#!SetUp_51946--!PassW0rdz#$$.zip
- SHA256 19c631d05e365c3334e761a9be2280b12016a7bfa5dede76062234bc36fd6767
Password
51946
Overview
overview
10Static
static
3Language/c...1].exe
windows7-x64
Language/c...1].exe
windows10-2004-x64
Language/e...eN.dll
windows7-x64
1Language/e...eN.dll
windows10-2004-x64
1Language/e...32.dll
windows7-x64
1Language/e...32.dll
windows10-2004-x64
1Setup.exe
windows7-x64
5Setup.exe
windows10-2004-x64
10barchan.pptx
windows7-x64
1barchan.pptx
windows10-2004-x64
1madHcNet32.dll
windows7-x64
3madHcNet32.dll
windows10-2004-x64
3mvrSettings32.dll
windows7-x64
3mvrSettings32.dll
windows10-2004-x64
3unrar.dll
windows7-x64
1unrar.dll
windows10-2004-x64
1vcruntime140.dll
windows7-x64
1vcruntime140.dll
windows10-2004-x64
1Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Language/chrome_[1MB]_[1].exe
Resource
win7-20240704-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Language/chrome_[1MB]_[1].exe
Resource
win10v2004-20240704-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
Language/en-US/AutoWorkplaceN.dll
Resource
win7-20240705-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
Language/en-US/AutoWorkplaceN.dll
Resource
win10v2004-20240704-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
Language/en-US/avicap32.dll
Resource
win7-20240508-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
Language/en-US/avicap32.dll
Resource
win10v2004-20240704-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
Setup.exe
Resource
win7-20240704-en
windows7-x64
4 signatures
150 seconds
Behavioral task
behavioral8
Sample
Setup.exe
Resource
win10v2004-20240704-en
windows10-2004-x64
12 signatures
150 seconds
Behavioral task
behavioral9
Sample
barchan.pptx
Resource
win7-20240705-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral10
Sample
barchan.pptx
Resource
win10v2004-20240704-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral11
Sample
madHcNet32.dll
Resource
win7-20240704-en
windows7-x64
4 signatures
150 seconds
Behavioral task
behavioral12
Sample
madHcNet32.dll
Resource
win10v2004-20240704-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral13
Sample
mvrSettings32.dll
Resource
win7-20240704-en
windows7-x64
4 signatures
150 seconds
Behavioral task
behavioral14
Sample
mvrSettings32.dll
Resource
win10v2004-20240704-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral15
Sample
unrar.dll
Resource
win7-20240704-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral16
Sample
unrar.dll
Resource
win10v2004-20240704-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral17
Sample
vcruntime140.dll
Resource
win7-20240508-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral18
Sample
vcruntime140.dll
Resource
win10v2004-20240704-en
windows10-2004-x64
0 signatures
150 seconds
General
- Target #!SetUp_51946--!PassW0rdz#$$.zip
- Size 9.3MB
- Sample240705-2be1pszend
- SHA256 19c631d05e365c3334e761a9be2280b12016a7bfa5dede76062234bc36fd6767
- MD5 524bcff50fd000f7889ae1142e65b608
- SHA1 39742864bc4bf5637d7b865026dbcc9fb39aa973
- SHA512 4a89dcc39f32966c95e133027eb86a7ccea24ee08d6d11fd31efb32e09559e4fffb9ba186f827908bd983fcedad52de78aee4360e8afa05e645c991fdfe1fe46
- SSDEEP 196608:NHIGEKvGMdbMWOe10kqXyRUmJr75+Nycd3OJ98hZhzzkvpTRN6sXR01b/UPl:NUUK1e10k0yr5A8swekBt0sO1k
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack002/Language/en-US/AutoWorkplaceN.dll.mui unpack002/Language/en-US/avicap32.dll.mui
File Explorer
-
#!SetUp_51946--!PassW0rdz#$$.zip.zip 9.3MB
-
0pen___files/!ŞetUp_51946--#PaSꞨKḙy#$$.rar.rar 9.3MB
-
Language/Locals/am.pak145KB
-
Language/Locals/ar.pak148KB
-
Language/Locals/fi.pak93KB
-
Language/Locals/fil.pak103KB
-
Language/Locals/fonts/8514sys.fon9KB
-
Language/Locals/fonts/dosapp.fon35KB
-
Language/Locals/fonts/smalle.fon25KB
-
Language/Locals/fonts/symbol.ttf67KB
-
Language/Locals/fonts/trebucbd.ttf238KB
-
Language/Locals/fonts/trebucbi.ttf220KB
-
Language/Locals/fonts/verdana.ttf237KB
-
Language/Locals/fonts/verdanab.ttf206KB
-
Language/Locals/fr.pak109KB
-
Language/Locals/gu.pak199KB
-
Language/Locals/he.pak124KB
-
Language/Locals/hi.pak206KB
-
Language/Locals/hr.pak99KB
-
Language/Locals/hu.pak106KB
-
Language/Locals/id.pak91KB
-
Language/Locals/lt.pak107KB
-
Language/Locals/lv.pak107KB
-
Language/an.txt7KB
-
Language/ar.txt12KB
-
Language/az.txt9KB
-
Language/ba.txt10KB
-
Language/be.txt11KB
-
Language/bg.txt12KB
-
Language/bn.txt14KB
-
Language/ca.txt9KB
-
Language/chrome_[1MB]_[1].exe.exe 1.9MB
-
Language/co.txt10KB
-
Language/cs.txt8KB
-
Language/da.txt8KB
-
Language/de.txt9KB
-
Language/el.txt16KB
-
Language/en-US/AutoWorkplaceN.dll.mui.dll 2KB
-
Language/en-US/avicap32.dll.mui.dll 8KB
-
Language/eng.txt7KB
-
Language/es.txt9KB
-
Language/et.txt7KB
-
Language/eu.txt8KB
-
Language/ext.txt7KB
-
Language/fa.txt10KB
-
Language/fi.txt8KB
-
Language/fr.txt9KB
-
Language/fur.txt7KB
-
Language/fy.txt6KB
-
Language/ga.txt8KB
-
Language/gl.txt9KB
-
Language/gu.txt17KB
-
Language/he.pak124KB
-
Language/he.txt11KB
-
Language/hi.pak206KB
-
Language/hi.txt17KB
-
Language/hr.pak99KB
-
Language/hr.txt8KB
-
Language/hu.pak106KB
-
Language/hu.txt9KB
-
Language/hy.txt13KB
-
Language/id.txt8KB
-
Language/is.txt8KB
-
Language/it.txt9KB
-
Language/ja.txt11KB
-
Language/ka.txt17KB
-
Language/kaa.txt7KB
-
Language/kab.txt8KB
-
Language/kk.txt10KB
-
Language/ko.txt9KB
-
Language/ku-ckb.txt12KB
-
Language/ky.txt12KB
-
Language/lij.txt7KB
-
Language/lt.txt9KB
-
Language/mk.txt8KB
-
Language/mn.txt8KB
-
Language/mng.txt20KB
-
Language/mng2.txt21KB
-
Language/mr.txt10KB
-
Language/ne.txt13KB
-
Language/nl.txt8KB
-
Language/pa-in.txt14KB
-
Language/pl.txt9KB
-
Language/ps.txt8KB
-
Language/pt-br.txt9KB
-
Language/pt.txt9KB
-
Language/ro.txt7KB
-
Language/ru.txt14KB
-
Language/sa.txt19KB
-
Language/si.txt16KB
-
Language/sk.txt9KB
-
Language/sl.txt8KB
-
Language/sr-spc.txt11KB
-
Language/sr-spl.txt7KB
-
Language/sv.txt8KB
-
Language/sw.txt8KB
-
Language/ta.txt12KB
-
Language/tg.txt14KB
-
Language/th.txt15KB
-
Language/tk.txt9KB
-
Language/tr.txt9KB
-
Language/tt.txt13KB
-
Language/ug.txt11KB
-
Language/uk.txt14KB
-
Language/uz-cyrl.txt14KB
-
Language/uz.txt9KB
-
Language/va.txt6KB
-
Language/vi.txt8KB
-
Language/yo.txt10KB
-
Language/zh-cn.txt7KB
-
Language/zh-tw.txt7KB
-
Setup.exe.exe 3.1MB
-
barchan.pptx38KB
-
madHcNet32.dll.dll 921KB
-
mvrSettings32.dll.dll 1.0MB
-
resources.pak4.9MB
-
turnspit.mkv779KB
-
unrar.dll.dll 304KB
-
vcruntime140.dll.dll 94KB
0pen___files/!ŞetUp_51946--#PaSꞨKḙy#$$.rar
- SHA256 ba3a8034ad4d152c9f15952ee131d44158f0551c5cbf2e5fadee733780b9f3d3
- MD5 329afe25200232bf4c6c509b3a295ac4
- SHA1 b9d3837ef7f8c131fd1e33151a0d247e062449ca
- SHA512 3d742e18cce26bb6409dd40b18c23e52cfaae734b4136dabb1f379fc77942a2906f6575d3990f5730d630c9259fdefb0c324c2d91db6fe7bcc628016af54d9b5
- SSDEEP 196608:UHIGEKvGMdbMWOe10kqXyRUmJr75+Nycd3OJ98hZhzzkvpTRN6sXR01b/UPL:UUUK1e10k0yr5A8swekBt0sO1k
- MD5 SHA1 SHA512 SSDEEP
Password
51946
Language/Locals/am.pak
- SHA256 4c0b4273dc4103c666ff01ed8b9db995f68c5c178973465bb25cd5cdf99ef01a
- MD5 4e7db89a9f5c07a295de43b745e5658b
- SHA1 3f24cbc02d130ed156f1b4c57dc951a9238dc8ef
- SHA512 c4117d50e2b966345ff86aade385552915ba41bb176fcdcd402fb54949377f00d17eea384ec90df2e3db92354198ce600131b7609eedf108f7b919d5ba330611
- SSDEEP 3072:Mw1jZA/92t7Rh4rgEkDvuHqOVoZL5kiIEG/yZJjhSQVNLWGe/oqM0bvuo00kef9m:716eGurQfZx30jH8+x
- MD5 SHA1 SHA512 SSDEEP
Language/Locals/ar.pak
- SHA256 776db47dd91bce8bc813a54a815be3e73b6e58e9fe5f24db7bf0d8c06a240f6a
- MD5 70bb1c831327b26e4dd74097f59a55b0
- SHA1 46cf431d19bff9646ae6c6fd0c57e25664178d14
- SHA512 8f78d18e15ee86b801cb49ee4ee7f5dc06f9730181b849ede944c5d922f7c7ab5814d7879399a712e8bb56b1878011552b6a667a6b8dccef6c6be3f236c3f44a
- SSDEEP 3072:qjf5HjSNsZaJBWGxyxMtxHSM2uZtE9yDSZ1B/G29KSI1+CsI1IiH2L2p:BNsRFoyCsI1Zd
- MD5 SHA1 SHA512 SSDEEP
Language/Locals/fi.pak
- SHA256 528e453ee8fd16b6e2066b5417b115504cd31afc4ffbd79206369c747caad1fe
- MD5 c865b2cab8dd25682b40006832a4b604
- SHA1 0722c7157c96eff7a4ac85a113cf21c4d0e27b1f
- SHA512 8eb3dbff515e18f481f62e8f3ac17ea7674ea8adf0c37b0bb2c5da6c9914b9376a8dac35f2e004a313fc5f2507e7200bfcc3b5973ae428df147d93b26ed3965b
- SSDEEP 1536:jw0tbGVUG8TQyRYFTTqIZq3Ik7414JEj6MEi18El0oR8QoFcb4EjjATcM1JhizRs:jw0tbUaTQuYFTTTq4Ug4JEjH18ElXRCV
- MD5 SHA1 SHA512 SSDEEP
Language/Locals/fil.pak
- SHA256 500906ac9cab570726fe2c3c819eec3f88cb69f326857920d8423883c222c773
- MD5 60d50ee0763200548c9df4b4bc712cd1
- SHA1 206f9cd895936fd7f597b72446c529881cde9829
- SHA512 f59a30f34eab4bec57b6e5d3e53e0b13b74db64f50a9d7b33c9a6fad63de3a80a2436fe8483355d3632fabbc613e1aeb38a3792c4296773fbe50e23ba1e7dee5
- SSDEEP 1536:jsSFtTdYhLVgQNqsszmNvuNpEWnGkHl1AM64CzPEchYkZKk175aXmAMD:zTdmq51AaCzh7MKsmAW
- MD5 SHA1 SHA512 SSDEEP
Language/Locals/fonts/8514sys.fon
- SHA256 dc7e1c9bb168e22b7a8b1a10c5d9555d71ea8486dc0d628fa17d117698bae61b
- MD5 bb8f1f693bebf6c738e47b68c4db7d06
- SHA1 78e8897326882c540ad1550d400e4533a1edd78e
- SHA512 2d3e000b5c2fce04bf8ab27dc684bfb75c7d4ae29e510a8dd5d232651f0b8fdeceed3e618f5aa3cc4666a4d81f0ebe274383cb08c4c9b6fdbb2ce6f095d3485c
- SSDEEP 96:z26rDEDrYDaUEZIZCa9qkzAZxo5m3NYiCDuUUDK1FDflI:i9UEIYaAkzWxciCDzL
- MD5 SHA1 SHA512 SSDEEP
Language/Locals/fonts/dosapp.fon
- SHA256 0da0d4ed89fd1e8810c7f2cdb5372abfb02cb3d031acacc1a5bbc853f879c2bd
- MD5 8a5853ebfc046f428dd31c5f3ae217ef
- SHA1 61dccd934eeaf49b9dfe4385e5ba12ea8eaaa35c
- SHA512 b2427ec94402e06af2239277087376ebb5a4a231a2d9fd020e7eae557b865355f257d0fb3c2f2f306c132f919160b5b7d50e0f078f9e382a3ed9ceee3e285c32
- SSDEEP 192:0mDIv/vfv/vfv/THU0nunX/ff//ff//tYAhzZfLL+8bDLRnuQlfOFYFYmuPGlVu:0mDQX3X37U3vnHnHWAhzM8FTlfOUuT
- MD5 SHA1 SHA512 SSDEEP
Language/Locals/fonts/smalle.fon
- SHA256 de416395301da32c96bf34625483ea6ecdcdaaeb9ff72cdca00b5af4d7092da9
- MD5 abc2dda06ac9d95b210a3a805d724391
- SHA1 f696b1221ce83c5b9a01ffc53a4a07e10fa31226
- SHA512 5f3a8ec4228ec588cfbaeef47ccd4c2a97cd30228d28d657940b6806e835f0dad697217f253d1ab129ab110ccf6f90298fd75df323fbd40a7ecba1079fac87ec
- SSDEEP 96:B2eD1DtDEDSD5qDJDHfDgpiGNDYpF1R2Oj/IwDutDzJD4xZoBHGDFPAVWsCPkvYd:7SpF1pjIDzex6LVBn9SplqvEQWX0Y4
- MD5 SHA1 SHA512 SSDEEP
Language/Locals/fonts/symbol.ttf
- SHA256 bbf1192965e5266fbf23370416337d2861fc1e8bd349def93f2994ba67382fc3
- MD5 3e443984997631a694dabf0fba9c8693
- SHA1 5ca2785630fae8b7337d37492c4486b224a2fd5e
- SHA512 f42387acd0e60994fb9c48d7de8d050113634af768722e9c4bd3c5a420869143df9f138476e9e785b04da68d1fb230238d164bb5efb5dce67d26856c12b29ccb
- SSDEEP 1536:cpdCuONLItPRYqXoDxIsTVJ/HMRIHgxxLba:sIXNLIVaqoDxIsT3/HMRIAbG
- MD5 SHA1 SHA512 SSDEEP
Language/Locals/fonts/trebucbd.ttf
- SHA256 dfcc306777a594d2815368547dd897e2ac82aff8073e55d9e682569939e49b81
- MD5 af116cc142b0786d0c7898103a0bcd12
- SHA1 a1fa4d6d7a2ddd568e4c615091ea7fa405c7052d
- SHA512 e757178d9007e591ef5cbbf91454f362aec75d637b954d2bfbbfb2c4935280be5a00a53d3b5b1408ec0095c1ea482f255c4cc6508ef39c456cffe3374132b940
- SSDEEP 6144:MzuSY5gmIupqm9PXfGQSy57HRKU00i1/5:CdAqeP7HtHRKP
- MD5 SHA1 SHA512 SSDEEP
Language/Locals/fonts/trebucbi.ttf
- SHA256 87942234ab0cc4400088648bef8d1f7afc4c44e676c7ed6b32ca31462c18307d
- MD5 7b0201d14bb2a17514480eafd86da51f
- SHA1 78296a55fcd48978a28bfc5ca0d230ffebbc0e4e
- SHA512 1fa546243b042949e4a281055586ab4e6d177d99d65af9753e689ec8ac63a98b252579357d131f618f4399d80b61c5f82fcbfd28926f901d7c43a2ab4700389d
- SSDEEP 3072:hnNrseJzgDqZNZJgHQds6TUYbqI/4TfLHu/IULnneSS1XAAngJ41:xgDqZbWNj59raIULnnRS1/51
- MD5 SHA1 SHA512 SSDEEP
Language/Locals/fonts/verdana.ttf
- SHA256 6a8481fe107ee547893c018b13dba291c2020bec3de5da6525d9ac09f6bc2105
- MD5 5587517d47893e1470ab2296eb609c93
- SHA1 0919499ee7c5cbf6ec77d8d82f913df94962d415
- SHA512 cf5dfffc1370e237106374e3d1f6211434a76b2b6804e88823a4689d03bfeaf183779cb76db141d0a8b2feb9eeb589c4a7220214c1157cae56ebcc1b945f809a
- SSDEEP 6144:kSa3ky/zQva3i0SAqyOpBc1kWw+b8S9g2CRKeCN4A0Q+Vnkn:oQvvNyu+NveCZ0Q+Kn
- MD5 SHA1 SHA512 SSDEEP
Language/Locals/fonts/verdanab.ttf
- SHA256 f3245f5f38f61bd1ceefb0f1338a5b88a21e6220832c2f43a38bbc7e1547c36f
- MD5 215accaad3dd60e8a5ab1b110f79d507
- SHA1 612e869a6da8f879a67109ae4d78a0a41f266ff9
- SHA512 075d5dce7fadd8ce273a0a5e7d35e54682623dbb9502932c39bf101b90f166b29d81660339a71bc06b9a40c8dddd8f5d3164fc1234895b62903088cfa665bd1d
- SSDEEP 3072:nbaB8YYR+hff30sWnKmN8sjZ/aFTByY7VBXhisnoaIeHrLYTHzZnL4n:bsh7YKxIZ/GycVBhisnoOLL6ZnMn
- MD5 SHA1 SHA512 SSDEEP
Language/Locals/fr.pak
- SHA256 0ddb18e05d4a58c010a42207af0ffdfaf12f9bee29f6971459bd69fdf26b0e79
- MD5 b5bce917fb4d322dad4b26febaaef09f
- SHA1 891fd73ba1c70be635772386e4bf3cb13496fb59
- SHA512 a795e60a2197f4a2f9644e2b4c96635472e270274e991cc1130edc64e112f2d527577ff3b7bf7539fc62e724687f82330bc59e3adeaeb37000a60dcd4e503425
- SSDEEP 3072:hPI7B3PxbJzThykykClc3wwTwajbIwKByroFDuFcZqslcaWyNf/Uv:hw75PxdzTIkykClKwGIwKgrwDuFArfsv
- MD5 SHA1 SHA512 SSDEEP
Language/Locals/gu.pak
- SHA256 5a23541ce618f91b78a809fe91a0c68681e20018c4411e00d8c205ab1d850dbf
- MD5 b0b1b848ceafcaf9e0dcde8bcf7492d8
- SHA1 39e929ebc69acc4c6610b9c3382c49a376ac9052
- SHA512 7ac783936a15c1313dd7a68961ee98e4d351b60d3ef1e5bd89ef02456145fcca5147884038950a8b9ed0de7ed37ed6f3c2ce9b82de5e3a426ec7e5e918e5b2c7
- SSDEEP 3072:twDmoa1A626WB8Z3i81cKHdO3Iu62oY/meBeQOR5q22Dv2pCbflLMWsCBDnZkSHl:tQ4Cv
- MD5 SHA1 SHA512 SSDEEP
Language/Locals/he.pak
- SHA256 ca440d0128b62e35333730c5925992ae5b4b05a37c10105a9145eb5cf7a77071
- MD5 209974550cc2a835f1879995851b424a
- SHA1 f09850b9e7fffce197e362b9562cd0ff1c5c71ed
- SHA512 4ab857adeab0e45f03868d1208d8f3250bbe27c5854bbc885e94e7e6ed8bcf9bdb2ff5035bebb1958b345ecadf244dcc433d760643ea544066b32f3f1e266276
- SSDEEP 3072:MSeD15QWmU6XrlH/piG5Bnm3XTnZ2F2j9V:MSeD15KPXrlH/piG5BnOXTnZ2F2j9V
- MD5 SHA1 SHA512 SSDEEP
Language/Locals/hi.pak
- SHA256 1ca6a0546f9627fa9ba3d377d79a21ff26ec9b349d47247c9b241a70728d0699
- MD5 fa034eb13d21ce4e9fc2d3eafdf40cd2
- SHA1 0992d91706d26b6cc2ff64d899308ba4e9380a35
- SHA512 4f8024f43a70d9d8ae67848e2540b028cf1b9183b7dedd66043fb16394601da986d695c8d28f072444a69c1b2639c8b79096065389069fb854d152db166ed734
- SSDEEP 3072:XkOxgTgcwfKSj33cdEVhk7ovrCEO/S/bBfvTHef+a7BKfzzrRE3b8RLljlxCYPhb:rOCi8R
- MD5 SHA1 SHA512 SSDEEP
Language/Locals/hr.pak
- SHA256 64e531e46cf5b644d1b7f1df885efcf51a65db50fab65ab250f5e4e1adfa9d29
- MD5 624bce9b02382312f4588d3147b738a3
- SHA1 8df16c75c9e86a96d9f2b11e80eb182ba6c8eef9
- SHA512 e74e56210cb3c184499de4e0d9e57e8ee9d7314b93fb1a97030a3397cc47b91ec74c704b25fc4bd16f4c7680240ae1d39d69cd9f024dd52c90eae9cc6c53b6ae
- SSDEEP 3072:1JKdAGC/lemhlBExypakZUaO2sMMoLaz7v53Kkx9i:lHiKp
- MD5 SHA1 SHA512 SSDEEP
Language/Locals/hu.pak
- SHA256 fdd99d667419612bf98200783e0ccf0f7c11913ca03ca162d72d43f6861e5478
- MD5 ca8a821ff5a6b848c5a170ff9a97bb39
- SHA1 a98b91fa29848013cef021ec8b3a29979cac0c65
- SHA512 e475a09e1f9f740b6c36c9b33b20f263896b869d8ac58848504db29903a9597b84761b9c3918addc9c726d4429a0f496f44e3a8b0cce9a3008d071a5d46bb5c6
- SSDEEP 3072:a1WzOkbJiCwF/iGn1dgTrdA0RdpEtL1543ICJ:eSbY/iGkTtRdpEPu3ICJ
- MD5 SHA1 SHA512 SSDEEP
Language/Locals/id.pak
- SHA256 03e35e4c8d682d80ebde0492ba01d5a922766daf70df6cb2a22a5a5365adff1e
- MD5 c26b55aa25d424653e75ac278b0bca42
- SHA1 fb49a3940c6380d6af38a82c95ca56cd3aefbeab
- SHA512 b701aee8c2d2490309c902cf152ea118d90429caabfef4774802319871bec4c94fe41d5a305d6df7b698ca051b21332a7422a63777470d781c70100ff758726f
- SSDEEP 1536:QOle5KmKs/EKdQ95/SWlEmjUwRHeEJpkw5B4X1CPXsAzb2ZghMrREYwcCdAbJ:QdlQ95KWxpkwc8XsAzaZGMNwcCdO
- MD5 SHA1 SHA512 SSDEEP
Language/Locals/lt.pak
- SHA256 70996649507cc815f0c4886f8c4822d45c5e201e8e41dc464ab4973ea19d8a23
- MD5 6b4c975b9a0b31fa4c0f8818ec53942c
- SHA1 dcc10f3758945824b092d071424f9ecb413a353c
- SHA512 4ad012581c3853d944152519202e1df67dbfee2fa752c3114da5bf8cb6653f1cb093d5bf951795990a0e0e5d16c8375ab99074cafecbce518ab83ddaa30d2dd9
- SSDEEP 1536:n8UXuRiF1eo5N8FYzKcdnaJGNMJ0c5PAQpvK5rmz3MWbhnfmvVDF6S05nGWSgAGU:n8UX/1eOxKonaJYQjbXd+NDF6S05nI
- MD5 SHA1 SHA512 SSDEEP
Language/Locals/lv.pak
- SHA256 605d916a697824c4ad6c418d6e7cc157b85825da5dc08a0716d89c56bef0a6fc
- MD5 2ac1161c66a47bb69378559c2c6fb44d
- SHA1 a1e28a5ae021fe5cbf57ed7e6e7177114421bfa6
- SHA512 2e5a9d0ed020447e6482feed0770c7f1f12118591c7412b4bb796a2219b9977632cfcef16faa0f28064d8b19c2dafc4fd2cae929d57bdabd37702152fa850855
- SSDEEP 1536:AllVfG/A7NnPXNGchkGB5nDJa7z+z0AhzOgUcCYh2Nn4WSuAhaIvhZmE42Cla2M6:cbfGI7dNDkGcOUcCYwNLyxfaVdF
- MD5 SHA1 SHA512 SSDEEP
Language/an.txt
- SHA256 0e8dd119dfa6c6c1b3aca993715092cdf1560947871092876d309dbc1940a14a
- MD5 bf8564b2dad5d2506887f87aee169a0a
- SHA1 e2d6b4cf90b90e7e1c779dd16cbef4c787cbd7cf
- SHA512 d3924c9397dc998577dd8cb18cc3ea37360257d4f62dd0c1d25b4d4bf817e229768e351d7be0831c53c6c9c56593546e21fd044cf7988e762fb0a04cd2d4ec81
- SSDEEP 192:ifEAGRBQ0p/74r5jMdDTSBXgDQ7V8vBOC:iV5o74r5jMdY8l
- MD5 SHA1 SHA512 SSDEEP
Language/ar.txt
- SHA256 972261b53289de2bd8a65e787a6e7cd6defc2b5f7e344128f2fe0492ed30ccf1
- MD5 1c45e6a6ecb3b71a7316c466b6a77c1c
- SHA1 04bf837911fa31ffca8e034158714b47f6489d38
- SHA512 5358bb2346c9f23318492b5e7d208e37a703c70d62014426eadd2dd8cda0b91c9d9c2a62eafe0137faefb38bf727fd4d5d8dc18394784ccae75ae9550558e193
- SSDEEP 384:7+CIwRJQh3hY4+6TRxAFqpdQbCs7ZpN4QyRl3fcxMZXj4V/2QT:LJi3K4+60Fqpd8Cs7ZpNryRl3fcxMZX6
- MD5 SHA1 SHA512 SSDEEP
Language/az.txt
- SHA256 caec460e73bd0403c2bcde7e773459bea9112d1bfacbe413d4f21e51a5762ba6
- MD5 81b732a8b4206fb747bfbfe524dde192
- SHA1 4d596b597cf25ff8d8b43708e148db188af18ef9
- SHA512 8667bff18a26fe5b892ecfdc8d9c78ecc5659b42c482e1f9e6eb09f7cf5e825584851cd4e9a00f5c62d3096d24cc9664f8223c036a4f2f6e9c568269b2fbb956
- SSDEEP 192:iQMqAQbtI+SY+oEDQM0ia9mh/Vg/HksiM0ko3gvje2ojVPC1vUZzxEBa2U:i7SrSYzEsMDV4P0kggv6pCahxEwr
- MD5 SHA1 SHA512 SSDEEP
Language/ba.txt
- SHA256 2901b54f7621c95429658cb4edb28abd0cb5b6e257c7d9a364fc468a8b86baae
- MD5 d83b65ac086da0c94d6eb57bee669c2b
- SHA1 6210f62d41d44cc280f44b39accf10da28424b75
- SHA512 56c7ecb4223103d81ffd11c214cceac20e7770b82fbc78a5e82e6dd9d589cc319d4689bb6d9027e5d272097e1b33ddba27a8414fcbc29f9ef68329e343004222
- SSDEEP 192:ikNx8wxsv75EMVB1m6pP3z/WxdxbpXuBwBMzByzVHQnlBJ7a/NMIMx:ikLhsv75EMVB1m6pP3dzk5ww/NMIq
- MD5 SHA1 SHA512 SSDEEP
Language/be.txt
- SHA256 d095879b8bbc67a1c9875c5e9896942bacf730bd76155c06105544408068c59e
- MD5 3c21135144ac7452e7db66f0214f9d68
- SHA1 b1ec0589d769eab5e4e8f0f8c21b157ef5ebb47d
- SHA512 0446a0e2570a1f360fd8700fd4c869c7e2dbb9476bbdec2526a53844074c79691542b91455343c50941b8a6d5e02a58ee6aa539cc4c4ae9cf000b4034ef663e2
- SSDEEP 192:i2PDEeaNB1PmcptkcDHxbTvPnc67bMxQxGx4ch/JuLQRcg/oN96bPNljYiYr197:ikDFKBFmcPLx3HPnIsqrJuqcgAN96b87
- MD5 SHA1 SHA512 SSDEEP
Language/bg.txt
- SHA256 4dcabcc8ab8069db79143e4c62b6b76d2cf42666a09389eacfc35074b61779e3
- MD5 833afb4f88fdb5f48245c9b65577dc19
- SHA1 1a6e013226be42cd2d2872b1e6e5747fab65fe8a
- SHA512 05bbc7abcfd0a0b7c3305c860b6372871cf3927bbe1790351485a315166e4cbdf8d38d63e01b677bdba251ce52da655f20b2d44b997d116a1794c7b3eb61ef31
- SSDEEP 384:i6jWFsfLEnlztmkbjX8jD5VqWMTlHdr8vwyFSH:tfghGufHdrLyFA
- MD5 SHA1 SHA512 SSDEEP
Language/bn.txt
- SHA256 216cc780e371dc318c8b15b84de8a5ec0e28f712b3109a991c8a09cddaa2a81a
- MD5 d0e788f64268d15b4391f052b1f4b18a
- SHA1 2fd8e0a9dd22a729d578536d560354c944c7c93e
- SHA512 d50ea673018472c17db44b315f4c343a2924a2eaa95c668d1160aa3830533ca37cc13c2067911a0756f1be8c41df45669abe083759dcb9436f98e90cbb6ac8bf
- SSDEEP 192:iM+g4O23sZEstg+lTr++0Mx148IiZaXTXEU10bXYc+4/rexX4:iMyc2stg+lTr++0MQ8DZRDYc+4axI
- MD5 SHA1 SHA512 SSDEEP
Language/ca.txt
- SHA256 ed8748da8fa99db775ff621d3e801e2830e6c04da42c0b701095580191a700a6
- MD5 1657720023a267b5b625de17bf292299
- SHA1 0045dfafafb9c9058f7d0d6a6c382959c5a67fe0
- SHA512 e7998f6484370e53db9cdc80cd55070e408aa93161fa59e48c6e2b26462d6d3eb774c011212840ef1eb821a5ba067b6706cd4ca2be00619aecd24a11e6ca136f
- SSDEEP 192:iDNC5+TqX1VvwqqNZ3SE/ye3TmsZmpk0R6PeNJH+L/w3M0ZeDwDWBszBUe:iBhuX1OqqNZ39BDmfHB4yXBUe
- MD5 SHA1 SHA512 SSDEEP
Language/chrome_[1MB]_[1].exe
- IMPHASH 53811707eb72202ebb2c8f39bfac68c5
- SHA256 c532ffa77b220ac54083dffb2286c526c2873131448e3a37fe29dbee6aa028b4
- MD5 068cf70414b79cd8bc078497553389ed
- SHA1 d9778170404ad0435ab82ebba3fb5515831dd17e
- SHA512 89b69a9c53530605573d7816eb625840404251e9407fa6041492fa5ad21bfe21206f2fa5bb21f4b85017c5a39daabe13f51c615f54ce08fffaeeb5556bdb45ad
- SSDEEP 49152:9b8W92V8WpGaPIgI0GW5VuwHDoTZyMB0q7ug52I8:mW08WpNPLGY4wHDoTZyMjSF
- MD5 SHA1 SHA512 SSDEEP
Password
51946
PE Signature issue
Digest
1e:82:91:03:50:a5:e9:01:9b:c7:1e:95:da:50:d2:4e:e9:3c:5c:64:e4:df:7e:e3:40:36:25:7f:61:f5:61:a2
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Stefan Ries,O=Stefan Ries,ST=Hessen,C=DE
Chains
Mar 2, 2024
Subject
CN=Stefan Ries,O=Stefan Ries,ST=Hessen,C=DE
Serial Number
6b:4d:af:cc:ac:60:53:d1:bd:9b:24:05:bf:cf:26:2a
Issuer
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 7, 2021 - Sep 6, 2024
Subject
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US
Serial Number
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jul 14, 2023 - Oct 13, 2034
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
1
Major OS version
5
Entry point
1059808
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB paths
chrome.exe.pdb
chrome_elf
GetInstallDetailsPayload
IsBrowserProcess
IsExtensionPointDisableSet
SignalChromeElf
SignalInitializeCrashReporting
kernel32
AcquireSRWLockExclusive
AddVectoredExceptionHandler
CloseHandle
CompareStringW
ConnectNamedPipe
ConvertFiberToThread
ConvertThreadToFiberEx
CreateDirectoryW
CreateEventW
CreateFiberEx
CreateFileMappingW
CreateFileW
CreateIoCompletionPort
CreateJobObjectW
CreateMutexW
CreateNamedPipeW
CreateProcessW
CreateRemoteThread
CreateSemaphoreW
CreateThread
DebugBreak
DecodePointer
DeleteCriticalSection
DeleteFiber
DeleteFileW
DeleteProcThreadAttributeList
DisconnectNamedPipe
DuplicateHandle
EncodePointer
EnterCriticalSection
EnumSystemLocalesEx
EnumSystemLocalesW
ExitProcess
ExpandEnvironmentStringsW
FileTimeToSystemTime
FindClose
FindFirstFileExW
FindNextFileW
FlushFileBuffers
FlushViewOfFile
FormatMessageA
FormatMessageW
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetComputerNameExW
GetConsoleMode
GetConsoleOutputCP
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentProcessorNumber
GetCurrentThread
GetCurrentThreadId
GetDateFormatW
GetDriveTypeW
GetEnvironmentStringsW
GetEnvironmentVariableW
GetExitCodeProcess
GetFileAttributesW
GetFileInformationByHandle
GetFileInformationByHandleEx
GetFileSizeEx
GetFileTime
GetFileType
GetFullPathNameW
GetLastError
GetLocalTime
GetLocaleInfoW
GetLongPathNameW
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetModuleHandleW
GetNativeSystemInfo
GetOEMCP
GetProcAddress
GetProcessHandleCount
GetProcessHeap
GetProcessHeaps
GetProcessId
GetProcessMitigationPolicy
GetProcessTimes
GetProductInfo
GetQueuedCompletionStatus
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemDefaultLCID
GetSystemDirectoryW
GetSystemInfo
GetSystemTimeAsFileTime
GetTempPathW
GetThreadContext
GetThreadId
GetThreadLocale
GetThreadPriority
GetTickCount
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultLCID
GetUserDefaultLangID
GetUserDefaultLocaleName
GetVersionExW
GetWindowsDirectoryW
HeapDestroy
HeapSetInformation
InitOnceExecuteOnce
InitializeConditionVariable
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InitializeProcThreadAttributeList
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
IsThreadAFiber
IsValidCodePage
IsValidLocale
IsWow64Process
K32GetModuleInformation
K32GetPerformanceInfo
K32GetProcessMemoryInfo
LCMapStringW
LeaveCriticalSection
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
LocalFree
LockFileEx
MapViewOfFile
MoveFileW
MultiByteToWideChar
OpenProcess
OutputDebugStringA
PeekNamedPipe
PostQueuedCompletionStatus
PrefetchVirtualMemory
QueryDosDeviceW
QueryInformationJobObject
QueryPerformanceCounter
QueryPerformanceFrequency
QueryThreadCycleTime
RaiseException
ReadConsoleW
ReadFile
ReadProcessMemory
RegisterWaitForSingleObject
ReleaseSRWLockExclusive
ReleaseSemaphore
RemoveDirectoryW
RemoveVectoredExceptionHandler
ReplaceFileW
ResetEvent
ResumeThread
RtlCaptureStackBackTrace
RtlUnwind
SetConsoleCtrlHandler
SetCurrentDirectoryW
SetDefaultDllDirectories
SetEndOfFile
SetEnvironmentVariableW
SetEvent
SetFileAttributesW
SetFilePointerEx
SetHandleInformation
SetInformationJobObject
SetLastError
SetNamedPipeHandleState
SetProcessDEPPolicy
SetProcessMitigationPolicy
SetProcessShutdownParameters
SetStdHandle
SetThreadAffinityMask
SetThreadInformation
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
SleepConditionVariableSRW
SleepEx
SuspendThread
SwitchToFiber
SwitchToThread
SystemTimeToTzSpecificLocalTime
TerminateJobObject
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TransactNamedPipe
TryAcquireSRWLockExclusive
UnhandledExceptionFilter
UnlockFileEx
UnmapViewOfFile
UnregisterWaitEx
UpdateProcThreadAttribute
VerSetConditionMask
VerifyVersionInfoW
VirtualAlloc
VirtualAllocEx
VirtualFree
VirtualFreeEx
VirtualProtect
VirtualProtectEx
VirtualQuery
VirtualQueryEx
WaitForMultipleObjects
WaitForSingleObject
WaitForSingleObjectEx
WaitNamedPipeW
WakeAllConditionVariable
WakeConditionVariable
WideCharToMultiByte
WriteConsoleW
WriteFile
WriteProcessMemory
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
ntdll
RtlInitUnicodeString
GetHandleVerifier
GetPakFileHashes
IsSandboxedProcess
Name
.text
Size
1.4MB
Virtual Size
1.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
168KB
Virtual Size
168KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
13KB
Virtual Size
80KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
349B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
CPADinfo
Size
512B
Virtual Size
40B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
210KB
Virtual Size
210KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
51KB
Virtual Size
51KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
Language/co.txt
- SHA256 5470b36a4a715deca06035333a01e0a2899fce1cf6c29a6ece4c35cfcc843cfd
- MD5 c76b8c615c11469d5f6dff0abf39171e
- SHA1 1906cd1ce4712d79d129fcf32fd2ff87368081ea
- SHA512 c4920988538810b9501c6790a2ed4d4e82500134244b8ae1371f3025bffbc7e6cc73fe1a9839aa2a0d020f2b9cbf0fd09ec99354cb2a65c3d08af519bde38384
- SSDEEP 192:ihVHn4OzB1duTbLH7v6Hosnk8dazlVDFdYojN4/5rA3AOEY9yt0zKdAVJg:ihtnjJuHLH76Hosk8daZV7FjN4RrA3FG
- MD5 SHA1 SHA512 SSDEEP
Language/cs.txt
- SHA256 87a4b9369fd51d76c9032c0e65c3c6221659e086798829072785be589e55b839
- MD5 641b90f9aedfc68486d0d20b40f7eca6
- SHA1 0a683dd844534905336784fadd80498afe26f6fa
- SHA512 567cb9f6c31d196a171e5a9c2726a39a9b3d351ac92d4acf8624213a68c9033acc31afaaad82aa9f5359f32d3a0ca40522e151b8370d553a41abeb6a6e097078
- SSDEEP 192:iRJ98lWxEb5BvGIrd+mc1OTno+SXhbSIm1JjSvcQpK/w:ijK0GeIrQmEOTno+SXox1JjmpKo
- MD5 SHA1 SHA512 SSDEEP
Language/da.txt
- SHA256 f65026ae33d4302a7ef06a856f6f062c9730100f5a87d5c00fb3feaf5fcd5805
- MD5 d8aba2da47c1031832957b75a6524737
- SHA1 b83069ef9f7a08f18804ae966b8d18657e2907cd
- SHA512 82b5f4ab8e3e2310a98be87b5cf2cbf04b7aeae1798cd69529325ee74add40bdca38eda865a821f66436906d4f3224004f690cf406b532e116475d2b2424b570
- SSDEEP 192:7lsrCMNPOVDlCOd6NSv9MPdYJIG8YsYccAP6ox1OYSqMHCaQEzYcdD73Q5CTG:7lsrVwJCe6NzPdYJIG8YsYccuT1RSBCV
- MD5 SHA1 SHA512 SSDEEP
Language/de.txt
- SHA256 06e5265a2b30807296480dc0b0d3a27e41f1381d61229e4eb239c4930d14a43e
- MD5 40ae22f5bcbeab6f622771562d584f2b
- SHA1 4eaa551055ccfa0076766b7bdf111de9dbcc1c82
- SHA512 581a94dc12fe48aebfd88453351697aed9de5b1decf4c5dd53cf4db38d50727d3b887498f0bee6bd532cfbdc8af7bc01fc8d58ce0c3f6fac235bc6ff3f843125
- SSDEEP 192:ifuT0Y83ghfM/5yT9lBJ/LQs6gIgiOvcLh3ahAHE+XAgiRTlu6ZgSboZDWUL+g9C:iG0D3ghcy7Ms6gIgiOktU+Iu6CS4L+g0
- MD5 SHA1 SHA512 SSDEEP
Language/el.txt
- SHA256 cf90a21c69a13e0d674b6b74e2904f7d9d3bee594d89862155d94105311f47a7
- MD5 812df218dae08f9f883a7455015707b2
- SHA1 6e7d7d1c8e783b9b913f44df515f4d376d3502c4
- SHA512 51c3c6151b47fa5e3968604cc2385c5d0984ccb96b8f92982bd28440786e1b99826aa70ae1232465a3469ddb6c50d13a241b6a979387eb47bff013953db1ed07
- SSDEEP 384:iZF/smolE2pHjN6ZdrD2zH9bOrcjfnicC5aLoDNwSF:wNIEZRD2R5jfnic+aLoBwSF
- MD5 SHA1 SHA512 SSDEEP
Language/en-US/AutoWorkplaceN.dll.mui
- SHA256 799cf32fc0515a4bcc0388d0d39618d9c67ee67a1c2000d7344c5a8120004e2e
- MD5 a311c98e7cb3bc2c6f4ad9ca65e95810
- SHA1 481168e5c9437731ab632fcacb9c88471c008d6b
- SHA512 8eefd67ab748725145db643dab47f608b66582c194e42ed412bfe31f26c36b2bd2c4e157fa1bfaa582c697de267c242e5e809be109c7ab3f61f19bd6812e416a
- MD5 SHA1 SHA512
-
Unsigned PE
Checks for missing Authenticode signature.
Password
51946
Minor OS version
3
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
2KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=201, version=65501,
count=1, id=204, version=65501,
Language/en-US/avicap32.dll.mui
- SHA256 cb852e13a323c8e226b9bccc7786df3c55e4be16d9d63f4911ea0565ac879a9c
- MD5 a5696b2d379fb322c7ee1e18c01ca920
- SHA1 0063d4f4814d4565334b5937fd83b56287ab413a
- SHA512 01e93385f90fd0a25d8c7da31704cf8d04596113fbc9c19199506bbb5ba978f974c65a636ea663fec0c32408a931499814f806091ef7b3d9ca59c26fa01cdabd
- SSDEEP 96:9XIEThBLwopUCfwpyIR3M7Pel5LdDzdlSjrviqEtp9JhZ47/5PYBtTdbhFYIDiqf:KKxy3M7P5vRULZ4S5HTbnWnUrTWQ
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Password
51946
Minor OS version
3
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
7KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=201, version=65501,
count=1, id=204, version=65501,
Language/eng.txt
- SHA256 628366cbe1964564f8bcd0732abfe08cc3f9a86fe761e41abb41f84f7b6ba00a
- MD5 8d7264236adca0407fa61d942b7e575e
- SHA1 21861f62751d2e3d452146ba139e758f20da6f6c
- SHA512 74ab8e70fc3a685ae715368df90e9f6b9630e6dc1091436c244ad486db3faf25bc59ac1b89f90e935e7eb2c6766e19165032fc24824ad8af932ad95a8a34172b
- SSDEEP 192:iZ76FtmZSw5U0LutH5EVCPXUoDzg3TMHig7v7iH+xb:iZnKtH5EVC/U2zg34Cg7Hb
- MD5 SHA1 SHA512 SSDEEP
Language/es.txt
- SHA256 7dddae25296f14c1f45ac032d9c950c3a8d39a41489f9d2b06000edcfa7a6660
- MD5 5a449308a0176d6401181bef4af13765
- SHA1 9d8bc3e801bcfb43c7dbfab94ab91a4079a2070f
- SHA512 2aebd25219b12d88bdf7a4a1b90b6b13b4ed5d4215e15d2316494c56b7d696eeb3252478200bcf0d84160d11979f5a71c72ca110dd3e28e901cfdb13255c45b0
- SSDEEP 192:i3vSP1uIlLvt2WSBL7hBC2pjlRS03gyLuBODltrO9K:i3KPUIlrt29BdGK
- MD5 SHA1 SHA512 SSDEEP
Language/et.txt
- SHA256 d3fc7e1dd6f0486c99997b75d9d8c5592da6cfb9b89c3ec4f59e7bc5826b3456
- MD5 54d610c174514d0f60b382249885963c
- SHA1 4d2c22ba3da557a3e8641f8d5388123d96c8259f
- SHA512 80d51ce4dafa9967ddfa7a8bdf4f62351fa085a7059bc63f9427e0a5e70dc21cb917057f1a41b5e1a218138141dedcadf02e18a0f028ebee8316aaf4ad280d59
- SSDEEP 192:iz52C8/cUN7wdeSxU1ntA9i6fH4XKcmcb7cn:i92EA7jS99i6fH4XKc9b7cn
- MD5 SHA1 SHA512 SSDEEP
Language/eu.txt
- SHA256 536d93ca6d7c96d203b51333c4e78de2429f78d32cc321461589626759c84127
- MD5 29ec04893f6b2c9058a8f1e0beaf9081
- SHA1 8e7b5a0ec24153aa7be02f0395c003df02cf6a09
- SHA512 b84e6606a5f58392de5c5f8113db10b8212a82bb93367469284ad2dd9a961bf381e3d230179ec19a32cae7a266cdde7290d95a262dea247b267fdce905f89972
- SSDEEP 192:igp4YY4DAQwPnrVpoL2Q03nCIQJ861JcBkoZEU4DHYUv:i0JvVwPrVp9lQxHcBkoZEU47v
- MD5 SHA1 SHA512 SSDEEP
Language/ext.txt
- SHA256 3cd8b8633fbc076ee07bf58da6e01ab692df461381a2bad4ef5512c653da46e4
- MD5 f048977cdc74ff4d1f045fb3fd5d0118
- SHA1 4d44f8644a0d41fdde9f7d7732b197a4ebb65dae
- SHA512 48011fbffa45f8809fc6e7d1e8899ee29d4cc6be2cde36484301e71a3c3ffb85cca6cca6a9e9e79af5355b1309834f67d62100ad09aec852d152aca3688d129b
- SSDEEP 192:i+TjfUOQlhcX2jsmnNKjgwlgI34gjwhS9kj6P3eW15Qm0ImA6uBacIUmHm:igLQUmjRt0wD6PHPD0IhBt
- MD5 SHA1 SHA512 SSDEEP
Language/fa.txt
- SHA256 05851ba54b24d7fd45179419aee91a2d40bcab62e6aab99c1a92189fb636bbb2
- MD5 952328b44391b1d4196dfe1f832a16a2
- SHA1 7bf9ced7d272d2df60d2d3984333a6bb26a69377
- SHA512 34cc2908320e349d04babf2e5039dfc18b6aaf9f39bea6192e9d53bced3c661c847cce8a17b9aa6bcb941390da9a7ac40b28a93903c9f1946152a7fd93f43aef
- SSDEEP 192:iSExioqnlY02IxV2ew79hLxH1jIxOw/E9u7tWN/Up73om1qvu:iSEx22j+8TxH1I0zY7hp7V
- MD5 SHA1 SHA512 SSDEEP
Language/fi.txt
- SHA256 24d66c5733314f3f72b7ca0f5ceb5a3246726dddefcf2f033715188edb062db5
- MD5 7ac9d88f81aacef8759e510e9601a4b9
- SHA1 249fe906a2d5a8e084cad76e3e67dad26c77bdb1
- SHA512 00b67a09cc101c557b7c9a5ea623e654407a953fe87ebb5786a7a2e8ba1944130ba4026a64bf83952a14e7a7c719f81351d8a84fe0b3fe9ba553e4796e7a7ec1
- SSDEEP 192:i39+pcahf+fftkY41jF7gEh+fHPZk8fh39BbTk3iTOATOelpwPFy:i39+p3GfixF1gEh+Jk8VDkF3elec
- MD5 SHA1 SHA512 SSDEEP
Language/fr.txt
- SHA256 cc283e9b0c1822f757372c21f179710c4592a2f7755e706c48065bcfe70bba5b
- MD5 b1b6e1c3cf5247ec1618a88f9853d54d
- SHA1 0671cb77ad76f9e27237aa538f8efa6bccc40de3
- SHA512 045422d358b3348a1e52cced12d70757a7e6026801113eb68f07a399acc75b6ecc9a1a4401cb7a65506c6f61d4fbb348765b0c80080072bfe06e0500cf31b0ac
- SSDEEP 192:iNbWj/xYCMXHxl759OMLpwPGzfejsH0qNXRDvG2oZ56LXlX+78+LF3Af7Br1T:iW/0Xxl7fOkpwufqsH0EhbG22KXlu783
- MD5 SHA1 SHA512 SSDEEP
Language/fur.txt
- SHA256 fc944eaa7883341372ebd5ef0e2f236ca248b2996a902240a75218541b600e72
- MD5 dfd698a0f6ed7bf405a8fdd6f33b2315
- SHA1 a8cdbc14ad118c61d484cd62e8c4e7d1141fbb4e
- SHA512 07c5cd9ededc00fc28f878d83d327d91a91edc236b51d05cd8171e43bb175072fe9bf0a4c89d09e21441d8192b08e5c3e5e156fa132b1c657715a5b7cb0488a6
- SSDEEP 192:i3er20XT2wwImuvDQjdkg9E3JIWQ+iWPNULtCG+ydZystz3:i3erJD2wRmubQL9EuiULtCG+ydksZ3
- MD5 SHA1 SHA512 SSDEEP
Language/fy.txt
- SHA256 9fe460264af4abd9ff23eab79387ebb52b4498758645cd5721e75fd7b747e536
- MD5 0111890c0137974fce2d79b6d22e5686
- SHA1 98ab055fa8bf5f410cad55627424d6512338a4a1
- SHA512 86acdb4d62bf9c784bf21999cba5fa3674e70fe5647fdf1dc6a9c5b3cf9c182a18272d9c8400d997bb09e12c908e08a87a951c3d0156a134802e00f70dd1ad90
- SSDEEP 192:ikdpohFyPI4mHJR/eVMIBNgjJdMe1bEIVo5XT3EVULQ:ikmvpRGVwj7Me1bEQgDEV9
- MD5 SHA1 SHA512 SSDEEP
Language/ga.txt
- SHA256 406669ecbdf562e773b9cdf831cf5f63c3dd1a012c3521a41227c9141511d959
- MD5 b4295e254b9dfc90e0093188257c007c
- SHA1 6ae9b959a752c32fab8407b3aa277f300165a579
- SHA512 cc4671a9312b7f41ddecd2e02d038affd58bbc62363b811f15f10002c82ae826e060f5ad6e2b1fd75557b3dc3bbf12b6e6900b398623cf547e3727ccaa6bf8e1
- SSDEEP 192:iOCmUaOzBKdHRZqt83HRE0HruLP2HJioV/TFa18QCbjXsf0VUY+sGa:iTRNtKMt8BM1Y+ba
- MD5 SHA1 SHA512 SSDEEP
Language/gl.txt
- SHA256 54f676333ce58af67b839b0f0470f99f405b5ce7fdb9c345a19d00b6423277e5
- MD5 492e51b4b5b287fe2b90a5f0bd433847
- SHA1 f7e1eba770d3d07d0e8c2bd61d556508ef0578b8
- SHA512 0aa1df55256324b24b495543e4abbefd776108bdd90d3155d02b1c10f018bdbd1700c4430848dfbd5073a374715f8510efb17ae1812a9aa44b65e50edb23de59
- SSDEEP 192:iObNz5MsaqwKlr7UdusuTcaHAB9yVU8SqSd6W5rnuc+Yvy36rV:iOV5jaqwKlr7Ud+LgB9yVdOnuca6rV
- MD5 SHA1 SHA512 SSDEEP
Language/gu.txt
- SHA256 9025d8a58e0c76b186c943ef8a73a1bba6c08945e346de14d3c255ccfa3a10e6
- MD5 410c8a33c66b4b2bc707e113d9c76914
- SHA1 81a9f3618168dbecf309907ee74591ac3b1297b6
- SHA512 a520cf2dc7e9f653bb08c93c657cb8e2d1142e86c3e0bacc44457cba5ede044e91ff01f55139c5aeb7b3f26e51724931ea2b2bb20a058c4b9d888a3ae8766021
- SSDEEP 384:iyxKBXaWdxmWpk2x8QL/XwxD92K+R5+Twk292Bh72/OXMQH12fdvKA52hJV22b2o:FKBz5Cw+wvKAQco
- MD5 SHA1 SHA512 SSDEEP
Language/he.pak
- SHA256 ca440d0128b62e35333730c5925992ae5b4b05a37c10105a9145eb5cf7a77071
- MD5 209974550cc2a835f1879995851b424a
- SHA1 f09850b9e7fffce197e362b9562cd0ff1c5c71ed
- SHA512 4ab857adeab0e45f03868d1208d8f3250bbe27c5854bbc885e94e7e6ed8bcf9bdb2ff5035bebb1958b345ecadf244dcc433d760643ea544066b32f3f1e266276
- SSDEEP 3072:MSeD15QWmU6XrlH/piG5Bnm3XTnZ2F2j9V:MSeD15KPXrlH/piG5BnOXTnZ2F2j9V
- MD5 SHA1 SHA512 SSDEEP
Language/he.txt
- SHA256 dcd061a0a7b29f55fa28d4396f60881836c2df07cd936412c476a7f149540cc4
- MD5 1b53819f8d58fd734b5fd985756b557c
- SHA1 8759783adbd62c6f32511313babb9d138fa0a150
- SHA512 b7f0a16d9d02434e7d1c619768dc1d67c163ad6630c19630c405b5934311c41b65918c61dd5f27555cf5cf629411d57fe2ce04fc6c99a2272d4689b69a078e73
- SSDEEP 192:i3D58xnxi9MoO0EGp/SDB52RM/VtvQPyE7H/Y8vFzicYWrWxusvU3FXxaXbhNXf2:i3V8YdE0cP2RCVFQPyE7YcYGW9U3F490
- MD5 SHA1 SHA512 SSDEEP
Language/hi.pak
- SHA256 1ca6a0546f9627fa9ba3d377d79a21ff26ec9b349d47247c9b241a70728d0699
- MD5 fa034eb13d21ce4e9fc2d3eafdf40cd2
- SHA1 0992d91706d26b6cc2ff64d899308ba4e9380a35
- SHA512 4f8024f43a70d9d8ae67848e2540b028cf1b9183b7dedd66043fb16394601da986d695c8d28f072444a69c1b2639c8b79096065389069fb854d152db166ed734
- SSDEEP 3072:XkOxgTgcwfKSj33cdEVhk7ovrCEO/S/bBfvTHef+a7BKfzzrRE3b8RLljlxCYPhb:rOCi8R
- MD5 SHA1 SHA512 SSDEEP
Language/hi.txt
- SHA256 8cce5e5a846196dac3649483290160177f47d88a7dcf0e85acfd3131856a266a
- MD5 a0fc3c3d880a54918d86b40ffda12f23
- SHA1 34fb9f1b5a6731100466f66e193ab5028b3ec1be
- SHA512 bd1f17d76699f177ce6df4b69f82dfa777a0ae20e243d5fed0605fe951a79d8ae54371b07eb30f075161c108f46be1ce21b162b66cc099c02adb6eb6d5e8f158
- SSDEEP 384:icNErTw7YtUD/xvVxkTTkjxQ10Up/ijaCXEk02VQGKFO8YeY:n601ao2hY
- MD5 SHA1 SHA512 SSDEEP
Language/hr.pak
- SHA256 64e531e46cf5b644d1b7f1df885efcf51a65db50fab65ab250f5e4e1adfa9d29
- MD5 624bce9b02382312f4588d3147b738a3
- SHA1 8df16c75c9e86a96d9f2b11e80eb182ba6c8eef9
- SHA512 e74e56210cb3c184499de4e0d9e57e8ee9d7314b93fb1a97030a3397cc47b91ec74c704b25fc4bd16f4c7680240ae1d39d69cd9f024dd52c90eae9cc6c53b6ae
- SSDEEP 3072:1JKdAGC/lemhlBExypakZUaO2sMMoLaz7v53Kkx9i:lHiKp
- MD5 SHA1 SHA512 SSDEEP
Language/hr.txt
- SHA256 a72f01215eba3be3af6659129dd20f7a42d74f1da08658a9c8ce8e303c3e8f64
- MD5 a0a8a75560efcf15801c96e6d71becc3
- SHA1 b3f7b92d2a13151a14b493108a50a8365c46f6a0
- SHA512 d730c0dc30a299b6bab1b8cfae64d8d4bdea121e651641f578b0947bf5f67669f342ce20198b26fe7881ec99baf290695bc460828198a997b4e59ec91396c217
- SSDEEP 192:iw/kl7v3mUecLy8RIxXr1aYPDIbOPw7zinGjeQOsEyKtizzDQ:ixpvNeBUuXr03inG2tyKtiPDQ
- MD5 SHA1 SHA512 SSDEEP
Language/hu.pak
- SHA256 fdd99d667419612bf98200783e0ccf0f7c11913ca03ca162d72d43f6861e5478
- MD5 ca8a821ff5a6b848c5a170ff9a97bb39
- SHA1 a98b91fa29848013cef021ec8b3a29979cac0c65
- SHA512 e475a09e1f9f740b6c36c9b33b20f263896b869d8ac58848504db29903a9597b84761b9c3918addc9c726d4429a0f496f44e3a8b0cce9a3008d071a5d46bb5c6
- SSDEEP 3072:a1WzOkbJiCwF/iGn1dgTrdA0RdpEtL1543ICJ:eSbY/iGkTtRdpEPu3ICJ
- MD5 SHA1 SHA512 SSDEEP
Language/hu.txt
- SHA256 ef79e98fc911e0d0d16bd061a65f50f5e50caa011699852e1608a2629b8ba37d
- MD5 eebea9c4e71a5d2820f5e8972822800f
- SHA1 e9f5e741995bf92266e5b6d6891896e5b9cc1f42
- SHA512 01b4bd586a1b2629b94dab877510110e6fa1286eb9cdf7882539d42466609d830489ba450e7e7cc41958f463227f5376151f912591aa88c7866182374ed574a5
- SSDEEP 192:iZEtt30B1cWELI7BD5QoMJu2dGiYU8dGfVFr6ksQA3+oV6YVSUJRPn:iaHOvxlQhJu2dLVUGfVFr6ksp3+oV63q
- MD5 SHA1 SHA512 SSDEEP
Language/hy.txt
- SHA256 d8f60bf92541d20d01f6ddd56d49f25519303fd16e285e18080be6815b74b8a8
- MD5 1362c3c286cff992117d5466bbe284f6
- SHA1 faf50ecdb6db6cd6ba9e0ae18e7fad64511048c7
- SHA512 1834fe901b1182b793872e2a822801966abdf312873e15877e589b9c6a58d04e06a2c60b26d2209fe7048f7ea9befe0f6b39630eb4c5578a54735b6840677205
- SSDEEP 192:igxIecm/mNxhlsms7CBFPwWbLkSMBvAoPz3qkZXDwC7o9F9f:iTeB4lE7Gw8KoqznlT2F9f
- MD5 SHA1 SHA512 SSDEEP
Language/id.txt
- SHA256 18c4531e9fc00ed242f1c0526dbcd0a3d1ada9bcfee651ae950328ac872a216f
- MD5 73b9f189f0c37d7cf37df8db89fb52af
- SHA1 060ad5b22f8dd408260b7210392c0a6f6271fbff
- SHA512 f8dca8e9aecbaa7fd596535fb792314253814098c1089262ed36e78960ffebe377c6436354228a9b4e17bb87fa6e1833110fd843c63bbce3294262b623df86e0
- SSDEEP 192:iQLoEmEjXCv1MYlMRsF40N+7EeN2ev9KJ3nhuCoLqY:i0oEmEjCv7lmsF67yev9KJ3nJouY
- MD5 SHA1 SHA512 SSDEEP
Language/is.txt
- SHA256 f4f9d6dfd36512f027452499b083ad0656df6503ce03e4e4cc45b925f1f1d678
- MD5 f361950b7d1bb073ef48ca729b7ed5ea
- SHA1 8c5d3fb8e09c9682c6256f05f82ca67c58f0ff2b
- SHA512 6163fb77d3155525a563ad907cdf48fa18a6ce019a073c7d9dc2438927217d0d8534ada7fc444114f14ac216c89d12e83f5b582021be693baec80bd69199909e
- SSDEEP 192:7vbGuJ7kBfcLpMPz89Pwkr5fXnNB3RQMFWdZtffvTqBmV4jLASZE33txMF:7vbrJ7k+Lpy8ukr5fXnNXxFaWBm4jLAu
- MD5 SHA1 SHA512 SSDEEP
Language/it.txt
- SHA256 dd0a9a9ce33d25a9f6c461a6e43721e975b8b1e189c3d5b81f1dad0ff12870be
- MD5 87efe148b443c6b50eab945e27f9b39a
- SHA1 d4a46f9a798c381a7415de8b74b296f5632124c1
- SHA512 3f391e6c840ea267f500e7912e87e8696099aee683a0a656a97033dec8de38f875c60dc21e9332a7e24ca3e2ae8c404fd936f915ad8c8a05eab090c355916dd1
- SSDEEP 192:iqlpzc7zUwLkm5g6dLeUPezxs+GGWFP2oJhD0k8nv8C/PZmvmVxPdYjgl0h24oUf:imzo15g6cUPim+GGWVJhSvNP6mVxPdYP
- MD5 SHA1 SHA512 SSDEEP
Language/ja.txt
- SHA256 b0150c2b3d2ad9b37a7f47a24466aea4a56ced728caf12d02b407fd0080602ab
- MD5 470b0ca449e9f34bb34244a7ef39441b
- SHA1 471c37014eff0214ce757b6e88987fb9e2b31931
- SHA512 1e2d690e484449fa4859836f7ab880d512e98e5f996bf679ecb3a5c3ca8a3fc7e9fed4e6c2470fff790ce22bb6aa407d951ec6c7ced571b5ac8e86ca873f3afa
- SSDEEP 192:i5bovSMlRAuVo6k8FUW7Plm6eAY/yCIQ4YftM40EZwGltXuWRzoaGN:i5svH80I8B1Y/C40yXRRzoaGN
- MD5 SHA1 SHA512 SSDEEP
Language/ka.txt
- SHA256 b78defec49d07120b74c2172f3e07540314771b16729c6bbfc3a1902ece2eda0
- MD5 eb2af4dc4c28275ae1876523944d708e
- SHA1 bfb87569112a081a99ecd5bfdcc6f2aead07f67b
- SHA512 e04680a6050fc6b3d0bf50a092f5fe2049bedf705f479fb5c45852e4cc19d1b735b85166da15ea67dbeb3aacf39dbe6c80eda9d4c180805d87762468875ab49a
- SSDEEP 384:ikzn3UlfDnVKqnB+C0aHgtyr6g5W0p5rUbVkmUmqIcR5mFuBUPNIazj:7sMW6gnAbVkmUm3
- MD5 SHA1 SHA512 SSDEEP
Language/kaa.txt
- SHA256 4d631602ce3d0c4d9162af6bf56a90c8eef75a24d556b729191b62f79aba0681
- MD5 dfba5c2185e113eef167a5e21c32df76
- SHA1 e36703d7d1954e3f1729a0497674ec15c41a2f76
- SHA512 3271b66114bd6f145693258c5e84a175acb3db865169734a9beb5de7f9aefd06b4144650dc0e98fd47dd38ad3cabd26415640cddc8ac611c23d14487e975fb70
- SSDEEP 192:iGKztgVKxXfv5NKHLm9ufAX7M5amaRi5WsU1Ok/VO1ri:iGStuYXfvBXQiuWslk/sBi
- MD5 SHA1 SHA512 SSDEEP
Language/kab.txt
- SHA256 b8a7a5182dfdacc9baccb412e161c60864d3b5d30038935122c736ae4f4ebc22
- MD5 c6ac7aad8bce83ac69f197db9d4529f8
- SHA1 5fa31ccfa23b753cee7aee7ee65915aaa94f9b01
- SHA512 a643e38a5801a50fd318fefeb0245b8935c818737b860839c15fa09b0cc0e9ef55eb455e3ceaf8b2263ae23b5befd1e6013ba63c4abd1b89627905498ff026be
- SSDEEP 192:iFKQ2IdVUQs/gSSmlPgUulpuDUed3JhFyglCxCxqJo+Msp04ndCVv:iY7IrsgSSmlPgXpUUed3Jh8FCxaB/dCF
- MD5 SHA1 SHA512 SSDEEP
Language/kk.txt
- SHA256 f2e6e55c102485e232daad00f68d8905f7a54f8ae2128db6afe25231c17acd69
- MD5 f4c46b450a580ad5abf0b638dcdcc6fb
- SHA1 750dfddddadee9cfe0e8f651f1c6cc38cf1fcd78
- SHA512 24b6dc7b491302b905c1e20e67ddab16af9420820b6c83406618e017fa84d952661087e2ea577831441e8a3c82ef697de713597e33626aed787f3485dd9b1f7d
- SSDEEP 192:iwHw0jjl8sq/UDEAY40JI0lkMPK+K4ppfdMMda764a:iwHw0jjiRUD8kMPJqMdj4a
- MD5 SHA1 SHA512 SSDEEP
Language/ko.txt
- SHA256 58a2dd10438c1199653c1bcd88c520ddb437fa8e01bcf311130ada0a626151c7
- MD5 55e8685ac21571f0b5f11a4d5fa088f9
- SHA1 285d09b7a8adcab4e5d72928487c711b8f48b8fb
- SHA512 bd95e5f82e17494404e7319f5cdc1b4bdd868b2ae73be1cf407f9f1e54b360bf75a36993a60a14d29e4af3ec15e0538f23e1f22dca1153bd01fc0ba964390337
- SSDEEP 192:i36rCE/KKcFaeVLs7sdGBbeO9onv40if8Knv3E3q9FGdUBUe:i6CE/KKcQSLsJbeOqti0KvoAGdqUe
- MD5 SHA1 SHA512 SSDEEP
Language/ku-ckb.txt
- SHA256 19af39960142b8599153a09ef4f03f944fc00999beb9fe2399f5f8b236716eef
- MD5 c90d029172a8533946ef7419bf383305
- SHA1 7b3d96899f5935e559626d215517315c04207627
- SHA512 b0a711161ce233e5b9231c21abfd721bca6a85567debc6cc9c033c68d0a6e1292f369dbf1ea52b4088658d13263c245ea37752e87abd8b2aa878b5270ef0b1be
- SSDEEP 192:igHCpEmyIRe0g/OQMEuDP9Y799boVTiUaml4hSf7UAlA+cA90s5bKlcRBfwCiIEW:ivjQMTDShMTiUaTSfwA90sglMRMj2z/
- MD5 SHA1 SHA512 SSDEEP
Language/ky.txt
- SHA256 4ef68fbd8ab002bbf4cd6d1c9fd6d87a5fde048afd2ef162b727259eb97d70d2
- MD5 7d0420ee265c9122dc11ef964871e179
- SHA1 4b84b209e5a637869e501d54ff0b535bd3924851
- SHA512 0ddcd7871e61b76acf3fa0224519ed8e29c33234c300097f69e799951f8f9e87943a4f755f1362856f0c2a3804c399e466cf08cf0e189ec7bcdf744e07c61635
- SSDEEP 384:ikVDGPB8R8wedC+GwW2womKx4rXNMQOpR2avWPYx3jqSxv:78Z8+7CS8uiMkARuSN
- MD5 SHA1 SHA512 SSDEEP
Language/lij.txt
- SHA256 431cae1bb77633fdf3ce339e97bc5d5d885779decc01ed03583e381f097a2487
- MD5 372bc4a26b676c48cf8fefab3711b91d
- SHA1 39da7ac5a483bd675657c24f875c2cee93204a1e
- SHA512 0bf4ded969bc2af21b806fea241b7f0a312d8d4d9c81b14293e352e09dc31b3b876c77c155b6c9769d89b169d8de65c4f52b649acbf90af14e75ccd6bb8157df
- SSDEEP 192:iIxLxXfim7pf7nJePcyzqBJv3/gxqwP95y:iIxLxXTFDnxoxqwP94
- MD5 SHA1 SHA512 SSDEEP
Language/lt.txt
- SHA256 c5da5b37be32fa4cdd8b938d479c0327b84c9f83c948eb7e65f4ddc15a6beeae
- MD5 92d03523dd0e7e7b2862a6396abad455
- SHA1 ea1fc2bac5ab8d5ee329a5945f1ed90269cb7aec
- SHA512 1fb0ae4117dd69418ecc371f699630d79f89daaa3099f57ebfa4a7de398cbdef095e0b029a547dfb6936a336a9e2748b880ec83a65554a1858f2f87104d63e27
- SSDEEP 192:inIsB9j4K01iwimxhiZ8yczB7XhyyYR1gQEfo9GcC7MDc:inIsyiwnhiZ1czn9YwQuZ7MDc
- MD5 SHA1 SHA512 SSDEEP
Language/mk.txt
- SHA256 78f5cb9345ab258cf745eaa90d44c7a7a73d3fe06ea182b1298a989135ffa11f
- MD5 71d42abe45803ac9c3da5fcacf9cc59c
- SHA1 98a1049906972abb480abaf1f5658c1b8c10f27c
- SHA512 a0096575d6f911cc2600dac93d6fd7aa8d9e2f9f71a92571a76996fb4c47bdb714bba453c862b3f42cc5f4baaf2aed1dff3c9d6f84a3e2053ff2037c56ab85a5
- SSDEEP 192:ia3g0F7SHayJ5vKVEB3Bxg5GteGIxpWNMll39oWvt/i4drxJ4MrZEXSW:iWg0zyJlKVEB3A6SM2mWvt/i4dtJ4MNO
- MD5 SHA1 SHA512 SSDEEP
Language/mn.txt
- SHA256 cf5245d17224f85011ed85062957dbfd936dd760a214980fc8f2eb69e6ba3cfc
- MD5 8756027adf94b3cc3d6c42f0d3fb4af0
- SHA1 823bdbc5abf1d2f3528aa319a417ee090d1c6928
- SHA512 92715a814d24318533ba26af542b174df12e5d8cd40251bc27890345eb6c64d174448745b2b138bd0a7e0fa0d96b803fab9b29f89767729e64a95b164fb27f29
- SSDEEP 192:i2GVqAYj834yHocynU6GwgeBLHvNlIfYfFCkMupHCwFxhjPQtQP1d/R1JTPUJ:i7kIYfUjuZxhDDHZQJ
- MD5 SHA1 SHA512 SSDEEP
Language/mng.txt
- SHA256 92898472c1db5248b0556fb5bafda8090684249b561de5ef2a84c10f2f4383ca
- MD5 ba28c5c312d1a7827b40ed84f1f6f85b
- SHA1 72788c4b14c47a3988245e81fc6e7bbb8f88442f
- SHA512 35871824adede6169118087d28fe3c78ea09cb259c7c168e83a22ca74c024d9f0d61250ad1fc9f75b71a8ee5235a12ffd52c146b8232b7bea84ec024b19da7d5
- SSDEEP 384:ip3jpGUSlwi6aHQIXqB6B22bKP995BOqB8A5Y8KsC3u6cIVFJFGtMksJYkXoFs85:MWJbm50qN5Esd6t/XWjgqVpzs4XZd8sL
- MD5 SHA1 SHA512 SSDEEP
Language/mng2.txt
- SHA256 47bfe43f3f5a88a0f366fb317a542cdc1e216f8c368ddc67252480ede7d130f4
- MD5 a0d06dc2b7f53acd8cdebf7864080cd1
- SHA1 a4b9c4d1c4355bd90356e60289fb4efce0046b6a
- SHA512 811fdbfc11f8db60b2d059d433495fd50220e5a718ed9fe7f9c422d9695353825129b05e0f287419d4784c3564ea7cf7be9117c4408170f4afa3353fbc875442
- SSDEEP 192:ip3pxHmpcSmhZcbnD1e+Ft9780rdLdNQwL4rG/d+RWsB/O54Q4gLwqZ816d20xUS:ip3jJfHp4BLLCJOIYB
- MD5 SHA1 SHA512 SSDEEP
Language/mr.txt
- SHA256 08b8f7ff35dd4315133e04fd17b6fb896d63b9c87040a2cc68a83e81ea4efd78
- MD5 2e9fc42dbd17e30f8db8205fa2d18543
- SHA1 60639e6d06a38d5c507136c130a172d606b698e7
- SHA512 7e1aa7234dc2c07654847de01600787ba735e9ccf5d376d37696f3810418a357beb1d611a164fdfd7a24ca33e7bed150df08187d4ade6c973c45be5df74fd95f
- SSDEEP 192:iSdCIrunpyKHseL4bzwltFrjVL0TEpbpFeki8rJNhBB:iSt6pypS4A7FYA1r
- MD5 SHA1 SHA512 SSDEEP
Language/ne.txt
- SHA256 c129f67193295736e1c1ff4ac7245cbd737a07ea6073b43fd22ac767f3d56e23
- MD5 c7ed0560a6145a417b1e92546ed6b0f1
- SHA1 6be9ff3e7ef34767caa165a0e9851914bb65378a
- SHA512 508504216c916c6ef168062c1d13336594d469db92d8b40571c726a4b3053ca6fd0c57f9f2fc389f3216a5c663ebdc4aa520462ef39abd5be55c7b87b522d90f
- SSDEEP 192:iv4xgZB/n6NclUY0PA8jaeQPYX89RcgDZjGKOVdp:ivYUSNcOY0PA8+0gfOJ
- MD5 SHA1 SHA512 SSDEEP
Language/nl.txt
- SHA256 8a74f64c91c25da6056b054d388bf1bbd97384ad7d0086f86df0240e077c6149
- MD5 54169e744254bb5a4182bcb2678f8479
- SHA1 244ff8c38c8da10e20282cf74a08e18ab165640c
- SHA512 b798027c10f2aa7f06fa4fc3473f3040a23968d967aa93c08d072f86da2747d7847f8d7b37bc796a8270721c200978c61b1a4a5c6fd8b87845fdbb1337a142a2
- SSDEEP 192:i3oJFqYSagoQss8Yok0y0qiqfUaep0XTrsv3H2TzQEjsrKdOZhGcicbyoL0rnycW:i3AQZUaemXTOWTMosI9loAry34sf
- MD5 SHA1 SHA512 SSDEEP
Language/pa-in.txt
- SHA256 377f793eedf3a935ddd6260d72ac3cada9391aafdf1f019d0be72be2b83a5dd9
- MD5 6c48ed7deba6d3efe6447be948471810
- SHA1 4e1d76d565211416f0ed32a2cdd473d9ac54a61f
- SHA512 22b8bbb70492e19ede9c5e74483a1a6d57d4f86f38d1321331e0137c7953c6612e03f854fb1bb0c3234bbc0f561e92501a345d881fc09dde598e217d946018dd
- SSDEEP 192:iK8eAMv6KYvDPVWnkFGdRq8A9UCGd6KFnidivnjnqAPvowQoNVq4qEFmQt+MN9YL:iKpZnt/dhCivnjdjQKFNt+MNfU
- MD5 SHA1 SHA512 SSDEEP
Language/pl.txt
- SHA256 223c109301a7bbf01fc57c42609083b28e3fcededc1f6e6dcdfdc8ec1580c51d
- MD5 2cdf63e6b3f3a474465d0d88e5386718
- SHA1 aa4f3f839b35c68ea2a17e7a63053262e94f952d
- SHA512 db7c086b9fd9111d468b7bb4f55455524fe161869c20c20ad7e65e5b8eee38fd4e3b19aaa183c69c87d2c61f4561d12c90aa966a07156f193af59bcb6db10ff7
- SSDEEP 192:iny0xONopVdHc+Xmy9hk1s6i+6rELzpZ6+0FVEleeNRChH6ufZfjp8Rb:in3xOgvXm9s5+6QLz+jUlX2rp8Rb
- MD5 SHA1 SHA512 SSDEEP
Language/ps.txt
- SHA256 881b19dd1f74251e475855b8bdb53ce9af1c3d2654a9331b069a3c273f723769
- MD5 8f15262b3c1cf560b6352fae4a5fde21
- SHA1 c493f7834117f02aab3dd34999acf55977d94c67
- SHA512 18406e2c762f5e7d5d37d76c0fdc8a8a85d50fcb66b2d92d072b4ca3714fca6eae9ccd9dd50bbb00da84bccfd07eba290930c17a1b9342626715a6d6de8191d2
- SSDEEP 96:ikrJrFkaUGFoiZxn8pSbo4YCVtH7tpY+Qan1JZ0d+yccGFs8Ie30aNMfm88B9eDb:ieJZ0o98pT4YCP1pfSDHayRvpyDJe
- MD5 SHA1 SHA512 SSDEEP
Language/pt-br.txt
- SHA256 da0b58f52bbc131f967942d1d8e9de1b5721ae864bc21852a0ad4062332297cb
- MD5 7b02e1ae16e2e709d7c97de560b4dbe9
- SHA1 191a54644417f7d36f5cb4182dcdb3737d74be51
- SHA512 4f689f854db3f766b5e53ce2f19e9f8293c075ee3f9b18098eb05b352f2ec95df85e49a78540781eb531bce60c7b1f7890f1fe3c65200dec3cb908e90fb827a1
- SSDEEP 192:icoGT04mzNN8hYivh5gtE/PkjY09fdNQuQ:ibGg4mzNhi4tEHoDfHQuQ
- MD5 SHA1 SHA512 SSDEEP
Language/pt.txt
- SHA256 55807ed90ae0d9216b93ec7e1d0571cb16d7f9db40723581aefc4ea829d4d182
- MD5 e6f09b147cb07532c12e47b05ccf87b7
- SHA1 1b6d069d431edac41c4221a120e8cb9b1152fc70
- SHA512 95f7db5dd308ca3e91fc3203dfb9fa9dbabd7eec6cf1a8590eef0cc670c6b08447ba09ad151a972d721dbfcfa03468bb7e9d2cac190d6c72c543ce5a16c7aa32
- SSDEEP 192:imxbxSa4GR9N8zMzM0KgWWauXYY5wNKDyYaipnj0aQiAKECNIuZB:imBxSNGR9N8zMzM0KgERYKNYy3ipnj0G
- MD5 SHA1 SHA512 SSDEEP
Language/ro.txt
- SHA256 f168bb4d026782134cc6c261006b815850e753a27fb47c4f23ee617666459a66
- MD5 e3ee837f02a1f6e4b2213eb36c025284
- SHA1 56ccafa0f9c3d805a845311c2ebd80c93a595b17
- SHA512 a923f953af5df72e04b5c38e523a003b85c0ed74e20ae1c3a2d4848828e03de8e703953cfcf653c148a0eeaa9365f9187804de0d534435ccb90dac1c4ea68a63
- SSDEEP 192:iVF8khF2yUYtHwfajHwKlPVS6LWbsWGGqZfG7ORVCPF27l:iD8mUYtHCxuPjWQu6KP0x
- MD5 SHA1 SHA512 SSDEEP
Language/ru.txt
- SHA256 ac73d4810639114c3269e3beaec84ecac9473ca6fbc248d804a09df2b33e4351
- MD5 b5cec4d03d2d9e162137e475c54afbc3
- SHA1 3e86ae0174a096b07173c623b637122e4323dd29
- SHA512 cb78bd4f6d7d94780bf84f6618a2800a3b6885485c6cb7b0836affcb9ca6f6734834fb84f756946e59595067788cd1b1a230cec760e39d3ea0baf523f7cc7647
- SSDEEP 192:iW2LUMKClXfitECTGV0jxOfXYCjisdvyMpf5ZOO8gCS4nY5tbV67wyxZ+XU2WtWK:i+ptEGntQYpY6MXsO7ChKeZ+HWKk
- MD5 SHA1 SHA512 SSDEEP
Language/sa.txt
- SHA256 a44e8c328bf809890aa6ca883e2cb82b6c5207d9636e9a91253da4cd893668c8
- MD5 9fe4da297163a84fe9d0b0289b1af077
- SHA1 d14a6a318a50f2f13e45b2269ea2ad8fc5e3c44a
- SHA512 a6fee2f3d6448f1f5be6ec88b51fb65ebd07c7ba3dbaf2f7a801fef54b9da410e6b800094853180a884889b304ea9a54672781fa7d0f1067af6c4a63c494a44b
- SSDEEP 384:isw3ma17q9ntvNTsld5VFxxwMkAGO310F0klrfofmR7HOwPyng:HwQvVnQg
- MD5 SHA1 SHA512 SSDEEP
Language/si.txt
- SHA256 3899edd17a78bc729278304f7b0ae7750c422a5ba684aac9edc15b8527a229da
- MD5 2b78e18bcb07cb8d59d8682502576f8e
- SHA1 c277b543ee18441681cdaff9efead09963bf9604
- SHA512 da07af56bbd954828623c7b38fd3e6cdfe89df98f2525aa486a43fdd17ea5ce79f90e691b1f459df5238b04b3fff0fed58559bc93e15559ff6d8d2a2cf4da172
- SSDEEP 384:iIOc5iNEOdZPFVIz36hkSuWjJyzB8X/qCwd5WvZNkad73+ivI/MpngGhNJDkGx/p:2XNnZ9/u59CC5WHt9I/rGhPRx9+7SuJc
- MD5 SHA1 SHA512 SSDEEP
Language/sk.txt
- SHA256 e571c0d87b50f4659099b4ca618057533c22578066e411c5ceb3df8be1e77cff
- MD5 ca2b22d21945a478757a099eeafdf9a9
- SHA1 5efbf215647e82ddeaa4c83d064ef83b51413dea
- SHA512 40365ac6cdd70ff7b7ab09482e1e9263b1b131772019eda357007d029a879111da72b05756adbfc3206b1c060211a16b5f10d507fb0caa3696907c8433fe9537
- SSDEEP 192:ihqYyHuLGHP372c79qAFklXva+hF+zmTzeNMR:iMjUGHP72cJqAFAXi+hs0aNMR
- MD5 SHA1 SHA512 SSDEEP
Language/sl.txt
- SHA256 548aa8422a228617b30fbd448d03c38c3a11d010051a24544cf8ae479314acd8
- MD5 7004b98d09316e84156b91c54888c9d4
- SHA1 39c8681e497dde4ccffa3bf8d15b53627757ece8
- SHA512 c48f4baced7a4faf958712225a5326ca2225dd7b396164787ad2c83a0314774e9126fa510eba37b1ab2ff26c67a7aaaa0ba9129b0d97a119ad1d726a56a33066
- SSDEEP 192:iGCcUhGAoKfrxHa5Qn6dq5OSsZf1G1huHF8fY1oTraGAF7S+pVss0Bu2mXXF6OG:iJhFoKlZZoZ9Gi52rChEmXAOG
- MD5 SHA1 SHA512 SSDEEP
Language/sr-spc.txt
- SHA256 283dd99ec8d13784b3d79c36766cdb16dac0ede0c1c09e8b1efa64f5dc2c1a55
- MD5 ffd26304b9b5fae8547703515e84460d
- SHA1 cff3f023bb47ca3c6c3db202cd8c126b0bb2f59f
- SHA512 0a4e39e2598c73f936e4c8bd56201fee00aeb5daab0d7b735d5137a8b7c15830b40f028c77b528b75653540836098f5e8fc059111dd2efbd0a46ddbdf97465c1
- SSDEEP 192:iCk9ED/u0/rzMXyBMtR/TL0wN1i9Rd9u3ZDxoAF9sOVbvmyz3xnvze0kIqLm3HGX:iCk94zBWv0b9P9gZ1lLhnbe8q0tfsH6o
- MD5 SHA1 SHA512 SSDEEP
Language/sr-spl.txt
- SHA256 d5a250b45bd51267e2b0d78cf60e7f14113419565f9b95c2b1113963396570a5
- MD5 fd327f424c7e4f23d2c018ded334a1b5
- SHA1 0fe9a48c528be4022b19f7373cba9190d3bdb473
- SHA512 ae6c2959a5348bdbc1464fd0e08a3a00f8598a2d423381e5883347a85e88f7749659e0fac4f89d6ccbc74a1e83f47ec4f42cac22115ca3921def00de41978adb
- SSDEEP 192:iZjnEAuD8cvkp9HRmD+eyl3NLH0qgGOzeVTs8rmXab4f:i5EL8cIxMQGGjuXasf
- MD5 SHA1 SHA512 SSDEEP
Language/sv.txt
- SHA256 54112b265ec01759adbf72dc856ff0f9dbb2b3029eff8a56de08dffc5d3dc954
- MD5 2ec8b6f0c0c05157ae90aba540debed1
- SHA1 56de30674cf6ed17ae1fd42080214573b8383789
- SHA512 6cb83b0d3db5254e47f86100c38be073f257b4f2e643f14e91df9ccac36a631bf06e52ce8f98106f5a17cf19745f2b6277605968bfeb9e0d423b1fd3ab5c0a06
- SSDEEP 192:iIRthqlCnYhI0sbVA28ta0obRFz+3uCFQ9/FLFDLb0Y620X9CWHdfSzuQ3lBMjiC:iIzhdnY+bi2tWIFLJb0Y62dWHuTlC
- MD5 SHA1 SHA512 SSDEEP
Language/sw.txt
- SHA256 aaeb1631458e448b678579ce369fd0a6d66e0fb02b9218328c537ee38636c557
- MD5 ee27959aef24cef2ec07684cf420b2dd
- SHA1 07d9b4d2b4ab10b3341f3286cee73185daaad918
- SHA512 9e0fd7db8d799763eee9980d8c2b0864640fb74a86036d337b019ac317a3541cba6d65af1c4179ed46d64d4005395cd6c761f6a234428df3f1fb04634955242f
- SSDEEP 192:7F+9CSE///gXaidWrT8PpH0fKxsyEeHRinn:74Cto9paKxsRn
- MD5 SHA1 SHA512 SSDEEP
Language/ta.txt
- SHA256 0a3b285566bbeb3f188b3c72ba21cbfc545ea05471eab706e972c828da5234e0
- MD5 228ca6d7b8d850853233c4575a7ebf1f
- SHA1 4bc90fca87925f7d855972f5dc67ef5e9e29b438
- SHA512 2995d1c2bacc8c0ee757fc47fe9c8ac07f1ee74ae3a70bbbcc66cbcfa13a924855b3f7515d04031434870829be34f0fb49a35388eaffacc0e7a33f9a44a02870
- SSDEEP 192:igMxAhP2NKfBuRZjaaC1e13/BNhpYY+KEHtiAnCuu1+AuvB1nNh11N:irlNZjagbAn3
- MD5 SHA1 SHA512 SSDEEP
Language/tg.txt
- SHA256 1cedd8f699940fecacacbc5df093ba70fb2099faf9864376a3d990da78b8e075
- MD5 4a5529986613cdf743b3f7755f8f5cae
- SHA1 970dfad147ab3d32e93eef6bf464bcac23368e4f
- SHA512 1f7e8a8a21e8e5faf546b2f4c621b326a907afa017dd8221022df2d19b3e41d10d5157a8713f8d5485601311029f4e25dcb21d0e9b4991b6d26d651b416239c0
- SSDEEP 192:iLcxMil07H3brpQXBwkGE3RypQcG3XlDrpQK3I5D2OleVZZd3K5RATp+O1jR40pE:imK3bMlGE34Q3FBT3eDoZdaOHfllqzDv
- MD5 SHA1 SHA512 SSDEEP
Language/th.txt
- SHA256 01e7b965bd4b722003f74b4e4b30ef6a1baea67108816d1b9f8d6add39c7fa10
- MD5 8ee06a03dc18e5f8bc750cb6a78f6d9c
- SHA1 179c195700df844216c2cabdc17062cddbd1d6b3
- SHA512 4c908ba391bac8bd36bf76b5c3b59dd59eb71f2513bcd04c47cbde683ad463c0feac5d5aada67730f3f566156c4beff09cd7b7d1eb043b988ad7938b9041c4ec
- SSDEEP 384:ir9n+rMUfsqjeWnShfO1LpBIB9jip10zsPRO2a8fUhe1RBC6sl4wjn/PqIpqINAG:09n+4csqjeWnSh21LpBIB1O10zsPRO2e
- MD5 SHA1 SHA512 SSDEEP
Language/tk.txt
- SHA256 75eff9de596459f3eba755b5c4c8ce635af2cecdbae40749df348c97a2e56ee0
- MD5 75c23d0431bc83ca17308f08d1173c1d
- SHA1 a052e61036e0da973253ba225031d5929ee5e2d5
- SHA512 10872e31df08e59d080be3c0b975df06e2e8bcecea14fcf9f547965143a9652c8b9ed50d38232a72b8f0745c964f4e616b06368d9983f35ba05fbcbf2294900b
- SSDEEP 192:7toKrLbypqg+g8p0k9DMfjrdTU4dX81abJjrkLPFT8jPJzVIj7dYqxMXXDqit:7mKr2qL3oRUU81oBmPFwb9VY7dYqxMmm
- MD5 SHA1 SHA512 SSDEEP
Language/tr.txt
- SHA256 4816929c4bb958ce8d64d14df47f0b6a35dcf0e7eb88201eaa93af541894e354
- MD5 c69be29e4448a858180daf367464d531
- SHA1 d83819911331f73bc35e2eb02ec1fbcdddf30b7d
- SHA512 469be1075e9a5c4cc8bb6a0b55e645448eda3d46527a5561cd55807f5e52c3410904a34e0e64e11f963153d5cea5ccf16e7e7fc7ed63aea3fbe532959056aa77
- SSDEEP 192:irkBYXKvLRGGtGcunN8uRvXWt2GSdRHI2Je4Sv6J57kLbLaK/FwacCz:irkBgg3GJ8uhXWtfGRH5o9D
- MD5 SHA1 SHA512 SSDEEP
Language/tt.txt
- SHA256 18479d66e0c8b5144ea32cc9d6b58eb8748e80d2c3bdec0dbd99bbc3ab42495d
- MD5 6e299b81edacf15face1271d032cc5a0
- SHA1 f2e955fd7bbf9140f0e86bf1a759d729c9a4e4da
- SHA512 84e9484319deb5a7049fe130290a7d67a8faefc9a17f7b2ce9f9586fb0f0641b839bae681c6f8ffef551780f56166c9886c1f7f6f0df386389f44710423b9865
- SSDEEP 384:idiangc64QGQ6p6Wc84DqdqQdP9YW0XyU9ondS8O20Biu9J5:rag/4Tzp6Wc84Dq0QdP9YiUGnmiu9T
- MD5 SHA1 SHA512 SSDEEP
Language/ug.txt
- SHA256 9d0268d1eeb8dfdebbb8ea1033c2b99cd667a244c9859085be5d54c9e5ced369
- MD5 ef3e8d61d03e42a3b40d6f0b12535adb
- SHA1 569360bcfeb39c102a3dd78ed96204b5d733ffbe
- SHA512 6e9afeb0a96da6d8bf63f06de421b8d4ddbf4d750e1bdf861fbbdc0268cbeb19068d08787f0f1655b40ebdc603d888251dae188c3547f32b970c7f927754066a
- SSDEEP 192:iDIm9xflePh286zK/bnZ6U4EeBVDeZTyUZirOCsiCjcY8VFDZ:iNMPhhrBNeBVSTTZUwiCuDZ
- MD5 SHA1 SHA512 SSDEEP
Language/uk.txt
- SHA256 53235cb228dbbb5207f18bd0b318f54fda9f9f5b05094ea6ac7ae368216cc4ef
- MD5 d125ef7f9a009cfe4093152e48055ac1
- SHA1 7063f242690890c98296314884e0e6d058c23aff
- SHA512 cc199e839e2cf24abcd8b9685702732427295858976a038fddf6e3691fd1a31bcaf9f1dbac48e125e096d1a395dcabfb4ecbb02a6c5e7d6dea67e44e21e69037
- SSDEEP 384:iv+2HgJiSSXX7VPkqM6Ix68c65gLKPENwboGxX7xFxexNbK7ExOiyq:LqRRr87Rq
- MD5 SHA1 SHA512 SSDEEP
Language/uz-cyrl.txt
- SHA256 2dd421a44ad779d961c951f01e7abf4ac358c61ce26ea8311a0c902b4fc77ca3
- MD5 7afedbd6e9ef3a4a2a99bc1bcb133605
- SHA1 317d758dd9f65a6e320a4d45776a21ecb2ad60cc
- SHA512 48650bc3ac6c316ad6431b9db3e49d76fd066f976fdd949a8dfdb194775b0e1c6eda5ed99d2574c9d3c2781c6138e3bb3939c294894443eec981c78377823af5
- SSDEEP 384:i7ggZifEX14nReON0sutg2s/Vk/A/n/pPqS:cYEF4nReON0sutg2suY/YS
- MD5 SHA1 SHA512 SSDEEP
Language/uz.txt
- SHA256 a310044dbc86e2441f0d50bb7d7dadb9879359b0c6ceb1faf413a0459e07045b
- MD5 3035144eea3a382e39541b218a5d813a
- SHA1 eb7a2f6306f7d2ded4cc88fb4cab0f65558db8b0
- SHA512 99d86146e0a6407f8d0fd7179061699bc82232e6a2427203a2951fef9089572c9c4e29c8484910f672a31f98ef13b5f3a45d5786fb118701a5b908f8f85a5c6a
- SSDEEP 192:ijX9l/0gt5MpHB8zNq+cwKp/avDFxCg8FTO/7yWyTHGw:ijX9l/0gt5wh8zNq+cBVavDFE3cTyWyZ
- MD5 SHA1 SHA512 SSDEEP
Language/va.txt
- SHA256 f43c31bd959a752eefbb7c76ed918c4cacd50d43706121c55093d72a638fa7a5
- MD5 639741f687d4427c9d3b170b1ced41a9
- SHA1 ad3d3a09b8877381df520e6eb654227da045b89d
- SHA512 eb63b0437624782d2bcd033905c7c0538902f9644e4facdc52d094ede5353309613b4eef3cb437d4f69c2a4fd4b2e0f241990aaa3a38366685b10cabec20a357
- SSDEEP 192:icd/FL0HKwFgPqtXdN3K3TIcmqHfc39vNH:i65wCitzaj5E3P
- MD5 SHA1 SHA512 SSDEEP
Language/vi.txt
- SHA256 3a6dca3e1b5c8190c81fc859b5be83eaf54efdcaa148f4374d1225381083406f
- MD5 044531d134aca40d5e57cc0ab96b4940
- SHA1 988aa2bb6922360c1977b97725175613266242d2
- SHA512 458a86ea6468e8b1c9cc98a7a579f74854a34f101ec2ede3ab48dd7dfbbf75eeae184c5a23443b3ccc69b8c06e0e09ef2df04d9f00d86ce99b82e785f95b7635
- SSDEEP 192:iJg8VLjw6yLuVSjHohWCOMF65E0QS3CmJdH:iJg8VfVcHpN5/CA
- MD5 SHA1 SHA512 SSDEEP
Language/yo.txt
- SHA256 ffab6b91ffd2d3c2b1f7f431b47f7d28aa17a11587b876565613bb26c173402b
- MD5 698af9267c08d61b712417491da6a3bb
- SHA1 01f21ce60e571699b006098afe9520c02d4e11dc
- SHA512 d37f63d3824d12d9bd4749ea94fce924f3a5469874d6777261f0570a2a7ef28574825fae199408c0e1eee7061b08c447da8744a1c2fa486981165ab5062fc8a9
- SSDEEP 192:7XgmEsBVCxtNc/EcoGFGDbMOw3WmkmSAGplG0v6k6P89Y6QVkixHxXUE4zVG9uRt:7XgECxuGbMO3/J3PL9zyezVGw5
- MD5 SHA1 SHA512 SSDEEP
Language/zh-cn.txt
- SHA256 7cf13e7434e6c062a29b964c026b2f66e75ecf541228665bf0c826ef7c0fe133
- MD5 0aae98f500ce669da6a4fcc33aea04e9
- SHA1 9326f529b796bca164835fb1eb4e135f01cb61af
- SHA512 fc64fb4c2df2b99f3d24cd938f4f381acc20547ba655fb34016a1a1f860e0d8a99c087b24fdc160d2bd1dad1f04c9ebba682adde0e0004e0b64d774bd3f3550f
- SSDEEP 192:7f+OUNnnvU5RLUvMyUxupow69yJ1L8ln9K4zy4VCrcj+v67DAT21ph4LiD:72rnnvU5R+yJ1MglEyycWV2DATk4LiD
- MD5 SHA1 SHA512 SSDEEP
Language/zh-tw.txt
- SHA256 37c79297f8d4e491d681b556c23d957bc830068ae1d5f4535fd054c2233f3474
- MD5 acfc57de6b0e4489287bdafe2062409a
- SHA1 dbf62f8c6dd239aa16bfd62500517b849ed8e5b4
- SHA512 50a76a2c5a61056b2b9efaf143335d86c5882d97c9d42acf29ca87cd39d79876d561ec0fe83fb377e25379cfebf593b782ecd8613d2a84ac33cbb6d8314481f1
- SSDEEP 192:i965RTllmRwM4cO+VnoF0HDczLXO7AJ8YRcaBxU+G9dDRI:i9MRTPUZO+VaoDcmRYUhXRI
- MD5 SHA1 SHA512 SSDEEP
Setup.exe
- IMPHASH e43c899b9a15230d0a8297d714cea7d4
- SHA256 69a90665113bd73b30360d87f7f6ed2c789a90a67f3b6e86474e21273a64f699
- MD5 b841d408448f2a07f308ced1589e7673
- SHA1 f5b5095c0ed69d42110df6d39810d12b1fa32a1e
- SHA512 a689734048109ab7bec9491bbb7781686c19c7885166b3ca2975e2f49e956fcc388cd8ca85a4e5a8bf9efe6056f1e0d80197b7f521d4f0d4cadb10ba9ef1fa93
- SSDEEP 49152:pvFg5qg9BtIAHE3SM4ahx6LK2SamuZob+tCjNrv8:Jm5qGBHBLRKuZfkjNrv8
- MD5 SHA1 SHA512 SSDEEP
Password
51946
Digest
ee:84:98:57:c8:93:c3:7b:d9:e1:43:0d:ad:5f:db:56:1a:7a:b8:24:88:94:e3:37:35:6d:a6:7b:1f:91:47:26
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Systemsoftware Mathias Rauen (Mathias Rauen),O=Systemsoftware Mathias Rauen (Mathias Rauen),L=Hamburg,ST=Hamburg,C=DE,1.2.840.113549.1.9.1=#0c106d616473686940676d61696c2e636f6d
Chains
Sep 29, 2018
CN=Systemsoftware Mathias Rauen (Mathias Rauen),O=Systemsoftware Mathias Rauen (Mathias Rauen),L=Hamburg,ST=Hamburg,C=DE,1.2.840.113549.1.9.1=#0c106d616473686940676d61696c2e636f6d
CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=Systemsoftware Mathias Rauen (Mathias Rauen),O=Systemsoftware Mathias Rauen (Mathias Rauen),L=Hamburg,ST=Hamburg,C=DE,1.2.840.113549.1.9.1=#0c106d616473686940676d61696c2e636f6d
CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
PE Signature issue
Digest
17:d8:f1:77:27:9d:cf:8e:e4:1a:e9:b5:92:fd:ff:03:71:bb:52:d6
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Systemsoftware Mathias Rauen (Mathias Rauen),O=Systemsoftware Mathias Rauen (Mathias Rauen),L=Hamburg,ST=Hamburg,C=DE,1.2.840.113549.1.9.1=#0c106d616473686940676d61696c2e636f6d
Chains
Sep 29, 2018
Subject
CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE
Serial Number
04:00:00:00:00:01:2f:4e:e1:52:d7
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Apr 13, 2011 - Jan 28, 2028
Subject
CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE
Serial Number
04:00:00:00:00:01:2f:4e:e1:35:5c
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 13, 2011 - Apr 13, 2019
Subject
CN=GlobalSign TSA for MS Authenticode - G2,O=GMO GlobalSign Pte Ltd,C=SG
Serial Number
11:21:d6:99:a7:64:97:3e:f1:f8:42:7e:e9:19:cc:53:41:14
Issuer
CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 24, 2016 - Jun 24, 2027
Subject
CN=Systemsoftware Mathias Rauen (Mathias Rauen),O=Systemsoftware Mathias Rauen (Mathias Rauen),L=Hamburg,ST=Hamburg,C=DE,1.2.840.113549.1.9.1=#0c106d616473686940676d61696c2e636f6d
Serial Number
11:21:32:2d:39:bd:45:ac:62:3d:37:5b:22:c2:43:d6:07:6b
Issuer
CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Nov 24, 2015 - Dec 24, 2018
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
04:00:00:00:00:01:25:07:1d:f9:af
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Nov 18, 2009 - Mar 18, 2019
Subject
CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Serial Number
48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning
Timespan
Jun 15, 2016 - Jun 15, 2024
Subject
CN=Systemsoftware Mathias Rauen (Mathias Rauen),O=Systemsoftware Mathias Rauen (Mathias Rauen),L=Hamburg,ST=Hamburg,C=DE,1.2.840.113549.1.9.1=#0c106d616473686940676d61696c2e636f6d
Serial Number
16:98:0f:59:4c:d4:ee:7b:44:e0:8d:bb
Issuer
CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 30, 2016 - Dec 24, 2018
Subject
CN=GlobalSign TSA for Standard - G2,O=GMO GlobalSign Pte Ltd,C=SG
Serial Number
11:21:b4:55:35:1e:bb:1a:b2:4f:97:ef:07:fe:2a:b3:0b:8a
Issuer
CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 24, 2016 - Jun 24, 2027
Subject
CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE
Serial Number
04:00:00:00:00:01:2f:4e:e1:52:d7
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Apr 13, 2011 - Jan 28, 2028
Minor OS version
0
Major OS version
5
Entry point
2265752
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
oleaut32
SysFreeString
SysReAllocStringLen
SysAllocStringLen
GetErrorInfo
GetActiveObject
SysFreeString
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopy
VariantClear
VariantInit
advapi32
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
SetSecurityDescriptorDacl
RegUnLoadKeyW
RegSetValueExA
RegSetValueExW
RegSaveKeyW
RegRestoreKeyW
RegReplaceKeyW
RegQueryValueExA
RegQueryValueExW
RegQueryInfoKeyA
RegQueryInfoKeyW
RegOpenKeyExA
RegOpenKeyExW
RegLoadKeyW
RegFlushKey
RegEnumValueW
RegEnumKeyA
RegEnumKeyW
RegEnumKeyExW
RegDeleteValueA
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExA
RegCreateKeyExW
RegConnectRegistryW
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
InitializeSecurityDescriptor
GetUserNameA
GetUserNameW
GetTokenInformation
FreeSid
AllocateAndInitializeSid
AdjustTokenPrivileges
user32
LoadStringW
MessageBoxA
CharNextW
CreateWindowExA
CreateWindowExW
WindowFromPoint
WaitMessage
UpdateWindow
UnregisterClassA
UnregisterClassW
UnhookWindowsHookEx
TranslateMessage
TranslateMDISysAccel
TrackPopupMenu
SystemParametersInfoW
ShowWindow
ShowScrollBar
ShowOwnedPopups
SetWindowsHookExW
SetWindowTextA
SetWindowTextW
SetWindowPos
SetWindowPlacement
SetWindowLongA
SetWindowLongW
SetTimer
SetScrollRange
SetScrollPos
SetScrollInfo
SetRect
SetPropW
SetParent
SetMenuItemInfoW
SetMenu
SetForegroundWindow
SetFocus
SetCursorPos
SetCursor
SetClipboardData
SetClassLongW
SetCapture
SetActiveWindow
SendMessageTimeoutA
SendMessageA
SendMessageW
ScrollWindow
ScreenToClient
RemovePropW
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageW
RegisterClipboardFormatW
RegisterClassA
RegisterClassW
RedrawWindow
PostThreadMessageA
PostThreadMessageW
PostQuitMessage
PostMessageA
PostMessageW
PeekMessageA
PeekMessageW
OpenClipboard
OffsetRect
MsgWaitForMultipleObjectsEx
MsgWaitForMultipleObjects
MessageBoxA
MessageBoxW
MessageBeep
MapWindowPoints
MapVirtualKeyW
LoadStringW
LoadKeyboardLayoutW
LoadImageA
LoadImageW
LoadIconW
LoadCursorW
LoadBitmapW
KillTimer
IsZoomed
IsWindowVisible
IsWindowUnicode
IsWindowEnabled
IsWindow
IsIconic
IsDialogMessageA
IsDialogMessageW
IsClipboardFormatAvailable
IsChild
InvalidateRect
InsertMenuItemW
InsertMenuW
InflateRect
GetWindowThreadProcessId
GetWindowTextA
GetWindowTextW
GetWindowRect
GetWindowPlacement
GetWindowLongA
GetWindowLongW
GetWindowDC
GetTopWindow
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSysColor
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetPropW
GetParent
GetWindow
GetMessagePos
GetMessageExtraInfo
GetMessageA
GetMessageW
GetMenuStringW
GetMenuState
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
GetMenu
GetLastActivePopup
GetKeyboardState
GetKeyboardLayoutNameW
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyState
GetKeyNameTextW
GetIconInfo
GetForegroundWindow
GetFocus
GetDesktopWindow
GetDCEx
GetDC
GetCursorPos
GetCursor
GetClipboardData
GetClientRect
GetClassNameA
GetClassNameW
GetClassLongW
GetClassInfoW
GetCapture
GetActiveWindow
FrameRect
FindWindowExW
FindWindowA
FindWindowW
FillRect
EnumWindows
EnumThreadWindows
EnumDisplayDevicesW
EnumClipboardFormats
EnumChildWindows
EndPaint
EndMenu
EnableWindow
EnableScrollBar
EnableMenuItem
EmptyClipboard
DrawTextExW
DrawTextA
DrawTextW
DrawMenuBar
DrawIconEx
DrawIcon
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageA
DispatchMessageW
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DeleteMenu
DefWindowProcA
DefWindowProcW
DefMDIChildProcW
DefFrameProcW
CreatePopupMenu
CreateMenu
CreateIcon
CreateAcceleratorTableW
CountClipboardFormats
CopyIcon
CloseClipboard
ClientToScreen
ChildWindowFromPoint
CheckMenuItem
CharUpperW
CharNextW
CharLowerBuffW
CharLowerW
ChangeDisplaySettingsExA
ChangeDisplaySettingsExW
CallWindowProcA
CallWindowProcW
CallNextHookEx
BringWindowToTop
BeginPaint
AttachThreadInput
AdjustWindowRectEx
ActivateKeyboardLayout
EnumDisplayMonitors
GetMonitorInfoW
MonitorFromPoint
MonitorFromRect
MonitorFromWindow
GetMonitorInfoW
EnumDisplaySettingsExA
EnumDisplayMonitors
EnumDisplaySettingsExW
EnumDisplaySettingsExW
GetMonitorInfoA
EnumDisplayMonitors
kernel32
lstrcmpiA
LoadLibraryA
LocalFree
LocalAlloc
Sleep
VirtualFree
VirtualAlloc
SwitchToThread
GetACP
GetSystemInfo
GetTickCount
QueryPerformanceCounter
GetVersion
GetCurrentThreadId
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenW
lstrcpynW
LoadLibraryExW
IsValidLocale
GetSystemDefaultUILanguage
GetStartupInfoA
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetUserDefaultUILanguage
GetLocaleInfoW
GetLastError
GetCommandLineW
FreeLibrary
FindFirstFileW
FindClose
ExitProcess
ExitThread
CreateThread
CompareStringW
WriteFile
UnhandledExceptionFilter
SetFilePointer
SetEndOfFile
RtlUnwind
ReadFile
RaiseException
GetStdHandle
GetFileSize
GetFileType
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
CreateFileW
CloseHandle
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleW
lstrlenW
lstrcpyA
lstrcmpiW
lstrcmpA
lstrcmpW
WriteFile
WideCharToMultiByte
WaitForSingleObject
WaitForMultipleObjectsEx
WaitForMultipleObjects
VirtualQueryEx
VirtualQuery
VirtualProtect
VirtualFree
VirtualAlloc
UnmapViewOfFile
TryEnterCriticalSection
TerminateThread
TerminateProcess
SystemTimeToFileTime
SwitchToThread
SuspendThread
Sleep
SizeofResource
SetUnhandledExceptionFilter
SetThreadPriority
SetThreadLocale
SetNamedPipeHandleState
SetLastError
SetFilePointer
SetFileAttributesA
SetFileAttributesW
SetEvent
SetErrorMode
SetEndOfFile
ResumeThread
ResetEvent
RemoveDirectoryA
RemoveDirectoryW
ReleaseSemaphore
ReleaseMutex
ReadProcessMemory
ReadFile
RaiseException
QueryPerformanceFrequency
QueryPerformanceCounter
IsDebuggerPresent
OpenProcess
OpenFileMappingA
OpenFileMappingW
OpenEventW
MultiByteToWideChar
MulDiv
MoveFileW
MapViewOfFile
LockResource
LocalSize
LocalFree
LocalAlloc
LoadResource
LoadLibraryExA
LoadLibraryA
LoadLibraryW
LeaveCriticalSection
IsValidLocale
IsBadReadPtr
InitializeCriticalSection
GlobalUnlock
GlobalSize
GlobalMemoryStatus
GlobalLock
GlobalFree
GlobalFindAtomW
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomW
GetWindowsDirectoryA
GetVolumeInformationA
GetVersionExA
GetVersionExW
GetVersion
GetTickCount
GetThreadPriority
GetThreadLocale
GetThreadContext
GetTempPathA
GetTempPathW
GetSystemTime
GetSystemDirectoryW
GetStdHandle
GetProcAddress
GetPriorityClass
GetModuleHandleA
GetModuleHandleW
GetModuleFileNameA
GetModuleFileNameW
GetLocaleInfoA
GetLocaleInfoW
GetLocalTime
GetLastError
GetFullPathNameW
GetFileTime
GetFileSize
GetFileAttributesA
GetFileAttributesW
GetExitCodeThread
GetExitCodeProcess
GetDiskFreeSpaceA
GetDiskFreeSpaceW
GetDateFormatW
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetCurrentDirectoryA
GetCurrentDirectoryW
GetComputerNameA
GetComputerNameW
GetCommandLineA
GetCommandLineW
GetCPInfoExW
GetCPInfo
GetACP
FreeResource
InterlockedIncrement
InterlockedExchangeAdd
InterlockedExchange
InterlockedDecrement
InterlockedCompareExchange
FreeLibrary
FormatMessageA
FormatMessageW
FlushInstructionCache
FindResourceA
FindResourceW
FindNextFileA
FindNextFileW
FindFirstFileA
FindFirstFileW
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FileTimeToDosDateTime
ExpandEnvironmentStringsA
ExpandEnvironmentStringsW
ExitThread
ExitProcess
EnumSystemLocalesW
EnumCalendarInfoW
EnterCriticalSection
DuplicateHandle
DeleteFileA
DeleteFileW
DeleteCriticalSection
CreateThread
CreateSemaphoreW
CreateProcessA
CreateProcessW
CreatePipe
CreateMutexA
CreateMutexW
CreateFileMappingA
CreateFileMappingW
CreateFileA
CreateFileW
CreateEventA
CreateEventW
CreateDirectoryA
CreateDirectoryW
CopyFileA
CopyFileW
CompareStringW
CloseHandle
Beep
RtlUnwind
Sleep
msimg32
AlphaBlend
gdi32
UnrealizeObject
TextOutA
TextOutW
StretchDIBits
StretchBlt
StartPage
StartDocA
StartDocW
SetWindowOrgEx
SetWinMetaFileBits
SetViewportOrgEx
SetTextColor
SetStretchBltMode
SetROP2
SetPixel
SetMapMode
SetEnhMetaFileBits
SetDeviceGammaRamp
SetDIBits
SetDIBColorTable
SetBrushOrgEx
SetBkMode
SetBkColor
SetAbortProc
SelectPalette
SelectObject
SelectClipRgn
SaveDC
RoundRect
RestoreDC
Rectangle
RectVisible
RealizePalette
Polyline
Polygon
PolyBezierTo
PolyBezier
PlayEnhMetaFile
Pie
PatBlt
MoveToEx
MaskBlt
LineTo
IntersectClipRect
GetWindowOrgEx
GetWinMetaFileBits
GetTextMetricsW
GetTextFaceA
GetTextExtentPointW
GetTextExtentPoint32A
GetTextExtentPoint32W
GetSystemPaletteEntries
GetStockObject
GetRgnBox
GetPixel
GetPaletteEntries
GetObjectW
GetEnhMetaFilePaletteEntries
GetEnhMetaFileHeader
GetEnhMetaFileDescriptionW
GetEnhMetaFileBits
GetDeviceGammaRamp
GetDeviceCaps
GetDIBits
GetDIBColorTable
GetCurrentPositionEx
GetClipBox
GetBrushOrgEx
GetBitmapBits
GdiFlush
FrameRgn
ExtTextOutW
ExtFloodFill
ExcludeClipRect
EnumFontsW
EnumFontFamiliesExW
EndPage
EndDoc
Ellipse
DeleteObject
DeleteEnhMetaFile
DeleteDC
CreateSolidBrush
CreateRectRgnIndirect
CreateRectRgn
CreatePenIndirect
CreatePen
CreatePalette
CreateICW
CreateHalftonePalette
CreateFontIndirectW
CreateFontA
CreateFontW
CreateDIBitmap
CreateDIBSection
CreateDCW
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
CopyEnhMetaFileW
CombineRgn
Chord
BitBlt
ArcTo
Arc
AngleArc
AbortDoc
version
VerQueryValueA
VerQueryValueW
GetFileVersionInfoSizeA
GetFileVersionInfoSizeW
GetFileVersionInfoA
GetFileVersionInfoW
ole32
OleUninitialize
OleInitialize
CoCreateInstance
CoUninitialize
CoInitialize
IsEqualGUID
comctl32
InitializeFlatSB
FlatSB_SetScrollProp
FlatSB_SetScrollPos
FlatSB_SetScrollInfo
FlatSB_GetScrollPos
FlatSB_GetScrollInfo
_TrackMouseEvent
ImageList_GetImageInfo
ImageList_SetIconSize
ImageList_GetIconSize
ImageList_Write
ImageList_Read
ImageList_GetDragImage
ImageList_DragShowNolock
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
ImageList_EndDrag
ImageList_BeginDrag
ImageList_Copy
ImageList_LoadImageW
ImageList_GetIcon
ImageList_Remove
ImageList_DrawEx
ImageList_Replace
ImageList_Draw
ImageList_SetOverlayImage
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_ReplaceIcon
ImageList_Add
ImageList_SetImageCount
ImageList_GetImageCount
ImageList_Destroy
ImageList_Create
InitCommonControls
shell32
ShellExecuteExA
ShellExecuteExW
ShellExecuteA
Shell_NotifyIconA
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetMalloc
wininet
InternetReadFile
InternetOpenUrlW
InternetOpenW
InternetCloseHandle
comdlg32
PrintDlgW
GetSaveFileNameA
GetSaveFileNameW
GetOpenFileNameW
wsock32
WSACleanup
WSAStartup
WSAGetLastError
gethostbyname
socket
setsockopt
sendto
send
select
recvfrom
recv
ioctlsocket
inet_ntoa
inet_addr
htons
connect
closesocket
bind
winspool.drv
OpenPrinterW
EnumPrintersW
DocumentPropertiesW
ClosePrinter
GetDefaultPrinterW
madhcnet32
AutoNet_BufToIcon
AutoNet_DecodeHello
AutoNet_GetStorage
AutoNet_Send
AutoNet_GetHello
AutoNet_Announce
AutoNet_Listen
AutoNet_AddConnectionCallback
iphlpapi
GetAdaptersInfo
GetAdaptersAddresses
unrar
RARProcessFileW
RARReadHeader
RARCloseArchive
RAROpenArchiveEx
mvrsettings32
mvrSettings_Import
mvrSettings_Export
mvrSettings_Final
mvrSettings_Init
madTraceProcess
Name
.text
Size
2.2MB
Virtual Size
2.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.itext
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
54KB
Virtual Size
54KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.bss
Size
Virtual Size
27KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
19KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.didata
Size
1024B
Virtual Size
928B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
80B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
Virtual Size
580B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
144KB
Virtual Size
144KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
655KB
Virtual Size
654KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
barchan.pptx
- SHA256 0dbddf219a27ab1311e62aeb0158f95eb53bedede62cd69f065a39d73a44990a
- MD5 92eff45ae68fef7d74adde110468d5f1
- SHA1 bb3ad15f03f70960374f3c495d69d26c6c9f09b9
- SHA512 cd4764b69f5969eb5d26f4d17b8e15cccf4c91710a63015a6c604b4951a2bdee1772b052e2bdfa00307c65cdf3d67d40adcc05c5fc7b402edabe105cf19ff147
- SSDEEP 768:Vcub1spIlH4pwRLXoGYGUDhVqUoWONslN8CUjG/rC/dFwj/Zv5P9aQWN:SncXmWDsmj2/j/l5Ip
- MD5 SHA1 SHA512 SSDEEP
madHcNet32.dll
- IMPHASH 1e157842e5cd99d6e1fd082c5f35c9fa
- SHA256 95b538b47e02d0ad2bd15d47efc18695d5e379ef61568b81ef405773d9c199bb
- MD5 d22b9da713ab36102c9c3d812af8c12d
- SHA1 371fdbf6ae6a9a2e5c0560fc94eba3290028a252
- SHA512 e5ae51f79403358af60bb3ea663251badac57414813f5537d763b0b95504a393fb2d34c94c4b7328ec13f58e74a7147d3a72e63e62973c4c5d80671be1c8face
- SSDEEP 24576:TlUbWq3/gquYUJ4Vgv0eUnDaE0efxfXT95:pUR4quYUJ4VgceXE0gxfjv
- MD5 SHA1 SHA512 SSDEEP
Password
51946
Digest
56:33:a8:5c:fd:08:d1:07:b4:19:5c:8c:4e:4f:aa:0d:61:82:2c:4e:c7:2b:cd:48:76:75:68:4e:98:8d:d9:75
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Systemsoftware Mathias Rauen (Mathias Rauen),O=Systemsoftware Mathias Rauen (Mathias Rauen),L=Hamburg,ST=Hamburg,C=DE,1.2.840.113549.1.9.1=#0c106d616473686940676d61696c2e636f6d
Chains
Aug 29, 2018
CN=Systemsoftware Mathias Rauen (Mathias Rauen),O=Systemsoftware Mathias Rauen (Mathias Rauen),L=Hamburg,ST=Hamburg,C=DE,1.2.840.113549.1.9.1=#0c106d616473686940676d61696c2e636f6d
CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=Systemsoftware Mathias Rauen (Mathias Rauen),O=Systemsoftware Mathias Rauen (Mathias Rauen),L=Hamburg,ST=Hamburg,C=DE,1.2.840.113549.1.9.1=#0c106d616473686940676d61696c2e636f6d
CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
PE Signature issue
Digest
f9:b1:33:5f:66:ed:06:7c:40:bb:f3:ad:cf:3d:6f:fd:35:14:53:b9
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Systemsoftware Mathias Rauen (Mathias Rauen),O=Systemsoftware Mathias Rauen (Mathias Rauen),L=Hamburg,ST=Hamburg,C=DE,1.2.840.113549.1.9.1=#0c106d616473686940676d61696c2e636f6d
Chains
Aug 29, 2018
Subject
CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE
Serial Number
04:00:00:00:00:01:2f:4e:e1:52:d7
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Apr 13, 2011 - Jan 28, 2028
Subject
CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE
Serial Number
04:00:00:00:00:01:2f:4e:e1:35:5c
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 13, 2011 - Apr 13, 2019
Subject
CN=GlobalSign TSA for MS Authenticode - G2,O=GMO GlobalSign Pte Ltd,C=SG
Serial Number
11:21:d6:99:a7:64:97:3e:f1:f8:42:7e:e9:19:cc:53:41:14
Issuer
CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 24, 2016 - Jun 24, 2027
Subject
CN=Systemsoftware Mathias Rauen (Mathias Rauen),O=Systemsoftware Mathias Rauen (Mathias Rauen),L=Hamburg,ST=Hamburg,C=DE,1.2.840.113549.1.9.1=#0c106d616473686940676d61696c2e636f6d
Serial Number
11:21:32:2d:39:bd:45:ac:62:3d:37:5b:22:c2:43:d6:07:6b
Issuer
CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Nov 24, 2015 - Dec 24, 2018
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
04:00:00:00:00:01:25:07:1d:f9:af
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Nov 18, 2009 - Mar 18, 2019
Subject
CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Serial Number
48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning
Timespan
Jun 15, 2016 - Jun 15, 2024
Subject
CN=Systemsoftware Mathias Rauen (Mathias Rauen),O=Systemsoftware Mathias Rauen (Mathias Rauen),L=Hamburg,ST=Hamburg,C=DE,1.2.840.113549.1.9.1=#0c106d616473686940676d61696c2e636f6d
Serial Number
16:98:0f:59:4c:d4:ee:7b:44:e0:8d:bb
Issuer
CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 30, 2016 - Dec 24, 2018
Subject
CN=GlobalSign TSA for Standard - G2,O=GMO GlobalSign Pte Ltd,C=SG
Serial Number
11:21:b4:55:35:1e:bb:1a:b2:4f:97:ef:07:fe:2a:b3:0b:8a
Issuer
CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 24, 2016 - Jun 24, 2027
Subject
CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE
Serial Number
04:00:00:00:00:01:2f:4e:e1:52:d7
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Apr 13, 2011 - Jan 28, 2028
Minor OS version
0
Major OS version
5
Entry point
813620
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
oleaut32
SysFreeString
SysReAllocStringLen
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopy
VariantClear
VariantInit
advapi32
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
SetSecurityDescriptorDacl
RegSetValueExA
RegSetValueExW
RegQueryValueExA
RegQueryValueExW
RegQueryInfoKeyA
RegOpenKeyExA
RegOpenKeyExW
RegEnumKeyA
RegEnumKeyExW
RegDeleteValueA
RegDeleteValueW
RegCreateKeyExA
RegCreateKeyExW
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
InitializeSecurityDescriptor
GetUserNameA
GetUserNameW
GetTokenInformation
FreeSid
AllocateAndInitializeSid
AdjustTokenPrivileges
user32
CharNextW
LoadStringW
SetWindowLongW
GetWindowLongW
CreateWindowExA
CreateWindowExW
WindowFromPoint
WaitForInputIdle
UnregisterClassA
TranslateMessage
SystemParametersInfoW
ShowWindow
SetWindowTextA
SetWindowTextW
SetWindowPos
SetTimer
SetRect
SetForegroundWindow
SetFocus
SetCursor
SetClipboardData
SetCapture
SetActiveWindow
SendMessageTimeoutA
SendMessageA
SendMessageW
ScreenToClient
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageW
RegisterClassA
RegisterClassW
PostThreadMessageA
PostThreadMessageW
PostQuitMessage
PostMessageA
PostMessageW
PeekMessageA
PeekMessageW
OpenClipboard
OffsetRect
MsgWaitForMultipleObjects
MessageBoxA
MessageBoxW
MessageBeep
LoadStringW
LoadImageA
LoadImageW
LoadCursorW
KillTimer
IsWindowVisible
IsWindowUnicode
IsWindowEnabled
IsWindow
IsIconic
IsDialogMessageW
InvalidateRect
InflateRect
GetWindowThreadProcessId
GetWindowTextA
GetWindowTextW
GetWindowRect
GetWindowPlacement
GetWindowDC
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSysColor
GetWindow
GetMessageA
GetMessageW
GetKeyState
GetIconInfo
GetFocus
GetDC
GetCursorPos
GetCursor
GetClientRect
GetClassNameA
GetCapture
FrameRect
FindWindowA
FillRect
EnumWindows
EnumDisplayDevicesW
EndPaint
EnableWindow
EmptyClipboard
DrawTextA
DrawTextW
DrawIconEx
DrawFrameControl
DrawFocusRect
DispatchMessageW
DestroyWindow
DestroyIcon
DefWindowProcA
DefWindowProcW
CreateIconIndirect
CloseClipboard
CharUpperBuffW
CharUpperW
CallWindowProcA
CallWindowProcW
BringWindowToTop
BeginPaint
AttachThreadInput
GetMonitorInfoW
kernel32
Sleep
VirtualFree
VirtualAlloc
lstrlenW
VirtualQuery
GetTickCount
GetSystemInfo
GetVersion
CompareStringW
IsDBCSLeadByteEx
IsValidLocale
SetThreadLocale
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GetLocaleInfoW
WideCharToMultiByte
MultiByteToWideChar
GetConsoleOutputCP
GetConsoleCP
GetACP
LoadLibraryExW
GetStartupInfoW
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetCommandLineW
FreeLibrary
GetLastError
UnhandledExceptionFilter
RtlUnwind
RaiseException
ExitProcess
SwitchToThread
GetCurrentThreadId
CreateThread
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
FindFirstFileW
FindClose
WriteFile
SetFilePointer
SetEndOfFile
ReadFile
GetFileType
GetFileSize
CreateFileW
GetStdHandle
CloseHandle
GetProcAddress
RaiseException
LoadLibraryA
GetLastError
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
LocalFree
LocalAlloc
FreeLibrary
lstrlenW
lstrcpyW
lstrcmpiW
lstrcmpA
WriteFile
WideCharToMultiByte
WaitForSingleObject
WaitForMultipleObjects
VirtualQuery
VirtualProtect
VirtualFree
VirtualAlloc
VerSetConditionMask
VerifyVersionInfoW
UnmapViewOfFile
TerminateThread
TerminateProcess
SystemTimeToFileTime
SuspendThread
Sleep
SizeofResource
SetUnhandledExceptionFilter
SetThreadPriority
SetNamedPipeHandleState
SetLastError
SetFilePointer
SetFileAttributesA
SetFileAttributesW
SetEvent
SetErrorMode
SetEndOfFile
ResumeThread
ResetEvent
RemoveDirectoryA
RemoveDirectoryW
ReleaseSemaphore
ReleaseMutex
ReadProcessMemory
ReadFile
RaiseException
QueryPerformanceFrequency
QueryPerformanceCounter
OpenProcess
OpenFileMappingA
OpenFileMappingW
OpenEventW
MapViewOfFile
LockResource
LocalSize
LocalFree
LocalAlloc
LoadResource
LoadLibraryA
LoadLibraryW
LoadLibraryExA
LeaveCriticalSection
IsValidLocale
IsBadReadPtr
InitializeCriticalSection
GlobalUnlock
GlobalMemoryStatus
GlobalLock
GlobalFree
GlobalAlloc
GetWindowsDirectoryA
GetVersionExA
GetVersionExW
GetVersion
GetTickCount
GetThreadPriority
GetThreadLocale
GetThreadContext
GetTempPathA
GetTempPathW
GetSystemTime
GetSystemDirectoryW
GetStdHandle
GetProcAddress
GetPriorityClass
GetModuleHandleA
GetModuleHandleW
GetModuleFileNameA
GetModuleFileNameW
GetLocaleInfoA
GetLocaleInfoW
GetLocalTime
GetLastError
GetFileTime
GetFileSize
GetFileAttributesA
GetFileAttributesW
GetExitCodeThread
GetDiskFreeSpaceA
GetDiskFreeSpaceW
GetDateFormatW
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetCurrentDirectoryA
GetCurrentDirectoryW
GetComputerNameA
GetComputerNameW
GetCommandLineA
GetCommandLineW
GetCPInfo
FreeResource
InterlockedIncrement
InterlockedDecrement
FreeLibrary
FormatMessageA
FormatMessageW
FlushInstructionCache
FindResourceA
FindResourceW
FindNextFileA
FindNextFileW
FindFirstFileA
FindFirstFileW
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FileTimeToDosDateTime
ExpandEnvironmentStringsA
ExpandEnvironmentStringsW
ExitThread
ExitProcess
EnumSystemLocalesW
EnumCalendarInfoW
EnterCriticalSection
DuplicateHandle
DeleteFileA
DeleteFileW
DeleteCriticalSection
CreateThread
CreateSemaphoreW
CreateProcessA
CreateProcessW
CreatePipe
CreateMutexA
CreateMutexW
CreateFileMappingA
CreateFileMappingW
CreateFileA
CreateFileW
CreateEventA
CreateEventW
CreateDirectoryA
CreateDirectoryW
CopyFileA
CopyFileW
CompareStringW
CloseHandle
Beep
Sleep
RtlUnwind
OpenThread
gdi32
TextOutA
TextOutW
StartPage
StartDocA
StartDocW
SetTextColor
SetMapMode
SetBkMode
SetBkColor
SelectObject
SelectClipRgn
MoveToEx
LineTo
GetTextMetricsW
GetTextFaceA
GetTextExtentPoint32A
GetTextExtentPoint32W
GetStockObject
GetRgnBox
GetObjectW
GetDeviceCaps
GetDIBits
GdiFlush
EndPage
EndDoc
DeleteObject
DeleteDC
CreateSolidBrush
CreateRectRgnIndirect
CreatePen
CreateFontA
CreateFontW
CreateDIBSection
CreateDCW
CreateCompatibleDC
CombineRgn
BitBlt
version
VerQueryValueA
VerQueryValueW
GetFileVersionInfoSizeA
GetFileVersionInfoSizeW
GetFileVersionInfoA
GetFileVersionInfoW
netapi32
NetWkstaGetInfo
NetApiBufferFree
NetServerEnum
ole32
CoInitialize
comctl32
ImageList_GetIcon
ImageList_Destroy
ImageList_Create
InitCommonControls
shell32
SHGetFileInfoW
ShellExecuteExA
ShellExecuteA
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetMalloc
comdlg32
PrintDlgW
GetSaveFileNameA
GetSaveFileNameW
wsock32
WSACleanup
WSAStartup
WSAGetLastError
gethostbyname
socket
shutdown
setsockopt
sendto
send
select
recvfrom
recv
listen
ioctlsocket
inet_ntoa
inet_addr
htons
getsockname
getpeername
connect
closesocket
bind
accept
dnsapi
DnsRecordListFree
DnsQuery_A
iphlpapi
IcmpParseReplies
IcmpSendEcho2
IcmpCloseHandle
IcmpCreateFile
GetAdaptersInfo
GetAdaptersAddresses
GetIpNetTable
AutoNet_AddConnectionCallback
AutoNet_Announce
AutoNet_Broadcast
AutoNet_BufToIcon
AutoNet_Connect
AutoNet_DecodeHello
AutoNet_DelConnectionCallback
AutoNet_EncodeHello
AutoNet_FinalComponent
AutoNet_GetHello
AutoNet_GetStorage
AutoNet_InitComponent
AutoNet_Listen
AutoNet_Search
AutoNet_Send
AutoNet_WaitForSearchCompletion
Localize_ConnectDialog
Localize_IpAddressDialog
Ping
madGetCurrentIpAddr
madGetFreezeReport
madGetGpuRamSize
madGetGpuUserModeDrivers
madGetMonitorInfo
madHandleException
madNameThread
madTraceProcess
madVR_BlindConnect
madVR_Connect
madVR_ConnectDialog
madVR_ConnectEx
madVR_ConnectToInstance
madVR_ConnectToIp
madVR_Convert3dlutFile
madVR_ConvertHdr3dlutFile
madVR_Create3dlutFileFromArray256
madVR_Create3dlutFileFromArray65
madVR_CreateHdr3dlutFileFromArray256
madVR_CreateHdr3dlutFileFromArray65
madVR_Disable3dlut
madVR_DisableFseMode
madVR_Disconnect
madVR_Enable3dlut
madVR_EnableFseMode
madVR_EnterFullscreen
madVR_Find
madVR_Find_Async
madVR_GetBlackAndWhiteLevel
madVR_GetDeviceGammaRamp
madVR_GetPatternConfig
madVR_GetSelected3dlut
madVR_GetVersion
madVR_GetWindowSize
madVR_IsDisableOsdButtonPressed
madVR_IsFseModeEnabled
madVR_IsFullscreen
madVR_IsHdrButtonPressed
madVR_IsLocal
madVR_IsMaximized
madVR_IsMinimized
madVR_IsRestored
madVR_IsStayOnTopButtonPressed
madVR_IsUseFullscreenButtonPressed
madVR_LeaveFullscreen
madVR_Load3dlutFile
madVR_Load3dlutFromArray256
madVR_Load3dlutFromArray65
madVR_LoadHdr3dlutFile
madVR_LoadHdr3dlutFromArray256
madVR_LoadHdr3dlutFromArray65
madVR_Maximize
madVR_Minimize
madVR_Quit
madVR_Restore
madVR_SetBackground
madVR_SetDeviceGammaRamp
madVR_SetDisableOsdButton
madVR_SetHdrButton
madVR_SetHdrMetadata
madVR_SetOsdText
madVR_SetPatternConfig
madVR_SetProgressBarPos
madVR_SetSelected3dlut
madVR_SetStayOnTopButton
madVR_SetUseFullscreenButton
madVR_SetWindowSize
madVR_ShowProgressBar
madVR_ShowRGB
madVR_ShowRGBEx
Name
.text
Size
785KB
Virtual Size
785KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.itext
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
30KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.bss
Size
Virtual Size
24KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.didata
Size
512B
Virtual Size
456B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rdata
Size
512B
Virtual Size
68B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
51KB
Virtual Size
50KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
mvrSettings32.dll
- IMPHASH e143d001bea94d24e61013ddbd97bbf0
- SHA256 b7d3bc460a17e1b43c9ff09786e44ea4033710538bdb539400b55e5b80d0b338
- MD5 d168f18b79f9f33690f011d1deb1e7cf
- SHA1 cf0d984ce101ec274e65e88fae07daeb26de5a6d
- SHA512 bbf085bcbc3c1c98caba95bdf48051bac18bbd1b7314c7bb55b56e3d423fb34758cc239c237091486cc466123bf02844eaac3b4435cb535af25dc2bca625af71
- SSDEEP 12288:1wsE8YWuTCipwKm3ZCdX+y0Cg57ZrVmK5UhYX5NN/u3ZeEb+LJkguVl1Y1e:XIWuFKKVuig5jZ5xX5P2bKyguJf
- MD5 SHA1 SHA512 SSDEEP
Password
51946
Digest
f3:60:86:f9:4c:42:bf:73:21:8e:ef:2e:2b:07:03:61:35:81:42:bc:df:74:2f:9a:7e:3f:50:ee:f8:11:0a:82
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Systemsoftware Mathias Rauen (Mathias Rauen),O=Systemsoftware Mathias Rauen (Mathias Rauen),L=Hamburg,ST=Hamburg,C=DE,1.2.840.113549.1.9.1=#0c106d616473686940676d61696c2e636f6d
Chains
Sep 29, 2018
CN=Systemsoftware Mathias Rauen (Mathias Rauen),O=Systemsoftware Mathias Rauen (Mathias Rauen),L=Hamburg,ST=Hamburg,C=DE,1.2.840.113549.1.9.1=#0c106d616473686940676d61696c2e636f6d
CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=Systemsoftware Mathias Rauen (Mathias Rauen),O=Systemsoftware Mathias Rauen (Mathias Rauen),L=Hamburg,ST=Hamburg,C=DE,1.2.840.113549.1.9.1=#0c106d616473686940676d61696c2e636f6d
CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
PE Signature issue
Digest
18:2a:7d:d8:3c:8c:d2:87:c8:b5:56:04:38:97:ae:15:d1:f9:7c:c4
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Systemsoftware Mathias Rauen (Mathias Rauen),O=Systemsoftware Mathias Rauen (Mathias Rauen),L=Hamburg,ST=Hamburg,C=DE,1.2.840.113549.1.9.1=#0c106d616473686940676d61696c2e636f6d
Chains
Sep 29, 2018
Subject
CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE
Serial Number
04:00:00:00:00:01:2f:4e:e1:52:d7
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Apr 13, 2011 - Jan 28, 2028
Subject
CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE
Serial Number
04:00:00:00:00:01:2f:4e:e1:35:5c
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 13, 2011 - Apr 13, 2019
Subject
CN=GlobalSign TSA for MS Authenticode - G2,O=GMO GlobalSign Pte Ltd,C=SG
Serial Number
11:21:d6:99:a7:64:97:3e:f1:f8:42:7e:e9:19:cc:53:41:14
Issuer
CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 24, 2016 - Jun 24, 2027
Subject
CN=Systemsoftware Mathias Rauen (Mathias Rauen),O=Systemsoftware Mathias Rauen (Mathias Rauen),L=Hamburg,ST=Hamburg,C=DE,1.2.840.113549.1.9.1=#0c106d616473686940676d61696c2e636f6d
Serial Number
11:21:32:2d:39:bd:45:ac:62:3d:37:5b:22:c2:43:d6:07:6b
Issuer
CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Nov 24, 2015 - Dec 24, 2018
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
04:00:00:00:00:01:25:07:1d:f9:af
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Nov 18, 2009 - Mar 18, 2019
Subject
CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Serial Number
48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning
Timespan
Jun 15, 2016 - Jun 15, 2024
Subject
CN=Systemsoftware Mathias Rauen (Mathias Rauen),O=Systemsoftware Mathias Rauen (Mathias Rauen),L=Hamburg,ST=Hamburg,C=DE,1.2.840.113549.1.9.1=#0c106d616473686940676d61696c2e636f6d
Serial Number
16:98:0f:59:4c:d4:ee:7b:44:e0:8d:bb
Issuer
CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 30, 2016 - Dec 24, 2018
Subject
CN=GlobalSign TSA for Standard - G2,O=GMO GlobalSign Pte Ltd,C=SG
Serial Number
11:21:b4:55:35:1e:bb:1a:b2:4f:97:ef:07:fe:2a:b3:0b:8a
Issuer
CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 24, 2016 - Jun 24, 2027
Subject
CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE
Serial Number
04:00:00:00:00:01:2f:4e:e1:52:d7
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Apr 13, 2011 - Jan 28, 2028
Minor OS version
0
Major OS version
5
Entry point
932524
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
oleaut32
SysFreeString
SysReAllocStringLen
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopy
VariantClear
VariantInit
GetActiveObject
advapi32
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
SetSecurityDescriptorDacl
RevertToSelf
RegSetValueExA
RegSetValueExW
RegQueryValueExA
RegQueryValueExW
RegQueryInfoKeyA
RegOpenKeyExA
RegOpenKeyExW
RegEnumKeyA
RegEnumKeyExW
RegDeleteValueA
RegDeleteValueW
RegCreateKeyExA
RegCreateKeyExW
RegCloseKey
OpenThreadToken
OpenProcessToken
MapGenericMask
InitializeSecurityDescriptor
ImpersonateSelf
GetUserNameA
GetUserNameW
GetTokenInformation
GetFileSecurityW
FreeSid
AllocateAndInitializeSid
AccessCheck
user32
CharNextW
LoadStringW
SetWindowLongW
GetWindowLongW
CreateWindowExA
CreateWindowExW
WindowFromPoint
UnregisterClassA
TranslateMessage
SystemParametersInfoW
ShowWindow
SetWindowTextA
SetWindowTextW
SetWindowPos
SetTimer
SetRect
SetForegroundWindow
SetFocus
SetCursor
SetClipboardData
SetCapture
SetActiveWindow
SendMessageTimeoutA
SendMessageA
SendMessageW
ScreenToClient
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageW
RegisterClassA
RegisterClassW
PostThreadMessageA
PostThreadMessageW
PostQuitMessage
PostMessageA
PostMessageW
PeekMessageA
PeekMessageW
OpenClipboard
OffsetRect
MessageBoxA
MessageBoxW
MessageBeep
LoadStringW
LoadImageA
LoadImageW
LoadCursorW
KillTimer
IsWindowVisible
IsWindowUnicode
IsWindowEnabled
IsWindow
IsIconic
IsDialogMessageW
InvalidateRect
InflateRect
GetWindowThreadProcessId
GetWindowTextA
GetWindowTextW
GetWindowRect
GetWindowPlacement
GetWindowDC
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSysColor
GetWindow
GetMessageA
GetMessageW
GetKeyState
GetIconInfo
GetFocus
GetDC
GetCursorPos
GetCursor
GetClientRect
GetClassNameA
GetCapture
FrameRect
FindWindowA
FillRect
EnumWindows
EnumDisplayDevicesW
EndPaint
EnableWindow
EmptyClipboard
DrawTextA
DrawTextW
DrawIconEx
DrawFrameControl
DrawFocusRect
DispatchMessageW
DestroyWindow
DefWindowProcA
DefWindowProcW
CloseClipboard
CharUpperBuffW
CharUpperW
CharLowerBuffW
CallWindowProcA
CallWindowProcW
BringWindowToTop
BeginPaint
AttachThreadInput
GetMonitorInfoW
EnumDisplayMonitors
kernel32
Sleep
VirtualFree
VirtualAlloc
lstrlenW
VirtualQuery
GetTickCount
GetSystemInfo
GetVersion
CompareStringW
IsDBCSLeadByteEx
IsValidLocale
SetThreadLocale
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GetLocaleInfoW
WideCharToMultiByte
MultiByteToWideChar
GetConsoleOutputCP
GetConsoleCP
GetACP
LoadLibraryExW
GetStartupInfoW
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetCommandLineW
FreeLibrary
GetLastError
UnhandledExceptionFilter
RtlUnwind
RaiseException
ExitProcess
SwitchToThread
GetCurrentThreadId
CreateThread
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
FindFirstFileW
FindClose
WriteFile
SetFilePointer
SetEndOfFile
ReadFile
GetFileType
GetFileSize
CreateFileW
GetStdHandle
CloseHandle
GetProcAddress
RaiseException
LoadLibraryA
GetLastError
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
LocalFree
LocalAlloc
FreeLibrary
lstrlenW
lstrcpyA
lstrcmpiW
lstrcmpA
WriteFile
WideCharToMultiByte
WaitForSingleObject
VirtualQuery
VirtualProtect
VirtualFree
VirtualAlloc
VerSetConditionMask
VerifyVersionInfoW
UnmapViewOfFile
TerminateThread
TerminateProcess
SystemTimeToFileTime
SuspendThread
Sleep
SizeofResource
SetUnhandledExceptionFilter
SetThreadPriority
SetNamedPipeHandleState
SetLastError
SetFilePointer
SetFileAttributesA
SetFileAttributesW
SetEvent
SetErrorMode
SetEndOfFile
ResumeThread
ResetEvent
RemoveDirectoryA
RemoveDirectoryW
ReleaseMutex
ReadProcessMemory
ReadFile
RaiseException
QueryPerformanceFrequency
QueryPerformanceCounter
OpenProcess
OpenFileMappingA
OpenFileMappingW
MapViewOfFile
LockResource
LocalSize
LocalFree
LocalAlloc
LoadResource
LoadLibraryA
LoadLibraryW
LoadLibraryExA
LeaveCriticalSection
IsValidLocale
IsBadReadPtr
InitializeCriticalSection
GlobalUnlock
GlobalMemoryStatus
GlobalLock
GlobalFree
GlobalAlloc
GetWindowsDirectoryA
GetVolumeInformationA
GetVersionExA
GetVersionExW
GetVersion
GetTickCount
GetThreadPriority
GetThreadLocale
GetThreadContext
GetTempPathA
GetTempPathW
GetSystemTime
GetSystemDirectoryW
GetStdHandle
GetProcAddress
GetPriorityClass
GetModuleHandleA
GetModuleHandleW
GetModuleFileNameA
GetModuleFileNameW
GetLocaleInfoA
GetLocaleInfoW
GetLocalTime
GetLastError
GetFileTime
GetFileSize
GetFileAttributesA
GetFileAttributesW
GetDiskFreeSpaceA
GetDiskFreeSpaceW
GetDateFormatW
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetCurrentDirectoryA
GetCurrentDirectoryW
GetComputerNameA
GetComputerNameW
GetCommandLineA
GetCommandLineW
GetCPInfo
FreeResource
InterlockedIncrement
InterlockedDecrement
FreeLibrary
FormatMessageA
FormatMessageW
FlushInstructionCache
FindResourceA
FindResourceW
FindNextFileA
FindNextFileW
FindFirstFileA
FindFirstFileW
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FileTimeToDosDateTime
ExpandEnvironmentStringsA
ExpandEnvironmentStringsW
ExitThread
ExitProcess
EnumSystemLocalesW
EnumCalendarInfoW
EnterCriticalSection
DuplicateHandle
DeleteFileA
DeleteFileW
DeleteCriticalSection
CreateThread
CreateProcessA
CreateProcessW
CreatePipe
CreateMutexA
CreateMutexW
CreateFileMappingA
CreateFileMappingW
CreateFileA
CreateFileW
CreateEventA
CreateEventW
CreateDirectoryA
CreateDirectoryW
CopyFileA
CopyFileW
CompareStringW
CloseHandle
Beep
Sleep
RtlUnwind
gdi32
TextOutA
TextOutW
StartPage
StartDocA
StartDocW
SetTextColor
SetMapMode
SetBkMode
SetBkColor
SelectObject
SelectClipRgn
MoveToEx
LineTo
GetTextMetricsW
GetTextFaceA
GetTextExtentPoint32A
GetTextExtentPoint32W
GetStockObject
GetRgnBox
GetObjectW
GetDeviceCaps
GdiFlush
EndPage
EndDoc
DeleteObject
DeleteDC
CreateSolidBrush
CreateRectRgnIndirect
CreatePen
CreateFontA
CreateFontW
CreateDIBSection
CreateDCW
CreateCompatibleDC
CombineRgn
BitBlt
version
VerQueryValueA
VerQueryValueW
GetFileVersionInfoSizeA
GetFileVersionInfoSizeW
GetFileVersionInfoA
GetFileVersionInfoW
netapi32
NetWkstaGetInfo
ole32
CoCreateInstance
CoUninitialize
CoInitialize
IsEqualGUID
comctl32
ImageList_Destroy
ImageList_Create
InitCommonControls
shell32
ShellExecuteExA
ShellExecuteA
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetMalloc
comdlg32
PrintDlgW
GetSaveFileNameA
GetSaveFileNameW
wsock32
WSACleanup
WSAStartup
WSAGetLastError
gethostbyname
socket
setsockopt
sendto
send
select
recvfrom
recv
ioctlsocket
inet_addr
htons
connect
closesocket
bind
madTraceProcess
mvrSettings_ActivateProfile
mvrSettings_AddProfile
mvrSettings_CreateProfileGroup
mvrSettings_DeleteProfile
mvrSettings_DeleteProfileGroup
mvrSettings_DoesMonitorSupportHdr
mvrSettings_DuplicateProfile
mvrSettings_EnableLensMemoryHandling
mvrSettings_EnumFolders
mvrSettings_EnumProfileGroups
mvrSettings_EnumProfiles
mvrSettings_EnumValues
mvrSettings_Export
mvrSettings_Final
mvrSettings_GetBinary
mvrSettings_GetBoolean
mvrSettings_GetInteger
mvrSettings_GetMonitorBitdepth
mvrSettings_GetMonitorDeviceId
mvrSettings_GetRevision
mvrSettings_GetString
mvrSettings_Import
mvrSettings_Init
mvrSettings_IsOpenCLNeeded
mvrSettings_IsProfileActive
mvrSettings_IsProfileAutoselected
mvrSettings_RecheckProfiles
mvrSettings_RegisterLensMemoryCallback
mvrSettings_ResetLensMemory
mvrSettings_SetAutoselectProfile
mvrSettings_SetBoolean
mvrSettings_SetInteger
mvrSettings_SetMonitor
mvrSettings_SetProfileRuleInfos
mvrSettings_SetString
Name
.text
Size
904KB
Virtual Size
903KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.itext
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
38KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.bss
Size
Virtual Size
25KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.didata
Size
512B
Virtual Size
456B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rdata
Size
512B
Virtual Size
68B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
54KB
Virtual Size
54KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
resources.pak
- SHA256 11d0f55c105883d203137a87a610ba793299dc4774fd6d8b3a86666a2c337041
- MD5 df15387bf046715cc592a690da33e4b1
- SHA1 ad93b08dff82cbd894f6a0a9733c70d7e564113d
- SHA512 71244553d7b1b559fcaaa059622c340d22148bd5324fa3f6730d37322025dbfe5e853948b49b91db6022a25bca4ddbab8fe6ee1522a461963dfba04a7c93d69a
- SSDEEP 98304:b6zN1Kt66I0+1Yk93pPVrXh188CYCUrwr1ISgMRQK8nXCpGm5vEybt:+zjKt66bGVrhm8hCUkrGsyCV5vXbt
- MD5 SHA1 SHA512 SSDEEP
turnspit.mkv
- SHA256 741c0ee7d587aa5b50f76c6d3bab8bff10ed5c787610642e4efa73e868bde2cf
- MD5 4d9a2db06b3ee731e99716fbd56615fd
- SHA1 c63aee8def5e31df0c48b2866c1d6e0172823e01
- SHA512 0c6dff5e343363a821bdf2bfba024edb5fafaeef5205b80768a20918bfcea0b0bb344d51c420eca2810f97fa6251112119f1a105d3aac207d471c075c2ae044d
- SSDEEP 12288:2RUynoXIviP+VCJpUa/etV7xSIXm0+UnPGgptGhTbs8iolzyS/xvIaiMx+oB:2RJnzviP+EzygLkrtOnsFolHFII+y
- MD5 SHA1 SHA512 SSDEEP
unrar.dll
- IMPHASH 97687a07538d3932fb9baf861b959f5d
- SHA256 458f266b1aa18a1ffc6808205fabef514a02e6a3b43047c739618bda3b49d17e
- MD5 0f20d49c6211d5995fed4de7fbce06e8
- SHA1 6ba2e1d8ac2abd6a32b7d70303f5f5a920520baa
- SHA512 cfda67fe02377fa7fa0bf0251fdb3cbbabafc6f1dea16ff2640679766cd673089435b28ca740009d3bca3685facd7cf3e32260356de12677a97c659ba1226064
- SSDEEP 6144:k2GkbDaKov/5qrawOZI8uN0f/UVvN3MMdZFmicMtGaGm:k2GkVo35qrawqmG/yMoPmilGa7
- MD5 SHA1 SHA512 SSDEEP
Password
51946
PE Signature issue
Digest
cf:27:8c:01:7b:0a:10:49:25:b0:bd:b9:46:3c:c4:12:7c:fe:de:00:e8:5f:f3:0d:81:c4:7c:fc:ef:d7:75:db
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
SERIALNUMBER=HRB 109885,CN=win.rar GmbH,O=win.rar GmbH,L=Berlin,ST=Berlin,C=DE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#130e436861726c6f7474656e62757267,1.3.6.1.4.1.311.60.2.1.2=#13064265726c696e,1.3.6.1.4.1.311.60.2.1.3=#13024445
Chains
May 12, 2024
SERIALNUMBER=HRB 109885,CN=win.rar GmbH,O=win.rar GmbH,L=Berlin,ST=Berlin,C=DE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#130e436861726c6f7474656e62757267,1.3.6.1.4.1.311.60.2.1.2=#13064265726c696e,1.3.6.1.4.1.311.60.2.1.3=#13024445
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=HRB 109885,CN=win.rar GmbH,O=win.rar GmbH,L=Berlin,ST=Berlin,C=DE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#130e436861726c6f7474656e62757267,1.3.6.1.4.1.311.60.2.1.2=#13064265726c696e,1.3.6.1.4.1.311.60.2.1.3=#13024445
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=HRB 109885,CN=win.rar GmbH,O=win.rar GmbH,L=Berlin,ST=Berlin,C=DE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#130e436861726c6f7474656e62757267,1.3.6.1.4.1.311.60.2.1.2=#13064265726c696e,1.3.6.1.4.1.311.60.2.1.3=#13024445
Serial Number
04:8b:08:39:9e:c7:03:62:3c:72:cd:20:77:ad:65:d9
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 8, 2023 - Aug 7, 2026
Subject
CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US
Serial Number
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jul 14, 2023 - Oct 13, 2034
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
1
Major OS version
5
Entry point
202208
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\Projects\WinRAR\rar\build\unrardll32\Release\UnRAR.pdb
kernel32
CreateFileW
DeleteFileW
CreateHardLinkW
GetShortPathNameW
GetLongPathNameW
MoveFileW
WriteFile
ReadFile
FlushFileBuffers
SetEndOfFile
SetFilePointer
GetCurrentProcessId
CreateDirectoryW
SetFileAttributesW
GetFileAttributesW
FindClose
FindFirstFileW
FindNextFileW
InterlockedDecrement
GetVersionExW
GetCurrentDirectoryW
GetFullPathNameW
FoldStringW
FreeLibrary
GetProcAddress
SetThreadPriority
SetThreadExecutionState
RemoveDirectoryW
LoadLibraryW
GetModuleHandleW
GetSystemDirectoryW
GetProcessAffinityMask
CreateThread
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
ReleaseSemaphore
WaitForSingleObject
CreateSemaphoreW
GetSystemTime
SystemTimeToTzSpecificLocalTime
TzSpecificLocalTimeToSystemTime
SystemTimeToFileTime
FileTimeToLocalFileTime
LocalFileTimeToFileTime
FileTimeToSystemTime
GetCPInfo
IsDBCSLeadByte
MultiByteToWideChar
WideCharToMultiByte
CompareStringW
DecodePointer
WriteConsoleW
SetFilePointerEx
HeapSize
GetConsoleCP
GetProcessHeap
CloseHandle
GetCommandLineW
SetFileTime
DeviceIoControl
GetCurrentProcess
Sleep
SetLastError
GetLastError
AreFileApisANSI
GetConsoleMode
GetStdHandle
GetFileType
CreateEventW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
HeapReAlloc
SetStdHandle
LocalFree
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
InitializeCriticalSectionAndSpinCount
WaitForSingleObjectEx
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RaiseException
RtlUnwind
InterlockedFlushSList
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
QueryPerformanceFrequency
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
GetStringTypeW
GetACP
HeapFree
HeapAlloc
LCMapStringW
user32
CharUpperW
CharToOemA
OemToCharBuffA
OemToCharA
CharLowerW
CharToOemBuffW
advapi32
CheckTokenMembership
FreeSid
AllocateAndInitializeSid
LookupPrivilegeValueW
SetFileSecurityW
AdjustTokenPrivileges
OpenProcessToken
ole32
CoCreateInstance
CoSetProxyBlanket
oleaut32
VariantClear
SysFreeString
SysAllocString
RARCloseArchive
RARGetDllVersion
RAROpenArchive
RAROpenArchiveEx
RARProcessFile
RARProcessFileW
RARReadHeader
RARReadHeaderEx
RARSetCallback
RARSetChangeVolProc
RARSetPassword
RARSetProcessDataProc
Name
.text
Size
242KB
Virtual Size
242KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
36KB
Virtual Size
35KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
35KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=241, version=40116,
count=126, id=243, version=40116,
count=24, id=242, version=40116,
count=17, id=260, version=31616,
count=24, id=259, version=31616,
count=1, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=45, id=261, version=31616,
count=15, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=169, id=1, productName=Unmarked objects,
count=48, id=261, version=31630,
count=1, id=256, version=31630,
count=1, id=255, version=31630,
count=1, id=151,
count=1, id=258, version=31630,
vcruntime140.dll
- IMPHASH 44c3854843f7a3fccdf8ddbbea66f302
- SHA256 e1d6f78a72836ea120bd27a33ae89cbdc3f3ca7d9d0231aaa3aac91996d2fa4e
- MD5 11d9ac94e8cb17bd23dea89f8e757f18
- SHA1 d4fb80a512486821ad320c4fd67abcae63005158
- SHA512 aa6afd6bea27f554e3646152d8c4f96f7bcaaa4933f8b7c04346e410f93f23cfa6d29362fd5d51ccbb8b6223e094cd89e351f072ad0517553703f5bf9de28778
- SSDEEP 1536:yDHLG4SsAzAvadZw+1Hcx8uIYNUzUnHg4becbK/zJrCT:yDrfZ+jPYNznHg4becbK/Fr
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
f7:83:e8:fe:9b:12:41:fc:30:39:3a:38:a0:12:16:d8:7c:73:43:56:72:48:ca:1e:25:f6:f1:cb:95:e8:ff:06
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jul 5, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:e2:f1:7d:92:02:0e:49:f8:7f:00:00:00:00:01:e2
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Dec 15, 2020 - Dec 2, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
6
Entry point
64368
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
d:\a01\_work\2\s\\binaries\amd64ret\bin\amd64\\vcruntime140.amd64.pdb
api-ms-win-crt-runtime-l1-1-0
terminate
abort
api-ms-win-crt-heap-l1-1-0
calloc
malloc
free
api-ms-win-crt-string-l1-1-0
strcpy_s
strncmp
wcsncmp
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsprintf_s
api-ms-win-crt-convert-l1-1-0
atol
kernel32
SetLastError
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlCaptureContext
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
RtlLookupFunctionEntry
RtlUnwindEx
GetModuleHandleW
RtlUnwind
EncodePointer
RaiseException
RtlPcToFileHeader
InterlockedPushEntrySList
InterlockedFlushSList
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetLastError
LoadLibraryExW
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
GetModuleFileNameW
_CreateFrameInfo
_CxxThrowException
_FindAndUnlinkFrame
_IsExceptionObjectToBeDestroyed
_SetWinRTOutOfMemoryExceptionCallback
__AdjustPointer
__BuildCatchObject
__BuildCatchObjectHelper
__C_specific_handler
__C_specific_handler_noexcept
__CxxDetectRethrow
__CxxExceptionFilter
__CxxFrameHandler
__CxxFrameHandler2
__CxxFrameHandler3
__CxxQueryExceptionSize
__CxxRegisterExceptionObject
__CxxUnregisterExceptionObject
__DestructExceptionObject
__FrameUnwindFilter
__GetPlatformExceptionInfo
__NLG_Dispatch2
__NLG_Return2
__RTCastToVoid
__RTDynamicCast
__RTtypeid
__TypeMatch
__current_exception
__current_exception_context
__intrinsic_setjmp
__intrinsic_setjmpex
__processing_throw
__report_gsfailure
__std_exception_copy
__std_exception_destroy
__std_terminate
__std_type_info_compare
__std_type_info_destroy_list
__std_type_info_hash
__std_type_info_name
__telemetry_main_invoke_trigger
__telemetry_main_return_trigger
__unDName
__unDNameEx
__uncaught_exception
__uncaught_exceptions
__vcrt_GetModuleFileNameW
__vcrt_GetModuleHandleW
__vcrt_InitializeCriticalSectionEx
__vcrt_LoadLibraryExW
_get_purecall_handler
_get_unexpected
_is_exception_typeof
_local_unwind
_purecall
_set_purecall_handler
_set_se_translator
longjmp
memchr
memcmp
memcpy
memmove
memset
set_unexpected
strchr
strrchr
strstr
unexpected
wcschr
wcsrchr
wcsstr
Name
.text
Size
62KB
Virtual Size
62KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
16KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
244B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1016B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
416B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=257, version=28900,
count=11, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=44, id=1, productName=Unmarked objects,
count=13, id=259, version=30034,
count=16, id=260, version=30034,
count=31, id=261, version=30034,
count=1, id=256, version=30034,
count=1, id=255, version=30034,
count=1, id=258, version=30034,