834e8f4765c588b556257ec5ffead48d_JaffaCakes118
- SHA256 23229dc8786e8bba9c4a23d7aa0c43eb056e65f0f37589b509bf97b699487608
Overview
overview
7Static
static
7mydata/COMDLG32.dll
windows7-x64
3mydata/COMDLG32.dll
windows10-2004-x64
3mydata/MSCOMCTL.dll
windows7-x64
3mydata/MSCOMCTL.dll
windows10-2004-x64
3mydata/RICHTX32.dll
windows7-x64
3mydata/RICHTX32.dll
windows10-2004-x64
3mydata/Update.exe
windows7-x64
3mydata/Update.exe
windows10-2004-x64
3mydata/mydata.exe
windows7-x64
7mydata/mydata.exe
windows10-2004-x64
7mydata/too...32.dll
windows7-x64
3mydata/too...32.dll
windows10-2004-x64
3mydata/too...ll.dll
windows7-x64
7mydata/too...ll.dll
windows10-2004-x64
7mydata/too...XT.dll
windows7-x64
3mydata/too...XT.dll
windows10-2004-x64
3mydata/too...TL.dll
windows7-x64
3mydata/too...TL.dll
windows10-2004-x64
3mydata/too...32.dll
windows7-x64
3mydata/too...32.dll
windows10-2004-x64
3mydata/tools/fix.bat
windows7-x64
7mydata/tools/fix.bat
windows10-2004-x64
7mydata/tools/m3.exe
windows7-x64
7mydata/tools/m3.exe
windows10-2004-x64
7mydata/too...ip.dll
windows7-x64
3mydata/too...ip.dll
windows10-2004-x64
3mydata/too...or.dll
windows7-x64
7mydata/too...or.dll
windows10-2004-x64
7mydata/too...b6.dll
windows7-x64
7mydata/too...b6.dll
windows10-2004-x64
7mydata/新...��.url
windows7-x64
1mydata/新...��.url
windows10-2004-x64
1Behavioral task
behavioral1
Sample
mydata/COMDLG32.dll
Resource
win7-20240705-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
mydata/COMDLG32.dll
Resource
win10v2004-20240730-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
mydata/MSCOMCTL.dll
Resource
win7-20240705-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
mydata/MSCOMCTL.dll
Resource
win10v2004-20240730-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral5
Sample
mydata/RICHTX32.dll
Resource
win7-20240708-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral6
Sample
mydata/RICHTX32.dll
Resource
win10v2004-20240730-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral7
Sample
mydata/Update.exe
Resource
win7-20240708-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral8
Sample
mydata/Update.exe
Resource
win10v2004-20240730-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral9
Sample
mydata/mydata.exe
Resource
win7-20240705-en
windows7-x64
8 signatures
150 seconds
Behavioral task
behavioral10
Sample
mydata/mydata.exe
Resource
win10v2004-20240730-en
windows10-2004-x64
8 signatures
150 seconds
Behavioral task
behavioral11
Sample
mydata/tools/COMDLG32.dll
Resource
win7-20240704-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral12
Sample
mydata/tools/COMDLG32.dll
Resource
win10v2004-20240730-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral13
Sample
mydata/tools/CameraDll.dll
Resource
win7-20240708-en
windows7-x64
4 signatures
150 seconds
Behavioral task
behavioral14
Sample
mydata/tools/CameraDll.dll
Resource
win10v2004-20240730-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral15
Sample
mydata/tools/EXTRACTTEXT.dll
Resource
win7-20240704-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral16
Sample
mydata/tools/EXTRACTTEXT.dll
Resource
win10v2004-20240730-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral17
Sample
mydata/tools/MSCOMCTL.dll
Resource
win7-20240704-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral18
Sample
mydata/tools/MSCOMCTL.dll
Resource
win10v2004-20240730-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral19
Sample
mydata/tools/RICHTX32.dll
Resource
win7-20240704-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral20
Sample
mydata/tools/RICHTX32.dll
Resource
win10v2004-20240730-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral21
Sample
mydata/tools/fix.bat
Resource
win7-20240705-en
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral22
Sample
mydata/tools/fix.bat
Resource
win10v2004-20240730-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral23
Sample
mydata/tools/m3.exe
Resource
win7-20240708-en
windows7-x64
7 signatures
150 seconds
Behavioral task
behavioral24
Sample
mydata/tools/m3.exe
Resource
win10v2004-20240730-en
windows10-2004-x64
7 signatures
150 seconds
Behavioral task
behavioral25
Sample
mydata/tools/mydatazip.dll
Resource
win7-20240729-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral26
Sample
mydata/tools/mydatazip.dll
Resource
win10v2004-20240730-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral27
Sample
mydata/tools/myeditor.dll
Resource
win7-20240729-en
windows7-x64
4 signatures
150 seconds
Behavioral task
behavioral28
Sample
mydata/tools/myeditor.dll
Resource
win10v2004-20240730-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral29
Sample
mydata/tools/skinh_vb6.dll
Resource
win7-20240704-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral30
Sample
mydata/tools/skinh_vb6.dll
Resource
win10v2004-20240730-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral31
Sample
mydata/新云软件.url
Resource
win7-20240708-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral32
Sample
mydata/新云软件.url
Resource
win10v2004-20240730-en
windows10-2004-x64
0 signatures
150 seconds
General
- Target 834e8f4765c588b556257ec5ffead48d_JaffaCakes118
- Size 3.6MB
- Sample240802-gt67pavclc
- SHA256 23229dc8786e8bba9c4a23d7aa0c43eb056e65f0f37589b509bf97b699487608
- MD5 834e8f4765c588b556257ec5ffead48d
- SHA1 63c8c7797a9a0ef3a84c12b661f6300cdf7e0ea6
- SHA512 21c567f62794feb4ea040d952ea890c898746c9c6d47554e8b47e2790ab5ac510c30c9d65eaebce28a7661330e8da7381be3c5127a6b4a6e7050f26b0ca60e1d
- SSDEEP 98304:PaXsoK9oYtINerGMGJlLZB298nf24gpEXaXDuoY33Q:PadsPyMGJ/B29iBZXsuO
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Malware Config
Signatures
- ACProtect 1.3x - 1.4x DLL software 3 IoCs
Detects file using ACProtect software.
resource yara_rule static1/unpack001/mydata/tools/CameraDll.DLL acprotect static1/unpack001/mydata/tools/myeditor.ocx acprotect static1/unpack001/mydata/tools/skinh_vb6.dll acprotect -
resource yara_rule static1/unpack001/mydata/mydata.exe upx static1/unpack001/mydata/tools/CameraDll.DLL upx static1/unpack001/mydata/tools/m3.exe upx static1/unpack001/mydata/tools/myeditor.ocx upx static1/unpack001/mydata/tools/skinh_vb6.dll upx - Unsigned PE 8 IoCs
Checks for missing Authenticode signature.
resource unpack001/mydata/Update.exe unpack001/mydata/mydata.exe unpack001/mydata/tools/CameraDll.DLL unpack001/mydata/tools/EXTRACTTEXT.DLL unpack001/mydata/tools/m3.exe unpack001/mydata/tools/mydatazip.dll unpack001/mydata/tools/myeditor.ocx unpack001/mydata/tools/skinh_vb6.dll
File Explorer
-
834e8f4765c588b556257ec5ffead48d_JaffaCakes118.rar 3.6MB
-
mydata/COMDLG32.OCX.dll 149KB
-
mydata/Config.ini1KB
-
mydata/Lang/CHINESE.INI43KB
-
mydata/MSCOMCTL.OCX.dll 1.0MB
-
mydata/RICHTX32.OCX.dll 207KB
-
mydata/Update.exe.exe 388KB
-
mydata/data/MyData.db396KB
-
mydata/data/ico/0001.ICO1KB
-
mydata/data/ico/001.ICO1KB
-
mydata/data/ico/01.ICO4KB
-
mydata/data/ico/02.ICO4KB
-
mydata/data/ico/03.ICO4KB
-
mydata/data/ico/04.ICO4KB
-
mydata/data/ico/05.ICO4KB
-
mydata/data/ico/06.ICO4KB
-
mydata/data/ico/07.ICO4KB
-
mydata/data/ico/08.ICO4KB
-
mydata/data/ico/09.ICO4KB
-
mydata/data/ico/135.ICO1KB
-
mydata/data/ico/19.ICO1KB
-
mydata/data/ico/221.ICO1KB
-
mydata/data/ico/227.ICO1KB
-
mydata/data/ico/241.ICO1KB
-
mydata/data/ico/44.ICO1KB
-
mydata/data/ico/6.ICO1KB
-
mydata/data/ico/62.ICO1KB
-
mydata/data/ico/7.ICO1KB
-
mydata/data/ico/BLUEBERRY.ICO4KB
-
mydata/data/ico/Books.ico894B
-
mydata/data/ico/COPAQUA BUTTON.ICO4KB
-
mydata/data/ico/FLD301.ICO2KB
-
mydata/data/ico/FLD302.ICO2KB
-
mydata/data/ico/FLD303.ICO2KB
-
mydata/data/ico/FLD304.ICO2KB
-
mydata/data/ico/FLD305.ICO2KB
-
mydata/data/ico/FLD306.ICO2KB
-
mydata/data/ico/FLD307.ICO2KB
-
mydata/data/ico/FLD308.ICO2KB
-
mydata/data/ico/FLD309.ICO2KB
-
mydata/data/ico/FLD310.ICO2KB
-
mydata/data/ico/FLD311.ICO2KB
-
mydata/data/ico/FLD312.ICO2KB
-
mydata/data/ico/FLD313.ICO2KB
-
mydata/data/ico/FLD314.ICO2KB
-
mydata/data/ico/FLD315.ICO2KB
-
mydata/data/ico/FLD316.ICO2KB
-
mydata/data/ico/FLD317.ICO2KB
-
mydata/data/ico/FLD318.ICO2KB
-
mydata/data/ico/GRAPE.ICO4KB
-
mydata/data/ico/GRAPHITE.ICO4KB
-
mydata/data/ico/HARD DISK.ICO4KB
-
mydata/data/ico/Home.ico894B
-
mydata/data/ico/ITOOLS.ICO4KB
-
mydata/data/ico/KATE'S REVERSE UNDER-COPAQU.ICO4KB
-
mydata/data/ico/LIME.ICO4KB
-
mydata/data/ico/MARMALADE.ICO4KB
-
mydata/data/ico/RECYCLEBIN.ico1KB
-
mydata/data/ico/STRAWBERRY.ICO4KB
-
mydata/data/ico/book.ico894B
-
mydata/data/ico/mydata.ico894B
-
mydata/data/ico/note.ico894B
-
mydata/mydata.exe.exe 2.0MB
-
mydata/readme.txt1KB
-
mydata/skins/1.skin35KB
-
mydata/skins/2.skin111KB
-
mydata/skins/3.skin54KB
-
mydata/skins/4.skin36KB
-
mydata/skins/5.skin55KB
-
mydata/tools/COMDLG32.OCX.dll 149KB
-
mydata/tools/CameraDll.DLL.dll 230KB
-
mydata/tools/EXTRACTTEXT.DLL.dll 140KB
-
mydata/tools/MSCOMCTL.OCX.dll 1.0MB
-
mydata/tools/RICHTX32.OCX.dll 207KB
-
mydata/tools/fix.bat141B
-
mydata/tools/m3.exe.exe 141KB
-
mydata/tools/mydatazip.dll.dll 148KB
-
mydata/tools/myeditor.ocx.dll 357KB
-
mydata/tools/skinh_vb6.dll.dll 136KB
-
mydata/update.ris614B
-
mydata/新云软件.url.url 133B
mydata/COMDLG32.OCX
- IMPHASH 988f29c1eb8054253091352741683c76
- SHA256 e32d8bbe8e6985726742b496520fa47827f3b428648fa1bc34ecffdd9bdac240
- MD5 ab412429f1e5fb9708a8cdea07479099
- SHA1 eb49323be4384a0e7e36053f186b305636e82887
- SHA512 f3348dbc3b05d14482250d7c399c00533598973f8e9168b4082ee5cbb81089dfaefcfda5a6a3c9f05b4445d655051b7a5170c57ee32d7a783dc35a75fee41aa9
- SSDEEP 3072:VCslb9HnH/GrQ/qCFyn7dWXSQeRDBIY/OR5JrNo2CocrJbNN6N2TRqEydc:VCsB9Hu9nweRD4JZoDxtRHj
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
30:04:be:c7:7e:04:0a:8e:9c:44:86:a8:95:a7:50:5e:ca:0f:22:ec
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jul 26, 2024
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US
Serial Number
0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2008
Subject
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Serial Number
c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Timespan
Jan 10, 1997 - Dec 31, 2020
Subject
CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:de:aa:11:d4:d8:40:9a:a8:be:e6
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Dec 10, 2000 - Nov 12, 2005
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:7d:a7:00:00:00:00:00:48
Issuer
CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 25, 2003 - Jan 25, 2005
Minor OS version
0
Major OS version
4
Entry point
5304
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
PDB paths
kernel32
HeapReAlloc
GetLastError
LockResource
GetWindowsDirectoryA
InterlockedDecrement
InterlockedIncrement
IsDBCSLeadByte
CompareStringA
CompareStringW
lstrcmpA
GetLocaleInfoA
GetVersion
GetModuleFileNameA
GetFileAttributesA
IsBadWritePtr
DisableThreadLibraryCalls
GlobalAlloc
lstrcmpiA
LoadLibraryA
GetProcAddress
lstrcatA
lstrlenA
lstrcpyA
WriteProfileStringA
GlobalLock
GlobalUnlock
LoadResource
FindResourceA
lstrcpynA
LeaveCriticalSection
DeleteCriticalSection
FreeLibrary
HeapFree
WideCharToMultiByte
lstrlenW
HeapAlloc
GetProfileStringA
EnterCriticalSection
GetProcessHeap
GetCurrentThreadId
MultiByteToWideChar
InitializeCriticalSection
GlobalFree
user32
SetWindowRgn
IntersectRect
EqualRect
PtInRect
IsDialogMessageA
IsChild
GetKeyState
CreateDialogIndirectParamA
MessageBeep
PostMessageA
ClientToScreen
wsprintfA
SendMessageTimeoutA
CharNextA
GetActiveWindow
GetWindowThreadProcessId
LoadCursorA
MessageBoxA
GetWindowLongA
GetWindowRect
CreateWindowExA
SetWindowLongA
ShowWindow
DialogBoxParamA
EnableWindow
GetDesktopWindow
GetWindow
IsWindowEnabled
OffsetRect
GetParent
GetDlgItem
SendMessageA
SetFocus
SetParent
SetDlgItemInt
EndPaint
SetActiveWindow
IsWindowVisible
WinHelpA
GetDlgItemInt
EndDialog
GetDlgItemTextA
DestroyWindow
SetDlgItemTextA
GetWindowTextA
GetNextDlgTabItem
SendDlgItemMessageA
RegisterClassA
GetDC
ReleaseDC
LoadIconA
DrawIcon
DestroyIcon
GetSystemMetrics
RegisterWindowMessageA
LoadStringA
DefWindowProcA
UnregisterClassA
GetClientRect
BeginPaint
RegisterClipboardFormatA
SetWindowPos
MoveWindow
ole32
CreateOleAdviseHolder
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
ReleaseStgMedium
advapi32
RegEnumKeyExA
RegQueryValueA
RegOpenKeyA
RegQueryValueExA
RegDeleteValueA
RegDeleteKeyA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
oleaut32
LoadRegTypeLi
OleCreatePropertyFrame
SetErrorInfo
UnRegisterTypeLi
LoadTypeLi
LoadTypeLibEx
OleLoadPicture
VariantChangeType
RegisterTypeLi
VariantInit
GetErrorInfo
VariantClear
SysStringLen
SysAllocStringLen
OleTranslateColor
SysFreeString
SysAllocString
CreateErrorInfo
comdlg32
CommDlgExtendedError
PrintDlgA
ChooseFontA
ChooseColorA
GetOpenFileNameA
GetSaveFileNameA
gdi32
GetDIBits
CreateCompatibleDC
CreateBitmap
GetSystemPaletteEntries
StretchDIBits
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
SetMapMode
LPtoDP
SetViewportExtEx
GetViewportExtEx
CreateRectRgnIndirect
GetWindowExtEx
CreateDCA
GetObjectA
EnumFontFamiliesA
DeleteDC
DeleteObject
GetDeviceCaps
SelectObject
DLLGetDocumentation
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Name
.text
Size
72KB
Virtual Size
69KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
52KB
Virtual Size
51KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
mydata/Config.ini
- SHA256 9455be046a28796d9fa3c03e43512e9dee0b4b44257d105051c2676ca80dbadb
- MD5 b40e35aad9f7d2eb4eb45e27cfa67d4c
- SHA1 bf2d95485caf243cbf3fa1dd3b0dec34c2019618
- SHA512 3f3711a3c85c732cda56ec2528af8c82232bb01ea4177e4a072bd53e57c668c83a86c40251cc34a4b12ca29ecafccef76c7dd5b6cf39d6a7b9d80d0585a31abb
- MD5 SHA1 SHA512
mydata/Lang/CHINESE.INI
- SHA256 ec29ad06cbdef2233fff6f1fe0b0fbc9795c3f903203aa1fc6d6eaaf517bad4e
- MD5 08e0e3581415de32dde56bb56a4d0a49
- SHA1 1dca1bc37fd99bd4be6f2bb5d5a2a2434e6b5911
- SHA512 d1f82402f9fbcd49488ba3fa7d859be23fe30dcb92a3fcce99000ceb6ee21a441b9aa219a27beda654e765929abf37bee2631457e244ffc1e2129dd15ec31935
- SSDEEP 768:SXo523o24sI4V2TBfw0s/G8DZug58DZugu2ABCTQWu:Sl3oreUTBSZugwZugEBsu
- MD5 SHA1 SHA512 SSDEEP
mydata/MSCOMCTL.OCX
- IMPHASH ce21923007044b1701a0b2dc4ac9396b
- SHA256 fac6736251d3c61ecbd63be0420d1c75d5cd0442181d479013330155ca37d358
- MD5 d268668751ee22997d7ef1417034cb04
- SHA1 d8a87438ab0df47fe252b06162a986399cafffe1
- SHA512 75f40cc8c92e3fcdd381669f6aa0bf1e76ee6fec0c5cbf53ea0bbfbff199ac7229fc1405f737420badd24f438b49b8d2eed2bb0f3fad0bf8a974f54bd6964a34
- SSDEEP 24576:TcqSrNXsCxx927qRC33KjjnZRqPnFqRo7w3zgyZdt+:TCXjx/2G9cv77EnM
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
d3:33:87:9d:a3:7d:db:aa:b4:12:4a:ae:67:2b:01:a6:0b:07:8a:fd
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jul 26, 2024
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US
Serial Number
0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2008
Subject
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Serial Number
c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Timespan
Jan 10, 1997 - Dec 31, 2020
Subject
CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:0c:ab:11:d8:22:ef:7d:6c:79:7e
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 23, 2002 - Sep 25, 2011
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:87:58:00:03:00:00:00:5a
Issuer
CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jan 5, 2005 - Apr 5, 2006
Minor OS version
0
Major OS version
4
Entry point
88238
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
PDB paths
kernel32
CreateThread
LocalReAlloc
GetProfileIntA
RtlMoveMemory
LocalSize
FreeResource
GetCurrentProcessId
MulDiv
GetTickCount
MapViewOfFile
CreateFileMappingA
UnmapViewOfFile
GlobalReAlloc
IsBadReadPtr
Sleep
WaitForSingleObject
GlobalHandle
GetThreadLocale
LocalFree
LocalAlloc
GlobalAddAtomA
SetFilePointer
SetStdHandle
FlushFileBuffers
VirtualAlloc
WriteFile
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetOEMCP
GetACP
GetCPInfo
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
TlsGetValue
SetLastError
TlsFree
TlsAlloc
TlsSetValue
GetCurrentProcess
TerminateProcess
ExitProcess
RtlUnwind
GetCommandLineA
CompareStringW
GlobalSize
CreateFileA
GetFileSize
GlobalUnlock
GlobalLock
ReadFile
CloseHandle
IsDBCSLeadByte
GetModuleHandleA
FindResourceA
LoadResource
LockResource
GetLastError
GetFileAttributesA
GetVersion
DisableThreadLibraryCalls
GetProcAddress
GetLocaleInfoA
LoadLibraryA
GetWindowsDirectoryA
lstrcatA
GetModuleFileNameA
IsBadWritePtr
lstrcmpiA
GetLocalTime
GetTimeFormatA
GetDateFormatA
lstrcmpA
GlobalAlloc
GlobalFree
GetVersionExA
GetCurrentThreadId
MultiByteToWideChar
CompareStringA
lstrcpyA
InterlockedExchange
lstrlenA
GetSystemDefaultLCID
lstrcpynA
HeapAlloc
DeleteCriticalSection
FreeLibrary
HeapFree
WideCharToMultiByte
lstrlenW
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetProcessHeap
InterlockedIncrement
InterlockedDecrement
HeapReAlloc
user32
DrawFocusRect
AdjustWindowRect
DrawFrameControl
TrackPopupMenu
GetMessageA
AdjustWindowRectEx
CopyRect
GetKeyNameTextA
ShowCaret
SetCaretPos
GrayStringA
HideCaret
DestroyCaret
CreateCaret
SetWindowTextA
SetScrollInfo
DrawTextExA
InvertRect
SetRectEmpty
GetShellWindow
SetKeyboardState
GetKeyboardState
GetScrollInfo
GetKeyboardLayout
DestroyCursor
GetUpdateRgn
GetUpdateRect
GetWindowRgn
ValidateRect
CallMsgFilterA
LockWindowUpdate
IsZoomed
GetDesktopWindow
GetIconInfo
GetCursor
GetForegroundWindow
InvalidateRgn
EndDeferWindowPos
EnumChildWindows
GetDoubleClickTime
FindWindowA
GetMessageTime
GetWindowThreadProcessId
RemovePropA
SendNotifyMessageA
SetScrollPos
SetScrollRange
GetWindowTextLengthA
EnableScrollBar
ChildWindowFromPoint
EndDialog
GetWindow
GetPropA
GetCursorPos
WindowFromPoint
GetClassNameA
GetDlgCtrlID
IsWindow
SetPropA
SetTimer
KillTimer
SendDlgItemMessageA
IsWindowVisible
UnregisterClassA
CharNextA
SetActiveWindow
CheckRadioButton
SetFocus
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
CheckDlgButton
GetDlgItem
IsWindowEnabled
GetDCEx
DrawIconEx
CreateIconIndirect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetClipboardFormatNameA
SetCursorPos
RegisterClipboardFormatA
MessageBeep
RegisterWindowMessageA
PeekMessageA
PostMessageW
PeekMessageW
VkKeyScanA
SetParent
CharUpperA
GetDlgItemInt
SetCursor
CreateDialogIndirectParamA
GetNextDlgTabItem
IsDialogMessageA
ScrollWindowEx
GetDlgItemTextA
SetWindowRgn
IntersectRect
EqualRect
MoveWindow
BeginPaint
EndPaint
DeferWindowPos
BeginDeferWindowPos
CharNextExA
DrawIcon
DestroyIcon
MapWindowPoints
CreatePopupMenu
AppendMenuA
TrackPopupMenuEx
DestroyMenu
GetActiveWindow
MessageBoxA
WinHelpA
PtInRect
DefWindowProcA
GetWindowDC
SetRect
LoadCursorA
IsRectEmpty
ClientToScreen
GetWindowRect
MapVirtualKeyA
DestroyWindow
CreateWindowExA
GetSysColorBrush
GetAsyncKeyState
EnableWindow
PostMessageA
TranslateMessage
DispatchMessageA
wsprintfA
DialogBoxParamA
UpdateWindow
GetWindowLongA
SetWindowLongA
GetDC
ReleaseDC
GetParent
OffsetRect
UnionRect
GetFocus
IsChild
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
GetMessagePos
ScreenToClient
SetWindowPos
SetCapture
GetWindowTextA
WindowFromDC
GetClientRect
CallWindowProcA
DrawEdge
GetSysColor
FrameRect
InflateRect
FillRect
DrawTextA
GetKeyState
GetCapture
ReleaseCapture
GetClassInfoA
RegisterClassA
InvalidateRect
LoadIconA
GetSystemMetrics
CopyImage
SendMessageA
LoadStringA
RedrawWindow
ShowWindow
CreateAcceleratorTableA
ole32
ReleaseStgMedium
DoDragDrop
RegisterDragDrop
RevokeDragDrop
CreateStreamOnHGlobal
OleLoadFromStream
OleSaveToStream
CreateOleAdviseHolder
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
advapi32
RegDeleteKeyA
RegOpenKeyA
RegQueryValueA
RegQueryValueExA
RegEnumKeyExA
RegCreateKeyA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegDeleteValueA
oleaut32
SafeArrayRedim
SafeArrayPutElement
SafeArrayGetElement
SafeArrayCreate
SafeArrayDestroy
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
GetErrorInfo
OleCreateFontIndirect
OleCreatePropertyFrame
LoadTypeLibEx
UnRegisterTypeLi
RegisterTypeLi
CreateErrorInfo
SetErrorInfo
LoadRegTypeLi
LoadTypeLi
VariantChangeTypeEx
SysStringByteLen
SysAllocStringByteLen
OleLoadPicture
SysAllocStringLen
VariantCopy
OleTranslateColor
VariantChangeType
OleCreatePictureIndirect
VariantCopyInd
SysStringLen
SysFreeString
VariantInit
VariantClear
SysAllocString
SafeArrayCopy
comdlg32
GetOpenFileNameA
gdi32
Arc
GetTextExtentPointA
GetCharWidthA
OffsetWindowOrgEx
ExtTextOutW
GetTextExtentPointW
Polyline
GetTextAlign
SetTextAlign
OffsetRgn
GetTextColor
CombineRgn
GetTextMetricsA
MoveToEx
LineTo
Ellipse
DeleteObject
SelectObject
CreateSolidBrush
SetViewportOrgEx
SetWindowOrgEx
SetViewportExtEx
SetWindowExtEx
SetMapMode
GetDeviceCaps
CreateFontIndirectA
GetObjectA
SelectClipRgn
ExcludeClipRect
RectVisible
GetClipBox
IntersectClipRect
GetClipRgn
CreateRectRgnIndirect
RealizePalette
SelectPalette
PatBlt
CreateCompatibleBitmap
CreateBitmap
CreateCompatibleDC
GetTextExtentPoint32A
TextOutA
SetBkColor
SetTextColor
SetBkMode
Rectangle
CreatePen
GetStockObject
GetViewportExtEx
GetWindowExtEx
LPtoDP
DeleteDC
CreateDCA
CreateRectRgn
StretchBlt
CreateICA
CopyMetaFileA
CopyEnhMetaFileA
GetPaletteEntries
GetDIBits
CreateDIBitmap
GetBitmapBits
CreatePalette
GetNearestColor
CreatePatternBrush
CreateDIBSection
CreateHalftonePalette
BitBlt
SetDIBColorTable
GetDIBColorTable
GetPixel
StretchDIBits
SetBrushOrgEx
GetBkColor
ExtTextOutA
RestoreDC
SaveDC
CreateFontA
DLLGetDocumentation
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Name
.text
Size
690KB
Virtual Size
690KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
29KB
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
279KB
Virtual Size
279KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
38KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
mydata/RICHTX32.OCX
- IMPHASH aaca01ab2cd35af160b8025e9dcfad9f
- SHA256 318cc48cbcfaba9592956e4298886823cc5f37626c770d6dadbcd224849680c5
- MD5 045a16822822426c305ea7280270a3d6
- SHA1 43075b6696bb2d2f298f263971d4d3e48aa4f561
- SHA512 5a042ff0a05421fb01e0a95a8b62f3ce81f90330daed78f09c7d5d2abcb822a2fe99d00494c3ddd96226287fae51367e264b48b2831a8c080916ce18c0a675fa
- SSDEEP 6144:hTr80hTueZXFOTSqP0xqRBTdtmFdCJErRj6/uE:NhzZVOTSqcxqRBKFdF6/uE
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
c6:be:da:cb:6f:7c:07:ce:80:06:10:c2:9a:0c:17:6f:0c:b4:42:44
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jul 26, 2024
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US
Serial Number
0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2008
Subject
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Serial Number
c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Timespan
Jan 10, 1997 - Dec 31, 2020
Subject
CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:de:aa:11:d4:d8:40:9a:a8:be:e6
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Dec 10, 2000 - Nov 12, 2005
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:7d:a7:00:00:00:00:00:48
Issuer
CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 25, 2003 - Jan 25, 2005
Minor OS version
0
Major OS version
4
Entry point
5136
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
PDB paths
shell32
DragAcceptFiles
DragQueryFileA
DragFinish
oledlg
ord1
kernel32
GlobalUnlock
GetVersionExA
GlobalSize
GlobalLock
FindResourceA
GlobalAlloc
GlobalFree
GetLocaleInfoA
LoadResource
LockResource
GetModuleFileNameA
GetWindowsDirectoryA
HeapReAlloc
GetFileAttributesA
lstrcatA
lstrcpynA
DisableThreadLibraryCalls
GetProcAddress
GetVersion
GetAtomNameA
FindAtomA
AddAtomA
IsBadWritePtr
DeleteAtom
InterlockedIncrement
FreeLibrary
LoadLibraryA
InterlockedDecrement
GetProcessHeap
DeleteCriticalSection
InitializeCriticalSection
EnterCriticalSection
WriteFile
GetLastError
ReadFile
LeaveCriticalSection
CreateFileA
lstrcmpA
lstrcpyA
HeapAlloc
lstrlenA
HeapFree
WideCharToMultiByte
lstrlenW
SetFilePointer
MultiByteToWideChar
IsDBCSLeadByte
CloseHandle
lstrcmpiA
user32
SetCursorPos
ScreenToClient
GetClipboardFormatNameA
PeekMessageW
PostMessageW
PeekMessageA
RegisterWindowMessageA
IsDlgButtonChecked
SetDlgItemInt
SetDlgItemTextA
CheckDlgButton
ReleaseCapture
DefWindowProcA
LoadCursorA
SetCursor
CreateDialogIndirectParamA
MapWindowPoints
FillRect
GetDlgItemTextA
GetClientRect
InvalidateRect
ValidateRect
SetRect
GetSysColor
InflateRect
GetClassInfoA
TrackPopupMenu
GetWindow
GetWindowTextA
CharNextA
MessageBoxA
SendDlgItemMessageA
GetDlgItem
PostMessageA
IsChild
TranslateMessage
DispatchMessageA
IsWindowEnabled
GetNextDlgTabItem
IsDialogMessageA
WinHelpA
BeginPaint
MoveWindow
SetFocus
IsWindowVisible
EndPaint
SetParent
ShowWindow
EnableMenuItem
DeleteMenu
EqualRect
SetWindowRgn
IntersectRect
GetWindowRect
OffsetRect
GetDlgItemInt
GetActiveWindow
SetWindowLongA
SetWindowPos
LoadMenuA
UnregisterClassA
DestroyWindow
DestroyMenu
GetSubMenu
RemoveMenu
GetParent
GetMenuItemCount
GetFocus
IsWindow
WindowFromDC
RegisterClassA
LoadStringA
RegisterClipboardFormatA
GetCapture
GetCursorPos
EnableWindow
EndDialog
wsprintfA
GetKeyState
MessageBeep
CallWindowProcA
GetDC
GetSystemMetrics
ReleaseDC
UpdateWindow
SendMessageA
DialogBoxParamA
GetWindowLongA
CreateWindowExA
ClientToScreen
PtInRect
ole32
DoDragDrop
RegisterDragDrop
CreateOleAdviseHolder
OleCreateFromFile
CLSIDFromProgID
OleCreate
OleSetContainedObject
StringFromCLSID
OleGetIconOfClass
CoGetMalloc
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
OleSaveToStream
OleLoadFromStream
RevokeDragDrop
CoTaskMemRealloc
ReleaseStgMedium
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
advapi32
RegEnumKeyExA
RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegQueryValueA
RegDeleteKeyA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
oleaut32
SafeArrayGetElement
SafeArrayDestroy
SafeArrayRedim
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayGetLBound
VariantCopyInd
VariantCopy
SafeArrayUnaccessData
SetErrorInfo
OleCreatePropertyFrame
CreateErrorInfo
UnRegisterTypeLi
LoadTypeLi
LoadTypeLibEx
SafeArrayCreate
SafeArrayPutElement
RegisterTypeLi
OleCreatePictureIndirect
LoadRegTypeLi
GetErrorInfo
OleCreateFontIndirect
SysAllocStringLen
OleLoadPicture
OleTranslateColor
SysStringLen
SysFreeString
VariantChangeType
VariantClear
SysAllocString
VariantInit
SafeArrayCopy
comdlg32
GetOpenFileNameA
CommDlgExtendedError
gdi32
GetNearestColor
CreateSolidBrush
DeleteObject
EnumFontFamiliesExA
CreatePalette
GetBitmapBits
StretchBlt
GetObjectA
SelectPalette
CreateDIBitmap
GetDIBits
GetPaletteEntries
RealizePalette
CreateBitmap
CopyEnhMetaFileA
GetStockObject
CreateDCA
LPtoDP
CopyMetaFileA
GetViewportExtEx
CreateRectRgnIndirect
GetWindowExtEx
GetClipBox
SetWindowExtEx
SetBkColor
SelectObject
CreateCompatibleBitmap
SetViewportExtEx
DeleteDC
EndDoc
PatBlt
StartPage
StartDocA
EndPage
SetWindowOrgEx
SetViewportOrgEx
DPtoLP
CreateCompatibleDC
GetMapMode
CreateICA
GetObjectType
SetMapMode
GetDeviceCaps
DLLGetDocumentation
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
VBFrameworkMapClassObject
Name
.text
Size
116KB
Virtual Size
114KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
68KB
Virtual Size
67KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
mydata/Update.exe
- IMPHASH 34f7649c68f4957bb90af532e3876452
- SHA256 9444b4bd22e3972ccfa1734463f3c87e83132b29a411b116ff9b790f83727a37
- MD5 92d736682fd4c85a8d37a15a742d7640
- SHA1 14286f5779a2dc24970a661b3e207467be4fbaf4
- SHA512 5600bbd75e3db58a0fedf1b9e633244ac8d50ba82a984827fbeaad1e2926c09e9041e7f7db469039fe2d0482cc9a7b70b1f2ec7ed6925286a03e0ed67caa3ecd
- SSDEEP 6144:h/HKSYB6YzoQpLJZ1rPXiihQ+VG4x8CPV8I9QqBXj:QNzoQtxPXiit3yqBXj
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
13168
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
msvbvm60
EVENT_SINK_GetIDsOfNames
__vbaStrI2
_CIcos
_adj_fptan
__vbaVarMove
__vbaStrI4
__vbaVarVargNofree
__vbaAryMove
__vbaFreeVar
__vbaLineInputStr
ord588
__vbaStrVarMove
__vbaLateIdCall
__vbaLenBstr
__vbaFreeVarList
__vbaEnd
_adj_fdiv_m64
EVENT_SINK_Invoke
__vbaRaiseEvent
__vbaFreeObjList
ord516
ord517
_adj_fprem1
__vbaRecAnsiToUni
ord519
__vbaI2Abs
__vbaCopyBytes
__vbaResume
__vbaStrCat
__vbaLsetFixstr
ord660
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryVar
ord666
Zombie_GetTypeInfo
__vbaAryDestruct
ord669
__vbaBoolStr
__vbaStrBool
__vbaExitProc
__vbaForEachCollObj
__vbaOnError
__vbaObjSet
ord595
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
ord598
ord599
__vbaBoolVar
ord521
__vbaBoolVarNull
__vbaFpR8
_CIsin
__vbaErase
ord709
ord631
ord525
__vbaNextEachCollObj
__vbaChkstk
__vbaFileClose
EVENT_SINK_AddRef
ord527
__vbaGenerateBoundsError
__vbaStrCmp
__vbaPutOwner3
__vbaVarTstEq
__vbaObjVar
ord561
__vbaI2I4
DllFunctionCall
ord563
__vbaVarLateMemSt
__vbaFpUI1
__vbaCastObjVar
__vbaLbound
__vbaRedimPreserve
_adj_fpatan
__vbaR4Var
__vbaFixstrConstruct
__vbaLateIdCallLd
Zombie_GetTypeInfoCount
__vbaRedim
__vbaRecUniToAnsi
EVENT_SINK_Release
__vbaUI1I2
_CIsqrt
EVENT_SINK_QueryInterface
__vbaUI1I4
__vbaExceptHandler
ord711
ord712
__vbaStrToUnicode
__vbaPrintFile
ord606
_adj_fprem
_adj_fdivr_m64
__vbaI2Str
__vbaLateIdStAd
ord608
ord531
__vbaFPException
ord319
__vbaUbound
__vbaStrVarVal
ord534
__vbaVarCat
__vbaCheckType
__vbaI2Var
ord644
ord537
ord645
_CIlog
__vbaErrorOverflow
ord646
__vbaFileOpen
__vbaVar2Vec
__vbaNew2
__vbaInStr
ord648
ord571
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
ord681
__vbaI4Str
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord578
ord685
ord100
__vbaVarTstNe
__vbaI4Var
ord610
__vbaAryLock
__vbaLateMemCall
ord320
__vbaVarDup
__vbaStrToAnsi
ord321
__vbaVerifyVarObj
__vbaFpI2
__vbaVarCopy
__vbaFpI4
ord616
__vbaVarLateMemCallLd
__vbaLateMemCallLd
_CIatan
ord618
__vbaAryCopy
__vbaStrMove
__vbaCastObj
__vbaStrVarCopy
_allmul
__vbaLateIdSt
_CItan
ord546
__vbaAryUnlock
_CIexp
__vbaFreeObj
__vbaFreeStr
ord581
Name
.text
Size
240KB
Virtual Size
236KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
140KB
Virtual Size
136KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=14, version=7299,
count=12, id=9, version=8041,
count=1, id=13, version=8169,
mydata/data/MyData.db
- SHA256 676cf6825f17fead75c3fedfa8a4c3cecd074c184c59a2f91f7e89e3404866ba
- MD5 0f1f5c8b7c0db1920dcd8cc7a4c5a0e9
- SHA1 09210ff94217d0165a94d66f51a5da47b1032ae6
- SHA512 39761c21764da8d96715c09545b6d8f31f7242d1625d3ff76da3eb82dcef9aa33cdf6c12d7dc7430ae126ce6d902be2b3aedc0865d62265c3d27007ff6b4422a
- SSDEEP 384:qrVVqmhOWGd3saPYUGbEJbAmxlyXGsomseQ+cmoeengCx5EgVOtrNv0Co6DQxVTz:gqmhOHFsUkXGnlx5EgVy6yzQldnJ1
- MD5 SHA1 SHA512 SSDEEP
mydata/data/ico/0001.ICO
- SHA256 a0509bbd13c300f1cba146eb4fa8d234102204f9bd8d1dd593d0f90ff58f193b
- MD5 1f1872b3c07ba60b4c79dbdadc959f47
- SHA1 2ca8785430d1ddbc1f9ca506ec6fedb55d70a3cf
- SHA512 677c546323ad3aaefea38d64b1053983c8341a37cf4c5f21b2d3e228c0db65404032f398fd585c5d13a4a95563b25f0345eaae8df24433f817ae23445f322f3c
- MD5 SHA1 SHA512
mydata/data/ico/001.ICO
- SHA256 bbf38f574fa524aae6e752c5902ea31ea2b04203f0cc82dcd2f2faaf1e7870c2
- MD5 873840b89caa41d62875b1c165af9c18
- SHA1 690ccb3c39aaf66fbd14cebd0f57164f0e675a82
- SHA512 4fa3c62fc0d2565d38f8629ed7890a6e53bdaea0b45bb66a55b94a87a473823c31fb7888798c2cbd11694994ff58678d50c0e810da3577a8ea64df1e6ada6b85
- MD5 SHA1 SHA512
mydata/data/ico/01.ICO
- SHA256 70c9ceacff0cdf93dcc2ff402b8545612b941a6d16c17decdb936778faca2ea3
- MD5 5f56a79557247bbed074857393af51f2
- SHA1 73a11cbd068072ffd35d00f98bdeed0da36caa2b
- SHA512 fc77e03edfffe2301d63b8d87106a5d1240379be5010a0a9c72b1aa1dc690bd07a08597530a4fce8a294dfed9fb1921bab428a46a70cd07bb4754cb7bd80944d
- SSDEEP 96:GMg88888XujOUpACaH9z88888VCZnNiujOUpACaHyCSS22KKGK+yB:Gj88888+jOUpYV88888VCZVjOUpYSCSM
- MD5 SHA1 SHA512 SSDEEP
mydata/data/ico/02.ICO
- SHA256 e40d0f43f86df1926d0e4b5634268fe38cdcfb4d366c3135ffe3e263c6a2625c
- MD5 16a797a162315afdb05c0874ce78ed7c
- SHA1 66f0236b5622a7ce0fde84a566532fbb722d4399
- SHA512 9217e5e7c3289be0f19496d0300da41bb8d974193b48967628f1f2871451108c90722ba6be0f4cc15a16c36596e528143ea3acd51d61b37c2fa8d50e498182f1
- SSDEEP 96:GJ88888XujOUpACaHc88888VaDICujOUpACaHMPV:GJ88888+jOUpY888888VhjOUpYsPV
- MD5 SHA1 SHA512 SSDEEP
mydata/data/ico/03.ICO
- SHA256 0a8259daf8360099f6057ec68cd83a07f1b7523301bb9285c6baa1c8f2fbba86
- MD5 d567456cf8ced465c8d3bdb37466acba
- SHA1 55dd35be890533a24bef2508d037aa382e4a0eff
- SHA512 9031b6a3f6cb3ac779008c5c90ae3648ff42bc1667eda0ed9ce0980aa1b251a98b0ec0216742cb29b5ec5178dee0aa1f345aa5d2b78f8e782a956e24512fa086
- SSDEEP 96:GGLI88888XujOUpACaH/988888Vc4Kr5ujOUpACaH9vx:GR88888+jOUpY188888VxjOUpYdvx
- MD5 SHA1 SHA512 SSDEEP
mydata/data/ico/04.ICO
- SHA256 01bbcbd41d971e3aa0def0d16df276ac2586c41ab08f1ea01abcbebcca02b087
- MD5 910ca919671c494e690c18cd0f8ecd11
- SHA1 3335d51c60a73922fc32aac9d85a2642f357e55c
- SHA512 fc2e69cc01fdf34f6e5d336a44852df9e9719a23099445f2fd7af9227390479d2edd22122be05588ecf9ab9e5157480898481b21fdbc21c3d70ccbe7686a2fd6
- SSDEEP 96:GV88888XujOUpACaH088888V2i5iyVujOUpACaHu:GV88888+jOUpYU88888V2i5iljOUpYO
- MD5 SHA1 SHA512 SSDEEP
mydata/data/ico/05.ICO
- SHA256 1dc114cfde52aeacdff42500b74b78d3a1bdc0a3e38d245b7511ec21a8fa6629
- MD5 54d245493710d3ca1cdb1e128d9b416d
- SHA1 cc6d2763f1908ce691beeb93de5d775501168328
- SHA512 22c0b84fa48378c4d4854d527aca3af736c2dcd695f833bbdc613035532f1af03a844c1c08c45c71069df8184d1f2cbb4643d60e3142e64b87e2a47790a21116
- SSDEEP 96:GeAN88888XujOUpACaHa788888Vh1ujOUpACaHk:GeAN88888+jOUpYk88888VhQjOUpYE
- MD5 SHA1 SHA512 SSDEEP
mydata/data/ico/06.ICO
- SHA256 a736d1501c9bdf3b08a709b64c951cbaf984536bf01c7bf66962981d13316c95
- MD5 54b2bbb4b8022f21349ac6b22b671efe
- SHA1 792c79450251b5dd720f9ba316a375f680eb7584
- SHA512 a7312d4a6e930a33985504e912bb690684324151150f083da83a464ec5efa355ca1e8ec937c47b40ac411c5a29a92288f59667e7808443b1ff4c4d883f10b869
- SSDEEP 96:GI88888XujOUpACaHzZ+hlCJQt/88888VV+2ujOUpACaHkC:GI88888+jOUpYY88888VajOUpY3
- MD5 SHA1 SHA512 SSDEEP
mydata/data/ico/07.ICO
- SHA256 4434b8eb9c4c5cb81bfe0d69a4af6acf7234eb4cd4f657707f304334fa240018
- MD5 b4320d119ad29d2afcbb052ec677e6e3
- SHA1 9f6e16c32f145ca48d5bcbd38a9254a08102c185
- SHA512 295653cf26f62a696d6f10a43e0042afd20d6604c4f42c89a4553da7438de12d7a60b12eccd35b6fb68949d58fa5b645a4fd86fe5f9da171b3f768a34bcbbd06
- SSDEEP 96:GCk88888XujOUpACaHe88888V1QujOUpACaH2v:GCk88888+jOUpY+88888V/jOUpYU
- MD5 SHA1 SHA512 SSDEEP
mydata/data/ico/08.ICO
- SHA256 a882696fd97ceb830b16a0d8873010b635c1c3ab2d2474e45653f1b0f7a7c27b
- MD5 8d35914ba498b0b36fbb44b701b558dc
- SHA1 11908bf3e2de341a20457a99610f12af7b6fef2e
- SHA512 5bbf490d997f1ca60e9d557e96b9b64309da485600de2731dc92f726d007444eb84d9f7d0a56a3e6778b50dfed653715704fd144064ef5224e5980679efa5194
- SSDEEP 96:GH8v8r88888XujOUpACaHk88888V7RQujOUpACaHe:GHiq88888+jOUpYE88888V7LjOUpY+
- MD5 SHA1 SHA512 SSDEEP
mydata/data/ico/09.ICO
- SHA256 14f3f674d76b580852eb02da7674d3bbea5794947a0854c1d497cb6cb085a65e
- MD5 5567aae4ddb12969c0564b352f21f6ba
- SHA1 9e98a84853237dc92410df683ab5ee8f7a2daa9a
- SHA512 516ef445e44c02072bdc67346e8b5824fdf0c4dcc50386a8e0e821c9bf8bc3d3d99458f2701ccb40a0d679168b13f8841f706cc953e06b8e39531dd21746092f
- SSDEEP 96:G488888XujOUpACaHq88888V+8ujOUpACaHxT:G488888+jOUpYK88888VojOUpYd
- MD5 SHA1 SHA512 SSDEEP
mydata/data/ico/135.ICO
- SHA256 ed2573bbae8f786cba079ab935126fa730b1dda5a011b486fb9c24e661dc6348
- MD5 c7a9904656a54f61bd5194a8255b55b9
- SHA1 0fd9808d4b42f8ae8d0fc0c177f5f62e5e634745
- SHA512 88e94abe03d57259ea16dccf01708fffc7ce3d482b7c6448fbac9c76522a245b480d86ee56da1c0b8a395c32336cc47fdba9c63d892894462caf64e5eb11e3a2
- MD5 SHA1 SHA512
mydata/data/ico/19.ICO
- SHA256 9f83dd97329cd59d505e1326ed4645c167df40996f1c90acea1090050d82e36e
- MD5 a3085e0907fb49d45357bffa85107342
- SHA1 bfca93fb030011cd2815e4ff9311246b29d61022
- SHA512 c4fb54198e708a36bcef71cbd33156ed2f0f28c1badfe7d7c39f2a09ed0edf2dc247a1db60771310e0fdc845f4a1f40149e3e7ce4708ffca7a464d12d103d1d1
- MD5 SHA1 SHA512
mydata/data/ico/221.ICO
- SHA256 005b17d5aca1a0b0f7d6a0a250b35482ce49727d4ec26008da125fe549d8efbe
- MD5 9bee323108b82589877f42fadd6eb997
- SHA1 38c52dc7e3c0ae87c603257cc33ac628bc3ce56a
- SHA512 40695062308a71e7a231f1ac1b42bcd0988f77ddb23a419b66fa3c6835b02c0a3295b4d76b1542b33ffbbe216b338b32ff062d2a2784bd9feb675b1d0fd8c294
- MD5 SHA1 SHA512
mydata/data/ico/227.ICO
- SHA256 70d190f850a736e2d2828a1fc4d243bf99aeff070039e468a669c0191371f691
- MD5 9d7f78aa79676bc6659b221d869f667c
- SHA1 3ba1198e86041cd464efad2707d9583766e0ff2d
- SHA512 ae26d821d8354ff5a30e989c413a5dd062278262ee0ab89bed5ed22e0c88a0f4f4c56bf852145ac419312428ac83f5e26112b387c83e3bf5ca111e60a38a76e3
- MD5 SHA1 SHA512
mydata/data/ico/241.ICO
- SHA256 b16ceef25d198aa2f7f4a1a501b49eb1f66df209710d56f04a15120620e0b281
- MD5 498d11cf70a0ed35ae932c6c14f5649e
- SHA1 7585f70f73b74059c6eda025fb48fe058ac46d76
- SHA512 7f48712902b31da3b442c0be215938666618c1ee1b28706db213016c208802392b2accb23bc2ac87bb89ece68ae56bf3fbf992623f54a4e78aee4207f230e6f5
- MD5 SHA1 SHA512
mydata/data/ico/44.ICO
- SHA256 4a7b67eb99b5ca070e5cb0e95f62fe53a2945a132970e535b4c647c4e8dc9140
- MD5 42fa2ccf1a18b0091085835b35632830
- SHA1 a842bdf0dd62775fbc7d6eaa8398c2f76873723e
- SHA512 b44ddaf9c7d2ffce5c6c3045e4bf447c9dabe33da344221dcd42c724bae9e111afdf3bf2e9683bf2a2d4c2bf621370a716e0ec1de8a9bb0756750c148fc81600
- MD5 SHA1 SHA512
mydata/data/ico/6.ICO
- SHA256 4767c2efbddde8150d7dee6ceebefd916b052f6b73bee1a44e91a4c00101192e
- MD5 14ab725f99fc37a1ed13967334395700
- SHA1 8efc09f8b46b1ab832fb6d931235510885caa80e
- SHA512 d85902923d07213345e2dac108b52e2173b6e245d45e65aa34f993fdb46cd69a7efe391d25fb4939b195055235f65e44534c0f461531a7470812d1ebc88cca76
- MD5 SHA1 SHA512
mydata/data/ico/62.ICO
- SHA256 ca90a6f6c446a9a63ddf7edac1000a982c2eb4fd520acaaae67931d649fc0614
- MD5 b014d9c4721092357d2edb84b871d816
- SHA1 f7eb9732c72ba1d494246dad0745281c8da2e562
- SHA512 1c5ba93f89e9f905ccf0bf319577667d1a8b27bb7f0197d4bc1eebc32b72a367fb51e2e04398222c2d92b568ef92b607749ca47e431675a3a01360c3c519669b
- MD5 SHA1 SHA512
mydata/data/ico/7.ICO
- SHA256 c950fbd837c117833e64cc2cdfe5213a6137af0f6e07073cbb8557fd380bd2d4
- MD5 cd8331256b0b623bd0383de54c22e085
- SHA1 17bd0101ab0cfd0e42240cb684c6897aa08c5cdf
- SHA512 1328d078d21a8f5886f0a93deb2101d53a0bb97035e255ec925f23615d3cb88a4bf839249f7c38c41d1d68e48c022a0de4ffe221a3a45f590933a060d9e2e28f
- MD5 SHA1 SHA512
mydata/data/ico/BLUEBERRY.ICO
- SHA256 25f08ea5413684391944b9e90a714120880766523a60aacdcf24e872990b7c07
- MD5 0f696907e6c02807a8bf40de95a77094
- SHA1 8bcd039e7695b1a5b93eaf35947a1e896c7df8e0
- SHA512 08421a50bb35b0b23049f2445bf82d1d2f26250c3df078944d2867c1c1c0a1110a19b0ced597185cfa50058dade8d43aa99258db12566a496805cdfbdf2a8fb0
- SSDEEP 96:GY8wqujOUpACaHsB9Ah1nfujOUpACaHpxTGpP1:GYf7jOUpYiATmjOUpYJxGl1
- MD5 SHA1 SHA512 SSDEEP
mydata/data/ico/Books.ico
- SHA256 1191b87998002f1a8acb4658e410b6881c99ab40d66e34f90b2b1f1073cf5dbc
- MD5 5d3f2f153ec902a029105cae67509cd1
- SHA1 36dfd679c0f7717bab5cb10048bb45713fe16b58
- SHA512 0d5ce804f0e5af8abf68ee3e9c63c9ae45311bc8643b6b00806c61d0d776d1c902cfb44c30f6fb4c2c8a27884b352d9305d7a2c00555c863246160b9e7351456
- MD5 SHA1 SHA512
mydata/data/ico/COPAQUA BUTTON.ICO
- SHA256 eab09daabe772a83f4638d224397b2bac8396e374d467a152ad63d5e6b3db9f4
- MD5 63728d496e4a4a6da5b7e30a5af31f96
- SHA1 b9fd9ba5a80076354ccd810f4d59fca76cd87fc7
- SHA512 2c1eb03b883b84ad7eab3427b15276688e08477003d078303e3efa9d023e7c108ceb1f4da24cd38429dc50a268c44d652b874569baf84fc52d3efb2b7007623b
- SSDEEP 48:GMp7ujq2Epu8metqPrIXHimU7yxvVK666BnWwujq2Epu8metqPrIXHimU7yxvVKI:GMp7ujOUpACaHBnWwujOUpACaHB/
- MD5 SHA1 SHA512 SSDEEP
mydata/data/ico/FLD301.ICO
- SHA256 ceee4c65095ed09b45ec81bc02f6b19d7abcc52d654fc8c27dcd343f683b6ac1
- MD5 f5d63d8d4c35b700dcc33c7003bbbeeb
- SHA1 d7a92d02d3d9114d6f25ac82601d96e285726c88
- SHA512 0a5db06e38b2e802bafc69eb0495e40a8c9c7c8f3295f6c91b2fd33465c243f4b659dc43135a16b0c9ab843c61e4b1cece467b484dac1d79c0e21417b4fc2f6c
- MD5 SHA1 SHA512
mydata/data/ico/FLD302.ICO
- SHA256 24b451827b4591cb9f3d4bf2c5b5049c279bb6e666b1d3c0257d8aa9a54f9977
- MD5 4e3707254213e983420053e50668f0ce
- SHA1 3d3f1d0a74b9f01e395956428da322027883b6ba
- SHA512 001d255c4719f6c71d53523c8f1541927ebc57ed4963727b4f3a11730171a4f3ca451f617278fbb3eb785bb164745b42ab5234883e81fee8815a3154c5109421
- MD5 SHA1 SHA512
mydata/data/ico/FLD303.ICO
- SHA256 950a180b5a7351c061bd1f29ddbb1d5a77400a57c66e32d63afe59ff0b4962cd
- MD5 8f70c01b465ed76fa0d9ddb749f86cfb
- SHA1 7b8a6291a28892c67967ef79784ff791f6fd319e
- SHA512 36e913cdc5d8b13ad52cf707d6a056574213657097f573e512b9baeee4d331d1f5792899665781777b1952db8d98c4703cf70143bc91e6b04a5a332ee2577b46
- MD5 SHA1 SHA512
mydata/data/ico/FLD304.ICO
- SHA256 abb216de85a15f018a2bc3a0d348f9a9ed9ff0cbfbc7f987224e333d6033d4b5
- MD5 de0c71e708556de6540142c8fd9def82
- SHA1 eb45ac49ea821eb5b0195d29fad762fc226e25bc
- SHA512 bc0b046727c6526f03fc8a3fff309e0e7294f9ccd08db3d50e01e252c47f67e9db3af7685c82a600218dcfdeeb713d8cd5ff2a707ae20609537ab8c6999a17f6
- MD5 SHA1 SHA512
mydata/data/ico/FLD305.ICO
- SHA256 d839b1bec1b374a7378278cea58ddf3b2b7c4e4cff632821ea4d5c01083d3e42
- MD5 f14f335f0d6526ead3655b60ae36c848
- SHA1 a2335f20fc870c67350b6c010e20bcab46143496
- SHA512 03c53057ab19d5ce08024c061bb4a0189de9b722b74aef20d4748459dc002e472b026a75999727160579ba34ba4ba639ad62b3aef1cf3e7b91334222eae56f7c
- MD5 SHA1 SHA512
mydata/data/ico/FLD306.ICO
- SHA256 8bd2ea3dcc08a9ef437612c2862af5dd347bdbfab3f761467ee04b7e96892dbb
- MD5 e02d8ede8a08e3001be6af20f4eeca74
- SHA1 c36b44fb18234f0132c60363ba1801a24964d6db
- SHA512 0d6d66a3c600729e3cbabe29b1107d2726b7b478dee0dd689e9f078b4756c60454f376197d45a1ff5291cf43940c36d592b01e8184bf0b0b5f2a741b9c57aeff
- MD5 SHA1 SHA512
mydata/data/ico/FLD307.ICO
- SHA256 235f86188b562e507183aa062fc715f0e8c667c9702da36abaf9d6728c009e02
- MD5 0f8795e21f8de3f3c590080fe8a55dd2
- SHA1 6bce3ae5b2491cd43aef5c937257b3b3de95d5a6
- SHA512 7244e38a43f1962a03a2b3c68360f58c8aa173aed192c0d971ac8402c46ae9478b0fe9143f59b60c01dc61019806e3e66ec89312648f35aad881f19b2a1041cb
- MD5 SHA1 SHA512
mydata/data/ico/FLD308.ICO
- SHA256 bd5a304e2819d01b52a5ff47d364dd3f421a525c0bdadd4bfd80d53c9034dde4
- MD5 f74317b55f860f1ab351217f994c0dc6
- SHA1 4eb6a420d10e988133253d0e00f59268a0967662
- SHA512 c0173102e86cc0f1f0d93d95108835ea24f6ea2b0240cb9633ff0d94bc0456f8c9e7a25bd218d1c999a6b576cfb0f8c6bc2f6aa4109e4ed5aaa521c62e42bc08
- MD5 SHA1 SHA512
mydata/data/ico/FLD309.ICO
- SHA256 cb4094c945cae02125d1c02126ab9098b06df4be2f16c9076119864b1b86d6b5
- MD5 63fdfcbb21a91084a6bea8fd0668d7c5
- SHA1 f363c61831bff74aa41453695ee49e7c8d5842d7
- SHA512 53433a445f0b38d2b4e2aaac7f30e49eb8c9c5967b7daf7d9ac0749ef0ff21a2f0c69d135511db32b010c4ecfa86eb7c6b53606a0683ff532c9cd2fa05fe8db3
- MD5 SHA1 SHA512
mydata/data/ico/FLD310.ICO
- SHA256 603bbef9e936551d93169207462899b4017ff8c150269c4115a7fdeb1bc012dd
- MD5 235153eec77b2c626385caaabb59face
- SHA1 fa647d205d35b0667cf8db8c9fcbe4ce97426aff
- SHA512 33113d6d86948c34712b42406af036d6c5f7ae5b6f7f078c18f18deab9e6a4bd69dfb914e61985689ba1eff5f351c3ef4e2eed539e94152e4d5056ace2774818
- MD5 SHA1 SHA512
mydata/data/ico/FLD311.ICO
- SHA256 12852c1db9f2bb6d4a34e2c28dd251d50ba07f7eee33ed40420ea2716d93d347
- MD5 cde8743ced0969b48ef93d621088bae0
- SHA1 3484c9fe77ab68ecc0d715fd91f0d1c0e2f5559e
- SHA512 0d0ee7bc7fda4f74727e2817fd208b59d71a396bfc827d6e3d389cdeddd0c91ea1fb2ffe3c6620e07de7281a9302c37440ecd4c09545ec8a981ad0f46ec6dfda
- MD5 SHA1 SHA512
mydata/data/ico/FLD312.ICO
- SHA256 5a8b917f63eebfce8c88bf9ef4d4a541f77a297ef453ba1af926aff6e686a212
- MD5 90abd769cd30a1909dee7d7c1693cc30
- SHA1 df12608b24705fe04ba0b298a59cffe63241b0c0
- SHA512 439ff7a6a0addc5d6f526a4256be499ef074c56fbb8ee60b8e7321f0d16f3f9d1cb5793828dc79076f480e43c3e361cd74a50757b8e8a370765f0a008ec103cc
- MD5 SHA1 SHA512
mydata/data/ico/FLD313.ICO
- SHA256 11996eb6401d117a520d46c9f50ee04a9e75c89bbf515d7ab92c2410e98369bb
- MD5 00e5b822bf7eae4a81bd2dfabd3ed7da
- SHA1 b255b9800aad55a916e47571f83163eea6ff62f2
- SHA512 5c25de53a715bd47eb75f7e1103a1b956754f2274d0b239dc6443a0af023ee7d80fca0ed0bbd3858f0cd0dba0305e7e2273c5724df63842b65e012e3592d07ef
- MD5 SHA1 SHA512
mydata/data/ico/FLD314.ICO
- SHA256 c3e64bf515e83b48f24c113c682823371939cf1825a0b36d3363d7327abc550f
- MD5 7197e1372a0d65d7d4f6836f4010c5c5
- SHA1 5eb8ee9cf438308419932db59f771b976e0dbd73
- SHA512 df32428c0ca3c8c495e3f7f0558539eb280938de388ed5fb586ddf74d5156a3b9980da29bac10e4153d194c28a7f65ea17bf568cff04b39d95260a0e31821337
- MD5 SHA1 SHA512
mydata/data/ico/FLD315.ICO
- SHA256 fec7541736de5960b7d0321f21660ccc4a751f9c3cd3e2bc86162a9406a63651
- MD5 b0b4ababd52a59001162c1fa0e2c8128
- SHA1 15c12b76ee609525d5ed648407bc6b0895aa429a
- SHA512 777adce04a704da3a907f71b517f1d8bfe0c3c05b1a25322360a735ab1e1a265e58855dbc31d7ab546ac262030ddc75c9ae3be6e1655a856ac4b64a07a041615
- MD5 SHA1 SHA512
mydata/data/ico/FLD316.ICO
- SHA256 591ebda4f755b08d5ca6067cfbab84e5e8679f3e17e11fbf96820862b521b83a
- MD5 40e71246f8da2237dec55e58928b6d23
- SHA1 a06929e8a99f3a773e5505fabc0f79ac61b8fcee
- SHA512 fb1da49995da2facfb47826a33a957fc76f94ee3fd5b588166aa2509763398bb68789b8ced0696cd97fe8e06fd46688c9dad486393e8f9afef12f7c32a3157da
- MD5 SHA1 SHA512
mydata/data/ico/FLD317.ICO
- SHA256 fee0d306b6912953b45a08b43f6cd42ccb1c12562ee6eb5d08a8542325a0e326
- MD5 bc620e89657bb6837980ac83055ecc6a
- SHA1 1a5b6567357142dc9e7faafd0c31a2a6a6586486
- SHA512 21a3147ad0793c3699f21448f26f5ada5f13569e0ce2beee6ba89e40687ce0e509548af81d1cfc1977c9b4e9c6de8935d4486371ccc554716c427efff9c3dd99
- MD5 SHA1 SHA512
mydata/data/ico/FLD318.ICO
- SHA256 e3ecc2070f147a90da18e7b310f4413525096a18136366d2f8c0e4b624ca8873
- MD5 e9e977146960d840b48af77d6b7a056f
- SHA1 85ee92a2e7a6f959317516d3dbed5e380b9df4b6
- SHA512 f3f4322826004677010718e7397846b292c91e49c5d0e492f2471363bcf772cbf2c256dce9b7b1bf941b36595185cd8511fcc6f93fae77c90925bd3d70451a26
- MD5 SHA1 SHA512
mydata/data/ico/GRAPE.ICO
- SHA256 145c6ae91a92050da33227278721f1e1f7d9924a514f2df8936ebbd5d1919ab9
- MD5 e10bfbfc058e25bd8cddae35fbd94d62
- SHA1 157da0f84a526fdd19381c6f09520ebbce671bfa
- SHA512 7c0479d671eceb641da532301e9849d0207536c8837d61d0ce7eafe9ede38b356a91e44160f21366d38246df49dc25d8513dfd4fa4731aa060f0fd25ed496dfb
- SSDEEP 96:GijN8wqujOUpACaHXdAjclwujOUpACaHL9/brAg7L:GiJf7jOUpY3dA4lVjOUpYr9zX7L
- MD5 SHA1 SHA512 SSDEEP
mydata/data/ico/GRAPHITE.ICO
- SHA256 cab4ef90d93a466388f37e6f439426ac00b65d4eb4c1f034cce084d5b673aaac
- MD5 fce1eb5d6e9dacc2aafe22d015f0f080
- SHA1 6164b4577b8f3f5ceef09538443747f0a245aaac
- SHA512 1ac30f144c9d50a25cefe7f716831ddd12a4b8f6198060342d8056448879a04b3cd8180086590d5f6dd63e89279423d74c2fd9e30f7e3a2a10335077f844e557
- SSDEEP 96:GtmN8wqujOUpACaHMZNPAsujOUpACaH9YqUKim:Gmf7jOUpYsZ9ARjOUpYdpNim
- MD5 SHA1 SHA512 SSDEEP
mydata/data/ico/HARD DISK.ICO
- SHA256 4bb3a86874b048e53683e5f847092e1ca3da052a3474354d4f2373d9d94c652e
- MD5 854cdc4c2d49d775dfb841d47ba73323
- SHA1 f7457951fca704bf336aaab486cae5dbddba0f0a
- SHA512 c7604fa3c95eb86e8f41bd8435263e2169296023597b4b659f114e705fd9d432ca09a80447c14e96652a3e1ec8e125fcda083610ea7390c927b733e89b7ffc54
- SSDEEP 96:GdtziujOUpACaH9U6jzYnujOUpACaHDHmVvv:GdZzjOUpYm4YujOUpYjSv
- MD5 SHA1 SHA512 SSDEEP
mydata/data/ico/Home.ico
- SHA256 0ffe4a7c82a8766fa9bafe51aa5949796765cbd393bc091165d35ca7c2069bc2
- MD5 bb46a24da23cb38941f4299a335d1b26
- SHA1 781e60b588e9582a4424043db3ea662442d7bd42
- SHA512 de69371e96208d68798387abe68a2f506c777c08e6c679dbb9273fdcf5dbcd34bab8e2f7620f1eff9c3e91a0167168746e1505b68f20ab1e5af49e62ce8416d2
- MD5 SHA1 SHA512
mydata/data/ico/ITOOLS.ICO
- SHA256 bfd7c7e478cd0a29623d6d960aadeea1983b636d1992444b0333acef1add6bf1
- MD5 94aa531c6cf7c11ddf94c0fdae7fd17a
- SHA1 9de090215638ca7c3d7e7cd01e95be4e8575e4fa
- SHA512 00d487175a6e70c93ba5b3ce3636d3c8e9a8604d0b5235da9eefe9d0f57b6f8021abb9336c5adfc324016bf7d50580a8da2ebb24d6edc26b346c8b762de66ba6
- SSDEEP 96:GyujOUpACaHwI0Ji7bsjjujOUpACaHxidpQ2UOGRXM0rVZ:GjjOUpYQI0Ji7bsjKjOUpYRidpQ2UOGF
- MD5 SHA1 SHA512 SSDEEP
mydata/data/ico/KATE'S REVERSE UNDER-COPAQU.ICO
- SHA256 4ed56aeb8f6b47493bdd6921bd4c3afa610a2f19d0152f3ea6db6c0d37e3bbc8
- MD5 d1da306d5a4209f255685683553c15aa
- SHA1 bf8249fa0355c870465d0a665ae2062eb8bb42f5
- SHA512 9a1dccb7011b7f460e184d50d56f4acef4504f418d95fab7ce5d0f02350d44b96edd28256c8d6732c8dbc61a21048dbf522ccffec69785842135f5d6ad0de7a3
- SSDEEP 96:GqqujOUpACaHT8UAvRYIujOUpACaHAa/cRu:Gq7jOUpY4UAJyjOUpYga/cRu
- MD5 SHA1 SHA512 SSDEEP
mydata/data/ico/LIME.ICO
- SHA256 be7e047adb87a8ecdacf74610de1d85a184b2af28288e1b5bac92a44be205063
- MD5 bc51fd29ca96dd4faa5552c74c52f5ec
- SHA1 a19017b62f6f067ae8b443d3aa8aa14fdc73911d
- SHA512 6efbdf6c172e42ed424911d8574d89241bff0d70cca90dceb308831e0bbbad08e981e9f0cff4c0b62c53b40521189862df384e8023afdd29e4e0da4c28639063
- SSDEEP 96:G5LYO8wqujOUpACaHtWrXgAMjqjujOUpACaHplCXTNM9:G1YOf7jOUpYNWrXgA4qKjOUpYJlupM9
- MD5 SHA1 SHA512 SSDEEP
mydata/data/ico/MARMALADE.ICO
- SHA256 ace3305f65c5a95fd45cdf0d64d3a26896c51de874ebf22a88dfcb276b13f1fc
- MD5 17aa3d1d813abed6072825f77083491c
- SHA1 72362f78be6d8bee3bd852d77ef017b176bfe87f
- SHA512 60a818d53736e5b8195777bf2b89b9c76823d641424f7a51ee5f9ab0aa1964cb52bc547179ae1f11e224e8bb63aa590fdc29f03621f1f2e72602aa5d2a247d8a
- SSDEEP 96:G18wqujOUpACaHOJATIujOUpACaH4YoZ7lz5:G1f7jOUpYCAZjOUpYYYW5z5
- MD5 SHA1 SHA512 SSDEEP
mydata/data/ico/RECYCLEBIN.ico
- SHA256 ed11a06114025e954a6c4bdd0831b8518fe42e4b96e79186397d5b56cdd62f14
- MD5 044ea78abd5d6030f3740eeee550444a
- SHA1 19a18ea699ebb2577ebbef8a2a92d4cdcf441819
- SHA512 3d831bc9e35386b7f7a2ffd44f9c8e6ae2b918f6894d723d06d97bc81a932b6a255e95f11cc2403493ce6520f2f2e88ce9f878d344230df6657f096a637c7654
- MD5 SHA1 SHA512
mydata/data/ico/STRAWBERRY.ICO
- SHA256 00d2042cfccbe19000a9401813f1e722828fafeb1597dee898c6978c4db3da15
- MD5 744d0306ab5f382efae79568e1835582
- SHA1 7831235ced6162495322f1e8d7e555a23855bc20
- SHA512 a7b8e24b8efcab62ca97fad92a22082184972e130a4b237c58fb90fa149c45efef44cea4196978e08323f65d00636a7d2ef1b73e123cbb951380c0b21eed1306
- SSDEEP 96:Gvj08wqujOUpACaH1TAGgtftujOUpACaHsnvK3Fs:Gvj0f7jOUpYVTAGSIjOUpYMvqa
- MD5 SHA1 SHA512 SSDEEP
mydata/data/ico/book.ico
- SHA256 1191b87998002f1a8acb4658e410b6881c99ab40d66e34f90b2b1f1073cf5dbc
- MD5 5d3f2f153ec902a029105cae67509cd1
- SHA1 36dfd679c0f7717bab5cb10048bb45713fe16b58
- SHA512 0d5ce804f0e5af8abf68ee3e9c63c9ae45311bc8643b6b00806c61d0d776d1c902cfb44c30f6fb4c2c8a27884b352d9305d7a2c00555c863246160b9e7351456
- MD5 SHA1 SHA512
mydata/data/ico/mydata.ico
- SHA256 06ca452f3ea9a2c76c7fa088e4a78f858a8191efeccec76e1192534819718848
- MD5 e2955838becc9e29ea4c1d6715a199fa
- SHA1 f7ca5f4a5ad7d0a81d18195c264fef0af9ed697d
- SHA512 08898e53af85c3fc987d7e0dff0c84d743e081b80543aedb0822075cfa9f157ebba9016c3652fc9ca4faaf6d54d3a091b3988e249804cc11a6b1a832a2d34059
- MD5 SHA1 SHA512
mydata/data/ico/note.ico
- SHA256 06ca452f3ea9a2c76c7fa088e4a78f858a8191efeccec76e1192534819718848
- MD5 e2955838becc9e29ea4c1d6715a199fa
- SHA1 f7ca5f4a5ad7d0a81d18195c264fef0af9ed697d
- SHA512 08898e53af85c3fc987d7e0dff0c84d743e081b80543aedb0822075cfa9f157ebba9016c3652fc9ca4faaf6d54d3a091b3988e249804cc11a6b1a832a2d34059
- MD5 SHA1 SHA512
mydata/mydata.exe
- SHA256 a4950d415848a1cee42acc0a42884f03eb12148d65b929277a292924f0c5189e
- MD5 f7231cc1339cd0caa18602d0bcf4647c
- SHA1 bb017af43450d8724b1729821def06f227dcbcfd
- SHA512 d445cd153a0bb7f28d6a77837a5027a7c46736d84ce00d7c6d983a7c23ac6a62e6492376edb337f0c9eead56541d882a906ceff6828dbc6bfd1f64c8ae495e58
- SSDEEP 49152:SD55c4fE1+oPwroDVjT1akfydQoCa1H1ezXxJlJnmivJbbDx:SD55ckEEkxVjUkfCQol1VezhJlJnmivr
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
6581360
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
UPX0
Size
Virtual Size
4.4MB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
1.9MB
Virtual Size
1.9MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
91KB
Virtual Size
92KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=1, id=14, version=7299,
count=98, id=9, version=8041,
count=1, id=13, version=8169,
mydata/readme.txt
- SHA256 ec87a1e69577a492002094cca4e88bab589c299a54f666a693a3f9c5c805d611
- MD5 8b38bb6008b83a109360aa98541d026d
- SHA1 35fd7b219409d8395823d8015625340f7c48390e
- SHA512 b3e39a9a0551dbb2642bc4766fa926ff6a9b1a620ef2a8ce64efaa5fc558fec9564f62bc270393ea8872be484bb4bb85eb95e181b24e4fb9e228ee0b821e1015
- MD5 SHA1 SHA512
mydata/skins/1.skin
- SHA256 f89be14adbec71ee61d01102e152cced5fd6185d8f67fe53c9296ff443431c24
- MD5 2986f2874dc36847b36499f04def891e
- SHA1 7ecff4ea1112211087125e66e53397013c7b6267
- SHA512 219cce57f84d7e688a1c192bae16b63a1985b1cabce5d550f2da3ac983e548fc361a2e8ee893faf359c7f1fe500454206cc7699bfce155095ee07021dbdede11
- SSDEEP 768:PpxD2m81fAoNFuz1Grrtw0c5WyfymiHs/SBCzkglNPm5F5pmoKD6w:H2dHuzYrr5wfFa5eENpmoKDf
- MD5 SHA1 SHA512 SSDEEP
mydata/skins/2.skin
- SHA256 18d8d8c2fd853edb0d21568c6e4a2c481d446d77590aa853dad86942ba42b8f0
- MD5 f18f6093f1e76120b98eb043e4d9ceec
- SHA1 eb9d91301b171d4fb2458f00413dd8e0f77112e8
- SHA512 6a5660edd0d592c7bfa3d82fe659e01030b7c290832c4368286c255df9f7bdb86c3732a4340b8d0955cfaf49c03bc150cdf1a80c98cb0e11bb681e59770ca703
- SSDEEP 3072:2xB82IZBGSx4NsLEHJr4zotKbH6pTb7+XlS:K8INsLEH1xaH6VR
- MD5 SHA1 SHA512 SSDEEP
mydata/skins/3.skin
- SHA256 e69f3c9bd56642bf3992e8f1b89dff652bfbe39f60efb6f05a1164aeb6284238
- MD5 597b45448bdf4c7059bccf4e7921ce1b
- SHA1 6ad19ab834868b3dfcf4252ca513fdf163c43aee
- SHA512 f9d57e8a242f65cc579f4680f0b0f391aa35c59354ff952f2882beefdcf516f818d9b1f26703a1deb9f439ec08d41a28e6d5c0e6c2324f98db997ca154ad2bdf
- SSDEEP 1536:NUyjMCBjo0Z+x7IipqU8Q7Z8/Cq8bJrGmWIi:hxojB0UP10CBdrGmVi
- MD5 SHA1 SHA512 SSDEEP
mydata/skins/4.skin
- SHA256 9bb4b2fa2a6c92049618cb749945a1e0104e1516ae321211cf79b29d4f678be0
- MD5 65086e9793747d96298373bebec86632
- SHA1 29643907d55721d79c94ae21bb323d3b23da620e
- SHA512 174f74b40535db0aaa0866b57c44bb88c94683a2875b670b4238df78bc778bfed3beb4500f8eb96de6e8f0698fbd10eb203c5d3d7da4796c9c64e2d472077c92
- SSDEEP 768:nb8Nxwc4MRIB3Lhx6vi64R+a0MLXzkPNg/NeOV3LDE5NP0g/ex:g3WeIdLKK64R+PMLwND83LYzMaex
- MD5 SHA1 SHA512 SSDEEP
mydata/skins/5.skin
- SHA256 61ab19ea3c0e923965151d4a75fb84f5baed995f1185a74b27a2c36fb6a5a8a9
- MD5 9a3b50279784ab77ed73de5640b6029f
- SHA1 b167860963f20f728e248495922344020ae4f6d4
- SHA512 72c9f771061f630657c6179e4b9d970bb9e34e554bf40b115e9db7b14c9702c091c17ca6e199fcdf332a4514634d9ecaea551d2206637f2a3c39c6cf1ab26790
- SSDEEP 1536:SgnwVKTefQljDAlhYe+feQYLFk7UWHWEMW:SSwsTXpDAamdFk792W
- MD5 SHA1 SHA512 SSDEEP
mydata/tools/COMDLG32.OCX
- IMPHASH 988f29c1eb8054253091352741683c76
- SHA256 e32d8bbe8e6985726742b496520fa47827f3b428648fa1bc34ecffdd9bdac240
- MD5 ab412429f1e5fb9708a8cdea07479099
- SHA1 eb49323be4384a0e7e36053f186b305636e82887
- SHA512 f3348dbc3b05d14482250d7c399c00533598973f8e9168b4082ee5cbb81089dfaefcfda5a6a3c9f05b4445d655051b7a5170c57ee32d7a783dc35a75fee41aa9
- SSDEEP 3072:VCslb9HnH/GrQ/qCFyn7dWXSQeRDBIY/OR5JrNo2CocrJbNN6N2TRqEydc:VCsB9Hu9nweRD4JZoDxtRHj
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
30:04:be:c7:7e:04:0a:8e:9c:44:86:a8:95:a7:50:5e:ca:0f:22:ec
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jul 26, 2024
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US
Serial Number
0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2008
Subject
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Serial Number
c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Timespan
Jan 10, 1997 - Dec 31, 2020
Subject
CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:de:aa:11:d4:d8:40:9a:a8:be:e6
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Dec 10, 2000 - Nov 12, 2005
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:7d:a7:00:00:00:00:00:48
Issuer
CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 25, 2003 - Jan 25, 2005
Minor OS version
0
Major OS version
4
Entry point
5304
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
PDB paths
kernel32
HeapReAlloc
GetLastError
LockResource
GetWindowsDirectoryA
InterlockedDecrement
InterlockedIncrement
IsDBCSLeadByte
CompareStringA
CompareStringW
lstrcmpA
GetLocaleInfoA
GetVersion
GetModuleFileNameA
GetFileAttributesA
IsBadWritePtr
DisableThreadLibraryCalls
GlobalAlloc
lstrcmpiA
LoadLibraryA
GetProcAddress
lstrcatA
lstrlenA
lstrcpyA
WriteProfileStringA
GlobalLock
GlobalUnlock
LoadResource
FindResourceA
lstrcpynA
LeaveCriticalSection
DeleteCriticalSection
FreeLibrary
HeapFree
WideCharToMultiByte
lstrlenW
HeapAlloc
GetProfileStringA
EnterCriticalSection
GetProcessHeap
GetCurrentThreadId
MultiByteToWideChar
InitializeCriticalSection
GlobalFree
user32
SetWindowRgn
IntersectRect
EqualRect
PtInRect
IsDialogMessageA
IsChild
GetKeyState
CreateDialogIndirectParamA
MessageBeep
PostMessageA
ClientToScreen
wsprintfA
SendMessageTimeoutA
CharNextA
GetActiveWindow
GetWindowThreadProcessId
LoadCursorA
MessageBoxA
GetWindowLongA
GetWindowRect
CreateWindowExA
SetWindowLongA
ShowWindow
DialogBoxParamA
EnableWindow
GetDesktopWindow
GetWindow
IsWindowEnabled
OffsetRect
GetParent
GetDlgItem
SendMessageA
SetFocus
SetParent
SetDlgItemInt
EndPaint
SetActiveWindow
IsWindowVisible
WinHelpA
GetDlgItemInt
EndDialog
GetDlgItemTextA
DestroyWindow
SetDlgItemTextA
GetWindowTextA
GetNextDlgTabItem
SendDlgItemMessageA
RegisterClassA
GetDC
ReleaseDC
LoadIconA
DrawIcon
DestroyIcon
GetSystemMetrics
RegisterWindowMessageA
LoadStringA
DefWindowProcA
UnregisterClassA
GetClientRect
BeginPaint
RegisterClipboardFormatA
SetWindowPos
MoveWindow
ole32
CreateOleAdviseHolder
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
ReleaseStgMedium
advapi32
RegEnumKeyExA
RegQueryValueA
RegOpenKeyA
RegQueryValueExA
RegDeleteValueA
RegDeleteKeyA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
oleaut32
LoadRegTypeLi
OleCreatePropertyFrame
SetErrorInfo
UnRegisterTypeLi
LoadTypeLi
LoadTypeLibEx
OleLoadPicture
VariantChangeType
RegisterTypeLi
VariantInit
GetErrorInfo
VariantClear
SysStringLen
SysAllocStringLen
OleTranslateColor
SysFreeString
SysAllocString
CreateErrorInfo
comdlg32
CommDlgExtendedError
PrintDlgA
ChooseFontA
ChooseColorA
GetOpenFileNameA
GetSaveFileNameA
gdi32
GetDIBits
CreateCompatibleDC
CreateBitmap
GetSystemPaletteEntries
StretchDIBits
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
SetMapMode
LPtoDP
SetViewportExtEx
GetViewportExtEx
CreateRectRgnIndirect
GetWindowExtEx
CreateDCA
GetObjectA
EnumFontFamiliesA
DeleteDC
DeleteObject
GetDeviceCaps
SelectObject
DLLGetDocumentation
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Name
.text
Size
72KB
Virtual Size
69KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
52KB
Virtual Size
51KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
mydata/tools/CameraDll.DLL
- SHA256 26b863791baa89e89be037ce5d90a9dc4a14412e102ccc8e1d22838ca2f149dd
- MD5 b949cc7855916d31686c5d3428ae04cb
- SHA1 22abcbd317c32853d3d6008cddf23177a75f4855
- SHA512 255a5f818d4a973d37d12bd1624b52bfca3d559a41c0a2b83e7053d494897dd730b743a75cd54957e54c8c1be977d73f68968b9f44e27cfe413a31a58ae61e39
- SSDEEP 6144:bSkyR07ioFXP8eubYknnB7TwOIHbeb1oU:bSky8zF/8euUUnhT7IHCbe
- MD5 SHA1 SHA512 SSDEEP
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
533472
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
??0CxFile@@QAE@ABV0@@Z
??0CxFile@@QAE@XZ
??0CxIOFile@@QAE@ABV0@@Z
??0CxIOFile@@QAE@PAU_iobuf@@@Z
??0CxImage@@QAE@ABV0@_N11@Z
??0CxImage@@QAE@K@Z
??0CxImage@@QAE@KKKK@Z
??0CxImage@@QAE@PAEKK@Z
??0CxImage@@QAE@PAU_iobuf@@K@Z
??0CxImage@@QAE@PAVCxFile@@K@Z
??0CxImage@@QAE@PBDK@Z
??0CxImageGIF@@QAE@ABV0@@Z
??0CxImageGIF@@QAE@XZ
??0CxImageJPG@@QAE@ABV0@@Z
??0CxImageJPG@@QAE@XZ
??0CxImagePNG@@QAE@ABV0@@Z
??0CxImagePNG@@QAE@XZ
??0CxMemFile@@QAE@ABV0@@Z
??0CxMemFile@@QAE@PAEK@Z
??1CxFile@@UAE@XZ
??1CxIOFile@@UAE@XZ
??1CxImage@@UAE@XZ
??1CxImageGIF@@UAE@XZ
??1CxImageJPG@@UAE@XZ
??1CxImagePNG@@UAE@XZ
??1CxMemFile@@UAE@XZ
??4CxFile@@QAEAAV0@ABV0@@Z
??4CxIOFile@@QAEAAV0@ABV0@@Z
??4CxImage@@QAEAAV0@ABV0@@Z
??4CxImageGIF@@QAEAAV0@ABV0@@Z
??4CxImageJPG@@QAEAAV0@ABV0@@Z
??4CxImagePNG@@QAEAAV0@ABV0@@Z
??4CxMemFile@@QAEAAV0@ABV0@@Z
??_7CxFile@@6B@
??_7CxIOFile@@6B@
??_7CxImage@@6B@
??_7CxImageGIF@@6B@
??_7CxImageJPG@@6B@
??_7CxImagePNG@@6B@
??_7CxMemFile@@6B@
??_C@_0L@BGJF@Read?5Error?$AA@
??_C@_0M@GIHK@Flush?5Error?$AA@
??_C@_0M@KPPG@Write?5Error?$AA@
??_FCxIOFile@@QAEXXZ
??_FCxImage@@QAEXXZ
??_FCxMemFile@@QAEXXZ
??_OCxImage@@QAEXABV0@@Z
?Alloc@CxMemFile@@IAEXK@Z
?AlphaClear@CxImage@@QAEXXZ
?AlphaCopy@CxImage@@QAE_NAAV1@@Z
?AlphaCreate@CxImage@@QAEXXZ
?AlphaDelete@CxImage@@QAEXXZ
?AlphaFlip@CxImage@@QAE_NXZ
?AlphaGet@CxImage@@QAEEJJ@Z
?AlphaGetMax@CxImage@@QBEEXZ
?AlphaInvert@CxImage@@QAEXXZ
?AlphaIsValid@CxImage@@QAE_NXZ
?AlphaMirror@CxImage@@QAE_NXZ
?AlphaPaletteClear@CxImage@@QAEXXZ
?AlphaPaletteEnable@CxImage@@QAEX_N@Z
?AlphaPaletteIsEnabled@CxImage@@QAE_NXZ
?AlphaPaletteIsValid@CxImage@@QAE_NXZ
?AlphaPaletteSplit@CxImage@@QAE_NPAV1@@Z
?AlphaSet@CxImage@@QAEXE@Z
?AlphaSet@CxImage@@QAEXJJE@Z
?AlphaSet@CxImage@@QAE_NAAV1@@Z
?AlphaSetMax@CxImage@@QAEXE@Z
?AlphaSplit@CxImage@@QAE_NPAV1@@Z
?AlphaStrip@CxImage@@QAEXXZ
?Bitfield2RGB@CxImage@@IAEXPAEGGGE@Z
?BlendPalette@CxImage@@QAEXKJ@Z
?Clear@CxImage@@QAEXE@Z
?Close@CxIOFile@@UAE_NXZ
?Close@CxMemFile@@UAE_NXZ
?CompareColors@CxImage@@KAHPBX0@Z
?Copy@CxImage@@QAEXABV1@_N11@Z
?CopyInfo@CxImage@@IAEXABV1@@Z
?CopyToHandle@CxImage@@QAEPAXXZ
?Create@CxImage@@QAEPAXKKKK@Z
?CreateFromARGB@CxImage@@QAE_NKKPAE@Z
?CreateFromHANDLE@CxImage@@QAE_NPAX@Z
?CreateFromHBITMAP@CxImage@@QAEXPAUHBITMAP__@@@Z
?CreateFromHICON@CxImage@@QAEXPAUHICON__@@@Z
?Crop@CxImage@@QAE_NABUtagRECT@@PAV1@@Z
?Crop@CxImage@@QAE_NJJJJPAV1@@Z
?Decode@CxImage@@QAE_NPAEKK@Z
?Decode@CxImage@@QAE_NPAU_iobuf@@K@Z
?Decode@CxImage@@QAE_NPAVCxFile@@K@Z
?Decode@CxImageGIF@@QAE_NPAU_iobuf@@@Z
?Decode@CxImageGIF@@QAE_NPAVCxFile@@@Z
?Decode@CxImageJPG@@QAE_NPAU_iobuf@@@Z
?Decode@CxImageJPG@@QAE_NPAVCxFile@@@Z
?Decode@CxImagePNG@@QAE_NPAU_iobuf@@@Z
?Decode@CxImagePNG@@QAE_NPAVCxFile@@@Z
?DecodeExif@CxImageJPG@@QAE_NPAU_iobuf@@@Z
?DecodeExif@CxImageJPG@@QAE_NPAVCxFile@@@Z
?DecodeExtension@CxImageGIF@@IAE_NPAVCxFile@@@Z
?DecreaseBpp@CxImage@@QAE_NK_NPAUtagRGBQUAD@@@Z
?Destroy@CxImage@@QAEXXZ
?Dither@CxImage@@QAE_NJ@Z
?Draw2@CxImage@@QAEJPAUHDC__@@ABUtagRECT@@@Z
?Draw2@CxImage@@QAEJPAUHDC__@@JJJJ@Z
?Draw@CxImage@@QAEJPAUHDC__@@ABUtagRECT@@PAU3@@Z
?Draw@CxImage@@QAEJPAUHDC__@@JJJJPAUtagRECT@@@Z
?DrawTextA@CxImage@@QAEJPAUHDC__@@JJPBDUtagRGBQUAD@@1JJEE@Z
?Enable@CxImage@@QAEX_N@Z
?Encode@CxImage@@QAE_NAAPAEAAJK@Z
?Encode@CxImage@@QAE_NPAU_iobuf@@K@Z
?Encode@CxImage@@QAE_NPAU_iobuf@@PAPAV1@HK@Z
?Encode@CxImage@@QAE_NPAVCxFile@@K@Z
?Encode@CxImage@@QAE_NPAVCxFile@@PAPAV1@HK@Z
?Encode@CxImageGIF@@QAE_NPAU_iobuf@@@Z
?Encode@CxImageGIF@@QAE_NPAU_iobuf@@PAPAVCxImage@@H_N@Z
?Encode@CxImageGIF@@QAE_NPAVCxFile@@@Z
?Encode@CxImageGIF@@QAE_NPAVCxFile@@PAPAVCxImage@@H_N@Z
?Encode@CxImageJPG@@QAE_NPAU_iobuf@@@Z
?Encode@CxImageJPG@@QAE_NPAVCxFile@@@Z
?Encode@CxImagePNG@@QAE_NPAU_iobuf@@@Z
?Encode@CxImagePNG@@QAE_NPAVCxFile@@@Z
?EncodeBody@CxImageGIF@@IAEXPAVCxFile@@_N@Z
?EncodeComment@CxImageGIF@@IAEXPAVCxFile@@@Z
?EncodeExtension@CxImageGIF@@IAEXPAVCxFile@@@Z
?EncodeHeader@CxImageGIF@@IAEXPAVCxFile@@@Z
?EncodeLoopExtension@CxImageGIF@@IAEXPAVCxFile@@@Z
?EncodeRGB@CxImageGIF@@IAE_NPAVCxFile@@@Z
?EncodeSafeCheck@CxImage@@IAE_NPAVCxFile@@@Z
?Eof@CxIOFile@@UAE_NXZ
?Eof@CxMemFile@@UAE_NXZ
?Error@CxIOFile@@UAEJXZ
?Error@CxMemFile@@UAEJXZ
?Flip@CxImage@@QAE_NXZ
?Flush@CxIOFile@@UAE_NXZ
?Flush@CxMemFile@@UAE_NXZ
?Free@CxMemFile@@IAEXXZ
?GetBits@CxImage@@QAEPAEXZ
?GetBpp@CxImage@@QBEGXZ
?GetBuffer@CxMemFile@@QAEPAEXZ
?GetC@CxIOFile@@UAEJXZ
?GetC@CxMemFile@@UAEJXZ
?GetColorType@CxImage@@QAEEXZ
?GetComment@CxImageGIF@@QAEXPAD@Z
?GetDIB@CxImage@@QBEPAXXZ
?GetDisposalMethod@CxImageGIF@@QAEJXZ
?GetEffWidth@CxImage@@QBEKXZ
?GetEncodeOption@CxImage@@QBEKXZ
?GetEscape@CxImage@@QBEJXZ
?GetFlags@CxImage@@QBEKXZ
?GetFrame@CxImage@@QBEJXZ
?GetFrameDelay@CxImage@@QBEKXZ
?GetHeight@CxImage@@QBEKXZ
?GetJpegQuality@CxImage@@QBEEXZ
?GetLastError@CxImage@@QAEPADXZ
?GetLoops@CxImageGIF@@QAEJXZ
?GetNearestIndex@CxImage@@QAEEUtagRGBQUAD@@@Z
?GetNumColors@CxImage@@QBEKXZ
?GetNumFrames@CxImage@@QBEJXZ
?GetNumLayers@CxImage@@QBEJXZ
?GetOffset@CxImage@@QAEXPAJ0@Z
?GetPalette@CxImage@@QBEPAUtagRGBQUAD@@XZ
?GetPaletteColor@CxImage@@QAE?AUtagRGBQUAD@@E@Z
?GetPaletteColor@CxImage@@QAE_NEPAE00@Z
?GetPaletteSize@CxImage@@QAEKXZ
?GetParent@CxImage@@QBEPAV1@XZ
?GetPixelColor@CxImage@@QAE?AUtagRGBQUAD@@JJ_N@Z
?GetPixelGray@CxImage@@QAEEJJ@Z
?GetPixelIndex@CxImage@@QAEEJJ@Z
?GetProgress@CxImage@@QBEJXZ
?GetSize@CxImage@@QAEJXZ
?GetTransColor@CxImage@@QAE?AUtagRGBQUAD@@XZ
?GetTransIndex@CxImage@@QBEJXZ
?GetType@CxImage@@QBEKXZ
?GetVersion@CxImage@@QAEPBDXZ
?GetWidth@CxImage@@QBEKXZ
?GetXDPI@CxImage@@QBEJXZ
?GetYDPI@CxImage@@QBEJXZ
?Ghost@CxImage@@IAEXPAV1@@Z
?GifMix@CxImageGIF@@IAEXAAVCxImage@@AAUtag_image@1@@Z
?GifNextPixel@CxImageGIF@@IAEHXZ
?GrayScale@CxImage@@QAE_NXZ
?IncreaseBpp@CxImage@@QAE_NK@Z
?IsEnabled@CxImage@@QBE_NXZ
?IsGrayScale@CxImage@@QAE_NXZ
?IsIndexed@CxImage@@QAE_NXZ
?IsInside@CxImage@@QAE_NJJ@Z
?IsTransparent@CxImage@@QBE_NXZ
?IsValid@CxImage@@QBE_NXZ
?Load@CxImage@@QAE_NPBDK@Z
?Load@CxImage@@QAE_NPBGK@Z
?LoadResource@CxImage@@QAE_NPAUHRSRC__@@KPAUHINSTANCE__@@@Z
?MakeBitmap@CxImage@@QAEPAUHBITMAP__@@PAUHDC__@@@Z
?Mirror@CxImage@@QAE_NXZ
?Negative@CxImage@@QAE_NXZ
?Open@CxIOFile@@QAE_NPBD0@Z
?Open@CxMemFile@@QAE_NXZ
?PutC@CxFile@@UAE_NE@Z
?PutC@CxIOFile@@UAE_NE@Z
?PutC@CxMemFile@@UAE_NE@Z
?Putword@CxImageGIF@@IAEXHPAVCxFile@@@Z
?RGBQUADtoRGB@CxImage@@QAEKUtagRGBQUAD@@@Z
?RGBtoBGR@CxImage@@IAEXPAEH@Z
?RGBtoRGBQUAD@CxImage@@QAE?AUtagRGBQUAD@@K@Z
?Read@CxIOFile@@UAEIPAXII@Z
?Read@CxMemFile@@UAEIPAXII@Z
?Resample@CxImage@@QAE_NJJHPAV1@@Z
?Rotate180@CxImage@@QAE_NPAV1@@Z
?Rotate@CxImage@@QAE_NMPAV1@@Z
?RotateLeft@CxImage@@QAE_NPAV1@@Z
?RotateRight@CxImage@@QAE_NPAV1@@Z
?Save@CxImage@@QAE_NPBDK@Z
?Save@CxImage@@QAE_NPBGK@Z
?Seek@CxIOFile@@UAE_NJH@Z
?Seek@CxMemFile@@UAE_NJH@Z
?SelectionAddColor@CxImage@@QAE_NUtagRGBQUAD@@@Z
?SelectionAddEllipse@CxImage@@QAE_NUtagRECT@@@Z
?SelectionAddPolygon@CxImage@@QAE_NPAUtagPOINT@@J@Z
?SelectionAddRect@CxImage@@QAE_NUtagRECT@@@Z
?SelectionClear@CxImage@@QAE_NXZ
?SelectionCopy@CxImage@@QAE_NAAV1@@Z
?SelectionCreate@CxImage@@QAE_NXZ
?SelectionDelete@CxImage@@QAE_NXZ
?SelectionGetBox@CxImage@@QAEXAAUtagRECT@@@Z
?SelectionInvert@CxImage@@QAE_NXZ
?SelectionIsInside@CxImage@@QAE_NJJ@Z
?SelectionIsValid@CxImage@@QAE_NXZ
?SelectionToHRGN@CxImage@@QAE_NAAPAUHRGN__@@@Z
?SetComment@CxImageGIF@@QAEXPBD@Z
?SetDisposalMethod@CxImageGIF@@QAEXH@Z
?SetEncodeOption@CxImage@@QAEXK@Z
?SetEscape@CxImage@@QAEXJ@Z
?SetFlags@CxImage@@QAEXK_N@Z
?SetFrame@CxImage@@QAEXJ@Z
?SetFrameDelay@CxImage@@QAEXK@Z
?SetGrayPalette@CxImage@@QAEXXZ
?SetJpegQuality@CxImage@@QAEXE@Z
?SetLoops@CxImageGIF@@QAEXH@Z
?SetOffset@CxImage@@QAEXJJ@Z
?SetPalette@CxImage@@QAEXKPAE00@Z
?SetPalette@CxImage@@QAEXPAUrgb_color@@K@Z
?SetPalette@CxImage@@QAEXPAUtagRGBQUAD@@K@Z
?SetPaletteColor@CxImage@@QAEXEEEEE@Z
?SetPaletteColor@CxImage@@QAEXEK@Z
?SetPaletteColor@CxImage@@QAEXEUtagRGBQUAD@@@Z
?SetPixelColor@CxImage@@QAEXJJK@Z
?SetPixelColor@CxImage@@QAEXJJUtagRGBQUAD@@_N@Z
?SetPixelIndex@CxImage@@QAEXJJE@Z
?SetProgress@CxImage@@QAEXJ@Z
?SetStdPalette@CxImage@@QAEXXZ
?SetTransColor@CxImage@@QAEXUtagRGBQUAD@@@Z
?SetTransIndex@CxImage@@QAEXJ@Z
?SetXDPI@CxImage@@QAEXJ@Z
?SetYDPI@CxImage@@QAEXJ@Z
?Size@CxIOFile@@UAEJXZ
?Size@CxMemFile@@UAEJXZ
?Skew@CxImage@@QAE_NMMJJ@Z
?Startup@CxImage@@IAEXK@Z
?Stretch@CxImage@@QAEJPAUHDC__@@ABUtagRECT@@@Z
?Stretch@CxImage@@QAEJPAUHDC__@@JJJJ@Z
?SwapIndex@CxImage@@QAEXEE@Z
?Tell@CxIOFile@@UAEJXZ
?Tell@CxMemFile@@UAEJXZ
?Tile@CxImage@@QAEJPAUHDC__@@PAUtagRECT@@@Z
?Transfer@CxImage@@QAEXAAV1@@Z
?Write@CxIOFile@@UAEIPBXII@Z
?Write@CxMemFile@@UAEIPBXII@Z
?b3spline@CxImage@@IAEMM@Z
?char_out@CxImageGIF@@IAEXH@Z
?cl_hash@CxImageGIF@@IAEXJ@Z
?compressLZW@CxImageGIF@@IAEXHPAVCxFile@@@Z
?compressNONE@CxImageGIF@@IAEXHPAVCxFile@@@Z
?compressRLE@CxImageGIF@@IAEXHPAVCxFile@@@Z
?decoder@CxImageGIF@@IAEFPAVCxFile@@PAVCImageIterator@@FAAH@Z
?expand2to4bpp@CxImagePNG@@IAEXPAE@Z
?flush_char@CxImageGIF@@IAEXXZ
?get_byte@CxImageGIF@@IAEHPAVCxFile@@@Z
?get_next_code@CxImageGIF@@IAEFPAVCxFile@@@Z
?get_num_frames@CxImageGIF@@IAEHPAVCxFile@@PAUtag_TabCol@1@PAUtag_dscgif@1@@Z
?ima_png_error@CxImagePNG@@IAEXPAUpng_struct_def@@PAD@Z
?init_exp@CxImageGIF@@IAEFF@Z
?out_line@CxImageGIF@@IAEHPAVCImageIterator@@PAEH@Z
?output@CxImageGIF@@IAEXF@Z
?rle_block_flush@CxImageGIF@@IAEXPAUtag_RLE@1@@Z
?rle_block_out@CxImageGIF@@IAEXEPAUtag_RLE@1@@Z
?rle_clear@CxImageGIF@@IAEXPAUtag_RLE@1@@Z
?rle_compute_triangle_count@CxImageGIF@@IAEIII@Z
?rle_flush@CxImageGIF@@IAEXPAUtag_RLE@1@@Z
?rle_flush_clearorrep@CxImageGIF@@IAEXHPAUtag_RLE@1@@Z
?rle_flush_fromclear@CxImageGIF@@IAEXHPAUtag_RLE@1@@Z
?rle_flush_withtable@CxImageGIF@@IAEXHPAUtag_RLE@1@@Z
?rle_isqrt@CxImageGIF@@IAEII@Z
?rle_output@CxImageGIF@@IAEXHPAUtag_RLE@1@@Z
?rle_output_flush@CxImageGIF@@IAEXPAUtag_RLE@1@@Z
?rle_output_plain@CxImageGIF@@IAEXHPAUtag_RLE@1@@Z
?rle_reset_out_clear@CxImageGIF@@IAEXPAUtag_RLE@1@@Z
?rle_write_block@CxImageGIF@@IAEXPAUtag_RLE@1@@Z
?seek_next_image@CxImageGIF@@IAEJPAVCxFile@@J@Z
?user_error_fn@CxImagePNG@@KAXPAUpng_struct_def@@PBD@Z
?user_flush_data@CxImagePNG@@KAXPAUpng_struct_def@@@Z
?user_read_data@CxImagePNG@@KAXPAUpng_struct_def@@PAEI@Z
?user_write_data@CxImagePNG@@KAXPAUpng_struct_def@@PAEI@Z
CameraSubArea
CameraWindow
CameraWindowLikeSpy
Name
UPX0
Size
Virtual Size
308KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
209KB
Virtual Size
212KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
19KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=10, productName=Unmarked objects (old),
count=2, id=14, version=7299,
count=2, id=12, version=7291,
count=63, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=524, id=1, productName=Unmarked objects,
count=11, id=19, version=8034,
count=6, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=52, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
count=5, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,
mydata/tools/EXTRACTTEXT.DLL
- IMPHASH 987590405e209d84f9be774413d2b798
- SHA256 c8c98493f8db69cfa3f77cfaf585bddd8397013c20ac1542caa4006748141619
- MD5 f316b505360fc60fa9d4ba544e0d7ef9
- SHA1 9d07ffc4be10ce53520970b2081b56c8c8dd4f23
- SHA512 a5356ad48acf08771461f242111e8901e9f588b70967332d48b1fbb843ccc9ffcd813a582be579aa31c15839a15b5f1ff89220768dd9ef0dc07af092e0621fac
- SSDEEP 1536:KtTmiNEn6lddZmDsTRoB6svVloTUB0g55L1wAB66aOAFXt9xHx/DmP:KceEnmPTTnsv/1B0gRP6VHpt9xxbm
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
42581
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
query
LoadIFilter
kernel32
lstrcmpiW
GetModuleFileNameW
DisableThreadLibraryCalls
InterlockedIncrement
InterlockedDecrement
FreeLibrary
MultiByteToWideChar
SizeofResource
GetLastError
FindResourceW
LoadLibraryExW
GetModuleHandleW
lstrlenA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
lstrlenW
InterlockedCompareExchange
LoadResource
VirtualProtect
LCMapStringW
LCMapStringA
GetStringTypeW
GetLocaleInfoW
IsValidCodePage
GetOEMCP
GetCPInfo
LoadLibraryA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
HeapAlloc
HeapFree
RtlUnwind
HeapReAlloc
QueryPerformanceCounter
VirtualAlloc
GetProcAddress
GetModuleHandleA
GetSystemInfo
VirtualQuery
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentThreadId
GetCommandLineA
GetProcessHeap
VirtualFree
HeapDestroy
HeapCreate
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapSize
Sleep
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
GetStringTypeA
user32
LoadStringW
CharNextW
UnregisterClassA
advapi32
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegEnumKeyExW
ole32
ProgIDFromCLSID
StringFromGUID2
CoCreateInstance
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
oleaut32
CreateErrorInfo
SetErrorInfo
LoadRegTypeLi
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
SysFreeString
SysStringLen
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Name
.text
Size
84KB
Virtual Size
80KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
24KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
12KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=18, id=125, productName=VS2005 build 50727, version=50727,
count=87, id=109, productName=VS2005 build 50727, version=50727,
count=2, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=13, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=119, id=1, productName=Unmarked objects,
count=52, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
mydata/tools/MSCOMCTL.OCX
- IMPHASH ce21923007044b1701a0b2dc4ac9396b
- SHA256 fac6736251d3c61ecbd63be0420d1c75d5cd0442181d479013330155ca37d358
- MD5 d268668751ee22997d7ef1417034cb04
- SHA1 d8a87438ab0df47fe252b06162a986399cafffe1
- SHA512 75f40cc8c92e3fcdd381669f6aa0bf1e76ee6fec0c5cbf53ea0bbfbff199ac7229fc1405f737420badd24f438b49b8d2eed2bb0f3fad0bf8a974f54bd6964a34
- SSDEEP 24576:TcqSrNXsCxx927qRC33KjjnZRqPnFqRo7w3zgyZdt+:TCXjx/2G9cv77EnM
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
d3:33:87:9d:a3:7d:db:aa:b4:12:4a:ae:67:2b:01:a6:0b:07:8a:fd
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jul 26, 2024
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US
Serial Number
0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2008
Subject
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Serial Number
c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Timespan
Jan 10, 1997 - Dec 31, 2020
Subject
CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:0c:ab:11:d8:22:ef:7d:6c:79:7e
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 23, 2002 - Sep 25, 2011
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:87:58:00:03:00:00:00:5a
Issuer
CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jan 5, 2005 - Apr 5, 2006
Minor OS version
0
Major OS version
4
Entry point
88238
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
PDB paths
kernel32
CreateThread
LocalReAlloc
GetProfileIntA
RtlMoveMemory
LocalSize
FreeResource
GetCurrentProcessId
MulDiv
GetTickCount
MapViewOfFile
CreateFileMappingA
UnmapViewOfFile
GlobalReAlloc
IsBadReadPtr
Sleep
WaitForSingleObject
GlobalHandle
GetThreadLocale
LocalFree
LocalAlloc
GlobalAddAtomA
SetFilePointer
SetStdHandle
FlushFileBuffers
VirtualAlloc
WriteFile
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetOEMCP
GetACP
GetCPInfo
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
TlsGetValue
SetLastError
TlsFree
TlsAlloc
TlsSetValue
GetCurrentProcess
TerminateProcess
ExitProcess
RtlUnwind
GetCommandLineA
CompareStringW
GlobalSize
CreateFileA
GetFileSize
GlobalUnlock
GlobalLock
ReadFile
CloseHandle
IsDBCSLeadByte
GetModuleHandleA
FindResourceA
LoadResource
LockResource
GetLastError
GetFileAttributesA
GetVersion
DisableThreadLibraryCalls
GetProcAddress
GetLocaleInfoA
LoadLibraryA
GetWindowsDirectoryA
lstrcatA
GetModuleFileNameA
IsBadWritePtr
lstrcmpiA
GetLocalTime
GetTimeFormatA
GetDateFormatA
lstrcmpA
GlobalAlloc
GlobalFree
GetVersionExA
GetCurrentThreadId
MultiByteToWideChar
CompareStringA
lstrcpyA
InterlockedExchange
lstrlenA
GetSystemDefaultLCID
lstrcpynA
HeapAlloc
DeleteCriticalSection
FreeLibrary
HeapFree
WideCharToMultiByte
lstrlenW
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetProcessHeap
InterlockedIncrement
InterlockedDecrement
HeapReAlloc
user32
DrawFocusRect
AdjustWindowRect
DrawFrameControl
TrackPopupMenu
GetMessageA
AdjustWindowRectEx
CopyRect
GetKeyNameTextA
ShowCaret
SetCaretPos
GrayStringA
HideCaret
DestroyCaret
CreateCaret
SetWindowTextA
SetScrollInfo
DrawTextExA
InvertRect
SetRectEmpty
GetShellWindow
SetKeyboardState
GetKeyboardState
GetScrollInfo
GetKeyboardLayout
DestroyCursor
GetUpdateRgn
GetUpdateRect
GetWindowRgn
ValidateRect
CallMsgFilterA
LockWindowUpdate
IsZoomed
GetDesktopWindow
GetIconInfo
GetCursor
GetForegroundWindow
InvalidateRgn
EndDeferWindowPos
EnumChildWindows
GetDoubleClickTime
FindWindowA
GetMessageTime
GetWindowThreadProcessId
RemovePropA
SendNotifyMessageA
SetScrollPos
SetScrollRange
GetWindowTextLengthA
EnableScrollBar
ChildWindowFromPoint
EndDialog
GetWindow
GetPropA
GetCursorPos
WindowFromPoint
GetClassNameA
GetDlgCtrlID
IsWindow
SetPropA
SetTimer
KillTimer
SendDlgItemMessageA
IsWindowVisible
UnregisterClassA
CharNextA
SetActiveWindow
CheckRadioButton
SetFocus
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
CheckDlgButton
GetDlgItem
IsWindowEnabled
GetDCEx
DrawIconEx
CreateIconIndirect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetClipboardFormatNameA
SetCursorPos
RegisterClipboardFormatA
MessageBeep
RegisterWindowMessageA
PeekMessageA
PostMessageW
PeekMessageW
VkKeyScanA
SetParent
CharUpperA
GetDlgItemInt
SetCursor
CreateDialogIndirectParamA
GetNextDlgTabItem
IsDialogMessageA
ScrollWindowEx
GetDlgItemTextA
SetWindowRgn
IntersectRect
EqualRect
MoveWindow
BeginPaint
EndPaint
DeferWindowPos
BeginDeferWindowPos
CharNextExA
DrawIcon
DestroyIcon
MapWindowPoints
CreatePopupMenu
AppendMenuA
TrackPopupMenuEx
DestroyMenu
GetActiveWindow
MessageBoxA
WinHelpA
PtInRect
DefWindowProcA
GetWindowDC
SetRect
LoadCursorA
IsRectEmpty
ClientToScreen
GetWindowRect
MapVirtualKeyA
DestroyWindow
CreateWindowExA
GetSysColorBrush
GetAsyncKeyState
EnableWindow
PostMessageA
TranslateMessage
DispatchMessageA
wsprintfA
DialogBoxParamA
UpdateWindow
GetWindowLongA
SetWindowLongA
GetDC
ReleaseDC
GetParent
OffsetRect
UnionRect
GetFocus
IsChild
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
GetMessagePos
ScreenToClient
SetWindowPos
SetCapture
GetWindowTextA
WindowFromDC
GetClientRect
CallWindowProcA
DrawEdge
GetSysColor
FrameRect
InflateRect
FillRect
DrawTextA
GetKeyState
GetCapture
ReleaseCapture
GetClassInfoA
RegisterClassA
InvalidateRect
LoadIconA
GetSystemMetrics
CopyImage
SendMessageA
LoadStringA
RedrawWindow
ShowWindow
CreateAcceleratorTableA
ole32
ReleaseStgMedium
DoDragDrop
RegisterDragDrop
RevokeDragDrop
CreateStreamOnHGlobal
OleLoadFromStream
OleSaveToStream
CreateOleAdviseHolder
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
advapi32
RegDeleteKeyA
RegOpenKeyA
RegQueryValueA
RegQueryValueExA
RegEnumKeyExA
RegCreateKeyA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegDeleteValueA
oleaut32
SafeArrayRedim
SafeArrayPutElement
SafeArrayGetElement
SafeArrayCreate
SafeArrayDestroy
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
GetErrorInfo
OleCreateFontIndirect
OleCreatePropertyFrame
LoadTypeLibEx
UnRegisterTypeLi
RegisterTypeLi
CreateErrorInfo
SetErrorInfo
LoadRegTypeLi
LoadTypeLi
VariantChangeTypeEx
SysStringByteLen
SysAllocStringByteLen
OleLoadPicture
SysAllocStringLen
VariantCopy
OleTranslateColor
VariantChangeType
OleCreatePictureIndirect
VariantCopyInd
SysStringLen
SysFreeString
VariantInit
VariantClear
SysAllocString
SafeArrayCopy
comdlg32
GetOpenFileNameA
gdi32
Arc
GetTextExtentPointA
GetCharWidthA
OffsetWindowOrgEx
ExtTextOutW
GetTextExtentPointW
Polyline
GetTextAlign
SetTextAlign
OffsetRgn
GetTextColor
CombineRgn
GetTextMetricsA
MoveToEx
LineTo
Ellipse
DeleteObject
SelectObject
CreateSolidBrush
SetViewportOrgEx
SetWindowOrgEx
SetViewportExtEx
SetWindowExtEx
SetMapMode
GetDeviceCaps
CreateFontIndirectA
GetObjectA
SelectClipRgn
ExcludeClipRect
RectVisible
GetClipBox
IntersectClipRect
GetClipRgn
CreateRectRgnIndirect
RealizePalette
SelectPalette
PatBlt
CreateCompatibleBitmap
CreateBitmap
CreateCompatibleDC
GetTextExtentPoint32A
TextOutA
SetBkColor
SetTextColor
SetBkMode
Rectangle
CreatePen
GetStockObject
GetViewportExtEx
GetWindowExtEx
LPtoDP
DeleteDC
CreateDCA
CreateRectRgn
StretchBlt
CreateICA
CopyMetaFileA
CopyEnhMetaFileA
GetPaletteEntries
GetDIBits
CreateDIBitmap
GetBitmapBits
CreatePalette
GetNearestColor
CreatePatternBrush
CreateDIBSection
CreateHalftonePalette
BitBlt
SetDIBColorTable
GetDIBColorTable
GetPixel
StretchDIBits
SetBrushOrgEx
GetBkColor
ExtTextOutA
RestoreDC
SaveDC
CreateFontA
DLLGetDocumentation
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Name
.text
Size
690KB
Virtual Size
690KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
29KB
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
279KB
Virtual Size
279KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
38KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
mydata/tools/RICHTX32.OCX
- IMPHASH aaca01ab2cd35af160b8025e9dcfad9f
- SHA256 318cc48cbcfaba9592956e4298886823cc5f37626c770d6dadbcd224849680c5
- MD5 045a16822822426c305ea7280270a3d6
- SHA1 43075b6696bb2d2f298f263971d4d3e48aa4f561
- SHA512 5a042ff0a05421fb01e0a95a8b62f3ce81f90330daed78f09c7d5d2abcb822a2fe99d00494c3ddd96226287fae51367e264b48b2831a8c080916ce18c0a675fa
- SSDEEP 6144:hTr80hTueZXFOTSqP0xqRBTdtmFdCJErRj6/uE:NhzZVOTSqcxqRBKFdF6/uE
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
c6:be:da:cb:6f:7c:07:ce:80:06:10:c2:9a:0c:17:6f:0c:b4:42:44
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jul 26, 2024
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US
Serial Number
0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2008
Subject
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Serial Number
c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Timespan
Jan 10, 1997 - Dec 31, 2020
Subject
CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:de:aa:11:d4:d8:40:9a:a8:be:e6
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Dec 10, 2000 - Nov 12, 2005
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:7d:a7:00:00:00:00:00:48
Issuer
CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 25, 2003 - Jan 25, 2005
Minor OS version
0
Major OS version
4
Entry point
5136
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
PDB paths
shell32
DragAcceptFiles
DragQueryFileA
DragFinish
oledlg
ord1
kernel32
GlobalUnlock
GetVersionExA
GlobalSize
GlobalLock
FindResourceA
GlobalAlloc
GlobalFree
GetLocaleInfoA
LoadResource
LockResource
GetModuleFileNameA
GetWindowsDirectoryA
HeapReAlloc
GetFileAttributesA
lstrcatA
lstrcpynA
DisableThreadLibraryCalls
GetProcAddress
GetVersion
GetAtomNameA
FindAtomA
AddAtomA
IsBadWritePtr
DeleteAtom
InterlockedIncrement
FreeLibrary
LoadLibraryA
InterlockedDecrement
GetProcessHeap
DeleteCriticalSection
InitializeCriticalSection
EnterCriticalSection
WriteFile
GetLastError
ReadFile
LeaveCriticalSection
CreateFileA
lstrcmpA
lstrcpyA
HeapAlloc
lstrlenA
HeapFree
WideCharToMultiByte
lstrlenW
SetFilePointer
MultiByteToWideChar
IsDBCSLeadByte
CloseHandle
lstrcmpiA
user32
SetCursorPos
ScreenToClient
GetClipboardFormatNameA
PeekMessageW
PostMessageW
PeekMessageA
RegisterWindowMessageA
IsDlgButtonChecked
SetDlgItemInt
SetDlgItemTextA
CheckDlgButton
ReleaseCapture
DefWindowProcA
LoadCursorA
SetCursor
CreateDialogIndirectParamA
MapWindowPoints
FillRect
GetDlgItemTextA
GetClientRect
InvalidateRect
ValidateRect
SetRect
GetSysColor
InflateRect
GetClassInfoA
TrackPopupMenu
GetWindow
GetWindowTextA
CharNextA
MessageBoxA
SendDlgItemMessageA
GetDlgItem
PostMessageA
IsChild
TranslateMessage
DispatchMessageA
IsWindowEnabled
GetNextDlgTabItem
IsDialogMessageA
WinHelpA
BeginPaint
MoveWindow
SetFocus
IsWindowVisible
EndPaint
SetParent
ShowWindow
EnableMenuItem
DeleteMenu
EqualRect
SetWindowRgn
IntersectRect
GetWindowRect
OffsetRect
GetDlgItemInt
GetActiveWindow
SetWindowLongA
SetWindowPos
LoadMenuA
UnregisterClassA
DestroyWindow
DestroyMenu
GetSubMenu
RemoveMenu
GetParent
GetMenuItemCount
GetFocus
IsWindow
WindowFromDC
RegisterClassA
LoadStringA
RegisterClipboardFormatA
GetCapture
GetCursorPos
EnableWindow
EndDialog
wsprintfA
GetKeyState
MessageBeep
CallWindowProcA
GetDC
GetSystemMetrics
ReleaseDC
UpdateWindow
SendMessageA
DialogBoxParamA
GetWindowLongA
CreateWindowExA
ClientToScreen
PtInRect
ole32
DoDragDrop
RegisterDragDrop
CreateOleAdviseHolder
OleCreateFromFile
CLSIDFromProgID
OleCreate
OleSetContainedObject
StringFromCLSID
OleGetIconOfClass
CoGetMalloc
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
OleSaveToStream
OleLoadFromStream
RevokeDragDrop
CoTaskMemRealloc
ReleaseStgMedium
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
advapi32
RegEnumKeyExA
RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegQueryValueA
RegDeleteKeyA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
oleaut32
SafeArrayGetElement
SafeArrayDestroy
SafeArrayRedim
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayGetLBound
VariantCopyInd
VariantCopy
SafeArrayUnaccessData
SetErrorInfo
OleCreatePropertyFrame
CreateErrorInfo
UnRegisterTypeLi
LoadTypeLi
LoadTypeLibEx
SafeArrayCreate
SafeArrayPutElement
RegisterTypeLi
OleCreatePictureIndirect
LoadRegTypeLi
GetErrorInfo
OleCreateFontIndirect
SysAllocStringLen
OleLoadPicture
OleTranslateColor
SysStringLen
SysFreeString
VariantChangeType
VariantClear
SysAllocString
VariantInit
SafeArrayCopy
comdlg32
GetOpenFileNameA
CommDlgExtendedError
gdi32
GetNearestColor
CreateSolidBrush
DeleteObject
EnumFontFamiliesExA
CreatePalette
GetBitmapBits
StretchBlt
GetObjectA
SelectPalette
CreateDIBitmap
GetDIBits
GetPaletteEntries
RealizePalette
CreateBitmap
CopyEnhMetaFileA
GetStockObject
CreateDCA
LPtoDP
CopyMetaFileA
GetViewportExtEx
CreateRectRgnIndirect
GetWindowExtEx
GetClipBox
SetWindowExtEx
SetBkColor
SelectObject
CreateCompatibleBitmap
SetViewportExtEx
DeleteDC
EndDoc
PatBlt
StartPage
StartDocA
EndPage
SetWindowOrgEx
SetViewportOrgEx
DPtoLP
CreateCompatibleDC
GetMapMode
CreateICA
GetObjectType
SetMapMode
GetDeviceCaps
DLLGetDocumentation
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
VBFrameworkMapClassObject
Name
.text
Size
116KB
Virtual Size
114KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
68KB
Virtual Size
67KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
mydata/tools/fix.bat
- SHA256 dc4cbcd557483573766a88c8d00e13880bb62e39d62c359fa7f614cd58d11aec
- MD5 cb801f72554b93b8b08c49b576c1588f
- SHA1 db04a4fb06a144c62e728680504d0e0afe3a82cc
- SHA512 05331197a0f0ff8a75bc02dd7c36968474a313e1dee6e7af3a6855682da8f8f3fcaadb951d652fcf84821cfa8afbeb885a49cc8250466bf5b743f409fcdb14ed
- MD5 SHA1 SHA512
mydata/tools/m3.exe
- SHA256 e86ae62038bf6fad37af56e1f5ff3b1d45911fd849263ce8e88e04d5d72ee9d1
- MD5 2de567342eb00b7e96ed18f3e31d48a1
- SHA1 07872ce1c596df886baeb89c22d87f090401ff13
- SHA512 4947695745a93bb67c36c1dc46269da963f8d959ddf300ab2f57a095a5d27ee894066db3541d80086cc4a8dce148837865451f13755ad81911512265a60f0049
- SSDEEP 3072:tbPCFdQ7jYuCtrSd8igykdWYAyfV4vhsANjbgDm+9sELsbB+:pPC3wYuSrSupykd7t4BNngyYsos9
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
693184
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
UPX0
Size
Virtual Size
536KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
137KB
Virtual Size
140KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
3KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=1, id=14, version=7299,
count=22, id=9, version=8041,
count=1, id=13, version=8169,
mydata/tools/mydatazip.dll
- IMPHASH b56bd4c76c6cfa7ceedee7ea171b8ab0
- SHA256 94895ccfeb1e1d5fc08903c4120dbf10c4b5166f67fd77a8bd84abad25fecfc8
- MD5 4d71eec75dfae5fe8c29844e24f772f5
- SHA1 c2e728e27a749034abcc96d8d0073a709f43fccc
- SHA512 3fcbc50d90c194c5eb2b92d07b3fe56d6f8840201955ae68c5f0eab2d9454817a0b010c5a42c75ad2b949d176bf3d913bef3f96db0bfdec48106c61971b97acd
- SSDEEP 1536:jkMtMYLlWNN7iD0RHf6aq1GS3QuUTlbtwMj3KglNs5vuDnA68/CJQW58mXtn+32c:NMt73fUibGc3T4iYCJv7t+36r
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
62894
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
c:\Documents and Settings\user\桌面\lzma458\CPP\7zip\Compress\LZMA_Alone\Release\test.pdb
kernel32
GetVersionExA
CloseHandle
GetLastError
GetFileSize
SetFilePointer
ReadFile
WriteFile
SetEndOfFile
CreateFileA
MultiByteToWideChar
WideCharToMultiByte
GetStdHandle
VirtualAlloc
VirtualFree
GetSystemInfo
GlobalMemoryStatus
GetProcAddress
GetModuleHandleA
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetTickCount
GetProcessTimes
GetCurrentProcess
WaitForSingleObject
CreateEventA
SetEvent
ResetEvent
CreateSemaphoreA
ReleaseSemaphore
InitializeCriticalSection
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetCurrentThreadId
GetCommandLineA
HeapFree
HeapAlloc
GetProcessHeap
RaiseException
RtlUnwind
ExitThread
CreateThread
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
SetHandleCount
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
SetStdHandle
HeapReAlloc
LoadLibraryA
GetCPInfo
GetACP
GetOEMCP
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetLocaleInfoA
HeapSize
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
user32
CharUpperW
CharUpperA
mydatafun
Name
.text
Size
100KB
Virtual Size
97KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
20KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
12KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=19, id=125, productName=VS2005 build 50727, version=50727,
count=1, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=5, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=109, id=1, productName=Unmarked objects,
count=108, id=109, productName=VS2005 build 50727, version=50727,
count=57, id=110, productName=VS2005 build 50727, version=50727,
count=2, id=114, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
mydata/tools/myeditor.ocx
- SHA256 484b5c43ed301edd61a738089e500a48203858a42478a3a610ad0009c9899384
- MD5 bcf2dee897b7c803edcc047c57ed0f47
- SHA1 d7d59159cb0fc52ea081a063c6442e117db31a0d
- SHA512 f1d4bb36ed468fdd65afea692f43852f3aac00774c5fa114036458f2c5cee3362df785943ff852f652ec368d713b995bb5193852549634da1892d366a5b61c28
- SSDEEP 6144:AGrW6a9cyK5ZJp4Hh7NwOd61Co1n+1fg+V2NjsWA5ePkt7drYwyA4lb/Gz:8myK53p4HV6Yq0g/4hrY9
- MD5 SHA1 SHA512 SSDEEP
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1248096
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Name
UPX0
Size
Virtual Size
876KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
339KB
Virtual Size
340KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
17KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=2, id=12, version=7291,
count=45, id=19, version=8022,
count=172, productName=Unmarked objects (old),
count=26, id=14, version=7299,
count=186, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=11, version=8966,
count=675, id=1, productName=Unmarked objects,
count=19, id=19, version=8034,
count=134, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
count=1, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,
mydata/tools/skinh_vb6.dll
- SHA256 0089d7ec375ad3852fddb306ff14bd2c195ad667c5f1553a4e19258546c16671
- MD5 cdec482c5149f0cce5546ef506ea033b
- SHA1 4ed383e7c9b648d90a9b73b8e690774fd6a7c0c1
- SHA512 eee60bbd1070d33114685d279287b31b8e9d9fd88cdeed0e9eaa153383d4221b2796f32bf9ea33c2ee1d57534801c72f4c887ef927352344ab5b25e24e734846
- SSDEEP 3072:mBDy16etMn7/tj8KmL3JO2nP7hu67ZqIHEokjZM:0wvjoy7hu6tqpd
- MD5 SHA1 SHA512 SSDEEP
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
820112
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
SkinH_Attach
SkinH_Attach_Ex
Name
UPX0
Size
Virtual Size
664KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
133KB
Virtual Size
136KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=2, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=23, id=14, version=7299,
count=101, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=4, productName=Unmarked objects (old),
count=9, id=19, version=8034,
count=214, id=1, productName=Unmarked objects,
count=62, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
mydata/update.ris
- SHA256 66e301eed62a84c79153290ad4d915017ee6ea85ea487e46c5a05d61e1f03391
- MD5 1a1ab41e66749d90ea5378bcc0c541ec
- SHA1 0a840893465a690789931cd01984902d8d8aadf0
- SHA512 dc7a07f09eaf538c87401ddf75208d9d6f64462fbbdb79b428214e9837e565cc58b97d7a35588547e0ea43933afb95565202c5088c99946d3e407d02dba6b69a
- MD5 SHA1 SHA512
mydata/新云软件.url
- SHA256 df65af1fc1e09f6effbde7e0ef1cb64d6caeef1f62b0e6467821efa032533678
- MD5 4f0017b3b346bd0626f0c3b915e6e734
- SHA1 823bf3ff9e16cd636c9dc0dc690d6a586fcbfe92
- SHA512 0f5eb5024cf6a0323f7998d419995a707c48de917a5899a185369e6acfeb17c09ffa03f7d110adc87b8de20b7d4bf30d50c72479bfb18614d2e21cbe169dc5a6
- MD5 SHA1 SHA512