RustDevblogCheatChecker-main.zip
- SHA256 23c4e0f6755cb0107ae35ea1fe776318cfb813ab81ff789aef80537038a38b61
Overview
overview
8Static
static
1RustDevblo...in.zip
windows10-2004-x64
1RustDevblo...in.zip
windows11-ltsc_2024-x64
1RustDevblo...ibutes
windows10-2004-x64
3RustDevblo...ibutes
windows11-ltsc_2024-x64
3RustDevblo...ignore
windows10-2004-x64
3RustDevblo...ignore
windows11-ltsc_2024-x64
3RustDevblo...st.txt
windows10-2004-x64
1RustDevblo...st.txt
windows11-ltsc_2024-x64
8RustDevblo...DME.md
windows10-2004-x64
3RustDevblo...DME.md
windows11-ltsc_2024-x64
3RustDevblo...DD.bat
windows10-2004-x64
8RustDevblo...DD.bat
windows11-ltsc_2024-x64
8RustDevblo...SD.bat
windows10-2004-x64
8RustDevblo...SD.bat
windows11-ltsc_2024-x64
8RustDevblo...le.ps1
windows10-2004-x64
8RustDevblo...le.ps1
windows11-ltsc_2024-x64
8RustDevblo...es.exe
windows10-2004-x64
3RustDevblo...es.exe
windows11-ltsc_2024-x64
6RustDevblo...t.json
windows10-2004-x64
3RustDevblo...t.json
windows11-ltsc_2024-x64
8Static task
static1
Behavioral task
behavioral1
Sample
RustDevblogCheatChecker-main.zip
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral2
Sample
RustDevblogCheatChecker-main.zip
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
900 seconds
Behavioral task
behavioral3
Sample
RustDevblogCheatChecker-main/.gitattributes
Resource
win10v2004-20260911-en
windows10-2004-x64
4 signatures
900 seconds
Behavioral task
behavioral4
Sample
RustDevblogCheatChecker-main/.gitattributes
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
4 signatures
900 seconds
Behavioral task
behavioral5
Sample
RustDevblogCheatChecker-main/.gitignore
Resource
win10v2004-20260911-en
windows10-2004-x64
4 signatures
900 seconds
Behavioral task
behavioral6
Sample
RustDevblogCheatChecker-main/.gitignore
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
4 signatures
900 seconds
Behavioral task
behavioral7
Sample
RustDevblogCheatChecker-main/List/list.txt
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral8
Sample
RustDevblogCheatChecker-main/List/list.txt
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
14 signatures
900 seconds
Behavioral task
behavioral9
Sample
RustDevblogCheatChecker-main/README.md
Resource
win10v2004-20260911-en
windows10-2004-x64
4 signatures
900 seconds
Behavioral task
behavioral10
Sample
RustDevblogCheatChecker-main/README.md
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
4 signatures
900 seconds
Behavioral task
behavioral11
Sample
RustDevblogCheatChecker-main/Run-HDD.bat
Resource
win10v2004-20260911-en
windows10-2004-x64
12 signatures
900 seconds
Behavioral task
behavioral12
Sample
RustDevblogCheatChecker-main/Run-HDD.bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
12 signatures
900 seconds
Behavioral task
behavioral13
Sample
RustDevblogCheatChecker-main/Run-SSD.bat
Resource
win10v2004-20260911-en
windows10-2004-x64
12 signatures
900 seconds
Behavioral task
behavioral14
Sample
RustDevblogCheatChecker-main/Run-SSD.bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
19 signatures
900 seconds
Behavioral task
behavioral15
Sample
RustDevblogCheatChecker-main/Utils/Find-File.ps1
Resource
win10v2004-20260911-en
windows10-2004-x64
11 signatures
900 seconds
Behavioral task
behavioral16
Sample
RustDevblogCheatChecker-main/Utils/Find-File.ps1
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
11 signatures
900 seconds
Behavioral task
behavioral17
Sample
RustDevblogCheatChecker-main/Utils/es.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
900 seconds
Behavioral task
behavioral18
Sample
RustDevblogCheatChecker-main/Utils/es.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
15 signatures
900 seconds
Behavioral task
behavioral19
Sample
RustDevblogCheatChecker-main/manifest.json
Resource
win10v2004-20260911-en
windows10-2004-x64
4 signatures
900 seconds
Behavioral task
behavioral20
Sample
RustDevblogCheatChecker-main/manifest.json
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
16 signatures
900 seconds
General
- Target RustDevblogCheatChecker-main.zip
- Size 140KB
- Sample261102-qlzbjsfc27
- SHA256 23c4e0f6755cb0107ae35ea1fe776318cfb813ab81ff789aef80537038a38b61
- MD5 6d6b8b2389dd16a4e85725b7a2b36f61
- SHA1 8f6449ac5d6a10860ea4c8aacfc32c1998f33ec8
- SHA512 2526e2600c60e9dfa3bebc47ad3ed66dcbb31be7f2da6872a0ede4b805066f59a3688d4065ebf9a1ba95206856256bb7eb65f53273b8e30a92c51117c5c6c6ba
- SSDEEP 3072:8vFIbC2QimUucLcZCV2FfRZE0BHDByYWxHYWHFeZYDB0A/j6:t+11GcRpzBH9yN8ZyN6
- TLSH T1FFE3121C1348ADAED9760CFD348C6838CB170064CBA7F9C77D98F279A79EE9025165AC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
File Explorer
-
RustDevblogCheatChecker-main.zip.zip 140KB
-
RustDevblogCheatChecker-main/.gitattributes8B
-
RustDevblogCheatChecker-main/.gitignore95B
-
RustDevblogCheatChecker-main/List/list.txt15KB
-
RustDevblogCheatChecker-main/README.md21KB
-
RustDevblogCheatChecker-main/Run-HDD.bat151B
-
RustDevblogCheatChecker-main/Run-SSD.bat162B
-
RustDevblogCheatChecker-main/Utils/Find-File.ps1.ps1 31KB
-
RustDevblogCheatChecker-main/Utils/es.exe.exe 251KB
-
RustDevblogCheatChecker-main/manifest.json405B
RustDevblogCheatChecker-main/.gitattributes
- SHA256 705fd4d6451a31d36b3df7de96f83f30ac976c9b4a6d1e51671d8e2f33e2d0da
- MD5 d3d04ac1b5897688b0d97abfd135aefa
- SHA1 d501c3fcc947c05a798cebc8cef251462f936606
- SHA512 e193f4b6088a9eb249c28f1bcd6f80090810995885382e73638bb07b9f2f594b203f2b2dea47009a423e80fa8ce638f9fbe43e5ba855ce5fc62887e0e00ad7e9
- MD5 SHA1 SHA512
RustDevblogCheatChecker-main/.gitignore
- SHA256 fdc8be29fec441bbbcf7c28a1d143c355ad48a363fcfbcd115293c0865db0931
- MD5 b966cc78dd4b1b9db0c65ca7f1cee891
- SHA1 b42130fee211115ccd2afbb07526c76da25d5921
- SHA512 7484611b304db54d35ffeb6f67d9b6f43fde5066b0f9fe0552b6bb808edec1234724c0a044e13564ac4c4d6ac34cd852a98a2fa3b97c8c6fb09f98c3ed30409f
- TLSH T1C9B009B982A60CADB0C400BAB5AF3449568FCBA29095387EA11B08A840980968041057
- MD5 SHA1 SHA512 TLSH
RustDevblogCheatChecker-main/List/list.txt
- SHA256 076dc51a70eb6f58258ff9beccbf1e805cf44c8d7e9519bbc21363982ac9e1a0
- MD5 e1279ec75df40d5f46ae5b2cd48c9bbc
- SHA1 735a4b660e6d53f5644853f9bc1518dfc39ee148
- SHA512 534ce845e3fee15b7e203d9c2d188fcb0bf45c0b95a47704fdc239f692fbcb2702654e85a3d50dbbd029927f8126b52bf67511e9d00cc18214d75f12ef296cf0
- SSDEEP 192:GVsTGBpx6EGbhpYxfprQ/mJevNVrR2bQW6ojYdOZcLfNpY/vBNLMQPnojfxBCw8T:m56EyONNJiVVe/cLInBNwpBb8z0DmYU
- TLSH T161628EB5BFA03DA9595A554EC58B15DD03560971C98FA8E780E37BC305B3332ED5BC02
- MD5 SHA1 SHA512 SSDEEP TLSH
RustDevblogCheatChecker-main/README.md
- SHA256 41a22f610b89fde309a1ae725411387f014c7e301290df1c4a4e8367f8e01602
- MD5 7146bd7f5a25cfcf7828a3224d98b0a6
- SHA1 f88cc522b34632a37ed7aa76e8b205ac441fb372
- SHA512 fb0243cfc997278e5259c2f9a1dd948357e3f95952c6628947666ab60d24194f2cacd8f79398e66d3ca8cfff68761fa6ec8299e639f1b1aaf8146779665a25cd
- SSDEEP 384:AEIrG7Q1l5fENx0SU+Yjn5yYfca5za7MU+PFIcPZjd7SDFQ:xOR7m2za7VrcPMS
- TLSH T1D2A243320B6D54ED3651B04BD8097E45BFDB55FE7BBB532605A9383E30E2024C23A79A
- MD5 SHA1 SHA512 SSDEEP TLSH
RustDevblogCheatChecker-main/Run-HDD.bat
- SHA256 60ffa1b9286ecbabaff06c3a9f5cbbac181087003cecedcd90d4878a78571d17
- MD5 2699235ac26647cfa1d96cf28635f7f0
- SHA1 f2d0e1d332d42fc04fb7b6b49b05773c759cbdd1
- SHA512 9bf8355f9f7e4f5902312d4fb7c33b144e3b369b9d95180cac23d32ec3579c4b13662e619eb3761d743dad5dad65bae6f83b85e02e230a78887a6abbb2ae8836
- TLSH T171C08C446AA9AB88E1A34C2150EB60605C1FA207A3084D21B3A2823F200E285C1651D6
- MD5 SHA1 SHA512 TLSH
RustDevblogCheatChecker-main/Run-SSD.bat
- SHA256 1be9b53ef7e841b7e81da049b3608782b90260b742c81157368d8eb7fd006c18
- MD5 f93c06ce3a077c6367c80cc3207cb97a
- SHA1 0a1d571b8fa6b748aa56818008016ed34f8e0772
- SHA512 d6c576168f9681335f53f451a40516840f770dc0476381fe9cd705d6f97b6e094472cd820b277b110c6de2472822ab69a97fa0f50aca209ceab4bcee46cd3020
- TLSH T1EFC08C0A68794788A6A34E2640EB21A46C2F6907E7464E71B2A3013F250E490C1791C6
- MD5 SHA1 SHA512 TLSH
RustDevblogCheatChecker-main/Utils/Find-File.ps1
- SHA256 48dccc76ab851a6e3386e2a7611e9a5329c14c122c73a4fe263c2906569f10a0
- MD5 d31643a2bc510c8dccbcc498229362b2
- SHA1 c6c400938e56ac9a943abc2eb0c3501061e18289
- SHA512 7e13e024dace2fe945be13dab06fa701ac7fee99c1afb9dbd841482695603687a33f8d8aa4157ce968d5cdc9b8ce78213d83e509eddcec1f847706325c23d4a7
- SSDEEP 384:JjfhkHodqeq3yg0vXXa6a9vcgz8pSeoMLkBmY/XIAqlNkbieyqzpD:z1vXXa6aSgApzoMA/X4Vq1
- TLSH T1F1E2F92968A68539268321BE09C641117B6A911F414C5EA0FDDCC1C4FFE643CEAFDBF6
- MD5 SHA1 SHA512 SSDEEP TLSH
RustDevblogCheatChecker-main/Utils/es.exe
- IMPHASH 0f615da0ae406ed6dd7f67a7934d4fa0
- SHA256 3be7185707e8023cd9295dbcb7a3fa4092a3d8f52b7fa92a0b84243ab40d12f3
- MD5 42691affb42812bd04eff50a1c732599
- SHA1 361c308978ca85eb4489ce5c2880c52728397cb0
- SHA512 092ab690b6a106a35033cbea24c81102c7b9ac470d273e1577bb138fbb595b439caad0b914526aca04749ca0e36dc17501d12ed1abb592fc4d308d8e870e4299
- SSDEEP 3072:OATM58zQ6IADPMiDZCgHjrNpRz78tjRDIVj75ngZOKF3ZMT7WDeUQPLpFE3+N:OKM52Q6IiP/CgH1T4i15gZOUZMeuFN
- TLSH T128441852636448F8D827D13DDE819212D6B1F4588371C6EB37A88E968F277D2BE3DB01
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
56:a9:0a:03:cb:25:ac:d3:5f:6f:84:e0:49:5d:b0:b6:3d:7b:99:39:6d:1b:31:4c:33:a7:e6:62:04:b2:0b:2d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=624 373 397,CN=voidtools PTY LTD,O=voidtools PTY LTD,L=Wilmington,ST=South Australia,C=AU,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024155
Chains
Apr 7, 2026
SERIALNUMBER=624 373 397,CN=voidtools PTY LTD,O=voidtools PTY LTD,L=Wilmington,ST=South Australia,C=AU,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024155
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=624 373 397,CN=voidtools PTY LTD,O=voidtools PTY LTD,L=Wilmington,ST=South Australia,C=AU,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024155
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=624 373 397,CN=voidtools PTY LTD,O=voidtools PTY LTD,L=Wilmington,ST=South Australia,C=AU,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024155
Serial Number
04:4c:41:86:39:d4:52:74:47:0b:f1:a5:fa:de:a0:18
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 21, 2025 - May 20, 2026
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
4
Entry point
127728
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
c:\dev\everything\cli\vs2005\x64\Release\es.pdb
kernel32
CloseHandle
ReadFile
GetFileSize
WriteConsoleW
GetStdHandle
ExitProcess
CompareStringW
WriteFile
WideCharToMultiByte
SetConsoleTextAttribute
GetTimeFormatW
GetDateFormatW
FileTimeToSystemTime
GetLocaleInfoW
GetNumberFormatW
FillConsoleOutputAttribute
GetConsoleScreenBufferInfo
WriteConsoleOutputW
GetLastError
Sleep
GetTickCount
ReadConsoleInputW
PeekConsoleInputW
SetConsoleCursorPosition
GetLocalTime
SystemTimeToFileTime
GetProcAddress
GetModuleHandleA
GetModuleHandleW
WaitForSingleObject
OpenProcess
DeleteFileW
SetConsoleWindowInfo
SetConsoleScreenBufferSize
SetStdHandle
GetCommandLineW
GetFileType
GetConsoleMode
GetConsoleCP
SetLastError
WaitNamedPipeW
CreateFileW
HeapAlloc
GetProcessHeap
HeapFree
MoveFileW
MoveFileExW
GetModuleFileNameW
ExpandEnvironmentStringsW
GetFullPathNameW
CreateDirectoryW
LocalFileTimeToFileTime
FileTimeToLocalFileTime
SystemTimeToTzSpecificLocalTime
HeapReAlloc
HeapSize
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
InitializeCriticalSection
LoadLibraryA
GetCommandLineA
GetVersionExA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetModuleFileNameA
RtlUnwindEx
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetStartupInfoA
DeleteCriticalSection
FlsGetValue
FlsSetValue
TlsFree
FlsFree
GetCurrentThreadId
FlsAlloc
HeapSetInformation
HeapCreate
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LeaveCriticalSection
EnterCriticalSection
user32
CharLowerW
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
WaitMessage
DestroyWindow
GetClassInfoExW
RegisterClassExW
CreateWindowExW
PostQuitMessage
DefWindowProcW
FindWindowW
SendMessageW
GetWindowThreadProcessId
shell32
SHGetSpecialFolderLocation
SHGetPathFromIDListW
ord155
Name
.text
Size
162KB
Virtual Size
161KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
61KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
9KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
816B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=7, id=125, productName=VS2005 build 50727, version=50727,
count=28, id=110, productName=VS2005 build 50727, version=50727,
count=7, id=123, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=133, id=1, productName=Unmarked objects,
count=98, id=109, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
RustDevblogCheatChecker-main/manifest.json
- SHA256 3824dd673cce5a296c392bc6699bc7ef2b9bc00a41935b82e82df1c90159c397
- MD5 12d727daa99b7846f74f566117cd6261
- SHA1 da940d5b7f35d7fbc2ecacdf32b1b2657ed8ee6c
- SHA512 db91888fdc3cf68a7b08ac364c71f60c99a366df2d11824908b79ce2dea9c0037106b10879b231bf1504eb316c77dfbcfefb7229f3ac7ed7692dab9054d26b65
- TLSH T174E02B75D26C4C1F02901A9CC0291561F221D00B6E60AC46A9A8C55CC756BB9653EA0F
- MD5 SHA1 SHA512 TLSH