b87e3e19687ed65a72db613627b87336_JaffaCakes118
- SHA256 129308c55bc585412536000136bbcd0936df8e3ade81c3289c79ccb6c662ec4b
Overview
overview
7Static
static
3ford/elmco...TL.dll
windows7-x64
1ford/elmco...TL.dll
windows10-2004-x64
1ford/elmco...32.dll
windows7-x64
1ford/elmco...32.dll
windows10-2004-x64
1ford/elmco...32.dll
windows7-x64
1ford/elmco...32.dll
windows10-2004-x64
1ford/elmco...60.dll
windows7-x64
1ford/elmco...60.dll
windows10-2004-x64
1ford/elmco...ig.exe
windows7-x64
1ford/elmco...ig.exe
windows10-2004-x64
3ford/elmco...ig.exe
windows7-x64
1ford/elmco...ig.exe
windows10-2004-x64
1ford/elmco...ig.exe
windows7-x64
1ford/elmco...ig.exe
windows10-2004-x64
1ford/elmco...ig.exe
windows7-x64
1ford/elmco...ig.exe
windows10-2004-x64
1ford/elmco...ig.exe
windows7-x64
1ford/elmco...ig.exe
windows10-2004-x64
1ford/elmco...ig.exe
windows7-x64
1ford/elmco...ig.exe
windows10-2004-x64
1ford/elmco...ig.exe
windows7-x64
1ford/elmco...ig.exe
windows10-2004-x64
1ford/forsc...an.exe
windows7-x64
6ford/forsc...an.exe
windows10-2004-x64
1ford/forsc...00.exe
windows7-x64
7ford/forsc...00.exe
windows10-2004-x64
7Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ford/elmconfig/ELMConfig+DLL/DLL/MSCOMCTL.dll
Resource
win7-20231129-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
ford/elmconfig/ELMConfig+DLL/DLL/MSCOMCTL.dll
Resource
win10v2004-20240508-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
ford/elmconfig/ELMConfig+DLL/DLL/MSCOMM32.dll
Resource
win7-20240221-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
ford/elmconfig/ELMConfig+DLL/DLL/MSCOMM32.dll
Resource
win10v2004-20240508-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral5
Sample
ford/elmconfig/ELMConfig+DLL/DLL/comdlg32.dll
Resource
win7-20240508-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral6
Sample
ford/elmconfig/ELMConfig+DLL/DLL/comdlg32.dll
Resource
win10v2004-20240611-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral7
Sample
ford/elmconfig/ELMConfig+DLL/DLL/msvbvm60.dll
Resource
win7-20240221-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral8
Sample
ford/elmconfig/ELMConfig+DLL/DLL/msvbvm60.dll
Resource
win10v2004-20240508-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral9
Sample
ford/elmconfig/ELMConfig+DLL/ELMConfig/ELMConfig.exe
Resource
win7-20240508-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral10
Sample
ford/elmconfig/ELMConfig+DLL/ELMConfig/ELMConfig.exe
Resource
win10v2004-20240508-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral11
Sample
ford/elmconfig/ELMConfig_v0.1.1.6/ELMConfig.exe
Resource
win7-20240611-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral12
Sample
ford/elmconfig/ELMConfig_v0.1.1.6/ELMConfig.exe
Resource
win10v2004-20240508-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral13
Sample
ford/elmconfig/ELMConfig_v0.1.1.8b/ELMConfig.exe
Resource
win7-20240220-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral14
Sample
ford/elmconfig/ELMConfig_v0.1.1.8b/ELMConfig.exe
Resource
win10v2004-20240611-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral15
Sample
ford/elmconfig/ELMConfig_v0.1.2.1b/ELMConfig.exe
Resource
win7-20240611-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral16
Sample
ford/elmconfig/ELMConfig_v0.1.2.1b/ELMConfig.exe
Resource
win10v2004-20240508-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral17
Sample
ford/elmconfig/ELMConfig_v0.2.2b/ELMConfig.exe
Resource
win7-20240221-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral18
Sample
ford/elmconfig/ELMConfig_v0.2.2b/ELMConfig.exe
Resource
win10v2004-20240611-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral19
Sample
ford/elmconfig/ELMConfig_v0.2.4/ELMConfig.exe
Resource
win7-20240508-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral20
Sample
ford/elmconfig/ELMConfig_v0.2.4/ELMConfig.exe
Resource
win10v2004-20240611-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral21
Sample
ford/elmconfig/ELMConfig_v0.2.9/ELMConfig.exe
Resource
win7-20240508-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral22
Sample
ford/elmconfig/ELMConfig_v0.2.9/ELMConfig.exe
Resource
win10v2004-20240508-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral23
Sample
ford/forscan/FORScan.exe
Resource
win7-20240611-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral24
Sample
ford/forscan/FORScan.exe
Resource
win10v2004-20240508-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral25
Sample
ford/forscan/unins000.exe
Resource
win7-20240611-en
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral26
Sample
ford/forscan/unins000.exe
Resource
win10v2004-20240508-en
windows10-2004-x64
5 signatures
150 seconds
General
- Target b87e3e19687ed65a72db613627b87336_JaffaCakes118
- Size 17.1MB
- Sample240617-n5r1gatepr
- SHA256 129308c55bc585412536000136bbcd0936df8e3ade81c3289c79ccb6c662ec4b
- MD5 b87e3e19687ed65a72db613627b87336
- SHA1 6dae35268f86e10380aca97113641d7326533219
- SHA512 8ad382b7822a1013d7475bcab4b0816b9e94bc75a4a9e3b94b701a0d805ed1fe6f44ad25715c03591bd3ccdb85d463e267a0e5b1c0dacc15f368b3ff562ebc5a
- SSDEEP 393216:yOj2JHJrEqB6PgVqB6mFjN7angwjFGWA2pd8qQOmdv:OprbwR5FjN7anNjFGWA76mx
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 10 IoCs
Checks for missing Authenticode signature.
resource unpack001/ford/elmconfig/ELMConfig+DLL/DLL/msvbvm60.dll unpack001/ford/elmconfig/ELMConfig+DLL/ELMConfig/ELMConfig.exe unpack001/ford/elmconfig/ELMConfig_v0.1.1.6/ELMConfig.exe unpack001/ford/elmconfig/ELMConfig_v0.1.1.8b/ELMConfig.exe unpack001/ford/elmconfig/ELMConfig_v0.1.2.1b/ELMConfig.exe unpack001/ford/elmconfig/ELMConfig_v0.2.2b/ELMConfig.exe unpack001/ford/elmconfig/ELMConfig_v0.2.4/ELMConfig.exe unpack001/ford/elmconfig/ELMConfig_v0.2.9/ELMConfig.exe unpack001/ford/forscan/FORScan.exe unpack001/ford/forscan/unins000.exe
File Explorer
-
b87e3e19687ed65a72db613627b87336_JaffaCakes118.rar 17.1MB
-
ford/elmconfig/ELMConfig+DLL/DLL/MSCOMCTL.OCX.dll 1.0MB
-
ford/elmconfig/ELMConfig+DLL/DLL/MSCOMM32.OCX.dll 101KB
-
ford/elmconfig/ELMConfig+DLL/DLL/comdlg32.ocx.dll 137KB
-
ford/elmconfig/ELMConfig+DLL/DLL/msvbvm60.dll.dll 1.3MB
-
ford/elmconfig/ELMConfig+DLL/ELMConfig/ELMConfig.exe.exe 244KB
-
ford/elmconfig/ELMConfig+DLL/ELMConfig/code.dtc4.7MB
-
ford/elmconfig/ELMConfig_v0.1.1.6/ELMConfig.exe.exe 104KB
-
ford/elmconfig/ELMConfig_v0.1.1.6/code.dtc4.7MB
-
ford/elmconfig/ELMConfig_v0.1.1.8b/ELMConfig.exe.exe 160KB
-
ford/elmconfig/ELMConfig_v0.1.1.8b/code.dtc4.7MB
-
ford/elmconfig/ELMConfig_v0.1.2.1b/ELMConfig.exe.exe 208KB
-
ford/elmconfig/ELMConfig_v0.1.2.1b/code.dtc4.7MB
-
ford/elmconfig/ELMConfig_v0.1.2.1b/frw.dat1002KB
-
ford/elmconfig/ELMConfig_v0.2.2b/ELMConfig.exe.exe 268KB
-
ford/elmconfig/ELMConfig_v0.2.2b/data/6G9T-14C097-AA.vbf12KB
-
ford/elmconfig/ELMConfig_v0.2.2b/data/7G9T-14C097-AA.vbf12KB
-
ford/elmconfig/ELMConfig_v0.2.2b/data/AG9T-14C097-AC.vbf11KB
-
ford/elmconfig/ELMConfig_v0.2.2b/data/BG9T-14C097-AA.vbf11KB
-
ford/elmconfig/ELMConfig_v0.2.2b/data/code.dtc5.0MB
-
ford/elmconfig/ELMConfig_v0.2.2b/data/frw.dat1004KB
-
ford/elmconfig/ELMConfig_v0.2.4/ELMConfig.exe.exe 272KB
-
ford/elmconfig/ELMConfig_v0.2.4/data/6G9T-14C097-AA.vbf12KB
-
ford/elmconfig/ELMConfig_v0.2.4/data/7G9T-14C097-AA.vbf12KB
-
ford/elmconfig/ELMConfig_v0.2.4/data/AG9T-14C097-AC.vbf11KB
-
ford/elmconfig/ELMConfig_v0.2.4/data/BG9T-14C097-AA.vbf11KB
-
ford/elmconfig/ELMConfig_v0.2.4/data/code.dtc5.0MB
-
ford/elmconfig/ELMConfig_v0.2.4/data/frw.dat1004KB
-
ford/elmconfig/ELMConfig_v0.2.9/ELMConfig.exe.exe 412KB
-
ford/elmconfig/ELMConfig_v0.2.9/data/6G9T-14C097-AA.vbf12KB
-
ford/elmconfig/ELMConfig_v0.2.9/data/6M2T-14C025-AB.vbf1KB
-
ford/elmconfig/ELMConfig_v0.2.9/data/7G9T-14C097-AA.vbf12KB
-
ford/elmconfig/ELMConfig_v0.2.9/data/7M2T-14C025-AA.vbf2KB
-
ford/elmconfig/ELMConfig_v0.2.9/data/AG9T-14C097-AC.vbf11KB
-
ford/elmconfig/ELMConfig_v0.2.9/data/AM2T-14C025-AA.vbf2KB
-
ford/elmconfig/ELMConfig_v0.2.9/data/AM2T-14C025-BA.vbf2KB
-
ford/elmconfig/ELMConfig_v0.2.9/data/BG9T-14C097-AA.vbf11KB
-
ford/elmconfig/ELMConfig_v0.2.9/data/code.dtc4.9MB
-
ford/elmconfig/ELMConfig_v0.2.9/data/frw.dat1.0MB
-
ford/forscan/FORScan.Changelog.txt25KB
-
ford/forscan/FORScan.EndUser.License.txt2KB
-
ford/forscan/FORScan.exe.exe 874KB
-
ford/forscan/data/data0.bin1KB
-
ford/forscan/data/data1.bin503B
-
ford/forscan/data/data10.bin3.0MB
-
ford/forscan/data/data11.bin747KB
-
ford/forscan/data/data12.bin4KB
-
ford/forscan/data/data13.bin9KB
-
ford/forscan/data/data14.bin7KB
-
ford/forscan/data/data15.bin9KB
-
ford/forscan/data/data16.bin1020KB
-
ford/forscan/data/data17.bin56KB
-
ford/forscan/data/data18.bin189KB
-
ford/forscan/data/data19.bin651KB
-
ford/forscan/data/data2.bin132B
-
ford/forscan/data/data20.bin2.4MB
-
ford/forscan/data/data21.bin12KB
-
ford/forscan/data/data22.bin3KB
-
ford/forscan/data/data23.bin782KB
-
ford/forscan/data/data24.bin71KB
-
ford/forscan/data/data25.bin3KB
-
ford/forscan/data/data26.bin9KB
-
ford/forscan/data/data27.bin40KB
-
ford/forscan/data/data28.bin7KB
-
ford/forscan/data/data29.bin2KB
-
ford/forscan/data/data3.bin1.3MB
-
ford/forscan/data/data4.bin346B
-
ford/forscan/data/data5.bin1.1MB
-
ford/forscan/data/data6.bin11KB
-
ford/forscan/data/data7.bin161KB
-
ford/forscan/data/data8.bin179KB
-
ford/forscan/data/data9.bin291KB
-
ford/forscan/data/default.lang3B
-
ford/forscan/data/resources-de.bin2.4MB
-
ford/forscan/data/resources-en.bin2.2MB
-
ford/forscan/data/resources-es.bin2.8MB
-
ford/forscan/data/resources-it.bin2.6MB
-
ford/forscan/data/resources-pl.bin2.8MB
-
ford/forscan/data/resources-ru.bin4.6MB
-
ford/forscan/images/eng1300.gif.gif 9KB
-
ford/forscan/images/eng1320.gif.gif 9KB
-
ford/forscan/images/eng18TDCI01.gif.gif 9KB
-
ford/forscan/images/eng2290.gif.gif 9KB
-
ford/forscan/images/eng2300.gif.gif 9KB
-
ford/forscan/images/eng2490.gif.gif 9KB
-
ford/forscan/images/eng6390.gif.gif 9KB
-
ford/forscan/unins000.dat4KB
-
ford/forscan/unins000.exe.exe 698KB
ford/elmconfig/ELMConfig+DLL/DLL/MSCOMCTL.OCX
- IMPHASH b22bd7d6f2b83c193c4c7e9c0a2de8b2
- SHA256 18a83d7a420a17fcb6f56eb3ba5362c975d32e5ded7553c6fd407f07bdb7b006
- MD5 f7bbb7d79adb9e3adc13f3b3c33d3d4d
- SHA1 cacb4b31d22419e6a9ddbffcf61ae42da0d5fb8a
- SHA512 4870ddbdf283d7f7f64d3f4bf556600a78804f6a94fc2ca7eb778e85d70b6d2d017aa35cbddf773b6a1b6d9a2813cd67fe54ede7859050a254a3e3c05616ae0e
- SSDEEP 24576:mnt4M/pL1wAEIqSBanK6CC33VTj+1R8xRFLqqmbD1kWIAqPA:mPL15EIqS1e6q3FmKbt4
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
N/A
Digest Algorithm
N/A
PE Digests Matches
Not matched
Trusted
Not trusted
Subject
OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network
Serial Number
4a:19:d2:38:8c:82:59:1c:a5:5d:73:5f:15:5d:dc:a3
Issuer
OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network
Timespan
May 12, 1997 - Jan 7, 2004
Subject
CN=VeriSign Time Stamping Service,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)01,O=VeriSign\, Inc.
Serial Number
08:7a:6d:5c:6f:62:93:4f:ba:c4:fd:43:e1:14:18:9d
Issuer
OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Feb 28, 2001 - Jan 6, 2004
Subject
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Serial Number
c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Timespan
Jan 10, 1997 - Dec 31, 2020
Subject
CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:de:aa:11:d4:d8:40:9a:a8:be:e6
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Dec 10, 2000 - Nov 12, 2005
Subject
CN=Microsoft Corporation,OU=Copyright (c) 2002 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:11:43:00:00:00:00:00:34
Issuer
CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 25, 2002 - Nov 25, 2003
Minor OS version
0
Major OS version
4
Entry point
80272
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
PDB paths
kernel32
CreateThread
LocalReAlloc
GetProfileIntA
RtlMoveMemory
LocalSize
FreeResource
GetCurrentProcessId
MulDiv
GetTickCount
MapViewOfFile
CreateFileMappingA
UnmapViewOfFile
GlobalReAlloc
IsBadReadPtr
Sleep
WaitForSingleObject
GlobalHandle
GetThreadLocale
LocalFree
LocalAlloc
GlobalAddAtomA
SetFilePointer
SetStdHandle
FlushFileBuffers
VirtualAlloc
WriteFile
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetOEMCP
GetACP
GetCPInfo
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
TlsGetValue
SetLastError
TlsFree
TlsAlloc
TlsSetValue
GetCurrentProcess
TerminateProcess
ExitProcess
RtlUnwind
GetCommandLineA
CompareStringW
GlobalSize
CreateFileA
GetFileSize
GlobalUnlock
GlobalLock
ReadFile
CloseHandle
GlobalFree
IsDBCSLeadByte
GetModuleHandleA
FindResourceA
LoadResource
LockResource
GetLastError
GetFileAttributesA
GetVersion
DisableThreadLibraryCalls
GetProcAddress
GetLocaleInfoA
LoadLibraryA
GetWindowsDirectoryA
lstrcatA
GetModuleFileNameA
IsBadWritePtr
lstrcmpiA
GetLocalTime
GetTimeFormatA
GetDateFormatA
lstrcmpA
GlobalAlloc
GetVersionExA
GetCurrentThreadId
MultiByteToWideChar
CompareStringA
lstrcpyA
InterlockedExchange
lstrlenA
GetSystemDefaultLCID
lstrcpynA
HeapAlloc
DeleteCriticalSection
FreeLibrary
HeapFree
WideCharToMultiByte
lstrlenW
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetProcessHeap
InterlockedIncrement
InterlockedDecrement
HeapReAlloc
user32
DrawFocusRect
AdjustWindowRect
DrawFrameControl
TrackPopupMenu
GetMessageA
AdjustWindowRectEx
CopyRect
GetKeyNameTextA
ShowCaret
SetCaretPos
GrayStringA
HideCaret
DestroyCaret
CreateCaret
SetWindowTextA
SetScrollInfo
DrawTextExA
InvertRect
SetRectEmpty
GetShellWindow
SetKeyboardState
GetKeyboardState
GetScrollInfo
GetKeyboardLayout
DestroyCursor
GetUpdateRgn
GetUpdateRect
GetWindowRgn
ValidateRect
CallMsgFilterA
LockWindowUpdate
IsZoomed
GetDesktopWindow
GetIconInfo
GetCursor
GetForegroundWindow
InvalidateRgn
EndDeferWindowPos
EnumChildWindows
GetDoubleClickTime
FindWindowA
GetMessageTime
GetWindowThreadProcessId
RemovePropA
SendNotifyMessageA
SetScrollPos
SetScrollRange
GetWindowTextLengthA
EnableScrollBar
ChildWindowFromPoint
EndDialog
GetWindow
GetPropA
GetCursorPos
WindowFromPoint
GetClassNameA
GetDlgCtrlID
IsWindow
SetPropA
SetTimer
KillTimer
SendDlgItemMessageA
IsWindowVisible
UnregisterClassA
CharNextA
SetActiveWindow
CheckRadioButton
SetFocus
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
CheckDlgButton
GetDlgItem
IsWindowEnabled
GetDCEx
DrawIconEx
CreateIconIndirect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetClipboardFormatNameA
SetCursorPos
RegisterClipboardFormatA
MessageBeep
RegisterWindowMessageA
PeekMessageA
PostMessageW
PeekMessageW
VkKeyScanA
SetParent
CharUpperA
GetDlgItemInt
SetCursor
CreateDialogIndirectParamA
GetNextDlgTabItem
IsDialogMessageA
ScrollWindowEx
GetDlgItemTextA
SetWindowRgn
IntersectRect
EqualRect
MoveWindow
BeginPaint
EndPaint
DeferWindowPos
BeginDeferWindowPos
CharNextExA
DrawIcon
DestroyIcon
MapWindowPoints
CreatePopupMenu
AppendMenuA
TrackPopupMenuEx
DestroyMenu
GetActiveWindow
MessageBoxA
WinHelpA
PtInRect
DefWindowProcA
GetWindowDC
SetRect
LoadCursorA
IsRectEmpty
ClientToScreen
GetWindowRect
MapVirtualKeyA
DestroyWindow
CreateWindowExA
GetSysColorBrush
GetAsyncKeyState
EnableWindow
PostMessageA
TranslateMessage
DispatchMessageA
wsprintfA
DialogBoxParamA
UpdateWindow
GetWindowLongA
SetWindowLongA
GetDC
ReleaseDC
GetParent
OffsetRect
UnionRect
GetFocus
IsChild
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
GetMessagePos
ScreenToClient
SetWindowPos
SetCapture
GetWindowTextA
WindowFromDC
GetClientRect
CallWindowProcA
DrawEdge
GetSysColor
FrameRect
InflateRect
FillRect
DrawTextA
GetKeyState
GetCapture
ReleaseCapture
GetClassInfoA
RegisterClassA
InvalidateRect
LoadIconA
GetSystemMetrics
CopyImage
SendMessageA
LoadStringA
RedrawWindow
ShowWindow
CreateAcceleratorTableA
ole32
ReleaseStgMedium
DoDragDrop
RegisterDragDrop
RevokeDragDrop
CreateStreamOnHGlobal
OleLoadFromStream
OleSaveToStream
CreateOleAdviseHolder
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
advapi32
RegDeleteKeyA
RegOpenKeyA
RegQueryValueA
RegQueryValueExA
RegEnumKeyExA
RegCreateKeyA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegDeleteValueA
oleaut32
SafeArrayRedim
SafeArrayPutElement
SafeArrayGetElement
SafeArrayCreate
SafeArrayDestroy
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
GetErrorInfo
OleCreateFontIndirect
OleCreatePropertyFrame
LoadTypeLibEx
UnRegisterTypeLi
RegisterTypeLi
CreateErrorInfo
SetErrorInfo
LoadRegTypeLi
LoadTypeLi
VariantChangeTypeEx
SysStringByteLen
SysAllocStringByteLen
OleLoadPicture
SysAllocStringLen
VariantCopy
OleTranslateColor
VariantChangeType
OleCreatePictureIndirect
VariantCopyInd
SysStringLen
SysFreeString
VariantInit
VariantClear
SysAllocString
SafeArrayCopy
comdlg32
GetOpenFileNameA
gdi32
Arc
GetTextExtentPointA
GetCharWidthA
OffsetWindowOrgEx
ExtTextOutW
GetTextExtentPointW
Polyline
GetTextAlign
SetTextAlign
OffsetRgn
GetTextColor
CombineRgn
GetTextMetricsA
MoveToEx
LineTo
Ellipse
DeleteObject
SelectObject
CreateSolidBrush
SetViewportOrgEx
SetWindowOrgEx
SetViewportExtEx
SetWindowExtEx
SetMapMode
GetDeviceCaps
CreateFontIndirectA
GetObjectA
SelectClipRgn
ExcludeClipRect
RectVisible
GetClipBox
IntersectClipRect
GetClipRgn
CreateRectRgnIndirect
RealizePalette
SelectPalette
PatBlt
CreateCompatibleBitmap
CreateBitmap
CreateCompatibleDC
GetTextExtentPoint32A
TextOutA
SetBkColor
SetTextColor
SetBkMode
Rectangle
CreatePen
GetStockObject
GetViewportExtEx
GetWindowExtEx
LPtoDP
DeleteDC
CreateDCA
CreateRectRgn
StretchBlt
CreateICA
CopyMetaFileA
CopyEnhMetaFileA
GetPaletteEntries
GetDIBits
CreateDIBitmap
GetBitmapBits
CreatePalette
GetNearestColor
CreatePatternBrush
CreateDIBSection
CreateHalftonePalette
BitBlt
SetDIBColorTable
GetDIBColorTable
GetPixel
StretchDIBits
SetBrushOrgEx
GetBkColor
ExtTextOutA
RestoreDC
SaveDC
CreateFontA
DLLGetDocumentation
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Name
.text
Size
688KB
Virtual Size
687KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
32KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
280KB
Virtual Size
279KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
40KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
ford/elmconfig/ELMConfig+DLL/DLL/MSCOMM32.OCX
- IMPHASH 981c4b05d92d1681a5f459ad4e52b1b8
- SHA256 51a1d6812e445c26c71465e2709e6d1ad587f8513002d662cd160f424f48b37c
- MD5 2c6119da3993f410e74b15112f840cb0
- SHA1 9d7aaffc0bcf955cc75d4ecc228b1ceda8a1856c
- SHA512 053ece4eb2ddba51c0d683a7afd439ed88605ab83619de738f7ad2495bfe9e9f16fc3b829c7fc9c779b50f039b9fad66d16aed520a5adfd1522a711073f78208
- SSDEEP 3072:zsQgdI5Hh8p28XMehRYSdB/TYDY44UGyGfDnfra:zdgdI598jhRJpYDY4fefna
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
N/A
Digest Algorithm
N/A
PE Digests Matches
Not matched
Trusted
Not trusted
Minor OS version
0
Major OS version
4
Entry point
4800
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
PDB paths
kernel32
GetCommModemStatus
WriteFile
GetCommProperties
ResetEvent
GetOverlappedResult
IsBadWritePtr
MultiByteToWideChar
Sleep
ReadFile
SetCommState
GetCommState
ClearCommError
lstrcpynA
lstrlenA
CreateThread
WaitCommEvent
GlobalUnlock
GlobalLock
GlobalAlloc
ClearCommBreak
SetCommBreak
GetVersion
GetFileAttributesA
lstrcatA
GetModuleFileNameA
GetWindowsDirectoryA
LoadLibraryA
GetLocaleInfoA
GetProcAddress
InterlockedIncrement
InterlockedDecrement
HeapReAlloc
lstrcmpiA
LockResource
LoadResource
FindResourceA
CompareStringA
CompareStringW
lstrcmpA
CreateEventA
CreateFileA
GetLastError
SetupComm
SetCommTimeouts
SetCommMask
WaitForSingleObject
DisableThreadLibraryCalls
GlobalFree
IsDBCSLeadByte
LeaveCriticalSection
DeleteCriticalSection
FreeLibrary
HeapFree
WideCharToMultiByte
lstrlenW
HeapAlloc
InitializeCriticalSection
EnterCriticalSection
GetProcessHeap
CloseHandle
lstrcpyA
EscapeCommFunction
PurgeComm
user32
ShowWindow
SetWindowRgn
PtInRect
IsDialogMessageA
GetWindowLongA
IsWindowEnabled
IsChild
GetKeyState
OffsetRect
IntersectRect
DrawIcon
LoadCursorA
RegisterClassA
DestroyIcon
DestroyWindow
GetSystemMetrics
GetDlgItemInt
GetDlgItemTextA
GetDlgItem
SendMessageA
SetDlgItemInt
SetDlgItemTextA
DialogBoxParamA
wsprintfA
CreateWindowExA
SetWindowLongA
DefWindowProcA
EqualRect
GetWindowRect
GetParent
ClientToScreen
MoveWindow
GetActiveWindow
GetWindow
GetClientRect
SetFocus
BeginPaint
IsWindowVisible
EndPaint
SetParent
CheckDlgButton
SetWindowPos
CharNextA
EndDialog
LoadIconA
DrawEdge
CreateDialogIndirectParamA
PostMessageA
WinHelpA
GetNextDlgTabItem
LoadStringA
UnregisterClassA
ReleaseDC
GetDC
IsDlgButtonChecked
MessageBoxA
RegisterClipboardFormatA
ole32
CreateOleAdviseHolder
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
ReleaseStgMedium
advapi32
RegEnumKeyExA
RegQueryValueA
RegOpenKeyA
RegQueryValueExA
RegDeleteValueA
RegDeleteKeyA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
oleaut32
OleCreatePropertyFrame
VariantChangeType
SetErrorInfo
UnRegisterTypeLi
LoadTypeLi
LoadTypeLibEx
OleLoadPicture
GetErrorInfo
RegisterTypeLi
SafeArrayCreate
SafeArrayPutElement
LoadRegTypeLi
SafeArrayGetDim
SysStringLen
SysAllocStringLen
SafeArrayGetUBound
SafeArrayGetElement
SafeArrayGetLBound
VariantClear
SysFreeString
VariantInit
SysAllocString
CreateErrorInfo
gdi32
DeleteDC
GetWindowExtEx
GetViewportExtEx
LPtoDP
SetMapMode
CreateDCA
SetWindowOrgEx
SetViewportOrgEx
SetWindowExtEx
SetViewportExtEx
GetDeviceCaps
CreateRectRgnIndirect
DLLGetDocumentation
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Name
.text
Size
59KB
Virtual Size
58KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
27KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
ford/elmconfig/ELMConfig+DLL/DLL/comdlg32.ocx
- IMPHASH 988f29c1eb8054253091352741683c76
- SHA256 64c6ee999562961d11af130254ad3ffd24bb725d3c18e7877f9fd362f4936195
- MD5 b73809a916e6d7c1ae56f182a2e8f7e2
- SHA1 34e4213d8bf0e150d3f50ae0bd3f5b328e1105f5
- SHA512 26c28cb6c7e1b47425403ab8850a765ac420dd6474327ce8469376219c830ab46218383d15a73c9ea3a23fc6b5f392ee6e2a1632a1bf644b1bd1a05a4729e333
- SSDEEP 3072:3ESIiWD8uq4hCqUt6mqD1gRshBgH/voqJrwo2CocrJbQN6N2TRqEydzdHv2:3ETz566VgRyOJ0oDxQRHH
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
N/A
Digest Algorithm
N/A
PE Digests Matches
Not matched
Trusted
Not trusted
Subject
OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet
Serial Number
03:c7:8f:37:db:92:28:df:3c:bb:1a:ad:82:fa:67:10
Issuer
OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet
Timespan
Apr 9, 1996 - Jan 7, 2004
Subject
CN=VeriSign Time Stamping Service CA SW1,OU=VeriSign Trust Network+OU=www.verisign.com/repository/RPA Incorp. by Ref.\,LIAB.LTD(c)98,O=VeriSign\, Inc.
Serial Number
fc:a4:a5:9f:2c:0f:c0:b9:03:98:33:1b:7b:54:54:1d
Issuer
OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Nov 16, 1999 - Jan 6, 2004
Subject
CN=Microsoft Corporation,OU=VeriSign Commercial Software Publishers CA+OU=www.verisign.com/repository/RPA Incorp. by Ref.\,LIAB.LTD(c)98+OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Microsoft Corporation,O=VeriSign\, Inc.,L=Internet+L=Redmond,ST=Washington,C=US
Serial Number
75:f2:8e:f8:a8:fb:ea:6d:11:52:97:14:95:4b:65:5c
Issuer
OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet
Key Usages
KeyUsageDigitalSignature, KeyUsageKeyEncipherment
Timespan
Apr 4, 2000 - Apr 17, 2001
Minor OS version
0
Major OS version
4
Entry point
5296
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
PDB paths
kernel32
HeapReAlloc
GetLastError
LockResource
GetWindowsDirectoryA
InterlockedDecrement
InterlockedIncrement
IsDBCSLeadByte
CompareStringA
CompareStringW
lstrcmpA
GetLocaleInfoA
GetVersion
GetModuleFileNameA
GetFileAttributesA
IsBadWritePtr
DisableThreadLibraryCalls
GlobalAlloc
lstrcmpiA
LoadLibraryA
GetProcAddress
lstrcatA
lstrlenA
lstrcpyA
WriteProfileStringA
GlobalLock
GlobalUnlock
LoadResource
FindResourceA
lstrcpynA
LeaveCriticalSection
DeleteCriticalSection
FreeLibrary
HeapFree
WideCharToMultiByte
lstrlenW
HeapAlloc
GetProfileStringA
EnterCriticalSection
GetProcessHeap
GetCurrentThreadId
MultiByteToWideChar
InitializeCriticalSection
GlobalFree
user32
SetWindowRgn
IntersectRect
EqualRect
PtInRect
IsDialogMessageA
IsChild
GetKeyState
CreateDialogIndirectParamA
MessageBeep
PostMessageA
ClientToScreen
wsprintfA
SendMessageTimeoutA
CharNextA
GetActiveWindow
GetWindowThreadProcessId
LoadCursorA
MessageBoxA
GetWindowLongA
GetWindowRect
CreateWindowExA
SetWindowLongA
ShowWindow
DialogBoxParamA
EnableWindow
GetDesktopWindow
GetWindow
IsWindowEnabled
OffsetRect
GetParent
GetDlgItem
SendMessageA
SetFocus
SetParent
SetDlgItemInt
EndPaint
SetActiveWindow
IsWindowVisible
WinHelpA
GetDlgItemInt
EndDialog
GetDlgItemTextA
DestroyWindow
SetDlgItemTextA
GetWindowTextA
GetNextDlgTabItem
SendDlgItemMessageA
RegisterClassA
GetDC
ReleaseDC
LoadIconA
DrawIcon
DestroyIcon
GetSystemMetrics
RegisterWindowMessageA
LoadStringA
DefWindowProcA
UnregisterClassA
GetClientRect
BeginPaint
RegisterClipboardFormatA
SetWindowPos
MoveWindow
ole32
CreateOleAdviseHolder
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
ReleaseStgMedium
advapi32
RegEnumKeyExA
RegQueryValueA
RegOpenKeyA
RegQueryValueExA
RegDeleteValueA
RegDeleteKeyA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
oleaut32
LoadRegTypeLi
OleCreatePropertyFrame
SetErrorInfo
UnRegisterTypeLi
LoadTypeLi
LoadTypeLibEx
OleLoadPicture
VariantChangeType
RegisterTypeLi
VariantInit
GetErrorInfo
VariantClear
SysStringLen
SysAllocStringLen
OleTranslateColor
SysFreeString
SysAllocString
CreateErrorInfo
comdlg32
CommDlgExtendedError
PrintDlgA
ChooseFontA
ChooseColorA
GetOpenFileNameA
GetSaveFileNameA
gdi32
GetDIBits
CreateCompatibleDC
CreateBitmap
GetSystemPaletteEntries
StretchDIBits
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
SetMapMode
LPtoDP
SetViewportExtEx
GetViewportExtEx
CreateRectRgnIndirect
GetWindowExtEx
CreateDCA
GetObjectA
EnumFontFamiliesA
DeleteDC
DeleteObject
GetDeviceCaps
SelectObject
DLLGetDocumentation
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Name
.text
Size
69KB
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
51KB
Virtual Size
51KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
ford/elmconfig/ELMConfig+DLL/DLL/msvbvm60.dll
- IMPHASH ce5958d8adf86078d58c0c6f95621ee9
- SHA256 2d8c626bef52e64ba0e5a6301c82c748dc65bdef7bf8e73be2f50448e14ed2ae
- MD5 96e7acd0b32be90f4f8b3237adda1efa
- SHA1 3a3a3ccc42714dc4dd22c6b106caa24f7f81e34d
- SHA512 1f055a50152aa40a07004f95c8793f6e3e0b0c6db66ddc3b01e2b86267fdc4ef9884619e82b5ca4e0102b2461697d3177361a6812ca721c26d034e92a2132fec
- SSDEEP 24576:gXEt6JlHZQrHWNmYhYv92+k4QBZb72JQy3oZZtmS4pXi0qRCtDg+:gU90Gv92+k4QBB2JQy3oVmS45iLC2+
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
6904
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetTimeZoneInformation
CreateThread
ExitThread
FlushFileBuffers
CreateDirectoryA
RemoveDirectoryA
MoveFileA
LockFile
UnlockFile
TerminateProcess
SetEnvironmentVariableA
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
GetStdHandle
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetStdHandle
GetStringTypeW
RaiseException
LCMapStringW
GetStringTypeA
GetModuleFileNameW
GetUserDefaultLangID
GetComputerNameA
SetFileAttributesA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFileTime
SetFileTime
GetLocalTime
SetLocalTime
RtlUnwind
OpenFile
CreateProcessW
IsValidCodePage
FormatMessageW
GetStartupInfoA
UnhandledExceptionFilter
ExitProcess
SetCurrentDirectoryA
GetStringTypeExA
GetVolumeInformationA
FindFirstFileA
FindNextFileA
FindClose
VirtualFree
GetSystemInfo
VirtualAlloc
VirtualProtect
FlushInstructionCache
FindResourceExA
GetShortPathNameA
WinExec
lstrlenW
lstrcpyW
WriteFile
SetEndOfFile
SetFilePointer
GetSystemTime
SystemTimeToFileTime
WaitForMultipleObjects
ReleaseMutex
CreateMutexA
GetCurrentProcess
DuplicateHandle
ResumeThread
GetCommandLineA
TlsSetValue
TlsFree
TlsAlloc
GetVersion
CompareStringW
lstrcmpiW
MulDiv
CreateProcessA
GetExitCodeProcess
LoadLibraryExA
WaitForSingleObject
ResetEvent
SetEvent
CreateEventA
GetTickCount
GetEnvironmentVariableA
FreeResource
GetSystemDefaultLCID
GetPrivateProfileIntA
IsBadCodePtr
GetUserDefaultLCID
GetSystemDirectoryA
LoadLibraryA
GetProcAddress
Sleep
GlobalDeleteAtom
HeapDestroy
SetErrorMode
GlobalAddAtomA
ReleaseSemaphore
LCMapStringA
CreateSemaphoreA
VirtualQuery
GetCurrentProcessId
MultiByteToWideChar
GetProfileStringA
WideCharToMultiByte
HeapReAlloc
GetDriveTypeA
CompareStringA
GetFileAttributesA
GetCurrentDirectoryA
GetModuleFileNameA
SetLastError
GetFullPathNameA
SearchPathA
GetFileType
GlobalUnlock
GlobalFree
FindResourceA
LoadResource
SizeofResource
GlobalAlloc
GlobalSize
GlobalHandle
GlobalReAlloc
GlobalLock
_lwrite
_lread
LockResource
GetTempPathA
GetTempFileNameA
lstrcpynA
_lclose
_llseek
FreeLibrary
GetLocaleInfoA
lstrcmpiA
GetLastError
GetModuleHandleA
GetSystemDefaultLangID
FormatMessageA
HeapCreate
GetWindowsDirectoryA
GetPrivateProfileStringA
lstrcatA
CreateFileA
ReadFile
CloseHandle
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
IsDBCSLeadByte
IsBadReadPtr
TlsGetValue
lstrcpyA
DeleteFileA
lstrcmpA
GetCurrentThreadId
GetVersionExA
HeapAlloc
HeapFree
HeapSize
lstrlenA
user32
DdeClientTransaction
DdeAbandonTransaction
DdeGetData
DdeGetLastError
DdeCreateDataHandle
DdeCmpStringHandles
SetCursorPos
EnumClipboardFormats
DestroyCursor
GetAsyncKeyState
WaitForInputIdle
GetForegroundWindow
VkKeyScanW
SetWindowsHookExW
keybd_event
CharUpperBuffW
CharUpperBuffA
CharLowerBuffW
FindWindowW
FindWindowA
SetActiveWindow
GetClassInfoExA
LoadIconA
LoadImageA
RegisterClassExA
FrameRect
CreateDialogParamA
IsDialogMessageA
EnableMenuItem
ShowCursor
OemToCharA
CharToOemBuffA
GetWindowTextA
EndDialog
DrawTextA
SendDlgItemMessageA
SetDlgItemTextA
GetWindowPlacement
GetSystemMetrics
LoadBitmapA
TranslateMessage
DispatchMessageA
MsgWaitForMultipleObjects
WaitMessage
PostQuitMessage
UnhookWindowsHookEx
RegisterClipboardFormatA
CreateCursor
CreateIcon
PostMessageW
PeekMessageW
EnumWindows
EnumChildWindows
GetPropA
RemovePropA
SetPropA
SetForegroundWindow
ClipCursor
CallWindowProcA
DefFrameProcA
GetKeyState
GetDlgItem
IsWindow
UnregisterClassA
RegisterClassA
AdjustWindowRect
GetTabbedTextExtentA
TabbedTextOutA
FillRect
CharToOemA
MessageBoxA
wsprintfA
WinHelpA
GetDesktopWindow
SetRect
GetWindowDC
DestroyIcon
GetClassInfoA
AdjustWindowRectEx
GetMenuItemCount
RemoveMenu
GetMenuStringA
GetMenuState
DdePostAdvise
GetCaretPos
CharPrevA
CharNextA
GetUpdateRgn
GetUpdateRect
PtInRect
ChildWindowFromPointEx
ReleaseCapture
SetCapture
InflateRect
GetWindowRect
ClientToScreen
MoveWindow
IsWindowEnabled
IsChild
SetParent
IsIconic
IsZoomed
DefMDIChildProcA
MessageBeep
PeekMessageA
PostMessageA
LoadStringA
AppendMenuA
DestroyMenu
CreatePopupMenu
GetMessageTime
GetMessagePos
DrawFocusRect
CopyAcceleratorTableA
GetWindowRgn
CharUpperA
TranslateMDISysAccel
SubtractRect
IsRectEmpty
InvalidateRgn
InvalidateRect
CopyRect
GetDCEx
IntersectRect
LoadAcceleratorsA
BringWindowToTop
GetWindowThreadProcessId
AttachThreadInput
EqualRect
EnableWindow
SetFocus
SendMessageA
SetWindowsHookExA
GetClassNameA
LoadCursorA
SetCursor
SetWindowLongA
GetWindow
GetFocus
GetKeyboardLayout
GetSystemMenu
CallNextHookEx
GetParent
DestroyWindow
SetWindowTextA
SetWindowPos
UpdateWindow
CreateWindowExA
SystemParametersInfoA
GetCapture
WindowFromPoint
ScreenToClient
SetTimer
IsWindowVisible
ShowWindow
KillTimer
GetDC
ReleaseDC
MapWindowPoints
GetCursorPos
GetCursor
OffsetRect
GetIconInfo
DefWindowProcA
BeginPaint
GetClientRect
EndPaint
GetSysColor
GetActiveWindow
GetWindowLongA
DdeDisconnect
DdeConnect
DdeSetUserHandle
DdeNameService
DdeCreateStringHandleA
DdeUninitialize
DdeInitializeA
DdeFreeStringHandle
DdeQueryConvInfo
DdeQueryStringA
DdeFreeDataHandle
SetScrollRange
SetScrollPos
DrawFrameControl
LockWindowUpdate
CharLowerBuffA
IsClipboardFormatAvailable
SetClipboardData
GetClipboardData
OpenClipboard
EmptyClipboard
CloseClipboard
GetCaretBlinkTime
SetCaretPos
GetWindowTextLengthA
CreateCaret
ShowCaret
HideCaret
DestroyCaret
GetScrollPos
GetClipboardFormatNameA
DrawTextExA
SetWindowRgn
ToAscii
CreateAcceleratorTableA
DestroyAcceleratorTable
ShowScrollBar
GetScrollInfo
GetLastActivePopup
GetMenuItemInfoA
SetMenuItemInfoA
SetKeyboardState
GetKeyboardState
GetQueueStatus
GetDoubleClickTime
SetWindowContextHelpId
TrackPopupMenu
SetMenuDefaultItem
DrawMenuBar
DeleteMenu
InsertMenuA
GetSubMenu
GetMenuItemID
GetMenu
SetMenu
CreateMenu
ModifyMenuA
CheckMenuItem
BeginDeferWindowPos
EndDeferWindowPos
DeferWindowPos
PostThreadMessageA
VkKeyScanA
CharLowerA
DrawIcon
MessageBoxIndirectA
DialogBoxParamA
IsCharAlphaA
EnumThreadWindows
SetScrollInfo
gdi32
RestoreDC
RealizePalette
SetROP2
SaveDC
GetClipBox
SetWindowOrgEx
ExcludeClipRect
CreateHalftonePalette
GetTextMetricsA
PatBlt
EnumFontsA
TranslateCharsetInfo
GetROP2
SetBrushOrgEx
GetDeviceCaps
GetObjectType
CreatePenIndirect
CreateBrushIndirect
Rectangle
GetStockObject
Arc
LineTo
MoveToEx
Pie
Ellipse
SetStretchBltMode
GetPixel
GetTextExtentPoint32A
SetPixelV
StretchDIBits
GetCurrentObject
TextOutA
GetBkColor
StretchBlt
CreateDIBitmap
CloseMetaFile
SetWindowExtEx
CreateMetaFileA
EndDoc
AbortDoc
StartPage
CreateCompatibleBitmap
StartDocA
CreateDCA
ResetDCA
Escape
ScaleViewportExtEx
SetViewportExtEx
SetMapMode
DeleteMetaFile
PlayMetaFile
SetAbortProc
DeleteEnhMetaFile
PlayEnhMetaFile
CreateICA
GetEnhMetaFileHeader
ScaleWindowExtEx
GetWindowOrgEx
GetPaletteEntries
CreateDIBSection
CloseEnhMetaFile
CreateEnhMetaFileA
LPtoDP
EqualRgn
ExtCreateRegion
GetDIBits
SetTextAlign
GetWindowExtEx
GetViewportExtEx
CopyMetaFileA
CopyEnhMetaFileA
PathToRegion
EndPath
BeginPath
WidenPath
GetTextColor
GetMapMode
SetDIBColorTable
RoundRect
CreateEllipticRgnIndirect
CreateRoundRectRgn
GetSystemPaletteEntries
GetNearestColor
CreateCompatibleDC
SetViewportOrgEx
BitBlt
DeleteDC
IntersectClipRect
OffsetWindowOrgEx
SelectClipRgn
SelectPalette
CreatePalette
PtInRegion
OffsetRgn
ExtSelectClipRgn
CreateRectRgnIndirect
CreateRectRgn
SetRectRgn
CombineRgn
CreateFontIndirectA
GetTextExtentPointA
GetObjectA
GetBitmapBits
SetBkMode
SelectObject
ExtTextOutA
CreateBitmap
CreatePatternBrush
SetTextColor
SetBkColor
CreatePen
CreateHatchBrush
UnrealizeObject
CreateSolidBrush
EndPage
DeleteObject
advapi32
RegQueryInfoKeyA
RegCreateKeyW
RegQueryValueExW
RegEnumValueA
RegEnumValueW
RegEnumKeyW
RegDeleteValueW
RegDeleteKeyW
RegOpenKeyW
RegSetValueExW
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegEnumKeyExA
ReportEventA
DeregisterEventSource
RegisterEventSourceA
RegDeleteValueA
RegSetValueA
RegCreateKeyA
RegSetValueExA
RegEnumKeyA
RegDeleteKeyA
RegQueryValueA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegOpenKeyA
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
ole32
CoTaskMemAlloc
CoTaskMemFree
BindMoniker
RegisterDragDrop
RevokeDragDrop
DoDragDrop
CreateILockBytesOnHGlobal
OleFlushClipboard
OleIsCurrentClipboard
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
CreateDataAdviseHolder
CreateOleAdviseHolder
CoRegisterClassObject
CoRevokeClassObject
CLSIDFromString
OleDoAutoConvert
OleRegGetUserType
OleSaveToStream
ReadClassStg
ReadClassStm
OleConvertIStorageToOLESTREAM
OleConvertOLESTREAMToIStorage
StgIsStorageILockBytes
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
OleCreateFromData
OleCreateLinkFromData
OleGetIconOfClass
OleGetClipboard
OleSetClipboard
OleCreateLink
OleCreateLinkToFile
OleGetAutoConvert
OleCreateFromFile
CoMarshalInterface
CoUnmarshalInterface
CreateStreamOnHGlobal
StringFromCLSID
StringFromGUID2
CLSIDFromProgID
ProgIDFromCLSID
CoGetClassObject
CoCreateInstance
MkParseDisplayName
CoIsOle1Class
OleQueryLinkFromData
OleQueryCreateFromData
GetClassFile
CreateBindCtx
OleDuplicateData
ReleaseStgMedium
OleSetMenuDescriptor
CoRegisterMessageFilter
OleUninitialize
OleInitialize
CoGetMalloc
OleRegGetMiscStatus
CoCreateGuid
IIDFromString
CoFreeUnusedLibraries
CoDisconnectObject
IsAccelerator
OleIsRunning
OleRun
OleLockRunning
StgCreateDocfile
WriteClassStg
OleSave
StgOpenStorage
OleLoad
CoLockObjectExternal
oleaut32
OleTranslateColor
OleCreatePropertyFrame
VariantInit
VariantClear
SysAllocString
SysFreeString
OleCreateFontIndirect
OleCreatePictureIndirect
SysAllocStringByteLen
OaBuildVersion
SysAllocStringLen
VariantChangeType
SetErrorInfo
CreateErrorInfo
GetErrorInfo
DispGetParam
LoadTypeLi
SysStringByteLen
LoadRegTypeLi
RegisterTypeLi
LoadTypeLibEx
UnRegisterTypeLi
LHashValOfNameSys
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
OleLoadPicture
SafeArrayDestroy
VariantCopy
VariantCopyInd
SafeArrayDestroyData
VariantChangeTypeEx
CreateDispTypeInfo
DispGetIDsOfNames
DispInvoke
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElement
SafeArrayPutElement
SafeArrayRedim
SafeArrayCopy
OleIconToCursor
RevokeActiveObject
SafeArrayAllocDescriptor
SafeArrayDestroyDescriptor
SafeArrayAllocData
SafeArrayLock
SafeArrayUnlock
VarDateFromStr
SysReAllocStringLen
GetActiveObject
VarR8FromStr
VarCyFromI4
VarBstrFromI2
VarBstrFromI4
VarBstrFromR4
VarBstrFromR8
VarBstrFromDate
VarBstrFromCy
VarI2FromStr
VarI4FromStr
VarI4FromR8
VarR4FromStr
VarCyFromStr
SysReAllocString
LHashValOfNameSysA
SysStringLen
BASIC_CLASS_AddRef
BASIC_CLASS_GetIDsOfNames
BASIC_CLASS_Invoke
BASIC_CLASS_QueryInterface
BASIC_CLASS_Release
BASIC_DISPINTERFACE_GetTICount
BASIC_DISPINTERFACE_GetTypeInfo
CopyRecord
CreateIExprSrvObj
DLLGetDocumentation
DllCanUnloadNow
DllFunctionCall
DllGetClassObject
DllRegisterServer
DllUnregisterServer
EVENT_SINK2_AddRef
EVENT_SINK2_Release
EVENT_SINK_AddRef
EVENT_SINK_GetIDsOfNames
EVENT_SINK_Invoke
EVENT_SINK_QueryInterface
EVENT_SINK_Release
EbCreateContext
EbDestroyContext
EbGetErrorInfo
EbGetHandleOfExecutingProject
EbGetObjConnectionCounts
EbGetVBAObject
EbIsProjectOnStack
EbLibraryLoad
EbLibraryUnload
EbLoadRunTime
EbResetProject
EbResetProjectNormal
EbSetContextWorkerThread
GetMem1
GetMem2
GetMem4
GetMem8
GetMemEvent
GetMemNewObj
GetMemObj
GetMemStr
GetMemVar
IID_IVbaHost
MethCallEngine
ProcCallEngine
PutMem1
PutMem2
PutMem4
PutMem8
PutMemEvent
PutMemNewObj
PutMemObj
PutMemStr
PutMemVar
SetMemEvent
SetMemNewObj
SetMemObj
SetMemVar
ThunRTMain
TipCreateInstanceEx
TipCreateInstanceProject2
TipGetAddressOfPredeclaredInstance
TipInvokeMethod
TipInvokeMethod2
TipSetOption
TipUnloadInstance
TipUnloadProject
UserDllMain
VBDllCanUnloadNow
VBDllGetClassObject
VBDllRegisterServer
VBDllUnRegisterServer
VarPtr
Zombie_AddRef
Zombie_GetIDsOfNames
Zombie_GetTypeInfo
Zombie_GetTypeInfoCount
Zombie_Invoke
Zombie_QueryInterface
Zombie_Release
_CIatan
_CIcos
_CIexp
_CIlog
_CIsin
_CIsqrt
_CItan
__vbaAptOffset
__vbaAryConstruct
__vbaAryConstruct2
__vbaAryCopy
__vbaAryDestruct
__vbaAryLock
__vbaAryMove
__vbaAryRebase1Var
__vbaAryRecCopy
__vbaAryRecMove
__vbaAryUnlock
__vbaAryVar
__vbaAryVarVarg
__vbaBoolErrVar
__vbaBoolStr
__vbaBoolVar
__vbaBoolVarNull
__vbaCVarAryUdt
__vbaCastObj
__vbaCastObjVar
__vbaCheckType
__vbaCheckTypeVar
__vbaChkstk
__vbaCopyBytes
__vbaCopyBytesZero
__vbaCyAbs
__vbaCyAdd
__vbaCyErrVar
__vbaCyFix
__vbaCyForInit
__vbaCyForNext
__vbaCyI2
__vbaCyI4
__vbaCyInt
__vbaCyMul
__vbaCyMulI2
__vbaCySgn
__vbaCyStr
__vbaCySub
__vbaCyUI1
__vbaCyVar
__vbaDateR4
__vbaDateR8
__vbaDateStr
__vbaDateVar
__vbaDerefAry
__vbaDerefAry1
__vbaEnd
__vbaErase
__vbaEraseKeepData
__vbaEraseNoPop
__vbaError
__vbaErrorOverflow
__vbaExceptHandler
__vbaExitEachAry
__vbaExitEachColl
__vbaExitEachVar
__vbaExitProc
__vbaFPException
__vbaFPFix
__vbaFPInt
__vbaFailedFriend
__vbaFileClose
__vbaFileCloseAll
__vbaFileLock
__vbaFileOpen
__vbaFileSeek
__vbaFixstrConstruct
__vbaForEachAry
__vbaForEachCollAd
__vbaForEachCollObj
__vbaForEachCollVar
__vbaForEachVar
__vbaFpCDblR4
__vbaFpCDblR8
__vbaFpCSngR4
__vbaFpCSngR8
__vbaFpCmpCy
__vbaFpCy
__vbaFpI2
__vbaFpI4
__vbaFpR4
__vbaFpR8
__vbaFpUI1
__vbaFreeObj
__vbaFreeObjList
__vbaFreeStr
__vbaFreeStrList
__vbaFreeVar
__vbaFreeVarList
__vbaFreeVarg
__vbaGenerateBoundsError
__vbaGet3
__vbaGet4
__vbaGetFxStr3
__vbaGetFxStr4
__vbaGetOwner3
__vbaGetOwner4
__vbaGosub
__vbaGosubFree
__vbaGosubReturn
__vbaHresultCheck
__vbaHresultCheckNonvirt
__vbaHresultCheckObj
__vbaI2Abs
__vbaI2Cy
__vbaI2ErrVar
__vbaI2ForNextCheck
__vbaI2I4
__vbaI2Sgn
__vbaI2Str
__vbaI2Var
__vbaI4Abs
__vbaI4Cy
__vbaI4ErrVar
__vbaI4ForNextCheck
__vbaI4Sgn
__vbaI4Str
__vbaI4Var
__vbaInStr
__vbaInStrB
__vbaInStrVar
__vbaInStrVarB
__vbaInputFile
__vbaLateIdCall
__vbaLateIdCallLd
__vbaLateIdCallSt
__vbaLateIdNamedCall
__vbaLateIdNamedCallLd
__vbaLateIdNamedCallSt
__vbaLateIdNamedStAd
__vbaLateIdSt
__vbaLateIdStAd
__vbaLateMemCall
__vbaLateMemCallLd
__vbaLateMemCallSt
__vbaLateMemNamedCall
__vbaLateMemNamedCallLd
__vbaLateMemNamedCallSt
__vbaLateMemNamedStAd
__vbaLateMemSt
__vbaLateMemStAd
__vbaLbound
__vbaLdZeroAry
__vbaLenBstr
__vbaLenBstrB
__vbaLenVar
__vbaLenVarB
__vbaLineInputStr
__vbaLineInputVar
__vbaLsetFixstr
__vbaLsetFixstrFree
__vbaMidStmtBstr
__vbaMidStmtBstrB
__vbaMidStmtVar
__vbaMidStmtVarB
__vbaNameFile
__vbaNew
__vbaNew2
__vbaNextEachAry
__vbaNextEachCollAd
__vbaNextEachCollObj
__vbaNextEachCollVar
__vbaNextEachVar
__vbaObjAddref
__vbaObjIs
__vbaObjSet
__vbaObjSetAddref
__vbaObjVar
__vbaOnError
__vbaOnGoCheck
__vbaPowerR8
__vbaPrintFile
__vbaPrintObj
__vbaPut3
__vbaPut4
__vbaPutFxStr3
__vbaPutFxStr4
__vbaPutOwner3
__vbaPutOwner4
__vbaR4Cy
__vbaR4ErrVar
__vbaR4ForNextCheck
__vbaR4Sgn
__vbaR4Str
__vbaR4Var
__vbaR8Cy
__vbaR8ErrVar
__vbaR8FixI2
__vbaR8FixI4
__vbaR8ForNextCheck
__vbaR8IntI2
__vbaR8IntI4
__vbaR8Sgn
__vbaR8Str
__vbaR8Var
__vbaRaiseEvent
__vbaRecAnsiToUni
__vbaRecAssign
__vbaRecDestruct
__vbaRecDestructAnsi
__vbaRecUniToAnsi
__vbaRedim
__vbaRedimPreserve
__vbaRedimPreserveVar
__vbaRedimPreserveVar2
__vbaRedimVar
__vbaRedimVar2
__vbaRefVarAry
__vbaResume
__vbaRsetFixstr
__vbaRsetFixstrFree
__vbaSetSystemError
__vbaStopExe
__vbaStr2Vec
__vbaStrAryToAnsi
__vbaStrAryToUnicode
__vbaStrBool
__vbaStrCat
__vbaStrCmp
__vbaStrComp
__vbaStrCompVar
__vbaStrCopy
__vbaStrCy
__vbaStrDate
__vbaStrErrVarCopy
__vbaStrFixstr
__vbaStrI2
__vbaStrI4
__vbaStrLike
__vbaStrMove
__vbaStrR4
__vbaStrR8
__vbaStrTextCmp
__vbaStrTextLike
__vbaStrToAnsi
__vbaStrToUnicode
__vbaStrUI1
__vbaStrVarCopy
__vbaStrVarMove
__vbaStrVarVal
__vbaUI1Cy
__vbaUI1ErrVar
__vbaUI1I2
__vbaUI1I4
__vbaUI1Sgn
__vbaUI1Str
__vbaUI1Var
__vbaUbound
__vbaUdtVar
__vbaUnkVar
__vbaVar2Vec
__vbaVarAbs
__vbaVarAdd
__vbaVarAnd
__vbaVarCat
__vbaVarCmpEq
__vbaVarCmpGe
__vbaVarCmpGt
__vbaVarCmpLe
__vbaVarCmpLt
__vbaVarCmpNe
__vbaVarCopy
__vbaVarDateVar
__vbaVarDiv
__vbaVarDup
__vbaVarEqv
__vbaVarErrI4
__vbaVarFix
__vbaVarForInit
__vbaVarForNext
__vbaVarIdiv
__vbaVarImp
__vbaVarIndexLoad
__vbaVarIndexLoadRef
__vbaVarIndexLoadRefLock
__vbaVarIndexStore
__vbaVarIndexStoreObj
__vbaVarInt
__vbaVarLateMemCallLd
__vbaVarLateMemCallLdRf
__vbaVarLateMemCallSt
__vbaVarLateMemSt
__vbaVarLateMemStAd
__vbaVarLike
__vbaVarLikeVar
__vbaVarMod
__vbaVarMove
__vbaVarMul
__vbaVarNeg
__vbaVarNot
__vbaVarOr
__vbaVarPow
__vbaVarSetObj
__vbaVarSetObjAddref
__vbaVarSetUnk
__vbaVarSetUnkAddref
__vbaVarSetVar
__vbaVarSetVarAddref
__vbaVarSub
__vbaVarTextCmpEq
__vbaVarTextCmpGe
__vbaVarTextCmpGt
__vbaVarTextCmpLe
__vbaVarTextCmpLt
__vbaVarTextCmpNe
__vbaVarTextLike
__vbaVarTextLikeVar
__vbaVarTextTstEq
__vbaVarTextTstGe
__vbaVarTextTstGt
__vbaVarTextTstLe
__vbaVarTextTstLt
__vbaVarTextTstNe
__vbaVarTstEq
__vbaVarTstGe
__vbaVarTstGt
__vbaVarTstLe
__vbaVarTstLt
__vbaVarTstNe
__vbaVarVargNofree
__vbaVarXor
__vbaVarZero
__vbaVargObj
__vbaVargObjAddref
__vbaVargParmRef
__vbaVargUnk
__vbaVargUnkAddref
__vbaVargVar
__vbaVargVarCopy
__vbaVargVarMove
__vbaVargVarRef
__vbaVerifyVarObj
__vbaWriteFile
_adj_fdiv_m16i
_adj_fdiv_m32
_adj_fdiv_m32i
_adj_fdiv_m64
_adj_fdiv_r
_adj_fdivr_m16i
_adj_fdivr_m32
_adj_fdivr_m32i
_adj_fdivr_m64
_adj_fpatan
_adj_fprem
_adj_fprem1
_adj_fptan
_allmul
rtBoolFromErrVar
rtBstrFromErrVar
rtCyFromErrVar
rtDecFromVar
rtI2FromErrVar
rtI4FromErrVar
rtR4FromErrVar
rtR8FromErrVar
rtUI1FromErrVar
rtcAbsVar
rtcAnsiValueBstr
rtcAppActivate
rtcAppleScript
rtcArray
rtcAtn
rtcBeep
rtcBstrFromAnsi
rtcBstrFromByte
rtcBstrFromChar
rtcBstrFromError
rtcBstrFromFormatVar
rtcByteValueBstr
rtcCVErrFromVar
rtcCallByName
rtcChangeDir
rtcChangeDrive
rtcCharValueBstr
rtcChoose
rtcCommandBstr
rtcCommandVar
rtcCompareBstr
rtcCos
rtcCreateObject
rtcCreateObject2
rtcCurrentDir
rtcCurrentDirBstr
rtcDDB
rtcDateAdd
rtcDateDiff
rtcDateFromVar
rtcDatePart
rtcDeleteSetting
rtcDir
rtcDoEvents
rtcEndOfFile
rtcEnvironBstr
rtcEnvironVar
rtcErrObj
rtcExp
rtcFV
rtcFileAttributes
rtcFileCopy
rtcFileDateTime
rtcFileLen
rtcFileLength
rtcFileLocation
rtcFileReset
rtcFileSeek
rtcFileWidth
rtcFilter
rtcFixVar
rtcFormatCurrency
rtcFormatDateTime
rtcFormatNumber
rtcFormatPercent
rtcFreeFile
rtcGetAllSettings
rtcGetCurrentCalendar
rtcGetDateBstr
rtcGetDateValue
rtcGetDateVar
rtcGetDayOfMonth
rtcGetDayOfWeek
rtcGetErl
rtcGetFileAttr
rtcGetHostLCID
rtcGetHourOfDay
rtcGetMinuteOfHour
rtcGetMonthOfYear
rtcGetObject
rtcGetPresentDate
rtcGetSecondOfMinute
rtcGetSetting
rtcGetTimeBstr
rtcGetTimeValue
rtcGetTimeVar
rtcGetTimer
rtcGetYear
rtcHexBstrFromVar
rtcHexVarFromVar
rtcIMEStatus
rtcIPMT
rtcIRR
rtcImmediateIf
rtcInStr
rtcInStrChar
rtcInStrRev
rtcInputBox
rtcInputCharCount
rtcInputCharCountVar
rtcInputCount
rtcInputCountVar
rtcIntVar
rtcIsArray
rtcIsDate
rtcIsEmpty
rtcIsError
rtcIsMissing
rtcIsNull
rtcIsNumeric
rtcIsObject
rtcJoin
rtcKillFiles
rtcLeftBstr
rtcLeftCharBstr
rtcLeftCharVar
rtcLeftTrimBstr
rtcLeftTrimVar
rtcLeftVar
rtcLenCharVar
rtcLenVar
rtcLog
rtcLowerCaseBstr
rtcLowerCaseVar
rtcMIRR
rtcMacId
rtcMakeDir
rtcMidBstr
rtcMidCharBstr
rtcMidCharVar
rtcMidVar
rtcMonthName
rtcMsgBox
rtcNPV
rtcNPer
rtcOctBstrFromVar
rtcOctVarFromVar
rtcPMT
rtcPPMT
rtcPV
rtcPackDate
rtcPackTime
rtcPartition
rtcQBColor
rtcR8ValFromBstr
rtcRandomNext
rtcRandomize
rtcRate
rtcRemoveDir
rtcReplace
rtcRgb
rtcRightBstr
rtcRightCharBstr
rtcRightCharVar
rtcRightTrimBstr
rtcRightTrimVar
rtcRightVar
rtcRound
rtcSLN
rtcSYD
rtcSaveSetting
rtcSendKeys
rtcSetCurrentCalendar
rtcSetDateBstr
rtcSetDateVar
rtcSetFileAttr
rtcSetTimeBstr
rtcSetTimeVar
rtcSgnVar
rtcShell
rtcSin
rtcSpaceBstr
rtcSpaceVar
rtcSplit
rtcSqr
rtcStrConvVar
rtcStrConvVar2
rtcStrFromVar
rtcStrReverse
rtcStringBstr
rtcStringVar
rtcSwitch
rtcTan
rtcTrimBstr
rtcTrimVar
rtcTypeName
rtcUpperCaseBstr
rtcUpperCaseVar
rtcVarBstrFromAnsi
rtcVarBstrFromByte
rtcVarBstrFromChar
rtcVarDateFromVar
rtcVarFromError
rtcVarFromFormatVar
rtcVarFromVar
rtcVarStrFromVar
rtcVarType
rtcWeekdayName
Name
.text
Size
1008KB
Virtual Size
1007KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
ENGINE
Size
52KB
Virtual Size
51KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
28KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
196KB
Virtual Size
195KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
64KB
Virtual Size
61KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
ford/elmconfig/ELMConfig+DLL/ELMConfig/ELMConfig.exe
- SHA256 6f4ce8a08f188f6ed736950a76b5c71575fd9a87b2de86b46178ad4508bfb776
- MD5 6ffe06ea2ff458efa3fdd6ecd2c0547e
- SHA1 be9f7b73816dc5d2300b1b62ebae5fbd969185de
- SHA512 386bcab8b3016ea77fbf05fc32492be371d3c7cf81e56cff785274ce61b3a204fc8d2f38f5e3ea941ef636ddf04574fdee350ef0f2705cf86c5bc8ed014197a5
- SSDEEP 3072:m5a2wCHi7yBRt4Yp1fOTeYlZynZTusjO7nIWBMfb9hftfZ+sGPjpMFMuBAMLrL5X:MHn6g1fOTeYlZYZTxmIdLfxUrtPuXmI
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
806912
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
.text
Size
132KB
Virtual Size
768KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
4KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
splasher
Size
94KB
Virtual Size
96KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=1, id=14, version=7299,
count=5, id=9, version=8041,
count=1, id=13, version=8169,
ford/elmconfig/ELMConfig+DLL/ELMConfig/code.dtc
- SHA256 769cd140f8357fc5e71b888223655cdb4ca48e7226036d2a6358822d9af8af8d
- MD5 d5cb2b7acce4f1bc9c66784aea83cf1d
- SHA1 d6a19afef706bc4d407a39700037ee700d5dc7c7
- SHA512 717d6981a9f3cf59300653c865eea9d7182ba9817a9c28d7d999b732325077412ec00bef70dfd6d3957695134233d8721cde280a6d7e5fb5a88399002b8631a9
- SSDEEP 24576:ONsj+oJ4B3w0saIHtlO841nEjlT114o2OzMyqlFzjqa08Z:1+oJawHaD1wS
- MD5 SHA1 SHA512 SSDEEP
ford/elmconfig/ELMConfig_v0.1.1.6/ELMConfig.exe
- SHA256 e24b02b94d44a4c1198c9d847621bfc3b6dc34148a8ad29d6fec410ac29caee6
- MD5 3969de9f976ff13cea615fba93400bf7
- SHA1 38dfa1de5b832300385596083939f7f707704506
- SHA512 00371ef023824a2f54572954ac479f697cebf0418bf4aed2252c4e7aab267179a018aa15f2528eff460144a687aad1fc41a5bedb5952df6cff2851ce0e803ab6
- SSDEEP 3072:xOQObtcwWjtYbezRnMPSQwFX3kFkto9Vk:9eIYKNpFo9
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
92191
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
.text
Size
88KB
Virtual Size
388KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
4KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=1, id=14, version=7299,
count=5, id=9, version=8041,
count=1, id=13, version=8169,
ford/elmconfig/ELMConfig_v0.1.1.6/code.dtc
- SHA256 769cd140f8357fc5e71b888223655cdb4ca48e7226036d2a6358822d9af8af8d
- MD5 d5cb2b7acce4f1bc9c66784aea83cf1d
- SHA1 d6a19afef706bc4d407a39700037ee700d5dc7c7
- SHA512 717d6981a9f3cf59300653c865eea9d7182ba9817a9c28d7d999b732325077412ec00bef70dfd6d3957695134233d8721cde280a6d7e5fb5a88399002b8631a9
- SSDEEP 24576:ONsj+oJ4B3w0saIHtlO841nEjlT114o2OzMyqlFzjqa08Z:1+oJawHaD1wS
- MD5 SHA1 SHA512 SSDEEP
ford/elmconfig/ELMConfig_v0.1.1.8b/ELMConfig.exe
- SHA256 8678a75d05076b6c8903e37cc6f7d2cb30130d4ff99a52bcc687a1204acd8cac
- MD5 b2c7b0354b0894707a3ecb0ebdd7b78b
- SHA1 9e20c89b9765d80545244cdd4bf3b302bc3c4113
- SHA512 474819e896e3a3b9b1850d5b066cf8e31f69a31754b207ba7b094da21088cebe6d26309ec1698b27ea0fb255733ccae05e35ee8dcbda3462ab203ccbf201ad22
- SSDEEP 3072:mHzgLA4mxayRFcppcqawEDewaPMCyfXDkgL68igb38sw19bkFPnQw7m:mTgLA4wk7yw4gU9Dkg+8i838LXkxQw
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
150440
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
.text
Size
144KB
Virtual Size
768KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
4KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=1, id=14, version=7299,
count=5, id=9, version=8041,
count=1, id=13, version=8169,
ford/elmconfig/ELMConfig_v0.1.1.8b/code.dtc
- SHA256 f01b654fcf28517d5859a9945361add6b2604b3ad21b8ffec5273f814dcaad97
- MD5 5f3aab1ed96dac0e65b8a478adee4ca6
- SHA1 cdd7c133c3c1cbf8561d54880d257a13268f3c6d
- SHA512 fa05ee529b9fbe31c3a44793939c7293519a029f41ec2f4c9472bcd2d586aa7d0d1ce28f16aef1a4f65f173a98f2296abfe647925dfff5585d8f737f8638ab6e
- SSDEEP 24576:wNsj+oJ4B3w3saIHtlO841nEjlT114o2OzMyqlFzjqa08q:n+oJaw8aD1wB
- MD5 SHA1 SHA512 SSDEEP
ford/elmconfig/ELMConfig_v0.1.2.1b/ELMConfig.exe
- SHA256 7f5b1ecfc7ed4313b95b764f06a3e1bdffc592dc6b36c167b4afb30587abd6d6
- MD5 fc3fcb38c893318be3aa9a72a94f480e
- SHA1 83342e62b25e8194a5031d5f2f06f782d548a9a3
- SHA512 e7fd2a24e49d2299c2991b349f0ca4da969e1e3877842aecdfa62dae48bb18cf77867789f9f1a00f236cdd5893f1abd371916b39371a6705ee6ae0630247f03f
- SSDEEP 3072:yISRUFDpTpkgRsgIvPsokCZhrV3lKu8OpEHGKRQBlizEvwhpnwttC4ZbPA+GYp84:I6DPYvUokyhEGfIow/wPRZbNp81l6
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
199078
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
.text
Size
192KB
Virtual Size
992KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
4KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=1, id=14, version=7299,
count=9, id=9, version=8041,
count=1, id=13, version=8169,
ford/elmconfig/ELMConfig_v0.1.2.1b/code.dtc
- SHA256 f01b654fcf28517d5859a9945361add6b2604b3ad21b8ffec5273f814dcaad97
- MD5 5f3aab1ed96dac0e65b8a478adee4ca6
- SHA1 cdd7c133c3c1cbf8561d54880d257a13268f3c6d
- SHA512 fa05ee529b9fbe31c3a44793939c7293519a029f41ec2f4c9472bcd2d586aa7d0d1ce28f16aef1a4f65f173a98f2296abfe647925dfff5585d8f737f8638ab6e
- SSDEEP 24576:wNsj+oJ4B3w3saIHtlO841nEjlT114o2OzMyqlFzjqa08q:n+oJaw8aD1wB
- MD5 SHA1 SHA512 SSDEEP
ford/elmconfig/ELMConfig_v0.1.2.1b/frw.dat
- SHA256 99772040f071d1d3fce8882d5c22231206a4d427e2a48cf7d52c6840fc3f37dc
- MD5 9be8e3d39ab567873c020d477d658a34
- SHA1 734176ecc507e3f4db0f139e4f996a0350eac678
- SHA512 9f5ee4615197378ba4b8000e5c9b9e9fda3bfec53a4fc9f6160400672838d293fabb1108126f1e5af1fd95e4c14b15f185a23996efd6db474f29ee472222a052
- SSDEEP 12288:X9+f3pwL8uOUJquTDNEdtJPNzdtUnYKYvMRqhTSY228m:gf5OOUVTDNEdXyYvMQhTS6
- MD5 SHA1 SHA512 SSDEEP
ford/elmconfig/ELMConfig_v0.2.2b/ELMConfig.exe
- SHA256 5606eda90132f4d7c2a7dc69fdbc70a6847b2053723a73ac842e0fde5ce24963
- MD5 55156037739e419f42ea14b9876bccea
- SHA1 c2288c4610fab262c44f80a08ef239012ddd9b8a
- SHA512 357e58ef10b06872068f945bc2fb8b98ee8ae99be61b47b4ab43373b4815ba199bbc282f049b34a7867d08e72aadfe5e2a7523cf7bb7ed8b650074d4d1274eb6
- SSDEEP 6144:XyyAcYH+6m82cAfNBiIP96e6dFQOYiR46Vkr0VVzEUKY:XyXXH2HltQQOYiRbVRVVzZK
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
259954
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
.text
Size
252KB
Virtual Size
1.3MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
4KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=1, id=14, version=7299,
count=16, id=9, version=8041,
count=1, id=13, version=8169,
ford/elmconfig/ELMConfig_v0.2.2b/data/6G9T-14C097-AA.vbf
- SHA256 8aee5132d64fa4b977268a8bd6950433291977bf55831c937f8fab15ad577ebd
- MD5 dbbf9394e6e37bb92d88ddb402e86d97
- SHA1 027298b6b3d2adeb51d29261923fe3ce19b0f150
- SHA512 7676c4b47a27e8356eaae8f289e5b2e7e5747dd75961d51c457b6d42a94a92acee1461c0cfe69d3acc36be4f3fe2754f368ebe4e33e46f49df0f7a3d00d72c66
- SSDEEP 192:pZ/9VNeRP0KZvg6P4Antciwv29pVh8sX4fZWYGp4EkWeSzdNR2t:e8KZfmqVKsX4Wdp4+eSzdNR2t
- MD5 SHA1 SHA512 SSDEEP
ford/elmconfig/ELMConfig_v0.2.2b/data/7G9T-14C097-AA.vbf
- SHA256 210404b482b6cfe6aea15e2f0f6af2aae5ec922a7c66b283687855ee2033ebb6
- MD5 6986ac067a5b65bb5bd858ccb521b9f7
- SHA1 f3dfabd026003dcd3411fdc93c7a25805acf5289
- SHA512 48c033b26b95dac402fe07abedcaf0dd08523921486947a49db015c258cd897c0c7bcbfc157af6f0f15514337db5a715de31f77757fd0cb470854e572a833f16
- SSDEEP 192:ptaAd4bVT0KTKP4+njuKiPKdpAGRbs8rZ+tRWgQYpkSzRNw0:ZcoKQCDGAMg4+xQmkSzRN7
- MD5 SHA1 SHA512 SSDEEP
ford/elmconfig/ELMConfig_v0.2.2b/data/AG9T-14C097-AC.vbf
- SHA256 09b95715dfbdb57b698772ecab4122425ad093e551ce6efeab30fd7d7f0ff25f
- MD5 7423045790da86692dbcae1f7a839da2
- SHA1 44f45e454cf7aea8d49765e2ef82edff92df6392
- SHA512 0ef7e3020db1e4bd8961be9e475fc2b00eca32e4a5b435a250552f78cbd6b3d9112d5a27359b860231d015b2934aa031823d3087bb8653fe5f9270ba6ef9d2eb
- SSDEEP 192:pwD6ZnVrSxSgkdY6K7m2q47hBqIp9Rb8/lHO0SX4r30KcDtQqGkVdP4/ID:fVCNBq2/V7b8NOTa3chTGQ46
- MD5 SHA1 SHA512 SSDEEP
ford/elmconfig/ELMConfig_v0.2.2b/data/BG9T-14C097-AA.vbf
- SHA256 32589f8e4cf57c696a2ff4981f45915a70f298db6357afcb53e2ed6ea8379aac
- MD5 8d423c5466741e9d6f9f4ec9122d4b41
- SHA1 bf61e034872830bccf40a525f13125ea2fd1bf13
- SHA512 2cb0ff35caa7c287446766d8ae482270e01f932f4e34b8d9547dd2774ddc02a04ea9a98b4e51e6e17b33a89c50182bb848cf28b2e1a48ae174cd372d4986e811
- SSDEEP 192:pn42QFDV3S9hjyv1XUYDGMFcXN80Id3zRanO0QN430S4xfGGdcGU:b0hGcpqLXN8jDuO/43QxfG1d
- MD5 SHA1 SHA512 SSDEEP
ford/elmconfig/ELMConfig_v0.2.2b/data/code.dtc
- SHA256 b7b133768a11fb4e1dfd9ad8efcb02fdd7c00d7b2dca574323efa8c20049d2e7
- MD5 84e5ffcc80f404f282cea6364757ec45
- SHA1 372ab7462b9846022ceda110fdeb0a3a274030a6
- SHA512 4188ad067b067d073837b03f9fb8073124c29373dcbb1c10275f46f0328853fe942bd24d7d97060d34e98cfabc195c73c93a5518cec201d6ecd148f231b376d2
- SSDEEP 24576:0Nsj+oJ2B3z3saIHtlO84YnEjlT114o2OzMyqlFzjqa08P:D+oJEz8aDYwQ
- MD5 SHA1 SHA512 SSDEEP
ford/elmconfig/ELMConfig_v0.2.2b/data/frw.dat
- SHA256 e99752203a531db6664e815aba8aa3e07e32cfedb89cbcfb7e3a3fb3206de37d
- MD5 3c9991107afcd094671347a06653cb2e
- SHA1 52b7e2eecf140aa4e9a71c399302bb6c41700beb
- SHA512 8b9989b3c087264d3c12fdf95e4f3fc50217cb897ab519027b1c074d196ed36f4f113d03af77e9a46eab8137520eb3b158b69126c2b6f49e72f991c27b5275d9
- SSDEEP 12288:X9+f3pwL8uOUJquTDNEdtNPNzdtUnYKYvMRqhTSY220JC:gf5OOUVTDNEdzyYvMQhTSo
- MD5 SHA1 SHA512 SSDEEP
ford/elmconfig/ELMConfig_v0.2.4/ELMConfig.exe
- SHA256 122bc73f506bfb8f79f9f45909521cb447d31b0f366550416a9e2ce8e9313391
- MD5 5521e906dd2284c95b533adccc0a6f81
- SHA1 5841e036d10bb4b440ae3274ad76f791e9c7a4f5
- SHA512 541b6d92a8fa0b9f60f5edead18be35b7bc05699c841eb9eba2063d97d28cb9150013efd0d69487a41aca150384b94937a7d93d442280cece324dd3aed335acb
- SSDEEP 6144:OGsbYfUfJdiSeGHTIIbhqr718wdgQUnYeIBgLjCk:4BRoxawr718ugQMOBg/p
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
263967
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
.text
Size
256KB
Virtual Size
1.2MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
4KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=1, id=14, version=7299,
count=16, id=9, version=8041,
count=1, id=13, version=8169,
ford/elmconfig/ELMConfig_v0.2.4/data/6G9T-14C097-AA.vbf
- SHA256 8aee5132d64fa4b977268a8bd6950433291977bf55831c937f8fab15ad577ebd
- MD5 dbbf9394e6e37bb92d88ddb402e86d97
- SHA1 027298b6b3d2adeb51d29261923fe3ce19b0f150
- SHA512 7676c4b47a27e8356eaae8f289e5b2e7e5747dd75961d51c457b6d42a94a92acee1461c0cfe69d3acc36be4f3fe2754f368ebe4e33e46f49df0f7a3d00d72c66
- SSDEEP 192:pZ/9VNeRP0KZvg6P4Antciwv29pVh8sX4fZWYGp4EkWeSzdNR2t:e8KZfmqVKsX4Wdp4+eSzdNR2t
- MD5 SHA1 SHA512 SSDEEP
ford/elmconfig/ELMConfig_v0.2.4/data/7G9T-14C097-AA.vbf
- SHA256 210404b482b6cfe6aea15e2f0f6af2aae5ec922a7c66b283687855ee2033ebb6
- MD5 6986ac067a5b65bb5bd858ccb521b9f7
- SHA1 f3dfabd026003dcd3411fdc93c7a25805acf5289
- SHA512 48c033b26b95dac402fe07abedcaf0dd08523921486947a49db015c258cd897c0c7bcbfc157af6f0f15514337db5a715de31f77757fd0cb470854e572a833f16
- SSDEEP 192:ptaAd4bVT0KTKP4+njuKiPKdpAGRbs8rZ+tRWgQYpkSzRNw0:ZcoKQCDGAMg4+xQmkSzRN7
- MD5 SHA1 SHA512 SSDEEP
ford/elmconfig/ELMConfig_v0.2.4/data/AG9T-14C097-AC.vbf
- SHA256 09b95715dfbdb57b698772ecab4122425ad093e551ce6efeab30fd7d7f0ff25f
- MD5 7423045790da86692dbcae1f7a839da2
- SHA1 44f45e454cf7aea8d49765e2ef82edff92df6392
- SHA512 0ef7e3020db1e4bd8961be9e475fc2b00eca32e4a5b435a250552f78cbd6b3d9112d5a27359b860231d015b2934aa031823d3087bb8653fe5f9270ba6ef9d2eb
- SSDEEP 192:pwD6ZnVrSxSgkdY6K7m2q47hBqIp9Rb8/lHO0SX4r30KcDtQqGkVdP4/ID:fVCNBq2/V7b8NOTa3chTGQ46
- MD5 SHA1 SHA512 SSDEEP
ford/elmconfig/ELMConfig_v0.2.4/data/BG9T-14C097-AA.vbf
- SHA256 32589f8e4cf57c696a2ff4981f45915a70f298db6357afcb53e2ed6ea8379aac
- MD5 8d423c5466741e9d6f9f4ec9122d4b41
- SHA1 bf61e034872830bccf40a525f13125ea2fd1bf13
- SHA512 2cb0ff35caa7c287446766d8ae482270e01f932f4e34b8d9547dd2774ddc02a04ea9a98b4e51e6e17b33a89c50182bb848cf28b2e1a48ae174cd372d4986e811
- SSDEEP 192:pn42QFDV3S9hjyv1XUYDGMFcXN80Id3zRanO0QN430S4xfGGdcGU:b0hGcpqLXN8jDuO/43QxfG1d
- MD5 SHA1 SHA512 SSDEEP
ford/elmconfig/ELMConfig_v0.2.4/data/code.dtc
- SHA256 b7b133768a11fb4e1dfd9ad8efcb02fdd7c00d7b2dca574323efa8c20049d2e7
- MD5 84e5ffcc80f404f282cea6364757ec45
- SHA1 372ab7462b9846022ceda110fdeb0a3a274030a6
- SHA512 4188ad067b067d073837b03f9fb8073124c29373dcbb1c10275f46f0328853fe942bd24d7d97060d34e98cfabc195c73c93a5518cec201d6ecd148f231b376d2
- SSDEEP 24576:0Nsj+oJ2B3z3saIHtlO84YnEjlT114o2OzMyqlFzjqa08P:D+oJEz8aDYwQ
- MD5 SHA1 SHA512 SSDEEP
ford/elmconfig/ELMConfig_v0.2.4/data/frw.dat
- SHA256 e99752203a531db6664e815aba8aa3e07e32cfedb89cbcfb7e3a3fb3206de37d
- MD5 3c9991107afcd094671347a06653cb2e
- SHA1 52b7e2eecf140aa4e9a71c399302bb6c41700beb
- SHA512 8b9989b3c087264d3c12fdf95e4f3fc50217cb897ab519027b1c074d196ed36f4f113d03af77e9a46eab8137520eb3b158b69126c2b6f49e72f991c27b5275d9
- SSDEEP 12288:X9+f3pwL8uOUJquTDNEdtNPNzdtUnYKYvMRqhTSY220JC:gf5OOUVTDNEdzyYvMQhTSo
- MD5 SHA1 SHA512 SSDEEP
ford/elmconfig/ELMConfig_v0.2.9/ELMConfig.exe
- SHA256 33f738544d930af4f766ab68bf4303d8140d414e9045cd85df61cedce0af8854
- MD5 3ad782bea7d4a0de754c9bc9a4e3dc40
- SHA1 0273dfbcf4dd5f62c10adf02de0e3e8919d4e7ab
- SHA512 6db6246b4e3bfbd4733f37757f4bbd55c9728ed33f3a8322d6cc70dc3f0566767fae0ac4cb844242566d06eb434b2a09bef9ec2d273ad7552cf2e4ea8f46f306
- SSDEEP 6144:ifDxdkhlkce2g5cD0fwWMfeHjGpj5o1yba6cu6/gplBOjxGAN5PP:vhlkcPucDOw752ybZcuxlgPl
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
408473
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
.text
Size
396KB
Virtual Size
2.0MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
4KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=1, id=14, version=7299,
count=19, id=9, version=8041,
count=1, id=13, version=8169,
ford/elmconfig/ELMConfig_v0.2.9/data/6G9T-14C097-AA.vbf
- SHA256 8aee5132d64fa4b977268a8bd6950433291977bf55831c937f8fab15ad577ebd
- MD5 dbbf9394e6e37bb92d88ddb402e86d97
- SHA1 027298b6b3d2adeb51d29261923fe3ce19b0f150
- SHA512 7676c4b47a27e8356eaae8f289e5b2e7e5747dd75961d51c457b6d42a94a92acee1461c0cfe69d3acc36be4f3fe2754f368ebe4e33e46f49df0f7a3d00d72c66
- SSDEEP 192:pZ/9VNeRP0KZvg6P4Antciwv29pVh8sX4fZWYGp4EkWeSzdNR2t:e8KZfmqVKsX4Wdp4+eSzdNR2t
- MD5 SHA1 SHA512 SSDEEP
ford/elmconfig/ELMConfig_v0.2.9/data/6M2T-14C025-AB.vbf
- SHA256 7d13a429133738c09a0cb03a9080d62d940e460ee946a5009b3ee47a2bde5ebc
- MD5 efef27c10321ff7273b71e0b6c573e90
- SHA1 4f7dc249b6e09f03df71a91c26d00602a9a34c13
- SHA512 1cb9db938a8ad386c88231345ce77a756b2ce639253b7819100a23396359621f46dfd96993d21a44442ede87f4df8611748c0e28628846fd7b930759823c5e4a
- MD5 SHA1 SHA512
ford/elmconfig/ELMConfig_v0.2.9/data/7G9T-14C097-AA.vbf
- SHA256 210404b482b6cfe6aea15e2f0f6af2aae5ec922a7c66b283687855ee2033ebb6
- MD5 6986ac067a5b65bb5bd858ccb521b9f7
- SHA1 f3dfabd026003dcd3411fdc93c7a25805acf5289
- SHA512 48c033b26b95dac402fe07abedcaf0dd08523921486947a49db015c258cd897c0c7bcbfc157af6f0f15514337db5a715de31f77757fd0cb470854e572a833f16
- SSDEEP 192:ptaAd4bVT0KTKP4+njuKiPKdpAGRbs8rZ+tRWgQYpkSzRNw0:ZcoKQCDGAMg4+xQmkSzRN7
- MD5 SHA1 SHA512 SSDEEP
ford/elmconfig/ELMConfig_v0.2.9/data/7M2T-14C025-AA.vbf
- SHA256 e187db83cea837dea1787f853c7d2d3bd7069b2c38685ae3cc290c7477f15fb5
- MD5 ce4ec091de58507cbcde1fff953790e5
- SHA1 c24560cf6cc01148cffc8c638079fc04fb0510fd
- SHA512 79989a4808c98efb919894d2d261e89551a760adf956deb1c18371431f680f10e6b282856f21a7d1e0fc6ef9a89ccde62d18f507c986161fdf339084dbf291e0
- MD5 SHA1 SHA512
ford/elmconfig/ELMConfig_v0.2.9/data/AG9T-14C097-AC.vbf
- SHA256 09b95715dfbdb57b698772ecab4122425ad093e551ce6efeab30fd7d7f0ff25f
- MD5 7423045790da86692dbcae1f7a839da2
- SHA1 44f45e454cf7aea8d49765e2ef82edff92df6392
- SHA512 0ef7e3020db1e4bd8961be9e475fc2b00eca32e4a5b435a250552f78cbd6b3d9112d5a27359b860231d015b2934aa031823d3087bb8653fe5f9270ba6ef9d2eb
- SSDEEP 192:pwD6ZnVrSxSgkdY6K7m2q47hBqIp9Rb8/lHO0SX4r30KcDtQqGkVdP4/ID:fVCNBq2/V7b8NOTa3chTGQ46
- MD5 SHA1 SHA512 SSDEEP
ford/elmconfig/ELMConfig_v0.2.9/data/AM2T-14C025-AA.vbf
- SHA256 d726302638c55b25c4e49b7e8378fb3d3768d04300527734b9b7e1777e83c8be
- MD5 2dbfbc2aab2ae13113421edc1464c53f
- SHA1 675f4bcc55b122d37a363c182d3450f7f0856ce7
- SHA512 859d22e8f4cfe4bac8e9b865e05778afb27eb46fdffcbb76c300f3beeb24157bc3861ebfb5fae082a067f1c428603dd441311461e8b509f7f40cb071b7b97e16
- MD5 SHA1 SHA512
ford/elmconfig/ELMConfig_v0.2.9/data/AM2T-14C025-BA.vbf
- SHA256 a1f24386d44f8dad25a0aae0abb80c5bb29ec487005d4b618ea7e02eb69a0966
- MD5 485a0e8cd3d8a1e62429409f4d53cbb1
- SHA1 5fee478f9102e78c6b431bc2910acce9ba16743c
- SHA512 294b1e2c3addb4dda1d5a7a659d5f2e8a8f62ef13170c66ccdad2b2a77fe01a4dd9d88ce65269276a408e8148454ebe4b646c95b666431aa3367604f1a52a019
- MD5 SHA1 SHA512
ford/elmconfig/ELMConfig_v0.2.9/data/BG9T-14C097-AA.vbf
- SHA256 32589f8e4cf57c696a2ff4981f45915a70f298db6357afcb53e2ed6ea8379aac
- MD5 8d423c5466741e9d6f9f4ec9122d4b41
- SHA1 bf61e034872830bccf40a525f13125ea2fd1bf13
- SHA512 2cb0ff35caa7c287446766d8ae482270e01f932f4e34b8d9547dd2774ddc02a04ea9a98b4e51e6e17b33a89c50182bb848cf28b2e1a48ae174cd372d4986e811
- SSDEEP 192:pn42QFDV3S9hjyv1XUYDGMFcXN80Id3zRanO0QN430S4xfGGdcGU:b0hGcpqLXN8jDuO/43QxfG1d
- MD5 SHA1 SHA512 SSDEEP
ford/elmconfig/ELMConfig_v0.2.9/data/code.dtc
- SHA256 e55c5f557695c56bb3ca462c6616ecb78991bff5da87f8bcf519383028f6bf68
- MD5 18b43528235fedcfbc779d9b3d456178
- SHA1 7156bb18ba7f2c95f027f4bc365fd556175724d9
- SHA512 b8ec1164ca1c9caf4b560b11966e67b3027d32151d03240c3eb2852709f13b09ab76318b0a84f88016c09eae27cc246c6153d07ce98fe76657ece77724640d00
- SSDEEP 24576:50dg2lO3yHEnNL3kT114o2OjMyqlFzjqa08QZBe2uGgdKhpqCYKYwXE:uDuwZNuLdKh4l
- MD5 SHA1 SHA512 SSDEEP
ford/elmconfig/ELMConfig_v0.2.9/data/frw.dat
- SHA256 0b2e04cc87f5a3101b2f0250ebbd167da55e8ef068ae4a883d2b0395cf10bcc0
- MD5 e057a2807309f651e664482d99c81195
- SHA1 9c106ca558c92820dcdf76c75482cd80ee4a12a7
- SHA512 653db943f4ca8b2d46a4d7074635c2b2f3533c0308b46cc8afb8797cb630af37074db415cf9ecc7c7780a6846820c23d0a249490da606639f549c7a1478ef0b9
- SSDEEP 12288:X9+f3pwL8uOUJquTDNEdtNPNzdtUnYKYvMRqhTSY220R:gf5OOUVTDNEdzyYvMQhTSt
- MD5 SHA1 SHA512 SSDEEP
ford/forscan/FORScan.Changelog.txt
- SHA256 eef883a79ff2562881ebe036e7b3bbcb6eacfb880e2598c845dbcb36e9eb12d7
- MD5 ef056de4174ad9d32bbe20ea4dda612f
- SHA1 6061b755a48e400681ccd4193ae304bb5a3e0d5d
- SHA512 ccf525fe621d626d70cc0fc19dd39da9547b0e95bae5b7fd44031476ed2c5cbcb99270df14b17a34deebb09c362d85691ea671ddd43f08c8c89260d63000c204
- SSDEEP 768:AdhFVR5Y5/Su6VZoVjXZT2Ff5Bah3oNj/Or2tlW0sIFrASkXxjAlS+TjgV:Al3E/SxoxXZTAK3w8AfsIabXhAlvTjgV
- MD5 SHA1 SHA512 SSDEEP
ford/forscan/FORScan.EndUser.License.txt
- SHA256 6ca2e5aa2a404a583e5845afa92e4b621b2f4e09f5c9d2ca0b3517490864ffda
- MD5 2ddf8ad2c69c36fd41709d6dca03bc7a
- SHA1 556f68e16227aa59c6669f5cd1f411bbe2d2a305
- SHA512 cdb697fbc39711096abc7c3d70765b791beac7aeb8fea5b6490ecba88e0191bfc205b8982fa5317082f5b58d80d4394c020f15384f03db99a7f6e3f75aa3e9e1
- MD5 SHA1 SHA512
ford/forscan/FORScan.exe
- SHA256 c9c66f10910456e07e8e4d4f977ac3612f4b019da5308560b74df34bb5b8315f
- MD5 cf5debf90bfd7a7e6e7e001cdb918b15
- SHA1 e6867b1a7268de113ea0658cce62f755394f659c
- SHA512 e1d6b58d107ed2b42331427c3c91574aae41b266bada36bea463204f58ce6af579eb921b0bba6a2c4f5543765f77c9ce75edd42c10b52bca4eb2c843adf16e5a
- SSDEEP 24576:z1N7ZKT7HmA+J/baHpZqWjeAfW4Dsgyv5:RNU74+zFjeZ48v5
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4096
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
Size
458KB
Virtual Size
1.4MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
137KB
Virtual Size
404KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
21KB
Virtual Size
88KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
100KB
Virtual Size
100KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
153KB
Virtual Size
376KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.adata
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=1, id=12, version=7291,
count=29, id=14, version=7299,
count=22, id=11, version=8047,
count=152, id=10, version=8047,
count=3, productName=Unmarked objects (old),
count=15, id=19, version=8034,
count=330, id=1, productName=Unmarked objects,
count=153, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=155, id=11, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
ford/forscan/data/data0.bin
- SHA256 9f9ebf7fdd2e64a5e222edbaa0937b4aa41d0e377fe7921adbf77b316b25c983
- MD5 25374fdd2e5e404f18e9186303cc625e
- SHA1 0fe2adfb062ca4aa60fe89ac132f3848d542543e
- SHA512 fd82563dcc11c9b0ea92b248d5aa1061e23d3d1918a8170cf95174b60f0c14324ed45a60e05805b1faafcdae8a0746dcfd3f56313885114a4749e591cfe3a82a
- MD5 SHA1 SHA512
ford/forscan/data/data1.bin
- SHA256 c3083dce8d11f89396ac9d072bd2ca27fcc02bb7e5a92dfd58f10fcd83f58b0d
- MD5 1ca98dfb2a2f19f54e992a951aa23729
- SHA1 6a95bff9b1cc602277510e8cc6c8e6f7bbcc64ae
- SHA512 8c52f1e09514a65779371f63415bdc90282e5e0a2f67d7d8c39bcf5f7e0fcab52757be71da49933baefdf842c0726f7a633ca9a4a26a7102a380feae7f070f22
- MD5 SHA1 SHA512
ford/forscan/data/data10.bin
- SHA256 6e0c33dd0d0b782d44f1d85a8dc0b144184db40201c8b902e84c3dbeae4fef9e
- MD5 835f4695a01944abb1f3fcca34b6402c
- SHA1 5967b33b7085ae59c5c87b924c1a535a438339bf
- SHA512 72d8d87a73b6f408a6f57d60eb0904a8b4a3d1c4f20d2d3624d431f214f673995acf6c3a15555f1f8bfe1a5bce1844b8505a036a4eab9812df29cc54b3dd0bba
- SSDEEP 49152:wr7NeJjNIN6MKVuP6F4XYvR9aZY5sLfIBZ5It+RYV:xfuP6Fi8v6usLfI75I6YV
- MD5 SHA1 SHA512 SSDEEP
ford/forscan/data/data11.bin
- SHA256 0d9d0e6bad47e5fb918590075540cbf06643e7099b08a119c536a8b17d4ad915
- MD5 beff8ab831c65c92bb7b2a71fba4395b
- SHA1 871ec050d7b7c472966dba217502921903316cdb
- SHA512 4debbead0599b9dbe63cef270a48d8574763a4cf32260e0e2c98702bfce9117e40659102a2747f32997940a7b23b7901d38c2bde528bf75c23566256cf2d4a51
- SSDEEP 12288:syYRE/BHfmrcY2CTGLkFzMnh1Ot5XxZ4m0ZYhj:syYRE/B/k/9EnhcXxZ4mHhj
- MD5 SHA1 SHA512 SSDEEP
ford/forscan/data/data12.bin
- SHA256 40636d64f53b820b2169e839ad3919c1e7844d0615e30939fca01e21fffc6d16
- MD5 e4d88802b01ecc2c7d1ea3774fb13ccd
- SHA1 22a12ccbbdeb961160cf1a2029688e3828f3abf1
- SHA512 271616a73db49443a9d382968bbfdb2f067aa7abab007f606588cb5c5b35ef0e7b52e9c2d77e1a37c1eb5eba6727f4325ef9b95de868ab4615a47ef1aeb6f68a
- SSDEEP 96:9Ep05IZR3QuT/eNFyS604ptoH7lDP6ZdMoxdW6:uq+ZR3Qu6NE73toH8V
- MD5 SHA1 SHA512 SSDEEP
ford/forscan/data/data13.bin
- SHA256 aeece4cc9a98824365f2ff433381b7d61a16c5f3ced318dd8c7331e6065b1340
- MD5 93a4c84d318971b8aeb6e075e580eebc
- SHA1 c195ff48d3f2fa4a3d1d66b56cfac17508155e72
- SHA512 6ccbaaba82b6fb2f0ceb1afe45f041091fdb129f272edcf7591cbd788bf2f1e8c03ac77e6d6568f64bdf0522f9982441a8adf118129038e99ca4e7891d458fea
- SSDEEP 192:wm5kSV6aGcooKdpFtJdZQVM80Y6DRNAy5EH6qsB80CvmLoBpwGEKo01j+fwE0SCr:w5SRGcooKdpddd1DPAgE9sB802SKrE0h
- MD5 SHA1 SHA512 SSDEEP
ford/forscan/data/data14.bin
- SHA256 58b5d87402f045e5021a922e5530b9e6b421bb30517a223660be76b3b70e0718
- MD5 0a2257a588a53880c45729c7e8797713
- SHA1 4c63a93999f00ebff66a4269102f767d717cde94
- SHA512 b061275ce207c78ccaeeac78def06c35d6c648e778cb42262ebf1620ae1e74bd3e6f8acf916343be38208aa33f1e34408cd735e4f51d771dc31230cbdf617539
- SSDEEP 96:jX8dfWtkopaJXRV1DwdBDun5yF7U2j6alUtsQM+FnRKkLY:jFkoYJudI5+SalUt5LnDY
- MD5 SHA1 SHA512 SSDEEP
ford/forscan/data/data15.bin
- SHA256 4ed8de2994b30a80f5f71615ee216011abc2a2b1e0195cda37861d7538cf8558
- MD5 69162987cd36052ddc8d32a86b5d1c3d
- SHA1 9aa4726293559d580625ecf3dce4a0addda77b4a
- SHA512 3f7f6dfc5c2adf3b58195bec3b34600e743b63cc6bd6aeb9e8df7b0819a23ccacefac43400b91adec9ffb4ad6e50b28bd6869c989703761d9855ee2b652292c7
- SSDEEP 192:3c8DPfX+Jlp4apUW2BnsnAnsth5a2QrDW+2cZH9uiAF4KJzvaVGxR6/RbZ:s8jE/UzZsA054PXXuZVzIA651
- MD5 SHA1 SHA512 SSDEEP
ford/forscan/data/data16.bin
- SHA256 897b9a16b0ee0e911a51c045f873bd0e19546670bcc1b823236a76f630fd0f3c
- MD5 797c46416e86478bcf20d37dd097b4e9
- SHA1 f54b6b83b4b44c52f866c56e7ff802a6d8f5622a
- SHA512 9a813027979cfc3f4072de67123a491b416bfc99c9ea3154045c12f76e743be7ed6709c240772ae2bdbeb4a82b1b3f1d6925acaf9946a383db4d2031e028351a
- SSDEEP 24576:lHR8bLDJdKCwbI/oN4ht3C6WNQ9GAmSu60gcGE2GwlCV+Uq:lxmLDLeNMswYi
- MD5 SHA1 SHA512 SSDEEP
ford/forscan/data/data17.bin
- SHA256 59dc413a8798ec600f6457b9834cfd17fb154728bfad448c2b978d94f0bd1f79
- MD5 47b37e98cf1d3f1c0818c43431b06fa1
- SHA1 9356b0308262d11897754c017e8103469e3b3c16
- SHA512 1521cd42e7891fb0498c9f95d6ac0f98bf16ca46002203eefa398b38755a7002f01724389246119b6bf812a6ed7409f46dae5e5bb452e7843e0a5ec714b7d95a
- SSDEEP 1536:rcxPOdx5eI1b4BS7O2JicyDZFrS26sGcp3SQD8QGJmFHrD:gyb1T7OUaJ6sGcpXAJmF3
- MD5 SHA1 SHA512 SSDEEP
ford/forscan/data/data18.bin
- SHA256 4ef5576486a2cc6966ef6105a980872561234fc871a50f42f45138e312247cbf
- MD5 8a29cb6aa50d800c5c7218454a3e71d1
- SHA1 282c3e7932bfbcd3e536ff270d1e644191e05180
- SHA512 585499fdfbb584b055af80c7e3a3174da9947e4571189e7bcd7c555e2ee98071e8568963f38c56dde097b254c9d1ae99d6190e5466827401c7fd33b902560540
- SSDEEP 3072:K1hr6RRfPZ+B50DpjRfe5l+QutkcLpN/gayflh:K1t6Rmb1+ufP
- MD5 SHA1 SHA512 SSDEEP
ford/forscan/data/data19.bin
- SHA256 3bd232e72d4f8bb3d442eadcbbca0f24839f1d21a14a31daa05809f34917c3d9
- MD5 300693d06ee6dde1ecae6b7d86b104af
- SHA1 cb6b02e794300676ef015544822294b35d021745
- SHA512 f1746ad7c38895dedf04882385f578e9827535cb3c536ee50b5311257228b46c205e308069da73d751c2fa283b4aff07f10093379862514ba7892b60d0e24a2a
- SSDEEP 6144:IUdcIr7RnqZ8whLQL3MGyowiUkiTS6YYcujFIVWoQe7tuGdbMgTVR86cYFkvyG3w:hrFngniL8+wiQFIr5SI+vyG0Dh1Xi4n
- MD5 SHA1 SHA512 SSDEEP
ford/forscan/data/data2.bin
- SHA256 8865e52b399954ed18a283ecaf8d2bde281b8d4946366ea4d97d82632beb75d9
- MD5 6778ecf2a1bcb49eb1e75b5a198a6a72
- SHA1 4d7f13ee6b6bb57c151fb31ce51ba86332ae051e
- SHA512 a2fb3b359dc374ad6380bd5203807016faf628c44e7aa8d5c455a614c474b854fe75e98303197ab07bef676e1a44e450086a424431f324cc1e73f28ca25ab6ce
- MD5 SHA1 SHA512
ford/forscan/data/data20.bin
- SHA256 5cb26ffe84931d40578b007a19f2ce564ba8d3a9a81010a54807c40d3d8573fd
- MD5 a133b27f2d1b91eaf9df2037b67fd808
- SHA1 8de0d141537954ae531f6573b488b2ccd26d263c
- SHA512 9033d30fe088d643e16cc98c52ed502179826ee98795ab63bb4300f722585018b6638c6360bb402f7417cf1dcbbb982ee664e06eb0dc7bebb70077915eb4dcaf
- SSDEEP 24576:yxoUwhZI7KuiGa+yWqhDLrtHTXOa3qDl10sGTCvs2bfUuyT1Bh:YogKuiGa+yWqhEDss8CvaBh
- MD5 SHA1 SHA512 SSDEEP
ford/forscan/data/data21.bin
- SHA256 5b5b315aec16d285e657ae1615a32fae23d74504e9491f818507febdac9cfa7b
- MD5 e77770aa7a716d3a250e070469017fe1
- SHA1 b1680729a76274d36d63c58a5621ebbab79761d0
- SHA512 074e458f5c13097cf0ee70907bd84bc30d60dd192f80b11e8536a0d04dfcd79b033818b2f73eca7c0cf3beae5eb75796f3ed72c5ea021b15226c546bfb5e3b95
- SSDEEP 384:UKti2HYTvffa+E0oNkxjrRY2ZMsaiYizLn51SHtO3A2aEcItEGdgFOxSblX:UKUQYTvffDmNgr+2astXItcXzZ2DaSpX
- MD5 SHA1 SHA512 SSDEEP
ford/forscan/data/data22.bin
- SHA256 8564a4e3bc4fd96062beebeb4bb30abc5379f423126b44e837090bd9985218c0
- MD5 3f704d83ab98e2b042de83aabc792398
- SHA1 bd1f86ddb89a8d21b4583b39e0dab0aeb69ed74a
- SHA512 b1d0b181f19f32a583b4059641612059a3da936865d89ae862efc1f23181990a7f3ab36db9a6bf0e8ff152fb5454fb4e6e68b74ddc328b7a701148e3c01d8528
- MD5 SHA1 SHA512
ford/forscan/data/data23.bin
- SHA256 d10c6a20699a317f5fbd2eba209109812ee2fb2b0b0b2f706bdc0531758591ac
- MD5 52b8c8e53c02be0310420cf6e581ba33
- SHA1 7f301cbb53b0ced32ef6040921d8a99e6404736f
- SHA512 b31c19a64b29f4167ca8c48490f9e89d6f2fb29b4e2df5ad6dff2cfcc307fe967f3f1f09f72664bd52a458503bb275525d2a9491501a8f63f61daba3a3d32e38
- SSDEEP 6144:ervNda+i3CvCvqqPwXTzRUxvUXciX35rx0anu6Hg8eyeZXGwB93jpWPmM9Kj0J/T:GzP5eRuWYi9jhMmcuIJWeLaT3qKOqGv
- MD5 SHA1 SHA512 SSDEEP
ford/forscan/data/data24.bin
- SHA256 9a4ed2ae99358c278a53690f10000f98790c6692c7c1eb64211b7a2121c79feb
- MD5 54360e88e52a391ea6ec3d1cd9471755
- SHA1 026222130533bfb97b9e60f448e331fc340d84d8
- SHA512 af98495d779761394d6a2ad82a893a9c27dbb14a44ea4a8c8907a1c96b18b4b21ac3bcacabdc291f7c8f8b163cad2408a69b5a8f07c68d43b0b0dfcebf830744
- SSDEEP 1536:C8BROg16jYw2VCwWeP07M/2s82f81DpoSd4uJQ:C8BROghJVCw/X/2s82f81Dt6
- MD5 SHA1 SHA512 SSDEEP
ford/forscan/data/data25.bin
- SHA256 427ed4546d9e008f7754f528f627c62c371a13e4850ca782fee4781cf3be44c7
- MD5 204be0da8b7c409829347cec592a66ff
- SHA1 5c50c9a40cb230a6f17773574e952a0079fb6d3f
- SHA512 9a636b1422fbcd6c9db52f8ba6f507f9b5e64418a757d0597428828ed4bcfbcdbbed5d39ecb7014254ee6720261bc1913a0940ba850e7a1c15b5b6641f84f971
- MD5 SHA1 SHA512
ford/forscan/data/data26.bin
- SHA256 eb132c3c640edb746c1e58e62e97360ef9a5ef05d1f1f82c32ffea5de7454ec1
- MD5 15ad756935c6d38b3651bac38345aa36
- SHA1 cab610c632c6fd8f9b58532f1f18d2a22b8f3298
- SHA512 6c2f5ccda11c5e645b44f7feb9bbc3c2de63f9ca2d8b5f15afa7449299263109b6b41264d2f34f2cd870a00d5e97fba139ec21557eb7562dc768143e66ca2625
- SSDEEP 192:CutCAgWAv5Injg1gUWcY8zgCuBb7b6Y4O+bM3nEQ:ftCVxvajQBVgCuBb36Y4a3d
- MD5 SHA1 SHA512 SSDEEP
ford/forscan/data/data27.bin
- SHA256 2944482cf6198256607077ed389b8a4fec67a4c06b936a3361e6bec61c864f00
- MD5 941c8c635557b3772ad44844ee2c72af
- SHA1 3b386ca84a2666789ba6542cd26fb39ecc5c4a2e
- SHA512 ee834df23a9ccf4bce20bbb1732d0a4a3bd37e82b08071d01bf47e628f42fd84500a46d9ee180b7c22fff0816871b9b20ecef2c8f017f49cfda90e573afc2aee
- SSDEEP 768:tGDwS/GRvBliV+eLbTQvZDAlnjv7RR4p9JpAO:Y/G3eLbTwZ0hzRSPvN
- MD5 SHA1 SHA512 SSDEEP
ford/forscan/data/data28.bin
- SHA256 c48dbaf4c720ff3185fde955d250b1423046ce56ed8f3530e2e9d728838c1bd8
- MD5 f2644827dca3feacc34f05502c374f2c
- SHA1 2cb05d6f2fb406d79204a3cd99491e4e91aa95c4
- SHA512 865fcc6427cde67fed797dd175107c7b373c9006843272bc619ec5ca527bdcae6ab6414a96fc0871a55776af98b6246dfa9ca61853f299dc6204d3ec706a4b68
- SSDEEP 96:EVCVIVLepgbBUQZ7smQ3kGGq3babUJDna6y2jHD2NxL02J2yYhm85kivMh1XBU:9IItmORVbabMna6y2jHDsoYOPsfXBU
- MD5 SHA1 SHA512 SSDEEP
ford/forscan/data/data29.bin
- SHA256 c733b961053d8ef876b93670720ee005dedabaa3f7b12b40eac15cd8c026a20f
- MD5 fe561d182cc925015ccd70db8d38a4dd
- SHA1 676fb1f4ad9ffd5553cfa099e59eae60c2323304
- SHA512 6331912c937e102962a071e8aba249a8fa45e6618e328025b46e1d70232bfe04349b2a7b34ff0b4b887b5cc06a01d92ddf5910f77a1de7ba1ae1002fbedb223a
- MD5 SHA1 SHA512
ford/forscan/data/data3.bin
- SHA256 b3633f8a82942f83710adb98ffad2f4cb0e50c399878be74613c7629ed0965eb
- MD5 797a83bdd260603f4e45a0cd6f82fc9c
- SHA1 25540dc143979f2046786e2dd3c9951a70e092ba
- SHA512 e5f2ddd80abb029e24e577ecf7d3fa8f7ac0e3ee3b0e841b09d8025c136b054f726f9d5a2ff42112c16665ba3a340556e96bf4e494f3c08b4af8923fd084a8cf
- SSDEEP 24576:DKEFx7qQ0Z2nYV64mYnvswU2oXjc57Dpuev6p:dx7MBV6A57NR0
- MD5 SHA1 SHA512 SSDEEP
ford/forscan/data/data4.bin
- SHA256 49440e7e77a7cdabf56ba1bb5ab15bd1c9a73d97a81b7299fd96e1166b246828
- MD5 230cc5a17436c6b4dc4e2867d2053e94
- SHA1 2438e0d19a53070e3fca639340927e5f73004e6b
- SHA512 39d5b03e09bffd2837479c9bb4ff19b8c26509ff1e409795468a5ba94d110d6e7dccd1df49fa85d2d461ba126a7bb06f244620d296b758b3594d35d29b62aa9a
- MD5 SHA1 SHA512
ford/forscan/data/data5.bin
- SHA256 3025d1af6aaae91310965af072a33f759516a538debb2aded6547dd1d513a9d5
- MD5 93760a885cbf1bab3697036e7c4ce7b0
- SHA1 558f553eb2f6b4dca2cc7dd81c3e9131778f0a15
- SHA512 6792fe74a26f455aabe93173c1e38768315345f86c4bbfb2d47beec1306f9cfef02bc7afdc34789b55c7b153b88d973dc6fdbeffdc9b8c00902183f9a783cb83
- SSDEEP 12288:cnBju8JveMjeM1VP27RyIk7EhHv7ErN+0D+K/XulvnZWq0BSE9CcR+VQ8GLasNGr:8jlteMiM120r+7K21WEoPLBNGHB+4
- MD5 SHA1 SHA512 SSDEEP
ford/forscan/data/data6.bin
- SHA256 1c67de235dca5ec0cb63e162669f0886c0f7f3cd1fe45dd41678a2f1ed59c058
- MD5 578375681a8e1882360cc96ecc23e95f
- SHA1 548baaacf2c183510eb2db11509b367f70fa0496
- SHA512 e265877152ca9e299b479434f9950aa7df8c3ca3ba2031ad02ddf2db1d3522defe75980fe4203cfd160ccbff5bb58c65c28b3c55604ad2962dec45395839e852
- SSDEEP 192:bl8ti6tEw3NDRhaGiftyh/x43Yhvu5KnAYGATxUlag/KG+lmRqWMRX2gHw:xh6tl1naPoh/GKW5iAETi/KG+lmRMRX+
- MD5 SHA1 SHA512 SSDEEP
ford/forscan/data/data7.bin
- SHA256 1630840319e1b0f35f58a4c25d132e53ba1bf64f3e0ceb527ffcb9b439c8799e
- MD5 f8527d17b9902cd35b8478ccb81283a9
- SHA1 6ba3c4d21461ac496aee987eba9c046cc78bb88d
- SHA512 46f851531be2c0481d809e2357fa36159b0d679bd5b15d382a9d74a78224cd7ca54ccc95ba067fb39116b7b87bc3f556f4fda96526184a1ce14805108be4f5af
- SSDEEP 3072:1GIJSQ/80CfexcKLMrOLtRWfVfcI7fXbBHMPS4+Y2Za:oQ/4qAOLbOVfbTF0S/PZa
- MD5 SHA1 SHA512 SSDEEP
ford/forscan/data/data8.bin
- SHA256 34d5594075a92a3bacfbde6fffb69f668cfe6676edc7ed32d138e73dd08d3d45
- MD5 05e48bce92349821c1a0ded91050bbda
- SHA1 aa41d0c302981109cb96d91eea6fe5088fb34833
- SHA512 973cb45ce80d3672159bc48a75b6f3f882df66907a2ac3be5db42f0a60ceb8b53c3d0eb7ef781193caa3e8bb1b5aef4a06eaa2b75c3e38ad0d32e0dc547b5fb1
- SSDEEP 3072:ixOk3Ue2cg2iwkqO8rV84gKmmy8XkvKjVkUcP1J9KJ2ZS0S8O0UE8vGKL3GSyKub:ik2Vb/pyuJGql3rg9tw+h9v0zacRsp
- MD5 SHA1 SHA512 SSDEEP
ford/forscan/data/data9.bin
- SHA256 e2a55f96259991e211cf89fc1741ea3b219514041cd38739ba097a0767188c11
- MD5 277ad45a498467954ab5b377d3a73099
- SHA1 42b006093b4ca5c05cf53bb8981dccfe736d57bd
- SHA512 77a5b928bd558d13c2bdeb110c9a12ba6ad02ab466c7416bf6bf8f952ec9a36b01c472f9aff6a4f3607cd317fd1d59faee60aac28d3533498f1c8438056ab51b
- SSDEEP 1536:FaiMazCr6DZimituVk9v/FO1paf0Ev9A/37ygYQ0l/t9QyzYm+VXLyJk0vUXRVTr:ty6ja0kCcx80Lh+VJxjChZZC
- MD5 SHA1 SHA512 SSDEEP
ford/forscan/data/default.lang
- SHA256 0499a36631cb9db971cb99346afc079a8407d4f62e950f625ad904bf3b61d686
- MD5 a04202c712aa415f47dbacb817a60397
- SHA1 b6ea6747576f51a8d3bb542e4b12d51481212604
- SHA512 d62693d1bcc3577afdec2c2757db592f06d40d8362934113abaa607af90c56d2abc4f5f28caa25c8cbd4f0f5e3278517082691511c88f3f75929f995699d9d2f
- MD5 SHA1 SHA512
ford/forscan/data/resources-de.bin
- SHA256 e2513e6d8a360882bc64165f43105db88efe55ad8da882070588b4bad14c9a39
- MD5 b4f64c3f7fc2de38acf89f67d6958a74
- SHA1 43e9765138fb9c32baeeca4cc9278a0b26a65048
- SHA512 d18d55000bc6e5a61e514a231d9bfbac64432049c26ce89a4ecf7a5e92b5319bb9f80b95f051c6d0e350d6adf95f2b7f7e5424f692c6f87f04d2d7b0ed1d88ee
- SSDEEP 49152:R6K5NhsxcpZO4uCazHUmLGMwpr3Tuy4W0PnrhUED:gK5jycpQ4uCazNypr3qy4W0PnryED
- MD5 SHA1 SHA512 SSDEEP
ford/forscan/data/resources-en.bin
- SHA256 9bc1e62d8eb7785ec501ebdff0a3345ddd44132bc1d66825bd5b6c9886c95f33
- MD5 b15d58b329990c1b1ea8061365d19a3e
- SHA1 2e62fee7be0c5ea147e421e9afa32052bef37684
- SHA512 2a9b6328f35800dfe7bd1be0a7df760a4c629298629bb9d56defd0e607056f3d74f46fe6ff8d669c6c5403303e8573dd0e1c18a0ad4f8f4fc41aeef167fc9359
- SSDEEP 49152:xeSBMO4E64WwXCsNl6ibjeGy4W0Yhnzf9fw:ASmO4ELWwXCsNltjeGy4W0Y1zf9fw
- MD5 SHA1 SHA512 SSDEEP
ford/forscan/data/resources-es.bin
- SHA256 98656ba7ec6c8feff97d48629401b7ccbd3051faad54d279c9f6e42dc48d2ff7
- MD5 7e51d5ecc2f8b294bc53fa1d75cecd6b
- SHA1 6c978fa1b130db4745e656bd522b797c4442d8d9
- SHA512 31c98aed2c6cb7361ec35343292de168c7389a150e2e9a7900d81eed678c937fd90db678bed4be34726dc38c4144bad9bd5cc0f4630b8568ab43fcab257b8db9
- SSDEEP 24576:Mz2ydjwbR+tPtAcoWF4tiheUz2tbjrcThdJhk1SiuCerURqQXhwiVEQzy4WXKr3d:70AcoBG2tbjMhC1wCeLwOuzy4W6h5y7e
- MD5 SHA1 SHA512 SSDEEP
ford/forscan/data/resources-it.bin
- SHA256 b98508e94901dfac07f29c0014c9e5e41be5d73aa4c9ffc767cf98fb1d3492c7
- MD5 bcef6de26f90a1c29545a06a4e60cbb4
- SHA1 020328a0ef1ad2c6f96d612ea7ff304230a2a0c3
- SHA512 056d5ad0ccd07f7c92f47ea3c0e701d1811113d64203f0af51476cd3547eaeceb410bb1da7b13df8276238c1833eabd5125aa301cc22a3765d253f0f66c64505
- SSDEEP 24576:9m4CufzzZlg5ZAoqlyNnsNH26yG9f9e3JaExy4W0u1HFhrEVmmM2D8Fe:9m4NXZOOAeW6yi9e5by4W1hPFm7
- MD5 SHA1 SHA512 SSDEEP
ford/forscan/data/resources-pl.bin
- SHA256 b07dd30f84fc87724f3452094e933e84beca3f40073a8cc077dbbcedc2e22f81
- MD5 af2c4bdce7c1d7ccf76d5b2ba5231af2
- SHA1 a1c99d2c58c1e30c1ce3da1caed412787a738913
- SHA512 f2ee2df12c25f2bd5425171cd76bb8b001578283a2b774565a6b8822ca514627c44df9bf89e44be40175640950d109723ec5bae7c99469e6a008d7611377e5d3
- SSDEEP 49152:7jZ/yYxWrQodd3LF00PnSXQJdOBo6d/BJm/HI7Hy4Wp/Gnyhg5rNav:7t/1W00LF00PnSXadOBoQBJm/GHy4WpP
- MD5 SHA1 SHA512 SSDEEP
ford/forscan/data/resources-ru.bin
- SHA256 ebce4f94e8d26723e965d442e3e0daf8338178283fb788dec1a06edd1a5cd097
- MD5 f7048f03e012ee4e391b3b8221c63a96
- SHA1 91b4611bc2bcefeb427147cafcca2fc1c4f897ff
- SHA512 bef8f523f72a77a69f6b3ecf9ebdc8b3d9085fb27c6b8291af01cf5058deb9e2c6a9d3e091cb24ec3ce414ffb3e6a0cfa1b757e670542e2445e0e115a1dc856b
- SSDEEP 98304:Edw1I+vixorfZUzA7RRBEZtDBObNe2MsdatQF9cey4Wot/bgsS:EjvxorfZUzA7RRBOttObk2MsdatQF9cT
- MD5 SHA1 SHA512 SSDEEP
ford/forscan/images/eng1300.gif
- SHA256 5826c6c8f52516c9c7e83d1341776d44734a61891953843f877f6486ec706d1f
- MD5 2405edbd6accf3c9dd9da2a6a972518d
- SHA1 8080ca1cf0872d559a00d33c3c2a055d447666a3
- SHA512 d81a1911468d1bff550af726d6a34e299d097fbc0d1c1b1896208ffcef802b550e74395279d43dbbd7d986d190d60335ae39edc560bf347437e4ca03529771a9
- SSDEEP 192:rBtf+yaCFpDp8rDIF8qgCoiZla//kIkBrjIU4MuV4QyC7W7/Gm/nlsh:rBtf+yFz8X7Dsg8IWEWQHS7eilsh
- MD5 SHA1 SHA512 SSDEEP
ford/forscan/images/eng1320.gif
- SHA256 4cb5f10d79019f58c083ac5e5453aa0ed67a08acad421f728280d0131a35cf2b
- MD5 462997360e77bbb5831f79cc966efb1f
- SHA1 e727dede60276b076891f7fcd07f32179b370997
- SHA512 be34e76bd261a02f2871178de4674cdc0de8dacc794d6c0d0202087083cf3dd9290893374846382666b12d2104d5f1fa2f1385e74945a2f3bc3845bd56949b1c
- SSDEEP 192:A4HD2Py+6h3YIabKUvuA4mPi/jpA70Uh+hN7kO6Q0L3rkAC:5HD2q+Fjym6/jpONG7ka
- MD5 SHA1 SHA512 SSDEEP
ford/forscan/images/eng18TDCI01.gif
- SHA256 302917db4ea64313b962e82447c22146b82244dfb8299607a41531ac7a8418c8
- MD5 35c3e6d8a8167eb286ca0b5660677825
- SHA1 8b25c6cb6100dfc2816a10209cfdb118e8299781
- SHA512 0feb9ce683f8fde10f13426fe8fb672a2e50acf9a9f1a3590bb682e64e1ddb49be14bc75ee46b40b7bc791dad29839c33f5aba833b23bee1227628afd656251e
- SSDEEP 192:GPVPoQrvY/YXOjWwwl1VWR+OK/xc2leLeS9aaj2:k9oYtXOZD8cHeSlj2
- MD5 SHA1 SHA512 SSDEEP
ford/forscan/images/eng2290.gif
- SHA256 98e8e25c2a9ecc99c2629a77b0d964a72a6e1c2e58e2b95fad338dc34f37803e
- MD5 6f4da9e83ce077d95e9090f162dcef2a
- SHA1 715cd1739e46db9f6597663462e36065f6692ebc
- SHA512 dde200769ef863afd2caf74bc24a81d0e1f33a3cc04a62258b87f99d0b02ab1d3f301d0021e258e12c55ecc986eed9689aed919fedb7b9f08fe1a319a319c0e0
- SSDEEP 192:Sj6mvYH9W0ut5+jsIR9z+n9ZECyzmItdsCFH186VIWE8fkl7/zF1L:SsU0ufInz+n/E5SgSCFH1FBslPF1L
- MD5 SHA1 SHA512 SSDEEP
ford/forscan/images/eng2300.gif
- SHA256 fadb0a66f00cf59674db0ab294d1a01f06794dd3d0dcc95334e20e798104044f
- MD5 33ff1fae1d2510aebe0869ccb7c48d7e
- SHA1 019794f3de7ad1390d6519be3bbb3de5e222a376
- SHA512 69b32261dddd339e4fbc4a468b4eaba1f365809e1859920fcc8b7af4ebc1186c9b711dfee2793ae414b483ca218464cbd2ae3e0e416196bf90b6495cd94a16e7
- SSDEEP 192:9GRFn7XU8roCmm98aDeRj7iyg2tI17VB3XF4uzBYq0H3wfM+7l51jIBpSWYeAB:9GfXUaoCmmWaDe9dzo7V/4udYqA9Q1Au
- MD5 SHA1 SHA512 SSDEEP
ford/forscan/images/eng2490.gif
- SHA256 79d13af9a648fff703ad1d1e623beb8339aad78feca59db47372fa0edb8c814b
- MD5 0d4f313f26fdfead2dbebb438dabfe9e
- SHA1 6d2a339dfdb3b085cea321131bf061660e2af91f
- SHA512 1865f2ae19ec4599aa3d2d476ec690148f975cf56d078fd1057716f81906f4c0039bb05d19d5f0afcb610e85063e3804685f59d181de2b661627e2ddbc6f5816
- SSDEEP 192:YlWacUMHqerlmUD/3a0m+vRoF2elwry/Y2fIPpd2Aq35dy7KsSpxleC:YUaGHqeTDlp/eKwY2AdSnyZ4r
- MD5 SHA1 SHA512 SSDEEP
ford/forscan/images/eng6390.gif
- SHA256 7ea6f032401df3be59c781d530d0d3a9f85e485be322b7824bd9734e9a82f464
- MD5 2f84220dc679c62797b908f6b5568908
- SHA1 047d691a44dd6e06d17af44548cdba9e3dfe2a52
- SHA512 2d8039278e9c73d1e40c78a28bb2ca3c9f7a9c169d81dc8223818c483a33a57fc9fb670b0898eaa3ed4664625bee3bb6140b351dfe078855543b000a21b92f24
- SSDEEP 192:N0iMZYWXtgovq7LMo+Fl/QKeilYG184JFh08vEZct77ZwlQ+8soyiAciFt6k5eql:O/ZYegN7Lm3eilYg84JFwtZuyiAtFk47
- MD5 SHA1 SHA512 SSDEEP
ford/forscan/unins000.dat
- SHA256 1cc02e2163cf09a49c10db049bea68661760d56f60a1e8651a58752bc35911d5
- MD5 c972ab319903f7f420e881e91b5cf693
- SHA1 f7601c78f95b825af80f80637f847f88352601d9
- SHA512 810dcb30a2f87ac9428eb9d8be0d2da94ca31d81618219e35bf2d456a02538135bfcbed859bfdc7fea1eb8585931ad98da8ec75f8d9dede9ab68f28dd43d2975
- SSDEEP 96:yH2OhsfyVATW9lJWnU9a7ohWJeJ7+J79JcJtJT+I071xJ52VOmLqLRmDuDdm+mRN:jOhsfyVATWrJWnU9a7ohWJeJaJhJcJt7
- MD5 SHA1 SHA512 SSDEEP
ford/forscan/unins000.exe
- SHA256 ad92100f17ac6bb218502cea089f90473e09ae5a114049d5837c1955bcdf7dd0
- MD5 111c90099126a942d97c2a6dfefe5ccf
- SHA1 c14359bfe4471562ff5551bfcf17a2063455454e
- SHA512 1e30783870e0678016ffcc9656db3830a54d8ba7d0c196e9508c71f92accb5b215b13134639c3df193816cdb3d1e645eef5f6f3fbfd85e0ba88142a876b4016a
- SSDEEP 12288:QRObekMtkfohrPUs37uzHnA6zg5cIsalHERjUrNN/RQ9wgUT5EDExycg:6ObekYkfohrP337uzHnA6cHswHE/6gUw
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
1
Entry point
618984
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
Name
CODE
Size
601KB
Virtual Size
601KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
DATA
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
BSS
Size
Virtual Size
5KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
Virtual Size
8B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
Virtual Size
34KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
71KB
Virtual Size
71KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ