6554571360f8c1385fb246d9e2845c2c_JaffaCakes118

resource
6554571360f8c1385fb246d9e2845c2c_JaffaCakes118
unpack001/$PLUGINSDIR/InstallOptions.dll
unpack001/bin/FAXVIEW.EXE
unpack001/bin/MFC42.DLL
unpack001/bin/MSVCRT.DLL
unpack001/bin/Usr.dll
unpack001/bin/XFAX.EXE
unpack001/bin/XOUT.EXE
unpack001/bin/setp.exe
unpack001/bin/xMsx.exe
unpack001/bin/xMsx2.exe
unpack001/bin/xPrn.exe
unpack001/bin/xScan.exe
unpack001/drvw7/AddPort.exe
unpack001/drvw7/FaxDriver/AMD64/ifax_bitmap.dll
unpack001/drvw7/FaxDriver/i386/ifax_bitmap.dll
unpack001/drvw7/FaxDriver/x86/ifax_bitmap.dll
unpack001/uninst.exe
unpack001/win/xDx.exe
unpack001/win/xTwn.exe

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2
static1/unpack001/uninst.exe	nsis_installer_1
static1/unpack001/uninst.exe	nsis_installer_2

IMPHASH 7fa974366048f9c551ef45714595665e
SHA256 1d14500a00d5f63a796ae8002eaacb21ee3feb348ab52f3d74c85c0f914347c5
MD5 6554571360f8c1385fb246d9e2845c2c
SHA1 25908f7c8f962f8cd0bbb322dfa86bbbe5b979f4
SHA512 8fa9155d6e7b065cdcdb72399c521a278da447994c583f3e349238bea53a5aebc014cdfee2f35f8ed59bd6d55d84cb9ad407044f0d8a7b1c2a550c07a78dbb7a
SSDEEP 24576:dUx3bdywNuJA0g/2i4FmwKGpsAqCwoMZeZCkbx+HHP4V:dU3yiuePui4ItGpsAqC28gkbQHC
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

12538

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CompareFileTime SearchPathA GetShortPathNameA GetFullPathNameA MoveFileA SetCurrentDirectoryA GetFileAttributesA GetLastError CreateDirectoryA SetFileAttributesA Sleep GetTickCount GetFileSize GetModuleFileNameA GetCurrentProcess CopyFileA ExitProcess GetWindowsDirectoryA SetFileTime GetCommandLineA SetErrorMode LoadLibraryA lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread CreateProcessA RemoveDirectoryA CreateFileA GetTempFileNameA lstrlenA lstrcatA GetSystemDirectoryA GetVersion CloseHandle lstrcmpiA lstrcmpA ExpandEnvironmentStringsA GlobalFree GlobalAlloc WaitForSingleObject GetExitCodeProcess GetModuleHandleA LoadLibraryExA GetProcAddress FreeLibrary MultiByteToWideChar WritePrivateProfileStringA GetPrivateProfileStringA WriteFile ReadFile MulDiv SetFilePointer FindClose FindNextFileA FindFirstFileA DeleteFileA GetTempPathA

user32

EndDialog ScreenToClient GetWindowRect EnableMenuItem GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard RegisterClassA TrackPopupMenu AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA DestroyWindow CreateDialogParamA SetTimer SetWindowTextA PostQuitMessage SetForegroundWindow wsprintfA SendMessageTimeoutA FindWindowExA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA OpenClipboard ExitWindowsEx IsWindow GetDlgItem SetWindowLongA LoadImageA GetDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint ShowWindow

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectA SetBkMode SetTextColor SelectObject

shell32

SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA SHGetSpecialFolderLocation

advapi32

RegQueryValueExA RegSetValueExA RegEnumKeyA RegEnumValueA RegOpenKeyExA RegDeleteKeyA RegDeleteValueA RegCloseKey RegCreateKeyExA

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

$PLUGINSDIR/InstallOptions.dll

IMPHASH b1cd0d78f652ce5fc63f0879371af012
SHA256 c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b
MD5 325b008aec81e5aaa57096f05d4212b5
SHA1 27a2d89747a20305b6518438eff5b9f57f7df5c3
SHA512 18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf
SSDEEP 192:86d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jwK72dwF7dBEnbok:86UdHXcIiY535zBt2jw+BEnbo
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

10696

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

SetCurrentDirectoryA GetCurrentDirectoryA MultiByteToWideChar GetPrivateProfileIntA GlobalLock GetModuleHandleA lstrcmpiA GetPrivateProfileStringA lstrcatA lstrcpynA WritePrivateProfileStringA lstrlenA lstrcpyA GlobalFree GlobalUnlock GlobalAlloc

user32

MapWindowPoints GetDlgCtrlID CloseClipboard GetClipboardData OpenClipboard PtInRect SetWindowRgn LoadIconA LoadImageA SetWindowLongA CreateWindowExA MapDialogRect SetWindowPos GetWindowRect CreateDialogParamA ShowWindow EnableMenuItem GetSystemMenu EnableWindow GetDlgItem DestroyIcon DestroyWindow DispatchMessageA TranslateMessage GetMessageA IsDialogMessageA LoadCursorA SetCursor DrawTextA GetWindowLongA DrawFocusRect CallWindowProcA PostMessageA MessageBoxA CharNextA wsprintfA GetWindowTextA SetWindowTextA SendMessageA GetClientRect

gdi32

SetTextColor CreateCompatibleDC GetObjectA GetDIBits CreateRectRgn CombineRgn DeleteObject SelectObject

shell32

SHBrowseForFolderA SHGetDesktopFolder SHGetPathFromIDListA ShellExecuteA

comdlg32

GetOpenFileNameA GetSaveFileNameA CommDlgExtendedError

ole32

CoTaskMemFree

$PLUGINSDIR/ioSpecial.ini

SHA256 d95aed234f932a1c48a2b1b0d98c60ca31f962310c03158e2884ab4ddd3ea1e0
MD5 e2d5070bc28db1ac745613689ff86067
SHA1 282e080b4cf847174c5c11e4f9157b8c338ecb19
SHA512 a50ca2014869629135b54e848f03cb4983ad8029cd811300d02b0fc54de0436185f418fea4d3db888eb0f3170e33a59d486aa885f024ab29e630e9bc0ae1a2de
MD5 SHA1 SHA512

NSIS installer

installer

$PLUGINSDIR/modern-wizard.bmp

SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
MD5 cbe40fd2b1ec96daedc65da172d90022
SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bin/FAXVIEW.EXE

IMPHASH 0a6bc9b1abc6bb7044e3167c57d63146
SHA256 3035ffffe970d488f22eb137cfe31fb1eabe40d97b9876788e0a6519a13a3099
MD5 597da6a4cfcf7e889903cc827cd109a1
SHA1 b5294a0d548cf8e0f4fb8ddb5ef6a6bcf2060f21
SHA512 bf7ae8ebd654f452d4369b734583ffc69f85ae84d6e33c084852c513527a33aea52550bf838834dc1fac6714ef2923bf58082dfc3153fd14dc00011a39b8b8ea
SSDEEP 1536:hXRjuNffcgYlmDQAvqkLnG2Zlhq8cBwZI/bjssk:pRjuNffcgYlmDQIqinG2Zq89Kbjssk
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

42732

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

mfc42

ord6376 ord3749 ord5065 ord2055 ord1727 ord5261 ord2446 ord2124 ord5277 ord4441 ord2648 ord3259 ord4465 ord3136 ord3262 ord2985 ord3081 ord2976 ord3830 ord3831 ord3147 ord2982 ord3825 ord4627 ord4425 ord3597 ord324 ord825 ord641 ord2358 ord2294 ord2362 ord4234 ord2642 ord3092 ord4710 ord823 ord1842 ord4242 ord2723 ord2390 ord3059 ord5100 ord5103 ord3079 ord4080 ord3350 ord4467 ord975 ord5472 ord3403 ord2879 ord2878 ord4151 ord6055 ord4077 ord1776 ord5237 ord5282 ord2649 ord1665 ord4436 ord4427 ord796 ord674 ord554 ord529 ord366 ord807 ord2494 ord2627 ord2626 ord5871 ord6000 ord2117 ord4163 ord2120 ord4457 ord5252 ord5030 ord4615 ord4610 ord4274 ord6375 ord4486 ord2554 ord2512 ord5731 ord3922 ord1089 ord5199 ord2396 ord4303 ord5012 ord5302 ord2725 ord4079 ord4698 ord3798 ord4837 ord5714 ord4622 ord4424 ord3738 ord561 ord815 ord2558 ord617 ord5301 ord800 ord860 ord540 ord5214 ord296 ord5503 ord2635 ord986 ord520 ord4159 ord2621 ord5572 ord5265 ord2915 ord355 ord4160 ord1825 ord4238 ord4696 ord3058 ord3065 ord6336 ord2510 ord2542 ord5243 ord5740 ord1746 ord5577 ord3172 ord5653 ord4420 ord4953 ord2399 ord4387 ord3454 ord3198 ord6080 ord6175 ord4623 ord4426 ord652 ord338 ord4823 ord6329 ord1200 ord4858 ord4614 ord4613 ord1920 ord4262 ord4589 ord4341 ord4349 ord4889 ord4531 ord4545 ord4543 ord4526 ord4529 ord4524 ord4963 ord4960 ord4108 ord5240 ord5290 ord3748 ord1725 ord4432 ord784 ord6131 ord6216 ord517 ord5260 ord2535 ord5766 ord4723 ord4899 ord4353 ord6374 ord5163 ord2385 ord5241 ord4407 ord1775 ord4078 ord6052 ord2514 ord4998 ord4853 ord4376 ord5280 ord5307 ord5289 ord3346 ord5300 ord2515 ord1576 ord1168

msvcrt

__getmainargs sscanf strrchr sprintf atoi fgets __dllonexit _onexit _exit _XcptFilter exit _initterm __setusermatherr _adjust_fdiv __p__commode __p__fmode __set_app_type _except_handler3 _controlfp _acmdln fwrite fgetc _setmbcp strncmp memmove _ftol fputc _purecall fread __CxxFrameHandler ftell fseek fclose fopen _stricmp

kernel32

GetProfileIntA GetModuleHandleA GetStartupInfoA

user32

InvalidateRect GetClientRect PostMessageA EnableWindow

gdi32

CreateCompatibleDC Rectangle CreatePen DeleteDC BitBlt SelectObject SetDIBitsToDevice StretchDIBits GetDeviceCaps SetStretchBltMode CreateBitmap DeleteObject

bin/MFC42.DLL

IMPHASH a1581f1284d59a8a21a8782a38a2fea1
SHA256 aa8c615c8bbcd8ad4a9b624addb512e0702223eb5f266ce8f6a9a005f718a483
MD5 28f2911af34f73259a9c5dffcbf71a00
SHA1 ab00aa78540eced023d8a8484cdcdb7132c4fbed
SHA512 f58b47e485411c21d96afda97cc08d51ebb3c05e060411f6be98db309a485d71e35de7ffd5a413800934dfac3b8101b123b7e1d35c0c1108caea9b36eb8d7d11
SSDEEP 12288:ZDuuMGWwg2zR5wrbY8pH21TQYfuSuyKixQTUUAex9mSCQiF7Jm7VynzY09hctGa:8uP3cbY8tGvF3KiDU3PvZHUn6n
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

63905

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

msvcrt

_initterm ?terminate@@YAXXZ _except_handler3 _adjust_fdiv _onexit __dllonexit ??1type_info@@UAE@XZ _mbsnbicmp wcsncpy wcscpy _ltoa _ultoa swprintf _itoa modf ceil fabs floor labs _ftol _splitpath _fullpath atol __p___argc __p___argv _EH_prolog _beginthreadex _endthreadex _strdup _mbsdec _expand strtod strtol strtoul abs calloc _msize _purecall strftime _mbctype localtime gmtime time _ismbcspace atoi _ismbcdigit _mbsnbcmp sprintf strlen _mbclen vsprintf _mbsrchr _mbscspn _mbsspn _mbsstr _mbsrev _mbslwr _mbsupr _mbspbrk _mbschr wcslen _mbscmp realloc fclose fflush fseek ftell fgets fputs fwrite fread clearerr _open_osfhandle _fdopen __doserrno _get_osfhandle memset _mbsinc abort free malloc memcmp memmove memcpy _CxxThrowException mktime __CxxFrameHandler

kernel32

lstrcpyA FindClose MultiByteToWideChar GetProcAddress GetVolumeInformationA GetFullPathNameA GetStringTypeExA GetThreadLocale lstrcmpiA GetShortPathNameA GetModuleFileNameA GlobalSize GlobalLock GlobalAlloc GlobalReAlloc GlobalUnlock GlobalFree GetFileAttributesA GetFileSize GetFileTime LocalFileTimeToFileTime SystemTimeToFileTime SetFileTime SetFileAttributesA InterlockedIncrement InterlockedDecrement WideCharToMultiByte LocalFree FormatMessageA FileTimeToSystemTime FileTimeToLocalFileTime GetCPInfo GetOEMCP LocalAlloc InitializeCriticalSection TlsAlloc DeleteCriticalSection GlobalHandle TlsFree LeaveCriticalSection EnterCriticalSection TlsSetValue LocalReAlloc TlsGetValue WaitForSingleObject DeleteFileA LoadLibraryA CreateMutexA InterlockedExchange CreateEventA WaitForMultipleObjects GetModuleHandleA GlobalDeleteAtom GlobalFindAtomA GlobalAddAtomA GlobalGetAtomNameA GetCurrentThreadId lstrcatA GetVersion LockResource LoadResource FindResourceA FreeLibrary MulDiv GetProfileIntA VirtualProtect SizeofResource GetProcessVersion GlobalFlags GetTempFileNameA GetDiskFreeSpaceA LocalUnlock LocalLock GetTempPathA SearchPathA SetEvent ResumeThread SetThreadPriority SuspendThread GetCurrentThread SetErrorMode GetPrivateProfileIntA GetPrivateProfileStringA WritePrivateProfileStringA GetCurrentDirectoryA FindNextFileA GetTickCount lstrlenW CopyFileA lstrcpyW GetUserDefaultLCID IsDBCSLeadByte GetSystemDirectoryA UnlockFile MoveFileA SetEndOfFile FlushFileBuffers LockFile CloseHandle ReadFile SetFilePointer WriteFile DuplicateHandle CreateFileA GetCurrentProcess lstrlenA lstrcmpA OutputDebugStringA IsBadStringPtrA IsBadReadPtr IsBadWritePtr GetLastError IsBadStringPtrW lstrcpynA CreateSemaphoreA SetLastError ReleaseSemaphore FindFirstFileA ReleaseMutex RaiseException

gdi32

TextOutA GetStretchBltMode EnumFontFamiliesA GetPixel CreatePalette GetPaletteEntries RealizePalette OffsetRgn SetBrushOrgEx CreateMetaFileA CopyMetaFileA LPtoDP SetAbortProc StartPage EndPage EndDoc AbortDoc DPtoLP CombineRgn SetRectRgn GetMapMode CreateDIBPatternBrushPt CreateHatchBrush ExtCreatePen PlayMetaFile EnumMetaFile GetObjectType PlayMetaFileRecord ExtSelectClipRgn SelectClipPath CreateRectRgn GetClipRgn PolyBezierTo SetColorAdjustment PolylineTo PolyDraw SetArcDirection ArcTo SetMapperFlags SetTextCharacterExtra SetTextJustification SetTextAlign LineTo OffsetClipRgn ExcludeClipRect SelectClipRgn OffsetWindowOrgEx SetStretchBltMode SetROP2 SetPolyFillMode SetBkMode SelectPalette StartDocA CreateDCA CreateRectRgnIndirect Rectangle UnrealizeObject PatBlt CreateBitmap CreatePatternBrush CreatePen CloseMetaFile DeleteMetaFile RectVisible PtVisible IntersectClipRect GetViewportOrgEx GetWindowOrgEx SetWindowOrgEx GetDeviceCaps Escape GetCurrentPositionEx MoveToEx ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SetMapMode GetTextFaceA GetWindowExtEx GetViewportExtEx GetROP2 GetBkMode GetTextAlign GetPolyFillMode GetBkColor RestoreDC GetNearestColor GetStockObject CreateFontA SaveDC DeleteObject CreateCompatibleBitmap GetCharWidthA DeleteDC CreateSolidBrush StretchDIBits ExtTextOutA CreateCompatibleDC GetTextExtentPoint32A CreateFontIndirectA SelectObject BitBlt GetObjectA SetBkColor GetTextMetricsA GetClipBox SetTextColor GetTextColor

user32

SetCapture CharToOemA OemToCharA UnhookWindowsHookEx MsgWaitForMultipleObjects GetWindowRect GetWindowPlacement IsIconic SystemParametersInfoA IntersectRect OffsetRect RegisterWindowMessageA SetWindowPos SetWindowLongA GetWindowLongA GetWindow SendMessageA SetForegroundWindow GetForegroundWindow GetLastActivePopup GetMessagePos GetMessageTime RemovePropA CallWindowProcA GetPropA SetPropA GetClassLongA CallNextHookEx SetWindowsHookExA CreateWindowExA DestroyWindow DefWindowProcA GetKeyState GetDlgCtrlID GetWindowTextA GetWindowTextLengthA GetDlgItem SetWindowPlacement TrackPopupMenu GetMenuItemID GetSubMenu GetMenuItemCount GetMenu RegisterClassA GetClassInfoA WinHelpA GetCapture GetParent IsChild MessageBoxA GetTopWindow SetScrollPos GetScrollPos SetScrollRange GetScrollRange ShowScrollBar SetScrollInfo GetScrollInfo ScrollWindow IsWindowVisible EnableWindow EndDeferWindowPos CopyRect BeginDeferWindowPos GetClientRect DeferWindowPos EqualRect ScreenToClient AdjustWindowRectEx SetFocus IsWindow SetActiveWindow GetFocus DispatchMessageA PeekMessageA GetSysColor MapWindowPoints SendDlgItemMessageA UpdateWindow PostMessageA LoadIconA SetRectEmpty LoadAcceleratorsA TranslateAcceleratorA ReleaseCapture SetCursor IsWindowEnabled GetDesktopWindow ShowWindow GetActiveWindow DestroyMenu LoadMenuA SetMenu ReuseDDElParam UnpackDDElParam InvalidateRect BringWindowToTop LoadCursorA GetSystemMetrics WaitMessage GetCursorPos GetWindowThreadProcessId WindowFromPoint ClientToScreen TranslateMessage GetMessageA DefFrameProcA TranslateMDISysAccel DrawMenuBar DefMDIChildProcA RedrawWindow LoadBitmapA InflateRect PtInRect ReleaseDC InvertRect GetWindowDC FillRect SetTimer KillTimer SetRect GetDC IsZoomed SetParent IsRectEmpty AppendMenuA DeleteMenu GetSystemMenu GetDCEx LockWindowUpdate GetTabbedTextExtentA DrawTextA GrayStringA UnionRect DrawFocusRect CreateDialogIndirectParamA EndDialog GetNextDlgTabItem wvsprintfA GetAsyncKeyState MapDialogRect GetDialogBaseUnits BeginPaint EndPaint TabbedTextOutA GetSysColorBrush GetClassNameA SetWindowTextA CheckDlgButton CheckRadioButton GetDlgItemInt GetDlgItemTextA SetDlgItemInt SetDlgItemTextA IsDlgButtonChecked ScrollWindowEx IsDialogMessageA MoveWindow EnableMenuItem CheckMenuItem SetMenuItemBitmaps ModifyMenuA GetMenuState GetMenuCheckMarkDimensions DestroyIcon SetCursorPos DestroyCursor FindWindowA IsClipboardFormatAvailable MessageBeep RemoveMenu ValidateRect PostQuitMessage UnregisterClassA ShowOwnedPopups InsertMenuA GetMenuStringA RegisterClipboardFormatA CopyAcceleratorTableA InSendMessage PostThreadMessageA CreateMenu WindowFromDC CountClipboardFormats SetWindowContextHelpId CharNextA GetNextDlgGroupItem ClipCursor DrawEdge EnumChildWindows InvalidateRgn FrameRect LoadStringA CharUpperA wsprintfA

bin/MSVCRT.DLL

IMPHASH 8d26773106ed39fbb89a157d19d8aa89
SHA256 2d5670881a6d13a100e37da297f6eeb876f68b63073a28eb5d650625c60f9bf7
MD5 0b9c183d1565b48fa6e5d1d3d4b86bcc
SHA1 69697324c1e7ad80215fb07ecf6d786e378c568f
SHA512 c836a4789270b216f8505074ce34b11d0b509e14b25133f3aab8db55ba5451e150b6633c4392cc83c1007f64da1c824596ff4a77aab5f7d340be4f631b2935f8
SSDEEP 6144:yncoHbacxB5pdVEweKMph18/VhTORAeFMWiFaNF7R5LWCC0uOpL:yncIbac33dVfnM2/Vg/5Bhum
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

6141

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

SetFilePointer RtlUnwind IsBadReadPtr IsBadWritePtr IsBadCodePtr SetUnhandledExceptionFilter GetModuleFileNameA GetModuleFileNameW ExitProcess TerminateProcess GetCurrentProcess WriteFile GetStdHandle GetCommandLineA GetVersion InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLastError ResumeThread CreateThread TlsSetValue ExitThread CloseHandle GetCurrentThreadId TlsAlloc TlsFree SetLastError TlsGetValue GetCurrentThread FindNextFileA FindFirstFileA FindClose FindNextFileW FindFirstFileW HeapFree HeapAlloc GetModuleHandleA GetEnvironmentVariableA GetVersionExA HeapDestroy HeapCreate VirtualFree VirtualAlloc HeapReAlloc SetHandleCount GetFileType GetStartupInfoA GetCPInfo GetACP GetOEMCP GetProcAddress LoadLibraryA MultiByteToWideChar GetCommandLineW FreeEnvironmentStringsA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStrings GetEnvironmentStringsW UnhandledExceptionFilter GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW SetConsoleCtrlHandler SetEnvironmentVariableW InterlockedDecrement InterlockedIncrement FlushFileBuffers RaiseException SetStdHandle Sleep CompareStringA CompareStringW IsValidLocale IsValidCodePage GetLocaleInfoA EnumSystemLocalesA GetUserDefaultLCID GetLocaleInfoW GetTimeZoneInformation SetEnvironmentVariableA Beep FileTimeToSystemTime FileTimeToLocalFileTime GetDiskFreeSpaceA GetLogicalDrives SetErrorMode GetFileAttributesA GetCurrentDirectoryA SetCurrentDirectoryA SetFileAttributesA GetFullPathNameA GetDriveTypeA GetCurrentProcessId CreateDirectoryA RemoveDirectoryA DeleteFileA GetFileAttributesW GetCurrentDirectoryW SetCurrentDirectoryW SetFileAttributesW GetFullPathNameW CreateDirectoryW DeleteFileW MoveFileW RemoveDirectoryW GetDriveTypeW MoveFileA GetExitCodeProcess WaitForSingleObject FreeLibrary CreateProcessA CreateProcessW HeapValidate HeapCompact HeapWalk HeapSize ReadConsoleA SetConsoleMode GetConsoleMode SetEndOfFile WriteConsoleA DuplicateHandle GetFileInformationByHandle PeekNamedPipe ReadConsoleInputA PeekConsoleInputA GetNumberOfConsoleInputEvents LockFile UnlockFile CreateFileA CreatePipe ReadFile CreateFileW GetSystemTimeAsFileTime SetFileTime LocalFileTimeToFileTime SystemTimeToFileTime GetLocalTime SetLocalTime GetSystemTime

$I10_OUTPUT ??0__non_rtti_object@@QAE@ABV0@@Z ??0__non_rtti_object@@QAE@PBD@Z ??0bad_cast@@QAE@ABQBD@Z ??0bad_cast@@QAE@ABV0@@Z ??0bad_typeid@@QAE@ABV0@@Z ??0bad_typeid@@QAE@PBD@Z ??0exception@@QAE@ABQBD@Z ??0exception@@QAE@ABV0@@Z ??0exception@@QAE@XZ ??1__non_rtti_object@@UAE@XZ ??1bad_cast@@UAE@XZ ??1bad_typeid@@UAE@XZ ??1exception@@UAE@XZ ??1type_info@@UAE@XZ ??2@YAPAXI@Z ??3@YAXPAX@Z ??4__non_rtti_object@@QAEAAV0@ABV0@@Z ??4bad_cast@@QAEAAV0@ABV0@@Z ??4bad_typeid@@QAEAAV0@ABV0@@Z ??4exception@@QAEAAV0@ABV0@@Z ??8type_info@@QBEHABV0@@Z ??9type_info@@QBEHABV0@@Z ??_7__non_rtti_object@@6B@ ??_7bad_cast@@6B@ ??_7bad_typeid@@6B@ ??_7exception@@6B@ ??_E__non_rtti_object@@UAEPAXI@Z ??_Ebad_cast@@UAEPAXI@Z ??_Ebad_typeid@@UAEPAXI@Z ??_Eexception@@UAEPAXI@Z ??_G__non_rtti_object@@UAEPAXI@Z ??_Gbad_cast@@UAEPAXI@Z ??_Gbad_typeid@@UAEPAXI@Z ??_Gexception@@UAEPAXI@Z ?_query_new_handler@@YAP6AHI@ZXZ ?_query_new_mode@@YAHXZ ?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z ?_set_new_mode@@YAHH@Z ?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z ?before@type_info@@QBEHABV1@@Z ?name@type_info@@QBEPBDXZ ?raw_name@type_info@@QBEPBDXZ ?set_new_handler@@YAP6AXXZP6AXXZ@Z ?set_terminate@@YAP6AXXZP6AXXZ@Z ?set_unexpected@@YAP6AXXZP6AXXZ@Z ?terminate@@YAXXZ ?unexpected@@YAXXZ ?what@exception@@UBEPBDXZ _CIacos _CIasin _CIatan _CIatan2 _CIcos _CIcosh _CIexp _CIfmod _CIlog _CIlog10 _CIpow _CIsin _CIsinh _CIsqrt _CItan _CItanh _CxxThrowException _EH_prolog _Getdays _Getmonths _Gettnames _HUGE _Strftime _XcptFilter __CxxFrameHandler __CxxLongjmpUnwind __RTCastToVoid __RTDynamicCast __RTtypeid __STRINGTOLD __argc __argv __badioinfo __crtCompareStringA __crtGetLocaleInfoW __crtLCMapStringA __dllonexit __doserrno __fpecode __getmainargs __initenv __isascii __iscsym __iscsymf __lc_codepage __lc_collate_cp __lc_handle __lconv_init __mb_cur_max __p___argc __p___argv __p___initenv __p___mb_cur_max __p___wargv __p___winitenv __p__acmdln __p__amblksiz __p__commode __p__daylight __p__dstbias __p__environ __p__fileinfo __p__fmode __p__iob __p__mbcasemap __p__mbctype __p__osver __p__pctype __p__pgmptr __p__pwctype __p__timezone __p__tzname __p__wcmdln __p__wenviron __p__winmajor __p__winminor __p__winver __p__wpgmptr __pioinfo __pxcptinfoptrs __set_app_type __setlc_active __setusermatherr __threadhandle __threadid __toascii __unDName __unDNameEx __unguarded_readlc_active __wargv __wgetmainargs __winitenv _abnormal_termination _access _acmdln _adj_fdiv_m16i _adj_fdiv_m32 _adj_fdiv_m32i _adj_fdiv_m64 _adj_fdiv_r _adj_fdivr_m16i _adj_fdivr_m32 _adj_fdivr_m32i _adj_fdivr_m64 _adj_fpatan _adj_fprem _adj_fprem1 _adj_fptan _adjust_fdiv _aexit_rtn _amsg_exit _assert _atodbl _atoi64 _atoldbl _beep _beginthread _beginthreadex _c_exit _cabs _callnewh _cexit _cgets _chdir _chdrive _chgsign _chkesp _chmod _chsize _clearfp _close _commit _commode _control87 _controlfp _copysign _cprintf _cputs _creat _cscanf _ctype _cwait _daylight _dstbias _dup _dup2 _ecvt _endthread _endthreadex _environ _eof _errno _except_handler2 _except_handler3 _execl _execle _execlp _execlpe _execv _execve _execvp _execvpe _exit _expand _fcloseall _fcvt _fdopen _fgetchar _fgetwchar _filbuf _fileinfo _filelength _filelengthi64 _fileno _findclose _findfirst _findfirsti64 _findnext _findnexti64 _finite _flsbuf _flushall _fmode _fpclass _fpieee_flt _fpreset _fputchar _fputwchar _fsopen _fstat _fstati64 _ftime _ftol _fullpath _futime _gcvt _get_osfhandle _get_sbh_threshold _getch _getche _getcwd _getdcwd _getdiskfree _getdllprocaddr _getdrive _getdrives _getmaxstdio _getmbcp _getpid _getsystime _getw _getws _global_unwind2 _heapadd _heapchk _heapmin _heapset _heapused _heapwalk _hypot _i64toa _i64tow _initterm _inp _inpd _inpw _iob _isatty _isctype _ismbbalnum _ismbbalpha _ismbbgraph _ismbbkalnum _ismbbkana _ismbbkprint _ismbbkpunct _ismbblead _ismbbprint _ismbbpunct _ismbbtrail _ismbcalnum _ismbcalpha _ismbcdigit _ismbcgraph _ismbchira _ismbckata _ismbcl0 _ismbcl1 _ismbcl2 _ismbclegal _ismbclower _ismbcprint _ismbcpunct _ismbcspace _ismbcsymbol _ismbcupper _ismbslead _ismbstrail _isnan _itoa _itow _j0 _j1 _jn _kbhit _lfind _loaddll _local_unwind2 _lock _locking _logb _longjmpex _lrotl _lrotr _lsearch _lseek _lseeki64 _ltoa _ltow _makepath _mbbtombc _mbbtype _mbcasemap _mbccpy _mbcjistojms _mbcjmstojis _mbclen _mbctohira _mbctokata _mbctolower _mbctombb _mbctoupper _mbctype _mbsbtype _mbscat _mbschr _mbscmp _mbscoll _mbscpy _mbscspn _mbsdec _mbsdup _mbsicmp _mbsicoll _mbsinc _mbslen _mbslwr _mbsnbcat _mbsnbcmp _mbsnbcnt _mbsnbcoll _mbsnbcpy _mbsnbicmp _mbsnbicoll _mbsnbset _mbsncat _mbsnccnt _mbsncmp _mbsncoll _mbsncpy _mbsnextc _mbsnicmp _mbsnicoll _mbsninc _mbsnset _mbspbrk _mbsrchr _mbsrev _mbsset _mbsspn _mbsspnp _mbsstr _mbstok _mbstrlen _mbsupr _memccpy _memicmp _mkdir _mktemp _msize _nextafter _onexit _open _open_osfhandle _osver _outp _outpd _outpw _pclose _pctype _pgmptr _pipe _popen _purecall _putch _putenv _putw _putws _pwctype _read _rmdir _rmtmp _rotl _rotr _safe_fdiv _safe_fdivr _safe_fprem _safe_fprem1 _scalb _searchenv _seh_longjmp_unwind _set_error_mode _set_sbh_threshold _seterrormode _setjmp _setjmp3 _setmaxstdio _setmbcp _setmode _setsystime _sleep _snprintf _snwprintf _sopen _spawnl _spawnle _spawnlp _spawnlpe _spawnv _spawnve _spawnvp _spawnvpe _splitpath _stat _stati64 _statusfp _strcmpi _strdate _strdup _strerror _stricmp _stricoll _strlwr _strncoll _strnicmp _strnicoll _strnset _strrev _strset _strtime _strupr _swab _sys_errlist _sys_nerr _tell _telli64 _tempnam _timezone _tolower _toupper _tzname _tzset _ui64toa _ui64tow _ultoa _ultow _umask _ungetch _unlink _unloaddll _unlock _utime _vsnprintf _vsnwprintf _waccess _wasctime _wchdir _wchmod _wcmdln _wcreat _wcsdup _wcsicmp _wcsicoll _wcslwr _wcsncoll _wcsnicmp _wcsnicoll _wcsnset _wcsrev _wcsset _wcsupr _wctime _wenviron _wexecl _wexecle _wexeclp _wexeclpe _wexecv _wexecve _wexecvp _wexecvpe _wfdopen _wfindfirst _wfindfirsti64 _wfindnext _wfindnexti64 _wfopen _wfreopen _wfsopen _wfullpath _wgetcwd _wgetdcwd _wgetenv _winmajor _winminor _winver _wmakepath _wmkdir _wmktemp _wopen _wperror _wpgmptr _wpopen _wputenv _wremove _wrename _write _wrmdir _wsearchenv _wsetlocale _wsopen _wspawnl _wspawnle _wspawnlp _wspawnlpe _wspawnv _wspawnve _wspawnvp _wspawnvpe _wsplitpath _wstat _wstati64 _wstrdate _wstrtime _wsystem _wtempnam _wtmpnam _wtoi _wtoi64 _wtol _wunlink _wutime _y0 _y1 _yn abort abs acos asctime asin atan atan2 atexit atof atoi atol bsearch calloc ceil clearerr clock cos cosh ctime difftime div exit exp fabs fclose feof ferror fflush fgetc fgetpos fgets fgetwc fgetws floor fmod fopen fprintf fputc fputs fputwc fputws fread free freopen frexp fscanf fseek fsetpos ftell fwprintf fwrite fwscanf getc getchar getenv gets getwc getwchar gmtime is_wctype isalnum isalpha iscntrl isdigit isgraph isleadbyte islower isprint ispunct isspace isupper iswalnum iswalpha iswascii iswcntrl iswctype iswdigit iswgraph iswlower iswprint iswpunct iswspace iswupper iswxdigit isxdigit labs ldexp ldiv localeconv localtime log log10 longjmp malloc mblen mbstowcs mbtowc memchr memcmp memcpy memmove memset mktime modf perror pow printf putc putchar puts putwc putwchar qsort raise rand realloc remove rename rewind scanf setbuf setlocale setvbuf signal sin sinh sprintf sqrt srand sscanf strcat strchr strcmp strcoll strcpy strcspn strerror strftime strlen strncat strncmp strncpy strpbrk strrchr strspn strstr strtod strtok strtol strtoul strxfrm swprintf swscanf system tan tanh time tmpfile tmpnam tolower toupper towlower towupper ungetc ungetwc vfprintf vfwprintf vprintf vsprintf vswprintf vwprintf wcscat wcschr wcscmp wcscoll wcscpy wcscspn wcsftime wcslen wcsncat wcsncmp wcsncpy wcspbrk wcsrchr wcsspn wcsstr wcstod wcstok wcstol wcstombs wcstoul wcsxfrm wctomb wprintf wscanf

bin/Usr.dll

IMPHASH 1e59a43510755bf4d17e8ba28def877d
SHA256 fa51349bff20e1fb76e6ffe380dd442f3debb318b3a39ab03b6509d6d6255f65
MD5 14828ce2b7d4c9101aad4791716a0c7b
SHA1 52c0cab29f218af500024a4e9573c89f693eb960
SHA512 30e22e8b141b528aa30e2dc4859d6baf3cc25af1095dd4ccb8c1ad7285da4658f95bb53957ddc2f14a3ab33679fb0b70260d6339d3523467ca8b5400afc8f241
SSDEEP 384:vF6hLMKyGvSZlSuaukh/eO0xBifeEXGSMdj6AVA:vDKya9GlTifvXGtj6p
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

18559

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

mfc42

ord5163 ord6374 ord4353 ord5280 ord2385 ord3798 ord4837 ord4441 ord2648 ord2055 ord6376 ord3749 ord5065 ord1727 ord5261 ord2446 ord2124 ord5277 ord2982 ord3147 ord3259 ord4465 ord3136 ord3262 ord2985 ord3081 ord4407 ord5241 ord3831 ord3825 ord3079 ord4080 ord4627 ord4425 ord3597 ord800 ord641 ord860 ord540 ord324 ord825 ord2289 ord2370 ord4234 ord4710 ord1200 ord4160 ord4853 ord5265 ord6334 ord1168 ord342 ord1182 ord1775 ord4078 ord6052 ord2514 ord4998 ord4376 ord3830 ord2976 ord823

msvcrt

__dllonexit fwrite fread fseek clock _timezone time _tzset sscanf atol ftell ungetc fgetc fputc fflush atoi _errno _onexit free _initterm malloc _adjust_fdiv strncpy localtime remove _fsopen fprintf fclose _purecall sprintf __CxxFrameHandler _chsize _stricmp _fileno

kernel32

GetProfileStringA WriteProfileStringA Sleep CloseHandle UnmapViewOfFile MapViewOfFile GetLastError CreateFileMappingA

user32

EnableWindow

bin/XFAX.EXE

IMPHASH 53ed13f6f76ffc9956527d6bf370e75e
SHA256 4ee3036c238df591a2aef7378c58d919a9e2791d94beda7f701b86be73b710e5
MD5 007a70da16b3f8d94ead3c26b2594048
SHA1 79c5c2f1a6380fd41f205387cddb76e5fd6bb6dd
SHA512 25501657ee0113c8e08a425e2316da4afbcea25305683cb5f9ac4ad3a1995d027f0040094b18707e124054b71eaf7c96c3355fa4727f064933fe38111eac9775
SSDEEP 3072:wpemlfezJqAjLMa4w/Y8Cil5T0EY/NU0BON+BUy0gf6jN3m6JiY6SS/yLZ:w1mzoAjLMa4wwU0EYxON+BUyX0N2vJQ
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

160143

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

mfc42

ord5163 ord6374 ord4353 ord5280 ord3798 ord2385 ord4837 ord4441 ord2648 ord2055 ord6376 ord3749 ord5065 ord1727 ord5261 ord2446 ord2124 ord5277 ord2982 ord3147 ord3259 ord4465 ord3136 ord3262 ord2985 ord3081 ord2976 ord3830 ord3831 ord3825 ord3079 ord4080 ord4627 ord4425 ord3597 ord800 ord693 ord641 ord860 ord540 ord324 ord2289 ord2370 ord2302 ord4234 ord4376 ord4853 ord1200 ord6334 ord4710 ord4160 ord858 ord3499 ord2515 ord355 ord537 ord2358 ord2301 ord536 ord1775 ord5241 ord3092 ord6905 ord2582 ord6055 ord1776 ord4402 ord5290 ord3370 ord4424 ord3640 ord567 ord4673 ord4274 ord6375 ord4486 ord2554 ord2512 ord5731 ord3922 ord1089 ord5199 ord2396 ord3346 ord5300 ord5302 ord2725 ord4079 ord4698 ord5307 ord5289 ord5714 ord4622 ord3738 ord561 ord815 ord2621 ord616 ord804 ord2363 ord755 ord470 ord825 ord6199 ord6215 ord2863 ord2379 ord2411 ord2023 ord4218 ord2578 ord4398 ord3402 ord3582 ord3286 ord1146 ord2587 ord4406 ord3394 ord3729 ord4407 ord2514 ord4078 ord6052 ord823 ord4998 ord5265 ord2362 ord2642 ord1168 ord1576

msvcrt

_rmdir strchr _mkdir atoi strftime _findfirst localtime fseek ftell fgets strncmp strrchr isspace _purecall _fsopen _errno fwrite fread _stat _access clock _timezone time _tzset mktime _daylight ungetc fgetc fputc fflush printf strtok strstr _utime fputs _except_handler3 ?terminate@@YAXXZ __dllonexit _onexit _exit _XcptFilter _findnext _acmdln __getmainargs _initterm __setusermatherr _adjust_fdiv __p__commode __p__fmode __set_app_type _controlfp remove _findclose fopen fprintf fclose isdigit sscanf strncpy __CxxFrameHandler sprintf exit _strlwr _putenv _setmbcp _chsize _stricmp _fileno _strnicmp

kernel32

CopyFileA Sleep GetProfileStringA GetTimeZoneInformation GetProfileIntA WinExec GetModuleHandleA GetStartupInfoA WriteProfileStringA

user32

GetSystemMenu SetTimer EnableWindow GetClientRect IsIconic GetSystemMetrics AppendMenuA DrawIcon KillTimer MessageBoxA LoadIconA SendMessageA

bin/XOUT.EXE

IMPHASH d87275d5526d9be31101efa9507af999
SHA256 983e1129fa441bb6526fd6c916490500acb1e6af50ba690ddb1308cb8784db53
MD5 5b6c8f7ec905183acbb1b1537686fb31
SHA1 6fd720451577e7d714350754c646729a3391f598
SHA512 0549cdbb5c8d0635214c59ef1f22f778dc49fef043a5208a92845575e3aae7a7a77d524b41c4db8998c4a87347ffef6f47d6f520bd7fcffe94baf49206c87531
SSDEEP 3072:eH/pLMa48Zu0y1Br1RZBlaJMXc556QVF7H:eHhLMa48Z29aJM+
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

76351

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

usr

?IsAttach@usr_TyObj@@QAEHXZ ?GetDoc@usr_TyObj@@QAEPBDXZ ?usr_xLogin@@3Vusr_TyObj@@A ?SetAttach@usr_TyObj@@QAEHPBD@Z

mfc42

ord2385 ord4078 ord1775 ord4407 ord2514 ord6052 ord5163 ord6374 ord4353 ord5280 ord5241 ord3798 ord4441 ord2648 ord2055 ord6376 ord3749 ord5065 ord1727 ord5261 ord2446 ord2124 ord4837 ord2982 ord3147 ord5277 ord4998 ord3136 ord3262 ord2985 ord3081 ord2976 ord3830 ord3831 ord3825 ord3079 ord4080 ord4627 ord4425 ord3597 ord693 ord641 ord324 ord825 ord2302 ord4234 ord800 ord4376 ord540 ord4710 ord4853 ord1199 ord823 ord4465 ord3259 ord4160 ord2358 ord2370 ord2301 ord2582 ord6055 ord1776 ord4402 ord5290 ord3370 ord4424 ord3640 ord567 ord4673 ord4274 ord6375 ord4486 ord2554 ord2512 ord5731 ord3922 ord1089 ord5199 ord2396 ord3346 ord5300 ord5302 ord2725 ord4079 ord4698 ord5307 ord5289 ord5714 ord4622 ord3738 ord815 ord561 ord2621 ord860 ord2364 ord536 ord2289 ord6215 ord5265 ord755 ord470 ord6334 ord5981 ord6199 ord3874 ord1200 ord1168 ord2652 ord1669 ord2863 ord2864 ord2379 ord1146 ord537 ord6905 ord3286 ord3092 ord1576

msvcrt

fgets strrchr strncmp strncpy isspace ftell _purecall fprintf _fsopen remove localtime _errno fwrite fread _stat _access clock _timezone time _tzset mktime _daylight sscanf vsprintf ungetc fgetc fputc fflush atoi printf rename fopen strftime _findclose _utime _findnext _findfirst _except_handler3 ?terminate@@YAXXZ __dllonexit _onexit _exit fseek exit _acmdln __getmainargs _initterm __setusermatherr _adjust_fdiv __p__commode __p__fmode __set_app_type _controlfp fclose strstr sprintf __CxxFrameHandler _XcptFilter _strlwr _setmbcp _putenv _fileno _chsize _stricmp

kernel32

Sleep GetStartupInfoA GetModuleHandleA WriteProfileStringA GetTimeZoneInformation GetProfileStringA WinExec GetProfileIntA

user32

SetForegroundWindow GetSystemMetrics MessageBoxA EnableWindow ShowWindow AppendMenuA SendMessageA GetSystemMenu GetClientRect SetTimer KillTimer GetFocus LoadIconA DrawIcon IsIconic

bin/setp.exe

IMPHASH e6acbecb3d36515f60078f6962f8e96d
SHA256 149e8a11abdaf8e79b728e2872a818648900cbb1cc62fe381431c8513a4ca7bc
MD5 a0a01d94de68bb3b6d1ab76bde8f75f7
SHA1 7497c715841ea6a13cbec3af6eb842bd1675f8d6
SHA512 d5b29ac07865faec0cbb5d987b405c1e9379e99b85769276f5b775dd4b17b9ec952719076234a058c57ee2de7ce6252dd50d6a805e206a1bcdf66cd03a151dda
SSDEEP 192:QpMcXlQ/1D09S5Doa53L5bIb4y73TmdZ8hbO+STspTSSTyzGvZ/mV:aQm+5bIBadZwOIGSTyzWZ/
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

4352

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

bin/xMsx.exe

IMPHASH aeaadd27e9e20a95b0e32825de53bf31
SHA256 68e48fa8188a073ca3e5ca493cf32bea91e6a69f8ebeb5bd703cc683b2b56aa5
MD5 e660931dd453ea780b47bdb9950f19ad
SHA1 a6568d94abab7f010989ec3cf4fa3d5ee1982826
SHA512 e99dc665f0b60e87f52f34a6b90d0c877e3bbd398d75196e9c082bafb48d77492b63a2b3fb0dceac6b844700f5b28c3f624ac71c1b3a3cddc9dfc9477489622f
SSDEEP 1536:pojhlZaOa9+GJ98oPXE2Qq5ulfhPxL/ppDNo9ek5A5/lVUCys:po109+q9Z0JldpK0kiBlV0
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

54378

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

mfc42

ord4465 ord3136 ord3262 ord2985 ord3081 ord2976 ord3259 ord3830 ord3831 ord3825 ord3079 ord4080 ord4627 ord4425 ord3597 ord800 ord641 ord860 ord540 ord324 ord2364 ord2370 ord4234 ord4853 ord6334 ord4710 ord5810 ord5481 ord2031 ord4863 ord5796 ord5478 ord966 ord3570 ord1638 ord2077 ord605 ord278 ord2029 ord1971 ord1948 ord4226 ord2396 ord3346 ord5300 ord4079 ord5307 ord5289 ord4622 ord5277 ord3147 ord1949 ord4275 ord2379 ord4673 ord692 ord693 ord616 ord4274 ord6375 ord4486 ord2554 ord2512 ord5731 ord3922 ord1089 ord5199 ord5302 ord2725 ord4698 ord5714 ord3738 ord561 ord815 ord1199 ord1247 ord2411 ord2023 ord4218 ord2578 ord4398 ord3582 ord1771 ord6366 ord2413 ord2024 ord4219 ord2581 ord4401 ord3402 ord3639 ord2582 ord6055 ord825 ord4402 ord5290 ord3370 ord3640 ord1146 ord1168 ord567 ord2301 ord2302 ord6215 ord4160 ord2863 ord3092 ord755 ord470 ord6199 ord6905 ord6453 ord3874 ord2982 ord5261 ord2124 ord2446 ord3749 ord1727 ord5065 ord2648 ord6376 ord2055 ord3798 ord4441 ord4837 ord6374 ord5280 ord4353 ord5241 ord5163 ord2385 ord4078 ord4407 ord1775 ord4998 ord6052 ord2514 ord823 ord4376 ord5265 ord4424 ord1776 ord1576

msvcrt

_errno _timezone ungetc fgetc fputc fflush __dllonexit _onexit _except_handler3 ?terminate@@YAXXZ _exit _XcptFilter exit _acmdln __getmainargs _initterm __setusermatherr _adjust_fdiv __p__commode __p__fmode __set_app_type _controlfp _tzset mktime fputs _access clock strftime sscanf fwrite fopen fread _stat memmove localtime remove vsprintf fprintf _purecall strrchr strncmp fgets ftell fseek fclose strncpy atoi time sprintf isspace strchr __CxxFrameHandler _fsopen _strnicmp _stricmp _chsize _fileno _putenv _setmbcp

kernel32

MapViewOfFile GetLastError GetCurrentProcessId CloseHandle UnmapViewOfFile CreateFileMappingA CreateMutexA WaitForMultipleObjects Sleep OpenEventA ReleaseMutex OpenMutexA GetModuleFileNameA CreateEventA CreateProcessA SetEvent TerminateProcess GetProfileStringA SetFileTime GetSystemTime CreateFileA SystemTimeToFileTime GetTimeZoneInformation GetModuleHandleA GetStartupInfoA lstrcpynA

user32

SendMessageA DrawIcon AppendMenuA LoadIconA IsIconic KillTimer GetSystemMenu PostMessageA SetTimer PeekMessageA TranslateMessage DispatchMessageA GetSystemMetrics GetClientRect SetForegroundWindow EnableWindow

shell32

Shell_NotifyIconA

wsock32

WSAGetLastError

bin/xMsx2.exe

IMPHASH 5da5db430b634abce690a8ef68c18cbd
SHA256 7c38a5084424c369fc7f6f6f0303a225403ac13edd116ea4dd122bf1c43f050a
MD5 e7a91e82f661fa164bb173e48e3a02a5
SHA1 5e6dedb0bd9757bc13ccabe4eee46cbfb05686a7
SHA512 47d7a87d8a32b1743dafa9984c3a7b83b778b7d506495e4a4cd66c9946ed4f83ffeb6885e2c8f4865839885f67d0462bf4afaebb93dbc168ba70bd77419b0fb5
SSDEEP 1536:nTmhy24vpJeAWWFRW5uricBjgkRGhvRLXVAgDeGZUhMs:nTaireABFsiNWeS0M
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

56986

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

rasapi32

RasDialA RasGetEntryDialParamsA RasHangUpA RasEnumEntriesA RasGetErrorStringA RasEnumConnectionsA

mfc42

ord5277 ord2982 ord3147 ord3259 ord2124 ord5261 ord2446 ord3262 ord2985 ord3081 ord2976 ord3136 ord3831 ord4465 ord3830 ord4080 ord4627 ord4425 ord3597 ord800 ord641 ord860 ord540 ord324 ord2364 ord2370 ord3825 ord4853 ord6334 ord4710 ord3079 ord4234 ord2031 ord4863 ord5796 ord5478 ord966 ord3570 ord1638 ord2077 ord605 ord278 ord2029 ord1971 ord5810 ord1948 ord4226 ord2396 ord3346 ord5300 ord4079 ord5481 ord3749 ord1727 ord4622 ord4424 ord1949 ord4275 ord2379 ord4673 ord692 ord693 ord616 ord4274 ord6375 ord4486 ord2554 ord2512 ord5731 ord3922 ord1089 ord5199 ord5302 ord2725 ord4698 ord5714 ord3738 ord561 ord815 ord1199 ord1247 ord2582 ord4402 ord3370 ord3640 ord2411 ord2023 ord4218 ord2578 ord4398 ord3582 ord1771 ord6366 ord2413 ord2024 ord4219 ord2581 ord5065 ord1776 ord4401 ord5290 ord3402 ord3639 ord1146 ord1168 ord567 ord2301 ord2302 ord4160 ord2863 ord3092 ord755 ord470 ord6215 ord6199 ord6905 ord3317 ord6453 ord3874 ord2648 ord6376 ord2055 ord3798 ord4441 ord4837 ord6374 ord5280 ord4353 ord5241 ord5163 ord2385 ord4078 ord4407 ord1775 ord4998 ord6052 ord2514 ord823 ord4376 ord5265 ord5289 ord825 ord5307 ord6055 ord1576

msvcrt

mktime _tzset vsprintf _errno fputs _timezone ungetc fgetc fputc fflush __dllonexit _onexit _except_handler3 ?terminate@@YAXXZ _exit _XcptFilter exit _acmdln __getmainargs _initterm __setusermatherr _adjust_fdiv __p__commode __p__fmode __set_app_type _controlfp clock strftime sscanf fwrite fopen fread _stat memmove localtime remove _fsopen fprintf _purecall strrchr strncmp _access ftell fseek fclose strncpy atoi time sprintf isspace strchr __CxxFrameHandler fgets _chsize _strnicmp _setmbcp _putenv _fileno _stricmp

kernel32

MapViewOfFile GetStartupInfoA GetModuleHandleA lstrcpynA GetProfileIntA WriteProfileStringA CloseHandle UnmapViewOfFile CreateFileMappingA CreateMutexA WaitForMultipleObjects Sleep OpenEventA ReleaseMutex OpenMutexA GetModuleFileNameA CreateEventA CreateProcessA SetEvent TerminateProcess lstrcpyA GetProfileStringA SystemTimeToFileTime GetSystemTime SetFileTime CreateFileA GetCurrentProcessId GetLastError GetTimeZoneInformation

user32

KillTimer SetTimer TranslateMessage LoadIconA PeekMessageA PostMessageA GetSystemMetrics IsIconic SetForegroundWindow DispatchMessageA SendMessageA GetClientRect SetWindowTextA wsprintfA EnableWindow GetSystemMenu AppendMenuA DrawIcon

shell32

Shell_NotifyIconA

wsock32

WSAGetLastError

bin/xPrn.exe

IMPHASH e53f1236f41133150ffb0e9d273c9f74
SHA256 43946ab55fa4e0a346bd74dae0d26810b0beba752e1ca42b8f1ed74eb31dbc74
MD5 4f0e03a2164014eb11607952a7e40554
SHA1 af168b9db4c6e17f71ff186609ce1e9f943c8624
SHA512 8605be7ad5a6a0d6d40daedc9f0429f4b5bfa49f3475d073b133281c8f03fcb756bdbd93c9c3fbfd2a9c6c9a56155c437ceec108fc35f37f8fd44edea9a29e12
SSDEEP 384:rjmoASTVYnJap0Lp1TmCrEcumkamkNpw7/mkU:rjmIeJacTm2nkbkNpw6kU
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

10958

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

mfc42

ord5100 ord4467 ord4303 ord3350 ord5012 ord975 ord5472 ord3403 ord2879 ord2878 ord4151 ord6055 ord4077 ord1776 ord4407 ord5237 ord2385 ord5163 ord6374 ord4353 ord5282 ord3059 ord5103 ord3798 ord4837 ord4436 ord2648 ord2055 ord6376 ord3749 ord5065 ord1727 ord2446 ord2124 ord5277 ord2982 ord3147 ord3259 ord4465 ord3136 ord3262 ord2985 ord3081 ord2976 ord3830 ord2649 ord1665 ord3831 ord4080 ord4627 ord4427 ord796 ord674 ord554 ord529 ord366 ord825 ord807 ord6215 ord5871 ord6000 ord2117 ord4163 ord2120 ord4457 ord5252 ord4615 ord4612 ord4610 ord4274 ord6375 ord4486 ord2554 ord2512 ord5731 ord3922 ord1089 ord5199 ord2396 ord3346 ord5300 ord5302 ord2725 ord4079 ord4698 ord5307 ord5289 ord5714 ord4622 ord4424 ord3738 ord561 ord815 ord617 ord3825 ord5214 ord3079 ord296 ord520 ord4159 ord2621 ord5265 ord4376 ord4853 ord4998 ord4710 ord2514 ord6052 ord4078 ord1775 ord5241 ord5280 ord4441 ord5261 ord4425 ord3597 ord4448 ord641 ord4234 ord1825 ord4238 ord4696 ord3058 ord3065 ord6336 ord2510 ord2542 ord5243 ord5740 ord1746 ord5577 ord3172 ord5653 ord4953 ord4858 ord2399 ord4387 ord3454 ord3198 ord6080 ord6175 ord4623 ord4426 ord338 ord652 ord4823 ord4420 ord4614 ord4613 ord1920 ord4262 ord4589 ord5076 ord4341 ord4349 ord4531 ord4545 ord4543 ord4526 ord4529 ord4524 ord4963 ord4960 ord4108 ord5240 ord5290 ord3748 ord1725 ord4432 ord784 ord6131 ord6216 ord517 ord5260 ord3619 ord3626 ord2414 ord1641 ord2535 ord4889 ord4370 ord4588 ord5766 ord4723 ord4899 ord800 ord4160 ord540 ord3663 ord2723 ord4242 ord1842 ord823 ord4676 ord4671 ord2390 ord986 ord5301 ord324 ord1576 ord1168

msvcrt

__getmainargs remove fgets fopen sprintf __dllonexit _onexit _exit _XcptFilter exit _initterm __setusermatherr _adjust_fdiv __p__commode __set_app_type _except_handler3 _controlfp fclose _acmdln __p__fmode __CxxFrameHandler _setmbcp

kernel32

GetModuleHandleA GetStartupInfoA

user32

InvalidateRect EnableWindow

gdi32

CreateFontA GetTextMetricsA GetDeviceCaps SetMapMode TextOutA

bin/xScan.exe

IMPHASH 9b6e1160980fa1817c209daab79e6721
SHA256 2b4c4dab44943138ec371cd15741b1d61a474ef2bd27461c7faa9a154afd9f71
MD5 d19629bb7227515252630d657c55c29c
SHA1 4142946516e0121b03df8d98c57482382c891ccf
SHA512 515c05a7a87cd578bfa58a059f3b47d7e693fc41e87a24f4e55b798b3e25030c88647d846f35830d6cbd3855c88fdcce8d8756644a320d47a14fb682cd586808
SSDEEP 3072:m1TEjRTq7frBQ4+mffCICfurCmk7+mrf3YG3Jnmt7Liyu7:YEjNq7frBQLgflCfOC4mrvYGZnk
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

51068

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

mfc42

ord2362 ord3259 ord4465 ord3136 ord3262 ord2985 ord3081 ord2976 ord3830 ord3831 ord3825 ord3079 ord4080 ord4627 ord4425 ord3597 ord324 ord825 ord641 ord2358 ord2982 ord3147 ord4234 ord3092 ord4710 ord2301 ord823 ord1842 ord4242 ord2723 ord2390 ord3059 ord5100 ord5103 ord4467 ord4303 ord3350 ord5012 ord975 ord5472 ord3403 ord2879 ord2294 ord2878 ord6055 ord4077 ord1776 ord5237 ord2649 ord1665 ord4436 ord4427 ord807 ord796 ord674 ord554 ord529 ord366 ord2494 ord2627 ord2626 ord5871 ord6000 ord2117 ord4163 ord2120 ord4457 ord5252 ord5282 ord4499 ord4610 ord1168 ord4615 ord4612 ord4274 ord6375 ord4486 ord2554 ord2512 ord5731 ord3922 ord1089 ord5199 ord2396 ord3346 ord5300 ord5302 ord4151 ord2446 ord4698 ord5307 ord5289 ord5714 ord2124 ord5277 ord3738 ord561 ord815 ord2558 ord617 ord5301 ord5214 ord296 ord5503 ord2635 ord986 ord520 ord4159 ord2621 ord3517 ord3067 ord482 ord5792 ord1825 ord4238 ord4696 ord3058 ord1175 ord6336 ord2510 ord2542 ord5243 ord5740 ord1746 ord5577 ord3172 ord5653 ord4420 ord4953 ord2399 ord4387 ord3454 ord3198 ord6080 ord6175 ord4623 ord4426 ord652 ord338 ord4823 ord6329 ord800 ord4858 ord4160 ord540 ord4614 ord4613 ord1920 ord4262 ord4589 ord4341 ord4349 ord4889 ord4531 ord4545 ord4543 ord4526 ord4529 ord4524 ord4963 ord4960 ord4108 ord5240 ord5290 ord3748 ord1725 ord4432 ord784 ord6131 ord6216 ord517 ord5260 ord2535 ord5766 ord4723 ord4899 ord2385 ord5241 ord4407 ord1775 ord4078 ord6052 ord2514 ord4998 ord4853 ord4376 ord5265 ord1200 ord2642 ord5261 ord1727 ord5065 ord3749 ord6376 ord2055 ord2648 ord4441 ord4837 ord3798 ord5280 ord4353 ord6374 ord5163 ord4622 ord4424 ord2725 ord4079 ord3065 ord1576

msvcrt

_XcptFilter exit _acmdln __getmainargs _initterm __setusermatherr _exit _adjust_fdiv __p__commode __p__fmode __set_app_type _except_handler3 _controlfp __dllonexit strrchr fgets atoi sscanf _access _fsopen _errno _onexit time localtime strftime sprintf fprintf _purecall fread _setmbcp _stricmp __CxxFrameHandler fopen fclose strncmp memmove _ftol fputc fseek fgetc fwrite ftell

kernel32

FreeLibrary LoadLibraryA OpenFile lstrcatA lstrlenA GetWindowsDirectoryA GlobalFree GlobalAlloc GlobalUnlock GlobalLock GetProfileIntA WriteProfileStringA GetProfileStringA Sleep GetModuleHandleA GetStartupInfoA lstrcpyA GetProcAddress

user32

InvalidateRect GetClientRect PostMessageA EnableWindow TranslateMessage GetMessageA DispatchMessageA

gdi32

CreateCompatibleDC Rectangle CreatePen DeleteDC BitBlt SelectObject SetDIBitsToDevice StretchDIBits GetDeviceCaps SetStretchBltMode CreateBitmap DeleteObject

db/CODE.INI

SHA256 bda0d6a9b522badcd6aba472240399e01fe6b96d570a961bd5096af9366bbc77
MD5 c3349b36448135da553435bd7828f5f1
SHA1 d170f3075cd448977b28bc5282a7c97ee6a4ddb5
SHA512 4201c642fbce2cff3464a172100dcf1359e329e18ef70ca913be4d0a7c415b73e2b08a2dcb3f47816c51ade4dbda2af1d8869118e715c493f7ef4bfec0d37390
SSDEEP 96:FYZvrSnk41uIYRD0/zuHKkzCHEAY9PWhMI/u/qVaeKmxel9Xha9LI:wunh1oy6qkz6y+haqVaeKmxel9Xha9c
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

db/DATAID.DAT

SHA256 87d9194ef9ccb2da1b87cb70c065b7a26e1e3f7d99e2809e94e0fcf4f72c8148
MD5 1bee110aab230ee5c820643517373033
SHA1 187e6561c7ea71df53351d24c45f5e23aaaa2102
SHA512 32a04c915811f31d153e9ecd063a12383044a5d0946a4070c85f1f902c8538f4a1244ee34bcbb830979276b0a187081a27b88d0b04a0ff6bf29a5bbaffd0a611
MD5 SHA1 SHA512

NSIS installer

installer

db/GRPID.DAT

SHA256 44b34ba1e158565cd98b8b42da82ab3da3855b9828ef66847eed4a66a20c22b4
MD5 d23576281336d61c0de8a5d88d91cdac
SHA1 9a2bd7dbf2a8146f9ea7c5f5d8ab2184cc585bbf
SHA512 bcb3d280b010333840870cf1390a02bf7d79475ca8efc36de13af7f6e239757e4a5cd0bb8c0b7ecdf6fe979bd50b3a0f7b60e14a616de4c29646a253374484b0
MD5 SHA1 SHA512

NSIS installer

installer

db/JOB.db

SHA256 aca08fe1674156bdc826631dd3fa5c4969cf075dd117f724d1b6edcc014e8f08
MD5 5180963b61d9f3177dc0c0ee8bd24648
SHA1 36bd3b6f03e291340e638eb293d29f24ad895b9a
SHA512 c1196fb15a1361b17af5ae89af2eac1f6b2a6150c72501bc28d588e80ed60686a9fba106ea29aadeb9b8f23b2021c3f8af6854e57f9544729cffd8fc814482b3
MD5 SHA1 SHA512

NSIS installer

installer

db/JOBID.DAT

SHA256 4a11c2997424cd7a381eca1948dd4c442cb4b2a8086b676ecf67eff032eaacec
MD5 14791d7c7467a6bb2f140bcaf8b145f4
SHA1 44127d404caab816c2ddb4644a9b9fa6bccc429d
SHA512 0e342bd795a6b44b88cfc8dc3efcfcab0f77c44c4bdf943e94c838fbc416fb26faefd2f0d6cc9fe86dac39c251d35aedf0b8ef87d7c1acb88df6032e2c674970
MD5 SHA1 SHA512

NSIS installer

installer

db/LNKID.DAT

SHA256 c31425b44a7ed682a3356bf6820141e1584a15c43b6d6793f552e5d4621586f7
MD5 a512f8ffb2c1bb775a9779ec60b699cb
SHA1 ebcd8ac8614255d7bc0cddedf17f5c9219042914
SHA512 eadde9baad24085329e8c91c70aad0bfdba88ac1c5e7870340cf9d1f4a90b306b4cc256895356ee6018ff3056759c2c5adf73e1e1061c2d7e692a408d99d6b35
MD5 SHA1 SHA512

NSIS installer

installer

db/QUE.db

SHA256 7d2ca60ea905d6bc4ee70cfecf988c261d06b6b8ed5154f48cd8c117bc003c41
MD5 2be22542b80aa0b1e5841106a727bd59
SHA1 925c03c22b0df3b86ed5d823a3758ccc962aa466
SHA512 8db472bbc67608af5c66418d085924a7f91068f418d665c50bd91a4771ea2a583447aab15df13fd33ffb2324e49a386f4ef6b02283e00c188bd91158bdd1184f
MD5 SHA1 SHA512

NSIS installer

installer

db/QUEID.DAT

SHA256 5bb10a0ea4aab835b063f9406d8c27a850b80ee5042841828f83e40bbea74f1d
MD5 f6c9da0711e5440c91be87ab35d28dc9
SHA1 7db9c12cd50aada9cd738bae0f89eba7377e7b75
SHA512 b9ae6ca76b19aca04d1653c2a98b1d6016dc8d236096200fd8ebb9eaf40a5d368bd6756fdee5cfec7563c1acd68582436595fc60e71d444f64c30f1ad3dfa815
MD5 SHA1 SHA512

NSIS installer

installer

db/SCANNER.INI

SHA256 ab1a103a96bbccd235ea188b898bb7e34f5c45a22406cf51b10d036e684915f9
MD5 2ceb4fea3daa6a5160f3cf8d2193edf7
SHA1 a48c08004e320b9d997234abdbaf053eb23eba93
SHA512 dc93f1a3539a2961497ddeb1cc43a5b71d298c12993eb6be0c53159abedf44ef42c7d18dfc382fa42fac210c48a2880e9f8c08f391e363e3ac9a0e6800aef050
MD5 SHA1 SHA512

NSIS installer

installer

db/SYS.db

SHA256 c7ec592ae86a6b2f0ef0359a33fd4e858002368149a3ac3e346a41809962c297
MD5 f21302a1f3c9508e9995188846171171
SHA1 47b451998b71e71c74a42fb42caf03e088127787
SHA512 f62a8cd5d8a83965b8cf015c0df9c0838fa24af6141a00b732bcfe309b535e4fa97f68c53d5a2d5401544cbcd82f3a153e57dd070843fef1bc46afeb13ceb46d
MD5 SHA1 SHA512

NSIS installer

installer

db/SYSINFO.DB

SHA256 c90ee55b5771539940a024d8afb225810544870632e9b5a03bd139e2b3f48889
MD5 527b56ae38456b7cb77f63378fdbe8c7
SHA1 81bf747a5689890d71e5eab8504ac59de03096ff
SHA512 4055516cb1d8b171208cf72ccf4c3acf656f32a605c591934d3d0eaa3ec8572116506007573211e85a5d41f210bda3da972cf725c9572d51067d7eec630981cd
MD5 SHA1 SHA512

NSIS installer

installer

db/TEMPID.DAT

SHA256 aafcee9c1b9d56f6f79dbb46b816093b67aff62cfbdad4c897f023fe091073e6
MD5 1496041714df4a6148dce23ad6792d9d
SHA1 507833f9f513cc19cc54dec19398c1a59f9d6798
SHA512 a5ca0f6fc400d95bd3ac20709cb662f26010e9f917d59b688f6dcb381250ba5b44adb74b99077254c03bbc631fc2df11b11895defc79eb94fd34762a4ae63f9c
MD5 SHA1 SHA512

NSIS installer

installer

db/UPDATE.DAT

SHA256 26b25d457597a7b0463f9620f666dd10aa2c4373a505967c7c8d70922a2d6ece
MD5 f2dd0dedb2c260419ece4a9e03b2e828
SHA1 0aaf76f425c6e0f43a36197de768e67d9e035abb
SHA512 fecd7b408089255b3467dc1f7231cc6388c9e1c65dcaa5e50f3b460235d18bc44033b08184018b65ac013fdae68c0088381644a6302b9d89e468f57ff9a005dd
MD5 SHA1 SHA512

NSIS installer

installer

db/USRID.DAT

SHA256 26b25d457597a7b0463f9620f666dd10aa2c4373a505967c7c8d70922a2d6ece
MD5 f2dd0dedb2c260419ece4a9e03b2e828
SHA1 0aaf76f425c6e0f43a36197de768e67d9e035abb
SHA512 fecd7b408089255b3467dc1f7231cc6388c9e1c65dcaa5e50f3b460235d18bc44033b08184018b65ac013fdae68c0088381644a6302b9d89e468f57ff9a005dd
MD5 SHA1 SHA512

NSIS installer

installer

db/_system_/LOGIN.db

SHA256 5e5b269bacf77d0a94a224a77a7707aaf288b1c88074da87fe079e5e821a270c
MD5 fe8fec0367c1c2b1c7926846b9f7f371
SHA1 08c270ee6a7598b4701f4af60c7601db79036a1d
SHA512 ce911d04c96c1cfae6b51bfbd2a04ac96585ce8d800d89cb563ed72279f18c2832f9d4044715606758d1da4df175f863741036f3abf9eb4a4cb7efcac77fa50b
MD5 SHA1 SHA512

NSIS installer

installer

db/_system_/SCANNER.INI

SHA256 ab1a103a96bbccd235ea188b898bb7e34f5c45a22406cf51b10d036e684915f9
MD5 2ceb4fea3daa6a5160f3cf8d2193edf7
SHA1 a48c08004e320b9d997234abdbaf053eb23eba93
SHA512 dc93f1a3539a2961497ddeb1cc43a5b71d298c12993eb6be0c53159abedf44ef42c7d18dfc382fa42fac210c48a2880e9f8c08f391e363e3ac9a0e6800aef050
MD5 SHA1 SHA512

NSIS installer

installer

db/_system_/editor.ini

SHA256 8d86bf27e00ff11320f7dc1a9789f7749308f4cf0de1549bb3a839309d9410f5
MD5 653f50cddf7211633343a5d26769533e
SHA1 3a8aae8651250e964dd3498dbb36429e76dafade
SHA512 c6ffd7bd7c91f9c43677e82a1778e944ab2a310f387ec054fffc689d48780d5f9bd49f6b897987ee61efb9101d9c86840455d559abf028e4c771172f7ed22bf8
MD5 SHA1 SHA512

NSIS installer

installer

db/_system_/grp.db

SHA256 920255396b60dbbace671da2104e1ab4e5871a8471ec9dc3921bb66bfc7c0803
MD5 d9ea5600fd31fa6df1f70d4120f53a40
SHA1 6230cf6e2f3ff0421967d9bd18784a88d623d941
SHA512 e8659292e99d42967931d4879b68603adb8d8706ce86acce5b85e07de4302640c872cb35373e1968f92f216b01f3a6d2eb383d6d774f12d37d5162783790c267
MD5 SHA1 SHA512

NSIS installer

installer

db/_system_/info.db

SHA256 a2423201edac148fcec78dea4d08b15676d7ae50d996859fe104086f0b2f812e
MD5 2db9faeec398d44483e353663a3eb538
SHA1 ad65ec0b396b9804847108ba6273eed758673db5
SHA512 008badb3d845b7a52da0f95dea3b92bc4519c45ea41cacce1e4b25c8e7bc53d64e89f3c495a65096d32b0af6aa245d3b7edbe01fd4bda9ecd13b80b9b66047c2
MD5 SHA1 SHA512

NSIS installer

installer

db/_system_/lnk.db

SHA256 9dc2594fd2b066873740f6f1ba87f5adc2a6348a824354a81ed009ec8d1e2e18
MD5 6fa2a7ee878a451bec0ce57d0c90c584
SHA1 cb6cc2f694789dcde597c2bfcf1aec9eaf594448
SHA512 95ac99eb990fec0180305e78225a26266c18bfc623126496c8e844b6b38621df71bfdff1615dcd81e5e14237b949917147f3387441ffaf3b7965cde72d96561f
MD5 SHA1 SHA512

NSIS installer

installer

db/_system_/usr.db

SHA256 4f03f9b5384e482e62dbd8cfc3848c4275cac7c15d3f37e1e6d519838c1e9b26
MD5 264321fae73f62882e1aa026c73ba74a
SHA1 fabceb795896ad5172eae2fd81846d5e2f90628b
SHA512 8e79d583d4432d0c42735ad2a11b51a724f4b604be54f631a06ec5a5c2d8827194fcc6fd5f5d7a8a90348210d449fa350b404e3014a78cc686fd25be08249bf6
MD5 SHA1 SHA512

NSIS installer

installer

db/bossID.dat

SHA256 cb30e91817239109ffd0a5870046e128f04619da80c7624d921162fdfe514f76
MD5 c31b034959815c44d4dafd6f30846159
SHA1 94312fc592ee3f323b3f9d8612737c507ec7f6c3
SHA512 79cafa94c8205859ba112647acdb3c3082a52695300eea0ba9b061d6e7ede788cac726c1b61b673eaa305828357fd7673eeeaecc746981c1c645fa22940b49f8
MD5 SHA1 SHA512

NSIS installer

installer

db/dd.txt

SHA256 493a585eaa8a9957e9a1465618c3d399c9fdb9f93b003753954bef93220cb159
MD5 a0750ec6f58acb84bead5223c1d77b2a
SHA1 effecdd78a0881f5c2f044d5119f58f4332d722d
SHA512 97cd0541dac7d17fb132067ff7c669cb9c973d4abb3833f6f509c2b9854a3a970aafa7805d4385ad603860afadb840c7fd1857ba295c2e7c25697075f4b9d1f9
MD5 SHA1 SHA512

NSIS installer

installer

db/info.db

SHA256 a2423201edac148fcec78dea4d08b15676d7ae50d996859fe104086f0b2f812e
MD5 2db9faeec398d44483e353663a3eb538
SHA1 ad65ec0b396b9804847108ba6273eed758673db5
SHA512 008badb3d845b7a52da0f95dea3b92bc4519c45ea41cacce1e4b25c8e7bc53d64e89f3c495a65096d32b0af6aa245d3b7edbe01fd4bda9ecd13b80b9b66047c2
MD5 SHA1 SHA512

NSIS installer

installer

db/loginID.dat

SHA256 fb5e512425fc9449316ec95969ebe71e2d576dbab833d61e2a5b9330fd70ee02
MD5 1036e3dddc89a4e68d8a33f3823a180e
SHA1 d6459ab29c7b9a9fbf0c7c15fa35faa30fbf8cc6
SHA512 9db5ea5024f5a3af2b82e9b346aa029ea45364ca0361bb2bcfe7040b869dde1177d8fdc36c508bd81bdd03913cc9dad429c301a3232759b732ab976cce929971
MD5 SHA1 SHA512

NSIS installer

installer

db/que01.db

SHA256 7d2ca60ea905d6bc4ee70cfecf988c261d06b6b8ed5154f48cd8c117bc003c41
MD5 2be22542b80aa0b1e5841106a727bd59
SHA1 925c03c22b0df3b86ed5d823a3758ccc962aa466
SHA512 8db472bbc67608af5c66418d085924a7f91068f418d665c50bd91a4771ea2a583447aab15df13fd33ffb2324e49a386f4ef6b02283e00c188bd91158bdd1184f
MD5 SHA1 SHA512

NSIS installer

installer

db/que02.db

SHA256 7d2ca60ea905d6bc4ee70cfecf988c261d06b6b8ed5154f48cd8c117bc003c41
MD5 2be22542b80aa0b1e5841106a727bd59
SHA1 925c03c22b0df3b86ed5d823a3758ccc962aa466
SHA512 8db472bbc67608af5c66418d085924a7f91068f418d665c50bd91a4771ea2a583447aab15df13fd33ffb2324e49a386f4ef6b02283e00c188bd91158bdd1184f
MD5 SHA1 SHA512

NSIS installer

installer

db/que03.db

SHA256 7d2ca60ea905d6bc4ee70cfecf988c261d06b6b8ed5154f48cd8c117bc003c41
MD5 2be22542b80aa0b1e5841106a727bd59
SHA1 925c03c22b0df3b86ed5d823a3758ccc962aa466
SHA512 8db472bbc67608af5c66418d085924a7f91068f418d665c50bd91a4771ea2a583447aab15df13fd33ffb2324e49a386f4ef6b02283e00c188bd91158bdd1184f
MD5 SHA1 SHA512

NSIS installer

installer

db/que04.db

SHA256 7d2ca60ea905d6bc4ee70cfecf988c261d06b6b8ed5154f48cd8c117bc003c41
MD5 2be22542b80aa0b1e5841106a727bd59
SHA1 925c03c22b0df3b86ed5d823a3758ccc962aa466
SHA512 8db472bbc67608af5c66418d085924a7f91068f418d665c50bd91a4771ea2a583447aab15df13fd33ffb2324e49a386f4ef6b02283e00c188bd91158bdd1184f
MD5 SHA1 SHA512

NSIS installer

installer

db/que05.db

SHA256 7d2ca60ea905d6bc4ee70cfecf988c261d06b6b8ed5154f48cd8c117bc003c41
MD5 2be22542b80aa0b1e5841106a727bd59
SHA1 925c03c22b0df3b86ed5d823a3758ccc962aa466
SHA512 8db472bbc67608af5c66418d085924a7f91068f418d665c50bd91a4771ea2a583447aab15df13fd33ffb2324e49a386f4ef6b02283e00c188bd91158bdd1184f
MD5 SHA1 SHA512

NSIS installer

installer

db/que06.db

SHA256 7d2ca60ea905d6bc4ee70cfecf988c261d06b6b8ed5154f48cd8c117bc003c41
MD5 2be22542b80aa0b1e5841106a727bd59
SHA1 925c03c22b0df3b86ed5d823a3758ccc962aa466
SHA512 8db472bbc67608af5c66418d085924a7f91068f418d665c50bd91a4771ea2a583447aab15df13fd33ffb2324e49a386f4ef6b02283e00c188bd91158bdd1184f
MD5 SHA1 SHA512

NSIS installer

installer

db/que07.db

SHA256 7d2ca60ea905d6bc4ee70cfecf988c261d06b6b8ed5154f48cd8c117bc003c41
MD5 2be22542b80aa0b1e5841106a727bd59
SHA1 925c03c22b0df3b86ed5d823a3758ccc962aa466
SHA512 8db472bbc67608af5c66418d085924a7f91068f418d665c50bd91a4771ea2a583447aab15df13fd33ffb2324e49a386f4ef6b02283e00c188bd91158bdd1184f
MD5 SHA1 SHA512

NSIS installer

installer

db/que08.db

SHA256 7d2ca60ea905d6bc4ee70cfecf988c261d06b6b8ed5154f48cd8c117bc003c41
MD5 2be22542b80aa0b1e5841106a727bd59
SHA1 925c03c22b0df3b86ed5d823a3758ccc962aa466
SHA512 8db472bbc67608af5c66418d085924a7f91068f418d665c50bd91a4771ea2a583447aab15df13fd33ffb2324e49a386f4ef6b02283e00c188bd91158bdd1184f
MD5 SHA1 SHA512

NSIS installer

installer

db/que09.db

SHA256 7d2ca60ea905d6bc4ee70cfecf988c261d06b6b8ed5154f48cd8c117bc003c41
MD5 2be22542b80aa0b1e5841106a727bd59
SHA1 925c03c22b0df3b86ed5d823a3758ccc962aa466
SHA512 8db472bbc67608af5c66418d085924a7f91068f418d665c50bd91a4771ea2a583447aab15df13fd33ffb2324e49a386f4ef6b02283e00c188bd91158bdd1184f
MD5 SHA1 SHA512

NSIS installer

installer

db/que10.db

SHA256 7d2ca60ea905d6bc4ee70cfecf988c261d06b6b8ed5154f48cd8c117bc003c41
MD5 2be22542b80aa0b1e5841106a727bd59
SHA1 925c03c22b0df3b86ed5d823a3758ccc962aa466
SHA512 8db472bbc67608af5c66418d085924a7f91068f418d665c50bd91a4771ea2a583447aab15df13fd33ffb2324e49a386f4ef6b02283e00c188bd91158bdd1184f
MD5 SHA1 SHA512

NSIS installer

installer

db/que11.db

SHA256 7d2ca60ea905d6bc4ee70cfecf988c261d06b6b8ed5154f48cd8c117bc003c41
MD5 2be22542b80aa0b1e5841106a727bd59
SHA1 925c03c22b0df3b86ed5d823a3758ccc962aa466
SHA512 8db472bbc67608af5c66418d085924a7f91068f418d665c50bd91a4771ea2a583447aab15df13fd33ffb2324e49a386f4ef6b02283e00c188bd91158bdd1184f
MD5 SHA1 SHA512

NSIS installer

installer

db/que12.db

SHA256 7d2ca60ea905d6bc4ee70cfecf988c261d06b6b8ed5154f48cd8c117bc003c41
MD5 2be22542b80aa0b1e5841106a727bd59
SHA1 925c03c22b0df3b86ed5d823a3758ccc962aa466
SHA512 8db472bbc67608af5c66418d085924a7f91068f418d665c50bd91a4771ea2a583447aab15df13fd33ffb2324e49a386f4ef6b02283e00c188bd91158bdd1184f
MD5 SHA1 SHA512

NSIS installer

installer

db/que13.db

SHA256 7d2ca60ea905d6bc4ee70cfecf988c261d06b6b8ed5154f48cd8c117bc003c41
MD5 2be22542b80aa0b1e5841106a727bd59
SHA1 925c03c22b0df3b86ed5d823a3758ccc962aa466
SHA512 8db472bbc67608af5c66418d085924a7f91068f418d665c50bd91a4771ea2a583447aab15df13fd33ffb2324e49a386f4ef6b02283e00c188bd91158bdd1184f
MD5 SHA1 SHA512

NSIS installer

installer

db/que14.db

SHA256 7d2ca60ea905d6bc4ee70cfecf988c261d06b6b8ed5154f48cd8c117bc003c41
MD5 2be22542b80aa0b1e5841106a727bd59
SHA1 925c03c22b0df3b86ed5d823a3758ccc962aa466
SHA512 8db472bbc67608af5c66418d085924a7f91068f418d665c50bd91a4771ea2a583447aab15df13fd33ffb2324e49a386f4ef6b02283e00c188bd91158bdd1184f
MD5 SHA1 SHA512

NSIS installer

installer

db/que15.db

SHA256 7d2ca60ea905d6bc4ee70cfecf988c261d06b6b8ed5154f48cd8c117bc003c41
MD5 2be22542b80aa0b1e5841106a727bd59
SHA1 925c03c22b0df3b86ed5d823a3758ccc962aa466
SHA512 8db472bbc67608af5c66418d085924a7f91068f418d665c50bd91a4771ea2a583447aab15df13fd33ffb2324e49a386f4ef6b02283e00c188bd91158bdd1184f
MD5 SHA1 SHA512

NSIS installer

installer

db/que16.db

SHA256 7d2ca60ea905d6bc4ee70cfecf988c261d06b6b8ed5154f48cd8c117bc003c41
MD5 2be22542b80aa0b1e5841106a727bd59
SHA1 925c03c22b0df3b86ed5d823a3758ccc962aa466
SHA512 8db472bbc67608af5c66418d085924a7f91068f418d665c50bd91a4771ea2a583447aab15df13fd33ffb2324e49a386f4ef6b02283e00c188bd91158bdd1184f
MD5 SHA1 SHA512

NSIS installer

installer

db/que17.db

SHA256 7d2ca60ea905d6bc4ee70cfecf988c261d06b6b8ed5154f48cd8c117bc003c41
MD5 2be22542b80aa0b1e5841106a727bd59
SHA1 925c03c22b0df3b86ed5d823a3758ccc962aa466
SHA512 8db472bbc67608af5c66418d085924a7f91068f418d665c50bd91a4771ea2a583447aab15df13fd33ffb2324e49a386f4ef6b02283e00c188bd91158bdd1184f
MD5 SHA1 SHA512

NSIS installer

installer

db/que18.db

SHA256 7d2ca60ea905d6bc4ee70cfecf988c261d06b6b8ed5154f48cd8c117bc003c41
MD5 2be22542b80aa0b1e5841106a727bd59
SHA1 925c03c22b0df3b86ed5d823a3758ccc962aa466
SHA512 8db472bbc67608af5c66418d085924a7f91068f418d665c50bd91a4771ea2a583447aab15df13fd33ffb2324e49a386f4ef6b02283e00c188bd91158bdd1184f
MD5 SHA1 SHA512

NSIS installer

installer

db/que19.db

SHA256 7d2ca60ea905d6bc4ee70cfecf988c261d06b6b8ed5154f48cd8c117bc003c41
MD5 2be22542b80aa0b1e5841106a727bd59
SHA1 925c03c22b0df3b86ed5d823a3758ccc962aa466
SHA512 8db472bbc67608af5c66418d085924a7f91068f418d665c50bd91a4771ea2a583447aab15df13fd33ffb2324e49a386f4ef6b02283e00c188bd91158bdd1184f
MD5 SHA1 SHA512

NSIS installer

installer

db/que20.db

SHA256 7d2ca60ea905d6bc4ee70cfecf988c261d06b6b8ed5154f48cd8c117bc003c41
MD5 2be22542b80aa0b1e5841106a727bd59
SHA1 925c03c22b0df3b86ed5d823a3758ccc962aa466
SHA512 8db472bbc67608af5c66418d085924a7f91068f418d665c50bd91a4771ea2a583447aab15df13fd33ffb2324e49a386f4ef6b02283e00c188bd91158bdd1184f
MD5 SHA1 SHA512

NSIS installer

installer

db/que21.db

SHA256 7d2ca60ea905d6bc4ee70cfecf988c261d06b6b8ed5154f48cd8c117bc003c41
MD5 2be22542b80aa0b1e5841106a727bd59
SHA1 925c03c22b0df3b86ed5d823a3758ccc962aa466
SHA512 8db472bbc67608af5c66418d085924a7f91068f418d665c50bd91a4771ea2a583447aab15df13fd33ffb2324e49a386f4ef6b02283e00c188bd91158bdd1184f
MD5 SHA1 SHA512

NSIS installer

installer

db/que22.db

SHA256 7d2ca60ea905d6bc4ee70cfecf988c261d06b6b8ed5154f48cd8c117bc003c41
MD5 2be22542b80aa0b1e5841106a727bd59
SHA1 925c03c22b0df3b86ed5d823a3758ccc962aa466
SHA512 8db472bbc67608af5c66418d085924a7f91068f418d665c50bd91a4771ea2a583447aab15df13fd33ffb2324e49a386f4ef6b02283e00c188bd91158bdd1184f
MD5 SHA1 SHA512

NSIS installer

installer

db/que23.db

SHA256 7d2ca60ea905d6bc4ee70cfecf988c261d06b6b8ed5154f48cd8c117bc003c41
MD5 2be22542b80aa0b1e5841106a727bd59
SHA1 925c03c22b0df3b86ed5d823a3758ccc962aa466
SHA512 8db472bbc67608af5c66418d085924a7f91068f418d665c50bd91a4771ea2a583447aab15df13fd33ffb2324e49a386f4ef6b02283e00c188bd91158bdd1184f
MD5 SHA1 SHA512

NSIS installer

installer

db/que24.db

SHA256 7d2ca60ea905d6bc4ee70cfecf988c261d06b6b8ed5154f48cd8c117bc003c41
MD5 2be22542b80aa0b1e5841106a727bd59
SHA1 925c03c22b0df3b86ed5d823a3758ccc962aa466
SHA512 8db472bbc67608af5c66418d085924a7f91068f418d665c50bd91a4771ea2a583447aab15df13fd33ffb2324e49a386f4ef6b02283e00c188bd91158bdd1184f
MD5 SHA1 SHA512

NSIS installer

installer

db/que25.db

SHA256 7d2ca60ea905d6bc4ee70cfecf988c261d06b6b8ed5154f48cd8c117bc003c41
MD5 2be22542b80aa0b1e5841106a727bd59
SHA1 925c03c22b0df3b86ed5d823a3758ccc962aa466
SHA512 8db472bbc67608af5c66418d085924a7f91068f418d665c50bd91a4771ea2a583447aab15df13fd33ffb2324e49a386f4ef6b02283e00c188bd91158bdd1184f
MD5 SHA1 SHA512

NSIS installer

installer

db/que26.db

SHA256 7d2ca60ea905d6bc4ee70cfecf988c261d06b6b8ed5154f48cd8c117bc003c41
MD5 2be22542b80aa0b1e5841106a727bd59
SHA1 925c03c22b0df3b86ed5d823a3758ccc962aa466
SHA512 8db472bbc67608af5c66418d085924a7f91068f418d665c50bd91a4771ea2a583447aab15df13fd33ffb2324e49a386f4ef6b02283e00c188bd91158bdd1184f
MD5 SHA1 SHA512

NSIS installer

installer

db/que27.db

SHA256 7d2ca60ea905d6bc4ee70cfecf988c261d06b6b8ed5154f48cd8c117bc003c41
MD5 2be22542b80aa0b1e5841106a727bd59
SHA1 925c03c22b0df3b86ed5d823a3758ccc962aa466
SHA512 8db472bbc67608af5c66418d085924a7f91068f418d665c50bd91a4771ea2a583447aab15df13fd33ffb2324e49a386f4ef6b02283e00c188bd91158bdd1184f
MD5 SHA1 SHA512

NSIS installer

installer

db/que28.db

SHA256 7d2ca60ea905d6bc4ee70cfecf988c261d06b6b8ed5154f48cd8c117bc003c41
MD5 2be22542b80aa0b1e5841106a727bd59
SHA1 925c03c22b0df3b86ed5d823a3758ccc962aa466
SHA512 8db472bbc67608af5c66418d085924a7f91068f418d665c50bd91a4771ea2a583447aab15df13fd33ffb2324e49a386f4ef6b02283e00c188bd91158bdd1184f
MD5 SHA1 SHA512

NSIS installer

installer

db/que29.db

SHA256 7d2ca60ea905d6bc4ee70cfecf988c261d06b6b8ed5154f48cd8c117bc003c41
MD5 2be22542b80aa0b1e5841106a727bd59
SHA1 925c03c22b0df3b86ed5d823a3758ccc962aa466
SHA512 8db472bbc67608af5c66418d085924a7f91068f418d665c50bd91a4771ea2a583447aab15df13fd33ffb2324e49a386f4ef6b02283e00c188bd91158bdd1184f
MD5 SHA1 SHA512

NSIS installer

installer

db/que30.db

SHA256 7d2ca60ea905d6bc4ee70cfecf988c261d06b6b8ed5154f48cd8c117bc003c41
MD5 2be22542b80aa0b1e5841106a727bd59
SHA1 925c03c22b0df3b86ed5d823a3758ccc962aa466
SHA512 8db472bbc67608af5c66418d085924a7f91068f418d665c50bd91a4771ea2a583447aab15df13fd33ffb2324e49a386f4ef6b02283e00c188bd91158bdd1184f
MD5 SHA1 SHA512

NSIS installer

installer

db/que31.db

SHA256 7d2ca60ea905d6bc4ee70cfecf988c261d06b6b8ed5154f48cd8c117bc003c41
MD5 2be22542b80aa0b1e5841106a727bd59
SHA1 925c03c22b0df3b86ed5d823a3758ccc962aa466
SHA512 8db472bbc67608af5c66418d085924a7f91068f418d665c50bd91a4771ea2a583447aab15df13fd33ffb2324e49a386f4ef6b02283e00c188bd91158bdd1184f
MD5 SHA1 SHA512

NSIS installer

installer

doc/TEMP.DAT

SHA256 1870d6691d312c6d418387047a2bc1efbb1042533e0323e3b42a0719e88848ee
MD5 870f606aa70b51cc494018260aa770a4
SHA1 4d3f71e87de37620f0010f98293fdb7becd7e796
SHA512 4d237dbb8a61664ac434b36bc311f1e94f7f8cbdc6a36aca42b114fbac8ff4561e282434e976c2b91ec3b36a0f34339acb0020aadc17a7ecd97feebc535ccf82
MD5 SHA1 SHA512

NSIS installer

installer

drvw7/AddPort.exe

IMPHASH b88b8a03daf7c86a3350036af74c3c17
SHA256 38949573360f002588aba77b8c2460f69392984d2f38c8041e6732c83d91945f
MD5 2d4f980dab00faf62a6d19d0beb2ed97
SHA1 051e3b09a03f086319ab9458419743a02a92f82d
SHA512 e8c44026cc0b9d6f9d1044d7bd494ae3f77d807b8948aa8fc678ff43cfe6978f5b4d14402c6b3e20016a6c9677ccbc2f16439c5285979aaeba7fb0d1be59cd2b
SSDEEP 192:lC8zYBNgZXF+8LvOFJJROq02KRdZMFu2tx+8dE3UzSYUrGuunKRdZMFu2tx+8dEF:lCAWi08yFVd1xq3UZU9w1xq3UZU9PV
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

5

Entry point

5081

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

c:\Users\hsu\Documents\Visual Studio 2008\Projects\AddPort\Release\AddPort.pdb

drvw7/FaxDriver/AMD64/ifax_bitmap.dll

IMPHASH 99daf4623f419b215ca2c7ba09ef4ccf
SHA256 42b4e8cd8f01d0f890877103d4e8bee04edcec0a860d0b8de2e3591ac5bc3aea
MD5 9fddd52ff19521af7e848a1e26924ba0
SHA1 8ec7aed0e5810822547b7f27b61dec318c663fbc
SHA512 33bc4d9121f89ea38f98c4d0ceaee35e8b98d89c91a4d431a60c75f4283222e9b35a0498be4b7067306d0dcd02849bef0aeb77bc384a0db6194affecf0f53ac2
SSDEEP 384:x30rRf7yWMxWND/B+NWl4kpwn8NU/x5XYoqSzYR6EC2csBsSEBxOCnb0fLcQGmBV:ml7yUD/kNqFMPqSABvy/IQQGGe
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

1

Major OS version

6

Entry point

20720

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

c:\workd\xp_d\project\strongfaxwin7\src\faxdriver\objfre_win7_amd64\amd64\ifax_bitmap.pdb

drvw7/FaxDriver/IA64/ifax_bitmap.dll

SHA256 30dbec1d9c3ce14a0433a59ebb6ec471ed094409748af6b1ca161a2c908e1657
MD5 06dbdd3b5d88551ba06414281ebce912
SHA1 5ca7a3b8d9310953c14b13dc8d3ee3d0cd155ba4
SHA512 fbbc04b7c2260f85609b2cc0dbf0d0330a3e0cb334df8dba84672520074cd02186ebe5daebf29d373fce17014f40e28194a9b13e8c984f2749b6315ed1c612d6
SSDEEP 1536:o2tmHj0vazO40SQN+9yKLby+Sfb0AOCewB/V:o2tmovazOhSQNRKLbyvfYAOCest
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

drvw7/FaxDriver/STDNAMES.GPD

SHA256 290109933e9e2a0649aec035e010022808c6656ae1b0c7e113bc8b14fb5268dd
MD5 f8912eed4be5b47a634eb31a896be032
SHA1 31ae44f2ee9d8440577dc54fa736ed31c5983ac1
SHA512 41bdb615a0f663d4735e14edfdb226fdc3d9f71e97c29a486d6321c3ed625833f3b6db2ae06dad858b1dfccd100f5916cc10e4f77d82a6f562318eba786ba848
SSDEEP 192:NcThm8JZ986ITRCzEzEpYNwtd29u7ZTls:+FzOnS7zs
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

drvw7/FaxDriver/i386/ifax_bitmap.dll

IMPHASH 74db2629b0bf6511946d9243af6fff5f
SHA256 46c178f1ac15eddaf1e58e432a88f160c3a267f504bc497eecea0781ba32ac59
MD5 3b99bb4f5be18fb73c0c92a24b9e640e
SHA1 424e2c082200420d95e9dbee724308fb335c67c1
SHA512 63f3fe82ba14b375ac1460ff088f9bffa48bc9f36c8bce2b8c42be2b31710f81e3e0fb9708e493e0dc1b1be27c18987a40c4394c6bdc4a608bd2eb91d3db2af4
SSDEEP 384:1e6xJFRt9U7xf6toUdQSA6qQU2a3ugqA2joGg1JnV85JxBjH10fLcQfwBKzyg:1RFWu/A67U2BXg1s5dHKQQfse
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

1

Major OS version

6

Entry point

18919

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\workd\xp_d\project\strongfaxwin7\src\faxdriver\objfre_win7_x86\i386\ifax_bitmap.pdb

drvw7/FaxDriver/ifax_bitmap.gpd

SHA256 2b30ee01da6aa412899f4049650759f9ff011ef462156877e39082e7105312e0
MD5 d4215be49fe4485cf9d92a0708d8d250
SHA1 c6474bceca6dee05de758479c25c5684aacd87ae
SHA512 f99b9ccf211b2e802e18088d24a5a1823fa036c65015722352b9a2f9dd76b69990628500a4738eed63cfdfe770a825e9330b8bb898d85ab0a5f1e20a46f7e6b8
SSDEEP 192:LrHoFFlqZmEs7h1TUswhq69Oa4zMHO1IMjknP4:HIF3omEu1g/QI3C0dOkA
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

drvw7/FaxDriver/ifax_bitmap1.gpd

SHA256 36c1b47ecb9dc11d62467b39d16faa9e191903131549520211d801390f7a0d47
MD5 f67c57f9c84e8cc667867bf7c14da21b
SHA1 756be25f972b2ffb3d0ffe979fc0dbb774d67404
SHA512 c60b3e5a6cb140c9059a3c07cc78c146380bc67aec123caf35166a72881f4b288c09b104cd14d599766b1ada35acba55130352e357e2503376987e2fc468255f
SSDEEP 192:LrHoFFlqZmEs7hqYUswhq69Oa4zMHO1IMjknP4:HIF3omEuqx/QI3C0dOkA
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

drvw7/FaxDriver/x86/ifax_bitmap.dll

IMPHASH 74db2629b0bf6511946d9243af6fff5f
SHA256 46c178f1ac15eddaf1e58e432a88f160c3a267f504bc497eecea0781ba32ac59
MD5 3b99bb4f5be18fb73c0c92a24b9e640e
SHA1 424e2c082200420d95e9dbee724308fb335c67c1
SHA512 63f3fe82ba14b375ac1460ff088f9bffa48bc9f36c8bce2b8c42be2b31710f81e3e0fb9708e493e0dc1b1be27c18987a40c4394c6bdc4a608bd2eb91d3db2af4
SSDEEP 384:1e6xJFRt9U7xf6toUdQSA6qQU2a3ugqA2joGg1JnV85JxBjH10fLcQfwBKzyg:1RFWu/A67U2BXg1s5dHKQQfse
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

1

Major OS version

6

Entry point

18919

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\workd\xp_d\project\strongfaxwin7\src\faxdriver\objfre_win7_x86\i386\ifax_bitmap.pdb

drvw7/STDNAMES.GPD

SHA256 290109933e9e2a0649aec035e010022808c6656ae1b0c7e113bc8b14fb5268dd
MD5 f8912eed4be5b47a634eb31a896be032
SHA1 31ae44f2ee9d8440577dc54fa736ed31c5983ac1
SHA512 41bdb615a0f663d4735e14edfdb226fdc3d9f71e97c29a486d6321c3ed625833f3b6db2ae06dad858b1dfccd100f5916cc10e4f77d82a6f562318eba786ba848
SSDEEP 192:NcThm8JZ986ITRCzEzEpYNwtd29u7ZTls:+FzOnS7zs
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

drvw7/StrongFax.inf

SHA256 2f277a656bb960f32e0a30995abf4139fb88dd589d770b4ca44e19f73620a6cc
MD5 0efa594b048394518503a041d7f8c65f
SHA1 5e5fe7375bc29e4a4c4a7e83d5b8387cefcafb2c
SHA512 9f06cf165757248660faf61b22eab74d1468ca8c0a02aed422b42845dd772e2b0fd2e35fcc8a5a34c6c05e179c40146c60b4a239182dce32a7f087769683a55b
MD5 SHA1 SHA512

NSIS installer

installer

drvw7/StrongFax.ini

SHA256 e8bc4a10215ae03a23ad3b8ae3b94da07ee895fe460f29b15d92ff6e2ff7d7a6
MD5 6cba1997f09730c669acc238a9746c5b
SHA1 75f98ed8d56faf71b2a9b59597d3d30ab31b0c3d
SHA512 e9812dee50d16debec56ebaa59eb1c42b988e72a7f212049f19bfb625b085b894471b7ee25c3965581b90f35cd1ca6e06b8aae62a96740a938581aaf414d3455
MD5 SHA1 SHA512

NSIS installer

installer

drvw7/ifax_bitmap.gpd

SHA256 2b30ee01da6aa412899f4049650759f9ff011ef462156877e39082e7105312e0
MD5 d4215be49fe4485cf9d92a0708d8d250
SHA1 c6474bceca6dee05de758479c25c5684aacd87ae
SHA512 f99b9ccf211b2e802e18088d24a5a1823fa036c65015722352b9a2f9dd76b69990628500a4738eed63cfdfe770a825e9330b8bb898d85ab0a5f1e20a46f7e6b8
SSDEEP 192:LrHoFFlqZmEs7h1TUswhq69Oa4zMHO1IMjknP4:HIF3omEu1g/QI3C0dOkA
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

drvw7/ifax_bitmap1.gpd

SHA256 36c1b47ecb9dc11d62467b39d16faa9e191903131549520211d801390f7a0d47
MD5 f67c57f9c84e8cc667867bf7c14da21b
SHA1 756be25f972b2ffb3d0ffe979fc0dbb774d67404
SHA512 c60b3e5a6cb140c9059a3c07cc78c146380bc67aec123caf35166a72881f4b288c09b104cd14d599766b1ada35acba55130352e357e2503376987e2fc468255f
SSDEEP 192:LrHoFFlqZmEs7hqYUswhq69Oa4zMHO1IMjknP4:HIF3omEuqx/QI3C0dOkA
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

temp/TEMP.DAT

SHA256 1870d6691d312c6d418387047a2bc1efbb1042533e0323e3b42a0719e88848ee
MD5 870f606aa70b51cc494018260aa770a4
SHA1 4d3f71e87de37620f0010f98293fdb7becd7e796
SHA512 4d237dbb8a61664ac434b36bc311f1e94f7f8cbdc6a36aca42b114fbac8ff4561e282434e976c2b91ec3b36a0f34339acb0020aadc17a7ecd97feebc535ccf82
MD5 SHA1 SHA512

NSIS installer

installer

uninst.exe

IMPHASH 7fa974366048f9c551ef45714595665e
SHA256 9bd31f4b94ae09a6845d540cd9d0736325d4b6228d35c112b092d94f0497264b
MD5 6cc2baa314ef815348045b3b4a124313
SHA1 57141974409d6b25aec21c5959d369f82b102548
SHA512 49b91c23b06adf5805f72b8346f6c64f95a0a3a935e81440def1e2efb81fb662631cb8cc5cf373324923e4431d86bc18aa16d680cbaac2dd487c8dfd7fb1d747
SSDEEP 1536:KpgpHzb9dZVX9fHMvG0D3XJ5gdLeAyNhjD:IgXdZt9P6D3XJ5ceAOD
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

12538

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CompareFileTime SearchPathA GetShortPathNameA GetFullPathNameA MoveFileA SetCurrentDirectoryA GetFileAttributesA GetLastError CreateDirectoryA SetFileAttributesA Sleep GetTickCount GetFileSize GetModuleFileNameA GetCurrentProcess CopyFileA ExitProcess GetWindowsDirectoryA SetFileTime GetCommandLineA SetErrorMode LoadLibraryA lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread CreateProcessA RemoveDirectoryA CreateFileA GetTempFileNameA lstrlenA lstrcatA GetSystemDirectoryA GetVersion CloseHandle lstrcmpiA lstrcmpA ExpandEnvironmentStringsA GlobalFree GlobalAlloc WaitForSingleObject GetExitCodeProcess GetModuleHandleA LoadLibraryExA GetProcAddress FreeLibrary MultiByteToWideChar WritePrivateProfileStringA GetPrivateProfileStringA WriteFile ReadFile MulDiv SetFilePointer FindClose FindNextFileA FindFirstFileA DeleteFileA GetTempPathA

user32

EndDialog ScreenToClient GetWindowRect EnableMenuItem GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard RegisterClassA TrackPopupMenu AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA DestroyWindow CreateDialogParamA SetTimer SetWindowTextA PostQuitMessage SetForegroundWindow wsprintfA SendMessageTimeoutA FindWindowExA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA OpenClipboard ExitWindowsEx IsWindow GetDlgItem SetWindowLongA LoadImageA GetDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint ShowWindow

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectA SetBkMode SetTextColor SelectObject

shell32

SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA SHGetSpecialFolderLocation

advapi32

RegQueryValueExA RegSetValueExA RegEnumKeyA RegEnumValueA RegOpenKeyExA RegDeleteKeyA RegDeleteValueA RegCloseKey RegCreateKeyExA

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

win/xDx.exe

IMPHASH 130f452898ca48acf6b1e1fee7d9b1b0
SHA256 64df15b06c162bc6784006a09a811b3c20e24e7e5f10820f334359ee72f0659f
MD5 e83d3afb4196e270fae6d2bcb29e8590
SHA1 97332a980d3dbdd59f7692181cc0188635077c9f
SHA512 655fe8246643fc56d08792c0baa62c2c8de818aa3a3436a78bc2385827cef91aba8b761513a6aad964434f1de5604847de0940bde7a7d5773893fe54244046b8
SSDEEP 96:FTCmsijxOnuhjP489qFDuCde8Vpb3M235pKegxT/SQLJXfq+qvufntboynB+axdi:JL1bp79qFDuK7/M2zmxr/L/1oynW
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

8430

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

win/xTwn.exe

IMPHASH 3ec8eb4c092e65462b73b3123293cd23
SHA256 6ba1bf61216106e0a786bd94eb7baf3a4cd08a8e409e02fd70bbc2c5e48b343b
MD5 96f3fb43cb04bb8bd2ac4ff254f2ab53
SHA1 8c5481f0f49563a38b98f4c9802e0d33dd50b665
SHA512 1efa5313b61006c095a4b325e3bd4a0c647e14899e50f5dc09c85744e17d8050aacf144202941e533eb55108b41b7b76d83457dc573865f7dac7ac398598a0ba
SSDEEP 768:7lWBp4Z1SbxCuDmA9Fl95gWveDDLN/9NLueQQWD:xWBSSbxCGJDDmWGDDLNGv
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

23238

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

mfc42

ord3346 ord2725 ord4079 ord4698 ord5307 ord5289 ord5714 ord2982 ord3147 ord3259 ord4465 ord3136 ord3262 ord2985 ord3081 ord2976 ord3830 ord3831 ord3825 ord3079 ord4080 ord4622 ord4424 ord3738 ord561 ord815 ord2514 ord2621 ord5265 ord4376 ord4853 ord4998 ord6052 ord4078 ord5300 ord5302 ord5241 ord2385 ord5163 ord6374 ord4353 ord3798 ord4837 ord4441 ord2648 ord2055 ord6376 ord3749 ord5065 ord1727 ord5261 ord2446 ord2124 ord5277 ord4627 ord4425 ord3597 ord641 ord1146 ord1168 ord324 ord4234 ord5280 ord6453 ord6215 ord1175 ord2379 ord755 ord470 ord2396 ord5199 ord1089 ord3922 ord5731 ord2512 ord2554 ord4486 ord6375 ord4274 ord4673 ord823 ord825 ord1200 ord2642 ord4407 ord1775 ord4710 ord1576

msvcrt

sscanf sprintf __dllonexit _onexit _exit _XcptFilter exit _acmdln __getmainargs _initterm __setusermatherr _adjust_fdiv __p__commode __p__fmode __set_app_type _except_handler3 _controlfp _purecall fread fgetc fwrite ftell fseek fclose fopen __CxxFrameHandler _setmbcp

kernel32

lstrcpyA FreeLibrary GetProcAddress LoadLibraryA OpenFile lstrcatA lstrlenA GetWindowsDirectoryA GlobalFree GlobalAlloc GlobalUnlock GlobalLock Sleep WinExec GetProfileIntA GetModuleHandleA GetStartupInfoA

user32

wsprintfA LoadIconA KillTimer SetTimer SendMessageA GetMessageA DrawIcon TranslateMessage GetSystemMetrics IsIconic PostMessageA EnableWindow GetClientRect DispatchMessageA

Sharing

General

Malware Config

Signatures

File Explorer