02f93e9b9381c395975f3fa1d7fad11f_JaffaCakes118

resource
unpack001/$PLUGINSDIR/InstallOptions.dll
unpack001/$PLUGINSDIR/LangDLL.dll
unpack001/$SYSDIR/pncrt.dll.new
unpack001/Codecs/RealMediaSplitter.ax.new
unpack001/Codecs/asfsplliter.ax.new
unpack001/Codecs/atrc.dll.new
unpack001/Codecs/cook.dll.new
unpack001/Codecs/drvc.dll.new
unpack001/Codecs/raac.dll.new
unpack003/$PLUGINSDIR/InstallOptions.dll
unpack001/Lang/en_US.dll.new
unpack001/Lang/zh_TW.dll.new

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2
static1/unpack001/Baidu-Toolbar-utf8kb_cb.exe	nsis_installer_1
static1/unpack001/KuaiwanSetup_kb.exe	nsis_installer_1
static1/unpack001/KuaiwanSetup_kb.exe	nsis_installer_2

IMPHASH 099c0646ea7282d232219f8807883be0
SHA256 f694c1d55813834d0a08eeb421359220a82929a1c0c614acadc58b4ef1c4b5df
MD5 02f93e9b9381c395975f3fa1d7fad11f
SHA1 8c18720b8fecc1d8a1ebe30010b6ef5fa5420afe
SHA512 bccfbe88b9f8f2b8d8d18d7b466715408af37e870ca812e36fb4d33912d288a6e6e7168e78d0195fcfacff14fae1c4e050050b51e9ee39f24c44c26181eaa47b
SSDEEP 98304:tvE56pI0DwMtgGXrl4x4lDssJHXuLOFSYw1C25/ANStr62r7aCiNpU2D:tLphkgPR1H01YUbkAr62/xiLJD
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

a6:ba:00:ef:dd:c6:2d:e1:c4:4e:08:f3:14:6a:83:d2:e2:a9:f5:04

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shenzhen QVOD Technology Co.\,Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Shenzhen QVOD Technology Co.\,Ltd,L=Shenzhen,ST=Shenzhen,C=CN

Chains

Nov 12, 2010

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Serial Number

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

May 21, 2009 - May 20, 2019

Subject

CN=Shenzhen QVOD Technology Co.\,Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Shenzhen QVOD Technology Co.\,Ltd,L=Shenzhen,ST=Shenzhen,C=CN

Serial Number

69:d1:ad:9b:16:f2:f2:1b:66:64:ab:8b:27:1f:d5:36

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jun 2, 2009 - Jun 2, 2011

Minor OS version

0

Major OS version

4

Entry point

12837

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CompareFileTime SearchPathA GetShortPathNameA GetFullPathNameA MoveFileA SetCurrentDirectoryA GetFileAttributesA GetLastError CreateDirectoryA SetFileAttributesA Sleep GetTickCount CreateFileA GetFileSize GetModuleFileNameA GetCurrentProcess CopyFileA ExitProcess SetFileTime GetTempPathA GetCommandLineA SetErrorMode LoadLibraryA lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread CreateProcessA RemoveDirectoryA GetTempFileNameA lstrlenA lstrcatA GetSystemDirectoryA GetVersion CloseHandle lstrcmpiA lstrcmpA ExpandEnvironmentStringsA GlobalFree GlobalAlloc WaitForSingleObject GetExitCodeProcess GetModuleHandleA LoadLibraryExA GetProcAddress FreeLibrary MultiByteToWideChar WritePrivateProfileStringA GetPrivateProfileStringA WriteFile ReadFile MulDiv SetFilePointer FindClose FindNextFileA FindFirstFileA DeleteFileA GetWindowsDirectoryA

user32

EndDialog ScreenToClient GetWindowRect EnableMenuItem GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard RegisterClassA TrackPopupMenu AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA DestroyWindow CreateDialogParamA SetTimer SetWindowTextA PostQuitMessage SetForegroundWindow wsprintfA SendMessageTimeoutA FindWindowExA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA OpenClipboard ExitWindowsEx IsWindow GetDlgItem SetWindowLongA LoadImageA GetDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint ShowWindow

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectA SetBkMode SetTextColor SelectObject

shell32

SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA SHGetSpecialFolderLocation

advapi32

RegQueryValueExA RegSetValueExA RegEnumKeyA RegEnumValueA RegOpenKeyExA RegDeleteKeyA RegDeleteValueA RegCloseKey RegCreateKeyExA

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

$PLUGINSDIR/InstallOptions.dll

IMPHASH b1cd0d78f652ce5fc63f0879371af012
SHA256 426efd56da4014f12ec8ee2e268f86b848bbca776333d55482cb3eb71c744088
MD5 3809b1424d53ccb427c88cabab8b5f94
SHA1 bc74d911216f32a9ca05c0d9b61a2aecfc0d1c0e
SHA512 626a1c5edd86a71579e42bac8df479184515e6796fa21cb4fad6731bb775641d25f8eb8e86b939b9db9099453e85c572c9ea7897339a3879a1b672bc9226fcee
SSDEEP 192:i6JaVGQ+xI5EeuyvMmGpeWH2J5xprN+AxT7K72dwF7dBdcQOz:i6JaVh4I5rpPbT7+BdhO
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

10795

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

SetCurrentDirectoryA GetCurrentDirectoryA MultiByteToWideChar GetPrivateProfileIntA GlobalLock GetModuleHandleA lstrcmpiA GetPrivateProfileStringA lstrcatA lstrcpynA WritePrivateProfileStringA lstrlenA lstrcpyA GlobalFree GlobalUnlock GlobalAlloc

user32

MapWindowPoints GetDlgCtrlID CloseClipboard GetClipboardData OpenClipboard PtInRect SetWindowRgn LoadIconA LoadImageA SetWindowLongA CreateWindowExA MapDialogRect SetWindowPos GetWindowRect CreateDialogParamA ShowWindow EnableMenuItem GetSystemMenu EnableWindow GetDlgItem DestroyIcon DestroyWindow DispatchMessageA TranslateMessage GetMessageA IsDialogMessageA LoadCursorA SetCursor DrawTextA GetWindowLongA DrawFocusRect CallWindowProcA PostMessageA MessageBoxA CharNextA wsprintfA GetWindowTextA SetWindowTextA SendMessageA GetClientRect

gdi32

SetTextColor CreateCompatibleDC GetObjectA GetDIBits CreateRectRgn CombineRgn DeleteObject SelectObject

shell32

SHBrowseForFolderA SHGetDesktopFolder SHGetPathFromIDListA ShellExecuteA

comdlg32

GetOpenFileNameA GetSaveFileNameA CommDlgExtendedError

ole32

CoTaskMemFree

$PLUGINSDIR/LangDLL.dll

IMPHASH d23fbd09100caad5e10f17163f511668
SHA256 c66b568cd675806a499273e3e8aeda350425aac17fc24342ed54e477417cdc0f
MD5 8c909780802ac2097ea4132e6375acd2
SHA1 b35fbda0725d7c66281d5c340b53eb5d54922583
SHA512 e94a37c586e55de8b61b427c14a385dcc57f3602d3dace90ad4663609da14a922cb78f76a58ed211549e987ba6f130cf2581eb48bcad2c9c25c6dc93a7ff6d08
SSDEEP 48:SnTGmVN7ZTPUptxEwvBqAKxwLJXyTpXieN2JVGLalmQ2lUmiwag/nDGkaEJlof6P:+7ZDGEQ9LJX6weN2TuXQ2lBiwag/np/
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

5652

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/QvodInit.exe

IMPHASH 47ca16f9ccfa1108a6da24b0442ee949
SHA256 b0eac2d07b4e53935242e06ddca12baf9f02ca09c0dd9fe9bdc72c77d824eac6
MD5 0c2bf8f2a44bc460e87d5cf3baa63d58
SHA1 93e25c9a19c060df831dfbbaa7eb9acfa102b535
SHA512 f191c1bca69739ed1c88311dbe0af05685177744632b458d2ae0425d1a171c7259e7f4e1d9c2aa2999489a3a525be85101b80d2b2269677a3b82b9c1b60a98c5
SSDEEP 1536:SMBfKFgpr2N6FcGpmN/xjETJJl+Vz0ijKSHTNf2Xh9PRUGVASsu2VNaLCKG:pR4nNJ4TJJl+50iuSzNOrRUm2V4e
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

39:a2:98:8a:4c:3f:8e:b2:d5:60:94:2a:c1:68:b7:f1:f9:82:ec:d7

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shenzhen QVOD Technology Co.\,Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Shenzhen QVOD Technology Co.\,Ltd,L=Shenzhen,ST=Shenzhen,C=CN

Chains

Jun 24, 2010

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Serial Number

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

May 21, 2009 - May 20, 2019

Subject

CN=Shenzhen QVOD Technology Co.\,Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Shenzhen QVOD Technology Co.\,Ltd,L=Shenzhen,ST=Shenzhen,C=CN

Serial Number

69:d1:ad:9b:16:f2:f2:1b:66:64:ab:8b:27:1f:d5:36

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jun 2, 2009 - Jun 2, 2011

Minor OS version

0

Major OS version

4

Entry point

19686

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateProcessA GetTickCount MoveFileA DeleteFileA GetFileAttributesA GetModuleHandleA TerminateProcess GetTempPathA CopyFileA GetLogicalDriveStringsA SetSystemTime GetSystemTime FlushFileBuffers GetStringTypeW GetStringTypeA CreateToolhelp32Snapshot Process32First OpenProcess CloseHandle Process32Next GetDiskFreeSpaceExA GetModuleFileNameA Sleep LoadLibraryA GetProcAddress FreeLibrary GetVersionExA GetWindowsDirectoryA WritePrivateProfileStringA GetTempFileNameA IsBadCodePtr IsBadReadPtr SetUnhandledExceptionFilter IsBadWritePtr HeapReAlloc VirtualAlloc VirtualFree HeapCreate HeapDestroy GetLastError RtlUnwind GetFileType CreateFileA GetStartupInfoA GetCommandLineA GetVersion ExitProcess HeapFree HeapAlloc GetCurrentProcess GetCPInfo GetACP GetOEMCP WideCharToMultiByte MultiByteToWideChar LCMapStringA LCMapStringW WriteFile SetFilePointer ReadFile SetStdHandle SetHandleCount GetStdHandle SetEndOfFile UnhandledExceptionFilter FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW GetEnvironmentVariableA

user32

FindWindowA PostMessageA

advapi32

RegDeleteValueA RegDeleteKeyA RegCreateKeyExA RegSetValueExA RegOpenKeyExA RegQueryValueExA RegCloseKey DeleteService CreateServiceA ChangeServiceConfig2A StartServiceA QueryServiceStatus CloseServiceHandle OpenSCManagerA OpenServiceA ControlService

shell32

SHChangeNotify

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

psapi

EnumProcessModules GetModuleFileNameExA

$PLUGINSDIR/io.ini

SHA256 7e325539a7d8f96d4e49045b4a04e96956710699b0820f0d99bcc95c5c8dfb5e
MD5 2a51b39e2138f21f8bb36125c71fb0f9
SHA1 1a63cae669eaddd9b7087ae81c255eb6b87e8b82
SHA512 56d25f99cbecd6443d1c6f0c063729756d6414814f095aad0e1358064e7f0d9bfee52172574e0e396c7a77d91ff5d296b78b8696708f84758437c68660075cd9
MD5 SHA1 SHA512

NSIS installer

installer

$PLUGINSDIR/ioSpecial.ini

SHA256 d95aed234f932a1c48a2b1b0d98c60ca31f962310c03158e2884ab4ddd3ea1e0
MD5 e2d5070bc28db1ac745613689ff86067
SHA1 282e080b4cf847174c5c11e4f9157b8c338ecb19
SHA512 a50ca2014869629135b54e848f03cb4983ad8029cd811300d02b0fc54de0436185f418fea4d3db888eb0f3170e33a59d486aa885f024ab29e630e9bc0ae1a2de
MD5 SHA1 SHA512

NSIS installer

installer

$PLUGINSDIR/left.bmp

SHA256 a866186a21afb04b28874bab8d5376413793080e13624ed7dfa5f0eabba4b3ac
MD5 1c32b853739e1a009a93431cc95c5cb5
SHA1 21e8a0d988df609ad138c786afa4e2bb216842f3
SHA512 b47a5024929709a69eebc33a3d4f7b088b56baee5b493680029b9b2927eb301e57f9e5d04741c0dff865495ad7f9f4ad37b00aa2ab8b5a72a60dabd33e24cbcd
SSDEEP 48:sgnnDi8C5CkQQb9Hx6Q/4AV4AwoYHFPjafrFS:sgnnDinK+9R61MFS
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/modern-wizard.bmp

SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
MD5 cbe40fd2b1ec96daedc65da172d90022
SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/qvod1.ini

SHA256 78110e0c306d126164bf84ec636b1719878c9b5c93e7ea20dbd3ec085572b08b
MD5 bbb0e1606cac7e57560455ca9101109b
SHA1 95d0070882a14112a7a0ebab6d55690a0a300315
SHA512 c8f1f1cf6b4d1d7b0731c2298dfe27292111f6dc6f3f4e8b05007051958429c7bc96bf79c8f201387d60a26fbfdc42788a6600a02c4063e47175967b2604c4dd
MD5 SHA1 SHA512

NSIS installer

installer

$PLUGINSDIR/qvod2.ini

SHA256 ca373d4754df41de6a06e36b9dee9a256fd3ccdfec7a4aa9818565931bf69683
MD5 f27bcf53ad9ebf9e1e67c24bcd297d18
SHA1 620a0c83a204f0b2856367993b5c5ba604d1479f
SHA512 e440431de5851a04c3242f10964829a45dd481d22347baf71bbafc5f34e25c7ecf80916f24d88c95d26c6ee4acef784f32a3d4f8e046184cbc17799b29078bd5
MD5 SHA1 SHA512

NSIS installer

installer

$PLUGINSDIR/sobar.bmp

SHA256 01de5796ea3d6028852c85bfd893f59cfa5c52ffafabb8f2ae874c61fb8d0cd8
MD5 74391a81f20c34a90fd8e39889726078
SHA1 eb0e07724856ccde18938da3f9f1dad5c79722e9
SHA512 90af0c68097e69df9feae13dfef51d5eacc45c60c433cbc0c31d9ab2a86cf7a2cd9e8c2367aba5c35f8274a2c32ac97620860014695bfda59e7415ba342226ac
SSDEEP 384:FBLU7lDd5hRzpgug5sBa7Wm2Trb/V63CoFihYkHXV:FBLatdfRxa7WrTrb/A3jFCX
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/t5_toolbar.bmp

SHA256 c8ce1ffab4e116f15ac9eec2cd72573474fdea7b33afa4a6ee518c981194f732
MD5 5ba1d031cbefd629470fe7a74434a01f
SHA1 79401e5e8b60f8915a4ff8fe265435c56724cc59
SHA512 21afc8c88693e5b60b61cd3e55aef6e354efffb3cda9c505b999a9c58c663314e6b452a2c25d36aaddff6fb91b37888a1e38664aecf8f1168f9d95024128fd68
SSDEEP 768:vL44444444444444444444444444444444444444444444888tNKChLieZEKZEql:0oB2zTa/vUh
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$SYSDIR/pncrt.dll.new

IMPHASH 828907b7a8ec04c9c4031e40ef2f76ec
SHA256 e983aa97fe1ce6af92f06433a71e03f54d3fc78392e26691cace927094bab8d7
MD5 13001eb0a58b4de96126b16ab15fd8cc
SHA1 4dfe6d2d02e9fa194f4af3d054b458b5a4bafbe6
SHA512 1a7c052bc1e7c824a3aff5e27c5cbd0720893e341dfb93062021b82c3a6d940c4ea23cbcdfaaeb174d90f51c36f0d8c62f693766f42172f894b6b689d26f49b2
SSDEEP 6144:3m7wHLiH0k6OgfjvQ0mvlxZ/PeT8Ah8EoHiIKaGo5RpTufufVvtr+dj7GcuT1JOy:3m7KLiHl6OgfjvQ0m93/5q+iIKaGo5Rr
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

36880

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

SetFilePointer RtlUnwind IsBadReadPtr IsBadWritePtr IsBadCodePtr SetUnhandledExceptionFilter GetModuleFileNameA GetModuleFileNameW ExitProcess TerminateProcess GetCurrentProcess WriteFile GetStdHandle GetCommandLineA GetVersion InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLastError ResumeThread CreateThread TlsSetValue ExitThread CloseHandle GetCurrentThreadId TlsAlloc TlsFree SetLastError TlsGetValue GetCurrentThread FindNextFileA FindFirstFileA FindClose FindNextFileW FindFirstFileW HeapFree HeapAlloc HeapReAlloc HeapValidate HeapSize HeapDestroy HeapCreate VirtualFree VirtualAlloc SetHandleCount GetFileType GetStartupInfoA GetCPInfo GetACP GetOEMCP GetProcAddress LoadLibraryA MultiByteToWideChar GetCommandLineW FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW WideCharToMultiByte UnhandledExceptionFilter LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW SetConsoleCtrlHandler SetEnvironmentVariableW InterlockedDecrement InterlockedIncrement FlushFileBuffers RaiseException SetStdHandle Sleep CompareStringA CompareStringW GetLocaleInfoA GetLocaleInfoW IsValidLocale IsValidCodePage EnumSystemLocalesA GetUserDefaultLCID GetVersionExA GetTimeZoneInformation SetEnvironmentVariableA Beep FileTimeToSystemTime FileTimeToLocalFileTime GetDiskFreeSpaceA GetLogicalDrives SetErrorMode GetFileAttributesA GetCurrentDirectoryA SetCurrentDirectoryA SetFileAttributesA GetFullPathNameA GetDriveTypeA GetCurrentProcessId CreateDirectoryA RemoveDirectoryA DeleteFileA GetFileAttributesW GetCurrentDirectoryW SetCurrentDirectoryW SetFileAttributesW GetFullPathNameW CreateDirectoryW DeleteFileW MoveFileW RemoveDirectoryW GetDriveTypeW MoveFileA GetExitCodeProcess WaitForSingleObject FreeLibrary CreateProcessA CreateProcessW HeapCompact HeapWalk ReadConsoleA SetConsoleMode GetConsoleMode SetEndOfFile WriteConsoleA DuplicateHandle GetFileInformationByHandle PeekNamedPipe ReadConsoleInputA PeekConsoleInputA GetNumberOfConsoleInputEvents LockFile UnlockFile CreateFileA CreatePipe ReadFile CreateFileW GetLocalTime SetFileTime LocalFileTimeToFileTime SystemTimeToFileTime SetLocalTime GetSystemTime GetModuleHandleA

$I10_OUTPUT ??0__non_rtti_object@@QAE@ABV0@@Z ??0__non_rtti_object@@QAE@PBD@Z ??0bad_cast@@QAE@ABQBD@Z ??0bad_cast@@QAE@ABV0@@Z ??0bad_typeid@@QAE@ABV0@@Z ??0bad_typeid@@QAE@PBD@Z ??0exception@@QAE@ABQBD@Z ??0exception@@QAE@ABV0@@Z ??0exception@@QAE@XZ ??1__non_rtti_object@@UAE@XZ ??1bad_cast@@UAE@XZ ??1bad_typeid@@UAE@XZ ??1exception@@UAE@XZ ??1type_info@@UAE@XZ ??2@YAPAXI@Z ??3@YAXPAX@Z ??4__non_rtti_object@@QAEAAV0@ABV0@@Z ??4bad_cast@@QAEAAV0@ABV0@@Z ??4bad_typeid@@QAEAAV0@ABV0@@Z ??4exception@@QAEAAV0@ABV0@@Z ??8type_info@@QBEHABV0@@Z ??9type_info@@QBEHABV0@@Z ??_7__non_rtti_object@@6B@ ??_7bad_cast@@6B@ ??_7bad_typeid@@6B@ ??_7exception@@6B@ ??_E__non_rtti_object@@UAEPAXI@Z ??_Ebad_cast@@UAEPAXI@Z ??_Ebad_typeid@@UAEPAXI@Z ??_Eexception@@UAEPAXI@Z ??_G__non_rtti_object@@UAEPAXI@Z ??_Gbad_cast@@UAEPAXI@Z ??_Gbad_typeid@@UAEPAXI@Z ??_Gexception@@UAEPAXI@Z ?_query_new_handler@@YAP6AHI@ZXZ ?_query_new_mode@@YAHXZ ?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z ?_set_new_mode@@YAHH@Z ?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z ?before@type_info@@QBEHABV1@@Z ?name@type_info@@QBEPBDXZ ?raw_name@type_info@@QBEPBDXZ ?set_new_handler@@YAP6AXXZP6AXXZ@Z ?set_terminate@@YAP6AXXZP6AXXZ@Z ?set_unexpected@@YAP6AXXZP6AXXZ@Z ?terminate@@YAXXZ ?unexpected@@YAXXZ ?what@exception@@UBEPBDXZ SetUserHeapAlloc SetUserHeapCalloc SetUserHeapFree SetUserHeapReAlloc SetUserHeapSize SetUserHeapValidate _CIacos _CIasin _CIatan _CIatan2 _CIcos _CIcosh _CIexp _CIfmod _CIlog _CIlog10 _CIpow _CIsin _CIsinh _CIsqrt _CItan _CItanh _CrtHeapAlloc _CrtHeapCalloc _CrtHeapFree _CrtHeapReAlloc _CrtHeapSize _CrtHeapValidate _CxxThrowException _EH_prolog _Getdays _Getmonths _Gettnames _HUGE _Strftime _XcptFilter __CxxFrameHandler __CxxLongjmpUnwind __RTCastToVoid __RTDynamicCast __RTtypeid __STRINGTOLD __argc __argv __badioinfo __crtCompareStringA __crtGetLocaleInfoW __crtLCMapStringA __dllonexit __doserrno __fpecode __getmainargs __initenv __isascii __iscsym __iscsymf __lc_codepage __lc_handle __lconv_init __mb_cur_max __p___argc __p___argv __p___initenv __p___mb_cur_max __p___wargv __p___winitenv __p__acmdln __p__amblksiz __p__commode __p__daylight __p__dstbias __p__environ __p__fileinfo __p__fmode __p__iob __p__mbcasemap __p__mbctype __p__osver __p__pctype __p__pgmptr __p__pwctype __p__timezone __p__tzname __p__wcmdln __p__wenviron __p__winmajor __p__winminor __p__winver __p__wpgmptr __pioinfo __pxcptinfoptrs __set_app_type __setlc_active __setusermatherr __threadhandle __threadid __toascii __unDName __unguarded_readlc_active __wargv __wgetmainargs __winitenv _abnormal_termination _access _acmdln _adj_fdiv_m16i _adj_fdiv_m32 _adj_fdiv_m32i _adj_fdiv_m64 _adj_fdiv_r _adj_fdivr_m16i _adj_fdivr_m32 _adj_fdivr_m32i _adj_fdivr_m64 _adj_fpatan _adj_fprem _adj_fprem1 _adj_fptan _adjust_fdiv _aexit_rtn _amsg_exit _assert _atodbl _atoi64 _atoldbl _beep _beginthread _beginthreadex _c_exit _cabs _callnewh _cexit _cgets _chdir _chdrive _chgsign _chmod _chsize _clearfp _close _commit _commode _control87 _controlfp _copysign _cprintf _cputs _creat _cscanf _ctype _cwait _daylight _dstbias _dup _dup2 _ecvt _endthread _endthreadex _environ _eof _errno _except_handler2 _except_handler3 _execl _execle _execlp _execlpe _execv _execve _execvp _execvpe _exit _expand _fcloseall _fcvt _fdopen _fgetchar _fgetwchar _filbuf _fileinfo _filelength _filelengthi64 _fileno _findclose _findfirst _findfirsti64 _findnext _findnexti64 _finite _flsbuf _flushall _fmode _fpclass _fpieee_flt _fpreset _fputchar _fputwchar _fsopen _fstat _fstati64 _ftime _ftol _fullpath _futime _gcvt _get_osfhandle _get_sbh_threshold _getch _getche _getcwd _getdcwd _getdiskfree _getdllprocaddr _getdrive _getdrives _getmaxstdio _getmbcp _getpid _getsystime _getw _getws _global_unwind2 _heapadd _heapchk _heapmin _heapset _heapused _heapwalk _hypot _i64toa _i64tow _initterm _inp _inpd _inpw _iob _isatty _isctype _ismbbalnum _ismbbalpha _ismbbgraph _ismbbkalnum _ismbbkana _ismbbkprint _ismbbkpunct _ismbblead _ismbbprint _ismbbpunct _ismbbtrail _ismbcalnum _ismbcalpha _ismbcdigit _ismbcgraph _ismbchira _ismbckata _ismbcl0 _ismbcl1 _ismbcl2 _ismbclegal _ismbclower _ismbcprint _ismbcpunct _ismbcspace _ismbcsymbol _ismbcupper _ismbslead _ismbstrail _isnan _itoa _itow _j0 _j1 _jn _kbhit _lfind _loaddll _local_unwind2 _lock _locking _logb _longjmpex _lrotl _lrotr _lsearch _lseek _lseeki64 _ltoa _ltow _makepath _mbbtombc _mbbtype _mbcasemap _mbccpy _mbcjistojms _mbcjmstojis _mbclen _mbctohira _mbctokata _mbctolower _mbctombb _mbctoupper _mbctype _mbsbtype _mbscat _mbschr _mbscmp _mbscoll _mbscpy _mbscspn _mbsdec _mbsdup _mbsicmp _mbsicoll _mbsinc _mbslen _mbslwr _mbsnbcat _mbsnbcmp _mbsnbcnt _mbsnbcoll _mbsnbcpy _mbsnbicmp _mbsnbicoll _mbsnbset _mbsncat _mbsnccnt _mbsncmp _mbsncoll _mbsncpy _mbsnextc _mbsnicmp _mbsnicoll _mbsninc _mbsnset _mbspbrk _mbsrchr _mbsrev _mbsset _mbsspn _mbsspnp _mbsstr _mbstok _mbstrlen _mbsupr _memccpy _memicmp _mkdir _mktemp _msize _nextafter _onexit _open _open_osfhandle _osver _outp _outpd _outpw _pclose _pctype _pgmptr _pipe _popen _purecall _putch _putenv _putw _putws _pwctype _read _rmdir _rmtmp _rotl _rotr _safe_fdiv _safe_fdivr _safe_fprem _safe_fprem1 _scalb _searchenv _seh_longjmp_unwind _set_error_mode _set_sbh_threshold _seterrormode _setjmp _setjmp3 _setmaxstdio _setmbcp _setmode _setsystime _sleep _snprintf _snwprintf _sopen _spawnl _spawnle _spawnlp _spawnlpe _spawnv _spawnve _spawnvp _spawnvpe _splitpath _stat _stati64 _statusfp _strcmpi _strdate _strdup _strerror _stricmp _stricoll _strlwr _strncoll _strnicmp _strnicoll _strnset _strrev _strset _strtime _strupr _swab _sys_errlist _sys_nerr _tell _telli64 _tempnam _timezone _tolower _toupper _tzname _tzset _ui64toa _ui64tow _ultoa _ultow _umask _ungetch _unlink _unloaddll _unlock _utime _vsnprintf _vsnwprintf _waccess _wasctime _wchdir _wchmod _wcmdln _wcreat _wcsdup _wcsicmp _wcsicoll _wcslwr _wcsncoll _wcsnicmp _wcsnicoll _wcsnset _wcsrev _wcsset _wcsupr _wctime _wenviron _wexecl _wexecle _wexeclp _wexeclpe _wexecv _wexecve _wexecvp _wexecvpe _wfdopen _wfindfirst _wfindfirsti64 _wfindnext _wfindnexti64 _wfopen _wfreopen _wfsopen _wfullpath _wgetcwd _wgetdcwd _wgetenv _winmajor _winminor _winver _wmakepath _wmkdir _wmktemp _wopen _wperror _wpgmptr _wpopen _wputenv _wremove _wrename _write _wrmdir _wsearchenv _wsetlocale _wsopen _wspawnl _wspawnle _wspawnlp _wspawnlpe _wspawnv _wspawnve _wspawnvp _wspawnvpe _wsplitpath _wstat _wstati64 _wstrdate _wstrtime _wsystem _wtempnam _wtmpnam _wtoi _wtoi64 _wtol _wunlink _wutime _y0 _y1 _yn abort abs acos asctime asin atan atan2 atexit atof atoi atol bsearch calloc ceil clearerr clock cos cosh ctime difftime div exit exp fabs fclose feof ferror fflush fgetc fgetpos fgets fgetwc fgetws floor fmod fopen fprintf fputc fputs fputwc fputws fread free freopen frexp fscanf fseek fsetpos ftell fwprintf fwrite fwscanf getc getchar getenv gets getwc getwchar gmtime is_wctype isalnum isalpha iscntrl isdigit isgraph isleadbyte islower isprint ispunct isspace isupper iswalnum iswalpha iswascii iswcntrl iswctype iswdigit iswgraph iswlower iswprint iswpunct iswspace iswupper iswxdigit isxdigit labs ldexp ldiv localeconv localtime log log10 longjmp malloc mblen mbstowcs mbtowc memchr memcmp memcpy memmove memset mktime modf perror pow printf putc putchar puts putwc putwchar qsort raise rand realloc remove rename rewind scanf setbuf setlocale setvbuf signal sin sinh sprintf sqrt srand sscanf strcat strchr strcmp strcoll strcpy strcspn strerror strftime strlen strncat strncmp strncpy strpbrk strrchr strspn strstr strtod strtok strtol strtoul strxfrm swprintf swscanf system tan tanh time tmpfile tmpnam tolower toupper towlower towupper ungetc ungetwc vfprintf vfwprintf vprintf vsprintf vswprintf vwprintf wcscat wcschr wcscmp wcscoll wcscpy wcscspn wcsftime wcslen wcsncat wcsncmp wcsncpy wcspbrk wcsrchr wcsspn wcsstr wcstod wcstok wcstol wcstombs wcstoul wcsxfrm wctomb wprintf wscanf

AddIn/ASBarBroker.exe

IMPHASH 8cb73f23fc4ffce04345bba981c347fe
SHA256 00a481ef9985281177c1f6cc6d055c2bdb719db224637e7eb474a3eaab6305cf
MD5 0ebf8f583abb1ffb40c07b87eae4edb3
SHA1 ef91b3245f426b86c2b69fd9678176d3be05c009
SHA512 0bca7bc46019628149afb00cd69d26fd59195c4cbecbb472f9afabf73e8b3eb1da20fdaa4ef03c0776d11b5c8532d16b40a927e4b8b68640067c145cb7e463b4
SSDEEP 1536:K+4yiwujgLVFsP+TCwXCqm5vb+cNCZkBfT3ol9t7tG2Tn+8Z7nzrNPTJdSnaxCi7:AdwusDXUfvbhNCool9t7tG2TXJz9maD
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

N/A

Digest Algorithm

N/A

PE Digests Matches

Not matched

Trusted

Not trusted

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Serial Number

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

May 21, 2009 - May 20, 2019

Subject

CN=Baidu Online Network Technology (Beijing) Co.\, Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Baidu Online Network Technology (Beijing) Co.\, Ltd.,L=Beijing,ST=Beijing,C=CN

Serial Number

65:16:5e:50:24:9f:f6:ad:03:9d:77:06:ec:59:bf:8d

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 31, 2009 - Jul 30, 2012

Minor OS version

0

Major OS version

4

Entry point

34430

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

psapi

GetModuleFileNameExW

kernel32

OutputDebugStringW FreeLibrary MultiByteToWideChar SizeofResource LoadResource FindResourceW LoadLibraryExW GetModuleHandleW Sleep GetProcAddress LoadLibraryW GetLongPathNameW GetCurrentThreadId GetCommandLineW EnterCriticalSection LeaveCriticalSection VirtualFreeEx CreateRemoteThread WriteProcessMemory DebugBreak GetShortPathNameW OpenProcess CreateFileW DeviceIoControl GetVersionExW GlobalFree GlobalAlloc GetCurrentProcess GetLocaleInfoA GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA GetConsoleMode lstrlenA InterlockedIncrement GetModuleFileNameW CreateEventW CreateThread SetEvent lstrcmpiW InterlockedDecrement GetLastError DeleteCriticalSection InitializeCriticalSection RaiseException lstrlenW WideCharToMultiByte WaitForSingleObject CloseHandle VirtualAllocEx GetConsoleCP SetFilePointer LoadLibraryA SetStdHandle FlushFileBuffers CreateFileA WriteConsoleW GetConsoleOutputCP WriteConsoleA GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount QueryPerformanceCounter GetStartupInfoA GetFileType SetHandleCount GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA HeapSize GetVersionExA HeapAlloc HeapFree RtlUnwind HeapReAlloc TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetProcessHeap GetStartupInfoW VirtualFree VirtualAlloc HeapDestroy HeapCreate GetModuleHandleA ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetCPInfo GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError

user32

GetMessageW TranslateMessage DispatchMessageW LoadStringW CharNextW PostThreadMessageW UnregisterClassA CharLowerBuffW

advapi32

RegCreateKeyW OpenProcessToken GetTokenInformation AllocateAndInitializeSid EqualSid FreeSid RegEnumKeyExW RegQueryInfoKeyW RegSetValueExW RegOpenKeyExW RegCreateKeyExW RegCloseKey RegDeleteValueW RegDeleteKeyW

shell32

ShellExecuteExW SHGetFolderPathW

ole32

CoInitialize CoUninitialize CoCreateInstance CoTaskMemFree CoRegisterClassObject CoRevokeClassObject CoTaskMemRealloc CoTaskMemAlloc StringFromGUID2

oleaut32

SysAllocString LoadTypeLi UnRegisterTypeLi RegisterTypeLi SysStringLen SysFreeString VarUI4FromStr

shlwapi

PathFileExistsW StrCmpNIW SHGetValueW

AddIn/QvodAddr.dll

IMPHASH c6079cff13dd538f8c2b93227d9d6d6c
SHA256 c9a2b8ff0be921e2ac2ff6993f7fecc486b02969254884f89af3a19babfcf7e6
MD5 57d9f8b6e595ef4a02d8630c53fddcc3
SHA1 523dedd35613dc3221657876a3f5248e38e2a842
SHA512 e95f144caa3bb636fd4a085a24a41d95ac6dae1c47d729400bb65a37527863b02b15e98cb62121f2155956f8a2b177f3b1a11d9ba08881858924d9bd75be985e
SSDEEP 24576:ToJx/zjXPRxxgihJfn9svZw/UDkK4ac3tHtTKJZTXjSH/:ToH//nxzhlXtNTKJdXjSH/
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

N/A

Digest Algorithm

N/A

PE Digests Matches

Not matched

Trusted

Not trusted

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Serial Number

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

May 21, 2009 - May 20, 2019

Subject

CN=Baidu Online Network Technology (Beijing) Co.\, Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Baidu Online Network Technology (Beijing) Co.\, Ltd.,L=Beijing,ST=Beijing,C=CN

Serial Number

65:16:5e:50:24:9f:f6:ad:03:9d:77:06:ec:59:bf:8d

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 31, 2009 - Jul 30, 2012

Minor OS version

0

Major OS version

4

Entry point

696406

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\cygwin\home\scmpf\compiler_src\pupeng_213326_win32\app\gensoft\bar\address-search\Res\Chinese\Baidudg\AddressBar.pdb

version

GetFileVersionInfoW GetFileVersionInfoSizeW VerQueryValueW

ws2_32

gethostname WSAStartup gethostbyname inet_ntoa WSACleanup

shlwapi

StrDupW PathRemoveFileSpecW StrCmpNW UrlCanonicalizeW UrlUnescapeA StrCmpIW PathRemoveFileSpecA PathIsDirectoryA SHDeleteValueW PathFileExistsW StrStrIW SHGetValueW StrCpyNW SHDeleteKeyW SHSetValueW

dbghelp

ImageDirectoryEntryToData

winmm

timeGetTime

iphlpapi

GetAdaptersInfo GetNetworkParams

wininet

InternetConnectA InternetConnectW HttpOpenRequestA HttpOpenRequestW InternetCloseHandle InternetSetStatusCallbackA InternetSetStatusCallbackW HttpSendRequestW InternetOpenW InternetQueryOptionW DeleteUrlCacheEntryW InternetGetCookieW InternetCrackUrlW InternetOpenUrlW InternetSetOptionW HttpQueryInfoW InternetQueryDataAvailable InternetReadFile GetUrlCacheEntryInfoW

rpcrt4

UuidCreate

setupapi

SetupIterateCabinetW

imm32

ImmGetOpenStatus ImmGetDefaultIMEWnd ImmGetContext ImmReleaseContext ImmGetCompositionStringW ImmGetCompositionWindow

kernel32

GetConsoleCP GetModuleFileNameA GetConsoleMode LoadLibraryA LoadLibraryW GetModuleHandleA GetModuleHandleW GetProcAddress GetFileAttributesW GetVersion RaiseException InterlockedDecrement lstrlenW EnterCriticalSection LeaveCriticalSection GetLastError SetLastError GetModuleFileNameW OutputDebugStringA InterlockedIncrement OutputDebugStringW InitializeCriticalSection DeleteCriticalSection lstrcmpiW LoadLibraryExW lstrlenA DebugBreak FreeLibrary MultiByteToWideChar SizeofResource LoadResource FindResourceW DisableThreadLibraryCalls LocalFree CloseHandle ResumeThread SetThreadPriority ReleaseMutex WaitForSingleObject CreateMutexW DeleteFileW GetACP GetCurrentThreadId WideCharToMultiByte GetTickCount GlobalUnlock GlobalLock CreateFileW DeviceIoControl GetVersionExW FlushInstructionCache GetCurrentProcess lstrcmpW SwitchToThread GetCurrentProcessId GetCommandLineW Sleep GetPrivateProfileIntW GetPrivateProfileStringW MoveFileExW CreateDirectoryW GetCurrentDirectoryA GetSystemDirectoryW GetLongPathNameW TerminateThread CopyFileW MapViewOfFile CreateFileMappingW UnmapViewOfFile TryEnterCriticalSection GetLocalTime CompareStringW GetWindowsDirectoryW QueryPerformanceCounter QueryPerformanceFrequency TlsAlloc TlsFree TlsGetValue TlsSetValue SetFilePointer ReadFile SystemTimeToFileTime LocalFileTimeToFileTime GetCurrentDirectoryW SetFileTime WriteFile GetTempFileNameW GetTempPathW LockResource GlobalFree GlobalAlloc SetErrorMode GetFileSize FileTimeToSystemTime GetShortPathNameW lstrcatW lstrcpyW WritePrivateProfileStringW FindNextFileW FindClose FindFirstFileW FreeResource WriteProcessMemory ReadProcessMemory VirtualProtect VirtualQuery lstrcmpiA GetFileInformationByHandle HeapAlloc HeapReAlloc HeapFree HeapSize LocalAlloc GetProcessHeap GlobalReAlloc GetFileAttributesA DeleteFileA AreFileApisANSI CreateFileA GetTempPathA FlushFileBuffers SetEndOfFile UnlockFile LockFile LockFileEx GetFullPathNameA GetFullPathNameW GetSystemTime GetSystemTimeAsFileTime SetCurrentDirectoryA LCMapStringA LCMapStringW SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA CreateThread FileTimeToLocalFileTime GetDriveTypeW GetDriveTypeA GetEnvironmentStrings FindFirstFileA GetCommandLineA GetCPInfo GetOEMCP IsValidCodePage GetCurrentThread HeapDestroy HeapCreate FatalAppExitA ExitProcess GetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW GetStringTypeA GetStringTypeW GetTimeZoneInformation GetTimeFormatA GetDateFormatA GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale SetConsoleCtrlHandler InterlockedExchange GetLocaleInfoW SetStdHandle ExitThread IsDebuggerPresent GetVersionExA InterlockedCompareExchange IsProcessorFeaturePresent VirtualFree VirtualAlloc RtlUnwind TerminateProcess WriteConsoleA GetConsoleOutputCP WriteConsoleW CompareStringA SetEnvironmentVariableA UnhandledExceptionFilter RemoveDirectoryW SetUnhandledExceptionFilter

user32

GetCapture CreateIconFromResourceEx CharLowerBuffW SetForegroundWindow GetForegroundWindow AttachThreadInput GetClassLongW KillTimer SetTimer wsprintfW RemovePropW SetPropW GetPropW OffsetRect SetCursor IsWindowEnabled GetWindowDC ScreenToClient MoveWindow GetWindowTextLengthW SetFocus GetWindow MapWindowPoints SetWindowPos GetDlgItem EndDialog MessageBoxW CharLowerW FindWindowW SetWindowTextW GetActiveWindow DialogBoxParamW FindWindowExW PostThreadMessageW GetMessageW TranslateMessage DispatchMessageW GetDlgCtrlID IsWindowVisible EnumChildWindows GetKeyState GetClassNameW GetParent GetWindowThreadProcessId WindowFromPoint GetWindowRect CreateWindowExW GetClassInfoExW RegisterClassExW DestroyWindow PtInRect LoadCursorW IsWindow ShowWindow PostMessageW UpdateWindow SetRectEmpty CreateDialogParamW BeginPaint EndPaint RegisterWindowMessageW InvalidateRect FillRect GetClientRect SystemParametersInfoW GetWindowTextW ReleaseDC GetDC GetFocus CharLowerBuffA SetWindowsHookExW UnhookWindowsHookEx CallNextHookEx DefWindowProcW GetWindowLongW SetWindowLongW CharNextW LoadIconW GetSysColor DrawFocusRect LoadStringW InflateRect CopyRect DrawTextW SendMessageW DrawIconEx SetScrollPos ReleaseCapture UpdateLayeredWindow SetRect GetSystemMetrics RegisterClassW SetCapture DestroyIcon GetScrollInfo SetScrollInfo ShowScrollBar PeekMessageW GetDesktopWindow CharUpperBuffW CharUpperW MonitorFromRect GetMonitorInfoW GetCursorPos LoadImageW UnregisterClassA CallWindowProcW

gdi32

GetTextExtentPoint32W CreateFontIndirectW DeleteDC SelectObject TextOutW DeleteObject ExtCreateRegion CombineRgn SetStretchBltMode StretchBlt GetDIBits SetTextColor SetBkMode SetBkColor GetPixel ExtTextOutW GetTextExtentPointW BitBlt CreateCompatibleDC CreateDIBSection CreateFontW GetStockObject GetCurrentObject MoveToEx CreateCompatibleBitmap LineTo CreatePen GetObjectW CreateSolidBrush

advapi32

CryptAcquireContextW CryptCreateHash CryptHashData CryptDeriveKey CryptDestroyHash CryptDuplicateKey CryptDecrypt CryptEncrypt RegOpenKeyW RegEnumKeyExA RegEnumKeyExW RegDeleteKeyW RegDeleteValueW RegCloseKey RegCreateKeyExW RegOpenKeyExW RegSetValueExW RegQueryInfoKeyW RegEnumValueW CryptDestroyKey RegQueryValueExW RegCreateKeyW ConvertStringSecurityDescriptorToSecurityDescriptorW

shell32

ShellExecuteW SHGetFolderPathW ShellExecuteExW ExtractIconW SHGetSpecialFolderPathW DragQueryFileA ord85

ole32

GetHGlobalFromStream CreateStreamOnHGlobal CoTaskMemAlloc CoGetClassObject RevokeDragDrop CoInitialize CoUninitialize ReleaseStgMedium RegisterDragDrop CoCreateInstance CoTaskMemFree CoTaskMemRealloc OleUninitialize OleInitialize

oleaut32

SysAllocString LoadTypeLi RegisterTypeLi VarUI4FromStr LoadRegTypeLi VariantInit SysFreeString SysAllocStringLen SafeArrayDestroy SafeArrayUnaccessData SafeArrayAccessData SafeArrayCreate VariantCopy SysStringLen VariantClear GetErrorInfo VariantChangeType SetErrorInfo CreateErrorInfo

msimg32

AlphaBlend

urlmon

CoInternetGetSession

AddIn/VisLrc.dll

IMPHASH 405f85e6c10ba505edbac8ea83c4ca8c
SHA256 fc49a13d94f4da894209f6503ba56ddaee21af92224e4a6260bc9a9dbe3813db
MD5 2c3166ed03d35761549457ca1ed5fcdf
SHA1 cd5120872f95ab8b08b1a6d8a74fecb898a3d728
SHA512 8d54325d1957fd966be0db2bf7f92193bcf3528da394faa8f195752b03fe7df972cf01080ea3713daf7ce91b999eb2e4782aeb00d438685a6fb00cda15d0fad9
SSDEEP 3072:RJPHHXjS7Ip81RLIfPE9hYRYCkLzf8l/JHss4H:RJhpUXYzkL4QH
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

82:8d:a3:bb:cc:60:a2:4e:27:69:84:46:83:19:5d:c9:43:8e:c5:b2

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shenzhen QVOD Technology Co.\,Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Shenzhen QVOD Technology Co.\,Ltd,L=Shenzhen,ST=Shenzhen,C=CN

Chains

Jun 10, 2009

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Serial Number

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

May 21, 2009 - May 20, 2019

Subject

CN=Shenzhen QVOD Technology Co.\,Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Shenzhen QVOD Technology Co.\,Ltd,L=Shenzhen,ST=Shenzhen,C=CN

Serial Number

69:d1:ad:9b:16:f2:f2:1b:66:64:ab:8b:27:1f:d5:36

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jun 2, 2009 - Jun 2, 2011

Minor OS version

0

Major OS version

4

Entry point

63961

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

DebugBreak OutputDebugStringW GetLastError MulDiv FindClose FindFirstFileW CompareStringW CompareStringA SetEndOfFile LoadLibraryA GetOEMCP GetACP CreateFileA GetCPInfo LCMapStringW LCMapStringA CreateFileW FlushFileBuffers SetStdHandle GetStringTypeW GetStringTypeA IsBadCodePtr IsBadReadPtr SetUnhandledExceptionFilter IsBadWritePtr HeapReAlloc VirtualAlloc VirtualFree MultiByteToWideChar HeapDestroy GetVersionExA GetEnvironmentVariableA GetEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsW FreeEnvironmentStringsA GetModuleFileNameA GetStartupInfoA GetFileType GetStdHandle SetHandleCount TerminateProcess WriteFile ExitProcess SetFilePointer ReadFile CloseHandle GetModuleFileNameW WideCharToMultiByte lstrlenA InterlockedDecrement DeleteCriticalSection GetCurrentProcess FlushInstructionCache lstrlenW lstrcmpW InterlockedIncrement GlobalAlloc GlobalLock GlobalUnlock InitializeCriticalSection EnterCriticalSection LeaveCriticalSection GetCurrentThreadId GetPrivateProfileStringW WritePrivateProfileStringW GetModuleHandleA GetProcAddress TlsGetValue SetLastError TlsFree TlsAlloc TlsSetValue HeapAlloc HeapFree GetVersion GetCommandLineA GetLocalTime GetSystemTime GetTimeZoneInformation RtlUnwind GetPrivateProfileIntW HeapCreate SetEnvironmentVariableA

user32

SetWindowPos CreateWindowExW GetClientRect SetRectEmpty RegisterClassExW LoadCursorW GetClassInfoExW RegisterWindowMessageW DefWindowProcW GetWindow SetWindowLongW OpenClipboard EmptyClipboard CloseClipboard SetClipboardData DrawTextW PostMessageW CharLowerW LoadStringW CharNextW wvsprintfW InvalidateRgn InvalidateRect SetCapture SetWindowTextW CreateAcceleratorTableW GetDesktopWindow RedrawWindow GetParent GetClassNameW ReleaseCapture GetFocus IsChild SetFocus GetDC ReleaseDC BeginPaint FillRect EndPaint CallWindowProcW GetDlgItem SendMessageW GetSysColor IsWindow DestroyWindow wsprintfW LoadImageW GetWindowLongW GetWindowTextLengthW GetWindowTextW

gdi32

SetBkMode SetTextColor GetMapMode SetMapMode GetWindowExtEx GetViewportExtEx CreateFontIndirectW GetStockObject GetObjectW GetDeviceCaps CreateSolidBrush DeleteObject CreateCompatibleBitmap CreateCompatibleDC SelectObject BitBlt DeleteDC GetTextExtentPoint32W

ole32

CoInitialize CreateStreamOnHGlobal OleInitialize OleUninitialize CLSIDFromProgID CLSIDFromString CoCreateInstance CoTaskMemFree StringFromCLSID CoTaskMemAlloc OleLockRunning

oleaut32

SysStringLen OleCreateFontIndirect OleLoadPicture SysAllocStringLen VariantClear SysAllocString SysFreeString LoadRegTypeLi

comctl32

InitCommonControlsEx

msimg32

AlphaBlend TransparentBlt

AddIn/conf.xml

SHA256 fd8d1a043d98b3a12af2ab949bde40ef3c4da2c5572369c57397aa6d1a06bdc0
MD5 34f602b84605d8445c709213a6c07842
SHA1 74d9545878f4dcc855b84ffbbfbb56c4121d6e90
SHA512 f9e3927dac2fc92ccedecb70123a276babe3f3f3afd7f58fb6a5b50bbe11221547b163bb00b95b0f1e9214e82b6a62f77eb9f4d9a35832ae4ed21325d749079a
MD5 SHA1 SHA512

NSIS installer

installer

Baidu-Toolbar-utf8kb_cb.exe

IMPHASH 73b73e00f465fa1a2a3bf6377a40219b
SHA256 c2c9430894258735f487ed9f75f9da4a8246eca5285be76afd0830f77f4fcc92
MD5 b98c05fa8d1effbcdb9f720c50aa6f40
SHA1 28c0fd0b8edfe264e431b199ea611e7833b979dd
SHA512 77d20d9c12adb4ae543f5bc2d41a24367d92491a295c5dc75ab2b778dc92e11e9f11a31895dfafd7cb0994bbe594d88a16584532cdb27d86ea630f7b928dd2ee
SSDEEP 24576:PWe0JIIC6Nuo9iEmlW/7aFbYUXXXozK0H:P50JWm34W/GFbY6XYrH
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

N/A

Digest Algorithm

N/A

PE Digests Matches

Not matched

Trusted

Not trusted

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Serial Number

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

May 21, 2009 - May 20, 2019

Subject

CN=Baidu Online Network Technology (Beijing) Co.\, Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Baidu Online Network Technology (Beijing) Co.\, Ltd.,L=Beijing,ST=Beijing,C=CN

Serial Number

65:16:5e:50:24:9f:f6:ad:03:9d:77:06:ec:59:bf:8d

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 31, 2009 - Jul 30, 2012

Minor OS version

0

Major OS version

4

Entry point

13011

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFileTime CompareFileTime SearchPathA GetShortPathNameA GetFullPathNameA MoveFileA SetCurrentDirectoryA GetFileAttributesA GetLastError CreateDirectoryA SetFileAttributesA Sleep CreateFileA GetFileSize GetModuleFileNameA GetTickCount GetCurrentProcess CopyFileA ExitProcess lstrcpynA CloseHandle GetWindowsDirectoryA GetTempPathA GetUserDefaultLangID GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread CreateProcessA RemoveDirectoryA GetTempFileNameA SetEndOfFile UnmapViewOfFile MapViewOfFile CreateFileMappingA lstrcpyA lstrlenA lstrcatA GetSystemDirectoryA lstrcmpiA GetEnvironmentVariableA ExpandEnvironmentStringsA GlobalFree GlobalAlloc WaitForSingleObject GetExitCodeProcess SetErrorMode GetModuleHandleA LoadLibraryA GetProcAddress FreeLibrary MultiByteToWideChar WritePrivateProfileStringA MulDiv GetPrivateProfileStringA WriteFile ReadFile SetFilePointer FindClose FindNextFileA FindFirstFileA DeleteFileA GetCommandLineA

user32

ScreenToClient GetWindowRect SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA LoadCursorA SetCursor CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard EndDialog AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxA CharPrevA DispatchMessageA PeekMessageA CreateDialogParamA DestroyWindow SetTimer SetWindowTextA PostQuitMessage SetForegroundWindow ShowWindow wsprintfA SendMessageTimeoutA RegisterClassA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA TrackPopupMenu ExitWindowsEx IsWindow GetDlgItem SetWindowLongA LoadImageA GetDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint FindWindowExA

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectA SetBkMode SetTextColor SelectObject

shell32

SHGetMalloc SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA SHGetSpecialFolderLocation

advapi32

RegQueryValueExA RegSetValueExA RegEnumKeyA RegEnumValueA RegOpenKeyExA RegDeleteKeyA RegDeleteValueA RegCloseKey RegCreateKeyExA

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

$PROGRAM_FILES/Baidu/Toolbar/BaiduBarX_Tmp/BaiduBarX.dll

IMPHASH 78760b90e51e152ef6c8a33a5e909edc
SHA256 7216f4e16b6ca0c2b3b9f6c28bd1618802e0963c72c26a7285fefaf0fe95aa9c
MD5 8c70775e64828cf1bc974aa850862620
SHA1 77fcbd8f8a9d2f5ea9051f26da104bef50195881
SHA512 2c5d699a5d80222b1b310f1f059643186b9d4755da502b840b5a2c6daff3fbfa836e45d3d98150c72a76b47077637400a2c2856e07ee9628e07017b93877bbaf
SSDEEP 49152:9VVPl8AlDw6JPul9zjJ+rEC0KaTda845t20Tu1IA2Nvvf:9VLPlD1BufPJ+h3vj
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

N/A

Digest Algorithm

N/A

PE Digests Matches

Not matched

Trusted

Not trusted

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Serial Number

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

May 21, 2009 - May 20, 2019

Subject

CN=Baidu Online Network Technology (Beijing) Co.\, Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Baidu Online Network Technology (Beijing) Co.\, Ltd.,L=Beijing,ST=Beijing,C=CN

Serial Number

65:16:5e:50:24:9f:f6:ad:03:9d:77:06:ec:59:bf:8d

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 31, 2009 - Jul 30, 2012

Minor OS version

0

Major OS version

4

Entry point

1043560

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\cygwin\home\scmpf\compiler_src\zhonghua_169623_win32\app\gensoft\bar\toolbar\chinese_unicode_release\BaiduBarX.pdb

setupapi

SetupIterateCabinetW

version

VerQueryValueW GetFileVersionInfoW GetFileVersionInfoSizeW

imm32

ImmReleaseContext ImmGetContext ImmGetCompositionStringW

shlwapi

PathFindFileNameW SHDeleteKeyW SHSetValueW SHGetValueW PathRemoveExtensionW PathFileExistsW SHDeleteValueW UrlCombineW StrCpyW PathIsDirectoryA PathRemoveFileSpecA StrCmpIW StrStrIW UrlUnescapeA StrRetToStrW StrRetToStrA UrlEscapeW UrlCanonicalizeW SHCopyKeyW UrlUnescapeW PathIsDirectoryW PathRemoveFileSpecW

wininet

InternetQueryDataAvailable InternetQueryOptionW InternetCrackUrlW FindFirstUrlCacheGroup DeleteUrlCacheGroup FindNextUrlCacheGroup FindCloseUrlCache FindFirstUrlCacheEntryW FindNextUrlCacheEntryW InternetOpenUrlW InternetGetCookieW HttpSendRequestExW HttpEndRequestW InternetGetConnectedState InternetOpenA InternetSetCookieW InternetConnectA HttpOpenRequestA HttpAddRequestHeadersA HttpSendRequestExA InternetWriteFile HttpEndRequestA DeleteUrlCacheEntryW HttpQueryInfoW InternetOpenW InternetSetOptionW InternetConnectW HttpOpenRequestW HttpAddRequestHeadersW HttpSendRequestW InternetReadFile InternetCloseHandle GetUrlCacheEntryInfoW InternetCanonicalizeUrlW InternetSetOptionA

urlmon

URLDownloadToFileW CoInternetGetSession

rpcrt4

UuidCreate

iphlpapi

GetNetworkParams GetAdaptersInfo

ws2_32

gethostbyname gethostname

kernel32

VirtualAlloc RtlUnwind UnhandledExceptionFilter IsDebuggerPresent HeapReAlloc FlushInstructionCache GetCurrentProcess InterlockedDecrement lstrlenW lstrlenA DebugBreak OutputDebugStringW GetModuleHandleA GetModuleHandleW GetProcAddress GetFileAttributesW GetVersion RaiseException EnterCriticalSection LeaveCriticalSection InitializeCriticalSection DeleteCriticalSection LoadLibraryW GetLastError SetLastError GetModuleFileNameW OutputDebugStringA GetCurrentThreadId InterlockedIncrement CreateProcessW WideCharToMultiByte CreateDirectoryW GetTempPathW CreateFileW CloseHandle WriteFile SizeofResource LockResource LoadResource FindResourceW LocalFree FreeLibrary lstrcmpiW TryEnterCriticalSection LoadLibraryExW MultiByteToWideChar DisableThreadLibraryCalls ReleaseMutex DeleteFileW GetTempFileNameW WaitForSingleObject GetSystemTimeAsFileTime CreateThread GetVersionExW LoadLibraryA CopyFileW DeviceIoControl GetSystemDirectoryW ResumeThread SetThreadPriority GetPrivateProfileStringW GetTickCount GetACP CompareStringW GetCurrentProcessId GlobalUnlock GlobalLock GlobalAlloc FindClose FindNextFileW FindFirstFileW TerminateThread GetExitCodeThread OpenMutexW GetFullPathNameW GlobalFree MulDiv RemoveDirectoryW Sleep ReadFile GetFileSize Thread32Next SuspendThread OpenThread Thread32First VirtualFree UnmapViewOfFile SetUnhandledExceptionFilter MapViewOfFile CreateFileMappingW TerminateProcess OpenProcess SwitchToThread GetCommandLineW ExpandEnvironmentStringsW GetPrivateProfileIntW WritePrivateProfileStringW TlsAlloc TlsFree TlsGetValue TlsSetValue SetFileAttributesW lstrcmpW HeapFree HeapAlloc GetProcessHeap GetEnvironmentVariableW GlobalSize MoveFileExW SetErrorMode GetShortPathNameW InterlockedExchange Process32NextW Process32FirstW ReadProcessMemory SetFilePointer lstrcatW lstrcpyW ExitThread FileTimeToSystemTime FileTimeToLocalFileTime GetDriveTypeW GetFileAttributesA GetCommandLineA GetCPInfo GetOEMCP IsValidCodePage GetCurrentThread GetStdHandle GetModuleFileNameA FatalAppExitA HeapDestroy HeapCreate HeapSize ExitProcess GetConsoleCP GetConsoleMode GetCurrentDirectoryA SetCurrentDirectoryA GetTimeZoneInformation LCMapStringA LCMapStringW SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter FlushFileBuffers GetStringTypeA GetStringTypeW GetTimeFormatA GetDateFormatA GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale SetConsoleCtrlHandler GetLocaleInfoW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA SetEndOfFile GetDriveTypeA GetFullPathNameA CompareStringA IsProcessorFeaturePresent InterlockedCompareExchange CreateToolhelp32Snapshot GetVersionExA SetEnvironmentVariableA CreateMutexW

user32

GetSysColorBrush SetScrollPos SetScrollInfo GetScrollInfo SetWindowRgn GetMenuItemRect RemovePropW GetPropW SetPropW GetForegroundWindow SetWindowLongA IsWindowUnicode GetWindowLongA SetMenuItemInfoW DrawStateW TrackPopupMenuEx ModifyMenuW MessageBeep FrameRect GetMessagePos GetSystemMetrics LoadBitmapW PeekMessageW GetSubMenu MonitorFromRect CharLowerBuffA AttachThreadInput SetForegroundWindow WaitForInputIdle CreateIconFromResourceEx CharNextA EqualRect SetActiveWindow SetClassLongW ScrollWindow EmptyClipboard SetClipboardData CloseClipboard CharUpperW CreateMenu InsertMenuW TrackPopupMenu MonitorFromPoint RemoveMenu AppendMenuW CreatePopupMenu CopyRect SetWindowsHookExW UnhookWindowsHookEx CallNextHookEx GetCapture ReleaseCapture GetSysColor SetCursor GetDlgCtrlID SetFocus SetCapture IsWindowEnabled UpdateWindow DrawFocusRect SetRectEmpty InsertMenuItemW EnableWindow RedrawWindow GetWindowTextLengthW DrawTextW DestroyIcon FindWindowW CharLowerBuffW ScreenToClient AdjustWindowRectEx GetCursorPos GetWindowThreadProcessId GetGUIThreadInfo GetClassNameW PtInRect MessageBoxW MoveWindow FillRect GetFocus ReleaseDC TranslateMessage DispatchMessageW InvalidateRect GetWindowTextW GetActiveWindow LoadIconW IsWindowVisible GetParent GetWindow GetWindowRect SystemParametersInfoW GetClientRect MapWindowPoints SendMessageW DialogBoxParamW DestroyMenu IsMenu GetKeyState CharLowerW CreateWindowExW GetClassInfoExW RegisterClassExW DestroyWindow LoadCursorW KillTimer GetMenuItemInfoW GetMenuItemCount EnableMenuItem SetRect CharUpperBuffW DrawIconEx GetMessageW IsIconic PostThreadMessageW FindWindowExW GetClassLongW GetClassLongA CallWindowProcA UnregisterClassA EnumChildWindows WindowFromPoint InflateRect SendMessageA GetUpdateRect ClientToScreen DeleteMenu GetTopWindow MenuItemFromPoint GetMenuItemID RegisterWindowMessageW IsRectEmpty GetDlgItemTextW AdjustWindowRect GetWindowDC CreateDialogParamW SetDlgItemTextW SetTimer PostMessageW CharNextW EndPaint BeginPaint DefWindowProcW LoadStringW SetWindowPos IsWindow GetDlgItem ShowWindow GetDC SetWindowTextW GetWindowLongW SetWindowLongW CallWindowProcW EndDialog EnumWindows IsChild IsDialogMessageW LoadImageW OffsetRect OpenClipboard GetMonitorInfoW

gdi32

PatBlt GetTextColor Rectangle CreateRoundRectRgn GetObjectW CreatePen LineTo MoveToEx SelectObject CreateRectRgn CreateBitmap ExcludeClipRect GetDeviceCaps DPtoLP BitBlt GetClipBox CreateCompatibleBitmap SetViewportOrgEx CreateCompatibleDC ExtTextOutW RestoreDC SaveDC GetCurrentObject CreateSolidBrush CreateFontIndirectW GetTextExtentPoint32W FillRgn TextOutW GetPixel SetTextColor DeleteDC SetBkMode SetBkColor GetStockObject DeleteObject

advapi32

SetTokenInformation GetSecurityDescriptorSacl SetSecurityInfo EqualSid GetUserNameW RegSetKeySecurity RegEnumKeyW AllocateAndInitializeSid InitializeAcl AddAce ConvertStringSecurityDescriptorToSecurityDescriptorW RegCloseKey RegDeleteKeyW RegDeleteValueW RegCreateKeyExW RegOpenKeyExW RegSetValueExW RegQueryInfoKeyW RegEnumKeyExW RegQueryValueExW RegEnumValueW CreateProcessAsUserW GetLengthSid ConvertStringSidToSidW DuplicateTokenEx OpenProcessToken RegOpenKeyW RegCreateKeyW CopySid GetTokenInformation RegGetKeySecurity FreeSid SetSecurityDescriptorDacl InitializeSecurityDescriptor

shell32

ShellExecuteW ExtractIconW DuplicateIcon SHGetSpecialFolderPathW SHFileOperationW ShellExecuteExW SHGetMalloc SHGetFileInfoW SHGetDesktopFolder SHGetSpecialFolderLocation SHGetFolderPathW DragQueryFileA

ole32

OleInitialize OleUninitialize GetHGlobalFromStream CreateStreamOnHGlobal OleDraw RegisterDragDrop CLSIDFromProgID RevokeDragDrop CoCreateGuid CoInitialize CoUninitialize StringFromGUID2 CoTaskMemFree CoTaskMemRealloc CoTaskMemAlloc CoCreateInstance ReleaseStgMedium

oleaut32

VariantInit VariantClear SysAllocString SysAllocStringByteLen SysStringByteLen LoadTypeLi UnRegisterTypeLi RegisterTypeLi VarUI4FromStr SysFreeString SysAllocStringLen VarBstrCmp VariantCopy VarBstrCat SafeArrayDestroy SafeArrayUnaccessData SafeArrayAccessData SafeArrayCreate LoadRegTypeLi SetErrorInfo SysStringLen VariantChangeType GetErrorInfo CreateErrorInfo

msimg32

AlphaBlend

Name

.text

Size

1.3MB

Virtual Size

1.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

276KB

Virtual Size

275KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

15KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.Shared

Size

512B

Virtual Size

4B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

622KB

Virtual Size

621KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

83KB

Virtual Size

82KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Codecs/ColorFilter.ax.new

IMPHASH d6358db2b2f2325d29c23c3433a0656f
SHA256 19b84b912d782333cfed1727e69da83846b77d7c90736b5621b438f9f50d107c
MD5 fa098ed1394496b2ba53f1773f70d711
SHA1 6db54dfee27c70e61e3ef1d5374513c16fd602aa
SHA512 74b2704dba6ace3fecca0dd6e790162b961ca9fb9ae6240aefb1f0d52959f58456c626378c745cbc155a8928d850614b8df6804b851e8d017c5ebeca01c17a8c
SSDEEP 3072:9ymeNWoqvzMcvAXQQ0vlvYKQptcabWQlHs69rDc92:wE1vzM8bvhs7lHs69A2
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

59:35:f8:c6:6b:8f:ff:73:21:78:55:34:38:c4:3d:7f:45:58:10:6f

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shenzhen QVOD Technology Co.\,Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Shenzhen QVOD Technology Co.\,Ltd,L=Shenzhen,ST=Shenzhen,C=CN

Chains

Jun 10, 2009

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Serial Number

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

May 21, 2009 - May 20, 2019

Subject

CN=Shenzhen QVOD Technology Co.\,Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Shenzhen QVOD Technology Co.\,Ltd,L=Shenzhen,ST=Shenzhen,C=CN

Serial Number

69:d1:ad:9b:16:f2:f2:1b:66:64:ab:8b:27:1f:d5:36

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jun 2, 2009 - Jun 2, 2011

Minor OS version

0

Major OS version

4

Entry point

84339

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

msvcrt

__dllonexit _adjust_fdiv malloc _initterm ??3@YAXPAX@Z free __CxxFrameHandler wcslen sscanf strncmp strncpy _filelength _read _purecall _open _close _CIpow atoi sprintf strstr fflush fwrite fclose fopen fseek _ftol ??2@YAPAXI@Z _onexit

winmm

timeSetEvent timeGetTime

kernel32

GetCurrentThread GetThreadPriority SetThreadPriority GetModuleHandleA CreateThread InterlockedExchange SetErrorMode lstrcmpiA CreateEventA InitializeCriticalSection DeleteCriticalSection CloseHandle LeaveCriticalSection EnterCriticalSection WideCharToMultiByte GetACP FreeLibrary GetProcAddress LoadLibraryA Sleep SystemTimeToTzSpecificLocalTime GetSystemTime InterlockedIncrement InterlockedDecrement ResetEvent DuplicateHandle GetCurrentProcess GetCurrentThreadId SetEvent WaitForMultipleObjects WaitForSingleObject CreateSemaphoreA ReleaseSemaphore GetSystemInfo VirtualAlloc VirtualFree lstrlenA MultiByteToWideChar GetLastError GetModuleFileNameA GetVersionExA DisableThreadLibraryCalls GetTickCount

advapi32

RegOpenKeyExA RegCreateKeyA RegSetValueA RegDeleteKeyA RegCloseKey RegEnumKeyExA RegSetValueExA

user32

ShowWindow DestroyWindow DefWindowProcA PeekMessageA MsgWaitForMultipleObjects wvsprintfA PostThreadMessageA RegisterWindowMessageA GetQueueStatus DispatchMessageA LoadStringA LoadStringW GetWindowRect InvalidateRect SetWindowLongA GetWindowLongA wsprintfA DrawTextA SetDlgItemInt CheckRadioButton GetParent CreateWindowExA GetDlgItem SendMessageA SetDlgItemTextA GetDlgItemTextA MoveWindow GetDesktopWindow CreateDialogParamA

gdi32

ExtTextOutA SelectObject GetTextExtentPoint32A SetBkColor SetTextColor CreateDIBitmap GetDIBits CreateCompatibleDC CreateFontIndirectA DeleteObject DeleteDC

comctl32

ord16 ord17

ole32

CoInitialize CoFreeUnusedLibraries CoUninitialize CoCreateInstance CoTaskMemFree StringFromGUID2 CoTaskMemAlloc

oleaut32

SysAllocString SysFreeString

comdlg32

GetSaveFileNameA GetOpenFileNameA ChooseFontA

Codecs/RealMediaSplitter.ax.new

IMPHASH 092c362fafa1e9277558c0e5612fdfba
SHA256 4287023170ab52ec3883af9a464d281358ae44225b25b101697c2ae66c82f935
MD5 b91968f4f21d803d2467da89d9cd7275
SHA1 a0e1a676fe340f6bd211a1b40c0b6d8d1715d82e
SHA512 047470fda7ff9cda15cc4baaf0d5031bc8c37a9a7a827601c0e6db149f3af5149860afc45dd92c1a035f537971a70cb0f31372de12c080cecc3d93a89e6b8d65
SSDEEP 6144:sbH9JP/W0D2hzNqURg44nlHR0urOU48+EQHapawA9MDL:OJP/W0D2Pq/rpR0urOU4lExnn
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

158858

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

f:\vcexample\guliverkli\guliverkli\trunk\guliverkli\src\filters\parser\realmediasplitter\Release\RealMediaSplitter.pdb

kernel32

GetFileAttributesA GetFileSize GetFileTime ReadFile WriteFile SetFilePointer FlushFileBuffers LockFile UnlockFile SetEndOfFile GetFullPathNameA LocalAlloc GlobalReAlloc GlobalHandle TlsGetValue TlsAlloc TlsSetValue LocalReAlloc TlsFree lstrcatA SetErrorMode GlobalFlags lstrcmpW GlobalFindAtomA GlobalGetAtomNameA GetCPInfo GetOEMCP RtlUnwind VirtualQuery HeapAlloc HeapFree GetCommandLineA ExitProcess HeapReAlloc TerminateProcess SetStdHandle GetFileType HeapSize HeapDestroy HeapCreate IsBadWritePtr LCMapStringA LCMapStringW SetUnhandledExceptionFilter SetHandleCount GetStdHandle GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW UnhandledExceptionFilter QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeA GetStringTypeW GetTimeZoneInformation IsBadReadPtr IsBadCodePtr SetEnvironmentVariableA FileTimeToLocalFileTime FileTimeToSystemTime WritePrivateProfileStringA GlobalAddAtomA SetLastError GlobalFree GlobalUnlock FormatMessageA lstrcpynA LocalFree GlobalLock GlobalAlloc GlobalDeleteAtom lstrcmpA ConvertDefaultLocale EnumResourceLanguagesA lstrcpyA DeleteFileA Sleep CreateFileA GetVolumeInformationA FindFirstFileA FindClose CreateThread GetTickCount GetCurrentThread SetThreadPriority GetModuleHandleA VirtualAlloc CreateSemaphoreA GetCurrentThreadId GetCurrentProcess DuplicateHandle VirtualFree GetSystemInfo ReleaseSemaphore WaitForSingleObject ResetEvent SetEvent CreateEventA CloseHandle InterlockedDecrement InterlockedIncrement DisableThreadLibraryCalls RaiseException LoadResource LockResource SizeofResource FindResourceA GetModuleFileNameA LoadLibraryA GetProcAddress FreeLibrary LeaveCriticalSection EnterCriticalSection DeleteCriticalSection InitializeCriticalSection GetLastError lstrlenA lstrcmpiA WideCharToMultiByte CompareStringA CompareStringW MultiByteToWideChar GetVersion GetThreadLocale GetLocaleInfoA GetACP InterlockedExchange GetVersionExA VirtualProtect

user32

DestroyMenu GetForegroundWindow GetTopWindow DestroyWindow GetMessageTime GetMessagePos LoadIconA MapWindowPoints SetForegroundWindow GetClientRect GetMenu AdjustWindowRectEx GetClassInfoA RegisterClassA DefWindowProcA CallWindowProcA SystemParametersInfoA IsIconic GetWindowPlacement CopyRect SetWindowPos ShowWindow SetWindowLongA GetDlgItem LoadCursorA GetSysColorBrush GetSysColor ReleaseDC GetDC GrayStringA DrawTextExA DrawTextA TabbedTextOutA ClientToScreen GetWindow GetDlgCtrlID GetWindowRect PtInRect GetWindowTextA GetClassNameA GetSystemMetrics UnhookWindowsHookEx SetMenuItemBitmaps GetFocus ModifyMenuA EnableMenuItem CheckMenuItem GetMenuCheckMarkDimensions LoadBitmapA SetWindowsHookExA CallNextHookEx GetMessageA TranslateMessage GetActiveWindow IsWindowVisible GetKeyState GetCursorPos ValidateRect MessageBoxA GetParent GetWindowLongA GetLastActivePopup IsWindowEnabled WinHelpA EnableWindow GetCapture CreateWindowExA GetClassLongA GetClassInfoExA SetPropA GetPropA RemovePropA SendMessageA SetCursor GetMenuState GetMenuItemID GetMenuItemCount GetSubMenu PostMessageA PostQuitMessage SetRect DispatchMessageA RegisterWindowMessageA PeekMessageA wsprintfA UnregisterClassA CharUpperA SetWindowTextA

gdi32

DeleteDC GetStockObject TextOutA RectVisible PtVisible ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape CreateBitmap GetDeviceCaps GetClipBox SetMapMode SetTextColor SetBkColor RestoreDC SaveDC DeleteObject ExtTextOutA

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA ClosePrinter OpenPrinterA

advapi32

RegCloseKey RegQueryValueExA RegDeleteKeyA RegEnumKeyExA RegSetValueExA RegSetValueA RegCreateKeyA RegCreateKeyExA RegQueryValueA RegOpenKeyExA RegEnumKeyA RegOpenKeyA

comctl32

ord17

shlwapi

PathFindExtensionA PathFindFileNameA PathRemoveFileSpecA PathAddBackslashA PathIsUNCA PathStripToRootA

ole32

StringFromGUID2 CoUninitialize CoFreeUnusedLibraries CoCreateInstance CoInitialize CoTaskMemAlloc CoTaskMemFree CLSIDFromString

oleaut32

VariantInit VariantChangeType SysAllocString SysFreeString VariantClear SysAllocStringLen

Name

.text

Size

240KB

Virtual Size

239KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

_TEXT64

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

60KB

Virtual Size

58KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

24KB

Virtual Size

37KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

4KB

Virtual Size

936B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

36KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Codecs/asfsplliter.ax.new

IMPHASH 61540ae4d5f1fe29babe6b430f77a241
SHA256 5c44df6b0d4d212271a1ca4c008ea003a2dd1168059333169b3562c51065c3e9
MD5 4a7e26d268c355fb5da19a4400e7770b
SHA1 ebe3c19a94e12c2a5d39bc816317961797a6c89b
SHA512 db5f0161d64b27cebc6de443e68cf596725ea1034f20c58f2a019f2d50e67574e33ffe65e8f5a9b21095cd2f309a97b58ee3603e528276aeefa67c9d7b3234f6
SSDEEP 768:Y9We0OJXnfX2c+AOW8gpukVl5sqiCpl3il7T59bSob4p9Gk0:Y9WEXn/2c+7jlkV4dCpN67t9bSXG5
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

38751

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Codecs/atrc.dll.new

IMPHASH 5132cde9ac8899a69f40dfaacc320c4d
SHA256 00cb4ae39a6e18c07e12ae53150ee29ece9ef4561a496920f19813aa431daff2
MD5 ed7c402a17a33d428a6d0dad2e7c42d8
SHA1 93a6dcf0abe28a01403da578d685cc5c0b48bb82
SHA512 bddc074123d3f144d7903d5f2502f8961ef79e1a06ce05d1769f37314eb276729444647a9f5c9e80fec0512cbd07b5e46be40f6f6015f8b1a255d7daf3ae28f1
SSDEEP 1536:k7b44Vh7qOxPccMvJY1cnd5unZsQDUhl:k7MuPccEYW3IZhDUhl
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

46320

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Codecs/cook.dll.new

IMPHASH 7186ef18b8145b9efacd73914d40cee0
SHA256 f8b5898569a508e370eb25db27c1cba440c9d559529850c05589e56a93659835
MD5 fa220dae3898b8578c34791648321a38
SHA1 12bdd5396e996d071368980d36ef6f6c7b39f936
SHA512 9c2ad73fd43de7ca16a1d75b2974a737dfe1478d094783861ff5e3f994e17bc9e36e31f130296b497bb8955849be31db526018c0621cf5b09496fc6e5c3d6f34
SSDEEP 768:79rczOVJc8avUhcRxV6Sz+b2G90YnGZosMwCJtVSk7K+t6tj6tVDWVp3Ghv+Xb:7uqc8/aUSz62G9LnOnMK+t6tR
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

31536

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Codecs/drvc.dll.new

IMPHASH 5d841dc9603dda4e7058b842c1dedbfc
SHA256 ef8d7d81cb460db57f2e737ca0de3e0c6c06f78273e49a47b24f0a1eeaa2909f
MD5 e9ad4c6feede8ce70a1a21ed1dc0e2ad
SHA1 ec6b32969e43328a177456be63864d004d501fce
SHA512 ccd0a54e989b882db33e932fd95d29922dcc3e8608f32beef5882182be0534d809f67ce4d54ac894165f51e237ad39402ca97cf05e933fdd3c01c4f6ae50643c
SSDEEP 6144:hsNg+cXo8ZJI54BxrFPpH5Dtf5DNWoEaeglljEz:hsNg+Qo8ZJPWoEillYz
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

7952

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Name

.text

Size

192KB

Virtual Size

189KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

44KB

Virtual Size

42KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data1

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

4KB

Virtual Size

984B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

8KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Codecs/f4v.swf.new

SHA256 d84fc48dfdf0c48fce0c1778b90634be5e232f7489413ef8c53bad84afcc044a
MD5 1dd34e4127a07760d89d55383fcc00dd
SHA1 c91e8e25cde610b9cf916bd3a2ccff41c2e0aea2
SHA512 1d8e18d19ce1c0b45255d46113337d5e7e442e1eb07b5647d8c3ea9aa9f5b6d8c04b816ac425e2cad28b6dda0dc66ec75383eb4d10fb49ef48e4971592c176ed
MD5 SHA1 SHA512

NSIS installer

installer

Codecs/raac.dll.new

IMPHASH 2569b16af6a5e82c06ef6aed87f5e148
SHA256 80fe7db8b85c4e7c767ba7a9f3d2426933beec18f9cc4ce4a279e96b41683e27
MD5 cbb31c7b408e92fe01bd7ef7248a2b24
SHA1 3854ea40efe0a6f1a3f752ea6c2d915b952fb22b
SHA512 1cd5dfc6aa86f432915bce4b54b258d370fcbf41c4c87ca4d45b0daf0560b945f0bfddaf93e274a0fb71659b8744776142f8afb384a745108454f894fdd59c0d
SSDEEP 12288:SWTRJoKssbGkZvYdizYMEYeT6ueQpcNwtXDDDDDDDDDLDDD6NcKKKKYYYYYpDDks:SW8KssykZgdizNEYeT6ueQpawkNcKKKG
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

375296

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Name

.text

Size

364KB

Virtual Size

363KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.text1

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

88KB

Virtual Size

87KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

52KB

Virtual Size

88KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data1

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

12KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

KuaiwanSetup_kb.exe

IMPHASH 099c0646ea7282d232219f8807883be0
SHA256 00a967858308d7ea97e69b345040f42181333dc80be166315d837712a1bfc976
MD5 25b0e956b906f3ebff5e9b4da87a4e8a
SHA1 e7e831bf10800e408a203b343232bf477aec2d16
SHA512 49a175f7a174689d1d3f947669fe2d56e7e2651e561c173f3f5c427062cf57139dc5687899c9ba47197e52869a208aaaa28d14db25f8b720844a17d26ee86cfd
SSDEEP 24576:124yQw3vr+U2nJZrSdKi8HJcAl0viJnvCuhO51k/Th+M:124Lw/r+U2nJZKKi8pcAlvJv/a1+oM
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

c5:cd:9a:da:2c:34:75:ec:5c:ee:8e:c5:fc:81:7d:16:c4:d1:b1:c3

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shenzhen QVOD Technology Co.\,Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Shenzhen QVOD Technology Co.\,Ltd,L=Shenzhen,ST=Shenzhen,C=CN

Chains

Oct 29, 2010

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Serial Number

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

May 21, 2009 - May 20, 2019

Subject

CN=Shenzhen QVOD Technology Co.\,Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Shenzhen QVOD Technology Co.\,Ltd,L=Shenzhen,ST=Shenzhen,C=CN

Serial Number

69:d1:ad:9b:16:f2:f2:1b:66:64:ab:8b:27:1f:d5:36

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jun 2, 2009 - Jun 2, 2011

Minor OS version

0

Major OS version

4

Entry point

12837

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CompareFileTime SearchPathA GetShortPathNameA GetFullPathNameA MoveFileA SetCurrentDirectoryA GetFileAttributesA GetLastError CreateDirectoryA SetFileAttributesA Sleep GetTickCount CreateFileA GetFileSize GetModuleFileNameA GetCurrentProcess CopyFileA ExitProcess SetFileTime GetTempPathA GetCommandLineA SetErrorMode LoadLibraryA lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread CreateProcessA RemoveDirectoryA GetTempFileNameA lstrlenA lstrcatA GetSystemDirectoryA GetVersion CloseHandle lstrcmpiA lstrcmpA ExpandEnvironmentStringsA GlobalFree GlobalAlloc WaitForSingleObject GetExitCodeProcess GetModuleHandleA LoadLibraryExA GetProcAddress FreeLibrary MultiByteToWideChar WritePrivateProfileStringA GetPrivateProfileStringA WriteFile ReadFile MulDiv SetFilePointer FindClose FindNextFileA FindFirstFileA DeleteFileA GetWindowsDirectoryA

user32

EndDialog ScreenToClient GetWindowRect EnableMenuItem GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard RegisterClassA TrackPopupMenu AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA DestroyWindow CreateDialogParamA SetTimer SetWindowTextA PostQuitMessage SetForegroundWindow wsprintfA SendMessageTimeoutA FindWindowExA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA OpenClipboard ExitWindowsEx IsWindow GetDlgItem SetWindowLongA LoadImageA GetDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint ShowWindow

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectA SetBkMode SetTextColor SelectObject

shell32

SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA SHGetSpecialFolderLocation

advapi32

RegQueryValueExA RegSetValueExA RegEnumKeyA RegEnumValueA RegOpenKeyExA RegDeleteKeyA RegDeleteValueA RegCloseKey RegCreateKeyExA

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

$PLUGINSDIR/InstallOptions.dll

IMPHASH b1cd0d78f652ce5fc63f0879371af012
SHA256 426efd56da4014f12ec8ee2e268f86b848bbca776333d55482cb3eb71c744088
MD5 3809b1424d53ccb427c88cabab8b5f94
SHA1 bc74d911216f32a9ca05c0d9b61a2aecfc0d1c0e
SHA512 626a1c5edd86a71579e42bac8df479184515e6796fa21cb4fad6731bb775641d25f8eb8e86b939b9db9099453e85c572c9ea7897339a3879a1b672bc9226fcee
SSDEEP 192:i6JaVGQ+xI5EeuyvMmGpeWH2J5xprN+AxT7K72dwF7dBdcQOz:i6JaVh4I5rpPbT7+BdhO
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

10795

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

SetCurrentDirectoryA GetCurrentDirectoryA MultiByteToWideChar GetPrivateProfileIntA GlobalLock GetModuleHandleA lstrcmpiA GetPrivateProfileStringA lstrcatA lstrcpynA WritePrivateProfileStringA lstrlenA lstrcpyA GlobalFree GlobalUnlock GlobalAlloc

user32

MapWindowPoints GetDlgCtrlID CloseClipboard GetClipboardData OpenClipboard PtInRect SetWindowRgn LoadIconA LoadImageA SetWindowLongA CreateWindowExA MapDialogRect SetWindowPos GetWindowRect CreateDialogParamA ShowWindow EnableMenuItem GetSystemMenu EnableWindow GetDlgItem DestroyIcon DestroyWindow DispatchMessageA TranslateMessage GetMessageA IsDialogMessageA LoadCursorA SetCursor DrawTextA GetWindowLongA DrawFocusRect CallWindowProcA PostMessageA MessageBoxA CharNextA wsprintfA GetWindowTextA SetWindowTextA SendMessageA GetClientRect

gdi32

SetTextColor CreateCompatibleDC GetObjectA GetDIBits CreateRectRgn CombineRgn DeleteObject SelectObject

shell32

SHBrowseForFolderA SHGetDesktopFolder SHGetPathFromIDListA ShellExecuteA

comdlg32

GetOpenFileNameA GetSaveFileNameA CommDlgExtendedError

ole32

CoTaskMemFree

$PLUGINSDIR/ioSpecial.ini

SHA256 d95aed234f932a1c48a2b1b0d98c60ca31f962310c03158e2884ab4ddd3ea1e0
MD5 e2d5070bc28db1ac745613689ff86067
SHA1 282e080b4cf847174c5c11e4f9157b8c338ecb19
SHA512 a50ca2014869629135b54e848f03cb4983ad8029cd811300d02b0fc54de0436185f418fea4d3db888eb0f3170e33a59d486aa885f024ab29e630e9bc0ae1a2de
MD5 SHA1 SHA512

NSIS installer

installer

$PLUGINSDIR/modern-wizard.bmp

SHA256 eedeb56d1836b4394e90a2eaebabbc5ec70895de58e6a39ed33ea49fa1a84f5a
MD5 3b34066fa1f2602157b33b2211c22e57
SHA1 6d693895a57ad4994c3f22368085ad776415de9b
SHA512 e23eaf7fd7b9d76083588106b9e4507783d528c247d02ff047161916f5f9c8443fd55b2d336e858f9b3e628f198e6c36c0d91ae73afee414ecfcedf6fa6f0c69
SSDEEP 3072:4bgpaPBSt2R5JkTzGJoBSPNuRdQt/iua4SrDK4:4bXHR5JkWJoBSPNKD
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Channel.ini

SHA256 352c08910f7e8b851f4ca07c86a04d8d478603caf02a41dfd144f9a71eec911a
MD5 05c8a8863c564990157e1ca58bfdb04b
SHA1 8506ad3ab87415e191a83fe7afa49b64620c8715
SHA512 4fb891e7a73d9fa34d75f9e80f32254c6a91f721d12b3116c4ec888f1e04f53a9fbef91f4d67e26f5afadd42aa4a7c98cee62dc4bdeea8be3225c49161d9d8ce
MD5 SHA1 SHA512

NSIS installer

installer

Config.ini

SHA256 fd410f5be35824cb4d36e6de64ccc1a5e558e9340a99838c8bf8d597664b0738
MD5 da886b048261af446f0279471b3c9e3f
SHA1 db664d62ba8010a7617fb2af350faa38cea2c1bc
SHA512 77ef0589d16c25b5d5fcf1c5715873eed821cfc77543f5e5c2d9ce72f9d0a179db62c450f5ba2bb1c65be06576b7ebc2851d0ef567d7c6049299843cf4c0eb9b
MD5 SHA1 SHA512

NSIS installer

installer

KWCheck.dll

IMPHASH cc6eea2d0950783d8c69e4731c4df7f6
SHA256 0b5bc53d0d1500ae7e6605d95fa810d01e99cd377667e18859fa4c70f1a79ce0
MD5 c67fc6b55e275ca96876ce759363f558
SHA1 04d0cdd9dd49ddeae6b17bf48381b60d8b94b880
SHA512 4053f8d71a8673f6294ef3554ab52b6d2fe8f605e7248e0a56cee6a6aa982a1700b380b7d7fc165a862df0f4fb037db90c52c5edf51bb437377633fc6531bfb9
SSDEEP 3072:4E5O7CnZA1kR8VaxR7AD3flwyxF+dDoYfbGy:40ZAWKq+u0ry
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

89:e0:8a:bb:d7:00:54:53:f7:29:f3:28:4c:db:e3:8b:2e:1a:f0:63

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shenzhen QVOD Technology Co.\,Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Shenzhen QVOD Technology Co.\,Ltd,L=Shenzhen,ST=Shenzhen,C=CN

Chains

Oct 29, 2010

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Serial Number

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

May 21, 2009 - May 20, 2019

Subject

CN=Shenzhen QVOD Technology Co.\,Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Shenzhen QVOD Technology Co.\,Ltd,L=Shenzhen,ST=Shenzhen,C=CN

Serial Number

69:d1:ad:9b:16:f2:f2:1b:66:64:ab:8b:27:1f:d5:36

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jun 2, 2009 - Jun 2, 2011

Minor OS version

0

Major OS version

4

Entry point

35261

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

RaiseException EnterCriticalSection LeaveCriticalSection InitializeCriticalSection DeleteCriticalSection GetLastError DisableThreadLibraryCalls FreeLibrary MultiByteToWideChar GetModuleFileNameW LoadResource FindResourceW LoadLibraryExW GetModuleHandleW OutputDebugStringW DebugBreak lstrlenA InterlockedIncrement lstrcmpiW GetThreadLocale GetStringTypeExW lstrlenW SizeofResource InterlockedDecrement LCMapStringW LCMapStringA GetStringTypeW GetStringTypeA LoadLibraryA GetOEMCP GetCPInfo GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount QueryPerformanceCounter GetVersionExA InterlockedExchange GetACP GetLocaleInfoA RtlUnwind GetFileAttributesW HeapAlloc HeapFree HeapReAlloc GetCurrentThreadId GetCommandLineA GetProcessHeap SetUnhandledExceptionFilter TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent GetProcAddress GetModuleHandleA TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError VirtualFree VirtualAlloc HeapDestroy HeapCreate ExitProcess WriteFile GetStdHandle GetModuleFileNameA Sleep HeapSize SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW

user32

CharNextW LoadStringW UnregisterClassA wvsprintfW

advapi32

RegQueryInfoKeyW RegSetValueExW RegOpenKeyExW RegCreateKeyExW RegDeleteValueW RegDeleteKeyW RegOpenKeyW RegCloseKey RegEnumKeyExW

shell32

ShellExecuteW

ole32

CoTaskMemAlloc CoTaskMemRealloc CoTaskMemFree StringFromGUID2 CoCreateInstance

oleaut32

LoadRegTypeLi VarUI4FromStr RegisterTypeLi UnRegisterTypeLi LoadTypeLi SysStringLen SysAllocString VariantClear VariantInit SysFreeString

KuaiWanGame.exe

IMPHASH e39efe5cc3d1bbaa31ca5154a124a467
SHA256 dcdc1b615a8bb0edb41b9271d04d36c894841918351971347b83979ff63da452
MD5 1e93a4a04838bb40f77fd7c0ccd597b1
SHA1 a454bf2e837baf1652910c0dd36cfb97d591c34b
SHA512 bd40bcb822605a27e65aee1b6a94a4ceabedfddc91eb651b9fb704a9ec48b6db3781a595b32b5f8188b1868d18c73274fcf8ab1fbcd8415778b7fc5528144dea
SSDEEP 3072:trlL4LpvVsH8yXbvKhGLRfvAh941tqQWq:thMVyrbnVvAvNlq
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

85:6e:93:d9:59:83:f2:de:75:37:58:83:69:46:37:38:bb:2a:3f:80

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shenzhen QVOD Technology Co.\,Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Shenzhen QVOD Technology Co.\,Ltd,L=Shenzhen,ST=Shenzhen,C=CN

Chains

Oct 29, 2010

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Serial Number

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

May 21, 2009 - May 20, 2019

Subject

CN=Shenzhen QVOD Technology Co.\,Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Shenzhen QVOD Technology Co.\,Ltd,L=Shenzhen,ST=Shenzhen,C=CN

Serial Number

69:d1:ad:9b:16:f2:f2:1b:66:64:ab:8b:27:1f:d5:36

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jun 2, 2009 - Jun 2, 2011

Minor OS version

0

Major OS version

4

Entry point

50586

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

d:\svn\trunk\bin\KuaiWanGame.pdb

kernel32

LoadResource LoadLibraryExW GetModuleHandleW SizeofResource lstrcmpiW GetOEMCP GetCPInfo GetConsoleMode GetConsoleCP WideCharToMultiByte SetFilePointer RtlUnwind GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount QueryPerformanceCounter GetStartupInfoA GetFileType SetHandleCount GetCommandLineW GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA FreeLibrary EnterCriticalSection TlsFree TlsSetValue TlsAlloc TlsGetValue GetModuleFileNameA GetStdHandle WriteFile ExitProcess GetModuleHandleA HeapCreate HeapDestroy IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess GetStartupInfoW HeapReAlloc GetThreadLocale GetLocaleInfoA GetACP InterlockedExchange GetVersionExA VirtualAlloc VirtualFree IsProcessorFeaturePresent FindResourceW DeleteCriticalSection InterlockedIncrement InterlockedDecrement LeaveCriticalSection MulDiv FlushInstructionCache GetCurrentProcess lstrcmpW lstrlenW GlobalAlloc GlobalLock HeapSize GlobalUnlock GetModuleFileNameW GetLastError SetLastError MultiByteToWideChar RaiseException GetCurrentThreadId InitializeCriticalSection GetVersionExW Sleep FlushFileBuffers LoadLibraryA CloseHandle CreateFileA GetProcAddress HeapAlloc GetProcessHeap HeapFree InterlockedCompareExchange SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW

user32

DispatchMessageW TranslateMessage GetMessageW CallWindowProcW DefWindowProcW GetWindowLongW SetWindowLongW DestroyAcceleratorTable GetSysColor BeginPaint FillRect EndPaint GetDC ReleaseDC IsChild GetFocus GetWindow IsWindow UnregisterClassA RedrawWindow GetClassNameW GetParent CharNextW SetWindowPos CreateAcceleratorTableW ClientToScreen ScreenToClient SetCapture ReleaseCapture InvalidateRect InvalidateRgn GetDesktopWindow LoadCursorW GetClassInfoExW RegisterClassExW CreateWindowExW RegisterWindowMessageW GetWindowTextLengthW GetWindowTextW SetWindowTextW LoadStringW SendMessageW SetFocus ShowWindow MoveWindow GetClientRect PostQuitMessage DestroyWindow LoadIconW GetDlgItem

gdi32

CreateCompatibleBitmap CreateCompatibleDC BitBlt SelectObject DeleteDC GetDeviceCaps GetStockObject GetObjectW CreateSolidBrush CombineRgn CreateRectRgnIndirect FillRgn DeleteObject

advapi32

RegDeleteValueW RegSetValueExW RegCloseKey RegEnumKeyExW RegOpenKeyExW RegDeleteKeyW RegQueryInfoKeyW RegCreateKeyExW

ole32

CoTaskMemFree CoTaskMemRealloc CLSIDFromString CLSIDFromProgID CoGetClassObject CoCreateInstance OleLockRunning StringFromGUID2 CoTaskMemAlloc OleInitialize OleUninitialize CreateStreamOnHGlobal

oleaut32

VarUI4FromStr SysStringLen VariantInit VariantClear SysAllocString SysStringByteLen LoadTypeLi LoadRegTypeLi SysFreeString OleCreateFontIndirect SysAllocStringLen

winmm

mixerSetControlDetails mixerGetControlDetailsW mixerGetLineControlsW mixerGetLineInfoW mixerClose mixerGetDevCapsW mixerOpen mixerGetNumDevs

Kuaiwan.exe

IMPHASH d0c40df94b45879220e667215a204cc3
SHA256 6ab06a283a15f413c34512f47733ec14a6beb28c50942badcd82f91e699a3ad1
MD5 80b2a8112ac5caaef8cf9c13741546e1
SHA1 fe967b7cb9056468d74487990ba43ee7bc69c342
SHA512 e19de3bf50d98607c877563f4202777771c19ad1aa1f1ee51a823db4d04a693d22047ab9f1d5594af23a56072eef5a6521457ce3da60d39a82e92514a0e65a50
SSDEEP 12288:YuOdG58qX6NOODJdqHNKZVVSxYiUQ0dJe85tfth4lZoGYYon9FIx2XeO3yf5YV:MgnX6N7dAK1SxYthdF7fT4Toaon8xhyX
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

16:49:82:96:3f:72:da:0c:78:94:17:1d:15:0f:0b:1f:64:54:17:9f

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shenzhen QVOD Technology Co.\,Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Shenzhen QVOD Technology Co.\,Ltd,L=Shenzhen,ST=Shenzhen,C=CN

Chains

Oct 29, 2010

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Serial Number

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

May 21, 2009 - May 20, 2019

Subject

CN=Shenzhen QVOD Technology Co.\,Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Shenzhen QVOD Technology Co.\,Ltd,L=Shenzhen,ST=Shenzhen,C=CN

Serial Number

69:d1:ad:9b:16:f2:f2:1b:66:64:ab:8b:27:1f:d5:36

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jun 2, 2009 - Jun 2, 2011

Minor OS version

0

Major OS version

4

Entry point

329871

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WaitForSingleObject CreateProcessW GetFileSize DeleteFileW RemoveDirectoryW FindClose FindNextFileW FindFirstFileW lstrcpyW lstrcatW GetSystemTime SizeofResource GlobalHandle GetFileAttributesExW DeviceIoControl OpenEventW GetDriveTypeW GetLogicalDriveStringsW GetModuleHandleW GetVersionExW GetTickCount CreateToolhelp32Snapshot Thread32First Thread32Next OpenThread SuspendThread ResumeThread LoadLibraryExW ReadFile WriteFile SetFilePointer SystemTimeToFileTime GetCurrentDirectoryW LocalFileTimeToFileTime SetFileTime FileTimeToSystemTime GetFileInformationByHandle UnmapViewOfFile HeapFree GetVersionExA HeapAlloc GetProcessHeap GetStartupInfoW TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapReAlloc GetSystemTimeAsFileTime GetModuleHandleA ExitProcess GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetLastError FreeEnvironmentStringsW SetEvent GetCommandLineA GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree HeapDestroy HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetCPInfo GetACP GetOEMCP VirtualAlloc HeapSize GetConsoleCP GetConsoleMode RtlUnwind LCMapStringA LCMapStringW InterlockedExchange LoadLibraryA GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle FlushFileBuffers WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA SetEndOfFile GetThreadLocale InterlockedCompareExchange IsProcessorFeaturePresent MultiByteToWideChar lstrlenA MulDiv LocalFree FlushInstructionCache GetCurrentProcess ResetEvent CreateEventW GetLocalTime CloseHandle CreateFileW FreeLibrary GetProcAddress LoadLibraryW lstrcatA Sleep TerminateThread WideCharToMultiByte GlobalFree CreateThread lstrcmpiW GetPrivateProfileStringW CreateDirectoryW GetFileAttributesW WritePrivateProfileStringW GetPrivateProfileIntW GlobalAddAtomW DeleteCriticalSection SetLastError InterlockedIncrement GetEnvironmentStringsW InterlockedDecrement lstrcmpW lstrlenW LeaveCriticalSection EnterCriticalSection GlobalUnlock GlobalLock GlobalAlloc LockResource LoadResource FindResourceW RaiseException GetCurrentThreadId InitializeCriticalSection OutputDebugStringW DebugBreak GetEnvironmentStrings GetModuleFileNameW

user32

IsWindowVisible SetForegroundWindow DrawTextW FindWindowExW wsprintfW DialogBoxIndirectParamW DestroyMenu PtInRect SetRect MessageBoxW MapWindowPoints GetMessageW TranslateMessage DispatchMessageW UnregisterClassW SetParent WaitForInputIdle GetWindowThreadProcessId GetWindowDC SetCursor GetKeyState GetMenuItemID ModifyMenuW GetMenuStringW IsMenu LoadMenuW SetWindowRgn TrackMouseEvent CreateIconIndirect GetIconInfo UnregisterClassA SetActiveWindow SystemParametersInfoW IsDialogMessageW LoadIconW EnableMenuItem DeleteMenu GetMenuItemInfoW GetMenuItemCount AppendMenuW GetSubMenu CopyRect wsprintfA KillTimer RegisterHotKey UnregisterHotKey EnableWindow ShowWindow DestroyCursor DestroyWindow SendMessageW SetWindowLongW DestroyAcceleratorTable GetWindowRect GetActiveWindow SetWindowPos LoadStringW PostMessageW EndDialog SetWindowContextHelpId GetWindow MapDialogRect CreateWindowExW RegisterClassExW LoadCursorW GetClassInfoExW SetWindowTextW GetWindowTextW GetWindowTextLengthW EnumChildWindows FindWindowW TrackPopupMenu GetCursorPos EnumDisplayMonitors PostQuitMessage DefWindowProcW GetSysColor BeginPaint GetClientRect FillRect EndPaint GetDC ReleaseDC IsChild GetFocus SetFocus CallWindowProcW IsWindow GetDlgItem GetWindowLongW RedrawWindow GetClassNameW GetParent CharNextW CreateAcceleratorTableW ClientToScreen ScreenToClient MoveWindow SetCapture ReleaseCapture InvalidateRect InvalidateRgn GetDesktopWindow RegisterWindowMessageW SetTimer

advapi32

RegOpenKeyExW RegSaveKeyExW OpenProcessToken LookupPrivilegeValueW AdjustTokenPrivileges RegEnumKeyExW RegDeleteKeyW RegQueryInfoKeyW RegCreateKeyExW RegOpenKeyW CryptAcquireContextW CryptCreateHash CryptHashData CryptGetHashParam CryptDestroyHash CryptReleaseContext RegDeleteValueW RegSetValueExW RegCloseKey RegQueryValueExW RegRestoreKeyW

ole32

StringFromGUID2 OleLockRunning CoCreateInstance CoGetClassObject CLSIDFromProgID CLSIDFromString StringFromCLSID CoTaskMemFree CoInitialize CoUninitialize CoTaskMemRealloc CoTaskMemAlloc OleInitialize OleUninitialize CreateStreamOnHGlobal

shell32

SHGetPathFromIDListW SHBrowseForFolderW SHGetSpecialFolderPathW ShellExecuteW Shell_NotifyIconW

oleaut32

LoadRegTypeLi LoadTypeLi SysStringByteLen SysAllocString SysFreeString VariantInit SysStringLen VariantCopy VarUI4FromStr OleCreateFontIndirect VariantClear SysAllocStringLen

comctl32

_TrackMouseEvent ord16

gdi32

GetObjectW GetDeviceCaps DeleteObject DeleteDC SelectObject BitBlt CreateSolidBrush CreateCompatibleDC CreateCompatibleBitmap RealizePalette SelectPalette GetDIBits SetBkMode SetTextColor GetTextExtentPoint32W CreateFontIndirectW SetDIBits CreateDIBSection CreateDCW CreateRectRgn CombineRgn GetStockObject

msimg32

AlphaBlend

ws2_32

recv closesocket connect setsockopt socket gethostbyname htons WSAStartup WSACleanup send WSAGetLastError

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

gdiplus

GdipCreateHBITMAPFromBitmap GdipAlloc GdipFree GdipCreateBitmapFromScan0 GdipDisposeImage GdipCloneImage GdipGetImageGraphicsContext GdipDeleteGraphics GdipCreateSolidFill GdipDeleteBrush GdipCloneBrush GdipFillRectangleI GdipCreateFromHWND GdipDrawImageRectRectI GdipCreateFontFamilyFromName GdipDeleteFontFamily GdipCreateFont GdipDeleteFont GdipCreateStringFormat GdipDeleteStringFormat GdipSetStringFormatAlign GdipMeasureString GdipDrawString GdipCreateBitmapFromFile GdipCreateFromHDC GdipGetImageHeight GdipGetImageWidth GdipTranslateWorldTransform GdipCreateBitmapFromHBITMAP GdipLoadImageFromFile GdipImageGetFrameDimensionsCount GdipImageGetFrameDimensionsList GdipImageGetFrameCount GdipGetPropertySize GdipGetPropertyItem GdipDrawImageRectI GdipImageSelectActiveFrame GdipSetStringFormatTrimming GdipGetGenericFontFamilySansSerif GdipBitmapUnlockBits GdipBitmapLockBits GdiplusStartup GdiplusShutdown GdipDrawImagePointRectI GdipBitmapGetPixel

winmm

mixerGetLineInfoW mixerGetDevCapsW mixerOpen mixerGetNumDevs mixerSetControlDetails mixerGetControlDetailsW mixerGetLineControlsW

KuaiwanUninst.exe.nsis

SHA256 dbb179786340be180aede5fa07c40bd0ced300deea94cf4b4b90a89a730e2399
MD5 7b900119f7c9bfab6dfc268fe09d840b
SHA1 db4eba7c0dee549a62a6efd3d4611360511fdfe6
SHA512 c125e504f803fce81c9541763d1dbc3c2311e9c4aea032c440d53d31a8e1a62b452a6a08a117396122434a8b70120cb3c78ae4522f26f0e84eb42d4d13e5e5d7
MD5 SHA1 SHA512

NSIS installer

installer

P2pdll.dll

IMPHASH 0f18afc168f4fd9acf79d6cc2558779f
SHA256 f1ef4fa95f2f8b88b8978644b54062336609dfe9b7b583e37c3f70d48cb2de88
MD5 3e23fc3dc8fd4490b4a7440bcceded22
SHA1 abc9249ac6430192da9f7e07c94cd97a0f6b233b
SHA512 f0af7dc4a90a8712e8bc367ea8a6971ada3ea9c1be48770633b5fecdb0549f4b8274a9e2f7e37151fc4f3c2bec8c31cc2a5e345f04d2d68e8380314c44efd560
SSDEEP 3072:ngclNJXctTUxjAVkv7hnAHJkZlmoHZUIXhJuy6RzpueRbpSd4kKJJEs6JcoexRp7:Sp6Q6hnAHJ+Pph419RUd1XEgs
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

d8:48:29:2d:34:14:01:85:7a:c6:a0:4e:6d:03:67:4a:1a:80:61:e9

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shenzhen QVOD Technology Co.\,Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Shenzhen QVOD Technology Co.\,Ltd,L=Shenzhen,ST=Shenzhen,C=CN

Chains

Oct 29, 2010

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Serial Number

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

May 21, 2009 - May 20, 2019

Subject

CN=Shenzhen QVOD Technology Co.\,Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Shenzhen QVOD Technology Co.\,Ltd,L=Shenzhen,ST=Shenzhen,C=CN

Serial Number

69:d1:ad:9b:16:f2:f2:1b:66:64:ab:8b:27:1f:d5:36

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jun 2, 2009 - Jun 2, 2011

Minor OS version

0

Major OS version

4

Entry point

120225

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

CloseHandle CreateThread Sleep GetTickCount LocalFree LocalAlloc GetSystemDirectoryA GetVersionExA GetTempPathW GetModuleFileNameA CreateEventA InitializeCriticalSection DeleteCriticalSection InterlockedDecrement InterlockedIncrement WaitForSingleObject SetEvent QueryPerformanceCounter LeaveCriticalSection EnterCriticalSection TryEnterCriticalSection MultiByteToWideChar HeapFree HeapAlloc GetProcessHeap GetLocaleInfoW GetUserDefaultLCID EnumSystemLocalesA GetLocaleInfoA IsValidCodePage IsValidLocale GetStringTypeW GetStringTypeA CreateFileA IsBadCodePtr IsBadReadPtr LoadLibraryA IsBadWritePtr VirtualAlloc GetOEMCP GetACP GetCPInfo LCMapStringW LCMapStringA GetProcAddress SetUnhandledExceptionFilter SetEndOfFile SetStdHandle UnhandledExceptionFilter HeapSize HeapReAlloc VirtualFree HeapCreate HeapDestroy GetEnvironmentVariableA GetModuleHandleA GetEnvironmentStringsW GetEnvironmentStrings WideCharToMultiByte FreeEnvironmentStringsW FreeEnvironmentStringsA GetStartupInfoA GetStdHandle SetHandleCount SetLastError InterlockedExchange GetCommandLineA GetVersion RtlUnwind GetLastError ResumeThread TlsSetValue TlsGetValue ExitThread ExitProcess TerminateProcess GetCurrentProcess ReadFile GetFileType CreateFileW MoveFileW DeleteFileW CreateDirectoryW RaiseException GetSystemTimeAsFileTime FlushFileBuffers WriteFile SetFilePointer GetCurrentThreadId TlsAlloc TlsFree

ole32

CoInitialize CoUninitialize CoCreateInstance

oleaut32

SysFreeString SysStringLen SysAllocString

ws2_32

recvfrom WSAGetLastError connect ntohs sendto inet_addr WSAStartup gethostname gethostbyname socket ioctlsocket htons inet_ntoa listen WSACreateEvent WSAEventSelect WSAWaitForMultipleEvents WSAEnumNetworkEvents recv closesocket WSACloseEvent ntohl accept setsockopt __WSAFDIsSet htonl select send bind

version

GetFileVersionInfoA VerQueryValueA GetFileVersionInfoSizeA

iphlpapi

GetAdaptersInfo

QGameInsert.dll

IMPHASH 7698cf155ba331ebadc0b39de66d5628
SHA256 901d37116df72e447bc2185d2e06b74c6280f52c7ae1bef586bb28c148b59848
MD5 078282a262c3fc78336efce1788a151c
SHA1 a28fd5fb1ebb9c71bd6eaf9714f040601f221e31
SHA512 4972546fd592125172bd5e7b487910543cdc38565429343aa682d2a2f5125237d8756b081fc82c29a287f3124b4dacc0f8e33a9d7ad2559c69ec022bf7a77fae
SSDEEP 6144:xV+VAbH/GtaFO5nWRLHyCOQGR1pyJNA10E9:eAbH7FO5nWRLHYl0E9
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

4d:9b:a5:f4:2f:16:a4:e2:f4:50:9f:6d:b0:91:79:33:19:01:a0:dc

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shenzhen QVOD Technology Co.\,Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Shenzhen QVOD Technology Co.\,Ltd,L=Shenzhen,ST=Shenzhen,C=CN

Chains

Oct 29, 2010

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Serial Number

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

May 21, 2009 - May 20, 2019

Subject

CN=Shenzhen QVOD Technology Co.\,Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Shenzhen QVOD Technology Co.\,Ltd,L=Shenzhen,ST=Shenzhen,C=CN

Serial Number

69:d1:ad:9b:16:f2:f2:1b:66:64:ab:8b:27:1f:d5:36

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jun 2, 2009 - Jun 2, 2011

Minor OS version

0

Major OS version

4

Entry point

132039

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

CreateEventW LocalFree ReadFile SetEndOfFile CreateFileA FlushFileBuffers SetStdHandle WriteConsoleW GetConsoleOutputCP WriteConsoleA SetFilePointer GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA SetEvent HeapDestroy MulDiv GetConsoleCP GetStartupInfoA GetFileType SetHandleCount GetModuleFileNameA GetStdHandle ExitProcess HeapSize TlsFree TlsSetValue TlsAlloc TlsGetValue GetModuleHandleA GetOEMCP GetCPInfo GetCommandLineA HeapReAlloc IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess RtlUnwind GetVersionExA GetThreadLocale GetLocaleInfoA GetACP InterlockedExchange VirtualAlloc VirtualFree IsProcessorFeaturePresent LoadLibraryA HeapAlloc GetProcessHeap WaitForSingleObject CreateThread WritePrivateProfileStringW GetSystemTime GetPrivateProfileIntW GetPrivateProfileStringW Sleep CreateDirectoryW GlobalFree LockResource CreateFileW WriteFile CloseHandle lstrcatA LoadLibraryW GetProcAddress GetModuleHandleW LoadLibraryExW FindResourceW LoadResource SizeofResource FreeLibrary DisableThreadLibraryCalls lstrcmpiW GlobalAlloc GlobalLock GlobalUnlock SetLastError GetCurrentThreadId RaiseException HeapCreate GetModuleFileNameW lstrcmpW GetCurrentProcess FlushInstructionCache GetLastError WideCharToMultiByte GetLocalTime GetFileAttributesW DeleteCriticalSection InitializeCriticalSection lstrlenA OutputDebugStringW DebugBreak InterlockedIncrement InterlockedDecrement lstrlenW LeaveCriticalSection MultiByteToWideChar HeapFree InterlockedCompareExchange EnterCriticalSection GetConsoleMode

user32

GetSysColor DestroyWindow MoveWindow SendMessageW GetClientRect ReleaseCapture LoadCursorW SetCapture SetCursor CharNextW wvsprintfW LoadStringW DefWindowProcW CallWindowProcW GetWindowLongW GetDC ReleaseDC SetWindowPos SetWindowLongW UnregisterClassA InvalidateRect InvalidateRgn RedrawWindow IsChild GetParent GetDlgItem GetClassNameW FillRect EndPaint BeginPaint ClientToScreen DestroyAcceleratorTable SetFocus GetWindow GetFocus IsWindow GetClassInfoExW RegisterClassExW CreateWindowExW CreateAcceleratorTableW SetWindowTextW GetWindowTextW GetWindowTextLengthW RegisterWindowMessageW ShowWindow SetWindowRgn OffsetRect EqualRect IntersectRect LoadImageW wsprintfW PtInRect UnionRect SetTimer KillTimer SetParent OpenClipboard CopyRect SetRect wsprintfA GetIconInfo CloseClipboard GetDesktopWindow ScreenToClient GetSystemMetrics EnumChildWindows GetCursorPos CreateIconIndirect GetWindowRect DrawTextW FindWindowW EmptyClipboard SetClipboardData PostMessageW

gdi32

SetTextColor SetBkMode GetTextExtentPoint32W SelectPalette RealizePalette CreateDIBSection SetDIBits GetDIBits LPtoDP SetMapMode SetViewportOrgEx CreateDCW CreateMetaFileW SaveDC SetWindowOrgEx SetWindowExtEx RestoreDC CloseMetaFile DeleteMetaFile CreateRectRgnIndirect GetStockObject GetObjectW CreateSolidBrush GetDeviceCaps BitBlt CreateCompatibleDC CreateCompatibleBitmap SelectObject DeleteObject DeleteDC CreateFontIndirectW

advapi32

RegQueryValueExW RegOpenKeyW RegDeleteKeyW CryptAcquireContextW CryptCreateHash CryptReleaseContext CryptHashData CryptDestroyHash CryptGetHashParam RegEnumKeyExW RegQueryInfoKeyW RegSetValueExW RegOpenKeyExW RegCreateKeyExW RegDeleteValueW RegCloseKey

shell32

SHGetSpecialFolderPathW ShellExecuteW

ole32

CoCreateInstance CoUninitialize StringFromCLSID OleSaveToStream WriteClassStm CreateDataAdviseHolder OleRegGetMiscStatus OleRegGetUserType OleRegEnumVerbs CreateOleAdviseHolder OleLoadFromStream CoTaskMemFree CoTaskMemRealloc CoInitializeEx OleUninitialize OleInitialize CreateStreamOnHGlobal CoTaskMemAlloc CLSIDFromString CLSIDFromProgID CoGetClassObject OleLockRunning StringFromGUID2 CoInitialize

oleaut32

OleCreatePropertyFrame VarUI4FromStr RegisterTypeLi UnRegisterTypeLi VariantChangeType SysAllocStringByteLen LoadTypeLi LoadRegTypeLi OleCreateFontIndirect SysStringByteLen SysAllocStringLen SysStringLen SysAllocString VariantCopy VariantClear VariantInit SysFreeString

comctl32

_TrackMouseEvent InitCommonControlsEx

msimg32

AlphaBlend

gdiplus

GdipFillRectangleI GdipGetImageGraphicsContext GdipCreateFromHWND GdipCreateHBITMAPFromBitmap GdipCreateBitmapFromScan0 GdipDeleteGraphics GdipSetSolidFillColor GdiplusStartup GdiplusShutdown GdipCloneImage GdipCloneBrush GdipCreateFont GdipDrawImageRectRectI GdipMeasureString GdipDrawString GdipTranslateWorldTransform GdipSetStringFormatAlign GdipCreateSolidFill GdipCreateBitmapFromFileICM GdipCreateBitmapFromFile GdipGetImageHeight GdipGetImageWidth GdipDisposeImage GdipDeleteFont GdipDeleteFontFamily GdipCreateFontFamilyFromName GdipDeleteStringFormat GdipCreateStringFormat GdipDeleteBrush GdipAlloc GdipFree

ws2_32

ntohl send recv socket inet_addr htons connect htonl

QvodGameExtend.dll

IMPHASH 32f2738f8a2f69712f3bcc1d7a6c3fb8
SHA256 b0c4490f92be3cbfd1632fdfb55e363639c78bf481274815e9eed7edbe44133f
MD5 d54e2731e7e5e5dcf4d705f913eb8d40
SHA1 02e417a4524bc1ca9d2de340a854eca64cf857da
SHA512 4d89ceeb117b25a44575ea7625d1f062995d9f10ed3fcbb24c64fe9016310ac8107117fcbd07a3a4efd804eeae232f33cb0a5a41faf8d024529d7a5b23cb8594
SSDEEP 3072:44yD3IdPuhCvlWrHl90RZf2E9zp7Vr1BSJlXJoI3ryw1x6:4x3IjwD4pr8TywH6
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

ec:93:e4:7e:7c:ed:75:ef:2c:d2:f0:76:ce:d2:40:c7:5d:1d:41:bc

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shenzhen QVOD Technology Co.\,Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Shenzhen QVOD Technology Co.\,Ltd,L=Shenzhen,ST=Shenzhen,C=CN

Chains

Oct 29, 2010

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Serial Number

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

May 21, 2009 - May 20, 2019

Subject

CN=Shenzhen QVOD Technology Co.\,Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Shenzhen QVOD Technology Co.\,Ltd,L=Shenzhen,ST=Shenzhen,C=CN

Serial Number

69:d1:ad:9b:16:f2:f2:1b:66:64:ab:8b:27:1f:d5:36

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jun 2, 2009 - Jun 2, 2011

Minor OS version

0

Major OS version

4

Entry point

52583

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

f:\QPlayGame\trunk\bin\QvodGameExtend.pdb

kernel32

RaiseException EnterCriticalSection DeleteCriticalSection GetStringTypeA LCMapStringW LCMapStringA LeaveCriticalSection ReadFile SetEndOfFile CreateFileA CreateFileW FlushFileBuffers lstrcatW SizeofResource InitializeCriticalSection GetModuleHandleW LoadLibraryExW LoadResource FreeLibrary FindResourceW GetModuleFileNameW InterlockedIncrement InterlockedDecrement Sleep lstrcpyW CreateDirectoryW lstrcmpiW lstrcpynW GetPrivateProfileIntW GetPrivateProfileStringW GetFileAttributesW WideCharToMultiByte MultiByteToWideChar GetLastError lstrlenA lstrlenW GlobalFree GlobalUnlock GlobalLock GlobalAlloc lstrcmpW lstrcatA OutputDebugStringW DebugBreak SetStdHandle WriteConsoleW GetConsoleOutputCP WriteConsoleA LoadLibraryA SetFilePointer GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW InterlockedExchange GetACP GetLocaleInfoA GetThreadLocale GetVersionExA LocalFree HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapReAlloc HeapAlloc GetCurrentThreadId GetCommandLineA GetProcessHeap GetCPInfo GetOEMCP GetProcAddress GetModuleHandleA TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError HeapDestroy HeapCreate VirtualFree VirtualAlloc HeapSize ExitProcess SetHandleCount GetStdHandle GetFileType GetStartupInfoA WriteFile GetConsoleCP GetConsoleMode RtlUnwind CloseHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings GetStringTypeW

user32

GetDC LoadStringW KillTimer FindWindowW CharNextW wsprintfA ReleaseDC UnregisterClassA wsprintfW CharLowerW SendMessageW FillRect SetTimer

gdi32

CreateCompatibleDC StretchBlt SetStretchBltMode CreateSolidBrush CreateCompatibleBitmap SelectObject RealizePalette SelectPalette GetStockObject GetDeviceCaps CreateDCW DeleteObject DeleteDC GetDIBits

advapi32

RegEnumKeyExW RegQueryInfoKeyW RegDeleteValueW RegDeleteKeyW RegSetValueExW RegCreateKeyExW RegOpenKeyW RegCloseKey RegQueryValueExW RegOpenKeyExW CryptGetHashParam CryptDestroyHash CryptHashData CryptReleaseContext CryptCreateHash CryptAcquireContextW

shell32

ShellExecuteW SHGetSpecialFolderPathW

ole32

CoCreateInstance CreateStreamOnHGlobal StringFromIID CoTaskMemFree CoTaskMemRealloc CoTaskMemAlloc

oleaut32

VarUI4FromStr VariantClear SysAllocString VariantInit VariantCopy SysFreeString

urlmon

CoInternetGetSession

Unrar.dll

IMPHASH 244d2f9772f4886a651db44514a2a29b
SHA256 db59af675b1b95131a4a33841b04d60ec8c6af4b7c906599ba74d93c52f007aa
MD5 f20cd5d620ac93cc71fe3d137842b340
SHA1 893be3d4a7eb6bc16971470ebc858fd39b916194
SHA512 d342b58db618a38257850b7876e785685eea39e7ed46e9e58a96f7d54ef802e58f729a3b5312ce601a4962ce6080315a4e0123a77395b8740318ebaf165a352e
SSDEEP 3072:2d3FLsqt6LCZpzwPRC+D6ha4HWX8TsmEbV1TRy8c7K/CJxkbA0yru2dTwxoyp/Uh:M3FLrtjZpzoAACWX8ebPsD7K/CJxGpdu
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

ad:5e:5c:d3:7b:b6:7b:cf:ab:29:23:1f:f3:f6:2d:24:00:e8:9a:ea

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shenzhen QVOD Technology Co.\,Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Shenzhen QVOD Technology Co.\,Ltd,L=Shenzhen,ST=Shenzhen,C=CN

Chains

Oct 29, 2010

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Serial Number

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

May 21, 2009 - May 20, 2019

Subject

CN=Shenzhen QVOD Technology Co.\,Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Shenzhen QVOD Technology Co.\,Ltd,L=Shenzhen,ST=Shenzhen,C=CN

Serial Number

69:d1:ad:9b:16:f2:f2:1b:66:64:ab:8b:27:1f:d5:36

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jun 2, 2009 - Jun 2, 2011

Minor OS version

0

Major OS version

4

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

advapi32

AdjustTokenPrivileges LookupPrivilegeValueA OpenProcessToken SetFileSecurityA SetFileSecurityW

kernel32

CloseHandle CompareStringA CompareStringW CreateDirectoryA CreateDirectoryW CreateFileA CreateFileW DeleteFileA DeleteFileW DeviceIoControl ExitProcess FileTimeToLocalFileTime FileTimeToSystemTime FindClose FindFirstFileA FindFirstFileW FindNextFileA FindNextFileW FreeEnvironmentStringsA FreeLibrary GetACP GetCPInfo GetCurrentProcess GetCurrentThreadId GetEnvironmentStrings GetFileAttributesA GetFileAttributesW GetFileType GetFullPathNameA GetLastError GetLocalTime GetModuleFileNameA GetModuleHandleA GetOEMCP GetProcAddress GetProcessHeap GetStartupInfoA GetStdHandle GetStringTypeW GetVersion GetVersionExA GlobalMemoryStatus HeapAlloc HeapFree IsDBCSLeadByte LCMapStringA LoadLibraryA LocalFileTimeToFileTime MoveFileA MultiByteToWideChar RaiseException ReadFile RtlUnwind SetConsoleCtrlHandler SetEndOfFile SetFileAttributesA SetFileAttributesW SetFilePointer SetFileTime SetHandleCount Sleep SystemTimeToFileTime UnhandledExceptionFilter VirtualAlloc VirtualFree WideCharToMultiByte WriteFile

user32

CharLowerA CharLowerW CharToOemA CharToOemBuffA CharUpperA CharUpperW EnumThreadWindows MessageBoxA OemToCharA OemToCharBuffA wsprintfA

Name

.text

Size

130KB

Virtual Size

132KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

15KB

Virtual Size

44KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.edata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

skin/DefaultSkin.xml

SHA256 0d85b9238f46e001ab76fdc10b353e2e4cb2cabfb1fdfdb65814f25fe30f84e4
MD5 014abc3773ecc39f7d691ab7776caa40
SHA1 996c45d3f5fddd434eed99f02e9fb82fdf4ece52
SHA512 5b89a16b6290709193fe742f99c2bc868834095ad75124f54a8c9f579f85d8645fa0b63a82fb983c1126d63d6ccf43091da4661121befd6795567ce96d0ccfbc
SSDEEP 384:z5gyqmat5JFtEjmSuOtjlS5zh35xO5u53skWC4FVxeQJuEFV/l:a5SugaG
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/Btn01.png

SHA256 97144d00fae8512be4af7caa1cd7be719291ec8971d3e95c6b0040b485129b5f
MD5 e72ed8a02897f8d9a8fad79f6a330214
SHA1 c27272fe74069977592018fcc7f44375e54ee19a
SHA512 7bd0b27a241094ff5e62cd8e04f3eee596939a1ef5f5985b998845bf23ad0fae88370f33720f01b6cd07a161e9184fe76b9bb6fbcdb93c0c1f170205081c1534
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/Btn51-20.png

SHA256 9d5799355093a80e4f54d432144df8810f8df21fcbab211b4b51ccad2ae5d47f
MD5 ea7c5567f42e5ee48e0d9c2093c7c311
SHA1 37f7e199b80e766c656a6e39522b797c3eeeb62e
SHA512 f8821107d146f6cf02e54bce5160e7ceb68b454426aae5c02c705a0fb1167b80e240d189d2548750fdae23ad02379332fbef4b37acb5b3cc5e74a80b2d905ea6
SSDEEP 96:XaSMllcHitlIxv9vk7C1+I4wWHLihk/xHCY0FaWKkGhhF:KSHIIHUCD4waMbaWKkG3F
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/Eject_Closed.png

SHA256 8ce31fcc14d86c7895723c1b7f1f4a73350740c8dfbeec7d897a4a95ab58b49f
MD5 ec3d8c0d3b6ddff34cb3e5322043ac92
SHA1 60abdfd3adc7f16670d43489d116c71201ef0433
SHA512 4f7d228942b5f9436ce0343d57d7475069dd8e935adbd804c0d42d934cc6561d53729c7da2116a7da2018cb3310e13aded85a4e7c15ff4c68a4babc4814bdb0e
SSDEEP 96:dSMllcHitlIxv9vk7C1+I4wWHLihk/xSjUmhYtoCHlUN8RVQ1TV:dSHIIHUCD4watmhYtoajnQpV
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/Eject_Minimize.png

SHA256 cfbfa5910e2fb209810e662c5ab519a45a0d265695a83f0ff4017989dcb5082a
MD5 dc725f85adea05d1e3f7cf0b09c942ee
SHA1 1f8243b0cbe0f12c360c112fb4b65ce2ecf3113a
SHA512 d1bf8cb4151b500857105f8532bcf008b7aef46c5b16b231505ece5a5f83e21447f2e00dd2689285ab3d612c5b89ce3fb92871c9c00a1d72ce0c223b9ff35248
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/Eject_Sound.png

SHA256 33f0b7135cb98e31d974f109522adc9fdf8fcb6f367933db5b098bd5a9978d36
MD5 48f2f43f0e1e7f70a54b7a3c2f6d6d44
SHA1 9c6f2c85702cb329bf3880ee7e2f0dafc3fdacd5
SHA512 f0b165c8f4dc34e496f14e49945b60dd57fa925e47133ed9cf681878226a3d653b0c3997fdf1ed2d952af2732408f0aaa2bee5ae1f61f0424ce2c19dd2d9896f
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/Eject_SoundBg.png

SHA256 7a3510cbeceece28a7593da386b0854e40e219406a3c69dc865da00109decba9
MD5 78a490bda29d842721155a6d05317398
SHA1 b9c51286e7bacf237b872e8b64db3589a94bc161
SHA512 c5dd8e535372d86229dbd2e278ea8d32c1a04aa4ea241ee54a778a39ab4138483d1cea147f2fcba1c2553dae4f078ed5c59234cfdad6d366d5b695478ed0c5af
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/Eject_Sound_Bg.png

SHA256 d05392750470303cad1d14adfe078b4f56f4d9cd449584d876be217b152f07c6
MD5 fc818b2345b3d57640dbbe8325394fbe
SHA1 5b11243fdbf22151259a6bf8525ce89c9160c099
SHA512 a53c653a577fe5ba1efca8f00c2ee35117a6bc0ab3c3ab35baa5b87ede837df8a58dc1ce9d446412abdd83f91fe8b5a3c38a4ec9f25fc6892e539dd9f27b5324
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/Eject_Sound_Bg_Over.png

SHA256 a53e8ed84f91d7efeea8f4f3bcc50c2f85d9d728efd23d4440ddce33356d6fc2
MD5 027f061b568a8d6e1465fd4c446cf141
SHA1 d5e302856e5bd06cf57839a3f4e60401fd29c3db
SHA512 7b4340e82f52c06df180b8e5ebdbd758a0e5f9f9af6384036a11cb8acc06660aab6b59395890071e9750d3007b64fe1c6a505526eb44e4f5581a11ea040ff085
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/Eject_Sound_Btn.png

SHA256 865134d4641b668d6ccc07ffbddd4d659c57289d3fdd2f3ea1734ae9f90a91b5
MD5 91a32f37d982955104b656c041666f09
SHA1 13c9b084cbb7e47f2f5a09063f65654e7dc2a4db
SHA512 0e4956f4b2e25e1c01339d093b23f118ee705bcdd488da68e2e697caf5d73ac42a1dc3f26ac8e07894427523caa68ba9a2f6eccb017516a3ad5b219ff3e0aa18
SSDEEP 96:HSMllcHitlIxv9vk7C1+I4wWHLihk/xUs3PjC/DxTzFi6229mPzj4:HSHIIHUCD4wa2s37C9p9mPzj4
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/Eject_Tool.png

SHA256 22051ec3b7061d0145a8a32ff4e3935d079bf139766967a5e04d8296a73f7445
MD5 53f9f8cf7427f6b9e6e65de08d7b97f6
SHA1 79856813585c3b3e09fe57c06ef49c15ac5aaf31
SHA512 7dcb3ab38debe6330f006a38dfbde1a0022e3e4830adec332ec154382852f371da7df9990ff6ddd8d7fef26a68ced505dfc9e023cb15308bad11bbfd4b60f3dc
SSDEEP 96:TSMllcHitlIxv9vk7C1+I4wWHLihk/xYYfnJ9I6tvwTgSQlRQ:TSHIIHUCD4wal3TvwkVlC
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/Eject_ToolBg_L.png

SHA256 2b3abbf91ef901d4408b0207d4be93aa3e1bfa6e36070578077d777b9860d54e
MD5 41612360862f386f2fe2841362d606f5
SHA1 ca35428d15a3fabba230fd74fd10ee0f7b445e7f
SHA512 68d26c0c766b4fb1793c247d9e71279fd274311a1b17cdfec447bf920fccedc3d371fb56fe6778adb90adba82b6eeafffb499ac7051a5ca333f0c46cc72e755a
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/Eject_ToolBg_M.png

SHA256 7c1677a978a0ba455ba52bbc65740038bff9688dbfd6633fb23d47d1ce75b7ae
MD5 f04af46ce33fe9261230957faee5a2a4
SHA1 be84a625a487d186a13c35329006435217b95074
SHA512 072feb419141103c1ad7886d1e195bf03088e16285dd20a4d52806e5f0a44911ebb017c3feb36b9de3295e858e6fa8fee49feb3b22da4daeec3b674776d7a345
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/Eject_ToolBg_R.png

SHA256 88623ff483d7d4e8c17bd3f7a903f6dd8be7cc9e4fbcc2f3d078adf5cf35580a
MD5 2840d8223f19f0349830556999ce4373
SHA1 f7a10ff95bf259fcc9484e1d67ac587cdff5d23b
SHA512 b3a8dd39102464ec4a3b50b84f6a35f122c8068a12012a48eaab3ed8393a14172ccc471748b191f86f4140c5d7c7e2aa24a4a4095fab916396d8505a832cdc31
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/Eject_Tool_1x.png

SHA256 1eeecfc573188b6eb3ef9d239862806aaa2085333f6aac5bd94e58048592a4c9
MD5 1b4e54f31630f5740418fe49a8224592
SHA1 72026cd8392697916341f737e56a23bc0d9ad6e0
SHA512 2d9f4f62bfa55a602c160ae10af50a30a074da88f08b40d3ceb80827ac80aea083bbf3106a7145f48ea4971dddfc0dd45b8d9609d880027cda8bda212222265f
SSDEEP 192:aSHIIHUCD4waNk2Isnc7853wOW6fIXPW6AHPe1:V50wck2Xc7Q3KjAvm
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/Eject_Tool_Bg.png

SHA256 eeecd86ed23660774224b94115c2a3abb94bf23e31a827ea4a3c09c4f53adb75
MD5 f1a692d00623b5f9f1517a51e4cf927d
SHA1 60de6845ca18b89083b11d48d1cdcc1168aedaff
SHA512 1598e96a090e92317762313981f126a2e07e857cfb60eede969b3146e9e778665fd68162d90dcfe8709ecfcb30c8e27dc4b5c6317465aaf60f1efefb3a69a4f4
SSDEEP 192:hSHIIHUCD4waHl1uQlID4tMVmY5seZBP631KTjewNEh4p91rGaezyfJdP/7oh:I50wSaSNt6LrZNGRhk91rGaeuJpy
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/Eject_Tool_Closed.png

SHA256 09fd965282bb34ea2c9e2fb495fa02ee77fe02e4fce9a0a60ef6ae46e16bd37b
MD5 66a041b2ea6c3ca8ac98321149aca7d9
SHA1 08b2dc94b76fe44f8d567aba10da0f7672c02163
SHA512 ab0fbd2012808d5c94c238e1034f5df68b1d63c6e6a2aa450b1432763f286bcb092343479eeb2ac7027fe8153743fff5ac2694c864e933b84a139cd1c347818e
SSDEEP 192:DSHIIHUCD4wafZ6KcnCJH+YTYB/PLnas3EWhHC/3BO1:250wKEKcYTCPN7HsBg
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/Eject_Tool_Lamp.png

SHA256 f47ac15ffac24a2a6f20463632146d1c9f5f2ddb35812665973fdcf6b61ae218
MD5 0be38fe5f57a7f5f1ae0ff01df23466f
SHA1 5a6783a9dec943f48c503a4d257f18d0bf159ee3
SHA512 a5f0fac9d2688e70a8f74e71692c1859c3ee76b09bf4f4d9bfff5f7c3182cf62c317fc0c5edb027d8150efa75130e1a0e0fed1713747224041b4dae6a4b861df
SSDEEP 192:eSHIIHUCD4waSnpQAMrluM6+MAMMt7SQBugV:B50wHnpVMrluM6+rMHQBuK
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/Eject_Tool_Maximize.png

SHA256 7f3edc363736d06d8dac0d464cd1114e290ff357be34f113bcb5cf67fdd211f0
MD5 6962d2785e02a16f118e7f216bcb2ce2
SHA1 3efee69ea9c0366cf2d2a33f3dd572083d8d195a
SHA512 42e64089f8d5c3573b65882c573b1b8fe3e7cdd64293d97f75d0fc27c68626154557040f03f8285b17d40a5abc041af6284134ae2222a872c1096ebea1a58ceb
SSDEEP 96:yg2SMllcHitlIxv9vk7C1+I4wWHLihk/x3zivDhPg56wUrIoFk+2YYIKSGJXbdl/:KSHIIHUCD4waNzS45VxBlYYdSGFnz
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/Eject_Tool_Msg.png

SHA256 1ee4e79745538ad81e6bace6fbea6c5bd3fa564266442241b7ca629407c7e1f3
MD5 633de809cd29be1bada792b7338e4cf9
SHA1 cbbf66d345b41ed9849174fba65172b828e2796e
SHA512 f65219de826216d0a68b02d90fcc11e816db23a165620a17ba888f0a1b9240f875f66e6cc21f5e0dcec4cfb87a340701f8cfe7d69cbca268adee4ccaeec366b6
SSDEEP 192:ZSHIIHUCD4wagmYEaUF+3aMJxRllWoV0yb1JgML:A50wXmYjKmx3lWGdb1JD
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/Eject_Tool_Pause.png

SHA256 0e2da1bada47882fc22d25ce3dc2b7d02dd2649780016af94d563e0adfe26ae3
MD5 9a3e881fb53931fc7847f145e055c310
SHA1 633b0d24250c03bf5152285eeafb09aa6f681992
SHA512 2e44e989260a949b29c43c0f6e07c839186e6aa14edc127d2ee19e53241d12d77663ab362d96363b38c3d7739601e1a82fbfc88a07fd66e64adcd0be3418a45f
SSDEEP 96:aSMllcHitlIxv9vk7C1+I4wWHLihk/xGOuvVt0JXEJ8uzS5zcMwppf0H43K0l:aSHIIHUCD4waKvVYXE+uQzzwff0eT
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/Eject_Tool_Pop.png

SHA256 12ec96d3e012e52e74a6fdeb4f98ae8109baabf62fbffc2d07b5e3ba0e24e629
MD5 2703802df17bd04bda1bbee2e517041c
SHA1 6ce8f636983a2ec67af5ed29d70ee10857832642
SHA512 63859fa8273c200e126529e80277596fcc218cecd4b097608934e4fb7200e38558bfb09e1343fd57ea76663d91d073d30b0001ad71ea1a5f1b875aebf663090b
SSDEEP 96:DSMllcHitlIxv9vk7C1+I4wWHLihk/xC6iVzp/Fyl1CwnpvdOF6tCfH9h3Qzv2h+:DSHIIHUCD4waV6zpIjePbQzv2Inq2H
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/Eject_Tool_Popping.png

SHA256 71300399ce8f550ab27692f1f46cac6b81a25da0316dc8524e524d4dbe28e108
MD5 d32c8f6fed628b4022d35417878aac14
SHA1 4887a174ea3b7f8ef93afe1842bb56d2122c95dd
SHA512 8b31e1344e09d86f1958cf93f5b9b060118909838f91fa154beee4d9b3fe50d539bd1942e84af772f5eb2e790dfa7683ff25db6ff84350038bd9b80464d80c0d
SSDEEP 96:DSMllcHitlIxv9vk7C1+I4wWHLihk/xG81J+UwtylH08BRu0w:DSHIIHUCD4was81J+ZqBk
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/Eject_Tool_PrintScreen.png

SHA256 d9cf520ca6af59ca7c6398cb9ee922254d187c7b18fb92407e3b4c033628a0c6
MD5 974493416584114c3bbf089887054885
SHA1 68227e6b087c6c831e953c0aa0c91b6ef93d9976
SHA512 0e0ed4f279169878ed93568485564806a0cd2a80682946f3d386519d105aff3fcd27bc58d9fb8af1b1006cde77e7d9e42efd349daa230024630abf21763df8fc
SSDEEP 96:DSMllcHitlIxv9vk7C1+I4wWHLihk/xJ/OEUeAPVtw72GRpUgVRM0SDeptFg4+q/:DSHIIHUCD4wajG5eyVtw67g2aFJSrZd6
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/Eject_Tool_Replay.png

SHA256 e4e55a2fe4b034a250c433c097f121e8f54e0d703ff3b2a8009ebf866740a25b
MD5 15c0881dd8302fd97ea46ed495fd5499
SHA1 5e39d8ccf60a24558a232414735f4f478fd357d1
SHA512 3b2ef34acf531c8d719ec33dd43fd0d761176745a9611597a8f42cd2bf41434913c05282a124b9953ba5dbde0aee2cbb31c745d39cd015a4358b3f353c6adafa
SSDEEP 192:DSHIIHUCD4wa0NXoKVCc2WGF1IP1Ii4scBq:250wpN4Km0oq
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/Eject_Tool_Sound.png

SHA256 64847dd9f20de21fa096f16d9a7fc740e879088baefbbd87a47d48f417738f6a
MD5 de95af0d0cd94eebb2d50d47fad62479
SHA1 846255018f8ddf566771f1719a8d3ec8c34dee03
SHA512 242b1123ea582c6af43de7989f55ea77cbbd585c27c8681bea3b96b45a5dc90700ecf792f37f9038ac40ec61aaf329206485c5155153d9ce5eb75626cef2f2e9
SSDEEP 96:DSMllcHitlIxv9vk7C1+I4wWHLihk/xRS8hzi+Az/DvKEH6fkZSKnR6TYzfrG4hE:DSHIIHUCD4wavhzez/zjJkYPGwUvpv9j
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/Eject_Tool_Trigger.png

SHA256 5e1a88051a90c3b157ad7417f6399b3a7ba63e459608ca5e6ab0f027da7eaab0
MD5 e46d897d59d0b158d2964a796edcc9fb
SHA1 b6066e1c79f2c59ca38d4912e0f4123314282e69
SHA512 f768e39695b61a99f0dcff3e1c1a6eeb45746452b65c216e30e0eaa8e4f017370fdff1a15dba956028df33dcb1bdd57275ef83f32deff3a80e7b94df8f0c4863
SSDEEP 96:DSMllcHitlIxv9vk7C1+I4wWHLihk/xYS/uifinZ84UwGG:DSHIIHUCD4wa2S2qinC7ZG
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/Input_Bg.png

SHA256 ed2d91c1735744addcbe656f8fd11f4173698fef0a237df35f27230a75b128c3
MD5 424df544e41e6d87cec1b196443f8d39
SHA1 5b284f1bedcec2b1afd9a72839e0d278dd1972ab
SHA512 0bb0cfbaf46705d69ba28f8da84a09098542e83ff7b25a06da93edfa7f22eaeff3179d558f180857c4b8bfeabff5caeeb152659bd2f2c86c4e35b907498f03ed
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/Lanp_ToolBg_L.png

SHA256 b6602f766403fdc7566ee8eea190ae5e385b22e37e2e6c59ec6bd2d7feede61d
MD5 f5ae41455b9e2097a5ea14404987631f
SHA1 6bcfaa5ddaa11b79c2063278bf2c2e8366582d74
SHA512 e9bda81416367ffa91e9e026bb3dca0f0ebeef6fe73076e9b62d077583735bae18379ac27d7646e3282f1c31933eae20e91f45526262692876dafbe2d41a70c8
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/Lanp_ToolBg_M.png

SHA256 f231050aa9404233b2534a3b41bf27416d6a13a339b835728c0ac48c6de0df03
MD5 f13a3622731d5511efbf16256739c279
SHA1 28751cf75514836c527309559e0b8704b1a5a5fd
SHA512 06aad2b9b989993e5d5dbb16c5444539d4e32820ce70d7ccb15bf4d7e6526bcdc1f4b218771aef1a9ecb268d9468bd862eeedaf2b3b0fc9a087c271f53affa9a
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/Lanp_Tool_1x.png

SHA256 647ce6973c35366ed37d25843350d32456a83a3b8fc3d25660c13585a10edcab
MD5 1df4abf7372641bc6bec745a332dd957
SHA1 555c8c3994b1b91afc2dd962f3c52d2c88a12024
SHA512 35d53611ab9c0fc93f8d716f37c619409590a50ee4b387d581334880ea42194ba9e6433c4b4dbdf9641b89cdf8f02f64211cd247fc5c146b0036a8030bfc37fb
SSDEEP 96:TSMllcHitlIxv9vk7C1+I4wWHLihk/xp+fEHZm6jD0rddLLo9lKc1yL7Bgp3r7WZ:TSHIIHUCD4wajTjARMH1Rb7WZ
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/Lanp_Tool_Closed.png

SHA256 4bbfa8e93b2f3bd2b390c936ff25cec22cf29f9b058eecf70716b1e5d1a87442
MD5 35edecf6d3efccdcc3c214daa9c10c33
SHA1 0b081c5406672398686a1df5fb7523a059bce1e0
SHA512 c390f6edba92196f7d31f498bfa47e11dcc9900d297d86bf8ad116a3a2b5a87a4737100a642dfbd55605ff0e5f179e1d87fe827748e844db12f7a9ae5c5bba00
SSDEEP 96:OSMllcHitlIxv9vk7C1+I4wWHLihk/xkOne0rVdyPE55JBAxXd2xoYniV5nnTXhd:OSHIIHUCD4waW52VgPU5gyLiVdTxsc
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/Lanp_Tool_Copy.png

SHA256 386fdf6e991fea73e1e18e8d7c8698aa38806eff963bfa86bee6df3a22137b87
MD5 08458bbc24fdeab273ae321216d10c04
SHA1 e350b1ea0392ad4e678c6ba5f0e7612d3f4edf2d
SHA512 ba2b1a714d5c76f910ffed81ba77478c96bd6ae842c0e865d84eee317b5bc39f0dc6266c546a53957e8837310401f76bb61a86f5227737d2e02b8e673cab7653
SSDEEP 96:OSMllcHitlIxv9vk7C1+I4wWHLihk/xxC+OqeCeV5/lsCPwdu:OSHIIHUCD4wafObhsCUu
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/Lanp_Tool_Lamp.png

SHA256 85d88c226e1aac2ae127a9cac23980e78c703874f5ff30b87a93790a66672b3e
MD5 0093304e5adbee03fdbf328d796c7ad7
SHA1 dafd12018774c26c416ce5ff085b3ad0cabcfce1
SHA512 8bc6b9759827929f191f7a0269347c0f587a49ab2166085fbbd626869900c046070d2440446ca6cb9835bb826a937f06f1aa70332053e010a3bc9a71d39f4fc6
SSDEEP 96:OSMllcHitlIxv9vk7C1+I4wWHLihk/xprpfBJJC88sGahJvCpT3etlJHzyS8:OSHIIHUCD4waDrpJL7/HtlW
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/Lanp_Tool_Msg.png

SHA256 646a20138d78011708c3f534669d169187d92bf66a2bf04fb59c4de6864bb73f
MD5 becd0b661042b196af1491375e8e7b81
SHA1 6ec0f7703e211ed6b021f3136b1644e4c21898c6
SHA512 6d51158938eb498e476edc40b179942671b80b6446d4b46296c73252bd19515047c8780d61b2be5d11966a7b628d40b028c89d3bb991f6cbce2b8b3e55407735
SSDEEP 96:OSMllcHitlIxv9vk7C1+I4wWHLihk/xyGXS1bmT1ehs:OSHIIHUCD4wawGX2SAhs
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/Lanp_Tool_Pause.png

SHA256 960faa8861b0ba32fb8d555aae32c855539a48af01826f51e9f0b3d051a46b89
MD5 8f6bffc8de6df53545354e9d0ecc621c
SHA1 a9688d1d20c1e060ab80cf5dfeb807a7eb3f365a
SHA512 47beaa7022bb0180e2a22d88aaceca3b4534189c089d25ef6d50f52e58b44d2b0ab5cd830cdf109aec2e13fbd131f37501f105f8663934ab65876da1415b0522
SSDEEP 96:TSMllcHitlIxv9vk7C1+I4wWHLihk/xb4LyOYf5BqZZc0v3w0:TSHIIHUCD4waZ4+OYfzYw0
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/Lanp_Tool_PopOver.png

SHA256 ee2f5c4434376eb0f6d1a8e02c28a137de7be733350ab071b8a2c987c6f7b8d1
MD5 052a1252f771a66369dce1289f88b2bb
SHA1 96c3a4b4cde1fbaabe4a35b289324a7c978278d6
SHA512 814c5bfec7e55a0a329e5f209c7dff1db717219ef6aac70c6e2bb0478d7511a80c15ecc7848fea031b95d06c5ae80f54e115084605536d751793c15cd1713a81
SSDEEP 96:OSMllcHitlIxv9vk7C1+I4wWHLihk/xG5BNHWVC+dvXthmlB103C:OSHIIHUCD4waMZZ8PHm/103C
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/Lanp_Tool_PrintScreen.png

SHA256 4e868b96500038a8898c5d7fc803ef69387352cec9b27b9531ebb4c8c6380694
MD5 6b81aa2fb193c42b7e7bd593ee4303fc
SHA1 245fe18f3b3fea8099d021bc9b78a99603dc2d0c
SHA512 b6af445424c22bdd5a22a321e210ef09ab2d776729037127a2df46930456e41c9833295f2ffd35f3bc02457313624aa6daa3233f35c5817dbeae68a95da21b3b
SSDEEP 96:OSMllcHitlIxv9vk7C1+I4wWHLihk/xHmw5yvuXw5JkypUuVv5g3zhF/GMqki7hy:OSHIIHUCD4waD5y1JkypUu5581XshO3b
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/Lanp_Tool_Replay.png

SHA256 3161d225a68008300f7a382985cc3d9b5e121ad48f5cdb288f166026ed4d4aa6
MD5 b22622ea11d0e18a060039403a41b1e6
SHA1 5665e8c3ad243b69796efc8dc72f5e16a50c1d33
SHA512 aadfafb0eef93201466981016476b9153154afe416318e7e840f03625d7b7dd3400613cf3a17fed18edf442ce8bd1868733682f9b78dfeba8a906233a2af1a94
SSDEEP 96:OSMllcHitlIxv9vk7C1+I4wWHLihk/xq3MLK6LF6/islwDTKLQV9H2EBUpp+/o:OSHIIHUCD4waemxLM/isyDTKSNBup+/o
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/Lanp_Tool_Sound.png

SHA256 c589f98561e77aa913a9918fb9219517ac7d443b9b09a691e6a449a781b8f99d
MD5 1732516f0b12d6b5cb64740a44dae2fa
SHA1 95936f2b53ae71b9a9794764e30a96a96261e05a
SHA512 ffbd300ee133f1b3310443a3f4a5507f5b527830a8136fb079cdd58b396bee263659ce954271975af2b3812f8bedc6f4f1c5bda845f4d2c42b5bc55b56d734fa
SSDEEP 96:OSMllcHitlIxv9vk7C1+I4wWHLihk/xnENUDrnUKWm5yzAOCvz7Jir:OSHIIHUCD4wapDUVWyzAOI7Jir
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/Lanp_Tool_Trigger.png

SHA256 d496f5d9f2002905b6987302e8c60f66fec3311e0ed4e87eebc1b3e75cbe3f02
MD5 03695004dcda2be5ffaf85c94f04f6b7
SHA1 c72310d4dd06c52a32313c2f554e8b7ea63a4fe7
SHA512 7a00bdc5194769087bd1a6fc4bbc8aa030ec566db23447fee610368732bf38916af16b0167b35b8c07beed458cf5f3757eea768a2885e020704db489c79ad58c
SSDEEP 96:OSMllcHitlIxv9vk7C1+I4wWHLihk/xZzgTRXp5SYyUaoApDOnHqeXouWcE:OSHIIHUCD4wa3zgTv5nhwKnHqeU
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/Line.png

SHA256 ae34463c8b599fe04c60e1db8bbe5ad2baf70322ab4be659e8c7ff6fc5d07fc8
MD5 6274a4dd1c2ad23da6e049c6005fc111
SHA1 c10f7665a8f6c5a607091498645172d63ae0d561
SHA512 77a04bbdfad58511a2c43b878d8467e4037f9bf93bc1771cc0f6ffff5aa976616abb7c33cc682460ae73d7cda0d5b161ba39832cadb025c87e7702ed835e0bf5
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/MenuBBS.png

SHA256 44d899a0b5517a918304c0059b9bafa6156e6cceb3baf66e91608bfa7b9bdf0f
MD5 dfcdb1c68efa3a7d879d37a69186116d
SHA1 cae0925ca05d2600f8eb16110c8e57335e92ffd0
SHA512 f5f597b30e7f853308382c86220c2364f13bce5b5256c422ef09f31bb9f985b5773a0b5a76002344c1811363897a93cec3c6f4d015e449c15a96a569a8340016
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/MenuExit.png

SHA256 38111acc4f1847096f636864503a28a222637354b114156fb987c7396e24d40e
MD5 3d210bc76d9ae3c10f9fd102696a4885
SHA1 0ac374c9189344b2a4c884553d39ef9fc057ce86
SHA512 64b8fe66927fb437aa30305182e9160c3764ccd277e4a8095038dbaefe8760a90c442d6f6370172e0804c8c7387a65652ab0ac21b014d944070770ba37f63eb7
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/MenuGameTask.png

SHA256 e75d1a1c9b4100de40b4f7caa961feab9a8f96270bf5071ba5279b570f4a3720
MD5 008dbc96383953b6ebc6a109bc8675d3
SHA1 7f77fd6d565ee435391673fa694d10b2a57efc1c
SHA512 0ae5cef46f4c532ae0748081e76d504c26b3d6d1cd25d69a9b3358896334b1ebbfcae9fa2590c368518ec8115c923f84fb4de452cc9295626cffd0071bf31189
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/MenuSet.png

SHA256 853253eb6c821e1d0420c532543107b0b43a0aeb5de0a5876eba3cf1a872ee31
MD5 9abca7b267f4d3ad5287675d003cb158
SHA1 47a565b70df2d08e83a4da35bb1c0fcc45baa06d
SHA512 40722ec8de21ee74bf3b81dae8b4d515876c52789deeef38dc545a67cc4e5a0024e39d2ad98328939f9e2199a509bd2a21c8bd99db37c1b25a8a15c8f2e31b9c
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/Picking.png

SHA256 a8e896e637f508754ce622d9414a1e18f25080b5f3654ba5d9fb3ec2b7a1f65c
MD5 c764f38c0d6f6cef7de2c27f5f44b84e
SHA1 51c096afd2e9c976b30e739081880c643bb9ac5b
SHA512 728421b90572c17ac82584a68cc1ef7e3d287dc27717266b965c97867d757e2a27bc53a436d826d77c6575189354221f84ab851bc0991cd157ee76055008245b
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/PurgeBtn.png

SHA256 8887f4f1677f7606abcab6b1545523ba1f66db7455eb04d57bf5c7f17a4a9a60
MD5 9af7592e3c808e0b078d4ee55fb13ffa
SHA1 d3a456d8040f7c68bb2883e6bc5bc6fe18d5f4c4
SHA512 ef0b2b5071c4f3f004e2ccecf23533f35706b54e78ae2cd4d6f3c7c40e8e55d9ac146e6ab43d3e20d978ba89087f85731d46695a619dfb3e6942ca0a6cf27d78
SSDEEP 96:LSMllcHitlIxv9vk7C1+I4wWHLihk/xpDl00OftWR1PxibDv3xVQWnH1RCHWfCrN:LSHIIHUCD4wa7lytWDPxiR6WH7uWfIhz
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/SettingsIcon.png

SHA256 92d9b8bde4bcfc8224866858271d52da0b6b1312f78391cd48106c1dbade79fe
MD5 498d1def9ba033bbecaf4c8ef4fe6cbc
SHA1 c3538ede2eea875b4950c9c26eabbd69fe8f06f6
SHA512 549b346e1e5dfab285b7e68b7da7b4b9efc9462869eed519c50e3d4966afd792b41f6984c6bb73f460668cfebf80343c51fa6b2ca2bf449e67d700f20c76cb31
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/TabClose.png

SHA256 16d93976146a957e125ef1639f9ff5124741d724f07bbf6c34270a3348b435d7
MD5 ead5ae4a542db0aabf4480e5fcd40b32
SHA1 f77549f5cf48888c6205c720ecf0340a69a252ff
SHA512 3acb480020ff1eeaad0b69a6d866ae480a67cec984d067576ff440841ee46242ca6f67a02da12e45a04a2abfc909ba630ba5b5fa50a9f1d8353af0b7cc41f54b
SSDEEP 96:DSMllcHitlIxv9vk7C1+I4wWHLihk/xMmMutu/mhZj8R:DSHIIHUCD4waf7GChe
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/Thumbs.db

SHA256 cf6f70edfeaed1d973d01df6977185f1658feb5fbc7327cdeb9743c990c22ad5
MD5 6ab5ed8fca758c607f844bb96a65371c
SHA1 dc55cffba14ed61bf39e7425950b79a8647306cc
SHA512 5454e9eefa7348ca678dc660c48f8448f04922a25820e7612ce0571360b320d0a7ba993c78dd091958b62dc0c0fdf19c25cdf5266bb51f563d59dad50b2e26c9
SSDEEP 3072:yyPInRhQ5VPnDxiRPiix8tnyn4kT6EJCfIdJPAK/cyXf67ja7JK0nkJwLINCE:gnDQzkRP98gT6E+IUy+OJK0w
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/Windows_MainMenu.png

SHA256 c553cc17a1505b0888b632c1100b19ef3cd90e3722c75dfb3d089b746f6823c0
MD5 76514da6240bf64dac37e01d0897b232
SHA1 9ed018be99058a39b1657636c890b0847d624b39
SHA512 3b05e4be95ddde72b46453d415b049a02cc586a0b605d353f437725d9a7b2db1ab8d9f28895c53d60ec5b47fd4d4ad0c60e903f4190c5b2f74d8ef80a374c48f
SSDEEP 192:WSHIIHUCD4waC9rz+TGf22rWGdIfPeXyBEpHF9vXwm8YBTgp:550wxf+ylrTIfPmg0HFBAmVT+
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/Windows_MainMenu_Bg.png

SHA256 34ebb48bd0a87c9e18102349c8667c589b7c5ba571e865bed5762b0d2b1ad418
MD5 479a0e6435d3b8e07d28a3441aa395a5
SHA1 0e545a1aa32c78b1d96d0e1173cfcbd6a752973d
SHA512 9381e1eaaaa3bc94314ac00162d7ddeca410c78c6a8cfee360cfc1502f468202d00caa102ac1fce02a691b9c913afe38405cbcd81e5a502553ae30e96edf650f
SSDEEP 384:v50wMyV6aDKowrve/Db7MVrFjckp2RjHTsmKF:xWyVJDKTrGb8j2JHlKF
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/about.png

SHA256 b71922b8d73770a4a0cea457de2e98d96f8c0d3952b53f639a4fa5b50ec43806
MD5 21f59eac7ce677687bc90596b0cfbd72
SHA1 ac160099d2583ecb15ed1fee816691a68cf328d8
SHA512 45a1db9bea1d9be550a8dfd0be04bfa9bc8fbf7d681ce4b7da34fe476aa675ec9ac215b37bacd2314e9846a7581859f923c5d8099f5b5497ae459fb1af2113df
SSDEEP 768:9VMhGYHbKTuOyQ9sI+63tAvBw6FzjXZRHMgW6dbZgmd5y1+:IGYHu6o13tgBw6rZRsUd9gIc8
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/bottom_left.png

SHA256 049ea194c95c19ab895f6fca0e1f56630cf612a0038b44e3517d908e59037080
MD5 6855c50cd34190a07221bf6bec718730
SHA1 20e584c1e9e8c8f133a167c4e795f753f9d5431a
SHA512 4c86f20fdd3889e39a91d07c1c56aeff68bb6a7797aa129826a9c2ca427968a9d477794e3da49e0e5d57b5928bf1fefeadaab50e61873bc529c784e470ec0976
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/bottom_middle.png

SHA256 f4537f307d994c874b6ba5ebcc9e553f3e7a324d0e51eee1d1d3625f880f5208
MD5 cf75acc5c588316ad0c396c74f457181
SHA1 7f3f0f7acd2978f2b09666e316a835c283ea20bd
SHA512 8e03f3dc8b9872dced8576466e39fceca8f0df57dad2f6c0cfa4ec4e1d080f938c4aa155ffb4c4ac1eaeeaeb80447d6930fd0a1e126bd7d0aa0dbb958d1dffd0
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/bottom_right.png

SHA256 b4f98bc468345a8cfae43b3ff86671eafff33f8561d8850eb787c46631f80680
MD5 ae13d2b2e527e89bff665a46be26e390
SHA1 d1f03cf4fcbef8800e0fe9827ff9032b941487e2
SHA512 65ffb7996cf98df184cc47f9603c3bd90d21a6bda9fadb891af3808435484730513a1948731d5c9ce977bb8ffd599e678e08e30ffd170b220aa56ccc62c3c879
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/close.png

SHA256 033a3e47f14ba2c8494fd4be5884baf722f4d4bd499342d47976ef695605dba1
MD5 b645bf432f65f919d0e47c58b8708eee
SHA1 3197237a2f87d5d30b17463633c3482b0fb9ea23
SHA512 b3dd128edeb54f0ad59871008d4d73220d1469333dae9360db7abb0a45d961d84cd4a7d26e8b77ea38d99109885f43613e21191613d602431e3ab6e5ad5d27ce
SSDEEP 96:dSMllcHitlIxv9vk7C1+I4wWHLihk/x3KbQJW4dSFrmYudu:dSHIIHUCD4waZJW4dSFsdu
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/decompress.gif

SHA256 05954a319b446576c92003296b228723566bc50c1e50b8aa16cd8df6088fcecc
MD5 2d98ab80d59091f84afc275142dcba21
SHA1 48f446f7016ed12e6330b468f90c292406c8dcd1
SHA512 db47a228214d3407f5f8f6f007b96e4b52e5db49f4483fdf4b964502f7da4e4f73f00a37486e2f90d1a079d8024e5ad4b140b536445d8c79bd3ee1a094ffa04e
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/downfile_middle.png

SHA256 2231ab2fc4acbdea0dfa05b8187695bde887eaae594ea9fb64982b2e289414b0
MD5 44c8045869c48bd4bf454d636028af6e
SHA1 a57384bfe628bffe7f639e959b9d949793fe30d4
SHA512 95e49804dc5a3f86e036e71d2aaa82c1aeb560ba39343b690152384276d9b2a6f31a5f5345b77fa06219c483cf612a8082c5aea02ae37247581af2be3c1795f0
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/downfile_side.png

SHA256 eadd4236d04209d6d1e7a76c4b337aac4932e3eca837d0231bfb413b46f4f27b
MD5 b3fbcb1b8ded8c6111bdeadd219544b8
SHA1 38cadc28469c97cb9ec7ab566c49c0f9a8f73020
SHA512 e469fb82dc8bee551f98769f820860cdefe543aca6b7c84e8e1941a42583a5d64bd270390babba7f8554a7cac9f8cf2319dcce22d93fac051f38e90411370d6b
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/download_btn.png

SHA256 92b645d9f381afe357cc4dbb1c2bdba03b41d48baa9930f94288ec5e59ac2c76
MD5 1abaae64a0b2a9180998c887deb35c44
SHA1 b5371ff6978842ae1dce75d010183cb15390ad4b
SHA512 ce4a6dbbfadec8b39005b8891b382fc1b39f06d0ea75aae015bb199eac282b09f6a25ea9a07bd452326e0a14fc81c98346b7adeff0cde2acfe8c195e19f3fa6e
SSDEEP 96:TSMllcHitlIxv9vk7C1+I4wWHLihk/xnvuBp5wEWAeVBR+m4x4IBcCA3:TSHIIHUCD4walv5j4OTCA3
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/download_icon.png

SHA256 a020aaae0876cbb62f436c43e6e906d23ab1776d99f0783a06fcbfef6932f995
MD5 3e95277fe74ad9d7691004d396bc9959
SHA1 8e72a936f9ba966c0aa40467e8ef5ca9d4034f63
SHA512 c9a64b75959937f1bb1f1daf76092dec3495e533b9917e8b2da1f61a3e07f46e9b2d2fd4a886f5749bda5a8c70a1c11c975e8280740d7ee70877fc5b4add68ee
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/editborder.png

SHA256 efcfb2484c9ef313e812d80045b3e00dd6d99919ec1d7e2cc4d258481ac6ee78
MD5 637306594216f356e35b6837a8e2baad
SHA1 fc919c136cb47d963a0ecf5061588a14c4cffb71
SHA512 36c190d586cd33da9f5367904759319303640f239ed06904cd3fea248a06794d80a56e7eaf97f80b242fdb49e56104a895ca037a6c1210d6c861a83722650c16
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/exe.png

SHA256 9b6e5c7aba9638bf0e426ffe454cad74b8da1c1e3fc4c58efa27808b746ef5e2
MD5 db2db347f1cbb106dfa440cab991730e
SHA1 34a446b9187f221f83f345402da0476bbe1b8142
SHA512 efb3d2c47264d45fd282f663a2cae73172073c4b54752a3d8abd9d0429c0f98aca6a23d8c6c63df5ef4625d552eef24d6d5b0d0178da909c7170bfe5654ac255
SSDEEP 192:0SHIIHUCD4waf4IYASu2o1PQuIzw1OE0P:z50wQ4bro1PQzz
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/feature.png

SHA256 91244cab458aab30ef3a52dfdea6a51fe9b214211a17b3594b6244cde49ad5c0
MD5 a5666822778221d9a1192aa5a67c0966
SHA1 9172dd55edcee12a4dc823bb82f14faa8200aa59
SHA512 29b3a97b984b780080214f45e7818fbbd4da0885116d91d90c964305707ebd3c2f4e6fdec6c8fe229cd226dd9d5145cae00ca8b5bfb950dc00782d05800a441c
SSDEEP 96:0SMllcHitlIxv9vk7C1+I4wWHLihk/xEnREbqADFtffCq5RZcfKPb8+NOTPSScmG:0SHIIHUCD4waWnRCDFtfPNPbJ/mbjO
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/find_bk.png

SHA256 babd6831aa484a8be88030f84847a8e15043dd9b2c7cdd1eda8c54480b2fc33c
MD5 3337bb11fe8d109a7d2e4e9c90d3f6c9
SHA1 27033f3eda83047fd5864f6ca452744351c88bea
SHA512 b723b20f2ce43638b772dea9f73df5019511ed537a1d11e90bd35ba08de74b4e385531462afd59da19dea58d16395258ac9e59b4862a846c74eaeb195124ebfb
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/flash.png

SHA256 4fe5d6f55e4fb10a60d77edd7ad85a92f3048705727d889448d04ef1a4c52413
MD5 2d0f8e48694dd8f1a2dc994ebdf488c8
SHA1 11062bd9d119c0ce773e92bd0c9165fad98ab572
SHA512 8ff6aa5639189239d7a540f9a6b6ce8d6f187401d344f151834ec7411f55dc6e07828930e0591ac21e6583ad5ef2a2604fc383a6c607cef65d4ef5def0a7e03c
SSDEEP 192:0SHIIHUCD4wa4rMYvdEu1graTmioEzY3aTyUYZ:z50wjMkdx1g5io4mUYZ
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/hot.png

SHA256 db9ee3ea71e49ccff06ca14043890a9e8a894d95f7705e6a2c06997be94bccd1
MD5 590a66e1f27bbb4b9bdeb22a6019ad0a
SHA1 d363e3bbe6bb7fd1ff51a4a208782e89eaef2c49
SHA512 a74b74fed868efcebf7a27dbf2a9fdf26b1d99af289780f31ac6d5ac8f5e57ceda826607a6136ca9c843012bca095a6ad0c738af44be44015f8783585818aa96
SSDEEP 96:0SMllcHitlIxv9vk7C1+I4wWHLihk/x9aFJjBy048eNyqg5DPEeI6zMy7HZKsr21:0SHIIHUCD4wav2By048eNyqneI6z5lKz
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/icon.png

SHA256 3f9a1b92e6e8d9631872609a82762a09bd588eb4d2b01b047dcd470fa590ec2c
MD5 6cb3d9b1482ecbef1d34fafd07a44d25
SHA1 21210bff3e42444e3f48045d641f40b10f39db68
SHA512 c461b8ccca4124ae5f169bf121c7d1e2a502880408840ecd3577251ef841b618c38c034ac1acf310926e051a3bcf8dfe7c6b8cddf8df25b72c0113738926970b
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/image_error.png

SHA256 8307b7d8d9130416c58f7f7dd6d1902c03c43d410498393a6fde7a906cd43fd4
MD5 efc6e7f38f7b1042be231e065a157769
SHA1 0831953d6b2097e0632bf0c8acbc2f92044a5a41
SHA512 056644dd1100b8c0d1410046d8fa101b364c4981243ab68582f8c4e1b9ab44522acea0aaa5ef7a2a1bb7890b55a4b43a044d9bee7a72afe5c0db0e74b30de145
SSDEEP 96:27SMllcHitlIxv9vk7C1+I4wWHLihk/xl8Cc09FzYVlM/1x2qAR:oSHIIHUCD4waD8GtElg1xxAR
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/image_info.png

SHA256 aa80e31f0c12c02d55ae0b1bcf215741341d5af0acc4252db8650fa4da0f4ba3
MD5 acf6715c9209dc98a60eb8c134083762
SHA1 bc5fd1618f80787dae0977dc20ee428115c3ad73
SHA512 b7e12b0a235b89a4e28ecb392432d8a34047450e71252cbc94f6685ecbc6e650d6722f2a7a40db886536dfa4dac384e49d516d22cb9148f9d39acac64ba34719
SSDEEP 96:27SMllcHitlIxv9vk7C1+I4wWHLihk/x1ELMmUBrF1N/nDOW2sxxVGJrb:oSHIIHUCD4wakLOBB1VSvsI3
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/image_question.png

SHA256 24c59b6e8c84bb66a7bf83445df930474df76b535e85e0ff810a36675a118418
MD5 ba1390546f643f4db05173951205d049
SHA1 0fd22abdb5b154958a4192ad6db03d10f2b5022a
SHA512 2876ca35fddf70be726653dc701dece7b13c15e0ffa14efd962d7ab63a7e9c6e709745ca96fa7407bff90483e0265b66824846f2e9a6ce98a9951e59ce74a94d
SSDEEP 96:27SMllcHitlIxv9vk7C1+I4wWHLihk/xRMhdS6WSWmFDcfzSq+uyBz/:oSHIIHUCD4wasAS5FY7Sq+ue
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/image_remove.png

SHA256 dfea2c30b5afe9acaf0c41507456d1af435f9d104ec2b70263b1bb48fdda45da
MD5 84f9958eb6a91c2337182ef5c52315dd
SHA1 30f5a7afc876c094972c2085cdf05c98248dacfd
SHA512 466e7707e9b61601286ec5daba9fdfd3eaefd474ae9945e2326173881a44d64e035b6facffe65386053cf51a12d10887146223757fd9497fe9c842d6c0f43b46
SSDEEP 96:27SMllcHitlIxv9vk7C1+I4wWHLihk/x7CrG928JpiRDd:oSHIIHUCD4wagrG9VJpiVd
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/image_right.png

SHA256 6b46061fcc510cdd0b20f4b2dffb0b79bf268c11cffb1b0651ed641fed020641
MD5 b14b884d6e20cf2c5d1a962caf3dadeb
SHA1 4b5f7f550294a3f2aecd702216cf3aeb311e881e
SHA512 44e473ad6b81238bccb30363362533916e1aac9b66bf33630b4072ef1a02d856154ec8216f2e376831479202fbe36b6cf3891327cf9207c9af5786c96df201c1
SSDEEP 96:27SMllcHitlIxv9vk7C1+I4wWHLihk/xJNzg5I3rwN0dHqneYbrO:oSHIIHUCD4waZB7wN4HqjO
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/image_stop.png

SHA256 d97839dc3a06cefe2b69610427708141aeadcaacc8885763641ffb783eb482ed
MD5 3205483dea4fc089621b006a9af8f915
SHA1 c52b550b55e22139892a3584861a069c4a3cd7b4
SHA512 2ab1486edef84d7f761590238d5597420b9fb1c569ddcec39fdb10a0f5496d3918fc8b03a7d034a2b35c29920970868b84b4a2b8788cb1d5a86537d4f786956f
SSDEEP 96:8SMllcHitlIxv9vk7C1+I4wWHLihk/xpJJIxMUMAym4i/AXz2R3QMfN9sCU+ia5u:8SHIIHUCD4wahixtWmF/wzsf+Fa55IBD
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/insert/In_1X.png

SHA256 e4332216700bf06a268e83f78ccce4f49988326b8f5e3b063ce9a01bc18d7422
MD5 8376dcf2b09eaf2e92c5d34383b4b4a0
SHA1 e40fa8d3ccc000aa65b17f7730b08a199dc90218
SHA512 b3d69bcc5ffdaca915a78b86ec424ac6f26bffe8236929dfa0f76ee40d54d5cb0e43e1b03fbe049ebc49a24a42a8a7f7d6634e0fce4ac46116afce13e06792df
SSDEEP 192:PSHIIHUCD4waDeI8ITq2v7yAovb1CT3EV0Cai0t9v:650wchFqGt8b1d0nhnv
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/insert/In_Bg_L.png

SHA256 8604b2b43bab5d90cc806ee086b0cc645f2c09f80c00631ba298997d3024bf4d
MD5 3958c2e1a63fa8bf0a13b1209aa3a324
SHA1 77b3c7c7c507cf4661303b9d01c938a9b7f2d48d
SHA512 4ee31d89aba1a9ecd7f4a96f71a414bd9270bf85e5e8ad374ba9171e06aac20b8abe8c0dd0c9881eb0cc1b9497f9fce7b1250f84a23fc1a761d53c034169b06c
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/insert/In_Bg_M.png

SHA256 46c765aed4097e7b5c2af4065a95cdf99f364c134dd538290faae4577be822a6
MD5 b13095e361d2d20b4f324d3df4772003
SHA1 007cab42b4c5a73947dbc03f35e2fdfa85db7e7b
SHA512 8cab68585b99812ee8324b41aef12ed59324e0c7ef162f6512f233d666d8fd5aa986ae23561b4cec0f0261b7e105c362f916d272135f86f0d08f633bbba5fbb0
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/insert/In_Bg_R.png

SHA256 0f9d22a0af8e106f09e7ae99a62b1cf3d54600ee50d498d5aa414babd4e03e65
MD5 d407ebd10e6bd05849608ad2031eeb64
SHA1 47efb27793a331911c3eef554dd15cf84269741e
SHA512 35ac85da4216ed01395bc8daf1bc490cfdf0672a170d176e82061c78b2801b86644849214f5fb1abf5cacb5c427e163ffbffce53cb6dfa215192e1e9cf01d7ad
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/insert/In_Closed.png

SHA256 f8e8711a8139a96783503c7dffc71933694d4134fc928ccd7a3257a1a7ed4cf6
MD5 e1a045fe34eb95de33cee76cc956bfbb
SHA1 993d03d9af0e2c81674d6f1f45c42134cc374926
SHA512 8f1eb593ebaa539073a80354e98d2038c681d4c7a57c31f84a2a7de3ad9bd38b3946f91485d23e324807a6e57b79010c10af56bad20538dc5cdbeeee819b291e
SSDEEP 96:RSMllcHitlIxv9vk7C1+I4wWHLihk/xvIWBxKlVlC91wEOYMUMy9y7xoWvezIN:RSHIIHUCD4waJBQJCIEOAD2ezIN
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/insert/In_Copy.png

SHA256 cc269cec2122a7bf38a5c703249ca22bae3d0c231b867c750012110e28b535ec
MD5 ea577d424aaba9d58e1b60dabc84ee3c
SHA1 6ce30096dd1e287e4ec037d9a92211fdc5a903a0
SHA512 182a0fe5ef1d3b03ce05a8d6f0832db1aea3e80b86b97a3ddfba059e39c57e7b69f7018e23ee5d5f07850bc67c0ac367a5907e7e8e110ea53fcad77284ab8270
SSDEEP 96:RSMllcHitlIxv9vk7C1+I4wWHLihk/xHt0ILPwI8H1z1JOEiE7Ic:RSHIIHUCD4war0IL4pzLO5E7Ic
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/insert/In_Desk.png

SHA256 d25ae10b72629ef92faae3672ba6a0dfd7288b70999fcfbba3dfe5b9f16941be
MD5 79265071a58f9bab0ec91087482269d9
SHA1 c44262193c8e16e6818ab504b6c9ab035a03fb9d
SHA512 34216f04c55f0e20735c41aa6a52b4057eac929f76a083b6bf5d79d537851a34110f53751669820bdc4409343eaa76adcf6527ab523730738632db1234ddb5ad
SSDEEP 96:RSMllcHitlIxv9vk7C1+I4wWHLihk/xY05KVO73Ma3Rkz82qK:RSHIIHUCD4waJ5KVg3Mr1
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/insert/In_Pop.png

SHA256 524975e3e9516266b6fddaa0821a2e4d193cf80cc6213567b0cf9a901be12abc
MD5 e7e774738b15ce840d520813d724b984
SHA1 d075ba56e1c2bd2e12339ea28812c7c097656917
SHA512 03d463f0e4c982ab3604293ac27e506844fce418d16dbb66547a471b69e519d39054007e38b65d3b030c96b480fc42abbc53b6dfcc947ee8933f307196d4b82b
SSDEEP 96:RSMllcHitlIxv9vk7C1+I4wWHLihk/xE4UV1dSgZ2AZxyk8oBMYm2Xq3RxQstc:RSHIIHUCD4waedZfZxd79+nc
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/insert/In_PrintScreen.png

SHA256 f021abbef2fbc2175706398f4faf59f9589d68ef1453f34abb7e7a3d6398ab03
MD5 4616d28a46513c431dc24ef70b8b1963
SHA1 abbe46fd96594296bbc910c01407bcd554daeaba
SHA512 017bab1c34cd6d98e45f5aa92863a4ef5453a7cbbb0deeec84345b2d52f94fff70f32f2627c60647f007adf81518ccc557fe99fa801e8aa9f44fa9e12dfb467c
SSDEEP 96:RSMllcHitlIxv9vk7C1+I4wWHLihk/x3MH/4J7dTF7qJEMEVGbi80B0HrOG3dbKa:RSHIIHUCD4wa/xFqJEMbi80B2rLdd
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/insert/In_Replay.png

SHA256 af8d7d0bc9fbe3759efc49a1cc72899a431e4dddae6eedf4c521ae9598f83f32
MD5 2fd98d74099339ccd27191c690072d06
SHA1 5e5525512c9b5e040144e2725afc074e7d1bd05a
SHA512 93cc3c34416d8108c9ea9ed24b1d9439c742bf41b95d64fc9041fa9432d09c02f79280cb0d0e1ee059cb91d10e81f6a6341cf8779690719c2978e52ec46d4125
SSDEEP 96:RSMllcHitlIxv9vk7C1+I4wWHLihk/xpWOAh4sDPBAnBJfdQ5S46q5PzO4PB9zSk:RSHIIHUCD4wapO4sDJApQKqdq4P/Goh
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/insert/In_Separated.png

SHA256 6aea1e4981add4025db2d0764b6af2b0813b4e9f74034015d5c1a3e464a42295
MD5 94ee75b3bbac450065f5dcfadc495b92
SHA1 2ae76f11ac35b9237c9b2f530414bff7619747ea
SHA512 dbc4712e0beab06359d93edc114c1b138d1f84b6281825a47364f280f78c6ab2920982baaf67f8549782a69daaab62fd2f59f751a88fc847017267e94b42bcda
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/insert/In_Trigger.png

SHA256 ee3c576518977177de8d9bc90766d6cb2f95d02cd0d1ae9739e31f5c233c83ae
MD5 ad22856adc6bf6c9884a8828b5ea9264
SHA1 22cecd79e53d67b751b1ba686a68fce8df18cc28
SHA512 f4eaf66e0135f1cab69edb369800c5c215a61b21a41126127b91ec498c7d3c9114893d97139058360ca633a50ca442ed95fa3dd423cfa9ec812bbccfe8c78655
SSDEEP 96:RSMllcHitlIxv9vk7C1+I4wWHLihk/xph5eAU3WV9iPd+8eGnZFp4r0XNv9aHggF:RSHIIHUCD4wadUA4WTiP33nZFpK02mlC
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/insert/Lanp_1X.png

SHA256 99acf378d92a6f97c4eec21a385cd39ecb3441b7c0283399c2ac1a0a3a49fa8e
MD5 c3ec6963237dc333b738e5e50db33a27
SHA1 d78fb0c986780fdce3d89f698aaca550e7b099a5
SHA512 a7ce5be349ee4fd280efc2e8ee7880987035c4be9e1a5ac837e1471809a90ba41597b84a8aeb74450588d2ec53b53b82fe363ccb8b5e6a0c0447d23271142d08
SSDEEP 96:PSMllcHitlIxv9vk7C1+I4wWHLihk/xRKLLHWUEd5tUEQwMSlRnxJ0iN8:PSHIIHUCD4watOrZSlRn/0iN8
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/insert/Lanp_Bg.png

SHA256 4adfc88b85a7035a615493e0cf18d3059dcb9ab05e97f71b4a37ed65814bdad6
MD5 e5362ee29773e28c74fda562eb7adc40
SHA1 a3c82624973bf89d44508d0211aa400503d52cdd
SHA512 8e790cdab698d15777a75dd2b10ddbb942598527de02af2ea5de3ae4d532b719de1ae1e3197475bff00b3abbce88a28ad067dee753ac61966f4220c27384b7da
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/insert/Lanp_Closed.png

SHA256 3eb5067e096a1397b808d77bddccdafe7dfc6a29eaca00413ac62f6468f48900
MD5 0c47ee4f14d44286587cd420cc2eec72
SHA1 2ad096696e379f52c11eb489c74fe9fd3c72776d
SHA512 c2a008fe4ee10c96959bf21e26b86afc5fcca3ca51e29e5917f4f3451faac688179df5c988edf4aba99e26f33af5822bfb9d4dd935bcc87c314c7a5634212582
SSDEEP 96:RSMllcHitlIxv9vk7C1+I4wWHLihk/xFQi/TLXc/CXbAGBgM2DTCLVdd:RSHIIHUCD4waoi/TLXc/1SgQLVv
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/insert/Lanp_Copy.png

SHA256 df8b216cf215a0b987262badf21e37292959e8be03465158b6b2e98b533ab420
MD5 0088c083eb7c905130481aa0583a7cda
SHA1 d18c0fa3b8fb3ae1dc5b3b8fa69b06721ea652fa
SHA512 c1500dd52178ffe20b0cce8d147defafb680d69589bf5d500ce3edd49d5bf35d45252fe4cfa2fe76a41078ff9d5f2ef314ce4777f768d8538e063726aa478e57
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/insert/Lanp_Desk.png

SHA256 dec744c9c746704b673ab8041ef41a10656769ea4863baad8f693ed3f01b4b4f
MD5 40b181d4e60d22beea73c55a235ec63d
SHA1 d4a33457f151818bdfcc77d337587e79dbb7f187
SHA512 7d1937de042cf041bb3275a4e36ed7810378f84c4f1e588bdda99b88f3e9b1452d6c0be659b4455447d92c1214ba089a179973964c742e4a628ee0d9f6e2e930
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/insert/Lanp_Pop.png

SHA256 064ba5b68fd0efacb28cc005deada348bca4266a6258056f95d70a32e7a015be
MD5 2c76515521a46fe1a575d33c51f5221c
SHA1 c3a79d8df576f4e9c6bdcf839b09c113d29cceaf
SHA512 236a39b6dfc401b9656869f3d0e307983f974914d958529f0595eea59f9564c1a8fdde99261c21ff52945527406b19741ec69210d57c27bca5d1861e6eb4b89d
SSDEEP 96:0SMllcHitlIxv9vk7C1+I4wWHLihk/xqMvYp9MzogxksTy1jNWhe:0SHIIHUCD4waZvYpOzog9T25Wc
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/insert/Lanp_PrintScreen.png

SHA256 dd1aaf379572fe3086f56873a361e58dc55c0efd921fcff548252e6d09604bb2
MD5 76471f3db756fcb04122ec81729eda0d
SHA1 13ae173b3d787bc220c27d185ae4aba42899d0ff
SHA512 db7258cfc2a4d8929d2ef093e49b1d4958316bb64b479dd5f8e3ce77feef2145a73385810eb027729a6e3d2a2768675787a522a54b865c8c42b296b3c162c1a8
SSDEEP 96:RSMllcHitlIxv9vk7C1+I4wWHLihk/xGIoyIt88ZSryTGImI29MXtHmCTfL:RSHIIHUCD4wapoHJZSryt/9tTfL
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/insert/Lanp_Replay.png

SHA256 28f7c1bb468b79ae0f44b310d108fd6a7a486f74fa82979731c5811040f614b8
MD5 d1ceedafc2d14c15f242463b6d1acf44
SHA1 d62dbab68049d4978df574d21adbc70795d56513
SHA512 0fde4d93953b438bd27d43e88db86535a206e99cf222dde87ae26bfa797199a190e5989798e0c910d273160b2662819ba47450e110d9e9dcd60013ed7436395a
SSDEEP 96:RSMllcHitlIxv9vk7C1+I4wWHLihk/xNsYnb8UHhHtVRKlYXumb3Go:RSHIIHUCD4wajsYnbxVRKyT3F
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/insert/Lanp_Separated.png

SHA256 41c3e8dcb251b5bb07d779ebf2caaad997b9e2f9ea5eaa857e958b0705863a92
MD5 2e2aabd5aae87ff0d7e7be2ba6f233ae
SHA1 af3a5a7aaa06cc4cec3555a77faafed7a3b4a834
SHA512 f78307d609067bb7ad8fb68a7032ef18e159b0950877b2b0af8d80d6f6fc72f883f313f975397171e56e73da1addbf4720949aaa3b826e9208baf01c49f48fd1
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/insert/Lanp_Trigger.png

SHA256 fab1eed8440278f5addddce9a442f10d9b77e9c80665b245b72e795f36e69e6c
MD5 2e453cb65a2f6c80692e6a624bdc326d
SHA1 7d16cf5de980891b30191eb76802360a399f61e3
SHA512 5590640fb320b6f1f4c9fbcab8a2ff22241b34357268e840b2281f49d5940f093fdcc222d35c7e4d0b88289325baa5e523e762375088a67af048811e1cd2e93c
SSDEEP 96:RSMllcHitlIxv9vk7C1+I4wWHLihk/xHytFZ2NTgwt3dFn2R8w2qp9cU/JHJjE2U:RSHIIHUCD4waKMTtSR8w9p9cI5Fs
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/insert/Lo_Bg_L.png

SHA256 dc99b151f8b5199b128a8370639b0faca60dbbae7247e304673f223a87cf7494
MD5 8c1489f17bea9acaf1eb9370c9582e5a
SHA1 71924a9975558efcca16f990fc91430d03fb6c5c
SHA512 222a8c8404bb20c2d87b31a522c58af75a7b0c385cc82574702540b8e2c7d681f32dde9b707a03cd3d88cdccfb7c9de09c6153e46168b2540269e49e050307c1
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/insert/Lo_Bg_M.png

SHA256 2079993b4baa1b73bb9b8cf26c83d6c4459c9c78203e1b8a75e6f9fec973544e
MD5 36d7649d6bffb5a664f49a03f14d2a3a
SHA1 7c4e091e16e59b555f0e70b920ff5b4ec5de7c6c
SHA512 2a4ea3eafe909dff1ea73a7f614414c60a690d8485503fc5fc29315c83eb645b73a90f51a3124aa3500ce688d3bbf7b2d30f2856ac95eb15268301ef090a5710
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/insert/Lo_Bg_R.png

SHA256 a3e27b3b17155dc8d77be565b70242844b7a849d34040528a7b572c680608790
MD5 1cc99fb807e2b3549f7feeb4acaf9b79
SHA1 0cd481fbb557d56dba5f11688a7761bcf82f0f80
SHA512 a777dc3947a1f542ccfd0c82b024a04e943f409219f76aa6aca5a094871cecd2e76bb1e237f2d37cc6181476bdac870d43a8e9fac4d8d936fd522144274bad6f
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/insert/Lo_L.png

SHA256 16a8b3aa904b6e22ab547080482fa84fc3ae599a4e44e46aeccd1de8c518148e
MD5 07e418e1337be8231f8aea18e35faa64
SHA1 bcd6927d55aef59c973838df452402fcb474df0c
SHA512 4f69f977f8920e688b52f97b3688216a646b916b5d41f7909e7363ba2177e0ca2027b1672aa5530945785f12034d4012869caab4e30526e758b86d757fda5c4c
SSDEEP 96:QSMllcHitlIxv9vk7C1+I4wWHLihk/xpo0Rom+kKsLV/4usF4Gm9:QSHIIHUCD4waD7omQsR/RsFj6
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/insert/Lo_M.png

SHA256 d15eaa13343cb1a89e06a8c12e0987ae6e6041bea8a6d0a86ef5990d3e97fa1e
MD5 49cca1c66a187c94711916cc838f9ef2
SHA1 6fd0735266ed636dd0a4f4fa58e67f48f8621ae0
SHA512 230c34187485960cd410961a2f58e6e3289fed1db7c1c86548a5af2ec1d581db3f3f9e36dff498a2218881258c7e217e7bf0c1a759d97f6d98e2abe9f1a4bb10
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/insert/Lo_R.png

SHA256 d639313a46f87aad0d8a356ec7d2356722983cbe1a5826c4518490e3f0b963ca
MD5 5b04861a7302f9bb89f0f9d2a2020549
SHA1 b3200c358eb6de7876f057a440367b981f402208
SHA512 682d58500c1d8af2a567ffd88ab491c046048f0f9ff8ed8a4823fb9f87638ad60a95661b0e1d2f6ea6ffad6f73cb960edd92bb80be4bee046db4a515eda78037
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/insert/Thumbs.db

SHA256 961b09fcc394ec90d6e383df54391a1e6b5224bd5386f2f2ba4cb03b10e6b49b
MD5 a33591ec25a31db925057a9ff5e4483a
SHA1 54e42d10ed6e6c6ed07301936cd00921e91c0ade
SHA512 f71ab4490678e474b36dd9227c4dea7ed2f662189749b30fedefdb8573ae69a7594fbe0b81e50d40b20c17c08c261e902ac07ef5e690df03a3ba4684799fb471
SSDEEP 1536:Wwce2x5tEjDOQ+DTXwOVM7ITedoHFXyShqUuQUciZTKP6wGmfjULwqk:rfeb5oTWPBCw
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/key/Thumbs.db

SHA256 c896263e859e368a3633dd2687aa40d515b551cd34729dc1a59669b7d5abeb62
MD5 4ae1a53211d4af664450492e174b6c33
SHA1 4ba51786da4b4203cdd3642e6d420cf83de4a922
SHA512 ad2d79cdd6dfbc89f8df498a7fec675ddc6d8a84b33128a3dcc10ceb317d95f3e889efe691c1f94c9a3852a0f0e560da7cac4118d4cf83848f886707cbd26b25
SSDEEP 768:ZdWlvsNtbRn5tjoxPvnSRqRNt8Ruyzw++RTu86CROw9O:ZMsNn5JoBvnSRqRERuynxNCROw9O
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/key/alt.png

SHA256 8541369e2474af943eeda7b0da728db3143bac9d4e613aa2a36d562a1ddb4069
MD5 8da036ad5847c1c8e6a05f34bb28f761
SHA1 92c4226e4246024b468943a427e509f9b234eff8
SHA512 9f8c66d467980d321d55b5df4e1fed28adf65d94608d2ae23ceb20c1f226f6ffad2dd4e6654d20ec2c40bba09c7284de41b9e75f2d3ce84b5689001c2a32cdbc
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/key/arrows.png

SHA256 8bbd31ac76b3107c858e19d46928a5fb0959088f90fc105324e979dbf74d6fef
MD5 ef3468374451182db2c6e1d0cda0c2c3
SHA1 0649efd53a1ef07230fdaa426eb6b309b53f963b
SHA512 caf61370395a96ae0059a6671fa68ca571bcd62b2ded857c6e2ed5bc77e9bf1c4ff4a51f4a10602202fb0327ade901b81fffd9c63425c99b7664e8dd29c77935
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/key/blank.png

SHA256 c0f4350fa7008645baa4fff1300298dffecb23097951d762e639586ccbc96391
MD5 5f5e1c2815be95ab6ad5cef265cecfbc
SHA1 552c5320bb73e939a57809d7a2e15212577562ae
SHA512 c5e353115e129bd81ca24f6e9f77ca92480ba50c141ae6d6cbcdd562c13a05fdf379fd14e2e2fc19399f84fc4a0f68c0eab44e9bba3322558394190468dcd6ae
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/key/ctrl.png

SHA256 205b754cceae958ee239ac56036acce6fec23d646c7120a2d4867c3f3c06e71d
MD5 8151fe0b756a94a6762d503e2aa63e91
SHA1 0146aae91f6721c241442b0817d8327d952c77ef
SHA512 9b442c1a0b8f872a3b8c9054ac6e0cea4e2693cb440c7717d8565e683f5b68e236f5f8c11905bf89be1775466d6d2855d6c2ecb8e0de17bdd9434136b2105301
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/key/down.png

SHA256 d3fb5c56db8f6dc5f591d1992ed2dcb4dfe02a01da22361b8904aa178298bf88
MD5 cf5d8e91a8976fb8576c491a18bb87f4
SHA1 60b722934d66f31e7267af1059db77f8468c10d2
SHA512 6c14188d4784df128eae2f1504dd51b082cbab134e2fcdc363ad6e59c4f7c893e1f03ef73dc5a944d599c858c42d0dd77168b90a3303c5c2eeed53c9d1675dff
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/key/end.png

SHA256 80bb016d4aea53f2d6dc538839532bd75261606b8da8086321d159d22177a808
MD5 c8a79ee10f729699a3d2aea0545ec327
SHA1 c8274d356343fa66fbba1aa5d8c8460c01d36089
SHA512 fb879a422e50884ef8126319b28ab4db74bc86f5efb16170ccc19e429e4ea33040cf3c53ac8d2be8d8830730ac7abafb33405551e407c5e9ba2196ec94b6601e
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/key/enter.png

SHA256 bf0648ef68ba54eb344e1dfacaa014a7efbeab8f821db33fc1e2ed2e4876d5b8
MD5 c8f1d61fd005866deef325e2cd6338af
SHA1 62fad249481fa23a08eaf0b5e575fd8e803498fd
SHA512 dd553bad768a3a1e1245e28326aaeef0b331e4caf01173f60563d9932563da48f29e6c005cbf815e11ea91633e1d09226348c6fc4ae213292f92056eea7ecf0c
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/key/left.png

SHA256 3be488b8eaead231fbb3041ae9ad9bceb6d79ff8aca06e9f4f857c7e632d35b6
MD5 e2e100218079c907fd67886a5599b4d9
SHA1 78f6d6f4d93d58f7753127563b69df2cde758e5e
SHA512 5bd575868b75f320d88cfabe7f4509482771e22d5cfdea522819e6f09ebadc5b16616ebf8e7065e204edf915daf3ed197a5745a1d632b727da059f05963d8229
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/key/lr.png

SHA256 832cab508998d9b0eeb418dde31b7fb6f2da4f8c77014d635d2d4e001ce0b809
MD5 897769f73c36065de20324e976701082
SHA1 6c9eaafaca2ef7c596d10e41d4d138c03b3644a0
SHA512 6139bfbcd974968e78f672213c45ee072cf4b2cc684e9443bf5779f09532601f85ae9fd4bb4c1701913c9ed62a36b903c0f87988b71f71a1fa879b50b0aa144c
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/key/m01.png

SHA256 e37af861a2bb8a86226d0b54427ce6459341685325c866bdea6e835173c8bad5
MD5 b6dfb04cc349076c2ee15a83be7fbe5c
SHA1 1f86cf94c569143a0e78844e075e9bc1027af4e3
SHA512 803a749c59c91188635590acef567ebb3e7cc63873b3713a8a21d0883556619f3d5f434abd8f4fd5263f40ab295c429510a625e847d05046ff243e664bca90dd
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/key/m02.png

SHA256 692b1f7fb68731ba1111bd2ec4037279256228e00ae1a38fbc5da1860d0c4c78
MD5 2786332af504df0bc2d1c466de974763
SHA1 c52eacc184dd0096e6ef84e2f4d5f06e877872fe
SHA512 19ca2d3acf55d54ed20790f7845097a62be7b5552c2041b6bff731c4c172b12d99da763e7c04503fca599b1c32a11b4898960c102c6f0a10f6d3d35c86486560
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/key/ml.png

SHA256 65f1e4867713473c2291de6e9ab1c08f2a29ecda8fb73ac670cdc8c2db3c168d
MD5 6d52427af398d165b211d50276d207a2
SHA1 d26f9ccdef51e0d26baffec0043786b479032ac1
SHA512 a1a43c8de300c9b981b78d4c165532acadf102c05d58fa40ab6001aa80c1cf4b95b97ff10bb4c0749b1e2505dd3489c7b42d2fff674cd94d7f48482c816f8bac
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/key/mr.png

SHA256 1ff95b7022c3ea74f10213f20e3735017280f28cdd117edcff1260e4564a5710
MD5 2252aed04bb5ad2eeadacf4fd9a8b0a0
SHA1 0bad7ac8e9e1df538ccbbb680b27db194bd4bafe
SHA512 c5379802584b1d5ba2d739f1402191225b9b1f230d281d53238855cdb1edeea801f71f57d51bea929889b7b61d7f19be38fc6e517fdd48169b22b3a1a5790dc4
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/key/right.png

SHA256 1cf074f0058b72d7ac98c2ccd854482c59dae26e55129cc52dfaf9a068a7950b
MD5 de913db513909ea37615efd35af058eb
SHA1 bf118913059ff2519510684c987427fc8d967444
SHA512 07fd78ba4fe0172dc07bd6dbda277f4015b3a25452ba85bf6df70a20521cf23a8e4fb2afa4f5778dc3b43afccc03d8d41972d12f1741b490d6aa092c598968ef
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/key/shift.png

SHA256 86cf188c33b27c55ab670cb8e9e4a13ee1add100e0d28afbe721a2c602088e08
MD5 397bbd059541714e0c8b5e56959733a9
SHA1 516860f3697242099f36d69692fcaa13504dd286
SHA512 26d03fb00c47d452490c2cc28f1e5565e264f783c7095d1ca51ba9d1086e8f2cf608157c279ea6e9cf549d9894d63b5d316a789afdfa270857ab44381fe76876
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/key/space.png

SHA256 bddc8540b4a60c8d5e0d8d8949f69124050f0a7724bd587a6d04234b852278e9
MD5 ef110b9d98b2891b7152244e6b92e517
SHA1 dd2bc878716fb9dec51c26749de3be094cbfa9d3
SHA512 5b3a8c17ee8fe6350cd957b814addba3552eca9553519fc489717e748320a446b67b52858484f5260a6593ab42f7cc821c8a617a78b52fadb971f878d9445ff8
SSDEEP 96:DllcHitlIxv9vk7C1+I4wWHLihk/xPYDh3ZtrgiRiU0av:QIIHUCD4waxWhciR80
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/key/tab.png

SHA256 870b0219e71c14618235f9f0df0bcee3c2822e09b9df9d93c997a4fed3b2a119
MD5 11ac79903258bc871527e04ae2f76490
SHA1 c67fbf9e75d2f8da3864f40691d7f20582648d7c
SHA512 de94b301b435fe561e3a25e2c0c36d1ef31584a240ed44321646e534f8f8bc66ae3eb0c73dc6284ae4175c91cb67b48ab9389a9d4893b427a4a5f7c4c0f23258
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/key/ud.png

SHA256 4b1c33757188481c6534f9bc7f6e65c0a467e7dfdea2cbf6ec3bc47ee1768738
MD5 841761f14b745e447679c17ed11a3ea1
SHA1 37caf099619b940b9cdb28b4d47a2145f7fd951e
SHA512 8a83a9b7f6ab882f18d14660635a207cc65b2612d763152400cc7297d1525a586e36d651e875a7b4244243312f8b2e3a87da6b708598dd2750a9d481c1cd60cc
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/key/up.png

SHA256 3eec2974a9edb90890147b63b7c5df448ce6458c2577cf79a5b15b1c19e263c7
MD5 b8a28d60be55039a4d9d109ac97b35f7
SHA1 a06088bab1520181a9cb2634ed344fad93d0013d
SHA512 db900ead5cf33c4ec7557b745ead0d853e984c86cd625a7a6c316526fd585915a461373e569dfe98da68322dfa968e5c4aeb8b4479b4369ae5aec08e087f9477
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/key/wasd.png

SHA256 e9f277d3556b7902ce6b388abe12082215288cafad81a2c2c9fc62e59ed0eb67
MD5 886ec51183028ebef32a8ceb6709a8f6
SHA1 b6d1f61fc3e58f9c635760464e81bcc0baca2fbc
SHA512 82973634478887c43b92668ac4327a18c9e0983666f7d18dd83e21742a0da1cad9785380720bfe9a0967007ae4b1efcc076b41698429d5f5ea86763c45681a58
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/loading.gif

SHA256 316e8cf472b6cefb1129e7556cdda6cf02844b9dfdc6723ff854c5c6016e3b56
MD5 49328fcee3564942eca32e9c0317a7d4
SHA1 c1fffe7b8e6670263cad6a0bc91d791123e17e52
SHA512 8c50e24d247206f2fbf8df30f84dde3df550cec601eb911cf7be2d6b229218bccce540fa538b7f6d1558a20a394265ab593f4c3842f255b5a3348b3cd544b932
SSDEEP 192:XT6j1XQrUnWZ1s3YxRahX37ja8OpjxAAGvqA9UOBa/DeT8bitd2LX7DJ:XT6CgKuoWF3qpwv/9UGaLeTLtdsXvJ
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/loading.png

SHA256 9010ec8928e31a3ae3be62393bf2910d9d4d824cded3e0d5bd4541b081ecbe3d
MD5 c7847c444abae586e99cba9a166f4e38
SHA1 3a29a24f271fc49268f104242980ad8ae7540c2d
SHA512 f8796bbc3b67d6ace92ef2875ad0ae3fcf7ab8fc155ba597ca7f39014a1690236e2c5e67e9f4e307425a04a3f24402d593e0846a730b1c1642df4ec3dbab4116
SSDEEP 192:0SHIIHUCD4waQaoPdk5HQDv+KFj0rScb/h2fsWZj:z50wlaZiGKSOcbIsWZj
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/loading_bk.png

SHA256 bd3471b97a6a4fc10fefc080fdee0e82eb436723e15ef47693806c20ec7bffcb
MD5 b6a423a94662584db8b4430f9c326734
SHA1 dc340a81d80b81a14ec51ea6b7edb038544637d4
SHA512 a7bbce7a82e621f54de4adb2a463856af32c0a9d9bd5c309ee72852bfe30a962cfc609e466ed07bc7d7d43c313bfa8fb7e617d1d4cf5ca928470fb7a1eebfd0e
SSDEEP 96:JCSMllcHitlIxv9vk7C1+I4wWHLihk/xiCkunOSBLZ404oJPej6n:0SHIIHUCD4wavkutZioJGj6n
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/loading_border.png

SHA256 eea33c641082ee1444db0169a3f382d6ed4c2a3497d7a5a2f2baee44fedf4458
MD5 a7d30bb47c0c69b040c2259717103596
SHA1 970e55a764d042945d69dcf956078fda1130352d
SHA512 a3728df21fdb5e59e6527dc55d4605c4dc1e194df0f61f47028031e319415aa31f235e256f44a3afa21c86a61c930f21264e67b8e5ac7c49d1cbf032da436333
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/loadingdata.gif

SHA256 daa8fa637a5e9ee2115f309df8366bb4e573cc836f93f4c9b4c8abe0284fa215
MD5 a8f6e4955bc9132f1aee5c1a6610773c
SHA1 2bdb0f02806302c16af2cc4e736787731f21470d
SHA512 4493338f5eef30d23c8e5097145e5fdd94e24c635f572ea42dea0c9d9528394b975df7ebd8e0ab38cae327bdbe30fbfa8eba7938408ea491b0c28f2f56cb1b49
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/loadinggame_bg.png

SHA256 27b249b920ee079dd500620c2d456478b5a3b865d27a2caddec391a9ab388fbb
MD5 7ce6e0fb611209b1a2486f1604ba7cca
SHA1 930092ec929b6ee624811a99500ebc6bddb3781a
SHA512 d8ebc58627c0ce94356f3196f8c6fc14272cf5635ccab701a6f34b3e18c720db54c74a5eaf2fc29dae0f471a58e10cdb4cf59cf5b50fa65cc8c3d69343c9b53c
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/loadinguser_bg.png

SHA256 1bc15ea9302b32cace6456f87359b6ffc84d7d645648f1c7f6d7bf7e08c5b2a5
MD5 47b7cea7167341b3755931061dd08427
SHA1 0fb24e18d9ce845be651886db0ddbdf81a470372
SHA512 8d1561f9e373bc61ad509e5e620a03bb2f0a11a6f701a51111f657166f070f961cff1e05f46719da39742071c2fba8f9f93e0a7624b1774cb080f7579a2dc6d4
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/logo.png

SHA256 79f4ea9ab3c0d09a2698d631f128d68d28e862d9cff0851318842950798266fb
MD5 59d0da2a5a3bd3a8526b18b886f8117d
SHA1 026507d13fe90c8a9c5e8307215b28ddaad02208
SHA512 4eecfd6278bd052354962a2b0536c9320d5ff5a31e925ee45d2eee32b693f713bc21c29e606bc27a66ed1f51c6c03b7fc2d31d5aafecc2aed6b45d3380f6253f
SSDEEP 192:nSHIIHUCD4wac0JMV0KcGDny1i//PF47qTtm4fyeXsSskwd8TznvbV1GlZemQ:S50wL0lGDy1i//PFrTU4fyeXsS6d8vnt
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/logobtn.png

SHA256 1838de09ed63949db4bd672c47a9e0b23ba979a2b35c7e9e6282829209bd0b82
MD5 b163e5b7f58465db8c85992274a14971
SHA1 94fc4b2bcf1de3ff5bf8cfcc5f56b217c1d014ff
SHA512 d402fc93eafcb60712963a547bbe21c4e49887e6e61357038c2f6d25fd3466c7b67ffe5f0e304645a14f6690ade654e9dfafb3b1a0c5473272c61df251b33af4
SSDEEP 96:+SMllcHitlIxv9vk7C1+I4wWHLihk/xpd64qKZNmYyWg3uL7+8vee9cxuWPpUCn:+SHIIHUCD4waVRLO+L7vcxL9n
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/main_close.png

SHA256 d8d916ca487ac9f3daad1f6ec8371a1e48b3a94c7115efdcc01d20812e2087c1
MD5 4ddfd8e9a4d5f635655e885a6e596b61
SHA1 4d5ef36c92786f6a5f9727c4c24cff127fcfe058
SHA512 9a8dd6a1e600baf0238594d8b2eb90df8997077a3d95dee69336056893e640c89bebf13b7d14577de9c13ccfd2a05df0d77ade498604323b61f6a6bf9c1a1fd1
SSDEEP 96:dSMllcHitlIxv9vk7C1+I4wWHLihk/x+MfVEiOpO/1UUOOVZaUnz:dSHIIHUCD4waFfVE7pOuU/l
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/main_top_left.png

SHA256 ac181f59ccb78c4f0e15c0e1ff61f7df782b2a3481460a2a6c6d63cd166db8b3
MD5 b1627d0be34386a36494b9d372bfb416
SHA1 db18353663efee2423be3a304a00752f87f59b57
SHA512 888b1040ae8d55e46d52e3ece02129a6e2c2ff43b9191d43ee73674134efc848b628746cdd44c4800943dfad9f6bff2e038acffa9bdd67945d2429c76cdde0d2
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/main_top_middle.png

SHA256 97c95a514e65a7f00d5a3142b90e34af4112dbdeb1d543a905e89c03695a2b16
MD5 39bd919d79a6614c4674047e8d67b59c
SHA1 485d7784a186e21b84d9dcd7267b1638172ccfe1
SHA512 f45004a3082f75fa6a7defdbc290efdeebb3242fcf798975ffdc12e41c18df79abc5bd31e7dbf3d8559e8dd95c4fbce91c6cbe0aca0c35a252b6e14f2175a0a4
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/main_top_right.png

SHA256 6d86ed32aff34eaaf64478fecd638ab62f15718cf93ac286cced55c9fd8f8dc8
MD5 f9e7da4baef25f98516efb9af958d462
SHA1 15477a991e8c5689f2a89cbcaae3c0ea0910b724
SHA512 fff46a95c1e8becc7c43947a6e42ceefc5f692751a7dfdadcf40bab74e9287e03ab386556b89cd37a15c030997de346597e3891fe1e662005f683edf5f066ffd
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/menudetele.png

SHA256 d4d6cc4b702a511a6680d656b47d93eae8573ae3a0b2b9f019944bfa770edc59
MD5 a26449d6a1aa8540cac1bfd29e36228a
SHA1 d67f5c2303024924caa164fb2d01f06c269a5db3
SHA512 40f294ea229d7f8cc936a7c5ef933e2290a785cca4006d48f73e4f5a87bacdc2cd7d78ccb366b496666d4fc51e886f4989469bde7f583e6ac84cf1384b1fb397
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/menulookup.png

SHA256 09dfb3968b8de87f26019305e613720493cbfab76b1ce811bb1b9e594e9d58a0
MD5 87fbcee8bdf9039d230efd19fd96b942
SHA1 9961cf01a2a954b89c883364cf5df261ad05d193
SHA512 0d0930c8d3bd9a47a073c94f3e55d9754663dfdd1519ee5e82134312fa048a9d1313fcd250c6b493d5275c9b2ff307d56df0ed566c18186fc1fd57d1d81c60e7
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/menuselected.png

SHA256 1737ce549344e9c7f86d8ba691e7b7d0da701cd8e51d8118b376cdb54fb63477
MD5 3cd498af4974fc2c4242fab4fc92fe4c
SHA1 d4ec7b88297797e66bfc5223d3b5a4332c3ff651
SHA512 b13c3ac94b5d5bfd0eca261761ec9abacedece5cdb36e87fdded919581a32528020fc93945440beead6805543e51df61d6b094555556e9824d197856afebabed
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/middle_left.png

SHA256 0d2d35c6fd1430d55db477e6d5f2ef953b652e5cecca9545e57038e7a3d79b79
MD5 6feb729d639f8bc2e2082646bc07a32f
SHA1 ad177c1809fcd63f3ea13ae5facf49a2a8d1442b
SHA512 40236454dd7e1bafd87faad75a6dad51d536522859cd99d646c6eed770b2be0fe8f39b658141e23b5de5d93f18bcdd3385d254bf895f455903327673410ca681
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/middle_right.png

SHA256 a2f65866d3c54e4876a487a66522bb691d239c581db37fd39de96551c108494f
MD5 3f218792c647ff575da32727225b611a
SHA1 4c75b163cc64c7e22c4ab3c04413340f32df36f2
SHA512 44590240f5bfe23964a672f02a86f314a87aaccc2af0f60fc5e1f88a5e0cf1febefef81f7ec42bd050f36c9446712d6cd34523264fc2a846e0465be6b692e945
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/min.png

SHA256 186d273fb111de28effc481db99879a3e91fc5b37a1460caedb9f1ebe0ceeb25
MD5 07ddf27e23bdc0f9fbdcda5bee53cfd5
SHA1 e3cc67393655ce806a022a5b799b879099107ff3
SHA512 a71238211ca5a1b7622eb76532d9a2b38cdcc2f171e32b38fbab61793ad3a676e2a26f10e74bfabe3772a49a68871b69f31079a46aca865de6f93cd9d988643c
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/moregame.png

SHA256 6d5399a635f5e84a13d1ed93421ac8571160fa3fa510b349a59691d3afdf9f3b
MD5 8e2e59c5db8c0237fe9d743cc0846a75
SHA1 4f27e02bb5f92ac6e7e1d7bcd2e1bae89771caa4
SHA512 747992e080fca12c440a8265548cd80301ca5ec3bf083d85d86692280556b514c85047141b6dbbf2038a372d3974b7e4770e7390ac779061c6b633ab858a6cef
SSDEEP 192:SSHIIHUCD4waSOclMmOlOkuT0FVPCnDg3j7oamzYkn1viumJqTVvj:t50wjZMmOlOF0uK/oa+n1viRc7
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/offline_loading.gif

SHA256 3468b7df6c3014c86297e4556a4189fd3b133417ff29eb6adcd5c116f3bd76aa
MD5 5ee2c60a21e23d48abfe82b52c4245a4
SHA1 04e7d34e8fa1dfcdffee60f7a0bae1c301b3a24c
SHA512 cb0a16cf9a5f22833b6604aac6ed4f7120444e36e7d5d4635042a85107c67b1aa030b408150f9563b2cf0a141e4a950d28e8700b33bfe8ea2a43fa8b826434e1
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/online.png

SHA256 1d66a6ee8270c23be6d3600fee57efdfa31c72f7eab9e5dae6d3f263d769b9a8
MD5 753cbdc8559b7658f8f68d22c2ab8fe5
SHA1 0a4efe0609f549eb819cdddde493a7be36d9e565
SHA512 8f97f0c1b3e942dc3d8761cfea8fb48737c11c90dba923a2e276ec7a1c330f2cfbddef9d2b4999303d9154366a27aa31626ba40337870f66f2eb1629884c79b2
SSDEEP 192:0SHIIHUCD4waCpTmUSDPwSaMd0OKaC6ArGgTJr:z50w7t2DPwSI1Cg1
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/page.png

SHA256 1c6f9e2ed879841e763fb32b5b7ac291f50f04d2889725206c1d319ac4107847
MD5 635cea0d24c0e0f882d202d0690c0e1e
SHA1 b63401788b30837ccd046905ad9d2ed741264781
SHA512 1b569e477cd170d411bb419ecc195cd3be5c8c54041f570bdc6ffd4a0c840980bd3cfbe8b6eeca39647f3d25de3ecf769e5eb0db7db3d4cebbd82f225ba24c3f
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/postfile_edit_border.png

SHA256 15cc47e979794d2609d069afca794fbeabf51af40795735836071b906ac6d2ad
MD5 7f4dcb5e2d7166a0bb5484efc1290175
SHA1 ec4fc150b361df562ba972a436a871dcd483f6e4
SHA512 6ca59ee2dfdd1bae74b1a192fe215d613dae344fabaa6c268b6c34442d4bf9445e41f83445f34e332065916000a33fbc59bb5c9cdc1e2848ceffb7e7b70cd94e
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/postfile_separator.png

SHA256 ebcc5cb81818a9e4e1b7ca184c3a73df53edb1b4ea2e51a27c38e85b7427a619
MD5 d8e4eaf5f6c3bbed8cd3fd9ffd162a19
SHA1 cd5f6cf7b96048d5fbef5399c28198d57a5d966b
SHA512 d26361774876aacf92d694c030877f9f4cc0cb7a1c1a633b4ebfc806fb119b08cca77121eb8c2e95613880d3ba607f43fcbe69a607f9a9f2c3456989759dd6d0
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/random.gif

SHA256 cbd673d1afc3b8d3255fa459645b0d0a6a1e84931ed055e4f6d55abb9abe84ed
MD5 956fe4f7164036d19624f210074bfd1d
SHA1 3c411e8029ec21684390ec04f52d391a07424570
SHA512 b1eb5dbcf0bd6d92c1ef1b9af2e81aa1c2274f8431c5096a1c1586aab2814c9a508f2da8cf92d47d5108e32aaa483ecc8e472f95017718d97ce0a2ed4125a0c9
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/randomgame.png

SHA256 e9b4c08e1d7c2bd34142ec309366af1ba56d3a87b64670233d9e20f81b464251
MD5 bb74ada9d7ac98e6d242ff8d38c220e7
SHA1 e16bde7bc1886c02898b4aaf924ec91b3eee0168
SHA512 ebe68c1a1f909c170f82c877a540ca20e0543d4934dd76fabec488e1b7ebf24c29124ae22e18d11afd5a9c5a3f82b2809de3f558f557160b8eb1de65eeeb0066
SSDEEP 96:NSMllcHitlIxv9vk7C1+I4wWHLihk/x404e0EGXcvUlvIx2s/MsbOZVY:NSHIIHUCD4waXvuQx2uMO
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/savebtn.png

SHA256 8ca6eac94bec415cd16a9e002bd1ad684ec0e9f747b10b615f93c3d05ccfb162
MD5 0f8b283033b73e7b4efd00a38147438f
SHA1 59967ca3948c4f865fb261a0acdfa9d10be976e8
SHA512 75ae56676b96152acf7ad2ddb54bb577042b58ce499d6965e8546ce714842c409fc6ca97e4f7cd59911c64b2910c58e9dfb3c23d99de2c1658199d5cf85c71db
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/search.gif

SHA256 059ee54ca0d95d8c406a26e05a18ed91d20ef6552febde2a732899cb16a05b82
MD5 1dc0e26b632a8e3f55db9ce9c5e78c9d
SHA1 48eafc6bf557e031b949bf847f939541a0f1863e
SHA512 d896203c78e83d6cd459a1de97697f1cfadda04eab5a882f0351ad07927bcb4d5771f1995a0c85ce39d30b4f79596a5b29a4657cf360be28eae310731015f1b0
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/search.png

SHA256 464da7f4f95d96376f6fcc8d1c2ffb16dec48141dfe6cf77d86e98ff5990dbf1
MD5 16c6131b5102a60e6d5ab5bdf21df8be
SHA1 3787c602d08925406a90bc582392c253a1846034
SHA512 c6368d42a38f20ec2f505f5e7f91a31c3b3b57da951dba6674dc5f1b2e5fe6c6e6045fc8973c8dce3460c18ed456ffaeb3c560e08569fc95ec93d4e551899a6a
SSDEEP 96:fSMllcHitlIxv9vk7C1+I4wWHLihk/xgGoGvzG0pILf1:fSHIIHUCD4waaGDz3IZ
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/separator_middle.png

SHA256 0b338e19b3f2a35a21b82d8dd0242f2970670700edb4c3453c31ba03bf45fa35
MD5 302655df96f0b35e97f923a4d4e3be85
SHA1 eb0c742af47d148c16ec16d90d750d172cd7e0d8
SHA512 7c20a9848368317a85987007d7e24dfb5b67cb42e6c8236754a92a5c2769cfc229aded5af12ba65c4f26f8054d5239ba7d2259e266c629cd513d0d6791805fe5
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/separator_top.png

SHA256 c84c736f5ba7a53fdb828a995d39365823d9a09cc1e044bcf79f2081487b5c12
MD5 069dbd75eac00556718fae2862500df4
SHA1 07b7499ce5a30813ad46536ab52cae522c70d476
SHA512 760b3d84af94ddb3c6947ac71bd18d639dcdbdcb10f996ba7ba9945fac0b044a7be026ba78ac2e165289fb2724ed10970e518abf98434ce6d0ccac68c4ae03fe
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/separator_top_normal.png

SHA256 795e44e8ca7ddaaaffd52281b8d085ae7c4cd373077bf7c2838351a704e9bb99
MD5 955da500b89652980143105f1739a646
SHA1 56238e37059ad2b16921ba92b471cf7203f774c6
SHA512 96a955efdedc02a5f6a47f7e45cad9a42045f469903d441c369b02a79d648bf874e9f3d10395fe5c1a6b0330d4db5f8d11b363f5951247e7d4b24d9a975a3a3d
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/sepicaldlg.png

SHA256 dfacdddc4d654290a00ed029fc871b25d767b61e0ff8b0387f243bc9c1b622ab
MD5 7082f615450885beb7a36ffc7d6f4ae2
SHA1 bffbc0db64c7570e19f939e587a9534b3a1b7f62
SHA512 9513880097eddbc79a010c2df56427b57b2923a577663fb7e2a5923cc85d090213ea9908b9c093d342fdacb888b3fa498e8f1345db4631a6d3da0a9e606d44bb
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/skin.png

SHA256 f1a40bb726caacefd37466c0bf79cbae7c7f25dc341192414dda3c18bd7d8651
MD5 1728f390ceb5284296098cb3520b118a
SHA1 c9927959940cf6d84a006f2f8a85b897e1f6d7ca
SHA512 0d1ce85b22a05b4875b42a157b31ec9df4cf50fe8993ff0e51d5a186c512091ebc26ad7c591480ea7cac20db4f3554b12872c0650d9bea5ac32a8ee978a3d5d0
SSDEEP 192:SSHIIHUCD4waoSeJgsXMFjSBDO5Oqf1fE27JRubLLOztKEkQHcqvWBK:t50w3zAAS5OQ7CLLct2qvWw
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/top_left.png

SHA256 7af45d3c52b83be506fe54e095a2506442615941574ead79d7a23351b5b2fa20
MD5 716fe5fe536aa758e1e4e64e11a22f08
SHA1 a8962db45450cf243a4ac1c21701681303d295a6
SHA512 c942c5ab7c4aad0711e496841765e7226399d87d44ba8f3ee57ed6edec25b5ab97d118d22e9641a1d1c580b47740268e71b73bc9b46ea59174341f787e7a01f6
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/top_middle.png

SHA256 136f0a6a2ca14cf4b9ee6477cde4eb998dfd9d596671bd66105051b0d4785e23
MD5 e515d83396e859fee7f5e93df16684af
SHA1 c9e340a681228d66c7e08617e2c667edfa6921d7
SHA512 5f09b4608474da6b726365793411fbda7435f553b28d96e576719b2110b1ce8b40c322ecd4bb0ceed322a87d97d73178511b6ce93a6b24b23e303db0b3b98e1b
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/top_right.png

SHA256 60108954d46e9bdeb10edb0025ad7c172d02e3f8aad3964efcce43ae43710669
MD5 031bcb2b4a9b0ddd7b52377b09756347
SHA1 b6f02eb94cc8d79d40a64ce9edc80706ca565fcd
SHA512 6293fa4ec116a48ce0ab5b72caddf719baa859bb5beb54b29cb87af28a2586ea25377e2a38c86a7f89c5376e3a7bb2354132d44fedd1b03ccbd3c760a0267814
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/transparent.png

SHA256 b1ae29f9c02a8d1760578b68d26c0140b491b55aa3f35241f5f177eb1d3e7a45
MD5 973cd49c587e0dada1958e7f648b9b14
SHA1 339cbd446436edebdaf9bdd25acf4eb521ebe587
SHA512 a4d4bc24ca9d81595288d9969738b51679a995604c56140aeba3c2c35e0aa6c729e28b8c18239b464c4643a53c8ccc99d7547c4019b7e5ee265feaaaa4f8516d
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/upload_icon.png

SHA256 15250d52113238f042681dda8113aa1cc6f2d5c9ca832dce54d442bfa7f66777
MD5 29d9963ab6ead38e7e355cf55115cc7d
SHA1 c939b46aab2043ec9b9eddfcdd76dd819dfb7738
SHA512 c3bd776339250785d6e5f6fbc21bf5f370dfa2530dd6f0f1b2c29ae4144c18ce76fea70c49fe2eb26c198de9899d89aeed5b7eeb908288a08010166d34373df2
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/user_offline.png

SHA256 5cc60014ba47c00f8a64f4b158825c9cc278c3fb27e0fa8c2bf3fb644a734bf5
MD5 24267edd94d4cd35ba60575f36e250f5
SHA1 c2cf6f3924fac41629caf78b7c822784098711be
SHA512 9f6cb7e182b13444519d82b25171d96dd0883f184f821da57144e6428f4c28f82533f1dda46790398eed67958196385a7b474c30b9a77413c9571d212da201e1
SSDEEP 96:JSMllcHitlIxv9vk7C1+I4wWHLihk/x3n4aBHKluRCbJICmj6lLE5t3Od:JSHIIHUCD4waxZqluRCaZMRd
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DefaultSkin/usergame.png

SHA256 397f85bed0c8600c527dd9e5ba2e5103f1ff2cf35aa64c550eab458d449edbe3
MD5 ab3050f685efe694a00a9a364bc714fc
SHA1 e5a7d0e0158768e878a5ff3b541c0b977663440f
SHA512 7e016fa3689e9254d59130e941211d8828aad6e67769313a02d9248020ae675894e19fe4e56ac15790caed2710c90f38fcaf60ee47cc4d9341407d2ab5cdbe6f
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/usergame_bk.png

SHA256 05dc318997ea73871b1f5ebb99e24063aacad816dea2611d15ceb9fe1b48c713
MD5 5aa6ee379471b14edc868aa63aa60f38
SHA1 37364ee2c29f58e03ad2796cded822dd0aca6e10
SHA512 d242c075488584afbe08ffe9fa1456d313a86637c3ef58366006855a0f0be57816b2203e1cefa65d40346ce6bfa5fac92fe8e5ca29c664aa0312313450558c99
MD5 SHA1 SHA512

NSIS installer

installer

skin/DefaultSkin/warning.png

SHA256 cb19c70cc33ab25f43807a4991f4d119a8cd2a79955950f2074dacf2598f7d37
MD5 c2b2eceaf78cab2c92b0eed69a46a50f
SHA1 f6d71201528e7956cd5d6aab96de8fe9f5274349
SHA512 60ac5680430e1ca0215cb5c93ddc2c9facd5204c97a2a9120332df63998b7a8d291a31e68839cc7cfc50fa75549a53f094e554351fbae309ad55c781b08f948c
SSDEEP 96:aSMllcHitlIxv9vk7C1+I4wWHLihk/xBT/0FGfWB1ltueIOn5qrDi+6IKs4itEHL:aSHIIHUCD4wabT/0UeXueTvpsrie+8a
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/Thumbs.db

SHA256 a59c8d00def2167b71e76f1fe93ee3c8fab6c955f20bbc6e5444d5241dec2aee
MD5 815e87368af0afc4ca5b71d2d88991a1
SHA1 bb09544261b274b2b8725677cecfb356e00b6f32
SHA512 c6acce50744a05d77069db33d546d83218dbb285cfd98518448f3ce41ebcd8967bdb88070197b39d4dbd9ff27c6d14253e96229030b78301ce5397991188f39d
SSDEEP 1536:8wSx5svWXID+llw/zGIoGZsJLOPJpZRlUjznzZeHqEUDGMIgxbChobCzxAgs415P:QI6OGpzsAO
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Lang/en_US.dll.new

IMPHASH 5c54715227e960c5019e7a45d4b9d02a
SHA256 ff87b64931f48fb1db2d94f95b9e8b352aa696f950e8c491767ad46eb474db08
MD5 bb0318356c35f4a0c6c59b427208f491
SHA1 00fd513e6d82d0674ea95404fec235decc845aa5
SHA512 9c45b3cda7277bf65d76d1e08413a885a8fc627078a84b77286769e60f10bddc961b064995f2bd9d774d704913cf773fe37e0eb8ed22050a81c1394fb71848f7
SSDEEP 768:aOTlDSvDubNIrytDXSmPzgFhPyvluF8YJWnIR29iKugXrx7pLV5PmSOJ7blGqUex:aOTlDS763DXSKcFGluAgCrX4JKeZ1zZ
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

4313

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Lang/zh_TW.dll.new

IMPHASH 5c54715227e960c5019e7a45d4b9d02a
SHA256 907e22ad579d3e9cc0c95b264c7e2bb568985405e0fb9ff53ce26090d7190bb9
MD5 19dbb99d8b03c081ecdb7e7bc41a7a1c
SHA1 e4437aa11ec2d456791cb1c12618f4755aeb5798
SHA512 31a47411b7b410502ed33788697b4938fc64d593c12a93e94f43bd3373c0111693d7f0936434ec0ad86541496a349a57904f03a34c3fe1a865a85f10756536fa
SSDEEP 1536:0OTlDS763DXSKcFGluSu2jSd//xii4PPnNHf:0uZcFGl59E/Z8nB
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

4313

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

NetAgent.dll.new

IMPHASH f618d4cb4d41a461355f2eab6ae077ff
SHA256 1305f656ebf3e63efad9f828844f0d9a5bdcaf65bb3295c3947b00b052322495
MD5 998ed6748226a24ab900a4410ef522e9
SHA1 85212590067a3edb2416c0552d7a1f3595b777e2
SHA512 bddb67122a03a3e7ad8e492ba4235efe60373a7ceb648b4dcac5fee92e28fad6a7f12fba13924a86b1f96c6fb3b64feefbe18fcc811fe11570a312de4f7f7a73
SSDEEP 1536:rvKt7xujJ3WJTDt6HCCqf+uVo3TQhaLCMd:Qxtcq2uVo3/Jd
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

10:0a:b5:d6:6a:3b:83:25:44:3d:1c:58:79:b2:91:65:cf:37:18:92

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shenzhen QVOD Technology Co.\,Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Shenzhen QVOD Technology Co.\,Ltd,L=Shenzhen,ST=Shenzhen,C=CN

Chains

Oct 14, 2009

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Serial Number

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

May 21, 2009 - May 20, 2019

Subject

CN=Shenzhen QVOD Technology Co.\,Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Shenzhen QVOD Technology Co.\,Ltd,L=Shenzhen,ST=Shenzhen,C=CN

Serial Number

69:d1:ad:9b:16:f2:f2:1b:66:64:ab:8b:27:1f:d5:36

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jun 2, 2009 - Jun 2, 2011

Minor OS version

0

Major OS version

4

Entry point

22561

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

ws2_32

WSAWaitForMultipleEvents WSAEnumNetworkEvents closesocket WSACloseEvent recv WSAGetLastError send socket WSACreateEvent connect WSAEventSelect htons gethostbyname

kernel32

GetStdHandle LCMapStringW LCMapStringA CreateEventA WaitForSingleObject SetEvent RtlUnwind GetLastError MoveFileW DeleteFileW CreateDirectoryW CloseHandle GetFileType CreateFileW ResumeThread CreateThread TlsSetValue TlsGetValue ExitThread GetCommandLineA GetVersion HeapFree RaiseException GetCurrentThreadId TlsAlloc TlsFree SetLastError EnterCriticalSection LeaveCriticalSection FlushFileBuffers WriteFile InitializeCriticalSection DeleteCriticalSection ExitProcess SetFilePointer HeapAlloc SetStdHandle SetHandleCount GetStartupInfoA SetEndOfFile ReadFile TerminateProcess GetCurrentProcess UnhandledExceptionFilter HeapReAlloc HeapSize GetModuleFileNameA FreeEnvironmentStringsA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStrings GetEnvironmentStringsW GetModuleHandleA GetEnvironmentVariableA GetVersionExA HeapDestroy HeapCreate VirtualFree VirtualAlloc IsBadWritePtr SetUnhandledExceptionFilter MultiByteToWideChar GetStringTypeA GetStringTypeW IsBadReadPtr IsBadCodePtr InterlockedDecrement InterlockedIncrement GetCPInfo GetACP GetOEMCP GetProcAddress LoadLibraryA

QvodBand.dll

IMPHASH 0e32a3b828b41920c248142fcbc590d3
SHA256 0b8d06b916f3de18ef4c5918ccd9c0bdb22f3be19a39030e6659cd3c501df2c5
MD5 c08b37155703d2a8d113cd17f264dd29
SHA1 9e85a26f7bfc7bf979f8f5152b0f077c4b4eb33d
SHA512 f047b761c2683310fcc2721e92a212451fc1f2843cb41fd927f93f7153058150d3a92db36e9e27054123963e097ae20504347bcbeaf219f50d951ddc08f51565
SSDEEP 1536:kxsS1aqWpd53AtTNfvJrXffRqVCR474T1lLyPrTRaLCb:kOSUqhPvZXfYvET1lLyPrTc8
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

02:c7:4f:c2:b1:d8:13:17:21:31:17:2e:f8:ad:32:ff:12:0b:61:b8

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shenzhen QVOD Technology Co.\,Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Shenzhen QVOD Technology Co.\,Ltd,L=Shenzhen,ST=Shenzhen,C=CN

Chains

Aug 12, 2009

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Serial Number

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

May 21, 2009 - May 20, 2019

Subject

CN=Shenzhen QVOD Technology Co.\,Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Shenzhen QVOD Technology Co.\,Ltd,L=Shenzhen,ST=Shenzhen,C=CN

Serial Number

69:d1:ad:9b:16:f2:f2:1b:66:64:ab:8b:27:1f:d5:36

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jun 2, 2009 - Jun 2, 2011

Minor OS version

0

Major OS version

4

Entry point

17936

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

WideCharToMultiByte GetModuleFileNameA CreateProcessA GetTickCount GetFileAttributesA CloseHandle Sleep FlushFileBuffers SetStdHandle RtlUnwind GetCommandLineA GetVersion HeapFree RaiseException HeapAlloc GetCurrentThreadId TlsSetValue TlsAlloc TlsFree SetLastError TlsGetValue GetLastError ExitProcess TerminateProcess GetCurrentProcess HeapReAlloc HeapSize InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetCPInfo GetACP GetOEMCP MultiByteToWideChar LCMapStringA LCMapStringW SetHandleCount GetStdHandle GetFileType GetStartupInfoA FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW GetModuleHandleA GetEnvironmentVariableA GetVersionExA HeapDestroy HeapCreate VirtualFree WriteFile VirtualAlloc IsBadWritePtr SetUnhandledExceptionFilter IsBadReadPtr IsBadCodePtr GetStringTypeA GetStringTypeW SetFilePointer InterlockedDecrement InterlockedIncrement GetProcAddress LoadLibraryA

user32

LoadStringA InsertMenuItemA LoadImageA FindWindowA SendMessageA

gdi32

DeleteObject

advapi32

RegDeleteValueA RegDeleteKeyA RegCreateKeyExA RegSetValueExA RegQueryValueExA RegCloseKey RegOpenKeyExA

shell32

DragQueryFileA

ole32

CoTaskMemFree StringFromIID ReleaseStgMedium

QvodInit.exe

IMPHASH 47ca16f9ccfa1108a6da24b0442ee949
SHA256 b0eac2d07b4e53935242e06ddca12baf9f02ca09c0dd9fe9bdc72c77d824eac6
MD5 0c2bf8f2a44bc460e87d5cf3baa63d58
SHA1 93e25c9a19c060df831dfbbaa7eb9acfa102b535
SHA512 f191c1bca69739ed1c88311dbe0af05685177744632b458d2ae0425d1a171c7259e7f4e1d9c2aa2999489a3a525be85101b80d2b2269677a3b82b9c1b60a98c5
SSDEEP 1536:SMBfKFgpr2N6FcGpmN/xjETJJl+Vz0ijKSHTNf2Xh9PRUGVASsu2VNaLCKG:pR4nNJ4TJJl+50iuSzNOrRUm2V4e
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

39:a2:98:8a:4c:3f:8e:b2:d5:60:94:2a:c1:68:b7:f1:f9:82:ec:d7

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shenzhen QVOD Technology Co.\,Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Shenzhen QVOD Technology Co.\,Ltd,L=Shenzhen,ST=Shenzhen,C=CN

Chains

Jun 24, 2010

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Serial Number

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

May 21, 2009 - May 20, 2019

Subject

CN=Shenzhen QVOD Technology Co.\,Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Shenzhen QVOD Technology Co.\,Ltd,L=Shenzhen,ST=Shenzhen,C=CN

Serial Number

69:d1:ad:9b:16:f2:f2:1b:66:64:ab:8b:27:1f:d5:36

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jun 2, 2009 - Jun 2, 2011

Minor OS version

0

Major OS version

4

Entry point

19686

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateProcessA GetTickCount MoveFileA DeleteFileA GetFileAttributesA GetModuleHandleA TerminateProcess GetTempPathA CopyFileA GetLogicalDriveStringsA SetSystemTime GetSystemTime FlushFileBuffers GetStringTypeW GetStringTypeA CreateToolhelp32Snapshot Process32First OpenProcess CloseHandle Process32Next GetDiskFreeSpaceExA GetModuleFileNameA Sleep LoadLibraryA GetProcAddress FreeLibrary GetVersionExA GetWindowsDirectoryA WritePrivateProfileStringA GetTempFileNameA IsBadCodePtr IsBadReadPtr SetUnhandledExceptionFilter IsBadWritePtr HeapReAlloc VirtualAlloc VirtualFree HeapCreate HeapDestroy GetLastError RtlUnwind GetFileType CreateFileA GetStartupInfoA GetCommandLineA GetVersion ExitProcess HeapFree HeapAlloc GetCurrentProcess GetCPInfo GetACP GetOEMCP WideCharToMultiByte MultiByteToWideChar LCMapStringA LCMapStringW WriteFile SetFilePointer ReadFile SetStdHandle SetHandleCount GetStdHandle SetEndOfFile UnhandledExceptionFilter FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW GetEnvironmentVariableA

user32

FindWindowA PostMessageA

advapi32

RegDeleteValueA RegDeleteKeyA RegCreateKeyExA RegSetValueExA RegOpenKeyExA RegQueryValueExA RegCloseKey DeleteService CreateServiceA ChangeServiceConfig2A StartServiceA QueryServiceStatus CloseServiceHandle OpenSCManagerA OpenServiceA ControlService

shell32

SHChangeNotify

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

psapi

EnumProcessModules GetModuleFileNameExA

QvodInsert.dll.new

IMPHASH b56249f6a8367bd8180830f0dae71472
SHA256 b7d18475fc54d8db7f7325626c4080bcb8da27e7e709a04312f5749ed7a60715
MD5 ca51456da40c3ceb882ea881bf2de492
SHA1 088a4572a8ce20bbc088879171a6e08111e509b7
SHA512 93f82cad6c20cd108bbcac8b6a9e570b0fdd5d53bfee6b00db6b2ba0fcd4acbd3674e73f75db25219df17de2ea085f5c4f2e71a44a87d819a15221a95b00f27d
SSDEEP 12288:KHj3cNU8cP5Q/HGY0T1xSaHtrO1iQVx7JX7NxEiwNCAr+no6Vi/k64jSw:KHj3/P5CHnpB/EOArevVi/kSw
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

3b:da:c5:88:e1:27:86:61:f0:fa:24:ef:58:94:20:12:0e:33:05:b4

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shenzhen QVOD Technology Co.\,Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Shenzhen QVOD Technology Co.\,Ltd,L=Shenzhen,ST=Shenzhen,C=CN

Chains

Aug 4, 2010

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Serial Number

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

May 21, 2009 - May 20, 2019

Subject

CN=Shenzhen QVOD Technology Co.\,Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Shenzhen QVOD Technology Co.\,Ltd,L=Shenzhen,ST=Shenzhen,C=CN

Serial Number

69:d1:ad:9b:16:f2:f2:1b:66:64:ab:8b:27:1f:d5:36

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jun 2, 2009 - Jun 2, 2011

Minor OS version

0

Major OS version

4

Entry point

366509

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

GetSystemDirectoryW GetShortPathNameW lstrcmpiW lstrcpynW SizeofResource LoadResource FindResourceW LoadLibraryExW HeapDestroy DisableThreadLibraryCalls lstrcpyW lstrcatW LocalFree SetEnvironmentVariableA SetEndOfFile LoadLibraryA GetOEMCP GetACP CreateFileW IsBadCodePtr IsBadReadPtr CreateFileA SetStdHandle GetStringTypeW GetStringTypeA GetCPInfo SetUnhandledExceptionFilter GetEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsW FreeEnvironmentStringsA GetModuleFileNameA IsBadWritePtr HeapCreate FlushFileBuffers GetDiskFreeSpaceExW LCMapStringW LCMapStringA CompareStringW CompareStringA UnhandledExceptionFilter GetModuleHandleA HeapSize TerminateProcess TlsGetValue SetLastError TlsFree TlsAlloc SetFilePointer GetStartupInfoA GetFileType GetStdHandle SetHandleCount ReadFile ExitProcess RaiseException GetVersion GetCommandLineA HeapReAlloc HeapAlloc HeapFree GetTimeZoneInformation ExitThread TlsSetValue ResumeThread RtlUnwind CreateThread VirtualFree VirtualAlloc GetSystemInfo ReleaseSemaphore CreateSemaphoreW WaitForMultipleObjects GetLocalTime GetSystemDefaultLangID OpenMutexW OpenSemaphoreW GetSystemTime CreateProcessW GetFileAttributesW CreateDirectoryW SetEnvironmentVariableW CopyFileW GetTickCount FreeLibrary GetPrivateProfileIntW GetCurrentThreadId lstrcmpW GetCurrentProcess FlushInstructionCache DeleteFileW FindNextFileW GetLastError WaitForSingleObject ResetEvent FindFirstFileW FindClose Sleep GlobalAlloc GlobalLock GlobalUnlock DeleteCriticalSection CloseHandle CreateEventW SetEvent InitializeCriticalSection EnterCriticalSection LeaveCriticalSection MultiByteToWideChar lstrlenA OutputDebugStringW DebugBreak WideCharToMultiByte GetModuleFileNameW GetLongPathNameW InterlockedIncrement LoadLibraryW GetProcAddress GetVersionExW GetUserDefaultLangID lstrlenW InterlockedDecrement WriteFile

user32

LoadStringW DefWindowProcW GetClientRect ReleaseDC FillRect GetDC SendMessageW IsWindow CharNextW ReleaseCapture SetWindowPos CreateWindowExW SetWindowLongW GetWindowLongW CallWindowProcW SetCapture wvsprintfW SetDlgItemInt GetActiveWindow DialogBoxParamW ClientToScreen CreateMenu GetKeyState MessageBoxW SetWindowRgn OffsetRect EqualRect IntersectRect DrawTextW DestroyWindow SetTimer SetRectEmpty RegisterClassExW wsprintfW LoadCursorW GetClassInfoExW RegisterWindowMessageW GetWindow SetWindowTextW GetWindowTextW GetWindowTextLengthW MoveWindow InvalidateRect FindWindowExW ShowWindow PostMessageW BringWindowToTop ShowCursor GetDesktopWindow PtInRect ScreenToClient GetCursorPos UnionRect CharLowerW GetDlgItemTextW CheckRadioButton SetDlgItemTextW GetDlgCtrlID EndDialog GetSystemMetrics SetRect SystemParametersInfoW EnumDisplayDevicesW EnumDisplaySettingsW SetParent RegisterHotKey UnregisterHotKey GetSubMenu TrackPopupMenu KillTimer EnableWindow CreateDialogParamW CreatePopupMenu AppendMenuW DestroyMenu InsertMenuW GetDlgItem InvalidateRgn CreateAcceleratorTableW RedrawWindow BeginPaint EndPaint GetFocus IsChild SetFocus SetCursor GetParent LoadBitmapW GetClassNameW LoadImageW EnumChildWindows GetSysColor SetSysColors GetWindowRect

gdi32

GetDeviceCaps GetObjectW StretchBlt CreateCompatibleBitmap CreateCompatibleDC SelectObject GetStockObject BitBlt DeleteDC CreateFontIndirectW DeleteObject CreateDIBSection CreatePatternBrush TextOutW SetTextAlign Rectangle SetBkMode SetTextColor RestoreDC SetViewportOrgEx SetWindowOrgEx SetMapMode SaveDC LPtoDP CreateDCW CreateRectRgnIndirect DeleteMetaFile SetWindowExtEx CreateMetaFileW SetDIBits CreateSolidBrush CloseMetaFile GetDIBits

comdlg32

GetOpenFileNameW ChooseFontA ChooseColorW GetSaveFileNameW

advapi32

RegQueryInfoKeyW RegOpenKeyW RegDeleteValueW RegDeleteKeyW RegEnumKeyExW RegQueryValueExW RegEnumValueW RegCloseKey RegSetValueExW RegOpenKeyExW RegCreateKeyExW

shell32

ShellExecuteW

ole32

OleSaveToStream WriteClassStm OleLoadFromStream CoTaskMemRealloc CoInitializeEx OleLockRunning CoTaskMemAlloc CLSIDFromString CLSIDFromProgID CoTaskMemFree CoInitialize OleUninitialize OleInitialize CreateStreamOnHGlobal StringFromCLSID CoCreateInstance OleRegEnumVerbs OleRegGetMiscStatus CoUninitialize CoFreeUnusedLibraries CreateDataAdviseHolder OleRegGetUserType CreateOleAdviseHolder

oleaut32

GetErrorInfo VariantChangeType LoadTypeLi RegisterTypeLi VarUI4FromStr OleCreateFontIndirect SysAllocStringLen DispCallFunc LoadRegTypeLi SysStringLen OleCreatePropertyFrame SysStringByteLen SysAllocStringByteLen VariantInit SafeArrayCreate SafeArrayPutElement VariantCopy SysAllocString VariantClear SysFreeString

ws2_32

WSAStartup WSAWaitForMultipleEvents WSAEnumNetworkEvents WSACreateEvent WSACloseEvent htonl connect recv inet_addr htons send WSAEventSelect setsockopt closesocket socket WSAGetLastError ntohs ntohl gethostbyname inet_ntoa

winmm

timeGetTime

quartz

AMGetErrorTextW

comctl32

ImageList_LoadImageW _TrackMouseEvent InitCommonControlsEx ImageList_Destroy ord16

msimg32

AlphaBlend TransparentBlt

QvodPlayer.exe

IMPHASH 8b9510c23e0243d07bf8e983a8e06dd3
SHA256 ee063d7c2e0e39fc0ff3df71ce70745bd1610b4c975f2f947e698e7980758269
MD5 0557b4d095d0ed52f56535310c6e76c4
SHA1 abad6544771c4d3c55f28681dc7f29055ee2d5fd
SHA512 d90928fb4538eff2c28d4b39b79b26739abef4e426c269d25333def59b255c6a1b223db86e1ae3a2704eabbab7efdebc74ea4704d8b14ec8c0135e616acfc2b7
SSDEEP 49152:R9wZWLoJU5P5jLfVNzOTlb2LXISFQJvYM2RStXIN1Xd9pXgvq7/pXswnsfys:wwcufo2LXISiJvYMLtXIN1Xd9pXgvq72
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

bb:a1:69:e7:fc:80:b1:08:50:fc:20:e1:0e:89:e3:59:1b:52:a4:e5

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shenzhen QVOD Technology Co.\,Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Shenzhen QVOD Technology Co.\,Ltd,L=Shenzhen,ST=Shenzhen,C=CN

Chains

Nov 12, 2010

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Serial Number

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

May 21, 2009 - May 20, 2019

Subject

CN=Shenzhen QVOD Technology Co.\,Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Shenzhen QVOD Technology Co.\,Ltd,L=Shenzhen,ST=Shenzhen,C=CN

Serial Number

69:d1:ad:9b:16:f2:f2:1b:66:64:ab:8b:27:1f:d5:36

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jun 2, 2009 - Jun 2, 2011

Minor OS version

0

Major OS version

4

Entry point

921975

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindFirstChangeNotificationW GlobalSize CreateProcessW OpenSemaphoreW GetDiskFreeSpaceExW SystemTimeToTzSpecificLocalTime RemoveDirectoryW FileTimeToSystemTime GetWindowsDirectoryA CompareFileTime SystemTimeToFileTime MoveFileW GetTickCount GetTempPathW CreateMutexW OpenMutexW HeapDestroy LocalFree SetEnvironmentVariableA GetOEMCP GetACP LoadLibraryA GetStringTypeW GetStringTypeA GetCPInfo IsBadCodePtr IsBadReadPtr SetUnhandledExceptionFilter GetModuleFileNameA GetCommandLineA GetCommandLineW GetEnvironmentStrings GetEnvironmentStringsW FreeEnvironmentStringsW FreeEnvironmentStringsA FlushFileBuffers SetEndOfFile GetStartupInfoA FindNextChangeNotification SetHandleCount SetStdHandle CompareStringW CompareStringA LCMapStringW LCMapStringA SetFilePointer ReadFile UnhandledExceptionFilter HeapSize TerminateProcess WriteFile IsBadWritePtr HeapCreate TlsGetValue SetLastError TlsAlloc ExitProcess GetVersion GetStartupInfoW GetModuleHandleA HeapReAlloc CreateFileA GetFileType GetFileAttributesA ExitThread TlsSetValue ResumeThread GetTimeZoneInformation RtlUnwind CreateThread InterlockedExchange VirtualFree VirtualAlloc GetSystemInfo ReleaseSemaphore CreateSemaphoreW WaitForMultipleObjects FindCloseChangeNotification GetLocaleInfoW GetLogicalDriveStringsW GetModuleHandleW GetDriveTypeW GetVolumeInformationW SetSystemPowerState SetThreadExecutionState lstrcpynA lstrcpynW SetEnvironmentVariableW GetSystemDirectoryW CopyFileW GetSystemTime WritePrivateProfileStringW GetPrivateProfileIntW GetPrivateProfileStringW CreateFileW DeviceIoControl GetProcessHeap HeapAlloc HeapFree lstrcpyW lstrcmpW GetCurrentProcess FlushInstructionCache GetCurrentThreadId WaitForSingleObject ResetEvent Sleep GetWindowsDirectoryW GlobalAlloc GlobalLock GlobalUnlock GetLastError CloseHandle DeleteCriticalSection InitializeCriticalSection CreateEventW SetEvent EnterCriticalSection LeaveCriticalSection FindFirstFileW FindNextFileW FindClose MultiByteToWideChar lstrlenA WideCharToMultiByte GetModuleFileNameW GetFileAttributesW CreateDirectoryW SetFileAttributesW GetLocalTime DeleteFileW InterlockedIncrement GetUserDefaultLangID lstrlenW InterlockedDecrement GetVersionExW GetProcAddress FreeLibrary LoadLibraryW GetStdHandle RaiseException

user32

CheckRadioButton SetDlgItemInt GetActiveWindow DrawTextW IsMenu GetDlgCtrlID SetDlgItemTextW GetDlgItemTextW EndDialog DialogBoxParamW ClientToScreen EnumDisplayDevicesW EnumDisplaySettingsW SetParent SetMenuItemInfoW DeleteMenu EnableWindow ExitWindowsEx CloseClipboard GetClipboardData OpenClipboard GetDlgItemInt GetDlgItemTextA OffsetRect UpdateWindow SetForegroundWindow CreateMenu MessageBeep TrackPopupMenuEx GetMonitorInfoW MoveWindow ShowWindow PostMessageW DestroyAcceleratorTable GetWindowRect GetDesktopWindow MessageBoxW LoadStringW CharNextW CopyAcceleratorTableW LoadAcceleratorsW DefWindowProcW MonitorFromPoint MapWindowPoints PeekMessageW RemoveMenu WindowFromPoint GetKeyState DestroyIcon UnionRect DispatchMessageW TranslateMessage GetMessageW GetScrollInfo GetMenuStringW ModifyMenuW GetMenuItemID GetClientRect ReleaseDC FillRect GetDC SendMessageW wsprintfW IsWindow SetCapture ReleaseCapture SetWindowPos CreateWindowExW SetWindowLongW GetWindowLongW CallWindowProcW DestroyWindow SetRectEmpty LoadCursorW SetTimer RegisterClassExW CallNextHookEx GetClassInfoExW InvalidateRect FindWindowExW ShowCursor CharLowerW RegisterWindowMessageW LoadMenuW SetRect GetWindow SetWindowTextW GetMenuItemInfoW GetSystemMetrics GetSystemMenu TrackPopupMenu SystemParametersInfoW CopyRect IsZoomed IsIconic UnregisterHotKey FindWindowW LoadIconW CheckMenuItem CheckMenuRadioItem EnableMenuItem CreateDialogParamW GetSubMenu RegisterHotKey SetWindowsHookExW UnhookWindowsHookEx CreateAcceleratorTableW GetWindowTextW GetWindowTextLengthW TranslateAcceleratorW GetKeyboardState PostQuitMessage LoadStringA CreatePopupMenu AppendMenuW DestroyMenu GetMenuItemCount InsertMenuW InvalidateRgn RedrawWindow GetFocus IsChild SetFocus BeginPaint EndPaint GetDlgItem wvsprintfW SetWindowRgn LoadBitmapW GetClassNameW LoadImageW EnumChildWindows GetSysColor SetSysColors GetParent SetCursor GetCursorPos ScreenToClient PtInRect BringWindowToTop KillTimer

gdi32

SetViewportOrgEx Rectangle CreatePatternBrush GetTextExtentPoint32W SetDIBits SetBkColor ExtTextOutW GetCurrentObject GetPixel CreatePen MoveToEx LineTo CreateDIBSection SetStretchBltMode StretchDIBits SetTextColor GetDIBits SetBkMode CreateFontIndirectW GetStockObject GetDeviceCaps CreateRectRgn CombineRgn GetObjectW StretchBlt CreateCompatibleBitmap CreateCompatibleDC SelectObject BitBlt DeleteDC RoundRect CreateSolidBrush DeleteObject

comdlg32

ChooseColorW ChooseFontA ChooseFontW GetOpenFileNameW GetSaveFileNameW

advapi32

RegCloseKey AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegQueryValueExW RegOpenKeyExW RegSetValueExW RegCreateKeyExW RegDeleteKeyW RegDeleteValueW RegOpenKeyW

shell32

SHFileOperationW Shell_NotifyIconW SHChangeNotify SHAppBarMessage ExtractIconW DragFinish DragAcceptFiles ShellExecuteW SHBrowseForFolderW DragQueryFileW SHGetPathFromIDListW

ole32

CLSIDFromProgID CoTaskMemFree OleUninitialize CLSIDFromString CreateStreamOnHGlobal CoInitialize StringFromCLSID CoCreateInstance CoTaskMemAlloc OleLockRunning CoFreeUnusedLibraries CoUninitialize CoInitializeSecurity OleInitialize

oleaut32

SysFreeString OleCreateFontIndirect SysAllocStringLen DispCallFunc LoadRegTypeLi SysStringLen OleCreatePropertyFrame VariantInit VariantCopy VariantClear SysAllocString GetErrorInfo

ws2_32

gethostbyname inet_ntoa ntohl WSAStartup WSACleanup WSAEnumNetworkEvents WSACreateEvent WSACloseEvent WSAEventSelect gethostname htonl inet_addr htons recv send WSAGetLastError socket setsockopt connect closesocket ntohs WSAWaitForMultipleEvents

winmm

mciSendStringW timeGetTime

quartz

AMGetErrorTextW

iphlpapi

GetAdaptersInfo

comctl32

_TrackMouseEvent ord16 ImageList_Destroy ImageList_Draw ImageList_GetImageInfo ImageList_EndDrag ImageList_DragLeave ImageList_DragShowNolock ImageList_DragEnter ImageList_DragMove ImageList_GetImageCount ImageList_AddMasked ImageList_Create ImageList_BeginDrag ImageList_LoadImageW InitCommonControlsEx

msimg32

AlphaBlend TransparentBlt

urlmon

CoInternetGetSession

QvodTerminal.exe

IMPHASH ab3720bea80ad42dc7af1b82fad3592a
SHA256 a21a88804354ee39394bfa0f909b0886cf8387c8dc8040da7f398db262c98165
MD5 bee85cf974d640d35598c538e4b67a16
SHA1 f31dbf3f364b25158a3eb42f3f3cf5c9e8c2c7ec
SHA512 572a902dec73bfc049759ec38276bd9ae59d6d037f7ec589d91b3eecb02d051f4820539d06dd6bcc08bdb5d8c89406c6a784849a66c08c934a26d266b5a1f00c
SSDEEP 12288:z74EFsKmSlc4BLt5lPChvp/HTI3oDopZGN42HQP5Ue7DA:z74EFstSlc45teKsopwN4TPGwA
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

ae:bb:f2:fa:ef:51:1d:a4:f8:d2:3b:57:77:0e:66:e0:50:61:54:77

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shenzhen QVOD Technology Co.\,Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Shenzhen QVOD Technology Co.\,Ltd,L=Shenzhen,ST=Shenzhen,C=CN

Chains

Jun 24, 2010

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Serial Number

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

May 21, 2009 - May 20, 2019

Subject

CN=Shenzhen QVOD Technology Co.\,Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Shenzhen QVOD Technology Co.\,Ltd,L=Shenzhen,ST=Shenzhen,C=CN

Serial Number

69:d1:ad:9b:16:f2:f2:1b:66:64:ab:8b:27:1f:d5:36

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jun 2, 2009 - Jun 2, 2011

Minor OS version

0

Major OS version

4

Entry point

352307

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

ws2_32

__WSAFDIsSet inet_addr recvfrom getpeername inet_ntoa ntohs gethostbyname WSAWaitForMultipleEvents WSAEnumNetworkEvents accept htonl connect select setsockopt socket htons bind listen WSACreateEvent WSAEventSelect ntohl send WSAJoinLeaf WSASocketA ioctlsocket gethostname recv WSAStartup WSAGetLastError WSACloseEvent sendto closesocket

version

GetFileVersionInfoA VerQueryValueA GetFileVersionInfoSizeA

iphlpapi

GetAdaptersInfo

ole32

CoCreateInstance CoCreateGuid CoInitialize CoUninitialize

oleaut32

VariantClear SysAllocString SysStringLen SysFreeString

kernel32

InterlockedExchange SetEnvironmentVariableA CompareStringW CompareStringA GetLocaleInfoW GetOEMCP GetACP GetUserDefaultLCID EnumSystemLocalesA GetLocaleInfoA IsValidCodePage IsValidLocale GetCPInfo GetStringTypeW GetStringTypeA IsBadCodePtr IsBadReadPtr IsBadWritePtr VirtualAlloc VirtualFree HeapCreate HeapDestroy GetEnvironmentVariableA GetEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsW FreeEnvironmentStringsA LCMapStringW LCMapStringA SetUnhandledExceptionFilter UnhandledExceptionFilter HeapSize HeapReAlloc GetStdHandle SetHandleCount SetEndOfFile SetStdHandle SetLastError TlsAlloc GetCurrentThreadId GetVersion GetCommandLineA GetModuleHandleA LeaveCriticalSection EnterCriticalSection TryEnterCriticalSection InitializeCriticalSection DeleteCriticalSection MoveFileExA Sleep MultiByteToWideChar CreateEventA CloseHandle SetEvent GetTickCount WaitForSingleObject GetPrivateProfileStringA GetPrivateProfileIntA WritePrivateProfileStringA InterlockedDecrement QueryPerformanceCounter GetSystemTime InterlockedIncrement CopyFileA CreateSemaphoreA OpenSemaphoreA HeapFree HeapAlloc GetProcessHeap MoveFileA LocalFree LocalAlloc GetSystemDirectoryA GetVersionExA GetModuleFileNameA GetLocalTime WideCharToMultiByte FindClose FindNextFileA FindFirstFileA GetTempPathA CreateProcessA GetDiskFreeSpaceExA GetLastError TerminateProcess ReadFile PeekNamedPipe GetWindowsDirectoryA GetStartupInfoA CreatePipe GetProcAddress LoadLibraryA lstrlenA lstrlenW CreateThread RtlUnwind GetFileType CreateFileA CreateDirectoryA DeleteFileA FlushFileBuffers WriteFile SetFilePointer ResumeThread TlsSetValue TlsGetValue ExitThread CreateDirectoryW CreateFileW GetTimeZoneInformation GetSystemTimeAsFileTime RaiseException ExitProcess GetCurrentProcess

user32

CreateWindowExA LoadIconA DefWindowProcA BeginPaint GetClientRect DrawTextA EndPaint LoadCursorA RegisterClassExA LoadAcceleratorsA GetMessageA TranslateAcceleratorA TranslateMessage DispatchMessageA PostQuitMessage

advapi32

RegOpenKeyA RegCloseKey

QvodUninst.exe.nsis

SHA256 3680e32025e663f7eb30fa7b19b9841b01c9ee40a4969a3fd7cfabad92c534ed
MD5 7cc8a2b58374dbda6719f568071f9d31
SHA1 51ab6e124823ddfba506eba0d34bf259f9646df5
SHA512 939ee2a17cd389a33c6adefc5427d841366b7ca3c2545d24c68e10e52e1f77b7132035bed7c3e82bdc8850c5e9c0ecfb9e6d5bec3d3385c89a33e8aaae8017e3
SSDEEP 768:5JUdH7fafgtOLDJoG02+1aSYp4YIsVAM8AQpnOsUcEt7dw4PN:XIH7C4rISSRVA9E7VN
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

ShareModule.dll

IMPHASH 4d31033905b7f9799eebc95dce22db30
SHA256 3bdfb7ce0f864681964d54fcaf2dd835545760822046a283a5f901c212325cb5
MD5 bc3284a59108c3326791ba7c44133480
SHA1 8c5a6e364d870b6806b72988ed1548c313a584e8
SHA512 d9c87ef8c2bbb8d41409725c70b73f82d6723b6d43ce6fa1be8cda8fd2d8b35b061a2f3d03440ade22b49119d19391283e2075a79eb06b52f605b8f2c08a7580
SSDEEP 3072:xG1w60YJt2UVQT0b0DlG7Q0n7YlJksnUCqqJ:xGSY5GT0cG7xKxqqJ
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

f6:1c:2a:76:28:e8:f5:f2:8b:66:2d:3b:b5:1d:16:15:75:9f:39:d4

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shenzhen QVOD Technology Co.\,Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Shenzhen QVOD Technology Co.\,Ltd,L=Shenzhen,ST=Shenzhen,C=CN

Chains

Jun 24, 2010

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Serial Number

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

May 21, 2009 - May 20, 2019

Subject

CN=Shenzhen QVOD Technology Co.\,Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Shenzhen QVOD Technology Co.\,Ltd,L=Shenzhen,ST=Shenzhen,C=CN

Serial Number

69:d1:ad:9b:16:f2:f2:1b:66:64:ab:8b:27:1f:d5:36

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jun 2, 2009 - Jun 2, 2011

Minor OS version

0

Major OS version

4

Entry point

42273

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

WideCharToMultiByte GetFileAttributesW OpenMutexW DebugBreak OutputDebugStringW GetModuleFileNameW HeapFree HeapAlloc GetProcessHeap DeviceIoControl CreateFileW GetShortPathNameW GetModuleHandleW FreeLibrary SizeofResource LoadResource WaitForSingleObject GetLastError LoadLibraryExW lstrcmpiW lstrcpynW DisableThreadLibraryCalls InitializeCriticalSection HeapDestroy DeleteCriticalSection LeaveCriticalSection EnterCriticalSection lstrcpyW lstrcatW GetProcAddress LoadLibraryW SetEnvironmentVariableA LoadLibraryA GetOEMCP ResetEvent CloseHandle CreateEventW SetEvent lstrlenW MultiByteToWideChar lstrlenA Sleep InterlockedIncrement InterlockedDecrement GetPrivateProfileIntW FindResourceW GetACP GetCPInfo LCMapStringW LCMapStringA IsBadCodePtr IsBadReadPtr SetUnhandledExceptionFilter GetStringTypeW GetStringTypeA FlushFileBuffers WriteFile RaiseException GetEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsW FreeEnvironmentStringsA IsBadWritePtr VirtualAlloc VirtualFree HeapCreate GetVersionExA GetEnvironmentVariableA GetModuleFileNameA CompareStringW CompareStringA UnhandledExceptionFilter GetFileType CreateFileA GetTimeZoneInformation GetSystemTime GetLocalTime RtlUnwind ResumeThread CreateThread TlsSetValue TlsGetValue ExitThread HeapReAlloc GetCommandLineA GetVersion ReadFile SetFilePointer SetStdHandle SetHandleCount GetStdHandle GetStartupInfoA SetEndOfFile ExitProcess TerminateProcess GetCurrentProcess GetModuleHandleA HeapSize GetCurrentThreadId TlsAlloc TlsFree SetLastError

user32

LoadStringW CharNextW wvsprintfW CharLowerW

advapi32

RegQueryInfoKeyW RegEnumKeyExW RegDeleteValueW RegDeleteKeyW RegCreateKeyExW RegSetValueExW RegOpenKeyExW RegQueryValueExW RegOpenKeyW RegCloseKey RegEnumValueW

shell32

ShellExecuteW

ole32

CoTaskMemFree CoTaskMemAlloc CoTaskMemRealloc CoCreateInstance CoInitializeEx

oleaut32

RegisterTypeLi SysFreeString SysAllocString VariantClear VarUI4FromStr LoadTypeLi LoadRegTypeLi SysStringLen

ws2_32

setsockopt socket htons ntohs closesocket WSAStartup ntohl WSAGetLastError recv send htonl inet_addr connect

iphlpapi

GetAdaptersInfo

Skin/Default.xml

SHA256 f0e028a46d1d48535acb707780707a2e31ed3819761521b4e08e01ee17fe760b
MD5 4cb17ec120f37dddb8823564a31167c1
SHA1 f03da9bbc0d353f2da9021e29c2198bc969b3d1d
SHA512 dae598596b053ee717ca7f9fb82e47227ddb69fc995b657120e4bf8d78be347abd43089ac86014625145c12ca8aeb35c81d2521b53cbbd52f4ba6058cbf28312
SSDEEP 192:ONIsRGH1Km7lFcx6JNoYEABQWUMMmJqN9CraHUe0MnNxQSEb3yue0+N:sIH1Km7lWW5Ms9rIUewSEb3yueBN
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Skin/Default/back.bmp

SHA256 e2f254ab932e3a75a759446b9630db82753dab9de24296e791952a2033d827af
MD5 094f75a813f892cff84698502ad3b661
SHA1 304590347e60f2dd60e7670488832d74ecdd23bb
SHA512 07876eb54fd03dfbbc9a089de55c0cb24cb8352b901efd44b59f8e04678fd6a73e210766cc9e51991077eea28d00118914ef47e29e97f49cfeb5158c602dd346
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Default/backleft.bmp

SHA256 4026e858a6c384373f0c98cbdfcd8b4720613a3987e86c3ee39910729b7a01e0
MD5 ffcfb4ff3a81bb460d4ac3eb3240182b
SHA1 f2988342d296307c6029f696e7f6286e626ed1d0
SHA512 04d54fba4507bf42330ffc7ac93091d6645dd6ddfb9273946f3709b6d70010362a2d17503e8429dafd0bab2344138a44601239c8b44fd049d4b985e7e9b15283
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Default/backmid.bmp

SHA256 252ddb705e2124c29a75fae1d3e3b0bd1b953fb6da2621a615644b0fda2a2ee7
MD5 e0880ccaaa049087f564e0e2c4ffac72
SHA1 8a2d42d212def8ce94417372e60271a6676fa3a6
SHA512 f7d3f415ae47a9bf4d8958a4795da0bb767e8267144abdd01f31c555b9a2dc9ff0159dbaed83147d3fe35c5514722e9300585a409cd56cb837b842d3d59069fd
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Default/backright.bmp

SHA256 49d4cb6f1a9c904914739789d482fa3a6b4f12ccd0915ed8431380f3b55bbdac
MD5 98da2e16fe7e5526a35b66b069d93bbd
SHA1 7f9d24c14e677bb665bf430930bf8b4968b3b8de
SHA512 e21322a29a90d4fc56a8dcac01549ad890cd388ce8360afe01abf34ecbc72116dd5d02d4e82a9bf4ef1f3da8fec8eeb2b6c25dadea2ea1dd64528088da6990cc
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Default/bgline.bmp

SHA256 ba56ad8eefc63bcfea8670a51af731f7c440ab6c7bdc955d38c7450c1cb812d4
MD5 777cfbc8d1a112eacda4ebfb9d61c7d9
SHA1 519e4de913a90f3b831b6c420815bbd6388e2e38
SHA512 ba3fef0677b7c21148dd89e1debb8e074d090214180b699bc298425218e76c909d96f38e1a9c79238a3b81085a773df056d544393179cb73c9acb278a1351c64
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Default/bleft1.bmp

SHA256 fc43e42123988ffccc3dbb5d274f64fdd429ee41bf79c0a0782f6867cd862534
MD5 f897b9ee43da6dc6159a00b24b6a3f00
SHA1 813414244d8239cbab16e24cee39baefa5fba240
SHA512 4d789e424285ed2ee7633738c699a0095c990bc410caea006956574858221b6642df244f37e2742ceaaeb201c0c32f7a7c5fe90fe601f6f9a532a45a4c3a2a24
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Default/bottom.bmp

SHA256 946141beac252174ba273f36b4f047f00366ebf4315a6410ed40318350448f6c
MD5 9441d1a0e27ad3940f10c0bfa26b2e65
SHA1 601295bd8b16b8b7b997c47048f89d5017239997
SHA512 b0833c24fecca9c04c760d66e26dfc9fc1a6ea0c4afcbdfd8959a7e6cd136eb6039eb34a1b48c25f14c6f4589b8e778897702ad50935972f89d223899d0ffaeb
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Default/bottomleft.bmp

SHA256 776e4ce04cf6eb5509c9de56a394e874287c2222314cbe48005840cd8f6f3d18
MD5 ae1a7d76f6f17c261e9957dfa1805a42
SHA1 310a9d9263b08287136b7fb288970d5785762fb9
SHA512 3d2c8dbebf724fa3d155887762913ceaea81e790e269d94e826d98a53b7fafb0b3ac07529532a09f878985e0406a78c3baa23ade01a308a1882c078ac66c16a4
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Default/bottomright.bmp

SHA256 e990ca18cd548509760b11d3b9dc699d52766de2fbae453603f64cad962e0acb
MD5 a57125e09ace557429cebf6c184fbec0
SHA1 005b009ad2e82d0de813643ed6e24deac6d45a0a
SHA512 86be0150b8318ec2ea3c4b4d1d28d3dc210ccdfd250b53eb27ec7eb7b4fe774e16632bb14ed503d120670dd90e7be18309266aefd78d9e9f43a71e334bd0aaba
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Default/bright1.bmp

SHA256 e92d6d0ac6f604b94018e43e85157eb53e07a8249fdbd34943d2aab516b97fa9
MD5 0d2f10b7ab1094f5e3b1f093e5a65fdc
SHA1 09a86f4d3c251f8e86761c7124980f73756c269d
SHA512 73accfc3854022b314209b504447cc92aafe19561e88b79426dd6378a8fefa0fd32ef18f02cdbef5eecc332fff80743551986e98ef86516bf7188b62a7b0abe8
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Default/caption.bmp

SHA256 e7e32a574a17363de68160d86499951c32d54cd042ff66841947827c88607013
MD5 beb80f24df2b6c088b801e971baec916
SHA1 1032811963d51ff922e2cfb2f0321ec5597f50db
SHA512 5e42ba4087b7cf60465305639b060e05bf5fc6ec767d3079d463f0a9aa5df7762a454f8739e5a64480df07fcbe9bb907406b6eebb78adb6d8b0c9daa150e5002
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Default/close.bmp

SHA256 a7144401f38a5dba63ccca833ff817e7fc3c9e6cf559c7c90298e7e2e8e72474
MD5 50028d95eb8ba439e744e86efb6abd6e
SHA1 8108b57fbf1b0fe59ccc81ea510244eba2acdae7
SHA512 0c95ca3753fb9cddf938c195f8efd416b8ad18ce7e26de74089b15d444ea591b9414f85c483cf6679fb640aa274a750f852873210b78ae0ae1fecfaa93ba9392
SSDEEP 48:UFdpswmkrrrrrrrrrrrrrrrrrrrrrrmrrrOrrrrrrrrrrrrrrrrrrrrrrC/Byve7:SdGwUJyvVaY3P0Lakmf95+OydsZW
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Skin/Default/full.bmp

SHA256 5384745435bcf88146f59dc00c7bdfb99b968772aa3652c3221368b2419c49fb
MD5 369b810520f12d37fa427301c646537d
SHA1 eda89fe19a14c6c045301936c888d9a2c610ff4b
SHA512 d87f484b50871bb8e572d2f9702625251f2f33ae67a0c5e0b8c6f56b51d59a5c49424c8cb025465e5a3f5963575471bd4799dcf86b4e665d70df061ccaf19f35
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Default/icon.bmp

SHA256 05d871c7d5dc8fab33926e44bb36a2865e7b818a16b365d1ba19dd9deae34ee5
MD5 8ca2fc5537409f489baddf0678b93341
SHA1 2a3d7781749291eacc1e0dff5108bb42944e491f
SHA512 83714681ee96a08acc97cb28ca45a9179f68e225b11ee9e6abb600357e0812e3eb9cbdcb988b8cd6957342974bcd4f8531e7fb5b29883f0cace1ba26134f6b2a
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Default/info.bmp

SHA256 29ae4f423bee01ed4171017ed3b245118eccd6b291d1c7df024dc7afc6a57494
MD5 ceb76e3bd6e60674cbdef57d7983e5de
SHA1 bb5e7abe3b093f60347ecef309be574e713bcef1
SHA512 c2002edf9aca53338ccea3c40fd4aaaa4e03299bd3dffed589bb0072bb2e018b0c8deedbcf5af4e75aa37b8c3d419ea86d4c92f909854ad32f2fa157763705b9
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Default/infofull.bmp

SHA256 133c2584d6ba6081ca2c3f30a6c7822a0fcf06428c35290c4171748287da23cb
MD5 59ffe285fcfaffaa323fd2da23054cf0
SHA1 afd515146d376be7a92d4ec3fa76b4a1b6e13f6e
SHA512 94a4bd02b42d3e5926508baa97341f753a9d30d34bdf182703abb0da4c58d7aa0e9b61d2d49f5d646d5430980ec73757fdf59119eb328186493530c26ac912d2
SSDEEP 192:bPIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIII6:bx
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Skin/Default/left.bmp

SHA256 16f871aa1b4a6163e3b531a0069c1d0f6dd7e08c37e8b5ad53f6ae12484eabe7
MD5 7757287dff90ef5636315c1502bb2aa1
SHA1 af87acd776852fe5d61a54ebb8ac70e8254721da
SHA512 6236c5030cdcdbb43136a5e242cc5d86eda05b9478f462afee57015a1c28287213a622dddca5c7fbeec0cbb65ac5a13ff486e8a9ce202c4a9dafe3d15b5cda38
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Default/left1.bmp

SHA256 763c6ebf0980b9209c2987adc3549d4e27beea2e798bc2f9ff12401fc47581ba
MD5 497225869c6827197022eb0560b565f6
SHA1 d00ba1dffb3383ab3a161e67c51a9b963d29a410
SHA512 1afa337d18d438a8583a66cf28a741900cb01fbacc0dbebad09ee97fb5c6c29ef6586fe8a2c63f1a9bff4797d18b6ba5d5699f246bf87d5d86e21e4883d63c3c
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Default/listbutton.bmp

SHA256 e86a21fcdb4e5b2828103d0179e7d18420709f74dbc475078b9100ce6ee21296
MD5 2de87ec4f71a83b340d99e0186e160d5
SHA1 f1d1ce949a989d4d29a93c7079c6bdc94312bf0b
SHA512 5ac2d50ef35882597174d9732a454b03de6271598bdaba9bae555d2295c4f32723bd34c2895c63abce997a8040c107bac49a686d3a6c2af9e5608cb2322fba1b
SSDEEP 192:xDY0lKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKcKKKKy:pLlKKKKKKKKKKKKKKKKKKKKKKKKKKKKE
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Skin/Default/listbutton2.bmp

SHA256 f2be488ed2ea026075d933f6a09d7b412f4d0c4dfc7ab4a3b2f074ccc48e3193
MD5 53e83d7db7fb6e3c70bd53067ad19eb0
SHA1 801492092ec70d2b3cb66de2b07290d92573a239
SHA512 ed354ce8fdb8851b317ef64545e109831e994efe9ed734dcabb355a4876cea84ca8a1d7c8c6c63253e41ad26f0886ea62bc3797c039d76361ffc7882096887d5
SSDEEP 192:xDdYSXTveAUgF7KKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKf:pdYSXTFUgF7KKKKKKKKKKKKKKKKKKKK2
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Skin/Default/listsplit.bmp

SHA256 fc5387628aafa40acac9b173cc1475b61b2fb81e244fd8743af00cbd6075981c
MD5 64a75c443dc7850235fada48879bd5d9
SHA1 a9320ea10a7bb985c4afee04e898049db44abea4
SHA512 dad298aaa5714396dbc648f7b8b219368d828102adf53e436c9432d08bb57207c146229ce75d688bebe54d830cb114cd3536ecf9afefb5ff7db5a498f97c9550
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Default/lsearchb1.bmp

SHA256 b38d8ecdf305007cec8f887da6247d24803f9edea54d55ffb12a7d1439a6fe53
MD5 e6da75affd18223f469e8f352b7f3d93
SHA1 2377fe1d955275cc4e2ebb9d9c76bdf5e4a92ef9
SHA512 5a2bdf7ece0eab376b664cf87f297778dec1a0e6153e4f1c82dd3649dda944d4fca08bf0d5da610756d015341ed8b87c2c96eeda18070cb1d99f025927e95980
SSDEEP 12:uec52ZozIzY/kw++w++w++w++BKUw0yAo3Uw0y+Y5qEwn/bs/+I/7JEC3aZI/4sY:ueIL/0IC0ZM
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Skin/Default/lsearchb2.bmp

SHA256 6ad87b55f8047c6f8210c906ac1da428a6f212f3cc2d2feacd5e1d5f7ae1cc92
MD5 8a50de187b5d0e8b2dcbad6e36c1c160
SHA1 a7d807548245090f747b344bd611c2300e087d52
SHA512 268408b68ed03cfeba4bab7bdcc88c2388a1564a98706fdcab1a0d308ef5962fae3435e1cbf3f06023db52f13b5b11477bf2e8a18f54a40023f445049485063e
SSDEEP 96:ExSZpaaaaaaaaaa7raaaaaaaaaaaaaa9GfpxGiqaumcccccc4y8S9uIA22yIHy9v:EI1bgxqHS9uIAoIH85FMrrrrrrrrrrru
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Skin/Default/lsearchbg.bmp

SHA256 dfd2559b74715e710de63085cbe7bf5152b9933b10690d96812f5bf2b190ee70
MD5 49993cd0c2686c36b3f1acede778f7d2
SHA1 dfd5ed636c19b91abcf266f668f72f0a69d84750
SHA512 b52395a31cdaaa712110212a5557a332711c8c70267650b53fa2b623ab81ec3b9abc4c58c71b1181e3b08f929339e2a3919d63efa3d2080f07416e7a9bb856ac
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Default/lsearchbg1.bmp

SHA256 021d950595561bde1914f818f6d785365842a8619c7d1415607afeba68f9c5f5
MD5 6ce1dec676c54ae49417a26f65f1e72e
SHA1 7779539a401c869e60d7772c9cbb4f77e17c9e10
SHA512 554c830af7ead8b02ef0a4293a38c839e53491fe68cec8026afdc89e8a23d556ee64eaf43a89eb7eaf99aeed14b0da53045ba460a07694f0ec2bda4761fca1b9
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Default/max.bmp

SHA256 ec69be19eeab018eb50b1ba9a8baeefae4078f28e92c1a14bb431b09d6ec2487
MD5 4395c37da41b396f7d375757f4e40c02
SHA1 a219bc357f2684552f6627ef3bd3b7da96806073
SHA512 700ef718fbb1a4f43d81cd156d3ae973144995e340452bd4793cfcbaeb511f8b5ee63475adb7e0087591b2e71ee4d36b48b81a58a359c5427c2d1c0686c40668
SSDEEP 96:SYOwPJyvgaRlb/2TRJpmnZ9CLf5KOWx2Ze:SYOq70lbeNJpW9C722Ze
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Skin/Default/media_del.bmp

SHA256 87b695911fee218b51513f01654e92e1e9ff10c07949ca297782b02460c95749
MD5 1fe29eb65a393458dc9730cd2a5266be
SHA1 6d672ac9122e73181d6fc9829e1d232e4bd03a9d
SHA512 f383fb24ef2bc986cfeef4ada6a1a85fa4ca2815ed4a43f9522ad3bd045611c79343db81b634038f1d3503326146029060f24941055a9a97b7ea2f3b4428ac31
SSDEEP 48:T+CqBSzv2Clpeg0Pu0KEyD/s2dH93lghlII3POK8:T+CqBmeg0PuLTD/s2dtlUPOV
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Skin/Default/media_files.bmp

SHA256 1d870d9af6f0dff1b7f622c955d74b4899e448d081877cc74b2a4e9bcdaf9736
MD5 a2aaf39e3a9ae31122cfab5630bc0057
SHA1 cf64c64be398563925dc6824cccadf77abdec84c
SHA512 6e8c550ef278eb6f2de5e3145cf077edaf9481a6725f31b80c77624dd278c0d973ce6ffd9775c0d49191f9b0bce1278ddfe268c17e0ec13f3604d020a079755f
SSDEEP 192:ukDfhBODXVWYiii1iiisiiiZDiiiPCt0afS1yBAXH6k5L7j0:ukDfhBObP9bfBAX6k5L7Q
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Skin/Default/media_files_2.bmp

SHA256 0ca79333d98721ff3fceef7378ece2db63e3a71184f04c574fdff1d77dcb9c38
MD5 3f324eeeef3d0b7322e3bf21b0ba0ca8
SHA1 358489df417595672b2408c92e1fb747a656d746
SHA512 8c629863c3378ea8dde484b06d57202676f724f59e34b68138c3ec10badd6924f53cf0d808697444432cbc4bf9e0abc3e128d3f9aa1e791a5063baaaf38a2a95
SSDEEP 192:utxqci6Y2x6TiiiXiiiEiiiXiiiiiiiiiZFiiifiiiZFiiiJltddQtK46jt0njy2:utxqci696OrWj2A0W+uEHiARP
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Skin/Default/media_fill.bmp

SHA256 d0d16835342b83c1b4d8733e10072dcc2075709024839f9802ba9924f6e86b63
MD5 46f601d58d6f4928925d32f20840ddfc
SHA1 634dadd849ab8018f147088e2b8ac3e9c8c61aa2
SHA512 7da5b002ad92c8f176cf7f8ca977622efd8a6d7c38319429a52f80ec5231889dcce5e59a2675a402c46e742bd7eb4f8229b41a06fe17a13bfddee8b6907777e7
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Default/media_info.bmp

SHA256 e0dcc9dbb2aad65e07838dfd777a3429c07b757c0926d9541ba4e25c6eaf3c87
MD5 257b4d49c01d56e69777e03329bc0d7c
SHA1 4575bd9f5f9847e05ffeff0e1ee00df030590196
SHA512 132f47b99d65c8360ab8e1404854017d3c11f764d1cdee11e9220b5c5fe8beb9a65a35a5fe24352823aa3fdfa4c1aa7a00dccff403d28ebc6777071b66e90828
SSDEEP 192:uLDfDRQ1BciiiiCiiiiiBoiiiiCiiiiiBoiiiiEiiiiiWiiiiEiiiiiAHIhChIO:uLDfDRQGHIU3
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Skin/Default/media_search.bmp

SHA256 6b13e3e83ddfd4cd3a9f6774dbf6e31c4e87822470ac856657eeaf5ade06c594
MD5 18f7a1f5bf8433aa907d96981e0f4d83
SHA1 8900bcb5ab546090f6cfdb40d69af33bdc715e5c
SHA512 a3b557c9f8279cf99efaf03753185a54321752352564aa28e065acc89e7cc43b3353da01cf036ebbd826bda4c039df2a94f940d37a8a3ac8426c8d66f0d7f1eb
SSDEEP 192:uvDg1c5HziiiiiiaiiiiiaiiiiiiaiiiiiiiiiiiiiiaiiiiiiiiiiiiiyOiiiiz:uvDJfUyQm/gLLmLbLj
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Skin/Default/media_sham.bmp

SHA256 41c748451082ccdd25a104c444e746a8ab7efeb7f64b4baeb53e38e0bf41574e
MD5 511d0cc2ed43408b0f871bd94bd088ea
SHA1 e038a5df45843723511b5ed7ba6264fc301cd4f5
SHA512 c7a4ba5aea8cf7a8bb462704e26e72087f9d4231859cf4c75908c7d8f739a47f8dc85f6ea3a82f643229afe8d2dae71ba3c07563fbeab724ca0c6bdaf82db6f2
SSDEEP 384:dAglgo444444444444444444444444444444444444444444444444444444C44s:ecx
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Skin/Default/media_sham_2.bmp

SHA256 a186469fb7a31223c8b1d1c4b92931018ab36a1380a2aa972651819bae58ff70
MD5 3e85364bad1f58bca3d48774f4d616f3
SHA1 a92162cad669ae8bf2e85286ba4917c8cf275944
SHA512 f4677c47dd4fca47aef3c3fb89ccded60e8902468c46a018e6c6e13b41f14e66a85c2367a037a56c5fe15de01d105a9af283a541be42d4ec22b0427e41ee726a
SSDEEP 384:d5qm444444444444444444444444444444444444444444444444444444U4444Y:t3D
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Skin/Default/mediaeditdel.bmp

SHA256 039636b779206dbf9a786afda9a010b404f43f5f9bf21096f916f925a349cc39
MD5 201894abd6ba7f74d5c9d18ba7caf099
SHA1 277b65bd1bc4b991e30efb5552d887c5959138a3
SHA512 6e0dfd6dd42c82c71a4bcb16240e30d8b57e7ef645f28e4f6f091aa1e983bf51194d7b8184246ff66b3d199fe883a6d6b91184988746edbb9dcb8fbe6721b636
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Default/mediare.bmp

SHA256 d29669b777c77be44d3d6e0eb2dee5e1e2ba131bb5e1ebbb41885f3322dd713b
MD5 3592ddd6448e6b1e9dcfb2df6957c10d
SHA1 efcee6e3df2f4bcba1c9379e09c8da9e9f7c315b
SHA512 ab40986f34a63d3894e8c3bda2c9f7e67773f931f1c05e5888be634747706be30b0b7f25292876248070d00e5ddd35074b4012bd4eb240188ef6413c41e4ae85
SSDEEP 192:uLDfDY4E4RiiiiiiPiiiiiLiiiiiiPiiiiiLiiiiiiLiSiiiiNiiiiiiLiSiiiiJ:uLDfDWHa
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Skin/Default/mediatolist.bmp

SHA256 df81fa3cd4a678db705fc613bbf012c21329c3b3ec82ef654afb66710fbb446c
MD5 038178e16f91eaea7937f52a1945fafa
SHA1 764ccecbf568e537287eb7d617cccee407ad001f
SHA512 96798c4a846eb37cf0baa3cc6f61c948f822d02ca3069a82bb6a35e6d922ddd0dfef8d0fec88d8dd271245470b72ab924dc8784d5af636c1a0f43d9c8df3f4ed
SSDEEP 192:uvDLQsdkPiiiiiboiii0iiiiiboiiiiiiiiiiiboiiiiiiiiniiiXywiiniiiiiH:uvD0kk006C00003000020000Buc1dl65
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Skin/Default/mediatree.bmp

SHA256 8820cef81f8fe286eeeec7192ed011bd4153d4409281349b45d30a92a1fbdca1
MD5 03e317f8e43bf0ad428a4c3d5502c656
SHA1 a42112cf52d4e3e8f2a9c38c4d246e126ce05341
SHA512 4ceb4220a8fee5510b50f3f9dd33d4e75678874370c43030756c8cae681afd58e6b829594ba6de5363e43c502aa2b2e74014b772531888ac7b3130bc7f421bce
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Default/menu.bmp

SHA256 fba836812ceba169d99a9871f18c841fd71e6e2c8ea8b4db048414c545fe9cd4
MD5 089bb63ef66662f31ce557d561261765
SHA1 e92390db24780a101d09c1c9ba46575a397842b0
SHA512 98410f4d26abc13cd732e390c77c8376cee5761110bcc0dee2cabdd2ee6d0a1c6fbe073b1292a1d8a5a2e62deb15b243c37e541a70743aa515b7d4495d68631c
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Default/min.bmp

SHA256 c15117c0486c87aa2c0cf2def5f17a90a596de1b2c9df0a996d9ccef689dd684
MD5 2053c8e519d275c5999fcdcbb65a2d9c
SHA1 debc16bd017784ccee9b72e5dfaeaeeb41218996
SHA512 cb18a82addd4cb15222df9bd2ceb361bec2d33fc4a72465412fa0949c8037f4f2bf7e9edf9698812486c8538db969231edf39d5eedd0961f6cd9feebf76d7b0b
SSDEEP 48:UFYpgwmXrrrrrrrrrrrrrrrrrrrrrrrmrrrOrrrrrrrrrrrrrrrrrrrrr6/Byve5:SYOwPJyvgaxfoc27C8OWx2Ze
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Skin/Default/mtk.bmp

SHA256 d3b3930090b44beefc573bcea08da06f52fc054afb5db1b63c72f5def1984ff2
MD5 73b16b1ba725b1f01feb91a2c28992d7
SHA1 526cb27dc634b5e551938ec8cf04dfa772a181c8
SHA512 0de0c990ae8adcccf7276068a57293825aa9557930d51670af3d4c32fe180668a5f35fe25c416a4aad5d1748da1989bc00ef567b5df9239d69a8a6bcd4668c41
SSDEEP 384:u5MI7W4EOrSdofojrr5im75r++jkDny7aZN3O9hvCKQ:WMKgo8rrJ75r++jkpPv
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Skin/Default/mute.bmp

SHA256 100b2563b03c78eb164b003e8a75cca2557e8f1d6930034aef4066babb7bc5da
MD5 986eb7eb61a8bc724fc5881a2ee27b1d
SHA1 a02200bcccad2b69a14abb102ed3089959441bb1
SHA512 9f9e5c1aee49af878aaf14cd7852aeb9335c6606914a4b11bcec89265155130990f42fde6c8f03a7a507bb6f25c9cad52c46f7cdc135c52515a7fac98a93c6cb
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Default/mute2.bmp

SHA256 29e8a7cd63f2271f5c85e202aba9680b91ff13cad07a87c062a32baad6f0e097
MD5 5927b2352fb2a76b553269dd06b8b08d
SHA1 0afcf49c7d11b096cbd915e3b151581945952940
SHA512 f4ae457365214d8b643ba33230af961feac395fdbb9f019e25536e1f085657579dbb5a84b4ddb7bf654f234b446475f2d21d976f700b408857f3cc5ae61cb3e5
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Default/next.bmp

SHA256 8a24892ff1eaec05bd4ad2a2054bcc91322adc82dafce8a80d785da47075e4e2
MD5 7ba660e6a0c61dc8adfbb10f506d8235
SHA1 4fa796b0398e89c426969991b749d3c7f070c8ca
SHA512 4643c0dc2b2eb02141625e01c7ed2d37de7ae84f4c1386f01376b4294f5d2398043f6587817b61299fc04472f2c8a467f328b4ec045cdc8023b72a96cf37e6d9
SSDEEP 384:h63JPFAQftbLKogBtVEl9bBKKKKKKKkKKKKKKKe9zp2U:aTAQhKoglGBpT
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Skin/Default/nowplay.bmp

SHA256 aee730c8122cfbd24b9231dae08b7c6b44c4c8965457ae8a01765d4e27eb5afc
MD5 cf400570a80021806db2fb3a95440b87
SHA1 3153791a0168d7074eddde7ccdc7740ce9f26acb
SHA512 2ead85b7bf3bdbb42c2dd71a0deb228e86c2fd054e39de47414826e5e54db99e07bf7b4cae6e98937d69d3b1f0786b2e2632ea879e030b6a2e5f351b21037a31
SSDEEP 192:uqQpsSgut458xd2J3m6bu45iOmviSUeIAqYyC6wsDIw/wd3Jz5I7rykyXcfkGnwC:uVsS7E8xwJx1iO02CtsDfIaryk5nDD7
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Skin/Default/open.bmp

SHA256 bf08bd9a9065a5be6fcf36083d4350f46970073dc378ea64e8b48fd4168c768c
MD5 c58037cefc55b6b63e184d94564ad933
SHA1 95607aa1cbb77240efe6360c4e708a185851d0ae
SHA512 eb5074f2886c72af347bf64a99221b041752b19833f7cfdd940f59ab4fda6ff8ba9d449fe36e1735ee1a12c9eb8c35ea95488c6d3286738d263e4f5e39849184
SSDEEP 384:h63JPFAQYuT8oqQePs3z7KwKKKKKKlKKKKKKKKK39zp2U:aTAQGouY2pT
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Skin/Default/pause.bmp

SHA256 bf3d11e253cee3c085ec3e5fdd9e694ea8d3d788df8efe7edbc0d854933934ea
MD5 e0354d3b9b850fe48bca4a022884d8c1
SHA1 9f0388b325775afcea03fbc9d44d4a69124293f6
SHA512 6e873a844230a38f6ff08677bc2e8afb276882709763999da8e128bd2dc49ab61d17c5b102244896807b71a7d68105acd2a3e8bb6bbf648f133ff1fced0c4e7a
SSDEEP 384:TCsqEdW7jLIe9tXdAD3NAbrImKps5r8IX2qHALZe:b5ytXO3ObrI3ps/mq2Ze
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Skin/Default/play.bmp

SHA256 44278d33019805a6e94ee74edc9da7791b4df06d8a9ffc9b5e11f6db6d11617f
MD5 d9dc6120b9ddaa8cd9306d2dfd17fc16
SHA1 ab9fb7c3191c5148d3d361726b0e742e6a5c37d7
SHA512 7955dc738f7e9b5e2e6a4ce8d6e6b27269f0aff468565b3d61005c2ca19e99eda2ad84c8e35c62575d56485a698edb2fc959673af9e16387a8519edfacfdeae9
SSDEEP 384:TCSytxg5gCwqf/tYssM5Th8TwwD+uj7BA8ENe+pIe:c5I9sMBhUwpu6beaIe
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Skin/Default/playlist_toolbar.bmp

SHA256 1cbeec9f916f19674b87b896c40b5d97690ff6f25a37ade3bf5b449c90b5bfee
MD5 e0c27fb9fa335980b07436b145846c63
SHA1 fe19f53bf232ab1eeb5946b6cf570bb84e942e5f
SHA512 7c0c6b3a7b5a1d4a04f507fa824676d7cb3344d4911597b6570b3f945b2ce20178a6dd50cab8d8155948775f3ea7845ff73c7b7192c25fb075ecf41372adadaa
SSDEEP 48:MmGT02r+AAAAAA4/EVYgVppTZ6V37yIyIyCYOFK3v5qbn3EPlHvbqIfnvPPPPe:M/T02r+AAAAAA4//3nhr3GDZn2
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Skin/Default/pre.bmp

SHA256 c4fde2daa2eac5a01fa300d316feb3cb2ea8bce7cd468a63d8cf37c7ec05c0b0
MD5 9e2fe843b5813d02d03bf9f8163e1ec3
SHA1 f75672e109e93cfd831379d58379ecda387ad29a
SHA512 3d3e979fbe2397d6b86ce7e5f0044020f417e66241275ccccd5a01a2880d77348a4cb667b516d53305ef4a3bf7b4b106fa5befe71d90aaee712a11e2a4ab2b27
SSDEEP 384:h63JPFAQfFBv/o6UYMozKKKKKKKKK1KKKKKKC79zp2U:aTAQro9G5pT
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Skin/Default/processp.bmp

SHA256 c6afc1dc9764202c561c66ad40a99e2b92d92ef46a32b26ed157a9356a0f219c
MD5 74bdb14609b38c66e70124caab1d8e62
SHA1 ee0ab41432c2a70188b0b873d5df92356747c84e
SHA512 c7371477dfe96212f8b9fb64764d3de3912ead4d419e01b51985b8425a867891c68688094be39ec46f211a833e78f49234e33dcd0035d4b1c076d631572b4975
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Default/progress.bmp

SHA256 a72da52bdc1bf41abebad8c2f6d07cd4d0063d1799d651e855e453739286f156
MD5 b25b5aae89ec38a2999a704e1819641f
SHA1 08884305721ccc56dde7b2cdd28522adfbb4a39f
SHA512 7d1cc79fc1631268ef6079478fdfcf16b7728fb599f70c0335c4270372dfd19c1262dcef65cae90784b1e22b84c4e73a9a1d6bbab55b12c29d3b157eddd05dac
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Default/progress_point_a.bmp

SHA256 88901c77ced617f1e0c872fc9bd29c0495178a9ea88aa7212a6e5873f2bd0220
MD5 aa18d4c74a31336ea9355d5587ee0683
SHA1 52cff10ea32deb45eae886e76bbee3d0ca36b611
SHA512 9d8d612011fe22248532e72d2a35f5398b8c88ec8552992e2ef0bb0deaa9b96a2d3b4878aae3c1a0c9de2d7d6dc2dd3768a69345b1045948dc677bd3eabd11c3
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Default/progress_point_b.bmp

SHA256 f88120b4373e11fd43526c77951b4fb5376da8de1b5103cf6b8f9cc703020ddf
MD5 b5e8ed69093a866551e28216c6dc5ac4
SHA1 108cb4f6bbb7ffc1ed66a7e18d3d2af7eeb84470
SHA512 35b811e8abcbbb851bb84e83484542d6a2a0af8ff969cdb01ccb99fdb374bb7a8e213282065b12b2509aa343b82885b4ada1731e37d004aae2eb64ed0edc2370
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Default/progress_thumb.bmp

SHA256 69c50bfaaa7a50f6361869a88ce0d2902834df17067d7cb2e48e44ffef7119ba
MD5 8f5683106c1d257004ad322aefa0c8e5
SHA1 8ab5715e0546105f5d7d514c8b10545131d6cdb2
SHA512 c42d8c27d44b15443c07fce6cb591c8f60976922463a77e310e422ef3b48c900c06893a12fcfd83195614efc7c6da6695d0304d0cf3fcc364e9836e9ce9e39a2
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Default/reold.bmp

SHA256 928bde2d0b769a5ec9441375bc40293d2e597818c96e63fdf9f4486ed22c1e66
MD5 37e3faf8dd4947b341c69d3f7a5d46e7
SHA1 a5a19fb2d62bd6b629bdbda5aa9e8555a4e93cb6
SHA512 6ab8bbb8b08518bf7c19272aa354aebb4b62f609aac74deaac36a453b52adad5fb17210e77e8d243fbf0918c9107705c444d631732455763310d89b5700fc214
SSDEEP 96:SYOwPJyvgaUF9lQwsmnqWmXB4+h8OWx2Ze:SYOq73F9Fs/rI2Ze
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Skin/Default/right.bmp

SHA256 699dc041624c9c2b9f8b1e46d772d568f25ead5cbe3a08ae6e2ae51eb1524756
MD5 b4997683d6e50d2dbd13d26700aa42c9
SHA1 68a2c517f729f89832115ba8001608488c592f19
SHA512 aa253158ed03b8cf6a1bdd162e73a701e12b6bbd2b742f6b9896b8c274d2ca8bff87955b445088618ddd3449d68824bfe35dacfede964b74806b3fb9b9126862
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Default/right1.bmp

SHA256 c5216e5ee8b3333834913aeee9927c088a4529f9f0da94a1e9a46a109ab1561e
MD5 95488463d5a5963e0e0db997fe09fab2
SHA1 64127286236b517d2741243c2a7709370d8bf859
SHA512 3c2a231cfbae46f71d594d7e3ee38e50c60495af9bf58767fbb65c04207a487eff54a6abf5767bf49448ef7b3a473baf8e762d686d62d91774b84479489faa15
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Default/scroll_back.bmp

SHA256 49f25b3de1aac7f29aa346b656ec3c8a17cb78a42479d01a31690c495fa6abc1
MD5 06fa0b674d44632465bd92f13036ac43
SHA1 a49d0dbf1b39ec69f50750cc4aabb378e52d5de3
SHA512 db47251fdafdf51172d0cbba1eedda27fcb5c488b8335b04c1ea4838dd8de6ad734a1ca3587c0e4dbc6cb68ae6f8f9177cd49da46e3439dba0fe01c67156e7e1
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Default/scroll_back_h.bmp

SHA256 244da795192d3476d9caf1d654dc6e486885702502b6934f65c63ea2691ee663
MD5 6fefdb8f6233b92d066ce47a32c14a22
SHA1 f63f669ad297f978f8c71825be65b440074b9e82
SHA512 06c1617fccf4ea64f2ff3f43bab841ba4ef3a9861824eb5c4ccedc38a56c6436a58f60af3beae9cc17b151d7f774345390487d2373e2a96e9154c91847a61354
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Default/scroll_down.bmp

SHA256 ebb57777fe2a8dd865652a5f961649d8693d6952f661fb6a8774870adfa6b1c2
MD5 9214130cf2f000ea39dd22617d4043e9
SHA1 0f42ab399d791a4a5a2d9c1413239f5295c61e6b
SHA512 7703ec636d4c221c7506f31c98cabc64e0d97b3cdf84e8945c23dee6a7510e0a3dd1805246c42590df67f34b7f3a51e808fd2f415f8791f52f0d4eb0b21d90af
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Default/scroll_left.bmp

SHA256 842c0de50dbb370932f2ee25f41e797780b34d755e75b16e7709b91163bcd7d9
MD5 2b04f2ee7d95cdcb7c59e8ba69a4a8c8
SHA1 95385cb132c6196afaee8b6da59f2af46c905347
SHA512 98ab67fd0a58295b6ea2da5e19ee24425703d26c74ac1cf9f8b96843a7d79772cb36f159692c3bfa192d6d22187013c2c3b989563741c237eed76824831f8387
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Default/scroll_limit.bmp

SHA256 dd3bc1b06a76363254c11f38b9f825319715670be44b23bbf23f568307a16fc3
MD5 e6390c1eae25dc2df4fec51b3479122d
SHA1 ce7e42ec2c66d4b093f67331fdf75e7576f000aa
SHA512 1707e0a52face49b9589bc7547223cb97522ff8bbfc1fbd99c86a12e063de9291edd21afc1a6342d46091bb06786e115c82df84373f20e284f3e7f11c02bd8e0
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Default/scroll_limit_h.bmp

SHA256 8df33eb9589d2cf89910b0cc652af53bb3e22053ce2f097052dbc129c149226a
MD5 a6518d0fd7ce708b04fea497637d572a
SHA1 b2a945a3691f25c4feb2a0ac27604a59677f2267
SHA512 32bb55546d869fa435b9f49a89366ea560a2acdc738dc5e0c4726a2d35d3ccc7e6e3896b8ef7c699f7240e83763eaab5d28c24e4307f2b570e7cbebc3af9b988
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Default/scroll_right.bmp

SHA256 f0ed06c010ed68f0f17c2bd2c99a94d39599b21d1f764542bfea5a4d3860e7de
MD5 c7260379519687dbeb621a1f9f461837
SHA1 a0b2b03ab6ddb37c9266cc8118df5b8130e25560
SHA512 071d7a2c03b93ab413d8221a8e8ae5d1c64a4c653e2348dc1e8e5b7c65ea414c2c91d44983c02222ba41bf223511f1b1074ee7a6ea8afc27f7319e2cc800c8ff
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Default/scroll_up.bmp

SHA256 51d15121f0e0f85cfeabe162ae7b05cf7e2ef7d5a74426d8dfa79adfb1582248
MD5 27951aadfd5c2c34e9c80a61cfcf1ba9
SHA1 a8339d71f755367d6792eba9ec64658ff28641bc
SHA512 89c9555573aaabc2ec652eafebdcef1caf1c71d47fb182afe82eddeaa3f10abaf3d6bdf437919a33f2704fd69d982f359fc509fbba05a6ed4b2c050930fdf367
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Default/search_botton.bmp

SHA256 14c3919ed163e9d323a3d89b1f1b279246cd9d4e6521f22f7cdc0727a9f5a62b
MD5 0bc3fc11a8b2361c0879c139e788296a
SHA1 2a2161e226d885751956aaa24c296b724c5c6a4b
SHA512 c93bfbaa7a7188028f183ecbd866788afbdbedc91d1700c6c54f00f88153276f41bebf31b3189ba54872eff4382891fe813061c4e665e85487100fd3bf656326
SSDEEP 96:gTvnznznzn93mWhW8kTkx85RgLmf/n8awNm1q2:cvnznznzn92WhW8ykx85yLIkaf
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Skin/Default/search_icon.bmp

SHA256 cfa97b10e0acaf8fce2cf1ecc931244249717f18e791a8578828d20e6cf4a235
MD5 d4153b763555d00392b89d8119e6da18
SHA1 9ccfe5b355a48299c27a7d8b1caa07ae6d692b86
SHA512 e585d42d731d7df592ee3f82d7af0a09c977ee915fd2e5f0d85ed836f6c3cbef4e17413b176b53fbceb4c1e3161c57aff5e23d53ba665dec29c88e7357fba08f
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Default/stop.bmp

SHA256 0b390c3dc14a670020e611b9cedd27d23abe166cf78bc02482c5274b4f923b38
MD5 b61bfe103e42923a57faa14f13875254
SHA1 5542d8530683e6d62277cd7543d18448a63f2c69
SHA512 f4658e0f467154d27f7df69f417ea575da2d83cd9fa6271de485a657d2a635163a95ab1ad27e019a754fee4e68caac6de6ac9c53f028c91d30dce07fcd058f7a
SSDEEP 384:h63JPFAQf6VIoqnQASn9tKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKj9zp2U:aTAQxoMqRxpT
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Skin/Default/tab.bmp

SHA256 f21e384d765a69ae74a7ba8aea4dd41612d8089f8638ead1321f9f16fd2cba01
MD5 d369b01d7fd9f3d6548844ea2c1dc9a3
SHA1 39f559fb04d3c9ecf45bb13702ab63fe1c38ddf6
SHA512 3e09e12e705180d2b07b4dcb287791c6687652ec2baecc7fb5b388c9ef024f4e6cec278e47cb866ec944e0b0c5e01f0cfe4604763e6dd682770062dac6b22f57
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Default/tab1.bmp

SHA256 84492e27f1a661ac021c1b308908323f5410a0b6011302e9529663040c0d8aa8
MD5 b47136a10e738a9a8ad112aa1aaffaac
SHA1 1405a2ef34ce16ba8d0ca96638860609f6ce7a5c
SHA512 a47515a746132352cec1f92621b281b286e8476856e7d23335d4acee9d70982e1da8f75e4c27e7e7bba0cbf22975b6f977a768dba44214ceb41c5c8e4d9fb5d5
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Default/tabs_fill.bmp

SHA256 26d1f9dfe6458c4bb16544b42b809afabe5648f09c040ee5d9c913fc5ac23378
MD5 63cd52244a84cc199a1ea864f971eedb
SHA1 bf69e70ec274cbe22f0093e3ffa29257824ddba2
SHA512 78f596323b87535afb7453969c01ede8995ff31e62017d0fb96dd71afa85016dc3e71b53e116bc336e2f73891bb1aa2a0a08acb8025334848633bf305e02ef5c
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Default/tabs_left.bmp

SHA256 30dd4ba074beb133ec7a93c399000fdd09f2cef399ad9dfbb86abc583c0b3a60
MD5 844ad7631fc194336c42f0871d326909
SHA1 283e7902c8009fd8e9ea2b9e59718de693cd46dc
SHA512 6a9d05acee6140e75ad8497e1b22047a51cd901247c4a85a4753f038c7c6ee097fa1bb28137540952038e65b9dcc1c5b76c2bcaeaddca406e8365c201bc392c2
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Default/tabs_mid.bmp

SHA256 bdd4ac6a86381ca650630b8837622ee9b42f34c6c225ec0cda571808914255dd
MD5 79e14c4500331374a1adf7f10df53028
SHA1 3ee614d0641e9a381b306de7d5f129b415561560
SHA512 79d5986217b39e289e5d0dab6eca3ecba0b8e453721657d828e6b034c8877dddf035341ff769c9ce942db5330ee1d7657a5047dc3f905c4a423e871e3c187b8f
SSDEEP 12:oC5/tttttttttttttttttttttttttttttttttttttttttttttttttttttttttttS:oiMjYTkUN
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Skin/Default/tabs_right.bmp

SHA256 30dd4ba074beb133ec7a93c399000fdd09f2cef399ad9dfbb86abc583c0b3a60
MD5 844ad7631fc194336c42f0871d326909
SHA1 283e7902c8009fd8e9ea2b9e59718de693cd46dc
SHA512 6a9d05acee6140e75ad8497e1b22047a51cd901247c4a85a4753f038c7c6ee097fa1bb28137540952038e65b9dcc1c5b76c2bcaeaddca406e8365c201bc392c2
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Default/tabs_search_fill.bmp

SHA256 1bfab1bb8d9feadff72c1a4b1fc0d4f2be892f69e4ec40cb066f6dce2ba64566
MD5 1c272724e8eb0eaa6e8908fea039054d
SHA1 5e6d239d5423629b1e9bb98788fe1bf40e8ce9dc
SHA512 a266a03ced180c686c93de69afb28d67ba2a60e64096b8a1c881d44368a974e13a881b00ce6ac3bb1380c508ccf36545659ba54bd3563bfda37bf0a36fa50572
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Default/tabs_search_left.bmp

SHA256 2cd84e27ba88f7e757d6e9be349c1494fb549cd8f4bf9b71e2ef72a66618861e
MD5 eb07d3364e2ebad210c3001618e27b73
SHA1 0b3896c914deddcaa866d39355dbf9ba9c1e0a37
SHA512 c9d1f73bff5d1855da2d9e53dc19cc1b8e9c96cd0edc1ba1634e33e1a140422ac5b9ed06725ff7232f7f1d9a1c06df18abfdd356e6188de1a9c392be3846eb7f
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Default/top.bmp

SHA256 fc5301353a25196a3e01461235e8ec5ade48acb855d484acf4b475e03d681e9f
MD5 9d96590aa8125d148098929addd58475
SHA1 635f8c6e5ec1c751b0575bf11f7849d12fce762a
SHA512 21f84deecd60ead820d7a6485f4a4c0e9468b41f94fc8171540f2c32b315a88a261e19e07b710105125a81de2c8810ae8ea5ccfc0040449760764b6d525dacd6
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Default/topleft.bmp

SHA256 8ad9497fb10a4f15a74510967b1d569cdcf09bacf91b92a5f84762e6066bc9f4
MD5 653a5eaa3777ed1e01e6c4ba32de76df
SHA1 9616897a50cfaa952c0c133eb19b315875dd3125
SHA512 5df0b9b667603607700e3f980660ba31071476df5964e52e8d251cbee7217856476b5626f1abdee915d58250c760a1d984f7474b7a50e73cca4af147a73e00f8
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Default/topleft1.bmp

SHA256 d10b05979ca37a4e3a5be59ecff920af135b6c3f6e9c205032695093e9e667cb
MD5 54dc534e9c47d492c5eba80608178395
SHA1 3ad0df2407590d7fcc0db764452c2a0c8ef42b99
SHA512 97d15e3bf5d05c88aac82c7731a15d8d88b4a7ceb51af05d6088ceda1de62a1549816bdd97da18431fe9e5c919be768bfb489037ca5468426dbd6460b645fd0e
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Default/topright.bmp

SHA256 52fc146d72c2bc36198bdc590ed5f9e3424d45711f92c7c04d07b4ebe42ff0cd
MD5 8b668c76995c0aced3182c375328f234
SHA1 ec4fe3af7cb34e14f99c685bcd2d6e10ba764da5
SHA512 0dfb401268a6a808304504eee624c3b500706c9420139facdea1144fed420f71a6c8d3c5a9e9f478aeaf495b6f1da22cadabe91709ac0df40e35c6ff87e9f073
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Default/topright1.bmp

SHA256 9f845d3a5f201973a4ed5d02293990911fb9d44fa3887278ef811d0e7d473fdc
MD5 6d4d4ba116961342b846672d99aa999f
SHA1 f15c2a79027642eab1c61dc47e56fec3a817f5a4
SHA512 92b1eb8ab41ac3c9fbd9be06425fdca68fc7eba2d2386d001cab6bb6261dbe7dc8ba88f40a3e4c5a207e501c446325fb260e4750c739c8a6585f0fbc41cd5469
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Default/volume.bmp

SHA256 ede20fbec69f4fd1b89f58673aacc65c843550402c0b51ed0c86101aee9439d1
MD5 654a5e08e59d92620c7981b9c87c3673
SHA1 cea8cf6ed9a34be68f788b7fe2956ddbb57e06a1
SHA512 000be2aaa411cbce3d2b42a620d56558ddc9d842f52d5e0b918e6a3fdf20397c636924878ab8a1b863478fd93e1d8b878a59eb94315c13416f5e4305b527ff1c
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Default/volumeb.bmp

SHA256 933fb83bda47769b2ab93c97ce8712561a12f258a2cbc7974a0c178497766359
MD5 b851c096ca9e99f489d228ebf4b0645e
SHA1 9aea5b534d3bdba5515ae32dbbe79f3a928f5040
SHA512 a3eb48200594b76f65dc93229635bbf6aa308db002c9f46169beb5d3e9f298bc79ee6b19b00f2ddc34c1db21a1b908ea2496120155a98fbe9ba931270a060d9f
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Default/volumep.bmp

SHA256 d3925743ff1bc20966984f42f2008db0f0f7c6b8a323ca26aa535422e21abdc6
MD5 6a515774697a0959e426dbeb119b0991
SHA1 0ff53dac5fd005b8bb6afc7bb921b8a95a0f1395
SHA512 b6858c5d188cdab9aec6b5d0e432d2364acff614bf6ed45c64f330d2faffdb714c217852687e17a9213dcf78f4999b0355b78acb89d0c3c8fcb7bb6a4ea1a7e9
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Logo.bmp

SHA256 52ecef03525981137f89731a4ae5b3bb8e34c95911931afa694dbff5c4c7a139
MD5 da5d14831ae8eff4c3656d2249af9785
SHA1 e7c3c3d89c4be7c49fe47092008d2d03e0e3f4d5
SHA512 bd09fa5fd61898a143b4973c9d297348e74e7b839cea354bfb02b0bb698ff0b4491e2d9b5831fd3c2e1c2c79271062bf57091232b6e255b14a089097a83c7d1e
SSDEEP 768:IEYvNX5jvWIlmpeZSYgWlsIaegeAt8w41hGw1OLD6W7ErgqJYQyrWkHnV:evmkYYHivTt8wwMLDdqKQAj
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Skin/MiNi/back.bmp

SHA256 13550878f28b8740902fe3228e3d92890d432a10524a3a0e5df7ba2957b3f830
MD5 4e4adf5ed5c0da814204094fcf9a8f41
SHA1 e1b7b63a1d4231e4178cf2cd1fea6a66abfac85b
SHA512 0ad06c66e0536e38ed309e173d2dea46377dc309076f8d6fb2a377da470cb333959611bb2d9895330d9b1d308fc504770b7dd2f94307d1632cd70e1128589a8a
MD5 SHA1 SHA512

NSIS installer

installer

Skin/MiNi/info.bmp

SHA256 2eacddc065501259351e6d2ee8f59852094570457fc158868d93bebd497ff97f
MD5 0f70bb3b3c34d2c9451062e877db4a58
SHA1 0da150fa7d0f9d687d1117fcdbf2a156196ec284
SHA512 8b4a1b9c465776b43d743f1b5ed5ab472063d27d18c8450ff81873905e531b2f62d7421780b2a53c0c869f4e36b77d3f09109de7a673e915d31e6fda6ae3b01f
MD5 SHA1 SHA512

NSIS installer

installer

Skin/MiNi/mute.bmp

SHA256 dccf8967811f112d29afae47249312a0eaca8800649965fcded417b3aa1f8ec1
MD5 dffbf5f8506fb856828b6e7652127690
SHA1 183da640eb577caf6d2c02a0e646b4ce43329279
SHA512 6cfa7ac1b66e159658fb2a57f2fbd2b2279b3640e7447aafcf1a3f42ca05df59d61359cc83e7710036fcdb421157fc8ebeaa61b5055962bcf1e85c04dfdaf360
SSDEEP 48:T+30cycq8DUnnsUwDUycycq85pmG7rG7rG7rGZ:TkAkUsUgU62M
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Skin/MiNi/mute2.bmp

SHA256 95c2279fc472684949d0cb2c8814c339a3c7a0fa4f93e0ad9004daaebe2805d9
MD5 aadfd619995e6081c87bc9b98622d5bc
SHA1 2ad129ce209d8cae6bfa0ba03b89740f1052ade6
SHA512 0173820285519d299160839903954c059be3f11078ec554cf7bfc34772a1fb75c6deb51e5d39cd5309ce617f8924208e3ce739d6ba44f41fb1e90fe3ece2765f
SSDEEP 48:TshLAwH3DAPX20AQVuCWAQuSuvYTQHMdaqnqrjsaflniA+G7rG7rG7rGZ:ToLvDwX206CWY/vY9Igulir
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Skin/MiNi/next.bmp

SHA256 1f5558f8f0f94d057d14681f83f1684b0ebf1f30a256736687513cd6005c1c80
MD5 9f29d6b4d9e86da29c8970ad9f50fdf6
SHA1 67617eeaa9e8393e0c9d98270273af979eaaf91d
SHA512 0b59cb1367343ddfd6e37727eb30b4b4ff7926cd6743933325389b5c7d8c8dd8c14292d7ebe14c7d374ab51462e6ca7bf77b2ea9d533c7e2ce10b1039df01cf9
SSDEEP 48:TqvZsiDslEM/F8U1By7VvQVd8tHsZDYoJ:TqvzDeEMN8KByhv2dKHiDB
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Skin/MiNi/open.bmp

SHA256 4b89e735a9d90f2e404f7da73dfea3ecbdf1135db1e88d76f36153f91fc93d55
MD5 bc0ba15411edc9e14a59b772affc3f32
SHA1 1037f629d94c18488d54c9312da68a3c29f0475c
SHA512 77fb6867f494b21b6ffab3777ba167eec49ab989dabbeee64377a2f2cee43afa34312438e65530cf64906ab83f29f263a1cfe4406f2eb2106682bdf5c0d097a1
SSDEEP 48:TyHtc333gVqHtc333tHtc333grvGvOILURLU7Vk+gUg2BN:TyHtc3331Htc333tHtc333OvGvRo4HXN
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Skin/MiNi/pause.bmp

SHA256 24803752589137147283ebdc8f094d46191e8c801c35ac37aefbc7cf4b26f378
MD5 6bc207b367d7a3144e9909c64e65e1aa
SHA1 495d7b3ccd4e3e292d0bb0960e1fa775e4c4952b
SHA512 365a11ea455a553837ce8d7490690aff6760446ca9c4b3e9eabbd89cd6b25f67bbc473bfe970ddca4816b7ab287a03fa92e17f93b89aa02daca6678c26ed243d
SSDEEP 48:TNdyNLN2QNLN2QNLN2QNLN2QNLN25ddGBGBGBGQ:T7hhhhA
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Skin/MiNi/play.bmp

SHA256 58e0417fe113c86f5de165287bbf20f434fb40e7b47bc844667e520f2c3fb22c
MD5 32721b5aacdd55ee0fe0a487f6f80671
SHA1 963b0ad5f5824d639b6d4c2732e56d61b955cb4b
SHA512 c0cbe96952ad92b4d3bee43e932a03f6a23c2fd42a4f73e116db4b9fa37e2a7c73516352f74912a0ddd9df83d1cc9ce80775dfedec8c0c43d2975dd741fb7fc0
SSDEEP 24:TUZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZU:TTMULOH2NiN4KFfGBGBGBGQ
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Skin/MiNi/pre.bmp

SHA256 75538bc1c8e42dad8e31ba2ac1298c891db9b22ecab5964350c63a569570548e
MD5 d1c214c07e823bbf19173f768c7a7fdb
SHA1 c19e4880fd53ee403465affc579a4c94aca39527
SHA512 f1544105d21bdb8ac13be05296a0e93ea29db523476fb79b3e8927458ac6171fce19fa5e6fab90430df169a1c23e3a2deff5123e874f6572f9ea935bb2bab6ac
SSDEEP 48:TeHtbj6tDZDKdK1Hd017O6aVxKxDDqojzjoDOvCZZZJ:TeHUDZDKd09K7ZaVxQDDr/oDOw
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Skin/MiNi/processp.bmp

SHA256 3569ee4b0941d21a1638d1cab7662805857fc319a55ae76dc1af1dfe12e7341b
MD5 48136b1e1487764af41f7b65d5c32db7
SHA1 393343376ba3a0724ea0d917d00cc573320bc187
SHA512 c9d68ead8857f00a33c77497540b5d6e99c7474bca40c97114a11e1f5876cf686295de169cab15f4f46e944f80fb293088d0991a8deddd6c8d18677652bca1ce
MD5 SHA1 SHA512

NSIS installer

installer

Skin/MiNi/progress.bmp

SHA256 224f9474434523326a35a7c5ac76026cfcd1cffa1971f4e25fdd645e60088be4
MD5 e4105aeff757677b0ea7621d50ad4d56
SHA1 801b497e80d988f2d4f63d34d6ad64318cfe3022
SHA512 1e21b3b0caf91ff8b0bc75139e72b4db31f37781135624b8316e6261865ca41bdf82ddd937b2d0e346027496fa10a7e6d631c89e708774d484e5ec184ef8b555
MD5 SHA1 SHA512

NSIS installer

installer

Skin/MiNi/progress_thumb.bmp

SHA256 1399e096f93771c2d09b0edca1f7de53355fd1a6a007fae5411fe26b4849556d
MD5 b7356803bf66aa07c853854cc44a41ed
SHA1 1f13d3044e23f8545ae54ec575f442e74c25f5cf
SHA512 0981c079483f259f53429abe6d1df5a18b2bc41b6b1f8542d678058dacfd4ff4d5f70915f30a3b274545bbdc7e52d84eda0ef913ccf5fcb3d67c8bac25be3875
MD5 SHA1 SHA512

NSIS installer

installer

Skin/MiNi/progressd.bmp

SHA256 7bd1be2181e4977702a4e8b2e180644e72bbfa686fba80d43d50ebc60cb5454c
MD5 22bb7347042622304912167256cc7125
SHA1 3e21e5031c4c59688e709bebf70982fa13d39ce7
SHA512 bc523db96010c09bb37e43839840dfcd119ab0b4dbbfe23ba6c50709a9623f84f767d3bc8f755e5c52385ede4b465a5d193fce7d24fd2e6de26c05180c6322ee
MD5 SHA1 SHA512

NSIS installer

installer

Skin/MiNi/volume.bmp

SHA256 b974402992f831ba186faaf2c222fea1b7c0e87c72f74870048a5e3e35a7911f
MD5 cbc7a7af89344856e141bb9afb8e0378
SHA1 825b40eb31be14ebb6f057f9184b48f53f997fc6
SHA512 5e4e242749b2f8ff43818e70e6d536ac9b5d67b4d27a272a2258b5b3200bfd2e3567dc48990d4137f8731434126d6b48846a51465f8335f735bcc69092075636
MD5 SHA1 SHA512

NSIS installer

installer

Skin/MiNi/volumeb.bmp

SHA256 26e18d7a1278e04e0e2139b658ecf8371973e1eb8604529c7a724bb71aa6bea6
MD5 23fefd627af568d8d6ab62e332cfed5b
SHA1 31bdf6126fb90bde7161294adfed136d3f310f2b
SHA512 ce694bff391dc0677d45dc997b885ff144c127d1cb772e588463976e3d56825b964cd644f6babf92ea614d4047040386379a31fe36469d295b49a0b8f98c6672
MD5 SHA1 SHA512

NSIS installer

installer

Skin/MiNi/volumep.bmp

SHA256 ff34e95c81c84128fb62ebc31cea194999c182f7de4b0a084266ff2055cf1f94
MD5 165061ec0fa13bcd961a3e22a0507c49
SHA1 69e332f3e62e60693c255aeab1803cf6a80e9f7f
SHA512 850cbca976de2e888d1084404c19b3a0d2f1312cc9c91998a80cdcc67958d434370996c49d1b1424e61772370c7c9131fc8a81fbfb8e1512fcb77aa3b6937bd0
MD5 SHA1 SHA512

NSIS installer

installer

Skin/Mini.xml

SHA256 88dc45f481683a0d0d2ce23744f8e974378537d3765c1f326c97eda81724e7b2
MD5 880415fc804f1af7fda67036211e79a3
SHA1 69553a4e6940ab83ab8b05846b0adbeb0a476b1a
SHA512 12e49f87c1dfa929ecdf51c4f85275fdf628177498c24f720e16c9eb3ebedb9bff821bbbbb9f58f6fdc823ba0ba75c590ede15ff88883c082cc96117909575c3
MD5 SHA1 SHA512

NSIS installer

installer

Tip/PopMessage.xml

SHA256 b8d46f32b137941c8c3047d5221ea387fa58a71f58323dfd1d08386bf4e6acff
MD5 79716693382718bf86df18d2b0cf8af5
SHA1 4a198ab32e652b4ec5ab2ab0a9cff0c55bbd5bfc
SHA512 26db1dda102356229654d770ea7ae516ba7537cfaf52df84305ef6b17c01ae7507dcb5aaca2eee8dea370f644b84055642ca494e2ba594d9163fd5d51aaf4cb1
MD5 SHA1 SHA512

NSIS installer

installer

Tip/QvodTip.exe

IMPHASH 3d812c4c97128ca0e08c8dab57ae38e0
SHA256 fdb8c6f9bd1c9c279f1fa535888c218eb94e1edd6eaf3b1348bb823837230592
MD5 85233d569f3124a7de53283779d6de0e
SHA1 2cc52df8ab9a7b11751a3d14e81a9abaa9feea64
SHA512 55b53490c865c3bae26c8ff828c3c0703b9c07d6c2f4d938a8810884e8e7317c49bf7e9367c699c712100bf3f68a85de409446ce5c1a1c2efdb4656f7acb5396
SSDEEP 3072:jX28pz/xf+aHrPCGFv78iCjEWsgUyGlrVl99UmH/Q:jX5z/5XHPFz8JEWTAb9UmH/Q
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

3b:cf:5e:dc:89:3a:2c:bc:a9:16:7f:c7:1a:66:57:0f:4e:0c:f5:ff

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shenzhen QVOD Technology Co.\,Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Shenzhen QVOD Technology Co.\,Ltd,L=Shenzhen,ST=Shenzhen,C=CN

Chains

Jun 24, 2010

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Serial Number

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

May 21, 2009 - May 20, 2019

Subject

CN=Shenzhen QVOD Technology Co.\,Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Shenzhen QVOD Technology Co.\,Ltd,L=Shenzhen,ST=Shenzhen,C=CN

Serial Number

69:d1:ad:9b:16:f2:f2:1b:66:64:ab:8b:27:1f:d5:36

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jun 2, 2009 - Jun 2, 2011

Minor OS version

0

Major OS version

4

Entry point

77459

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA IsBadCodePtr IsBadReadPtr SetUnhandledExceptionFilter HeapSize WriteFile GetStartupInfoA GetFileType GetStdHandle SetHandleCount GetCommandLineA GetCommandLineW GetEnvironmentStrings GetEnvironmentStringsW FreeEnvironmentStringsW FreeEnvironmentStringsA UnhandledExceptionFilter SetFilePointer IsBadWritePtr HeapReAlloc VirtualAlloc VirtualFree HeapCreate HeapDestroy GetVersionExA GetEnvironmentVariableA GetModuleFileNameA HeapAlloc RaiseException ExitProcess GetVersion GetStartupInfoW GetModuleHandleA HeapFree RtlUnwind LocalFree WideCharToMultiByte GetLastError GetProcAddress LoadLibraryA SetStdHandle FlushFileBuffers ReadFile CloseHandle LoadLibraryW DeleteCriticalSection lstrcmpW GlobalAlloc GlobalLock GlobalUnlock InitializeCriticalSection lstrcpynA lstrcpynW GetVersionExW GetCurrentProcess FlushInstructionCache GetCurrentThreadId EnterCriticalSection LeaveCriticalSection MultiByteToWideChar lstrlenA DeleteFileW GetModuleFileNameW lstrlenW Sleep InterlockedIncrement TerminateProcess InterlockedDecrement

user32

GetSysColor GetDlgItem FillRect IsChild GetClassNameW GetParent RedrawWindow GetDesktopWindow PostQuitMessage DestroyWindow UpdateLayeredWindow GetClientRect ReleaseDC GetDC EqualRect GetWindowRect CreateWindowExW RegisterClassExW DefWindowProcW EndPaint CreateAcceleratorTableW ReleaseCapture SetCapture InvalidateRgn DrawTextW SetRectEmpty MoveWindow SetCursor GetFocus GetWindowTextLengthW GetWindowTextW SetWindowTextW GetWindow RegisterWindowMessageW CallWindowProcW RemoveMenu PeekMessageW PtInRect CreatePopupMenu GetMenuItemCount AppendMenuW GetMenuItemInfoW DestroyMenu MessageBeep IsWindowVisible SetFocus LoadStringA KillTimer SetLayeredWindowAttributes InvalidateRect SetTimer SendMessageW MapWindowPoints IsWindow TrackPopupMenuEx GetClassInfoExW LoadCursorW wsprintfW LoadImageW SystemParametersInfoW FindWindowW SetWindowPos GetMessageW TranslateMessage DispatchMessageW CharNextW LoadStringW SetWindowLongW GetWindowLongW BeginPaint

gdi32

GetTextExtentPoint32W StretchBlt SetBkMode SetTextColor GetStockObject GetObjectW DeleteObject DeleteDC SelectObject CreateDIBSection CreateCompatibleDC CreateFontIndirectW BitBlt CreateCompatibleBitmap GetDeviceCaps CreateSolidBrush

advapi32

RegOpenKeyW RegQueryValueExW RegCloseKey RegOpenKeyExW

shell32

ShellExecuteW

ole32

OleLockRunning CoTaskMemAlloc StringFromCLSID CoTaskMemFree CLSIDFromString CLSIDFromProgID CreateStreamOnHGlobal CoInitialize OleInitialize CoUninitialize OleUninitialize OleCreate OleSetContainedObject OleDraw CoCreateInstance

oleaut32

LoadRegTypeLi OleCreateFontIndirect SysStringLen SysAllocStringLen VariantCopy VariantClear SysAllocString SysFreeString GetErrorInfo

comctl32

InitCommonControlsEx _TrackMouseEvent ord17

Tip/QvodTips.dll

IMPHASH d7778d884b245e49861f228104669703
SHA256 4267607bc39f97a7bb0bf0cf5291ec45dc27d15674c95aecb726efade6493652
MD5 df14c9cf5eeb2a66e13b84604727de7b
SHA1 b0f843c03fd9a71f118283985139620a2fc74ece
SHA512 bcb4c93c44b6ab5aa4f1b7622df9dbf84b33356d869348ccc36f17a633b3dc730e9c6da4b9c71edaf3ba9936525b8b18ff699bd954e2bdb4e3907e0318a0b185
SSDEEP 6144:hmaRmz6Twmj/zfg6oKtovjgIqDP/4l9NJ:nG6TwmjU6DO7g7P/GJ
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

ad:3d:aa:be:05:36:a3:e4:d7:9c:98:d1:c7:b3:bf:dc:ea:d8:d2:e9

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shenzhen QVOD Technology Co.\,Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Shenzhen QVOD Technology Co.\,Ltd,L=Shenzhen,ST=Shenzhen,C=CN

Chains

Jun 24, 2010

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Serial Number

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

May 21, 2009 - May 20, 2019

Subject

CN=Shenzhen QVOD Technology Co.\,Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Shenzhen QVOD Technology Co.\,Ltd,L=Shenzhen,ST=Shenzhen,C=CN

Serial Number

69:d1:ad:9b:16:f2:f2:1b:66:64:ab:8b:27:1f:d5:36

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jun 2, 2009 - Jun 2, 2011

Minor OS version

0

Major OS version

4

Entry point

98946

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

ws2_32

connect socket htons gethostbyname WSAStartup recv send WSAGetLastError closesocket

kernel32

SetEndOfFile CreateFileA LoadLibraryA GetOEMCP GetACP ReadFile GetLocaleInfoW MultiByteToWideChar lstrlenA WideCharToMultiByte lstrlenW CreateThread TerminateThread SetEnvironmentVariableA GetLocalTime GetCurrentThreadId SetStdHandle IsBadCodePtr IsBadReadPtr GetStringTypeW GetStringTypeA GetTimeZoneInformation GetProcAddress GetUserDefaultLCID EnterCriticalSection Sleep InitializeCriticalSection InterlockedExchange DeleteCriticalSection LeaveCriticalSection InterlockedDecrement InterlockedIncrement RtlUnwind RaiseException GetLastError DeleteFileA GetCommandLineA GetVersion HeapFree HeapAlloc HeapReAlloc ExitProcess LCMapStringA LCMapStringW GetCPInfo CompareStringA CompareStringW GetFileAttributesA TlsSetValue TlsAlloc TlsFree SetLastError TlsGetValue CloseHandle WriteFile SetFilePointer FlushFileBuffers SetUnhandledExceptionFilter TerminateProcess GetCurrentProcess HeapSize SetHandleCount GetStdHandle GetFileType GetStartupInfoA GetModuleFileNameA FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW GetModuleHandleA GetEnvironmentVariableA GetVersionExA HeapDestroy HeapCreate VirtualFree VirtualAlloc IsBadWritePtr IsValidLocale IsValidCodePage GetLocaleInfoA EnumSystemLocalesA

advapi32

RegCloseKey RegOpenKeyA

ole32

CoInitialize CoCreateInstance CoUninitialize

oleaut32

VariantCopy SysAllocString VariantClear

Tip/back.bmp

SHA256 149c38b173d66026cac3c326bb82c013cf98a8399810bcab4f4602e9e3043d6d
MD5 a4ecad5d9cc6b149378936f6f48ce03e
SHA1 33660c49dec7b4d88ae2b52953fb9abfc7c13ff2
SHA512 91a301f2aa5314b2a9e241baf866979dcd59d99bd5d66295838bff62f854456ace48d7ab7c20ce111f385193f12f3624b57119cdc350982b0df73bd88e0d8221
SSDEEP 768:By1B8qRRRRRRRRRRRR8rRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRK:S8o
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Tip/close.bmp

SHA256 4c9bce58cf38af2717e4b5cee41f15909aafa6a3eb85cbd599639c41deeaa310
MD5 a88819921304d2f4a90382902c0d993a
SHA1 3c907ab116e18628f6ae58518b38df203353a8bb
SHA512 dabbc729dffa39685c471ea8503aee550248b9d8ee46f7a7e7dc2badd95c63337bf34a7e9fe2125f42270303e52d662a88a7a7861c3e586771a74167fc42c7f7
SSDEEP 96:FyPf0XtbgXgKGHXPHXsCZcAQJ7Q04QvApEIY757+/DsI:FqCWwKGHXPHXPZcAS7tApe757+/4I
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Tip/maintext.bmp

SHA256 ae7e61600522bf2bc14168b3a55451d2b4729bd7e55d56704425dcf160837519
MD5 382b6360fd5a646524b6e8aea8a24b53
SHA1 29004f083539e539db38b2469caa8245c217c95c
SHA512 83c41792b2299d440a95a9bedc8499bbc54c641d9a3217c83967130f38156112cce0c7c424092fa0c7d5d7278d3df133c118eda3c3e2c959d3191c198ce0319f
SSDEEP 24:AhVp55555555555555555555555555555555555555555555555555555555555D:sV2Mx9Pn
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Tip/view.bmp

SHA256 7b407942712bd9f44c1590ed91d29614860ec754d5f10526f23a6851adb6c4ee
MD5 26f87ea5edf6e4ed5cd4522522b20b76
SHA1 b93b6100053d6d8cfa8e438c8a2c564243b562d1
SHA512 2a32df5ba6a00b11491c232040cac059a75b73bcd5d173542f57370f22aeb62e39f11bbe82c9003cf373beccc78191da196e3826159e5903447f64175112681c
SSDEEP 48:8MSdaLd8gf5IuuW5L1Pk55IN55I3WqiDjXJiCQB8rFlPREzHV7XzLz6qqMqqqqqs:SsU4L1P4MmWrDjX0FB+PRE7Vz/jX
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Viewdata/²ÊÆ±ÖÐÐÄ.swf

SHA256 62b47ecfa00c2506d21551d9c19eb553d90f1f54725108e6e0156b0d34eaa4a7
MD5 da8a8813b469486602dd4392c1abad4b
SHA1 8df867b6f82046307a9e76523dd3cc43b92771e5
SHA512 a3e9ef4fa14be73ffb4c17b7e4efec6b54352945e9635fca09d88f462f332d90bf4e736f124a231d41d02c9bc5b9323b6b1fed2895c1bd555e8ac129fd085f10
SSDEEP 192:GAJyyC/URRn4e1XvCnJ4wTEQ7kiWDINKA/OE/VzH:GA0F8vnHMEQo3DINKdEtH
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Viewdata/½ÚÄ¿ÍÆ¼ö.swf

SHA256 b001648f07b676bb94d7e1b03dfccd5417916d105431390219fff38e7805bafd
MD5 f9ae7bbc4593046c3a9cc4114481c2ce
SHA1 d8553cfdf73b717111ffc993b9f2333d0e7cdad5
SHA512 b44f5822502a8452a73e8aaa8ec2462c90943e2f5269cda2b171095adc061a8b271248ad02d8e5cdbba227cec8b380fcd5b6a97f2c19fd63e7a5bdb80552a2be
SSDEEP 1536:Q5kGVu0WoBbYghMxMNuzvjtLioI5Hu+1OjbqC1Ggc:Qb1FhMDzvj8okHmj+CXc
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Viewdata/ÈÈÃÅÓÎÏ·.swf

SHA256 dda42db95f1a0c2a933ae31d69f6a90cd42969256a3a91c57556ecc1eb98a002
MD5 4b16bdb989aa10762046a5e61fd4c866
SHA1 3df749f80a1d931baaf8902791f6f97707b17421
SHA512 dcca9a9f32c77b790fbc74767a500d39b67d29e123690648b7cc1bdb9db7ee232b81d4e8ac048163653a30f73d7a59b349cbc11e30f119d4e771c237014f6b8e
SSDEEP 768:29dFaYz40ypjwSzhnARhdfmxBkqzkyvv56u0RkolMvJ9Gsro:iiYz4fpkKE/uBPzFoyE
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Viewdata/ÍøÉÏ¹ºÎï.swf

SHA256 d526773272a65b627f822dd9a5a28ea5ffa6910c3692610cd91874b7d3778eac
MD5 73e5777ca06d0b36fa1d4888c1f8f622
SHA1 371db4e55baa46a9afb819d15e53e08e1101221b
SHA512 993c66f5beb2dcb1cfed1223a79bf03e193f50170b63fec8353a21a2721f20ec31f929a8b4251e4d4236fb2b29d45f15270c1e1e2e69eb7d870cdc217af7670d
SSDEEP 768:Ef7y6yxCKZUbHLpxHyMfa2Yr7SwXajLLJ:E+6yxKPpcMXYvXAfJ
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

installer.exe

IMPHASH 3c91adf9dbf078f266cd8079d7d3ccf9
SHA256 08387009f7ce66ef73ceeadfcfd9c5815cde8f4e2d0dbaeeefe9dc1d4c41259d
MD5 a1bf5954facc2ae21726eae914cb5a93
SHA1 51ca7e7a04bbd7f62391956c37b7919a2f9ecd09
SHA512 4056275a2a6ba093223a3260bc4b0e9829134c642329847c59521c2beaba8ccb7f1e532e10df746c4175bc06519d0b4bdcfd75fe52fa2c031944e2ab36a2a4b7
SSDEEP 12288:b6ETd/o2EDrAnpxfgr3tgRKc6svHfP/K0/e86tdyD9A+RtOkyiAsPBgQgV:bFThp6sv/PC02te9XO55sPBAV
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

N/A

Digest Algorithm

N/A

PE Digests Matches

Not matched

Trusted

Not trusted

Subject

CN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6d

Serial Number

01

Issuer

CN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6d

Timespan

Aug 1, 1996 - Dec 31, 2020

Subject

CN=Thawte Code Signing CA,O=Thawte Consulting (Pty) Ltd.,C=ZA

Serial Number

0a

Issuer

CN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6d

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Aug 6, 2003 - Aug 5, 2013

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=Qizhi Software (beijing) Co. Ltd,OU=SECURE APPLICATION DEVELOPMENT,O=Qizhi Software (beijing) Co. Ltd,L=Beijing,ST=Beijing,C=CN

Serial Number

21:d9:1d:91:5f:64:fe:5a:ea:a1:6d:d9:b4:6f:06:dd

Issuer

CN=Thawte Code Signing CA,O=Thawte Consulting (Pty) Ltd.,C=ZA

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageMicrosoftCommercialCodeSigning

Timespan

Oct 22, 2008 - Nov 23, 2010

Minor OS version

0

Major OS version

4

Entry point

314039

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommandLineW lstrcpyW FlushInstructionCache GetCurrentProcess DebugBreak OutputDebugStringW lstrlenA GetLastError CreateMutexW InitializeCriticalSection HeapDestroy DeleteCriticalSection GetProcAddress GetModuleHandleW GetVersionExW GlobalFree GlobalUnlock GlobalLock GlobalAlloc ReadFile GetFileSizeEx GetPrivateProfileIntW GetPrivateProfileStringW GetExitCodeProcess GetFileSize TerminateProcess GetSystemDirectoryW CopyFileW Process32NextW Process32FirstW CreateToolhelp32Snapshot GetTickCount OpenProcess LoadLibraryW FreeLibrary WideCharToMultiByte GetVersion MulDiv WritePrivateProfileStringW MultiByteToWideChar GetModuleFileNameW GetLongPathNameW GetSystemTimeAsFileTime GetExitCodeThread GetCurrentThreadId EnterCriticalSection LeaveCriticalSection CloseHandle InterlockedIncrement lstrlenW TryEnterCriticalSection CreateEventA GetSystemDirectoryA LocalAlloc QueryPerformanceCounter SetEnvironmentVariableA GetOEMCP GetACP GetLocaleInfoW SetEndOfFile FindClose LoadLibraryA SetStdHandle IsBadCodePtr GetStringTypeW GetStringTypeA GetTempPathW EnumSystemLocalesA GetLocaleInfoA IsValidCodePage IsValidLocale SetUnhandledExceptionFilter GetStartupInfoA GetStdHandle SetHandleCount GetCommandLineA GetEnvironmentStrings GetEnvironmentStringsW FreeEnvironmentStringsW FreeEnvironmentStringsA IsBadWritePtr VirtualAlloc VirtualFree HeapCreate GetVersionExA GetEnvironmentVariableA GetModuleFileNameA UnhandledExceptionFilter HeapSize CompareStringW CompareStringA GetCPInfo LCMapStringW LCMapStringA RaiseException ExitProcess GetStartupInfoW GetModuleHandleA IsBadReadPtr HeapReAlloc RtlUnwind GetTimeZoneInformation ExitThread OpenThread GetEnvironmentVariableW SetEnvironmentVariableW TlsFree FormatMessageW GetSystemTime GetFileType InterlockedExchange LocalFree DuplicateHandle GetProcessHeap HeapAlloc HeapFree CreateThread FindFirstFileW GetFullPathNameW SetLastError FindNextFileW FindResourceW SizeofResource LoadResource CreateFileW LockResource WriteFile ResumeThread Sleep GetCurrentProcessId GetTempFileNameW RemoveDirectoryW DeleteFileW TerminateThread GetFileTime FlushFileBuffers TlsAlloc TlsGetValue TlsSetValue GetLocalTime CreateDirectoryW ResetEvent GetFileAttributesExW MoveFileW CreateFileA MoveFileExW CreateEventW SetEvent ReleaseMutex GetFileAttributesW SetFilePointer WaitForSingleObject SetProcessWorkingSetSize GetUserDefaultLCID InterlockedDecrement

user32

PostMessageW SendMessageW PeekMessageW GetMessageW SetWindowLongW wvsprintfW CharNextW DestroyWindow DefWindowProcW EndDialog TranslateMessage DispatchMessageW SetForegroundWindow ShowWindow GetActiveWindow DialogBoxParamW LoadStringW MessageBoxW BeginPaint EndPaint SetCursor GetSysColor GetDC ReleaseDC GetWindowTextW InflateRect GetScrollInfo MoveWindow GetScrollRange GetScrollPos SetScrollPos SetFocus SetScrollInfo ShowScrollBar GetCursorPos ScreenToClient DrawTextW GetSystemMenu EnableMenuItem DestroyMenu GetWindowPlacement BringWindowToTop LoadIconW UpdateWindow PostQuitMessage IsDialogMessageW KillTimer SetTimer CreateWindowExW CallWindowProcW InvalidateRect RedrawWindow GetClassInfoExW LoadCursorW wsprintfW RegisterClassExW IsWindow IsWindowVisible IsIconic ExitWindowsEx EnableWindow OffsetRect GetDlgItem PtInRect CopyRect CharLowerW SetDlgItemTextW CharUpperW GetSystemMetrics LoadImageW SetWindowTextW GetParent GetWindowLongW GetWindow GetWindowRect SystemParametersInfoW GetClientRect MapWindowPoints SetWindowPos

gdi32

BitBlt GetDeviceCaps SetBkColor ExtTextOutW CreateCompatibleDC DeleteDC SetBkMode SelectObject SetTextColor CreateFontIndirectW DeleteObject CreateCompatibleBitmap

advapi32

RegCloseKey OpenProcessToken LookupPrivilegeValueW AdjustTokenPrivileges RegOpenKeyExW RegCreateKeyExW RegSetValueExW RegQueryValueExW RegCreateKeyW RegOpenKeyW

shell32

ShellExecuteW SHGetSpecialFolderPathW ShellExecuteExW SHGetPathFromIDListW SHGetSpecialFolderLocation Shell_NotifyIconW SHBrowseForFolderW ord165 SHCreateDirectoryExW

ole32

CLSIDFromProgID CoTaskMemFree CreateStreamOnHGlobal CoInitialize CLSIDFromString CoCreateInstance CoUninitialize

oleaut32

OleLoadPicture SysAllocString SysFreeString VariantClear

shlwapi

PathIsRootW PathFindFileNameW PathIsDirectoryW SHGetValueW PathCombineW PathRemoveFileSpecW PathFileExistsW

version

VerQueryValueW GetFileVersionInfoA VerQueryValueA GetFileVersionInfoW GetFileVersionInfoSizeW GetFileVersionInfoSizeA

comctl32

InitCommonControlsEx

msimg32

TransparentBlt

ws2_32

inet_ntoa gethostname gethostbyname closesocket select recvfrom inet_addr sendto WSAGetLastError ioctlsocket setsockopt htonl accept htons bind listen WSAStartup WSACloseEvent WSAEnumNetworkEvents WSAWaitForMultipleEvents WSACreateEvent __WSAFDIsSet socket ntohl ntohs send connect recv WSAEventSelect WSACleanup

setupapi

SetupIterateCabinetW

psapi

EnumProcessModules GetModuleFileNameExW

Sharing

General

Malware Config

Signatures

File Explorer