6d56f478df932204bcf02bf454aea839_JaffaCakes118

resource	yara_rule
static1/unpack001/$PLUGINSDIR/version.dll	acprotect

resource	yara_rule
static1/unpack001/$PLUGINSDIR/version.dll	upx

resource
unpack001/$PLUGINSDIR/ButtonEvent.dll
unpack001/$PLUGINSDIR/FloatingProgress.dll
unpack001/$PLUGINSDIR/LuaBridge.dll
unpack001/$PLUGINSDIR/LuaSocket/mime/core.dll
unpack001/$PLUGINSDIR/LuaSocket/socket/core.dll
unpack001/$PLUGINSDIR/LuaXml_lib.dll
unpack001/$PLUGINSDIR/NotifyIcon.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/UACInfo.dll
unpack001/$PLUGINSDIR/bit.dll
unpack001/$PLUGINSDIR/browserutils.dll
unpack001/$PLUGINSDIR/customNsWeb.dll
unpack001/$PLUGINSDIR/ffi.dll
unpack001/$PLUGINSDIR/lua51.dll
unpack001/$PLUGINSDIR/luacom.dll
unpack001/$PLUGINSDIR/nsDialogs.dll
unpack001/$PLUGINSDIR/nsis7z.dll
unpack001/$PLUGINSDIR/nsisunz.dll
unpack001/$PLUGINSDIR/un.package.exe
unpack001/$PLUGINSDIR/version.dll
unpack002/out.upx

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

IMPHASH c86b02c21ff392ad6ffcf21dcd4a5588
SHA256 20d10e741e4e96e2598b104740f7a71875e67a64fe5f3be2fcb54a518ab4fab2
MD5 6d56f478df932204bcf02bf454aea839
SHA1 9ca213836edea24fc305afab08f1f903ec6347ec
SHA512 1bc69777a9b5220e1c26a1a2b529a103434c532d26f76f19ea8e80ae015ffc9bd6dc4c98ab5ec9d16001dd7769e91921df55ada39c2833745b33ae960e7f8ecc
SSDEEP 12288:OxpJMyVWJ0q4kfS6wKhmcRf6vEh7+KAFgtp51idtDWEqOWtVr2/NoPH48:6panJ0ZkKIh7mFgfidtDWEn20/No
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

N/A

Digest Algorithm

N/A

PE Digests Matches

Not matched

Trusted

Not trusted

Subject

CN=Download Admin,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Download Admin,L=SAN FRANCISCO,ST=California,C=US

Serial Number

2e:eb:24:7a:8f:9d:63:d7:4c:e7:ef:95:51:e3:d4:01

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 20, 2013 - May 29, 2016

Subject

Serial Number

18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4a

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Nov 8, 2006 - Jul 16, 2036

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Minor OS version

1

Major OS version

5

Entry point

13121

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrcmpiA CloseHandle SetFileTime CompareFileTime SearchPathA GetShortPathNameA GetFullPathNameA MoveFileA SetCurrentDirectoryA GetFileAttributesA GetLastError CreateDirectoryA SetFileAttributesA Sleep GetTickCount CreateFileA GetFileSize GetModuleFileNameA GetCurrentProcess lstrcmpA ExitProcess GetWindowsDirectoryA GetTempPathA GetCommandLineA SetErrorMode lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread LoadLibraryA CreateProcessA GetTempFileNameA lstrlenA lstrcatA GetSystemDirectoryA GetVersion RemoveDirectoryA ExpandEnvironmentStringsA WaitForSingleObject GetExitCodeProcess GlobalFree GetModuleHandleA LoadLibraryExA GetProcAddress FreeLibrary MultiByteToWideChar WritePrivateProfileStringA GetPrivateProfileStringA WriteFile ReadFile SetFilePointer FindClose TlsSetValue FindNextFileA FindFirstFileA DeleteFileA MulDiv TlsAlloc TlsGetValue GlobalAlloc CopyFileA

user32

ScreenToClient GetMessagePos CallWindowProcA IsWindowVisible LoadBitmapA CloseClipboard SetClipboardData EmptyClipboard OpenClipboard TrackPopupMenu GetWindowRect AppendMenuA CreatePopupMenu GetSystemMetrics EndDialog EnableMenuItem GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos CheckDlgButton GetClassInfoA CreateWindowExA SystemParametersInfoA RegisterClassA SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA DestroyWindow CreateDialogParamA SetTimer SetWindowTextA PostQuitMessage SetForegroundWindow ShowWindow wsprintfA FindWindowExA LoadCursorA SetCursor GetWindowLongA GetSysColor CharNextA DialogBoxParamA ExitWindowsEx IsWindow GetDlgItem SetWindowLongA LoadImageA GetDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint SendMessageTimeoutA

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectA SetBkMode SetTextColor SelectObject

shell32

SHBrowseForFolderA SHGetPathFromIDListA SHGetFileInfoA ShellExecuteA SHFileOperationA SHGetSpecialFolderLocation

advapi32

RegEnumKeyA RegOpenKeyExA RegCloseKey RegDeleteKeyA RegDeleteValueA RegCreateKeyExA RegSetValueExA RegQueryValueExA RegEnumValueA

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

Name

.text

Size

23KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

3.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.ndata

Size

Virtual Size

144KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

187KB

Virtual Size

187KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

$PLUGINSDIR/AdvancedTests.lua

SHA256 720f050d7c2b18da1181fb699a0cce89f1e228ac09fbbfd3d8d5e8cf04e112e8
MD5 fe69d3b0caef87b0ec5d11ea4a281da4
SHA1 817344dc50563aa7a295b8cc7e263f95af29d4b8
SHA512 3bf974ce6df1b70464b74adef4af13278296ffc51b4b155d3cce904aef9d2cb32a664ada16128c2410fe6e81a201c24f126692279e15cf7c1ae5536cf27bb8f5
SSDEEP 96:pxueIPiQhvuBGUs+sTIOdYGEjnrJIn0t5hr48VwcJojBGep906NHBB4T:pxuTvcs+sHdYGmrw0JDVwQujHNhB4T
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/BrowserControl.lua

SHA256 40458af79f4fe53dba5f526e5442df47454ee8ebd21be1063d6706f87ac40e15
MD5 3e3f492cc3a33b452bd8c6a1c611856b
SHA1 3b24b28852dc2cd26fc0586ce7d3f0f91bb2d0c6
SHA512 3a190e92be927a3393713b5a40a049ad8e4fc493225d3536a1b3ad26693202622f88d5ce2b3b24f23bb61c754e8ca2682a7f884c7bbccac6f96fa9b56a0ed1a1
SSDEEP 96:YcPFcSnAqMP6HAjidEJNMLwLzm1Bh25NsWhPEEPNeCmhLCzgtKE:YcNcSA7PNMAzm6blV3mc0tKE
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/ButtonEvent.dll

IMPHASH 0ece15e7d9bb35972aec701f46192460
SHA256 5d913c6be9c9e13801acc5d78b11d9f3cd42c1b3b3cad8272eb6e1bfb06730c2
MD5 fad9d09fc0267e8513b8628e767b2604
SHA1 bea76a7621c07b30ed90bedef4d608a5b9e15300
SHA512 b39c5ea8aea0640f5a32a1fc03e8c8382a621c168980b3bc5e2897932878003b2b8ef75b3ad68149c35420d652143e2ef763b6a47d84ec73621017f0273e2805
MD5 SHA1 SHA512

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

5170

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/DownloadList.lua

SHA256 e7acd216e01c0fb299c5d42d85ccd90d579a7adf8f3eaf3da5acf447bbac80e2
MD5 6cb4ac3d391aeae3f690e7429d152967
SHA1 fbe6a34dc51c0c3054ab5da96eb361a9580c3ef2
SHA512 1a08c6f3e948846a9b5e89b47573cb97f9cf6d00c61bee6a53f9cfe49b7e8b19a7df0ed1ae5d693629b42528e3d23ee3e92b561408fd14743ff837d51c0bec81
SSDEEP 192:sz4OaYdx2oaQiviapMCImuxijxU6PdrqoV4d4WUJsQO3M3SSorDGr:sGY6AMppu0xUodr6d4pvO83SlO
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/DownloadThread.lua

SHA256 8b4934a44a14a084383ca313ce1f3b688844236c779ec4214c46cfcc5a57cb8c
MD5 e51bf1be80d956a304dda51e89516a30
SHA1 b174e7740e88bedab6972b354ab66478996c2c40
SHA512 3f2d58a919d679771748b4dae9fa92e6bfca59d55ed1c85f615b74e1aa1f146ee1089473e437174d6522eea53cce86fb6c0fa29beb8a43eeb95dc4a36836d12d
MD5 SHA1 SHA512

NSIS installer

installer

$PLUGINSDIR/Events.lua

SHA256 895e6439e002183542b13720976a8e8166718560149f876141bd1827e4238642
MD5 5a7269de2a693363b32d3f9e008c53b6
SHA1 7c4a71a0671933f815046672277dc0e9443503e4
SHA512 306db56fac8c717f8c42056d56d10465f2c2be803135e46549b46747ae34635e027782950e13bd4b511b02254f517a041a4a7d80afc0f9bf49b8e9aba157bb9b
MD5 SHA1 SHA512

NSIS installer

installer

$PLUGINSDIR/FloatingProgress.dll

IMPHASH 6ef0ba2a59a41ea0d58313176f4f9149
SHA256 0cc5dc45b6a04ec236f4ecf0eeee212096b1561179d71c49dd5fc82aba706741
MD5 0f26c6d34d3841e93145dd00d0175651
SHA1 57b068569d0eb2336503beed87589629ab2a6f1f
SHA512 72785e520d78a4ebd8779e5497806406c1b91b9c05ed82a392a6af689781e26c77f0032c66540b80e2e7e457128df2afd0647b0dbc970a11d0cd4ee3930d47a5
SSDEEP 192:1cpwREp+D1UTyFDoUjSFWbY3Lf+25meJVOuN+Sx10mvmWc4b61n:1fU8fc7fV8C+I2mw4b61n
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

1

Major OS version

5

Entry point

5461

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\Programming\GitHome\bm-core.git\25\Custom\FloatingProgress\Release\FloatingProgress.pdb

$PLUGINSDIR/GuiInit.lua

SHA256 ab08d2313c05f9f58a3c6b6d5338e236313bdacdde469c9c7b98de7d230f31d4
MD5 d277a99093503c0cbc86f1e29389fd7b
SHA1 139f5e61f5b063627eb6858ae8d9e078bc06ee34
SHA512 42c81601378f4029bd61eba735b3b772d4167afb4f5e129e5da5c7e15f694da2050f097bd9d98ea73ae146faebca70deb2b37ff6766f8ad2a74b2fa4b07e91e0
SSDEEP 1536:N5o/mQodXHRjrSoJ817jUnBBxhmT/ORMsowLnegMzrLyi2D4pgQ78xfMs:N5oORVuoJ81Y8OLCy1s2xUs
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/IntegratedOffer.lua

SHA256 72b061dfd9621a2479a35fcf63fe3167f855fb56aff451bd15a81b997d94abae
MD5 da573ccbab6f29e0ae7784acf49bd699
SHA1 4bab4651f2fedd61d7f454bd3e4c8a081ccdbda5
SHA512 eb9d837a3ac3507c6836d613875fe7532c4f48c21997259076c47157b16d3d2c372cb28d925f79d50ae42ab945f9baffebc71af34d354a77410033018adc38c1
SSDEEP 384:52KtdoVClYfeDhqqUKWE+BzVQ16YJDAkOw2LkrtAIK2KDwqy8Z/JQ4q29TDX:52W8ClYfe9UTE+pG6/yrt+vyO/1X
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/LuaBridge.dll

IMPHASH d90216d0c7e3a0e11b082b54332b0de9
SHA256 43da5c772a9be1b0699c5515261f643bb02348c1da3485ce307a80f703e4bf79
MD5 37a354de9f7a50c63eb0ced75f32c0c8
SHA1 2a3a41ff3986486c76ea8cbf24bc8a12562e3c79
SHA512 0b395ef942aaf57cdd93134f1cdb897bc4b2a543ad7590efeee28d821a73fadc483952de37c3171b0975c66fc2c42b164e4ce3fb7691a02baf69051ab71ad928
SSDEEP 1536:30Puiz5IiFmrhCdzUEpxSRIpKm4yT1u8Dx/Q0+rZN:EmiFZG2xpbVuUx/Q0EN
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

1

Major OS version

5

Entry point

33203

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\Programming\GitHome\LuaBridge\Release\LuaBridge.pdb

lua51

luaL_optinteger lua_newuserdata lua_setmetatable lua_pushcclosure lua_pcall lua_remove lua_insert lua_settable luaL_checkinteger luaL_checklstring lua_pushlstring luaL_checkudata luaL_argerror lua_touserdata lua_getfield lua_isuserdata lua_type lua_objlen lua_pushnumber lua_pushnil lua_gettop lua_checkstack lua_pushboolean lua_error lua_tointeger lua_tolstring lua_pushinteger lua_close luaL_newstate luaL_openlibs lua_createtable lua_settop lua_concat luaL_gsub lua_load lua_pushvalue luaL_newmetatable luaL_openlib lua_gettable luaL_checktype lua_toboolean luaL_loadstring lua_next lua_rawgeti lua_tonumber lua_pushstring luaL_optlstring lua_isnumber lua_isstring luaL_error lua_pushfstring

advapi32

RegCreateKeyExA RegDeleteValueA RegSetValueExA RegQueryValueExA RegOpenKeyExA RegCloseKey

winmm

timeGetTime

iphlpapi

GetAdaptersAddresses

msvcrt

free vsprintf malloc _vscprintf ??2@YAPAXI@Z ??3@YAXPAX@Z strchr fopen fclose _snprintf sprintf

kernel32

CreateTimerQueueTimer Sleep GetModuleFileNameA GetCurrentProcessId GetCurrentProcess SetUnhandledExceptionFilter lstrcpyA CreateFileA GetFileSize DebugBreak GlobalFree CreateDirectoryA GetFileAttributesA TerminateJobObject WaitForMultipleObjects AssignProcessToJobObject ResumeThread CreateJobObjectA GetProcAddress FreeLibrary CreateProcessA GetExitCodeProcess GlobalAlloc CreatePipe ReadFile GetLastError ExpandEnvironmentStringsA lstrlenA LoadLibraryA lstrcmpA lstrcpynA CreateThread CreateEventA CreateMutexA CreateSemaphoreA InitializeCriticalSection CloseHandle DeleteCriticalSection OpenThread lstrcmpiA IsDebuggerPresent LeaveCriticalSection CreateTimerQueue FindClose FindFirstFileA EnterCriticalSection ReleaseMutex ReleaseSemaphore GetCurrentThreadId GetStdHandle OutputDebugStringA WaitForSingleObject

user32

PeekMessageA TranslateMessage DispatchMessageA CharNextA wsprintfA PostThreadMessageA IsDialogMessageA FindWindowExA CallWindowProcA ClientToScreen GetClientRect BringWindowToTop EnableWindow ShowWindow GetWindowRect UpdateWindow InvalidateRect ReleaseCapture MoveWindow MapWindowPoints GetWindowLongA SetWindowLongA SetWindowPos PostMessageA SendMessageA GetParent MessageBoxA GetMessageA

shell32

SHFileOperationA ShellExecuteA

??0ArgTable@LuaBridge@@QAE@XZ ??0char_result_dynamic@LuaBridge@@QAE@XZ ??0log_record@logging@@QAE@HPBDH@Z ??1ArgTable@LuaBridge@@QAE@XZ ??1char_result_dynamic@LuaBridge@@QAE@XZ ??1log_record@logging@@QAE@XZ ??4ArgTable@LuaBridge@@QAEAAV01@ABV01@@Z ??4char_result_context@LuaBridge@@QAEAAU01@ABU01@@Z ??4char_result_dynamic@LuaBridge@@QAEAAU01@ABU01@@Z ??4log_record@logging@@QAEAAV01@ABV01@@Z ?add@ArgTable@LuaBridge@@QAEAAV12@ABV12@PBD@Z ?add@ArgTable@LuaBridge@@QAEAAV12@HPBD@Z ?add@ArgTable@LuaBridge@@QAEAAV12@JPBD@Z ?add@ArgTable@LuaBridge@@QAEAAV12@NPBD@Z ?add@ArgTable@LuaBridge@@QAEAAV12@PAUlua_State@@HPBD@Z ?add@ArgTable@LuaBridge@@QAEAAV12@PBD0@Z ?add@ArgTable@LuaBridge@@QAEAAV12@PBDI0@Z ?add@ArgTable@LuaBridge@@QAEAAV12@Q6AHPAUlua_State@@@ZPBD@Z ?add@ArgTable@LuaBridge@@QAEAAV12@Q6AHPAUlua_State@@@ZPBV12@PBD@Z ?add@ArgTable@LuaBridge@@QAEAAV12@_NPBD@Z ?addnil@ArgTable@LuaBridge@@QAEAAV12@PBD@Z ?apply@ArgTable@LuaBridge@@QBEXPAUlua_State@@@Z ?arg_result_handler@LuaBridge@@YAXPAUnamed_state_t@1@_NPAX@Z ?astable@ArgTable@LuaBridge@@QBEXPAUlua_State@@@Z ?begin@ArgTable@LuaBridge@@QBE?AViterator@12@XZ ?call@LuaBridge@@YAHPAUnamed_state_t@1@PBDPBVArgTable@1@P6AX0_NPAX@Z4@Z ?call@LuaBridge@@YA_NPAUnamed_state_t@1@PBDPBVArgTable@1@PADI@Z ?char_result_handler@LuaBridge@@YAXPAUnamed_state_t@1@_NPAX@Z ?closeState@LuaBridge@@YAXPAUnamed_state_t@1@@Z ?copy@ArgTable@LuaBridge@@QBEPAV12@XZ ?createInterp@LuaBridge@@YAPAUlua_State@@XZ ?createState@LuaBridge@@YAPAUnamed_state_t@1@PBDPAU21@@Z ?end@ArgTable@LuaBridge@@QBE?AViterator@12@XZ ?eval@LuaBridge@@YA_NPAUnamed_state_t@1@PBD@Z ?eval@LuaBridge@@YA_NPAUnamed_state_t@1@PBDPADI@Z ?execFile@LuaBridge@@YA_NPAUnamed_state_t@1@PBD@Z ?findOrCreateState@LuaBridge@@YAPAUnamed_state_t@1@PBD@Z ?findState@LuaBridge@@YAPAUnamed_state_t@1@PBDPAUlua_State@@@Z ?from_arguments@ArgTable@LuaBridge@@QAEXPAUlua_State@@H@Z ?from_stack@ArgTable@LuaBridge@@QAEXPAUlua_State@@HH@Z ?from_table@ArgTable@LuaBridge@@QAEXPAUlua_State@@H@Z ?getState@LuaBridge@@YAPAUlua_State@@PBD@Z ?processPipeCommands@LuaBridge@@YAHPAUnamed_state_t@1@PAX_N@Z ?push_cell@ArgTable@LuaBridge@@AAEAAV12@PAUarg_cell_t@2@@Z ?serveRemoteState@LuaBridge@@YAHPBD0@Z ?size@ArgTable@LuaBridge@@QBEHXZ ?startRemoteState@LuaBridge@@YAHPBD000J@Z ?stateFromState@LuaBridge@@YAPAUlua_State@@PAUnamed_state_t@1@@Z ?target@log_record@logging@@QAEAAVNullStream@2@XZ ?waitForState@LuaBridge@@YA_NPBD@Z breakpoint cancel_state close_state crash enableMiniDump eval exec execFile finalize init initThreadedLua pause_state reset_state resume_state setErrorHandler wait

$PLUGINSDIR/LuaSocket/lua/ltn12.lua

SHA256 b1864aed85c114354b04fbe9b3f41c5ebc4df6d129e08ef65a0c413d0daabd29
MD5 e440044afe6c761507a996b5b45ab0f9
SHA1 ef772c758fd5d6098b41375f35ac26f3963cc306
SHA512 8a82df90459929de1c91ed29a122a149749d42adbb85faf0c3123d0f0886babc90cb93de85105feb7497b46552a6747ae05b985f5a488d1d8f1a2a7db44077b4
SSDEEP 192:PYfxR7f6v6kObk2D0P9+INoAlEEvKbMEMuWKlrSDrGXJ5GPYbo8+b2uP0XJUMwsr:PN6kObkyar5libMv+sCorbrMwsDiDK
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/LuaSocket/lua/mime.lua

SHA256 e9167e0da842a0b856cbe6a2cf576f2d11bcedb5985e8e4c8c71a73486f6fa5a
MD5 4bfdaaab9014fe129bc6388fd5687c8f
SHA1 2c6ff28245e1dc7ec9ac1c43c3cda354d07b2c4a
SHA512 3a1a4d838bb5cafe71da262ee7bd6dccbd30dd4d7abe0d04f6ecf96bf704d5e111967be812894a47f2eb3374ee110620b7cc47eebac8b72ddcf7f506ba82a607
MD5 SHA1 SHA512

NSIS installer

installer

$PLUGINSDIR/LuaSocket/lua/socket.lua

SHA256 15fd138a169cae80fecf4c797b33a257d587ed446f02ecf3ef913e307a22f96d
MD5 74dbe1060e91112e1c21ef9870b4a587
SHA1 86afb6aecb0a8387ffa5dead1cc9808332f94310
SHA512 73218ebb2ad27d3402173054be997089549698d9112acb4b1c9fe044689a40ceda3df00304d336d2034e61c04832f52d971509240414838841d40f53fc0c3723
SSDEEP 96:LGvAOKAXAHPAF8AHnAHqUNaewVMw7MlvMncAlMNAA/:GWaoP3onoqBJVv7Yv7Qz0
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/LuaSocket/lua/socket/ftp.lua

SHA256 9ba5df91091c46f0ffe0a93ace577a4833c92cbec1742113d0a2da9e568f9a10
MD5 7309f4294ae4abb4f6ae657b2a98d488
SHA1 327d143e9f7a1835a58fdaf569a8f7a937fcf2c0
SHA512 a44d2603af63828e8a0b1fbc7455305c616e5bae4a351b429e7e94a6aa7e4d6425f69d57d6a44ba87ee5d29accfc01c1f3ff288652120ff8f08a66543d357895
SSDEEP 192:GsooRaLonJfMxBs6gZO2zMAcTcGZqxOU6iOeBqzw58GkJ1YtWKpUM7+C26a8RqN:GsRaLonJYszU2zncTHZ7U6iOeBRkfYtW
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/LuaSocket/lua/socket/http.lua

SHA256 04e6a7526ed1dc51f4d1f9b25b56f0c7826367ae3f2468a8622e359663ee5526
MD5 0eb1f0ffcb4dd17c22b20a3d7d6654db
SHA1 bae3d2be867f62c5f8d7e769248f053c50a1ab8d
SHA512 f9362cb8a84312aa3f12c93fa268f5950ebd575abb54f3778a5f3aa935e1c7685b7bf78e8a6a3eabe67094914ec90143ecdd384a4341f000fda41b686b486d97
SSDEEP 384:x7/thyc+f7zLajrZhVoaOt2yyVizJvcGwkD:F/thyc+f7zyoaOt2yqizJLvD
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/LuaSocket/lua/socket/smtp.lua

SHA256 04a2bcc6eb8be03803f7ea4c9aa32e6f70f97fdb6b3bc5ecc5e990cc9932ac90
MD5 29a883b6fb47f87609d0a5b1973aa45b
SHA1 6a36815a72d6d7e6c9ac987461e195d17ff979db
SHA512 c5c648445ea950d58affbacc8b299f26e80b55c4027195cdc055e7d2ee7e3593a59cb36fba8b8dbb8861603d5a03d9867065052b6a3bfd18590a8bd9dd96aac5
SSDEEP 192:hsbQbmId+aSnZwS/UjGf1MT+IsZDOD4GuuJQwDTaBrW:MH8jk1MTrsZDODhuuJIi
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/LuaSocket/lua/socket/tp.lua

SHA256 343afa62f69c7c140fbbf02b4ba2f7b2f711b6201bb6671c67a3744394084269
MD5 2cad406e591cade482c7f16f39c21481
SHA1 84a3ab88ff7a9102c2c6d21bdb6eede6862167a4
SHA512 ecc98991c25036b54f2bb71b3229e4bc8fb401e55db0e5f9c958c2a7b00b40fc9ae2d7e45002d4f2a03cec85535785c42ab6d20476fe095a76444d143493b145
MD5 SHA1 SHA512

NSIS installer

installer

$PLUGINSDIR/LuaSocket/lua/socket/url.lua

SHA256 269526c11dbb25b1b4b13eec4e7577e15de33ca18afa70a2be5f373b771bd1ab
MD5 8fb662c362da002b833793ea7794fdaf
SHA1 7afaf1ad22c95690cbb3f55226b617121efc20eb
SHA512 b0b766ac2b5cff879009ad9f74295f7ab0bf8b0628b8aece5597243e0fa96f4a85361728fd8a08eea7d2629dfc5e5d8b6aebca432075ad74c131ad3161a475c7
SSDEEP 192:zF/d/WjwnQdkUDv7wIECAAA4HaHjCRBxj6AqyQUh/T1htnSDiKbn:zfWjwXUDv7uCAx4HaD+Bxj6AqK/TTsiY
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/LuaSocket/mime/core.dll

IMPHASH fe8e49b45d854066bc51a41f61066908
SHA256 a1ffee9687ab4a23a78b3251888aff09e2896d76f8d16d713367b265f125188d
MD5 4a4845ba1666907f708c9c10a31ec227
SHA1 1ebf626adc84147e5114885ce779f92d6eb68f3a
SHA512 d009f5e2a2ecfbec5e5e788ade142d612846d0c99921774e4a11b060998dfb0680cf1e1a54604535d5560738093f9ae166866cb23eee5c7d9c4e5cc5a33e7464
SSDEEP 768:Hk1jtHTV0IuugoXCodH5LjciB9snJ1hTgZNno42L:HkhtHTeroXR3aL0toV
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

8072

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/LuaSocket/socket/core.dll

IMPHASH f7bb4b78321004f93f7e54fe50af1981
SHA256 bfe8445c38ee71240e856f85d79e94123d7179bf43688de0e2a14e32e6ef21b0
MD5 4bf7db111acfa7c28ad36606107b3322
SHA1 6f20b9f6663ce0c309a2ce60e718d64ffb6c75b3
SHA512 0a5e66a65b80e15d8198f2934c58227ae17680f0fbea9865b2f44af82a29c53d4f95cf9616b4dfd75202420eb73b7d962cf2c84fdad6ce26afe1eb4bb978d0b6
SSDEEP 768:4pOz0XSP1hSt5+5lKfZyDy3TygCk749NRAa1YwqJlfp8iB9jDEu/s5RPOothtlRp:wOws14t5CeTygmNRA0IVh05IoN3
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

18344

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

Sleep GetSystemTimeAsFileTime CloseHandle FlushFileBuffers ReadFile RtlUnwind SetStdHandle LCMapStringW LCMapStringA GetStringTypeW GetStringTypeA LoadLibraryA HeapReAlloc VirtualAlloc GetOEMCP GetACP GetCPInfo InitializeCriticalSection MultiByteToWideChar HeapAlloc LeaveCriticalSection EnterCriticalSection SetFilePointer InterlockedIncrement InterlockedDecrement WriteFile HeapFree VirtualFree HeapCreate HeapDestroy GetVersionExA GetEnvironmentVariableA GetEnvironmentStringsW GetEnvironmentStrings WideCharToMultiByte FreeEnvironmentStringsW FreeEnvironmentStringsA GetModuleFileNameA DeleteCriticalSection GetStartupInfoA GetFileType GetStdHandle SetHandleCount GetLastError TlsGetValue SetLastError TlsFree TlsAlloc TlsSetValue GetCurrentThreadId GetCurrentProcess TerminateProcess ExitProcess GetModuleHandleA GetProcAddress GetVersion GetCommandLineA

lua51

lua_pushlstring lua_newuserdata lua_call luaL_checknumber luaL_checkinteger luaL_openlib lua_settable lua_insert lua_pcall luaL_optlstring luaL_buffinit luaL_addlstring luaL_pushresult lua_pushvalue lua_replace lua_gettop luaL_checklstring lua_pushnil luaL_optnumber lua_isnumber lua_tonumber lua_pushnumber luaL_checkudata lua_rawget lua_setmetatable luaL_argerror lua_typename luaL_typerror lua_toboolean lua_getfield lua_pushboolean lua_getmetatable lua_gettable lua_type lua_isstring lua_error lua_touserdata lua_tolstring lua_pushfstring luaL_newmetatable lua_pushstring lua_createtable lua_rawset lua_pushcclosure lua_settop luaL_prepbuffer

ws2_32

getpeername ntohs htons htonl setsockopt gethostname inet_ntoa gethostbyname gethostbyaddr ioctlsocket recvfrom recv sendto send accept listen bind connect getsockopt socket shutdown closesocket select WSAGetLastError __WSAFDIsSet WSAStartup WSACleanup getsockname

$PLUGINSDIR/LuaXml_lib.dll

IMPHASH 0e4b7cfc82eb1d2e2840274f1659b95a
SHA256 90f1bb98e034fcf7bfddb8cb0a85b27a9c9ddb01b926b4e139e1e8fc53d41d09
MD5 7292b642bd958aeb7fd7cfd19e45b068
SHA1 19a800620d041634abae5b5d096cb0e87ce4c188
SHA512 bd758e0833454e0aa2af976ac94fde17c5401102c5991887cefbe8e337974381584c73e2d1e50e49263c55c3788e24dc7f8bd0b9d2a76a6cbe38e48dd9d6c44a
SSDEEP 192:YK/pDHjlL5Fv4k0CSigGpV8pVqVyoyhXnX1:N/L5FqCjpV8pVswXnX
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

Name

.text

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

48B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

512B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

208B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

84B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

512B

Virtual Size

440B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

$PLUGINSDIR/NotifyIcon.dll

IMPHASH e043e246d8abcbb9de2ad82c6e18cd88
SHA256 0e6d32baf37dee4506b9c1b86940388938cba8342c2e57479895ad298913b03c
MD5 2e8d024af3170a05a873f7941bf10a60
SHA1 2bb6e6c2fcf14b54891a8da9c36a36fe02784774
SHA512 03427fd13a2f2fc2a0b1c7131086587d1bfc5e46538ebba4ba697b62c096a9cc8d7744d0ba20d336307f14e31ba1c2f9e94b9cedab02fd5973fd3da9c21bb487
SSDEEP 96:DUeZEGm5SsYeJkGY/CHvRYe7+tN029WMJiCtMV3:qGmcsYqbYoaIsu8WM/23
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

1

Major OS version

5

Entry point

5940

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\Programming\GitHome\bm-core.git\25\Custom\NotifyIcon\Release\notifyicon.pdb

$PLUGINSDIR/System.dll

IMPHASH 4ec328f99bdd944fc98d8a5cf11f7a62
SHA256 91c47a9a54a3a8c359e89a8b4e133e6b7296586748ed3e8f4fe566abd6c81ddd
MD5 7e3c808299aa2c405dffa864471ddb7f
SHA1 b5de7804dd35ed7afd0c3b59d866f1a0749495e0
SHA512 599f61d5270227a68e5c4b8db41b5aa7bc17a4bbe91dd7336b410516fa6107f4f5bf0bbb3f6cc4b2e15b16bf9495fdc70832bab6262046cb136ad18f0c9b3738
SSDEEP 192:LO6dJA/ruAFEiUdWWE6hsD4YUdJfbub1awgMO:SKAFERdlxhTYUzqZaw
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

10425

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/UACInfo.dll

IMPHASH 0603f1e5036bb7e26cc82e7875b30a9b
SHA256 6d29dfd24695535b5973d8261d93373603ceaae03ab97662fe1b3dcc47d18226
MD5 d02a497be5f89c44827f142c4662f591
SHA1 38f83ccbac11de069df0e1cd79a6fdf7f006516c
SHA512 81c87f9d56a8ab7703a4effd3ba7b982b6765ecbdc0dbb1c595f549c4310a5db57dcdc38929eafe56983ea8cefc0b572c3faf82a4b62eb7c564b05550215f1c1
SSDEEP 48:qE1WcHwCp1FOE93DJ+X/WZnrAop1lMlUXLd+QLCSCs:ZhZzWop3VoQLCt
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

1

Major OS version

5

Entry point

4655

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\Programming\GitHome\master\Employers\Franco\TightRope-BundleManager\Custom\UacInfo\Release\UACInfo.pdb

$PLUGINSDIR/api_substitution.lua

SHA256 296fcf39cb388bbd0f10e0d0fdfa984968957afab0e933d431888bad67ee9c1d
MD5 7128d121fdc41e15742c7d3dbd53397a
SHA1 b7d7ac07b7e35a148c00ad849b0a613835e0d076
SHA512 ac93e08353b7812971124dcec0988458a8aaada2c96232141cab1a9129e61f7438e93d21d2e710033e258f1ce0a951aedc1d1b09ca84cabbc7c2a97d1749a92d
SSDEEP 192:Lgql+/SBow6yJXBkrWMAQMOKT5j1I777IWF:7pCyJXttFT8n
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/async_tracking.lua

SHA256 b584f368d822e2ac11c44897932f665a424aaa757d663efb8f289a5981ccb006
MD5 62fb7edb471cfdfe18069e2e7c6aa0cd
SHA1 4a0a3f8af71ac4dfc7d3dfccfb82647fb7665435
SHA512 f4528efa87ce8200025e93214f40675f6f04b509c2ea565018fa83f3a5eeb67df871483aebd7a6eff4d0ad807bec91b90655339a5dfed6483843bf07c4553860
MD5 SHA1 SHA512

NSIS installer

installer

$PLUGINSDIR/bit.dll

IMPHASH c386ea6b5416735e46724de400d1557d
SHA256 67328334d53e7c0c52c23ef5febeb1ab34d87ab7699868a9f547e5b0db4fdceb
MD5 0a29e1b270ccea61aba7d7cdd10e0388
SHA1 76bf03361bcaef475ffb864bc1903c9bcaac7b44
SHA512 d024407b0852155c225852e6dd1a5440241a16c4b54a408606318ad142381ebf51bc8db09a4d175369619aaac2224311914892d23f763f7b533a6b664b93cf7c
SSDEEP 192:Bm/JFJs3U0s5bIMb8WDPXRKbo9aJGSnTHGBCtZIDrIb/s9x:BwFJsEJx8WDvRKXJTnaAtQ8q
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

1

Major OS version

5

Entry point

8299

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/browserutils.dll

IMPHASH 34caecee8c0e203bd180194e023fa488
SHA256 c7f26842109ac41da6360ffddfe7d85ef33da07cac4ed27232010f6803ac3dbb
MD5 dd8a05024e825f75d3d151ea84bf414e
SHA1 a8d3fe4890acfa4efb24da5f1b99b3995a8dd5ab
SHA512 e9292d0be834c5a4bdfbd00273de7acb0939a051423fd6e6bafd73a9c07f9c7d6929ddc07faa8b3a1d4b79b7faeb2f1946ff2723e52a559556e19f53a4a747b3
SSDEEP 96:abbbkfq7ZetM6YU01/NCPLx2BdOE0R+gmva0mXOM19/ETkT2yGxwudk2suGMWaDc:8Z0tC11ojxv+Lmh2ywwu+lMWap6LgW
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

1

Major OS version

5

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\Programming\GitHome\luacom-browserutils\Release\browserutils.pdb

$PLUGINSDIR/bundleinstall.lua

SHA256 232a7f0dd58e1d9784a66db0c9c3869e7652ae780460621a99fead029e7bfd17
MD5 1440493ecffbb7301b43c1031c4c1f0b
SHA1 7413e298875ac248c3a426317ba84e875c29f5e2
SHA512 2cd9937b799047bdb4e238f70d1374caab7a714e77c322a10f6301994eb41e7f32dceeed1aa5e93d72608f9ec167255dbe049f70f11acbcc9028186b0526599b
SSDEEP 192:wPRXwtq5QCSvwJrXOCYI8LIdz0zSV2uEZSk4Mz6p51QC:ayZCMwRXxYI+IdQJXskygC
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/callbackproxy.lua

SHA256 a5d428fb7e280ec8b1c82cb68471d209c4c5acdca6b17a6b4fcb35e273026f91
MD5 644f00143c385e63b224a833f0de83e0
SHA1 b7cafe34a1afef0b0ddd1cc50f5fbdb648dd18f0
SHA512 1055d9e2283e4ba9c8964889888caa2a7af749a87d416b794713885fb796a069f08042a94dea005ba0b67bf7245d85d82de15a62834cda99d1c112330ec76928
SSDEEP 192:JqObvH0vCh35Pw+P6HAPDJ9RP2GsDFJH8hZRAJQ:JVPpjPBU0d
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/customNsWeb.dll

IMPHASH c406b41faef9d450d598369f4d24e810
SHA256 98be7a32b95403947d1200d37f63dbada678ed9c64e7b9fb54e45cf214d857c6
MD5 e6f8bce5bd3b59c5b1f3225d8f8d3b14
SHA1 3af65452a6ffa667b186bbdd14e5746d4d6359e9
SHA512 73e8e77206dd35c0ac18030a013673a21fea6da7b6fc459347f1eddbfa6e657bb044b7b58676871fc24ef95ce5fad2859eb4423c05d0f1ab47c24c8c97ae1940
SSDEEP 192:qoxPMQL58fxUZ15Svm2fd5yEsjC9l7Gh3llkD/7tjuXJtt/fvrViEDLkjn01xcP7:quL5U0HSvFfex3fFJ/Vijjn0H09
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

1

Major OS version

5

Entry point

11176

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\Programming\GitHome\bm-core-main.git\25\Custom\Nsweb\Release\nsWeb.pdb

$PLUGINSDIR/data_injection.lua

SHA256 c827505e046461768dd3dbdb1b2e88f16020076c8dd3e50cfeb7869f0a9411b8
MD5 bbaef7d55ddabdba51f8d2264a4dfa13
SHA1 b974491164368b918d52e0610ac25276e33241ef
SHA512 c8fb52a5bb24311b9b2784d17f4e03b9759144356e9b099c86d1c674e31d6b2abce65416bbdc78fa551673e3aa8f16ec3c6d27d22227801bae93b2d0cb95d3e6
SSDEEP 96:T1KyDNALNclJftTzveHIDGb+GDQFkcHfzGlJp9/nFZfggBnQV+28VeeINDhVwUXf:TpeHIDGb6FkcHqzp9/nFZDqUIrVPXOvK
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/definitions.lua

SHA256 78b8aeecb2f639a5ca46de1bd8d39f8647c3015c91448f40c7b0ba6c3739b737
MD5 0566a6c7945ae4b1a9a363b625768d02
SHA1 854903aaf63860b2d836db889d0448bc43e8b0bb
SHA512 1714df0fe9bb5849cabbb511807b3995c9d798c544b5538f40bb400b1e7aa1c320bfd9a441d0462d8d11f99384525949221e6d8e3794f54071253401efd07b7b
SSDEEP 192:N7XL/fHcdes/5Uhs5f0P4WYbBQjCFmCgs8mCB5gBGkSfcKWvZ:VLnkX/LmSfX8f6
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/downloads.lua

SHA256 0ed1939e72fa1e6e24e5c3b8dd1ee8604b4572711d1274fa16dd0d3a46d6b848
MD5 d4913b3dfc6136467ca1367e5464f32f
SHA1 f186c17758c4b95770f2bc4004e3f672a47d12bf
SHA512 c0e40fda1bf6833a039dbb4046439b25321789d0395a07832f10b3ebe5051d6905a506f1922f0f3ce54a78795e495fe2c08899f2254264035e7fe236cce3f4f3
SSDEEP 384:fAAnGklLOq4rVIWlQEneaNdxT0ZpdGQyxAmbzYFLJ0x+UNNmI2J4o9U7+aW:4AnGkdOq4JIWlRneaNZF2SNmI2J4o9U+
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/eagerinstall.lua

SHA256 bc4ba2f75c31335e86466580dc8df280d6caa174ebcc58f159a126c04d72a59c
MD5 c5c867c5faf86e3141f876e4305e16c4
SHA1 e76c8341f0b0dff304250d951bd50ed214a41141
SHA512 616be47c17ac5179eca4097006facaa8e416fa8ec40e7a0fe2124037093fedd6a43076dff06cf9cda0be1b97327eb44c226cb38419c5e9950c9b0063ab3d7f85
SSDEEP 96:+35KStfQswOUYLzvg30K6I8/uvfQOpOL6c1G//aq:URQswOPng3J6I5QOHqq
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/env.lua

SHA256 96662619ce1d6e2cb75849e58bb5fb44ca6af21224e35a0f57b8c0a4cc942fd1
MD5 99cab05c958aefd811db5f809e0f4a5a
SHA1 95ae31957809c5f3058f5f767110cd7dab16cf8a
SHA512 f577cfe59479833a367954a9e79ca46d7dea8e1a4d07b974130ff98b2b03fc00c8959f9b43da1b5941e610b3baa303905fcfb90ebb4352f3b994d1a5fdae97e8
MD5 SHA1 SHA512

NSIS installer

installer

$PLUGINSDIR/extension.tlb

SHA256 cb070e06953fa96fda807baa9c3da678408985a72f8d0d7e9687c957f36c824d
MD5 ff9db2ce4b4258e5ee6affb6a817e098
SHA1 a8b5ab3d9871978c634c2bc08ea76c86f8004783
SHA512 9208704da856e89a705111f5ad2870be635bb6fdb8d9fa4f653cc15605d5550c383514a423f46e814e33053f0c6899062a4575c122ea3bbd06475eed8a294b9a
MD5 SHA1 SHA512

NSIS installer

installer

$PLUGINSDIR/ffi.dll

IMPHASH 49243da65777aa40d71712f25e529629
SHA256 b2e3b0e8d6c3fd23dc7d94fccc5151f07bf2e59271431268a58b5e99074b825b
MD5 e390287499549de31da007f7f0ae4d10
SHA1 a8c6caebb151d60ea56f4c96a7194c0e5f076692
SHA512 6c393bca7ea74747917e65f2e5e4822f034ef60defa5f3232b8f9a731ac8e00cffee3d44ab817f3986739b685506e0027647de50b3534e3436ca569d0c25b474
SSDEEP 3072:Q9isvBq7UyntCbvZg9fZTbpKSBg7GE5OtCWnfs25DuUXOJxPM5:Q9fB2obvOZTtBBg7GBCWnS6
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

1

Major OS version

5

Entry point

120497

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\Programming\GitHome\support-projects\luaffi\ffi.pdb

lua51

lua_next lua_setfenv lua_newuserdata lua_getmetatable lua_tolstring lua_isstring lua_isuserdata luaL_checkstack lua_insert lua_rawequal lua_error luaL_pushresult luaL_prepbuffer luaL_addstring lua_typename luaL_addvalue lua_pushfstring luaL_buffinit lua_pushlightuserdata lua_topointer lua_tonumber lua_toboolean lua_tointeger lua_replace lua_pcall luaL_checktype luaL_argerror lua_gettable lua_pushstring luaL_checkinteger luaL_checklstring lua_pushinteger lua_pushvfstring lua_concat lua_isnumber lua_rawget lua_setfield lua_setmetatable lua_type lua_pushvalue luaL_ref lua_rawseti lua_getfenv luaL_unref lua_createtable lua_pushlstring lua_pushcclosure lua_gettop lua_rawset lua_pushboolean lua_pushnil lua_remove lua_getfield lua_tocfunction lua_objlen lua_rawgeti lua_touserdata lua_settop luaL_error lua_pushnumber lua_call luaL_checknumber

msvcrt

_mbsdec _ismbblead _XcptFilter _initterm _amsg_exit calloc isdigit isspace mbtowc __mb_cur_max isleadbyte isxdigit localeconv _unlock _iob _lock _snprintf _itoa wctomb ferror iswctype wcstombs __dllonexit _onexit __badioinfo __pioinfo _read _fileno _lseeki64 _write _isatty ungetc strchr strtol strtoul malloc _fmode memchr _CIpow memcpy sprintf _assert memmove memset free realloc _pwctype __lc_collate_cp _wcsupr _wcslwr _strupr _strlwr _ecvt _gcvt _mbsupr _errno _mbslwr __CxxFrameHandler exit

kernel32

GetLastError SetLastError GetProcAddress VirtualAlloc FlushInstructionCache GetCurrentProcess VirtualFree LoadLibraryA GetModuleHandleExA GetModuleHandleA GetSystemInfo OutputDebugStringA RtlUnwind InterlockedExchange Sleep InterlockedCompareExchange TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter GetVersion QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime VirtualProtect

$PLUGINSDIR/json.lua

SHA256 758af93f7a58288b9902a9a3aed91e7245a8928ca1618b519c50b314a25df055
MD5 58240f9bd033c124e84c5014c65d215a
SHA1 ae7cbbb47d7f7fdb26d34e5b350c8fbe788c6001
SHA512 5fc84d3bf02025ed80a920bd78fd0d26fbdf06d7b735a1153a98ae2b07eb46501e1bc70790a049f9a26134f7987cda11afd7449f66c0784256aed35f4e746b85
SSDEEP 384:KLCAxQF4dhpVTijbgrgCqtSjgykxPEvyfHGYU51BAKfac6Lc6sdHS:sClCdhrTij3CqtSjzkh6YU51BAKfac6t
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/lua51.dll

IMPHASH cd782bf2f23dfa520ca28ca40acf03a3
SHA256 85db1e17c0fad08d9732405e781cda1e1613ace31c540a6e559cd8777df2c62c
MD5 fceee0026aafd237afdb4aea4ecd3557
SHA1 3e10da57143599eae915a688178abada78b8d82b
SHA512 9c974918c8afec8d8a58fc1239f269544b9dfe867459bb61901462f56f71a3dd574d3b2263dd14b99ff8a23c8096c408be3620785fd4476b975a43b999f559f2
SSDEEP 3072:pShK8pIXDBfpna71T4wI78O+g64qqXQdDSbwHL97F4LvVTs/j3Bp:/8pmukwIh64DXsDS49P3Bp
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

1

Major OS version

5

Entry point

116303

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\Programming\GitHome\support-projects\lua-5.1.4\src\Release\lua51.pdb

msvcrt

abs pow floor fgets exit longjmp _setjmp3 _popen tmpfile clearerr fscanf fwrite ftell fseek setvbuf fflush _pclose iscntrl isalnum isalpha isdigit localeconv fabs sin sinh cos cosh tan tanh asin acos atan atan2 ceil fmod modf sqrt log log10 exp frexp ldexp rand srand _HUGE strrchr getenv strtod sprintf strncat strcspn strcat strcpy strncpy system remove rename strtoul clock strftime localtime gmtime time mktime difftime setlocale memcmp tolower toupper strpbrk isxdigit isupper ispunct islower memchr strcoll __CxxFrameHandler _mbslwr _mbsupr _gcvt _ecvt _strlwr _strupr _wcslwr _wcsupr __lc_collate_cp _pwctype _mbsdec _ismbblead memset memmove _XcptFilter malloc _initterm _amsg_exit calloc mbtowc __mb_cur_max isleadbyte _unlock _lock _snprintf _itoa wctomb iswctype wcstombs __dllonexit _onexit __badioinfo __pioinfo _read _fileno _lseeki64 _write _isatty isspace fputs fprintf free realloc _errno strerror feof fread _iob fopen getc freopen ungetc ferror fclose memcpy strchr strstr strcmp tmpnam strlen

kernel32

GetCurrentProcessId GetCurrentThreadId GetTickCount QueryPerformanceCounter GetVersion SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess TerminateProcess InterlockedCompareExchange Sleep InterlockedExchange RtlUnwind OutputDebugStringA GetModuleFileNameA FreeLibrary GetProcAddress GetLastError FormatMessageA LoadLibraryA GetSystemTimeAsFileTime

luaL_addlstring luaL_addstring luaL_addvalue luaL_argerror luaL_buffinit luaL_callmeta luaL_checkany luaL_checkinteger luaL_checklstring luaL_checknumber luaL_checkoption luaL_checkstack luaL_checktype luaL_checkudata luaL_error luaL_findtable luaL_getmetafield luaL_gsub luaL_loadbuffer luaL_loadfile luaL_loadstring luaL_newmetatable luaL_newstate luaL_openlib luaL_openlibs luaL_optinteger luaL_optlstring luaL_optnumber luaL_prepbuffer luaL_pushresult luaL_ref luaL_register luaL_typerror luaL_unref luaL_where lua_atpanic lua_call lua_checkstack lua_close lua_concat lua_cpcall lua_createtable lua_dump lua_equal lua_error lua_gc lua_getallocf lua_getfenv lua_getfield lua_gethook lua_gethookcount lua_gethookmask lua_getinfo lua_getlocal lua_getmetatable lua_getstack lua_gettable lua_gettop lua_getupvalue lua_insert lua_iscfunction lua_isnumber lua_isstring lua_isuserdata lua_lessthan lua_load lua_newstate lua_newthread lua_newuserdata lua_next lua_objlen lua_pcall lua_pushboolean lua_pushcclosure lua_pushfstring lua_pushinteger lua_pushlightuserdata lua_pushlstring lua_pushnil lua_pushnumber lua_pushstring lua_pushthread lua_pushvalue lua_pushvfstring lua_rawequal lua_rawget lua_rawgeti lua_rawset lua_rawseti lua_remove lua_replace lua_resume lua_setallocf lua_setfenv lua_setfield lua_sethook lua_setlevel lua_setlocal lua_setmetatable lua_settable lua_settop lua_setupvalue lua_status lua_toboolean lua_tocfunction lua_tointeger lua_tolstring lua_tonumber lua_topointer lua_tothread lua_touserdata lua_type lua_typename lua_xmove lua_yield luaopen_base luaopen_debug luaopen_io luaopen_math luaopen_os luaopen_package luaopen_string luaopen_table

Name

.textbss

Size

Virtual Size

107KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.text

Size

224KB

Virtual Size

223KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

18KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

436B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

$PLUGINSDIR/luacom.dll

IMPHASH 5f56694ee532c8969e60878f914fcebd
SHA256 8cb562bb4217a3080b458d203c078b679867766b94f1585852dd893b690d8c36
MD5 b991f57d815ca821cdb42d2792db366f
SHA1 36fc099265422cabe65ef2774d47aafa57760a4c
SHA512 344e9ce1a7807da0a87b289ad2d1eeae46f15db72ce5650a326ac5539d8bddacd3c9f292f6835eab16e9da750f04ccf3e542b304aae2c5a41a039848a56b4c58
SSDEEP 3072:Dr12K3g5R9ciCo/yo4/n6ykPKBwnL8IAvdymogyqcvpIoX:DmPCoqo4/PirL8IAvdymxyqcvpIc
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

83703

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

GetLastError FormatMessageA WideCharToMultiByte IsBadStringPtrA GetCurrentDirectoryA MultiByteToWideChar lstrlenW lstrcpyW IsBadWritePtr DebugBreak GetModuleFileNameA LocalFree FatalAppExitA

user32

GetActiveWindow MessageBoxA wsprintfA CreateWindowExA TranslateMessage DefWindowProcA DispatchMessageA WinHelpA GetMessageA RegisterClassA CallWindowProcA GetWindowLongA GetClientRect ShowWindow IsWindowVisible EqualRect OffsetRect SetWindowRgn SetFocus GetWindowRect MapWindowPoints SetWindowPos IntersectRect

gdi32

DeleteObject SetViewportOrgEx SetWindowOrgEx SetViewportExtEx SetWindowExtEx SetMapMode CreateRectRgnIndirect

advapi32

RegQueryValueExA RegCloseKey RegOpenKeyExA RegEnumKeyExA RegQueryValueA RegSetValueExA RegCreateKeyExA

ole32

StringFromCLSID CLSIDFromProgID ProgIDFromCLSID CLSIDFromString CoCreateInstance MkParseDisplayName CreateBindCtx CoRegisterClassObject OleInitialize OleUninitialize CreateOleAdviseHolder OleRegGetUserType CoLockObjectExternal StringFromIID CoTaskMemAlloc CoTaskMemFree CoRevokeClassObject

oleaut32

SysAllocString LoadRegTypeLi DispGetIDsOfNames SafeArrayGetDim SafeArrayCreateVector SafeArrayAccessData SafeArrayUnaccessData SafeArrayCreate SafeArrayDestroy SysFreeString GetActiveObject LoadTypeLibEx UnRegisterTypeLi LHashValOfNameSys VariantClear VariantInit SysStringLen VariantTimeToSystemTime VariantChangeType VariantCopyInd SystemTimeToVariantTime VariantCopy SafeArrayPutElement SafeArrayGetElement

shlwapi

SHDeleteKeyA

lua51

lua_gettable lua_pushvalue lua_pushnumber luaL_argerror luaL_ref luaL_optlstring luaL_checklstring luaL_checknumber lua_getfield lua_rawset lua_rawget lua_remove lua_touserdata luaL_checktype lua_call lua_insert lua_objlen lua_pushlstring lua_rawgeti lua_topointer lua_isuserdata lua_close luaL_openlib lua_error lua_pcall lua_setmetatable lua_newuserdata lua_equal lua_getmetatable lua_pushlightuserdata lua_pushboolean lua_checkstack lua_rawseti luaL_loadfile luaopen_package luaopen_table luaopen_string luaopen_io luaopen_math luaopen_base luaL_newstate lua_setfield lua_createtable lua_pushstring lua_settable lua_pushcclosure lua_pushnil lua_next lua_typename lua_settop lua_gettop lua_type lua_tonumber lua_tolstring lua_toboolean luaL_unref

msvcrt

strncmp _stricmp ??2@YAPAXI@Z _ftol malloc mbstowcs wcslen wcstombs strncpy _purecall fclose fflush vfprintf fprintf _spawnlp sscanf wprintf __RTDynamicCast ??1type_info@@UAE@XZ __dllonexit _onexit _initterm _adjust_fdiv fopen _CxxThrowException __CxxFrameHandler free sprintf strncat printf ??3@YAXPAX@Z

$PLUGINSDIR/luaxml.lua

SHA256 6345b8a47f378416cbd31e543410fa5b03c914219ded2a51c2d3c858f281d6cd
MD5 a34eed4e795d1a7f8f26af91994b2785
SHA1 d950dbd4147b86e246fc19afbc12592aa0ee55b6
SHA512 0d3d92c6b5053469a2edfff0050672ff847135e5d1d08fb7b353df9690f8edcc32f443733bd0d70061f572e3f220769a64a0820918e4b51cf99d8bed30b4f3e1
MD5 SHA1 SHA512

NSIS installer

installer

$PLUGINSDIR/net_utils.lua

SHA256 a4ec33d1a368624881a4f08fd46b61c91cfe9af0597f774137630e83f0df92b0
MD5 81964864a30ded206b3bd86f14c8cd1a
SHA1 05f18cf6642e33dddd6f6353eca13e8d5ad72948
SHA512 e9ac8a42beef200b1439fe2a43c6b7f277d5b38963864f614f258dc837accd2eaed7d3da36b82f78c2a7673b4193f84f285212a0ee185c94b095481a8b95c6c6
SSDEEP 96:/TssRDJBROlxl0lofIqqWtihWKVDWVihWqbtWqb+pZx9M+5W:rssRlBROlxlnIqqM2xs2vWqb+/xH5W
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/notifyicon.lua

SHA256 dfbc2281b679dc6b1794b9c6894115ddc50c9c048d3ce52aa9542e4c16f7e761
MD5 554eed1eae41d71196193b9775f0308c
SHA1 17355ae018a52762a8e132a23149aa6881ece646
SHA512 0e2699ab74f65b36494d24166878e6efb19b32bd0a7e8565b545655370856174b091d7993a1ccb9198c3a6c62d55a7c68ed541bfd9a3857a571df18d18b04f73
MD5 SHA1 SHA512

NSIS installer

installer

$PLUGINSDIR/nsDialogs.dll

IMPHASH 90eea478feb0667dcdd7bccb241e74b3
SHA256 8cb6563ff2b4b11641750770aa0de581ccca05a9e09eb53d0f56be31815d086b
MD5 66dfb4acb0f107c53e161fa0057f82a1
SHA1 2345d57a97260da9ae6e7d5c06d4cd5d625c1389
SHA512 7d9e44ef39d14d424945debf88762fb181222326bca1f7dcf9147c9cf6b58dcdabe9f8d1ed13a9ec10cdf3cb60b70e5f99350405836e60592440a136c1b1a4a6
SSDEEP 192:xnAR+lPi8VpAweqU3Mh/8C3Km3P+QcmxSd:xn9lPiezWG8C6m/VPxS
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

1

Major OS version

5

Entry point

7395

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/nsis7z.dll

IMPHASH 4c04c20a976733bf789fead96eb58701
SHA256 cb195d62df55a939e238063c13c792237501f2297386c11229b1558eea9ddfbb
MD5 692479f7c07a64a6a632148e382f0e22
SHA1 cd14982a8e048ae98860db52f042850b63f9f40f
SHA512 7ed81c13ea6d3b5fbed778ff0f2b3361399826296711ec7dc019432ecd79a72e7d6e78d5fab144600ec55b46a56c11ff99f0860855522750883d7693ca885809
SSDEEP 3072:shuC5kBdKlB5Rkg0rQHWjfxTKYaE51GiCySqEMRRQRkM8CQme+5xuPFK:Qq7WHIrLjfxdXREJ/8CgK
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

5

Entry point

93148

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

GetLastError WideCharToMultiByte MultiByteToWideChar LoadLibraryA AreFileApisANSI GetModuleFileNameA SetLastError CreateFileW SetFileTime CloseHandle SetFileAttributesA RemoveDirectoryA MoveFileA SetFileAttributesW RemoveDirectoryW MoveFileW CreateDirectoryA CreateDirectoryW DeleteFileA DeleteFileW GetFullPathNameA lstrlenA GetFullPathNameW FindClose FindFirstFileA FindFirstFileW CreateFileA GetFileSize SetFilePointer ReadFile WriteFile SetEndOfFile GetProcAddress GetCurrentProcess GetSystemInfo GetStdHandle EnterCriticalSection LeaveCriticalSection WaitForMultipleObjects DeleteCriticalSection VirtualFree VirtualAlloc WaitForSingleObject SetEvent InitializeCriticalSection CreateEventA ResetEvent SetFileApisToOEM GetVersionExA GlobalFree lstrcpyA lstrcpynA GlobalAlloc RaiseException LCMapStringW LCMapStringA GetStringTypeW GetStringTypeA GetLocaleInfoA WriteConsoleW HeapAlloc HeapFree GetSystemTimeAsFileTime ExitThread GetCurrentThreadId CreateThread GetCommandLineA HeapReAlloc HeapCreate HeapDestroy GetModuleHandleW Sleep ExitProcess TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement SetHandleCount GetFileType GetStartupInfoA HeapSize TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind GetConsoleCP GetConsoleMode FlushFileBuffers FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage SetStdHandle WriteConsoleA GetConsoleOutputCP VirtualQuery

user32

GetDlgItem FindWindowExA SetWindowTextA wsprintfA CharUpperW CharUpperA SendMessageA

oleaut32

VariantCopy VariantClear SysAllocString

$PLUGINSDIR/nsisunz.dll

IMPHASH 0f92772da9c737d2bac38919e9863980
SHA256 6e87ecb7f62039fbb6e7676422d1a5e75a32b90dde6865dcb68ee658ba8df61d
MD5 5f13dbc378792f23e598079fc1e4422b
SHA1 5813c05802f15930aa860b8363af2b58426c8adf
SHA512 9270635a5294482f49e0292e26d45dd103b85fe27dc163d44531b095c5f9dbde6b904adaf1a888ba3c112a094380394713c796f5195b2566a20f00b42b6578e5
SSDEEP 384:KExN66Yf2xL5Q4IsjuUjUZfqRDpImexpf88FwHxXvjX3hwlHt6oIfESxSHoOO8n9:O2x64GcVpI3xC8ynToIf1SIOhW4
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

17930

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/packaged_app.lua

SHA256 397c6f7231c03607ebd861458e174ec2ad04b404b97d2bed347fbfc1970613df
MD5 115dab4488c349e5aeaa4baad8725094
SHA1 8529745ebc4c2885449769d741bbc5fd01dde274
SHA512 a28db272c84e9060f29fa24988cde2319c12b39313e3b8a29ef69e6946f4e3c86f2283592d84d612b51fac29671a23bf50241744af843218608c60a0b37438b3
SSDEEP 192:fiRJnIqUhrV8a87CXRCOpmrnwRHD1764uH10y2ulLD/KpEEoIlgOubJwY6AfcKZV:fiRNUhrV8Qxp4nwx56nHq7ulLD/KpEES
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/processfreefile.lua

SHA256 b68692757626d6825261d199cb83e89d0d14aa14e5bf622a2be3ce567ed7170a
MD5 26fec0e36840b6065192c6704da7c957
SHA1 bffd1a9854c17cf502136574556f97f1a6a0ef90
SHA512 55ad2eb11ac0ea56e40e6b291b8d841613e6f06fe4e9f74891f6e3e172fb42aac94ca53734e0fa072361f8daf0eb12e1a6c386e9f7d61f45a3acfe0ee376737e
SSDEEP 192:dx2nRoVWVipfGa0HK8el2UTrzxElQs/PXli2WvqwjjdW46EyQmHwQLnJrNRrBZ6O:dx2RouiRLKbelTXWlQs/43WBj
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/sandbox.lua

SHA256 758f4621a61ab6b19cc2cb63f9be1091f59a9338651fdbdda084c4dc727d969f
MD5 00afc9fd78721f864d23510f9201e9aa
SHA1 cb0ff012bd5a0a97be420cff3dfd7de5a4daf476
SHA512 a5cf307708be4abadd386f4e37f12edbd3c0d3e4f1f838e4bf8835979ceabcb919833c0cd74b5894f17484dba104caf5b90de437e3d52ddfd09266f721ebb446
SSDEEP 192:ewP5mlLjQLgKoAqRyoDtZ0o41E8Qyb2H8dP8V2KwEsW:3BCLULXNpoDtZ0ocE8Q+dPLW
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/scheduler.lua

SHA256 6b18fabfd031c6fd3931943e6007b5d46731e09b82641f91f920ded970d578cd
MD5 0734eda02fb53cfb890dca1ccf0901ed
SHA1 065b8ecf9049ed96bb1bc648fdbab869a5a309f2
SHA512 86cec2005872fa8553b6784ed74cbb68a6b8aaeb90c084a0f84cc6504a14a7f21d6a7c0b92c3e6b08c84a6c442968f5bb951400dc8402a1588710aa10080ea0b
SSDEEP 192:n2vH0vz+MvA3igrRpf/V2EVWT/9wIWlU95szoU9FGsExjmhATLDzFmDy:nfTOzfcV9wQbYoU9FpCjzDzFN
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/service_registry.lua

SHA256 b45c7ca86fbaf00c748fb0f6453f143979f385345fa2ef28e84d0b4250acd6ae
MD5 f36a50dd17c532f8c8810a63f53597ca
SHA1 4639843dde884e58c0fe351056af37894f181c74
SHA512 422f633767076aa12785e3c7fe6a51d61ac5bc87122350c72ef8b49d7894b284ba185420376230c4d66812b8ad416e6276be3940ff376df16571407579aa83f8
MD5 SHA1 SHA512

NSIS installer

installer

$PLUGINSDIR/skin/res/common.css

SHA256 9a110c6977aea3ddb3fc38e59efbd89f0f13e086ca0bc61f4de86c2015a741bb
MD5 0fed415d7de81f84954bd4e264e61e4c
SHA1 a3d6f75a5ca50b3800593fbcd1d667db31e98698
SHA512 15fcf206ce21cdef8177b6f4e254dca38b39bc3eab0ba43b342f7f7c70529f387ac8d4984f673146cbc5ca73392563c820f98aede01d507a7e3a9241a15088a6
MD5 SHA1 SHA512

NSIS installer

installer

$PLUGINSDIR/skin/res/common.js

SHA256 4ebd9098af89ecd898db81109775f84980bf447cd05e4f7bcbef658f77962965
MD5 a0a18f844697492a0b73c0cc4226e615
SHA1 fb7de45904b9943392d9da1ff5389a2c1004fe28
SHA512 098abd316f88d1c6fea4cd8bce2a1dbd02174afc378d9744668a69abb752a82f1d0f329ecdffff1e74df18f4f6ff6cd8307f3677da2510bd8e18388be5d38875
SSDEEP 1536:fhU8NOOk9q7FCTLBWmp8szXkpjL04YZ3cdbSDd:fh/OOA/sLbqd
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/skin/res/jquery.js

SHA256 69a78538c3b8b841bd898d85140986bd87d41f7771c7cb9d45909ce00183783e
MD5 7021191c5dd70e95a9c026be6b9c05d5
SHA1 32cd16fd318795d8aee5dc3bda30afb705a6679d
SHA512 0e6e0e057dc726d9833dad245a5cb17caaf799c0aa8ad1f9b21baedc41dcc126d624b1430e32645ee3f308105836fa7879cc1bb71da3c1813aab40a795785dff
SSDEEP 3072:KgQWO242xfq+50dFhPGXVKDhA4kO9J3A7zUMpZXwFh++l7XKDtxp/Lq8LakxOAd9:HhomMFhPMKDqO9JQ7zPZgFh++Ytxp/LP
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/skin/res/knockout.js

SHA256 530ee1969d7a2416322297531281ab88e04e30b6bdd9ad94994981a5235d005f
MD5 588b4e47fe62b833156fb741e3f5d493
SHA1 fee63926501e8443189f5c831ca5bc50e4fd2518
SHA512 64c367777065f34dbd7cdffe51ef8c1d898172e64fd99b98638f7f6d28a3e19b29292baeec97cbcb79cc0f846ee333f4fe33de6d6c8c6e1d392c8ace5b7654c3
SSDEEP 1536:2GNiPh8PxL2B2aiNJjVw6lDWgKmuhKB3JpXntuiVhulpsbgnPU0V/EHTSZTxr7rW:pLk0JjVwCW09tntuH/0OjQesP7pBKq
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/survey_environment.lua

SHA256 8aa71ea11bf74238ed0eabe5127635bcb2c04abf32349e1ce8b1060166961626
MD5 11f2994a7c2f65b32eed4fb830671c5b
SHA1 15886d6a2e78152694c24d2d3f3c8708eb444646
SHA512 d004e071dcf15a21ad7de95a64b4458a893661ca4e250a04f4c740283a26b5f4da9d629ed1dc42b5d26af66498c1a163df444826cf2c719f5663cdf467eb4459
SSDEEP 192:BnNE205Gm/tsSSC+WBiLEiVHPNkKOJX0WQdiN4xhuemhf/S/ii235gWW7:Bn905pVZR+qiLEikX0ldU4xhuemS/iif
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/uistate.lua

SHA256 751fdd6121ce42630ad1a3b1283f470273d285cd8765eb3c807499893bbb9585
MD5 df983611fa52af14769e3f0df38140e0
SHA1 5546aa8bb5466acd54d93b599f74335ad0c94a5f
SHA512 cf8f5de5a592b4b2d9d4ddcf24954e57cb124bad74fdca6c353e0929ab9616bc4f291c6eb669a61b26292b7f2f89741c6dbe18794a0a3d222f547a45f3ab1659
MD5 SHA1 SHA512

NSIS installer

installer

$PLUGINSDIR/un.package.exe

IMPHASH 35b698a6fd5038f719a27b089cb1f48e
SHA256 a4da8c6f38d7e573ffbf04e753ea4cb0fa6a174df054aff57edcb73e3e252fce
MD5 5694e7daf20c47c8d5e73d4a838c2ee6
SHA1 43814f29584ff23c2ca6f78aad733dde536afd56
SHA512 ccbb140a677356e1b34e65cb7a25c36145c40db37f538ed821664c676c1378efaf82fdd4b762dd54cb93b00c23e267fc717d8e0730d06924b5226b44cd4c03bc
MD5 SHA1 SHA512

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

5

Entry point

5472

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_ISOLATION IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Z:\Programming\GitHome\master\Employers\Franco\TightRope-BundleManager\Custom\Scramble\Release\Scramble.pdb

$PLUGINSDIR/utils.lua

SHA256 9a4932936f2e710a94e5551df909d417a0138875052865dc241aa5498c01f64e
MD5 837247890cdfefeb267d21e902241330
SHA1 29cc1c10d8a175b3650a722c4d95ffdc0d6b272f
SHA512 861512c1d0273e2fbe09a039dc2594650d4c8d1d64fe22c941625f0cb9766502d715831b03f13d99ef6d68ad781a38309de15d402207a3f6198e1125fa0cd181
SSDEEP 768:CY+ab+5B53+NimEQUTVxFNBqve4zYP4Pu:r+XrBqve9
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/version.dll

SHA256 3eba921ef649b71f98d9378dee8105b38d2464c9ccde37a694e4a0cd77d22a75
MD5 ebc5bb904cdac1c67ada3fa733229966
SHA1 3c6abfa0ddef7f3289f38326077a5041389b15d2
SHA512 fa71afcc166093fbd076a84f10d055f5a686618711d053ab60d8bd060e78cb2fdc15fa35f363822c9913413251c718d01ddd6432ab128816d98f9aabf5612c9f
SSDEEP 96:nPtMckE1e91BopVyXwUhn3f1I0vOKeoqO4d8QvS9:n1MMuOUhdI0c04yV9
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

ACProtect 1.3x - 1.4x DLL software

Detects file using ACProtect software.
UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

44528

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

out.upx

SHA256 12a0c008b207d7e546e8f7a4030b25a999d745dc15a174b4d305763a4df6ab12
MD5 aa05c546875238a55566cc34e4ab55be
SHA1 8a8e0b2343036a9ed24bb8480edd4c262808e2e4
SHA512 52d1f35ae2e810f6c4ddb1f0b4a0889c658d1bdac33cf69b6700a1d4f94d9b040900b52513fc66916094198f003ef94be299e115346b28778fa545b31a6cdad7
SSDEEP 192:nro24pvm8S8dNr0Q+7y5cdFx8Jf/DHFKSr9C:SPnV1Z55JHDHrk
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

9088

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

512B

Virtual Size

144B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

1KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

512B

Virtual Size

454B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

376B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1024B

Virtual Size

536B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

512B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

$PLUGINSDIR/vm_details.lua

SHA256 c79a8736232d48dad41ddd049e83e371b76561b0d7d7446a08762496873d8b13
MD5 da19e9d4592e74550afde019c3003780
SHA1 ce0378688854334172b8d62c8b91a48104d1a8cf
SHA512 ad9b44c049d57d3bedc3c93f8b4ad4a89b9aaf76cd8f01414dc724282636c47702687332cb667bec7828d99befc0f3e8cd7aa7c956a9061b64c02e9be9160d66
MD5 SHA1 SHA512

NSIS installer

installer

$PLUGINSDIR/win32_constants.lua

SHA256 88d8f2af1af96fbbe7c173d7fbced53e5286901a129ec79d9cf4e163b1f14b49
MD5 95d0c812c01ae3d23eb3dbd929c96cba
SHA1 2ee5d0589d6581165f449e6ee58a6660ae07a921
SHA512 04ca157f9ef475e363ae29bace51a2847a102abfa376766d00a7265eb7cb634bde0530990d6a0fa172748370395facab563c54ff5050e9d02bd6c1225340e774
MD5 SHA1 SHA512

NSIS installer

installer

$PLUGINSDIR/wininet/compat.lua

SHA256 902fc7d3982d9386d60c4c304574381563ee28e73de993e28cde7f90499ca1cb
MD5 77c50916f90b43c09e38e07b94ce4356
SHA1 2407be8f458d1aa2f1ffa45b21f782c44e68331f
SHA512 039a24175948dfbd8c23b070d3aeb7bd93186a6093cbbe760981f1ef87bf7f97ed1f6bf5c6a7d2b9b12834e6776da03c40a03f7f43a9d7803a7f459a8a023ccb
MD5 SHA1 SHA512

NSIS installer

installer

$PLUGINSDIR/wininet/core.lua

SHA256 b0f17b350a37ab866d759ef604a5c951d38fdd7a00ac7452febde2779434ff00
MD5 af7651093c77505d895a671dcd135d40
SHA1 ca92ee6965526757e23c164911f63a73a16d0600
SHA512 2663a63e95600f46040ad9c6c00e73411cfab197439a9c30c7ac9b2eb7235d52471a8c1c51cb8beced092b8db1576893c841c94f93c8b7bd4519cd57ee44c97c
SSDEEP 192:DpME653RM4CNF9PKOMqNfy2hctmjp+BaBwC1cX8uizAIDWK9lmFnLsn+GS/f0sko:DpkhfwfyO0saWgLsn8lklW
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/wininet/defs.lua

SHA256 097d7ad8ca00716a184cac8c52ff6adeca41ee6dcda75698cfc7c3e0fc0ab012
MD5 5ed989d464261a58ec9846db91c90a46
SHA1 75419503d2962150cd0ad2df95802ecccc5ed14b
SHA512 87dcfe63131126845cdd13e852337ee6e2d3987528e0089d80a61f132a7adb038c0f06ebf6b2bb34aacb2c54cf160873769a8e3c817f0c0b711222b75f71c278
SSDEEP 768:6e3DOGh++VTwpLfgwwLWWPPCaBLgRqmHFGCZ7:RhHVUsPCaBLgVZ7
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/wininet/ftp.lua

SHA256 d2c6858503e065ac5f751365349f236706edbfbdca4b86ed7ea9ef8626996c48
MD5 8004e3f267460e8a83ed24b72291f6b1
SHA1 01766537875cddf1d48a1d87e2048641c1b4b368
SHA512 995b2bcfeeeb7b3a329169973b2d9ba9f69e1042f2b74bb65e9b523c158279425f1dd0688eeb5291850580fd3bc053ac099bd055b8b31ea92625763446525cda
MD5 SHA1 SHA512

NSIS installer

installer

$PLUGINSDIR/wininet/http.lua

SHA256 10abe9e4a6b4428495fece2c0a49f8d716110db5cb40af4a36f74077506f9fb2
MD5 d9ae1fe142112a30dada3b73073a5ac3
SHA1 932728885109e838e9821bf88d06033db727b4ba
SHA512 82702939ad88339b138630685c52ad9ffe3179c8ec69ea72e2be7eab8874a5a370b1e7bd8e3268be55d3d0196a60affa73c3dd6b4aca635486f7cc55b81b6855
SSDEEP 384:COWPlnVg9yQ+uN397E8IfeCYS+8iy+1jbkNcwNNnI8:COWPlnVg9D+up9g5mxS+8ijdOnI8
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/wininet/ltn12.lua

SHA256 065a0d4ccd9d5019cb97232a67f5c5ae3e6cb943b48f263f1d1eaf21e15c0e5a
MD5 f273a694acedd917336a47ab09efe2eb
SHA1 8ff862146d5f939ad4de785a9bce2378ef5b8d98
SHA512 aeee518d9ef1659372b9b46a09f7bf22ae439e8cb5abf6c588c8fc7971d534388e4ec3ca3fa1e02fb374ee3c5b399e94430eaab87423cbec385ca2db4aa99d4d
SSDEEP 192:PhfZBfxR7f6v6kObk2D0P9+INoAlEEvKbMEMuWKlrSDrGXJ5GPYbo8+b2uP0XJUS:PhfZu6kObkyar5libMv+sCorbrMwsDis
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/wininet/url.lua

SHA256 5894c927a6b2d7c5c0d43bcb24ba6235ed7a2a1e8d115e3fcea910723eb521d4
MD5 3d8665da9f10eb1cee52aa10aa63103e
SHA1 c93598630895b60cabfd22b4fc280158f70e75d9
SHA512 e5a06fa3286319dada66cc0754bd8881698912c917c9b900f22b54f95e3f4b05577b473fac7bdc0ad1ed83457e200103ff2e3361cc6c9b21f969939e4942f7b1
SSDEEP 384:adZ1h93hGAh4dxR9FubHaTWjw+iKN1+D0xj6AqCUDv7Mn/TY:aZb3YAhWxR9FubHa6jwu100xj6dv7MnE
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/wininet/wininet_h.lua

SHA256 073296ccd19551ddd8e8dee9f2d4a927ec818c6acea958b3d50e8e49098a69e6
MD5 6ace28d17180238a83ecdc3bd554e9c2
SHA1 581b8e2a02efc645b8a05955bff7a18d38fcf170
SHA512 c0f5703666046657019fbe80d4598a39dad212d1cfd789d8f66185f935e37870cb3d76c7869856ae6b30a2856751bacb4ef4dcfdb5e1655483c6a346705e597c
SSDEEP 384:AcB/zzJ1p6nkvR2H4PlG/ioDlmQdWbbqta1IGVb+ub:AcB/5n6nkvYYPlG/ioDlmQdWyta10ub
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/wininet/wintypes.lua

SHA256 a6aa1794d8bbafe238f8ba92d62f18bd61ff7884e591582390f3343da3550047
MD5 7dec81a81d64a228af2aa5dddce127b1
SHA1 304dc81198081ca2d015ef7dea88a987c7910950
SHA512 7ee2dc6bf040ccb1204d90fd025254e7e425eca2fb6a71b18a1c8cdfd489a88c70038e655a29d26e482575e0cc83d585499cc5e6ff215d548befadf117cd156f
SSDEEP 48:v5ntWxNTURVVfwrc9/g7eQfr15XHegQ4pEpbpdlglucNX2b7Vi4pEpbpdlglucyN:9wxNQurcFkeQT1lgzCocc4zCocOj
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Sharing

General

Malware Config

Signatures

File Explorer