Buff Achievement Tracker - Installer[.]exe

resource	yara_rule
static1/unpack001/$PLUGINSDIR/nsis7z.dll	acprotect

resource	yara_rule
static1/unpack001/$PLUGINSDIR/nsis7z.dll	upx

resource
unpack001/$PLUGINSDIR/INetC.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/UserInfo.dll
unpack001/$PLUGINSDIR/nsProcess.dll
unpack001/$PLUGINSDIR/uac.dll

Buff Achievement Tracker - Installer.exe

IMPHASH 56a78d55f3f7af51443e58e0ce2fb5f6
SHA256 901f6f640eda5fb54bb99c7f6ceb61d602fd2564fdf7844cedad21c6e7ddf86a
MD5 6102e463e6eaf14a559fd15fc1d78bda
SHA1 fa7e3d21dd72c2774467f11944ea9ccf3ec890ad
SHA512 ef07f137dd7b101b56daf8f8ae0b4e9b2724b99a1392245dcd3ad4e56459f004ac7d65e36fc9a0b57f5ed0bee764a82e918450011cecfcf3d19dab7097a15416
SSDEEP 49152:RqSxE87vxpsrFpIvq465HHbkvjgs3NbWswsmY3NCCcav:RqUPN+TIvF65HEv3NbWsw871
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Digest

26:9e:35:91:31:ae:8c:7b:c9:cf:90:ed:a1:f7:8a:b4:a9:64:b8:78:67:2d:24:87:2d:34:ca:6d:bf:e5:fa:20

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=514330331,CN=Overwolf Ltd,O=Overwolf Ltd,L=Tel Aviv-Yafo,C=IL,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302494c

Chains

Apr 17, 2024

SERIALNUMBER=514330331,CN=Overwolf Ltd,O=Overwolf Ltd,L=Tel Aviv-Yafo,C=IL,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302494c

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=514330331,CN=Overwolf Ltd,O=Overwolf Ltd,L=Tel Aviv-Yafo,C=IL,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302494c

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2013 - Jan 15, 2038

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

SERIALNUMBER=514330331,CN=Overwolf Ltd,O=Overwolf Ltd,L=Tel Aviv-Yafo,C=IL,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302494c

Serial Number

02:13:8d:80:29:d8:fe:c8:5c:a2:91:9d:08:d1:31:55

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 14, 2023 - May 3, 2026

Subject

CN=Dummy certificate

Serial Number

01

Issuer

CN=Unknown issuer

Key Usages

KeyUsageCertSign

Ext Key Usages

Timespan

Jan 1, 2013 - Apr 1, 2013

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

13613

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCreateKeyExW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken SetFileSecurityW RegOpenKeyExW RegEnumValueW

shell32

SHGetSpecialFolderLocation SHFileOperationW SHBrowseForFolderW SHGetPathFromIDListW ShellExecuteExW SHGetFileInfoW

ole32

OleInitialize OleUninitialize CoCreateInstance IIDFromString CoTaskMemFree

comctl32

ord17 ImageList_Create ImageList_Destroy ImageList_AddMasked

user32

GetClientRect EndPaint DrawTextW IsWindowEnabled DispatchMessageW wsprintfA CharNextA CharPrevW MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW GetSystemMetrics FillRect AppendMenuW TrackPopupMenu OpenClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetSysColor SetWindowPos GetWindowLongW PeekMessageW SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint EmptyClipboard CreatePopupMenu

gdi32

SetBkMode SetBkColor GetDeviceCaps CreateFontIndirectW CreateBrushIndirect DeleteObject SetTextColor SelectObject

kernel32

GetExitCodeProcess WaitForSingleObject GetModuleHandleA GetProcAddress GetSystemDirectoryW lstrcatW Sleep lstrcpyA WriteFile GetTempFileNameW CreateFileW lstrcmpiA RemoveDirectoryW CreateProcessW CreateDirectoryW GetLastError CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersionExW GetCommandLineW GetTempPathW GetWindowsDirectoryW SetEnvironmentVariableW CopyFileW ExitProcess GetCurrentProcess GetModuleFileNameW GetFileSize GetTickCount MulDiv SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW MoveFileExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW

$PLUGINSDIR/CommandLine.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 cee8683c16cc43a542cfa1490894f555857eaf031fcdfb1ed7059e1538e21c8a
MD5 1d859391711a062c5f48212686505a6a
SHA1 06db312b20ebfd24e1dd1f729d8ee8dba761c8f6
SHA512 340224199c171c3d5b9f06d4a9e6159bc7dab79a58324cffbe7f86857b1eef49e5f9d022b4ec907f9475aba334029ccdf06b8b05ec67b197a9c15809cd8ff7a3
SSDEEP 1536:UZj9JT17qpL/6ePMqBNzrstoJSkrjbgbwzis3hwb7PP3hX/V:Ux9JT17WPMqBNWAkbwzi7bV9
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Digest

c4:bf:69:a7:49:b7:36:1a:42:33:23:37:55:f1:07:a4:20:71:2e:f4:5c:b0:07:6b:66:62:b2:98:fd:b4:db:a8

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Chains

Apr 16, 2024

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Digest

c4:bf:69:a7:49:b7:36:1a:42:33:23:37:55:f1:07:a4:20:71:2e:f4:5c:b0:07:6b:66:62:b2:98:fd:b4:db:a8

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Chains

Sep 6, 2022

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Serial Number

0e:e0:0d:4b:1a:48:0c:a8:70:01:b5:40:80:63:da:71

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 27, 2020 - Mar 3, 2023

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Serial Number

0d:ac:c0:f7:43:c7:9d:8a:64:64:dc:96:7a:f3:b0:39

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jan 27, 2023 - Mar 3, 2026

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

4

Entry point

60874

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

G:\src\commandline\src\libcmdline\obj\Release\CommandLine.pdb

$PLUGINSDIR/DotNetZip.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 6c512d9943a225d686b26fc832589e4c8bef7c4dd0a8bdfd557d5d27fe5bba0f
MD5 190e712f2e3b065ba3d5f63cb9b7725e
SHA1 75c1c8dd93c7c8a4b3719bb77c6e1d1a1620ae12
SHA512 2b4898d2d6982917612d04442807bd58c37739b2e4b302c94f41e03e685e24b9183b12de2057b3b303483698ad95e3a37795e6eb6d2d3b71e332b59deeca7d02
SSDEEP 6144:GuCInHLhJI4FY/ixjci6ychf8xalGQGtSV41kJDsTDDpBnse6OVxLV/Wo0k:UQL32ikCaUS4csRBse6sfWNk
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Digest

13:8b:f6:d8:5e:11:a7:7d:99:23:3f:a2:cf:77:74:08:78:12:2e:73:c4:3d:bf:8e:a7:85:e5:13:b1:43:8d:6a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Chains

Nov 30, 2021

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Minor OS version

0

Major OS version

4

Entry point

465934

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\projects\dotnetzip-semverd\src\Zip\obj\Release\DotNetZip.pdb

$PLUGINSDIR/INetC.dll

IMPHASH 735e27ae3d7df8c0487e4353d04f6f28
SHA256 c1e568e25ec111184deb1b87cfda4bfec529b1abeab39b66539d998012f33502
MD5 640bff73a5f8e37b202d911e4749b2e9
SHA1 9588dd7561ab7de3bca392b084bec91f3521c879
SHA512 39c6c358e2b480c8cbebcc1da683924c8092fb2947f2da4a8df1b0dc1fdda61003d91d12232a436ec88ff4e0995b7f6ee8c6efbdca935eaa984001f7a72fea0a
SSDEEP 384:wv1j9e9dEs+rN+qFLAjNXT37vYnOrvFhSL+ZwcSyekzANZBJ:w1AvEs3HBLzYn29vYh
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

17741

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

GetProcAddress LocalFree WideCharToMultiByte TerminateThread lstrcpyW LoadLibraryA CreateThread WaitForSingleObject LocalAlloc lstrcpynW SleepEx MulDiv GetModuleHandleW ReadFile GetLastError CreateFileW lstrcmpiW CreateFileA lstrcatW GetFileSize SetFilePointer lstrcmpW MultiByteToWideChar lstrlenA WriteFile lstrlenW CloseHandle GlobalAlloc GlobalFree GetTickCount DeleteFileW

user32

GetDlgItem DestroyWindow GetClientRect MessageBoxW wsprintfA SystemParametersInfoW GetWindowTextW GetWindowLongW FindWindowExW IsWindow CreateDialogParamW GetParent ShowWindow KillTimer DispatchMessageW LoadIconW PostMessageW IsDialogMessageW GetMessageW SetWindowPos SendDlgItemMessageW SetWindowTextW TranslateMessage GetWindowRect RedrawWindow SetTimer EnableWindow UpdateWindow SetWindowLongW wsprintfW SendMessageW SetDlgItemTextW IsWindowVisible

comctl32

ord17

wininet

InternetConnectW HttpOpenRequestW InternetQueryOptionW InternetErrorDlg HttpSendRequestExW InternetWriteFile HttpSendRequestW InternetSetFilePointer HttpAddRequestHeadersA FtpCreateDirectoryW InternetCrackUrlW FtpOpenFileW InternetSetOptionW InternetOpenW InternetGetLastResponseInfoW HttpEndRequestW InternetReadFile HttpAddRequestHeadersW InternetCloseHandle HttpQueryInfoW

$PLUGINSDIR/Microsoft.Win32.TaskScheduler.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 94961a4d686fa65b85b9e56a2a47aa87122c7b4f4ff8a9e7ef881c2a142283eb
MD5 9f725ba6eb84f97a3a10d064ecab70e3
SHA1 ec9636538aea8a0c9f4516478c1d3c232cb490ed
SHA512 3e36dc4f38abb3e92b325616f2ee7aef321f9fe125e38ecc0a0302b10706528d8265046fb18f2f12b65493773ce5345f9b0123c27dcc16707c0b64bb87a68b4c
SSDEEP 3072:UBCeNh/pcfnLq3wyXYsKRNRwxz+gT37teucRpH00o:UB/w4xQWOW
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Digest

ba:dd:f3:a2:22:c8:8b:1f:b9:ff:8c:1d:c0:d7:7d:f4:1b:46:6a:f3:49:1f:ab:41:ee:1d:10:17:6e:48:25:f9

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Chains

Apr 16, 2024

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Minor OS version

0

Major OS version

4

Entry point

125134

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\Users\dahall\Documents\Visual Studio 2010\Projects\TaskService\obj\Release\Microsoft.Win32.TaskScheduler.pdb

$PLUGINSDIR/Newtonsoft.Json.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 7b44639cbfbc8ddac8c7a3de8ffa97a7460bebb0d54e9ff2e1ccdc3a742c2b13
MD5 98cbb64f074dc600b23a2ee1a0f46448
SHA1 c5e5ec666eeb51ec15d69d27685fe50148893e34
SHA512 eb9eabee5494f5eb1062a33cc605b66d051da6c6990860fe4fd20e5b137458277a636cf27c4f133012d7e0efaa5feb6f48f1e2f342008482c951a6d61feec147
SSDEEP 12288:p9BzaPm657wqehcZBLX+HK+kPJUQEKx07N0TCBGiBCjC0PDgM5j9FKjc3SH:p8m657w6ZBLmkitKqBCjC0PDgM5CH
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Digest

2e:83:93:14:a9:06:f5:64:04:02:a1:dc:eb:a3:1a:a7:e9:21:c8:88:2c:dd:c2:3c:e4:c0:45:50:4c:ee:75:10

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Chains

Nov 23, 2021

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Digest

2e:83:93:14:a9:06:f5:64:04:02:a1:dc:eb:a3:1a:a7:e9:21:c8:88:2c:dd:c2:3c:e4:c0:45:50:4c:ee:75:10

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

Chains

Mar 17, 2021

SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Nov 10, 2006 - Nov 10, 2031

Subject

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Serial Number

07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 27, 2018 - Apr 27, 2028

Subject

SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

Serial Number

0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e

Issuer

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 25, 2018 - Oct 29, 2021

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Serial Number

0e:e0:0d:4b:1a:48:0c:a8:70:01:b5:40:80:63:da:71

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 27, 2020 - Mar 3, 2023

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

4

Entry point

698886

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb

$PLUGINSDIR/OWInstaller.exe

SHA256 21b6b7dadf2378430ae17574a83d2a028e68a1027a7576f52f7adefdc2c0a324
MD5 dea5d92def5ac3f55361bd1f44f0503a
SHA1 8c3426ef7e29cdb43dcb6ee478ef39831a0af6bf
SHA512 ec63e20b50fa090a58bd90ef3a8f4f9d1afb1a93286dd6740219d33c6cb4d62c0fb44579bcb93bf2b5ca34f2bfff11b42f4b45fcb0deb9314ba5d5bcd6e6cc0f
SSDEEP 6144:7patEos7K0ICLs17TUOgFR5bu09bFyoSIm900lzq2lSlplKHczA:7patqK0c7IOgF7qFoSU0vSjM
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

Digest

6e:ef:f1:68:f3:20:8d:c5:13:09:ad:d0:78:af:54:11:44:dd:52:88:6e:b0:9a:f0:19:f3:ec:b1:bf:ed:2a:a5

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Chains

Apr 17, 2024

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

E:\Jenkins\workspace\OWInstaller-NET4.8\OWInstaller\OWInstaller\obj\x64\OWInstaller\OWInstaller.pdb

$PLUGINSDIR/OWInstaller.exe.config

SHA256 272e4c5364193e73633caa3793e07509a349b79314ea01808b24fdb12c51b827
MD5 82d22e4e19e27e306317513b9bfa70ff
SHA1 ff3c7dd06b7fff9c12b1beaf0ca32517710ac161
SHA512 b0fb708f6bcab923f5b381b7f03b3220793eff69559e895d7cf0e33781358ec2159f9c8276bf8ba81302feda8721327d43607868de5caaa9015d7bb82060a0b9
MD5 SHA1 SHA512

$PLUGINSDIR/OverWolf.Client.CommonUtils.dll

SHA256 4ad3ecd0591f8dad217d5d99e11d809cc699c28f55296845148254f6fce69828
MD5 6a45b1f51b619ba08761fc91567bf0a7
SHA1 4c29b1915dbc859ec462d13bfca7f77a9985133c
SHA512 8fd3c507338bee22af8a74922e1deb28e928734f208cea667bd12e434ec23636c77ccc4d33e9d7c9fefb87715dbe6dfaf75011c3a01619a5050656aad85a3419
SSDEEP 12288:EITQrrPbOtLhAQR0tYu1HWrw1B1q/Tw25uKEe:dt4tY4WqCw3KEe
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

Digest

59:34:70:46:0a:e8:55:80:5d:36:50:6b:f8:19:f4:75:58:91:da:ba:b8:e8:69:cd:10:55:0a:0e:94:8d:a5:71

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Chains

Apr 16, 2024

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

E:\Jenkins\workspace\OWInstaller-NET4.8\OverWolf.Client.CommonUtils\obj\x64\OWInstaller\OverWolf.Client.CommonUtils.pdb

$PLUGINSDIR/SharpRaven.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 0ea20361a01f8fc8eab21ab5613e77d36a3506793d4487438c314daf86e90630
MD5 8f6ff3176e7f0b58b033b3d3f1303db3
SHA1 dc21231170a74f459e45d81fa7dba15e0c6fe2c9
SHA512 a0a3b3548983d15936b8517c2b5d5fa624b902522ab067ad552bedbd361c3192fc2cae889da0f8c986cfd295cccbbaa91596f478154c42f1a1cafbbc7eff86b1
SSDEEP 1536:sa9qjviI1YjOrfRK9bvyyfpHbnzDwkN7Pa3hzuG:sEuqI1lRKbvyyB7nlNyuG
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Digest

29:d0:9c:eb:5a:81:f2:af:42:7d:8b:61:a8:eb:de:5f:10:60:8f:fd:1e:fb:3c:28:61:47:e3:b0:8d:21:5a:01

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Chains

Apr 16, 2024

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Minor OS version

0

Major OS version

4

Entry point

79586

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\projects\raven-csharp\build\obj\Release\net35\SharpRaven.pdb

$PLUGINSDIR/System.dll

IMPHASH fc0224e99e736751432961db63a41b76
SHA256 5a1c20a3e2e2eb182976977669f2c5d9f3104477e98f74d69d2434e79b92fdc3
MD5 7399323923e3946fe9140132ac388132
SHA1 728257d06c452449b1241769b459f091aabcffc5
SHA512 d6f28ba761351f374ae007c780be27758aea7b9f998e2a88a542eede459d18700adffe71abcb52b8a8c00695efb7ccc280175b5eeb57ca9a645542edfabb64f1
SSDEEP 192:eF2HS5ih/7i00dWz9T7PH6lOFcQMI5+Vw+bPFomi7dJWsP:rSUmlw9T7DmnI5+N273FP
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10134

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/UserInfo.dll

IMPHASH e1c0bd3d5b9f3f5cec7ea773ff66ac6e
SHA256 090c4bc8dc534e97b3877bd5115eb58b3e181495f29f231479f540bab5c01edc
MD5 9301577ff4d229347fe33259b43ef3b2
SHA1 5e39eb4f99920005a4b2303c8089d77f589c133d
SHA512 77dc7a1dedaeb1fb2ccefaba0a526b8d40ea64b9b37af53c056b9428159b67d552e5e3861cbffc2149ec646fdfe9ce94f4fdca51703f79c93e5f45c085e52c79
MD5 SHA1 SHA512

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4714

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/app/_locales/de/messages.json

SHA256 4442ce287dfadf8d2019e4e975ee1c876d57d847c04715fd215ce03b24d36225
MD5 9ad7bb13a28acd7b7be3d35adf80de99
SHA1 0fabddcfd82faed51bb071fcfaa213db2583cb37
SHA512 9af9d5a66c4d9f39027eec20288bfac7170b43944fc58d6a05359624827a3847c4d90b232d3f1f621eaf3f5dd35172efcc96e763b1ca733dfedf02d4df084951
SSDEEP 192:RAJZco4VLBeZo9NhochYRl173tFUWIh239gdzu:bOSYd7V6a
MD5 SHA1 SHA512 SSDEEP

$PLUGINSDIR/app/_locales/en/messages.json

SHA256 dad27dea69e2e18dad4489ca8ad16c2dffa6448919ad857375f54463740ffae4
MD5 02b3d4da2acbe118b1c7752cbc73c563
SHA1 f4dea02036c91100d1d8b641259bf1c261ba795d
SHA512 bd37a83255fedbaff54e2bc9abcf220e8daf0ba7e76f7874e0415420b6ed3543f29f7e1c3370048af10400fabfe6c061ddddf726ab4ec906793c02ebf852690d
SSDEEP 192:+ANFsiqgFWBIpJGtkb9yBj6j/mP8gZM8F:2gFWBIpJY29Ut8h8F
MD5 SHA1 SHA512 SSDEEP

$PLUGINSDIR/app/_locales/es/messages.json

SHA256 382e9709edcbe0faa5509ec6891beb1063840ff0a6cbbd04c9aa94a376ba4503
MD5 424b1b7afc6cea984341e80a1d5ee07c
SHA1 af56baa273442a6336acf7ef873a1f64423534f3
SHA512 2347b5e2d5b1f95be3c59461c01b6a3f9d52741510d790a812d61ddbeea5b05f01a67e918862790cf1697a106f9aad65d8035626880c7cba1e1c87456ed473f1
SSDEEP 96:TSmHNbp4V9NzWuWGswh6VfJt9AS2xzwO/enB80IKsw8Ao6bdgOMC+lSzJZreOz2:dHN25z9E/d2T/eBAKsibP+8zJZFz2
MD5 SHA1 SHA512 SSDEEP

$PLUGINSDIR/app/_locales/fr/messages.json

SHA256 d10d6f0c35af598decd2bddb3945ad5987cc8da310446b16a63e9856fb635999
MD5 418a72fba9141b5fad2daa67eac89ee9
SHA1 c0e931a1e76543dde2350b2a93fb7adcef49b194
SHA512 1e756322ae19c9a82d66ff74fb48daaad3ec8d873aaaa63103cefc51e4db0c3de4f593f067606641e6027c4b5c256c7e558d4fb1684dc8241ce96c8696fbf000
SSDEEP 192:9euPfuQtfqnfmdIkT3KpGvzjjX6+R/QBOOWmW:yY2fmdIkT3qGvzjPQBOOQ
MD5 SHA1 SHA512 SSDEEP

$PLUGINSDIR/app/_locales/it/messages.json

SHA256 71df04a26c171ee7ed4e13ce7b8d0a7a8e50fe1d554d2297ea96f7371e4179c7
MD5 14684a817dabf05025d1a8b33b0ec04e
SHA1 fa838b38356c26a345292786df9d868331dd5aae
SHA512 194aa1dcec2c50fdfd7431699da3080977bf59198b404e6ffc96f06628fee01d0db127ce041a4be0fe22568760b9fd2da517cb67ed5efc283ac28838f5e7bd23
SSDEEP 192:jp7a5KqWVRImAOoaODwcambEbpuFOratb3KJ:5qWVVSDuMEV4Oob6J
MD5 SHA1 SHA512 SSDEEP

$PLUGINSDIR/app/_locales/ja/messages.json

SHA256 20467128e0afab919e9874dcd7e2d5dd94fcc16f33aa50d0d8243e81d6c089f2
MD5 d9dd8119873d6e831fbfd768343805f6
SHA1 c4b2c24b8bba9238c10616ac9c01cef088cab092
SHA512 b5c456f7655bc3ec23aa733e91940f25cd5f42284e97fb51a95b96b927c75a96ea163628486cb4b890b24ebd6277295fedc79bcd14a2ce7b19471490d9b32a38
SSDEEP 96:vbt9L0Fvmq0cn9alw2Vx5AkA0h31GYzPxs0yVeMyHIf3X24fvcWd7GxQpLCZNFVl:bqElwOuEQq/c124f0GjIlITc
MD5 SHA1 SHA512 SSDEEP

$PLUGINSDIR/app/_locales/ko/messages.json

SHA256 0d483128b1714e8df8d61a3396ea4ffa6e1f6865ad7b5306214d811a2028ea0a
MD5 17387fe103d0789991d057984b130284
SHA1 1a847b2f82a002a3e3567f4dacf39632b1e2ba35
SHA512 123a84497ac56dfde0cb4d52c7c778b1210132662164e1553be98fba06d4b49941b8e11c105749aac1b140b6886a33bd2647d0fcfd7bacbbbfd136ea4ab2cfd2
SSDEEP 96:20Lnmlou+29abFqYDrhg8Ude8y4gVHWS9wLBKgi2ikhoglwQxDj/b5d:206aPz3fwI2ikhnjTb5d
MD5 SHA1 SHA512 SSDEEP

$PLUGINSDIR/app/_locales/pl/messages.json

SHA256 b8c9eec03aac551f33de55f0be7d5b915d64730b11f0574fed1666e656f2118b
MD5 5ba0db597f102d2b7560631095128f1f
SHA1 10de6855b2c26d00bce493ad5049d030eb7c22f9
SHA512 e74fd3ad2853f4cffe3bc188d535b86ee5ce81b3a884ddf0c51ee823fb91b30b3d62dc3bd4d38db080d97bee73fbd48102896d76c3153e307461aa82d5e0017a
SSDEEP 192:JkokRd0l5MtqydKTFLbPUhyj9194AI/5x+KunXuU1X:OzdKpLLUhyFtI/5AKmuUZ
MD5 SHA1 SHA512 SSDEEP

$PLUGINSDIR/app/_locales/pt/messages.json

SHA256 7c09f5f4f909d30e1a45b92a517432d296859825876d4e9852a8f509f96d2480
MD5 3159b26555d81ef9c9d0d153e775c708
SHA1 b855ba4a1f25e6dff65da71b407df1a91180435a
SHA512 ad1c74542a4177fc8e200d2e7943308025a2d691b0b421ffcb580c88cbdc925ef50c43d17bb665a2a59c168e1fd21897d8fb000a71695036533bec4d907c7184
SSDEEP 192:PdZpgbn/T9lmvEd1ltT0j8fbt+DBFIdfY:Pdc/T9lgwXtT0QZ+NFI2
MD5 SHA1 SHA512 SSDEEP

$PLUGINSDIR/app/_locales/ru/messages.json

SHA256 764419019b8da2bc3fd0af5ec8ce8899b3a24d90c1abf69087b71fb55acc0515
MD5 c22702df74eb2c41ed92cd3f1fc46cff
SHA1 ba8b25078d053f44c5bf58f8b761baf7984de527
SHA512 facc5db35301ef8e405561d09dd1e4353ffd665d0577678d63d33a45362277556fcf2ffd930377bbf7631fcb6a32371dd658b45916d990fff3abacf2856632c9
SSDEEP 192:hxopOFKQb8f0mv5sNXLToezIF97/Yz6eOicV7FKe:hMQb81v5ObtzdJ64e
MD5 SHA1 SHA512 SSDEEP

$PLUGINSDIR/app/_locales/tr/messages.json

SHA256 7840b3b78294030927731f914a64e17a2010cb0699447339c2fcd47e909e7d4d
MD5 b7695e795776ecf9ac9299c0f30f87f9
SHA1 00361bc0899720beeff341282f2aff5ac43899f5
SHA512 a8574f7cc659694ed585580a135baec7faca82162e6fc9c19a88ebde15cb952878d74e43b32012f7f7dcf63b67b097fe62d68db8eb6753ebf353bff8ed07315e
SSDEEP 96:/o9oJmTNCu69YKLtuQb34bJthPjSnID6v+iVcMgJVvBP4E0sauEWaxpX5A3XKC:YT5KAQr49SnIuHgJV1KHFXgXKC
MD5 SHA1 SHA512 SSDEEP

$PLUGINSDIR/app/_locales/vi/messages.json

SHA256 231a647e4ac1fcc53c008c7a07af4ddbf6e7faad38cf6eb593974ad9cda444b4
MD5 ff03f3797fcdc074fd32a57f8ab36d4f
SHA1 07d382fa4558607d502aa6a6d2de797a0269b4e6
SHA512 7e85fccec49f0e3df37c410a49f689293abadfebc55b9ac3f5a47b7a868503175c0efe957e7ea422bb0d58eb6a200422a394f530724d0fcb6e5d7b5643a12df8
SSDEEP 192:vDA6IMxCb6kSKrk03+4Q8pQfZlraoBMJ2sf55qlQ:vLxCb6kSKrk03c8pYLaoxCnuQ
MD5 SHA1 SHA512 SSDEEP

$PLUGINSDIR/app/_locales/zh-tw/messages.json

SHA256 d10b26d1cb08ba5b4c9ac17439a641f82b7404823f4ab8bc3d793c0c4bf01117
MD5 363616514628c643de23e2b9b596c2a9
SHA1 4cd78e19d704d3eb470ebe0b4789bce6cdee64ec
SHA512 d1609f3a4ffc45b3003056e6a66ea39be43ee73aaf1d6488b4fa86f37e176388191d3cbdb30506c0472c3d98d3c1c5b3f62de028dc495b23abfa57f84015614d
SSDEEP 96:IDHmAvreV9Hi0Q/fg1ePhnmU2KczmRbbDHukFDRnk0gsmZ5B2:PAaji0Q4M2KcqRvbvFNk0gJH2
MD5 SHA1 SHA512 SSDEEP

$PLUGINSDIR/app/_locales/zh/messages.json

SHA256 28ec01002632aa8e3a46078d590c4cd707faf2a2f0e4071d6f8572d4b90a4ea2
MD5 6bfb7e28c38ce417f9ae53b9282a3e90
SHA1 5e7723fc7e5e965fe84a1fb8fc22fc07eb19bea7
SHA512 126ad8f28af186b9a7868497ec1789b85031373c0ab3e9f7df84d7a6773064e490ab1fdbb94c3bec19626080bb455a2231ec4a45de2a24e041d4478a52bb4055
SSDEEP 96:Z3mAoD6V9yJxLljPmghdDPfcCfb39bC4toTbYFbLxPf1R0:EAv23JL/fckTM4toMPb0
MD5 SHA1 SHA512 SSDEEP

$PLUGINSDIR/app/assets/fonts/klavika/KlavikaWebBasicMedium.eot

SHA256 41146279fcb503008ab14c89e3e9a1737dc92499b07e36f9bbbd40b82dc3a793
MD5 ddd851603ecdbf74a113ae2e741fb487
SHA1 36449c0d56578c22df9c6918840d808aebd3e97e
SHA512 67b84413462158a114018c413bc8a32731d00f439d6998ec1577fb7d27df4316edd9acf9c94dededb918fc7ce6fb8523af85e03dae0b94e5a2b505e6998e0053
SSDEEP 768:rseIE0tr8IYly5CBAYDTCphdJupFzkDHCbsZU0MqMA3OlgE1Ni:XoK08BAY/CHupFzKibQMXf1i
MD5 SHA1 SHA512 SSDEEP

$PLUGINSDIR/app/assets/fonts/klavika/KlavikaWebBasicRegular.eot

SHA256 83f615ecdb758eb2fd5357b89a9e0424bba9ce66ba2f8ccd93986f7d03998b5b
MD5 8c176ec2a2ccf48958f8cbfc5114818f
SHA1 dd93db072bfb8ade37da99c8e56bda5c4259feb8
SHA512 c2ea009102f1a47313ed3d85f391ea23a9bed3378f965f4450befc5347b086f752fdb5b41ef0f2f6dab674f3095e7dda2837294b4d21ea9268551bffbcac5c4f
SSDEEP 768:Arh/pQJ/7STWU6K/j83COdDCxyQ2dvgxB8hC0:ArnQV7nK/A3CqQQ0eC0
MD5 SHA1 SHA512 SSDEEP

$PLUGINSDIR/app/assets/fonts/lato/LatoLatin-Regular.eot

SHA256 c6c970b103b3c3aa83f7a45172619a4451ea5f015f9f3ef4fd08c9a4aa895cbc
MD5 6cfad5881181ae658a6efdd68889a690
SHA1 5b54f6ccc20ed3a078fbdf94d7a68ac80002624d
SHA512 ddd3d43540eb3d4eef48d0834136de1e7bf23a52f286d0a666cf57c7d685aadf1cea6d37c88f9d7ce5ad6143d7c3213f54b16a11f616b7dce154bba50997bbe7
SSDEEP 1536:Y3UqIyK9PLLUbTiyEl4u9Iau0j6aEPmFm/MsE+Eas7AdCtkUq:EUqIyK9T4bTiF99f2PmFm/PpEL7A8tkr
MD5 SHA1 SHA512 SSDEEP

$PLUGINSDIR/app/cmp.html

SHA256 6c21e8c07ce28327dca05f873d73fe85d5473f9b22a751a4d3d28931f5d0c74f
MD5 d7b8b31b190e552677589cfd4cbb5d8e
SHA1 09ffb3c63991d5c932c819393de489268bd3ab88
SHA512 32794507a4b9a12e52ceb583222cb93300e38c634a72ea3f51a0189127aba60cf476fb7918942355a4f826185d7071e876cb40348ba34cf5d1ca7e9546ccb310
SSDEEP 48:t9rc0/GLAoShbEHaLKNGiNQtvmolOGR36tgtr/GTvJP8AscaV4LiMt7ByBZXGz+p:4VLjHa2NGiivmmpWsBVutFwAk5vSG
MD5 SHA1 SHA512 SSDEEP

polyglot

$PLUGINSDIR/app/css/styles.min.css

SHA256 ef423e07b8a0ce201d438ffb8501899c6ae9d20fee079707b03b32bce8857591
MD5 a205363a8b123d65909896daf16a2eb2
SHA1 17d99f7889d61b56a44509e45465fe413ace29d0
SHA512 c65cd1f376838ef700a1826117c61d10151c06a8d1e869a2c5c2f0f282cf00a8dde4d6ee74df01a34824e6f84d9c694217af23354f490eafd5814493e4837521
SSDEEP 192:FdqpDNDPkFHmY74+/qmtRCtmK8W9I2gHHMlxh8B39LJ/Hab48JgJnc5w/93mJ8Ax:aWNaM8UnbjPM
MD5 SHA1 SHA512 SSDEEP

$PLUGINSDIR/app/game_detection_database.json

SHA256 f30b571b8bb396aa0bca9aa9b80638416ec638de5c4788bc281ac67d3d54ccaf
MD5 336d26d3e0ab31e8dc102ea86c48fa26
SHA1 aa0a6a940ffcf7cdd9cfcc86a382890e18fff5c4
SHA512 ee1d4ae3236964e0e2aea7c33aa82f44b2b25d9fded16452e00ec09f867031df0539be19fe52c4d638332dc50698b526a7cb11056f5fbf765eb7e0cf832fb49e
SSDEEP 192:1npXvXj1ZAWj802H5Nxji2FDF83mXqdEzzohblboUWIsv7a7svfxF3L3xjQ1uwN4:H/O02ZNxmxlu
MD5 SHA1 SHA512 SSDEEP

$PLUGINSDIR/app/images/big-icon-fallback.png

SHA256 46b318ffab431aa7f0559560632c0eca28a0527fe9ec766e947d3b49708e3de5
MD5 435663128120e807ec9c33d5b277198a
SHA1 6de278d5f8850da54405fc3a444cfdf8054f6a05
SHA512 97cd952ab6833cea217ea6b5f5a83624f4ae1311ac0c4d66f2bb7d61a6c224b7cfb6205074e008ea33aaa7b82474fed4230ec3f4f8f085e884b716ee992624e1
MD5 SHA1 SHA512

$PLUGINSDIR/app/images/bottom-arrow-hover.png

SHA256 3b8043e64994a53126afe1250b80fa2934196c3305bf93fd3e7a6963867a6eb9
MD5 f5d76b21fcab6cc89fd0ebc1089c2c26
SHA1 160645c02dcfdcd4d6d6a8339557a62b80493e40
SHA512 4c4fd737cd771e8e0c025295c598aeb4ffb2d20df10658f7cb992aa49b4817be5d291c0c6530b4e9aaa241ab76df3c52e01a40a505e7b60d1d968a96fd4de991
MD5 SHA1 SHA512

$PLUGINSDIR/app/images/bottom-arrow.png

SHA256 46bfb08af2269108c681b78373c98e899b4234adce39394322c7dfd6d40dcdac
MD5 847fab99890ddd7460e758ad8d463ba9
SHA1 bdf8c1e45993ee33ee0bf9a2e43d6048df71cb8a
SHA512 0bd2075c61eafc2946a9431bd4fbbbb141f3743144782376874640e4aae1ee97a05844589661b3a0912b23dacdf57e0a667d8ffa8ccd0f4358e5802e653aef1c
MD5 SHA1 SHA512

$PLUGINSDIR/app/images/checkbox-checked.png

SHA256 b0718ebac6a1666f75492e0807166ea1b257bbbeed87d64d574e45adaa768173
MD5 cb392a851c11a74c80c9a6b7a2804cba
SHA1 750b03afd6f6da79ae81164b5a64dd2c3f4937f1
SHA512 ca3baf5ac8cc1008c3886d68501c49a750efea4c891d85615a8881ae604f1c9205ee71861a8bb615b5978b239aa4e3b8619a56a646ec4d812e0ee7c1dfe05af6
MD5 SHA1 SHA512

$PLUGINSDIR/app/images/close-hover.png

SHA256 5c95ffffdef5de89cc7b04ddacba9fa4c1280a192fda4138460c72433f0d0230
MD5 d07493ccaf895ba1e5a1b230789b06a8
SHA1 c62f9f464db25969516ad57a706b222e100667a1
SHA512 ec5640f9b97ee9d22f8dbc1d685048acc6c67338eb701c42522a0e72edd3b180677405d458c49cd73ee23b8ebef85beabd66909a6572665abc1b25cb6d0f074a
MD5 SHA1 SHA512

$PLUGINSDIR/app/images/close-normal.png

SHA256 e8bd82cb680ae552f587a3f0bdc1df18fc7624dffec501840cc508d327baeec3
MD5 1acb62ec3fa5a82347c330512f2259d6
SHA1 c81389f19687e791bc4ada896620b17471371c04
SHA512 a6693f68c41f8a7c137f3129403b14144329c132b99956ff2c1cc5317b046eaec70aef82c7c05b9220c3c3a7f2a417718fb65bbbe486250c05191778456f602a
MD5 SHA1 SHA512

$PLUGINSDIR/app/images/header-logo.png

SHA256 e83b38f1f699ed4df739fa632d55a422e6d35b19261081a5bfccd2bc4669c5de
MD5 b51f37fbd94cb7d7f45dab73fa5bcfb9
SHA1 2c3aae0f065216cfec01339da2c60282312079c0
SHA512 4a7c0a654c3d4da9b9b77aad46d68d2da370b8b54fef325e6ea8972b202541c134ee937db6d71dd549d405241fb15a043d2dce0734312f72222cf5a21e5827bc
MD5 SHA1 SHA512

$PLUGINSDIR/app/images/icon-fallback.png

SHA256 772fe7450824cb84dbcbc9cdb401278dec1a511ca3ae2cceb073e8bf4dc8fa61
MD5 3880ad80fd07870118b0aeb8fff308d4
SHA1 37b30e87d89d3bc56eb5ca3f8ec6c7f22e5ee6a1
SHA512 3917e7b6623f284a0378702e489a5131c3ad328827a87e1332d24a89d6e54d68e7dca3e5bfeb0bb22fe54da1572d2d8a9107eec8f36b9ba7db1f50c0a5205d8f
MD5 SHA1 SHA512

$PLUGINSDIR/app/images/icon.ico

SHA256 2d57121ff4e34cf983bc91b41fdb974883b41efe213bb149e3e81d7d4d10d41e
MD5 51e75bda8d67975d112b9e3676cfee94
SHA1 681691af738cd40573219a5cb53f0e898f8f81a9
SHA512 405a4d29e081ff0bffa081ae4f527ebf9c850fcebca9f1a75af05077289bbdb0dd34d1636734b456767df71e06c7d23ac5d5dd364d2f57e970f72aa476088195
SSDEEP 384:Qjk0rnJA4rnGC+wd6rhbDPYwAzi7oMme12Z:Qj1rnJA4rn0wd6dww9Cb
MD5 SHA1 SHA512 SSDEEP

$PLUGINSDIR/app/images/large-logo.png

SHA256 1bfe389c41dc9897a4b1b5a0e495570a0f3671fad73d42307cbde1a82ae1be17
MD5 91c31a155e202e8ad2c033e61d0bf948
SHA1 3fc81f5f368f90e7104b65adf6b8780d71005f99
SHA512 ef89b9edabd3e1f3e9cb8e2ce919b4d29a31ab112297fa6b9c3be2cdd0df548307e3f800de2e027b907422ce87a5edf638d0a410e9afb6de85318ac0173f1e69
MD5 SHA1 SHA512

$PLUGINSDIR/app/images/minimize-hover.png

SHA256 d84b877f7a2d601b1d71cf878b33ff78c94c2d144a0f4d72436a7dcf64e712c2
MD5 f4b8851b9ef5a55b0d45392baceb31fb
SHA1 03a87a04dc75579a8568543d40db963b6e9f4051
SHA512 a849659d4ba4e40b924108cd567a58f4b1569afc5c7517a10c26fd6d64422fa61812683292da1c3b19dbe91c63aacd5cd1c5b342ccce98b6815e94b55767ce4f
MD5 SHA1 SHA512

$PLUGINSDIR/app/images/minimize-normal.png

SHA256 aa2b021cd0dd9563705503dad48866eac926c7ace608ff8d00f755afc509f39b
MD5 1bcfd10e50ab56ac335a463ec19b8d33
SHA1 b5054dd1cdd714a6771bc11e43291df361a16ccc
SHA512 7257c401db826ed1f4a549b1b899d0fb4a5bcc3c599ced49b07a64fc308b08fb208dc378a32d9c3cd193b4d603ae76f82bb297334998ca6abb790081a5467edf
MD5 SHA1 SHA512

$PLUGINSDIR/app/images/more-info.png

SHA256 b110d583d920fb1065fc7eb587e4f2a256f99d55eb8a562924e088d9b7a971aa
MD5 c6911391ca719b6ece307854f40d02be
SHA1 451936edbab150559e38a81ec88c75de052bb14b
SHA512 9728920dd81f2554a37119aae1755751e08ce8d22be5df21ad1b8205d3e37f027cbcb32c25193faa6fa6e270574c7d4eff529ca08bf57565b764b338ea8b1c75
MD5 SHA1 SHA512

$PLUGINSDIR/app/images/plus.png

SHA256 d25235a308d7b16b6a8694a3eb8935393d124dd3c58380a6c67d4e4f3382e47f
MD5 28a150c80834701792d39b58fe16e741
SHA1 f7fa88204163ee7a0df768eb6759bc02b8e1c030
SHA512 8222a493bae3316a851b66573886b3c63f8d63b68e4da56ba25f37fb46cdc27ac7dc4e10ca1c3912352812eae5ce4492591fbce09ff7ba1a228ecfb2a49f0c32
MD5 SHA1 SHA512

$PLUGINSDIR/app/images/progress-01-overwolf.png

SHA256 4da28ba55f43cc1d03d5cf1eeb040985d3bb5fd2a7230667c871254f006c512e
MD5 3d98876bb3f09090568aa3ef90a84dc0
SHA1 5f98121ef031920b8c8ecab21435cc64bd531c19
SHA512 2bfb612a6aa0061f123e8d342ab4d049e2f38b2c111f2662d4da8c8a22a73893c5d9743a337766ff2e6346cb04ef2b4c63ea72e5e749b34593fd372889033d6e
SSDEEP 384:aOTXx6gYKAzHwRSRJLrw5NsgRCc7xXWMvgu8kz82H:a8Afrw4gj2vP2H
MD5 SHA1 SHA512 SSDEEP

$PLUGINSDIR/app/images/progress-02.png

SHA256 130eafc5dc7ef993134d0bcff40bfbf11b99d41c63a5c6ad1d70c7ad4db2a5e7
MD5 3781b597e18900a6b779ab588d8a8e21
SHA1 0fd2084a62f507ec802646f7423c9714ba547d7f
SHA512 22f2cdc6cdd81503d48f8f23c84abbd23c6c9e3a137b7e4e91846823d957abeee348f4e3cff88667a263503ca310d80253187d699f733975133d08b5729e647d
SSDEEP 192:5H+KSySpZ21z6dIPH/tRtif8AqGnKWAiGufSzjmhgRjvvEOmbukJc:ZLSJZgz6cztmlqmdAJuazjZvVSRJc
MD5 SHA1 SHA512 SSDEEP

$PLUGINSDIR/app/images/progress-app-image-01.png

SHA256 032335dca37195df73cef1fc5f019bc8705284c3226dbdd54f81d61b714c4915
MD5 6276c4f73df3a91718a12878c63dcf24
SHA1 a86fe5338c78dc396f680e489766f8186e6cbe81
SHA512 11a4e465614e65a04e72b5d6b80f0c5643d51757a06595168894d3e0a419bd68ad31152221a22ec1fd6db03c5c159d31aa5054f1f4d8c633099477afd6f92607
MD5 SHA1 SHA512

$PLUGINSDIR/app/images/progress-app-image-02.png

SHA256 9363bf7bf35a32278d95b8410bda989c63d9cd09fa17fdcb04d93aef1d433b3c
MD5 9626ec7a1330f4fa65abb37f08ff6421
SHA1 914801589106fec21ff3d7f5673aa035bb5bf129
SHA512 f43caa916f385158cb3a3fb20193a80ce8ee84f1063e6497fa0a9265dd28b8983750d0c44006936aefb9d6b16230d92105bd344707bda8d55e3283b344ec792f
MD5 SHA1 SHA512

$PLUGINSDIR/app/images/progress-app-image-03.png

SHA256 827f9bd53d624da1397e0f8d3a68fa96bbe7146b74f6ea8af5cd6acfc3839cd5
MD5 38ead88ccac4d4f8077e265aafc186bc
SHA1 eb3c2de5065ab597c8e9799a3c31487545ce4828
SHA512 a473af7f5d1dd87a670b1d7f1c9e34d66d7bbc77647dc72d540acf97e1d296bbaa59469663354ae4223423688142d6d828e35f571d37bd7ae813274ccfcec519
MD5 SHA1 SHA512

$PLUGINSDIR/app/images/small-logo.png

SHA256 0ee19b8f79232886f6234cc6dc21c0327e90df94a189c5effe1d8a6444543726
MD5 ef0803e881fe7bba90e5e9ec1678d950
SHA1 43e9ac35b2f4bc22e404bb2362eaa7bfef24f9bf
SHA512 11c6126429f4fc3ea32edf6132dbad840a1df35f58237c8730f5171c491588425190897f4370545bcc4ed4d42838dd95a2789a3b6ca20cf8cbc7bef78472f253
MD5 SHA1 SHA512

$PLUGINSDIR/app/images/tile-fallback.png

SHA256 d173d88df0d31e3d4f83b299cba4ec031dd286dff2f963e58d747617649108a2
MD5 0148cc4040f730247ce079e723fc030b
SHA1 ee316fdbaa54a7cb5cd350adc4919787e7edb63c
SHA512 a441046265ccbc2e8e25bba5e10a46d65f28d2a9100ee12742e0ef5da943461996cc036f57031ef6c21fb0929ebb941e27874a08e53677e46ea28c097136cc75
MD5 SHA1 SHA512

$PLUGINSDIR/app/images/v-check.png

SHA256 af10225db6ff7d4b67d00b12f37b211c1f368bb99ae900856b023ce5999dc9ae
MD5 cdd7415f59e5c003dd5956b971a3cde1
SHA1 89a3cd6591cd66fde5fe389a216272cf11d7696f
SHA512 bf36f6ed5f9a5bd9da0bdcb0baa03ad73e12e4d30ef64752e14c307280825e994deee50c5436f683048711104634f0410684188d47f5698dfe5309ae4f55b2a9
MD5 SHA1 SHA512

$PLUGINSDIR/app/images/welcome-logo.png

SHA256 2e3dced384fe419468973dcb074794b1444f48bce8f96217aa5e3a98c34e4c01
MD5 860785e1633b7a170ec443f4d36551c7
SHA1 f5a3401fdb22bffabbaae7f912f93cddbb7ea148
SHA512 217b2177b9f990ee27d1e169dca9f99da18e9bd41fc6d7a5ce7d01cf9e35a23f343763835424125b3fa73de196579054e56542e5885327c6922deeb34fd78e16
MD5 SHA1 SHA512

$PLUGINSDIR/app/index.html

SHA256 69b9f99f6611f953d94984ac35bdaf9e9817f689e1e3614976bebe3465c613fc
MD5 c7b752acf6d1e10f3aca2c67b1ccf4d3
SHA1 ab793cb43e0c2b5af0fdcbf90d0d29d5d3e164f7
SHA512 120addd79b7ade4f35b426c02631c8167d81080fde30a01b989453113f7547784e525d53bede41ede0c9b3caca8513060753ba51f75bf6936d32ee597d642576
SSDEEP 192:8sdqpDNDPkFHmY74+/qmtRCtmK8W9I2gHHMlxh8B39LJ/Hab48JgJnc5w/93mJ8D:+WNaM8UnbjPk89+mppHL
MD5 SHA1 SHA512 SSDEEP

polyglot

$PLUGINSDIR/app/js/app.js

SHA256 a14fcaf11a16ad7d904960538ca35d5b05e1c1b6a916f228db6b319c6195acbb
MD5 f718bd3f18dd499612623852cd2a2135
SHA1 9432b7898f655fbbd8132f4b3f8822959ae3ff97
SHA512 90a697f93f239e8210ad47b6f012d3b40ea9c23a92ab909434d0e2d71bc3d9663d1aa73c64646e3dbf417f9636d1190b3d0cf20d349456dee6b6b8d5536d0338
SSDEEP 384:4X+acDQrcljKdZGb9plmt902wjI3A4nzwF52xxYRifG6wBEoR3FGHWdeLj8T:0+acDQYlOdEbdmXH3A4nzIAnGifG11RL
MD5 SHA1 SHA512 SSDEEP

$PLUGINSDIR/app/js/block_inputs.js

SHA256 f8dbd6793b35f7a26806f4dabad157aaafdf6d66fad094b50c77d60f223fd544
MD5 b5b52c92b90f4283a761cb8a40860c75
SHA1 7212e7e566795017e179e7b9c9bf223b0cdb9ec2
SHA512 16ad53ede5424ca1384e3caea25225589e9eec9e80e2d845948802db90fad222f709a7b651cd7601a34ba67a0627433f25764638fd542cbd4612871308e7b353
MD5 SHA1 SHA512

$PLUGINSDIR/app/js/libs/cmp.bundle.js

SHA256 7fbc3a088ec303143109e0c1b2c04f4c5a6e450a2d6f3071fefb66e92f643ea0
MD5 1de143ca1babd3c02744f478c8c05c5f
SHA1 ac918b3d2d5f9cbd9e3b3f5e075ce3c96eec16b3
SHA512 6e419e11f35a3258124127970961907ed8fe0619f618a4c15542ee7f8a01a9f4a7af4d290b634444d21b823ca1afea65f97d5788fff6665d55c2231214edff24
SSDEEP 3072:LWYyrzt6yrtky1UDtDkNdAOoSPGYTckZtVPuuXheQ:oF6yrKD5kNYYTcIp
MD5 SHA1 SHA512 SSDEEP

$PLUGINSDIR/app/js/libs/jquery-1.10.2.min.js

SHA256 bc44d3631ffef1df7960e359f02002d3ada45ee05205c2cf1edd85da2f518144
MD5 44e3f0db3e4ab6fedc5758c05cf27591
SHA1 2d408aa1d35661019c95adcc60b78c0727ed25b4
SHA512 4d4844e53e686fc59a52e86588f328dca3ed6fdad7195c58942a98c51755a24981b903ee7c7b27785375eaad5a7d9501cf74b999674b79f214e66103bad9efdc
SSDEEP 1536:O4mCgi8DyCuXXFiJ+L0kJQsJVPEKuQRZdC/RAfDknv+p0WzH/Io9Z7qABZnu0JFV:OGsKYAI2p0WP9bDrJ7fak
MD5 SHA1 SHA512 SSDEEP

$PLUGINSDIR/app/js/models/notifications.js

SHA256 9dd03dfc92bcb74f3725aae60e904c0a56cc84f299bbb8e863a869719f6fdd32
MD5 85afdf9897bb1236eff3afa40d15ece6
SHA1 4362bdd139458eaf4a2dcb34294b43e2d53f4a26
SHA512 4ab86c6bafba18f53f01ca913ceaa80f14900107069a1d5f65b108d35690bd8b50b1a6cdf1563fc5775909f69208dabebd139f3cf3d8576269d560d57cf9994c
SSDEEP 96:sOr8u1s9FvYYdfHsW/GZwzpJGf8mui+U8QrGjqTzoOxOYsdfHsW/GZwzpJGNjINU:sGu9yYl3rNQ8K+JQC+/5Lsl3rNOEYIo
MD5 SHA1 SHA512 SSDEEP

$PLUGINSDIR/app/js/utils/analytics.js

SHA256 c37f0699cf8ba7d9e3e0f73f1b2af65f4bdc2a31f44594ffc8c73e98b6c2fd1d
MD5 525281e9959af4c1c0d11b9243c798a1
SHA1 237a84c5b57bd132f48446d718b20640cb28c263
SHA512 fe5bafda7773e69c65dd63270e0306abcd39cb2d886b675ab8c714ae0833efde963b69623d468551a1ab37f1db1a1d457f1568f7a29d9cf0bb23bb0edcab5fc4
SSDEEP 96:LlYkmHqqVHlnZ4JGvt+QP2EvVVko3sO2LCgObNS1Tgzalh:AHq1GV+kcRObNSGza3
MD5 SHA1 SHA512 SSDEEP

$PLUGINSDIR/app/js/utils/commands.js

SHA256 e874c959c7b8e4351d730d263231df7176b5062580a7d3e0a2684001b510f5d7
MD5 65015f2e2e490f6786abc0560e33e1d0
SHA1 47b5c2b3b1f9381e4d2b9d1f3d82ba62828ce28e
SHA512 a4ad579acfa6000fd8074893a6b45df74558c57afd5b957217491784fa25df370c59d9f92ff245abbdf3d26b42114cc22359ef95c4baa322e326c7e210f43edf
SSDEEP 384:7/W5HB8c36uUvJQ006W8tusv5qEWTwdSW:rFOs5
MD5 SHA1 SHA512 SSDEEP

$PLUGINSDIR/app/js/utils/cookies.js

SHA256 9d3cb3822e20d6f5157faa02dc69bdaef44576c3fb5523e00aa152107ce30287
MD5 6c60e675f8c8c68c0174b644d3a63a2a
SHA1 3635a3fe07ccc4a6f33a986ddb690522d0611abb
SHA512 1dc9ec7b139bcf37107ecd673c01e4fcc606332ea1645a4a1b4e5d95f817d4c99d5964cd3d941a6a526689341d9623b17b4efc002cdf4c73404299d52b1be452
MD5 SHA1 SHA512

$PLUGINSDIR/app/js/utils/modal-events-delegate.js

SHA256 267661f932a2ea78d8c7a98cc03d1b18d7cb8132deb84636772ecd1fcfbe4857
MD5 117e4fdbdb0ecf211c8bd909efd337d1
SHA1 9f8684d856b7c95bdffb139217dfd89f41373187
SHA512 f474ee20b59d3d0c11f9f6aee6b6e2b66f7025beaec9841f88455e60533dc96cb4e27910be0dae92b0028c5578932b7f459fdb91d594ad010f72a3b3af6addb1
MD5 SHA1 SHA512

$PLUGINSDIR/app/js/utils/strings-loader.js

SHA256 96445709fde2613af50f4b8908296d4bfccdccb2d9db9febc34a9bf4dcc70ecf
MD5 9c94eb933d8a43dd3825e67a7e30c980
SHA1 7ec7b16af6f399219209ba5967d377040486a11b
SHA512 a662a299e31633f71a9b9675970359430fdac06dcc284fd7ce92919f244c7f921639f97a42356e993a95865e6c9f198dcba82c126f82065bf2009a31ec9b02f5
SSDEEP 96:FXS/WSBWlbBtDhWFTnTeWsNkEj1I/6WfwkUlx416moPdXDKP8j8yZrME6:FXSuQwBBh0nTevNkEj1O6Wme0muXDK0W
MD5 SHA1 SHA512 SSDEEP

$PLUGINSDIR/app/js/utils/utils.js

SHA256 b4f0c48cbfeaf8141fd44b12031e3f0410cb0cdc313888ffdb14fdf1d2341246
MD5 a0952ebeab701c05c75710c33d725e7e
SHA1 1da8a2e889f1213d481ae3cd5571670c01e64adc
SHA512 5e5ae616d3fded7d2bf47a326242c4477ca3119fb52897bfb41de0be230ccbd6c3da2c00268b3973e9bf7b4f2886aba64fd9719b448662e4130ee66d87913389
MD5 SHA1 SHA512

$PLUGINSDIR/app/js/windows/cri/cri-controller.js

SHA256 cee7fc5a36a01a439125be031923d7e7415ec56194255048098169a0108034b7
MD5 4e4b4a9e2d86ae3c108105078db6d730
SHA1 826946be793c999316af6c1db10523950b18ea2c
SHA512 1420065cd000ce9b9c39d27b5dc5f4055f67146e06573a03184649851c9745f0c0af2b5e35b41b5923703dd74e32f9ed95fc59a43db25f854584e319950beffe
MD5 SHA1 SHA512

$PLUGINSDIR/app/js/windows/cri/template.js

SHA256 505d3c4de7d9cf8f0155b5b1a3c8792bc0ca2eda6781b441bd85455f144be22e
MD5 76c1ef0cb437db144c2bed53a5a8a5d7
SHA1 aaab8fff649f8e46d1e9510018118ee9abe01498
SHA512 822bf9feda91c89539d263c6c9053163e8dfa3c511195bc61a9b608b4687fb4048733323f03dd30a7ab661a4be4acf6c8d8ae7bb6723771122540a9551899c3e
MD5 SHA1 SHA512

$PLUGINSDIR/app/js/windows/finish-with-recommended-app/finish-with-recommended-app-controller.js

SHA256 5ca97132a258ed1f36e401d70ccb95be2c9e18395e6010c40f61172914477de5
MD5 eb6d6bd7e05d4477e2704dd87b57ca35
SHA1 f42672ec1e23a3f4bcc2952746d87ba8deff44be
SHA512 1402d611f910cf5078e804175fa4693b591348d3e7cf6d0a6bbe026c259eb9e0bc285233c80cb2f4690674c3e927bc72fbdcbe758826b98fd02ecb3ed82e339a
MD5 SHA1 SHA512

$PLUGINSDIR/app/js/windows/finish-with-recommended-app/template.js

SHA256 b61dfc304b46e8cd95d7b15bb93c6160b30523a1a093397a84fc8b8bed00ac42
MD5 d1cb34b57cef7e28b9286454b197b712
SHA1 f3a964b319bab82d4eda07e126bbfd6dec35c349
SHA512 3a07de9c58134edbb7998f85e6d037a0cd066e32c4daa07594a949a7574f5693153bbcdb59739e1a92e847ab1128e2369fb30ba76a7b9cdfa9a37a409db691c1
MD5 SHA1 SHA512

$PLUGINSDIR/app/js/windows/finish/finish-controller.js

SHA256 4cb4e1aa25c15ae5f2e63fa4658a8acff0ce63e0f59cb6eb634df2dfe336e2ec
MD5 138240ea22084428e9e25583e9156568
SHA1 e8bef7eab5b6e7040b996ec9504436e073444bd9
SHA512 e97b81b0ecd964e6e909019353efe4f5582f65763ac4197d754f1c4eea19cfc249900ae597fd33e29f531bb0d1c7e0f010793c59a2b0099fa75ad0b7d01ce8a7
MD5 SHA1 SHA512

$PLUGINSDIR/app/js/windows/finish/template.js

SHA256 b05f111369e12ecb4cdc6526dd554061eb31097aa0de4bd126ddc185b69d922f
MD5 f092de7ea66d8e920b345f38537fa35d
SHA1 82d107a409f18878307ae0cefe24074db64937c4
SHA512 14942c0122f216c07595cbaae498f9c4d37a2d0fd95f262c332502befdf4566c7a042c4d85702c1d82a111123dde677096195e9efeb1d74eb1dfd4df84d01a23
MD5 SHA1 SHA512

$PLUGINSDIR/app/js/windows/main/main-controller.js

SHA256 84dc33e2eb3118fc77a38b0ca53af42c53f6eb85cfb1e8737dbe39fa03515653
MD5 15b665a5c915004e1aa7e9e11a710f7e
SHA1 7821924e42bb19d60c572ff80bbaaa04d7aaeefb
SHA512 dd47f7bac0dbaac714e6d2fc91b4c24756ca4acb70bdbc4b54cd5216552d6bb85ba2e1c3c8445c5fb40d116dfab6569945cd74730bb7c8f3cf46e8d08f8afa02
SSDEEP 192:28RRXC9xThFzkzLZ1ksEIA6li5djpACga0U2FxVgMKV59GsZydwOVTzdfj5UEdwV:2sCHTTzkzLZhJit+y3ZydwKf6
MD5 SHA1 SHA512 SSDEEP

$PLUGINSDIR/app/js/windows/main/template.js

SHA256 63a43bb08403972d0f4b0e381bd264af14e826e0035242bc1baa9a815956b8fc
MD5 a118c7724c208f12083240cafccfd10b
SHA1 f89c676a215b869626737862a08c9eb07d440211
SHA512 9fede79044ae5de7baf5bfba0d5a515ce462a25420026ff45bcf1751e57510023cb40df42d08e880114f62b38ddb218355d5357b725df32a41ae4e6a18414cb3
MD5 SHA1 SHA512

$PLUGINSDIR/app/js/windows/modal/modal-controller.js

SHA256 4565ee81ffe222b31982088b1c18850076e3acf59198ebce08118e12cbd87ea1
MD5 b04bdfd1c7d09bdbdb94a2455fdd677b
SHA1 f000ba4866ff16d75bfd6cf446763498e19b12b1
SHA512 3cb6ef0a16309046e7f407e7321eb12212b0eec09ec1a04b1d813f6c7a04546714865c3b398a93985041f598156ed905ebd23a64260801281b29ada9bc19ec5c
MD5 SHA1 SHA512

$PLUGINSDIR/app/js/windows/privacy/privacy-controller.js

SHA256 14d9c60cd97f18e74fee2dd80b6a190eaccc526085991f356feb6b4d330a0fc3
MD5 15bbec339f5046f525e3aa96d36c30ec
SHA1 f73d40bf06584737fe327f1eec6f4b0446545226
SHA512 2b0edfd2d5efb3f739e56eb6f3bcfae4789af3e1639f5f8e5f7530f5af10eb1a61464d665c9d9b2f4eb3796f2445108599d8bea75f1709aa562feebee519da4e
MD5 SHA1 SHA512

$PLUGINSDIR/app/js/windows/privacy/template.js

SHA256 95c459eae0edccdb94702aea603a097e461daa0e5f37dcd0e30de7df665433a8
MD5 cf8d2c26520d7c84e560dfa79e31dcd3
SHA1 716f2ec17480d5cc9c145bc147833fbfc39d36f0
SHA512 d466dcf7e86a4295857020feea281fc89f519f6bf1e79c3b5e1046d0745c9c9010377b1941e06c9a9b2c78a4173ed9909332d5d6c39b05f460e8a863086c895b
MD5 SHA1 SHA512

$PLUGINSDIR/app/js/windows/progress/progress-1-controller.js

SHA256 838bab990ce38372dfedb50eb0a270db705811729630ab8557c08bd1e9e8e105
MD5 82f0b997ed552c52a510a9f2ab29dc3a
SHA1 92aec3a656053c71eccdde610130f5d8008fa96f
SHA512 ecf67f877002d746eff8af3a50155aa381513ddafd17b6bff0188c85f0765579fea0112e82e1371f962b1f5decc94b65e6120f21fb516533dac35a2d541065bf
MD5 SHA1 SHA512

$PLUGINSDIR/app/js/windows/progress/template.js

SHA256 a7128a08bca53dd919cab3e5cb4dab31ded7ae2dafc957209b9fdd23f3b944ab
MD5 92b145e6649ba0add3dee9a69d3fa91e
SHA1 4db1a45392ec973cc8a7eecf3a30a9a7ecc7a64d
SHA512 747a087dffdba5c92d9f4c8923615d388b9c4c79d3b71d3cb90487aa37c132290a4f5107eef3055c03eadcb9614e20d4655393dc9251fab7e0ee2438f0d95751
MD5 SHA1 SHA512

$PLUGINSDIR/app/js/windows/settings/settings-controller.js

SHA256 b5c5dc5e0684fd97eb4c45896dc1c2de8a6a6fdc63b6aa83a99103c15787ef35
MD5 378c18dd7d5cee6ca7c4ddd0396b535b
SHA1 d5f81d4fab29201fd1629dc4d8e6f918c0c30479
SHA512 c29416b3f0245f4826d857dc8c52c969071d2410c945bda96f38f59a9bc7137ee534d84865e5ac55a1e3cea6bb705c5d592725af709cd97e7f38ff05dbaafe5b
SSDEEP 96:5RFTr5TvuTlpwWXs/t2V9OqIJ6OFGR+4V6RjTmoSrOlidbtmfPNVC8V/pGHmI4Rj:5RFBjugWX8YV9UAf+4CeoSrGWmNh
MD5 SHA1 SHA512 SSDEEP

$PLUGINSDIR/app/js/windows/settings/template.js

SHA256 8014a7c919da249ba2f2196d9c9b62639d20851be426f3ffaef161cbe477c45f
MD5 28513de0830383a516028e4a6e7585a0
SHA1 d31fc3a6f4a3ce6c4afb82ff2342a1ed718809e5
SHA512 0f7321c2ae13145bb694368dae1b74e6fe20e6b09712da2178bc46e6aa65223ab84c38abbf0ed074c85b42dba1a238a5f3f8d1ae060a0af6df748c5befe11b61
SSDEEP 48:Zx8LQmDdbaoFRpm4+0A2AEeQmDdbaoFCpm4+0A2AW:wpm4+5nHym4+5nW
MD5 SHA1 SHA512 SSDEEP

$PLUGINSDIR/app/js/windows/welcome/template.js

SHA256 42c546e9da748ef76fdab56b96fd511eb607617a9ba37b3dc420148b769d8acb
MD5 17f54fca6723b983875d940d931e0afb
SHA1 01774cd5cea36bd74c80a708d6f77567e8091024
SHA512 401df9a54cd14c19227d91bd08b4775a7b437644b4ca0d1d636d3e07b04591f9c5516e80040ae6a79ba400457d15e3d80aa148a63de870a64664fc5a02f7a038
MD5 SHA1 SHA512

$PLUGINSDIR/app/js/windows/welcome/welcome-controller.js

SHA256 6155691dbdd66290109afb91617f9cf68af6bd912991d5d27b922f5faa7f530b
MD5 50f676754862a2ab47a582dd4d79ecf3
SHA1 1cb2f4b11f9f8cfc8dc57ff29d0256dec4811158
SHA512 ccfc89e08fd36f0a694fcda17efb84ca285b6c62afe2e3a794fdad19b6882a4b618645f4d9171673ba56fb4c55fce336d6b8d26dec3a5cc11293ae2b211f499f
MD5 SHA1 SHA512

$PLUGINSDIR/app/manifest.json

SHA256 949d178dd878e2e5b5fc71a457503f139f052c54947f233a124ce1a0a6e7fb22
MD5 b8e8d71fa7a9474c7875284925aaed4e
SHA1 0622eaee0daa6f3e36beb71e7a5c8f622ce2870e
SHA512 4ab844d7e120b12600e0600c6b7b948a27e02cec4171ec757da0f2e526318cc627c0d2be1ddf375b2cf3483addb2348305ae0fc8bceb6a527ba92beee20a5d50
MD5 SHA1 SHA512

$PLUGINSDIR/app/progress.html

SHA256 f2182497ffe118349d8a462cf0eef55f22798a17e91846b194b7298d860ae38b
MD5 359ae05967ebe29e7f7a3564f0fa3f53
SHA1 3c1a454e8f5445ec890c5c2c11fa9e24bbb8e4bc
SHA512 0b61dd5af6feef3e1361a9ddc32dfca2200af44507f8f4e2c0f73ebdcb79e690d1f7561d86bbcace1ba16c37f18d6d40670de2d3e16b88d710180665de51675f
SSDEEP 192:dXdqpDNDPkFHmY74+/qmtRCtmK8W9I2gHHMlxh8B39LJ/Hab48JgJnc5w/93mJ8F:d8WNaM8UnbjPaeu1JE36+
MD5 SHA1 SHA512 SSDEEP

polyglot

$PLUGINSDIR/log4net.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ae9c8073c3357c490f5d1c64101362918357c568f6b9380a60b09a4a4c1ff309
MD5 f15c8a9e2876568b3910189b2d493706
SHA1 32634db97e7c1705286cb1ac5ce20bc4e0ec17af
SHA512 805cd0a70aba2f1cf66e557d51ad30d42b32fbafcfbc6685ec204bc69847619479f653f4f33a4e466055707880d982eb1574ddab8edfa3c641e51cda950e2a0e
SSDEEP 3072:F+8gmdoxSO7ZbQFroo7RVir/dtnK0sgdnogtHcU5qFG1RSGCkE9kKn7GCcaLoWnS:I1N8LLI/PK0scnodG1RS1T93caLQD
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Digest

21:19:ce:02:3c:42:51:72:0c:88:f7:ad:2c:58:50:e2:68:0d:4d:30:91:26:84:c2:91:ea:0d:c8:21:6e:f8:1e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Chains

Dec 25, 2022

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Minor OS version

0

Major OS version

4

Entry point

264682

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/nsProcess.dll

IMPHASH 439074d1c01f7b16781bdf060930814a
SHA256 30c6c3dd3cc7fcea6e6081ce821adc7b2888542dae30bf00e881c0a105eb4d11
MD5 f0438a894f3a7e01a4aae8d1b5dd0289
SHA1 b058e3fcfb7b550041da16bf10d8837024c38bf6
SHA512 f91fcea19cbddf8086affcb63fe599dc2b36351fc81ac144f58a80a524043ddeaa3943f36c86ebae45dd82e8faf622ea7b7c9b776e74c54b93df2963cfe66cc7
SSDEEP 48:Sz4joMeH+Iwdf8Rom/L+rOnnk5/OCnXeAdbdOAa4GPI+CJ87eILzlq7gthwIsEQW:64c/eFdfS/SSnkxNa4G+ueqPuCtGsj
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

4097

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/nsis7z.dll

SHA256 e7d67acc9f321763bc451e3e91cd5311cbd3e4668e1a2c7e7231d8cda17084ae
MD5 3bf85c75025120b3945505feb1b605d5
SHA1 740fc113c492a4b07d15e5f39ae877adee194c30
SHA512 01ec3c72507f89ca0e7f3fea19bf21a847813b022c84b16ef31f92f528ba759864314b0848ee91b9db838a71f176fc8707905a8f8992ed3960b45cbb6facaf41
SSDEEP 1536:G4Xm0KD49p7B8vri9UX0X8oX03ZY5LUDuXfAw3RlePlEDyWHci+nouy8QU3h1p7W:G4W0KMrKri9UX0X8Z365LUqXYwBleqlp
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

ACProtect 1.3x - 1.4x DLL software

Detects file using ACProtect software.
UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx

Digest

93:8d:9c:78:89:31:8a:93:f5:79:cf:86:24:d1:b7:bc:b8:ad:61:80:fe:26:d8:67:50:7c:39:ac:0e:87:82:1b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Chains

Apr 17, 2024

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Digest

93:8d:9c:78:89:31:8a:93:f5:79:cf:86:24:d1:b7:bc:b8:ad:61:80:fe:26:d8:67:50:7c:39:ac:0e:87:82:1b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Chains

Nov 13, 2022

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Serial Number

0e:e0:0d:4b:1a:48:0c:a8:70:01:b5:40:80:63:da:71

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 27, 2020 - Mar 3, 2023

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Serial Number

0d:ac:c0:f7:43:c7:9d:8a:64:64:dc:96:7a:f3:b0:39

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jan 27, 2023 - Mar 3, 2026

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

5

Entry point

210848

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/nsis7z64.dll

IMPHASH dd7cd06a0b2436c11533a6ea17d01100
SHA256 2368be6d8b21e0047146d3f61f90966a71d0737eed0146bc692b59f3cac97793
MD5 284c46af1fd2ec3a60ee0c28f276f2a4
SHA1 4d4d41c0af12d928e4e553ab6b80e6b4ab8007bc
SHA512 ca9e4ef79c9c7c5f2282ddeee34ec39a51cddf26dcad4e9f2e42230499b0b898ac2dfd33f25438aa995741d23037fa01a0269823c283b234ecec0f155d3c05ec
SSDEEP 6144:C5IQHIy4gGVccVSVwp78nPfRvFbVWHWWDwkUzF2C/GJAiLwQ9r1uykJE6KizMSZJ:eIQHIXVL8g7EW2z4oGJ4gr8FzvJ
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Digest

ba:a8:88:23:4f:59:31:f3:22:e5:c5:1f:ba:f4:19:0b:c8:81:65:f8:c9:2a:cf:65:b3:b9:10:e7:96:be:d5:e9

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Chains

Mar 4, 2020

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Minor OS version

0

Major OS version

6

Entry point

287264

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

kernel32

GetFileInformationByHandle SetLastError DeviceIoControl GetModuleHandleW GetProcAddress HeapAlloc HeapFree GetProcessHeap GetSystemTimeAsFileTime GetStdHandle WaitForMultipleObjects GetTickCount SetFileApisToOEM SetFileApisToANSI AreFileApisANSI GlobalAlloc GlobalFree lstrcpynW lstrcpyW MultiByteToWideChar WideCharToMultiByte FreeLibrary GetModuleFileNameW LoadLibraryExW GetCurrentDirectoryW CreateDirectoryW DeleteFileW RemoveDirectoryW FormatMessageW SetFileTime GetTempPathW GetCurrentProcessId GetCurrentThreadId MoveFileW FindClose FindFirstFileW GetFileAttributesW GetModuleHandleA SetEndOfFile GetCurrentProcess GetSystemInfo HeapSize WriteConsoleW SetFilePointerEx SetStdHandle GetStringTypeW GetCommandLineW CreateSemaphoreW LocalFree CreateEventW WaitForSingleObject ReleaseSemaphore ResetEvent SetEvent InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc GetLastError CloseHandle WriteFile SetFilePointer ReadFile GetFileSize CreateFileW SetFileAttributesW GetCommandLineA FreeEnvironmentStringsW GetEnvironmentStringsW GetCPInfo GetOEMCP GetACP IsValidCodePage GetConsoleMode GetConsoleCP FlushFileBuffers GetFileType HeapReAlloc RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter InitializeSListHead RtlUnwindEx RtlPcToFileHeader EncodePointer RaiseException InterlockedFlushSList InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree CreateThread ExitThread FreeLibraryAndExitThread GetModuleHandleExW ExitProcess LCMapStringW

user32

CharUpperW SendMessageW FindWindowExW SetWindowTextW GetDlgItem wsprintfW

advapi32

SystemFunction036 SetFileSecurityW LookupPrivilegeValueW AdjustTokenPrivileges OpenProcessToken

oleaut32

VariantCopy VariantClear SysAllocStringLen SysStringLen SysFreeString

Name

.text

Size

334KB

Virtual Size

334KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

137KB

Virtual Size

136KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

10KB

Virtual Size

39KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

19KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gfids

Size

512B

Virtual Size

184B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

912B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

$PLUGINSDIR/uac.dll

IMPHASH 0ef725341a4aecf8398c0e2132f38049
SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
MD5 adb29e6b186daa765dc750128649b63d
SHA1 160cbdc4cb0ac2c142d361df138c537aa7e708c9
SHA512 b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada
SSDEEP 192:DiF6v2imI36Op/tGZGfWxdyWHD0I53vLl7WVl8e04IpDlPjs:DGVY6ClGoWxXH75T1WVl83lLs
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10632

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

SetLastError GetCurrentProcessId GetCommandLineW GetProcAddress CreateThread GlobalFree LoadLibraryA OpenProcess GlobalAlloc CreateFileMappingW Sleep MapViewOfFile GetModuleHandleW UnmapViewOfFile CreateEventW SetCurrentDirectoryW GetVersionExW GetExitCodeProcess lstrcatW LocalFree GetPrivateProfileStringW FormatMessageW GetPrivateProfileIntW CreateProcessW CloseHandle GetLastError DuplicateHandle GetCurrentThreadId lstrlenW SetEvent WaitForSingleObject lstrcmpiW GetExitCodeThread GetModuleFileNameW

user32

SetWindowPos GetClientRect GetWindowThreadProcessId SetWindowLongW DefWindowProcW GetDlgItem CallWindowProcW CallNextHookEx GetClassNameW PeekMessageW DestroyWindow SendMessageW SetForegroundWindow IsWindowVisible MsgWaitForMultipleObjects LoadStringW EndDialog EnableWindow DialogBoxParamW LoadImageW MessageBoxW GetWindowLongW DispatchMessageW ShowWindow wsprintfW CreateDialogParamW GetWindowRect IsDialogMessageW FindWindowExW CharNextW CreateWindowExW LoadIconW PostMessageW SetWindowsHookExW UnhookWindowsHookEx TranslateMessage

shell32

ShellExecuteExW

advapi32

OpenServiceW QueryServiceStatus CloseServiceHandle OpenProcessToken OpenSCManagerW GetUserNameW AdjustTokenPrivileges LookupPrivilegeValueW GetTokenInformation EqualSid

ole32

CoInitialize

$PLUGINSDIR/utils.dll

IMPHASH d1df4ecc5e6dee090f109d6f03e8eed9
SHA256 1cc004fcce92824fa27565b31299b532733c976671ac6cf5dbd1e0465c0e47e8
MD5 aad3f2ecc74ddf65e84dcb62cf6a77cd
SHA1 1e153e0f4d7258cae75847dba32d0321864cf089
SHA512 8e44b86c92c890d303448e25f091f1864946126343ee4665440de0dbeed1c89ff05e4f3f47d530781aa4db4a0d805b41899b57706b8eddfc95cfa64c073c26e2
SSDEEP 768:SmLFb5dc9LS+8dayUhaPxYkkLE53UEDNnxqWLb1pA26Mbdv03whn:SmLFtd9+O0fkV7xpD6wd0ghn
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Digest

83:1d:c8:ec:d8:0f:cb:ab:13:f6:1f:a6:8f:1a:5a:6e:25:7a:10:2a:ff:5c:72:d7:28:46:7a:55:81:da:e9:f6

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Overwolf Ltd,O=Overwolf Ltd,L=Tel Aviv-Jaffa,ST=Israel,C=IL

Chains

Sep 30, 2017

CN=Overwolf Ltd,O=Overwolf Ltd,L=Tel Aviv-Jaffa,ST=Israel,C=IL

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Subject

CN=Overwolf Ltd,O=Overwolf Ltd,L=Tel Aviv-Jaffa,ST=Israel,C=IL

Serial Number

4f:d6:c5:fe:16:ab:00:f7:02:17:9d:23:b4:37:2e:bc

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 19, 2017 - Mar 20, 2020

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Dec 10, 2013 - Dec 9, 2023

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 2, 2017 - Apr 1, 2028

Minor OS version

1

Major OS version

5

Entry point

7935

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\development\tfs\Overwolf\InDev\MainDev\Source\Client\Branches\Iter108.1\OWInstaller\Tagger\Release\utils.pdb

$PLUGINSDIR/websocket-sharp.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 8b7230e7cd859ddeeb5fb48346e9576e47098c1009620c2e5d585bef4b108fbc
MD5 cb39cb181de7d36c82d2dfd178802f38
SHA1 0b1aab54f84926118314bd252ec923c6840f43b3
SHA512 f6e963dc0e7fb6b024b2ff03e1c9f552eaf809c5897910089955bc5c881f49f1f9ac7756f3cca1e2e90982e9c8d40960fdeb6a211becb0fa7d823c55818949e8
SSDEEP 6144:0QNVC/FesewE4JVcmOBj6ssqq70ZOAs3PPJPsgUX4BG:C/MsaiVxOBnq7PW
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Digest

09:4f:1b:38:76:64:6c:7c:cb:f5:98:ee:e8:1f:86:35:8e:56:15:7b:93:22:7f:f7:fa:3a:4c:9c:f1:11:51:77

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Chains

Apr 16, 2024

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Digest

09:4f:1b:38:76:64:6c:7c:cb:f5:98:ee:e8:1f:86:35:8e:56:15:7b:93:22:7f:f7:fa:3a:4c:9c:f1:11:51:77

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Chains

Mar 4, 2020

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Serial Number

0e:e0:0d:4b:1a:48:0c:a8:70:01:b5:40:80:63:da:71

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 27, 2020 - Mar 3, 2023

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Serial Number

0d:ac:c0:f7:43:c7:9d:8a:64:64:dc:96:7a:f3:b0:39

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jan 27, 2023 - Mar 3, 2026

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

4

Entry point

264830

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Sharing

General

Malware Config

Signatures

File Explorer

Buff Achievement Tracker - Installer.exe

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

generic

$PLUGINSDIR/CommandLine.dll

mscoree

dotnet

$PLUGINSDIR/DotNetZip.dll

mscoree

dotnet

$PLUGINSDIR/INetC.dll

kernel32

user32

comctl32

wininet

generic

$PLUGINSDIR/Microsoft.Win32.TaskScheduler.dll

mscoree

dotnet

$PLUGINSDIR/Newtonsoft.Json.dll

mscoree

dotnet

$PLUGINSDIR/OWInstaller.exe

generic

$PLUGINSDIR/OWInstaller.exe.config

$PLUGINSDIR/OverWolf.Client.CommonUtils.dll

generic

$PLUGINSDIR/SharpRaven.dll

mscoree

dotnet

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

$PLUGINSDIR/UserInfo.dll

kernel32

advapi32

generic

$PLUGINSDIR/app/_locales/de/messages.json

$PLUGINSDIR/app/_locales/en/messages.json

$PLUGINSDIR/app/_locales/es/messages.json

$PLUGINSDIR/app/_locales/fr/messages.json

$PLUGINSDIR/app/_locales/it/messages.json

$PLUGINSDIR/app/_locales/ja/messages.json

$PLUGINSDIR/app/_locales/ko/messages.json

$PLUGINSDIR/app/_locales/pl/messages.json

$PLUGINSDIR/app/_locales/pt/messages.json

$PLUGINSDIR/app/_locales/ru/messages.json

$PLUGINSDIR/app/_locales/tr/messages.json

$PLUGINSDIR/app/_locales/vi/messages.json

$PLUGINSDIR/app/_locales/zh-tw/messages.json

$PLUGINSDIR/app/_locales/zh/messages.json

$PLUGINSDIR/app/assets/fonts/klavika/KlavikaWebBasicMedium.eot

$PLUGINSDIR/app/assets/fonts/klavika/KlavikaWebBasicRegular.eot

$PLUGINSDIR/app/assets/fonts/lato/LatoLatin-Regular.eot

$PLUGINSDIR/app/cmp.html

$PLUGINSDIR/app/css/styles.min.css

$PLUGINSDIR/app/game_detection_database.json

$PLUGINSDIR/app/images/big-icon-fallback.png

$PLUGINSDIR/app/images/bottom-arrow-hover.png

$PLUGINSDIR/app/images/bottom-arrow.png

$PLUGINSDIR/app/images/checkbox-checked.png

$PLUGINSDIR/app/images/close-hover.png

$PLUGINSDIR/app/images/close-normal.png

$PLUGINSDIR/app/images/header-logo.png

$PLUGINSDIR/app/images/icon-fallback.png

$PLUGINSDIR/app/images/icon.ico

$PLUGINSDIR/app/images/large-logo.png

$PLUGINSDIR/app/images/minimize-hover.png