Suspicious
Suspect

7z-stream @ 0x00000000.7z

7Zip Archive
MD5: 1b5935fed85fc5c14a85c9bb8e7403a3
Size: 4.38 MB
application/x-7z-compressed

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 1b5935fed85fc5c14a85c9bb8e7403a3
Sha1 1c435080cfb6db4bcb36f9eba7cbeaa8acb6613f
Sha256 1e4c0b9ebe63dd50dd95c7b684ddc989c67e2172b49104512ec6b8bc59961ffc
Sha384 67aa72d771c5a4c4c91c811f6b9c23af5e77bd4b477c5899d7440c45b3306f77c28b3a001008254ba98e3b9e84b771f6
Sha512 6f83778cd8f6c6e065102187fefb6cb6b9919e361b665270c10a562a1820b6406d1813ad60b3fa4a4da13a95bb3475e7405b03aa632658cb0e39eaaa820d6eb4
SSDeep 49152:7AnLVKSJvZo1wRIn5Gkt4pfjxRyw0UtJr2ehJMdKyEwwxCQNGi5apUsZvgfRxxIr:7c5Jxu5/tk7/yqKGS50Gi57sFgfT/bdw
TLSH DA16332FF6B94049476CC72AAEC1074A34A2807BECE11975B8CF5DFC6CC992D7A31849
1b5935fed85fc5c14a85c9bb8e7403a3
KiddonsModMenu
locale_data
cs
alert_messages.json
hint_lines.json
panel_strings.json
popup_text.json
da
feedback_lines.json
labels_ui.json
menu_entries.json
popup_text.json
el
alert_messages.json
captions.json
feedback_lines.json
menu_entries.json
popup_text.json
en
feedback_lines.json
panel_strings.json
popup_text.json
es
alert_messages.json
feedback_lines.json
labels_ui.json
fi
alert_messages.json
feedback_lines.json
popup_text.json
fr
hint_lines.json
menu_entries.json
panel_strings.json
it
alert_messages.json
labels_ui.json
menu_entries.json
panel_strings.json
ja
alert_messages.json
captions.json
hint_lines.json
labels_ui.json
panel_strings.json
ko
alert_messages.json
captions.json
panel_strings.json
pl
alert_messages.json
feedback_lines.json
labels_ui.json
pt
alert_messages.json
feedback_lines.json
hint_lines.json
labels_ui.json
sv
feedback_lines.json
hint_lines.json
panel_strings.json
modules
assets
feedback_table.csv
LauncherState.json
loadout_defaults_2025.ini
THEME_SETTINGS.ini
manuals
browser_config_v8.ini
guide.txt
manifest_blob_513.dat
README_v9.md
season_meta_library.json
user_options.json
patches
AUDIO_OPTIONS.ini
CONFIG.json
launcher_settings.ini
library_options_active.ini
pack_blob.dat
pack_outline.xml
preset_defaults.ini
preset_index.csv
rating_data_dat_2023.dat
thumbnail_render_enabled.log
troubleshooting_notes.txt
presets
background_task_v9.log
config-panel.json
FEEDBACK_TABLE.csv
FlintFoundry
changelog_xml.xml
LICENSE_NOTES.txt
manifest.json
pack_outline_queued.xml
wallpaper-kit.bmp
manifest_blob_v8.dat
manual-builder.txt
pearl-works
launcher_state.json
LICENSE_NOTES.txt
manifest.json
README.md
thumbnail_cache_dat.dat
PRESET_APPLY.log
thumbnails_lib
Advanced.md
browse_cache_dat.dat
card-edition.bmp
frame.bmp
PresetGuide.txt
preset_data.json
SEASON_META.json
splash-mission.bmp
splash_433.bmp
theme_info_2025.json
tile_card.bmp
trophy-list-banner.json
TrophyDataDat.dat
Wallpaper.bmp
KiddonsModMenu.exe
[Authenticode]_a6ba28f6.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.edata
.idata
.tls
.rsrc
.reloc
.debug
Resources
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
libiconv-2.dll
[Authenticode]_9e5aa671.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.edata
.idata
.CRT
.tls
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
libintl-8.dll
[Authenticode]_07bf70b0.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.edata
.idata
.tls
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
libpcre2-8-0.dll
[Authenticode]_01b11a87.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.edata
.idata
.tls
.reloc
libwinpthread-1.dll
Overlay_7461d0f5.bin
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.managed
.rdata
.data
.pdata
.rsrc
.reloc
msvcp140.dll
[Authenticode]_c434e7f7.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
ucrtbase.dll
[Authenticode]_c7070076.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
fothk
.rdata
.data
.pdata
.fptable
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
vcruntime140.dll
[Authenticode]_add9f1e3.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
fothk
.rdata
.data
.pdata
_RDATA
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
vcruntime140_1.dll
[Authenticode]_2441bb51.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
zlib1.dll
[Authenticode]_753a1aed.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.edata
.idata
.CRT
.tls
.reloc
STICH beta

No STICH Path has been generated for this analysis yet.

5 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 5
1b5935fed85fc5c14a85c9bb8e7403a3
KiddonsModMenu
locale_data
cs
alert_messages.json
hint_lines.json
panel_strings.json
popup_text.json
da
feedback_lines.json
labels_ui.json
menu_entries.json
popup_text.json
el
alert_messages.json
captions.json
feedback_lines.json
menu_entries.json
popup_text.json
en
feedback_lines.json
panel_strings.json
popup_text.json
es
alert_messages.json
feedback_lines.json
labels_ui.json
fi
alert_messages.json
feedback_lines.json
popup_text.json
fr
hint_lines.json
menu_entries.json
panel_strings.json
it
alert_messages.json
labels_ui.json
menu_entries.json
panel_strings.json
ja
alert_messages.json
captions.json
hint_lines.json
labels_ui.json
panel_strings.json
ko
alert_messages.json
captions.json
panel_strings.json
pl
alert_messages.json
feedback_lines.json
labels_ui.json
pt
alert_messages.json
feedback_lines.json
hint_lines.json
labels_ui.json
sv
feedback_lines.json
hint_lines.json
panel_strings.json
modules
assets
feedback_table.csv
LauncherState.json
loadout_defaults_2025.ini
THEME_SETTINGS.ini
manuals
browser_config_v8.ini
guide.txt
manifest_blob_513.dat
README_v9.md
season_meta_library.json
user_options.json
patches
AUDIO_OPTIONS.ini
CONFIG.json
launcher_settings.ini
library_options_active.ini
pack_blob.dat
pack_outline.xml
preset_defaults.ini
preset_index.csv
rating_data_dat_2023.dat
thumbnail_render_enabled.log
troubleshooting_notes.txt
presets
background_task_v9.log
config-panel.json
FEEDBACK_TABLE.csv
FlintFoundry
changelog_xml.xml
LICENSE_NOTES.txt
manifest.json
pack_outline_queued.xml
wallpaper-kit.bmp
manifest_blob_v8.dat
manual-builder.txt
pearl-works
launcher_state.json
LICENSE_NOTES.txt
manifest.json
README.md
thumbnail_cache_dat.dat
PRESET_APPLY.log
thumbnails_lib
Advanced.md
browse_cache_dat.dat
card-edition.bmp
frame.bmp
PresetGuide.txt
preset_data.json
SEASON_META.json
splash-mission.bmp
splash_433.bmp
theme_info_2025.json
tile_card.bmp
trophy-list-banner.json
TrophyDataDat.dat
Wallpaper.bmp
KiddonsModMenu.exe
[Authenticode]_a6ba28f6.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.edata
.idata
.tls
.rsrc
.reloc
.debug
Resources
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
libiconv-2.dll
[Authenticode]_9e5aa671.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.edata
.idata
.CRT
.tls
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
libintl-8.dll
[Authenticode]_07bf70b0.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.edata
.idata
.tls
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
libpcre2-8-0.dll
[Authenticode]_01b11a87.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.edata
.idata
.tls
.reloc
libwinpthread-1.dll
Overlay_7461d0f5.bin
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.managed
.rdata
.data
.pdata
.rsrc
.reloc
msvcp140.dll
[Authenticode]_c434e7f7.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
ucrtbase.dll
[Authenticode]_c7070076.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
fothk
.rdata
.data
.pdata
.fptable
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
vcruntime140.dll
[Authenticode]_add9f1e3.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
fothk
.rdata
.data
.pdata
_RDATA
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
vcruntime140_1.dll
[Authenticode]_2441bb51.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
zlib1.dll
[Authenticode]_753a1aed.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.edata
.idata
.CRT
.tls
.reloc
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙