ezWwTYmb9tEG.zip
- SHA256 6311747767115ab3ab6fee4fcd7d679d8d4902df00a49697ac089154de003cce
Password
dmVhO
Overview
overview
10Static
static
9ezWwTYmb9tEG.zip
windows11-21h2-x64
ReadMe.txt
windows11-21h2-x64
3So1ara.rar
windows11-21h2-x64
3Solara/Sol...er.exe
windows11-21h2-x64
10$TEMP/Bolt
windows11-21h2-x64
1$TEMP/Consistent
windows11-21h2-x64
1$TEMP/Dr
windows11-21h2-x64
1$TEMP/Fleet
windows11-21h2-x64
1$TEMP/Inexpensive
windows11-21h2-x64
1$TEMP/Park
windows11-21h2-x64
1$TEMP/Telescope
windows11-21h2-x64
1$TEMP/Viruses
windows11-21h2-x64
1$TEMP/Wellington
windows11-21h2-x64
1SaturnSexo/Animal
windows11-21h2-x64
1SaturnSexo/Graphic
windows11-21h2-x64
1SaturnSexo/Proven
windows11-21h2-x64
1SaturnSexo...ations
windows11-21h2-x64
1Solara/Sol...st.lua
windows11-21h2-x64
3Solara/Sol...t2.lua
windows11-21h2-x64
3Solara/Sol...pi.dll
windows11-21h2-x64
3Solara/Sol...le.txt
windows11-21h2-x64
3Solara/Sol...et.txt
windows11-21h2-x64
3Solara/Sol...le.txt
windows11-21h2-x64
3Solara/Sol..._1.txt
windows11-21h2-x64
3Solara/Sol..._2.txt
windows11-21h2-x64
3Solara/Sol...le.txt
windows11-21h2-x64
3Solara/Sol...le.txt
windows11-21h2-x64
3Solara/Sol...tefile
windows11-21h2-x64
1Solara/Sol...le.txt
windows11-21h2-x64
3Solara/Sol...LL.txt
windows11-21h2-x64
3Solara/Sol..._FE.iy
windows11-21h2-x64
3Solara/Sol...s.json
windows11-21h2-x64
3Behavioral task
behavioral1
Sample
ezWwTYmb9tEG.zip
Resource
win11-20240802-en
windows11-21h2-x64
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
ReadMe.txt
Resource
win11-20240802-en
windows11-21h2-x64
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
So1ara.rar
Resource
win11-20240802-en
windows11-21h2-x64
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
Solara/Solar/SolaraBootstrapper.exe
Resource
win11-20240802-en
windows11-21h2-x64
15 signatures
150 seconds
Behavioral task
behavioral5
Sample
$TEMP/Bolt
Resource
win11-20240802-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
$TEMP/Consistent
Resource
win11-20240802-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
$TEMP/Dr
Resource
win11-20240802-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
$TEMP/Fleet
Resource
win11-20240802-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
$TEMP/Inexpensive
Resource
win11-20240802-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
$TEMP/Park
Resource
win11-20240802-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
$TEMP/Telescope
Resource
win11-20240802-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
$TEMP/Viruses
Resource
win11-20240802-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral13
Sample
$TEMP/Wellington
Resource
win11-20240802-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral14
Sample
SaturnSexo/Animal
Resource
win11-20240802-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral15
Sample
SaturnSexo/Graphic
Resource
win11-20240802-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral16
Sample
SaturnSexo/Proven
Resource
win11-20240802-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral17
Sample
SaturnSexo/Representations
Resource
win11-20240802-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral18
Sample
Solara/Solar/autoexec/test.lua
Resource
win11-20240802-en
windows11-21h2-x64
3 signatures
150 seconds
Behavioral task
behavioral19
Sample
Solara/Solar/autoexec/test2.lua
Resource
win11-20240802-en
windows11-21h2-x64
3 signatures
150 seconds
Behavioral task
behavioral20
Sample
Solara/Solar/bin/api.dll
Resource
win11-20240802-en
windows11-21h2-x64
5 signatures
150 seconds
Behavioral task
behavioral21
Sample
Solara/Solar/workspace/.tests/appendfile.txt
Resource
win11-20240802-en
windows11-21h2-x64
3 signatures
150 seconds
Behavioral task
behavioral22
Sample
Solara/Solar/workspace/.tests/getcustomasset.txt
Resource
win11-20240802-en
windows11-21h2-x64
3 signatures
150 seconds
Behavioral task
behavioral23
Sample
Solara/Solar/workspace/.tests/isfile.txt
Resource
win11-20240802-en
windows11-21h2-x64
3 signatures
150 seconds
Behavioral task
behavioral24
Sample
Solara/Solar/workspace/.tests/listfiles/test_1.txt
Resource
win11-20240802-en
windows11-21h2-x64
3 signatures
150 seconds
Behavioral task
behavioral25
Sample
Solara/Solar/workspace/.tests/listfiles/test_2.txt
Resource
win11-20240802-en
windows11-21h2-x64
3 signatures
150 seconds
Behavioral task
behavioral26
Sample
Solara/Solar/workspace/.tests/loadfile.txt
Resource
win11-20240802-en
windows11-21h2-x64
3 signatures
150 seconds
Behavioral task
behavioral27
Sample
Solara/Solar/workspace/.tests/readfile.txt
Resource
win11-20240802-en
windows11-21h2-x64
3 signatures
150 seconds
Behavioral task
behavioral28
Sample
Solara/Solar/workspace/.tests/writefile
Resource
win11-20240802-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral29
Sample
Solara/Solar/workspace/.tests/writefile.txt
Resource
win11-20240802-en
windows11-21h2-x64
3 signatures
150 seconds
Behavioral task
behavioral30
Sample
Solara/Solar/workspace/EzHubLL.txt
Resource
win11-20240802-en
windows11-21h2-x64
4 signatures
150 seconds
Behavioral task
behavioral31
Sample
Solara/Solar/workspace/IY_FE.iy
Resource
win11-20240802-en
windows11-21h2-x64
3 signatures
150 seconds
Behavioral task
behavioral32
Sample
Solara/Solar/workspace/Sky Hub/Sky Hub Settings.json
Resource
win11-20240802-en
windows11-21h2-x64
3 signatures
150 seconds
General
- Target ezWwTYmb9tEG.zip
- Size 8.8MB
- Sample240808-e7nldszbpm
- SHA256 6311747767115ab3ab6fee4fcd7d679d8d4902df00a49697ac089154de003cce
- MD5 a07a0491c7a6dc150e66f854d2873a9e
- SHA1 e13ac68db20f21c9961ba65c71bf2351bbf74cf8
- SHA512 2da36a033fa00bb9c716bdf973d5471cb47ce4ee9d715f154d573139574a2384edee9e7e62b08c5a820110f278ffd073ed3d84b6f3d8dc0fa2a69feadbfd340b
- SSDEEP 196608:jDPbPY6IV7lmSiP7+wXHggRmKhaUIfm4W/Xk+Ga:jvqZTiPfXHgMif3+Ga
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
File Explorer
-
ezWwTYmb9tEG.zip.zip 8.8MB
-
ReadMe.txt16B
-
So1ara.rar.rar 8.8MB
-
Solara/Solar/SolaraBootstrapper.exe.exe 149.8MB
-
$TEMP/Bolt70KB
-
$TEMP/Consistent76KB
-
$TEMP/Dr54KB
-
$TEMP/Fleet60KB
-
$TEMP/Inexpensive97KB
-
$TEMP/Park55KB
-
$TEMP/Telescope89KB
-
$TEMP/Viruses872KB
-
$TEMP/Wellington75KB
-
SaturnSexo/Animal692B
-
SaturnSexo/Graphic71KB
-
SaturnSexo/Proven38KB
-
SaturnSexo/Representations29KB
-
Solara/Solar/autoexec/test.lua34B
-
Solara/Solar/autoexec/test2.lua11B
-
Solara/Solar/bin/api.dll 18.7MB
-
Solara/Solar/workspace/.tests/appendfile.txt7B
-
Solara/Solar/workspace/.tests/getcustomasset.txt7B
-
Solara/Solar/workspace/.tests/isfile.txt7B
-
Solara/Solar/workspace/.tests/listfiles/test_1.txt7B
-
Solara/Solar/workspace/.tests/listfiles/test_2.txt7B
-
Solara/Solar/workspace/.tests/loadfile.txt1B
-
Solara/Solar/workspace/.tests/readfile.txt7B
-
Solara/Solar/workspace/.tests/writefile7B
-
Solara/Solar/workspace/.tests/writefile.txt7B
-
Solara/Solar/workspace/EzHubLL.txt2B
-
Solara/Solar/workspace/IY_FE.iy539B
-
Solara/Solar/workspace/Sky Hub/Sky Hub Settings.json52B
ReadMe.txt
- SHA256 39a69ed81c22a387c09466138716125995f9e7b1ce234b5931f45845fcfde59e
- MD5 010750e7a1af8ad9e3b438a254d38e1f
- SHA1 68633b1a8d128ccf001cca7924522beb18c5ee55
- SHA512 f36c9fdada7547903e318149485fc143bcc740c8201333ce65ac4c1fbad000b4da65e2efa9bc3d1ec319b911204c40a8dd4efcfbc5ab156d4901a8d5fc6d1a89
- MD5 SHA1 SHA512
So1ara.rar
- SHA256 477a1fd64afd2e10cc1b58f1165eca89d11857e662573fc43e7ff82d003f3354
- MD5 8dbbcf02455e12221dea914a62f4469d
- SHA1 0cb3692ef4316a24b0e40a145fb1a8e9572c57cc
- SHA512 a68c9dc782f4fedf56b58de560168156cbd405079da732a63cc5531bd3516adf0fc9bf70ba5e2a093895d74dcc79e3b6a38f69324548f2a08de6fb1137404e63
- SSDEEP 196608:iDPbPY6IV7lmSiP7+wXHggRmKhaUIfm4W/Xk+GA:ivqZTiPfXHgMif3+GA
- MD5 SHA1 SHA512 SSDEEP
Password
dmVhO
Solara/Solar/SolaraBootstrapper.exe
- IMPHASH be41bf7b8cc010b614bd36bbca606973
- SHA256 e7a36dd328ba20e8695a1d07a25a71edb41f649ee118d9f1c27139fd59fcb35c
- MD5 514a5006c26dffcd6d6a7ec4ca897ed6
- SHA1 12514a2dadfef13a209697d2af2cda955e1d9468
- SHA512 21ffb034e8cf1913c62ec647f4872aa51e93db0ec45ad03ac559577c7265ee2a0a54e569ab87ebfc4f23b538a2b65df50c98ee75a7a773afce6c82591c778ab7
- SSDEEP 1572864:RTBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBn:
- MD5 SHA1 SHA512 SSDEEP
Password
dmVhO
PE Signature issue
Digest
bb:87:a3:25:46:75:01:dc:13:9c:d7:e8:20:93:ea:69:b1:2f:8b:d8:fd:2f:7f:9e:c9:c4:d2:db:93:4f:bc:59
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=Gen Digital Inc.,O=Gen Digital Inc.,L=Tempe,ST=Arizona,C=US
Chains
Jul 16, 2024
CN=Gen Digital Inc.,O=Gen Digital Inc.,L=Tempe,ST=Arizona,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Gen Digital Inc.,O=Gen Digital Inc.,L=Tempe,ST=Arizona,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
CN=Gen Digital Inc.,O=Gen Digital Inc.,L=Tempe,ST=Arizona,C=US
Serial Number
07:a6:1e:cf:a7:4c:c7:b2:ce:b4:20:35:c7:72:be:1d
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 22, 2024 - May 21, 2027
Subject
CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US
Serial Number
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jul 14, 2023 - Oct 13, 2034
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
5
Entry point
14511
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
SetFileTime
CompareFileTime
SearchPathW
GetShortPathNameW
GetFullPathNameW
MoveFileW
SetCurrentDirectoryW
GetFileAttributesW
GetLastError
CreateDirectoryW
SetFileAttributesW
Sleep
GetTickCount
GetFileSize
GetModuleFileNameW
GetCurrentProcess
CopyFileW
ExitProcess
GetWindowsDirectoryW
GetTempPathW
GetCommandLineW
SetErrorMode
lstrcpynA
CloseHandle
lstrcpynW
GetDiskFreeSpaceW
GlobalUnlock
GlobalLock
CreateThread
LoadLibraryW
CreateProcessW
lstrcmpiA
CreateFileW
GetTempFileNameW
lstrcatW
GetProcAddress
LoadLibraryA
GetModuleHandleA
OpenProcess
lstrcpyW
GetVersionExW
GetSystemDirectoryW
GetVersion
lstrcpyA
RemoveDirectoryW
lstrcmpA
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GlobalFree
GetModuleHandleW
LoadLibraryExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
WideCharToMultiByte
lstrlenA
MulDiv
WriteFile
ReadFile
MultiByteToWideChar
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW
lstrlenW
user32
GetAsyncKeyState
IsDlgButtonChecked
ScreenToClient
GetMessagePos
CallWindowProcW
IsWindowVisible
LoadBitmapW
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
TrackPopupMenu
GetWindowRect
AppendMenuW
CreatePopupMenu
GetSystemMetrics
EndDialog
EnableMenuItem
GetSystemMenu
SetClassLongW
IsWindowEnabled
SetWindowPos
DialogBoxParamW
CheckDlgButton
CreateWindowExW
SystemParametersInfoW
RegisterClassW
SetDlgItemTextW
GetDlgItemTextW
MessageBoxIndirectW
CharNextA
CharUpperW
CharPrevW
wvsprintfW
DispatchMessageW
PeekMessageW
wsprintfA
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
LoadCursorW
SetCursor
GetWindowLongW
GetSysColor
CharNextW
GetClassInfoW
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
EndPaint
FindWindowExW
gdi32
SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectW
SetBkMode
SetTextColor
SelectObject
shell32
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetFileInfoW
ShellExecuteW
SHFileOperationW
SHGetSpecialFolderLocation
advapi32
RegEnumKeyW
RegOpenKeyExW
RegCloseKey
RegDeleteKeyW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegEnumValueW
comctl32
ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create
ole32
CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
Name
.text
Size
29KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
458KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.ndata
Size
Virtual Size
516KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
17KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=3, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=17, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=172, id=1, productName=Unmarked objects,
count=12, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
$TEMP/Bolt
- SHA256 60049115790147848413a5b6b5046d2dc7ae038b319bed53749cdbc1fdc23cfc
- MD5 7ff18f550ee982d1c609f0ac54c59b1c
- SHA1 115af2ad5292ca76b85ff4e02263bc7829a64b43
- SHA512 3c00755e5fa75475fec62d19a3cd58ea36294eed6c5cd682ba794819c1cae6eeb3f96aa7e63a382564bb2231af0293afe00064874dca57c3f5423f06dc106234
- SSDEEP 1536:Y9n+JW9nWkOEeO9NAUlRzNASe8o+vJairZAzm0IthG5xv:Y9+s9dOxGNAUzmI5yz9Ithkxv
- MD5 SHA1 SHA512 SSDEEP
$TEMP/Consistent
- SHA256 c02e044b9da1e4edecc37c83c06abe69d6d1178a669fca3f4c78b514b0345f70
- MD5 66bbd8d50edfa12e57b0af52bc7f456b
- SHA1 6c414e8ba8ef8e179eb96a894a75e10c2a943015
- SHA512 b4b0c91ec423355481b35ad411f4501b13fc604ed11d7d77960c72de2a7799530053a146b45ef910f7db92e3477831044983cb58990ce0f40dceac53ede39ac2
- SSDEEP 1536:B6GW/MUkMOfirfgXNOUWzs92ANcJXGikpRrG+ZmGtJY9Qd8f9tN2qRa0K:6MKO4f8NOUnNsrkpgomYitQAlK
- MD5 SHA1 SHA512 SSDEEP
$TEMP/Dr
- SHA256 15e62fb9ba7fcc3100f3232e9d9122d16c41b82be1b5b659662371bc30ee4190
- MD5 b2ed5751e918601dda9729e8a41f61de
- SHA1 b39da18af098fcaae3b4eae5a288054d2d926fe8
- SHA512 698091e2db997a132d093d25e323cf8d0c817827cb46767e9559944aff1e4cc09600734e03eb407d93a257708c440f6d07c09215194473100a68ee9f89de9a74
- SSDEEP 768:BdrDjppU0slmRaY8TpvPix7Ln5kLAyOD67MQtRZjBH+Dx65LRvr7aAVio5e7w5ak:BhhirK7VkpC6Zfu9C/yo5e7Vq6UvF
- MD5 SHA1 SHA512 SSDEEP
$TEMP/Fleet
- SHA256 2553e041e8540db4da38df68258e72b7c9d1bd01d3ba8df82fdf94bdea6f1e57
- MD5 ac1f3b21cd1c110fc58d986e4f6f8d8b
- SHA1 e6e524b79cf4301876e6b6f4a0b4339dad666ac2
- SHA512 ef48d88d836f69f372466bfcd9c20ec68dcef4f3a840c0e7fbe0e40af935b652f37da415725b2a295ff96f72f73ffbe2b1961f1ceeeb7971041a021203435071
- SSDEEP 1536:KES6IDp3aoMm8llSdiG0g60Fmb4ZMFSisodc0+UTUJ:FSz93almAlSUGb60FGSibc09UJ
- MD5 SHA1 SHA512 SSDEEP
$TEMP/Inexpensive
- SHA256 202875f02bd7d4cedf6457ec61db4bf9c32a8ced3cbec4636af8e95163a6b0cc
- MD5 a0ea14cdf9d5f5f999fa22e5f14ca09b
- SHA1 9b67c5ea6680fb93cbda3fbe332c54a4272e52ee
- SHA512 2bd7c9a06ef23f58849c1e2411fce49052c1f59e28af41ad127bc9134430699a73841b8b80f4024d49cea28a17de813790e9c642642651aea680d2f824fdd633
- SSDEEP 1536:Vgdsey7jzySKEwXL6ibtRmto+9G2VxBnGq0mtdQQNXM9B4a9t7A7jWJxXvaF4w:WqjOXL6iPQl7R0m/qGCFGjmEF4w
- MD5 SHA1 SHA512 SSDEEP
$TEMP/Park
- SHA256 09bfb2fc7ea7858f6041a2397f8163bdbdbdc38a8e985467cbff5f845cfb9cfc
- MD5 9a2f7a1099d5c6b8023442986b7d3f63
- SHA1 553623dd6c4f4afcf6e4a201c708d6bd23463600
- SHA512 c5b904906219c920046bdff253c0ec0287dbbcb120915d9d169b312cbcace6bdc1962e4e29dc9242e16e6c59669fac73b02ef63b301d50e5ab44d92ca457c56f
- SSDEEP 768:UkFKfAOQiLjfLwucbvDjJVse4ybnQ2BOUiZkqem4uv/v7dTwx6rEqmRbGMnxWGkD:UxbQivfLwxnp4wIZkqh/RAwE3RyMTkD
- MD5 SHA1 SHA512 SSDEEP
$TEMP/Telescope
- SHA256 4d377450f006468929f4a2c5d9a174816ca42454d2b26f44dc319a80e85a37d3
- MD5 456f4d56c8f909ffcf0ff0a91d8fc1c0
- SHA1 2f68d54fb1d7f0c61a6f57ea13fe59ee8870e576
- SHA512 c91fcedfce69080f43e124cc94bcd503b41faeb340ef66cf238bd49d2e145907da4e3f419156e472952135957cd760c924bb0d0f9d995aab55ec387015c11710
- SSDEEP 1536:+Yn7D9H+g5pEjFdPTJm9yks+B7FeNuPKA/+jZl0zCCRF22Rw8O5KCxL6RGgvRPY:dx+62I9KNux/CZl0z522RwbJx2wyNY
- MD5 SHA1 SHA512 SSDEEP
$TEMP/Viruses
- SHA256 0019a1fe0412a33f7d8bc05dd100794ec3bea0680d2b27d330f8ffb2805bbadb
- MD5 8ed2e8863c6355ae9a64c291b8af7bec
- SHA1 aafc6cb30c6f5f0f0f10c8e9f10107b3614c7d1a
- SHA512 1c14dfed9d37e6dd38d5ac3c1e0ca0dba959cfb753681808e1bc98d2c98840ad50dade87e2ae84c0ad1f6aadc417dee3ef11dfa37b864d8588dec1483b297fca
- SSDEEP 12288:xpVWeOV7GtINsegA/hMyyzlcqikvAfcN9b2MyZa31twoPTdFxgawV2M01:xT3E53Myyzl0hMf1tr7Caw8M01
- MD5 SHA1 SHA512 SSDEEP
$TEMP/Wellington
- SHA256 ed3554d9146977b097a160d1ead6970b958846aab4c2eb693b6a2a47ee1f3796
- MD5 b93b6fe702a14c19fb76ec5decde645c
- SHA1 3e661059f7c9dbddcc7d8b787e11b12e44c78492
- SHA512 440d8d93db6e8c5e461ad5ebe423a511d911efb135cca33b61cb1729ba4cb07d22c7d609227097c20bc32040d7f69cde716a1fcd8149973de39711678102587b
- SSDEEP 1536:Hzy8aFp10/imDnUiz/gah4JsL4v3SGBCzCxofywZx16TAs+s39jc2oG:TXLlz/gcIFKGgCOdpE3Fc27
- MD5 SHA1 SHA512 SSDEEP
SaturnSexo/Animal
- SHA256 2e439a7e4674589c3e4da070ef4dfe392abf65dac006911ba3aeb54673580abd
- MD5 31c1e59569e694098305c7b2d5c8401e
- SHA1 762ce052bc83f6f917cb5afe5d354bb279d2b3f8
- SHA512 1604e8b8fe8ada65bcd468d1b6017e70834db5b3dc36ae4d052079a049c58085a072e11115ac66463cb4e6b0f3c87bdccb8b78f460eb6e7d39c7787c1da7e7e7
- MD5 SHA1 SHA512
SaturnSexo/Graphic
- SHA256 9a0dbaad05c54a38059217ea7e14952d669d45dac6ccf6baa37be09c70bb728e
- MD5 9f5e004cc57210c7d4812afd5b37b738
- SHA1 8ae7a822e30aebcc0e7dbff3abdbcc68d83bc883
- SHA512 a36224c168d8b87ea3c5b4e3dde613fe51ab831215388f1221ef0c4392af003bab4bf2ab250381b2f211bad6eb4432ac694bad9e23585cf5e767d130f44bf73e
- SSDEEP 1536:Mh4C4j5G7SjLvdk5ILHezz8dCmsbc1AfnHolGwHxiz:MyVNjzgIrezz8xAfUGwHxiz
- MD5 SHA1 SHA512 SSDEEP
SaturnSexo/Proven
- SHA256 8cedffe95d1aa7a6921ecdb2fa837285bc4c692f07df8a00c37083c8c8fc0bba
- MD5 4e3f4efa93dbdf98812171adf2c2152c
- SHA1 7d661a6c55a1bfc202946297a1e2e79895d65498
- SHA512 2d47e96f82348a6f779ddc59783c08f5e0f11c2d318d5da52bb4f11b694399ec6e5276f09d6bbce8973bfb230e7b042c57957f89b6b448e9a2a6d5cd9d0bb1e6
- SSDEEP 768:C+/jO56wA+R/B0XR0ZXbU2hqn7TT/yBYh6PTWHhYkraTEMfe0ULsIhA:BOof7h6X9KIYh6iHOk+wk1ULsIhA
- MD5 SHA1 SHA512 SSDEEP
SaturnSexo/Representations
- SHA256 20ea6fa491b528191f772e4814a7ebc3a665b526b6149f187d9b71cb9ef72b00
- MD5 df007300e1a7a92b49244a15ad6bd975
- SHA1 8493cca1b5f6fe9e85b9daef895e563d30068bb6
- SHA512 298e5d02469a362cf47957918a3bd1a2e9c9e016cf2a47df584d54b8a4e53ec2e4f87254237fc552531444d595a059b5637d87d83f8a79202e4fc321fb9b1943
- SSDEEP 768:LX/TokTWi1k9/FuD+ylqTUgtyu1ehk2NRu2N6QcN3LAZ5A22I:rZb1W/IDHit51etMQoLWXZ
- MD5 SHA1 SHA512 SSDEEP
Solara/Solar/autoexec/test.lua
- SHA256 601c187ff3410f7c71258bd29c0e48a9f40a046a745093f71e7172decf0f0eae
- MD5 f051c998ef025a1ccd4f6f7abe16e55e
- SHA1 2e75e1237531ae3c0647c0fad7cf6ae1687d0e99
- SHA512 748cb431b3a2208c07187c80a3c5b5174b2c536fb056e7b48646875cbd4392225da4aaaaf376f16ca79ab854245e7638cf02103f0913abff55e005da482d498a
- MD5 SHA1 SHA512
Solara/Solar/autoexec/test2.lua
- SHA256 c2d0a5e0790d97a015387a995c0d0b5eb3e88138466586fc980787c9b1731eb8
- MD5 701bf4a4743e5e0361e26999881a5ce9
- SHA1 f34d33bcb5c13eae1c15faddc6054e479f74aa28
- SHA512 8c0eedc5dca108eb9682239164cba3c70ba4c12e4520a9bdfa8efce0416ce51534fcea2ef4dcd7ea2dfc684358a064233165b0bda5287892de2014a1f2b21c6f
- MD5 SHA1 SHA512
Solara/Solar/bin/api
- IMPHASH a9fd3e7f71a802c8eee0a502f46de991
- SHA256 01481b9a862936fbc090bda4033f22d7ffa5a7bfe5dc32f47c7794332b34eec4
- MD5 88fd7dbf04bcf75123d02009aea3f7f7
- SHA1 cecf16bdad71e54afc941179ea2b7438a04efa1d
- SHA512 2c6298b5adf91b51f0042d48e0846f5b196d52a588fd4fc577bf19ec26ad8e547382279a15f8bf131b08b0d7c140534aff25f82d5e8998818b812e72c9493917
- SSDEEP 393216:hqA/D2IIyzg8DolBo6i0KoI6Di42sC1/syU3DXNs6hq8:hqcaZyV0fC1JOpjhq8
- MD5 SHA1 SHA512 SSDEEP
Password
dmVhO
Digest
58:87:9f:24:25:99:c5:8a:6a:3d:a1:73:d2:9f:04:d8:cb:0a:4b:54
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=2748129,CN=Adobe Systems Incorporated,OU=Flash Player,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Aug 30, 2016
SERIALNUMBER=2748129,CN=Adobe Systems Incorporated,OU=Flash Player,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Symantec Class 3 Extended Validation Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Symantec Class 3 Extended Validation Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
19:1a:32:cb:75:9c:97:b8:cf:ac:11:8d:d5:12:7f:49
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2014 - Mar 3, 2024
Subject
SERIALNUMBER=2748129,CN=Adobe Systems Incorporated,OU=Flash Player,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
4e:a1:e8:9e:15:ea:4f:fa:93:79:84:d8:8f:54:5f:ba
Issuer
CN=Symantec Class 3 Extended Validation Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 14, 2015 - May 7, 2017
Minor OS version
0
Major OS version
5
Entry point
9676785
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Flash.pdb
version
VerQueryValueW
GetFileVersionInfoW
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
GetFileVersionInfoSizeW
winmm
mixerGetID
waveInGetDevCapsA
waveOutGetDevCapsA
waveOutMessage
waveOutGetDevCapsW
waveInGetDevCapsW
waveOutGetNumDevs
waveInGetNumDevs
waveInStart
waveInAddBuffer
waveInStop
waveInMessage
waveInUnprepareHeader
waveInReset
waveInPrepareHeader
waveInOpen
timeKillEvent
timeGetTime
timeSetEvent
timeEndPeriod
timeBeginPeriod
timeGetDevCaps
waveOutWrite
waveOutPrepareHeader
waveOutUnprepareHeader
waveOutReset
waveOutClose
waveOutOpen
waveOutGetPosition
mixerClose
mixerGetLineControlsA
mixerGetLineInfoA
mixerGetDevCapsA
mixerOpen
mixerGetControlDetailsA
waveOutRestart
waveOutPause
mixerSetControlDetails
waveInClose
waveInGetPosition
wininet
InternetSetCookieW
InternetGetCookieW
crypt32
CertFindCertificateInStore
CertVerifySubjectCertificateContext
CertCreateCertificateContext
CryptGetMessageCertificates
CryptVerifyMessageSignature
CertAddStoreToCollection
CertOpenStore
CertVerifyRevocation
CertFreeCertificateContext
CertCompareCertificate
CertEnumCertificatesInStore
CertAddCertificateContextToStore
CertCompareCertificateName
CryptFindOIDInfo
CertRDNValueToStrW
CertFindRDNAttr
CryptDecodeObjectEx
CertNameToStrW
CertCloseStore
CertVerifyTimeValidity
oleaut32
SysAllocString
VariantClear
VariantInit
SysStringByteLen
SysStringLen
SysAllocStringLen
SysFreeString
RegisterTypeLi
VarUI4FromStr
LoadRegTypeLi
LoadTypeLi
VarBstrCat
SysAllocStringByteLen
SafeArrayUnlock
SafeArrayLock
SafeArrayCreateVector
SafeArrayUnaccessData
SafeArrayDestroy
SafeArrayAccessData
VariantChangeType
OleCreatePropertyFrame
UnRegisterTypeLi
dsound
ord1
ord8
msimg32
AlphaBlend
kernel32
GetTickCount
LCMapStringW
CreateProcessA
GetSystemDirectoryW
GetSystemWow64DirectoryW
FindClose
FindNextFileW
RemoveDirectoryW
FindFirstFileW
SystemTimeToFileTime
GetSystemTime
GetFileSizeEx
CreateFileW
CreateDirectoryW
GetProcessTimes
GetCurrentProcessId
GlobalSize
GetSystemDirectoryA
GetTempFileNameW
GetSystemInfo
GetUserDefaultUILanguage
MoveFileExW
VirtualQuery
GetUserDefaultLangID
DeleteFileA
CreateFileA
WriteFile
SetFilePointer
VerifyVersionInfoW
VerSetConditionMask
ReadFile
GetFileSize
CreateThread
LockResource
FindResourceExA
FindResourceExW
SetUnhandledExceptionFilter
GetTempPathW
GetTimeZoneInformation
ReleaseSemaphore
CreateSemaphoreW
DeviceIoControl
GetFileAttributesExW
ExpandEnvironmentStringsA
GetLongPathNameW
GetTempFileNameA
GetTempPathA
CreateDirectoryA
FindResourceW
SetFilePointerEx
GetCurrentDirectoryW
SetCurrentDirectoryW
GetFullPathNameW
OutputDebugStringA
GetFileInformationByHandle
GetVolumeInformationW
TryEnterCriticalSection
UnmapViewOfFile
ReleaseMutex
MapViewOfFile
CreateFileMappingA
GetExitCodeThread
DuplicateHandle
TerminateThread
CreateWaitableTimerW
SetThreadPriority
CompareFileTime
QueryPerformanceCounter
QueryPerformanceFrequency
QueueUserAPC
OpenThread
SleepEx
SwitchToThread
SetEndOfFile
FlushFileBuffers
GlobalMemoryStatusEx
IsDebuggerPresent
SetSystemTime
FileTimeToSystemTime
TlsAlloc
TlsFree
ResumeThread
CreateTimerQueueTimer
DeleteTimerQueueTimer
CreateSemaphoreA
HeapAlloc
HeapFree
HeapUnlock
HeapWalk
HeapLock
HeapCreate
HeapDestroy
VirtualProtect
GetNumberFormatW
GetCurrencyFormatW
CompareStringW
GetDateFormatW
GetTimeFormatW
GetUserDefaultLCID
IsValidLocale
EnumSystemLocalesW
GetProcessHeap
GetProcessAffinityMask
IsProcessorFeaturePresent
ExitProcess
UnhandledExceptionFilter
RtlUnwind
GetCommandLineA
ExitThread
HeapReAlloc
GetLocaleInfoW
GetSystemTimeAsFileTime
GetStdHandle
SetConsoleCtrlHandler
InitializeCriticalSectionAndSpinCount
GetOEMCP
IsValidCodePage
SetHandleCount
GetFileType
GetStartupInfoA
LCMapStringA
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetStdHandle
GetStringTypeA
GetStringTypeW
EnumSystemLocalesA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringA
SetEnvironmentVariableA
GetNativeSystemInfo
lstrcpynW
GlobalMemoryStatus
FlushConsoleInputBuffer
LoadResource
SizeofResource
DisableThreadLibraryCalls
SetLastError
OutputDebugStringW
GetCurrentThreadId
GetModuleFileNameW
GetVersionExA
GetModuleFileNameA
GetFileAttributesA
SetFileAttributesA
LocalAlloc
LocalFree
GlobalLock
GlobalUnlock
MulDiv
GetCurrentProcess
FlushInstructionCache
lstrcmpiW
CreateMutexW
LoadLibraryW
LoadLibraryA
GetProcAddress
WaitForMultipleObjects
FreeLibrary
WaitForSingleObject
ResetEvent
CloseHandle
CreateEventW
SetEvent
GetModuleHandleW
GlobalAlloc
GetLastError
GetVersionExW
GetLocaleInfoA
lstrlenW
lstrlenA
WideCharToMultiByte
GlobalFree
InterlockedDecrement
InterlockedIncrement
DeleteFileW
GetFileAttributesW
GetCurrentThread
SetThreadAffinityMask
TlsSetValue
IsDBCSLeadByte
GetACP
GetCPInfo
MultiByteToWideChar
RaiseException
HeapSize
DebugBreak
ExpandEnvironmentStringsW
InterlockedExchange
InterlockedCompareExchange
Sleep
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
TlsGetValue
SetConsoleMode
ReadConsoleInputA
GetModuleHandleA
CreateEventA
CreateWaitableTimerA
SetWaitableTimer
CancelWaitableTimer
InterlockedExchangeAdd
GetVersion
VirtualAlloc
VirtualFree
CopyFileW
TerminateProcess
LoadLibraryExW
CreateMutexA
user32
RegisterClipboardFormatW
GetWindowThreadProcessId
RemoveMenu
SetMenuItemInfoW
GetMenuItemInfoW
InsertMenuItemW
CreatePopupMenu
TrackPopupMenu
DestroyMenu
DrawMenuBar
CreateMenu
SetMenuInfo
CharUpperW
CharLowerW
PostThreadMessageW
GetMessageW
CloseWindow
WaitForInputIdle
TranslateMessage
DispatchMessageW
SetWindowTextA
RedrawWindow
DialogBoxIndirectParamW
SetWindowTextW
SendMessageTimeoutW
CreateIconIndirect
GetMonitorInfoW
SetRectEmpty
GetCursor
DestroyIcon
LoadImageW
GetPropW
SetPropW
GetSystemMetrics
InflateRect
GetClipboardFormatNameA
RegisterClipboardFormatA
IsWindow
PtInRect
EqualRect
SetWindowRgn
BeginPaint
EndPaint
GetSubMenu
MapVirtualKeyW
LoadStringW
IntersectRect
CloseClipboard
GetClipboardData
OpenClipboard
IsClipboardFormatAvailable
SetClipboardData
EmptyClipboard
EnumDisplayDevicesW
DestroyCaret
ShowCaret
CreateCaret
SetCaretPos
MoveWindow
GetActiveWindow
UnregisterClassA
LoadIconA
DeleteMenu
RegisterClassExA
CreateWindowExA
ReleaseCapture
UpdateWindow
SystemParametersInfoW
GetMessageTime
LoadIconW
RegisterClassW
IsWindowVisible
DialogBoxParamW
GetDlgItem
EndDialog
SetWindowPos
GetKeyState
LoadStringA
MessageBoxA
SendMessageW
GetQueueStatus
SetTimer
GetCapture
SetCursor
GetCursorPos
WindowFromPoint
ScreenToClient
GetClientRect
SetCapture
MessageBoxW
KillTimer
PeekMessageW
EnableMenuItem
CheckMenuItem
GetWindowInfo
CopyRect
PostQuitMessage
ClientToScreen
SendInput
ActivateKeyboardLayout
GetKeyboardLayout
GetWindowRect
UpdateLayeredWindow
UnregisterClassW
GetParent
GetFocus
IsChild
SetFocus
RegisterClassExW
InvalidateRect
DefWindowProcW
UnionRect
CallWindowProcW
GetDC
ReleaseDC
LoadCursorW
GetClassInfoExW
GetWindowLongW
SetWindowLongW
CharNextW
SetRect
GetForegroundWindow
GetDesktopWindow
EnumDisplayDevicesA
MonitorFromWindow
FillRect
OffsetRect
FlashWindowEx
GetSystemMenu
IsZoomed
GetWindowPlacement
SetWindowPlacement
ShowWindowAsync
IsIconic
EnumDisplaySettingsW
MapWindowPoints
GetWindowTextLengthW
CreateWindowExW
ShowWindow
DestroyWindow
GetDoubleClickTime
EnumWindows
PostMessageW
IsWindowEnabled
GetWindow
GetClassNameA
GetWindowTextW
GetWindowTextA
DefWindowProcA
GetWindowLongA
LoadCursorA
SetWindowLongA
PostMessageA
RegisterWindowMessageA
EnumDisplayMonitors
MonitorFromRect
GetMonitorInfoA
wsprintfW
GetUserObjectInformationW
GetProcessWindowStation
SetCursorPos
gdi32
GetDeviceCaps
CreateDIBSection
SelectObject
GetStockObject
GetObjectW
DeleteObject
GdiFlush
DeleteDC
CreateMetaFileW
GetClipBox
SetViewportOrgEx
LPtoDP
CreateRectRgnIndirect
GetObjectType
GetICMProfileA
CreateDCA
SetPixel
TextOutW
SetTextAlign
DeleteMetaFile
CreateBitmap
CreateFontIndirectW
GetTextExtentPoint32A
ExtTextOutA
GetTextExtentPoint32W
GetTextMetricsW
SetTextColor
CreateFontIndirectA
IntersectClipRect
GetClipRgn
CreateRectRgn
SetBkMode
SelectClipRgn
SetTextCharacterExtra
GetTextAlign
GetBkMode
GetTextColor
GetCurrentObject
GetBkColor
EnumFontFamiliesA
CreatePen
DPtoLP
GetTextCharacterExtra
SetWorldTransform
SetGraphicsMode
GetWorldTransform
StartDocW
EndDoc
StrokePath
ExtCreatePen
FillPath
StartPage
EndPage
BeginPath
EndPath
SetPolyFillMode
PolyBezierTo
SelectClipPath
CloseMetaFile
RestoreDC
SetWindowExtEx
SetWindowOrgEx
SaveDC
GdiAlphaBlend
StretchBlt
BitBlt
SetStretchBltMode
CreateCompatibleBitmap
ExtTextOutW
SetBkColor
GetStretchBltMode
EnumFontFamiliesW
CreateSolidBrush
GetFontData
EnumFontFamiliesExW
LineTo
MoveToEx
Rectangle
StretchDIBits
CreateCompatibleDC
RectVisible
comdlg32
GetSaveFileNameW
GetOpenFileNameW
CommDlgExtendedError
PrintDlgW
advapi32
CryptDecrypt
CryptSetKeyParam
CryptGetHashParam
CryptHashData
CryptDestroyHash
CryptAcquireContextA
CryptCreateHash
CryptAcquireContextW
CryptGenRandom
CryptReleaseContext
RegisterEventSourceA
ReportEventA
DeregisterEventSource
OpenProcessToken
GetTokenInformation
IsValidSid
GetSidSubAuthorityCount
GetSidSubAuthority
CryptImportKey
CryptGenKey
CryptDestroyKey
CryptExportKey
CryptEncrypt
RegOpenKeyA
RegQueryValueExW
RegCreateKeyA
RegEnumKeyExW
RegCreateKeyExA
RegSetValueExA
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegDeleteValueW
RegDeleteKeyW
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
shell32
SHGetFolderLocation
SHGetFolderPathW
ShellExecuteW
SHGetSpecialFolderPathW
SHFileOperationW
SHGetFolderPathA
SHGetPathFromIDListW
SHBrowseForFolderW
SHAppBarMessage
SHGetSettings
SHGetDiskFreeSpaceExW
ord165
ole32
CoTaskMemRealloc
CreateOleAdviseHolder
OleRegEnumVerbs
OleRegGetUserType
OleRegGetMiscStatus
CreateDataAdviseHolder
StringFromGUID2
WriteClassStm
OleSaveToStream
ReadClassStm
MkParseDisplayName
PropVariantClear
OleFlushClipboard
OleIsCurrentClipboard
OleSetClipboard
OleGetClipboard
OleUninitialize
OleInitialize
CoInitializeEx
CoRegisterMessageFilter
CoSetProxyBlanket
CoTaskMemFree
CoFreeUnusedLibraries
CoInitialize
CreateBindCtx
CoTaskMemAlloc
ReleaseStgMedium
CoCreateInstance
CoUninitialize
ws2_32
socket
WSAIoctl
WSAGetLastError
WSAAsyncSelect
closesocket
WSACleanup
WSASocketA
ntohl
gethostname
WSASocketW
select
__WSAFDIsSet
connect
ioctlsocket
WSAEnumNetworkEvents
WSAEventSelect
WSACreateEvent
WSAAddressToStringA
bind
sendto
recvfrom
WSASetLastError
getservbyport
gethostbyaddr
getservbyname
htonl
inet_ntoa
gethostbyname
inet_addr
WSACloseEvent
htons
getsockname
ntohs
send
WSAStartup
setsockopt
recv
shlwapi
UrlCanonicalizeW
ord158
PathFindFileNameW
StrRStrIW
StrStrIW
AssocQueryStringW
urlmon
HlinkSimpleNavigateToMoniker
RegisterBindStatusCallback
CreateURLMoniker
CopyStgMedium
mscms
DeleteColorTransform
CloseColorProfile
CreateColorTransformW
OpenColorProfileW
TranslateBitmapBits
iphlpapi
GetAdaptersAddresses
psapi
GetProcessMemoryInfo
AdobeCPGetAPI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IAEModule_AEModule_PutKernel
IAEModule_IAEKernel_LoadModule
IAEModule_IAEKernel_UnloadModule
Name
.text
Size
13.1MB
Virtual Size
13.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rodata
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
3.6MB
Virtual Size
3.6MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
836KB
Virtual Size
1.8MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
583KB
Virtual Size
582KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
700KB
Virtual Size
699KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=391, id=131, productName=VS2008 build 21022, version=21022,
count=5, id=132, productName=VS2008 build 21022, version=21022,
count=3, id=150, version=20413,
count=30, productName=Unmarked objects (old),
count=17, id=137, version=30729,
count=1, id=110, productName=VS2005 build 50727, version=50727,
count=2, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=96, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=39, id=123, productName=VS2005 build 50727, version=50727,
count=719, id=1, productName=Unmarked objects,
count=24, id=109, productName=VS2005 build 50727, version=50727,
count=526, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=65, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=1538, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=146, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=3, id=151,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
Solara/Solar/workspace/.tests/appendfile.txt
- SHA256 aee408847d35e44e99430f0979c3357b85fe8dbb4535a494301198adbee85f27
- MD5 260ca9dd8a4577fc00b7bd5810298076
- SHA1 53a5687cb26dc41f2ab4033e97e13adefd3740d6
- SHA512 51e85deb51c2b909a21ec5b8e83b1cb28da258b1be227620105a345a2bd4c6aea549cd5429670f2df33324667b9f623a420b3a0bdbbd03ad48602211e75478a7
- MD5 SHA1 SHA512
Solara/Solar/workspace/.tests/getcustomasset.txt
- SHA256 aee408847d35e44e99430f0979c3357b85fe8dbb4535a494301198adbee85f27
- MD5 260ca9dd8a4577fc00b7bd5810298076
- SHA1 53a5687cb26dc41f2ab4033e97e13adefd3740d6
- SHA512 51e85deb51c2b909a21ec5b8e83b1cb28da258b1be227620105a345a2bd4c6aea549cd5429670f2df33324667b9f623a420b3a0bdbbd03ad48602211e75478a7
- MD5 SHA1 SHA512
Solara/Solar/workspace/.tests/isfile.txt
- SHA256 aee408847d35e44e99430f0979c3357b85fe8dbb4535a494301198adbee85f27
- MD5 260ca9dd8a4577fc00b7bd5810298076
- SHA1 53a5687cb26dc41f2ab4033e97e13adefd3740d6
- SHA512 51e85deb51c2b909a21ec5b8e83b1cb28da258b1be227620105a345a2bd4c6aea549cd5429670f2df33324667b9f623a420b3a0bdbbd03ad48602211e75478a7
- MD5 SHA1 SHA512
Solara/Solar/workspace/.tests/listfiles/test_1.txt
- SHA256 aee408847d35e44e99430f0979c3357b85fe8dbb4535a494301198adbee85f27
- MD5 260ca9dd8a4577fc00b7bd5810298076
- SHA1 53a5687cb26dc41f2ab4033e97e13adefd3740d6
- SHA512 51e85deb51c2b909a21ec5b8e83b1cb28da258b1be227620105a345a2bd4c6aea549cd5429670f2df33324667b9f623a420b3a0bdbbd03ad48602211e75478a7
- MD5 SHA1 SHA512
Solara/Solar/workspace/.tests/listfiles/test_2.txt
- SHA256 aee408847d35e44e99430f0979c3357b85fe8dbb4535a494301198adbee85f27
- MD5 260ca9dd8a4577fc00b7bd5810298076
- SHA1 53a5687cb26dc41f2ab4033e97e13adefd3740d6
- SHA512 51e85deb51c2b909a21ec5b8e83b1cb28da258b1be227620105a345a2bd4c6aea549cd5429670f2df33324667b9f623a420b3a0bdbbd03ad48602211e75478a7
- MD5 SHA1 SHA512
Solara/Solar/workspace/.tests/loadfile.txt
- SHA256 252f10c83610ebca1a059c0bae8255eba2f95be4d1d7bcfa89d7248a82d9f111
- MD5 8fa14cdd754f91cc6554c9e71929cce7
- SHA1 4a0a19218e082a343a1b17e5333409af9d98f0f5
- SHA512 711c22448e721e5491d8245b49425aa861f1fc4a15287f0735e203799b65cffec50b5abd0fddd91cd643aeb3b530d48f05e258e7e230a94ed5025c1387bb4e1b
- MD5 SHA1 SHA512
Solara/Solar/workspace/.tests/readfile.txt
- SHA256 aee408847d35e44e99430f0979c3357b85fe8dbb4535a494301198adbee85f27
- MD5 260ca9dd8a4577fc00b7bd5810298076
- SHA1 53a5687cb26dc41f2ab4033e97e13adefd3740d6
- SHA512 51e85deb51c2b909a21ec5b8e83b1cb28da258b1be227620105a345a2bd4c6aea549cd5429670f2df33324667b9f623a420b3a0bdbbd03ad48602211e75478a7
- MD5 SHA1 SHA512
Solara/Solar/workspace/.tests/writefile
- SHA256 aee408847d35e44e99430f0979c3357b85fe8dbb4535a494301198adbee85f27
- MD5 260ca9dd8a4577fc00b7bd5810298076
- SHA1 53a5687cb26dc41f2ab4033e97e13adefd3740d6
- SHA512 51e85deb51c2b909a21ec5b8e83b1cb28da258b1be227620105a345a2bd4c6aea549cd5429670f2df33324667b9f623a420b3a0bdbbd03ad48602211e75478a7
- MD5 SHA1 SHA512
Solara/Solar/workspace/.tests/writefile.txt
- SHA256 aee408847d35e44e99430f0979c3357b85fe8dbb4535a494301198adbee85f27
- MD5 260ca9dd8a4577fc00b7bd5810298076
- SHA1 53a5687cb26dc41f2ab4033e97e13adefd3740d6
- SHA512 51e85deb51c2b909a21ec5b8e83b1cb28da258b1be227620105a345a2bd4c6aea549cd5429670f2df33324667b9f623a420b3a0bdbbd03ad48602211e75478a7
- MD5 SHA1 SHA512
Solara/Solar/workspace/EzHubLL.txt
- SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
- MD5 99914b932bd37a50b983c5e7c90ae93b
- SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
- SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
- MD5 SHA1 SHA512
Solara/Solar/workspace/IY_FE.iy
- SHA256 73bb58ba5b81960caf5a8e66675cc89b5761b77db99c6ceb9435f7211d400452
- MD5 291d5636a434c4f1ceb0f3f776c2a51f
- SHA1 ae287e08f71c522a72812f0dace94b8ffb569341
- SHA512 7dab8034f85aef1b2b7a86cc8220ebdbb95a3f083d1565e1cff38414367aa69fc597a11aaba11dbef411e13fbfb285855d9c46ae59738f6e88c22dd55c81a743
- MD5 SHA1 SHA512
Solara/Solar/workspace/Sky Hub/Sky Hub Settings.json
- SHA256 37dd2675939dcf754c08d0a3776908fc7c996849839dcba037848a943f33240b
- MD5 9a42aefba1beca2d4816e37142fa22db
- SHA1 387384c567a5bd1ca99568c43315ea39bdaec1e0
- SHA512 77ed2aeab7c10507e74c8001cbafe883d4a308cc3686d0edcf8925db54f00e45337b9ebd7d19c83129cebda0e0eaa9d01a0f5474d0639b6cab5659cfedb80a9b
- MD5 SHA1 SHA512