79e981af90d4c2c9a4caddcc6e1a4241_JaffaCakes118

resource
79e981af90d4c2c9a4caddcc6e1a4241_JaffaCakes118
unpack001/$1/TablacusInstallerStuff.exe
unpack001/$PLUGINSDIR/nsProcess.dll
unpack001/$R1/$APPDATA/TablacusApp/uninstaller.exe
unpack002/$PLUGINSDIR/nsProcess.dll
unpack001/$R1/Tablacus.exe
unpack001/$R1/TablacusApp.exe

IMPHASH e2a592076b17ef8bfb48b7e03965a3fc
SHA256 b71698185cb526540d1b8a2992f40b0549b41de1375453adb06386b4860702f2
MD5 79e981af90d4c2c9a4caddcc6e1a4241
SHA1 75812febe64045f49e894f1769041056670f8fb5
SHA512 4504d8b3e1826ace50116b3adff997c2eeded8a07febfc7d4425d81bd3fa452e61468c4bca1edb3f889a0886ae77fe91cf25b27d8ce139986155316d3a95bd3e
SSDEEP 12288:QPpscjcNqOQ/3AjTr7vHSujL6TcveehGfqXpd:Y/jcN0/3YrziTYJycpd
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

12960

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetCurrentDirectoryW GetFileAttributesW GetFullPathNameW Sleep GetTickCount GetFileSize GetModuleFileNameW MoveFileW SetFileAttributesW GetCurrentProcess ExitProcess SetEnvironmentVariableW GetWindowsDirectoryW GetTempPathW GetCommandLineW GetVersion SetErrorMode lstrlenW WaitForSingleObject CopyFileW CompareFileTime GlobalLock CreateThread GetLastError CreateDirectoryW CreateProcessW RemoveDirectoryW lstrcmpiA CreateFileW GetTempFileNameW WriteFile lstrcpyA lstrcpyW MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GlobalFree GlobalAlloc GetShortPathNameW SearchPathW lstrcmpiW SetFileTime CloseHandle ExpandEnvironmentStringsW lstrcmpW GlobalUnlock lstrcpynW GetDiskFreeSpaceW GetExitCodeProcess FindFirstFileW FindNextFileW DeleteFileW SetFilePointer ReadFile FindClose MulDiv MultiByteToWideChar lstrlenA WideCharToMultiByte GetPrivateProfileStringW WritePrivateProfileStringW FreeLibrary LoadLibraryExW GetModuleHandleW

user32

GetSystemMenu SetClassLongW IsWindowEnabled EnableMenuItem SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos LoadBitmapW CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard wsprintfW ScreenToClient GetWindowRect GetSystemMetrics SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow LoadImageW SetTimer SetWindowTextW PostQuitMessage ShowWindow GetDlgItem IsWindow SetWindowLongW FindWindowExW TrackPopupMenu AppendMenuW CreatePopupMenu DrawTextW EndPaint CreateDialogParamW SendMessageTimeoutW SetForegroundWindow

gdi32

SelectObject SetBkMode CreateFontIndirectW SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW ShellExecuteW SHFileOperationW

advapi32

RegDeleteKeyW SetFileSecurityW OpenProcessToken LookupPrivilegeValueW AdjustTokenPrivileges RegOpenKeyExW RegEnumValueW RegDeleteValueW RegCloseKey RegCreateKeyExW RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_AddMasked ord17 ImageList_Destroy ImageList_Create

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

$1/TablacusInstallerStuff.exe

IMPHASH 732cb4fe3717c144ca71dd37f46c393a
SHA256 fea0167b9a78895907285a19506d5dd182f0c7d2d004941d8fe4d7771e9b37aa
MD5 e60f1406e1f2e625a3f2054b4092127d
SHA1 70cc6b75301d8def17de9ff9b4ec25704d02d8c4
SHA512 926e1e2f6423404f30cecd340b6c783d6bc85ee025738364d92ed1c1c290cbfa33529d6e827a2934a39a180fb2e6f60ac82c9b30dfbd9040182dbe78b7ec6765
SSDEEP 3072:BpGQHebSZU5WsqY1xpZrmGWAg45555kE555xiEluWe:TGpbSZIB0hElr
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

17003

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

$PLUGINSDIR/nsProcess.dll

IMPHASH 439074d1c01f7b16781bdf060930814a
SHA256 30c6c3dd3cc7fcea6e6081ce821adc7b2888542dae30bf00e881c0a105eb4d11
MD5 f0438a894f3a7e01a4aae8d1b5dd0289
SHA1 b058e3fcfb7b550041da16bf10d8837024c38bf6
SHA512 f91fcea19cbddf8086affcb63fe599dc2b36351fc81ac144f58a80a524043ddeaa3943f36c86ebae45dd82e8faf622ea7b7c9b776e74c54b93df2963cfe66cc7
SSDEEP 48:Sz4joMeH+Iwdf8Rom/L+rOnnk5/OCnXeAdbdOAa4GPI+CJ87eILzlq7gthwIsEQW:64c/eFdfS/SSnkxNa4G+ueqPuCtGsj
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

4097

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$R1/$APPDATA/TablacusApp/uninstaller.exe

IMPHASH e2a592076b17ef8bfb48b7e03965a3fc
SHA256 37e43bd3e52013ffa63733cc72b100d0dab967a467bef394b6a037dac566ed6c
MD5 4d298d1a98fe10b5a8ac841787fef173
SHA1 d935fddcaab7e9890e6ceee22105619e0eeba4be
SHA512 7314f604c2ee35a718fe8605c935f9488f5cac01b974b4a22c63bb8e4089d548a31fae2adc5ee619b39a1912890bf9c15a098115951c2f8ade32919b51095e64
SSDEEP 768:UJKOdm9o29rJYypQJ2JQJXJuKU+duC1ZHQ0D3LHSGiVNulJRnKzbAa:kTdm9B9lYypfMXvugHQ0DbLiNu4zbAa
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

12960

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetCurrentDirectoryW GetFileAttributesW GetFullPathNameW Sleep GetTickCount GetFileSize GetModuleFileNameW MoveFileW SetFileAttributesW GetCurrentProcess ExitProcess SetEnvironmentVariableW GetWindowsDirectoryW GetTempPathW GetCommandLineW GetVersion SetErrorMode lstrlenW WaitForSingleObject CopyFileW CompareFileTime GlobalLock CreateThread GetLastError CreateDirectoryW CreateProcessW RemoveDirectoryW lstrcmpiA CreateFileW GetTempFileNameW WriteFile lstrcpyA lstrcpyW MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GlobalFree GlobalAlloc GetShortPathNameW SearchPathW lstrcmpiW SetFileTime CloseHandle ExpandEnvironmentStringsW lstrcmpW GlobalUnlock lstrcpynW GetDiskFreeSpaceW GetExitCodeProcess FindFirstFileW FindNextFileW DeleteFileW SetFilePointer ReadFile FindClose MulDiv MultiByteToWideChar lstrlenA WideCharToMultiByte GetPrivateProfileStringW WritePrivateProfileStringW FreeLibrary LoadLibraryExW GetModuleHandleW

user32

GetSystemMenu SetClassLongW IsWindowEnabled EnableMenuItem SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos LoadBitmapW CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard wsprintfW ScreenToClient GetWindowRect GetSystemMetrics SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow LoadImageW SetTimer SetWindowTextW PostQuitMessage ShowWindow GetDlgItem IsWindow SetWindowLongW FindWindowExW TrackPopupMenu AppendMenuW CreatePopupMenu DrawTextW EndPaint CreateDialogParamW SendMessageTimeoutW SetForegroundWindow

gdi32

SelectObject SetBkMode CreateFontIndirectW SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW ShellExecuteW SHFileOperationW

advapi32

RegDeleteKeyW SetFileSecurityW OpenProcessToken LookupPrivilegeValueW AdjustTokenPrivileges RegOpenKeyExW RegEnumValueW RegDeleteValueW RegCloseKey RegCreateKeyExW RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_AddMasked ord17 ImageList_Destroy ImageList_Create

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

$PLUGINSDIR/nsProcess.dll

IMPHASH 439074d1c01f7b16781bdf060930814a
SHA256 30c6c3dd3cc7fcea6e6081ce821adc7b2888542dae30bf00e881c0a105eb4d11
MD5 f0438a894f3a7e01a4aae8d1b5dd0289
SHA1 b058e3fcfb7b550041da16bf10d8837024c38bf6
SHA512 f91fcea19cbddf8086affcb63fe599dc2b36351fc81ac144f58a80a524043ddeaa3943f36c86ebae45dd82e8faf622ea7b7c9b776e74c54b93df2963cfe66cc7
SSDEEP 48:Sz4joMeH+Iwdf8Rom/L+rOnnk5/OCnXeAdbdOAa4GPI+CJ87eILzlq7gthwIsEQW:64c/eFdfS/SSnkxNa4G+ueqPuCtGsj
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

4097

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$R1/Tablacus.exe

IMPHASH 8d3fcb29b341b50d5a29b25cb6dc7da7
SHA256 cc7001a8c2a49a448f99a7b1740bfc7a6e8447fbc061e4856cdb35c5b73b0ee8
MD5 090cacc2a455fd516e56199761c26d96
SHA1 055bcf7abb7fd5332dd9b33784ae380370a528c1
SHA512 4f8fe8d40a9baf2cb9084cf5767d646fa03db0486eb9a4de5e2b0596e010f95feaea96b4c005d0f0d7f49059b9276c3f83b6eb597f99ac71e26768324ae850c0
SSDEEP 6144:mL92eofr1VBMUmNE2szMZb+6sNeM7cL3BH8Cmu5lEH4+KZIeJvZvvZ:mL92eofr1EUmNO6+neM7cFcdu5ly4jDR
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

188320

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\cpp\TE\Debug\TE32.pdb

kernel32

GlobalGetAtomNameW GlobalFindAtomW GlobalDeleteAtom FileTimeToDosDateTime OutputDebugStringW MoveFileExW VerSetConditionMask VerifyVersionInfoW CreateMutexW TerminateProcess GlobalAlloc GetThreadLocale lstrcmpW FlushFileBuffers CreateFileA WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle RtlUnwind InitializeCriticalSectionAndSpinCount LoadLibraryA GetLocaleInfoA GetStringTypeW GetStringTypeA GetConsoleMode GetConsoleCP SetFilePointer HeapReAlloc VirtualAlloc GlobalAddAtomW LeaveCriticalSection HeapSize GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter VirtualFree HeapCreate DeleteCriticalSection GetStartupInfoA GetFileType SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW GetModuleFileNameA GetStdHandle ExitProcess LCMapStringW LCMapStringA SetLastError TlsFree TlsSetValue TlsAlloc TlsGetValue IsValidCodePage GetOEMCP GetACP GetCPInfo HeapFree RaiseException HeapAlloc IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetStartupInfoW CreateThread ResumeThread GetLastError ExitThread GetTimeFormatW GetDateFormatW GetCurrentDirectoryW GetModuleHandleW LoadLibraryExW OpenProcess GetVersionExW GetShortPathNameW SetFileTime WriteFile CreateDirectoryW GetTickCount lstrcmpA WideCharToMultiByte lstrcmpiA FreeLibrary GetProcAddress LoadLibraryW GlobalUnlock GlobalLock WaitForSingleObject CreateEventW GetCurrentThreadId SetEvent GetVolumeInformationW GetCommandLineW lstrcpyW FileTimeToSystemTime InterlockedIncrement FileTimeToLocalFileTime LocalFileTimeToFileTime SystemTimeToFileTime FindClose FindNextFileW FindFirstFileW GetModuleFileNameW GetDriveTypeW lstrcpynW GetCurrentProcess lstrcmpiW ReleaseMutex Sleep lstrcatW GetNumberFormatW GetLocaleInfoW CloseHandle ReadFile GetFileSize CreateFileW MultiByteToWideChar GetUserDefaultLCID lstrlenW FormatMessageW LocalFree InterlockedDecrement EnterCriticalSection GetModuleHandleA

user32

AttachThreadInput SetWindowLongW GetWindowLongW SendMessageW RedrawWindow GetPropA GetParent SetParent FindWindowExA GetClientRect MoveWindow InvalidateRect GetMenuItemInfoW GetMenuItemCount GetForegroundWindow GetWindowThreadProcessId SetForegroundWindow ShowWindow SystemParametersInfoW IsIconic GetAsyncKeyState SetWindowsHookExW TrackPopupMenuEx UnhookWindowsHookEx MessageBoxW GetClassLongW GetSubMenu GetSysColorBrush GetDC CreatePopupMenu SetClassLongW GetSystemMenu GetWindowDC GetWindow GetTopWindow GetCapture GetMessagePos SetMenuDefaultItem GetMenuDefaultItem WaitForInputIdle MapVirtualKeyW GetMenuItemID ReleaseDC GetSysColor GetSystemMetrics SetMenuItemInfoW SetMenuInfo GetMenuInfo EndPaint FillRect GetIconInfo MsgWaitForMultipleObjectsEx SendInput GetMessageW SendNotifyMessageW SetWindowTextW InsertMenuW AllowSetForegroundWindow CopyImage LoadMenuW LoadIconW LoadImageW CreateWindowExW BeginPaint LoadCursorFromFileW GetWindowTextLengthW GetWindowTextW GetClassNameW GetKeyNameTextW LoadStringW MonitorFromPoint MonitorFromRect PtInRect SetRectEmpty DefWindowProcW PostQuitMessage ChangeClipboardChain SetClipboardViewer RegisterClipboardFormatW SendMessageTimeoutW ShowScrollBar SetRect CopyRect RegisterClassExW CopyIcon DrawTextW UnregisterHotKey RegisterHotKey SetWindowPos CreateMenu InsertMenuItemW IsChild GetFocus CallNextHookEx ScreenToClient SetFocus GetClassNameA GetDoubleClickTime GetCursorPos CallWindowProcW ClientToScreen OffsetRect GetKeyState GetWindowRect IsWindowVisible SetCursor LoadCursorW SetCapture ReleaseCapture SetScrollInfo FindWindowW FindWindowExW WindowFromPoint PeekMessageW TranslateMessage DispatchMessageW RegisterWindowMessageW GetKeyboardState SetKeyboardState CreateIconIndirect PostMessageW KillTimer EndMenu DestroyCursor SetCursorPos DestroyWindow EnableMenuItem DrawIconEx RemoveMenu DeleteMenu SetMenuItemBitmaps IsMenu BringWindowToTop OpenIcon IsZoomed IsWindow DestroyIcon SetTimer DestroyMenu DrawIcon keybd_event mouse_event GetMonitorInfoW

gdi32

DeleteObject LineTo BitBlt Rectangle CreatePen CreateCompatibleBitmap CreateCompatibleDC GetStockObject SelectObject GetObjectW SetTextColor SetBkColor SetBkMode GetTextExtentPoint32W DeleteDC MoveToEx CreateFontIndirectW

comdlg32

GetOpenFileNameW ChooseColorW FindTextW GetSaveFileNameW ChooseFontW ReplaceTextW

advapi32

RegOpenKeyExA RegQueryValueExA RegCloseKey RegOpenKeyExW

shell32

ord256 SHGetSettings SHGetFolderLocation ord189 ord645 ord644 ShellExecuteW SHGetFileInfoW ord2 ord88 ExtractIconExW SHEmptyRecycleBinW Shell_NotifyIconW ord4 SHChangeNotify DragFinish DragAcceptFiles SHFreeNameMappings ShellExecuteExW ord16 CommandLineToArgvW SHGetDataFromIDListW ord152 SHFileOperationW ord162 ord18 ord23 ord21 DragQueryFileW ord17 ord153 SHGetDesktopFolder SHBindToParent ord25

ole32

ReleaseStgMedium CoCreateInstance StringFromGUID2 StringFromCLSID CoMarshalInterThreadInterfaceInStream CoCreateGuid OleSetClipboard OleGetClipboard OleUninitialize OleInitialize CoTaskMemAlloc CoTaskMemFree CoGetInterfaceAndReleaseStream CoUninitialize CoInitialize CLSIDFromProgID CLSIDFromString CreateBindCtx RegisterDragDrop RevokeDragDrop

oleaut32

SysAllocStringByteLen SysStringByteLen SysStringLen SysFreeString VariantInit VariantCopy VariantClear VariantChangeType SysAllocStringLen SafeArrayCreateVector SafeArrayAccessData SafeArrayUnaccessData SysReAllocStringLen VariantTimeToSystemTime SystemTimeToVariantTime SafeArrayGetUBound SafeArrayGetLBound SysReAllocString GetActiveObject SafeArrayDestroy SysAllocString

comctl32

ImageList_LoadImageW ImageList_Duplicate ImageList_Create ImageList_GetIcon ImageList_GetBkColor ImageList_Replace ImageList_GetImageCount ImageList_AddMasked ImageList_Add ImageList_ReplaceIcon ImageList_SetBkColor ImageList_GetIconSize ImageList_Copy ImageList_SetOverlayImage ImageList_SetImageCount ImageList_DrawEx ImageList_Draw ImageList_SetIconSize ImageList_Remove ImageList_Destroy ord17

shlwapi

PathFileExistsW PathIsSameRootW AssocQueryStringW ord172 StrCmpLogicalW StrChrIW StrRChrW PathMatchSpecW PathFindExtensionW PathFindFileNameW PathRemoveFileSpecW PathGetDriveNumberW PathIsRootW PathSearchAndQualifyW PathCreateFromUrlW PathUnquoteSpacesW StrFormatKBSizeW StrFormatByteSizeW StrChrW PathAppendW StrRetToBSTR StrCmpNIW ord8 ord9 ord10 ord219 ord174 StrToIntExW ord256 ord12 PathQuoteSpacesW

gdiplus

GdipFree GdipAlloc GdipDisposeImage GdiplusStartup GdiplusShutdown GdipGetImageEncoders GdipGetImageEncodersSize GdipBitmapSetPixel GdipBitmapGetPixel GdipCreateHICONFromBitmap GdipCreateHBITMAPFromBitmap GdipCreateBitmapFromResource GdipCreateBitmapFromHICON GdipCreateBitmapFromHBITMAP GdipCreateBitmapFromStream GdipCreateBitmapFromFile GdipCreateBitmapFromFileICM GdipImageRotateFlip GdipGetImageThumbnail GdipGetImagePixelFormat GdipGetImageRawFormat GdipGetImageHeight GdipGetImageWidth GdipSaveImageToStream GdipSaveImageToFile GdipCloneImage

urlmon

CoInternetSetFeatureEnabled URLDownloadToFileW CreateFormatEnumerator

imm32

ImmSetOpenStatus ImmGetVirtualKey ImmGetContext ImmReleaseContext

$R1/TablacusApp.exe

IMPHASH 0715a881757f68b4100631daa8bd9cf8
SHA256 753c922703981cee4b494ebddb9c01c08fc3df938fef466bebc81e1fc7b060c3
MD5 0987144fa3fa624344aff0ba49680696
SHA1 9cbb164633c6ef51d58f81fd761689e019c20aa3
SHA512 88e5e075a9ff25014674ef6a666f03af62f35946765b88e758acbb5771ab27a2a2ca6d77c16a112a11390a7f81c8e153de4b01cd966283f7acad4c7a1b4e4b98
SSDEEP 3072:Z+z/MkvBRy7fWc13i+BNmALM2VZfr1tpZB:m7Ry7LVPHFd
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

27501

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

shlwapi

AssocQueryStringW

user32

GetForegroundWindow GetWindowRect GetClassNameA

advapi32

RegQueryValueExA RegOpenKeyExW

shell32

ShellExecuteExW SHGetFolderPathW

kernel32

GetConsoleMode GetConsoleCP SetFilePointerEx WriteConsoleW DecodePointer ExitProcess FlushFileBuffers HeapReAlloc HeapSize LoadLibraryW GetProcAddress FreeLibrary GetModuleFileNameW WaitForSingleObject CreateThread GetCurrentProcess CloseHandle IsWow64Process LoadLibraryExW UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW GetModuleHandleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead EncodePointer RaiseException GetLastError SetLastError RtlUnwind EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree CreateFileW GetModuleHandleExW MultiByteToWideChar WideCharToMultiByte GetStdHandle WriteFile GetACP HeapFree HeapAlloc GetStringTypeW LCMapStringW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW GetProcessHeap GetFileType SetStdHandle

$R1/config/window.xml

SHA256 4265d76e080b07ed626292e3087c6a6943eb0a5200b5e58c839faea743aff87c
MD5 d8b83c4b689f57c9003866f64116eaec
SHA1 41192c4059d9cf88795a948a2a6675e729958942
SHA512 f75031518b23971398004822c428faa13b1728a13215a73e31f546b3f5e1ffff40102bd68905a0882ab4296e248abc6b88d3a0b5222a9a8594ff7bddb8d02489
MD5 SHA1 SHA512

$R1/init/addons.xml

SHA256 4bedbe2d7684838c6820939d30b1ff214270a4e0ce0d86875d8e42f78417d124
MD5 00450cebb93c62ab66f50f19b0d4b19b
SHA1 ffe2eadffa04571b826ab1ee84e6af52fe779921
SHA512 8b4aa2e2bd717c88faf6961b0eee35c9c6935d644daff92a9337de35797d5a3abf0da72a2f7edc1bc99fdd69989c5d8625ebcf939b5c0abceb8d4ebfcb9b4e09
MD5 SHA1 SHA512

$R1/init/key.xml

SHA256 a3722559f1d2f5dff12b138ba0600e255a73621aa0f1545834d383a0600076cb
MD5 31fac4b48fdd430c72ab1aabe301c4ea
SHA1 2c81a5babbe3671ad8e84738ac05374becede234
SHA512 884af419c7ed1242acfe5c9e5065c8f4f2db34108d85c6d95df998123da13b9076ff21d9cd8ae85697bce43c7dcb71975159aed4c2b2643c6d4a6602ec5d4a8e
MD5 SHA1 SHA512

$R1/init/menus.xml

SHA256 4db67f164d48eb18085bf446c246175a5355be2f7da9fec26051d3d54cde59ff
MD5 d4950a3e7a4397a322e50ad5e68c9219
SHA1 393c35f986449fd79cfb0219c5b12bb6903f23d1
SHA512 024fa8d25695d65743634ae8b03c5e1ff0b40c4b61f61501c7e5ed0504d2490b479012eea01e78fd502ae782503f2454ebece40d3b85d041d6e6dd141f57bb86
MD5 SHA1 SHA512

$R1/init/mouse.xml

SHA256 473d1ed3c93a24fb6088c0d3f17afc224918aaf53a74ed38781084ac484cf62a
MD5 bdd221f1eab0e21450396369f5cfca60
SHA1 b06c77bbfa208fb1b92b8478e07f88fa612fcc38
SHA512 d1f98f693cccfb02766c65df02b49c1d15479e29a1b46e77bce8dcb3b4aa87f015b412048dd094ef1937c143b50be2556ca9abbbab566b2c4476f63602410798
MD5 SHA1 SHA512

$R1/lang/de.xml

SHA256 1bfdd3dbaed74e9f55d03b228e817d8724f8d8cc2ff6f5cb0d567f004586a666
MD5 4485cdecbcbb002ff0a716765a69ba86
SHA1 ad5433bcfa9348e349617615d4822a9f4f32037c
SHA512 719f103760904567acbcc9c4508017dd7fd528698f5aba61d883c1e62921aa333da5158d0a9c58d6f314ff3f7401bdd4b7148c55cca3b6e37bf09132402ba776
SSDEEP 192:syqoI1rv3nMmCvAf4pS9PVD3VnAkDBoDNh3CgoTUN:TQ38pS9PVikDgAS
MD5 SHA1 SHA512 SSDEEP

$R1/lang/en.xml

SHA256 8648e9507c3b8a5b439014d0b6123181a6ee86a70fac314e487a455a6fea2923
MD5 31dfa0ff918a9cbaa1e25ee66761dabf
SHA1 5592c9e6e7ed9ea939ae99fa083b2dfc2c6bdf5b
SHA512 1254813cd83a26e62c12fb03be576c34d2d5d0b26f0659afea799130eb3ae5ec5bbe2aaadb90a2176792f1c09f62005ea0b303177d6efcda5f08faeec2953b81
SSDEEP 96:nEKnXKpMCmVWBL4A2Xy8DTJadharcseUeMjRPkkkeUex+H/V82bMifQ8D:Eiwnh4y8DTJrb5jRPkkkbc+aq
MD5 SHA1 SHA512 SSDEEP

$R1/lang/es.xml

SHA256 2bbb95deaef9d6aee4ed98d4e01dd025fa4d2819b485e4cb6296466fe42298ed
MD5 71cab8b644b3bdfde74e6bcf7ba4bddb
SHA1 f847071d7ec1bb688b25b7594c996074b46b9b32
SHA512 9821882155a62e508704ecc114c751b3287c1462a55fcab7a6b2f5917b2cfc4847b8b7c035c2df4e7545c581bbdfa302edeb8f5ad4ecec998a244eb172c517c2
SSDEEP 96:rzGouYn16r9CYVE39UA2X1UErNDv40fE1Koe0IXpzPkseYPp/pjeBS1fib:JuaYVZ1UcBQ0SbIXpzPksNpNSoa
MD5 SHA1 SHA512 SSDEEP

$R1/lang/fr.xml

SHA256 ba1b3e0dcfc1560f504b8b22651f3d93603b0fde046dd1d13b796cad540b9af4
MD5 64d3631fc29fd491a1161a7422bd4265
SHA1 fb7549a3bc370c5f53d98119529e9f5375e6d0f1
SHA512 120a4e547ac3e394e2215c52dd33429970e958001dd95e20b75a0a022e704a1484dbb2df54e2350bc6db12f4e1c278b16b387d314de3271a13ed15728fee3da1
SSDEEP 192:NVBcns6jTLF0xwKw5lDRCRrJk1w0XwpF8Yq:zmns6jTZ0GKw5lNSSLXwID
MD5 SHA1 SHA512 SSDEEP

$R1/lang/it.xml

SHA256 d48536625aeaa3154670630c6664e69ccc412f8294aaaaf29954f7219db1bb14
MD5 d6fdf80e9701b6eb75edf201d0545356
SHA1 edf21a69d8fef4e8dee02dac6bfa53b648924605
SHA512 2f6ff2e5dce5ec1d0b2f2001799d36fc64a4f614d1667dea7816e1ccc767ce6737e3ecf438d8b8be539f2af80d4351868a756e7ec3616812281e762f8dfde8fa
SSDEEP 96:fQen5WQJ37bAqzAd08tBdnCpxxYf60yepSeWs4GHeiCFx0M58OdsX89DG6:oqpzAb/dC5Yy0145s4GH6AXS/
MD5 SHA1 SHA512 SSDEEP

$R1/lang/ja.xml

SHA256 14e057e93617d3284709cc102be48f74be52df961ac41b4b564c3937c142f73e
MD5 e8a7a29f27c1539f9e2355e08c48112a
SHA1 dc7ceb26f03ff6fc98ece1542009abca365edf70
SHA512 9f042bd59c84a6148d745d83d2b681237ad201e490e7459ec8b797eb1256b3664f3bd8f12cd97b4fd16842208f290ecf59c9240329a3d76b7cd851ad4a60ba62
SSDEEP 96:A3jZBKHnl6/cs/QoLKkgNT8Smfmwjxf1pkjS+/Kee/kwi0r7pSMTd6he/2uCCdJg:kQDs4E4fvwjxf1xetd0xSMTdMgWHRhWo
MD5 SHA1 SHA512 SSDEEP

$R1/lang/pt.xml

SHA256 678b4aaa4599715118c988b1245e6bef53f20514baaa5a40f8872da05e797d03
MD5 817e9801367dc0330a947d443faf9d73
SHA1 d25433c3d351db703adca9ea0d6e88fc61e78a5a
SHA512 dd1435602cacb89e97941838e81e43cdbaf6240ec3d944366b864d470f37e76c97a1dfa7944a96b3d94acb8ea713ccd280bec0c5f28dd1687d263b4a333c71c0
SSDEEP 96:XhX0n/fnkqaZpMwy+2PA+u+QZLo4irezDvjXuTePa1jSXo6zhga:l0n/p2+W+QZ0rGDvjXuTT83
MD5 SHA1 SHA512 SSDEEP

$R1/lang/ru.xml

SHA256 8b51f409258d6d217d46bbb3d7de4526d97e66750e3f13d0c9e94e6676f5f0dd
MD5 6c479c724af6c65582bb58471a99e34f
SHA1 c1e78357c4b0c178dd18e8bcc18e992be9368378
SHA512 c289fd43459f3f630b71b138c42204e18e590cb8fd20c18fde4fe192b7e315f7c0ffdc371888bba121a3f43c29cadf9c776040c0c967eec73ae72e54964bba22
SSDEEP 192:MSgS1Lqeq2ZWL5fhIvTc0+PjFcU/OL0ES/eFwt:XFqw25hIc77z2L0n7
MD5 SHA1 SHA512 SSDEEP

$R1/lang/zh.xml

SHA256 84bb40492db5da31fb903bff91fec4757f1301cd50956dbca7f3d41bedbb40eb
MD5 7bf79d4f3728640fe7b7d77658e037aa
SHA1 2c8711c5185f951c0d11fc529fd2f5995dd35b24
SHA512 d5e4d1f380c0349c51f5df41deb6fbb830000a6401ff26a3602cf87b5575c7db610c97b55188037adfcc920dbc1bb75a01029007162215a0b411880ba6c5d42d
SSDEEP 192:AhAFOIzIcmPD3PMSwFcN7PiF7Mw0kg1/qs:Ah+lsvwy1uX0d1P
MD5 SHA1 SHA512 SSDEEP

$R1/lang/zh_cn.xml

SHA256 6121de2a80363992915b9c1a947ccddec0d7b40adc5c528a899baa37d2d5f3c6
MD5 cadfd305bedc46a2e135c655197009ca
SHA1 12683e17a6c1de92de5211ef86e138dc55561d57
SHA512 6eea362d3f38b7d9918716b01c933ea4b23db1d18d52bdf9776f5e81dba67834356da3012c541a554a6a2ee218cc0f21335d15f0099b0b86be2415950064b01e
SSDEEP 96:MPhHnJ61zj099WXVByYaLJ1lu+FhB+fmAez7dIQpMiOeVqlbtlp8koQeYScEu:IhpYVGJLPh0pQpMiOUanpmYJ5
MD5 SHA1 SHA512 SSDEEP

$R1/layout/1tab.xml

SHA256 8ef3600953f3528b2b0d218f67fa05316ca4807aa77dd3b6311e20f24b8a3cac
MD5 3878c81dfb2c3c6ddf3337d2111ae5ec
SHA1 8dc11af2e4718334f0ca78363bb8876b3ce22585
SHA512 8df26b2f3d33bdd60001d24192cad52573680694c4ba20fe88c686b112c082a3bcfbc8eaf3b9ae7743c69b0aeadd4e932a25d0e80e82f69b7e15fb658fd5e18b
MD5 SHA1 SHA512

$R1/layout/4tabs.xml

SHA256 c66ebe04bad09097bfc1224802a794a813478a4763c629199320826dc23ad6e9
MD5 6521e156e3a7ed636b59ae68b18b3c2e
SHA1 f5e1da495583f784df19dd82d8f8c919749434dd
SHA512 0998b1ae961fa7e7533b65f0e4b1ceb887a96a6472eb694ffaa97d790990e42314a36248dacb42336454f78cadfb3051a26dd336b492f3c461620ad2e913a62c
MD5 SHA1 SHA512

$R1/layout/bottom_tab.xml

SHA256 50034129efdb4ad6fbcd46496c20a76791f7d5421c3abec85a722670b64928ba
MD5 8f07b8c61826eebec36f12bbaff4267b
SHA1 21fac427266209f521c4104a862e0ea3b5f89166
SHA512 2345deb89f5641059a3fa64dc35c420ebebc5afdfc6bdb45dbcb71ab549ad90606ff2ae77be848def9cf519e62de2ef0895b719ca8548b211ffcc114bb06c69b
MD5 SHA1 SHA512

$R1/layout/h2tabs.xml

SHA256 2991b86ff4e794ab7a5e74701bf21a75563639ea7193deb0e873b9a7301b372b
MD5 1027ec6d98aa114e7b107b7f1e7a4d5d
SHA1 90f5a6dcdee85ab9d48ff4488362578bc88130ea
SHA512 f2f9418269fc49a075e21b0e8ac40966324c6a14a27f438190e96eff9ab0f5b9fbc4ca1f62f893cb609c553249c4e0f4045872f077dfbf344c3375b5d5261cce
MD5 SHA1 SHA512

$R1/layout/left_tab.xml

SHA256 b11609892e4392611eabcf6f2b214b6a54b444e215c22ef52c37c77db19d47f5
MD5 8ba2c0721e92d29cf219960add76848d
SHA1 c2e52fde726e8817a3cdc629ff0c86fedd4709f2
SHA512 97a9dfc7bec2e95ff54da1f6db6371ac86dde33b98df4c9f867c20a73946eddd42bc08c77752a85276e2af29ad16b2f556c5b252b4e5f221052e40d46962f8d4
MD5 SHA1 SHA512

$R1/layout/right_tab.xml

SHA256 8bc8bd22e6fc2ecee66d6e86bb2b464581da68cb2eac3bd954521013ab5ef10b
MD5 8e6d1b28a31b0ff9e286be34d4c3e4dc
SHA1 f62b46f4827858078d0528924358832b3c4c2eb2
SHA512 0183940829dcd95dc3f9bf2b2e12807129fe8838537e60dca9620af521f4e429a10327138696e588c7f208943cd6ef66dcfcb2814af0f6902fe96654ae6f3f70
MD5 SHA1 SHA512

$R1/layout/tree_1tab.xml

SHA256 99195797cdcab5f474ab3ee97a62d3e495a4e211a836715ee7cfe8531f72ab45
MD5 2fbf06f2971683721e8c0ad6eeb2cec5
SHA1 df826df10adfb90c70e6619ee397c2af5608e407
SHA512 80a7cfb6d9af5d4131a2271c9c1a561b349e06f72030d8a44026152316f79b33a6e1178e5bb132b5bc44a9aa23be2f3700249a733d0a3358b2aa192b73413fe7
MD5 SHA1 SHA512

$R1/layout/tree_2tabs.xml

SHA256 976d6a69a2816b414b7a3152da98bac854360a528e52552bc34756a08b529022
MD5 444f782ddeeebff97d15e70031aed71b
SHA1 9ebf256d0a0c2b7a01bc5125daeba0f118d2dee9
SHA512 28f046493acd34739aa8f1fa1ca065ed6f5b15cc46d7638b357eae6e96478c90d9c7244e009c387ae48b0e5340702365aced9f44115421359547c5937e4f84c1
MD5 SHA1 SHA512

$R1/layout/v2tabs.xml

SHA256 637e9d7e3b3ce011d378d3585c03e1728a32de2163c5e524c775c3c3d2af834d
MD5 3d836e188657c612d58df2fbf49ba8a0
SHA1 c9bd09c542164f71a450f7d46c57507819204315
SHA512 d502cbb260170ce42c7f043a6ccb436373d05a9421bd09eac848abcc6c5f6b8a5504d355ac00780b10bc4e5a4c8b8857e7955967de38093675bee71a39f83b3e
MD5 SHA1 SHA512

$R1/layout/vertical_tab.xml

SHA256 4acc8adcc9af12be675cacf484a67f4eb7011dc1dfb11fa983fc7ce60727248f
MD5 03fe152295957e548916fec444a7b5b5
SHA1 199f04d63c08a09a6adf00f429bfd94227407a3a
SHA512 82309603456c4a8f3e6daed2925792481c098eab44b9afa9f87d5ede79126d94dd586b20c6a955a3606283a2452507c07ad12f4bd08f1a4a069bc3e932891983
MD5 SHA1 SHA512

$R1/readme.txt

SHA256 dd8e22da794fc43f09937b6a4bb65cef54171aa42dae31fd1e10a2c7479dcef2
MD5 fa2e5f0e44d872b2917034d1b5a5878a
SHA1 fa8932f36e66ad6bdece2af01ee5a642b8820be7
SHA512 373e3b124515013bd3cc68bdceee1ceed2a402cbc7e3af66b5779717a4b3a70b77a5010ea334a2a8bf26482026f46cf65054a3928d16da37a2a5f3222f8a06c3
MD5 SHA1 SHA512

$R1/script/background.js

SHA256 66526024fd934aefedf938e18a32aba15d964f2c9ff266d2bf495de6b7c8b887
MD5 5de308df677dc1796e504d815f163931
SHA1 632289cba3f2e420594f452ce82e59accca71e17
SHA512 31c88570506c48af26b467b04fed1e5e65cb4f92278176a78577b180b02b9c41323e0dc6ee907ed3b253c26d553cf333b63bee0a4a9e20afd3c7d04e28c13731
MD5 SHA1 SHA512

$R1/script/common.js

SHA256 78e1fbcdf67495c72ca943c75fe38ef61b1c45ed49115bfd46026fdbe0b002dd
MD5 257375f0eec0c8b964c9eb75e2279470
SHA1 8e7b485203cc62fb4d8e439ea2a3e00d6a098542
SHA512 abc1acf02e5bf1209b278bd65e647540b7d9a30a1a52ce78651c5d2dc39f77c247e3171672c26979f2cb64346424fa3eab25e30a092386a066baf58f76eb1c1d
SSDEEP 1536:qgne9084nkn7p42YpQMwCnEU/KeyGEaVtbqbyTeRtfkImBLOLJBo0OkWLyhVBJLC:qhNC82PbqbyTK+LW4kLyGwIi
MD5 SHA1 SHA512 SSDEEP

$R1/script/consts.js

SHA256 1631247933478916abbe4a6bc1e1432d04a7f4d3e159c1566e69ec872d0f11c7
MD5 18bfa5281a2dd4a2cb35fbf924702898
SHA1 dd6faadceaca2d1e22548fcff96d49e60295b6a8
SHA512 8ae7a445fe2e601fedb4cf246fca4e22bccee5aa48d801437e095b81529f35af8b8955580796786866d751cf2b8fda3e494bc0d1d18f000c6e3374f6434766b9
SSDEEP 768:l0ivNHI18/CF8wVg0hIL/QupMEerjC4xPmtDV:aiSCwO7TyVrjC4xPS
MD5 SHA1 SHA512 SSDEEP

$R1/script/dialog.html

SHA256 4af54a319e8be177e2d48f4effcce3ca98c3bc564e3f46b4b7e14471fdfba1c9
MD5 d800fdd62461179fd537c8c4669dd5e8
SHA1 d44bcee9d9e63d50e8ed42be2ce1a3964870a5aa
SHA512 e0670d9dee7e15520085d269224a4188f09fe753bf3041a9c1f0246771b1928c4fc644e17633a2e08fa02e4064518945afaaa6bdc098ee41288dda42854f5083
MD5 SHA1 SHA512

$R1/script/index.css

SHA256 89d29d525b9f8bb56d2f840b7d7c037c7cb045050e088515c337369756806436
MD5 de1f2ee500fbe8bcf8f4afad0fcc131d
SHA1 cce1dcd0d230173c0917c2d32966fdbea61836ea
SHA512 af02a7259ea367fb6ff1e3d35c274b839c10e666cd4d4e567657add5669d389211dd900d8cf39aacf1315333faaae1877be9ae6db044cd4180f56d41584379f7
MD5 SHA1 SHA512

$R1/script/index.html

SHA256 cd99cbcc87c55ead5a5f6b419fb75c99e20a136f3cb2c4ecfd531c0ceb66810b
MD5 6f44e35e505abf551740619a53bd6034
SHA1 97a24684f8672ff92bae90da19473a557873e2bc
SHA512 db991364462289d4ec196e3bb7ab7e9fc717796ea7664b6467b85e1e7d8cea8f94e9fc25809f757330b4909fd4711ed996fca7e814a8206b97741efd7ee82c02
SSDEEP 48:pEJtNzTZcKxpKtoobr3NYWwSLDEa3ol54s:6VcY4oIdnivH
MD5 SHA1 SHA512 SSDEEP

$R1/script/index.js

SHA256 6eb27a55957dcbeb1b3440f9cb004268c21dbe56493ef4222eedb7e975f43cb6
MD5 1eb9c1ad02dd42e433f950160dbceaab
SHA1 f37bba095108056895444d9c7058ca3c3b50591f
SHA512 79474e515c5bcc59c09023217a5350d9c6c2a40f2414cf280f70aec84a156686e70898f40bb2c260f5927cb26e79bcf224d2e617f06442615d5a6f6898ccadb7
SSDEEP 1536:jNfFm4eWHfI7h3Ip7kZF6Cjz7rgAMkfXIjtbJSZ:nmUzknHXCu
MD5 SHA1 SHA512 SSDEEP

$R1/script/location.html

SHA256 15234b2b8b11dae32c5bb3690daea94e77f2df9c12d5836cae7db8de211bd91b
MD5 427ec659eedeb7cfce01a01eb7538c5c
SHA1 84ae225f6b5703f0c6ade09079f2c90bcd7f888d
SHA512 3b3ab172ddce2ec434a92961ace48dac949ae1d975fcde39fc750da3c7df3c4ca1cd1bfd70f43f2a82568b30328c72f05a75d8046c2f1cba21f296bafcedbfe5
SSDEEP 96:/28XzXAXZXyXALX1LXFXTX2XfFgLAi9QO5Ah2pvAJf/035y37okwWUK9yrv+1DhZ:IpOri9Qjh2pSf8E7o1PK9yaJe8OL6
MD5 SHA1 SHA512 SSDEEP

$R1/script/options.css

SHA256 8a6b1e7b6590e6c623814a098a0626e05104b9e1804254a26c3841c80d121986
MD5 bd40d7785660187236e800a9915fceb6
SHA1 06193272fc238f06cc35e68644be3abd55fd23c2
SHA512 185ac4566b5c564027360576d1cfb6956e03b7c0c853e63b8c39cef73e936d09f7c3d8ceadfc1a7cda25d2f8f9813ba87caed0cd512388db6e6881aa1410ae8b
MD5 SHA1 SHA512

$R1/script/options.html

SHA256 3c0eee433877c0653bebe24c64cf463839b59598c639a60f602e5f4490c21171
MD5 8edc585907d23736b1e26fc98e594ed3
SHA1 5e7b30d1e1a7ed1f1c70534dba260eb9828a4292
SHA512 3c8fb6d2d0690263442490a6f7aa782a5dc0f93ddf983c383d1ea0ba8199882bd7654ab4e8e8d49adb30cb5a2e1144f5b606e0fad7d789bcf5a751cb94e37ac7
SSDEEP 384:5FfEewwN2b9hnZ+XqLwoVnDpn4LfU0oI/V2X2wrX2+5X2zdX29sX2mxX2VtTSXN8:5yhhIqUoV+eVwmOJ+
MD5 SHA1 SHA512 SSDEEP

$R1/script/options.js

SHA256 185d5333723e82029947b64d4691ca1ef8077f47c7f74900f701914a45e08f56
MD5 7ed4cef0e4ea71f3557b801fc3f12bb1
SHA1 e86de2089538bfd381f346cc215be24b911eec94
SHA512 1eca72257c59412a9ab218313af408dc0048001545c6763025166922f203b3bce1911ea2b1ba8f2b665c258c33a250014cc7703f7f0aa959f29a32a43b6a2c63
SSDEEP 1536:1EOqI9VotzZ9OxUXOv0nYT9r05ab5EHsZZKu3dXSpt1h04N+3HOE6l:1EOqI9VizZ9w05abDZSB+3uf
MD5 SHA1 SHA512 SSDEEP

Sharing

General

Malware Config

Signatures

File Explorer