Full_Setup_Downloaded_Here.zip
- SHA256 71e9d4c711a188b0bc798b078eb8f052b11d479c9f4e4f1d746dccfefd4de984
Overview
overview
10Static
static
3F0nts/DL/Winzip.exe
windows7-x64
4F0nts/DL/Winzip.exe
windows10-2004-x64
1F0nts/Lang...ip.exe
windows7-x64
1F0nts/Lang...ip.exe
windows10-2004-x64
1F0nts/Nita/Winzip.exe
windows7-x64
1F0nts/Nita/Winzip.exe
windows10-2004-x64
1F0nts/Rupo/Winzip.exe
windows7-x64
1F0nts/Rupo/Winzip.exe
windows10-2004-x64
1F0nts/Tire/Winzip.exe
windows7-x64
1F0nts/Tire/Winzip.exe
windows10-2004-x64
1F0nts/erro...ip.exe
windows7-x64
1F0nts/erro...ip.exe
windows10-2004-x64
1LaNgz/Winzip.exe
windows7-x64
1LaNgz/Winzip.exe
windows10-2004-x64
1Setup.exe
windows7-x64
10Setup.exe
windows10-2004-x64
10Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
F0nts/DL/Winzip.exe
Resource
win7-20240215-es
windows7-x64
11 signatures
1200 seconds
Behavioral task
behavioral2
Sample
F0nts/DL/Winzip.exe
Resource
win10v2004-20240508-es
windows10-2004-x64
1 signatures
1200 seconds
Behavioral task
behavioral3
Sample
F0nts/LangZ/Winzip.exe
Resource
win7-20240215-es
windows7-x64
3 signatures
1200 seconds
Behavioral task
behavioral4
Sample
F0nts/LangZ/Winzip.exe
Resource
win10v2004-20240426-es
windows10-2004-x64
1 signatures
1200 seconds
Behavioral task
behavioral5
Sample
F0nts/Nita/Winzip.exe
Resource
win7-20240508-es
windows7-x64
3 signatures
1200 seconds
Behavioral task
behavioral6
Sample
F0nts/Nita/Winzip.exe
Resource
win10v2004-20240508-es
windows10-2004-x64
1 signatures
1200 seconds
Behavioral task
behavioral7
Sample
F0nts/Rupo/Winzip.exe
Resource
win7-20231129-es
windows7-x64
3 signatures
1200 seconds
Behavioral task
behavioral8
Sample
F0nts/Rupo/Winzip.exe
Resource
win10v2004-20240508-es
windows10-2004-x64
1 signatures
1200 seconds
Behavioral task
behavioral9
Sample
F0nts/Tire/Winzip.exe
Resource
win7-20240215-es
windows7-x64
3 signatures
1200 seconds
Behavioral task
behavioral10
Sample
F0nts/Tire/Winzip.exe
Resource
win10v2004-20240426-es
windows10-2004-x64
1 signatures
1200 seconds
Behavioral task
behavioral11
Sample
F0nts/error/Winzip.exe
Resource
win7-20240221-es
windows7-x64
3 signatures
1200 seconds
Behavioral task
behavioral12
Sample
F0nts/error/Winzip.exe
Resource
win10v2004-20240508-es
windows10-2004-x64
1 signatures
1200 seconds
Behavioral task
behavioral13
Sample
LaNgz/Winzip.exe
Resource
win7-20240221-es
windows7-x64
3 signatures
1200 seconds
Behavioral task
behavioral14
Sample
LaNgz/Winzip.exe
Resource
win10v2004-20240426-es
windows10-2004-x64
1 signatures
1200 seconds
Behavioral task
behavioral15
Sample
Setup.exe
Resource
win7-20240221-es
windows7-x64
4 signatures
1200 seconds
Behavioral task
behavioral16
Sample
Setup.exe
Resource
win10v2004-20240426-es
windows10-2004-x64
4 signatures
1200 seconds
General
- Target Full_Setup_Downloaded_Here.zip
- Size 37.9MB
- Sample240604-bj9beagg28
- SHA256 71e9d4c711a188b0bc798b078eb8f052b11d479c9f4e4f1d746dccfefd4de984
- MD5 8ead0f163701c1c225dcd6b055bd16a3
- SHA1 cd18e99b0be5561aeb7b709f40eb1978d5b9a229
- SHA512 4c200fa3b722266b1f88c3413b519234ac6878ac33b16b82e8f87c984c4c5ddb00051cd0d7b643b0102d40dbf725118a3966caa5b32782e3cf1245ce31f07989
- SSDEEP 786432:2jdM1/hVgjdM1/hVXjdM1/hVujdM1/hVMjdM1/hVGjdM1/hVJajdM1/hVb037UtM:AM15VCM15VhM15VYM15VWM15VwM15VJ4
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Setup.exe
File Explorer
-
Full_Setup_Downloaded_Here.zip.zip 37.9MB
-
F0nts/84sys.fon9KB
-
F0nts/8514sys.fon9KB
-
F0nts/DL/Cr0atian.ini105KB
-
F0nts/DL/Dani.ini107KB
-
F0nts/DL/English.ini107KB
-
F0nts/DL/Hebrew.ini97KB
-
F0nts/DL/Hungarian.ini107KB
-
F0nts/DL/Ind0nesian.ini105KB
-
F0nts/DL/Japanese.ini91KB
-
F0nts/DL/K0rean.ini91KB
-
F0nts/DL/Kazakh.ini105KB
-
F0nts/DL/Kurdish.ini106KB
-
F0nts/DL/N0rwegian.ini104KB
-
F0nts/DL/SimpChinese.ini86KB
-
F0nts/DL/Sinhala.ini106KB
-
F0nts/DL/Sl0vak.ini109KB
-
F0nts/DL/Swedi.ini104KB
-
F0nts/DL/Thai.ini103KB
-
F0nts/DL/TradChinese.ini85KB
-
F0nts/DL/Ukrainian.ini106KB
-
F0nts/DL/UyghurLatin.ini108KB
-
F0nts/DL/Uzbek.ini77KB
-
F0nts/DL/Vietnamese.ini105KB
-
F0nts/DL/Winzip.exe.exe 3.2MB
-
F0nts/LangZ/Cr0atian.ini105KB
-
F0nts/LangZ/Dani.ini107KB
-
F0nts/LangZ/English.ini107KB
-
F0nts/LangZ/Hebrew.ini97KB
-
F0nts/LangZ/Hungarian.ini107KB
-
F0nts/LangZ/Ind0nesian.ini105KB
-
F0nts/LangZ/Japanese.ini91KB
-
F0nts/LangZ/K0rean.ini91KB
-
F0nts/LangZ/Kazakh.ini105KB
-
F0nts/LangZ/Kurdish.ini106KB
-
F0nts/LangZ/N0rwegian.ini104KB
-
F0nts/LangZ/SimpChinese.ini86KB
-
F0nts/LangZ/Sinhala.ini106KB
-
F0nts/LangZ/Sl0vak.ini109KB
-
F0nts/LangZ/Swedi.ini104KB
-
F0nts/LangZ/Thai.ini103KB
-
F0nts/LangZ/TradChinese.ini85KB
-
F0nts/LangZ/Ukrainian.ini106KB
-
F0nts/LangZ/UyghurLatin.ini108KB
-
F0nts/LangZ/Uzbek.ini77KB
-
F0nts/LangZ/Vietnamese.ini105KB
-
F0nts/LangZ/Winzip.exe.exe 3.2MB
-
F0nts/Nita/Cr0atian.ini105KB
-
F0nts/Nita/Dani.ini107KB
-
F0nts/Nita/English.ini107KB
-
F0nts/Nita/Hebrew.ini97KB
-
F0nts/Nita/Hungarian.ini107KB
-
F0nts/Nita/Ind0nesian.ini105KB
-
F0nts/Nita/Japanese.ini91KB
-
F0nts/Nita/K0rean.ini91KB
-
F0nts/Nita/Kazakh.ini105KB
-
F0nts/Nita/Kurdish.ini106KB
-
F0nts/Nita/N0rwegian.ini104KB
-
F0nts/Nita/SimpChinese.ini86KB
-
F0nts/Nita/Sinhala.ini106KB
-
F0nts/Nita/Sl0vak.ini109KB
-
F0nts/Nita/Swedi.ini104KB
-
F0nts/Nita/Thai.ini103KB
-
F0nts/Nita/TradChinese.ini85KB
-
F0nts/Nita/Ukrainian.ini106KB
-
F0nts/Nita/UyghurLatin.ini108KB
-
F0nts/Nita/Uzbek.ini77KB
-
F0nts/Nita/Vietnamese.ini105KB
-
F0nts/Nita/Winzip.exe.exe 3.2MB
-
F0nts/Rupo/Cr0atian.ini105KB
-
F0nts/Rupo/Dani.ini107KB
-
F0nts/Rupo/English.ini107KB
-
F0nts/Rupo/Hebrew.ini97KB
-
F0nts/Rupo/Hungarian.ini107KB
-
F0nts/Rupo/Ind0nesian.ini105KB
-
F0nts/Rupo/Japanese.ini91KB
-
F0nts/Rupo/K0rean.ini91KB
-
F0nts/Rupo/Kazakh.ini105KB
-
F0nts/Rupo/Kurdish.ini106KB
-
F0nts/Rupo/N0rwegian.ini104KB
-
F0nts/Rupo/SimpChinese.ini86KB
-
F0nts/Rupo/Sinhala.ini106KB
-
F0nts/Rupo/Sl0vak.ini109KB
-
F0nts/Rupo/Swedi.ini104KB
-
F0nts/Rupo/Thai.ini103KB
-
F0nts/Rupo/TradChinese.ini85KB
-
F0nts/Rupo/Ukrainian.ini106KB
-
F0nts/Rupo/UyghurLatin.ini108KB
-
F0nts/Rupo/Uzbek.ini77KB
-
F0nts/Rupo/Vietnamese.ini105KB
-
F0nts/Rupo/Winzip.exe.exe 3.2MB
-
F0nts/Tire/Cr0atian.ini105KB
-
F0nts/Tire/Dani.ini107KB
-
F0nts/Tire/English.ini107KB
-
F0nts/Tire/Hebrew.ini97KB
-
F0nts/Tire/Hungarian.ini107KB
-
F0nts/Tire/Ind0nesian.ini105KB
-
F0nts/Tire/Japanese.ini91KB
-
F0nts/Tire/K0rean.ini91KB
-
F0nts/Tire/Kazakh.ini105KB
-
F0nts/Tire/Kurdish.ini106KB
-
F0nts/Tire/N0rwegian.ini104KB
-
F0nts/Tire/SimpChinese.ini86KB
-
F0nts/Tire/Sinhala.ini106KB
-
F0nts/Tire/Sl0vak.ini109KB
-
F0nts/Tire/Swedi.ini104KB
-
F0nts/Tire/Thai.ini103KB
-
F0nts/Tire/TradChinese.ini85KB
-
F0nts/Tire/Ukrainian.ini106KB
-
F0nts/Tire/UyghurLatin.ini108KB
-
F0nts/Tire/Uzbek.ini77KB
-
F0nts/Tire/Vietnamese.ini105KB
-
F0nts/Tire/Winzip.exe.exe 3.2MB
-
F0nts/d0sapp.fon35KB
-
F0nts/error/Cr0atian.ini105KB
-
F0nts/error/Dani.ini107KB
-
F0nts/error/English.ini107KB
-
F0nts/error/Hebrew.ini97KB
-
F0nts/error/Hungarian.ini107KB
-
F0nts/error/Ind0nesian.ini105KB
-
F0nts/error/Japanese.ini91KB
-
F0nts/error/K0rean.ini91KB
-
F0nts/error/Kazakh.ini105KB
-
F0nts/error/Kurdish.ini106KB
-
F0nts/error/N0rwegian.ini104KB
-
F0nts/error/SimpChinese.ini86KB
-
F0nts/error/Sinhala.ini106KB
-
F0nts/error/Sl0vak.ini109KB
-
F0nts/error/Swedi.ini104KB
-
F0nts/error/Thai.ini103KB
-
F0nts/error/TradChinese.ini85KB
-
F0nts/error/Ukrainian.ini106KB
-
F0nts/error/UyghurLatin.ini108KB
-
F0nts/error/Uzbek.ini77KB
-
F0nts/error/Vietnamese.ini105KB
-
F0nts/error/Winzip.exe.exe 3.2MB
-
F0nts/smalle.fon25KB
-
F0nts/symb0l.ttf67KB
-
F0nts/trebucbd.ttf238KB
-
F0nts/trebucbi.ttf220KB
-
F0nts/verdab.ttf206KB
-
F0nts/verdana.ttf237KB
-
F0nts/verdanab.ttf206KB
-
LaNgz/Cr0atian.ini105KB
-
LaNgz/Dani.ini107KB
-
LaNgz/English.ini107KB
-
LaNgz/Hebrew.ini97KB
-
LaNgz/Hungarian.ini107KB
-
LaNgz/Ind0nesian.ini105KB
-
LaNgz/Japanese.ini91KB
-
LaNgz/K0rean.ini91KB
-
LaNgz/Kazakh.ini105KB
-
LaNgz/Kurdish.ini106KB
-
LaNgz/N0rwegian.ini104KB
-
LaNgz/SimpChinese.ini86KB
-
LaNgz/Sinhala.ini106KB
-
LaNgz/Sl0vak.ini109KB
-
LaNgz/Swedi.ini104KB
-
LaNgz/Thai.ini103KB
-
LaNgz/TradChinese.ini85KB
-
LaNgz/Ukrainian.ini106KB
-
LaNgz/UyghurLatin.ini108KB
-
LaNgz/Uzbek.ini77KB
-
LaNgz/Vietnamese.ini105KB
-
LaNgz/Winzip.exe.exe 3.2MB
-
Setup.exe.exe 986.1MB
F0nts/84sys.fon
- SHA256 dc7e1c9bb168e22b7a8b1a10c5d9555d71ea8486dc0d628fa17d117698bae61b
- MD5 bb8f1f693bebf6c738e47b68c4db7d06
- SHA1 78e8897326882c540ad1550d400e4533a1edd78e
- SHA512 2d3e000b5c2fce04bf8ab27dc684bfb75c7d4ae29e510a8dd5d232651f0b8fdeceed3e618f5aa3cc4666a4d81f0ebe274383cb08c4c9b6fdbb2ce6f095d3485c
- SSDEEP 96:z26rDEDrYDaUEZIZCa9qkzAZxo5m3NYiCDuUUDK1FDflI:i9UEIYaAkzWxciCDzL
- MD5 SHA1 SHA512 SSDEEP
F0nts/8514sys.fon
- SHA256 dc7e1c9bb168e22b7a8b1a10c5d9555d71ea8486dc0d628fa17d117698bae61b
- MD5 bb8f1f693bebf6c738e47b68c4db7d06
- SHA1 78e8897326882c540ad1550d400e4533a1edd78e
- SHA512 2d3e000b5c2fce04bf8ab27dc684bfb75c7d4ae29e510a8dd5d232651f0b8fdeceed3e618f5aa3cc4666a4d81f0ebe274383cb08c4c9b6fdbb2ce6f095d3485c
- SSDEEP 96:z26rDEDrYDaUEZIZCa9qkzAZxo5m3NYiCDuUUDK1FDflI:i9UEIYaAkzWxciCDzL
- MD5 SHA1 SHA512 SSDEEP
F0nts/DL/Cr0atian.ini
- SHA256 5bf2b70edb78073f3ce4fe6d809a3a25c982cb2840b8ebaf4367ebc42f16bd3e
- MD5 8477123868f12632d652c6da5df683c2
- SHA1 23dbeba17e366e1bb5e7d7be156a9be309c9555d
- SHA512 b785f8d680f22211c01cfa59cdf86f1bfdeca0446c1c26fc2c144e3018773d22e4050c95cd513d60df9b226df31dc504b5059db168977b3949dbcc428a7ff30d
- SSDEEP 768:w0VnpiuM0pY1HIlw1VoIGRweBLUab7Fno8wBtA1yR4IY52t9RM8wE4c+Tyb3TRr2:VdpiuM0pY1olaEZLUYg4c+7wvO60ll
- MD5 SHA1 SHA512 SSDEEP
F0nts/DL/Dani.ini
- SHA256 59df77a75aca7c0a8574f6d4b5be5632908c4fea8634f4748e36ff6fee40e317
- MD5 5f50b22de0efb245cd3b8f2fb50a6d3d
- SHA1 be369ffd0c47ff92b3aa5c259ab9f4d40807b687
- SHA512 f3fec19409ea564bd68f4bd1253297ed8bcbe86554422a22891c61ee237f581f95f6976512e53bcabc5cafe3411343e660d3fb8f398f95f9c1efcec8eaa4367a
- SSDEEP 1536:gmGRkLzUJnbfeKzcqt5G+qX59CcZEY9dHbm/c4C1CgqfRG:gmGRbnbfNRt5G+qX59CcNdX47G
- MD5 SHA1 SHA512 SSDEEP
F0nts/DL/English.ini
- SHA256 0f9d467f6bb6f682c0d1351b26038950c73720f2bfc0741ec1c7bfab2046d75f
- MD5 525ce1c02ca53f9c63cb697ed3aae899
- SHA1 9ddc2763d9dd663f3cb0febf0d580e21c52c2f18
- SHA512 734d599d839b1266c42f340e044243ae30d1859d314eed7738f72f59201d19359f1ac6ee0cac8bfef4a0a2b8f2232a4f1f33336770c8c43f929c1bef162d2317
- SSDEEP 1536:5S5Ybl8/lKlXiF3y24FMuRvV5I7BohUT1:xxXiVQV5uJ1
- MD5 SHA1 SHA512 SSDEEP
F0nts/DL/Hebrew.ini
- SHA256 42ba655e5b635698995a588f4dd39147be867a0c4b45fd49edc65982b12b9531
- MD5 dbf6973ac46a0adcae8500a16cce4e48
- SHA1 eae986788b33ad048f08ba722fd4eb7354212e63
- SHA512 7a59fe15ac9c10caf3b3abed60201f008583684dfa476cbb9f8ad4c3f5e93d34f31dec859019f1f36d92129b2298272df5eec15be59e367cdcb77d5e89b46549
- SSDEEP 768:w2kJwh+FrSb7UJTvsjkhsRGn6PqwKJTDv69ZUtiGn5Eq5lBQAjV8WEdtWfSZu/JR:zkJwh+FrScvs6Eq5uWpfSZ6KlThAd+C
- MD5 SHA1 SHA512 SSDEEP
F0nts/DL/Hungarian.ini
- SHA256 fe9997629d296908247a2e82da6c369e2ea7eb4c87b12fc7c8d3ecb3e6fc320d
- MD5 7591df7fae4342cbc7a0706e1b28e87b
- SHA1 825e88ad498e8713522f5aef3b21ee01d6fa8b41
- SHA512 8f58c6fbaf5ea140a3ecbbc88cbf4bdd0e0ba3fbdf169f4b7cb831094a47a6ead103f89fc07748f91d1396ebd13c7ebcc90a316f0eb203ff4c86a50be5cd3ca4
- SSDEEP 3072:UaKBsDgGod8NAH4iyf8kXrLfKgL6YhL+L3yGU:73X
- MD5 SHA1 SHA512 SSDEEP
F0nts/DL/Ind0nesian.ini
- SHA256 9e52e0b1f7ec39a36e2edd0231dc98865de8524a651fcf6b1b948a575e35fd0f
- MD5 d944d8a3551719a176db4da31733ab75
- SHA1 6cf51cb43dbd7ca84334389076adbabe407d95b8
- SHA512 b9077bdeb69e07894c995bd519ebab594016c8077a213b29264a8040370c9841f1ad6dada2d0af595a596a3875f9c9989dc30af8e7c7b981b420cf1382d5c9a6
- SSDEEP 768:wbWt5bTJA+NtkooQG+Wioa6lBT8IwUzCc0qfcLVUWf1RzVARBBfxP7KLVoeY4z9v:9bT+atkwR2AIheY4pMOy0F8gx
- MD5 SHA1 SHA512 SSDEEP
F0nts/DL/Japanese.ini
- SHA256 9077b41d743ed6af51cd9b8aedaebb6d1e0e6217825635a1aa9451994efaff0f
- MD5 36d47bfae8d0d48d56b7b1feb3b317e7
- SHA1 1d8d59aa40f765319fcb70a9f49e997aca305b89
- SHA512 b510a5b17e52778b87f58aaa61f222f11c6190a988440789d1d40591aebdcc7311f7bb3bee9621ab8d971dc2de1ec6ed4d52598b3808dd689f693c3e5897f938
- SSDEEP 768:wPZoCIywqTgXCaNnWYjV6UDFlv0Gaf9xS7ua6PE0FtrqGv0ZQkxKQRTM94DGNWdN:1CIywqTKnWKV5GAQkxHKUfxJYNeNx
- MD5 SHA1 SHA512 SSDEEP
F0nts/DL/K0rean.ini
- SHA256 ad556989f6e4a683d9668e41d2d7175b7b46847c2eef26188b9075fc600d0132
- MD5 efae0c78be2abe2920c78b9d4785ab45
- SHA1 8c0799fb68852cb071bbe260deb4ab357bd5f4ed
- SHA512 44737be4d4bd0f93ca3e986c89102612932f3749b8e9b89446a567cff60ceb856b4bd7380da7fe3f1809579e6ec2162d0cdd4a217935a4961c6b36a482dd4ac8
- SSDEEP 768:wPYhkzQl6qE7rY+xuPAsyKVmq8Ag8lyWqFk5ziCfsg8S+EZNlWJ7lxyBiCWfbMav:HSzQlc7siCmq8AFlBmLfbNA2Nt7osVP
- MD5 SHA1 SHA512 SSDEEP
F0nts/DL/Kazakh.ini
- SHA256 1fde00989b3baeb67e6b1f8654cd2fc7216a40a4c5a5a9a64d03d47ee95e76be
- MD5 fe2b5687f2de60cb55629fd7f0ca9a21
- SHA1 5299f36a7b8c5a0b59e3603b8517cb1b3e0f2160
- SHA512 ebda06bfb42a56ed71915a1f42d84edb795927697eae51fa98bcdbac76ce6dd224c7e7610743050f45649f2d756aea82e47af3ef6ad929ddc9593d8044e3334d
- SSDEEP 1536:UdBOtqJCnhr189gDXrbF3h14FMuRv5RI7EhUv1:isH/VG5Rm1
- MD5 SHA1 SHA512 SSDEEP
F0nts/DL/Kurdish.ini
- SHA256 94ac43cb7eb95277db44616a53b23e9174415377b4b3b98a1bdfc98d06a40a4b
- MD5 af61b416403963d653f5008aaba82e03
- SHA1 b1ab14d6ee43e1230cfcc5acfc4de27ab2a6f6b3
- SHA512 a65a21d5d9f7085acf0a96701d4577bf5fbfc0ebcb4f188ff39139b135570f95d76677e6470261aef022b75378898342ab3105704228029f90b8998f414603ab
- SSDEEP 1536:rESqStTfwl/lmie4rC3DA3f1wjF7af0/KkmwL3mnJ/6BD1I:lbTNC
- MD5 SHA1 SHA512 SSDEEP
F0nts/DL/N0rwegian.ini
- SHA256 1c99b7b06af0d5ac5582f00447fbe04e2325e173666cba8ce2d18678f7b31e3b
- MD5 5cf9c294bd9d233d95e54e198bd8b4ab
- SHA1 670de196a831bc9b0d503694b594524ccfb77b04
- SHA512 bea2be5e1dab1854cbb83fc221f392793aa7b67a1ba1ee521c4ad0aaea671bbbda868d57b3b226cc713eaf9f90bd9fc05b3166353d78c532a43111349159ac7c
- SSDEEP 3072:/Tu1PWiYzr8Z2GIBpLkQXtgpE7ZrB2kyC+3HX:0
- MD5 SHA1 SHA512 SSDEEP
F0nts/DL/SimpChinese.ini
- SHA256 1bfa864f7012e64f5c1656fc5636ea29e87e2a45b5eb2c31a3b20643fdd8ad4d
- MD5 7aad044a68d89d8bb5a202f8bc69d87c
- SHA1 e20ca69d6f4d1612dc4457612a4b5e4808470bf3
- SHA512 1fe22968bcba141229d8a4d36f8a7d300e44e76ea701d6a07430854567d15c8b8ebaaacb646d038a89273414c5b2a48562407ca31ac9c75e1e22fece73686625
- SSDEEP 1536:SXm7cLrzWFubvgkOvAbGCgjhRrERD+0xs3sqPHGUt471J2BZIn:8FKNPHGVt
- MD5 SHA1 SHA512 SSDEEP
F0nts/DL/Sinhala.ini
- SHA256 b6fad3bf2adba7c77641ee1a17ff4cd9e5e9b14bac1b855346c91a286e517504
- MD5 318ee9a93c4620940f88052b904f05ce
- SHA1 a5574f778537ce085d53c3fc52299b3049da2371
- SHA512 054c1e0322a170b83273a5c253eeb9ffc107056c555ca470d19dbdefc7d68c822d67576fd9333cf5b17357878dc6147a3d1367219db48b2b10e9bd915e806e52
- SSDEEP 1536:Run1VCXWZTr/lOPoMHjYMgr5xU1Jdr/pSnE8EtwO5vrzAKnUs2:RungtoMHjYMgrgJqE8EqOxzus2
- MD5 SHA1 SHA512 SSDEEP
F0nts/DL/Sl0vak.ini
- SHA256 b5b2f7fc1c62f1c8161ec59af79cf5e8f12cb0070264703087dcc5cb58e7352a
- MD5 fcba4d2df72a46575ca828c807224431
- SHA1 265e34f895f4b2fbe98a39b960c385be7309dfaa
- SHA512 6edf1e1484225455b76a1deb6c9f02857433a941bc0aececb916f0aede4398a4f22e70e9c152bd6a78ba2f02f11237a6ee92fb05b21374d250f680b56c6a5cc1
- SSDEEP 3072:2ykd4BlB1wCoG9Yhgt8VQcGlW2Jw/6ro5pw9v6Nv83diJoTNfaRlnCoUjZ5bYtZr:P1wCnyNYpCaAWK
- MD5 SHA1 SHA512 SSDEEP
F0nts/DL/Swedi.ini
- SHA256 f1ee3b2de54ee588813a7dbffca7e7607bbb769c763cdf73ccd600e06346fe1d
- MD5 d0280eb9ebf7e5f9b91dc0e405bd7178
- SHA1 e0425673213109f140f8f9b7474029a0326cdab4
- SHA512 0102a9b215d169b5cad039bbf80ef9882ad6eea7933ccb47e6ac204451456c50baabaeca43dd477a36d2db3eda317f4d59979e5387e169fbedf1c13494dc87e2
- SSDEEP 3072:lMgTj95UgiNg1TdyjQxx3Ho7wAM65CB9mptXse6/3/GbBJsXdFg9FNX:w
- MD5 SHA1 SHA512 SSDEEP
F0nts/DL/Thai.ini
- SHA256 172276c875a496c173b349e24f7dec66ddda24f6a424120a13de73ef5e70ba07
- MD5 b193d9eacf4afac3199e11b4f4cb6572
- SHA1 9b3f47c3674b11e16df5ba6d5d29d2698a3e1694
- SHA512 11a6971e4ba3c03822de4a46bd9854f2a1525b5380000afac9eddb5d644ba4af0308454413016c859960ce4cf49efe0dbea4a59651b6127d643d1c7eaec34f32
- SSDEEP 1536:5fJMD1fKNP5/l3X8vruiFDKn+0PRs5jWY+APLR2lw:xy
- MD5 SHA1 SHA512 SSDEEP
F0nts/DL/TradChinese.ini
- SHA256 eb8fc39f2551834010f3748d81e5f842a1b4e27adb87e425b764bb9152b55cb1
- MD5 dc01555f89e044192a9ad584b62e41a7
- SHA1 e830a3012e610b2c8775c993ff504f6f3e5628ee
- SHA512 954582efc17a2ffb29ba462d3d670576682211066a67de11daae4e5b2f283e055bb3119ce6aab1f40fbf8e629d7e0562c5059455ae420741558484f3c464bcca
- SSDEEP 768:wRZh4e4gX/LtXW2DhVaajeVbWFcqnxCjDvUkkIRNQz+q8wbXrFtUkFhBaQagVQlz:yZGgX/LtXW2Dhk1bWF5dhBa00uZNfsi+
- MD5 SHA1 SHA512 SSDEEP
F0nts/DL/Ukrainian.ini
- SHA256 f1f0c46ed4c136149fd57d9cae512242a023e14dd13d7c633bb4f7bf9ed71343
- MD5 9482109e20bf801180bbe11e0603c972
- SHA1 bafe4b7daa5529a5bd7b708482cfcdab95273959
- SHA512 b06df7881df5f79fd246e4c95edbe8c2072dbb9a6a02a7f66886b1a41c6928cf9b7d544b0c238ff2ddcb77fdb7f9ed8764ecd32fb46aa05f7bc6a5e167fded1e
- SSDEEP 1536:iziJtNQr3yk2oKLNzPOcGC+Be6fJzFmXZ:sPcGC+Be6fO
- MD5 SHA1 SHA512 SSDEEP
F0nts/DL/UyghurLatin.ini
- SHA256 d517f3322a43292dbb241597353ad01013ee3be86d666c83d87c0eda4f56f926
- MD5 98eb38cef87e8fa6e6d2619577d4265f
- SHA1 205d6e9147c1f935612423bb9716fa402efa3e57
- SHA512 4e85b523bd819d41ab1032534ef1ca38e841a0d80c2fc672b21a9f2dfa846384ccedd4cea9745ef7ccf127c98378bba913057b0dd716fd620e4a7d2bcf9e75ae
- SSDEEP 1536:mJ05+SP/l0iI5XYIUicOFCWsvzqUSS0XZqISnFhKoMfyLd9:dI5oEcOAqUSS0XZqIWMfyLd9
- MD5 SHA1 SHA512 SSDEEP
F0nts/DL/Uzbek.ini
- SHA256 af11b0cbdcb67ddc024272d45d098cf1da8a21661fe9f6fb7a0239d0c6684531
- MD5 29dc4e77b361bbce2780610edf092861
- SHA1 5edc783102a4f213e876d70599e0155387ca7429
- SHA512 ad87a926748c607773dad37b1a9fcdd47a87dde0defb36aadf6c8b043561e57b5c420e517d7ae3283f098b661c49e5d8a3ae6f3a348824780ef9d5435be828a9
- SSDEEP 768:wR2Wh/kX5yUYBW0nbEwiW8S9LZU0xqXKhTVT2EogXcZILi2LAUTVxlWRumLFE0DZ:DcBW0nbEnMUMlWRRr+Wntr
- MD5 SHA1 SHA512 SSDEEP
F0nts/DL/Vietnamese.ini
- SHA256 7b939fb24a88a01b1e45b37427dccb8a319cead04fd012136551f36b4363e887
- MD5 9ee05121e1a02efeec015669d96161eb
- SHA1 28d253a23000f4ca1cba851410cec9b1b02b52c0
- SHA512 0f31ccc9b86661ca679258b309ab846608145c8366225e95aa61691c5b42323a50a1631f645ab58483dcf26331239b677e97d04106029c67aa3c67367fbfbca6
- SSDEEP 768:wVna1qkfNk1220z8aypq/EJDPU35BL8kDgavFij+I7Cs3L+LnL80Tj3DSHPoH1ag:5qkf+12SFU/bnP3DSE1swQg5
- MD5 SHA1 SHA512 SSDEEP
F0nts/DL/Winzip.exe
- IMPHASH 629fae0a56e3262e208711dda6ae6b1d
- SHA256 26b40c79356453c60498772423f99384a3d24dd2d0662d215506768cb9c58370
- MD5 b66dec691784f00061bc43e62030c343
- SHA1 779d947d41efafc2995878e56e213411de8fb4cf
- SHA512 6a89bd581baf372f07e76a3378e6f6eb29cac2e4981a7f0affb4101153407cadfce9f1b6b28d5a003f7d4039577029b2ec6ebcfd58e55288e056614fb03f8ba3
- SSDEEP 98304:lJXOBfK92HbAw0CNB3kJElzNsy8vGUvfCo3ABH43:lJ192HbAXCvDlzNsy8vGUyo3AB8
- MD5 SHA1 SHA512 SSDEEP
Digest
ca:05:77:9a:83:94:f1:c2:84:3b:d1:35:92:02:9e:08:73:69:34:94:e8:62:49:32:6d:ca:10:c8:55:9e:d9:9b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
Chains
Mar 1, 2019
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE
Digest
ed:14:78:6d:47:d9:55:27:5a:d1:dd:f1:22:3e:ed:fc:47:98:f7:f9
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
Chains
Mar 1, 2019
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
Serial Number
52:9e:3f:9f:cf:7d:58:d5:20:d6:07:ab:74:39:50:02
Issuer
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jun 2, 2017 - Jun 1, 2020
Subject
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Issuer
CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
May 30, 2000 - May 30, 2020
Subject
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 9, 2013 - May 8, 2028
Subject
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
Serial Number
52:9e:3f:9f:cf:7d:58:d5:20:d6:07:ab:74:39:50:02
Issuer
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jun 2, 2017 - Jun 1, 2020
Subject
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Issuer
CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
May 30, 2000 - May 30, 2020
Subject
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 9, 2013 - May 8, 2028
Subject
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Issuer
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 12, 2016 - Jan 11, 2031
Subject
CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Issuer
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 23, 2017 - Mar 22, 2029
Minor OS version
2
Major OS version
5
Entry point
140644
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\Projects\WinRAR\sfx\setup\build\sfxrar64\Release\sfxrar.pdb
kernel32
GetLastError
SetLastError
GetCurrentProcess
DeviceIoControl
SetFileTime
CloseHandle
CreateDirectoryW
RemoveDirectoryW
CreateFileW
DeleteFileW
CreateHardLinkW
GetShortPathNameW
GetLongPathNameW
MoveFileW
GetFileType
GetStdHandle
WriteFile
ReadFile
FlushFileBuffers
SetEndOfFile
SetFilePointer
SetFileAttributesW
GetFileAttributesW
FindClose
FindFirstFileW
FindNextFileW
GetVersionExW
GetCurrentDirectoryW
GetFullPathNameW
FoldStringW
GetModuleFileNameW
GetModuleHandleW
FindResourceW
FreeLibrary
GetProcAddress
GetCurrentProcessId
ExitProcess
SetThreadExecutionState
Sleep
LoadLibraryW
GetSystemDirectoryW
CompareStringW
AllocConsole
FreeConsole
AttachConsole
WriteConsoleW
GetProcessAffinityMask
CreateThread
SetThreadPriority
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
ReleaseSemaphore
WaitForSingleObject
CreateEventW
CreateSemaphoreW
GetSystemTime
SystemTimeToTzSpecificLocalTime
TzSpecificLocalTimeToSystemTime
SystemTimeToFileTime
FileTimeToLocalFileTime
LocalFileTimeToFileTime
FileTimeToSystemTime
GetCPInfo
IsDBCSLeadByte
MultiByteToWideChar
WideCharToMultiByte
GlobalAlloc
GetTickCount
LockResource
GlobalLock
GlobalUnlock
GlobalFree
LoadResource
SizeofResource
SetCurrentDirectoryW
GetExitCodeProcess
GetLocalTime
MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
OpenFileMappingW
GetCommandLineW
SetEnvironmentVariableW
ExpandEnvironmentStringsW
GetTempPathW
MoveFileExW
GetLocaleInfoW
GetTimeFormatW
GetDateFormatW
GetNumberFormatW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
HeapSize
SetStdHandle
GetProcessHeap
FreeEnvironmentStringsW
RaiseException
GetSystemInfo
VirtualProtect
VirtualQuery
LoadLibraryExA
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlPcToFileHeader
EncodePointer
RtlUnwindEx
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
QueryPerformanceFrequency
TerminateProcess
GetModuleHandleExW
GetModuleFileNameA
GetACP
HeapFree
HeapAlloc
HeapReAlloc
GetStringTypeW
LCMapStringW
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetEnvironmentStringsW
gdiplus
GdiplusShutdown
GdiplusStartup
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromStream
GdipDisposeImage
GdipCloneImage
GdipFree
GdipAlloc
Name
.text
Size
203KB
Virtual Size
203KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
61KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
136KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.gfids
Size
512B
Virtual Size
208B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
152KB
Virtual Size
156KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, id=241, version=40116,
count=138, id=243, version=40116,
count=13, id=242, version=40116,
count=1, id=199, version=41118,
count=8, id=259, version=24123,
count=19, id=260, version=24123,
count=43, id=261, version=24123,
count=9, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=135, version=30729,
count=5, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=272, id=1, productName=Unmarked objects,
count=48, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
F0nts/LangZ/Cr0atian.ini
- SHA256 5bf2b70edb78073f3ce4fe6d809a3a25c982cb2840b8ebaf4367ebc42f16bd3e
- MD5 8477123868f12632d652c6da5df683c2
- SHA1 23dbeba17e366e1bb5e7d7be156a9be309c9555d
- SHA512 b785f8d680f22211c01cfa59cdf86f1bfdeca0446c1c26fc2c144e3018773d22e4050c95cd513d60df9b226df31dc504b5059db168977b3949dbcc428a7ff30d
- SSDEEP 768:w0VnpiuM0pY1HIlw1VoIGRweBLUab7Fno8wBtA1yR4IY52t9RM8wE4c+Tyb3TRr2:VdpiuM0pY1olaEZLUYg4c+7wvO60ll
- MD5 SHA1 SHA512 SSDEEP
F0nts/LangZ/Dani.ini
- SHA256 59df77a75aca7c0a8574f6d4b5be5632908c4fea8634f4748e36ff6fee40e317
- MD5 5f50b22de0efb245cd3b8f2fb50a6d3d
- SHA1 be369ffd0c47ff92b3aa5c259ab9f4d40807b687
- SHA512 f3fec19409ea564bd68f4bd1253297ed8bcbe86554422a22891c61ee237f581f95f6976512e53bcabc5cafe3411343e660d3fb8f398f95f9c1efcec8eaa4367a
- SSDEEP 1536:gmGRkLzUJnbfeKzcqt5G+qX59CcZEY9dHbm/c4C1CgqfRG:gmGRbnbfNRt5G+qX59CcNdX47G
- MD5 SHA1 SHA512 SSDEEP
F0nts/LangZ/English.ini
- SHA256 0f9d467f6bb6f682c0d1351b26038950c73720f2bfc0741ec1c7bfab2046d75f
- MD5 525ce1c02ca53f9c63cb697ed3aae899
- SHA1 9ddc2763d9dd663f3cb0febf0d580e21c52c2f18
- SHA512 734d599d839b1266c42f340e044243ae30d1859d314eed7738f72f59201d19359f1ac6ee0cac8bfef4a0a2b8f2232a4f1f33336770c8c43f929c1bef162d2317
- SSDEEP 1536:5S5Ybl8/lKlXiF3y24FMuRvV5I7BohUT1:xxXiVQV5uJ1
- MD5 SHA1 SHA512 SSDEEP
F0nts/LangZ/Hebrew.ini
- SHA256 42ba655e5b635698995a588f4dd39147be867a0c4b45fd49edc65982b12b9531
- MD5 dbf6973ac46a0adcae8500a16cce4e48
- SHA1 eae986788b33ad048f08ba722fd4eb7354212e63
- SHA512 7a59fe15ac9c10caf3b3abed60201f008583684dfa476cbb9f8ad4c3f5e93d34f31dec859019f1f36d92129b2298272df5eec15be59e367cdcb77d5e89b46549
- SSDEEP 768:w2kJwh+FrSb7UJTvsjkhsRGn6PqwKJTDv69ZUtiGn5Eq5lBQAjV8WEdtWfSZu/JR:zkJwh+FrScvs6Eq5uWpfSZ6KlThAd+C
- MD5 SHA1 SHA512 SSDEEP
F0nts/LangZ/Hungarian.ini
- SHA256 fe9997629d296908247a2e82da6c369e2ea7eb4c87b12fc7c8d3ecb3e6fc320d
- MD5 7591df7fae4342cbc7a0706e1b28e87b
- SHA1 825e88ad498e8713522f5aef3b21ee01d6fa8b41
- SHA512 8f58c6fbaf5ea140a3ecbbc88cbf4bdd0e0ba3fbdf169f4b7cb831094a47a6ead103f89fc07748f91d1396ebd13c7ebcc90a316f0eb203ff4c86a50be5cd3ca4
- SSDEEP 3072:UaKBsDgGod8NAH4iyf8kXrLfKgL6YhL+L3yGU:73X
- MD5 SHA1 SHA512 SSDEEP
F0nts/LangZ/Ind0nesian.ini
- SHA256 9e52e0b1f7ec39a36e2edd0231dc98865de8524a651fcf6b1b948a575e35fd0f
- MD5 d944d8a3551719a176db4da31733ab75
- SHA1 6cf51cb43dbd7ca84334389076adbabe407d95b8
- SHA512 b9077bdeb69e07894c995bd519ebab594016c8077a213b29264a8040370c9841f1ad6dada2d0af595a596a3875f9c9989dc30af8e7c7b981b420cf1382d5c9a6
- SSDEEP 768:wbWt5bTJA+NtkooQG+Wioa6lBT8IwUzCc0qfcLVUWf1RzVARBBfxP7KLVoeY4z9v:9bT+atkwR2AIheY4pMOy0F8gx
- MD5 SHA1 SHA512 SSDEEP
F0nts/LangZ/Japanese.ini
- SHA256 9077b41d743ed6af51cd9b8aedaebb6d1e0e6217825635a1aa9451994efaff0f
- MD5 36d47bfae8d0d48d56b7b1feb3b317e7
- SHA1 1d8d59aa40f765319fcb70a9f49e997aca305b89
- SHA512 b510a5b17e52778b87f58aaa61f222f11c6190a988440789d1d40591aebdcc7311f7bb3bee9621ab8d971dc2de1ec6ed4d52598b3808dd689f693c3e5897f938
- SSDEEP 768:wPZoCIywqTgXCaNnWYjV6UDFlv0Gaf9xS7ua6PE0FtrqGv0ZQkxKQRTM94DGNWdN:1CIywqTKnWKV5GAQkxHKUfxJYNeNx
- MD5 SHA1 SHA512 SSDEEP
F0nts/LangZ/K0rean.ini
- SHA256 ad556989f6e4a683d9668e41d2d7175b7b46847c2eef26188b9075fc600d0132
- MD5 efae0c78be2abe2920c78b9d4785ab45
- SHA1 8c0799fb68852cb071bbe260deb4ab357bd5f4ed
- SHA512 44737be4d4bd0f93ca3e986c89102612932f3749b8e9b89446a567cff60ceb856b4bd7380da7fe3f1809579e6ec2162d0cdd4a217935a4961c6b36a482dd4ac8
- SSDEEP 768:wPYhkzQl6qE7rY+xuPAsyKVmq8Ag8lyWqFk5ziCfsg8S+EZNlWJ7lxyBiCWfbMav:HSzQlc7siCmq8AFlBmLfbNA2Nt7osVP
- MD5 SHA1 SHA512 SSDEEP
F0nts/LangZ/Kazakh.ini
- SHA256 1fde00989b3baeb67e6b1f8654cd2fc7216a40a4c5a5a9a64d03d47ee95e76be
- MD5 fe2b5687f2de60cb55629fd7f0ca9a21
- SHA1 5299f36a7b8c5a0b59e3603b8517cb1b3e0f2160
- SHA512 ebda06bfb42a56ed71915a1f42d84edb795927697eae51fa98bcdbac76ce6dd224c7e7610743050f45649f2d756aea82e47af3ef6ad929ddc9593d8044e3334d
- SSDEEP 1536:UdBOtqJCnhr189gDXrbF3h14FMuRv5RI7EhUv1:isH/VG5Rm1
- MD5 SHA1 SHA512 SSDEEP
F0nts/LangZ/Kurdish.ini
- SHA256 94ac43cb7eb95277db44616a53b23e9174415377b4b3b98a1bdfc98d06a40a4b
- MD5 af61b416403963d653f5008aaba82e03
- SHA1 b1ab14d6ee43e1230cfcc5acfc4de27ab2a6f6b3
- SHA512 a65a21d5d9f7085acf0a96701d4577bf5fbfc0ebcb4f188ff39139b135570f95d76677e6470261aef022b75378898342ab3105704228029f90b8998f414603ab
- SSDEEP 1536:rESqStTfwl/lmie4rC3DA3f1wjF7af0/KkmwL3mnJ/6BD1I:lbTNC
- MD5 SHA1 SHA512 SSDEEP
F0nts/LangZ/N0rwegian.ini
- SHA256 1c99b7b06af0d5ac5582f00447fbe04e2325e173666cba8ce2d18678f7b31e3b
- MD5 5cf9c294bd9d233d95e54e198bd8b4ab
- SHA1 670de196a831bc9b0d503694b594524ccfb77b04
- SHA512 bea2be5e1dab1854cbb83fc221f392793aa7b67a1ba1ee521c4ad0aaea671bbbda868d57b3b226cc713eaf9f90bd9fc05b3166353d78c532a43111349159ac7c
- SSDEEP 3072:/Tu1PWiYzr8Z2GIBpLkQXtgpE7ZrB2kyC+3HX:0
- MD5 SHA1 SHA512 SSDEEP
F0nts/LangZ/SimpChinese.ini
- SHA256 1bfa864f7012e64f5c1656fc5636ea29e87e2a45b5eb2c31a3b20643fdd8ad4d
- MD5 7aad044a68d89d8bb5a202f8bc69d87c
- SHA1 e20ca69d6f4d1612dc4457612a4b5e4808470bf3
- SHA512 1fe22968bcba141229d8a4d36f8a7d300e44e76ea701d6a07430854567d15c8b8ebaaacb646d038a89273414c5b2a48562407ca31ac9c75e1e22fece73686625
- SSDEEP 1536:SXm7cLrzWFubvgkOvAbGCgjhRrERD+0xs3sqPHGUt471J2BZIn:8FKNPHGVt
- MD5 SHA1 SHA512 SSDEEP
F0nts/LangZ/Sinhala.ini
- SHA256 b6fad3bf2adba7c77641ee1a17ff4cd9e5e9b14bac1b855346c91a286e517504
- MD5 318ee9a93c4620940f88052b904f05ce
- SHA1 a5574f778537ce085d53c3fc52299b3049da2371
- SHA512 054c1e0322a170b83273a5c253eeb9ffc107056c555ca470d19dbdefc7d68c822d67576fd9333cf5b17357878dc6147a3d1367219db48b2b10e9bd915e806e52
- SSDEEP 1536:Run1VCXWZTr/lOPoMHjYMgr5xU1Jdr/pSnE8EtwO5vrzAKnUs2:RungtoMHjYMgrgJqE8EqOxzus2
- MD5 SHA1 SHA512 SSDEEP
F0nts/LangZ/Sl0vak.ini
- SHA256 b5b2f7fc1c62f1c8161ec59af79cf5e8f12cb0070264703087dcc5cb58e7352a
- MD5 fcba4d2df72a46575ca828c807224431
- SHA1 265e34f895f4b2fbe98a39b960c385be7309dfaa
- SHA512 6edf1e1484225455b76a1deb6c9f02857433a941bc0aececb916f0aede4398a4f22e70e9c152bd6a78ba2f02f11237a6ee92fb05b21374d250f680b56c6a5cc1
- SSDEEP 3072:2ykd4BlB1wCoG9Yhgt8VQcGlW2Jw/6ro5pw9v6Nv83diJoTNfaRlnCoUjZ5bYtZr:P1wCnyNYpCaAWK
- MD5 SHA1 SHA512 SSDEEP
F0nts/LangZ/Swedi.ini
- SHA256 f1ee3b2de54ee588813a7dbffca7e7607bbb769c763cdf73ccd600e06346fe1d
- MD5 d0280eb9ebf7e5f9b91dc0e405bd7178
- SHA1 e0425673213109f140f8f9b7474029a0326cdab4
- SHA512 0102a9b215d169b5cad039bbf80ef9882ad6eea7933ccb47e6ac204451456c50baabaeca43dd477a36d2db3eda317f4d59979e5387e169fbedf1c13494dc87e2
- SSDEEP 3072:lMgTj95UgiNg1TdyjQxx3Ho7wAM65CB9mptXse6/3/GbBJsXdFg9FNX:w
- MD5 SHA1 SHA512 SSDEEP
F0nts/LangZ/Thai.ini
- SHA256 172276c875a496c173b349e24f7dec66ddda24f6a424120a13de73ef5e70ba07
- MD5 b193d9eacf4afac3199e11b4f4cb6572
- SHA1 9b3f47c3674b11e16df5ba6d5d29d2698a3e1694
- SHA512 11a6971e4ba3c03822de4a46bd9854f2a1525b5380000afac9eddb5d644ba4af0308454413016c859960ce4cf49efe0dbea4a59651b6127d643d1c7eaec34f32
- SSDEEP 1536:5fJMD1fKNP5/l3X8vruiFDKn+0PRs5jWY+APLR2lw:xy
- MD5 SHA1 SHA512 SSDEEP
F0nts/LangZ/TradChinese.ini
- SHA256 eb8fc39f2551834010f3748d81e5f842a1b4e27adb87e425b764bb9152b55cb1
- MD5 dc01555f89e044192a9ad584b62e41a7
- SHA1 e830a3012e610b2c8775c993ff504f6f3e5628ee
- SHA512 954582efc17a2ffb29ba462d3d670576682211066a67de11daae4e5b2f283e055bb3119ce6aab1f40fbf8e629d7e0562c5059455ae420741558484f3c464bcca
- SSDEEP 768:wRZh4e4gX/LtXW2DhVaajeVbWFcqnxCjDvUkkIRNQz+q8wbXrFtUkFhBaQagVQlz:yZGgX/LtXW2Dhk1bWF5dhBa00uZNfsi+
- MD5 SHA1 SHA512 SSDEEP
F0nts/LangZ/Ukrainian.ini
- SHA256 f1f0c46ed4c136149fd57d9cae512242a023e14dd13d7c633bb4f7bf9ed71343
- MD5 9482109e20bf801180bbe11e0603c972
- SHA1 bafe4b7daa5529a5bd7b708482cfcdab95273959
- SHA512 b06df7881df5f79fd246e4c95edbe8c2072dbb9a6a02a7f66886b1a41c6928cf9b7d544b0c238ff2ddcb77fdb7f9ed8764ecd32fb46aa05f7bc6a5e167fded1e
- SSDEEP 1536:iziJtNQr3yk2oKLNzPOcGC+Be6fJzFmXZ:sPcGC+Be6fO
- MD5 SHA1 SHA512 SSDEEP
F0nts/LangZ/UyghurLatin.ini
- SHA256 d517f3322a43292dbb241597353ad01013ee3be86d666c83d87c0eda4f56f926
- MD5 98eb38cef87e8fa6e6d2619577d4265f
- SHA1 205d6e9147c1f935612423bb9716fa402efa3e57
- SHA512 4e85b523bd819d41ab1032534ef1ca38e841a0d80c2fc672b21a9f2dfa846384ccedd4cea9745ef7ccf127c98378bba913057b0dd716fd620e4a7d2bcf9e75ae
- SSDEEP 1536:mJ05+SP/l0iI5XYIUicOFCWsvzqUSS0XZqISnFhKoMfyLd9:dI5oEcOAqUSS0XZqIWMfyLd9
- MD5 SHA1 SHA512 SSDEEP
F0nts/LangZ/Uzbek.ini
- SHA256 af11b0cbdcb67ddc024272d45d098cf1da8a21661fe9f6fb7a0239d0c6684531
- MD5 29dc4e77b361bbce2780610edf092861
- SHA1 5edc783102a4f213e876d70599e0155387ca7429
- SHA512 ad87a926748c607773dad37b1a9fcdd47a87dde0defb36aadf6c8b043561e57b5c420e517d7ae3283f098b661c49e5d8a3ae6f3a348824780ef9d5435be828a9
- SSDEEP 768:wR2Wh/kX5yUYBW0nbEwiW8S9LZU0xqXKhTVT2EogXcZILi2LAUTVxlWRumLFE0DZ:DcBW0nbEnMUMlWRRr+Wntr
- MD5 SHA1 SHA512 SSDEEP
F0nts/LangZ/Vietnamese.ini
- SHA256 7b939fb24a88a01b1e45b37427dccb8a319cead04fd012136551f36b4363e887
- MD5 9ee05121e1a02efeec015669d96161eb
- SHA1 28d253a23000f4ca1cba851410cec9b1b02b52c0
- SHA512 0f31ccc9b86661ca679258b309ab846608145c8366225e95aa61691c5b42323a50a1631f645ab58483dcf26331239b677e97d04106029c67aa3c67367fbfbca6
- SSDEEP 768:wVna1qkfNk1220z8aypq/EJDPU35BL8kDgavFij+I7Cs3L+LnL80Tj3DSHPoH1ag:5qkf+12SFU/bnP3DSE1swQg5
- MD5 SHA1 SHA512 SSDEEP
F0nts/LangZ/Winzip.exe
- IMPHASH 629fae0a56e3262e208711dda6ae6b1d
- SHA256 26b40c79356453c60498772423f99384a3d24dd2d0662d215506768cb9c58370
- MD5 b66dec691784f00061bc43e62030c343
- SHA1 779d947d41efafc2995878e56e213411de8fb4cf
- SHA512 6a89bd581baf372f07e76a3378e6f6eb29cac2e4981a7f0affb4101153407cadfce9f1b6b28d5a003f7d4039577029b2ec6ebcfd58e55288e056614fb03f8ba3
- SSDEEP 98304:lJXOBfK92HbAw0CNB3kJElzNsy8vGUvfCo3ABH43:lJ192HbAXCvDlzNsy8vGUyo3AB8
- MD5 SHA1 SHA512 SSDEEP
Digest
ca:05:77:9a:83:94:f1:c2:84:3b:d1:35:92:02:9e:08:73:69:34:94:e8:62:49:32:6d:ca:10:c8:55:9e:d9:9b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
Chains
Mar 1, 2019
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE
Digest
ed:14:78:6d:47:d9:55:27:5a:d1:dd:f1:22:3e:ed:fc:47:98:f7:f9
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
Chains
Mar 1, 2019
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
Serial Number
52:9e:3f:9f:cf:7d:58:d5:20:d6:07:ab:74:39:50:02
Issuer
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jun 2, 2017 - Jun 1, 2020
Subject
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Issuer
CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
May 30, 2000 - May 30, 2020
Subject
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 9, 2013 - May 8, 2028
Subject
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
Serial Number
52:9e:3f:9f:cf:7d:58:d5:20:d6:07:ab:74:39:50:02
Issuer
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jun 2, 2017 - Jun 1, 2020
Subject
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Issuer
CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
May 30, 2000 - May 30, 2020
Subject
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 9, 2013 - May 8, 2028
Subject
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Issuer
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 12, 2016 - Jan 11, 2031
Subject
CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Issuer
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 23, 2017 - Mar 22, 2029
Minor OS version
2
Major OS version
5
Entry point
140644
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\Projects\WinRAR\sfx\setup\build\sfxrar64\Release\sfxrar.pdb
kernel32
GetLastError
SetLastError
GetCurrentProcess
DeviceIoControl
SetFileTime
CloseHandle
CreateDirectoryW
RemoveDirectoryW
CreateFileW
DeleteFileW
CreateHardLinkW
GetShortPathNameW
GetLongPathNameW
MoveFileW
GetFileType
GetStdHandle
WriteFile
ReadFile
FlushFileBuffers
SetEndOfFile
SetFilePointer
SetFileAttributesW
GetFileAttributesW
FindClose
FindFirstFileW
FindNextFileW
GetVersionExW
GetCurrentDirectoryW
GetFullPathNameW
FoldStringW
GetModuleFileNameW
GetModuleHandleW
FindResourceW
FreeLibrary
GetProcAddress
GetCurrentProcessId
ExitProcess
SetThreadExecutionState
Sleep
LoadLibraryW
GetSystemDirectoryW
CompareStringW
AllocConsole
FreeConsole
AttachConsole
WriteConsoleW
GetProcessAffinityMask
CreateThread
SetThreadPriority
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
ReleaseSemaphore
WaitForSingleObject
CreateEventW
CreateSemaphoreW
GetSystemTime
SystemTimeToTzSpecificLocalTime
TzSpecificLocalTimeToSystemTime
SystemTimeToFileTime
FileTimeToLocalFileTime
LocalFileTimeToFileTime
FileTimeToSystemTime
GetCPInfo
IsDBCSLeadByte
MultiByteToWideChar
WideCharToMultiByte
GlobalAlloc
GetTickCount
LockResource
GlobalLock
GlobalUnlock
GlobalFree
LoadResource
SizeofResource
SetCurrentDirectoryW
GetExitCodeProcess
GetLocalTime
MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
OpenFileMappingW
GetCommandLineW
SetEnvironmentVariableW
ExpandEnvironmentStringsW
GetTempPathW
MoveFileExW
GetLocaleInfoW
GetTimeFormatW
GetDateFormatW
GetNumberFormatW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
HeapSize
SetStdHandle
GetProcessHeap
FreeEnvironmentStringsW
RaiseException
GetSystemInfo
VirtualProtect
VirtualQuery
LoadLibraryExA
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlPcToFileHeader
EncodePointer
RtlUnwindEx
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
QueryPerformanceFrequency
TerminateProcess
GetModuleHandleExW
GetModuleFileNameA
GetACP
HeapFree
HeapAlloc
HeapReAlloc
GetStringTypeW
LCMapStringW
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetEnvironmentStringsW
gdiplus
GdiplusShutdown
GdiplusStartup
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromStream
GdipDisposeImage
GdipCloneImage
GdipFree
GdipAlloc
Name
.text
Size
203KB
Virtual Size
203KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
61KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
136KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.gfids
Size
512B
Virtual Size
208B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
152KB
Virtual Size
156KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, id=241, version=40116,
count=138, id=243, version=40116,
count=13, id=242, version=40116,
count=1, id=199, version=41118,
count=8, id=259, version=24123,
count=19, id=260, version=24123,
count=43, id=261, version=24123,
count=9, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=135, version=30729,
count=5, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=272, id=1, productName=Unmarked objects,
count=48, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
F0nts/Nita/Cr0atian.ini
- SHA256 5bf2b70edb78073f3ce4fe6d809a3a25c982cb2840b8ebaf4367ebc42f16bd3e
- MD5 8477123868f12632d652c6da5df683c2
- SHA1 23dbeba17e366e1bb5e7d7be156a9be309c9555d
- SHA512 b785f8d680f22211c01cfa59cdf86f1bfdeca0446c1c26fc2c144e3018773d22e4050c95cd513d60df9b226df31dc504b5059db168977b3949dbcc428a7ff30d
- SSDEEP 768:w0VnpiuM0pY1HIlw1VoIGRweBLUab7Fno8wBtA1yR4IY52t9RM8wE4c+Tyb3TRr2:VdpiuM0pY1olaEZLUYg4c+7wvO60ll
- MD5 SHA1 SHA512 SSDEEP
F0nts/Nita/Dani.ini
- SHA256 59df77a75aca7c0a8574f6d4b5be5632908c4fea8634f4748e36ff6fee40e317
- MD5 5f50b22de0efb245cd3b8f2fb50a6d3d
- SHA1 be369ffd0c47ff92b3aa5c259ab9f4d40807b687
- SHA512 f3fec19409ea564bd68f4bd1253297ed8bcbe86554422a22891c61ee237f581f95f6976512e53bcabc5cafe3411343e660d3fb8f398f95f9c1efcec8eaa4367a
- SSDEEP 1536:gmGRkLzUJnbfeKzcqt5G+qX59CcZEY9dHbm/c4C1CgqfRG:gmGRbnbfNRt5G+qX59CcNdX47G
- MD5 SHA1 SHA512 SSDEEP
F0nts/Nita/English.ini
- SHA256 0f9d467f6bb6f682c0d1351b26038950c73720f2bfc0741ec1c7bfab2046d75f
- MD5 525ce1c02ca53f9c63cb697ed3aae899
- SHA1 9ddc2763d9dd663f3cb0febf0d580e21c52c2f18
- SHA512 734d599d839b1266c42f340e044243ae30d1859d314eed7738f72f59201d19359f1ac6ee0cac8bfef4a0a2b8f2232a4f1f33336770c8c43f929c1bef162d2317
- SSDEEP 1536:5S5Ybl8/lKlXiF3y24FMuRvV5I7BohUT1:xxXiVQV5uJ1
- MD5 SHA1 SHA512 SSDEEP
F0nts/Nita/Hebrew.ini
- SHA256 42ba655e5b635698995a588f4dd39147be867a0c4b45fd49edc65982b12b9531
- MD5 dbf6973ac46a0adcae8500a16cce4e48
- SHA1 eae986788b33ad048f08ba722fd4eb7354212e63
- SHA512 7a59fe15ac9c10caf3b3abed60201f008583684dfa476cbb9f8ad4c3f5e93d34f31dec859019f1f36d92129b2298272df5eec15be59e367cdcb77d5e89b46549
- SSDEEP 768:w2kJwh+FrSb7UJTvsjkhsRGn6PqwKJTDv69ZUtiGn5Eq5lBQAjV8WEdtWfSZu/JR:zkJwh+FrScvs6Eq5uWpfSZ6KlThAd+C
- MD5 SHA1 SHA512 SSDEEP
F0nts/Nita/Hungarian.ini
- SHA256 fe9997629d296908247a2e82da6c369e2ea7eb4c87b12fc7c8d3ecb3e6fc320d
- MD5 7591df7fae4342cbc7a0706e1b28e87b
- SHA1 825e88ad498e8713522f5aef3b21ee01d6fa8b41
- SHA512 8f58c6fbaf5ea140a3ecbbc88cbf4bdd0e0ba3fbdf169f4b7cb831094a47a6ead103f89fc07748f91d1396ebd13c7ebcc90a316f0eb203ff4c86a50be5cd3ca4
- SSDEEP 3072:UaKBsDgGod8NAH4iyf8kXrLfKgL6YhL+L3yGU:73X
- MD5 SHA1 SHA512 SSDEEP
F0nts/Nita/Ind0nesian.ini
- SHA256 9e52e0b1f7ec39a36e2edd0231dc98865de8524a651fcf6b1b948a575e35fd0f
- MD5 d944d8a3551719a176db4da31733ab75
- SHA1 6cf51cb43dbd7ca84334389076adbabe407d95b8
- SHA512 b9077bdeb69e07894c995bd519ebab594016c8077a213b29264a8040370c9841f1ad6dada2d0af595a596a3875f9c9989dc30af8e7c7b981b420cf1382d5c9a6
- SSDEEP 768:wbWt5bTJA+NtkooQG+Wioa6lBT8IwUzCc0qfcLVUWf1RzVARBBfxP7KLVoeY4z9v:9bT+atkwR2AIheY4pMOy0F8gx
- MD5 SHA1 SHA512 SSDEEP
F0nts/Nita/Japanese.ini
- SHA256 9077b41d743ed6af51cd9b8aedaebb6d1e0e6217825635a1aa9451994efaff0f
- MD5 36d47bfae8d0d48d56b7b1feb3b317e7
- SHA1 1d8d59aa40f765319fcb70a9f49e997aca305b89
- SHA512 b510a5b17e52778b87f58aaa61f222f11c6190a988440789d1d40591aebdcc7311f7bb3bee9621ab8d971dc2de1ec6ed4d52598b3808dd689f693c3e5897f938
- SSDEEP 768:wPZoCIywqTgXCaNnWYjV6UDFlv0Gaf9xS7ua6PE0FtrqGv0ZQkxKQRTM94DGNWdN:1CIywqTKnWKV5GAQkxHKUfxJYNeNx
- MD5 SHA1 SHA512 SSDEEP
F0nts/Nita/K0rean.ini
- SHA256 ad556989f6e4a683d9668e41d2d7175b7b46847c2eef26188b9075fc600d0132
- MD5 efae0c78be2abe2920c78b9d4785ab45
- SHA1 8c0799fb68852cb071bbe260deb4ab357bd5f4ed
- SHA512 44737be4d4bd0f93ca3e986c89102612932f3749b8e9b89446a567cff60ceb856b4bd7380da7fe3f1809579e6ec2162d0cdd4a217935a4961c6b36a482dd4ac8
- SSDEEP 768:wPYhkzQl6qE7rY+xuPAsyKVmq8Ag8lyWqFk5ziCfsg8S+EZNlWJ7lxyBiCWfbMav:HSzQlc7siCmq8AFlBmLfbNA2Nt7osVP
- MD5 SHA1 SHA512 SSDEEP
F0nts/Nita/Kazakh.ini
- SHA256 1fde00989b3baeb67e6b1f8654cd2fc7216a40a4c5a5a9a64d03d47ee95e76be
- MD5 fe2b5687f2de60cb55629fd7f0ca9a21
- SHA1 5299f36a7b8c5a0b59e3603b8517cb1b3e0f2160
- SHA512 ebda06bfb42a56ed71915a1f42d84edb795927697eae51fa98bcdbac76ce6dd224c7e7610743050f45649f2d756aea82e47af3ef6ad929ddc9593d8044e3334d
- SSDEEP 1536:UdBOtqJCnhr189gDXrbF3h14FMuRv5RI7EhUv1:isH/VG5Rm1
- MD5 SHA1 SHA512 SSDEEP
F0nts/Nita/Kurdish.ini
- SHA256 94ac43cb7eb95277db44616a53b23e9174415377b4b3b98a1bdfc98d06a40a4b
- MD5 af61b416403963d653f5008aaba82e03
- SHA1 b1ab14d6ee43e1230cfcc5acfc4de27ab2a6f6b3
- SHA512 a65a21d5d9f7085acf0a96701d4577bf5fbfc0ebcb4f188ff39139b135570f95d76677e6470261aef022b75378898342ab3105704228029f90b8998f414603ab
- SSDEEP 1536:rESqStTfwl/lmie4rC3DA3f1wjF7af0/KkmwL3mnJ/6BD1I:lbTNC
- MD5 SHA1 SHA512 SSDEEP
F0nts/Nita/N0rwegian.ini
- SHA256 1c99b7b06af0d5ac5582f00447fbe04e2325e173666cba8ce2d18678f7b31e3b
- MD5 5cf9c294bd9d233d95e54e198bd8b4ab
- SHA1 670de196a831bc9b0d503694b594524ccfb77b04
- SHA512 bea2be5e1dab1854cbb83fc221f392793aa7b67a1ba1ee521c4ad0aaea671bbbda868d57b3b226cc713eaf9f90bd9fc05b3166353d78c532a43111349159ac7c
- SSDEEP 3072:/Tu1PWiYzr8Z2GIBpLkQXtgpE7ZrB2kyC+3HX:0
- MD5 SHA1 SHA512 SSDEEP
F0nts/Nita/SimpChinese.ini
- SHA256 1bfa864f7012e64f5c1656fc5636ea29e87e2a45b5eb2c31a3b20643fdd8ad4d
- MD5 7aad044a68d89d8bb5a202f8bc69d87c
- SHA1 e20ca69d6f4d1612dc4457612a4b5e4808470bf3
- SHA512 1fe22968bcba141229d8a4d36f8a7d300e44e76ea701d6a07430854567d15c8b8ebaaacb646d038a89273414c5b2a48562407ca31ac9c75e1e22fece73686625
- SSDEEP 1536:SXm7cLrzWFubvgkOvAbGCgjhRrERD+0xs3sqPHGUt471J2BZIn:8FKNPHGVt
- MD5 SHA1 SHA512 SSDEEP
F0nts/Nita/Sinhala.ini
- SHA256 b6fad3bf2adba7c77641ee1a17ff4cd9e5e9b14bac1b855346c91a286e517504
- MD5 318ee9a93c4620940f88052b904f05ce
- SHA1 a5574f778537ce085d53c3fc52299b3049da2371
- SHA512 054c1e0322a170b83273a5c253eeb9ffc107056c555ca470d19dbdefc7d68c822d67576fd9333cf5b17357878dc6147a3d1367219db48b2b10e9bd915e806e52
- SSDEEP 1536:Run1VCXWZTr/lOPoMHjYMgr5xU1Jdr/pSnE8EtwO5vrzAKnUs2:RungtoMHjYMgrgJqE8EqOxzus2
- MD5 SHA1 SHA512 SSDEEP
F0nts/Nita/Sl0vak.ini
- SHA256 b5b2f7fc1c62f1c8161ec59af79cf5e8f12cb0070264703087dcc5cb58e7352a
- MD5 fcba4d2df72a46575ca828c807224431
- SHA1 265e34f895f4b2fbe98a39b960c385be7309dfaa
- SHA512 6edf1e1484225455b76a1deb6c9f02857433a941bc0aececb916f0aede4398a4f22e70e9c152bd6a78ba2f02f11237a6ee92fb05b21374d250f680b56c6a5cc1
- SSDEEP 3072:2ykd4BlB1wCoG9Yhgt8VQcGlW2Jw/6ro5pw9v6Nv83diJoTNfaRlnCoUjZ5bYtZr:P1wCnyNYpCaAWK
- MD5 SHA1 SHA512 SSDEEP
F0nts/Nita/Swedi.ini
- SHA256 f1ee3b2de54ee588813a7dbffca7e7607bbb769c763cdf73ccd600e06346fe1d
- MD5 d0280eb9ebf7e5f9b91dc0e405bd7178
- SHA1 e0425673213109f140f8f9b7474029a0326cdab4
- SHA512 0102a9b215d169b5cad039bbf80ef9882ad6eea7933ccb47e6ac204451456c50baabaeca43dd477a36d2db3eda317f4d59979e5387e169fbedf1c13494dc87e2
- SSDEEP 3072:lMgTj95UgiNg1TdyjQxx3Ho7wAM65CB9mptXse6/3/GbBJsXdFg9FNX:w
- MD5 SHA1 SHA512 SSDEEP
F0nts/Nita/Thai.ini
- SHA256 172276c875a496c173b349e24f7dec66ddda24f6a424120a13de73ef5e70ba07
- MD5 b193d9eacf4afac3199e11b4f4cb6572
- SHA1 9b3f47c3674b11e16df5ba6d5d29d2698a3e1694
- SHA512 11a6971e4ba3c03822de4a46bd9854f2a1525b5380000afac9eddb5d644ba4af0308454413016c859960ce4cf49efe0dbea4a59651b6127d643d1c7eaec34f32
- SSDEEP 1536:5fJMD1fKNP5/l3X8vruiFDKn+0PRs5jWY+APLR2lw:xy
- MD5 SHA1 SHA512 SSDEEP
F0nts/Nita/TradChinese.ini
- SHA256 eb8fc39f2551834010f3748d81e5f842a1b4e27adb87e425b764bb9152b55cb1
- MD5 dc01555f89e044192a9ad584b62e41a7
- SHA1 e830a3012e610b2c8775c993ff504f6f3e5628ee
- SHA512 954582efc17a2ffb29ba462d3d670576682211066a67de11daae4e5b2f283e055bb3119ce6aab1f40fbf8e629d7e0562c5059455ae420741558484f3c464bcca
- SSDEEP 768:wRZh4e4gX/LtXW2DhVaajeVbWFcqnxCjDvUkkIRNQz+q8wbXrFtUkFhBaQagVQlz:yZGgX/LtXW2Dhk1bWF5dhBa00uZNfsi+
- MD5 SHA1 SHA512 SSDEEP
F0nts/Nita/Ukrainian.ini
- SHA256 f1f0c46ed4c136149fd57d9cae512242a023e14dd13d7c633bb4f7bf9ed71343
- MD5 9482109e20bf801180bbe11e0603c972
- SHA1 bafe4b7daa5529a5bd7b708482cfcdab95273959
- SHA512 b06df7881df5f79fd246e4c95edbe8c2072dbb9a6a02a7f66886b1a41c6928cf9b7d544b0c238ff2ddcb77fdb7f9ed8764ecd32fb46aa05f7bc6a5e167fded1e
- SSDEEP 1536:iziJtNQr3yk2oKLNzPOcGC+Be6fJzFmXZ:sPcGC+Be6fO
- MD5 SHA1 SHA512 SSDEEP
F0nts/Nita/UyghurLatin.ini
- SHA256 d517f3322a43292dbb241597353ad01013ee3be86d666c83d87c0eda4f56f926
- MD5 98eb38cef87e8fa6e6d2619577d4265f
- SHA1 205d6e9147c1f935612423bb9716fa402efa3e57
- SHA512 4e85b523bd819d41ab1032534ef1ca38e841a0d80c2fc672b21a9f2dfa846384ccedd4cea9745ef7ccf127c98378bba913057b0dd716fd620e4a7d2bcf9e75ae
- SSDEEP 1536:mJ05+SP/l0iI5XYIUicOFCWsvzqUSS0XZqISnFhKoMfyLd9:dI5oEcOAqUSS0XZqIWMfyLd9
- MD5 SHA1 SHA512 SSDEEP
F0nts/Nita/Uzbek.ini
- SHA256 af11b0cbdcb67ddc024272d45d098cf1da8a21661fe9f6fb7a0239d0c6684531
- MD5 29dc4e77b361bbce2780610edf092861
- SHA1 5edc783102a4f213e876d70599e0155387ca7429
- SHA512 ad87a926748c607773dad37b1a9fcdd47a87dde0defb36aadf6c8b043561e57b5c420e517d7ae3283f098b661c49e5d8a3ae6f3a348824780ef9d5435be828a9
- SSDEEP 768:wR2Wh/kX5yUYBW0nbEwiW8S9LZU0xqXKhTVT2EogXcZILi2LAUTVxlWRumLFE0DZ:DcBW0nbEnMUMlWRRr+Wntr
- MD5 SHA1 SHA512 SSDEEP
F0nts/Nita/Vietnamese.ini
- SHA256 7b939fb24a88a01b1e45b37427dccb8a319cead04fd012136551f36b4363e887
- MD5 9ee05121e1a02efeec015669d96161eb
- SHA1 28d253a23000f4ca1cba851410cec9b1b02b52c0
- SHA512 0f31ccc9b86661ca679258b309ab846608145c8366225e95aa61691c5b42323a50a1631f645ab58483dcf26331239b677e97d04106029c67aa3c67367fbfbca6
- SSDEEP 768:wVna1qkfNk1220z8aypq/EJDPU35BL8kDgavFij+I7Cs3L+LnL80Tj3DSHPoH1ag:5qkf+12SFU/bnP3DSE1swQg5
- MD5 SHA1 SHA512 SSDEEP
F0nts/Nita/Winzip.exe
- IMPHASH 629fae0a56e3262e208711dda6ae6b1d
- SHA256 26b40c79356453c60498772423f99384a3d24dd2d0662d215506768cb9c58370
- MD5 b66dec691784f00061bc43e62030c343
- SHA1 779d947d41efafc2995878e56e213411de8fb4cf
- SHA512 6a89bd581baf372f07e76a3378e6f6eb29cac2e4981a7f0affb4101153407cadfce9f1b6b28d5a003f7d4039577029b2ec6ebcfd58e55288e056614fb03f8ba3
- SSDEEP 98304:lJXOBfK92HbAw0CNB3kJElzNsy8vGUvfCo3ABH43:lJ192HbAXCvDlzNsy8vGUyo3AB8
- MD5 SHA1 SHA512 SSDEEP
Digest
ca:05:77:9a:83:94:f1:c2:84:3b:d1:35:92:02:9e:08:73:69:34:94:e8:62:49:32:6d:ca:10:c8:55:9e:d9:9b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
Chains
Mar 1, 2019
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE
Digest
ed:14:78:6d:47:d9:55:27:5a:d1:dd:f1:22:3e:ed:fc:47:98:f7:f9
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
Chains
Mar 1, 2019
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
Serial Number
52:9e:3f:9f:cf:7d:58:d5:20:d6:07:ab:74:39:50:02
Issuer
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jun 2, 2017 - Jun 1, 2020
Subject
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Issuer
CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
May 30, 2000 - May 30, 2020
Subject
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 9, 2013 - May 8, 2028
Subject
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
Serial Number
52:9e:3f:9f:cf:7d:58:d5:20:d6:07:ab:74:39:50:02
Issuer
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jun 2, 2017 - Jun 1, 2020
Subject
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Issuer
CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
May 30, 2000 - May 30, 2020
Subject
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 9, 2013 - May 8, 2028
Subject
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Issuer
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 12, 2016 - Jan 11, 2031
Subject
CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Issuer
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 23, 2017 - Mar 22, 2029
Minor OS version
2
Major OS version
5
Entry point
140644
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\Projects\WinRAR\sfx\setup\build\sfxrar64\Release\sfxrar.pdb
kernel32
GetLastError
SetLastError
GetCurrentProcess
DeviceIoControl
SetFileTime
CloseHandle
CreateDirectoryW
RemoveDirectoryW
CreateFileW
DeleteFileW
CreateHardLinkW
GetShortPathNameW
GetLongPathNameW
MoveFileW
GetFileType
GetStdHandle
WriteFile
ReadFile
FlushFileBuffers
SetEndOfFile
SetFilePointer
SetFileAttributesW
GetFileAttributesW
FindClose
FindFirstFileW
FindNextFileW
GetVersionExW
GetCurrentDirectoryW
GetFullPathNameW
FoldStringW
GetModuleFileNameW
GetModuleHandleW
FindResourceW
FreeLibrary
GetProcAddress
GetCurrentProcessId
ExitProcess
SetThreadExecutionState
Sleep
LoadLibraryW
GetSystemDirectoryW
CompareStringW
AllocConsole
FreeConsole
AttachConsole
WriteConsoleW
GetProcessAffinityMask
CreateThread
SetThreadPriority
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
ReleaseSemaphore
WaitForSingleObject
CreateEventW
CreateSemaphoreW
GetSystemTime
SystemTimeToTzSpecificLocalTime
TzSpecificLocalTimeToSystemTime
SystemTimeToFileTime
FileTimeToLocalFileTime
LocalFileTimeToFileTime
FileTimeToSystemTime
GetCPInfo
IsDBCSLeadByte
MultiByteToWideChar
WideCharToMultiByte
GlobalAlloc
GetTickCount
LockResource
GlobalLock
GlobalUnlock
GlobalFree
LoadResource
SizeofResource
SetCurrentDirectoryW
GetExitCodeProcess
GetLocalTime
MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
OpenFileMappingW
GetCommandLineW
SetEnvironmentVariableW
ExpandEnvironmentStringsW
GetTempPathW
MoveFileExW
GetLocaleInfoW
GetTimeFormatW
GetDateFormatW
GetNumberFormatW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
HeapSize
SetStdHandle
GetProcessHeap
FreeEnvironmentStringsW
RaiseException
GetSystemInfo
VirtualProtect
VirtualQuery
LoadLibraryExA
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlPcToFileHeader
EncodePointer
RtlUnwindEx
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
QueryPerformanceFrequency
TerminateProcess
GetModuleHandleExW
GetModuleFileNameA
GetACP
HeapFree
HeapAlloc
HeapReAlloc
GetStringTypeW
LCMapStringW
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetEnvironmentStringsW
gdiplus
GdiplusShutdown
GdiplusStartup
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromStream
GdipDisposeImage
GdipCloneImage
GdipFree
GdipAlloc
Name
.text
Size
203KB
Virtual Size
203KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
61KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
136KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.gfids
Size
512B
Virtual Size
208B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
152KB
Virtual Size
156KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, id=241, version=40116,
count=138, id=243, version=40116,
count=13, id=242, version=40116,
count=1, id=199, version=41118,
count=8, id=259, version=24123,
count=19, id=260, version=24123,
count=43, id=261, version=24123,
count=9, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=135, version=30729,
count=5, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=272, id=1, productName=Unmarked objects,
count=48, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
F0nts/Rupo/Cr0atian.ini
- SHA256 5bf2b70edb78073f3ce4fe6d809a3a25c982cb2840b8ebaf4367ebc42f16bd3e
- MD5 8477123868f12632d652c6da5df683c2
- SHA1 23dbeba17e366e1bb5e7d7be156a9be309c9555d
- SHA512 b785f8d680f22211c01cfa59cdf86f1bfdeca0446c1c26fc2c144e3018773d22e4050c95cd513d60df9b226df31dc504b5059db168977b3949dbcc428a7ff30d
- SSDEEP 768:w0VnpiuM0pY1HIlw1VoIGRweBLUab7Fno8wBtA1yR4IY52t9RM8wE4c+Tyb3TRr2:VdpiuM0pY1olaEZLUYg4c+7wvO60ll
- MD5 SHA1 SHA512 SSDEEP
F0nts/Rupo/Dani.ini
- SHA256 59df77a75aca7c0a8574f6d4b5be5632908c4fea8634f4748e36ff6fee40e317
- MD5 5f50b22de0efb245cd3b8f2fb50a6d3d
- SHA1 be369ffd0c47ff92b3aa5c259ab9f4d40807b687
- SHA512 f3fec19409ea564bd68f4bd1253297ed8bcbe86554422a22891c61ee237f581f95f6976512e53bcabc5cafe3411343e660d3fb8f398f95f9c1efcec8eaa4367a
- SSDEEP 1536:gmGRkLzUJnbfeKzcqt5G+qX59CcZEY9dHbm/c4C1CgqfRG:gmGRbnbfNRt5G+qX59CcNdX47G
- MD5 SHA1 SHA512 SSDEEP
F0nts/Rupo/English.ini
- SHA256 0f9d467f6bb6f682c0d1351b26038950c73720f2bfc0741ec1c7bfab2046d75f
- MD5 525ce1c02ca53f9c63cb697ed3aae899
- SHA1 9ddc2763d9dd663f3cb0febf0d580e21c52c2f18
- SHA512 734d599d839b1266c42f340e044243ae30d1859d314eed7738f72f59201d19359f1ac6ee0cac8bfef4a0a2b8f2232a4f1f33336770c8c43f929c1bef162d2317
- SSDEEP 1536:5S5Ybl8/lKlXiF3y24FMuRvV5I7BohUT1:xxXiVQV5uJ1
- MD5 SHA1 SHA512 SSDEEP
F0nts/Rupo/Hebrew.ini
- SHA256 42ba655e5b635698995a588f4dd39147be867a0c4b45fd49edc65982b12b9531
- MD5 dbf6973ac46a0adcae8500a16cce4e48
- SHA1 eae986788b33ad048f08ba722fd4eb7354212e63
- SHA512 7a59fe15ac9c10caf3b3abed60201f008583684dfa476cbb9f8ad4c3f5e93d34f31dec859019f1f36d92129b2298272df5eec15be59e367cdcb77d5e89b46549
- SSDEEP 768:w2kJwh+FrSb7UJTvsjkhsRGn6PqwKJTDv69ZUtiGn5Eq5lBQAjV8WEdtWfSZu/JR:zkJwh+FrScvs6Eq5uWpfSZ6KlThAd+C
- MD5 SHA1 SHA512 SSDEEP
F0nts/Rupo/Hungarian.ini
- SHA256 fe9997629d296908247a2e82da6c369e2ea7eb4c87b12fc7c8d3ecb3e6fc320d
- MD5 7591df7fae4342cbc7a0706e1b28e87b
- SHA1 825e88ad498e8713522f5aef3b21ee01d6fa8b41
- SHA512 8f58c6fbaf5ea140a3ecbbc88cbf4bdd0e0ba3fbdf169f4b7cb831094a47a6ead103f89fc07748f91d1396ebd13c7ebcc90a316f0eb203ff4c86a50be5cd3ca4
- SSDEEP 3072:UaKBsDgGod8NAH4iyf8kXrLfKgL6YhL+L3yGU:73X
- MD5 SHA1 SHA512 SSDEEP
F0nts/Rupo/Ind0nesian.ini
- SHA256 9e52e0b1f7ec39a36e2edd0231dc98865de8524a651fcf6b1b948a575e35fd0f
- MD5 d944d8a3551719a176db4da31733ab75
- SHA1 6cf51cb43dbd7ca84334389076adbabe407d95b8
- SHA512 b9077bdeb69e07894c995bd519ebab594016c8077a213b29264a8040370c9841f1ad6dada2d0af595a596a3875f9c9989dc30af8e7c7b981b420cf1382d5c9a6
- SSDEEP 768:wbWt5bTJA+NtkooQG+Wioa6lBT8IwUzCc0qfcLVUWf1RzVARBBfxP7KLVoeY4z9v:9bT+atkwR2AIheY4pMOy0F8gx
- MD5 SHA1 SHA512 SSDEEP
F0nts/Rupo/Japanese.ini
- SHA256 9077b41d743ed6af51cd9b8aedaebb6d1e0e6217825635a1aa9451994efaff0f
- MD5 36d47bfae8d0d48d56b7b1feb3b317e7
- SHA1 1d8d59aa40f765319fcb70a9f49e997aca305b89
- SHA512 b510a5b17e52778b87f58aaa61f222f11c6190a988440789d1d40591aebdcc7311f7bb3bee9621ab8d971dc2de1ec6ed4d52598b3808dd689f693c3e5897f938
- SSDEEP 768:wPZoCIywqTgXCaNnWYjV6UDFlv0Gaf9xS7ua6PE0FtrqGv0ZQkxKQRTM94DGNWdN:1CIywqTKnWKV5GAQkxHKUfxJYNeNx
- MD5 SHA1 SHA512 SSDEEP
F0nts/Rupo/K0rean.ini
- SHA256 ad556989f6e4a683d9668e41d2d7175b7b46847c2eef26188b9075fc600d0132
- MD5 efae0c78be2abe2920c78b9d4785ab45
- SHA1 8c0799fb68852cb071bbe260deb4ab357bd5f4ed
- SHA512 44737be4d4bd0f93ca3e986c89102612932f3749b8e9b89446a567cff60ceb856b4bd7380da7fe3f1809579e6ec2162d0cdd4a217935a4961c6b36a482dd4ac8
- SSDEEP 768:wPYhkzQl6qE7rY+xuPAsyKVmq8Ag8lyWqFk5ziCfsg8S+EZNlWJ7lxyBiCWfbMav:HSzQlc7siCmq8AFlBmLfbNA2Nt7osVP
- MD5 SHA1 SHA512 SSDEEP
F0nts/Rupo/Kazakh.ini
- SHA256 1fde00989b3baeb67e6b1f8654cd2fc7216a40a4c5a5a9a64d03d47ee95e76be
- MD5 fe2b5687f2de60cb55629fd7f0ca9a21
- SHA1 5299f36a7b8c5a0b59e3603b8517cb1b3e0f2160
- SHA512 ebda06bfb42a56ed71915a1f42d84edb795927697eae51fa98bcdbac76ce6dd224c7e7610743050f45649f2d756aea82e47af3ef6ad929ddc9593d8044e3334d
- SSDEEP 1536:UdBOtqJCnhr189gDXrbF3h14FMuRv5RI7EhUv1:isH/VG5Rm1
- MD5 SHA1 SHA512 SSDEEP
F0nts/Rupo/Kurdish.ini
- SHA256 94ac43cb7eb95277db44616a53b23e9174415377b4b3b98a1bdfc98d06a40a4b
- MD5 af61b416403963d653f5008aaba82e03
- SHA1 b1ab14d6ee43e1230cfcc5acfc4de27ab2a6f6b3
- SHA512 a65a21d5d9f7085acf0a96701d4577bf5fbfc0ebcb4f188ff39139b135570f95d76677e6470261aef022b75378898342ab3105704228029f90b8998f414603ab
- SSDEEP 1536:rESqStTfwl/lmie4rC3DA3f1wjF7af0/KkmwL3mnJ/6BD1I:lbTNC
- MD5 SHA1 SHA512 SSDEEP
F0nts/Rupo/N0rwegian.ini
- SHA256 1c99b7b06af0d5ac5582f00447fbe04e2325e173666cba8ce2d18678f7b31e3b
- MD5 5cf9c294bd9d233d95e54e198bd8b4ab
- SHA1 670de196a831bc9b0d503694b594524ccfb77b04
- SHA512 bea2be5e1dab1854cbb83fc221f392793aa7b67a1ba1ee521c4ad0aaea671bbbda868d57b3b226cc713eaf9f90bd9fc05b3166353d78c532a43111349159ac7c
- SSDEEP 3072:/Tu1PWiYzr8Z2GIBpLkQXtgpE7ZrB2kyC+3HX:0
- MD5 SHA1 SHA512 SSDEEP
F0nts/Rupo/SimpChinese.ini
- SHA256 1bfa864f7012e64f5c1656fc5636ea29e87e2a45b5eb2c31a3b20643fdd8ad4d
- MD5 7aad044a68d89d8bb5a202f8bc69d87c
- SHA1 e20ca69d6f4d1612dc4457612a4b5e4808470bf3
- SHA512 1fe22968bcba141229d8a4d36f8a7d300e44e76ea701d6a07430854567d15c8b8ebaaacb646d038a89273414c5b2a48562407ca31ac9c75e1e22fece73686625
- SSDEEP 1536:SXm7cLrzWFubvgkOvAbGCgjhRrERD+0xs3sqPHGUt471J2BZIn:8FKNPHGVt
- MD5 SHA1 SHA512 SSDEEP
F0nts/Rupo/Sinhala.ini
- SHA256 b6fad3bf2adba7c77641ee1a17ff4cd9e5e9b14bac1b855346c91a286e517504
- MD5 318ee9a93c4620940f88052b904f05ce
- SHA1 a5574f778537ce085d53c3fc52299b3049da2371
- SHA512 054c1e0322a170b83273a5c253eeb9ffc107056c555ca470d19dbdefc7d68c822d67576fd9333cf5b17357878dc6147a3d1367219db48b2b10e9bd915e806e52
- SSDEEP 1536:Run1VCXWZTr/lOPoMHjYMgr5xU1Jdr/pSnE8EtwO5vrzAKnUs2:RungtoMHjYMgrgJqE8EqOxzus2
- MD5 SHA1 SHA512 SSDEEP
F0nts/Rupo/Sl0vak.ini
- SHA256 b5b2f7fc1c62f1c8161ec59af79cf5e8f12cb0070264703087dcc5cb58e7352a
- MD5 fcba4d2df72a46575ca828c807224431
- SHA1 265e34f895f4b2fbe98a39b960c385be7309dfaa
- SHA512 6edf1e1484225455b76a1deb6c9f02857433a941bc0aececb916f0aede4398a4f22e70e9c152bd6a78ba2f02f11237a6ee92fb05b21374d250f680b56c6a5cc1
- SSDEEP 3072:2ykd4BlB1wCoG9Yhgt8VQcGlW2Jw/6ro5pw9v6Nv83diJoTNfaRlnCoUjZ5bYtZr:P1wCnyNYpCaAWK
- MD5 SHA1 SHA512 SSDEEP
F0nts/Rupo/Swedi.ini
- SHA256 f1ee3b2de54ee588813a7dbffca7e7607bbb769c763cdf73ccd600e06346fe1d
- MD5 d0280eb9ebf7e5f9b91dc0e405bd7178
- SHA1 e0425673213109f140f8f9b7474029a0326cdab4
- SHA512 0102a9b215d169b5cad039bbf80ef9882ad6eea7933ccb47e6ac204451456c50baabaeca43dd477a36d2db3eda317f4d59979e5387e169fbedf1c13494dc87e2
- SSDEEP 3072:lMgTj95UgiNg1TdyjQxx3Ho7wAM65CB9mptXse6/3/GbBJsXdFg9FNX:w
- MD5 SHA1 SHA512 SSDEEP
F0nts/Rupo/Thai.ini
- SHA256 172276c875a496c173b349e24f7dec66ddda24f6a424120a13de73ef5e70ba07
- MD5 b193d9eacf4afac3199e11b4f4cb6572
- SHA1 9b3f47c3674b11e16df5ba6d5d29d2698a3e1694
- SHA512 11a6971e4ba3c03822de4a46bd9854f2a1525b5380000afac9eddb5d644ba4af0308454413016c859960ce4cf49efe0dbea4a59651b6127d643d1c7eaec34f32
- SSDEEP 1536:5fJMD1fKNP5/l3X8vruiFDKn+0PRs5jWY+APLR2lw:xy
- MD5 SHA1 SHA512 SSDEEP
F0nts/Rupo/TradChinese.ini
- SHA256 eb8fc39f2551834010f3748d81e5f842a1b4e27adb87e425b764bb9152b55cb1
- MD5 dc01555f89e044192a9ad584b62e41a7
- SHA1 e830a3012e610b2c8775c993ff504f6f3e5628ee
- SHA512 954582efc17a2ffb29ba462d3d670576682211066a67de11daae4e5b2f283e055bb3119ce6aab1f40fbf8e629d7e0562c5059455ae420741558484f3c464bcca
- SSDEEP 768:wRZh4e4gX/LtXW2DhVaajeVbWFcqnxCjDvUkkIRNQz+q8wbXrFtUkFhBaQagVQlz:yZGgX/LtXW2Dhk1bWF5dhBa00uZNfsi+
- MD5 SHA1 SHA512 SSDEEP
F0nts/Rupo/Ukrainian.ini
- SHA256 f1f0c46ed4c136149fd57d9cae512242a023e14dd13d7c633bb4f7bf9ed71343
- MD5 9482109e20bf801180bbe11e0603c972
- SHA1 bafe4b7daa5529a5bd7b708482cfcdab95273959
- SHA512 b06df7881df5f79fd246e4c95edbe8c2072dbb9a6a02a7f66886b1a41c6928cf9b7d544b0c238ff2ddcb77fdb7f9ed8764ecd32fb46aa05f7bc6a5e167fded1e
- SSDEEP 1536:iziJtNQr3yk2oKLNzPOcGC+Be6fJzFmXZ:sPcGC+Be6fO
- MD5 SHA1 SHA512 SSDEEP
F0nts/Rupo/UyghurLatin.ini
- SHA256 d517f3322a43292dbb241597353ad01013ee3be86d666c83d87c0eda4f56f926
- MD5 98eb38cef87e8fa6e6d2619577d4265f
- SHA1 205d6e9147c1f935612423bb9716fa402efa3e57
- SHA512 4e85b523bd819d41ab1032534ef1ca38e841a0d80c2fc672b21a9f2dfa846384ccedd4cea9745ef7ccf127c98378bba913057b0dd716fd620e4a7d2bcf9e75ae
- SSDEEP 1536:mJ05+SP/l0iI5XYIUicOFCWsvzqUSS0XZqISnFhKoMfyLd9:dI5oEcOAqUSS0XZqIWMfyLd9
- MD5 SHA1 SHA512 SSDEEP
F0nts/Rupo/Uzbek.ini
- SHA256 af11b0cbdcb67ddc024272d45d098cf1da8a21661fe9f6fb7a0239d0c6684531
- MD5 29dc4e77b361bbce2780610edf092861
- SHA1 5edc783102a4f213e876d70599e0155387ca7429
- SHA512 ad87a926748c607773dad37b1a9fcdd47a87dde0defb36aadf6c8b043561e57b5c420e517d7ae3283f098b661c49e5d8a3ae6f3a348824780ef9d5435be828a9
- SSDEEP 768:wR2Wh/kX5yUYBW0nbEwiW8S9LZU0xqXKhTVT2EogXcZILi2LAUTVxlWRumLFE0DZ:DcBW0nbEnMUMlWRRr+Wntr
- MD5 SHA1 SHA512 SSDEEP
F0nts/Rupo/Vietnamese.ini
- SHA256 7b939fb24a88a01b1e45b37427dccb8a319cead04fd012136551f36b4363e887
- MD5 9ee05121e1a02efeec015669d96161eb
- SHA1 28d253a23000f4ca1cba851410cec9b1b02b52c0
- SHA512 0f31ccc9b86661ca679258b309ab846608145c8366225e95aa61691c5b42323a50a1631f645ab58483dcf26331239b677e97d04106029c67aa3c67367fbfbca6
- SSDEEP 768:wVna1qkfNk1220z8aypq/EJDPU35BL8kDgavFij+I7Cs3L+LnL80Tj3DSHPoH1ag:5qkf+12SFU/bnP3DSE1swQg5
- MD5 SHA1 SHA512 SSDEEP
F0nts/Rupo/Winzip.exe
- IMPHASH 629fae0a56e3262e208711dda6ae6b1d
- SHA256 26b40c79356453c60498772423f99384a3d24dd2d0662d215506768cb9c58370
- MD5 b66dec691784f00061bc43e62030c343
- SHA1 779d947d41efafc2995878e56e213411de8fb4cf
- SHA512 6a89bd581baf372f07e76a3378e6f6eb29cac2e4981a7f0affb4101153407cadfce9f1b6b28d5a003f7d4039577029b2ec6ebcfd58e55288e056614fb03f8ba3
- SSDEEP 98304:lJXOBfK92HbAw0CNB3kJElzNsy8vGUvfCo3ABH43:lJ192HbAXCvDlzNsy8vGUyo3AB8
- MD5 SHA1 SHA512 SSDEEP
Digest
ca:05:77:9a:83:94:f1:c2:84:3b:d1:35:92:02:9e:08:73:69:34:94:e8:62:49:32:6d:ca:10:c8:55:9e:d9:9b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
Chains
Mar 1, 2019
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE
Digest
ed:14:78:6d:47:d9:55:27:5a:d1:dd:f1:22:3e:ed:fc:47:98:f7:f9
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
Chains
Mar 1, 2019
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
Serial Number
52:9e:3f:9f:cf:7d:58:d5:20:d6:07:ab:74:39:50:02
Issuer
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jun 2, 2017 - Jun 1, 2020
Subject
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Issuer
CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
May 30, 2000 - May 30, 2020
Subject
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 9, 2013 - May 8, 2028
Subject
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
Serial Number
52:9e:3f:9f:cf:7d:58:d5:20:d6:07:ab:74:39:50:02
Issuer
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jun 2, 2017 - Jun 1, 2020
Subject
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Issuer
CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
May 30, 2000 - May 30, 2020
Subject
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 9, 2013 - May 8, 2028
Subject
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Issuer
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 12, 2016 - Jan 11, 2031
Subject
CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Issuer
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 23, 2017 - Mar 22, 2029
Minor OS version
2
Major OS version
5
Entry point
140644
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\Projects\WinRAR\sfx\setup\build\sfxrar64\Release\sfxrar.pdb
kernel32
GetLastError
SetLastError
GetCurrentProcess
DeviceIoControl
SetFileTime
CloseHandle
CreateDirectoryW
RemoveDirectoryW
CreateFileW
DeleteFileW
CreateHardLinkW
GetShortPathNameW
GetLongPathNameW
MoveFileW
GetFileType
GetStdHandle
WriteFile
ReadFile
FlushFileBuffers
SetEndOfFile
SetFilePointer
SetFileAttributesW
GetFileAttributesW
FindClose
FindFirstFileW
FindNextFileW
GetVersionExW
GetCurrentDirectoryW
GetFullPathNameW
FoldStringW
GetModuleFileNameW
GetModuleHandleW
FindResourceW
FreeLibrary
GetProcAddress
GetCurrentProcessId
ExitProcess
SetThreadExecutionState
Sleep
LoadLibraryW
GetSystemDirectoryW
CompareStringW
AllocConsole
FreeConsole
AttachConsole
WriteConsoleW
GetProcessAffinityMask
CreateThread
SetThreadPriority
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
ReleaseSemaphore
WaitForSingleObject
CreateEventW
CreateSemaphoreW
GetSystemTime
SystemTimeToTzSpecificLocalTime
TzSpecificLocalTimeToSystemTime
SystemTimeToFileTime
FileTimeToLocalFileTime
LocalFileTimeToFileTime
FileTimeToSystemTime
GetCPInfo
IsDBCSLeadByte
MultiByteToWideChar
WideCharToMultiByte
GlobalAlloc
GetTickCount
LockResource
GlobalLock
GlobalUnlock
GlobalFree
LoadResource
SizeofResource
SetCurrentDirectoryW
GetExitCodeProcess
GetLocalTime
MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
OpenFileMappingW
GetCommandLineW
SetEnvironmentVariableW
ExpandEnvironmentStringsW
GetTempPathW
MoveFileExW
GetLocaleInfoW
GetTimeFormatW
GetDateFormatW
GetNumberFormatW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
HeapSize
SetStdHandle
GetProcessHeap
FreeEnvironmentStringsW
RaiseException
GetSystemInfo
VirtualProtect
VirtualQuery
LoadLibraryExA
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlPcToFileHeader
EncodePointer
RtlUnwindEx
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
QueryPerformanceFrequency
TerminateProcess
GetModuleHandleExW
GetModuleFileNameA
GetACP
HeapFree
HeapAlloc
HeapReAlloc
GetStringTypeW
LCMapStringW
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetEnvironmentStringsW
gdiplus
GdiplusShutdown
GdiplusStartup
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromStream
GdipDisposeImage
GdipCloneImage
GdipFree
GdipAlloc
Name
.text
Size
203KB
Virtual Size
203KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
61KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
136KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.gfids
Size
512B
Virtual Size
208B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
152KB
Virtual Size
156KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, id=241, version=40116,
count=138, id=243, version=40116,
count=13, id=242, version=40116,
count=1, id=199, version=41118,
count=8, id=259, version=24123,
count=19, id=260, version=24123,
count=43, id=261, version=24123,
count=9, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=135, version=30729,
count=5, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=272, id=1, productName=Unmarked objects,
count=48, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
F0nts/Tire/Cr0atian.ini
- SHA256 5bf2b70edb78073f3ce4fe6d809a3a25c982cb2840b8ebaf4367ebc42f16bd3e
- MD5 8477123868f12632d652c6da5df683c2
- SHA1 23dbeba17e366e1bb5e7d7be156a9be309c9555d
- SHA512 b785f8d680f22211c01cfa59cdf86f1bfdeca0446c1c26fc2c144e3018773d22e4050c95cd513d60df9b226df31dc504b5059db168977b3949dbcc428a7ff30d
- SSDEEP 768:w0VnpiuM0pY1HIlw1VoIGRweBLUab7Fno8wBtA1yR4IY52t9RM8wE4c+Tyb3TRr2:VdpiuM0pY1olaEZLUYg4c+7wvO60ll
- MD5 SHA1 SHA512 SSDEEP
F0nts/Tire/Dani.ini
- SHA256 59df77a75aca7c0a8574f6d4b5be5632908c4fea8634f4748e36ff6fee40e317
- MD5 5f50b22de0efb245cd3b8f2fb50a6d3d
- SHA1 be369ffd0c47ff92b3aa5c259ab9f4d40807b687
- SHA512 f3fec19409ea564bd68f4bd1253297ed8bcbe86554422a22891c61ee237f581f95f6976512e53bcabc5cafe3411343e660d3fb8f398f95f9c1efcec8eaa4367a
- SSDEEP 1536:gmGRkLzUJnbfeKzcqt5G+qX59CcZEY9dHbm/c4C1CgqfRG:gmGRbnbfNRt5G+qX59CcNdX47G
- MD5 SHA1 SHA512 SSDEEP
F0nts/Tire/English.ini
- SHA256 0f9d467f6bb6f682c0d1351b26038950c73720f2bfc0741ec1c7bfab2046d75f
- MD5 525ce1c02ca53f9c63cb697ed3aae899
- SHA1 9ddc2763d9dd663f3cb0febf0d580e21c52c2f18
- SHA512 734d599d839b1266c42f340e044243ae30d1859d314eed7738f72f59201d19359f1ac6ee0cac8bfef4a0a2b8f2232a4f1f33336770c8c43f929c1bef162d2317
- SSDEEP 1536:5S5Ybl8/lKlXiF3y24FMuRvV5I7BohUT1:xxXiVQV5uJ1
- MD5 SHA1 SHA512 SSDEEP
F0nts/Tire/Hebrew.ini
- SHA256 42ba655e5b635698995a588f4dd39147be867a0c4b45fd49edc65982b12b9531
- MD5 dbf6973ac46a0adcae8500a16cce4e48
- SHA1 eae986788b33ad048f08ba722fd4eb7354212e63
- SHA512 7a59fe15ac9c10caf3b3abed60201f008583684dfa476cbb9f8ad4c3f5e93d34f31dec859019f1f36d92129b2298272df5eec15be59e367cdcb77d5e89b46549
- SSDEEP 768:w2kJwh+FrSb7UJTvsjkhsRGn6PqwKJTDv69ZUtiGn5Eq5lBQAjV8WEdtWfSZu/JR:zkJwh+FrScvs6Eq5uWpfSZ6KlThAd+C
- MD5 SHA1 SHA512 SSDEEP
F0nts/Tire/Hungarian.ini
- SHA256 fe9997629d296908247a2e82da6c369e2ea7eb4c87b12fc7c8d3ecb3e6fc320d
- MD5 7591df7fae4342cbc7a0706e1b28e87b
- SHA1 825e88ad498e8713522f5aef3b21ee01d6fa8b41
- SHA512 8f58c6fbaf5ea140a3ecbbc88cbf4bdd0e0ba3fbdf169f4b7cb831094a47a6ead103f89fc07748f91d1396ebd13c7ebcc90a316f0eb203ff4c86a50be5cd3ca4
- SSDEEP 3072:UaKBsDgGod8NAH4iyf8kXrLfKgL6YhL+L3yGU:73X
- MD5 SHA1 SHA512 SSDEEP
F0nts/Tire/Ind0nesian.ini
- SHA256 9e52e0b1f7ec39a36e2edd0231dc98865de8524a651fcf6b1b948a575e35fd0f
- MD5 d944d8a3551719a176db4da31733ab75
- SHA1 6cf51cb43dbd7ca84334389076adbabe407d95b8
- SHA512 b9077bdeb69e07894c995bd519ebab594016c8077a213b29264a8040370c9841f1ad6dada2d0af595a596a3875f9c9989dc30af8e7c7b981b420cf1382d5c9a6
- SSDEEP 768:wbWt5bTJA+NtkooQG+Wioa6lBT8IwUzCc0qfcLVUWf1RzVARBBfxP7KLVoeY4z9v:9bT+atkwR2AIheY4pMOy0F8gx
- MD5 SHA1 SHA512 SSDEEP
F0nts/Tire/Japanese.ini
- SHA256 9077b41d743ed6af51cd9b8aedaebb6d1e0e6217825635a1aa9451994efaff0f
- MD5 36d47bfae8d0d48d56b7b1feb3b317e7
- SHA1 1d8d59aa40f765319fcb70a9f49e997aca305b89
- SHA512 b510a5b17e52778b87f58aaa61f222f11c6190a988440789d1d40591aebdcc7311f7bb3bee9621ab8d971dc2de1ec6ed4d52598b3808dd689f693c3e5897f938
- SSDEEP 768:wPZoCIywqTgXCaNnWYjV6UDFlv0Gaf9xS7ua6PE0FtrqGv0ZQkxKQRTM94DGNWdN:1CIywqTKnWKV5GAQkxHKUfxJYNeNx
- MD5 SHA1 SHA512 SSDEEP
F0nts/Tire/K0rean.ini
- SHA256 ad556989f6e4a683d9668e41d2d7175b7b46847c2eef26188b9075fc600d0132
- MD5 efae0c78be2abe2920c78b9d4785ab45
- SHA1 8c0799fb68852cb071bbe260deb4ab357bd5f4ed
- SHA512 44737be4d4bd0f93ca3e986c89102612932f3749b8e9b89446a567cff60ceb856b4bd7380da7fe3f1809579e6ec2162d0cdd4a217935a4961c6b36a482dd4ac8
- SSDEEP 768:wPYhkzQl6qE7rY+xuPAsyKVmq8Ag8lyWqFk5ziCfsg8S+EZNlWJ7lxyBiCWfbMav:HSzQlc7siCmq8AFlBmLfbNA2Nt7osVP
- MD5 SHA1 SHA512 SSDEEP
F0nts/Tire/Kazakh.ini
- SHA256 1fde00989b3baeb67e6b1f8654cd2fc7216a40a4c5a5a9a64d03d47ee95e76be
- MD5 fe2b5687f2de60cb55629fd7f0ca9a21
- SHA1 5299f36a7b8c5a0b59e3603b8517cb1b3e0f2160
- SHA512 ebda06bfb42a56ed71915a1f42d84edb795927697eae51fa98bcdbac76ce6dd224c7e7610743050f45649f2d756aea82e47af3ef6ad929ddc9593d8044e3334d
- SSDEEP 1536:UdBOtqJCnhr189gDXrbF3h14FMuRv5RI7EhUv1:isH/VG5Rm1
- MD5 SHA1 SHA512 SSDEEP
F0nts/Tire/Kurdish.ini
- SHA256 94ac43cb7eb95277db44616a53b23e9174415377b4b3b98a1bdfc98d06a40a4b
- MD5 af61b416403963d653f5008aaba82e03
- SHA1 b1ab14d6ee43e1230cfcc5acfc4de27ab2a6f6b3
- SHA512 a65a21d5d9f7085acf0a96701d4577bf5fbfc0ebcb4f188ff39139b135570f95d76677e6470261aef022b75378898342ab3105704228029f90b8998f414603ab
- SSDEEP 1536:rESqStTfwl/lmie4rC3DA3f1wjF7af0/KkmwL3mnJ/6BD1I:lbTNC
- MD5 SHA1 SHA512 SSDEEP
F0nts/Tire/N0rwegian.ini
- SHA256 1c99b7b06af0d5ac5582f00447fbe04e2325e173666cba8ce2d18678f7b31e3b
- MD5 5cf9c294bd9d233d95e54e198bd8b4ab
- SHA1 670de196a831bc9b0d503694b594524ccfb77b04
- SHA512 bea2be5e1dab1854cbb83fc221f392793aa7b67a1ba1ee521c4ad0aaea671bbbda868d57b3b226cc713eaf9f90bd9fc05b3166353d78c532a43111349159ac7c
- SSDEEP 3072:/Tu1PWiYzr8Z2GIBpLkQXtgpE7ZrB2kyC+3HX:0
- MD5 SHA1 SHA512 SSDEEP
F0nts/Tire/SimpChinese.ini
- SHA256 1bfa864f7012e64f5c1656fc5636ea29e87e2a45b5eb2c31a3b20643fdd8ad4d
- MD5 7aad044a68d89d8bb5a202f8bc69d87c
- SHA1 e20ca69d6f4d1612dc4457612a4b5e4808470bf3
- SHA512 1fe22968bcba141229d8a4d36f8a7d300e44e76ea701d6a07430854567d15c8b8ebaaacb646d038a89273414c5b2a48562407ca31ac9c75e1e22fece73686625
- SSDEEP 1536:SXm7cLrzWFubvgkOvAbGCgjhRrERD+0xs3sqPHGUt471J2BZIn:8FKNPHGVt
- MD5 SHA1 SHA512 SSDEEP
F0nts/Tire/Sinhala.ini
- SHA256 b6fad3bf2adba7c77641ee1a17ff4cd9e5e9b14bac1b855346c91a286e517504
- MD5 318ee9a93c4620940f88052b904f05ce
- SHA1 a5574f778537ce085d53c3fc52299b3049da2371
- SHA512 054c1e0322a170b83273a5c253eeb9ffc107056c555ca470d19dbdefc7d68c822d67576fd9333cf5b17357878dc6147a3d1367219db48b2b10e9bd915e806e52
- SSDEEP 1536:Run1VCXWZTr/lOPoMHjYMgr5xU1Jdr/pSnE8EtwO5vrzAKnUs2:RungtoMHjYMgrgJqE8EqOxzus2
- MD5 SHA1 SHA512 SSDEEP
F0nts/Tire/Sl0vak.ini
- SHA256 b5b2f7fc1c62f1c8161ec59af79cf5e8f12cb0070264703087dcc5cb58e7352a
- MD5 fcba4d2df72a46575ca828c807224431
- SHA1 265e34f895f4b2fbe98a39b960c385be7309dfaa
- SHA512 6edf1e1484225455b76a1deb6c9f02857433a941bc0aececb916f0aede4398a4f22e70e9c152bd6a78ba2f02f11237a6ee92fb05b21374d250f680b56c6a5cc1
- SSDEEP 3072:2ykd4BlB1wCoG9Yhgt8VQcGlW2Jw/6ro5pw9v6Nv83diJoTNfaRlnCoUjZ5bYtZr:P1wCnyNYpCaAWK
- MD5 SHA1 SHA512 SSDEEP
F0nts/Tire/Swedi.ini
- SHA256 f1ee3b2de54ee588813a7dbffca7e7607bbb769c763cdf73ccd600e06346fe1d
- MD5 d0280eb9ebf7e5f9b91dc0e405bd7178
- SHA1 e0425673213109f140f8f9b7474029a0326cdab4
- SHA512 0102a9b215d169b5cad039bbf80ef9882ad6eea7933ccb47e6ac204451456c50baabaeca43dd477a36d2db3eda317f4d59979e5387e169fbedf1c13494dc87e2
- SSDEEP 3072:lMgTj95UgiNg1TdyjQxx3Ho7wAM65CB9mptXse6/3/GbBJsXdFg9FNX:w
- MD5 SHA1 SHA512 SSDEEP
F0nts/Tire/Thai.ini
- SHA256 172276c875a496c173b349e24f7dec66ddda24f6a424120a13de73ef5e70ba07
- MD5 b193d9eacf4afac3199e11b4f4cb6572
- SHA1 9b3f47c3674b11e16df5ba6d5d29d2698a3e1694
- SHA512 11a6971e4ba3c03822de4a46bd9854f2a1525b5380000afac9eddb5d644ba4af0308454413016c859960ce4cf49efe0dbea4a59651b6127d643d1c7eaec34f32
- SSDEEP 1536:5fJMD1fKNP5/l3X8vruiFDKn+0PRs5jWY+APLR2lw:xy
- MD5 SHA1 SHA512 SSDEEP
F0nts/Tire/TradChinese.ini
- SHA256 eb8fc39f2551834010f3748d81e5f842a1b4e27adb87e425b764bb9152b55cb1
- MD5 dc01555f89e044192a9ad584b62e41a7
- SHA1 e830a3012e610b2c8775c993ff504f6f3e5628ee
- SHA512 954582efc17a2ffb29ba462d3d670576682211066a67de11daae4e5b2f283e055bb3119ce6aab1f40fbf8e629d7e0562c5059455ae420741558484f3c464bcca
- SSDEEP 768:wRZh4e4gX/LtXW2DhVaajeVbWFcqnxCjDvUkkIRNQz+q8wbXrFtUkFhBaQagVQlz:yZGgX/LtXW2Dhk1bWF5dhBa00uZNfsi+
- MD5 SHA1 SHA512 SSDEEP
F0nts/Tire/Ukrainian.ini
- SHA256 f1f0c46ed4c136149fd57d9cae512242a023e14dd13d7c633bb4f7bf9ed71343
- MD5 9482109e20bf801180bbe11e0603c972
- SHA1 bafe4b7daa5529a5bd7b708482cfcdab95273959
- SHA512 b06df7881df5f79fd246e4c95edbe8c2072dbb9a6a02a7f66886b1a41c6928cf9b7d544b0c238ff2ddcb77fdb7f9ed8764ecd32fb46aa05f7bc6a5e167fded1e
- SSDEEP 1536:iziJtNQr3yk2oKLNzPOcGC+Be6fJzFmXZ:sPcGC+Be6fO
- MD5 SHA1 SHA512 SSDEEP
F0nts/Tire/UyghurLatin.ini
- SHA256 d517f3322a43292dbb241597353ad01013ee3be86d666c83d87c0eda4f56f926
- MD5 98eb38cef87e8fa6e6d2619577d4265f
- SHA1 205d6e9147c1f935612423bb9716fa402efa3e57
- SHA512 4e85b523bd819d41ab1032534ef1ca38e841a0d80c2fc672b21a9f2dfa846384ccedd4cea9745ef7ccf127c98378bba913057b0dd716fd620e4a7d2bcf9e75ae
- SSDEEP 1536:mJ05+SP/l0iI5XYIUicOFCWsvzqUSS0XZqISnFhKoMfyLd9:dI5oEcOAqUSS0XZqIWMfyLd9
- MD5 SHA1 SHA512 SSDEEP
F0nts/Tire/Uzbek.ini
- SHA256 af11b0cbdcb67ddc024272d45d098cf1da8a21661fe9f6fb7a0239d0c6684531
- MD5 29dc4e77b361bbce2780610edf092861
- SHA1 5edc783102a4f213e876d70599e0155387ca7429
- SHA512 ad87a926748c607773dad37b1a9fcdd47a87dde0defb36aadf6c8b043561e57b5c420e517d7ae3283f098b661c49e5d8a3ae6f3a348824780ef9d5435be828a9
- SSDEEP 768:wR2Wh/kX5yUYBW0nbEwiW8S9LZU0xqXKhTVT2EogXcZILi2LAUTVxlWRumLFE0DZ:DcBW0nbEnMUMlWRRr+Wntr
- MD5 SHA1 SHA512 SSDEEP
F0nts/Tire/Vietnamese.ini
- SHA256 7b939fb24a88a01b1e45b37427dccb8a319cead04fd012136551f36b4363e887
- MD5 9ee05121e1a02efeec015669d96161eb
- SHA1 28d253a23000f4ca1cba851410cec9b1b02b52c0
- SHA512 0f31ccc9b86661ca679258b309ab846608145c8366225e95aa61691c5b42323a50a1631f645ab58483dcf26331239b677e97d04106029c67aa3c67367fbfbca6
- SSDEEP 768:wVna1qkfNk1220z8aypq/EJDPU35BL8kDgavFij+I7Cs3L+LnL80Tj3DSHPoH1ag:5qkf+12SFU/bnP3DSE1swQg5
- MD5 SHA1 SHA512 SSDEEP
F0nts/Tire/Winzip.exe
- IMPHASH 629fae0a56e3262e208711dda6ae6b1d
- SHA256 26b40c79356453c60498772423f99384a3d24dd2d0662d215506768cb9c58370
- MD5 b66dec691784f00061bc43e62030c343
- SHA1 779d947d41efafc2995878e56e213411de8fb4cf
- SHA512 6a89bd581baf372f07e76a3378e6f6eb29cac2e4981a7f0affb4101153407cadfce9f1b6b28d5a003f7d4039577029b2ec6ebcfd58e55288e056614fb03f8ba3
- SSDEEP 98304:lJXOBfK92HbAw0CNB3kJElzNsy8vGUvfCo3ABH43:lJ192HbAXCvDlzNsy8vGUyo3AB8
- MD5 SHA1 SHA512 SSDEEP
Digest
ca:05:77:9a:83:94:f1:c2:84:3b:d1:35:92:02:9e:08:73:69:34:94:e8:62:49:32:6d:ca:10:c8:55:9e:d9:9b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
Chains
Mar 1, 2019
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE
Digest
ed:14:78:6d:47:d9:55:27:5a:d1:dd:f1:22:3e:ed:fc:47:98:f7:f9
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
Chains
Mar 1, 2019
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
Serial Number
52:9e:3f:9f:cf:7d:58:d5:20:d6:07:ab:74:39:50:02
Issuer
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jun 2, 2017 - Jun 1, 2020
Subject
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Issuer
CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
May 30, 2000 - May 30, 2020
Subject
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 9, 2013 - May 8, 2028
Subject
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
Serial Number
52:9e:3f:9f:cf:7d:58:d5:20:d6:07:ab:74:39:50:02
Issuer
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jun 2, 2017 - Jun 1, 2020
Subject
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Issuer
CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
May 30, 2000 - May 30, 2020
Subject
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 9, 2013 - May 8, 2028
Subject
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Issuer
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 12, 2016 - Jan 11, 2031
Subject
CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Issuer
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 23, 2017 - Mar 22, 2029
Minor OS version
2
Major OS version
5
Entry point
140644
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\Projects\WinRAR\sfx\setup\build\sfxrar64\Release\sfxrar.pdb
kernel32
GetLastError
SetLastError
GetCurrentProcess
DeviceIoControl
SetFileTime
CloseHandle
CreateDirectoryW
RemoveDirectoryW
CreateFileW
DeleteFileW
CreateHardLinkW
GetShortPathNameW
GetLongPathNameW
MoveFileW
GetFileType
GetStdHandle
WriteFile
ReadFile
FlushFileBuffers
SetEndOfFile
SetFilePointer
SetFileAttributesW
GetFileAttributesW
FindClose
FindFirstFileW
FindNextFileW
GetVersionExW
GetCurrentDirectoryW
GetFullPathNameW
FoldStringW
GetModuleFileNameW
GetModuleHandleW
FindResourceW
FreeLibrary
GetProcAddress
GetCurrentProcessId
ExitProcess
SetThreadExecutionState
Sleep
LoadLibraryW
GetSystemDirectoryW
CompareStringW
AllocConsole
FreeConsole
AttachConsole
WriteConsoleW
GetProcessAffinityMask
CreateThread
SetThreadPriority
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
ReleaseSemaphore
WaitForSingleObject
CreateEventW
CreateSemaphoreW
GetSystemTime
SystemTimeToTzSpecificLocalTime
TzSpecificLocalTimeToSystemTime
SystemTimeToFileTime
FileTimeToLocalFileTime
LocalFileTimeToFileTime
FileTimeToSystemTime
GetCPInfo
IsDBCSLeadByte
MultiByteToWideChar
WideCharToMultiByte
GlobalAlloc
GetTickCount
LockResource
GlobalLock
GlobalUnlock
GlobalFree
LoadResource
SizeofResource
SetCurrentDirectoryW
GetExitCodeProcess
GetLocalTime
MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
OpenFileMappingW
GetCommandLineW
SetEnvironmentVariableW
ExpandEnvironmentStringsW
GetTempPathW
MoveFileExW
GetLocaleInfoW
GetTimeFormatW
GetDateFormatW
GetNumberFormatW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
HeapSize
SetStdHandle
GetProcessHeap
FreeEnvironmentStringsW
RaiseException
GetSystemInfo
VirtualProtect
VirtualQuery
LoadLibraryExA
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlPcToFileHeader
EncodePointer
RtlUnwindEx
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
QueryPerformanceFrequency
TerminateProcess
GetModuleHandleExW
GetModuleFileNameA
GetACP
HeapFree
HeapAlloc
HeapReAlloc
GetStringTypeW
LCMapStringW
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetEnvironmentStringsW
gdiplus
GdiplusShutdown
GdiplusStartup
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromStream
GdipDisposeImage
GdipCloneImage
GdipFree
GdipAlloc
Name
.text
Size
203KB
Virtual Size
203KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
61KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
136KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.gfids
Size
512B
Virtual Size
208B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
152KB
Virtual Size
156KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, id=241, version=40116,
count=138, id=243, version=40116,
count=13, id=242, version=40116,
count=1, id=199, version=41118,
count=8, id=259, version=24123,
count=19, id=260, version=24123,
count=43, id=261, version=24123,
count=9, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=135, version=30729,
count=5, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=272, id=1, productName=Unmarked objects,
count=48, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
F0nts/d0sapp.fon
- SHA256 0da0d4ed89fd1e8810c7f2cdb5372abfb02cb3d031acacc1a5bbc853f879c2bd
- MD5 8a5853ebfc046f428dd31c5f3ae217ef
- SHA1 61dccd934eeaf49b9dfe4385e5ba12ea8eaaa35c
- SHA512 b2427ec94402e06af2239277087376ebb5a4a231a2d9fd020e7eae557b865355f257d0fb3c2f2f306c132f919160b5b7d50e0f078f9e382a3ed9ceee3e285c32
- SSDEEP 192:0mDIv/vfv/vfv/THU0nunX/ff//ff//tYAhzZfLL+8bDLRnuQlfOFYFYmuPGlVu:0mDQX3X37U3vnHnHWAhzM8FTlfOUuT
- MD5 SHA1 SHA512 SSDEEP
F0nts/error/Cr0atian.ini
- SHA256 5bf2b70edb78073f3ce4fe6d809a3a25c982cb2840b8ebaf4367ebc42f16bd3e
- MD5 8477123868f12632d652c6da5df683c2
- SHA1 23dbeba17e366e1bb5e7d7be156a9be309c9555d
- SHA512 b785f8d680f22211c01cfa59cdf86f1bfdeca0446c1c26fc2c144e3018773d22e4050c95cd513d60df9b226df31dc504b5059db168977b3949dbcc428a7ff30d
- SSDEEP 768:w0VnpiuM0pY1HIlw1VoIGRweBLUab7Fno8wBtA1yR4IY52t9RM8wE4c+Tyb3TRr2:VdpiuM0pY1olaEZLUYg4c+7wvO60ll
- MD5 SHA1 SHA512 SSDEEP
F0nts/error/Dani.ini
- SHA256 59df77a75aca7c0a8574f6d4b5be5632908c4fea8634f4748e36ff6fee40e317
- MD5 5f50b22de0efb245cd3b8f2fb50a6d3d
- SHA1 be369ffd0c47ff92b3aa5c259ab9f4d40807b687
- SHA512 f3fec19409ea564bd68f4bd1253297ed8bcbe86554422a22891c61ee237f581f95f6976512e53bcabc5cafe3411343e660d3fb8f398f95f9c1efcec8eaa4367a
- SSDEEP 1536:gmGRkLzUJnbfeKzcqt5G+qX59CcZEY9dHbm/c4C1CgqfRG:gmGRbnbfNRt5G+qX59CcNdX47G
- MD5 SHA1 SHA512 SSDEEP
F0nts/error/English.ini
- SHA256 0f9d467f6bb6f682c0d1351b26038950c73720f2bfc0741ec1c7bfab2046d75f
- MD5 525ce1c02ca53f9c63cb697ed3aae899
- SHA1 9ddc2763d9dd663f3cb0febf0d580e21c52c2f18
- SHA512 734d599d839b1266c42f340e044243ae30d1859d314eed7738f72f59201d19359f1ac6ee0cac8bfef4a0a2b8f2232a4f1f33336770c8c43f929c1bef162d2317
- SSDEEP 1536:5S5Ybl8/lKlXiF3y24FMuRvV5I7BohUT1:xxXiVQV5uJ1
- MD5 SHA1 SHA512 SSDEEP
F0nts/error/Hebrew.ini
- SHA256 42ba655e5b635698995a588f4dd39147be867a0c4b45fd49edc65982b12b9531
- MD5 dbf6973ac46a0adcae8500a16cce4e48
- SHA1 eae986788b33ad048f08ba722fd4eb7354212e63
- SHA512 7a59fe15ac9c10caf3b3abed60201f008583684dfa476cbb9f8ad4c3f5e93d34f31dec859019f1f36d92129b2298272df5eec15be59e367cdcb77d5e89b46549
- SSDEEP 768:w2kJwh+FrSb7UJTvsjkhsRGn6PqwKJTDv69ZUtiGn5Eq5lBQAjV8WEdtWfSZu/JR:zkJwh+FrScvs6Eq5uWpfSZ6KlThAd+C
- MD5 SHA1 SHA512 SSDEEP
F0nts/error/Hungarian.ini
- SHA256 fe9997629d296908247a2e82da6c369e2ea7eb4c87b12fc7c8d3ecb3e6fc320d
- MD5 7591df7fae4342cbc7a0706e1b28e87b
- SHA1 825e88ad498e8713522f5aef3b21ee01d6fa8b41
- SHA512 8f58c6fbaf5ea140a3ecbbc88cbf4bdd0e0ba3fbdf169f4b7cb831094a47a6ead103f89fc07748f91d1396ebd13c7ebcc90a316f0eb203ff4c86a50be5cd3ca4
- SSDEEP 3072:UaKBsDgGod8NAH4iyf8kXrLfKgL6YhL+L3yGU:73X
- MD5 SHA1 SHA512 SSDEEP
F0nts/error/Ind0nesian.ini
- SHA256 9e52e0b1f7ec39a36e2edd0231dc98865de8524a651fcf6b1b948a575e35fd0f
- MD5 d944d8a3551719a176db4da31733ab75
- SHA1 6cf51cb43dbd7ca84334389076adbabe407d95b8
- SHA512 b9077bdeb69e07894c995bd519ebab594016c8077a213b29264a8040370c9841f1ad6dada2d0af595a596a3875f9c9989dc30af8e7c7b981b420cf1382d5c9a6
- SSDEEP 768:wbWt5bTJA+NtkooQG+Wioa6lBT8IwUzCc0qfcLVUWf1RzVARBBfxP7KLVoeY4z9v:9bT+atkwR2AIheY4pMOy0F8gx
- MD5 SHA1 SHA512 SSDEEP
F0nts/error/Japanese.ini
- SHA256 9077b41d743ed6af51cd9b8aedaebb6d1e0e6217825635a1aa9451994efaff0f
- MD5 36d47bfae8d0d48d56b7b1feb3b317e7
- SHA1 1d8d59aa40f765319fcb70a9f49e997aca305b89
- SHA512 b510a5b17e52778b87f58aaa61f222f11c6190a988440789d1d40591aebdcc7311f7bb3bee9621ab8d971dc2de1ec6ed4d52598b3808dd689f693c3e5897f938
- SSDEEP 768:wPZoCIywqTgXCaNnWYjV6UDFlv0Gaf9xS7ua6PE0FtrqGv0ZQkxKQRTM94DGNWdN:1CIywqTKnWKV5GAQkxHKUfxJYNeNx
- MD5 SHA1 SHA512 SSDEEP
F0nts/error/K0rean.ini
- SHA256 ad556989f6e4a683d9668e41d2d7175b7b46847c2eef26188b9075fc600d0132
- MD5 efae0c78be2abe2920c78b9d4785ab45
- SHA1 8c0799fb68852cb071bbe260deb4ab357bd5f4ed
- SHA512 44737be4d4bd0f93ca3e986c89102612932f3749b8e9b89446a567cff60ceb856b4bd7380da7fe3f1809579e6ec2162d0cdd4a217935a4961c6b36a482dd4ac8
- SSDEEP 768:wPYhkzQl6qE7rY+xuPAsyKVmq8Ag8lyWqFk5ziCfsg8S+EZNlWJ7lxyBiCWfbMav:HSzQlc7siCmq8AFlBmLfbNA2Nt7osVP
- MD5 SHA1 SHA512 SSDEEP
F0nts/error/Kazakh.ini
- SHA256 1fde00989b3baeb67e6b1f8654cd2fc7216a40a4c5a5a9a64d03d47ee95e76be
- MD5 fe2b5687f2de60cb55629fd7f0ca9a21
- SHA1 5299f36a7b8c5a0b59e3603b8517cb1b3e0f2160
- SHA512 ebda06bfb42a56ed71915a1f42d84edb795927697eae51fa98bcdbac76ce6dd224c7e7610743050f45649f2d756aea82e47af3ef6ad929ddc9593d8044e3334d
- SSDEEP 1536:UdBOtqJCnhr189gDXrbF3h14FMuRv5RI7EhUv1:isH/VG5Rm1
- MD5 SHA1 SHA512 SSDEEP
F0nts/error/Kurdish.ini
- SHA256 94ac43cb7eb95277db44616a53b23e9174415377b4b3b98a1bdfc98d06a40a4b
- MD5 af61b416403963d653f5008aaba82e03
- SHA1 b1ab14d6ee43e1230cfcc5acfc4de27ab2a6f6b3
- SHA512 a65a21d5d9f7085acf0a96701d4577bf5fbfc0ebcb4f188ff39139b135570f95d76677e6470261aef022b75378898342ab3105704228029f90b8998f414603ab
- SSDEEP 1536:rESqStTfwl/lmie4rC3DA3f1wjF7af0/KkmwL3mnJ/6BD1I:lbTNC
- MD5 SHA1 SHA512 SSDEEP
F0nts/error/N0rwegian.ini
- SHA256 1c99b7b06af0d5ac5582f00447fbe04e2325e173666cba8ce2d18678f7b31e3b
- MD5 5cf9c294bd9d233d95e54e198bd8b4ab
- SHA1 670de196a831bc9b0d503694b594524ccfb77b04
- SHA512 bea2be5e1dab1854cbb83fc221f392793aa7b67a1ba1ee521c4ad0aaea671bbbda868d57b3b226cc713eaf9f90bd9fc05b3166353d78c532a43111349159ac7c
- SSDEEP 3072:/Tu1PWiYzr8Z2GIBpLkQXtgpE7ZrB2kyC+3HX:0
- MD5 SHA1 SHA512 SSDEEP
F0nts/error/SimpChinese.ini
- SHA256 1bfa864f7012e64f5c1656fc5636ea29e87e2a45b5eb2c31a3b20643fdd8ad4d
- MD5 7aad044a68d89d8bb5a202f8bc69d87c
- SHA1 e20ca69d6f4d1612dc4457612a4b5e4808470bf3
- SHA512 1fe22968bcba141229d8a4d36f8a7d300e44e76ea701d6a07430854567d15c8b8ebaaacb646d038a89273414c5b2a48562407ca31ac9c75e1e22fece73686625
- SSDEEP 1536:SXm7cLrzWFubvgkOvAbGCgjhRrERD+0xs3sqPHGUt471J2BZIn:8FKNPHGVt
- MD5 SHA1 SHA512 SSDEEP
F0nts/error/Sinhala.ini
- SHA256 b6fad3bf2adba7c77641ee1a17ff4cd9e5e9b14bac1b855346c91a286e517504
- MD5 318ee9a93c4620940f88052b904f05ce
- SHA1 a5574f778537ce085d53c3fc52299b3049da2371
- SHA512 054c1e0322a170b83273a5c253eeb9ffc107056c555ca470d19dbdefc7d68c822d67576fd9333cf5b17357878dc6147a3d1367219db48b2b10e9bd915e806e52
- SSDEEP 1536:Run1VCXWZTr/lOPoMHjYMgr5xU1Jdr/pSnE8EtwO5vrzAKnUs2:RungtoMHjYMgrgJqE8EqOxzus2
- MD5 SHA1 SHA512 SSDEEP
F0nts/error/Sl0vak.ini
- SHA256 b5b2f7fc1c62f1c8161ec59af79cf5e8f12cb0070264703087dcc5cb58e7352a
- MD5 fcba4d2df72a46575ca828c807224431
- SHA1 265e34f895f4b2fbe98a39b960c385be7309dfaa
- SHA512 6edf1e1484225455b76a1deb6c9f02857433a941bc0aececb916f0aede4398a4f22e70e9c152bd6a78ba2f02f11237a6ee92fb05b21374d250f680b56c6a5cc1
- SSDEEP 3072:2ykd4BlB1wCoG9Yhgt8VQcGlW2Jw/6ro5pw9v6Nv83diJoTNfaRlnCoUjZ5bYtZr:P1wCnyNYpCaAWK
- MD5 SHA1 SHA512 SSDEEP
F0nts/error/Swedi.ini
- SHA256 f1ee3b2de54ee588813a7dbffca7e7607bbb769c763cdf73ccd600e06346fe1d
- MD5 d0280eb9ebf7e5f9b91dc0e405bd7178
- SHA1 e0425673213109f140f8f9b7474029a0326cdab4
- SHA512 0102a9b215d169b5cad039bbf80ef9882ad6eea7933ccb47e6ac204451456c50baabaeca43dd477a36d2db3eda317f4d59979e5387e169fbedf1c13494dc87e2
- SSDEEP 3072:lMgTj95UgiNg1TdyjQxx3Ho7wAM65CB9mptXse6/3/GbBJsXdFg9FNX:w
- MD5 SHA1 SHA512 SSDEEP
F0nts/error/Thai.ini
- SHA256 172276c875a496c173b349e24f7dec66ddda24f6a424120a13de73ef5e70ba07
- MD5 b193d9eacf4afac3199e11b4f4cb6572
- SHA1 9b3f47c3674b11e16df5ba6d5d29d2698a3e1694
- SHA512 11a6971e4ba3c03822de4a46bd9854f2a1525b5380000afac9eddb5d644ba4af0308454413016c859960ce4cf49efe0dbea4a59651b6127d643d1c7eaec34f32
- SSDEEP 1536:5fJMD1fKNP5/l3X8vruiFDKn+0PRs5jWY+APLR2lw:xy
- MD5 SHA1 SHA512 SSDEEP
F0nts/error/TradChinese.ini
- SHA256 eb8fc39f2551834010f3748d81e5f842a1b4e27adb87e425b764bb9152b55cb1
- MD5 dc01555f89e044192a9ad584b62e41a7
- SHA1 e830a3012e610b2c8775c993ff504f6f3e5628ee
- SHA512 954582efc17a2ffb29ba462d3d670576682211066a67de11daae4e5b2f283e055bb3119ce6aab1f40fbf8e629d7e0562c5059455ae420741558484f3c464bcca
- SSDEEP 768:wRZh4e4gX/LtXW2DhVaajeVbWFcqnxCjDvUkkIRNQz+q8wbXrFtUkFhBaQagVQlz:yZGgX/LtXW2Dhk1bWF5dhBa00uZNfsi+
- MD5 SHA1 SHA512 SSDEEP
F0nts/error/Ukrainian.ini
- SHA256 f1f0c46ed4c136149fd57d9cae512242a023e14dd13d7c633bb4f7bf9ed71343
- MD5 9482109e20bf801180bbe11e0603c972
- SHA1 bafe4b7daa5529a5bd7b708482cfcdab95273959
- SHA512 b06df7881df5f79fd246e4c95edbe8c2072dbb9a6a02a7f66886b1a41c6928cf9b7d544b0c238ff2ddcb77fdb7f9ed8764ecd32fb46aa05f7bc6a5e167fded1e
- SSDEEP 1536:iziJtNQr3yk2oKLNzPOcGC+Be6fJzFmXZ:sPcGC+Be6fO
- MD5 SHA1 SHA512 SSDEEP
F0nts/error/UyghurLatin.ini
- SHA256 d517f3322a43292dbb241597353ad01013ee3be86d666c83d87c0eda4f56f926
- MD5 98eb38cef87e8fa6e6d2619577d4265f
- SHA1 205d6e9147c1f935612423bb9716fa402efa3e57
- SHA512 4e85b523bd819d41ab1032534ef1ca38e841a0d80c2fc672b21a9f2dfa846384ccedd4cea9745ef7ccf127c98378bba913057b0dd716fd620e4a7d2bcf9e75ae
- SSDEEP 1536:mJ05+SP/l0iI5XYIUicOFCWsvzqUSS0XZqISnFhKoMfyLd9:dI5oEcOAqUSS0XZqIWMfyLd9
- MD5 SHA1 SHA512 SSDEEP
F0nts/error/Uzbek.ini
- SHA256 af11b0cbdcb67ddc024272d45d098cf1da8a21661fe9f6fb7a0239d0c6684531
- MD5 29dc4e77b361bbce2780610edf092861
- SHA1 5edc783102a4f213e876d70599e0155387ca7429
- SHA512 ad87a926748c607773dad37b1a9fcdd47a87dde0defb36aadf6c8b043561e57b5c420e517d7ae3283f098b661c49e5d8a3ae6f3a348824780ef9d5435be828a9
- SSDEEP 768:wR2Wh/kX5yUYBW0nbEwiW8S9LZU0xqXKhTVT2EogXcZILi2LAUTVxlWRumLFE0DZ:DcBW0nbEnMUMlWRRr+Wntr
- MD5 SHA1 SHA512 SSDEEP
F0nts/error/Vietnamese.ini
- SHA256 7b939fb24a88a01b1e45b37427dccb8a319cead04fd012136551f36b4363e887
- MD5 9ee05121e1a02efeec015669d96161eb
- SHA1 28d253a23000f4ca1cba851410cec9b1b02b52c0
- SHA512 0f31ccc9b86661ca679258b309ab846608145c8366225e95aa61691c5b42323a50a1631f645ab58483dcf26331239b677e97d04106029c67aa3c67367fbfbca6
- SSDEEP 768:wVna1qkfNk1220z8aypq/EJDPU35BL8kDgavFij+I7Cs3L+LnL80Tj3DSHPoH1ag:5qkf+12SFU/bnP3DSE1swQg5
- MD5 SHA1 SHA512 SSDEEP
F0nts/error/Winzip.exe
- IMPHASH 629fae0a56e3262e208711dda6ae6b1d
- SHA256 26b40c79356453c60498772423f99384a3d24dd2d0662d215506768cb9c58370
- MD5 b66dec691784f00061bc43e62030c343
- SHA1 779d947d41efafc2995878e56e213411de8fb4cf
- SHA512 6a89bd581baf372f07e76a3378e6f6eb29cac2e4981a7f0affb4101153407cadfce9f1b6b28d5a003f7d4039577029b2ec6ebcfd58e55288e056614fb03f8ba3
- SSDEEP 98304:lJXOBfK92HbAw0CNB3kJElzNsy8vGUvfCo3ABH43:lJ192HbAXCvDlzNsy8vGUyo3AB8
- MD5 SHA1 SHA512 SSDEEP
Digest
ca:05:77:9a:83:94:f1:c2:84:3b:d1:35:92:02:9e:08:73:69:34:94:e8:62:49:32:6d:ca:10:c8:55:9e:d9:9b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
Chains
Mar 1, 2019
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE
Digest
ed:14:78:6d:47:d9:55:27:5a:d1:dd:f1:22:3e:ed:fc:47:98:f7:f9
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
Chains
Mar 1, 2019
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
Serial Number
52:9e:3f:9f:cf:7d:58:d5:20:d6:07:ab:74:39:50:02
Issuer
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jun 2, 2017 - Jun 1, 2020
Subject
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Issuer
CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
May 30, 2000 - May 30, 2020
Subject
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 9, 2013 - May 8, 2028
Subject
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
Serial Number
52:9e:3f:9f:cf:7d:58:d5:20:d6:07:ab:74:39:50:02
Issuer
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jun 2, 2017 - Jun 1, 2020
Subject
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Issuer
CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
May 30, 2000 - May 30, 2020
Subject
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 9, 2013 - May 8, 2028
Subject
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Issuer
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 12, 2016 - Jan 11, 2031
Subject
CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Issuer
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 23, 2017 - Mar 22, 2029
Minor OS version
2
Major OS version
5
Entry point
140644
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\Projects\WinRAR\sfx\setup\build\sfxrar64\Release\sfxrar.pdb
kernel32
GetLastError
SetLastError
GetCurrentProcess
DeviceIoControl
SetFileTime
CloseHandle
CreateDirectoryW
RemoveDirectoryW
CreateFileW
DeleteFileW
CreateHardLinkW
GetShortPathNameW
GetLongPathNameW
MoveFileW
GetFileType
GetStdHandle
WriteFile
ReadFile
FlushFileBuffers
SetEndOfFile
SetFilePointer
SetFileAttributesW
GetFileAttributesW
FindClose
FindFirstFileW
FindNextFileW
GetVersionExW
GetCurrentDirectoryW
GetFullPathNameW
FoldStringW
GetModuleFileNameW
GetModuleHandleW
FindResourceW
FreeLibrary
GetProcAddress
GetCurrentProcessId
ExitProcess
SetThreadExecutionState
Sleep
LoadLibraryW
GetSystemDirectoryW
CompareStringW
AllocConsole
FreeConsole
AttachConsole
WriteConsoleW
GetProcessAffinityMask
CreateThread
SetThreadPriority
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
ReleaseSemaphore
WaitForSingleObject
CreateEventW
CreateSemaphoreW
GetSystemTime
SystemTimeToTzSpecificLocalTime
TzSpecificLocalTimeToSystemTime
SystemTimeToFileTime
FileTimeToLocalFileTime
LocalFileTimeToFileTime
FileTimeToSystemTime
GetCPInfo
IsDBCSLeadByte
MultiByteToWideChar
WideCharToMultiByte
GlobalAlloc
GetTickCount
LockResource
GlobalLock
GlobalUnlock
GlobalFree
LoadResource
SizeofResource
SetCurrentDirectoryW
GetExitCodeProcess
GetLocalTime
MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
OpenFileMappingW
GetCommandLineW
SetEnvironmentVariableW
ExpandEnvironmentStringsW
GetTempPathW
MoveFileExW
GetLocaleInfoW
GetTimeFormatW
GetDateFormatW
GetNumberFormatW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
HeapSize
SetStdHandle
GetProcessHeap
FreeEnvironmentStringsW
RaiseException
GetSystemInfo
VirtualProtect
VirtualQuery
LoadLibraryExA
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlPcToFileHeader
EncodePointer
RtlUnwindEx
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
QueryPerformanceFrequency
TerminateProcess
GetModuleHandleExW
GetModuleFileNameA
GetACP
HeapFree
HeapAlloc
HeapReAlloc
GetStringTypeW
LCMapStringW
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetEnvironmentStringsW
gdiplus
GdiplusShutdown
GdiplusStartup
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromStream
GdipDisposeImage
GdipCloneImage
GdipFree
GdipAlloc
Name
.text
Size
203KB
Virtual Size
203KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
61KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
136KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.gfids
Size
512B
Virtual Size
208B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
152KB
Virtual Size
156KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, id=241, version=40116,
count=138, id=243, version=40116,
count=13, id=242, version=40116,
count=1, id=199, version=41118,
count=8, id=259, version=24123,
count=19, id=260, version=24123,
count=43, id=261, version=24123,
count=9, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=135, version=30729,
count=5, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=272, id=1, productName=Unmarked objects,
count=48, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
F0nts/smalle.fon
- SHA256 de416395301da32c96bf34625483ea6ecdcdaaeb9ff72cdca00b5af4d7092da9
- MD5 abc2dda06ac9d95b210a3a805d724391
- SHA1 f696b1221ce83c5b9a01ffc53a4a07e10fa31226
- SHA512 5f3a8ec4228ec588cfbaeef47ccd4c2a97cd30228d28d657940b6806e835f0dad697217f253d1ab129ab110ccf6f90298fd75df323fbd40a7ecba1079fac87ec
- SSDEEP 96:B2eD1DtDEDSD5qDJDHfDgpiGNDYpF1R2Oj/IwDutDzJD4xZoBHGDFPAVWsCPkvYd:7SpF1pjIDzex6LVBn9SplqvEQWX0Y4
- MD5 SHA1 SHA512 SSDEEP
F0nts/symb0l.ttf
- SHA256 bbf1192965e5266fbf23370416337d2861fc1e8bd349def93f2994ba67382fc3
- MD5 3e443984997631a694dabf0fba9c8693
- SHA1 5ca2785630fae8b7337d37492c4486b224a2fd5e
- SHA512 f42387acd0e60994fb9c48d7de8d050113634af768722e9c4bd3c5a420869143df9f138476e9e785b04da68d1fb230238d164bb5efb5dce67d26856c12b29ccb
- SSDEEP 1536:cpdCuONLItPRYqXoDxIsTVJ/HMRIHgxxLba:sIXNLIVaqoDxIsT3/HMRIAbG
- MD5 SHA1 SHA512 SSDEEP
F0nts/trebucbd.ttf
- SHA256 dfcc306777a594d2815368547dd897e2ac82aff8073e55d9e682569939e49b81
- MD5 af116cc142b0786d0c7898103a0bcd12
- SHA1 a1fa4d6d7a2ddd568e4c615091ea7fa405c7052d
- SHA512 e757178d9007e591ef5cbbf91454f362aec75d637b954d2bfbbfb2c4935280be5a00a53d3b5b1408ec0095c1ea482f255c4cc6508ef39c456cffe3374132b940
- SSDEEP 6144:MzuSY5gmIupqm9PXfGQSy57HRKU00i1/5:CdAqeP7HtHRKP
- MD5 SHA1 SHA512 SSDEEP
F0nts/trebucbi.ttf
- SHA256 87942234ab0cc4400088648bef8d1f7afc4c44e676c7ed6b32ca31462c18307d
- MD5 7b0201d14bb2a17514480eafd86da51f
- SHA1 78296a55fcd48978a28bfc5ca0d230ffebbc0e4e
- SHA512 1fa546243b042949e4a281055586ab4e6d177d99d65af9753e689ec8ac63a98b252579357d131f618f4399d80b61c5f82fcbfd28926f901d7c43a2ab4700389d
- SSDEEP 3072:hnNrseJzgDqZNZJgHQds6TUYbqI/4TfLHu/IULnneSS1XAAngJ41:xgDqZbWNj59raIULnnRS1/51
- MD5 SHA1 SHA512 SSDEEP
F0nts/verdab.ttf
- SHA256 f3245f5f38f61bd1ceefb0f1338a5b88a21e6220832c2f43a38bbc7e1547c36f
- MD5 215accaad3dd60e8a5ab1b110f79d507
- SHA1 612e869a6da8f879a67109ae4d78a0a41f266ff9
- SHA512 075d5dce7fadd8ce273a0a5e7d35e54682623dbb9502932c39bf101b90f166b29d81660339a71bc06b9a40c8dddd8f5d3164fc1234895b62903088cfa665bd1d
- SSDEEP 3072:nbaB8YYR+hff30sWnKmN8sjZ/aFTByY7VBXhisnoaIeHrLYTHzZnL4n:bsh7YKxIZ/GycVBhisnoOLL6ZnMn
- MD5 SHA1 SHA512 SSDEEP
F0nts/verdana.ttf
- SHA256 6a8481fe107ee547893c018b13dba291c2020bec3de5da6525d9ac09f6bc2105
- MD5 5587517d47893e1470ab2296eb609c93
- SHA1 0919499ee7c5cbf6ec77d8d82f913df94962d415
- SHA512 cf5dfffc1370e237106374e3d1f6211434a76b2b6804e88823a4689d03bfeaf183779cb76db141d0a8b2feb9eeb589c4a7220214c1157cae56ebcc1b945f809a
- SSDEEP 6144:kSa3ky/zQva3i0SAqyOpBc1kWw+b8S9g2CRKeCN4A0Q+Vnkn:oQvvNyu+NveCZ0Q+Kn
- MD5 SHA1 SHA512 SSDEEP
F0nts/verdanab.ttf
- SHA256 f3245f5f38f61bd1ceefb0f1338a5b88a21e6220832c2f43a38bbc7e1547c36f
- MD5 215accaad3dd60e8a5ab1b110f79d507
- SHA1 612e869a6da8f879a67109ae4d78a0a41f266ff9
- SHA512 075d5dce7fadd8ce273a0a5e7d35e54682623dbb9502932c39bf101b90f166b29d81660339a71bc06b9a40c8dddd8f5d3164fc1234895b62903088cfa665bd1d
- SSDEEP 3072:nbaB8YYR+hff30sWnKmN8sjZ/aFTByY7VBXhisnoaIeHrLYTHzZnL4n:bsh7YKxIZ/GycVBhisnoOLL6ZnMn
- MD5 SHA1 SHA512 SSDEEP
LaNgz/Cr0atian.ini
- SHA256 5bf2b70edb78073f3ce4fe6d809a3a25c982cb2840b8ebaf4367ebc42f16bd3e
- MD5 8477123868f12632d652c6da5df683c2
- SHA1 23dbeba17e366e1bb5e7d7be156a9be309c9555d
- SHA512 b785f8d680f22211c01cfa59cdf86f1bfdeca0446c1c26fc2c144e3018773d22e4050c95cd513d60df9b226df31dc504b5059db168977b3949dbcc428a7ff30d
- SSDEEP 768:w0VnpiuM0pY1HIlw1VoIGRweBLUab7Fno8wBtA1yR4IY52t9RM8wE4c+Tyb3TRr2:VdpiuM0pY1olaEZLUYg4c+7wvO60ll
- MD5 SHA1 SHA512 SSDEEP
LaNgz/Dani.ini
- SHA256 59df77a75aca7c0a8574f6d4b5be5632908c4fea8634f4748e36ff6fee40e317
- MD5 5f50b22de0efb245cd3b8f2fb50a6d3d
- SHA1 be369ffd0c47ff92b3aa5c259ab9f4d40807b687
- SHA512 f3fec19409ea564bd68f4bd1253297ed8bcbe86554422a22891c61ee237f581f95f6976512e53bcabc5cafe3411343e660d3fb8f398f95f9c1efcec8eaa4367a
- SSDEEP 1536:gmGRkLzUJnbfeKzcqt5G+qX59CcZEY9dHbm/c4C1CgqfRG:gmGRbnbfNRt5G+qX59CcNdX47G
- MD5 SHA1 SHA512 SSDEEP
LaNgz/English.ini
- SHA256 0f9d467f6bb6f682c0d1351b26038950c73720f2bfc0741ec1c7bfab2046d75f
- MD5 525ce1c02ca53f9c63cb697ed3aae899
- SHA1 9ddc2763d9dd663f3cb0febf0d580e21c52c2f18
- SHA512 734d599d839b1266c42f340e044243ae30d1859d314eed7738f72f59201d19359f1ac6ee0cac8bfef4a0a2b8f2232a4f1f33336770c8c43f929c1bef162d2317
- SSDEEP 1536:5S5Ybl8/lKlXiF3y24FMuRvV5I7BohUT1:xxXiVQV5uJ1
- MD5 SHA1 SHA512 SSDEEP
LaNgz/Hebrew.ini
- SHA256 42ba655e5b635698995a588f4dd39147be867a0c4b45fd49edc65982b12b9531
- MD5 dbf6973ac46a0adcae8500a16cce4e48
- SHA1 eae986788b33ad048f08ba722fd4eb7354212e63
- SHA512 7a59fe15ac9c10caf3b3abed60201f008583684dfa476cbb9f8ad4c3f5e93d34f31dec859019f1f36d92129b2298272df5eec15be59e367cdcb77d5e89b46549
- SSDEEP 768:w2kJwh+FrSb7UJTvsjkhsRGn6PqwKJTDv69ZUtiGn5Eq5lBQAjV8WEdtWfSZu/JR:zkJwh+FrScvs6Eq5uWpfSZ6KlThAd+C
- MD5 SHA1 SHA512 SSDEEP
LaNgz/Hungarian.ini
- SHA256 fe9997629d296908247a2e82da6c369e2ea7eb4c87b12fc7c8d3ecb3e6fc320d
- MD5 7591df7fae4342cbc7a0706e1b28e87b
- SHA1 825e88ad498e8713522f5aef3b21ee01d6fa8b41
- SHA512 8f58c6fbaf5ea140a3ecbbc88cbf4bdd0e0ba3fbdf169f4b7cb831094a47a6ead103f89fc07748f91d1396ebd13c7ebcc90a316f0eb203ff4c86a50be5cd3ca4
- SSDEEP 3072:UaKBsDgGod8NAH4iyf8kXrLfKgL6YhL+L3yGU:73X
- MD5 SHA1 SHA512 SSDEEP
LaNgz/Ind0nesian.ini
- SHA256 9e52e0b1f7ec39a36e2edd0231dc98865de8524a651fcf6b1b948a575e35fd0f
- MD5 d944d8a3551719a176db4da31733ab75
- SHA1 6cf51cb43dbd7ca84334389076adbabe407d95b8
- SHA512 b9077bdeb69e07894c995bd519ebab594016c8077a213b29264a8040370c9841f1ad6dada2d0af595a596a3875f9c9989dc30af8e7c7b981b420cf1382d5c9a6
- SSDEEP 768:wbWt5bTJA+NtkooQG+Wioa6lBT8IwUzCc0qfcLVUWf1RzVARBBfxP7KLVoeY4z9v:9bT+atkwR2AIheY4pMOy0F8gx
- MD5 SHA1 SHA512 SSDEEP
LaNgz/Japanese.ini
- SHA256 9077b41d743ed6af51cd9b8aedaebb6d1e0e6217825635a1aa9451994efaff0f
- MD5 36d47bfae8d0d48d56b7b1feb3b317e7
- SHA1 1d8d59aa40f765319fcb70a9f49e997aca305b89
- SHA512 b510a5b17e52778b87f58aaa61f222f11c6190a988440789d1d40591aebdcc7311f7bb3bee9621ab8d971dc2de1ec6ed4d52598b3808dd689f693c3e5897f938
- SSDEEP 768:wPZoCIywqTgXCaNnWYjV6UDFlv0Gaf9xS7ua6PE0FtrqGv0ZQkxKQRTM94DGNWdN:1CIywqTKnWKV5GAQkxHKUfxJYNeNx
- MD5 SHA1 SHA512 SSDEEP
LaNgz/K0rean.ini
- SHA256 ad556989f6e4a683d9668e41d2d7175b7b46847c2eef26188b9075fc600d0132
- MD5 efae0c78be2abe2920c78b9d4785ab45
- SHA1 8c0799fb68852cb071bbe260deb4ab357bd5f4ed
- SHA512 44737be4d4bd0f93ca3e986c89102612932f3749b8e9b89446a567cff60ceb856b4bd7380da7fe3f1809579e6ec2162d0cdd4a217935a4961c6b36a482dd4ac8
- SSDEEP 768:wPYhkzQl6qE7rY+xuPAsyKVmq8Ag8lyWqFk5ziCfsg8S+EZNlWJ7lxyBiCWfbMav:HSzQlc7siCmq8AFlBmLfbNA2Nt7osVP
- MD5 SHA1 SHA512 SSDEEP
LaNgz/Kazakh.ini
- SHA256 1fde00989b3baeb67e6b1f8654cd2fc7216a40a4c5a5a9a64d03d47ee95e76be
- MD5 fe2b5687f2de60cb55629fd7f0ca9a21
- SHA1 5299f36a7b8c5a0b59e3603b8517cb1b3e0f2160
- SHA512 ebda06bfb42a56ed71915a1f42d84edb795927697eae51fa98bcdbac76ce6dd224c7e7610743050f45649f2d756aea82e47af3ef6ad929ddc9593d8044e3334d
- SSDEEP 1536:UdBOtqJCnhr189gDXrbF3h14FMuRv5RI7EhUv1:isH/VG5Rm1
- MD5 SHA1 SHA512 SSDEEP
LaNgz/Kurdish.ini
- SHA256 94ac43cb7eb95277db44616a53b23e9174415377b4b3b98a1bdfc98d06a40a4b
- MD5 af61b416403963d653f5008aaba82e03
- SHA1 b1ab14d6ee43e1230cfcc5acfc4de27ab2a6f6b3
- SHA512 a65a21d5d9f7085acf0a96701d4577bf5fbfc0ebcb4f188ff39139b135570f95d76677e6470261aef022b75378898342ab3105704228029f90b8998f414603ab
- SSDEEP 1536:rESqStTfwl/lmie4rC3DA3f1wjF7af0/KkmwL3mnJ/6BD1I:lbTNC
- MD5 SHA1 SHA512 SSDEEP
LaNgz/N0rwegian.ini
- SHA256 1c99b7b06af0d5ac5582f00447fbe04e2325e173666cba8ce2d18678f7b31e3b
- MD5 5cf9c294bd9d233d95e54e198bd8b4ab
- SHA1 670de196a831bc9b0d503694b594524ccfb77b04
- SHA512 bea2be5e1dab1854cbb83fc221f392793aa7b67a1ba1ee521c4ad0aaea671bbbda868d57b3b226cc713eaf9f90bd9fc05b3166353d78c532a43111349159ac7c
- SSDEEP 3072:/Tu1PWiYzr8Z2GIBpLkQXtgpE7ZrB2kyC+3HX:0
- MD5 SHA1 SHA512 SSDEEP
LaNgz/SimpChinese.ini
- SHA256 1bfa864f7012e64f5c1656fc5636ea29e87e2a45b5eb2c31a3b20643fdd8ad4d
- MD5 7aad044a68d89d8bb5a202f8bc69d87c
- SHA1 e20ca69d6f4d1612dc4457612a4b5e4808470bf3
- SHA512 1fe22968bcba141229d8a4d36f8a7d300e44e76ea701d6a07430854567d15c8b8ebaaacb646d038a89273414c5b2a48562407ca31ac9c75e1e22fece73686625
- SSDEEP 1536:SXm7cLrzWFubvgkOvAbGCgjhRrERD+0xs3sqPHGUt471J2BZIn:8FKNPHGVt
- MD5 SHA1 SHA512 SSDEEP
LaNgz/Sinhala.ini
- SHA256 b6fad3bf2adba7c77641ee1a17ff4cd9e5e9b14bac1b855346c91a286e517504
- MD5 318ee9a93c4620940f88052b904f05ce
- SHA1 a5574f778537ce085d53c3fc52299b3049da2371
- SHA512 054c1e0322a170b83273a5c253eeb9ffc107056c555ca470d19dbdefc7d68c822d67576fd9333cf5b17357878dc6147a3d1367219db48b2b10e9bd915e806e52
- SSDEEP 1536:Run1VCXWZTr/lOPoMHjYMgr5xU1Jdr/pSnE8EtwO5vrzAKnUs2:RungtoMHjYMgrgJqE8EqOxzus2
- MD5 SHA1 SHA512 SSDEEP
LaNgz/Sl0vak.ini
- SHA256 b5b2f7fc1c62f1c8161ec59af79cf5e8f12cb0070264703087dcc5cb58e7352a
- MD5 fcba4d2df72a46575ca828c807224431
- SHA1 265e34f895f4b2fbe98a39b960c385be7309dfaa
- SHA512 6edf1e1484225455b76a1deb6c9f02857433a941bc0aececb916f0aede4398a4f22e70e9c152bd6a78ba2f02f11237a6ee92fb05b21374d250f680b56c6a5cc1
- SSDEEP 3072:2ykd4BlB1wCoG9Yhgt8VQcGlW2Jw/6ro5pw9v6Nv83diJoTNfaRlnCoUjZ5bYtZr:P1wCnyNYpCaAWK
- MD5 SHA1 SHA512 SSDEEP
LaNgz/Swedi.ini
- SHA256 f1ee3b2de54ee588813a7dbffca7e7607bbb769c763cdf73ccd600e06346fe1d
- MD5 d0280eb9ebf7e5f9b91dc0e405bd7178
- SHA1 e0425673213109f140f8f9b7474029a0326cdab4
- SHA512 0102a9b215d169b5cad039bbf80ef9882ad6eea7933ccb47e6ac204451456c50baabaeca43dd477a36d2db3eda317f4d59979e5387e169fbedf1c13494dc87e2
- SSDEEP 3072:lMgTj95UgiNg1TdyjQxx3Ho7wAM65CB9mptXse6/3/GbBJsXdFg9FNX:w
- MD5 SHA1 SHA512 SSDEEP
LaNgz/Thai.ini
- SHA256 172276c875a496c173b349e24f7dec66ddda24f6a424120a13de73ef5e70ba07
- MD5 b193d9eacf4afac3199e11b4f4cb6572
- SHA1 9b3f47c3674b11e16df5ba6d5d29d2698a3e1694
- SHA512 11a6971e4ba3c03822de4a46bd9854f2a1525b5380000afac9eddb5d644ba4af0308454413016c859960ce4cf49efe0dbea4a59651b6127d643d1c7eaec34f32
- SSDEEP 1536:5fJMD1fKNP5/l3X8vruiFDKn+0PRs5jWY+APLR2lw:xy
- MD5 SHA1 SHA512 SSDEEP
LaNgz/TradChinese.ini
- SHA256 eb8fc39f2551834010f3748d81e5f842a1b4e27adb87e425b764bb9152b55cb1
- MD5 dc01555f89e044192a9ad584b62e41a7
- SHA1 e830a3012e610b2c8775c993ff504f6f3e5628ee
- SHA512 954582efc17a2ffb29ba462d3d670576682211066a67de11daae4e5b2f283e055bb3119ce6aab1f40fbf8e629d7e0562c5059455ae420741558484f3c464bcca
- SSDEEP 768:wRZh4e4gX/LtXW2DhVaajeVbWFcqnxCjDvUkkIRNQz+q8wbXrFtUkFhBaQagVQlz:yZGgX/LtXW2Dhk1bWF5dhBa00uZNfsi+
- MD5 SHA1 SHA512 SSDEEP
LaNgz/Ukrainian.ini
- SHA256 f1f0c46ed4c136149fd57d9cae512242a023e14dd13d7c633bb4f7bf9ed71343
- MD5 9482109e20bf801180bbe11e0603c972
- SHA1 bafe4b7daa5529a5bd7b708482cfcdab95273959
- SHA512 b06df7881df5f79fd246e4c95edbe8c2072dbb9a6a02a7f66886b1a41c6928cf9b7d544b0c238ff2ddcb77fdb7f9ed8764ecd32fb46aa05f7bc6a5e167fded1e
- SSDEEP 1536:iziJtNQr3yk2oKLNzPOcGC+Be6fJzFmXZ:sPcGC+Be6fO
- MD5 SHA1 SHA512 SSDEEP
LaNgz/UyghurLatin.ini
- SHA256 d517f3322a43292dbb241597353ad01013ee3be86d666c83d87c0eda4f56f926
- MD5 98eb38cef87e8fa6e6d2619577d4265f
- SHA1 205d6e9147c1f935612423bb9716fa402efa3e57
- SHA512 4e85b523bd819d41ab1032534ef1ca38e841a0d80c2fc672b21a9f2dfa846384ccedd4cea9745ef7ccf127c98378bba913057b0dd716fd620e4a7d2bcf9e75ae
- SSDEEP 1536:mJ05+SP/l0iI5XYIUicOFCWsvzqUSS0XZqISnFhKoMfyLd9:dI5oEcOAqUSS0XZqIWMfyLd9
- MD5 SHA1 SHA512 SSDEEP
LaNgz/Uzbek.ini
- SHA256 af11b0cbdcb67ddc024272d45d098cf1da8a21661fe9f6fb7a0239d0c6684531
- MD5 29dc4e77b361bbce2780610edf092861
- SHA1 5edc783102a4f213e876d70599e0155387ca7429
- SHA512 ad87a926748c607773dad37b1a9fcdd47a87dde0defb36aadf6c8b043561e57b5c420e517d7ae3283f098b661c49e5d8a3ae6f3a348824780ef9d5435be828a9
- SSDEEP 768:wR2Wh/kX5yUYBW0nbEwiW8S9LZU0xqXKhTVT2EogXcZILi2LAUTVxlWRumLFE0DZ:DcBW0nbEnMUMlWRRr+Wntr
- MD5 SHA1 SHA512 SSDEEP
LaNgz/Vietnamese.ini
- SHA256 7b939fb24a88a01b1e45b37427dccb8a319cead04fd012136551f36b4363e887
- MD5 9ee05121e1a02efeec015669d96161eb
- SHA1 28d253a23000f4ca1cba851410cec9b1b02b52c0
- SHA512 0f31ccc9b86661ca679258b309ab846608145c8366225e95aa61691c5b42323a50a1631f645ab58483dcf26331239b677e97d04106029c67aa3c67367fbfbca6
- SSDEEP 768:wVna1qkfNk1220z8aypq/EJDPU35BL8kDgavFij+I7Cs3L+LnL80Tj3DSHPoH1ag:5qkf+12SFU/bnP3DSE1swQg5
- MD5 SHA1 SHA512 SSDEEP
LaNgz/Winzip.exe
- IMPHASH 629fae0a56e3262e208711dda6ae6b1d
- SHA256 26b40c79356453c60498772423f99384a3d24dd2d0662d215506768cb9c58370
- MD5 b66dec691784f00061bc43e62030c343
- SHA1 779d947d41efafc2995878e56e213411de8fb4cf
- SHA512 6a89bd581baf372f07e76a3378e6f6eb29cac2e4981a7f0affb4101153407cadfce9f1b6b28d5a003f7d4039577029b2ec6ebcfd58e55288e056614fb03f8ba3
- SSDEEP 98304:lJXOBfK92HbAw0CNB3kJElzNsy8vGUvfCo3ABH43:lJ192HbAXCvDlzNsy8vGUyo3AB8
- MD5 SHA1 SHA512 SSDEEP
Digest
ca:05:77:9a:83:94:f1:c2:84:3b:d1:35:92:02:9e:08:73:69:34:94:e8:62:49:32:6d:ca:10:c8:55:9e:d9:9b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
Chains
Mar 1, 2019
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE
Digest
ed:14:78:6d:47:d9:55:27:5a:d1:dd:f1:22:3e:ed:fc:47:98:f7:f9
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
Chains
Mar 1, 2019
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
Serial Number
52:9e:3f:9f:cf:7d:58:d5:20:d6:07:ab:74:39:50:02
Issuer
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jun 2, 2017 - Jun 1, 2020
Subject
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Issuer
CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
May 30, 2000 - May 30, 2020
Subject
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 9, 2013 - May 8, 2028
Subject
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
Serial Number
52:9e:3f:9f:cf:7d:58:d5:20:d6:07:ab:74:39:50:02
Issuer
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jun 2, 2017 - Jun 1, 2020
Subject
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Issuer
CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
May 30, 2000 - May 30, 2020
Subject
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 9, 2013 - May 8, 2028
Subject
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Issuer
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 12, 2016 - Jan 11, 2031
Subject
CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Issuer
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 23, 2017 - Mar 22, 2029
Minor OS version
2
Major OS version
5
Entry point
140644
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\Projects\WinRAR\sfx\setup\build\sfxrar64\Release\sfxrar.pdb
kernel32
GetLastError
SetLastError
GetCurrentProcess
DeviceIoControl
SetFileTime
CloseHandle
CreateDirectoryW
RemoveDirectoryW
CreateFileW
DeleteFileW
CreateHardLinkW
GetShortPathNameW
GetLongPathNameW
MoveFileW
GetFileType
GetStdHandle
WriteFile
ReadFile
FlushFileBuffers
SetEndOfFile
SetFilePointer
SetFileAttributesW
GetFileAttributesW
FindClose
FindFirstFileW
FindNextFileW
GetVersionExW
GetCurrentDirectoryW
GetFullPathNameW
FoldStringW
GetModuleFileNameW
GetModuleHandleW
FindResourceW
FreeLibrary
GetProcAddress
GetCurrentProcessId
ExitProcess
SetThreadExecutionState
Sleep
LoadLibraryW
GetSystemDirectoryW
CompareStringW
AllocConsole
FreeConsole
AttachConsole
WriteConsoleW
GetProcessAffinityMask
CreateThread
SetThreadPriority
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
ReleaseSemaphore
WaitForSingleObject
CreateEventW
CreateSemaphoreW
GetSystemTime
SystemTimeToTzSpecificLocalTime
TzSpecificLocalTimeToSystemTime
SystemTimeToFileTime
FileTimeToLocalFileTime
LocalFileTimeToFileTime
FileTimeToSystemTime
GetCPInfo
IsDBCSLeadByte
MultiByteToWideChar
WideCharToMultiByte
GlobalAlloc
GetTickCount
LockResource
GlobalLock
GlobalUnlock
GlobalFree
LoadResource
SizeofResource
SetCurrentDirectoryW
GetExitCodeProcess
GetLocalTime
MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
OpenFileMappingW
GetCommandLineW
SetEnvironmentVariableW
ExpandEnvironmentStringsW
GetTempPathW
MoveFileExW
GetLocaleInfoW
GetTimeFormatW
GetDateFormatW
GetNumberFormatW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
HeapSize
SetStdHandle
GetProcessHeap
FreeEnvironmentStringsW
RaiseException
GetSystemInfo
VirtualProtect
VirtualQuery
LoadLibraryExA
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlPcToFileHeader
EncodePointer
RtlUnwindEx
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
QueryPerformanceFrequency
TerminateProcess
GetModuleHandleExW
GetModuleFileNameA
GetACP
HeapFree
HeapAlloc
HeapReAlloc
GetStringTypeW
LCMapStringW
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetEnvironmentStringsW
gdiplus
GdiplusShutdown
GdiplusStartup
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromStream
GdipDisposeImage
GdipCloneImage
GdipFree
GdipAlloc
Name
.text
Size
203KB
Virtual Size
203KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
61KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
136KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.gfids
Size
512B
Virtual Size
208B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
152KB
Virtual Size
156KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, id=241, version=40116,
count=138, id=243, version=40116,
count=13, id=242, version=40116,
count=1, id=199, version=41118,
count=8, id=259, version=24123,
count=19, id=260, version=24123,
count=43, id=261, version=24123,
count=9, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=135, version=30729,
count=5, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=272, id=1, productName=Unmarked objects,
count=48, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
Setup.exe
- IMPHASH e9fa0dc321486a0834a2759b64589900
- SHA256 a72da86eeebd5577083b1b1feb55bbb8fbda6f995bca6f67d53d251c4c8c0791
- MD5 36f96bb2220861f5315f3b4de51105ad
- SHA1 15fb865cc0949e7ae96e97b59dbaef09f02cf04c
- SHA512 866136b4b33d01e4551581aa2d6b41cffcf42539c2df620057b7b7c9c394198f84985e4f1979175b83148422697b895256b816a1afb8c5bb97b860d366338b1b
- SSDEEP 393216:CEgPTO/bjSeaYI8hxobWiI3+j57lGi0oc:myDpXDwTI3i5JjK
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
11472144
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
LocalSize
lstrlenA
LocalAlloc
IsBadCodePtr
GetProcAddress
LoadLibraryA
GetSystemTimeAsFileTime
GetModuleHandleA
CreateEventA
GetModuleFileNameW
TerminateProcess
GetCurrentProcess
CreateToolhelp32Snapshot
Thread32First
GetCurrentProcessId
GetCurrentThreadId
OpenThread
Thread32Next
CloseHandle
SuspendThread
ResumeThread
WriteProcessMemory
GetSystemInfo
VirtualAlloc
VirtualProtect
VirtualFree
GetProcessAffinityMask
SetProcessAffinityMask
GetCurrentThread
SetThreadAffinityMask
Sleep
LoadLibraryA
FreeLibrary
GetTickCount
SystemTimeToFileTime
FileTimeToSystemTime
GlobalFree
LocalAlloc
LocalFree
GetProcAddress
ExitProcess
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetModuleHandleW
LoadResource
MultiByteToWideChar
FindResourceExW
FindResourceExA
WideCharToMultiByte
GetThreadLocale
GetUserDefaultLCID
GetSystemDefaultLCID
EnumResourceNamesA
EnumResourceNamesW
EnumResourceLanguagesA
EnumResourceLanguagesW
EnumResourceTypesA
EnumResourceTypesW
CreateFileW
LoadLibraryW
GetLastError
FlushFileBuffers
WriteConsoleW
SetStdHandle
IsProcessorFeaturePresent
DecodePointer
GetCommandLineA
RaiseException
HeapFree
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
LCMapStringW
GetStringTypeW
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
HeapSize
WriteFile
RtlUnwind
SetFilePointer
GetConsoleCP
GetConsoleMode
HeapReAlloc
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
gdi32
GetDeviceCaps
ole32
CoInitialize
user32
CharUpperBuffW
*^<�
S��j�����N?�oR ԿlL3���LWMԨ8I��k24b��}��x�N�F <�X�A͊y���6����
�PP��� /e��t�f"���
��d��c������G綟�Ms�pɧ��ًa;��y9��$�MK�����=��X�$+*6�8?�z#����Ё)�`�I�sY{?Hs�����R�������Mn3�g�T c ��C�����II`��I��&��bw�#)�a��j�-^O��&�ִ��h������q�"[{3 ;�L�W�����?���.�����7����Ɵ#5����=_�v�Ĉ#"�T �H|s��Qk)(+p �K˹��b �� ����f��hHϙ�-�ѕ�t���{��m$b�w�z4�M��� *.J�.c?P����)����K�pF���b��{qA�[��TУ�~B����<؋ erQ*�hOS����}��7��*���8oU�9=.�ġ a7��)�a:4���;���X�Zx���ga
� 5'CW�1&ǀd�מ5b@��P�Xl(�� @���/��,��P ����ZKH_%�\��a������,�Ǒҫ !��p��{��4� � �V� ⓕzO;�5����%�����[[��xo
ž&>px n�[�m���*[�u��I��� =G8L�H�����
�j�T?���i�m#m�v��Q��̓k��*ҥ���1��������xI��� �'���+����U��Z=�������Ky�)�~�C3�y�K�y��)��HU`�!k�=�DŲ�� �x�)���3
F�4 ��ee����((����,!ށ8p������}��Sכ1�� �pn"��+_OZ�5��j��@?�M;/���'NPԑ�����@ �/� �_}�%���*���c�8,�$!� � ��nՃ���$Exݸ��y�m"��e ��"
���
�_�yæ�\��2
�,XX�f�5F� N0dY}���P��Y�_'E�|��}_Y��ϲN*S�PJ������K�~��$�Ȯ�9A @�Vrg�
���\ �]|�c�
�V�|�9���S,�� jF��o�
��s
} �6�!|�n��DE���;�����t�������O���d&a�v���at{�_c�/��3+��W��cpk��h���fBhM���P���N�M6��W��^���8���F��k�]�H�>D�L\)L������A7��}ѳʄ�&ޘ���+�<�TI�by�7$����gL.�����"�?P]�Ɏ������V=��=q{ �g�c����X���J M��Y��ԀR
�b�S�����F i&�oy|�*��/����v��!�m5��U��G+EH�
���fhV܈�b;�]��0B���5�:�,;����[Ypɣ_��R�irl��TV�s d�)�5 b
�s�Ժ����*daz)5�#����'�,�?�,�������
Cڻ�$�Ό�,j�`����7�}5���۪�|�iF��r�=�� r�[�&��T�Ďٙؾ��
�wBmY[&�)K
�8��,��t�H���ۼl\��n╥J�]٨�\�Iּ�5!VU������at%�
j�e���qj z��7�hHh�>� ��
�RoS��O ��v'�J��\�~�����"w>��р7�+잪:e�^ �ֱ�ç�PQ Õ���u� ��� �ĕ9��[������P��ZQ�����H���t�K���!.�$#��� ����҅ 9�-���6$�.���#��:�wFO*���.�@�1��>
'=�s�:Z�D��iCڶ8��bj*�u�}R�ǿ�⾞�� �Qn��B�O��?'H"2寽Wr�{��k�q�7�ł�p��#yh��h�|I��Vu�}�=���&��AHa�)2�r���#zf{p|@��ۀ?�����Z�6<}����#M�o%��g=�����gT2�eQ��L���|��G��M�v��Z9��N$/JAR%/ ���w_�B�9dӼ��
Şߎm5 Ҋw���y��F��ct$���X�� ���r��OS��B�b�k��BC��oGo�� o�#P�p� ��<��ʲ�mw�z���`"lqK�*�dÂ��ڐc�;��i{$�!��L�dT �i���,j���w4 G
�}��L������V�D�@| ��'}�9A��G�N9����;.
�:&~ �������T���r��� ����ȱ)�5�
"��s���?eWG�M �� �� S�l*.�T�Mx�����i<�X\���K��7���fQ�:DM���a�J�N�@�
����r��� q]��W!O*���ׄ�Wf�~�Lu� a�L'|J)_{�x���L�/A�h�m��˸�a�UIJI��Q ��48�c��a�[�:���.�x�;-�H�.�w�� �fXy�S�g� �$|�#�<�����A���� �3Y�%VWЊe�ͣ_v�����^#O@���c1?�8���Q �H�h�^�1�g��N��|!$�� x��?�p��&�������n:�?��kt�9��)�iY�۸a2 N�m���Z(����� ��tf���!h��� �68��GϽ�t��Jv�8Ɩ
�>��@2����u'�: [�Kp^4�QW_o�{/3� �A
=U)T63�أ9X�k8�OQ����ٶw�xr?����`p�Z�L����8�`kM� ����նV7xJ0��6��!'��rC�q��V���+���#�ۭ��A$Zg��HrZ�Q��4h��jhX���3Զ4,�J��r a���z��q���M~ XY�E�R�]u�@�K��ȃ�6�l�
OFJW1 x�4PgH�Gt��^
���Kf��TrvV��@b����)؆����o�̼��A� Y�]+�d���W�� ��x\,�ݍ�wwO�*��u] QG5XM�]�ͤ�7��������[� �,�%y� P�ރ����m,͘��q4\)c�dL��F��8I�du3=aI���yu�����5wd�R�����2`���%��~��诅oh:������|3w��p=������K��
��+g@�|ѻ�J�;q2��j �
Name
.text
Size
Virtual Size
97KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.45j
Size
Virtual Size
10.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.|k,
Size
1024B
Virtual Size
884B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.U\+
Size
12.7MB
Virtual Size
12.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
305KB
Virtual Size
304KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ