e7d81827c98525ec15ed458d001d493d

ZIP Archive

MD5: e7d81827c98525ec15ed458d001d493d

Size: 17.59 MB

application/zip

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

ZIP archive

Size

17.59 MB · 17,588,896 B

First seen

2026-07-17 12:46 · 3 months ago

Last seen

2026-07-17 12:46 · 3 months ago

Last analysis

2026-07-17 17:40 · 3 months ago

Hashes

MD5 e7d81827c98525ec15ed458d001d493d Sha1 08ccb8ec5a8befc6bcaaa6c96cbadd4422ab08ae Sha256 14ac0c55100d957d1b198583461b2605e6e72c2538039b54c538dc7e356ddce3 Sha384 6b58a8fb78e4ef8d996443dbfe41eb92d39c87151f7ad3d457d71ad8d723f34b492c9e6a1cab4c5a4a78810d1af20215 Sha512 10dfea3c7e74da2c1542c42afafc76c6c366ed7977e22d935e111de5f2ea4c09f3ec99273c0b85bf822af9069d5babd40404408f9b15c9a420957a7e72f712a9 SSDeep 393216:puz0CfiOIJR8BWBJJ0X2R59aZ3/pZEnp1SVQ5EO6o2DGXb8:puzzyJjJ9Ta5/nkm+BL8 TLSH 35073355EA691F80DC8D263C98CF0B537768AB0E152BA74F8360E26F7DF75F0A912502

2 malicious · 824 files

ZIPe7d81827c98525ec15ed458d001d493dCVE-2019-9674

BINlogs

TXTappinfo_log.txt

TXTbootstrap_log.txt

TXTcef_log.txt

TXTcloud_log.txt

TXTconfigstore_log.txt

TXTconnection_log.txt

TXTconsole_log.txt

TXTcontroller.txt

TXTservice_log.txt

TXTshader_log.txt

TXTsteamsysinfo.txt

TXTsteamui.txt

TXTsteamui_audio.txt

TXTsteamui_html.txt

TXTsteamui_login.txt

TXTsteamui_system.txt

TXTsteamui_update.txt

TXTsystemaudiomanager.txt

TXTsystemdisplaymanager.txt

TXTsystemdockmanager.txt

TXTsystemmanager.txt

TXTsystemperfmanager.txt

TXTsystemperfreporting.txt

TXTtransport_client.txt

TXTtransport_steamui.txt

TXTwebhelper.txt

TXTwebhelper_gpu.txt

TXTwebhelper_js.txt

DLLLocationFrameworkPS.dll

Structure

P7B[Authenticode]_55839128.p7b

BINResources

BINRT_VERSION

BINID:0001

BINID:1033

DLLpython37.dll

Structure

BINOverlay_5b68adec.bin

BINResources

BINRT_RCDATA

BINID:0000

EXEID:0

Structure

BINResources

BINRT_VERSION

BINID:0001

BINID:1033

BINPNG

BINID:0065

IMGID:1033

IMGID:1033-preview.png

BINID:0066

IMGID:1033

IMGID:1033-preview.png

BINID:0067

IMGID:1033

IMGID:1033-preview.png

BINID:0068

IMGID:1033

IMGID:1033-preview.png

BINID:0069

IMGID:1033

IMGID:1033-preview.png

BINID:006A

IMGID:1033

IMGID:1033-preview.png

BINID:006B

IMGID:1033

IMGID:1033-preview.png

BINID:006C

IMGID:1033

IMGID:1033-preview.png

BINID:006D

IMGID:1033

IMGID:1033-preview.png

BINID:006E

IMGID:1033

IMGID:1033-preview.png

P7B[Authenticode]_08f37821.p7b

BINRT_VERSION

BINID:0001

BINID:1033

BINRT_HTML

BINID:0000

BINID:0

BINRT_MANIFEST

BINID:0001

BINID:1033

EXESetup.exe

Structure

P7B[Authenticode]_8a74c34a.p7b

BINResources

BINRT_ICON

BINID:0001

IMGID:1033

IMGID:1033-preview.png

BINID:0002

BINID:1033

BINID:0003

BINID:1033

BINID:0004

BINID:1033

BINID:0005

BINID:1033

BINID:0006

BINID:1033

BINID:0007

IMGID:1033

IMGID:1033-preview.png

BINID:0008

BINID:1033

BINID:0009

BINID:1033

BINID:000A

BINID:1033

BINID:000B

BINID:1033

BINID:000C

BINID:1033

BINRT_GROUP_CURSOR4

BINID:0001

BINID:1033

BINRT_VERSION

BINID:0001

BINID:1033

BINRT_MANIFEST

BINID:0001

BINID:1033

DLLvcruntime140.dll

Structure

P7B[Authenticode]_fcfc5664.p7b

BINResources

BINRT_VERSION

BINID:0001

BINID:1033

BINfriends

RESAchievementNotification.res

RESaddfriendenterdetailssubpanel.res

RESaddfriendresultsubpanel.res

RESaddfriendresultsubpanel_failure.res

RESaddfriendresultsubpanel_success.res

RESBlockCommunicationResultDialog.res

RESBlockCommunicationWarningDialog.res

RESbroadcastapprovebar.res

RESbroadcastapprovenotification.res

RESbroadcastcantstartfriend.res

RESBroadcastChannelLive.res

RESbroadcastinvitebar.res

RESbroadcastinvitenotification.res

RESbroadcastpublicstatenotification.res

RESbroadcastrecordererrornotification.res

RESbroadcastuploaderrornotification.res

RESbroadcastviewernotification.res

RESChatIntroductionDialog.res

RESChatInviteNotification.res

RESChatMsgNoTextNotification.res

RESChatMsgNotification.res

RESChatPasswordWarningDialog.res

RESChatRoomDlg.res

RESChatRoomDlgFriend.res

RESChatURLWarningDialog.res

RESClanEventDialog.res

RESClanEventNotification.res

RESClanInvitationNotification.res

RESDialogFindBuddy.res

RESDialogHelpIngame.res

RESDialogRemoveUser.res

RESDialogSendMessage.res

RESDialogSystemMessage.res

RESfriendaliasesdialog.res

RESfriendgameinvitedialog.res

RESFriendIngameNotification.res

RESFriendInvitationNotification.res

RESfriendnotificationoptionsdialog.res

RESFriendOnlineNotification.res

RESfriendsrefreshlogindialog.res

WAVfriend_join.wav

WAVfriend_online.wav

RESgameinvitebar.res

RESGameInviteNotification.res

RESgiftreceivednotification.res

TGAicon_chatFailed.tga

TGAicon_chat_activity.tga

TGAicon_chat_idle.tga

TGAicon_connected.tga

TGAicon_connected_speaking.tga

TGAicon_groupchat_activity.tga

TGAicon_groupchat_idle.tga

TGAicon_microphone.tga

TGAicon_microphone_hold.tga

TGAicon_microphone_off.tga

TGAicon_notChatting.tga

TGAicon_speaker.tga

TGAicon_speaker_ringing.tga

RESInviteFriendResultSubPanel.res

RESInviteFriendResultSubPanel_failure.res

RESInviteFriendResultSubPanel_success.res

RESitemreceivednotification.res

TGAloop_1.tga

TGAloop_2.tga

TGAloop_3.tga

TGAloop_4.tga

TGAloop_5.tga

TGAloop_6.tga

TGAloop_7.tga

TGAloop_8.tga

WAVmessage.wav

RESnewturnsnotification.res

RESPlayersSubRecentPlayers.res

TGArampDown_1.tga

TGArampDown_2.tga

RESremoteplaytogetheravailablenotification.res

BINsetnicknamedialog.layout

RESSubPanelFindBuddy.res

RESSubPanelFindBuddyComplete.res

RESSubPanelFindBuddyRequestAuth.res

RESSubPanelFindBuddyResults.res

RESSubPanelUserInfoDetails.res

RESTrackerDialog.res

TXTtrackerui_brazilian.txt

TXTtrackerui_bulgarian.txt

TXTtrackerui_czech.txt

TXTtrackerui_danish.txt

TXTtrackerui_dutch.txt

TXTtrackerui_english.txt

TXTtrackerui_finnish.txt

TXTtrackerui_french.txt

TXTtrackerui_german.txt

TXTtrackerui_greek.txt

TXTtrackerui_hungarian.txt

TXTtrackerui_indonesian.txt

TXTtrackerui_italian.txt

TXTtrackerui_japanese.txt

TXTtrackerui_korean.txt

TXTtrackerui_latam.txt

TXTtrackerui_malay.txt

TXTtrackerui_norwegian.txt

TXTtrackerui_polish.txt

TXTtrackerui_portuguese.txt

TXTtrackerui_romanian.txt

TXTtrackerui_russian.txt

TXTtrackerui_schinese.txt

TXTtrackerui_sc_schinese.txt

TXTtrackerui_spanish.txt

TXTtrackerui_swedish.txt

TXTtrackerui_tchinese.txt

TXTtrackerui_thai.txt

TXTtrackerui_turkish.txt

TXTtrackerui_ukrainian.txt

TXTtrackerui_vietnamese.txt

REStradeinvitebar.res

RESvoicebar.res

RESVoiceChatInviteNotification.res

WAVvoice_hang_up.wav

BINgraphics

TGAachievementbg.tga

TGAachievementbg_recent.tga

TGAannouncement_arrow.tga

TGAavatarBorderGolden.tga

TGAavatarBorderInGame.tga

TGAavatarBorderOffline.tga

TGAavatarBorderOnline.tga

TGAavatar_184blank.tga

TGAavatar_32blank.tga

TGAavatar_64blank.tga

TGAbeta.tga

TGAbeta_hover.tga

TGAbg_security_code_entry.tga

TGAbg_security_wizard.tga

TGABigPictureBG.tga

IMGblefirmwareupdate.png

IMGblefirmwareupdate.png-preview.png

BINbroadcast

IMGbroadcast_live_grey.png

IMGbroadcast_live_grey.png-preview.png

IMGbroadcast_live_red.png

IMGbroadcast_live_red.png-preview.png

IMGdesktop_placeholder.jpg

EXIFdesktop_placeholder.jpg.exif

IMGdesktop_placeholder.jpg-preview.png

IMGdesktop_placeholder_rpt.jpg

EXIFdesktop_placeholder_rpt.jpg.exif

IMGdesktop_placeholder_rpt.jpg-preview.png

TGAicon_close_default.tga

TGAicon_close_hover.tga

IMGicon_mic_disabled.png

IMGicon_mic_disabled.png-preview.png

IMGicon_mic_off.png

IMGicon_mic_off.png-preview.png

IMGicon_mic_on.png

IMGicon_mic_on.png-preview.png

IMGicon_requests.png

IMGicon_requests.png-preview.png

IMGicon_viewers.png

IMGicon_viewers.png-preview.png

TGAbtnDefBottom.tga

TGAbtnDefBottomLeft.tga

TGAbtnDefBottomRight.tga

TGAbtnDefLeft.tga

TGAbtnDefRight.tga

TGAbtnDefTop.tga

TGAbtnDefTopLeft.tga

TGAbtnDefTopRight.tga

TGAbtnDisBottom.tga

TGAbtnDisBottomLeft.tga

TGAbtnDisBottomRight.tga

TGAbtnDisLeft.tga

TGAbtnDisRight.tga

TGAbtnDisTop.tga

TGAbtnDisTopLeft.tga

TGAbtnDisTopRight.tga

TGAbtnOvrOffBottom.tga

TGAbtnOvrOffBottomLeft.tga

TGAbtnOvrOffBottomRight.tga

TGAbtnOvrOffTopLeft.tga

TGAbtnOvrOffTopRight.tga

TGAbtnOvrOnBottom.tga

TGAbtnOvrOnBottomLeft.tga

TGAbtnOvrOnBottomRight.tga

TGAbtnOvrOnLeft.tga

TGAbtnOvrOnRight.tga

TGAbtnOvrOnTop.tga

TGAbtnOvrOnTopLeft.tga

TGAbtnOvrOnTopRight.tga

TGAbtnSelBottom.tga

TGAbtnSelBottomLeft.tga

TGAbtnSelBottomRight.tga

TGAbtnSelLeft.tga

TGAbtnSelRight.tga

TGAbtnSelTop.tga

TGAbtnSelTopLeft.tga

TGAbtnSelTopRight.tga

TGAbtnStdBottom.tga

TGAbtnStdBottomLeft.tga

TGAbtnStdBottomRight.tga

TGAbtnStdLeft.tga

TGAbtnStdRight.tga

TGAbtnStdTop.tga

TGAbtnStdTopLeft.tga

TGAbtnStdTopRight.tga

TGAchkaeldis_sm.tga

TGAchkIndeterminate.tga

TGAchkIndeterminate@2x.tga

TGAchkSelDis.tga

TGAchkSelDis@2x.tga

TGAchkSelDown.tga

TGAchkseldown_sm.tga

TGAchkSelFocus.tga

TGAchkSelFocus@2x.tga

TGAchkselfocus_sm.tga

TGAchkSelStd.tga

TGAchkselstd_sm.tga

TGAchkSomeSelStd.tga

TGAchkUnselDis.tga

TGAchkUnselDis@2x.tga

TGAchkunseldis_sm.tga

TGAchkUnselFocus.tga

TGAchkUnselFocus@2x.tga

TGAchkunselfocus_sm.tga

TGAchkUnselStd.tga

TGAchkUnselStd@2x.tga

TGAchkunselstd_sm.tga

TGAchk_menu_item.tga

TGAchk_menu_item@2x.tga

TGAclienttexture2.tga

TGAclienttexture2b.tga

TGAclienttexture3.tga

TGAclienttexture4.tga

TGAclienttexture8.tga

TGAcloud_cloudfiles.tga

TGAcloud_icon_down.tga

TGAcloud_icon_up.tga

TGAcloud_localfiles.tga

TGAcloud_uhoh.tga

IMGcontroller_dialog.png

IMGcontroller_dialog.png-preview.png

DLLcrashhandler64.dll

Structure

P7B[Authenticode]_2eafb32a.p7b

BINResources

BINRT_VERSION

BINID:0001

BINID:0

EXEcrashhandler64.dll.old

Structure

P7B[Authenticode]_beda950a.p7b

BINResources

BINSCID

BINID:0000

BINID:0

BINRT_VERSION

BINID:0001

BINID:0

BINID:1033

TGAcreditcard_back.tga

TGAcreditcard_back_amex.tga

DLLCSERHelper.dll

Structure

P7B[Authenticode]_3708fed5.p7b

BINResources

BINRT_DIALOG

BINID:0065

BINID:1033

BINID:07D0

BINID:1033

BINID:07D1

BINID:1033

BINRT_STRING

BINID:003F

BINID:1033

BINRT_VERSION

BINID:0001

BINID:1033

DLLd3dcompiler_46.dll

Structure

P7B[Authenticode]_dc13ae80.p7b

BINResources

BINRT_VERSION

BINID:0001

BINID:1033

DLLd3dcompiler_46_64.dll

Structure

P7B[Authenticode]_2cf1392d.p7b

BINResources

BINRT_VERSION

BINID:0001

BINID:1033

DLLdav1d.dll

Structure

P7B[Authenticode]_03a6458a.p7b

BINResources

BINRT_MANIFEST

BINID:0002

BINID:1033

TGAdownloads_bg.tga

IMGdriver_dialog.png

IMGdriver_dialog.png-preview.png

TGAdropdown_ingame.tga

TGAdropdown_offline.tga

TGAdropdown_online.tga

TGAemailreminder_close.tga

TGAemailreminder_close_hover.tga

TGAfacebookLogo12.tga

TGAfacebookLogo140.tga

TGAfind_icon_down.tga

TGAfind_icon_down_hover.tga

TGAfind_icon_up.tga

TGAfind_icon_up_hover.tga

TGAflag_bottom.tga

TGAflag_bottom_hover.tga

TGAflag_fill_hover.tga

TGAflag_inactive_bottom.tga

TGAflag_inactive_bottom_hover.tga

TGAflag_inactive_left.tga

TGAflag_inactive_left_hover.tga

TGAflag_inactive_right.tga

TGAflag_inactive_right_hover.tga

TGAflag_inactive_top.tga

TGAflag_inactive_top_hover.tga

TGAflag_left.tga

TGAflag_left_hover.tga

TGAflag_right.tga

TGAflag_right_hover.tga

TGAflag_top.tga

TGAflag_top_hover.tga

JSONfossilize_engine_filters.json

TGAFriendsListSlantBG.tga

TGAfriendslist_header2.tga

TGAFriendsPanelLeftBG.tga

TGAFriendsPanelLeftBG_Down.tga

TGAFriendsPanelLeftBG_Over.tga

TGAFriendsPanelRightBG.tga

TGAfriends_icon.tga

DLLGameOverlayRenderer.dll

Structure

P7B[Authenticode]_8e7827aa.p7b

BINResources

BINRT_VERSION

BINID:0001

BINID:0

DLLGameOverlayRenderer64.dll

Structure

P7B[Authenticode]_32de7fab.p7b

BINResources

BINSCID

BINID:0000

BINID:0

BINRT_CURSOR

BINID:0001

BINID:0

BINID:0002

BINID:0

BINID:0003

BINID:0

BINID:0004

BINID:0

BINID:0005

BINID:0

BINID:0006

BINID:0

BINID:0007

BINID:0

BINID:0008

BINID:0

BINID:0009

BINID:0

BINID:000A

BINID:0

BINID:000B

BINID:0

BINID:000C

BINID:0

BINID:000D

BINID:0

BINID:000E

BINID:0

BINID:000F

BINID:0

BINID:0010

BINID:0

BINID:0011

BINID:0

BINRT_GROUP_CURSOR2

BINID:261D

BINID:0

BINID:261E

BINID:0

BINID:261F

BINID:0

BINID:2620

BINID:0

BINID:2621

BINID:0

BINID:2622

BINID:0

BINID:2623

BINID:0

BINID:2624

BINID:0

BINID:2625

BINID:0

BINID:2626

BINID:0

BINID:2627

BINID:0

BINID:2628

BINID:0

BINID:2629

BINID:0

BINID:262A

BINID:0

BINID:262B

BINID:0

BINID:262C

BINID:0

BINID:262D

BINID:0

BINRT_VERSION

BINID:0001

BINID:0

BINID:1033

EXEgameoverlayui.exe

Structure

P7B[Authenticode]_e0e6c796.p7b

BINResources

BINSCID

BINID:0000

BINID:0

BINRT_ICON

BINID:0001

BINID:1033

BINID:0002

BINID:1033

BINID:0003

BINID:1033

BINID:0004

BINID:1033

BINID:0005

BINID:1033

BINID:0006

BINID:1033

BINID:0007

BINID:1033

BINID:0008

BINID:1033

BINID:0009

BINID:1033

BINRT_GROUP_CURSOR4

BINID:0065

BINID:1033

BINRT_VERSION

BINID:0001

BINID:0

BINID:1033

TGAgift_wizard_friends.tga

TGAgift_wizard_heart.tga

TGAglow_friendslist.tga

TGAgridview_mask.tga

TGAgrid_btm_focus2.tga

TGAgrid_top_focus2.tga

TGAhtml_lock.tga

TGAhtml_lock_broken.tga

TGAicon_addFriend.tga

TGAicon_addgame.tga

TGAicon_addgame@2x.tga

TGAicon_addgame_over.tga

TGAicon_addgame_over@2x.tga

TGAicon_button_back.tga

TGAicon_button_back@2x.tga

TGAicon_button_back_disabled.tga

TGAicon_button_back_disabled@2x.tga

TGAicon_button_back_down.tga

TGAicon_button_back_down@2x.tga

TGAicon_button_detail.tga

TGAicon_button_detail_disabled.tga

TGAicon_button_detail_down.tga

TGAicon_button_detail_over.tga

TGAicon_button_forward.tga

TGAicon_button_forward@2x.tga

TGAicon_button_forward_disabled.tga

TGAicon_button_forward_disabled@2x.tga

TGAicon_button_forward_down.tga

TGAicon_button_forward_down@2x.tga

TGAicon_button_friends.tga

TGAicon_button_friends_mousedown.tga

TGAicon_button_friends_mouseover.tga

TGAicon_button_fullscreen.tga

TGAicon_button_fullscreen@2x.tga

TGAicon_button_fullscreen_disabled.tga

TGAicon_button_fullscreen_disabled@2x.tga

TGAicon_button_fullscreen_down.tga

TGAicon_button_fullscreen_down@2x.tga

TGAicon_button_fullscreen_over.tga

TGAicon_button_grid.tga

TGAicon_button_gridl_disabled.tga

TGAicon_button_grid_down.tga

TGAicon_button_grid_over.tga

TGAicon_button_home.tga

TGAicon_button_home_down.tga

TGAicon_button_list.tga

TGAicon_button_list_disabled.tga

TGAicon_button_list_down.tga

TGAicon_button_list_over.tga

TGAicon_button_news.tga

TGAicon_button_news_mousedown.tga

TGAicon_button_news_mouseover.tga

TGAicon_button_reload.tga

TGAicon_button_reload@2x.tga

TGAicon_button_reload_disabled@2x.tga

TGAicon_button_reload_down.tga

TGAicon_button_reload_down@2x.tga

TGAicon_button_search.tga

TGAicon_button_search@2x.tga

TGAicon_button_search_disabled.tga

TGAicon_button_search_disabled@2x.tga

TGAicon_button_search_down.tga

TGAicon_button_search_down@2x.tga

TGAicon_button_search_over.tga

TGAicon_button_servers.tga

TGAicon_button_servers_mousedown.tga

TGAicon_button_servers_mouseover.tga

TGAicon_button_settings.tga

TGAicon_button_settings_mousedown.tga

TGAicon_button_settings_mouseover.tga

TGAicon_button_stop.tga

TGAicon_button_stop@2x.tga

TGAicon_button_stop_disabled.tga

TGAicon_button_stop_disabled@2x.tga

TGAicon_button_stop_down.tga

TGAicon_button_stop_down@2x.tga

TGAicon_button_support.tga

TGAicon_button_support_mousedown.tga

TGAicon_button_support_mouseover.tga

TGAicon_buy.tga

TGAicon_buy@2x.tga

TGAicon_buy_down.tga

TGAicon_buy_hover.tga

TGAicon_click_for_details.tga

TGAicon_close.tga

TGAicon_close_hover.tga

TGAicon_collapse.tga

TGAicon_collapse_friends.tga

TGAicon_collapse_osx.tga

TGAicon_collapse_over.tga

TGAicon_collapse_over_osx.tga

TGAicon_controller_bpm.tga

TGAicon_controller_bpm@2x.tga

TGAicon_controller_bpm_disabled.tga

TGAicon_controller_bpm_disabled@2x.tga

TGAicon_controller_bpm_down.tga

TGAicon_controller_bpm_down@2x.tga

TGAicon_details.tga

TGAicon_details_hover.tga

TGAicon_disk_activity_busy.tga

TGAicon_disk_activity_idle.tga

TGAicon_download.tga

TGAicon_download_hover.tga

TGAicon_down_default.tga

TGAicon_down_default@2x.tga

TGAicon_down_focus.tga

TGAicon_down_focus@2x.tga

TGAicon_down_hover.tga

TGAicon_down_hover@2x.tga

TGAicon_dropdown.tga

IMGicon_emoticon.png

IMGicon_emoticon.png-preview.png

IMGicon_emoticon@2x.png

IMGicon_emoticon@2x.png-preview.png

IMGicon_emoticon_hover.png

IMGicon_emoticon_hover.png-preview.png

IMGicon_emoticon_hover@2x.png

IMGicon_emoticon_hover@2x.png-preview.png

TGAicon_expand.tga

TGAicon_expand_friends.tga

TGAicon_expand_osx.tga

TGAicon_expand_over.tga

TGAicon_expand_over_osx.tga

TGAicon_friendslist.tga

TGAicon_friendslist@2x.tga

TGAicon_friendslist_over.tga

TGAicon_friendslist_over@2x.tga

TGAicon_info_sm.tga

TGAicon_install.tga

TGAicon_install@2x.tga

TGAicon_install_down.tga

TGAicon_install_hover.tga

TGAicon_left_default.tga

TGAicon_left_default@2x.tga

TGAicon_left_hover.tga

TGAicon_left_hover@2x.tga

TGAicon_meterOff.tga

TGAicon_meterOn.tga

TGAicon_moderatorstar.tga

TGAicon_officerStar.tga

TGAicon_pause.tga

TGAicon_pause_hover.tga

TGAicon_play.tga

TGAicon_play@2x.tga

TGAicon_play_down.tga

TGAicon_play_hover.tga

TGAicon_right_default.tga

TGAicon_right_default@2x.tga

TGAicon_right_hover.tga

TGAicon_right_hover@2x.tga

TGAicon_scroll_handle.tga

TGAicon_scroll_handle_horiz.tga

TGAicon_scroll_handle_over.tga

TGAicon_scroll_handle_over_horiz.tga

TGAicon_security_fair.tga

TGAicon_security_good.tga

TGAicon_security_junk.tga

TGAicon_security_key.tga

TGAicon_security_locked.tga

TGAicon_security_poor.tga

TGAicon_security_steam.tga

TGAicon_security_unknown.tga

TGAicon_security_unlocked.tga

IMGicon_status_bigpic.png

IMGicon_status_bigpic.png-preview.png

IMGicon_status_bigpic_ingame.png

IMGicon_status_bigpic_ingame.png-preview.png

IMGicon_status_mobile.png

IMGicon_status_mobile.png-preview.png

IMGicon_status_mobile_ingame.png

IMGicon_status_mobile_ingame.png-preview.png

IMGicon_status_vr.png

IMGicon_status_vr.png-preview.png

IMGicon_status_vr_ingame.png

IMGicon_status_vr_ingame.png-preview.png

IMGicon_status_web.png

IMGicon_status_web.png-preview.png

IMGicon_status_web_ingame.png

IMGicon_status_web_ingame.png-preview.png

TGAicon_toast_gift.tga

TGAicon_toast_item.tga

TGAicon_toast_newturns.tga

TGAicon_topofqueue.tga

TGAicon_topofqueue_hover.tga

TGAicon_up_default.tga

TGAicon_up_default@2x.tga

TGAicon_up_hover.tga

TGAicon_up_hover@2x.tga

TGAicon_vr.tga

TGAicon_vr@2x.tga

TGAicon_vr_disabled.tga

TGAicon_vr_disabled@2x.tga

TGAicon_vr_down.tga

TGAicon_vr_down@2x.tga

TGAicon_vr_happy.tga

TGAicon_vr_happy@2x.tga

TGAicon_vr_happy_down.tga

TGAicon_vr_happy_down@2x.tga

TGAicon_vr_online.tga

TGAicon_workshop.tga

TGAicon_workshop_hover.tga

TGAinbox_async_game.tga

TGAinbox_comment.tga

TGAinbox_gift.tga

TGAinbox_invite.tga

TGAinbox_item.tga

TGAinbox_moderatormessage.tga

TGAinbox_notification.tga

TGAinbox_notification@2x.tga

TGAinbox_notification_disabled.tga

TGAinbox_notification_disabled@2x.tga

TGAinbox_notification_inactive.tga

TGAinbox_notification_inactive@2x.tga

TGAinbox_notification_inactive_disabled.tga

TGAinbox_notification_inactive_disabled@2x.tga

TGAinbox_offlinemessage.tga

TGAinbox_trade.tga

TGAkeybg.tga

TGAlogo4.tga

TGAlogo6.tga

TGAlogo6@2x.tga

TGAlogo7.tga

TGAloop_1.tga

TGAloop_2.tga

TGAloop_3.tga

TGAloop_4.tga

TGAloop_5.tga

TGAloop_6.tga

TGAloop_7.tga

TGAloop_8.tga

IMGmega_btn_off.png

IMGmega_btn_off.png-preview.png

IMGmega_btn_on.png

IMGmega_btn_on.png-preview.png

TGAminithrobber01.tga

TGAminithrobber02.tga

TGAminithrobber03.tga

TGAminithrobber04.tga

TGAminithrobber05.tga

TGAminithrobber06.tga

TGAminithrobber07.tga

TGAminithrobber08.tga

TGAminithrobber09.tga

TGAminithrobber10.tga

TGAminithrobber11.tga

TGAminithrobber12.tga

TGAminithrobberinactive.tga

TGAmini_expand.tga

TGAmini_expand_mouseover.tga

TGAmini_shrink.tga

TGAmini_shrink_mouseover.tga

TGAmnuSepCenter.tga

TGAmnuSepLeft.tga

TGAmnuSepRight.tga

TGAnav2_highlight_selected.tga

TGAnav_highlight_selected.tga

TGAnew_tab.tga

TGAosx_close_def.tga

TGAosx_close_def@2x.tga

TGAosx_close_def_new.tga

TGAosx_close_def_new@2x.tga

TGAosx_close_down.tga

TGAosx_close_down@2x.tga

TGAosx_close_down_new.tga

TGAosx_close_down_new@2x.tga

TGAosx_close_hov.tga

TGAosx_close_hov@2x.tga

TGAosx_close_hov_new.tga

TGAosx_close_hov_new@2x.tga

TGAosx_max_def.tga

TGAosx_max_def@2x.tga

TGAosx_max_def_new.tga

TGAosx_max_def_new@2x.tga

TGAosx_max_down.tga

TGAosx_max_down@2x.tga

TGAosx_max_down_new.tga

TGAosx_max_down_new@2x.tga

TGAosx_max_hov.tga

TGAosx_max_hov@2x.tga

TGAosx_max_hov_new.tga

TGAosx_max_hov_new@2x.tga

TGAosx_min_def.tga

TGAosx_min_def@2x.tga

TGAosx_min_def_new.tga

TGAosx_min_def_new@2x.tga

TGAosx_min_down.tga

TGAosx_min_down@2x.tga

TGAosx_min_down_new.tga

TGAosx_min_down_new@2x.tga

TGAosx_min_hov.tga

TGAosx_min_hov@2x.tga

TGAosx_min_hov_new.tga

TGAosx_min_hov_new@2x.tga

TGAosx_win_dis.tga

TGAosx_win_dis@2x.tga

TGAosx_win_dis_new.tga

TGAosx_win_dis_new@2x.tga

TGAosx_win_dis_new_dark.tga

TGAosx_win_dis_new_dark@2x.tga

TGAradSelDis.tga

TGAradSelDis@2x.tga

TGAradSelDown.tga

TGAradSelDown@2x.tga

TGAradSelFocus.tga

TGAradSelStd.tga

TGAradSelStd@2x.tga

TGAradUnselDis.tga

TGAradUnselDis@2x.tga

TGAradUnselFocus.tga

TGAradUnselFocus@2x.tga

TGAradUnselStd.tga

TGAradUnselStd@2x.tga

TGArampDown_1.tga

TGArampDown_2.tga

TGArampDown_3.tga

TGArampDown_4.tga

TGArampUp_1.tga

TGAremoteplaytogether_notification.tga

TGAresizer.tga

TGAresizer_over.tga

TGAscrBottom.tga

TGAscrBottomLeft.tga

TGAscrBottomRight.tga

TGAscrEnds.tga

TGAscrLeft.tga

TGAscrRight.tga

TGAscrTop.tga

TGAscrTopLeft.tga

TGAscrTopRight.tga

TGAshadowBottom.tga

TGAshadowslantTop.tga

TGAshadowTop.tga

TGAsimBottom.tga

TGAstreaming_intro.tga

TGAstreaming_shortcut_16.tga

TGAstreaming_shortcut_32.tga

TGAstream_disconnect_notification.tga

TGAstream_notification.tga

TGAsupport_flag_bottom.tga

TGAsupport_flag_bottom_hover.tga

TGAsupport_flag_left.tga

TGAsupport_flag_left_hover.tga

TGAsupport_flag_right.tga

TGAsupport_flag_right_hover.tga

TGAsupport_flag_top.tga

TGAsupport_flag_top_hover.tga

TGAtabSquareBottomLeft.tga

TGAtabSquareBottomRight.tga

TGAtabSquareTopLeft.tga

TGAtabSquareTopRight.tga

TGAtabStdBottom.tga

TGAtabStdBottomLeft.tga

TGAtabStdBottomRight.tga

TGAtabStdTopLeft.tga

TGAtabStdTopRight.tga

TGAtextentry_focus.tga

TGAtiny_x_default.tga

TGAtiny_x_hover.tga

TGAupdatenew_notification.tga

TGAupdatenew_notification@2x.tga

TGAupdatenone_notification.tga

TGAupdatenone_notification@2x.tga

IMGvrwarning_dialog.png

IMGvrwarning_dialog.png-preview.png

TGAwin32_win_close.tga

TGAwin32_win_close@2x.tga

TGAwin32_win_close_disabled.tga

TGAwin32_win_close_disabled@2x.tga

TGAwin32_win_close_hover.tga

TGAwin32_win_close_hover@2x.tga

TGAwin32_win_max.tga

TGAwin32_win_max@2x.tga

TGAwin32_win_max_hover.tga

TGAwin32_win_max_hover@2x.tga

TGAwin32_win_min.tga

TGAwin32_win_min@2x.tga

TGAwin32_win_min_hover.tga

TGAwin32_win_min_hover@2x.tga

TGAwin32_win_restore.tga

TGAwin32_win_restore@2x.tga

TGAwin32_win_restore_hover.tga

CABwin32_win_restore_hover@2x.tga

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

12 / 12

Path arc:zip>pe:dll>pe:rsrc>pe:dll>pe:rsrc>img

Shape arc:zip>pe:dll>pe:rsrc>pe:dll>pe:rsrc>img

malicious 6 nodes

Path arc:zip>pe:dll>pe:rsrc>pe:dll>pe:rsrc>bin

Shape arc:zip>pe:dll>pe:rsrc>pe:dll>pe:rsrc>bin

malicious 6 nodes

2 malicious · 824 files

ZIPe7d81827c98525ec15ed458d001d493dCVE-2019-9674

BINlogs

DLLLocationFrameworkPS.dll

DLLpython37.dll

Structure

BINOverlay_5b68adec.bin

BINResources

EXESetup.exe

DLLvcruntime140.dll

BINfriends

BINgraphics

No malware configuration was found at this point.