!#ÎnS̈tallḙr__8485--!PasSw0rd@$$.zip
- SHA256 80f3d09c8da6a063b87cb75b758f13dcce3999396cd4d745ffbd87997249ad75
Password
8485
Overview
overview
3Static
static
3!#ÎnS̈ta...$$.zip
windows7-x64
1!#ÎnS̈ta...$$.zip
windows10-2004-x64
1!#ÎnS̈ta...$$.rar
windows7-x64
3!#ÎnS̈ta...$$.rar
windows10-2004-x64
3!#ÎnS̈ta...re.rar
windows7-x64
3!#ÎnS̈ta...re.rar
windows10-2004-x64
3Language/an.txt
windows7-x64
1Language/an.txt
windows10-2004-x64
1Language/ar.txt
windows7-x64
1Language/ar.txt
windows10-2004-x64
1Language/az.txt
windows7-x64
1Language/az.txt
windows10-2004-x64
1Language/ba.txt
windows7-x64
1Language/ba.txt
windows10-2004-x64
1Language/be.txt
windows7-x64
1Language/be.txt
windows10-2004-x64
1Language/bg.txt
windows7-x64
1Language/bg.txt
windows10-2004-x64
1Language/bn.txt
windows7-x64
1Language/bn.txt
windows10-2004-x64
1Language/ca.txt
windows7-x64
1Language/ca.txt
windows10-2004-x64
1Language/co.txt
windows7-x64
1Language/co.txt
windows10-2004-x64
1Language/cs.txt
windows7-x64
1Language/cs.txt
windows10-2004-x64
1Language/da.txt
windows7-x64
1Language/da.txt
windows10-2004-x64
1Language/de.txt
windows7-x64
1Language/de.txt
windows10-2004-x64
1Language/el.txt
windows7-x64
1Language/el.txt
windows10-2004-x64
1Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
!#ÎnS̈tallḙr__8485--!PasSw0rd@$$.zip
Resource
win7-20240704-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
!#ÎnS̈tallḙr__8485--!PasSw0rd@$$.zip
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
!#ÎnS̈tallḙr__8485--!PasSw0rd@$$.rar
Resource
win7-20240704-en
windows7-x64
8 signatures
150 seconds
Behavioral task
behavioral4
Sample
!#ÎnS̈tallḙr__8485--!PasSw0rd@$$.rar
Resource
win10v2004-20240802-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral5
Sample
!#ÎnS̈tallḙr__8485--!PasSw0rd@$$/MeinSatup___Here.rar
Resource
win7-20240708-en
windows7-x64
8 signatures
150 seconds
Behavioral task
behavioral6
Sample
!#ÎnS̈tallḙr__8485--!PasSw0rd@$$/MeinSatup___Here.rar
Resource
win10v2004-20240802-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral7
Sample
Language/an.txt
Resource
win7-20240729-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral8
Sample
Language/an.txt
Resource
win10v2004-20240802-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral9
Sample
Language/ar.txt
Resource
win7-20240704-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral10
Sample
Language/ar.txt
Resource
win10v2004-20240802-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral11
Sample
Language/az.txt
Resource
win7-20240729-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral12
Sample
Language/az.txt
Resource
win10v2004-20240802-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral13
Sample
Language/ba.txt
Resource
win7-20240704-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral14
Sample
Language/ba.txt
Resource
win10v2004-20240802-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral15
Sample
Language/be.txt
Resource
win7-20240708-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral16
Sample
Language/be.txt
Resource
win10v2004-20240802-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral17
Sample
Language/bg.txt
Resource
win7-20240704-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral18
Sample
Language/bg.txt
Resource
win10v2004-20240802-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral19
Sample
Language/bn.txt
Resource
win7-20240704-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral20
Sample
Language/bn.txt
Resource
win10v2004-20240802-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral21
Sample
Language/ca.txt
Resource
win7-20240729-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral22
Sample
Language/ca.txt
Resource
win10v2004-20240802-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral23
Sample
Language/co.txt
Resource
win7-20240729-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral24
Sample
Language/co.txt
Resource
win10v2004-20240802-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral25
Sample
Language/cs.txt
Resource
win7-20240705-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral26
Sample
Language/cs.txt
Resource
win10v2004-20240802-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral27
Sample
Language/da.txt
Resource
win7-20240704-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral28
Sample
Language/da.txt
Resource
win10v2004-20240802-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral29
Sample
Language/de.txt
Resource
win7-20240708-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral30
Sample
Language/de.txt
Resource
win10v2004-20240802-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral31
Sample
Language/el.txt
Resource
win7-20240708-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral32
Sample
Language/el.txt
Resource
win10v2004-20240802-en
windows10-2004-x64
1 signatures
150 seconds
General
- Target !#ÎnS̈tallḙr__8485--!PasSw0rd@$$.zip
- Size 15.7MB
- Sample240802-ydek6sscra
- SHA256 80f3d09c8da6a063b87cb75b758f13dcce3999396cd4d745ffbd87997249ad75
- MD5 07576a6a6e9e9d35a8e5f2fcf0140ec2
- SHA1 210edad2b9d793c242fbc36b3ed3b329e8127404
- SHA512 d61e5c78d4950d31cf0e64c978c4774371d5ce98a41b2b113ebb51bafd1957cdc1106a24653db42bfd9bef5dd9623d81e753ecc36fe8bca9bcb6b9574bfba067
- SSDEEP 393216:s/Etf7jpp/H5hXnSHCl6kxnATdVabEQh8tyL2ZNg7:s/ezP/ZhXS86kY5tqQg7
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 9 IoCs
Checks for missing Authenticode signature.
resource unpack003/ICQLiteShell.dll unpack003/ICQRT.dll unpack003/Language/LiteRes.dll unpack003/Language/LiteSkinUtils.dll unpack003/Resource/Font/Pfm/Locals/x64/AdonisUI.ClassicTheme.dll unpack003/Resource/Font/Pfm/Locals/x64/AdonisUI.dll unpack003/Resource/Locals/x64/AdonisUI.ClassicTheme.dll unpack003/Resource/Locals/x64/AdonisUI.dll unpack003/Set-up.exe
File Explorer
-
!#ÎnS̈tallḙr__8485--!PasSw0rd@$$.zip.zip 15.7MB
-
!#ÎnS̈tallḙr__8485--!PasSw0rd@$$.rar.rar 15.7MB
-
!#ÎnS̈tallḙr__8485--!PasSw0rd@$$/MeinSatup___Here.rar.rar 15.2MB
-
ICQLiteShell.dll.dll 56KB
-
ICQRT.dll.dll 32KB
-
Key.png.png 7KB
-
Language/LiteRes.dll.dll 735KB
-
Language/LiteSkinUtils.dll.dll 48KB
-
Language/WinRar.exe.exe 3.2MB
-
Language/an.txt7KB
-
Language/ar.txt12KB
-
Language/az.txt9KB
-
Language/ba.txt10KB
-
Language/be.txt11KB
-
Language/bg.txt12KB
-
Language/bn.txt14KB
-
Language/ca.txt9KB
-
Language/co.txt10KB
-
Language/cs.txt8KB
-
Language/da.txt8KB
-
Language/de.txt9KB
-
Language/el.txt16KB
-
Language/eng.txt7KB
-
Language/es.txt9KB
-
Language/et.txt7KB
-
Language/eu.txt8KB
-
Language/ext.txt7KB
-
Language/fa.txt10KB
-
Language/fi.txt8KB
-
Language/fr.txt9KB
-
Language/fur.txt7KB
-
Language/fy.txt6KB
-
Language/ga.txt8KB
-
Language/gl.txt9KB
-
Language/gu.txt17KB
-
Language/he.pak124KB
-
Language/he.txt11KB
-
Language/hi.pak206KB
-
Language/hi.txt17KB
-
Language/hr.pak99KB
-
Language/hr.txt8KB
-
Language/hu.pak106KB
-
Language/hu.txt9KB
-
Language/hy.txt13KB
-
Language/id.txt8KB
-
Language/is.txt8KB
-
Language/it.txt9KB
-
Language/ja.txt11KB
-
Language/ka.txt17KB
-
Language/kaa.txt7KB
-
Language/kab.txt8KB
-
Language/kk.txt10KB
-
Language/ko.txt9KB
-
Language/ku-ckb.txt12KB
-
Language/ky.txt12KB
-
Language/lij.txt7KB
-
Language/lt.txt9KB
-
Language/madHcNet32.dll.dll 921KB
-
Language/mk.txt8KB
-
Language/mn.txt8KB
-
Language/mng.txt20KB
-
Language/mng2.txt21KB
-
Language/mr.txt10KB
-
Language/mvrSettings32.dll.dll 1.0MB
-
Language/ne.txt13KB
-
Language/nl.txt8KB
-
Language/nolimetangere.pkg779KB
-
Language/pa-in.txt14KB
-
Language/pl.txt9KB
-
Language/ps.txt8KB
-
Language/pt-br.txt9KB
-
Language/pt.txt9KB
-
Language/ro.txt7KB
-
Language/ru.txt14KB
-
Language/sa.txt19KB
-
Language/si.txt16KB
-
Language/sk.txt9KB
-
Language/sl.txt8KB
-
Language/sr-spc.txt11KB
-
Language/sr-spl.txt7KB
-
Language/sv.txt8KB
-
Language/sw.txt8KB
-
Language/ta.txt12KB
-
Language/tg.txt14KB
-
Language/th.txt15KB
-
Language/tk.txt9KB
-
Language/tr.txt9KB
-
Language/tt.txt13KB
-
Language/ug.txt11KB
-
Language/uk.txt14KB
-
Language/unrar.dll.dll 304KB
-
Language/uz-cyrl.txt14KB
-
Language/uz.txt9KB
-
Language/va.txt6KB
-
Language/vi.txt8KB
-
Language/yo.txt10KB
-
Language/zh-cn.txt7KB
-
Language/zh-tw.txt7KB
-
Password.txt4B
-
Resource/CMap/Identity-H8KB
-
Resource/CMap/Identity-V2KB
-
Resource/CMap/UCS2-GBK-EUC238KB
-
Resource/CMap/UniKS-UTF16-H128KB
-
Resource/CMap/UniKS-UTF16-V3KB
-
Resource/Font/AdobePIStd.otf83KB
-
Resource/Font/CourierStd-Bold.otf29KB
-
Resource/Font/CourierStd-BoldOblique.otf31KB
-
Resource/Font/CourierStd-Oblique.otf31KB
-
Resource/Font/CourierStd.otf30KB
-
Resource/Font/MinionPro-Bold.otf205KB
-
Resource/Font/MinionPro-BoldIt.otf245KB
-
Resource/Font/MinionPro-It.otf246KB
-
Resource/Font/MinionPro-Regular.otf205KB
-
Resource/Font/MyriadPro-Bold.otf88KB
-
Resource/Font/MyriadPro-BoldIt.otf90KB
-
Resource/Font/MyriadPro-It.otf88KB
-
Resource/Font/MyriadPro-Regular.otf88KB
-
Resource/Font/Pfm/CMap/Identity-H8KB
-
Resource/Font/Pfm/CMap/Identity-V2KB
-
Resource/Font/Pfm/CMap/UCS2-GBK-EUC238KB
-
Resource/Font/Pfm/CMap/UniKS-UTF16-H128KB
-
Resource/Font/Pfm/CMap/UniKS-UTF16-V3KB
-
Resource/Font/Pfm/Font/AdobePIStd.otf83KB
-
Resource/Font/Pfm/Font/CourierStd-Bold.otf29KB
-
Resource/Font/Pfm/Font/CourierStd-BoldOblique.otf31KB
-
Resource/Font/Pfm/Font/CourierStd-Oblique.otf31KB
-
Resource/Font/Pfm/Font/CourierStd.otf30KB
-
Resource/Font/Pfm/Font/MinionPro-Bold.otf205KB
-
Resource/Font/Pfm/Font/MinionPro-BoldIt.otf245KB
-
Resource/Font/Pfm/Font/MinionPro-It.otf246KB
-
Resource/Font/Pfm/Font/MinionPro-Regular.otf205KB
-
Resource/Font/Pfm/Font/MyriadPro-Bold.otf88KB
-
Resource/Font/Pfm/Font/MyriadPro-BoldIt.otf90KB
-
Resource/Font/Pfm/Font/MyriadPro-It.otf88KB
-
Resource/Font/Pfm/Font/MyriadPro-Regular.otf88KB
-
Resource/Font/Pfm/Font/Pfm/SY______.PFM672B
-
Resource/Font/Pfm/Font/Pfm/zx______.pfm683B
-
Resource/Font/Pfm/Font/Pfm/zy______.pfm684B
-
Resource/Font/Pfm/Font/SY______.PFB33KB
-
Resource/Font/Pfm/Font/ZX______.PFB73KB
-
Resource/Font/Pfm/Font/ZY______.PFB94KB
-
Resource/Font/Pfm/Locals/am.pak145KB
-
Resource/Font/Pfm/Locals/ar.pak148KB
-
Resource/Font/Pfm/Locals/fi.pak93KB
-
Resource/Font/Pfm/Locals/fil.pak103KB
-
Resource/Font/Pfm/Locals/fr.pak109KB
-
Resource/Font/Pfm/Locals/gu.pak199KB
-
Resource/Font/Pfm/Locals/he.pak124KB
-
Resource/Font/Pfm/Locals/hi.pak206KB
-
Resource/Font/Pfm/Locals/hr.pak99KB
-
Resource/Font/Pfm/Locals/hu.pak106KB
-
Resource/Font/Pfm/Locals/id.pak91KB
-
Resource/Font/Pfm/Locals/lt.pak107KB
-
Resource/Font/Pfm/Locals/lv.pak107KB
-
Resource/Font/Pfm/Locals/x64/AdonisUI.ClassicTheme.dll.dll 287KB
-
Resource/Font/Pfm/Locals/x64/AdonisUI.ClassicTheme.xml.xml 146B
-
Resource/Font/Pfm/Locals/x64/AdonisUI.dll.dll 164KB
-
Resource/Font/Pfm/Locals/x64/AdonisUI.xml.xml 76KB
-
Resource/Font/Pfm/Locals/x64/SQLite.Interop.dll.dll 1.7MB
-
Resource/Font/Pfm/Locals/x86/BouncyCastle.Crypto.dll.dll 3.2MB
-
Resource/Font/Pfm/Locals/x86/BouncyCastle.Crypto.xml.xml 1.7MB
-
Resource/Font/Pfm/Locals/x86/SQLite.Interop.dll.dll 1.3MB
-
Resource/Font/Pfm/SY______.PFM672B
-
Resource/Font/Pfm/SaslPrep/SaslPrepProfile_norm_bidi.spp13KB
-
Resource/Font/Pfm/TypeSupport/Unicode/ICU/icudt26l.dat209KB
-
Resource/Font/Pfm/TypeSupport/Unicode/Mappings/Adobe/symbol.txt10KB
-
Resource/Font/Pfm/TypeSupport/Unicode/Mappings/Adobe/zdingbat.txt12KB
-
Resource/Font/Pfm/TypeSupport/Unicode/Mappings/Mac/CENTEURO.TXT12KB
-
Resource/Font/Pfm/TypeSupport/Unicode/Mappings/Mac/CORPCHAR.TXT18KB
-
Resource/Font/Pfm/TypeSupport/Unicode/Mappings/Mac/CROATIAN.TXT13KB
-
Resource/Font/Pfm/TypeSupport/Unicode/Mappings/Mac/CYRILLIC.TXT13KB
-
Resource/Font/Pfm/TypeSupport/Unicode/Mappings/Mac/GREEK.TXT13KB
-
Resource/Font/Pfm/TypeSupport/Unicode/Mappings/Mac/ICELAND.TXT13KB
-
Resource/Font/Pfm/TypeSupport/Unicode/Mappings/Mac/ROMAN.TXT14KB
-
Resource/Font/Pfm/TypeSupport/Unicode/Mappings/Mac/ROMANIAN.TXT14KB
-
Resource/Font/Pfm/TypeSupport/Unicode/Mappings/Mac/SYMBOL.TXT15KB
-
Resource/Font/Pfm/TypeSupport/Unicode/Mappings/Mac/TURKISH.TXT12KB
-
Resource/Font/Pfm/TypeSupport/Unicode/Mappings/Mac/UKRAINE.TXT4KB
-
Resource/Font/Pfm/TypeSupport/Unicode/Mappings/win/CP1250.TXT9KB
-
Resource/Font/Pfm/TypeSupport/Unicode/Mappings/win/CP1251.TXT9KB
-
Resource/Font/Pfm/TypeSupport/Unicode/Mappings/win/CP1252.TXT9KB
-
Resource/Font/Pfm/TypeSupport/Unicode/Mappings/win/CP1253.TXT8KB
-
Resource/Font/Pfm/TypeSupport/Unicode/Mappings/win/CP1254.TXT9KB
-
Resource/Font/Pfm/TypeSupport/Unicode/Mappings/win/CP1257.TXT9KB
-
Resource/Font/Pfm/TypeSupport/Unicode/Mappings/win/CP1258.TXT9KB
-
Resource/Font/Pfm/opengl64.dll145.8MB
-
Resource/Font/Pfm/resources.pak4.9MB
-
Resource/Font/Pfm/zx______.pfm683B
-
Resource/Font/Pfm/zy______.pfm684B
-
Resource/Font/SY______.PFB33KB
-
Resource/Font/ZX______.PFB73KB
-
Resource/Font/ZY______.PFB94KB
-
Resource/Locals/am.pak145KB
-
Resource/Locals/ar.pak148KB
-
Resource/Locals/fi.pak93KB
-
Resource/Locals/fil.pak103KB
-
Resource/Locals/fr.pak109KB
-
Resource/Locals/gu.pak199KB
-
Resource/Locals/he.pak124KB
-
Resource/Locals/hi.pak206KB
-
Resource/Locals/hr.pak99KB
-
Resource/Locals/hu.pak106KB
-
Resource/Locals/id.pak91KB
-
Resource/Locals/lt.pak107KB
-
Resource/Locals/lv.pak107KB
-
Resource/Locals/x64/AdonisUI.ClassicTheme.dll.dll 287KB
-
Resource/Locals/x64/AdonisUI.ClassicTheme.xml.xml 146B
-
Resource/Locals/x64/AdonisUI.dll.dll 164KB
-
Resource/Locals/x64/AdonisUI.xml.xml 76KB
-
Resource/Locals/x64/SQLite.Interop.dll.dll 1.7MB
-
Resource/Locals/x86/BouncyCastle.Crypto.dll.dll 3.2MB
-
Resource/Locals/x86/BouncyCastle.Crypto.xml.xml 1.7MB
-
Resource/Locals/x86/SQLite.Interop.dll.dll 1.3MB
-
Resource/SaslPrep/SaslPrepProfile_norm_bidi.spp13KB
-
Resource/TypeSupport/Unicode/ICU/icudt26l.dat209KB
-
Resource/TypeSupport/Unicode/Mappings/Adobe/symbol.txt10KB
-
Resource/TypeSupport/Unicode/Mappings/Adobe/zdingbat.txt12KB
-
Resource/TypeSupport/Unicode/Mappings/Mac/CENTEURO.TXT12KB
-
Resource/TypeSupport/Unicode/Mappings/Mac/CORPCHAR.TXT18KB
-
Resource/TypeSupport/Unicode/Mappings/Mac/CROATIAN.TXT13KB
-
Resource/TypeSupport/Unicode/Mappings/Mac/CYRILLIC.TXT13KB
-
Resource/TypeSupport/Unicode/Mappings/Mac/GREEK.TXT13KB
-
Resource/TypeSupport/Unicode/Mappings/Mac/ICELAND.TXT13KB
-
Resource/TypeSupport/Unicode/Mappings/Mac/ROMAN.TXT14KB
-
Resource/TypeSupport/Unicode/Mappings/Mac/ROMANIAN.TXT14KB
-
Resource/TypeSupport/Unicode/Mappings/Mac/SYMBOL.TXT15KB
-
Resource/TypeSupport/Unicode/Mappings/Mac/TURKISH.TXT12KB
-
Resource/TypeSupport/Unicode/Mappings/Mac/UKRAINE.TXT4KB
-
Resource/TypeSupport/Unicode/Mappings/win/CP1250.TXT9KB
-
Resource/TypeSupport/Unicode/Mappings/win/CP1251.TXT9KB
-
Resource/TypeSupport/Unicode/Mappings/win/CP1252.TXT9KB
-
Resource/TypeSupport/Unicode/Mappings/win/CP1253.TXT8KB
-
Resource/TypeSupport/Unicode/Mappings/win/CP1254.TXT9KB
-
Resource/TypeSupport/Unicode/Mappings/win/CP1257.TXT9KB
-
Resource/TypeSupport/Unicode/Mappings/win/CP1258.TXT9KB
-
Resource/opengl64.dll145.8MB
-
Resource/resources.pak4.9MB
-
Set-up.exe.exe 2.5MB
-
acceptancy.svg83KB
-
opengl64178.7MB
!#ÎnS̈tallḙr__8485--!PasSw0rd@$$.rar
- SHA256 db7bd4434a7f333ab66e542da613353e82caf1bccc158783146b8a698fcbc894
- MD5 36a1272ed774f87de33346ffe05d0880
- SHA1 ecafb0d8759816c2abf2595fd8882711346043d3
- SHA512 214910572f4d5ace13bbfab30a3fb023f5069aa33c5b1a1ef80aa8e8fb248e3b2dea7ad866e0b6fb14a76d65a5aa0f26afb5251d30d000ff13c68f11c8fde9f3
- SSDEEP 393216:z/Etf7jpp/H5hXnSHCl6kxnATdVabEQh8tyL2ZNgP:z/ezP/ZhXS86kY5tqQgP
- MD5 SHA1 SHA512 SSDEEP
Password
8485
!#ÎnS̈tallḙr__8485--!PasSw0rd@$$/MeinSatup___Here.rar
- SHA256 0c1f3cc7247101a5c007a3aca054c737419e870851d0d11181def458032ca315
- MD5 95094e8f3178c989f17e7cebc9dd16aa
- SHA1 81c7d49c41f51a2637db1273136fce16cf90f389
- SHA512 c9add97e2a588752d81f2ce07e6fe0a38585050f34910f217bebabff5922fb0c35b93c2f21ca60faa177c51c99de8e6ab31c90897872f1254258905fca1efd2b
- SSDEEP 393216:9ZyNrd9UT91ekp/379O4LAaw2RlbyNQOqgOo+oOgIUe+ah/:9ZylT4ykpf7aaTlby2Ogo+Q6+Y
- MD5 SHA1 SHA512 SSDEEP
Password
8485
ICQLiteShell.dll
- IMPHASH 36da04e9d80185202c5dff27d69487ef
- SHA256 515c8e0b93f0fef15da3e2573ad92b7e7840374140e65e5d73df63d8e22cb3e8
- MD5 05e61539b8917fca37c03756bbdd043d
- SHA1 5a72e0e528260de0ea5b34badb9e5f9873cb4245
- SHA512 565d57783e6044d6e7e2026c79dbd897e637c5e1d96e7930dc704ef2b6d801669b38f0c26382f00e67e26668439274941e937a0ade54666de50b5d84f6da7e97
- SSDEEP 768:YEGJ9blT7XZBSbHwJU+tGR0KZUyGKZ0ZgwmF1+3UVambg:YEGJ9bln5o0KZjGKZ0Z1mF1+3UVayg
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Password
8485
Minor OS version
0
Major OS version
4
Entry point
19647
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mfc42
ord2818
ord540
ord2915
ord537
ord800
ord941
ord861
ord823
ord6467
ord1131
ord2725
ord3953
ord825
ord561
ord3738
ord4424
ord4622
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5714
ord5289
ord5307
ord4698
ord535
ord4160
ord5302
ord2396
ord269
ord5199
ord1577
ord600
ord4274
ord1182
ord5300
ord1255
ord1253
ord1578
ord1197
ord4079
ord1570
ord1243
ord342
ord815
ord6375
ord4486
ord2554
ord2512
ord5731
ord1116
ord1176
ord1575
ord1168
ord3922
ord826
ord3346
ord1089
msvcrt
_initterm
??1type_info@@UAE@XZ
_stricmp
memcpy
__CxxFrameHandler
free
malloc
realloc
memset
memcmp
strlen
_snprintf
strcat
strncpy
?terminate@@YAXXZ
_except_handler3
__dllonexit
_onexit
_adjust_fdiv
kernel32
GetLastError
LoadLibraryA
GetModuleFileNameA
GetModuleHandleA
GetShortPathNameA
lstrlenA
MultiByteToWideChar
lstrlenW
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
WideCharToMultiByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
HeapDestroy
GetProcAddress
lstrcpyA
lstrcatA
GetVersionExA
CloseHandle
OpenMutexA
LocalFree
LocalAlloc
user32
CreateMenu
InsertMenuItemA
LoadBitmapA
InsertMenuA
wsprintfA
CharNextA
gdi32
DeleteObject
advapi32
RegOpenKeyExA
RegEnumValueA
RegQueryInfoKeyA
RegSetValueExA
RegEnumKeyExA
RegCloseKey
RegDeleteValueA
RegCreateKeyExA
RegDeleteKeyA
shell32
DragQueryFileA
ole32
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
CoTaskMemFree
oleaut32
BSTR_UserMarshal
RegisterTypeLi
SysAllocStringLen
BSTR_UserFree
BSTR_UserUnmarshal
LoadTypeLi
BSTR_UserSize
SysAllocString
SysFreeString
VarUI4FromStr
rpcrt4
CStdStubBuffer_CountRefs
CStdStubBuffer_Invoke
CStdStubBuffer_Disconnect
CStdStubBuffer_Connect
CStdStubBuffer_AddRef
CStdStubBuffer_QueryInterface
IUnknown_Release_Proxy
IUnknown_AddRef_Proxy
IUnknown_QueryInterface_Proxy
NdrOleFree
NdrOleAllocate
NdrDllGetClassObject
NdrDllCanUnloadNow
NdrCStdStubBuffer_Release
NdrDllRegisterProxy
NdrDllUnregisterProxy
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_DebugServerRelease
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Name
.text
Size
20KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.orpc
Size
4KB
Virtual Size
89B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
12KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=12, version=7291,
count=2, id=37, version=8755,
count=3, id=28, version=9178,
count=14, id=25, version=9210,
count=3, id=14, version=7299,
count=2, id=11, version=8047,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=3, id=11, version=8569,
count=3, id=4, version=8569,
count=169, id=1, productName=Unmarked objects,
count=3, id=11, version=8966,
count=1, id=10, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
ICQRT.dll
- IMPHASH eea1a54f9a41b7445dc95356daf71d0a
- SHA256 53e1f40144bab532f9700ff25ec3d5c6a39784a98e17fada583b4ee6d9dd5dbc
- MD5 1aedcb8994d6ad63ef9dcb87016e028f
- SHA1 f5b891aa15c6353b681bdb7e2d96c6ac8a5f02d7
- SHA512 89c0f408797c4d78afc52335a9e162345c614e1e419f55487cb358c14f7a69ec82138a7e6250be3133233386ba3659d241e80ab63c9b972b6c8b26b0424cb0c8
- SSDEEP 384:+qtTeds1tkMAp4TxCW9su5UcSu93ggoXUQQIPGEANHl:FTedukelF95RjQUUPpANHl
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Password
8485
Minor OS version
0
Major OS version
4
Entry point
21409
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
EnterCriticalSection
Sleep
InitializeCriticalSection
InterlockedExchange
DeleteCriticalSection
LeaveCriticalSection
DisableThreadLibraryCalls
msvcrt
__CxxFrameHandler
_CxxThrowException
?what@exception@@UBEPBDXZ
strlen
??0exception@@QAE@ABQBD@Z
??1exception@@UAE@XZ
memcpy
??4exception@@QAEAAV0@ABV0@@Z
??3@YAXPAX@Z
wcslen
iswctype
??2@YAPAXI@Z
??0exception@@QAE@ABV0@@Z
memcmp
memchr
memset
??1type_info@@UAE@XZ
_except_handler3
?terminate@@YAXXZ
__dllonexit
_onexit
free
_initterm
malloc
_adjust_fdiv
memmove
??4?$numeric_limits@C@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@D@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@E@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@F@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@G@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@H@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@I@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@J@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@K@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@M@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@N@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@O@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@_N@std@@QAEAAV01@ABV01@@Z
??4_Num_base@std@@QAEAAU01@ABU01@@Z
??4_Num_float_base@std@@QAEAAU01@ABU01@@Z
??4_Num_int_base@std@@QAEAAU01@ABU01@@Z
?denorm_min@?$numeric_limits@C@std@@SACXZ
?denorm_min@?$numeric_limits@D@std@@SADXZ
?denorm_min@?$numeric_limits@E@std@@SAEXZ
?denorm_min@?$numeric_limits@F@std@@SAFXZ
?denorm_min@?$numeric_limits@G@std@@SAGXZ
?denorm_min@?$numeric_limits@H@std@@SAHXZ
?denorm_min@?$numeric_limits@I@std@@SAIXZ
?denorm_min@?$numeric_limits@J@std@@SAJXZ
?denorm_min@?$numeric_limits@K@std@@SAKXZ
?denorm_min@?$numeric_limits@M@std@@SAMXZ
?denorm_min@?$numeric_limits@N@std@@SANXZ
?denorm_min@?$numeric_limits@O@std@@SAOXZ
?denorm_min@?$numeric_limits@_N@std@@SA_NXZ
?epsilon@?$numeric_limits@C@std@@SACXZ
?epsilon@?$numeric_limits@D@std@@SADXZ
?epsilon@?$numeric_limits@E@std@@SAEXZ
?epsilon@?$numeric_limits@F@std@@SAFXZ
?epsilon@?$numeric_limits@G@std@@SAGXZ
?epsilon@?$numeric_limits@H@std@@SAHXZ
?epsilon@?$numeric_limits@I@std@@SAIXZ
?epsilon@?$numeric_limits@J@std@@SAJXZ
?epsilon@?$numeric_limits@K@std@@SAKXZ
?epsilon@?$numeric_limits@M@std@@SAMXZ
?epsilon@?$numeric_limits@N@std@@SANXZ
?epsilon@?$numeric_limits@O@std@@SAOXZ
?epsilon@?$numeric_limits@_N@std@@SA_NXZ
?infinity@?$numeric_limits@C@std@@SACXZ
?infinity@?$numeric_limits@D@std@@SADXZ
?infinity@?$numeric_limits@E@std@@SAEXZ
?infinity@?$numeric_limits@F@std@@SAFXZ
?infinity@?$numeric_limits@G@std@@SAGXZ
?infinity@?$numeric_limits@H@std@@SAHXZ
?infinity@?$numeric_limits@I@std@@SAIXZ
?infinity@?$numeric_limits@J@std@@SAJXZ
?infinity@?$numeric_limits@K@std@@SAKXZ
?infinity@?$numeric_limits@M@std@@SAMXZ
?infinity@?$numeric_limits@N@std@@SANXZ
?infinity@?$numeric_limits@O@std@@SAOXZ
?infinity@?$numeric_limits@_N@std@@SA_NXZ
?max@?$numeric_limits@C@std@@SACXZ
?max@?$numeric_limits@D@std@@SADXZ
?max@?$numeric_limits@E@std@@SAEXZ
?max@?$numeric_limits@F@std@@SAFXZ
?max@?$numeric_limits@G@std@@SAGXZ
?max@?$numeric_limits@H@std@@SAHXZ
?max@?$numeric_limits@I@std@@SAIXZ
?max@?$numeric_limits@J@std@@SAJXZ
?max@?$numeric_limits@K@std@@SAKXZ
?max@?$numeric_limits@M@std@@SAMXZ
?max@?$numeric_limits@N@std@@SANXZ
?max@?$numeric_limits@O@std@@SAOXZ
?max@?$numeric_limits@_N@std@@SA_NXZ
?min@?$numeric_limits@C@std@@SACXZ
?min@?$numeric_limits@D@std@@SADXZ
?min@?$numeric_limits@E@std@@SAEXZ
?min@?$numeric_limits@F@std@@SAFXZ
?min@?$numeric_limits@G@std@@SAGXZ
?min@?$numeric_limits@H@std@@SAHXZ
?min@?$numeric_limits@I@std@@SAIXZ
?min@?$numeric_limits@J@std@@SAJXZ
?min@?$numeric_limits@K@std@@SAKXZ
?min@?$numeric_limits@M@std@@SAMXZ
?min@?$numeric_limits@N@std@@SANXZ
?min@?$numeric_limits@O@std@@SAOXZ
?min@?$numeric_limits@_N@std@@SA_NXZ
?quiet_NaN@?$numeric_limits@C@std@@SACXZ
?quiet_NaN@?$numeric_limits@D@std@@SADXZ
?quiet_NaN@?$numeric_limits@E@std@@SAEXZ
?quiet_NaN@?$numeric_limits@F@std@@SAFXZ
?quiet_NaN@?$numeric_limits@G@std@@SAGXZ
?quiet_NaN@?$numeric_limits@H@std@@SAHXZ
?quiet_NaN@?$numeric_limits@I@std@@SAIXZ
?quiet_NaN@?$numeric_limits@J@std@@SAJXZ
?quiet_NaN@?$numeric_limits@K@std@@SAKXZ
?quiet_NaN@?$numeric_limits@M@std@@SAMXZ
?quiet_NaN@?$numeric_limits@N@std@@SANXZ
?quiet_NaN@?$numeric_limits@O@std@@SAOXZ
?quiet_NaN@?$numeric_limits@_N@std@@SA_NXZ
?round_error@?$numeric_limits@C@std@@SACXZ
?round_error@?$numeric_limits@D@std@@SADXZ
?round_error@?$numeric_limits@E@std@@SAEXZ
?round_error@?$numeric_limits@F@std@@SAFXZ
?round_error@?$numeric_limits@G@std@@SAGXZ
?round_error@?$numeric_limits@H@std@@SAHXZ
?round_error@?$numeric_limits@I@std@@SAIXZ
?round_error@?$numeric_limits@J@std@@SAJXZ
?round_error@?$numeric_limits@K@std@@SAKXZ
?round_error@?$numeric_limits@M@std@@SAMXZ
?round_error@?$numeric_limits@N@std@@SANXZ
?round_error@?$numeric_limits@O@std@@SAOXZ
?round_error@?$numeric_limits@_N@std@@SA_NXZ
?signaling_NaN@?$numeric_limits@C@std@@SACXZ
?signaling_NaN@?$numeric_limits@D@std@@SADXZ
?signaling_NaN@?$numeric_limits@E@std@@SAEXZ
?signaling_NaN@?$numeric_limits@F@std@@SAFXZ
?signaling_NaN@?$numeric_limits@G@std@@SAGXZ
?signaling_NaN@?$numeric_limits@H@std@@SAHXZ
?signaling_NaN@?$numeric_limits@I@std@@SAIXZ
?signaling_NaN@?$numeric_limits@J@std@@SAJXZ
?signaling_NaN@?$numeric_limits@K@std@@SAKXZ
?signaling_NaN@?$numeric_limits@M@std@@SAMXZ
?signaling_NaN@?$numeric_limits@N@std@@SANXZ
?signaling_NaN@?$numeric_limits@O@std@@SAOXZ
?signaling_NaN@?$numeric_limits@_N@std@@SA_NXZ
Name
.text
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=14, version=7299,
count=2, id=11, version=8047,
count=8, id=10, version=8047,
count=2, id=4, version=8047,
count=3, id=25, version=9210,
count=33, id=1, productName=Unmarked objects,
count=1, id=10, version=8966,
count=4, id=11, version=8966,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Key.png
- SHA256 38d2b5663aa2260abc9e6bb1a58a67d21ea9d9394fa9d64d44f41f4e1aa62824
- MD5 650792b550d14ce85235edc47f2acd31
- SHA1 4ccc0ee9677b9ae73c6ea744480ddd30d800ae1a
- SHA512 ba5804f98ec3a4f6af2ae60136a8ef17bf5d81979f9dbf18a65bfc6737d452fa5010fc3e8661e428db58716abe6e01747a3bad97310634594ec0cbb4d4e5923e
- SSDEEP 192:QBymtCq37gorTLAH/guaj1aymrgWTRLtFgwPxk:QByOb37goPLAHox3WTRvR6
- MD5 SHA1 SHA512 SSDEEP
Password
8485
Language/LiteRes.dll
- IMPHASH ce6ef31899b31809ae0c71c094c6f083
- SHA256 afa884228afc5c05f4b47e90b6de42854d5a8886ec5ed15a253faeccd5309036
- MD5 88962410244bc5c03482b82a7e3cb5e1
- SHA1 4622be2d3deda305bf0a16c0e01bc2ecf9d56fad
- SHA512 c6e7667f91c1439e33ad4d9e2052b7c9fcc3ca2c7688d9e2bc0550b71a5762b76aa76427331df0217429d9bd984925997c7a8d009f25e44e2776c5ce7cc9d98c
- SSDEEP 6144:x9Ej/jb82/HRoXO1q2pt+Mc1/PDPicsUzM+gYESoE/wOuET8F62bH5vnGfcJvl+b:fqptG/PDPo0no2Iq8F6CHBTWqU
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Password
8485
Minor OS version
0
Major OS version
4
Entry point
4413
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mfc42
ord1253
ord342
ord823
ord1182
ord1168
msvcrt
free
_initterm
malloc
_adjust_fdiv
Name
.text
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
512B
Virtual Size
308B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
76B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
732KB
Virtual Size
731KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
420B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=2, id=11, version=8569,
count=11, id=1, productName=Unmarked objects,
count=3, id=4, version=8569,
count=2, id=11, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Language/LiteSkinUtils.dll
- IMPHASH a8d043bdfc629c21151b760b23d3bcd9
- SHA256 9fa7cacb5730faacc2b17d735c45ee1370130d863c3366d08ec013afe648bfa6
- MD5 059d94e8944eca4056e92d60f7044f14
- SHA1 46a491abbbb434b6a1a2a1b1a793d24acd1d6c4b
- SHA512 0f45fe8d5e80a8fabf9a1fd2a3f69b2c4ebb19f5ffdcfec6d17670f5577d5855378023a91988e0855c4bd85c9b2cc80375c3a0acb1d7a701aff32e9e78347902
- SSDEEP 768:FPGeoWyuTx6vrP/zAdWQS6Z9CSKh64crVKTl9inMUAK:tGeJxIHepSKzjVK9iMUAK
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Password
8485
Minor OS version
0
Major OS version
4
Entry point
25087
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mfc42
ord1233
ord1114
ord2055
ord2152
ord567
ord1113
ord3237
ord6376
ord4441
ord4837
ord3798
ord5290
ord2623
ord3742
ord4424
ord4627
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord2985
ord3136
ord4465
ord3259
ord3147
ord2982
ord5277
ord2124
ord2446
ord5261
ord1727
ord5065
ord3749
ord1601
ord4078
ord2648
ord4353
ord6374
ord5163
ord4275
ord535
ord2385
ord5241
ord4407
ord1776
ord6055
ord4003
ord858
ord2486
ord538
ord540
ord941
ord1168
ord1253
ord342
ord823
ord1182
ord3318
ord818
ord800
ord539
ord825
ord665
ord1979
ord537
ord5186
ord354
ord2864
ord6880
msvcrt
_CxxThrowException
memcpy
??1type_info@@UAE@XZ
free
strlen
memset
strncpy
_adjust_fdiv
malloc
_initterm
__CxxFrameHandler
?terminate@@YAXXZ
_except_handler3
_onexit
__dllonexit
fopen
fclose
strrchr
_purecall
kernel32
GetLastError
MultiByteToWideChar
lstrlenA
LocalFree
LoadLibraryExA
GetModuleHandleA
GetModuleFileNameA
GetProcAddress
InterlockedDecrement
InterlockedIncrement
GetCurrentProcessId
FreeLibrary
user32
GetParent
EnableWindow
EnumWindows
OffsetRect
GetWindowThreadProcessId
GetSysColor
PostMessageA
IsWindow
GetWindowRect
gdi32
GetStockObject
GetObjectA
ole32
CoCreateInstance
OleRun
CreateStreamOnHGlobal
CoRegisterClassObject
CoRevokeClassObject
oleaut32
VariantClear
SysFreeString
SysAllocString
LoadTypeLibEx
icqrt
ord36
ord195
ord179
ord328
ord142
ord174
ord360
ord38
ord15
ord191
ord158
ord250
ord259
advapi32
RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
??0MCSkin@@AAE@XZ
??0MCSkin@@QAE@ABV0@@Z
??0MCSkinAdvisor@@AAE@XZ
??0MCSkinRegistry@@QAE@ABV0@@Z
??0MCSkinRegistry@@QAE@XZ
??0MISknSink@@QAE@ABV0@@Z
??0MISknSink@@QAE@XZ
??1MCSkin@@QAE@XZ
??1MCSkinAdvisor@@UAE@XZ
??1MCSkinRegistry@@QAE@XZ
??4MCSkin@@QAEAAV0@ABV0@@Z
??4MCSkinLoader@@QAEAAV0@ABV0@@Z
??4MCSkinRegistry@@QAEAAV0@ABV0@@Z
??4MISknSink@@QAEAAV0@ABV0@@Z
??_7MCSkinAdvisor@@6B@
??_7MISknSink@@6B@
?Advise@MCSkinAdvisor@@QAEKPAUISkinObject@@PAVMISknSink@@@Z
?ChangeSkin@MCSkin@@QAEJPBDI@Z
?CheckSkinVersion@MCSkin@@QAEGPBDAAV?$vector@VCString@@V?$allocator@VCString@@@std@@@std@@@Z
?CreateFontStruct@MCSkin@@QAEXPAUSkinLogFont@@H@Z
?CreateSkinComponent@MCSkin@@QAEJPAPAUISkin@@@Z
?EnumWindowsProc@MCSkin@@SGHPAUHWND__@@J@Z
?FindNames@MCSkin@@AAE_NPAUISkinObject@@PAPAGHAAV?$vector@VCString@@V?$allocator@VCString@@@std@@@std@@@Z
?FindPath@MCSkinLoader@@SAXXZ
?FromReg@MCSkinRegistry@@QAE_NXZ
?Get@MCSkin@@SAPAUISkin@@XZ
?GetAppColor@MCSkin@@SAKW4APP_COLOR@1@@Z
?GetDispatchMap@MCSkinAdvisor@@MBEPBUAFX_DISPMAP@@XZ
?GetHUE@MCSkin@@QAEEXZ
?GetInterfaceMap@MCSkinAdvisor@@MBEPBUAFX_INTERFACEMAP@@XZ
?GetMessageMap@MCSkinAdvisor@@MBEPBUAFX_MSGMAP@@XZ
?GetSkinFileID@MCSkin@@QAE?AVCString@@PBD@Z
?GetSkinFileID@MCSkin@@QAE?AVCString@@XZ
?GetSkinFullPathName@MCSkinRegistry@@QAEPBDXZ
?GetSysColor@MCSkin@@SAKH@Z
?GetWantSkin@MCSkinRegistry@@QAE_NXZ
?Initialize@MCSkin@@QAEJP6AXPAUIUnknown@@@Z@Z
?Initialize@MCSkinAdvisor@@QAE_NXZ
?Instance@MCSkin@@SAPAV1@XZ
?Instance@MCSkinAdvisor@@SAPAV1@XZ
?IsInitialized@MCSkin@@QBE_NXZ
?IsInitialized@MCSkinRegistry@@AAE_NXZ
?IsLoaded@MCSkin@@QBE_NXZ
?Load@MCSkin@@QAEJPBD@Z
?Load@MCSkinLoader@@SAJPAUISkin@@@Z
?OnDblClick@MCSkinAdvisor@@MAEXPAUIUnknown@@@Z
?OnMouseIn@MCSkinAdvisor@@MAEXPAUIUnknown@@@Z
?OnMouseMove@MCSkinAdvisor@@MAEXPAUIUnknown@@JJ@Z
?OnMouseOut@MCSkinAdvisor@@MAEXPAUIUnknown@@@Z
?OnRender@MCSkinAdvisor@@MAEXPAUIUnknown@@0JJ@Z
?OnSkinDblClick@MISknSink@@UAEXPAUIUnknown@@@Z
?OnSkinGenEvent@MCSkinAdvisor@@MAEXPAUIUnknown@@PBD@Z
?OnSkinGenEvent@MISknSink@@UAEXPAUIUnknown@@PBD@Z
?OnSkinMouseIn@MISknSink@@UAEXPAUIUnknown@@@Z
?OnSkinMouseMove@MISknSink@@UAEXPAUIUnknown@@JJ@Z
?OnSkinMouseOut@MISknSink@@UAEXPAUIUnknown@@@Z
?RenderParentBK@MCSkin@@QAE_NPAUHWND__@@PAUHDC__@@@Z
?SetAppValues@MCSkinRegistry@@SAXPAUHKEY__@@PBD1@Z
?SetCaptionFont@MCSkin@@QAEXAAV?$_com_ptr_t@V?$_com_IIID@UISkinObject@@$1?_GUID_6a5905c9_0bdd_49fb_9c45_cbb450d3bfd5@@3U__s_GUID@@A@@@@PAG@Z
?SetCaptionFont@MCSkin@@QAEXPAG@Z
?SetCaptionFont@MCSkin@@QAEXXZ
?SetFileName@MCSkinLoader@@SAXPBD@Z
?SetHUE@MCSkin@@QAEXE@Z
?SetMenuFont@MCSkin@@QAEXPAG@Z
?SetMenuFont@MCSkin@@QAEXXZ
?SetSkinFullPathName@MCSkinRegistry@@QAEXPBD@Z
?SetWantSkin@MCSkinRegistry@@QAEX_N@Z
?SkinFileExist@MCSkinLoader@@SA_NXZ
?ToReg@MCSkinRegistry@@QAEXXZ
?Unadvise@MCSkinAdvisor@@QAE_NAAK@Z
?Uninitialize@MCSkin@@QAE_NXZ
?Uninitialize@MCSkinAdvisor@@QAE_NXZ
?Unload@MCSkin@@QAE_NXZ
?_GetBaseDispatchMap@MCSkinAdvisor@@KGPBUAFX_DISPMAP@@XZ
?_GetBaseInterfaceMap@MCSkinAdvisor@@KGPBUAFX_INTERFACEMAP@@XZ
?_GetBaseMessageMap@MCSkinAdvisor@@KGPBUAFX_MSGMAP@@XZ
?_dispatchEntries@MCSkinAdvisor@@0QBUAFX_DISPMAP_ENTRY@@B
?_dispatchEntryCount@MCSkinAdvisor@@0IA
?_dwStockPropMask@MCSkinAdvisor@@0KA
?_interfaceEntries@MCSkinAdvisor@@0QBUAFX_INTERFACEMAP_ENTRY@@B
?_messageEntries@MCSkinAdvisor@@0QBUAFX_MSGMAP_ENTRY@@B
?dispatchMap@MCSkinAdvisor@@1UAFX_DISPMAP@@B
?interfaceMap@MCSkinAdvisor@@1UAFX_INTERFACEMAP@@B
?messageMap@MCSkinAdvisor@@1UAFX_MSGMAP@@B
?s_hRootKey@MCSkinRegistry@@0PAUHKEY__@@A
?s_sDefName@MCSkinRegistry@@0V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@A
?s_sPath@MCSkinRegistry@@0V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@A
?s_strFileName@MCSkinLoader@@2V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@A
?s_strPath@MCSkinLoader@@2VCString@@A
Name
.text
Size
27KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
13KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
864B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=12, version=7291,
count=3, id=11, version=8798,
count=2, id=37, version=8755,
count=1, id=28, version=9178,
count=14, id=25, version=9210,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=3, id=14, version=7299,
count=2, id=11, version=8047,
count=2, id=11, version=8569,
count=3, id=4, version=8569,
count=207, id=1, productName=Unmarked objects,
count=18, id=11, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=3, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Language/WinRar.exe
- IMPHASH 629fae0a56e3262e208711dda6ae6b1d
- SHA256 26b40c79356453c60498772423f99384a3d24dd2d0662d215506768cb9c58370
- MD5 b66dec691784f00061bc43e62030c343
- SHA1 779d947d41efafc2995878e56e213411de8fb4cf
- SHA512 6a89bd581baf372f07e76a3378e6f6eb29cac2e4981a7f0affb4101153407cadfce9f1b6b28d5a003f7d4039577029b2ec6ebcfd58e55288e056614fb03f8ba3
- SSDEEP 98304:lJXOBfK92HbAw0CNB3kJElzNsy8vGUvfCo3ABH43:lJ192HbAXCvDlzNsy8vGUyo3AB8
- MD5 SHA1 SHA512 SSDEEP
Password
8485
Digest
ca:05:77:9a:83:94:f1:c2:84:3b:d1:35:92:02:9e:08:73:69:34:94:e8:62:49:32:6d:ca:10:c8:55:9e:d9:9b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
Chains
Mar 1, 2019
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE
Digest
ed:14:78:6d:47:d9:55:27:5a:d1:dd:f1:22:3e:ed:fc:47:98:f7:f9
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
Chains
Mar 1, 2019
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
Serial Number
52:9e:3f:9f:cf:7d:58:d5:20:d6:07:ab:74:39:50:02
Issuer
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jun 2, 2017 - Jun 1, 2020
Subject
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Issuer
CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
May 30, 2000 - May 30, 2020
Subject
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 9, 2013 - May 8, 2028
Subject
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
Serial Number
52:9e:3f:9f:cf:7d:58:d5:20:d6:07:ab:74:39:50:02
Issuer
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jun 2, 2017 - Jun 1, 2020
Subject
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Issuer
CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
May 30, 2000 - May 30, 2020
Subject
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 9, 2013 - May 8, 2028
Subject
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Issuer
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 12, 2016 - Jan 11, 2031
Subject
CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Issuer
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 23, 2017 - Mar 22, 2029
Minor OS version
2
Major OS version
5
Entry point
140644
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\Projects\WinRAR\sfx\setup\build\sfxrar64\Release\sfxrar.pdb
kernel32
GetLastError
SetLastError
GetCurrentProcess
DeviceIoControl
SetFileTime
CloseHandle
CreateDirectoryW
RemoveDirectoryW
CreateFileW
DeleteFileW
CreateHardLinkW
GetShortPathNameW
GetLongPathNameW
MoveFileW
GetFileType
GetStdHandle
WriteFile
ReadFile
FlushFileBuffers
SetEndOfFile
SetFilePointer
SetFileAttributesW
GetFileAttributesW
FindClose
FindFirstFileW
FindNextFileW
GetVersionExW
GetCurrentDirectoryW
GetFullPathNameW
FoldStringW
GetModuleFileNameW
GetModuleHandleW
FindResourceW
FreeLibrary
GetProcAddress
GetCurrentProcessId
ExitProcess
SetThreadExecutionState
Sleep
LoadLibraryW
GetSystemDirectoryW
CompareStringW
AllocConsole
FreeConsole
AttachConsole
WriteConsoleW
GetProcessAffinityMask
CreateThread
SetThreadPriority
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
ReleaseSemaphore
WaitForSingleObject
CreateEventW
CreateSemaphoreW
GetSystemTime
SystemTimeToTzSpecificLocalTime
TzSpecificLocalTimeToSystemTime
SystemTimeToFileTime
FileTimeToLocalFileTime
LocalFileTimeToFileTime
FileTimeToSystemTime
GetCPInfo
IsDBCSLeadByte
MultiByteToWideChar
WideCharToMultiByte
GlobalAlloc
GetTickCount
LockResource
GlobalLock
GlobalUnlock
GlobalFree
LoadResource
SizeofResource
SetCurrentDirectoryW
GetExitCodeProcess
GetLocalTime
MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
OpenFileMappingW
GetCommandLineW
SetEnvironmentVariableW
ExpandEnvironmentStringsW
GetTempPathW
MoveFileExW
GetLocaleInfoW
GetTimeFormatW
GetDateFormatW
GetNumberFormatW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
HeapSize
SetStdHandle
GetProcessHeap
FreeEnvironmentStringsW
RaiseException
GetSystemInfo
VirtualProtect
VirtualQuery
LoadLibraryExA
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlPcToFileHeader
EncodePointer
RtlUnwindEx
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
QueryPerformanceFrequency
TerminateProcess
GetModuleHandleExW
GetModuleFileNameA
GetACP
HeapFree
HeapAlloc
HeapReAlloc
GetStringTypeW
LCMapStringW
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetEnvironmentStringsW
gdiplus
GdiplusShutdown
GdiplusStartup
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromStream
GdipDisposeImage
GdipCloneImage
GdipFree
GdipAlloc
Name
.text
Size
203KB
Virtual Size
203KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
61KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
136KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.gfids
Size
512B
Virtual Size
208B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
152KB
Virtual Size
156KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, id=241, version=40116,
count=138, id=243, version=40116,
count=13, id=242, version=40116,
count=1, id=199, version=41118,
count=8, id=259, version=24123,
count=19, id=260, version=24123,
count=43, id=261, version=24123,
count=9, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=135, version=30729,
count=5, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=272, id=1, productName=Unmarked objects,
count=48, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
Language/an.txt
- SHA256 0e8dd119dfa6c6c1b3aca993715092cdf1560947871092876d309dbc1940a14a
- MD5 bf8564b2dad5d2506887f87aee169a0a
- SHA1 e2d6b4cf90b90e7e1c779dd16cbef4c787cbd7cf
- SHA512 d3924c9397dc998577dd8cb18cc3ea37360257d4f62dd0c1d25b4d4bf817e229768e351d7be0831c53c6c9c56593546e21fd044cf7988e762fb0a04cd2d4ec81
- SSDEEP 192:ifEAGRBQ0p/74r5jMdDTSBXgDQ7V8vBOC:iV5o74r5jMdY8l
- MD5 SHA1 SHA512 SSDEEP
Language/ar.txt
- SHA256 972261b53289de2bd8a65e787a6e7cd6defc2b5f7e344128f2fe0492ed30ccf1
- MD5 1c45e6a6ecb3b71a7316c466b6a77c1c
- SHA1 04bf837911fa31ffca8e034158714b47f6489d38
- SHA512 5358bb2346c9f23318492b5e7d208e37a703c70d62014426eadd2dd8cda0b91c9d9c2a62eafe0137faefb38bf727fd4d5d8dc18394784ccae75ae9550558e193
- SSDEEP 384:7+CIwRJQh3hY4+6TRxAFqpdQbCs7ZpN4QyRl3fcxMZXj4V/2QT:LJi3K4+60Fqpd8Cs7ZpNryRl3fcxMZX6
- MD5 SHA1 SHA512 SSDEEP
Language/az.txt
- SHA256 caec460e73bd0403c2bcde7e773459bea9112d1bfacbe413d4f21e51a5762ba6
- MD5 81b732a8b4206fb747bfbfe524dde192
- SHA1 4d596b597cf25ff8d8b43708e148db188af18ef9
- SHA512 8667bff18a26fe5b892ecfdc8d9c78ecc5659b42c482e1f9e6eb09f7cf5e825584851cd4e9a00f5c62d3096d24cc9664f8223c036a4f2f6e9c568269b2fbb956
- SSDEEP 192:iQMqAQbtI+SY+oEDQM0ia9mh/Vg/HksiM0ko3gvje2ojVPC1vUZzxEBa2U:i7SrSYzEsMDV4P0kggv6pCahxEwr
- MD5 SHA1 SHA512 SSDEEP
Language/ba.txt
- SHA256 2901b54f7621c95429658cb4edb28abd0cb5b6e257c7d9a364fc468a8b86baae
- MD5 d83b65ac086da0c94d6eb57bee669c2b
- SHA1 6210f62d41d44cc280f44b39accf10da28424b75
- SHA512 56c7ecb4223103d81ffd11c214cceac20e7770b82fbc78a5e82e6dd9d589cc319d4689bb6d9027e5d272097e1b33ddba27a8414fcbc29f9ef68329e343004222
- SSDEEP 192:ikNx8wxsv75EMVB1m6pP3z/WxdxbpXuBwBMzByzVHQnlBJ7a/NMIMx:ikLhsv75EMVB1m6pP3dzk5ww/NMIq
- MD5 SHA1 SHA512 SSDEEP
Language/be.txt
- SHA256 d095879b8bbc67a1c9875c5e9896942bacf730bd76155c06105544408068c59e
- MD5 3c21135144ac7452e7db66f0214f9d68
- SHA1 b1ec0589d769eab5e4e8f0f8c21b157ef5ebb47d
- SHA512 0446a0e2570a1f360fd8700fd4c869c7e2dbb9476bbdec2526a53844074c79691542b91455343c50941b8a6d5e02a58ee6aa539cc4c4ae9cf000b4034ef663e2
- SSDEEP 192:i2PDEeaNB1PmcptkcDHxbTvPnc67bMxQxGx4ch/JuLQRcg/oN96bPNljYiYr197:ikDFKBFmcPLx3HPnIsqrJuqcgAN96b87
- MD5 SHA1 SHA512 SSDEEP
Language/bg.txt
- SHA256 4dcabcc8ab8069db79143e4c62b6b76d2cf42666a09389eacfc35074b61779e3
- MD5 833afb4f88fdb5f48245c9b65577dc19
- SHA1 1a6e013226be42cd2d2872b1e6e5747fab65fe8a
- SHA512 05bbc7abcfd0a0b7c3305c860b6372871cf3927bbe1790351485a315166e4cbdf8d38d63e01b677bdba251ce52da655f20b2d44b997d116a1794c7b3eb61ef31
- SSDEEP 384:i6jWFsfLEnlztmkbjX8jD5VqWMTlHdr8vwyFSH:tfghGufHdrLyFA
- MD5 SHA1 SHA512 SSDEEP
Language/bn.txt
- SHA256 216cc780e371dc318c8b15b84de8a5ec0e28f712b3109a991c8a09cddaa2a81a
- MD5 d0e788f64268d15b4391f052b1f4b18a
- SHA1 2fd8e0a9dd22a729d578536d560354c944c7c93e
- SHA512 d50ea673018472c17db44b315f4c343a2924a2eaa95c668d1160aa3830533ca37cc13c2067911a0756f1be8c41df45669abe083759dcb9436f98e90cbb6ac8bf
- SSDEEP 192:iM+g4O23sZEstg+lTr++0Mx148IiZaXTXEU10bXYc+4/rexX4:iMyc2stg+lTr++0MQ8DZRDYc+4axI
- MD5 SHA1 SHA512 SSDEEP
Language/ca.txt
- SHA256 ed8748da8fa99db775ff621d3e801e2830e6c04da42c0b701095580191a700a6
- MD5 1657720023a267b5b625de17bf292299
- SHA1 0045dfafafb9c9058f7d0d6a6c382959c5a67fe0
- SHA512 e7998f6484370e53db9cdc80cd55070e408aa93161fa59e48c6e2b26462d6d3eb774c011212840ef1eb821a5ba067b6706cd4ca2be00619aecd24a11e6ca136f
- SSDEEP 192:iDNC5+TqX1VvwqqNZ3SE/ye3TmsZmpk0R6PeNJH+L/w3M0ZeDwDWBszBUe:iBhuX1OqqNZ39BDmfHB4yXBUe
- MD5 SHA1 SHA512 SSDEEP
Language/co.txt
- SHA256 5470b36a4a715deca06035333a01e0a2899fce1cf6c29a6ece4c35cfcc843cfd
- MD5 c76b8c615c11469d5f6dff0abf39171e
- SHA1 1906cd1ce4712d79d129fcf32fd2ff87368081ea
- SHA512 c4920988538810b9501c6790a2ed4d4e82500134244b8ae1371f3025bffbc7e6cc73fe1a9839aa2a0d020f2b9cbf0fd09ec99354cb2a65c3d08af519bde38384
- SSDEEP 192:ihVHn4OzB1duTbLH7v6Hosnk8dazlVDFdYojN4/5rA3AOEY9yt0zKdAVJg:ihtnjJuHLH76Hosk8daZV7FjN4RrA3FG
- MD5 SHA1 SHA512 SSDEEP
Language/cs.txt
- SHA256 87a4b9369fd51d76c9032c0e65c3c6221659e086798829072785be589e55b839
- MD5 641b90f9aedfc68486d0d20b40f7eca6
- SHA1 0a683dd844534905336784fadd80498afe26f6fa
- SHA512 567cb9f6c31d196a171e5a9c2726a39a9b3d351ac92d4acf8624213a68c9033acc31afaaad82aa9f5359f32d3a0ca40522e151b8370d553a41abeb6a6e097078
- SSDEEP 192:iRJ98lWxEb5BvGIrd+mc1OTno+SXhbSIm1JjSvcQpK/w:ijK0GeIrQmEOTno+SXox1JjmpKo
- MD5 SHA1 SHA512 SSDEEP
Language/da.txt
- SHA256 f65026ae33d4302a7ef06a856f6f062c9730100f5a87d5c00fb3feaf5fcd5805
- MD5 d8aba2da47c1031832957b75a6524737
- SHA1 b83069ef9f7a08f18804ae966b8d18657e2907cd
- SHA512 82b5f4ab8e3e2310a98be87b5cf2cbf04b7aeae1798cd69529325ee74add40bdca38eda865a821f66436906d4f3224004f690cf406b532e116475d2b2424b570
- SSDEEP 192:7lsrCMNPOVDlCOd6NSv9MPdYJIG8YsYccAP6ox1OYSqMHCaQEzYcdD73Q5CTG:7lsrVwJCe6NzPdYJIG8YsYccuT1RSBCV
- MD5 SHA1 SHA512 SSDEEP
Language/de.txt
- SHA256 06e5265a2b30807296480dc0b0d3a27e41f1381d61229e4eb239c4930d14a43e
- MD5 40ae22f5bcbeab6f622771562d584f2b
- SHA1 4eaa551055ccfa0076766b7bdf111de9dbcc1c82
- SHA512 581a94dc12fe48aebfd88453351697aed9de5b1decf4c5dd53cf4db38d50727d3b887498f0bee6bd532cfbdc8af7bc01fc8d58ce0c3f6fac235bc6ff3f843125
- SSDEEP 192:ifuT0Y83ghfM/5yT9lBJ/LQs6gIgiOvcLh3ahAHE+XAgiRTlu6ZgSboZDWUL+g9C:iG0D3ghcy7Ms6gIgiOktU+Iu6CS4L+g0
- MD5 SHA1 SHA512 SSDEEP
Language/el.txt
- SHA256 cf90a21c69a13e0d674b6b74e2904f7d9d3bee594d89862155d94105311f47a7
- MD5 812df218dae08f9f883a7455015707b2
- SHA1 6e7d7d1c8e783b9b913f44df515f4d376d3502c4
- SHA512 51c3c6151b47fa5e3968604cc2385c5d0984ccb96b8f92982bd28440786e1b99826aa70ae1232465a3469ddb6c50d13a241b6a979387eb47bff013953db1ed07
- SSDEEP 384:iZF/smolE2pHjN6ZdrD2zH9bOrcjfnicC5aLoDNwSF:wNIEZRD2R5jfnic+aLoBwSF
- MD5 SHA1 SHA512 SSDEEP
Language/eng.txt
- SHA256 628366cbe1964564f8bcd0732abfe08cc3f9a86fe761e41abb41f84f7b6ba00a
- MD5 8d7264236adca0407fa61d942b7e575e
- SHA1 21861f62751d2e3d452146ba139e758f20da6f6c
- SHA512 74ab8e70fc3a685ae715368df90e9f6b9630e6dc1091436c244ad486db3faf25bc59ac1b89f90e935e7eb2c6766e19165032fc24824ad8af932ad95a8a34172b
- SSDEEP 192:iZ76FtmZSw5U0LutH5EVCPXUoDzg3TMHig7v7iH+xb:iZnKtH5EVC/U2zg34Cg7Hb
- MD5 SHA1 SHA512 SSDEEP
Language/es.txt
- SHA256 7dddae25296f14c1f45ac032d9c950c3a8d39a41489f9d2b06000edcfa7a6660
- MD5 5a449308a0176d6401181bef4af13765
- SHA1 9d8bc3e801bcfb43c7dbfab94ab91a4079a2070f
- SHA512 2aebd25219b12d88bdf7a4a1b90b6b13b4ed5d4215e15d2316494c56b7d696eeb3252478200bcf0d84160d11979f5a71c72ca110dd3e28e901cfdb13255c45b0
- SSDEEP 192:i3vSP1uIlLvt2WSBL7hBC2pjlRS03gyLuBODltrO9K:i3KPUIlrt29BdGK
- MD5 SHA1 SHA512 SSDEEP
Language/et.txt
- SHA256 d3fc7e1dd6f0486c99997b75d9d8c5592da6cfb9b89c3ec4f59e7bc5826b3456
- MD5 54d610c174514d0f60b382249885963c
- SHA1 4d2c22ba3da557a3e8641f8d5388123d96c8259f
- SHA512 80d51ce4dafa9967ddfa7a8bdf4f62351fa085a7059bc63f9427e0a5e70dc21cb917057f1a41b5e1a218138141dedcadf02e18a0f028ebee8316aaf4ad280d59
- SSDEEP 192:iz52C8/cUN7wdeSxU1ntA9i6fH4XKcmcb7cn:i92EA7jS99i6fH4XKc9b7cn
- MD5 SHA1 SHA512 SSDEEP
Language/eu.txt
- SHA256 536d93ca6d7c96d203b51333c4e78de2429f78d32cc321461589626759c84127
- MD5 29ec04893f6b2c9058a8f1e0beaf9081
- SHA1 8e7b5a0ec24153aa7be02f0395c003df02cf6a09
- SHA512 b84e6606a5f58392de5c5f8113db10b8212a82bb93367469284ad2dd9a961bf381e3d230179ec19a32cae7a266cdde7290d95a262dea247b267fdce905f89972
- SSDEEP 192:igp4YY4DAQwPnrVpoL2Q03nCIQJ861JcBkoZEU4DHYUv:i0JvVwPrVp9lQxHcBkoZEU47v
- MD5 SHA1 SHA512 SSDEEP
Language/ext.txt
- SHA256 3cd8b8633fbc076ee07bf58da6e01ab692df461381a2bad4ef5512c653da46e4
- MD5 f048977cdc74ff4d1f045fb3fd5d0118
- SHA1 4d44f8644a0d41fdde9f7d7732b197a4ebb65dae
- SHA512 48011fbffa45f8809fc6e7d1e8899ee29d4cc6be2cde36484301e71a3c3ffb85cca6cca6a9e9e79af5355b1309834f67d62100ad09aec852d152aca3688d129b
- SSDEEP 192:i+TjfUOQlhcX2jsmnNKjgwlgI34gjwhS9kj6P3eW15Qm0ImA6uBacIUmHm:igLQUmjRt0wD6PHPD0IhBt
- MD5 SHA1 SHA512 SSDEEP
Language/fa.txt
- SHA256 05851ba54b24d7fd45179419aee91a2d40bcab62e6aab99c1a92189fb636bbb2
- MD5 952328b44391b1d4196dfe1f832a16a2
- SHA1 7bf9ced7d272d2df60d2d3984333a6bb26a69377
- SHA512 34cc2908320e349d04babf2e5039dfc18b6aaf9f39bea6192e9d53bced3c661c847cce8a17b9aa6bcb941390da9a7ac40b28a93903c9f1946152a7fd93f43aef
- SSDEEP 192:iSExioqnlY02IxV2ew79hLxH1jIxOw/E9u7tWN/Up73om1qvu:iSEx22j+8TxH1I0zY7hp7V
- MD5 SHA1 SHA512 SSDEEP
Language/fi.txt
- SHA256 24d66c5733314f3f72b7ca0f5ceb5a3246726dddefcf2f033715188edb062db5
- MD5 7ac9d88f81aacef8759e510e9601a4b9
- SHA1 249fe906a2d5a8e084cad76e3e67dad26c77bdb1
- SHA512 00b67a09cc101c557b7c9a5ea623e654407a953fe87ebb5786a7a2e8ba1944130ba4026a64bf83952a14e7a7c719f81351d8a84fe0b3fe9ba553e4796e7a7ec1
- SSDEEP 192:i39+pcahf+fftkY41jF7gEh+fHPZk8fh39BbTk3iTOATOelpwPFy:i39+p3GfixF1gEh+Jk8VDkF3elec
- MD5 SHA1 SHA512 SSDEEP
Language/fr.txt
- SHA256 cc283e9b0c1822f757372c21f179710c4592a2f7755e706c48065bcfe70bba5b
- MD5 b1b6e1c3cf5247ec1618a88f9853d54d
- SHA1 0671cb77ad76f9e27237aa538f8efa6bccc40de3
- SHA512 045422d358b3348a1e52cced12d70757a7e6026801113eb68f07a399acc75b6ecc9a1a4401cb7a65506c6f61d4fbb348765b0c80080072bfe06e0500cf31b0ac
- SSDEEP 192:iNbWj/xYCMXHxl759OMLpwPGzfejsH0qNXRDvG2oZ56LXlX+78+LF3Af7Br1T:iW/0Xxl7fOkpwufqsH0EhbG22KXlu783
- MD5 SHA1 SHA512 SSDEEP
Language/fur.txt
- SHA256 fc944eaa7883341372ebd5ef0e2f236ca248b2996a902240a75218541b600e72
- MD5 dfd698a0f6ed7bf405a8fdd6f33b2315
- SHA1 a8cdbc14ad118c61d484cd62e8c4e7d1141fbb4e
- SHA512 07c5cd9ededc00fc28f878d83d327d91a91edc236b51d05cd8171e43bb175072fe9bf0a4c89d09e21441d8192b08e5c3e5e156fa132b1c657715a5b7cb0488a6
- SSDEEP 192:i3er20XT2wwImuvDQjdkg9E3JIWQ+iWPNULtCG+ydZystz3:i3erJD2wRmubQL9EuiULtCG+ydksZ3
- MD5 SHA1 SHA512 SSDEEP
Language/fy.txt
- SHA256 9fe460264af4abd9ff23eab79387ebb52b4498758645cd5721e75fd7b747e536
- MD5 0111890c0137974fce2d79b6d22e5686
- SHA1 98ab055fa8bf5f410cad55627424d6512338a4a1
- SHA512 86acdb4d62bf9c784bf21999cba5fa3674e70fe5647fdf1dc6a9c5b3cf9c182a18272d9c8400d997bb09e12c908e08a87a951c3d0156a134802e00f70dd1ad90
- SSDEEP 192:ikdpohFyPI4mHJR/eVMIBNgjJdMe1bEIVo5XT3EVULQ:ikmvpRGVwj7Me1bEQgDEV9
- MD5 SHA1 SHA512 SSDEEP
Language/ga.txt
- SHA256 406669ecbdf562e773b9cdf831cf5f63c3dd1a012c3521a41227c9141511d959
- MD5 b4295e254b9dfc90e0093188257c007c
- SHA1 6ae9b959a752c32fab8407b3aa277f300165a579
- SHA512 cc4671a9312b7f41ddecd2e02d038affd58bbc62363b811f15f10002c82ae826e060f5ad6e2b1fd75557b3dc3bbf12b6e6900b398623cf547e3727ccaa6bf8e1
- SSDEEP 192:iOCmUaOzBKdHRZqt83HRE0HruLP2HJioV/TFa18QCbjXsf0VUY+sGa:iTRNtKMt8BM1Y+ba
- MD5 SHA1 SHA512 SSDEEP
Language/gl.txt
- SHA256 54f676333ce58af67b839b0f0470f99f405b5ce7fdb9c345a19d00b6423277e5
- MD5 492e51b4b5b287fe2b90a5f0bd433847
- SHA1 f7e1eba770d3d07d0e8c2bd61d556508ef0578b8
- SHA512 0aa1df55256324b24b495543e4abbefd776108bdd90d3155d02b1c10f018bdbd1700c4430848dfbd5073a374715f8510efb17ae1812a9aa44b65e50edb23de59
- SSDEEP 192:iObNz5MsaqwKlr7UdusuTcaHAB9yVU8SqSd6W5rnuc+Yvy36rV:iOV5jaqwKlr7Ud+LgB9yVdOnuca6rV
- MD5 SHA1 SHA512 SSDEEP
Language/gu.txt
- SHA256 9025d8a58e0c76b186c943ef8a73a1bba6c08945e346de14d3c255ccfa3a10e6
- MD5 410c8a33c66b4b2bc707e113d9c76914
- SHA1 81a9f3618168dbecf309907ee74591ac3b1297b6
- SHA512 a520cf2dc7e9f653bb08c93c657cb8e2d1142e86c3e0bacc44457cba5ede044e91ff01f55139c5aeb7b3f26e51724931ea2b2bb20a058c4b9d888a3ae8766021
- SSDEEP 384:iyxKBXaWdxmWpk2x8QL/XwxD92K+R5+Twk292Bh72/OXMQH12fdvKA52hJV22b2o:FKBz5Cw+wvKAQco
- MD5 SHA1 SHA512 SSDEEP
Language/he.pak
- SHA256 ca440d0128b62e35333730c5925992ae5b4b05a37c10105a9145eb5cf7a77071
- MD5 209974550cc2a835f1879995851b424a
- SHA1 f09850b9e7fffce197e362b9562cd0ff1c5c71ed
- SHA512 4ab857adeab0e45f03868d1208d8f3250bbe27c5854bbc885e94e7e6ed8bcf9bdb2ff5035bebb1958b345ecadf244dcc433d760643ea544066b32f3f1e266276
- SSDEEP 3072:MSeD15QWmU6XrlH/piG5Bnm3XTnZ2F2j9V:MSeD15KPXrlH/piG5BnOXTnZ2F2j9V
- MD5 SHA1 SHA512 SSDEEP
Language/he.txt
- SHA256 dcd061a0a7b29f55fa28d4396f60881836c2df07cd936412c476a7f149540cc4
- MD5 1b53819f8d58fd734b5fd985756b557c
- SHA1 8759783adbd62c6f32511313babb9d138fa0a150
- SHA512 b7f0a16d9d02434e7d1c619768dc1d67c163ad6630c19630c405b5934311c41b65918c61dd5f27555cf5cf629411d57fe2ce04fc6c99a2272d4689b69a078e73
- SSDEEP 192:i3D58xnxi9MoO0EGp/SDB52RM/VtvQPyE7H/Y8vFzicYWrWxusvU3FXxaXbhNXf2:i3V8YdE0cP2RCVFQPyE7YcYGW9U3F490
- MD5 SHA1 SHA512 SSDEEP
Language/hi.pak
- SHA256 1ca6a0546f9627fa9ba3d377d79a21ff26ec9b349d47247c9b241a70728d0699
- MD5 fa034eb13d21ce4e9fc2d3eafdf40cd2
- SHA1 0992d91706d26b6cc2ff64d899308ba4e9380a35
- SHA512 4f8024f43a70d9d8ae67848e2540b028cf1b9183b7dedd66043fb16394601da986d695c8d28f072444a69c1b2639c8b79096065389069fb854d152db166ed734
- SSDEEP 3072:XkOxgTgcwfKSj33cdEVhk7ovrCEO/S/bBfvTHef+a7BKfzzrRE3b8RLljlxCYPhb:rOCi8R
- MD5 SHA1 SHA512 SSDEEP
Language/hi.txt
- SHA256 8cce5e5a846196dac3649483290160177f47d88a7dcf0e85acfd3131856a266a
- MD5 a0fc3c3d880a54918d86b40ffda12f23
- SHA1 34fb9f1b5a6731100466f66e193ab5028b3ec1be
- SHA512 bd1f17d76699f177ce6df4b69f82dfa777a0ae20e243d5fed0605fe951a79d8ae54371b07eb30f075161c108f46be1ce21b162b66cc099c02adb6eb6d5e8f158
- SSDEEP 384:icNErTw7YtUD/xvVxkTTkjxQ10Up/ijaCXEk02VQGKFO8YeY:n601ao2hY
- MD5 SHA1 SHA512 SSDEEP
Language/hr.pak
- SHA256 64e531e46cf5b644d1b7f1df885efcf51a65db50fab65ab250f5e4e1adfa9d29
- MD5 624bce9b02382312f4588d3147b738a3
- SHA1 8df16c75c9e86a96d9f2b11e80eb182ba6c8eef9
- SHA512 e74e56210cb3c184499de4e0d9e57e8ee9d7314b93fb1a97030a3397cc47b91ec74c704b25fc4bd16f4c7680240ae1d39d69cd9f024dd52c90eae9cc6c53b6ae
- SSDEEP 3072:1JKdAGC/lemhlBExypakZUaO2sMMoLaz7v53Kkx9i:lHiKp
- MD5 SHA1 SHA512 SSDEEP
Language/hr.txt
- SHA256 a72f01215eba3be3af6659129dd20f7a42d74f1da08658a9c8ce8e303c3e8f64
- MD5 a0a8a75560efcf15801c96e6d71becc3
- SHA1 b3f7b92d2a13151a14b493108a50a8365c46f6a0
- SHA512 d730c0dc30a299b6bab1b8cfae64d8d4bdea121e651641f578b0947bf5f67669f342ce20198b26fe7881ec99baf290695bc460828198a997b4e59ec91396c217
- SSDEEP 192:iw/kl7v3mUecLy8RIxXr1aYPDIbOPw7zinGjeQOsEyKtizzDQ:ixpvNeBUuXr03inG2tyKtiPDQ
- MD5 SHA1 SHA512 SSDEEP
Language/hu.pak
- SHA256 fdd99d667419612bf98200783e0ccf0f7c11913ca03ca162d72d43f6861e5478
- MD5 ca8a821ff5a6b848c5a170ff9a97bb39
- SHA1 a98b91fa29848013cef021ec8b3a29979cac0c65
- SHA512 e475a09e1f9f740b6c36c9b33b20f263896b869d8ac58848504db29903a9597b84761b9c3918addc9c726d4429a0f496f44e3a8b0cce9a3008d071a5d46bb5c6
- SSDEEP 3072:a1WzOkbJiCwF/iGn1dgTrdA0RdpEtL1543ICJ:eSbY/iGkTtRdpEPu3ICJ
- MD5 SHA1 SHA512 SSDEEP
Language/hu.txt
- SHA256 ef79e98fc911e0d0d16bd061a65f50f5e50caa011699852e1608a2629b8ba37d
- MD5 eebea9c4e71a5d2820f5e8972822800f
- SHA1 e9f5e741995bf92266e5b6d6891896e5b9cc1f42
- SHA512 01b4bd586a1b2629b94dab877510110e6fa1286eb9cdf7882539d42466609d830489ba450e7e7cc41958f463227f5376151f912591aa88c7866182374ed574a5
- SSDEEP 192:iZEtt30B1cWELI7BD5QoMJu2dGiYU8dGfVFr6ksQA3+oV6YVSUJRPn:iaHOvxlQhJu2dLVUGfVFr6ksp3+oV63q
- MD5 SHA1 SHA512 SSDEEP
Language/hy.txt
- SHA256 d8f60bf92541d20d01f6ddd56d49f25519303fd16e285e18080be6815b74b8a8
- MD5 1362c3c286cff992117d5466bbe284f6
- SHA1 faf50ecdb6db6cd6ba9e0ae18e7fad64511048c7
- SHA512 1834fe901b1182b793872e2a822801966abdf312873e15877e589b9c6a58d04e06a2c60b26d2209fe7048f7ea9befe0f6b39630eb4c5578a54735b6840677205
- SSDEEP 192:igxIecm/mNxhlsms7CBFPwWbLkSMBvAoPz3qkZXDwC7o9F9f:iTeB4lE7Gw8KoqznlT2F9f
- MD5 SHA1 SHA512 SSDEEP
Language/id.txt
- SHA256 18c4531e9fc00ed242f1c0526dbcd0a3d1ada9bcfee651ae950328ac872a216f
- MD5 73b9f189f0c37d7cf37df8db89fb52af
- SHA1 060ad5b22f8dd408260b7210392c0a6f6271fbff
- SHA512 f8dca8e9aecbaa7fd596535fb792314253814098c1089262ed36e78960ffebe377c6436354228a9b4e17bb87fa6e1833110fd843c63bbce3294262b623df86e0
- SSDEEP 192:iQLoEmEjXCv1MYlMRsF40N+7EeN2ev9KJ3nhuCoLqY:i0oEmEjCv7lmsF67yev9KJ3nJouY
- MD5 SHA1 SHA512 SSDEEP
Language/is.txt
- SHA256 f4f9d6dfd36512f027452499b083ad0656df6503ce03e4e4cc45b925f1f1d678
- MD5 f361950b7d1bb073ef48ca729b7ed5ea
- SHA1 8c5d3fb8e09c9682c6256f05f82ca67c58f0ff2b
- SHA512 6163fb77d3155525a563ad907cdf48fa18a6ce019a073c7d9dc2438927217d0d8534ada7fc444114f14ac216c89d12e83f5b582021be693baec80bd69199909e
- SSDEEP 192:7vbGuJ7kBfcLpMPz89Pwkr5fXnNB3RQMFWdZtffvTqBmV4jLASZE33txMF:7vbrJ7k+Lpy8ukr5fXnNXxFaWBm4jLAu
- MD5 SHA1 SHA512 SSDEEP
Language/it.txt
- SHA256 dd0a9a9ce33d25a9f6c461a6e43721e975b8b1e189c3d5b81f1dad0ff12870be
- MD5 87efe148b443c6b50eab945e27f9b39a
- SHA1 d4a46f9a798c381a7415de8b74b296f5632124c1
- SHA512 3f391e6c840ea267f500e7912e87e8696099aee683a0a656a97033dec8de38f875c60dc21e9332a7e24ca3e2ae8c404fd936f915ad8c8a05eab090c355916dd1
- SSDEEP 192:iqlpzc7zUwLkm5g6dLeUPezxs+GGWFP2oJhD0k8nv8C/PZmvmVxPdYjgl0h24oUf:imzo15g6cUPim+GGWVJhSvNP6mVxPdYP
- MD5 SHA1 SHA512 SSDEEP
Language/ja.txt
- SHA256 b0150c2b3d2ad9b37a7f47a24466aea4a56ced728caf12d02b407fd0080602ab
- MD5 470b0ca449e9f34bb34244a7ef39441b
- SHA1 471c37014eff0214ce757b6e88987fb9e2b31931
- SHA512 1e2d690e484449fa4859836f7ab880d512e98e5f996bf679ecb3a5c3ca8a3fc7e9fed4e6c2470fff790ce22bb6aa407d951ec6c7ced571b5ac8e86ca873f3afa
- SSDEEP 192:i5bovSMlRAuVo6k8FUW7Plm6eAY/yCIQ4YftM40EZwGltXuWRzoaGN:i5svH80I8B1Y/C40yXRRzoaGN
- MD5 SHA1 SHA512 SSDEEP
Language/ka.txt
- SHA256 b78defec49d07120b74c2172f3e07540314771b16729c6bbfc3a1902ece2eda0
- MD5 eb2af4dc4c28275ae1876523944d708e
- SHA1 bfb87569112a081a99ecd5bfdcc6f2aead07f67b
- SHA512 e04680a6050fc6b3d0bf50a092f5fe2049bedf705f479fb5c45852e4cc19d1b735b85166da15ea67dbeb3aacf39dbe6c80eda9d4c180805d87762468875ab49a
- SSDEEP 384:ikzn3UlfDnVKqnB+C0aHgtyr6g5W0p5rUbVkmUmqIcR5mFuBUPNIazj:7sMW6gnAbVkmUm3
- MD5 SHA1 SHA512 SSDEEP
Language/kaa.txt
- SHA256 4d631602ce3d0c4d9162af6bf56a90c8eef75a24d556b729191b62f79aba0681
- MD5 dfba5c2185e113eef167a5e21c32df76
- SHA1 e36703d7d1954e3f1729a0497674ec15c41a2f76
- SHA512 3271b66114bd6f145693258c5e84a175acb3db865169734a9beb5de7f9aefd06b4144650dc0e98fd47dd38ad3cabd26415640cddc8ac611c23d14487e975fb70
- SSDEEP 192:iGKztgVKxXfv5NKHLm9ufAX7M5amaRi5WsU1Ok/VO1ri:iGStuYXfvBXQiuWslk/sBi
- MD5 SHA1 SHA512 SSDEEP
Language/kab.txt
- SHA256 b8a7a5182dfdacc9baccb412e161c60864d3b5d30038935122c736ae4f4ebc22
- MD5 c6ac7aad8bce83ac69f197db9d4529f8
- SHA1 5fa31ccfa23b753cee7aee7ee65915aaa94f9b01
- SHA512 a643e38a5801a50fd318fefeb0245b8935c818737b860839c15fa09b0cc0e9ef55eb455e3ceaf8b2263ae23b5befd1e6013ba63c4abd1b89627905498ff026be
- SSDEEP 192:iFKQ2IdVUQs/gSSmlPgUulpuDUed3JhFyglCxCxqJo+Msp04ndCVv:iY7IrsgSSmlPgXpUUed3Jh8FCxaB/dCF
- MD5 SHA1 SHA512 SSDEEP
Language/kk.txt
- SHA256 f2e6e55c102485e232daad00f68d8905f7a54f8ae2128db6afe25231c17acd69
- MD5 f4c46b450a580ad5abf0b638dcdcc6fb
- SHA1 750dfddddadee9cfe0e8f651f1c6cc38cf1fcd78
- SHA512 24b6dc7b491302b905c1e20e67ddab16af9420820b6c83406618e017fa84d952661087e2ea577831441e8a3c82ef697de713597e33626aed787f3485dd9b1f7d
- SSDEEP 192:iwHw0jjl8sq/UDEAY40JI0lkMPK+K4ppfdMMda764a:iwHw0jjiRUD8kMPJqMdj4a
- MD5 SHA1 SHA512 SSDEEP
Language/ko.txt
- SHA256 58a2dd10438c1199653c1bcd88c520ddb437fa8e01bcf311130ada0a626151c7
- MD5 55e8685ac21571f0b5f11a4d5fa088f9
- SHA1 285d09b7a8adcab4e5d72928487c711b8f48b8fb
- SHA512 bd95e5f82e17494404e7319f5cdc1b4bdd868b2ae73be1cf407f9f1e54b360bf75a36993a60a14d29e4af3ec15e0538f23e1f22dca1153bd01fc0ba964390337
- SSDEEP 192:i36rCE/KKcFaeVLs7sdGBbeO9onv40if8Knv3E3q9FGdUBUe:i6CE/KKcQSLsJbeOqti0KvoAGdqUe
- MD5 SHA1 SHA512 SSDEEP
Language/ku-ckb.txt
- SHA256 19af39960142b8599153a09ef4f03f944fc00999beb9fe2399f5f8b236716eef
- MD5 c90d029172a8533946ef7419bf383305
- SHA1 7b3d96899f5935e559626d215517315c04207627
- SHA512 b0a711161ce233e5b9231c21abfd721bca6a85567debc6cc9c033c68d0a6e1292f369dbf1ea52b4088658d13263c245ea37752e87abd8b2aa878b5270ef0b1be
- SSDEEP 192:igHCpEmyIRe0g/OQMEuDP9Y799boVTiUaml4hSf7UAlA+cA90s5bKlcRBfwCiIEW:ivjQMTDShMTiUaTSfwA90sglMRMj2z/
- MD5 SHA1 SHA512 SSDEEP
Language/ky.txt
- SHA256 4ef68fbd8ab002bbf4cd6d1c9fd6d87a5fde048afd2ef162b727259eb97d70d2
- MD5 7d0420ee265c9122dc11ef964871e179
- SHA1 4b84b209e5a637869e501d54ff0b535bd3924851
- SHA512 0ddcd7871e61b76acf3fa0224519ed8e29c33234c300097f69e799951f8f9e87943a4f755f1362856f0c2a3804c399e466cf08cf0e189ec7bcdf744e07c61635
- SSDEEP 384:ikVDGPB8R8wedC+GwW2womKx4rXNMQOpR2avWPYx3jqSxv:78Z8+7CS8uiMkARuSN
- MD5 SHA1 SHA512 SSDEEP
Language/lij.txt
- SHA256 431cae1bb77633fdf3ce339e97bc5d5d885779decc01ed03583e381f097a2487
- MD5 372bc4a26b676c48cf8fefab3711b91d
- SHA1 39da7ac5a483bd675657c24f875c2cee93204a1e
- SHA512 0bf4ded969bc2af21b806fea241b7f0a312d8d4d9c81b14293e352e09dc31b3b876c77c155b6c9769d89b169d8de65c4f52b649acbf90af14e75ccd6bb8157df
- SSDEEP 192:iIxLxXfim7pf7nJePcyzqBJv3/gxqwP95y:iIxLxXTFDnxoxqwP94
- MD5 SHA1 SHA512 SSDEEP
Language/lt.txt
- SHA256 c5da5b37be32fa4cdd8b938d479c0327b84c9f83c948eb7e65f4ddc15a6beeae
- MD5 92d03523dd0e7e7b2862a6396abad455
- SHA1 ea1fc2bac5ab8d5ee329a5945f1ed90269cb7aec
- SHA512 1fb0ae4117dd69418ecc371f699630d79f89daaa3099f57ebfa4a7de398cbdef095e0b029a547dfb6936a336a9e2748b880ec83a65554a1858f2f87104d63e27
- SSDEEP 192:inIsB9j4K01iwimxhiZ8yczB7XhyyYR1gQEfo9GcC7MDc:inIsyiwnhiZ1czn9YwQuZ7MDc
- MD5 SHA1 SHA512 SSDEEP
Language/madHcNet32.dll
- IMPHASH 1e157842e5cd99d6e1fd082c5f35c9fa
- SHA256 95b538b47e02d0ad2bd15d47efc18695d5e379ef61568b81ef405773d9c199bb
- MD5 d22b9da713ab36102c9c3d812af8c12d
- SHA1 371fdbf6ae6a9a2e5c0560fc94eba3290028a252
- SHA512 e5ae51f79403358af60bb3ea663251badac57414813f5537d763b0b95504a393fb2d34c94c4b7328ec13f58e74a7147d3a72e63e62973c4c5d80671be1c8face
- SSDEEP 24576:TlUbWq3/gquYUJ4Vgv0eUnDaE0efxfXT95:pUR4quYUJ4VgceXE0gxfjv
- MD5 SHA1 SHA512 SSDEEP
Digest
56:33:a8:5c:fd:08:d1:07:b4:19:5c:8c:4e:4f:aa:0d:61:82:2c:4e:c7:2b:cd:48:76:75:68:4e:98:8d:d9:75
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Systemsoftware Mathias Rauen (Mathias Rauen),O=Systemsoftware Mathias Rauen (Mathias Rauen),L=Hamburg,ST=Hamburg,C=DE,1.2.840.113549.1.9.1=#0c106d616473686940676d61696c2e636f6d
Chains
Aug 29, 2018
CN=Systemsoftware Mathias Rauen (Mathias Rauen),O=Systemsoftware Mathias Rauen (Mathias Rauen),L=Hamburg,ST=Hamburg,C=DE,1.2.840.113549.1.9.1=#0c106d616473686940676d61696c2e636f6d
CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=Systemsoftware Mathias Rauen (Mathias Rauen),O=Systemsoftware Mathias Rauen (Mathias Rauen),L=Hamburg,ST=Hamburg,C=DE,1.2.840.113549.1.9.1=#0c106d616473686940676d61696c2e636f6d
CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
PE Signature issue
Digest
f9:b1:33:5f:66:ed:06:7c:40:bb:f3:ad:cf:3d:6f:fd:35:14:53:b9
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Systemsoftware Mathias Rauen (Mathias Rauen),O=Systemsoftware Mathias Rauen (Mathias Rauen),L=Hamburg,ST=Hamburg,C=DE,1.2.840.113549.1.9.1=#0c106d616473686940676d61696c2e636f6d
Chains
Aug 29, 2018
Subject
CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE
Serial Number
04:00:00:00:00:01:2f:4e:e1:52:d7
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Apr 13, 2011 - Jan 28, 2028
Subject
CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE
Serial Number
04:00:00:00:00:01:2f:4e:e1:35:5c
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 13, 2011 - Apr 13, 2019
Subject
CN=GlobalSign TSA for MS Authenticode - G2,O=GMO GlobalSign Pte Ltd,C=SG
Serial Number
11:21:d6:99:a7:64:97:3e:f1:f8:42:7e:e9:19:cc:53:41:14
Issuer
CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 24, 2016 - Jun 24, 2027
Subject
CN=Systemsoftware Mathias Rauen (Mathias Rauen),O=Systemsoftware Mathias Rauen (Mathias Rauen),L=Hamburg,ST=Hamburg,C=DE,1.2.840.113549.1.9.1=#0c106d616473686940676d61696c2e636f6d
Serial Number
11:21:32:2d:39:bd:45:ac:62:3d:37:5b:22:c2:43:d6:07:6b
Issuer
CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Nov 24, 2015 - Dec 24, 2018
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
04:00:00:00:00:01:25:07:1d:f9:af
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Nov 18, 2009 - Mar 18, 2019
Subject
CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Serial Number
48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning
Timespan
Jun 15, 2016 - Jun 15, 2024
Subject
CN=Systemsoftware Mathias Rauen (Mathias Rauen),O=Systemsoftware Mathias Rauen (Mathias Rauen),L=Hamburg,ST=Hamburg,C=DE,1.2.840.113549.1.9.1=#0c106d616473686940676d61696c2e636f6d
Serial Number
16:98:0f:59:4c:d4:ee:7b:44:e0:8d:bb
Issuer
CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 30, 2016 - Dec 24, 2018
Subject
CN=GlobalSign TSA for Standard - G2,O=GMO GlobalSign Pte Ltd,C=SG
Serial Number
11:21:b4:55:35:1e:bb:1a:b2:4f:97:ef:07:fe:2a:b3:0b:8a
Issuer
CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 24, 2016 - Jun 24, 2027
Subject
CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE
Serial Number
04:00:00:00:00:01:2f:4e:e1:52:d7
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Apr 13, 2011 - Jan 28, 2028
Minor OS version
0
Major OS version
5
Entry point
813620
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
oleaut32
SysFreeString
SysReAllocStringLen
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopy
VariantClear
VariantInit
advapi32
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
SetSecurityDescriptorDacl
RegSetValueExA
RegSetValueExW
RegQueryValueExA
RegQueryValueExW
RegQueryInfoKeyA
RegOpenKeyExA
RegOpenKeyExW
RegEnumKeyA
RegEnumKeyExW
RegDeleteValueA
RegDeleteValueW
RegCreateKeyExA
RegCreateKeyExW
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
InitializeSecurityDescriptor
GetUserNameA
GetUserNameW
GetTokenInformation
FreeSid
AllocateAndInitializeSid
AdjustTokenPrivileges
user32
CharNextW
LoadStringW
SetWindowLongW
GetWindowLongW
CreateWindowExA
CreateWindowExW
WindowFromPoint
WaitForInputIdle
UnregisterClassA
TranslateMessage
SystemParametersInfoW
ShowWindow
SetWindowTextA
SetWindowTextW
SetWindowPos
SetTimer
SetRect
SetForegroundWindow
SetFocus
SetCursor
SetClipboardData
SetCapture
SetActiveWindow
SendMessageTimeoutA
SendMessageA
SendMessageW
ScreenToClient
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageW
RegisterClassA
RegisterClassW
PostThreadMessageA
PostThreadMessageW
PostQuitMessage
PostMessageA
PostMessageW
PeekMessageA
PeekMessageW
OpenClipboard
OffsetRect
MsgWaitForMultipleObjects
MessageBoxA
MessageBoxW
MessageBeep
LoadStringW
LoadImageA
LoadImageW
LoadCursorW
KillTimer
IsWindowVisible
IsWindowUnicode
IsWindowEnabled
IsWindow
IsIconic
IsDialogMessageW
InvalidateRect
InflateRect
GetWindowThreadProcessId
GetWindowTextA
GetWindowTextW
GetWindowRect
GetWindowPlacement
GetWindowDC
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSysColor
GetWindow
GetMessageA
GetMessageW
GetKeyState
GetIconInfo
GetFocus
GetDC
GetCursorPos
GetCursor
GetClientRect
GetClassNameA
GetCapture
FrameRect
FindWindowA
FillRect
EnumWindows
EnumDisplayDevicesW
EndPaint
EnableWindow
EmptyClipboard
DrawTextA
DrawTextW
DrawIconEx
DrawFrameControl
DrawFocusRect
DispatchMessageW
DestroyWindow
DestroyIcon
DefWindowProcA
DefWindowProcW
CreateIconIndirect
CloseClipboard
CharUpperBuffW
CharUpperW
CallWindowProcA
CallWindowProcW
BringWindowToTop
BeginPaint
AttachThreadInput
GetMonitorInfoW
kernel32
Sleep
VirtualFree
VirtualAlloc
lstrlenW
VirtualQuery
GetTickCount
GetSystemInfo
GetVersion
CompareStringW
IsDBCSLeadByteEx
IsValidLocale
SetThreadLocale
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GetLocaleInfoW
WideCharToMultiByte
MultiByteToWideChar
GetConsoleOutputCP
GetConsoleCP
GetACP
LoadLibraryExW
GetStartupInfoW
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetCommandLineW
FreeLibrary
GetLastError
UnhandledExceptionFilter
RtlUnwind
RaiseException
ExitProcess
SwitchToThread
GetCurrentThreadId
CreateThread
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
FindFirstFileW
FindClose
WriteFile
SetFilePointer
SetEndOfFile
ReadFile
GetFileType
GetFileSize
CreateFileW
GetStdHandle
CloseHandle
GetProcAddress
RaiseException
LoadLibraryA
GetLastError
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
LocalFree
LocalAlloc
FreeLibrary
lstrlenW
lstrcpyW
lstrcmpiW
lstrcmpA
WriteFile
WideCharToMultiByte
WaitForSingleObject
WaitForMultipleObjects
VirtualQuery
VirtualProtect
VirtualFree
VirtualAlloc
VerSetConditionMask
VerifyVersionInfoW
UnmapViewOfFile
TerminateThread
TerminateProcess
SystemTimeToFileTime
SuspendThread
Sleep
SizeofResource
SetUnhandledExceptionFilter
SetThreadPriority
SetNamedPipeHandleState
SetLastError
SetFilePointer
SetFileAttributesA
SetFileAttributesW
SetEvent
SetErrorMode
SetEndOfFile
ResumeThread
ResetEvent
RemoveDirectoryA
RemoveDirectoryW
ReleaseSemaphore
ReleaseMutex
ReadProcessMemory
ReadFile
RaiseException
QueryPerformanceFrequency
QueryPerformanceCounter
OpenProcess
OpenFileMappingA
OpenFileMappingW
OpenEventW
MapViewOfFile
LockResource
LocalSize
LocalFree
LocalAlloc
LoadResource
LoadLibraryA
LoadLibraryW
LoadLibraryExA
LeaveCriticalSection
IsValidLocale
IsBadReadPtr
InitializeCriticalSection
GlobalUnlock
GlobalMemoryStatus
GlobalLock
GlobalFree
GlobalAlloc
GetWindowsDirectoryA
GetVersionExA
GetVersionExW
GetVersion
GetTickCount
GetThreadPriority
GetThreadLocale
GetThreadContext
GetTempPathA
GetTempPathW
GetSystemTime
GetSystemDirectoryW
GetStdHandle
GetProcAddress
GetPriorityClass
GetModuleHandleA
GetModuleHandleW
GetModuleFileNameA
GetModuleFileNameW
GetLocaleInfoA
GetLocaleInfoW
GetLocalTime
GetLastError
GetFileTime
GetFileSize
GetFileAttributesA
GetFileAttributesW
GetExitCodeThread
GetDiskFreeSpaceA
GetDiskFreeSpaceW
GetDateFormatW
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetCurrentDirectoryA
GetCurrentDirectoryW
GetComputerNameA
GetComputerNameW
GetCommandLineA
GetCommandLineW
GetCPInfo
FreeResource
InterlockedIncrement
InterlockedDecrement
FreeLibrary
FormatMessageA
FormatMessageW
FlushInstructionCache
FindResourceA
FindResourceW
FindNextFileA
FindNextFileW
FindFirstFileA
FindFirstFileW
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FileTimeToDosDateTime
ExpandEnvironmentStringsA
ExpandEnvironmentStringsW
ExitThread
ExitProcess
EnumSystemLocalesW
EnumCalendarInfoW
EnterCriticalSection
DuplicateHandle
DeleteFileA
DeleteFileW
DeleteCriticalSection
CreateThread
CreateSemaphoreW
CreateProcessA
CreateProcessW
CreatePipe
CreateMutexA
CreateMutexW
CreateFileMappingA
CreateFileMappingW
CreateFileA
CreateFileW
CreateEventA
CreateEventW
CreateDirectoryA
CreateDirectoryW
CopyFileA
CopyFileW
CompareStringW
CloseHandle
Beep
Sleep
RtlUnwind
OpenThread
gdi32
TextOutA
TextOutW
StartPage
StartDocA
StartDocW
SetTextColor
SetMapMode
SetBkMode
SetBkColor
SelectObject
SelectClipRgn
MoveToEx
LineTo
GetTextMetricsW
GetTextFaceA
GetTextExtentPoint32A
GetTextExtentPoint32W
GetStockObject
GetRgnBox
GetObjectW
GetDeviceCaps
GetDIBits
GdiFlush
EndPage
EndDoc
DeleteObject
DeleteDC
CreateSolidBrush
CreateRectRgnIndirect
CreatePen
CreateFontA
CreateFontW
CreateDIBSection
CreateDCW
CreateCompatibleDC
CombineRgn
BitBlt
version
VerQueryValueA
VerQueryValueW
GetFileVersionInfoSizeA
GetFileVersionInfoSizeW
GetFileVersionInfoA
GetFileVersionInfoW
netapi32
NetWkstaGetInfo
NetApiBufferFree
NetServerEnum
ole32
CoInitialize
comctl32
ImageList_GetIcon
ImageList_Destroy
ImageList_Create
InitCommonControls
shell32
SHGetFileInfoW
ShellExecuteExA
ShellExecuteA
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetMalloc
comdlg32
PrintDlgW
GetSaveFileNameA
GetSaveFileNameW
wsock32
WSACleanup
WSAStartup
WSAGetLastError
gethostbyname
socket
shutdown
setsockopt
sendto
send
select
recvfrom
recv
listen
ioctlsocket
inet_ntoa
inet_addr
htons
getsockname
getpeername
connect
closesocket
bind
accept
dnsapi
DnsRecordListFree
DnsQuery_A
iphlpapi
IcmpParseReplies
IcmpSendEcho2
IcmpCloseHandle
IcmpCreateFile
GetAdaptersInfo
GetAdaptersAddresses
GetIpNetTable
AutoNet_AddConnectionCallback
AutoNet_Announce
AutoNet_Broadcast
AutoNet_BufToIcon
AutoNet_Connect
AutoNet_DecodeHello
AutoNet_DelConnectionCallback
AutoNet_EncodeHello
AutoNet_FinalComponent
AutoNet_GetHello
AutoNet_GetStorage
AutoNet_InitComponent
AutoNet_Listen
AutoNet_Search
AutoNet_Send
AutoNet_WaitForSearchCompletion
Localize_ConnectDialog
Localize_IpAddressDialog
Ping
madGetCurrentIpAddr
madGetFreezeReport
madGetGpuRamSize
madGetGpuUserModeDrivers
madGetMonitorInfo
madHandleException
madNameThread
madTraceProcess
madVR_BlindConnect
madVR_Connect
madVR_ConnectDialog
madVR_ConnectEx
madVR_ConnectToInstance
madVR_ConnectToIp
madVR_Convert3dlutFile
madVR_ConvertHdr3dlutFile
madVR_Create3dlutFileFromArray256
madVR_Create3dlutFileFromArray65
madVR_CreateHdr3dlutFileFromArray256
madVR_CreateHdr3dlutFileFromArray65
madVR_Disable3dlut
madVR_DisableFseMode
madVR_Disconnect
madVR_Enable3dlut
madVR_EnableFseMode
madVR_EnterFullscreen
madVR_Find
madVR_Find_Async
madVR_GetBlackAndWhiteLevel
madVR_GetDeviceGammaRamp
madVR_GetPatternConfig
madVR_GetSelected3dlut
madVR_GetVersion
madVR_GetWindowSize
madVR_IsDisableOsdButtonPressed
madVR_IsFseModeEnabled
madVR_IsFullscreen
madVR_IsHdrButtonPressed
madVR_IsLocal
madVR_IsMaximized
madVR_IsMinimized
madVR_IsRestored
madVR_IsStayOnTopButtonPressed
madVR_IsUseFullscreenButtonPressed
madVR_LeaveFullscreen
madVR_Load3dlutFile
madVR_Load3dlutFromArray256
madVR_Load3dlutFromArray65
madVR_LoadHdr3dlutFile
madVR_LoadHdr3dlutFromArray256
madVR_LoadHdr3dlutFromArray65
madVR_Maximize
madVR_Minimize
madVR_Quit
madVR_Restore
madVR_SetBackground
madVR_SetDeviceGammaRamp
madVR_SetDisableOsdButton
madVR_SetHdrButton
madVR_SetHdrMetadata
madVR_SetOsdText
madVR_SetPatternConfig
madVR_SetProgressBarPos
madVR_SetSelected3dlut
madVR_SetStayOnTopButton
madVR_SetUseFullscreenButton
madVR_SetWindowSize
madVR_ShowProgressBar
madVR_ShowRGB
madVR_ShowRGBEx
Name
.text
Size
785KB
Virtual Size
785KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.itext
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
30KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.bss
Size
Virtual Size
24KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.didata
Size
512B
Virtual Size
456B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rdata
Size
512B
Virtual Size
68B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
51KB
Virtual Size
50KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
Language/mk.txt
- SHA256 78f5cb9345ab258cf745eaa90d44c7a7a73d3fe06ea182b1298a989135ffa11f
- MD5 71d42abe45803ac9c3da5fcacf9cc59c
- SHA1 98a1049906972abb480abaf1f5658c1b8c10f27c
- SHA512 a0096575d6f911cc2600dac93d6fd7aa8d9e2f9f71a92571a76996fb4c47bdb714bba453c862b3f42cc5f4baaf2aed1dff3c9d6f84a3e2053ff2037c56ab85a5
- SSDEEP 192:ia3g0F7SHayJ5vKVEB3Bxg5GteGIxpWNMll39oWvt/i4drxJ4MrZEXSW:iWg0zyJlKVEB3A6SM2mWvt/i4dtJ4MNO
- MD5 SHA1 SHA512 SSDEEP
Language/mn.txt
- SHA256 cf5245d17224f85011ed85062957dbfd936dd760a214980fc8f2eb69e6ba3cfc
- MD5 8756027adf94b3cc3d6c42f0d3fb4af0
- SHA1 823bdbc5abf1d2f3528aa319a417ee090d1c6928
- SHA512 92715a814d24318533ba26af542b174df12e5d8cd40251bc27890345eb6c64d174448745b2b138bd0a7e0fa0d96b803fab9b29f89767729e64a95b164fb27f29
- SSDEEP 192:i2GVqAYj834yHocynU6GwgeBLHvNlIfYfFCkMupHCwFxhjPQtQP1d/R1JTPUJ:i7kIYfUjuZxhDDHZQJ
- MD5 SHA1 SHA512 SSDEEP
Language/mng.txt
- SHA256 92898472c1db5248b0556fb5bafda8090684249b561de5ef2a84c10f2f4383ca
- MD5 ba28c5c312d1a7827b40ed84f1f6f85b
- SHA1 72788c4b14c47a3988245e81fc6e7bbb8f88442f
- SHA512 35871824adede6169118087d28fe3c78ea09cb259c7c168e83a22ca74c024d9f0d61250ad1fc9f75b71a8ee5235a12ffd52c146b8232b7bea84ec024b19da7d5
- SSDEEP 384:ip3jpGUSlwi6aHQIXqB6B22bKP995BOqB8A5Y8KsC3u6cIVFJFGtMksJYkXoFs85:MWJbm50qN5Esd6t/XWjgqVpzs4XZd8sL
- MD5 SHA1 SHA512 SSDEEP
Language/mng2.txt
- SHA256 47bfe43f3f5a88a0f366fb317a542cdc1e216f8c368ddc67252480ede7d130f4
- MD5 a0d06dc2b7f53acd8cdebf7864080cd1
- SHA1 a4b9c4d1c4355bd90356e60289fb4efce0046b6a
- SHA512 811fdbfc11f8db60b2d059d433495fd50220e5a718ed9fe7f9c422d9695353825129b05e0f287419d4784c3564ea7cf7be9117c4408170f4afa3353fbc875442
- SSDEEP 192:ip3pxHmpcSmhZcbnD1e+Ft9780rdLdNQwL4rG/d+RWsB/O54Q4gLwqZ816d20xUS:ip3jJfHp4BLLCJOIYB
- MD5 SHA1 SHA512 SSDEEP
Language/mr.txt
- SHA256 08b8f7ff35dd4315133e04fd17b6fb896d63b9c87040a2cc68a83e81ea4efd78
- MD5 2e9fc42dbd17e30f8db8205fa2d18543
- SHA1 60639e6d06a38d5c507136c130a172d606b698e7
- SHA512 7e1aa7234dc2c07654847de01600787ba735e9ccf5d376d37696f3810418a357beb1d611a164fdfd7a24ca33e7bed150df08187d4ade6c973c45be5df74fd95f
- SSDEEP 192:iSdCIrunpyKHseL4bzwltFrjVL0TEpbpFeki8rJNhBB:iSt6pypS4A7FYA1r
- MD5 SHA1 SHA512 SSDEEP
Language/mvrSettings32.dll
- IMPHASH e143d001bea94d24e61013ddbd97bbf0
- SHA256 a7827463e9587a238db927cf61ab92b95c0ef52b18467583dd859bed98543da7
- MD5 94321a6d490ca5442cf36b07db16419c
- SHA1 639e08bc92106902facf7cefdc9b340682572b2a
- SHA512 1944916ca997c01a11c77016791612382832af6ab4822992694460ac4c9e5ba72e193416fa17c898a1d201826bdaf3176a2b303c035a37b124ccd4937d4f4b74
- SSDEEP 12288:9wsK8YWuTCipwKm3ZCdX+y0Cg57ZrVmK5UhYX5NN/u3ZeEb+LJkKuZl1Y1e:P6WuFKKVuig5jZ5xX5P2bKyKu1j
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
4a:85:be:8c:11:65:86:d7:63:d9:09:3f:5d:91:68:c7:05:11:dd:21:70:5c:47:1d:1e:cc:9a:c6:55:69:1a:35
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=Systemsoftware Mathias Rauen (Mathias Rauen),O=Systemsoftware Mathias Rauen (Mathias Rauen),L=Hamburg,ST=Hamburg,C=DE,1.2.840.113549.1.9.1=#0c106d616473686940676d61696c2e636f6d
Chains
Sep 29, 2018
CN=Systemsoftware Mathias Rauen (Mathias Rauen),O=Systemsoftware Mathias Rauen (Mathias Rauen),L=Hamburg,ST=Hamburg,C=DE,1.2.840.113549.1.9.1=#0c106d616473686940676d61696c2e636f6d
CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=Systemsoftware Mathias Rauen (Mathias Rauen),O=Systemsoftware Mathias Rauen (Mathias Rauen),L=Hamburg,ST=Hamburg,C=DE,1.2.840.113549.1.9.1=#0c106d616473686940676d61696c2e636f6d
CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
PE Signature issue
Digest
59:ad:f2:d5:01:e1:7d:c4:fb:b4:ca:fe:78:ef:eb:a0:32:95:6b:0f
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=Systemsoftware Mathias Rauen (Mathias Rauen),O=Systemsoftware Mathias Rauen (Mathias Rauen),L=Hamburg,ST=Hamburg,C=DE,1.2.840.113549.1.9.1=#0c106d616473686940676d61696c2e636f6d
Chains
Sep 29, 2018
Subject
CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE
Serial Number
04:00:00:00:00:01:2f:4e:e1:52:d7
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Apr 13, 2011 - Jan 28, 2028
Subject
CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE
Serial Number
04:00:00:00:00:01:2f:4e:e1:35:5c
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 13, 2011 - Apr 13, 2019
Subject
CN=GlobalSign TSA for MS Authenticode - G2,O=GMO GlobalSign Pte Ltd,C=SG
Serial Number
11:21:d6:99:a7:64:97:3e:f1:f8:42:7e:e9:19:cc:53:41:14
Issuer
CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 24, 2016 - Jun 24, 2027
Subject
CN=Systemsoftware Mathias Rauen (Mathias Rauen),O=Systemsoftware Mathias Rauen (Mathias Rauen),L=Hamburg,ST=Hamburg,C=DE,1.2.840.113549.1.9.1=#0c106d616473686940676d61696c2e636f6d
Serial Number
11:21:32:2d:39:bd:45:ac:62:3d:37:5b:22:c2:43:d6:07:6b
Issuer
CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Nov 24, 2015 - Dec 24, 2018
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
04:00:00:00:00:01:25:07:1d:f9:af
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Nov 18, 2009 - Mar 18, 2019
Subject
CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Serial Number
48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning
Timespan
Jun 15, 2016 - Jun 15, 2024
Subject
CN=Systemsoftware Mathias Rauen (Mathias Rauen),O=Systemsoftware Mathias Rauen (Mathias Rauen),L=Hamburg,ST=Hamburg,C=DE,1.2.840.113549.1.9.1=#0c106d616473686940676d61696c2e636f6d
Serial Number
16:98:0f:59:4c:d4:ee:7b:44:e0:8d:bb
Issuer
CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 30, 2016 - Dec 24, 2018
Subject
CN=GlobalSign TSA for Standard - G2,O=GMO GlobalSign Pte Ltd,C=SG
Serial Number
11:21:b4:55:35:1e:bb:1a:b2:4f:97:ef:07:fe:2a:b3:0b:8a
Issuer
CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 24, 2016 - Jun 24, 2027
Subject
CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE
Serial Number
04:00:00:00:00:01:2f:4e:e1:52:d7
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Apr 13, 2011 - Jan 28, 2028
Minor OS version
0
Major OS version
5
Entry point
932524
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
oleaut32
SysFreeString
SysReAllocStringLen
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopy
VariantClear
VariantInit
GetActiveObject
advapi32
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
SetSecurityDescriptorDacl
RevertToSelf
RegSetValueExA
RegSetValueExW
RegQueryValueExA
RegQueryValueExW
RegQueryInfoKeyA
RegOpenKeyExA
RegOpenKeyExW
RegEnumKeyA
RegEnumKeyExW
RegDeleteValueA
RegDeleteValueW
RegCreateKeyExA
RegCreateKeyExW
RegCloseKey
OpenThreadToken
OpenProcessToken
MapGenericMask
InitializeSecurityDescriptor
ImpersonateSelf
GetUserNameA
GetUserNameW
GetTokenInformation
GetFileSecurityW
FreeSid
AllocateAndInitializeSid
AccessCheck
user32
CharNextW
LoadStringW
SetWindowLongW
GetWindowLongW
CreateWindowExA
CreateWindowExW
WindowFromPoint
UnregisterClassA
TranslateMessage
SystemParametersInfoW
ShowWindow
SetWindowTextA
SetWindowTextW
SetWindowPos
SetTimer
SetRect
SetForegroundWindow
SetFocus
SetCursor
SetClipboardData
SetCapture
SetActiveWindow
SendMessageTimeoutA
SendMessageA
SendMessageW
ScreenToClient
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageW
RegisterClassA
RegisterClassW
PostThreadMessageA
PostThreadMessageW
PostQuitMessage
PostMessageA
PostMessageW
PeekMessageA
PeekMessageW
OpenClipboard
OffsetRect
MessageBoxA
MessageBoxW
MessageBeep
LoadStringW
LoadImageA
LoadImageW
LoadCursorW
KillTimer
IsWindowVisible
IsWindowUnicode
IsWindowEnabled
IsWindow
IsIconic
IsDialogMessageW
InvalidateRect
InflateRect
GetWindowThreadProcessId
GetWindowTextA
GetWindowTextW
GetWindowRect
GetWindowPlacement
GetWindowDC
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSysColor
GetWindow
GetMessageA
GetMessageW
GetKeyState
GetIconInfo
GetFocus
GetDC
GetCursorPos
GetCursor
GetClientRect
GetClassNameA
GetCapture
FrameRect
FindWindowA
FillRect
EnumWindows
EnumDisplayDevicesW
EndPaint
EnableWindow
EmptyClipboard
DrawTextA
DrawTextW
DrawIconEx
DrawFrameControl
DrawFocusRect
DispatchMessageW
DestroyWindow
DefWindowProcA
DefWindowProcW
CloseClipboard
CharUpperBuffW
CharUpperW
CharLowerBuffW
CallWindowProcA
CallWindowProcW
BringWindowToTop
BeginPaint
AttachThreadInput
GetMonitorInfoW
EnumDisplayMonitors
kernel32
Sleep
VirtualFree
VirtualAlloc
lstrlenW
VirtualQuery
GetTickCount
GetSystemInfo
GetVersion
CompareStringW
IsDBCSLeadByteEx
IsValidLocale
SetThreadLocale
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GetLocaleInfoW
WideCharToMultiByte
MultiByteToWideChar
GetConsoleOutputCP
GetConsoleCP
GetACP
LoadLibraryExW
GetStartupInfoW
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetCommandLineW
FreeLibrary
GetLastError
UnhandledExceptionFilter
RtlUnwind
RaiseException
ExitProcess
SwitchToThread
GetCurrentThreadId
CreateThread
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
FindFirstFileW
FindClose
WriteFile
SetFilePointer
SetEndOfFile
ReadFile
GetFileType
GetFileSize
CreateFileW
GetStdHandle
CloseHandle
GetProcAddress
RaiseException
LoadLibraryA
GetLastError
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
LocalFree
LocalAlloc
FreeLibrary
lstrlenW
lstrcpyA
lstrcmpiW
lstrcmpA
WriteFile
WideCharToMultiByte
WaitForSingleObject
VirtualQuery
VirtualProtect
VirtualFree
VirtualAlloc
VerSetConditionMask
VerifyVersionInfoW
UnmapViewOfFile
TerminateThread
TerminateProcess
SystemTimeToFileTime
SuspendThread
Sleep
SizeofResource
SetUnhandledExceptionFilter
SetThreadPriority
SetNamedPipeHandleState
SetLastError
SetFilePointer
SetFileAttributesA
SetFileAttributesW
SetEvent
SetErrorMode
SetEndOfFile
ResumeThread
ResetEvent
RemoveDirectoryA
RemoveDirectoryW
ReleaseMutex
ReadProcessMemory
ReadFile
RaiseException
QueryPerformanceFrequency
QueryPerformanceCounter
OpenProcess
OpenFileMappingA
OpenFileMappingW
MapViewOfFile
LockResource
LocalSize
LocalFree
LocalAlloc
LoadResource
LoadLibraryA
LoadLibraryW
LoadLibraryExA
LeaveCriticalSection
IsValidLocale
IsBadReadPtr
InitializeCriticalSection
GlobalUnlock
GlobalMemoryStatus
GlobalLock
GlobalFree
GlobalAlloc
GetWindowsDirectoryA
GetVolumeInformationA
GetVersionExA
GetVersionExW
GetVersion
GetTickCount
GetThreadPriority
GetThreadLocale
GetThreadContext
GetTempPathA
GetTempPathW
GetSystemTime
GetSystemDirectoryW
GetStdHandle
GetProcAddress
GetPriorityClass
GetModuleHandleA
GetModuleHandleW
GetModuleFileNameA
GetModuleFileNameW
GetLocaleInfoA
GetLocaleInfoW
GetLocalTime
GetLastError
GetFileTime
GetFileSize
GetFileAttributesA
GetFileAttributesW
GetDiskFreeSpaceA
GetDiskFreeSpaceW
GetDateFormatW
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetCurrentDirectoryA
GetCurrentDirectoryW
GetComputerNameA
GetComputerNameW
GetCommandLineA
GetCommandLineW
GetCPInfo
FreeResource
InterlockedIncrement
InterlockedDecrement
FreeLibrary
FormatMessageA
FormatMessageW
FlushInstructionCache
FindResourceA
FindResourceW
FindNextFileA
FindNextFileW
FindFirstFileA
FindFirstFileW
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FileTimeToDosDateTime
ExpandEnvironmentStringsA
ExpandEnvironmentStringsW
ExitThread
ExitProcess
EnumSystemLocalesW
EnumCalendarInfoW
EnterCriticalSection
DuplicateHandle
DeleteFileA
DeleteFileW
DeleteCriticalSection
CreateThread
CreateProcessA
CreateProcessW
CreatePipe
CreateMutexA
CreateMutexW
CreateFileMappingA
CreateFileMappingW
CreateFileA
CreateFileW
CreateEventA
CreateEventW
CreateDirectoryA
CreateDirectoryW
CopyFileA
CopyFileW
CompareStringW
CloseHandle
Beep
Sleep
RtlUnwind
gdi32
TextOutA
TextOutW
StartPage
StartDocA
StartDocW
SetTextColor
SetMapMode
SetBkMode
SetBkColor
SelectObject
SelectClipRgn
MoveToEx
LineTo
GetTextMetricsW
GetTextFaceA
GetTextExtentPoint32A
GetTextExtentPoint32W
GetStockObject
GetRgnBox
GetObjectW
GetDeviceCaps
GdiFlush
EndPage
EndDoc
DeleteObject
DeleteDC
CreateSolidBrush
CreateRectRgnIndirect
CreatePen
CreateFontA
CreateFontW
CreateDIBSection
CreateDCW
CreateCompatibleDC
CombineRgn
BitBlt
version
VerQueryValueA
VerQueryValueW
GetFileVersionInfoSizeA
GetFileVersionInfoSizeW
GetFileVersionInfoA
GetFileVersionInfoW
netapi32
NetWkstaGetInfo
ole32
CoCreateInstance
CoUninitialize
CoInitialize
IsEqualGUID
comctl32
ImageList_Destroy
ImageList_Create
InitCommonControls
shell32
ShellExecuteExA
ShellExecuteA
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetMalloc
comdlg32
PrintDlgW
GetSaveFileNameA
GetSaveFileNameW
wsock32
WSACleanup
WSAStartup
WSAGetLastError
gethostbyname
socket
setsockopt
sendto
send
select
recvfrom
recv
ioctlsocket
inet_addr
htons
connect
closesocket
bind
madTraceProcess
mvrSettings_ActivateProfile
mvrSettings_AddProfile
mvrSettings_CreateProfileGroup
mvrSettings_DeleteProfile
mvrSettings_DeleteProfileGroup
mvrSettings_DoesMonitorSupportHdr
mvrSettings_DuplicateProfile
mvrSettings_EnableLensMemoryHandling
mvrSettings_EnumFolders
mvrSettings_EnumProfileGroups
mvrSettings_EnumProfiles
mvrSettings_EnumValues
mvrSettings_Export
mvrSettings_Final
mvrSettings_GetBinary
mvrSettings_GetBoolean
mvrSettings_GetInteger
mvrSettings_GetMonitorBitdepth
mvrSettings_GetMonitorDeviceId
mvrSettings_GetRevision
mvrSettings_GetString
mvrSettings_Import
mvrSettings_Init
mvrSettings_IsOpenCLNeeded
mvrSettings_IsProfileActive
mvrSettings_IsProfileAutoselected
mvrSettings_RecheckProfiles
mvrSettings_RegisterLensMemoryCallback
mvrSettings_ResetLensMemory
mvrSettings_SetAutoselectProfile
mvrSettings_SetBoolean
mvrSettings_SetInteger
mvrSettings_SetMonitor
mvrSettings_SetProfileRuleInfos
mvrSettings_SetString
Name
.text
Size
904KB
Virtual Size
903KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.itext
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
38KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.bss
Size
Virtual Size
25KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.didata
Size
512B
Virtual Size
456B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rdata
Size
512B
Virtual Size
68B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
54KB
Virtual Size
54KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
Language/ne.txt
- SHA256 c129f67193295736e1c1ff4ac7245cbd737a07ea6073b43fd22ac767f3d56e23
- MD5 c7ed0560a6145a417b1e92546ed6b0f1
- SHA1 6be9ff3e7ef34767caa165a0e9851914bb65378a
- SHA512 508504216c916c6ef168062c1d13336594d469db92d8b40571c726a4b3053ca6fd0c57f9f2fc389f3216a5c663ebdc4aa520462ef39abd5be55c7b87b522d90f
- SSDEEP 192:iv4xgZB/n6NclUY0PA8jaeQPYX89RcgDZjGKOVdp:ivYUSNcOY0PA8+0gfOJ
- MD5 SHA1 SHA512 SSDEEP
Language/nl.txt
- SHA256 8a74f64c91c25da6056b054d388bf1bbd97384ad7d0086f86df0240e077c6149
- MD5 54169e744254bb5a4182bcb2678f8479
- SHA1 244ff8c38c8da10e20282cf74a08e18ab165640c
- SHA512 b798027c10f2aa7f06fa4fc3473f3040a23968d967aa93c08d072f86da2747d7847f8d7b37bc796a8270721c200978c61b1a4a5c6fd8b87845fdbb1337a142a2
- SSDEEP 192:i3oJFqYSagoQss8Yok0y0qiqfUaep0XTrsv3H2TzQEjsrKdOZhGcicbyoL0rnycW:i3AQZUaemXTOWTMosI9loAry34sf
- MD5 SHA1 SHA512 SSDEEP
Language/nolimetangere.pkg
- SHA256 51e588e5c974cbb81b3c22ed4ba9c7188dc057a2bd77b248f4eec4babcf23761
- MD5 2ba2923d166e89451fab8b0f1f48a552
- SHA1 a3b8226b8fc5266105347ccb623500750a1b561e
- SHA512 71207bb1493412737ee821754f154b76e45ee73be539f7df7e188e18cc018a45c42312844322f5bf0d8352cb3ee432f1314d8c69e458cbec25c9b47a5bf7bb0a
- SSDEEP 12288:y2eLUppvK0pIw10hf2SZCFILyTVAtIeH6b5+zoTcefCDlNxEawbSSWZ3O:B3e1nGepfH6bCe6pNQvq3O
- MD5 SHA1 SHA512 SSDEEP
Language/pa-in.txt
- SHA256 377f793eedf3a935ddd6260d72ac3cada9391aafdf1f019d0be72be2b83a5dd9
- MD5 6c48ed7deba6d3efe6447be948471810
- SHA1 4e1d76d565211416f0ed32a2cdd473d9ac54a61f
- SHA512 22b8bbb70492e19ede9c5e74483a1a6d57d4f86f38d1321331e0137c7953c6612e03f854fb1bb0c3234bbc0f561e92501a345d881fc09dde598e217d946018dd
- SSDEEP 192:iK8eAMv6KYvDPVWnkFGdRq8A9UCGd6KFnidivnjnqAPvowQoNVq4qEFmQt+MN9YL:iKpZnt/dhCivnjdjQKFNt+MNfU
- MD5 SHA1 SHA512 SSDEEP
Language/pl.txt
- SHA256 223c109301a7bbf01fc57c42609083b28e3fcededc1f6e6dcdfdc8ec1580c51d
- MD5 2cdf63e6b3f3a474465d0d88e5386718
- SHA1 aa4f3f839b35c68ea2a17e7a63053262e94f952d
- SHA512 db7c086b9fd9111d468b7bb4f55455524fe161869c20c20ad7e65e5b8eee38fd4e3b19aaa183c69c87d2c61f4561d12c90aa966a07156f193af59bcb6db10ff7
- SSDEEP 192:iny0xONopVdHc+Xmy9hk1s6i+6rELzpZ6+0FVEleeNRChH6ufZfjp8Rb:in3xOgvXm9s5+6QLz+jUlX2rp8Rb
- MD5 SHA1 SHA512 SSDEEP
Language/ps.txt
- SHA256 881b19dd1f74251e475855b8bdb53ce9af1c3d2654a9331b069a3c273f723769
- MD5 8f15262b3c1cf560b6352fae4a5fde21
- SHA1 c493f7834117f02aab3dd34999acf55977d94c67
- SHA512 18406e2c762f5e7d5d37d76c0fdc8a8a85d50fcb66b2d92d072b4ca3714fca6eae9ccd9dd50bbb00da84bccfd07eba290930c17a1b9342626715a6d6de8191d2
- SSDEEP 96:ikrJrFkaUGFoiZxn8pSbo4YCVtH7tpY+Qan1JZ0d+yccGFs8Ie30aNMfm88B9eDb:ieJZ0o98pT4YCP1pfSDHayRvpyDJe
- MD5 SHA1 SHA512 SSDEEP
Language/pt-br.txt
- SHA256 da0b58f52bbc131f967942d1d8e9de1b5721ae864bc21852a0ad4062332297cb
- MD5 7b02e1ae16e2e709d7c97de560b4dbe9
- SHA1 191a54644417f7d36f5cb4182dcdb3737d74be51
- SHA512 4f689f854db3f766b5e53ce2f19e9f8293c075ee3f9b18098eb05b352f2ec95df85e49a78540781eb531bce60c7b1f7890f1fe3c65200dec3cb908e90fb827a1
- SSDEEP 192:icoGT04mzNN8hYivh5gtE/PkjY09fdNQuQ:ibGg4mzNhi4tEHoDfHQuQ
- MD5 SHA1 SHA512 SSDEEP
Language/pt.txt
- SHA256 55807ed90ae0d9216b93ec7e1d0571cb16d7f9db40723581aefc4ea829d4d182
- MD5 e6f09b147cb07532c12e47b05ccf87b7
- SHA1 1b6d069d431edac41c4221a120e8cb9b1152fc70
- SHA512 95f7db5dd308ca3e91fc3203dfb9fa9dbabd7eec6cf1a8590eef0cc670c6b08447ba09ad151a972d721dbfcfa03468bb7e9d2cac190d6c72c543ce5a16c7aa32
- SSDEEP 192:imxbxSa4GR9N8zMzM0KgWWauXYY5wNKDyYaipnj0aQiAKECNIuZB:imBxSNGR9N8zMzM0KgERYKNYy3ipnj0G
- MD5 SHA1 SHA512 SSDEEP
Language/ro.txt
- SHA256 f168bb4d026782134cc6c261006b815850e753a27fb47c4f23ee617666459a66
- MD5 e3ee837f02a1f6e4b2213eb36c025284
- SHA1 56ccafa0f9c3d805a845311c2ebd80c93a595b17
- SHA512 a923f953af5df72e04b5c38e523a003b85c0ed74e20ae1c3a2d4848828e03de8e703953cfcf653c148a0eeaa9365f9187804de0d534435ccb90dac1c4ea68a63
- SSDEEP 192:iVF8khF2yUYtHwfajHwKlPVS6LWbsWGGqZfG7ORVCPF27l:iD8mUYtHCxuPjWQu6KP0x
- MD5 SHA1 SHA512 SSDEEP
Language/ru.txt
- SHA256 ac73d4810639114c3269e3beaec84ecac9473ca6fbc248d804a09df2b33e4351
- MD5 b5cec4d03d2d9e162137e475c54afbc3
- SHA1 3e86ae0174a096b07173c623b637122e4323dd29
- SHA512 cb78bd4f6d7d94780bf84f6618a2800a3b6885485c6cb7b0836affcb9ca6f6734834fb84f756946e59595067788cd1b1a230cec760e39d3ea0baf523f7cc7647
- SSDEEP 192:iW2LUMKClXfitECTGV0jxOfXYCjisdvyMpf5ZOO8gCS4nY5tbV67wyxZ+XU2WtWK:i+ptEGntQYpY6MXsO7ChKeZ+HWKk
- MD5 SHA1 SHA512 SSDEEP
Language/sa.txt
- SHA256 a44e8c328bf809890aa6ca883e2cb82b6c5207d9636e9a91253da4cd893668c8
- MD5 9fe4da297163a84fe9d0b0289b1af077
- SHA1 d14a6a318a50f2f13e45b2269ea2ad8fc5e3c44a
- SHA512 a6fee2f3d6448f1f5be6ec88b51fb65ebd07c7ba3dbaf2f7a801fef54b9da410e6b800094853180a884889b304ea9a54672781fa7d0f1067af6c4a63c494a44b
- SSDEEP 384:isw3ma17q9ntvNTsld5VFxxwMkAGO310F0klrfofmR7HOwPyng:HwQvVnQg
- MD5 SHA1 SHA512 SSDEEP
Language/si.txt
- SHA256 3899edd17a78bc729278304f7b0ae7750c422a5ba684aac9edc15b8527a229da
- MD5 2b78e18bcb07cb8d59d8682502576f8e
- SHA1 c277b543ee18441681cdaff9efead09963bf9604
- SHA512 da07af56bbd954828623c7b38fd3e6cdfe89df98f2525aa486a43fdd17ea5ce79f90e691b1f459df5238b04b3fff0fed58559bc93e15559ff6d8d2a2cf4da172
- SSDEEP 384:iIOc5iNEOdZPFVIz36hkSuWjJyzB8X/qCwd5WvZNkad73+ivI/MpngGhNJDkGx/p:2XNnZ9/u59CC5WHt9I/rGhPRx9+7SuJc
- MD5 SHA1 SHA512 SSDEEP
Language/sk.txt
- SHA256 e571c0d87b50f4659099b4ca618057533c22578066e411c5ceb3df8be1e77cff
- MD5 ca2b22d21945a478757a099eeafdf9a9
- SHA1 5efbf215647e82ddeaa4c83d064ef83b51413dea
- SHA512 40365ac6cdd70ff7b7ab09482e1e9263b1b131772019eda357007d029a879111da72b05756adbfc3206b1c060211a16b5f10d507fb0caa3696907c8433fe9537
- SSDEEP 192:ihqYyHuLGHP372c79qAFklXva+hF+zmTzeNMR:iMjUGHP72cJqAFAXi+hs0aNMR
- MD5 SHA1 SHA512 SSDEEP
Language/sl.txt
- SHA256 548aa8422a228617b30fbd448d03c38c3a11d010051a24544cf8ae479314acd8
- MD5 7004b98d09316e84156b91c54888c9d4
- SHA1 39c8681e497dde4ccffa3bf8d15b53627757ece8
- SHA512 c48f4baced7a4faf958712225a5326ca2225dd7b396164787ad2c83a0314774e9126fa510eba37b1ab2ff26c67a7aaaa0ba9129b0d97a119ad1d726a56a33066
- SSDEEP 192:iGCcUhGAoKfrxHa5Qn6dq5OSsZf1G1huHF8fY1oTraGAF7S+pVss0Bu2mXXF6OG:iJhFoKlZZoZ9Gi52rChEmXAOG
- MD5 SHA1 SHA512 SSDEEP
Language/sr-spc.txt
- SHA256 283dd99ec8d13784b3d79c36766cdb16dac0ede0c1c09e8b1efa64f5dc2c1a55
- MD5 ffd26304b9b5fae8547703515e84460d
- SHA1 cff3f023bb47ca3c6c3db202cd8c126b0bb2f59f
- SHA512 0a4e39e2598c73f936e4c8bd56201fee00aeb5daab0d7b735d5137a8b7c15830b40f028c77b528b75653540836098f5e8fc059111dd2efbd0a46ddbdf97465c1
- SSDEEP 192:iCk9ED/u0/rzMXyBMtR/TL0wN1i9Rd9u3ZDxoAF9sOVbvmyz3xnvze0kIqLm3HGX:iCk94zBWv0b9P9gZ1lLhnbe8q0tfsH6o
- MD5 SHA1 SHA512 SSDEEP
Language/sr-spl.txt
- SHA256 d5a250b45bd51267e2b0d78cf60e7f14113419565f9b95c2b1113963396570a5
- MD5 fd327f424c7e4f23d2c018ded334a1b5
- SHA1 0fe9a48c528be4022b19f7373cba9190d3bdb473
- SHA512 ae6c2959a5348bdbc1464fd0e08a3a00f8598a2d423381e5883347a85e88f7749659e0fac4f89d6ccbc74a1e83f47ec4f42cac22115ca3921def00de41978adb
- SSDEEP 192:iZjnEAuD8cvkp9HRmD+eyl3NLH0qgGOzeVTs8rmXab4f:i5EL8cIxMQGGjuXasf
- MD5 SHA1 SHA512 SSDEEP
Language/sv.txt
- SHA256 54112b265ec01759adbf72dc856ff0f9dbb2b3029eff8a56de08dffc5d3dc954
- MD5 2ec8b6f0c0c05157ae90aba540debed1
- SHA1 56de30674cf6ed17ae1fd42080214573b8383789
- SHA512 6cb83b0d3db5254e47f86100c38be073f257b4f2e643f14e91df9ccac36a631bf06e52ce8f98106f5a17cf19745f2b6277605968bfeb9e0d423b1fd3ab5c0a06
- SSDEEP 192:iIRthqlCnYhI0sbVA28ta0obRFz+3uCFQ9/FLFDLb0Y620X9CWHdfSzuQ3lBMjiC:iIzhdnY+bi2tWIFLJb0Y62dWHuTlC
- MD5 SHA1 SHA512 SSDEEP
Language/sw.txt
- SHA256 aaeb1631458e448b678579ce369fd0a6d66e0fb02b9218328c537ee38636c557
- MD5 ee27959aef24cef2ec07684cf420b2dd
- SHA1 07d9b4d2b4ab10b3341f3286cee73185daaad918
- SHA512 9e0fd7db8d799763eee9980d8c2b0864640fb74a86036d337b019ac317a3541cba6d65af1c4179ed46d64d4005395cd6c761f6a234428df3f1fb04634955242f
- SSDEEP 192:7F+9CSE///gXaidWrT8PpH0fKxsyEeHRinn:74Cto9paKxsRn
- MD5 SHA1 SHA512 SSDEEP
Language/ta.txt
- SHA256 0a3b285566bbeb3f188b3c72ba21cbfc545ea05471eab706e972c828da5234e0
- MD5 228ca6d7b8d850853233c4575a7ebf1f
- SHA1 4bc90fca87925f7d855972f5dc67ef5e9e29b438
- SHA512 2995d1c2bacc8c0ee757fc47fe9c8ac07f1ee74ae3a70bbbcc66cbcfa13a924855b3f7515d04031434870829be34f0fb49a35388eaffacc0e7a33f9a44a02870
- SSDEEP 192:igMxAhP2NKfBuRZjaaC1e13/BNhpYY+KEHtiAnCuu1+AuvB1nNh11N:irlNZjagbAn3
- MD5 SHA1 SHA512 SSDEEP
Language/tg.txt
- SHA256 1cedd8f699940fecacacbc5df093ba70fb2099faf9864376a3d990da78b8e075
- MD5 4a5529986613cdf743b3f7755f8f5cae
- SHA1 970dfad147ab3d32e93eef6bf464bcac23368e4f
- SHA512 1f7e8a8a21e8e5faf546b2f4c621b326a907afa017dd8221022df2d19b3e41d10d5157a8713f8d5485601311029f4e25dcb21d0e9b4991b6d26d651b416239c0
- SSDEEP 192:iLcxMil07H3brpQXBwkGE3RypQcG3XlDrpQK3I5D2OleVZZd3K5RATp+O1jR40pE:imK3bMlGE34Q3FBT3eDoZdaOHfllqzDv
- MD5 SHA1 SHA512 SSDEEP
Language/th.txt
- SHA256 01e7b965bd4b722003f74b4e4b30ef6a1baea67108816d1b9f8d6add39c7fa10
- MD5 8ee06a03dc18e5f8bc750cb6a78f6d9c
- SHA1 179c195700df844216c2cabdc17062cddbd1d6b3
- SHA512 4c908ba391bac8bd36bf76b5c3b59dd59eb71f2513bcd04c47cbde683ad463c0feac5d5aada67730f3f566156c4beff09cd7b7d1eb043b988ad7938b9041c4ec
- SSDEEP 384:ir9n+rMUfsqjeWnShfO1LpBIB9jip10zsPRO2a8fUhe1RBC6sl4wjn/PqIpqINAG:09n+4csqjeWnSh21LpBIB1O10zsPRO2e
- MD5 SHA1 SHA512 SSDEEP
Language/tk.txt
- SHA256 75eff9de596459f3eba755b5c4c8ce635af2cecdbae40749df348c97a2e56ee0
- MD5 75c23d0431bc83ca17308f08d1173c1d
- SHA1 a052e61036e0da973253ba225031d5929ee5e2d5
- SHA512 10872e31df08e59d080be3c0b975df06e2e8bcecea14fcf9f547965143a9652c8b9ed50d38232a72b8f0745c964f4e616b06368d9983f35ba05fbcbf2294900b
- SSDEEP 192:7toKrLbypqg+g8p0k9DMfjrdTU4dX81abJjrkLPFT8jPJzVIj7dYqxMXXDqit:7mKr2qL3oRUU81oBmPFwb9VY7dYqxMmm
- MD5 SHA1 SHA512 SSDEEP
Language/tr.txt
- SHA256 4816929c4bb958ce8d64d14df47f0b6a35dcf0e7eb88201eaa93af541894e354
- MD5 c69be29e4448a858180daf367464d531
- SHA1 d83819911331f73bc35e2eb02ec1fbcdddf30b7d
- SHA512 469be1075e9a5c4cc8bb6a0b55e645448eda3d46527a5561cd55807f5e52c3410904a34e0e64e11f963153d5cea5ccf16e7e7fc7ed63aea3fbe532959056aa77
- SSDEEP 192:irkBYXKvLRGGtGcunN8uRvXWt2GSdRHI2Je4Sv6J57kLbLaK/FwacCz:irkBgg3GJ8uhXWtfGRH5o9D
- MD5 SHA1 SHA512 SSDEEP
Language/tt.txt
- SHA256 18479d66e0c8b5144ea32cc9d6b58eb8748e80d2c3bdec0dbd99bbc3ab42495d
- MD5 6e299b81edacf15face1271d032cc5a0
- SHA1 f2e955fd7bbf9140f0e86bf1a759d729c9a4e4da
- SHA512 84e9484319deb5a7049fe130290a7d67a8faefc9a17f7b2ce9f9586fb0f0641b839bae681c6f8ffef551780f56166c9886c1f7f6f0df386389f44710423b9865
- SSDEEP 384:idiangc64QGQ6p6Wc84DqdqQdP9YW0XyU9ondS8O20Biu9J5:rag/4Tzp6Wc84Dq0QdP9YiUGnmiu9T
- MD5 SHA1 SHA512 SSDEEP
Language/ug.txt
- SHA256 9d0268d1eeb8dfdebbb8ea1033c2b99cd667a244c9859085be5d54c9e5ced369
- MD5 ef3e8d61d03e42a3b40d6f0b12535adb
- SHA1 569360bcfeb39c102a3dd78ed96204b5d733ffbe
- SHA512 6e9afeb0a96da6d8bf63f06de421b8d4ddbf4d750e1bdf861fbbdc0268cbeb19068d08787f0f1655b40ebdc603d888251dae188c3547f32b970c7f927754066a
- SSDEEP 192:iDIm9xflePh286zK/bnZ6U4EeBVDeZTyUZirOCsiCjcY8VFDZ:iNMPhhrBNeBVSTTZUwiCuDZ
- MD5 SHA1 SHA512 SSDEEP
Language/uk.txt
- SHA256 53235cb228dbbb5207f18bd0b318f54fda9f9f5b05094ea6ac7ae368216cc4ef
- MD5 d125ef7f9a009cfe4093152e48055ac1
- SHA1 7063f242690890c98296314884e0e6d058c23aff
- SHA512 cc199e839e2cf24abcd8b9685702732427295858976a038fddf6e3691fd1a31bcaf9f1dbac48e125e096d1a395dcabfb4ecbb02a6c5e7d6dea67e44e21e69037
- SSDEEP 384:iv+2HgJiSSXX7VPkqM6Ix68c65gLKPENwboGxX7xFxexNbK7ExOiyq:LqRRr87Rq
- MD5 SHA1 SHA512 SSDEEP
Language/unrar.dll
- IMPHASH 97687a07538d3932fb9baf861b959f5d
- SHA256 0891edb0cc1c0208af2e4bc65d6b5a7160642f89fd4b4dc321f79d2b5dfc2dcc
- MD5 851c9e8ce9f94457cc36b66678f52494
- SHA1 40abd38c4843ce33052916904c86df8aab1f1713
- SHA512 cdf62a7f7bb7a6d511555c492932e9bcf18183c64d4107cd836de1741f41ac304bd6ed553fd868b442eaf5da33198e4900e670cd5ae180d534d2bd56b42d6664
- SSDEEP 6144:e2Gk6wDaKov/5qrawOZI8uN0f/UVvN3MwdZFmiVFC+OEu:e2GkNo35qrawqmG/yM8PmiO+Ol
- MD5 SHA1 SHA512 SSDEEP
Digest
56:58:06:a8:5c:dd:b1:06:22:da:21:e6:d3:4a:2f:33:85:e8:1a:85:0f:f7:41:85:fa:76:48:ff:e6:e8:20:a2
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=HRB 109885,CN=win.rar GmbH,O=win.rar GmbH,L=Berlin,ST=Berlin,C=DE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#130e436861726c6f7474656e62757267,1.3.6.1.4.1.311.60.2.1.2=#13064265726c696e,1.3.6.1.4.1.311.60.2.1.3=#13024445
Chains
May 12, 2024
SERIALNUMBER=HRB 109885,CN=win.rar GmbH,O=win.rar GmbH,L=Berlin,ST=Berlin,C=DE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#130e436861726c6f7474656e62757267,1.3.6.1.4.1.311.60.2.1.2=#13064265726c696e,1.3.6.1.4.1.311.60.2.1.3=#13024445
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=HRB 109885,CN=win.rar GmbH,O=win.rar GmbH,L=Berlin,ST=Berlin,C=DE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#130e436861726c6f7474656e62757267,1.3.6.1.4.1.311.60.2.1.2=#13064265726c696e,1.3.6.1.4.1.311.60.2.1.3=#13024445
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=HRB 109885,CN=win.rar GmbH,O=win.rar GmbH,L=Berlin,ST=Berlin,C=DE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#130e436861726c6f7474656e62757267,1.3.6.1.4.1.311.60.2.1.2=#13064265726c696e,1.3.6.1.4.1.311.60.2.1.3=#13024445
Serial Number
04:8b:08:39:9e:c7:03:62:3c:72:cd:20:77:ad:65:d9
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 8, 2023 - Aug 7, 2026
Subject
CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US
Serial Number
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jul 14, 2023 - Oct 13, 2034
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
1
Major OS version
5
Entry point
202208
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\Projects\WinRAR\rar\build\unrardll32\Release\UnRAR.pdb
kernel32
CreateFileW
DeleteFileW
CreateHardLinkW
GetShortPathNameW
GetLongPathNameW
MoveFileW
WriteFile
ReadFile
FlushFileBuffers
SetEndOfFile
SetFilePointer
GetCurrentProcessId
CreateDirectoryW
SetFileAttributesW
GetFileAttributesW
FindClose
FindFirstFileW
FindNextFileW
InterlockedDecrement
GetVersionExW
GetCurrentDirectoryW
GetFullPathNameW
FoldStringW
FreeLibrary
GetProcAddress
SetThreadPriority
SetThreadExecutionState
RemoveDirectoryW
LoadLibraryW
GetModuleHandleW
GetSystemDirectoryW
GetProcessAffinityMask
CreateThread
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
ReleaseSemaphore
WaitForSingleObject
CreateSemaphoreW
GetSystemTime
SystemTimeToTzSpecificLocalTime
TzSpecificLocalTimeToSystemTime
SystemTimeToFileTime
FileTimeToLocalFileTime
LocalFileTimeToFileTime
FileTimeToSystemTime
GetCPInfo
IsDBCSLeadByte
MultiByteToWideChar
WideCharToMultiByte
CompareStringW
DecodePointer
WriteConsoleW
SetFilePointerEx
HeapSize
GetConsoleCP
GetProcessHeap
CloseHandle
GetCommandLineW
SetFileTime
DeviceIoControl
GetCurrentProcess
Sleep
SetLastError
GetLastError
AreFileApisANSI
GetConsoleMode
GetStdHandle
GetFileType
CreateEventW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
HeapReAlloc
SetStdHandle
LocalFree
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
InitializeCriticalSectionAndSpinCount
WaitForSingleObjectEx
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RaiseException
RtlUnwind
InterlockedFlushSList
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
QueryPerformanceFrequency
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
GetStringTypeW
GetACP
HeapFree
HeapAlloc
LCMapStringW
user32
CharUpperW
CharToOemA
OemToCharBuffA
OemToCharA
CharLowerW
CharToOemBuffW
advapi32
CheckTokenMembership
FreeSid
AllocateAndInitializeSid
LookupPrivilegeValueW
SetFileSecurityW
AdjustTokenPrivileges
OpenProcessToken
ole32
CoCreateInstance
CoSetProxyBlanket
oleaut32
VariantClear
SysFreeString
SysAllocString
RARCloseArchive
RARGetDllVersion
RAROpenArchive
RAROpenArchiveEx
RARProcessFile
RARProcessFileW
RARReadHeader
RARReadHeaderEx
RARSetCallback
RARSetChangeVolProc
RARSetPassword
RARSetProcessDataProc
Name
.text
Size
242KB
Virtual Size
242KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
36KB
Virtual Size
35KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
35KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=241, version=40116,
count=126, id=243, version=40116,
count=24, id=242, version=40116,
count=17, id=260, version=31616,
count=24, id=259, version=31616,
count=1, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=45, id=261, version=31616,
count=15, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=169, id=1, productName=Unmarked objects,
count=48, id=261, version=31630,
count=1, id=256, version=31630,
count=1, id=255, version=31630,
count=1, id=151,
count=1, id=258, version=31630,
Language/uz-cyrl.txt
- SHA256 2dd421a44ad779d961c951f01e7abf4ac358c61ce26ea8311a0c902b4fc77ca3
- MD5 7afedbd6e9ef3a4a2a99bc1bcb133605
- SHA1 317d758dd9f65a6e320a4d45776a21ecb2ad60cc
- SHA512 48650bc3ac6c316ad6431b9db3e49d76fd066f976fdd949a8dfdb194775b0e1c6eda5ed99d2574c9d3c2781c6138e3bb3939c294894443eec981c78377823af5
- SSDEEP 384:i7ggZifEX14nReON0sutg2s/Vk/A/n/pPqS:cYEF4nReON0sutg2suY/YS
- MD5 SHA1 SHA512 SSDEEP
Language/uz.txt
- SHA256 a310044dbc86e2441f0d50bb7d7dadb9879359b0c6ceb1faf413a0459e07045b
- MD5 3035144eea3a382e39541b218a5d813a
- SHA1 eb7a2f6306f7d2ded4cc88fb4cab0f65558db8b0
- SHA512 99d86146e0a6407f8d0fd7179061699bc82232e6a2427203a2951fef9089572c9c4e29c8484910f672a31f98ef13b5f3a45d5786fb118701a5b908f8f85a5c6a
- SSDEEP 192:ijX9l/0gt5MpHB8zNq+cwKp/avDFxCg8FTO/7yWyTHGw:ijX9l/0gt5wh8zNq+cBVavDFE3cTyWyZ
- MD5 SHA1 SHA512 SSDEEP
Language/va.txt
- SHA256 f43c31bd959a752eefbb7c76ed918c4cacd50d43706121c55093d72a638fa7a5
- MD5 639741f687d4427c9d3b170b1ced41a9
- SHA1 ad3d3a09b8877381df520e6eb654227da045b89d
- SHA512 eb63b0437624782d2bcd033905c7c0538902f9644e4facdc52d094ede5353309613b4eef3cb437d4f69c2a4fd4b2e0f241990aaa3a38366685b10cabec20a357
- SSDEEP 192:icd/FL0HKwFgPqtXdN3K3TIcmqHfc39vNH:i65wCitzaj5E3P
- MD5 SHA1 SHA512 SSDEEP
Language/vi.txt
- SHA256 3a6dca3e1b5c8190c81fc859b5be83eaf54efdcaa148f4374d1225381083406f
- MD5 044531d134aca40d5e57cc0ab96b4940
- SHA1 988aa2bb6922360c1977b97725175613266242d2
- SHA512 458a86ea6468e8b1c9cc98a7a579f74854a34f101ec2ede3ab48dd7dfbbf75eeae184c5a23443b3ccc69b8c06e0e09ef2df04d9f00d86ce99b82e785f95b7635
- SSDEEP 192:iJg8VLjw6yLuVSjHohWCOMF65E0QS3CmJdH:iJg8VfVcHpN5/CA
- MD5 SHA1 SHA512 SSDEEP
Language/yo.txt
- SHA256 ffab6b91ffd2d3c2b1f7f431b47f7d28aa17a11587b876565613bb26c173402b
- MD5 698af9267c08d61b712417491da6a3bb
- SHA1 01f21ce60e571699b006098afe9520c02d4e11dc
- SHA512 d37f63d3824d12d9bd4749ea94fce924f3a5469874d6777261f0570a2a7ef28574825fae199408c0e1eee7061b08c447da8744a1c2fa486981165ab5062fc8a9
- SSDEEP 192:7XgmEsBVCxtNc/EcoGFGDbMOw3WmkmSAGplG0v6k6P89Y6QVkixHxXUE4zVG9uRt:7XgECxuGbMO3/J3PL9zyezVGw5
- MD5 SHA1 SHA512 SSDEEP
Language/zh-cn.txt
- SHA256 7cf13e7434e6c062a29b964c026b2f66e75ecf541228665bf0c826ef7c0fe133
- MD5 0aae98f500ce669da6a4fcc33aea04e9
- SHA1 9326f529b796bca164835fb1eb4e135f01cb61af
- SHA512 fc64fb4c2df2b99f3d24cd938f4f381acc20547ba655fb34016a1a1f860e0d8a99c087b24fdc160d2bd1dad1f04c9ebba682adde0e0004e0b64d774bd3f3550f
- SSDEEP 192:7f+OUNnnvU5RLUvMyUxupow69yJ1L8ln9K4zy4VCrcj+v67DAT21ph4LiD:72rnnvU5R+yJ1MglEyycWV2DATk4LiD
- MD5 SHA1 SHA512 SSDEEP
Language/zh-tw.txt
- SHA256 37c79297f8d4e491d681b556c23d957bc830068ae1d5f4535fd054c2233f3474
- MD5 acfc57de6b0e4489287bdafe2062409a
- SHA1 dbf62f8c6dd239aa16bfd62500517b849ed8e5b4
- SHA512 50a76a2c5a61056b2b9efaf143335d86c5882d97c9d42acf29ca87cd39d79876d561ec0fe83fb377e25379cfebf593b782ecd8613d2a84ac33cbb6d8314481f1
- SSDEEP 192:i965RTllmRwM4cO+VnoF0HDczLXO7AJ8YRcaBxU+G9dDRI:i9MRTPUZO+VaoDcmRYUhXRI
- MD5 SHA1 SHA512 SSDEEP
Password.txt
- SHA256 25359cfb8608d67e74a46b23cf6d113736652692a401705348dd77df687a1ab7
- MD5 6804c9bca0a615bdb9374d00a9fcba59
- SHA1 cfb725120d9fd7ca956201f9324df3cd7c53b54b
- SHA512 b21d44a83359ad91b60a5b8c5a71bbff6872db539b7931ee3d87239139941cb3e83c123a163a5a3432e4446eff26abe29d5a663b2217ae1aa29e2ddd154ed2bb
- MD5 SHA1 SHA512
Resource/CMap/Identity-H
- SHA256 aae946bc17203b5df12838d07ae5cafc9e85a1d42d1b94d8475ab2d42b77a5cb
- MD5 40f5dc1383e3e8f870ed8f763ed51878
- SHA1 474a429de3b9feba36cfa4ce4edcd4fae3cddc5b
- SHA512 69b6d3af2ccaae9437fe4e0206c44d29ec7a51f39334826737907e1126505071ba888f4134de55a07cf14256b47daf6d29cc73bab60f3c6cd7d8bb30e24778fb
- SSDEEP 192:QJeSrsQrsil/3gU+uSpo4cvkikNwA+KZwOyKXuU8fy:QJhrsQrsWPsu+oVkEKZnNz8fy
- MD5 SHA1 SHA512 SSDEEP
Resource/CMap/Identity-V
- SHA256 7483db44e4449a7ae232b30d6cba0d8746592757d0e91be82ec45b646c608807
- MD5 b5084cbf0ab0c3deac97e06cd3cb2ecc
- SHA1 c32458cda1951cecffb69aa2f7e3a1ea8bf36251
- SHA512 b15f65a2ab21121a4b815932a7e2dcafcf27f458bce532ae46bbcbd6b1134153027bf3e138fab42457a89bc892256b4796bbb9f1e3a85f9f4c5202015b56e3a5
- MD5 SHA1 SHA512
Resource/CMap/UCS2-GBK-EUC
- SHA256 66cdcaed3aa94525c59a82a39a93b96885883bffadea1e572464d559d21443a6
- MD5 fb9d6cd4449ec7478ee8ad1bd7465bf5
- SHA1 3d42495890e0f2acc6b564eaa79fe020fdd2fc79
- SHA512 259467113cda70ba8d399e233bef8a718f76bc6b977ac54c216bd53796a8003e7a7276031388e282f1f4430fc2fcd269b06341f2082a9442a65bbccdeb767eb1
- SSDEEP 6144:JAYrjXraHOiu06s7SSC2RGaC4J7G27r7Sbtg2j35GEE9:JAYrj7aHOip6rShXC4J7G27r7Sbtg2j0
- MD5 SHA1 SHA512 SSDEEP
Resource/CMap/UniKS-UTF16-H
- SHA256 ab87d320c81e4c761b7a4cbd342e212db4ebe169b5d10848f2f57d828874e342
- MD5 f65c06189a55139e13885d9716bfe35c
- SHA1 394285fed905d0f4c2c21230da50626b0a31a037
- SHA512 caf07d2623861f60d79acfb313978b89f9cd8feea0bed0fe28d25286d197b62b9ef9a41130586d731dc43aeae817eaaa87c9cac31d9bd1fdb82591146e0fa2cb
- SSDEEP 3072:EbOks6xITS4gmLJpAEhFDDvBB4TS+JjXsc:jjTvIN3
- MD5 SHA1 SHA512 SSDEEP
Resource/CMap/UniKS-UTF16-V
- SHA256 7e403dae40df21fe3f9b221f7ce750f7f5bff9cc73d82d011c4bcc48a0db60ed
- MD5 aba47550affb435a1dcc6b70efab5b52
- SHA1 754168e2c3b58fcfcb57b3ecf5ca5eebddfa1f47
- SHA512 d46537b67ef7137fc0b715e43f23322dd1189db352235a4a5ad89cb6af3d3fecaa51c1c93dcea2a7e8fb8d25b18c3b0f2ab2f23df7a5a76126a47389ffac00b2
- MD5 SHA1 SHA512
Resource/Font/AdobePIStd.otf
- SHA256 5dbc496c0b5a12d9f9ffdb83a46b9fcda8d1fc1fcd50832c783be5e9277a698e
- MD5 8653bfe4c32a8528e981748e28c59570
- SHA1 dec8dd8cba986f5852286c8b8e45c6270aeab65a
- SHA512 66e39798ca8bba9af51f44e81b77ac1703f488b6361bfb05de632fbb2726e5f1291f0210be0fc933459bea78fa433177b33e34be977c079c97c5330d6590e7fb
- SSDEEP 1536:PmsMC/asb+Q+fGZNbDvdtlT9Mnlx643McbQqc80U0zy26RR38e8kscXqHZ3MD4ea:BMjlINbrdFMnP6hcbQq8Bn6IPksF8E
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/CourierStd-Bold.otf
- SHA256 a3c25f2ec60f8d44f150cd4e478067b06cc7267fbaaf844da600ce1c31c6e5c1
- MD5 404952ec4d0ae00dd2f58fb980a99326
- SHA1 2dfa0796be958109d1558b771c3c8c77049a3945
- SHA512 e9f60c1536663b11a8d262a49bd92b80bc619e26408464350a122b4cfa149900da754c78ea7e84a314f4c914497005409cc83dc8b5f55d725bba1bd5acb2ce89
- SSDEEP 768:UYJufmmvVJkJ7pFIJRUQXzUKOXBdbOIYvQXGPgfJVXhU:UYJu+mvPg9eYCzUKOXBdqIWQX4gfVU
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/CourierStd-BoldOblique.otf
- SHA256 698fd9169ad62bd6faedd1c8e8637abc9cc65b3b1a5ba8698242b1447303fbee
- MD5 6804e7413898972e05823add91b1dfc5
- SHA1 4dfc3cecd9d3c26afaca087a69376eb6abfedeaf
- SHA512 f89a494aa7dae22022cb4bddf911c9fb8f40220c5d49bba79e5b7f97191fcc2740088437d3e56e6903e0b10aaf5535b4ce08dbe793a0e800d23038196ebf5fc6
- SSDEEP 768:edluzc2NPniJMT9BvYsWShVcbZks6AnkXhUZxX:edluz3piJMpusWShVcbZkfAnk2Z1
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/CourierStd-Oblique.otf
- SHA256 c54815a2729d633e400a6835679613090c20b91da6cb40fa761aaa475efb77f5
- MD5 71ec484296a30c9379607e36158ca809
- SHA1 6dba5afa525bfb38b653e30492d59d839dc7a0c9
- SHA512 0a53ed3ebd858d093cdfc2b2acc104453c6e211416ae24a93c2a77feb3c7a5af8e2a27ca367194f8a6d7294cf36bec84a3b0c6af1ccb8047d9b0c72622a9c8df
- SSDEEP 768:jhDq/ufETG+B8jqsYTvBTOYDjcXfwMXY6TnP1xaH9UzGb4dmA:jk/uf3YTpIPzo6TtxY9UzGb6
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/CourierStd.otf
- SHA256 54cb5c8e9775cb432afe32b0af688536354ad04ef9c9f1450ee7c88a73bc884d
- MD5 f4c2d3851e2781b2b3ff60a2e34e81ac
- SHA1 779f9fee6d37c37a03601ec1ab406d055e8e7692
- SHA512 218cf55522d6edd88ad92acaa6d440f0f7ff2a0688948a834ef21eff7ca6a915622723720dae234e412e788ee7b722261b1a238a12d05c7f63f24d854fdad43d
- SSDEEP 768:px0Kx7uekYqrdC/MNVO6MFsSStwPHMjz9Qc3:j3RuexqrdGYmJStYHmz913
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/MinionPro-Bold.otf
- SHA256 6af523a01b268ddaab5177e6c0df5024f7192d72b0b1ca9523721fbaa2aa9257
- MD5 b3870be83f40b14cb382bd498920a137
- SHA1 08b27bce2db468785348f42e39b2e80d9107fb1a
- SHA512 0979d123ba7d84b564aa0f018ae49ed7a2c4610882e574547abade7abd2e743630ccc82dfe95c3fbe963731e33df5d34c2e307fd28a2e7670e2aacbe3b87f70e
- SSDEEP 6144:3z2HDNf6XZFWrRBPt2a+C5vDgtTBbhRRkBPgdG:3zaNWZFyBPONbhXkBPOG
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/MinionPro-BoldIt.otf
- SHA256 beb1ca56f9b4f89fb1549fe63a4bc578d2bd8747f967c1df26dacd3ded3f0223
- MD5 a7487befbf3c7ba8c957d269d9ba24e1
- SHA1 75063a3db5e857b5565fe8ac9ceca74440cf2ef2
- SHA512 1694a64790aeac2d789c75a2c664a62d19c3a487730bd368e2c76a78852046e94a158467dbed26783f8eb1c17e0d76e2c3150f6ec82131cc2bbb385ef931c1cd
- SSDEEP 6144:tj64FsxSslGgShJ2rgoyGgg4sB+73Lc8n+zYBYg:R6MsxS5rxglmOg
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/MinionPro-It.otf
- SHA256 90def22f2b7b3e4aa78a160084a7a2c8f28883b700abaedc004dc74cbc2d9b4c
- MD5 45e2315e99f24ab596f9d3aed29a0fc3
- SHA1 a73342db05275c6858984f25c0d1278e93bfbee9
- SHA512 1d479beda9f70055b0596e18d9f41dace4141defb3ba9d01f21c0262e889fe37b7d9f3558b37e7716196de5c2aa7668bb8b115a5bf4540763239f22a4d530cf9
- SSDEEP 6144:H5Pf8kkiiO4vviV+eehOtHU5VLO+++A3++awYHt:H5n8qrIthf5VU2Ht
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/MinionPro-Regular.otf
- SHA256 327cb2238a82a89176ff6601139cbd0a5cdd8f8e1e057343eae13fa9b1e10ab8
- MD5 a4ea2690cfd854b24c968ac6cdce9c33
- SHA1 efc3bc793479df1a34d76c42063997ad0e73c6b6
- SHA512 f722b32c397179b25e33b88771cb588c6f23a615533e3dcb21b34052e2930f935dab58b7ee5a3098912a41e6266b5f26b86602cf57bff41917d634e55a86c52e
- SSDEEP 3072:kP2Ea79vZp3MeJymLbVQbKH3L9jLU2jRM5eUlVsXGUPHTfeoAL3sBgL/4tHRkBDB:kP2h76QRMUoVsXdwsBw/kxkBgW
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/MyriadPro-Bold.otf
- SHA256 2d09971801f2c18fc5a825379404113db237866073ab463a9bf0f3da8c62459a
- MD5 e6d1585e6c81e3206948d8548d914fec
- SHA1 4bfa4d5ad9995bd89e2d443009e4ffb728a1f74b
- SHA512 058cf93ea2be4e98e752a4090f295e00bad37b7db9d4461cf7484409af5087853653fd82aa7475a85950b48367a1d9168cc8983791b78dabeb8af4f84397a264
- SSDEEP 1536:ruMpOn479vZp3MeJymLbVQbZg8Lm52cqU5mJm2Tg9gHsF+JSqyi+GGGCRqBtUwah:CU179vZp3MeJymLbVQbZ3CrqUwJmStEh
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/MyriadPro-BoldIt.otf
- SHA256 7bcfa54cb8fb5b64dfe36f411d5265f7f71dc6f3b685c7ed0eb3753ee194bb45
- MD5 01e3d8472c3cbc43799fed290b0dc219
- SHA1 916a7e55b47d079e0bf0e3fea9ef8f48af3d53c4
- SHA512 e70a72670e5267582bd652abc73de091d8978856b757001c7b5efcc110a331b45ee0334c5864685c3054b627e0c750a050396842ed66c43a8b43aa33e6342b1c
- SSDEEP 1536:fpMBiTX79vZp3MeJymLbVQbaRRQQmzcJfttExKBUBq8YRfyraMvxvxM+RP/YxTRV:hA879vZp3MeJymLbVQbaRRQzzcJfttEo
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/MyriadPro-It.otf
- SHA256 f234adafb66ad5e47a024ff4881c2edc347d0453c15e811288ef10eb573cc33e
- MD5 4413059068c27d82ad49621ae4aaeb5b
- SHA1 ca0e2f5ce7303031e1b97f6eb3402e45e3786a3b
- SHA512 5f68440fb0fe825a3742bdeb5ea089bb124d878de7cea74ab3270b888125f66d3e0ec62d562bceea194dc68ce9a40ea1bef5d5980ce7ea207d91f04a20298412
- SSDEEP 1536:E5Mgi/379vZp3MeJymLbVQbnbkVGcjf0DoEgNT8QcZaQwHhFzeKuvGujl2u1X2Y2:AFi79vZp3MeJymLbVQbnqVjf1EAXcN0D
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/MyriadPro-Regular.otf
- SHA256 c812279db1ed52876e3b59791645424cb4714cb710f60da45f1b40757c3263e3
- MD5 1aed3bcf1b764f4ac6d9b988b0e724c0
- SHA1 6e149809ff93e683307ab3154fdd57eb24c5e9a3
- SHA512 8fb3591513bee4d9c77eb6380d9f05e7e423434bf667759765d14ce8cdc89d969230516f271b28f508ba5fba0e21b7623239e16c02599fa36b0900d199805bc4
- SSDEEP 1536:SVM7Ouk79vZp3MeJymLbVQb2RG4m1Gnb0LBaJx1llp8PUUNMF7BM7omdoZNaDq5i:2QK79vZp3MeJymLbVQbtf1GRxH8sUN20
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/Pfm/CMap/Identity-H
- SHA256 aae946bc17203b5df12838d07ae5cafc9e85a1d42d1b94d8475ab2d42b77a5cb
- MD5 40f5dc1383e3e8f870ed8f763ed51878
- SHA1 474a429de3b9feba36cfa4ce4edcd4fae3cddc5b
- SHA512 69b6d3af2ccaae9437fe4e0206c44d29ec7a51f39334826737907e1126505071ba888f4134de55a07cf14256b47daf6d29cc73bab60f3c6cd7d8bb30e24778fb
- SSDEEP 192:QJeSrsQrsil/3gU+uSpo4cvkikNwA+KZwOyKXuU8fy:QJhrsQrsWPsu+oVkEKZnNz8fy
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/Pfm/CMap/Identity-V
- SHA256 7483db44e4449a7ae232b30d6cba0d8746592757d0e91be82ec45b646c608807
- MD5 b5084cbf0ab0c3deac97e06cd3cb2ecc
- SHA1 c32458cda1951cecffb69aa2f7e3a1ea8bf36251
- SHA512 b15f65a2ab21121a4b815932a7e2dcafcf27f458bce532ae46bbcbd6b1134153027bf3e138fab42457a89bc892256b4796bbb9f1e3a85f9f4c5202015b56e3a5
- MD5 SHA1 SHA512
Resource/Font/Pfm/CMap/UCS2-GBK-EUC
- SHA256 66cdcaed3aa94525c59a82a39a93b96885883bffadea1e572464d559d21443a6
- MD5 fb9d6cd4449ec7478ee8ad1bd7465bf5
- SHA1 3d42495890e0f2acc6b564eaa79fe020fdd2fc79
- SHA512 259467113cda70ba8d399e233bef8a718f76bc6b977ac54c216bd53796a8003e7a7276031388e282f1f4430fc2fcd269b06341f2082a9442a65bbccdeb767eb1
- SSDEEP 6144:JAYrjXraHOiu06s7SSC2RGaC4J7G27r7Sbtg2j35GEE9:JAYrj7aHOip6rShXC4J7G27r7Sbtg2j0
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/Pfm/CMap/UniKS-UTF16-H
- SHA256 ab87d320c81e4c761b7a4cbd342e212db4ebe169b5d10848f2f57d828874e342
- MD5 f65c06189a55139e13885d9716bfe35c
- SHA1 394285fed905d0f4c2c21230da50626b0a31a037
- SHA512 caf07d2623861f60d79acfb313978b89f9cd8feea0bed0fe28d25286d197b62b9ef9a41130586d731dc43aeae817eaaa87c9cac31d9bd1fdb82591146e0fa2cb
- SSDEEP 3072:EbOks6xITS4gmLJpAEhFDDvBB4TS+JjXsc:jjTvIN3
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/Pfm/CMap/UniKS-UTF16-V
- SHA256 7e403dae40df21fe3f9b221f7ce750f7f5bff9cc73d82d011c4bcc48a0db60ed
- MD5 aba47550affb435a1dcc6b70efab5b52
- SHA1 754168e2c3b58fcfcb57b3ecf5ca5eebddfa1f47
- SHA512 d46537b67ef7137fc0b715e43f23322dd1189db352235a4a5ad89cb6af3d3fecaa51c1c93dcea2a7e8fb8d25b18c3b0f2ab2f23df7a5a76126a47389ffac00b2
- MD5 SHA1 SHA512
Resource/Font/Pfm/Font/AdobePIStd.otf
- SHA256 5dbc496c0b5a12d9f9ffdb83a46b9fcda8d1fc1fcd50832c783be5e9277a698e
- MD5 8653bfe4c32a8528e981748e28c59570
- SHA1 dec8dd8cba986f5852286c8b8e45c6270aeab65a
- SHA512 66e39798ca8bba9af51f44e81b77ac1703f488b6361bfb05de632fbb2726e5f1291f0210be0fc933459bea78fa433177b33e34be977c079c97c5330d6590e7fb
- SSDEEP 1536:PmsMC/asb+Q+fGZNbDvdtlT9Mnlx643McbQqc80U0zy26RR38e8kscXqHZ3MD4ea:BMjlINbrdFMnP6hcbQq8Bn6IPksF8E
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/Pfm/Font/CourierStd-Bold.otf
- SHA256 a3c25f2ec60f8d44f150cd4e478067b06cc7267fbaaf844da600ce1c31c6e5c1
- MD5 404952ec4d0ae00dd2f58fb980a99326
- SHA1 2dfa0796be958109d1558b771c3c8c77049a3945
- SHA512 e9f60c1536663b11a8d262a49bd92b80bc619e26408464350a122b4cfa149900da754c78ea7e84a314f4c914497005409cc83dc8b5f55d725bba1bd5acb2ce89
- SSDEEP 768:UYJufmmvVJkJ7pFIJRUQXzUKOXBdbOIYvQXGPgfJVXhU:UYJu+mvPg9eYCzUKOXBdqIWQX4gfVU
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/Pfm/Font/CourierStd-BoldOblique.otf
- SHA256 698fd9169ad62bd6faedd1c8e8637abc9cc65b3b1a5ba8698242b1447303fbee
- MD5 6804e7413898972e05823add91b1dfc5
- SHA1 4dfc3cecd9d3c26afaca087a69376eb6abfedeaf
- SHA512 f89a494aa7dae22022cb4bddf911c9fb8f40220c5d49bba79e5b7f97191fcc2740088437d3e56e6903e0b10aaf5535b4ce08dbe793a0e800d23038196ebf5fc6
- SSDEEP 768:edluzc2NPniJMT9BvYsWShVcbZks6AnkXhUZxX:edluz3piJMpusWShVcbZkfAnk2Z1
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/Pfm/Font/CourierStd-Oblique.otf
- SHA256 c54815a2729d633e400a6835679613090c20b91da6cb40fa761aaa475efb77f5
- MD5 71ec484296a30c9379607e36158ca809
- SHA1 6dba5afa525bfb38b653e30492d59d839dc7a0c9
- SHA512 0a53ed3ebd858d093cdfc2b2acc104453c6e211416ae24a93c2a77feb3c7a5af8e2a27ca367194f8a6d7294cf36bec84a3b0c6af1ccb8047d9b0c72622a9c8df
- SSDEEP 768:jhDq/ufETG+B8jqsYTvBTOYDjcXfwMXY6TnP1xaH9UzGb4dmA:jk/uf3YTpIPzo6TtxY9UzGb6
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/Pfm/Font/CourierStd.otf
- SHA256 54cb5c8e9775cb432afe32b0af688536354ad04ef9c9f1450ee7c88a73bc884d
- MD5 f4c2d3851e2781b2b3ff60a2e34e81ac
- SHA1 779f9fee6d37c37a03601ec1ab406d055e8e7692
- SHA512 218cf55522d6edd88ad92acaa6d440f0f7ff2a0688948a834ef21eff7ca6a915622723720dae234e412e788ee7b722261b1a238a12d05c7f63f24d854fdad43d
- SSDEEP 768:px0Kx7uekYqrdC/MNVO6MFsSStwPHMjz9Qc3:j3RuexqrdGYmJStYHmz913
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/Pfm/Font/MinionPro-Bold.otf
- SHA256 6af523a01b268ddaab5177e6c0df5024f7192d72b0b1ca9523721fbaa2aa9257
- MD5 b3870be83f40b14cb382bd498920a137
- SHA1 08b27bce2db468785348f42e39b2e80d9107fb1a
- SHA512 0979d123ba7d84b564aa0f018ae49ed7a2c4610882e574547abade7abd2e743630ccc82dfe95c3fbe963731e33df5d34c2e307fd28a2e7670e2aacbe3b87f70e
- SSDEEP 6144:3z2HDNf6XZFWrRBPt2a+C5vDgtTBbhRRkBPgdG:3zaNWZFyBPONbhXkBPOG
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/Pfm/Font/MinionPro-BoldIt.otf
- SHA256 beb1ca56f9b4f89fb1549fe63a4bc578d2bd8747f967c1df26dacd3ded3f0223
- MD5 a7487befbf3c7ba8c957d269d9ba24e1
- SHA1 75063a3db5e857b5565fe8ac9ceca74440cf2ef2
- SHA512 1694a64790aeac2d789c75a2c664a62d19c3a487730bd368e2c76a78852046e94a158467dbed26783f8eb1c17e0d76e2c3150f6ec82131cc2bbb385ef931c1cd
- SSDEEP 6144:tj64FsxSslGgShJ2rgoyGgg4sB+73Lc8n+zYBYg:R6MsxS5rxglmOg
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/Pfm/Font/MinionPro-It.otf
- SHA256 90def22f2b7b3e4aa78a160084a7a2c8f28883b700abaedc004dc74cbc2d9b4c
- MD5 45e2315e99f24ab596f9d3aed29a0fc3
- SHA1 a73342db05275c6858984f25c0d1278e93bfbee9
- SHA512 1d479beda9f70055b0596e18d9f41dace4141defb3ba9d01f21c0262e889fe37b7d9f3558b37e7716196de5c2aa7668bb8b115a5bf4540763239f22a4d530cf9
- SSDEEP 6144:H5Pf8kkiiO4vviV+eehOtHU5VLO+++A3++awYHt:H5n8qrIthf5VU2Ht
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/Pfm/Font/MinionPro-Regular.otf
- SHA256 327cb2238a82a89176ff6601139cbd0a5cdd8f8e1e057343eae13fa9b1e10ab8
- MD5 a4ea2690cfd854b24c968ac6cdce9c33
- SHA1 efc3bc793479df1a34d76c42063997ad0e73c6b6
- SHA512 f722b32c397179b25e33b88771cb588c6f23a615533e3dcb21b34052e2930f935dab58b7ee5a3098912a41e6266b5f26b86602cf57bff41917d634e55a86c52e
- SSDEEP 3072:kP2Ea79vZp3MeJymLbVQbKH3L9jLU2jRM5eUlVsXGUPHTfeoAL3sBgL/4tHRkBDB:kP2h76QRMUoVsXdwsBw/kxkBgW
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/Pfm/Font/MyriadPro-Bold.otf
- SHA256 2d09971801f2c18fc5a825379404113db237866073ab463a9bf0f3da8c62459a
- MD5 e6d1585e6c81e3206948d8548d914fec
- SHA1 4bfa4d5ad9995bd89e2d443009e4ffb728a1f74b
- SHA512 058cf93ea2be4e98e752a4090f295e00bad37b7db9d4461cf7484409af5087853653fd82aa7475a85950b48367a1d9168cc8983791b78dabeb8af4f84397a264
- SSDEEP 1536:ruMpOn479vZp3MeJymLbVQbZg8Lm52cqU5mJm2Tg9gHsF+JSqyi+GGGCRqBtUwah:CU179vZp3MeJymLbVQbZ3CrqUwJmStEh
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/Pfm/Font/MyriadPro-BoldIt.otf
- SHA256 7bcfa54cb8fb5b64dfe36f411d5265f7f71dc6f3b685c7ed0eb3753ee194bb45
- MD5 01e3d8472c3cbc43799fed290b0dc219
- SHA1 916a7e55b47d079e0bf0e3fea9ef8f48af3d53c4
- SHA512 e70a72670e5267582bd652abc73de091d8978856b757001c7b5efcc110a331b45ee0334c5864685c3054b627e0c750a050396842ed66c43a8b43aa33e6342b1c
- SSDEEP 1536:fpMBiTX79vZp3MeJymLbVQbaRRQQmzcJfttExKBUBq8YRfyraMvxvxM+RP/YxTRV:hA879vZp3MeJymLbVQbaRRQzzcJfttEo
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/Pfm/Font/MyriadPro-It.otf
- SHA256 f234adafb66ad5e47a024ff4881c2edc347d0453c15e811288ef10eb573cc33e
- MD5 4413059068c27d82ad49621ae4aaeb5b
- SHA1 ca0e2f5ce7303031e1b97f6eb3402e45e3786a3b
- SHA512 5f68440fb0fe825a3742bdeb5ea089bb124d878de7cea74ab3270b888125f66d3e0ec62d562bceea194dc68ce9a40ea1bef5d5980ce7ea207d91f04a20298412
- SSDEEP 1536:E5Mgi/379vZp3MeJymLbVQbnbkVGcjf0DoEgNT8QcZaQwHhFzeKuvGujl2u1X2Y2:AFi79vZp3MeJymLbVQbnqVjf1EAXcN0D
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/Pfm/Font/MyriadPro-Regular.otf
- SHA256 c812279db1ed52876e3b59791645424cb4714cb710f60da45f1b40757c3263e3
- MD5 1aed3bcf1b764f4ac6d9b988b0e724c0
- SHA1 6e149809ff93e683307ab3154fdd57eb24c5e9a3
- SHA512 8fb3591513bee4d9c77eb6380d9f05e7e423434bf667759765d14ce8cdc89d969230516f271b28f508ba5fba0e21b7623239e16c02599fa36b0900d199805bc4
- SSDEEP 1536:SVM7Ouk79vZp3MeJymLbVQb2RG4m1Gnb0LBaJx1llp8PUUNMF7BM7omdoZNaDq5i:2QK79vZp3MeJymLbVQbtf1GRxH8sUN20
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/Pfm/Font/Pfm/SY______.PFM
- SHA256 035af7591938139c78f8ad715047c16cd439c6a7791035deec013439921e6925
- MD5 692b5b1be7394e93fd6e0750cae81474
- SHA1 208ceb86c2dde35c78fb40ac0f2573f4e4ff499c
- SHA512 9b7ef79d488361bd1e94072b4fdaf17854881e673dc4a2981c31a65a185de987ec6c605753e1a645e74acd9fb030cfd81f5f0bb81661b3c43dfaa5ef46e0caeb
- MD5 SHA1 SHA512
Resource/Font/Pfm/Font/Pfm/zx______.pfm
- SHA256 b3e66a48a576f1d90277aefb89af9cfd370e7c216978234bfe66b6ab6fa2c0fd
- MD5 705cd85804c3dc1eef81b624ea813bfb
- SHA1 5d5807713d14f45b9e5bce0576ade157bad5a701
- SHA512 dbbf44d7fc2087e5318fca440eb4c0396a9166aab64de31a901c0fe3c049a5577c021e43406e611d9eada020233c1ba008db46026f5a88d5c26c25125fae46ba
- MD5 SHA1 SHA512
Resource/Font/Pfm/Font/Pfm/zy______.pfm
- SHA256 1a5660f3f8bb9d18fd6a710d70af26cf1e167fe040d7daf3ce41e527236e1fec
- MD5 7d3be2ec810fa01a9ea7d2a26551cff7
- SHA1 7962465ce36a83666fe7a3edcb31e125ed597e93
- SHA512 cd4ba616364f37aa8294c9a2a6b64ed3cf0b011cfcffa9056295b5fc23348c2b3cfa96a25954c6dc472053daa1f9f4b08176a515c95abab6ffd7077deb8d7959
- MD5 SHA1 SHA512
Resource/Font/Pfm/Font/SY______.PFB
- SHA256 b0480c6f9cee6bb87c1ae159a89a8a9d1ffa46e0ab70461fdf2fc291e2c94b4a
- MD5 6fd0724d1fee177adad6a13c65af5268
- SHA1 6efe2355d68306e2d5083895ced81002f7934ebc
- SHA512 61185eafc64bf732a07add78ff6cf1ba3d0c988b64097f376018e5e710e35840a2556523ae6634c27ce45e47ffbdf36778452ccb3fa1f015dbcb02689f1e1797
- SSDEEP 768:2igXv39LX995GGTC4/HrcgXB7qtyiq/wX7RUzKR5tn:2dXv3JAGTC4DdHiAwlUzKR7n
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/Pfm/Font/ZX______.PFB
- SHA256 ba8f3996fad32c042bf1f474a08b7452f252060882dc4de5a97ec389209e2301
- MD5 5eb6497ffaa36909f6b2a824054bd4d9
- SHA1 cc04c0ccad1e9c10552f1ab7fac45b0b529de299
- SHA512 dd7a1b26dd041266404d86d6616c765eedbfc71460cbcf15fcc02de1704ae7e2892b25b6134017621f470768d4eb4a64010ec7ffec459d0c669f107c66841caa
- SSDEEP 1536:TGYo+k47OpUT9E64XnuCibOb9z6DU40fbmbZUHs:I47Opy9EBXVbVsUnTmbZR
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/Pfm/Font/ZY______.PFB
- SHA256 1182fcc2fb887713fb954a804f83fae3417c27b6929ecb07c5034dac24586e8b
- MD5 72abd7f6b6b7e6f2ccb06626aa8b46f1
- SHA1 f9cc5efb748f4068aa08290ee58aa41f8bd4bb81
- SHA512 d34a8d9fac3efea7504f87b203c9074f7589cc726fce0b23132eb14d75d2f9a5d67c13952f0f1fce02fa44b786bdd17828c355471bd974b8d78a29abfc8c7823
- SSDEEP 1536:SnSFGnyhqkcpFyFmkscxLFNv2FRle4Y/p+Nsz8Rc1wNbsGvStIjQIRiCt6b7VkV/:ESFSiqJKskP2FurRjp1cVvRj2j6/YhM
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/Pfm/Locals/am.pak
- SHA256 4c0b4273dc4103c666ff01ed8b9db995f68c5c178973465bb25cd5cdf99ef01a
- MD5 4e7db89a9f5c07a295de43b745e5658b
- SHA1 3f24cbc02d130ed156f1b4c57dc951a9238dc8ef
- SHA512 c4117d50e2b966345ff86aade385552915ba41bb176fcdcd402fb54949377f00d17eea384ec90df2e3db92354198ce600131b7609eedf108f7b919d5ba330611
- SSDEEP 3072:Mw1jZA/92t7Rh4rgEkDvuHqOVoZL5kiIEG/yZJjhSQVNLWGe/oqM0bvuo00kef9m:716eGurQfZx30jH8+x
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/Pfm/Locals/ar.pak
- SHA256 776db47dd91bce8bc813a54a815be3e73b6e58e9fe5f24db7bf0d8c06a240f6a
- MD5 70bb1c831327b26e4dd74097f59a55b0
- SHA1 46cf431d19bff9646ae6c6fd0c57e25664178d14
- SHA512 8f78d18e15ee86b801cb49ee4ee7f5dc06f9730181b849ede944c5d922f7c7ab5814d7879399a712e8bb56b1878011552b6a667a6b8dccef6c6be3f236c3f44a
- SSDEEP 3072:qjf5HjSNsZaJBWGxyxMtxHSM2uZtE9yDSZ1B/G29KSI1+CsI1IiH2L2p:BNsRFoyCsI1Zd
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/Pfm/Locals/fi.pak
- SHA256 528e453ee8fd16b6e2066b5417b115504cd31afc4ffbd79206369c747caad1fe
- MD5 c865b2cab8dd25682b40006832a4b604
- SHA1 0722c7157c96eff7a4ac85a113cf21c4d0e27b1f
- SHA512 8eb3dbff515e18f481f62e8f3ac17ea7674ea8adf0c37b0bb2c5da6c9914b9376a8dac35f2e004a313fc5f2507e7200bfcc3b5973ae428df147d93b26ed3965b
- SSDEEP 1536:jw0tbGVUG8TQyRYFTTqIZq3Ik7414JEj6MEi18El0oR8QoFcb4EjjATcM1JhizRs:jw0tbUaTQuYFTTTq4Ug4JEjH18ElXRCV
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/Pfm/Locals/fil.pak
- SHA256 500906ac9cab570726fe2c3c819eec3f88cb69f326857920d8423883c222c773
- MD5 60d50ee0763200548c9df4b4bc712cd1
- SHA1 206f9cd895936fd7f597b72446c529881cde9829
- SHA512 f59a30f34eab4bec57b6e5d3e53e0b13b74db64f50a9d7b33c9a6fad63de3a80a2436fe8483355d3632fabbc613e1aeb38a3792c4296773fbe50e23ba1e7dee5
- SSDEEP 1536:jsSFtTdYhLVgQNqsszmNvuNpEWnGkHl1AM64CzPEchYkZKk175aXmAMD:zTdmq51AaCzh7MKsmAW
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/Pfm/Locals/fr.pak
- SHA256 0ddb18e05d4a58c010a42207af0ffdfaf12f9bee29f6971459bd69fdf26b0e79
- MD5 b5bce917fb4d322dad4b26febaaef09f
- SHA1 891fd73ba1c70be635772386e4bf3cb13496fb59
- SHA512 a795e60a2197f4a2f9644e2b4c96635472e270274e991cc1130edc64e112f2d527577ff3b7bf7539fc62e724687f82330bc59e3adeaeb37000a60dcd4e503425
- SSDEEP 3072:hPI7B3PxbJzThykykClc3wwTwajbIwKByroFDuFcZqslcaWyNf/Uv:hw75PxdzTIkykClKwGIwKgrwDuFArfsv
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/Pfm/Locals/gu.pak
- SHA256 5a23541ce618f91b78a809fe91a0c68681e20018c4411e00d8c205ab1d850dbf
- MD5 b0b1b848ceafcaf9e0dcde8bcf7492d8
- SHA1 39e929ebc69acc4c6610b9c3382c49a376ac9052
- SHA512 7ac783936a15c1313dd7a68961ee98e4d351b60d3ef1e5bd89ef02456145fcca5147884038950a8b9ed0de7ed37ed6f3c2ce9b82de5e3a426ec7e5e918e5b2c7
- SSDEEP 3072:twDmoa1A626WB8Z3i81cKHdO3Iu62oY/meBeQOR5q22Dv2pCbflLMWsCBDnZkSHl:tQ4Cv
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/Pfm/Locals/he.pak
- SHA256 ca440d0128b62e35333730c5925992ae5b4b05a37c10105a9145eb5cf7a77071
- MD5 209974550cc2a835f1879995851b424a
- SHA1 f09850b9e7fffce197e362b9562cd0ff1c5c71ed
- SHA512 4ab857adeab0e45f03868d1208d8f3250bbe27c5854bbc885e94e7e6ed8bcf9bdb2ff5035bebb1958b345ecadf244dcc433d760643ea544066b32f3f1e266276
- SSDEEP 3072:MSeD15QWmU6XrlH/piG5Bnm3XTnZ2F2j9V:MSeD15KPXrlH/piG5BnOXTnZ2F2j9V
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/Pfm/Locals/hi.pak
- SHA256 1ca6a0546f9627fa9ba3d377d79a21ff26ec9b349d47247c9b241a70728d0699
- MD5 fa034eb13d21ce4e9fc2d3eafdf40cd2
- SHA1 0992d91706d26b6cc2ff64d899308ba4e9380a35
- SHA512 4f8024f43a70d9d8ae67848e2540b028cf1b9183b7dedd66043fb16394601da986d695c8d28f072444a69c1b2639c8b79096065389069fb854d152db166ed734
- SSDEEP 3072:XkOxgTgcwfKSj33cdEVhk7ovrCEO/S/bBfvTHef+a7BKfzzrRE3b8RLljlxCYPhb:rOCi8R
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/Pfm/Locals/hr.pak
- SHA256 64e531e46cf5b644d1b7f1df885efcf51a65db50fab65ab250f5e4e1adfa9d29
- MD5 624bce9b02382312f4588d3147b738a3
- SHA1 8df16c75c9e86a96d9f2b11e80eb182ba6c8eef9
- SHA512 e74e56210cb3c184499de4e0d9e57e8ee9d7314b93fb1a97030a3397cc47b91ec74c704b25fc4bd16f4c7680240ae1d39d69cd9f024dd52c90eae9cc6c53b6ae
- SSDEEP 3072:1JKdAGC/lemhlBExypakZUaO2sMMoLaz7v53Kkx9i:lHiKp
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/Pfm/Locals/hu.pak
- SHA256 fdd99d667419612bf98200783e0ccf0f7c11913ca03ca162d72d43f6861e5478
- MD5 ca8a821ff5a6b848c5a170ff9a97bb39
- SHA1 a98b91fa29848013cef021ec8b3a29979cac0c65
- SHA512 e475a09e1f9f740b6c36c9b33b20f263896b869d8ac58848504db29903a9597b84761b9c3918addc9c726d4429a0f496f44e3a8b0cce9a3008d071a5d46bb5c6
- SSDEEP 3072:a1WzOkbJiCwF/iGn1dgTrdA0RdpEtL1543ICJ:eSbY/iGkTtRdpEPu3ICJ
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/Pfm/Locals/id.pak
- SHA256 03e35e4c8d682d80ebde0492ba01d5a922766daf70df6cb2a22a5a5365adff1e
- MD5 c26b55aa25d424653e75ac278b0bca42
- SHA1 fb49a3940c6380d6af38a82c95ca56cd3aefbeab
- SHA512 b701aee8c2d2490309c902cf152ea118d90429caabfef4774802319871bec4c94fe41d5a305d6df7b698ca051b21332a7422a63777470d781c70100ff758726f
- SSDEEP 1536:QOle5KmKs/EKdQ95/SWlEmjUwRHeEJpkw5B4X1CPXsAzb2ZghMrREYwcCdAbJ:QdlQ95KWxpkwc8XsAzaZGMNwcCdO
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/Pfm/Locals/lt.pak
- SHA256 70996649507cc815f0c4886f8c4822d45c5e201e8e41dc464ab4973ea19d8a23
- MD5 6b4c975b9a0b31fa4c0f8818ec53942c
- SHA1 dcc10f3758945824b092d071424f9ecb413a353c
- SHA512 4ad012581c3853d944152519202e1df67dbfee2fa752c3114da5bf8cb6653f1cb093d5bf951795990a0e0e5d16c8375ab99074cafecbce518ab83ddaa30d2dd9
- SSDEEP 1536:n8UXuRiF1eo5N8FYzKcdnaJGNMJ0c5PAQpvK5rmz3MWbhnfmvVDF6S05nGWSgAGU:n8UX/1eOxKonaJYQjbXd+NDF6S05nI
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/Pfm/Locals/lv.pak
- SHA256 605d916a697824c4ad6c418d6e7cc157b85825da5dc08a0716d89c56bef0a6fc
- MD5 2ac1161c66a47bb69378559c2c6fb44d
- SHA1 a1e28a5ae021fe5cbf57ed7e6e7177114421bfa6
- SHA512 2e5a9d0ed020447e6482feed0770c7f1f12118591c7412b4bb796a2219b9977632cfcef16faa0f28064d8b19c2dafc4fd2cae929d57bdabd37702152fa850855
- SSDEEP 1536:AllVfG/A7NnPXNGchkGB5nDJa7z+z0AhzOgUcCYh2Nn4WSuAhaIvhZmE42Cla2M6:cbfGI7dNDkGcOUcCYwNLyxfaVdF
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/Pfm/Locals/x64/AdonisUI.ClassicTheme.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8103f2cce6a864ceefe6c5b0c05087ac85ab04a2abf150e93bc9db90c54d9d20
- MD5 8a1b183bca062f48402c74f2daba7b92
- SHA1 d9417bf78b3b37d668c08e67f3c0f21dbc6dc11e
- SHA512 0f5120fa9ed24d2a49b82cdc62113302002ccc5e1cf389cc28830f36b2915f876bdf77094fa6dfa312fc01b6f482465297fa734509511fa7e72285569ce57e87
- SSDEEP 6144:aMNTja9KIKf5RCs1ussMKlzI5iJQn9gu5DPOvObo:5Za9KIjs1ussMKlzI5lo
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
299130
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\1\s\src\AdonisUI.ClassicTheme\obj\Release\net45\AdonisUI.ClassicTheme.pdb
mscoree
_CorDllMain
Name
.text
Size
284KB
Virtual Size
284KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Resource/Font/Pfm/Locals/x64/AdonisUI.ClassicTheme.xml
- SHA256 e97828272a7a30780a4b92c791ae94b3adc4268463c53f81df0a27a372c77348
- MD5 68a996036a022036a7260c21aca60d8d
- SHA1 f7ccc93b98ede087327b9a2ee33b49084adaaa7f
- SHA512 0106caeecb55ff8599bc6f666e19306354e53bf2638c6298c8148a1e956ef7fdd04d79575abebd25e4df9d7e21f5996b49b293e0f2b03b53d81ebe95a1759997
- MD5 SHA1 SHA512
Resource/Font/Pfm/Locals/x64/AdonisUI.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 db46b6106dc1b30041ce3f287ded91166895ff3f1928250fc79dd46c444b1e45
- MD5 3d4c8b6aad28ec574e56ccda22b34ef3
- SHA1 bc22ac7097e597fba3d7367b2fd5c61adff28941
- SHA512 fc56241e65dc7bcc678a2af92f79bda017ceb3f7c4f203c7e9ce753d573da868608a6f56545c0d181a625737278b7b73223e5dcce85bf1f3c5b7b1b06e5c5739
- SSDEEP 3072:fuZPAdWKbu3355s555GPQKljrKxX0yAbTxin1YzqHf0llbS1sjZ73h39Iwj:GydWDrKxG3h39Iw
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
173338
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\1\s\src\AdonisUI\obj\Release\net45\AdonisUI.pdb
mscoree
_CorDllMain
Name
.text
Size
161KB
Virtual Size
161KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Resource/Font/Pfm/Locals/x64/AdonisUI.xml
- SHA256 3dbc7b701f01ca178359a1de543792c919ed49c16dfa06d766c545c8ffa51c50
- MD5 a310f32ce7eb9a28e9b0fa5e87ac71de
- SHA1 bb8204232932dfea23d2fa76b44954ac559922aa
- SHA512 3ca0a763383092c5df00efed0a02a13b2413a17e6b0f966364bfe932a2cf8992450778dad730d9afcdc7b8ee090e3e7c124d3f38e92a213403f38120e87f6805
- SSDEEP 1536:sBjMs3uxMVuQHWVhVRVeHELtQyVuHEItQyk3n2q6RD3CKlJvJk3IwniCbgnHCoaf:sg8MA0OhcSc
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/Pfm/Locals/x64/SQLite.Interop.dll
- IMPHASH a42f73521c784fa06f1d886fcbcefcba
- SHA256 9309fb2a3f326d0f2cc3f2ab837cfd02e4f8cb6b923b3b2be265591fd38f4961
- MD5 56a504a34d2cfbfc7eaa2b68e34af8ad
- SHA1 426b48b0f3b691e3bb29f465aed9b936f29fc8cc
- SHA512 170c3645083d869e2368ee16325d7edaeba2d8f1d3d4a6a1054cfdd8616e03073772eeae30c8f79a93173825f83891e7b0e4fd89ef416808359f715a641747d7
- SSDEEP 24576:YPUxmkgSxPgobZPRjZ22H6edtOZzWySRO3mlE0i/Yl5P+qF+8k+ao/si6:8UxXPgo8e6WYBSJZSS5P97I
- MD5 SHA1 SHA512 SSDEEP
Digest
cf:de:a6:58:6d:f1:ba:ab:46:cb:60:08:e4:1a:5f:83:16:67:26:51:0b:b5:b9:8a:c9:8b:ed:b5:c8:82:6d:c1:e7:36:aa:8a:82:fe:da:08:1c:7c:47:a3:78:cf:af:fe:92:cb:b8:fd:17:10:3d:e8:ca:87:5b:a3:f2:a6:35:30
Digest Algorithm
sha512
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
Chains
Nov 2, 2021
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Digest
3e:e8:ad:96:a2:e1:d0:66:85:77:ae:c2:41:dc:ef:f3:d5:76:58:fd
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
Chains
Nov 2, 2021
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
Serial Number
05:0c:c7:2c:cf:31:ae:9b:2e:36:41:0a:d0:ee:98:92
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 1, 2021 - Dec 12, 2024
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 7, 2016 - Jan 7, 2031
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
Serial Number
05:0c:c7:2c:cf:31:ae:9b:2e:36:41:0a:d0:ee:98:92
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 1, 2021 - Dec 12, 2024
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
0
Major OS version
6
Entry point
6140
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\dev\sqlite\dotnet-private\bin\2015\x64\ReleaseNativeOnlyStatic\SQLite.Interop.pdb
mscoree
StrongNameSignatureVerificationEx
StrongNameTokenFromAssembly
StrongNameFreeBuffer
CorBindToRuntimeEx
StrongNameErrorInfo
wintrust
WinVerifyTrust
kernel32
TryEnterCriticalSection
HeapCreate
HeapFree
EnterCriticalSection
GetFullPathNameW
lstrlenW
WriteFile
GetDiskFreeSpaceW
OutputDebugStringA
GetModuleFileNameW
SetEnvironmentVariableW
LockFile
LeaveCriticalSection
InitializeCriticalSection
SetFilePointer
GetFullPathNameA
GetEnvironmentVariableW
SetEndOfFile
UnlockFileEx
GetTempPathW
CreateMutexW
WaitForSingleObject
CreateFileW
GetFileAttributesW
GetCurrentThreadId
UnmapViewOfFile
HeapValidate
HeapSize
MultiByteToWideChar
Sleep
GetTempPathA
FormatMessageW
GetDiskFreeSpaceA
GetLastError
GetFileAttributesA
GetFileAttributesExW
OutputDebugStringW
ReadFile
CreateFileA
LoadLibraryA
lstrcatW
WaitForSingleObjectEx
DeleteFileA
DeleteFileW
HeapReAlloc
CloseHandle
GetSystemInfo
LoadLibraryW
HeapAlloc
HeapCompact
HeapDestroy
UnlockFile
GetProcAddress
CreateFileMappingA
LocalFree
LockFileEx
GetFileSize
DeleteCriticalSection
GetCurrentProcessId
GetProcessHeap
SystemTimeToFileTime
GetModuleHandleW
FreeLibrary
WideCharToMultiByte
GetSystemTimeAsFileTime
GetSystemTime
FormatMessageA
CreateFileMappingW
MapViewOfFile
WriteConsoleW
QueryPerformanceCounter
GetTickCount
FlushFileBuffers
FreeEnvironmentStringsW
GetEnvironmentStringsW
AreFileApisANSI
SetEnvironmentVariableA
RaiseException
SetStdHandle
GetConsoleCP
GetConsoleMode
SetFilePointerEx
FlushViewOfFile
lstrcmpiW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwindEx
InterlockedFlushSList
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
GetModuleFileNameA
CompareStringW
LCMapStringW
GetACP
GetTimeZoneInformation
GetStringTypeW
GetStdHandle
GetFileType
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
user32
wsprintfW
advapi32
CryptAcquireContextW
CryptEncrypt
CryptDecrypt
CryptCreateHash
CryptDeriveKey
CryptHashData
CryptDestroyHash
CryptReleaseContext
CryptDestroyKey
SI00b5de0dbe05adc8
SI00f2097672333949
SI013768ea228eaf06
SI03ee1370ff2172fd
SI050169b0f137dcac
SI061f9351f6b79d40
SI066df4a47deb7b95
SI075258fe7332f5c9
SI07646c0ac405baf1
SI0a8f1a0337a9feb7
SI0b65268e19d3b81d
SI0e7c9abcb195c68c
SI0f556a49067bf550
SI0fe7fecb92f1b44b
SI12409cae6ddf2f1e
SI12a7c0808f3f99f2
SI150953dc62f0a879
SI1527d54f96ad891e
SI15d5f41c81892f13
SI19b2677a019ab7ab
SI1ae480d1861ed022
SI1bc1bc471c8cd143
SI1c7a7970970b9619
SI21d24eac30bb9014
SI23e7cf9c8e559e93
SI2409c7e1eb500ce9
SI24bb313f312e2857
SI24f5c83eaddd65e8
SI252aeb4a9d3dc2ff
SI2b074e8cf29cb472
SI2b5f6f3d24eb7ba3
SI2bc16556d60ccfcd
SI2c7820fd77bf7594
SI31a566678d8c54ab
SI327cfc7a6b1fd1fb
SI32b0162a49ae8729
SI349980d776ee39ac
SI36ddf861177da59c
SI36e67160052f7f69
SI3723ba2973e3b57b
SI3974af1f94b94613
SI3d45b939740dff51
SI3d527d6e902c8427
SI3efc17e9bbe52434
SI3f596ca698b243fc
SI3f8b1cdb4dc92eff
SI45d842f2d2322061
SI462a496f3247faf2
SI46481015c7f49c68
SI4983499b64278231
SI4987aea8bdedf163
SI4abff63f9a080046
SI4bf5a93645714882
SI4ceb9ee614df7639
SI4fb6877896ef7303
SI50a9b553ac0b2e2a
SI52058dea2268cd04
SI546abd8b90c0f48d
SI568a7d0a1f4d0ff4
SI57335d3e329eea8d
SI5887bf867911838d
SI588da80b6a264802
SI5b2b3e8bff031a75
SI5b7374ef2d63d8eb
SI5c7fb49466251e7d
SI609efcf96ea8408a
SI61a330d2e855b61b
SI633e1c91fb9a8aa1
SI64119fb980b7e962
SI6479b9cf07b87f67
SI674c3bc07fc17979
SI6901b186cfd089f2
SI690ffdcfd9cda629
SI69d8a1d378771295
SI6cfa851319f410c1
SI6d14611bb8b2c8bc
SI6e539204336d5b4b
SI6e6c544c028b2de9
SI70e4ec628dd7e188
SI7164645d0504ae24
SI72621cc08869a205
SI72b05b1ad5f34d61
SI75fe921d50a95fe0
SI768767362ea03a94
SI77ffe3fede90bfbb
SI783104ea11038afc
SI79f6c64948ab63d2
SI7a4943591207dd14
SI7b97ee05aa1e64c7
SI7c373366af3ee2f7
SI7cd7250399b1ea60
SI7da3b9691a73b4a2
SI7f41c842e0d89557
SI8162bd921f89d839
SI824276b89178ecbe
SI83d1cf4976f57337
SI863e1ae0679961f5
SI87a11c29fe1dc17b
SI88974d2e6bd51eff
SI8a3a9f59ab5f24ee
SI8d447a033d183aaf
SI8d676d5954c732bc
SI8dd2c969f2a6a31e
SI8e33e5864c547f3f
SI9196a02c851acbfb
SI919f742193b92a4b
SI943321d364f02e5d
SI94d8f51c6c1db577
SI950480ab972e108d
SI9517b76a4f0b657e
SI9662fa92cee70cf1
SI979d7afd84d6f0ca
SI989b06a5a9b937fe
SI989b754accd7cddf
SI9bf461db9bf83c22
SI9c6d7cd7b7d38055
SI9cb7692f61998485
SI9ea49276dcf9849f
SIa069da76968b7553
SIa0f9dd1158cbfb0c
SIa1d7e21a548b910c
SIa26b8e5116b7d93b
SIa2a6050a8dbd3b7a
SIa3401e98cbad673e
SIa3f7b31190ce0815
SIa618e7f1e95b5c32
SIa62692883d0c456a
SIa8e1a742a358dc07
SIa9b758d3ae2e9aea
SIab3ed5feb3c43f0c
SIada7f27769d7f95b
SIae9562605f0b7c06
SIb391996b7b633820
SIb3f045f05d2d1b0e
SIb4089165600bb7f5
SIb4e97c410be9a2cf
SIb6d52d8cb2f1045a
SIb739af05c351a5b0
SIb84ee16d149e7562
SIb94a6bc97d77e69f
SIbc9b0b73a965892b
SIbff6307869d58daf
SIc001296960f3e921
SIc0bb4eab77f5a999
SIc21d402df09e0c69
SIc26100c97b176329
SIc28b5d2d1f102994
SIc2d8715ee8c9e908
SIc38599462746964c
SIc3b0ae4f7a27b7a8
SIc5d5610a73781fac
SIc8c63d94dd03040b
SIca6f27da046939cc
SIcbf931747ce28d75
SIcc134e65c80c0c61
SIcd2334250b08e199
SIcd6b4ac0aeff7202
SId00f524badf4f5cf
SId6deafdcc0c75049
SId99ac2a61d035e11
SIdba35b6dcb77d463
SIdbbe1b52f304f379
SIdc2e4e1ccfa9a043
SIdc6920f226dceb74
SIdca7c218fe9393fb
SIde347320a2d725fa
SIdeb28053ce71d5b4
SIdfd4d81e1791b463
SIe25e8f29ef2a78eb
SIe2cb515ade8c0235
SIe57aa77c8884d3f9
SIe6405dfd7b63ead9
SIe68a75d48671c8a5
SIe7632ce587b97772
SIea4313bfab0cfe57
SIea8388f7613ed158
SIec91f505db92f298
SIecd4a7ef4a5968a1
SIeea5cda6d9846aa5
SIef12447577961bdf
SIf060fffd3e5c94b5
SIf21356bf3fa1a8ef
SIf216ef3874529d42
SIf356c1132676af25
SIf4199c70bfb81a15
SIf499bb5c421377e7
SIf71b64d343ddea8b
SIf8090240c1414098
SIf8364af380546f2d
SIf86df75514f4442f
SIf8a71e249d9c661f
SIf8b1716e85b0e192
SIf8ee6276be88ce12
SIfc350ae509dc2b53
SIfca3960780d005fa
SIfcfad09d1b0a60ec
SIfd52d1389825aac4
SIfdb97bb7d9d0d622
sqlite3_cryptoapi_init
sqlite3_fts5_init
sqlite3_fts_init
sqlite3_json_init
sqlite3_percentile_init
sqlite3_regexp_init
sqlite3_sha_init
sqlite3_totype_init
sqlite3_vtshim_init
Name
.text
Size
1.3MB
Virtual Size
1.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
263KB
Virtual Size
263KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
17KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
70KB
Virtual Size
70KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.gfids
Size
512B
Virtual Size
156B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=20, id=241, version=40116,
count=128, id=243, version=40116,
count=37, id=242, version=40116,
count=7, id=259, version=24123,
count=21, id=261, version=24123,
count=16, id=260, version=24123,
count=8, id=203, version=65501,
count=3, id=147, productName=VS2008 build 21022, version=21022,
count=153, id=1, productName=Unmarked objects,
count=1, id=264, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
Resource/Font/Pfm/Locals/x86/BouncyCastle.Crypto.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e51721dc0647f4838b1abc592bd95fd8cb924716e8a64f83d4b947821fa1fa42
- MD5 0cf454b6ed4d9e46bc40306421e4b800
- SHA1 9611aa929d35cbd86b87e40b628f60d5177d2411
- SHA512 85262f1bc67a89911640f59a759b476b30ca644bd1a1d9cd3213cc8aae16d7cc6ea689815f19b146db1d26f7a75772ceb48e71e27940e3686a83eb2cf7e46048
- SSDEEP 49152:JIBbo0WIgmjljFtXCdRLRBcJd+KaGxHIkMNqzP56O8lZ7qXUqi9Y:6BbBWIgWljGxRB/LLY
- MD5 SHA1 SHA512 SSDEEP
Digest
f6:a3:c5:7e:59:87:21:c6:7b:dd:bc:9b:b2:2d:4f:d1:d2:a5:cc:63:04:1d:78:fb:93:6c:0e:40:16:85:b2:61
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=5101633,CN=Claire Novotny LLC,O=Claire Novotny LLC,L=New York,ST=New York,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13084e657720596f726b,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Oct 19, 2021
SERIALNUMBER=5101633,CN=Claire Novotny LLC,O=Claire Novotny LLC,L=New York,ST=New York,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13084e657720596f726b,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Nov 10, 2006 - Nov 10, 2031
Subject
SERIALNUMBER=5101633,CN=Claire Novotny LLC,O=Claire Novotny LLC,L=New York,ST=New York,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13084e657720596f726b,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
03:d7:ef:74:a9:ff:03:a2:20:b6:ed:bb:39:9d:14:c1
Issuer
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 18, 2020 - Mar 23, 2023
Subject
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 18, 2012 - Apr 18, 2027
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
0
Major OS version
4
Entry point
3221146
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
BouncyCastle.Crypto.pdb
mscoree
_CorDllMain
Name
.text
Size
3.2MB
Virtual Size
3.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Resource/Font/Pfm/Locals/x86/BouncyCastle.Crypto.xml
- SHA256 de94c224474fad71cd45a2fcd802976f16b8edf7dc290f1e353752d495703e10
- MD5 253aec9d04057e346233763b2ae93a11
- SHA1 2a08b5e3f527b717aae41b0a295b6b4b4a446e9f
- SHA512 7f71600be96bcf1df1748e3715ecb939706d19ea3e19b6d67497718a57ce6b0c8b985aab2b24bf3a2f8a58f471b03e0f807ef3b7927192d341609975e7edbd23
- SSDEEP 12288:Pky4oeqjABNM7fN62FuyEyp/0nNe8C2cjkTYExbXAJv:PkHoeqUBiZoPYYbXk
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/Pfm/Locals/x86/SQLite.Interop.dll
- IMPHASH 39ace63b362beb47a2a7a8202a5c4f2d
- SHA256 83f332ea9535814f18be4ee768682ecc7720794aedc30659eb165e46257a7cae
- MD5 8be215abf1f36aa3d23555a671e7e3be
- SHA1 547d59580b7843f90aaca238012a8a0c886330e6
- SHA512 38cf4aea676dacd2e719833ca504ac8751a5fe700214ff4ac2b77c0542928a6a1aa3780ed7418387affed67ab6be97f1439633249af22d62e075c1cdfdf5449b
- SSDEEP 24576:eiDAYMz2epP8AEXn8z7qsyb8c+gntHKuvKtBLtTvD0nsrFSK96fYlYyv:1AYMza36enEuyjpTV96A2yv
- MD5 SHA1 SHA512 SSDEEP
Digest
3b:1f:3a:ac:fb:ed:36:06:88:31:ea:b4:6d:f3:a1:e3:8d:2e:7a:dc:11:66:12:9b:f9:bb:8d:7d:d5:0e:57:cc:4e:89:0a:bf:27:24:68:97:37:c9:ea:55:87:a3:86:1c:e3:da:c3:21:ee:3d:b2:c8:6c:40:c6:40:7b:27:ce:61
Digest Algorithm
sha512
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
Chains
Nov 2, 2021
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Digest
18:28:ac:13:a6:25:5d:21:f8:30:42:d7:18:8e:57:cb:ff:65:3f:df
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
Chains
Nov 2, 2021
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
Serial Number
05:0c:c7:2c:cf:31:ae:9b:2e:36:41:0a:d0:ee:98:92
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 1, 2021 - Dec 12, 2024
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 7, 2016 - Jan 7, 2031
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
Serial Number
05:0c:c7:2c:cf:31:ae:9b:2e:36:41:0a:d0:ee:98:92
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 1, 2021 - Dec 12, 2024
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
0
Major OS version
6
Entry point
5844
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\dev\sqlite\dotnet-private\bin\2015\Win32\ReleaseNativeOnlyStatic\SQLite.Interop.pdb
mscoree
StrongNameSignatureVerificationEx
StrongNameTokenFromAssembly
StrongNameFreeBuffer
CorBindToRuntimeEx
StrongNameErrorInfo
wintrust
WinVerifyTrust
kernel32
TryEnterCriticalSection
HeapCreate
HeapFree
EnterCriticalSection
GetFullPathNameW
lstrlenW
WriteFile
GetDiskFreeSpaceW
OutputDebugStringA
GetModuleFileNameW
SetEnvironmentVariableW
LockFile
LeaveCriticalSection
InitializeCriticalSection
SetFilePointer
GetFullPathNameA
GetEnvironmentVariableW
SetEndOfFile
UnlockFileEx
GetTempPathW
CreateMutexW
WaitForSingleObject
CreateFileW
GetFileAttributesW
GetCurrentThreadId
UnmapViewOfFile
HeapValidate
HeapSize
MultiByteToWideChar
Sleep
GetTempPathA
FormatMessageW
GetDiskFreeSpaceA
GetLastError
GetFileAttributesA
GetFileAttributesExW
OutputDebugStringW
ReadFile
CreateFileA
LoadLibraryA
lstrcatW
WaitForSingleObjectEx
DeleteFileA
DeleteFileW
HeapReAlloc
CloseHandle
GetSystemInfo
LoadLibraryW
HeapAlloc
HeapCompact
HeapDestroy
UnlockFile
GetProcAddress
CreateFileMappingA
LocalFree
LockFileEx
GetFileSize
DeleteCriticalSection
GetCurrentProcessId
GetProcessHeap
SystemTimeToFileTime
GetModuleHandleW
FreeLibrary
WideCharToMultiByte
GetSystemTimeAsFileTime
GetSystemTime
FormatMessageA
CreateFileMappingW
WriteConsoleW
lstrcmpiW
QueryPerformanceCounter
GetTickCount
FlushFileBuffers
SetEnvironmentVariableA
AreFileApisANSI
DecodePointer
SetStdHandle
RaiseException
GetConsoleCP
GetConsoleMode
SetFilePointerEx
FlushViewOfFile
MapViewOfFile
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
InterlockedFlushSList
RtlUnwind
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
GetModuleFileNameA
CompareStringW
LCMapStringW
GetACP
GetTimeZoneInformation
GetStringTypeW
GetStdHandle
GetFileType
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
user32
wsprintfW
advapi32
CryptAcquireContextW
CryptEncrypt
CryptDecrypt
CryptCreateHash
CryptDeriveKey
CryptHashData
CryptDestroyHash
CryptReleaseContext
CryptDestroyKey
SI00b5de0dbe05adc8
SI00f2097672333949
SI03ee1370ff2172fd
SI066df4a47deb7b95
SI07646c0ac405baf1
SI0a8f1a0337a9feb7
SI0e7c9abcb195c68c
SI12409cae6ddf2f1e
SI12a7c0808f3f99f2
SI150953dc62f0a879
SI1527d54f96ad891e
SI19b2677a019ab7ab
SI1ae480d1861ed022
SI1bc1bc471c8cd143
SI1c7a7970970b9619
SI21d24eac30bb9014
SI23e7cf9c8e559e93
SI2409c7e1eb500ce9
SI24bb313f312e2857
SI252aeb4a9d3dc2ff
SI2b5f6f3d24eb7ba3
SI2bc16556d60ccfcd
SI2c7820fd77bf7594
SI31a566678d8c54ab
SI327cfc7a6b1fd1fb
SI32b0162a49ae8729
SI36ddf861177da59c
SI36e67160052f7f69
SI3723ba2973e3b57b
SI3d45b939740dff51
SI3d527d6e902c8427
SI3efc17e9bbe52434
SI3f596ca698b243fc
SI3f8b1cdb4dc92eff
SI45d842f2d2322061
SI462a496f3247faf2
SI46481015c7f49c68
SI4983499b64278231
SI4987aea8bdedf163
SI4abff63f9a080046
SI4bf5a93645714882
SI4ceb9ee614df7639
SI4fb6877896ef7303
SI50a9b553ac0b2e2a
SI52058dea2268cd04
SI546abd8b90c0f48d
SI568a7d0a1f4d0ff4
SI588da80b6a264802
SI5b2b3e8bff031a75
SI5b7374ef2d63d8eb
SI5c7fb49466251e7d
SI609efcf96ea8408a
SI61a330d2e855b61b
SI633e1c91fb9a8aa1
SI674c3bc07fc17979
SI6901b186cfd089f2
SI69d8a1d378771295
SI6cfa851319f410c1
SI6d14611bb8b2c8bc
SI6e539204336d5b4b
SI70e4ec628dd7e188
SI7164645d0504ae24
SI72621cc08869a205
SI75fe921d50a95fe0
SI768767362ea03a94
SI783104ea11038afc
SI79f6c64948ab63d2
SI7f41c842e0d89557
SI8162bd921f89d839
SI824276b89178ecbe
SI83d1cf4976f57337
SI863e1ae0679961f5
SI87a11c29fe1dc17b
SI88974d2e6bd51eff
SI8a3a9f59ab5f24ee
SI8d447a033d183aaf
SI8d676d5954c732bc
SI8e33e5864c547f3f
SI9196a02c851acbfb
SI919f742193b92a4b
SI943321d364f02e5d
SI94d8f51c6c1db577
SI950480ab972e108d
SI9517b76a4f0b657e
SI9662fa92cee70cf1
SI979d7afd84d6f0ca
SI989b06a5a9b937fe
SI989b754accd7cddf
SI9c6d7cd7b7d38055
SI9cb7692f61998485
SIa069da76968b7553
SIa0f9dd1158cbfb0c
SIa26b8e5116b7d93b
SIa2a6050a8dbd3b7a
SIa3401e98cbad673e
SIa3f7b31190ce0815
SIa618e7f1e95b5c32
SIa62692883d0c456a
SIae9562605f0b7c06
SIb3f045f05d2d1b0e
SIb4089165600bb7f5
SIb4e97c410be9a2cf
SIb6d52d8cb2f1045a
SIb739af05c351a5b0
SIbc9b0b73a965892b
SIbff6307869d58daf
SIc001296960f3e921
SIc26100c97b176329
SIc28b5d2d1f102994
SIc38599462746964c
SIc3b0ae4f7a27b7a8
SIca6f27da046939cc
SIcbf931747ce28d75
SIcc134e65c80c0c61
SIcd6b4ac0aeff7202
SId6deafdcc0c75049
SId99ac2a61d035e11
SIdba35b6dcb77d463
SIdc2e4e1ccfa9a043
SIdc6920f226dceb74
SIde347320a2d725fa
SIdfd4d81e1791b463
SIe25e8f29ef2a78eb
SIe57aa77c8884d3f9
SIe6405dfd7b63ead9
SIe68a75d48671c8a5
SIe7632ce587b97772
SIea4313bfab0cfe57
SIea8388f7613ed158
SIec91f505db92f298
SIecd4a7ef4a5968a1
SIef12447577961bdf
SIf060fffd3e5c94b5
SIf21356bf3fa1a8ef
SIf216ef3874529d42
SIf356c1132676af25
SIf4199c70bfb81a15
SIf499bb5c421377e7
SIf71b64d343ddea8b
SIf8364af380546f2d
SIf86df75514f4442f
SIf8a71e249d9c661f
SIf8b1716e85b0e192
SIf8ee6276be88ce12
SIfc350ae509dc2b53
SIfca3960780d005fa
SIfd52d1389825aac4
SIfdb97bb7d9d0d622
_SI013768ea228eaf06@8
_SI050169b0f137dcac@12
_SI061f9351f6b79d40@8
_SI075258fe7332f5c9@0
_SI0b65268e19d3b81d@12
_SI0f556a49067bf550@8
_SI0fe7fecb92f1b44b@12
_SI15d5f41c81892f13@8
_SI24f5c83eaddd65e8@4
_SI2b074e8cf29cb472@16
_SI349980d776ee39ac@12
_SI3974af1f94b94613@12
_SI57335d3e329eea8d@12
_SI5887bf867911838d@12
_SI64119fb980b7e962@12
_SI6479b9cf07b87f67@8
_SI690ffdcfd9cda629@8
_SI6e6c544c028b2de9@4
_SI72b05b1ad5f34d61@12
_SI77ffe3fede90bfbb@32
_SI7a4943591207dd14@4
_SI7b97ee05aa1e64c7@12
_SI7c373366af3ee2f7@4
_SI7cd7250399b1ea60@4
_SI7da3b9691a73b4a2@12
_SI8dd2c969f2a6a31e@12
_SI9bf461db9bf83c22@8
_SI9ea49276dcf9849f@12
_SIa1d7e21a548b910c@4
_SIa8e1a742a358dc07@8
_SIa9b758d3ae2e9aea@12
_SIab3ed5feb3c43f0c@0
_SIada7f27769d7f95b@4
_SIb391996b7b633820@36
_SIb84ee16d149e7562@12
_SIb94a6bc97d77e69f@8
_SIc0bb4eab77f5a999@20
_SIc21d402df09e0c69@8
_SIc2d8715ee8c9e908@4
_SIc5d5610a73781fac@12
_SIc8c63d94dd03040b@44
_SIcd2334250b08e199@112
_SId00f524badf4f5cf@20
_SIdbbe1b52f304f379@4
_SIdca7c218fe9393fb@24
_SIdeb28053ce71d5b4@12
_SIe2cb515ade8c0235@12
_SIeea5cda6d9846aa5@12
_SIf8090240c1414098@4
_SIfcfad09d1b0a60ec@20
sqlite3_cryptoapi_init
sqlite3_fts5_init
sqlite3_fts_init
sqlite3_json_init
sqlite3_percentile_init
sqlite3_regexp_init
sqlite3_sha_init
sqlite3_totype_init
sqlite3_vtshim_init
Name
.text
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
162KB
Virtual Size
161KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
10KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.gfids
Size
512B
Virtual Size
168B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
34KB
Virtual Size
34KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=49, id=241, version=40116,
count=128, id=243, version=40116,
count=39, id=242, version=40116,
count=23, id=259, version=24123,
count=22, id=261, version=24123,
count=15, id=260, version=24123,
count=8, id=203, version=65501,
count=3, id=147, productName=VS2008 build 21022, version=21022,
count=152, id=1, productName=Unmarked objects,
count=1, id=264, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
Resource/Font/Pfm/SY______.PFM
- SHA256 035af7591938139c78f8ad715047c16cd439c6a7791035deec013439921e6925
- MD5 692b5b1be7394e93fd6e0750cae81474
- SHA1 208ceb86c2dde35c78fb40ac0f2573f4e4ff499c
- SHA512 9b7ef79d488361bd1e94072b4fdaf17854881e673dc4a2981c31a65a185de987ec6c605753e1a645e74acd9fb030cfd81f5f0bb81661b3c43dfaa5ef46e0caeb
- MD5 SHA1 SHA512
Resource/Font/Pfm/SaslPrep/SaslPrepProfile_norm_bidi.spp
- SHA256 f2501579fc7ab062324b4e1a45428f69f9a37e0363a4fc1d3734157b587b92e1
- MD5 787dcae108ef9d5fcd9f60ce6387e7b1
- SHA1 83a906239423183910e617273d6023c534e47e5c
- SHA512 c65d3bc01406054d9932e2c840980978a5be4bed7bf8dd60a063304017f0d8b8618d7e7688b365110976822896256cb98ed6ce40c2b6032e0d06637d73c8e283
- SSDEEP 24:j2Lc2SuJAoYYY6JB/BsSh7F3eQfWiLLN+LEEEEEEEEEEEEEEEEEEEEEEEEEEEEp:2c29CoX5JBNhCiLx+l
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/Pfm/TypeSupport/Unicode/ICU/icudt26l.dat
- SHA256 b388595d6e96e51430bec6022b1a5635ca541e60936abd73342ae8319dfe6802
- MD5 525de57b8d1167a4efb7eb00c013354f
- SHA1 3f1ac2d2b6807c3ed2fc41351262712b72fad749
- SHA512 dfd950d1220f46bf5f75c4130902bb63a4447c435d25386461a4e4653e73dc6780577fb51b14b182a1f2b1a38585914237625b199d806b6f80f9becc64eeff32
- SSDEEP 3072:C5em1am14oBR+pa3sHxW5D+eXHdsdj5xkq7KV2Sq71c64ZAr3Abyc7dAzATXcErQ:CR1R/UFTSO1TPcaMm
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/Pfm/TypeSupport/Unicode/Mappings/Adobe/symbol.txt
- SHA256 52dbabcdebe38f3e19e9071d6796fe49f1463f03d2d82064aab4a10bfbd4dddf
- MD5 31d752fa13b4d1fc7b7b4747a3f6d3f9
- SHA1 eaafd280b2ea187f078674b9a1d5a8206ccf4a13
- SHA512 ed402d201b19c9edeeefa17d2f82a480b8d16ce3235668a91bdd0e6f3b59cbb55bc7119a272c34d1c4e88999b6fe08697d65d65e7b4de44c197e57f2ff44f079
- SSDEEP 192:sRDIlhfxjh5/q7Wr6KyfyHnW9WSQftm15VkCnl2moTTEmbZ3mrZWlBAjnBmnVRn8:sVCx27WuKy0W9WDlSVPlwd3C/BCVBFyB
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/Pfm/TypeSupport/Unicode/Mappings/Adobe/zdingbat.txt
- SHA256 e7651bcf12532af30c79c499e7a280ccbcd7f208436999a21b1500b07149bc95
- MD5 691886379048a5f9065ee903757af29b
- SHA1 9f6453e6f027e771602ad98c5379eaa2b2469463
- SHA512 e2934bd4f36cc21e1d71c4fcfc3c31d091a54f04762b0cf7b20fd6bf70ce30fd209a406020c82c565005bc0677471eb524b5a537059e29e4231955fc9307216c
- SSDEEP 192:IcRDIlhXomP1RueMV1tQdS6t0Ftjzt8CFrMbyaYQgtrtXiPIn:IcV+ombupV1mdS5SC+20I
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/Pfm/TypeSupport/Unicode/Mappings/Mac/CENTEURO.TXT
- SHA256 ae8fdf0311fe249ee1a3e08fe36c394ca2da791c622b665ddebcb623ac248903
- MD5 3ea4a9a2765040c721374ccbb8e7bd59
- SHA1 bae4c79a9e9c27cbb7308bb364f69566387cce45
- SHA512 1a86665a081c73d170ac6ba9a3abfbedecd71557b274d99e254a446e852e6c62cc0bf383eeafbfc1722f63af65b4e4bc73f9e0ebc6fd790317b08ffd488be289
- SSDEEP 192:X1ei8BsiHo6ZD5OSlEZGWRBnBb7ec56ZXj3nZv0CU8+zLtVoeuq/W+vsAfzMUMQi:FeDsiV4SlTWRRBb7e6b6D
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/Pfm/TypeSupport/Unicode/Mappings/Mac/CORPCHAR.TXT
- SHA256 83246b8c942cbacf1031445a99e62acbb4733ef4167bebfba2bd852869824eab
- MD5 0fbad8e1c335ac42617936aa6f89ec89
- SHA1 02ba453abfbe24b25c35a2d75c6134714b3d7d43
- SHA512 ab9e0bb4cae4c72cbccf7d061f1f181dc86277e8e59424802422c6641bec864d3e87b2261d56cb7991e3f60c5c6f56a814073f7d180745b8499c05c39f93842a
- SSDEEP 384:+aT8iQfVsEByru8n1ePc1RJ1lX1HEvSZ3:dIqEc/X1kvSZ3
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/Pfm/TypeSupport/Unicode/Mappings/Mac/CROATIAN.TXT
- SHA256 f353d83def5c9632ffd1925a0f1480e3dc0e00c096aff5680e448cbfd97fad05
- MD5 5c36e2cba7fdd612c575d50974ef708a
- SHA1 b7a92b10de26a0e23434152694302e4867b011dc
- SHA512 9a2a71bf2de141f7e0a295ad40824e63b7b18f1d530d90b5edeec78dd23eaab733d40f95ec320ee2c7686a113bee58fb92d48875d347c669c4c82f9ac27af76e
- SSDEEP 192:xO1i8BsiHo9EB0QguBwjEZGWRBnBb7ec56ZcjVNs0sDTZLzPF5Ofzwswsc3ATpGE:A1Dsi1BwjTWRRBb7e6vY9PspP
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/Pfm/TypeSupport/Unicode/Mappings/Mac/CYRILLIC.TXT
- SHA256 10738cd5bba3b23c02d3655bf2afdf72daeaaef778cda562c6d10ae8d25ca591
- MD5 db4ed5c205fddd693dc9ce69cccad036
- SHA1 ffae0be88d51d71fb1e496156564e55f874efad9
- SHA512 0402d575c17d03e7af8bf44f36ead7d4ccd283375b65d94597ed927a3975d5427483c681a2c604b6f61d796e9c92868620594b7661de6321920c23a6ba281c96
- SSDEEP 192:BWDRi8BsiHopYZXC4JqANEZGWRBnBb7ec56ZmuZ6VfDjCfzB+CXp1:kDRDsiZZXC4qWTWRRBb7e6/o6NIXD
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/Pfm/TypeSupport/Unicode/Mappings/Mac/GREEK.TXT
- SHA256 1ce082e86367551b2a21465d1b1c2edc103242f7d565411dcea0762e3dd63aa1
- MD5 962d73ae58ea74dfa492bda68064f130
- SHA1 b3ecd08894988a66c190ab75b88c3cc752aba34f
- SHA512 5c3c8ee79c6714097b58276905f2532b1d8be07fbe8db129624f130bd6622bba604393673d2932a08df79eea83caeaf2ce157893ede76bef6fc1027573ea8592
- SSDEEP 192:mHQSi8BsiHoGHUdfJt8skBEZGWRBnBb7ec56ZSj2z0sVRQvWJ9mfzDmb+mtGf0D:yhDsiydb8siTWRRBb7e6qvVCe8X2
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/Pfm/TypeSupport/Unicode/Mappings/Mac/ICELAND.TXT
- SHA256 e04b3c96f65a27030b5e4b071d8e61b8ede1d94cf7bf7845262b29be2b7656ac
- MD5 48f0f1332aca28076f1d479d8a1c0447
- SHA1 e19b21754d221f5fa53aecfb01b2578d9974f35d
- SHA512 7360aab0683f102420e850e5b0ca7e366f605aec7a3be4305dc0fb27270209a006dc5ae1a28f68a7c4241bd1a674a215ce9c197e25aa3e18744691c1b987abe6
- SSDEEP 192:496i8BsiHo4wg68wkw3EZGWRBnBb7ec56ZcjVNs0sDTZLF8GYpfzIiB7Ubc3jTpM:66Dsi61kw3TWRRBb7e6vYMGPaO
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/Pfm/TypeSupport/Unicode/Mappings/Mac/ROMAN.TXT
- SHA256 a58f56f7cf7767658cff9fdfd1ba182cc74a513b3a2b6f34e44625ff811f53dd
- MD5 94a43862cb0159469484841d8370e552
- SHA1 45afc896bb3ef65a7c77550244a52e7212de89ad
- SHA512 eb6454659fd8cb0a631875e27bba01023eb3c75740379c2deb514bc08577221a7914f2717f141134aebc596cb4b34a523548a50f3448abede2b87b4ccfcb93d5
- SSDEEP 192:5iQi8BsiHo/F876g2pSSwpEZGWRBnBb7ec56ZcjVNs0sDTZLzGYpfzwUbc3jTpGN:VDsi88PSwpTWRRBb7e6vY9GcaO
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/Pfm/TypeSupport/Unicode/Mappings/Mac/ROMANIAN.TXT
- SHA256 ff13110e8b448b033f464184a1a07b4cd32f0f0fea203a4401c284073fffad66
- MD5 d39f6c0a8cfe6f118ffd105cf44dea90
- SHA1 6c0ae83fd83e5b1af2d288b149e0f7907dd378cc
- SHA512 75a42575a542e95a9736deac09fe5480a52d514d9b09c2542a9bf7af1de104a3f83b29bf0c317b4d593d572bc1548728f2fb68115ab1506c5784528ae33710ed
- SSDEEP 192:boRi8BsiHo/rUgyxUHwsEZGWRBnBb7ec56ZcjVNs0sDTZLzDvXYpfzTUbc3jTpGN:sRDsifxUHwsTWRRBb7e6vY9rhaO
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/Pfm/TypeSupport/Unicode/Mappings/Mac/SYMBOL.TXT
- SHA256 c57c451d4a524159bf143573cd0568869c8eed814a999bff7f3e560dabd39f1d
- MD5 46485e1a024abc31e8b9d2b4ca9a3b39
- SHA1 57f5f3109969a8dd8e71e1e925dee37f2b61c016
- SHA512 fbaff075b556b461ba6dd731ec52dfe9d3a2be202995e8da1d4794aedb812652a198ffcdaa0052c95fa57f94edb5d51342b1a38e10f62a7ca506c41b759195e3
- SSDEEP 384:UDsinsKkRUJXEe3fLMxtASwgzWgfL3SR14oLLQQU0Kp9b:UY/wufLiR9LLQQUjp9b
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/Pfm/TypeSupport/Unicode/Mappings/Mac/TURKISH.TXT
- SHA256 9ecde6f591caed9c2ce4438884da5f22e35fbdbb97e8d80b43129b23a6791891
- MD5 6bfac3d4ab3ac941a0b2a29a56de6f64
- SHA1 cdc38c3e0de96c3f2b50448cf3dcf42d52e7e243
- SHA512 1e2645df84c5392b09e85dac63970ba49dec9dee63c06548f7717fbfca2643646c1668202217ec836a663c4938fa45774d3c7a9a7254b926d75b0a32c90fd3ee
- SSDEEP 192:y7gi8BsiHoGV1zjbweEZGWRBnBb7ec56ZcjVNs0sDTZLzGYpfzRzUUbc3jTpGNlw:WgDsiX1zjbweTWRRBb7e6vY9Gka3
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/Pfm/TypeSupport/Unicode/Mappings/Mac/UKRAINE.TXT
- SHA256 98dd24a56e7d0e2bd2fc6a8bf429aa7bd3820b0d2d90456b972914639d2278ed
- MD5 96431211151b2e58c23262cce683e033
- SHA1 ff90820ba88a249c4f8bb605d6f9d6cfcb896257
- SHA512 28dcd7c9e41cd378f88a14dafa5ae4cec291206feea3bae7a26c6f5681059ccbbf54a59c075a19f752e48658204c388b4495b707e7249f3622e827c24c83630b
- SSDEEP 96:OEyDE8TDyKJzAfa4evYBTY/qHoUbExiNU/qnTxFA:gD2i8BsiHobGHA
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/Pfm/TypeSupport/Unicode/Mappings/win/CP1250.TXT
- SHA256 cf79ba755416ae5628a9dd1f870306b5a45fd6b256efed0c2ac1cc2ccb3307f0
- MD5 3c9476725fbfeeffb9f549d995ee2815
- SHA1 8e2502eb4fc5137ae6e776d1f1804a3afb6eae31
- SHA512 ff35c0a6a878c303567d957c0e465cd9bcd0678c1be3953b3438c686b4f739fb6f47a465465119b474d468d46b19397955e688fc2b92f71abbec276be072f5c8
- SSDEEP 192:a0LuVb+Mu1eIqY/tJVLTjbew68i/+raRKUWKfThEYh4AIhvDHFzxn62hxSAWUMuA:aV3+qw7VLTjbewlKfn+Qx
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/Pfm/TypeSupport/Unicode/Mappings/win/CP1251.TXT
- SHA256 f87ed4480cfddb8f5f6226292338ca407ccc7b1a543f3832f1d20aff6cb72a58
- MD5 2926366654dbc6711ee71ba2589161c3
- SHA1 455e6e5e78d03349454cb1c6b0175e9bf2b943ce
- SHA512 a9a69e32a16ecf7de291e4fa00c6cb349048ceb2f4070406c16b050439a4c2420a7da0f1fc9a0b76e21439b8deabcdd2085c3c14411a6032226c74274dd1e49b
- SSDEEP 192:3BHVb+Mu1eIqY/tJVLTjbew6a7ifHYhgjVJa66Oz9L:3v3+qw7VLTjbew/3GMOd
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/Pfm/TypeSupport/Unicode/Mappings/win/CP1252.TXT
- SHA256 fca3ab5882f0a562794f05d7f15a39157c59d7c07fcbac79ab7cf3d12c979541
- MD5 93fb108016f8a1e87e4129b21fe9984b
- SHA1 f6d6b1cac29fdffe774e5175cb60970ba373a656
- SHA512 e0679ddb288423557170c09bf6848d6d8d74f9e70bd751131db7bd248446606db856a86af7ac8e3500b2950261de199a5ede444d8bf451ee1ccc6cc854151342
- SSDEEP 192:YUsVb+Mu1eIqY/tJVLTjbew6SiNNzu6NSCYyhrt0K5n9dWGufxvH+Gv:Y93+qw7VLTjbewtUSLO+RV
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/Pfm/TypeSupport/Unicode/Mappings/win/CP1253.TXT
- SHA256 2d36bec3e1ecbf2b6de8a37c98717ae21ca8c5bc0b487556996b3fff2b6f6fd9
- MD5 6b77baac03038b028948d2a667efdaa1
- SHA1 6afbc63ab3a2b0bf10cbe802f7633da3e3198417
- SHA512 d7541266b100ac879be8139108344121b10390350b93d26c6f5c5279c18503d7b6829332281a892369de4d578090987d1310201262c181addbc3b9d9495bd209
- SSDEEP 192:Nz9Vb+Mu1eIqY/tJVLTjbew6Si/0eTmVvZOzdTWb7D:Nr3+qw7VLTjbewGsB
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/Pfm/TypeSupport/Unicode/Mappings/win/CP1254.TXT
- SHA256 32fa83c6f8ad346e66e544640942906e0a91cc0d2075324b7f244695de5740a5
- MD5 65d7c9205e1a1393b8530670add4e596
- SHA1 535cada91e5fba038e0fd9f2214f91a83c3be45d
- SHA512 95798f9e068a82380bdbdf649a2dd2f7cc72206444de0a7b9ab2de2cbd9938dc0856f2a0faeb29bcc965900448dfb0e7dddef0cc8e1c5711896f1b82d40a3ca1
- SSDEEP 192:uWKVb+Mu1eIqY/tJVLTjbew6SiNAH6NSCYyhrUJ0KXdWG0xvfxvHZ:ul3+qw7VLTjbewfUSL5y/D
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/Pfm/TypeSupport/Unicode/Mappings/win/CP1257.TXT
- SHA256 7cb16a0b949f8573b06f22f091c44a1ea251cc9904591fceb2743475302c4640
- MD5 002134c7ea7f619246bbf445caad9f08
- SHA1 def97351b77ebf6210b6bfb69b8bc3a4f9a64c36
- SHA512 95e4620258b0189b993bb56f2219f73d84145bd8e5b45f9ad70899d8da0e742bb3ead8697e5335e4de895bed925f6212d96f813b0ce9383ae42a967cca2730ca
- SSDEEP 192:BPJVb+Mu1eIqY/tJVLTjbew68i/vgIey4tvPhSiY+21KBrNbxlv0:BT3+qw7VLTjbew9Wo77A
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/Pfm/TypeSupport/Unicode/Mappings/win/CP1258.TXT
- SHA256 f53d0ffb7f3c8182794331cfdd2fbcf77ff6dbdb05b415c98cc8d6fc49dce2fb
- MD5 88e9b5216b90d0332bd2cd4fcee88a22
- SHA1 748ec8b8b4427f3b48b23b3b224c1cffea2dd169
- SHA512 9d5d6e0cf41e9054d3c9253cec0a482dd97e412794523e352c06d39666931b1d8291fef1c5bbef629eb7c1bb53d866fe2eb925cb314026bf027eaabb1208f0bb
- SSDEEP 192:Sy2Vb+Mu1eIqY/tJVLTjbew6SiNne6NSCYh3hDDEYx1W/nxKHK:S13+qw7VLTjbew/USLkfz
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/Pfm/opengl64.dll
- SHA256 e7d625cf255360b0ea96a52ca990be6f1cef522ff7440393e45b12793ac88031
- MD5 71466589eb444bbf272c0f5c920c57f0
- SHA1 4fcace49ee032779d3bf7b8e03c6a9f29ed871ba
- SHA512 eff62450cf03d72af2594d750a70b008226fa2e46216661716287639bf5e1ff1303076fdaf4f062ca4098ef10a8e29502de55ecb3a6e04753aad7fcad01e3352
- SSDEEP 48:0ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZY:n
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/Pfm/resources.pak
- SHA256 11d0f55c105883d203137a87a610ba793299dc4774fd6d8b3a86666a2c337041
- MD5 df15387bf046715cc592a690da33e4b1
- SHA1 ad93b08dff82cbd894f6a0a9733c70d7e564113d
- SHA512 71244553d7b1b559fcaaa059622c340d22148bd5324fa3f6730d37322025dbfe5e853948b49b91db6022a25bca4ddbab8fe6ee1522a461963dfba04a7c93d69a
- SSDEEP 98304:b6zN1Kt66I0+1Yk93pPVrXh188CYCUrwr1ISgMRQK8nXCpGm5vEybt:+zjKt66bGVrhm8hCUkrGsyCV5vXbt
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/Pfm/zx______.pfm
- SHA256 b3e66a48a576f1d90277aefb89af9cfd370e7c216978234bfe66b6ab6fa2c0fd
- MD5 705cd85804c3dc1eef81b624ea813bfb
- SHA1 5d5807713d14f45b9e5bce0576ade157bad5a701
- SHA512 dbbf44d7fc2087e5318fca440eb4c0396a9166aab64de31a901c0fe3c049a5577c021e43406e611d9eada020233c1ba008db46026f5a88d5c26c25125fae46ba
- MD5 SHA1 SHA512
Resource/Font/Pfm/zy______.pfm
- SHA256 1a5660f3f8bb9d18fd6a710d70af26cf1e167fe040d7daf3ce41e527236e1fec
- MD5 7d3be2ec810fa01a9ea7d2a26551cff7
- SHA1 7962465ce36a83666fe7a3edcb31e125ed597e93
- SHA512 cd4ba616364f37aa8294c9a2a6b64ed3cf0b011cfcffa9056295b5fc23348c2b3cfa96a25954c6dc472053daa1f9f4b08176a515c95abab6ffd7077deb8d7959
- MD5 SHA1 SHA512
Resource/Font/SY______.PFB
- SHA256 b0480c6f9cee6bb87c1ae159a89a8a9d1ffa46e0ab70461fdf2fc291e2c94b4a
- MD5 6fd0724d1fee177adad6a13c65af5268
- SHA1 6efe2355d68306e2d5083895ced81002f7934ebc
- SHA512 61185eafc64bf732a07add78ff6cf1ba3d0c988b64097f376018e5e710e35840a2556523ae6634c27ce45e47ffbdf36778452ccb3fa1f015dbcb02689f1e1797
- SSDEEP 768:2igXv39LX995GGTC4/HrcgXB7qtyiq/wX7RUzKR5tn:2dXv3JAGTC4DdHiAwlUzKR7n
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/ZX______.PFB
- SHA256 ba8f3996fad32c042bf1f474a08b7452f252060882dc4de5a97ec389209e2301
- MD5 5eb6497ffaa36909f6b2a824054bd4d9
- SHA1 cc04c0ccad1e9c10552f1ab7fac45b0b529de299
- SHA512 dd7a1b26dd041266404d86d6616c765eedbfc71460cbcf15fcc02de1704ae7e2892b25b6134017621f470768d4eb4a64010ec7ffec459d0c669f107c66841caa
- SSDEEP 1536:TGYo+k47OpUT9E64XnuCibOb9z6DU40fbmbZUHs:I47Opy9EBXVbVsUnTmbZR
- MD5 SHA1 SHA512 SSDEEP
Resource/Font/ZY______.PFB
- SHA256 1182fcc2fb887713fb954a804f83fae3417c27b6929ecb07c5034dac24586e8b
- MD5 72abd7f6b6b7e6f2ccb06626aa8b46f1
- SHA1 f9cc5efb748f4068aa08290ee58aa41f8bd4bb81
- SHA512 d34a8d9fac3efea7504f87b203c9074f7589cc726fce0b23132eb14d75d2f9a5d67c13952f0f1fce02fa44b786bdd17828c355471bd974b8d78a29abfc8c7823
- SSDEEP 1536:SnSFGnyhqkcpFyFmkscxLFNv2FRle4Y/p+Nsz8Rc1wNbsGvStIjQIRiCt6b7VkV/:ESFSiqJKskP2FurRjp1cVvRj2j6/YhM
- MD5 SHA1 SHA512 SSDEEP
Resource/Locals/am.pak
- SHA256 4c0b4273dc4103c666ff01ed8b9db995f68c5c178973465bb25cd5cdf99ef01a
- MD5 4e7db89a9f5c07a295de43b745e5658b
- SHA1 3f24cbc02d130ed156f1b4c57dc951a9238dc8ef
- SHA512 c4117d50e2b966345ff86aade385552915ba41bb176fcdcd402fb54949377f00d17eea384ec90df2e3db92354198ce600131b7609eedf108f7b919d5ba330611
- SSDEEP 3072:Mw1jZA/92t7Rh4rgEkDvuHqOVoZL5kiIEG/yZJjhSQVNLWGe/oqM0bvuo00kef9m:716eGurQfZx30jH8+x
- MD5 SHA1 SHA512 SSDEEP
Resource/Locals/ar.pak
- SHA256 776db47dd91bce8bc813a54a815be3e73b6e58e9fe5f24db7bf0d8c06a240f6a
- MD5 70bb1c831327b26e4dd74097f59a55b0
- SHA1 46cf431d19bff9646ae6c6fd0c57e25664178d14
- SHA512 8f78d18e15ee86b801cb49ee4ee7f5dc06f9730181b849ede944c5d922f7c7ab5814d7879399a712e8bb56b1878011552b6a667a6b8dccef6c6be3f236c3f44a
- SSDEEP 3072:qjf5HjSNsZaJBWGxyxMtxHSM2uZtE9yDSZ1B/G29KSI1+CsI1IiH2L2p:BNsRFoyCsI1Zd
- MD5 SHA1 SHA512 SSDEEP
Resource/Locals/fi.pak
- SHA256 528e453ee8fd16b6e2066b5417b115504cd31afc4ffbd79206369c747caad1fe
- MD5 c865b2cab8dd25682b40006832a4b604
- SHA1 0722c7157c96eff7a4ac85a113cf21c4d0e27b1f
- SHA512 8eb3dbff515e18f481f62e8f3ac17ea7674ea8adf0c37b0bb2c5da6c9914b9376a8dac35f2e004a313fc5f2507e7200bfcc3b5973ae428df147d93b26ed3965b
- SSDEEP 1536:jw0tbGVUG8TQyRYFTTqIZq3Ik7414JEj6MEi18El0oR8QoFcb4EjjATcM1JhizRs:jw0tbUaTQuYFTTTq4Ug4JEjH18ElXRCV
- MD5 SHA1 SHA512 SSDEEP
Resource/Locals/fil.pak
- SHA256 500906ac9cab570726fe2c3c819eec3f88cb69f326857920d8423883c222c773
- MD5 60d50ee0763200548c9df4b4bc712cd1
- SHA1 206f9cd895936fd7f597b72446c529881cde9829
- SHA512 f59a30f34eab4bec57b6e5d3e53e0b13b74db64f50a9d7b33c9a6fad63de3a80a2436fe8483355d3632fabbc613e1aeb38a3792c4296773fbe50e23ba1e7dee5
- SSDEEP 1536:jsSFtTdYhLVgQNqsszmNvuNpEWnGkHl1AM64CzPEchYkZKk175aXmAMD:zTdmq51AaCzh7MKsmAW
- MD5 SHA1 SHA512 SSDEEP
Resource/Locals/fr.pak
- SHA256 0ddb18e05d4a58c010a42207af0ffdfaf12f9bee29f6971459bd69fdf26b0e79
- MD5 b5bce917fb4d322dad4b26febaaef09f
- SHA1 891fd73ba1c70be635772386e4bf3cb13496fb59
- SHA512 a795e60a2197f4a2f9644e2b4c96635472e270274e991cc1130edc64e112f2d527577ff3b7bf7539fc62e724687f82330bc59e3adeaeb37000a60dcd4e503425
- SSDEEP 3072:hPI7B3PxbJzThykykClc3wwTwajbIwKByroFDuFcZqslcaWyNf/Uv:hw75PxdzTIkykClKwGIwKgrwDuFArfsv
- MD5 SHA1 SHA512 SSDEEP
Resource/Locals/gu.pak
- SHA256 5a23541ce618f91b78a809fe91a0c68681e20018c4411e00d8c205ab1d850dbf
- MD5 b0b1b848ceafcaf9e0dcde8bcf7492d8
- SHA1 39e929ebc69acc4c6610b9c3382c49a376ac9052
- SHA512 7ac783936a15c1313dd7a68961ee98e4d351b60d3ef1e5bd89ef02456145fcca5147884038950a8b9ed0de7ed37ed6f3c2ce9b82de5e3a426ec7e5e918e5b2c7
- SSDEEP 3072:twDmoa1A626WB8Z3i81cKHdO3Iu62oY/meBeQOR5q22Dv2pCbflLMWsCBDnZkSHl:tQ4Cv
- MD5 SHA1 SHA512 SSDEEP
Resource/Locals/he.pak
- SHA256 ca440d0128b62e35333730c5925992ae5b4b05a37c10105a9145eb5cf7a77071
- MD5 209974550cc2a835f1879995851b424a
- SHA1 f09850b9e7fffce197e362b9562cd0ff1c5c71ed
- SHA512 4ab857adeab0e45f03868d1208d8f3250bbe27c5854bbc885e94e7e6ed8bcf9bdb2ff5035bebb1958b345ecadf244dcc433d760643ea544066b32f3f1e266276
- SSDEEP 3072:MSeD15QWmU6XrlH/piG5Bnm3XTnZ2F2j9V:MSeD15KPXrlH/piG5BnOXTnZ2F2j9V
- MD5 SHA1 SHA512 SSDEEP
Resource/Locals/hi.pak
- SHA256 1ca6a0546f9627fa9ba3d377d79a21ff26ec9b349d47247c9b241a70728d0699
- MD5 fa034eb13d21ce4e9fc2d3eafdf40cd2
- SHA1 0992d91706d26b6cc2ff64d899308ba4e9380a35
- SHA512 4f8024f43a70d9d8ae67848e2540b028cf1b9183b7dedd66043fb16394601da986d695c8d28f072444a69c1b2639c8b79096065389069fb854d152db166ed734
- SSDEEP 3072:XkOxgTgcwfKSj33cdEVhk7ovrCEO/S/bBfvTHef+a7BKfzzrRE3b8RLljlxCYPhb:rOCi8R
- MD5 SHA1 SHA512 SSDEEP
Resource/Locals/hr.pak
- SHA256 64e531e46cf5b644d1b7f1df885efcf51a65db50fab65ab250f5e4e1adfa9d29
- MD5 624bce9b02382312f4588d3147b738a3
- SHA1 8df16c75c9e86a96d9f2b11e80eb182ba6c8eef9
- SHA512 e74e56210cb3c184499de4e0d9e57e8ee9d7314b93fb1a97030a3397cc47b91ec74c704b25fc4bd16f4c7680240ae1d39d69cd9f024dd52c90eae9cc6c53b6ae
- SSDEEP 3072:1JKdAGC/lemhlBExypakZUaO2sMMoLaz7v53Kkx9i:lHiKp
- MD5 SHA1 SHA512 SSDEEP
Resource/Locals/hu.pak
- SHA256 fdd99d667419612bf98200783e0ccf0f7c11913ca03ca162d72d43f6861e5478
- MD5 ca8a821ff5a6b848c5a170ff9a97bb39
- SHA1 a98b91fa29848013cef021ec8b3a29979cac0c65
- SHA512 e475a09e1f9f740b6c36c9b33b20f263896b869d8ac58848504db29903a9597b84761b9c3918addc9c726d4429a0f496f44e3a8b0cce9a3008d071a5d46bb5c6
- SSDEEP 3072:a1WzOkbJiCwF/iGn1dgTrdA0RdpEtL1543ICJ:eSbY/iGkTtRdpEPu3ICJ
- MD5 SHA1 SHA512 SSDEEP
Resource/Locals/id.pak
- SHA256 03e35e4c8d682d80ebde0492ba01d5a922766daf70df6cb2a22a5a5365adff1e
- MD5 c26b55aa25d424653e75ac278b0bca42
- SHA1 fb49a3940c6380d6af38a82c95ca56cd3aefbeab
- SHA512 b701aee8c2d2490309c902cf152ea118d90429caabfef4774802319871bec4c94fe41d5a305d6df7b698ca051b21332a7422a63777470d781c70100ff758726f
- SSDEEP 1536:QOle5KmKs/EKdQ95/SWlEmjUwRHeEJpkw5B4X1CPXsAzb2ZghMrREYwcCdAbJ:QdlQ95KWxpkwc8XsAzaZGMNwcCdO
- MD5 SHA1 SHA512 SSDEEP
Resource/Locals/lt.pak
- SHA256 70996649507cc815f0c4886f8c4822d45c5e201e8e41dc464ab4973ea19d8a23
- MD5 6b4c975b9a0b31fa4c0f8818ec53942c
- SHA1 dcc10f3758945824b092d071424f9ecb413a353c
- SHA512 4ad012581c3853d944152519202e1df67dbfee2fa752c3114da5bf8cb6653f1cb093d5bf951795990a0e0e5d16c8375ab99074cafecbce518ab83ddaa30d2dd9
- SSDEEP 1536:n8UXuRiF1eo5N8FYzKcdnaJGNMJ0c5PAQpvK5rmz3MWbhnfmvVDF6S05nGWSgAGU:n8UX/1eOxKonaJYQjbXd+NDF6S05nI
- MD5 SHA1 SHA512 SSDEEP
Resource/Locals/lv.pak
- SHA256 605d916a697824c4ad6c418d6e7cc157b85825da5dc08a0716d89c56bef0a6fc
- MD5 2ac1161c66a47bb69378559c2c6fb44d
- SHA1 a1e28a5ae021fe5cbf57ed7e6e7177114421bfa6
- SHA512 2e5a9d0ed020447e6482feed0770c7f1f12118591c7412b4bb796a2219b9977632cfcef16faa0f28064d8b19c2dafc4fd2cae929d57bdabd37702152fa850855
- SSDEEP 1536:AllVfG/A7NnPXNGchkGB5nDJa7z+z0AhzOgUcCYh2Nn4WSuAhaIvhZmE42Cla2M6:cbfGI7dNDkGcOUcCYwNLyxfaVdF
- MD5 SHA1 SHA512 SSDEEP
Resource/Locals/x64/AdonisUI.ClassicTheme.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8103f2cce6a864ceefe6c5b0c05087ac85ab04a2abf150e93bc9db90c54d9d20
- MD5 8a1b183bca062f48402c74f2daba7b92
- SHA1 d9417bf78b3b37d668c08e67f3c0f21dbc6dc11e
- SHA512 0f5120fa9ed24d2a49b82cdc62113302002ccc5e1cf389cc28830f36b2915f876bdf77094fa6dfa312fc01b6f482465297fa734509511fa7e72285569ce57e87
- SSDEEP 6144:aMNTja9KIKf5RCs1ussMKlzI5iJQn9gu5DPOvObo:5Za9KIjs1ussMKlzI5lo
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
299130
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\1\s\src\AdonisUI.ClassicTheme\obj\Release\net45\AdonisUI.ClassicTheme.pdb
mscoree
_CorDllMain
Name
.text
Size
284KB
Virtual Size
284KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Resource/Locals/x64/AdonisUI.ClassicTheme.xml
- SHA256 e97828272a7a30780a4b92c791ae94b3adc4268463c53f81df0a27a372c77348
- MD5 68a996036a022036a7260c21aca60d8d
- SHA1 f7ccc93b98ede087327b9a2ee33b49084adaaa7f
- SHA512 0106caeecb55ff8599bc6f666e19306354e53bf2638c6298c8148a1e956ef7fdd04d79575abebd25e4df9d7e21f5996b49b293e0f2b03b53d81ebe95a1759997
- MD5 SHA1 SHA512
Resource/Locals/x64/AdonisUI.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 db46b6106dc1b30041ce3f287ded91166895ff3f1928250fc79dd46c444b1e45
- MD5 3d4c8b6aad28ec574e56ccda22b34ef3
- SHA1 bc22ac7097e597fba3d7367b2fd5c61adff28941
- SHA512 fc56241e65dc7bcc678a2af92f79bda017ceb3f7c4f203c7e9ce753d573da868608a6f56545c0d181a625737278b7b73223e5dcce85bf1f3c5b7b1b06e5c5739
- SSDEEP 3072:fuZPAdWKbu3355s555GPQKljrKxX0yAbTxin1YzqHf0llbS1sjZ73h39Iwj:GydWDrKxG3h39Iw
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
173338
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\1\s\src\AdonisUI\obj\Release\net45\AdonisUI.pdb
mscoree
_CorDllMain
Name
.text
Size
161KB
Virtual Size
161KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Resource/Locals/x64/AdonisUI.xml
- SHA256 3dbc7b701f01ca178359a1de543792c919ed49c16dfa06d766c545c8ffa51c50
- MD5 a310f32ce7eb9a28e9b0fa5e87ac71de
- SHA1 bb8204232932dfea23d2fa76b44954ac559922aa
- SHA512 3ca0a763383092c5df00efed0a02a13b2413a17e6b0f966364bfe932a2cf8992450778dad730d9afcdc7b8ee090e3e7c124d3f38e92a213403f38120e87f6805
- SSDEEP 1536:sBjMs3uxMVuQHWVhVRVeHELtQyVuHEItQyk3n2q6RD3CKlJvJk3IwniCbgnHCoaf:sg8MA0OhcSc
- MD5 SHA1 SHA512 SSDEEP
Resource/Locals/x64/SQLite.Interop.dll
- IMPHASH a42f73521c784fa06f1d886fcbcefcba
- SHA256 9309fb2a3f326d0f2cc3f2ab837cfd02e4f8cb6b923b3b2be265591fd38f4961
- MD5 56a504a34d2cfbfc7eaa2b68e34af8ad
- SHA1 426b48b0f3b691e3bb29f465aed9b936f29fc8cc
- SHA512 170c3645083d869e2368ee16325d7edaeba2d8f1d3d4a6a1054cfdd8616e03073772eeae30c8f79a93173825f83891e7b0e4fd89ef416808359f715a641747d7
- SSDEEP 24576:YPUxmkgSxPgobZPRjZ22H6edtOZzWySRO3mlE0i/Yl5P+qF+8k+ao/si6:8UxXPgo8e6WYBSJZSS5P97I
- MD5 SHA1 SHA512 SSDEEP
Digest
cf:de:a6:58:6d:f1:ba:ab:46:cb:60:08:e4:1a:5f:83:16:67:26:51:0b:b5:b9:8a:c9:8b:ed:b5:c8:82:6d:c1:e7:36:aa:8a:82:fe:da:08:1c:7c:47:a3:78:cf:af:fe:92:cb:b8:fd:17:10:3d:e8:ca:87:5b:a3:f2:a6:35:30
Digest Algorithm
sha512
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
Chains
Nov 2, 2021
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Digest
3e:e8:ad:96:a2:e1:d0:66:85:77:ae:c2:41:dc:ef:f3:d5:76:58:fd
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
Chains
Nov 2, 2021
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
Serial Number
05:0c:c7:2c:cf:31:ae:9b:2e:36:41:0a:d0:ee:98:92
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 1, 2021 - Dec 12, 2024
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 7, 2016 - Jan 7, 2031
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
Serial Number
05:0c:c7:2c:cf:31:ae:9b:2e:36:41:0a:d0:ee:98:92
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 1, 2021 - Dec 12, 2024
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
0
Major OS version
6
Entry point
6140
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\dev\sqlite\dotnet-private\bin\2015\x64\ReleaseNativeOnlyStatic\SQLite.Interop.pdb
mscoree
StrongNameSignatureVerificationEx
StrongNameTokenFromAssembly
StrongNameFreeBuffer
CorBindToRuntimeEx
StrongNameErrorInfo
wintrust
WinVerifyTrust
kernel32
TryEnterCriticalSection
HeapCreate
HeapFree
EnterCriticalSection
GetFullPathNameW
lstrlenW
WriteFile
GetDiskFreeSpaceW
OutputDebugStringA
GetModuleFileNameW
SetEnvironmentVariableW
LockFile
LeaveCriticalSection
InitializeCriticalSection
SetFilePointer
GetFullPathNameA
GetEnvironmentVariableW
SetEndOfFile
UnlockFileEx
GetTempPathW
CreateMutexW
WaitForSingleObject
CreateFileW
GetFileAttributesW
GetCurrentThreadId
UnmapViewOfFile
HeapValidate
HeapSize
MultiByteToWideChar
Sleep
GetTempPathA
FormatMessageW
GetDiskFreeSpaceA
GetLastError
GetFileAttributesA
GetFileAttributesExW
OutputDebugStringW
ReadFile
CreateFileA
LoadLibraryA
lstrcatW
WaitForSingleObjectEx
DeleteFileA
DeleteFileW
HeapReAlloc
CloseHandle
GetSystemInfo
LoadLibraryW
HeapAlloc
HeapCompact
HeapDestroy
UnlockFile
GetProcAddress
CreateFileMappingA
LocalFree
LockFileEx
GetFileSize
DeleteCriticalSection
GetCurrentProcessId
GetProcessHeap
SystemTimeToFileTime
GetModuleHandleW
FreeLibrary
WideCharToMultiByte
GetSystemTimeAsFileTime
GetSystemTime
FormatMessageA
CreateFileMappingW
MapViewOfFile
WriteConsoleW
QueryPerformanceCounter
GetTickCount
FlushFileBuffers
FreeEnvironmentStringsW
GetEnvironmentStringsW
AreFileApisANSI
SetEnvironmentVariableA
RaiseException
SetStdHandle
GetConsoleCP
GetConsoleMode
SetFilePointerEx
FlushViewOfFile
lstrcmpiW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwindEx
InterlockedFlushSList
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
GetModuleFileNameA
CompareStringW
LCMapStringW
GetACP
GetTimeZoneInformation
GetStringTypeW
GetStdHandle
GetFileType
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
user32
wsprintfW
advapi32
CryptAcquireContextW
CryptEncrypt
CryptDecrypt
CryptCreateHash
CryptDeriveKey
CryptHashData
CryptDestroyHash
CryptReleaseContext
CryptDestroyKey
SI00b5de0dbe05adc8
SI00f2097672333949
SI013768ea228eaf06
SI03ee1370ff2172fd
SI050169b0f137dcac
SI061f9351f6b79d40
SI066df4a47deb7b95
SI075258fe7332f5c9
SI07646c0ac405baf1
SI0a8f1a0337a9feb7
SI0b65268e19d3b81d
SI0e7c9abcb195c68c
SI0f556a49067bf550
SI0fe7fecb92f1b44b
SI12409cae6ddf2f1e
SI12a7c0808f3f99f2
SI150953dc62f0a879
SI1527d54f96ad891e
SI15d5f41c81892f13
SI19b2677a019ab7ab
SI1ae480d1861ed022
SI1bc1bc471c8cd143
SI1c7a7970970b9619
SI21d24eac30bb9014
SI23e7cf9c8e559e93
SI2409c7e1eb500ce9
SI24bb313f312e2857
SI24f5c83eaddd65e8
SI252aeb4a9d3dc2ff
SI2b074e8cf29cb472
SI2b5f6f3d24eb7ba3
SI2bc16556d60ccfcd
SI2c7820fd77bf7594
SI31a566678d8c54ab
SI327cfc7a6b1fd1fb
SI32b0162a49ae8729
SI349980d776ee39ac
SI36ddf861177da59c
SI36e67160052f7f69
SI3723ba2973e3b57b
SI3974af1f94b94613
SI3d45b939740dff51
SI3d527d6e902c8427
SI3efc17e9bbe52434
SI3f596ca698b243fc
SI3f8b1cdb4dc92eff
SI45d842f2d2322061
SI462a496f3247faf2
SI46481015c7f49c68
SI4983499b64278231
SI4987aea8bdedf163
SI4abff63f9a080046
SI4bf5a93645714882
SI4ceb9ee614df7639
SI4fb6877896ef7303
SI50a9b553ac0b2e2a
SI52058dea2268cd04
SI546abd8b90c0f48d
SI568a7d0a1f4d0ff4
SI57335d3e329eea8d
SI5887bf867911838d
SI588da80b6a264802
SI5b2b3e8bff031a75
SI5b7374ef2d63d8eb
SI5c7fb49466251e7d
SI609efcf96ea8408a
SI61a330d2e855b61b
SI633e1c91fb9a8aa1
SI64119fb980b7e962
SI6479b9cf07b87f67
SI674c3bc07fc17979
SI6901b186cfd089f2
SI690ffdcfd9cda629
SI69d8a1d378771295
SI6cfa851319f410c1
SI6d14611bb8b2c8bc
SI6e539204336d5b4b
SI6e6c544c028b2de9
SI70e4ec628dd7e188
SI7164645d0504ae24
SI72621cc08869a205
SI72b05b1ad5f34d61
SI75fe921d50a95fe0
SI768767362ea03a94
SI77ffe3fede90bfbb
SI783104ea11038afc
SI79f6c64948ab63d2
SI7a4943591207dd14
SI7b97ee05aa1e64c7
SI7c373366af3ee2f7
SI7cd7250399b1ea60
SI7da3b9691a73b4a2
SI7f41c842e0d89557
SI8162bd921f89d839
SI824276b89178ecbe
SI83d1cf4976f57337
SI863e1ae0679961f5
SI87a11c29fe1dc17b
SI88974d2e6bd51eff
SI8a3a9f59ab5f24ee
SI8d447a033d183aaf
SI8d676d5954c732bc
SI8dd2c969f2a6a31e
SI8e33e5864c547f3f
SI9196a02c851acbfb
SI919f742193b92a4b
SI943321d364f02e5d
SI94d8f51c6c1db577
SI950480ab972e108d
SI9517b76a4f0b657e
SI9662fa92cee70cf1
SI979d7afd84d6f0ca
SI989b06a5a9b937fe
SI989b754accd7cddf
SI9bf461db9bf83c22
SI9c6d7cd7b7d38055
SI9cb7692f61998485
SI9ea49276dcf9849f
SIa069da76968b7553
SIa0f9dd1158cbfb0c
SIa1d7e21a548b910c
SIa26b8e5116b7d93b
SIa2a6050a8dbd3b7a
SIa3401e98cbad673e
SIa3f7b31190ce0815
SIa618e7f1e95b5c32
SIa62692883d0c456a
SIa8e1a742a358dc07
SIa9b758d3ae2e9aea
SIab3ed5feb3c43f0c
SIada7f27769d7f95b
SIae9562605f0b7c06
SIb391996b7b633820
SIb3f045f05d2d1b0e
SIb4089165600bb7f5
SIb4e97c410be9a2cf
SIb6d52d8cb2f1045a
SIb739af05c351a5b0
SIb84ee16d149e7562
SIb94a6bc97d77e69f
SIbc9b0b73a965892b
SIbff6307869d58daf
SIc001296960f3e921
SIc0bb4eab77f5a999
SIc21d402df09e0c69
SIc26100c97b176329
SIc28b5d2d1f102994
SIc2d8715ee8c9e908
SIc38599462746964c
SIc3b0ae4f7a27b7a8
SIc5d5610a73781fac
SIc8c63d94dd03040b
SIca6f27da046939cc
SIcbf931747ce28d75
SIcc134e65c80c0c61
SIcd2334250b08e199
SIcd6b4ac0aeff7202
SId00f524badf4f5cf
SId6deafdcc0c75049
SId99ac2a61d035e11
SIdba35b6dcb77d463
SIdbbe1b52f304f379
SIdc2e4e1ccfa9a043
SIdc6920f226dceb74
SIdca7c218fe9393fb
SIde347320a2d725fa
SIdeb28053ce71d5b4
SIdfd4d81e1791b463
SIe25e8f29ef2a78eb
SIe2cb515ade8c0235
SIe57aa77c8884d3f9
SIe6405dfd7b63ead9
SIe68a75d48671c8a5
SIe7632ce587b97772
SIea4313bfab0cfe57
SIea8388f7613ed158
SIec91f505db92f298
SIecd4a7ef4a5968a1
SIeea5cda6d9846aa5
SIef12447577961bdf
SIf060fffd3e5c94b5
SIf21356bf3fa1a8ef
SIf216ef3874529d42
SIf356c1132676af25
SIf4199c70bfb81a15
SIf499bb5c421377e7
SIf71b64d343ddea8b
SIf8090240c1414098
SIf8364af380546f2d
SIf86df75514f4442f
SIf8a71e249d9c661f
SIf8b1716e85b0e192
SIf8ee6276be88ce12
SIfc350ae509dc2b53
SIfca3960780d005fa
SIfcfad09d1b0a60ec
SIfd52d1389825aac4
SIfdb97bb7d9d0d622
sqlite3_cryptoapi_init
sqlite3_fts5_init
sqlite3_fts_init
sqlite3_json_init
sqlite3_percentile_init
sqlite3_regexp_init
sqlite3_sha_init
sqlite3_totype_init
sqlite3_vtshim_init
Name
.text
Size
1.3MB
Virtual Size
1.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
263KB
Virtual Size
263KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
17KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
70KB
Virtual Size
70KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.gfids
Size
512B
Virtual Size
156B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=20, id=241, version=40116,
count=128, id=243, version=40116,
count=37, id=242, version=40116,
count=7, id=259, version=24123,
count=21, id=261, version=24123,
count=16, id=260, version=24123,
count=8, id=203, version=65501,
count=3, id=147, productName=VS2008 build 21022, version=21022,
count=153, id=1, productName=Unmarked objects,
count=1, id=264, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
Resource/Locals/x86/BouncyCastle.Crypto.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e51721dc0647f4838b1abc592bd95fd8cb924716e8a64f83d4b947821fa1fa42
- MD5 0cf454b6ed4d9e46bc40306421e4b800
- SHA1 9611aa929d35cbd86b87e40b628f60d5177d2411
- SHA512 85262f1bc67a89911640f59a759b476b30ca644bd1a1d9cd3213cc8aae16d7cc6ea689815f19b146db1d26f7a75772ceb48e71e27940e3686a83eb2cf7e46048
- SSDEEP 49152:JIBbo0WIgmjljFtXCdRLRBcJd+KaGxHIkMNqzP56O8lZ7qXUqi9Y:6BbBWIgWljGxRB/LLY
- MD5 SHA1 SHA512 SSDEEP
Digest
f6:a3:c5:7e:59:87:21:c6:7b:dd:bc:9b:b2:2d:4f:d1:d2:a5:cc:63:04:1d:78:fb:93:6c:0e:40:16:85:b2:61
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=5101633,CN=Claire Novotny LLC,O=Claire Novotny LLC,L=New York,ST=New York,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13084e657720596f726b,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Oct 19, 2021
SERIALNUMBER=5101633,CN=Claire Novotny LLC,O=Claire Novotny LLC,L=New York,ST=New York,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13084e657720596f726b,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Nov 10, 2006 - Nov 10, 2031
Subject
SERIALNUMBER=5101633,CN=Claire Novotny LLC,O=Claire Novotny LLC,L=New York,ST=New York,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13084e657720596f726b,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
03:d7:ef:74:a9:ff:03:a2:20:b6:ed:bb:39:9d:14:c1
Issuer
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 18, 2020 - Mar 23, 2023
Subject
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 18, 2012 - Apr 18, 2027
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
0
Major OS version
4
Entry point
3221146
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
BouncyCastle.Crypto.pdb
mscoree
_CorDllMain
Name
.text
Size
3.2MB
Virtual Size
3.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Resource/Locals/x86/BouncyCastle.Crypto.xml
- SHA256 de94c224474fad71cd45a2fcd802976f16b8edf7dc290f1e353752d495703e10
- MD5 253aec9d04057e346233763b2ae93a11
- SHA1 2a08b5e3f527b717aae41b0a295b6b4b4a446e9f
- SHA512 7f71600be96bcf1df1748e3715ecb939706d19ea3e19b6d67497718a57ce6b0c8b985aab2b24bf3a2f8a58f471b03e0f807ef3b7927192d341609975e7edbd23
- SSDEEP 12288:Pky4oeqjABNM7fN62FuyEyp/0nNe8C2cjkTYExbXAJv:PkHoeqUBiZoPYYbXk
- MD5 SHA1 SHA512 SSDEEP
Resource/Locals/x86/SQLite.Interop.dll
- IMPHASH 39ace63b362beb47a2a7a8202a5c4f2d
- SHA256 83f332ea9535814f18be4ee768682ecc7720794aedc30659eb165e46257a7cae
- MD5 8be215abf1f36aa3d23555a671e7e3be
- SHA1 547d59580b7843f90aaca238012a8a0c886330e6
- SHA512 38cf4aea676dacd2e719833ca504ac8751a5fe700214ff4ac2b77c0542928a6a1aa3780ed7418387affed67ab6be97f1439633249af22d62e075c1cdfdf5449b
- SSDEEP 24576:eiDAYMz2epP8AEXn8z7qsyb8c+gntHKuvKtBLtTvD0nsrFSK96fYlYyv:1AYMza36enEuyjpTV96A2yv
- MD5 SHA1 SHA512 SSDEEP
Digest
3b:1f:3a:ac:fb:ed:36:06:88:31:ea:b4:6d:f3:a1:e3:8d:2e:7a:dc:11:66:12:9b:f9:bb:8d:7d:d5:0e:57:cc:4e:89:0a:bf:27:24:68:97:37:c9:ea:55:87:a3:86:1c:e3:da:c3:21:ee:3d:b2:c8:6c:40:c6:40:7b:27:ce:61
Digest Algorithm
sha512
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
Chains
Nov 2, 2021
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Digest
18:28:ac:13:a6:25:5d:21:f8:30:42:d7:18:8e:57:cb:ff:65:3f:df
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
Chains
Nov 2, 2021
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
Serial Number
05:0c:c7:2c:cf:31:ae:9b:2e:36:41:0a:d0:ee:98:92
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 1, 2021 - Dec 12, 2024
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 7, 2016 - Jan 7, 2031
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
Serial Number
05:0c:c7:2c:cf:31:ae:9b:2e:36:41:0a:d0:ee:98:92
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 1, 2021 - Dec 12, 2024
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
0
Major OS version
6
Entry point
5844
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\dev\sqlite\dotnet-private\bin\2015\Win32\ReleaseNativeOnlyStatic\SQLite.Interop.pdb
mscoree
StrongNameSignatureVerificationEx
StrongNameTokenFromAssembly
StrongNameFreeBuffer
CorBindToRuntimeEx
StrongNameErrorInfo
wintrust
WinVerifyTrust
kernel32
TryEnterCriticalSection
HeapCreate
HeapFree
EnterCriticalSection
GetFullPathNameW
lstrlenW
WriteFile
GetDiskFreeSpaceW
OutputDebugStringA
GetModuleFileNameW
SetEnvironmentVariableW
LockFile
LeaveCriticalSection
InitializeCriticalSection
SetFilePointer
GetFullPathNameA
GetEnvironmentVariableW
SetEndOfFile
UnlockFileEx
GetTempPathW
CreateMutexW
WaitForSingleObject
CreateFileW
GetFileAttributesW
GetCurrentThreadId
UnmapViewOfFile
HeapValidate
HeapSize
MultiByteToWideChar
Sleep
GetTempPathA
FormatMessageW
GetDiskFreeSpaceA
GetLastError
GetFileAttributesA
GetFileAttributesExW
OutputDebugStringW
ReadFile
CreateFileA
LoadLibraryA
lstrcatW
WaitForSingleObjectEx
DeleteFileA
DeleteFileW
HeapReAlloc
CloseHandle
GetSystemInfo
LoadLibraryW
HeapAlloc
HeapCompact
HeapDestroy
UnlockFile
GetProcAddress
CreateFileMappingA
LocalFree
LockFileEx
GetFileSize
DeleteCriticalSection
GetCurrentProcessId
GetProcessHeap
SystemTimeToFileTime
GetModuleHandleW
FreeLibrary
WideCharToMultiByte
GetSystemTimeAsFileTime
GetSystemTime
FormatMessageA
CreateFileMappingW
WriteConsoleW
lstrcmpiW
QueryPerformanceCounter
GetTickCount
FlushFileBuffers
SetEnvironmentVariableA
AreFileApisANSI
DecodePointer
SetStdHandle
RaiseException
GetConsoleCP
GetConsoleMode
SetFilePointerEx
FlushViewOfFile
MapViewOfFile
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
InterlockedFlushSList
RtlUnwind
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
GetModuleFileNameA
CompareStringW
LCMapStringW
GetACP
GetTimeZoneInformation
GetStringTypeW
GetStdHandle
GetFileType
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
user32
wsprintfW
advapi32
CryptAcquireContextW
CryptEncrypt
CryptDecrypt
CryptCreateHash
CryptDeriveKey
CryptHashData
CryptDestroyHash
CryptReleaseContext
CryptDestroyKey
SI00b5de0dbe05adc8
SI00f2097672333949
SI03ee1370ff2172fd
SI066df4a47deb7b95
SI07646c0ac405baf1
SI0a8f1a0337a9feb7
SI0e7c9abcb195c68c
SI12409cae6ddf2f1e
SI12a7c0808f3f99f2
SI150953dc62f0a879
SI1527d54f96ad891e
SI19b2677a019ab7ab
SI1ae480d1861ed022
SI1bc1bc471c8cd143
SI1c7a7970970b9619
SI21d24eac30bb9014
SI23e7cf9c8e559e93
SI2409c7e1eb500ce9
SI24bb313f312e2857
SI252aeb4a9d3dc2ff
SI2b5f6f3d24eb7ba3
SI2bc16556d60ccfcd
SI2c7820fd77bf7594
SI31a566678d8c54ab
SI327cfc7a6b1fd1fb
SI32b0162a49ae8729
SI36ddf861177da59c
SI36e67160052f7f69
SI3723ba2973e3b57b
SI3d45b939740dff51
SI3d527d6e902c8427
SI3efc17e9bbe52434
SI3f596ca698b243fc
SI3f8b1cdb4dc92eff
SI45d842f2d2322061
SI462a496f3247faf2
SI46481015c7f49c68
SI4983499b64278231
SI4987aea8bdedf163
SI4abff63f9a080046
SI4bf5a93645714882
SI4ceb9ee614df7639
SI4fb6877896ef7303
SI50a9b553ac0b2e2a
SI52058dea2268cd04
SI546abd8b90c0f48d
SI568a7d0a1f4d0ff4
SI588da80b6a264802
SI5b2b3e8bff031a75
SI5b7374ef2d63d8eb
SI5c7fb49466251e7d
SI609efcf96ea8408a
SI61a330d2e855b61b
SI633e1c91fb9a8aa1
SI674c3bc07fc17979
SI6901b186cfd089f2
SI69d8a1d378771295
SI6cfa851319f410c1
SI6d14611bb8b2c8bc
SI6e539204336d5b4b
SI70e4ec628dd7e188
SI7164645d0504ae24
SI72621cc08869a205
SI75fe921d50a95fe0
SI768767362ea03a94
SI783104ea11038afc
SI79f6c64948ab63d2
SI7f41c842e0d89557
SI8162bd921f89d839
SI824276b89178ecbe
SI83d1cf4976f57337
SI863e1ae0679961f5
SI87a11c29fe1dc17b
SI88974d2e6bd51eff
SI8a3a9f59ab5f24ee
SI8d447a033d183aaf
SI8d676d5954c732bc
SI8e33e5864c547f3f
SI9196a02c851acbfb
SI919f742193b92a4b
SI943321d364f02e5d
SI94d8f51c6c1db577
SI950480ab972e108d
SI9517b76a4f0b657e
SI9662fa92cee70cf1
SI979d7afd84d6f0ca
SI989b06a5a9b937fe
SI989b754accd7cddf
SI9c6d7cd7b7d38055
SI9cb7692f61998485
SIa069da76968b7553
SIa0f9dd1158cbfb0c
SIa26b8e5116b7d93b
SIa2a6050a8dbd3b7a
SIa3401e98cbad673e
SIa3f7b31190ce0815
SIa618e7f1e95b5c32
SIa62692883d0c456a
SIae9562605f0b7c06
SIb3f045f05d2d1b0e
SIb4089165600bb7f5
SIb4e97c410be9a2cf
SIb6d52d8cb2f1045a
SIb739af05c351a5b0
SIbc9b0b73a965892b
SIbff6307869d58daf
SIc001296960f3e921
SIc26100c97b176329
SIc28b5d2d1f102994
SIc38599462746964c
SIc3b0ae4f7a27b7a8
SIca6f27da046939cc
SIcbf931747ce28d75
SIcc134e65c80c0c61
SIcd6b4ac0aeff7202
SId6deafdcc0c75049
SId99ac2a61d035e11
SIdba35b6dcb77d463
SIdc2e4e1ccfa9a043
SIdc6920f226dceb74
SIde347320a2d725fa
SIdfd4d81e1791b463
SIe25e8f29ef2a78eb
SIe57aa77c8884d3f9
SIe6405dfd7b63ead9
SIe68a75d48671c8a5
SIe7632ce587b97772
SIea4313bfab0cfe57
SIea8388f7613ed158
SIec91f505db92f298
SIecd4a7ef4a5968a1
SIef12447577961bdf
SIf060fffd3e5c94b5
SIf21356bf3fa1a8ef
SIf216ef3874529d42
SIf356c1132676af25
SIf4199c70bfb81a15
SIf499bb5c421377e7
SIf71b64d343ddea8b
SIf8364af380546f2d
SIf86df75514f4442f
SIf8a71e249d9c661f
SIf8b1716e85b0e192
SIf8ee6276be88ce12
SIfc350ae509dc2b53
SIfca3960780d005fa
SIfd52d1389825aac4
SIfdb97bb7d9d0d622
_SI013768ea228eaf06@8
_SI050169b0f137dcac@12
_SI061f9351f6b79d40@8
_SI075258fe7332f5c9@0
_SI0b65268e19d3b81d@12
_SI0f556a49067bf550@8
_SI0fe7fecb92f1b44b@12
_SI15d5f41c81892f13@8
_SI24f5c83eaddd65e8@4
_SI2b074e8cf29cb472@16
_SI349980d776ee39ac@12
_SI3974af1f94b94613@12
_SI57335d3e329eea8d@12
_SI5887bf867911838d@12
_SI64119fb980b7e962@12
_SI6479b9cf07b87f67@8
_SI690ffdcfd9cda629@8
_SI6e6c544c028b2de9@4
_SI72b05b1ad5f34d61@12
_SI77ffe3fede90bfbb@32
_SI7a4943591207dd14@4
_SI7b97ee05aa1e64c7@12
_SI7c373366af3ee2f7@4
_SI7cd7250399b1ea60@4
_SI7da3b9691a73b4a2@12
_SI8dd2c969f2a6a31e@12
_SI9bf461db9bf83c22@8
_SI9ea49276dcf9849f@12
_SIa1d7e21a548b910c@4
_SIa8e1a742a358dc07@8
_SIa9b758d3ae2e9aea@12
_SIab3ed5feb3c43f0c@0
_SIada7f27769d7f95b@4
_SIb391996b7b633820@36
_SIb84ee16d149e7562@12
_SIb94a6bc97d77e69f@8
_SIc0bb4eab77f5a999@20
_SIc21d402df09e0c69@8
_SIc2d8715ee8c9e908@4
_SIc5d5610a73781fac@12
_SIc8c63d94dd03040b@44
_SIcd2334250b08e199@112
_SId00f524badf4f5cf@20
_SIdbbe1b52f304f379@4
_SIdca7c218fe9393fb@24
_SIdeb28053ce71d5b4@12
_SIe2cb515ade8c0235@12
_SIeea5cda6d9846aa5@12
_SIf8090240c1414098@4
_SIfcfad09d1b0a60ec@20
sqlite3_cryptoapi_init
sqlite3_fts5_init
sqlite3_fts_init
sqlite3_json_init
sqlite3_percentile_init
sqlite3_regexp_init
sqlite3_sha_init
sqlite3_totype_init
sqlite3_vtshim_init
Name
.text
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
162KB
Virtual Size
161KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
10KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.gfids
Size
512B
Virtual Size
168B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
34KB
Virtual Size
34KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=49, id=241, version=40116,
count=128, id=243, version=40116,
count=39, id=242, version=40116,
count=23, id=259, version=24123,
count=22, id=261, version=24123,
count=15, id=260, version=24123,
count=8, id=203, version=65501,
count=3, id=147, productName=VS2008 build 21022, version=21022,
count=152, id=1, productName=Unmarked objects,
count=1, id=264, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
Resource/SaslPrep/SaslPrepProfile_norm_bidi.spp
- SHA256 f2501579fc7ab062324b4e1a45428f69f9a37e0363a4fc1d3734157b587b92e1
- MD5 787dcae108ef9d5fcd9f60ce6387e7b1
- SHA1 83a906239423183910e617273d6023c534e47e5c
- SHA512 c65d3bc01406054d9932e2c840980978a5be4bed7bf8dd60a063304017f0d8b8618d7e7688b365110976822896256cb98ed6ce40c2b6032e0d06637d73c8e283
- SSDEEP 24:j2Lc2SuJAoYYY6JB/BsSh7F3eQfWiLLN+LEEEEEEEEEEEEEEEEEEEEEEEEEEEEp:2c29CoX5JBNhCiLx+l
- MD5 SHA1 SHA512 SSDEEP
Resource/TypeSupport/Unicode/ICU/icudt26l.dat
- SHA256 b388595d6e96e51430bec6022b1a5635ca541e60936abd73342ae8319dfe6802
- MD5 525de57b8d1167a4efb7eb00c013354f
- SHA1 3f1ac2d2b6807c3ed2fc41351262712b72fad749
- SHA512 dfd950d1220f46bf5f75c4130902bb63a4447c435d25386461a4e4653e73dc6780577fb51b14b182a1f2b1a38585914237625b199d806b6f80f9becc64eeff32
- SSDEEP 3072:C5em1am14oBR+pa3sHxW5D+eXHdsdj5xkq7KV2Sq71c64ZAr3Abyc7dAzATXcErQ:CR1R/UFTSO1TPcaMm
- MD5 SHA1 SHA512 SSDEEP
Resource/TypeSupport/Unicode/Mappings/Adobe/symbol.txt
- SHA256 52dbabcdebe38f3e19e9071d6796fe49f1463f03d2d82064aab4a10bfbd4dddf
- MD5 31d752fa13b4d1fc7b7b4747a3f6d3f9
- SHA1 eaafd280b2ea187f078674b9a1d5a8206ccf4a13
- SHA512 ed402d201b19c9edeeefa17d2f82a480b8d16ce3235668a91bdd0e6f3b59cbb55bc7119a272c34d1c4e88999b6fe08697d65d65e7b4de44c197e57f2ff44f079
- SSDEEP 192:sRDIlhfxjh5/q7Wr6KyfyHnW9WSQftm15VkCnl2moTTEmbZ3mrZWlBAjnBmnVRn8:sVCx27WuKy0W9WDlSVPlwd3C/BCVBFyB
- MD5 SHA1 SHA512 SSDEEP
Resource/TypeSupport/Unicode/Mappings/Adobe/zdingbat.txt
- SHA256 e7651bcf12532af30c79c499e7a280ccbcd7f208436999a21b1500b07149bc95
- MD5 691886379048a5f9065ee903757af29b
- SHA1 9f6453e6f027e771602ad98c5379eaa2b2469463
- SHA512 e2934bd4f36cc21e1d71c4fcfc3c31d091a54f04762b0cf7b20fd6bf70ce30fd209a406020c82c565005bc0677471eb524b5a537059e29e4231955fc9307216c
- SSDEEP 192:IcRDIlhXomP1RueMV1tQdS6t0Ftjzt8CFrMbyaYQgtrtXiPIn:IcV+ombupV1mdS5SC+20I
- MD5 SHA1 SHA512 SSDEEP
Resource/TypeSupport/Unicode/Mappings/Mac/CENTEURO.TXT
- SHA256 ae8fdf0311fe249ee1a3e08fe36c394ca2da791c622b665ddebcb623ac248903
- MD5 3ea4a9a2765040c721374ccbb8e7bd59
- SHA1 bae4c79a9e9c27cbb7308bb364f69566387cce45
- SHA512 1a86665a081c73d170ac6ba9a3abfbedecd71557b274d99e254a446e852e6c62cc0bf383eeafbfc1722f63af65b4e4bc73f9e0ebc6fd790317b08ffd488be289
- SSDEEP 192:X1ei8BsiHo6ZD5OSlEZGWRBnBb7ec56ZXj3nZv0CU8+zLtVoeuq/W+vsAfzMUMQi:FeDsiV4SlTWRRBb7e6b6D
- MD5 SHA1 SHA512 SSDEEP
Resource/TypeSupport/Unicode/Mappings/Mac/CORPCHAR.TXT
- SHA256 83246b8c942cbacf1031445a99e62acbb4733ef4167bebfba2bd852869824eab
- MD5 0fbad8e1c335ac42617936aa6f89ec89
- SHA1 02ba453abfbe24b25c35a2d75c6134714b3d7d43
- SHA512 ab9e0bb4cae4c72cbccf7d061f1f181dc86277e8e59424802422c6641bec864d3e87b2261d56cb7991e3f60c5c6f56a814073f7d180745b8499c05c39f93842a
- SSDEEP 384:+aT8iQfVsEByru8n1ePc1RJ1lX1HEvSZ3:dIqEc/X1kvSZ3
- MD5 SHA1 SHA512 SSDEEP
Resource/TypeSupport/Unicode/Mappings/Mac/CROATIAN.TXT
- SHA256 f353d83def5c9632ffd1925a0f1480e3dc0e00c096aff5680e448cbfd97fad05
- MD5 5c36e2cba7fdd612c575d50974ef708a
- SHA1 b7a92b10de26a0e23434152694302e4867b011dc
- SHA512 9a2a71bf2de141f7e0a295ad40824e63b7b18f1d530d90b5edeec78dd23eaab733d40f95ec320ee2c7686a113bee58fb92d48875d347c669c4c82f9ac27af76e
- SSDEEP 192:xO1i8BsiHo9EB0QguBwjEZGWRBnBb7ec56ZcjVNs0sDTZLzPF5Ofzwswsc3ATpGE:A1Dsi1BwjTWRRBb7e6vY9PspP
- MD5 SHA1 SHA512 SSDEEP
Resource/TypeSupport/Unicode/Mappings/Mac/CYRILLIC.TXT
- SHA256 10738cd5bba3b23c02d3655bf2afdf72daeaaef778cda562c6d10ae8d25ca591
- MD5 db4ed5c205fddd693dc9ce69cccad036
- SHA1 ffae0be88d51d71fb1e496156564e55f874efad9
- SHA512 0402d575c17d03e7af8bf44f36ead7d4ccd283375b65d94597ed927a3975d5427483c681a2c604b6f61d796e9c92868620594b7661de6321920c23a6ba281c96
- SSDEEP 192:BWDRi8BsiHopYZXC4JqANEZGWRBnBb7ec56ZmuZ6VfDjCfzB+CXp1:kDRDsiZZXC4qWTWRRBb7e6/o6NIXD
- MD5 SHA1 SHA512 SSDEEP
Resource/TypeSupport/Unicode/Mappings/Mac/GREEK.TXT
- SHA256 1ce082e86367551b2a21465d1b1c2edc103242f7d565411dcea0762e3dd63aa1
- MD5 962d73ae58ea74dfa492bda68064f130
- SHA1 b3ecd08894988a66c190ab75b88c3cc752aba34f
- SHA512 5c3c8ee79c6714097b58276905f2532b1d8be07fbe8db129624f130bd6622bba604393673d2932a08df79eea83caeaf2ce157893ede76bef6fc1027573ea8592
- SSDEEP 192:mHQSi8BsiHoGHUdfJt8skBEZGWRBnBb7ec56ZSj2z0sVRQvWJ9mfzDmb+mtGf0D:yhDsiydb8siTWRRBb7e6qvVCe8X2
- MD5 SHA1 SHA512 SSDEEP
Resource/TypeSupport/Unicode/Mappings/Mac/ICELAND.TXT
- SHA256 e04b3c96f65a27030b5e4b071d8e61b8ede1d94cf7bf7845262b29be2b7656ac
- MD5 48f0f1332aca28076f1d479d8a1c0447
- SHA1 e19b21754d221f5fa53aecfb01b2578d9974f35d
- SHA512 7360aab0683f102420e850e5b0ca7e366f605aec7a3be4305dc0fb27270209a006dc5ae1a28f68a7c4241bd1a674a215ce9c197e25aa3e18744691c1b987abe6
- SSDEEP 192:496i8BsiHo4wg68wkw3EZGWRBnBb7ec56ZcjVNs0sDTZLF8GYpfzIiB7Ubc3jTpM:66Dsi61kw3TWRRBb7e6vYMGPaO
- MD5 SHA1 SHA512 SSDEEP
Resource/TypeSupport/Unicode/Mappings/Mac/ROMAN.TXT
- SHA256 a58f56f7cf7767658cff9fdfd1ba182cc74a513b3a2b6f34e44625ff811f53dd
- MD5 94a43862cb0159469484841d8370e552
- SHA1 45afc896bb3ef65a7c77550244a52e7212de89ad
- SHA512 eb6454659fd8cb0a631875e27bba01023eb3c75740379c2deb514bc08577221a7914f2717f141134aebc596cb4b34a523548a50f3448abede2b87b4ccfcb93d5
- SSDEEP 192:5iQi8BsiHo/F876g2pSSwpEZGWRBnBb7ec56ZcjVNs0sDTZLzGYpfzwUbc3jTpGN:VDsi88PSwpTWRRBb7e6vY9GcaO
- MD5 SHA1 SHA512 SSDEEP
Resource/TypeSupport/Unicode/Mappings/Mac/ROMANIAN.TXT
- SHA256 ff13110e8b448b033f464184a1a07b4cd32f0f0fea203a4401c284073fffad66
- MD5 d39f6c0a8cfe6f118ffd105cf44dea90
- SHA1 6c0ae83fd83e5b1af2d288b149e0f7907dd378cc
- SHA512 75a42575a542e95a9736deac09fe5480a52d514d9b09c2542a9bf7af1de104a3f83b29bf0c317b4d593d572bc1548728f2fb68115ab1506c5784528ae33710ed
- SSDEEP 192:boRi8BsiHo/rUgyxUHwsEZGWRBnBb7ec56ZcjVNs0sDTZLzDvXYpfzTUbc3jTpGN:sRDsifxUHwsTWRRBb7e6vY9rhaO
- MD5 SHA1 SHA512 SSDEEP
Resource/TypeSupport/Unicode/Mappings/Mac/SYMBOL.TXT
- SHA256 c57c451d4a524159bf143573cd0568869c8eed814a999bff7f3e560dabd39f1d
- MD5 46485e1a024abc31e8b9d2b4ca9a3b39
- SHA1 57f5f3109969a8dd8e71e1e925dee37f2b61c016
- SHA512 fbaff075b556b461ba6dd731ec52dfe9d3a2be202995e8da1d4794aedb812652a198ffcdaa0052c95fa57f94edb5d51342b1a38e10f62a7ca506c41b759195e3
- SSDEEP 384:UDsinsKkRUJXEe3fLMxtASwgzWgfL3SR14oLLQQU0Kp9b:UY/wufLiR9LLQQUjp9b
- MD5 SHA1 SHA512 SSDEEP
Resource/TypeSupport/Unicode/Mappings/Mac/TURKISH.TXT
- SHA256 9ecde6f591caed9c2ce4438884da5f22e35fbdbb97e8d80b43129b23a6791891
- MD5 6bfac3d4ab3ac941a0b2a29a56de6f64
- SHA1 cdc38c3e0de96c3f2b50448cf3dcf42d52e7e243
- SHA512 1e2645df84c5392b09e85dac63970ba49dec9dee63c06548f7717fbfca2643646c1668202217ec836a663c4938fa45774d3c7a9a7254b926d75b0a32c90fd3ee
- SSDEEP 192:y7gi8BsiHoGV1zjbweEZGWRBnBb7ec56ZcjVNs0sDTZLzGYpfzRzUUbc3jTpGNlw:WgDsiX1zjbweTWRRBb7e6vY9Gka3
- MD5 SHA1 SHA512 SSDEEP
Resource/TypeSupport/Unicode/Mappings/Mac/UKRAINE.TXT
- SHA256 98dd24a56e7d0e2bd2fc6a8bf429aa7bd3820b0d2d90456b972914639d2278ed
- MD5 96431211151b2e58c23262cce683e033
- SHA1 ff90820ba88a249c4f8bb605d6f9d6cfcb896257
- SHA512 28dcd7c9e41cd378f88a14dafa5ae4cec291206feea3bae7a26c6f5681059ccbbf54a59c075a19f752e48658204c388b4495b707e7249f3622e827c24c83630b
- SSDEEP 96:OEyDE8TDyKJzAfa4evYBTY/qHoUbExiNU/qnTxFA:gD2i8BsiHobGHA
- MD5 SHA1 SHA512 SSDEEP
Resource/TypeSupport/Unicode/Mappings/win/CP1250.TXT
- SHA256 cf79ba755416ae5628a9dd1f870306b5a45fd6b256efed0c2ac1cc2ccb3307f0
- MD5 3c9476725fbfeeffb9f549d995ee2815
- SHA1 8e2502eb4fc5137ae6e776d1f1804a3afb6eae31
- SHA512 ff35c0a6a878c303567d957c0e465cd9bcd0678c1be3953b3438c686b4f739fb6f47a465465119b474d468d46b19397955e688fc2b92f71abbec276be072f5c8
- SSDEEP 192:a0LuVb+Mu1eIqY/tJVLTjbew68i/+raRKUWKfThEYh4AIhvDHFzxn62hxSAWUMuA:aV3+qw7VLTjbewlKfn+Qx
- MD5 SHA1 SHA512 SSDEEP
Resource/TypeSupport/Unicode/Mappings/win/CP1251.TXT
- SHA256 f87ed4480cfddb8f5f6226292338ca407ccc7b1a543f3832f1d20aff6cb72a58
- MD5 2926366654dbc6711ee71ba2589161c3
- SHA1 455e6e5e78d03349454cb1c6b0175e9bf2b943ce
- SHA512 a9a69e32a16ecf7de291e4fa00c6cb349048ceb2f4070406c16b050439a4c2420a7da0f1fc9a0b76e21439b8deabcdd2085c3c14411a6032226c74274dd1e49b
- SSDEEP 192:3BHVb+Mu1eIqY/tJVLTjbew6a7ifHYhgjVJa66Oz9L:3v3+qw7VLTjbew/3GMOd
- MD5 SHA1 SHA512 SSDEEP
Resource/TypeSupport/Unicode/Mappings/win/CP1252.TXT
- SHA256 fca3ab5882f0a562794f05d7f15a39157c59d7c07fcbac79ab7cf3d12c979541
- MD5 93fb108016f8a1e87e4129b21fe9984b
- SHA1 f6d6b1cac29fdffe774e5175cb60970ba373a656
- SHA512 e0679ddb288423557170c09bf6848d6d8d74f9e70bd751131db7bd248446606db856a86af7ac8e3500b2950261de199a5ede444d8bf451ee1ccc6cc854151342
- SSDEEP 192:YUsVb+Mu1eIqY/tJVLTjbew6SiNNzu6NSCYyhrt0K5n9dWGufxvH+Gv:Y93+qw7VLTjbewtUSLO+RV
- MD5 SHA1 SHA512 SSDEEP
Resource/TypeSupport/Unicode/Mappings/win/CP1253.TXT
- SHA256 2d36bec3e1ecbf2b6de8a37c98717ae21ca8c5bc0b487556996b3fff2b6f6fd9
- MD5 6b77baac03038b028948d2a667efdaa1
- SHA1 6afbc63ab3a2b0bf10cbe802f7633da3e3198417
- SHA512 d7541266b100ac879be8139108344121b10390350b93d26c6f5c5279c18503d7b6829332281a892369de4d578090987d1310201262c181addbc3b9d9495bd209
- SSDEEP 192:Nz9Vb+Mu1eIqY/tJVLTjbew6Si/0eTmVvZOzdTWb7D:Nr3+qw7VLTjbewGsB
- MD5 SHA1 SHA512 SSDEEP
Resource/TypeSupport/Unicode/Mappings/win/CP1254.TXT
- SHA256 32fa83c6f8ad346e66e544640942906e0a91cc0d2075324b7f244695de5740a5
- MD5 65d7c9205e1a1393b8530670add4e596
- SHA1 535cada91e5fba038e0fd9f2214f91a83c3be45d
- SHA512 95798f9e068a82380bdbdf649a2dd2f7cc72206444de0a7b9ab2de2cbd9938dc0856f2a0faeb29bcc965900448dfb0e7dddef0cc8e1c5711896f1b82d40a3ca1
- SSDEEP 192:uWKVb+Mu1eIqY/tJVLTjbew6SiNAH6NSCYyhrUJ0KXdWG0xvfxvHZ:ul3+qw7VLTjbewfUSL5y/D
- MD5 SHA1 SHA512 SSDEEP
Resource/TypeSupport/Unicode/Mappings/win/CP1257.TXT
- SHA256 7cb16a0b949f8573b06f22f091c44a1ea251cc9904591fceb2743475302c4640
- MD5 002134c7ea7f619246bbf445caad9f08
- SHA1 def97351b77ebf6210b6bfb69b8bc3a4f9a64c36
- SHA512 95e4620258b0189b993bb56f2219f73d84145bd8e5b45f9ad70899d8da0e742bb3ead8697e5335e4de895bed925f6212d96f813b0ce9383ae42a967cca2730ca
- SSDEEP 192:BPJVb+Mu1eIqY/tJVLTjbew68i/vgIey4tvPhSiY+21KBrNbxlv0:BT3+qw7VLTjbew9Wo77A
- MD5 SHA1 SHA512 SSDEEP
Resource/TypeSupport/Unicode/Mappings/win/CP1258.TXT
- SHA256 f53d0ffb7f3c8182794331cfdd2fbcf77ff6dbdb05b415c98cc8d6fc49dce2fb
- MD5 88e9b5216b90d0332bd2cd4fcee88a22
- SHA1 748ec8b8b4427f3b48b23b3b224c1cffea2dd169
- SHA512 9d5d6e0cf41e9054d3c9253cec0a482dd97e412794523e352c06d39666931b1d8291fef1c5bbef629eb7c1bb53d866fe2eb925cb314026bf027eaabb1208f0bb
- SSDEEP 192:Sy2Vb+Mu1eIqY/tJVLTjbew6SiNne6NSCYh3hDDEYx1W/nxKHK:S13+qw7VLTjbew/USLkfz
- MD5 SHA1 SHA512 SSDEEP
Resource/opengl64.dll
- SHA256 e7d625cf255360b0ea96a52ca990be6f1cef522ff7440393e45b12793ac88031
- MD5 71466589eb444bbf272c0f5c920c57f0
- SHA1 4fcace49ee032779d3bf7b8e03c6a9f29ed871ba
- SHA512 eff62450cf03d72af2594d750a70b008226fa2e46216661716287639bf5e1ff1303076fdaf4f062ca4098ef10a8e29502de55ecb3a6e04753aad7fcad01e3352
- SSDEEP 48:0ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZY:n
- MD5 SHA1 SHA512 SSDEEP
Resource/resources.pak
- SHA256 11d0f55c105883d203137a87a610ba793299dc4774fd6d8b3a86666a2c337041
- MD5 df15387bf046715cc592a690da33e4b1
- SHA1 ad93b08dff82cbd894f6a0a9733c70d7e564113d
- SHA512 71244553d7b1b559fcaaa059622c340d22148bd5324fa3f6730d37322025dbfe5e853948b49b91db6022a25bca4ddbab8fe6ee1522a461963dfba04a7c93d69a
- SSDEEP 98304:b6zN1Kt66I0+1Yk93pPVrXh188CYCUrwr1ISgMRQK8nXCpGm5vEybt:+zjKt66bGVrhm8hCUkrGsyCV5vXbt
- MD5 SHA1 SHA512 SSDEEP
Set-up.exe
- IMPHASH e25eb2ecee0497e34c4dbf805fe3c57d
- SHA256 53196c343c37bb328fcb8718c4435328be4cb2bb7de17d297a2f5327e62a9caa
- MD5 4b5c2b18976c4013cc78599fc50b7d04
- SHA1 a6a2cd7994b1762a284b266c6d7065851ce3827f
- SHA512 c85018883df127a911080728d20ab1f33c1dd68bca35f81e532819c23588c56b24028a18ee87d55331c9184c4d79870a3eead0920f00baa4d377411f0e9ac527
- SSDEEP 24576:K5IFBOW08RLWmdi97UUzn2BygXfav/PoAlKZRkBnFocWUdcmvt2uiqu9m9Y96976:K2FBOWTRL3dklzn21vav/PoAdDbl4
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5296
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
advapi32
RegCloseKey
RegCreateKeyA
RegSetValueExA
kernel32
DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetLastError
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetStartupInfoA
GetTempPathA
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte
lstrlenA
msvcrt
__getmainargs
__initenv
__lconv_init
__mb_cur_max
__p__acmdln
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_amsg_exit
_cexit
_errno
_initterm
_iob
_lock
_onexit
_unlock
abort
atoi
calloc
exit
fclose
fopen
fputc
free
fwrite
getc
islower
isspace
isupper
isxdigit
localeconv
malloc
memcpy
memset
perror
printf
rand
realloc
setlocale
signal
srand
strcat
strchr
strerror
strlen
strncmp
strtol
strtoul
time
tolower
ungetc
vfprintf
wcslen
shell32
ShellExecuteA
main
Name
.text
Size
1.5MB
Virtual Size
1.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
36KB
Virtual Size
35KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
/4
Size
235KB
Virtual Size
235KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
6.0MB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
66B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
52B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
8B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
70KB
Virtual Size
70KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/14
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/29
Size
101KB
Virtual Size
101KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/41
Size
18KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/55
Size
55KB
Virtual Size
55KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/67
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/80
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/91
Size
98KB
Virtual Size
97KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/102
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
acceptancy.svg
- SHA256 c2eae923ef7b68984af9b76d81f53f9797d1ba56e361c6ceec7728109d28b097
- MD5 9c93706b69d74e1581f72121b51ba165
- SHA1 7fa9050b961309343cc7b928c5208b7590b6b1a7
- SHA512 8dd402525ef0d2c093c09899471db61507fe86cef3a5c882668e6c8b55491217ecb3acea8a323e5ae796322b0f06411f58d47f375cdd773bc747d561659c08a5
- SSDEEP 1536:77eekfGGOl/TJGEFCxUZkmlhvaJ0eQ0NEwtQn3P:77/kl6/TJGUuUZ/kieQ0GwQ3P
- MD5 SHA1 SHA512 SSDEEP
opengl64
- SHA256 c79c4e7f57bfa69dac2bdaf6b074f39b68cffc801e361b5564295b393f7c9374
- MD5 483c78697433d273fe559708effbe3df
- SHA1 89b044bf2a6a57bc93daea55d871db1dd99d0bd5
- SHA512 e78cb2b136fae43d5810d410984940e6bb6edf9405b22f1c4c6271d7de15e77056828ef01294201db99edce3728bb0a0dcea3e4a9cf4ff5605459b5122eaf135
- SSDEEP 24:oOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOe:3
- MD5 SHA1 SHA512 SSDEEP