(03) PDF ReDirect v2[.]5[.]2[.]exe

resource
unpack001/$PLUGINSDIR/InstallOptions.dll
unpack001/$PLUGINSDIR/LangDLL.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/Drivers/PR_Installer.exe
unpack001/Drivers/Win 2K-XP/PS5UI.DLL
unpack001/Drivers/Win 2K-XP/PSCRIPT5.DLL
unpack001/Drivers/Win XP64/PS5UI.DLL
unpack001/Drivers/Win XP64/PSCRIPT5.DLL
unpack001/OSSMTP.dll
unpack001/bin/gsdll32.dll
unpack001/cbak4exp.dll
unpack001/ccrpani6.ocx
unpack001/filev4exp09.ocx
unpack001/fldrv4exp09.ocx
unpack001/jpeg4exp.dll
unpack001/pdf4exp.dll
unpack001/vpdf4exp.dll
unpack001/zlib4exp.dll

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

(03) PDF ReDirect v2.5.2.exe

IMPHASH 7fa974366048f9c551ef45714595665e
SHA256 7ab20ca0107f85b5ec838b76474e2c49f1295041f637f6c7130b745acecebf8a
MD5 d84bd466a4de9fbedaabaf9a366cf4e6
SHA1 57f93f838a7204f0fe455bace047aef250e6716d
SHA512 465b71d33efe8879737e2cf772c2c52e1f428ff8f14127330764b11a195e03f561b07dd48d7ad91b073afdb28f74281cd9827eacdfa5af13028e14f952b707fd
SSDEEP 196608:WiT7e3WYVlue372YxgQugzoOBvAHG4mMA7mp/i/MWm8:1YVlNKYxugznBvAmIkmp/q7
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

af:8e:77:01:98:b5:75:46:43:52:dc:2f:1c:4d:de:68:00:ce:70:3a

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=EXP Systems LLC,O=EXP Systems LLC,POSTALCODE=67212,STREET=11058 W 1st Street CT N,L=Wichita,ST=KS,C=US

Chains

Nov 20, 2010

Minor OS version

0

Major OS version

4

Entry point

12491

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CompareFileTime SearchPathA GetShortPathNameA GetFullPathNameA MoveFileA SetCurrentDirectoryA GetFileAttributesA GetLastError CreateDirectoryA SetFileAttributesA Sleep GetTickCount GetFileSize GetModuleFileNameA GetCurrentProcess CopyFileA ExitProcess GetWindowsDirectoryA SetFileTime GetCommandLineA SetErrorMode LoadLibraryA lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread CreateProcessA RemoveDirectoryA CreateFileA GetTempFileNameA lstrlenA lstrcatA GetSystemDirectoryA GetVersion CloseHandle lstrcmpiA lstrcmpA ExpandEnvironmentStringsA GlobalFree GlobalAlloc WaitForSingleObject GetExitCodeProcess GetModuleHandleA LoadLibraryExA GetProcAddress FreeLibrary MultiByteToWideChar WritePrivateProfileStringA GetPrivateProfileStringA WriteFile ReadFile MulDiv SetFilePointer FindClose FindNextFileA FindFirstFileA DeleteFileA GetTempPathA

user32

EndDialog ScreenToClient GetWindowRect EnableMenuItem GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard RegisterClassA TrackPopupMenu AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA DestroyWindow CreateDialogParamA SetTimer SetWindowTextA PostQuitMessage SetForegroundWindow wsprintfA SendMessageTimeoutA FindWindowExA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA OpenClipboard ExitWindowsEx IsWindow GetDlgItem SetWindowLongA LoadImageA GetDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint ShowWindow

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectA SetBkMode SetTextColor SelectObject

shell32

SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA SHGetSpecialFolderLocation

advapi32

RegQueryValueExA RegSetValueExA RegEnumKeyA RegEnumValueA RegOpenKeyExA RegDeleteKeyA RegDeleteValueA RegCloseKey RegCreateKeyExA

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

$PLUGINSDIR/InstallOptions.dll

IMPHASH b1cd0d78f652ce5fc63f0879371af012
SHA256 8e287326f1cdd5ef2dcd7a72537c68cbe4299ceb1f820707c5820f3aa6d8206c
MD5 0dc0cc7a6d9db685bf05a7e5f3ea4781
SHA1 5d8b6268eeec9d8d904bc9d988a4b588b392213f
SHA512 814dd17ebb434f4a3356f716c783ab7f569f9ee34ce5274fa50392526925f044798f8006198ac7afe3d1c2ca83a2ca8c472ca53fec5f12bbfbbe0707abacd6b0
SSDEEP 192:n6d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jPK72dwF7dBEnbok:n6UdHXcIiY535zBt2jP+BEnbo
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

10696

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

SetCurrentDirectoryA GetCurrentDirectoryA MultiByteToWideChar GetPrivateProfileIntA GlobalLock GetModuleHandleA lstrcmpiA GetPrivateProfileStringA lstrcatA lstrcpynA WritePrivateProfileStringA lstrlenA lstrcpyA GlobalFree GlobalUnlock GlobalAlloc

user32

MapWindowPoints GetDlgCtrlID CloseClipboard GetClipboardData OpenClipboard PtInRect SetWindowRgn LoadIconA LoadImageA SetWindowLongA CreateWindowExA MapDialogRect SetWindowPos GetWindowRect CreateDialogParamA ShowWindow EnableMenuItem GetSystemMenu EnableWindow GetDlgItem DestroyIcon DestroyWindow DispatchMessageA TranslateMessage GetMessageA IsDialogMessageA LoadCursorA SetCursor DrawTextA GetWindowLongA DrawFocusRect CallWindowProcA PostMessageA MessageBoxA CharNextA wsprintfA GetWindowTextA SetWindowTextA SendMessageA GetClientRect

gdi32

SetTextColor CreateCompatibleDC GetObjectA GetDIBits CreateRectRgn CombineRgn DeleteObject SelectObject

shell32

SHBrowseForFolderA SHGetDesktopFolder SHGetPathFromIDListA ShellExecuteA

comdlg32

GetOpenFileNameA GetSaveFileNameA CommDlgExtendedError

ole32

CoTaskMemFree

$PLUGINSDIR/LangDLL.dll

IMPHASH 9b6b6a7858e17fb0b17e1c1428330343
SHA256 2a7f33ef64d666a42827c4dc377806ad97bc233819197adf9696aed5be5efac0
MD5 a401e590877ef6c928d2a97c66157094
SHA1 75e24799cf67e789fadcc8b7fddefc72fdc4cd61
SHA512 6093415cd090e69cdcb52b5d381d0a8b3e9e5479dac96be641e0071f1add26403b27a453febd8ccfd16393dc1caa03404a369c768a580781aba3068415ee993f
SSDEEP 48:iV6sAvmNC6iMPUptxEZK65x/AmvycNSmwVsOYJyvrpXptp/JvR0Joof5d2:2V11GED5ZTvycNSmwVsTJuftpZR0Ld2
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

5526

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/System.dll

IMPHASH 2017f2acbdaa42ab3e4adeb8b4c37e7b
SHA256 dc4da2ccadb11099076926b02764b2b44ad8f97cd32337421a4cc21a3f5448f3
MD5 00a0194c20ee912257df53bfe258ee4a
SHA1 d7b4e319bc5119024690dc8230b9cc919b1b86b2
SHA512 3b38a2c17996c3b77ebf7b858a6c37415615e756792132878d8eddbd13cb06710b7da0e8b58104768f8e475fc93e8b44b3b1ab6f70ddf52edee111aaf5ef5667
SSDEEP 192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

10544

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/ioSpecial.ini

SHA256 d95aed234f932a1c48a2b1b0d98c60ca31f962310c03158e2884ab4ddd3ea1e0
MD5 e2d5070bc28db1ac745613689ff86067
SHA1 282e080b4cf847174c5c11e4f9157b8c338ecb19
SHA512 a50ca2014869629135b54e848f03cb4983ad8029cd811300d02b0fc54de0436185f418fea4d3db888eb0f3170e33a59d486aa885f024ab29e630e9bc0ae1a2de
MD5 SHA1 SHA512

NSIS installer

installer

$PLUGINSDIR/modern-wizard.bmp

SHA256 070b04951fed3351f2f6d0ec7d043a6fcd200f4ddd8806f1ce1394bfa7d45424
MD5 2069c3e72a9b0f67192e3615b4e93c6f
SHA1 63d8b4d726abb85c7c2e22da9426afae4b01c9a8
SHA512 44ac13310c6aca331db11583b59c0203f9edd83b1bcb2970eb03a323249a80c96d97b93f419aa948a27bfe5bff629fb41a1e53a4f3be7cfd7e11707fc6e2edfa
SSDEEP 384:0rowd5M7WP+31jrWAT6ZTidYv+KdlVCUc/VBvsNkbuS+o2baaf:4ow4iP+31jrnTwTiN6kqS+7V
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Capture.exe

IMPHASH 848ffc1397e45b5d3ba1cbd9cf33b7eb
SHA256 d39bf6e37bda89675f1a3822ddbc57a130babe72d0a96f648ecae6c83336de7d
MD5 1c1775f884e45936ae3501640bcc8039
SHA1 433bba805d79644268c21f4051d4505184245a74
SHA512 1179e1efad48558a006b91c0b51e900e91db7d220750982e7de35d27c2bf44d664001a1fb17acc98e6e211920365d65a0f793727a72334d030a87b380f6658ff
SSDEEP 6144:t++SdDIcAM8hvQhxvlbOoaxH8a7hjZxhxIuNlWzY7qmYwv8qX5rE6qcIH3MF3Dit:tnSnYQvYjqHMBy6eBcl3QTjmxxxm
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

28:c1:c0:05:18:32:20:d2:0c:05:4d:00:c4:d4:65:1f:25:68:58:7e

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=EXP Systems LLC,O=EXP Systems LLC,POSTALCODE=67212,STREET=11058 W 1st Street CT N,L=Wichita,ST=KS,C=US

Chains

Nov 20, 2010

Minor OS version

0

Major OS version

4

Entry point

18196

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

EVENT_SINK_GetIDsOfNames __vbaVarSub __vbaStrI2 _CIcos _adj_fptan __vbaStrI4 __vbaVarVargNofree __vbaAryMove __vbaFreeVar __vbaLenBstr __vbaStrVarMove __vbaLateIdCall ord696 __vbaFreeVarList __vbaEnd _adj_fdiv_m64 __vbaFpCDblR8 EVENT_SINK_Invoke __vbaFreeObjList __vbaStrErrVarCopy ord517 _adj_fprem1 __vbaRecAnsiToUni ord518 ord519 __vbaCopyBytes __vbaResume __vbaStrCat __vbaWriteFile __vbaLsetFixstr __vbaSetSystemError __vbaRecDestruct __vbaHresultCheckObj __vbaLenBstrB __vbaNameFile _adj_fdiv_m32 __vbaAryVar __vbaVarTstLe Zombie_GetTypeInfo __vbaAryDestruct __vbaLateMemSt __vbaForEachCollObj __vbaExitProc __vbaBoolStr ord593 ord594 __vbaOnError __vbaObjSet ord595 _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord598 ord599 __vbaStrFixstr __vbaStrTextCmp __vbaBoolVarNull _CIsin __vbaErase ord631 ord709 __vbaVarZero __vbaLateMemStAd __vbaNextEachCollObj __vbaVarCmpGt ord525 __vbaChkstk ord526 __vbaFileClose EVENT_SINK_AddRef ord527 __vbaExitEachColl __vbaStrCmp ord529 __vbaPutOwner3 __vbaAryConstruct2 __vbaVarTstEq __vbaObjVar DllFunctionCall __vbaVarLateMemSt __vbaVarOr ord670 __vbaFpUI1 __vbaRedimPreserve _adj_fpatan __vbaR4Var __vbaFixstrConstruct __vbaLateIdCallLd Zombie_GetTypeInfoCount __vbaStrR8 __vbaRedim __vbaRecUniToAnsi EVENT_SINK_Release __vbaNew ord600 _CIsqrt EVENT_SINK_QueryInterface ord710 __vbaExceptHandler ord711 __vbaStrToUnicode ord712 __vbaInputFile __vbaPrintFile ord606 _adj_fprem _adj_fdivr_m64 ord607 __vbaI2Str ord608 ord716 ord531 __vbaFPException ord717 __vbaInStrVar ord319 __vbaUbound __vbaStrVarVal __vbaVarCat ord534 ord535 ord536 __vbaI2Var ord537 ord644 ord645 _CIlog __vbaFileOpen __vbaVar2Vec __vbaNew2 __vbaR8Str __vbaInStr ord648 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaI4Str ord681 __vbaFreeStrList ord576 _adj_fdivr_m32 __vbaPowerR8 ord577 _adj_fdiv_r ord685 ord578 ord100 __vbaI4Var __vbaLateMemCall __vbaAryLock __vbaVarAdd ord320 __vbaStrToAnsi __vbaVarDup ord321 ord613 __vbaFpI2 __vbaFpI4 ord616 __vbaLateMemCallLd ord617 __vbaRecDestructAnsi _CIatan __vbaStrMove __vbaCastObj ord618 __vbaAryCopy __vbaStrVarCopy __vbaR8IntI4 ord650 _allmul __vbaVarLateMemCallSt __vbaLateIdSt ord652 _CItan ord546 __vbaAryUnlock __vbaFPInt _CIexp __vbaFreeStr __vbaFreeObj ord581

Drivers/PR_Installer.exe

IMPHASH e543ae468e021542f23ea56b2307c2f1
SHA256 89025238977a6f5b1714cf99194a741c5609a6e5c4ad386c07d83a63d25bb4e1
MD5 5248aeb856d27f2ad2f6c591fd324e53
SHA1 e2c03eee945936c3e7fc1f9a7ecfef47302f57f2
SHA512 6d26b73149de4d8d5e8b89415abbe02bf2d5663884625af510576d34ce0ba641a2476eb25346e820403c68a02f64065d0e60e420b9e776d340e1743cfe2c37bd
SSDEEP 3072:H/W2zMraY/x1X+guAtim/kk28tmcU2eKYmmugPFvd:H/Wiwrem8T8U2Y9ugPFF
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

10144

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarTstGt __vbaVarSub ord690 _CIcos _adj_fptan __vbaVarMove __vbaStrI4 __vbaAryMove __vbaFreeVar __vbaLateIdCall __vbaLenBstr __vbaStrVarMove __vbaFreeVarList __vbaEnd _adj_fdiv_m64 __vbaFreeObjList ord516 _adj_fprem1 __vbaRecAnsiToUni ord519 __vbaResume __vbaStrCat __vbaForEachCollAd __vbaLsetFixstr __vbaWriteFile __vbaSetSystemError ord554 __vbaHresultCheckObj __vbaLenVar _adj_fdiv_m32 __vbaAryDestruct __vbaVarForInit __vbaExitProc __vbaOnError __vbaObjSet ord595 _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord598 ord305 __vbaFpR4 __vbaStrFixstr __vbaBoolVar __vbaBoolVarNull _CIsin ord631 ord709 ord525 __vbaVarCmpGt __vbaChkstk __vbaFileClose ord526 EVENT_SINK_AddRef ord527 __vbaGenerateBoundsError ord528 __vbaStrCmp ord529 __vbaVarTstEq __vbaAryConstruct2 __vbaI2I4 __vbaObjVar DllFunctionCall ord670 __vbaVarOr __vbaRedimPreserve _adj_fpatan __vbaFixstrConstruct __vbaLateIdCallLd __vbaRedim __vbaRecUniToAnsi EVENT_SINK_Release __vbaNew ord600 __vbaUI1I2 _CIsqrt __vbaVarAnd ord311 EVENT_SINK_QueryInterface __vbaStrUI1 __vbaStr2Vec __vbaExceptHandler ord313 __vbaPrintFile __vbaInputFile __vbaStrToUnicode ord712 _adj_fprem _adj_fdivr_m64 ord607 ord531 ord716 __vbaFPException __vbaInStrVar ord717 __vbaUbound __vbaStrVarVal __vbaVarCat ord535 ord536 ord644 ord537 ord645 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaNew2 __vbaInStr _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy ord681 __vbaFreeStrList __vbaVarNot __vbaDerefAry1 ord576 _adj_fdivr_m32 _adj_fdiv_r ord685 ord100 __vbaVarTstNe __vbaI4Var ord689 __vbaVarCmpEq __vbaAryLock __vbaLateMemCall __vbaStrToAnsi __vbaVarDup __vbaVarCopy __vbaFpI4 ord616 __vbaRecDestructAnsi __vbaLateMemCallLd _CIatan __vbaStrMove ord618 __vbaStrVarCopy ord650 _allmul __vbaLateIdSt _CItan __vbaNextEachCollAd __vbaAryUnlock __vbaVarForNext _CIexp __vbaFreeObj __vbaFreeStr ord581

Drivers/Win 2K-XP/PDFR.inf

SHA256 eabf0550f8621e06e360c891380fe8b0e42dde1087b7a8b197ede7c668f1548c
MD5 563c33835417b5c5fa25d8709877b43f
SHA1 a96484f4e6ebeb784b1f4ef195afb7807b2c7fa4
SHA512 3412a1cd9bc70458bc4ce1fcbb536a43ec3a8751e0f34ec5a30287729a5f636833df892a35a5c21dbe63c25ac163a73aee80446d875e8d6f3c02c7d9c83d5a20
MD5 SHA1 SHA512

NSIS installer

installer

Drivers/Win 2K-XP/PDFR_NST.PPD

SHA256 8f6dfdcb5b8ad37e142f4c2aa9fbb579262989b1f0940e9e38f4f93098e95e97
MD5 99c46db613b548698499625250e11d20
SHA1 4b4e84a11d1868fbe44146f9834758bb6c069577
SHA512 43a5475e98fb2280db747645216b0b407e53cb2b28747b22589926704d5d39a31ebb06a3f42031734a8a3cdd0eab05ddfd37f7be9de0db651df7ebdc5c9fd7b8
SSDEEP 384:Pxwx2xrBxsx3xmx1RkTcmdf0S2tkgir/YOHR2k5br4tNx3D1hI:PGgpBSVAnOTcmdsS2igk/YaR2MUtjfI
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Drivers/Win 2K-XP/PDFreDirectMonNT.dll

IMPHASH f60a620303ab3ecf587fdc17bd8a4ba8
SHA256 d7dd2b1189178325480fc21060f4a976fbb64aa98cbf91401184115c32c11f49
MD5 ed233c57730ebcd3b6f610bd8f1dffe2
SHA1 16b76c6e7a7c345f122f8d6267a4cfe4827c2c02
SHA512 ea2ed5216ea772f345fc58dec6c132d9c31ee9729ebd4e1c3ed17f03061d704e62199a414cfe348f78437d15f3a719f227527867997e4e21049705fd005aa52e
SSDEEP 768:uO+lHy1fDlujL7yai60QpQLjEig51uvwIw1i9eXxpWVtVFyl6:uK8TiCIveEX9Ax4tV0l6
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

2f:1f:41:61:a2:50:00:7f:fe:2a:ed:d9:c8:9a:fe:94:07:1d:9d:a8

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=EXP Systems LLC,O=EXP Systems LLC,POSTALCODE=67212,STREET=11058 W 1st Street CT N,L=Wichita,ST=KS,C=US

Chains

Jun 6, 2010

Minor OS version

0

Major OS version

4

Entry point

13065

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

user32

CharNextW wsprintfW MessageBoxW

winspool.drv

EnumPortsW SetJobW OpenPrinterW GetJobW ClosePrinter

advapi32

RegCloseKey OpenThreadToken InitializeSecurityDescriptor SetSecurityDescriptorDacl DuplicateTokenEx CreateProcessAsUserW RegQueryValueExW RegSetValueExW RegCreateKeyExW RegEnumKeyW RegOpenKeyExW

shell32

SHGetFolderPathW SHCreateDirectoryExW SHGetSpecialFolderPathW SHGetSpecialFolderLocation SHGetPathFromIDListW

kernel32

GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW SetUnhandledExceptionFilter GetLocaleInfoA GetFileAttributesW lstrcatW lstrcpyW lstrlenW SetLastError lstrcmpW GetLastError GlobalFree GlobalUnlock GlobalLock GlobalAlloc DisableThreadLibraryCalls GetEnvironmentVariableW CloseHandle CreateFileW lstrcpynW WriteFile Sleep GetExitCodeThread SetEvent CreateProcessW GetTickCount GetCurrentThread GetCurrentThreadId GetCommandLineA HeapFree GetVersionExA HeapAlloc GetProcessHeap TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent GetProcAddress GetModuleHandleA ExitProcess TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapDestroy HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection LoadLibraryA InitializeCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage VirtualAlloc HeapReAlloc RtlUnwind HeapSize MultiByteToWideChar

Drivers/Win 2K-XP/PS5UI.DLL

IMPHASH f3df2a0533c4d0c1555baa55a11521a4
SHA256 955d1ded174616fce66175bfaee46475a4d4b1f904a7156d8f20a0f7c649e720
MD5 735ff9af3426e3ac76a07d99ffd7027b
SHA1 e3668e1e2ad7202addcbc0021f8cfd5772de5b30
SHA512 43f3e678cbc9e377b4b50a97147faf42f83887cb7a933bcac3d6560a412acaf4983ebfe0c8576b27cd7fd03f707ca844e4d5cf3f0ead448d62d8610175b4a415
SSDEEP 3072:WvXwfhnKqNkTcHHymzGg1AfpI9wTXBFrFms/cu5P76TF:WfwfhRqcfXr+T3dy
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

2

Major OS version

5

Entry point

58253

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

GetLastError HeapCreate MulDiv CloseHandle DeleteFileW WriteFile ReadFile GetTempFileNameW CreateFileW MoveFileExW CreateDirectoryW FreeLibrary GetProcAddress LoadLibraryW WideCharToMultiByte HeapFree InterlockedIncrement InterlockedDecrement GetModuleHandleA QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime TerminateProcess HeapDestroy SetUnhandledExceptionFilter SetErrorMode LoadLibraryExW UnmapViewOfFile GetFileSize CreateFileMappingW MapViewOfFile GetLocaleInfoW CompareFileTime GetFullPathNameW VirtualFree GetCPInfo GetFileTime FindResourceW LoadResource LockResource MultiByteToWideChar VirtualAlloc GetSystemInfo RaiseException GetUserDefaultUILanguage GetACP Sleep SetLastError LocalAlloc HeapAlloc GetCurrentProcess LocalFree

msvcrt

malloc _adjust_fdiv _initterm free ??2@YAPAXI@Z ceil floor wcstod iswctype _vsnprintf _wcsnicmp _stricmp wcsrchr memmove _vsnwprintf wcscmp wcslen qsort _wcsicmp _ultoa _except_handler3 strncmp strrchr strchr _wtol _strnicmp isspace ??3@YAXPAX@Z

user32

CheckRadioButton ShowWindow GetDlgItem SetDlgItemTextW SetWindowLongW EndDialog GetWindowLongW DialogBoxParamW SetDlgItemTextA LoadStringA GetDlgItemTextW SendDlgItemMessageW SendMessageW SetFocus CheckDlgButton WinHelpW EnableWindow MessageBoxW MessageBeep LoadStringW GetAppCompatFlags2

winspool.drv

DeleteFormW GetPrinterDataW SetPrinterDataW DeletePrinterDataW GetPrinterW EnumFormsW GetFormW GetPrinterDriverW OpenPrinterW SetPrinterW ClosePrinter AddFormW

gdi32

DeleteDC CreateICW ExtEscape EnumFontFamiliesW

Drivers/Win 2K-XP/PSCRIPT.HLP

SHA256 6faef4c998e810fff139958f28722c79879ec2fd66c97c7e3e2c5040fd5550d9
MD5 02c3f8c32018f3aaf66e7421400f1781
SHA1 a04f2e40287af78867161fa3f1606045088da212
SHA512 c30fee64d74a536117de46c81b6e22ec82634d1284783a317bc15e85cfd561fad7d50a63ca863ea6520b5cbaecf9061f7b52d3d99050484ce8a004f81dab7990
SSDEEP 384:uX0EppE1e80vvpyGf7t1ayKu0rtP1dOxjPp:uboUXpLB1+u0RP18xjPp
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Drivers/Win 2K-XP/PSCRIPT.NTF

SHA256 598eb471f698fee212ef6dcb42a7b0c5de0df54ec1063975bc5edd70edc16a51
MD5 8217a1b2c8df78e01fb8c3386e75a33d
SHA1 ef4e4f28031bbdf4eaf2e78385a9cf8475316aeb
SHA512 513e71a99057eed3491c6705190231406ce2177122c165681268628a74eeab9f2c90534b4fce19d6e831f574b4d45b95f6f44c8b9a7d63216a40e7ac7d301ab9
SSDEEP 12288:qvnIwbC4EMpqdeEsA1YtoOrRAJVqJXy/HRn4bMVMVPU6NvoodoyruJkgk0ERoUwK:qAwbhodeEssTKG/qtw+MquWty2uTUwCV
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Drivers/Win 2K-XP/PSCRIPT5.DLL

IMPHASH d8641aabc132deef2640ad0645b76355
SHA256 b7dc5b4336b30de08636bc212323c199065557a52af5460f6c96b2348b982c90
MD5 487f469e3f99ad8f2778070e4ce6faca
SHA1 a5a7e26394e165497541588b988f60ba690903c0
SHA512 a16a5b415dfd92f23d3f12610bc068b4ff6b81e87086adfe4f30a23748f9bb6397b64a73bc2f295cfff27f160381f094d9d171d60174a2aa64b37dcd22d05d9e
SSDEEP 6144:iq9RexnJTNennxmImLLQ4cnWI1SJIVnBeelogZTcH6nL0p5xPWGZui1kZRU7tVLo:iq9Kw+cnWI1SJoBtZa22LZuiGB+un
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

2

Major OS version

5

Entry point

140961

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

LoadLibraryExW FreeLibrary UnmapViewOfFile GetFileSize CreateFileMappingW SetErrorMode GetFileTime CompareFileTime GetLastError GetSystemDefaultLangID Sleep MultiByteToWideChar GetUserDefaultUILanguage RaiseException GetSystemInfo VirtualAlloc HeapAlloc LockResource LoadResource FindResourceW GetCPInfo HeapDestroy VirtualFree GetFullPathNameW HeapCreate SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess GetSystemTimeAsFileTime LocalFree GetCurrentProcessId GetCurrentThreadId GetTickCount QueryPerformanceCounter GetModuleHandleA GetProcAddress InterlockedDecrement InterlockedIncrement EnterCriticalSection LeaveCriticalSection GlobalFree CreateFileW WriteFile WideCharToMultiByte CloseHandle DeleteFileW GetTempPathW GetTempFileNameW LocalAlloc DeleteCriticalSection MulDiv InitializeCriticalSection SetLastError MapViewOfFile

msvcrt

malloc _adjust_fdiv _initterm free ??2@YAPAXI@Z ??3@YAXPAX@Z wcsrchr _wcsicmp qsort _ultoa _ltoa strncpy strchr strstr strncmp wcslen wcscmp strrchr _wcsnicmp iswctype _strnicmp isspace _vsnprintf atoi strtol _setjmp3 longjmp _except_handler3 ceil

winspool.drv

EnumFormsW GetPrinterDriverW WritePrinter GetJobW GetPrinterDataW GetPrinterW

gdi32

EngStretchBltROP FONTOBJ_pQueryGlyphAttrs FONTOBJ_cGetGlyphs EngGetCurrentCodePage XLATEOBJ_hGetColorTransform BRUSHOBJ_hGetColorTransform BRUSHOBJ_pvGetRbrush EngFindResource EngQueryLocalTime CLIPOBJ_ppoGetPath EngDeletePath FONTOBJ_cGetAllGlyphHandles STROBJ_vEnumStart STROBJ_bEnumPositionsOnly FONTOBJ_pvTrueTypeFontFile FONTOBJ_pifi XFORMOBJ_iGetXform PATHOBJ_vGetBounds PATHOBJ_vEnumStart PATHOBJ_bEnum FONTOBJ_pxoGetXform XFORMOBJ_bApplyXform EngUnicodeToMultiByteN EngTransparentBlt EngBitBlt EngEraseSurface BRUSHOBJ_pvAllocRbrush EngCreateBitmap EngLockSurface EngCopyBits EngUnlockSurface XLATEOBJ_iXlate XLATEOBJ_piVector EngLoadModule EngCreatePalette EngDeletePalette EngFreeModule EngDeleteSurface EngCreateDeviceSurface EngAssociateSurface EngComputeGlyphSet EngAlphaBlend FONTOBJ_vGetInfo

user32

LoadStringW GetAppCompatFlags2

mscms

InternalGetPS2ColorSpaceArray InternalGetPS2CSAFromLCS InternalGetPS2ColorRenderingDictionary InternalGetPS2PreviewCRD

Drivers/Win XP64/PDFR.inf

SHA256 eabf0550f8621e06e360c891380fe8b0e42dde1087b7a8b197ede7c668f1548c
MD5 563c33835417b5c5fa25d8709877b43f
SHA1 a96484f4e6ebeb784b1f4ef195afb7807b2c7fa4
SHA512 3412a1cd9bc70458bc4ce1fcbb536a43ec3a8751e0f34ec5a30287729a5f636833df892a35a5c21dbe63c25ac163a73aee80446d875e8d6f3c02c7d9c83d5a20
MD5 SHA1 SHA512

NSIS installer

installer

Drivers/Win XP64/PDFR_NST.PPD

SHA256 8f6dfdcb5b8ad37e142f4c2aa9fbb579262989b1f0940e9e38f4f93098e95e97
MD5 99c46db613b548698499625250e11d20
SHA1 4b4e84a11d1868fbe44146f9834758bb6c069577
SHA512 43a5475e98fb2280db747645216b0b407e53cb2b28747b22589926704d5d39a31ebb06a3f42031734a8a3cdd0eab05ddfd37f7be9de0db651df7ebdc5c9fd7b8
SSDEEP 384:Pxwx2xrBxsx3xmx1RkTcmdf0S2tkgir/YOHR2k5br4tNx3D1hI:PGgpBSVAnOTcmdsS2igk/YaR2MUtjfI
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Drivers/Win XP64/PDFreDirectMon64.dll

IMPHASH 3799b1b272f45b31ee1cbfe4b866e7cd
SHA256 ccd9cd62b9040d6012e52f5ade542ae171f9b5439f64f6e8965f0bab74c712f7
MD5 9f74cfa95bb9313a2c66a44f1b3bc9aa
SHA1 591449516e30f58072e1d1004f7728e64707b8f7
SHA512 4be233b16c18e37a775dff1a08bb83d8a876a7e5054c6d10af5e4b7b35a40cffd4e887581fc86eff4db578293ea84387a494bb2c945e58bae46278c59b16a3d4
SSDEEP 768:R2kGHwqKt64+DaKMLsJaDZI33nR0g6mtBRREQSnl87wueXGooLnJG8mrsl5:vGHwqhIq3R01mHRRwn2wuAQLJG8msl5
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

NSIS installer

installer

PE Signature issue

Digest

2c:b4:fb:72:3a:7e:77:ce:4d:6d:f8:c9:56:d5:ad:1a:d6:bb:d2:cd

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=EXP Systems LLC,O=EXP Systems LLC,POSTALCODE=67212,STREET=11058 W 1st Street CT N,L=Wichita,ST=KS,C=US

Chains

Jun 6, 2010

Minor OS version

0

Major OS version

4

Entry point

16544

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

user32

CharNextW wsprintfW MessageBoxW

winspool.drv

EnumPortsW SetJobW OpenPrinterW GetJobW ClosePrinter

advapi32

RegCloseKey OpenThreadToken InitializeSecurityDescriptor SetSecurityDescriptorDacl DuplicateTokenEx CreateProcessAsUserW RegQueryValueExW RegSetValueExW RegCreateKeyExW RegEnumKeyW RegOpenKeyExW

shell32

SHGetFolderPathW SHCreateDirectoryExW SHGetSpecialFolderPathW SHGetSpecialFolderLocation SHGetPathFromIDListW

kernel32

GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW SetUnhandledExceptionFilter GetLocaleInfoA GetFileAttributesW lstrcatW lstrcpyW lstrlenW SetLastError lstrcmpW GetLastError GlobalFree GlobalUnlock GlobalLock GlobalAlloc DisableThreadLibraryCalls GetEnvironmentVariableW CloseHandle CreateFileW lstrcpynW WriteFile Sleep GetExitCodeThread SetEvent CreateProcessW GetTickCount GetCurrentThread GetCurrentThreadId FlsSetValue GetCommandLineA HeapFree GetVersionExA HeapAlloc GetProcessHeap TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetProcAddress GetModuleHandleA ExitProcess FlsGetValue TlsFree FlsFree TlsSetValue FlsAlloc HeapSetInformation HeapCreate HeapDestroy SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW RtlUnwindEx QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection LoadLibraryA InitializeCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc HeapSize MultiByteToWideChar

Drivers/Win XP64/PS5UI.DLL

IMPHASH e1f98789494cfaf3672c4819b0953e47
SHA256 0cb93871ac27bafe1a2320d26328b7574b1f28aa96be8428493e11db4fc9509b
MD5 c90f38c0d18d3dab52c9274087239ddf
SHA1 dfe6bf418045205d4fd0fa2996a6c5cd262d3607
SHA512 c99c36ca8b34e8f56e473c40b70bc3875e0e3a04da5e9e4de03c1b46dfe9595bc39092ac7096a9ff087d4827aaf9c066c085a45b414171c755b343b00862c359
SSDEEP 6144:i4yx0xNTIuLIdqlf+9WqUin1KD3tgjvrCGtWzG0eV/g3gQh:4x0Luf9WltKr9tqT3F
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

2

Major OS version

5

Entry point

88560

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

ps5ui.pdb

msvcrt

wcstod iswctype _vsnprintf ??2@YAPEAX_K@Z ceil _wcsnicmp _stricmp wcsrchr floor _initterm _wcsicmp free malloc _wtol _strnicmp isspace ??3@YAXPEAX@Z memmove _vsnwprintf memcpy memset qsort _ultoa strncmp strrchr strchr

ntdll

RtlLookupFunctionEntry RtlCaptureContext RtlVirtualUnwind

user32

EnableWindow WinHelpW CheckDlgButton SetFocus GetAppCompatFlags2 SendMessageW SendDlgItemMessageW LoadStringA SetDlgItemTextA DialogBoxParamW GetWindowLongPtrW EndDialog SetWindowLongPtrW SetDlgItemTextW GetDlgItem ShowWindow CheckRadioButton LoadStringW MessageBoxW MessageBeep GetDlgItemTextW

kernel32

FreeLibrary SetErrorMode LoadLibraryExW UnmapViewOfFile GetFileSize CreateFileMappingW MapViewOfFile GetLocaleInfoW CompareFileTime GetFullPathNameW VirtualFree __C_specific_handler GetCPInfo GetFileTime FindResourceW LoadResource LockResource MultiByteToWideChar GetSystemInfo VirtualAlloc RaiseException GetUserDefaultUILanguage Sleep SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess TerminateProcess GetSystemTimeAsFileTime GetCurrentProcessId GetCurrentThreadId GetTickCount QueryPerformanceCounter HeapFree WideCharToMultiByte GetACP LoadLibraryW GetProcAddress CreateDirectoryW CreateFileW GetTempFileNameW MoveFileExW ReadFile LocalFree HeapAlloc LocalAlloc SetLastError HeapDestroy GetLastError HeapCreate MulDiv CloseHandle DeleteFileW WriteFile

winspool.drv

OpenPrinterW GetPrinterDriverW GetFormW EnumFormsW GetPrinterW DeletePrinterDataW SetPrinterDataW GetPrinterDataW DeleteFormW AddFormW SetPrinterW ClosePrinter

gdi32

ExtEscape EnumFontFamiliesW CreateICW DeleteDC

Drivers/Win XP64/PSCRIPT.HLP

SHA256 6faef4c998e810fff139958f28722c79879ec2fd66c97c7e3e2c5040fd5550d9
MD5 02c3f8c32018f3aaf66e7421400f1781
SHA1 a04f2e40287af78867161fa3f1606045088da212
SHA512 c30fee64d74a536117de46c81b6e22ec82634d1284783a317bc15e85cfd561fad7d50a63ca863ea6520b5cbaecf9061f7b52d3d99050484ce8a004f81dab7990
SSDEEP 384:uX0EppE1e80vvpyGf7t1ayKu0rtP1dOxjPp:uboUXpLB1+u0RP18xjPp
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Drivers/Win XP64/PSCRIPT.NTF

SHA256 3eb48a31bb8bfb34534ff6e251e9b97e29e8b8e3a4eaf6c929b026caced3498c
MD5 e45e03bdfbddcee4b6d62bc922ef24e7
SHA1 1873ec050afe6275e95df8b6a1a43098dccb9f25
SHA512 0dd54c060ca8b2fb676a14488dfeb30de9b0458a23aeb632c1bc4de54fc6b8066c86450a896726f04ca74bcecec03fac15c69a81ed17215b53501da57607f915
SSDEEP 24576:mEpbAtwjsRdpq5Ii/8AbQvd9R+3UfbdwTwTJg:zMqn8oy/nbdWwTJg
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Drivers/Win XP64/PSCRIPT5.DLL

IMPHASH 9a17e8f4c7f10c91bdf5db187b7fc58b
SHA256 3fcc5549e8f066ed53b3e082b7bf8c352534b481bab97fbb107a1dc1d5175a85
MD5 847ebd84e07f9b8438c97ea37efc7319
SHA1 d2cc1fa79c788c80122d4f8a3cf0ef463b8be070
SHA512 4f06394c8f64644be0478ba05108d4cc0c33459e487ae008c82d371853d8d82245e2beed4dfb52a751d3239b8c93fc23164d9ecf73760a50af9e678113d24947
SSDEEP 12288:awAUhRWMWDi/ZxVyv+j1H9aQFx1DfS2LZuiGBlu:a6OMWDi/Zxkmj1Hx35a2LYnzu
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

2

Major OS version

5

Entry point

206544

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

pscript5.pdb

msvcrt

malloc free _initterm ??3@YAXPEAX@Z wcsrchr _wcsicmp qsort _ltoa _ultoa strncpy strchr strstr strncmp memset _stricmp longjmp _setjmp strtol atoi ??2@YAPEAX_K@Z memcpy strrchr _wcsnicmp iswctype _strnicmp isspace _vsnprintf ceil

ntdll

RtlLookupFunctionEntry RtlVirtualUnwind RtlCaptureContext

winspool.drv

GetPrinterW GetPrinterDriverW WritePrinter GetJobW GetPrinterDataW EnumFormsW

kernel32

WriteFile CreateFileW GlobalFree LeaveCriticalSection EnterCriticalSection WideCharToMultiByte GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter Sleep GetSystemDefaultLangID GetLastError CompareFileTime GetFileTime MapViewOfFile CreateFileMappingW GetFileSize UnmapViewOfFile FreeLibrary GetProcAddress LoadLibraryExW SetErrorMode MultiByteToWideChar GetUserDefaultUILanguage RaiseException VirtualAlloc CloseHandle HeapAlloc LockResource LoadResource FindResourceW GetCPInfo __C_specific_handler HeapDestroy VirtualFree GetFullPathNameW HeapCreate HeapFree DeleteFileW GetTempPathW GetTempFileNameW LocalFree LocalAlloc DeleteCriticalSection MulDiv InitializeCriticalSection SetLastError QueryPerformanceCounter GetSystemInfo

gdi32

EngCopyBits EngAlphaBlend EngComputeGlyphSet FONTOBJ_vGetInfo FONTOBJ_pQueryGlyphAttrs FONTOBJ_cGetGlyphs EngGetCurrentCodePage XLATEOBJ_hGetColorTransform BRUSHOBJ_hGetColorTransform BRUSHOBJ_pvGetRbrush EngFindResource EngQueryLocalTime CLIPOBJ_ppoGetPath EngDeletePath FONTOBJ_cGetAllGlyphHandles STROBJ_vEnumStart STROBJ_bEnumPositionsOnly FONTOBJ_pvTrueTypeFontFile FONTOBJ_pifi XFORMOBJ_iGetXform PATHOBJ_vGetBounds PATHOBJ_vEnumStart PATHOBJ_bEnum FONTOBJ_pxoGetXform XFORMOBJ_bApplyXform EngUnicodeToMultiByteN EngTransparentBlt EngStretchBltROP EngBitBlt EngEraseSurface BRUSHOBJ_pvAllocRbrush EngCreateBitmap XLATEOBJ_iXlate XLATEOBJ_piVector EngLoadModule EngCreatePalette EngDeletePalette EngFreeModule EngDeleteSurface EngCreateDeviceSurface EngAssociateSurface EngLockSurface EngUnlockSurface

user32

GetAppCompatFlags2 LoadStringW

mscms

InternalGetPS2PreviewCRD InternalGetPS2CSAFromLCS InternalGetPS2ColorRenderingDictionary InternalGetPS2ColorSpaceArray

EULA.txt

SHA256 eb07ec52c4c3354e01f35dd8c639e4d5650fc6d1bf2604eaa9b137dcd4b5aee6
MD5 9d170a72e12b52218ea6bae73b1c80d6
SHA1 abffe2d09471683359f89f1e1c8229ddf58a9c50
SHA512 6306d4bde7c217272d54619b5ee100a4d7523f5797271ccda0b1eed8eaa25aec62da3b9fc017377e83165eae36e23b6a4d0445ea676c6a144c9789fd6bf091a8
SSDEEP 384:2wk9ypiq9+Ke5q2PmwERb6k/iAVX/dUY2ZpEGMOZ77o0nJyB8nGd75:ATRzun1iYWrTXo0nfG/
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

History.txt

SHA256 2fa08a6ec468b4f3eb4b640f81fe29e493890c365b8ae2f07602dc043c7be6b0
MD5 b9047a7a36150903c85f811c770426aa
SHA1 bc84e835602b93d73fec1877382a914e0d9156c6
SHA512 35e9815f6009797247a8ab0128407016926c7998858a9e24e104d1fcddfe97e64e49c032afa6749eb93bf0e9414fa97be0a3968bc6cc77068b3cb9190f907d5d
SSDEEP 768:x4k3C2kcHcE6rMsgvPQ2151SZNNlQMuaTk4USYQK4F:3y2jHcE6cvPb1yNNlQMFOzV4F
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Language/Chinese Simplified.txt

SHA256 f23fe487dea1a44a2600ae47c73cb81283cf723c991ef23ca48b10246f52174d
MD5 c84325b546837f6875881eca6da08d67
SHA1 c55a3e7ceb9e577d2d10615fca7859e528cbbfef
SHA512 1f664ac2aefa8f3e230be1f8921fbca2009f08f1c89f3c288cc0228ed0c26038a21add637a874948950dca9433975f867735896bc763dba78131654b470d4ee0
SSDEEP 384:Wuge9nC1/Px4ep3QOeAN9NuuvuXaNcypGUDsicMS2:GWGqej9FuXaNF5sE
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Language/Czech.txt

SHA256 bbc576f0c2e47eb01bb38064d0b7ae316898a892913d03a29488e5786c2a29cc
MD5 ef3f95ef1bd0d7cfd0df165fa5b79226
SHA1 9f7b11ee6cb378c141c9f6c4fb33c927ffdaacce
SHA512 8cedabbe37aef24763b229d5226de6ab729d1bb8f6e84ec9ea2c754ec776931dea78346381db6048506fcef98a8f3499313ed47ef73372e49d02814eb1a8d69f
SSDEEP 384:W3DUjonvjXfvrih/p2nYxXSpliDawbZ7YjvxJtP4UdvpRNo+biA0/Yri0nxNKrmz:WQiHpY9SplYevxJtPpGF/r0nxSb9R/dU
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Language/Deutsch.txt

SHA256 d7c441015869ef2fc0969f1cd009700ff8d7a1a31da4bd5fa54609aa9194f98e
MD5 41ef856aad6c423fef746e08d2b65c40
SHA1 dd8e592f173ed77cdf7b562d02bc28b39e0782ba
SHA512 a04ef74765c99d44e1dc0b4b782c0e73ad78a09850ee02ec631aec68eef84c182df8dc01ff6eef321393645ed1c07525f7181ab81165a6bde0f1bf4ef56b0377
SSDEEP 384:0kG2IX/Zd4vdpVa2d8DONiyb7c3dxemiTxCeWO0pMjDufNUsFwP:0j/D41pE2yDH6c3/enTxb6pqDkFU
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Language/English.txt

SHA256 5b76bacff22c8f57e8aa2c3269786e3f4fcfa5eb2585d834087ef491c884c724
MD5 cab193a1ae4a808221a7598e4c551ccd
SHA1 beb8287515dd5f3e7081607ace62b4a08532e479
SHA512 5b0d463138beed4c4b43e2a1b037e4e3f74743aab374faa60735fc9afc07e733c4fe5e6f4f25bf3ae884bdcad65284a97fa763ff3b84a2512f1b8f3920837ebb
SSDEEP 384:CCePmfm9JJtx1zJ++Cm2vWbhFuN8SCdd0mMpr/90bprqG29yAJBUM:JeP5ztx1z5Frd+FKFqG299
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Language/Espaol.txt

SHA256 8de05f76afe9c3c8a8d39aaba5f6bc3100c9489c7769b6f2e036d5932583d8be
MD5 c3d77822bca259d7b9ff284ff2b5f5a5
SHA1 6b828de437f74049fbe307eb01ee6dca8d357b95
SHA512 e7cfbcd1f25c028d5dd4a261ccd1e6fb80e90b49e757f22aab9c3af9714686d40a51490f1e5c226d5fffed9d30acdbdebca962eaceabf23cf55e020f07b711b8
SSDEEP 384:5BjUrMmyl6JNiqmLOv4T2K2h+xPw2OiqU8Et50iH9ZZSYffqE:5B+liJLOvywhU8Et50mTZlqE
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Language/Francais.txt

SHA256 de708b4da9e8bc78e8655f3d219443313ed6223ec67e272880f1cfa17b4512ff
MD5 9c25ad047fb51cbcc9e1a80cffb4f8f2
SHA1 608295f83219206e10d34a46ab89250320515d1e
SHA512 9e2669d9e8da0c4b59d6a20221b91d300a151e14f2062b2bc73f76c8b8ee9dcd7fe4dd562cbd4cd8f64a348a91b1a07c13f8e33ad76f5248601593a8ee2c56b6
SSDEEP 384:bbzQDoGOKyjXgze2JhTrWV0YYQstVgBJteENi7F3RqWijV7jI5LjL6V48dCInc:bbWnOKcWDT+UF3RqWijK5z6V48dNnc
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Language/Italiano.txt

SHA256 888889d6427cd2b74eea87e1d58d62b0678098eda01209c859e132f787cb3b82
MD5 5f12a8383126fc4abd00cd5f820f11e8
SHA1 293f4b8154b9bff0502cd39c2d7909e094962024
SHA512 e81316acc68777d7a4516d08f888acd05eb371c540b05d25aa81bc6f6c89b294bc194ee13e722daa49e18142f56c2517ad6a623de848ba2d247d2e1ac6cc91ca
SSDEEP 384:6V6M3b4k1oIxTcQVc/W0clW63n/ESZM7CmI/i8xAOeTltNBYhmtZt2kCBG:Zvk1RxTIIY63n/rM+T/txAvTltMhTkWG
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Language/Japanese.txt

SHA256 954175c174aa9d3cd9bcf4d83127bdd5dcb103db66da268ae75b7737ed3e82e0
MD5 65319c20971a39a3251fa509f677182b
SHA1 2b8c6ced5e2a53afac3fdf7bd47afd2a9d37e782
SHA512 500d3e90f1009339111a4a966f7b4b5101c89271801c09f77877a31e492d73131564357a2f8e955839d2a7ab66a4369d27f17ed46e741549b520d16617ffa51d
SSDEEP 384:SEFT4eQcWjz8AtYG8ng96BxboM2GTzKqa8vrjGO4AmEgOE13XoQ:SIT4e5e96s3GvKqa6Hd491noQ
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Language/Magyar.txt

SHA256 31a13287acbc6253d0369998f4f2a2c792f759f89b2611c80d4ed292848d759f
MD5 53919dab3c08ec775f4480a7bbeb857f
SHA1 dceaee4ab208a6fd8f73e4fd44d776602b3706b6
SHA512 a54454b3ef3bb25c138733d6eb5254ce5b7618d8662aac1ed2f5cdaaa2fa2aa8c444def0c6632c7c5d7f25acefbbdfe8d0dd10d33a131ef5bb08a6b7fa60c328
SSDEEP 192:k+rYKWBu6PPEmKrM0P9tloQe8WD7xL+yhVxz6N40V49mydJrHca+vVNSstVHchFa:kxYK8rAwavxL77ldlHmVN78+wAgZu
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Language/Nederlands.txt

SHA256 afe90c583631c2673afb866e836928ddaf1a4557a5834c0e40c93ced059a506f
MD5 c9eee0bb8052dc894a5708a9df14cc96
SHA1 14883d672c86bc68bf46a69fa5f745572a9d6117
SHA512 fcee4174b11ad98aaf5904dd7f60f34ae854a02950d92c58f8da7b607333d73092cd29c8c11ce63bf7671d2d87bb44dc5e143e18874acbaa2720b10233617ec4
SSDEEP 384:d1rVsxtLIeY7Cp5bREqU5SMs6JdExtV00xXYAI6H+JOcbzQMB9uHLTDkcCi7lBng:HCL8eREqsTOx4HgOOcjBIH3QcCi7Xg
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Language/Norwegian.txt

SHA256 bcc55ab62f1462d74d1d17dbd77a4efe30ed96cfbbc8c26a225338c53debb9a1
MD5 1bae46b2dad43883544b67213b8cb86b
SHA1 d279b5069c2b58b56bf6a343dea26471e6a76f3a
SHA512 da5038290f51d6e5c129a1ca01ef86fe618ec168876ec59d71d1be8c214a66614f9252dad2806224e05a03dc3a8aa0b90273dbbbc9f0ed7ed49be06007cd1095
SSDEEP 384:QiGgOdRfyn/4tysc24z/Xw/NKiKn4L4WtQ7JNL5cmvdqTYkCErizJLThNGpE:pGgai24zsNKrrb+WJ/Ph
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Language/Portugus-BR.txt

SHA256 9a3d48d687dfda36511877003c94645b72d4826c9232f64fd0a9fc46daab0554
MD5 89e98f7e8cda2a8d55ff823ec7001131
SHA1 30012b70553f3f06664feeaa358ef9a472b2ef29
SHA512 c08f7746a018d2d26a1b438f819ae55aaa008d93646f9f4408c6acdb956b636e0e4e0b43aee8c0f05ce75b257ddf438ae4af63aafab4cefb9cb2e2e7dd0d150f
SSDEEP 384:NYVq/bcreaQPY1piK8OM5FIToaeZHDSnUoeuZrHKgkCSfrSYEF44LzYI5DNi25Vk:NYlCns27naeZjSnUArTSfrSTr5pi25lg
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Language/Portugus.txt

SHA256 7b6a3ff8b4b6934232f2aa2d73bf0910af726fc2f95c331379d640c719f40618
MD5 c3b7301171307c48148e85734bab2b75
SHA1 2a11becbe88ab4d0dac1dbf8ecafce019f53c933
SHA512 98c9c02ac17ab6f8b5bca65076d3cd9c63f0917f22953ec8446b810398df0dbf0ea216d737b9eac48d593ca776acb2f3a6e29b7677078a8161a2661cc5bae471
SSDEEP 384:XBrq/b3voQPG1ri6k0IDaeTveuDZ+e7frdAfEFyzzBCDNeeYpkE2jr2D8iTv/dHP:XBeZCNYaeTVB7frd0FCpa2jrOv/dv
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Language/Swedish.txt

SHA256 320019a75663ba5ab1dd42794375e5d9ff36b38b14e2934452d2c91573a38e6b
MD5 cf07e1b6052b5d5872bd37c66f135edf
SHA1 fde38c01f8a123accc5a5a5ccf86ffa87c240665
SHA512 f8f1fab58defc9abe565bd31aa9ef5a6c52baf5810a4d2956e69fb0367bc701e8e577658e3c98c48b4b58ee5f02180085dba2a54d25919a149127a905f2ba8f7
SSDEEP 384:e4XJECW7qAqBR3fPGMYSLksiKRbF4RcU/ia3yv433YPr2KakuynhgXhCjCgPtLoe:rSCWeVROSROcIC9+wSXUjRaHQ00
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

MSMAPI32.OCX

IMPHASH 39c0caf76678c314404f857483758f24
SHA256 60e841057cbbf33e10c5169cc328330d11838636002670cb9e8a7a09bab321ab
MD5 d329085a88a9019ed5700c0f04b3176e
SHA1 ab504f7cc07889057513f4916248bd4910360090
SHA512 badf8a50f78c8cb08538ae47c1fd660baa6dda6276dc355e3141b3a202b5041e9a685241935de597eb93a9caf1ab08099c686ad203ea79d7a37796bef5212b2a
SSDEEP 3072:R80WAViXxnCcg9t52SUF/V6MkWJtR7Zd/zDQJw+BF5E7gW0jfrx:R89iiXxnG527kytRNdDYa8x
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

N/A

Digest Algorithm

N/A

PE Digests Matches

Not matched

Trusted

Not trusted

Minor OS version

0

Major OS version

4

Entry point

4676

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

kernel32

lstrcatA GetModuleFileNameA GetWindowsDirectoryA GetLocaleInfoA InterlockedIncrement IsBadWritePtr GetFileAttributesA GetVersion GetLastError LockResource LoadResource FindResourceA CompareStringA CompareStringW DisableThreadLibraryCalls GetProcessHeap HeapReAlloc lstrcmpA LeaveCriticalSection DeleteFileA EnterCriticalSection InterlockedDecrement lstrcmpiA lstrlenA LoadLibraryA DeleteCriticalSection FreeLibrary HeapFree WideCharToMultiByte lstrlenW HeapAlloc InitializeCriticalSection SetErrorMode GetProcAddress lstrcpynA lstrcpyA IsDBCSLeadByte MultiByteToWideChar

user32

ReleaseDC PostMessageA ClientToScreen CharNextA GetDC GetActiveWindow EqualRect GetWindowRect GetParent ShowWindow PtInRect OffsetRect IntersectRect LoadStringA WinHelpA SetWindowRgn GetClientRect IsWindowEnabled IsChild GetKeyState CreateDialogIndirectParamA LoadIconA DrawEdge DrawIcon LoadCursorA RegisterClassA GetSystemMetrics SendMessageA GetDlgItem SetDlgItemTextA GetDlgItemTextA MessageBeep MessageBoxA GetDlgItemInt IsDlgButtonChecked CheckDlgButton SetDlgItemInt SendDlgItemMessageA GetWindowTextA BeginPaint SetParent DialogBoxParamA EndDialog SetWindowPos IsWindowVisible CreateWindowExA DestroyWindow SetWindowLongA UnregisterClassA IsDialogMessageA GetWindow GetNextDlgTabItem wsprintfA RegisterClipboardFormatA SetFocus MoveWindow DefWindowProcA EndPaint GetWindowLongA

ole32

CreateOleAdviseHolder CoCreateInstance CoTaskMemAlloc ReleaseStgMedium CoTaskMemFree

advapi32

RegEnumKeyExA RegQueryValueA RegOpenKeyA RegQueryValueExA RegDeleteValueA RegDeleteKeyA RegOpenKeyExA RegCreateKeyExA RegSetValueExA RegCloseKey

oleaut32

OleCreatePropertyFrame VariantClear SetErrorInfo UnRegisterTypeLi LoadTypeLi LoadTypeLibEx LoadRegTypeLi GetErrorInfo RegisterTypeLi VariantInit SysFreeString SysAllocStringLen SysAllocString VariantChangeType CreateErrorInfo

gdi32

DeleteDC GetWindowExtEx GetViewportExtEx SetMapMode LPtoDP SetWindowOrgEx SetViewportOrgEx CreateDCA SetViewportExtEx GetDeviceCaps SetWindowExtEx CreateRectRgnIndirect

OSSMTP.dll

IMPHASH 582b7ed30531014d17900c13b6bed803
SHA256 572aa5f4204aa9603f108fdfbd902c87ebcddf644d6d110384a7d1598ebd8c54
MD5 05718ecf0a354c545ac367e0dd0d55cf
SHA1 f988182f679981b8a671e822d1b8a8ba217e72cc
SHA512 039f32186b75890fe51551f260b5c95d17514a19e0d897bcd800afdb9e415869285048cead7d067952e66520ce148a90f6b406ec1d4d5ad2c09f2a983bd48089
SSDEEP 1536:RJzd74FPG/DQnnot6mlvWoZB2nWgxgtkJ14Z1uT1:RJZjLQnnAj+nWgpfc1up
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

6688

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

msvbvm60

__vbaStrI2 _CIcos _adj_fptan __vbaVarMove __vbaFreeVar __vbaAptOffset __vbaStrVarMove __vbaLenBstr __vbaFreeVarList _adj_fdiv_m64 __vbaRaiseEvent __vbaNextEachVar __vbaFreeObjList ord516 _adj_fprem1 __vbaRecAnsiToUni __vbaStrCat ord660 __vbaLsetFixstr __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryDestruct __vbaExitProc __vbaI4Abs __vbaObjSet __vbaOnError _adj_fdiv_m16i _adj_fdivr_m16i __vbaVarIndexLoad ord520 __vbaForEachCollVar _CIsin ord709 __vbaErase ord632 __vbaChkstk __vbaFileClose ord526 EVENT_SINK_AddRef ord528 __vbaGenerateBoundsError __vbaStrCmp __vbaGet3 __vbaVarTstEq __vbaAryConstruct2 __vbaNextEachCollVar __vbaI2I4 DllFunctionCall __vbaRedimPreserve _adj_fpatan __vbaFixstrConstruct __vbaRedim __vbaRecUniToAnsi EVENT_SINK_Release ord601 __vbaUI1I2 _CIsqrt EVENT_SINK_QueryInterface ord710 __vbaExceptHandler ord711 ord712 __vbaStrToUnicode ord314 ord606 _adj_fprem _adj_fdivr_m64 ord315 ord316 ord608 __vbaFPException __vbaStrVarVal __vbaGetOwner3 __vbaVarCat ord645 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaNew2 __vbaInStr ord648 ord570 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy ord681 __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord685 __vbaVarTstNe ord101 ord102 __vbaI4Var ord103 ord104 ord105 __vbaVarAdd __vbaVarDup __vbaStrToAnsi __vbaFpI2 ord616 __vbaVarCopy ord617 _CIatan __vbaStrMove __vbaForEachVar ord619 _allmul _CItan ord546 __vbaAryUnlock _CIexp __vbaFreeStr __vbaFreeObj ord581

PDF reDirect Help.chm

SHA256 801d8605f3f461d9090afd9ad73374b7690fb21229ce661986ae421059b64432
MD5 870d960579f38f5456f9be3711b372e1
SHA1 6f6f0f3d4fb7cc0f06fa1491408c2b3bf6951131
SHA512 488dd142d2c249c57cdd63b94d1d59950e7190d177bbb1810dd121b18af5ea0ad252f2ea1a3c103ed23664fbee94c2635d8578fc050a1710f8e3b9056f938d8c
SSDEEP 49152:9Ix2FztZ1z9wDZvlC+nm7v7+1k1IVH6FcJJ9I:EQztZ19wD3WYbi8K
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

PDFR_Printer_Cmds_v25000.exe

IMPHASH c0cda4706c71c644bf72db0e68ca1feb
SHA256 d9a174775710b606c25d160d1f859e9f7f9a67fecc3612627bf7cd1a3039434f
MD5 c0ce60a08b267f102b8cabb882f3ea0e
SHA1 fa819a99e432c9b6f8cdbf63dfbd5ab36f5ba3a0
SHA512 23b0d8b64be9b938ff0e3b16b6256269dc66b3a8d1a4ba6c05a090fc8b8004b227fb3c3da23de66f354745aae301ff00d5d4980e09be180567f6baee695aa62d
SSDEEP 1536:bKfjvC6V9VN1fKXMiboLtQzAPwMw7xKhlmM:uLvCnNoLtQz6jw7xKeM
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

44:e7:b6:a1:53:a0:2c:6c:eb:99:71:c0:f6:46:08:fd:19:43:2e:87

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=EXP Systems LLC,O=EXP Systems LLC,POSTALCODE=67212,STREET=11058 W 1st Street CT N,L=Wichita,ST=KS,C=US

Chains

Jun 6, 2010

Minor OS version

0

Major OS version

4

Entry point

6660

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaStrI2 _CIcos _adj_fptan __vbaStrI4 __vbaVarVargNofree __vbaFreeVar __vbaLenBstr __vbaFreeVarList _adj_fdiv_m64 __vbaFreeObjList ord516 _adj_fprem1 __vbaRecAnsiToUni __vbaResume __vbaStrCat __vbaWriteFile __vbaLsetFixstr __vbaSetSystemError __vbaRecDestruct __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryDestruct __vbaExitProc __vbaOnError __vbaObjSet _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i _CIsin ord631 ord525 __vbaChkstk __vbaFileClose EVENT_SINK_AddRef __vbaStrCmp ord529 DllFunctionCall __vbaRedimPreserve _adj_fpatan __vbaFixstrConstruct __vbaRedim __vbaRecUniToAnsi EVENT_SINK_Release _CIsqrt EVENT_SINK_QueryInterface __vbaExceptHandler __vbaStrToUnicode ord606 _adj_fprem _adj_fdivr_m64 __vbaFPException __vbaStrVarVal __vbaUbound __vbaVarCat ord536 ord644 ord537 ord645 _CIlog __vbaFileOpen __vbaNew2 __vbaInStr _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy ord681 __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord685 ord578 ord100 __vbaAryLock __vbaVarDup __vbaStrToAnsi ord613 __vbaFpI4 ord616 __vbaRecDestructAnsi _CIatan __vbaStrMove __vbaStrVarCopy ord650 _allmul _CItan ord546 __vbaAryUnlock _CIexp __vbaFreeObj __vbaFreeStr ord581

PDF_reDirect.exe

IMPHASH 3e695e68ab157390ffbf011df7b4e776
SHA256 57d0ec3614255db2a79f49142d057ee1b5f67a5144b8698b00ecfbe2dd91a121
MD5 b2196e1528e8943036a29503e953b318
SHA1 97ff898e279dda9826f2f315c3b7de5cf2210b6f
SHA512 5dbc69d55d5b74354928c19441d37a1b3e41df4b9c984ccad8bc9e39b49bcf6954d1b3cac2358dc6757fb4fcf0a39fff09da7106f0403bc5f0ccc36eae6f8ed7
SSDEEP 49152:559iWuYRzSOmYHSu8rTug7XQzgcsZMxAd:5mZYj8rTug7XQzgcsZMxAd
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

9d:77:13:2a:9c:6c:fc:d3:24:90:a6:43:eb:64:05:0b:19:e5:51:54

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=EXP Systems LLC,O=EXP Systems LLC,POSTALCODE=67212,STREET=11058 W 1st Street CT N,L=Wichita,ST=KS,C=US

Chains

Nov 20, 2010

Minor OS version

0

Major OS version

4

Entry point

36168

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarSub __vbaVarTstGt ord690 __vbaStrI2 _CIcos _adj_fptan __vbaVarMove __vbaStrI4 __vbaVarVargNofree __vbaCyMul __vbaAryMove __vbaFreeVar ord588 __vbaLenBstr __vbaStrVarMove __vbaLateIdCall ord696 __vbaPut3 __vbaFreeVarList __vbaEnd __vbaVarIdiv _adj_fdiv_m64 __vbaNextEachVar __vbaRaiseEvent __vbaFreeObjList ord516 ord517 __vbaStrErrVarCopy _adj_fprem1 ord518 __vbaRecAnsiToUni ord519 __vbaCopyBytes __vbaResume __vbaVarCmpNe __vbaStrCat ord660 ord553 __vbaWriteFile __vbaLsetFixstr __vbaSetSystemError __vbaRecDestruct __vbaHresultCheckObj __vbaNameFile __vbaLenBstrB ord663 __vbaVargVarCopy __vbaLenVar _adj_fdiv_m32 __vbaVarTstLe __vbaAryVar __vbaVarCmpGe __vbaAryDestruct __vbaLateMemSt __vbaBoolStr ord593 __vbaForEachCollObj __vbaExitProc __vbaStrBool ord594 __vbaOnError __vbaObjSet ord595 ord596 _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord598 ord520 __vbaForEachCollVar __vbaStrFixstr __vbaBoolVar __vbaVarTstLt __vbaBoolVarNull _CIsin __vbaErase ord631 ord709 __vbaVarZero __vbaVargVarMove __vbaNextEachCollObj ord525 __vbaVarCmpGt __vbaChkstk __vbaCyVar ord526 __vbaFileClose EVENT_SINK_AddRef ord528 __vbaCyI2 __vbaExitEachColl __vbaGet3 __vbaStrCmp ord529 __vbaPutOwner3 __vbaVarTstEq __vbaAryConstruct2 __vbaCyI4 __vbaR4Str __vbaDateR8 __vbaObjVar __vbaNextEachCollVar DllFunctionCall __vbaVarLateMemSt __vbaVarOr ord670 __vbaFpUI1 __vbaCastObjVar __vbaStrR4 __vbaRedimPreserve __vbaLbound _adj_fpatan __vbaR4Var ord568 __vbaFixstrConstruct __vbaR4Cy ord569 __vbaLateIdCallLd __vbaR8Cy __vbaRedim __vbaStrR8 __vbaRecUniToAnsi EVENT_SINK_Release __vbaNew ord600 _CIsqrt __vbaObjIs __vbaVarAnd EVENT_SINK_QueryInterface __vbaStrUI1 __vbaVarMul __vbaStr2Vec __vbaExceptHandler ord711 ord712 __vbaInputFile __vbaStrToUnicode ord606 __vbaDateStr _adj_fprem _adj_fdivr_m64 __vbaFailedFriend ord714 ord607 __vbaI2Str __vbaVarDiv ord608 __vbaVarCmpLe ord716 ord531 __vbaFPException ord717 __vbaInStrVar __vbaGetOwner3 __vbaStrVarVal __vbaUbound __vbaVarCat __vbaDateVar ord535 __vbaI2Var ord536 __vbaFileSeek ord537 ord644 ord645 _CIlog __vbaFileOpen ord648 ord570 __vbaNew2 __vbaInStr __vbaCyMulI2 ord571 _adj_fdiv_m32i _adj_fdivr_m32i __vbaVarSetObj __vbaStrCopy __vbaI4Str ord681 __vbaFreeStrList ord576 _adj_fdivr_m32 ord577 __vbaR8Var __vbaPowerR8 _adj_fdiv_r ord685 ord578 ord100 ord579 __vbaVarTstNe __vbaI4Var ord689 __vbaVarCmpEq ord610 __vbaLateMemCall __vbaAryLock __vbaVarAdd __vbaVarDup __vbaStrToAnsi ord613 __vbaFpI2 __vbaVarLateMemCallLd __vbaVarTstGe ord616 __vbaFpI4 __vbaVarCopy ord617 __vbaR8IntI2 __vbaRecDestructAnsi __vbaLateMemCallLd _CIatan __vbaI2ErrVar __vbaStrMove ord618 __vbaAryCopy __vbaCastObj __vbaForEachVar __vbaR8IntI4 __vbaStrVarCopy ord650 _allmul __vbaLenVarB __vbaLateIdSt ord545 __vbaAryRecCopy _CItan ord546 __vbaAryUnlock __vbaFPInt _CIexp __vbaI4ErrVar __vbaFreeStr __vbaFreeObj __vbaRecAssign ord581

Stamps/APPROVED.ini

SHA256 dbedcdc648853c05b89a8ef741e7da0684ba181abfcf0ba720c2410e68458cc7
MD5 64cd9f08e0249024c4f6d107220ef0ec
SHA1 5ac722cf6cb212154bb738933cbe0fe06f9ff1c1
SHA512 7b6a55c05d2b58dc44876d52235e1700bc23eeae260e7a89b3413d62047d8147e870c632b43d25ecb6cb0524c99e1dbfe40db383d0f1006d01aae2a090be8069
MD5 SHA1 SHA512

NSIS installer

installer

Stamps/APPROVED.pdf

SHA256 7025adb480253228d921d8375eb5c8c748904a6229783c2283964db2b71dae77
MD5 e80189805217c2895e6485c43dca469f
SHA1 ef1728dd6c33be4dbc513d121aa6da354266c5d7
SHA512 95f5391d6eac025efc44d5c1719fdedaabf93d32f72f40a25c9df97d2343cdbb87a642ad2e6f499ad5e4ebea037e6cca9ec929352ce5de464c0afeae230a7734
SSDEEP 96:lBxFTRl1SB3Pba/PAOPpm3haBW/84py/N6XVXVUiF2fJusS3TTU7Hfes:bbTRWPOXBPAz8wy/N6llxF3sskzp
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Stamps/COMPLETED.ini

SHA256 dbedcdc648853c05b89a8ef741e7da0684ba181abfcf0ba720c2410e68458cc7
MD5 64cd9f08e0249024c4f6d107220ef0ec
SHA1 5ac722cf6cb212154bb738933cbe0fe06f9ff1c1
SHA512 7b6a55c05d2b58dc44876d52235e1700bc23eeae260e7a89b3413d62047d8147e870c632b43d25ecb6cb0524c99e1dbfe40db383d0f1006d01aae2a090be8069
MD5 SHA1 SHA512

NSIS installer

installer

Stamps/COMPLETED.pdf

SHA256 b6ab48f976660a15d5d13035cc8f7a73893151272d4f909fbad5f24355d6c088
MD5 db98d0bfd15b91a4909e3c27e407702f
SHA1 092b11fb71bb4d47d8e16c634d360f3315bf81ea
SHA512 1aac8e88f79c2db9575e287597c0e97be48282e1db55dee245b7c1f77bc29a76fc729da4519f6e3349d60f937a5a3e7e342f3669039f254aa5a140ae10902f0e
SSDEEP 192:xJuuPp5YXEQquWHR8wy/dqR6uDHQlhnwib:xJuuPp5YXEQo7y/S62QlTb
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Stamps/CONFIDENTIAL - Yellow URH.ini

SHA256 f60222fd3a2c14ac78540e90032e2be0f30a409d20bc8b7b388d65ca90753f6f
MD5 0d9fb0049a3ab046883857ab7724e9a4
SHA1 6f55d2b6cbd0f3d692b8cf72a39fb80e6569e4d6
SHA512 0a562648b0036e57f9c819e6af06e3b9b2e6d084cfa4c300a0c0c70eeaa80fb4c37cfcf2b02d8618847f2f4ffee69e2ca932780f6bf22350dae75338c627d3e3
MD5 SHA1 SHA512

NSIS installer

installer

Stamps/CONFIDENTIAL - Yellow URH.txt

SHA256 21c673aebd3d761e69dda0665b2c79b1c1c81938415fa23cee58e2bc12c27ccf
MD5 822d2f02af5e8a77630f7ebf0eb7a60d
SHA1 7b786c5944acf32186b97e2dfdb3f7c63a2ee6a5
SHA512 db4c8e1bdbef5c38645e39572146575588935fdd1aaa88dea1642f890a454666b3452afd5e0c57aebb2c76d46ab77038633a2a726e8fe764129e5913021b2c4f
MD5 SHA1 SHA512

NSIS installer

installer

Stamps/CONFIDENTIAL-Text.ini

SHA256 9ee45ea4f6b8336eea2297085eab1853cd86bba62cd1d00106a5730e7405bbae
MD5 7502aec3ba53cfc848ecd4981c51df47
SHA1 b08950505fae8e4101325964d78ca6cc4ae74426
SHA512 3606e53208eb5ce436f3d69121727313d3eda3979d2111fa37c1d7e42ab0b671e17e957e58865aa59c861b7f1880412f88b1856e9f4dd01fb9b7baf9162d3875
MD5 SHA1 SHA512

NSIS installer

installer

Stamps/CONFIDENTIAL-Text.txt

SHA256 d1c718e4a92fb4068cbf90cff0787cb3bd257283feceedae6976d4ae83ffd594
MD5 4af472eba078bd633d9842219c942e23
SHA1 9d3081bfb064e1ad7801ef3e988dca681951c239
SHA512 dd7cf18966ccbe5c29cfbea37ab1cfe7f3149d789454de4741b0f6709fd5f8aaa110d61bb8267faf22808866d19ca33d72bc55621a14bcf26a3b75f251e900e8
MD5 SHA1 SHA512

NSIS installer

installer

Stamps/CONFIDENTIAL.ini

SHA256 dbedcdc648853c05b89a8ef741e7da0684ba181abfcf0ba720c2410e68458cc7
MD5 64cd9f08e0249024c4f6d107220ef0ec
SHA1 5ac722cf6cb212154bb738933cbe0fe06f9ff1c1
SHA512 7b6a55c05d2b58dc44876d52235e1700bc23eeae260e7a89b3413d62047d8147e870c632b43d25ecb6cb0524c99e1dbfe40db383d0f1006d01aae2a090be8069
MD5 SHA1 SHA512

NSIS installer

installer

Stamps/CONFIDENTIAL.pdf

SHA256 8eb01a010b01d55d59f906b9fa63e9e8e8c1cb73ed36cbb2800983e7b72f8ec3
MD5 3715ac43f4db3c4ffdead812334218a4
SHA1 e1818bfa30fc53211bb17a72dea6f29b2959f1d8
SHA512 dc997e97ebadc152b6f2c5743db51d79e82ad9c002ff23f0e8790924a174a1f9fcd110dde5692dbe113926aadbd6b87c4ff4b784d2df6ff9ba64161510623293
SSDEEP 96:ldAjFj4TzkqS2lFoc74TZyW/84pW/flY25Vzb4M5fFm2z77/qLHJG:7A2XY4oc0T/8wW/fKKf4MGgh
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Stamps/DRAFT - Text.ini

SHA256 54869a510f14ab82b37fb942bdaaddba85ed9dc3a4de605d666381f23a178e01
MD5 dab853ed47064398c1aa18a1d6c8a418
SHA1 f911a0bd58caedfccfb1a2f98a07523fa5281bc3
SHA512 0eef3f222a360205d62bef2fca2f14ecba91922ba1736020abb50253b23822739a45bf865b33dafebd5e5918b2ffd346a9662597c6a6fc1b73872611609ef29a
MD5 SHA1 SHA512

NSIS installer

installer

Stamps/DRAFT - Text.txt

SHA256 36ed575d9bd502f7a5ea95c30d4fdc48dfa59e92ef5e10316c71cf40a2e51812
MD5 0e1791ca5444e2786f9705207fafea26
SHA1 6a5be102a686dc3771d1c83cbe42ae22646cdd64
SHA512 07fb228eb3cceb63f000d48ab7c9139f0a6e7b9063066ea6d37e6abd31940b9c01619245d623a3f3ce7fcaeb942228e932fafed3bdae6a6d4a532c010a1e2f96
MD5 SHA1 SHA512

NSIS installer

installer

Stamps/DRAFT BLUE.ini

SHA256 dbedcdc648853c05b89a8ef741e7da0684ba181abfcf0ba720c2410e68458cc7
MD5 64cd9f08e0249024c4f6d107220ef0ec
SHA1 5ac722cf6cb212154bb738933cbe0fe06f9ff1c1
SHA512 7b6a55c05d2b58dc44876d52235e1700bc23eeae260e7a89b3413d62047d8147e870c632b43d25ecb6cb0524c99e1dbfe40db383d0f1006d01aae2a090be8069
MD5 SHA1 SHA512

NSIS installer

installer

Stamps/DRAFT BLUE.pdf

SHA256 5d67a31f4328b41007874bed83ed803be36b95450f1e51895a09e0c32238b5da
MD5 5274ca204d925cd2a1f78abac58ff43c
SHA1 e7b9638ce623842e6090bd8589cc44408f939838
SHA512 d1d6dc0ada402af0300ff0e643dc20778977da8b39c4c079e8091186b08ee126ade4b4bd1e9cf245e8cbdf64d780cf7728f56d716f892b7cf6b2ba5fcd5cb29f
SSDEEP 96:lPYeyQJqxtWz4GvjEkLo8JAUHvXD7k6mlJqasOZif4W/84py/hv0xrGk4ifcMR1i:ZqQJ1rNLo8JAUHvXPaaT8wy/mH46fi
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Stamps/DRAFT_ULH.ini

SHA256 892391a1804ccb5d433b1555f3d59524165a5275569a511923184ed0201def2c
MD5 7a919b3bad48e2f50e208cde2aa3734a
SHA1 dd3a2220c2a9dd2075120414a6053216d2034adf
SHA512 afaf0fd1f850ba4a999b0223da68bcdb1550d39f859b51377fac8e770cda092876df3c16af41ea465e283c8d324a2856bc24a79b88e5b7451343d83bbb7e844d
MD5 SHA1 SHA512

NSIS installer

installer

Stamps/DRAFT_ULH.pdf

SHA256 77ad58b566f0e2a5422523986da11b915abbcbf9d39d9c99908a8e7890552e7d
MD5 1d331f09bd371361faa5243a2d71fd69
SHA1 c92153db25f09e75191584d86342841f1d322e26
SHA512 178d6d33062e45d1fcb05c034288c1c9a6666783037b2d7cfac7293905cfd7baa0bbe457278afff55f19b113a06454a86772814ff1e105111fd09e622a55305d
SSDEEP 96:lGpUdBQ3o+B42kelmCT3W3xh411PI3utAnnvCml0NvWHQuDRIDfNoON9aD7Cp:MKaY+/mDxhi14u+nqls7so6avC
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Stamps/E-Mail.ini

SHA256 30300d4a144811701e776e3f1da2a0af9a4e73329379429325dd338259113fa3
MD5 868eaf599ee03198c92b6b2327934cb4
SHA1 a60df7b738f0be0373df34d7639e9a9f6e84705a
SHA512 47c3375da14119c22dbd09dfd50267e70748ae427797bf28c9b79dee0f192ed7b7c5a4c820bb1865724fa5d29fa1f6a477bc605cb3f45d7a1d99f7f47949239c
MD5 SHA1 SHA512

NSIS installer

installer

Stamps/E-Mail.pdf

SHA256 8f604f3468966c390b360c7ed2a870f078e560713bd2d6ad56207348e53490d1
MD5 bc457ce4ac84f70ed7eeadb0fa2d0481
SHA1 d2af8caaabcd1037813499681bedca5ef336d982
SHA512 762a34066297f42e7da67646fbfcb5ae970bcc33335dd88ec9ab0787a20c5b914ed3ab590c3efc826fddaaef9f301572390fc0f5d34cd9afa47721a555691b23
SSDEEP 192:WHRB2PD6LiFXjp1MdCVofgNMasc1WrxoKTJrv8X:WUrFT/Po4NvsXOKTZv8X
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Stamps/EXP Business Card.ini

SHA256 b19ba112a0a8cdc1166496a67815e5824531d8f277a7225314bf9b7f6727e7bf
MD5 516da4d862aedd7527cf498dbc7405ef
SHA1 18215b7b589444ab9fd7930ae122b664d2b3cf47
SHA512 aa9d07c7df97b367f1998032c5918435b8e42eee5ae966eb9a6d33b0b2080cf188e1dbb73cbe54c312fbc98f84e9729ad319c1b37ff878c917a75780ddb416ed
MD5 SHA1 SHA512

NSIS installer

installer

Stamps/EXP Business Card.pdf

SHA256 820ff2f0a426f7bfa6825c787e4e2ad559d155b3f811bf9b2a47a1c8b5bc193c
MD5 d5b51823d83ed6363df33b152cc2453b
SHA1 3864ff4d2b44b4022f05229cb37cdfef871c7436
SHA512 75bd7366c11b29222ad6027a031d72cb4e0e18b103a72f1fec4a67d728b82463cfd3facb5bd0e7a69a14ee2032aa2f0c0596602cfe621db3a16914b11378c509
SSDEEP 384:+mOmJxt/YbqYX9mm7JjQQk1y1/B1FrgHt+DXY9A87f5iyK79vPb:5OwY10mlQQkE7LrgN+DXY9A8zgP9vPb
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Stamps/FINAL.ini

SHA256 dbedcdc648853c05b89a8ef741e7da0684ba181abfcf0ba720c2410e68458cc7
MD5 64cd9f08e0249024c4f6d107220ef0ec
SHA1 5ac722cf6cb212154bb738933cbe0fe06f9ff1c1
SHA512 7b6a55c05d2b58dc44876d52235e1700bc23eeae260e7a89b3413d62047d8147e870c632b43d25ecb6cb0524c99e1dbfe40db383d0f1006d01aae2a090be8069
MD5 SHA1 SHA512

NSIS installer

installer

Stamps/FINAL.pdf

SHA256 dcd093fcc6d55469bb02da655e1388c0568eb8ac91aaa3404084107c9a577ee6
MD5 503476fc9edd8f8b848cd0313ca07d2d
SHA1 ae8ac8c906718938ec9ffe5e07a1f89a4eaedd8d
SHA512 f7f469d7d040fdd9671a20dcbfe49da0ceccd2bd75c48b1716a9f7d86f6a9a443750a7136e5be966cfb12675e2ec74aa9be16d8752dccf138113c02a9321f90d
SSDEEP 96:lZv5ZGHkaiUiJTvcqyXdBFxVqFX0z+SMBuSealW/84py/I5vipxfPcMfjYXxBTUf:rBZ0ksiJTEXdHxVq1Kwgl8wy/I6FcJBM
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Stamps/FOR COMMENT.ini

SHA256 42ce64b4c4f4b05ca94cd0662ad31ed323584ed9bde13637d19e80f3ac15f817
MD5 acf81bde49777f9a601ac5dc52506b00
SHA1 acdeb5c828b2c7d0aa5867a417f674ec42f73144
SHA512 0632f9f9acb5a2dee0466589e62ebec856d4b441c891674e8d00e50d217a9b94d603a474dec05fba7f7daf9752e8a9889dc820daf24b246490f96bc30c3bea5d
MD5 SHA1 SHA512

NSIS installer

installer

Stamps/FOR COMMENT.pdf

SHA256 1d9b676d93ec5f509891e14f83ebd7de9f629c151e454a608a87e82d3af842db
MD5 89712f7da49fa4d8136f62d5a4425296
SHA1 3224c7c93c5f915298350d13a0fe647e77cbecf0
SHA512 0db6dfd28e414c96a8427869418e4fa1a5559e136b7b3dfde2ffcf3379829cf7400e71ff425c841bec8b400fb12b9e735c9b45ff460c31fc25fa284284c16326
SSDEEP 192:lkUoVT2R9+39TeDiU038wW/1238iwJEP0u:GUYT2R+9TeDiPdW/7JEp
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Stamps/FOR PUBLIC RELEASE.ini

SHA256 42ce64b4c4f4b05ca94cd0662ad31ed323584ed9bde13637d19e80f3ac15f817
MD5 acf81bde49777f9a601ac5dc52506b00
SHA1 acdeb5c828b2c7d0aa5867a417f674ec42f73144
SHA512 0632f9f9acb5a2dee0466589e62ebec856d4b441c891674e8d00e50d217a9b94d603a474dec05fba7f7daf9752e8a9889dc820daf24b246490f96bc30c3bea5d
MD5 SHA1 SHA512

NSIS installer

installer

Stamps/FOR PUBLIC RELEASE.pdf

SHA256 9d9ac71b16274f63505dc3697a366c7d825f7dcc52cac59252ad173b5db64693
MD5 01725f8548e35ef8d7f5b6702e9bc7b9
SHA1 beca1ee02f43d01c97d00156f4b26a748cfef24a
SHA512 d30f7afc9e329f05c41e9c8854eb0214fa97aa6f76c59e5c96cafdc40ecbe634f225fac6b580f62d0bad998b63188064e4e12aa6f2697810b483f23efd6696cf
SSDEEP 192:zTj/EYTHa06DvYZz/z18wy/cgmChu7vjGiVJ:zfVzlLy/CMijGq
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Stamps/INFORMATION_ONLY.ini

SHA256 42ce64b4c4f4b05ca94cd0662ad31ed323584ed9bde13637d19e80f3ac15f817
MD5 acf81bde49777f9a601ac5dc52506b00
SHA1 acdeb5c828b2c7d0aa5867a417f674ec42f73144
SHA512 0632f9f9acb5a2dee0466589e62ebec856d4b441c891674e8d00e50d217a9b94d603a474dec05fba7f7daf9752e8a9889dc820daf24b246490f96bc30c3bea5d
MD5 SHA1 SHA512

NSIS installer

installer

Stamps/INFORMATION_ONLY.pdf

SHA256 f5e99b2122fb80ee498ce4b370846a61f191536058a3e24a81c20907dc9c6132
MD5 d45908dcf6aa4194fa08583c173579d8
SHA1 43b2397be6dae66c4b89aaae0d23b2ce77450490
SHA512 7ef0ed8e639dcb378b05fa10c12aaee146aa22fe8926d6313489e245114302680d16550d905da6f37bcb1185cd4fece70b2117c199876932a20e71bf46303fd1
SSDEEP 96:l8U3NmbDRskRxTmBJyQcYNYaoD/c77I9/KW/84py/bfYoQrHI4Z36suxseN+emfB:73NknR0EQcIoxL8wy/bg44ByZoeU1uM
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Stamps/NOT APPROVED.ini

SHA256 42ce64b4c4f4b05ca94cd0662ad31ed323584ed9bde13637d19e80f3ac15f817
MD5 acf81bde49777f9a601ac5dc52506b00
SHA1 acdeb5c828b2c7d0aa5867a417f674ec42f73144
SHA512 0632f9f9acb5a2dee0466589e62ebec856d4b441c891674e8d00e50d217a9b94d603a474dec05fba7f7daf9752e8a9889dc820daf24b246490f96bc30c3bea5d
MD5 SHA1 SHA512

NSIS installer

installer

Stamps/NOT APPROVED.pdf

SHA256 15c80dbb1d8d99fe7bde382804492169d027b7e70d6ddfda817a7f1b3768ca80
MD5 d200cd4b96dd0c73525cbf7d7c953eb4
SHA1 1a4a350ff5c23a8175214ed0db4eb05a7dadb929
SHA512 80cfc433a2d9634b4a88738773ea3003b4d2f1a838dbe7459a22c6102af003c29d498ca79e9596f6dd502ab68d0d0135194c3a6212ae40d4de35855a40544e49
SSDEEP 96:l1SWqLlXAZ/MmV/LY711FXPPHW/84py/OuqY9uv6TzDouac/feZXpETYcXDHIt:XqLlQZg5k8wy/jrouacM5Jc0t
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Stamps/NOT FOR PUBLIC RELEASE.ini

SHA256 42ce64b4c4f4b05ca94cd0662ad31ed323584ed9bde13637d19e80f3ac15f817
MD5 acf81bde49777f9a601ac5dc52506b00
SHA1 acdeb5c828b2c7d0aa5867a417f674ec42f73144
SHA512 0632f9f9acb5a2dee0466589e62ebec856d4b441c891674e8d00e50d217a9b94d603a474dec05fba7f7daf9752e8a9889dc820daf24b246490f96bc30c3bea5d
MD5 SHA1 SHA512

NSIS installer

installer

Stamps/NOT FOR PUBLIC RELEASE.pdf

SHA256 56368459e3fe15a6f1dedeec7a782ba113e5f7a446add4e3f2899838f2fd9f1d
MD5 133b0602f75db9c17f9eb1ce9af32ca3
SHA1 ae49e3382f0972e049df9834f8caa897bcf8f87e
SHA512 c50ed5983027029892e612e785a05345829d8207559837792edb8dcbef77123a5adaf1385f09c2dc56fc4028da95c7c94935c66ec049b137186250057c6862ca
SSDEEP 96:l/1ib8DgubpMHMZ9oa3s1J9rbobVToW/84pW/IFAQuY1ec5i866KZf/fYY2zDAQT:mbGpIMZFsFrbobR8wW/HkpigKdg0+
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Stamps/OVERDUE.ini

SHA256 42ce64b4c4f4b05ca94cd0662ad31ed323584ed9bde13637d19e80f3ac15f817
MD5 acf81bde49777f9a601ac5dc52506b00
SHA1 acdeb5c828b2c7d0aa5867a417f674ec42f73144
SHA512 0632f9f9acb5a2dee0466589e62ebec856d4b441c891674e8d00e50d217a9b94d603a474dec05fba7f7daf9752e8a9889dc820daf24b246490f96bc30c3bea5d
MD5 SHA1 SHA512

NSIS installer

installer

Stamps/OVERDUE.pdf

SHA256 41b1976ca0ac9d675e1ba3ac6678235df2d415899314b79234d21b412cf4f595
MD5 36933532dfdf1057286ae3c05e7a5d55
SHA1 421bf99de0b258eec6b479de35e3716affba74eb
SHA512 a884d28b023b1f6cbf3b5d311b56fc4065c3996f932bafa04286999f7e49bb7f71b3929fe2498cc34ea7f2bc415e805712984d11d43e28f9f8ba98ddb57791ee
SSDEEP 96:lz4LvvyoCOW/Qrq77om6VnW/qRivuwdh/W/84pyhNs/qOfrImWCBdWfrIeUZU0HF:FMvy5z77TgnvYGwdh08wyhyfrrzdzF
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Stamps/PAID IN FULL.ini

SHA256 dbedcdc648853c05b89a8ef741e7da0684ba181abfcf0ba720c2410e68458cc7
MD5 64cd9f08e0249024c4f6d107220ef0ec
SHA1 5ac722cf6cb212154bb738933cbe0fe06f9ff1c1
SHA512 7b6a55c05d2b58dc44876d52235e1700bc23eeae260e7a89b3413d62047d8147e870c632b43d25ecb6cb0524c99e1dbfe40db383d0f1006d01aae2a090be8069
MD5 SHA1 SHA512

NSIS installer

installer

Stamps/PAID IN FULL.pdf

SHA256 3a82750b12fb6442eb56c35191c500a57c92f78316dc409a678a98c78ee07106
MD5 12cd4d5d0da4d0b4a6194e8c8d454603
SHA1 57f15a908e0b52c1958c14c15c55b779cd9f5482
SHA512 518e55d1214c179dce5191fb84b55a5aa43f429d0692d02977ce8352b08c8ea04e32f894426025481ed4c26b3c611bf41bba114a6c22d94243bef012d02841c6
SSDEEP 96:lBlSZcJfePn46ZrAzL/0l4zzW/84pgpS0f2DCoLffSUBxHeIH:VSB4+w70lSY8wg8DCof
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Stamps/PRELIMINARY RESULTS.ini

SHA256 42ce64b4c4f4b05ca94cd0662ad31ed323584ed9bde13637d19e80f3ac15f817
MD5 acf81bde49777f9a601ac5dc52506b00
SHA1 acdeb5c828b2c7d0aa5867a417f674ec42f73144
SHA512 0632f9f9acb5a2dee0466589e62ebec856d4b441c891674e8d00e50d217a9b94d603a474dec05fba7f7daf9752e8a9889dc820daf24b246490f96bc30c3bea5d
MD5 SHA1 SHA512

NSIS installer

installer

Stamps/PRELIMINARY RESULTS.pdf

SHA256 cde5bd222bf7ee6a9f4025600e20a938fa3c1b1d1c81b7f1780a417a04bd71df
MD5 e2592b256e44465e4e30cc2388827a5d
SHA1 5a73cea846705be327814f3f2e82c282094b1d5b
SHA512 4a835faa5a52cd41695a400b4283858849510a13a9a4ac1b7c3555aa3dba6aa39871ef54b071d4d21db65794502811d76f300592f732c2647e318b9e1ac70acc
SSDEEP 96:lTotAcHxBwkx9USTiSnr0W/84py/PFYl34EyXOoJwfld30XQRTzHaXb:BfcrLUm9nrX8wy/yJVyXZJ6zK
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Stamps/Page Number Footer.ini

SHA256 b67464803178a216576bc6a44b9cab5575fff34a91aa6bded34d13d9feb205eb
MD5 6968589350d9ca8e350427a18dc82d2d
SHA1 3da096c49a2687870fbaaf7f33e086d5e90e9100
SHA512 b27e14eb2af7e6c4ff4de116cdd760fb634bc65065ced87c0672f9c10fb13a806acf66a65b8c0ac770ad22dfd1df0d1110735c16c628194ded09ec1027e4c7a0
MD5 SHA1 SHA512

NSIS installer

installer

Stamps/Page Number Footer.txt

SHA256 ae82af4f1854a33db05dfe0257822d8949aa5df2dfd09d146476727cb4249e2b
MD5 caffbcd7e76df11d16c5b8f433ac9eb2
SHA1 b938f4302497180c0e8dc92c25e14e5909b3a3f2
SHA512 c41a2c58241a231192054ed095a51b7f332e549c60a6e5ffc488b4cf1e2299dfa8586da1be4e821d26013a97e807e829a8a65acc2680d00e61984ebdabb1e548
MD5 SHA1 SHA512

NSIS installer

installer

Stamps/TOP SECRET_Yellow.ini

SHA256 25d0830b1dfefff5b59ab423358e13c7a2af8eadbca2441311e9061ac694c6f1
MD5 1d7fa3d703c1adeedf4d29b4ab806b5d
SHA1 ba2ac995c943c08bd62044f3413c1abfef3aba8e
SHA512 673a8bd16d02fde63817a5343249caa4cb3bf5dcd14b2348fc5fca9a39d9c8936749f9d40109459af56764890fdbd82c98032a024fb6a2066dfa192e2ff5ff72
MD5 SHA1 SHA512

NSIS installer

installer

Stamps/TOP SECRET_Yellow.pdf

SHA256 66bfe7af82f11322d396329247af7327e5d0f94fa482b669a7848bc6add30860
MD5 9ca180ad4dbe98f095ecbdafc9352772
SHA1 daad369a1ed36bd72fdd1d96de77ff5cb11af3c1
SHA512 92275a178a66c047265f50f31fa722e38be6c74b7dbc1c0a3d880eda69592b1c95d43b85cd32c0aa598f42824cf991babaefe8372e037e308118b0d7c7a1414b
SSDEEP 192:0T0AbZcO9iVG/nmCat3uKCb2XeEtdFdKxhuZyz0rwOscJiNC:LAbZsinrf+dFd9Zyz05siyC
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Stamps/VOID.ini

SHA256 dbedcdc648853c05b89a8ef741e7da0684ba181abfcf0ba720c2410e68458cc7
MD5 64cd9f08e0249024c4f6d107220ef0ec
SHA1 5ac722cf6cb212154bb738933cbe0fe06f9ff1c1
SHA512 7b6a55c05d2b58dc44876d52235e1700bc23eeae260e7a89b3413d62047d8147e870c632b43d25ecb6cb0524c99e1dbfe40db383d0f1006d01aae2a090be8069
MD5 SHA1 SHA512

NSIS installer

installer

Stamps/VOID.pdf

SHA256 13df327fe56c7ff0b3101d53164a5f3d5609f789064d9d3e7ec926b63153ecc1
MD5 40bbc52a138343e9b5855d02a577b583
SHA1 2081f4f6f7dfd107c4e87c6e3c0095b2cc7e983b
SHA512 3ba4f48fbc1477ea0a882bc5ee2fd3aa60fc60b643716454e14eca6c55d173c97631e0001ad0d01beebd8ed89d1013b49e6419d9a0c962bcf206435365e3327b
SSDEEP 96:lKp3FYgZug7neMrlV/vr3Pxu8GykZORisW/84py/HVXgxGx12naVuPfYbJ+EITBo:UpygNbVzPxBk9f8wy/1H2nyuwrl
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Stamps/www.exp-systems.com.ini

SHA256 4c1e6e7a438557e7e3e39767444f7997e9ca2cb2deaf626bf07c66b85e536efd
MD5 f04655706ac30d2f7038393d9ab8b1df
SHA1 9de416643f7c99597f8c03d2cdd7560119da21f1
SHA512 303723426b53a4b7d9c7ea71d4ee86b94d515d2b517076e4e01c41705082f9cd6436128a271141d951c6a8d8976ba1f0f89e850c4e2e528ccc1e27a35252a81b
MD5 SHA1 SHA512

NSIS installer

installer

Stamps/www.exp-systems.com.txt

SHA256 b17c64320ee4dbe9284a08263fae1f00fcac8e98cdfc8c0f866eb0767f64dfd5
MD5 6cb01737c9eccf779380dddbcf51f148
SHA1 b82e0a1f618b5742d31ed07ab3a2c6f7375f5468
SHA512 3f26b9438472488759729f80e78b99d4bd92bac4ff9376ac100031fff7e62493baa20ad98044458a41019fae5364aea9148e92f751030df56f3fe3acbd41428d
MD5 SHA1 SHA512

NSIS installer

installer

Uninstall.exe.nsis

SHA256 7d8065f59b54c5610602c26f409921a7670cb9b670283693125f2c361dff8c79
MD5 b52b4f862de79359d41dc0812ca1e736
SHA1 e3c7036c55cc2ffb0ddf9d75f6eeb3525791b74f
SHA512 73280600b9bb2d8edfd88d14a098363998f53a9b30c5ddd98a2b4636d329baaa8497e12b8ebc69eacc3da11c5d512bba4ab3cbb3c0c38c430aecb6866dfe9915
SSDEEP 384:ai4u266viLTS4Otq6kBvPGy9qxi1g00+z:ai4D66UTS4OAvugQL+z
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/COPYING.TXT

SHA256 da0eca0fb517ac939d167924c9d4b3f8750a6b7191932ef2cb145acfa624ac7e
MD5 46aaf69a91703493b666f212a04f2d8d
SHA1 b9e28040de9d8773c5b0cc8108869e8f3f287798
SHA512 4338956981eded4d243272dd8b6f7d35b62ec3759609de1a94fde7aa427c8f976dd7ca838a818dc7286576c760a10b5a7d44bc343483a246f289099814472c88
SSDEEP 384:lq2PmwEPb6k1iAVX/dUY2ZrEGMOZt7o0sDT2:lzuVLiY+rTZo0sDT2
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/COPYING_LGPL.TXT

SHA256 e5f56b8b8a25d180fa873f1ad24fac4c0f310c538ae22ec16bb8641ef7902993
MD5 1bcf25e81a023b89959ee46a5f3684ca
SHA1 1c806866691174d94e119529e3cb55b51d6c3628
SHA512 1926a09180109c851b08d9701abe2b96af4d9953beb375d788f7a6edbae4ed9e92b9e5a37ff7778a2182b387ec5cb9274829f37dbc000ae13fcbecf9e57bb054
SSDEEP 384:Vj/BNk+x/vIu00DqX6sT6AATeeNgKP+DHQg1fgcmmIPyOQCMvZrSEJLnjuov:VzBqsjqOTedDXmFJOrJJLnjuov
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/Fontmap

SHA256 2da65c8acc7c21bba085ec91994dc20cba7755d39adeb890529b751b4fac083d
MD5 3c0ea1d0e7eab2295940cae73f8826fb
SHA1 9c204f8b730db4407652b24f5bac2c1adae382b4
SHA512 54b17b373cdcd1c68be7bc15e49ef9541ca3c40ab8f1060dab82e024eb262609983a50c3e5b7abb9463f9db8be4a2c8bd6f26e2bba68fbc42ee37e5fce4e9430
MD5 SHA1 SHA512

NSIS installer

installer

bin/Fontmap.GS

SHA256 f130145858af1758956b280132f194b90d05b85d0f499f76907865479b05c120
MD5 1761d05e2e0888dfd3b04fb63370dd39
SHA1 ac6a08d7a615cd950461503f041decb4293e45a9
SHA512 2827f657bf3cfa1c4acba6758e669ed178ea829434b13afb6ee3f2864ec933721720d47da32ec020110773addf747c7dcb4367096be61ffa2c722d8e67a89ae1
MD5 SHA1 SHA512

NSIS installer

installer

bin/Q0.joboptions

SHA256 0b03db51d95737e245377ccfefe47427d5aee5ca516873c383e33d1c6489120e
MD5 f7a3604088b03b41bee4774552594524
SHA1 beff38cf7955cc24ab8253c39ab0bf8632f5a1c6
SHA512 0f96ffc220f9b4de32e42b04b46173e2805b41597c01abac55997ff1f96a9e35f69df28d63ac81f013ffed54a2bfc1bd513434acbd2b7ed8af6d8c67e30905c8
SSDEEP 48:LtlJ4NU7RBaVvFW4XA6BSKneD6JH+P+7VE/9JIIUPJxQPtWaEaNX0X4dUZKaga5G:RMDdAmSKneEeP+7Kk3WteZZ2PIf4
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/Q1.joboptions

SHA256 d1776d083053cda5a01a81a72d67d704ad5f799697f5a52fd6e190f46b6bc0bd
MD5 44504be1f1d691cd3fed699142623162
SHA1 07f91acdfaf5347b6eb1513d4393dd3528f9fb41
SHA512 a1e8c69aaf3b206da45bfe98193a993ffa7d98171943fec9c4e639a22ee8ea8155f698c1832dfb38cfc1d3102fa05659f422058a1fffa373ceddaf9104b766ae
SSDEEP 48:LtlJ4NU7RBaVvFW4XA6BSKneD6JH+P+7VE/9JIIUPJxQPtWatIaNX0X4dUZKapI9:RMDdAmSKneEeP+7Kk3Wt4ZP4PIf4
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/Q2.joboptions

SHA256 1d3523969179bdfa3126d4fa04004ad8e680b78096447ad268db9688e6162cfd
MD5 0666ddd967e64f9bda57bc35ee694b26
SHA1 b214f1ccebc9c0a224ec5279bbbd3cdbe52d9ab2
SHA512 9197893647114cbdd64668c42395cc25d421fb9ea6c3b969373f245f2e3a246f36a4d81a71e8233d4377e08f98be7a72eb2307001dde20977c4fc561a40eba37
SSDEEP 48:L7lJ4NU7RBaVvFW4XA6BSKneD6JH+P+7VE/9JIIUPJSQPtWa5aNX0X4YlZKata5r:HMDdAmSKneEeP+7Kk3Jt7Zf2PIf4
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/Q3.joboptions

SHA256 bd60bd359071e8a7731408d31e9d19b0eb07f75f23fa39de56873b2a80d778b7
MD5 ee74b62d334eb0c03edc74a805558b34
SHA1 3e31ba2582a867bd51b888aa676e588f1c0c0771
SHA512 f38afc951e2531372280b21da3c4d1ef65154cc8eb2cb6893da977a0382706f111d18803473503ec387310d1d3d5b1105bff975a2cda62d46c744389f9064e75
SSDEEP 48:LtlJ4NU7RBaVvFW4XA6BSKneD6JH+P+7VE/9JIIUPJSAPtWa5aNX0X4YNZKata5U:RMDdAmSKneEeP+7Kk37t7Za4PIA
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/gs_agl.ps

SHA256 b7f4002c93d505a8bfa75aad429fd5398e39241286448131e7b9f2f32a232430
MD5 ccbe9de6e13bd555bd69b88dcd5103b4
SHA1 e47410e7db91555eb1783e8e519e5bf2cec1a987
SHA512 946460d5ac9b7340920cfac41b650aca12d337970898e99c0a1d7b1986bbdf77e20665e49a952c78db719cadd418aaa4cec20166eddd31a661e08ab710325a0a
SSDEEP 768:PuV0xj4A559a5u0RfjoOG4Gu93wC0D7uJHrXHQCm4K1QaLeR:mWjRahGFu93p0D7uJHrXJK1QgeR
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/gs_btokn.ps

SHA256 f9457d73861c36d36c370bcce5cb9048d1e3dfd45c3d526a2b47d5397e6f24c6
MD5 22c52e0fe716dbee019591555778bbb2
SHA1 107d7f278598cd52341f3f7a1cc319c770831d16
SHA512 040fe0310cf96f0fc11ba4429b3ddb5c70f244db04607006584f1daa71a5fc9c8e6672fed9f078d169fc317f853fef104f80a6f0bc3e6bdd5a65a9e3a686dcf2
SSDEEP 192:BY1m16vD5mUWssrtY1B4ZqFQxMbhYgezUm29zI8edM0fKWfPPkC55MukAT+bx:BY17vDgUWbpY16FxMbhYgZvIlJxfPeFh
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/gs_ccfnt.ps

SHA256 e749a971cb7504a8e7e73081578969456d5050d65b1564cb1bdcbed1ae9d9c6e
MD5 25d7b6cffe5006b34e40f455388ee7cc
SHA1 426f644488667459e997d8aa50c45abdd5cdf5a0
SHA512 5e7fdcdc33983f2463085b35b67bbe25f76e5b0c045dcca578ee9f3e67e8e35d0003c34c74d124e692fb88fe45b683b04d748cef09395fd199442c240277da6d
MD5 SHA1 SHA512

NSIS installer

installer

bin/gs_ce_e.ps

SHA256 a4b5a40c90af0bf8d1237f824036ad36524f8c32307b00e59ec9f95417f57726
MD5 ba99af1f3fb6c622afec7d45155c7b4f
SHA1 92290f00a29112bf57654de76dd77e9ea0b0d606
SHA512 f85a4ae3acd2c7930b57680e7d2ab92e7f7f0019863139859c692440eee6b4b312e6fa7cda3d944bae8a1285470e35aaf6e9fe33b4bd0f2d50a4ef900a047329
MD5 SHA1 SHA512

NSIS installer

installer

bin/gs_cff.ps

SHA256 64eef3ed4c1d20646950f3706e2152ac5c90f3ca44e066ee568b1d2429198765
MD5 47ae046d701fa686f94248feb8b4b8c8
SHA1 23c795e26a481daef3928ff989153a7b41b8b91e
SHA512 11642d97e61b5bb393313f531a24283da9c484d0befec19d3abe018fe9cc3a763e8a3bbdd760b98b75c07de918d5137f32a221fd06c5657d74bb6d5d9366e67f
SSDEEP 384:BPM9HzH3eWPmONT9hmfwnQl19qn6keFdkndto7AUwZt83bXZRhZoiVZHtjyOp60E:86qznQl19qn6kDd8twH0/hugtjyO09P
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/gs_cidcm.ps

SHA256 e7b556a77caa1b9cbfbdefd167fb99548f05b92d2f523e242489ba531d90f2e1
MD5 fe3c5bbcc74a35c0794b167427bf8c34
SHA1 fc86a5d1b129e7bce8cd30d8a88ff115de4dbc54
SHA512 b44b6170e85ea23d1fbe69baf3209e47fbe6554e6cdae3c75edf3731cc4db7da5a2454e29db7b23caee799572ef712607c6066d5df6a69729c1bd2c2ac827677
SSDEEP 192:RCORcaJIm+XpMW7C5dVBfgxTH10Tj6lARz/mz8BeNJXl04HbTmZJOCdoN9Tv1j9a:ssJI1lWHcm6vTvXOmDKY+bnz
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/gs_ciddc.ps

SHA256 4c2ee4d10c7513ee5198c56953a9e5ba9d38540a88fcb3d93d13e6c9a2ba5445
MD5 09bcb9d657d1090b8894997daee04ccb
SHA1 784b4e96df9af85aff4649901b94cd11742fb451
SHA512 906aecdd180f0f29c7f60d399bec8eb5969f3449d3410aeef64d0ecec2d1f5667b11fd4ed65883a4367b7817465f26f35a032bfffd9e5ea7095a6429e8d2a80e
SSDEEP 192:PqGEMcAdP/RfpMH6I7iw+ku+PjaaUYF2a17LJ/I8I5OR:WMcAbfpMHcwwpSXJz
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/gs_cidfm.ps

SHA256 f7e00d816bb4afb8307d3443f2f9bf7c86c7b557400a4fc1514061f1b5f4ddeb
MD5 2d10e2f018a2ac9bb409bf5236ef5f9b
SHA1 277e53a8d1fe73065f668d213d28f9a4faccb2c5
SHA512 75d7ad4e7eb747570a1d759ca975b5debcbe099f51c42f6dadf3ce91e715dcb4d7e83902e80ee0609ebb4ea615821450486fff37668d32aa259606131bfb7f62
SSDEEP 96:EfUWimT3yB3C6Oc6I5IsSFcPrD6I+0HpPFHwpp6afdsP:gTCB3CXcjSFcPw4pPFHwppBfyP
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/gs_cidfn.ps

SHA256 168475fbf492a2e041bdf837186ce5f4345e1cb5cfdbfbb5476e09af6834502f
MD5 d36bf6ceef757400e1d9332f932511cd
SHA1 2badcb2f3e4494b9c74ef3e62af200f7cc899485
SHA512 bbcbbeb4bafabb6001d68b4eccc4c0745ed0af8b85a379964544191a785ef5df79a0ef26c60de96a864c60bfe257956dedcb16aa9536f786184dbffd5aa6b669
SSDEEP 384:cL7rD9YUmho/ByuZZLh3+0EROL1CUp7EySC:WZueByMZLhDxCUpFSC
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/gs_cidtt.ps

SHA256 6540e40aeeb2b6a10bd0b471df7ab06374933dad06884a5ad4ec8c75adf9e5fc
MD5 3fa7395fdc4edc39f249f51a3207812f
SHA1 2cfadb001084e1fa526345f017556c01a554bec0
SHA512 fd280e2c2721a72795693d2ffe7031f05e031777f739eaab0bc47796a539054640d21977d4b542d333db027c843f9c0bff3d09a76d3957d710f2d678e47c33a0
SSDEEP 96:EfUWCyMxK1qKgfFGpwza9kk7V9UUAp0GAAMSi4WPCfdEiz63ppLhfdtP:VAYKOF1za9kErULp0GAAMz7CFEfppLhb
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/gs_ciecs2.ps

SHA256 5d5cfea43f83b3b1ee4fd80c4b85da7dcf6dcc78b8df2a734b7212969db0ca93
MD5 9fab4b96b51cc0350aeb63cae55929b0
SHA1 6cd08bad76ce0534cc9caf7bde888b605ee4deae
SHA512 b8e29127b2de7555c01a27912575b729775993f0583e2afd29be6d3fff00731bff8745f6a4e8ca6f75206ca4ddd96a7a1294c7906d74afb5aa4cb6e00ad22a00
MD5 SHA1 SHA512

NSIS installer

installer

bin/gs_ciecs3.ps

SHA256 e67a60d44771ecf8f0ac90bdc0c2f0a7a9c9e417b12bfe206e8fbb580faf9c75
MD5 5a511f1548424069a985ceec67b42dc6
SHA1 09a2f24544451e1005358c984b8c4f683f59d67d
SHA512 86ff525ea51f06d19491311bf1f12f3b04c94309b1c1d7c6c3e713e5d2226e61f31e24ad4bd3e5ddf4043fe9b79792929ef159e35549020ee6d7cdd8fcb1c605
MD5 SHA1 SHA512

NSIS installer

installer

bin/gs_cmap.ps

SHA256 0330fd2eef0059dc0891c7bd391ce23ec6ff27807c699567fb83ba2b719a6931
MD5 3091fee89a6a4b6436e98d4f66d393a0
SHA1 dbb0d848f370b36f4ba515900fd5fa028735c0cf
SHA512 5064e30038be957646a60b717334424501c7670d61c33e9b40dce6ad058cf158a170b744691f05079c5e562169f84400be7ddd26dcb78f82f0321f7ca095a394
SSDEEP 384:9/z2vey4DjDgayRQmZ7wvfErFHbhJA6fylxah/WBXc/BvBXdGQu1P:F2vSHxX6h/9/B5XXu1P
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/gs_cmdl.ps

SHA256 9be0b85f7ffe954e118dd7a838bca3613edba54809f5876a6d6e7545c1527067
MD5 667c65add57ef997d62fa13ba3068e8a
SHA1 9ea7c0aee9d4cc46c10bde0c49eb9044b8eb42bd
SHA512 ac9abe8111b55672e51455de69e6a71d8a8dd60bca7c80e19b94cd61dc2706af3cbcbd1b4af65dd60bce1a15dc3ad7371279e138d2a3a94b66c3c960f07cca60
SSDEEP 96:fxfUW/LsxlplyU2+RUyKNkJgAN1SAPGgX9TP2kJXX4r9gO4pJk:VL0lplyU2+RoNkbN1dP76+HK4pJk
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/gs_cspace.ps

SHA256 c317724727ecacd5856bd6b4becc952b910dc7bec0ed39003cc7e839cf897212
MD5 8a33a3236e97612882540d63996d1729
SHA1 e462fb50fdb89616595a98209d14b8e29de8cdf6
SHA512 f56ffc4f040e24356deff06bff31d20d2102b1406fff453eaf9669955407a5d3785f10bf9ca673895864bc4fc6f6296301f7ed716c5f7b6fb8f084976f937b2f
SSDEEP 768:v28r31wX2a5yo99nLpu2h4unSVolM7wO9i3fc/8k5IdLINqKEORQ6tgN7FT2Izso:Izpu6iVOtzso
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/gs_css_e.ps

SHA256 2f5aa94012ce96b59f40be28acb8ffd87ea1654de2f624cc2ff11b1468f77132
MD5 8c8d8817359405bbf9756e72732b6eda
SHA1 73d6de8b472f39135d3043a65c71f1f2feece304
SHA512 4b4a16e95a432d62d58e222f4a91ec6d0ca5ea772cd3b30805185dbe7adaf3faf891e6aa19a1ab612347fa4e5a63781dcc7888ea9ac0cff2d7a4ef43c73f2472
SSDEEP 96:xxfUWk1MFq6B/q0UWLmvsvU7E928xxd5GNZyGVRcqtQP85fIGZpgYUIc0LrcSSvn:41M3Gsvt48boyGVuQUcI+pgYUIc0Lrc7
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/gs_dbt_e.ps

SHA256 657b207a6eb2ac3bc7384419e41345fd34cb2e2e8a653e2cb86e33738eaf83ff
MD5 0600ac25ab872a3147ed545ceb61b050
SHA1 5a825e57ffce382ea4803f4d0d87260a511140e0
SHA512 a7f5ab68863aaefb7c22d9d037a77e4d9d3b92c0906f2870e90c3a1c6674192d7fd65c9fa84268c9e67ca5eb2cbd8b3afe6fe5a0ece026c49f91f77c9d1b8810
MD5 SHA1 SHA512

NSIS installer

installer

bin/gs_devcs.ps

SHA256 9e6c0fe34d08dfa976608d5d2118c739027cdd1dc9491735411ef4dfed03f46d
MD5 766b87238d158831bffc867e9029df09
SHA1 4d93ec72bc466c942964d0c7c7f693d02fc6dbdd
SHA512 50cb1e5f9d650d1a6f5898d94e9446511f76b4ac19e6dcbad80eb84751c7155d90d0e60a0343632c956885e4a2c3a06285a8271e39e51b630104e20c539a5990
SSDEEP 96:NxfUWYgXJI9Wx5zyszUQVk61QnsRP7bxW4qEyFxssEPSEbX1gKvbFYIFzsE3WE3n:7zDyXQVk61QnsRP7bxWBLsjPpbX1XvbT
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/gs_devn.ps

SHA256 05a0d84a605ab9ad778fc03663cb44813d8929b8d5420adbe71aa73ede89f107
MD5 c13b04172e96ad2e110cb2da941ee4ac
SHA1 d00f0d2ffc5a2336442a88c1e47a3fe4e68f6144
SHA512 02edb436eefe8c3fa3110a78c5ec5c7c9cecadbf94a414f018317866b72135942ed665242f1c2fe456005a589e6a16590b69a720f3cbc652899e6378908cf956
SSDEEP 96:IxfUWCoh1xGev5rI9NE0fIJNE0MImNEoy7ObhSEov/vwcwEox8eRkNhT/fqbX2MH:gh7Gev5rI/rfIDrMIC3y7ghS3fwcw3xt
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/gs_devpxl.ps

SHA256 8a5248573cf5e0d91fb28bf8a0b588e285e248c383e66b802df85511e877cf0f
MD5 36d64c7e7566ff8df77f359eff2ad182
SHA1 42f46a508448e981744c62c3e346aa847d174b6d
SHA512 a40144d3516ebc6bbd5347de382d14ab2417d77d17ae3b98c55022350cb76a2619a5f0d3baf68dffc2b2b70677f62275b1c9b4ec79dae691ccc6679a500387ae
MD5 SHA1 SHA512

NSIS installer

installer

bin/gs_diskf.ps

SHA256 06950691890382a4b312912e627b5794f69467a826b1fbf2657a74ce8b73e397
MD5 ed04c2cfa33300d9e9b70165938f3328
SHA1 6a4d423a301dc147ebc3aafd767d06b9cd10b122
SHA512 17fb55e23219efeb7d2ed4398896f07c3091c600ce9de165a6061cfa3e56761c8b6f688337a3bb441dae37e9584014140b4a3e1ab938be69a296d93a566bc57b
SSDEEP 192:1OsQvbWbXgWMnXCKhLol4QAUHd3Q6arzlCm+6nBhJfF3H4mdw7:1OsQuAyuM4QTHyCmhnBJHQ
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/gs_diskn.ps

SHA256 b0c48ae5c914379c61c3f16dd1800ab78569530f9a16579857faa68180489e96
MD5 3b1c7db70dbaacb6561d5dd864202f2d
SHA1 c5041c0c87138532801faf3b5f91eac573244365
SHA512 e4fcf7ad34ef436be76f1e44e297bcb5ab28b8a74b42eff0f0820a2d9efa9a26599abd5f99833811a0f66f53b3c938ff0b6516cb989c6ae23a535a2a8a5e71ae
SSDEEP 192:bQ8M+D3gm6RokCQNPZjrdCdLwdQRwWLOfs6EfLrDpR3hLBaCpof:0QwlGkHNPZ4xwEwqOfsHTrj9BXpof
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/gs_dpnxt.ps

SHA256 cb6d6fe5e168b548a0b0dc7bfcaf710f1fa79dd7841c0c6aa3e8ba5564460c7f
MD5 7b9e76c2478e37930ed1980dbc611c29
SHA1 c764909ba6960f1b1dab69363ec315b5a5b8235c
SHA512 a13c0544f9cd8fc46b317d92cd4d2b9de3047fbe07d1c335d8f5a1416a804e6f7c7d85df243a076340555014d5038039cadfb6a0c8be6b762ee99639404e9f6d
SSDEEP 96:AxfUWDsYu+h9LE7dPupXtZtO5PhY76ArAGv+7WJRWw2oe:wsl+TL6MXtZehY7T+7WJRWwRe
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/gs_dps.ps

SHA256 37f0b95cb6913cf3fcc88e21580de4f53cd4d578beb236fce45f5924a535c940
MD5 63e8824d9e21a749a7b2847b183bec37
SHA1 b8908ac5a4e7139e1b2fcb2654b7eed5cdff9e72
SHA512 5d985672e7b7e2e65a896391c0e75fb4db797a01f05cd9e93c02ae780c2521f628189f0901ad3d78afcc6d90584f2c4bfdd37bda757f6d6aeacdc8ba4ca479b0
SSDEEP 192:unRELTQYR/3ov7u9A+ekJdluYCIXz+aXoG9TPBh:2ClR3ovGA+ekJdPCazXP
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/gs_dps1.ps

SHA256 9fcfcc82024514175e3cef1391913b49556fb8287d79b19d080c5c4e08fe7fdf
MD5 b3ab2296371edbec951412dea058ce42
SHA1 74e0ec59dd8b52ad361d72afddc17b9d84f2d961
SHA512 05708503de575dbcea6815e562c53315f98803ec2dfda61785eac2337439307fe7a655f96bd7387620de04fc8b36bbf9b1cee2c708bee25e4a1767f704a488a8
SSDEEP 96:zxfUWvMsXwidkfFPX7/FYMqO+XpJtJLhVBKa77t8wJoGy1aY:BMsA0kfpX7/FYMz+XppLhVB7uz1aY
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/gs_dps2.ps

SHA256 f24496819de6ca548c7aced0ab6106f8ef410846d87434d7dd820a935fab9abb
MD5 225e4d64ece629a51db1a5753d1ad9ff
SHA1 7e512568e94abee7ad127653594c778b5aaed327
SHA512 d84c1d46025a0022bd15dc93dd523fdbe24077061e21274410ee9b8bffdb871d03db0bd5fba4aeda4bf1274a0a107d9657ad898d05d9879a67a674dc46f38fe6
SSDEEP 192:Gpzy70aGgWpQ7UF55B4/ruv6gTlBS8vWI3gA:GpzyQcVI55Vla8ZQA
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/gs_dscp.ps

SHA256 1a04892cf8f65bb8055f17a5077d23e6d8f7a4332278f3a09e01dcd1f3e8795e
MD5 aab4595246734e4fa1f19745a62c70d7
SHA1 ed68833a82b564993ae231d565da45aaec7669ca
SHA512 654c8fe7e2077d9928bc6a346ff5dac473ea5a50de380a8769af62a4f0081fb338720c59321f65fbb716e99ecc2e144447acb96007c1f26f6e460dae816b4179
MD5 SHA1 SHA512

NSIS installer

installer

bin/gs_epsf.ps

SHA256 9905304a653c11c736008670a16caa3f2c702abd82a920bdb4663a4a757f2463
MD5 e5283c422039b9df7bbb5d4c91c8852a
SHA1 90a0138b933936d0c99a9e9164f920d192dda42d
SHA512 cc04080ad53d6fcf0a5844346f87790c1e18c0ca8c07875cebcbb72133c404b58d5a9a9c5789b3e9e490ed0bc0d90b4ac7b326f047c11f9642d87221f41bd113
SSDEEP 192:FAOaV7Y8htVHAxGzOqY+LVvVuBVndVkdVt9VldV2A2Lkwo/:FMV7YMtVvz5LVOVdVgVfVXVqkj
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/gs_fapi.ps

SHA256 98f2cdfad267a2e6ef445dcd913af80030a8366363b6197f56f2c57fbc16d276
MD5 ef4d476623d292708695eb8958d371eb
SHA1 f0a99f27e3cf8d86e3a9c3ece1f297b8a1538ff6
SHA512 02cbc4ad55a2f33e6dcd0c5e34ea39e4f7da638da07cc1eff1cb9d434e007a018e7edc93ec821ab2bbaee52eb11192b9a89767813c14cba312dadfa64ae4fe13
SSDEEP 192:CyPqF5rgtQvcPfhCpp5BEppLkWa5aYRm92tW7TZsfwe3fNAwush8rqm4EuO:C8YyphI9X5aYRRg6fNh8rqm4EuO
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/gs_fform.ps

SHA256 f3252c8ea93d4ce6db80e03277bcfd216eda21b4d9c50e7bd4d3220f91decdba
MD5 c4f22c757ea29bb1caaa02f06cd6447f
SHA1 9de364976208d49edd418c5d013c5bee7649d8ef
SHA512 8cbb9cd69d72395ac09e83b6fc2d4a5791f0eebe8fcb51aafe6f29e034e07df67195052d47bef3dc66d753409ad7ebd030485b923e22594f3367b883092b0f4f
MD5 SHA1 SHA512

NSIS installer

installer

bin/gs_fntem.ps

SHA256 adbdd85ec97a72657f21321528a77c81629822eae6716d0af75a3325e4da266d
MD5 a952d24314e8de57de4d8937ee297b88
SHA1 c0c75d95bd66388698daa917ced2d25de39f7779
SHA512 16e72e51188e0181e7bbeb0293389dacca85e7f95401cb9e3fdd0e865cb814e621f5bd0f535637b75582431cb60c3fbf270389b0421c42e37b00f5b42452e998
SSDEEP 192:rj9bXRSjkYLiHcnDUgekwrQPr4VOXbth41ucPvUtwqn0gZIx8xrEwhmlSziLV4rQ:rj97RUuBgel4DtDtwqn0gcqYPLw1QP
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/gs_fonts.ps

SHA256 17515fcfd5bb18ee1712cfe53560cf1d3264bb9b3b370957324bf42244fcc1da
MD5 6e9214b4d0561f404bab21e3fc1f8648
SHA1 60658cfccdb88effe2f4d9e396302c015e526777
SHA512 27630a86809b682473b5b340ba09812c0bdec446e16eede1fa5e6dbd52d28c83a5bb55c482d54d36e96fa4d05ff972536e504967820501d0e1b31abda143e88f
SSDEEP 768:Qj0maw6tIZKPoUiLWOKHo/H3guaRoe9ZssI7:Q16tIZKPoUUWOT/Xguame9ZsT7
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/gs_frsd.ps

SHA256 6450b4014bd9cceac6e4d506aa1c783e76f80c4c3abbb11e0bf7aa9d5a92c71f
MD5 49881baf0086bab335962e2c3d22f0fd
SHA1 b8271320fc13fa3d2bb3e13ba174af6214a077ea
SHA512 4b0b0fa5a1eae35cbbe4972f4dae8197e27873821cac6f1b761d18b5d3ae246c84309102e81f0054a34e80ead85d80e83551be9548adde7125b0b0f65f68afbb
MD5 SHA1 SHA512

NSIS installer

installer

bin/gs_icc.ps

SHA256 3fc89b0b1adfa210357874a69e9dadb85a899d60c90b786d7be075c16b654319
MD5 8f9066127b166db822123187e0c2efbe
SHA1 3b18b0489d308fcbf2c6dffa720b79d7762cfca5
SHA512 db4206c775e02e29fe279260e045a0a3b2b28cf65d2f1ff29d6ba756088f36cad58f702399e473818940a94022fa3bcd5b33f17a68bafc3763970f7272ef8ef1
SSDEEP 192:+TmRmTAzPswtxHD+/rKDrvC3y7ZxCYR3FMcnt7JI8Hw3c0GR3jqNy0Rpdw3K/Vse:+TmRLzzV+TKfvf/Ycnt7cN82
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/gs_il1_e.ps

SHA256 c4195897ce729cb71ece4c38bd47d4219acf4212dd8c367083d39a8e3cf360f7
MD5 c3bc2ea7e27dbd3a10bf784e1d1ad14e
SHA1 dca00998dce4385a8e8ba4e6fa714d993711565f
SHA512 e31f93a3c3160022fe27e06de3cd87dc176da1e98a96acc2e806035f1b1b2448261947c675211763c2c18f7ebbdd92ddbb80d28a4b063ceab59970173855b6ae
MD5 SHA1 SHA512

NSIS installer

installer

bin/gs_il2_e.ps

SHA256 da4c3ab3e9ea9433d2885a531dab40d0eb5382bdf66f8b89c51dcf1e549c7e3b
MD5 735cfc9151e8420f53a5b880b830be14
SHA1 6c737ae5dda93d872aab08e9a0d74032608dc0bc
SHA512 14a8af26cafc0d072de40546c85fc1ef295b1cd3692f28fd9b233d1829ac21d014ba08daf71636f0a17f9546ce641545595c65976c18036b1baab505a62f85a8
MD5 SHA1 SHA512

NSIS installer

installer

bin/gs_img.ps

SHA256 6372e1653ae6f1eca1b57eed90de46453f947fdd6c3edb3cf7c07aa70624f639
MD5 91fb3baba695c9f480f52ff8ff2619f6
SHA1 b1107b3bc28a77d99079947b2ec7f69a91d76083
SHA512 ca8fa908174e2aa9868e9cd5e45251a3ce72f3af70b1afbc41c57b30b0845a6f45075587bffd51c5800407d686764675d657a0129f73997912262ffe11a5b6f1
SSDEEP 384:B9u8KWIDcAFr6zXLc/GkUNg/SdVNepsNn:7KWIDcAFr6TL9kUNgKfn
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/gs_indxd.ps

SHA256 76e81514847b572a50871209ea706cac50e0820183c9c8032b380aedbef9ff95
MD5 0cbb3e659413dc4df9d1b28dd7a90196
SHA1 6387e94b57e9603bcfa5c99c48c0d37a9e485df9
SHA512 6a68c4ec09f391cc509fb7a10e5d0cd48beee6cf25e4ddd005e8887ebb698978d946b21a524cf990e960ad545ef0cffd715096596619792ed6b531fc9ba01ac1
SSDEEP 96:IxfUWEvUbtvJJWhy3N6sRl9u9NE0yJNE0hmNEoy7OFKp+wEov/+1wEFdLieRkNhp:CtvJJWhy96sRl9u/ryDrhC3y7KKp+w3B
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/gs_init.ps

SHA256 2202870090e9fef9d672f7cdfb45aaf8cee4ea94c045457c3740fbc3e00674e7
MD5 06d72194051f942632ebbeea91ded18a
SHA1 67a2e42619ecef450aeab68920ffd7defb406d30
SHA512 44231770d2addb0f4bfb58d790840a288a04ce0a493dc1b5dfdce41fad2f2b463370431f0bf66f849c352ae17cdc7fa3c6a0d3ff08774e2382c06247b2c6f716
SSDEEP 1536:IvGRTklSKA2zUM9JhI2Wu6xXta8fnLlsNhOHfhfkRmmoMgZGTtk6UMwixgY:XPzdfHfhfSmmbgC
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/gs_kanji.ps

SHA256 38dc0023cebd5334f61a85b698364b017982bcde9d7d8249d007b25a43a4d9e6
MD5 df2f690cca9c3ea664bcaf1126bf382d
SHA1 91fae30bf67706adf0abc7e4337c52372c6dc77c
SHA512 6c16015fe051400bc8d7e7c7de25be8d592b19de7d1c14116943ed29778e372d7fa76e51d6d7d21869319afec1f7991b145eb0855a2e813800392de16719b5d9
MD5 SHA1 SHA512

NSIS installer

installer

bin/gs_ksb_e.ps

SHA256 5bc2063e0e58796fc7e2890e1f955a7b571551b986f4f8e2126dbb8547387f45
MD5 d378d9d9af81ecab216bcdd991665da5
SHA1 c5a14569a062fe0f63431c1f78a0b3df9db3e339
SHA512 76d1187ad936636aefb8085c26f1cb8c28a36282af58ff303de099d9dd5a0a3d6f649126ac75bf344e4b71fa60e42e3b108b440d88e2de31dd0b47ed43c134b2
MD5 SHA1 SHA512

NSIS installer

installer

bin/gs_l2img.ps

SHA256 24174d689ab34ec1760fba74e6b3777ab30404bb8ded6fac29acef77f260ea51
MD5 d6d8708a1384cda15ca6b355b580879c
SHA1 8ccd01427d60ce14e4d7b03e22e35e826b0c90db
SHA512 a9435c8df11351d0e3ff3f02671642508f453738ff61902f29f01b9ecb85a4ace9cc9be0ecf505e6886825b4c0ca831fb978c29ad8d185dfd39cf0b0fa7bb2cc
SSDEEP 96:0xfUWufPTIytQE5Yl2qlQpFuiUdvRYkWKfVYAj9kHeBdOk:tPTIyN28GQpFuxdvRYkWK999kHeBwk
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/gs_lev2.ps

SHA256 4d398699b4ff115141e95b2c5a79125991b5bd07c0838cf099c34c5dce3c44e0
MD5 41f5ad1b8785626d283c48ff80399621
SHA1 80183ea06b73582bde188ad4ef5ee5a0c1382077
SHA512 7955ac4debcc841c64e586e19e692b935ebfb7b8fa2d09da017a56249cfaaea3a64315bbc433033caa16e97aa2377ee29f76a314cd1a797447e7cbfca7814ad8
SSDEEP 768:UIzr9GTqBHN7YPfuIfZbYX6hwhJNxZYXJTtf:Bz+qHMfTb1hwhJaNR
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/gs_lgo_e.ps

SHA256 37bdcd1f8663247294860a404dc2b1a3eb0b71e1bee376422e72103323c15a28
MD5 9025e131d529c55738e6802c28847aca
SHA1 2473bc83ef7e57d00405681d8d727004802a94de
SHA512 7812871bf7e875c3158619d27ea34ebcc110ae8fc0ce4ba5acc29f6698c1f0eb6053693511e98d8cd6fd8dcbb2cd7e1ef477dd3bb3cc1671c0339d5fc2e2810d
MD5 SHA1 SHA512

NSIS installer

installer

bin/gs_lgx_e.ps

SHA256 c2aad551d0a923f0d5192d36edb544c676b0165a329b5a7fe5de769823e4ae7c
MD5 54e9fba7d765fdaf213a071f7748ebfd
SHA1 4ed3ed7c650808c91a3d77d7da8e50f587a46258
SHA512 a19d026d251e944d3ff91b8a7e8674186bdcca640351f4337b71c2aa1599173cd8510263c77054c61a402e25a0cba170493d3fffa2e77d53ba848bdbc9a3dcc3
MD5 SHA1 SHA512

NSIS installer

installer

bin/gs_ll3.ps

SHA256 92f2fd18f9627bc588b78afe7063c22ebc7fd631b208a863778fc54bba1dab89
MD5 52f8f84e9afdebb18e848be9dad67890
SHA1 dd9ae04851d52a83724d0f2527b7abb23cfddfe9
SHA512 5071f86d5e3fc9dd1221cbaa7162a4ce5adb6269d47ac5a142c2697109a994057ed12294f7d1bd063e1972c1418bc83c176aac5ac24eea8569a4468dcc8d1f1d
SSDEEP 192:vwjtD1GXBynSyP3U7KEz/W0NwTxfwkx0cx1xpxd5ID+RtAwmnFKxn4f3t:vatBGXYS4U7KE2tokdIDkAln4W/t
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/gs_mex_e.ps

SHA256 9c9ebdea21180e5b4cf659ec2fec4aabc2c89d744629c0347a3bf03f6e271af3
MD5 51ef285e939430842f05053e022f63c8
SHA1 16b2b452014b8f9395b3cd7b0d2618376c1553ea
SHA512 f85e484a3291a78318b9f9e164c5aa52cae58e00ed08e70f59b8933f87a8f4c2f889bfca7ab6204f20934cbc74a6401cf4ee5226773cfb2df107dd07c243fce4
MD5 SHA1 SHA512

NSIS installer

installer

bin/gs_mgl_e.ps

SHA256 1c7a94888614b75816e58d6b5b732440288a56a1d52fb2f3daf8ad83fa842cfa
MD5 aafe274dfe7e2fc23af138d399ef09da
SHA1 359c7e965e88a87d311c7fb2e685ed5e23c4e961
SHA512 69564ca1ac5b8fffff93fbeda8d008fb50cc8f5653ad12ccb5c1ff0c6bd094e38e06495f3ae092f86f9e6962ed3a293d068266c8f928f109409419605e22acdc
MD5 SHA1 SHA512

NSIS installer

installer

bin/gs_mro_e.ps

SHA256 ae1ca54947e12de66c8478aa6c42a4a4c05155504536d7b864e45dd54d77ede1
MD5 8bb843dfb0039b18cded075be273e376
SHA1 a3ce42ac70b3074c13dc9c4415bedb86983aff31
SHA512 3f623bfd32d30dcecaf00ade87c5f90a7cc5513c309c7d482d8400759cbfe1b29bc66ae528a424df776fc1a0db98dc620bf951e64da3a1c3f3c9e2d8da273e93
MD5 SHA1 SHA512

NSIS installer

installer

bin/gs_patrn.ps

SHA256 2772567305e3ef06c465e93f132c78d795f8b0844b87c3389d7243fc02f208f7
MD5 6650a7b0ae6b30669698a681782fc50a
SHA1 25454b3cc9aeaf63697e7fc80e10b05b38a97d9d
SHA512 94efead880efd8e351693bfa1b82369f6b562d0952e62a1bfdf81434d5ba926ed15936491a44e6c7dc9456d1f37641375ca491ad922510bd6a05466820669573
SSDEEP 192:M+Bw1aNww9vjZl9N1W3NmySvwtmrwttBw7Fw3R4ANwwWjqNLkdBd28wwNePqbVmZ:Rll9rEmySim+tdNLe8qtFC3
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/gs_pdf_e.ps

SHA256 ca6a808dddda83e753ef5597829c5d7a78832cebf94d7b689b770e9b9304f7b8
MD5 bed3860ff67de4e1849dc883b660bcad
SHA1 6fa305f8068c78a6f728c5cb6ee00ab8f79516cd
SHA512 f189b1d114b591c90d5efbaaeb8b3fa660994d0695926040f5469947a0321411cf8d9c3e135173e2013a4406f8867ae130ec10813d9117aa78a67306ae9aac0e
MD5 SHA1 SHA512

NSIS installer

installer

bin/gs_pdfwr.ps

SHA256 838d880b5402fe3a0eeb2ce50cd7eaf8a9d54799aa1b76612029e4ef97b6b68d
MD5 fcf78c0ea37274155da7b014f3993b07
SHA1 dbda1fd7ac92f183b83b18587e3bf43300cef959
SHA512 30f1d71ef46b88a688a60a4a58ab6eb07001dd59ba2f4d2052b1213ffb642e444c2dfca65f4e884ecf5c596e20a725969631d8273bdf1efe7b83be2109757045
SSDEEP 384:trziG725IVdVOgcNOCufKFCrsf9PnoWRBoZg:tr2MdVOROCuCFa2npRBV
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/gs_pfile.ps

SHA256 fed1cc468b759f7dab2c84ee6083270a2be68a4ae3b3f24a625bb28ba6f802fb
MD5 c745e3ddd78bc47bea2cb03eb62e09da
SHA1 16726329878bb7f68775c14553100dd24eaa5c9a
SHA512 acb9cb3ed356c7fb798f06818f9da2b12408a77c5adbf2deb33d2a0400f1feaae1d76e94d72c70a2e4f2a6191bd9142ce8301591b628df588c2084a0211928c5
SSDEEP 96:+xfUWDZu+m5dVhWVJOy2yNpGdYSZPMxQ3yIxozGuOQ3F8:UrRVAybpOXZExQ3yIxoC+3F8
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/gs_rdlin.ps

SHA256 251279378d7b52665e8268977e820353ed99a287530994361fcbdbbaff67e8d2
MD5 653c43aee6115dd585ac7997245cfad2
SHA1 2c5b6cec26ff1508c5e64629ae82d410ad8dd944
SHA512 583d82af6e5db57e10aa5d52d06c323be039295b4307c8e5f918ba239a42f66b53551b3a83bbc9afa42c850053059cfde1d0139bf9c56693256d728a3bc0e5e1
MD5 SHA1 SHA512

NSIS installer

installer

bin/gs_res.ps

SHA256 04bb1a289b43405ef8b43884c84af103d696f78c2b36f6c45eebf8cc0fd94a2e
MD5 059654fecd9364346f6e7803f9144437
SHA1 a65efdd3c524ae47e4aec686d9f837a47d501019
SHA512 2358c6b96e1b5473412e842c13039b74d974ad8f7037f87c7e73c74492361532aabd72eb05f1358c57a62f21434e06466a8a5c52b5ad02ca142f74a9c1009101
SSDEEP 768:t5bbztX1UK91fxihOsy/8kgMHvmk5UdNKMsgjvMF8QMFnqBKnU:t5bHtlUK91fghOd/8kgMPnYs4vMF8QMC
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/gs_resmp.ps

SHA256 85f187b5b2f278a190dcd1c81f36498208a4f15739f998eaeedb83b5979afdb5
MD5 fab01c0cd42ff85af6a990308d1cfff8
SHA1 c5734ae095e42ff454e10c993f38175df6a03fe9
SHA512 aea045ceb3549b01b9dd6694b51b3dfa59ae0b1edc84385aede710c2f2e69c8a7c8726f0b01c985bc6e10599ae100b5e5fff7ac6b3beea64cec29c3b6e81022e
SSDEEP 384:AqfYu/swGfpp6omhZ3C1wAR1H+UKrnG8gh:AqfYQswGf/K3CWAfHIrg
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/gs_resst.ps

SHA256 ac5a54da0a8b1b79256529bbafd5f7b21a8d9ad5d686dd40c675e4737b1222d8
MD5 6619ce7aac88523c61fb00c448b765f5
SHA1 4af492ff49a7547dc6299cf2d5010d0cda93f561
SHA512 6d5a1e922b69cf3b67577cea76966628f1c9cb66aaca503d3bd85e5d1a535c7e44741d6b7c8efe5c0de8829cfba9c8353fa739e705c1acd41703eef9fded812d
SSDEEP 96:EfUW3uqNQR7QUUkooZ9oh8csfoK+wK+yRbn6K+/l1srsPCsPosPOsP6+YiT6Hppg:yBNQSoZ9oh3sfOdYQQPdPvP5PAnpp4rT
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/gs_sepr.ps

SHA256 3ca254224735dc70153e2ba9a89037def03ffbf68cbb2bc2d4c0c02d12471e8c
MD5 4e660f0efd8d40c7eb026d80228873dd
SHA1 a7fba0c0f8c0f195cda69591bad408e8fcc6d53b
SHA512 0451e1bb858328356f2d83007a23e56cfc96497e8e738829cb7de05230efd7153dab1f3bd45eecca629f33bddaee0c597987622b2fae449a51b4ee40a433dad6
SSDEEP 192:RBXGtcvmMdPAeADnW/WbvTLhtowe1sRPmrF/rfFDrMFC3y7M3fwcw3xjqNbt2MwJ:Rwt6dPAeGLLIsRPmxT9fIf8NZc
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/gs_setpd.ps

SHA256 1db2ae3be2f1efba3c56283a787d241bc92cef7e3cffab6c65bb2a7a736edc52
MD5 e5673d685ecaf6e66b835ce27469fe56
SHA1 b0b7170ec97d3407c7516c7bcce86ad2d18c8572
SHA512 424399c7c1cbea181442d4f82e424234bbbc1873973f605d7e8afcf22bbe26e53c9efa04d68804564b4d7d8deb9892c7097710f6f9515d20fb88ee5ff8fe5626
SSDEEP 768:irLmKEuQALjeKo/lwSlQqRY5bBvf6Uge+yFraX1Dn7ZXu:irZ5SlQmYDfs8yju
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/gs_statd.ps

SHA256 647ccff9e38d58a7b3d6ec6871c319bb2ad68b79b7c39fd26bacf3d54e6b73b1
MD5 eb3ccca35b08b2ffa5305f2dd49b3d8a
SHA1 25794089bd944f0355ee3193d3d81e16cea11973
SHA512 c782a4ee2b72f03cd334b060ea52ef98bb267b839b1f349e8bc750a81d1b6a13761ed483bb5a17c98baba0195d4a7743706c4cb9b70ed71ac5444339c66aa82d
SSDEEP 384:/GT+NxoMED/V94S8a9eCcsaaUIsoNOTS+iFsVZpz:/m+NSMED/z4S8a9eCcsaaUIsoYStkpz
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/gs_std_e.ps

SHA256 f612ded3540efe317be0a25f22035c3864ad8a1c46bb7463aa59916a3f2a2e44
MD5 b893cde96034a907eb17706bb4b5c136
SHA1 697b4e7160cdbe2313b73088a8a2ece50732b21e
SHA512 1092200100cbfa5125dcdbd225bc7df4f6e266497d5256ec324b4c89b1ecfc5d654d1334e29d4ed7faa1f2e479854a88b525575273457e8c79c12cd7f5d4be2c
MD5 SHA1 SHA512

NSIS installer

installer

bin/gs_stres.ps

SHA256 bf9939e2bbd7454e6afa006fcb1081c3a2547fa00f206dace544bcd2d9c52856
MD5 515f62ede882ee87243f58bf563b8600
SHA1 b2d8ff1b56194410d7cd6763976ddc9b1968a365
SHA512 2d70c61df3f34f349d75b4c865c94b3894c109a37738ded61a094ce304759a24231888967969370e1e19c7efe573d23e676d647905ab408106a74ffd94a436f1
SSDEEP 48:qdDRh7Yv6Tigbhc9fGmPr2pw2Q52XyDqTYiHe+XLT93H33vl7MTXFdX+rjX99Yf9:EfUWBUfdT2pw2Q52XyuTYUXFYfEYv
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/gs_sym_e.ps

SHA256 22ac2df26b343be79f4b7bdca9e71cd8e8ef5a4191175478e285836c85e03066
MD5 1c4a785db3c10899b0bb0cfbe6a362cc
SHA1 45cb78f3156bc27c7b993907500c4234d68a704b
SHA512 db525f1ab3bf04b8cc8d3aaad5e6823b637e09a70f57078cdf3a2eff5426b777fde3ffa480fd0b026452dc157f0c45182734526d9e23ccf8e8e69a210d1ac30e
MD5 SHA1 SHA512

NSIS installer

installer

bin/gs_trap.ps

SHA256 448a84cfddcf755e75777c695cdc4498a74524a2ac6dc797c43164cd4e75b094
MD5 09cde7a01592b0e5600c2bcd3370e5c0
SHA1 3e7a2546932d562af7ec441b45a1b6a249fe3328
SHA512 73ee457ce1628612a6577600ed33842fc570835854425d49407b57a3772fbd24e45003280ae92c73cafeb94486ac1ef507734a34c86b0ba24d596acd5077106a
MD5 SHA1 SHA512

NSIS installer

installer

bin/gs_ttf.ps

SHA256 53bb5fba5e023db80950aca63a749dc20740aa85dacda0783d841ab1969dfdcc
MD5 620a7c9d71b3fcd6da73e095620bfa28
SHA1 ae08177787241fcbba630e5107d863c5bf59d731
SHA512 6cc2d3178a5ad212169a4cd11f466dedf10fb9bf43f9ad3c9ab451e6fd6eed1eb749fc87c9361a80e90fdba30d429abbfa91cc0bd6b57298bbe2084eb681ff73
SSDEEP 768:TH42DzhdLckN+80hLtMbD8Mm4sLkHv6Bj7fKv7u1QJMkyH2L:TH1ckN+LhqbQMmfkHGwJMS
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/gs_typ32.ps

SHA256 7e90427d263c662c18ea4210bf521b41ef6eb2102557ee885fd03579297fe170
MD5 dc65efbe38c8a9dad6eba6a7e191e40c
SHA1 de0ea462fecd3ee2fb9217b289b9c12190b72beb
SHA512 cf9a0e20a25aa90ee69f9db0fdb39b8e9c45eda30276d253ee1b2cadde70fb9a35cebb30921c4a5a14e4bbb4ac90067c2c846b258b586dbe22cbde73a966c6ab
SSDEEP 48:zxRh7Yv6Ti5cNhimY92463HI/XSW/t7/GUO5w8aXsGYoNRytzMIdA/OHa24Jwz2F:zxfUWmaimjAXSGNPOja3pvxuCUcFP
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/gs_typ42.ps

SHA256 73efbc119f75cce2b1490af8cfb20f51260d40e61472694a734458ee6241f5d1
MD5 0c054d50d065e2f9379ef965171ee5dd
SHA1 7e3548631bbf274380139f1fc506865aa173c87b
SHA512 09663bd89390f04d4dc6f040ad0911c0aa22b266f3723723af12b91230861d16f22e9c3c3fe320b092f2ad1589699b21907b00cdc258d7236cfda0807b016902
MD5 SHA1 SHA512

NSIS installer

installer

bin/gs_type1.ps

SHA256 974de243b53fa2aaf291016504e799d070b9bdcb2b9a4a112e6a57f4f728d283
MD5 67fb255f456e43e3c96386c6615d8052
SHA1 ceb3d5578979722fceac45255a1771c161e0d54d
SHA512 2c8eccfd3971327cb1d9db780b8e5567a7e0bc2c219ba2f254fe7e6cf953b757509e6f090d8e334dc4b7a6462fd77cb7f405b6237371dd56fd6ce5c5f277954b
SSDEEP 192:eqpvyd4qBsVL7MjdVzOzaRQ8/a/dJUGhYCKA4y4sGEM2b0:eqp9L7MjdVzsd8/vdsGEMZ
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/gs_wan_e.ps

SHA256 60c3b9ea40bd8a98de8420d5eebe54dcacae23ce788cce24829647f38b5b2acd
MD5 b9a2c7beb8a01ed9c6ada9e131e6bb74
SHA1 be16ed40bf7f2c4f112084c32557a061c4ce7726
SHA512 51ed7407f881db48ebee3db8df21b2526b3d6c179f23f7129941880a85e240b32ae39c96f12edb38c35b20d6ebd1739d52f6043a65017b03e3d739b6a634a74c
MD5 SHA1 SHA512

NSIS installer

installer

bin/gs_wl1_e.ps

SHA256 7e8371fda122b06d204f819979267adea798d3ca2920acfab47f6a2e4cf3352a
MD5 333b9135fa2b7466452d7bebd1bd1994
SHA1 bc0110f0b6552a05770fa4ebfc0c63f6dbeeb009
SHA512 c90abcb9238cdcca5a3721fa95f7ec0260173495edc758caa27e016617527c2589b984aa7b146426f87227c7e7afaf61669d9e0a0fd8d5f864dffe4b09d19d0f
MD5 SHA1 SHA512

NSIS installer

installer

bin/gs_wl2_e.ps

SHA256 0ce64ef3e243a7c3d9cc446f0d25fbf6e29e11e7cf15565ab373322529d7d6a0
MD5 b9fd3a1305962f45e8a08edc8aa842d7
SHA1 a34916a834ff5cfda42761fc530464fabcb7d8ad
SHA512 4e73ec53b1c18bd3fed63bbcaca5f3a474b329023b9944eea2cee627b9b801c4355b1f203310d0b1ced4bbb3477611822fba53cf38031cc23fa464a572ba92c0
MD5 SHA1 SHA512

NSIS installer

installer

bin/gs_wl5_e.ps

SHA256 8335b17c3718f4a8bcb9ddd5e9383fba3075d4f30cdf0386f333a13b61a0a487
MD5 c2ca663c4eb7dd0e32593e90085aff1b
SHA1 98cbc402767a1512dd1809417eaaffe8d6ada5cb
SHA512 6bc2557a759b53ae97470c327aed242d1c8d2bf6738b6deeffb0a64b8e129139f78a3e2e73108bb493c7f006be865d91a98211784ecd7b59ca7d0e0e810861d8
MD5 SHA1 SHA512

NSIS installer

installer

bin/gsdll32.dll

IMPHASH 3edacdf434fad396dea32c5caf968307
SHA256 545de7d8c6e49ba5081f916b53848b637243b02558be407ee16d69e3aefc78b3
MD5 2c9537c07ddbea6969d1ed6e2b21d926
SHA1 fc6506767eb908df0b21cdec2b6d2569aebbecad
SHA512 8a8d21a2d2407e8b8974b0986df5ca58390b5897fbcb7961c747ea1ac6eb03544e0c34f282d9e062d10563b1d94b744f70c68a55382225b498fe0c63c0b056ae
SSDEEP 24576:BUjKh4oAqeC+ypv4uQBiyUttjNTuaws5k9aEOtZLK3irKBnXFmeeBBp8NT3wqa:Blh4oZ9muvFtfTua0WroeBBITgqa
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

1442091

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

comdlg32

GetSaveFileNameA

gdi32

DeleteObject GetTextMetricsA GetTextFaceA SelectObject CreateFontIndirectA GetTextExtentPointA DeleteDC GetBitmapBits TextOutA GetDeviceCaps SetTextColor PatBlt SetMapMode GetMapMode CreateCompatibleDC CreateBitmap SetDIBitsToDevice RealizePalette SelectPalette CreatePalette SetBkMode

user32

GetDC FindWindowA MessageBoxA SendDlgItemMessageA EndDialog PostMessageA DialogBoxParamA ReleaseDC MessageBeep IsWindow

winspool.drv

EnumPrintersA ClosePrinter EndDocPrinter WritePrinter AbortPrinter StartDocPrinterA OpenPrinterA

advapi32

RegOpenKeyExA RegQueryValueExA RegCloseKey

kernel32

SetEnvironmentVariableA GetOEMCP GetACP CompareStringW CompareStringA GetCPInfo GetEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsW FreeEnvironmentStringsA InterlockedIncrement GetVersion GetProfileStringA WinExec GetModuleFileNameA lstrlenA GetLastError CreateProcessA GetStdHandle CloseHandle DuplicateHandle CreatePipe GetCurrentProcess CreateFileA GetTempFileNameA GetTempPathA FindClose FindNextFileA FindFirstFileA GetSystemTime CreateMutexA GlobalFree GlobalUnlock ReleaseMutex WaitForSingleObject GlobalLock GlobalAlloc ExitProcess TerminateProcess InterlockedDecrement DeleteFileA HeapFree HeapAlloc LeaveCriticalSection EnterCriticalSection InitializeCriticalSection SetStdHandle GetFileType ReadFile GetTimeZoneInformation GetLocalTime FileTimeToSystemTime FileTimeToLocalFileTime GetFileInformationByHandle PeekNamedPipe HeapReAlloc MoveFileA GetDriveTypeA GetCommandLineA DeleteCriticalSection WideCharToMultiByte MultiByteToWideChar LCMapStringA LCMapStringW GetCurrentThreadId TlsSetValue TlsAlloc TlsFree SetLastError TlsGetValue HeapDestroy HeapCreate VirtualFree VirtualAlloc SetHandleCount GetStartupInfoA SetFilePointer RaiseException GetProcAddress GetModuleHandleA RtlUnwind LoadLibraryA FlushFileBuffers WriteFile GetStringTypeA GetStringTypeW GetExitCodeProcess SetEndOfFile GetFullPathNameA GetCurrentDirectoryA

bin/n019003l.pfb

SHA256 d89a0769709568f00ec6b4ed380d006d78ca20378ad1d8a7cfe7065c17c7fd12
MD5 1c3092ed18554c09919b386ffa7eab85
SHA1 b9967f8348c302bed0bded2aedc64a6f265d6bb4
SHA512 162b678ba0c04bc3b9a577d05c795118d9fb3f2e7709602d9cd9ca07a2008ff9299d1ceb311123aac50dd2c5e4bef8a9bc7026986d882d2a1c7ea02878473c0c
SSDEEP 768:NLkA9WAu78D4EdrTRd2r4DPXVQPH85D5JVCwzxJpblhpJUAC9C0pukJBX:NLkA9WAuIDpdTRlPXy05LVCoJ7hQV9z3
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/n019004l.pfb

SHA256 a7a8cf4b173b410fff6d8f006ace207322bc52183bf219d2ce996cab8a14000c
MD5 f27169cc74234d5bd5e4cca5abafaabb
SHA1 acb56e3a4f2842eb6ca12d128013ceb2fb94c818
SHA512 bf0ce29ef82a731c698d6113a3b046f2cc92d7b62c7aa90f51a0c2484967eca981332605a7a1c7fc6199ac18823cbd74415b4fc5364560500969b453b9b271a2
SSDEEP 768:tLkA9WAuCQy1DPhQAkmw/0cntbolTwn81gK2EtaIEgnnSkWPd:tLkA9WAutwQAl70K7JxtaFgnSkWV
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/n019023l.pfb

SHA256 9b73948cd5e431033f7e74d470b027d55b12e39f5089dbab3eb7226b5ed2e46b
MD5 e2c3d78ae784576039d060ea3dd69f53
SHA1 142992af29b4b1e8a92fd2953350a64f444d0595
SHA512 30e5af7bab66260e1f670eded4948d91411a68c8ffb2118ae9d0a84ec73cfde436d56ab23639ba195fa0a27de1c97dd5ea26a284f9dca137e4b21b6e51a8a4e2
SSDEEP 768:QLkA9WAuGMgMWBnxartdbPLarcFdjVG25PYGGqTvAXWBzClYT31JFBHG:QLkA9WAusMWOtdbPZhG25gG7T9lwYHm
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/n019024l.pfb

SHA256 e58b4c3d3ed978534c3d34a30677c25680f5ad931fb0c3d4f53726aabfe5c956
MD5 b244066151b1e3e718f9b8e88a5ff23b
SHA1 5c05f8702439b8b74f085bc5fb6948a7cb56f15c
SHA512 a0c6dc4a1e7f74d1ae51310a620d15f8cfde0c693a8a6d8f19f85fc0aed999f8c5ad33b6f898e82f6dfbe70ad45035466f335ff5670c6cecc829eb7b26967c97
SSDEEP 768:ILkA9WAucAzjOLl1fMA/zgQcGz7YU83O96+agGLSILwMLbohVtTneZZEP:ILkA9WAu5PslJgrGt8E6+GEhVlnsiP
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/n021003l.pfb

SHA256 2ef9d47303d25f3c9553a43255dae8c39160e130ad5ed34444e39dee03d796a1
MD5 6dab18b61c907687b520c72847215a68
SHA1 9ca8a1be180c6a054b6335302466633bf9022cd2
SHA512 5ec2c77489e7955426901617fdf78c39fada93da1497be08cf118dd837aa8271e394952df46163f8a44ed5ed5f250b3922ba9545947662b29395a8d6366228cf
SSDEEP 768:NLkA9WAuMqktLgmxgubTbtKCCUOUYhM+Vtfqq3mDegvg3mwLfYrqVHOsHt32ALu6:NLkA9WAutktU5ubgGv+VBIvgmCnbH12e
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/n021004l.pfb

SHA256 7f3f19f61452892a29d06af2836331ca78aed29390914d294f7a440d35927142
MD5 811d6c62865936705a31c797a1d5dada
SHA1 783231ebd8e9667e9babaae80c2fce59c0671241
SHA512 b9ee31e667b4266a7027a7cf9fbdc9bb4afd98ee803781216bf7426e7a0f34ff999048f722e214934f62a682a4d5b5e0d55821ec55be873ec2fe91a60ac5e7ef
SSDEEP 768:BLkA9WAu389rlzRf6YcG7O3xdUl1/wFroZ1WITNbumHIi0NF/hmj/1tZVrCLAou7:BLkA9WAuM9RzAlG7Qil5krMXTN3P0LQ1
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/n021023l.pfb

SHA256 f9a0c528b42d2ded2884e31cf1d225b81739ca9b17a0e7cb362fad404ce0aedf
MD5 a3faba884469519614ca56ba5f6b1de1
SHA1 52b319f7e1663dd4d87310d2da18b81b83dacc90
SHA512 36feb6248453a8fe6f9dda1bef7d44dfb83f21910853014194fdfd50a86bcdddba0a0428232f057a1c983ce8fd85ab1ab2624a730732fbfc1aa46c7c4233d7cd
SSDEEP 768:WLkA9WAuQtBwfVHHsiRzEaMS4EbWir1l/4GA1Z8C1x7DQWR8RoNsbhKpHd1tgDTL:WLkA9WAuRLdkEbL4hSCz7EWHNWhIHTgL
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/n021024l.pfb

SHA256 21d029fda4757908be702f42811199eac11ce5886c0acfddd574df4545b1e7a9
MD5 0cbca70e0534538582128f6b54593cca
SHA1 510e1ea497ae74cbf3f5d1b2a090ae88fe5a44c4
SHA512 d8b9ed2fb03c09c07b9612d69ff5e4fc36f5912d0898415cece0511e5efaa19ceb55848afa627e3825d1e1e3362fde8d3e74336bf253a6d4db565c47da7b27d4
SSDEEP 768:BLkA9WAuigNyMaseUKMtpKzEMkzBOC0uqzvvIqcTPAzaJ1YmfXgZN68TX4Vp:BLkA9WAuvNyMaseUT5BOCkvlcTPF1g6J
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/n022003l.pfb

SHA256 8816758f882b18a97a2fcdd4e496b881cd7726b8612648cbfb1c9de2d9853029
MD5 19968a0990191524e34e1994d4a31cb6
SHA1 b16fd6a3bbc63417571cc5dfb900871d798262c9
SHA512 e5d8fef2200874a4e9315cf72a2fb0f1d0c325c2a6dfeaf840c80d99aae5e8639ce20b3234581a2995beb80d50ac91fb1c4810f377ffa38efbac363dbb9bcd39
SSDEEP 768:rLkA9WAuGyxQSR5pKpEamksOZw3ssNebuQAjb42vP3qV2nqW/CQKCXqahS83H3M2:rLkA9WAujq+jKxW3sYIAjb42HqV2qyCs
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/n022004l.pfb

SHA256 115a5a2363a24f7afd4f2021763f62fdf0c034c133ec36d2b13b983f6e1e68df
MD5 4ed1f7e9eba8f1f3e1ec25195460190d
SHA1 cdea656d1bd06f38a795b61223a81c4f4f4cfb87
SHA512 edab8fc393f6d6d18decea9b53f8748dd5b207980ed579681671e59a20157c1185840614d4a82bb921ee9cdd885ced0d69276660f13359e1263fd08b3cd79a55
SSDEEP 1536:zLkA9WAuYu72LkH3QY0ZDkUgDgeDqvnliI/TG72TtLr:sDvkyAT3gDHDqflt/TG7ELr
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/n022023l.pfb

SHA256 5ffe8060bb3e9e3456835076c46d29dfd4f233b7ca753bbb71f512df741cb118
MD5 ea3d9c0311883914133975dd62a9185c
SHA1 63aeccb375bc5961e5ab03d11e34821958d1196f
SHA512 905ab8be0725eecfef220dad4dc53080c73d177dcd46ab9691ebc169a1b277b8ef671006955a8372fe20018fea5c15a284797d0948b920c69d4a7a0bbad18af0
SSDEEP 768:DLkA9WAusJFRqjlwXDTtsDoflt9cdcZ/vUHZtmzeSeFiCJIgoErdnFVT/r0+WCn3:DLkA9WAuKXXvMeltadcNUDmzepsEtTTn
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/n022024l.pfb

SHA256 4f3a93f5db9bc1eff72e3ae198fd34f3c19c7f44e44cd107d4da5f9433e394ba
MD5 8b8414fb335c1ba9c7ca364c3e691b70
SHA1 85aea2b76e24431eb107f5fc67410766511ececc
SHA512 67e574d47eda96b905f3de65cd4020e5a815b42009c04da22f9791d09797041e9968a872d4a98e3b64db06713a03cd5b93a7e77a6a850dc6ffcc151e2d3c3c52
SSDEEP 1536:zLkA9WAu4XyYgfiE1Orvly7xEQyejopcfa9H2CvP:sDuXyYgaEAly7xjPjZflCvP
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/pdf2dsc.ps

SHA256 9046cd758d218d24b39b43eb944b09ce85a972e70afdd9837f212c622906acba
MD5 01c7368eb7b30a2256859f22f36bde63
SHA1 f042fa536e3568c8b739cc5f9d8228f6e29ae17e
SHA512 b1215d3582e987854f7e2202cb91dfa7a1d4cba9547a22e552ea1640313eb0009527bbd5cc0e6be2ff95307ff267bae04df3aaeab3c97560ed13c6e17d88590f
SSDEEP 96:exfUWev5e8LvdeE2fiFtMhI5kJ1JyT5c59ezrovHjNOYyKa:hv57LvdeE2fyMho+zyT5gyobwYu
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/pdf_base.ps

SHA256 25f017efda8f116db3c5efdea9c20d2441f364e5a7383e37f7b3d902a5c59f2b
MD5 ba60b225333f7347362fd6865a59ca04
SHA1 8149cf91f5537088eda26192d2059d838dad7b4f
SHA512 a72f8ec4a20a49b436a9d0927b3dadcb02db4626df8345999ba79b7ea0d943d59f379e4ab936805495a20f7ae933bb36fdb07465b4df15b79ef116f6d402702f
SSDEEP 384:Y/OkiR9rEfyEFVF9gY7x/12L/4Yr5bYgvMsxzQweAgUZb5O420R7L+WV28sX9jg+:YhiMqqVnB/z+5/MgxbNtVsX9jg+
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/pdf_draw.ps

SHA256 d45808fcc97e15a93103cf7447bf001f8a3de627bb978de1ba8c1ca2e3ec2510
MD5 94fe0f4263e025ff21016d4af01d0e00
SHA1 1641f9e6650b3aa0b8780eec30fe42d204b9a63e
SHA512 b1f2371e363323f4fe1af13f6616adfdca04e57103223d2fec82aaebdaed04112382ae7662c91c1b0d9f338a9f7198ad9c72ad73c6ca62ac266ffc02b573220f
SSDEEP 768:5UE3TrpygEAH9kstBHg4jJOh9li/MzZOvGed480rBeqqW7B:OE3TYg3HastBHg59lizvGeG8gBeqqW7B
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/pdf_font.ps

SHA256 1588a4df299809e0abc5d8b42efe9f1c49abbcb095007a26aa8284ca8c35b336
MD5 555840af423822152fc25532ca49a4b4
SHA1 f158db37662cbfcd6f7553589f0ed684c60486a4
SHA512 dededa8d1850e3f3a7cdbf309ee9681f2272cdb64487d1ce89ea8b915591f16c6e30b25640d9a7016c3eab1b120ad677641ab5e6f1f5a5145843b69bb8632ae0
SSDEEP 768:n5WXoA+HaHcrLmZCY9GdiNfHxPy66oimGcliTTKsRHP:n5SoAqrLmZCY9GdiNfHxPv6oimGcliTD
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/pdf_main.ps

SHA256 88cf787a51810ae67c27caeceb89be05476c8264e3275ca274a29ab292ebebd3
MD5 89ae188e17da6628980d7640d9a84fcf
SHA1 1a4a9c72feb605f3698add85fd006979c96aab68
SHA512 f92a1caddb9ccd2f40bb2d885bc823509c208aa9a31bda36161aa6a0c7fb920fb0c6bc9c34fc12228a7c88eda4177e9aa40aa6b85b533083c7369ffbddebcf9c
SSDEEP 768:LzR+gV92EAwPhvDGFPm20iBgWxxeVbnFkGnxfh:Ll+geEAwPhvqPm8BXxxikqth
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/pdf_ops.ps

SHA256 4eafea0eda3ce3b90ea7287837f8e4cf3e54ed57268c68dc79fb97a77ea29cba
MD5 adc3f6ca5a85ab83a9d5f80ff547fec1
SHA1 ec232695022f94f3646b368ac7bf8c7ecd1988c4
SHA512 998e8654da056119ab821e463509feea64d4c80e7f95fcce18d917cdd5001fcc761fae46301a9bff6e84fbe7fe1f4004f69ba468956239b963528f6bfb1735df
SSDEEP 192:8PibQ5UNT4vSsZfmtxhZPo2lKpgTK0qmYnPxygAlnWMK2jkAz8yIlAZZXHixnupv:8PQ3NTz7lugkElIA4flAX3DKqvKqlKw
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/pdf_rbld.ps

SHA256 2452dd15f44fcb346d30363632e316ed11d920972504c5d8cb0758fdcb4ec748
MD5 60f45d59b5262fb8f9c659561b3df7a2
SHA1 0d0cbd9a596de961e4ceb0bae773832bf9b67d84
SHA512 d7bd6cfae174dc993aa904d10f0a48d088685a35bc6324fad556ab2ba12dc36f910ac18aa227011696ff8a406a10a2974c1c729a493128fac5eda00d37331e67
SSDEEP 384:lZEXaMAweswei0EjCu44dAY3rgsrSpWHJCd5zQ6DPrzuuPgS:lZEXZAweswei02Cu4wzWWHJCLU6DPrC4
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/pdf_sec.ps

SHA256 dda904c1bc0ea4a7c68513c486bbd96d00ab26a7816437b37c4c736f90109437
MD5 efaccf9fbc159694db21f88c9498cf1d
SHA1 e7db7838233ba1aa088ba507d139375033e2a9f6
SHA512 bb67e7b53bb599f5e1047d33387eecde368883d3375bdb8d57f0e03e32f000243cf98a9b44ea72fb96f2e304272a1844da55d48a7d6befa82963452f32d4fbeb
SSDEEP 192:hBP0dUGC5zWJO3JXLIHrbPnlox/mRXrRuSjAe/VLbk96KnBUmuJhwjPlwwwhdo1c:hBP0wiY5XkHrLlymRXrRuSjrbkF2muJL
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/pdfopt.ps

SHA256 de6d8df8a4a33f09282c65dbed5fb9da7548846ffb9dcc4064e87f61939caf88
MD5 1e3900bc0a05459f448a805512ae48f6
SHA1 9eb93324fd360c2c07589f24b68293c120fe445d
SHA512 be42253247935d9c0b26cd95269af0567a54fe63420e00813d2ace90c42c94b68b023ac15b83683532826bed52fb1df11e3d39e6f0dcd5fda12bea337ef7e764
SSDEEP 384:QunYGB26TTwIZ5Z/g+5FviY6iz6rESD9FwrX43xI9zKfKnnTbocUTYn5ojemz6:FFLjY+h6iz6rEGvyX+nKnnXoBYn52z6
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/pdfwrite.ps

SHA256 cafa2d41a063cccc5b7e57943c46aaf2dce6d83174cdc37496574e6df6f8db23
MD5 3f6363336daca303295a7fd782a4f77f
SHA1 93f85d3cd7aa6dcd6b998a412b048f5e8edc847a
SHA512 81e58ab6c7b382ff1f54689e8daa36fa84771aded24e2a82123c5dc0e39ca684cecba84722e732f3d812a0c365356d8f45a0dcffc06c867e7b16cd8885f0ffd3
SSDEEP 192:da3CMCcLvlAO7dc6ixQPoggdHIZvB8vki1+RheXvxgQ9Pm4RNAzmL+i9znV:syXc9+6immqEki3vm5Pi1V
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/xlatmap

SHA256 6a8443dd640b1fd84567d95365e87de5a5c028f40226333e4e9a30a95acdbb24
MD5 d342a807c4e443a768fb7ff8ae41fc2b
SHA1 055cf28c8e702e5f2f7b832f9ed8ea6d783fb4b9
SHA512 847ef4dd45062a1873e723793040984fa351b00b45e1b4f22763fdefc4dca7c7496739e4c784959f0dc25eef8c6d179d317b8bbfcca43399925ab8dcbf49cd26
MD5 SHA1 SHA512

NSIS installer

installer

cbak4exp.dll

IMPHASH 2c2efdaaac9f2f994db5dcfec17c7367
SHA256 17b855101ea84a41b3e1979099fe11b92b85dce211a7298686402aa887f1a657
MD5 e8f58a20780f84efac3009ae0f5cb4ce
SHA1 6c2ac06fe58c103d28e313acac7455968dffeb91
SHA512 22ebb86db672d1619af3c31ebececd0b1084514f18595d9ed61cc48a279114fb28b4edb18e33814ede4fb5dccf6f185df315cc40a15ec6b87f7d9f66b7998ba8
SSDEEP 48:iOsud42iQ2D7WiuVgVbe1b/OdOEpJb1qvW+Q/m9NqHfews2h7K50:7U71q17WvqvrHqHw+z
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

4576

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

ccrpani6.ocx

IMPHASH 65fc9d0a203010ff43c76361850802f9
SHA256 d2e7c05d36ed12b3cacac0b111949355efbf2dd7aac23f1bc50164868d917109
MD5 638a72095c79d241a74c792a960056e5
SHA1 502e93441bb9516350f36e16490959c45cfc341b
SHA512 49915477c9cc21645a4835c41e18253ee96035922e55e8c885308412ae9b8ec8776f27451dfa1b105f0b7616f3c02ace800edde9abb163b6ea94058dec9b4042
SSDEEP 1536:wemH4oTadKGy8JYYXuMnsSZdcxsuMUKF4WjLt:w9HTTjOFsGdRuMwILt
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

5756

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

data_v.dat

SHA256 11d86f1e1b16172027c165926f7fc2fe353b7abc027f24faf3341de2a841968a
MD5 009839463102f6ed1344076ee5796703
SHA1 420f78c48ad866919c1de0cb7daed04298fd7276
SHA512 43005ef51136c251a792eaf942d4c93862864019a59d628bfff79df3c57016ecb008df770187099bd34cdb3c495a19118f385b14de62ab9afb636aed69d7c7e2
MD5 SHA1 SHA512

NSIS installer

installer

filev4exp09.ocx

IMPHASH a4382cec86116ecc10479481196fc42f
SHA256 63650d436e83c02a8379d4d5b6e678b11b97e1035cf46a9134d2f8a320bc2d80
MD5 53c629e2ec75a7c1686bbf0f47375086
SHA1 dff0b0673eb8e55c6c0fc1cd81efb8b4c7d2bed1
SHA512 c569f0e3c3b8d1b1fe43ce534c607de55e7c2e17071fe4e91fe7add01f23fba74971e12fa0320753fee9148fbafb7ec94924413b0e604ac59507b1326c77130b
SSDEEP 6144:6WOT6XqrBaeYq59E42AZqX5T81Jgeui6PYPr97zrwVVHR:HOTEpq5m4oGnHuZuCVV
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

173389

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

shlwapi

PathMatchSpecW

kernel32

GetModuleFileNameA GetEnvironmentVariableA GetVersionExA HeapDestroy HeapCreate VirtualFree VirtualAlloc IsBadWritePtr SetHandleCount GetStdHandle GetFileType GetStartupInfoA FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW SetUnhandledExceptionFilter LCMapStringA LCMapStringW IsBadReadPtr IsBadCodePtr GetCPInfo GetACP GetOEMCP GetStringTypeA GetStringTypeW SetStdHandle CompareStringA CompareStringW HeapReAlloc HeapSize GetLocalTime GetSystemTime GetTimeZoneInformation Sleep GlobalFree GlobalUnlock GlobalLock CreateDirectoryW MulDiv GlobalAlloc GlobalSize SetThreadPriority CreateThread ResetEvent GetTimeFormatW GetDateFormatW FileTimeToSystemTime FileTimeToLocalFileTime lstrcpyW GetWindowsDirectoryW MultiByteToWideChar ExpandEnvironmentStringsW FindClose FindFirstFileW WriteFile CopyFileW CloseHandle CreateFileW GetSystemDirectoryW GetFileAttributesW FindNextFileW WaitForSingleObject SetEvent TerminateProcess ExitProcess RaiseException GetCommandLineA HeapAlloc HeapFree RtlUnwind lstrcpyA GetFileTime GetFileSize FindResourceExW GetShortPathNameW GetFullPathNameW GetVolumeInformationW SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer ReadFile WritePrivateProfileStringW GetProcessVersion GetLastError GlobalFlags SetErrorMode TlsGetValue LocalReAlloc TlsSetValue EnterCriticalSection LeaveCriticalSection TlsFree GlobalHandle DeleteCriticalSection TlsAlloc InitializeCriticalSection LocalAlloc GetProfileIntW ReleaseSemaphore CreateSemaphoreW GlobalReAlloc SetLastError GetUserDefaultLCID IsDBCSLeadByte InterlockedIncrement FindNextChangeNotification DuplicateHandle WaitForMultipleObjects GetCurrentProcess FindCloseChangeNotification FindFirstChangeNotificationW FormatMessageW lstrcpynW LocalFree lstrcmpiW CreateEventW GetModuleFileNameW lstrcmpW GetCurrentThread lstrlenW InterlockedDecrement GetModuleHandleA LoadLibraryA FreeLibrary lstrlenA GetVersion lstrcatW GetCurrentThreadId GlobalAddAtomW GlobalFindAtomW GlobalDeleteAtom GetDriveTypeW FindResourceW SizeofResource LoadResource LockResource WideCharToMultiByte GetVersionExW GetTickCount FindAtomW AddAtomW GetModuleHandleW LoadLibraryW GetProcAddress SetEnvironmentVariableA

user32

GetDCEx GetTabbedTextExtentA CharUpperW GetSysColorBrush GetDialogBaseUnits UnregisterClassW IsClipboardFormatAvailable LockWindowUpdate EnumChildWindows EndPaint BeginPaint GetClassNameW GrayStringW DrawTextW TabbedTextOutW SetRectEmpty ReleaseCapture SetCapture IsRectEmpty CreateMenu GetDesktopWindow InflateRect DrawEdge GetMessageW TranslateMessage ValidateRect PostQuitMessage LoadStringW GetMenuCheckMarkDimensions ModifyMenuW CheckMenuItem EnableMenuItem ShowWindow MoveWindow SetWindowTextW IsDialogMessageW SendDlgItemMessageW SendDlgItemMessageA MapWindowPoints GetFocus SetFocus AdjustWindowRectEx EqualRect IsWindowVisible GetTopWindow MessageBoxW IsChild GetCapture WinHelpW wsprintfW RegisterClassW GetMenu GetWindowTextLengthW GetWindowTextW GetDlgCtrlID SetWindowsHookExW CallNextHookEx SetPropW UnhookWindowsHookEx GetPropW CallWindowProcW RemovePropW DefWindowProcW GetMessageTime GetMessagePos GetLastActivePopup GetForegroundWindow SetForegroundWindow GetWindow RegisterWindowMessageW OffsetRect IsIconic GetWindowPlacement GetNextDlgTabItem EndDialog GetActiveWindow SetActiveWindow CreateDialogIndirectParamW GetParent GetDlgItem IsWindowEnabled SetMenuItemBitmaps InsertMenuItemW SetMenuDefaultItem InsertMenuW GetSubMenu UpdateWindow LoadCursorW SetCursor CreateIconIndirect CopyImage GetMenuDefaultItem IsCharAlphaW GetScrollInfo WindowFromPoint PeekMessageW DispatchMessageW SetClipboardViewer GetWindowDC SetRect FrameRect GetIconInfo IntersectRect GetWindowRect LoadBitmapW GetClientRect PtInRect KillTimer GetAsyncKeyState GetMenuItemInfoW SetMenuItemInfoW GetMenuItemCount GetMenuState RemoveMenu IsWindow ChangeClipboardChain SetTimer GetMenuItemID SystemParametersInfoW GetSystemMetrics DrawIconEx LoadIconW CreatePopupMenu AppendMenuW TrackPopupMenu GetMenuStringW DestroyMenu GetCursorPos ScreenToClient CharUpperBuffW GetKeyState RegisterClipboardFormatW ClientToScreen DestroyIcon CopyRect SetWindowPos LoadImageW GetDC ReleaseDC FillRect CreateWindowExW SetParent InvalidateRect GetWindowLongW SetWindowLongW SendMessageW PostMessageW GetSysColor DestroyWindow EnableWindow GetClassInfoW

gdi32

CreateRectRgn CreatePen CreatePatternBrush CopyMetaFileW CreateDCW GetTextMetricsW GetTextAlign EnumFontFamiliesExW UnrealizeObject Rectangle GetStockObject GetCurrentPositionEx MoveToEx SelectClipRgn ScaleWindowExtEx SetWindowExtEx SetWindowOrgEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetMapMode SetROP2 SetBkMode CreateBitmap SetStretchBltMode StretchBlt SetBkColor ExtTextOutW DeleteDC BitBlt DeleteObject CreateSolidBrush SetViewportOrgEx SelectObject CreateCompatibleDC CreateCompatibleBitmap GetDeviceCaps RestoreDC SaveDC CreateRectRgnIndirect PatBlt Escape TextOutW RectVisible PtVisible CombineRgn CreateMetaFileW CloseMetaFile DeleteMetaFile LPtoDP SetTextColor GetClipBox SetDIBitsToDevice SetRectRgn GetDIBits GetTextExtentPoint32W CreateFontIndirectW SetPixel GetPixel GetObjectW

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW DocumentPropertiesW ClosePrinter

advapi32

RegOpenKeyExW RegEnumKeyExW RegQueryValueExW RegOpenKeyW RegCreateKeyW RegSetValueExW CryptAcquireContextW CryptDestroyHash CryptHashData CryptCreateHash CryptReleaseContext CryptDestroyKey CryptVerifySignatureW CryptImportKey RegEnumKeyW RegSetValueW RegDeleteKeyW RegQueryValueW RegCreateKeyExW RegCloseKey

shell32

ShellExecuteW DragQueryFileW SHGetMalloc SHGetDataFromIDListW SHGetFileInfoW ExtractIconW SHChangeNotify SHGetSpecialFolderLocation SHGetPathFromIDListW SHGetDesktopFolder SHBrowseForFolderW

comctl32

ImageList_ReplaceIcon ImageList_AddMasked ImageList_Add ImageList_SetOverlayImage ImageList_SetImageCount ImageList_Create ImageList_GetIconSize ImageList_Duplicate ImageList_GetIcon ImageList_SetBkColor ImageList_Remove ImageList_GetImageCount ord17 ImageList_Destroy

ole32

RegisterDragDrop CoDisconnectObject StringFromCLSID ReadFmtUserTypeStg OleDuplicateData CreateOleAdviseHolder CreateDataAdviseHolder OleDestroyMenuDescriptor OleCreateMenuDescriptor OleSaveToStream CoTaskMemAlloc CreateDataCache CoRevokeClassObject CoRegisterClassObject StringFromGUID2 CoInitializeEx CoUninitialize OleGetClipboard CoTaskMemFree CLSIDFromString CoCreateInstance OleInitialize ReleaseStgMedium OleLoadFromStream CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes CreateStreamOnHGlobal DoDragDrop RevokeDragDrop ReadClassStm CoLockObjectExternal

olepro32

ord254 ord253 ord251 ord252 ord250

oleaut32

SysStringLen SysAllocString SysAllocStringLen LoadTypeLi RegisterTypeLi SysStringByteLen VariantCopy VariantChangeType SafeArrayGetLBound SafeArrayGetUBound SafeArrayPutElement SafeArrayCreate SafeArrayAccessData SafeArrayUnaccessData SafeArrayGetDim VariantClear VariantInit SysFreeString LoadRegTypeLi

fldrv4exp09.ocx

IMPHASH c4cc3ab1a975f6f01e283840bdf99cc4
SHA256 3f2bf4e85ca823635ed6873861c38bfd1fa82dbb4ba1396c6973f0e2129036d7
MD5 0fa1af76e37c40bd9c1daf5941d66f50
SHA1 16bdc40db7aa7939cb0dcc173a37aa975a033a3a
SHA512 b99a66d440924795127544ef0fe100bff596298f664674b9aa82476d4ba330a5b60e85ee258394455f9b4d33d27c048b82e8dc3a90ff53decbd932acb3e9e862
SSDEEP 6144:W/20z2UdUcq1J8gmp89x02xWosSbwdf6pdECpvcHPI5Opsg:MZf3gy8kyYfCExsg
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

135512

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

shlwapi

PathMatchSpecW

kernel32

FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW SetUnhandledExceptionFilter LCMapStringA LCMapStringW IsBadReadPtr IsBadCodePtr GetCPInfo GetACP GetOEMCP GetStringTypeA GetStringTypeW SetStdHandle CompareStringA CompareStringW SetEnvironmentVariableA GetStartupInfoA GetFileType GetStdHandle SetHandleCount IsBadWritePtr VirtualAlloc Sleep GlobalFree GlobalUnlock GlobalLock MulDiv GlobalSize GlobalAlloc lstrcpynW MultiByteToWideChar FreeLibrary GetProcAddress LoadLibraryW GetModuleHandleW AddAtomW FindAtomW GetTickCount WideCharToMultiByte LockResource LoadResource SizeofResource FindResourceW InterlockedIncrement CreateDirectoryW GetDriveTypeW lstrcpyW GlobalDeleteAtom GlobalFindAtomW GlobalAddAtomW GetCurrentThreadId VirtualFree HeapCreate HeapDestroy GetVersionExA GetEnvironmentVariableA GetModuleFileNameA HeapReAlloc HeapSize TerminateProcess ExitProcess GetLocalTime GetSystemTime GetTimeZoneInformation RaiseException GetCommandLineA HeapAlloc HeapFree RtlUnwind lstrcpyA WritePrivateProfileStringW FindResourceExW GetFileTime GetFileSize GetFileAttributesW GetShortPathNameW GetFullPathNameW GetVolumeInformationW FindFirstFileW FindClose SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile CreateFileW GetCurrentProcess DuplicateHandle lstrcatW GetVersion lstrlenA LoadLibraryA GetModuleHandleA InterlockedDecrement lstrlenW SetLastError GetProcessVersion GetLastError GlobalFlags SetErrorMode TlsGetValue LocalReAlloc TlsSetValue EnterCriticalSection LeaveCriticalSection TlsFree GlobalHandle DeleteCriticalSection TlsAlloc InitializeCriticalSection LocalAlloc CloseHandle GetCurrentThread CopyFileW GetUserDefaultLCID FileTimeToLocalFileTime FileTimeToSystemTime GetModuleFileNameW GlobalReAlloc FormatMessageW LocalFree GetProfileIntW IsDBCSLeadByte lstrcmpiW lstrcmpW

user32

GetDCEx CharUpperW GetTabbedTextExtentA GetSysColorBrush GetDialogBaseUnits UnregisterClassW GetMessageW TranslateMessage PostQuitMessage IsClipboardFormatAvailable LockWindowUpdate EnumChildWindows SetRectEmpty CreateMenu IsRectEmpty SetCapture ReleaseCapture GetDesktopWindow ValidateRect DrawEdge InflateRect PtInRect GetClassNameW GrayStringW DrawTextW TabbedTextOutW EndPaint BeginPaint wvsprintfW LoadStringW GetMenuCheckMarkDimensions ModifyMenuW CheckMenuItem EnableMenuItem ShowWindow MoveWindow SetWindowTextW IsDialogMessageW LoadIconW UpdateWindow SendDlgItemMessageW SendDlgItemMessageA MapWindowPoints PeekMessageW DispatchMessageW GetFocus SetFocus AdjustWindowRectEx EqualRect IsWindowVisible GetScrollPos GetTopWindow MessageBoxW IsChild GetCapture WinHelpW wsprintfW GetClassInfoW RegisterClassW GetMenu GetWindowTextLengthW GetWindowTextW GetDlgCtrlID SetWindowsHookExW CallNextHookEx SetPropW UnhookWindowsHookEx GetPropW CallWindowProcW RemovePropW DefWindowProcW GetMessageTime GetMessagePos GetLastActivePopup GetForegroundWindow SetForegroundWindow GetWindow RegisterWindowMessageW OffsetRect IntersectRect SystemParametersInfoW IsIconic GetWindowPlacement GetNextDlgTabItem EndDialog GetActiveWindow SetActiveWindow IsWindow GetSystemMetrics CreateDialogIndirectParamW DestroyWindow GetParent GetDlgItem IsWindowEnabled SetMenuItemBitmaps InsertMenuItemW SetMenuDefaultItem GetMenuItemInfoW SetMenuItemInfoW InsertMenuW GetSubMenu RemoveMenu LoadCursorW SetCursor GetIconInfo CreateIconIndirect GetMenuDefaultItem GetMenuItemCount GetMenuState GetMenuItemID CopyRect GetDC FillRect CreateWindowExW GetWindowLongW SetWindowLongW SetParent PostMessageW SetClipboardViewer GetWindowDC SetRect ReleaseDC LoadImageW CopyImage LoadBitmapW DestroyIcon SetTimer KillTimer GetClientRect GetCursorPos ScreenToClient ClientToScreen GetAsyncKeyState CreatePopupMenu AppendMenuW TrackPopupMenu GetMenuStringW DestroyMenu ChangeClipboardChain GetKeyState GetSysColor RegisterClipboardFormatW GetWindowRect SetWindowPos InvalidateRect SendMessageW EnableWindow

gdi32

CreatePen CreatePatternBrush PtVisible RectVisible TextOutW Escape LPtoDP DeleteMetaFile CloseMetaFile CreateMetaFileW SetRectRgn CombineRgn CopyMetaFileW CreateDCW GetTextExtentPoint32W GetTextMetricsW GetClipBox GetTextAlign EnumFontFamiliesExW UnrealizeObject Rectangle CreateRectRgn GetCurrentPositionEx MoveToEx SelectClipRgn ScaleWindowExtEx CreateFontIndirectW BitBlt CreateCompatibleBitmap CreateCompatibleDC GetObjectW RealizePalette GetDeviceCaps CreateBitmap DeleteObject SetWindowExtEx SetWindowOrgEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetMapMode SetROP2 SetBkMode SelectPalette RestoreDC SaveDC CreateRectRgnIndirect PatBlt SetViewportOrgEx GetStockObject SetTextColor ExtTextOutW SetBkColor DeleteDC SelectObject CreateSolidBrush

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW DocumentPropertiesW ClosePrinter

advapi32

RegQueryValueExW RegCreateKeyW RegSetValueExW CryptAcquireContextW CryptDestroyHash CryptHashData CryptCreateHash CryptReleaseContext CryptDestroyKey CryptVerifySignatureW CryptImportKey RegOpenKeyExW RegEnumKeyW RegOpenKeyW RegSetValueW RegDeleteKeyW RegQueryValueW RegCreateKeyExW RegCloseKey

shell32

SHGetPathFromIDListW ShellExecuteW DragQueryFileW SHBrowseForFolderW ExtractIconW SHGetSpecialFolderLocation SHGetFileInfoW SHGetMalloc SHGetDesktopFolder SHChangeNotify

comctl32

ImageList_SetBkColor ImageList_ReplaceIcon ImageList_GetIcon ImageList_AddMasked ImageList_GetIconSize ImageList_Create ImageList_Duplicate ImageList_SetOverlayImage ImageList_Remove ImageList_GetBkColor ImageList_GetImageCount ord17 ImageList_Destroy

ole32

ReadFmtUserTypeStg OleDuplicateData ReadClassStm CreateOleAdviseHolder CreateDataAdviseHolder OleDestroyMenuDescriptor OleCreateMenuDescriptor CoRevokeClassObject CoRegisterClassObject StringFromCLSID DoDragDrop OleSaveToStream CoTaskMemAlloc CreateDataCache RevokeDragDrop CoLockObjectExternal RegisterDragDrop CoDisconnectObject StringFromGUID2 ReleaseStgMedium CoTaskMemFree CoCreateInstance OleInitialize OleLoadFromStream CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes CreateStreamOnHGlobal OleGetClipboard

olepro32

ord254 ord253 ord251 ord252 ord250

oleaut32

SysStringLen RegisterTypeLi LoadTypeLi SysStringByteLen SysAllocStringLen SysAllocString VariantChangeType VariantClear VariantCopy SafeArrayGetDim SafeArrayGetLBound SafeArrayGetUBound SafeArrayAccessData SafeArrayUnaccessData SafeArrayCreate SafeArrayPutElement LoadRegTypeLi SysFreeString VariantInit

jpeg4exp.dll

IMPHASH eb6df2cdc437fbaf0d983ed099e6f072
SHA256 5a0b1c4e5d91fd67a1ad23e5ce869899b79a7282cb6e5533dc5c074eb59306ec
MD5 a0ce0247d48fecaac607edb1e2d87fd8
SHA1 346bf586bdf6ae4181c685fa74adf4524328d469
SHA512 38a03530dfafe3030ece87dad7af28baff8e79f87618f1510bcb5b7f994632745dc70f9062ba6bdbcd408062786bbb3c37a53c21423d1f172663d9e57c232986
SSDEEP 3072:RsZ/nXwWIsHJah2s6ozRcYJi8HqC+B+x/Q67u/TIrnVlm77qYFh5ZKhL3DcOgJ06:Re/XwWIOJsK/sroqYX54Lz
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

128640

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

pdf4exp.dll

IMPHASH 9caa1fb0954d8df4bb0a3f922846f974
SHA256 cf85a5e5a1c27fa4a205c51a4fa0775c9a7deea60c08e8034c953bd0feef4ded
MD5 3e0c2c8bd7352ba1329a787f7bc43387
SHA1 ab845d7046632b959f5fbc1386fa4a08ce6d7762
SHA512 f9a31e315a8f1c6b65444d4a53d2bdd6772ebd0e6c0350a387d3a4be612fb2334fc8fdb9d93bf93137096f60051acfa57a5a01264ecc24f010c4e4f500cc3302
SSDEEP 24576:VvYn6aOjZ9yvzYUcdCLmR7kcrvuwsdMjggVR+OKfjX3v0Ba7vzNUDwRy+TIF8Ien:9bqmR7kiHsAHVR+ZXwDIT+8IeH
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

5

Entry point

1649724

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

oleaut32

SysFreeString SysReAllocStringLen SysAllocStringLen CreateErrorInfo GetErrorInfo SetErrorInfo DispGetIDsOfNames RegisterTypeLib LoadTypeLibEx SysFreeString SafeArrayPtrOfIndex SafeArrayGetElement SafeArrayUnaccessData SafeArrayAccessData SafeArrayGetUBound SafeArrayGetLBound SafeArrayCreate VariantChangeType VariantCopy VariantClear VariantInit

advapi32

RegQueryValueExW RegOpenKeyExW RegCloseKey RegSetValueExW RegQueryValueExW RegOpenKeyExW RegFlushKey RegDeleteKeyW RegCreateKeyExW RegCloseKey CryptGetHashParam CryptHashData CryptDestroyHash CryptCreateHash CryptReleaseContext CryptAcquireContextW

user32

GetKeyboardType LoadStringW MessageBoxA CharNextW CreateWindowExW WindowFromPoint WaitMessage UpdateWindow UnregisterClassW UnhookWindowsHookEx TranslateMessage TranslateMDISysAccel TrackPopupMenu SystemParametersInfoW ShowWindow ShowScrollBar ShowOwnedPopups SetWindowsHookExW SetWindowPos SetWindowPlacement SetWindowLongW SetTimer SetScrollRange SetScrollPos SetScrollInfo SetRect SetPropW SetParent SetMenuItemInfoW SetMenu SetForegroundWindow SetFocus SetCursor SetClassLongW SetCapture SetActiveWindow SendMessageA SendMessageW ScrollWindow ScreenToClient RemovePropW RemoveMenu ReleaseDC ReleaseCapture RegisterWindowMessageW RegisterClipboardFormatW RegisterClassW RedrawWindow PostThreadMessageW PostQuitMessage PostMessageW PeekMessageA PeekMessageW OffsetRect MsgWaitForMultipleObjectsEx MsgWaitForMultipleObjects MessageBoxW MapWindowPoints MapVirtualKeyW LoadStringW LoadKeyboardLayoutW LoadIconW LoadCursorW LoadBitmapW KillTimer IsZoomed IsWindowVisible IsWindowUnicode IsWindowEnabled IsWindow IsIconic IsDialogMessageA IsDialogMessageW IsChild InvalidateRect IntersectRect InsertMenuItemW InsertMenuW InflateRect GetWindowThreadProcessId GetWindowTextW GetWindowRect GetWindowPlacement GetWindowLongW GetWindowDC GetTopWindow GetSystemMetrics GetSystemMenu GetSysColorBrush GetSysColor GetSubMenu GetScrollRange GetScrollPos GetScrollInfo GetPropW GetParent GetWindow GetMessagePos GetMenuStringW GetMenuState GetMenuItemInfoW GetMenuItemID GetMenuItemCount GetMenu GetLastActivePopup GetKeyboardState GetKeyboardLayoutNameW GetKeyboardLayoutList GetKeyboardLayout GetKeyState GetKeyNameTextW GetIconInfo GetForegroundWindow GetFocus GetDesktopWindow GetDCEx GetDC GetCursorPos GetCursor GetClipboardData GetClientRect GetClassLongW GetClassInfoW GetCapture GetActiveWindow FrameRect FindWindowExW FindWindowW FillRect EnumWindows EnumThreadWindows EnumChildWindows EndPaint EnableWindow EnableScrollBar EnableMenuItem DrawTextExW DrawTextW DrawMenuBar DrawIconEx DrawIcon DrawFrameControl DrawEdge DispatchMessageA DispatchMessageW DestroyWindow DestroyMenu DestroyIcon DestroyCursor DeleteMenu DefWindowProcW DefMDIChildProcW DefFrameProcW CreatePopupMenu CreateMenu CreateIcon ClientToScreen CheckMenuItem CharUpperBuffW CharToOemW CharNextW CharLowerBuffW CharLowerW CallWindowProcW CallNextHookEx BeginPaint CharUpperBuffA AdjustWindowRectEx ActivateKeyboardLayout

kernel32

GetACP Sleep VirtualFree VirtualAlloc GetSystemInfo GetTickCount QueryPerformanceCounter GetVersion GetCurrentThreadId VirtualQuery WideCharToMultiByte MultiByteToWideChar lstrlenW lstrcpynW LoadLibraryExW GetThreadLocale GetStartupInfoA GetProcAddress GetModuleHandleW GetModuleFileNameW GetLocaleInfoW GetCommandLineW FreeLibrary FindFirstFileW FindClose ExitProcess ExitThread CreateThread CompareStringW WriteFile UnhandledExceptionFilter RtlUnwind RaiseException GetStdHandle CloseHandle TlsSetValue TlsGetValue TlsFree TlsAlloc LocalFree LocalAlloc lstrcpyW WriteFile WideCharToMultiByte WaitForSingleObject WaitForMultipleObjectsEx VirtualQueryEx VirtualQuery VirtualAlloc SwitchToThread SizeofResource SignalObjectAndWait SetThreadLocale SetLastError SetFilePointer SetEvent SetErrorMode SetEndOfFile ResumeThread ResetEvent ReadFile MultiByteToWideChar MulDiv LockResource LoadResource LoadLibraryW LeaveCriticalSection IsBadReadPtr InitializeCriticalSection GlobalUnlock GlobalLock GlobalFree GlobalFindAtomW GlobalDeleteAtom GlobalAlloc GlobalAddAtomW GetVersionExW GetVersion GetTimeZoneInformation GetTickCount GetThreadLocale GetTempPathW GetStdHandle GetShortPathNameW GetProfileStringW GetProcAddress GetModuleHandleW GetModuleFileNameW GetLocaleInfoW GetLocalTime GetLastError GetFullPathNameW GetFileTime GetFileAttributesW GetExitCodeThread GetDiskFreeSpaceW GetDateFormatW GetCurrentThreadId GetCurrentThread GetCurrentProcessId GetCurrentProcess GetCPInfo FreeResource InterlockedIncrement InterlockedExchangeAdd InterlockedExchange InterlockedDecrement InterlockedCompareExchange FreeLibrary FormatMessageW FindResourceW FindFirstFileW FindClose FileTimeToLocalFileTime FileTimeToDosDateTime EnumCalendarInfoA EnterCriticalSection DeleteFileW DeleteCriticalSection CreateThread CreateFileW CreateEventW CompareStringA CompareStringW CloseHandle Sleep

msimg32

AlphaBlend

gdi32

UnrealizeObject StrokePath StrokeAndFillPath StretchDIBits StretchBlt StartPage StartDocW SetWindowOrgEx SetWinMetaFileBits SetViewportOrgEx SetTextColor SetStretchBltMode SetROP2 SetPixel SetMapMode SetICMMode SetEnhMetaFileBits SetDIBColorTable SetBrushOrgEx SetBkMode SetBkColor SetAbortProc SelectPalette SelectObject SaveDC RestoreDC RemoveFontResourceW RectVisible RealizePalette PolyBezierTo PlayEnhMetaFile PatBlt MoveToEx MaskBlt LineTo LPtoDP IntersectClipRect GetWindowOrgEx GetWinMetaFileBits GetTextMetricsW GetTextExtentPoint32W GetSystemPaletteEntries GetStockObject GetRgnBox GetPixel GetPaletteEntries GetOutlineTextMetricsA GetObjectW GetKerningPairs GetGlyphOutlineW GetFontData GetEnhMetaFilePaletteEntries GetEnhMetaFileHeader GetEnhMetaFileDescriptionW GetEnhMetaFileBits GetDeviceCaps GetDIBits GetDIBColorTable GetDCOrgEx GetCurrentPositionEx GetClipBox GetCharWidthW GetCharWidth32W GetBrushOrgEx GetBitmapBits GdiFlush FrameRgn FillPath ExtTextOutW ExcludeClipRect EnumFontsW EnumFontFamiliesExA EnumEnhMetaFile EndPath EndPage EndDoc DeleteObject DeleteEnhMetaFile DeleteDC CreateSolidBrush CreateScalableFontResourceW CreateRectRgn CreatePenIndirect CreatePalette CreateICW CreateHalftonePalette CreateFontIndirectW CreateEnhMetaFileW CreateDIBitmap CreateDIBSection CreateDCW CreateCompatibleDC CreateCompatibleBitmap CreateBrushIndirect CreateBitmap CopyEnhMetaFileW CombineTransform CloseFigure CloseEnhMetaFile BitBlt BeginPath AddFontResourceW

version

VerQueryValueW GetFileVersionInfoSizeW GetFileVersionInfoW

ole32

IsEqualGUID OleUninitialize OleInitialize CoTaskMemFree CLSIDFromProgID StringFromCLSID CoCreateInstance CoLockObjectExternal CoDisconnectObject CoRevokeClassObject CoRegisterClassObject CoUninitialize CoInitialize IsEqualGUID CoCreateGuid

comctl32

InitializeFlatSB FlatSB_SetScrollProp FlatSB_SetScrollPos FlatSB_SetScrollInfo FlatSB_GetScrollPos FlatSB_GetScrollInfo _TrackMouseEvent ImageList_SetIconSize ImageList_GetIconSize ImageList_Write ImageList_Read ImageList_GetDragImage ImageList_DragShowNolock ImageList_DragMove ImageList_DragLeave ImageList_DragEnter ImageList_EndDrag ImageList_BeginDrag ImageList_Remove ImageList_DrawEx ImageList_GetBkColor ImageList_SetBkColor ImageList_Add ImageList_SetImageCount ImageList_GetImageCount ImageList_Destroy ImageList_Create

winspool.drv

OpenPrinterW EnumPrintersW DocumentPropertiesW DeviceCapabilitiesA DeviceCapabilitiesW ClosePrinter

crypt32

CryptSignMessage CertGetCertificateContextProperty CertFreeCertificateContext CertEnumCertificatesInStore CertCloseStore PFXImportCertStore PFXIsPFXBlob

msvcrt

strlen strncpy _ftol vsprintf fprintf printf pow ceil floor memcpy memset realloc free calloc malloc

Name

.text

Size

1.6MB

Virtual Size

1.6MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.itext

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

79KB

Virtual Size

78KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

21KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

13KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

171B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

73KB

Virtual Size

73KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

225KB

Virtual Size

225KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

vpdf4exp.dll

IMPHASH 79aa023951e65acf3eb518f3bd6f804b
SHA256 9e9a366bf59701c3ffce153e83119da03e50a5390ca83b386c88896465ce5dd5
MD5 5e342385543b647bb34f94324d80fbc6
SHA1 248fa7c50990485131f60bba0f0808d1ddb76a7c
SHA512 7a3a7140d814dfce09b505ff3bd3632e048b9bcaed5fc9731fc8614d9e68754ea302bb2972488e44efc2f8f136ba21967fd550723a9a374637eefe20e34641c3
SSDEEP 24576:tkVHWtTQ1KfwUYx3cWqX3RXtFWioj0+sky6ncf5UiI/eCubRWYQD4YcjsviX:q7cWqXBtaW22CQJEXiX
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

1075777

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

TlsFree TlsGetValue GetModuleHandleA ExitProcess TerminateProcess GetCurrentProcess SetHandleCount GetStdHandle GetFileType GetStartupInfoA FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStrings TlsAlloc GetEnvironmentVariableA HeapDestroy HeapCreate VirtualFree WriteFile Sleep LCMapStringA LCMapStringW CloseHandle ReadFile SetFilePointer VirtualAlloc IsBadWritePtr HeapSize FlushFileBuffers SetUnhandledExceptionFilter GetStringTypeA GetStringTypeW IsBadReadPtr IsBadCodePtr GetCPInfo GetOEMCP SetStdHandle CreateFileA SetEndOfFile CompareStringA CompareStringW SetEnvironmentVariableA InterlockedExchange TlsSetValue GetCurrentThreadId GetSystemTimeAsFileTime RaiseException GetTimeZoneInformation DeleteFileA HeapFree HeapReAlloc HeapAlloc InterlockedIncrement InterlockedDecrement GetVersion GetCommandLineA RtlUnwind GetSystemTime FatalAppExitA LoadLibraryA GetProcAddress GetVersionExA GetACP GetFullPathNameA DeleteCriticalSection InitializeCriticalSection MultiByteToWideChar WideCharToMultiByte GetLocalTime GetLastError EnterCriticalSection LeaveCriticalSection SetLastError GetEnvironmentStringsW GetModuleFileNameA

user32

IntersectRect GetDC ReleaseDC FillRect OpenClipboard EmptyClipboard SetClipboardData CloseClipboard MessageBoxA

gdi32

GetOutlineTextMetricsA GetCharWidthA GetRegionData GetTextFaceA GetTextMetricsA GetFontData CreateFontA DeleteDC CloseFigure RestoreDC SelectClipRgn SaveDC CreateRectRgn DeleteObject CreateSolidBrush SelectObject CreateCompatibleBitmap CreateCompatibleDC PolyBezierTo BeginPath SelectClipPath IntersectClipRect WidenPath CreateDCA CreateFontIndirectA EndPath ExtCreatePen SetMiterLimit SetPolyFillMode StrokeAndFillPath StrokePath FillPath MoveToEx LineTo GetClipBox StretchDIBits SetDIBitsToDevice GetClipRgn SetStretchBltMode GetObjectType CreateBitmap GetDeviceCaps BitBlt GetDIBits GetObjectA CreateDIBitmap ExtEscape GetStockObject EnumFontFamiliesExA CreatePen

advapi32

RegCreateKeyExA RegQueryValueExA RegSetValueExA RegCloseKey RegDeleteKeyA RegOpenKeyExA

FPDFAction_GetDest FPDFAction_GetFilePath FPDFAction_GetType FPDFAction_GetURIPath FPDFBitmap_Create FPDFBitmap_CreateEx FPDFBitmap_Destroy FPDFBitmap_FillRect FPDFBitmap_GetBuffer FPDFBitmap_GetHeight FPDFBitmap_GetWidth FPDFBookmark_Find FPDFBookmark_GetAction FPDFBookmark_GetColorRef FPDFBookmark_GetDest FPDFBookmark_GetFirstChild FPDFBookmark_GetFontStyle FPDFBookmark_GetNextSibling FPDFBookmark_GetTitle FPDFDest_GetPageIndex FPDFDest_GetZoomMode FPDFDest_GetZoomParam FPDFLink_GetAction FPDFLink_GetDest FPDFLink_GetLinkAtPoint FPDFOBJ_CountElement FPDFOBJ_GetCatalog FPDFOBJ_GetElementByIndex FPDFOBJ_GetElementByName FPDFOBJ_GetFloat FPDFOBJ_GetInfo FPDFOBJ_GetInteger FPDFOBJ_GetNameByIndex FPDFOBJ_GetString FPDFOBJ_GetType FPDF_AddItemToMRUList FPDF_AllocMemory FPDF_ClearMRUList FPDF_CloseDocument FPDF_ClosePage FPDF_DeviceToPage FPDF_EnumPageSize FPDF_FreeMemory FPDF_GetDocPermissions FPDF_GetLastError FPDF_GetMetaText FPDF_GetPageCount FPDF_GetPageHeight FPDF_GetPageSizeByIndex FPDF_GetPageThumbnail FPDF_GetPageWidth FPDF_GetPasswordLevel FPDF_LoadCustomDocument FPDF_LoadDocument FPDF_LoadMemDocument FPDF_LoadPage FPDF_OutputDecrypted FPDF_PageToDevice FPDF_QuickDrawPage FPDF_RegisterSecurityFilter FPDF_RenderPage FPDF_RenderPageBitmap FPDF_SetErrorHandler FPDF_SetModulePath FPDF_Snapshot FPDF_UnlockDLL _FPDFBitmap_GetStride@4 _FPDFBookmark_GetPageFirstLine@12

zlib4exp.dll

IMPHASH e5c5650f0b0c0414d7e983aacdedc6c6
SHA256 105280995cd5746078d67b8651dfe4ad2abcd532d7ad528d3100c535b0b538af
MD5 4965107d112666d3835308a831a29274
SHA1 50439b99ce525ecb74c554e1dc43ddb39481dfa4
SHA512 38fa8f0eeadd75bf212eaab458833cfd3445d00f3d77f1f8a86b7c3ba99376231c8b3fc3cfdff6f02f2ca9c90956c76f9055717712d35a7ca7b30172a0010b59
SSDEEP 768:MX8TJyuiie4tVkIuCE8U8tOF5GqqQhGbY5ma78ct+Jn0r25mSSIjpe5uw+/Bz4o1:MXGJxIIuCE8U8tOF5pUB0wEo+X
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

42464

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Sharing

General

Malware Config

Signatures

File Explorer