IObit Unlocker.zip
- SHA256 706f89ef0c4bec1946c9606d5bcfa199913815ef450b5b2342c35b066d0b07bd
Password
infected
Overview
overview
7Static
static
1IObit Unlocker.zip
windows7-x64
1IObit Unlocker.zip
windows10-2004-x64
1IObit Unlo...LA.rtf
windows7-x64
4IObit Unlo...LA.rtf
windows10-2004-x64
1IObit Unlo...er.dll
windows7-x64
1IObit Unlo...er.dll
windows10-2004-x64
1IObit Unlo...er.exe
windows7-x64
3IObit Unlo...er.exe
windows10-2004-x64
3IObit Unlo...er.sys
windows7-x64
1IObit Unlo...er.sys
windows10-2004-x64
1IObit Unlo...on.dll
windows7-x64
7IObit Unlo...on.dll
windows10-2004-x64
7IObit Unlo...p.html
windows7-x64
1IObit Unlo...p.html
windows10-2004-x64
1IObit Unlo...00.exe
windows7-x64
7IObit Unlo...00.exe
windows10-2004-x64
7Static task
static1
Behavioral task
behavioral1
Sample
IObit Unlocker.zip
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
IObit Unlocker.zip
Resource
win10v2004-20240226-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
IObit Unlocker/EULA.rtf
Resource
win7-20240508-en
windows7-x64
7 signatures
150 seconds
Behavioral task
behavioral4
Sample
IObit Unlocker/EULA.rtf
Resource
win10v2004-20240426-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral5
Sample
IObit Unlocker/IObitUnlocker.dll
Resource
win7-20240220-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral6
Sample
IObit Unlocker/IObitUnlocker.dll
Resource
win10v2004-20240426-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral7
Sample
IObit Unlocker/IObitUnlocker.exe
Resource
win7-20240508-en
windows7-x64
7 signatures
150 seconds
Behavioral task
behavioral8
Sample
IObit Unlocker/IObitUnlocker.exe
Resource
win10v2004-20240508-en
windows10-2004-x64
9 signatures
150 seconds
Behavioral task
behavioral9
Sample
IObit Unlocker/IObitUnlocker.sys
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
IObit Unlocker/IObitUnlocker.sys
Resource
win10v2004-20240426-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
IObit Unlocker/IObitUnlockerExtension.dll
Resource
win7-20240508-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral12
Sample
IObit Unlocker/IObitUnlockerExtension.dll
Resource
win10v2004-20240426-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral13
Sample
IObit Unlocker/help/help.html
Resource
win7-20240221-en
windows7-x64
4 signatures
150 seconds
Behavioral task
behavioral14
Sample
IObit Unlocker/help/help.html
Resource
win10v2004-20240508-en
windows10-2004-x64
6 signatures
150 seconds
Behavioral task
behavioral15
Sample
IObit Unlocker/unins000.exe
Resource
win7-20240508-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral16
Sample
IObit Unlocker/unins000.exe
Resource
win10v2004-20240508-en
windows10-2004-x64
2 signatures
150 seconds
General
- Target IObit Unlocker.zip
- Size 2.2MB
- Sample240530-rfalnsbb5t
- SHA256 706f89ef0c4bec1946c9606d5bcfa199913815ef450b5b2342c35b066d0b07bd
- MD5 e2e7e0f73ba4fc4a36653f7b4879f8b2
- SHA1 5eb2d25e4440b93a6236405696f1443fe1a5dab6
- SHA512 d22523bfb8b8f7b654e721d3d49565809e55156370ddfe2333ebf93d4024fb5cd3c23e024e0b433de33fa3d9d9ab6bdb0413f951e8058d61356f27601e412ef8
- SSDEEP 49152:DZZZrN+YBWfOM4mZgKEddiNv/S81QfBFQM20ugElqBbEF38RBTdI8ZsHb:FZZx+YBWfOeZgKEddiZ91yvfu+Q8XZs7
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
File Explorer
-
IObit Unlocker.zip.zip 2.2MB
-
IObit Unlocker/EULA.rtf.rtf 74KB
-
IObit Unlocker/IObit Unlocker/IObitUnlocker.ini127B
-
IObit Unlocker/IObit Unlocker/Main.ini26B
-
IObit Unlocker/IObit Unlocker/temp.cds140B
-
IObit Unlocker/IObitUnlocker.dll.dll 71KB
-
IObit Unlocker/IObitUnlocker.exe.exe 2.3MB
-
IObit Unlocker/IObitUnlocker.sys.sys 35KB
-
IObit Unlocker/IObitUnlockerExtension.dll.dll 104KB
-
IObit Unlocker/Language/Arabic.lng6KB
-
IObit Unlocker/Language/ChineseSimp.lng4KB
-
IObit Unlocker/Language/ChineseTrad.lng4KB
-
IObit Unlocker/Language/Czech.lng6KB
-
IObit Unlocker/Language/Danish.lng6KB
-
IObit Unlocker/Language/Dutch.lng7KB
-
IObit Unlocker/Language/English.lng6KB
-
IObit Unlocker/Language/Finnish.lng6KB
-
IObit Unlocker/Language/German.lng7KB
-
IObit Unlocker/Language/Hungarian.lng7KB
-
IObit Unlocker/Language/Italian.lng7KB
-
IObit Unlocker/Language/Japanese.lng5KB
-
IObit Unlocker/Language/Polish.lng6KB
-
IObit Unlocker/Language/Russian.lng7KB
-
IObit Unlocker/Language/Spanish.lng7KB
-
IObit Unlocker/Language/Swedish.lng6KB
-
IObit Unlocker/Language/Turkish.lng7KB
-
IObit Unlocker/SpecialDir.ini303B
-
IObit Unlocker/fav.ico5KB
-
IObit Unlocker/help/help.html.html 3KB
-
IObit Unlocker/help/img/1.png.png 85KB
-
IObit Unlocker/help/img/2.png.png 70KB
-
IObit Unlocker/help/img/3.png.png 128KB
-
IObit Unlocker/help/img/4.png.png 37KB
-
IObit Unlocker/help/img/5.png.png 116KB
-
IObit Unlocker/unins000.dat36KB
-
IObit Unlocker/unins000.exe.exe 1.1MB
-
IObit Unlocker/unins000.msg22KB
IObit Unlocker/EULA.rtf
- SHA256 c7fa074242fd91f12130fef94fd78904e292ddf7ddcb585c3e46dd4614e76aeb
- MD5 57280a3302278e97afa8739832c1a3f2
- SHA1 60883044ffeb965ff24b78a62b6c0db3262c08a7
- SHA512 4edf43138ed1c778581833739450513ab4258cce5307b83c0857855721ad34bee8a4d063a5ecec636c095c5f478e13a71b3ae33117d6e839cf82be06b0ed6d3e
- SSDEEP 384:UgDjCjpsoE9K6mGmKlmr2Xre+D7hA1mlJawZqsSX8bA4twEugJWhGnzR9OTmEfEv:UgDjQyOwtD7m1eUL4JJMGt9QZFnygU
- MD5 SHA1 SHA512 SSDEEP
IObit Unlocker/IObit Unlocker/IObitUnlocker.ini
- SHA256 869adc1c9541c23440655933252d394d852ea1edf80be0cf16573dfa74d2f903
- MD5 31c59b1f44a7fe642c69f2d55c15ee9f
- SHA1 eb26b2164797360d34505c4339d4b38963d887bc
- SHA512 1626d332f919856878a4a81d0b68a3a71a95282aa5e287cff06510d0376104849f8870495947025b1a6d1b09110c902ee1e3bdbf382e024e3036532202a4347d
- MD5 SHA1 SHA512
IObit Unlocker/IObit Unlocker/Main.ini
- SHA256 63ee4e87cf0edc49c52173a904be985c461784795e3cc8e0cf736d03d58c4740
- MD5 40e41706d00324f625b4079afeda2e28
- SHA1 43f3dff89fbdaf711f5c32d11ea036c726b3d4b0
- SHA512 ca17bbca3c6f330d554a810083ae441c0ad823421842596d0309f190759256689f41072097b4235e65a308529b813c911dbda5c1aa8f6c36a603a21de9b89331
- MD5 SHA1 SHA512
IObit Unlocker/IObit Unlocker/temp.cds
- SHA256 256e03dc42e82526cc3d654f159eabdf723bc36feb975a37c5617be8daad281f
- MD5 ed130526ddedc85269d7ade2863457cb
- SHA1 970d4c039ad7734c3e34815f747d932ce3b62188
- SHA512 64432622a3547db6cf63b64a765aaee5985505995e1f1d8f400d964a787b7d3159f0fbd0928b0b2665f300dbf60b2c5f3a91fbf50cf41eb2cf10040a9c8a76ec
- MD5 SHA1 SHA512
IObit Unlocker/IObitUnlocker.dll
- IMPHASH c34051ad87a0b7dd2140c439667a6cf3
- SHA256 5f0bc7d75f32981e0e704c2217ed423c9a355f19515a1603103cc55cf9d3b901
- MD5 e1a4327af3cd8ca866996f472f0ff93a
- SHA1 cfea8426ef8fab4136055401152821a19f908d45
- SHA512 745f1ec495869d2fa2722ecadcaa27ec1f005742c69110802e9e1d7600d680d077e9762a400799e38003a4671a2590ecf1c480c2e7586039ebcce6ed36662280
- SSDEEP 768:BxKNeWSsRLrVmxJG0Yv3uVKvtbQuIkuU+W2oM/hIYFHxfAKfxKn2DEDSUwQNyuJO:ugr2Lr071OUKFOk12oilFHyKyXMuJwIG
- MD5 SHA1 SHA512 SSDEEP
Password
infected
PE Signature issue
Digest
N/A
Digest Algorithm
N/A
PE Digests Matches
Not matched
Trusted
Not trusted
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=IObit Information Technology,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=IObit Information Technology,L=Chengdu,ST=Sichuan,C=CN
Serial Number
11:ca:da:f2:9d:a4:c3:cb:11:3b:f1:87:7b:12:01:03
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jan 15, 2013 - Feb 14, 2016
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
1
Major OS version
5
Entry point
11069
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\Projects\RarelyUsed\Unlocker\IObitUnlocker\Release\IObitUnlocker.pdb
kernel32
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
HeapDestroy
WriteConsoleW
SetStdHandle
LoadLibraryW
WriteFile
DeviceIoControl
SetLastError
CreateFileW
CloseHandle
GetModuleFileNameW
Sleep
GetLastError
GetProcAddress
GetProcessHeap
GetModuleHandleW
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
RaiseException
ExitProcess
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
RtlUnwind
LCMapStringW
MultiByteToWideChar
GetStringTypeW
IsProcessorFeaturePresent
SetFilePointer
GetConsoleCP
GetConsoleMode
FlushFileBuffers
user32
GetWindowTextW
EnumWindows
SendMessageW
advapi32
StartServiceW
QueryServiceStatus
DeleteService
CloseServiceHandle
ChangeServiceConfig2W
ChangeServiceConfigW
OpenServiceW
CreateServiceW
OpenSCManagerW
ControlService
DriverDumpInfo
DriverEndSelf
DriverStart
DriverStop
DriverUninstall
DriverUnlockFile
Name
.text
Size
40KB
Virtual Size
39KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=95, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=7, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=87, id=1, productName=Unmarked objects,
count=40, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=7, id=175, version=40219,
count=17, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=151,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
IObit Unlocker/IObitUnlocker.exe
- IMPHASH 8b62844b01ba42007507b1ef1f6825ce
- SHA256 0a507a553010c19369f17b649c5ffe6060216480059062ff75241944cf729bd7
- MD5 9303575597168ef11790500b29279f56
- SHA1 bfab0ea30c5959fda893b9ddc6a348a4f47f8677
- SHA512 8e9f7a98c0a0c90643403d4abccd8736d12ba6bef83679ccfd626e52e86ed7db6fe558c6ec48a88cf32967c00d66131f550ac64cc98cd73fd477f165694e68b0
- SSDEEP 24576:8S/WgTT/eC4PwRXrAREEkyuCmLMAefac2mhPiT8b2DeXYJAmzQDFQEkXAFxZSD1V:zTT/eC2wpBBseA/FsZDW8nTeCPGXOy4
- MD5 SHA1 SHA512 SSDEEP
Password
infected
PE Signature issue
Digest
N/A
Digest Algorithm
N/A
PE Digests Matches
Not matched
Trusted
Not trusted
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=IObit Information Technology,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=IObit Information Technology,L=Chengdu,ST=Sichuan,C=CN
Serial Number
11:ca:da:f2:9d:a4:c3:cb:11:3b:f1:87:7b:12:01:03
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jan 15, 2013 - Feb 14, 2016
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
0
Major OS version
5
Entry point
1658672
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
oleaut32
SysFreeString
SysReAllocStringLen
SysAllocStringLen
CreateErrorInfo
GetErrorInfo
SetErrorInfo
SysFreeString
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopy
VariantClear
VariantInit
advapi32
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
SetSecurityDescriptorDacl
RegSetValueExA
RegQueryValueExA
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyExA
RegOpenKeyExW
RegFlushKey
RegEnumKeyA
RegDeleteValueA
RegCreateKeyExA
RegCreateKeyExW
RegCloseKey
InitializeSecurityDescriptor
GetUserNameA
FreeSid
AllocateAndInitializeSid
user32
GetKeyboardType
LoadStringW
MessageBoxA
CharNextW
CreateWindowExA
CreateWindowExW
WindowFromPoint
WaitMessage
UpdateWindow
UnregisterClassW
UnhookWindowsHookEx
TranslateMessage
TranslateMDISysAccel
TrackPopupMenu
SystemParametersInfoW
ShowWindow
ShowScrollBar
ShowOwnedPopups
SetWindowRgn
SetWindowsHookExW
SetWindowTextA
SetWindowTextW
SetWindowPos
SetWindowPlacement
SetWindowLongA
SetWindowLongW
SetTimer
SetScrollRange
SetScrollPos
SetScrollInfo
SetRect
SetPropW
SetParent
SetMenuItemInfoW
SetMenu
SetForegroundWindow
SetFocus
SetCursor
SetClipboardData
SetClassLongW
SetCapture
SetActiveWindow
SendMessageTimeoutA
SendMessageA
SendMessageW
ScrollWindow
ScreenToClient
RemovePropW
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageW
RegisterClipboardFormatW
RegisterClassA
RegisterClassW
RedrawWindow
PtInRect
PostThreadMessageA
PostThreadMessageW
PostQuitMessage
PostMessageA
PostMessageW
PeekMessageA
PeekMessageW
OpenClipboard
OffsetRect
MsgWaitForMultipleObjectsEx
MsgWaitForMultipleObjects
MoveWindow
MessageBoxA
MessageBoxW
MessageBeep
MapWindowPoints
MapVirtualKeyW
LoadStringW
LoadKeyboardLayoutW
LoadImageA
LoadIconW
LoadCursorW
LoadBitmapW
KillTimer
IsZoomed
IsWindowVisible
IsWindowUnicode
IsWindowEnabled
IsWindow
IsRectEmpty
IsIconic
IsDialogMessageA
IsDialogMessageW
IsChild
InvalidateRect
IntersectRect
InsertMenuItemW
InsertMenuW
InflateRect
GetWindowThreadProcessId
GetWindowTextA
GetWindowTextW
GetWindowRgn
GetWindowRect
GetWindowPlacement
GetWindowLongW
GetWindowDC
GetTopWindow
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSysColor
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetPropW
GetParent
GetWindow
GetMessagePos
GetMessageA
GetMessageW
GetMenuStringW
GetMenuState
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
GetMenu
GetLastActivePopup
GetKeyboardState
GetKeyboardLayoutNameW
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyState
GetKeyNameTextW
GetIconInfo
GetForegroundWindow
GetFocus
GetDlgItem
GetDesktopWindow
GetDCEx
GetDC
GetCursorPos
GetCursor
GetClipboardData
GetClientRect
GetClassNameA
GetClassNameW
GetClassLongW
GetClassInfoW
GetCapture
GetActiveWindow
FrameRect
FindWindowExW
FindWindowW
FillRect
EnumWindows
EnumThreadWindows
EnumChildWindows
EndPaint
EnableWindow
EnableScrollBar
EnableMenuItem
EmptyClipboard
DrawTextExW
DrawTextA
DrawTextW
DrawMenuBar
DrawIconEx
DrawIcon
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageA
DispatchMessageW
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DeleteMenu
DefWindowProcA
DefWindowProcW
DefMDIChildProcW
DefFrameProcW
CreatePopupMenu
CreateMenu
CreateIcon
CopyImage
CloseClipboard
ClientToScreen
ChildWindowFromPoint
CheckMenuItem
CharUpperBuffW
CharToOemW
CharNextW
CharLowerBuffW
CharLowerW
CallWindowProcW
CallNextHookEx
BringWindowToTop
BeginPaint
AttachThreadInput
AdjustWindowRectEx
ActivateKeyboardLayout
kernel32
GetACP
Sleep
VirtualFree
VirtualAlloc
GetSystemInfo
GetVersion
GetCurrentThreadId
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenW
lstrcpynW
LoadLibraryExW
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetLastError
GetCommandLineW
FreeLibrary
FindFirstFileW
FindClose
ExitProcess
ExitThread
CreateThread
CompareStringW
WriteFile
UnhandledExceptionFilter
SetFilePointer
SetEndOfFile
RtlUnwind
ReadFile
RaiseException
GetStdHandle
GetFileSize
GetFileType
CreateFileW
CloseHandle
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleW
lstrlenW
lstrcpyW
lstrcmpA
lstrcmpW
WritePrivateProfileStringW
WriteFile
WideCharToMultiByte
WaitForSingleObject
WaitForMultipleObjectsEx
VirtualQueryEx
VirtualQuery
VirtualProtect
VirtualFree
VirtualAlloc
UnmapViewOfFile
TerminateThread
TerminateProcess
SystemTimeToFileTime
SwitchToThread
SuspendThread
Sleep
SizeofResource
SignalObjectAndWait
SetUnhandledExceptionFilter
SetThreadPriority
SetThreadLocale
SetLastError
SetFilePointer
SetFileAttributesA
SetFileAttributesW
SetEvent
SetErrorMode
SetEndOfFile
ResumeThread
ResetEvent
RemoveDirectoryA
ReleaseMutex
ReadProcessMemory
ReadFile
RaiseException
QueryPerformanceFrequency
QueryPerformanceCounter
OutputDebugStringW
OpenProcess
OpenFileMappingA
OpenFileMappingW
MultiByteToWideChar
MulDiv
MapViewOfFile
LockResource
LocalSize
LocalFree
LocalAlloc
LoadResource
LoadLibraryExA
LoadLibraryW
LeaveCriticalSection
IsBadReadPtr
InitializeCriticalSection
GlobalUnlock
GlobalReAlloc
GlobalMemoryStatus
GlobalHandle
GlobalLock
GlobalFree
GlobalFindAtomW
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomW
GetWindowsDirectoryA
GetWindowsDirectoryW
GetVolumeInformationW
GetVersionExA
GetVersionExW
GetVersion
GetTimeZoneInformation
GetTickCount
GetThreadPriority
GetThreadLocale
GetThreadContext
GetTempPathA
GetTempPathW
GetSystemTime
GetSystemDirectoryW
GetStdHandle
GetProcAddress
GetPrivateProfileStringW
GetPriorityClass
GetModuleHandleA
GetModuleHandleW
GetModuleFileNameA
GetModuleFileNameW
GetLogicalDriveStringsW
GetLocaleInfoA
GetLocaleInfoW
GetLocalTime
GetLastError
GetFullPathNameW
GetFileTime
GetFileSize
GetFileAttributesA
GetFileAttributesW
GetExitCodeThread
GetEnvironmentVariableW
GetDriveTypeW
GetDiskFreeSpaceA
GetDiskFreeSpaceW
GetDateFormatW
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetComputerNameA
GetComputerNameW
GetCommandLineA
GetCommandLineW
GetCPInfo
FreeResource
InterlockedIncrement
InterlockedExchangeAdd
InterlockedExchange
InterlockedDecrement
InterlockedCompareExchange
FreeLibrary
FormatMessageA
FormatMessageW
FindResourceA
FindResourceW
FindNextFileA
FindNextFileW
FindFirstFileA
FindFirstFileW
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FileTimeToDosDateTime
ExpandEnvironmentStringsA
ExitThread
ExitProcess
EnumCalendarInfoA
EnterCriticalSection
DuplicateHandle
DeleteFileA
DeleteFileW
DeleteCriticalSection
CreateThread
CreateRemoteThread
CreateProcessA
CreateProcessW
CreatePipe
CreateMutexA
CreateMutexW
CreateFileMappingA
CreateFileMappingW
CreateFileA
CreateFileW
CreateEventW
CreateDirectoryA
CreateDirectoryW
CopyFileA
CompareStringW
CloseHandle
Beep
RtlUnwind
Sleep
GetLongPathNameW
msimg32
AlphaBlend
gdi32
UnrealizeObject
TextOutA
TextOutW
StretchDIBits
StretchBlt
StartPage
StartDocA
SetWindowOrgEx
SetWinMetaFileBits
SetViewportOrgEx
SetTextColor
SetStretchBltMode
SetRectRgn
SetROP2
SetPixel
SetMapMode
SetEnhMetaFileBits
SetDIBits
SetDIBColorTable
SetBrushOrgEx
SetBkMode
SetBkColor
SelectPalette
SelectObject
SelectClipRgn
SaveDC
RoundRect
RestoreDC
ResizePalette
Rectangle
RectVisible
RealizePalette
PtInRegion
Polyline
Polygon
PlayEnhMetaFile
PatBlt
OffsetRgn
MoveToEx
MaskBlt
LineTo
IntersectClipRect
GetWindowOrgEx
GetWinMetaFileBits
GetViewportOrgEx
GetTextMetricsW
GetTextFaceA
GetTextExtentPoint32A
GetTextExtentPoint32W
GetTextColor
GetSystemPaletteEntries
GetStockObject
GetRgnBox
GetROP2
GetPixel
GetPaletteEntries
GetObjectW
GetNearestPaletteIndex
GetNearestColor
GetEnhMetaFilePaletteEntries
GetEnhMetaFileHeader
GetEnhMetaFileBits
GetDeviceCaps
GetDIBits
GetDIBColorTable
GetDCOrgEx
GetCurrentPositionEx
GetCurrentObject
GetClipRgn
GetClipBox
GetBrushOrgEx
GetBitmapBits
GdiFlush
FrameRgn
FillPath
ExtTextOutW
ExcludeClipRect
EndPath
EndPage
EndDoc
DeleteObject
DeleteEnhMetaFile
DeleteDC
CreateSolidBrush
CreateRectRgnIndirect
CreateRectRgn
CreatePolygonRgn
CreatePenIndirect
CreatePen
CreatePatternBrush
CreatePalette
CreateHalftonePalette
CreateFontIndirectW
CreateFontA
CreateFontW
CreateDIBitmap
CreateDIBSection
CreateDCW
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
CopyEnhMetaFileW
CombineRgn
BitBlt
BeginPath
version
VerQueryValueA
VerQueryValueW
GetFileVersionInfoSizeA
GetFileVersionInfoSizeW
GetFileVersionInfoA
GetFileVersionInfoW
wsock32
WSACleanup
WSAStartup
gethostbyname
socket
setsockopt
sendto
send
select
recvfrom
recv
inet_addr
htons
connect
closesocket
bind
shell32
ShellExecuteExA
ShellExecuteA
ShellExecuteW
DragQueryFileW
DragFinish
DragAcceptFiles
SHGetSpecialFolderPathW
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetMalloc
ole32
CreateStreamOnHGlobal
OleUninitialize
OleInitialize
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
CoUninitialize
CoInitialize
CLSIDFromString
comctl32
InitializeFlatSB
FlatSB_SetScrollProp
FlatSB_SetScrollPos
FlatSB_SetScrollInfo
FlatSB_GetScrollPos
FlatSB_GetScrollInfo
_TrackMouseEvent
ImageList_GetImageInfo
ImageList_SetIconSize
ImageList_GetIconSize
ImageList_Write
ImageList_Read
ImageList_GetDragImage
ImageList_DragShowNolock
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
ImageList_EndDrag
ImageList_BeginDrag
ImageList_Copy
ImageList_Remove
ImageList_DrawEx
ImageList_AddMasked
ImageList_Replace
ImageList_Draw
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_Add
ImageList_SetImageCount
ImageList_GetImageCount
ImageList_Destroy
ImageList_Create
InitCommonControls
comdlg32
PrintDlgW
GetSaveFileNameA
GetOpenFileNameW
iobitunlocker
DriverUnlockFile
DriverDumpInfo
DriverStop
DriverStart
madTraceProcess
Name
.text
Size
1.6MB
Virtual Size
1.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.itext
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
48KB
Virtual Size
48KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.bss
Size
Virtual Size
31KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
17KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
84B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
Virtual Size
280B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
105KB
Virtual Size
104KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
581KB
Virtual Size
580KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
IObit Unlocker/IObitUnlocker.sys
- IMPHASH 0627ee7f7d86e0c552a7bc8ee31a1b18
- SHA256 2b33df9aff7cb99a782b252e8eb65ca49874a112986a1c49cd9971210597a8ae
- MD5 d7b749051da5fb4604f4141f19c47660
- SHA1 288daefd1ce65fb01011dc8a64491111207d3965
- SHA512 1d0ac1854eb6f2a5d2d90424bc5b9dd989ad61a2f3e87d6e9ca97a7f5f7c0d38b387cfd3e16b14992ea263b5d4194b0d38b8b8a6f5b1d0829a6932fde127c193
- SSDEEP 768:eWspdre2ANTcdAbIheysJAzCbACWUKpS5eX3k5Jj:P2OICJJ/gS5eHkb
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
3a:54:be:5a:75:46:8b:20:ef:8e:18:2a:7a:f6:e6:f3:14:a5:d6:33
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=IObit Information Technology,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=IObit Information Technology,L=Chengdu,ST=Sichuan,C=CN
Chains
Sep 30, 2013
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=IObit Information Technology,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=IObit Information Technology,L=Chengdu,ST=Sichuan,C=CN
Serial Number
11:ca:da:f2:9d:a4:c3:cb:11:3b:f1:87:7b:12:01:03
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jan 15, 2013 - Feb 14, 2016
Subject
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Serial Number
61:19:93:e4:00:00:00:00:00:1c
Issuer
CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Feb 22, 2011 - Feb 22, 2021
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
1
Major OS version
6
Entry point
41060
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
d:\projects\rarelyused\unlocker\iobitunlocker\driver\objfre_win7_amd64\amd64\IObitUnlocker.pdb
ntoskrnl.exe
ExAllocatePoolWithTag
IoDeleteSymbolicLink
ExFreePoolWithTag
IoDeleteDevice
IofCompleteRequest
IoCreateSymbolicLink
IoCreateDevice
_wcsnicmp
ZwReadFile
IoGetRelatedDeviceObject
MmGetSystemRoutineAddress
KeInitializeEvent
ExInterlockedPopEntryList
KeDelayExecutionThread
IoFileObjectType
ZwWaitForSingleObject
ZwClose
ObReferenceObjectByHandle
KeWaitForSingleObject
RtlCompareUnicodeString
IoAllocateIrp
ObfDereferenceObject
ZwWriteFile
DbgPrint
IofCallDriver
_wcsicmp
PsGetProcessPeb
PsLookupProcessByProcessId
ZwQuerySymbolicLinkObject
RtlInitUnicodeString
KeSetEvent
IoCreateFile
ZwQuerySystemInformation
ZwOpenSymbolicLinkObject
KeUnstackDetachProcess
ObQueryNameString
wcsrchr
ZwQueryDirectoryFile
_vsnwprintf
ZwDuplicateObject
IoFreeIrp
ZwOpenProcess
MmIsAddressValid
ZwTerminateProcess
ZwQueryInformationFile
ExInterlockedPushEntryList
KeStackAttachProcess
KeBugCheckEx
__C_specific_handler
Name
.text
Size
20KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
368B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1024B
Virtual Size
588B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
INIT
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
880B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
36B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=54, id=1, productName=Unmarked objects,
count=3, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=5, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=137, version=30729,
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
IObit Unlocker/IObitUnlockerExtension.dll
- IMPHASH d69e6b8bbc40255e61b779352d2304f0
- SHA256 863a474ee39b88f933cd4d861faf1a6feaea2ecc1766ea3bee43fca41ab75e21
- MD5 9f7cf4f0d961fce510c50c90c5eb8816
- SHA1 95304db70ef78f183f8430ee1b35035b64a0b5b5
- SHA512 7e42c76b8c9b58efd33088a72e1a81b1d5a5c4097ad0ae7abfba4dd7d35e6676c3dbd34e4b28c3a0bce1c82e14afda7f3c423c1cd8c0ada7e7f412b283922e17
- SSDEEP 1536:u9TxawWns26lOlQb1tbrdzIu/w0C2m5XLVI+O1mX0Qqp5WpxKXB19:vnKOubHf5Iu40C1ROMkhp5Wpx8B19
- MD5 SHA1 SHA512 SSDEEP
Password
infected
PE Signature issue
Digest
N/A
Digest Algorithm
N/A
PE Digests Matches
Not matched
Trusted
Not trusted
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=IObit Information Technology,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=IObit Information Technology,L=Chengdu,ST=Sichuan,C=CN
Serial Number
11:ca:da:f2:9d:a4:c3:cb:11:3b:f1:87:7b:12:01:03
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jan 15, 2013 - Feb 14, 2016
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
2
Major OS version
5
Entry point
30760
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
f:\yunjun\Bin\ShellExtension\x64\IObitUnlockerExtension.pdb
kernel32
GetPrivateProfileStringW
FindClose
FindFirstFileW
lstrcatW
lstrlenW
GetLastError
CloseHandle
GetProcAddress
GetModuleHandleW
lstrcmpiW
CreateFileW
WriteFile
GetVersionExW
DeleteFileW
FreeLibrary
lstrcpyW
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
GetModuleFileNameW
EnterCriticalSection
LeaveCriticalSection
SetThreadLocale
GetThreadLocale
GlobalLock
OutputDebugStringW
GlobalUnlock
GetFileAttributesW
GetLogicalDriveStringsW
GetDriveTypeW
GetVolumeInformationW
DeleteCriticalSection
InitializeCriticalSection
MultiByteToWideChar
RaiseException
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringA
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
RtlUnwindEx
HeapAlloc
HeapFree
RtlPcToFileHeader
RtlLookupFunctionEntry
GetCurrentThreadId
FlsSetValue
GetCommandLineA
EncodePointer
DecodePointer
FlsGetValue
FlsFree
SetLastError
FlsAlloc
Sleep
HeapSize
ExitProcess
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
GetStdHandle
GetModuleFileNameA
HeapSetInformation
HeapCreate
HeapDestroy
HeapReAlloc
SetHandleCount
GetFileType
GetStartupInfoA
user32
InsertMenuW
CharNextW
LoadImageW
SetMenuItemBitmaps
gdi32
DeleteObject
advapi32
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegEnumKeyExW
shell32
ShellExecuteW
DragQueryFileW
SHGetSpecialFolderPathW
ole32
ReleaseStgMedium
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
StringFromGUID2
CoTaskMemRealloc
oleaut32
SysFreeString
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
SysStringLen
shlwapi
StrCpyW
StrCatW
DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
Name
.text
Size
55KB
Virtual Size
54KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
23KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=149, productName=VS2008 build 21022, version=21022,
count=2, id=109, productName=VS2005 build 50727, version=50727,
count=17, id=123, productName=VS2005 build 50727, version=50727,
count=134, id=1, productName=Unmarked objects,
count=49, id=132, productName=VS2008 build 21022, version=21022,
count=77, id=131, productName=VS2008 build 21022, version=21022,
count=1, id=146, productName=VS2008 build 21022, version=21022,
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
IObit Unlocker/Language/Arabic.lng
- SHA256 699f38f71da3cff1d7224f3c3701707ba287fcf025ca24e8fbf55a1217145e77
- MD5 3b6e5d586108290ec90b7ee8aa09a672
- SHA1 f5a48251313a68a0d5fe08136707af425911691a
- SHA512 121269585ac4e2d9f95d5dc97b216f24f8104455db8bd76f803edc46b45cf37b84565e40280ac2cebf83e41d92cbc83cf0f233875dd59ca1c1f57c931f97e5c3
- SSDEEP 96:rR374/idLBJavABxXO7boSJpxTyDUo5UijDJguxhwSJr7V//EJUW5GAZcE8E6IjN:d370i3JavABIKfJgyhPXOmW95jN
- MD5 SHA1 SHA512 SSDEEP
IObit Unlocker/Language/ChineseSimp.lng
- SHA256 fa24efbe6df04ac3af19e7e444caebb0ec3c71997aa5c648f91ce7c87dda4eb7
- MD5 b57e51a5bf610b47005bb03a9357f3ad
- SHA1 77f217553c5b33910f4cdc4ae946f7c36c9add38
- SHA512 f9bf1bc24157e78da2b94fb46321bdca06639d74a66470eac93fd62c0e03706403052cb012e458a60784faf4f8032070e69a62e7b5a65275ffb9698d1afe6ea7
- SSDEEP 96:rRx+2w3E+nMOav9DZ7Akaviuk/Abro+Jp8T2y+5XBLm6Ojhlp7k1UrXDjHyBep6R:dxI3EVOav9D54TUEel6O1l15H/xfu
- MD5 SHA1 SHA512 SSDEEP
IObit Unlocker/Language/ChineseTrad.lng
- SHA256 d467dd9bc2ca9d4c5633b001615e2d6c127a84f16c7f3e95eb76f4549d69b20c
- MD5 ded65624ae87dc84494f625596e58c2d
- SHA1 6d4e7fc5bdfeac77d9a35a5dab34a8750728b78a
- SHA512 ba979453dccb3d07fb3913d9bc1243330aa8ee4cb857043d281be48e471f28dbf296b564c1d02336b089c0e8e712ba131245cfbb26896a458efc67829ba79bfc
- SSDEEP 96:rRHSG1pbuak9DMvhuK/gb9o7eJpyTydOLg7ykaRwP5BJ7vmUnd8Ll6EOQaj8w:dHSGfbuak9Dc4Kke3wXV1WOnD
- MD5 SHA1 SHA512 SSDEEP
IObit Unlocker/Language/Czech.lng
- SHA256 ef6b496609073be75cf44941126d4f79920711ec8c4ef2aded9d4b1dbf7c10a8
- MD5 542118a2cc938ac82a922abb171a6df5
- SHA1 c3ef3b652555fbc79ba1d794125afe0ee190b8bd
- SHA512 31a9b6dd84e9053d4410678d74b9f2d0dff236eb2c207b6529e5e3a23bae8f8437579508545eb1469c3ef730cf03de8e3dce58e7e0513959334403bc372f1986
- SSDEEP 96:rRYvG0PyjNDapRjmU5W0e8ofJpVxTyOp3z5hnZbc9qUpWX/7Oo+0VIK3Luu2Hfuw:dYvG06jNDaPPwFt7DPIhfoAx
- MD5 SHA1 SHA512 SSDEEP
IObit Unlocker/Language/Danish.lng
- SHA256 184f0c95f5d3433c0d5845099fc1da5d7e196ebaad993f2cd49d237cec34d292
- MD5 4c46432a05ce09bb563f48437a395f70
- SHA1 ea7ff52387b973d29a9cd03d62593369fc96b765
- SHA512 ca4e5f6e472b32a17a3345bfcadc5eed8861b7d216bcecb02a1d8f03ed62fc10fe0e0a311ff8c73ed7b58b1d5afe0d2175936e956d734a3d16e7af9f6a96eebf
- SSDEEP 96:rROmT9mDV1g8r4iakjgiModJpkTyOIugAYdf2RqdDG37QX4xi+5+CnEStChGEwfD:dOBD3IiaD6wQ2wogCeE
- MD5 SHA1 SHA512 SSDEEP
IObit Unlocker/Language/Dutch.lng
- SHA256 ab2752577faa9ff94e1af58c5819e1c9e95c3d77eb966082bda7b7651886ed3e
- MD5 74fcffdda39abbc429741816b919a841
- SHA1 61a1d03f2512771ac0d8ccbf2ef60ced97bc0e47
- SHA512 06b53ad4f95b562fe6ea56e294dc2e9f04f227ac457f3cf71c7986e42a381ad1977c65f628a56a0e71e1eb208ac63165ea7880d70ae1a8a79ea5ff4320e2c014
- SSDEEP 192:dxfvm+zCJaSdnQZxeGUzEjpD9JPmBe85w8PjFj:rvm+OUSdnQZxeGUoNDjPmBe85wCj
- MD5 SHA1 SHA512 SSDEEP
IObit Unlocker/Language/English.lng
- SHA256 905ff04266f76618e0a369332594b49422ecc23f707e424655a55ca279cb7c62
- MD5 083620520c4fb96da4eb5c102a3ea84e
- SHA1 9df10ac766a2879b4c9f3c6f258caf48cda252d8
- SHA512 51e294ef9a5a2b9861b0252cfd635b05b46336e9eb2b02477819f56cfbec7d5cc0176557a6389dc48dfcb9bc6f8440be5b8734410dc6d205c2d47f6ac27d128e
- SSDEEP 96:rRaovg4Y5CA3aOTbdYAhpBuogZJpv5TyOnmuwn4zVG41qfuUvifzgC4lvG7Y8HCR:daovg4+C4aO+LD/H2U4liYbo93O6E
- MD5 SHA1 SHA512 SSDEEP
IObit Unlocker/Language/Finnish.lng
- SHA256 0a9c0405f08aa930a2e82fbe2ae80a917423ed379a2b9eeb3b62109f5aca2443
- MD5 cde455a6ba3c8534a4a5acc8ea0de3a3
- SHA1 3cf44c592cb4ce4be9954ef91a571b7a2355e35f
- SHA512 bb8d2b8612a351286ce27fd6a58023c9145991b9a34cb5f7e9a2be45a8624aec09dad25700abae973484865ec4316792627047485809ad621f5f533692363f8f
- SSDEEP 192:dgI6o2mHmna4iZCCAaJBYHJve7NDMIKRc:K+mavfAz2
- MD5 SHA1 SHA512 SSDEEP
IObit Unlocker/Language/German.lng
- SHA256 bc7d3c4f581a3fd12be1e2d59686780bd94d5fc383c65518dd89fb6cad111c98
- MD5 2436b14b3712922f225427425009ba44
- SHA1 8f896ffa283a77a6911a150303f12d067aad72eb
- SHA512 94d346a3de795a4cace50efe46106448a69bc173534b4610e8ab831bbea158556218694bbeb6c93dd2a55e7932b0d49f02bd3410847ab048ac7e90e788f1d79e
- SSDEEP 192:dN6S+utiwIaflyg+0Esch+qe/ZkZ2DgU86:PH+qiw1flyg+0nch+V/ZkZ2l86
- MD5 SHA1 SHA512 SSDEEP
IObit Unlocker/Language/Hungarian.lng
- SHA256 33ba3481f4dd39aaa847e41ea777e30395a5606373abc511106e67cc51d0617c
- MD5 65f6e74b7c0ca1c64bd9c32bb8531fff
- SHA1 6bc2c9205182fd4c5d25cbe2ef5ed7131356525f
- SHA512 04ae37bfc41f35b1974fb5f8bbb5e523a0b1e1a1f6ecefcd37238a374567f15c24cbcddb78aed649c7cf3687177ca038c1bc2daa819bf1b0d80c6f4e013b5d7a
- SSDEEP 96:rRk32hDqRwD/Sa9VaVY+0ne63oMJpmTyOrhq5Zf6J9U/bM7BdGy6LmpcFjFtGNFz:dU8qRwD/SaHdiiYU/bwSJFjFENPs28JA
- MD5 SHA1 SHA512 SSDEEP
IObit Unlocker/Language/Italian.lng
- SHA256 d57caecfee173e3fd679e4fecdafb8d736f9c009a881bade375486928ca2ca48
- MD5 71fe34913ae027c56ab88dc718c2eed5
- SHA1 2e6023633d311a1ffb151712639b48d59797dee5
- SHA512 ea073db529b990be990f87cf1055c00c8ceeb41725c4a32266c9be3e468a27274b3fc0feb94492e6a9db20fbbe8ef059af173415b1eb9c7a0368a4d9d30a1c09
- SSDEEP 96:rRDgSk02YuxlaHPDKPDo/XgxvDBwTxMo4DJpIF5TyOjOixf/GqVXceJ7VDzE8/Uo:dDgF02RlavDSDwQ5DsX7XZXtt8rLmr
- MD5 SHA1 SHA512 SSDEEP
IObit Unlocker/Language/Japanese.lng
- SHA256 651f189e637587821dbbfe7ddbef7f2869448ad9fbb1cbe0ec4afc2c81c4672d
- MD5 7ec91418117a44939dc92d65e3359d03
- SHA1 81e57bebe8b7d37617e2dddda97575a083776887
- SHA512 5ff00ce99dce870ece27120c5470112c6d319f33630217496fb1b48ee425a4165242185341648e5b49059d4b0ea2ad6b851d5411551fde74f3b2d5fb59057d41
- SSDEEP 96:rR4ygW2CFPaK7Tv8uKR/tbSo8RJpzvTdleGHfCVe6E8+fE7wJUYia6kgEv4Izw:d1gW2C5aKH9K5Rul778+fI/aDHE
- MD5 SHA1 SHA512 SSDEEP
IObit Unlocker/Language/Polish.lng
- SHA256 d24f9b863e8d0d11b6bfa679b92526f9bd509bfaa96364ea9388fb1ea5123133
- MD5 05e11996cd6c94dbd0ab0f7f1d2876b0
- SHA1 f5da0cc5c96049030e3e2e553c6f6123a1e6bd66
- SHA512 c69dfe534c8fdefb9dbd4b8d3ab13c9ade884f3c4e6a18f32b8f5dd746214c4c47288c93b0a4baed0c53c5841f9a32b45b1696215978b33e8cbc3e50fdc052ca
- SSDEEP 96:rRKvUtxVSr8N+aaVmAMFnoEJpneTyOvgsnBGqC//LZl77BxXDLT9tQdW+p9P6Gyi:dKvkxVSrEraPzq9lnDLhtQ82PTfqWD
- MD5 SHA1 SHA512 SSDEEP
IObit Unlocker/Language/Russian.lng
- SHA256 84bfadabf7893eec7123b5f1ca41394d3a69d237b5f355f3f2ce29f1854888d8
- MD5 f3601cd1c2fecc1b7190cbd724ced684
- SHA1 8cf1e731050aee6afcbba0f32c81ed7578f0f41e
- SHA512 06e7c202036d5403e9da27884d04d216bd6b1b92b8d8b0a1caf105722d4668c2727be91fa5c8cacdf91aa838ec7408d5c0354476945e2736ce3437a360b7dd0e
- SSDEEP 96:rRuK6ylCauTV1LM9tgAT/4TT7wTJMTAoY4Jp5Ty9w6g0hTqBTrDozW7DMXSUB9yN:duJywauTV1w9XTyTUTmT4CQkTtD2Hy73
- MD5 SHA1 SHA512 SSDEEP
IObit Unlocker/Language/Spanish.lng
- SHA256 4c595cf20cb72696f429567f60a3da0ac81e6957b1e056918678da89d7d7d7e5
- MD5 c353d15b926e335dda7b58d6d31959f6
- SHA1 d378fd4b8155592e50fbd04bc64206b1a032718e
- SHA512 5698b017e29d0fa775e36870b6ae80456978703d280475ebace9738cdaaefb737540a3ea950f85b59cdef3e7e7b4ba95c9be3b084d9e0a4cce23a53d9cd9646c
- SSDEEP 96:rRAHPG8Dr2HuTXl1RHa+i7DTu7FQr4b8FKq7VDJ6oI78JpK5TyBPoUGdsLigqcEx:dAbDrlxa+TFZbfbGBs50E
- MD5 SHA1 SHA512 SSDEEP
IObit Unlocker/Language/Swedish.lng
- SHA256 681ec1fd8c99dddb57935190f39dd7a88da9ca35c9086cea474e2264fc6c0716
- MD5 3f7cf4d1dfa8ebdcb509001247cf2f91
- SHA1 081c53b08e8c817e466c8500b1628d49be196593
- SHA512 87240305b6e3a108d0c4a5c9495ffbf828c65c6d8a2f2efdc20cec70fa9b010f5e05fb510dbc85daa4fd01ccd0dfbbc546b361beacab2d2540324306f1ad7665
- SSDEEP 96:rRiCm+3ddaKCYakhvelXorJpyTyuo6p3YoWtYoqVsiOejNd74h9VGexhmMV5OCTN:diCm+3ddaKCvqukqDsGNRjeX7KP4aC
- MD5 SHA1 SHA512 SSDEEP
IObit Unlocker/Language/Turkish.lng
- SHA256 47d56d71d51c3d4e96439ee7945477735b09f1582d787df180d8fea5ff93abbe
- MD5 98ad40b352b1500142e3d796a73bd6d1
- SHA1 35e830eba30d77d2b2e2d7979d54440cce9cc2d7
- SHA512 6880f85003841389572b0dfac29be3fbe286e83059af5ea98b0e542e7d2577d3acc200e30d5bd0da2b333a3626e8ca2ef27bb150f069e582aa5e66444d6b7741
- SSDEEP 96:rRwTCbRLHx+3c9agkakir9mkf5v9qbGTEXto1JpZeT/0Q2c0P7NoyySbRnpYP1Xs:dwT27ks9ahvITpqYNhgPpimhyH
- MD5 SHA1 SHA512 SSDEEP
IObit Unlocker/SpecialDir.ini
- SHA256 7d63c9d8cc5ce2b7786257d1e2f551bdda8b2a434f560d4fed05ed3f10f65700
- MD5 f2d6eff40a0dd85d53c39250242c7e7e
- SHA1 1056c8486e2b8fced98740444ae55e951491ec1b
- SHA512 9928d50ea7a8ccdf7373477b6f714f50107ec42df8ec1cbe721aca7df49add83ac404d71059e3125321418470785c3a75f81f3ffcfd6025c122d8cf33c0051b5
- MD5 SHA1 SHA512
IObit Unlocker/fav.ico
- SHA256 794c827a3e971d4fb060326170c3e33f3beb757f0da5d496007e33d82d6486c3
- MD5 8717fe31f053f16eca5eae2a66bfad4f
- SHA1 e16e7de70f743032af145849c4ac48f2f048266d
- SHA512 7f3b0a66d0702650c2808402a73c936a4c9bc3728b89531820eec92949c0b1b6a9bd6ec7b63c8cf7c9edadd45e9dab185d0b9c8fc304d98061ffa5294ce20387
- SSDEEP 24:NLzWtAR718zYYFYYYZMRFSk6666666Zq6666666lL8bF7Ecg+kJNR000000p000j:4tAR71YRFSbaRQKkZky3clAW4st
- MD5 SHA1 SHA512 SSDEEP
IObit Unlocker/help/help.html
- SHA256 1d793560ca1741aec1d971d6a22ecff3f0b95dcafc94de9c2204d3fdadffe18e
- MD5 dac512aaf0cb1da2f7158c615afffcc3
- SHA1 d3d809f9b1632dfd12612e3de24c5e31bc890bba
- SHA512 ca5ff988e9f13b2d8446383013cec9a5e2e945418f56da0dd7da42203087af03a1d7aae1837dcbd2829340818bd63ea11cdd8c2ed1f0a745af3820837aa96d7e
- MD5 SHA1 SHA512
IObit Unlocker/help/img/1.png
- SHA256 3bec7cc3b520ba9e0fb07b014a7d7ef14b7844b22c5d27602f2a4d4db86a60dd
- MD5 5ac41955e5503d1b00297348ff6f60e9
- SHA1 afba286b24edbea57aa0d000b744d1167fa1352d
- SHA512 31cd376c6b2d5b3edfbeac5a28950c99bb0302bb9e1ae3d0d377348cf8b595e54b8c77e0e17ac7816ea76e9e8d25aa2546f2d8117cee35ec934f054f9f49d75a
- SSDEEP 1536:9QyIT2VagqroWcmxudNqZJL7mKNpjePNjTU+JYtkvTFhEl:uy0roWedNqZ1PjaNEmYkvhhEl
- MD5 SHA1 SHA512 SSDEEP
Password
infected
IObit Unlocker/help/img/2.png
- SHA256 29c4ed21a88a7f1a4da111cdad7bd7d7be470188f5a772c592ca0e4590f037d9
- MD5 5c2583ff61edf897af7c2fcc57d4d044
- SHA1 45e86e29fd5fa390333bc0c260f17b83e8421eaa
- SHA512 8083280c99e65e2e03343eb3d32e63327416eb11e4b76f7da38aec2d33e0c0bfc03fbe62c095bcefdf66504442151470a929308c08acb1546d976a79041b499c
- SSDEEP 1536:0Hzl1c6W/xGUGg5U9jF+rvahNm55B5PghK0Vw5DD0eSFL:ql1JWLnUPpfmF54Kcw5HSh
- MD5 SHA1 SHA512 SSDEEP
Password
infected
IObit Unlocker/help/img/3.png
- SHA256 d59fdecb4d0b8b3ff62189e320b698743267f2aac3102e27f30cbe2d9e86df48
- MD5 7a162a80d133e176a8cb99d259c10dfe
- SHA1 0cb5be75db722e1117b81da0a02cd7677d117838
- SHA512 1b3d11800602aff9cc2daf180462b53eaaaa2f71ae73c92c1e82cb3451d8950eb56cc794fc96091edb35af53e2e98b10e29ab92a83aa96f0a48dc9946ca3ea88
- SSDEEP 3072:ft+2vx1EDdo/2wiya7W/+4QeX/logSMhB2NkYvnCiTYYss:frvx1EDdoza7W/CeXtogdmNnvCs1ss
- MD5 SHA1 SHA512 SSDEEP
Password
infected
IObit Unlocker/help/img/4.png
- SHA256 01135e3c524fa4cdd5ad338879a2d8642f7ec060d3c0a246307b5aaabc7676d7
- MD5 843256aa85c5d75f9f5cdf212bbe17ce
- SHA1 1da999d3a55885abee102bcefbfec0e7fd4437e2
- SHA512 8d3e495177e620d650e32789d324fa3bde6b0ca43b184b0bf0b63f633ab25c294e7b1652f7b7b2f4b954c8bd54f81501b3332fd96aa61327021bc23a051462f2
- SSDEEP 768:tuzFchGYNDYNd0qPkiHP2XiPbNJ9NnB7CWEMvyr3U2ZQ:Aqk4Dyd0CZPT9iWEMqTdQ
- MD5 SHA1 SHA512 SSDEEP
Password
infected
IObit Unlocker/help/img/5.png
- SHA256 78698e16dfefb9bfda460f6d2bfec3897efb2dca3a0124010ecd3e05a3e04f5f
- MD5 63704dbe558ccedd02ee656d152e6b7e
- SHA1 ab4d7abb785376c96093a618f28f3f589409bcc5
- SHA512 9e286f645d93f3b2be8d46ba63f4cb4a41c54bd8b9b416db12dde6a991a778ea8a497881565316aa4cb66a44b4ea58fec2b67808db85c2ffe1dcf38e6eb3af63
- SSDEEP 3072:asuGpTbkpgMYC6yRE7/nncL+UCiJsEPK/dgZ7zqJ:hhi116pzK+UCuPg
- MD5 SHA1 SHA512 SSDEEP
Password
infected
IObit Unlocker/unins000.dat
- SHA256 60c4a32dfa09fecab376849aea2d8cf110700abcd366e472a1ad2898f46195e0
- MD5 05336cb2bf53d4cad05d355d4ec65927
- SHA1 17c3b44442fcb933d42e57c2a93213075441d4c0
- SHA512 5c0595905760ea826f8148b8faeb84b93bc58948b4d38f9ef9f7d8ff11f327e5e9e7162f5c81709ff66291c641b8edf75ff908168303ef84c1a30a74881f5e35
- SSDEEP 768:iGMvvY90F2y+va2rfEye7hwZGJJtYvJFQLsTcXGB/:h9O4y+vbIye7hwEJJtYvJFQLsTcXGB/
- MD5 SHA1 SHA512 SSDEEP
IObit Unlocker/unins000.exe
- IMPHASH ccd5f2ad4761330df297d2ddedcd8ed3
- SHA256 a62aca7bd97a651582b5ee0a56935ad9ffe57032d3a01c2922d6cef3b6a93cd8
- MD5 e539e086641a28dce788d5bccdb3b45a
- SHA1 408b3578f4be53509531f5a99801f96640835235
- SHA512 009fe324a0d937083c3ab5ed0d1110a9ba3fb2bbdfe919d23d6e32000e1e77f3624935dc92605fbc488c0f5d99005d4e1965cfeba1800b37d9971bc4c3e2cf5d
- SSDEEP 24576:F4VN4kkKF3hDXq8xeidJLvktRskkkkJBcTgoALoyo52ZEdB+geFvx9NY:eT90D3D2wBg8
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
N/A
Digest Algorithm
N/A
PE Digests Matches
Not matched
Trusted
Not trusted
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=IObit Information Technology,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=IObit Information Technology,L=Chengdu,ST=Sichuan,C=CN
Serial Number
11:ca:da:f2:9d:a4:c3:cb:11:3b:f1:87:7b:12:01:03
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jan 15, 2013 - Feb 14, 2016
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
0
Major OS version
5
Entry point
1044484
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
oleaut32
SysFreeString
SysReAllocStringLen
SysAllocStringLen
GetErrorInfo
GetActiveObject
RegisterTypeLib
LoadTypeLib
SysFreeString
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayGetElement
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopyInd
VariantCopy
VariantClear
VariantInit
SysFreeString
advapi32
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegSetValueExW
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegFlushKey
RegEnumValueW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
OpenThreadToken
OpenProcessToken
LookupPrivilegeValueW
GetUserNameW
GetTokenInformation
FreeSid
EqualSid
AllocateAndInitializeSid
AdjustTokenPrivileges
user32
GetKeyboardType
LoadStringW
MessageBoxA
CharNextW
CreateWindowExW
WindowFromPoint
WaitMessage
WaitForInputIdle
UpdateWindow
UnregisterClassW
UnhookWindowsHookEx
TranslateMessage
TranslateMDISysAccel
TrackPopupMenu
SystemParametersInfoW
ShowWindow
ShowScrollBar
ShowOwnedPopups
SetWindowsHookExW
SetWindowTextW
SetWindowPos
SetWindowPlacement
SetWindowLongW
SetTimer
SetScrollRange
SetScrollPos
SetScrollInfo
SetRectEmpty
SetRect
SetPropW
SetParent
SetMenuItemInfoW
SetMenu
SetForegroundWindow
SetFocus
SetCursor
SetClassLongW
SetCapture
SetActiveWindow
SendNotifyMessageW
SendMessageTimeoutW
SendMessageA
SendMessageW
ScrollWindowEx
ScrollWindow
ScreenToClient
ReplyMessage
RemovePropW
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageW
RegisterClipboardFormatW
RegisterClassW
RedrawWindow
PtInRect
PostQuitMessage
PostMessageW
PeekMessageA
PeekMessageW
OffsetRect
OemToCharBuffA
MsgWaitForMultipleObjectsEx
MsgWaitForMultipleObjects
MessageBoxW
MessageBeep
MapWindowPoints
MapVirtualKeyW
LoadStringW
LoadKeyboardLayoutW
LoadIconW
LoadCursorW
LoadBitmapW
KillTimer
IsZoomed
IsWindowVisible
IsWindowUnicode
IsWindowEnabled
IsWindow
IsRectEmpty
IsIconic
IsDialogMessageA
IsDialogMessageW
IsChild
InvalidateRect
IntersectRect
InsertMenuItemW
InsertMenuW
InflateRect
GetWindowThreadProcessId
GetWindowTextW
GetWindowRect
GetWindowPlacement
GetWindowLongW
GetWindowDC
GetTopWindow
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSysColor
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetPropW
GetParent
GetWindow
GetMessagePos
GetMessageW
GetMenuStringW
GetMenuState
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
GetMenu
GetLastActivePopup
GetKeyboardState
GetKeyboardLayoutNameW
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyState
GetKeyNameTextW
GetIconInfo
GetForegroundWindow
GetFocus
GetDesktopWindow
GetDCEx
GetDC
GetCursorPos
GetCursor
GetClientRect
GetClassLongW
GetClassInfoW
GetCapture
GetActiveWindow
FrameRect
FindWindowExW
FindWindowW
FillRect
ExitWindowsEx
EnumWindows
EnumThreadWindows
EnumChildWindows
EndPaint
EnableWindow
EnableScrollBar
EnableMenuItem
DrawTextExW
DrawTextW
DrawMenuBar
DrawIconEx
DrawIcon
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageA
DispatchMessageW
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DeleteMenu
DefWindowProcW
DefMDIChildProcW
DefFrameProcW
CreatePopupMenu
CreateMenu
CreateIcon
ClientToScreen
CheckMenuItem
CharUpperBuffW
CharNextW
CharLowerBuffW
CharLowerW
CallWindowProcW
CallNextHookEx
BringWindowToTop
BeginPaint
AppendMenuW
CharToOemBuffA
AdjustWindowRectEx
ActivateKeyboardLayout
kernel32
GetACP
Sleep
VirtualFree
VirtualAlloc
GetSystemInfo
GetTickCount
QueryPerformanceCounter
GetVersion
GetCurrentThreadId
VirtualQuery
WideCharToMultiByte
SetCurrentDirectoryW
MultiByteToWideChar
lstrlenW
lstrcpynW
LoadLibraryExW
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetCurrentDirectoryW
GetCommandLineW
FreeLibrary
FindFirstFileW
FindClose
ExitProcess
ExitThread
CreateThread
CompareStringW
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
CloseHandle
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleW
lstrcpyW
lstrcmpW
WriteProfileStringW
WritePrivateProfileStringW
WriteFile
WideCharToMultiByte
WaitForSingleObject
WaitForMultipleObjectsEx
VirtualQueryEx
VirtualQuery
VirtualFree
VirtualAlloc
TransactNamedPipe
TerminateProcess
SwitchToThread
SizeofResource
SignalObjectAndWait
SetThreadLocale
SetNamedPipeHandleState
SetLastError
SetFileTime
SetFilePointer
SetFileAttributesW
SetEvent
SetErrorMode
SetEndOfFile
SetCurrentDirectoryW
ResumeThread
ResetEvent
RemoveDirectoryW
ReleaseMutex
ReadFile
QueryPerformanceCounter
OpenProcess
OpenMutexW
MultiByteToWideChar
MulDiv
MoveFileExW
MoveFileW
LockResource
LocalFree
LocalFileTimeToFileTime
LoadResource
LoadLibraryExW
LoadLibraryW
LeaveCriticalSection
IsDBCSLeadByte
IsBadWritePtr
InitializeCriticalSection
GlobalFindAtomW
GlobalDeleteAtom
GlobalAddAtomW
GetWindowsDirectoryW
GetVersionExW
GetVersion
GetUserDefaultLangID
GetTickCount
GetThreadLocale
GetSystemTimeAsFileTime
GetSystemInfo
GetSystemDirectoryW
GetStdHandle
GetShortPathNameW
GetProfileStringW
GetProcAddress
GetPrivateProfileStringW
GetOverlappedResult
GetModuleHandleW
GetModuleFileNameW
GetLogicalDrives
GetLocaleInfoW
GetLocalTime
GetLastError
GetFullPathNameW
GetFileSize
GetFileAttributesW
GetExitCodeThread
GetExitCodeProcess
GetEnvironmentVariableW
GetDriveTypeW
GetDiskFreeSpaceW
GetDateFormatW
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetCurrentDirectoryW
GetComputerNameW
GetCommandLineW
GetCPInfo
FreeResource
InterlockedIncrement
InterlockedExchangeAdd
InterlockedExchange
InterlockedDecrement
InterlockedCompareExchange
FreeLibrary
FormatMessageW
FlushFileBuffers
FindResourceW
FindNextFileW
FindFirstFileW
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
EnumCalendarInfoW
EnterCriticalSection
DeviceIoControl
DeleteFileW
DeleteCriticalSection
CreateThread
CreateProcessW
CreateNamedPipeW
CreateMutexW
CreateFileW
CreateEventW
CreateDirectoryW
CopyFileW
CompareStringW
CompareFileTime
CloseHandle
Sleep
msimg32
AlphaBlend
gdi32
UnrealizeObject
StretchBlt
SetWindowOrgEx
SetViewportOrgEx
SetTextColor
SetStretchBltMode
SetROP2
SetPixel
SetDIBColorTable
SetBrushOrgEx
SetBkMode
SetBkColor
SelectPalette
SelectObject
SaveDC
RoundRect
RestoreDC
RemoveFontResourceW
Rectangle
RectVisible
RealizePalette
Polyline
Pie
PatBlt
MoveToEx
MaskBlt
LineTo
LineDDA
IntersectClipRect
GetWindowOrgEx
GetTextMetricsW
GetTextExtentPointW
GetTextExtentPoint32W
GetSystemPaletteEntries
GetStockObject
GetRgnBox
GetPixel
GetPaletteEntries
GetObjectW
GetDeviceCaps
GetDIBits
GetDIBColorTable
GetDCOrgEx
GetCurrentPositionEx
GetClipBox
GetBrushOrgEx
GetBitmapBits
FrameRgn
ExtTextOutW
ExtFloodFill
ExcludeClipRect
EnumFontsW
Ellipse
DeleteObject
DeleteDC
CreateSolidBrush
CreateRectRgn
CreatePenIndirect
CreatePalette
CreateHalftonePalette
CreateFontIndirectW
CreateDIBitmap
CreateDIBSection
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
Chord
BitBlt
Arc
AddFontResourceW
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
mpr
WNetOpenEnumW
WNetGetUniversalNameW
WNetGetConnectionW
WNetEnumResourceW
WNetCloseEnum
comctl32
InitCommonControls
InitializeFlatSB
FlatSB_SetScrollProp
FlatSB_SetScrollPos
FlatSB_SetScrollInfo
FlatSB_GetScrollPos
FlatSB_GetScrollInfo
_TrackMouseEvent
ImageList_SetIconSize
ImageList_GetIconSize
ImageList_Write
ImageList_Read
ImageList_GetDragImage
ImageList_DragShowNolock
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
ImageList_EndDrag
ImageList_BeginDrag
ImageList_Remove
ImageList_DrawEx
ImageList_Draw
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_Add
ImageList_SetImageCount
ImageList_GetImageCount
ImageList_Destroy
ImageList_Create
InitCommonControls
ole32
OleUninitialize
OleInitialize
CoTaskMemFree
CLSIDFromProgID
CLSIDFromString
StringFromCLSID
CoCreateInstance
CoFreeUnusedLibraries
CoUninitialize
CoInitialize
IsEqualGUID
CoDisconnectObject
shell32
ShellExecuteExW
ShellExecuteW
SHGetFileInfoW
ExtractIconW
SHGetPathFromIDListW
SHGetMalloc
SHChangeNotify
SHBrowseForFolderW
comdlg32
GetSaveFileNameW
GetOpenFileNameW
Name
.text
Size
1010KB
Virtual Size
1009KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.itext
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.bss
Size
Virtual Size
24KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
Virtual Size
60B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
121KB
Virtual Size
120KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
IObit Unlocker/unins000.msg
- SHA256 946195c199c2f798ed0ab3dc8ae4511be30ad70e5fb994d677beee0ae249dec8
- MD5 5f38274fc51ec35b61e925153e26ef1c
- SHA1 6ebc957cc000873b9b88e32c271fc1c63a5c22e5
- SHA512 1f99244af85ef4d175426a38c5181bf0205f9dfc0deb4fc1136f43cc115a50076b32e449132891d8c20daa7ae8b146e33eb3418e2c146a106939977fb77be149
- SSDEEP 192:QS1EjXgkg3Sqf8sfr69FT0AKanzLYfMa1GzvL7Vzo+Fc51USQDztXfbKJUfvo:QS1Elvqf9r6fKVfMVRo+y1USQDztP3o
- MD5 SHA1 SHA512 SSDEEP