Open-source atomic malware analysis

Analyze another

Snowflake.CortexCode

PE
Verdict: BENIGN
Mal-ecule
H₆(Db₂F₂Mg₂Os₆Po₆U)Md₄(Bi₆PaSi₂)
Size 189.6 MB download
First seen 3 days ago
Analyzed 1 day ago
Ecosystem windows
Cortex-Code-win32-arm64-user-setup.exe pe
0xcd54 8d45f8ba02000000e83bc1ffff58ffe0 .E.......;...X..
0xcd64 e9ebb6ffffebe95e5b8be55dc3000000 .......^[..]....
0xcd74 53006f00660074007700610072006500 S.o.f.t.w.a.r.e.
0xcd84 5c0045006d0062006100720063006100 \.E.m.b.a.r.c.a.
0xcd94 6400650072006f005c004c006f006300 d.e.r.o.\.L.o.c.
0xcda4 61006c00650073000000000053006f00 a.l.e.s.....S.o.
0xcdb4 6600740077006100720065005c004300 f.t.w.a.r.e.\.C.
0xcdc4 6f006400650047006500610072005c00 o.d.e.G.e.a.r.\.
0xcdd4 4c006f00630061006c00650073000000 L.o.c.a.l.e.s...
0xcde4 53006f00660074007700610072006500 S.o.f.t.w.a.r.e.
0xcdf4 5c0042006f0072006c0061006e006400 \.B.o.r.l.a.n.d.
0xce04 5c004c006f00630061006c0065007300 \.L.o.c.a.l.e.s.
0xce14 0000000053006f006600740077006100 ....S.o.f.t.w.a.
0xce24 720065005c0042006f0072006c006100 r.e.\.B.o.r.l.a.
0xce34 6e0064005c00440065006c0070006800 n.d.\.D.e.l.p.h.
0xce44 69005c004c006f00630061006c006500 i.\.L.o.c.a.l.e.
0xce54 7300000000000000 s.......
0x1cb00 c6e81afeffff598bd88bc35f5e5b8be5 ......Y...._^[..
0x1cb10 5dc38bc0558bec83c4f05356578bf08d ]...U.....SVW...
0x1cb20 7df0a5a5a5a58bda8bc3e80dc3feff66 }..............f
0x1cb30 837df0017422a128c54a008338007411 .}..t".(.J..8.t.
0x1cb40 8b3528c54a008b368d55f08bc3ffd6eb .5(.J..6.U......
0x1cb50 07b010e84c99feff5f5e5b8be55dc390 ....L..._^[..]..
0x1cb60 558bec81c410ffffff53565733db899d U........SVW3...
0x1cb70 10ffffff899d14ffffff899d18ffffff ................
0x1cb80 899d1cffffff899d20ffffff899d24ff ........ .....$.
0x1cb90 ffff895de4894dd88955dc8945e033c0 ...]..M..U..E.3.
0x1cba0 5568afe1410064ff306489208b45e085 Uh..A.d.0d. .E..
0x1cbb0 c074078b45d885c0750733dbe9c60900 .t..E...u.3.....
0x1cbc0 0083cfff8b450c408945d0 .....E.@.E.
0x37ba8 0002003600f8fb4400074861734e616d ...6...D..HasNam
0x37bb8 6503000010400008000208f08a430000 e....@.......C..
0x37bc8 000453656c66020002b8124000010005 ..Self.....@....
0x37bd8 414e616d65020002003500bcfb44000a AName....5...D..
0x37be8 4765744d6574686f6473030034d14300 GetMethods..4.C.
0x37bf8 08000208f08a430000000453656c6602 ......C....Self.
0x37c08 004034d1430001000101020002003400 .@4.C.........4.
0x37c18 c4fa4400094765744669656c64730300 ..D..GetFields..
0x37c28 78d1430008000208f08a430000000453 x.C.......C....S
0x37c38 656c6602004078d14300010001010200 elf..@x.C.......
0x37c48 020038002cfc44000d47657450726f70 ..8.,.D..GetProp
0x37c58 6572746965730300bcd1430008000208 erties....C.....
0x37c68 f08a430000000453656c66020040bcd1 ..C....Self..@..
0x37c78 430001000101020002003f00f4fa4400 C.........?...D.
0x37c88 14476574496e646578656450726f7065 .GetIndexedPrope
0x37c98 7274696573030000d2430008000208f0 rties....C......
0x37ca8 8a430000000453656c6602004000d243 .C....Self..@..C
0x37cb8 000100010102000200380094fb440009 .........8...D..
0x37cc8 4765744d6574686f6403000cab430008 GetMethod....C..
0x37cd8 000208f08a430000000453656c660200 .....C....Self..
0x37ce8 02b8124000010005414e616d65020002 ...@....AName...
0x37cf8 004400a0fb44000a4765744d6574686f .D...D..GetMetho
0x37d08 6473030034d1430008000308f08a4300 ds..4.C.......C.
0x37d18 00000453656c66020002b81240000100 ...Self.....@...
0x37d28 05414e616d6502004034d14300020001 .AName..@4.C....
0x37d38 01020002003700b8fa44000847657446 .....7...D..GetF
0x37d48 69656c640300bc91 ield....
0x9b430 58ffe0e91cd0f6ffebe95b59595dc300 X.........[YY]..
0x9b440 b0040200ffffffff0300000054004d00 ............T.M.
0x9b450 50000000b0040200ffffffff04000000 P...............
0x9b460 540045004d00500000000000b0040200 T.E.M.P.........
0x9b470 ffffffff0b0000005500530045005200 ........U.S.E.R.
0x9b480 500052004f00460049004c0045000000 P.R.O.F.I.L.E...
0x9b490 538b0885c9740583e9048b093bca0f9f S....t......;...
0x9b4a0 c3e862e5f6ff8bc35bc38bc0558bec83 ..b.....[...U...
0x9b4b0 c4e053565733db895dfc895df8894df0 ..SVW3..]..]..M.
0x9b4c0 8955f48bf88b5d0833c055686bc24900 .U....].3.Uhk.I.
0x9b4d0 64ff30648920c645ef0033c08945e48d d.0d. .E..3..E..
0x9b4e0 45e4506a008d45e8506a008b45f45057 E.Pj..E.Pj..E.PW
0x9b4f0 e83f4bf7ff85c00f85510100008b45e8 .?K......Q....E.
0x9b500 3b4510 ;E.
0x9dbac 44240cc6442410008d54240c33c9b8ec D$..D$...T$.3...
0x9dbbc e74900e8d4fdffff8b4424083bc6740a .I.......D$.;.t.
0x9dbcc b806000000e8a6fcffff83c4145f5e5b ............._^[
0x9dbdc c3000000b0040200ffffffff16000000 ................
0x9dbec 4c007a006d0061004400650063006f00 L.z.m.a.D.e.c.o.
0x9dbfc 6400650020006600610069006c006500 d.e. .f.a.i.l.e.
0x9dc0c 64002000280025006400290000000000 d. .(.%.d.).....
0x9dc1c c6401100c6401000c38d400064668d80 .@...@....@.df..
0x9dc2c 0000000083ec745355568bb424840000 ......tSUV..$...
0x9dc3c 005733ff897c24248b46108b4e088944 .W3..|$$.F..N..D
0x9dc4c 242cb801000000d3e08b4e0448894424 $,........N.H.D$
0x9dc5c 54b801000000d3e0488b5e4889442458 T.......H.^H.D$X
0x9dc6c 8b06894424448b ...D$D.

Micro-behaviors

Metadata

notable severity, 100% confident.
signed Authenticode chain CN: Snowflake Inc.
notable severity, 100% confident.
strings-truncated String extraction truncated due to limits (count: 100000, total bytes: 50 MB)

file

notable severity, 86% confident.
sfx/inno-setup Inno Setup extraction failed

20 of 31 traits shown

Identity

SHA-256 33035b55edf9248a10eab17e25d399144a7222d9f36f90e52b00056e982d1dde
Filename Cortex-Code-win32-arm64-user-setup.exe
Package Snowflake.CortexCode

Origin

Source forager
Feed winget.run
Ecosystem windows
Domain snowflakecomputing.com
URL https://sfc-repo.snowflakecomputing.com/coco-desktop/downloads/1.20.0/Cortex-Code-win32-arm64-user-setup.exe

Timeline

First seen 21 Jul 2026 15:38 UTC
First analyzed 23 Jul 2026 10:55 UTC
Last analyzed 23 Jul 2026 10:55 UTC
Last updated 23 Jul 2026 10:55 UTC

Labeling

Label unknown
Label source forager
Traits version ad991