a2cccb3b153e379be1097784004c5d6f_JaffaCakes118

resource
unpack001/$PLUGINSDIR/GetVersion.dll
unpack001/$PLUGINSDIR/InstallOptions.dll
unpack001/$PLUGINSDIR/NSISdl.dll
unpack001/$PLUGINSDIR/Rfshdktp.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/UAC.dll
unpack001/$PLUGINSDIR/inetc.dll
unpack001/$PLUGINSDIR/nsProcess.dll
unpack001/dbghelp.dll
unpack001/sqlite3.dll
unpack002/$PLUGINSDIR/GetVersion.dll
unpack002/$PLUGINSDIR/InstallOptions.dll
unpack002/$PLUGINSDIR/NSISdl.dll
unpack002/$PLUGINSDIR/Rfshdktp.dll
unpack002/$PLUGINSDIR/System.dll
unpack002/$PLUGINSDIR/UAC.dll
unpack002/$PLUGINSDIR/inetc.dll
unpack002/$PLUGINSDIR/nsProcess.dll

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2
static1/unpack001/uninst.exe	nsis_installer_1
static1/unpack001/uninst.exe	nsis_installer_2

IMPHASH 7fa974366048f9c551ef45714595665e
SHA256 0c860b7f821fc9d1ac0d91410201743febcf459b95c848529a8f816a9309a240
MD5 a2cccb3b153e379be1097784004c5d6f
SHA1 fcbba87da7b228135b1a3a9e184000978011936a
SHA512 0c2da50ea3cea93d17534d8dd98ae5b876bdc3df2d0fe2640a1ef2b4c610a654677cf0a62882d29e3b2c81054e4f198d02ec5cc7384ee896783c6b961da1b7f3
SSDEEP 98304:xu0kEKAi/8Zb9xrNCclVIx83sLzaKVRVdlgDMxZYL7fT1GbDSf/i:c0DZRZb3IE8LeKV3dltqfbGgq
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

51:b0:56:95:47:f0:d8:49:b5:0a:74:ac:03:17:b0:0e:88:a4:b1:79

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shanghai Quan Tudou Network Technology Co.\, Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Shanghai Quan Tudou Network Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Chains

Sep 17, 2013

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Shanghai Quan Tudou Network Technology Co.\, Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Shanghai Quan Tudou Network Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Serial Number

4a:28:9f:c3:6a:df:a8:c4:6a:a3:80:2b:9e:73:8d:20

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 28, 2012 - Jun 27, 2015

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

0

Major OS version

4

Entry point

12538

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CompareFileTime SearchPathA GetShortPathNameA GetFullPathNameA MoveFileA SetCurrentDirectoryA GetFileAttributesA GetLastError CreateDirectoryA SetFileAttributesA Sleep GetTickCount GetFileSize GetModuleFileNameA GetCurrentProcess CopyFileA ExitProcess GetWindowsDirectoryA SetFileTime GetCommandLineA SetErrorMode LoadLibraryA lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread CreateProcessA RemoveDirectoryA CreateFileA GetTempFileNameA lstrlenA lstrcatA GetSystemDirectoryA GetVersion CloseHandle lstrcmpiA lstrcmpA ExpandEnvironmentStringsA GlobalFree GlobalAlloc WaitForSingleObject GetExitCodeProcess GetModuleHandleA LoadLibraryExA GetProcAddress FreeLibrary MultiByteToWideChar WritePrivateProfileStringA GetPrivateProfileStringA WriteFile ReadFile MulDiv SetFilePointer FindClose FindNextFileA FindFirstFileA DeleteFileA GetTempPathA

user32

EndDialog ScreenToClient GetWindowRect EnableMenuItem GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard RegisterClassA TrackPopupMenu AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA DestroyWindow CreateDialogParamA SetTimer SetWindowTextA PostQuitMessage SetForegroundWindow wsprintfA SendMessageTimeoutA FindWindowExA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA OpenClipboard ExitWindowsEx IsWindow GetDlgItem SetWindowLongA LoadImageA GetDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint ShowWindow

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectA SetBkMode SetTextColor SelectObject

shell32

SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA SHGetSpecialFolderLocation

advapi32

RegQueryValueExA RegSetValueExA RegEnumKeyA RegEnumValueA RegOpenKeyExA RegDeleteKeyA RegDeleteValueA RegCloseKey RegCreateKeyExA

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

$PLUGINSDIR/GetVersion.dll

IMPHASH 0125039a427c6f95b3acc9227413ece5
SHA256 db09adb6e17b6a0b31823802431ff5209018ee8c77a193ac8077e42e5f15fb00
MD5 2e2412281a205ed8d53aafb3ef770a2d
SHA1 3cae4138e8226866236cf34f8fb00dafb0954d97
SHA512 6d57249b7e02e1dfed2e297ec35fb375ecf3abc893d68694f4fa5f2e82ec68c129af9cc5ce3dd4025147309c0832a2847b69334138f3d29c5572ff4e1b16f219
SSDEEP 96:E12kx1WhoMHF7ZmIpNkTif0geoBLERrqm1BdROBh6Hx2WsTDBi46AQuP:Xll7A6NkOMiBEReEBdRwiMTDBi46AQu
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

4160

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/InstallOptions.dll

IMPHASH b1cd0d78f652ce5fc63f0879371af012
SHA256 c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b
MD5 325b008aec81e5aaa57096f05d4212b5
SHA1 27a2d89747a20305b6518438eff5b9f57f7df5c3
SHA512 18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf
SSDEEP 192:86d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jwK72dwF7dBEnbok:86UdHXcIiY535zBt2jw+BEnbo
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

10696

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

SetCurrentDirectoryA GetCurrentDirectoryA MultiByteToWideChar GetPrivateProfileIntA GlobalLock GetModuleHandleA lstrcmpiA GetPrivateProfileStringA lstrcatA lstrcpynA WritePrivateProfileStringA lstrlenA lstrcpyA GlobalFree GlobalUnlock GlobalAlloc

user32

MapWindowPoints GetDlgCtrlID CloseClipboard GetClipboardData OpenClipboard PtInRect SetWindowRgn LoadIconA LoadImageA SetWindowLongA CreateWindowExA MapDialogRect SetWindowPos GetWindowRect CreateDialogParamA ShowWindow EnableMenuItem GetSystemMenu EnableWindow GetDlgItem DestroyIcon DestroyWindow DispatchMessageA TranslateMessage GetMessageA IsDialogMessageA LoadCursorA SetCursor DrawTextA GetWindowLongA DrawFocusRect CallWindowProcA PostMessageA MessageBoxA CharNextA wsprintfA GetWindowTextA SetWindowTextA SendMessageA GetClientRect

gdi32

SetTextColor CreateCompatibleDC GetObjectA GetDIBits CreateRectRgn CombineRgn DeleteObject SelectObject

shell32

SHBrowseForFolderA SHGetDesktopFolder SHGetPathFromIDListA ShellExecuteA

comdlg32

GetOpenFileNameA GetSaveFileNameA CommDlgExtendedError

ole32

CoTaskMemFree

$PLUGINSDIR/NSISdl.dll

IMPHASH 9cce555dd3ff1b6c7dc92d64c794c51a
SHA256 dacc88a12d3ba438fdae3535dc7a5a1d389bce13adc993706424874a782e51c9
MD5 a5f8399a743ab7f9c88c645c35b1ebb5
SHA1 168f3c158913b0367bf79fa413357fbe97018191
SHA512 824e567f5211bf09c7912537c7836d761b0934207612808e9a191f980375c6a97383dbc6b4a7121c6b5f508cbfd7542a781d6b6b196ca24841f73892eec5e977
SSDEEP 192:tUZTobBDJ68r67wmsvJI5ad9cXzFOVu+mZ/P3p+57CvpVqDxVp01Dwn2GRPgsfA:6Bo/680dCI5adOjFOg9//p27uNw2Go
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

8903

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/Rfshdktp.dll

IMPHASH 042f3c184e7c0923b6325ab1dc09aed7
SHA256 acc76e81f71e7f2ba58c36d678bc9ae4705e0187a3cdfa6d0025190467d9c0c7
MD5 9410591a148871a6d0629cf25b94526f
SHA1 be1e8b0fe8327f185136a0d2460a68f720484535
SHA512 465d3e418e769b907262e07cbca3d2c5132bf328431d456be09c059821be20a6d30106562d7ef0bfa93ca219b2abe57ee891d937419fc4b8840987b184b45df0
MD5 SHA1 SHA512

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

4165

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/System.dll

IMPHASH 2017f2acbdaa42ab3e4adeb8b4c37e7b
SHA256 dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
MD5 c17103ae9072a06da581dec998343fc1
SHA1 b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
SHA512 d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
SSDEEP 192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

10544

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/UAC.dll

IMPHASH 55a6a096df3564193c302728985d6bda
SHA256 a6d956f28c32e8aa2ab2df13ef52637e23113fab41225031e7a3d47390a6cf13
MD5 431e5b960aa15af5d153bae6ba6b7e87
SHA1 e090c90be02e0bafe5f3d884c0525d8f87b3db40
SHA512 f1526c7e4d0fce8ab378e43e89aafb1d7e9d57ef5324501e804091e99331dd2544912181d6d4a07d30416fe17c892867c593aee623834935e11c7bb385c6a0a8
SSDEEP 192:vIARvmFvcukSWn8EAKVZ8148Dj33RZgqWVWYuOUEjRuFzEun0J:v2mukSe8EA88pRZAVWYuO3cFznny
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

11736

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

CreateProcessA GlobalAlloc lstrlenA GetVersionExA SetLastError GetProcAddress lstrcmpiA GetCurrentThreadId GetCommandLineA UnmapViewOfFile WaitForSingleObject GetCurrentProcessId GetLastError DuplicateHandle SetCurrentDirectoryA MapViewOfFile Sleep OpenProcess GetExitCodeProcess GetModuleHandleA GetExitCodeThread CreateThread CreateFileMappingA CreateEventA MultiByteToWideChar FormatMessageA LocalFree GlobalFree CloseHandle GetModuleFileNameA lstrcatA GetPrivateProfileIntA GetPrivateProfileStringA SetEvent LoadLibraryA

user32

DialogBoxParamA CharNextA CallNextHookEx SetForegroundWindow IsWindowVisible GetClassNameA SetWindowsHookExA DispatchMessageA TranslateMessage IsDialogMessageA PeekMessageA MsgWaitForMultipleObjects DefWindowProcA PostMessageA CreateWindowExA GetWindowThreadProcessId CallWindowProcA SetWindowPos GetWindowRect UnhookWindowsHookEx GetClientRect FindWindowExA LoadIconA CreateDialogParamA GetWindowLongA SendMessageW MessageBoxA EndDialog SetWindowLongA DestroyWindow EnableWindow ShowWindow wsprintfA GetDlgItem SendMessageA LoadStringA LoadImageA

advapi32

GetUserNameA OpenSCManagerA CloseServiceHandle EqualSid GetTokenInformation OpenProcessToken AdjustTokenPrivileges LookupPrivilegeValueA QueryServiceStatus OpenServiceA

shell32

ShellExecuteExA

ole32

CoInitialize

$PLUGINSDIR/inetc.dll

IMPHASH 3f1149a3053980fe6b461521d2b55a2c
SHA256 f51fcc30e929a64756e04b514e103aa54c135c47d62511efee279f168f63b3c3
MD5 b720695fab871bacd48c54aea304c310
SHA1 e2250a8d65594d802cd95e8dde79f813ff9773c7
SHA512 c277bf5de16aa7f6aa39eda9afb010f8fa407bf4fef54b2a5947fd6c698204052b3f97e587ca59c5faf256c29a03e9de6c37033c5ede5666e3743b86f2ed411b
SSDEEP 384:jwB2ZUVHUxgoJX0eBA6PcH85db+ya9cC0Ac9khYLMkIX0+G5fQ6mT+m//a:jfUFeJ5S6PHLNa9c8am/
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

14255

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

msvcrt

_mbschr _adjust_fdiv malloc _initterm free _mbsrchr strtoul memset _mbsstr strtol

kernel32

CloseHandle CreateThread WaitForSingleObject TerminateThread GetModuleHandleA MulDiv lstrcpyA GlobalAlloc LoadLibraryA GetProcAddress lstrlenA WriteFile ReadFile lstrcmpA lstrcpynA GetLastError GlobalFree lstrcmpiA DeleteFileA SleepEx SetFilePointer GetTickCount lstrcatA GetFileSize CreateFileA

user32

MessageBoxA GetParent ShowWindow PostMessageA SetWindowTextA GetWindowTextA IsWindow GetDlgItem SetDlgItemTextA SendDlgItemMessageA SetWindowPos SystemParametersInfoA GetClientRect GetWindowRect SetTimer LoadIconA SetWindowLongA GetWindowLongA UpdateWindow DestroyWindow KillTimer RedrawWindow DispatchMessageA TranslateMessage GetMessageA IsDialogMessageA IsWindowVisible EnableWindow CreateDialogParamA FindWindowExA wsprintfA SendMessageA

wininet

HttpSendRequestA HttpSendRequestExA HttpQueryInfoA FtpCreateDirectoryA FtpOpenFileA InternetGetLastResponseInfoA InternetSetFilePointer InternetSetOptionA InternetQueryOptionA InternetCloseHandle InternetErrorDlg HttpOpenRequestA HttpAddRequestHeadersA HttpEndRequestA InternetConnectA InternetCrackUrlA InternetOpenA InternetReadFile InternetWriteFile

comctl32

ord17

$PLUGINSDIR/ioSpecial.ini

SHA256 d95aed234f932a1c48a2b1b0d98c60ca31f962310c03158e2884ab4ddd3ea1e0
MD5 e2d5070bc28db1ac745613689ff86067
SHA1 282e080b4cf847174c5c11e4f9157b8c338ecb19
SHA512 a50ca2014869629135b54e848f03cb4983ad8029cd811300d02b0fc54de0436185f418fea4d3db888eb0f3170e33a59d486aa885f024ab29e630e9bc0ae1a2de
MD5 SHA1 SHA512

NSIS installer

installer

$PLUGINSDIR/modern-wizard.bmp

SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
MD5 cbe40fd2b1ec96daedc65da172d90022
SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/nsProcess.dll

IMPHASH c9fc7f6df8fedf8f8f1f9f820c072664
SHA256 95fe9d92512ff2318cc2520311ef9145b2cee01209ab0e1b6e45c7ce1d4d0e89
MD5 05450face243b3a7472407b999b03a72
SHA1 ffd88af2e338ae606c444390f7eaaf5f4aef2cd9
SHA512 f4cbe30166aff20a226a7150d93a876873ba699d80d7e9f46f32a9b4753fa7966c3113a3124340b39ca67a13205463a413e740e541e742903e3f89af5a53ad3b
MD5 SHA1 SHA512

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

4255

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

CheckTudouVa.dll

IMPHASH 13b37c6d7c5950275a26fce91795a795
SHA256 a78e96a9645e1f04070795b45aae20582331f2de325b39a844a5b02e62c46984
MD5 f11a3eb69c056057b6c65eb24ca79b14
SHA1 2fd09f10f58dac2f411abf537e80f37288578235
SHA512 c59343785b97fcc0584cecfbe80ecd8d340abfc847cbb8b252678c4127cf666acf5b61831a65222c2d2707799a7e5dd98805cac261f05f4c7f48a2d778c29671
SSDEEP 3072:ycWpVI2KJm7/UE8t0BMWs1rX+n+wP6ceCD2/vPrq5oUJQPvWUyN27QeCR:5WNKULBJs1z++wMb0oUmmOU
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

60:ec:94:93:ae:1a:b3:f1:14:8c:54:79:22:28:56:90:3c:0f:57:2b

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shanghai Quan Tudou Network Technology Co.\, Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Shanghai Quan Tudou Network Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Chains

Sep 17, 2013

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Shanghai Quan Tudou Network Technology Co.\, Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Shanghai Quan Tudou Network Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Serial Number

4a:28:9f:c3:6a:df:a8:c4:6a:a3:80:2b:9e:73:8d:20

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 28, 2012 - Jun 27, 2015

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

0

Major OS version

4

Entry point

79262

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\SVN\install.v3\src\iFeisu_trunk\client\feisu\bin\Release\CheckTudouVa.pdb

kernel32

GetLocaleInfoA GetCPInfo GetOEMCP VirtualAlloc HeapReAlloc HeapAlloc HeapFree TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetProcessHeap RaiseException RtlUnwind HeapSize ExitProcess HeapDestroy HeapCreate VirtualFree GlobalAddAtomA SetHandleCount GetFileType GetStartupInfoA GetACP IsValidCodePage GetStringTypeA GetStringTypeW GetConsoleCP GetConsoleMode FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetTimeZoneInformation SetStdHandle LCMapStringA LCMapStringW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale WriteConsoleA GetConsoleOutputCP WriteConsoleW GetLocaleInfoW SetEnvironmentVariableA GlobalFindAtomA GlobalDeleteAtom lstrcmpW GetVersionExA GlobalFlags GetCurrentThreadId GetFullPathNameA GetVolumeInformationA GetCurrentProcess SetEndOfFile FlushFileBuffers SetFilePointer WriteFile ReadFile LoadLibraryA GetThreadLocale lstrcmpA GlobalGetAtomNameA InterlockedIncrement FreeLibrary InterlockedDecrement GetModuleHandleA GetProcAddress TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc GetCurrentProcessId GetModuleFileNameA CreateFileA FileTimeToLocalFileTime FileTimeToSystemTime GlobalFree GlobalAlloc GlobalLock GlobalUnlock FormatMessageA LocalFree SetLastError GetPrivateProfileStringA FindClose GetFileAttributesA LockResource FindResourceA CloseHandle LoadResource SizeofResource FindFirstFileA OpenMutexA CreateFileW GetPrivateProfileIntA Sleep MultiByteToWideChar CompareStringW GetEnvironmentVariableA lstrlenA GetLastError CompareStringA GetVersion InterlockedExchange WideCharToMultiByte GetStdHandle

user32

AdjustWindowRectEx CopyRect DefWindowProcA CallWindowProcA SystemParametersInfoA IsIconic GetWindowPlacement GrayStringA DrawTextExA DrawTextA TabbedTextOutA SetWindowPos SetWindowLongA IsWindow GetDlgItem GetFocus ClientToScreen GetWindow GetWindowRect RegisterClassA PtInRect SetWindowTextA UnregisterClassA SetWindowsHookExA CallNextHookEx DispatchMessageA GetKeyState PeekMessageA ValidateRect GetWindowTextA LoadCursorA GetSystemMetrics GetDC ReleaseDC GetSysColor GetSysColorBrush UnhookWindowsHookEx GetWindowThreadProcessId SendMessageA GetParent GetWindowLongA GetLastActivePopup IsWindowEnabled EnableWindow MessageBoxA GetMenuState GetMenuItemID GetMenuItemCount GetSubMenu CharUpperA GetClassInfoA GetClassInfoExA CreateWindowExA PostMessageA GetMenu GetClientRect GetClassNameA PostQuitMessage DestroyMenu SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapA ModifyMenuA EnableMenuItem CheckMenuItem RegisterWindowMessageA LoadIconA WinHelpA GetCapture GetClassLongA SetPropA GetPropA RemovePropA GetForegroundWindow GetTopWindow DestroyWindow GetMessageTime GetMessagePos MapWindowPoints SetForegroundWindow GetDlgCtrlID

gdi32

GetClipBox PtVisible RectVisible TextOutA ExtTextOutA Escape SelectObject SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetMapMode SetWindowExtEx ScaleWindowExtEx DeleteDC CreateBitmap GetStockObject SetTextColor SetBkColor RestoreDC SaveDC DeleteObject GetDeviceCaps

winspool.drv

OpenPrinterA ClosePrinter DocumentPropertiesA

advapi32

RegQueryValueExA RegCreateKeyExA RegCloseKey

shell32

ShellExecuteA

shlwapi

PathStripToRootA PathIsUNCA

oleaut32

VariantChangeType VariantClear VariantInit

oleacc

CreateStdAccessibleObject LresultFromObject

nspr4

PR_AtomicIncrement PR_AtomicDecrement

xpcom

NS_Alloc

Skin/Mini/Mini_2/close_hover.png

SHA256 177c34b623aecfa6a8157f9cc8d08abca80d5c4554e531dd17b969b24445ea38
MD5 0e9ad4561ad7b397720b631765cbfb1d
SHA1 fbbe1e2955bacc0aba22b55d288bee330203d070
SHA512 6a7275db61953da3d3649263c1f76684e769f66da814a553b54937b99e953e69e33901c26bc1a243031023c4e14549208f93d7f86bd922df54c5f57fd65df000
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Mini/Mini_2/close_normal.png

SHA256 4d0c2df702c4be5399dc62e6a40b0a3bf2eb44559c7149b23a631f285d414d8a
MD5 5fcf7541530388ab955a080dfe2c6498
SHA1 b0be8b3907e84f3220b2be5e37f1d342c48b558b
SHA512 b55a0ac3f654654139ddb8014eafb55662cbab9f9193691143e0a15c54c06db1a75a9e5b56784386918f59575ecdba35a5b5b46df504f44257f178725b2d7db0
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Mini/Mini_2/down_hover.png

SHA256 2ca9bdcefd997a0f7a197313a5f89cb6ae71459bcde8df77bf5cef47d66ad1e1
MD5 fc6ba23bf8d2ca3af9fb24e9268deb3d
SHA1 430a0f555c044e571caf6083a2dd34cb16572336
SHA512 af70cac69258e5622db621c48af938e4a9533ce85b4e211292d7a7d170bfefa4bd29508f7bfdb4123ae5afbe51702e5e79d619e1b769deb23e5c6200876655ca
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Mini/Mini_2/down_normal.png

SHA256 31d9800effcdb96e8845796e021106a6587f93d41c5755163924e0c5c4fa1085
MD5 b4f71b3310a37f42f380772af0302e47
SHA1 a841e946cf7f06dc325d958ab88d060e3e002962
SHA512 fd2ea5f2595c31844717f2ef20f5e85b88efb02417a2f900b72313e7c7e011f4b845b00850147c32e81eb1e8e2fa9027435bc743759bbc7589d1ef9eb25c39b6
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Mini/Mini_2/export_click.png

SHA256 fa115a3957d93eaa6b0f81ee5eb2a564eb6395ec4237bef4bb968f3bc3c02d97
MD5 8b6a45fa8e116000d4a443759ccafedd
SHA1 7eb37379157275cf1a40b993abe1ace0f106045c
SHA512 f426066e028c93934aac9f012fc768f85586c8aefc4df72fa4c127cf53aad74c5c82061282cc28ceaacd2253680cbe7f18ef07ccb89567e5a4b7dd32a042e255
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Mini/Mini_2/export_hover.png

SHA256 016adb43734ba349d4fe400259b7835f1ca7e00bfe155d45199bf33b9d3632f1
MD5 53eaaeedda124a259edd35f6123f42da
SHA1 6baaeb441a2843ce8c00f89effe49c48fc6c9e90
SHA512 70221b21b60d7100e06ef200a572fe7c858b36dcd4d2a4d820625d84faad61fd8778a85c28ebd456d6e5de4585121821f476a17424d4f69173d08c7cccfabc1b
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Mini/Mini_2/export_normal.png

SHA256 94e7eee749d0108dd98f37bc20c98bb8b78db40f00d7a347b45a6b9cc37968fe
MD5 80da626cce264b2d2bb9c401e169a3e0
SHA1 957bdf2aabd406ad5b363ccf93c70acaba60acd3
SHA512 77e3fb2993a17f61cb38c2c49457efd50da90c6f30612e9b204f05781be7a37607bde60c2dae4ff6467833cd9e43e1c7193ce764a39c43cfb5b9ba8565753993
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Mini/Mini_2/hot_click.png

SHA256 6f5144305bea37500267cefea8fc4dc9396a9c70c7add3978c27531b2feb0598
MD5 e72182ec89a89959312341a43f98368c
SHA1 7860048c571fe88697f77945fdce75b156b4b20f
SHA512 b8f3d0eeef23f46316323e28a02460361a7abaf2cca7182d8f3c6876262ad5e13495272ed8a66add11f6d55448076de0a1d5cfc2f64e5397e2f810f4d400410e
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Mini/Mini_2/hot_hover.png

SHA256 2fc01f1b969a9a7b6892942b4fccf985e77e8580fdc4f0d91926f8e965ad998a
MD5 890dae86ef8e549908152f1840c67fd1
SHA1 96b4ab41f7910cc04f5702da902b2f895a20e1f4
SHA512 7dd00c51a8d6f35226eeb184fd9f71f92934a345e64427823469670c936a02afa5c01eff58dabb330dc6c36d87758ed43ac6ed91ba1895b83a43f95632a6122b
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Mini/Mini_2/hot_normal.png

SHA256 8c06a074e042b785dca38c64c6860f57e91b3196b119dcf1e2ea6279102ceff7
MD5 db807e6fb4f358a29d19f5a1ab8fa741
SHA1 26c1220b6c427ebf3c777e2757a1d09b4a4b5d55
SHA512 c74dd1c71f6f54fd792e8ae47885a83241ceea549529676a91c38e6630007a20610118942c48ed9acc1b272bf2fa52a2a9f5ede9609a51ddddbeea521efc1022
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Mini/Mini_2/info_click.png

SHA256 f1367d90d14bc264a3d5ab03900b38da71f073809c0f52cd0b650f2907a49e8b
MD5 2dd69df9c623e18cfb301aee911a1f4a
SHA1 a9219bfe828c67b8f95316676fc2cb7672d00847
SHA512 109c712794c41019f9b88f312cfb11755bde1a2f9e073ce905b9eee4059b330549e062d566fea4a5204422385fc6f6bc642855495baa5c7598e5471eb25b3a55
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Mini/Mini_2/info_hover.png

SHA256 7a98b16a6408f5b16a9b33fd7dac0e3a0fea005897e7d5dd655add7b31b6aa88
MD5 c79ac2c4e9126ada6ab9a04a65069fd7
SHA1 a005147059d17009f7cad9972a2f0dfffb40f4de
SHA512 20c2b2c47be0eb8318c0bfe86fab667fb8789d4803536edfffa854fe4b22d648db728a935b806ec84fbd714da3675683ee2af13e182141e81c76e097a1be6627
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Mini/Mini_2/info_normal.png

SHA256 52e1598c380bb6998a8d0cb5d07345578e6e8a87d3e01be5609f8da68b2e0198
MD5 d47c29aaf6426799507261a4f11cfd7e
SHA1 9800e8dff364ae7949102784529c29c38b12c374
SHA512 61c5c105b41a854ca4df035a9652370afaedfbdf545e93b284b4d4373f31254cc2d966de0dc59d3f62d4e5f1ae409019c9977ad227ac25c96887908447543ed7
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Mini/Mini_2/line.png

SHA256 d46d788cefd18f84f25f9f627f3fb142fea06550da26f9da5c98945674899b65
MD5 3986ce8bea41dc09de8cd745c5c5bd58
SHA1 bc43af495e8ab1bc5af27fbc05370068580801f9
SHA512 bd9d3d2f0dab593b58423e83bf81d2413b1580043f3e6131bb784c89a81504bc7ecf278eef4329c416c354a9084c3431a6569ca69e8d6c8b4dc3009710886842
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Mini/Mini_2/main.png

SHA256 099daf16cd0f5fc51c41aaeb54bdebb810a7ea409809392618349d6d591c7e35
MD5 94587d7a47d0128138620358823075a2
SHA1 44a1bb05192d9e28dbb601a9c4e5316cecac2178
SHA512 de614c551c1f0dc00ca6a772ab8791e11704bccd194d452a2decd91623da642ae32a0dd79ab43efabf2785edabc7ca76aa166650a31b6f8d0848bf6306122187
SSDEEP 96:0XY2kuVLx+QMUjEbvrZucUvlpVe68ZHF4fiIVHNAYY:wMuVLPErrZhUt8ZHF4fi6JY
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Skin/Mini/Mini_2/setting_click.png

SHA256 b5c78965eb94e06c92c228419dc365fc8f5dabe649ea7b81c44d8d832112b797
MD5 0d8b0fb3f8880f3aabf76f237d351f9a
SHA1 933c668acaa3992d41c20f08c15adade1be91382
SHA512 301c7f922d8c85c1b04fbda570c0787e1b629b7f15a7b3f957e044050b159f1e9ef55cb95796128d5f82b822a3e9b9821960c1e3665af2bb4c096a658532d398
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Mini/Mini_2/setting_hover.png

SHA256 094963b57c1c28ece8cc4eb461f12299fa4e939c7304ef00fe5c43eaecfe47ef
MD5 781044ea274d6c71217dafb3d5ffddff
SHA1 f12a280e2c85340126395943becf828fd399d023
SHA512 21399a67e0e993b705bde9beb3fb050887c98a4f101b12a07f879be9f52d2079c75d59c4ad8f42b74b0f0cf6f6bbf5d70d8f92434c982d23018ea30390a4ecda
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Mini/Mini_2/setting_normal.png

SHA256 83b2478d35a645953aa546763d6df53f1f4137bd0ae11f2a9f9cafcee1a668d8
MD5 d75b8159198682aef6e70aab204bd2bd
SHA1 8ef6a8718a220d2748686b03fee68fba4ce7c0c9
SHA512 a827f23c637670ae67776adc2b2840f2a3dba5799e491fa4b62df07e8e8ec14b59477af60643019a2b54ca211b4691553014ee7fcfeae64c2bb13b9d77073df5
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Mini/Mini_2/small_hover.png

SHA256 87133dc3e84e744cbad60c4cab354f36d1ff219209ec9c4d6be645f46c1468ff
MD5 3dc9222d6d99340d366f1ef0178ae7b8
SHA1 b45a1e45f3e9e5b8e2dacba7c66798434b1c5f24
SHA512 f4f294cef3fa6cd0fa113accc78f7ec5e2c88ea9a43c79a10c1cbe9ac365ac934851393a0f78d4d8778d012e703a9862a907a4fd20cd7862ea4bdce188e4dae4
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Mini/Mini_2/small_normal.png

SHA256 49ffb6c799f59c006f47e0532875ffefa87fb5a14c809486a89a5fa1ce20a98f
MD5 b73526b4d70725a3bd8e5fc9bb62272b
SHA1 1c9f3be20ff74de8742f6cf6db8fc0481887cb1e
SHA512 a159d5d54b3e87a742ae5f4a838d3ee2cf06512fc19f8721923e8fd251f66889ad7f5274edf6cc99242c107da13fbc97a9c0c477e8b3cc7f7455c20bc3cd910d
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Mini/Mini_2/up_hover.png

SHA256 6d3a09c0cf79919bac32c1679c8373f4d2515349b67429f199e58e3cd8a64881
MD5 60909ed557773f06142bb0f82ded6faf
SHA1 f87a7174b647738d1db3b8eafe60ae55aa340982
SHA512 33acade87e859a493191b19b2c023eeddf3dbb2d3c7c52aa1c092e794934c42dd9b565193844363b9a9f05fb3a9e199ce9dcd4062ba15d68230f7ed12d8e4a4a
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Mini/Mini_2/up_normal.png

SHA256 f29eafbb124e6b1be3f9212f670878df6ea1b7668228c3dd8d04ae0e9ca686c5
MD5 9a6e80144f8aadf0dcf3dba96e54e7da
SHA1 affb5a909340309e009e445301758340f0b7e9d3
SHA512 6f6de7da200141e793f58da656375022f83f6aaaaaa8b4881174fa38bb24498f91ce02dc98c1cd7ab5ea6c2a31138a66691e1fe86ed9d2713f3e5e1688653137
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Mini/Mini_3/close_hover.png

SHA256 177c34b623aecfa6a8157f9cc8d08abca80d5c4554e531dd17b969b24445ea38
MD5 0e9ad4561ad7b397720b631765cbfb1d
SHA1 fbbe1e2955bacc0aba22b55d288bee330203d070
SHA512 6a7275db61953da3d3649263c1f76684e769f66da814a553b54937b99e953e69e33901c26bc1a243031023c4e14549208f93d7f86bd922df54c5f57fd65df000
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Mini/Mini_3/close_normal.png

SHA256 4d0c2df702c4be5399dc62e6a40b0a3bf2eb44559c7149b23a631f285d414d8a
MD5 5fcf7541530388ab955a080dfe2c6498
SHA1 b0be8b3907e84f3220b2be5e37f1d342c48b558b
SHA512 b55a0ac3f654654139ddb8014eafb55662cbab9f9193691143e0a15c54c06db1a75a9e5b56784386918f59575ecdba35a5b5b46df504f44257f178725b2d7db0
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Mini/Mini_3/down_hover.png

SHA256 f25c1b8a295a2149d096d46e066a2010d1d431e04f69e6e777fbe13d93f6a415
MD5 261e62df08c831c5862c81e830ce05f7
SHA1 13354cd6900d254d0d10cbb054f7e78a2949bcca
SHA512 005d8edcdf640a390e17365d9661ee1bbaca6ce6fb59a4a35bb683d4ccc7c0846641996921abdcac678c06be09449fa07b273b7083ae56cc479a88d39f4dc631
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Mini/Mini_3/down_normal.png

SHA256 e50d2fe590b62e2ba1399adcba0982a2f3434f7ef5d9a17fa97fbcb3387a773b
MD5 74e190949c4e3de8aa2258a72ca9645b
SHA1 41e77278f347b964366d4087970d243982b06f19
SHA512 8b1e938c58b045da9d2a59c97a75673e4820a2a6528785cdd9260064d2dac07af344ee5cb375328eebb9a2eaf5ffed88e17c423fe3beb49ddbf24d28591d96fb
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Mini/Mini_3/export_click.png

SHA256 461b23b674bbfac326b01bafbfe2e675f2f74f0d8dbeb6fadb24b60031841cc3
MD5 b5062aa645bb505ad7f47b37b069acc3
SHA1 93c2e0a465515ef86c2248c12a964a534fb27aff
SHA512 ca1e10775f616079efc07c3ff811216240a87f9e9b40df368ca6cbd843992c4b1187594e340d1a2073f725221db3579dbf67d0200cdbf644860e67a887570e2a
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Mini/Mini_3/export_hover.png

SHA256 698d4ae237391907b3a2ea02cb0632f141d04412848c400443d2fd619c4f809f
MD5 8617f0bbe09ff982e4b0b50031630b63
SHA1 8b0aee111dcb0189d6b87c6cb12baba1fbc0403b
SHA512 ce97e41fa58a18ee62c20328db340a0ada842f72f9927ae68017cbeb5bbbcfba8376a7f03a60c7687637d7d17db4cfd7b7388713b1aa9389f96601b5f347c44f
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Mini/Mini_3/export_normal.png

SHA256 b09c8509a610744d2b2e29ab23d0a3bbb4d3e7e6aecf6c4389fb3441839a8ac1
MD5 85fef709379938ac7e9b6aa559e5ca3a
SHA1 b355414a8df18b4e5506dc625fb38b9902784532
SHA512 ae40d831c1a1ffc09472306654ff94dd1c730dae97c45cbbb8af012e56b4c95281dfda6cb6516118b4e616b899ee77ef6cdc0808d61663d396102973427db18d
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Mini/Mini_3/hot_click.png

SHA256 e1357bc30683fba009de5e7d0d509c3758f3485ffddf2bdd038138da051d3375
MD5 40c9d5b939ffb52048c35c4a5fca1dda
SHA1 0aef1431e7f7f1e0da3e7d2ee991bed33c9a7894
SHA512 430e7cc51ddcb67fdfdb01b1b30f3a8a82ea939d65c50b6a7400ce9141ba13b729a84e985eb6dc3ac6225557497acd43b077abd5a54a297d9ff28a61449cc032
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Mini/Mini_3/hot_hover.png

SHA256 565925fea653ca5052a85da160076f0c1cd6005dbea8f78f5aafe432df4199cb
MD5 8cf3a4085c378b84fff2dbababd8f5d6
SHA1 8eed55482ffeb5d26e06df60cd7d3c71801eb8bc
SHA512 e1fcea4918e8832e1bb6f803cfbeef72b1c867a00ad535c4ad077ddde942ca5d44935a2f5a6c6e9f48c0d87bc9dcb6814a89419907069543b1e7bb76b20a544a
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Mini/Mini_3/hot_normal.png

SHA256 1c8f60f25c2b6c9e97135f9eb23adf3796ab664d2c9834808cc5999be9a3cb99
MD5 d7388257718c7ccdfd9a77154da7158d
SHA1 24aa147d15712b5a925bfb618519a7fb099c6b29
SHA512 7c9c0f1695e72b34d519b3b0df0585f4dc832c2449b24e3ff8cae604d9cd280d7ea1130b0e8301f915890cd6c508fd1b1049d0992826efba5de3a92690b92621
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Mini/Mini_3/info_click.png

SHA256 705ce4f7ce6d2ab991a5dbf694daea1b0bc849a37ac7921aa581707db3bfc471
MD5 5057da0ed42544b18827ad52fa97d044
SHA1 49890a478b2fbd997dba47fa53e07f5635eea8e6
SHA512 e2343fed6c0e1b2059b4a38e50f9d73271d884ae545f36a4c572b108c2bef1f5e119ddd4cc254662fa11a9775bac50440a626db7a3d08315ffdd4b69c4b6ec4c
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Mini/Mini_3/info_hover.png

SHA256 6843dbbe606e55c50aa85417f87cc2f6a5796743f5f544122c0824bf9ad56d9c
MD5 fbe7358d3e23d2f42d24c27f53e9cb3d
SHA1 94f5b944731088376c611cebf76fa71816d0eaf4
SHA512 067cd5b6ee4eae4387f7e31511a9013470f866a91b37fcfec7be82903867a2c2dcdf593ab139639f9efed1a550e64ac81b81e7e544a9a5f01e827848fc24ec85
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Mini/Mini_3/info_normal.png

SHA256 df230d60a630b72f133d628469304b111048095d2868a8cfbce826b29f87c220
MD5 d8bbe2fc453bc05e99431b43cafa38ca
SHA1 ba59a718e2c815283d6d09a9d376a8f788527823
SHA512 f7152d51fd36b4203fb46f9c6884efd4a6a3e0bf2f4a17ba3fc04c907232c0ba093dfff753dc788486317d1a4abf964ae1eaf74f3cedab0c816b8398ff7c7817
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Mini/Mini_3/line.png

SHA256 33cd75ac443e33e6d307fa4b2fb0659fa1aa1b636300e445f8cc4908a149aecf
MD5 a566e3ec06f523c7cc73cd4b5a61f4c7
SHA1 f18765ea7dbcb43c9cdf9d716cc22a8a790f98b9
SHA512 30fccbbcebf7292abbc38f29aa4dba3df660dac42cb1ea46aa5ec7550842e257b31d0465e36e1d60824f2e02a8fcf0ada3a30c9f105f7d2b9c0b095c0590a964
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Mini/Mini_3/main.png

SHA256 720a58d1831946f3e7f5e92ed14e10b9ee814753ae0578f5ad9fd7a58fc7e632
MD5 14bdf803af14f27c59d8f149e5e13d0b
SHA1 1674f00338c08a0e51c709eb30f0cd5d3813f780
SHA512 77d757c3ad91d03fc489949357910b20cecf193f7247028492e4550ce75c03a0bc0c0109884012ba18fa2c62edc670987a3444703e853d28e647e3abdcc648f2
SSDEEP 96:0XY2tnSVNMg+hCrpOcIAhvAZefYTJlVcMRSd:wFSVNDLlOkS5uMR+
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Skin/Mini/Mini_3/setting_click.png

SHA256 3063cd757029f5409f3f0d00613dbbf3956c5555e18cfe4f9a780d395d87f77a
MD5 305bd0620bf8c34a7ab82993c669b683
SHA1 98663c887c945ec0bcfa6210390910c8e5a18db7
SHA512 8e79f60182c973964b4e4fcff63bfd795ed0438ae78982e9e59834f59ace9a87b31e8bbd15fc2b0f80ea4d8130d52c64292e4183bd31bdfa7b46236c67710c4d
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Mini/Mini_3/setting_hover.png

SHA256 9eeeb2faf3dc614cf35bed82938e2c4fa8f540cecc35852052dbcdc325be5410
MD5 99c1c55722884297d56aa835b55753df
SHA1 83f045cf53c9206c3341a087bad21b04ad17db1f
SHA512 cbb00e5e6fc44a88e4ff6299bb70c037974d728d87fbe5bd4d634d379972fad26f74f982013e1c31e3f978758ae6f293ed9de899eced9982bcb6f598b5c6a942
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Mini/Mini_3/setting_normal.png

SHA256 7adcf2f8b4459d13212d973023ee76d8fd9b16c39ed5e53ca853778e36a02a7c
MD5 314e14ac8af93b9a24b2a8b577b8f99d
SHA1 5ffc3c6abd51ad6deb028bd85ccfdb64de9aae0c
SHA512 04ac28704779f4ec390cb20cbdba11ccb392e5a981ea73f9285d126a09ea487c63e002a58309e6f45422e263f93c530d2bed0c3fc4bb4ef7b3887ed37ac7c11a
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Mini/Mini_3/small_hover.png

SHA256 87133dc3e84e744cbad60c4cab354f36d1ff219209ec9c4d6be645f46c1468ff
MD5 3dc9222d6d99340d366f1ef0178ae7b8
SHA1 b45a1e45f3e9e5b8e2dacba7c66798434b1c5f24
SHA512 f4f294cef3fa6cd0fa113accc78f7ec5e2c88ea9a43c79a10c1cbe9ac365ac934851393a0f78d4d8778d012e703a9862a907a4fd20cd7862ea4bdce188e4dae4
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Mini/Mini_3/small_normal.png

SHA256 49ffb6c799f59c006f47e0532875ffefa87fb5a14c809486a89a5fa1ce20a98f
MD5 b73526b4d70725a3bd8e5fc9bb62272b
SHA1 1c9f3be20ff74de8742f6cf6db8fc0481887cb1e
SHA512 a159d5d54b3e87a742ae5f4a838d3ee2cf06512fc19f8721923e8fd251f66889ad7f5274edf6cc99242c107da13fbc97a9c0c477e8b3cc7f7455c20bc3cd910d
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Mini/Mini_3/up_hover.png

SHA256 5f14547361c5219cc746fed56126b33f340b0821212ff3acebc7917f40c91359
MD5 14139847c7e68260a7dd58dca40ef160
SHA1 5d124c447922795c8613befef44f028ccfac228e
SHA512 091169f149053128d70a6d91cef53bb197a131296b7424061d51c03fde083bad1ce829e7a11b8a35974f83d0c387d4df7ffe1196fb2efa9cb717d8290004928d
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Mini/Mini_3/up_normal.png

SHA256 e6a83301d3ffc5c85b94dd67ae08982a4059a9eb7ef8834ca0c36583209de146
MD5 e2511f2d10bac30ca966f11c1358d5e6
SHA1 de7fcef440392a65e5d7be82c0c6e376177aff2f
SHA512 e928f7493c2b05687ec06792ecbd75eeaa834fe7c63011cdcb0abd68307c6a1432cebcfc6d2f4629c690cd6272831e9994fac241fd0fa97f7ae2dc024a392081
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Mini/Mini_4/close_hover.png

SHA256 177c34b623aecfa6a8157f9cc8d08abca80d5c4554e531dd17b969b24445ea38
MD5 0e9ad4561ad7b397720b631765cbfb1d
SHA1 fbbe1e2955bacc0aba22b55d288bee330203d070
SHA512 6a7275db61953da3d3649263c1f76684e769f66da814a553b54937b99e953e69e33901c26bc1a243031023c4e14549208f93d7f86bd922df54c5f57fd65df000
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Mini/Mini_4/close_normal.png

SHA256 4d0c2df702c4be5399dc62e6a40b0a3bf2eb44559c7149b23a631f285d414d8a
MD5 5fcf7541530388ab955a080dfe2c6498
SHA1 b0be8b3907e84f3220b2be5e37f1d342c48b558b
SHA512 b55a0ac3f654654139ddb8014eafb55662cbab9f9193691143e0a15c54c06db1a75a9e5b56784386918f59575ecdba35a5b5b46df504f44257f178725b2d7db0
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Mini/Mini_4/down_hover.png

SHA256 24bd6c4f7c5a76a35df7c9f087997d9b8594d977c61f5695d188b154243b40e0
MD5 bce377ccf7403e68404cbc204c1c4a66
SHA1 d5ab5f7a2f2d3c85988a013ff271f5865e8ea7ef
SHA512 2d790e647ef000648fb5b85f887ff7c672472012daf3214cd067b3a95a94f6c0e26225b5e781676925ad583c69b54339b0968dc5fc62ae8eb9e4e5ee333438af
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Mini/Mini_4/down_normal.png

SHA256 3b18aa3f5e862cc6c6a85da629da91d7b40a20505de352932c93a4f49e383f9c
MD5 31e20b5b7fb43fa737a1d2a1fe8c7cfb
SHA1 9ef32907b0b12285d78edc857143b47485755e9f
SHA512 1069d0009165e7b72ac9fcfc40d24ba95a61497fcd414e03037feba4ec1c2c6bb42797c1ab7d9b9b5619c2ff51163de402bd90720e3885fa22e2202b47447c87
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Mini/Mini_4/export_click.png

SHA256 5513cb8382d277ba2fd0479deb770f4c1ee100c9e09b509006200e4cce37e5ef
MD5 d32d0cccc5fdb8468623510d4317a9ca
SHA1 489d2a02c68747399c21040b96cfe82b2ab5ce3d
SHA512 eea1352b904e69403ffac5619a742496bf2cdc0ad3bc164035dd4d8caa7b67084109559209a7f7a5585230f0b400f5293261fb7c2d9dd45602211e46c851a8de
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Mini/Mini_4/export_hover.png

SHA256 1da6fa9ad8ea82d86575d9ac0c291d27844924fdfd9173f0e71fbeccb7369f06
MD5 cc4e278bface7caf649edd6bce50818e
SHA1 f9600b070941778fe81a009ca692bffeeb28beec
SHA512 3889be66733ea115592a79f3a6e7a24765132eac091c234c13972bd99c539ba6271163324ece1c5d0e050a2dbcb6545fa9eb685da28e727e120300f96cf9b906
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Mini/Mini_4/export_normal.png

SHA256 236fb20817361d59edb5a12c0ac1ed1657a23f857db8a79e5c19c5422737789e
MD5 bdd531f1bf95168610be48656d9df930
SHA1 142ba9c67b2510a084fef1aa482244e11bd0ac77
SHA512 62c4d3dc75a0bca404e71efb7f2c6acdc3ed7760a206581413075ef441ec790776db637f7e9ca2e38f79416a629746ef5c7db9f7a4165214dbc442ea38521728
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Mini/Mini_4/hot_click.png

SHA256 0e79c5f90fbf2948fecb85fcf3ef2bf3eb86e6983fe1432e75b710e096dc81c9
MD5 0553126d81d9b4771593223848c53ded
SHA1 bd37c689632985b515a0e5e8edb5b83195b09b09
SHA512 c0324d9b9b9fd26e314ad0b1de725c719d5524e7ecdcb034609d2d9aed653d5c8ad0c8147a47b2227153cb59db611b1f310bd6e819683f24967ae58bafe4fe13
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Mini/Mini_4/hot_hover.png

SHA256 a6f29055ad42e55f187afd2b86ed0951197dda202cfc3768b7f32a4d39a24e8d
MD5 f9ea21577aae831f117338a33504203c
SHA1 0b7bcb25e64f17b02f430697224513b9bf6f6ac5
SHA512 da4e15c957c765922e78c9f091b3b9b57530ca92a99e7823e8394f9e0b9fc2b15bdaa3ffedd437ce383e69ae8f0e1e3ffdc72b906e86aba44296f899e162d6df
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Mini/Mini_4/hot_normal.png

SHA256 3d4f63777b5377b097eff1e0988103c8bac307e1b087353993d1ee3d655924d5
MD5 87b153b8ff07c3b5b3b989ce6a111060
SHA1 99cbd5420439fc8fbb8054ced06542a5c146e1bc
SHA512 e09937d1a5ca845aa4c5184e937e31c436516082f13c9709a3c1cb691084b4bdc7d2b9652ea5d380c75b5642c6363a2fc35c08d0a317d0378784206ad899ba62
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Mini/Mini_4/info_click.png

SHA256 d245e4ba1e5b2a0153440fcac939ccb62d41e8e4b3304189e16ecead45183ccc
MD5 867121ae9aded0948956f14f850fad84
SHA1 fb6aa40b8d91183c6691a4bf0b3f66b998dc4d86
SHA512 80c6c0c26b3ef6a41e06ac255c2e8dffcbaf6233b62c617e092d918183de5cc5c3d86d362cb49ee8dd4a526a279d70d2a1813535c6ad68c18f493721977826e6
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Mini/Mini_4/info_hover.png

SHA256 820e13e623f593482845e3137e3b4456ea101d0c14d679b3cdbacbf575e6e10c
MD5 b7b6ad8cf6b4e13e5c20a5958c4f2463
SHA1 558a1b822dd2f6d0bb9a4bdfe6581b8e56d69e99
SHA512 4beaea3b53ef95abec063c38305532d0b864ffc2fa01c8832f70e6673f39f96e2e5a412dc0b3885bcdfeed00108c1c816c94bb4af8bbba5141eb8f390e039c0a
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Mini/Mini_4/info_normal.png

SHA256 59dd5894184871d458dfdcf414d4caf7cb5eb284b554f39526247f9993c4897a
MD5 e0a7889ae2524205641337cff5a226d8
SHA1 9d8ccc90c1db19c14e72cf07ed7f5bd788766fde
SHA512 e4d5848ca33f370d158906c2cbd773e33362304100675a72b736e44045ebd1e30208f4bf828ee96af8f14df32bbf02c39ae60dbbb2909a16c44f420d2fe29f40
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Mini/Mini_4/line.png

SHA256 5a7744c07ca2072316aac50624edd8fa8400c903f3bc0c2f817be0307c76c20d
MD5 bbbe9b08d77db29faa8bb9e7398a45c6
SHA1 63e5945ae115411b894aff68b45938370eabc743
SHA512 6ffe024afac351ec9d088e33cc0a2553c85be04b461a3595158b9ff5f51ed3911957b5018479fffdd7128067d1c67b9cc4d9cc14548a5208c4867b1c9eb5ba26
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Mini/Mini_4/main.png

SHA256 3ddb45b13f85c4b74b4f5589945fe0d8a9c78784adec0436cf695b62fc622a4b
MD5 f5fcf5e2f34b551a403541ee16465d0c
SHA1 20f3338a8bb5b9906854be70795a1d46f1d4b94b
SHA512 dbe760f4b1284ce1685a3bc8323a6ae4b2a1852c0bb6ca2a633ae830b297c632132c2d8d9eaa60c6933f904fc40ebd1adca6e7705b28f86c0872f11cc15bdae2
SSDEEP 48:0mqQNn2qUtJ3beYrQhFKv1fLCKwNaw6OcD5c3k3b6nUQIFk1uf7Db/zl8GaWY3ge:0XY2VhQKvdCnz6OcDK3k2n07hkLsLqZb
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Skin/Mini/Mini_4/setting_click.png

SHA256 8d18c5e566a2a681b0d255b0db0532b5f13bc7a41292d104b649067d6550d0e9
MD5 32f62eec63d5ef7242c19e566595e11f
SHA1 1e2deaafd7033603f79f96d7864607545d6cae74
SHA512 cc86a4792af9309d13c961a7a90f1590dcd83e16e12e7b94dc60b70258c2617ceae8192581f86c8cc050a09070f9a8bf469cc9bd27a6764e50f054296048ea22
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Mini/Mini_4/setting_hover.png

SHA256 36b45a82f44541e9ebd6175e80c11c0692e0ae77f94d2a950b7b6be2fcb01533
MD5 eb647a1ce8656d80e3ce9037872d45c1
SHA1 e166e20b7d0f43cec6003b61a797a970013a43ca
SHA512 1073f070af814865c076aac44922a28bf40c9a94a14ba1e222a0454873ccc74dff2933491ffb715d349708fb8942e1deda32e1ebd88284751ce87795436aa35b
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Mini/Mini_4/setting_normal.png

SHA256 0687dd56393ff628f9b44a80e768db5ca0a173d52bcbb3856c8c7dc9142bd043
MD5 03936533ab585e958ac01beeee318f75
SHA1 ddb213bcc57bfec56413ce22b3b04767a649174b
SHA512 1db1a6cf82214c9aeeb27e2f09258a2a87912a7ccb962875b0ae2a1759348e054db0de2195cfc4cc8718879a4519f9351d7770e0caca4a8316e70502d9834ae1
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Mini/Mini_4/small_hover.png

SHA256 87133dc3e84e744cbad60c4cab354f36d1ff219209ec9c4d6be645f46c1468ff
MD5 3dc9222d6d99340d366f1ef0178ae7b8
SHA1 b45a1e45f3e9e5b8e2dacba7c66798434b1c5f24
SHA512 f4f294cef3fa6cd0fa113accc78f7ec5e2c88ea9a43c79a10c1cbe9ac365ac934851393a0f78d4d8778d012e703a9862a907a4fd20cd7862ea4bdce188e4dae4
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Mini/Mini_4/small_normal.png

SHA256 49ffb6c799f59c006f47e0532875ffefa87fb5a14c809486a89a5fa1ce20a98f
MD5 b73526b4d70725a3bd8e5fc9bb62272b
SHA1 1c9f3be20ff74de8742f6cf6db8fc0481887cb1e
SHA512 a159d5d54b3e87a742ae5f4a838d3ee2cf06512fc19f8721923e8fd251f66889ad7f5274edf6cc99242c107da13fbc97a9c0c477e8b3cc7f7455c20bc3cd910d
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Mini/Mini_4/up_hover.png

SHA256 a67e5bdb499fd22064480bf797d72ca8ed08af7a4e2f255f8bfdd55e26fbcd20
MD5 b24641470d962d8e472c9aefa4b74b37
SHA1 53975e556739d1365313d04275b9c1d0fc031268
SHA512 6284d981a03a4cd006de711032a2d3491029195aab50bb6a8571e444adccc18f7d5e298656c81c749fa47a58d1fd439ff38da806361f8e1549c3d72bc6bae986
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Mini/Mini_4/up_normal.png

SHA256 2f40e377ff6df089e9e66102a803357350e4db9a3b95169bfb405c39fe881b28
MD5 40f28282edc9824558985da5207b73cd
SHA1 2e2a9ff69a0906b7f66ebd535a1697060f9cd269
SHA512 06b8a4ec76361ef4aba5d3e9f4185a19e6c514fe3c6c861f433551173b10f1731013da3ad4e27e834295bd55061513b3f9e0c4812b5359808e71b942f506b071
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Pop/Pop_2/Pop_bk.png

SHA256 405169c8dbf415105526b8e60a333d647b72b333d31c65b8c6e4525bb3b11e58
MD5 f6e429e71512e9ded8656551dc657146
SHA1 0865536a4dd6833e5fc36ec73b05b62f89e5ae07
SHA512 cf0a60cb9023186e66350de16d7c13adb9ac1277b06dbdb5bbad16b7c9bbadb7577f5bd29502fa40b444ab8cea6d149fc1522f91aeae794b7f37d7c8d73fafe5
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Pop/Pop_2/Pop_close_click.png

SHA256 fb11a54d43b9f89c72eb5241fc0305a1aeee3efb21e3f2f23bdc7b927a20caab
MD5 245fecdac0126a22c0b095af8f0f79ed
SHA1 e4622def5312cf7c81843ad4511dfae13c1322b2
SHA512 cc788e54ba2437b3c41c50465a52ccf16f395282d295bb3ac48c72b7955bde3f2c4b401156240c425a8c1c83e416035774d939ac476bbe37396df566d5339039
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Pop/Pop_2/Pop_close_normal.png

SHA256 e323c681d9169d7f84fed6c31323012666d290377a2f5cb4b24385eb784e101b
MD5 8377725fb4874b5ab9a97ef1c5d467bf
SHA1 86ae39d3fbfcc506353e4925b123ae36b9ee6168
SHA512 33bf9ce4a597071b287c593f3cd60aea2278752c94e2ed6f4ecb924bebb8572be2692da7ff809989731315d066e521da01b86b0cd992576758a93e8652addba9
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Pop/Pop_3/Pop_bk.png

SHA256 5b7560695e03ebeb42c10e7077df31b020e15acce85a21e8afd05dca8b168417
MD5 a9dec823c908b9e2075e14cc0a8679a2
SHA1 6800175a2bcf39a84062de2e73751bde85b7b930
SHA512 da5e401a81d21b6ea7b93abfbe5bfbb9882c6c4324bf087dabaa4a61d102c06feaf37859cbc3435f9fb81980cadf4a6c9f8eb8f9dc7fb9a220f8dbfaa194329d
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Pop/Pop_3/Pop_close_click.png

SHA256 2a65cdde0839f1b9e49c7b38faa3df87875b4a2e28872ff743aa9480607b00af
MD5 d298ce59183fb302e287ba968584bb93
SHA1 7742b89b1f7766e48a8eba1192dcb4d3756efc73
SHA512 790b3aaded612973bce071c863ad7882f57b8c90a504ad486b2e4e912a1211fcb4ee46add04824953ecd01c7106ec8fcd443b9679a8c1f956b0ac690327edb9b
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Pop/Pop_3/Pop_close_normal.png

SHA256 ac4064d27b6267a74ef9a0e45134e9b3e31b43b62d3eaf35288b5c8edaad4bb5
MD5 a38529b7aee0016e822b468d3ad8d6eb
SHA1 4215dfaac765067ced4f3d837913c6d5fae1e1fb
SHA512 2a20ba4fbd4cd7c6f4b5c5d6dabc3cffc071710cfbccfe464f1c164dce0722cc51044bd963eff13c5d80a099ee441fd33c0071143c138dfa6a24ffebd89f7e79
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Pop/Pop_4/Pop_bk.png

SHA256 159d06fb1bcffb9ace05182f6385627a118ec2c079196d99dae07a4415ca2d3a
MD5 0b86360c056561180961eead8c6d1ce7
SHA1 2f4bbee2529df56bdca079d277ee2fc105308b16
SHA512 8b17c985cb0a5db4d83f296fc902efe23296d2f12edc5e714c41a3fc35f4983283b578e6b761e841757a839e425a8d1494a3f575041938393384671538988ba7
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Pop/Pop_4/Pop_close_click.png

SHA256 0330f2afb3a4029bbc8d3bdb2c2fce4a2d2d4503571424a56d0ab246b07e9b30
MD5 21e316a0f20036a0d47d60dc59b80e60
SHA1 dea92afe50c311cb42bba9f4afc55a5b0d3643f7
SHA512 0a8e56629a363a3400714b1f82899311c5072c6f087472cd88676e2e5afa36080585596ad7e3e4e92e91ab7ac384d79a033a0feacbc8b3eeacd35e05c108d0e9
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Pop/Pop_4/Pop_close_normal.png

SHA256 d8e4942ddf146e73278af7ee939a92854e58aaae5431f87c881e9e33e9ea13f3
MD5 7f75f273ed76b191d5d0bbaf44347156
SHA1 606e75ee38a9a3f7b1ca98ab8d3d5e559f806200
SHA512 9f777067ee276166905ac9a7f9cb35145feb0de770f3c610c604aa9e7179950e9fb9a32dd288886cd2dba928c9c494f66359483f462e56559adc7b35cb085060
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Prog/Prog_2/showProg_bg.png

SHA256 ef580a2890caf192008258c7e128cc0520474ee587cd642affe97df88fecff9b
MD5 8f9aa4a11d8187bab235dabb866ff130
SHA1 7136c0a68c26ead0699db52758302ce5212bfe9e
SHA512 f123c453bf5843663396175587bfd0a27e0c139bb1422c741393bfb5b61a5fedcbc5187883303cea464cfb1d67b86a6db23977b9d888dbbb04ffb1372f468587
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Prog/Prog_2/showProg_close_click.png

SHA256 fb11a54d43b9f89c72eb5241fc0305a1aeee3efb21e3f2f23bdc7b927a20caab
MD5 245fecdac0126a22c0b095af8f0f79ed
SHA1 e4622def5312cf7c81843ad4511dfae13c1322b2
SHA512 cc788e54ba2437b3c41c50465a52ccf16f395282d295bb3ac48c72b7955bde3f2c4b401156240c425a8c1c83e416035774d939ac476bbe37396df566d5339039
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Prog/Prog_2/showProg_close_normal.png

SHA256 e323c681d9169d7f84fed6c31323012666d290377a2f5cb4b24385eb784e101b
MD5 8377725fb4874b5ab9a97ef1c5d467bf
SHA1 86ae39d3fbfcc506353e4925b123ae36b9ee6168
SHA512 33bf9ce4a597071b287c593f3cd60aea2278752c94e2ed6f4ecb924bebb8572be2692da7ff809989731315d066e521da01b86b0cd992576758a93e8652addba9
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Prog/Prog_2/showProg_scrollbar.png

SHA256 5559bbecfdaa8ae9ae74e69d1f971475403473d14c4c4677571f82ae3f8e4675
MD5 f03a83b3dc7c8065d8885594b0eb2628
SHA1 30fb2784e91570726afbcb697c2a251eefdd2673
SHA512 3f778319e3b007a3c37c754955a5630ea7e7c8d1828a7a381f1a6689386c7e4e43e2e78e75ac0def3db9bf443c7d96d91a527c51a9781c5f567649901e7bc2e1
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Prog/Prog_2/showProg_tab.png

SHA256 600178ad106642393fd7206df2d309b66441b30e9e63c2350afbba4bd0e6f9e6
MD5 5cad2362d757d103861a5f54d8c1909c
SHA1 847547d1f9c4e77ddfbe975e1f78d9916d01e330
SHA512 f60ff5e19f4012e0d53ee2de87c06f4a8fe87c9c4d48e582e6c5fb36753a8c58e1da8ee09546549660c63d954f3a5e1e413a1a664f4053b7d5bfbda8dcf4ee61
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Prog/Prog_2/showProg_tag_normal.png

SHA256 e5f00f2c88b60e28f1b4dca91f70be870be9057abfbb69e341fc733a07f87119
MD5 70ff4b9b3de3e020395edd15461b3be7
SHA1 a4a55a470e805495203a8354d90151d0b2ae12e4
SHA512 60714d003711e5fb44d778a4e74b88c4f1c432dbd086132810367ba11a0fbfa66d0d0e1716fc5038d7704765fe26439914b1b9ab557b0056a50069643dbe0d21
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Prog/Prog_3/showProg_bg.png

SHA256 ad9af0647aa0ff60beeb624dfeb1412fea513fdb0bcf68e3530e86399899c340
MD5 b67407731cc7e63c2a5c058a33300b08
SHA1 6dbeabdd8dd717b7961f33934839ae4d3644a0bf
SHA512 6ac379d25f75d70a159a1bf66ff7f1c052de049ff692b353ee000be5fdbacb217300e986c6e26fc22037abd0d3d3bb1f64d280e2a9bc4548ae67761a998f886b
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Prog/Prog_3/showProg_close_click.png

SHA256 2a65cdde0839f1b9e49c7b38faa3df87875b4a2e28872ff743aa9480607b00af
MD5 d298ce59183fb302e287ba968584bb93
SHA1 7742b89b1f7766e48a8eba1192dcb4d3756efc73
SHA512 790b3aaded612973bce071c863ad7882f57b8c90a504ad486b2e4e912a1211fcb4ee46add04824953ecd01c7106ec8fcd443b9679a8c1f956b0ac690327edb9b
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Prog/Prog_3/showProg_close_normal.png

SHA256 ac4064d27b6267a74ef9a0e45134e9b3e31b43b62d3eaf35288b5c8edaad4bb5
MD5 a38529b7aee0016e822b468d3ad8d6eb
SHA1 4215dfaac765067ced4f3d837913c6d5fae1e1fb
SHA512 2a20ba4fbd4cd7c6f4b5c5d6dabc3cffc071710cfbccfe464f1c164dce0722cc51044bd963eff13c5d80a099ee441fd33c0071143c138dfa6a24ffebd89f7e79
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Prog/Prog_3/showProg_scrollbar.png

SHA256 d00e3c43a539c753a1af64ff0f98cc98e5f143760bf620cfbc89b6d5aeb61bc2
MD5 60a83965023025a6fa447999af1d809c
SHA1 e0e4b1b1ad32362480b121af2952185f7fbbd8eb
SHA512 28e3c882145b134077a48519f5354c2d5b80fc7715a1c7e1da124153da233b3bfd38f00f6b1c263c4b504ec4101da0e9a0e24e6131a84068294b3d61b7898ff3
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Prog/Prog_3/showProg_tab.png

SHA256 600178ad106642393fd7206df2d309b66441b30e9e63c2350afbba4bd0e6f9e6
MD5 5cad2362d757d103861a5f54d8c1909c
SHA1 847547d1f9c4e77ddfbe975e1f78d9916d01e330
SHA512 f60ff5e19f4012e0d53ee2de87c06f4a8fe87c9c4d48e582e6c5fb36753a8c58e1da8ee09546549660c63d954f3a5e1e413a1a664f4053b7d5bfbda8dcf4ee61
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Prog/Prog_3/showProg_tag_normal.png

SHA256 0693a3fbc4bd3142b056fac2b2b7c62c5402d78a76c96f33981359b9ee45c9c9
MD5 18370f2db49e22caa4c28b86b80c5b09
SHA1 5b2c9ddade28ca36b3ff723f4e93e24161d29579
SHA512 545a0d8da047011320f274d69872d5fb63fa659ed51fca477f8546c8adf169a47b515dd540e2d5637d2b9d4367957bd81f2c5de9db3369722db0f8fff8995872
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Prog/Prog_4/showProg_bg.png

SHA256 99000ff532404476755eebdf956fac1e0f4e630d16453af15ba84ee6853329b9
MD5 3549164bae927389fcaa423cb5571617
SHA1 886ca01542b862851b812bafe7d808744c2bf4ef
SHA512 581cd5c9e6f6b42455e63fb1a9e9549f3bf2abd85f6acf6075e6c17e47225c448eb11d27a61c4cb6a532bd65fb0cd76389ab453fd82ad0838d38d88c4f9cfdc2
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Prog/Prog_4/showProg_close_click.png

SHA256 0330f2afb3a4029bbc8d3bdb2c2fce4a2d2d4503571424a56d0ab246b07e9b30
MD5 21e316a0f20036a0d47d60dc59b80e60
SHA1 dea92afe50c311cb42bba9f4afc55a5b0d3643f7
SHA512 0a8e56629a363a3400714b1f82899311c5072c6f087472cd88676e2e5afa36080585596ad7e3e4e92e91ab7ac384d79a033a0feacbc8b3eeacd35e05c108d0e9
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Prog/Prog_4/showProg_close_normal.png

SHA256 d8e4942ddf146e73278af7ee939a92854e58aaae5431f87c881e9e33e9ea13f3
MD5 7f75f273ed76b191d5d0bbaf44347156
SHA1 606e75ee38a9a3f7b1ca98ab8d3d5e559f806200
SHA512 9f777067ee276166905ac9a7f9cb35145feb0de770f3c610c604aa9e7179950e9fb9a32dd288886cd2dba928c9c494f66359483f462e56559adc7b35cb085060
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Prog/Prog_4/showProg_scrollbar.png

SHA256 7c2010075a5b4c6beae36fcde564e5660dbfa62f515c2d868752fae6df1f1404
MD5 279306069004579138af518ad8e64eb0
SHA1 dac42d5fd93a40f1e590abf2cb4feb22eaa5c7b2
SHA512 5d2580d499e9542f7e2b1e14f33bfc3cb078e71400fe4bc23bdcfee6ec459bb7ddc0a8ee535af68721cc8b3e5e6e5c4a2985125f1c49f2d0553ab68a0f10a0ae
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Prog/Prog_4/showProg_tab.png

SHA256 600178ad106642393fd7206df2d309b66441b30e9e63c2350afbba4bd0e6f9e6
MD5 5cad2362d757d103861a5f54d8c1909c
SHA1 847547d1f9c4e77ddfbe975e1f78d9916d01e330
SHA512 f60ff5e19f4012e0d53ee2de87c06f4a8fe87c9c4d48e582e6c5fb36753a8c58e1da8ee09546549660c63d954f3a5e1e413a1a664f4053b7d5bfbda8dcf4ee61
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Prog/Prog_4/showProg_tag_normal.png

SHA256 0e49a5ede64ec604729870ba50c45843a2b0ca398248cbd30b17844128a83a68
MD5 77fb48e2654c5f35fd5604a31d776b2a
SHA1 d84626cffffc1389a55fc01076feb6b5ea616591
SHA512 b90f35b2872b9ba7cbcad2c5d5ce6589193806e3a8ee219f777223ff211175af7836106a8f64f7dc3ce4fc0e37f943d4f07fc4974552926be898ae3b2441d8b0
MD5 SHA1 SHA512

NSIS installer

installer

TDVaCom.dll

IMPHASH da7ecb81693059367a243d87673a1692
SHA256 b7429661268bb07d7662c492957f82ecbf60e62290235b1f491ea999a8a25983
MD5 2da6a76c8cdb10662b0d7baf5e1c09e5
SHA1 68d128ce33bea58fef560a6247a5f83dc7aac2b2
SHA512 1c79f7d67c7aaa286694d9406f849db2781e0bfcbb973502ac3bdc19d7ea8751bfc2ad9abe254323b2ac4056df0eb0eb71a002522d6b23e68d15f42f76503278
SSDEEP 3072:NrMSnRxQD+vYGrMDqB5BfG8KMm15OTDSqUCXdLCcan1p07+rq+ghQxgDXTmt7SS:NQSIDoMmB5Be8KLHOfSiXcc3UtVgDQ
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

7e:19:78:1a:ae:a3:d2:91:af:7d:18:31:14:fa:5e:94:b8:cc:b1:9b

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shanghai Quan Tudou Network Technology Co.\, Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Shanghai Quan Tudou Network Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Chains

Sep 17, 2013

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Shanghai Quan Tudou Network Technology Co.\, Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Shanghai Quan Tudou Network Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Serial Number

4a:28:9f:c3:6a:df:a8:c4:6a:a3:80:2b:9e:73:8d:20

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 28, 2012 - Jun 27, 2015

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

0

Major OS version

4

Entry point

76812

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\SVN\install.v3\src\iFeisu_trunk\client\feisu\bin\Release\TDVaCom.pdb

wininet

InternetGetConnectedState InternetSetOptionA InternetQueryOptionA InternetGetConnectedStateEx

kernel32

GetCurrentProcess GetShortPathNameA CreateFileA GetCPInfo GetOEMCP HeapReAlloc HeapAlloc HeapFree VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery GetCommandLineA GetProcessHeap RtlUnwind RaiseException ExitProcess HeapSize TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter HeapDestroy HeapCreate VirtualFree GetStdHandle GetACP IsValidCodePage SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetConsoleCP GetConsoleMode SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW FlushFileBuffers SetFilePointer WriteFile ReadFile WritePrivateProfileStringA GetThreadLocale GlobalFlags GlobalGetAtomNameA GlobalFindAtomA lstrcmpW GetVersionExA SetErrorMode TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc GetCurrentProcessId GlobalAddAtomA GlobalDeleteAtom GetCurrentThread GetCurrentThreadId ConvertDefaultLocale EnumResourceLanguagesA GetLocaleInfoA LoadLibraryA lstrcmpA FreeLibrary InterlockedDecrement GetModuleFileNameW GetModuleHandleA GetProcAddress SetLastError GlobalFree GlobalAlloc GlobalLock GlobalUnlock FormatMessageA LocalFree InterlockedIncrement CloseHandle LockResource GetModuleFileNameA SizeofResource LoadResource OutputDebugStringA FindResourceA GetPrivateProfileIntA Sleep OpenMutexA GetPrivateProfileStringA GetVersion lstrlenA InterlockedExchange CompareStringA GetLastError WideCharToMultiByte MultiByteToWideChar IsDebuggerPresent

user32

GrayStringA DrawTextExA DrawTextA TabbedTextOutA DestroyIcon LoadCursorA GetDC ReleaseDC GetSysColorBrush ClientToScreen ShowWindow SetWindowTextA RegisterWindowMessageA LoadIconA WinHelpA GetCapture GetClassLongA GetClassNameA SetPropA GetPropA RemovePropA IsWindow GetWindowTextA GetForegroundWindow GetDlgItem GetTopWindow DestroyWindow GetMessageTime GetMessagePos SetForegroundWindow GetClientRect GetMenu CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA GetSysColor AdjustWindowRectEx CopyRect PtInRect GetDlgCtrlID DefWindowProcA CallWindowProcA SetWindowLongA SetWindowPos SystemParametersInfoA IsIconic GetWindowPlacement GetWindowRect GetSystemMetrics GetWindow UnregisterClassA GetWindowThreadProcessId GetWindowLongA GetLastActivePopup IsWindowEnabled EnableWindow MessageBoxA SetWindowsHookExA CallNextHookEx GetMessageA TranslateMessage DispatchMessageA DestroyMenu MapWindowPoints GetActiveWindow IsWindowVisible GetKeyState PeekMessageA GetCursorPos ValidateRect PostMessageA PostQuitMessage SetCursor UnhookWindowsHookEx GetMenuItemID GetMenuItemCount GetSubMenu SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapA GetFocus GetParent SendMessageA ModifyMenuA GetMenuState EnableMenuItem CheckMenuItem

gdi32

ScaleWindowExtEx DeleteDC GetStockObject SetWindowExtEx RectVisible PtVisible ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape ExtTextOutA GetDeviceCaps CreateBitmap SetMapMode RestoreDC SaveDC DeleteObject SetBkColor SetTextColor GetClipBox TextOutA

winspool.drv

ClosePrinter OpenPrinterA DocumentPropertiesA

advapi32

RegSetValueExA RegQueryValueA RegDeleteKeyA RegEnumKeyA RegCreateKeyExA RegOpenKeyA RegSetValueA RegQueryValueExA RegOpenKeyExA RegCloseKey RegDeleteValueA

shell32

ExtractIconA ShellExecuteA

shlwapi

PathFindExtensionA PathFindFileNameA

ole32

CoTaskMemFree CoRevokeClassObject CoRegisterClassObject CoCreateInstance StringFromGUID2 CoTaskMemAlloc CoDisconnectObject StringFromCLSID

oleaut32

VariantInit SysAllocStringLen SysFreeString SysStringByteLen SysStringLen VariantClear VariantCopy VariantChangeType SysAllocString SysAllocStringByteLen LoadRegTypeLi RegisterTypeLi LoadTypeLi

TudouVa.exe

IMPHASH 70cb503cc5e889ac71dadff493dff605
SHA256 df21244436967f84445da37d6d4dd61d71f22a4f95eb6041c29a0dc1d1740963
MD5 999ed5ad5696f72ac4963eedf7d9e1ee
SHA1 b48ad246b2ca8364559d1f7dd3667ea13e8a4ab8
SHA512 31b229a2c92791c028f5b0dab670ba74dd9b9e7ad75a3444f53e107a1bef94f054198bd9b86f9e818f31995944c8fa3ac6a4c2d7fd1b4c14451dd1f7e7ef893e
SSDEEP 49152:BuL/dL1HG1pcavCLYx9gwhPtUZ2SmTTayjHuaWajZPUcYcFp/0TJXB+660Iq0I4:BuDdLdG1pfvoYYEpay7udajZd1q4
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

60:bb:7f:98:89:3f:75:33:17:70:bf:c2:8e:50:24:a6:2b:9e:b5:83

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shanghai Quan Tudou Network Technology Co.\, Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Shanghai Quan Tudou Network Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Chains

Sep 17, 2013

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Shanghai Quan Tudou Network Technology Co.\, Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Shanghai Quan Tudou Network Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Serial Number

4a:28:9f:c3:6a:df:a8:c4:6a:a3:80:2b:9e:73:8d:20

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 28, 2012 - Jun 27, 2015

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

0

Major OS version

4

Entry point

966096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\SVN\install.v3\src\iFeisu_trunk\client\feisu\bin\Release\TudouVa.pdb

shlwapi

PathIsUNCA PathStripToRootA UrlUnescapeA PathFindExtensionA PathFindFileNameA

sqlite3

sqlite3_close sqlite3_open sqlite3_get_table sqlite3_free_table

kernel32

Process32NextW Process32FirstW OpenProcess ReleaseMutex VirtualQuery WriteProcessMemory SetUnhandledExceptionFilter VirtualProtect GetCurrentThread GetLogicalDriveStringsW GetSystemDefaultLCID GlobalMemoryStatusEx GetWindowsDirectoryW GetThreadContext GetCurrentDirectoryA GetFileAttributesW ReadProcessMemory SuspendThread ResumeThread CreateFileW GetVersionExW VerSetConditionMask VerifyVersionInfoW GetThreadLocale OpenMutexW CreateEventW SleepEx CreateWaitableTimerW lstrcmpA GetLocaleInfoA EnumResourceLanguagesA ConvertDefaultLocale GlobalDeleteAtom SetThreadPriority GlobalAddAtomA FormatMessageA GetFileTime lstrcmpW GlobalFindAtomA GlobalGetAtomNameA FlushFileBuffers LockFile UnlockFile SetEndOfFile GetFullPathNameA GlobalFlags GlobalReAlloc GlobalHandle LocalReAlloc GetCPInfo WaitForMultipleObjects UnhandledExceptionFilter IsDebuggerPresent VirtualAlloc GetSystemInfo HeapReAlloc ExitThread GetStartupInfoA RtlUnwind GetTimeZoneInformation FindFirstFileW FindNextFileW MoveFileW RemoveDirectoryW CreateDirectoryW TerminateProcess GetDateFormatA ExitProcess SetStdHandle HeapSize SetHandleCount GetStdHandle GetConsoleCP GetConsoleMode IsValidCodePage GetUserDefaultLCID EnumSystemLocalesA IsValidLocale GetStringTypeA GetStringTypeW HeapDestroy HeapCreate VirtualFree LCMapStringA LCMapStringW FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW WriteConsoleA GetConsoleOutputCP WriteConsoleW GetLocaleInfoW SetEnvironmentVariableA TerminateThread TlsGetValue QueueUserAPC CreateIoCompletionPort TlsSetValue SetWaitableTimer SetLastError GetQueuedCompletionStatus InterlockedCompareExchange InitializeCriticalSectionAndSpinCount GetSystemTimeAsFileTime FreeConsole GetACP SetConsoleOutputCP AllocConsole FileTimeToLocalFileTime GetModuleFileNameW SetConsoleCtrlHandler GetDiskFreeSpaceExW LoadLibraryW GetDriveTypeW GetLogicalDrives GetModuleHandleW GetTempPathW QueryPerformanceCounter GetSystemDirectoryW MoveFileExW CopyFileW ResetEvent RaiseException DeleteCriticalSection InitializeCriticalSection DuplicateHandle FileTimeToDosDateTime GetFileInformationByHandle GetFileType FileTimeToSystemTime SystemTimeToFileTime HeapFree GetCurrentThreadId InterlockedExchangeAdd GetShortPathNameA CreateProcessW QueryPerformanceFrequency FindResourceExW DeleteFileW ReleaseSemaphore GetTimeFormatA CreateMutexW PostQueuedCompletionStatus TlsFree TlsAlloc LeaveCriticalSection EnterCriticalSection MulDiv FreeResource WriteFile GlobalMemoryStatus GetModuleHandleA OpenEventA CreateWaitableTimerA DeviceIoControl AreFileApisANSI PeekNamedPipe FlushConsoleInputBuffer ReadConsoleInputA lstrcpynA GetWindowsDirectoryA CreateProcessA GetProcessHeap HeapAlloc OutputDebugStringA WinExec lstrcatA WaitForSingleObject GetTickCount LoadLibraryA Process32Next Process32First CreateToolhelp32Snapshot GetSystemTime GetFileAttributesA FindClose FindNextFileA GetCurrentProcess DeleteFileA FindFirstFileA FindVolumeClose CreateDirectoryA FindNextVolumeA SetCurrentDirectoryA GetVolumePathNamesForVolumeNameA GetModuleFileNameA FindFirstVolumeA LocalAlloc GetVolumeInformationA GetDiskFreeSpaceExA GetDriveTypeA GetVolumePathNameA SetErrorMode WritePrivateProfileStringA GetPrivateProfileStringA MoveFileA GlobalLock GlobalAlloc GlobalFree GlobalUnlock CreateThread Sleep lstrcpyA InterlockedDecrement InterlockedIncrement FreeLibrary GetProcAddress LoadLibraryExA GetLocalTime CreateFileA GetTempFileNameA GetTempPathA ReadFile SetFilePointer GetFileSize LoadResource LockResource SizeofResource FindResourceA lstrcmpiA GetStringTypeExA InterlockedExchange MultiByteToWideChar SetConsoleMode CompareStringA CompareStringW GetEnvironmentVariableA GetVersion GetEnvironmentVariableW lstrlenA lstrlenW WideCharToMultiByte CreateEventA GetCurrentProcessId CloseHandle GetCommandLineA UnmapViewOfFile MapViewOfFile CreateFileMappingA SetEvent OpenFileMappingA GetLastError CreateMutexA GetVersionExA LocalFree GetOEMCP

user32

PostThreadMessageA RegisterClipboardFormatA UnregisterClassA GetNextDlgGroupItem CharNextA GetSysColorBrush InvalidateRgn CopyAcceleratorTableA ReleaseCapture SetCapture DestroyMenu MoveWindow SetWindowTextA IsDialogMessageA RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild GetCapture GetClassLongA SetPropA GetPropA RemovePropA SetFocus GetWindowTextLengthA GetMessageTime MapWindowPoints GetScrollPos GetMenu CreateWindowExA GetClassInfoExA RegisterClassA AdjustWindowRectEx GetDlgCtrlID CallWindowProcA GetWindowPlacement IntersectRect UnhookWindowsHookEx EndPaint BeginPaint GetWindowDC GetSubMenu CreateDialogIndirectParamA DestroyWindow GetDlgItem GetNextDlgTabItem EndDialog SetWindowContextHelpId MapDialogRect GetWindowThreadProcessId GetLastActivePopup SetWindowsHookExA CallNextHookEx GetMessageA TranslateMessage DispatchMessageA GetActiveWindow GetKeyState PeekMessageA ValidateRect PostQuitMessage SetMenuItemBitmaps GetMenuCheckMarkDimensions EnableMenuItem SendMessageTimeoutW ExitWindowsEx PostMessageW SendMessageW FindWindowW DrawFrameControl GetWindow WindowFromPoint ClientToScreen DefWindowProcA GetClassInfoA OffsetRect GetMenuState SetRectEmpty GetMenuItemID GetMenuItemCount GetClassNameA IsRectEmpty GetWindowTextA IsWindowEnabled ChildWindowFromPoint LoadStringA LoadImageA DestroyCursor DestroyIcon CreateIconIndirect GetIconInfo LoadBitmapA MessageBoxExA ReleaseDC GetDC MessageBeep CopyRect GrayStringA EqualRect DrawTextExA DrawTextA TabbedTextOutA GetSysColor GetFocus FillRect MessageBoxA IsWindow CheckMenuItem AppendMenuA TrackPopupMenu CreatePopupMenu CopyIcon LoadCursorA SetCursor SystemParametersInfoA SetActiveWindow GetTopWindow SetWindowPos GetDesktopWindow GetParent GetWindowRect GetMessagePos UpdateWindow RedrawWindow EnableWindow DrawIcon SendMessageA IsIconic SetWindowRgn GetForegroundWindow GetSystemMetrics GetClientRect GetWindowLongA SetWindowLongA SetForegroundWindow ShowWindow IsWindowVisible SetRect PtInRect ScreenToClient GetCursorPos InflateRect KillTimer SetTimer LoadIconA PostMessageA InvalidateRect CharUpperA GetUserObjectInformationW GetProcessWindowStation ModifyMenuA

gdi32

GetTextColor GetRgnBox GetBkColor DPtoLP GetMapMode CreateRectRgnIndirect ExtSelectClipRgn ScaleWindowExtEx SetWindowExtEx SetWindowOrgEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SetStretchBltMode GetWindowExtEx GetViewportExtEx GetClipBox SetMapMode CreateFontIndirectA CreateFontA GetObjectA DeleteObject BitBlt DeleteDC CreateCompatibleDC CreateCompatibleBitmap StretchBlt CreateRoundRectRgn CreateSolidBrush CreateDIBSection SelectObject ExtTextOutA Escape GetStockObject PtVisible RectVisible TextOutA GetTextExtentPoint32A GetDeviceCaps CreateBitmap SetTextColor CreatePen MoveToEx LineTo SetBkMode SetBkColor GetTextMetricsA SetTextJustification FrameRgn FillRgn SelectClipRgn CreateRectRgn CombineRgn OffsetRgn CreatePolygonRgn SaveDC RestoreDC

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter DocumentPropertiesA OpenPrinterA

advapi32

RegQueryInfoKeyW RegOpenKeyExW RegQueryValueExW RegisterEventSourceA ReportEventA DeregisterEventSource RegSetValueExW RegOpenKeyA RegQueryValueExA RegCreateKeyExA RegCloseKey RegSetValueExA RegEnumKeyA RegDeleteKeyA AdjustTokenPrivileges LookupPrivilegeValueW CheckTokenMembership GetTokenInformation CreateWellKnownSid GetUserNameA SetSecurityDescriptorDacl SetNamedSecurityInfoA InitializeSecurityDescriptor RegDeleteKeyW RegDeleteValueW RegCreateKeyExW SetSecurityInfo ConvertStringSecurityDescriptorToSecurityDescriptorA GetSecurityDescriptorSacl GetFileSecurityA OpenProcessToken DuplicateToken AccessCheck RegOpenKeyExA RegQueryValueA RegEnumKeyExW

shell32

Shell_NotifyIconA ShellExecuteA SHBrowseForFolderA SHGetPathFromIDListA SHGetMalloc ord680 SHChangeNotify SHGetSpecialFolderPathA ShellExecuteExW SHGetFolderPathW SHGetSpecialFolderPathW SHGetFolderPathA

comctl32

_TrackMouseEvent ord17 ImageList_GetImageCount ImageList_GetIcon InitCommonControlsEx

oledlg

ord8

ole32

CoGetClassObject CoTaskMemAlloc StgOpenStorageOnILockBytes OleUninitialize CoFreeUnusedLibraries OleInitialize CLSIDFromString CLSIDFromProgID CoInitializeEx CoTaskMemFree StgCreateDocfileOnILockBytes CreateILockBytesOnHGlobal CoUninitialize CoInitialize CoCreateInstance CreateStreamOnHGlobal CoRegisterMessageFilter OleFlushClipboard CoRevokeClassObject OleIsCurrentClipboard

oleaut32

VariantCopy OleCreateFontIndirect SafeArrayDestroy SystemTimeToVariantTime VariantTimeToSystemTime SysAllocStringLen SysFreeString VariantClear SysAllocString OleLoadPicture VariantChangeType VariantInit SysStringLen SysAllocStringByteLen

ws2_32

getsockopt getpeername freeaddrinfo WSARecv WSASocketW shutdown WSAAddressToStringA WSAStringToAddressA WSCEnumProtocols WSASetLastError WSASend ntohl setsockopt WSACleanup WSAStartup accept ioctlsocket getaddrinfo bind htonl ntohs getsockname gethostname __WSAFDIsSet select recv WSAGetLastError inet_ntoa gethostbyname closesocket send connect htons inet_addr socket sendto recvfrom listen

wininet

InternetConnectA HttpSendRequestA InternetWriteFile InternetOpenA InternetGetLastResponseInfoA HttpOpenRequestA InternetQueryDataAvailable InternetSetOptionExA InternetCanonicalizeUrlA InternetCrackUrlA InternetSetFilePointer HttpQueryInfoW HttpSendRequestW HttpOpenRequestW InternetConnectW InternetSetOptionW InternetOpenW InternetTimeToSystemTimeA HttpQueryInfoA InternetGetConnectedState InternetGetCookieA InternetReadFile InternetCloseHandle InternetSetStatusCallback

iphlpapi

GetAdaptersInfo IcmpCloseHandle IcmpSendEcho IcmpCreateFile GetIfTable NotifyAddrChange

gdiplus

GdipCreateFromHDC GdipDrawImageRectRect GdipSetImageAttributesColorMatrix GdiplusStartup GdiplusShutdown GdipGetImageWidth GdipGetImageHeight GdipFree GdipAlloc GdipCreateBitmapFromStream GdipDeleteGraphics GdipDrawImageI GdipDisposeImage GdipCloneImage GdipReleaseDC GdipCreateBitmapFromFile GdipCreateImageAttributes GdipDisposeImageAttributes

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW GetFileVersionInfoSizeA GetFileVersionInfoA

psapi

GetModuleFileNameExW

clientconf.ini

SHA256 d61b7ba7a0ab3af6baca631b60b38e8fdcb7de693e9bee9c264c9fc2b1a251da
MD5 2673b222cdda6c8bfe9486211d7b6a7f
SHA1 bf53c9c55b3f01655ef92302ea7a34bd467c3304
SHA512 3b204f94fc0f7263fc7e44038f8a1d20d4daa0661d70d01dd556c511cbd0cb42018a5e7bb8209cc6580756d6218b1742e09f5c7a4ea9ab1b876677a75bad6827
MD5 SHA1 SHA512

NSIS installer

installer

dbghelp.dll

IMPHASH 23dbfe3112241abaff4c3d3dfa2c4867
SHA256 72877fb0af03745e2a78414ddaa05f1871703ad4c0d16d43d4ae62971ff52f0b
MD5 148423fdbc7f0b07d8d166414c95b8ab
SHA1 aec78b99dbfff5071f9dba74117ba6e5228f89f6
SHA512 82f0ce44858bdc4ff3522d8c7853c073d33dacdec53d9b9b31c32be3f4ded2ed102a55dae316611b9359eedb24b3aa698474c39b989c15231b3cb8fa79f1cc59
SSDEEP 24576:3qRTia2lxLx/LBFGfuRShWsSn4HFDndyx:aR+a2lxLx/FF7sa4I
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

493408

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

dbghelp.pdb

msvcrt

??3@YAXPAX@Z _XcptFilter _adjust_fdiv _amsg_exit _initterm _fileno _iob _isatty _write __pioinfo __badioinfo _lseek wctomb _snprintf __mb_cur_max mbtowc isleadbyte _ismbblead _errno iswprint _vsnwprintf memmove __CxxFrameHandler iswspace calloc _itoa towlower tolower _wcslwr time _wctime atol wcsncpy sprintf fclose _winminor _winmajor _osver _wsplitpath __unDName isdigit strncpy _CxxThrowException bsearch _snwprintf __dllonexit fseek _wfopen fopen wcstol strchr wcsrchr _wmakepath _fullpath _wfullpath _mbsicmp _access _splitpath _wcsdup _fsopen _wfsopen _get_osfhandle _read _lseeki64 _chsize _close _open_osfhandle _wsopen _sopen wprintf ftell _wgetenv _memicmp _mbscmp ?terminate@@YAXXZ ??1type_info@@UAE@XZ strncmp _ltoa _wcsnicmp _stricmp _purecall isspace ctime malloc _strlwr free strstr _except_handler3 memcpy _wcsicmp qsort wcschr wcsstr wcsncmp _onexit fread iswxdigit memset ??2@YAPAXI@Z

kernel32

LocalFree InterlockedIncrement InterlockedDecrement LCMapStringA SetFileAttributesA CopyFileA InitializeCriticalSectionAndSpinCount DeleteFileA DeviceIoControl GetFileType ExpandEnvironmentStringsA MapViewOfFileEx FlushViewOfFile InterlockedExchange GetSystemDirectoryA GetWindowsDirectoryA CompareStringA GetModuleFileNameA GetThreadSelectorEntry CreateThread TerminateThread VirtualQueryEx GetPriorityClass GetThreadPriority GetThreadTimes GetThreadContext ResumeThread SuspendThread GetSystemInfo Sleep SetUnhandledExceptionFilter UnhandledExceptionFilter FindClose SetLastError LocalAlloc LeaveCriticalSection EnterCriticalSection CloseHandle ReadFile GetFileSize CreateFileA GetLastError TlsSetValue TlsGetValue TlsAlloc TlsFree HeapDestroy FreeLibrary DeleteCriticalSection HeapCreate InitializeCriticalSection GetVersionExA HeapReAlloc HeapAlloc HeapFree IsDBCSLeadByte SetFilePointer GetCurrentProcess UnmapViewOfFile CreateDirectoryA VirtualProtect VirtualAlloc DuplicateHandle MapViewOfFile CreateFileMappingA GetModuleHandleA OpenProcess GetCurrentProcessId VirtualFree OutputDebugStringA WriteFile ReadProcessMemory SetErrorMode GetFileAttributesA GetProcessHeap QueryPerformanceCounter GetTickCount GetCurrentThreadId GetSystemTimeAsFileTime TerminateProcess LoadLibraryA

advapi32

CryptAcquireContextA CryptGenRandom CryptReleaseContext RegQueryValueExA RegOpenKeyExA RegCloseKey

rpcrt4

UuidCreate

DbgHelpCreateUserDump DbgHelpCreateUserDumpW EnumDirTree EnumDirTreeW EnumerateLoadedModules EnumerateLoadedModules64 EnumerateLoadedModulesW64 ExtensionApiVersion FindDebugInfoFile FindDebugInfoFileEx FindExecutableImage FindExecutableImageEx FindExecutableImageExW FindFileInPath FindFileInSearchPath GetTimestampForLoadedLibrary ImageDirectoryEntryToData ImageDirectoryEntryToDataEx ImageNtHeader ImageRvaToSection ImageRvaToVa ImagehlpApiVersion ImagehlpApiVersionEx MakeSureDirectoryPathExists MapDebugInformation MiniDumpReadDumpStream MiniDumpWriteDump SearchTreeForFile SearchTreeForFileW StackWalk StackWalk64 SymAddSymbol SymAddSymbolW SymCleanup SymDeleteSymbol SymDeleteSymbolW SymEnumLines SymEnumLinesW SymEnumProcesses SymEnumSourceFiles SymEnumSourceFilesW SymEnumSourceLines SymEnumSourceLinesW SymEnumSym SymEnumSymbols SymEnumSymbolsForAddr SymEnumSymbolsForAddrW SymEnumSymbolsW SymEnumTypes SymEnumTypesW SymEnumerateModules SymEnumerateModules64 SymEnumerateModulesW64 SymEnumerateSymbols SymEnumerateSymbols64 SymEnumerateSymbolsW SymEnumerateSymbolsW64 SymFindFileInPath SymFindFileInPathW SymFromAddr SymFromAddrW SymFromIndex SymFromIndexW SymFromName SymFromNameW SymFromToken SymFromTokenW SymFunctionTableAccess SymFunctionTableAccess64 SymGetFileLineOffsets64 SymGetHomeDirectory SymGetHomeDirectoryW SymGetLineFromAddr SymGetLineFromAddr64 SymGetLineFromAddrW64 SymGetLineFromName SymGetLineFromName64 SymGetLineFromNameW64 SymGetLineNext SymGetLineNext64 SymGetLineNextW64 SymGetLinePrev SymGetLinePrev64 SymGetLinePrevW64 SymGetModuleBase SymGetModuleBase64 SymGetModuleInfo SymGetModuleInfo64 SymGetModuleInfoW SymGetModuleInfoW64 SymGetOmapBlockBase SymGetOptions SymGetScope SymGetScopeW SymGetSearchPath SymGetSearchPathW SymGetSourceFile SymGetSourceFileFromToken SymGetSourceFileFromTokenW SymGetSourceFileToken SymGetSourceFileTokenW SymGetSourceFileW SymGetSourceVarFromToken SymGetSourceVarFromTokenW SymGetSymFromAddr SymGetSymFromAddr64 SymGetSymFromName SymGetSymFromName64 SymGetSymNext SymGetSymNext64 SymGetSymPrev SymGetSymPrev64 SymGetSymbolFile SymGetSymbolFileW SymGetTypeFromName SymGetTypeFromNameW SymGetTypeInfo SymGetTypeInfoEx SymInitialize SymInitializeW SymLoadModule SymLoadModule64 SymLoadModuleEx SymLoadModuleExW SymMatchFileName SymMatchFileNameW SymMatchString SymMatchStringA SymMatchStringW SymNext SymNextW SymPrev SymPrevW SymRefreshModuleList SymRegisterCallback SymRegisterCallback64 SymRegisterCallbackW64 SymRegisterFunctionEntryCallback SymRegisterFunctionEntryCallback64 SymSearch SymSearchW SymSetContext SymSetHomeDirectory SymSetHomeDirectoryW SymSetOptions SymSetParentWindow SymSetSearchPath SymSetSearchPathW SymSrvDeltaName SymSrvDeltaNameW SymSrvGetFileIndexString SymSrvGetFileIndexStringW SymSrvGetFileIndexes SymSrvGetFileIndexesW SymSrvGetSupplement SymSrvGetSupplementW SymSrvIsStore SymSrvIsStoreW SymSrvStoreFile SymSrvStoreFileW SymSrvStoreSupplement SymSrvStoreSupplementW SymUnDName SymUnDName64 SymUnloadModule SymUnloadModule64 UnDecorateSymbolName UnDecorateSymbolNameW UnmapDebugInformation WinDbgExtensionDllInit block dbghelp dh fptr homedir lmi lminfo omap srcfiles stack_force_ebp stackdbg sym symsrv vc7fpo

ikuacc.dll

IMPHASH d14a603e8347464c8d67aed252205ab4
SHA256 e3d82685c523f6a192faac7a6fe2c8609c0ca121d2fefc0025d7eb589a2336f7
MD5 7968e0046a0d36d52569e49ba7e51624
SHA1 79d1c37876df0c087235e8bae60ff6e9998abcec
SHA512 8c515f108b0f28b25984a53970e9c2bfb12b125890757796ac16014a24eb45cd45b2717cc5cf787932f33d6e1602e9fa3ec84f2c0c43b0856dadd3f7f87a30c0
SSDEEP 98304:K+zCsld0tODoAguXYWkf87iAwnVcTI+Jzv:KWCsd+OnguXYWfs+t
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

d2:4e:8b:20:28:40:43:af:b9:ea:c6:63:60:e2:18:6a:a6:c5:a2:24

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Youku.com Inc.,O=Youku.com Inc.,L=George Town,ST=George Town,C=KY,1.2.840.113549.1.9.1=#0c136c69756a696e67756f40796f756b752e636f6d

Chains

Sep 17, 2013

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=WoSign Class 3 Code Signing CA,O=WoSign eCommerce Services Limited,C=CN

Serial Number

19:9d:f8:79

Issuer

CN=Certification Authority of WoSign,O=WoSign eCommerce Services Limited,C=CN

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 8, 2009 - Aug 8, 2024

Subject

CN=Youku.com Inc.,O=Youku.com Inc.,L=George Town,ST=George Town,C=KY,1.2.840.113549.1.9.1=#0c136c69756a696e67756f40796f756b752e636f6d

Serial Number

17:49:ab:5a:7d:e5:9c

Issuer

CN=WoSign Class 3 Code Signing CA,O=WoSign eCommerce Services Limited,C=CN

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageMicrosoftCommercialCodeSigning

Timespan

Oct 18, 2011 - Oct 20, 2014

Subject

CN=Certification Authority of WoSign,O=WoSign eCommerce Services Limited,C=CN

Serial Number

39

Issuer

CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 1, 2011 - Mar 1, 2016

Subject

CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Serial Number

01

Issuer

CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Key Usages

KeyUsageDigitalSignature, KeyUsageKeyEncipherment, KeyUsageKeyAgreement, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Sep 17, 2006 - Sep 17, 2036

Minor OS version

0

Major OS version

4

Entry point

1770872

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\SVN\install.v3\src\ikuacclive\build\bin\Release_dll\acc.pdb

kernel32

SetLastError GetProcessHeap HeapFree HeapAlloc GetFileAttributesW SetFileAttributesW GetFileTime SetFileTime FindFirstFileW FindNextFileW FindClose LocalFree FormatMessageA CreateFileW DeviceIoControl ReadFile WriteFile FlushFileBuffers SetFilePointerEx SetEndOfFile OpenFileMappingA MapViewOfFile UnmapViewOfFile CreateFileMappingA OutputDebugStringA GetCurrentProcessId ResetEvent CreateProcessW MultiByteToWideChar GlobalAlloc FileTimeToSystemTime GetSystemDirectoryW SetConsoleOutputCP MoveFileExW FileTimeToLocalFileTime GetDriveTypeW AllocConsole GetModuleFileNameW GetTickCount GetACP GetLogicalDrives SetConsoleCtrlHandler TlsGetValue GetModuleHandleW CreateMutexW ReleaseSemaphore DuplicateHandle GetCurrentProcess CreateSemaphoreA GetModuleHandleA GetVersionExW OpenMutexW FreeEnvironmentStringsA GetTimeZoneInformation IsValidCodePage GetOEMCP TlsSetValue Sleep InitializeCriticalSectionAndSpinCount GetQueuedCompletionStatus WaitForMultipleObjects TerminateThread QueueUserAPC CreateIoCompletionPort DeleteCriticalSection InterlockedDecrement CreateWaitableTimerW SetWaitableTimer GetSystemTimeAsFileTime CreateEventW SleepEx GlobalFree QueryPerformanceFrequency FreeLibrary GetProcAddress LoadLibraryA HeapSize VirtualAlloc VirtualFree HeapCreate SetConsoleMode ReadConsoleInputA QueryPerformanceCounter HeapDestroy GetConsoleMode GetConsoleCP InterlockedCompareExchange GetStartupInfoA InterlockedExchangeAdd WideCharToMultiByte LeaveCriticalSection CreateEventA InterlockedExchange CloseHandle GetCurrentThreadId SetEvent WaitForSingleObject GetDiskFreeSpaceExW GetLastError TlsFree TlsAlloc InterlockedIncrement PostQueuedCompletionStatus EnterCriticalSection GetFileType SetHandleCount SetFilePointer FlushConsoleInputBuffer GlobalMemoryStatus GetVersion GetModuleFileNameA GetStdHandle GetThreadLocale SetEnvironmentVariableA CreateFileA WriteConsoleW GetConsoleOutputCP WriteConsoleA GetStringTypeW GetStringTypeA CompareStringW SetStdHandle GetLocaleInfoW IsValidLocale GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW FreeConsole CreateWaitableTimerA InitializeCriticalSection GetLocaleInfoA GetUserDefaultLCID GetStringTypeExA LCMapStringA LCMapStringW OpenEventA ResumeThread SystemTimeToFileTime RemoveDirectoryW DeleteFileW GetCurrentDirectoryW SetCurrentDirectoryW GetFileInformationByHandle GetFileAttributesExW CreateDirectoryW AreFileApisANSI TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetTimeFormatA GetDateFormatA ExitThread CreateThread GetCommandLineA GetVersionExA HeapReAlloc SetEnvironmentVariableW MoveFileW RtlUnwind RaiseException GetCPInfo ExitProcess CompareStringA EnumSystemLocalesA

user32

MessageBoxA LoadStringA GetDesktopWindow GetProcessWindowStation GetUserObjectInformationW SendMessageW FindWindowW

advapi32

RegCloseKey RegQueryValueExW SetNamedSecurityInfoA GetSecurityDescriptorSacl InitializeSecurityDescriptor ConvertStringSecurityDescriptorToSecurityDescriptorA SetSecurityDescriptorDacl RegQueryValueExA RegSetValueExW DeregisterEventSource ReportEventA RegisterEventSourceA CryptAcquireContextA CryptEnumProvidersA CryptReleaseContext CryptGenRandom RegOpenKeyExW

shell32

SHGetFolderPathW SHGetSpecialFolderPathW

ole32

CoCreateInstance CoInitializeEx CoUninitialize

oleaut32

SysFreeString SysAllocStringLen

ws2_32

WSARecvFrom shutdown WSASendTo ntohs bind getsockname inet_addr listen accept __WSAFDIsSet WSAStringToAddressA connect getaddrinfo getsockopt getpeername WSARecv freeaddrinfo WSASocketW htonl select WSAStartup ntohl WSACleanup WSAAddressToStringA htons setsockopt ioctlsocket closesocket WSASetLastError WSASend WSAGetLastError

mswsock

AcceptEx GetAcceptExSockaddrs

wininet

InternetQueryOptionA InternetQueryOptionW

iphlpapi

GetAdaptersInfo NotifyAddrChange GetTcpTable

Name

.text

Size

3.6MB

Virtual Size

3.6MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

652KB

Virtual Size

651KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

100KB

Virtual Size

138KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

2B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

29KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

181KB

Virtual Size

180KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

ikutm.dll

IMPHASH c590b95e497e2600078c396c1ba57859
SHA256 e8e6486debc9bf8f494b3a5ea0bb8f21e0680c4dc5c705d44020d4725e8b2c59
MD5 39126808cbff045f09b2e19d8a9d6ded
SHA1 c4c4c2cd97c82115500eead933984f486001bebf
SHA512 45f9d2647aa3ed5ee766bc09d17baf97e593ddf1849a554c1b7bf5da3fe56161c0837c9206e6e191f10148c7ed2d0f1281633ea3d0980c60b2cee7d229bc0700
SSDEEP 3072:DFvZ09pDgyfjpmxEcQirVtcvfU1yYwOJaED8IQnZHFK:r0HUyfQrcnZks1L6
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

ab:80:5f:bd:20:77:4d:6c:c8:ff:e2:46:70:0d:81:23:e7:41:72:cc

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Youku.com Inc.,O=Youku.com Inc.,L=George Town,ST=George Town,C=KY,1.2.840.113549.1.9.1=#0c136c69756a696e67756f40796f756b752e636f6d

Chains

Sep 17, 2013

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=WoSign Class 3 Code Signing CA,O=WoSign eCommerce Services Limited,C=CN

Serial Number

19:9d:f8:79

Issuer

CN=Certification Authority of WoSign,O=WoSign eCommerce Services Limited,C=CN

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 8, 2009 - Aug 8, 2024

Subject

CN=Youku.com Inc.,O=Youku.com Inc.,L=George Town,ST=George Town,C=KY,1.2.840.113549.1.9.1=#0c136c69756a696e67756f40796f756b752e636f6d

Serial Number

17:49:ab:5a:7d:e5:9c

Issuer

CN=WoSign Class 3 Code Signing CA,O=WoSign eCommerce Services Limited,C=CN

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageMicrosoftCommercialCodeSigning

Timespan

Oct 18, 2011 - Oct 20, 2014

Subject

CN=Certification Authority of WoSign,O=WoSign eCommerce Services Limited,C=CN

Serial Number

39

Issuer

CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 1, 2011 - Mar 1, 2016

Subject

CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Serial Number

01

Issuer

CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Key Usages

KeyUsageDigitalSignature, KeyUsageKeyEncipherment, KeyUsageKeyAgreement, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Sep 17, 2006 - Sep 17, 2036

Minor OS version

0

Major OS version

4

Entry point

58051

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\SVN\install.v3\src\ikuacclive\build\bin\ikutm.pdb

kernel32

GetFileAttributesExW ExpandEnvironmentStringsA LoadLibraryA lstrcpyW WideCharToMultiByte EnterCriticalSection HeapAlloc HeapDestroy LeaveCriticalSection HeapCreate ExpandEnvironmentStringsW MultiByteToWideChar lstrlenW GetModuleFileNameW InterlockedIncrement InterlockedDecrement TlsFree GetFileAttributesExA TlsAlloc GetTickCount GetProcAddress LoadLibraryW GetVersionExW DeleteCriticalSection FreeLibrary InitializeCriticalSection LocalFree OpenFileMappingA GetLastError UnmapViewOfFile MapViewOfFile GetCurrentProcessId CloseHandle OutputDebugStringA HeapFree CreateFileMappingA CreateFileA GetLocaleInfoW SetStdHandle WriteConsoleW GetConsoleOutputCP FormatMessageA WriteConsoleA Sleep GetSystemTimeAsFileTime TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCurrentThreadId GetCommandLineA GetVersionExA GetProcessHeap RaiseException RtlUnwind LCMapStringA LCMapStringW GetCPInfo GetACP GetOEMCP IsValidCodePage GetModuleHandleA TlsGetValue TlsSetValue SetLastError SetHandleCount GetStdHandle GetFileType GetStartupInfoA ExitProcess VirtualFree VirtualAlloc HeapReAlloc GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter WriteFile GetConsoleCP GetConsoleMode FlushFileBuffers ReadFile SetFilePointer HeapSize GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeA GetStringTypeW

advapi32

InitializeSecurityDescriptor RegOpenKeyExW RegCloseKey SetSecurityDescriptorDacl RegQueryValueExW ConvertStringSecurityDescriptorToSecurityDescriptorA GetSecurityDescriptorSacl RegQueryValueExA SetNamedSecurityInfoA

ole32

StringFromGUID2

ws2_32

WSCEnumProtocols WSCDeinstallProvider WSCWriteProviderOrder WSCGetProviderPath WSCInstallProvider

rpcrt4

UuidCreate

ikutmco.dll

IMPHASH 14662e534d69b2fa28108c45406bdcc9
SHA256 bfb6787c2c30e17d22d252f674470f5146fc631d192024464b61157914115066
MD5 26034082bf720e4f732db63ef9b9ba8f
SHA1 2e370817a138989026e85b1e62f147505d1ae63d
SHA512 1ebd785ead8e911dfa573c4f03ee4e13fd9841d29219749e369d2223ff646eaf19b607bb0bb6a7d10c5e5b8ad586b8ef9e5506b1af4b6d167f0803493900d4fb
SSDEEP 3072:seHVsgHL6FQVtAJAPuKh2r80Se83QIOUbaS:vrmWn2QrQ
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

3c:b8:db:34:11:27:49:0a:6c:f2:2a:00:0c:75:69:90:a2:d6:1b:56

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Youku.com Inc.,O=Youku.com Inc.,L=George Town,ST=George Town,C=KY,1.2.840.113549.1.9.1=#0c136c69756a696e67756f40796f756b752e636f6d

Chains

Sep 17, 2013

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=WoSign Class 3 Code Signing CA,O=WoSign eCommerce Services Limited,C=CN

Serial Number

19:9d:f8:79

Issuer

CN=Certification Authority of WoSign,O=WoSign eCommerce Services Limited,C=CN

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 8, 2009 - Aug 8, 2024

Subject

CN=Youku.com Inc.,O=Youku.com Inc.,L=George Town,ST=George Town,C=KY,1.2.840.113549.1.9.1=#0c136c69756a696e67756f40796f756b752e636f6d

Serial Number

17:49:ab:5a:7d:e5:9c

Issuer

CN=WoSign Class 3 Code Signing CA,O=WoSign eCommerce Services Limited,C=CN

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageMicrosoftCommercialCodeSigning

Timespan

Oct 18, 2011 - Oct 20, 2014

Subject

CN=Certification Authority of WoSign,O=WoSign eCommerce Services Limited,C=CN

Serial Number

39

Issuer

CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 1, 2011 - Mar 1, 2016

Subject

CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Serial Number

01

Issuer

CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Key Usages

KeyUsageDigitalSignature, KeyUsageKeyEncipherment, KeyUsageKeyAgreement, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Sep 17, 2006 - Sep 17, 2036

Minor OS version

0

Major OS version

4

Entry point

69714

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\SVN\install.v3\src\ikuacclive\build\bin\ikutmco.pdb

kernel32

CreateEventW SetEvent InterlockedIncrement PostQueuedCompletionStatus TlsFree CreateEventA GetModuleHandleW GetProcAddress LoadLibraryW TlsAlloc InterlockedDecrement InterlockedExchange WaitForSingleObjectEx ReleaseSemaphore GetQueuedCompletionStatus GetSystemInfo CreateIoCompletionPort CreateSemaphoreW DebugBreak WaitForMultipleObjectsEx ExpandEnvironmentStringsA HeapDestroy HeapCreate LoadLibraryA HeapFree InitializeCriticalSection ExpandEnvironmentStringsW WideCharToMultiByte GetExitCodeThread HeapAlloc DeleteCriticalSection GetVersionExW CreateProcessW GetTickCount Sleep TlsGetValue TlsSetValue GetModuleFileNameW MultiByteToWideChar OpenEventA FormatMessageA FlushFileBuffers CreateFileA ReadFile WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle ExitThread WaitForSingleObject CreateThread ResetEvent EnterCriticalSection LeaveCriticalSection LocalFree OpenFileMappingA CreateFileMappingA GetLastError UnmapViewOfFile MapViewOfFile GetCurrentProcessId CloseHandle OutputDebugStringA FreeLibrary GetLocaleInfoA GetStringTypeW GetStringTypeA GetConsoleMode GetSystemTimeAsFileTime TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCurrentThreadId GetCommandLineA GetVersionExA GetProcessHeap RaiseException RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage GetModuleHandleA SetLastError LCMapStringA LCMapStringW HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA VirtualFree VirtualAlloc HeapReAlloc SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter SetFilePointer GetConsoleCP

user32

DefWindowProcW DestroyWindow RegisterClassW PostMessageW UnregisterClassW DispatchMessageW CreateWindowExW GetWindowLongW KillTimer SetTimer ShowWindow SetWindowLongW RegisterClassExW IsWindow RegisterDeviceNotificationW GetMessageW TranslateMessage PostQuitMessage

advapi32

InitializeSecurityDescriptor RegOpenKeyExW RegCloseKey SetSecurityDescriptorDacl RegQueryValueExW ConvertStringSecurityDescriptorToSecurityDescriptorA GetSecurityDescriptorSacl RegQueryValueExA SetNamedSecurityInfoA

ws2_32

WSASetLastError WSACleanup WSAStartup WPUCompleteOverlappedRequest WSCEnumProtocols WSCGetProviderPath WSAGetLastError

Name

.text

Size

136KB

Virtual Size

132KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

24KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

8KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

4KB

Virtual Size

2B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

16KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

install.ico

SHA256 59826c80336763cc56ae9279d8ccc59c1502717c759dee590af1bda35ad14348
MD5 206763a9c06d8317cd0f7c4e79745c5c
SHA1 d1e1bb12684dc925fae289da797d37d3ff7afd7f
SHA512 08dbb68db45a1bb532ff4c9577bcfd59063636db0369ca43e72dd9fb1665682105c8b055c20e9a9fefd974e35868d301ebc5afa43fbcb679389915dc5a8fc382
SSDEEP 3072:BSTWWjZ8JuU/22oz+7UBLjw4C+pviww6iMkSUWqli5+ctA:xWjUZ/22oz+7ALOMcctA
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

intercept.wl

SHA256 c3cfa2ecdabc7da914ed6ae264bbcdf73192200a42fd6637a0d76f59db2ea56b
MD5 643e4e69c6c184349536ac58fccfa935
SHA1 ea5f6705073702709093c2c1a2aaedad59e4eb92
SHA512 43ae4dab477b271febc480cbb16ed28a1e6734e41a55c69a2ba4069f365aef3e155a145e76f20322682a9e5f4a1bc59da7fc38fe934d3f2c2486ac6b06afe1bf
MD5 SHA1 SHA512

NSIS installer

installer

skin.ini

SHA256 82f5ea8cbbbf1912559ad0322b6fe49431f3155ad30ed4b1e8fcc1b40af39321
MD5 cb367e6aa8a256c19d5b39c534d4d570
SHA1 e90bbc1d7f4882510bbe60737cbfa04238ca4f82
SHA512 91d592be65938759f23fe4f7db94d1d5b2268472d71fc0acec14121c64a7d8a56b97f91555c0d31a87e218a0ec6f7ae6f947991c65fcb5680451ba57c78c37c6
SSDEEP 96:VuXCI3ng9NX+RvPbR7c3Hv3Tf+f3E9eChjyXZKvGSZ1qUCN3ng9NIs+RvPbRGl3m:9IVF78JnBtZMNxFFGNJnByZBu6MFVCJJ
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

sqlite3.dll

IMPHASH b9a3d9f52b4536e26801ad3ea75a91f3
SHA256 5dded20811f593f4871f851503582db8a1f86f95742315b991519b2d39b46261
MD5 e1ecd5861311800344d42f8ffacaf9fe
SHA1 0a8d02d731555ab46f2f0602a6e111d4a6a563ce
SHA512 a7c3f6b8745fbe682d7c2e568ac77afdeba64f7fd6ab6ecf9083f4e67fb1ac8380c52db71d63e2febc8f0ce1bf43bb5cf1550cfa2ce036a22b229a2455f5e3d0
SSDEEP 6144:c6EHlDEyE4sYY2wHrhSFiwXK27+ly9JpvW1mKaN/8U/iJTebLqyZGBGWQSY6NAdQ:c6w/6bl+pv+mKaN/8RQUhN/h
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_DLL

PDB paths

sqlite3_aggregate_context sqlite3_aggregate_count sqlite3_apis sqlite3_auto_extension sqlite3_bind_blob sqlite3_bind_double sqlite3_bind_int sqlite3_bind_int64 sqlite3_bind_null sqlite3_bind_parameter_count sqlite3_bind_parameter_index sqlite3_bind_parameter_name sqlite3_bind_text sqlite3_bind_text16 sqlite3_bind_value sqlite3_bind_zeroblob sqlite3_blob_bytes sqlite3_blob_close sqlite3_blob_open sqlite3_blob_read sqlite3_blob_write sqlite3_busy_handler sqlite3_busy_timeout sqlite3_changes sqlite3_clear_bindings sqlite3_close sqlite3_collation_needed sqlite3_collation_needed16 sqlite3_column_blob sqlite3_column_bytes sqlite3_column_bytes16 sqlite3_column_count sqlite3_column_decltype sqlite3_column_decltype16 sqlite3_column_double sqlite3_column_int sqlite3_column_int64 sqlite3_column_name sqlite3_column_name16 sqlite3_column_text sqlite3_column_text16 sqlite3_column_type sqlite3_column_value sqlite3_commit_hook sqlite3_complete sqlite3_complete16 sqlite3_create_collation sqlite3_create_collation16 sqlite3_create_collation_v2 sqlite3_create_function sqlite3_create_function16 sqlite3_create_module sqlite3_create_module_v2 sqlite3_data_count sqlite3_db_handle sqlite3_declare_vtab sqlite3_enable_load_extension sqlite3_enable_shared_cache sqlite3_errcode sqlite3_errmsg sqlite3_errmsg16 sqlite3_exec sqlite3_expired sqlite3_extended_result_codes sqlite3_file_control sqlite3_finalize sqlite3_free sqlite3_free_table sqlite3_get_autocommit sqlite3_get_auxdata sqlite3_get_table sqlite3_global_recover sqlite3_interrupt sqlite3_last_insert_rowid sqlite3_libversion sqlite3_libversion_number sqlite3_load_extension sqlite3_malloc sqlite3_memory_alarm sqlite3_memory_highwater sqlite3_memory_used sqlite3_mprintf sqlite3_mutex_alloc sqlite3_mutex_enter sqlite3_mutex_free sqlite3_mutex_held sqlite3_mutex_leave sqlite3_mutex_notheld sqlite3_mutex_try sqlite3_open sqlite3_open16 sqlite3_open_v2 sqlite3_overload_function sqlite3_prepare sqlite3_prepare16 sqlite3_prepare16_v2 sqlite3_prepare_v2 sqlite3_profile sqlite3_progress_handler sqlite3_realloc sqlite3_release_memory sqlite3_reset sqlite3_reset_auto_extension sqlite3_result_blob sqlite3_result_double sqlite3_result_error sqlite3_result_error16 sqlite3_result_error_nomem sqlite3_result_error_toobig sqlite3_result_int sqlite3_result_int64 sqlite3_result_null sqlite3_result_text sqlite3_result_text16 sqlite3_result_text16be sqlite3_result_text16le sqlite3_result_value sqlite3_result_zeroblob sqlite3_rollback_hook sqlite3_set_authorizer sqlite3_set_auxdata sqlite3_sleep sqlite3_snprintf sqlite3_soft_heap_limit sqlite3_step sqlite3_thread_cleanup sqlite3_threadsafe sqlite3_total_changes sqlite3_trace sqlite3_transfer_bindings sqlite3_update_hook sqlite3_user_data sqlite3_value_blob sqlite3_value_bytes sqlite3_value_bytes16 sqlite3_value_double sqlite3_value_int sqlite3_value_int64 sqlite3_value_numeric_type sqlite3_value_text sqlite3_value_text16 sqlite3_value_text16be sqlite3_value_text16le sqlite3_value_type sqlite3_version sqlite3_vfs_find sqlite3_vfs_register sqlite3_vfs_unregister sqlite3_vmprintf

Name

.text

Size

282KB

Virtual Size

281KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

248B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

512B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.stab

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.stabstr

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

tudouDetector.dll

IMPHASH 3e01ac36ae83376def732f949ec0ccaa
SHA256 3a3750470e6e5162945a561ccdcbce97b5045863efdcdeb48e0507218be6ac97
MD5 e5b411aa7a46d262d02d315c1baa78eb
SHA1 94fd2496fd03f1edf9d14f47a57d1532953aa668
SHA512 3a652a601bf8684dc930fd6652298f230e183353c1a688a632c062f4274b913168d8cde222fa802407ca312fc1ddbc5302ac5e2d973025f2cf4e3b829b5290c3
SSDEEP 3072:7eDPYMJo3lMAJhuJkMBzKEbwyy2s0l6q0WEtKi2WErLlrh8sK4djePnQ9Cc5kfqd:6Xal8Kqy2sE695KiTE35CsfACCWXi4
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

eb:59:f9:80:f7:ad:cc:2f:8e:94:dd:6c:fb:21:b7:a9:0e:74:46:98

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shanghai Quan Tudou Network Technology Co.\, Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Shanghai Quan Tudou Network Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Chains

Sep 17, 2013

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Shanghai Quan Tudou Network Technology Co.\, Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Shanghai Quan Tudou Network Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Serial Number

4a:28:9f:c3:6a:df:a8:c4:6a:a3:80:2b:9e:73:8d:20

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 28, 2012 - Jun 27, 2015

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

0

Major OS version

4

Entry point

123652

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\SVN\install.v3\src\iFeisu_trunk\client\feisu\bin\Release\tudouDetector.pdb

wininet

InternetGetConnectedState InternetSetOptionA InternetQueryOptionA InternetGetConnectedStateEx

kernel32

GlobalFlags ReadFile WriteFile SetFilePointer FlushFileBuffers GetVolumeInformationA GetFullPathNameA GetCPInfo GetOEMCP HeapAlloc HeapReAlloc VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery HeapFree ExitThread CreateThread GetCommandLineA GetProcessHeap RtlUnwind ExitProcess HeapSize TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter HeapDestroy HeapCreate VirtualFree GetStdHandle GetConsoleCP GetConsoleMode GetACP IsValidCodePage SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetTimeZoneInformation WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW SetEnvironmentVariableA GlobalGetAtomNameA GlobalFindAtomA lstrcmpW GetVersionExA SetErrorMode TlsFree LocalReAlloc TlsSetValue TlsAlloc GlobalReAlloc TlsGetValue LocalAlloc CreateFileA FindFirstFileA FindClose FileTimeToLocalFileTime FileTimeToSystemTime GetCurrentProcessId GlobalAddAtomA GetModuleFileNameW GlobalDeleteAtom GetCurrentThread ConvertDefaultLocale EnumResourceLanguagesA GetLocaleInfoA GetProcAddress FormatMessageA LocalFree Sleep WritePrivateProfileStringA GetPrivateProfileStringA OpenMutexA CloseHandle OutputDebugStringA WinExec lstrcatA lstrcpyA GetWindowsDirectoryA LoadLibraryA SetLastError FlushInstructionCache GlobalFree GetCurrentProcess GlobalAlloc GlobalUnlock GetCurrentThreadId GlobalLock lstrcmpA MulDiv GlobalHandle LockResource GetThreadLocale LeaveCriticalSection GetModuleHandleA FreeLibrary InitializeCriticalSection GetModuleFileNameA LoadLibraryExA FindResourceA LoadResource SizeofResource IsDBCSLeadByte EnterCriticalSection InterlockedDecrement RaiseException DeleteCriticalSection InterlockedIncrement SetThreadLocale WideCharToMultiByte GetLastError CompareStringA lstrlenW MultiByteToWideChar lstrlenA lstrcmpiA InterlockedExchange CompareStringW GetVersion InterlockedCompareExchange IsProcessorFeaturePresent IsDebuggerPresent

user32

SetPropA GetPropA RemovePropA GetForegroundWindow GetTopWindow GetMessageTime GetMessagePos MapWindowPoints SetForegroundWindow GetMenu GetClassInfoA RegisterClassA AdjustWindowRectEx SystemParametersInfoA IsIconic GetWindowPlacement GetDlgCtrlID GetSystemMetrics GetSysColorBrush UnregisterClassA CopyRect GrayStringA DrawTextExA DrawTextA GetClassLongA GetWindowThreadProcessId GetLastActivePopup IsWindowEnabled EnableWindow MessageBoxA SetWindowsHookExA CallNextHookEx GetMessageA TranslateMessage DispatchMessageA GetActiveWindow IsWindowVisible GetKeyState PeekMessageA ValidateRect SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapA ModifyMenuA EnableMenuItem CheckMenuItem UnhookWindowsHookEx PostQuitMessage GetMenuItemID GetMenuItemCount PostMessageA DestroyMenu TrackPopupMenu GetSubMenu LoadMenuA GetCapture KillTimer PtInRect SetTimer CopyIcon SendDlgItemMessageA SetWindowContextHelpId GetWindowRect MapDialogRect SetCursor WindowFromPoint GetCursorPos GetDlgItem GetClientRect CallWindowProcA GetParent IsChild SetFocus SetCapture LoadIconA TabbedTextOutA WinHelpA GetWindowLongA ReleaseCapture GetWindow SetWindowPos MoveWindow SetWindowLongA CreateAcceleratorTableA RegisterClassExA GetClassNameA GetSysColor IsWindow RedrawWindow LoadCursorA GetDesktopWindow GetWindowTextLengthA GetClassInfoExA ShowWindow FillRect InvalidateRgn RegisterWindowMessageA GetFocus DestroyAcceleratorTable CreateDialogIndirectParamA InvalidateRect GetWindowTextA SetWindowTextA ReleaseDC DefWindowProcA SendMessageA GetDC EndPaint BeginPaint DestroyWindow CreateWindowExA ScreenToClient ClientToScreen CharNextA CharUpperA GetMenuState

gdi32

TextOutA RectVisible PtVisible ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx Escape DeleteObject SelectObject GetDeviceCaps GetClipBox SetMapMode SetTextColor SetBkColor RestoreDC SaveDC CreateBitmap DeleteDC BitBlt CreateCompatibleDC GetObjectA CreateCompatibleBitmap GetStockObject CreateSolidBrush ExtTextOutA

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

advapi32

RegSetValueExA RegEnumKeyA RegOpenKeyA RegQueryValueExA RegQueryValueA RegDeleteKeyA RegOpenKeyExA RegQueryInfoKeyA RegDeleteValueA RegEnumKeyExA RegCloseKey RegCreateKeyExA

shell32

ShellExecuteA

comctl32

_TrackMouseEvent

shlwapi

PathFindExtensionA PathFindFileNameA PathStripToRootA PathIsUNCA

ole32

CoCreateInstance StringFromGUID2 CoTaskMemFree CoTaskMemRealloc CLSIDFromString CLSIDFromProgID OleInitialize CoGetClassObject OleUninitialize OleLockRunning CreateStreamOnHGlobal CoTaskMemAlloc

oleaut32

SysFreeString UnRegisterTypeLi SysAllocString VarUI4FromStr LoadTypeLi RegisterTypeLi SysStringLen VariantInit VariantClear VarBstrCmp SysAllocStringLen OleCreateFontIndirect LoadRegTypeLi SysStringByteLen VariantChangeType

gdiplus

GdipFree GdipGetImageHeight GdipGetImageWidth GdipReleaseDC GdipDrawImageI GdipAlloc GdipCreateFromHDC GdipCloneImage GdipDisposeImage GdiplusStartup GdiplusShutdown GdipCreateBitmapFromStream GdipDeleteGraphics

tudouva.ini

SHA256 5fe6ed6a1c982aabdd283c8e61b37ca44dd987e794f29f4400d383f878fb1343
MD5 affa79ebc4c1bd30890a565cc6d68da3
SHA1 05ce215db950fe369e8b2914bc1b5f8a70ef75d5
SHA512 47a2cf7ded57cd580654ee25ab51c735a5893784ff152e41e7c2955611c9ef72cf79bf3d9fd077bbf3b9d68313d8fda95ab4bc1ae8b996ce69148bb91f573592
MD5 SHA1 SHA512

NSIS installer

installer

uninst.exe

IMPHASH 7fa974366048f9c551ef45714595665e
SHA256 a8506ef0573b4da47ff1ccc734a3c0ff0c49bd9a48d775a4c7b583c8c95c5ec9
MD5 61524259f9f6b65fa7f5648816caf581
SHA1 fe669b9b354e91075ee16ba664226cb6ce3f9dec
SHA512 26d36267baaaa55f5d84fca1f4ee8f6c3689e40842733acc9c649d4bd13a7a1f723f9a58d6129d6215995047725c8ac073bf8c8fb42adefe3c747addd40428d9
SSDEEP 6144:Ke34AK7ALeWjUZ/22oDxMccMvEHUc0jmQ:U719Z+2+c2Egjh
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

e0:1a:c9:73:61:ea:0f:57:15:bc:4a:5f:94:8d:14:1f:aa:ff:46:48

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shanghai Quan Tudou Network Technology Co.\, Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Shanghai Quan Tudou Network Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Chains

Sep 6, 2013

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Shanghai Quan Tudou Network Technology Co.\, Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Shanghai Quan Tudou Network Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Serial Number

4a:28:9f:c3:6a:df:a8:c4:6a:a3:80:2b:9e:73:8d:20

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 28, 2012 - Jun 27, 2015

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

0

Major OS version

4

Entry point

12538

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CompareFileTime SearchPathA GetShortPathNameA GetFullPathNameA MoveFileA SetCurrentDirectoryA GetFileAttributesA GetLastError CreateDirectoryA SetFileAttributesA Sleep GetTickCount GetFileSize GetModuleFileNameA GetCurrentProcess CopyFileA ExitProcess GetWindowsDirectoryA SetFileTime GetCommandLineA SetErrorMode LoadLibraryA lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread CreateProcessA RemoveDirectoryA CreateFileA GetTempFileNameA lstrlenA lstrcatA GetSystemDirectoryA GetVersion CloseHandle lstrcmpiA lstrcmpA ExpandEnvironmentStringsA GlobalFree GlobalAlloc WaitForSingleObject GetExitCodeProcess GetModuleHandleA LoadLibraryExA GetProcAddress FreeLibrary MultiByteToWideChar WritePrivateProfileStringA GetPrivateProfileStringA WriteFile ReadFile MulDiv SetFilePointer FindClose FindNextFileA FindFirstFileA DeleteFileA GetTempPathA

user32

EndDialog ScreenToClient GetWindowRect EnableMenuItem GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard RegisterClassA TrackPopupMenu AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA DestroyWindow CreateDialogParamA SetTimer SetWindowTextA PostQuitMessage SetForegroundWindow wsprintfA SendMessageTimeoutA FindWindowExA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA OpenClipboard ExitWindowsEx IsWindow GetDlgItem SetWindowLongA LoadImageA GetDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint ShowWindow

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectA SetBkMode SetTextColor SelectObject

shell32

SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA SHGetSpecialFolderLocation

advapi32

RegQueryValueExA RegSetValueExA RegEnumKeyA RegEnumValueA RegOpenKeyExA RegDeleteKeyA RegDeleteValueA RegCloseKey RegCreateKeyExA

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

$PLUGINSDIR/GetVersion.dll

IMPHASH 0125039a427c6f95b3acc9227413ece5
SHA256 db09adb6e17b6a0b31823802431ff5209018ee8c77a193ac8077e42e5f15fb00
MD5 2e2412281a205ed8d53aafb3ef770a2d
SHA1 3cae4138e8226866236cf34f8fb00dafb0954d97
SHA512 6d57249b7e02e1dfed2e297ec35fb375ecf3abc893d68694f4fa5f2e82ec68c129af9cc5ce3dd4025147309c0832a2847b69334138f3d29c5572ff4e1b16f219
SSDEEP 96:E12kx1WhoMHF7ZmIpNkTif0geoBLERrqm1BdROBh6Hx2WsTDBi46AQuP:Xll7A6NkOMiBEReEBdRwiMTDBi46AQu
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

4160

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/InstallOptions.dll

IMPHASH b1cd0d78f652ce5fc63f0879371af012
SHA256 c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b
MD5 325b008aec81e5aaa57096f05d4212b5
SHA1 27a2d89747a20305b6518438eff5b9f57f7df5c3
SHA512 18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf
SSDEEP 192:86d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jwK72dwF7dBEnbok:86UdHXcIiY535zBt2jw+BEnbo
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

10696

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

SetCurrentDirectoryA GetCurrentDirectoryA MultiByteToWideChar GetPrivateProfileIntA GlobalLock GetModuleHandleA lstrcmpiA GetPrivateProfileStringA lstrcatA lstrcpynA WritePrivateProfileStringA lstrlenA lstrcpyA GlobalFree GlobalUnlock GlobalAlloc

user32

MapWindowPoints GetDlgCtrlID CloseClipboard GetClipboardData OpenClipboard PtInRect SetWindowRgn LoadIconA LoadImageA SetWindowLongA CreateWindowExA MapDialogRect SetWindowPos GetWindowRect CreateDialogParamA ShowWindow EnableMenuItem GetSystemMenu EnableWindow GetDlgItem DestroyIcon DestroyWindow DispatchMessageA TranslateMessage GetMessageA IsDialogMessageA LoadCursorA SetCursor DrawTextA GetWindowLongA DrawFocusRect CallWindowProcA PostMessageA MessageBoxA CharNextA wsprintfA GetWindowTextA SetWindowTextA SendMessageA GetClientRect

gdi32

SetTextColor CreateCompatibleDC GetObjectA GetDIBits CreateRectRgn CombineRgn DeleteObject SelectObject

shell32

SHBrowseForFolderA SHGetDesktopFolder SHGetPathFromIDListA ShellExecuteA

comdlg32

GetOpenFileNameA GetSaveFileNameA CommDlgExtendedError

ole32

CoTaskMemFree

$PLUGINSDIR/NSISdl.dll

IMPHASH 9cce555dd3ff1b6c7dc92d64c794c51a
SHA256 dacc88a12d3ba438fdae3535dc7a5a1d389bce13adc993706424874a782e51c9
MD5 a5f8399a743ab7f9c88c645c35b1ebb5
SHA1 168f3c158913b0367bf79fa413357fbe97018191
SHA512 824e567f5211bf09c7912537c7836d761b0934207612808e9a191f980375c6a97383dbc6b4a7121c6b5f508cbfd7542a781d6b6b196ca24841f73892eec5e977
SSDEEP 192:tUZTobBDJ68r67wmsvJI5ad9cXzFOVu+mZ/P3p+57CvpVqDxVp01Dwn2GRPgsfA:6Bo/680dCI5adOjFOg9//p27uNw2Go
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

8903

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/Rfshdktp.dll

IMPHASH 042f3c184e7c0923b6325ab1dc09aed7
SHA256 acc76e81f71e7f2ba58c36d678bc9ae4705e0187a3cdfa6d0025190467d9c0c7
MD5 9410591a148871a6d0629cf25b94526f
SHA1 be1e8b0fe8327f185136a0d2460a68f720484535
SHA512 465d3e418e769b907262e07cbca3d2c5132bf328431d456be09c059821be20a6d30106562d7ef0bfa93ca219b2abe57ee891d937419fc4b8840987b184b45df0
MD5 SHA1 SHA512

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

4165

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/System.dll

IMPHASH 2017f2acbdaa42ab3e4adeb8b4c37e7b
SHA256 dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
MD5 c17103ae9072a06da581dec998343fc1
SHA1 b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
SHA512 d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
SSDEEP 192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

10544

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/UAC.dll

IMPHASH 55a6a096df3564193c302728985d6bda
SHA256 a6d956f28c32e8aa2ab2df13ef52637e23113fab41225031e7a3d47390a6cf13
MD5 431e5b960aa15af5d153bae6ba6b7e87
SHA1 e090c90be02e0bafe5f3d884c0525d8f87b3db40
SHA512 f1526c7e4d0fce8ab378e43e89aafb1d7e9d57ef5324501e804091e99331dd2544912181d6d4a07d30416fe17c892867c593aee623834935e11c7bb385c6a0a8
SSDEEP 192:vIARvmFvcukSWn8EAKVZ8148Dj33RZgqWVWYuOUEjRuFzEun0J:v2mukSe8EA88pRZAVWYuO3cFznny
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

11736

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

CreateProcessA GlobalAlloc lstrlenA GetVersionExA SetLastError GetProcAddress lstrcmpiA GetCurrentThreadId GetCommandLineA UnmapViewOfFile WaitForSingleObject GetCurrentProcessId GetLastError DuplicateHandle SetCurrentDirectoryA MapViewOfFile Sleep OpenProcess GetExitCodeProcess GetModuleHandleA GetExitCodeThread CreateThread CreateFileMappingA CreateEventA MultiByteToWideChar FormatMessageA LocalFree GlobalFree CloseHandle GetModuleFileNameA lstrcatA GetPrivateProfileIntA GetPrivateProfileStringA SetEvent LoadLibraryA

user32

DialogBoxParamA CharNextA CallNextHookEx SetForegroundWindow IsWindowVisible GetClassNameA SetWindowsHookExA DispatchMessageA TranslateMessage IsDialogMessageA PeekMessageA MsgWaitForMultipleObjects DefWindowProcA PostMessageA CreateWindowExA GetWindowThreadProcessId CallWindowProcA SetWindowPos GetWindowRect UnhookWindowsHookEx GetClientRect FindWindowExA LoadIconA CreateDialogParamA GetWindowLongA SendMessageW MessageBoxA EndDialog SetWindowLongA DestroyWindow EnableWindow ShowWindow wsprintfA GetDlgItem SendMessageA LoadStringA LoadImageA

advapi32

GetUserNameA OpenSCManagerA CloseServiceHandle EqualSid GetTokenInformation OpenProcessToken AdjustTokenPrivileges LookupPrivilegeValueA QueryServiceStatus OpenServiceA

shell32

ShellExecuteExA

ole32

CoInitialize

$PLUGINSDIR/inetc.dll

IMPHASH 3f1149a3053980fe6b461521d2b55a2c
SHA256 f51fcc30e929a64756e04b514e103aa54c135c47d62511efee279f168f63b3c3
MD5 b720695fab871bacd48c54aea304c310
SHA1 e2250a8d65594d802cd95e8dde79f813ff9773c7
SHA512 c277bf5de16aa7f6aa39eda9afb010f8fa407bf4fef54b2a5947fd6c698204052b3f97e587ca59c5faf256c29a03e9de6c37033c5ede5666e3743b86f2ed411b
SSDEEP 384:jwB2ZUVHUxgoJX0eBA6PcH85db+ya9cC0Ac9khYLMkIX0+G5fQ6mT+m//a:jfUFeJ5S6PHLNa9c8am/
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

14255

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

msvcrt

_mbschr _adjust_fdiv malloc _initterm free _mbsrchr strtoul memset _mbsstr strtol

kernel32

CloseHandle CreateThread WaitForSingleObject TerminateThread GetModuleHandleA MulDiv lstrcpyA GlobalAlloc LoadLibraryA GetProcAddress lstrlenA WriteFile ReadFile lstrcmpA lstrcpynA GetLastError GlobalFree lstrcmpiA DeleteFileA SleepEx SetFilePointer GetTickCount lstrcatA GetFileSize CreateFileA

user32

MessageBoxA GetParent ShowWindow PostMessageA SetWindowTextA GetWindowTextA IsWindow GetDlgItem SetDlgItemTextA SendDlgItemMessageA SetWindowPos SystemParametersInfoA GetClientRect GetWindowRect SetTimer LoadIconA SetWindowLongA GetWindowLongA UpdateWindow DestroyWindow KillTimer RedrawWindow DispatchMessageA TranslateMessage GetMessageA IsDialogMessageA IsWindowVisible EnableWindow CreateDialogParamA FindWindowExA wsprintfA SendMessageA

wininet

HttpSendRequestA HttpSendRequestExA HttpQueryInfoA FtpCreateDirectoryA FtpOpenFileA InternetGetLastResponseInfoA InternetSetFilePointer InternetSetOptionA InternetQueryOptionA InternetCloseHandle InternetErrorDlg HttpOpenRequestA HttpAddRequestHeadersA HttpEndRequestA InternetConnectA InternetCrackUrlA InternetOpenA InternetReadFile InternetWriteFile

comctl32

ord17

$PLUGINSDIR/ioSpecial.ini

SHA256 d95aed234f932a1c48a2b1b0d98c60ca31f962310c03158e2884ab4ddd3ea1e0
MD5 e2d5070bc28db1ac745613689ff86067
SHA1 282e080b4cf847174c5c11e4f9157b8c338ecb19
SHA512 a50ca2014869629135b54e848f03cb4983ad8029cd811300d02b0fc54de0436185f418fea4d3db888eb0f3170e33a59d486aa885f024ab29e630e9bc0ae1a2de
MD5 SHA1 SHA512

NSIS installer

installer

$PLUGINSDIR/modern-wizard.bmp

SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
MD5 cbe40fd2b1ec96daedc65da172d90022
SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/nsProcess.dll

IMPHASH c9fc7f6df8fedf8f8f1f9f820c072664
SHA256 95fe9d92512ff2318cc2520311ef9145b2cee01209ab0e1b6e45c7ce1d4d0e89
MD5 05450face243b3a7472407b999b03a72
SHA1 ffd88af2e338ae606c444390f7eaaf5f4aef2cd9
SHA512 f4cbe30166aff20a226a7150d93a876873ba699d80d7e9f46f32a9b4753fa7966c3113a3124340b39ca67a13205463a413e740e541e742903e3f89af5a53ad3b
MD5 SHA1 SHA512

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

4255

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

ver.ini

SHA256 0072ab9d95442f946ae53bd5cf4cb5e978062065f56adedc0af677ea4a50e9c4
MD5 991c6b5f52a22b021407cfe437e7d226
SHA1 4685104c2ae66019c99d572addb05e90714b959d
SHA512 adf5400af57eef22a29b20d83e2149fbcc21975fca6e368f0707cf5cf967ea56ebf6e199532c15f72d078faee7cb0a98158ce5a95bcc6d99785b6334c1f0c11f
MD5 SHA1 SHA512

NSIS installer

installer

Sharing

General

Malware Config

Signatures

File Explorer