f5b8ba66bf904d4073cb8819d8cecc852500a8ef4a90a767cce4600325934ddb

Sharing

Copy URL Twitter E-mail

General

Target

f5b8ba66bf904d4073cb8819d8cecc852500a8ef4a90a767cce4600325934ddb
Size

4.8MB
MD5

0f737e4007520f144acd6ccc5157e281
SHA1

c1a83fbd5038a9c75ef5cb2648146f17c75d954f
SHA256

f5b8ba66bf904d4073cb8819d8cecc852500a8ef4a90a767cce4600325934ddb
SHA512

ad5968c8e481566aa3dc0f9116397debe8ce351543eb35dbf041fde7bef105625a339368c941f7610b7e0e1314fdaa33d72cc4bc24f3c61e7f9aff2ea575b682
SSDEEP

98304:66Q2rq61qDIUqWjnuGYf6Ht5qQEZC8a9cLnSXsgasL57r3:66Q2rqX50Mqj8aLnSXXJ3

Score

7^/10

upx aspackv2

Malware Config

Signatures

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
static1/unpack001/htmlayout.dll	acprotect

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
static1/unpack001/wrapper.dll	aspack_v212_v242

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/htmlayout.dll	upx

Unsigned PE 8 IoCs

Checks for missing Authenticode signature.

resource
f5b8ba66bf904d4073cb8819d8cecc852500a8ef4a90a767cce4600325934ddb
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/nsDialogs.dll
unpack001/bass.dll
unpack001/game.wrp.exe
unpack001/htmlayout.dll
unpack002/out.upx
unpack001/wrapper.dll

Files

f5b8ba66bf904d4073cb8819d8cecc852500a8ef4a90a767cce4600325934ddb
.exe windows:5 windows x86 arch:x86

b729b61eb1515fcf7b3e511e4e66258b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileTime
CompareFileTime
SearchPathW
GetShortPathNameW
GetFullPathNameW
MoveFileW
SetCurrentDirectoryW
GetFileAttributesW
GetLastError
CreateDirectoryW
SetFileAttributesW
Sleep
GetTickCount
CreateFileW
GetFileSize
GetModuleFileNameW
GetCurrentProcess
CopyFileW
ExitProcess
GetWindowsDirectoryW
GetTempPathW
GetCommandLineW
SetErrorMode
CloseHandle
lstrlenW
lstrcpynW
GetDiskFreeSpaceW
GlobalUnlock
GlobalLock
CreateThread
LoadLibraryW
CreateProcessW
lstrcmpiA
GetTempFileNameW
lstrcatW
GetProcAddress
LoadLibraryA
GetModuleHandleA
OpenProcess
lstrcpyW
GetVersionExW
GetSystemDirectoryW
GetVersion
lstrcpyA
RemoveDirectoryW
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GlobalFree
GetModuleHandleW
LoadLibraryExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
WideCharToMultiByte
MulDiv
lstrlenA
WriteFile
ReadFile
MultiByteToWideChar
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW
lstrcpynA

user32

ScreenToClient
GetMessagePos
CallWindowProcW
IsWindowVisible
LoadBitmapW
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
TrackPopupMenu
GetWindowRect
AppendMenuW
CreatePopupMenu
GetSystemMetrics
EndDialog
EnableMenuItem
GetSystemMenu
SetClassLongW
IsWindowEnabled
SetWindowPos
DialogBoxParamW
CheckDlgButton
CreateWindowExW
SystemParametersInfoW
RegisterClassW
SetDlgItemTextW
GetDlgItemTextW
MessageBoxIndirectW
CharNextA
CharUpperW
CharPrevW
DispatchMessageW
PeekMessageW
wsprintfA
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
LoadCursorW
SetCursor
GetWindowLongW
GetSysColor
CharNextW
GetClassInfoW
ExitWindowsEx
FindWindowExW
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
EndPaint
IsWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectW
SetBkMode
SetTextColor
SelectObject

shell32

SHBrowseForFolderW
SHGetPathFromIDListW
SHGetFileInfoW
ShellExecuteW
SHFileOperationW
SHGetSpecialFolderLocation

advapi32

RegEnumKeyW
RegOpenKeyExW
RegCloseKey
RegDeleteKeyW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegEnumValueW

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 409KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 1.9MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 289KB - Virtual size: 289KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/System.dll
.dll windows:5 windows x86 arch:x86

039bcbc605477e8e87ec550c2e60e748

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GlobalFree
GlobalSize
GetLastError
lstrcpyW
lstrcpynW
GetProcAddress
WideCharToMultiByte
lstrcatW
lstrlenW
lstrcmpiW
LoadLibraryW
GetModuleHandleW
MultiByteToWideChar
VirtualAlloc
VirtualProtect
FreeLibrary

user32

wsprintfW

ole32

CLSIDFromString
StringFromGUID2

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store
StrAlloc

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 963B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/bar.bmp
$PLUGINSDIR/modern-header.bmp
$PLUGINSDIR/modern-wizard.bmp
$PLUGINSDIR/nsDialogs.dll
.dll windows:5 windows x86 arch:x86

9ea5bdc8c90dfcffe309465c26c89758

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
MulDiv
lstrlenW
HeapFree
GetProcessHeap
lstrcmpiW
HeapReAlloc
lstrcpynW
GetFileAttributesW
lstrcpyW
GetCurrentDirectoryW
SetCurrentDirectoryW
HeapAlloc
GlobalFree

user32

LoadCursorW
RemovePropW
DrawFocusRect
GetPropW
DrawTextW
GetWindowTextW
GetDlgItem
SetWindowLongW
SetWindowPos
CreateDialogParamW
MapWindowPoints
GetWindowRect
SetCursor
CreateWindowExW
IsWindow
SetTimer
KillTimer
DispatchMessageW
TranslateMessage
GetMessageW
IsDialogMessageW
ShowWindow
wsprintfW
GetClientRect
CharPrevW
CallWindowProcW
SetPropW
DestroyWindow
MapDialogRect
CharNextW
SendMessageW
GetWindowLongW

gdi32

SetTextColor

shell32

SHGetPathFromIDListW
SHBrowseForFolderW

comdlg32

GetSaveFileNameW
CommDlgExtendedError
GetOpenFileNameW

ole32

CoTaskMemFree

Exports

Exports

Create
CreateControl
CreateItem
CreateTimer
GetUserData
KillTimer
OnBack
OnChange
OnClick
OnNotify
SelectFileDialog
SelectFolderDialog
SetRTL
SetUserData
Show

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 590B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$TEMP/ulicense.rtf
.rtf
bass.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

BASS_Apply3D
BASS_ChannelBytes2Seconds
BASS_ChannelGet3DAttributes
BASS_ChannelGet3DPosition
BASS_ChannelGetAttributes
BASS_ChannelGetData
BASS_ChannelGetDevice
BASS_ChannelGetEAXMix
BASS_ChannelGetInfo
BASS_ChannelGetLength
BASS_ChannelGetLevel
BASS_ChannelGetPosition
BASS_ChannelGetTags
BASS_ChannelIsActive
BASS_ChannelIsSliding
BASS_ChannelPause
BASS_ChannelPlay
BASS_ChannelPreBuf
BASS_ChannelRemoveDSP
BASS_ChannelRemoveFX
BASS_ChannelRemoveLink
BASS_ChannelRemoveSync
BASS_ChannelSeconds2Bytes
BASS_ChannelSet3DAttributes
BASS_ChannelSet3DPosition
BASS_ChannelSetAttributes
BASS_ChannelSetDSP
BASS_ChannelSetDevice
BASS_ChannelSetEAXMix
BASS_ChannelSetFX
BASS_ChannelSetFlags
BASS_ChannelSetLink
BASS_ChannelSetPosition
BASS_ChannelSetSync
BASS_ChannelSlideAttributes
BASS_ChannelStop
BASS_ErrorGetCode
BASS_FXGetParameters
BASS_FXReset
BASS_FXSetParameters
BASS_Free
BASS_Get3DFactors
BASS_Get3DPosition
BASS_GetCPU
BASS_GetConfig
BASS_GetDSoundObject
BASS_GetDevice
BASS_GetDeviceDescription
BASS_GetEAXParameters
BASS_GetInfo
BASS_GetVersion
BASS_GetVolume
BASS_Init
BASS_MusicFree
BASS_MusicGetAttribute
BASS_MusicGetOrderPosition
BASS_MusicGetOrders
BASS_MusicLoad
BASS_MusicSetAttribute
BASS_Pause
BASS_PluginFree
BASS_PluginGetInfo
BASS_PluginLoad
BASS_RecordFree
BASS_RecordGetDevice
BASS_RecordGetDeviceDescription
BASS_RecordGetInfo
BASS_RecordGetInput
BASS_RecordGetInputName
BASS_RecordInit
BASS_RecordSetDevice
BASS_RecordSetInput
BASS_RecordStart
BASS_SampleCreate
BASS_SampleCreateDone
BASS_SampleFree
BASS_SampleGetChannel
BASS_SampleGetChannels
BASS_SampleGetInfo
BASS_SampleLoad
BASS_SampleSetInfo
BASS_SampleStop
BASS_Set3DFactors
BASS_Set3DPosition
BASS_SetConfig
BASS_SetDevice
BASS_SetEAXParameters
BASS_SetVolume
BASS_Start
BASS_Stop
BASS_StreamCreate
BASS_StreamCreateFile
BASS_StreamCreateFileUser
BASS_StreamCreateURL
BASS_StreamFree
BASS_StreamGetFilePosition
BASS_Update
_

Sections

Size: 86KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 568B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
branch/branch.xml
.xml
branch/logo1.jpg
.jpg
clips/10b03fdba5d4f7d9315b9e463b33420.xml
.xml
clips/10fdbfb8c2b54d789130bb9c78bed92.xml
.xml
clips/11d14b2ee65047afa4c9eb3b6646670.xml
.xml
clips/1403c1d0cef1481c857832c193ad4aa.xml
.xml
clips/14ad61b12e5a4c2984cb78f288221cc.xml
.xml
clips/14d303a85e2742098055a8de5e13cd2.xml
.xml
clips/15c782c690ec47029096362f1e5134d6.xml
.xml
clips/15dddc8da056464dbf5b96b0a622c52e.xml
.xml
clips/15f9ad3515c44ed59dc64696c0d3f681.xml
.xml
clips/1620f6c5d9374d1fa74673e45129ad9.xml
.xml
clips/1677794f7b504189a6f198cb702eb4dc.xml
.xml
clips/167a4567519b4f7789261c5fc86f484.xml
.xml
clips/16b8f05cb5504b738afccbc3dcf2fa14.xml
.xml
clips/16fb6d2667ce4dc48764ae53836ff69a.xml
.xml
clips/17198ffc6af041c08b3746fa2eecaae.xml
.xml
clips/177c3996c9c148e68481338d566c1cc.xml
.xml
clips/17e0938c41b04391ade267bbea27a473.xml
.xml
clips/17e4d5468b14b49bce5372930577a4d.xml
.xml
clips/185db68a59194b0880f2f96bcf64343a.xml
.xml
clips/18cffa041d6748c2a2e8a575f2b172f.xml
.xml
clips/1988da8d59654d6cbc8c1484c3adce4.xml
.xml
clips/1a8f9db3ec204fe3a1d77245914b44.xml
.xml
clips/1ae023f3a40049618931c1c1f8431c4e.xml
.xml
clips/1b695c2799b44569b9c464d36661ab24.xml
.xml
clips/1b80519d148544f8b7f2e9c76c19435d.xml
.xml
clips/1cae6b74c0da4d2fbee16e14cdfb6c9.xml
.xml
clips/1ccba25b348045d4877663b6851bfa6.xml
.xml
clips/1fb7288d2ab44ab8aa279e4df0a2f4d5.xml
.xml
clips/20018485f3604ef7a9b42ea53a8a3be.xml
.xml
clips/20a119f53ced48c99215371775cb195c.xml
.xml
clips/20cab60657ac4a988adf225c135377.xml
.xml
clips/20e0f05f5d5d47a9853cf653b89a070.xml
.xml
clips/20fdecb9e60b433e9424609844d0bedd.xml
.xml
clips/21a46ec391314aa68648c91829c5f1ea.xml
.xml
clips/22964c1c42054a7c8c8c95c5378558a8.xml
.xml
clips/22d54e1073d34d3cbcff52ce2e2647d.xml
.xml
clips/234f713f5cb144c4b9d9897ca312ac69.xml
.xml
clips/237e60c2503c435abc58863a5c66c59d.xml
.xml
clips/23a7d6bad88a4373ac237eea131f9f2.xml
.xml
clips/23d767d1500a4945bec2519a4e98e94e.xml
.xml
clips/241f476cabee4037a8aaaee16032b749.xml
.xml
clips/256ad0dd6b5a4d218c997239725a44af.xml
.xml
clips/258c4d783094bf491d5e6e454b8732c.xml
.xml
clips/262511501e2149589d5fea1ee12759e5.xml
.xml
clips/2a5fdfad709f4522a384e671479c0d0.xml
.xml
clips/2a883a2f8374c63a18c83f959f6f5c.xml
.xml
clips/2d1f9d90ecbe48408cac7d22e652e944.xml
.xml
clips/2dc45308cd5340d68640413a232684eb.xml
.xml
clips/2e679bf84ed040129f095746c6b1a9.xml
.xml
clips/2ebce4fe124448829f67f5afb43ac662.xml
.xml
clips/2edad6eb48d64270b96375c64dfe10aa.xml
.xml
clips/2fbc1432bb59443cb543a3b5e7f63aa.xml
.xml
clips/3004968d750244998c286a727e18a52.xml
.xml
clips/301279627ac14aa5a99d515a9b4bc05b.xml
.xml
clips/31ff14e95e114f7ea527da3c43c52e77.xml
.xml
clips/32b7b324d53d4764b7ec9f3f5baace99.xml
.xml
clips/33a7a2a780f241f1839ad59beded3488.xml
.xml
clips/350052a35afa4c418178fc3ed0198ee2.xml
.xml
clips/350e68a1b9954defb110e64a25ec28.xml
.xml
clips/3606e00dfad848549f8342b34d58e79f.xml
.xml
clips/360f13adc8eb4d5f9655b2251a1b0ee.xml
.xml
clips/362c61b412d44af0bfc325738e6ccf77.xml
.xml
clips/367174eeda408694ffe23d92edc956.xml
.xml
clips/3766ac7dbff04ca29837cc863ab9dca.xml
.xml
clips/37eedc77500f492d9eb2d53c3013623b.xml
.xml
clips/38c17af475bf412fbbb08f6b5e8c29b1.xml
.xml
clips/396361503ce64671a415712ffe2ea15.xml
.xml
clips/39bffd04b4df4318b45ec327b9fb7da9.xml
.xml
clips/3b0c03c393444fc6b66a9b5e3a48b83e.xml
.xml
clips/3c1b7a93aee45e7955edcc5f15798bb.xml
.xml
clips/3c299e971f9a4043a69bc938be16d58b.xml
.xml
clips/3c2c33eb14a45c19f1c4acd5cb7f056.xml
.xml
clips/3c6de32320004434b75ed9741177ef3.xml
.xml
clips/3d66effcda9e4e93ae7c22859392ed87.xml
.xml
clips/3decc639398f47ab819c3232c914c3a.xml
.xml
clips/3f9eb5c55d6641c9964d41bd84839ced.xml
.xml
clips/404cf60abc084d0fa5e35b3c34e5b32.xml
.xml
clips/405f1f3deb1e47a394584492e8f48231.xml
.xml
clips/40635634dc474d9f54da163baa159f.xml
.xml
clips/40d0177d80342ab90b094bdd21d2dc4.xml
.xml
clips/40d933565f2b4d5085c8ccdf69bed69.xml
.xml
clips/40db901d99394335a5ecb0d713314b96.xml
.xml
clips/41f0d2052674e639cb79944aa94e6c5.xml
.xml
clips/4254fe46900c499087b0dca196635448.xml
.xml
clips/4497dff6724072add4fc28a164da4a.xml
.xml
clips/44a45116fe284afc96cb5cc419b64b75.xml
.xml
clips/44b03333b5684a209a3d2e257e3b158e.xml
.xml
clips/44cca498d8394991a463ef8e51d88f8.xml
.xml
clips/45a669d67f4448f598a12cfebd775152.xml
.xml
clips/45ff50ffd28b402aba9ee02b359589ea.xml
.xml
clips/460079cc9de64abba315918bdad7793.xml
.xml
clips/468413776c7147a48078f2501566fe1f.xml
.xml
clips/46f7800c808a47179972f7d3795560a3.xml
.xml
clips/475c42f820474a829ae579513257fe69.xml
.xml
clips/49dad84315ec45b490f84d47f58b99f.xml
.xml
clips/4a52a6a4ea7842b792ebdbed74157591.xml
.xml
clips/4a646673cfe14ab7b4a15d8f3f84cb13.xml
.xml
clips/4a707d8264704437b191fbdb7ed23c9.xml
.xml
clips/4a977740bad94cab81751bfb90dd58c.xml
.xml
clips/4adbc55695546f6a5e424da97a78c9.xml
.xml
clips/4aeb0b364db64257bb261aab8bb1b7a.xml
.xml
clips/4b6a732ec92844e581f0ca6c2b1d73b.xml
.xml
clips/4b83d5ee473d4275908ed3a4e368e90.xml
.xml
clips/4c3c561d179848e7a2abb137dc43c8fc.xml
.xml
clips/4c50fdd1489a4ffea39f619c349baca.xml
.xml
clips/4c70ff819194c6ea9ddec79ed4b321.xml
.xml
clips/4d0d6ca8b7249958f61e91d6a17d74.xml
.xml
clips/4d1c97dc65f24cfe81f8aceeee5268b1.xml
.xml
clips/4dd9fc685cc145cb8044652c4f827ca6.xml
.xml
clips/4e5fe0dc6c024a56a3e1d9c686e06dd9.xml
.xml
clips/4e6f6825e65e48d7bdb0fb35193ed2d5.xml
.xml
clips/4ea60a5ac2924ac5b2d95ecb85e379d.xml
.xml
clips/4f52b2a2cd243b7a0daed324f1ee4a.xml
.xml
clips/4ff1fca22d874d05a02e74e9275ea6c7.xml
.xml
clips/511aaf97a4b64444b249921ec38d6159.xml
.xml
clips/516b1ae94de41138014c1549cc3ac8b.xml
.xml
clips/518736021c1499bb53838d6731160b.xml
.xml
clips/518b4bcb1c1c4cb2bf692fed5b0764c.xml
.xml
clips/51b32fe9d9a491e8732175014f2e2d9.xml
.xml
clips/521eac031ce04626a23fed70709eb1c0.xml
.xml
clips/52871ecad2f94798b09bbf7d74de5f3e.xml
.xml
clips/53425eeb915a44a984ef519358e634cb.xml
.xml
clips/54a092981184e119e6de33a388db3fb.xml
.xml
clips/551c65e2eba9433aad0c11deab09589.xml
.xml
clips/5544b9c8aca74064a47e5ef4657fec.xml
.xml
clips/55ff3c2d309e4baa82beb350daf96487.xml
.xml
clips/56a5ec75a5a14996a7e27b31e14e7ce9.xml
.xml
clips/577fee14c5ea46f09b2615d3e885ccce.xml
.xml
clips/57ec302eaecf49f7974f366acfc3778a.xml
.xml
clips/59021174e51345859321c81466c0988.xml
.xml
clips/5a8ff54247a408a80b0cb66c1bbe443.xml
.xml
clips/5acd33c71b2b4b93b25ce8735092e179.xml
.xml
clips/5ad762d11d6d49328e63d394ab4f13cb.xml
.xml
clips/5b9690c0af2a40abb45d2c8051e05bcd.xml
.xml
clips/5d48189b3b294595ac6aa6e347b8884.xml
.xml
clips/5e56b0efb1234da29d39bc0f592ad9c.xml
.xml
clips/5eab5c9aae946b6a8a19c3b2247255d.xml
.xml
clips/5f68bff8477c411d853e1b465a32661.xml
.xml
clips/5f9506813a3c44ecb2841210fdbb7599.xml
.xml
clips/5fdd84a58a584614ae48f1e858cb575.xml
.xml
clips/613350fd59041aabe52caaf62b933c.xml
.xml
clips/6165addbd66e4b91944c40ec51d03ba4.xml
.xml
clips/61755e7772de45eb91fbf8fd06ff344.xml
.xml
clips/6189a52f6a7d4dc29f64289532c527e3.xml
.xml
clips/61954c5d4c3c487fae7c9260f5db70.xml
.xml
clips/61aae41093fa4621bcd03641ce1675b5.xml
.xml
clips/61b08732f0404bc7b3f8aab2fe1b.xml
.xml
clips/61c695181ae426f82baaaa677821b60.xml
.xml
clips/62b1a06f8f614d888133dac242623be5.xml
.xml
clips/62c3669ffd145d0a2d0872d5d9f7e4e.xml
.xml
clips/62e2bdd92f7e458e8a176e80bcd3d9.xml
.xml
clips/63ade17b61f4472ca1ac64d011cec9bb.xml
.xml
clips/63bc3d23443b424c81245d216bacc3c.xml
.xml
clips/63c2c0adb0f54486bc9d56c8f23a4bf.xml
.xml
clips/642a3563a3f746679718f489e5755976.xml
.xml
clips/6498c51f5af34d8692c9f9cade78fd4.xml
.xml
clips/6499030e2c05483386f76fee8b199fd1.xml
.xml
clips/6533871ed7fd4ec7bc9551b7f7c26261.xml
.xml
clips/65d1b70716e84e9da310d94e81377265.xml
.xml
clips/663e2f67571b48d29db2db1f8282db9.xml
.xml
clips/664229e81dd745789c836affd6ac5ee7.xml
.xml
clips/68aec364b2ad4b97a1965ea0cb7edf28.xml
.xml
clips/695cca07632c4f5889e158a77dfc629.xml
.xml
clips/6969d2ffd9fa430f80c11800f3da8c.xml
.xml
clips/6a4fc72d5194e2fb453e14b1fc1f010.xml
.xml
clips/6a7f05c16035457c924a4934c8ed627.xml
.xml
clips/6a974250bfa44ceb89fc1055c56f7385.xml
.xml
clips/6ad54569a1d6410d8f99e5beb4b7a990.xml
.xml
clips/6b54b34c6fe74506b8b2fbe5a8d7838.xml
.xml
clips/6b806da878f48d49defb071de122a5c.xml
.xml
clips/6baa87a36d3e474bbfde8b594e1bad35.xml
.xml
clips/6bb4db8afb504baabae6f2b4583286f0.xml
.xml
clips/6bcc8c037d4b420295c5951aa916bea1.xml
.xml
clips/6c6493725d8e4b3190ac76ebc794ace9.xml
.xml
clips/6c889422330240ceb78821b294695ab6.xml
.xml
clips/6d1708bb89fd4b15a35562a051ba7f9e.xml
.xml
clips/6e0137c0620747ed84f36aa9b57f99ae.xml
.xml
clips/6ec3d32d4b2f41619bcd9bb3f7871f8c.xml
.xml
clips/719961ab3f3e418791861ee1e3e1eb.xml
.xml
clips/71f01b821c9d4e9c8b4426f37b5b5394.xml
.xml
clips/736c97a3103148b1a9bc2541ca448.xml
.xml
clips/74142bac6914436b3cacf1077a34eb.xml
.xml
clips/7491ce8bb522409dbf8e13f11db9d1.xml
.xml
clips/75ba55cbca645eca19ede57271bb60.xml
.xml
clips/764bacf286a343769ebe2f644734a85c.xml
.xml
clips/772c9f9ba95f4800a762e9e91d837d27.xml
.xml
clips/773be804979a42e9a7836d728552c26.xml
.xml
clips/773dc3816056481a949abd5ef17cfe8f.xml
.xml
clips/7753ad99dac841eab31cbbdaf72b7ad.xml
.xml
clips/778ab2d1b2574a70be6343817628479b.xml
.xml
clips/782774e12e9042168f7779904c14f2e.xml
.xml
clips/796e83776a8d4fa7899440abc1ad15b1.xml
.xml
clips/7971619793ad4dda8c2ff8595dc0518d.xml
.xml
clips/798c7e2331e748308ab0d0fa57f0b266.xml
.xml
clips/79fcf62777914e9eb83401885601b8.xml
.xml
clips/7a0cd2a396504766b4c478b719ab4ae.xml
.xml
clips/7ad002ae38614b7bbe64d36f4c84bbb.xml
.xml
clips/7aecc99014ce4dcea3fd772c9395e2f.xml
.xml
clips/7b85452c87e4c03aa80caa2bce2387a.xml
.xml
clips/7be68520a8546ef83aa2a1491a76e9.xml
.xml
clips/7c7b7e77b08d4d819a77eee7391fcc9.xml
.xml
clips/7c87f251a0ed4fb583f67e6295ef5585.xml
.xml
clips/7ca1f10afd754214bbf99d911ee17b2c.xml
.xml
clips/7ceead3586e4d23bbc77adf406fe7a0.xml
.xml
clips/7f6282cea2444728c8d4d5aa5e144d.xml
.xml
clips/7f74eb9519564cb48c9245251c602ea.xml
.xml
clips/7f96e1504a744350bb17679682db8f77.xml
.xml
clips/7fd5c7ac16743d0b983e4d2b438a54.xml
.xml
clips/810968b5ebc4ff3b34af75fbcb5dd17.xml
.xml
clips/819f14ec49194df0ba147590b21c72df.xml
.xml
clips/81c7959d554549d099f38411f8c1f5.xml
.xml
clips/82e29a0192bb43eebd79a853f8c076f1.xml
.xml
clips/854ecf55b4b540d9864c2551dcd1644.xml
.xml
clips/8595352bec7f4d6e939cdb2f67d84b23.xml
.xml
clips/87ece03c184a48cb95e837523ecd693d.xml
.xml
clips/88b4d396a55846b9ba7a88229bc4e1a5.xml
.xml
clips/88c92b4287d4201a7f90cf4adcb92e.xml
.xml
clips/88f03a4bcd7646a5af556bec91b6c0b8.xml
.xml
clips/88fb4fe64a854d5fa12b6eb3c7fb6e2.xml
.xml
clips/8988fe4ab1bc41ff88839ad6eba8e5a.xml
.xml
clips/89feff944d594db3afa5bb7d9837b324.xml
.xml
clips/8b6e81e7210f4e8782f5212d6a71d954.xml
.xml
clips/8ba72c6fc7ab485485ed5b1643ec42b.xml
.xml
clips/8c9498e51d434e3481268fd3fcb4a88.xml
.xml
clips/8e7524b97d8e47deadefb0d3668aa6fc.xml
.xml
clips/8f81dce347454326ba80a2423352ec6.xml
.xml
clips/8f9f4bf657b24b04a17f42f5b8d84581.xml
.xml
clips/8fef1a877b664b0891ee6fb466074b1.xml
.xml
clips/8ff80d2d1b5f441cbcb995a5791f448c.xml
.xml
clips/905db501d3a440b7a475d1ffdb5b1f41.xml
.xml
clips/90f2d9069fee48e2982e317831715c63.xml
.xml
clips/9175322b99bf44fe89d0217c337d5b4b.xml
.xml
clips/919c24458a8145be87f264c3c9b6c68.xml
.xml
clips/91abe6f6ee4d406c85828ffd581b8e5.xml
.xml
clips/92035007b1574c20881fe59b4e70ce33.xml
.xml
clips/92ea1852ebcc4e3ab7b196682c16fbb.xml
.xml
clips/9361d81d389c4cf1baee2df559ca6cba.xml
.xml
clips/954d93123ff347f6a53fac3f83bfaa8c.xml
.xml
clips/96104d2456ae45e782d88d9ef7ee862.xml
.xml
clips/977e0f2ac876458684b84c59d2c713c2.xml
.xml
clips/97a2d1eb21a144efb7c637cb1ec48d19.xml
.xml
clips/97cad69ae0644a41b62e50d2ad94bb50.xml
.xml
clips/98baa8e4df5b40bc82b1898a27f1abb2.xml
.xml
clips/9a1bf69b69d74192be6fa13c9bbccaa.xml
.xml
clips/9a82672559ea4fc9a7b7bbe7a09e92e6.xml
.xml
clips/9a9f70806a884b649b4788e8badae25a.xml
.xml
clips/9c47d067f8d34fd8b5576711bc5c1c54.xml
.xml
clips/9db79a9479f84979b67bc74385e5eff5.xml
.xml
clips/9ea0e90aa695431d8d345218b57ba365.xml
.xml
clips/9ef0f5ec43e949918140dbe6c1816076.xml
.xml
clips/a00424addab7460ab7bde2e6430b2b9.xml
.xml
clips/a0e6e3603d384cd0aee361726c2524f.xml
.xml
clips/a18db2e99a9b4e8f816cd67df55097cb.xml
.xml
clips/a2ce6590a84c4f3a92c71befe044aab5.xml
.xml
clips/a40ee7bef8d34a23a71cfdbc46bdbc25.xml
.xml
clips/a50fbd0ab6a14c2d834ea1ee5851dde4.xml
.xml
clips/a5b72a29a6b24c168de85825494e7a38.xml
.xml
clips/a8edf57d8817453dad5dfecba964a8f.xml
.xml
clips/a9a304ff8b344dd7b19957aa99586a8.xml
.xml
clips/aa57b24b5f5b4bb7aac29f579019f6a.xml
.xml
clips/aaea474276c14122b0588fb07a879ac7.xml
.xml
clips/aba3d20b5c5a44eda139afc29f160e0.xml
.xml
clips/ac9981c5102a4ff18c9417d9b9c27886.xml
.xml
clips/adb6009b59864d86972fcdfa3ebaf3.xml
.xml
clips/ae5f81b664194d799c36c27c87c62e95.xml
.xml
clips/ae9e1605411942a4b32a8b81df182d.xml
.xml
clips/aef6c1c3d76d480eb9c29c80858258a5.xml
.xml
clips/aeff8af0aca94bff96ccdd862dc3bc61.xml
.xml
clips/b00beb6b649b42828bf81324b4f3484b.xml
.xml
clips/b077257ac2d3462c9d8766ab9db5eb44.xml
.xml
clips/b1e5eaf5590d40f080e117a0f682d9.xml
.xml
clips/b3dbd79e59a94748a56ef1bdb2c3e17d.xml
.xml
clips/b490e9e727de4bbbb3771a81b9565372.xml
.xml
clips/b5482bc1e7884f4392a7bdd26ce1211a.xml
.xml
clips/b5ca61d2c58c4ea5941528f1854d662f.xml
.xml
clips/b5f59675ecf849ca8738db768cd06fb5.xml
.xml
clips/b5ff26a7f4a8431aa43db91fa3b294f.xml
.xml
clips/b7cfab5cea524474bf6c4ce6abb1c98.xml
.xml
clips/b7f0f1dd706741d1a79288bfa44edff3.xml
.xml
clips/b838525dced4022957b1ade8232b8cf.xml
.xml
clips/b8e505b5805b48adb86784dea8d07884.xml
.xml
clips/b94b6d145d4d4f0d997f1a0998bffa8.xml
.xml
clips/b9ce4c6c8bfc4842a6d74d1016e4975f.xml
.xml
clips/ba434309a3034100ab18ac58358a2a94.xml
.xml
clips/bace1308a6e74174bdb259e59a8861a5.xml
.xml
clips/bb5d7c998c6945f1b9c749d3e782c356.xml
.xml
clips/bbb0136a76c24e4a9ce1364d6521c535.xml
.xml
clips/bbe0964eb1454f709c6ace1126e1ff18.xml
.xml
clips/be0e37b0bc6e459ab2fa769a4a4710d8.xml
.xml
clips/be5a98bb2dcd4f3fb4463f1f623c982b.xml
.xml
clips/bec7ac85bed049498472924aef7af76f.xml
.xml
clips/bf58120025aa4d8d88b474aa1018db58.xml
.xml
clips/bff5129df2924bb599b432316c24f8d.xml
.xml
clips/c001783473624247b9e5d691d172b79e.xml
.xml
clips/c009a1d12f374d0d906a49e39bf8c49.xml
.xml
clips/c03cf6a011d94234bfd3d686361edf6c.xml
.xml
clips/c193558779be49868c1da2ffe4681b73.xml
.xml
clips/c1ac50736724c4090cbd637c6bd5f4f.xml
.xml
clips/c292326ff52943768e20b2acf219b36.xml
.xml
clips/c2b96d8c62f94cfbbda6901292e62bcd.xml
.xml
clips/c2cd9a026e764566bb967fd9e36e978f.xml
.xml
clips/c375924c40114188a5f1c679ff39f74.xml
.xml
clips/c3a49018f4ac468fb7c3c6322a3cc6f8.xml
.xml
clips/c40cbcb18644788b2a17e4b06fad26.xml
.xml
clips/c4964b2e1a1e4c409b93ec15fa6b2a2f.xml
.xml
clips/c57fc63d399e477186bca02f7dc51672.xml
.xml
clips/c5a7706b8363431fbc7a6374d2d18e4d.xml
.xml
clips/c68281e1df3b4eb383f6ed29cea8632.xml
.xml
clips/c6f3d3e52ac044e1a6ef27391995f6b.xml
.xml
clips/c9633af6ddd34bb39f3a99e343c8d463.xml
.xml
clips/ca5be39595a84e02bc153d7421803b.xml
.xml
clips/cbdbac23adb04478a449ce9bb19d5cbe.xml
.xml
clips/ccc4315ce9de4839be7aaed7df36616d.xml
.xml
clips/cf6cb65c6f2b4feb8cd982f4e78152.xml
.xml
clips/d0dd1a6264844774b923737791d2a36.xml
.xml
clips/d0fc239050934edbbb547cd07f4018dc.xml
.xml
clips/d277cc61159046c9bb76b9b11a530b0.xml
.xml
clips/d35516457e004ab59ab894f9f79cf4.xml
.xml
clips/d35d4ea168574f8e954b27dcf85d3d8e.xml
.xml
clips/d3b397ac8ab4d8da46ed49dc5d4f3a.xml
.xml
clips/d5c4c44fd1cc44c4b0e9dd494f4c5a2.xml
.xml
clips/d5de7e2f935410e83b532d9827b647.xml
.xml
clips/d63ddfda1dea47e3819644fdfb76f552.xml
.xml
clips/d648a66484a249d08eef7f787ef5a3a3.xml
.xml
clips/d665ce97160b44eca086a1707c64c089.xml
.xml
clips/d70a81dc3cf54746b352ec3f166c9ade.xml
.xml
clips/d8b265987846415dabd7d3933ab48c4b.xml
.xml
clips/d8c65a241d2e49b2b7aaea8633ebaf41.xml
.xml
clips/dae2a16385a34852bb42d7f0463fe5ee.xml
.xml
clips/db18edb1b0d643028349bca8475b6b.xml
.xml
clips/db4a88f7f1f241759f555ad40ea9df1.xml
.xml
clips/db61dbd7d8cd4fa997440ec387f3a99.xml
.xml
clips/dc9db949265c4d308d85d32ee48ba5b.xml
.xml
clips/dcf8696019ea4011933a6bd59058c0f1.xml
.xml
clips/dd78c3e319bc492282a1c37bdafbec86.xml
.xml
clips/ddbad242d5b04bebabae328aaac07ff3.xml
.xml
clips/de0174cfc05940369e4a5edf85c59677.xml
.xml
clips/de68e1c5973343168190868277dff7e1.xml
.xml
clips/e005f542ca064e13be3f69c4b33c1b0.xml
.xml
clips/e044ea1dbd724ae9bc1623e37ef62985.xml
.xml
clips/e0734921ef4149598f97b917f14350ae.xml
.xml
clips/e0b286e212934521af408eb90aab63d.xml
.xml
clips/e133aa6e63c34ebb957ada9819e1b56.xml
.xml
clips/e148087a69c34678bd2971f68d1fc23b.xml
.xml
clips/e160402bb9a34ca8b253d86eaf3f4b6.xml
.xml
clips/e1cd2e7080204012ae2129312d36d61.xml
.xml
clips/e2fa81c9dfa140d294d49cc5964fe988.xml
.xml
clips/e3d1b307612c4ff381ffc2453aeb414.xml
.xml
clips/e3decd8bcf294100a42e5cc27332abac.xml
.xml
clips/e42f7fc382c467b9c1870a0759dd2b7.xml
.xml
clips/e4a62ac6ac9d41819c97fe90dd7b2d91.xml
.xml
clips/e5058dc9e5b4ba0bb4be0eb2739b671.xml
.xml
clips/e54a464573ee4fe9aedf627f23ae230.xml
.xml
clips/e6046ddf7bb94babb03b24168589e45a.xml
.xml
clips/e64ebf5e23df4a8e9f877eece0e6b36.xml
.xml
clips/e683e5bf1620442b83f7347764accff.xml
.xml
clips/e6bd5347104144939785eb662b43134.xml
.xml
clips/e6e11043ceb6448ea8b3aa99a69c2761.xml
.xml
clips/e71acb35463b4fd6be6bbe7d997c1dae.xml
.xml
clips/e72e715d419b4e558fbc507e4674edb.xml
.xml
clips/e72f1cce49e4407294662456a918e6f.xml
.xml
clips/e740764eca044446a683b518d58a1260.xml
.xml
clips/e7f6ef3b98494e7183b1188ad196efeb.xml
.xml
clips/e82703c2a07402d853079e43ea21c8.xml
.xml
clips/e82a7dc029814825b7244570337856db.xml
.xml
clips/e84b849ba43448b69dcf62e141442f0.xml
.xml
clips/e94c58b694214efd8476aaef509f844c.xml
.xml
clips/eabac63ca9e34bc88f9011ffa0cece.xml
.xml
clips/eaf6fa1ead814f21a11a29447d7ade12.xml
.xml
clips/eb243a3a70344c99895cdd8f455c2d1.xml
.xml
clips/ec104c6bc3a0498a982a1ad3a9dbfa43.xml
.xml
clips/ecb5de49cb37490d8eaefcb4f884c.xml
.xml
clips/ee4332e55fea465595326656d7888eea.xml
.xml
clips/eea113898f4848549dd629c36939ce31.xml
.xml
clips/ef350da778d949e39f10224b1879962f.xml
.xml
clips/efa4357a97304f309f7739281bf1b41f.xml
.xml
clips/efb4fc10cc874a5fa2acd7e6d2466.xml
.xml
clips/f05166825495890e0dddbd9dc1af.xml
.xml
clips/f117497323a04bd1ad92fa6dfd26e56c.xml
.xml
clips/f156aed8d0d74398a138c736da8754f.xml
.xml
clips/f1e36d528fe14ab79ceb1ad5c35d5ac1.xml
.xml
clips/f25a59584f43403195cd9955d0e86bbd.xml
.xml
clips/f321858f6e994cc18d8c6322e49e33e2.xml
.xml
clips/f364b6581c85467e8a5ce1106e229e22.xml
.xml
clips/f405f063f6674ca099ddf411ac4a20a0.xml
.xml
clips/f494e9c0c6094fde9b3b80441329eec9.xml
.xml
clips/f67d0f044f342ce89ab3ff312e21e97.xml
.xml
clips/f69c864a1071408baad02854eba214c2.xml
.xml
clips/f7c3fe5a9e841e882493f172c515935.xml
.xml
clips/f8c0601166cb428b8430451a34249df.xml
.xml
clips/f8cd5565978f43d0958c91d7f4a4d42.xml
.xml
clips/f8d4065a2d544adca5904d5ac0f36f8.xml
.xml
clips/f9022c4c3bb0484386c13efb8c86286a.xml
.xml
clips/f95b698831694c06881dc4661a9651c5.xml
.xml
clips/fa37f6e37c2f49ccb89bb9b3b480d42c.xml
.xml
clips/fa7b9e2fafa644c2a57a2acced4c864a.xml
.xml
clips/fb248752773e4838a158e19b61b7cbd4.xml
.xml
clips/fb5666a0519f4012b324f1a54e7ac9e7.xml
.xml
clips/fb5e68e8b574c08891bb6d63b422ec.xml
.xml
clips/fbe60f0dd12a4c348eda2f07bf9c563.xml
.xml
clips/fc0100ccc869487fa41bd04d1ef21f3f.xml
.xml
clips/fc2598f470b94743bf521351bcb37fe0.xml
.xml
clips/fc38adcec0444ca6aa51b87de5f99111.xml
.xml
clips/fcefbcfed19f42e58aecef9f09d540.xml
.xml
clips/fd50d7bba9e4f55914452857f2d8cd.xml
.xml
clips/fe1c20b2ac0f46a3adc94461d99d4399.xml
.xml
clips/fe8d1a922a414e38ab47c88a1815bf.xml
.xml
clips/fecbb07f2f443f9a07ecedbbf776afe.xml
.xml
clips/fee5f9a5cf4c5eb06c4458e6eeca2.xml
.xml
clips/feeb12b5665a46c8835150665a3a81.xml
.xml
clips/fef89de24ac24e97bea4cb1f2e7441cd.xml
.xml
clips/ff6d2451ca9f4cd5bf5b4637f301ef6.xml
.xml
clips/ff7c8f21376646389527b69448fc03e.xml
.xml
clips/ff9cd6de27bf441ca19692de9880c8fc.xml
.xml
clips/ffafab716302411ebe78ff0f4828586.xml
.xml
clips/ffc408944b51404e87ec6bb0194af8c4.xml
.xml
clips/ffe0b593526844ddaf5f7ef462f5e5c.xml
.xml
clips/groups.xml
.xml
clips/state.xml
.xml
fonts/basefont.xml
.xml
fonts/font_12.xml
.xml
fonts/font_16.xml
.xml
fonts/font_20.xml
.xml
fonts/hint_base_font.xml
.xml
game.exe
.exe windows:5 windows x86 arch:x86

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

65:0a:27:a0:4d:ba:a9:df:0c:06:de:bb:a3:98:30:54
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/12/2011, 00:00

Not After

31/12/2014, 23:59

Subject

CN=Alawar Entertainment Inc,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=-,O=Alawar Entertainment Inc,L=Alexandria,ST=Virginia,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

c5:5b:a6:74:23:2e:2d:e2:cd:1b:45:e9:06:7b:8e:c0:ef:ff:0f:6d
Signer

Actual PE Digest

c5:5b:a6:74:23:2e:2d:e2:cd:1b:45:e9:06:7b:8e:c0:ef:ff:0f:6d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 76KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 25KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 3KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.4MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 185KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
game.wrp.exe
.exe windows:4 windows x86 arch:x86

dcf00050bf59a444454f7d22079380d4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

w:\live\games\s10\general\AlabamaSmithEP.pdb

Imports

kernel32

GetCurrentDirectoryW
SetCurrentDirectoryW
SetEnvironmentVariableA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoW
GetExitCodeProcess
CreatePipe
IsValidLocale
GetUserDefaultLCID
GetTimeZoneInformation
SetCurrentDirectoryA
GetCurrentDirectoryA
GetFullPathNameA
IsValidCodePage
GetOEMCP
QueryPerformanceCounter
Sleep
FindClose
FindNextFileW
FindFirstFileW
MultiByteToWideChar
CloseHandle
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
GetFileSize
CreateFileW
SetEvent
SetThreadPriority
CreateThread
CreateEventW
WaitForSingleObject
GetTickCount
SetThreadAffinityMask
GetCurrentThread
SetProcessAffinityMask
GetProcessAffinityMask
GetCurrentProcess
GetLastError
CreateMutexW
WaitForMultipleObjects
GetFileTime
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetVersionExW
LocalFree
ReadFile
GlobalUnlock
GlobalLock
GlobalAlloc
GetModuleHandleW
SetLastError
GetProcAddress
FreeLibrary
LoadLibraryW
WideCharToMultiByte
ResetEvent
GetLocalTime
WriteFile
GetCurrentProcessId
CreateFileA
CreateFileMappingA
CreateEventA
GetPrivateProfileStringW
GetComputerNameW
CreateDirectoryW
CopyFileW
CompareFileTime
FormatMessageW
GetModuleFileNameA
FormatMessageA
LoadLibraryA
GetModuleHandleA
DeleteFileA
GetVersionExA
GetTimeFormatA
GetDateFormatA
GetSystemTime
lstrcmpiA
InterlockedExchangeAdd
InterlockedExchange
InterlockedIncrement
InterlockedDecrement
GetStringTypeW
LCMapStringW
GetCPInfo
CompareStringA
CompareStringW
GetLocaleInfoA
EnumSystemLocalesA
LCMapStringA
GetStringTypeA
GetFileType
GetSystemInfo
SetFilePointer
SetEndOfFile
RaiseException
RtlUnwind
GetFileAttributesW
GetFileAttributesA
HeapAlloc
HeapFree
GetCommandLineA
GetProcessHeap
GetStartupInfoA
ExitProcess
HeapReAlloc
ExitThread
ResumeThread
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileA
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
LockFile
UnlockFile
CreateDirectoryA
FindNextFileA
GetSystemTimeAsFileTime
MoveFileA
CreateProcessA
DuplicateHandle
GetFileInformationByHandle
PeekNamedPipe
SetHandleCount
GetStdHandle
SetStdHandle
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapSize
VirtualFree
VirtualAlloc
HeapDestroy
HeapCreate
GetConsoleCP
GetConsoleMode
FlushFileBuffers
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetACP
RemoveDirectoryA

shell32

SHCreateDirectoryExW
SHGetFolderPathW
SHFileOperationW
ShellExecuteW

ole32

CoCreateGuid

winmm

timeGetTime
timeBeginPeriod
timeEndPeriod

ddraw

DirectDrawCreateEx

ws2_32

WSAWaitForMultipleEvents
WSAEnumNetworkEvents
WSACloseEvent
closesocket
connect
WSAStartup
WSAGetLastError
WSASend
WSAEventSelect
WSACreateEvent
htons
WSACleanup
socket
WSAAsyncGetHostByName
WSARecv
WSACancelAsyncRequest

shlwapi

PathIsRelativeW
PathRemoveFileSpecW
PathFindExtensionW
PathFileExistsW
PathAppendW
PathFindFileNameW

rpcrt4

UuidCreate
UuidToStringA
RpcStringFreeA

user32

MessageBoxW
SetCursor
LoadCursorW
ClipCursor
ClientToScreen
EnumDisplaySettingsExW
PostMessageW
RegisterWindowMessageW
PtInRect
GetClientRect
ScreenToClient
MessageBoxA
DefWindowProcW
EndPaint
BeginPaint
SetForegroundWindow
ShowWindow
GetWindowPlacement
OffsetRect
SetClipboardData
CloseClipboard
EmptyClipboard
OpenClipboard
GetClipboardData
IsClipboardFormatAvailable
UnregisterClassW
DestroyWindow
RegisterClassW
LoadIconW
PeekMessageW
TranslateMessage
DispatchMessageW
SetWindowTextW
CreateWindowExW
GetCursorPos
SetWindowLongW
SystemParametersInfoW
AdjustWindowRect
GetAsyncKeyState
ReleaseCapture
SetCapture
SetCursorPos
SetWindowPos

comdlg32

ChooseColorW

advapi32

RegQueryValueExW
FreeSid
SetEntriesInAclW
RegOpenKeyExW
AllocateAndInitializeSid
SetNamedSecurityInfoW

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 432KB - Virtual size: 429KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 300KB - Virtual size: 33.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

STLPORT_
Size: 4KB - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
game.xml
.xml
general/placeholder.txt
htmlayout.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

HTMLayoutAppendMasterCSS
HTMLayoutAttachEventHandler
HTMLayoutAttachEventHandlerEx
HTMLayoutCallBehaviorMethod
HTMLayoutClassNameA
HTMLayoutClassNameW
HTMLayoutClearAttributes
HTMLayoutClipboardCopy
HTMLayoutCloneElement
HTMLayoutCombineURL
HTMLayoutControlGetType
HTMLayoutControlGetValue
HTMLayoutControlSetValue
HTMLayoutCreateElement
HTMLayoutDataReady
HTMLayoutDataReadyAsync
HTMLayoutDeclareElementType
HTMLayoutDeleteElement
HTMLayoutDetachElement
HTMLayoutDetachEventHandler
HTMLayoutDialog
HTMLayoutElementGetExpando
HTMLayoutElementSetExpando
HTMLayoutEnumElementStyles
HTMLayoutEnumResources
HTMLayoutEnumerate
HTMLayoutFindElement
HTMLayoutGetAttributeByName
HTMLayoutGetAttributeCount
HTMLayoutGetCharacterRect
HTMLayoutGetChildrenCount
HTMLayoutGetElementByUID
HTMLayoutGetElementHtml
HTMLayoutGetElementHwnd
HTMLayoutGetElementIndex
HTMLayoutGetElementInnerText
HTMLayoutGetElementInnerText16
HTMLayoutGetElementLocation
HTMLayoutGetElementState
HTMLayoutGetElementText
HTMLayoutGetElementType
HTMLayoutGetElementUID
HTMLayoutGetFocusElement
HTMLayoutGetGraphin
HTMLayoutGetMinHeight
HTMLayoutGetMinWidth
HTMLayoutGetNthAttribute
HTMLayoutGetNthChild
HTMLayoutGetParentElement
HTMLayoutGetRootElement
HTMLayoutGetScrollInfo
HTMLayoutGetSelectedHTML
HTMLayoutGetStyleAttribute
HTMLayoutHidePopup
HTMLayoutHttpRequest
HTMLayoutInit
HTMLayoutInsertElement
HTMLayoutIsElementEnabled
HTMLayoutIsElementVisible
HTMLayoutLoadFile
HTMLayoutLoadHtml
HTMLayoutLoadHtmlEx
HTMLayoutMoveElement
HTMLayoutParseValue
HTMLayoutPostEvent
HTMLayoutProc
HTMLayoutProcND
HTMLayoutProcW
HTMLayoutProcessUIEvent
HTMLayoutRangeAdvancePos
HTMLayoutRangeCreate
HTMLayoutRangeFromPositions
HTMLayoutRangeFromSelection
HTMLayoutRangeInsertHtml
HTMLayoutRangeIsEmpty
HTMLayoutRangeRelease
HTMLayoutRangeReplace
HTMLayoutRangeToHtml
HTMLayoutRender
HTMLayoutRenderElement
HTMLayoutRequestElementData
HTMLayoutScrollToView
HTMLayoutSelectElements
HTMLayoutSelectElementsW
HTMLayoutSelectParent
HTMLayoutSelectParentW
HTMLayoutSelectionExist
HTMLayoutSendEvent
HTMLayoutSetAttributeByName
HTMLayoutSetCSS
HTMLayoutSetCallback
HTMLayoutSetCapture
HTMLayoutSetDataLoader
HTMLayoutSetElementHtml
HTMLayoutSetElementInnerText
HTMLayoutSetElementInnerText16
HTMLayoutSetElementState
HTMLayoutSetHttpHeaders
HTMLayoutSetMasterCSS
HTMLayoutSetMediaType
HTMLayoutSetMode
HTMLayoutSetOption
HTMLayoutSetScrollPos
HTMLayoutSetStyleAttribute
HTMLayoutSetTimer
HTMLayoutSetTimerEx
HTMLayoutSetupDebugOutput
HTMLayoutShowPopup
HTMLayoutShowPopupAt
HTMLayoutSortElements
HTMLayoutSwapElements
HTMLayoutTraverseUIEvent
HTMLayoutUpdateElement
HTMLayoutUpdateElementEx
HTMLayoutUpdateView
HTMLayoutUpdateWindow
HTMLayoutVisitElements
HTMLayoutWindowAttachEventHandler
HTMLayoutWindowDetachEventHandler
HTMLayout_UnuseElement
HTMLayout_UseElement
HTMLiteAdvanceFocus
HTMLiteCreateInstance
HTMLiteDestroyInstance
HTMLiteFindElement
HTMLiteGetDocumentMinHeight
HTMLiteGetDocumentMinWidth
HTMLiteGetRootElement
HTMLiteGetTag
HTMLiteLoadHtmlFromFile
HTMLiteLoadHtmlFromMemory
HTMLiteMeasure
HTMLiteRender
HTMLiteRenderOnBitmap
HTMLiteSetCallback
HTMLiteSetDataReady
HTMLiteSetDataReadyAsync
HTMLiteSetMediaType
HTMLiteSetTag
HTMLiteTraverseUIEvent
HTMPrintCreateInstance
HTMPrintDestroyInstance
HTMPrintGetDocumentHeight
HTMPrintGetDocumentMinWidth
HTMPrintGetRootElement
HTMPrintGetTag
HTMPrintLoadHtmlFromFile
HTMPrintLoadHtmlFromMemory
HTMPrintMeasure
HTMPrintRender
HTMPrintSetDataReady
HTMPrintSetHyperlinkAreaCallback
HTMPrintSetLoadDataCallback
HTMPrintSetMediaType
HTMPrintSetNextPageCallback
HTMPrintSetTag
ValueBinaryData
ValueBinaryDataSet
ValueClear
ValueCopy
ValueElementsCount
ValueFloatData
ValueFloatDataSet
ValueFromString
ValueGetValueOfKey
ValueInit
ValueInt64Data
ValueInt64DataSet
ValueIntData
ValueIntDataSet
ValueInvoke
ValueNthElementKey
ValueNthElementValue
ValueNthElementValueSet
ValueSetValueToKey
ValueStringData
ValueStringDataSet
ValueToString
ValueType
_ValueEnumElements@12

Sections

UPX0
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 670KB - Virtual size: 672KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 164KB - Virtual size: 163KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 80KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
license.txt
manifest.xml
.xml
music/game01.ogg
partner.ini
registrator.ini
wrapper.dll
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

??0INIFile@@QAE@PBD_N@Z
??0INIFile@@QAE@PB_W_N@Z
??1INIFile@@QAE@XZ
?DllGetRegInfo@@YAXPAD@Z
?DllSetRegKey@@YAPADXZ
?ReadInteger@INIFile@@QAEHPBD0H@Z
?ReadInteger@INIFile@@QAEHPB_W0H@Z
?ReadString@INIFile@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBD00@Z
?SetConnection@@YAXPAX@Z
?StartWrapper@@YAHXZ
?WriteValue@INIFile@@QAEXPB_W00_N@Z
?WriteValue@INIFile@@QAEXPB_W0ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@_N@Z
?WriteValue@INIFile@@QAEXPB_W0H_N@Z
?add_to_mem_store@@YAXPB_WPAXI@Z
?add_to_mem_store@PluginAPI@@YAXPB_WPAXI@Z
?banner_clicked@@YA_NXZ
?banner_clicked@PluginAPI@@YA_NXZ
?debugLog@@YAXPBD@Z
?get@INIFile@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBD0@Z
?get@INIFile@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PB_W0@Z
?getACP@INIFile@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PB_W0@Z
?getAsUTF8@INIFile@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PB_W0@Z
?get_cache_path@PluginAPI@@YAPB_WXZ
?get_game_id@PluginAPI@@YAHXZ
?get_initial_page@@YAHXZ
?get_initial_page@PluginAPI@@YAHXZ
?get_locale@PluginAPI@@YAPBDXZ
?get_partner_id@PluginAPI@@YAHXZ
?get_protocol_version@PluginAPI@@YAPBDXZ
?get_stats_url@PluginAPI@@YAPBDXZ
?get_user_id@PluginAPI@@YAHXZ
?get_user_id_token@PluginAPI@@YAPBD_N@Z
?handle_hyperlink@@YAXPB_W@Z
?handle_hyperlink@PluginAPI@@YAXPB_W@Z
?is_game_to_start@@YA_NXZ
?is_game_to_start@PluginAPI@@YA_NXZ
?set@INIFile@@QAE_NPBD00_N@Z
?set@INIFile@@QAE_NPB_W00_N@Z
?write@INIFile@@QAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?write_to_log@PluginAPI@@YAXPB_W@Z
DllGetAxml

Sections

Size: 364KB - Virtual size: 976KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 85KB - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 5KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 30KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 164KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b729b61eb1515fcf7b3e511e4e66258b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

Sections

.text Size: 25KB - Virtual size: 24KB

.rdata Size: 6KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 409KB

.ndata Size: - Virtual size: 1.9MB

.rsrc Size: 289KB - Virtual size: 289KB

039bcbc605477e8e87ec550c2e60e748

Headers

File Characteristics

Imports

kernel32

user32

ole32

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 7KB

.rdata Size: 1024B - Virtual size: 963B

.data Size: 512B - Virtual size: 64B

.reloc Size: 1024B - Virtual size: 588B

9ea5bdc8c90dfcffe309465c26c89758

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

comdlg32

ole32

Exports

Exports

Sections

.text Size: 4KB - Virtual size: 4KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: - Virtual size: 48B

.rsrc Size: 512B - Virtual size: 152B

.reloc Size: 1024B - Virtual size: 590B

Headers

File Characteristics

Exports

Exports

Sections

Size: 86KB - Virtual size: 244KB

.rsrc Size: 568B - Virtual size: 4KB

Size: - Virtual size: 4KB

Size: 4KB - Virtual size: 3KB

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

65:0a:27:a0:4d:ba:a9:df:0c:06:de:bb:a3:98:30:54Certificate

Extended Key Usages

Key Usages

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7Certificate

Extended Key Usages

Key Usages

c5:5b:a6:74:23:2e:2d:e2:cd:1b:45:e9:06:7b:8e:c0:ef:ff:0f:6dSigner

.text
Size: 25KB - Virtual size: 24KB

.rdata
Size: 6KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 409KB

.ndata
Size: - Virtual size: 1.9MB

.rsrc
Size: 289KB - Virtual size: 289KB

.text
Size: 7KB - Virtual size: 7KB

.rdata
Size: 1024B - Virtual size: 963B

.data
Size: 512B - Virtual size: 64B

.reloc
Size: 1024B - Virtual size: 588B

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: - Virtual size: 48B

.rsrc
Size: 512B - Virtual size: 152B

.reloc
Size: 1024B - Virtual size: 590B

.rsrc
Size: 568B - Virtual size: 4KB

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

65:0a:27:a0:4d:ba:a9:df:0c:06:de:bb:a3:98:30:54
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

c5:5b:a6:74:23:2e:2d:e2:cd:1b:45:e9:06:7b:8e:c0:ef:ff:0f:6d
Signer

.rsrc
Size: 1.4MB - Virtual size: 2.9MB

.data
Size: 185KB - Virtual size: 188KB

.adata
Size: - Virtual size: 4KB

.text
Size: 2.5MB - Virtual size: 2.5MB

.rdata
Size: 432KB - Virtual size: 429KB

.data
Size: 300KB - Virtual size: 33.6MB

STLPORT_
Size: 4KB - Virtual size: 32B

.rsrc
Size: 40KB - Virtual size: 37KB

UPX0
Size: - Virtual size: 1.1MB

UPX1
Size: 670KB - Virtual size: 672KB

.rsrc
Size: 10KB - Virtual size: 12KB

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 164KB - Virtual size: 163KB

.data
Size: 88KB - Virtual size: 95KB

.rsrc
Size: 48KB - Virtual size: 44KB

.reloc
Size: 80KB - Virtual size: 76KB

.rsrc
Size: 512B - Virtual size: 4KB

.data
Size: 164KB - Virtual size: 164KB

.adata
Size: - Virtual size: 4KB