aresregular246_installer[.]exe

resource	yara_rule
static1/unpack001/MP3Source.ax	acprotect

resource	yara_rule
static1/unpack001/AsyncEx.ax	aspack_v212_v242
static1/unpack001/chatServer.exe	aspack_v212_v242
static1/unpack001/chatclient.exe	aspack_v212_v242
static1/unpack001/emoticonSelector.exe	aspack_v212_v242
static1/unpack001/libfaad2.dll	aspack_v212_v242
static1/unpack001/opus.dll	aspack_v212_v242

resource	yara_rule
static1/unpack001/MP3Source.ax	upx

resource
aresregular246_installer.exe
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/UserInfo.dll
unpack001/$PLUGINSDIR/fct.dll
unpack001/Ares.exe
unpack001/AsyncEx.ax
unpack001/MP3Source.ax
unpack002/out.upx
unpack001/Uninstall.exe
unpack003/$PLUGINSDIR/System.dll
unpack003/$PLUGINSDIR/UserInfo.dll
unpack003/$PLUGINSDIR/fct.dll
unpack001/bass.dll
unpack001/chatServer.exe
unpack001/chatclient.exe
unpack001/emoticonSelector.exe
unpack001/libfaad2.dll
unpack001/opus.dll

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2
static1/unpack001/Uninstall.exe	nsis_installer_1
static1/unpack001/Uninstall.exe	nsis_installer_2

aresregular246_installer.exe

IMPHASH 7fa974366048f9c551ef45714595665e
SHA256 54a88fdb30b8685c94637221af3e910fe1ab81200b06ffa4df3e95ae55212513
MD5 3a6b1d9483609d89671429c2630eff68
SHA1 851d05c42a5e426ab2c9419e8e13e022d8a4758d
SHA512 bf8ea9f77f5c86a9a0f565d00d78f1f1ceb065013eb19f4c9ab67dd5d657379aa25d6ffd983396b35d0a776161d02854fef764fff6ac6293280d0943ca319b6f
SSDEEP 98304:IrQ3e0JnTKq+YGCfEWuyWna0/H8YMhXEsOF4+XwliAKEGZva8hKX+:IrQ11Kq+YFf8b2bRGZva1X+
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

12538

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CompareFileTime SearchPathA GetShortPathNameA GetFullPathNameA MoveFileA SetCurrentDirectoryA GetFileAttributesA GetLastError CreateDirectoryA SetFileAttributesA Sleep GetTickCount GetFileSize GetModuleFileNameA GetCurrentProcess CopyFileA ExitProcess GetWindowsDirectoryA SetFileTime GetCommandLineA SetErrorMode LoadLibraryA lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread CreateProcessA RemoveDirectoryA CreateFileA GetTempFileNameA lstrlenA lstrcatA GetSystemDirectoryA GetVersion CloseHandle lstrcmpiA lstrcmpA ExpandEnvironmentStringsA GlobalFree GlobalAlloc WaitForSingleObject GetExitCodeProcess GetModuleHandleA LoadLibraryExA GetProcAddress FreeLibrary MultiByteToWideChar WritePrivateProfileStringA GetPrivateProfileStringA WriteFile ReadFile MulDiv SetFilePointer FindClose FindNextFileA FindFirstFileA DeleteFileA GetTempPathA

user32

EndDialog ScreenToClient GetWindowRect EnableMenuItem GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard RegisterClassA TrackPopupMenu AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA DestroyWindow CreateDialogParamA SetTimer SetWindowTextA PostQuitMessage SetForegroundWindow wsprintfA SendMessageTimeoutA FindWindowExA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA OpenClipboard ExitWindowsEx IsWindow GetDlgItem SetWindowLongA LoadImageA GetDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint ShowWindow

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectA SetBkMode SetTextColor SelectObject

shell32

SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA SHGetSpecialFolderLocation

advapi32

RegQueryValueExA RegSetValueExA RegEnumKeyA RegEnumValueA RegOpenKeyExA RegDeleteKeyA RegDeleteValueA RegCloseKey RegCreateKeyExA

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

$PLUGINSDIR/System.dll

IMPHASH 2017f2acbdaa42ab3e4adeb8b4c37e7b
SHA256 dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
MD5 c17103ae9072a06da581dec998343fc1
SHA1 b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
SHA512 d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
SSDEEP 192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

10544

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/UserInfo.dll

IMPHASH afa8e526425f3585465337467d0b5909
SHA256 564c80dec62d76c53497c40094db360ff8a36e0dc1bda8383d0f9583138997f5
MD5 7579ade7ae1747a31960a228ce02e666
SHA1 8ec8571a296737e819dcf86353a43fcf8ec63351
SHA512 a88bc56e938374c333b0e33cb72951635b5d5a98b9cb2d6785073cbcad23bf4c0f9f69d3b7e87b46c76eb03ced9bb786844ce87656a9e3df4ca24acf43d7a05b
MD5 SHA1 SHA512

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

4762

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/fct.dll

IMPHASH ea6c66dd8fdf3fe3fb04ddbc357acc4c
SHA256 010f5e0c69b4a630b08b2551e03d8044a33350f151848dcf50953407012fab29
MD5 e3f3809f51c7982d96aaf9c090f7d176
SHA1 7494daa8000c0b31c58d94edc509232569a4606f
SHA512 3fca284e384abc95201dc73f19bd9d75413e8890e819967070b9d9991115be2a8c17e07bd1aaaffcbc770b393bf9a2af253100ac4d9efba8d21110bac97737fc
SSDEEP 48:qlQOVagyAU3gJS+Tgc43uiu7Dh/gdp/gRfykVwv+:qa33gJS+ccQuiuJE/kyku
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

5575

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/modern-header.bmp

SHA256 dba7a75ee73421ef9af25a6eb3297b12b626a16b2879d0f8b54461f77e94db8a
MD5 0ba8a43196a39b23d8dff13d9d589cef
SHA1 10f1c760214ff7dbc089de7e6833ec5cb20123e2
SHA512 803b291215dba57f2ab4084b93087b0f5d5b55c097312f17b1cdfba8ef3068be2724a671563ce3fcc9c809199c06d07a52b560985aed25b384c4a6ecfc5f2dd6
SSDEEP 96:e6djdVDhlaXo4easlDTLGABR19g1DI9CkvfFypws49X+vA2NWkRbSsCCE57ypchz:e6i+7tSAMCf6F/2YrcoBrv+
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Ares.exe

SHA256 e951b06d78eb072f70aac5625e1e63a3eba5c00715d57c13bd1d8ef3220b9712
MD5 1dc6b88dc863a092f338a08216f3811d
SHA1 d525abe3c2e20d185be67ec71ba4d44ab7ac4edf
SHA512 8c03f2d1f785f25493de45f3210b3629e2681fe31d6698e7075333d74b423492a02c252ee841be37a054a94b316b68f98d9270d66fc6e2ed53fbc5c8255167de
SSDEEP 98304:KvAtaS+UcvaDFSEeNdgCMUk9difGfygT5TG4CF3BXp:iOt+UcvAFSEIgCDGqgU3F3BX
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

2062732

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

2.0MB

Virtual Size

2.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

38KB

Virtual Size

37KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

49KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

14KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

36B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

33B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

112KB

Virtual Size

112KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1.2MB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

AsyncEx.ax

SHA256 46ce1a2667580265807eb9a7576303ecf02defb4cbb93ecc9ca5825ada267cf0
MD5 c250246a8020efc9d905e32aea98d8a4
SHA1 bd82927d03992a4d5ab390c21249ec150270984c
SHA512 fc4979d766e542293a92ec520ebeb2ca48999b28d6731faaad2297e33dff701f351d6782d7c374d3aad8e10040b240573a4a09641610384271531a36a5130991
SSDEEP 6144:fNBDDkAa1rlGC6sxTC9OCybJuyQqk6P8hZm:fLkAaV04dCwCybJu1OPw
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:4 windows x86 arch:x86

ASPack v2.12-2.42

Detects executables packed with ASPack v2.12-2.42

aspackv2
Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

479233

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

158KB

Virtual Size

380KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

DATA

Size

2KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

16KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

8KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.aspack

Size

5KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.adata

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

MP3Source.ax

SHA256 f57a5122275ddc67f56d45608fb3b1c41a25b10899bd1e46bb9f04f02f7fc424
MD5 14fda53fbef501023ac193544cfcc9d9
SHA1 dedf954a0e444022b77d085b731c7146804d78d5
SHA512 5bea4300b522e290cb0499944529921658c0d9f39fc4e2e2fa0ac31c6410b9834d430e5ce8f4afd1e20bc7cf16ec59460dcdb4bed7b770656a9bd7698c718b7f
SSDEEP 1536:nV3d1U+bcXzRh9p8KPLrzmipy7RS1dw01xk:nJHbcXzRh8KPrmh1Sbw01O
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:4 windows x86 arch:x86

ACProtect 1.3x - 1.4x DLL software

Detects file using ACProtect software.
UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

178160

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

out.upx

SHA256 9725d1d2b2f4d76131de29d2b9e0ac00c9d6e03ea9de4065dc16f37ee244f8b0
MD5 a2e13d0d8988553aef7998df81f50ed0
SHA1 078673827666c8d4716dc01968c65c251bbe416b
SHA512 a1ddcf3ad0cfd907936baf3b641c562010fbc76484fd96db12ed074a5cf43617b8885c9b4e83322410715f2c9ba0a83caf3fb5db463ee504b689dbf8702db338
SSDEEP 3072:6JWgRaY7OBGT1Z1we5Yc7CqW9gZ/wmCQHIW5EIVop9DAt6:6J6COBc1Z1RYcJWmoWPVo38
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

128432

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

121KB

Virtual Size

121KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

165B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Uninstall.exe

IMPHASH 7fa974366048f9c551ef45714595665e
SHA256 4ea0462c7395e79ef959886ded74b01cfe1299505cd2cdfa4569cbf34f3ce74f
MD5 70353a0d615013980248e7abfa451c5e
SHA1 808eebb4d57763177ddc0adf857b052247556dff
SHA512 6db0a4e000c9caa3707a4e2b78e393a02189d60e0ad2e9cdaa583dc575a3f30464f9c242740929af542a4e303f6e9f927e5807dd809871fd736cc30333d0448d
SSDEEP 3072:MgXdZt9P6D3XJaqfuBrgx4QM7cqu2MsZONr:Me343f2rg+QMITCE
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

12538

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CompareFileTime SearchPathA GetShortPathNameA GetFullPathNameA MoveFileA SetCurrentDirectoryA GetFileAttributesA GetLastError CreateDirectoryA SetFileAttributesA Sleep GetTickCount GetFileSize GetModuleFileNameA GetCurrentProcess CopyFileA ExitProcess GetWindowsDirectoryA SetFileTime GetCommandLineA SetErrorMode LoadLibraryA lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread CreateProcessA RemoveDirectoryA CreateFileA GetTempFileNameA lstrlenA lstrcatA GetSystemDirectoryA GetVersion CloseHandle lstrcmpiA lstrcmpA ExpandEnvironmentStringsA GlobalFree GlobalAlloc WaitForSingleObject GetExitCodeProcess GetModuleHandleA LoadLibraryExA GetProcAddress FreeLibrary MultiByteToWideChar WritePrivateProfileStringA GetPrivateProfileStringA WriteFile ReadFile MulDiv SetFilePointer FindClose FindNextFileA FindFirstFileA DeleteFileA GetTempPathA

user32

EndDialog ScreenToClient GetWindowRect EnableMenuItem GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard RegisterClassA TrackPopupMenu AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA DestroyWindow CreateDialogParamA SetTimer SetWindowTextA PostQuitMessage SetForegroundWindow wsprintfA SendMessageTimeoutA FindWindowExA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA OpenClipboard ExitWindowsEx IsWindow GetDlgItem SetWindowLongA LoadImageA GetDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint ShowWindow

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectA SetBkMode SetTextColor SelectObject

shell32

SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA SHGetSpecialFolderLocation

advapi32

RegQueryValueExA RegSetValueExA RegEnumKeyA RegEnumValueA RegOpenKeyExA RegDeleteKeyA RegDeleteValueA RegCloseKey RegCreateKeyExA

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

$PLUGINSDIR/System.dll

IMPHASH 2017f2acbdaa42ab3e4adeb8b4c37e7b
SHA256 dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
MD5 c17103ae9072a06da581dec998343fc1
SHA1 b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
SHA512 d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
SSDEEP 192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

10544

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/UserInfo.dll

IMPHASH afa8e526425f3585465337467d0b5909
SHA256 564c80dec62d76c53497c40094db360ff8a36e0dc1bda8383d0f9583138997f5
MD5 7579ade7ae1747a31960a228ce02e666
SHA1 8ec8571a296737e819dcf86353a43fcf8ec63351
SHA512 a88bc56e938374c333b0e33cb72951635b5d5a98b9cb2d6785073cbcad23bf4c0f9f69d3b7e87b46c76eb03ced9bb786844ce87656a9e3df4ca24acf43d7a05b
MD5 SHA1 SHA512

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

4762

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/fct.dll

IMPHASH ea6c66dd8fdf3fe3fb04ddbc357acc4c
SHA256 010f5e0c69b4a630b08b2551e03d8044a33350f151848dcf50953407012fab29
MD5 e3f3809f51c7982d96aaf9c090f7d176
SHA1 7494daa8000c0b31c58d94edc509232569a4606f
SHA512 3fca284e384abc95201dc73f19bd9d75413e8890e819967070b9d9991115be2a8c17e07bd1aaaffcbc770b393bf9a2af253100ac4d9efba8d21110bac97737fc
SSDEEP 48:qlQOVagyAU3gJS+Tgc43uiu7Dh/gdp/gRfykVwv+:qa33gJS+ccQuiuJE/kyku
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

5575

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/modern-header.bmp

SHA256 dba7a75ee73421ef9af25a6eb3297b12b626a16b2879d0f8b54461f77e94db8a
MD5 0ba8a43196a39b23d8dff13d9d589cef
SHA1 10f1c760214ff7dbc089de7e6833ec5cb20123e2
SHA512 803b291215dba57f2ab4084b93087b0f5d5b55c097312f17b1cdfba8ef3068be2724a671563ce3fcc9c809199c06d07a52b560985aed25b384c4a6ecfc5f2dd6
SSDEEP 96:e6djdVDhlaXo4easlDTLGABR19g1DI9CkvfFypws49X+vA2NWkRbSsCCE57ypchz:e6i+7tSAMCf6F/2YrcoBrv+
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bass.dll

SHA256 b4567acb45f3329ba6931c514a0df01386f6f89521cf228735111cea336685c6
MD5 38473d7a84ab44517dec3d9327764cc9
SHA1 3603232bd6b557bf6b3a8b10a8a274162b3e0d7f
SHA512 a22a534ed288d1a2abbed36028586f1ab78f649fadf05aaf81d773614e033a8b6c61855349dac0fa156e21ccfc8b9e2f199e55e9f63adca5f3506d311288bee1
SSDEEP 1536:6PZtcJMOPJkKmCyFomUDmAOLiRGQsgJix3BO5Rp9Wls9artatTNqQ6kjjrTysLRh:m+JtPJdiZft+RG/M3RpKTrQtRqBOrTyk
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

262211

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

BASS_Apply3D BASS_ChannelBytes2Seconds BASS_ChannelGet3DAttributes BASS_ChannelGet3DPosition BASS_ChannelGetAttributes BASS_ChannelGetData BASS_ChannelGetDevice BASS_ChannelGetEAXMix BASS_ChannelGetInfo BASS_ChannelGetLevel BASS_ChannelGetPosition BASS_ChannelIsActive BASS_ChannelIsSliding BASS_ChannelPause BASS_ChannelPlay BASS_ChannelPreBuf BASS_ChannelRemoveDSP BASS_ChannelRemoveFX BASS_ChannelRemoveLink BASS_ChannelRemoveSync BASS_ChannelSeconds2Bytes BASS_ChannelSet3DAttributes BASS_ChannelSet3DPosition BASS_ChannelSetAttributes BASS_ChannelSetDSP BASS_ChannelSetEAXMix BASS_ChannelSetFX BASS_ChannelSetFlags BASS_ChannelSetLink BASS_ChannelSetPosition BASS_ChannelSetSync BASS_ChannelSlideAttributes BASS_ChannelStop BASS_ErrorGetCode BASS_FXGetParameters BASS_FXSetParameters BASS_Free BASS_Get3DFactors BASS_Get3DPosition BASS_GetCPU BASS_GetConfig BASS_GetDSoundObject BASS_GetDevice BASS_GetDeviceDescription BASS_GetEAXParameters BASS_GetInfo BASS_GetVersion BASS_GetVolume BASS_Init BASS_MusicFree BASS_MusicGetAttribute BASS_MusicGetLength BASS_MusicGetName BASS_MusicLoad BASS_MusicSetAttribute BASS_Pause BASS_RecordFree BASS_RecordGetDevice BASS_RecordGetDeviceDescription BASS_RecordGetInfo BASS_RecordGetInput BASS_RecordGetInputName BASS_RecordInit BASS_RecordSetDevice BASS_RecordSetInput BASS_RecordStart BASS_SampleCreate BASS_SampleCreateDone BASS_SampleFree BASS_SampleGetChannel BASS_SampleGetInfo BASS_SampleLoad BASS_SampleSetInfo BASS_SampleStop BASS_Set3DFactors BASS_Set3DPosition BASS_SetConfig BASS_SetDevice BASS_SetEAXParameters BASS_SetVolume BASS_Start BASS_Stop BASS_StreamCreate BASS_StreamCreateFile BASS_StreamCreateFileUser BASS_StreamCreateURL BASS_StreamFree BASS_StreamGetFilePosition BASS_StreamGetLength BASS_StreamGetTags BASS_Update _

chatServer.exe

SHA256 87f7ec60dc411facd13ca4730602fdc23065ed480b58e3b31f4c22aae229f860
MD5 d0de984ee1b14ab0584def774910cf43
SHA1 82541914063b52f912f66d68aad74e07f30f6fc4
SHA512 ac214ffb6bd49914e7fd9bd65c4fca92e439aeb5e3cd352a37f6fa73f0f26ccf16c6cd4b42becd933f4d5be9d30d58fbdf33bf960cc51a6409f4bb086729978a
SSDEEP 6144:JqAXUtMSyryGDOObvsm0y03iApKktVhJUYtDubMA0efx2slSBUn2:JW8DOODg3EwVoYYb9ff0s8e2
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

ASPack v2.12-2.42

Detects executables packed with ASPack v2.12-2.42

aspackv2
Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

1220609

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

363KB

Virtual Size

968KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

DATA

Size

15KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

44KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

Virtual Size

64KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

22KB

Virtual Size

64KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.aspack

Size

21KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.adata

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

chatclient.exe

SHA256 99806ff357091926f9fff2d1ecb16d4a6f7d6ebede8d88ff36d2ce4f68bc2928
MD5 6754b9caec8ae7a1876d446d2cfa888a
SHA1 0bf881622006383ecae0be90749abce79801ca0c
SHA512 e5b8ea21ca54e14947f1f46cd8c6e4483258b01d82c76d4b5e4e4c70e92cc03c9d118b429b48101c7fa052244951f220fac3566a3c54407333dc9d47511f0648
SSDEEP 24576:FH8LJEcpKrkmk+VloqFXWyHkMfG1vTxQh9F2/:FwEFrtkcRFGYzIkF0
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

ASPack v2.12-2.42

Detects executables packed with ASPack v2.12-2.42

aspackv2
Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

5

Entry point

3158017

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

.text

Size

684KB

Virtual Size

2.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.itext

Size

3KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

21KB

Virtual Size

56KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

104KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didata

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

315KB

Virtual Size

668KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.aspack

Size

11KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.adata

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

data/Blocked.txt.sample

SHA256 9bd812f8a2a0e7594938f9843c57116f28e9e24520d27d9e2ab2fa862951f797
MD5 f17dcd63060a720e82ac55597209ab2f
SHA1 fbb49330f6789c2438ab0b95a8afcaaf74a7f19a
SHA512 66242d1ad74312dc9140faf311800bfef2f6d60970c6cca7bb47689791f3dbb453d9d8ca10123ab9733969c7a8d885e082bb63470b1782ca50d476deff18b7c7
MD5 SHA1 SHA512

NSIS installer

installer

data/Blocked_Keywords.txt

SHA256 5acc597c0529831b40bbcae28f2f34f847cdfc7a6f2c48a150fbdebb84f23f3d
MD5 c3b5469a336d911afc157dcdc557a91e
SHA1 7c1a198bd5445ffb1c370c47736c317fd7e39640
SHA512 599fa63d456865f77a005e022d0eba0b22a1c5cae3f6c501ca4e2ea74504d565e165b3430c104fcdae897c847b4a1e01e82164afe70564b2f2aafce82e37dc62
MD5 SHA1 SHA512

NSIS installer

installer

data/ChanListFilter.txt

SHA256 0632b5872997b13dba18bf5b61351055e0c7fb659015bb9c092a97128ebd539a
MD5 e7700eadad66c5745310ffae39753cbb
SHA1 a5c5285a101bb2d876600e7742d8e196e1ce5469
SHA512 c83e60335cfef83fd85b41f49e2d0deb2774aacf7c68b1f52ee2fbe4cfe3a06e8591cb5daf1bf9acc701dfcc17c084e4accda8c09f48e8b53e95ade44658ba37
MD5 SHA1 SHA512

NSIS installer

installer

data/ChatLang_en.txt

SHA256 f23ceeed89b5a842920581b60940632cc331cc6749d1e55bceabe1d399339704
MD5 cd86a74dca1f77c9827021fc77f7796f
SHA1 ffd79cc544d333f10155591d79493691788ab584
SHA512 a0b4ecdc1665d207888f1a0860c5fde5d8ae5ec8239ae67406c684e17acfc16a6623128430f39cc21e791a46f10d8a607164fe0c27c8ec1b75011959912bbff2
SSDEEP 96:g2fe+EQEV1hc3kULq4ySWFfkF8aFsX/M+TQFBordvfckZ0R/6RvYun1bzRffoq:g03kULzdjorKtRymun1bVIq
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

data/ChatLang_es.txt

SHA256 72239f83d059220de80d8cbb1996f300173df6aa45e20a014cb41dcce9c04860
MD5 cde51c81e5e8a521fe94bf05a053de8a
SHA1 1c3c14586d800e06ddcecaf99f84c2f956ad4d5a
SHA512 58c2ef8d2c729e85153d55a66276abf0719d0730eb5eb8e9cc0bf79ad4aa774ba91cc39f701590b6d85b884432fa70dbf8b6a9b59cc0dd1e0559930738bb9ea4
SSDEEP 192:RX44Ligjck44XoXjdEMh3EswVUMeKE9BZ2:RoOFXejOMhUxMX9e
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

data/ChatroomIPs.dat

SHA256 9531f3003052a95ea9d3ae678356259394e6a4c9a7eca94fc0bd3bd2492a98fc
MD5 bc6270a8a451c379944e3d26a451a112
SHA1 a7adaac4d114cb8bf0e50860787f529dde389e7a
SHA512 ddff68abdb082ce95e8f3298ce72c115e250242855bf53e9d62e50f2b9480c719a962a703b6216d7303ee720717365198c925be3c0a1c6cbe8bd170901297a56
MD5 SHA1 SHA512

NSIS installer

installer

data/DHTnodes.dat

SHA256 ed04b798abde360c8f40a24d0773d7b110df59f5d95bbf61bba3da8e29d39194
MD5 d0474401ad8c529fe9f8b0f76d0d5496
SHA1 0ef79623612a6642a455c5bda478e27ec2014a4d
SHA512 fd16e5cff807f5e4fb24cbdb2170f48bc3962909e0b0bbedeba638b7c1a140fc21dc11ab417bfbf950807263741fb040ff164e55af8e2c208749e324874514cc
MD5 SHA1 SHA512

NSIS installer

installer

data/GUI/General/buttonsbitmap.bmp

SHA256 c7cdec4cf6d4aa25e1d593bb8205bf79c097fa809248c1f5a2987b8e88d0ca79
MD5 3d6000e2487aee81e489ae18f747b317
SHA1 ba2335a8feea4b633a64098e636cf0349cbf4124
SHA512 f8100072c0e9bbf24e0b51881fcfba6676ddc644b95b2f7e0531ee26476a2737c5ad81103fa8074b0af85511409f67d4a39b3ba14c4edaee6f73a6222aa86640
MD5 SHA1 SHA512

NSIS installer

installer

data/GUI/General/chat.bmp

SHA256 600c7d6d78c71de907303cedd51f628d8cd522c383d16f0354af9aecd3fd94ce
MD5 5e408c9164a540f5a7af0394ca29dfba
SHA1 4f12aa71fea04db05eee8edb88a3a9776bddc4e8
SHA512 505397f86ca0fde938367b2b572b84b44ef66b6fb8e730e06b455ced8dc070d7cf3680f0c57ec30c64a07220798bb76787c8e564cb95ee74636693abf12738a7
SSDEEP 96:eD3/P5WWRuTRdLH11dsE0tcrSQThGBDRBvpX2QLtVO4qrzIp4UYTEa2cMxOnBZ1G:eD3c5TDIBgQJeAkO7xOFuBgC
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

data/GUI/General/emotic.bmp

SHA256 a5e9de62254040b71fb90dc5177543c5cc941232607f06087b250d207490b0a9
MD5 baf1aa2e1fbd0323281a05ee283e6327
SHA1 a653d571fbe03581a5ba984673924498c678ebc4
SHA512 542d93be47a85c0636e658ff5f89bf23c0fe40125c07e9d1f71aa42de73a7d003ac223b3410d96b7e26347500c13ba21fb9869d26b160c21f9aa47b51598e740
SSDEEP 768:ZmWJYCzEE7jl3OFoAba1bO/4oM8g2gP5qKGY:ZmWJLgwpAGSYZGY
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

data/GUI/General/libbig.bmp

SHA256 9fa10445af7dfd29b8d8241749341a97daa6c49d895b62625f960aeb682d3c8e
MD5 81a84015149b112eb7f5c5ada75d7cba
SHA1 043a1fc2d7e8af3ddd13738f771b09fab87d1c56
SHA512 bb8d3e5f91b45f59a2d386e4530f8ec421b3ca83d24b745a3158fa6c09795bcf76945db00c40bb5b154b672f9e095a16b439db04f09fc6adf3fd88798e41f4cf
SSDEEP 384:W/v/93m4PUq62Tj76vi9PmuI+PMP8HDPpuOR5PSoCybc/y9y2bE7HLSbo:CHhVJz3mV+BuOeoCH/bxSbo
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

data/GUI/General/listviewbitmap.bmp

SHA256 4c1098e3a90ee35b9e9188e13a980ba9b86ca578a4d2f480fc068c418df244ec
MD5 d200aed621fcbe17b05402ea05037773
SHA1 4d720e3cba536724935011dec19984633a26baca
SHA512 eff68f21e622dfe12fef95192678bb85e70d97de79392b871d873100229a444e0aa675d396b06218a01fc2752bb2e4ad73c31d7228182cc79a732c5fd7c97bfc
MD5 SHA1 SHA512

NSIS installer

installer

data/GUI/General/logo.bmp

SHA256 535800e78b029a0993f619720fb27037862d20acb74bb8973007c241aec7a249
MD5 822bd5627e582cbfeddd1cff03e6b8e7
SHA1 9a928d8eefaa2b66be5731aa9ad4953f6d2d4507
SHA512 417e14deba54ef08e6d65d0e2a7e7ee683ff40523d035a25e025e6c941328019d27273b447d84c7f7bb82d15771ebb338fb561892120a10a6df43d4c459af6a5
SSDEEP 768:Bco9QLNnWbuuuuuuuuuuuuuuuuu8yjxYA:+1oy
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

data/GUI/General/mainbitmap.bmp

SHA256 95095a6cead17bd07740df6791253e2e71a68574b48615acde5a47b26807815d
MD5 b7c41460b7fa0a6abe1046efd6213907
SHA1 11b4c9691bea9cf7dd0c9e8bf4896c15c74ed25b
SHA512 a537aea2af5f6edb0cbb2b3715e62b4a8cae2a70de7d65a5d2411f00506b734c33d133ad562f0599b67d53f9c7182817058643512ea6b45ee96727a2725e7ac7
SSDEEP 192:QQss5Yt7RULGuhunG+lXdLpEm/JDaoTzzx+qKWPcoSPMgSnoBAhXqgEQ+hi0LJ7B:QQxOXA+aoTzwq7co6coBV++A0NlDIte
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

data/GUI/General/mimesmall.bmp

SHA256 de856dca720196897d8a1b04f1990f6498407fedccce2b749ed2500e4883d0a9
MD5 abb7c13e3652882e159a3f557314cd91
SHA1 14b209e26fc2669e984f645dbda303009d34b865
SHA512 52c348943387ad0905a792c478774c2fed609a1f5269432b6fc2505994000de01666e6120e24f8958661371238b36382bbe7681c58ae4c36a9cca40a9334a104
SSDEEP 192:k+8aaaaJmFZoHAC5HCLvEyDxDDjeeeeibkx1mfg/M8wxXeeeeYNj+ZVIm1Nxeee2:k9mFZoDCLvuYM/3LdQ/v8
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

data/GUI/General/mplayer.bmp

SHA256 6070836d59ca38fc83b73b897ccf554b755de4395c676cfa73138de3d2b2156a
MD5 99bd4b0c351635e4937bc4859bf797b8
SHA1 d4237b2991b9dd27cb80be0190931ce2734af666
SHA512 b179645753f589cf653431b6c49316b6c9911e703fee28023eaa92e7fa08097f5a6bb6c434e12f8a1b727afd6556903f8503ef7f5a848fb594208c0613f6488f
SSDEEP 1536:TZG9mkISGiGGUbS8IrvF5FpFDvFNZFqRHq0s/1po:TZG9ZIbiGG7rt/vDtnFqRHqnS
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

data/GUI/General/mshareset.bmp

SHA256 963066b64bd5ba5034e604a1bcdc1ec9b21f013e8abfe9d3e1771e05744fbf79
MD5 2061a81b26b499d6ca6ae68d84c00889
SHA1 ef32971eb0ded12b7453f091e6dc6bfad95b4ce8
SHA512 1521eb4ab5c1bfed7e61208cfed53c12308bc3765be3b5fd52667a83977546788bfc0b3249689caf5d6f27104a3d8d25dd88fd871c5c31df53377330aed739db
SSDEEP 192:fnY9v7rP1O+ovi2WiCfMPoS4QCRxhLC1A1sMtJLQ41I:fnW7rP1O+oviZMPoS4QCaesM7QGI
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

data/GUI/General/prefs.txt

SHA256 f1bbf98095e80a8cf44c444a44a5c1deb7fc723a0bf7dea8f42894be2a19aa17
MD5 11947bd57bf47031f0db2946f0ea77f1
SHA1 9998743357b989fa96809c6e6e7b0d2a584679d5
SHA512 cf48ca4409e144c8a3c1846445a912953cc6769bf743e7131ca63b050ba4e8b5d3b12783ed6ce88d15a612eda3b63726d9840815baf0990798d89638655fc475
SSDEEP 96:VuD2GPrRC3srsqQ1wDqU65UAUvfDkUF/Vy1bHyqtR7ah8lEmwS9cEVqwhgkDGw:cD2ir3q5S4Ue1bHBaDkLKkaw
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

data/GUI/General/searchpnl.bmp

SHA256 2187a0847fc2a58ae73f27afb01bbc6ee6257dc0fcdec25b52b6d678a76da19d
MD5 7ab0a855afe37aaff73bc9ff1d5d8a95
SHA1 066b0bef5fa03862228b0cdcd1a523ec29f676b2
SHA512 0a78c4b69b1a7c395591e3abf293309ae1f45076c5a8c37b1cc063da359914ddfed750f911db1f74ccf10908b80a268bb8f966c7335f53ca83637c0009682178
SSDEEP 48:E+vX/HG+vX/H/H/XOuOnvOnv3HHvnX3v2nvOeu9:f
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

data/GUI/General/searchstars.bmp

SHA256 1b2682d690f5d5ef73dc183560b58ae8f6e04d5f065caf72d3bd4630c680acc9
MD5 7b493e2f8b2cab6d6bbf24121c32107b
SHA1 15137233b911405de83b5e0f06c5caacf763c0d7
SHA512 e182bee97378a04e440fd51c8c1632abe88f65e4c43ba1d0f8f6f5e7d9bd1f7b08524e0eb930cde7b4591ca8ab0fd26df8e07bf90cdfc028902697ea5d7e0339
SSDEEP 24:9EEkEEEMOWOWO2OWOWOWOBszszsTszszszsiE69E69E6dE69E69E69E6NoBoBoho:BttNtttqmmGmmmf11V111zNtSGmXV1N
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

data/GUI/General/smalltabsbitmap.bmp

SHA256 d2def1ce36695a044e8aab1cb3d319615f0e2014e5ace360997f3a55b7f099e6
MD5 9d34848e282c38634bcdc40f1f713ace
SHA1 ced799d0d2a3b5a331869785b432ad24e5f557ec
SHA512 460ab14bec995ff729f9ff67e95f855b5e9fab0dace754d935d1b9f4c54d2f07a2de99f5f943907dc7907c81f73303f6bab4927105a4f38e6139836928d9bf13
SSDEEP 48:47YaLsJQHldcVYLhN/h5ouZzAHG4i8u+W67ylsR9Oi+F5kA:473LsJwlqIr5CuiHrb2QQi+F+A
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

data/GUI/General/tabsBitmap.bmp

SHA256 7fa31cf54510757953e1cd288411c27921bf77942d7040fd5f58fce7fae3f42d
MD5 e22ce3e8aa84d1a6ce2fc41aecd9e5e5
SHA1 ffbfdfbcdba69775859d1c9936a523984aec3f5a
SHA512 b36a7074d34876b04c3943e014fcaf8a952a97bf067ad1cb7f3a19d50d493279528e5400208307e40c095d59da9662767c2e23ca0ed3d0dd4ce1d0fd09e5f7f4
SSDEEP 96:fblxWTuIiMWncK1FN+vS1BPrfSC+CJeuRhrnVQaVF8StuiET/1QtO:fblsv011BPrK1CYatuiEbetO
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

data/GUI/General/tabssmall.bmp

SHA256 f719e48fc9ada4ac785a343502eead9aed1ddf6b613acc52368f5f20a20e645c
MD5 7d698e55b952509d659bc55ae76bde9b
SHA1 dcd9ce7885c828cbf5e1f02b03a6f4240aeaddf6
SHA512 20bc6c59b84ff2618ac20d3298159b44f07a81c78d0dcee201ac367007e8704e329e0ce8885d97051cd7c4c591b8e19c9563fe8601b85476bf781385d2a6f814
SSDEEP 384:tKstM8dioFfJBTQLceeeeeeeeFCTLbtJvOmI4CVtKxdkPrH:RLdiMBGceeeeeeeeFCTX+mjutKx2L
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

data/GUI/General/trackbar.bmp

SHA256 50befc2d4bcaa991c4080f0663fd751a163002de2e2e6d666324f51a35c3d122
MD5 dfb603fac3924a4fd3fb856c708c3578
SHA1 91c1f5e6cedb95f4776f96ad310c6c148aad487d
SHA512 0179b10c57423e1dbeb4d2607cdc0a64fe926d698afb4db2360627395359eaa37d69925068e5f9c10cddbe58fe7cceb66d6525cfb1636eba7f626c87a90ddb17
MD5 SHA1 SHA512

NSIS installer

installer

data/GUI/General/transfer.bmp

SHA256 94924265a7ed8717009922254246dd70abb1081283894940b928b3e35c088b1c
MD5 92d598bd43fdee82ff64a1aa6e729ae5
SHA1 0c6f7f7cddc5baa367f871418db6c8b93afd602a
SHA512 074e3982c5da2cc1cd921adba604d146dffb08fe65992a829bffce1e8aa6136a6cb1a7c1da8e06c837b1cf7ca7c39c6ba1be747bfb680e116b4d61ad5174df3b
SSDEEP 96:Q9wcLC9zTRJkETPxWhRmuUUEUIjYW899ugKc:QtC9RJk6YRDjn4894gKc
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

data/GUI/OsThemes/chat.bmp

SHA256 600c7d6d78c71de907303cedd51f628d8cd522c383d16f0354af9aecd3fd94ce
MD5 5e408c9164a540f5a7af0394ca29dfba
SHA1 4f12aa71fea04db05eee8edb88a3a9776bddc4e8
SHA512 505397f86ca0fde938367b2b572b84b44ef66b6fb8e730e06b455ced8dc070d7cf3680f0c57ec30c64a07220798bb76787c8e564cb95ee74636693abf12738a7
SSDEEP 96:eD3/P5WWRuTRdLH11dsE0tcrSQThGBDRBvpX2QLtVO4qrzIp4UYTEa2cMxOnBZ1G:eD3c5TDIBgQJeAkO7xOFuBgC
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

data/GUI/OsThemes/emotic.bmp

SHA256 a5e9de62254040b71fb90dc5177543c5cc941232607f06087b250d207490b0a9
MD5 baf1aa2e1fbd0323281a05ee283e6327
SHA1 a653d571fbe03581a5ba984673924498c678ebc4
SHA512 542d93be47a85c0636e658ff5f89bf23c0fe40125c07e9d1f71aa42de73a7d003ac223b3410d96b7e26347500c13ba21fb9869d26b160c21f9aa47b51598e740
SSDEEP 768:ZmWJYCzEE7jl3OFoAba1bO/4oM8g2gP5qKGY:ZmWJLgwpAGSYZGY
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

data/GUI/OsThemes/libbig.bmp

SHA256 9fa10445af7dfd29b8d8241749341a97daa6c49d895b62625f960aeb682d3c8e
MD5 81a84015149b112eb7f5c5ada75d7cba
SHA1 043a1fc2d7e8af3ddd13738f771b09fab87d1c56
SHA512 bb8d3e5f91b45f59a2d386e4530f8ec421b3ca83d24b745a3158fa6c09795bcf76945db00c40bb5b154b672f9e095a16b439db04f09fc6adf3fd88798e41f4cf
SSDEEP 384:W/v/93m4PUq62Tj76vi9PmuI+PMP8HDPpuOR5PSoCybc/y9y2bE7HLSbo:CHhVJz3mV+BuOeoCH/bxSbo
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

data/GUI/OsThemes/logo.bmp

SHA256 535800e78b029a0993f619720fb27037862d20acb74bb8973007c241aec7a249
MD5 822bd5627e582cbfeddd1cff03e6b8e7
SHA1 9a928d8eefaa2b66be5731aa9ad4953f6d2d4507
SHA512 417e14deba54ef08e6d65d0e2a7e7ee683ff40523d035a25e025e6c941328019d27273b447d84c7f7bb82d15771ebb338fb561892120a10a6df43d4c459af6a5
SSDEEP 768:Bco9QLNnWbuuuuuuuuuuuuuuuuu8yjxYA:+1oy
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

data/GUI/OsThemes/mimesmall.bmp

SHA256 de856dca720196897d8a1b04f1990f6498407fedccce2b749ed2500e4883d0a9
MD5 abb7c13e3652882e159a3f557314cd91
SHA1 14b209e26fc2669e984f645dbda303009d34b865
SHA512 52c348943387ad0905a792c478774c2fed609a1f5269432b6fc2505994000de01666e6120e24f8958661371238b36382bbe7681c58ae4c36a9cca40a9334a104
SSDEEP 192:k+8aaaaJmFZoHAC5HCLvEyDxDDjeeeeibkx1mfg/M8wxXeeeeYNj+ZVIm1Nxeee2:k9mFZoDCLvuYM/3LdQ/v8
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

data/GUI/OsThemes/mplayer.bmp

SHA256 6070836d59ca38fc83b73b897ccf554b755de4395c676cfa73138de3d2b2156a
MD5 99bd4b0c351635e4937bc4859bf797b8
SHA1 d4237b2991b9dd27cb80be0190931ce2734af666
SHA512 b179645753f589cf653431b6c49316b6c9911e703fee28023eaa92e7fa08097f5a6bb6c434e12f8a1b727afd6556903f8503ef7f5a848fb594208c0613f6488f
SSDEEP 1536:TZG9mkISGiGGUbS8IrvF5FpFDvFNZFqRHq0s/1po:TZG9ZIbiGG7rt/vDtnFqRHqnS
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

data/GUI/OsThemes/mshareset.bmp

SHA256 963066b64bd5ba5034e604a1bcdc1ec9b21f013e8abfe9d3e1771e05744fbf79
MD5 2061a81b26b499d6ca6ae68d84c00889
SHA1 ef32971eb0ded12b7453f091e6dc6bfad95b4ce8
SHA512 1521eb4ab5c1bfed7e61208cfed53c12308bc3765be3b5fd52667a83977546788bfc0b3249689caf5d6f27104a3d8d25dd88fd871c5c31df53377330aed739db
SSDEEP 192:fnY9v7rP1O+ovi2WiCfMPoS4QCRxhLC1A1sMtJLQ41I:fnW7rP1O+oviZMPoS4QCaesM7QGI
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

data/GUI/OsThemes/prefs.txt

SHA256 7f9835fdb784ce21373528c0dc6ca2470bc41ee9a847eb2a2e6218082afccaa5
MD5 713e7241049e41471cc42aa5384dd539
SHA1 80f627f2b58f6371905f71e838d509f46ea6b459
SHA512 d2e8eaba17921ed3b12c736d016a8061a0096113f649dafee30fd6fd2f2a8be903cfea6ab80c53645b0310d89fdf54ed5512c23ba0d25f332d16bbd1b77a1611
SSDEEP 192:DZPxtLCiXxD2irsEc5SmaGgwy7VbkLdkY:DR1D2gFISmaGvy7RkLdkY
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

data/GUI/OsThemes/searchpnl.bmp

SHA256 2187a0847fc2a58ae73f27afb01bbc6ee6257dc0fcdec25b52b6d678a76da19d
MD5 7ab0a855afe37aaff73bc9ff1d5d8a95
SHA1 066b0bef5fa03862228b0cdcd1a523ec29f676b2
SHA512 0a78c4b69b1a7c395591e3abf293309ae1f45076c5a8c37b1cc063da359914ddfed750f911db1f74ccf10908b80a268bb8f966c7335f53ca83637c0009682178
SSDEEP 48:E+vX/HG+vX/H/H/XOuOnvOnv3HHvnX3v2nvOeu9:f
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

data/GUI/OsThemes/searchstars.bmp

SHA256 1b2682d690f5d5ef73dc183560b58ae8f6e04d5f065caf72d3bd4630c680acc9
MD5 7b493e2f8b2cab6d6bbf24121c32107b
SHA1 15137233b911405de83b5e0f06c5caacf763c0d7
SHA512 e182bee97378a04e440fd51c8c1632abe88f65e4c43ba1d0f8f6f5e7d9bd1f7b08524e0eb930cde7b4591ca8ab0fd26df8e07bf90cdfc028902697ea5d7e0339
SSDEEP 24:9EEkEEEMOWOWO2OWOWOWOBszszsTszszszsiE69E69E6dE69E69E69E6NoBoBoho:BttNtttqmmGmmmf11V111zNtSGmXV1N
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

data/GUI/OsThemes/smalltabsbitmap.bmp

SHA256 db1c6dadd3fd00b7e2e7d3cbb4600c490b93f0515e107233f6d88bfdef802150
MD5 ff302bdd1c260ead9bf9e957dee25b32
SHA1 1c16a40db400d0789fa5a4e45d2a2b12c68fee17
SHA512 ecdfd0dc0053130252bbe0d16a194ba51f1db7efbbd9f088f498d254937569f28619590403a81b2535652e52815f209dc9358a4b649771e2f05f4554e8678a82
SSDEEP 48:474aXIJQldcVYrhN/hZoMzAn+V4icueW6byFsRwS+FZkg:47XYJQlKIr5iDnrbWQwS+Feg
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

data/GUI/OsThemes/tabsbig.bmp

SHA256 71cc12a3d983a0ceb0d84e90e0d48c5c748cab1f0500d9819b373be5bfb47972
MD5 a78e585664b150221c0d270c74c4a82c
SHA1 326da1b3ab61af2f41b420c86a91883fcf20dd6e
SHA512 7707ec31b5ecc2ded3a43279393a2375994d0f94a765bf341b1c4c9293311b23d98f1d096a89d0e38172eaef3983c292c12b0c946a3b615633b38629d1750aaf
SSDEEP 768:+4bsplo5PdRDKg5NSJs/ExKdiA7BBP4VmV2mYDzAi11Jl+TP+w:/KqNSJNx+91V662mkzAi1Ur+w
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

data/GUI/OsThemes/tabssmall.bmp

SHA256 f719e48fc9ada4ac785a343502eead9aed1ddf6b613acc52368f5f20a20e645c
MD5 7d698e55b952509d659bc55ae76bde9b
SHA1 dcd9ce7885c828cbf5e1f02b03a6f4240aeaddf6
SHA512 20bc6c59b84ff2618ac20d3298159b44f07a81c78d0dcee201ac367007e8704e329e0ce8885d97051cd7c4c591b8e19c9563fe8601b85476bf781385d2a6f814
SSDEEP 384:tKstM8dioFfJBTQLceeeeeeeeFCTLbtJvOmI4CVtKxdkPrH:RLdiMBGceeeeeeeeFCTX+mjutKx2L
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

data/GUI/OsThemes/transfer.bmp

SHA256 94924265a7ed8717009922254246dd70abb1081283894940b928b3e35c088b1c
MD5 92d598bd43fdee82ff64a1aa6e729ae5
SHA1 0c6f7f7cddc5baa367f871418db6c8b93afd602a
SHA512 074e3982c5da2cc1cd921adba604d146dffb08fe65992a829bffce1e8aa6136a6cb1a7c1da8e06c837b1cf7ca7c39c6ba1be747bfb680e116b4d61ad5174df3b
SSDEEP 96:Q9wcLC9zTRJkETPxWhRmuUUEUIjYW899ugKc:QtC9RJk6YRDjn4894gKc
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

data/MDHTnodes.dat

SHA256 cbec43020c33346da4fad6e7c32758852034d8ca670459f841dfef7db26497da
MD5 99d56019779436a86adf50410b0a2df6
SHA1 1d7ad8e45e485c282b1978d6b20c610879aafc7e
SHA512 20b3c8be07b02651a86d39326360348dea9d45ad513f59b286673a4f3ae9f6b195ce7a2edec649c2e2e3cb3837c82b649ddce79e1907d453c502e8fb93ea213d
MD5 SHA1 SHA512

NSIS installer

installer

data/P2PFilter.txt

SHA256 0eb99308e72039cf2f1afec5e5cb2655b0aca66d0655726d5566a9a494ec809a
MD5 86387e9d8a397fecc30ed0855d5cb918
SHA1 56c18f17d86dcb8ee76d4eca2c1c932abc45e641
SHA512 21115044256ffa7e31c3519b5708e918101d8e2563c399fff359c1e0e7b9b3d9348d8463c08a4bad42e5759326f927cb8759d9fec374cf0e5bd1c29f69a5b275
MD5 SHA1 SHA512

NSIS installer

installer

data/SNodes.dat

SHA256 ccb206e51c5424e34cd6416bcbb2daa8b757380d418bd2e590ec3ff377dbb675
MD5 508828ac5a30a20105ca00da6d36cb74
SHA1 091b7a4d8b74f7ba989c2f998f262134af847d6d
SHA512 2875b3147680685a4cd584ed1901bda8e7448c254694df3a597dcd499a0251568e626f6157abb34fb09ecc4828446d1ffd4770ba9aebcba1610b508fb8685f98
SSDEEP 384:H5y6Cf6gtr25iTgzl7Bmri6VsnqhrDoZg0f9q3CxnwV+G:H5tCigtSAAl7grYqZ0ZBFq3CxnlG
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

data/WebServer/favicon.ico

SHA256 d69daf51176b4355bb7d280eafad9c085659534c4bd25d73bbf4cd7ccd4ac26f
MD5 d5bdaf422ebdffd1e6bfd9e36db9f5fb
SHA1 6c2b86e8f5d7fcea0f984c788b6faa52d449b3da
SHA512 0130dd4b6bdba21f95d014581254ff5dccf7a02b93f0b3d40fb500c85aeae08d6b51636310ce6467ee3f32ec1d59608821510b55c3a2cfcf405ab2b43cef4155
SSDEEP 192:jSsr5ezJeeFm3vpPj3ESbUJBir3BZkxEh9NxImhP7umP2g3A24IUKy4wJ:jSsVfpjNcir3zJhcmPx3n62m
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

data/WebServer/template.htm

SHA256 02354aebd08eca0d3d51db383a18b3648f41370d69aea15a467d9b202814c9ce
MD5 394adeaa7ee33f505bbef83a8e3b27fe
SHA1 520f5bb7defda2cd8bcdaccd0d457d9ff29636b3
SHA512 d49399d76454aea9da209e2a260a489d0c92ce49425b7265b410bd4b5b65f4026dc4bb3a1079b250c8057c86b01ffa982219318f6ee1d1f067bd3584356a7044
MD5 SHA1 SHA512

NSIS installer

installer

data/netStreams.dat

SHA256 b50ba586b82c43a52fdf11c394fe7ab87483f8c4e01400d30af2a57213a3bf41
MD5 117337ea7f4cb4c8efd80ffe7b047150
SHA1 89abf79ea4134f07167e732cf3f15372a3cfce9a
SHA512 0ca665cb8cdcc1d480439b8aa98fbeb96aa252db1aba7d69115d4a9b5257d4a0ed197654edf7979415e1ad60b3f9e29677b2f416dda633be399348d5d99a08a5
SSDEEP 3072:xcF5ARlzUDXNV3xTOnlPchbUgqUlQfHv8SUU7/rZTc:qiRlzUwnihbT2v8SBvZY
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

data/no-avatar.bmp

SHA256 a8d3132d2c89d09b7e3dfeb214512484fb875f0b6dcaa6b474a56e837dca9d6a
MD5 57f5719fdc7bc19ab1cc0a1665ea1a1b
SHA1 b6ad3a200208ffdb8bc9cc5f7358fc2160a28bed
SHA512 807ac92e4ddf87c7414d2057250e419d1a73ff24b67cbf10acea60fc29f70706b8c4c8b8e98ba0feb96c89918e3af18a401c58b379b2c901a860caae00b16339
SSDEEP 48:Ttzshwk+bZdQp3r20rMlkngONg7fe2l0Flz7Tpd0HS+2Ibq0F6BTcvYyzD++U87R:TRohgOakMy+h+mNQ3z8BodyZH9f
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

data/no-avatar48x48.bmp

SHA256 b32cf22124562eaaf5572a773f54f951678e406fa616d9a2dc86ff1e44e8de10
MD5 63ce5f3d4d2d4e5b55329d47ae37244b
SHA1 0e1d2f0102386ff3e3c072429e68c3f3403021cd
SHA512 f0db2c0b20197b08bd2863ef07053cf40e19a9a378df466d55799f83ad5494f1659c68942547795986548d83d271517b2c630ae38c19fe8518ee6ac4e9a76ae1
SSDEEP 12:kxxxNz4zW2a3kV1ExXRdTy6JpLa5Y8ayNXDaV6fawzavHBEigerLf/3y:IxxqJykVStJpLGhXGFwzI+eXf6
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

emoticonSelector.exe

SHA256 a7c33f7e3751e86a28b6027cf9866b58d733e2cd0ed959b439e7c7a01e217b32
MD5 fe23aed4b75898527b103cb0830091d3
SHA1 ffa1c586583343a51f1916b5c1f455bd599e3c17
SHA512 ec5ff64300c4dd8d87d0052ee9bfd5a214afc6ee6d5e1e2725688925da84baf54350bb9b1d3e33746d10cf5e77bd9b3b3e5b47734445f29c2512436d38baaa20
SSDEEP 12288:AJrU0KzpzMlKiIg5efTAjDAOLfqfO75r9CwMUpG9OVKWz:2zKdzu2fTuDLfqO75RAQGZW
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

ASPack v2.12-2.42

Detects executables packed with ASPack v2.12-2.42

aspackv2
Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

1544193

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

206KB

Virtual Size

508KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

DATA

Size

3KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

Virtual Size

40KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

311KB

Virtual Size

920KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.aspack

Size

15KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.adata

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

lang/Arabic.txt

SHA256 b0cba06a3c99207718ecd914e68d7116c04181cb0a017d5ea435d3c681219353
MD5 101e2f58e881d890b67dd07f331d0a1d
SHA1 2243ef2753ddf8670c24b70a081599b67a2a8f9f
SHA512 3b0f7a748711ed32f681f59c9d84393ac3cc4618122dda83cfeecc9ae62a5eaee7d2eafeae4884f0e22fdbefbdf4117cef5d9e981cddf63b6e7d0a103e71585c
SSDEEP 384:yy0dRwg4dfmWF7fcY3Pkm/YxmTFi9UzALjh62NAM/p/NHgpiQo/N+7ccn7vv8:7gV8uWNfcY3Pkm/qmTU9UzALF7PAcCHw
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

lang/Chinese.txt

SHA256 0bef2d98e43f6206532dba934df266f1baf82b7a54524a4516e82920d9e611e3
MD5 920d1357da95501b0f4325612b7845f8
SHA1 af86d38fec8880fd7846ec6fe55e90678dd88c0b
SHA512 00fe2d7001fb1d127e6db774bb9b7a82fee6d178cf7c44f9acbe9503c59475745fe04ccc7b7716e36d77cc9167591830dfc1c507f3505fe76486902fc9f78387
SSDEEP 384:v6AiZQSeBnCgityWDcYrrfp3jN3kiDnBXfLbAWD/4G9opqlDz+ABZEI6nPfl7D:vTiCSelSQYTrrfp3jZVBXTbAWD/4G9oL
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

lang/Czech.txt

SHA256 33fe5faffb263bef0dcaaa82ba66c0cc668acaeca2e4620b8b72dd04b36be163
MD5 7f585d0d5f914c7103cefbab44b32f10
SHA1 927027e9c915409bbcbb4c5d270d828589678fba
SHA512 816d1fedb419b97e8aab8fd0da3c4a89c5a1b77f68f9ddf0cbd0b4bf095fae6ba6599a1c5f06fd15e0ca2862e11d1e9a020e4152558fb8eed2f53c0bdfa12d97
SSDEEP 384:jdi6reqLSA/rNHXxnBC9jDjv6fuYsE8hE42AMBTFlZyGuyrvp6MuL0+28XYo67Ur:BI2fJ3xYT6Y6AMBJlZBuL0/8XYBUJLJ
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

lang/Danish.txt

SHA256 8daf4a9d7b9f9af4ce5936ec2c3b9d43187856385d13dffdd1aac778f6eb7162
MD5 217f0ff0640e8ab26d37a415e5525a9a
SHA1 3acbedeea0961ffa6012bb5f89df4fe9ace3d4b0
SHA512 4c2ae6a0f338af831fdd7cc18a2aa05848974395d34958f1a85aa0f944590e36c5fe9da73cf95ac091f49ea6fd58fa682a98ce98311b49e4bedac6c36a8cec21
SSDEEP 384:++TixdmxAngKGCp5vJZEN7lBWG0m8HBzT0L7gg9kl7D:JEdmEgKGCpi+7ZxT0LE8s
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

lang/Dutch.txt

SHA256 b688744dbcae794c65dde346294f345b66f22f8995d2c70b49db587bed352fa1
MD5 d193bd4d0d6ef17226b4e2a544b2a935
SHA1 f70aa979b98a3bdd70c585ccdeb2579a9ad616fb
SHA512 042a10031a42d88ac16abf7786b1c459b8e6281f48bad60e773733fe87983511ae6a1e6da0db13bc86076e663f452ea0dc4e80ffbb52d702f784a4c7882f1528
SSDEEP 384:TQ3tQxBupyjGCbIxSqhMAsZIr/iOlO42l7D:HL9jb2SqhM9ZIrDlre
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

lang/Finnish.txt

SHA256 8f66ebbe34a7716ae9667e86ea0730f717655eaeaeb5f22395a8ceeca64d85bc
MD5 a082abff5577a14c1640518ca257e764
SHA1 a48020a644a948de4a2a338ba4b6b0ca3e935f05
SHA512 07f14ee014946f4f6c09d22bb4e4d320945196046c90b52a9ac6670fec68c706b32f69c1c4260f66d63a22ba66302f53e8d9b79e83b5b69b8434bb327dc4a62f
SSDEEP 384:4/LkflapRvRsA58SWTpWLrLkNhJJkwQhZgDE94LJasb1CiZ9+l7K:4oflARvRlDEpWLrLkNzeJhZeE94LUQHP
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

lang/French.txt

SHA256 3053cb4afef961e4bb652f4866181b992d93b34703463b42b34397a81b06f1ac
MD5 92db6957a791deda03dc09b76e4c0e10
SHA1 abfc81f40b3428ac9f31ae9c5714af94b92f9e22
SHA512 74cab5ed95709e6fcfcba69ecba73b87090c9d38236c5c4167359bc96207086c033652925d3689d0ffce0e43a0c8e711b871e9eb19b8b350f8ce98d39623cb68
SSDEEP 384:+xPJtAV0dhIrL4f7M1tsz08wrMqgep3mVANnJl7Dd:+xPJAshIrLwSdrHp2KNnHDd
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

lang/German.txt

SHA256 eec8ca7ff8788e626611068f76f78f2666b36fe63f9d3962cea067028db5f5bc
MD5 5ece914022e8f5819745794915d224f7
SHA1 24e25c31048bfd55078644a074075d8686a98dac
SHA512 42e9d6ff4c84a47df1f6b5ab2c01457dbc91e3703bbb19e5c40bb9ca837edfd880a2b7aaad5b238149c2516605dc943566fcc7b6d09a46e0c83974b93a67080a
SSDEEP 384:hBMFILYdgMSzIl90xdB+JJauVbFWUIfaj72x0umkVJMl7K:hBoILYdZSzS9o6JAuVBLIfajy/jV3
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

lang/Italian.txt

SHA256 00a205155f266a9570db86fd193fa07eb6a355563e4e83e4ddacb4e2c88ce005
MD5 04749a45069a3d180b3bc1e043c3a67f
SHA1 d68641c79fccb5253135cfb714b0bcbe3da6671d
SHA512 d89d564b45b71f93f3331129d727ee3c571e91fede381e62b80846bb7797bd3e3d624e3e85d0289071dbed0282bea64775416905990aed971c4a125c6f0cbbdf
SSDEEP 384:SQ+ILnqp7KCnkHw5LcEbAaqDqNwWGT4cWEXXjD:SQzqp7BnIwGIjq4cWEXXjD
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

lang/Japanese.txt

SHA256 ec16a19a9385131f88e7afd0fe40a28307d148e81fb3d4b71c316e607529255e
MD5 b665911460852d8a7a19d670c51daf90
SHA1 29fb61ae7bac22d2423108224a52d0876a28f416
SHA512 73dfb9cff08b5651d0dd3653d3cd11ff38ecc4bbe7484ed8af2f6733b4a002292917f213d2bc73b6d3f8ffe6b8324110600f727b37429e9ad7290caf012f9cfc
SSDEEP 384:asnZFKgJzjht5K0Lm+KDTeAAl1PUdS0YGT7EiKqqFplqATil7K:aDq5K39obiYJXr
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

lang/Kirghiz.txt

SHA256 f65d99fc7d3b0b4fb4d14ee0622e2f93cbcd378473529510ad06efb19a2642c5
MD5 8d4ef30abc76d559c7e1bb6c835c55c7
SHA1 715e8519dcda4f5f0df4deec73d7763d5da30380
SHA512 6966f2782299a0e6137f5a1bf9d1f50035e86a96912be381d93268ae29b4bc52d7775c188edab008596a3a178138d3667908aa9808d0e0e09c1208c83d74fc17
SSDEEP 384:u83VWMZEWsrUE0xQkW4t5TmVZvcGka6vEV7ByvYCwWC9ahTVMTYspGCqS6iJbjl+:9VRtxQkW4t52c8TBmYC2oVMTYHS6+s
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

lang/Polish.txt

SHA256 4b399c3840aa551f360be04bd87fbe6b851a22ca96c8d3aec8c7c3d3d5c6bb84
MD5 e54a18583de96a2e267d1788ea76b381
SHA1 125bac85fdf4d3affc1f59ec26e32ce632a6d34c
SHA512 6f64694a4c3ea4c660ae7d1ef714f20a947e725fc8fc4ad7f32628371b900912f62d8c3a9f94e60b66f402d970d1ded508bf7d551a755c4fe9a7496260b59291
SSDEEP 384:vBRlJvwJiXczk9UTtrtlwFrE8eBBtzz5/yIWt34Y3HSSK:FJzd9SBBNz5qOGK
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

lang/Portuguese.txt

SHA256 2d8dfebcaa33d3c22a33a408321a6dcb8936e98eb2a7548c2f1a7cef15193671
MD5 00818a283e638751985ae219854d0f2f
SHA1 d91de9c8e3f2c3613d46cce787ceaf13922e1ffb
SHA512 868c8759499d2b75674dbd8e46214bbf24b2affadd0cffa325ca07afa806368477a7cbc83ea88670ba789018b97b1045e3ec98dfa6e1b6d6c197f9dd419a1882
SSDEEP 384:Nqg8Zp8kla6ROEEyf+7oIgn+4MOfjXyeKipmGzl7f:NB8coV+UIgnrCNipma
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

lang/Russian.txt

SHA256 e9871614720b9f22e53fd05b79a74e641aed32b45b70e4805e8fe374f2ce167f
MD5 b006fe7c44a2b3b4caa116fc873d88bf
SHA1 e5d121786bdfb50c70c17890b0863b238fe4d318
SHA512 5a6dd2474aec1c0c3b8a1a036ec0134116aec6af642365be3e4252bc0da4589d11454820677d7dae5639e5fcefcc5ec3c2fb0a38469952d0118274a3fc5fd0d5
SSDEEP 384:wWs6e6sDAtt2VwIXRnPSYnbLZFou01vQxX:4z6scts7XRnPTnpFX
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

lang/Slovak.txt

SHA256 4e451f75fc0290668316b173b21fe0950dc8af5c0ef898976e92228a112fa206
MD5 8d38e6652182b548c4dfd1d459af3de7
SHA1 845450e2d3dbec2a4024f4cd21eeed1ecbcedcbd
SHA512 71115e234d6f9fca752aa67bf45d41529b68bf53426d87da78f10191c7bfc243f25d9578a88325c32067eb5aec5e21f6bdc19328a68cc6c15c264b1d09ab3cd4
SSDEEP 384:3GzHg6oL0m1Jx6GMkO1oTyXKINBvFkzYH5JwJ7J/s3jWkaJqb1/NN+7JncIZnl7f:3JxTUhuzYH5i7ojTGqfiX9
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

lang/Spanish.txt

SHA256 6d8dbd9615e5be4afb3e4a7409de7451e016fea048385011e93932d4204cec87
MD5 5e0833f44f804b8243907050231ecceb
SHA1 ee5575ab941db09df8e8edc716188d89f70e3f05
SHA512 913a87f451a9d9ed4b1b4155f94bceec11c9e091cc17b83c2c17cf28c3adf6b1371bfb0ce1e2c15adc52172e87861e790c61df33d9200a2acaf9ed32a01dce86
SSDEEP 384:sh4GXrrYdRGhfJ6YF45zUeEH2yST6+8QsPEb31uS3qkm:sh3QRyfwxK2Z2+0PEbT35m
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

lang/Swedish.txt

SHA256 aecd585c49d0d194c78f72531034721c2736b1fff6ceb871b6180af3e35f22b7
MD5 adf69eaafa295e662cc5661029ab668a
SHA1 1c326ee4f5619b9c6ed71ba735afbfd8d4823973
SHA512 82aae08d904d642f399d99d430e3dd12b2d22b720c0de19390bc9307011f72b467f1482b6ab6607d845fbc8266d339cba9015dfd7c388cbeac587f821047e3bf
SSDEEP 384:XUeowcfufCO0D9tJUdG3CN9zBTByNe2V6amil7f:X8wcXTD9tJQ9KVVz
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

lang/Turkish.txt

SHA256 2319ae779522514150429c89df3567ef34cb5d1e2e13f7eeec5e0cba947bef6b
MD5 ceb2b361091f92f7f0e97555eff1c956
SHA1 3e32807fb839ebda091f6572c79989a0abdf8fe6
SHA512 64c463232f73fe81d0f0221fee2b4fa50deb5c7f69ecf4b75434dde8af26c7bb0f0f535b4577db17e515561856688722e10a10a7770ad885789489f97db1f534
SSDEEP 384:ZCu4/VfflMJGIz46i1CxSh0ayH9XvxQFC1p4ba52/TWDBdZul7f:8JdfWJd471CxShtyH9XvxJ1p457eBO
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

libfaad2.dll

SHA256 e1fdc49b2a3f23fac94e1a1978f226c8cf7d4d7ca0297745a6d543ab1d53a471
MD5 fd5abedf547602eaa107ddbeba50cdc7
SHA1 7adbd9cb65605eb3e43afc4c93a2adc025f36342
SHA512 bcd1a7069d8728ef5417d23f105963eaadf3ead07ca59bd2d281bdeae559fcef923865d0b26a500a401d290cd8a527dc9c35ebe0033109ced99138e4d0d87417
SSDEEP 3072:4q0lyEEbqWiYKTPgeRiLiXzox75a+yYscJfDQNr4BfD4yrz:GlyEEbd8DgeYi+5HJfOMBfcyrz
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

ASPack v2.12-2.42

Detects executables packed with ASPack v2.12-2.42

aspackv2
Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

245761

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Name

.text

Size

52KB

Virtual Size

112KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

104KB

Virtual Size

104KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

4KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

2KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.aspack

Size

4KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.adata

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

opus.dll

SHA256 03a95933ac388194d011c8df66574cfa86bc1806d1a59d5e9ca3a5d9fc29e5e7
MD5 404a637a73a7b493f3c9e811dd667eec
SHA1 e67b150b17b34946204a78ac581e52218b8ff7c0
SHA512 f8eb931f943e6433a8bc5333956afb603aea489d0a1e75992ba67d4c37eb76927fec32b0708c66d04a8b070c56424e372b64b4df8fc0c3951a824084e566e862
SSDEEP 3072:ae2zEI6rCt8H9MBtwbUhsHCZLRioR/m++2W/nIsuOAuurn29fQOZ6ojQsAg0Fuvk:aHII6WtE9MkxiZMzh20nIpU4n29hrQsy
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

ASPack v2.12-2.42

Detects executables packed with ASPack v2.12-2.42

aspackv2
Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

1

Major OS version

5

Entry point

323585

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Name

.text

Size

126KB

Virtual Size

240KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

49KB

Virtual Size

52KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

1KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

4KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.aspack

Size

4KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.adata

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

aresregular246_installer.exe

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

$PLUGINSDIR/UserInfo.dll

kernel32

advapi32

generic

$PLUGINSDIR/fct.dll

kernel32

user32

generic

$PLUGINSDIR/modern-header.bmp

Ares.exe

generic

AsyncEx.ax

generic

MP3Source.ax

generic

out.upx

generic

Uninstall.exe

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

$PLUGINSDIR/UserInfo.dll

kernel32

advapi32

generic

$PLUGINSDIR/fct.dll

kernel32

user32

generic

$PLUGINSDIR/modern-header.bmp

bass.dll

generic

chatServer.exe

generic

chatclient.exe

generic

data/Blocked.txt.sample

data/Blocked_Keywords.txt

data/ChanListFilter.txt

data/ChatLang_en.txt

data/ChatLang_es.txt

data/ChatroomIPs.dat

data/DHTnodes.dat

data/GUI/General/buttonsbitmap.bmp

data/GUI/General/chat.bmp

data/GUI/General/emotic.bmp

data/GUI/General/libbig.bmp

data/GUI/General/listviewbitmap.bmp

data/GUI/General/logo.bmp