
WriteConsoleW
AllocConsole
GetProcessHeap
SetDefaultDllDirectories
GetModuleFileNameW
K32GetModuleFileNameExW
GetDiskFreeSpaceExW
VerSetConditionMask
FreeLibrary
VerifyVersionInfoW
MoveFileW
LoadLibraryExW
TerminateThread
GetCurrentProcessId
CreateMutexExW
GetProcAddress
FlsGetValue
FreeResource
HeapAlloc
FlsSetValue
FlsFree
CloseHandle
OpenSemaphoreW
WaitForSingleObjectEx
OutputDebugStringW
GetLastError
FormatMessageW
CreateEventW
ReleaseMutex
GetCurrentThreadId
CreateFileW
WaitForSingleObject
GetModuleHandleExW
ReleaseSemaphore
SetLastError
HeapFree
CreateSemaphoreExW
CreateSemaphoreW
SetUnhandledExceptionFilter
RtlCaptureContext
GetModuleHandleA
GetThreadId
GetVolumeInformationW
GetFileSizeEx
GetVolumePathNameW
SleepConditionVariableCS
WakeConditionVariable
InitializeConditionVariable
DeleteCriticalSection
RaiseException
GetModuleFileNameA
SetThreadStackGuarantee
GetCurrentProcess
SetThreadDescription
QueryPerformanceFrequency
LoadLibraryA
Module32NextW
ReadFile
Module32FirstW
InitOnceExecuteOnce
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
WriteFile
SetFilePointerEx
SystemTimeToFileTime
VirtualQuery
GetSystemTime
DeviceIoControl
QueryPerformanceCounter
CreateFile2
SetFileTime
GetFileTime
GetFileAttributesExW
bcrypt
BCryptDestroyHash
BCryptOpenAlgorithmProvider
BCryptCloseAlgorithmProvider
BCryptFinishHash
BCryptCreateHash
BCryptHashData
comctl32
TaskDialogIndirect
ole32
CoInitializeEx
CoCreateFreeThreadedMarshaler
PropVariantClear
CreateStreamOnHGlobal
CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc
user32
GetDesktopWindow
SetRect
GetClientRect
EndPaint
GetTopWindow
LoadCursorW
LoadIconW
TranslateMessage
GetWindowRect
BeginPaint
ReleaseDC
InvalidateRect
SetRectEmpty
RegisterClassW
DispatchMessageW
GetWindow
PostMessageW
GetClassNameW
GetWindowThreadProcessId
SetForegroundWindow
GetMessageW
DefWindowProcW
AdjustWindowRectEx
DestroyWindow
GetDC
SetWindowPos
MessageBoxW
SetWindowLongPtrW
CreateWindowExW
SendMessageW
GetWindowLongPtrW
SendMessageTimeoutW
advapi32
QueryServiceObjectSecurity
ConvertStringSidToSidW
SetSecurityDescriptorDacl
GetSecurityDescriptorDacl
CreateServiceW
CloseServiceHandle
OpenSCManagerW
AllocateAndInitializeSid
ChangeServiceConfig2W
SetEntriesInAclW
DeleteService
SetServiceObjectSecurity
ControlServiceExW
FreeSid
StartServiceW
InitializeSecurityDescriptor
ChangeServiceConfigW
OpenServiceW
QueryServiceStatusEx
IsWellKnownSid
RegCreateKeyExW
RegDeleteTreeW
RegGetValueW
RegDeleteValueW
GetTokenInformation
RegGetValueA
GetNamedSecurityInfoW
EqualSid
RegSetKeyValueW
RegCloseKey
RegOpenKeyExW
GetAce
RegQueryValueExW
shell32
ShellExecuteW
SHChangeNotify
SHGetKnownFolderPath
api-ms-win-core-path-l1-1-0
PathCchSkipRoot
PathAllocCombine
oleaut32
SysAllocString
SysFreeString
GetErrorInfo
VariantClear
SysStringLen
VariantInit
SetErrorInfo
uiautomationcore
UiaRaiseAutomationEvent
UiaReturnRawElementProvider
UiaHostProviderFromHwnd
UiaClientsAreListening
gdi32
GetDeviceCaps
shlwapi
StrStrIW
PathIsNetworkPathW
PathFindFileNameW
winhttp
WinHttpCrackUrl
WinHttpOpen
WinHttpCloseHandle
WinHttpReceiveResponse
WinHttpSendRequest
WinHttpConnect
WinHttpOpenRequest
WinHttpQueryHeaders
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
dbghelp
SymGetOptions
SymInitialize
SymSetOptions
SymFromAddr
api-ms-win-crt-runtime-l1-1-0
__p___argv
__p___argc
abort
_invalid_parameter_noinfo_noreturn
exit
_set_invalid_parameter_handler
_errno
_initialize_narrow_environment
_c_exit
_initialize_onexit_table
_register_onexit_function
_register_thread_local_exe_atexit_callback
strerror
_crt_atexit
_cexit
terminate
_seh_filter_exe
_set_app_type
_configure_narrow_argv
_invalid_parameter_noinfo
_exit
_initterm_e
_initterm
_get_narrow_winmain_command_line
system
api-ms-win-crt-stdio-l1-1-0
ungetwc
__p__commode
fputwc
__stdio_common_vsprintf
fseek
fclose
__stdio_common_vsscanf
_set_fmode
fgetwc
fwrite
__stdio_common_vswprintf
__stdio_common_vsnwprintf_s
fgetpos
fflush
setvbuf
ungetc
fsetpos
_fseeki64
__stdio_common_vsprintf_s
__stdio_common_vswprintf_s
_wfsopen
_locking
_close
_wopen
_wfopen
__acrt_iob_func
__stdio_common_vfprintf
fgetc
fread
api-ms-win-crt-string-l1-1-0
strcpy_s
islower
strncpy_s
strncpy
wcsnlen
__strncnt
strcspn
strcmp
strlen
strncat
tolower
_strdup
iswspace
wcsncmp
isalpha
_wcsicmp
_wcsdup
wcscmp
wcslen
isupper
api-ms-win-crt-filesystem-l1-1-0
_lock_file
_unlock_file
_wstat64i32
_wfullpath
api-ms-win-crt-heap-l1-1-0
malloc
realloc
_set_new_mode
calloc
_callnewh
free
api-ms-win-crt-locale-l1-1-0
localeconv
_lock_locales
___lc_codepage_func
___mb_cur_max_func
setlocale
_wsetlocale
_unlock_locales
_configthreadlocale
__pctype_func
___lc_locale_name_func
_create_locale
api-ms-win-crt-math-l1-1-0
_dsign
frexp
__setusermatherr
_ldsign
_ldclass
_fdsign
_dclass
api-ms-win-crt-convert-l1-1-0
strtoll
strtol
_strtod_l
api-ms-win-crt-time-l1-1-0
_Wcsftime
strftime
_mkgmtime64
_gmtime64
_mktime64
_localtime64_s
_W_Gettnames
_time64
api-ms-win-crt-environment-l1-1-0
getenv
_wgetenv
uxtheme
BufferedPaintInit
BufferedPaintSetAlpha
BeginBufferedPaint
BufferedPaintUnInit
EndBufferedPaint
gdiplus
GdipCreateFont
GdipSetInterpolationMode
GdipAlloc
GdipSetPixelOffsetMode
GdipFillRectangle
GdipFree
GdipDrawString
GdipCreateFromHDC
GdipSetTextRenderingHint
GdipCloneBrush
GdipDeleteGraphics
GdipSetSmoothingMode
GdipDeleteFont
GdipSetStringFormatAlign
GdipCreateBitmapFromStream
GdipDeleteBrush
GdipCloneImage
GdipDrawImageRect
GdipCreateFontFamilyFromName
GdipSetCompositingQuality
GdipDeleteFontFamily
GdipCreateStringFormat
GdiplusShutdown
GdiplusStartup
GdipDisposeImage
GdipSetStringFormatLineAlign
GdipDeleteStringFormat
GdipCreateSolidFill
dwmapi
DwmSetWindowAttribute
DwmExtendFrameIntoClientArea
api-ms-win-core-winrt-error-l1-1-1
RoOriginateLanguageException
api-ms-win-core-winrt-l1-1-0
RoGetActivationFactory
Name
.text
Size
470KB
Virtual Size
470KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
286KB
Virtual Size
286KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
23KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
33.8MB
Virtual Size
33.8MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=253, version=35721,
count=10, id=259, version=35721,
count=15, id=260, version=35721,
count=92, id=261, version=35721,
count=2, id=260, version=33145,
count=1, id=262, version=33145,
count=12, id=257, version=33145,
count=4, id=261, version=34120,
count=31, id=260, version=34120,
count=44, id=260, version=35207,
count=461, id=1, productName=Unmarked objects,
count=49, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=18, id=265, version=36260,
count=1, id=255, version=36260,
count=1, id=151,
count=1, id=258, version=36260,