r8p[.]exe | Triage™

resource
r8p.exe
unpack001/$PLUGINSDIR/Aero.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/nsDialogs.dll
unpack001/$PLUGINSDIR/nsExec.dll
unpack001/$PLUGINSDIR/w7tbp.dll
unpack001/$PROGRAMFILES/StartIsBack/Styles/Windows 7.msstyles
unpack001/$PROGRAMFILES/StartIsBack/msimg32.dll
unpack001/$PROGRAMFILES64/StartAllBack/Styles/Windows 7.msstyles
unpack001/$WINDIR/Resources/Themes/Windows Aero/Styles/10240/10240.msstyles
unpack001/$WINDIR/Resources/Themes/Windows Aero/Styles/10240/Shell/NormalColor/en-US/shellstyle.dll.mui
unpack001/$WINDIR/Resources/Themes/Windows Aero/Styles/10240/Shell/NormalColor/shellstyle.dll
unpack001/$WINDIR/Resources/Themes/Windows Aero/Styles/10586/10586.msstyles
unpack001/$WINDIR/Resources/Themes/Windows Aero/Styles/10586/Shell/NormalColor/en-US/shellstyle.dll.mui
unpack001/$WINDIR/Resources/Themes/Windows Aero/Styles/10586/Shell/NormalColor/shellstyle.dll
unpack001/$WINDIR/Resources/Themes/Windows Aero/Styles/8/Shell/NormalColor/en-US/shellstyle.dll.mui
unpack001/$WINDIR/Resources/Themes/Windows Aero/Styles/8/Shell/NormalColor/shellstyle.dll
unpack001/$WINDIR/Resources/Themes/Windows Aero/Styles/8/aero7.msstyles
unpack001/$WINDIR/Resources/Themes/Windows Aero/Styles/8/aero7.old.msstyles
unpack001/$WINDIR/Resources/Themes/Windows Aero/Styles/BasicRound/BasicRound.msstyles
unpack001/$WINDIR/Resources/Themes/Windows Aero/Styles/BasicRound/Shell/NormalColor/en-US/shellstyle.dll.mui
unpack001/$WINDIR/Resources/Themes/Windows Aero/Styles/BasicRound/Shell/NormalColor/shellstyle.dll
unpack001/$WINDIR/Resources/Themes/Windows Aero/Styles/BasicRound/en-US/BasicRound.msstyles.mui
unpack001/$WINDIR/Resources/Themes/Windows Aero/Styles/BasicSquare/BasicSquare.msstyles
unpack001/$WINDIR/Resources/Themes/Windows Aero/Styles/BasicSquare/Shell/NormalColor/en-US/shellstyle.dll.mui
unpack001/$WINDIR/Resources/Themes/Windows Aero/Styles/BasicSquare/Shell/NormalColor/shellstyle.dll
unpack001/$WINDIR/Resources/Themes/Windows Aero/Styles/BasicSquare/en-US/BasicSquare.msstyles.mui
unpack001/$WINDIR/Resources/Themes/Windows Aero/Styles/Redstone/Redstone.msstyles
unpack001/$WINDIR/Resources/Themes/Windows Aero/Styles/Redstone/en-US/shellstyle.dll.mui
unpack001/$WINDIR/Resources/Themes/Windows Aero/Styles/Redstone/shell/NormalColor/en-US/shellstyle.dll (2).mui1
unpack001/$WINDIR/Resources/Themes/Windows Aero/Styles/Redstone/shell/NormalColor/en-US/shellstyle.dll.mui
unpack001/$WINDIR/Resources/Themes/Windows Aero/Styles/Redstone/shell/NormalColor/shellstyle.dll
unpack001/$WINDIR/Resources/Themes/Windows Aero/Styles/Redstone/shell/NormalColor2/en-US/shellstyle.dll.mui
unpack001/$WINDIR/Resources/Themes/Windows Aero/Styles/Redstone/shell/NormalColor2/shellstyle.dll
unpack001/$WINDIR/Resources/Themes/Windows Aero/Styles/RoundClear/AeroRoundClear.msstyles
unpack001/$WINDIR/Resources/Themes/Windows Aero/Styles/RoundClear/Shell/NormalColor/en-US/shellstyle.dll.mui
unpack001/$WINDIR/Resources/Themes/Windows Aero/Styles/RoundClear/Shell/NormalColor/shellstyle.dll
unpack001/$WINDIR/Resources/Themes/Windows Aero/Styles/RoundClear/en-US/AeroRoundClear.msstyles.mui
unpack001/$WINDIR/Resources/Themes/Windows Aero/Styles/RoundShiny/AeroRoundShiny.msstyles
unpack001/$WINDIR/Resources/Themes/Windows Aero/Styles/RoundShiny/Shell/NormalColor/en-US/shellstyle.dll.mui
unpack001/$WINDIR/Resources/Themes/Windows Aero/Styles/RoundShiny/Shell/NormalColor/shellstyle.dll
unpack001/$WINDIR/Resources/Themes/Windows Aero/Styles/RoundShiny/en-US/AeroRoundShiny.msstyles.mui
unpack001/$WINDIR/Resources/Themes/Windows Aero/Styles/SquareClear/AeroSquareClear.msstyles
unpack001/$WINDIR/Resources/Themes/Windows Aero/Styles/SquareClear/Shell/NormalColor/en-US/shellstyle.dll.mui
unpack001/$WINDIR/Resources/Themes/Windows Aero/Styles/SquareClear/Shell/NormalColor/shellstyle.dll
unpack001/$WINDIR/Resources/Themes/Windows Aero/Styles/SquareClear/en-US/AeroSquareClear.msstyles.mui
unpack001/$WINDIR/Resources/Themes/Windows Aero/Styles/SquareShiny/AeroSquareShiny.msstyles
unpack001/$WINDIR/Resources/Themes/Windows Aero/Styles/SquareShiny/Shell/NormalColor/en-US/shellstyle.dll.mui
unpack001/$WINDIR/Resources/Themes/Windows Aero/Styles/SquareShiny/Shell/NormalColor/shellstyle.dll
unpack001/$WINDIR/Resources/Themes/Windows Aero/Styles/SquareShiny/en-US/AeroSquareShiny.msstyles.mui
unpack001/incontrol.exe
unpack001/theme8.exe
unpack002/$PLUGINSDIR/SysRestore.dll
unpack002/$PLUGINSDIR/System.dll
unpack002/$PLUGINSDIR/nsDialogs.dll
unpack002/$PLUGINSDIR/nsisFile.dll
unpack002/Uninstall.exe
unpack003/$PLUGINSDIR/System.dll
unpack003/$PLUGINSDIR/nsDialogs.dll
unpack001/themeui.dll.tmp
unpack001/uxinit.dll.tmp
unpack001/uxtheme.dll.tmp

resource	yara_rule
sample	nsis_installer_2

r8p.exe

IMPHASH 96ab939b3b55d317ed1968d099ccc72c
SHA256 3a84d12bad1426f87e3ef91772834be1a9d8f975b25c1840caec5b0bb85449bf
MD5 6cf14ed8a95feb8800843627e2ec03bc
SHA1 32112dfc3bafc40140af09354288b29790d42af7
SHA512 96bc016dc3838e5a8b994242a1ece1babb3f42fef981492df4010aa85efabc5b55e3b75c0b49e7131502d798f62b5865819f11d2f190e43df0c35df4934de21b
SSDEEP 25165824:oCh6EMqCmx5p5eS3HOMvzb9+uVHksiHQK2AaMo/j8zmypR+f:Hh3CmykHzXjEXAj8LpRA
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

17618

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

advapi32

AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegCloseKey RegCreateKeyExW RegDeleteKeyW RegDeleteValueW RegEnumKeyW RegEnumValueW RegOpenKeyExW RegQueryValueExW RegSetValueExW SetFileSecurityW

comctl32

ImageList_AddMasked ImageList_Create ImageList_Destroy InitCommonControls

gdi32

CreateBrushIndirect CreateFontIndirectW DeleteObject GetDeviceCaps SelectObject SetBkColor SetBkMode SetTextColor

kernel32

CloseHandle CompareFileTime CopyFileW CreateDirectoryW CreateFileW CreateProcessW CreateThread DeleteFileW ExitProcess ExpandEnvironmentStringsW FindClose FindFirstFileW FindNextFileW FreeLibrary GetCommandLineW GetCurrentProcess GetDiskFreeSpaceW GetExitCodeProcess GetFileAttributesW GetFileSize GetFullPathNameW GetLastError GetModuleFileNameW GetModuleHandleA GetModuleHandleW GetPrivateProfileStringW GetProcAddress GetShortPathNameW GetSystemDirectoryW GetTempFileNameW GetTempPathW GetTickCount GetVersionExW GetWindowsDirectoryW GlobalAlloc GlobalFree GlobalLock GlobalUnlock LoadLibraryExW MoveFileExW MoveFileW MulDiv MultiByteToWideChar ReadFile RemoveDirectoryW SearchPathW SetCurrentDirectoryW SetEnvironmentVariableW SetErrorMode SetFileAttributesW SetFilePointer SetFileTime Sleep WaitForSingleObject WideCharToMultiByte WriteFile WritePrivateProfileStringW lstrcatW lstrcmpW lstrcmpiA lstrcmpiW lstrcpyA lstrcpynW lstrlenA lstrlenW

ole32

CoCreateInstance CoTaskMemFree IIDFromString OleInitialize OleUninitialize

shell32

SHBrowseForFolderW SHFileOperationW SHGetFileInfoW SHGetPathFromIDListW SHGetSpecialFolderLocation ShellExecuteExW

user32

AppendMenuW BeginPaint CallWindowProcW CharNextA CharNextW CharPrevW CheckDlgButton CloseClipboard CreateDialogParamW CreatePopupMenu CreateWindowExW DefWindowProcW DestroyWindow DialogBoxParamW DispatchMessageW DrawTextW EmptyClipboard EnableMenuItem EnableWindow EndDialog EndPaint ExitWindowsEx FillRect FindWindowExW GetClassInfoW GetClientRect GetDC GetDlgItem GetDlgItemTextW GetMessagePos GetSysColor GetSystemMenu GetSystemMetrics GetWindowLongW GetWindowRect InvalidateRect IsWindow IsWindowEnabled IsWindowVisible LoadCursorW LoadImageW MessageBoxIndirectW OpenClipboard PeekMessageW PostQuitMessage RegisterClassW ReleaseDC ScreenToClient SendMessageTimeoutW SendMessageW SetClassLongW SetClipboardData SetCursor SetDlgItemTextW SetForegroundWindow SetTimer SetWindowLongW SetWindowPos SetWindowTextW ShowWindow SystemParametersInfoW TrackPopupMenu wsprintfA wsprintfW

Name

.text

Size

37KB

Virtual Size

36KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

224B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

42KB

Virtual Size

41KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

127KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.ndata

Size

512B

Virtual Size

164KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

71KB

Virtual Size

71KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

$PLUGINSDIR/Aero.dll

IMPHASH 6bcef5c7392f7360db57c0f16c2c06f5
SHA256 4f8ac32dd2cca85f9a018eb6a29bf0405af41a725a8a6ff6a7429704feef8d7b
MD5 0cb4305037fdbb31b1763beed3564f7f
SHA1 b584fd7ebffc331b2a08c6c7c74ed1193f3fa22d
SHA512 e85449f23ac1742b59fb5299737cfdc1c0aae79c0c247f47fcc7887c433d085087d23e7bb521b9f63e470772e0b5e1e3b3afb9b9244f12b425d43d5205a21a4c
SSDEEP 96:HrnO5tumN5Jz0lEpzql3y2fn22gQ2wDb9AFUJIf7UG7ZaIG4:L4tzEEpQ3y2PngQ2wX9zkZ7ZaF4
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

1

Major OS version

5

Entry point

6624

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/System.dll

IMPHASH 509a34b3a68a773e0afb4259e68f9f82
SHA256 9111099efe9d5c9b391dc132b2faf0a3851a760d4106d5368e30ac744eb42706
MD5 4add245d4ba34b04f213409bfe504c07
SHA1 ef756d6581d70e87d58cc4982e3f4d18e0ea5b09
SHA512 1bd260cabe5ea3cefbbc675162f30092ab157893510f45a1b571489e03ebb2903c55f64f89812754d3fe03c8f10012b8078d1261a7e73ac1f87c82f714bce03d
SSDEEP 192:VjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZv0QPi:B/Qlt7wiij/lMRv/9V4bvr
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

10879

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/modern-wizard-2.bmp

SHA256 c441e7ee0cb7d4d31f73de6f77e5f1a9f81336ef5242f4f0d33416cf6dae84e5
MD5 1d2e14a3457e864b4b6edaa173674876
SHA1 cba3d68a5d7cb1e8c5823fd5ac0324ad1ca7075b
SHA512 d56ade2e5a533350a60e9093d13fc0ca5aa931e85da9f2510b7bb8f3e6a3345e669183597baee42e15f0d90ddba2d9c844a90d7b6d0dbf2ad789792e9b1bcc91
SSDEEP 6144:Uxp1UF3kUf8vJLia6VyBzeeux7xYVU+/OvKhywPcKqPtRgW8OZdKR2MGYTgEuZhD:oFUf7LYVUhvpwPcKqPtfNzPggEuTrBF
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/modern-wizard.bmp

SHA256 90934e21d072efadc306ca6be07d43aa0e15602ad15ed9c9b5eac2f571f319d4
MD5 25fe831c82a84b76ab7ac95688b5d921
SHA1 e8a4133ec0c2b2c540028d7bc4da10a85b2af6bd
SHA512 b045a8b2f73e61fd767ce53d564120fb1cfe9abee8cedd1d24f5c7a53786b33222e3d7e9037a6c9ac2047102fdbb9602ea4831464bdf6893e0070c7c983163e9
SSDEEP 768:031asT3CuM97kkK27VHpFDj2Qm7yHkhCFbm2OZTEgbM5DEOEsr3QiqO:zuMekh7VJ12d7Xn2OZTjSEOEa3ld
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/nsDialogs.dll

IMPHASH 3b477381217c97b22146297f93df2a92
SHA256 4b7d17da290f41ebe244827cc295ce7e580da2f7e9f7cc3efc1abc6898e3c9ed
MD5 1d8f01a83ddd259bc339902c1d33c8f1
SHA1 9f7806af462c94c39e2ec6cc9c7ad05c44eba04e
SHA512 28bf647374b4b500a0f3dbced70c2b256f93940e2b39160512e6e486ac31d1d90945acecef578f61b0a501f27c7106b6ffc3deab2ec3bfb3d9af24c9449a1567
SSDEEP 96:o4Ev02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YsNqkzfFc:o4EvCu5e81785qHFcU0PuAw0uyGIFc
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

7527

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/nsExec.dll

IMPHASH 68b7023f8923dd087549802f8fa631c3
SHA256 01e72332362345c415a7edcb366d6a1b52be9ac6e946fb9da49785c140ba1a4b
MD5 b4579bc396ace8cafd9e825ff63fe244
SHA1 32a87ed28a510e3b3c06a451d1f3d0ba9faf8d9c
SHA512 3a76e0e259a0ca12275fed922ce6e01bdfd9e33ba85973e80101b8025ef9243f5e32461a113bbcc6aa75e40894bb5d3a42d6b21045517b6b3cf12d76b4cfa36a
SSDEEP 96:JwzdzBzMDhOZZDbXf5GsWvSv1ckne94SDbYkvML1HT1fUNQaSGYuH0DQ:JTQHDb2vSuOc41ZfUNQZGdHM
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

4231

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/w7tbp.dll

IMPHASH fdb9d529772752ac356e92b3e3221b71
SHA256 53bb519e3293164947ac7cbd7e612f637d77a7b863e3534ba1a7e39b350d3c00
MD5 9a3031cc4cef0dba236a28eecdf0afb5
SHA1 708a76aa56f77f1b0ebc62b023163c2e0426f3ac
SHA512 8fddde526e7d10d77e247ea80b273beae9dde1d4112806f1f5c3e6a409247d54d8a4445ab5bdd77025a434c3d1dcfdf480dac21abbdb13a308d5eb74517fab53
MD5 SHA1 SHA512

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

4550

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PROGRAMFILES/StartIsBack/StartIsBack64.dll

IMPHASH d57b4b49381ae613ed3593ac3ab63e4b
SHA256 a5b1e45590b5a263faaa427d9ed9b670d4cf92ee6e1b5559266e8ef2efb4b0d1
MD5 75aabb76588cd7126a814c0e6581ff2f
SHA1 693d36646af6d09a3eeec8ef5a596d17e2e47812
SHA512 89c0edfec0db06f1569c7f9685b8b98af2b34e1303796e3a5d3f9a2729fdbe689996405867be1957183b408388ab0e36720693a3376fa79a10d89c9904ba6fce
SSDEEP 12288:WGr/wQA0oLY6f6KVwBxDdr+VUT5q5SvYxOQ:AQAZLYu6K4tcV6uHOQ
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

NSIS installer

installer

PE Signature issue

Digest

e4:5a:d3:fe:e6:02:f4:55:7f:8c:d6:a5:af:78:36:2e:2e:f7:4c:fe:f8:80:9b:ea:82:2c:70:76:61:74:3d:ea

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Signing Certificate

CN=IP Zinukhov Stanislav Igorevich,O=IP Zinukhov Stanislav Igorevich,L=Moscow,ST=Moscow,C=RU

Chains

Mar 23, 2023

CN=IP Zinukhov Stanislav Igorevich,O=IP Zinukhov Stanislav Igorevich,L=Moscow,ST=Moscow,C=RU

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

CN=IP Zinukhov Stanislav Igorevich,O=IP Zinukhov Stanislav Igorevich,L=Moscow,ST=Moscow,C=RU

Serial Number

09:63:74:f3:62:b9:30:81:d4:3c:a2:16

Issuer

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 2, 2023 - Feb 3, 2024

Subject

CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB

Serial Number

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 11, 2022 - Aug 10, 2033

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Jan 18, 2038

Minor OS version

0

Major OS version

6

Entry point

5516

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\DEVEL\StartIsBackPlusPlus\Release\StartIsBack64.pdb

shlwapi

PathParseIconLocationW PathAddBackslashW StrStrIW UrlIsW PathCreateFromUrlW PathFindExtensionW StrCmpNW SHOpenRegStream2W ord12 PathRemoveBlanksW SHGetValueW StrCmpW SHCreateStreamOnFileW PathFindFileNameW PathFileExistsW PathRemoveBackslashW StrToIntW ord16 PathRemoveFileSpecW PathAppendW StrNCatW SHSetValueW StrStrW PathIsRelativeW ord172 PathIsDirectoryW PathIsUNCW ord174 ord256 PathIsFileSpecW PathStripToRootW PathIsRootW ord168 StrCmpIW PathIsNetworkPathW ord388 ord215 ord158 StrStrIA StrCSpnA SHRegGetValueW StrCmpNIW ord487 StrCpyNW SHStrDupW

dwmapi

DwmEnableBlurBehindWindow DwmGetWindowAttribute DwmSetWindowAttribute DwmExtendFrameIntoClientArea

uxtheme

SetWindowTheme BeginBufferedPaint EndBufferedPaint OpenThemeData GetThemeInt DrawThemeTextEx CloseThemeData GetThemeColor DrawThemeBackground DrawThemeParentBackground BufferedPaintSetAlpha GetThemeBackgroundContentRect ord47 GetThemePartSize GetBufferedPaintTargetDC GetThemeEnumValue GetThemeFont GetThemeBool GetThemeRect GetThemeTextExtent GetThemeMargins GetCurrentThemeName IsThemeBackgroundPartiallyTransparent GetThemeBackgroundRegion GetThemePropertyOrigin IsThemePartDefined GetWindowTheme GetThemeMetric GetThemeBackgroundExtent

api-ms-win-shcore-scaling-l1-1-1

GetDpiForMonitor

api-ms-win-core-winrt-l1-1-0

RoActivateInstance RoGetActivationFactory

api-ms-win-core-winrt-string-l1-1-0

WindowsCreateStringReference WindowsGetStringRawBuffer WindowsDuplicateString WindowsDeleteString

api-ms-win-core-winrt-error-l1-1-0

RoOriginateError

msvcrt

wcscpy_s wcscat_s malloc free _vsnwprintf isspace _wcsnicmp isprint wcstok_s wcsstr vswprintf_s _wcsicmp ??3@YAXPEAX@Z atoi __C_specific_handler _unlock __dllonexit _lock _onexit __CxxFrameHandler3 ??1type_info@@UEAA@XZ _XcptFilter _initterm _amsg_exit memmove wcsncmp vsprintf_s ??2@YAPEAX_K@Z tolower wcschr memcpy memcmp memset

kernel32

SleepEx TerminateProcess IsBadReadPtr GetUserDefaultLangID ExitThread GetPrivateProfileIntW GetPrivateProfileStringW MapViewOfFile UnmapViewOfFile lstrcatW lstrcpynW GetApplicationUserModelId OpenProcess GetWindowsDirectoryW LoadLibraryW DeleteFileW MoveFileExW LocalAlloc LocalFree TlsAlloc TlsGetValue TlsSetValue QueueUserWorkItem CompareStringOrdinal CompareFileTime GetTempPathW SetFileAttributesW GetFileAttributesW CreateDirectoryW RemoveDirectoryW lstrcmpiA GetCurrentProcessId ProcessIdToSessionId FindPackagesByPackageFamily PackageFamilyNameFromFullName GetModuleFileNameW GlobalLock GlobalUnlock DisableThreadLibraryCalls GetModuleHandleExW GlobalAddAtomW GetUserDefaultUILanguage GetComputerNameExW OpenEventW LoadResource SizeofResource DebugBreak lstrcpynA RtlVirtualUnwind RtlLookupFunctionEntry QueryPerformanceCounter GetLastError LoadLibraryA FindResourceW RtlCaptureContext OutputDebugStringA GetSystemWindowsDirectoryW GetVolumeNameForVolumeMountPointW lstrlenW CreateFileW DeviceIoControl CloseHandle lstrcpyA lstrlenA lstrcatA GetSystemTimeAsFileTime FileTimeToSystemTime lstrcpyW lstrcmpiW GetUserPreferredUILanguages MulDiv VirtualProtect GetFileAttributesExW WaitForSingleObject CreateThread SetThreadPriority Sleep GetTickCount GetModuleHandleW GetCurrentThreadId GetAtomNameW lstrcmpW CreateThreadpoolWork InitializeCriticalSection WaitForThreadpoolWorkCallbacks CloseThreadpoolWork EnterCriticalSection LeaveCriticalSection DeleteCriticalSection GetCurrentThread SubmitThreadpoolWork ExpandEnvironmentStringsW GetCurrentProcess CreateProcessW CreateFileA GetSystemFirmwareTable GlobalAlloc GlobalFree GetProcAddress LoadLibraryExW FreeLibrary QueueUserAPC SetEvent RaiseException CreateEventW ParseApplicationUserModelId GetPackagesByPackageFamily FindFirstFileW FindNextFileW FindClose MoveFileW InitOnceExecuteOnce RegisterWaitForSingleObject UnregisterWaitEx FindNextChangeNotification FindFirstChangeNotificationW FindCloseChangeNotification DeleteTimerQueueTimer CreateTimerQueueTimer GetVersionExW OpenMutexW

user32

EndDeferWindowPos IsWindowVisible GetWindow GetWindowLongW MapWindowPoints LockSetForegroundWindow GetFocus IsWindow SetFocus SetLayeredWindowAttributes PeekMessageW SystemParametersInfoW NotifyWinEvent ShowWindow GetParent DispatchMessageW GetMessagePos WindowFromPoint ScreenToClient ClientToScreen TrackMouseEvent GetCapture GetNextDlgGroupItem CreatePopupMenu InsertMenuW LoadMenuW GetMenuStringW GetSubMenu DestroyMenu CheckMenuItem RegisterWindowMessageW GetClassWord GetSystemMetrics InflateRect PrintWindow GetAsyncKeyState BeginDeferWindowPos CallNextHookEx SetWinEventHook UnhookWinEvent SetWindowsHookExW TrackPopupMenuEx IsCharAlphaNumericA RegisterClassExW DestroyIcon PostQuitMessage GetCursorPos MonitorFromPoint GetWindowTextW SetWindowTextW MsgWaitForMultipleObjectsEx SetCursor SetMenuDefaultItem CreateDialogParamW GetDlgItemTextW SetDlgItemTextW IntersectRect SendDlgItemMessageW DrawFocusRect EndDialog GetSysColorBrush GetActiveWindow SetMenuInfo GetMenuItemCount GetMenuItemInfoW DeleteMenu SetMenuItemInfoW TrackPopupMenu TranslateMessage GetMenuItemID GetMenuDefaultItem GetDC PtInRect InvalidateRect GetMenuState ExitWindowsEx GetDoubleClickTime EnableWindow WindowFromDC CallWindowProcW CharLowerW SetCapture ReleaseCapture DrawTextW FillRect IsRectEmpty EqualRect ModifyMenuW EnumDisplayMonitors DrawEdge DrawTextExW LoadImageW GetRawInputDeviceInfoW GetRawInputData RegisterRawInputDevices GetMessageW GetRawInputDeviceList EnumThreadWindows DrawIconEx UnionRect UnregisterClassW MonitorFromRect SetForegroundWindow GetWindowRgnBox GetLayeredWindowAttributes IsIconic GetForegroundWindow SetRectEmpty EnumWindows CheckDlgButton IsDlgButtonChecked OpenClipboard EmptyClipboard SetClipboardData CloseClipboard SetCursorPos UnhookWindowsHookEx UnregisterHotKey RegisterHotKey AllowSetForegroundWindow SwitchToThisWindow SetActiveWindow RegisterClipboardFormatW GetMessageExtraInfo SetWindowLongW ChildWindowFromPointEx LookupIconIdFromDirectoryEx PostThreadMessageW SetRect GetMonitorInfoW RegisterClassW LoadCursorW DeferWindowPos DestroyWindow SetWindowLongPtrW GetWindowRgn UpdateLayeredWindow GetWindowDC MonitorFromWindow IsChild GetGUIThreadInfo GetAncestor DefWindowProcW RemovePropW GetWindowLongPtrW SetWindowPos SetTimer FindWindowW KillTimer GetShellWindow CreateWindowExW GetWindowThreadProcessId FindWindowExW DialogBoxParamW EndPaint OffsetRect GetWindowRect GetWindowInfo BeginPaint SetPropW GetPropW GetDlgItem GetComboBoxInfo GetClassNameW ReleaseDC GetDCEx PostMessageW SendMessageW RedrawWindow EnumChildWindows GetClientRect SetWindowRgn GetSysColor CreateIconIndirect GetKeyState wsprintfW LoadStringW wsprintfA SendNotifyMessageW

gdi32

GetLayout GetCharWidth32W CreateFontW RestoreDC ExcludeClipRect SaveDC GdiFlush GetRgnBox CombineRgn CreateRectRgnIndirect GetStockObject ExtTextOutW CreateSolidBrush SetBkColor SetTextColor BitBlt SetLayout CreateRectRgn DeleteObject CreateBitmap DeleteDC GdiAlphaBlend GetObjectW SelectObject CreateCompatibleDC CreateDIBSection GetTextExtentExPointW OffsetClipRgn SelectClipRgn StretchBlt GetDeviceCaps StretchDIBits OffsetRgn GetBoundsRect SetBoundsRect GetClipBox GetCurrentObject GetBkMode SetBkMode TextOutW GetBkColor GetTextColor GetTextExtentPointW SetWindowOrgEx CreateFontIndirectW

advapi32

RegSetValueExA RegCloseKey RegQueryValueA RegOpenKeyExA RegCreateKeyExA RegQueryInfoKeyW RegCreateKeyW RegSetKeyValueW RegGetValueW RegDeleteKeyValueW RegOpenKeyExW RegEnumKeyW RegNotifyChangeKeyValue RegOpenKeyW RegSetValueExW RegDeleteValueW RegCreateKeyExW RegQueryValueExW RegDeleteKeyW InitiateShutdownW GetUserNameW RegQueryValueExA RegDeleteValueA

shell32

ord155 ord152 ord16 ord18 ord25 ord190 ord256 SHCreateDataObject SHCreateDefaultContextMenu AssocCreateForClasses SHCreateShellItemArrayFromIDLists SHCreateItemFromParsingName ord6 SHCreateShellItemArrayFromDataObject SHAssocEnumHandlers SHGetKnownFolderPath ord100 SHBindToObject ord846 ord27 ord21 ord68 SHGetKnownFolderIDList Shell_NotifyIconGetRect ShellExecuteW SHCreateItemInKnownFolder SHGetPropertyStoreForWindow SHGetIDListFromObject SHCreateItemFromIDList SHCreateDefaultExtractIcon SHGetFolderPathW SHChangeNotify SHGetNameFromIDList ord162 SHGetFileInfoW Shell_GetCachedImageIndexW SHOpenFolderAndSelectItems SHGetSpecialFolderPathW ord193 SHBindToParent ord22 ord134 ord132 ord23 ord727 ord17 SHGetFolderLocation SHGetDesktopFolder ord98 SHParseDisplayName ord88 ord644 ord645 ord4 ord2 SHCreateItemWithParent ord62 SHFileOperationW SHGetStockIconInfo

ole32

CoInitialize CoUninitialize CoWaitForMultipleHandles CoCreateFreeThreadedMarshaler CoGetInterfaceAndReleaseStream CoCreateInstance RegisterDragDrop RevokeDragDrop StringFromGUID2 ReleaseStgMedium CoInitializeEx CoMarshalInterThreadInterfaceInStream CoTaskMemAlloc CoTaskMemFree PropVariantClear

$PROGRAMFILES/StartIsBack/StartIsBackCfg.exe

IMPHASH 3f273b259fcb74bcdfc8d43b5992ca69
SHA256 a2102b605f9133c40ce18101213870659f022ee06308d630b2262addc8092a66
MD5 3969f68357fcf64d7871a2dfd1c64ead
SHA1 2bea2e6087479afa3e5a704653c33a72537264ab
SHA512 7412453f0d6f5f7730fffffd297bf474b1de0b2833d2934fb7007e505daf35cdf880879716d08d774fc96ddc0e3a9acbc3d8c8900cb80343538fd0f9a71b3b02
SSDEEP 12288:jP7XcuNzOo7oFYyWxmF9LOFDfMKmm6/5UcVvmAMr8Tw4SwLzmHbNvnnnnnnn/m9f:zguhXsYycmzGkKmmX3AfT5LzmujOI
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

51:99:40:ce:6c:83:a2:ef:b2:e3:a0:ac:0a:4a:9a:a2:71:3d:cd:ea:1e:80:4c:40:9a:f6:84:0e:15:01:e2:93

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Signing Certificate

CN=IP Zinukhov Stanislav Igorevich,O=IP Zinukhov Stanislav Igorevich,L=Moscow,ST=Moscow,C=RU

Chains

Mar 23, 2023

CN=IP Zinukhov Stanislav Igorevich,O=IP Zinukhov Stanislav Igorevich,L=Moscow,ST=Moscow,C=RU

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

CN=IP Zinukhov Stanislav Igorevich,O=IP Zinukhov Stanislav Igorevich,L=Moscow,ST=Moscow,C=RU

Serial Number

09:63:74:f3:62:b9:30:81:d4:3c:a2:16

Issuer

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 2, 2023 - Feb 3, 2024

Subject

CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB

Serial Number

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 11, 2022 - Aug 10, 2033

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Jan 18, 2038

Minor OS version

0

Major OS version

5

Entry point

798376

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

oleaut32

SysFreeString SysReAllocStringLen SysAllocStringLen SafeArrayPtrOfIndex SafeArrayGetUBound SafeArrayGetLBound SafeArrayCreate VariantChangeType VariantCopy VariantClear VariantInit

advapi32

RegQueryValueExW RegOpenKeyExW RegCloseKey SetSecurityDescriptorOwner SetSecurityDescriptorDacl RegSetValueExW RegSetKeySecurity RegQueryInfoKeyW RegGetKeySecurity RegFlushKey RegEnumValueW RegEnumKeyExW RegDeleteValueW RegDeleteKeyW RegCreateKeyExW InitializeSecurityDescriptor FreeSid AllocateAndInitializeSid SetNamedSecurityInfoW SetEntriesInAclW RegDeleteTreeW RegDeleteKeyExW

user32

GetKeyboardType LoadStringW MessageBoxA CharNextW CreateWindowExW WindowFromPoint WaitMessage UpdateLayeredWindow UpdateWindow UnregisterClassW UnhookWindowsHookEx TranslateMessage TranslateMDISysAccel TrackPopupMenu TrackMouseEvent SystemParametersInfoW ShowWindow ShowScrollBar ShowOwnedPopups SetWindowsHookExW SetWindowTextW SetWindowPos SetWindowPlacement SetWindowLongW SetTimer SetScrollRange SetScrollPos SetScrollInfo SetRectEmpty SetRect SetPropW SetParent SetMenuItemInfoW SetMenu SetForegroundWindow SetFocus SetCursor SetClassLongW SetCapture SetActiveWindow SendNotifyMessageW SendMessageTimeoutW SendMessageA SendMessageW ScrollWindow ScreenToClient RemovePropW RemoveMenu ReleaseDC ReleaseCapture RegisterWindowMessageW RegisterClipboardFormatW RegisterClassW RedrawWindow PostQuitMessage PostMessageW PeekMessageA PeekMessageW OffsetRect MsgWaitForMultipleObjectsEx MsgWaitForMultipleObjects MessageBoxW MapWindowPoints MapVirtualKeyW LoadKeyboardLayoutW LoadImageW LoadIconW LoadCursorW LoadBitmapW KillTimer IsZoomed IsWindowVisible IsWindowUnicode IsWindowEnabled IsWindow IsIconic IsDialogMessageA IsDialogMessageW IsChild InvalidateRect IntersectRect InsertMenuItemW InsertMenuW InflateRect GetWindowThreadProcessId GetWindowTextW GetWindowRect GetWindowPlacement GetWindowLongW GetWindowDC GetUpdateRect GetTopWindow GetSystemMetrics GetSystemMenu GetSysColorBrush GetSysColor GetSubMenu GetScrollRange GetScrollPos GetScrollInfo GetPropW GetParent GetWindow GetMessagePos GetMenuStringW GetMenuState GetMenuItemInfoW GetMenuItemID GetMenuItemCount GetMenu GetLastActivePopup GetKeyboardState GetKeyboardLayoutNameW GetKeyboardLayoutList GetKeyboardLayout GetKeyState GetKeyNameTextW GetIconInfo GetForegroundWindow GetFocus GetDesktopWindow GetDCEx GetDC GetCursorPos GetCursor GetClipboardData GetClientRect GetClassNameW GetClassLongW GetClassInfoW GetCapture GetActiveWindow FrameRect FindWindowExW FindWindowW FillRect ExitWindowsEx EnumWindows EnumThreadWindows EnumChildWindows EndPaint EnableWindow EnableScrollBar EnableMenuItem DrawTextExW DrawTextW DrawMenuBar DrawIconEx DrawIcon DrawFrameControl DrawFocusRect DrawEdge DispatchMessageA DispatchMessageW DestroyWindow DestroyMenu DestroyIcon DestroyCursor DeleteMenu DefWindowProcW DefMDIChildProcW DefFrameProcW CreatePopupMenu CreateMenu CreateIcon ClientToScreen ChildWindowFromPoint CheckMenuItem CharUpperBuffW CharLowerBuffW CharLowerW CallWindowProcW CallNextHookEx BeginPaint AdjustWindowRectEx ActivateKeyboardLayout wsprintfW SwitchToThisWindow SetProcessDefaultLayout

kernel32

GetACP Sleep VirtualFree VirtualAlloc GetSystemInfo GetTickCount QueryPerformanceCounter GetVersion GetCurrentThreadId VirtualQuery WideCharToMultiByte MultiByteToWideChar lstrlenW lstrcpynW LoadLibraryExW GetThreadLocale GetStartupInfoA GetProcAddress GetModuleHandleW GetModuleFileNameW GetLocaleInfoW GetCommandLineW FreeLibrary FindFirstFileW FindClose ExitProcess ExitThread CreateThread CompareStringW WriteFile UnhandledExceptionFilter RtlUnwind RaiseException GetStdHandle CloseHandle TlsSetValue TlsGetValue LocalAlloc lstrcpyA lstrcpyW lstrcmpiW lstrcmpW WaitForSingleObject WaitForMultipleObjectsEx VirtualQueryEx VirtualProtectEx UnmapViewOfFile SwitchToThread SizeofResource SignalObjectAndWait SetThreadLocale SetLastError SetFilePointer SetEvent SetErrorMode SetEndOfFile ResumeThread ResetEvent ReadFile QueueUserWorkItem OpenProcess OpenFileMappingW OpenEventW MulDiv MoveFileExW MapViewOfFile LockResource LocalFree LoadResource LoadLibraryW LeaveCriticalSection IsBadReadPtr InitializeCriticalSection GlobalFindAtomW GlobalDeleteAtom GlobalAddAtomW GetVersionExW GetTempPathW GetSystemTime GetLocalTime GetLastError GetFullPathNameW GetFileAttributesW GetExitCodeThread GetDiskFreeSpaceW GetDateFormatW GetCurrentThread GetCurrentProcessId GetCurrentProcess GetCPInfo FreeResource InterlockedIncrement InterlockedExchangeAdd InterlockedExchange InterlockedDecrement InterlockedCompareExchange FormatMessageW FindResourceW FindNextFileW FileTimeToSystemTime FileTimeToLocalFileTime FileTimeToDosDateTime ExpandEnvironmentStringsW EnumCalendarInfoW EnterCriticalSection DeleteFileW DeleteCriticalSection CreateProcessW CreateFileMappingW CreateFileW CreateEventW CreateDirectoryW CopyFileW AddAtomW CheckElevationEnabled GetSystemWindowsDirectoryW IsWow64Process GetUserPreferredUILanguages

msimg32

AlphaBlend

gdi32

UnrealizeObject StretchBlt SetWindowOrgEx SetWinMetaFileBits SetViewportOrgEx SetTextColor SetStretchBltMode SetROP2 SetPixel SetEnhMetaFileBits SetDIBColorTable SetBrushOrgEx SetBkMode SetBkColor SelectPalette SelectObject SelectClipRgn SaveDC RoundRect RestoreDC Rectangle RectVisible RealizePalette Polyline PlayEnhMetaFile PatBlt OffsetRgn MoveToEx MaskBlt LineTo IntersectClipRect GetWindowOrgEx GetWinMetaFileBits GetTextMetricsW GetTextExtentPointW GetTextExtentPoint32W GetTextColor GetSystemPaletteEntries GetStockObject GetRgnBox GetPixel GetPaletteEntries GetObjectW GetEnhMetaFilePaletteEntries GetEnhMetaFileHeader GetEnhMetaFileBits GetDeviceCaps GetDIBits GetDIBColorTable GetDCOrgEx GetCurrentPositionEx GetCurrentObject GetClipBox GetBrushOrgEx GetBkColor GetBitmapBits GdiFlush FrameRgn ExtTextOutW ExcludeClipRect Ellipse DeleteObject DeleteEnhMetaFile DeleteDC CreateSolidBrush CreateRectRgnIndirect CreateRectRgn CreatePenIndirect CreatePalette CreateHalftonePalette CreateFontIndirectW CreateFontW CreateDIBitmap CreateDIBSection CreateCompatibleDC CreateCompatibleBitmap CreateBrushIndirect CreateBitmap CopyEnhMetaFileW CombineRgn BitBlt GdiAlphaBlend SetLayout GetLayout

version

VerQueryValueW GetFileVersionInfoSizeW GetFileVersionInfoW

ole32

OleUninitialize OleInitialize CoTaskMemFree CoTaskMemAlloc CoCreateInstance CoInitialize CLSIDFromString

comctl32

InitializeFlatSB FlatSB_SetScrollProp FlatSB_SetScrollPos FlatSB_SetScrollInfo FlatSB_GetScrollPos FlatSB_GetScrollInfo _TrackMouseEvent ImageList_SetIconSize ImageList_GetIconSize ImageList_Write ImageList_Read ImageList_GetDragImage ImageList_DragShowNolock ImageList_DragMove ImageList_DragLeave ImageList_DragEnter ImageList_EndDrag ImageList_BeginDrag ImageList_Remove ImageList_DrawIndirect ImageList_DrawEx ImageList_AddMasked ImageList_Replace ImageList_Draw ImageList_GetBkColor ImageList_SetBkColor ImageList_ReplaceIcon ImageList_Add ImageList_SetImageCount ImageList_GetImageCount ImageList_Destroy ImageList_Create InitCommonControls

wininet

InternetReadFile InternetOpenUrlW InternetOpenW InternetCloseHandle

shell32

ShellExecuteExW ShellExecuteW SHFileOperationW ExtractIconExW SHGetSpecialFolderPathW SHAddToRecentDocs ord896 SHDefExtractIconW ILSaveToStream ILLoadFromStreamEx

comdlg32

ChooseColorW

gdiplus

GdipDrawImageRectRectI GdipDrawImageRectI GdipDrawImageRect GdipDrawImageI GdipFillRectangleI GdipFillRectangle GdipSetInterpolationMode GdipSetCompositingMode GdipReleaseDC GdipGetDC GdipDeleteGraphics GdipCreateFromHDC GdipBitmapSetPixel GdipBitmapGetPixel GdipCreateBitmapFromScan0 GdipGetImageHeight GdipGetImageWidth GdipGetImageGraphicsContext GdipSaveImageToFile GdipDisposeImage GdipLoadImageFromFile GdipCreateSolidFill GdipDeleteBrush GdipCloneBrush GdiplusShutdown GdiplusStartup GdipFree GdipAlloc

shlwapi

SHAutoComplete PathIsSystemFolderW PathRemoveFileSpecW PathParseIconLocationW PathIsNetworkPathW PathCanonicalizeW PathAppendW PathAddBackslashW StrCatW StrDupW SHLoadIndirectString SHOpenRegStream2W

ntdll

RtlAdjustPrivilege

uxtheme

ord16 ord7 ord92 ord121 ord120 ord50 SetWindowTheme

shcore

GetDpiForMonitor

crypt32

CryptStringToBinaryA

wintrust

WinVerifyTrust

Name

.text

Size

769KB

Virtual Size

768KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.itext

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

21KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

14KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

60B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1.5MB

Virtual Size

1.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

$PROGRAMFILES/StartIsBack/Styles/Windows 7.msstyles

SHA256 c6c578e729f76eaa1fd6ba0286c383b236245cab3518e46d7eaacae3395f25b5
MD5 ae2d99598c4cef23536891e66a253ca8
SHA1 c72ec083bb26062b81f3aaca0f50864ec89156f5
SHA512 4f1af265f91c0a1a3031cc9989be40b453577d45b043efec1443f4a4fd998a9dfebbfa5029d233f1c4626b175e8cbd74d2deb617f2b090b5c672202dd2b9afbc
SSDEEP 6144:NGiadnZbBdaiTcWMRXbvIl2l/CtRElM/QVPxcqeZ:siWn5BZcWqCvtzue
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PROGRAMFILES/StartIsBack/msimg32.dll

IMPHASH 122bb6929b3599de2bbbecaee258c0bd
SHA256 0e345dd738b028053f9e2872f481fd4fc822e1f03f8ce0a7cc9a2043bd0da683
MD5 aa0fff428dcb6d19329cf9619a2b4a1e
SHA1 4f5900817531625c880c527e28350de5d93c78fa
SHA512 2c898104a069b8366393b7be296c7e122d4c2179dea9b15b7bacfc8f194cb3c337b2f9f3fffca8b8c20fd6899313f1be3d5fd0c60cdacb0b9e13959aaffe66eb
MD5 SHA1 SHA512

windows:1 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

1

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PROGRAMFILES64/StartAllBack/StartAllBackX64.dll

IMPHASH 79b497465d93a0f2cee8170971eb7807
SHA256 9e690048cfae41d90660147aa8184da3dab4ddff8a127aa7ebb654abf5744147
MD5 26c1c785fbd917faaddc52499dca0260
SHA1 e3ebcf83ab39bf89c19d5150206be2431ce54188
SHA512 d4bea4742828ae9f911ea9a3690257def33f7af2ea6c5271b5f18ba41d8291521513f82929842894b45d022f30e9ba7c0b1bd55d67fc696a235262b32a7fa63d
SSDEEP 12288:KfHpCJVXf3GaWwEwEIwYn1+sE2XUtoN2KNkwge7nmTlgJds:aAJf3GuIID1+F2kuZ7nmTlaW
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

NSIS installer

installer

PE Signature issue

Digest

a1:84:c1:54:b0:ae:30:24:92:9a:46:9b:81:96:85:a0:4a:85:8b:67:43:71:7d:9a:07:55:e4:c9:9c:c1:e3:95

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Signing Certificate

CN=IP Zinukhov Stanislav Igorevich,O=IP Zinukhov Stanislav Igorevich,L=Moscow,ST=Moscow,C=RU

Chains

Nov 6, 2023

CN=IP Zinukhov Stanislav Igorevich,O=IP Zinukhov Stanislav Igorevich,L=Moscow,ST=Moscow,C=RU

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

CN=IP Zinukhov Stanislav Igorevich,O=IP Zinukhov Stanislav Igorevich,L=Moscow,ST=Moscow,C=RU

Serial Number

09:63:74:f3:62:b9:30:81:d4:3c:a2:16

Issuer

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 2, 2023 - Feb 3, 2024

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Serial Number

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 3, 2023 - Aug 2, 2034

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Jan 18, 2038

Minor OS version

0

Major OS version

6

Entry point

5524

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\StartAllBack\StartIsBack11\Release\StartAllBackX64.pdb

shlwapi

StrNCatW StrCpyNW StrCmpNIW ord219 PathParseIconLocationW PathAddBackslashW StrStrIW StrCSpnA StrStrIA HashData StrStrNIW ord158 ord215 StrTrimW ord513 ord212 ord512 ord184 ord388 PathIsNetworkPathW StrCmpIW ord168 PathIsRootW PathStripToRootW PathIsFileSpecW ord256 PathRemoveExtensionW PathIsUNCW PathIsDirectoryW PathIsRelativeW SHRegGetValueW PathAppendW SHStrDupW UrlIsW PathCreateFromUrlW PathFindExtensionW StrCmpNW ord176 SHOpenRegStream2W ord12 PathRemoveBlanksW ord174 ord172 SHGetValueW StrCmpW SHCreateStreamOnFileW PathFindFileNameW PathRemoveBackslashW PathFileExistsW StrToIntW ord16 StrStrW PathRemoveFileSpecW ord487

dwmapi

DwmEnableBlurBehindWindow DwmSetWindowAttribute DwmExtendFrameIntoClientArea ord138 ord141 DwmTransitionOwnedWindow ord139 ord113 ord159 ord163 ord164 ord187 DwmGetWindowAttribute DwmInvalidateIconicBitmaps DwmFlush DwmSetIconicThumbnail ord140 DwmUpdateThumbnailProperties

uxtheme

IsThemePartDefined GetThemePropertyOrigin GetThemeTextExtent GetThemeRect GetThemeBackgroundExtent GetThemeBackgroundRegion GetThemeBool GetThemeFont GetThemeMetric ord121 ord120 ord126 ord50 ord138 ord140 ord135 ord49 ord74 ord133 ord132 GetThemeMargins GetWindowTheme GetBufferedPaintTargetDC GetThemePartSize GetCurrentThemeName EndBufferedAnimation DrawThemeBackground SetWindowTheme GetThemeBackgroundContentRect SetWindowThemeAttribute OpenThemeData GetThemeBitmap CloseThemeData GetThemeInt BeginBufferedPaint EndBufferedPaint GetThemeEnumValue GetThemeColor ord47 DrawThemeParentBackground OpenThemeDataForDpi DrawThemeTextEx BufferedPaintSetAlpha IsThemeBackgroundPartiallyTransparent

api-ms-win-core-winrt-l1-1-0

RoActivateInstance RoGetActivationFactory RoInitialize RoUninitialize

ntdll

RtlCaptureContext NtQueryWnfStateData RtlAdjustPrivilege NtQueryInformationToken RtlInitUnicodeString

msvcrt

strcmp sin memset memmove memcpy memcmp vsprintf_s ??2@YAPEAX_K@Z wcschr _wcsnicmp wcscpy_s wcscat_s wcsncmp malloc free _wcsicmp vswprintf_s isspace tolower isprint _vsnwprintf wcsstr wcstok_s abort __C_specific_handler wcsncpy_s ??_U@YAPEAX_K@Z _wtoi ??_V@YAXPEAX@Z ??3@YAXPEAX@Z atoi ??1type_info@@UEAA@XZ __dllonexit _unlock wcscmp _lock _onexit __CxxFrameHandler3 _XcptFilter _initterm _amsg_exit cos acos bsearch

gdi32

CreateDIBSection GetCharWidth32W GetGlyphIndicesW GetLayout SelectClipRgn OffsetClipRgn GetObjectType StretchDIBits GetTextExtentExPointW SetBkMode GetDCDpiScaleValue GdiDrawStream TextOutW CreateCompatibleDC GetBitmapBits GetDCBrushColor StretchBlt GetBkColor GetBkMode SetBoundsRect GetBoundsRect OffsetRgn CreateCompatibleBitmap SetViewportOrgEx GetTextExtentPoint32W GetDeviceCaps AddFontResourceExW SelectObject GetObjectW GdiAlphaBlend DeleteDC CreateBitmap DeleteObject SetBitmapBits CreateRectRgn GetClipBox CreateSolidBrush CreateFontIndirectW GetTextExtentPointW SetLayout BitBlt SaveDC ExcludeClipRect RestoreDC SetBkColor GetStockObject SetTextColor ExtTextOutW CreateRectRgnIndirect GetCurrentObject CombineRgn GetRgnBox GdiFlush SetWindowOrgEx GetTextColor CreateFontW

user32

RegisterWindowMessageW GetWindowLongPtrW SendMessageTimeoutW GetWindowLongW SetWindowLongPtrW GetSystemMetricsForDpi SetWindowRgn RemovePropW SendMessageW GetClassNameW EnumChildWindows DefWindowProcW EqualRect IsZoomed SetClassLongPtrW GetSysColorBrush RegisterClassW TrackPopupMenu TrackPopupMenuEx GetMenuItemInfoW InvalidateRect SystemParametersInfoForDpi InflateRect SetFocus GetDoubleClickTime SetWindowPos ShowWindow IsWindowVisible RedrawWindow GetDCEx ReleaseDC FillRect GetDlgItem BeginPaint EndPaint GetWindowInfo OffsetRect GetWindowDC GetClassLongPtrW GetSystemMetrics GetComboBoxInfo SystemParametersInfoW FindWindowW UpdateWindow AnimateWindow DrawFocusRect LoadImageW UnhookWindowsHookEx CallNextHookEx SetPropW GetWindowThreadProcessId SetWinEventHook CreateWindowExW GetGUIThreadInfo IsChild MonitorFromWindow UpdateLayeredWindow GetWindowRgn DestroyWindow GetMonitorInfoW SetRect BeginDeferWindowPos DeferWindowPos EndDeferWindowPos GetWindow LockSetForegroundWindow GetFocus IsWindow SetLayeredWindowAttributes PeekMessageW NotifyWinEvent DispatchMessageW GetMessagePos WindowFromPoint ScreenToClient ClientToScreen TrackMouseEvent GetCapture GetNextDlgGroupItem CreatePopupMenu InsertMenuW LoadMenuW GetMenuStringW GetSubMenu DestroyMenu CheckMenuRadioItem GetMenuItemCount CheckMenuItem ReleaseCapture PtInRect DragDetect SetCapture SetMenuItemBitmaps DrawTextW UnhookWinEvent IsCharAlphaNumericA RegisterClassExW DestroyIcon PostQuitMessage SetThreadDpiAwarenessContext GetCursorPos MonitorFromPoint SetWindowTextW MsgWaitForMultipleObjectsEx SetForegroundWindow GetForegroundWindow SetMenuDefaultItem CreateDialogParamW GetDlgItemTextW SetDlgItemTextW IntersectRect SendDlgItemMessageW EndDialog DialogBoxParamW GetActiveWindow GetIconInfo WindowFromDC GetMessageExtraInfo GetMenuBarInfo GetMenuInfo SetMenuInfo GetSystemMenu IsMenu SetMessageExtraInfo SetMenuItemInfoW DeleteMenu AppendMenuW GetMenuItemID TranslateMessage GetMenuDefaultItem GetAsyncKeyState GetDC GetShellWindow ExitWindowsEx GetMenuState EnableWindow IsCharAlphaNumericW IsCharAlphaW CharNextW CallWindowProcW CharLowerW EnumThreadWindows SetSysColors SystemParametersInfoA GetDesktopWindow LoadImageA SwitchToThisWindow GetLayeredWindowAttributes IsRectEmpty UnregisterClassW MonitorFromRect FrameRect InternalGetWindowText GetWindowPlacement IsIconic CopyRect ShowWindowAsync PrintWindow ModifyMenuW EnumDisplayMonitors DrawEdge DrawTextExW GetUpdateRect SetWindowLongW CalculatePopupWindowPosition DrawIconEx UnionRect GetWindowRgnBox SetRectEmpty EnumWindows CheckDlgButton IsDlgButtonChecked OpenClipboard EmptyClipboard SetClipboardData CloseClipboard GetCursorInfo AllowSetForegroundWindow CopyImage SetCursorPos SubtractRect PostThreadMessageW RegisterHotKey GetDpiForSystem SetActiveWindow RegisterClipboardFormatW ChildWindowFromPointEx InsertMenuItemW GetMessageW GetCurrentInputMessageSource GetCIMSSM KillTimer SetTimer GetDpiForWindow GetClientRect GetPropW GetAncestor MapWindowPoints GetWindowRect GetParent GetWindowTextW FindWindowExW PostMessageW LoadStringW GetSysColor LoadCursorW SetCursor CreateIconIndirect GetKeyState wsprintfW wsprintfA GetClassWord SetWindowCompositionAttribute GetWindowBand ord2509 ord2510 SetWindowBand ord2005 SetWindowsHookExW GetDpiForMonitorInternal

kernel32

GetTempPathW SetFileAttributesW GetFileAttributesW RemoveDirectoryW CreateDirectoryW lstrcmpiA SetUnhandledExceptionFilter ProcessIdToSessionId LCMapStringW GetModuleFileNameW CreateProcessW CreateTimerQueueTimer DeleteTimerQueueTimer FindCloseChangeNotification FindFirstChangeNotificationW FindNextChangeNotification MoveFileW lstrcpynW TlsSetValue TlsAlloc FindPackagesByPackageFamily TlsGetValue GetPackagesByPackageFamily ParseApplicationUserModelId QueueUserAPC QueueUserWorkItem GlobalFree GlobalAlloc GetSystemFirmwareTable CreateFileA Sleep SetEvent UnregisterWaitEx RegisterWaitForSingleObject ExpandEnvironmentStringsW SubmitThreadpoolWork GetCurrentThread GetThreadPriority LocalFree LocalAlloc MoveFileExW DeleteFileW CreateThreadpool SetThreadpoolThreadMinimum SetThreadpoolThreadMaximum FindFirstFileW FindNextFileW FindClose LoadLibraryW GetWindowsDirectoryW OpenProcess QueryFullProcessImageNameW CreateMutexW ReleaseMutex UnmapViewOfFile MapViewOfFile GetPrivateProfileStringW GetPrivateProfileIntW lstrcmpA ResolveDelayLoadedAPI GetProcessId IsBadReadPtr TerminateProcess ExitThread GlobalLock GlobalUnlock IsBadCodePtr GetApplicationUserModelId GetVersionExW DisableThreadLibraryCalls GetCurrentActCtx GlobalAddAtomW GetUserDefaultUILanguage GetComputerNameExW DebugBreak lstrcpynA RtlVirtualUnwind RtlLookupFunctionEntry CompareFileTime DeleteCriticalSection CloseThreadpoolWork WaitForThreadpoolWorkCallbacks CreateThreadpoolWork GetModuleHandleExW GetCurrentProcessId CreateEventW QueryPerformanceCounter UnhandledExceptionFilter GetCurrentProcess IsProcessorFeaturePresent DelayLoadFailureHook WaitForSingleObjectEx SleepEx IsWow64Process2 PackageFamilyNameFromFullName GetSystemWindowsDirectoryW GetVolumeNameForVolumeMountPointW lstrlenW CreateFileW DeviceIoControl CloseHandle lstrcpyA OutputDebugStringA lstrlenA lstrcatA GetSystemTimeAsFileTime FileTimeToSystemTime lstrcpyW lstrcmpiW RaiseException GetUserPreferredUILanguages MulDiv VirtualProtect GetFileAttributesExW InitOnceExecuteOnce GetProcAddress GetCurrentThreadId LoadLibraryExW InitOnceBeginInitialize InitOnceComplete lstrcmpW FindResourceW LoadResource SizeofResource CompareStringOrdinal EnterCriticalSection LeaveCriticalSection GetModuleHandleW InitializeCriticalSection WaitForSingleObject CreateThread SetThreadPriority GetTickCount ActivateActCtx DeactivateActCtx FindAtomW AddAtomW DeleteAtom FreeLibrary OpenEventW

advapi32

RegSetValueW GetUserNameW RegQueryValueW RegEnumKeyExW RegDeleteTreeW RegDeleteValueW RegCreateKeyExW RegSetValueExW RegQueryValueExW RegOpenKeyExW RegNotifyChangeKeyValue RegDeleteKeyValueW RegEnumKeyW RegOpenKeyW GetSidSubAuthority RegGetValueW RegSetKeyValueW RegCreateKeyW RegQueryInfoKeyW RegCreateKeyExA RegQueryValueExA RegDeleteValueA RegSetValueExA RegCloseKey RegQueryValueA RegOpenKeyExA

shell32

ord85 SHFileOperationW SHAppBarMessage ord62 ord645 ord644 SHCreateItemWithParent ord155 ord152 ord16 ord18 ord25 ord190 ord256 SHCreateDataObject SHCreateDefaultContextMenu AssocCreateForClasses SHCreateShellItemArrayFromIDLists SHGetStockIconInfo SHCreateItemFromParsingName ord6 SHCreateShellItemArrayFromDataObject SHAssocEnumHandlers SHGetKnownFolderPath ord100 SHBindToObject ShellExecuteExW ord846 ord27 ord21 ord68 SHGetKnownFolderIDList ord22 ord132 ord2 ord4 ord134 SHGetFileInfoW SHGetIDListFromObject SHCreateItemInKnownFolder SHGetPropertyStoreForWindow ShellExecuteW Shell_NotifyIconGetRect Shell_NotifyIconW SHCreateItemFromIDList SHCreateDefaultExtractIcon SHGetFolderPathW SHChangeNotify SHGetNameFromIDList ord162 Shell_GetCachedImageIndexW SHOpenFolderAndSelectItems SHGetSpecialFolderPathW ord193 SHBindToParent ord23 ord727 ord17 SHGetFolderLocation SHGetDesktopFolder ord98 SHParseDisplayName ord88

ole32

StringFromGUID2 CoInitializeEx CreateStreamOnHGlobal CoGetInterfaceAndReleaseStream ReleaseStgMedium CoAllowSetForegroundWindow CoCreateFreeThreadedMarshaler PropVariantClear CoTaskMemAlloc CoTaskMemFree CoWaitForMultipleHandles CoMarshalInterThreadInterfaceInStream CoUninitialize CoInitialize RevokeDragDrop RegisterDragDrop CoCreateInstance

$PROGRAMFILES64/StartAllBack/Styles/Windows 7.msstyles

SHA256 c6c578e729f76eaa1fd6ba0286c383b236245cab3518e46d7eaacae3395f25b5
MD5 ae2d99598c4cef23536891e66a253ca8
SHA1 c72ec083bb26062b81f3aaca0f50864ec89156f5
SHA512 4f1af265f91c0a1a3031cc9989be40b453577d45b043efec1443f4a4fd998a9dfebbfa5029d233f1c4626b175e8cbd74d2deb617f2b090b5c672202dd2b9afbc
SSDEEP 6144:NGiadnZbBdaiTcWMRXbvIl2l/CtRElM/QVPxcqeZ:siWn5BZcWqCvtzue
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$WINDIR/Resources/Themes/AeroRoundShiny-Architecture.theme

SHA256 59a7140a9d3d82a1312678a77a3eb93daf931bc27154972ec02ddc4db5c70f78
MD5 d08beee8eb32335ee0121059ec3e9e60
SHA1 f4b6b88c4b104bc01e4c0666691d13c0c6c1f2b3
SHA512 f742497ed2e3b77ff2c4e7d2aa26d696def1cc986d9f6788f4e00004f9b5b184b390b2cefd78bb913f2bbe0946371dbde2d79c6fd51d1f4a92b71e5d458b67c8
SSDEEP 96:EdHJg3bqgr2gtIz25rtvn/GYAxFualAeYxqABxOABxsAJKx9AJExSAJuxuALxBAp:K7galsqaOssEK9EESEOuUBJLlBWBtB9D
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/AeroRoundShiny-Characters.theme

SHA256 e89203f1e3cbcd70c9aa4c006174d7b4be0d38e944d1e1e6a478d74c94bbbc7e
MD5 b92d2dbaedfec21b61e6dd3dcd971be4
SHA1 80dce11b27e639662e9f2c8e2a6c02e6af3f5e65
SHA512 019a245c4b2636c843f4dc4e2aa5c0cc0f5a54e8273af392b1eccade1be4d671aa824cddffbe7ae43bd979b2b6d938a9692fee152fabac2579718877095bf456
SSDEEP 96:EdHJt3bqgr2gtIz25rtvn/GYAxFAa6AeYXABRAB1AJKyAJEFAJuVALoAE0ApYoA4:K8Oa6AauEREEEeTcMJk0wQY+MBq
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/AeroRoundShiny-Default.theme

SHA256 596e463ff01dc6fbb3b972bdcb9b9185b9dde9788a4c9550630fec6f1ff9d610
MD5 03300fef713120ab57bfaf9787ffc110
SHA1 856632d6b6c61c23957402c4d57c79672ead6120
SHA512 1a456cc3ea27814743cd3356d04c6d509844de8f07f98ea94c8ba935a19c4b492980772ce116c30c7f26fde98f49527d2a1067332c6f92b583820b7998e34581
SSDEEP 96:EdHJG3bqgr2btIz25rtvn/GYAxFJaEAeY2ABSAB4AJKpAJE+AJuiALVAEnApYVAz:KYbaET3xEMEpEjk/pWRh1vLxfBt
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/AeroRoundShiny-Landscapes.theme

SHA256 7ece9cd4f7360d60ccbb5ba85321e56a9c3772a6d602bce7fc302d18f1e065df
MD5 3455c1b2eb108f709259c0735c7ec8ea
SHA1 2e67e3865c343d4ade476fd559ffdb2edf040574
SHA512 f643ef75bf1acc97e65458c9c1df28177d7556b191654c74c1f340d584d40ec964ca23e003173ace2f503966bdae6547578b8845297be5e7e6d620c68c8fce24
SSDEEP 96:EdHJH3bqgr2gtIz25rtvn/GYAxFaagAeYlABXABXAJKcAJE/AJuPALqAE2ApYqAm:KW0agekgEXE+EEFOuX2muqmk6B4
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/AeroRoundShiny-Nature.theme

SHA256 ab07f52cb087fc07ecbae1768b1fbd5b4781c2c122508bbda44d693ef843e24e
MD5 f2240d800e1ffc8c7f6458bf71ba44eb
SHA1 23472b51e8b12595575da711fed3bed389b9ed58
SHA512 596d4a1a5a8d1c3d139e75ba3b6d3d1165dacb75af930929a8f8e31bb2321e0e407b1dbe8e27ccf4a550cf682c26ec75febc9dad060cf5c70331a95c51579ce3
SSDEEP 96:EdHJq3bqgr2gtIz25rtvn/GYAxFnaFAeYmABiABoAJK5AJEuAJuSALFAEXApYFAL:K1haF5h7EyErEpe/pEBxLjb9/BT
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/AeroRoundShiny-Scenes.theme

SHA256 d6200c2592e324d9f3df7a6aa1667e425014e80de054bd4e0f251245fd4827d6
MD5 2182c81363fdbf550bfca5ee6a309425
SHA1 05e33a2d03a72bd0cbaca88b1bbcf1062fb02502
SHA512 4690d2b13949a9c558649e2aabe3b1f159ee105c8e42aa2194a975037a9c97c09f7923d7a146dbacfc2c28c43ccc47d00afa86c1a8d9e5afc302c6dbb77207b8
SSDEEP 96:EdsJc3bqgr2gtIz25rtvn/GYAxF1a1AeYuABaABwAJKBAJE2AJuaALNAEfApYNAT:KSna1R9zEWEjENWnJYhxfHbZHBb
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/Cursors/Install.inf

SHA256 644c5fca0203403719bde595556f6e70b99e7a1c549bab8cc8e9b68b2fa8eda0
MD5 a2799bc34fed4f45a5cc64be5e8e52aa
SHA1 4f31714135367eb835d59bf9f5a38ab8e75b49b1
SHA512 923c78cfb0ef1078fe283a8785559f37a85baa121f4430973b4cc9569b64054018d87ad9c54d600ce115188ab86c82a781d20cb9618ed5a02fb922325bc239c2
MD5 SHA1 SHA512

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/Cursors/aero_alt.cur

SHA256 e12b2bb99ec88e854843af4ad59aa2b7848fac401102a692896d5cb9ee7b3969
MD5 edd96aef0347b025a8544d3fac0ce120
SHA1 3709730eb773672e9f8baa072760708eeb83779c
SHA512 0ce753bdd93ce44b8b6edc3f1e00209a5f218ae24c1f47b841a7fce3f88936557913d0948706527197c19831908e336896c9428be19ec7cb8f6d653a7990d277
SSDEEP 24:f2lg386ati/sjtLYvXc/QY6SKANbarq7E3eOT:D3HOUvXc/h6SKANbarq7E3eM
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/Cursors/aero_arrow.cur

SHA256 8eef83f28aa3d333bba6fb595af829a734a8333122a9e67cbe029d204127499b
MD5 7f048ebf832f4c72ca92e7d97b0f566e
SHA1 c1d77763aa182e704a541b3dab302ffaa4290042
SHA512 6db831024d078767e1421810673fa83e61cac6c4f8c0d6504cd56e2ece1a7f318c1085f18e187aaf65d5bd839a8320fddf46819fa7a795c66909cff3e60786c7
SSDEEP 48:KpvOnsH/r0yZ9jaDRVptBW/3ccuJlxoOaVVcptB7:KFOn0r0yZ9jaDRVptBWglx7aVVcptB7
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/Cursors/aero_busy.ani

SHA256 b666c0c0cc5cb8ca839e429fc29421bb6b7be4c1591db2a8f721cfa8c7a456ff
MD5 b133ebed8cb512f224f6287c4c442da4
SHA1 427fb5737f8d17c838daa4ced6bab06b0ee76a3e
SHA512 294f3c9cdaf0ee8ab0045ee5b1a8177d2c954b17d6a2d3c4049abbdfe1e9cd5e7095b4d7c90ffc66714a96096897e5ef49eead50b337c4f12590c8e81d01dafe
SSDEEP 1536:WwZqzJeGE+U3mLs+vjQhc1OMlGiLnXG5C:P4eGERL+AFTiLnV
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/Cursors/aero_ew.cur

SHA256 8dfdcc0d690829f6d15c62ef47153737dda0584423fd9c5ede2fe5f111055579
MD5 22e0a6fb3a22e512e2c7512c669aceef
SHA1 64ec4797f780fb769c54bd0b7b3d6293c0c179f7
SHA512 3192193588b51c7d7d5f22c2b0be87c151be56357538fbca272fba2c9fe27bb80199ee4146e9bb8a662597f3066acb3099b180ac2dc72bed559ee202e3f30075
SSDEEP 12:0Q5JmEpe4uJJewzufpe8z9aSJe4TVaSperZ6aSmjZ6aMejZEXNpe4TPJe8zpbpew:++MQTwzHZH5KxTjdTEbJSypTIFTKM
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/Cursors/aero_helpsel.cur

SHA256 bc107ef23bebf87eb7dd2e81a799440ae70f573e4897ab340ab439bc4a4665d7
MD5 9102b0f3c917c98889146c8bb1f6b78c
SHA1 3cdbc962b0af64cd4674e33f4a2210fa91796073
SHA512 162de46047f32b2ffdeec42c66cf0611b7266394e51163b1109370b32e4e40693e971e3eb44c1dfd2dba0ad92e30ab4d332641f5485dab4679496b742563ecf4
SSDEEP 96:2YB6rn3Cr0yZ9jaDRVptBVmJWClxbnaVVcptBW:2YB6DCV1Q
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/Cursors/aero_link.cur

SHA256 f6595e48c3840b0d3d124dd5ad3d03f8fc4e2e114f8ebeb54330a34c5c6b5064
MD5 f4ac318a68081b2d2d7dd817dfde5f0b
SHA1 d6f905f582ccf950919368ce80fb71f3aaf30aec
SHA512 8629ddfde3d8af8bb8d854bdfcd58f56efbbeb8aeb71396624f2670c3c97966030492e233bbc6e59b038dc5a21576578b17931dee4385b9a3c4232450afe8712
SSDEEP 48:Pm6O3JLhHcaClz0o97FUknnnca8v9PttqOOOOOOF4nZfI2SB8BtaBny5bbAj:Th/UDa8dqOOOOOOcrvW
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/Cursors/aero_move.cur

SHA256 d4274eead11230ec10833db103239d826202bd92c0c6a3d7e2a0d01ffbaf99e1
MD5 28bc80affabc85bdc2874875fdce997d
SHA1 77dd84cd3cb9c4dffae41271c7bacdeccd3006ef
SHA512 e1f133a4e12c5c7ecc47ea2886be3aee98a684b60181282d2cbf5737a4592af50c0217885f37df53ed75bb91594613c5539c529bf30832ec5d3160b9009d50a1
SSDEEP 48:gzzuNW61j9iluMsSrGndIyZjOOqyeqITt2J:gzzuP6uMs/qyefT6
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/Cursors/aero_nesw.cur

SHA256 cd5cf1c7601ff0b315da11107beb92ded58b4412841d1aed1fcbd8336371b7b7
MD5 e2b403d2cbfb387fae387676c0048d30
SHA1 b30ed541580ea4c871f48066fa004a53895d686c
SHA512 991e6598b45ead614cc9ffef78cb65faa0c46ca23a556a216128c35d9932841a0c949f028eb6cbc653482e54d848f023ae2e9eab9fc6fecb59e3be98989b1c70
SSDEEP 96:La7a34wjEiqkaazCxAqk1aFxaPIkLl4444V1LE50Uinr:n4wjEiHaazCxAH/Ll4444V+Sx
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/Cursors/aero_ns.cur

SHA256 567eac60acecdac52d5bc57267de48dc4699ea6c2117a1619830259805bc2837
MD5 36e5a8eb542bb0ec78a4a770705d42e6
SHA1 701d52f106a7b07fad671eb7428f236f0986a8a3
SHA512 09b36ae4434d3e8486442cc856b1dc177457aa3156bb483680acd67079ed5e308b5c371d2f3c062ad688a2aeb9d18cce98fafeeb687ef297c74a7bcaa2e6ff54
SSDEEP 24:DwYslfBs5SOtoTfTfTzTwDTbTrVYfvnHjy96R74+DD7/prVt:DwYscqjj3ayXnDW6v
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/Cursors/aero_nwse.cur

SHA256 459ac289cbfb669945b4065751411be16d5b5ef8ac41877606dfe4ecac0a305c
MD5 5331f4d1971219d162115616ff7ecbfa
SHA1 7114786a6d2768cfdf170926df6353b8acaa7ba8
SHA512 15128b798d590229eb760acf304387ab2a060dbc3bd46de4465a413283390f8beb388d2a7ddef87fb24407ef3d82a0aa91e8225ea8b1ab7e9749bb3f5e270db9
SSDEEP 48:F2FURD2uAk30FwoaYLAuO0uirJvIItz9Lsp1D0ae1ukOtAd:gFwD2bk3cwoayZRLsp1DXs+4
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/Cursors/aero_pen.cur

SHA256 8d0269d2b2cdf6bebedaa18070ec59e4cd2d035bc07587e23bbe6bd0cd9dcb59
MD5 e02fc57af1231d72c1679f1b93b6da53
SHA1 25919dddc34ad270dfca1f08a852ffa837985070
SHA512 2ac476b13804386a53ac2406394f8ff68057020631c3f2be1298813c64f6187fb2e40ae9922b7f6e82d492f100d8224dec087ebbb756325ea9844071fb3dcd9f
SSDEEP 48:aSwlGDwAtqMgeckicrmtGlSakW8VcP8hDfwuYgF4Ft4:D1ycP8hbwI
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/Cursors/aero_prec.cur

SHA256 82960bbb060bf78779c736e325c83a30fb44f8f5d4d05ba984f7594e2f7438b5
MD5 e67d9223b642c25aabc6bc3e1b9067cc
SHA1 7655e8328a20428f92cda20c3361e196614b9c7b
SHA512 8d9d821b910fa253368c7c7ed4e59034c06eb728320424686b0bbf9a6815639a6d46627d7a6fecb2599a6d67104e853d47fa0660ab05ad74fec207013c7d79b8
SSDEEP 24:o9YIGaZatEOZD1aZadaZat0C/0C/uOlCEnOOliIpm:a9GiiiOiI9hlZltg
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/Cursors/aero_select.cur

SHA256 df2de2269ac181eca37be88f50613d4e64fe1bb32e597b442f681e470db33b14
MD5 fb4034a0dff9163fde813a30b2c1d1c1
SHA1 735bc76fbd197699243a4033b419714c2b76de38
SHA512 98b1e91d9fbf8e0ee5471ed93154e13b08b0f83e1a8858f717ed52d1111887ac3a610d25f412ea3844305db47d0434454cda0b7115b9f9c36e9c1dab3788e11b
SSDEEP 12:CvUaui/RU11wR0MR0MR0MR0MR0MR0mFsWzwnti/4zrop:Kr2HwR0MR0MR0MR0MR0MR0mFsaocYk
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/Cursors/aero_unavail.cur

SHA256 e9c97bec5b47a4bf498fa142ebccceaaeffe805121326bce03227b4245c2628d
MD5 a9a3d69defcf669c49badb1773c5c6c7
SHA1 c1d000d49d52df74b891a0f0500a3d45b4244e9d
SHA512 dbcb84647b2e0f32b19d4478f9658825e4cb6ae943052805d030265f56f97aa53ac165da160c8a4b19ace61524f7210c5000b3085df6574466a191729cab7f0d
SSDEEP 48:FTdEvnxlwSiXR/k+o340Oc7ofaJf4TZuJ6PwleS2Wts:FIlzyymP5v
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/Cursors/aero_up.cur

SHA256 2ac5a3023bded1ff947b428eb72de956d16ee6924b996a2ad99b7f03d29e3307
MD5 7e410712372a1d3c71b1cd465d3ea037
SHA1 300439aae26d118ce3046a5954a73481ec909bdc
SHA512 a9206b7c52b4683dd0722090d4a7005531d3f06fe9c8a1e29e413c22c0c979e4df62c03118acb1c4356e43b510911e6d0c095b5dcde3b5de5deaf3cfdd2da136
SSDEEP 12:sAlOhn6ATlXQRsQa+tKkT7czn4ENe4Dpem1JeQBpeIBJegBpBBJNx9999999999u:Ko8bLTrVxHjyFUHsi7ErVn
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/Cursors/aero_working.ani

SHA256 6a68858cc3a47f57fadf5bd8a8e30a8160f0a7190ae97f747dbf78726c17e1a2
MD5 3bf9c4b812627f57ae51d41be32ccd30
SHA1 a3b49922fdb88dbebc285c282e86631d0fd28025
SHA512 be80ce05c4e0011631b942ba6bcc0fe3565918536026956cf5229b36b3c8224f95223927cccc99e5b3f1b0f14efb8fbab17ae5f35ce8b8755c528dfa6107f3e4
SSDEEP 768:MiarwQNXsPyCg/LnCnjUU7Oj58c8G8ydYOdc2avtRM6/XH2/HLCpxJ00hkkijtm/:MD86C2Nt8yW1AmLJSKUzrB9y
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Afternoon/Desktop.ini

SHA256 b77586f906749b00246a8d8ce73e48ea42ac69355524afe3b1183e1ac6d8d201
MD5 794f1975f13b0fb6c554d96006237cad
SHA1 4a3989d06826b5e8ed30325e3a2527f62de6ae5d
SHA512 c4e91baea7b0621765c5da6254be846acef4f90570950e02c8ca733b255afc5ee1ec3378ef479c6bf22205a780d22c5b14b264b55f5f471c66dbce7b84d332b5
MD5 SHA1 SHA512

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Afternoon/Windows Balloon.wav

SHA256 084c9dc0e9bdda8d4b3bfb9e5ec4ad0852c23166de28c0e1ce965352afe9d60f
MD5 ca3cb718a781d2be1ec44369702a5586
SHA1 7164ae1368e378f65b4e13cb8dad79d5cf4c2506
SHA512 282c2a66d4ca3e303b4029d4ac02eb3c074ad3edcc7694d5842bdbb964de6740033ee38b97936b90f5221ee02012bc55160d12cecfaaa50e7248ed284e6c5b6a
SSDEEP 384:+Sac78UtDrv2EQB/Mjlc7s1cJUyDtAmeeho4fc7F:+uLtDrhQJMhCs1ciktAbM5c7F
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Afternoon/Windows Battery Critical.wav

SHA256 00c401c009e5beaa9c52c3d699212733cb73c31a1a076a3796b3a09af427d943
MD5 08e346be6bf2d304fa7547f8f434b08b
SHA1 1bbfb886bb33e84404a2a230b8a38a3bc4dce6df
SHA512 5dcc0ad745860b06405347196bd4dc4b1a0ef4356e1149210b394493e6c6c208103f22354298d5742fd213cd520d6d0acc461bdcfc28944f81d5827e2791df65
SSDEEP 384:KHG7cj+n9H9+37d8Z+toG2rZ2JlqPiPWUtDAbS+:KHGAIW3qZ+oG2rZ2PPn
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Afternoon/Windows Battery Low.wav

SHA256 5947c9d6daaa596aeb55176ab6b837a4ac42c725a7043b83f00f1eddf9613efa
MD5 614bb121ca1d6e65a339a1810dbb4ea0
SHA1 e23338ba04fd792067bed566660d6f4bc40d0b3e
SHA512 22dc0110ac92be3320ac8bd7061b78950012d8116455f62f97e8e30863d1e8129b08450d39b2ec649dbd204e1bfd36de137ca0c9f11fcf51116002d9f97cde2e
SSDEEP 384:2/I5gY8B9PwdFi3tVKnedw/RPK4zsuioJWGN+yth8U7s2573iKNz:viYi9PwdFD4w/qloJWcWCs2V3
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Afternoon/Windows Critical Stop.wav

SHA256 cfd5143eb6b1ce656d0aac22b375eb4a5aa9cb8e6f3deddf7b5e3c3eae239610
MD5 ee124993a2410fbac3a9edcfc0676c3c
SHA1 d352fed48ea5e67be875682cd58a19cd901fcf69
SHA512 c07678ac5f771df99a93c82f9f5e2ec9c37eb3ef50e97d87e29e53cccb37863073077cd4e13447e0d0f37f79ffef47359ae7e72b606b32bd003810f317cc7171
SSDEEP 192:QDwbu/fBFhplrXaitGgWoXrrmTU9fVeKLqoLpwRQzjNq6o8USFoMl3b/NSzdEcX8:BK/fdpodoXw1ToNwK9oZbMl3z1zyqr
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Afternoon/Windows Default.wav

SHA256 41b547c9fe32fc9aedee2a416bf610c6be2ad5cc63bc1b04b8e6cdf436162fd4
MD5 c386b1b8c20a4e85fa044b8b9a1b6027
SHA1 689651422cfb6dac12bd1f5434b2e93737bbd865
SHA512 685812a8f5b92bb56d54f935ecb5d31e6e9fa828941f26eeb6dffbbfb66eb161b3d001ed9b282402ba07682e2d3565764eed120dc2d2cef367bab2082b02b411
SSDEEP 192:OhUErL6MnEWkrIUYR6y0/1OMNxjfarrK71h+ORv1BOubO6mH7hSwgB3:f0LVnEWksU+0/0Yza3FOxr9oIwQ
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Afternoon/Windows Ding.wav

SHA256 2b39dc41d0c0c77c643b47b83b6f4307459305b8a6fd1212308affe160bce693
MD5 9d8a8c430748163f87f9de0485fee0d7
SHA1 707162dbc178513187b5e466ed760a75665588ee
SHA512 2093baafae7011fadb58d59e7a490cd46ffa41830473a8fe4afe9d1524afebf64a4dc67b0c900e6331638c97418753549d6d1463d081c034208225526bbd0492
SSDEEP 3072:vtiffPjAi2ddZT1xtEmNSNp6rqz49kUHebRk90adf:FiffrAldH1xWmNST6W49kUGRFif
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Afternoon/Windows Error.wav

SHA256 d58e209583bf91640d219c1ee797a58a9915f5c5e68c5a84f5d90a790dda3636
MD5 b3a934b2cf0acf9c198a8e18c221483d
SHA1 1b33512c6c1987c36f515918e07f02871e2c0554
SHA512 21c50408b32abc48b5071a88326e32f602005184b40a6123e48828ad28d3cc18e4f57c349f7844b50f8166f2c5fb4804d3046e319545712d93f5fca9c3565f1e
SSDEEP 192:ZjDJZueUpTUYuug3FdkKLs8kPNX+jmDyCpcKMc7M6Ck1CxxVzj0kwkVaQbpOwqaj:ZRZuf4YujdbstlGecrrjlhqPE
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Afternoon/Windows Exclamation.wav

SHA256 bc84f20cb26b6b8435b3053e955880d2ed6226269c08cc88db461dd04d06aadf
MD5 bd71fbb6c10aaeba4c76b7c193e7bc45
SHA1 e64138e940aacd4cbdf80f3c1aa46957afede013
SHA512 ee2507dc4c63b1c40423df9e81046eff2c65bb28fe222f5720b273dae48e5c2c9cb0fecf15a790c516ebe5a41ab74f6f2f2ca33228df13e20ecca7b57c35a968
SSDEEP 384:n+lE89mSrr2NbTRRTGapVocmNeiW6TA4rvJWrWDnc7LcYoABo1:nFQmCSNbTRRqcM1W+A4rBWrpXk
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Afternoon/Windows Feed Discovered.wav

SHA256 fd0ae5458686cc903374c87bb724ec70d3b6f45e7ab71bcba466c4239c558372
MD5 8046f9d4a544df56672dbbb6c1c9bef6
SHA1 322e06fcb163567866adaf8b74e7be0fb0bc531e
SHA512 3370e015510e6fbec56fed5a4e3430263b6ef88d17793876d10465ddff28490673ce1f03759bcba26e31dac5b6a95a4b58ad282b4b984ac6194fc46a9fc001dc
SSDEEP 384:dUizEgP6HiyxIRGv81Bu0CXNsTSNvjPNr:dUiFaiyxIQ81BufSTSFPNr
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Afternoon/Windows Hardware Fail.wav

SHA256 3717eb81cdadb6f5c7114d1918172eeb21f4523534fc8520385a8f58a28cfd34
MD5 bb30578f709571d84bf9602cef682ff2
SHA1 a17a69282ea9d24587140eb7619e5f0c47939cf1
SHA512 f9c9d75792c4b8be5a393e868b395f4553f0d6ff3ac049c80b1dfce5fbf94cd4c18e6882756ba7a8c54671929eb751549a08f478c124f55845ea9f6aed4f5d33
SSDEEP 384:j0wcLC/HYFQi52ZFZ7ujeCit3CvIBV1B7enTvl:wlYQd2ZFZ7p4IR1enTvl
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Afternoon/Windows Hardware Insert.wav

SHA256 9bb3ad1f9aa7cda6386fdda9cc19e1bdb6a96843f84241bdc996b93211ba6713
MD5 5f58392f917241a463792a7b1276a605
SHA1 b648545bcf6af3498bb2ff0a02eb3c978aea843b
SHA512 6a55511bcc33a7a7465e318c45e8b682c8b2e4e5b65d4e524585c62a4ca1d1278bd205b006f638cdbdd1e3d7ab0cf2b920587f54fc78c1b5b2acf2eec260b0d6
SSDEEP 384:TjsXgx/uxytOGffFu9vsy6nHZRJ1iZiRL/kTB9n1VjJbh:TjTNWytOGXk9J6HfJ3LcTB97Jbh
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Afternoon/Windows Hardware Remove.wav

SHA256 dca2a628f70610075a3534ff928c729fa4a8a1825d0eba31c1a5742c9a9f43fa
MD5 bd27093ac82aac71c09d385f6874c5ae
SHA1 83ca4bda3de34841beffc8e3c3c59663dfa449fb
SHA512 3446d3ce91bf027371a38291250fe8596f5a3cc03279a09b8163aa546ee6bd8f4f3f3bd59e0e2316b7845dd0f4639257795970497adc1012c56de24c62bc0ef9
SSDEEP 384:ktfUMvRFfCkIHb1mlDoYiPP/UDn3fxvZ+:kSAtk1mlDZiPifn+
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Afternoon/Windows Information Bar.wav

SHA256 31000f3e8cc0d3a248f1fda9b5152ca79ce8c844b657f3df7af9f82697b41a16
MD5 62d6b909d8fb5266ec671f7ceb68adf4
SHA1 709a9f630a8362d7c021f90284b9092076224061
SHA512 2205ac28cbeaea14cdc841d7695efd1368a659e0bf6a59e7b7681dc13f550ee7c533ad1ae23aad79ae52f868a06c954299caae81cfadf0268dc443f1d3dc8978
SSDEEP 192:Z9t/MwdJZ+6sJBcCPU3zn6hu8IDbZ8nURtJ/E1X07yjOzvjV7mgwbUQ5J:Zz/MKaY3z+u8Iua58X07yoJazZ
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Afternoon/Windows Logoff Sound.wav

SHA256 f2f293b393ac7fd3e5aa7e08197b639b4b2cec069b16476edc2d1871b527beae
MD5 5f566a26dda9becd920ed7427d84f448
SHA1 3add7f5fb1b1ed3307b2ede132e0b5f567a68b94
SHA512 bb3d12ae41c797b3b927e000b787a7b073907386625e16d18333cf2f8bc116b6d51531d9c16ce12f0c5f8686585ebc6db1a26ff29e6d043d5612e26df545fe5b
SSDEEP 768:tEKk6UpvblvtlqRrc9ga0FNwzWl72/7w08t/sD286HZE9AN0J2DV/wgt1B:tEXpvdPccKapKl7+781WGy9ANHV
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Afternoon/Windows Logon Sound.wav

SHA256 fbea358a5bf9e895c000baf0a435ac6095a12242c6643c09c6e350be1cdf9c15
MD5 dbb87972ab3d461bf178349abd26f343
SHA1 6036cc7a0e367eed6da365cdd74ba080244f7872
SHA512 68eb0652f5790bdea67eb4c5f9c3a130f321385f6aaf3d4825e08f9b993b99d18b56d2c5ad501eb03a8d99ed91714d32d0b7966c7b11f371b8e5550f29121021
SSDEEP 1536:oAsits7gcbi90bMUdwo45J6+EQDQWbmLVMHly2amSsFeTUkn2:HztdyTMUmoW6+EQDh6LIaDsFeTnn2
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Afternoon/Windows Navigation Start.wav

SHA256 222f6dab87af50ea1580110e6a75ed19cf8a0e8458326918567a3bda41e5acc7
MD5 6c951b0ec3d65de2baba6287388de0e8
SHA1 290211ba6eec683c098547309e270ed6c5e534a4
SHA512 7a9f0e05d0ece7ecd4e14aaed64be29f3e6d01896c5154dc55bf21d9bd1a6177659bd46aa55117ac9160d5b62a0151aca40aa7985a51fa39e8e829f87e9cd7bc
SSDEEP 48:XokwUfoc19PR1qFJzi5OM0r652DGAQsoeSGQgXu6Uw7i4ijhTylcLgN7xm61MAog:XolVItuJ+5BeG7soNGQgLUsE9EXmrA+
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Afternoon/Windows Notify.wav

SHA256 cac0a203390e3ea4508f389c70529be7e0f7f094c34786b3ec68e136c2bf98f2
MD5 04b72fd4c689a27e3e8ea2238e2f0265
SHA1 dbcf34054559ca3c3557d1bc36836e401457aa27
SHA512 6a3b53719722a1b21fea7df0e6a731f70c8f073d7d0eef318e8313291e8ddcfdf52bfbc589a7946306482af06ed588c0e04dcb553a48aa952f69fe7a74f3288c
SSDEEP 384:JC9Sg1XaWzT9or6dJVDcvEMNvxkTk5DphYBGK4qEDmjIA6RByC:4SgB3z2bNmkrEGLqEuL6l
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Afternoon/Windows Pop-up Blocked.wav

SHA256 4fb0c364f6c8af8bb701911712cd1b821178a917310c9a7c1b4bf0733399bbf0
MD5 9f305617c4e84a6a6020dc7ad2fb8b31
SHA1 1bcb76ab3326704ba90087db8a9830e95040a746
SHA512 5f08412d10aa57298aba273e04034dd81f739adeb91baeba572ce3d98e3f43817aa7eed12096d520c9bf57c3334091eb99fa65f3bdb71d0f189d22d9c31440eb
SSDEEP 192:3VkcAodc+B72J9zbmpBBSZAxSwqqbu6xLVIsSaDWSabJ64q3RF72+Hk:qcfcu7ABbmpPSZGS4xZAhb12lbE
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Afternoon/Windows Print complete.wav

SHA256 19e5757db3322aeabb5c08d6cb7d37a56cc5cce7855e09157175b17e73082887
MD5 925524c03ad60947f2abaa2c96c175ca
SHA1 453dd397f3817d35e975fec018c2c4b16b89ea7b
SHA512 8696138ee444ad8b7eed456075c734b65e3525f02a0b67865a36e565f7866e36b7526f952d6d44c259214a767841f75a3bf06795009c422a78981097f194a455
SSDEEP 384:8RMFIfMhNpkkW5a46O7MXawoJN33aEuLmRiYbYLS:wMFIfSN+n5eawo33amRiz
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Afternoon/Windows User Account Control.wav

SHA256 dae404909cb5597b5a12d064abc212622c66c0c571fe00600c513fd69b759689
MD5 0029fe41fdf3d6c5f3a5ab0af654adff
SHA1 00d9f25100af029ab13661edfbda865105ff3b99
SHA512 e1ef22f681aef0e6736af280bdf9d2148c565cc3d22d1a17209fd7658f2950dc26e3ef4d8ab8f5b525756ec7d2a51972f9517a44a6a81b3f7f5b8b65a6fa5206
SSDEEP 384:3IWivQytbM1qMv9RQbgv+o5EKlwcnsBQ0n9z:3PioytQzRQsGoDZWQ0
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Calligraphy/Desktop.ini

SHA256 b77586f906749b00246a8d8ce73e48ea42ac69355524afe3b1183e1ac6d8d201
MD5 794f1975f13b0fb6c554d96006237cad
SHA1 4a3989d06826b5e8ed30325e3a2527f62de6ae5d
SHA512 c4e91baea7b0621765c5da6254be846acef4f90570950e02c8ca733b255afc5ee1ec3378ef479c6bf22205a780d22c5b14b264b55f5f471c66dbce7b84d332b5
MD5 SHA1 SHA512

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Calligraphy/Windows Balloon.wav

SHA256 1548c8087fdf474289c1674ac080a08cc3b59da9f6b46c7f7ff3ba05029003f0
MD5 cee595bcba00ffeddd19f4477ed18bbe
SHA1 a58cbfb8634c056f8d8e920b00e8b6d3df080c4c
SHA512 3c89f8eddebdb90660667a40704f7fcc9046978b13ba26648a4fcfa2109d0b47bc71ba163c1d410e8d8771518970925a5b12c75ffe88824e3214c023fed93d0a
SSDEEP 768:3XZQdyCQQ0VDyRsb7HyD1wLTiwUjYj32AjXL:3W7QBFyaXHy6iSnL
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Calligraphy/Windows Battery Critical.wav

SHA256 670447fa8da45d1fa178ef463f6bf33c07cda07ecb5bd96453311078ac305738
MD5 97565424eca55f253a40bffbbe3c68d8
SHA1 26d2dc8595ea98e36bdf397a1838a04f78a26a77
SHA512 77cc1ad94c8768e047891982c8821ac72d920b89405839286527b286502c5da32a85ade65ed78c2b38b12be973f261cf1a53e4c38534fd6afd6c65998202bd4a
SSDEEP 768:YrTbhq7DIhZKmi9iH82SGH48KCgvQ3pBcO+qa:sgIZKmYFQ8t
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Calligraphy/Windows Battery Low.wav

SHA256 439673f30a7d4a31517791f3295114429ad04e23891ba9bc5c67c565fcc3de04
MD5 928f775e8b83d020b2b266153933e6d1
SHA1 943a170026e0a87160aabd409d1d98449d04fae5
SHA512 65b448e2263b74b70f5ebee6750973231148b2e24dea894159423c6202cafb4c8a26b3b42398fbd14b450ce74ae606d3d89b16730f102a7d89ce2697ae59689d
SSDEEP 384:fS/98LJng5kdIycQlyDQnpKPL93zUm70hOrHmyIfWBwtTH3iEKahK64Ca0Xrep:6/9gJG+cQsDMeLd+hYHmyIfWBQiFaJ70
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Calligraphy/Windows Critical Stop.wav

SHA256 9d04efa19963278ad4162ecbc116ebbb7ecab4ef7665ea2f85f38198d5ef5365
MD5 262707e0efa21f2cd2456fe8f6eadb93
SHA1 58b6354e77848739bbc26432e6a089e388013d21
SHA512 228308e985ee3af1d27b0fd76e439171da20670167f7eb7646d4da7117e6a22eac52b8dc8d08b378185bcb56ff0474edfe0caab30c4a40f6faab91916b898f5e
SSDEEP 192:v7eN6QWqgjO1tpw7yNLiPCkCluaIsW8Ft3yuhn96BGKM4wScpB4JKN4wU0UXlhT2:vCQVOfptNW1sWWt3/hnaM48q4UXfi
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Calligraphy/Windows Default.wav

SHA256 ad58566ef7d7e0bd9d1b4c92079fc200967d26ec6515ae0ef9f0c21f8ef5f50c
MD5 9ff4a47d99367b0d7161e06f4a71e5c3
SHA1 26889d923eeb29c81d7d70ebfb734d5ab1cab624
SHA512 d42f0b653ccdec455def0813592877fc32dd6070ccc87c045f2638b99a3ab68d067570ecffbe80f14350e22c102e83d3183701a476d292711dc424f5a3ca7cbc
SSDEEP 384:TMebBhoO9Z/d2q4kWO0VduiillsPoe7GOq0:TMen7/d2q6RbrmWGc
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Calligraphy/Windows Ding.wav

SHA256 4e0b9c789fac5f87404b22cbc8ead50fcfc082ac227fc2c8fe2133cb01222049
MD5 33449ee3ef6d9013ecd6a801c8e86346
SHA1 ff2fb920d8322a4fdc338f8b74f09a62e006da2e
SHA512 7d5788941e863d852f0cb0ac7e6c30d76557ed34f3ee579a21315a7fa1f502c4ecf8212273dde86817d0b10d2526cbeab6606ea7182c5db51a875fa631b27a82
SSDEEP 3072:yqAd+iKR3O9wYM7eaRNHff517Zg2D7OnB3g6EFmR8BoUcx:cQiK1s2eaTZ1W2Dqn66UzC
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Calligraphy/Windows Error.wav

SHA256 0d7bdf522382e28e0ca726f8b689a726d7f8339a4c63f50ff819cfe51d016c81
MD5 8c1925e7d0ed34b1351b99966325e54a
SHA1 f2a7610fc2acf2da8a65de602d5eadb489923fed
SHA512 c475242cb38a787ba93251fe855fbaca916d545a254bd5477017d0b6299c98c7f4e2f743269b138fffa628080046e0a8a5419cf110e78f070e827ebc5dca8069
SSDEEP 768:dYTtriR623bGeKonzRVyurdSt9q1DdaW7X:dwtriRdboonzbyWsQX
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Calligraphy/Windows Exclamation.wav

SHA256 dd19916a46c46b2ed5e2a17449d7b27a9b8b13776b67c97a72d4e2b89f40319a
MD5 4fb13591e243c4c345761b4b67328cc1
SHA1 fc8b50f4de8cfda6bfd5a04518681e62435dc0e3
SHA512 6861ab5b314d77cd0e1b3448a49d894a67084c8d35f46fb4ae4c9e96adce08020f54ccd35b7f9ddd7a36acb01ab1c5651cdd69f1190f1455424a5a2dc6611907
SSDEEP 384:QoXNwuDfUFWKLVooxb6h00dWV5IrLNcQFpYyNlDz:Qo9VO3LVocWh00dWVWrLNcQYyr
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Calligraphy/Windows Feed Discovered.wav

SHA256 f64cfd33d1652fcf2b182dde3d2ccab0d30a382dd0e7437c0031a416a9475512
MD5 5782423691a20f85268192bea8019582
SHA1 8f1ecfa4033d0769d0a58a7da7cbfe76fe3d8b84
SHA512 0c096f791732a6ebf05affc557be95b8796f2bf07eeb5350c963bc03bcf948d87790a73f65b7ef9432732af4dc66ff6f6826a8fa28ce8bace75cbc5378d16dd4
SSDEEP 384:ENXwABfo8GwYRlntZ9HJYenus09HWBkcFI+1YY9GJuuyYl:TVwYRVtZ5LjBtY0qH
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Calligraphy/Windows Hardware Fail.wav

SHA256 220673cb28e5bdc21b4a57f195eb06fffacd9e71a611173f61b21100d96657d9
MD5 627db61c25f2a5f041b524f0b880ac00
SHA1 c2ff26575af117f597a89a4ff03941a10fab078f
SHA512 b1f806b47cf2c4a83168dfd0b05b32e2965d91566bbce59cef7fe66df4dbbf55d68564ac68a8d69bb29b07d36c2fd14b8afcb7f58a8da1f60b79822fd3bee84f
SSDEEP 384:w/TEJkk78++piHrxfT0IzxLkdjMuBqZmBE1WQTv:shGrhT1dQd1Bm1W6v
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Calligraphy/Windows Hardware Insert.wav

SHA256 d04b9128177a9a984b4bf33485b511aae5e4ce25fd927b6bfcae8f583e1b4155
MD5 8aa12a0ba425492a2a80d4b84ab7df24
SHA1 950d4a17080b8f005de628af2d89ffde151e646e
SHA512 415cb5696615866f5986667bb430c4ac0fe5ab816afe51d286f7da260d9e5f2729d261cc7642c5b443da34eb4e62df52fe2e87e86b0ac3ad7337e6cb992b3406
SSDEEP 384:kORFyVWLoJ5Oi2j/BNslMYodPqoYQkXLJMyBDPcfHGjWBAo:7foJ5cTCMPjYb1BD0ejWBD
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Calligraphy/Windows Hardware Remove.wav

SHA256 ef65161007a59186fa62c8b5b2b6069692f4f1c081154ff4241c60bfad8e9b96
MD5 cb330221f3ef694f86ea183a8f56f1bb
SHA1 996ea37e9ac93277c19f8e8252015a681eeaa3d6
SHA512 fdd815f6ba8f185fb62dea04950b3736ce24ba34454dc23ba225caf5a66568f94fd7beabc2ffe3b1e38030936e9403973f333a98b4dc95c0fc2f561d1885a4b9
SSDEEP 384:kFZ0l/hYJYyEIP0rod3lEkUXZeXQd2l5qPcpGBNyKK6PikeuMwN:I6HyhPYod3abXZrdnBBYZ/uP
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Calligraphy/Windows Information Bar.wav

SHA256 ebd4928317b70b3c406df1ffdfdd33b8fcc9c9a9c1791386f33006e0e4598805
MD5 f4af0985c59047616d87353f0a97f4b6
SHA1 1524dd215ac6dcf8965a3e65b520b123b8f57314
SHA512 ac655537ee5d18354b344bda003a0de46cba37f03ed4d6ef6b272f8889f27b3c36eab61bb2e9af78bfa973fa1867056d0dcfb040f2e533146a0d5741c9412fa5
SSDEEP 192:1Yz/hD2souN2yTLHCbPP8Acbe8/k7zOXjCpla6ceM4Jaj53oYZegmbI9+THf46+x:1Yb12uTLi7l4/k7C+3jMRFigmXw30p
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Calligraphy/Windows Logoff Sound.wav

SHA256 a9e00d7c4bad2dcf0893825dcf46777428ff6d8d7250abf8366e4190150b1cd0
MD5 9cc98a3d45f238e7796b3c0fd3774a5f
SHA1 9d0584feb53c38bb13456ced2722ae231e3335ca
SHA512 a8699bd8dfd62519a5e1dc050c09487a7eef50ec38a63de6e82f40aaa0b74b6d0d48494d540c1c287f8d1f6550a8e48d4cca9a5adb25a57b32e26f1c9d122f59
SSDEEP 768:vOT0eBOanCw0J2DjJd9BNKNsYTYC6sEsoftiC471HQQT6YUwCUWlEoSAjG0Njkk6:Y0Tm9BBYTYpsofV4RQq6YutNNjkkRT
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Calligraphy/Windows Logon Sound.wav

SHA256 8571105135699819340e3a0ab91504604260186b3dbd04813c20d0d9c7290009
MD5 3950ee0a7137af353e33418b60156724
SHA1 8cd039d5e3400ff7e77c71f178b9017fcd2ce69c
SHA512 39463d145e08f21299b44461b3045cd237986a78ee53189b3e9b268c6811e25129403f18ff4f712dea8b206d952a65e503596d3103cf5a6525ee7e60d1eceae5
SSDEEP 768:8gfsEs8D7zWxZjryR0ENuL/eYdJ3yLDFfd7Iqz5nIkoRnSClol1tS:8gpbWxhryi5eYjy3Z5p8R7M1t
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Calligraphy/Windows Navigation Start.wav

SHA256 aba0e7dc00ef3076e06f1902ba9853a1eb7f8d76834b867861cdc734e85fb58c
MD5 d83d541357d77500801b2b2a7fba462c
SHA1 01f3c1386a3d41ecc7563d244821e8a807aeb176
SHA512 04fd35108614e059c4d6681c5e56aed86327daec1d629dbc82db7dbcf2f077d243d4a31f342d4c32cc75f768287494010f49d76b7a4d699a45657419469d7473
SSDEEP 192:hi4EoOLx/nOKxuLyuQi6ebrS9Gyl32kfs:hVqoyuuuB3buBGkk
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Calligraphy/Windows Notify.wav

SHA256 3b913ee9bb8f9e996c2cf228f372e2ced455dca595a6bc708dd9c99f03163bd5
MD5 b0a64bcb1b4f383a8f6da131f183d6df
SHA1 7927f656c62c2c03b9a95cfa7d51e8c7c297d813
SHA512 b716b95e6749985c4f16b8e732caa57b87df57aed1cc5223205c2b94761e585a44814a75c8cab8c3180d28a92274b6824371504e940d1c9347f51e943a3e43ea
SSDEEP 384:16WyYKJOq4LQTmPvB1vXJ/0gPXEjFItgVF2cLyCpJ1yOykcg+v2SEBkd:IWyYKAqjTmnHXJbKD6cuGJw/kcv2nBS
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Calligraphy/Windows Pop-up Blocked.wav

SHA256 441aa285be7f7f4f3899a9ba1da279f52ebe547a9b535904aeacd2b36770d00f
MD5 b6b78c4a1cace8e01ab87ca4981844de
SHA1 eab8c0ac52d9889a86ec98f859160a6167e4f340
SHA512 69f33774a5fcdc3d60383958b874dda5c397066c4590f6de3de5b18d32dc3c7d2273f9f4f2b7e1b98190c15ab9715f49bb253f1463adc6e169e4a1839c9e9f76
SSDEEP 384:xSDMo8vd21Ibr5dxOVUjQhAmKJc6Ua/QZ/RZT:ADwvE+rZ2UchAHJc69M
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Calligraphy/Windows Print complete.wav

SHA256 37dfd00c37fcbce07e0c6e951e1dc5f37528ecd6918d177c60d41bd8224b1212
MD5 31522e08e05b32652c17e4bc226e16e2
SHA1 0e5cf4111862cfc1fecf8702b9058e2c5f9297ce
SHA512 96531ddad6f83205f6b79bc112c3a270baf07f7d4e092d9ee006238e6b2f459cdf1b90a52368cf9f96de9d8ee2015af4c3779326dab5565d6b94c663c94ca2cb
SSDEEP 192:pJUp/lvSSoohJF5LdXKKj3YvqG398QccE8+flYtf3qvIuZhE7uq3h7x0spSdAKpM:pGp/Z7o4UaiqM9NgYwIf92dADyXVDL
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Calligraphy/Windows User Account Control.wav

SHA256 1c4e96ac1927e7632c4be961e95e8fb4d3445a0e9a3009fe54c7275d2de90c82
MD5 6e5b14fab18cf21ba24b7129056b76d7
SHA1 39394ffefaa043d1feff87fd8c10501ec30de1ca
SHA512 c4e67121f924143a95fb7ac9bf5c113eea22108c8213df49c1499cca1b4d5c868cf583f0d17a6560ce27b71d884b9811c91fb4d0b9d60b321b60f010a83c7bcf
SSDEEP 384:Z5wBj7OQb8uhXRilhzb6+nIRnvaX3epV2XyNKh0ilE:Z5sPOQ4uDg6+nIRnvaHeDgyQ
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Characters/Desktop.ini

SHA256 b77586f906749b00246a8d8ce73e48ea42ac69355524afe3b1183e1ac6d8d201
MD5 794f1975f13b0fb6c554d96006237cad
SHA1 4a3989d06826b5e8ed30325e3a2527f62de6ae5d
SHA512 c4e91baea7b0621765c5da6254be846acef4f90570950e02c8ca733b255afc5ee1ec3378ef479c6bf22205a780d22c5b14b264b55f5f471c66dbce7b84d332b5
MD5 SHA1 SHA512

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Characters/Windows Balloon.wav

SHA256 43318f67cb6108e29bbfcd004f06610b9c54b924b385e7bbfc8bbcefec716c80
MD5 bd8b89c10dcbfd421bf17e24dd9a4ebe
SHA1 7a27b647c3a46cf8f230626b66180939373291cb
SHA512 90c2eff9b96885dfe00bdeaa5b968c8fec451c99cb6feefc30de54454bc861286226577fecbb79983cde62915439fccb8163d0cf2630421225005711442297f7
SSDEEP 192:UztaaOLqZcSV40kOeeVMzzoq/j1dNngs2/rPepRP14n1t:IFOLWNV5dtM3oorgLrWran
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Characters/Windows Battery Critical.wav

SHA256 31c3616c8ef1788b13eac5bdeba01ca4341bf0ab611230218a481f37b11c004d
MD5 ebce9b3143502fc949544c41f71d0695
SHA1 a081d22b1b354d6507e4a6f3e870b09644ced108
SHA512 744b8fad0de241c0589caa66cfd41224d48b7e52e4f2cc47a5345acf53c4ca2671bad085c36ad0bc1b1a0561c879c876676c83d9930a072b6427daf58103bd26
SSDEEP 384:ynFJ46DZWpM2trATZtqO8NVg5BRY/wAojINxN4dbyq:ynFJ4ggKrZoYLrjINUbyq
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Characters/Windows Battery Low.wav

SHA256 2a54bef37c9eeb73f947063b0a6628091f9c5725da91b85aceb8bf56ec0d3bda
MD5 25067dfa2260541ccd08a255b9dda197
SHA1 16b31f18a86c858563125f5e8ecbfb9f6a656704
SHA512 38c5c13988f0a68ec7d6aebfb5252d1ae345caaecec5fbf50fa42c7c4186de28fcafbebc657ba67b3bf26b294b0eafad522b7b923331d03ab58aafc80d8d41e2
SSDEEP 384:EcoT2TF69LyfJ73e79/rV09JhwUQMCPaF6Zc2O5Bae:roCTY9Lo679jVomHq6Zc2Yx
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Characters/Windows Critical Stop.wav

SHA256 04bf023c8e5dcbd63c48fca2f555e194aa804a847fff58637f5a088a20f583f6
MD5 399be6d884e52dff0661dc784b5064ff
SHA1 4f7466540dfe35831f1707adb89394b15c4eaeb5
SHA512 0cba4f5f2a06d06e9986133e959ac7038cd083dfae3a2954631a80017ddc2acd916b38d3f4f7eda3e1cb69a909629085397c0c92f534638cbb7146ebea62aac8
SSDEEP 192:pWIQ1OXxszFDzlzNEJA2bVJsSTPBNo+mY5bxIY9DWD5clIIg:pWWXxszB1G7htDo+muxbqE
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Characters/Windows Default.wav

SHA256 59625dff22a795737d2ac49b6201d6a921e053e3561dd71a1b1a6f6ad763a656
MD5 4ca97b1290854292dd005cb4ca11ae91
SHA1 405da9bcc9f7652dbf3eac24bb56aeaf00bcc02c
SHA512 14c91cdc7fa637b66ee7ef9886583e7227efc671c744aeffffea04600028dac02eab7e63c73a28e07b3f7a6d9b422d6370068674130b253471783d49ae139d6c
SSDEEP 192:bSeInPsjQBC6K6qO03+cQmTtTlNiqqXYBVPpLGMEqcaB65rO2o7UmD:C0jD6K6curUtlNidIBVPZGMEqr6JiY0
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Characters/Windows Ding.wav

SHA256 0de7a7889d0e2a27e8a4ab8637dca7434a29ba4e67ac96f3d889851bdafac697
MD5 cd3a31800db0f8f232cb05740424338d
SHA1 d32dc32de38672412eaa2c52a1e66c3824e515cc
SHA512 bf47e1256090ee1a7cdf26e185b4a0d28ff40b1c5eaadc07f7d770936e3e7df4dbad58464ed2ec7185bc683ebb6702ec301430e44a2cd058625f86f91cdad80a
SSDEEP 3072:/Tx77ZYKe+PBWfo2SU68GWe1PXzr6CY0kYJQ5D39EkhBkbNnYMUC6tupCF4:/Tx7WZ+Mfo2SU68GWeU0kY8hdBGiC3
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Characters/Windows Error.wav

SHA256 3a8159e29c477c9411a2f36e6afcbf5bc0b8d3c35b2e5be0c913842cdd7a8657
MD5 43e5e25a48eaff58984edb2d2d43b4de
SHA1 2817ac0a50db7ea6d8834519d3d11ae85f133103
SHA512 4254ac26e887bf7721bd7ba3068e1bc5b4b5c13650f48a7e9aabd93873d609b7641ac9b7df1ef161c8ca5050f92e5b72b790ab52f0eba85dbfcc059bd7fec85f
SSDEEP 384:v+oXI4IZNvuskvtg3q0R8/l8jxulwimNIMTre1ItU4+Ju0:GcI42ptkvtppl8luGZNIcrKItUlJF
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Characters/Windows Exclamation.wav

SHA256 5288865c125e53ae2155ef28de222a97e30c69cb792fb40c9849f6ed1b2d1b02
MD5 afd7a7787c7c1b583151a0802e9648c1
SHA1 4a48610c12d5df47b79871ccc00e1e2574a1c42d
SHA512 07353233e26a3a96b0d00abf9f26568b20a4c818802ee5d0aa9eb0de4d0b912982cd800b20d300c6fe4176395be7972d4bd9a8dce883f1d1065590457ea438d4
SSDEEP 384:j+4DEiDunlWb5yPRgtXl1HvccAHgoOSHGUYuXPVeag+evtM:rlNyWtV1Hx8goZHGUYuXteaVeF
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Characters/Windows Feed Discovered.wav

SHA256 beb4e075e315b430e453a69a438e9d0e6d3bfda7bde73426a0393846f015d04e
MD5 d6a87ea76d449af1aa1e9dc229ba1c2f
SHA1 80eb8511a6a64ff36a9ef38003609e717e397e66
SHA512 4080d4b60d220b66ae2bf0e134af234ce37a50bea445ff074bc5620e73a647949e24665409c651ddebc421e22331c93d86ecdd9071e88ef149c937f8d6d56dae
SSDEEP 384:cDKER3TXBhImEodibOlbh1rak5hAa5kp0xvw:rER3TxuRmp5rrak5hn5g0dw
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Characters/Windows Hardware Fail.wav

SHA256 37e53508dd001998969839cba0a2379aeadb2cd3dfd1d08139f6d7c15e675088
MD5 eaf73511820e6f2e1e7aff5a0b994f2b
SHA1 6e4db50e416b8b43f42b0bac5ae7cfc1c1cd69a3
SHA512 32801e744b578ac32f01e827e109cbcd8a8ad620b013ba57d81994ce03adbc5e389cd4ff097744523c9a4d0d435fc6141cf7bdcb22528dd88b50e6d8efb28ab8
SSDEEP 384:+nuRYW/6I4o1879BeYNdhnAgtCkasg95t1hJL:+fWCNBeYNzAg6sg95t1hJ
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Characters/Windows Hardware Insert.wav

SHA256 71decb42b0805591c68d79a5031cf74c4e9e4baca349f83d69c7665fec1dd9b9
MD5 66e8ba6d13607fcc568d720ebddce104
SHA1 74040bc33fc2230f936750b17b80c730e6ed29ad
SHA512 49edc830f2cd22e7c727b6f528934f4537088e1e2b7ce83508cc7b026dcfa586452e6d776ff6b3e41ed2cad49fb315462b2bf6da19b75b7f75990c90824cde15
SSDEEP 192:T9FbUkqHWF2T+AdIpbKF7bhlZycZ/fp1VQqwhebhcxlEb0VXu5nVFFy8VX713RNb:TPAkMW2Kf2LnXHTfwhnpVe5V7tbEO
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Characters/Windows Hardware Remove.wav

SHA256 5eb04df0400ea11e697253a1687089d2fa8821201fd3d52144a1bcf975c0de2c
MD5 f013f38af45f9645b113445e7a31451d
SHA1 15f91d419b984b0e2def388e026b5ff43d2e5dcd
SHA512 a6498ddcf97a6c50d2078b216a3a5807330fcc7d7bafd668948e958a4604dfca8e5fffc5f83d18a0b7784ea6e19dab8d733ef45063402b0ec1df35d756308a81
SSDEEP 384:d77T/cdUrAxxQm6rO04nBFmxOSnVwUMr:d77T/xrmQm6rx4niJKU
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Characters/Windows Information Bar.wav

SHA256 a9d77218adc4c4b42c4811a1c9d2cb8c334765883cd5b5279f71b56e476191b4
MD5 d4709320b9cd58cbc076b0f6bc902f7f
SHA1 621472fcc597589f6c61bbf7d69c9e255834bee3
SHA512 c468b43ccfb1c993b72c8254fc7fae1e9fb41a95d21f5c2e664ee14295e6d22182e4a3797a6893b33dd17bf6c2d9ff11c08aaedb730feecec7eba17e5bdcf9c7
SSDEEP 48:J1DiyieBh3HQF4skYj0DvnQBl9OMpLZcOIWlaO5gzNSPvbCLhjMlQ/tJgoA9b2eS:mKj1sSDIv9OQtSwgzNqvOJEbx/IM
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Characters/Windows Logoff Sound.wav

SHA256 3b96325c878375bab3fc19e17bf98400cf8c3f90feed5bffce7f8ff2dc7bd786
MD5 ef00157305c13a20307d8f91f8694a2d
SHA1 5f7ac8f4b36668c9419b03902e85ddc1d76896ca
SHA512 10b3062059e75fd46f914a0e3a338fa8e5d26d8cc6d2819e46d5b74489a5939e546e468fa40953ea42a89082d182558c6a2f47116c8e238d5ab90307a1a9774e
SSDEEP 384:UjEs66mafrkhUTR2H2/E8RaLEEe0RGHtYoU2jMOQ8j2+4F/7U5+8s7I8RSaIcCFK:+UWqmE03ENRGNYDA2PQtzaySz
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Characters/Windows Logon Sound.wav

SHA256 935ed9210eb7f1a48d542eddb3961d371ae610ea0cf3b719e7f95bffa5156ffa
MD5 d635ce3ea2af594b70854b317930ffda
SHA1 f4aead03b6cb4165ea479e1071e2287de3fbae1b
SHA512 30555ba9b02e45cbcc0293192b4679e71525a67e7cddbf86a26a9e9d5778b2a072a2921ca41902f5cd9286c9baa97d74540f107b2106b12dc860cfca5e00fdc6
SSDEEP 768:CDlTGfKXgbYgN5P0B96C3NS2V3XQa96gSJvudeIXBBScfmWUo:CDVGwgbvP0B9JA2FXB6adtBtf4
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Characters/Windows Navigation Start.wav

SHA256 3829612eeeae380faf4cb64ad87aa300f3e4ecddd4733a8e3bf3d50d244575da
MD5 92a5b008925deaeb39866799f94b164f
SHA1 3612eeea3d375ad97e939b126307dda6c2dc22f5
SHA512 60642884c241d316c7cdd7c0563de78a53f16b5f63276fe8f8c3345818c9b8620d05591f8760eeefbf624bd37a267e2850e737dee8fd95b0b2591799daf0d6fb
SSDEEP 96:HLrA/Wq4LvMYACBGT+Tn87SmOXk15Yg7R3:HLs/y4YACcSMSm2E57
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Characters/Windows Notify.wav

SHA256 d059621670a2ef5083d91cb62646315692605306b7acdaefdd67bf2bfee5ed9d
MD5 4be003688b8992c1e2fb145f90e4ba8c
SHA1 ddba9ef1aad0fd917e6f9ec682e447fc57b7ad9a
SHA512 98974960e6d14c2cacd5a298b8b8053376a54f1d51116977dbd1e4ecf1f8fe9b7a89c8ed4d1e9888bf7492889d28b494600e58410f4f4826e6ed526a7793704f
SSDEEP 384:J4cAr9v9a4Fqr6xRk+iGTKk9ZbNl/4XENlX6ldaDXvY9JNxFKqWIxjv7k7Wq17pM:rAPaSUWRfTRboXENlSgDXvY9hFpv7k7W
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Characters/Windows Pop-up Blocked.wav

SHA256 dfb50d0100d39669f06e6bc2fbad7074fc2b94f2e2c3334be3636bd92bcd7d5c
MD5 422e3ffd3736622f2fa457eaed2a6149
SHA1 be3b38b7c55d70b832405fcb6eff905360bb6184
SHA512 ec910008cb12e11f8abd834d0e4ac1234ec8c8a2b4e469f61610a69ec5b8e540004802c907611d3019b740320ce473411724aea4bce5fcc6abda42949ba89546
SSDEEP 192:5IiTueOhl9VmAo+ygHIK090Dy8+BhJi89tO5rMnCIY/WFZpjTNZauCDV:fOf9VmFQ10a8bA5rMCIY+b9aJ
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Characters/Windows Print complete.wav

SHA256 8e256afee756a5b5ce40e573c4764aa41f6345ba915d6e966ad5a8e374c3ffca
MD5 d36703561e0b4277538258f264e7b361
SHA1 5ecbca0205d7b26a1624e4711ed8a841aa577ff5
SHA512 5aa4cc8dfee4e20ad2ade434c0de7509020d59c16b95de05bf7d43f3498053c68f329cecfbba15925336a5537977db4637a5a252631fabce16f15585f82ba015
SSDEEP 384:JTG/gEJLzzU6HRP6XFjaXDRBwEwhnSFCHArYT/U1uXn8ucUB:BGhVzHRi1jEXwlSFCHffrc
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Characters/Windows User Account Control.wav

SHA256 accc39201664a0640dd32819e6e29498fa36f643033335230efb2547690e81c0
MD5 ce9e15f09e740f431caa4d9310178222
SHA1 39c8816fe4726f6080e2ee7d0d255c518c481ad9
SHA512 2d7619c79e5b05766f301ef2d14cfe7b7c1868a69ed8f83fedbf326ab19960deccc102e2e80e4c84af80b4c0c914ca8f0529a14b8ea09198e8bcfb349a77eeb4
SSDEEP 192:5zxTpOWrb+bX3QRRrOb4l7w1Zkf/9XXooc48Zos6T:5zVpOgb+bXyOb4lwZ6/9nPd8v6
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Cityscape/Desktop.ini

SHA256 b77586f906749b00246a8d8ce73e48ea42ac69355524afe3b1183e1ac6d8d201
MD5 794f1975f13b0fb6c554d96006237cad
SHA1 4a3989d06826b5e8ed30325e3a2527f62de6ae5d
SHA512 c4e91baea7b0621765c5da6254be846acef4f90570950e02c8ca733b255afc5ee1ec3378ef479c6bf22205a780d22c5b14b264b55f5f471c66dbce7b84d332b5
MD5 SHA1 SHA512

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Cityscape/Windows Balloon.wav

SHA256 cde0cc6cead31e1c8568bcf582a414a6d785cb2469b2703ea259f2193700ddef
MD5 6e9ffebd261c8178ad2632663a144a32
SHA1 3d60ef7011d32696077e1ce3b63b1e3a08d9a109
SHA512 e7168180cff7730fd4dd0b8ee0e224637662c1eff2be23e7eb2e7eda3100493994320d47729dd3ea476d27c97d124d086e179ba4335c6ff4bcabecacd066a7c7
SSDEEP 768:rbtpzsT2ST/QQNXavDNbPiJCC5MxGxe8IAIxyb1:3tpzEpmFPiQIMgxe21
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Cityscape/Windows Battery Critical.wav

SHA256 b8fd8878bb5c761105256b9c208dbe8e76d80955babf1a3c0d45a41c690ec5e0
MD5 c3987ffcb20ae71a14e072fbb06bf58c
SHA1 8128232c3af51cf2c0ce9370e7137c677acc23a8
SHA512 d33a72f69d85a2c51312dffe680f4408187e418fcaba149f885553fa6328a38865a86fe97f4e57e8f83eab2c27d628d22abb5388e3104c533f799606eacd8325
SSDEEP 384:j+VCEVfRemp4phALljSRNP7smMPTESWiGWXeyLxjHL:iVCEV5ryhAJ+RNPwmMPT9XGWXeyl
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Cityscape/Windows Battery Low.wav

SHA256 03fd213fa42011a8320e403a67f4c0c78249f48a2ffb25b5eb73414d1c6695c8
MD5 520800db8fc9cefe64ee856cf0c0b15d
SHA1 7c0cee209a2977df62fa96ea12419245b5e6beaa
SHA512 d46da764247bbcb1cdef3e4bc2056436afded2d71223b4d5d8d28738dd9e2603badf241df259d1cce06837c9daa37d269cc5b3678b2c3ffc33e2f70e99029997
SSDEEP 384:fR+JQ42IwWXaRLBgHcJ9euBQBPWVTR2PorGPtHcrEWxvijv/pBAq:Jc/2bWXAL6M9tB7V9siGPt5AvirA
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Cityscape/Windows Critical Stop.wav

SHA256 00f0e9003c0b231d1af2eb7f2752133959bf97426f222046fbbf1faf75db71e3
MD5 268114fd58c6446a173cf5573cf69964
SHA1 0bd7f4a2c2e9c0c8b2856d6008647aaa1858eb41
SHA512 c26058ce9a9f1e983c75f079f6ace8b125d424bc03d403a2301bc036d1231d1a55444a6bf3cc23cfe2cb925b4fd37d38a38410b5fcec2cfd4fef2055fde7b497
SSDEEP 384:j7jEEo313i1hw9uyZns0DAu70VO4xEdaSgFJWa4DuVcTJorwcPXF5SkkXS:XALQkgyVs0OSaSY4DuViJoUkkk4
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Cityscape/Windows Default.wav

SHA256 d37e6e1c70a716c183cc0b1295b37ff33aa2375b7d774e21c767036d07f3b178
MD5 b8f15dc49a1fd24f4cb463de0150d298
SHA1 0c800ece83139ea013492131cb6b5da3469bfd13
SHA512 7de0b27acab2310cc51594e0927bec3af20983979cdad0003459e357e678cfb06f3cca600ae71c4794dbc1079fb4f949c1269aa40810c730500e8459c0e9391e
SSDEEP 384:E+s7jYrOCTWvwZ+4a2KQ/ZcpcySUxHs5G5fpT:kHYSCSNLJQBcpc2Hs5Gd
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Cityscape/Windows Ding.wav

SHA256 e5a5eba30227733dbbc586cb7eb74644b4ef28830dbf8ef0508000fe45d7fccf
MD5 815fcba398bd192cf8bdedd4be089f35
SHA1 2cfefb61cc2c35898380d804b9ae925207979e2e
SHA512 f9504b780cf27b6e4db404739a21fe2fcf507883da5658cf2a12d65c6986c97a7871330e64345e9a552a1856bf40491eb7845c9192e6298c0569aba93dd6d922
SSDEEP 6144:B3ETyGfkBzVI1xlm6FV11FJMlxfAeqgPZ:MyLY1WeJglhJqIZ
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Cityscape/Windows Error.wav

SHA256 819ebac5a2653f81f51345fe44600f3f742e4ad777ca17c3d2b5e950e9622a65
MD5 38de0fddd140919b400bf518da874b39
SHA1 c3823ef2d09437945e494115c2e6954387830b35
SHA512 7e9c797475d27111c1f7faba0b1936363462ca31c3f356b0c09d6ef85c0c77e2bc0f3b18b1493e4c929cb9466f5873e479db2986961614a2e1065673c7bf4738
SSDEEP 384:JdbasDXYZ4K2GdXWi5vvwR2N3QVeL2tQCv60hF8dQ5FF7b/C0o3:XesrMv5AR6312tT61dQ39bg3
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Cityscape/Windows Exclamation.wav

SHA256 242ecf6e2a50a4ed4b62151ed3abc02ddd502d9aa7b4d6eff23a943a338e636c
MD5 b2662a807f8bae3a43bac7bbd50ebdf5
SHA1 c713a759791707f4fc0ee9f4542a97b8287a9800
SHA512 c50a72056fe2b4f74b1915cce3584a55df6f4389dd9d8605e6a73c85ddebd6f62ad2d66b8dcff01f059b98913293ad97f75169ecdbc3edb103ca428fd2007a6d
SSDEEP 768:m3X5WfWunyssyMNknKOAQQCTLw+QEJtfSxCUmjQMlM:+WfFystMNknvAQQ6eEJt6fmjQH
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Cityscape/Windows Feed Discovered.wav

SHA256 6ada89072a3af3601983cce7326542ad8fb2c3644de3bb6a163326fc59412dd2
MD5 f470faa67adcc37595355615e9094426
SHA1 07fc2137d0811cfa1b474bbff41ebc8189df6720
SHA512 626293e67c3cbb8c64994b8bf0f6c69f7d9afab3a131d303e781b888902106da503feaa9a7b856282fb6aa270f3c455a6045e71697e07f46f330bf6d9b297cd1
SSDEEP 384:p6tvLOzlhGfFx15E6n1CpMOCgNfzB8wjbUvkwnYAI7I9KE6:plh+FH5E6nwNROwvx71
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Cityscape/Windows Hardware Fail.wav

SHA256 24e51f6180e6f28664d1933394cdeb5d493e60ea6a7db79aa1fc38726cfd6527
MD5 eeb66380f0e2359f2bd7cca1e371e000
SHA1 491910c21a4a4f92e0a6bc670ecf74edbd289392
SHA512 4bf341e66e4a10f7b29925cc7f6a09a3ef1f541f75cea126f9efcb4fb08f40863f11dcbc28135bc24965523f635c898208cc9f9697dc6bbeea9037f57e3f88d9
SSDEEP 384:W6q4K5YPyG49yoAbBmYELlusYGXx/8S7mo17+gJYvf7/YzNYnpa:WB4KwyH9F8o7rX17mO+rvf7w6np
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Cityscape/Windows Hardware Insert.wav

SHA256 6d588dffea7697a16adedc83759560b29050729097909735c9a8902016f76e12
MD5 f54766baec94a9d4b221ce9b92f3a08f
SHA1 800b5695d17c657d230d49f6341754ebbabf667f
SHA512 e9aecb3338e3d6c28208c1437f34643775ac35dcc89cebef7ff873aa2f8327705c7032997a4102a7ae2dc58ccf9df29ff059e0301ec0c324336ee10d3f22f8f6
SSDEEP 384:jGw+sIecJ/wWoYtHSWRjTNWZJKOJv0jZBtWsG3jt3CGGgiuJtH:IVu8BjkblinUv3CGX
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Cityscape/Windows Hardware Remove.wav

SHA256 3d09efe42a56ed86bfee24e0dc6b0ed503391961cdf9df100ed579c8b759867d
MD5 22ec094908071f4a52713e22ecdbecc9
SHA1 e015d3bee28664f54f48ee88f95487ae843f7b4e
SHA512 558ce615fa1e062e39416b15c698ea3c72ebda379ea8b61b87a988df239be3fc326e6f198fcc657741852b994bdffd34943df9070f4df62a9f369b0f74eafef4
SSDEEP 384:jSqlROQWmOHNMpur6GMqMEBYrTlP8d0/YlqrOqYbOdGbfmOm:GW6NyWMEBc/nYxaO
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Cityscape/Windows Information Bar.wav

SHA256 8c723c2c10221392cca715f0e2c8851f020dbff7d23da3949cfe5b4b8a5c68f6
MD5 56b87abd58abf2e943336b69b2819327
SHA1 633156479974ec706d8591ea7b5b9dff03619f11
SHA512 a61954e0dc712ac078f393eda3abfd4a2dc2a8787b7cd467befd110acca55765ec929094fed48174503a001856beaf2d481ff8202f0e72137753a682d8a1d964
SSDEEP 384:RUjcwbFklGgNTSiwNO48XzrtH1PgzHpCvK9Wc:2jcwbhGSiwN8DROzpCvK8c
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Cityscape/Windows Logoff Sound.wav

SHA256 f5a84ed1684c0cccbe3746a525c47862db8bb5439634abde84073234ddb3b322
MD5 2f7db0c871e95de06fa856503c40dce7
SHA1 5f4c959638db671041207d2671ace4d1d3e0959f
SHA512 c425b10a985967995f85d06cde2c1c1c096824402ad7dd21b77ee9744a5232378c7cfd406c2197fd3831f5650b532ec5a1dcefff4ba4df1a0de85ea308bce2b7
SSDEEP 768:++J6MywccAiv389ZWMxZlnUuTkCylcTshag3MU:P02HZvy4QU4kCygshalU
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Cityscape/Windows Logon Sound.wav

SHA256 ee7decdd6acf5fb1899691ca117bcb1edfeff8ee5a1e2ca68b1c0b2b029905d8
MD5 af7d25281e7591c4977f7f38a639a5d1
SHA1 b6b4de01831c7d1b186d230f39ef5456f546f94e
SHA512 2da0fb3c4eaa39e31135acfb81654c5f9c63d8a61e571729d3f5eceec07f7f0b4313ebf5171284e1b27d57a4cd307c13e23aff6772d0be31d5214f518a681e4c
SSDEEP 384:v+GSDGmJ4sFi4UFiR/uGI9ZEqh82RGjFX08/yjGrs663DRqG3SBlVpC3V65yt5fX:dBoFid9ThhOk87sDRqGiBlVpC3Vq0/
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Cityscape/Windows Navigation Start.wav

SHA256 7030c5243cab5b992a6d14f80c5719ada924399c2df2a345cb048bbbdf93cd99
MD5 9f13aa6ad82728e0f6750131225dcb3b
SHA1 63818f4256ab17150673b3b4e701cb4c8443e22c
SHA512 704f015a3e185826eae64a5326aa5a23382b7aa0fc0e173eed2be3510c5ce35870efd4e181519682df1ffd8724ac1412d31c0912c760b1e0c5b0bcbc9136855a
SSDEEP 192:2/wWteJNXsmQ1rkd8PwpcpJDZqfD26fk7IV:g88l1reqpvlyD24
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Cityscape/Windows Notify.wav

SHA256 25dc469c901ac2dd29e1e5442327155c24ff393b61d5c90dc874cfa3d321b358
MD5 2fc53e7119b2641f220f6799df6c339e
SHA1 86e949d89ba42d56ae157f1588ae355b4c281374
SHA512 054073c480eb1ae00abb425f71bb02c18661d838132e213cc20c12a324115ebbbefde4e5961daeea6ab09f09a88ef413b25429908a1f028f11df6e3ea38488b1
SSDEEP 384:PuEv5Z3s0b0K1pI1w62u9NYTldNaP2G19rrDmI/AtK7O6RKjfpu3KjZQIsGZ:2EHc0h161p1gnM9vx/AU7O6RuI22GZ
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Cityscape/Windows Pop-up Blocked.wav

SHA256 41f4f47a388617af723ea4ea070834c0be4f0e7c3d11e94359af8ca663103e7e
MD5 aeb5127b30a1a1e85a4a4f5cbab49ea0
SHA1 77e5d906a17c33df2dc5318e913e4e66a2fcc5b5
SHA512 1e96d3c3f50dc7cbede8727315180fa42e14ef694805901b748c3d75e296bbd6d048463ff09df52378da6c1f392acecc25a3a5c8c3f225ef2d50caf3aeb761cf
SSDEEP 384:jVgBS77Ea6DJ9z0j/y0KdYpxTaoLuF1Ljnfn4MQQZha2e+aV6cN:d79aJR0y/znfn5QEaANc
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Cityscape/Windows Print complete.wav

SHA256 a1763dd8b87d13fb9b7590ba747d92bc111632a54dd372efcc56ec19bf87d865
MD5 9f2a93ee5deac418649b3a4e394ed743
SHA1 df3c284bbf15321e732e4c45c18b0deb058ccd94
SHA512 8cdab0498df2be047d96e028627ded1c84d928af5463c743530929bb922eb57123a94035b4e08c4ae07c7c4ed1ddbb71f3c925a8b55c9ca2bafc39d168d7b2cf
SSDEEP 384:jUw1tev5Y+Aa16f14qPplKNTw6TgZ5w5ihPxdvGmVsx1FIHz25X4:heXAa89T0VDiLtGmqIHCp
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Cityscape/Windows User Account Control.wav

SHA256 363f19fa0bc156c2259697cf5a9065ac86b7f8888062c000c2b856b51433139b
MD5 0bcb318debc1ff775a24218ad4e4a268
SHA1 d84b216d471f4e52b30a2b0f5ec6c855d60e1320
SHA512 f6c793a2e5441736424ef326fb7184521db04cfff0e943da223fe4f19d4773dbbf29ef2b8679af403c49c4e3581eb238dc1baa7f92695558a686a274bbaf735f
SSDEEP 384:jS2BFiKnohUi/n011GeXurxpE2yBJ2oEzma1RnKnca9+OME5:/BFvnohUi/q1GeXyxwJPCHRnK7hME5
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Delta/Desktop.ini

SHA256 b77586f906749b00246a8d8ce73e48ea42ac69355524afe3b1183e1ac6d8d201
MD5 794f1975f13b0fb6c554d96006237cad
SHA1 4a3989d06826b5e8ed30325e3a2527f62de6ae5d
SHA512 c4e91baea7b0621765c5da6254be846acef4f90570950e02c8ca733b255afc5ee1ec3378ef479c6bf22205a780d22c5b14b264b55f5f471c66dbce7b84d332b5
MD5 SHA1 SHA512

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Delta/Windows Balloon.wav

SHA256 90042c62e15c03da63604c2f136ea6ce1d4bc365c4ad13ab97c956e615b08d5e
MD5 ae985a4f630481479ec64174f744dd6a
SHA1 3742411e26e7e402ab9fb94b2ab04b21636c2a16
SHA512 09d72e78ff20c5b119d6b5f8a672cf369d7a71279feb0c78ab32b014e7dfc0e13e88e9a01b59e1802839c915764b65f438d8deed6409dcc03ce85897dc99ae3d
SSDEEP 768:ScqG+huh0DPAs/lwH9RYmzWPAM09BjbVbmftSLy1V7m/T:ScqG+huh0DIsG3ZbzRC8W76
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Delta/Windows Battery Critical.wav

SHA256 733aa19da0d761a302309e25c0e92ae81f60edfbfa803cae8b0a0c50d99673e8
MD5 6d64fb4835880f60f6f89c9988b5636d
SHA1 41d732e1c4b0476263d1248b4524092a201ddfcf
SHA512 a0597cc0459777d3c06f29159f271d44267e22cc04772568437421d9caa3a4f03feaea51cf2e1b906b378dd0278599cca46ec8dccc12e6c7bff9a02f1469a404
SSDEEP 768:NCFPZ+9fYqvo3FPjgyvMyFDDSQo6DoIn6Hv:NMZgwgMjgykyFbo6EI
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Delta/Windows Battery Low.wav

SHA256 1c0d4384421c64360384eb16760be181ec983feb52adc09d19dc0a5027d43bfa
MD5 6ba6771bbbe8950884893fc5942eba5b
SHA1 d530413b99797245aef39c0e3a426e7da2fb44c7
SHA512 2b5d40839b9837e48965f8e30a5a9b7de8cbe141a0aaca2ee7c91e29c131d8bede4a3864c4ada30d92072eb6bbdc79b1f31f881b50c7f25f0c9169dede106b85
SSDEEP 384:E24O13Zot90FHJL/9jYZfu3Mclrw204AKXsN51:EZOpZov+JL/uFucEw204x
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Delta/Windows Critical Stop.wav

SHA256 a74619088920977c7978d767c93b159058aab2f1bb23c9c325609285699a860d
MD5 440716816cb9603402d2595bda4480fa
SHA1 abb6d471d0c3f82cc90746cc81536a829a49b829
SHA512 9f273e1c62867cc8e01cc2b9a57a92d08a4798b58d9947842f8dec2010743e590cc019f0e03b73b64418769f18d9c85c4a987dcef986b0383896ff789ffb0530
SSDEEP 192:2mvHZjZnHiNKc647qKTXCo2jVC03cySbMb3sAl2uLYGq10dzulxkBrA3H:ZH9ZApdzmfjIqcQOuL9q10dzC2
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Delta/Windows Default.wav

SHA256 aa439785957cc3a190bddf2a9d9160ea43bb68a659249d9c96edbe60f3afb37f
MD5 2d87f7d890cf7dc684e8536f4ea5a1dc
SHA1 cb163a3784b67edd2dd0230300d4e46306a5510f
SHA512 a165d3f93ae0ac1d5b6bd26f8218fcf3922385f4cfadb0edb96f502cc029b81bb67bfed2c5ce247f9242eabd520a2145d7417a8b47af663838be5d1662efa96d
SSDEEP 192:o6T8DtUb30TTdH7YbHDUu/1Mm1iSnuptjq2zXGMczN5y7SzUxenCXiEKB9c8wgTt:o48DtUb30TTu5d1tup82zXHczN6SwxeR
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Delta/Windows Ding.wav

SHA256 7e710e48181f9b6fb5502c8a66a37adfc82c2b7dc331e399bc5735a21020d2ea
MD5 2facbada4c113e06f291469de0218684
SHA1 105f1c7b571b753105d56ab3a797efb5ab269ddf
SHA512 4604e4e8910639bc877e0053c5032ba5efd29a0ac54851ca893353b5a0121c107a5786526992c2b26be32a55820992aafac3a86513d062e69befbd4c86ced18a
SSDEEP 3072:TmyU/rHqnaxsYVExGT6bC9lZ1vX89N8DKGDNpm9M8YCTwyh:TJKHMaxsYrl3vX8922e38k8
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Delta/Windows Error.wav

SHA256 0f42cda38af0591ba813fafb8d3b6c3ec16f29a93d99c792c03c04ebcd805f64
MD5 1b3c71751196960e9f7130132fedce27
SHA1 577f240606f88c35bf02f9f0924c0775d476f62c
SHA512 3b1e23b79777045f9601410254675a9418255b7ad25b95dad900117172940a5e72a4932151bbf633e5ea6bd4fa10e9f40d6a6aecd2184669a5f08d415a273eea
SSDEEP 384:VMQpSwRLXh5iykycEUhsu8qSgkOTFVz/1+RLq:ThRLNkPhsu8qk6FVz/1m
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Delta/Windows Exclamation.wav

SHA256 57c7b34bab1cbe7ae726bf174391acdd345e8618bff293eb09fc141974021de2
MD5 7583be187b31a7b912119b8d457f43ff
SHA1 47f19879701d6c78a499f1dd67aeea1125782f6d
SHA512 0a2deb79a2564128906c978f614a49a4faf6be55cde00f0e500608482e487ba6f0bc6a6b16d015b684b32399815b27746d2e58403d73d594097142ee24a1bc93
SSDEEP 768:bt97Un/jmFohr/OcT1IkEmbRvn4EfRgZfsIDhE:bEny6hr/OkZumRc0OhE
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Delta/Windows Feed Discovered.wav

SHA256 870dcc564a83a3c7a7e1f99b206c2f348056a1baa8de8c9b5e6145374710cb71
MD5 84a098d564fb52913834271af9013a8d
SHA1 52879dcfed55afba12af256a5e90fca005a4e972
SHA512 504363e1d350d84baafe4d78f429f7b9462cc75899c1b0418bc743996f183973b3a211c157f95c5dbfae1ea7227c3c8939225e5ea191ad49b20c6eb63ef0472e
SSDEEP 384:p6LXkV0hTpX1Ru3hlhQnb54SV5/aFOuciVgM/K9zLkg5p9:4L06htXPu3LIb54YSF2iVgXZYg5
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Delta/Windows Hardware Fail.wav

SHA256 a7100f05f1fc73bb649a062e2ff6f309f0efe100157bf6bbe21e540cf52373e3
MD5 6bd011cf60ca1c5e4f45652a92786e51
SHA1 8b62c3ab5cd520fb2869d10b22c392085b60aeb4
SHA512 27730646d3497c14dae5e983930b89e8286df923b061ff51a08fa5720f9d3ce4e758c3959e54df911d973c5ff3c28387768c0fba193ca736185ab0ad31e92128
SSDEEP 384:Qa004NVe3gBamVpaznV3KAOqNUBlOl871ldX:Qa0HfBtp+3r7NUBlOl8vd
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Delta/Windows Hardware Insert.wav

SHA256 29b590c5c5602dca9f7762b68004ba67e7ff6ffdea8d820b846f5e401962790c
MD5 e06cdc8c5158d94becc6787e32211613
SHA1 378d5be1fd21aa52f7f9a932c8cd272803e35159
SHA512 c1697706f48ad454acf361d97d6a3a1b9d20ef6c8bc9f8c8c1eb57230cea9a4b37796018287c1f880d16ea29bba253351d19ded652a428cdd576dcdcbb7e35a5
SSDEEP 384:1sqLwTgu8/8Ib9zh7QxKfM6rSFeCE8AK5N5NT:1J2CPh70KfM+SF4KP
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Delta/Windows Hardware Remove.wav

SHA256 f8bf3e9d0d26811547917de28afb05d087ac3b6222f8d1c40ab27e30fe4dfef3
MD5 59131782fb87e528214d24b6f43a5d2e
SHA1 f6693191e0e28d007a7dd2ee0d4c1e17b28e956b
SHA512 679e2d941d6552713a8ecd9bbf60fa3dbee340ac87a67943af4e5525554b311c0c05ce2d31b65182f77ddee51f5d0dd246362a3e0334a22446cf99fa0a7db716
SSDEEP 384:e66V1GexvtKGQscp265qfAmsS4PW05egnwT:xtSFQtp2D4m3+W8w
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Delta/Windows Information Bar.wav

SHA256 60ecdae6f63e5977c4c90a5c5e4a497ac2dda1f94e480bd3f8747ceb9a569bfb
MD5 c69d718b43a45b85aa563f931d80afdb
SHA1 7d828b525dabdf9497238da38eb8ea86cf27f979
SHA512 5e6989e7951e5da2ad711c48d10e97dff27a4ccae11b929e15780b18a5df2c5e36d48c850779056871ddbb1ab5916e3573682c13235ad6fc0198ab9386c433e1
SSDEEP 384:cnyHw2O2q9c69Vds8ZstWfjYAlJHL1Ybb+sp1:kswb20ch8SajblJHLi
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Delta/Windows Logoff Sound.wav

SHA256 25bacd27cf158565fc2ba32a3a585e7433ade40f598bc741228038a1cded7e4f
MD5 0a002382aa4340fe8b7df7ce5b6248d5
SHA1 7dcd14416e52ebd8a21406004be8ecf898849697
SHA512 1a3a4955625a1344cb67aac4f6c8eb5d2fa0368f546a5c9166b699fbb4e2236058e063be79656eaf5bdbb2f698614151137102c04d0a50139e648d6ed980cf92
SSDEEP 1536:X6IXWegWLEzXJ9Rql0InU4tphAMWwALIla3UzFaH2:XSW27rInUqphAMWQ7T
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Delta/Windows Logon Sound.wav

SHA256 552e98ca04c7e3e24e2d2e2822c83d145e173ccbca44f7d6f3a925e88826f3e0
MD5 04eecd5c76fca0e4f98e122fe127f5aa
SHA1 edef892a2ea719fd9db4f1219ee87c3eef504a0c
SHA512 541e20bf8eb62fce16b7079bc429cf392aeb79a7820556d866f03e49501112946e5ed2ed51d2124ad153a98518a1db78caa5865b7105efb5ddbc52c1fe0343b1
SSDEEP 768:ZQb/XDy9LLSJkIWE3avgh46ENJnqv7HV9Lo7Zv9s7bop18g09YhhY9i:eb/e9XpR3vIENJnqzHXoZ9ubop1ZhY9
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Delta/Windows Navigation Start.wav

SHA256 20bffcb4a0ebd06f7166a85f4fb76fd42280deba1cafdefdc1c72c8c7d928b9e
MD5 e5139383eb7ef15ce0a6736eeda96319
SHA1 376ee0789131ad89a3c19a8ff140bf9cf92df335
SHA512 df590cd0f8dd800f32bec263f438feeabc411587caad11749d933e933266416a77d4a2aae3d42c81602cc996ce07ccdb93aa9b7333a33dbe3a5220368e3688f2
SSDEEP 48:cxPfbWQvq5/qLY7x4bbiwIik+PgwKWFFIq+fCHH2xgN83crJr/CQhkJQ3bQ4jLp7:cJyv/qR3TrPsWdvHHWIqcrh/FNLbt8m
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Delta/Windows Notify.wav

SHA256 b420864361a2f4b3e541a04ca661aebafd4d5bfda9fe6161f2bb05b4a4ebf9a0
MD5 855cfa639ac849326a512540a1a6c166
SHA1 a19927bcbef244aecfefb2146547342e32f36ea6
SHA512 0b80f7477d5e6b8fb4583df7d6fab594fabc2096ee9292587c8bee6230aa40af3ac19cf6e6c476bcc91dd68a27ed9ac078a41fd9200cead01c521a68a82427e6
SSDEEP 768:UYs5czzP3OJdjwawMdazrBWyCri8SHQP/acW:CkTOAatLidb
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Delta/Windows Pop-up Blocked.wav

SHA256 d9e25ecac87fa877dff90caa19b1e58736dc2a33657073f89b16bef703deed47
MD5 8f1a412a5a895fbd18d5bfde96f242a6
SHA1 d00d4303be4bb5440a8de2ba5e1bdebbe40a09bd
SHA512 30a5934e9a2ae5e4b46fcd5c55104f443724fd1e8e594c16d8e41af68d54ce2ea8030be429f5aa43963104b3104decc266f9ed9147593b024328c28ddabd7c57
SSDEEP 192:etv8dLRk9uVBtMrnwpE530nc4kb6h4RD0qzgd+zrPOsXItLW/NVRYFBKiNF:evXuVBtMDN0c4k2ODDnPVXzNVyFBrF
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Delta/Windows Print complete.wav

SHA256 ccac6c51cd267fc8b8d80c0329ec5203667435d7fc22d868f1563a2cffc33a25
MD5 1140b1877baa0dab6dcfaf94ef9ce9f3
SHA1 81db07248d99b356770e63b122e8b4c4a6a74193
SHA512 92eb995fed75973ff0458b641dba05c0bc1276e096817ae48579cdf1af14a7e7ee888fb9b7c99e5bb549625ea049710abbf855504071e70d3e3a92af7deee7d6
SSDEEP 384:TKWTDeAFbhr0+LUSjd6Zrx478lacziXjzwUp2jyRaTjvtx5bdHT7zPJrVevcT7Gc:WUeGy+LZ58laKiTz3gjXT/1t7Jrhpn
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Delta/Windows User Account Control.wav

SHA256 edf1c6604b912aba7f33377155d13ef8212c7e7f25e8bd79ce5ea8193a52500e
MD5 4f15e6684be160d0640b1dd18c179720
SHA1 66140288095811fa47c4f418d4ff7c8776348f88
SHA512 0ad9d2bc0e23dd3346413410133ba97d86ac328264ddc91a10cf1f1b0ebf387e92d2a215955b81f90cc59f01d91c5694cfa0a5cf48867f39ef7cd23143505cfd
SSDEEP 192:BZeWqkPiVu1JBPCIb4v1qpIXiJ6znOF9k0Ktu1PD9QBS0QanPMJwkKlr2L:B/RHlev1+SiJGnO+tu1PD9QUwUJulK
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Festival/Desktop.ini

SHA256 b77586f906749b00246a8d8ce73e48ea42ac69355524afe3b1183e1ac6d8d201
MD5 794f1975f13b0fb6c554d96006237cad
SHA1 4a3989d06826b5e8ed30325e3a2527f62de6ae5d
SHA512 c4e91baea7b0621765c5da6254be846acef4f90570950e02c8ca733b255afc5ee1ec3378ef479c6bf22205a780d22c5b14b264b55f5f471c66dbce7b84d332b5
MD5 SHA1 SHA512

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Festival/Windows Balloon.wav

SHA256 ae5397011aa3d7d818bbe7575fa99e9152a8cf3cecba404064690220e4c41f3d
MD5 b1998239ba54ee51e3d596f6121e38d9
SHA1 170a76d8e2bef767bcc0e8b3ca52db9c79cc1d40
SHA512 f442a880fbfd9a27d7215c3752aaa3437dd3d88481c61406a949704cd63162fef76443af29ef669b9b657940a7b4726d8f463e7dddb7df4d282e209971c1d3ae
SSDEEP 384:MWo3rMuHN+xrN93v+lv3M1XgcmF/L4yq:MQuUqvyAdcyq
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Festival/Windows Battery Critical.wav

SHA256 2ff3a1308ea79135144868cf9ed304f06173ddc20b7bb96b590924e2cdba901d
MD5 21d3fa31f5a1142bb8a1866f82fe6015
SHA1 d521d98dbcd59316c544ea59fb5822cc945cf731
SHA512 192ffb82db7007f4a5f4af1ac9ca769d85608e97910dc32c23e4c8623ba4aa21a0b2e769ca75e3860269cc9b0c4ca29b0ade80ba7c8180762a4708ebec7ddfae
SSDEEP 384:p6XOPvddK/l+n4xkbfMqC0wQOhpmscHz7B993ma8uvqZxTAQLLP+Znd2:9uknwQQpHcT19cXmqZxTz+Zw
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Festival/Windows Battery Low.wav

SHA256 ed3319313cdb2756cec657b316282d996cc7df01a6ff404395db765fc4f7370e
MD5 62df1cff0d99260bf11d1ef3e854cdc2
SHA1 27382f831afa143c1c487993c0be702d64926a68
SHA512 f25c8574f409d1d4d877fa2ccff95410f338ff4fd0b2ff94c0a88130430f415537dd6e6810467fdd8a39732451009a2e75bbee43b9f0a7f856f21cad95ec946b
SSDEEP 384:SWW7dh2aZgBLYyX7kY/7WeFHFYfdQNu8:SWW7L2muYWkYDWebYfdp
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Festival/Windows Critical Stop.wav

SHA256 a6ff212983350fd8bc858f2c9736ed284fa894a7b658b16d779cb6cecee9447f
MD5 ec600170f92edb9ac250ab6b910b2ef6
SHA1 fce769bdbc3fe57e4e5f93589eb26ce24388bbbd
SHA512 32204573d01104a6944bba1fde09e21f63aa68c30e0385ecf3e6567ad73935f57781fb3b9d4f0b487d61947bcc3d583d34d2c298c85c83d3b673560dbc87cf3b
SSDEEP 192:Eu3hHrU2cbQ24/kbEZSy6spt0bziq8jrfQ2X7WGvUkDOOFuXdsL0A4ZqqcmQ:dHdkb6Z0Xiq8jrf5qGvUkDOOEN2RxmQ
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Festival/Windows Default.wav

SHA256 67efa8f9a4a4d19f525da4b5027c27e5c5bb1ac4cd3460462dc7b595530d3b7a
MD5 15a89d99055ee07b2ed2504d5da175bf
SHA1 4292e6379e454101651b0599abff6fb8041cadb6
SHA512 d2c9e2eeb58b37ea46e865772bc789f829c011d1a81e7cd971d54de11b559ebb1efe2b01b599f5ff1dadb1a3a5c06ac3d746d765e1f154673861e5d7d8368d48
SSDEEP 192:YowfN8Gwo0b6rOcugiPcIuDKFhR01UFAhfqtpbSFkiZQjrbytfmah:YowlYb6icugixFeCPSFN0Gt+a
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Festival/Windows Ding.wav

SHA256 2802305319f5b63878c33b0020fa17fd022a4c6c1e12874d5ec0e07b94bef95b
MD5 9b8937e6edf5e90738e33823dad5a510
SHA1 8b0da52c81c6aa80ce4767cc8b53397c16187e96
SHA512 d4f0708d4170364efe39d8c454d9c00e39af68ba4d98f7fec7265e15b3662201ec3723da7bab845e09ca1ad6e38c562a7ff81f87d394c53b2a0f2e9af57623de
SSDEEP 3072:/8LFu5TfviRxOcvmQOzw8smURwmUA+2Q/ZVb:/8uTIxR8omURwmo2Q/j
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Festival/Windows Error.wav

SHA256 5b253dbaddcace45c8dd422c53e147bc6ed7a4359a8b6ad9c101c3085d368c3e
MD5 4676f8b0be680f71cd8f88c5a3691fa4
SHA1 43f3a9ad93e859c4048bc6ba1a7035100fe3e9e6
SHA512 43c4731a244f9697bab5aaa12f560e76eaee45b5c2af66ac4dbdcee0c5a2b0b4d28b21d04b1a3e05fa33900dbd315c14b365da3af769c53732de55ad9a66d4cd
SSDEEP 384:AkTfWahupCbfhheC+4xsoQTQOPnD+80pr6xJth1IiQuhvSP5BMeF3:hbfhAusoOPnD+Z4L19QuYPvM43
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Festival/Windows Exclamation.wav

SHA256 7a012481f9269376e9d1b1299536e5fe9ebb1b345083de5def6e3a0537f55cfc
MD5 8faa2ed64e78b162d51661897b52b6b5
SHA1 653695e148f33b415e5dfe20fb9d7f5c640bd107
SHA512 a3b87afb03cd6211d836e8f7084223054316da44affda09865b86d371bfadcc801eb748c8389ce7bbd9d70b919fd62fc26599bef9466a89483fa32ef46c8ff6d
SSDEEP 384:pq8R7aalsTY0UFSiX8GtCStn31g3QQZ7ZboffQn/Ae7dFoWBgd4:L3lGu8GkmQQqFbz/Ae7PoWo4
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Festival/Windows Feed Discovered.wav

SHA256 26e7c936585e21591f099169c6efd2b06338a8130368723d0d5379f9b6bdfee0
MD5 d164f7f221fb5216ca0e2984d9ba37e7
SHA1 b508ae457486d3e925153e6b32061c39a0300162
SHA512 9eb88350302b268b1026b1730e458a854ce4352288ed9f8235e6ba96719cd09e916bccd2d827a1b7a454d2d2e98e937f8e2c8e331fc18b2966cb7d1144b5d65b
SSDEEP 192:qhvENeZjXZjUwunku1/icP5vclyZ0z8RvJa6Rm9012mFV:qBxgwunkOLP5EyZVd20E
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Festival/Windows Hardware Fail.wav

SHA256 7121bfadfc21aba7eb146331dc3a233b291f1c4965e6681f0a049d829c9e04a4
MD5 8dc3d73b88fe736e4607b683569eac1b
SHA1 f4867914210ac9aac0c8f023aeaf59327d13ae9b
SHA512 da93d13d4f0585c7371734dbdf77f60873df9203678d7b8bf6171fd629565c6f73db6321511b4609a513b4072e7e20ff06ba09a09923611113dd2d6a486f183d
SSDEEP 384:eNTfwp0vXrGxH6WBfMqAUeaGIhR8slBUQgP4kTppi2zGK5:eNDwW/qxa7DLlIheskji
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Festival/Windows Hardware Insert.wav

SHA256 5b18e063b4f4cad84b2343d496ad2507b7a5092455d80898683daa6244eb3342
MD5 e018ed797189eb5431e089eea9a6b04f
SHA1 d82e6a11ebecabf7691720b3e9efae06018da404
SHA512 2ef3683821fb9ff0c3fe012e4006e506b001fb44eb1626821a6c89fb3c9a04e365c0c17e4bb8be068e2fe87825fa48b348ca312e0800fe166aec527c5f97f58e
SSDEEP 384:qMGcZ4u9tiG7uri8H3maXRHAkm8XIJeUdLs9b:rV4FG7ci8H3jhLnUVM
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Festival/Windows Hardware Remove.wav

SHA256 dba7cc07e892a7db7a8517f60e020f1dabc86e854b178cbee6a17d285b303c7f
MD5 0552dd23a2b85e4c92e8adf878aa7a9c
SHA1 c2c1c666838821ebf1ce971e18d721925a14ec50
SHA512 e4665aa600cfe6d74a212f830540a5fcbf8e61583d40c990eeef7f4d1f2ede5ff93e56f5d9ed3fe1df2503ce239dfa4e4708a09f581789c534ef1eae66b990b2
SSDEEP 384:XbKW6uEqsnQ1zg+vJikrTTFDCkHn1AkteST:LKRuq+LHVD3HSy
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Festival/Windows Information Bar.wav

SHA256 ddebaadf64f2087268cb9c0d1cec0cfbea4667ba9b800c5ba862570940f850ad
MD5 830bf471ccd12188972c9a76a059dff3
SHA1 5bbe0815cb70b181e516c0335c2589e8556d6281
SHA512 abb7b01e7b7b8eb35c46056c2021af4dbe4e3b1bb052ddb1b0b6488f88705863a66b59f939565c2a86cf1e058dceaf4835757074464dda913392390b21d51e6d
SSDEEP 192:dpduXKbgopLtamstvzdwgfmd90BS9MNyJxRoXpdAyuEbMUwlbEvMxWOJNjEjYu7v:c60jlZzdw4g4SE8no7APjx5JS9r
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Festival/Windows Logoff Sound.wav

SHA256 133345f8b556418a0cd12e8bb27f1dfef675c0d7daff5016514b660535ec6c92
MD5 1d415eefb884129122c43039a0f45555
SHA1 98eee1aaf72a680a7f404ec4e65a434783407f57
SHA512 9ebaaeb43d6e75361f7a5785c3a9f2e05cc95b933ce7a2af8861ca09a59d79364defed42dd048d98753588c870985e67a65ed7f80993f61b27ec6685295f3926
SSDEEP 768:51LdP8G063MJupKMfJSQt0N9qwVzxxO0YZFwN+k5q8jnala:5/PS63MaKOJLKVV4wsh8jKa
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Festival/Windows Logon Sound.wav

SHA256 f4ceb7c07c2c484a8e6c08dc84e9890eff0d3f5f1b86ae5550810d72ba4acc40
MD5 d0c6db550ee51414f545798d54f97908
SHA1 70c11b43181f5d59a8494e492238b2f7767b9688
SHA512 4102c73204b4e10bf3a9319d82b5bcaa39dfdffd3ec482beb99a11b994676cb1fc55540e18656776c5a6831a92fcb290d539853bde03595211e86d790dc36ff9
SSDEEP 768:RNcKhksbBwGr85CLbrD6EjOiMG5Bp04RSahNUf:RNctvK8orD6QOw1Saf
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Festival/Windows Navigation Start.wav

SHA256 8c15b63bdb7b9aa6d55fbf14f2380bb98a7db24b63f0c78196d2ebf0371cf5ed
MD5 ade8ccefe71a2bfe2d4d2148e6a3e403
SHA1 b41271c4e92472cff8667c23e3f05e2b7cd26332
SHA512 069438f64b465464da8e83fa820c83f7abe9f499c520f37658043bbeca173422376bf7aff5914e9d05f233afed292c57c0662a7f717a9f3ff17179e2b89f7853
MD5 SHA1 SHA512

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Festival/Windows Notify.wav

SHA256 bf565ad491aa0da00d8cbe019f50dd5735080383b0045aa25a29ae1e2173582a
MD5 e6b48a4d0619ad28e73f97bd198eddb5
SHA1 265da7446eeec6b12c17ec78263820ecda8c40b6
SHA512 6bdb84ef9b639d0a646c7455bfc03caa080da30ca8255f8d312be4ef96cf65d5924dde266b255c816bdbbd10537c249e4904a219fdfe0bcba9054631ba4cd7d2
SSDEEP 384:T0ma0blUQCS7ejvSqhCvHN4JfsUaF51ho1xAOimuynikVah92f4iStLL2m6xNnGC:Qmau1f7Koth5sdJab2fA4LnGx
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Festival/Windows Pop-up Blocked.wav

SHA256 bba5e37cde216bdd8412105fb74230aa24295897c22143ed36f839c95b49751b
MD5 d79d42b58210d29fc4c3e2342e72b3ad
SHA1 10ebef082613a32ed8532d6997e643c1d9e768c2
SHA512 a2884b44e58c16593c7cf70ccc3a9c96df55672bace4c056ef730691020ef9ab14c4ef3d54874359d55a1245c47b6de8d1e07c2547ebe5523c9c81cbd9ebb2a6
SSDEEP 192:m5N77Sh2d2ereKLCU+E2Dyy+JprM6cSVUpYw0GQ1JVWUFE:aN42d2Od+EVTrM6HVbwLQ//
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Festival/Windows Print complete.wav

SHA256 ed4e9f54fd12b468aa9254b415be2f8d67596badf5dd105e49e5939866e0628f
MD5 1a94d2be6e7ce5c492bfe0e638c860d4
SHA1 d5b138060452ce45259e50225eed142eee185007
SHA512 41542ed0a1ae56ce2012a91668607a65c8fc2f273a0f54c08cc1676e2ec38fe6582a747b387a48083951ea174c9eb2645767b2702ca2d449776066093ec8b6df
SSDEEP 384:kPXanmpZ85b6xpSV6FcAsq0viMklqmTiRCD:kPKvegYcjBaZdiR
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Festival/Windows User Account Control.wav

SHA256 45104ecac1366e1d9b4ab82c14e103e917ce44267d2aa6bf4b88c8d4764c6ca0
MD5 4cc393b68b87d1f1b345e5f2388b9ad0
SHA1 f7d3dcf81e0cbc4e667e149b5262919854c08d81
SHA512 c0de40a8c8baa4bb2c3ef574fc9660f4a1016c619e379b7e0d3c40cc76f9a27967da6b0d314f91f0c7fe66e6d9c90977e8e210023106cc2d66b9d7ada0a3dd18
SSDEEP 96:1YIonenH1MDl2VqlKQe+6Z3wA0J8hotKPRdpALh1I92dwOuaolZScbG8TkR+51xm:jHiDl2VaKQehNh0Ji2hFwZd3dXgR+F
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Garden/Desktop.ini

SHA256 b77586f906749b00246a8d8ce73e48ea42ac69355524afe3b1183e1ac6d8d201
MD5 794f1975f13b0fb6c554d96006237cad
SHA1 4a3989d06826b5e8ed30325e3a2527f62de6ae5d
SHA512 c4e91baea7b0621765c5da6254be846acef4f90570950e02c8ca733b255afc5ee1ec3378ef479c6bf22205a780d22c5b14b264b55f5f471c66dbce7b84d332b5
MD5 SHA1 SHA512

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Garden/Windows Balloon.wav

SHA256 63a971dca180602f0d1f13900e989e53809dbdab0d0ee58124e1a31ca2a3274f
MD5 f640140fe5336d9d62b1c1906980c4f1
SHA1 40bbec8a01391c411492b2cc89e5f2b694567883
SHA512 62f22c24b3550e636ec4bd4dca164f195db4e47743ade6841d6d30c87055fd7c9587d3ca0c2db1400a3c4cac91379e3e317beecee07400ec225958a4c590a4d2
SSDEEP 768:gRP42jQqGHCiiim9av/B4GPnmiggmLJOx:gRP428qIvifubnQgmL
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Garden/Windows Battery Critical.wav

SHA256 ddc99fd1f024a46499f917c48b9188f3ac476f2612a32e3d821b99272f0dc244
MD5 d65cc91fda090fcaaadbe7885553b5ec
SHA1 6fd137cb608b6bd6b80c31cdba97922ca8064bbf
SHA512 01c07a67f541911e8ea86082f39e3d576d250038b112e6d7e48737fc976f3956dfd0248221ea78936c4fe25835ce93c0cec3222fca4c69707fd04c3ed8dc3680
SSDEEP 768:1/pvtdmw5+Jn2XMcKdXJBBA9Nke8A1Nc55BIh:V1tdmwknwMv5eNFXc55s
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Garden/Windows Battery Low.wav

SHA256 42868d5bed02593ff454b94084488db48119f86a70394cf4e0c3b243fa08df17
MD5 69ffacabafbeb66cf40c09ae462cf4f1
SHA1 76ddbfe065bfb19cb97301b147ece2b7bf6fff5c
SHA512 2578a38cada779059f6ba4e3b4d1f84abcbba25257e469409ca7afc8df659a3fe0c23db47930838dfb60dc16572339ae6f795a6177415cf174bd1b9fbb144204
SSDEEP 192:2gWYFOCC8HippNRVEVwaniSuUwIBZ7W9fsqanAAzF1Nuhlj9S/uPGQqmukp:2b+TH8pNjLvSuVeW90/A81shljc/uG
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Garden/Windows Critical Stop.wav

SHA256 8a6b1344d61639bfcd46fc645064bdcfba1d43b34d966349191c55574455cb30
MD5 c52bbd85b23ca71e05477534decf5563
SHA1 5ed9dba69bb4f4af2a24a96d8a038e2c3c3f3162
SHA512 a55ecbfb3a962f97a01bffc594ce4c1a2d609990950dfd2b2618f7f6c744d905c251f0b38db3f6abf48c48994bf7d4e21d3e4392807d4515e91fbc0e5fab08c6
SSDEEP 384:b167Hvg7pXkeU2sKdONksN9/5H4kDHdjiiJMgzQNvmx:0Hv6XkeNsbNksbtbMZgzovmx
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Garden/Windows Default.wav

SHA256 3e4dc382cd403524d0991996a537ea676e9ae831edce671021a169a366cf3f6d
MD5 665cb1471ac9509924fd8669c58adeb3
SHA1 2c62b5d8e436d28bccf004e57fb370dbc0f02ead
SHA512 f29a15d84a149a6d17f4a9c4f9470df89f420b9c22568bade51e4e2439190357860150466a67274b6468dc6f4835491f08d254e6d95f3e7ecfa1904799a52c38
SSDEEP 384:fs+jakMdid3G59aPsPxw4jWPL6TJIAA5sRyvxBopCKke:kWvQid2WqxsPL6TSPVVKke
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Garden/Windows Ding.wav

SHA256 ad5d8e492e89dba5472db692b304d7e07b377c1abaf8e51298b2e33553af409d
MD5 4c7d30115ba1824363ff0434214c91a6
SHA1 0452097b2a3f6e6797a60e78f98b9b18c77fc70e
SHA512 36a0a9680a8baccbf51d657ae8ccd38252d2f805afc7e3bcc38ea5c02039d92aef8108b3604492792bb3ee9b09f0ae8fd33234ed37b76391b0f1c36f72e2874e
SSDEEP 3072:6UxQeCqsT3xe82gRP2qc04w0g+ikqSZFWbQCZ:6hVqsDxp5P9c04jie2V
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Garden/Windows Error.wav

SHA256 c05493bde4e9923bd472e478a5956ca8bfe1de147742b59696c48b8a17938a83
MD5 1f4060cfc6181ca44866b64a0e5393bb
SHA1 2d56730104551bcfae480c170debb65b92edab08
SHA512 0203465e75fc0eb36bf11830932ced43887996706c56d2e033168eeb04811779aa36042db30872a2476cc7550fe6f0c32dedc66f940fc28bf1b5fff3a7153a15
SSDEEP 384:kiBvs31bUpJhPJgHBSc/Qm8C0Ic0IUnOp6cjD9IZdY:rvo1AbABF0C0YJOEcj4C
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Garden/Windows Exclamation.wav

SHA256 6ca5d9014bae12ec970f1aaa1f96f4fdf92ff59f690398150c9202e1d7645573
MD5 bd49215c0c4b7c0c340ad0383f6e448d
SHA1 a405e02c16986d26f5878054a5f0566a1a83fb12
SHA512 05d851b4adba98aa7f58ce7f4ecdc7228d49903316367cea8c1f7ee8f648029d4c27f45779fe2434170afb9de0af2e3d7d1f548fc458b1d3e82663b59628a75f
SSDEEP 384:iQwFvf6SI+A+RFOmzxbhQkZsDGMRIXG73jorjMto:iQtSn1FOq4k6GxkjgM
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Garden/Windows Feed Discovered.wav

SHA256 ddd64d6b1bb065e5aade5a62af11fc2186566a8a46f0f03b15a4779cb0ceabda
MD5 fc296d18562c8d40bd3d509deee88257
SHA1 6aa8986776cbf262b05b3346e34d1c640fee952d
SHA512 5a6b133ebe7b4504a32c4067164772eda175213d3e04f9dd3646cf1ee9461da8bbf4294bf9b8e0250dcf1e96ef9dc32998e309458a5ed7566ae841a00f6fbee9
SSDEEP 384:VBvkRMwkZR5xHhOgqmZngo3tnz4Pl12FRWCU8zXsB3vit7hM:XvkqwkZXxBOgx3l0Pl12FRRU8zc9
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Garden/Windows Hardware Fail.wav

SHA256 699888b7af5b1a6bc6b4306a48a4395aeb7c4fc935c5ae35f760cbfc47bc5799
MD5 837ef07e017e105264e4e9904c8c65ae
SHA1 6764e95115a7cf40fb146076f24a8239c9c971ac
SHA512 e1583c9d023767caeab4af12477ccaafcebfc6b877d80f493376388ae30cdb18f16b8e1e66e5f43d1cc75579da1b6e9a61d2ee9a38b4bfd51a037fe3debbeabb
SSDEEP 384:fglTqthosPJIB/5exIj0iofjXXXSBJnngzd1zdLv5ulSdRaqE9sK1cXG+uUa6KDJ:IlT4DJ2IIofj3SBJnnkbN5uYRaqE9sKB
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Garden/Windows Hardware Insert.wav

SHA256 cfc210e7c765fec302340799fd9d55c047711de6a07929f25faf8c825362aebc
MD5 a1ec0a4e6c3645ba0c046f76aad6b97e
SHA1 c10d46e858d55cdae7f6ca4362d856bda6d5f6a0
SHA512 d2f061b943aa8373a0bcdfe4792d73a99b00d5c9f63f6da2b0db303a444a2e29117bae12ea8adc6527b85f98a97244fea6ab8ebf758a8aef52eec0fd85d6437f
SSDEEP 384:JdWE04GFa2OsSALCQrSrsR6MZVA41YREw7Bbso:JMUG8+SkChXmTYEAbs
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Garden/Windows Hardware Remove.wav

SHA256 0f3b499f9842f038b9c3a64ffcbb8257b257be3d549721d7b3e4d0a3d9dbeae2
MD5 09698a48df06643bfbe0cd2191889d32
SHA1 a4dfce3a782c69d72773618b4b5735ab8b12b768
SHA512 cdc2e607f1c9d33b3f6a61726309795fa77b611f2cb40fe106e39f8fc8da3baae20743f131321d07f3356b1b85b2ac4a12bff9b2b28acf97bdbf7e3d8991b377
SSDEEP 384:UMjKKAhiGvZnYyNKKVipoz+JJWlSHJrFbV7//BSw:UMjLpGiyAKYc+JJWlCpB/ZS
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Garden/Windows Information Bar.wav

SHA256 20fa117c5af9af2f7f60626fc732ca2939f597288c3f8244719a46ca2e521c17
MD5 5775be612c98711cf96b1f951ee461ef
SHA1 8af6ba15e77a2055f986ee3878eda8dfd02fe16c
SHA512 dded0b1244b63872f76e26c02e33f76d71e99cb61db4afc89fccf59b9fe22cc5f1141129eca6d922d8f75fa3ad782a38fbd880b6073b5bfd28b8b89777d0bba1
SSDEEP 384:WLxUKD6lB4XkSKnPaZcjlTz0MyWnsBfdJKm:W1ULlLXSZ8TYM5ns9v
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Garden/Windows Logoff Sound.wav

SHA256 b88280ffb0bf6210b9231c98fce2e8bc3a1369353ff18ccbc9b8b4e6dff65bd0
MD5 a13168222145316c2bc464f628f27bc7
SHA1 9de68608872a8f4d9b8a4abf056fca87d9e7d4e2
SHA512 6a3a883a41e3b04ff98228082f42bbbb593bf5b6757646fababedcd5accba7930e9d6ca9ed11af474cbbe15eea795104019c763f383759d339fd94005db38200
SSDEEP 768:FxlpeIjc+ft9+RyqHdA6/q8Jk3ncPz9vOEcCAe7s:FxzoC0qazVOhCA
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Garden/Windows Logon Sound.wav

SHA256 0e0c26b818d5851583c9d6c1aa5908a2f9017cd6a87d7f3cc5caf9b8e85db653
MD5 32e1dbc5545d72a6b89aeb2320f3e0c6
SHA1 511e7bcafa33411a52a9928e7e7d6f0be5c48f33
SHA512 2ac19308cc8faa6e24ce8d823c4103ea966f4ced61f617f8c6f7418db57224dd2da59d43b6e591dc981d265c78bef77f39bb4cd339a339d935d30d419dfcff34
SSDEEP 768:BpZrQs1kiUvDTxxxCnEexu/58dWKpQjEtQslE9q8RD58Vb+9:BpZ+1bTbUEeY/5VY+nhFYq9
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Garden/Windows Navigation Start.wav

SHA256 9806a444cec8de831339617aede398fffc528b1a8ca0d7a392af35e29a991f1f
MD5 1d44019908636b25119a1e6f9110bfc2
SHA1 bce6b399e8d19e6b3c2ebac1a9c9ec6af60f85f6
SHA512 a46aed30f10b0b15f921fe2b5fa8e951b2d54b22f5a5a4d3dc2444424d338991c1216ce7a48af0fa7ad600dcd2578243ddf6b612cd088fef0c5c33302e687d43
SSDEEP 48:cFAEa0q6Cba35B4AdPqLD8aRNU4Ww7RWLO8+QU/bpy+Jm3D+1fMCfXEG:k0hdyCLD8e1x89dUNbJ7lZfXEG
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Garden/Windows Notify.wav

SHA256 2fded9a3323d290983db266dedf648604b12e3716ec33cbfd80ab4beb4430af7
MD5 0501d6c0773c3abb108a724ad3581be4
SHA1 a130f9b2ef7d468cc422f196de1c549a2c996ce7
SHA512 55c98359fc1cca080871e9cdf93a0dd4479408997ecf2101aaa0ff409ebced4b8e49f9c9cade3139ea2a1d9210378b84f860d50491d89b03ff3b9ada8b13ea73
SSDEEP 768:wsEdn/57hdN47Wnmch9PLkL5fs3vK8yOOV:dIdq6nm/LFUvni
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Garden/Windows Pop-up Blocked.wav

SHA256 9cf8b1ab6b09ffc05f1acf08ab3a5776189380571ac507c133c1a5d04e4f59a0
MD5 685dd179ef2494b04cd4a9c6a35efb37
SHA1 cc534b4692b1604d73fb1f0919027047de976166
SHA512 ab5ddc5e75448d5dbc6da7b44996d1d1bec11c33ca5b5a925c1759c4422140f914a69ccf3833455dcc5ba28c7591980da9ea8e911492f732f71f21ec76305062
SSDEEP 192:FFvYR5YBSK2FfdvgxPYVDyFkIRCaYGyps8TAByh0/G6111iGLy:w3rKOYZYDUCSys8TAByh0//E
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Garden/Windows Print complete.wav

SHA256 03b213978f2522af21131aed16c8b86ce78f35c02feea5e0d22e27700e95ee8d
MD5 5ec11c14fdf378c1639337b7d80435eb
SHA1 a274e3be237224d86ee8c47789e17907791acde5
SHA512 369b06dc1e7d266f3893a9bfe5e47bb97e21fb4872018cf9b37e6f0860948e31cbece621577027135f820ff97bbb0c44295c3a3525a11b936d830402e171165a
SSDEEP 768:lcGK4ssQf4WnUi7SLCB17n59fbR8ofyy9iknfj52a06q:lcGKx3njNx8ofyy/ND0
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Garden/Windows User Account Control.wav

SHA256 916cc4e0ebf64c5be9f7035fbd5cc2f822d105c4324b3e9e62477d6409681900
MD5 be0203236d877d50bcb707cbb50b0192
SHA1 38eb1122532ae7cca088181c29baeecd4c73e4be
SHA512 b5d84530db086cc23ddde955d216c1e42e5186eb41124757eaa7ecfd6b04b9d1313fc51652dc1af9f69be2b0b94cda34313480359479a0f7f8766e5278473fdc
SSDEEP 768:/hlXDrKuV5ZHgTNhMFE2u49wBIeq/ImD:/hlXDr3+4E2uWPn/I
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Heritage/Desktop.ini

SHA256 b77586f906749b00246a8d8ce73e48ea42ac69355524afe3b1183e1ac6d8d201
MD5 794f1975f13b0fb6c554d96006237cad
SHA1 4a3989d06826b5e8ed30325e3a2527f62de6ae5d
SHA512 c4e91baea7b0621765c5da6254be846acef4f90570950e02c8ca733b255afc5ee1ec3378ef479c6bf22205a780d22c5b14b264b55f5f471c66dbce7b84d332b5
MD5 SHA1 SHA512

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Heritage/Windows Balloon.wav

SHA256 bc2efa27cba7d7eeee019c003ce3f9f7515b8bc01be314863532fbff724f008b
MD5 3b3baf411d88b114f9a2c10f4001d348
SHA1 ef5dc31f72d320dadfdf92aa11da4a2cab1428c2
SHA512 e56289bb035aa30d12763d019230f90776ec61bcc53e10a0a3a89aaa20660980446fe1f2dea11cb1d43a672572a885d4a14fb3d72acd728e1d320ffa897f5761
SSDEEP 384:JdxRtkVY9fsgcFArzJorp9/RSRnBCAjBnMMJ4sN4bAVSv4KSu7hm8dwpflF6:Xpkdgcfrr/ERnBXPesa0u7hxdwpflF
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Heritage/Windows Battery Critical.wav

SHA256 dbe514f211640373ad18795839da6d748febdc04c6897f920d53455971bcfcbb
MD5 07bce2102642f0a0168f1cd5e009c602
SHA1 e90901757c9050e77992481b4d55d6c356910f19
SHA512 c9531508efdda5bc76fbf2a369184f7a8e7b145487a6c5998cf10088b52e12547794af1d5a395da2f23c31aeaa7cb051f2f5bffbb837011bc1f44af87b38680b
SSDEEP 384:u2wbXogVdpWbzlXWwllOiqe8rYFyAgTL66XfwoMhqMKg1PFz7:uvTwlXblI0Jm26vwzPF
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Heritage/Windows Battery Low.wav

SHA256 288a6c9400a1c19646abd3ca5371d5c03de7ceb222bfaa29ea076575e1065d61
MD5 bdcef16a1bd09a7e3f198c315c530827
SHA1 f4310de2abbf0a9985e5ad969b7f0dba3f0bd994
SHA512 6dbb5a6936d9065acbe608edf00eef974327e6b708ce35b1e9879f559015db475da2ea91323934c69ec3aa20903521f3278b68750fb085fcacf80cbcbee4d275
SSDEEP 384:sW4FpSD9Oj7wiSmM34gVY2sd8o7YBsC/vC+UuVDOxKt:iFQD9Ri1M34cZ0j7Y9XC1Px
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Heritage/Windows Critical Stop.wav

SHA256 590d58a061e57e97d7dbdc3110281de4aef6efc6a723c92400dd14e24c33797e
MD5 d8594be8bd87c3a6c236c699dcc2fdc3
SHA1 09fa2a8f6d2a5483347ba296ad5994389b013c81
SHA512 1feba24441bd9469730c2a2c4b71187e157bf595ebe9fa2fcc6f89f55b2b7e9fa76d040f6922f2672d09f43c2eef9b020c87fa2525f44043218df4e5c1d49ee6
SSDEEP 384:vhjVcquXdeZhBjnTCdhqdJ5DiXzWaXClCaKE:5j6XgZTTCdh+J5D8zWS
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Heritage/Windows Default.wav

SHA256 d0dc83a152e1989852d801c447aedf0f57033210ad34dbddee08af53bf1b36ea
MD5 d050b7a4b9b6a66c70f3803bc5966cdb
SHA1 36956a69e6a2c1bd870a35a3359409977818033e
SHA512 27c22b2f956a7a5b6b410d5eacc6ce36f9fe5f932b829ee1abe01c717e1e7d18b37d7a43300e98fd0c7cebfaee08cde422e74c62ec40eaec0a6db60fc3a51aaf
SSDEEP 384:1Rq0nwgK+d5WhtGVUGm4awKZDYVR0ZCCo:yOGRGYVeKC
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Heritage/Windows Ding.wav

SHA256 b9f8d6994056ec81a71981b4178edb89e3d02770b6004da2ae92beb74e44c89d
MD5 aecefa1b6509d954203d07f24fa74d68
SHA1 c17dbb8e9cb8578b28273691d34a751f3d4e7a8a
SHA512 c6d23f8c44cd784fb88437ad34f8eaa3e47d7ece60ea7df8bbaf57c312ddebc253bd29b09ca25527840b2f485a528672144da07829422c3c74f52e332c6a0a54
SSDEEP 3072:Dt+OQrIxYvZ0aEGsyD1W9kV225Cd91gVm2Cw4rN+ZO0Aicc1zsQSQ5E/D4X:H1x0cy8Kjg91gc2Cw44Kifn
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Heritage/Windows Error.wav

SHA256 57c8d0f28e068e19e16740c14b76e313499c488e2f65af111d8e516348384ecc
MD5 690bc7d655868532751c094b54ffd51d
SHA1 c07f001f90ff62ba1f8b5092800d4a26240d4c42
SHA512 7542a9f5c7a4f77ad753af201ed7da9fdd468e06d0b8b33a2a2623c28c3f3cbf4b09c2631b9e447e8ae72d8ca551ac94b015733733312fcafdd48c8d86321812
SSDEEP 384:7ww6MfgudROWuXDB9KptYvJpeAGinHpQARURT:cw6XudcWuXDB99bGqbsT
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Heritage/Windows Exclamation.wav

SHA256 3cf86c82ddd9d2427c5102d1cc26d4c42e920c0ad8cfdb98e3e83e15e60ee319
MD5 9aa9abbe4863c3af895405baad44b840
SHA1 a908666016ad88d69c9242e76e7e751b4882b025
SHA512 5de09ce487358c03377b5f7d923177c8e11691f2d81b099dcab55244fd56b7cf36258fd9e5efb22d03fe22c08a5ba65b2d3cd7494be3925b7951c7f0f4940b26
SSDEEP 384:B04xoXD69/g8GeSOG2M447JDbdMUIx0L+ob:B0SgYgFeSoYRbOZx
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Heritage/Windows Feed Discovered.wav

SHA256 17b5944f86ad77c52e0ca9d98f3d8bd34be8cc7d9a68b85758204e524b867046
MD5 5814ec2d445942bdf6588fae01daa8b6
SHA1 e1f88eb56a74d4fc860c46af538a1e476bd1c73c
SHA512 3f3606923b8d24a2813c4d963c991ad4a77d0f5b06ecbd21f461b904842befbcd437f56f94a274a109d40f2e4c4588fbda9e9926d44289c9f33fa9d498a2f1f7
SSDEEP 192:bRsCUWe26Yh2mSY/Qj+6SkX1KpjxpBJxklSXUmdS6rhftM3NdeL5doW4PWbCPo:1Ux230Y/bbbbLkUwoR4ubt
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Heritage/Windows Hardware Fail.wav

SHA256 8b06e0e959490d1c87439913462d0cf959b50e6835480483f8e5877d888c5582
MD5 eb70cdfabe6cbb841b2f83c205f4128a
SHA1 7be054e3d6bf951a63d3156dee000aa536104add
SHA512 e3de3fbed3e7821a183c4fe7c06a5f21e6c75e86667aab35bc517ec2390a791797536e51565221498e618e9e292f25f5af0c48e3f92b92d703bb03cd14068fc7
SSDEEP 384:FYU0uZ8hx1vA6QcbBg1kV6ehkj69z7fShSWFt1:d0d1UcKkzW69z7fShSc
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Heritage/Windows Hardware Insert.wav

SHA256 ac66ba163c15f5cc2f2dc070b88a20a89cc0c57bf6fa93c50a44523c6df6ab23
MD5 9ed8348b91d8e831bf76c9b167f83488
SHA1 f7f9cf722b213fd6413f3bdba849edf28e59139f
SHA512 425c138a3fd181e7b821465c426d2134b78bb59c51b4fced8c8779a202127e6849d9228b775e9d3a735473092a2efedd23b29ef7c7190f6067097f1fadd0ff3a
SSDEEP 384:kIClG9Rla4QStYhXikZtAxL573cKiz/HAIKXMwz6n/rMbBx3:kIMGjla4QStYhXoJG06n/r2x
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Heritage/Windows Hardware Remove.wav

SHA256 94585b0512a34796d01c5a5db59bcf08797fc13b72270608b23d973d4e96be5d
MD5 2a1ce30c3eb409b1ba0c266d94b41c0a
SHA1 65bbf76f13a6021d9454534a2fdd2ce8eea3a467
SHA512 c8a86ee6dceafc9e6a1dfb0c1147aa5c345a0fcf8a5cb666b48cba07fb3252afe083678c6875b20ce75b4d5f36e9c31d2c108ad9c149cdc80c8e93d375c7d179
SSDEEP 384:sMwRTRFUTGVXPkCCIx1s0GM0+5IJPOTgZ6MZkKh9:hwRTRmMXrCKi0GM0+5I1egZxJh9
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Heritage/Windows Information Bar.wav

SHA256 b6b7c44c62aced4d3a7f30cf0cae5a0fd90413856c3e23113d8dfee35a24545f
MD5 f110d30764cdbc11c59e66540dac26a9
SHA1 bb59f778aa50c2b34543048774003bc7b1280607
SHA512 97816381c9b831719b096f6153ad41eb4e280a6912f1ff8f9e34946516aee0531e476442bdb378d6f913824caa34b23eba8aa7482ed8f322a85aa0a26d4787b2
SSDEEP 384:PnB00XjJy0CcPG5gcV1T24dCxI61E/OJyGDtk9epHX+80P8WiIRR:2gdy0Cc6COmIcE5mKIXj0PME
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Heritage/Windows Logoff Sound.wav

SHA256 528f3ba1175c6133105aa35ac6e69154d736c0ed9c7fa64e90d62681c21cc00c
MD5 daf6807a64ee994b701b60dc1fdb0856
SHA1 355bba05cf6473ee9621e6c990d93502c41c67d8
SHA512 d391fddea9a5c22eb343e61bc2d5f186c2a5db146c3f932ff9d5a8e7436b471d698b86a3e4869d2cb08a84d1e5768a96293aae1084bf8455fb02b7e3a5e2db00
SSDEEP 768:4Ts7eNGP0fAz7QO6adItbvohzDzgw61NrwK5pigkHBLkH:4aeN+uW5DqHwgCLk
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Heritage/Windows Logon Sound.wav

SHA256 56baed1030eb14ee08f7a5e0178e10ae333ce54cab866858a805c91f60b8c9fe
MD5 89ac634101ec214ccb2e52c7a73ab140
SHA1 9b0987ae912f5f9937f0a45824dff47a1c143726
SHA512 72bfd706d9407a1bfb822e52d95477fe78d676ca88fa868106b39bc3926886e4ac511c335c3bbeecbff7ae0f6edd6ac056a20cc55b0add72c4b4be83b6629181
SSDEEP 768:zI66/LbPGJir2FLgZbCMZuGU3hOzq1uKg+:zI66/vcQ2Fst23szqnn
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Heritage/Windows Navigation Start.wav

SHA256 386b62937f3d6a4b2e96b09f7fc94a16b02a73604eca3416a640b5611c6d83d5
MD5 a1edc9d47d16b84b2d6ef96d9c17d577
SHA1 1076eadbe571bd037402545f8575dcb73fb61304
SHA512 00d545487268e2da400c6df4be969a22bc68472d354ef6736a377a9f9bcbce720f6f94909c1b0255a0adbfb7c0f08f2285803c1ca2a63f5fa5f3308d607d7b1e
SSDEEP 192:Uv33fTNlEGISYzYHZ0e6Xg1pQkgtSDgUnXmB:wfBltISMY5V3sCxM
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Heritage/Windows Notify.wav

SHA256 279caf975e3d4731c0f943c55deeb9bf25c58b7ae2177189cf429d51f62f7b59
MD5 6d6af51497e248afc3e2b90ffc687608
SHA1 3f331877e83c5a8b3429cbe479f9e686e0e33230
SHA512 de66feb63bcbf9f2acda11493289d98bef334d686a22eadb763c6a384c5336e1c9c8f9a26a21141e5b71deffd9b7722e1ce5f8d0704a02173c9c40c026bc864e
SSDEEP 384:fVpKFUGvIqcHchti8WaApEn4xVBeA1PaeYJEIlXoXB3hD8etoZ:rKFvItHGt7x4BbZ8lXE7A
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Heritage/Windows Pop-up Blocked.wav

SHA256 fb1460143d22e9f15523c9b9854160abcd5f14f77cb2c9f2d49b6460c303cb3c
MD5 0b553a6acb3539f378aa8324990fe6ca
SHA1 8fbf04d878dd4c8beae9a0a3e54f0e413470bc48
SHA512 cf9fc27c6cc0b55d964b9aa357c30848030c9aa6b3567d274a872212d5330637b080e844ae055f0aff64cc1fb6ef7b06c79a4b4bce6e0065e064d7e7827df30d
SSDEEP 384:YdHjvXYnKHJzcqkxNNHbP1CDbEeAIRc9L:mXBrGNNH5qbx29
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Heritage/Windows Print complete.wav

SHA256 87651da926940268f8eb80e194ec799930e9db727b82c04ae1fbb2350d550db5
MD5 b6b0dabffb425f7660719a774190c439
SHA1 0d912e58aa34ffd08513372e3f5ac85a55e60acd
SHA512 69a2e735a2a3d9cee4c8798264dee116d6945b33753c9a82f8f7c986c7c260d1a13757560c34a0619a50d00e137d045388f641c84878c30c4d7824f7d06a6baa
SSDEEP 768:Ek2QSqUsoX+SzyjHJ6EyYnL9E99YWy8xQl:Ek2QSqoBUAErL3Wy8W
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Heritage/Windows User Account Control.wav

SHA256 e8f7b87974792cf8ddebf80706b05bd3590460461801fe65a845dafb279d53f3
MD5 0f7eef709713231ede9735190ee30650
SHA1 acd472390a76322f8c402cdb405b683464e239e2
SHA512 383c6dd9951f561ed469039115698820bc14bd9e02504913ffe2d54b0b9abb4e282839ac3e47c8f95bf08611109380f7871fea3f9fe31d1b49e1df46f0881e5b
SSDEEP 384:IW7h8uyfrc65wOB5wDPiXA/PmU8m8FRv2WBFZpj:R8HrIiXdy8zv2oZ
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Landscapes/Desktop.ini

SHA256 b77586f906749b00246a8d8ce73e48ea42ac69355524afe3b1183e1ac6d8d201
MD5 794f1975f13b0fb6c554d96006237cad
SHA1 4a3989d06826b5e8ed30325e3a2527f62de6ae5d
SHA512 c4e91baea7b0621765c5da6254be846acef4f90570950e02c8ca733b255afc5ee1ec3378ef479c6bf22205a780d22c5b14b264b55f5f471c66dbce7b84d332b5
MD5 SHA1 SHA512

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Landscapes/Windows Balloon.wav

SHA256 06e925176e836ec3411f2ca6412f21d677af84ec4967ea5063bfcc13e1eb239f
MD5 c12747c5114268f23ff9b55de1672a44
SHA1 e01d014bb2049fec3135b6ae7aa296039b344934
SHA512 b07f382e281bd0f0be3a927773af888ac2c8140553f7391f2f54f11d4e710f078a0d1067cc18af8533cea7d7bbb0891bc61d8b668fb0cbf2c037117d7e5e7f3c
SSDEEP 384:1shZBEeMJCmtrjWB5SgnUO9F/wU12n0XMlYwO:sbMsmrq5t9SUjCYf
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Landscapes/Windows Battery Critical.wav

SHA256 feeddbaf0b9d9f48c4b97664686122cfe608bb47221e053d2d07b27e7fe62e37
MD5 c62560d61773245f332d7125e0bb8c66
SHA1 00b5937297c649665af2b1edc52ce7c3c3b1409d
SHA512 3c87683808c19982761a72f81e43fa17a4c9cd11bb076d0a775211104dddc7ea247d41fcbb60565d203b8f9e87ade00cb6f28bf7ab70bd35f42c5dc8de343a3f
SSDEEP 384:A6Rie0Em1u0xVKa3+ifiwZqBTz9tCOfShCo2Odiw:zR7DIVV3+IiZF6Of22OYw
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Landscapes/Windows Battery Low.wav

SHA256 678e0f5c05d8d0d554f3942e07b192cc968aaca7c66c57a611fb8122edd00687
MD5 8d54af08b8cb1f4069f4bed4ec2e4c7f
SHA1 3bb5c483932ff3b41d1c077b278aed51d5ffe247
SHA512 7f4f501a1e06be6ed9a7f2a8446c5c504df78059e9172d86cbf2b9c61e120e39ec5a8b6fda37c6e735c3dd503933702f6f609b68e13ef0a0134ca7fa57946e78
SSDEEP 384:9eyZmVVpquU+e2Qt8vVYy1kmP09OB02riHLt5iUjsoySq2IqHQomajoZu6d6386Y:bmQMVR1kCbqeuP4ovq258M46sCW7BV
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Landscapes/Windows Critical Stop.wav

SHA256 08f067464ea19f39b8b22b0af9edd832e0fe9c4ad4ffcc150f5566555a3b1c4f
MD5 365b58f5cd053e793b69041b653e5368
SHA1 ea9b824819bed4d21179d5b0bc808857f6c69ba9
SHA512 3b8702ecc9b2185615e03c3466d3ec4b41799943855756f96938c586cbf8060c62855b5ba1b23bf8aa31e01be533f27ee1be90c08d79129833720970158dd7b4
SSDEEP 384:l8l0CiirfG/E/oKZ/ygMZopMu+PnSZEwjeqoMPX+SYwTlzM:abrfV/oKlz0opMbPSZNeqV+SfT9
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Landscapes/Windows Default.wav

SHA256 75e959716500d99a7b8097ab47cc571ecb8d439069dafd54132702c58c2afbe5
MD5 82bd8fcb4b07ceec7e38f4a4a7dec948
SHA1 b4a5cac0b9850acad521f1064ed7ce31b867d27c
SHA512 9eca3205340535cc88c0911b17ac51d81591c45513da2bc652b10fa78c5a54a6985af7fe12605f75ae6c1f0b9ea12e79828a6f5315961655a2846bf5434b663f
SSDEEP 384:oCQU+szTfVaEe4OnTcRCTPeqlRLEKUOdAKcH:JXfVaNVnyCTWqfEKpyH
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Landscapes/Windows Ding.wav

SHA256 784d11e30aa02950ca5a88d3fd42623845fde1db4ec6cd5583c2efa675e03820
MD5 99d47eb7ad711cefad0e85f2235ae1cc
SHA1 a2ac3d5f9194d41b5d5a6b1bf86d8407b8a99fa9
SHA512 57b04ad8a246d5fb4e0fc8e336806a26cf07299473678c287f3ac03eb8dcc3e9b6befe1bcc574ffe3c4bfae4b85aa9e6f07713ab3a2f87d0e801f524bd34ff94
SSDEEP 1536:oeNC9SAfrkDVp/KmVOHKr2hDLUazAZVScd5xYdML5Xfeac81xpQdTn3F9Yw0IdZf:1ATmQmSKU0ocdXRL5XfB1QdjV9Kq
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Landscapes/Windows Error.wav

SHA256 719137ca73f2d76f81cbb54887524c68f7c163d839fdff9ee058b5810c6aa50f
MD5 89ff2fd52f42237141c71c8603309963
SHA1 37fddf83af969d428e5384edcfc7a0b24e47baa2
SHA512 81f4ccf4d8f890c7b2e6e5f14220122428570786a52f9c595160d7674be082f3c32ae118c744964b966414f3c7713671c41a9183a1de9ff55bdeaf8551ab4f39
SSDEEP 384:mL88K6eFKYWHHlidYGbMzDksoU5JVeP7YGlc7:G7fnlidY2u3dJVe71l
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Landscapes/Windows Exclamation.wav

SHA256 d86c278914e09d0275edf361c4ebf5ebc49ecf722624dd45fbf0ce6192eab299
MD5 16983569493d9113f4aa1337492b22bd
SHA1 ee7cb1f836b9154722063bd2431d042f3e7fb86f
SHA512 492b8eb9875cea94d09e213af47397187d21ae090199e446e880aa1709976838e00ad675606e7e4e1ba7ed7ee7f8eb524b1e72b0d7c862a901558029e9756800
SSDEEP 384:kuZEqNyrpyfGEng4RwK9pwQmdiNs7oWjIAZ:/fv+ogSwK9pEMU
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Landscapes/Windows Feed Discovered.wav

SHA256 370b753d76d9c4f97b0443794e7de270ba955c4253fb8bcf4167d8fcec2bbfc9
MD5 0334c23602b2d97ce8884c7bdd38272a
SHA1 1c8479fbdaf116da6ad820dccc030bc91874af64
SHA512 6a9cb31fbbfe6f49aba604522a19c27ec8c80929fbff9d4bd1c3f5a5f3484729108c925cd987de067721090197f5f27425abc1bb5201be13c774393aa0150ca0
SSDEEP 384:AOSs3wrqzzq3szU+UhbYfRg/v+ObCmBCrjTd6YtRm:B3wrB35bYf6/v+EGjTd6m
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Landscapes/Windows Hardware Fail.wav

SHA256 a6150a1c0a1475c1e31ab3df728b37977dea63fecd962257f305346f99c02e28
MD5 f61b56a743d211b82e5de050d75ebed0
SHA1 835201ee6f2c14d8bbcbdbf109ed9b3ef6ae690a
SHA512 3235dfa0eb1f6e888ee7bfd0d2a107c1cc76f9691f6fdb6ada8f37e564e15878538c1f69103c35fbd69ab991d904013427025db8740f363dc45f25d8c128c97e
SSDEEP 384:Z/CDtvMU1Bp2rT3rIge2r+rFsEbG5IDkJ:pCDtEUPp+T7Igqs5IDk
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Landscapes/Windows Hardware Insert.wav

SHA256 e2434e2b1e4aefe32dca11b5fd15d5cd578263fdbfd897abba3f50e07f5df61d
MD5 decfb5ffb6dc2b9945461a542d9d0d09
SHA1 67f045c6e83e6c07c31a903430c0c9b44e03010f
SHA512 c1dc0702c12f39eb56d1fba6d057c3cf512c908292c99df4967e421b4b910f9545b4bc2355cba71f215d5deaa365e8195e9a9768f61d49a06cfd173e521a1702
SSDEEP 384:At+mrty3mi/iZ+PihGPe9r7H99TpOepGrC:EHQWcqQihGPKM9u
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Landscapes/Windows Hardware Remove.wav

SHA256 907a83fbaa3cf8188590c7456fa6110c81a020201a3662b41c0cb242f1c631f2
MD5 5fae254e2e7454b7fc9daaa6925135e2
SHA1 8788e3257ab86b4864de6f771f71dfc8529e6304
SHA512 dfd0358c1e29e3153474febf395432c262f694b9584434b8bf15ef3b95fed55b5b7cb7112088268ac6d7ca4183997abb6aaf1c1173ebe08e53af9826cefbd971
SSDEEP 384:6fPeJzWazA+WEqbsS7FOk958cP1q33H+prUQ17zq:C4nATnB7FF95rqextzq
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Landscapes/Windows Information Bar.wav

SHA256 e64ec13f57dfe7972855edfe31eba1f6ee3d66c7cdf98845b289948dcca8e7c5
MD5 04e49fe06edc815a56b109559e4adcc1
SHA1 c49c132c792ccbcaefcb4c0c0c6d688c323b8bb9
SHA512 e479db4eb35d909d4705ef0c8c94acc38fa31d9cbb63cbea5b76c962b7ed073415254cff6ecd88ca23b5d07a5d3328e951b283112ffe6cdb1de535351a6301af
SSDEEP 192:wvtd6oMCOGZqeMpN8Axfp/s2HTLa3j01BdxUILNhkZ7L:wT6oMcJMTXRLa3o1xfLQN
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Landscapes/Windows Logoff Sound.wav

SHA256 c77298275627a7d784589ad156be841f2132909c6073f3781c498319411a6b6a
MD5 985d72876d84e23b0f09b77fbd9f1481
SHA1 f2620dfba992854166697bf8f9f50d97249edcf6
SHA512 fc283ac633b46d16e4e154c5540bedd99e3653ad56cd1d38214b8d130e9ef54f0ded083a1d3b4f0d66996ab4c5abd60fde896e158b4f5c15e7b47a86a1b3d06e
SSDEEP 768:JtiKfj8/w8I1IWwsBNNaJ6Z/lwyqr/l9sZo6cunRm:H1fsw8wIW9zsUPqr/laf5Rm
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Landscapes/Windows Logon Sound.wav

SHA256 e8fb5edc54ab46707758d574b9c49fce43b6e659f83328423bd32170aa33a7f0
MD5 fd502111525ab35d402b79ff59166bb7
SHA1 d32f237ffd67517ee437df81b8f99d9d576ce5a4
SHA512 788c21af8f29ed00295ee71dce0a01ad343626b53276605a2627809624161fe3bc726fceb46fc131d00dc269369103af86e8e23543f10942a0073d5a5ff9507e
SSDEEP 768:Xa4F4LeVzWA7PQHiPoC+4NcwgbsFFfVdGHulGQOnN:z4qVd7QoF+4NcdbupGHxn
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Landscapes/Windows Navigation Start.wav

SHA256 62dbe4c0b09b7f88c793d05e8b8a7e448a87ab7d739bf0a522bcf2c6e5efd934
MD5 bc8fecb4388e85fefb2fde614f1fcc2d
SHA1 fa869ade5d06b7344a7f1d6bc5720e7f40d938fd
SHA512 9d6ae219d70c5a856428e9ccefaf2582f091d8a4f2cfac60e59f148be90dd3e8eea3546e8344e51dce97b9855d30e16ede21f9d99d19f5f39b45128f0caaaee4
SSDEEP 48:oC8ZJJLtxG8+pau4RhNnd2zq4aImpFbX34Mrv2y9zz0E4BY9MTEyX:B8ZJJtUD0uYIeXIm7PjV0X69In
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Landscapes/Windows Notify.wav

SHA256 ae6038a9eb65566539cb850c7d6d3486dd8683eca2911111fbcaa5cf561496f0
MD5 1fb99e4dbf4e9346031bfa2519e7b6bc
SHA1 14c6e438610d78a65a9d4604de9518eae02e64a5
SHA512 8a3952ac521ff33da6174a0ac6f940e9ad9d1906be0a5ea2b4ef61138f12e32d914b3f42d8b5ad305d5aae66568728bfd0876840483f7d70d0f3b4c5a2be2f5c
SSDEEP 384:p+UejF5h5Z+uuatpGP1iWMqPw39zGTpusIa1BQ6j3en661f53mHAU9J4ocT:MSuuEM9ZDPw39q9IBnlf53mHR/h
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Landscapes/Windows Pop-up Blocked.wav

SHA256 ed1c3aa6c2715fc7be99f32b717737797ccb6d03e8bbbab655135a9b1561c94f
MD5 2118d0128c4f966d79b95d8d3066fd23
SHA1 f07469f99fd616f7cff8d363542770e43d8dec17
SHA512 9dda744fea30dc1c92025892014fb5eb450f8b2378e3d0da285dabc01015cdb2da5c09af7ed49a9106b8bc2eca72f4667f260eab52eecdb8fe30413d98b0c337
SSDEEP 192:Z0DQNwsfbE9ueN5u840HfJMwh21Z3LgKOdKAK/C8:Z0DQNX7Ot6whuZ7W0zF
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Landscapes/Windows Print complete.wav

SHA256 cd39ff925db7faf98b41c0d8de641b4d05e1fe6e201c8b49b5d43a5e3588596d
MD5 b790aaa494c5ca46f426cd86283f1e72
SHA1 be61518410c8538b6166f97eb6d88f92f000a8e0
SHA512 b07124fed39e2c215f363b3fa18928c7a11cfda30b1d284948231d334b603700e25a5f9d2835c76550144d9764789f6bcba6605cb179f98e452bec02f9d7ff98
SSDEEP 384:bUXHCKMGhDebv9JS7GA3ozTg4mJSddozSAIUoMnhiarvWquwEOqujwS:Grh4XyF3iwgtQoMC8qukS
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Landscapes/Windows User Account Control.wav

SHA256 bbe3ad21b168310a86557b3382ff669604c3bdb33f1a6a710685ba3e22335cde
MD5 86d0adfc8e03c7676d05f67dd33349c6
SHA1 cc03f1a4a17af11095678c8c6d01c903e06e98c0
SHA512 4e7e75d297ceafa5284cac6717d5af51e50dba576258d4791bf09682419f889405b67fe5df6b4e95ebc10df207c9d613798bb502e3694954427e962311c45808
SSDEEP 192:IrJBGp5GQaDgSY2lkAmzQKwvkG5sEP2J2jxVjHbSL4QGFnjD:KuTGQEgSYUkAmD6kvEP2sVVjHbS8DtX
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Quirky/Desktop.ini

SHA256 b77586f906749b00246a8d8ce73e48ea42ac69355524afe3b1183e1ac6d8d201
MD5 794f1975f13b0fb6c554d96006237cad
SHA1 4a3989d06826b5e8ed30325e3a2527f62de6ae5d
SHA512 c4e91baea7b0621765c5da6254be846acef4f90570950e02c8ca733b255afc5ee1ec3378ef479c6bf22205a780d22c5b14b264b55f5f471c66dbce7b84d332b5
MD5 SHA1 SHA512

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Quirky/Windows Balloon.wav

SHA256 97416c94852718d938120100421dc8b182b0e8554d71e66a65569b4e22db550a
MD5 08ea1025cf92445610267cbbfd958ca8
SHA1 66eab9066c97b92a5f1d9da1b134ad196d7ec19d
SHA512 d48b9e358ae6f4ecf6b1943a623793a2046724ee6493ade0c350391353f2d57f9d4b4bb68cc322414c459b3c5a6c6fa42b373231906b2b9ea775d009278e1def
SSDEEP 192:f6byWn37ffV3Sm33JdUlPH3lK0Q7YTVyiDWFS5+EUEmc8hu5do3ShrX:feyG37f5Ss3HaH3lKb7c1DKjEUv3y
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Quirky/Windows Battery Critical.wav

SHA256 459ab919f931fb37d3fbbf7de7303bbb8c82f6cf9b0b82ce2080efe5f1ffbf04
MD5 67f69a194d7048b45b5322eb0843059d
SHA1 93c77bd86d52aa470a0e23f8266da057e567343d
SHA512 b94f9fff9149be4482860f85aa6286e6d35a08a02222f5d6935a7e14a354f85e97cd0faa4b99b0a9e10158616656e2cd40b1ab0b42aa7fb8586c7b8206c94964
SSDEEP 192:tQw3F+rA37SKRERke11BH74YSexJsYBmsuaqwAMaiaU62LoGzeSvIeH7mZJD04:tQk+c3E/mAmstqwApiHNqpZ504
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Quirky/Windows Battery Low.wav

SHA256 b5f41b35d9ab0115d35f7b076264cc9de078525134a5090907295f118f4f8c3d
MD5 54ed84a3ffce9294545b641a919e2513
SHA1 d14b192e07757d061380baf7e79ab59fa86888de
SHA512 b7bd09e457add85023dbc8b7dad83de0e3c42dbd1eb46f196aa23647ed82842d35e54285da26a15ea5a93e6b7e1ca7157215bbf6f8d2dec53a757e5196d81b40
SSDEEP 192:3INrT5a22ygwSyWFAECtqEUJ3su9wunazyzYgd3SiODpf4t7k4mZeBvz8uab7:3gppWFgU7wu4YSlDpfMmkZaf
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Quirky/Windows Critical Stop.wav

SHA256 3d8d8e4bca281f65075083eb2a7707eadce633a3913a1bfad0256156de307c10
MD5 b5ccd060860db0d508d595827932edc6
SHA1 3993b3c4c6322ec63abdb193a8763d1b7b92b349
SHA512 3fc63d8f154320be3967572d7aeae3835919dd31c7f3295ca813d5e6568a4b964212e8e3e09ded56dcf44b0a4bfa35143f7d22c384a3bd8d68a77288836c17c2
SSDEEP 192:v1hUibuWGGNndEdUh+O+2F2GhSLTOY2v1TXSjxdjUtS6ax2mn1xdKop5901yyGfc:3JQGN3h+O+ChSetv12wU62nt0Kfof
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Quirky/Windows Default.wav

SHA256 b97b383e9aa9499e85061b5823f950a4479dd2da900348a656a3ef94ce338361
MD5 e9b4646a8dd643cee28771817e06eefc
SHA1 1239c065bf83614bc23ed470b2371bbe0b4b8e2b
SHA512 cbacbd329df4fd4cd03ec12d58a47e199fb93cc09cc7b10721bef2b9e0d6544873d971aca98c21e507dfedccc5c219cdef7f51844555818675c5788fb0bc6f3e
SSDEEP 192:KWFh28rA2Eixv9wnY7JCClgz84v8Y9smfp3xdf5MhD3RuJ1epxq:Ksg8rzEiFR7JlIb9nu7Rw1e
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Quirky/Windows Ding.wav

SHA256 096f55f0651579c54aaf8cc161a5fb52ae38716fbbb49a91063114cd34b422ab
MD5 51d9a2b3d943f325660efa0f6f4406fd
SHA1 84fbe78d57ce0b0192766208dd2a6b1557d6df20
SHA512 dd6aef29a8910110abac94a10eb37857ae967590cab669733d444950efd5dc444bb0801544f55a9fc07056265ee682e93dc4bc77373cfd4d156d6d790ff1aafe
SSDEEP 3072:00+a/zNdFwnOaDfB7wm7yf447uQLZoUst:dhduPfFbeuQra
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Quirky/Windows Error.wav

SHA256 3594226b2b6bb9142649fc536d6b0c468b7aa4a032b3e4947f3214a869e46b53
MD5 0219669f19e451c27dc3c63b1d5b5af0
SHA1 79f79ed98d9068726c5feb32e7f5d99d03d3efe6
SHA512 9965561ae19b674f7bca79cd9492a1666e74516bc872d15923f3c57f09273b33f9be7a981ba678dcf4317f83517ea674b0dc1743edc6e190f3ff0a43c5738b57
SSDEEP 384:jwVZtrdbkhDWkk1S+7V+nO/viq82XdZZ9S5Ad:8VZldwBk1SbnhOZKC
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Quirky/Windows Exclamation.wav

SHA256 1eea9f629fcf03f3db5e4a001cc6a0a05789d7794f162ca54fc49d6023e62543
MD5 f599081cac36e1223750bbcedec68359
SHA1 0a94f60e5602c290846e77e63cad468ba77ecb91
SHA512 db0bade6ce569a2f6b54ce6300c44c831624f4bf763cd4a3bad25b374e3e2dc68bd548b083df8e5767920e052a5cafadd01e573f4cd92c35b839846597315560
SSDEEP 384:EKcHFEEr1YG/sSRqrOQbhji6z2vcRQmKSKVT8BWEdvPBUz86vY:WlEY/7RhQbhjAc2m2N8B1PeYUY
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Quirky/Windows Feed Discovered.wav

SHA256 a724204300625e8b21a0c74e93b404a8025caa60a1a386e17616eeac714ad83d
MD5 90d67287467f3fceaf459bf06d5d5bf7
SHA1 a4ef91092437b7ca4b845de36193c27bcbaa3eda
SHA512 38c987c1e801848aa88c76630952f389a1aea346fcb043be5f9ad1275d665a15b5108982e6a648fee95bffd5ca266c9290350379039b486d4f92241a18a07797
SSDEEP 192:Y20dPEtrK0tUf2e03tPPXYmWAzRCZlfOI:YNdiy0JPXQmkp
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Quirky/Windows Hardware Fail.wav

SHA256 2df98ef66490a8a1ee8c15507f0cde278894779a0d203de6e0aa5b7173e71d3d
MD5 eb6f4dc88e669b5b2252bbfa80eca54d
SHA1 edde530d091a768e8b6bc900798a2494c919132e
SHA512 f65b2ec693f9364c1f2bb0fd6577012776030a0589ea0cbbb43366ffad6b57cdd268aff50f9ab389760f86496e96ec27d2846bff24ed04a2296f93a22754aab6
SSDEEP 384:TIVyXO9xmaf0Z7PzjMM862wooX6gwa01:MXxmafMPzIM86jooX6gwh
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Quirky/Windows Hardware Insert.wav

SHA256 8406536bf2992267aacb2009391cbfaa9dddd39eb17b4a00d0c055201483f6b5
MD5 dcbcaf97b08f88281a2e0d292c4818a2
SHA1 8c8206afcf81ef6f35d32e754f438ca0a88b2b98
SHA512 2fe2a75dbb5ef5e11d977aabdbdeca51e662da3d30a7904020ec8fccde0baf7ae4601bc9e25054b8847686752c8261cbda7c4de785948617e87cf7173657120e
SSDEEP 192:4T+X2M8iGC1pBGj57wv+DxH4l2oCgZFDjKdn4LPUkyTT1JfBLXn3f1OdzMX53DR9:4Wd8iGFju2DxHTrgL2dn4TXuHb3Mz2p
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Quirky/Windows Hardware Remove.wav

SHA256 19db709718742a50671741aaaafd100a5bb6c9f41298702c20562bc97b13204c
MD5 bfb80377f22ec9aa3d3797b4c8963391
SHA1 863f4b21164cf8acfd273b169a2d7424c1312c5b
SHA512 7e60f0cb2dfc105ca7c67d723e01bd228d39a00a6295c3762088644be7bbf70f8d471fa6b300d581d7f54b46f9782e268b7138ceeaa1bae36a994b3a9c8aebe0
SSDEEP 384:D+Nk2hhpbsPSfJBdJKkYThmV08Yii2+c:D+a2hzsKfJBdM5VR2/
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Quirky/Windows Information Bar.wav

SHA256 ce9e2dcb23ffcd856a39d070349d31270872cad4eee3e77c0cefc1cbd5ba401b
MD5 673829be63a7a11d810a98c75586f882
SHA1 cab621fd13ea561ae8ffd437a1725d8a26fc4cea
SHA512 89c48945019de539e294ad31670b3b4380a97acda43e262328a63342a519cb4562c73120b3a5a47a9593d8cc4fe293eed7188faab2d2c4854d6e2cf1d3b30328
SSDEEP 96:NAt/m2M/ksjcrp2GckmFgaLkrRgSBz3HtaG66bzod4B7Qwk9GbH2R4X0pjECw2fC:NI/S/tc1fcDCZqGJVt062R49ufGP
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Quirky/Windows Logoff Sound.wav

SHA256 465ad3ec6093e07a65b267928d188e872197f02d62e89f963690fe8b5349ce6f
MD5 bd1dda78de21c07698280b08450655a4
SHA1 7c0a3ebe47937a9e5931db8b712e6cf3e0ba826e
SHA512 b74d2a4a4436abe5b65777029e0946a6f0cd436f934c10b76b69dd364ffcd843b6dc4011754dbc6b959b9ac28840b0056d9ec10b69532acc1fa692efd5e13735
SSDEEP 768:UbN7x2mD5SdA2SC6VlxfS7iH6Gx1OUec3O:Ux1Id+Pfx67kt1O
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Quirky/Windows Logon Sound.wav

SHA256 078b6050778c5f8c5c2ce7d36707ee75bd887eb19e9660ead80189e56057fce4
MD5 06ac4406439db5b79a387631deed1930
SHA1 9fc0b6195fe7eac257540e6be283d79ee8c2ddc5
SHA512 84d18d9b80de8ab54761bca5f8cf20f11691788aad85af206509e5d12c5e18b8e09a68b155da34710c4e52a4b1af947e7417cd15b7427bd139ebf67342ebcdcb
SSDEEP 768:XYpIV0C5OjhU3n1mnu2euSpD3Vd+27Zyn:XUS31mnq9rf78
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Quirky/Windows Navigation Start.wav

SHA256 c5c245ce4545229f79765d3f30583485a57f7a234bf507da49c5d1789131e3d5
MD5 a092de087fbb3276fd4d300d6f78e42d
SHA1 6f23a82bada797a5cd07fd592d14de20dd27aa2a
SHA512 e37bef40ec70f22de40b9e5cadb19af950b4d5438d50867b6455778ccdb3c7daedfa5fd1e3b34851408f0e3ff2919177cf232b9c0c91b286895fb65c0d55506c
SSDEEP 48:mauuVOXoKBNlcxE+YEm7nbdFi6iS13dnD8m4afGGV:eiooeNlcxEYwbCYRbf
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Quirky/Windows Notify.wav

SHA256 8084bae080b80da6df5eed0e662b48788550df801f8042c9e06fffb171ff74d7
MD5 ea7ed83f1a3adedc64617dd45af64313
SHA1 437e3acf53afdbb14bb606bd541a39c9b92b81ca
SHA512 3351c7cbf352d5f0c26a32e2b5f603d48bdcc99bf950353559f78c7ad7c8b2724318c8f292ddacf0c66ff44c18ab2acd026687014c8bb35514cdb403eac88a6e
SSDEEP 384:huMYwVtHB+ZWIz5h8AqlPrJfruF70Hm2zjDp96DsKdEsRo6+4Rcoh:hQGtHBuWiaAqJFuh+rS6saZro
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Quirky/Windows Pop-up Blocked.wav

SHA256 091233f87b05b7651247abf709e992f61cad220a13c4968124f03e15629223da
MD5 b2d12fd1a1536d22360d25a20fb6a710
SHA1 dc3adf6530ccd61a2645c509917963fea9bb44ab
SHA512 0b9062b0e52be54a2e7b85aa09cba1cc04af08668dfe05c71b1c44879b5232607948e813833af5f0c4b45a1237ed671f41d52dfabceb6e6b0745196bf8090cb9
SSDEEP 192:29PKi7bjQTZpMwM+ozyQloafg6ZH/3twLtrEc2i7Dk:fi7b6MwM+o10SlwLx7o
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Quirky/Windows Print complete.wav

SHA256 f9111b2bb39575f9d8bdce797e49678b67619602b52cf58dda24e3a4ceac2cf2
MD5 29b2f70395330b742b73599867c64875
SHA1 dd31225de712710d3d291d688420f4fc76a596d6
SHA512 e8505670f1ecf37ad24995413134580e9c2b2aea75c02ec698beb5bba357b8e1d74567732eb9c6c24de9859df549240b5ffd7af8df3049c3e8e7e2417bdc469c
SSDEEP 384:jYVqcRDA9hfp0ZR7AFOdLJFJygrU3U0GZIMlcAtlQk:UphAFEJpGSl3u
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Quirky/Windows User Account Control.wav

SHA256 730bfd0c5843898ddc9cb38a3c5a88a62939ae7638eda898ae5fd9e2c9a153ce
MD5 d294d71081262c268ecd862ef4f074d3
SHA1 1116170144e8f0c2b13997aba90f729ca8dee3f2
SHA512 b154b1202a97a7e47bf6e74dfecef5761ee38f9c2ce94959d039e646335c0f814e9b10f4a947f3d9a10fb90a3985690a9dfe5a2793f8f3f2f6e15ccb39024e63
SSDEEP 192:vX/lbwDMwgqIEP+UWVHB2/2bUTDwmkgpZ:vX1TwIUWlB2/KjUpZ
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Raga/Desktop.ini

SHA256 b77586f906749b00246a8d8ce73e48ea42ac69355524afe3b1183e1ac6d8d201
MD5 794f1975f13b0fb6c554d96006237cad
SHA1 4a3989d06826b5e8ed30325e3a2527f62de6ae5d
SHA512 c4e91baea7b0621765c5da6254be846acef4f90570950e02c8ca733b255afc5ee1ec3378ef479c6bf22205a780d22c5b14b264b55f5f471c66dbce7b84d332b5
MD5 SHA1 SHA512

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Raga/Windows Balloon.wav

SHA256 ac1bcec8c0d8eb374201f4a2882b94bb39c670dc65aa8fdaa4ddcdb586573c8a
MD5 b907a5f682f1d402408e2c00d7f09005
SHA1 d9e774d9958d9aad92e73a20de52cc2045843bba
SHA512 06a92713f2ffd0b44f83575372d2b7687b170ed73721a75ed4ebe55166873ca8e54d5b539a7314040842f9c352256f156e494ffd506246f5c3d905e24106f02c
SSDEEP 384:euhHYvkMlbcQhufMsNAzCwsfJpXZ1nHpY/WkXARZWDpqs/9dpj:1HClhhuhuCwwJHG/W/HqpnFj
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Raga/Windows Battery Critical.wav

SHA256 746bb88e4b8e6af897bab7655d9309cce245290359ce13f9c34835daa4973ee5
MD5 9b5356bbf650e419d10aa2c19c28681e
SHA1 c527847dca6efe0d9ebf5324231dbf0a4af53ed5
SHA512 8c05feb156a81481272484030cb1927010ee674ba908fde7696d237d988fe3fe3a0235e86e6aa66083bf76f9897a2c26b5d25274e523e172ff6565f0e260b6a0
SSDEEP 384:At8mVTM82xLddTKYI8CRxlo2sDyIh30Ai23Gk3e:I8kIRTKY1CDbsDTBnb3e
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Raga/Windows Battery Low.wav

SHA256 123324fdd9f22fdd8572f011705350cc1ccf51a27f354a94921f911d8553eeb1
MD5 eaec38e9081c72c8c227c5e5bb790c30
SHA1 0ca853939db17763d55aa378a8f8716de0137676
SHA512 3e473e5376e2daca781ab19093788d31c72f3cfa4eb3632f5190bf680ad1a474c86c1b58a6f30e3414382f37879bc7e338124110a9fe603c09fe2ebfbeb35ed5
SSDEEP 384:vMOixiVsfKwFVUHK4MPaPPVuyHnd+0nDfIqZt3qLRKq2H/U/qBf:LRq6lHhrIqn6LRKq2M/qB
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Raga/Windows Critical Stop.wav

SHA256 c61409b8458dfadf5cff7b40a43bdabdd5ca62590c7ef7fc2900df7564ee5d94
MD5 a863489d921b3627a9494681cdd83106
SHA1 d08887f5e965af70b81839a1ab75e3b85df9f69e
SHA512 51a8ec9228acb3618b0a508cfa47b067942e65bf46982e5fb9a3e69c520a94ed325a176dfe27697514f1e38381a78abff25d9015f02cedb7d5e52d8b12fc1cd8
SSDEEP 768:93JywYX4qVFr7K4IOVSwZiO23rPkPlivg:98wYX4Ah7EOVSwsJ3AN
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Raga/Windows Default.wav

SHA256 adb383b457a276b4cbba73c762d82df2f418ebc95c4356ba6d81eec691454efe
MD5 52c031e900ea885ab95bc05583a2de66
SHA1 106a7134ef53407cdc73ce2345d9f5b9e27f7595
SHA512 740da5225d6a56b471d822a5f493f39f719ded79dd36f140faea77b3de56d4de5c4f8523e8697a22a02a71ccd7a80b13fb6e75c31a3d04b5758b8a2b03ba2e28
SSDEEP 384:Eyl8roecfSGISCr5aQWeDBQ1L3DXJTIVp7wTXoIutrtHuSS2BQD:vwoec2roQWeCpIPcXoBtrtHusB
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Raga/Windows Ding.wav

SHA256 3ceedcb8d1be82fb3f450cbc79ed0618f9fe7859f6a94857aa68e708523e62dc
MD5 7588d33926b6c882fd3d477c89351d9d
SHA1 7b4b174453d70c4ab98059029c545f139cecee79
SHA512 4a69492d6ae4c71c769d48ae89f4b263badb1dae8e036be5db68fe7dca038f4aa59b162a79ee8406ac9d411773b244411eac98b2c97a39822b1913caefdcd247
SSDEEP 6144:q7fN4TZ3ordZB6rBuJYz0xGLkwAZ5kzZnL:a693UzauXgkZIZL
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Raga/Windows Error.wav

SHA256 47b9132756c274aaddc1d3b79184fe2ea1fc827fd8d703c1ff59c8ef2b34ae1e
MD5 fbfb28aeed558f5a1a2aa228059ebe6e
SHA1 b1fa9f94b26db8255f57de7c9ade97a6861df55f
SHA512 7ae08ccd9d268fd4acea81132fdcb583ab7de839839a4a0d91b8dcb09124456aec1593f3e5d83eda3920239accc2ee961ff3546dd47b1e2afe2c52011ab18770
SSDEEP 768:Q3wGUofMTmuZ+GxbQ4OOGTjXHjT1eM7HF:Q3wZFmuZ/xM4cTT1R7
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Raga/Windows Exclamation.wav

SHA256 d2ab5a7e07790c208e69f9f9fb44dffdd0a3f83ae68e10441e6836bfa11a9ab2
MD5 7b379f4aa8c87c2b1eb34c8bfe9305cc
SHA1 d95bd2d121160e2e2227fa226d6d4b88f0505c7d
SHA512 05bc2fcbf90e2de38f73c27d5d4f4e69c43dac25907c6167623dc16a16ba79c235d4aa9391634280f7885f8dcae2738390bb82bcf309d2809e60e8e501ec57f8
SSDEEP 384:8oDBZCFhUGwcX1OKCJ71c4hzW33ggT/FgeB4NpuKGgM78Q:8oFZ8kKc71XhBgT/WiqGC
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Raga/Windows Feed Discovered.wav

SHA256 b9cd2efc62a015d77926d715c4dc3be1be2b96569ebb8fee00e3652be0186a4e
MD5 2817d61bcd8a2ccf2eaca057ef48b7eb
SHA1 cfd4470cc1ae417f101745a6bd90bc8e3deee1f1
SHA512 6bf1dc61b37c24844e517a675aa2aa5065ebdd55234ce92a9d7403fe4e0a2bfa0c0ee1a9e7c6e46986f9f393aba64d8042f38b7bc5a0416e4cc3ace9d1023251
SSDEEP 384:60I6c1g1O3L81bVzhOCT6/VNfvO+AtIa5CwTd1C9U0xab:lA92VzhOCT6JAtIBGdzb
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Raga/Windows Hardware Fail.wav

SHA256 be7bc4900d6192c135fa8156bfc12d54edd9a73be5919d9ed36b5fbe9f83f8d6
MD5 8eac3c55aacf6ddc90557dda5c9070f7
SHA1 65fdb358031ac9567ecfc3bae0f7cbdbcfacd604
SHA512 91ef8bb6d4d564d9fd53d8e80414dd2694b0cb06a4be8063a05ab67b42e06493720037bf93c068981bce25f69850d805c650b837dc36efa34b5b474363102e39
SSDEEP 384:kUKz0UIY+O3rv2nPDuE42KbqNELnSuplrA7+/Eipm3A:TKAKrv2nPDuEgqSGuplrAi/B
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Raga/Windows Hardware Insert.wav

SHA256 4298668e96ebf1d6d5d4f85d5da90193afed25ec9e6618e4db1021aec5443be4
MD5 837d28dd48c0a72ad643046cb304cd62
SHA1 4c10512db7027542eaf3870eb5bd634e9022fbd7
SHA512 c3d6e41593e82229ee5faf1ab94594d0c2cdeec6e44d65f8667fee228cd9de5fd222607f811538a161fc24b60791b7914c80b6e5ed44e6ee91717c8842227280
SSDEEP 384:+cJh7iBaMtSv5JkiM/md5UeC6zSRbyGwe9vsX/:nJheBOM/YqL6zcbyGweO
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Raga/Windows Hardware Remove.wav

SHA256 07448615bcfbf48de7c38dacc1cd105db9014364652bada2883cf3f0191f0873
MD5 8da3030bb3d6b917568436526d117656
SHA1 f18912c1126bb73a8df8ed0dd0a3c53a19aff87b
SHA512 6bf020b4d0900b6554c1cbca072cf4ce60ffad5a17be417197986304f22d116b54ba71d3290579a2e1673944173ade2bee236b60221d8d694d47db409996ae6d
SSDEEP 384:W8MT9aJe56SGE2/vN0KCWeaiHLmd9bnqkDzNqRdQyZ:C5ISGE2/vN0KC5pLmd9bqKzgRdQyZ
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Raga/Windows Information Bar.wav

SHA256 4a0f78ad37396801c360470bc9ed27091f02ad0ca6a5fde9e7de9b5f37751295
MD5 3db742af588398be90387969bab3d9c3
SHA1 99b8c4a4f9927b131d4a337aaf87a4e58c32bf9a
SHA512 3ddeb005a47fc33d2f653612023814d93d8c12982ece4b436abde2a5d415c6a8ef3978fb8fc38c6b15cf62e3badaa324eeef0c75b8d67427e4dc32415e88f289
SSDEEP 192:Jxgsx8sc6SCrbgKodjv5wkDUbk51m4DH/ZBVBFEHadvNtU7MSvJ4YFzHuRxwK:Jt876lbXotQAjm4326+7MSfFewK
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Raga/Windows Logoff Sound.wav

SHA256 68b9a20c5da457445984072542af676beea46b0ab6b6d90e095c4722b3882217
MD5 c0dee041cba3505b9ded3efa02ef7a5d
SHA1 16b24aa0c6c8a994eacb12100a70c17e204c63f1
SHA512 53676870d89fd17d37aa481cf476dbb4a76a92e8b5e9aca7baa87bfe025443327d09d484bd702475cbb217de4991c9192cec41e7d342f92678f985b6bd14bc6c
SSDEEP 768:ihG0TRMJy3VPTET3+pgLmkdPOWYay2SQOmH7WemnvojsQ93SF9Hduc:ihXTmylPTE7ioTy3QZH7KvW3SFhd
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Raga/Windows Logon Sound.wav

SHA256 e1865bf367c713e9694c716c88bc1323017e583a04992690520d8740ae0c392c
MD5 61a99d94e8f613b79b535b39111a180e
SHA1 92b8cde229af9e1a2128c15b09d5c775191ef0d2
SHA512 b52b114ab8749bd4b1a176e88886962afb5e2fb0c1342749332c104ae8b6b129f136ddbde5e3a5eb9994473902aad9cba95712a0fa77a63b0188c2dc4a8b8b82
SSDEEP 768:Dkk+lVT0193zDwWJhofGpYUj4Jjlkjq63Lwzm7isVcAGC:j+l50T3zDDhof4UJjl4LwzbUcAGC
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Raga/Windows Navigation Start.wav

SHA256 bf96ab585f4b25e952bce865a3747c961826255495abdf1f6f86c3c4c043180a
MD5 fc8c0acde8bf2014a18876da1b5d702d
SHA1 e3dda2fc3a68399e2d282b965564ade266cdb310
SHA512 dd7d150dfb6ab166f26eab5f75f78d7070cc6d685361fd131524e0a51c2c7d21d51db6f8fcf735feadfe8964a57148c76274b50eebae4ce9dc5f8a2ad6927117
SSDEEP 96:rEAvTn3lOH+fHLLre3k7LRyUjbcXrI2pw2E/mU4pAzDrmRBGnB:rD3lOH+jcmRPc7Rpw2E/x427iUB
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Raga/Windows Notify.wav

SHA256 cdd52fc852468d8782b08e4ce5f843d293d5ae09a48ecd02f33ea5169389aeae
MD5 eab4bc96327ce91e7d27b5189e17304e
SHA1 8bc7b45fee3f029f722a8274c091d956fc925876
SHA512 6dc44ba11a7a5d9ac01cf22c5e4aa071b0875aa11099c1c4bff342950ca5050cf01657f30ecd65e35fbe6c5d7b353fe94242294a2a84717ce7c04da905b49493
SSDEEP 768:Q2b/PESBhEIiunkaKp8OkkxRJBCkcv/v:rTBea9KOnkHfn4n
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Raga/Windows Pop-up Blocked.wav

SHA256 67343d42a4cab42c4177264968339a4d99e62550a3141c5f330e563b958ad282
MD5 e151ca1f4c711e5fe90470d78a7a0e81
SHA1 0fd47358e0ea6b4696e92a5e8e829aa0d9ca9ec5
SHA512 20970f17dcdb66ed55e78350543bf901541c30f0dd0e9f9851ee2a0e63f5cfa9ae5b17b89502fa401c8cc4863e25442899e9bdebb9b5b283b078bb13fb918f84
SSDEEP 768:8NE93DauMrbYrn/PdvJPQ9muG2G31eLcAhmmYJ:B9GuMrbIFvJPQ93+lc5Du
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Raga/Windows Print complete.wav

SHA256 3a92c914feef2d0340008e06430554115a258941e5a172d3e2c1cdb48e45e101
MD5 88708f0cf4808b50b059f3d292000dfd
SHA1 12fea6c0ad1c87b951984e726c3f58d1534b906a
SHA512 86b0ed3667977aeb4f03fcf4d4ec5ccfb4bcc96fbcde6c194be16db1b4318f7e47e09faca74bab124fe07bb3de4035ed841cf06aefb133672eec5abef763cab0
SSDEEP 384:eJW33pi/qVSkRF6iZYGLylKIdLgEt/uosZwvYQS/GR36D+3GEcpo:6W3ZaqE6FFYGLpAUE0os+wQ6Gh6om2
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Raga/Windows User Account Control.wav

SHA256 2bfc56c2a613ac61cac4ccd4fd66499780a717a8e575741016ea3b92c8f7a8ba
MD5 ba76ae0431f5a50132ed2a04b6a527b8
SHA1 c643f115469668a25e82ab23aae901d73d5631fe
SHA512 88db4d4b851e0104dc4da06e32437ca67a68d2121fb1f72121ccf7ff480ccb5f2e17a76ba0fa05d58422c7ed9da5b3de387e2b43d8e01514760b59b758e54413
SSDEEP 192:9quxk5aEibAuKZYRpcjHhT8if2cpHvRR25DlvH4uFx8/k0wdinp:9quzhRfuBT8if2yHvRMlvSk0v
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Random/Info.txt

SHA256 948e0c54da7dfe610e90e338999bc5175f79588707523075668d1fa06c6ea824
MD5 3cf93e7d121a19cddde8b98287b050f1
SHA1 b825378e19be41f2bc3b5b3aa74228b49e6e8090
SHA512 8a5ae700c59a1a2656c5098cfa93a325a1143484792d25c872dd5eced719eb411aabe05e4919abe65742c649d750f5ce4f5d7713772adcb23e4e986324a01a9e
MD5 SHA1 SHA512

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Random/Speech Disambiguation.wav

SHA256 84feac7ed2d446fb49a725ee1eeb028669cf30e94a0a423b39a6a974a3db55df
MD5 efec6e62cbfdcbd1891889118b591b1b
SHA1 a23e6672af95ad50c593aaf2e814a30a5cefc26f
SHA512 9e1d8330489c0e16fe39a4d151679811504b38216bad521d50c019b6e26f4f9f80c26689b9b693185d5eadc2745f923464f57059058654d1897468f0e2fdc246
SSDEEP 3072:mW2Edj2gqLx4R/QOjShGzWes3UvObdRjdEc3mP7Qg:molmtOMGCesDrm
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Random/Speech Misrecognition.wav

SHA256 bc0fc69c4c5536be9212aac02fcaafc345e7ba60e3702236846db545d66ea11a
MD5 42da0c1985abf02dc0328eff8a76e435
SHA1 56caf922efb6b040c2a1776e3a5972afa4afb4b0
SHA512 cd7c003818db7db3effdde595858b2cc879a451cd0621773bd0dca16d290b118d9a13109907dcfd07f79f4fc677a8ac518d4f2c554ab491977c015ba5a367fcf
SSDEEP 1536:FimYcNhYnTsU/HDbJbeV9YO3lv2MrU6vXSASYa+I:gmYcAsUfDFe9v38M9Sw
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Random/Speech Off.wav

SHA256 b06e9cde536ca0af1d63019baa07e5e3e8d6640ac24ba0fe3968c6d5bff62eeb
MD5 373639729356e0bc67dc541646ac0fb9
SHA1 a07cf27382e1f4de87f23bb286c25a03e5db5314
SHA512 4b348c84db8c4ad32f313e49839f8b50a6f1c6e18fb616170bf2947eaa62e073477d31336a6393c2c9ebdbd3fe0ff976db7c603cae4109b7b2ebfb73d5da2a5c
SSDEEP 3072:4l1bheDWLkiUzU4BRgJBA3O+Lbnd2uTCB+LHQpe/zJ1wO8l72W0:4zVfAiUFqJBCvnva+Ln8T
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Random/Speech On.wav

SHA256 9834e1432bbcd20a2f4e19ed91436cc620b496c2cfc012c766efe07245e1eacb
MD5 7b681306dd7bc054aa472f25153ddf90
SHA1 9b787ef14dc3029747f153699e5629f87d1f7bb9
SHA512 4adee1d0cc610b2788400d0c763ec73c7372bac55bdae3e1f7746614887b871078690628965e6bc142e59174fa11559398dc7732392b8322666fe632469e2d49
SSDEEP 3072:A8xjuso6pA3upMCXzXzfYGgBLgjwL4r543GP1I:11uQMoXzfYZB8i41C
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Random/Speech Sleep.wav

SHA256 c35c7f1518712396892e9732f1d103bdb7017d205bee39522be4abe0e97e4560
MD5 12b0c2995097942c6d02357254cc20f7
SHA1 2bafac2205df9acb91d2ea29a42982a34a90e2f1
SHA512 f0ee917338eff955506050f1307959fb95ff524e60504801d6aa834a7d9c892ee49377df3fb897beaa7eb6d3ff74136374bd91cac086c4e660d52d56902eca51
SSDEEP 1536:Rjj2Ba0V5u85SW+Uypa8VrVZ0ox7ptrwIcvwQKSI4RAwR8/+WdH1+dKbtnpfbUkm:RKfH++oxpAwQkRwR8yEbp1bqN
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Random/chimes.wav

SHA256 bbee519cc7b9e0151cf28045414554952d2fa5c587fc49367c97bde61b1e7e6d
MD5 d352721f72c035416ca8f312fad5c504
SHA1 cc3ddf3399cd9f5f515306109dcaf27f1d3bb1bf
SHA512 a050bc37b65530b77dfb9e280629a7f7035d2ed7b92fe834e738a69a1865d7d4ac57a9c36b456de35b0cbdb1337a3f0b20ecf39af1c37d19144d6aa47824d662
SSDEEP 6144:bzwP7/cklJSMXqVARScxCYtILLt7hBrg95YjfO:b6jCMCQsLR7nUQf
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Random/chord.wav

SHA256 327d389de55ae49a3e891ec450f2a6dd1f8039ebc74cbc3909667741bd3a0782
MD5 78b1d68ea6d2f427749cbb489054efc0
SHA1 20872feebeafd847705ea545400b902ab842b712
SHA512 3a702ec3cefde49e0e01566732aa85b97268aeb668217ff57f1bdfaef9bc3fdbf99fc9c5215d4c219ae6ab75a39f0ce8b0e6a49a0e4bc8052c77c085ed5f1364
SSDEEP 3072:8+Vvx5fJa5gvC8ln12KF92JsSdLTyQObf9:8g5aivC8JQC8flTyQI9
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Random/ding.wav

SHA256 500d8520a894aa45000279d02334057e92d1141704fae5406628960fd824c151
MD5 25940e6ed15d7eaa2e459553536f0dc7
SHA1 0922c228c2cc5adabb02f5c6976cb13aae43a5f2
SHA512 a61d06305c81719753e14231cf7bbca7c0e71b2ef532c5aaecbaf65e5123eac0aa95f08d2247a217ac51b450433b5390a9ca697fe2f7c7af4e246af5f470415c
SSDEEP 1536:Hhrw5hVFgxQtvXI0gA+dDtvArBbCfKps3w18o:HhrwPtvGA+dDtYteCx18o
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Random/flourish.mid

SHA256 5921b5e73febe6e1df1b99c76271eb8c693075280ed5e6ee663c6d0fe1758953
MD5 11d22c5ac84a15b62e425b3132e7cd39
SHA1 02bb7a0cedd058d98bbf8754c280f527abc71639
SHA512 2f09789bd1b63d5953df45fa105fd39af29c72b0d23181f88cec9e0a76200d027a3806c7e4df94e154588b5c4f2cad8b43d02d804b363a3102e15c1b99d8f086
SSDEEP 384:uEwtM7bhPHlbhFDSD4nO7bQDwGfAwH4iNhNmUTxYKiOlNK+NoiNhNmUPYEaAYNjz:uEwiPhPphFDSD4nOXCJAkbmUTxYKiurI
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Random/ir_begin.wav

SHA256 9d59c0a853abefc16d72054bb7993f4dfcc1306f548d178e9efd63ded2a653c7
MD5 2e0057ee08c7b6fa07d28863a40d1cbf
SHA1 8a7a11ea3b45d57fcc345574d030de4d1237a178
SHA512 c6161e0f4a9305e81c0f9fdc3ff59a4af99099b003da6e05fe2f48ac6d0171cb3e676953f5acf2a3206112f44d57ccc6307242129db9cd3609736d0bf0d54912
SSDEEP 1536:8N3clX7m+j33GHYBDC+I2MefSr+d9g765+tO25eP1ATT0mHxrC5+f31fj:dlPGqDTI2MeKa9+H0n1ATTp
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Random/ir_end.wav

SHA256 6c81f10f8980755ac80242501911086b78d36a7c43babec471eb4a08f8ecc398
MD5 e83345df81f1e577bb53766875efc31d
SHA1 1423927e0a88a920d3c2856367b5e59a97795d76
SHA512 9b5bff97ce676a6b3c9bd125531cafdc6d152a7eef97448bb67e5ca8dd44b740d6b3254737f3d1609eabd38158489a36ec40ae12ca42af51ca54955bfeba2f12
SSDEEP 1536:wTEve3M2e730nzrdQO1e263UjjTdkJBZB1k2rBVw5WfhWIHA7qpynyq2TI/0+S:LAPdQJ5sjOjW5Wfh/HA7pnL2TIW
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Random/ir_inter.wav

SHA256 b5d01354508221feb555542368f4dd4e4ee7a0dd3085da36380ddf3718664748
MD5 da072f2e4e9b66c4e5f263678d334ac2
SHA1 e3a97ab4c77a6911d023cd89da8d63a01c35d51a
SHA512 c0b54f13f9752993c2a9387e16b47117ca67975f0f117ed6169ed825d6cef1e3803cee47a14d46c9b079a819f49c9df72318f410ef43489cca03421db693112d
SSDEEP 3072:CRq6miDtqCIxL9Ayhjt0QO2b/D46yOWlYiGgvMbjUO1jRe:Cz5t/UvH0Q3fTyVlvUIk9e
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Random/notify.wav

SHA256 7f4c29db9764e9b82e293634958226d731e82b234a034959f83e22bd29fbb02c
MD5 4fc62cc246e25a51917866c2a4e46de8
SHA1 4a848bd59c1f8ac4366d11f49fc32d3bb8d9ecce
SHA512 9579aef7ff82168f0b168c3b84283ee047ed264502088054051a4faba29c3a5b0092fd362c41e2d93e40ccfb8d6c8915d1173a2c7b7fec57ae3103f63c9d1681
SSDEEP 3072:R+5nmIPkxTihxjseYWmSR7/gOULj3W9XBzBnVdZw2rApqZsoYRcupKm5mdEm5Ua:mPkxpOp/oj3W9XZBV/lrrWFRcVm5m
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Random/onestop.mid

SHA256 679054db4e301027fef6a80c7b5d3e0f4f159e7be38dc4392b56d264f77a8632
MD5 17b25dd3f251529dcde8fe4c2381cb48
SHA1 bb4192ebfc34d1d8abd552d11f5458e282677af2
SHA512 cdc2247783c03caef12bf147cc88cf1b508aacdc6a434b1aa66a0db1bba2cfd4efa2399260433df5df7f083f3926249326967b462489255f7c0859e64fafc07b
SSDEEP 768:vVF4oBJmnq52SEFQo7aC5u44q7qQDjeXZnS7TIo9SDwYQcDJlH0u:dFhTh5hEFv+28q7hKpnSXISGQcYu
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Random/recycle.wav

SHA256 9025be556d299fb476c86c51866354f9a56536c500c9be727e9ae01223d70b71
MD5 332294f9b6e6303596665da1fbc132ec
SHA1 91b7a7eafceab3ab39467bbb00a5728108d3f0bb
SHA512 db0f7ae351878989aa7090350947c9eccb6a1e3ae951b2904df76d6af0ad9e024fc62500047d2d9e3927d210d22b19d4e880537b5b29f1d2fdc29726d044907e
SSDEEP 1536:pEciBc1g3i9xNhoChsJahF60QMFuhltpCv3e6Y40RAF/n1xbv:7rJxNhoAs8hNQh/tovtYzRAlPv
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Random/ringout.wav

SHA256 6f0f5b88bbbded9fc1ab25c8ae4dab6186d4c034e491a4e9372841e9784f6fe4
MD5 9b5feaa7a61215ac931b6f3c65a547fe
SHA1 2ce2cadc1d4bf547590c0785784b54151e981c75
SHA512 faabffcedbf3dfca3f5fe2b15345c6754dc44921a9de2c3df9dc88b002192015d2d493219d8f3375384ed85465d5dc0aef3cc384279876bad27c8a7f0c431585
SSDEEP 1536:XQjSZHwYvvjr/YOwXIqJWKaGMdRJSblPxeVoqfOMMKRf6:AjSZHV3wOwV4KaGMdTkPw2qmlK
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Random/tada.wav

SHA256 1527dd1cc9a800369c43c918e15db3ffd7b4347eb9f60f8969cf926d87fe9513
MD5 9cea07534bbc6f606afe922133e63e8e
SHA1 96473e0eb5b3f31e44c9a36c1d4f7875ce9b7da8
SHA512 ac2746a58b450016486d94bbc5555aec339047939141ec828f334ea5ac47365c10b5f923da94469170e9d947c039ff342f18cc789d75b82b9fdb68cd2eb48ed4
SSDEEP 6144:a+Qep/VWv6ozrOOodv/QJu5Ffsip70biqvmGeQieHmP:a+QeptHozrZodHQJu5FfF/oZeheGP
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Random/town.mid

SHA256 184030546d71f7323b3c58be5692b5692cc46469df060b2e670a5a3ade90c4af
MD5 14da05aec136c2db3149fa4cf11a45e6
SHA1 7631bfe5e24f193869604ead2529fe16729cbf16
SHA512 c198d8a088fc66220364e5c6c72d4f6180408d8b5aa38a7381b83beefe6058f35c0388dae6ee280b43870bef1c3a8353502ab6c6e1d770fdf49be86a541bb417
SSDEEP 384:yC67lpg8HCg8Znn/CMWRhXruvruh5TxI5TxWb2CL1dtXLg:d6cKXa/pelyvyh5G5MKMs
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Savanna/Desktop.ini

SHA256 b77586f906749b00246a8d8ce73e48ea42ac69355524afe3b1183e1ac6d8d201
MD5 794f1975f13b0fb6c554d96006237cad
SHA1 4a3989d06826b5e8ed30325e3a2527f62de6ae5d
SHA512 c4e91baea7b0621765c5da6254be846acef4f90570950e02c8ca733b255afc5ee1ec3378ef479c6bf22205a780d22c5b14b264b55f5f471c66dbce7b84d332b5
MD5 SHA1 SHA512

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Savanna/Windows Balloon.wav

SHA256 a8a7ca16d4feb8592743e5f72b4a692e56d814f24902855d2226edf50f2a4dcf
MD5 734c624a2f27a538be3810c525071193
SHA1 1fa03d73373ae58a27ad8f07881ab14e26ea7471
SHA512 451b4a5fc1e9db5f35bea8d8e1d6f707b56690a7162dce32ef78b7a1bb86720837fbb5d574c24fdb50c81d220b8785dab53d562ff1570d671aeb49f5185ec68a
SSDEEP 384:uIW2WbK4c/LbUs3ej5v8wMpJvMHPKQQNzKnQCxYV:uIsTu7edv8hMiQt
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Savanna/Windows Battery Critical.wav

SHA256 8ffbc1332a3ab8fd6b25a65c17ac1212d3a06a94f43a17d6f6ba10d6265c0f4c
MD5 2041ff02df471da297830f3b3f3b4089
SHA1 cab33cfc17de3c353f4ae419eecc943d16d82992
SHA512 e24a52f728dd24eb5e9a0daf7acaa0babe244d2248ffbdf17ddd172950faff2e04a68c93b1166e8204a3cce4ad12e84d7cfd35438b32b2723930fbc0e8fb62ea
SSDEEP 192:gLowYEF0qFnDs4kdrrxktI1k8S0K+gEYgoI/cfPU74JkVaylOLJ3T27pRFudF/:gLPYEuyxtI1jS0Kc/mm4sFlOZwFudF/
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Savanna/Windows Battery Low.wav

SHA256 27a8ffac0cedde902bf7d623176e43f5962ff8979727f1ee484b5ca9bf3f7657
MD5 bb62d4e78b7f36558e6e0ffa5f0ee7aa
SHA1 c9a1541e53a8551ca6bce7ae3cbb4d5fd425204f
SHA512 2458eb8a7174ce73e9f62ade6e5f45ccfc57afbee4eb26391d3f82663e3e41e5c0976519fb7425c9303a15c6247229cbeb681ff87d1b8739c032caf57b2e1bc2
SSDEEP 384:AAOa0WdmOfkDgUFGaXx59tLJ4qAtMof+XgH/3Kfg8oZNg2APgu:uaf2Gah5GqIhPgEnAN
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Savanna/Windows Critical Stop.wav

SHA256 3f9ebbf4ba39c5e9a0deeaede354b2725da7f6d9c5ee8e837c441c7fcf1c301d
MD5 03e8e8e08a975d0208e89c366fab9c79
SHA1 ced70bfaf91b99ca75d5e591cb46fc2b956e141c
SHA512 b174fbf14ed2a28ca91feee93095bfb46254d4adc6493ca76c810163dee1677c4eac6b61af4a23736e88acc755dfce83133f9924a2562a232a95d96a2ae74116
SSDEEP 384:g9Oj/A+ir5QejkZGsBEmmyN05EhWeGdu:3jo75hk8jZyN05Ebou
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Savanna/Windows Default.wav

SHA256 b1023e1d7d4850fd84b00253775cc80d66c929fe17c69eb782c847024817de9a
MD5 034b029e590bb2dd4c604373e1986f21
SHA1 9320988e64bc745192c223cc8734e56323cc72d4
SHA512 19e41a83757621345cdea979783915a361b6cda58bc1b158a517f57cad5280dcbe660b45e596c6f9e61b5248fbad6d6218c5c75b268ba25b2a5a9a48e12b1518
SSDEEP 384:fzs8JVqRjA2D9TWhEe0JQYJSyAEP9+qnh481tJC:fz3VqHheEAmh447C
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Savanna/Windows Ding.wav

SHA256 4ab2a2abeeecbb2daf298be07045e83895c0209853de66e3ed31f9a98777edff
MD5 32eb021cfd374e4f71b1895ecb133ca3
SHA1 f0bda0063ea771423717ef982cce384573cf5f1a
SHA512 4899ddca0cb2c5057e0a81acfc5df1e5bbfe52a4b1860a6bac449114f02cea4a428243f30738b36f68d0793173f25798bee74570bfc18f331b6bfe8d9de52640
SSDEEP 3072:fnwRqwDpKQtQkfhny7JuL0KkRsE472IFyCaeuaCyRJzRUtsLet:fKqvQikfhnmMLa2d2gyDbtsLy
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Savanna/Windows Error.wav

SHA256 99147327b34dde7c180bbf74f9a446e014687cea49d258409b8bad6da1284399
MD5 523b06e6b186c9e8bf57f77204020071
SHA1 23eb015be0afff8d0081698d75eaa41e7fedca14
SHA512 be1e66d083291cf375c317b6e3cb2075b4302fa802d8fcb2cea2466f3efa5e14dc9227be30fe7066872e57df6ab0cd22dca4830af5faa3fc7309cc8f590bef82
SSDEEP 384:2tJZVqsg9yFbxwi526azCTtVtOjpM32lpavPWw:0Xssg0Fbxwi5/TtLQgV
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Savanna/Windows Exclamation.wav

SHA256 621b41af906fec6d0999122a4e25ece1b7cf36430d05f2367ee65929625f5721
MD5 4f1e4e0d37f2f9d425337e50aff42c89
SHA1 81ffaef1c040fa39b890806901c59d0e785cd6d1
SHA512 c22a4b89056fa5c2506761985144f4aa9c28bfea4f8b55a10300a4900dd6e1d511bd60d1879db0f2bc813fda7c3e7dc9f50a3572e38338074060782e0b9cc86f
SSDEEP 384:NThzVAWqEjsG4MwBIdBPaBTeaR0EVJCrtimBusIUgZqx:NThz4EjsNR0EyMwtIOx
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Savanna/Windows Feed Discovered.wav

SHA256 d79309819a89c790ddee548ee0d52d053f465f9f270cd40e7a348e8a2a99be30
MD5 be9b2dfeb22abb6d115685b4d52d8358
SHA1 f6baa449c382ba0f5a1b0df324fb4f89ac70d87f
SHA512 90ef1c54819cd9e3f12777324a3c66f574958ac54ae8721b3cd51d5ff8e6c8b7a820fb585c8f81e7dbcbbad0f3e82e544fd29f46328d652ce7d13486deff0eca
SSDEEP 192:6jgrgYhejDiZ0hA8VpyLz9CrrrQWNbSrF+omVE65PG5:sg87DtxVMCrrirF+HVE2G
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Savanna/Windows Hardware Fail.wav

SHA256 bf729c1835e7d05ecec89f1f4a39bfe63b5f305119a01aa5dc9527490ec9b6a2
MD5 3b351cd0eff5c7b91eba893aa8ab5bb5
SHA1 4abe6111ba08f0d879b677b90996eb10c7e8d5e3
SHA512 12be0f72ad21153b2b4926dbea0384b82f106b7eb5f19b5631a80a94f5d85673d0d948b882935a34ed54abe616ac2604718d77996b589f2dda522b1ddef85842
SSDEEP 384:i3ljFCRAVmxcnMJQ7UZxaSXFEM1/p1OvmzBe:i3lhkFTjjVt/PkmzBe
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Savanna/Windows Hardware Insert.wav

SHA256 54f2c34850a5d1a37700305ecce51edf6201eb29ce8a818bac3cf88d52fe31fd
MD5 87659b1d702ce94ade4f3ebf99181de2
SHA1 776825dac2f20a865f276be443edd3119084bfea
SHA512 279c8078544b6d3759436110754f0d2ea6264c0878580152bce04380e845ffb6c17f3de68ef3be0eedc548c98241640c7679061bd9959d5382aee44efd1d49bc
SSDEEP 384:HtXk2GHsS/oAckFAOl2zFwBtkcLNL1uI9o:NVGMS/TBFb2Z4LNpuoo
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Savanna/Windows Hardware Remove.wav

SHA256 680f9d1ea97bd11005ca38ce9375ec6fe628f4f88b5a4b8b226b8cdf65c74bd8
MD5 e4eb0fd5339b29d8e24750c8c351033a
SHA1 ce9f558e167c6e1565068de5cb850d03bd53dda5
SHA512 43679abd9a4ab7891f78d4865052e10ecd7424245ceaf71ee2862772011b9de4907f8827bbe804b3a64e82f4e736aa00fb1a9ca5181bea43fa01120e17ff6e4d
SSDEEP 384:znh7yP29wnVw7xdrQtGTLtZD1nvk6mJj6Qi:znuwlCELtZhvqk
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Savanna/Windows Information Bar.wav

SHA256 c355762912cd97d7d510a681fa54237beb4e922e906b9923e8d86fb7974e3c82
MD5 3484c1613c82ebc995b96ff9a777b925
SHA1 2fbdfebb8b341fa57731101c35337204866e991f
SHA512 e860b14e10c1946a018e6e5549b9384690be2028f6849ef12728569130b5a3cb38c71000c2eb97846534c8b75a199fd93c67f5f066349d74325bf8d21c2ae69d
SSDEEP 192:iEYqrmL7t76CX5L2bZOUzsR1ohtp8yVizmp7qjlOBk:yFdx52bZOatpVViapYKk
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Savanna/Windows Logoff Sound.wav

SHA256 afdc1e1c636cb6fb2a42ff466cf286e68d863f081c536a71fee7fede40dd0537
MD5 79a6e334d09e8d3ec3f318fd78b890b4
SHA1 84918b1e00fa3ee6cc98a954bec21fe8e70fcd22
SHA512 e002ee392e81e1d6004fa8fd1e90466cf241d58c51f530da3a7236081f770e2919720ed34dc1de294b17ace519f7152790bb33e363d73c91964be25e51542f71
SSDEEP 384:nZ1l/+9RJf8ztRl55X1BWDKADNCoam+80Mq0xFNOuiJR7XinZVbj79:Z9pRP5FiKcNjaH8oKNUP7Xin7j
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Savanna/Windows Logon Sound.wav

SHA256 d2cac492de7591cea3479769dcfc40d5d3ebea9a468e99c0a78e403e958e4981
MD5 b09369f64f0e8735860b3a4cb9c10ef1
SHA1 65ec92db1445bbdea85f3d0b96e25405a5fe4982
SHA512 a3ca186078ea3c5d5cc343facadf0c86e75ef7ffe1d3357de2929a24ee59dcb1825ef2d68bd6a4db006a843f36cde74b5bc459d8ca031a5b18d3e095ee609254
SSDEEP 384:Jd4gcwLjGAHY0E6qfyg/DT4Mt+M9jXdT1kknj2axzkcCzqEIU4pqlstnOgE2:X4g/xYjb9dRVqgj2ozJCx4wGnU
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Savanna/Windows Navigation Start.wav

SHA256 fe9681383a13724d9e17848c879c91e802765f03e588576fe71ff2eef08875c2
MD5 c30f887e6e7ce8a9d710875fe06d798d
SHA1 47b4a33b2bfed6598b6617f1a5e701e19f49b1f6
SHA512 21ec134b05d47fc36df4a38fe303c621216f16dcbdfc121c3bd1eae4cf1de355dbdd57a702b1682b567b4d1d4c4782349ffffa95083bd853cee8080f187187b5
MD5 SHA1 SHA512

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Savanna/Windows Notify.wav

SHA256 6070c9a842810152671bdc6be09a0b4a02ea999670e24fc12244d3fec89940cc
MD5 1bceef0e1d9ea0bbe2247e2154ef4f4b
SHA1 74c46c48ad373f6d16ffa62454ccb67c748676ca
SHA512 c092b1e0cf39cd683b956055e4401707f1873bc7345979df2e5516afed5c147a41fd51f0a4e12dd9a5301dd06e66ceb1b658d76da6ecea9ca7c44b5fbd5c36ae
SSDEEP 192:OoMEa7ewRP5p/M+EOlyutauWPZ4dbf3hzCFg6MaoPhUIozPWVjNuSBHyMudja:OYkd9ENu6Z4dbf3RCFgKwjoeR5HyMu0
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Savanna/Windows Pop-up Blocked.wav

SHA256 f71b0e973de8a660456a1c0b5604747f25e26b43cbe1797df88d4e0f51d7ce3f
MD5 a3e1423476cee7eed2fb5e157cf5ed7d
SHA1 0dbfdeb2943ba6caa54c0a099562499974a44c2f
SHA512 0d8cce3884d5f710eb92725b26dd4889e5e0a733725525f9cffd3d1f17e0ba04f715c6e8e55c7992c6979107a75dc62d39661abb06f47af5da0511bc26919f7f
SSDEEP 192:Wmeckonvqx9mTRH3XklDPucNusrb71g9ZfPVpljW0DZrm:WzJU7TxkRD71gvZjW01r
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Savanna/Windows Print complete.wav

SHA256 29a7adc4956d764a8a46912df9318b680beff824feaca7599b3d23797646ac5b
MD5 c70bb72d53d87b6b1320adbd4a4e6742
SHA1 5ce728d8c97c4ae268779882fefe1b3de744e441
SHA512 f3d113714047d7045d390cd4e45d531b448df4355a27b0ab30851a567dd2a006c008947a3b0b04085f7f203961762dd397e6be42f234151b828bf8d72969adce
SSDEEP 192:NVxwWeEjqsiInQpmgW+ZQSvzSO8oVko04HgadvT/KfYEEUta/T054IT:juWeEjoIgmm9oHNadr/AFg/6
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Savanna/Windows User Account Control.wav

SHA256 345f99d213d56710625a1536364638e285497002e98ea31dde645a0ca5fff009
MD5 a07f15583a91a92110c521eca60ee8ad
SHA1 975f09dd3c131ba728cd63b1febd87a69ce813a3
SHA512 55cfaae94f005d48c96862a623aeb38ab23f131b9b3de03414dfe2d6c02666cabab0d9ca6fb1ab4d732fafbb6844e49381cdaa8c139d546e5b8af9d54341cccd
SSDEEP 192:nGrXtbiugLl5ojgUVLC4VPVg/UW7VplBEv7ufuad9d:giLPggsg/Ue6zupd
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Sonata/Desktop.ini

SHA256 b77586f906749b00246a8d8ce73e48ea42ac69355524afe3b1183e1ac6d8d201
MD5 794f1975f13b0fb6c554d96006237cad
SHA1 4a3989d06826b5e8ed30325e3a2527f62de6ae5d
SHA512 c4e91baea7b0621765c5da6254be846acef4f90570950e02c8ca733b255afc5ee1ec3378ef479c6bf22205a780d22c5b14b264b55f5f471c66dbce7b84d332b5
MD5 SHA1 SHA512

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Sonata/Windows Balloon.wav

SHA256 c14eb5af2e83d44984b3563175e49a4c22a018d0ceed7a7c19ed6cc7f9183a43
MD5 fdf3021af5a0dd9322f6e0e9e8585c09
SHA1 db0dae198876c8de87cc59364bc5bcf6ffced05a
SHA512 54e3e12c01b1b5ebc27967c6e55229f347640675414ccbd28cd6c20fefc844ee0ec588203025a2d0e084a420f67e15c970e8c418a6e417ff00262fb0c99332f1
SSDEEP 768:MUMDgbbBrx8DcoIrXs0pEKFWL2G8SKn5YPO1x1:vOgPBrx8DcoO0LbK531
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Sonata/Windows Battery Critical.wav

SHA256 8ef4ba8d3d88a6f378bfe729342138990c01bfdb09610fdaf7ad726fe3fe9391
MD5 97398546169af02bd99a5d5152cc280f
SHA1 8e751c10c9c76b8d4d03f011b828a3c78b8afa06
SHA512 db9000a50beb04606b81c3299bdaadba55903fa13928f07c1833f49b8be850e761f21ea30124514a980d2242346589bcfa321dee19b052286d92cff293a7b4b8
SSDEEP 384:pDVxCsOk/oskrqF2kjDYC0UQwW+jCzUTp9h0EtcMK+nDbi3RsLln:NDnPFamrTpbJJlnDbey
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Sonata/Windows Battery Low.wav

SHA256 accca803684245e5b051f882499d7a5459e793e9eed95de57e4cc56a556ea1fa
MD5 aee81038fd00001e88e6ecd1d2246036
SHA1 7c38e55aaa8537e57d545cb4c1f62437dff04d9e
SHA512 38f9c9d7f64e73e40f5127cb760e13ef9a7834978a53a9d700cef2e17b42e7100f0954a8df26de1836bd48e12c69969b27ca4964d5e07b0983e274f94bc5d99a
SSDEEP 768:GYkiY23VcypaZN2evwxCvDFX9jrGPm1m:3kQ3VzEN2evwxADFNjrakm
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Sonata/Windows Critical Stop.wav

SHA256 7eb5429433f15210e673b4fbb8d28bcaa314c0fd973e643228063d02752fae6f
MD5 a7f61b0b4512db0007e1ad453d1534cd
SHA1 bfce641d6715a0710f69c0d94d9e4113441c41cf
SHA512 df5a3402b7ee93cc4544199a4890ee0fbeba4e4558156d9e162bcadfd8abbb28baaa6ac38d9a7c99ba275c495af31e2b8c0430ea9315338384017d8dbd2753de
SSDEEP 768:xWENDgvqDKH4nIaXvCPWAmVhhAp1pLqta6D3:ZpgWn38WAm0Lqtaq3
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Sonata/Windows Default.wav

SHA256 764ae2ac783063bdfbf6fb503cb042c3d9e15d3aebc77530591936e84bcd8e24
MD5 d3610a22e2443192c500e589f56bd5f0
SHA1 2dea6b4db169f75ba1f523f6b6f3c36ebdcc7e67
SHA512 1332899f65aee5fb00d8bfc9b592c09bf7c82252f25fb968d6ac0ceeaa4e47310d46a2cd1dfd4aa471ee1d8a68c0b3e575ace16c40aee9f1d4d532b1a4323103
SSDEEP 384:S8XbL77lgR24HuGjKhVM1mXIDOaF+hafqKyRy2P:fLLHlW24HuGjKLQka4cj
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Sonata/Windows Ding.wav

SHA256 0dccf6e675d59016f5c3ed9ce62bd8c3130b57004b769c4fbfcea31700b093b7
MD5 3e686a387867b9432eaa1ba8a762dc4f
SHA1 4ccd0ad61816b9b7caae5f49bce13fd439fcbfc4
SHA512 c9d028c16dd8381b02d1143a3e8874c78f5308f045a8994687b8b570e187b81ca524d7b82f28b7be321e20d8a84364120129234899e95bfe531ce9f3ab6d2cbd
SSDEEP 1536:UFqXd+PeGJSzHIVLnJAdJC3nKfjNpCzFzZfLXo4w6rB1IqM/r5NCQTI7RUZo1qZW:UEXd+PeGJSbI5JAdJkmzkZzXw6oDz74F
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Sonata/Windows Error.wav

SHA256 ff76605f180d752f4bd0a217e6d5e96c77cecb560b575b0551995f2bd94076b8
MD5 ae1e0192a25e2b5f6ce996ef72a9a35c
SHA1 ca7bbd1ba690cf29b87a37d3bb83cd30536f8944
SHA512 f350a5a9103ffdd0422c7655acd5532f3ba1688a6105e1c11cb1b752abaf75991f1736c4c45611c48d50e904da7e64140aa0c9da3620f78a9bfde6a96b6e7aa8
SSDEEP 384:fZsMLceB9dQppe/I2lIV9J6eIHAxZxcp25oL8wvSuAZh/n5B9RE:Bsl3pUI2lW1x/cpuorAZ5nx2
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Sonata/Windows Exclamation.wav

SHA256 bfae55bd818f570514b9ae5729fd19f5fd06a2a06f25851cd48415956052e175
MD5 57a8f732ad15b97c5897d3368f17099c
SHA1 582ce865c72bd0b7a5a1f484ec70cf0cd63c79cd
SHA512 171d9f5b8607c9b6ae0c037ee1bb8c2a5c6c2a5d8dc1488174ad0e626ac58497dae0952a73fd61885869d48a503cec714c75dd3103dd9f0554f5bac99dcad74c
SSDEEP 384:kniPdvf6a4UMtsTb8hvvnS1ewyEZXRoZuZ5+6bx0/+m:AiPdvqUMsTbavq1hZQqg+
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Sonata/Windows Feed Discovered.wav

SHA256 410a1142ed1d944cfef1edc5d5db7174e34cd6e4ab800141904fd92a9c6f6064
MD5 3e81ddc7410581e17acbf0ea1d928296
SHA1 96cf5dc5287268b415bd4d7ca69d9026d4f196ff
SHA512 a372020481e59eb1dc40c6a1139f90a74c77dc1c0414b89422d100d311f23fba4aafd645d0ed59526488f7a2036e08b493ca46ee5edd70ad2c45197887eb970b
SSDEEP 384:cTYHy9vfv9oknyBx0puwRQnzVGieTUpqsTH6T93:aYSRv9oK5RQnukHQ
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Sonata/Windows Hardware Fail.wav

SHA256 6579b12500ac4d9320a6ff24c946d46c7ca5db299d238e94f0ce723575f3d8b9
MD5 dae1db3c2d3845fe3db6e5f5b554dafd
SHA1 d600142f56ea48e71a8e5b8cd763e1161a7d201e
SHA512 cf24e1f155baf6eaf9c059a6651f67746111fd4a48e103ddcd3083e67697e65b2531b5b7a3e7947c545247fc5729db974f09c50ab08a3d748f67b06a23bc5728
SSDEEP 384:flZRWHMs+fQaa19hrOK8x+/SB4259liNxXH39YO+yOY:1ZRfQaa5Ex+aKEQHUJ
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Sonata/Windows Hardware Insert.wav

SHA256 8dfd71024b1eac6f771f563f9a7fcded53de5f08853828ef6eb7f3c6377399e8
MD5 569000b4e343225468316c9a88d59a08
SHA1 15c4583d1a34cb2b2416e1cc549935480a9b21f3
SHA512 f752f524baab87d17986d55c85fddea04b927d111b01b1a8729da5e49022827ab9f6510259d650560a80b3807bd22ec79d80d3403eec60219ae2274dd6ca1c53
SSDEEP 384:hJSE4toFOKaCN8gII34Kp44AbAyeTD4qjsycq1qSOmytoJO4Ymk4eq/v103:iE4tokKapfKihkTDvCqv2tPeq
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Sonata/Windows Hardware Remove.wav

SHA256 690cbd50525200071377bc3b2efa20a16243d2b08fa03db8c291b4fab3087791
MD5 c7b2f70f6ea9147b543f89188c538a60
SHA1 3ae2d51ecf41bee32df4fd1e5f9c7de71b58e666
SHA512 e1f282ff9ad5bf74c780e66ff2975e46a6c0413cf242f6cb84ebbb6cb5470028bcd277ec11658b7cbd3ad6879bb5faaa2f670dafbf15ad20cd15d68f71803553
SSDEEP 384:EAyQsIZxGGxDuPnmT6v4ZJvZK8M3s69q1Wi74gutMoMA+DFZXLZ:NbIIDuPnuoR2Wi74gQMoB+9
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Sonata/Windows Information Bar.wav

SHA256 506b54581002c370ea8c55c76d83547f70b64fcd697901c0ff84125a09174058
MD5 916dda10ff23716a49500477102d489a
SHA1 dcab1d9614ffec5d443b592ed5037176aece47c4
SHA512 cef4db364e10b1e115ab46b7b0efc3b42b3d358d35c61849340d5842582ac3be310c03556c9d648d5eff86f3b2854c357f6815a174713747c78db47d97e47739
SSDEEP 192:CKrZl0lCutGy9YSSwVucmWlpc8Kj+zhxLkP8UItx/6Hal7C1VhD6mJ5pdeJNcE+e:IrYQuP2pVKILkv8TC1P6O5X6cERkj8
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Sonata/Windows Logoff Sound.wav

SHA256 a4c575e3844d09528dc39482294361556e61b537e0c0dd0cc841462554d0b5f2
MD5 b5615b9a75f6525ae31b22d08e0d4d8f
SHA1 e214adc4ffdaa3c5f16aa45d0dccd17e0b838c41
SHA512 8da37669d81d6fb0f001ae673170187e6cd5094039ee2396524206da8d379f03194d5757969776d0f17ed9f3b41ef521a24f33a22f4763b9a28f7a801bc0ac28
SSDEEP 768:wQ9m478WGLXtvPtJAyimrZ5BLuVkWiF0G60UHyg:w1ZtPtJJLBRuG60UH
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Sonata/Windows Logon Sound.wav

SHA256 8f5315049c4d717ee1128f23b6c0ff77fb94f485cc10d6dd1b067c1e38163d2c
MD5 0c2e1bce71e49e25a58120dfe0b66185
SHA1 cfab50f19d31eb429b5ca1217406e1516f586a49
SHA512 d0a6f1982a185eff8a688356bb1c67154024d3b7a4857ee178a461baca8fb77ab385d9d756a82319ce852f268d9db46ea84ccd38fcfe006987946d1ff72cdf7c
SSDEEP 768:zXX262kpCShSNwluuaS7RXZ8FNrWUCxem4+:zGcCSKwlZaS7RX+FNrWUC
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Sonata/Windows Navigation Start.wav

SHA256 c03160ff5ae3d3b3ffbcd2133024bbb7f7240b03a41abad82b0238ec83dfbb47
MD5 db912ad0c6dd37f7b6c9f4b1c779a37b
SHA1 21577e2955cc41f443fe3f4e1c04a0a3a5a908ef
SHA512 fae5640c34f04e26a45382ae684ff35038fb248f2f4107cc0e6ed92f73e4b0bc361e56b9551b1c8e153c68247efb81bae677f9f48886359a7350cfcc5595e7e6
SSDEEP 192:QBHsFtrVcbNAcyjUmxE3+UPy2s0EZ4ubi:QBHsFtrENAY0yvPy2s0EJ
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Sonata/Windows Notify.wav

SHA256 7f2e2e56e158d6c9a68ba7c5674a31e7adb147a4ed863e76a6e4fb2f086966d5
MD5 17b98d7b468faa34b7ecb864e0b90b84
SHA1 2ed7a4e15c86b1f22686e85a9ab16dd8b076f893
SHA512 054bea31adacc8ca68d8829c776e3a51eff55873eab82e14c8f2bebe8346ea81b37c838f1b74b89a8827c91b7dcd3204308183a7a262bc17103acf345c706d5b
SSDEEP 384:f683ojkC7MaVJiu8uzKsBR75ac0upEKFahAa66k6EXFtAFQ+k3W:UjPIaqDuTT+uTKlRIXFOCdm
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Sonata/Windows Pop-up Blocked.wav

SHA256 ed1a5b6fb4d453e09603a13a689169a61d866b56c706d1db036c3869c5224e05
MD5 08e7ef7dcc4d1afb76d44ee0dd9e2690
SHA1 8150ab93f1775185a64679ce9d8438e6027728da
SHA512 248703560b8606c1187d82d1076b97c1d54c3ea46c3bbb185e37383a85b71eb48eec1895e050c87dcd6f502e0f99de4a20c0bb714621ee5a1c4e1cd4015fdcad
SSDEEP 384:cHQf06NK3UfrkQGiIFIyMn7OLmytTwoUghukb2OQM7F:cHQrDfryHINn7OPwzSukCMB
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Sonata/Windows Print complete.wav

SHA256 e755fbe7075dc32f7ba827a67dff02613d04bce32bb1c7d8eebbf3f1a0147990
MD5 3b0bc32523c6b89ca64f73a9a716b387
SHA1 5eb9b7e374aaecb82b536516249df6dfcea101a6
SHA512 62a7a41217c678f1fecf4ca723a9c8a7c350b6044d93044bec7ec067a602195c60ead43b94a0501a9a27ea0d3c30e879995e6d8e16bd446c5efa7ab212bcf5d5
SSDEEP 192:KsBiUMD9Se/uMhQDya9tUX4XkSg1vip9mryzEHf47H5bRd1tKfMhrlt+1Pl:KsIU/t9SXZ1iW9/Ex1tVhrltmPl
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Sonata/Windows User Account Control.wav

SHA256 fceeb43ce5104375305cb0f55408d9ae979bc96ddd7e92e313dd4f2b38974e04
MD5 b5d7cc1b7b5f5946f3e419fdfd3ddd7e
SHA1 1a3123926089ad999dfdb145693e0fada81f6cf3
SHA512 6e9c28927f154f4923b902f2daf2f4115f1981186679c7700670c6fe9e981aa74cd035ef3a855f06ff3f229ac17f27fa0fa92e1f1390ad944f50507dd2d95bf0
SSDEEP 384:fDROQ4hrN6c9+hbpGFI0MntwODOazSSfip6pSD:rkQUrYgMpqI0etwLazyYSD
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Windows/Windows Balloon.wav

SHA256 1e646954174841eb594f8573dc761276d3132b2389554709ad7d44e6772d7a7d
MD5 eaac3f899d52f9405f808387a4a08c2e
SHA1 541d0945caf706fc999b3caad6bd5f1bdf1acc3d
SHA512 e8ce2ba0679798ae37056ee04a89b1372d7fdd07bfedfe6db676bcbdeda3784f0999e88b83f1c3b794fe269602ddebc15dca8e97adbc18ad26b394690d1853d4
SSDEEP 3072:ST6e5yRidFEupXvVxRXscNRy8BUmIfcIGGNLmy222t7iBL6kckTMGt:fao4pXvVxRXsGRNIv222mL6kcYt
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Windows/Windows Battery Critical.wav

SHA256 873f59c7c115bdbefd4e3f650160a72e4aea2f9af486ec95d6dd2c0be430cf79
MD5 86081f09e2c66da799caf2f6026c8404
SHA1 6576008e4fccda1f5fb5a53cdd9fcf2148aacd3c
SHA512 4ccd31c7366ee9d08bc757a9e5df128d1b96db2a8394dce4edc4df5dcf1ae0ac23773e5975cda703d2f82670076ff3642c3a750863ea5489f4fa3fc671c36a98
SSDEEP 3072:p/WBaSt/eF3GGqdPoOzO4fGP5+ToiF9OMlrPRlrz:pBStm0pO4fGx+ToM3r/
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Windows/Windows Battery Low.wav

SHA256 61eb4fbc96d79324053dcce4a70dc2d403e61259ae6bd959fa9e47008147d186
MD5 42ee6c2e8c147e61103d7d30e3d2eade
SHA1 6876c906a0a471833641e7f9b2b65b3b211f8cd1
SHA512 be6bda42a1297397e73a1b8ef98daf3785468d4e01a2cc6977c7ebd3c1a94f6175a4403adc65123ae7fe7915d51c729010d20ce633583ff9025d4d56dd406c23
SSDEEP 3072:8u4FMHnPI5Ddp3J/j7IOqyZBGEqIdzF2ZBWzOpl7Z:MMg5r3JwOqyGpIdzQ
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Windows/Windows Critical Stop.wav

SHA256 27dc9782ffaa29c830158374afb9370f4df32d03b592e83251b55e0a8e972b98
MD5 92d195fa7a679783f829c4a11d55ceea
SHA1 7ddf9af6e7519e803dcf88275e9fba8672f70507
SHA512 f315a8ec47d418e6c22e8edb88491ac3ebb80bf1fa5580abc2d148fc24fb18f9760fddcdee2cf159fd4e3b6851e29e338c4510d529cea4d5e68caf83a0ed5f83
SSDEEP 3072:qtMKp7fJxFuWWeZCvhgFy74REeJaGYynG60m4k7Rh:qt/pxuWWeX2XD3yG6
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Windows/Windows Default.wav

SHA256 6fc1edd17679bb2af8a844aa9b7da03fc72c55cf55eded8c3a5b99e52d96d11e
MD5 5fecc63637be667230f602c8a4e1b840
SHA1 af99e982bd1ac3a71690e6b9c407ab49d87bc310
SHA512 272ee86de2abaa09a2db9c7de2ddd8047713bcd01d583569239155f748bb56518874a486a1386ff92b47328749eb63fb0e8f01f53b420ea7a81b50ec833e1d20
SSDEEP 1536:MmXtMV+5f/K+DQ464w+5hzdQOutu909rxxDJdct7:MziK+De4w+TzQW0ZDI
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Windows/Windows Ding.wav

SHA256 7020a1c64207ad8e60062d5400e1332bd07d95bb59cc82af2dd4b39347c64a76
MD5 c43f538f4f8792ffefbdc3c327de5431
SHA1 b5ba0b52fa57810136d47a5fbcd952a45e0506f9
SHA512 88b6a4069b23c8357854cb9520258c92bcc1bc141a193e9510a72e0ece9cf912a283971f462f32402e9641e73d3a580d78d7ae3c937619c6b89c730adaba9d96
SSDEEP 3072:s2t+yG0elcavczbtrMuo+lZKQgFZF5AIQ/97wZ:sqg/lcavUrMuokKQgFVAI
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Windows/Windows Error.wav

SHA256 217e7bbcba8b6f5af6b4ceb03f11b5d8393862b7aae56db6278911968a48c8b2
MD5 022ebfe0634350aa25c4083d7c394af1
SHA1 82518572b899d8cee124c3fbdc6b0b278e7793cb
SHA512 04fb3d343e5589ddec42ae6e088a27008cf208f2339ed281608f518c3f4d9dcd37882a3266bab6ece8ee5a7778778bdc223cd44f6947ee63eaaeb3db2f913f68
SSDEEP 3072:azzjvYr9Z/M+eMiGN41/Py+BrY3pIh4ZFDIGG0AUqOWjJw3F:8z6/M+eMiHC+BEnZeGGpOW
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Windows/Windows Exclamation.wav

SHA256 c362d950204cc8327016209a3246216efed7167cd92e02f754b963f49f793707
MD5 138500e5ac33bdd08aac6bc866af2f1c
SHA1 3ccf9d413cde36f792f4734f03f3832b46094e04
SHA512 b26b5ac117331607be16fdb4a2bff89795978d76a7d8d2fbab2adb72cc8eb7e4a77593eb0d4b281d65dcd8e860b17aecd6abe7bf0f862fce9f05e64642f4c97e
SSDEEP 6144:jFh5kOaftzcUqF0Joyj0VgWYIMm5njy9tM:jFhCOIc1F0JoK5Wjnjy
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Windows/Windows Feed Discovered.wav

SHA256 1ce44ef43d39d5aefd8b25d96926848c569c1b7c0bfa029dfc8310c2e1f7d50f
MD5 f56a39813e5c699722ce510793b8f056
SHA1 dd1524bd1863fa326652681740c496218ea1e75f
SHA512 6ee6eca366fa038bc3e089017afaccc318e0a1fb2b5d07b332bcd18d3973de14229677493af5527155fb9a051507ad36881381d84e18bc5c4996fcd4912a569e
SSDEEP 384:zC68GMLiywhCJW8DNJTuQIgP5z7rZZBJO68SOyV7kyYnmLsxtXbTyudm01adotHV:mL1hwUJW8D3PtVZSPWmy46KtrD938XK+
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Windows/Windows Hardware Fail.wav

SHA256 0c4f60760d9b80f3f053832d6ae1fcb90576cb118a3e0a1574e234eaf7cbf4ee
MD5 35596a761322b9a6b0f8a48ac7e10174
SHA1 e95c0a2bd29c5651c667f9105dced7237b526ccd
SHA512 a2d12fd9b0b7f559d6bc373ebcde10a4e250d84771ac686a83ee8e1721561139862dbab5b66153403aaaa1ba25231f79271d9cdaa493bcf61a83017fafdafdbe
SSDEEP 1536:JIEewU4Fx34LcB3lqeLAMIswC0g1MtDLSWNJS8bQbkZh:agxoodY20gO0EJS8b0k
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Windows/Windows Hardware Insert.wav

SHA256 2536d34c366b343cc07b53850ae800fadc608149fe4d04357fefa80b447a1c1e
MD5 f3239e2c3d4dddcd3b5c428fea2f1c89
SHA1 cd5af6d03092dad73fcbeac08d345db6b47089b4
SHA512 0f4bd23832f29804d2adcc036a7f976531a1f69fc306c2fdd46be9b0ea34cb60c3281311643cdabf2dd449dd98d054fae84ec7c43b173dafd64b51833e300d9b
SSDEEP 1536:VbDmIZ3KPLAWnbdmUHpi9dWC8PjhxyC0PkUAJKrHBrrhF6h3wC:VWIF7Wnb1JIWtNECsdAJKr87
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Windows/Windows Hardware Remove.wav

SHA256 fe1ad6c8b2fdbb60b7c3b5f5303165f713745f05aaf85e0bd358eb3b81700e98
MD5 006d4d992547da2688208492ee91fc1c
SHA1 7c0f6b300f7ef39f7d1032edce246e315a8af883
SHA512 cb3f7f8dab5d4a0e8f0a913a9d68c4f703a5e5b40c66227a6a73e50feb042d20d0011da27d6965ddc749b6b483c97b92486c9b537235fd42eef172579ecd99e0
SSDEEP 1536:XKFU4F0QKYgZRxvT01jJzoVAUaLbgSrsiKHYUl8+uG:X0Lf1gZjcFzQFXiElJ
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Windows/Windows Information Bar.wav

SHA256 fd1b4b2472b731842dda8c29f7f82c7199294d75f9f606602bc6ea737790ab6f
MD5 0d9e9c0a8b66b41442218e83d109f7b3
SHA1 f5c9f1463c6fe09894a1b4a063ae2bfe8395acbf
SHA512 10628f8815ea9d5e761f2790c23d5ef32f5906d9b8b20c6299c64222cadd01880d6a30ce1349226e07a870c426d8b12222b4d1d78612c6e0d46c03d2ef086a78
SSDEEP 384:tvd4OXTOLGYCIxLVAF+cvI34lyClJ4hBbQoB7pvoD6G0TA+0LcKneNukteCp6CL4:Zd4ODOLJtVQ+cvnvg7M27pvomjzXLeos
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Windows/Windows Logoff Sound.wav

SHA256 5be225a34e03182028c69ae0cdda13e3beb491d1c10674e043b5cb7329326a7b
MD5 1a2ef419028c8e9317fb0290b269a966
SHA1 e5a01495bc63be0aa9deaf9aa65e4b33c2cf5e28
SHA512 eb4b115da5b69a982526f1d82db068d8f5bd8e3e94d51f62fa739b1d6de8821c1353a7f8fc9208d52f9766e0a874d5dd5ab3651038283ed7587e1c3070b6d0f4
SSDEEP 3072:SCj9LNVEVo7GIszHoEkfke7jlmawCqN8J2PROOLftW8bJy6VuhytCC0W5qXkjNCU:SChNuyyIshkbjUahKPR4eJY4tT5qXkjf
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Windows/Windows Logon Sound.wav

SHA256 3d9908bad270909fc063e4cf26e9da35cf5c36bc3074fe6fc9a50ebc7777227e
MD5 b25dbb1ec64b8bd3f320a9bafd2f899d
SHA1 90a081b493024a64384f2fb8ee5b2117baa77116
SHA512 f60d8010dc5f1ae45990c4e5d2cd893e74c50a012472bb3d94789cdf9c9ed38dbc5dd1321fd84262fc691ac57fc94fa4cf0ff0e1d8eb7741c8fd9aca0ad60af4
SSDEEP 3072:fFXaCCLHnIU96hJyh+tpK/pLB2rePTWL55hzVBFr7ylJ2L+Z4j83NncTz9+:fFXXlAWJPvK/JB2reSrr7yn2L+ZuIWk
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Windows/Windows Menu Command.wav

SHA256 66bcd3c2c60a62709131233d4eea48f7d53f7fdfe22dd5dcb0d03b3f94c48ad1
MD5 822b4c37ce07436e2192785f3274386f
SHA1 8f25e5d74a7e5ce13fce33ed4587e56e16941754
SHA512 b68eb0c15c2a37eb8dd76f552b70f0ae22b7c498d83a6c2ab0bc4802985c5152d6949081d4f3dc0302097315a8c80b1ec52ff4bb46506072cf2f2712cdebbae0
SSDEEP 384:0bl5ZHg08ahp56XT7s3QnoUUZ+PPYGCaWQ3FZVeRJx6b7D+KNR:UbP6XTI3WoUUZ+IcnR7S
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Windows/Windows Minimize.wav

SHA256 3b71ca5a67432991ffa159d082cbf96c7948ad2db7486e6d491063d68863e3c2
MD5 8fb59dad02c94ebc63590b14f4d1de2e
SHA1 dfc56f0510179d9aa177a79293235fab551bce2b
SHA512 e4db413e98e012ae05f842a2aeeae7430d671680633c0ac92244a992d115b6a4210948bb6f62e5bfa6cc473af4af1d2412dea42714d222fb50699b9dc8d05bb4
SSDEEP 1536:+BER0czMHh2f/Q7zoejiSHaugTaQFyaJDaa4L9v/VDnkIIJX93Uas9EV2SCbkydg:Ab7iSHauXQFyzxv/lkImUasWCAe
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Windows/Windows Navigation Start.wav

SHA256 682c8a7cf410de17c249775aee568ec1f9e3341bd4409e96ccbba4882f1d8670
MD5 b82aa79f496456ffc5b952b484af25f5
SHA1 081a9fdbfa6c33c03e90d2e8f560d915672b789b
SHA512 1fa163052c67cdb522ded74cb3e5beafbf415e5ddde7473040ac91dacf5b9055d975fa6592b6cc9c7ceecfe800224d7489f022b542cba974f25cef3950f20687
SSDEEP 192:GcieXzhOh9LzBWgqg8Is9qcebsheasXpEFmY7PB9d0N/n7Othc0LZEXX:Gcikc//BWvEs9qdghk5EFmYt9XHL4
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Windows/Windows Notify.wav

SHA256 e134873ca4fd9140e5a90ed5d57814115b2f283dacde68de138b25a5c80ec264
MD5 9a076491a7c649604a5546a9cfebf79e
SHA1 c733ac6a193d64aefd57b3fcca564364c2168e29
SHA512 30da54b1ebc307ba63e7865a589c42dcb231f68c4af95b3cde8731002b26d15ea1041eeb24a5a73878fb4567cc4d0530c58cf971390dc8df08799fbe55a91c80
SSDEEP 3072:WeZtgAVKON/Ig2hOm9CyeSIDbAKTpiEqMicMt:3dVxA3om8ZAQ1q11
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Windows/Windows Pop-up Blocked.wav

SHA256 18ed883bd848af6ffd1121baf332d021c5b4ea91bff4a8819b9dca14fc080a9a
MD5 871cbb63dda8c8673173d34b9d67b11e
SHA1 7538fae92e51379c0875a6a51bfe6ec7f1454dee
SHA512 6b6d1fc386e949e50eadee27f349d1a5dc1393ff16db5f4042e6f9cd2859d49e25e23f2d9d937ae8df141e4e9b8256387d5635cb336404885274bc9d3617200e
SSDEEP 1536:YtXQDrhXLmpMatlb1NmLVnWscCJDgtAXvXfCZ7cWivJweu:wQDtCie1NmxnvjlgtAXvEivJl
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Windows/Windows Print complete.wav

SHA256 c0460683a5f500ad4a497c7ce1bfbb6d5571f4b0affaf036409c91701bac4bdb
MD5 53c3dd1b125b8fe413de960a304aa8b9
SHA1 2fedcaf459a909b2f5bfc2eda97fb1713a46d3ac
SHA512 b50b9afa03a869acf7f77517c3250a7264499326ed35aabd795493b5c18b010cd491fa2d72849270a6b94a0d333c2408dfcf731ddd40ae25f6b558d48ba9d8a3
SSDEEP 6144:cCYZjOTLKDvVDvg9yDMMgsfSGWPYhkfapawR7Qk:oZywYBGWY+fGQk
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Windows/Windows Recycle.wav

SHA256 f1eb9d205799a5b803b1df4de4e8feb54acd1a9ac9f3732b1a17a0cff02d71a7
MD5 eab556b88631ccfd7c0f8246fc01a941
SHA1 8ec0c13971110cbb802c813d3d3c9311664ce08c
SHA512 f51c1134d2781115a85583ddfc95270f121d6e17e0ecfd41bf6d8d424a4dd1250e7e199df0372d27f4cfb48ba867fd68156af6576a9c191a6361c080edf34831
SSDEEP 768:4xvMPyWwbNAGUh8AYaPZeUxew1BnypjMXSr9OkjPHwr0WYhgjKTzjB8cGp89CY/j:4FMKWYNAGnarV1Bnqe8940tao6p60w/
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Windows/Windows Restore.wav

SHA256 e201003b7edd20e3e8de9921e358668a5fd84bc650bcd7ded06fad5f3bff0a49
MD5 6ccdcb56c1e11abfd9655d5b9ee91580
SHA1 3df70c9d62f3e735ff1a0cd3d79c9728c404c330
SHA512 fd358213fd96e01c0f1b17b75e7b153a5aa83cf17f94c8aa8c42de216a9015740e1b894b56b9fbc8bb5a30add4bcc365b6126bb1b863b66d70a0b1d7fde742b9
SSDEEP 3072:S7uzfaS0m+mSt3ajDtGyhlp0YtOXE3ZYhHGI:7faS0Tp3a1hlp0YgXWZY
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Windows/Windows Ringin.wav

SHA256 98d6c8909cfcd27becda4df40af1f1e4c66286e4f9ba0df9a3e383bd1aed8583
MD5 b5594801e25824cbf21ca5f75466ebb1
SHA1 752de747ed990e3463aefdf2d8b505a42cccb52f
SHA512 a6748a3f89a2e395d39afc5bfc236cab362861d9db4e951fad7f71d4393b743597ddb3e631f9e1c4f4eebccd15140b397b645afbb5cf4846ecd111e23527d0fe
SSDEEP 3072:JVurNqmv/oYmh9u5SrpCMqGs1PniPWkt+4psOCJtwk75jKU+s:rEqm/Q99pdkvl4p3+twVds
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Windows/Windows Ringout.wav

SHA256 d994081372c2794642da68212d49c6a64263f88a9fde5cc96583b43574c26bb0
MD5 b7bdde53679d0c11c8dd1b5bbe7d252a
SHA1 195b22dbf511597ffe4770b6a630d601b998f0a9
SHA512 80809392bd0e894c116ad06bb3ed11c66ca9967f8f9f86370b4fccd46a32168713dbf0514d874b8b27da31a7add0f8cb1fce9066782e4548bbd78db4df142617
SSDEEP 384:OhF2akJefQouyK3NcMaZkbED+3rsQVhwq+H5YfeGs/A16cv/vlGu+:M2akJefQoulcMa+YKbxwq+ABs416cv/0
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Windows/Windows Shutdown.wav

SHA256 76a53d12ace9bb89b424da5e419fe25a06725d80d13901b12d190b24d9a4edbd
MD5 9098e4f6f88cabba92b37a8f43f43d7f
SHA1 c4bb213c66172bf287fad11818f2abf2c54c3c78
SHA512 3680770f7c8886ea11f27010f98b649717c5d52bd266407f8f0fea95f9c6cfcc69041ee0d015f8747f9d40ac705bc36d94ce0c5db5ccfffa2f0c33bac263797c
SSDEEP 3072:fP41IjyOovF1fUucpn3VOgzKjfo8ggmsE2rZO39zNu2JfU5Ock+uG1R:2bOoN1xcpl+Uf1QrZOtp1feOJk
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Windows/Windows Startup.wav

SHA256 deecc7613e7f26550a866b386875366f190fb00ac9484029bb1d0bd1274b344e
MD5 2186201e9bb9bdf4aaa57b1971524239
SHA1 1e0a86acea4abc763998086ad647f49728de1204
SHA512 78d5297d2ffbe36b687bce57027cc6cfb73bec9782ae998f24b54a1e6fef9bd63f8f644cc955531dedb462ac1fd742b4f58f784cb49acd460dd08164b433a0c4
SSDEEP 384:rCDmmsBP7ueV22N2G+MKFmKAtchQWL4IJ2EDeEj/mwIVtHYep/Kn:I6ZFf2i6CIsFEDzQ7/Kn
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/SoundSchemes/Windows/Windows User Account Control.wav

SHA256 cf6c22452ff7e392cfdfb09a2736c40bc0ef47dc8285df2401d7a4c84d084804
MD5 3fc311fb4507ddfc4f92ea1634467db0
SHA1 a961f672e039a4a2ba580340a9e004d01a25008c
SHA512 b5d584d9138561b1937452a92d3e5300a82fc9a1ec9a6352e78b15b8f3e51bd67aef6f79630702ac1a6432bb076aa21afb53f8c206a0758ff6797171372c743e
SSDEEP 1536:tVcOVnBcgW47CX6mVKAYrOAwWiuwLKFogbkBDk7dXAOaG:t5VntrmV0qAwWaLc7dXl
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/Styles/10240/10240.msstyles

SHA256 e7ebc4a7e40a9d77549157f4e54f72731f5a2d1b494a66d2ea0c6bfb2430d6bd
MD5 82ba69258336649a12d9f34d6af9d439
SHA1 784d785b9248ee52475e7086af1770903470c71b
SHA512 9637eb5dba8ad3cef7761315009c4cb18a4e114862a55599b76df330ba41559ec67e9d661b38c353f3392686242640049023f4ac71f2ffa7bbf0d42809113b19
SSDEEP 12288:hqV8QIJON2CcYX7uZy/BQ1jPUGe9SatpNralWPjR6tObC1qpdy2bxkJFI+OS0auN:MN2Q7RC17naslWPgcbC1cc2bxkXsajk
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$WINDIR/Resources/Themes/Windows Aero/Styles/10240/Shell/NormalColor/en-US/shellstyle.dll.mui

SHA256 82162ced3ae71e3516013c46e790ce01614a52c7e30876a1cc50559cfc76607c
MD5 26ac4e0e2a17e05d6b2eccf1971b5184
SHA1 22022a98bb2cd7253eab973c2f06448a226e69c7
SHA512 e5d736953a8b9f2cbf7264d7d6cab6b0d2af2176ca36a069f74106433e7474045319cbdcea5657c0ed7c82803b1dbd66419a2a882a861ef89e22788bd353c15e
SSDEEP 1536:XXXo21vTvg8K8t6wMe2CXmQCd3PFCt888og+ZpFBJGoQ:XX5VKQwe2qBCH+lBfQ
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

4

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$WINDIR/Resources/Themes/Windows Aero/Styles/10240/Shell/NormalColor/shellstyle.dll

SHA256 bdf8ae37ac17b893053508ab9529cff121040519b005dc685c27fca9cb4df4a6
MD5 8a544dc63963d3ce848aa46438467d48
SHA1 98d6eea7a73c4bc4678a93bd38a559d76c4d64f7
SHA512 7732834ecb00e1d4240e3f4a722a578f08932003ee03b595fff3420dfdf4dfd066bf65ea8564067b0f0bf5c0489fc1b3848dff519066a29f56c7fb0dc6c70ad1
SSDEEP 6144:v/cb9c0hI7C+EvC+Evj+EvQ+Et+Evr+Evl+Ev6T3TbT:v/cb9cJ
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

4

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$WINDIR/Resources/Themes/Windows Aero/Styles/10586/10586.msstyles

SHA256 e980877206d6bc7309e6e099c4a47887f901901fd66dbdd496150a7b84edb390
MD5 494c8b89917fd3aab03d943940c66cb7
SHA1 fd63bf605a29a59d75dd0ef41f92100437f02c44
SHA512 95ac2f45e4ba3e24f1f6559fa1a309fee1d22cad7b29493872c32476bbdd4c8fea1f47466a08fba1af9114bf32617683f986967931720efc8aabb4dd4e958188
SSDEEP 12288:7NV8GIJON2icYRuCa93Q1jcTDU9vSotAIbzRzrYO9AO5lQn5AazCNSOlef738n0J:VN2m4G1gZotAIpzrYOKO2OQfw0aj3oy
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$WINDIR/Resources/Themes/Windows Aero/Styles/10586/Shell/NormalColor/en-US/shellstyle.dll.mui

SHA256 82162ced3ae71e3516013c46e790ce01614a52c7e30876a1cc50559cfc76607c
MD5 26ac4e0e2a17e05d6b2eccf1971b5184
SHA1 22022a98bb2cd7253eab973c2f06448a226e69c7
SHA512 e5d736953a8b9f2cbf7264d7d6cab6b0d2af2176ca36a069f74106433e7474045319cbdcea5657c0ed7c82803b1dbd66419a2a882a861ef89e22788bd353c15e
SSDEEP 1536:XXXo21vTvg8K8t6wMe2CXmQCd3PFCt888og+ZpFBJGoQ:XX5VKQwe2qBCH+lBfQ
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

4

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$WINDIR/Resources/Themes/Windows Aero/Styles/10586/Shell/NormalColor/shellstyle.dll

SHA256 bdf8ae37ac17b893053508ab9529cff121040519b005dc685c27fca9cb4df4a6
MD5 8a544dc63963d3ce848aa46438467d48
SHA1 98d6eea7a73c4bc4678a93bd38a559d76c4d64f7
SHA512 7732834ecb00e1d4240e3f4a722a578f08932003ee03b595fff3420dfdf4dfd066bf65ea8564067b0f0bf5c0489fc1b3848dff519066a29f56c7fb0dc6c70ad1
SSDEEP 6144:v/cb9c0hI7C+EvC+Evj+EvQ+Et+Evr+Evl+Ev6T3TbT:v/cb9cJ
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

4

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$WINDIR/Resources/Themes/Windows Aero/Styles/8/Shell/NormalColor/en-US/shellstyle.dll.mui

SHA256 cfe9cdcf88974d445d5e5138f8243400ecda828c9e5c1636b2638e52fe6ec042
MD5 60353f535fa56911c1f14daf4afc93c5
SHA1 6079e4b4406296df901206137042a826109fe0aa
SHA512 4073fc865cbe10a05472b943aa0616e9a25612e7192feca2d66858566192aed3179c521efedcf8d2a25860ee9e26c889077f3ae3d08ea79c6c68c4a1015bc9ce
SSDEEP 1536:LXXo21vTvg8K8t6wMe2CXmQCd3PFCt888og+ZpqhJGou:LX5VKQwe2qBCH+Khfu
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

3

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$WINDIR/Resources/Themes/Windows Aero/Styles/8/Shell/NormalColor/shellstyle.dll

SHA256 c6d88ab85fb06b523c547a1a48c051dc19e93ebe34a9197eb4cf5aa073e7b902
MD5 0b0b34634d072951def8a61e063d804c
SHA1 eb7f80c479274c7bbf3d8155e5e7b09c4d410177
SHA512 0bdc33390330340caa26e1acafa4766af6a35367ce9f3c24b58687e13a939593ae334415d29b2112584a621b880ae733df747b1f3d0065537a2aba2de86ac3c0
SSDEEP 6144:3/cb9c0hI7C+Eve+EvH+Ev0+E9+Ev/+Ev5+EvmT3TbT:3/cb9cJ
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

3

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

$WINDIR/Resources/Themes/Windows Aero/Styles/8/aero7.msstyles

SHA256 189a69e7b2a72dab0171034b56e77640cd07140cbc3e02d636aadec525c811e1
MD5 2405602ef08d6f685d57bf1600bf6b44
SHA1 c5c737238bf50b7d58d00cec5538e89cbdb39d46
SHA512 58bd3e7c691c84ede6d2695ee7f8f8cf63f73c28803197f8d07ae2334638831bd8ccc11a1bba0b114e042e8cf3916cc1f5dc00a1206f73c5a769f160467b40f7
SSDEEP 24576:euEtSs4tVCUF8FzpGnSdiWt6j/N4fKSGxtuS9AsCEaES8pirAA:kUOtGnGiWteuovssM4C
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$WINDIR/Resources/Themes/Windows Aero/Styles/8/aero7.old.msstyles

SHA256 e0762e477414b0923c4965799110ff6757281fab7f57f67c5a798d40b3d1318a
MD5 2a70efec056e4201a702237721de916e
SHA1 8add838645d217893bf08ddaf47ecfcd2c861b77
SHA512 f2bc142827f134b132e03f805f26b39396c47745f7aa93910e16d5e767f8b2dad9f482ac20ce7d66a26434476be4aa3fa678fec4486bd6fa095f86d1a1846624
SSDEEP 24576:Ng2kMwDlfJeGVdyvx0sGq34GlfN3d4P2:kBdU0so8fNNB
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$WINDIR/Resources/Themes/Windows Aero/Styles/BasicRound/BasicRound.msstyles

SHA256 b7c9fa36c3a64ea1b05f9a7599b997c6ff71bc34da34ae6354cd6f079b376054
MD5 9afd46c3e83bf7867b75786a200c1d08
SHA1 7418d8ca202798b917bf4a850c4ecc67c48ecf2f
SHA512 b94df71495e041b1f3a1fea5348f7c9e31d197d5aacbcfe777f30ab5829e8993aa11197fffe63220ccbb6e673f3d528f1975e23c3816bd8eb00fad2d79af7d47
SSDEEP 24576:rgjZTQn+qeinNrtDjGEUrhuyE6aJzzTM6jWrzcotr4s:89TQ+lwLU1u/Jzzg6jWroer
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$WINDIR/Resources/Themes/Windows Aero/Styles/BasicRound/Logo.png

SHA256 f72283a226c964ecc44c764252102c9a43926606757c39e699c9de6aaa990f5b
MD5 2d3e03aa32549461f21581f4f3c6be9d
SHA1 8fe2c60d66be32c9cfe7eb35e3a768d3e6d80eb9
SHA512 976f88ce67d276c1ff3abb894b47e068c6c794091fa1d86dae3d0778a9b8217d483cd15f34c0a64aa359948bec4643877cda98c1b513688397467f786c076366
SSDEEP 96:RSDZ/I09Da01l+gmkyTt6Hk8nTT+3yd801qb26lYBW/:RSDS0tKg9E05TvGgqpL/
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/Styles/BasicRound/Shell/NormalColor/en-US/shellstyle.dll.mui

SHA256 cfe9cdcf88974d445d5e5138f8243400ecda828c9e5c1636b2638e52fe6ec042
MD5 60353f535fa56911c1f14daf4afc93c5
SHA1 6079e4b4406296df901206137042a826109fe0aa
SHA512 4073fc865cbe10a05472b943aa0616e9a25612e7192feca2d66858566192aed3179c521efedcf8d2a25860ee9e26c889077f3ae3d08ea79c6c68c4a1015bc9ce
SSDEEP 1536:LXXo21vTvg8K8t6wMe2CXmQCd3PFCt888og+ZpqhJGou:LX5VKQwe2qBCH+Khfu
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

3

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$WINDIR/Resources/Themes/Windows Aero/Styles/BasicRound/Shell/NormalColor/shellstyle.dll

SHA256 fe1144fd5eace45936d02b49b14f01a6f04d39fc8cab5ae94f8c8eee8dd246e9
MD5 fd8c2e3a44cd37eb31a9759b075c7770
SHA1 89d0098a376e3df4466acfe8489905a30f7a6897
SHA512 e26c71124fe247d9f2e6e11cf6914e66aa238b31c645d3fdf9e956659799dde9374d2e6c5b3b5a2737f69ef76b0a7ac5433f90870b01db94f1b13fb302759e6e
SSDEEP 6144:pi8YH7AYcR5B3JJnJjnJPnvSnZZx2W/+Enr+Ene+En/+Eg+Enk+EnI+En+vn7v7e:s/cb9cV
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

2

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

$WINDIR/Resources/Themes/Windows Aero/Styles/BasicRound/Thumbs.db

SHA256 4725b0fcd2727d4bf6185945272ea6af886e9d8e95ed3a2d746232c09dd3a0f7
MD5 17e63619a8696620b3acc58aae6b2b80
SHA1 8f4e0ba3c6e614a56077dc71ef237981e8d14310
SHA512 0e74fa0635f026a70e1bba2a7c6251a259a6b0dc6f2977f2c6bba8ff00883b700bad964d09a73c5c3232abac0132fbce3c745209e2d2795217cc9b79db78af3a
SSDEEP 192:doPjKlNyPra7OrV8GZCjAp3dHBuJI4RFTsVwDK5dPMADyv8WneRwxIQ:dOKlNn7OrV8ACgt0+4fTm7M1v8wWe
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/Styles/BasicRound/en-US/BasicRound.msstyles.mui

SHA256 719a6a7980b77931861f31ee5f4f572192d5d6ea008a6b6919693bf7f4370700
MD5 a60904e50fb271a83790a20796611410
SHA1 c028fea54f86e56d9d0e06231e6e8db073c56b1d
SHA512 f9d5d87b76a053f61d5dcc3a17484c13d5d75b108b865ee25a501fe726a52e2e43a5d1009bcbd02110fd38faaf8b6832048ae8431aeae447be95984cbb82b05b
MD5 SHA1 SHA512

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

2

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$WINDIR/Resources/Themes/Windows Aero/Styles/BasicSquare/BasicSquare.msstyles

SHA256 5140c2a74688094a651e350b1479d562d6211e27045795f8e1022531f97f1052
MD5 592408baa9b16f1fa4ad03f0234437c9
SHA1 fabc0976159eda4b17e5f93291b64f31455b26fd
SHA512 930705e118f5fc2a5ebc767b9bad74acb9ef96a32d6a62b9bd19582133e6c238ed0cd78947d2566db1c3f938ae004bc91bd153057b25954085b0c7e1f4eaeecc
SSDEEP 24576:lQjZTQnhlXnNJt5j5EUrK0bNzB6W7CaA6Fps+Syg89ee2:K9TQhlXiUOuNztOX6ns+m8k
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$WINDIR/Resources/Themes/Windows Aero/Styles/BasicSquare/Logo.png

SHA256 4a6eb6b3ac2f8308fe252ff1080406f9889e941b5c80d92f01fbc104606b0a7b
MD5 827738839cb132c3a282f30460a17121
SHA1 bc9854c308f0fa82b63ccdd8e203033c08f4e0d0
SHA512 9926f57091aeba71ed0a836c426fb2550ce7132a8e3333ca8ef0f1f8ad62a6708232250ee30b7f6496cd3edda01639b379436b2b0ead68b4842bea37beefbccb
SSDEEP 96:RSDZ/I09Da01l+gmkyTt6Hk8nTBvIEs4QNBj+iH3Mkfe2:RSDS0tKg9E05TJi4Qzyi5e2
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/Styles/BasicSquare/Shell/NormalColor/en-US/shellstyle.dll.mui

SHA256 cfe9cdcf88974d445d5e5138f8243400ecda828c9e5c1636b2638e52fe6ec042
MD5 60353f535fa56911c1f14daf4afc93c5
SHA1 6079e4b4406296df901206137042a826109fe0aa
SHA512 4073fc865cbe10a05472b943aa0616e9a25612e7192feca2d66858566192aed3179c521efedcf8d2a25860ee9e26c889077f3ae3d08ea79c6c68c4a1015bc9ce
SSDEEP 1536:LXXo21vTvg8K8t6wMe2CXmQCd3PFCt888og+ZpqhJGou:LX5VKQwe2qBCH+Khfu
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

3

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$WINDIR/Resources/Themes/Windows Aero/Styles/BasicSquare/Shell/NormalColor/shellstyle.dll

SHA256 fe1144fd5eace45936d02b49b14f01a6f04d39fc8cab5ae94f8c8eee8dd246e9
MD5 fd8c2e3a44cd37eb31a9759b075c7770
SHA1 89d0098a376e3df4466acfe8489905a30f7a6897
SHA512 e26c71124fe247d9f2e6e11cf6914e66aa238b31c645d3fdf9e956659799dde9374d2e6c5b3b5a2737f69ef76b0a7ac5433f90870b01db94f1b13fb302759e6e
SSDEEP 6144:pi8YH7AYcR5B3JJnJjnJPnvSnZZx2W/+Enr+Ene+En/+Eg+Enk+EnI+En+vn7v7e:s/cb9cV
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

2

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

$WINDIR/Resources/Themes/Windows Aero/Styles/BasicSquare/Thumbs.db

SHA256 957969f4cb943a998571f3f87f88f9f739d4747fe250ebf191f5e34c30e82a55
MD5 89292c4d84958fea37ba107611e4b904
SHA1 b880df072ed02f48adc3e904c64cb83065bd81e4
SHA512 1596f97fa0f6ae1680a5e06e4ab89201cf8255b58312e66752350071a46b34da7409b652638e450a471ca7122075d22341fe5723a65d03fbfc0d6974e79d15a1
SSDEEP 192:ZXPjKlNyPra7OrV8GZCjAp3dHBuJI4RFTsVwDK5dPMADyv8WneRwxIQ:NKlNn7OrV8ACgt0+4fTm7M1v8wWe
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/Styles/BasicSquare/en-US/BasicSquare.msstyles.mui

SHA256 719a6a7980b77931861f31ee5f4f572192d5d6ea008a6b6919693bf7f4370700
MD5 a60904e50fb271a83790a20796611410
SHA1 c028fea54f86e56d9d0e06231e6e8db073c56b1d
SHA512 f9d5d87b76a053f61d5dcc3a17484c13d5d75b108b865ee25a501fe726a52e2e43a5d1009bcbd02110fd38faaf8b6832048ae8431aeae447be95984cbb82b05b
MD5 SHA1 SHA512

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

2

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$WINDIR/Resources/Themes/Windows Aero/Styles/Redstone/Redstone.msstyles

SHA256 ed204bf661f0416fdee6570ce11690ee9721d7798cbc2eced3a54863aa642bdb
MD5 158744d66a451e55c1c963af1224ee05
SHA1 db77ff48608ad181ff9fd36f6ed997015db26b32
SHA512 404329eac1c5707e849c87c7110941726b0e31574e261dd209c98d174417f03ffa492777f207f8339b3c4ff5d96133d0ec8365bcd2baffc9c4b4f0f736df6fc3
SSDEEP 24576:Be+V2StqqFjUcES5sWjX48lwdH8zhbf+z+XajCblQ:8QEZEXPlU0f+BjCJQ
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$WINDIR/Resources/Themes/Windows Aero/Styles/Redstone/en-US/shellstyle.dll.mui

SHA256 7095fb773139c0b6ddfce43851b8aca2d1f23c6c10b020a746ccab182891753a
MD5 04ee7fbfeb70cfe7eff1baac984886f6
SHA1 8d0def64dd434f09e00f8f7c39be4683775e1500
SHA512 8e4484a903d21d31cf0d51c345a4530ed4da96f48d518fc490ec6145a01ccf38439303a8f40e1f20d817f9efe968e7054e2a8134b31fb7d6818376810fac5498
SSDEEP 1536:OXXo21vTvg8K8t6wMe2CXmQCd3PFCt888og+ZpYcJGoT:OX5VKQwe2qBCH+4cfT
MD5 SHA1 SHA512 SSDEEP

windows:10 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

10

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$WINDIR/Resources/Themes/Windows Aero/Styles/Redstone/shell/NormalColor/en-US/shellstyle.dll (2).mui1

SHA256 1e61f576a83696abd1fc1e1406f36f7c6cfb8a581bc4c518af3e4d0bf03d73fa
MD5 8eac59bd66c86c9f0c76dd7e6258d330
SHA1 9103a6486a4a4de1ebf722fdde83c970a2c691be
SHA512 1eb8852d1e8e58b174e9444c1b99e29903e26594abe8fb2fb2f917cf8853f3fc5ee30b0a1d9013bf53fe1a5384cddc922d2fdba8ae73e6bc5a673d004fb146e1
SSDEEP 1536:DXXo21vTvg8K8t6wMe2CXmQCd3PFCt888og+ZpMYJGoT:DX5VKQwe2qBCH+sYfT
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

2

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$WINDIR/Resources/Themes/Windows Aero/Styles/Redstone/shell/NormalColor/en-US/shellstyle.dll.mui

SHA256 82162ced3ae71e3516013c46e790ce01614a52c7e30876a1cc50559cfc76607c
MD5 26ac4e0e2a17e05d6b2eccf1971b5184
SHA1 22022a98bb2cd7253eab973c2f06448a226e69c7
SHA512 e5d736953a8b9f2cbf7264d7d6cab6b0d2af2176ca36a069f74106433e7474045319cbdcea5657c0ed7c82803b1dbd66419a2a882a861ef89e22788bd353c15e
SSDEEP 1536:XXXo21vTvg8K8t6wMe2CXmQCd3PFCt888og+ZpFBJGoQ:XX5VKQwe2qBCH+lBfQ
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

4

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$WINDIR/Resources/Themes/Windows Aero/Styles/Redstone/shell/NormalColor/shellstyle.dll

SHA256 28218e09293408cdac19acd63f1eba8c414dfbd1be1e59e415d99aa4cd95a8da
MD5 7cf6e4419df1251a38cf57663243ef6b
SHA1 fd99752be63c48c21e4a9a06205681bf7a5390c0
SHA512 e5b7766488c95392616e3053fde2e038294dbcbdab70d227f365cb556b66271f64cc21f0aa8cb17b4d37a17a53e91e574d5767954a0f9b40682d67f8248ebf4b
SSDEEP 6144:4+Eve+Evz+Evu+EX+Evx+Ev5+EvOvrvzve/cb9cChIJ:y/cb9cV
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

$WINDIR/Resources/Themes/Windows Aero/Styles/Redstone/shell/NormalColor2/en-US/shellstyle.dll.mui

SHA256 cb620845006fa63e80b14a960633511f4840ee56683c0b6ceea46b8f7925864d
MD5 878681fde6909c7eb33de804b944d999
SHA1 b57636a83df6a8833e35623f7e62dfd7b621755f
SHA512 5a64136a0139563e3d9d89eda9e229b8abe1e82f0402c720a725aa65eccb1e2bffefa0d7592f64997d08a61c920c40137fc35aac81a54fe456a8e4a51467851f
SSDEEP 1536:IXXo21vTvg8K8t6wMe2CXmQCd3PFCt888og+Zpp4JGoT:IX5VKQwe2qBCH+J4fT
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

1

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

$WINDIR/Resources/Themes/Windows Aero/Styles/Redstone/shell/NormalColor2/shellstyle.dll

SHA256 b887f47f4ea0f63d3095f99020d8d391062d99722e812530f0f674ff8b7e237c
MD5 1e59a02a8c6f49e61c5880971d560eee
SHA1 9c0d83b4f5e39114d2a6148b36f54cab1ba9904c
SHA512 0c6c3e61bcd1d53196066765a377592ac468913b544c76fbc6959d20428a14262a4247cb2e6af994076d8a4a1cd82521929018e18dfe4f3ef0a5ca735d295dcd
SSDEEP 6144:f/cb9c0hI7rEKEHEWEYErEVEXEJT3TbT:f/cb9cJ
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

1

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

$WINDIR/Resources/Themes/Windows Aero/Styles/RoundClear/AeroRoundClear.msstyles

SHA256 3df28829e03374297cb4c64f2c34ebc39c7decd844c5cda802f8ad41022a3c3c
MD5 5b80454f7eadd43dac4bbbf2f1344f2d
SHA1 b753dce98931f010507f72a1b97053b514d51418
SHA512 9d6337386cde68b515082d94e7b22feb66d8fd103ee182957b1cfd84edb65482d91fef46ef0ea8d36c796833b316eef712d82a71d47b6b48d79d239bc0c6d527
SSDEEP 24576:7aqLZtwjlEUrKGy96aJzNTn6jWrzFAD1Nt0nP:mAUOGYJzNj6jWr5AD1NtO
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$WINDIR/Resources/Themes/Windows Aero/Styles/RoundClear/Logo.png

SHA256 f2cc58ac27bf8d18b4a3a504103a1a297eca2fc61606a7ae3bdc27209ae79c82
MD5 fb42b9bcec1e46fe3876fa77664a7983
SHA1 1f0ed25840292958d8032984b6c99f90b64ab7e8
SHA512 8deb152f37a762df09f30d7ffc1555ff5d4ca9e4eaa88295b619c4555607f66a6f726cde6da0115d168b2c5a28a9f0d4ebba6ee0e2f9ae76266527d7088d7004
SSDEEP 96:RSDZ/I09Da01l+gmkyTt6Hk8nTfZ0JrZrI6W/pZBg5v9/qMpisdhh7KLL3:RSDS0tKg9E05TB0JrNI/pZBg9/2sdhhQ
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/Styles/RoundClear/Shell/NormalColor/en-US/shellstyle.dll.mui

SHA256 cfe9cdcf88974d445d5e5138f8243400ecda828c9e5c1636b2638e52fe6ec042
MD5 60353f535fa56911c1f14daf4afc93c5
SHA1 6079e4b4406296df901206137042a826109fe0aa
SHA512 4073fc865cbe10a05472b943aa0616e9a25612e7192feca2d66858566192aed3179c521efedcf8d2a25860ee9e26c889077f3ae3d08ea79c6c68c4a1015bc9ce
SSDEEP 1536:LXXo21vTvg8K8t6wMe2CXmQCd3PFCt888og+ZpqhJGou:LX5VKQwe2qBCH+Khfu
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

3

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$WINDIR/Resources/Themes/Windows Aero/Styles/RoundClear/Shell/NormalColor/shellstyle.dll

SHA256 fe1144fd5eace45936d02b49b14f01a6f04d39fc8cab5ae94f8c8eee8dd246e9
MD5 fd8c2e3a44cd37eb31a9759b075c7770
SHA1 89d0098a376e3df4466acfe8489905a30f7a6897
SHA512 e26c71124fe247d9f2e6e11cf6914e66aa238b31c645d3fdf9e956659799dde9374d2e6c5b3b5a2737f69ef76b0a7ac5433f90870b01db94f1b13fb302759e6e
SSDEEP 6144:pi8YH7AYcR5B3JJnJjnJPnvSnZZx2W/+Enr+Ene+En/+Eg+Enk+EnI+En+vn7v7e:s/cb9cV
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

2

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

$WINDIR/Resources/Themes/Windows Aero/Styles/RoundClear/Thumbs.db

SHA256 6d53a943ca8dfe173189fd6286189bf7d6b00e1e9b1088cc578ae1af63e819f8
MD5 45ec85ef977cfa56a25768c0d5b35d52
SHA1 68dcc81de3f491584b01ff91e1d5f77a7b2803cf
SHA512 e40fcb06f649975a1d625c302f192dddb0d8e8669fe7934081ecc2b7b76eca4d38cb92b5ef7f6407b99aa32311f4d75fcdf7386661b2d812908e4455f83ebfb2
SSDEEP 192:6PjKlNyPra7OrV8GZCjAp3dHBuJI4RFTsVwDK5dPMADyv8WneRwxIQ:AKlNn7OrV8ACgt0+4fTm7M1v8wWe
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/Styles/RoundClear/en-US/AeroRoundClear.msstyles.mui

SHA256 719a6a7980b77931861f31ee5f4f572192d5d6ea008a6b6919693bf7f4370700
MD5 a60904e50fb271a83790a20796611410
SHA1 c028fea54f86e56d9d0e06231e6e8db073c56b1d
SHA512 f9d5d87b76a053f61d5dcc3a17484c13d5d75b108b865ee25a501fe726a52e2e43a5d1009bcbd02110fd38faaf8b6832048ae8431aeae447be95984cbb82b05b
MD5 SHA1 SHA512

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

2

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$WINDIR/Resources/Themes/Windows Aero/Styles/RoundShiny/AeroRoundShiny.msstyles

SHA256 6d97dd5c8220c24f78387563ebabd3c90f93b85756e8128426eb2d6b95af4744
MD5 08dd44a8a5c326279834128a0b7b9a05
SHA1 71998298428851377c9c223b8f68e5b2b3d5bfc5
SHA512 9bb7ffa27a39fd48f8580a94530707e64fa37d8d7ddbe690fea2f60ac6a114da44b7dec892306b09b0943db5b61f7d7aa29b0366fffb71482509b6b58b8b6bac
SSDEEP 24576:xagqLctDjJEUrh+y96aJzITn6jWrzFrPDBudvKduz:jgU1+YJzIj6jWr5xqKg
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$WINDIR/Resources/Themes/Windows Aero/Styles/RoundShiny/Logo.png

SHA256 8b5028cd2731b3843a4ae7252d804076dfe43f7270739d42f1be641eb926ff6f
MD5 f7a80f9d6791289e1117efdcc2613a71
SHA1 2e53a49ed8eeada6f26a26e61953ca17f4ec0722
SHA512 fe3189473cf3bebe2ed67d46ea6948565ecbeb06b4bd1128dbfa176fa6aab65c83183f4f408c00910b6d3b291de361b75a56ff3c7c963814c9c646418793245d
SSDEEP 192:RSDS0tKg9E05TI7k8eqdo/4EZNfg+9cRGx6w1rT6BEb:4JXE05kk89dDELBuGoWKa
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/Styles/RoundShiny/Shell/NormalColor/en-US/shellstyle.dll.mui

SHA256 cfe9cdcf88974d445d5e5138f8243400ecda828c9e5c1636b2638e52fe6ec042
MD5 60353f535fa56911c1f14daf4afc93c5
SHA1 6079e4b4406296df901206137042a826109fe0aa
SHA512 4073fc865cbe10a05472b943aa0616e9a25612e7192feca2d66858566192aed3179c521efedcf8d2a25860ee9e26c889077f3ae3d08ea79c6c68c4a1015bc9ce
SSDEEP 1536:LXXo21vTvg8K8t6wMe2CXmQCd3PFCt888og+ZpqhJGou:LX5VKQwe2qBCH+Khfu
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

3

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$WINDIR/Resources/Themes/Windows Aero/Styles/RoundShiny/Shell/NormalColor/shellstyle.dll

SHA256 fe1144fd5eace45936d02b49b14f01a6f04d39fc8cab5ae94f8c8eee8dd246e9
MD5 fd8c2e3a44cd37eb31a9759b075c7770
SHA1 89d0098a376e3df4466acfe8489905a30f7a6897
SHA512 e26c71124fe247d9f2e6e11cf6914e66aa238b31c645d3fdf9e956659799dde9374d2e6c5b3b5a2737f69ef76b0a7ac5433f90870b01db94f1b13fb302759e6e
SSDEEP 6144:pi8YH7AYcR5B3JJnJjnJPnvSnZZx2W/+Enr+Ene+En/+Eg+Enk+EnI+En+vn7v7e:s/cb9cV
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

2

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

$WINDIR/Resources/Themes/Windows Aero/Styles/RoundShiny/Thumbs.db

SHA256 d8f2efa111f2037fbdfabacf0d4e8e7d67b99fd6529ffea49e3e69d71fcf4989
MD5 c24fc690327a2cf2e16f6785e80edd68
SHA1 16cc25f7df19b561ae6ebad12b5204d81546def9
SHA512 6c1db525c9126f8e63f2e6da3a5922b60cfb98f17e564076252ad838146442cbcc334a36513a288566b44f804ae2652d0cc85c11470c529ae2c9ef0ab96bec28
SSDEEP 192:DPjKlNyPra7OrV8GZCjAp3dHBuJI4RFTsVwDK5dPMADyv8WneRwxIQ:PKlNn7OrV8ACgt0+4fTm7M1v8wWe
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/Styles/RoundShiny/en-US/AeroRoundShiny.msstyles.mui

SHA256 719a6a7980b77931861f31ee5f4f572192d5d6ea008a6b6919693bf7f4370700
MD5 a60904e50fb271a83790a20796611410
SHA1 c028fea54f86e56d9d0e06231e6e8db073c56b1d
SHA512 f9d5d87b76a053f61d5dcc3a17484c13d5d75b108b865ee25a501fe726a52e2e43a5d1009bcbd02110fd38faaf8b6832048ae8431aeae447be95984cbb82b05b
MD5 SHA1 SHA512

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

2

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$WINDIR/Resources/Themes/Windows Aero/Styles/SquareClear/AeroSquareClear.msstyles

SHA256 898b334ec899bd041c91ff1b287046441dc2a8954ea900b2ef27faa0f711d79b
MD5 d6be36f4bd9b04e9af035925d8c8e351
SHA1 af9fe15c318ffead2d2c4b15297a7a5e1601d75d
SHA512 5717d1dad5d773be72ede45f1e9d34a6eb5b32f1351cef632f4603ac25f26ad4860677b60b3c97a5acb1f1d4fe717613c4740d9fd9abd528f6ea990aadc691cd
SSDEEP 24576:WtbqLZt5jVEUrc0pPz06WmH+vA6Fpsq2bcox89ee2:wfUQEPzafo6nsTcox8k
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$WINDIR/Resources/Themes/Windows Aero/Styles/SquareClear/Logo.png

SHA256 c81349f40d8341a50a5fcd0a775169ae264c45dfb717561626f3274e7ac60d7d
MD5 e9e136d56eb546b14eaa76919f376f71
SHA1 87cde0e1ccd459f5441fc2f4ab88796982d03cfe
SHA512 04f766233dca820b0f149a326c8383d876150ea56f6a25e8bd32fe4f4bdee299e32194c7e37de7a3d15c6986e91b96d547b79c65fca94a54d0764eea6bdc7393
SSDEEP 96:RSDZ/I09Da01l+gmkyTt6Hk8nTLeMkMMpcYVSXTcicDHoGG+Cg7JiUw:RSDS0tKg9E05TZkMMzVgTcFoG1CCiUw
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/Styles/SquareClear/Shell/NormalColor/en-US/shellstyle.dll.mui

SHA256 cfe9cdcf88974d445d5e5138f8243400ecda828c9e5c1636b2638e52fe6ec042
MD5 60353f535fa56911c1f14daf4afc93c5
SHA1 6079e4b4406296df901206137042a826109fe0aa
SHA512 4073fc865cbe10a05472b943aa0616e9a25612e7192feca2d66858566192aed3179c521efedcf8d2a25860ee9e26c889077f3ae3d08ea79c6c68c4a1015bc9ce
SSDEEP 1536:LXXo21vTvg8K8t6wMe2CXmQCd3PFCt888og+ZpqhJGou:LX5VKQwe2qBCH+Khfu
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

3

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$WINDIR/Resources/Themes/Windows Aero/Styles/SquareClear/Shell/NormalColor/shellstyle.dll

SHA256 fe1144fd5eace45936d02b49b14f01a6f04d39fc8cab5ae94f8c8eee8dd246e9
MD5 fd8c2e3a44cd37eb31a9759b075c7770
SHA1 89d0098a376e3df4466acfe8489905a30f7a6897
SHA512 e26c71124fe247d9f2e6e11cf6914e66aa238b31c645d3fdf9e956659799dde9374d2e6c5b3b5a2737f69ef76b0a7ac5433f90870b01db94f1b13fb302759e6e
SSDEEP 6144:pi8YH7AYcR5B3JJnJjnJPnvSnZZx2W/+Enr+Ene+En/+Eg+Enk+EnI+En+vn7v7e:s/cb9cV
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

2

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

$WINDIR/Resources/Themes/Windows Aero/Styles/SquareClear/Thumbs.db

SHA256 6639eac6793476f8562f718b50de21d80b2f849238cfa613b173f1f0a53d4585
MD5 b96f4828d686512f74d4e68a81ce2d39
SHA1 3195a6293fd1b535be8b18308f27870071450b95
SHA512 1a2776cd44971c8c103c7b5da146d69e0b58abbce36b11b90c2bbf853cc1c2045aee964512605cc3812b616a2b909d7bb59d7a955ec55383fef7c72bee6af263
SSDEEP 192:4PjKlNyPra7OrV8GZCjAp3dHBuJI4RFTsVwDK5dPMADyv8WneRwxIQ:eKlNn7OrV8ACgt0+4fTm7M1v8wWe
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/Styles/SquareClear/en-US/AeroSquareClear.msstyles.mui

SHA256 719a6a7980b77931861f31ee5f4f572192d5d6ea008a6b6919693bf7f4370700
MD5 a60904e50fb271a83790a20796611410
SHA1 c028fea54f86e56d9d0e06231e6e8db073c56b1d
SHA512 f9d5d87b76a053f61d5dcc3a17484c13d5d75b108b865ee25a501fe726a52e2e43a5d1009bcbd02110fd38faaf8b6832048ae8431aeae447be95984cbb82b05b
MD5 SHA1 SHA512

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

2

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$WINDIR/Resources/Themes/Windows Aero/Styles/SquareShiny/AeroSquareShiny.msstyles

SHA256 d442e9d3f96a8f5c4677bf7e6b31ce0bd163926fca8dfe41a8677eec83e4d5ff
MD5 e09eacdec32795ccffb9917cf07382b5
SHA1 415d0f4b5223582f6b856072066ac8ff62b17148
SHA512 0144520d6091556599e74524d13a44761cc02b2218fb84ed02470ea648c16cac54783b8877a38806d9ab3a512d421f85eb03a45c7984cdac25cf6ae616c2a6da
SSDEEP 24576:hKqLZtejtEUrcipPz06WmH+v3T6FpsvnYBq+DD3d5QDU:guUQOPzafPT6nsvnYBrnN5Q
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$WINDIR/Resources/Themes/Windows Aero/Styles/SquareShiny/Logo.png

SHA256 e857b4864369af7faec5cf3229c7f9f3f11453df9c24384a8ea5525078da9556
MD5 0c53863a456e8f379706030a8d0ab59d
SHA1 c01429e109f6c354ca6f43a4002b17216ae536f9
SHA512 4e95514a891a5da968cef35dfb0e3a62cee31dd49080a4cc362e51320572f750a8b0575eba28d70f1aa1d92d9d04fdd3efc68e0e576625c97f3082e81d8b1514
SSDEEP 192:RSDS0tKg9E05TwXtYAfCs2Am91ThOkVnXwqO1Y:4JXE05YKs2hRhOuXwo
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/Styles/SquareShiny/Shell/NormalColor/en-US/shellstyle.dll.mui

SHA256 cfe9cdcf88974d445d5e5138f8243400ecda828c9e5c1636b2638e52fe6ec042
MD5 60353f535fa56911c1f14daf4afc93c5
SHA1 6079e4b4406296df901206137042a826109fe0aa
SHA512 4073fc865cbe10a05472b943aa0616e9a25612e7192feca2d66858566192aed3179c521efedcf8d2a25860ee9e26c889077f3ae3d08ea79c6c68c4a1015bc9ce
SSDEEP 1536:LXXo21vTvg8K8t6wMe2CXmQCd3PFCt888og+ZpqhJGou:LX5VKQwe2qBCH+Khfu
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

3

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$WINDIR/Resources/Themes/Windows Aero/Styles/SquareShiny/Shell/NormalColor/shellstyle.dll

SHA256 fe1144fd5eace45936d02b49b14f01a6f04d39fc8cab5ae94f8c8eee8dd246e9
MD5 fd8c2e3a44cd37eb31a9759b075c7770
SHA1 89d0098a376e3df4466acfe8489905a30f7a6897
SHA512 e26c71124fe247d9f2e6e11cf6914e66aa238b31c645d3fdf9e956659799dde9374d2e6c5b3b5a2737f69ef76b0a7ac5433f90870b01db94f1b13fb302759e6e
SSDEEP 6144:pi8YH7AYcR5B3JJnJjnJPnvSnZZx2W/+Enr+Ene+En/+Eg+Enk+EnI+En+vn7v7e:s/cb9cV
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

2

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

$WINDIR/Resources/Themes/Windows Aero/Styles/SquareShiny/en-US/AeroSquareShiny.msstyles.mui

SHA256 719a6a7980b77931861f31ee5f4f572192d5d6ea008a6b6919693bf7f4370700
MD5 a60904e50fb271a83790a20796611410
SHA1 c028fea54f86e56d9d0e06231e6e8db073c56b1d
SHA512 f9d5d87b76a053f61d5dcc3a17484c13d5d75b108b865ee25a501fe726a52e2e43a5d1009bcbd02110fd38faaf8b6832048ae8431aeae447be95984cbb82b05b
MD5 SHA1 SHA512

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

2

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$WINDIR/Resources/Themes/Windows Aero/ThemeFiles/10240/AeroRoundShiny-Architecture.theme

SHA256 59a7140a9d3d82a1312678a77a3eb93daf931bc27154972ec02ddc4db5c70f78
MD5 d08beee8eb32335ee0121059ec3e9e60
SHA1 f4b6b88c4b104bc01e4c0666691d13c0c6c1f2b3
SHA512 f742497ed2e3b77ff2c4e7d2aa26d696def1cc986d9f6788f4e00004f9b5b184b390b2cefd78bb913f2bbe0946371dbde2d79c6fd51d1f4a92b71e5d458b67c8
SSDEEP 96:EdHJg3bqgr2gtIz25rtvn/GYAxFualAeYxqABxOABxsAJKx9AJExSAJuxuALxBAp:K7galsqaOssEK9EESEOuUBJLlBWBtB9D
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/ThemeFiles/10240/AeroRoundShiny-Characters.theme

SHA256 e89203f1e3cbcd70c9aa4c006174d7b4be0d38e944d1e1e6a478d74c94bbbc7e
MD5 b92d2dbaedfec21b61e6dd3dcd971be4
SHA1 80dce11b27e639662e9f2c8e2a6c02e6af3f5e65
SHA512 019a245c4b2636c843f4dc4e2aa5c0cc0f5a54e8273af392b1eccade1be4d671aa824cddffbe7ae43bd979b2b6d938a9692fee152fabac2579718877095bf456
SSDEEP 96:EdHJt3bqgr2gtIz25rtvn/GYAxFAa6AeYXABRAB1AJKyAJEFAJuVALoAE0ApYoA4:K8Oa6AauEREEEeTcMJk0wQY+MBq
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/ThemeFiles/10240/AeroRoundShiny-Default.theme

SHA256 596e463ff01dc6fbb3b972bdcb9b9185b9dde9788a4c9550630fec6f1ff9d610
MD5 03300fef713120ab57bfaf9787ffc110
SHA1 856632d6b6c61c23957402c4d57c79672ead6120
SHA512 1a456cc3ea27814743cd3356d04c6d509844de8f07f98ea94c8ba935a19c4b492980772ce116c30c7f26fde98f49527d2a1067332c6f92b583820b7998e34581
SSDEEP 96:EdHJG3bqgr2btIz25rtvn/GYAxFJaEAeY2ABSAB4AJKpAJE+AJuiALVAEnApYVAz:KYbaET3xEMEpEjk/pWRh1vLxfBt
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/ThemeFiles/10240/AeroRoundShiny-Landscapes.theme

SHA256 7ece9cd4f7360d60ccbb5ba85321e56a9c3772a6d602bce7fc302d18f1e065df
MD5 3455c1b2eb108f709259c0735c7ec8ea
SHA1 2e67e3865c343d4ade476fd559ffdb2edf040574
SHA512 f643ef75bf1acc97e65458c9c1df28177d7556b191654c74c1f340d584d40ec964ca23e003173ace2f503966bdae6547578b8845297be5e7e6d620c68c8fce24
SSDEEP 96:EdHJH3bqgr2gtIz25rtvn/GYAxFaagAeYlABXABXAJKcAJE/AJuPALqAE2ApYqAm:KW0agekgEXE+EEFOuX2muqmk6B4
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/ThemeFiles/10240/AeroRoundShiny-Nature.theme

SHA256 ab07f52cb087fc07ecbae1768b1fbd5b4781c2c122508bbda44d693ef843e24e
MD5 f2240d800e1ffc8c7f6458bf71ba44eb
SHA1 23472b51e8b12595575da711fed3bed389b9ed58
SHA512 596d4a1a5a8d1c3d139e75ba3b6d3d1165dacb75af930929a8f8e31bb2321e0e407b1dbe8e27ccf4a550cf682c26ec75febc9dad060cf5c70331a95c51579ce3
SSDEEP 96:EdHJq3bqgr2gtIz25rtvn/GYAxFnaFAeYmABiABoAJK5AJEuAJuSALFAEXApYFAL:K1haF5h7EyErEpe/pEBxLjb9/BT
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/ThemeFiles/10240/AeroRoundShiny-Scenes.theme

SHA256 d6200c2592e324d9f3df7a6aa1667e425014e80de054bd4e0f251245fd4827d6
MD5 2182c81363fdbf550bfca5ee6a309425
SHA1 05e33a2d03a72bd0cbaca88b1bbcf1062fb02502
SHA512 4690d2b13949a9c558649e2aabe3b1f159ee105c8e42aa2194a975037a9c97c09f7923d7a146dbacfc2c28c43ccc47d00afa86c1a8d9e5afc302c6dbb77207b8
SSDEEP 96:EdsJc3bqgr2gtIz25rtvn/GYAxF1a1AeYuABaABwAJKBAJE2AJuaALNAEfApYNAT:KSna1R9zEWEjENWnJYhxfHbZHBb
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/ThemeFiles/Current/AeroRoundShiny-Architecture.theme

SHA256 59a7140a9d3d82a1312678a77a3eb93daf931bc27154972ec02ddc4db5c70f78
MD5 d08beee8eb32335ee0121059ec3e9e60
SHA1 f4b6b88c4b104bc01e4c0666691d13c0c6c1f2b3
SHA512 f742497ed2e3b77ff2c4e7d2aa26d696def1cc986d9f6788f4e00004f9b5b184b390b2cefd78bb913f2bbe0946371dbde2d79c6fd51d1f4a92b71e5d458b67c8
SSDEEP 96:EdHJg3bqgr2gtIz25rtvn/GYAxFualAeYxqABxOABxsAJKx9AJExSAJuxuALxBAp:K7galsqaOssEK9EESEOuUBJLlBWBtB9D
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/ThemeFiles/Current/AeroRoundShiny-Characters.theme

SHA256 e89203f1e3cbcd70c9aa4c006174d7b4be0d38e944d1e1e6a478d74c94bbbc7e
MD5 b92d2dbaedfec21b61e6dd3dcd971be4
SHA1 80dce11b27e639662e9f2c8e2a6c02e6af3f5e65
SHA512 019a245c4b2636c843f4dc4e2aa5c0cc0f5a54e8273af392b1eccade1be4d671aa824cddffbe7ae43bd979b2b6d938a9692fee152fabac2579718877095bf456
SSDEEP 96:EdHJt3bqgr2gtIz25rtvn/GYAxFAa6AeYXABRAB1AJKyAJEFAJuVALoAE0ApYoA4:K8Oa6AauEREEEeTcMJk0wQY+MBq
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/ThemeFiles/Current/AeroRoundShiny-Default.theme

SHA256 596e463ff01dc6fbb3b972bdcb9b9185b9dde9788a4c9550630fec6f1ff9d610
MD5 03300fef713120ab57bfaf9787ffc110
SHA1 856632d6b6c61c23957402c4d57c79672ead6120
SHA512 1a456cc3ea27814743cd3356d04c6d509844de8f07f98ea94c8ba935a19c4b492980772ce116c30c7f26fde98f49527d2a1067332c6f92b583820b7998e34581
SSDEEP 96:EdHJG3bqgr2btIz25rtvn/GYAxFJaEAeY2ABSAB4AJKpAJE+AJuiALVAEnApYVAz:KYbaET3xEMEpEjk/pWRh1vLxfBt
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/ThemeFiles/Current/AeroRoundShiny-Landscapes.theme

SHA256 7ece9cd4f7360d60ccbb5ba85321e56a9c3772a6d602bce7fc302d18f1e065df
MD5 3455c1b2eb108f709259c0735c7ec8ea
SHA1 2e67e3865c343d4ade476fd559ffdb2edf040574
SHA512 f643ef75bf1acc97e65458c9c1df28177d7556b191654c74c1f340d584d40ec964ca23e003173ace2f503966bdae6547578b8845297be5e7e6d620c68c8fce24
SSDEEP 96:EdHJH3bqgr2gtIz25rtvn/GYAxFaagAeYlABXABXAJKcAJE/AJuPALqAE2ApYqAm:KW0agekgEXE+EEFOuX2muqmk6B4
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/ThemeFiles/Current/AeroRoundShiny-Nature.theme

SHA256 ab07f52cb087fc07ecbae1768b1fbd5b4781c2c122508bbda44d693ef843e24e
MD5 f2240d800e1ffc8c7f6458bf71ba44eb
SHA1 23472b51e8b12595575da711fed3bed389b9ed58
SHA512 596d4a1a5a8d1c3d139e75ba3b6d3d1165dacb75af930929a8f8e31bb2321e0e407b1dbe8e27ccf4a550cf682c26ec75febc9dad060cf5c70331a95c51579ce3
SSDEEP 96:EdHJq3bqgr2gtIz25rtvn/GYAxFnaFAeYmABiABoAJK5AJEuAJuSALFAEXApYFAL:K1haF5h7EyErEpe/pEBxLjb9/BT
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/Resources/Themes/Windows Aero/ThemeFiles/Current/AeroRoundShiny-Scenes.theme

SHA256 d6200c2592e324d9f3df7a6aa1667e425014e80de054bd4e0f251245fd4827d6
MD5 2182c81363fdbf550bfca5ee6a309425
SHA1 05e33a2d03a72bd0cbaca88b1bbcf1062fb02502
SHA512 4690d2b13949a9c558649e2aabe3b1f159ee105c8e42aa2194a975037a9c97c09f7923d7a146dbacfc2c28c43ccc47d00afa86c1a8d9e5afc302c6dbb77207b8
SSDEEP 96:EdsJc3bqgr2gtIz25rtvn/GYAxF1a1AeYuABaABwAJKBAJE2AJuaALNAEfApYNAT:KSna1R9zEWEjENWnJYhxfHbZHBb
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$WINDIR/System32/OpenTheme.dll

IMPHASH 3304b5d4fdb8684b95cd15b7033f5f77
SHA256 1dade3f39fd7eb4f61e5e8a5e22dda2747e309ac3ce793ff058aeea0b4b47911
MD5 b50e36ad36587418dbb140e3465f28d6
SHA1 2abc4d51e724689f73d51a70eed267ebd6e64cf6
SHA512 feedc0e19173914b1c3833d13ecc528f82302f3c98cf3030af3755826c7aca74024a78008bdd66ea50bd1fd89d7f15e1994c6e51b25eab3b086c3da14b7b922b
SSDEEP 384:ChOqbTodBEjr34OQy2UgPxh8E9VF0NywHyb:Xqq8r34OnIPxWEySb
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

NSIS installer

installer

PE Signature issue

Digest

ee:60:61:64:40:b2:16:0d:c2:c0:5a:aa:c4:b6:29:e0:21:ba:23:62:0c:da:e2:a9:4b:f2:1e:30:72:fe:49:33

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=namazso.eu,O=namazso,L=Debrecen,C=HU,1.2.840.113549.1.9.1=#0c1061646d696e406e616d617a736f2e6575

Chains

Jul 12, 2023

Subject

CN=GLOBALTRUST 2020 CODESIGNING 1,O=e-commerce monitoring GmbH,C=AT

Serial Number

12:76:97:f2:09:ae:19:f0:de:c4:5a

Issuer

CN=GLOBALTRUST 2020,O=e-commerce monitoring GmbH,C=AT

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 16, 2021 - Jun 10, 2040

Subject

CN=namazso.eu,O=namazso,L=Debrecen,C=HU,1.2.840.113549.1.9.1=#0c1061646d696e406e616d617a736f2e6575

Serial Number

74:39:eb:b2:b5:aa:b6:f1:9e:69:be

Issuer

CN=GLOBALTRUST 2020 CODESIGNING 1,O=e-commerce monitoring GmbH,C=AT

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageKeyEncipherment, KeyUsageDataEncipherment

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 5, 2023 - Jul 8, 2024

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

4608

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

SAB.exe

IMPHASH ad3431370c5650939f6ad3d7023cc918
SHA256 6f54d5e22a25ce2176a27f8d7784acf60e46f43cb4eecd8e155c202a94634601
MD5 ae6abc0a98bb86e004307cf959a9dff3
SHA1 653ec9a79d117f2955a3079bce851b02ea4571b1
SHA512 53cc923337f1efae16c9ac8ca324defd5cee785bbc442ab0976dcecde1872b7bfc5153fca9487df6a2dc776129876d0635070e1fb3b09c2be6713ca72c30db60
SSDEEP 49152:exTeZUle9XJwXOwSkHq9e7NSsoDrgmVZ/cS:ale9MObkKSNSsgdLF
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

NSIS installer

installer

Digest

72:5e:a7:67:02:3c:e6:88:04:24:4e:4c:b2:fc:27:dc:be:a5:d2:a4:de:38:dc:bc:fc:3f:cc:32:83:df:43:da

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=IP Zinukhov Stanislav Igorevich,O=IP Zinukhov Stanislav Igorevich,L=Moscow,ST=Moscow,C=RU

Chains

Nov 6, 2023

CN=IP Zinukhov Stanislav Igorevich,O=IP Zinukhov Stanislav Igorevich,L=Moscow,ST=Moscow,C=RU

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

CN=IP Zinukhov Stanislav Igorevich,O=IP Zinukhov Stanislav Igorevich,L=Moscow,ST=Moscow,C=RU

Serial Number

09:63:74:f3:62:b9:30:81:d4:3c:a2:16

Issuer

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 2, 2023 - Feb 3, 2024

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Serial Number

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 3, 2023 - Aug 2, 2034

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Jan 18, 2038

Minor OS version

0

Major OS version

6

Entry point

6272

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

msvcrt

__C_specific_handler _exit _ismbblead _cexit exit _acmdln _initterm _amsg_exit __setusermatherr free _commode _fmode __getmainargs wcsncpy_s wcscat_s __set_app_type memmove ?terminate@@YAXXZ memcpy _XcptFilter wcscpy_s _beginthreadex malloc memset

kernel32

GetCurrentDirectoryW GetSystemTimeAsFileTime QueryPerformanceCounter SetUnhandledExceptionFilter GetStartupInfoW Sleep GetExitCodeProcess GetTickCount GetModuleHandleW GetCurrentProcessId SetCurrentDirectoryW GetCurrentThreadId GetFileAttributesW WaitForSingleObject GetTempPathW GetModuleFileNameW GetCommandLineW CreateDirectoryW CloseHandle ReadFile WriteFile SetFilePointer CreateFileW GetLastError

user32

GetSysColorBrush PostQuitMessage GetMessageW CreateDialogParamW FindWindowExW FillRect SendMessageW ShowWindow DispatchMessageW

gdi32

GetStockObject GetClipBox

shell32

ShellExecuteExW SHFileOperationW

ole32

CoInitialize

comctl32

ord344 ord17

shlwapi

StrStrIW

dwmapi

DwmSetWindowAttribute DwmExtendFrameIntoClientArea

SIB10.exe

IMPHASH b630fa236ce275df86813af5b4f05d53
SHA256 7ee8c845568b8787c7930152925a05682be54fcd866c46d6ef54bd137e1c9fd2
MD5 6e1869386afd5769243e01c746ec7206
SHA1 41724d13d5a4f124c5c93b468a243cebd3bbd102
SHA512 3eabad446d1d6dd91a48c765402254de908cb62986df5925cb10b882fcd9c68e88315c5578dfdab83d53d90b2a6f03a3828ce512b0c954e07626e88f41adb8fc
SSDEEP 24576:iYOLK+xhW2Iw7m+CHJ8FoKSkXvgCAmXMLzkeqk1NK9qFaxSoYLKr/uvocA+CB5cX:iYOLK+PUJ8FoXPm8LzR/1DMl3avoz+CW
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

NSIS installer

installer

Digest

81:06:24:27:62:e3:0a:7e:5f:65:1c:af:4d:31:82:43:45:44:57:16:7d:2d:43:76:50:4e:f0:d4:8c:02:e4:39

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=IP Zinukhov Stanislav Igorevich,O=IP Zinukhov Stanislav Igorevich,L=Moscow,ST=Moscow,C=RU

Chains

Feb 15, 2024

CN=IP Zinukhov Stanislav Igorevich,O=IP Zinukhov Stanislav Igorevich,L=Moscow,ST=Moscow,C=RU

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

CN=IP Zinukhov Stanislav Igorevich,O=IP Zinukhov Stanislav Igorevich,L=Moscow,ST=Moscow,C=RU

Serial Number

20:c1:88:80:ce:b5:61:19:64:5b:f6:7f

Issuer

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 8, 2024 - Mar 10, 2027

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Serial Number

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 3, 2023 - Aug 2, 2034

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Jan 18, 2038

Minor OS version

0

Major OS version

6

Entry point

5953

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

SIB8.exe

IMPHASH 0b96bfb4aed20508029b028a4dff1761
SHA256 155b7b5f9733c86d569d194257cd255cd38b84047502a2c28154b98a607759d6
MD5 f943c89b1acfbb262377bd1d4d4ce23d
SHA1 22df965c1b4dab12b6b4dde50301e2470bdb7f72
SHA512 a4982573ce4fadedf1166d7746252be18897c49206d67f620dc4fc5703e9e07c0a24f14f9ddb4ca47c1e8783f84739f1bd4d4eefdb4fceaf2763a1c8703b7118
SSDEEP 24576:LjJAIUGN1aiO8HCWn2ZECCullAFOxc45G0AKlzG0UkFNGvg:LjJxHairHiZVCul6si45GDKxs8Go
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

92:11:ce:87:a5:4c:63:18:e0:2b:b9:e0:3a:ce:26:22:20:79:6a:ee

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=STANISLAV ZINUKHOV,L=Moscow,ST=Moscow City,C=RU,1.2.840.113549.1.9.1=#0c1474696869792e6d6f7a6740676d61696c2e636f6d,2.5.4.13=#131065536d4c6831656f306a6f3652464135

Chains

Aug 30, 2013

Minor OS version

0

Major OS version

4

Entry point

79116

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

oleaut32

VariantClear SysAllocString

user32

SendMessageA SetTimer KillTimer DialogBoxParamA SetWindowLongA GetWindowLongA SetWindowTextW SetWindowTextA LoadIconA LoadStringW LoadStringA CharUpperW CharUpperA DestroyWindow EndDialog PostMessageA ShowWindow MessageBoxW GetDlgItem DialogBoxParamW

shell32

ShellExecuteExA

msvcrt

_controlfp __set_app_type __p__fmode __p__commode _adjust_fdiv __setusermatherr _initterm __getmainargs _acmdln exit _XcptFilter _exit _onexit __dllonexit ??1type_info@@UAE@XZ _except_handler3 _beginthreadex memcpy free malloc _CxxThrowException _purecall memmove __CxxFrameHandler memcmp

kernel32

CloseHandle GetStartupInfoA GetModuleHandleA InitializeCriticalSection ResetEvent SetEvent CreateEventA VirtualFree VirtualAlloc Sleep WaitForMultipleObjects GetStdHandle SetEndOfFile WriteFile ReadFile SetFilePointer GetFileSize CreateFileA FindNextFileA FindNextFileW FindFirstFileA FindFirstFileW FindClose GetCurrentThreadId GetTickCount GetCurrentProcessId GetTempPathA GetTempPathW GetCurrentDirectoryA GetCurrentDirectoryW SetCurrentDirectoryA SetCurrentDirectoryW GetFullPathNameA GetFullPathNameW DeleteFileA DeleteFileW CreateDirectoryA CreateDirectoryW RemoveDirectoryA RemoveDirectoryW SetFileAttributesA SetFileAttributesW SetLastError CreateFileW SetFileTime FormatMessageA FormatMessageW LocalFree GetModuleFileNameA GetModuleFileNameW GetLastError WideCharToMultiByte MultiByteToWideChar DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetVersionExA GetCommandLineW WaitForSingleObject CreateProcessA

SIB9.exe

IMPHASH 0b96bfb4aed20508029b028a4dff1761
SHA256 0251e9434c9cb79908f74dd46dac76f6563ff92e9fac244335f9790be146d6dd
MD5 4f755463d6c681e850d527866cb57789
SHA1 9fcf0f73a24b6349751b91a78891f2afcacc30f8
SHA512 ad5577f7e592e2e0f5ae5a7a571d9c25fe2f784d0e508410d84eb5db187f29ef88111ed2fda9f090b9b05fc44a62c0123d4c3236e01e84f2ae9a095a9766036c
SSDEEP 24576:4jJAIUoPlg8O26p9/mdX3wwutuAaSFH9ktCGksVT++vjc3mG:4jJxu4GU3wwCuAP9atbkGT++rC
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

be:86:82:21:8e:0a:a0:cd:0b:41:b2:1d:5c:5f:be:a8:7a:7c:51:b6:40:42:3b:08:b3:aa:9f:34:75:54:0d:a7

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Stanislav Zinukhov,O=Stanislav Zinukhov,L=Moscow,ST=Moscow City,C=RU

Chains

Oct 24, 2016

Minor OS version

0

Major OS version

4

Entry point

79116

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

oleaut32

VariantClear SysAllocString

user32

SendMessageA SetTimer KillTimer DialogBoxParamA SetWindowLongA GetWindowLongA SetWindowTextW SetWindowTextA LoadIconA LoadStringW LoadStringA CharUpperW CharUpperA DestroyWindow EndDialog PostMessageA ShowWindow MessageBoxW GetDlgItem DialogBoxParamW

shell32

ShellExecuteExA

msvcrt

_controlfp __set_app_type __p__fmode __p__commode _adjust_fdiv __setusermatherr _initterm __getmainargs _acmdln exit _XcptFilter _exit _onexit __dllonexit ??1type_info@@UAE@XZ _except_handler3 _beginthreadex memcpy free malloc _CxxThrowException _purecall memmove __CxxFrameHandler memcmp

kernel32

CloseHandle GetStartupInfoA GetModuleHandleA InitializeCriticalSection ResetEvent SetEvent CreateEventA VirtualFree VirtualAlloc Sleep WaitForMultipleObjects GetStdHandle SetEndOfFile WriteFile ReadFile SetFilePointer GetFileSize CreateFileA FindNextFileA FindNextFileW FindFirstFileA FindFirstFileW FindClose GetCurrentThreadId GetTickCount GetCurrentProcessId GetTempPathA GetTempPathW GetCurrentDirectoryA GetCurrentDirectoryW SetCurrentDirectoryA SetCurrentDirectoryW GetFullPathNameA GetFullPathNameW DeleteFileA DeleteFileW CreateDirectoryA CreateDirectoryW RemoveDirectoryA RemoveDirectoryW SetFileAttributesA SetFileAttributesW SetLastError CreateFileW SetFileTime FormatMessageA FormatMessageW LocalFree GetModuleFileNameA GetModuleFileNameW GetLastError WideCharToMultiByte MultiByteToWideChar DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetVersionExA GetCommandLineW WaitForSingleObject CreateProcessA

explorer.bat

SHA256 617d6d8ff3e749cf084f29b1a27743fc7fc5a405622ac0d884aedeaac49dd6bd
MD5 0579d17228afc93c06cad33105bcb0e3
SHA1 58706635ef1b41046eef93bf2e92edaec05fda52
SHA512 7a94af8cdd4bd6b1ad8a67f30af253afc12c55c560f55f7b2c4e996f68b7821ab1ed40053216d0f4a81ebe70736d929009f577e3f79a48e3a397ebe34c6098e6
MD5 SHA1 SHA512

NSIS installer

installer

incontrol.exe

IMPHASH 09d0478591d4f788cb3e5ea416c25237
SHA256 340a0b14e5e94c0ae6412872cd4f8d4338dc9b8a18b96883c45e1e8988524b2a
MD5 69080ffac1b3b5db82eeb0ade8105ca7
SHA1 69c77cec8f8b184848047900656d510302681b60
SHA512 8763964f17e4953228dbea97340d9dfc9afbda5823b8727fa5a6013dee010aeb1b9c69bb10ae7805f1f9a1fe01c02701f0d9894004f8a42888c1c510f64879bd
SSDEEP 768:yQQHgR6eguaXUkAsxVZ2eHg2h9G6XE1uSnMq8f1D4XeChXcsM/hz7gYiyAMxkEWy:yTAslU9E7vg2xXGEqu1D45cDe7QxSSn
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

5

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

theme8.exe

IMPHASH c05041e01f84e1ccca9c4451f3b6a383
SHA256 ca17b823bff9896ada846af4945302030326730978f522cfaf397ce09fe49d75
MD5 029daaa1f7db279056792b4e00a28042
SHA1 b89e8b9e41f344dbdc1b9fb8fca0525737bf633b
SHA512 9842c21e185e1a942307c78b9d9be83f1441d61d8f742ddb5fbfce377f2b0ed1735564370dc73efd3c04294ecbbc71e209509b231ebfeb36e6cfdabab309eda7
SSDEEP 3072:9uxVUg3yGDRb8lc7uLstNXyqMyvYy8zx9f8TIdkXpSe9U30u/AoYi83C:MgORagtFOeYy2rf4Xse40G
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

13784

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCreateKeyExW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken SetFileSecurityW RegOpenKeyExW RegEnumValueW

shell32

SHGetSpecialFolderLocation SHFileOperationW SHBrowseForFolderW SHGetPathFromIDListW ShellExecuteExW SHGetFileInfoW

ole32

OleInitialize OleUninitialize CoCreateInstance IIDFromString CoTaskMemFree

comctl32

ord17 ImageList_Create ImageList_Destroy ImageList_AddMasked

user32

GetClientRect EndPaint DrawTextW IsWindowEnabled DispatchMessageW wsprintfA CharNextA CharPrevW MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW GetSystemMetrics FillRect AppendMenuW TrackPopupMenu OpenClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetWindowLongW GetSysColor SetWindowPos PeekMessageW SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint EmptyClipboard CreatePopupMenu

gdi32

SetBkMode SetBkColor GetDeviceCaps CreateFontIndirectW CreateBrushIndirect DeleteObject SetTextColor SelectObject

kernel32

GetExitCodeProcess WaitForSingleObject GetModuleHandleA GetProcAddress GetSystemDirectoryW lstrcatW Sleep lstrcpyA WriteFile GetTempFileNameW lstrcmpiA RemoveDirectoryW CreateProcessW CreateDirectoryW GetLastError CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersion GetCommandLineW GetTempPathW GetWindowsDirectoryW SetEnvironmentVariableW ExitProcess CopyFileW GetCurrentProcess GetModuleFileNameW GetFileSize CreateFileW GetTickCount MulDiv SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW MoveFileExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW

$PLUGINSDIR/SysRestore.dll

IMPHASH 985dc42ba384582f88fa4ebd866cc9b9
SHA256 c686b4df9b4db50fc1ddb7be4cd50d4b1d75894288f4dc50571b79937d7c0d7e
MD5 4310bd09fc2300b106f0437b6e995330
SHA1 c6790a68e410d4a619b9b59e7540b702a98ad661
SHA512 49e286ccd285871db74867810c9cf243e3c1522ce7b4c0d1d01bafe72552692234cf4b4d787b900e9c041b8a2c12f193b36a6a35c64ffd5deef0e1be9958b1f7
SSDEEP 48:S5SLAPmT5fqaB2WB2BtBAQPcPzRcCB0E3ngT2p2UlE41qSK1Gx:ASQM57LAfuQULRxB0E3gKU941LKQx
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

5

Entry point

4864

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/System.dll

IMPHASH fc0224e99e736751432961db63a41b76
SHA256 7a9ddee34562cd3703f1502b5c70e99cd5bba15de2b6845a3555033d7f6cb2a5
MD5 564bb0373067e1785cba7e4c24aab4bf
SHA1 7c9416a01d821b10b2eef97b80899d24014d6fc1
SHA512 22c61a323cb9293d7ec5c7e7e60674d0e2f7b29d55be25eb3c128ea2cd7440a1400cee17c43896b996278007c0d247f331a9b8964e3a40a0eb1404a9596c4472
SSDEEP 192:nenY0qWTlt70IAj/lQ0sEWc/wtYbBH2aDybC7y+XBDIwL:n8+Qlt70Fj/lQRY/9VjjfL
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

10719

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/modern-wizard.bmp

SHA256 aea40659bdb08337064640ea8b4f171881d37456b37b3e2899349ac04f0889c5
MD5 5f728e4e6b970db76c64be8ca3cafc87
SHA1 b7481efd9f6938903214451d792a8b13a645c922
SHA512 2cc4e870290f8faddc8eca1a03a1efb34711b3951e263a79f259fd998a9a1f957dbf58c110c5fe64febd414ec7a22e125353f9d5c363866bd0d4298452fdadc8
SSDEEP 768:/ou/hmB0wVZLLsg0fjA9hmgr+IYesuqftVraywBZM6mJRmYUt+Bmm:AUh8xVJHnaomftVraywfrmJRnUamm
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/nsDialogs.dll

IMPHASH 6b5c4f7d679059f68f1269aad3a5cecd
SHA256 6bf9cccd8a600f4d442efe201e8c07b49605ba35f49a4b3ab22fa2641748e156
MD5 48f3e7860e1de2b4e63ec744a5e9582a
SHA1 420c64d802a637c75a53efc8f748e1aede3d6dc6
SHA512 28716ddea580eeb23d93d1ff6ea0cf79a725e13c8f8a17ec9dfacb1fe29c7981ad84c03aed05663adc52365d63d19ec2f366762d1c685e3a9d93037570c3c583
SSDEEP 96:oFsvUu3Uy+sytcS8176b+XR8pCHFcMcxSgB5PKtAtgt+Nt+rnt3DVEB3YuNqkzfS:oFsvWyNO81b8pCHFcM0PuAgkOywIFc
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

7527

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/nsisFile.dll

IMPHASH bc2dec22623add29834c35d9141fa2a6
SHA256 a820a32e5ce89e3e336afc71aa1bf42a357ec542c2bc6e50c6255c1333812587
MD5 b7d0d765c151d235165823b48554e442
SHA1 fe530e6c6fd60392d4ce611b21ec9daad3f1bc84
SHA512 5d801c24dfa1b7326f72f9c0acf3a330ef0cc3fce25ceee200bb12eab8c2b653025602e610e0cecda1e7cbd851ce1b66252531220b557a378ddb0b4a1741fa66
SSDEEP 48:a+guelvxkcuEkVy5wM4zL5stbmaN0QpUFdAwsj1gAtl/lSFc/H9UhV0n:3CBxIEkVQwzR2300URs5ldSFcv9c
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

5761

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$TEMP/image.bmp

SHA256 ebbe6a400cab4901c942338b9387939721921d571f3ee1c6a236a001bffae022
MD5 f5c857165c1ab170316b905666d7cc08
SHA1 e56b59d1fec84ff4a3600fc125b06172fbad5d95
SHA512 a744324831d951c628d3c67332c98a7a641bdb1a5e4ea953bcb030212a36e5f70159be4313d045bd0d50a642bd2027c871225589aa7cb3b32989d1375eb6ad4e
SSDEEP 192:ZGyfUH/UIvqQ3v6cmy+Z/X2WbnRhlndHEs:1m/zSQ3v6by+Z/mWbHldHEs
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Uninstall.exe

IMPHASH c05041e01f84e1ccca9c4451f3b6a383
SHA256 4104ca13b1d1dc7b2f2cd40bdfbc6d90d0c1f4522c40e22e0001d9b24f866fb1
MD5 ae3203045a89c2d07538a1eab0310dd1
SHA1 75e7dbdbcb6fbe7072a3025066b2b5af60364b77
SHA512 7d8b68dd4c07175a6ea899997ccbbbd002dc94b5b8c7b664c6d53aad58dc79da7f4927269942d794629ec9ef05efdb41707284efbbb478e7f8a63ec98b8f51e8
SSDEEP 1536:9MpxVUC9B3yGoERbEy/Qlc7ukze5wP7+VCusaUdXCA5+b2kGyDZny0fK:9uxVUg3yGDRb8lc7uLstNXA2k9xFy
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

13784

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCreateKeyExW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken SetFileSecurityW RegOpenKeyExW RegEnumValueW

shell32

SHGetSpecialFolderLocation SHFileOperationW SHBrowseForFolderW SHGetPathFromIDListW ShellExecuteExW SHGetFileInfoW

ole32

OleInitialize OleUninitialize CoCreateInstance IIDFromString CoTaskMemFree

comctl32

ord17 ImageList_Create ImageList_Destroy ImageList_AddMasked

user32

GetClientRect EndPaint DrawTextW IsWindowEnabled DispatchMessageW wsprintfA CharNextA CharPrevW MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW GetSystemMetrics FillRect AppendMenuW TrackPopupMenu OpenClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetWindowLongW GetSysColor SetWindowPos PeekMessageW SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint EmptyClipboard CreatePopupMenu

gdi32

SetBkMode SetBkColor GetDeviceCaps CreateFontIndirectW CreateBrushIndirect DeleteObject SetTextColor SelectObject

kernel32

GetExitCodeProcess WaitForSingleObject GetModuleHandleA GetProcAddress GetSystemDirectoryW lstrcatW Sleep lstrcpyA WriteFile GetTempFileNameW lstrcmpiA RemoveDirectoryW CreateProcessW CreateDirectoryW GetLastError CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersion GetCommandLineW GetTempPathW GetWindowsDirectoryW SetEnvironmentVariableW ExitProcess CopyFileW GetCurrentProcess GetModuleFileNameW GetFileSize CreateFileW GetTickCount MulDiv SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW MoveFileExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW

$PLUGINSDIR/System.dll

IMPHASH fc0224e99e736751432961db63a41b76
SHA256 7a9ddee34562cd3703f1502b5c70e99cd5bba15de2b6845a3555033d7f6cb2a5
MD5 564bb0373067e1785cba7e4c24aab4bf
SHA1 7c9416a01d821b10b2eef97b80899d24014d6fc1
SHA512 22c61a323cb9293d7ec5c7e7e60674d0e2f7b29d55be25eb3c128ea2cd7440a1400cee17c43896b996278007c0d247f331a9b8964e3a40a0eb1404a9596c4472
SSDEEP 192:nenY0qWTlt70IAj/lQ0sEWc/wtYbBH2aDybC7y+XBDIwL:n8+Qlt70Fj/lQRY/9VjjfL
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

10719

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/modern-wizard.bmp

SHA256 aea40659bdb08337064640ea8b4f171881d37456b37b3e2899349ac04f0889c5
MD5 5f728e4e6b970db76c64be8ca3cafc87
SHA1 b7481efd9f6938903214451d792a8b13a645c922
SHA512 2cc4e870290f8faddc8eca1a03a1efb34711b3951e263a79f259fd998a9a1f957dbf58c110c5fe64febd414ec7a22e125353f9d5c363866bd0d4298452fdadc8
SSDEEP 768:/ou/hmB0wVZLLsg0fjA9hmgr+IYesuqftVraywBZM6mJRmYUt+Bmm:AUh8xVJHnaomftVraywfrmJRnUamm
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/nsDialogs.dll

IMPHASH 6b5c4f7d679059f68f1269aad3a5cecd
SHA256 6bf9cccd8a600f4d442efe201e8c07b49605ba35f49a4b3ab22fa2641748e156
MD5 48f3e7860e1de2b4e63ec744a5e9582a
SHA1 420c64d802a637c75a53efc8f748e1aede3d6dc6
SHA512 28716ddea580eeb23d93d1ff6ea0cf79a725e13c8f8a17ec9dfacb1fe29c7981ad84c03aed05663adc52365d63d19ec2f366762d1c685e3a9d93037570c3c583
SSDEEP 96:oFsvUu3Uy+sytcS8176b+XR8pCHFcMcxSgB5PKtAtgt+Nt+rnt3DVEB3YuNqkzfS:oFsvWyNO81b8pCHFcM0PuAgkOywIFc
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

7527

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

themeui.dll.tmp

IMPHASH 5e52d91d49ed07eb890e9a0a6c21f0e1
SHA256 5ebb4929fb1937ba32a2397f91987ab150721e55080a97a9c558a121f1228895
MD5 ef16f1eb406d56ddc793a74fc9e5f138
SHA1 250f1bc42c8768159b34d40afb6dd1b21db76ed5
SHA512 0bc514e64f12167ad086fdda78ce5077c41b7ae47c07d5f88be443142b0dcedbd7350301797c9b65517427603dcf838104f27bb7aab99a892fa97300b724ff9b
SSDEEP 49152:K1MXMiO2ja7Wzp73WuRuY1jZDWuZuY1jZDWuRuY1jZ0cgq:SMXZja7o3WuRuY1jZDWuZuY1jZDWuRuO
MD5 SHA1 SHA512 SSDEEP

windows:10 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

10

Entry point

8624

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

ThemeUI.pdb

msvcrt

__CxxFrameHandler3 sqrtf _vsnwprintf _vsnprintf strchr memcpy_s _CxxThrowException memcmp memmove memcpy ??1type_info@@UEAA@XZ _onexit __dllonexit _unlock _lock __C_specific_handler _initterm _amsg_exit _XcptFilter swscanf_s wcschr towupper malloc free _wtoi memset wcscmp

shcore

SHDeleteValueW SHRegSetPathW ord290 ord162 ord170 SHUnicodeToUnicode SHStrDupW SHCreateStreamOnFileEx ord190 SHCreateThreadWithHandle IStream_Reset ord142 ord292 IStream_Size SHRegGetValueW SHRegGetPathW IsOS ord222 SHCreateThread ord123 SHDeleteKeyW IUnknown_Set IUnknown_SetSite SHGetValueW SHSetValueW

shell32

ord147 ord28 SHCreateItemFromIDList SHFileOperationW ord102 SHChangeNotify SHCreateItemWithParent ord18 SHCreateShellItemArrayFromIDLists SHCreateShellItemArrayFromShellItem SHQueryRecycleBinW ord152 ord846 ord25 ord27 ord825 ord100 SHGetNameFromIDList ord155 SHGetIDListFromObject ord92 ExtractIconW SHCreateItemFromParsingName ord24 SHGetKnownFolderPath SHGetFolderPathEx SHParseDisplayName

shlwapi

PathIsFileSpecW PathFindExtensionW PathRemoveExtensionW PathCombineW StrStrW PathAppendW StrToIntW PathQuoteSpacesW StrCmpIW StrDupW StrCmpNW UrlCompareW PathRemoveFileSpecW StrRStrIW PathIsPrefixW ord487 PathIsRelativeW ord466 SHRegGetUSValueW UrlEscapeW ord464 StrCmpNIW PathUnExpandEnvStringsW StrStrIW PathCommonPrefixW ord433 PathAddBackslashW ord448 PathIsDirectoryW PathFindNextComponentW StrFormatByteSizeW PathStripToRootW PathRemoveFileSpecA PathStripPathA StrRChrA StrToIntExW StrRChrW StrChrW ord460 PathFindFileNameW ord23 StrCmpW ord219 ord154 ord158 PathFileExistsW

api-ms-win-core-com-l1-1-1

CoTaskMemFree StringFromGUID2 CoCreateGuid StringFromCLSID CreateStreamOnHGlobal CoTaskMemRealloc PropVariantClear CoReleaseMarshalData CoMarshalInterThreadInterfaceInStream CoGetInterfaceAndReleaseStream CoGetMalloc CoUninitialize CoInitializeEx CLSIDFromString CoTaskMemAlloc CoCreateInstance

api-ms-win-core-heap-l2-1-0

LocalFree LocalAlloc

api-ms-win-core-sysinfo-l1-2-1

GetSystemDirectoryW GetTickCount GetWindowsDirectoryW GetSystemTimeAsFileTime

api-ms-win-core-registry-l1-1-0

RegOpenKeyExW RegQueryValueExW RegSetValueExW RegDeleteValueW RegQueryInfoKeyW RegGetValueW RegCreateKeyExW RegEnumValueW RegEnumKeyExW RegCloseKey

api-ms-win-core-libraryloader-l1-2-0

DisableThreadLibraryCalls GetProcAddress FreeLibrary GetModuleHandleW FreeLibraryAndExitThread LoadStringW GetModuleFileNameA GetModuleHandleExW LoadLibraryExW GetModuleFileNameW

api-ms-win-core-handle-l1-1-0

CloseHandle DuplicateHandle

api-ms-win-core-errorhandling-l1-1-1

GetLastError SetLastError UnhandledExceptionFilter SetUnhandledExceptionFilter

api-ms-win-core-synch-l1-2-0

InitOnceBeginInitialize ReleaseSRWLockExclusive ResetEvent Sleep DeleteCriticalSection InitOnceComplete WaitForSingleObject SetEvent OpenEventW CreateEventW InitializeCriticalSection AcquireSRWLockExclusive EnterCriticalSection ReleaseMutex CreateMutexW LeaveCriticalSection

api-ms-win-core-debug-l1-1-1

IsDebuggerPresent OutputDebugStringW

api-ms-win-core-processthreads-l1-1-2

GetCurrentProcess OpenProcessToken GetCurrentThread CreateProcessW TerminateProcess GetCurrentThreadId GetExitCodeThread OpenThreadToken GetCurrentProcessId ResumeThread CreateThread

api-ms-win-core-heap-l1-2-0

HeapFree HeapAlloc GetProcessHeap HeapReAlloc

api-ms-win-core-string-l1-1-0

WideCharToMultiByte MultiByteToWideChar CompareStringOrdinal

api-ms-win-core-file-l1-2-1

LocalFileTimeToFileTime GetFileAttributesExW FindFirstFileExW GetTempFileNameW WriteFile SetFileTime SetFileAttributesW GetDiskFreeSpaceExW GetTempPathW DeleteFileW CompareFileTime FindClose FindNextFileW FindFirstFileW GetLongPathNameW GetFileSize SetFilePointer ReadFile CreateDirectoryW CreateFileW FileTimeToLocalFileTime

api-ms-win-core-string-l2-1-0

CharNextW CharUpperBuffW IsCharUpperW CharLowerW

api-ms-win-core-file-l2-1-2

CopyFileW

api-ms-win-core-synch-l1-2-1

WaitForMultipleObjects

api-ms-win-core-localization-l1-2-1

FormatMessageW LCMapStringW GetLocaleInfoW

api-ms-win-core-libraryloader-l1-2-1

LoadLibraryW

api-ms-win-core-wow64-l1-1-1

GetSystemWow64DirectoryW

api-ms-win-core-path-l1-1-0

PathCchAppend PathCchRenameExtension PathCchAddExtension PathCchCombine

api-ms-win-core-threadpool-l1-2-0

CloseThreadpoolWork CreateThreadpoolWork SubmitThreadpoolWork

api-ms-win-core-processenvironment-l1-2-0

ExpandEnvironmentStringsW

api-ms-win-core-rtlsupport-l1-2-0

RtlVirtualUnwind RtlCaptureContext RtlLookupFunctionEntry

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-memory-l1-1-2

MapViewOfFile UnmapViewOfFile CreateFileMappingW

api-ms-win-core-sidebyside-l1-1-0

CreateActCtxW ActivateActCtx ReleaseActCtx DeactivateActCtx

api-ms-win-core-kernel32-legacy-l1-1-1

MulDiv DosDateTimeToFileTime FileTimeToDosDateTime

api-ms-win-core-localization-obsolete-l1-3-0

GetNumberFormatW GetUserDefaultUILanguage

api-ms-win-core-privateprofile-l1-1-1

GetPrivateProfileStringW

api-ms-win-core-string-obsolete-l1-1-0

lstrcmpiW lstrlenW

ntdll

WinSqmAddToStream WinSqmIsOptedIn WinSqmSetDWORD WinSqmIncrementDWORD EtwEventActivityIdControl EtwEventWriteTransfer EtwEventSetInformation EtwEventUnregister EtwEventRegister EtwUnregisterTraceGuids EtwRegisterTraceGuidsW EtwGetTraceEnableFlags EtwGetTraceEnableLevel EtwGetTraceLoggerHandle EtwEventWrite EtwTraceMessage

gdi32

SetMagicColors GetStockObject ExtFloodFill GetPixel SetStretchBltMode StretchBlt CreateCompatibleBitmap SaveDC RestoreDC CreateRectRgn GetRegionData GdiAlphaBlend BitBlt SetLayout DeleteObject SelectObject CreateCompatibleDC CreateDIBSection CreateSolidBrush CreateFontIndirectW SetBkMode SetTextColor GetObjectW GetDeviceCaps DeleteDC

user32

GetDlgCtrlID InvalidateRect DrawIconEx MoveWindow EnumChildWindows EndTask SendMessageTimeoutW SetWindowLongW LoadIconW SetDlgItemTextW SetDlgItemInt IsDlgButtonChecked CheckDlgButton GetDlgItemInt DestroyIcon LoadBitmapW SendDlgItemMessageW RegisterClassW GetClassInfoW RedrawWindow CallWindowProcW GetWindow IsWindow GetDlgItem EnableWindow SendMessageW GetFocus LoadImageW WaitForInputIdle DrawTextW GetWindowLongW OffsetRect GetSysColorBrush GetMonitorInfoW MonitorFromPoint ValidateRect SetForegroundWindow ShowWindow FillRect GetClientRect DefWindowProcW EndPaint BeginPaint PostQuitMessage KillTimer DestroyWindow SetTimer GetWindowLongPtrW GetMessageW CreateWindowExW CreateWindowInBand GetSystemMetrics SystemParametersInfoW GetShellWindow UnregisterClassW SetWindowLongPtrW RegisterClassExW SendNotifyMessageW FindWindowW OpenIcon CopyRect InflateRect MessageBoxW PostThreadMessageW LoadCursorW SetCursor SetSysColors GetSysColor ReleaseDC GetDC DispatchMessageW TranslateMessage PeekMessageW MsgWaitForMultipleObjects PostMessageW GetParent FindWindowExW EnumWindows GetClassNameW

api-ms-win-core-delayload-l1-1-1

DelayLoadFailureHook ResolveDelayLoadedAPI

Name

.text

Size

271KB

Virtual Size

271KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

79KB

Virtual Size

78KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.didat

Size

1024B

Virtual Size

616B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

2.4MB

Virtual Size

2.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

uxinit.dll.tmp

IMPHASH 2a467bac5f9b6cd47d53cda99bafc74c
SHA256 70e39972a54ea8bf69184db3e5e5f093b22c1fe3becb0e03e1702bbd23bc54a3
MD5 7901d3914fcb49287e2c0ab7ee533f7e
SHA1 daf4e756cf6372fd85dd1c29a9da6bfb5e51e465
SHA512 28c9a9db84972de524df1b7be3c8ad3737461623483d71c9c08aa3882c49a7f2e79e39c293afb481aadfdaf6ee62d7c19b7405e736dac595ba9a2c303900cbbd
SSDEEP 1536:ApWYd8utzjrbt6547wAzsheSoVx1Esmz/6ijQ+/:AkY+utzPp654wqV7e/6id/
MD5 SHA1 SHA512 SSDEEP

windows:10 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

10

Entry point

32384

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

UXInit.pdb

msvcrt

memcmp memcpy _XcptFilter _vsnwprintf memmove _onexit __dllonexit _unlock _lock __C_specific_handler _initterm malloc rand_s wcschr _wcsicmp wcsrchr memcpy_s free _amsg_exit memset

api-ms-win-core-processthreads-l1-1-2

OpenProcessToken OpenThreadToken GetCurrentThread GetCurrentThreadId GetCurrentProcessId SetThreadToken TerminateProcess GetCurrentProcess ExitThread

api-ms-win-core-errorhandling-l1-1-1

GetLastError UnhandledExceptionFilter SetLastError SetUnhandledExceptionFilter

api-ms-win-core-handle-l1-1-0

CloseHandle DuplicateHandle

api-ms-win-core-synch-l1-2-0

ResetEvent Sleep CreateSemaphoreExW CreateEventW EnterCriticalSection LeaveCriticalSection InitializeCriticalSection DeleteCriticalSection

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-2-1

GetSystemTimeAsFileTime GetTickCount

api-ms-win-core-rtlsupport-l1-2-0

RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext

api-ms-win-core-heap-l1-2-0

GetProcessHeap HeapFree HeapAlloc HeapReAlloc

api-ms-win-core-heap-l2-1-0

LocalFree LocalAlloc

api-ms-win-core-memory-l1-1-2

CreateFileMappingW MapViewOfFile UnmapViewOfFile

api-ms-win-core-threadpool-private-l1-1-0

RegisterWaitForSingleObjectEx

api-ms-win-core-kernel32-legacy-l1-1-1

UnregisterWait RegisterWaitForSingleObject

api-ms-win-core-threadpool-legacy-l1-1-0

UnregisterWaitEx

ntdll

RtlCompressBuffer RtlGetCompressionWorkSpaceSize RtlUnhandledExceptionFilter NtCreateSection NtOpenSection NtConnectPort RtlDeleteCriticalSection RtlInitializeCriticalSection NtClose NtSetInformationThread NtDuplicateToken RtlImageNtHeader NtQuerySystemInformation RtlNtStatusToDosError NtCreateEvent RtlInitUnicodeString NtRequestWaitReplyPort EtwEventUnregister EtwEventRegister RtlDecompressBufferEx

user32

GetDpiForMonitorInternal IsProcessDPIAware GetDC CloseDesktop SetThreadDesktop OpenInputDesktop GetThreadDesktop ReleaseDC EnumDisplayDevicesW EnumDisplaySettingsW SystemParametersInfoW GetSystemMetrics GetWindowDC EnumDisplayMonitors

api-ms-win-core-delayload-l1-1-1

DelayLoadFailureHook ResolveDelayLoadedAPI

api-ms-win-core-libraryloader-l1-2-0

FreeLibrary SizeofResource LoadLibraryExW FindResourceExW GetProcAddress LoadResource LockResource GetModuleHandleW

api-ms-win-core-file-l1-2-1

ReadFile GetFileSize WriteFile SetFilePointer CreateFileW

api-ms-win-core-string-l1-1-0

CompareStringW

api-ms-win-core-processenvironment-l1-2-0

ExpandEnvironmentStringsW

api-ms-win-core-registry-l1-1-0

RegCreateKeyExW RegEnumValueW RegCloseKey RegDeleteValueW RegOpenCurrentUser RegOpenKeyExW RegQueryValueExW RegSetValueExW

api-ms-win-eventing-provider-l1-1-0

EventWrite

api-ms-win-core-threadpool-l1-2-0

CloseThreadpoolWait SetThreadpoolWait WaitForThreadpoolWaitCallbacks CreateThreadpoolWait

api-ms-win-core-string-obsolete-l1-1-0

lstrcmpiW lstrlenW

api-ms-win-core-localization-obsolete-l1-3-0

GetUserDefaultUILanguage

api-ms-win-shcore-scaling-l1-1-1

UnregisterScaleChangeEvent RegisterScaleChangeEvent

gdi32

SetBitmapAttributes CreateDIBSection CreateSessionMappedDIBSection DeleteObject GetDeviceCaps ClearBitmapAttributes

Name

.text

Size

47KB

Virtual Size

46KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

20KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.didat

Size

512B

Virtual Size

352B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

136B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

uxstyle1507.exe

IMPHASH 963226e6bbe29f87aa49b92b4ae9a4f1
SHA256 012d5c73c83cb96b67b9b94aebe7f8ea3f594579ed8cb1dc5e72bbf41036cc79
MD5 633b3a12c0a7d0f02c935a93fedbaff7
SHA1 1b22b3813f8ad29c1acf24e96c84ae5d89c08d04
SHA512 74188acbdd962455e6b35cf63f710d110edd23dded6e80524126b22f4b6dd1729b4793149012da97735f3fac56d25c5a8af66d1e104f006572efa9389e32a4c5
SSDEEP 49152:qnwLl+IQJ0vuNlc0xUnPbrxXNYfs9THqFg1Tv9DbhqBNr:qnwZvbuNlc0xUTrxXNYf2qm3bkNr
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

Digest

02:4b:19:d8:f1:52:ff:00:ee:93:4b:90:3e:0b:fe:5b:4f:be:d8:e6

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=The Within Network\, LLC,O=The Within Network\, LLC,L=Purcellville,ST=Virginia,C=US

Chains

Mar 1, 2015

CN=The Within Network\, LLC,O=The Within Network\, LLC,L=Purcellville,ST=Virginia,C=US

CN=GlobalSign CodeSigning CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=The Within Network\, LLC,O=The Within Network\, LLC,L=Purcellville,ST=Virginia,C=US

CN=GlobalSign CodeSigning CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:2f:4e:e1:52:d7

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 13, 2011 - Jan 28, 2028

Subject

CN=GlobalSign CodeSigning CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:31:89:c6:37:e8

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 2, 2011 - Aug 2, 2019

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:25:07:1d:f9:af

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Nov 18, 2009 - Mar 18, 2019

Subject

CN=GlobalSign TSA for MS Authenticode - G1,O=GMO GlobalSign Pte Ltd,C=SG

Serial Number

11:21:40:5c:1f:0e:d2:58:88:2b:e5:4d:86:86:ba:11:ea:45

Issuer

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Aug 23, 2013 - Sep 23, 2024

Subject

CN=The Within Network\, LLC,O=The Within Network\, LLC,L=Purcellville,ST=Virginia,C=US

Serial Number

11:21:e2:b6:98:76:9f:ba:3f:4f:f9:08:34:be:f0:f2:a6:64

Issuer

CN=GlobalSign CodeSigning CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 8, 2014 - Oct 9, 2015

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Serial Number

61:29:15:27:00:00:00:00:00:2a

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 15, 2011 - Apr 15, 2021

Minor OS version

1

Major OS version

5

Entry point

169055

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\src\wix39r2\build\ship\x86\burn.pdb

advapi32

OpenProcessToken AdjustTokenPrivileges LookupPrivilegeValueW InitiateSystemShutdownExW GetUserNameW RegCloseKey RegQueryValueExW RegDeleteValueW ConvertStringSecurityDescriptorToSecurityDescriptorW DecryptFileW CreateWellKnownSid InitializeAcl SetEntriesInAclW ChangeServiceConfigW CloseServiceHandle ControlService OpenSCManagerW OpenServiceW QueryServiceStatus QueryServiceConfigW SetNamedSecurityInfoW CheckTokenMembership AllocateAndInitializeSid SetEntriesInAclA SetSecurityDescriptorGroup SetSecurityDescriptorOwner SetSecurityDescriptorDacl InitializeSecurityDescriptor RegSetValueExW RegQueryInfoKeyW RegEnumValueW RegEnumKeyExW RegDeleteKeyW RegCreateKeyExW GetTokenInformation CryptDestroyHash CryptHashData CryptCreateHash CryptGetHashParam CryptReleaseContext CryptAcquireContextW RegOpenKeyExW

user32

GetMessageW PeekMessageW PostMessageW IsWindow WaitForInputIdle PostQuitMessage TranslateMessage DefWindowProcW RegisterClassW UnregisterClassW CreateWindowExW MessageBoxW GetCursorPos GetWindowLongW SetWindowLongW DispatchMessageW LoadCursorW IsDialogMessageW MonitorFromPoint GetMonitorInfoW PostThreadMessageW MsgWaitForMultipleObjects LoadBitmapW

oleaut32

SysAllocString SysFreeString VariantInit VariantClear

gdi32

SelectObject DeleteObject GetObjectW StretchBlt CreateCompatibleDC DeleteDC

shell32

ShellExecuteExW SHGetFolderPathW CommandLineToArgvW

ole32

CoInitializeEx CoUninitialize CoInitializeSecurity CLSIDFromProgID CoInitialize CoTaskMemFree CoCreateInstance StringFromGUID2

kernel32

VerSetConditionMask FreeLibrary GetProcAddress EnterCriticalSection LeaveCriticalSection GetSystemTime GetNativeSystemInfo lstrlenW GetModuleHandleExW GetSystemDirectoryW GetTempPathW GetWindowsDirectoryW GetSystemWow64DirectoryW GetComputerNameW VerifyVersionInfoW GetVolumePathNameW CompareStringW GetDateFormatW GetSystemDefaultLangID GetUserDefaultLangID GetStringTypeW ExpandEnvironmentStringsW GetFileAttributesW ReadFile SetFilePointerEx CreateFileW CreateProcessW DuplicateHandle InterlockedExchange InterlockedCompareExchange LoadLibraryW lstrlenA RemoveDirectoryW CreateEventW GetCurrentProcessId ProcessIdToSessionId LocalFree OpenProcess GetProcessId WaitForSingleObject WriteFile ConnectNamedPipe SetNamedPipeHandleState CreateNamedPipeW CreateThread GetExitCodeThread GetVersionExW SetFileAttributesW FindFirstFileW FindNextFileW SetEvent WaitForMultipleObjects InterlockedIncrement InterlockedDecrement ResetEvent SetEndOfFile SetFileTime LocalFileTimeToFileTime DosDateTimeToFileTime CreateFileA CompareStringA SetCurrentDirectoryW GetCurrentDirectoryW GetExitCodeProcess SetThreadExecutionState CopyFileExW MapViewOfFile UnmapViewOfFile CreateMutexW CreateFileMappingW GetThreadLocale GetModuleHandleW TlsFree TlsSetValue TlsGetValue GetLastError GetCurrentThreadId VirtualFree VirtualAlloc MoveFileExW CopyFileW DeleteFileW GetFileSizeEx GlobalFree GlobalAlloc GetModuleHandleA GetCurrentProcess HeapSetInformation GetFullPathNameW CreateDirectoryW TlsAlloc CloseHandle Sleep ReleaseMutex DeleteCriticalSection FindClose InitializeCriticalSection TerminateProcess InitializeCriticalSectionAndSpinCount GetTempFileNameW FormatMessageW GetLocalTime SetFilePointer FlushFileBuffers WriteConsoleW SetStdHandle LCMapStringW HeapSize HeapReAlloc GetConsoleMode GetConsoleCP OutputDebugStringW RtlUnwind LoadLibraryExW GetCPInfo GetOEMCP GetACP IsValidCodePage SetUnhandledExceptionFilter UnhandledExceptionFilter FreeEnvironmentStringsW HeapFree RaiseException SystemTimeToTzSpecificLocalTime GetTimeZoneInformation SystemTimeToFileTime HeapAlloc IsProcessorFeaturePresent IsDebuggerPresent GetCommandLineW SetLastError EncodePointer DecodePointer ExitProcess MultiByteToWideChar WideCharToMultiByte GetProcessHeap GetStdHandle GetFileType GetStartupInfoW GetModuleFileNameW QueryPerformanceCounter GetSystemTimeAsFileTime GetEnvironmentStringsW

cabinet

ord20 ord23 ord22

crypt32

CertGetCertificateContextProperty CryptHashPublicKeyInfo

msi

ord238 ord111 ord173 ord45 ord205 ord90 ord141 ord169 ord70 ord88 ord190 ord171 ord118 ord115 ord125 ord17 ord137 ord116 ord8

rpcrt4

UuidCreate

wininet

InternetErrorDlg InternetOpenW InternetConnectW InternetCloseHandle InternetReadFile InternetSetOptionW HttpOpenRequestW HttpAddRequestHeadersW HttpSendRequestW HttpQueryInfoW InternetCrackUrlW

wintrust

WTHelperProvDataFromStateData WTHelperGetProvSignerFromChain WinVerifyTrust CryptCATAdminCalcHashFromFileHandle

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

shlwapi

PathCanonicalizeW

Name

.text

Size

270KB

Virtual Size

270KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

114KB

Virtual Size

114KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.wixburn

Size

512B

Virtual Size

56B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

9B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

14KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

15KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

uxtheme.dll.tmp

IMPHASH fef614feb9b293798156ec8572866a15
SHA256 ccfb6615b18c8320ecb30ce885d04f11e8b10406ca7aab530bac78e1869cfeeb
MD5 e82fc2941a11f0d230e8fffe250a9363
SHA1 a96a1864b15cb7c2f4a984bc0cd40c2ca0a88801
SHA512 0d484173bd3cdffdf8a8b4b7e7799aace999bec4d704f97e2f0f7d658fba0465f1b571476181ce85e86e2c16889c8d3976eafdaf9f2f7ca527b61fcc02bcce73
SSDEEP 6144:8Be+aceJIWoM9IRz+uKbQg05hyyHQIgdOsB9vLgoYKLyTg3yolD5EVGyRhDA7ot:8BJlavoMeRz+/0XRIdOQDtsA42o
MD5 SHA1 SHA512 SSDEEP

windows:10 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

10

Entry point

145904

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

UxTheme.pdb

msvcrt

fflush fputws fwprintf memmove ??1type_info@@UEAA@XZ _CxxThrowException atan cos floor fmodf memcmp rand _purecall free wcschr memset wcscspn _snwprintf_s _wtof _wtoi _wcsicmp _wsplitpath_s wcstol _vsnwprintf memcpy_s pow _XcptFilter _amsg_exit malloc _initterm sqrt __C_specific_handler _lock _unlock __dllonexit _onexit __CxxFrameHandler3 bsearch_s memcpy rand_s wcscmp

api-ms-win-core-libraryloader-l1-2-0

LockResource GetModuleFileNameW SizeofResource DisableThreadLibraryCalls LoadStringW GetProcAddress GetModuleHandleW GetModuleHandleExW LoadLibraryExW GetModuleFileNameA LoadResource FindResourceExW FreeLibrary FreeLibraryAndExitThread

api-ms-win-core-synch-l1-2-0

CreateSemaphoreExW ReleaseSRWLockShared InitOnceComplete InitializeCriticalSectionAndSpinCount DeleteCriticalSection Sleep InitOnceBeginInitialize WaitForSingleObject AcquireSRWLockExclusive InitializeCriticalSection ReleaseMutex CreateMutexW ReleaseSRWLockExclusive AcquireSRWLockShared EnterCriticalSection InitializeSRWLock LeaveCriticalSection

api-ms-win-core-handle-l1-1-0

DuplicateHandle CloseHandle

api-ms-win-core-sysinfo-l1-2-1

GetTickCount GetSystemDirectoryW GetSystemTime GetSystemTimeAsFileTime GetSystemInfo GetVersionExW

api-ms-win-core-errorhandling-l1-1-1

SetUnhandledExceptionFilter UnhandledExceptionFilter GetLastError SetLastError

api-ms-win-core-processthreads-l1-1-2

GetCurrentThreadId OpenProcessToken TlsGetValue GetCurrentProcessId TerminateProcess TlsSetValue TlsFree CreateThread SetThreadPriority ResumeThread OpenThreadToken GetCurrentProcess SetThreadToken GetCurrentThread TlsAlloc

api-ms-win-core-libraryloader-l1-2-1

LoadLibraryW

api-ms-win-core-file-l1-2-1

GetFullPathNameW GetFileTime SetFilePointer GetFileAttributesW GetFileSize FindFirstFileW FindNextFileW FindClose CreateFileW ReadFile

api-ms-win-core-string-l1-1-0

GetStringTypeW CompareStringOrdinal MultiByteToWideChar CompareStringW

api-ms-win-core-util-l1-1-0

EncodePointer DecodePointer

api-ms-win-core-winrt-error-l1-1-1

RoOriginateErrorW RoOriginateError

api-ms-win-security-base-l1-2-0

ImpersonateLoggedOnUser RevertToSelf GetTokenInformation IsValidSid GetLengthSid CopySid CheckTokenMembership SetKernelObjectSecurity

api-ms-win-core-registry-l1-1-0

RegSetValueExW RegOpenCurrentUser RegCloseKey RegOpenKeyExW RegDeleteValueW RegQueryValueExW RegCreateKeyExW RegGetValueW

api-ms-win-core-memory-l1-1-2

CreateFileMappingW MapViewOfFile OpenFileMappingW VirtualAlloc VirtualFree UnmapViewOfFile

api-ms-win-core-heap-l2-1-0

LocalFree LocalAlloc

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter QueryPerformanceFrequency

api-ms-win-core-localization-l1-2-1

FormatMessageW GetACP

api-ms-win-core-debug-l1-1-1

OutputDebugStringW IsDebuggerPresent

api-ms-win-core-rtlsupport-l1-2-0

RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext

api-ms-win-core-heap-l1-2-0

HeapDestroy HeapAlloc HeapReAlloc HeapFree GetProcessHeap HeapCreate

api-ms-win-core-string-l2-1-0

CharNextW

api-ms-win-core-processenvironment-l1-2-0

ExpandEnvironmentStringsW

api-ms-win-core-timezone-l1-1-0

SystemTimeToFileTime

api-ms-win-core-sidebyside-l1-1-0

ReleaseActCtx ActivateActCtx DeactivateActCtx CreateActCtxW

api-ms-win-core-atoms-l1-1-0

DeleteAtom AddAtomW GetAtomNameW

api-ms-win-core-kernel32-legacy-l1-1-1

MulDiv

api-ms-win-core-string-obsolete-l1-1-0

lstrcmpW lstrcmpiW lstrlenW

api-ms-win-core-shlwapi-obsolete-l1-2-0

StrRStrIW

api-ms-win-core-localization-obsolete-l1-3-0

GetUserDefaultUILanguage

ntdll

wcsspn wcstok_s strchr SbSelectProcedure NtCreateSection NtOpenSection NtClose NtConnectPort RtlInitUnicodeString NtRequestWaitReplyPort RtlInitializeCriticalSection RtlGetThreadLangIdByIndex EtwEventSetInformation EtwEventWriteTransfer EtwEventUnregister EtwEventRegister RtlReleaseSRWLockShared RtlAcquireSRWLockShared RtlReleaseSRWLockExclusive RtlAcquireSRWLockExclusive RtlInitializeSRWLock EtwEventWrite wcstoul

gdi32

SelectClipPath ClearBitmapAttributes CreateSessionMappedDIBSection GetBoundsRect SetBoundsRect GdiTransparentBlt PatBlt GetTextMetricsW StrokeAndFillPath AbortPath ExtCreatePen CombineRgn ExtCreateRegion SetDIBits SetBrushOrgEx GetClipBox RectVisible CreatePatternBrush GetDIBits GetTextAlign SetTextAlign SetBitmapAttributes GetViewportOrgEx GetWindowOrgEx GetCurrentObject GetRgnBox SetBkMode SetTextColor GdiDrawStream GetRegionData SetLayout Arc GdiGradientFill PtInRegion CreateFontIndirectW StretchBlt SetStretchBltMode GdiAlphaBlend CreateRectRgnIndirect SetWindowOrgEx SetViewportOrgEx GdiFlush GetDeviceCaps OffsetRgn LPtoDP GetRandomRgn GetLayout DeleteDC CreateDIBSection GetObjectW CreateCompatibleBitmap CreateCompatibleDC ExcludeClipRect GetObjectType PathToRegion GetBkColor ExtTextOutW SetBkColor SelectClipRgn BitBlt Ellipse EndPath BeginPath RoundRect Rectangle GetStockObject CreateSolidBrush CreatePen IntersectClipRect CreateRectRgn GetClipRgn SelectObject CreateDIBitmap DeleteObject

user32

EnumDisplayMonitors GetDpiForMonitorInternal EnumDisplaySettingsW EnumDisplayDevicesW IsProcessDPIAware GetThreadDesktop GetClassLongPtrW SendMessageTimeoutW GetMenuInfo IsMenu CallNextHookEx AllowSetForegroundWindow IsWindow UnhookWindowsHookEx SetWindowsHookExW GetShellWindow FindWindowW GetWindowPlacement AdjustWindowRectEx SystemParametersInfoA RegisterDManipHook RegisterUserApiHook CopyImage SetMenuItemInfoW GetWindowDPI FillRect DrawMenuBar GetWindowDC SetRect IntersectRect IsRectEmpty GetMenuItemCount GetMenuBarInfo GetKeyState GetMessagePos ReleaseDC DrawTextExW MonitorFromRect IsServerSideWindow DefFrameProcW ValidateRect GetWindowRect GetSysColorBrush MapWindowPoints OffsetRect EqualRect SetTimer KillTimer RedrawWindow WindowFromDC PaintMenuBar IsWindowRedirectedForPrint IsWindowVisible PtInRect DrawIconEx DrawEdge ClientToScreen GetCapture DispatchMessageW ReleaseCapture PeekMessageW MsgWaitForMultipleObjectsEx SetCapture DrawTextW DestroyIcon GetSystemMetrics LoadIconW GetWindowTextW CopyRect InternalGetWindowText InflateRect CalcMenuBar SetRectEmpty GetProcessWindowStation SetWindowRgn IsWindowInDestroy InvalidateRect GetWindowRgnBox GetForegroundWindow IsIconic GetUserObjectInformationW GetWindowInfo GetParent SendNotifyMessageW GetWindowLongPtrW SystemParametersInfoW CreateIconIndirect GetIconInfo GetMenuItemInfoW GetSystemMenu GetTitleBarInfo IsZoomed GetMonitorInfoW GetSysColor IsTopLevelWindow IsWindowBroadcastingDpiToChildren MonitorFromWindow IsChildWindowDpiMessageEnabled SendMessageW GetAncestor GetDpiMetrics GetClientRect GetClassLongW SetWindowPos IsThreadDesktopComposited TrackMouseEvent CallWindowProcW SetWindowLongW SetWindowLongPtrW GetWindowLongW DefWindowProcW GetDCEx IsChild GetWindowThreadProcessId PostMessageW ord2525 ord2527 GetDesktopWindow GetPropW GetDC SetPropW RemovePropW GetWindow SetSysColors SetProcessDPIAware EnumChildWindows GetClassNameW EnumDesktopsW CloseDesktop EnumDesktopWindows OpenDesktopW GetGUIThreadInfo

api-ms-win-core-delayload-l1-1-1

DelayLoadFailureHook ResolveDelayLoadedAPI

BeginBufferedAnimation BeginBufferedPaint BeginPanningFeedback BufferedPaintClear BufferedPaintInit BufferedPaintRenderAnimation BufferedPaintSetAlpha BufferedPaintStopAllAnimations BufferedPaintUnInit CloseThemeData DllCanUnloadNow DllGetActivationFactory DllGetClassObject DrawThemeBackground DrawThemeBackgroundEx DrawThemeEdge DrawThemeIcon DrawThemeParentBackground DrawThemeParentBackgroundEx DrawThemeText DrawThemeTextEx EnableThemeDialogTexture EnableTheming EndBufferedAnimation EndBufferedPaint EndPanningFeedback GetBufferedPaintBits GetBufferedPaintDC GetBufferedPaintTargetDC GetBufferedPaintTargetRect GetColorFromPreference GetCurrentThemeName GetImmersiveColorFromColorSetEx GetImmersiveUserColorSetPreference GetThemeAnimationProperty GetThemeAnimationTransform GetThemeAppProperties GetThemeBackgroundContentRect GetThemeBackgroundExtent GetThemeBackgroundRegion GetThemeBitmap GetThemeBool GetThemeColor GetThemeDocumentationProperty GetThemeEnumValue GetThemeFilename GetThemeFont GetThemeInt GetThemeIntList GetThemeMargins GetThemeMetric GetThemePartSize GetThemePosition GetThemePropertyOrigin GetThemeRect GetThemeStream GetThemeString GetThemeSysBool GetThemeSysColor GetThemeSysColorBrush GetThemeSysFont GetThemeSysInt GetThemeSysSize GetThemeSysString GetThemeTextExtent GetThemeTextMetrics GetThemeTimingFunction GetThemeTransitionDuration GetUserColorPreference GetWindowTheme HitTestThemeBackground IsAppThemed IsCompositionActive IsThemeActive IsThemeBackgroundPartiallyTransparent IsThemeDialogTextureEnabled IsThemePartDefined OpenThemeData OpenThemeDataEx SetThemeAppProperties SetWindowTheme SetWindowThemeAttribute ThemeInitApiHook UpdatePanningFeedback

Name

.text

Size

344KB

Virtual Size

343KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

196KB

Virtual Size

196KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

21KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.didat

Size

512B

Virtual Size

304B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

r8p.exe

advapi32

comctl32

gdi32

kernel32

ole32

shell32

user32

generic

$PLUGINSDIR/Aero.dll

kernel32

user32

gdi32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

$PLUGINSDIR/modern-wizard-2.bmp

$PLUGINSDIR/modern-wizard.bmp

$PLUGINSDIR/nsDialogs.dll

kernel32

user32

gdi32

shell32

comdlg32

ole32

generic

$PLUGINSDIR/nsExec.dll

advapi32

user32

kernel32

generic

$PLUGINSDIR/w7tbp.dll

user32

ole32

generic

$PROGRAMFILES/StartIsBack/StartIsBack64.dll

PE Signature issue

shlwapi

dwmapi

uxtheme

api-ms-win-shcore-scaling-l1-1-1

api-ms-win-core-winrt-l1-1-0

api-ms-win-core-winrt-string-l1-1-0

api-ms-win-core-winrt-error-l1-1-0

msvcrt

kernel32

user32

gdi32

advapi32

shell32

ole32

generic

$PROGRAMFILES/StartIsBack/StartIsBackCfg.exe

PE Signature issue

oleaut32

advapi32

user32

kernel32

msimg32

gdi32

version

ole32

comctl32

wininet

shell32

comdlg32

gdiplus

shlwapi

ntdll

uxtheme

shcore

crypt32