Nudge-1.0.0.zip
- SHA256 2820bb9892c19ab3ca720d3abe2a908e6848f57513c2f7bd4fcd74d759469242
Overview
overview
8Static
static
1Nudge\install.cmd
windows10-2004-x64
8Nudge\install.cmd
windows11-ltsc_2024-x64
8Nudge\lib\...re.dll
windows10-2004-x64
1Nudge\lib\...re.dll
windows11-ltsc_2024-x64
1Nudge\lib\...ms.dll
windows10-2004-x64
1Nudge\lib\...ms.dll
windows11-ltsc_2024-x64
1Nudge\lib\...er.dll
windows10-2004-x64
1Nudge\tool...te.ps1
windows10-2004-x64
3Nudge\tool...te.ps1
windows11-ltsc_2024-x64
3Nudge\tool...ll.ps1
windows10-2004-x64
8Nudge\tool...ll.ps1
windows11-ltsc_2024-x64
8Nudge\tool...her.js
windows10-2004-x64
3Nudge\tool...her.js
windows11-ltsc_2024-x64
3Nudge\tool...on.ps1
windows10-2004-x64
3Nudge\tool...on.ps1
windows11-ltsc_2024-x64
3Nudge\tray.ps1
windows10-2004-x64
3Nudge\tray.ps1
windows11-ltsc_2024-x64
3Nudge\ui\index.html
windows10-2004-x64
3Nudge\ui\index.html
windows11-ltsc_2024-x64
3Nudge\update.ps1
windows10-2004-x64
3Nudge\update.ps1
windows11-ltsc_2024-x64
3Static task
static1
Behavioral task
behavioral1
Sample
Nudge\install.cmd
Resource
win10v2004-20260911-en
windows10-2004-x64
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
Nudge\install.cmd
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
11 signatures
150 seconds
Behavioral task
behavioral3
Sample
Nudge\lib\Microsoft.Web.WebView2.Core.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
Nudge\lib\Microsoft.Web.WebView2.Core.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
Nudge\lib\Microsoft.Web.WebView2.WinForms.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
Nudge\lib\Microsoft.Web.WebView2.WinForms.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
Nudge\lib\WebView2Loader.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
Nudge\tools\apply-update.ps1
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral9
Sample
Nudge\tools\apply-update.ps1
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral10
Sample
Nudge\tools\install.ps1
Resource
win10v2004-20260911-en
windows10-2004-x64
10 signatures
150 seconds
Behavioral task
behavioral11
Sample
Nudge\tools\install.ps1
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
10 signatures
150 seconds
Behavioral task
behavioral12
Sample
Nudge\tools\launcher.js
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral13
Sample
Nudge\tools\launcher.js
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral14
Sample
Nudge\tools\make-icon.ps1
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral15
Sample
Nudge\tools\make-icon.ps1
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral16
Sample
Nudge\tray.ps1
Resource
win10v2004-20260911-en
windows10-2004-x64
6 signatures
150 seconds
Behavioral task
behavioral17
Sample
Nudge\tray.ps1
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
6 signatures
150 seconds
Behavioral task
behavioral18
Sample
Nudge\ui\index.html
Resource
win10v2004-20260911-en
windows10-2004-x64
10 signatures
150 seconds
Behavioral task
behavioral19
Sample
Nudge\ui\index.html
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
8 signatures
150 seconds
Behavioral task
behavioral20
Sample
Nudge\update.ps1
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral21
Sample
Nudge\update.ps1
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
General
- Target Nudge-1.0.0.zip
- Size 322KB
- Sample261113-wezxdset7w
- SHA256 2820bb9892c19ab3ca720d3abe2a908e6848f57513c2f7bd4fcd74d759469242
- MD5 82c935348cf24a8f1ca69544b1374d0f
- SHA1 39ee9ffd97172c60bfd24809a0500f7b00a3e2be
- SHA512 c28f0d1c676b0775997c9308a74e7394d8f5fa3401ca9984db28db31d2081899b90c399c43c6e3d668a470197d6cc73c650b1613da3ba17b4cefea8297aa14af
- SSDEEP 6144:5KiME58LJ4dA3H/RI1HLB2eEfJyCKo3jpF9MGKZctLAA21wdY/kkmb:5AwwX+1HLvExyCRjpwGKZctLA+kmb
- TLSH T1AC64233D542D3E96F11A2039F5791EA6C12F060C9DBEDB3602A6ACF99CABF64031D11D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
File Explorer
-
Nudge-1.0.0.zip.zip 322KB
-
Nudge\README.md9KB
-
Nudge\START-HERE.txt791B
-
Nudge\VERSION6B
-
Nudge\assets\nudge.ico105KB
-
Nudge\install.cmd208B
-
Nudge\lib\Microsoft.Web.WebView2.Core.dll.dll 681KB
-
Nudge\lib\Microsoft.Web.WebView2.WinForms.dll.dll 37KB
-
Nudge\lib\WebView2-LICENSE.txt1KB
-
Nudge\lib\WebView2Loader.dll.dll 190KB
-
Nudge\tools\apply-update.ps1.ps1 2KB
-
Nudge\tools\install.ps1.ps1 4KB
-
Nudge\tools\launcher.cs.js 2KB
-
Nudge\tools\make-icon.ps1.ps1 4KB
-
Nudge\tray.ps1.ps1 31KB
-
Nudge\ui\index.html.html .js 86KB
-
Nudge\update.ps1.ps1 9KB
-
Nudge\update.pub.xml583B
Nudge\README.md
- SHA256 38ea7e2759b3e49de3a50a7fa7714d04efa49acbf689f2f0e362d4566800c535
- MD5 d438692aaf9b17e6c9e3c73d2d628703
- SHA1 d65d22655a01d21e734b90ce97544adef70fae33
- SHA512 4a8c102a5682498494685d98ec3ee6a0fc3f4bd9750f3134facf9bbfeb57ecf41dd0533b7ebd1e1780d9853dd798a771ab963b4f3ae117e7ad7979b1b956bbb3
- SSDEEP 192:1sSX4wAUIiFAe0VfLYx1v7VqbIQ/JcFMmVPQWsUY1I2L93bOtkXCc:1sRZiFR01LK1vQdSFMmTY62LrXCc
- TLSH T1E1221A2D04576FBD1912BBDC7208728BB0DCBD57C8754AB1CBAEA918BBCEA7D5C05002
- MD5 SHA1 SHA512 SSDEEP TLSH
Nudge\START-HERE.txt
- SHA256 443a09de187783d6b00642c7ef1f02f7748ed99381998b42818ae73610c15f82
- MD5 2e0fe8990a7b42556ca6475350998b4d
- SHA1 aa8e490f298c16e242ab388c93904cd2846a57d7
- SHA512 5616b974bb480bd7d047a3dc118eedf833f2364a3f10e6d6843e2746b897d325e2dbd6b49e0bed5719773e12f1a28a6ecb8b5efeb2fa1e9e03972a8dfb81f62a
- TLSH T11301C5E50E43AF4EBCB53BDC338A03088606A802FC1C10914B6FC554BB8A3353E19141
- MD5 SHA1 SHA512 TLSH
Nudge\VERSION
- SHA256 59854984853104df5c353e2f681a15fc7924742f9a2e468c29af248dce45ce03
- MD5 c9e47dbb0e1927076ed7b2e1ec157be7
- SHA1 c538b66c7110ca3a028ccfe422d0f1fa200a9935
- SHA512 c6e5081ce77f5971474ff994acc1b8887818f3007a4e3db32c91640203906f0bd2df3012441c9e1b6c1ae4e54dfea465ec23034092779cf6852aece45bf1df21
- MD5 SHA1 SHA512
Nudge\assets\nudge.ico
- SHA256 c4a49baf6baac6b758ca36d40f63e5f0567f1d495eccface128034e815b12f95
- MD5 c0866cc74661c5bae592230d511ace11
- SHA1 d37301f515754dd8aaff99de859926e708c2d487
- SHA512 333d6dfd2b6b1acf288f6c0fa3de94df174cc482b7cd7e38bc63993cc95f710c53e01e3afd0dff00bca79983144380825919730ad7e7dd4cdf1de3c2ef54dd6b
- SSDEEP 384:u+MFpVR2z8OwGwvQoasxJNmA0+VL8iwHE0HPqPzcqRtFWW4uGZDacnWEo/R:Ju6o/R
- TLSH T1D2B331ECA6CDC77CEDB24E3E87310F0175A98C98D6490EB51965B65E19B78C3F0E4222
- MD5 SHA1 SHA512 SSDEEP TLSH
Nudge\install.cmd
- SHA256 ea5c7c8f12429a6cb8b4b57ac2f1460754e502e418e975bd5d70ace8a1af800b
- MD5 6ba0d4e294b7b5a2dc24567314e45dc0
- SHA1 62693a8abb32e7b37c8a01f8946b1db811f0402b
- SHA512 c6e6e3886846fe415c25f55aa9c9ac61d53e81e64ac44684f5528d945ef232155e3dc9a6194dd26a27ad36762e779a879f5eff9a5a3d0ab99120e9cf5d303fb1
- TLSH T1C4D023253030174435F78C517A76E158EC5D10DBA7454D52F17341352E4E360D39D0C9
- MD5 SHA1 SHA512 TLSH
Nudge\lib\Microsoft.Web.WebView2.Core.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d60e6e94245078cb56e44ebd5f360dc04bf18e460136be93bfc4cfca43b98505
- MD5 e336cd4cc1f67e3f57ead4e72a24c93b
- SHA1 c03565235315e597786b287b52e00f27bf0de806
- SHA512 950516cb1f7a493592c0ad4c39c0df9a5c0cd44225cff17e2561d72d908c4f7b8623ef28610c66c6cd0b963ac89fcae9ab41a9a99b42249114963f7e21e92bb2
- SSDEEP 12288:RJ4dCXzRKX4EcJupbSRi461R1VFrP3224c+iKmDRkRFNBMUFeA+imQ269pRFZNIz:RJ4dCXzRKX4EcJAD1RnQk
- TLSH T14DE4301223FD8619F5F27FB9997412609BB6BC97BD78C38D0698642D0D72B819DA0333
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
91:eb:ec:e3:ed:86:89:f0:69:69:e3:e0:ae:0d:51:95:2c:38:4c:94:0d:73:61:4f:43:93:3f:5c:28:1b:f5:2e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Sep 20, 2026
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:33:4e:c2:48:56:4c:2b:5c:6f:00:00:00:00:02:33
Issuer
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 16, 2026 - Apr 15, 2027
Subject
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:39:3b:b6:37:19:bf:06:1d:67:00:00:00:00:00:39
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 8, 2024 - Mar 22, 2036
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:8603-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:25:80:c7:37:c6:cd:aa:77:49:00:01:00:00:02:25
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Feb 19, 2026 - May 17, 2027
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
694098
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\third_party\edge_webview2\win\webview2_api_writer\dotNetAPIWrapper\Microsoft.Web.WebView2.Core\bin\ReleasePackage\Microsoft.Web.WebView2.Core.pdb
mscoree
_CorDllMain
Name
.text
Size
670KB
Virtual Size
669KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Nudge\lib\Microsoft.Web.WebView2.WinForms.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6a9e6856f23c463783c3afb0ca5d78f56324c86657162ccb16d5227b3233b32a
- MD5 f1a15a22fe0874e4bb2e8f05dfd62f57
- SHA1 aa06e407c7b4241ae559aee616ef156540a76a12
- SHA512 5c467d9f6d27b12931777520e10c85599742f9fa9a9add3971be9a862bfa278c526310368e8a8d79d39673c2af5c1fa3daca0829127b755728596770fe460198
- SSDEEP 768:psQNb2vIYymJ22Mss+5JQ+ZDgcEST3p4Jjrjh2jeFSUyauTv1JKia5/Zi/ZGQSxx:pzb2vLbJQ+ZDgcEST3p4JjrjaeFSUyaN
- TLSH T151033A4087ECC517EAEB5F78A8B4856107BABEC37DA1D7980D88B1E90C73BD055113AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
0d:22:58:a6:50:34:b4:d3:d0:be:e3:4f:ed:93:e9:0d:2b:38:e4:6e:41:82:80:b6:15:27:33:db:36:21:2c:2d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Sep 20, 2026
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:33:4e:c2:48:56:4c:2b:5c:6f:00:00:00:00:02:33
Issuer
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 16, 2026 - Apr 15, 2027
Subject
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:39:3b:b6:37:19:bf:06:1d:67:00:00:00:00:00:39
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 8, 2024 - Mar 22, 2036
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:F002-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:20:24:e1:e6:e0:17:b9:b4:8e:00:01:00:00:02:20
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Feb 19, 2026 - May 17, 2027
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
34142
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\third_party\edge_webview2\win\winforms_control\Microsoft.Web.WebView2.WinForms\obj\Release Stable APIs\net462\Microsoft.Web.WebView2.WinForms.pdb
mscoree
_CorDllMain
Name
.text
Size
25KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Nudge\lib\WebView2-LICENSE.txt
- SHA256 0af8f1b807512aae39c2ac1aa4d0cae65cabecb6fd554b8439a5162a0d6eca55
- MD5 89ac2d3232149f6c00251de9162fa6e3
- SHA1 cd2c6e9501dc013d2842a186a019513aa3bf4a85
- SHA512 0da86e742bac37773de1c72ced90a44a43617e4a2bb8a4c12cc702e08cdb0b167a40107bda557cc0ef11bef06b8135dfdd8ff6f897c23b58c974a65905743b7a
- TLSH T18B31655B12440FA75AD32A927566ADC0F09DD02D3F376E05186EF388577B62EC9B7040
- MD5 SHA1 SHA512 TLSH
Nudge\lib\WebView2Loader.dll
- IMPHASH 8596af6dd51622a07d3ec94b56ffd325
- SHA256 3426dcc55fdfb8b5e7ac623cf33b4ccf283fbf68a0c5a65bddfdb4d749a8abee
- MD5 f1426c839cbf0e9a4eae7c67916cedff
- SHA1 60cdeba80ce6357d9598947bd65f2db31e5efa2c
- SHA512 392d172f8e960a2d18d18175813e091c27d12065db06c4fcaabb6429bbb1306a3087fff33e51bf9226759b34d454109c11a310711ff9f7c6f9d8f78164b661f3
- SSDEEP 3072:hJoWXgNjIFnTf75x2v/KUUbPXGUIufAuzA2dTZnaZED3JU9jfbKuFjaS3:LKI175Av/KLB9zz3nyED3JU9DKC
- TLSH T142145D06B3E940F6F976D67C89A38A46F67278110710AAEF0360473D5F2BBD49A3D721
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
50:fb:9e:c0:21:af:a3:68:11:4c:c5:76:f2:69:83:67:59:5c:74:f2:13:50:cb:fb:bc:be:9b:f0:74:51:a1:be
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Sep 20, 2026
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:33:4e:c2:48:56:4c:2b:5c:6f:00:00:00:00:02:33
Issuer
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 16, 2026 - Apr 15, 2027
Subject
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:39:3b:b6:37:19:bf:06:1d:67:00:00:00:00:00:39
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 8, 2024 - Mar 22, 2036
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:A000-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:2b:bb:00:50:ff:4d:3b:9a:a1:00:01:00:00:02:2b
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Feb 19, 2026 - May 17, 2027
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
10
Entry point
40592
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
WebView2Loader.dll.pdb
kernel32
AcquireSRWLockExclusive
CloseHandle
CreateFileW
DeleteCriticalSection
EncodePointer
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileExW
FindNextFileW
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetEnvironmentVariableW
GetFileAttributesW
GetFileType
GetLastError
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionEx
InitializeSListHead
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
LCMapStringEx
LCMapStringW
LeaveCriticalSection
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
LocalAlloc
LocalFree
MultiByteToWideChar
OpenEventW
OutputDebugStringA
OutputDebugStringW
QueryPerformanceCounter
RaiseException
ReleaseSRWLockExclusive
RtlCaptureContext
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwindEx
RtlVirtualUnwind
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
SleepConditionVariableSRW
TerminateProcess
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WakeAllConditionVariable
WideCharToMultiByte
WriteConsoleW
WriteFile
CompareBrowserVersions
CreateCoreWebView2Environment
CreateCoreWebView2EnvironmentWithOptions
CreateOrJoinCoreWebView2ClusterEnvironment
GetAvailableCoreWebView2BrowserVersionString
GetAvailableCoreWebView2BrowserVersionStringWithOptions
GetCoreWebView2ClusterEnvironmentOptions
Name
.text
Size
110KB
Virtual Size
110KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
52KB
Virtual Size
52KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
_RDATA
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
Nudge\tools\apply-update.ps1
- SHA256 d1bb6583838d6c8afcbe446fb521cfd9be17d24a112877f7ae2ee95576dfbda5
- MD5 3f4f2e75d9f23711bbb09f92acafd430
- SHA1 579f0912cf7195e3f7de660b77f2d950724e9249
- SHA512 1fb9bab6ba073f188d4989526f94b02090fe46cc2dc0dddfd7c45084248d23e6ec4a3443d66c098e8a2f642e25219a77b0af2730af3da9f70930b3e1b9c0a63f
- TLSH T1D05185076A3576664AC623E1F8C091845A1E809FD4B98E21A0DDD3C7DFF2D3F0B6C681
- MD5 SHA1 SHA512 TLSH
Nudge\tools\install.ps1
- SHA256 74b6f5fa365d887db7101fe91fc0c64ed1b732cc5c4999148535a83870353756
- MD5 c1152c05f3bc024fa210028847f9885d
- SHA1 ee0fef223ece3afa243cb46aaf0172c94f253b6b
- SHA512 e6c8f1d34a21fd60045a4dfccc2af670b5c798c97823f4d2da8dab815c466888878aabdb637289722a2e02400e9a12abf71fd549683765f630ab17d71588473c
- SSDEEP 96:NSWWsuoOmivpu9lyTNcG27P0EWRpFc82VnMkvRiKwsYmLojFBP2EU+Mi4FqN:NMrm6clyTNcrz0ELVpZNYCUfUr/e
- TLSH T12CA10A05A0372C57E5E23F44E2CA8304F5AE148ED0252312D64D9606FE67A7E9FAF3D2
- MD5 SHA1 SHA512 SSDEEP TLSH
Nudge\tools\launcher.cs
- SHA256 ee542a6fe389343933a27f8aba6e97372a2d8157a1e22f3502a9921ef52b65cd
- MD5 afe94b9de012c42edefbb65646d5bc45
- SHA1 9028f810e3cb8217f3d94be2edcd81d252495014
- SHA512 23246308d4fc73e4916dce3a2786c16014bbedf7c438b0e9320d66de42d804ed31a0111b1d4165a545f1ed0b1c837798e2863e6978418eb2e0f72422fdb00fb9
- TLSH T11451C96D2CDEE59060C726217719D15A1AB3C34F8B36D8F1FADDC200BF2595C06B92B6
- MD5 SHA1 SHA512 TLSH
Nudge\tools\make-icon.ps1
- SHA256 1a1b2b35d2c0c29db382bc5e16c033d306c80f31e06c8488eb6951d99fd2ee69
- MD5 613a57e7ab059da28bb6c5bc0a8aefe8
- SHA1 05f171d5c429a3941b0865a1acf07bb135c617d0
- SHA512 debb65132c11c6f636c69c1b2775ff3b35c91bba4b26b7c573119b7ae88ccb7601d3bc5e96ca0d758365a2961070f4973a8eb664b2ed07abaed9abd68438dc59
- SSDEEP 96:HqsFQ8yOaspm9Zk5pb8M317LB/97JXWbee9tLf3V:r++aspm9qXb8M317LB17JXWbeU5N
- TLSH T1A191B81962FBFEC98B951255E5A8C812DBFA41348245EC0C338EF54DB793EAD053D264
- MD5 SHA1 SHA512 SSDEEP TLSH
Nudge\tray.ps1
- SHA256 528b4e36bd0ef21312fc4cb8a621525f17056b5aa86f7885b47d46860c993001
- MD5 0df5701c507d99e3ff7b642bae740fb3
- SHA1 d755e668081dfbcd6118b557d2f781080717ca7b
- SHA512 13d24d9938974d8803db64e21074e49827d67bf232b8a2b8d3bca1a38a1cc66538398ed0273e8304d3c7b75243a79c987712088d852af2a76b310fc38b193d26
- SSDEEP 384:b32G1aT/Wm/pvUKAeXL0A1FiNBpGDThMzO24WBkxjlmsX/a62u5r6442XfqKU28b:v2rkm3OC24gkxnAUTvsjRxHiKy/weE
- TLSH T181E20B20AE3BE8254AC265B66DD6C048FBAE202DD2249B64B3DED1D0FF5157C47FC690
- MD5 SHA1 SHA512 SSDEEP TLSH
Nudge\ui\index.html
- SHA256 b108a39245c18aeb74c4c588a44059e9cd10ac61fd2655563a14ace5687bea50
- MD5 15d39afe9650bb39b97f7b28dda644d2
- SHA1 472892990355a0d19261b05a3649496d3ff015e2
- SHA512 48dd7aa941c8c476f709ce668e985135e4ce448ff7cda85c526088a5288f1cd01c42db7ba3257bc48bea47f4f31d2b2434741e6130f62c1c4486b2bd3bfc5b04
- SSDEEP 1536:1wzBO99BpSh1bWUlL/hh+JneJkPUXJ2xOFUjDsES71qAyaCcgrhWLnPuUVVU:pObNIJneJWOejDZSpqChg9WLnPuUI
- TLSH T1B3935DF361B2313D042361D8B78AA15DF228950DCB46C5B1FD1C9444EFCAEB1AAFDA46
- MD5 SHA1 SHA512 SSDEEP TLSH
Nudge\update.ps1
- SHA256 c7fdba6453147574648bbf10ed7c96148e44a7efd98e688ebfea18106fc56071
- MD5 a2a21edc225088afcb4d62931306249a
- SHA1 ad2629619883cb0dab248b83b5caaf216d36cf29
- SHA512 7daae5d66cb15b293c030c845c5fa7c1532866074c22b110e7d17c1ccbca3ea3650d5cec04d9f1874d08b4de2835adac5456ab7f05f89bdd87f464a0500f951c
- SSDEEP 192:5aCIM66fV5agczVlCn7KC7wC2lxYTtvaC3//A0s1h4H3C4d0CoYOoCbQik7cSjZM:5aC/dV5ag1rRh3HPsv4S4d7oYOfQ7VZM
- TLSH T118121B695D93D9394AC2165E68895010B7AF801C53219F60F6EED488FFF02BECF5D1E8
- MD5 SHA1 SHA512 SSDEEP TLSH
Nudge\update.pub.xml
- SHA256 2f9d2ec3517406360126815027b9b086605b87946919b9386350bb45d791a686
- MD5 0d40738c5b0cbd617bdbbaf31e22bdd3
- SHA1 c753c7daf3f4e63beb31d08a209397cf1158debc
- SHA512 78e5365b84621ebd4de6c0ca25a17743273569c5a12bd7cc1df986029ab2b3d036f1a446f7c30629734234e65ac377bbde74c8f7bce4d061015962e58ba09aab
- TLSH T193F0024927F1F915D193CC02D62912A959B5281C75813937805A3DD3D2C03ABE90C69D
- MD5 SHA1 SHA512 TLSH