a68b8a432f8876ea6ed7a3b1d58172cf43938955a06101626d8b0a88cdca1604

Summary

Architecture IMAGE_FILE_MACHINE_I386
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2025-Aug-05 14:01:11
Comments Motus Software
CompanyName
FileDescription Pivot Animator
FileVersion 5.0.0.111
InternalName pivotstick.exe
LegalCopyright Copyright Pіvotstick
LegalTrademarks
OriginalFilename pivotstick.exe
ProductName Pіvotstick
ProductVersion 5.0.0.111
Assembly Version 5.0.0.111

Plugin Output

Info Matching compiler(s): Microsoft Visual C# v7.0 / Basic .NET
Info Cryptographic algorithms detected in the binary: Uses constants related to MD5
Info The PE is digitally signed. Signer: Motusoft Gmbh
Issuer: DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1
Malicious VirusTotal score: 19/70 (Scanned on 2026-09-18 07:22:24) AhnLab-V3: Malware/Win.Generic.C5701379
Antiy-AVL: Trojan[PSW]/MSIL.StealerC
CTX: exe.trojan.bundleinstaller
CrowdStrike: win/grayware_confidence_90% (D)
Cylance: Unsafe
DeepInstinct: MALICIOUS
Fortinet: PossibleThreat
Gridinsoft: Adware.Win32.BundleInstaller.oa!s1
Lionic: Trojan.Win32.BundleInstaller.4!c
Malwarebytes: PUP.Optional.BundleInstaller
MaxSecure: Trojan.Malware.8328611.susgen
Microsoft: PUABundler:Win32/PivotAnimator_BundleInstaller
Paloalto: generic.ml
Rising: Trojan.Agent!8.B1E (TFE:D:5VRopiwcDL)
SentinelOne: Static AI - Suspicious PE
Sophos: Generic Reputation PUA (PUA)
TrellixENS: Artemis!6A76D9EAC8C6
VBA32: TScope.Trojan.MSIL
ViRobot: Trojan.Win.Z.Stealerc.1062952

Hashes

MD5 6a76d9eac8c681e844107a4606b2f075 🔍
SHA1 78496265bd146e561a974bfa891986cf01f52812 🔍
SHA256 a68b8a432f8876ea6ed7a3b1d58172cf43938955a06101626d8b0a88cdca1604 🔍
SHA3 3f27f22973b5477b442bab985fe1aceed81278acee67346fbe156f8909f3636d 🔍
SSDeep 12288:zBd7ACQdtqJFFXbrz5ZGGcMEB2iERAeTtw3ADygvLooFLSvQtm6RAsu1nea0yj90:KEFtfaGcABDq3ADygvLooZm/R1ea5p0 🔍
Imports Hash f34d5f2d4577ed6d9ceec516c1f5a744 🔍

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x80

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_I386
NumberofSections 3
TimeDateStamp 2025-Aug-05 14:01:11
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xe0
Characteristics IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED

Image Optional Header

Magic PE32
LinkerVersion 8.0
SizeOfCode 0xf1c00
SizeOfInitializedData 0xf200
SizeOfUninitializedData 0
AddressOfEntryPoint 0x000F3A0E (Section: .text)
BaseOfCode 0x2000
BaseOfData 0xf4000
ImageBase 0x400000
SectionAlignment 0x2000
FileAlignment 0x200
OperatingSystemVersion 4.0
ImageVersion 0.0
SubsystemVersion 4.0
Win32VersionValue 0
SizeOfImage 0x106000
SizeOfHeaders 0x200
Checksum 0x106500
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 15

.text

MD5 57b9b04523f53575063bd93a453f7a49 🔍
SHA1 a1c45000d94f567a78cdad48b14784c8cfdf7641 🔍
SHA256 00b176a5c77f8db2885a177420ea7728310614821da2daa0276739f7ec250862 🔍
SHA3 142e11788a0e4d4e2f1f9d53712f319a52cd3da7222247da036dd5ee442078ca 🔍
VirtualSize 0xf1a14
VirtualAddress 0x2000
SizeOfRawData 0xf1c00
PointerToRawData 0x200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.64239

.rsrc

MD5 cdd8aebaf3217f97b9368a6f8a0552e2 🔍
SHA1 a8079dfe99bd5066963fcbcc6d5e5d2ce7b09413 🔍
SHA256 ddb796780fc4efec7103d18fe019c92e6e7960643b96b764f2422782e029b794 🔍
SHA3 325687932684cf9e859ae4b759378e6e0c362cba4d5003023ded40d50fff982d 🔍
VirtualSize 0xee20
VirtualAddress 0xf4000
SizeOfRawData 0xf000
PointerToRawData 0xf1e00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 7.05044

.reloc

MD5 df88a318315ed83a5debd6e3da92845d 🔍
SHA1 1fbe658f3469ef3e373e906f1e4bab01606518bb 🔍
SHA256 455df70c1f081d6389cd1de1e3192423bc673acae152f5d7c8ff78b74ecdf4af 🔍
SHA3 26935922362b68b659b82450d216bd4aa3928d9ff8ab44137b1dafc00f680fe0 🔍
VirtualSize 0xc
VirtualAddress 0x104000
SizeOfRawData 0x200
PointerToRawData 0x100e00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 0.10191

Imports

mscoree.dll _CorExeMain

Delayed Imports

1

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x8cc6
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.95733
Detected Filetype PNG graphic file
MD5 af592a9f9bdaef9d084eaec7d90b3960 🔍
SHA1 2c503390ee41fdf431314f26867f91a79eaa7ec5 🔍
SHA256 96859179e39564ab258a1dcc34b80f731dce572cb0cd362aa6560ccb2d462096 🔍
SHA3 88a63cf8db720bcad01b2f570046be8ee214178c703dfe19e686c8243cb85706 🔍

2

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.8807
MD5 a91ad036df07b06dba235a030facac42 🔍
SHA1 7cdeda1f577837ba7918c3be4c156bfd092de310 🔍
SHA256 43f633497cf143368b47194296e3a8d3c07157c7f403d5d9aeb6ee30f7a5c815 🔍
SHA3 214cc1df8198c8f98933a83f761e581a8a51ef9bed108404c70a522f1ba8d6a4 🔍

3

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.43285
MD5 a7fa938a94a07fe559017a6ddb3f876e 🔍
SHA1 58a2c60d109a630e5e4e8da9455847e894e1ad1f 🔍
SHA256 da8dedb8738dd34143dd343510f4e0085f86a8c06805baa7d244e3179f6fb271 🔍
SHA3 a76e83dea265d9199e9f3b63fea1b3c9f65f24c26eef57b8ce73f20ede0d1876 🔍

4

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.8807
MD5 a91ad036df07b06dba235a030facac42 🔍
SHA1 7cdeda1f577837ba7918c3be4c156bfd092de310 🔍
SHA256 43f633497cf143368b47194296e3a8d3c07157c7f403d5d9aeb6ee30f7a5c815 🔍
SHA3 214cc1df8198c8f98933a83f761e581a8a51ef9bed108404c70a522f1ba8d6a4 🔍

32512

Type RT_GROUP_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x3e
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.48261
Detected Filetype Icon file
MD5 8b3732d1a5a454fe08cd403a0b359135 🔍
SHA1 f2db16fbb434f1ab6d0600465db311467bc032aa 🔍
SHA256 e2197715fbb148b106a60452d96df8858e22e747e1140afd7aa96511c039fb65 🔍
SHA3 c2265aa447cbd864396902d01fc256541e0a28d0ed97a4027118d30ac0826034 🔍

1 (#2)

Type RT_VERSION
Language UNKNOWN
Codepage UNKNOWN
Size 0x364
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.32483
MD5 fddba4e50b46ae9a9b4e7f072be51148 🔍
SHA1 3438e64719d428700ab48e3d8498c891890eb5fb 🔍
SHA256 823efdbf518e557272052a126905dc88db20f7534d1c3c807b0cefb4604cc799 🔍
SHA3 58f7dc786a379cea2247d72793434253cdafabfbaad245abbc47ec8205086f74 🔍

1 (#3)

Type RT_MANIFEST
Language UNKNOWN
Codepage UNKNOWN
Size 0xc3c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.99436
MD5 41a7d53feb93505106474352e743884f 🔍
SHA1 ae969d307aa47961e2c22493103a6eacb04114c2 🔍
SHA256 bf4346cb7df6529ac9eb52784a397769b0835c4982ac43049512f99039e52fa2 🔍
SHA3 dbbed7b4c1bb04ef286dd8417f5998947a5bf6faab93256f5747e2427fd2c3b2 🔍

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 5.0.0.111
ProductVersion 5.0.0.111
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType VFT_APP
Language UNKNOWN
Comments Motus Software
CompanyName
FileDescription Pivot Animator
FileVersion (#2) 5.0.0.111
InternalName pivotstick.exe
LegalCopyright Copyright Pіvotstick
LegalTrademarks
OriginalFilename pivotstick.exe
ProductName Pіvotstick
ProductVersion (#2) 5.0.0.111
Assembly Version 5.0.0.111
Resource LangID UNKNOWN

TLS Callbacks

Load Configuration

RICH Header

Errors

Leave a comment
🏦 New Message from Coinbase. OPEN ⚡→ graph.org/YOU-HAVE-A-NEW-BI 8 hours ago
🏦 New Message from Coinbase. OPEN ⚡→ graph.org/YOU-HAVE-A-NEW-BITCOIN-TRANSFER-FROM-COINBASE-08-27?hs=3b6240a47a0eacda4220bc28a5f046d8& @UD3137 🏦