a7a01d4e315bfc29e1508b7b4f27e908_JaffaCakes118

resource
a7a01d4e315bfc29e1508b7b4f27e908_JaffaCakes118
unpack001/$PLUGINSDIR/SimpleSC.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/nsBR.dll
unpack001/$PLUGINSDIR/nsExec.dll
unpack001/$PLUGINSDIR/nsURL.dll
unpack001/$PLUGINSDIR/tkDecript.dll
unpack001/$PROGRAMFILES/BrowserProtect/$PROGRAMFILES/BrowserProtect/uninstall.exe
unpack002/$PLUGINSDIR/SimpleSC.dll
unpack002/$PLUGINSDIR/nsExec.dll
unpack001/$PROGRAMFILES/BrowserProtect/BrowserProtectIU.exe
unpack001/$PROGRAMFILES/BrowserProtect/BrowserProtectIUW8.exe
unpack001/$PROGRAMFILES/BrowserProtect/Interop.Shell32.dll
unpack001/$PROGRAMFILES/BrowserProtect/Newtonsoft.Json.dll
unpack001/$PROGRAMFILES/BrowserProtect/proxy/myproxy.exe
unpack001/$PROGRAMFILES/BrowserProtect/proxy/zlibwapi.dll
unpack001/$PROGRAMFILES/BrowserProtect/srvBrowserProtect.exe
unpack001/$PROGRAMFILES/BrowserProtect/srvBrowserProtectW8.exe

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2
static1/unpack001/$PROGRAMFILES/BrowserProtect/$PROGRAMFILES/BrowserProtect/uninstall.exe	nsis_installer_1
static1/unpack001/$PROGRAMFILES/BrowserProtect/$PROGRAMFILES/BrowserProtect/uninstall.exe	nsis_installer_2

IMPHASH 7fa974366048f9c551ef45714595665e
SHA256 e09d287da02d0f416cd389cd7ae620c9497b396fd5eb9b0340f2a8d13bf0379f
MD5 a7a01d4e315bfc29e1508b7b4f27e908
SHA1 1eb5d96fe61422419a5645c891bf86d690f2a2f1
SHA512 f60a72c0378d86513bbc1ed069db2618e1cc55fe4c6264ac3058cd8f3129f8a82b95f66195af04153f10a97f9bb417be762304463c6ebcb1005a2ea2e18ab141
SSDEEP 24576:XodoXzjRDuiDiNTtRw0JhkdsTezBMOQtBf2SBd:nuyiXasTmxQtYsd
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

12538

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CompareFileTime SearchPathA GetShortPathNameA GetFullPathNameA MoveFileA SetCurrentDirectoryA GetFileAttributesA GetLastError CreateDirectoryA SetFileAttributesA Sleep GetTickCount GetFileSize GetModuleFileNameA GetCurrentProcess CopyFileA ExitProcess GetWindowsDirectoryA SetFileTime GetCommandLineA SetErrorMode LoadLibraryA lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread CreateProcessA RemoveDirectoryA CreateFileA GetTempFileNameA lstrlenA lstrcatA GetSystemDirectoryA GetVersion CloseHandle lstrcmpiA lstrcmpA ExpandEnvironmentStringsA GlobalFree GlobalAlloc WaitForSingleObject GetExitCodeProcess GetModuleHandleA LoadLibraryExA GetProcAddress FreeLibrary MultiByteToWideChar WritePrivateProfileStringA GetPrivateProfileStringA WriteFile ReadFile MulDiv SetFilePointer FindClose FindNextFileA FindFirstFileA DeleteFileA GetTempPathA

user32

EndDialog ScreenToClient GetWindowRect EnableMenuItem GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard RegisterClassA TrackPopupMenu AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA DestroyWindow CreateDialogParamA SetTimer SetWindowTextA PostQuitMessage SetForegroundWindow wsprintfA SendMessageTimeoutA FindWindowExA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA OpenClipboard ExitWindowsEx IsWindow GetDlgItem SetWindowLongA LoadImageA GetDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint ShowWindow

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectA SetBkMode SetTextColor SelectObject

shell32

SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA SHGetSpecialFolderLocation

advapi32

RegQueryValueExA RegSetValueExA RegEnumKeyA RegEnumValueA RegOpenKeyExA RegDeleteKeyA RegDeleteValueA RegCloseKey RegCreateKeyExA

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

$PLUGINSDIR/SimpleSC.dll

SHA256 e0c580bbe48a483075c21277c6e0f23f3cbd6ce3eb2ccd3bf48cf68f05628f43
MD5 d63975ce28f801f236c4aca5af726961
SHA1 3d93ad9816d3b3dba1e63dfcbfa3bd05f787a8c9
SHA512 8357e1955560bf0c42a8f4091550c87c19b4939bf1e6a53a54173d1c163b133b9c517014af6f7614eddc0c9bbf93b3b987c4977b024b10b05b3dc4eb20141810
SSDEEP 1536:i/qXv1si+Xsp9MNptZ8KMT6+nMA4fx+kmA:Bv1EXZnLMT5M3x+km
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

52320

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

47KB

Virtual Size

47KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

1024B

Virtual Size

950B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

$PLUGINSDIR/System.dll

IMPHASH 2017f2acbdaa42ab3e4adeb8b4c37e7b
SHA256 dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
MD5 c17103ae9072a06da581dec998343fc1
SHA1 b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
SHA512 d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
SSDEEP 192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

10544

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/nsBR.dll

IMPHASH d72efa71858454931b0d55eaf55f5be7
SHA256 99378990a56718900816dcaf66c377e89216e8165cafafc0593b24b5262de5e6
MD5 b505e79e29bd52d8d7d153d7a228dffb
SHA1 9b7e08eede7e30eaf192ae1515e13cc8dd3962f0
SHA512 9388211085d47ddad412d9d00b6454b086c0deb088272f6377deda90e08df1e5cfc7a754117c1a6bedea3bde66c9a63b5634bf82a8201e53255c538a4724c739
SSDEEP 3072:7xZ5/bNy3DpLei+D3NlRSOykAIw+M3Y9igDjfMRg:tT/bUleVNGO2EkRg
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

1

Major OS version

5

Entry point

39260

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\Proyectos\desktop_apps\NSIS\NSIS DLLs\Release\nsBR.pdb

kernel32

lstrcpyA GlobalFree GlobalAlloc lstrcpynA SetEndOfFile CreateFileW InterlockedIncrement InterlockedDecrement EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection Sleep WideCharToMultiByte MultiByteToWideChar GetStringTypeW GetLastError HeapFree FindFirstFileExA FindNextFileA SystemTimeToTzSpecificLocalTime FileTimeToSystemTime FindClose GetCommandLineA GetCurrentThreadId RaiseException RtlUnwind HeapAlloc InitializeCriticalSectionAndSpinCount GetCPInfo IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW GetProcAddress CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW IsDebuggerPresent GetStdHandle GetFileType GetProcessHeap ExitProcess GetModuleHandleExW AreFileApisANSI ReadFile SetFilePointerEx FlushFileBuffers WriteFile GetConsoleCP GetConsoleMode HeapSize GetModuleFileNameW CloseHandle GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW GetACP SetFilePointer IsValidCodePage GetOEMCP HeapReAlloc GetTimeZoneInformation LoadLibraryExW ReadConsoleW SetStdHandle WriteConsoleW OutputDebugStringW LoadLibraryW SetEnvironmentVariableA

advapi32

RegSetValueExA RegCloseKey RegOpenKeyExA RegQueryValueExA

shell32

SHGetFolderPathA

$PLUGINSDIR/nsExec.dll

IMPHASH d83f71e61ee459ee63ca3e829966a9dc
SHA256 168a974eaa3f588d759db3f47c1a9fdc3494ba1fa1a73a84e5e3b2a4d58abd7e
MD5 acc2b699edfea5bf5aae45aba3a41e96
SHA1 d2accf4d494e43ceb2cff69abe4dd17147d29cc2
SHA512 e29ea10ada98c71a18273b04f44f385b120d4e8473e441ce5748cfa44a23648814f2656f429b85440157988c88de776c6ac008dc38bf09cbb746c230a46c69fe
SSDEEP 96:M7GUb+YNfwgcr8zyKwZ5S4JxN8BS0ef9/3VI9d0qqyVgNk32E:eKgfwgcr8zylsB49Ud0qJVgNX
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

4231

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/nsURL.dll

IMPHASH 9436459f0afe54c32c76e7444e96bb7f
SHA256 9f50688db497c70cc2c84558dcb71b19d076f983557f2b7de8a742fa804ba060
MD5 6b997e803a10663fa4a2995c030ba1a9
SHA1 3f81a5fc93601f04a4327ffd7c5a063dbf50a882
SHA512 4cb8ecc7bb54c9e506e5061b452d474fd077b9f34b89384f54647dffabd77138fc4ad43e3fc14c6a65da21d72f655cf40560d53179a8317bb7b04382ff5bd776
SSDEEP 1536:cuWFAmRWGSftKsou2XLQlJ34ecUzL+Tnc1QOz9/sWjcdBMFC7+j:cuWFtpSYsmUPtX+Tp69ABMFCSj
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

6

Entry point

21971

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\Proyectos\desktop_apps\NSIS\NSIS DLLs\Release\nsURLs.pdb

wininet

InternetQueryOptionA InternetCloseHandle InternetOpenA InternetSetFilePointer InternetSetOptionA InternetReadFile InternetOpenUrlA HttpQueryInfoA

kernel32

GetACP ReadFile SetEndOfFile CreateFileW GetStringTypeW WriteConsoleW SetFilePointerEx SetStdHandle lstrcpynA GlobalAlloc GlobalFree lstrcpyA Sleep GetLastError EncodePointer DecodePointer IsDebuggerPresent IsProcessorFeaturePresent GetCommandLineA GetCurrentThreadId RaiseException RtlUnwind InterlockedDecrement ExitProcess GetModuleHandleExW GetProcAddress AreFileApisANSI MultiByteToWideChar HeapSize GetStdHandle WriteFile GetModuleFileNameW HeapFree HeapAlloc EnterCriticalSection LeaveCriticalSection FlushFileBuffers WideCharToMultiByte GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount DeleteCriticalSection InterlockedIncrement IsValidCodePage ReadConsoleW GetOEMCP GetCPInfo SetLastError UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW CloseHandle GetProcessHeap GetFileType GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW LoadLibraryExW HeapReAlloc OutputDebugStringW LoadLibraryW LCMapStringW

$PLUGINSDIR/tkDecript.dll

IMPHASH 08baf3c404a85e8e1acfb586ba23b61e
SHA256 0ae09d65f5284409e6d9a2d40d7aaa8cbf1dd1815e67a9c12a9557f5de1f7832
MD5 ea79ad436f5e54ee5dc2aba13fe1b15a
SHA1 66e248962bfb1f370796dac393621367638c21b1
SHA512 dbd40403126c6ef6f5747c900809140c8897376f03696247cd8d10431bec7abb0c7191761e8ea551cfde2234059ec087ffbca54510ddf0dc78b8329f598fab2e
SSDEEP 3072:db0IC6Lh2wWcNA5ZX9VZo6w+ck5yUbTIQ2npANCrYJ5+S+cHOZjvqte36wI1:db0GLhqa8ZorcyQiTrcwZjiu6wi
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

1

Major OS version

5

Entry point

69154

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\Proyectos\desktop_apps\NSIS\NSIS DLLs\Release\tkDecript.pdb

kernel32

CreateFileA GetFileSize lstrcpynA WriteFile GlobalAlloc ReadFile GlobalFree CloseHandle GetSystemTime lstrcpyA InterlockedIncrement InterlockedDecrement EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection Sleep WideCharToMultiByte MultiByteToWideChar GetStringTypeW IsDebuggerPresent IsProcessorFeaturePresent GetLastError HeapFree HeapReAlloc GetSystemTimeAsFileTime GetCommandLineA GetCurrentThreadId RaiseException RtlUnwind HeapAlloc InitializeCriticalSectionAndSpinCount GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW GetProcAddress CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW IsValidCodePage GetACP GetOEMCP ExitProcess GetModuleHandleExW HeapSize GetStdHandle GetModuleFileNameW GetProcessHeap GetFileType GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetEnvironmentStringsW FreeEnvironmentStringsW LoadLibraryExW OutputDebugStringW LoadLibraryW GetConsoleCP GetConsoleMode SetFilePointerEx SetStdHandle WriteConsoleW FlushFileBuffers CreateFileW

$PROGRAMFILES/BrowserProtect/$PROGRAMFILES/BrowserProtect/uninstall.exe

IMPHASH 7fa974366048f9c551ef45714595665e
SHA256 743db6766f6e4eba40a3ee18a794c9995dbb2c891cc8ae929d12d3ce0504405a
MD5 e44f4e01f536961ffcd21866f36ee60f
SHA1 3e63e3ab22e02f74bace174c0c0b21c33826226f
SHA512 81f4898fcc10dc21e83a43801ad820608d2e9f7a50043668eddaf7276317b68bd36370982b6bdd2403371ef2177ac30aefa342248973a1068515a7d25eefdde0
SSDEEP 1536:3fYBrbzmFizYwUK1G0DRXJCCEf2ielVGr+8LqFXoD1Dx:vY4FizYxCDRXJCCEOieqruV6Dx
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

12538

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CompareFileTime SearchPathA GetShortPathNameA GetFullPathNameA MoveFileA SetCurrentDirectoryA GetFileAttributesA GetLastError CreateDirectoryA SetFileAttributesA Sleep GetTickCount GetFileSize GetModuleFileNameA GetCurrentProcess CopyFileA ExitProcess GetWindowsDirectoryA SetFileTime GetCommandLineA SetErrorMode LoadLibraryA lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread CreateProcessA RemoveDirectoryA CreateFileA GetTempFileNameA lstrlenA lstrcatA GetSystemDirectoryA GetVersion CloseHandle lstrcmpiA lstrcmpA ExpandEnvironmentStringsA GlobalFree GlobalAlloc WaitForSingleObject GetExitCodeProcess GetModuleHandleA LoadLibraryExA GetProcAddress FreeLibrary MultiByteToWideChar WritePrivateProfileStringA GetPrivateProfileStringA WriteFile ReadFile MulDiv SetFilePointer FindClose FindNextFileA FindFirstFileA DeleteFileA GetTempPathA

user32

EndDialog ScreenToClient GetWindowRect EnableMenuItem GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard RegisterClassA TrackPopupMenu AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA DestroyWindow CreateDialogParamA SetTimer SetWindowTextA PostQuitMessage SetForegroundWindow wsprintfA SendMessageTimeoutA FindWindowExA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA OpenClipboard ExitWindowsEx IsWindow GetDlgItem SetWindowLongA LoadImageA GetDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint ShowWindow

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectA SetBkMode SetTextColor SelectObject

shell32

SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA SHGetSpecialFolderLocation

advapi32

RegQueryValueExA RegSetValueExA RegEnumKeyA RegEnumValueA RegOpenKeyExA RegDeleteKeyA RegDeleteValueA RegCloseKey RegCreateKeyExA

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

$PLUGINSDIR/SimpleSC.dll

SHA256 e0c580bbe48a483075c21277c6e0f23f3cbd6ce3eb2ccd3bf48cf68f05628f43
MD5 d63975ce28f801f236c4aca5af726961
SHA1 3d93ad9816d3b3dba1e63dfcbfa3bd05f787a8c9
SHA512 8357e1955560bf0c42a8f4091550c87c19b4939bf1e6a53a54173d1c163b133b9c517014af6f7614eddc0c9bbf93b3b987c4977b024b10b05b3dc4eb20141810
SSDEEP 1536:i/qXv1si+Xsp9MNptZ8KMT6+nMA4fx+kmA:Bv1EXZnLMT5M3x+km
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

52320

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

47KB

Virtual Size

47KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

1024B

Virtual Size

950B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

$PLUGINSDIR/nsExec.dll

IMPHASH d83f71e61ee459ee63ca3e829966a9dc
SHA256 168a974eaa3f588d759db3f47c1a9fdc3494ba1fa1a73a84e5e3b2a4d58abd7e
MD5 acc2b699edfea5bf5aae45aba3a41e96
SHA1 d2accf4d494e43ceb2cff69abe4dd17147d29cc2
SHA512 e29ea10ada98c71a18273b04f44f385b120d4e8473e441ce5748cfa44a23648814f2656f429b85440157988c88de776c6ac008dc38bf09cbb746c230a46c69fe
SSDEEP 96:M7GUb+YNfwgcr8zyKwZ5S4JxN8BS0ef9/3VI9d0qqyVgNk32E:eKgfwgcr8zylsB49Ud0qJVgNX
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

4231

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PROGRAMFILES/BrowserProtect/BrowserProtectIU.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 2f2bede54a8b5b2a5d88ae408a5ca8275f90929ddbda9a8301c69b4cc268014c
MD5 d802c92fafdd7d2d9507bf7e028d0e5a
SHA1 752210a3fdb41540a3b9a41eaa652860cb7496bf
SHA512 c6616ee3e9687cf38b4a58d9c80aa275aa819455956a1bd92d0eca80720b4466d0a7d5680a72b3a219dad81ac405c674c18919ee77f8a0cf08606a4a87efff9d
SSDEEP 768:cVyXnPcJtqW9b8hrdmEe+YEvvwCYZVDlKLtdSKY8YnAx9YgX7B1Du6+/SKWoGG:8APetqW94hB17vvwZly1XYABpKY
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

59246

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

$PROGRAMFILES/BrowserProtect/BrowserProtectIU.exe.config

SHA256 2999ab1da8df1292976a91f602cd2060705c8a940bad932bbcd76aae5a2cc184
MD5 1a9c84024cdcb2ba7c12abab7b311282
SHA1 a62ad60b787ee1593c2b31c6a6b57d19a64accdb
SHA512 081e2f33deb40a0306a96f3f5e336d520943c3f756023233cc8dcd3bf9b16954f4c0eb94ec11283762e81b0026b7e4dc064997b2037eda567fc3d907038399de
MD5 SHA1 SHA512

NSIS installer

installer

$PROGRAMFILES/BrowserProtect/BrowserProtectIUW8.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 324e94268783c904cc90b3675014bf4e20ef212fc03f2b8d79958f6d847a0cc3
MD5 f618b67c07100caae467f60fe27e219e
SHA1 fe766a532d2b704956bf5bd647e4382f4c2df135
SHA512 ac99fd8e3dda1e2334f9c7b8d732feefd76dc12d4dc1390ec8c4f892080cc130e6b99542b4ca9556360538e1f2e8ec227bf86ec2d6cc7a1c2a1c4c0fe9282a8b
SSDEEP 768:KVbXw46WtqW3b8hrdmEe+YEvv2CYZVDldLDnuyiJ1Cg1Du6+SSxzrPP:GU4PtqW34hB17vv2Zll501Th8xv
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

59198

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

$PROGRAMFILES/BrowserProtect/BrowserProtectIUW8.exe.config

SHA256 4b6fba261afdb20590dbd099f494efe5b256a7d0661c85e6fca89901df844adb
MD5 00f0d7dee636cde3339f426e8e775e51
SHA1 dd60b7c2d7d2609b3e4d50d9965536b67908182b
SHA512 32c512a4a2019b4a1cb1c5d9e8a5723c0449739db830514083c547e33bf9c3adf15e3be7cc33e5e173fbd81cf7e2ef51c1b5be10f44524e8687c0b172239f829
MD5 SHA1 SHA512

NSIS installer

installer

$PROGRAMFILES/BrowserProtect/Interop.Shell32.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 670fc71ea0168dd33baff537f228291664b6b6235058e01f885694a350bc9697
MD5 c17c43d57b73f254d6fda553569b2729
SHA1 ed0651e79c682892225532d98e4f99373f21915c
SHA512 3987a172225fa074dd6b3c9b346600ba06785d21eda9fc0bc7eba5c4da08128d06deb29e6d37ff7966bc08256e1d0a78034d3e34257a4f37ff8618604d77203a
SSDEEP 768:dexl81nX6ZxlvUAa7KoBv7epginbCe7AXjuw9tL0Duxj7tr+BrKFHy:dexl81nK34PJepgqcVzdy
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

42782

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PROGRAMFILES/BrowserProtect/Newtonsoft.Json.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 4624ddb20a69aa2c27377993adf6edb5e52292caf7b2fb1dcd91a078eeb10d29
MD5 b67ed4bdfbb671169cc186e745d86a1a
SHA1 c39bfc8885bd74c708a841180ec8a4cb8b6491af
SHA512 9831b5b44d0cc38cbb02ea5f0812d44e079e62efa16cc7c494376ad20da6a00265926bf4fa99a0a148f8b650bb4de6e7243028d5afeffd6c904ab7e897fe47e5
SSDEEP 6144:oirJ6jtXlvw1YRsWQv8MAOX54Vhsu27v1GmBhmLIPr0tqKx5g6e2Mb:oA6VlI1E/+kx2zd/QoKL3e2M
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

411534

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\Temp\Json\Working\Newtonsoft.Json\Src\Newtonsoft.Json\obj\Release\Newtonsoft.Json.pdb

$PROGRAMFILES/BrowserProtect/Web Data

SHA256 95ac6c2369f7ce692ad7be38c9992608a65c2c467921c4dba048636814332cee
MD5 6aa26c52b479374a285c462af3a57756
SHA1 fe130f4130a83c395eece2943a3d9af2f6bcdea9
SHA512 c56cae76442135363389ea616be5ef164c052876453e6279abc2e6dfa0db82f2a2ce7002749cf5adb6652bcbb15b86e07630d8e90541f0766a9c23a11866f4e3
SSDEEP 96:oYtJnHEcIu/qqNayKMeGYLUg7ftaE4Vaw6uKqIdEQ/N8JHsPD7374kd4dcd76dg9:7tJn8jzoV6F
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PROGRAMFILES/BrowserProtect/config.xml

SHA256 6e1a409d1993a6b5bd44d2361d76f3bbac5e635d2226ac14158d46c5fd5597d4
MD5 7d8fe2c71e3262254cd6bca705d642ba
SHA1 d31e9087b60ee919a782dd8adefb5274d874357e
SHA512 458b1c3832db5fc8d2539def54d2a390b6585582848ed386345a63373e7a661b1e8a6f86ae50c3392a160469f6d9ef13f92af9fe5f6c2a0aef6bb3c939b16f52
MD5 SHA1 SHA512

NSIS installer

installer

$PROGRAMFILES/BrowserProtect/proxy/config

SHA256 0a93fb1d713c38f31c334af2ebbd64c0bde2b7b16b089a91dc273035876fcc21
MD5 330fdbc08f2b06e37bd420540f514933
SHA1 bf8c81a464b8597d0968fcb0dad90d2c16ebd444
SHA512 a08da934dece77f1e2fc326eaa62c2470f768a20abc48418cb9cdffe7022d7152a4053e7f9d3ecac69c6c258faedf881f0811af604ed11ffe98f9da6b23e9b42
MD5 SHA1 SHA512

NSIS installer

installer

$PROGRAMFILES/BrowserProtect/proxy/exclusions

SHA256 3af900ec21f937031b0418963d3973a9284029285bf699968b203662f704dd48
MD5 8a0eb050766590d44f85948b5ea1085c
SHA1 c2e46fbf978c70fa3632666923fc2f493d4e7050
SHA512 0e61970a106ba45c2bcd66a1048c289db404461909a067bad6d6017ce9e8570e2b0749c492d8cb8fcf15077497837f22ce7fd9217d06d187dfe772685ae881c1
MD5 SHA1 SHA512

NSIS installer

installer

$PROGRAMFILES/BrowserProtect/proxy/matches

SHA256 23ce55ec90679cf94925fb82674c74097074f7ba48e7a8d02e70e2cfec6fce21
MD5 9aa3b83f11e7ac2fe8f8bbc374bdea22
SHA1 74f062b413ff991579fa44b7a4d2adde4878d38a
SHA512 827d953cbebf96fbb7f1e12002048c04623ce2e3e3702250d05c8f3a26876410c83512cae1fe151d08fb2cb98cb6ae790be4ba1ca65404836348281eeee08684
MD5 SHA1 SHA512

NSIS installer

installer

$PROGRAMFILES/BrowserProtect/proxy/myproxy.exe

IMPHASH ea2ce6d5b6cba2af6e348ac7131be809
SHA256 066bb8d49c0a17bb0f391121709db85d307723ec541e682a96d665078647486c
MD5 cfd558a1fa85a809ae86d470808dc488
SHA1 470953b37076895d4d5e4aaf2cf6cfeb455eab37
SHA512 352c4f470e8038c2662a73134afa52769074d8dffee0d5d45603816505fe272f267bfe33f79481e8afdbf5c8d3ecc4e61fdb27f43ebf9a39136bf14a7e391ec5
SSDEEP 3072:eLUOd9Q6ZdmqmwbXymCrMD3PRexQlM+5Pm6SpD53usxHpWYoteP8+hJ3KC1Cvz:EIqmohferIPXSJwY1kY1Cr
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

1

Major OS version

5

Entry point

115807

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Proyectos\desktop_apps\Coupons_Offers\Release\myproxy.pdb

zlibwapi

ord6 ord4 ord7 ord20 ord19 ord21

kernel32

RaiseException SetEndOfFile CreateFileW LoadLibraryW OutputDebugStringW WriteConsoleW SetStdHandle GetModuleFileNameA GetLastError WaitForSingleObject ReleaseMutex Sleep CreateMutexW ReadConsoleW SetFilePointer FreeEnvironmentStringsW GetEnvironmentStringsW GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter GetOEMCP GetACP IsValidCodePage GetModuleFileNameW HeapSize CloseHandle FlushFileBuffers SetFilePointerEx ReadFile GetConsoleMode GetConsoleCP WriteFile AreFileApisANSI GetModuleHandleExW InterlockedIncrement InterlockedDecrement WideCharToMultiByte EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer MultiByteToWideChar GetStringTypeW HeapFree HeapReAlloc CreateThread GetCurrentThreadId ExitThread GetProcAddress LoadLibraryExW GetCommandLineA InitializeCriticalSectionAndSpinCount HeapAlloc RtlUnwind GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW IsProcessorFeaturePresent CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW IsDebuggerPresent GetProcessHeap GetStdHandle GetFileType ExitProcess

ws2_32

accept inet_ntoa gethostname listen bind htonl WSAStartup WSASend WSACreateEvent gethostbyname WSASocketW WSAGetOverlappedResult WSAWaitForMultipleEvents WSAGetLastError WSARecv shutdown recv closesocket send connect inet_addr htons socket

$PROGRAMFILES/BrowserProtect/proxy/zlibwapi.dll

IMPHASH 2b9f36eadf2de8b927af218ab924a4fc
SHA256 22105576a2250cefb9d8b592d1e98474e8e598839ae9294842787b6c25f2f9f5
MD5 639c27fa15b02cebfe14c3ffbf455387
SHA1 199367466dd9f9e11674908f101107e1481a2043
SHA512 ae4348f00b15bf78382a92ed2aa31531bb1dd21bae4b66ce8fc9439f2efe61743a750b7396656134ca0b5044ae2ce25953dbde4f63adda8a834c02edc5b33af5
SSDEEP 3072:wDFjS+BXoIfvKpQsg3GKhtTBf3rcRpKa:MjXDfipPKvTB/rc/p
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

1

Major OS version

5

Entry point

44044

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PROGRAMFILES/BrowserProtect/search-with-eazelbar.xml

SHA256 4b0294f2313a1cab9e27ae88b7967c338105960908ac54bbb68f806f296882c3
MD5 296b402c802226cd1144c78cd53b47ed
SHA1 003717d60c0f10e0a02c9967689826513e619552
SHA512 5bdc368f03b3826ad4b8f2f29b6ef6d12b58535ebd325705394c5412bac1e10cf3d6e142db224580ae4ed0f424e43ff94aaf3323711a98a5fd7d53bc77149ab7
MD5 SHA1 SHA512

NSIS installer

installer

$PROGRAMFILES/BrowserProtect/srvBrowserProtect.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 68c47ffe774c98edd923c93e722f3d5b68476256d01402600797f350b533ecb4
MD5 c47332b18a48cf81240594db31b4511e
SHA1 b727f62dc28c5aacd120098f1fffca7f10b75d06
SHA512 4aa0766d9f83d06c739046914976c911a029dd766a396abe0f673b60339f0e00b618655d98a675fec58317d99e9c2d2599f427c1bf2ae31ee9ad76fbe5aa618d
SSDEEP 768:aGXIEx0Sr2albPknkhNwxR8QHqitKu1666D6stMktczzSc+JeQOaScA9DGRoGsP9:xrXL41woB9ibkIE8fbq/1T
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

139950

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

$PROGRAMFILES/BrowserProtect/srvBrowserProtectW8.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 e132a6290f45ebdd6dd0b70765f4fb9e67aed5f10492465e132cc469e91b4fd2
MD5 853832db3ce0580403a3b5507b319592
SHA1 bbe26b13e3616287d91bd307b29ca7c2fc7c6600
SHA512 2d03962b28ffc57cbef69cf81260b0894627ece427af108cb564013138578e1e487adc622ad9871d47b71c8bcc0206093851af0aa19cd6a3a9a74993eb35c63d
SSDEEP 768:OqH80cUMI1JkrnH8zzh9KrsJ50L8DzHlbGYKPcUjHnKHQYJSsxZvnu7xnsWQ7lmm:xPkrnpS7GNKwYzu62l3lOoqhR4
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

141662

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

$PROGRAMFILES/BrowserProtect/translations.xml

SHA256 1b25f84c39e15201dbd6cae853d32a2bb5aed5986a907da05c67de74c888e0c8
MD5 d3911d893f7cc981a8636715dad34dbd
SHA1 9b00feaaad94483de5dc070f7ba95d8be22a3837
SHA512 8c5fd53dcc52c1dfb76dba6f8d9daa55e585826e93b4c7db0c46da04fb649580a28788015cc8b8ab0567411e7ee5cc201d3807930012bfc261e3231cb5a7e0c5
MD5 SHA1 SHA512

NSIS installer

installer

Sharing

General

Malware Config

Signatures

File Explorer