8870e6242e397575f54ac0acdfae13117dca54c01198c951537ddc228bb29c93

resource	yara_rule
static1/unpack001/Doc/Manual.pdf	pdf_with_link_action

resource
8870e6242e397575f54ac0acdfae13117dca54c01198c951537ddc228bb29c93
unpack001/$PLUGINSDIR/InstallOptions.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/Bin/win10x64/EaseFlt.sys
unpack001/Bin/win10x86/EaseFlt.sys
unpack001/uninst.exe
unpack003/$PLUGINSDIR/System.dll
unpack003/$PLUGINSDIR/nsExec.dll

IMPHASH 6e7f9a29f2c85394521a08b9f31f6275
SHA256 8870e6242e397575f54ac0acdfae13117dca54c01198c951537ddc228bb29c93
MD5 e1d69c9d80a3b36574e0a13860c26265
SHA1 9b09ee9803d552b8d56fc0ca00de09e55b903730
SHA512 ee0fa3236474cf3c7e75dd319cca2bb1dee369546439fb28b48cda3353184978a4615abd285d0eccde4a149d264aadbbcdac672271a499d1ba2faceb832fe09d
SSDEEP 98304:0L8i6lt7tQLe+fvcNBq4aJN5+Ya+fRy3dgLEC9H:0Lqlt7CL1vc4JSY9ANgLZH
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

13509

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCreateKeyExW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken SetFileSecurityW RegOpenKeyExW RegEnumValueW

shell32

SHGetSpecialFolderLocation SHFileOperationW SHBrowseForFolderW SHGetPathFromIDListW ShellExecuteExW SHGetFileInfoW

ole32

OleInitialize OleUninitialize CoCreateInstance IIDFromString CoTaskMemFree

comctl32

ord17 ImageList_Create ImageList_Destroy ImageList_AddMasked

user32

GetClientRect EndPaint DrawTextW IsWindowEnabled DispatchMessageW wsprintfA CharNextA CharPrevW MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW GetSystemMetrics FillRect AppendMenuW TrackPopupMenu OpenClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetWindowLongW GetSysColor SetWindowPos PeekMessageW SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint EmptyClipboard CreatePopupMenu

gdi32

SetBkMode SetBkColor GetDeviceCaps CreateFontIndirectW CreateBrushIndirect DeleteObject SetTextColor SelectObject

kernel32

GetExitCodeProcess WaitForSingleObject GetModuleHandleA GetProcAddress GetSystemDirectoryW lstrcatW Sleep lstrcpyA WriteFile GetTempFileNameW CreateFileW lstrcmpiA RemoveDirectoryW CreateProcessW CreateDirectoryW GetLastError CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersion GetCommandLineW GetTempPathW GetWindowsDirectoryW SetEnvironmentVariableW ExitProcess CopyFileW GetCurrentProcess GetModuleFileNameW GetFileSize GetTickCount MulDiv SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW MoveFileExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW

$PLUGINSDIR/InstallOptions.dll

IMPHASH 4b45b7e00344a87332fbd12653854d1a
SHA256 1f8e8f336df6773d6b63bd5a7efbfc889d08888fec55da402eaf93cb950aa283
MD5 90bb49f3fd416f912a637526914bd044
SHA1 626051dd6c759a5b847664549736c37aba9ede5a
SHA512 5156923f51be2057f7003577b46732f6b0b0bb55402f49df3747085b9802b3a2492cd5f087ef988db5a69f241c10163ada0e649b149da8a198b7fc2cc83334e5
SSDEEP 384:E5C43tPegZ3eBaRwCPOYY7nNYXCA/Yosa:EQTgZ3eBTCmrnNAE
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

11022

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

GetCurrentDirectoryW GlobalUnlock GlobalLock GetModuleHandleW CloseHandle SetEndOfFile SetCurrentDirectoryW GetPrivateProfileStringW GetPrivateProfileIntW MultiByteToWideChar ReadFile GetFileSize CreateFileW lstrcmpiW lstrcatW lstrcpynW WritePrivateProfileStringW lstrlenW lstrcpyW GlobalFree GlobalAlloc WriteFile SetFilePointer

user32

LoadCursorW SetWindowRgn GetDlgCtrlID CloseClipboard DrawFocusRect OpenClipboard DrawTextW SetCursor LoadIconW LoadImageW SetWindowLongW CreateWindowExW MapDialogRect SetWindowPos GetWindowRect CreateDialogParamW GetClientRect ShowWindow GetSystemMenu EnableWindow GetDlgItem DestroyIcon DestroyWindow DispatchMessageW TranslateMessage GetMessageW IsDialogMessageW CallWindowProcW PostMessageW MessageBoxW GetSysColor CharNextW wsprintfW GetWindowTextW SetWindowTextW SendMessageW GetWindowLongW EnableMenuItem PtInRect MapWindowPoints GetClipboardData

gdi32

SetTextColor DeleteObject CombineRgn CreateRectRgn GetDIBits SelectObject CreateCompatibleDC GetObjectW

shell32

SHGetDesktopFolder SHGetPathFromIDListW ShellExecuteW SHBrowseForFolderW

comdlg32

GetOpenFileNameW GetSaveFileNameW CommDlgExtendedError

ole32

CoTaskMemFree

$PLUGINSDIR/System.dll

IMPHASH fc0224e99e736751432961db63a41b76
SHA256 acf90ab6f4edc687e94aaf604d05e16e6cfb5e35873783b50c66f307a35c6506
MD5 6e55a6e7c3fdbd244042eb15cb1ec739
SHA1 070ea80e2192abc42f358d47b276990b5fa285a9
SHA512 2d504b74da38edc967e3859733a2a9cacd885db82f0ca69bfb66872e882707314c54238344d45945dc98bae85772aceef71a741787922d640627d3c8ae8f1c35
SSDEEP 192:MenY0qWTlt70IAj/lQ0sEWc/wtYbBH2aDybC7y+XBaIwL:M8+Qlt70Fj/lQRY/9VjjgL
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10719

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/ioSpecial.ini

SHA256 d95aed234f932a1c48a2b1b0d98c60ca31f962310c03158e2884ab4ddd3ea1e0
MD5 e2d5070bc28db1ac745613689ff86067
SHA1 282e080b4cf847174c5c11e4f9157b8c338ecb19
SHA512 a50ca2014869629135b54e848f03cb4983ad8029cd811300d02b0fc54de0436185f418fea4d3db888eb0f3170e33a59d486aa885f024ab29e630e9bc0ae1a2de
MD5 SHA1 SHA512

$PLUGINSDIR/modern-header.bmp

SHA256 8e58b3e6e3896a4bae05fa2f6adc238d391aa80bc51c138f851f373c6c23e518
MD5 eadf80c79f88337c58ca0fb5032cb579
SHA1 523d7118a3755790eaddd6e99f7b3814e97d47d0
SHA512 ed612cda75f4b345c1405be33575a0060d6399654d66356e8102ec82a057497ef7dc99906132bd729ae793e7fc4f46cdbd57256fca567a056bed642c1d58b7ed
SSDEEP 192:6K3Taw+vLvvswRvyb7qY1eL5qDJD8CUNObWF/U0p3+i8Esub:6MOLzYQdqDJHsxcWPX
MD5 SHA1 SHA512 SSDEEP

$PLUGINSDIR/modern-wizard.bmp

SHA256 8f3c9876ba541c1ece30fd4653cb8c44c01eb55d12d61a494d3f5115b7d8c921
MD5 94916a7ba3a28d998f65c7cd59f6ef42
SHA1 6041ec2f2d576fd2464cc21f68079a12f4412ff4
SHA512 7a34d623e07c5442d3fb662de5d342f8d9f1d3c9efe90dd7e2b8a2c2a7a64711f4834646b40108e2f8a9c4cfe5c598315685b4c24b935b356c4823381c2cacf7
SSDEEP 3072:nOE4s/iAeTJH0rUYzCtlijJluRXOGgbfZh4:nXeVYUY8N2bfg
MD5 SHA1 SHA512 SSDEEP

AutoEncryptDemo.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 e948d7636d6a623c8ec584b88c98926b413b02b0464b53aece4adbeedc1eaee2
MD5 6757be332b713fe334b01a1bdd297482
SHA1 e69f5486a08b75f13fe0aa9c5c12c718b31718db
SHA512 852a74920685f2d2b83e4378f9a8a9a13740d00df63e95d7e3e2329c79ea897b2e5bf834d12273cdd178e4173e5b55ed6916dcb49cbe85341175acff15cf6cce
SSDEEP 768:NR9TbFDxAOcmzYcHeWDmMht/feVE3h9Tp:v9twTALl3h9Tp
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Digest

51:be:83:fd:05:4f:a6:8c:dc:b7:1c:10:7e:6d:02:f2:47:0e:58:d4:3e:17:79:dd:14:07:3b:48:26:25:86:5d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Chains

Jan 7, 2022

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

78:7c:af:e5:b6:2e:fc:1a:00:cf:9c:05:e9:84:26:a1:80:d9:97:c6

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Chains

Jan 7, 2022

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Serial Number

0f:31:2f:ad:09:74:c5:12:c3:d6:5c:09:bd:62:fb:1c

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 11, 2019 - Nov 2, 2022

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Serial Number

0e:0a:2e:90:48:fa:06:fa:97:f5:26:31:d7:cd:2c:f1

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 11, 2019 - Nov 2, 2022

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

4

Entry point

21518

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\Development\Demo\AutoEncryptDemo\obj\Release\AutoEncryptDemo.pdb

AutoFileCryptTool.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 fd1970b74a5da3e3ff0695497e0613afdc0be99d7e0db3498269e6497487fbf9
MD5 fa93eec0ee7f9f4dfa68500d2302038b
SHA1 0723fd2a2e9c2fd805fa294f6f440257fae4e7f2
SHA512 7207d2920fc1f5c29bc0a318ecda50ff00d460f3e1b6e0a362771c362dde921c17e115ae6c42133ace20d4ddc8364b05157dd125ec5c3e9a9182c4897e606b0d
SSDEEP 1536:JYN0qP1V/kklO1PW92kklO1PW9/kklO1PW90lRjUOnf0qP1HuuJ3h1s:SNbpsgAsgtsg0lRjRfbNu8s
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Digest

e8:c2:47:cc:f1:fc:53:62:e1:ef:16:9f:c9:91:b8:22:83:33:a9:62:a6:84:50:91:a2:23:ef:61:e4:0f:0f:e9

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Chains

Jan 7, 2022

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

66:e0:9c:36:41:2e:27:43:56:65:bf:fb:5c:0b:8c:64:46:5c:bb:03

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Chains

Jan 7, 2022

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Serial Number

0f:31:2f:ad:09:74:c5:12:c3:d6:5c:09:bd:62:fb:1c

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 11, 2019 - Nov 2, 2022

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Serial Number

0e:0a:2e:90:48:fa:06:fa:97:f5:26:31:d7:cd:2c:f1

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 11, 2019 - Nov 2, 2022

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

4

Entry point

151598

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\Development\Demo\AutoFileCryptTool\obj\Release\AutoFileCryptTool.pdb

Bin/win10x64/EaseFlt.sys

IMPHASH f0e8658bfab4efbda58ad39328bcaac2
SHA256 73f810c1f10726c983529bfcba6829fc0255849b39daf5b091a7d0bed1e8fc41
MD5 76446142d3ceb8e77e3dcd7b274b4267
SHA1 5efac8e9a760ee530225cfac2db464fd6e66d197
SHA512 aedfa62208d13ba24859270806ffaa1731d90f662f84d36fca1b26b2b6d18320421f4f1e87dcdd8b0fd1010eec23086f258018af4349eca889c99f27a2313437
SSDEEP 3072:mdNwVJehHIE4pLHDbq9XIYDj9EXG3Lpg0A8MGiqCnPpu1Ll0k25fAwCT:0IIhdML3qXfe4Wcfidwi4L
MD5 SHA1 SHA512 SSDEEP

windows:10 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

10

Entry point

200704

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\Development\x64\Release\EaseFlt.pdb

fltmgr.sys

FltSetCallbackDataDirty FltDoCompletionProcessingWhenSafe FltAllocatePoolAlignedWithTag FltFreePoolAlignedWithTag FltCreateFile FltReadFile FltWriteFile FltSetInformationFile FltClose FltLockUserBuffer FltInitializeOplock FltAcquireResourceExclusive FltReleaseResource FltGetRequestorProcessId FltIsDirectory FltQueryInformationFile FltCreateCommunicationPort FltCloseCommunicationPort FltCloseClientPort FltSendMessage FltBuildDefaultSecurityDescriptor FltFreeSecurityDescriptor FltGetRoutineAddress FltGetFileNameInformation FltReleaseFileNameInformation FltParseFileNameInformation FltGetVolumeName FltGetDestinationFileNameInformation FltAllocateContext FltSetInstanceContext FltSetStreamContext FltSetStreamHandleContext FltDeleteContext FltDeleteInstanceContext FltGetInstanceContext FltGetStreamContext FltGetStreamHandleContext FltReferenceContext FltReleaseContext FltGetDiskDeviceObject FltGetVolumeProperties FltUninitializeOplock FltFindExtraCreateParameter FltGetEcpListFromCallbackData FltAllocateCallbackData FltFreeCallbackData FltPerformSynchronousIo FltRegisterFilter FltUnregisterFilter FltStartFiltering FltCheckAndGrowNameControl FltGetFileNameInformationUnsafe FltCreateFileEx2

ksecdd.sys

BCryptOpenAlgorithmProvider BCryptGetProperty BCryptSetProperty BCryptCloseAlgorithmProvider BCryptGenerateSymmetricKey BCryptEncrypt BCryptDestroyKey SecLookupAccountSid

ntoskrnl.exe

RtlCompareUnicodeString KeInitializeEvent ExFreePoolWithTag ExAcquireFastMutex ExReleaseFastMutex ExQueryDepthSList ExpInterlockedPopEntrySList ExpInterlockedPushEntrySList ExInitializeNPagedLookasideList ExDeleteNPagedLookasideList ExInitializeResourceLite ExAcquireResourceSharedLite ExAcquireResourceExclusiveLite ExReleaseResourceLite MmProbeAndLockPages MmUnlockPages MmBuildMdlForNonPagedPool MmMapLockedPagesSpecifyCache IoAllocateMdl IoFreeMdl IoSetTopLevelIrp ObReferenceObjectByHandle ObfDereferenceObject ExUuidCreate PsGetCurrentThreadId FsRtlInitializeFileLock CcFlushCache __C_specific_handler MmForceSectionClosed FsRtlTeardownPerStreamContexts CcUninitializeCacheMap RtlInitUnicodeString RtlSetDaclSecurityDescriptor MmIsAddressValid MmSystemRangeStart RtlCopyUnicodeString RtlIsNtDdiVersionAvailable ExAllocatePoolWithTag MmGetSystemRoutineAddress ExDeleteResourceLite ZwClose IoVolumeDeviceToDosName RtlValidSid FsRtlUninitializeFileLock ZwOpenProcessTokenEx ZwOpenThreadTokenEx ZwQueryInformationToken RtlAppendUnicodeStringToString RtlAppendUnicodeToString KeSetEvent KeWaitForSingleObject RtlUpcaseUnicodeString PsGetCurrentProcessId FsRtlIsNameInExpression IoWMIRegistrationControl ZwQueryInformationFile ZwReadFile IoGetTransactionParameterBlock ZwQueryDirectoryFile _local_unwind ObRegisterCallbacks ObUnRegisterCallbacks ObGetFilterVersion RtlInitializeGenericTable RtlInsertElementGenericTable RtlDeleteElementGenericTable RtlLookupElementGenericTable RtlGetElementGenericTable RtlNumberGenericTableElements PsSetCreateProcessNotifyRoutineEx PsSetCreateThreadNotifyRoutine PsRemoveCreateThreadNotifyRoutine PsGetProcessId PsGetThreadId PsGetThreadProcessId PsProcessType PsThreadType CmRegisterCallback CmUnRegisterCallback ObQueryNameString RtlIntegerToUnicodeString ZwCreateKey ZwOpenKey ZwDeleteKey ZwDeleteValueKey ZwQueryValueKey ZwSetValueKey RtlLengthSecurityDescriptor DbgPrint RtlTimeToTimeFields ExSystemTimeToLocalTime _vsnwprintf RtlStringFromGUID KeWaitForMultipleObjects KeAcquireSpinLockRaiseToDpc KeReleaseSpinLock PsCreateSystemThread PsTerminateSystemThread ZwWriteFile KeBugCheckEx

Name

.text

Size

147KB

Virtual Size

146KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

18KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

PAGE

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

INIT

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

1016B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

144B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Bin/win10x64/EaseFltCPPDemo.exe

IMPHASH d75ed198aa54007cbaf3ee976e0a5261
SHA256 d30ed2bae09788fd1d5e108a69903db1fec827a427200e009af99653f12baf2d
MD5 0d245d5c774f7914a3a59133524cafd5
SHA1 e107df47ed5a7c914b8be67f9029a9d1a561032c
SHA512 5282623b88f5be6e81744f8410aa26bda780200f54d91c9953c1d0608e8c718dc0a9274c77ff3fc3092f8a200cff3016c42a995a9d529877e80198181f4c6bbd
SSDEEP 3072:IRaTGfDQ+QnkJZEGJgFww0lTj6V5pYHfrRtHle3aengSS7yCVScbQEXQi4:Saik+mkDpXlTj65pYHfrRtHlIU7yCUEy
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Digest

fe:1f:6e:06:f9:f5:5e:77:f4:42:a4:f9:1f:f5:5b:64:9a:e8:fb:ca:38:e6:94:29:9c:bc:a5:40:04:c5:ea:70

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Chains

Jan 7, 2022

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

87:93:98:aa:88:70:c1:6e:d7:df:47:5a:11:87:0e:4c:f3:d5:5e:81

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Chains

Jan 7, 2022

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Serial Number

0f:31:2f:ad:09:74:c5:12:c3:d6:5c:09:bd:62:fb:1c

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 11, 2019 - Nov 2, 2022

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Serial Number

0e:0a:2e:90:48:fa:06:fa:97:f5:26:31:d7:cd:2c:f1

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 11, 2019 - Nov 2, 2022

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

2

Major OS version

5

Entry point

32216

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\Development\Release\EaseFltCPPDemo.pdb

filterapi

GetUniqueComputerId UnInstallDriver InstallDriver SetRegistrationKey RegisterMessageCallback Disconnect IsDriverServiceRunning SetConnectionTimeout SetFilterType AddProcessFilterRule AddFileControlToProcessByName AddRegistryFilterRule AddNewFilterRule RemoveBlockSaveAsProcessId AddExcludeFileMaskToFilterRule AESDecryptFileWithKey RegisterIoRequest SetBooleanConfig AddIncludeProcessIdToFilterRule AddIncludeUserNameToFilterRule AddFileFilterRule RegisterFileChangedEventsToFilterRule RegisterMonitorIOToFilterRule RegisterControlIOToFilterRule AddEncryptionKeyAndIVToFilterRule AddEncryptionKeyToFilterRule AddBooleanConfigToFilterRule SetVolumeControlFlag AddExcludedProcessId GetLastErrorMessage AESDecryptFile AESEncryptFile SetFileSize ResetConfigData RemoveProcessIdRightsFromFilterRule AddProcessIdRightsToFilterRule GetAESHeader AddReparseFileMaskToFilterRule

kernel32

Sleep DeleteFileW GetSystemTime SystemTimeToFileTime SetFileAttributesW GetFileInformationByHandle MoveFileW SetFilePointer SetEndOfFile FindFirstFileW FindClose GetFileTime GetFileAttributesW FindNextFileW GetStdHandle SetConsoleTextAttribute OutputDebugStringW FormatMessageW LocalFree CreateEventW CreateThread WaitForSingleObject SetEvent GetFileSizeEx GetCurrentProcessId ReadFile CloseHandle WriteFile CreateFileW GetLastError CreateDirectoryW WideCharToMultiByte HeapAlloc HeapFree GetCommandLineW RaiseException RtlPcToFileHeader TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext EncodePointer DecodePointer HeapSize HeapReAlloc RtlUnwindEx EnterCriticalSection LeaveCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage FlsGetValue FlsSetValue FlsFree SetLastError GetCurrentThreadId FlsAlloc GetFileAttributesA GetProcAddress GetModuleHandleW ExitProcess GetModuleFileNameW HeapSetInformation GetVersion HeapCreate FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType GetStartupInfoW DeleteCriticalSection QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime LCMapStringW MultiByteToWideChar GetStringTypeW GetExitCodeProcess CreateProcessA LoadLibraryW GetConsoleCP GetConsoleMode FlushFileBuffers CompareStringW SetEnvironmentVariableA SetStdHandle WriteConsoleW

advapi32

RegisterServiceCtrlHandlerW GetFileSecurityW SetFileSecurityW GetUserNameW StartServiceCtrlDispatcherW SetServiceStatus LookupAccountSidW

Bin/win10x64/FilterAPI.dll

IMPHASH a868be19be7845c81e1a1ebf14031fb0
SHA256 c1a448498019b3aff1b0f85ccc3448cf2757e02033c4beff08af68f760f96131
MD5 e12436cc453273482dfb150a6d7c48d2
SHA1 80ca5bae05cb93c4b3b935bc63c14ead9e3d7cbb
SHA512 dc42f06cdbdc0762a8f87448b815bd1228fb96cd2a128fd8b6ea6634775031b50fa5a29dde7d211f6ae334811a8dd9e6483a8d8a8e80948eadac382094fd49ee
SSDEEP 6144:kHbJF+imBQkrZXvWJCiT4ofKcZ/x4OcyvFW/GnhaZ:k7yXekduicIC0/GY
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Digest

ad:7c:8a:31:d6:7c:ea:a6:9a:ff:fd:21:d9:e3:f2:20:46:2e:fd:18:34:5e:45:83:70:d7:6d:e6:1f:88:d9:03

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Chains

Jan 7, 2022

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

1e:cd:d8:d0:70:bd:bb:d8:eb:a6:59:fd:4b:4e:a7:01:bc:e6:e0:61

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Chains

Jan 7, 2022

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Serial Number

0f:31:2f:ad:09:74:c5:12:c3:d6:5c:09:bd:62:fb:1c

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 11, 2019 - Nov 2, 2022

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Serial Number

0e:0a:2e:90:48:fa:06:fa:97:f5:26:31:d7:cd:2c:f1

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 11, 2019 - Nov 2, 2022

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

2

Major OS version

5

Entry point

68300

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\Development\Release\x64\FilterAPI.pdb

fltlib

FilterConnectCommunicationPort FilterGetMessage FilterReplyMessage FilterLoad FilterUnload FilterSendMessage

kernel32

GetModuleFileNameW SystemTimeToFileTime GetComputerNameW GetCurrentProcessId GetSystemTime SetEndOfFile SetFileTime DeviceIoControl GetFileTime MultiByteToWideChar lstrcmpA LocalAlloc lstrcpyW Process32FirstW ResetEvent SetLastError GetOverlappedResult OpenProcess GetCurrentProcess FormatMessageW OutputDebugStringW GetModuleHandleW SetFileAttributesW LocalFree DeleteFileW CloseHandle BackupRead CopyFileW GetFileSizeEx CreateFileW ReadFile GetFileAttributesW WriteFile WriteConsoleW SetStdHandle IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID GetStringTypeW GetConsoleMode GetConsoleCP SetFilePointer FlushFileBuffers GetLocaleInfoW LoadLibraryW FreeLibrary SetConsoleCtrlHandler FatalAppExitA GetTickCount QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetModuleFileNameA BackupSeek SetFilePointerEx Sleep GetSystemDirectoryW CreateThread CreateToolhelp32Snapshot Process32NextW GetLastError CreateEventW HeapFree HeapAlloc GetSystemTimeAsFileTime GetCurrentThreadId FlsSetValue GetCommandLineA RaiseException TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapSetInformation GetVersion HeapCreate HeapDestroy GetProcAddress ExitProcess DecodePointer GetStdHandle EncodePointer FlsGetValue FlsFree GetCurrentThread FlsAlloc HeapSize HeapQueryInformation HeapReAlloc EnterCriticalSection LeaveCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage WideCharToMultiByte LCMapStringW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType GetStartupInfoW DeleteCriticalSection

advapi32

OpenEventLogW CloseEventLog OpenProcessToken PrivilegeCheck LookupPrivilegeValueW AdjustTokenPrivileges CreateServiceW CloseServiceHandle DeleteService EnumServicesStatusExW RegSetValueExW RegCloseKey ControlService QueryServiceStatus RegDeleteKeyW RegCreateKeyExW OpenServiceW OpenSCManagerW ReportEventW

rpcrt4

UuidCreate

bcrypt

BCryptOpenAlgorithmProvider BCryptCloseAlgorithmProvider BCryptSetProperty BCryptDestroyKey BCryptGenerateSymmetricKey BCryptEncrypt BCryptGetProperty

psapi

GetModuleFileNameExW

ntdll

NtSetInformationFile NtQueryInformationFile RtlNtStatusToDosError RtlPcToFileHeader RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext RtlUnwindEx

crypt32

CryptDecodeObject CryptQueryObject CertGetNameStringW CertFreeCertificateContext CertFindCertificateInStore CertCloseStore CryptMsgGetParam CryptMsgClose

AESDecryptBytes AESDecryptFile AESDecryptFileToFile AESDecryptFileWithKey AESEncryptDecryptBuffer AESEncryptFile AESEncryptFileToFile AESEncryptFileToFileWithTag AESEncryptFileWithTag ActivateLicense AddAESHeader AddBlockSaveAsProcessId AddBooleanConfigToFilterRule AddCreateFilterToFilterRule AddEncryptionKeyAndIVToFilterRule AddEncryptionKeyToFilterRule AddExcludeFileMaskToFilterRule AddExcludeProcessIdToFilterRule AddExcludeProcessNameToFilterRule AddExcludeUserNameToFilterRule AddExcludedProcessId AddFileCallbackIOToProcessByName AddFileControlToProcessById AddFileControlToProcessByName AddFileFilterRule AddFilterRule AddHiddenFileMaskToFilterRule AddIncludeProcessIdToFilterRule AddIncludeProcessNameToFilterRule AddIncludeUserNameToFilterRule AddIncludedProcessId AddNewFilterRule AddProcessFilterRule AddProcessIdRightsToFilterRule AddProcessRightsToFilterRule AddProtectedProcessId AddRegistryFilterRule AddRegistryFilterRuleByProcessId AddRegistryFilterRuleByProcessName AddReparseFileMaskToFilterRule AddReparseTagData AddTagData AddUserRightsToFilterRule CloseFileHandleInFilter CreateFileAPI CreateStubFile CreateStubFileEx Disconnect EnableReparsePointTagEncryption GetAESHeader GetAESIV GetAESTagData GetFileHandleInFilter GetLastErrorMessage GetTagData GetUniqueComputerId InstallDriver IsDriverServiceRunning OpenStubFile QueryAllocatedRanges RegisterControlIOToFilterRule RegisterEventTypeToFilterRule RegisterFileChangedEventsToFilterRule RegisterIoRequest RegisterMessageCallback RegisterMonitorIOToFilterRule RemoveBlockSaveAsProcessId RemoveBooleanConfigFromFilterRule RemoveExcludeProcessId RemoveFileControlFromProcessById RemoveFileControlFromProcessByName RemoveFilterRule RemoveIncludeProcessId RemoveProcessFilterRule RemoveProcessIdRightsFromFilterRule RemoveProcessRightsFromFilterRule RemoveProtectedProcessId RemoveRegistryFilterRuleByProcessId RemoveRegistryFilterRuleByProcessName RemoveTagData ResetConfigData SetAESHeaderSize SetAESVersion SetBooleanConfig SetConnectionTimeout SetFileSize SetFilterType SetHeaderFlags SetIntegerData SetMaxMonitorEventBuffersize SetRegistrationKey SetStringData SetVolumeControlFlag UnInstallDriver

Bin/win10x64/FilterAPI.lib

SHA256 1e359e92ebfe3481c4751839f65f3880a1158964cb085e3ab789e6444ef078be
MD5 27c37e742d0a0b306773a26cba42253b
SHA1 e0d66d911a473bae4e965adde6ce6fda6a2f3426
SHA512 fda41813b2c13d891df4f9f93bef01a4011b5fbce03c77b3ce0fc60f94c2b8d3a95a35fc40bec0aa7dfb7ff8c6564b1ca1246d2345d21498425e998c3c58e0da
SSDEEP 384:bECPu86GsmVtnlh2fgLEYrp9iHXmcym7UKz1kkt+1m9tzbFgwUmePydvtGbmz:R1VtnligLEYrp9Smazykt+16tzbFnNlh
MD5 SHA1 SHA512 SSDEEP

Bin/win10x86/EaseFlt.sys

IMPHASH f0e8658bfab4efbda58ad39328bcaac2
SHA256 c41a55cd17da04e8c27f7f2e5f69d776bd4c4eabc733cdf697f01a11943d1408
MD5 131e79485ea413e6ed81ca4ccbe6f6bc
SHA1 689eaefe3987115b9e9a30d2183b92b39980bd83
SHA512 221857d460a804bcc619a5760a513090aeb026e859cf89e25cce2082677ad194a296af0e5ed8d62bfee54127a55ce3ddba50615f8e56345442e102512dbd9e7f
SSDEEP 3072:/dNwVJehHIE4pLHDbq9XIYDj9EXG3Lpg0A8MGiqCnPpu1Ll0k25fARCw:lIIhdML3qXfe4Wcfidwi4t
MD5 SHA1 SHA512 SSDEEP

windows:10 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

10

Entry point

200704

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\Development\x64\Release\EaseFlt.pdb

fltmgr.sys

FltSetCallbackDataDirty FltDoCompletionProcessingWhenSafe FltAllocatePoolAlignedWithTag FltFreePoolAlignedWithTag FltCreateFile FltReadFile FltWriteFile FltSetInformationFile FltClose FltLockUserBuffer FltInitializeOplock FltAcquireResourceExclusive FltReleaseResource FltGetRequestorProcessId FltIsDirectory FltQueryInformationFile FltCreateCommunicationPort FltCloseCommunicationPort FltCloseClientPort FltSendMessage FltBuildDefaultSecurityDescriptor FltFreeSecurityDescriptor FltGetRoutineAddress FltGetFileNameInformation FltReleaseFileNameInformation FltParseFileNameInformation FltGetVolumeName FltGetDestinationFileNameInformation FltAllocateContext FltSetInstanceContext FltSetStreamContext FltSetStreamHandleContext FltDeleteContext FltDeleteInstanceContext FltGetInstanceContext FltGetStreamContext FltGetStreamHandleContext FltReferenceContext FltReleaseContext FltGetDiskDeviceObject FltGetVolumeProperties FltUninitializeOplock FltFindExtraCreateParameter FltGetEcpListFromCallbackData FltAllocateCallbackData FltFreeCallbackData FltPerformSynchronousIo FltRegisterFilter FltUnregisterFilter FltStartFiltering FltCheckAndGrowNameControl FltGetFileNameInformationUnsafe FltCreateFileEx2

ksecdd.sys

BCryptOpenAlgorithmProvider BCryptGetProperty BCryptSetProperty BCryptCloseAlgorithmProvider BCryptGenerateSymmetricKey BCryptEncrypt BCryptDestroyKey SecLookupAccountSid

ntoskrnl.exe

RtlCompareUnicodeString KeInitializeEvent ExFreePoolWithTag ExAcquireFastMutex ExReleaseFastMutex ExQueryDepthSList ExpInterlockedPopEntrySList ExpInterlockedPushEntrySList ExInitializeNPagedLookasideList ExDeleteNPagedLookasideList ExInitializeResourceLite ExAcquireResourceSharedLite ExAcquireResourceExclusiveLite ExReleaseResourceLite MmProbeAndLockPages MmUnlockPages MmBuildMdlForNonPagedPool MmMapLockedPagesSpecifyCache IoAllocateMdl IoFreeMdl IoSetTopLevelIrp ObReferenceObjectByHandle ObfDereferenceObject ExUuidCreate PsGetCurrentThreadId FsRtlInitializeFileLock CcFlushCache __C_specific_handler MmForceSectionClosed FsRtlTeardownPerStreamContexts CcUninitializeCacheMap RtlInitUnicodeString RtlSetDaclSecurityDescriptor MmIsAddressValid MmSystemRangeStart RtlCopyUnicodeString RtlIsNtDdiVersionAvailable ExAllocatePoolWithTag MmGetSystemRoutineAddress ExDeleteResourceLite ZwClose IoVolumeDeviceToDosName RtlValidSid FsRtlUninitializeFileLock ZwOpenProcessTokenEx ZwOpenThreadTokenEx ZwQueryInformationToken RtlAppendUnicodeStringToString RtlAppendUnicodeToString KeSetEvent KeWaitForSingleObject RtlUpcaseUnicodeString PsGetCurrentProcessId FsRtlIsNameInExpression IoWMIRegistrationControl ZwQueryInformationFile ZwReadFile IoGetTransactionParameterBlock ZwQueryDirectoryFile _local_unwind ObRegisterCallbacks ObUnRegisterCallbacks ObGetFilterVersion RtlInitializeGenericTable RtlInsertElementGenericTable RtlDeleteElementGenericTable RtlLookupElementGenericTable RtlGetElementGenericTable RtlNumberGenericTableElements PsSetCreateProcessNotifyRoutineEx PsSetCreateThreadNotifyRoutine PsRemoveCreateThreadNotifyRoutine PsGetProcessId PsGetThreadId PsGetThreadProcessId PsProcessType PsThreadType CmRegisterCallback CmUnRegisterCallback ObQueryNameString RtlIntegerToUnicodeString ZwCreateKey ZwOpenKey ZwDeleteKey ZwDeleteValueKey ZwQueryValueKey ZwSetValueKey RtlLengthSecurityDescriptor DbgPrint RtlTimeToTimeFields ExSystemTimeToLocalTime _vsnwprintf RtlStringFromGUID KeWaitForMultipleObjects KeAcquireSpinLockRaiseToDpc KeReleaseSpinLock PsCreateSystemThread PsTerminateSystemThread ZwWriteFile KeBugCheckEx

Name

.text

Size

147KB

Virtual Size

146KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

18KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

PAGE

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

INIT

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

1016B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

144B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Bin/win10x86/EaseFltCPPDemo.exe

IMPHASH d75ed198aa54007cbaf3ee976e0a5261
SHA256 2e671ae032891511e0d98fec5534977b1f8c48c6776ce7d1af889badbd453b1d
MD5 7698f9ffc866aca7b5d9910915675a50
SHA1 7c39073e4b713c4b1427a4aca64887bf151ff3a1
SHA512 fffab3cd7f000bf266b807d877d4fa45d2e3575907134e151705c491e129d1e6087755cfe78b1d16fb0357f7d29f4194a76bb90ff014a2491d4a99dafe47c3a5
SSDEEP 3072:2RaTGfDQ+QnkJZEGJgFww0lTj6V5pYHfrRtHle3aedgSS7yCaScbQEXu2:gaik+mkDpXlTj65pYHfrRtHlI67yCzEb
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Digest

92:f8:32:54:55:3a:35:aa:6c:98:ab:ec:90:8d:52:aa:d1:a5:ed:cc:1c:49:75:e6:c5:db:4c:60:db:c8:a3:c0

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Chains

Jan 7, 2022

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

bd:6f:51:ef:05:21:0a:70:ae:db:b4:f4:0b:f0:d7:17:92:f2:7b:52

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Chains

Jan 7, 2022

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Serial Number

0f:31:2f:ad:09:74:c5:12:c3:d6:5c:09:bd:62:fb:1c

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 11, 2019 - Nov 2, 2022

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Serial Number

0e:0a:2e:90:48:fa:06:fa:97:f5:26:31:d7:cd:2c:f1

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 11, 2019 - Nov 2, 2022

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

2

Major OS version

5

Entry point

32216

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\Development\Release\EaseFltCPPDemo.pdb

filterapi

GetUniqueComputerId UnInstallDriver InstallDriver SetRegistrationKey RegisterMessageCallback Disconnect IsDriverServiceRunning SetConnectionTimeout SetFilterType AddProcessFilterRule AddFileControlToProcessByName AddRegistryFilterRule AddNewFilterRule RemoveBlockSaveAsProcessId AddExcludeFileMaskToFilterRule AESDecryptFileWithKey RegisterIoRequest SetBooleanConfig AddIncludeProcessIdToFilterRule AddIncludeUserNameToFilterRule AddFileFilterRule RegisterFileChangedEventsToFilterRule RegisterMonitorIOToFilterRule RegisterControlIOToFilterRule AddEncryptionKeyAndIVToFilterRule AddEncryptionKeyToFilterRule AddBooleanConfigToFilterRule SetVolumeControlFlag AddExcludedProcessId GetLastErrorMessage AESDecryptFile AESEncryptFile SetFileSize ResetConfigData RemoveProcessIdRightsFromFilterRule AddProcessIdRightsToFilterRule GetAESHeader AddReparseFileMaskToFilterRule

kernel32

Sleep DeleteFileW GetSystemTime SystemTimeToFileTime SetFileAttributesW GetFileInformationByHandle MoveFileW SetFilePointer SetEndOfFile FindFirstFileW FindClose GetFileTime GetFileAttributesW FindNextFileW GetStdHandle SetConsoleTextAttribute OutputDebugStringW FormatMessageW LocalFree CreateEventW CreateThread WaitForSingleObject SetEvent GetFileSizeEx GetCurrentProcessId ReadFile CloseHandle WriteFile CreateFileW GetLastError CreateDirectoryW WideCharToMultiByte HeapAlloc HeapFree GetCommandLineW RaiseException RtlPcToFileHeader TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext EncodePointer DecodePointer HeapSize HeapReAlloc RtlUnwindEx EnterCriticalSection LeaveCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage FlsGetValue FlsSetValue FlsFree SetLastError GetCurrentThreadId FlsAlloc GetFileAttributesA GetProcAddress GetModuleHandleW ExitProcess GetModuleFileNameW HeapSetInformation GetVersion HeapCreate FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType GetStartupInfoW DeleteCriticalSection QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime LCMapStringW MultiByteToWideChar GetStringTypeW GetExitCodeProcess CreateProcessA LoadLibraryW GetConsoleCP GetConsoleMode FlushFileBuffers CompareStringW SetEnvironmentVariableA SetStdHandle WriteConsoleW

advapi32

RegisterServiceCtrlHandlerW GetFileSecurityW SetFileSecurityW GetUserNameW StartServiceCtrlDispatcherW SetServiceStatus LookupAccountSidW

Bin/win10x86/FilterAPI.dll

IMPHASH 4cd2f683f90837dbe18b46cd55118483
SHA256 e86e8d8950cdeff8fb1aea225a81da0acab253850e1b759ad45b8145c3bfcc5b
MD5 1fa51ae9d32ff5ae46127055eb92e756
SHA1 0935795959af00b66896d5ff97a508ef295d831b
SHA512 113c9e95d54046d0fa11a77c6cb9691ca1db0529a9b06451fac563fa871dd7555d412448a24a5a6da5bb28a85e25739b42bab62bad143cd65e5358a1372c7493
SSDEEP 3072:CFEGiujn6sfaEvL0r2ENTi2eZmHxqblhN1JtK4igHLY2:oE3ujVfaY0rMb1XUUU2
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Digest

9e:1a:a3:d0:05:b1:64:db:08:bc:3f:61:10:55:02:8f:86:72:3a:74:12:8d:c2:c3:97:d5:4a:76:cf:ad:24:e2

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Chains

Jan 7, 2022

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

4d:73:f7:62:42:d5:f3:75:78:dc:f5:75:b5:49:81:25:1b:db:45:62

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Chains

Jan 7, 2022

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Serial Number

0f:31:2f:ad:09:74:c5:12:c3:d6:5c:09:bd:62:fb:1c

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 11, 2019 - Nov 2, 2022

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Serial Number

0e:0a:2e:90:48:fa:06:fa:97:f5:26:31:d7:cd:2c:f1

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 11, 2019 - Nov 2, 2022

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

1

Major OS version

5

Entry point

46609

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\Development\Release\Win32\FilterAPI.pdb

fltlib

FilterLoad FilterReplyMessage FilterGetMessage FilterSendMessage FilterUnload FilterConnectCommunicationPort

kernel32

GetModuleFileNameW SystemTimeToFileTime GetComputerNameW GetCurrentProcessId GetSystemTime SetEndOfFile SetFileTime DeviceIoControl GetFileTime MultiByteToWideChar lstrcmpA LocalAlloc CopyFileW Sleep GetSystemDirectoryW CreateThread CreateToolhelp32Snapshot Process32NextW CreateEventW Process32FirstW ResetEvent SetLastError GetOverlappedResult OpenProcess GetCurrentProcess FormatMessageW OutputDebugStringW GetModuleHandleW SetFileAttributesW LocalFree DeleteFileW CloseHandle BackupRead WriteConsoleW SetStdHandle GetStringTypeW GetConsoleMode GetConsoleCP FlushFileBuffers SetFilePointer LoadLibraryW GetLastError GetFileSizeEx CreateFileW ReadFile GetFileAttributesW WriteFile BackupSeek SetFilePointerEx HeapFree HeapAlloc GetSystemTimeAsFileTime GetCurrentThreadId DecodePointer GetCommandLineA RaiseException TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent HeapCreate HeapDestroy GetProcAddress ExitProcess GetStdHandle EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement HeapSize HeapReAlloc EnterCriticalSection LeaveCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage WideCharToMultiByte LCMapStringW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType GetStartupInfoW DeleteCriticalSection GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount

advapi32

RegSetValueExW ReportEventW CloseEventLog OpenProcessToken PrivilegeCheck LookupPrivilegeValueW AdjustTokenPrivileges CreateServiceW CloseServiceHandle DeleteService OpenSCManagerW OpenServiceW RegCreateKeyExW RegDeleteKeyW QueryServiceStatus EnumServicesStatusExW OpenEventLogW RegCloseKey

rpcrt4

UuidCreate

bcrypt

BCryptOpenAlgorithmProvider BCryptEncrypt BCryptDestroyKey BCryptGetProperty BCryptSetProperty BCryptCloseAlgorithmProvider BCryptGenerateSymmetricKey

psapi

GetModuleFileNameExW

ntdll

NtQueryInformationFile RtlNtStatusToDosError RtlUnwind NtSetInformationFile

crypt32

CryptMsgClose CryptDecodeObject CryptQueryObject CertGetNameStringW CertFreeCertificateContext CertFindCertificateInStore CertCloseStore CryptMsgGetParam

AESDecryptBytes AESDecryptFile AESDecryptFileToFile AESDecryptFileWithKey AESEncryptDecryptBuffer AESEncryptFile AESEncryptFileToFile AESEncryptFileToFileWithTag AESEncryptFileWithTag ActivateLicense AddAESHeader AddBlockSaveAsProcessId AddBooleanConfigToFilterRule AddCreateFilterToFilterRule AddEncryptionKeyAndIVToFilterRule AddEncryptionKeyToFilterRule AddExcludeFileMaskToFilterRule AddExcludeProcessIdToFilterRule AddExcludeProcessNameToFilterRule AddExcludeUserNameToFilterRule AddExcludedProcessId AddFileCallbackIOToProcessByName AddFileControlToProcessById AddFileControlToProcessByName AddFileFilterRule AddFilterRule AddHiddenFileMaskToFilterRule AddIncludeProcessIdToFilterRule AddIncludeProcessNameToFilterRule AddIncludeUserNameToFilterRule AddIncludedProcessId AddNewFilterRule AddProcessFilterRule AddProcessIdRightsToFilterRule AddProcessRightsToFilterRule AddProtectedProcessId AddRegistryFilterRule AddRegistryFilterRuleByProcessId AddRegistryFilterRuleByProcessName AddReparseFileMaskToFilterRule AddReparseTagData AddTagData AddUserRightsToFilterRule CloseFileHandleInFilter CreateFileAPI CreateStubFile CreateStubFileEx Disconnect EnableReparsePointTagEncryption GetAESHeader GetAESIV GetAESTagData GetFileHandleInFilter GetLastErrorMessage GetTagData GetUniqueComputerId InstallDriver IsDriverServiceRunning OpenStubFile QueryAllocatedRanges RegisterControlIOToFilterRule RegisterEventTypeToFilterRule RegisterFileChangedEventsToFilterRule RegisterIoRequest RegisterMessageCallback RegisterMonitorIOToFilterRule RemoveBlockSaveAsProcessId RemoveBooleanConfigFromFilterRule RemoveExcludeProcessId RemoveFileControlFromProcessById RemoveFileControlFromProcessByName RemoveFilterRule RemoveIncludeProcessId RemoveProcessFilterRule RemoveProcessIdRightsFromFilterRule RemoveProcessRightsFromFilterRule RemoveProtectedProcessId RemoveRegistryFilterRuleByProcessId RemoveRegistryFilterRuleByProcessName RemoveTagData ResetConfigData SetAESHeaderSize SetAESVersion SetBooleanConfig SetConnectionTimeout SetFileSize SetFilterType SetHeaderFlags SetIntegerData SetMaxMonitorEventBuffersize SetRegistrationKey SetStringData SetVolumeControlFlag UnInstallDriver

Bin/win10x86/FilterAPI.lib

SHA256 b9b004877de5060e49c309e39aef65e7a7e9102131edf0250274c6cbf3622146
MD5 e30c69b6c7a2cd4f485d00c726207e88
SHA1 59ca718da897972d7fbdba54df0b6764b5d65ee9
SHA512 8aef41e0a77bdb61d28fb90d14292426387c8d4ba43416f62195578353376e10049cfe1086cae65fd99a28036b9268b9b27e5b9a59d1d50968fe1eada9d46e95
SSDEEP 384:dhlVW6xPtetqO194zWmZ4J391vzNcQ41UtbZW+rTDO7tSDAuTWHoHvZAf+WMJiNC:ddW4tetqOP4zWmZ4J39Vz+Q41Ut9WsTp
MD5 SHA1 SHA512 SSDEEP

Bin/win32/EaseFlt.sys

IMPHASH 238130533875d6f37a1c37123c9ce112
SHA256 96f3d827902d0c2d73f51a3beb12a56961bdf56838aa76a9d066fdd0e0c83b32
MD5 51a2d87f8049f0045dd3d19ab8db1c03
SHA1 cfc6c5030f664bba8260e9eebd949b36428739e8
SHA512 628e873dd3cda7a2a8088e0e4fca8dc588f46fb1b1f6e43ecdb22065526635c5ac54cad83a5a2b8a402bd7d67e0fce472dcf1bb062e3c0f64624874530176770
SSDEEP 3072:ZvImjgw8XPGgB6COlu66muL5yZzpqRN+Dh:ZvImjB89tkzk6h
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Digest

24:8d:cb:7b:93:3c:c3:6b:91:7c:46:83:4d:36:cd:11:0f:d9:91:37:aa:3e:08:ee:c4:2f:5f:57:c6:11:cb:52

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Chains

Jan 7, 2022

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

3b:99:d6:dd:83:88:a1:ea:84:84:28:b6:79:91:c0:76:aa:da:23:f6

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Chains

Jan 7, 2022

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

61:20:4d:b4:00:00:00:00:00:27

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 15, 2011 - Apr 15, 2021

Subject

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Serial Number

0f:31:2f:ad:09:74:c5:12:c3:d6:5c:09:bd:62:fb:1c

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 11, 2019 - Nov 2, 2022

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Serial Number

0e:0a:2e:90:48:fa:06:fa:97:f5:26:31:d7:cd:2c:f1

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 11, 2019 - Nov 2, 2022

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

1

Major OS version

6

Entry point

134974

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

d:\development\filterdriver\easefilter\source\objfre_wxp_x86\i386\EaseFlt.pdb

ntoskrnl.exe

IoSetTopLevelIrp ExAcquireResourceSharedLite RtlDeleteElementGenericTable RtlGetElementGenericTable RtlNumberGenericTableElements RtlLookupElementGenericTable RtlInsertElementGenericTable PsGetProcessId PsGetThreadId PsGetThreadProcessId PsThreadType PsSetCreateThreadNotifyRoutine PsProcessType RtlInitializeGenericTable ExUuidCreate ZwQueryDirectoryFile ZwDeleteKey ZwCreateKey ZwSetValueKey RtlIntegerToUnicodeString ZwDeleteValueKey RtlStringFromGUID ZwWriteFile PsTerminateSystemThread KeWaitForMultipleObjects PsCreateSystemThread ObQueryNameString CmRegisterCallback CmUnRegisterCallback ZwReadFile ZwQueryInformationFile KeTickCount KeBugCheckEx MmUnlockPages PsGetCurrentProcessId RtlUpcaseUnicodeString FsRtlIsNameInExpression KeSetEvent MmBuildMdlForNonPagedPool RtlLengthSecurityDescriptor FsRtlTeardownPerStreamContexts FsRtlInitializeFileLock RtlCopyUnicodeString DbgPrint memmove KeWaitForSingleObject ZwOpenKey ZwQueryValueKey IoAllocateMdl MmProbeAndLockPages MmMapLockedPagesSpecifyCache IoFreeMdl ExSystemTimeToLocalTime RtlTimeToTimeFields RtlAppendUnicodeToString RtlAppendUnicodeStringToString _vsnwprintf RtlSetDaclSecurityDescriptor ExInitializeNPagedLookasideList _alldiv _allmul KeQuerySystemTime ExDeleteNPagedLookasideList InterlockedPushEntrySList InterlockedPopEntrySList ExAcquireResourceExclusiveLite CcFlushCache CcUninitializeCacheMap ExReleaseResourceLite FsRtlUninitializeFileLock PsGetCurrentThreadId ZwOpenThreadTokenEx ZwOpenProcessTokenEx ZwQueryInformationToken RtlValidSid ZwClose ExDeleteResourceLite IoVolumeDeviceToDosName ExInitializeResourceLite ObfDereferenceObject RtlCompareUnicodeString MmSystemRangeStart MmIsAddressValid KeInitializeEvent IoWMIRegistrationControl RtlCompareMemory MmForceSectionClosed ObReferenceObjectByHandle RtlInitUnicodeString MmGetSystemRoutineAddress memset memcpy ExAllocatePoolWithTag IoWMIWriteEvent PsRemoveCreateThreadNotifyRoutine ExFreePoolWithTag PsGetVersion RtlUnwind

hal

KfAcquireSpinLock KfReleaseSpinLock KeGetCurrentIrql ExAcquireFastMutex ExReleaseFastMutex

fltmgr.sys

FltParseFileNameInformation FltStartFiltering FltRegisterFilter FltReleaseContext FltReferenceContext FltGetInstanceContext FltSetCallbackDataDirty FltCheckAndGrowNameControl FltGetFileNameInformationUnsafe FltWriteFile FltSetInformationFile FltInitializeOplock FltReadFile FltAllocatePoolAlignedWithTag FltDoCompletionProcessingWhenSafe FltLockUserBuffer FltAllocateCallbackData FltPerformSynchronousIo FltFreeCallbackData FltIsDirectory FltGetRoutineAddress FltBuildDefaultSecurityDescriptor FltCreateCommunicationPort FltFreeSecurityDescriptor FltCreateFile FltSendMessage FltCloseClientPort FltCloseCommunicationPort FltGetFileNameInformation FltGetDestinationFileNameInformation FltGetStreamContext FltReleaseFileNameInformation FltSetStreamHandleContext FltFreePoolAlignedWithTag FltUninitializeOplock FltClose FltGetRequestorProcessId FltSetStreamContext FltQueryInformationFile FltAcquireResourceExclusive FltReleaseResource FltDeleteInstanceContext FltGetDiskDeviceObject FltGetVolumeName FltAllocateContext FltGetVolumeProperties FltSetInstanceContext FltDeleteContext FltGetStreamHandleContext FltUnregisterFilter

ksecdd.sys

SecLookupAccountSid

cng.sys

BCryptGetProperty BCryptOpenAlgorithmProvider BCryptCloseAlgorithmProvider BCryptDestroyKey BCryptEncrypt BCryptSetProperty BCryptGenerateSymmetricKey

Name

.text

Size

111KB

Virtual Size

111KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

PAGE

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

INIT

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

1016B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Bin/win32/EaseFltCPPDemo.exe

IMPHASH d75ed198aa54007cbaf3ee976e0a5261
SHA256 539c054203ab770ef639383e92746fb58e065d300ea614e52075cf873e31d575
MD5 cbad51b3999ac34627d0e08ff16cecc9
SHA1 9d84d506dd53d255d47bd7b5b71261f06fdd073e
SHA512 45ae16cb9e3bf29bef731a7806f5c10c94fb88de7639cfba274a2fd0fd195f3acd19f0718eec4735ade482296e8ab6986c5683940dbb6237a9a7b08c5b18654d
SSDEEP 3072:2RaTGfDQ+QnkJZEGJgFww0lTj6V5pYHfrRtHle3aedgSS7yCaScbQEX9c:gaik+mkDpXlTj65pYHfrRtHlI67yCzE6
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Digest

92:f8:32:54:55:3a:35:aa:6c:98:ab:ec:90:8d:52:aa:d1:a5:ed:cc:1c:49:75:e6:c5:db:4c:60:db:c8:a3:c0

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Chains

Jan 7, 2022

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

bd:6f:51:ef:05:21:0a:70:ae:db:b4:f4:0b:f0:d7:17:92:f2:7b:52

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Chains

Jan 7, 2022

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Serial Number

0f:31:2f:ad:09:74:c5:12:c3:d6:5c:09:bd:62:fb:1c

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 11, 2019 - Nov 2, 2022

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Serial Number

0e:0a:2e:90:48:fa:06:fa:97:f5:26:31:d7:cd:2c:f1

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 11, 2019 - Nov 2, 2022

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

2

Major OS version

5

Entry point

32216

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\Development\Release\EaseFltCPPDemo.pdb

filterapi

GetUniqueComputerId UnInstallDriver InstallDriver SetRegistrationKey RegisterMessageCallback Disconnect IsDriverServiceRunning SetConnectionTimeout SetFilterType AddProcessFilterRule AddFileControlToProcessByName AddRegistryFilterRule AddNewFilterRule RemoveBlockSaveAsProcessId AddExcludeFileMaskToFilterRule AESDecryptFileWithKey RegisterIoRequest SetBooleanConfig AddIncludeProcessIdToFilterRule AddIncludeUserNameToFilterRule AddFileFilterRule RegisterFileChangedEventsToFilterRule RegisterMonitorIOToFilterRule RegisterControlIOToFilterRule AddEncryptionKeyAndIVToFilterRule AddEncryptionKeyToFilterRule AddBooleanConfigToFilterRule SetVolumeControlFlag AddExcludedProcessId GetLastErrorMessage AESDecryptFile AESEncryptFile SetFileSize ResetConfigData RemoveProcessIdRightsFromFilterRule AddProcessIdRightsToFilterRule GetAESHeader AddReparseFileMaskToFilterRule

kernel32

Sleep DeleteFileW GetSystemTime SystemTimeToFileTime SetFileAttributesW GetFileInformationByHandle MoveFileW SetFilePointer SetEndOfFile FindFirstFileW FindClose GetFileTime GetFileAttributesW FindNextFileW GetStdHandle SetConsoleTextAttribute OutputDebugStringW FormatMessageW LocalFree CreateEventW CreateThread WaitForSingleObject SetEvent GetFileSizeEx GetCurrentProcessId ReadFile CloseHandle WriteFile CreateFileW GetLastError CreateDirectoryW WideCharToMultiByte HeapAlloc HeapFree GetCommandLineW RaiseException RtlPcToFileHeader TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext EncodePointer DecodePointer HeapSize HeapReAlloc RtlUnwindEx EnterCriticalSection LeaveCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage FlsGetValue FlsSetValue FlsFree SetLastError GetCurrentThreadId FlsAlloc GetFileAttributesA GetProcAddress GetModuleHandleW ExitProcess GetModuleFileNameW HeapSetInformation GetVersion HeapCreate FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType GetStartupInfoW DeleteCriticalSection QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime LCMapStringW MultiByteToWideChar GetStringTypeW GetExitCodeProcess CreateProcessA LoadLibraryW GetConsoleCP GetConsoleMode FlushFileBuffers CompareStringW SetEnvironmentVariableA SetStdHandle WriteConsoleW

advapi32

RegisterServiceCtrlHandlerW GetFileSecurityW SetFileSecurityW GetUserNameW StartServiceCtrlDispatcherW SetServiceStatus LookupAccountSidW

Bin/win32/FilterAPI.dll

IMPHASH 4cd2f683f90837dbe18b46cd55118483
SHA256 e86e8d8950cdeff8fb1aea225a81da0acab253850e1b759ad45b8145c3bfcc5b
MD5 1fa51ae9d32ff5ae46127055eb92e756
SHA1 0935795959af00b66896d5ff97a508ef295d831b
SHA512 113c9e95d54046d0fa11a77c6cb9691ca1db0529a9b06451fac563fa871dd7555d412448a24a5a6da5bb28a85e25739b42bab62bad143cd65e5358a1372c7493
SSDEEP 3072:CFEGiujn6sfaEvL0r2ENTi2eZmHxqblhN1JtK4igHLY2:oE3ujVfaY0rMb1XUUU2
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Digest

9e:1a:a3:d0:05:b1:64:db:08:bc:3f:61:10:55:02:8f:86:72:3a:74:12:8d:c2:c3:97:d5:4a:76:cf:ad:24:e2

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Chains

Jan 7, 2022

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

4d:73:f7:62:42:d5:f3:75:78:dc:f5:75:b5:49:81:25:1b:db:45:62

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Chains

Jan 7, 2022

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Serial Number

0f:31:2f:ad:09:74:c5:12:c3:d6:5c:09:bd:62:fb:1c

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 11, 2019 - Nov 2, 2022

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Serial Number

0e:0a:2e:90:48:fa:06:fa:97:f5:26:31:d7:cd:2c:f1

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 11, 2019 - Nov 2, 2022

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

1

Major OS version

5

Entry point

46609

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\Development\Release\Win32\FilterAPI.pdb

fltlib

FilterLoad FilterReplyMessage FilterGetMessage FilterSendMessage FilterUnload FilterConnectCommunicationPort

kernel32

GetModuleFileNameW SystemTimeToFileTime GetComputerNameW GetCurrentProcessId GetSystemTime SetEndOfFile SetFileTime DeviceIoControl GetFileTime MultiByteToWideChar lstrcmpA LocalAlloc CopyFileW Sleep GetSystemDirectoryW CreateThread CreateToolhelp32Snapshot Process32NextW CreateEventW Process32FirstW ResetEvent SetLastError GetOverlappedResult OpenProcess GetCurrentProcess FormatMessageW OutputDebugStringW GetModuleHandleW SetFileAttributesW LocalFree DeleteFileW CloseHandle BackupRead WriteConsoleW SetStdHandle GetStringTypeW GetConsoleMode GetConsoleCP FlushFileBuffers SetFilePointer LoadLibraryW GetLastError GetFileSizeEx CreateFileW ReadFile GetFileAttributesW WriteFile BackupSeek SetFilePointerEx HeapFree HeapAlloc GetSystemTimeAsFileTime GetCurrentThreadId DecodePointer GetCommandLineA RaiseException TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent HeapCreate HeapDestroy GetProcAddress ExitProcess GetStdHandle EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement HeapSize HeapReAlloc EnterCriticalSection LeaveCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage WideCharToMultiByte LCMapStringW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType GetStartupInfoW DeleteCriticalSection GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount

advapi32

RegSetValueExW ReportEventW CloseEventLog OpenProcessToken PrivilegeCheck LookupPrivilegeValueW AdjustTokenPrivileges CreateServiceW CloseServiceHandle DeleteService OpenSCManagerW OpenServiceW RegCreateKeyExW RegDeleteKeyW QueryServiceStatus EnumServicesStatusExW OpenEventLogW RegCloseKey

rpcrt4

UuidCreate

bcrypt

BCryptOpenAlgorithmProvider BCryptEncrypt BCryptDestroyKey BCryptGetProperty BCryptSetProperty BCryptCloseAlgorithmProvider BCryptGenerateSymmetricKey

psapi

GetModuleFileNameExW

ntdll

NtQueryInformationFile RtlNtStatusToDosError RtlUnwind NtSetInformationFile

crypt32

CryptMsgClose CryptDecodeObject CryptQueryObject CertGetNameStringW CertFreeCertificateContext CertFindCertificateInStore CertCloseStore CryptMsgGetParam

AESDecryptBytes AESDecryptFile AESDecryptFileToFile AESDecryptFileWithKey AESEncryptDecryptBuffer AESEncryptFile AESEncryptFileToFile AESEncryptFileToFileWithTag AESEncryptFileWithTag ActivateLicense AddAESHeader AddBlockSaveAsProcessId AddBooleanConfigToFilterRule AddCreateFilterToFilterRule AddEncryptionKeyAndIVToFilterRule AddEncryptionKeyToFilterRule AddExcludeFileMaskToFilterRule AddExcludeProcessIdToFilterRule AddExcludeProcessNameToFilterRule AddExcludeUserNameToFilterRule AddExcludedProcessId AddFileCallbackIOToProcessByName AddFileControlToProcessById AddFileControlToProcessByName AddFileFilterRule AddFilterRule AddHiddenFileMaskToFilterRule AddIncludeProcessIdToFilterRule AddIncludeProcessNameToFilterRule AddIncludeUserNameToFilterRule AddIncludedProcessId AddNewFilterRule AddProcessFilterRule AddProcessIdRightsToFilterRule AddProcessRightsToFilterRule AddProtectedProcessId AddRegistryFilterRule AddRegistryFilterRuleByProcessId AddRegistryFilterRuleByProcessName AddReparseFileMaskToFilterRule AddReparseTagData AddTagData AddUserRightsToFilterRule CloseFileHandleInFilter CreateFileAPI CreateStubFile CreateStubFileEx Disconnect EnableReparsePointTagEncryption GetAESHeader GetAESIV GetAESTagData GetFileHandleInFilter GetLastErrorMessage GetTagData GetUniqueComputerId InstallDriver IsDriverServiceRunning OpenStubFile QueryAllocatedRanges RegisterControlIOToFilterRule RegisterEventTypeToFilterRule RegisterFileChangedEventsToFilterRule RegisterIoRequest RegisterMessageCallback RegisterMonitorIOToFilterRule RemoveBlockSaveAsProcessId RemoveBooleanConfigFromFilterRule RemoveExcludeProcessId RemoveFileControlFromProcessById RemoveFileControlFromProcessByName RemoveFilterRule RemoveIncludeProcessId RemoveProcessFilterRule RemoveProcessIdRightsFromFilterRule RemoveProcessRightsFromFilterRule RemoveProtectedProcessId RemoveRegistryFilterRuleByProcessId RemoveRegistryFilterRuleByProcessName RemoveTagData ResetConfigData SetAESHeaderSize SetAESVersion SetBooleanConfig SetConnectionTimeout SetFileSize SetFilterType SetHeaderFlags SetIntegerData SetMaxMonitorEventBuffersize SetRegistrationKey SetStringData SetVolumeControlFlag UnInstallDriver

Bin/win32/FilterAPI.lib

SHA256 b9b004877de5060e49c309e39aef65e7a7e9102131edf0250274c6cbf3622146
MD5 e30c69b6c7a2cd4f485d00c726207e88
SHA1 59ca718da897972d7fbdba54df0b6764b5d65ee9
SHA512 8aef41e0a77bdb61d28fb90d14292426387c8d4ba43416f62195578353376e10049cfe1086cae65fd99a28036b9268b9b27e5b9a59d1d50968fe1eada9d46e95
SSDEEP 384:dhlVW6xPtetqO194zWmZ4J391vzNcQ41UtbZW+rTDO7tSDAuTWHoHvZAf+WMJiNC:ddW4tetqOP4zWmZ4J39Vz+Q41Ut9WsTp
MD5 SHA1 SHA512 SSDEEP

Bin/x64/EaseFlt.sys

IMPHASH 48f2ba08eb03bc96cb417e3ece40313d
SHA256 f27413b7e3a428ce475eeaef131274502d332d7da6ae3a85bb9f22f427be5e1e
MD5 29cd351b4f15bee9d418c007e8cf2476
SHA1 7a8fcd3e416a3a34dc81c2317ebfb88f187dfb08
SHA512 b35126bed8679d285e4e339ca2114c11cce1355848807391e3a43a9d4fe10553a5fc5df9254c64c82eda73f1f1976b1a1461238898b2ce616c5ede3231450bdc
SSDEEP 3072:D/B2V+IRYee+tz6hmSAStnmLWnq3DX5XAMvwTyIUx/739+q:Dp/09EhAGnq3DXauwTCxEq
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Digest

52:2e:97:3a:2a:03:8d:40:32:e5:36:50:f0:de:3c:26:ea:97:84:81:6c:f0:83:51:48:41:a8:49:df:f9:83:e5

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Chains

Jan 7, 2022

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

6b:2d:b1:a2:38:07:7e:83:0b:cc:4a:68:a4:4b:ab:01:8f:68:a9:84

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Chains

Jan 7, 2022

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

61:20:4d:b4:00:00:00:00:00:27

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 15, 2011 - Apr 15, 2021

Subject

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Serial Number

0f:31:2f:ad:09:74:c5:12:c3:d6:5c:09:bd:62:fb:1c

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 11, 2019 - Nov 2, 2022

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Serial Number

0e:0a:2e:90:48:fa:06:fa:97:f5:26:31:d7:cd:2c:f1

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 11, 2019 - Nov 2, 2022

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

1

Major OS version

6

Entry point

196708

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

d:\development\filterdriver\easefilter\source\objfre_wnet_amd64\amd64\EaseFlt.pdb

ntoskrnl.exe

ExUuidCreate ExAcquireResourceSharedLite FsRtlInitializeFileLock IoSetTopLevelIrp ObReferenceObjectByHandle MmUnlockPages PsProcessType RtlNumberGenericTableElements RtlGetElementGenericTable PsRemoveCreateThreadNotifyRoutine PsSetCreateThreadNotifyRoutine PsGetThreadId RtlDeleteElementGenericTable RtlLookupElementGenericTable PsThreadType PsGetThreadProcessId PsGetProcessId FsRtlIsNameInExpression RtlInsertElementGenericTable ZwQueryDirectoryFile ZwCreateKey RtlIntegerToUnicodeString ZwDeleteValueKey ZwSetValueKey ZwDeleteKey RtlStringFromGUID KeReleaseSpinLock PsCreateSystemThread PsTerminateSystemThread KeWaitForMultipleObjects ZwWriteFile KeAcquireSpinLockRaiseToDpc ObQueryNameString CmRegisterCallback CmUnRegisterCallback ZwReadFile ZwQueryInformationFile KeBugCheckEx KeSetEvent RtlUpcaseUnicodeString MmBuildMdlForNonPagedPool MmForceSectionClosed FsRtlTeardownPerStreamContexts RtlCopyUnicodeString ZwOpenKey IoAllocateMdl DbgPrint MmProbeAndLockPages RtlTimeToTimeFields KeWaitForSingleObject RtlAppendUnicodeStringToString _vsnwprintf ZwQueryValueKey ExSystemTimeToLocalTime MmMapLockedPagesSpecifyCache IoFreeMdl RtlAppendUnicodeToString ExDeleteNPagedLookasideList ExQueryDepthSList ExpInterlockedPopEntrySList ExpInterlockedPushEntrySList RtlSetDaclSecurityDescriptor ExInitializeNPagedLookasideList FsRtlUninitializeFileLock ZwQueryInformationToken ExInitializeResourceLite ObfDereferenceObject MmIsAddressValid PsGetCurrentThreadId ExDeleteResourceLite RtlCompareUnicodeString ZwClose ExReleaseResourceLite IoVolumeDeviceToDosName ZwOpenProcessTokenEx CcFlushCache RtlValidSid KeInitializeEvent CcUninitializeCacheMap ExAcquireFastMutex ZwOpenThreadTokenEx ExReleaseFastMutex ExAcquireResourceExclusiveLite MmSystemRangeStart RtlCompareMemory RtlLengthSecurityDescriptor PsGetCurrentProcessId MmGetSystemRoutineAddress RtlInitUnicodeString IoWMIWriteEvent ExFreePoolWithTag IoWMIRegistrationControl RtlInitializeGenericTable ExAllocatePoolWithTag PsGetVersion __C_specific_handler _local_unwind

fltmgr.sys

FltSendMessage FltUnregisterFilter FltRegisterFilter FltStartFiltering FltGetStreamHandleContext FltGetInstanceContext FltGetStreamContext FltGetFileNameInformationUnsafe FltCheckAndGrowNameControl FltReadFile FltSetInformationFile FltInitializeOplock FltWriteFile FltAllocatePoolAlignedWithTag FltDoCompletionProcessingWhenSafe FltLockUserBuffer FltAllocateCallbackData FltPerformSynchronousIo FltFreeCallbackData FltIsDirectory FltGetRoutineAddress FltBuildDefaultSecurityDescriptor FltCloseCommunicationPort FltCreateFile FltFreeSecurityDescriptor FltCreateCommunicationPort FltCloseClientPort FltSetCallbackDataDirty FltFreePoolAlignedWithTag FltParseFileNameInformation FltReleaseFileNameInformation FltAcquireResourceExclusive FltUninitializeOplock FltGetVolumeName FltGetFileNameInformation FltAllocateContext FltClose FltReleaseContext FltReleaseResource FltQueryInformationFile FltGetVolumeProperties FltGetDiskDeviceObject FltSetInstanceContext FltDeleteContext FltGetDestinationFileNameInformation FltSetStreamContext FltReferenceContext FltGetRequestorProcessId FltDeleteInstanceContext FltSetStreamHandleContext

ksecdd.sys

SecLookupAccountSid

cng.sys

BCryptOpenAlgorithmProvider BCryptGenerateSymmetricKey BCryptCloseAlgorithmProvider BCryptSetProperty BCryptDestroyKey BCryptEncrypt BCryptGetProperty

Name

.text

Size

148KB

Virtual Size

148KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

15KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

PAGE

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

INIT

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

1016B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

1024B

Virtual Size

618B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Bin/x64/EaseFltCPPDemo.exe

IMPHASH d75ed198aa54007cbaf3ee976e0a5261
SHA256 314e650dfbb2334cdc2a4c42fde1a177cd82c5ba3d4dc93fc171a94384259229
MD5 3df012c3980647d039356ddafe586744
SHA1 d761e92cf94170d3ac074937aeb6b505e16eb709
SHA512 fb907905ffd350b0edaf2ae993afb961694d55ae4ef17578658e07ea87fdf8aef69305c878c68407562912e93152a789b1c845043fb3cf1c24009b35c23f8376
SSDEEP 3072:ARaTGfDQ+QnkJZEGJgFww0lTj6V5pYHfrRtHle3aengSS7yCVScbQEXmc:6aik+mkDpXlTj65pYHfrRtHlIU7yCUEz
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Digest

fe:1f:6e:06:f9:f5:5e:77:f4:42:a4:f9:1f:f5:5b:64:9a:e8:fb:ca:38:e6:94:29:9c:bc:a5:40:04:c5:ea:70

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Chains

Jan 7, 2022

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

87:93:98:aa:88:70:c1:6e:d7:df:47:5a:11:87:0e:4c:f3:d5:5e:81

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Chains

Jan 7, 2022

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Serial Number

0f:31:2f:ad:09:74:c5:12:c3:d6:5c:09:bd:62:fb:1c

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 11, 2019 - Nov 2, 2022

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Serial Number

0e:0a:2e:90:48:fa:06:fa:97:f5:26:31:d7:cd:2c:f1

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 11, 2019 - Nov 2, 2022

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

2

Major OS version

5

Entry point

32216

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\Development\Release\EaseFltCPPDemo.pdb

filterapi

GetUniqueComputerId UnInstallDriver InstallDriver SetRegistrationKey RegisterMessageCallback Disconnect IsDriverServiceRunning SetConnectionTimeout SetFilterType AddProcessFilterRule AddFileControlToProcessByName AddRegistryFilterRule AddNewFilterRule RemoveBlockSaveAsProcessId AddExcludeFileMaskToFilterRule AESDecryptFileWithKey RegisterIoRequest SetBooleanConfig AddIncludeProcessIdToFilterRule AddIncludeUserNameToFilterRule AddFileFilterRule RegisterFileChangedEventsToFilterRule RegisterMonitorIOToFilterRule RegisterControlIOToFilterRule AddEncryptionKeyAndIVToFilterRule AddEncryptionKeyToFilterRule AddBooleanConfigToFilterRule SetVolumeControlFlag AddExcludedProcessId GetLastErrorMessage AESDecryptFile AESEncryptFile SetFileSize ResetConfigData RemoveProcessIdRightsFromFilterRule AddProcessIdRightsToFilterRule GetAESHeader AddReparseFileMaskToFilterRule

kernel32

Sleep DeleteFileW GetSystemTime SystemTimeToFileTime SetFileAttributesW GetFileInformationByHandle MoveFileW SetFilePointer SetEndOfFile FindFirstFileW FindClose GetFileTime GetFileAttributesW FindNextFileW GetStdHandle SetConsoleTextAttribute OutputDebugStringW FormatMessageW LocalFree CreateEventW CreateThread WaitForSingleObject SetEvent GetFileSizeEx GetCurrentProcessId ReadFile CloseHandle WriteFile CreateFileW GetLastError CreateDirectoryW WideCharToMultiByte HeapAlloc HeapFree GetCommandLineW RaiseException RtlPcToFileHeader TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext EncodePointer DecodePointer HeapSize HeapReAlloc RtlUnwindEx EnterCriticalSection LeaveCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage FlsGetValue FlsSetValue FlsFree SetLastError GetCurrentThreadId FlsAlloc GetFileAttributesA GetProcAddress GetModuleHandleW ExitProcess GetModuleFileNameW HeapSetInformation GetVersion HeapCreate FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType GetStartupInfoW DeleteCriticalSection QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime LCMapStringW MultiByteToWideChar GetStringTypeW GetExitCodeProcess CreateProcessA LoadLibraryW GetConsoleCP GetConsoleMode FlushFileBuffers CompareStringW SetEnvironmentVariableA SetStdHandle WriteConsoleW

advapi32

RegisterServiceCtrlHandlerW GetFileSecurityW SetFileSecurityW GetUserNameW StartServiceCtrlDispatcherW SetServiceStatus LookupAccountSidW

Bin/x64/FilterAPI.dll

IMPHASH a868be19be7845c81e1a1ebf14031fb0
SHA256 c1a448498019b3aff1b0f85ccc3448cf2757e02033c4beff08af68f760f96131
MD5 e12436cc453273482dfb150a6d7c48d2
SHA1 80ca5bae05cb93c4b3b935bc63c14ead9e3d7cbb
SHA512 dc42f06cdbdc0762a8f87448b815bd1228fb96cd2a128fd8b6ea6634775031b50fa5a29dde7d211f6ae334811a8dd9e6483a8d8a8e80948eadac382094fd49ee
SSDEEP 6144:kHbJF+imBQkrZXvWJCiT4ofKcZ/x4OcyvFW/GnhaZ:k7yXekduicIC0/GY
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Digest

ad:7c:8a:31:d6:7c:ea:a6:9a:ff:fd:21:d9:e3:f2:20:46:2e:fd:18:34:5e:45:83:70:d7:6d:e6:1f:88:d9:03

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Chains

Jan 7, 2022

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

1e:cd:d8:d0:70:bd:bb:d8:eb:a6:59:fd:4b:4e:a7:01:bc:e6:e0:61

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Chains

Jan 7, 2022

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Serial Number

0f:31:2f:ad:09:74:c5:12:c3:d6:5c:09:bd:62:fb:1c

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 11, 2019 - Nov 2, 2022

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Serial Number

0e:0a:2e:90:48:fa:06:fa:97:f5:26:31:d7:cd:2c:f1

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 11, 2019 - Nov 2, 2022

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

2

Major OS version

5

Entry point

68300

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\Development\Release\x64\FilterAPI.pdb

fltlib

FilterConnectCommunicationPort FilterGetMessage FilterReplyMessage FilterLoad FilterUnload FilterSendMessage

kernel32

GetModuleFileNameW SystemTimeToFileTime GetComputerNameW GetCurrentProcessId GetSystemTime SetEndOfFile SetFileTime DeviceIoControl GetFileTime MultiByteToWideChar lstrcmpA LocalAlloc lstrcpyW Process32FirstW ResetEvent SetLastError GetOverlappedResult OpenProcess GetCurrentProcess FormatMessageW OutputDebugStringW GetModuleHandleW SetFileAttributesW LocalFree DeleteFileW CloseHandle BackupRead CopyFileW GetFileSizeEx CreateFileW ReadFile GetFileAttributesW WriteFile WriteConsoleW SetStdHandle IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID GetStringTypeW GetConsoleMode GetConsoleCP SetFilePointer FlushFileBuffers GetLocaleInfoW LoadLibraryW FreeLibrary SetConsoleCtrlHandler FatalAppExitA GetTickCount QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetModuleFileNameA BackupSeek SetFilePointerEx Sleep GetSystemDirectoryW CreateThread CreateToolhelp32Snapshot Process32NextW GetLastError CreateEventW HeapFree HeapAlloc GetSystemTimeAsFileTime GetCurrentThreadId FlsSetValue GetCommandLineA RaiseException TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapSetInformation GetVersion HeapCreate HeapDestroy GetProcAddress ExitProcess DecodePointer GetStdHandle EncodePointer FlsGetValue FlsFree GetCurrentThread FlsAlloc HeapSize HeapQueryInformation HeapReAlloc EnterCriticalSection LeaveCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage WideCharToMultiByte LCMapStringW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType GetStartupInfoW DeleteCriticalSection

advapi32

OpenEventLogW CloseEventLog OpenProcessToken PrivilegeCheck LookupPrivilegeValueW AdjustTokenPrivileges CreateServiceW CloseServiceHandle DeleteService EnumServicesStatusExW RegSetValueExW RegCloseKey ControlService QueryServiceStatus RegDeleteKeyW RegCreateKeyExW OpenServiceW OpenSCManagerW ReportEventW

rpcrt4

UuidCreate

bcrypt

BCryptOpenAlgorithmProvider BCryptCloseAlgorithmProvider BCryptSetProperty BCryptDestroyKey BCryptGenerateSymmetricKey BCryptEncrypt BCryptGetProperty

psapi

GetModuleFileNameExW

ntdll

NtSetInformationFile NtQueryInformationFile RtlNtStatusToDosError RtlPcToFileHeader RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext RtlUnwindEx

crypt32

CryptDecodeObject CryptQueryObject CertGetNameStringW CertFreeCertificateContext CertFindCertificateInStore CertCloseStore CryptMsgGetParam CryptMsgClose

AESDecryptBytes AESDecryptFile AESDecryptFileToFile AESDecryptFileWithKey AESEncryptDecryptBuffer AESEncryptFile AESEncryptFileToFile AESEncryptFileToFileWithTag AESEncryptFileWithTag ActivateLicense AddAESHeader AddBlockSaveAsProcessId AddBooleanConfigToFilterRule AddCreateFilterToFilterRule AddEncryptionKeyAndIVToFilterRule AddEncryptionKeyToFilterRule AddExcludeFileMaskToFilterRule AddExcludeProcessIdToFilterRule AddExcludeProcessNameToFilterRule AddExcludeUserNameToFilterRule AddExcludedProcessId AddFileCallbackIOToProcessByName AddFileControlToProcessById AddFileControlToProcessByName AddFileFilterRule AddFilterRule AddHiddenFileMaskToFilterRule AddIncludeProcessIdToFilterRule AddIncludeProcessNameToFilterRule AddIncludeUserNameToFilterRule AddIncludedProcessId AddNewFilterRule AddProcessFilterRule AddProcessIdRightsToFilterRule AddProcessRightsToFilterRule AddProtectedProcessId AddRegistryFilterRule AddRegistryFilterRuleByProcessId AddRegistryFilterRuleByProcessName AddReparseFileMaskToFilterRule AddReparseTagData AddTagData AddUserRightsToFilterRule CloseFileHandleInFilter CreateFileAPI CreateStubFile CreateStubFileEx Disconnect EnableReparsePointTagEncryption GetAESHeader GetAESIV GetAESTagData GetFileHandleInFilter GetLastErrorMessage GetTagData GetUniqueComputerId InstallDriver IsDriverServiceRunning OpenStubFile QueryAllocatedRanges RegisterControlIOToFilterRule RegisterEventTypeToFilterRule RegisterFileChangedEventsToFilterRule RegisterIoRequest RegisterMessageCallback RegisterMonitorIOToFilterRule RemoveBlockSaveAsProcessId RemoveBooleanConfigFromFilterRule RemoveExcludeProcessId RemoveFileControlFromProcessById RemoveFileControlFromProcessByName RemoveFilterRule RemoveIncludeProcessId RemoveProcessFilterRule RemoveProcessIdRightsFromFilterRule RemoveProcessRightsFromFilterRule RemoveProtectedProcessId RemoveRegistryFilterRuleByProcessId RemoveRegistryFilterRuleByProcessName RemoveTagData ResetConfigData SetAESHeaderSize SetAESVersion SetBooleanConfig SetConnectionTimeout SetFileSize SetFilterType SetHeaderFlags SetIntegerData SetMaxMonitorEventBuffersize SetRegistrationKey SetStringData SetVolumeControlFlag UnInstallDriver

Bin/x64/FilterAPI.lib

SHA256 1e359e92ebfe3481c4751839f65f3880a1158964cb085e3ab789e6444ef078be
MD5 27c37e742d0a0b306773a26cba42253b
SHA1 e0d66d911a473bae4e965adde6ce6fda6a2f3426
SHA512 fda41813b2c13d891df4f9f93bef01a4011b5fbce03c77b3ce0fc60f94c2b8d3a95a35fc40bec0aa7dfb7ff8c6564b1ca1246d2345d21498425e998c3c58e0da
SSDEEP 384:bECPu86GsmVtnlh2fgLEYrp9iHXmcym7UKz1kkt+1m9tzbFgwUmePydvtGbmz:R1VtnligLEYrp9Smazykt+16tzbFnNlh
MD5 SHA1 SHA512 SSDEEP

CommonObjects.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 3c3ccc7ebdfd12e81c08de88c54179f022cbe955ee3138f67b93396d5275e832
MD5 f661da7e589c99fbc74dabebe4cdabc1
SHA1 0391a9dee3e1e4fbc304439f86b3421cce642c23
SHA512 8a543a5d7a793540f552555c0f223d03684630fefc20d02ab4fa75f608219c69865c5b9107ae01f6805a7afadf23f9be9c028add8b76077c0e154485987b19ee
SSDEEP 3072:J5FwoNCPSep3RzZKbYOfv0LvmJfPpizWDdysb97OElB:J5FwoNCPSep3RzZKs2YuJXpaYghMB
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Digest

47:fb:4f:ab:ec:d9:a9:d3:05:bf:8c:a7:54:0f:2f:07:2c:f8:d8:55:37:e9:29:04:b4:e3:fa:68:e6:1f:db:2b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Chains

Jan 7, 2022

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

4e:d7:ff:75:c3:4b:2c:44:11:76:12:07:03:fa:cb:6f:66:a2:af:e7

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Chains

Jan 7, 2022

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Serial Number

0f:31:2f:ad:09:74:c5:12:c3:d6:5c:09:bd:62:fb:1c

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 11, 2019 - Nov 2, 2022

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Serial Number

0e:0a:2e:90:48:fa:06:fa:97:f5:26:31:d7:cd:2c:f1

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 11, 2019 - Nov 2, 2022

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

4

Entry point

307054

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\Development\Demo\CommonObjects\obj\Release\CommonObjects.pdb

Demo_Source_Code/AutoEncryptDemo/AutoEncryptDemo.csproj

SHA256 0d79801c4e0b21b4ea452edecc52dcc65db349f3b03e905927f85e2a76e5c136
MD5 6881726c6b7cd4656072a6fc05d03d3f
SHA1 8d7d359be63b33d0f4b55ac251faaa3696c16f4d
SHA512 1fd5e66dca96222417130ccfd7c046659ece39df8c8029073dc48cfd615196c687e754e84aa0f439f18fffb3a8ecd6bbd9d05aaa758d6e957b3b0b6d0a6e61ef
SSDEEP 96:yl5x8v6ZmrknYpl+0xmxWmU6UxV4U6UxhE5vBCHMOdsHSGXOH/91Zb4L+U:Kx89IYplgFi5U
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/AutoEncryptDemo/AutoEncryptForm.Designer.cs

SHA256 0361225e7badb3c8a680eba4b866f2b70a81e683df67a0ef88f034ad7e394cb1
MD5 fe174d4cb4dc49b934caf660704d7f18
SHA1 c0cfe8e4c9fb8ed86277ec12904fe3beb7324c17
SHA512 cd768bffcf54ed6286ef5897358d25a08fbdb36662594f2831420b31fa7bd2bc2e4d71c3c3800741b7b46b4d8395cb7d3d0abe3b08f4d5425260089582567777
SSDEEP 192:3wa+pk8/SLPHj24OgYd2V6IOnaXNfnyPY8y3cYDmVayz5W:3w1pk8/SLPj24OgYdlIOnaxnyPY8y3ck
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/AutoEncryptDemo/AutoEncryptForm.cs

SHA256 917c52e5a7d20281649a42a2dea4b9dc55ef5d3a7e44f0ee4f4738a81054599c
MD5 3f669091e258e7bed843b454ce73a43f
SHA1 136e54c4654305316791494d1e15f7d30c4f01f4
SHA512 7aba06a6f9160a776a8785ebfc6956d358923cf8206639737e8499e55aeb3a8e744e572d870f6a7dbec7aefb7c4bb580b02b9b872005203b73de743845953bb8
SSDEEP 192:9KGpu6gjxE6drr69ViSrH6M6bVVGMmu5HR:9KG2jxv1Ei2SGMmw
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/AutoEncryptDemo/AutoEncryptForm.resx

SHA256 4363cd7d5b8671c72442ce1a1bfc10d64ebd24b2d718b54bd4fcd025e4967298
MD5 4eb5913a0e5aa842250f7419538fa230
SHA1 31fb76e5d9babe97a11fea041081f96ce426107a
SHA512 846207f9db4c05d2070482c27af72c50b8f423ac1c7efb5266b059f6a41362704e9f5a590e428f4aefd791edd2e21c1b34473361911cbeea2cfcaf741b5bebff
SSDEEP 96:fijrkiK5k5LPXbac9m5Lv6FzSvd4gIRjETUT2+0qSdvabvDBwbjBu3FqvuFZ:KjrbLPD9sLvIzSvKgIqUyahFZ
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/AutoEncryptDemo/Program.cs

SHA256 43c469b1dc2d41dc7a98408ad777c6136246462d69c1375c26e1b00a03f43b61
MD5 71422ded1b8a207aed85b8cb25ff00fb
SHA1 2710c7aec6d1b95277eb56c6dbcf61366c7458f2
SHA512 1cd3ef2766d1125a1af9786c0d51a3e0d2119aa4d4ee102f2cc4d1aa5310e9ed4edfee4d03cb034dce8bc1c0ac50e3ad952a997514ea9e651f5e2c398d4da48c
MD5 SHA1 SHA512

Demo_Source_Code/AutoEncryptDemo/Properties/AssemblyInfo.cs

SHA256 c832c2e3f352dfacc115b3d804ce86265b93eb95641d0ae0a1322192d33f1778
MD5 ffa8a2da57d02739bf3ce0bb1e009ec5
SHA1 3e63b59900663a33db0d736467d0f84dbfd82cd1
SHA512 d38998f605275a5ca5e3fc48dc6a8b17d7ae35d356be4dd0ebf1406b550a21770cd871c3f6c8c8a64521a6eb0734f08e45b8b35d86656a395b85e1e56fdb1441
MD5 SHA1 SHA512

Demo_Source_Code/AutoEncryptDemo/Properties/Resources.Designer.cs

SHA256 565d2f246475c73dc24e52b410229fb9cd526fcf4841d6318f3a1d0655b5313d
MD5 be733c66a2a8bf9d5eb73fca94b86639
SHA1 a0790c7d8c0d7f1ea881298c52e6bb00f08e2b27
SHA512 b4e924d52f7a2ba2c4e1129b187bd1fa8cd5f4ebdb1c46d5f6779bf71145fd4b877ec393c6a93259d6cd97ce19ec5418040d7a673903d3d7982a4c53ca924675
MD5 SHA1 SHA512

Demo_Source_Code/AutoEncryptDemo/Properties/Resources.resx

SHA256 66b5ebd1b0fc73f041ba669ce2184f6f471d5e3524efa34ca31233e9f5395262
MD5 0cd8c971317d19bbed44757809bcb92b
SHA1 47b15748ecc8e952c5935170090db7c269ce4b4f
SHA512 883dba84bf7daae3ea49f9d54c13dda4f125da82ba63f90eeba0900602896ad9492a0adf7b69b67d838034090af20926af5c2934797afaadb38aa069786c1fc6
SSDEEP 96:fijrkiK5k5LPXbac9m5Lv6FzSvd4gIRjETUT200qSdvabvDIwQBugqvA:KjrbLPD9sLvIzSvKgIqUEa2
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/AutoEncryptDemo/Properties/Settings.Designer.cs

SHA256 f1f0688847123e0dd07bf220b2f8a3806ce488243efffccaf1ff87ec99c4123a
MD5 6f71b9bdb9ea4f76935ef66b62dd7979
SHA1 850b7996c617e0d954ea3f39871e24e4841dc106
SHA512 cedfced2dd381433f121f0224dd87a0e19d3ad75c45b4a0ecfce3a06c4114f2b2dffc191fc0d4a672a878516f8a2355594bb38a7e4c9a00ded213aae338dfd4a
MD5 SHA1 SHA512

Demo_Source_Code/AutoEncryptDemo/Properties/Settings.settings

SHA256 f6a4290723520caddd934b8800319c7ca6cc7eeab647059ec89b7a13b1513265
MD5 8c0f00d7d9b0046695a0255f1b11b061
SHA1 5e1d04de66ffcc5dfd813530ab6992e6daaae417
SHA512 a95c07dc3241b7c9f37b7f0a5c143c9c133c3bcbfa16e4a689cf47f45b3e9d0ccf5c965143a6848237e7a9fa8deecb89837dc12b12fabd8231fe94f3ccba26aa
MD5 SHA1 SHA512

Demo_Source_Code/AutoEncryptDemo/app.config

SHA256 50c9c9f3cc99f39697cf537ff09c98f42f023c474cc12fe1deba11894cf52c07
MD5 e0d80706c31ea90fd5d09fcb3b2d49f9
SHA1 729ccdce546366ca702862cd957e91025537f3cd
SHA512 bf5a8e88f2554572157d044e0d9811bf8a6699e9cfce60d53d0df1b1fe5db8b9cddd56ed64b8dc38e0ab535122a57fee99359ec1407d4878133f66eea7201c4e
MD5 SHA1 SHA512

Demo_Source_Code/AutoEncryptDemo/app.manifest

SHA256 1285aaf1f15f5a70c0e6cec6cca29349e8923619faef68b2318e24e3bf079ff2
MD5 434e9a26d52e544ee4a8204f042a2bae
SHA1 95e1fcaa8c2eb02dd777e794bbfd5cf248fd49ad
SHA512 fcc5c39c095370fbf3380b93e5e86b0ccde362f9232a3661006e1a8efc34f57bb620769ed6f5fc3c01b36d43b70e8e420356201012bb4552b8a4ce61e26a4d04
MD5 SHA1 SHA512

Demo_Source_Code/AutoFileCryptTool/AutoFileCryptTool.csproj

SHA256 6435d5eede435f142677305f72f8f5832eb50ab94441a32cd99669a0c7d6bde6
MD5 8e33c36a89f853a7e295359786257780
SHA1 5953b4e5301f8cc8e1de5168371d3d3a7ec8bc6a
SHA512 97e2858e1c61945fefb27523c182384217ded6dda07843b768000c488689d64ede04f7d483ac0b6986d90ce67caf19683df157950d87d19d0d2ddfb230a3fe84
SSDEEP 96:yl5x8MiaZOTpV+Gxm0qkEFYx5qk2qsWxEW1qsCWx8xEnqsWxPEZK5vBCHMOdsHSo:Kx8taUTpVDqyq1q1qUqTFidOIsQU
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/AutoFileCryptTool/BlackListForm.Designer.cs

SHA256 ee1576e5d929b242b99553cb1a5edb531f5bc16b9595ee9b67d6969c5adceb70
MD5 574a59468ed97324d6e94080c84dcbef
SHA1 fe92e8baa9cbd065f857a848259e753e47c0056f
SHA512 c0957b9426d1eb451213c3a58f2a074048740dd6f6d2ed8f9b759b3280a8e564ae805411f165c609623948ce831335b8ed9a1b39fd42cb14c16faffeea6aa20b
SSDEEP 96:qh2atwZpiVGjoxOyzWO7EYlGlNc6kyzyBwyd:qwa+XiV8qOy17EllNfkyzyB3
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/AutoFileCryptTool/BlackListForm.cs

SHA256 fd5b53834fa23ed9e564c52581a95560e7e061a87d90b95ee416f2886191a3d1
MD5 5adb98df5abe320659c2c21ea0af61b9
SHA1 301911e3b0fd0f2126f30b636e938e1c521072cb
SHA512 6ab0b9da39fd041e74ab64a180bf4a1ed69038c0330ecda9cfcceedddc9d2c525fac87d19f31384eb77e396d60e2cf091c9e3b08036889646a5ec9802e8a375d
MD5 SHA1 SHA512

Demo_Source_Code/AutoFileCryptTool/BlackListForm.resx

SHA256 f46013e7e4e73ea85660d7aee295b4b137f55634b37651bc0d8d1296aa9cacc2
MD5 34351ccaf40249614140b1b6c2f95aec
SHA1 e3abc9f97d836dc2e18c2de9d6dc333d8f46a0ce
SHA512 be8727266f5173e9d0ebef37daf0e7fd6d44101fb16ac6a963eff481bfecec393fbdc028218b0c7eab4da97c0b33e1d04ddef5bdccec725887e5ba6c1ed39ba3
SSDEEP 768:vjXdskSv6XJh3S3H+9+/v333Smubdehhge+5TD3yrd5+l:vj2v6X8rmeh/c3yrdC
MD5 SHA1 SHA512 SSDEEP

polyglot

Demo_Source_Code/AutoFileCryptTool/DropFolderForm.Designer.cs

SHA256 6f91195641d63661e25027260dc0b5c8bbf83202623cf9054c6198b85458ba53
MD5 85ac39afe7f8208edd5c0975003c36eb
SHA1 87958bbb25d88352b596ae0adc9bf8eb1d58faf0
SHA512 a7c2d55116a99e8b451fdd0bf1d621345d7c60c2a5eab1746b5ec1a9510f3378b7bec1fdafb809b4bfcc487a31ec54def4894cca960e40d9d9e5f3df95b2cc2f
SSDEEP 96:Ih2atwZpiVyjox62JWO7EYlGlNhAyzIju4d:Iwa+XiV4q62b7EllN2yzEd
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/AutoFileCryptTool/DropFolderForm.cs

SHA256 2c5e92b7bbf8be8fca673bd84228efb4a523b33acb204350d2b565cd830b7387
MD5 6c66bf85a0def17823506c7f59ce27cd
SHA1 237387d75a84aec405716ae58d13f0dc1b8ddcba
SHA512 ad652b7f5d32ee7b7fc43f37a93120f04d191d2cc21e9c3dfacb3eee529c0be090aef049785b463bda9178d75a5be39a260410023c59bc58d7e9eb606877c9c9
MD5 SHA1 SHA512

Demo_Source_Code/AutoFileCryptTool/DropFolderForm.resx

SHA256 f46013e7e4e73ea85660d7aee295b4b137f55634b37651bc0d8d1296aa9cacc2
MD5 34351ccaf40249614140b1b6c2f95aec
SHA1 e3abc9f97d836dc2e18c2de9d6dc333d8f46a0ce
SHA512 be8727266f5173e9d0ebef37daf0e7fd6d44101fb16ac6a963eff481bfecec393fbdc028218b0c7eab4da97c0b33e1d04ddef5bdccec725887e5ba6c1ed39ba3
SSDEEP 768:vjXdskSv6XJh3S3H+9+/v333Smubdehhge+5TD3yrd5+l:vj2v6X8rmeh/c3yrdC
MD5 SHA1 SHA512 SSDEEP

polyglot

Demo_Source_Code/AutoFileCryptTool/FilterDriverService.cs

SHA256 3fa49c314ce3805b7773f6f24f5043408c97ec0fc63476c1fac7f49f0f7b7840
MD5 2e6189bbd1b37d8bc101a6057e3b9b6d
SHA1 a847ef96f5888567480898ff4f3253f88f04f420
SHA512 8848f01b98e5340e34e3c18d7dc49ec33a986160f77aafc8bc40dbdc510073b1bd9107c194c38ed47834ed13c89e531bb853cb17da3879452b6edf5f6f79ece5
MD5 SHA1 SHA512

Demo_Source_Code/AutoFileCryptTool/FormFileCrypt.Designer.cs

SHA256 4e02d89cb9f8cd3b3e4415691e4da26471b2a11899c49aa0ace713cba0cfa37f
MD5 24539b4894e169cc032e33668db9d2eb
SHA1 3aebac30facddb1626179d29646099f861077c35
SHA512 6b09ff9d79aea7877004a66079e5240bd8e86b12109f964f4bf90f405949e0d9490f8e6aca71aa1ddb1f2dfd929ba87da138758c259a38a3d9c9013e444ea384
SSDEEP 384:sw1hyK44ADKG4SDKG4yvDKszDKxeK44gDK3DKG4NzDKG4/DK+c6SOp1GOVZZZByd:r1mz9Qxxvm8fe
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/AutoFileCryptTool/FormFileCrypt.cs

SHA256 fee0151172c5dfa266470e05093694ab1512527406bf834240a4a6cbfc3f7693
MD5 9d268588d2e5c5937db6e31367e1f94e
SHA1 53ba41b06c997591ff4c8b5f14a4e9d7663da1cc
SHA512 4131f77114d7a992f9e4be327401248426c34960517f8824fd10f63708aed7aa78b23457aeae6cdfea7928ce8f97219fa4907881ef2bbbb446c57baa12eb8c89
SSDEEP 384:gKGjS3vsAi6Z0yCAWLI6FHsDjziVFNjQQLNg7GDiEw0XjwoO0:330W8AWIc8jziRjQ4Ng7EiEXXjwoO0
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/AutoFileCryptTool/FormFileCrypt.resx

SHA256 5b8aaeff79dae4724c344d8a2ef700f12c5fc7ef2a1b625628949981ff2d9258
MD5 ceb6bce137a6b9b70a42a6a93f606477
SHA1 544ef22714487f6eff2343a99bf1b6d2f460c2a3
SHA512 2c36c41a318e6a576450ed0790801684e0bf2dd18c0a76bb97a6bd8775ed91f43db1183da82c0a8a7b7018d77b5eed38609b290819bde0434066ba7d12d5221b
SSDEEP 384:KjrbLPxsLvASvKgwyahFdwawoMd2PTsYgwrvL+F1iJvuHwuu9CxA1bEfrhLf0l:KjXdskSv6IdTu+F1iJvuHtuLaTZ0l
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/AutoFileCryptTool/PasswordForm.Designer.cs

SHA256 18834b598c51443aa7006c9c3b53d81c344474d1d6c207bfe2eeadfc39f33cf2
MD5 e24c0dbef05fb781badb0c808e96ebdf
SHA1 b926d38001151b0f3ad3df513783e9f3a95b924a
SHA512 7f154f8dc31f630f230589da2bc3723b16e4c63adcb6304be18429784076d974ed82f88ad4a3ef45ae18c89c2511c451824e167040f1d8469d0b1b94742daeeb
SSDEEP 48:DfOfOq2atwZxEAOHVO/hcGGDdEIY5XkA0Ykz1GWyTZP1xiHO3+YRyJ4XvWENOfbm:DIh2atwZpiVLjoxLwoWO7EYUyzkfJzs
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/AutoFileCryptTool/PasswordForm.cs

SHA256 bb9de93fe57b16aa0ad79e47f44edacf45eb8e008856f2130d74443b6d4c9656
MD5 88dc1bd8b52225a63e4835a046cec5c8
SHA1 d1d95279b81b4f65d7a5370870710c8aff218ee6
SHA512 1f22d042bb26ae9245a2f706b4613ecf725117b1ce10512ca3cb2bafd8fec95296b99730c14d8cd086fcc30780a2fc8614eae6901ddc0c413a6bfd013fd7fdab
MD5 SHA1 SHA512

Demo_Source_Code/AutoFileCryptTool/PasswordForm.resx

SHA256 f46013e7e4e73ea85660d7aee295b4b137f55634b37651bc0d8d1296aa9cacc2
MD5 34351ccaf40249614140b1b6c2f95aec
SHA1 e3abc9f97d836dc2e18c2de9d6dc333d8f46a0ce
SHA512 be8727266f5173e9d0ebef37daf0e7fd6d44101fb16ac6a963eff481bfecec393fbdc028218b0c7eab4da97c0b33e1d04ddef5bdccec725887e5ba6c1ed39ba3
SSDEEP 768:vjXdskSv6XJh3S3H+9+/v333Smubdehhge+5TD3yrd5+l:vj2v6X8rmeh/c3yrdC
MD5 SHA1 SHA512 SSDEEP

polyglot

Demo_Source_Code/AutoFileCryptTool/Program.cs

SHA256 65853c02c5bc0c8b00ff5f346c5fd3083014f35ef79072e7948917ecfbd9a197
MD5 703a3bf0ae18669173a7962b850b679d
SHA1 cbe5f15f3c278952dbee6f828f225a751c510308
SHA512 2bf19da34a98a28858fcebd7d52e83b0d3f0d7623dd97c00ec0814fd87d2647b93b3740846cd37a3c02ad9299e4e359ab0006e3048235a6a2355b9ff9d5374d3
MD5 SHA1 SHA512

Demo_Source_Code/AutoFileCryptTool/Properties/AssemblyInfo.cs

SHA256 490e1e397e685c7a036f205ca71b66fcaffa87413e3e5f95efa13700281db582
MD5 7bdb1e1dcc8424c54b32e46fb2d47912
SHA1 737320bbda58ea51088e38d80e6719e3141b8bc3
SHA512 37e5573b45fce3ebe12049a88a6bbd86a7be4d9d5d3f9c533a758e0b9bfc231912d538a3fad6125317bb93a2bbc6633c3576e871546f45bc95fbe9705669c8a5
MD5 SHA1 SHA512

Demo_Source_Code/AutoFileCryptTool/Properties/Resources.Designer.cs

SHA256 9d2769c339d5551b59825e7ec8d4ae877fe32a3a7abbf490469d788fa305f39d
MD5 f08f3936982791c5a9c1fd70057bad8c
SHA1 992edf876e9acecc8743706ae60fa7807bfc287c
SHA512 6d56214ad1db5f37679bbd31476fcd6bc1b7bdc09ae68a5315819ba5d6462c57904c4beec5950199e42e1ba0f82ffca3ca1be66dbd5cf085ff3207f9a52d3808
MD5 SHA1 SHA512

Demo_Source_Code/AutoFileCryptTool/Properties/Resources.resx

SHA256 6d5f21dac600c20f87e3e1f626b9bb2c9674787496363e015830e79f16c8aadd
MD5 9bf6cbcfcd66c9b7025414abc8f5dfea
SHA1 e91e0b94dea148810a1d37dd1b8b6211f7c70660
SHA512 09477c4684f841d6f3e9cb955b1d02b603dfc0836b53f45c7b967133536b1562e0f68721b6e3da035a44f910934e0064b2ec660b43f6a9121a3ce50f0debe6da
SSDEEP 96:fijrkiK5k5LPXbac9m5Lv6FzSvd4gIRjETUT2+0qSdvabvDBwbjBu3FqvuF88Yoo:KjrbLPD9sLvIzSvKgIqUyahF8dokwCl
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/AutoFileCryptTool/Properties/Settings.Designer.cs

SHA256 e4c0d9f425df1538b683e8d36be85eb646cac5ab9caa1c25c94629e8304a3705
MD5 08ddd9952aa9804e97d70189ff9722b6
SHA1 d0fd96344794b837ba2ce7e8fe7446f503a615df
SHA512 b4a66ec96c8e44200fee7d75282c64829d8696de95aa11e0fbaed4fed8b855d56286c593abb6fa88e8b256b6f0b40f315af097f8c72863da95662ab28d601232
MD5 SHA1 SHA512

Demo_Source_Code/AutoFileCryptTool/Properties/Settings.settings

SHA256 f6a4290723520caddd934b8800319c7ca6cc7eeab647059ec89b7a13b1513265
MD5 8c0f00d7d9b0046695a0255f1b11b061
SHA1 5e1d04de66ffcc5dfd813530ab6992e6daaae417
SHA512 a95c07dc3241b7c9f37b7f0a5c143c9c133c3bcbfa16e4a689cf47f45b3e9d0ccf5c965143a6848237e7a9fa8deecb89837dc12b12fabd8231fe94f3ccba26aa
MD5 SHA1 SHA512

Demo_Source_Code/AutoFileCryptTool/Resources/about.png

SHA256 96acb3a8a203e91dd6243941af3df0fd62d8a62b2ea5bb4b5078dea5e80a63b9
MD5 cd7b67afc587992e0c86a85d8c2537d4
SHA1 b871af0c18f4404dff26aa781f72c1351e89e566
SHA512 8bc5242cdac4f6ff5cc5eb9cac29971d0d6f0705f1963e549c354796d0195f49faeb721a93700896d2c8e5f3a0a2ac006ab706e2e1f3e96bc9acc3da3b2c7637
MD5 SHA1 SHA512

Demo_Source_Code/AutoFileCryptTool/SetupPasswordForm.Designer.cs

SHA256 5f75651a7b8c8e1c42590d3657b0fdd86d8369ca2b787ff5cb49de38b64caa5f
MD5 d53c7d853311be4145267df3f325ee4f
SHA1 c2d719cfb6661e35f668bfaea31b2ef77e9d71e2
SHA512 825dfe4c1233b2efb3b4473f59c2d6fd279c2110a20887895680115b93d229e448724a67dc4acfe7511e473209716059fbe936e6549f3e6c3fc7eddc50fbf226
SSDEEP 96:dh2atwZpiVkJiBx1XBVH4yQbn78aUFyzNKmmJD8:dwa+XiVkSx1XBVH4yQbn78aCyzNv
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/AutoFileCryptTool/SetupPasswordForm.cs

SHA256 f6e477d16370bcefd8acc2cb80b764c1283a2e6172937fe0d2a3d256db4453b1
MD5 586994f185c2d278bc9dfb66ce1ec3f3
SHA1 4afaaa9217be5c229773618f1149fdf5261c228e
SHA512 059018592fa8089d9fa4731adf85c2b0ee30b33f1a64c8e648293ed3043eea77dd28702e25dc1a823cfa08d9682010eb7bc940072cd36a295e4e99e4f5e10b3c
MD5 SHA1 SHA512

Demo_Source_Code/AutoFileCryptTool/SetupPasswordForm.resx

SHA256 e649c4149fc2b03601b284d34b1091c585c4f802d3e6c224fb15b4eabb58d8cf
MD5 d7defac996deaf8aef7e1bbfe3b7abc3
SHA1 d962240ea6de57fb10569f1b7440eb327caa1033
SHA512 e6337f01b5943011d8ca650f35e4a5ea32cf5ad82f6e86b8770cb49897676cc3fc727fcd00b6a5648ee8d351e29b42bce968780966caa6c9370df0ca2cfe3772
SSDEEP 768:KjXdskSv6eMrDK8Xj/3S3333N333S33DwSApBxOl/qQT25MEgkCZiAYl:Kj2v6E8XjRKiRLqMEQdi
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/AutoFileCryptTool/TrayForm.Designer.cs

SHA256 a9efd5f84ac2965a69370dd94de07d73183c1795e958a9022a7f12e47272cde3
MD5 a769176f8c636e93903490d6cd59bb93
SHA1 97b0edc2677eccbeac721b951ea4b111ec3cd395
SHA512 f90cb41ad772b884d0191b72970954dc7b370e9233d1b10678591f3bc0908010da90164179597246b7c2e8f926168cff2d57dff97b0c9b2851ea28c0c6a9578d
SSDEEP 192:Vwa+zc6iVY/qJ1w8ATJOvaVDeSM4jyzTi:Vw1zc6SY/qJ1w8ATJOvasSM4jE2
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/AutoFileCryptTool/TrayForm.cs

SHA256 ee79321f57e304c777d650cb1f86c6d4ff4cd2b9b72767135b5438b29677ee87
MD5 f249ca5bb996bb08a4d9dac0735f3cdf
SHA1 519db3517cb30af96d452b92081daf465dde01c5
SHA512 644815bad491ece88a8cf3774ab5bba20199699cd50065cab22e10168e72f32a89262e67003f4130e35c7d0e36392655a917ba858bc47562b32cb829a272a5fa
MD5 SHA1 SHA512

Demo_Source_Code/AutoFileCryptTool/TrayForm.resx

SHA256 106336dfbcdf10a39ec379e8498f4e980836d9b62779da359998a6465d03b0bb
MD5 ed1dcaae12ae73b60157c27157224e08
SHA1 51064ac087e8d927235cf63492982ac9a7f4830a
SHA512 7e523f169fe92144106daa6c68bc8741c59fddf2c1eae01c1e7a85bf666b7b564d9487b7d7a6eccdcf69ed996c41bbb217223c35e27da6ff5d1b2280dea272e1
SSDEEP 192:KjrbLPD9sLvIzSvKgIqUyahFmbaw3bawigwvvNW0WTl:KjrbLPxsLvASvKgwyahFcawrawigwvvC
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/AutoFileCryptTool/VerifyPassword.Designer.cs

SHA256 d0bf9678611554ffec4093c1337ae2a844d2587bac8119bf9a7f04ed9785c712
MD5 ef074ac428950d4e72a2d46ddb17e150
SHA1 9b033115bba4f87cd82e48d7a4847781dfd3aa31
SHA512 cc36f90b9f7299d573a2c2250a1dc87bf2c000b86232afcc69a5bce5543b5c96d3390022cbfbe8a4a44ee06b232216d73d3b06445d3e0353d6c535c11cf03bb6
SSDEEP 48:KOfOq2atwZxEAOHVOWHi/Dj5FW+UuYR5W6e9Pa8J8D4XvWErDmJJ93:Zh2atwZpiVVi77ga6exa08Dyz3YJ93
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/AutoFileCryptTool/VerifyPassword.cs

SHA256 3e23ac839ee6a34a067742f9e119380d263fceb76da16fd8d25def094511a169
MD5 8746cc7b25a471c133d91d2600367f7e
SHA1 e34d4fbe2bfc2a4bc3e239df2c09510cc6a67a87
SHA512 459576c671ff326f5a721527036174edbe07fea031b7b6822a24dad745f6676ba7ea7e4efa89fe0e8cac8126d9aafda04cb7151ee6ace26d818cde88e1fff4dd
MD5 SHA1 SHA512

Demo_Source_Code/AutoFileCryptTool/VerifyPassword.resx

SHA256 86e3658709b218f287dd7aa6d10388ea2d49f8ce65b5eaaf03db1153ffdafda0
MD5 bcb0fafe031ca4a14e7859c4e3092691
SHA1 4355345b140c01d1f732aff956c7c5355c2d90dd
SHA512 e13b36e925504232423a1c433d2a89402f50f75b44c8a823b3d17140f36f4c5ab5f04c038f87b6d303265f6d4b3377d421e2755a3892562c483e5d4c6fe02980
SSDEEP 768:KjXdskSv67+vV+f8jfBXR5j8N/Ar71Bbqal:Kj2v67+kef75gN/Ar71B+Q
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/AutoFileCryptTool/app.config

SHA256 50c9c9f3cc99f39697cf537ff09c98f42f023c474cc12fe1deba11894cf52c07
MD5 e0d80706c31ea90fd5d09fcb3b2d49f9
SHA1 729ccdce546366ca702862cd957e91025537f3cd
SHA512 bf5a8e88f2554572157d044e0d9811bf8a6699e9cfce60d53d0df1b1fe5db8b9cddd56ed64b8dc38e0ab535122a57fee99359ec1407d4878133f66eea7201c4e
MD5 SHA1 SHA512

Demo_Source_Code/AutoFileCryptTool/app.manifest

SHA256 01bb3af147c725eb5695a44682812fa0260fd76a5ae8887cc77a06f747da499b
MD5 e7f030e987f7a15a1f407de961928c51
SHA1 4aae2f3d1cf87fb2600a396ddfdd0d39763eac3a
SHA512 ca392347f10ec7ccd3784e1e90d872bcf39ce92eea62db156d9eef86acb2fb4e9a5a2cfd9134b9d32a696b5d1c7f056f58b25be7aba3edae4d54baefb9b9f520
MD5 SHA1 SHA512

Demo_Source_Code/AutoFileCryptTool/encrypt.ico

SHA256 f685c0111779e6906b17efc33b9af93b84a0e9abcea37559c8f741f7f8e99de8
MD5 7245d5906039b97f3e47e3b40efc4137
SHA1 714de6bfe0889ca2250afe0a6fc17abc23c1a24f
SHA512 21cc99f55b488332c9f9079c846c2283580a2f89fba9ca63b3634d4778757c269bc4b2356605f5af1e7e3cd755b9c7c5978ec05476651b6495d5c4c3c9d95727
SSDEEP 192:98vnwaAV3RwIkqRLUnIanOE8Z9A45ol684g8LQRnP5fO:ynyRaqeIaOEyA45Kf8LQRP5W
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/CommonObjects/AccessRightsForm.Designer.cs

SHA256 60054c33d19aabbd054c215e1b748d2cf9acfa8e5ccbdff6aecfe2042e325044
MD5 6fe2136af8828894caca6b01b355f292
SHA1 d99e4d41754e0778494ff4a4a913ce4b0969336c
SHA512 c4e14f2408255891e2c977c9a9d748ca88d5e5773661ed57406ecd878e0b0ee9ae593cb37f9c8b61e001b46c3ec8c51300628aa45a577e56cb8f39f7ee950404
SSDEEP 384:nw1y1tD6JFSChs5PRcigCOiG1tz3D1FFm1GCiniTzEkgl+zN7GmlF/zkLwtvet+b:w1vYr
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/CommonObjects/AccessRightsForm.cs

SHA256 6c79e0572b66fdcf537878cd808bccc29995a6fbc0650593b069eb07fb3e6a74
MD5 9369656050d46123b8f647d0c70fb771
SHA1 ed6f77cee36eec176d266a7112bfdb0bbb725ed2
SHA512 ff205176f388ce8f96ec29e940d03fe2c1f8fc694f77585fdeef3c87b2f72f840195bbb050ddd480e4ba7102f1d1a5cdde225e73d3bd428efccb4396f82f8362
SSDEEP 192:wHOKGpOdbgM0vwKUv8cOvo/bz4xNlh6UWIcLEtBSpBbL:bKGoIgUMbzClh6UWLEKpBbL
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/CommonObjects/AccessRightsForm.resx

SHA256 4363cd7d5b8671c72442ce1a1bfc10d64ebd24b2d718b54bd4fcd025e4967298
MD5 4eb5913a0e5aa842250f7419538fa230
SHA1 31fb76e5d9babe97a11fea041081f96ce426107a
SHA512 846207f9db4c05d2070482c27af72c50b8f423ac1c7efb5266b059f6a41362704e9f5a590e428f4aefd791edd2e21c1b34473361911cbeea2cfcaf741b5bebff
SSDEEP 96:fijrkiK5k5LPXbac9m5Lv6FzSvd4gIRjETUT2+0qSdvabvDBwbjBu3FqvuFZ:KjrbLPD9sLvIzSvKgIqUyahFZ
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/CommonObjects/CommonObjects.csproj

SHA256 1ba650b28d988bd12daec880b60a25fc6c45341d878399906b2ff4e26c34fd71
MD5 2a75ef57bc0d753b361fa70371347263
SHA1 ae4e1168f229f8a7425c18b795d6954f4d0ae9d3
SHA512 0a12efedd7bb520273212a40d147ad18f1169f187cf56355f0afd686811564e1d56dd2375586207d0a599489fbac4c0b4e8720964bbce1869d6f22daf580e0a1
SSDEEP 96:yl5B8PbwMOTpV+Kxo0qvEZK5vsHmAkiSBCHMOAqt9p8NMluv/HE8FZL+U:KB8PshTpVLq9UGat9p8NMsv/VQU
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/CommonObjects/ConfigSetting.cs

SHA256 33c73c91fb437acfdcbcf0068f0134af62950dee943c4a3bb3b7dd82b95878a4
MD5 0a10e92d7547f61962371f25c67cb526
SHA1 ab19b6b4538a38d921061a1bb18162c0308d1738
SHA512 3388eddfb692c311dc6240003e832fcba472f16e327e7f0afcdbe1943bbf9087a4db83a7776b8ff9b175bc313d79dec5b64c6b55e0e44cc5efbc42a4fa5b6e8d
SSDEEP 96:cj1HOyo4V4+4277vJu/zpLBOTKbL9z4z4m9z4zi9zJzBzKwCmz7z6peF78M:8Hlmp2EzpFCKbBEtEK5xKwCm/6peFwM
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/CommonObjects/ControlFilterRuleSettigs.Designer.cs

SHA256 a8838f565925d48c6f1ddacd11e7d830191dd62a3671f0ac79368586b315e535
MD5 c1081cb2809cc2baf4b2e3162a0d341b
SHA1 d9d6580d9c7f0a898bcd00757acb96fbd5a20137
SHA512 7c25b8d9a29e18e98d3ea8bba5f6797a0e11d9257358e56c03f0a5c4c96e6cc61ca9a4a1eede418dda1c8c0363af76ca4f3c99c10f4b2787b41c59ec5636014a
SSDEEP 384:bnw1CaWtyOMzJHN5h7EQh55WYjRKdDxHLNXbyFaFAtWpwLDCuWiDT1lqYMYaro4r:s1C2iQh3WYNKdDgTll4
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/CommonObjects/ControlFilterRuleSettigs.cs

SHA256 662e532278d2ab223601a8b1b848811e2e61e2b8e3cfd751e19bfb65d7318ce5
MD5 b160a1d34fb0656d92d0495753279927
SHA1 f40635a47c8774b477596785321939db95bed187
SHA512 3d3dd3b75efb11d9eab854fbdd9199aebdae0e233536cec23f915d626c640946f081c81aeee15aa62560554220442bdc2a555fb28df89ed4b097825b396f94c0
SSDEEP 384:bKGQjOYN/ZS7cjpafDq4tSTg1ZfEhHZKC80v9h9TO:C/ZS8afDqKx0v9h9TO
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/CommonObjects/ControlFilterRuleSettigs.resx

SHA256 49edb3d7a829bb1a51de7f8368971ae340dbce7073e1ddab2b67465350669cbb
MD5 0c31c1eabfd71b2412bf9631eabc3ec3
SHA1 c745661b6430e5b6c76f870efd191e7905d6fb91
SHA512 000a9d972f0b0cad4b697374a61af03ea87918ae0592f4a61fb0cff335af267e299a2494e7a1470577509dadadd6e89012d3a6e812ca04810e8fe4ff1597d447
SSDEEP 96:fijrkiK5k5LPXbac9m5Lv6FzSvd4gIRjETUT2+0qSdvabvDBwbjBu3FqvuFzm1ER:KjrbLPD9sLvIzSvKgIqUyahFiyR
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/CommonObjects/EventForm.Designer.cs

SHA256 3b4d7429b26d3f6a0b169ff21301430c72b1ae910eccb290d5c4ac5c01a6bdde
MD5 5f0565c8f29a9b70ac6e2d001bf5ad79
SHA1 28753f1b4fdecb1ef32cc07638ef82ba8b213384
SHA512 6703ca6722c47b0b5a4e035966c2b41b6314aeac86c1d49bd866d07eb675ae4d8cfb5298aa31a2ccf20d51751c6d1a4e1645ef73aeae2756b177336686eca8c6
SSDEEP 192:Hwa+XiVFpoTUvkF8fWNeF6Xi/ZiUF8bbqN9jvfcHEyvRMFmazmyzpXPc/0:Hw1XSFpoTUvkF8fWNeF6Xi/Zii849jv5
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/CommonObjects/EventForm.cs

SHA256 8f1abb881e979fc158ca83c607755c135dc5dcca30090dac23013b6b871401f6
MD5 64c407c6f0f08ad9298a7628529d3c92
SHA1 c3766937fbb57ec3f3d1b5a9d2c8c7576f8552fe
SHA512 3cfbd0f83fb42fd47ba92d4ace26cba9b1630d5a1241be3e4d3879dbe1bfea4e5777578d10545078258bd29bbc9cab030cc24656e1f75bf26ca84255a0beba8b
SSDEEP 192:wHOKGpaW637o0YtxSPuzOMjlRiz0iZrmCya4:bKGwW637ofSGOqz1
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/CommonObjects/EventForm.resx

SHA256 443cdb3b20d586d01ada326d34786b3876f28ec2059f7ca492740a74cf9e94d5
MD5 61d8a003144f41e6ee210c85385fef2e
SHA1 498084582266c53cca7bea7aa8d6bdb2b95d2eaa
SHA512 4c51b8805c5643c98b3f23466f8832d2567b8e5c2562891655a35ae66e49136e4d16f5b125fa72844b5145a0799c15934c67424adfafba6199150c3287a87bb4
SSDEEP 768:KjXdskSv6WoY0oGpaO867UocWWMU/rhGOl:Kj2v6bY2aO8h/5MU/rok
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/CommonObjects/EventManager.cs

SHA256 6049cc15b32dd02bb4e2534df8e73e2f87bb2d42c64a8ffd42b104fc86832a44
MD5 986ee0456f770ebb53fe82a3829c8d40
SHA1 e0dc00f4e1e956fb0a696e0737eaf5dc63af8f04
SHA512 f4aea3ecb91170a24fc658fd72ca1699e34f4d2213ed84aa971d01a182a32ca158c2b76f4499ecc83338561743857dadc6c930c87adea36dd50ae1f63f3713f8
SSDEEP 192:FHOp3Dog8RCqXM7b1APws86mTBF3j+EXqnPu:wp3Dgc7fL3CgqnPu
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/CommonObjects/FilterAPI.cs

SHA256 c5dfa2f7850d5d26351afd5b6e2e58ebd0a81fd56275bef1ba6dba054de67ab0
MD5 bbe7b9d6e1ef85a3a0fba5979cd0acb9
SHA1 5b8e777c9df72dff33a19ef679081d09b000ae00
SHA512 6ac3d8b0e227aa999c68febdf14d8bf728fbbd60e42ba458ccf4dd08b047fb1e63010fda1ca1382595e728127fcb5e297488f971b61ebd95d81def289ab00e18
SSDEEP 768:ioP9wv3/ArtQa3o+B1GgBDKKBTpiVc3ho7BrmGPFozE683j6iTWyQmLF5I8RGoQz:XP9w//AhQa3o+nGgB23Io7goc8zta
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/CommonObjects/FilterRuleForm.Designer.cs

SHA256 5f218c69107ccd94455b7909e549a68003167ef2606ff8380bf819d9a47872a0
MD5 07a19040c2bb580dd2824a8da78490e9
SHA1 b60c2412268163c02a76bc121ac982972a76a57a
SHA512 6565ea9af321bdc65df1d2270554926623ba116eb2921b8c7547a175ab6060646a1b4fbab54dd9b4f77f79633a403832e052e52576f8eb163764ec2f99cd774c
SSDEEP 768:01FtqdqrnN76J5c/AXbSwi5ToaqHFjSk/dSsAMnZpMVhomG4npDDCw:3qbwLc/Ai
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/CommonObjects/FilterRuleForm.cs

SHA256 abdd76d51975dcebb89848f558d832b397405621479b9766a0bcc8e8b3976137
MD5 001c9bfee5491d9a179214a858af6fed
SHA1 85639aed87e789fcae84c7d20e6ba09f3408bf9b
SHA512 f016038dc6125c2a5eaef2814ff59cb2c87c734ad80e79d3aecbaee69ef33bb717f20e8c81645b43f22b675ff010ad0518360b67aa878d7fb5d9eb063cb1cec9
SSDEEP 384:bKGkIj6TNP+vmh0BJpbwQZKIME30jq3wmx5/n:Dxj30jqgmxR
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/CommonObjects/FilterRuleForm.resx

SHA256 61d713b0cd161a08973b1dd2173ac9bec51fea7b6b9639c997a49e16e8b9afcf
MD5 1d9e2bfa9b59ec3bdd2bfc7aabad6c08
SHA1 8ca37cbec9257b15556e712ff24cf539e3509038
SHA512 b55b22d85174485527a917cb59ce113a7555523a86c04fde5f2b5b990e4646e64cad7948dc8086d017f7e2bf2c2bef7a4e30c79608a14015c26cb6a12aa5abb5
SSDEEP 768:KjXdskSv6tx2sR+oS1CMRDYE3/BVVQJA0e99txdlk1JTt5ESpDn/fvCGl:Kj2v6+GBwJqA0s9Jl4j3n
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/CommonObjects/FilterRuleSection.cs

SHA256 77ec6b8595c33ea7af2b9f44860356f96df3db42a76d024cfded4bd460e90ecf
MD5 deb3188d353a671a2956ad3d42e11f00
SHA1 c54331629ea2baefdbd5cf2971c5d0edb399b88e
SHA512 b5f6706ef9af6f1e9160add96e0f11e35a0da099177e631961d8eab10a5a39aa4271f7a2fdb6c9949216ea66d2bcc3dad6e0ff156e8afffe9817c669e3087c55
SSDEEP 384:bLyiFIflF1W/+yLgQadTFdBVFdxkFdLFd6FdTZFdLodSTq0Nqy1KK2PrUS1Zb6Fb:NIfVf/JTTqXYBg6
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/CommonObjects/GlobalConfig.cs

SHA256 9d6baa48d4c06867f1aa104cc0c02884db226728694a3e0d03583f78bb0cd6bd
MD5 b323aae19967405fc42e8f4d438e4a81
SHA1 1de705e4263e312936d0d244316a4e49216bf1ea
SHA512 5edadc7a8578f69907463421f0f601372db7ed549543982d0cb2f64c1fc4dd042a704f4cd14dd37611efed68b52d1261bc0e89f74f8a870cddf36479501dff25
SSDEEP 192:wHOKFmZRgEtXA/rYGmOZkLUtVhc1yqoz/vnkhA0NHAOHaKCqt8iWqNf1M/zCNFzb:bKFmZy6wmdgtVhp+0oNvQfjMFfp7
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/CommonObjects/MessageBoxHelper.cs

SHA256 17e4d3cfde9e173382b92ddc334e8de566e88855fc07deebb05127574992b581
MD5 e92785af06d7c10ffb24905a74b54027
SHA1 864bbda1979df18336174781655a72ae8741eca8
SHA512 bb30dc9db391113579f3f72211a57e20ff88ff08d2f9ebc8b3b6776685d7dcc23e7ff216707512247f25e8181052fd00cc5f72034b1fda7ac5d0eb52b4019a55
SSDEEP 48:7IJMiRvHO7o1udsrNkqNVfij+ynBwA4yVrUVo3cV1VdV4ArUVCXfrUVh:wj1HO7o1GsrNXUBwAH6SsDjW/v
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/CommonObjects/OptionForm.cs

SHA256 21f484c35a555f0fe12c3ac08b0ad560598bcd4253a47f2a705180e420399d17
MD5 d56e7a530636f1719b4c79b509477efb
SHA1 c9343c39db0609a9b2340b090335c83018ada538
SHA512 95f6f5d28a3f651a3aedca4d3a5926194b639586f972aac632f291eb0cc96bd6927d18ce87a8e0e7636b91c67a2f264e342c36ea56094a268ad746cf4976b1d2
SSDEEP 192:wHOKGUT1Ni7P97uUk7sdDQiO0Fpw7PODBHGNoyt+ytYyYyfqdrYU4XDS1KVNX+u:bKGUTST9KNouPCFD1KXMy6yPxfo+x
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/CommonObjects/OptionForm.designer.cs

SHA256 13e9c0aaac3aec7223b69750efc0aea6b39a335d9d6bf3f8cc56e6aaf8e910e3
MD5 8dc6fac7f8cb1573f19b8c092aa45ba5
SHA1 8383527668ca0d167993d19a10fcb449d187b98b
SHA512 601ecd8e5d8048b2c71576205024f133f396a2f069052376b55d9f358e39e550d84d7253a3f3f27a6caf733740b9e7f8ab64aa7ce3e915336eeeafe148e4ed6f
SSDEEP 96:9wh2atwZpiVVih88HOsW9Pj4PJnWqXRj6oddyzrqn:9wwa+XiVO88HO79Pj4PxXZ6oddyzrg
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/CommonObjects/OptionForm.resx

SHA256 ff91697f68c9e4a0461c38f4de666db9511710462534993c69c5a67cccea3c24
MD5 52ad3e6ab6434107ad8cbd759490b045
SHA1 565010450f5f96daf0a283532a21612768835085
SHA512 8db6a0132ea4cf8b1406ef0901b0fb046ab99e2c662bf103dc3444c0630a0f6aded190e53fe604103242163f87f5c0b7de14656359fe6400ecb24a4c058124c2
SSDEEP 768:vjXdskSv6GWDq+3S333+MY33S33GtYwQdO4tBiRoXwInoEAFgBMIXkO+5l:vj2v6hDqeMoti3tBiagIXAeFXkO0
MD5 SHA1 SHA512 SSDEEP

polyglot

Demo_Source_Code/CommonObjects/ProcessFilterRuleSection.cs

SHA256 192ea391b1cbf23a2ff8798c002124019e292e4fb389c582d4213113aaf99f3e
MD5 c75a234341102c68246e1c3e654fc208
SHA1 bcacec66cc8e115983993a446d6d2fae35df93ae
SHA512 6b2cd1f23a8f987cfa955e89548c930fa31aae991b8720d4ce0a34409acd7f3eeacd0a12531a99486e8dff5b4d4a8ef40a86acaaf9feba6e5097e87f16238b0f
SSDEEP 96:cj1HO7o4h2nX4PoA0dLzdzISbDl0P/4MZChZ0nDGUi9R8/ScnT:8HOUoQFVISb+P/4MZChZ0nDGUwR8/ScT
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/CommonObjects/ProcessFilterSettingForm.Designer.cs

SHA256 f07c1ece183a6ce90853c54966f690832a5a0b9d773c29c854547791a79d488f
MD5 ff51c14dc9ba2a2eda6faa7923644b30
SHA1 b3b0031d79b4f756e7719c7a792c5d08c96d1074
SHA512 a39b5d32f70b0b0b08b0aebb8ccac11e8a2050ce5a407f86942fe63882666d608084e993dc115c061dcbcf0e261155a507638aa475f29515b93474fb681eda22
SSDEEP 192:iwa+XiVgHNZvEuA8BpPT5zJ4KYqGyr+rkclEJoLu64vHDYp6REx6veZDiXwE9py2:iw1XSgHNZvEkBpPT5zJ4KYqGyr+gsEJD
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/CommonObjects/ProcessFilterSettingForm.cs

SHA256 9e398509101a6e684e54fb70aa8cec44215aec74bff157f6163c1f7c62e2b02c
MD5 edf416491c55129ed428ffa664b388a6
SHA1 95e9fecc5788a81cffafc9d1c3eacffc01966fc3
SHA512 3c66cec923e159641af87b30f579411acfc01a9e22d8b95d958c734b9dd2b1d84b7a4e39ee9ce04a9707c9211b5f113c8bdc3b423799bd671d5c6468f71dc10f
SSDEEP 192:9KGpkg07F5IT26WmhV0T6F3DT6E37/z/Ti6iRx:9KG6fd6G616ir/Ty3
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/CommonObjects/ProcessFilterSettingForm.resx

SHA256 96feb319bb8d02782d3688b0758e73db5621ab2c55175e3b636f04f647d018bd
MD5 5a289e48de07951b1b526c7e6d148ba1
SHA1 ef0c73a99093259606c282974f953a2a04c68395
SHA512 9ee351bb72803b007c4485e15dbce2b75c682c9b9ba6b99ae3d41d360ed3926cdb5d168e8bd584ee868b9e0da5f96b75819b28ae6f0b67c315490d2cf6c1dd55
SSDEEP 768:KjXdskSv69gqxCrerrr92q/TOiSQk5pXq6LNdN5etlyOJl:Kj2v69gqcrerrr92diduXlXilyO7
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/CommonObjects/Properties/AssemblyInfo.cs

SHA256 57ded39fb7ba4ad7cdf64d7277f9b40c7cf3b9888ae65de887919efc2f714d14
MD5 6da60eb532c6317a3904ad81cfe5a19c
SHA1 3bf212f3447156626714cf2396c82af00e41c2e6
SHA512 157d942c5ca7b500a88cc9f9f8d1f7479890705a61276d617192e769892e3afd2a126074d2844ae68b179422e55102988aa1efea70d860680f66879b0dac218a
MD5 SHA1 SHA512

Demo_Source_Code/CommonObjects/Properties/Resources.Designer.cs

SHA256 1cb788cde6147575427554f781ff85aa544c55d2a00a4c6566d609e70488b812
MD5 03010609e5bb667f131f59854ad14461
SHA1 2f772ad7739ab28e068476c68ed97e8a66cc9243
SHA512 66a4a1ffb87e31885f3912393f13bfceef460d81b1ba40d5dff02b652c3d9d41c85cf56202428e96f8429e592ce22c930d6913a5825fd74506a21d40253b8b5e
MD5 SHA1 SHA512

Demo_Source_Code/CommonObjects/Properties/Resources.resx

SHA256 6d5f21dac600c20f87e3e1f626b9bb2c9674787496363e015830e79f16c8aadd
MD5 9bf6cbcfcd66c9b7025414abc8f5dfea
SHA1 e91e0b94dea148810a1d37dd1b8b6211f7c70660
SHA512 09477c4684f841d6f3e9cb955b1d02b603dfc0836b53f45c7b967133536b1562e0f68721b6e3da035a44f910934e0064b2ec660b43f6a9121a3ce50f0debe6da
SSDEEP 96:fijrkiK5k5LPXbac9m5Lv6FzSvd4gIRjETUT2+0qSdvabvDBwbjBu3FqvuF88Yoo:KjrbLPD9sLvIzSvKgIqUyahF8dokwCl
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/CommonObjects/RegistryAccessControlForm.Designer.cs

SHA256 9b7f8b4d1c22c2939f7f4da4c161f84fb86b4173009826981d3d09e540d26715
MD5 6d10fafb98f600b3469bcbd550e085d5
SHA1 f346265e63724e0494bb498aabeb909968b3b254
SHA512 b952283c6ccb75832515106751d8757d79d7db9782039c89da634a72121658b3fd903b22a989bc4791f14a6a654761f14704cb659e624d95f2d1944e29d1d57f
SSDEEP 384:Jw1PNNZzCMBp4T5zJvKYqGC21BsgJMd6T6GUSYXlY6/c2rxAMabi3rbj2cQ8P6q8:21PNjB+T59vKYqsBjQT+
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/CommonObjects/RegistryAccessControlForm.cs

SHA256 8f38e8ebc335e86f71a46c51428fae9d36ef172e63ebc6e7c55e242359c96a41
MD5 3db73604aef0c760029041cb62ccd4ab
SHA1 470d051ce711c3d627a1a988598f912bdf3c627b
SHA512 5af5a0b6ca8ef229f52722f0325d2d392821622927f6e0e9cc6166d5c681ef4b29468167ba5f41a8371cc6aa8c1952913bf15bb392c90f21c82e9ba4c0a92dc9
SSDEEP 192:wHOKGpBKgwMLtNFv7gH7/z0otKq1QG2o6u2:bKGztLKr0ocq1+
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/CommonObjects/RegistryAccessControlForm.resx

SHA256 4363cd7d5b8671c72442ce1a1bfc10d64ebd24b2d718b54bd4fcd025e4967298
MD5 4eb5913a0e5aa842250f7419538fa230
SHA1 31fb76e5d9babe97a11fea041081f96ce426107a
SHA512 846207f9db4c05d2070482c27af72c50b8f423ac1c7efb5266b059f6a41362704e9f5a590e428f4aefd791edd2e21c1b34473361911cbeea2cfcaf741b5bebff
SSDEEP 96:fijrkiK5k5LPXbac9m5Lv6FzSvd4gIRjETUT2+0qSdvabvDBwbjBu3FqvuFZ:KjrbLPD9sLvIzSvKgIqUyahFZ
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/CommonObjects/RegistryAccessControlHandler.cs

SHA256 a12b0e0e0c713c1ba009a6d66059fc1db80711eaa41d99dc8d8581b4b882c56e
MD5 72721ba6b0853719181559b54d1054cf
SHA1 2895da6d5256d4197177055810b3ec81468b35b9
SHA512 23989b68ad435fdc4200f31032c12b2cf8f29df4f329f57296f396df7af0d2763cf9ce244afc4d58ca0a3af9a6dc6b140e350463294d881bd8b57ef26fb4260a
SSDEEP 384:gOnBnCjlQUzugdIxL1IdROOMfeScMTGHSnULbYxugLoli3EEgWDNdED:tljUygd4uOpqkxugLolwEEgWDg
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/CommonObjects/RegistryFilterRuleSection.cs

SHA256 ac0ce4eefcf0f98be8bed84b28672e39fa1ef41fc2b8e54d5acbf8afb5d164e7
MD5 585188e0dbc68cf5e3e2a99e87e2c20b
SHA1 4156ef6f18a39b956e1054f2496367de859a2407
SHA512 fa45f45774068a40a247db1574eecbe75dd8f5570c0ffebb8e834e670d1d201fd2035fe1d1c403e2a380c92fbc7050b1b27debf8c8c7940d0759a30ef26a2e39
SSDEEP 96:cj1HO7o4h2nX4i5VJzezIU4qr4tCutGT6U1KddbEMZ6i9tANuo:8HOUoiR+IU4qr4tCutAQzbEMZ6wtANuo
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/CommonObjects/RegistryUnitTest.cs

SHA256 abef6602f23b4312de97c53c68147c3868189bc40df47478407daec73a7a3f68
MD5 bdd7f6a0bf718a77bfc65b3ccb5b9ce6
SHA1 92399d24a7262325c7139cdbdf25148568f328e4
SHA512 4284d953234880728fedff2de09ac6ecb1b89c7cecc88bd1e31822b686334f488d52ca624eb69f0c05dfc23c78196f8d13f1e10d25ef66a19a677b615c8b084c
SSDEEP 96:wj1HO7oU4hV0Xz0y4vJKtrjv9kji7/CLhkjC7eUGkji7vWoCTckjGkjuKy:wHBPK0UvkiLC8CaUziLWoCTFzuV
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/CommonObjects/Resources/about.png

SHA256 96acb3a8a203e91dd6243941af3df0fd62d8a62b2ea5bb4b5078dea5e80a63b9
MD5 cd7b67afc587992e0c86a85d8c2537d4
SHA1 b871af0c18f4404dff26aa781f72c1351e89e566
SHA512 8bc5242cdac4f6ff5cc5eb9cac29971d0d6f0705f1963e549c354796d0195f49faeb721a93700896d2c8e5f3a0a2ac006ab706e2e1f3e96bc9acc3da3b2c7637
MD5 SHA1 SHA512

Demo_Source_Code/CommonObjects/SettingsForm.Designer.cs

SHA256 b14d89057eba525ecd27c9c45ff4c7536237f39b57b356adfa220643164026bc
MD5 c82c6b388adadcb05710ef83d258ed4f
SHA1 fa7fc2a9d3d9d68b666479e1f69d8faa82cfd60e
SHA512 b7df017a5fbe3eedf646782ed176ce351a77005210fa61ae86e37c500e12c55cc34e396a8bc4b108dda8cbb356d48c71e3f98159a60afeb69f3ac03e4dc07b8b
SSDEEP 384:aw1XSrBDsPHyyWUSl0iolHI57VS/ADY6ZHbn1NZSt9ZXZcRRN9V/lQAOxfeQtAVO:11coPHsPRIqBRT5xWKYqGMS
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/CommonObjects/SettingsForm.cs

SHA256 47d45761d7ff3116471a33379aebd88947760eacbf78b0e649485e03c1383f09
MD5 b690791d5a85bdf55b8e9a04c6762a7f
SHA1 759139b1909f49e325926eeb6309263aff6b69bc
SHA512 7e7e3548d4f48df0dcf9bfd6da433d5006eef5357c0bdc79f524659ffa90d8fc8ec6c0b17444ecae0efaacc190160268ac81788d42414dc20009b90fa746edf0
SSDEEP 192:wHOKGpbzkYp2g4fKAB5diX/zB/Rt94eNY3TRcMvKAOh9LrTaJmy:bKGZzdp2sAv4XrB/RtYjOMLM9PTaJmy
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/CommonObjects/SettingsForm.resx

SHA256 61d713b0cd161a08973b1dd2173ac9bec51fea7b6b9639c997a49e16e8b9afcf
MD5 1d9e2bfa9b59ec3bdd2bfc7aabad6c08
SHA1 8ca37cbec9257b15556e712ff24cf539e3509038
SHA512 b55b22d85174485527a917cb59ce113a7555523a86c04fde5f2b5b990e4646e64cad7948dc8086d017f7e2bf2c2bef7a4e30c79608a14015c26cb6a12aa5abb5
SSDEEP 768:KjXdskSv6tx2sR+oS1CMRDYE3/BVVQJA0e99txdlk1JTt5ESpDn/fvCGl:Kj2v6+GBwJqA0s9Jl4j3n
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/CommonObjects/app.config

SHA256 2cc8f2c332f37eab96a47ebbd9db9dda49bd3ccf37cd30f933e60b8f8f1d55e7
MD5 d96a43cebfb97ec0af19ff552a8d02b6
SHA1 9bc39a57f4ad26822220cdbc643b94a92ca61925
SHA512 82c904aaa613a1321d67c63b315629739c4b3d4a9fc358fabaa85962331ca55eac1943f80c7d31e2d391434f56a6f402a6a55011a00e53a45fab768483fb100d
MD5 SHA1 SHA512

Demo_Source_Code/Demo.sln

SHA256 fa056666bcac05317c92f1803786ff9a2d37057532f51a6e9e3aaf4da36554ce
MD5 2891516c1d43ce597e5e46cc83c92373
SHA1 b4ba408b74e69c88865fa68497a9ad3c3d7b7522
SHA512 1b07c3815e30518668977500fc6852c96d1f178d74e2fa8f064d8d95c06c8a42de788ab1ed57184677e2a1d26bcd05225db99a4da48edaa9b221649946ac605f
SSDEEP 192:cEd9E2I2UXh7myUH4HDHZHnH+H6HDjq8etBDXWUqlpzbR8lD3jd5aOqyWx:jwQYr1H6O3
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/EaseFltCPPDemo/AESEncryption.cpp

SHA256 0ce2d8a73eeb9cb51496de67214135fe790c9f1e70a27b6b9e1756640e39799a
MD5 faa05fe6cb8388a1f0ea0965ea4dfaae
SHA1 be35b53c338a854fc8c462e7516c888c3e21299c
SHA512 d3a627b8243d0ca948c005dcb1f40d4a1eb061a40e0ae0a03d108d0b911ea22664cb4b3eb57d3eba3cfea85ff0550ab7fddffa720a5e4218834e0da7129731bc
SSDEEP 192:FHG3S07CyShVGHTKP8N8hVgLp5VqoOYv2T6IKCn5dS6POmSOXSUVpGjA:kC07g7G+P8G7GVw6IKr6POmbXSUVH
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/EaseFltCPPDemo/AESEncryption.h

SHA256 4d82554ef33092361480189acdeb8670e981772625e3819f35dcc1f8ff71b543
MD5 43a5462877b363f7708bda94ef72dda4
SHA1 f7fe769e9f39ef1264cd30a2a35fd96cb0b6bd43
SHA512 4f2da36db81e3d6662d9b51349554308c5cf2d6a55912a53055d1b14ad787b5b9238d5f010b6cec5ff816412d84969e1056f09bd82c949eadfbebd478be0116a
MD5 SHA1 SHA512

Demo_Source_Code/EaseFltCPPDemo/CPlusPlusDemo.cpp

SHA256 066e4d185e53a91edbffdbf93d7492f79cd5c261e7ffd575f9f121e98ed53f49
MD5 af5ad9f99a0c2f595a8037fa18dfe45c
SHA1 72b55898fabed7f72098142d5e9fd0577db23326
SHA512 8f0a9cdefd6796a9396c9a7d0f5fe648eaa31c1cdbd61696bcc63372d72b8abb501fb7ae0dfca4e49cf484deb41b4b10bbcfeebd99f0868721de93a615890f33
SSDEEP 192:FHXc2UcGqZ0LBRm2Cvjh+IgkQ9ooay45bKPnxhGiRvQM6ooay45KDX8Wqooay45g:7UzhNgvxtMlyHzI
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/EaseFltCPPDemo/CPlusPlusDemo.rc

SHA256 ab6ec64e0e3add41a34f1d3f23dc55b5e5251ff6caf0721d6afb8ca0573fe445
MD5 30c4c697a3668bbe49cf0b32defcf467
SHA1 5fbc96cebb613c6e843e67f2b8b1449c3ccf09ce
SHA512 2f9db6067935883aee38b0d3670d1f6af687084761075662c7522b5a3030014a39ce5f9e14dfb155b60012769c0d03b4666034f1686c6ec4a3c820b1d12d843c
MD5 SHA1 SHA512

Demo_Source_Code/EaseFltCPPDemo/ControlFilterHandler.cpp

SHA256 5bb8229030bc458572b6bf2fd9bbfa61c854979f72da20046c75c82bbceb1084
MD5 9ce298fb83264b194fb57650024cb348
SHA1 61bd04c65a17b744e06b46a41f0f289710b0af26
SHA512 0a5d3ef52c4847b25e4ce910930ca1216954ff1a5fa6f08b47fa986478f07846c86c868f1cee91c4c892649267939dbef9f2a5183a7fdcee3aded09fb2097d06
SSDEEP 192:FHv/nM0tCKFCIpPqSqZvxVqI8nD9D1JqhBvBIJMpqTVCTrqIqM:60jdqvxfL4Iv
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/EaseFltCPPDemo/ControlFilterHandler.h

SHA256 167c504babcf40bc0226b864915153643439dc6cc045eaad1b8627ad111d0001
MD5 e672460e85c020fefa276ff58a05eb95
SHA1 a791fde1c2cb529912120cb696b924f40ed3adce
SHA512 7adcca0bfd9d81cbda53ce18d876cd5f7fdecf333efd8e42f6c6787a597ac12f2916741274cf6e0a8c740ef49c7d0169995be9401cc56f35cfa72516f3661f4e
MD5 SHA1 SHA512

Demo_Source_Code/EaseFltCPPDemo/EaseFltCPPDemo.vcxproj

SHA256 8c690819cda48bae7aa9f6f02ed6bbce9db0548af032b89d51bdc161a3b2ae75
MD5 0604f3cb55eab27f6659f7b625529182
SHA1 bb5b3a2e4cba781cdc145d17e0ef90fb94b9849e
SHA512 73fdc32b310e0779b94cf7187cdd3e36f9128d33fd4805bf07e4cc7ab20152b2a20b8499475773db574c343434886e05098bc932b50ac6d2986c7e93a15b8480
SSDEEP 192:z/awQToVIvC2dyh7Mxv+XcN3+XIzu+XmZjU+XzuzE7b7Nl:zarT3y6+S+1+x+DHPpl
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/EaseFltCPPDemo/EaseFltCPPDemo.vcxproj.filters

SHA256 a4915426eb070e3a3b822efbaffd29680742c15c28d0a0857286c2812acb9b35
MD5 a27ae89d30ca971dc5a582714c16dfad
SHA1 35640673dc19ebf88ada6f632adc7ecccde0a9a8
SHA512 ac9ee584ccc805132dd1f5086714c1d8873ff56f46cc370d2a1e3bf95d548ab25f28bc5c4f251f79d2fe22624a2846b6388ebe49b94abe8be1abee37c4d9b24b
MD5 SHA1 SHA512

Demo_Source_Code/EaseFltCPPDemo/EaseFltCPPDemo.vcxproj.user

SHA256 f2f2e1ebb09bb88b3bc3f57677a31e0ae1b50cad9d5826e00d6b2fcff887974f
MD5 02816bcc1da4abf7ab716035d355eb7c
SHA1 43e826c5dfe10c024f4825d5b2205f1690c6f495
SHA512 44158ec480c70eee35f66bd878b17904847e7a1bc49cd23761bf087b5a56bae4ded164bf730559b8c554e69ee515ba6d561c9cd77b4eabe88f0fef412cb67a44
MD5 SHA1 SHA512

Demo_Source_Code/EaseFltCPPDemo/FeatureDemo.cpp

SHA256 3918b56f226e72761944de93739d32dbce21da4d55550f0441e9d0711532a0e1
MD5 eb88af7e3f2bb7ec6fab4e699f05fece
SHA1 052c57f8a2c47f1dde3345c6424d02f98f1cc9d6
SHA512 bc8f176e07e223f93e49c6ab9f0945e60c2b6161663e88788e24b19ab81b2224e6a3297aa1fd0291f75c97d5d538ca537bf7e98238d3f0a196413c27af45c479
SSDEEP 384:THfmqvnA46X/arXzxVWKMxGDHLwMe87ndRdAaoqcXPihk+:THftUpChLXzr7
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/EaseFltCPPDemo/FilterAPI.h

SHA256 cf2ddf4dc2cd05975bd348f29441e0ece917a7548b46701904a5c509fd4b1038
MD5 a0ebd1337edfb6dcdbc04b6b293ac98d
SHA1 7458da9ed80359a1a1057f80efe2c23748baa3cd
SHA512 5ee397526e406ecf086c75b5609652e68a797280e40c93d903f39210a04b41a5a5054ae1d3b8ca9df102c9d8bcea97716e1971c37e7404f9371f3abcd49ac2d4
SSDEEP 768:Z9Qrb3Q3hoKry+k+BT+s+N+1+Db+YSehdtdpfvg9oD/53pBOlmcPc8/z/gNfXJlu:Z9Qf3QxoKrBb4DM02nwC9ArBOyO
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/EaseFltCPPDemo/FilterMessage.cpp

SHA256 2cfc84fd95495aace83fe4e00224e1a0596629e67d769b71a6fd849b51db7b9a
MD5 3150c8c6e217cbf736c0b6771ae8e9e9
SHA1 bcd8701129c9bfbd785d840c0afd9461f7876854
SHA512 03511d125e5a38fc3efea77c18a60eb6320926b1ca4b688ee27eeac4f6a1dcc5458bccf66eb6e15ce6793b46f0777675c05ee9e877d6af7db5d8cb457a4f97e8
SSDEEP 384:oHRDRrnHYr/sCBJtXsMXujkRsMROjGDr1jSDQcbGy/cCoAQ4BxoqMkMvqK86cysI:2HJMcM/iMtDrQDQcbGy/cCjQ45qDJiqh
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/EaseFltCPPDemo/FilterMessage.h

SHA256 d25376eb88f2cc3daf4f995d90a0dd7168d0457285fb1c7000341125bfe3d17b
MD5 5bd1f62d14e9eae23204304c62529cc2
SHA1 5d30626d04d1311f216dc1fa607acb69609925ea
SHA512 0e1b3559e327f52662dfdfa803e4c9fec77ceff4274e8da706138ae30e1778a51169069173eec32861e7f5fa1a20b1a988c40967d3bfe271d8ef94c1ec672baf
MD5 SHA1 SHA512

Demo_Source_Code/EaseFltCPPDemo/FilterWorker.cpp

SHA256 cb9883df1598bced2a410afb81a7ddfd9e2ec66e6fa1c382705cf285d28f823d
MD5 ee3169c8e207c1c58c9b938d8d472cbe
SHA1 b9cd04a0d850a8c2bae3b651db04b1d2d2abf134
SHA512 268f4209723ad5d357e2f6cbcceb034af55b6c6f4d07292849058853042efaba6f8d9aec566183bd9c676e77d2b500094157e47ec27dc9e5dd67ebe39951a0ae
SSDEEP 96:Dj1HOg+3ElfX7uB/SVrd81ngA8Y82uEkjGKcoeXTqb9dLQtGAEC:FHh7uB/Sz81nP8Y82uHjGK9eXWb9d/A1
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/EaseFltCPPDemo/FilterWorker.h

SHA256 e50b070f47c5ede458ea79a326c1bca329ed00049fc963e93c1589ff7f906564
MD5 44a65d954f5f29b0892baca2d2238d81
SHA1 2157ea25bd9bf6d4beb9e4bad900d35124676ab1
SHA512 214a619a4225067e051a09350d0dd398225ab521f1b9fd15105045d947df5d247cd2d8c2f50ad808ce2093a0f5a9413d54b86d828123d3347c850dcd8bae7984
MD5 SHA1 SHA512

Demo_Source_Code/EaseFltCPPDemo/ProcessFilterTest.cpp

SHA256 596fc7533813b7bbee77dd4cc9d742f9fe21ae7fa509481bfdcff40b9280028b
MD5 7b81dd03fefd679299cd1ac7cfb2e1ce
SHA1 d4f77c317e46bf981f9a317aa700b287e9454d89
SHA512 325c1ff34c282fd51139667e8244783ebd7b12193008329a76f826c7d0581a1312756580ea10971ff3a7780331ecf1367621c8321f6582f67f40284e80c88be6
MD5 SHA1 SHA512

Demo_Source_Code/EaseFltCPPDemo/ProcessFilterTest.h

SHA256 4e890e62fb6f846c9839fee0dd7ec1ec6e0fc78441a62c90174ebedfdef6298f
MD5 9054eee16a830df54c811839842d4943
SHA1 f5bd1ba42e0c2c90fd98cac56a97ceebccd064ad
SHA512 1cbbbbd6d887239c70d5e59a8a1a8475a959028e432fc825154b9480988a8dfccc617d62cfcc6ddf02cc7f7f080996ccef67ed33a3b84d87ff3f74ce2b315ee4
MD5 SHA1 SHA512

Demo_Source_Code/EaseFltCPPDemo/ReadMe.txt

SHA256 b65836bc882cd9249e0f7798ee0da5c98a519fe2703836ffaca00a554b10be42
MD5 0c12f7bfa81efc24a9c52bb55c944294
SHA1 86e0c96a80e67c0a407ea9861a3e96eb53808fac
SHA512 6d4e84279baa2e96bda07aada645bf6410ac8aae568f72ff5ab6f64e5bda2d402bc50b279e67c0761c3b1a98d14e370c0788d4968f2eeae31f3e221f49c8a203
MD5 SHA1 SHA512

Demo_Source_Code/EaseFltCPPDemo/RegistryFilterTest.cpp

SHA256 0ef14f9a2910081b9de4798614b9a55c320439b88a4a63603adb340c7c0f4d2d
MD5 bab62df48253cdb06dcc6157aab8bcdf
SHA1 598d79dfeeaa3938de9c5b1cc004fa588aa07d30
SHA512 862cd6ca599976cdb1846de0bcec59464a64a02ca239155ccab15fd13fb342e5fa3db4a196124238c62fae295c1c7da2b422e48ddd10ab0d5be26a11c135c903
MD5 SHA1 SHA512

Demo_Source_Code/EaseFltCPPDemo/RegistryFilterTest.h

SHA256 f3fe860937a559743423a7b7e96fafc2df846bf1b41cd88011c15528b99f8682
MD5 780e21e4b5a1285698679dba0ad6c87b
SHA1 17e053fdb386429ee27d6ecfe8989014c505f658
SHA512 4155c72c3179b90d304fcef44ae83f59ac30e642d1bf571a5ca0b240da9ac69d5116ae5b7aac838bb3b4fb7eb7b5caae3cdcbb34140c102176f5dbb14f7ec92a
MD5 SHA1 SHA512

Demo_Source_Code/EaseFltCPPDemo/Tools.cpp

SHA256 0613bbd42b6be3bb988bbbd51f8ac3185cd7916e3a3a8f76d02879d8bbb9893c
MD5 f938075b2d90e9956dc85cbb244c841b
SHA1 0cbb831f7a0c0efb60efc01a936cbd7a0b1a74f1
SHA512 7eabba0ff7f5ef0c6613c2e6eabe8d4643d3a7189257a919be4c739e68332634f1e1c4d2241c3f82fefbd89c6b559321f946299129b598088e4b01ecce9177ce
MD5 SHA1 SHA512

Demo_Source_Code/EaseFltCPPDemo/Tools.h

SHA256 0316a6a2c0b9b8aea5e3f14d849f42b6ee70d257d4d4b03326535c484c0200ab
MD5 fef25a5a30cf6cbe5f8578c364cdc354
SHA1 4e847367520dc8dcebaa9cbb26880f64ce877947
SHA512 f1a4db026aafc8d5ce605f8de5fd00429e9247398d0a1e840809498cddd2e6dd0d8c67f0f1658509250608560b421874de81494eff7eb99750a59397006a0d3f
MD5 SHA1 SHA512

Demo_Source_Code/EaseFltCPPDemo/UnitTest.cpp

SHA256 8d50a144a090a94b6eead853f88fd1d0e0bef90e376ab4096353253a1ba43a6f
MD5 6d36636318bbf77d8fd874318402cd01
SHA1 885cb30a1152ce8846b649d4fbac74a23fa5c1b9
SHA512 c0a5e80c8a560e697afb91863945e1d1a09acbeafd2e7a523a3f7d767b6c364affb0281535854c96adf396ebcec6ea41a55ac35e698448db9a9385611bd8d044
SSDEEP 384:7HfmqvnA9syMX/KrX5oN255xAsWKcvpLNjGxxHLwEXe87Amndk5bAaGXq2EIskdH:7HftLyMxi5sXvLG
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/EaseFltCPPDemo/UnitTest.h

SHA256 df0f556140fcff6852a68e00e823e07e8d095c9686926b0526428efe3b4c73f6
MD5 a3a5f5e3569e734f32a1630a3e8d895e
SHA1 f68afffc302418f990c26974211129c03b42654a
SHA512 80a7db58ab5c343beb16a7cc9883ad506d813946d4d3fb211a5ffc52d770d1af86569c368c35012693f3a11782646eb1768d228c10929e91e418fbefe1e92845
MD5 SHA1 SHA512

Demo_Source_Code/EaseFltCPPDemo/WinDataStructures.h

SHA256 b188131dd6cf7bb1748c39eadadf6d31079c1c6d6587d7239fdddb2e3eb6bb7e
MD5 f35cc249ae52658d4bd3cc603aae90e2
SHA1 9cece4282d5b245c17481e17a81c9c93a8595b5c
SHA512 510580241b65edeff2768a66cd5345c6b7d5a6a884757d6ed679c62a8d063bb26d63315519f004f116f546950ee42eb8295807cfaa4a0298d4d4f2fbef2a2499
SSDEEP 192:ZslQbsCO+R7D+u7AXYKDYBdG7DYBdPBY8qDYBdPNDYBdPjDYBdPlDYKvDYBdj0:GmYH+R7D+u7HKMBdG7MBdPW8qMBdPNMo
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/EaseFltCPPDemo/WindowsService.cpp

SHA256 e83f0305ef0e5c64d6999a0900501badb65accabf585de2b5c034688f74e2572
MD5 7bfdacd3560265475b5c655275d5cf7f
SHA1 87a3af1c268570a7cc1f4408d4d09be8d3eed4a8
SHA512 617e99bde6ca64a8fb5eb1ea4feb72e4ff7a5899007f182142291ba4c438e2d87939bb52edda1d0c632d9ed2409c4fec94628cec8fc9195db571e912c3feeb22
SSDEEP 192:FHcSMDufhR8AopkmFThoQ9uDVVoo+7Ewxegt2xxcB5SaQ5Kooay456H:/VON9upoQQ2xEx
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/EaseFltCPPDemo/WindowsService.h

SHA256 a037e4165e1a821983238e983f2a8b80c8ef9aec43dca5179cce9fd137694f84
MD5 762be616d74ef2bcf9521297e0ad5464
SHA1 b1d72839f48f6bc649e3773dcea3c34f2f8eaf37
SHA512 178673415582f76ce292d83b0b38116dcf17d53d68c5fcb1c3539449ae55b7c892834a44f35083b6c6041986803e470625b10b3daf7bdd536294b9ab9b1cf8ec
MD5 SHA1 SHA512

Demo_Source_Code/EaseFltCPPDemo/afxres.h

SHA256 7f3b7d655a5a3db20ca26872fed32d5b049d69b33ed351d002854dd3e1b59715
MD5 8f1bb765d7e9151193e5595a64a44621
SHA1 66d79f827d0d993ba9c83baa7d419c24d411d7e3
SHA512 5a028612d1ee679cecc2492b7d612660c410bce4d27b164bec3fde9ab2d171faaecde27309da1815e3951d4c436857be2fc1a0887b17e44544e7e9df1591b45b
SSDEEP 384:Bdq97zOKzJD85sabtCXuhELly/SySSa537indXJ+:BdqV85sabbhEx3Sa0dXJ+
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/EaseFltCPPDemo/resource.h

SHA256 7fec86c4f3f4de9b59b047bcd8d195ab2f9c5f80fd6149ee6f556c70ac4b6b73
MD5 b7b08e31a6acf1c2ee66df031eac0551
SHA1 ce959780c0e150f23868600b761c643f4f51bdf1
SHA512 8afdff4a23ab2754fc7ba6cce6df8a9b0a524515316389c3bd0199bcecb4a483d8126b206aa38cf73b0ddcc7a63015cc74fb43246f4cd4eedc33198421af3584
MD5 SHA1 SHA512

Demo_Source_Code/EaseFltCPPDemo/stdafx.cpp

SHA256 6c131c4e32aaf6d2318a4a82d41d1e277662b5a43e2b778bf9555340b71546c5
MD5 012a64cd7aed7c850023cb8d1c011b7c
SHA1 365bf3e6871864968146bf04d04f093f7521df30
SHA512 8b05b3089dcd769ae9014d4b51140063fc52279b9adb7376d9766803d369601be750c78f4ca5cc86ce876d7834705a3d649cbf6972c292071c66b261dbdc533c
MD5 SHA1 SHA512

Demo_Source_Code/EaseFltCPPDemo/stdafx.h

SHA256 5025ad57b999bf045c80864561bc08ffb5144863859f66285530939a93381e14
MD5 658ea4a225a0e08382cb5151d5ba1d62
SHA1 c9c8c7f17119bc3c6cac08fba3510c3be3fc5cbb
SHA512 50655c497beeb254acec20bd3196d1a4188f0c10a352e584c00584cacd950c42417096a19234b56cac44ca3bd49afa1bf25ef3ac42a260bae7d0af5571e02ef0
MD5 SHA1 SHA512

Demo_Source_Code/EaseFltCPPDemo/targetver.h

SHA256 bad5ca557eb99c1e3a43d3098fe0fef8def7228b724dcff3a72143f3717a8eb8
MD5 ca1c19b9c013793a766ed9900d6968e0
SHA1 27ef56be395a20dbe482bc8df3185f28591ca08e
SHA512 4200c14e53676970a3472002b8b00ce94627dc368841b86fe2fa65c5541ca1f322a3fb6dd5d41556469b0fefc8763c35c7c7b4b5f1896d194c97dfc396752e73
MD5 SHA1 SHA512

Demo_Source_Code/EaseFltCSConsoleDemo/ControlEventHandler.cs

SHA256 62574394f1d2d7ebb897ad7827103cce909a689673790d20c1adb4e7a8f69ce8
MD5 7828302630c1761d656823b1ef5d8e93
SHA1 8997fae1efed6fa1c74d5a7e8d509362b0e74db0
SHA512 850a2117c25f330597db0354e3c49ddd6bf80ff9bacfd169357ca16e837119e32f491c9c5dd2235cea157ea14bc6a7e6155cda436d5d0a4c871fdfd16081d8db
SSDEEP 192:wHOK+N0LLntUzYz+FXF/FMNFL4CEvby6fDXLYUS3i1l8sM:bK+N0LrxNFL4CEz7fDLPS3i3jM
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/EaseFltCSConsoleDemo/EaseFilterService.Designer.cs

SHA256 3df81d207d6e06f435d3003f2137e68d7cc5bab77c45bb1ea47377cb0b2606bb
MD5 075b3271e00a6b041bd6a1f35e23ab66
SHA1 58fb435d0cb1b66060571c7a7f5f719580924fb4
SHA512 4cd9fd25f383223f546b418800c65802dcdf412a79d999c5bab56f5501615591f6b4433fe2de29801635c24e7240662521e9ccbaa41b3993b75b3f9092dd725c
MD5 SHA1 SHA512

Demo_Source_Code/EaseFltCSConsoleDemo/EaseFilterService.cs

SHA256 18786810a45fbeacd459efa0bbf6f822a505abbf26251b32c6317a893669741e
MD5 13e20b4774476a63952771ffb1501248
SHA1 403095cf9cd0c804899739cc1bffbbb2b4e17c67
SHA512 44a8fb7d43c9abe3c128fda1f1700d40e1151cda00a734c730a10159901d862068a4103c010da0adc49fa6eede45b67d19b811a7e6e3a1b396491be3023a2f27
MD5 SHA1 SHA512

Demo_Source_Code/EaseFltCSConsoleDemo/EaseFltCSConsoleDemo.csproj

SHA256 8db198563f12ee2d639eb7459829afc0577abb17f502628e42e1086b0243d250
MD5 547e31d0fb33a53b99b123d9f278eb8b
SHA1 9d8f3cc15939ca1bc1eb22988ba2eca5bb1177b7
SHA512 63613b641d9e4bee56f63bc61273386260a59da8b446af8be90a278619d3c24325dccec9e3ada0cf50b215e5b735b0b0c6c969fca211d0e799b8568ede314ea6
MD5 SHA1 SHA512

Demo_Source_Code/EaseFltCSConsoleDemo/FilterWorker.cs

SHA256 7500e364e0592391b4778f4fac486c40bf1506ffb4de236632dad510cae67947
MD5 758a1cb2d323c92291a15fb92addeb41
SHA1 6c0c5506426ca159afeddb483454ef4ca95f1736
SHA512 24237b9ce2e93a4299feeb9d6ab1ddb5c764d021c2e4387bcdf909b5e0ba7e61834dc93f2e721464de8aeae6a55e6da70e67344790f8c30cbd7357cf752fe878
SSDEEP 384:bQ5mXVRP29vLPfTHlb+3SiLCJ2oJ5AFRvoqPPztyctv7tKYt7EtHBtaWnGpySLtD:bQkXzP29vLPfTHlb+3SiLCJ2oJ5AFRvZ
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/EaseFltCSConsoleDemo/MonitorEventHandler.cs

SHA256 384645d51c241541f5461ce40a5dd4ecc73051825123b505f545f652fc926eb4
MD5 308ad8bb47feda54331ef6904ec56a24
SHA1 0a27c370fb404b5088477c063e96507a0fbcabbb
SHA512 5afe35b25a2cd5c524502260708874ddbc91ff181c058f52a4384d7c2b2dccec2cda0f3bc16f3c56c9c320f20a042358e61ce96d57bc14b12f9bbb926418e036
SSDEEP 96:wj1HO7o4h4DcX16UV0yZ9THy/EFrzWrzcmtnFCLVFzUEFdFzUUFzUj7NJepXoCuX:wHOK+NDHyUzYz+FXF/F32Qg
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/EaseFltCSConsoleDemo/ProcessHandler.cs

SHA256 106ab9ac7478bca6ac3a5c7263b0904bf0caa07afe52b2deda62f191f45f949b
MD5 306c0f190eab4891acfa6047e9dbdae7
SHA1 660145c916271d306cae1728ce75459f4df0a0b3
SHA512 68536b7c3f0a9efac277958d833d939b9b5241392559d4b869d316e921a44d23b36cfd9c73de32135e5fc2cd2b83f026d1106aa7a21e72d792dcf708697610d7
SSDEEP 96:wj1HO7oU4h2nX4P6V0yFT9TH6VzCfFzUEFYFzUUFzUarFt:wHBU3NrH6VzoFuF/FvP
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/EaseFltCSConsoleDemo/Program.cs

SHA256 ef0f04b7f0245fb75e211d1819033964a501f645b5491f8b8e36d2d764d3243f
MD5 08caf653cea5756795aeac4248bb350b
SHA1 2cee37ed6ada4a8073a0b0b611a42b263ff42955
SHA512 17c31469975e432d7591402eedeb5c7d0063ff9ab78e8678a4bc75857ad9050bd88ba23ccb7883d7025bf3c68022b6d00e5c196b4dabf1e614b3dbb35cc4d5ac
SSDEEP 96:wj1HO7o4h2nMXU14n9P0tgaQZoRsBCifzUJ:wHOUqn9P0+aQZoOBCifzUJ
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/EaseFltCSConsoleDemo/Properties/AssemblyInfo.cs

SHA256 792058d95fc152630d103cf76e2c26446e8724603f740cbc83cf19908da643d3
MD5 45d6d2730ab38b5af70cda65f4bdda25
SHA1 8a7122dc7e6f16ce5396dc68843e4a00de891b2d
SHA512 830135913031b185f9aa2e65d38b02615f0cba5fe9fa675a9954a5a01c65b28bcf2c0facd10e14d6a06cf21d9d3c71b3643a2afed970c9c6ec7af96b255a1dbc
MD5 SHA1 SHA512

Demo_Source_Code/EaseFltCSConsoleDemo/RegistryHandler.cs

SHA256 15e96fc91030970f1cb504cb6ee0341aec4f2c1ed8becf347b88eb17f23f9b68
MD5 6e168ad790f66dc62096d6cedcfa9887
SHA1 4fd90780d00118933693b7e0264e7a4e69bf3fa0
SHA512 51815756cda0315033b916fdc224970eec3e1b8541d754d7bb9c69b415259bbb3e075b7364ae25c8d7aec3410fe5775f5ee86f93c115a2516988ee873a80c61a
SSDEEP 384:gQ/qBnCjlQFVsfTy+sfWiyBQaOiApanAsV8BYjiY0D1B8t+n7EAdg1Av+z:lqlj+
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/EaseFltCSConsoleDemo/ServiceInstaller.cs

SHA256 89867cdb550b416fc7c7069f6977d96fe5494c1260b55e07820861806e2f76ca
MD5 aca2c428013d592bb15a175adbf7d9fc
SHA1 cf7bc5f07030416b9f8062b4fea2600613c59546
SHA512 8c382ec68c7b53ac99c7819a0544310e9fdfb74bb898e652a4c160f600f63e61dfea2feac1595ce34dddf1a5c62bb727fcc56e0f1df6895842cae35303dbd8ba
MD5 SHA1 SHA512

Demo_Source_Code/EaseFltCSConsoleDemo/app.config

SHA256 a19039a8b90568d0c887bb98b9c56198269741a9e478b5d09da18a35b0ce061e
MD5 c6be3406f817825fbd1178f2990f92a6
SHA1 b818e71c3d0c68cd25d24200406f343284d646e9
SHA512 9d727120b62c06f424ba02ea5766f9d3c7aeee997d68e3fe1b6e92a672d21d89433008d1330bbbc67428dfce6b0f7adeecc0276a3974be6b43628f043c95f558
MD5 SHA1 SHA512

Demo_Source_Code/FileMonitor/FileMonitor.csproj

SHA256 3f73164b7a1775adc9e143e9ded66268905b97fbe66c4b2ef0f376b21bba7bcf
MD5 6841e38ff2d044442b2ed83e2eaf35a4
SHA1 d5427d9ec4fc26b5f813a52eb73f040603320ef9
SHA512 8d628eaa50b97079caeb66c26b1c49b7dab34a93f5d542c7007760f3c34526025b362cfda942bf8488f46f6ce1b10cb88b9113d4211a4fc9f0d33243cae0f0be
SSDEEP 96:yl5x895TZOTpV+U0qkyx4Iqs6UxqS6UxVtEZK5vYkiBCHMOdsHSlaMMUMG8FZL+U:Kx8PTUTpV0q1qckmaBQU
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FileMonitor/Monitor.ico

SHA256 55ed6c1612ec5f3610c708a692464c134c08f23fbe89f184b04476714fd11398
MD5 bf5cbfd45e697b318109523f5d4cb808
SHA1 89206ed4b32588b0a200c3bcef9996df0c69f597
SHA512 1a234651db7076083a436e1c1e1980f3f5380f14e7791b3c742d3a502aac0879a34516a1b64f1375a9c76fac671d476e90b74f3ea934ddda626081849790fe44
SSDEEP 768:wVWyTgQ4/PPjcrAQn4szjY8b0rssUQMkls:wpTgQ4/PPjcrAQn4szjY8b0rssUQMf
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FileMonitor/MonitorEventHandler.cs

SHA256 5a7b68c655fe605cc719d71586212dd97395034bb4682c0a9978783aadd197c6
MD5 fc8d898d063aa2927fedcd6e7be1c6d7
SHA1 28f8c0657054a8d75b24c4f654c31f539f290473
SHA512 f4432d19a4b6a53644b1b5e2b131801313b39f4ba287681350191b76b24ab8fdfaceabc767dc3407ca66a8c590fcac2758ad49c0a7a202140c596b300160620e
SSDEEP 192:wHOKGxN6m7ynmjq5WlQZR626LjVTOT5ebBzYzcW2QJ:bKGxN6m7m5WK0jgUbPW2QJ
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FileMonitor/MonitorForm.Designer.cs

SHA256 cd4b6c7a85efbf1018a4dec4bc509ee6ccd5eda687b9bffb95c1705061c2510b
MD5 14fafd5736523edef47854dad5096296
SHA1 d7a494d26f0c9040304b82a515283ca281048ef1
SHA512 f4592a834f066a4066b8b18bdea6faa77fae388f65a66c1915ddf2e837b5335c23b9f3f18e2cd2a389e149f304bc16b1ac6dffb917b666d54de18fd0b70ba282
SSDEEP 384:wZ3w1XSva8+8fWNe/TTLljfQtSTNlXCtRvxulxluJciStrN2lbUlEM1JE0XidDcw:h1Ea8+8+NETvFpcsSdDcw
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FileMonitor/MonitorForm.cs

SHA256 dbd54453bff6d188c430a1cb4f4a891d90c5d1745db4764b843daddcaa50e986
MD5 90d20b1bdf6c33addd3bb14577691669
SHA1 555a224d37645c37723a86da68d527d2fe43a9cc
SHA512 a819d372b78cdacc410521e75b0a227a06a23d9396272a32036b5df94ff6c260f4e1f9bdfdff08a2b024e7c2a320b0b6c1630c9325446a614bb88323a0b75511
SSDEEP 192:wHOKGptgj4dCQeJ8tMPfR267ECprkdWmG:bKGIj4dpK8SPL7jriG
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FileMonitor/MonitorForm.resx

SHA256 113e63e5271c29305808f4ce275a0402763b6fc986853b7206bf00896d3aaf0a
MD5 b81957246f08001988a47844865df8eb
SHA1 7bd11d5eb0b608b8d742598faf212c3b887eb42b
SHA512 35a4b3128722594660137c5b11b02ca9976d184ffd787a7cc1ecb7d7aa269f26aefdae2f31af0b6393d4505105a54c28b41b5eaa6c4a6d048e2d182b59f21943
SSDEEP 768:KjXdskSv6gxAuWFF4VB28AzwHtqCLaoY0oGpaO867UocWWMU/rhGOl:Kj2v6gxA7f8r0gguY2aO8h/5MU/rok
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FileMonitor/MonitorUnitTest.Designer.cs

SHA256 10080d1d28e9e90e27d983c7183986ed47381d21fb072b43652c0a2553edffa0
MD5 60a7cba24eb1717c79fb82eb3914b331
SHA1 4f7c2cd3b700604f3571ba7471445e564398406c
SHA512 daec206a5c3f78ae58670c1b8269d405e8b7ff3d15a67bb7f2562e0d95888a464205ae153cdb768ba1d00a4c84f13d685808e92ea5ba691e3d0d85a15bd89079
MD5 SHA1 SHA512

Demo_Source_Code/FileMonitor/MonitorUnitTest.cs

SHA256 1f714a3638d5961fb4edde297913ccb0a554e74519b7d068e2595f3ae7d57e1d
MD5 6261ae222a6510e60afe81dfd9f281e1
SHA1 4a6d52b2d76ac272d80bb57f5b1e89116806430d
SHA512 739e4b2c424abf20355fb2c0fba21c613d39766dc19a36984e7bd34fdb6d1e5bcd2e9460bdcdb19186bfd219eef34b5ed1b1fe19c05c8c9f6bda8d1ad4d21784
SSDEEP 192:wHyKGp74myb1vBWdajJkSTHbcdDnRvSfJh+q:xKGTyXgajJjTd+q
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FileMonitor/MonitorUnitTest.resx

SHA256 d079c091570d074fa408518c378bb691def027345846e28fbcb139561accf377
MD5 7ecbb706ea22bb1d6de4476811dc18ff
SHA1 f0077c5ac50fd893915d983659f3c03123ebe1ae
SHA512 b47cb970233add81566533b4c01b371fc7ab239c580e0bbc54fb161ced1721cedfdf38b5c6468db29c05f229cddd960de7853bdef3331a08580dbf6ecd07c72b
SSDEEP 768:KjXdskSv6ToY0oGpaO867UocWWMU/rhGOl:Kj2v6EY2aO8h/5MU/rok
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FileMonitor/Program.cs

SHA256 9114a1cd66363be59ae8ea91d5bc6226f1f849bae020611e569527edd5d1aa8e
MD5 3fbb1dafd3eecfbd68c0298114e74972
SHA1 d8ce89b20dd0fb51222e88089aba3813eb345006
SHA512 801e570eb8a4866d2a91a45273875601ac3a8c35a26d7cc1fe54b660fde09a3e8fc8ff30f859243ba1c9861bdf418db60e8b3b5bc35f272199662ef8f60f47b9
MD5 SHA1 SHA512

Demo_Source_Code/FileMonitor/Properties/AssemblyInfo.cs

SHA256 fe7234fa61db27187e1a461542a9a26db0f9b2229383a9d99d046d6b070f0aea
MD5 d8392fcefd1800619fce74618bb6f382
SHA1 40574c17d1b4d14e625b575f1b395aecaf4718dc
SHA512 35b3ec6f02efa3e92c56be777680bbd6c822d066552a0230042377131b0ffa2c93deecbef27c3d5ce8177a4d897bc1060d49795943d0a198d89245d0633b371a
MD5 SHA1 SHA512

Demo_Source_Code/FileMonitor/Properties/Resources.Designer.cs

SHA256 61978650d7a2680fde00ed8da2865b510c43d7fd66175b79225c3d9f44a28d7a
MD5 c5063644d1aa3cbc9a0155b04ce8c976
SHA1 ac68c9c5d831341b3ba561af6bb1e3498a230d6e
SHA512 5a2ddc2e52f857be40911023fcc4bfa96e0a2fa18014a02afee0589155f5e7ec34aea0e8ca572ebf78343e81e802995127b106132b470554a223dad22afb83eb
MD5 SHA1 SHA512

Demo_Source_Code/FileMonitor/Properties/Resources.resx

SHA256 66b5ebd1b0fc73f041ba669ce2184f6f471d5e3524efa34ca31233e9f5395262
MD5 0cd8c971317d19bbed44757809bcb92b
SHA1 47b15748ecc8e952c5935170090db7c269ce4b4f
SHA512 883dba84bf7daae3ea49f9d54c13dda4f125da82ba63f90eeba0900602896ad9492a0adf7b69b67d838034090af20926af5c2934797afaadb38aa069786c1fc6
SSDEEP 96:fijrkiK5k5LPXbac9m5Lv6FzSvd4gIRjETUT200qSdvabvDIwQBugqvA:KjrbLPD9sLvIzSvKgIqUEa2
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FileMonitor/Properties/Settings.Designer.cs

SHA256 c7143a89d6ea13971f0f0c779a33f13a47713f438e7e311bf7a94f53c77e580c
MD5 f135672766ff9e2f31fa72f2d59590b2
SHA1 37b5eeecacd10192e49d9318cf2bad50bc54777d
SHA512 b4de942b389241d1c9a32d17aafcf497a984cfbf12eef3ea6c4445d5824c3f337f0790d90321f5a24f850094cd551bf8cf043c969f66ebc5ee7e85166d10db9b
MD5 SHA1 SHA512

Demo_Source_Code/FileMonitor/Properties/Settings.settings

SHA256 f6a4290723520caddd934b8800319c7ca6cc7eeab647059ec89b7a13b1513265
MD5 8c0f00d7d9b0046695a0255f1b11b061
SHA1 5e1d04de66ffcc5dfd813530ab6992e6daaae417
SHA512 a95c07dc3241b7c9f37b7f0a5c143c9c133c3bcbfa16e4a689cf47f45b3e9d0ccf5c965143a6848237e7a9fa8deecb89837dc12b12fabd8231fe94f3ccba26aa
MD5 SHA1 SHA512

Demo_Source_Code/FileMonitor/TrayForm.Designer.cs

SHA256 f7ae7eef46d20eee3b3f4da56416763584fa85ac58bfbb2fd4e82dc5206abf0e
MD5 95cb68745d4754b9731b6fb4cb118c2f
SHA1 b8d8ab53e4952bc42c49d06aef455dc8f943438f
SHA512 c82b63d889bf3c250f82fb393f1824b4dfcd361ad8054930855b73edca163a4c359376bea06efd0bf7575e1041789b18c123ba128372c0d4210eebf75dcd5d82
SSDEEP 192:Gwa+zc6iVVGetuQSreyEQbC2hfAehmk+eXmedQe9eSQplCDe196tyzTl5L:Gw1zc6SVGetuQSreyEQbC2hfAehmk+em
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FileMonitor/TrayForm.cs

SHA256 e75347d3542dedbc0a0df956d2c3e175c2ec7e08cc176424d0cd82a59e5abc13
MD5 4d8997359e0ed541fd2ed64be886d22a
SHA1 061e394be3ce88c4d137916f10fed56d0c5ba036
SHA512 a04a6e4cf06a906eb874ca70876a4889bc7ebef24ff7a53d3f9268d2ab639af173705f7a45c12e8dfd228711248b4be1fd107f8416d1882c3374dd3475daa8ae
MD5 SHA1 SHA512

Demo_Source_Code/FileMonitor/TrayForm.resx

SHA256 863542590eb672619418ef0662e8f75b768124ca9293788030904326e1ea6439
MD5 aaa3d4997e37df23fe59953241959649
SHA1 539f17ab79cfd31255e5712b9c1a3ef8631e3ba3
SHA512 75477ffadd61c3aaa55e26798a7c65d1140156e1268f1a697de316cec0d2b3b88cebd2f10f0103d7c7bc94c2414544a88db85eba27eafc8a0d5b61fd7ed06e89
SSDEEP 768:KjXdskSv6CoY0oGpaO867UocWWMU/rhGO/:Kj2v6XY2aO8h/5MU/roc
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FileMonitor/app.config

SHA256 d7dfd6be4d1edc9043cc18b9cecfe02e18d0ef7200dbc2389dfceb36e6497e5f
MD5 fa9229f395a97da46f2b890fad2c3f4d
SHA1 0c4ba102c2d1add37278f06111048d9ea0d2f6fe
SHA512 589a4672c2c11ce10ef260ec952b7d14b2e4fb4d7338ea4479771c866b32b5a5550649b0d1fe9318f1a5cfe3de7face555798243b2c725edf83fd2b911a8772c
MD5 SHA1 SHA512

Demo_Source_Code/FileMonitor/app.manifest

SHA256 01bb3af147c725eb5695a44682812fa0260fd76a5ae8887cc77a06f747da499b
MD5 e7f030e987f7a15a1f407de961928c51
SHA1 4aae2f3d1cf87fb2600a396ddfdd0d39763eac3a
SHA512 ca392347f10ec7ccd3784e1e90d872bcf39ce92eea62db156d9eef86acb2fb4e9a5a2cfd9134b9d32a696b5d1c7f056f58b25be7aba3edae4d54baefb9b9f520
MD5 SHA1 SHA512

Demo_Source_Code/FileMonitor/text_view.ico

SHA256 52b418f6cd602ab4138635eee452b501eaf9dd60d82963d7adcb0beee1b18294
MD5 a615f60d3e281b9cb503756b62580e21
SHA1 7858e6c3a003c1c39074bd12962ee7ad9e8be1b3
SHA512 4f1a920828cc308d44915ae0d17500798d556a57488937b3faa82df45b5e40e87576d08952e4d87df557d6420cfb8d6235dff2c577a1230f7821c13084ae4a12
SSDEEP 384:yK3P5JxcfcxF5pahZUcTe8DSYJ9TZMHMWM0SHAJQCtdyyDVap3uJ9:yYP7xciF5pMZPi8DSYzT/uJ9
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FileMonitorConsole/FileMonitorConsole.csproj

SHA256 d983fb1404d180c5370c27819a740b598106b0d0172aa054fb21a57df91a7785
MD5 715fb9c05036bef3a7a69bdd612d04d6
SHA1 1498ea052b1120aa8c65167a584f455d05c58297
SHA512 25865bdc59f7d9b69951568cae0b1001805df54472f1f0e5821097463e29dd0018c2f6a93164dcf5b0a79d36ee2274f25d22f90131d24e86a382e61d0cbf10f8
MD5 SHA1 SHA512

Demo_Source_Code/FileMonitorConsole/Program.cs

SHA256 311f50cb560f6aaf8406dc5a87509162c4abe5e55582884dcee91857730a9b99
MD5 d9f81e819da806ca7ef64d4c1cc0e52a
SHA1 6e8f6cda6f2678d65a821d7ae0489f06106e7090
SHA512 4cadf9e89bbe2916e8698f0fce12b74119902d7649e0dfbafd34db0006d912f968ba6969f77a6932c154a97b0756149bc3b1c8e35aa942a3d5449f4f25a2d5ed
MD5 SHA1 SHA512

Demo_Source_Code/FileMonitorConsole/Properties/AssemblyInfo.cs

SHA256 ea38cdee033e86c57618d1a3caa094b80fc04965f9dd67d15ce503957c1ec4db
MD5 ebded31850ef315097c10870ba15babf
SHA1 b42b532260d08ade44ada37a97cd5b64e4543f0e
SHA512 d4a20b0f5242dc528683438fdfbbabc822f8b5ab17e7468f7e4955e1db67aefc5bfdcdf322032fd7d86bfe6c1a9b621036d996a1c696d268778da3a7c5aacc6a
MD5 SHA1 SHA512

Demo_Source_Code/FileMonitorConsole/app.config

SHA256 50c9c9f3cc99f39697cf537ff09c98f42f023c474cc12fe1deba11894cf52c07
MD5 e0d80706c31ea90fd5d09fcb3b2d49f9
SHA1 729ccdce546366ca702862cd957e91025537f3cd
SHA512 bf5a8e88f2554572157d044e0d9811bf8a6699e9cfce60d53d0df1b1fe5db8b9cddd56ed64b8dc38e0ab535122a57fee99359ec1407d4878133f66eea7201c4e
MD5 SHA1 SHA512

Demo_Source_Code/FileProtector/ControlEventHandler.cs

SHA256 37b7f5f9be90bddf042cf6a11dcec2a84fc268abedeff75d8b5dde77ee1ca9b2
MD5 d907ca739af8d92978af8f7fe1d4bce6
SHA1 6636359feb6fcecc2d8563fe269f833013bdd912
SHA512 8e2bc0ddebbbb438c5ce2ff0be839ea3cf1e299272d6c871d41eb547b5cf5170e128d3e441675b184a98865146fe4159cb72f64ff5173cdcea8b44e9584d1c5e
SSDEEP 384:bKGxNYcmu7ml5WK0jgUbPDNFL4CEz7fDLPS3i3jv4:RYBlR4g4PDHI/iiD4
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FileProtector/DecryptionForm.Designer.cs

SHA256 f50cedbff1c988b0de73b53940dd3fda89e9ad25c3cdb298a9999093a2f19686
MD5 1afd80c4b6941318ec0530cd139cadb9
SHA1 5350b91e9e5b749f1943a66b18e483ea2f003374
SHA512 929f9ceee311a2e161bcd3421adf945e209d5721e65d4961ec3db3e9b48d57ae5d3426573e0d3c7137f963cc2cc17e48abe3b4632e50178e673594de91780e40
SSDEEP 192:awa+XiVlOE3y+btECxnomSmPt/rrpdtLo3djWAXRttceK46cXv+bV5vhNtnCfVqY:aw1XSf3y+b6C7SmPtrpdA7zn+vhNQVqY
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FileProtector/DecryptionForm.cs

SHA256 45bbbf1d9272517d286509fb6d3205608b876a1145a210d4d6c4ccf1678f3e76
MD5 b3ff39b7b88e5ed5266ffb3b63a4478a
SHA1 9eaf443dddf75284a548b04c3a1795784eddbfe2
SHA512 4abf232643da8770d21dafb8ea39e2c23728572a2f273df43df302893e9159c76abc85ed803353af6ff819e0c661a156089aa5c35b97ff94577e866a270e1968
MD5 SHA1 SHA512

Demo_Source_Code/FileProtector/DecryptionForm.resx

SHA256 50ece728371e91b6eb0ce8eba5f0331cf86dc12ebbf198509243d64cdf648122
MD5 dedd093afc39eecf2ab636c80eb05cac
SHA1 1ec5fa8b906486d9336e47a47b93ba47a3325d64
SHA512 bdc03de2e2a54f4f6a20985a7c59920c000478f4c73ddd175fdff336b7435a2ecb7d84d1615bc9ae64410b26fd2f30d7f0ed02574d7a3e27f74b18867cce06e1
SSDEEP 192:KjrbLPD9sLvIzSvKgIqUyahFUgwrvNW0WTl:KjrbLPxsLvASvKgwyahFUgwrvNW0Kl
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FileProtector/EncryptEventHandler.cs

SHA256 5c4f5c98b0a838c543e91b92a6121f57829e6ab9864dbef97df18558d6ed1863
MD5 015937bf8553c711b2e5703db00ded98
SHA1 a2d99a3d302ca917e769b9d96aead6b46b9129d6
SHA512 b94d573618536e3b65f43cf9270ec730b0277d3def7d4384c8f18bce464bf9e3d6ca34c3a696aa818bbc935c56ce446b3fbc3e9a68403f7cab084f560aa86f8a
MD5 SHA1 SHA512

Demo_Source_Code/FileProtector/EncryptionForm.Designer.cs

SHA256 62f2563828b41113ca97f12422596eda46180a8d582e59cb357dfa9fbf30177a
MD5 50b552f3bea86dcee4b82886ecb24d9a
SHA1 1469034c789deac30101c1f43ba1a0bff216ef7e
SHA512 7cc3520db9bb848788d6959909a4e4f587df15799c2e5b6a6af9d9b0b4fffeaf0ec2e6ec0e74a3c7a6f13419ffeff0287c309071ca85211e1d96bc85b3125ec6
SSDEEP 192:Cwa+XiV1E32btECxdmSr8tD3ad+V63ceK46cXv+bV5vGNtnLfVYZwDyzGiBS:Cw1XSa32b6CGSr813addxn+vGNVVYZO1
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FileProtector/EncryptionForm.cs

SHA256 10372343b40215e5a94b61028c39d4a769750b3bfbb0f9adc06042f7e671cf96
MD5 7c9b9cd7ad2f0faf114d9847270463fc
SHA1 ec57a2e6499146db1682f10e786474c0be93c7a8
SHA512 8a9d2a33a366c2bcc3bfbc01aebb5ddfd6f5ba14e69302e0e7c64374b29b7d960549739fe713beba66f8e9b4672c986a295cbb1477122bc795cfb482832eb14a
SSDEEP 96:wj1HO7o4h4Dcz02nXUR/9c/WwYBCvIo1TosbkPQLMrM/X6AHp1t:wHOKGpw/90vvh18sbkPSM2Xll
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FileProtector/EncryptionForm.resx

SHA256 50ece728371e91b6eb0ce8eba5f0331cf86dc12ebbf198509243d64cdf648122
MD5 dedd093afc39eecf2ab636c80eb05cac
SHA1 1ec5fa8b906486d9336e47a47b93ba47a3325d64
SHA512 bdc03de2e2a54f4f6a20985a7c59920c000478f4c73ddd175fdff336b7435a2ecb7d84d1615bc9ae64410b26fd2f30d7f0ed02574d7a3e27f74b18867cce06e1
SSDEEP 192:KjrbLPD9sLvIzSvKgIqUyahFUgwrvNW0WTl:KjrbLPxsLvASvKgwyahFUgwrvNW0Kl
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FileProtector/FileIOControlService.cs

SHA256 dd95c5ba19ffe332e27b1b484d5ff7b62a212f99c4544807d6b5fedbe3e94d8b
MD5 4375428821328b18d0c17fb3c191ac63
SHA1 8c258954ee1fd0c230ecd0a223cb890476ed5da7
SHA512 14e7af31ae8d70f9ba525138626f8efdb5ed69b0a18d594a47331e70a169e82e43702f2e175e54b8b2337125885893d4b95b4449e945bf04942385017d9532c5
SSDEEP 96:wj1HO7oU4h2nX4x3HhHWwvNHE1MtqYXesZUR6fa00vKF2Eca1FeFgkUM:wHBUEdE1EqYzfa00vKF2EZc5
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FileProtector/FileProtector.csproj

SHA256 70103f4636254b03fc48c5bedaebe3220e5d09a1ec11a054ce18c16e1848aa3a
MD5 132ca2ca59bb4f9bfe9037b4f19ff000
SHA1 43dddb68f2789322a9fd0bd337e91c438ef8893b
SHA512 92d7cbfed9c9b9ab1dc362537b7fb7eb7ee7f7a604587ff4d7ca6c0377c14deda8291d5470cb74c54fab02ed789defaed64b1381434ac09ef51ab056eaf3ee5e
SSDEEP 96:yl5x8bx/nYplBK0qkyxxGqs6UxqyWxXWVEZK5vkiBCHMOdsHS5U5ha/dcnj8MC7N:Kx8l/YplBqkqEJeU5M/dnOJYQU
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FileProtector/FileProtector.csproj.user

SHA256 ef4885176d9b047c7542c4bd32b7d4cac1a8f2fe49d5f10ba9e35c77ce4ccea8
MD5 c87897a45d7fd64d9d36713e14ddb643
SHA1 1d8e8040bb13332f492f62f1de5568060151bab0
SHA512 07cfd6312db0eea482bd17a1bb77a488458d233907b4e6f746d0f4b06653d56c2b82a1475d0fe0a2fbb268df02b1b9bc9ea7a352bb77791f01c80f6754cdfd70
MD5 SHA1 SHA512

Demo_Source_Code/FileProtector/InputForm.Designer.cs

SHA256 210406e4b9885797a407185fffc4df7fec98365cf598fa90788500a02acd8ba1
MD5 3be810014dcbf148df84671782c30fe1
SHA1 b353eb5940f6d76f3b3a7275c7f59de735c62746
SHA512 04aa80885a726faef95c780a97ae347885cf0257b54cfd9a9a94d31dd05c4b7be31f48a3bf7a8c28facc99b161e6af34f8573dd7c019aba154401eedd8d1a57d
SSDEEP 48:YqcOfOq2atwZxEAOHVOIJnSGGDdEIY5XzYAESLBYWyV2xfxwHOwYRwc4XvWEyLOV:zh2atwZpiVsjoxcASWqyWkFyzdMPs
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FileProtector/InputForm.cs

SHA256 872784a7843fbf31919ca8ae463c56858e7c071f7893d03074d38095a8b48c26
MD5 3716e63edf1f571e60a99c582b9a6efa
SHA1 14ea662d8f5b7f8793f8928878aa86238c0b8313
SHA512 63abd8de30dd2cf42701fd26dbe4b93e07d9d228011e80824d466505bf86d2bf37ec3f6eb84d37a38f578b66c967dd47180420182db11d7d6370be36913eb8cb
MD5 SHA1 SHA512

Demo_Source_Code/FileProtector/InputForm.resx

SHA256 f46013e7e4e73ea85660d7aee295b4b137f55634b37651bc0d8d1296aa9cacc2
MD5 34351ccaf40249614140b1b6c2f95aec
SHA1 e3abc9f97d836dc2e18c2de9d6dc333d8f46a0ce
SHA512 be8727266f5173e9d0ebef37daf0e7fd6d44101fb16ac6a963eff481bfecec393fbdc028218b0c7eab4da97c0b33e1d04ddef5bdccec725887e5ba6c1ed39ba3
SSDEEP 768:vjXdskSv6XJh3S3H+9+/v333Smubdehhge+5TD3yrd5+l:vj2v6X8rmeh/c3yrdC
MD5 SHA1 SHA512 SSDEEP

polyglot

Demo_Source_Code/FileProtector/MonitorEventHandler.cs

SHA256 8dbcb6bd3ac8ef23ef978ccce9d6589a7dcc882185a54d365351b285a8b4e7c3
MD5 a46ebc30ceaeb6a7d56a1ded74bd0723
SHA1 685686e608a4afb736d047d32c6537ee4af98f2f
SHA512 b2cc8529f3a38bd20a917ddba46205359e2feccdf746ce2f120e5e2dd91127fa699ecef7468ee4669f1c5686a21bcde5db40796e8dfa3c1819a22c79086898b3
SSDEEP 192:wHOKGxN2m7ynm6q5WzQZR626LjVTOT5ebBzYzcl2Qs:bKGxN2m7D5Ws0jgUbPl2Qs
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FileProtector/Program.cs

SHA256 8123eb1292f8b9567f45bc3cce64d7a135ba76eb51c640278c53fe0ab418db1f
MD5 0b082b49cde4825d097b60ed45fa18c0
SHA1 781d6419ac3b9ac493e15ab2c07016ea224bda6a
SHA512 5c621726241c630abfac077e670b07a5a290eae98f602035402aa1d2f46a3e32e7b282c20142ef3598d8c4673c5f5929dfda3c8faebf889c949d5b36d47ca81c
MD5 SHA1 SHA512

Demo_Source_Code/FileProtector/Properties/AssemblyInfo.cs

SHA256 8bae3edd4eabdcd82977c0615f97d74797d6da298ed407f5ad51734d63999345
MD5 2fb8f28b83c33c68a4faf39ddff2cc8a
SHA1 ce92782828cd518854d58af940c25522790ca34d
SHA512 8107876575e67a69c35f5820425268abf308bcaa7454196e66495917619017fc1d08011853267ab460561f92f57c2288eb83309239466eacde9632d6047099b7
MD5 SHA1 SHA512

Demo_Source_Code/FileProtector/Properties/Resources.Designer.cs

SHA256 48aaf8297baf7f305a98acafd1af0e42a07913b67ad1b5be31ad0bddf429dd4c
MD5 1ba1cc57b0448a771120d2244dceae89
SHA1 f37d8413d6a7894be789ef975215644e8988bd2f
SHA512 60a30735baff735a5ea3fa4127ebcca2537bb4c1397094a1539a6c2556aac454bf7590ec50d490317acd8be2089d8dfd171e4a9b1a8ad6c2b725b22d4f51480f
MD5 SHA1 SHA512

Demo_Source_Code/FileProtector/Properties/Resources.resx

SHA256 66b5ebd1b0fc73f041ba669ce2184f6f471d5e3524efa34ca31233e9f5395262
MD5 0cd8c971317d19bbed44757809bcb92b
SHA1 47b15748ecc8e952c5935170090db7c269ce4b4f
SHA512 883dba84bf7daae3ea49f9d54c13dda4f125da82ba63f90eeba0900602896ad9492a0adf7b69b67d838034090af20926af5c2934797afaadb38aa069786c1fc6
SSDEEP 96:fijrkiK5k5LPXbac9m5Lv6FzSvd4gIRjETUT200qSdvabvDIwQBugqvA:KjrbLPD9sLvIzSvKgIqUEa2
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FileProtector/Properties/Settings.Designer.cs

SHA256 c7143a89d6ea13971f0f0c779a33f13a47713f438e7e311bf7a94f53c77e580c
MD5 f135672766ff9e2f31fa72f2d59590b2
SHA1 37b5eeecacd10192e49d9318cf2bad50bc54777d
SHA512 b4de942b389241d1c9a32d17aafcf497a984cfbf12eef3ea6c4445d5824c3f337f0790d90321f5a24f850094cd551bf8cf043c969f66ebc5ee7e85166d10db9b
MD5 SHA1 SHA512

Demo_Source_Code/FileProtector/Properties/Settings.settings

SHA256 f6a4290723520caddd934b8800319c7ca6cc7eeab647059ec89b7a13b1513265
MD5 8c0f00d7d9b0046695a0255f1b11b061
SHA1 5e1d04de66ffcc5dfd813530ab6992e6daaae417
SHA512 a95c07dc3241b7c9f37b7f0a5c143c9c133c3bcbfa16e4a689cf47f45b3e9d0ccf5c965143a6848237e7a9fa8deecb89837dc12b12fabd8231fe94f3ccba26aa
MD5 SHA1 SHA512

Demo_Source_Code/FileProtector/ProtectorForm.Designer.cs

SHA256 3dd76c287592c2eef126d16d6d520e70472c8c49b1f474a67363e198dd18bf92
MD5 e8ded8ec7190f6263ae8efadc51b22c1
SHA1 7a7c47335c91df9483eb605e048929783519cb88
SHA512 70747787bcf0ef0100ee21731d2598ba3551803d895e01d536209f6545e3e1e21b6d0dcff981966dad7afb84d32beec49db51a81575bf19b361756dc0e25658f
SSDEEP 384:WKabw1XSbH8E8fWNe/TTL3qPHNmfQtSTN/CtR7ulxluJciStrKlbxlEsp1BE0XiM:XZ1UH8E8+NETv7AS0cw
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FileProtector/ProtectorForm.cs

SHA256 b31fcee0763d93e667402fdf80f8021da0c01133a01ce3432cdc2a5efb108c5b
MD5 033321ea0823284196c0cb1eb960399a
SHA1 00568f56cbd52a6825ded80c175b110f6a16856f
SHA512 5b099847c94456d4e2978364475d9c95b88b9cca4f453be0b48fdb1903ac11b99f420ae9f2c5262b2beba97dbbcb6c70c319ee87d7de7c8321d0d75705670635
SSDEEP 384:bKGLjK5mfkXn2K8MP2tvLvvTXFreXiybipGYZZQFxvoKvfztSct/7tqYtLEtXBtf:5jKkMXn2K8MP2tvLvvTXFreXiybipGY3
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FileProtector/ProtectorForm.resx

SHA256 9fd52a8ee2e60e4723663dad062146375c9a33323465a408eced981b4e646159
MD5 e210b240c67874d9f9408a42e210b329
SHA1 08bf6702e12765294af2aa04f135c7dad073c086
SHA512 f11f367c555064052e776c6880be64d952ed5212fa016f2f677c25e723176ddc0ff00a297de8305fa2eb6728ea889003b5e603d89839c2140e0e7db908138877
SSDEEP 384:KjrbLPxsLvASvKgwyahFYawBaw9gwWokA/Mle0okzFWeBC7V0okA79P1JokAsNvS:KjXdskSv6g/MMWFF4VBx1800zgKHq6q0
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FileProtector/ProtectorUnitTest.Designer.cs

SHA256 5d36e3ee48386e4b7fddbaeac52d9319506e68bb12f64bfbac80ed34e9be3b2c
MD5 99619c95fe5e6e7e2adec8540b47637b
SHA1 69cd7b13c0204cedd5a6237c1c60c31f96ca15ba
SHA512 a4f9430018dabe8d73fda5d13409aed49122fcf109da2d15eeb86003d3942157236c705f6b064d069b19d4936e590c0c43e004a7bd2b2670eb9a14bfd8d3bd04
MD5 SHA1 SHA512

Demo_Source_Code/FileProtector/ProtectorUnitTest.cs

SHA256 ad032b9048ced1441a2d727c4f86330a02d0120a079c6c43f3e5aa0f67b99f85
MD5 55629a60f9a61bf60d6531ef563d10d9
SHA1 35623a50ec846e8bdff41c1e38917759ee0bc54b
SHA512 e3ea4ef4b6d685dcf6eef76f84f78753bdc3cf6c9f22f97f517a1a946641e12ecb78b553844cb90015576d1aecbfbe8d6c8b2f4e88b3842d9e27519e5a65c215
SSDEEP 768:HShOCdx4plWjtqTN1dRWSuItO13es02jI+Kz1s4KqqwkVY7CDk7YqYrB:HShOpotqTN/0k8dexYI+Kz1sQfYDJF
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FileProtector/ProtectorUnitTest.resx

SHA256 d079c091570d074fa408518c378bb691def027345846e28fbcb139561accf377
MD5 7ecbb706ea22bb1d6de4476811dc18ff
SHA1 f0077c5ac50fd893915d983659f3c03123ebe1ae
SHA512 b47cb970233add81566533b4c01b371fc7ab239c580e0bbc54fb161ced1721cedfdf38b5c6468db29c05f229cddd960de7853bdef3331a08580dbf6ecd07c72b
SSDEEP 768:KjXdskSv6ToY0oGpaO867UocWWMU/rhGOl:Kj2v6EY2aO8h/5MU/rok
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FileProtector/TutorialForm.Designer.cs

SHA256 193a00e4ad4a5dd1e0ac45636e02d75994ebed8f6e3b93f46e7f9486bd0be035
MD5 ec22f8ad6bad84270b754fc3fcfb9dc3
SHA1 4ad057bc0499c9d2f224d7f74fe3ee679daaf484
SHA512 69739476c09fa93ed4709d46bc4de1345d6af62fca7cf21f6e22e84f29822f9817e4fc681fdda5f51a4391a3f751267eac829a614d4aa746bcd9986f4cfe6b13
SSDEEP 192:wwa+XiVj2J4TQSSHhcTFHRU3Lu2FyZ7vAsxCybRkwKR8DacoEnoOcC+JeV3yJ4MI:ww1XSjI4TQS4hcTFHRU3Lu2F6LBbDacN
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FileProtector/TutorialForm.cs

SHA256 acba032b1791df52418ae95b2a9c1e9b5f42f05c5110a363840bf0952e2c7f52
MD5 563b5a716204fdfab2f87474a5497b4d
SHA1 3394c01c71d2c312130b772067479c55300ce853
SHA512 b1a0c5bdf06e66cd2b6142c8208015e14cba2df694f6b6603aaf23c8af706b4e3d3727756d7b55815cfc7a50eb289cc5351e9f742b93e333ee5d1c3ba83984e6
MD5 SHA1 SHA512

Demo_Source_Code/FileProtector/TutorialForm.resx

SHA256 703b165a5ad189208f5618b1c58f9482d0d8ca4fc8e28fe6af5ad9b4f149000d
MD5 769cdc5418852b617eed8be4b52b9288
SHA1 bd7bf1d208057d41a7630b7dcd8605f23f1b542f
SHA512 40e0b2e76678f1febd58407fb0ccda1b1bce939b6ea081991f2cbc63935d6a67fbb82aaf4c2fac98feb4f487db413cc4f9e70cb2d9156057dbe0744ad17723c5
SSDEEP 384:KjrbLPxsLvASvKgwyahFsEZDxhOyk2nOhSXS93Ql:KjXdskSv6xDxho2nOv3Ql
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FileProtector/app.config

SHA256 677b15be35c804c855857d38bf1fa2a2cd7d994762675f520dd3ad7ab68f3d30
MD5 2728444195a0af0199f343a6ead4bf4b
SHA1 1536225b2d212f6dde7cf9757fef8b22c62b3fa4
SHA512 60a277525ab198a54d727689aa990109709d3af23a2164ad8a7d40bb39f6116e779c38296bafc7c241f9ab44ed2ea56b186a5702f36430cabae938db487b0948
MD5 SHA1 SHA512

Demo_Source_Code/FileProtector/app.manifest

SHA256 9517c7de03525bc98c00b6539dd72adeb9a3447a5bb46e50e7c507829da06ab7
MD5 d18c429e311a3e1d6201a344856708eb
SHA1 64ba06d287891de431cf87b8933bbb0bf35cb002
SHA512 34fcb703bbc08773e503f055a8bde3545d443d3b29d863a03309cc46afa2c7dbe19432e62c7769733da224a1e708499d3d4ca962ff76d595d87ef0201a770804
MD5 SHA1 SHA512

Demo_Source_Code/FileProtector/protector.ico

SHA256 dbc4b809311a72d850598970b2750eb6ebd09955d2711bd337a1ad4a19a39a52
MD5 7e3aee15abc23e3dd171036387ac613f
SHA1 75ad02556584b370527eaf3d020e3870bfd6956c
SHA512 d4133d9396eff68f112f0a5fec10b0efee8cd572d681829c914c05ed13c56fd5a5bb1f43ba749f0bc7f8610c4541a53bc4968eec98e76ea61f975850e090cc82
MD5 SHA1 SHA512

Demo_Source_Code/FileProtectorConsole/FileProtectorConsole.csproj

SHA256 1a220f8e9f4ebaabb6f696244238622207b62ea296b18e6ee1213edb7001481e
MD5 e3c20e06018c3b525774121b71939e0c
SHA1 84ddb92ed09253c5733138879bce680e8f258e90
SHA512 ffd42b36f49d2c7cdcb4ea48747a2cb68c0667d0ee6283e3b049e3572e99d1c5239d10234383b241ebbcfc9b46a543d743aa3a96b7dbeb8d934a30959d705700
MD5 SHA1 SHA512

Demo_Source_Code/FileProtectorConsole/Program.cs

SHA256 38e56c89180f08dfbd6bf583a1c731fa13a535f2f87f7d36c9c389a5dacdcd95
MD5 972d2e282510f5d9c46293afb0251df1
SHA1 40b99b1118190eed08cf830675e6eb1a493f72c1
SHA512 db0bce9d1382f575bc7e127b885f520154e8e7025d5afa467789d94c7663fc61741a242774187b79e1a4aec5ec3cba333e23961d11c01da27dedcf74e92b238f
SSDEEP 48:JkkCIkg/KvtDqWcG7+JG5YnJRtAqKNBW3nKCmZATAzAPpb4Sh2jWCgH3tAo0Apf3:JSg/KFAG7+LlMBiK9ZmYvHUt0heFf
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FileProtectorConsole/Properties/AssemblyInfo.cs

SHA256 1eb1d678171c9e22e35129d82bbcdd49273130bd4fbb217f00fb3803f3f98fd1
MD5 b25a86175c0511158ca440cb02f2e91f
SHA1 3f8ad9abd12853f71fca1c4cc91321d52e612516
SHA512 3b59e6d73a5d50cf1ec2633ba851b80e4c279d16c6a84350f79db4e18bd33c0fe022437ba8ff3a3d153d98c43a254584e2fd66aa41d0a83b3ed98a51265d7cc5
MD5 SHA1 SHA512

Demo_Source_Code/FileProtectorConsole/app.config

SHA256 50c9c9f3cc99f39697cf537ff09c98f42f023c474cc12fe1deba11894cf52c07
MD5 e0d80706c31ea90fd5d09fcb3b2d49f9
SHA1 729ccdce546366ca702862cd957e91025537f3cd
SHA512 bf5a8e88f2554572157d044e0d9811bf8a6699e9cfce60d53d0df1b1fe5db8b9cddd56ed64b8dc38e0ab535122a57fee99359ec1407d4878133f66eea7201c4e
MD5 SHA1 SHA512

Demo_Source_Code/FilterControl/ControlFilter.cs

SHA256 98ee6bf8896462b5d905c3de401a137de9452415e7e0aa121f55c940083bdfe0
MD5 8a3d836f36cfb8a44432a439d2911d7f
SHA1 2c75b63684dad867d7767c622b1e12541e956761
SHA512 9f31250f6e3a5646b97314c30a483e4082fde5e35975da86792068e26446ca6bbe39a16e639a032fe8f754ec97cd653c2bfcfca594a7640e4a57686eb02a9337
SSDEEP 768:p2JkCYxyOr+8klQLlTNWz4zCb9IpY4gRUju+JWyOiS5bOKpw4XQIeKDffET4le2p:3JaiJBWrO6v
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FilterControl/EncryptionFilter.cs

SHA256 208e58625646aefd5a1fe20af8abc89aeeb942f3fa8f278ec4c0eb57db6a5399
MD5 6a1a4203cc8589dc5f6cbb4076bca9de
SHA1 c6571755ed509b070e32325bba585ee53ad21c3b
SHA512 53a051aae16b2694c86805a14fdf375d9a8d80d92dfeb8c8d794e32c734ef155f519084031ff05131da05a45c40d9ba9f238e00c27e5a7d4eea5cd8a8cfcb01e
SSDEEP 192:wHOYGtMDOOEpOBUIKtCPhHGIOKCeGPFp49:b5Vnm
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FilterControl/FileFilter.cs

SHA256 982ae205ad66064720c36583aaa325bc2b8e169a230e2a1719b79dabba7229eb
MD5 6f9e2e6e0a81ae07b0d9d5a072c5a0ff
SHA1 db33d3fbfd8156790841f6cb2349b050b7bacbdc
SHA512 853863fc0a5c11305e38308a9c71d898495ccc85978dc148472157de79fee021a17fa4e9dca967a0ac80122af01a6d4a2e152131308ab83e2972f595c51a15be
SSDEEP 384:bVPZCS3fR6hpfl5EDhed6g5oBjz/Ho2kjyPDv5MwLtr1eRTZiN47jN/ASgMx:BPZCSW54cd6g5Yzw2RPDv5MwLtr4TZig
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FilterControl/FilterAPI.cs

SHA256 c26b415a429ba69d25491a4865838e8bfa679067c4167d4ef9ad059ca18efa1e
MD5 e5247f43a15c7ee4638c018095983b79
SHA1 d4d8919c64c525f2d3b28360a8587b1a692aa6e2
SHA512 95d5357474fbd037ca73cd3a0ea045a24d9166970fc80991298b34f84195f1c98fd91909b980cad832f0fb73e9457966b3a12861b2825ca91f6a39996f6756d7
SSDEEP 768:ioP9wv3/ArtQa3o+B1GgBDKBqBTp9Vc3ho7BrmGPFozE68366iTWyQmLF5I8RGo/:XP9w//AhQa3o+nGgB2BUIo7g5c8mTa
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FilterControl/FilterComponent.cs

SHA256 f836bffec77e408c713bd26ed4c7631b753e8f86263a526f91a2ee94cfcf2f60
MD5 d6cee615fe635f07acf15ba256749246
SHA1 eba83c37c4f9a773ba53a6a50fedea0c77fae8f9
SHA512 e86a443e66fab947b5dea51c6bfd1060104e8b15d88be7f5d819724819ad96b1f7a61f1df1c012d376860448a22ffeebbf4f4d9224f3fab5d1d34d6709301faf
SSDEEP 768:TS3sqT3ev9E+ls/nNYHq//VXny6DJoFVD:e3a4Xny6wVD
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FilterControl/FilterControl.csproj

SHA256 dc7863c801a685ae3031766f1e2cefc6c8961f4abe3aab45e3064883cbab22cb
MD5 f1777f0e1be2ee913416d9bb475bb72b
SHA1 2fc8119b5336b88ae058fe01926953b189cce6c4
SHA512 ce386173de517410e319f91dc09aabb3a893a36f9bea745a468f65661b25189776831fcb8aeec2dbba51d12cecfaa1a31b5c4442fc6cc421355922824f2a2d23
MD5 SHA1 SHA512

Demo_Source_Code/FilterControl/FilterControl2015.csproj

SHA256 ba54735b82a0e68282bd52de969baab774e47355d1291e22eec56ae204172361
MD5 ae69292a27ca53b114e5aa9007af70f3
SHA1 93f3e74a3094e22cf9667cdf43babfcac13fbea6
SHA512 286431898207dbdadc52356c77d6792bea3ae3cd16116ce96400f4b5c9bd628b7fdcf69d040cbc5260f17e415c01d9d4e962f27a679a35a99c9899bb8f36e8e5
MD5 SHA1 SHA512

Demo_Source_Code/FilterControl/MonitorFilter.cs

SHA256 e46039ff28cb49a6a151a885273427edf6fdcb1879c80bb0eb0b2eabb4fe6e45
MD5 89800f7c425359c4af1e4289dd908613
SHA1 4b8bf6395ae0cb8437073a7484db7bdf11ef44e0
SHA512 988238db101e623a0106b38d5537e8f4b0f296acb071db6164577ab8ab76a373d60f9660d4ab143b902cd64e111a91d66fe3da230de5ce66c7bcb5dc0619abf8
SSDEEP 384:dTLObXNM4DL5vBR6bqEX3sHNb5Ru7edje1OI:5A/5vBR6bqEX3sHNb5Ru7edje1OI
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FilterControl/NtStatus.cs

SHA256 98c0d446b587daebd1444c2d2cde9f19ef02d4688f2620a8066f9940f6173164
MD5 dc97ed7f64a479441a57fc606039b4a9
SHA1 5d57426b66f04d95941a71a0d604c4aa3e3370e3
SHA512 39a4b3374f96ea4157e4eb04432d797c6a21829c18b2adf0ce283f90fe28f73923578ac3c1397a8baebe085fde34260b57a052e4a61e8c360b995f2f97f3df55
SSDEEP 192:wHO9F7Z8u3lb+bt4hp39XgNOEEe6sz18cQAr0CGT:b9F7Z8c8Pz1gT
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FilterControl/ProcessFilter.cs

SHA256 3706606546b21b3d792a54c5158a97b50bd8931559d7b5abefed4402c2fda01c
MD5 1dbeb0e42ef4ca7745664bcb68852b98
SHA1 fd330d3c03c478b906f749ed497f05257e6fe479
SHA512 f070cc7b7f6dc796f56da9da51d07f0bd1be38e3d0524ff1b9bd48d5a57537b6d4e9518fbdd092a6ef3ac7833ba048d39debb7c574fc11fc1ab9a852139239be
SSDEEP 192:wHOdZ1ZR40eR+1eX6q0Hg2Qoe64FnHb4mJP/raYD0y:bd/ZR40e01eX6q0Hg2QoelnHb4mJP/rP
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FilterControl/Properties/AssemblyInfo.cs

SHA256 532f2f33128ff42b31e8d2cb6ad152fcf179b580d7b1bc55b6271a78dd5df95c
MD5 7907e02654d4190ea132419d60a0c7d7
SHA1 7c1ed37b5a12fc55e3b964735d2b0e5b57ecbe59
SHA512 7a0e76257b6af1cebe3ceb48406ebcf3b77f10e0d3ed3e2ae8679c933f14ff80e4a0b931cfb83b5604dbfef61a59c6bc32d6f0109d0d3f5fd93a968cf9669cfe
MD5 SHA1 SHA512

Demo_Source_Code/FilterControl/RegistryFilter.cs

SHA256 47988fac36b3392a6781be4c188d71e043a42f1a1507540fa5712bec20e5c89c
MD5 eb2acd4304de165e1cbbd23490a9dd8b
SHA1 e8aa6d8c326951d8665751301b85b0f23f87e2e8
SHA512 92628458b31469f6323d938c1859f2890fc065ab1341c296c9d3c95164bf4539354fce856273550f14b65e2a2a309a2d27a441b21c3054cbf81e62d356ddfe84
SSDEEP 384:bQnCp9CfjnCjlQoLbYxugLoli3EEgWDnLgqxLKIdINhPU:MnCp9MzjekxugLolwEEgWDnLgPJNhPU
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FilterControl/Utils.cs

SHA256 fd5fee31a1efe1dd7e5ce61e9562c672fa08e59733cbc8b41716187d01535237
MD5 4626c702c39f34ed6202d0a1c0ee8fd4
SHA1 1b1c860dc51155a73e21b35990a00f9492e9bccc
SHA512 c24b2d728b06c9f9e642d7d43d11be802870149e6d90d2c6ca649594e8961f4cbb94d22dc6899c44f8e43b8f86c815f7bbb10dc685213f77f687f231f8335a22
SSDEEP 192:wHOWbrfVingSzmTgEEL99kPdxzzKn5OfriV2bwCJLhQB5evV7MtRlGxaTUKRFB4g:bWbDQngSz7EEL9C9Q5VyxV7MLlzIKRLT
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FilterControl/WinDataStructures.cs

SHA256 54fd5eb0291fa4c982c9e38a675ddc8cf07629de5d6be4623ff89d5df6a3f0e2
MD5 bacd09adc44eb1e501d2f66e1fe7f1ef
SHA1 f48923f7ec368e8276c7081ecdb546eef109f142
SHA512 f58a3ef89c83b9ceb0fbd2bfee87fb4b46dbda7296c1127444bb9debd578881b93ba36c726b68117f7f46548f4cc97e0f18024c17ca86f1c5f881ca1965dde28
SSDEEP 192:wHOgqiR9xlfMiSIKfR7jKahsGbxNzcgL9gxLBpFdpqf0Na:bgdRqXI0R7jK/GLfLQNpFdpqf0o
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FolderLocker/AccessRightsForm.Designer.cs

SHA256 8fd8d8d935cd138cbc3739b8ba8718c81086e5da9fe34f6243afb9f61c5fccc6
MD5 04a2f70257578b175bacfd3363f1bfdd
SHA1 45dd527d4fb913f7044b890e0aa68f1f36afd477
SHA512 adb791095abc4551aa39f07b4f7118d1ca2165ac492f8cc60bf391a5677ff862dd674dcc075d4f846f945b4d53bd0616159a3c9ef823e5797de719bd7bbc4690
SSDEEP 384:Sw1XSv5N4MeiHQbKygAJ0xq+7ND8sSmaNeGGTbpTmY7pRvAfbnbr60EO0BFEyNkI:91sHCJ0xqGNDJSmaNgoI
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FolderLocker/AccessRightsForm.cs

SHA256 98a3248406700a6b66c377504b858c94093b10ea3a31201174f1c0550bf123e4
MD5 1eb03a074785b4664c0f337b34dd7851
SHA1 c2603dedfe5a87a5890ec1255b3465d3f064057b
SHA512 aa6f5a7c4b4d0e69653e68106d183981f3dfcdc9c2cd82408d7d077a627c1213d6ffc4cc8f5bef20a95540b837bf9da008fd6c26fb7294c2eb217943f024c189
SSDEEP 96:wj1HO7o4h4Dcz02nXRWW2UDzgQAbDSuuWx3x9/wHxlxUed76xWxk4Wg6WbhI7kUn:wHOKGphWWRm/z1T/4xGQPWQhoU8McLZ
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FolderLocker/AccessRightsForm.resx

SHA256 984159f123e9b155065f4deb9a18b3abf30dfa75057e291485b1f84cd1888da7
MD5 cc6dcd7a5590ef739a0fa9315a305488
SHA1 8f49cc54c624c21b669bc6a878e022187cb9ddef
SHA512 622a8e15eda1077a3352902cc3a7fd321c3c15b2091bfecf5bac548cf0fe2f136d9771748639974a071eecf2217616bbeaafd8b79e0bc85a4271b038da84230e
SSDEEP 384:KjrbLPxsLvASvKgwyahFUgwrv6jYAvmzsBKl:KjXdskSv6jjYAvmzsBKl
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FolderLocker/AccountForm.Designer.cs

SHA256 a90bc9fbc094f0dc7c545383bc8f8fa7296cd15edcb452bdb8023084b233e7fc
MD5 a7046c3d1097cbae8a56d6ea5b7ebcd8
SHA1 bdb1c86cb60d91e638d2a28ba397853b9ea993dd
SHA512 4a428424163d649e570cc4c70788daf7592a0f94012fbab2a25088099398c8136444d613e98c11fb31e6be4e4ce18ce0a64ce5bf0f5035addeb446d3dbc9aff2
SSDEEP 192:Jwa+XiVXxvXj4SCYoiVlXC8x3JCKzyzVp:Jw1XSXxvXj4SOiLXtxZNzEVp
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FolderLocker/AccountForm.cs

SHA256 07a99dbdbcdf1c9c655d4e7bb6e90919538d32bddc2fbf5e87b7d3bf7a12d031
MD5 3b1572983b1cca2a0161be8cdb693ada
SHA1 380f307ee6aa647547bb7b865c44e978bccf1aef
SHA512 9e255ff3a2fbf39cc0ec16747e524774d0a40b6f13c1fae629584170333715f6f9df6ff4c7aed0f0997062a418e1a274203397aa6d185cac6f3112a4e9f66bed
SSDEEP 192:wHOKGpl4T7TI9TKCzoN5KOHTzdTK7TrgTvMz5QD:bKGXi/qa5UuUi
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FolderLocker/AccountForm.resx

SHA256 e649c4149fc2b03601b284d34b1091c585c4f802d3e6c224fb15b4eabb58d8cf
MD5 d7defac996deaf8aef7e1bbfe3b7abc3
SHA1 d962240ea6de57fb10569f1b7440eb327caa1033
SHA512 e6337f01b5943011d8ca650f35e4a5ea32cf5ad82f6e86b8770cb49897676cc3fc727fcd00b6a5648ee8d351e29b42bce968780966caa6c9370df0ca2cfe3772
SSDEEP 768:KjXdskSv6eMrDK8Xj/3S3333N333S33DwSApBxOl/qQT25MEgkCZiAYl:Kj2v6E8XjRKiRLqMEQdi
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FolderLocker/DRServer.cs

SHA256 a0ffe4a65994f3c9119ddb22953530f70012e2e676d2fcc67806f50ae72b5ea0
MD5 60c7807e60366ed5d82d86ff174e2989
SHA1 a1bb9de689c9d10a2d2ecb305edccb9e26ac81dc
SHA512 2422a0974b1122969cfecc59fc39167a4dea754870075f62c80cc3b2d767fa22833e15442061b1d43a350ab903fad66a6db5aa76b09d43dfb483d401591647b1
SSDEEP 192:wHOsIpfXHyVP5O1OYsY45eBQbNRUCzVn1Eua2U4XvPTBD:bsIpfXH8O1OSggm1EuBU2vP9D
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FolderLocker/EncryptEventHandler.cs

SHA256 1b9544a43db7d94c53419efe5f0b5b9357312f9fd9b767acba7b07141147273d
MD5 b313b56f39a4e9da780b5254575da382
SHA1 90e30efd013b01e9a111d6e37d37d23926e796ad
SHA512 544caeba0972dbe7f3609c59df95d8b2e286443daf7bdfe057eacc611c54a3a37b969c45fcc447c3bad92723af343a6911eb0e6201b2ddc3551ccedde42a68c1
MD5 SHA1 SHA512

Demo_Source_Code/FolderLocker/FolderLocker.csproj

SHA256 a85d51ab2f22e805558b4a9e50c0f0772ed23de6b8354d0dc8ff8fa48f96e018
MD5 9c0357a635354dda2a7de699b3df3f76
SHA1 5f6b26e096b21e509500fc3350d5a1f639e4f443
SHA512 8012ce2ab0c03726f8ff7c721eaf47bfe40aeee0a725f4232291bf01d6018a37ae18e702f61e88b0bf64c23c05ba5aa53625c83591ff4d77ff3409baa5fdd65b
SSDEEP 96:yl5x8tn9ZOTpV+U0qky0qk4FYx5qk2qsWxEtEZK5vkiBCHMOdsHS9QOxmLHrB8Fp:Kx8l9UTpV0q+quq1qQJalx1QU
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FolderLocker/FolderLockerSettigs.Designer.cs

SHA256 ab1ed07d1dd92df08cca69433efcb75a298a634e5ac25eb46d33bd5a4f0896e1
MD5 5203f6c1d74d2d3344f77006d2500ffc
SHA1 89f4c4473e56f5f6229e80ca863f76dea0b60bad
SHA512 9af488062449a10aa4ac4db0207197b8fc5abd0dba1bf5aebeaf1abf322416f9d2e39d52686677d13948b993bb14f641ac6ce2fc7bb52c0ba55cea5778f8d9e5
SSDEEP 384:cw1zc6StOkJnrlTQoo0HdWwi3olLm7h3G0F/7vZYHiC4AYBsrM2yvECTxITqEN0:71zyw+i
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FolderLocker/FolderLockerSettigs.cs

SHA256 1fe6be9ac82e511de5648380c4535c6ebd786756530693a84746908661841dad
MD5 dc96297223cacd7c53e2830e6c4f27cd
SHA1 edb2fe3a9158138db52436c532d2d3214f39f4dc
SHA512 151a4d3516aabb5a7cf2449f461fc1f2ba475259327bf615b9163864e02024239bf22bb4282a02efa0f0138e6fe7faf2f7520008abd8de73eb8e278d16bcd7d6
SSDEEP 192:wHOKGph/K+sPq9mXqEn8H4x13T6xhWp8grPp8iElh5Ha2BibVi6C2kCO:bKGL/eOfs3AWp84p8iEdHobE
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FolderLocker/FolderLockerSettigs.resx

SHA256 cd2c664bfbb900507be315062f66cf83c31449bbf884c7a9722b43ccc5b55baf
MD5 6e46b30c0f690dd2da0efb292a504b49
SHA1 50faba6f02e0364c02b90b29ff6da72e24a4f9be
SHA512 a7bef0b98ef4c08b8b5d078f4d725f81e46e96d5894742ca77e76a9787aecb2b4346cf277b48bf4b99900309952d3d0c6d800a0ea5f8729760f2733fa0a74951
SSDEEP 384:KjrbLPxsLvASvKgwyahF0awB6yMgwrv6jYAvmzsBKl:KjXdskSv64xVjYAvmzsBKl
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FolderLocker/FormFolderLocker.Designer.cs

SHA256 40fffd3971c0c43c8cbdebffc8f183dd4d1c085995c21080c86dd27e365d3fac
MD5 8b556dad3160c628120cdb6706ee5a6a
SHA1 f3ee83206dd4df39a08685f00610323c87ef377b
SHA512 97e31e5a22631b4724d848ad811310598466eeb7ddf35e73995a1a57423a35b7c5e32c69efa85d5d42368bb76e8adb357e002c7a02a70074e108f9344edf7a18
SSDEEP 384:fw1zc6SWrGjh5x8u0hkEfdznG6U2nW7B4OejRwMuFUACtm1OV2X+V0uP/cMcKwfC:41zxop266x
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FolderLocker/FormFolderLocker.cs

SHA256 7a652c109779371f7e28997907877bd82d027c9a007f4df00a2964137e2feca8
MD5 388cbbc89bbcbcc8d444e151bf01ff4c
SHA1 ce6eab0e1c99da170a74393faf11a05a75526b06
SHA512 78226c15c409bbf841eeeac1b95979767e7a3daa5abd1dd985d95202dc9d0de54eb428c172c6eec6193ca4cd3752dd8534a8052d5a44e9c38537ac7526264358
SSDEEP 192:wHBKGpVD1gjxtADnB0oed8SobK+V/6qL6di44IQqkhdaQ66rU16FQd:gKGjDWjxtADnBPi85Db/7yLd
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FolderLocker/FormFolderLocker.resx

SHA256 b8057087fd422a042b81db6c2d0f76cdaea64170786dea42d500d8a66b28c2bf
MD5 e4fb77d920114a2e0a925391c38686c9
SHA1 01ae4fffb768dfdb21b13b77490211149ec38b9b
SHA512 f3a85348f78562c6000f6c0f09596e40cd48f118758d994d0c282499bd0ca965553ac415dd94bae5dfafc11300077848bb73515307672139cb081d04db085fcf
SSDEEP 768:KjXdskSv6XdTVPG8KnzcpJkLx2wx98RnzP1e4jYAvmzsBKl:Kj2v6juXgp4Aw7qD3jYAvmzsBg
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FolderLocker/Lock Folder.ico

SHA256 564f5fbec36dbce7ee45ab47f397a75cec72c370503f53e1a0d990c6cb395171
MD5 3db3bd4fe1bbdd7e9dce404bf572407c
SHA1 c4ecef0d3825077cddb2ead3ce0437b9a304aa95
SHA512 da6ce061b9f06ec5ef7203e5f6dbf4eaf026a11013ae736f73b4748588d478c414d9e91b1641806e3fd3382c4340321fb0d6c171731ca807e20beb70c0ee2a65
SSDEEP 96:NWXNXNXFXpXmXmXmXmXmXmXG4XtXo5X2uI633333333333H:E99VZWWWWWWx9Y5Gq
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FolderLocker/Program.cs

SHA256 4a84bf221a15a0114197724a03dbd6e7d5a1823a4ddfc4cdfd72d191d7c0fe74
MD5 9cc1d87b95f8ba037bd74ec6e80e333f
SHA1 6f4094c88a3893f79b488acee1fb9beac427c4e0
SHA512 f5d58cafba8f2ccd3c4a9019a83449a32fae1850e3bef644d05f01f2e09e27b1aff9f31af1ff2833deafdeefa96710a5fbe6035a53771ea5406632832006a802
MD5 SHA1 SHA512

Demo_Source_Code/FolderLocker/Properties/AssemblyInfo.cs

SHA256 dd955d155069d01bd1482369d168676ec6143710c048877803661c23f5b8d4ab
MD5 71d8eb75a137212218385ea4cdc169c7
SHA1 ca556dc43b15952ff98eddf5090afddf75b53235
SHA512 de88cc236cdbdc8a4b98447c054248e3cbc352d56a13fab2adfb348a7ff986b5eefb8ed7efccc4ecc6fe51858dd2849985d7f38d702e7cfdbad00dff05d06bce
MD5 SHA1 SHA512

Demo_Source_Code/FolderLocker/Properties/Resources.Designer.cs

SHA256 1a3a97883ffd3986d51b1843550e966b0aed5f8e65140f8a3a83b7254da9709d
MD5 a78345caaaecc4426ad8c4fbb47ee72f
SHA1 f6d446b35702b5b49c05175095933c8b3619ed4c
SHA512 0a5ab5652a3af4b85d801d4c68c5c2beb75fc771d9f0a8564e813897ec13e8dbe91c4c09b17578703d84130a33ebdc99e767c01e97ce3ce46896928645b74435
MD5 SHA1 SHA512

Demo_Source_Code/FolderLocker/Properties/Resources.resx

SHA256 66b5ebd1b0fc73f041ba669ce2184f6f471d5e3524efa34ca31233e9f5395262
MD5 0cd8c971317d19bbed44757809bcb92b
SHA1 47b15748ecc8e952c5935170090db7c269ce4b4f
SHA512 883dba84bf7daae3ea49f9d54c13dda4f125da82ba63f90eeba0900602896ad9492a0adf7b69b67d838034090af20926af5c2934797afaadb38aa069786c1fc6
SSDEEP 96:fijrkiK5k5LPXbac9m5Lv6FzSvd4gIRjETUT200qSdvabvDIwQBugqvA:KjrbLPD9sLvIzSvKgIqUEa2
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FolderLocker/Properties/Settings.Designer.cs

SHA256 1b7ebf45a6053d16ea41301918adf29e46804a80a7a96cf619663580c689ef4d
MD5 4f584047307b7699564bdab33fc03daf
SHA1 89569a70a23f8ec922842eef2f338ae0202dc3d3
SHA512 5dbfd507e7443087cf32fbe9d860b86547793826a64d305e2386474bd4d6025983ae2535d88fdf9b53bb144850346a642b13ae64376ad8b50259a62556ac3a5b
MD5 SHA1 SHA512

Demo_Source_Code/FolderLocker/Properties/Settings.settings

SHA256 f6a4290723520caddd934b8800319c7ca6cc7eeab647059ec89b7a13b1513265
MD5 8c0f00d7d9b0046695a0255f1b11b061
SHA1 5e1d04de66ffcc5dfd813530ab6992e6daaae417
SHA512 a95c07dc3241b7c9f37b7f0a5c143c9c133c3bcbfa16e4a689cf47f45b3e9d0ccf5c965143a6848237e7a9fa8deecb89837dc12b12fabd8231fe94f3ccba26aa
MD5 SHA1 SHA512

Demo_Source_Code/FolderLocker/Service References/ServiceReference1/Reference.cs

SHA256 e119288edc393531933afb1b1af19c712fda733a751c405885ae57a30d91f748
MD5 900b2d2dba768dd798b9e7c1d8ad5d2f
SHA1 83eb228ebc7bd9533b7278b03ecc794fc752d79c
SHA512 6297cff365e444fe693ce7019f5b29e578cc8c6dd31b59f6416a7e1e453bf75a8a8b68dd8b420ff539da63e8ef9f1723980c5a7a0362edc8d4502e4dae0f49b0
SSDEEP 768:cI+EoyKG4vUuJkx5zrOpZuSDwcoMQI6WWeuZsADm6weS5i5jeR0:J
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FolderLocker/Service References/ServiceReference1/Reference.svcmap

SHA256 2b1814f635dffadbb8cc0d18f0f567d09492614a27af970479d8e017f617c3e7
MD5 2411ce6847ad8698b4a109a9f81a2f18
SHA1 da8f6171b43b2bb65c9dec7cc59b5b7bb3f23c74
SHA512 fc94bb2c2348a0d05cae7e71d877b8e4f0cf0c51a400500b924f3c5076d4cd9558178e783af33f2b339a22096fbf2d1464f6e13d713dbe19057ae13c11b725d0
MD5 SHA1 SHA512

Demo_Source_Code/FolderLocker/Service References/ServiceReference1/configuration.svcinfo

SHA256 6f89b5cdfa1139f16f5821360ef06469287047e22ac7f13ccc418bd74d9ca364
MD5 2226981396c1d35e3f495dc6b8dd1b03
SHA1 7225d0c385cc48a2559bff4b7fb22cae7a489521
SHA512 a1a31a93720a5f9f8cf59ae10950705c676088be483b009ebc0bf4a5b27f1a8fa60df3efec62d72e426cfa7882f73993e9cf24feef15c52c1df75df7a315ff10
MD5 SHA1 SHA512

Demo_Source_Code/FolderLocker/Service References/ServiceReference1/configuration91.svcinfo

SHA256 64c9bd215136412afd92c925b4f8208702dc4fb68813544ddcc9e6bfd4631f0a
MD5 78b4d862b9bb4c0e32dd99bb2ca90bf1
SHA1 198956e24c439bc2777857fa22758bebb82ec9c1
SHA512 76d9efd2f2ad2c0f1896b108477c681dbbe00db18224728ca6455474c1e525bdda4b91a1c9b842fb7ea18fa3c0df0f8811193182466051a22b3a88fe8fbfacef
SSDEEP 384:Q6nkNnDspfp2UxM+sFSMAyFf2hl7eWnI3qJFq0mgRryBJ1YBe7y/fAu/5QMGuoA0:tOUxy
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FolderLocker/Service References/ServiceReference1/webapi.disco

SHA256 d9be3773477a159d63b37fb3b7dffa41df4c8b19b6b95cae873a3e044622a1e4
MD5 9a12512f6b6c7d917687ab1c8adbc191
SHA1 3884d3fd4072edb31da81f74cec88a6f5ad2a6a6
SHA512 c4884aa920c4fc62ea651a809dd491df1e07530edbcc61ef4291c2e14f706fab04cf0eed2385997fc49fdd3768930795cac784698eaf619c793f308510315a43
MD5 SHA1 SHA512

Demo_Source_Code/FolderLocker/Service References/ServiceReference1/webapi.wsdl

SHA256 80c17fad3b529f23e6e99319619a39dbb31daf15222b8b911cc591c5860f440f
MD5 b9f74a736438495140c4e82fbd547dfc
SHA1 774a03ac90ddd4fc2c172c30d4db7dbf57673672
SHA512 e42e206ddc14999c80747aaf07448af6079761ecca4862dfc715ee54d679df3959726bf3d9332c57321fe7d0469bfb686a4fef9135518949343e8278234f5850
SSDEEP 192:vhqJhXsJEn90cEDxM1m/j5GpGoYAwKAGwjMk4k/dF/nlztKmj:vhqJhXqv/9K2ghYhj
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FolderLocker/ShareFileForm.Designer.cs

SHA256 b118034cd4e2278ec7a6488e2b86dd7a9f8956392643b6a2f5d5fdebbccf77d3
MD5 813b8af511799288d739c83bf7eeb906
SHA1 050c846518c31eef440ffdae526e853ee58bd8d8
SHA512 cc719d6545dfb03bae8ed72640edadd2f2e170704aace860209080af5288887f921b28868ff88fb2093b7f0fcf7a39499a344cc1e88ac54b94420fc7917a8b5d
SSDEEP 384:jw1XSE/LJijmzWX4s2titd/I68WyldGw02e5wHeqoWFX4+N9OSldZwEJU:01PQ
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FolderLocker/ShareFileForm.cs

SHA256 4b414a76a776687ad9ce0328cbddf075aa22862be3c95adb6799a8d501cc1913
MD5 c1c6b7568dbb003c642c3b1ab594d000
SHA1 eb980708a29f6a85b3c3931d7a6f10b01d0e16e6
SHA512 8f977808e7978bec34a8f0a4a783018339140e6d618e7e7d39e7e182925f692844db23ff8dee7926516fb2498abec407f141e41a1cfe3d8df49b533d5514ff17
SSDEEP 192:wHOpKGpqDPLqkvqDZ+gT/FTC6su6HIe+jHMptIljmVr:bpKGQ7ekCFliz9
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FolderLocker/ShareFileForm.resx

SHA256 5ecdf86d537e52db5de64b3d513d1dc5c3183e18e688ba176b42dd7ee476ed8e
MD5 9c956003046fdfd55ab4292ab37fe96a
SHA1 96d78e847b078cc681c7112fb0600a75ea04b252
SHA512 136552deca4a2311aa7dfc68608fd357984a653d8ab2f15d0332376195848a5cbce3370a91350c157223dffdbbcef36161fa9146a5aa523fb2f99986b5a46199
SSDEEP 1536:Kj2v61Xpwo1txthLZ8vFKxhV5czOl1I9YE3ngeQ:Kj2MXFhtfCFKxhVFgYE3DQ
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FolderLocker/ShareFileManager.cs

SHA256 9130c58a4a3ba94fdefe6f7fef5f45869fb7d75aba810cf951dcce86727482cb
MD5 44c7f3fc8974bb14084a1a35ed629462
SHA1 fd3809ab84433734f26cf5917f3fded7d42f2805
SHA512 637ece9f56ed2c9036c80791d4ed3416b0f40454a17515a3454b75f1b73453006ad5ffe1a2bb3ef53778e1d48a847034346a54fdb03e48d55f956302b1a7eb05
SSDEEP 96:wj1HO7o4h2nXyfXtnp8dVuHTnCoYNnz28oGv2iQov2u28ojnyOCoYNna3Ze:wHOUK9np8TuzCfNnz2KBb92FnAfNnh
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FolderLocker/SharedFileAccessLogForm.Designer.cs

SHA256 f2cca053a0842363fd420a1b8ba3074a63c4915fccc2cc91ab2c5fd417fbfc72
MD5 bedb74f16eb9ed8a85c26d63593cad7c
SHA1 a093e3d09be2b855f8aafc67e57165381593cff2
SHA512 8d61e61a2bcd754a8352b7f05eb44fc46a6b963e7c9db7b36b553ff0fd6ae8f54c414b44191dba639ec68252b24303a04f3ced35ad8a714d970c6f70cf6186e9
SSDEEP 96:Dh2atwZpiVSikf8EGQkGrAulFAMGxVyz2W2KJtm:Dwa+XiVaf8JQtrAulFAlxVyz2TF
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FolderLocker/SharedFileAccessLogForm.cs

SHA256 f95325a9a3bfa240cce5946599db14343d18f6fd198a63d493ca36ba1a722920
MD5 85b17a8901e8cf8fd248d85be185a6ac
SHA1 f0cd8efe3326c57f0a7e2660e4dfa1f50c49a40a
SHA512 0da3a418f0a962b45f3c4a6551e2887635be22aa9f3871004def6ae66477dd47bc147c2d1b5da441b0ef831e0db95857c7addfda77861d6008b8a84b4d2b21fb
SSDEEP 96:wj1HO7o4h4Dcz02nXURFUJPlaZ5nVnJDIrU24aGpFkF:wHOKGpwFUJPlkc
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FolderLocker/SharedFileAccessLogForm.resx

SHA256 15fa4b2cb8e7df57d7854db45ddee4cb9560ed28f72a8508d48522f28a7fe89c
MD5 f2f79ae6d8a7010d259a77b410e0dc23
SHA1 7784bf29428f49624aebfcca8bb3bc136bead0ef
SHA512 3747fee68d11c4e5a6f440fa0e265f3f45493aa791e82594d2a95f7f8ceb51b134756f78febb5a669dfcf83fb78132fa8eb142c258e633d2fcb16a08eec6cb8a
SSDEEP 768:KjXdskSv6MrwBx13MrDK8Xj/3S3333N333S33DwSApBxOl/qQT25MEgkCZiAYl:Kj2v6MreX8XjRKiRLqMEQdi
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FolderLocker/WebAPIService.cs

SHA256 9f399d2e7462a19b60eeaac82c095a0a12c68e455d8e0262dcc91761ddc8ae1e
MD5 ef4b7851b2941583443c2ed6a7984b61
SHA1 bde53be411473eaf65882962361649ca0724aa58
SHA512 fab94ac279a6a2bbe13b893c06dd08bf670bfc94f930cb58370bfa503aff1f2cf22bcf9beed72f65f0cc715be19bcd3e479912f250561624ca460ac0ec243b57
SSDEEP 96:JoU4h4Dcz02nXy14Vk1WF5kEXBHrthlgnEY47gAutmTxSbAFpdzL5VXNOGL:mKGpFmWDkExNgnEY4mNMFUQ
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FolderLocker/WebAPIService.designer.cs

SHA256 e222b9b872a9448d413c9424d20f3ef11aa88ec16a92a3fcb105c334197708ac
MD5 8db457fbe7f8a6613d06b30811dfc42c
SHA1 3480f5b878e710f0af5c7ccd61cff56a291cae3d
SHA512 56d8e95e1b564d0432377020e860e1b2638a3cd32c383c4dce0d8ed4d6cb44d3cf455cad6d1bba9345f49139d08456044e8eb3e6db7dfa899de993e0fe638301
MD5 SHA1 SHA512

Demo_Source_Code/FolderLocker/WebAPIService.resx

SHA256 910bb5bde5757e3b90e4eff21f434ef400f1351f9c3346ca082df2cf561145d1
MD5 d2da162cfc27e4e5239e0f496e1c2717
SHA1 5fd8f956131ed3402771098d2a8d462bb97e508f
SHA512 2ba2b6931db2aa505f4959157d76c5835f26a9cd2352ffa27d6b91ddf918e9467c124906cff23efa591e73df8ced219ee6c150e2265e7da32007e2eed22c6aac
SSDEEP 768:KjXdskSv6+SlxOOA9SVdi9F0olY7PjBo3tLFl:Kj2v6+Slxc94diD0oA76t
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/FolderLocker/app.config

SHA256 ff4d60930d29d2ec9601505d9dd193822a19d0a3d1855895fb96a541caa36817
MD5 5f6ff863bb47270d814198a1d02e6565
SHA1 7f995c546f3f63c26e7025c68f74583f4bfa5ed8
SHA512 a497b96868fca7a104dadb2404c64311844ee6dee3b82559014f33e7b09db565e214e69c8217d0ca0c5fbe0393ef754ead938e3ec24c3ec804c5ccc9fb0bebd6
MD5 SHA1 SHA512

Demo_Source_Code/FolderLocker/app.manifest

SHA256 01bb3af147c725eb5695a44682812fa0260fd76a5ae8887cc77a06f747da499b
MD5 e7f030e987f7a15a1f407de961928c51
SHA1 4aae2f3d1cf87fb2600a396ddfdd0d39763eac3a
SHA512 ca392347f10ec7ccd3784e1e90d872bcf39ce92eea62db156d9eef86acb2fb4e9a5a2cfd9134b9d32a696b5d1c7f056f58b25be7aba3edae4d54baefb9b9f520
MD5 SHA1 SHA512

Demo_Source_Code/ProcessMon/ProcessFileAccessRights.Designer.cs

SHA256 685dfef049b88ad07d0675ef1675e3093580f99c4d1245d865ae6ca0720c983a
MD5 ef9dc609844edbc227012f7daf1991e4
SHA1 36372dc36409a0762c0ce2fd0a54a1fafccd681f
SHA512 2907b168a59a66dcae07741ed58e21056adcc9d7129133febdb977e40e6c6f4c23e4c045a1d3c7af66af07e532b6e0098174eb447fb03b7c6ff10a5291d3ebc9
SSDEEP 384:WKw1XSTLNH4kwBXFx6AzLY/mnYMaDNibxh7f1adlzVHs4txoHUEJo47trEwED8:WF1/eCaKB
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/ProcessMon/ProcessFileAccessRights.cs

SHA256 8b3e3d07557e904337e5a6a4aa9f63cc2c81485e4915fd47816ba6ded36d4626
MD5 50140a99ed88a56d0e707bda3cd0c99f
SHA1 dd597318bbf8056a2d02c7f88ac6b03ebf81f2ed
SHA512 a72c31fc1b75762a7aba4ea9a7efbc357f31ee81d2e4daa6a5e6cddeea5e50b91b6f7586b25024b082560826d8c56e513cb1fea66754f8d28fcc3db1107eedd9
SSDEEP 192:9KGphjcmABrIzkBK1Hlf/hxUORz2BFpz781vqBNdZbK/jUlC1T:9KGL7lf/hxUEcxdZbKf
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/ProcessMon/ProcessFileAccessRights.resx

SHA256 2d4d3b53dba8ad585ca9c2f9fa1ebf78d2edfd46aad13c668a0d0cfdee0e1b21
MD5 d3b4fc21b6ec3efcb5d9a18206005b1f
SHA1 1a692d7c7e827894efe4d704fe41cebb5c35ce4d
SHA512 50f76216f72eda2a0ebdf39f4040dd10a9565334d1679fb8154281867f779e99f69e8b12822d74f1374055a8839cd6ba86cfe62c4350dc02221fe0c426c0ed0d
SSDEEP 3072:Kj2WGxWFxpi+zneB9NG+eVNVXVXV6ovxC9M8yOKhNqqqqNqqqqNbqqU:KXGxWFxp+B9NG+eVNVXVXV6ovxOM8yOT
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/ProcessMon/ProcessFilterSetting.Designer.cs

SHA256 77fcef91e2c30b1abb770eac19c7906a488f45583d2e5d2e8c1660d0182a922e
MD5 721201c1e3553e5738a3bff79185cd10
SHA1 f5274904e0d3e6724b9c950c577368001bdabc20
SHA512 722257d55ca71418cf186b6178e343059493cf5208f9b6c096514b562aee6b0c8aa2b8f6d5c034626dedad47939f77dd10dbaa93a53f1a75d515b5bb4c8e4380
SSDEEP 384:Yw1XSYSm2Z6zOQk0eSj/27hvWvhrrN98d4L6Rd16KvZbD/CQ1vtOWSR9iGqISnDY:P1Zgw
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/ProcessMon/ProcessFilterSetting.cs

SHA256 20dcbdab37e18421b4bea76b5ebb45d23f705350620c5fee9adaf972ddab94b8
MD5 644add95bbf91ce50067b799db9acc96
SHA1 27cb237a0a2216f0772171e4a4a09e6ab0372f21
SHA512 2e13113d2d22a4c553c0aba7f37d761c9d57ec0574b2524fed6cb6da3bce6f1d5fa2d4d01e734148463837c102a5dd4490a6569e68c1461255c0a0da36a7b9b1
SSDEEP 192:9KGph9BabUev/26JXX6855nAtBldzZYm/0nz660z6LzOufltNlJhEZwz6j:9KGLNoXO9dA6z6L6uNth6j
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/ProcessMon/ProcessFilterSetting.resx

SHA256 96feb319bb8d02782d3688b0758e73db5621ab2c55175e3b636f04f647d018bd
MD5 5a289e48de07951b1b526c7e6d148ba1
SHA1 ef0c73a99093259606c282974f953a2a04c68395
SHA512 9ee351bb72803b007c4485e15dbce2b75c682c9b9ba6b99ae3d41d360ed3926cdb5d168e8bd584ee868b9e0da5f96b75819b28ae6f0b67c315490d2cf6c1dd55
SSDEEP 768:KjXdskSv69gqxCrerrr92q/TOiSQk5pXq6LNdN5etlyOJl:Kj2v69gqcrerrr92diduXlXilyO7
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/ProcessMon/ProcessFilterSettingCollection.Designer.cs

SHA256 ac74cfca5f074c72614f1a00f0ef1df0745629b63a976a923e49f94cbe261180
MD5 621e9b1063bff52e3132bc092ea2ab14
SHA1 0a05ee7d14fea5050d2e6c8b90a1ac5b594120eb
SHA512 2625c2c3fb47d748a7c1c549e6e194f9e5996f2a63cb592d6ae7d009066377918d35486fc1350f39d3c23404c937721e9c7256ac960a1f95d7181bed7d81bdab
SSDEEP 192:8wa+XiVoAbZybG02duA8BpWT5zJ4KYqGPrs0kclnyzScN:8w1XSoAbZybGzdkBpWT5zJ4KYqGPrsPT
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/ProcessMon/ProcessFilterSettingCollection.cs

SHA256 2d1957b7bf951e136555cac03afcc428647dbda042c5a6f59faabe65aeb24bd2
MD5 464798a3efa87cffbc0fa94d7d22be06
SHA1 e4d273d0a933fa8031aa1c0663bea22ef5495b34
SHA512 8177dd09c4291a255bc6149ae8f10479bee52bf228ed416b6f5a34c907dcab9bdf180dfffdbc97ad298f4ee48c3104ab85e50e98dc9f3ddf59f6d369152dfe4c
SSDEEP 96:Jo4h4Dcz02nXRYzyOJzYzDUzH0Hzi87/zBz1Gh5XX6K:9KGphFO5ksH0Tz7/zBzIXX6K
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/ProcessMon/ProcessFilterSettingCollection.resx

SHA256 96feb319bb8d02782d3688b0758e73db5621ab2c55175e3b636f04f647d018bd
MD5 5a289e48de07951b1b526c7e6d148ba1
SHA1 ef0c73a99093259606c282974f953a2a04c68395
SHA512 9ee351bb72803b007c4485e15dbce2b75c682c9b9ba6b99ae3d41d360ed3926cdb5d168e8bd584ee868b9e0da5f96b75819b28ae6f0b67c315490d2cf6c1dd55
SSDEEP 768:KjXdskSv69gqxCrerrr92q/TOiSQk5pXq6LNdN5etlyOJl:Kj2v69gqcrerrr92diduXlXilyO7
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/ProcessMon/ProcessHandler.cs

SHA256 3b16ec511b25ce944de992c34e79812b3886f2fae6b7168ec9c299ab4fb462c7
MD5 ef77b6940bf1ab17960c75632508d449
SHA1 111ae5d5b725f531e578c5c5069452641fa776d1
SHA512 3572b399f6c1123de14eb06f30c3780e5e62deba88d57f5a779a7d973f4cb41ffdca469556719a88d0b64ac06a1ad7a9095ea6e74ca6dd3a77fb79b950518efa
SSDEEP 96:wj1HO7oU4h2nXz0y4P6V0yy2jB7qV9TrbtZbnbTuW5lWri0iOkbmeuzF/ugtBMUd:wHBUDfN9F7ynbnn5grZfzcgNwOB
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/ProcessMon/ProcessMon.Designer.cs

SHA256 4bb2eec4a8e02c53ae6e9bebc73832b2ef7c6834024bbcd24f365bb950026189
MD5 763a55743db2d4a20e850e33a1cdd85e
SHA1 1b9bc44225e3b30cf192ec609c956519209ecc5b
SHA512 d32235e3b69f59624444a7362354caa359631bc1ae40f81f7fa09eebf607c2dcbf310181c4299052102dba92354519c11030d401e44f6f77c34ff8725531824e
SSDEEP 192:0wa+XiVFyeHvf0hSTNHgtRv8lxbxcK8fWNex5LeyEQN9hluttCqlb/yzYXmmcjE7:0w1XSFyePf0hSTNHgtRv8lxbxcK8fWNn
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/ProcessMon/ProcessMon.cs

SHA256 02f1b45a78f3a0542d9277f785b96c964dde75aecf75543e79f4b5061f392a53
MD5 ff096269adcbbeeb407e3039a4280c48
SHA1 b8a7332b4c6f5b581950024fad8862a71e371bbe
SHA512 e0f8573b79e0dfa2376cb4d4d65980be82f122078e5f53227e7976f226da2c9f2bc47e82ae9aa992027dd6adc80e40920695c4e6dfeb087c0efaecc1c5d69795
SSDEEP 96:wj1HO7o4h4Dcz02nXy1UOyYEPCgjkuemeojXczG92z+FXFJF0WESXfwn89sH:wHOKGp9cgjkueJ8gGc4ESvwnQsH
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/ProcessMon/ProcessMon.csproj

SHA256 105786c891f363a1b8d034fd77ec090e8bcbb079ef555d986cca67275e284cf0
MD5 117e9a2d5859dbf35b2bb806f32c28b4
SHA1 3c556bd66b7aaab34265af716f99d38de94bc0df
SHA512 8159883e439439d0fa516dc5ef91063919cc8c1787912943c9541639bc92594501570ddec6eccadaeefef20880de8b2eb90ae116d2f8297cbb973699b250e048
SSDEEP 96:yl5x8LA8nYpl+00qkmxjOWpqsYxmL6UxqEZK5vBCHMOdsHSRDnXrN4L+U:Kx8E8Ypl6qppqdFKDnZU
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/ProcessMon/ProcessMon.resx

SHA256 747592ebef13fcde6a0a0c335d422ee04c5d3464b5172a477454fde3476e6abc
MD5 f22df2ffaad2e10d49eacc7caf80a7f5
SHA1 1eaf915dc94a4f1683fa4a5ed010930ae223eade
SHA512 af6a4849fd5df75fe851bac6b6fd575f4e49ef48d52c645dfc1f3908ef5cc8e7ce8089ba0f897891d75e7bc3b4d97ebd2c6a1ee918fe40ffde468e741eeb8922
SSDEEP 768:KjXdskSv6Be3WhF4VBF1HmmddfgqxCrerrr92q/TOiSQk5pXq6LNdN5etlyOJl:Kj2v6BemT8zmKgqcrerrr92diduXlXi3
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/ProcessMon/ProcessUnitTest.cs

SHA256 699c41a7086521e7b98a85526c7f29f4e4c7ec3c147306ba10a74a9f7bf9617e
MD5 895b93e6b80b4e3b40e3d883224877fc
SHA1 61856c903729f569d1ab5ee7dce6668fe353859d
SHA512 34d0ecbf9bdbd1d443be2d356753c40551d3cf7ef14b92ec2afb2123ca35087cdaf1c903b7df91f0a5715b2166e760258b2a8ab52e0119d31d83904f4527e8ee
SSDEEP 96:wj1HO7oU4hV0Xz0y4QfPKtrCzsFFnVb/YGzCmV4DbcyWFL67i0iiqL9qEpd+9JX3:wHBPKT7zsr9YGzBmDiFeXSpd+9JXvqE
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/ProcessMon/ProcessUnitTestForm.Designer.cs

SHA256 4e3018a7f0cf360b18f329ed02192b0d67ce9cc4e67057334498f39e493fed1a
MD5 7885f21c5020e17165d7d0da224244db
SHA1 df79921fe394b0b176d593bc93c1aac34cedb30d
SHA512 e0715a5e96bcac4d82240bfc77a8fa41bda98097b639788f87fb963c76fea6694ce2fa72d00527ccfba24c69f93e06181289c464b21f26a0794cd50ac63d8760
MD5 SHA1 SHA512

Demo_Source_Code/ProcessMon/ProcessUnitTestForm.cs

SHA256 df6b399ab8885fc2050fc7d9f74f1f0123926846ac6c2100f8b2495b8dd99e55
MD5 93cbf8db6de578d11609a5e117c25026
SHA1 f1642fc9a6d5c8b3ca6d45967d13ff92c23a8572
SHA512 c52680d3a1862bc01ccbec2b4abbb56f8fe06e67f22525d74814de5a196a99a12d489c1f3c6095b9a5da5f7525fdcdca586b920d0a1342b18c65a0eda809ca13
MD5 SHA1 SHA512

Demo_Source_Code/ProcessMon/ProcessUnitTestForm.resx

SHA256 d079c091570d074fa408518c378bb691def027345846e28fbcb139561accf377
MD5 7ecbb706ea22bb1d6de4476811dc18ff
SHA1 f0077c5ac50fd893915d983659f3c03123ebe1ae
SHA512 b47cb970233add81566533b4c01b371fc7ab239c580e0bbc54fb161ced1721cedfdf38b5c6468db29c05f229cddd960de7853bdef3331a08580dbf6ecd07c72b
SSDEEP 768:KjXdskSv6ToY0oGpaO867UocWWMU/rhGOl:Kj2v6EY2aO8h/5MU/rok
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/ProcessMon/Program.cs

SHA256 fae2ba7f37494af1911443cb29703945fa633f3cf565af7864fdecf3daf59a27
MD5 c0d868ce9bbbb01291821c0ba393d1cf
SHA1 25704903cd141aafd2e4aabe8232d2e47882bd80
SHA512 fb77cd2e99441c760a59bd122698cc48554789078038c5c51368d9e53df21871e1688ceb093f78e07e0c3b847270789ea02fbf72700e691896f53c4354933137
MD5 SHA1 SHA512

Demo_Source_Code/ProcessMon/Properties/AssemblyInfo.cs

SHA256 5d0fab6bb2c175b2f7265706e5d8e9f857d8f2b91e924cf87d3ecbc7720a162e
MD5 97fa4d56e566b7f4463dd9c15153cf73
SHA1 cc7aa0f2836dd70bb5b94172e55c49a30de192db
SHA512 83402063a7c8b4c81fe2098a886f7ffb05c3648142f8b3f99e6c578a45a260110328f9151c7405899afcff935cfbeeef0c25ac6f3a1b83ca32669597462d7aea
MD5 SHA1 SHA512

Demo_Source_Code/ProcessMon/Properties/Resources.Designer.cs

SHA256 7392a87084b7a4b187584017b47b1c5169d8deacdb2e2036a78d73d4a849a84b
MD5 bc3cbb2caedd68e6975d926ef3bd57ed
SHA1 94056574e95fd2a8800f931a6b6fbdd2e87223ab
SHA512 bf84dd8bc4c73822cad47025fda4a465a08293f117875742ada8f001ea78dcf00c68db190b56c31309715974796d8b64ab546fc7f01ca3958f51941daa588ce4
MD5 SHA1 SHA512

Demo_Source_Code/ProcessMon/Properties/Resources.resx

SHA256 9fb8cad7a12c6ec5c19efafd13d6b39f68cfa0bbe81a3b278601686d057277a1
MD5 304bc6094f09c82d1bd1aad8a0135f2e
SHA1 694309629635bfeb58f2984080a1ba0d1a3d9699
SHA512 2b39810a163d06234cfb84102aa0a5fe0eb99e289229f73997b1bafca0155e85899a69f8ab2a12bb56c6c8fca8394d3461a1efd1bec89819240d8acce374a65a
SSDEEP 96:fijrkiK5k5LPXbac9m5Lv6FzSvd4gIRjETUT2+0qSdvabvDBwbjBu3FqvuF88Too:KjrbLPD9sLvIzSvKgIqUyahF8aokwCl
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/ProcessMon/Properties/Settings.Designer.cs

SHA256 d1ce05f6179ce6d06a7beebc9ab5018ab73eb87c3b6c8b74bec3db06c47e85ab
MD5 1a49900e30c5d83ddc094da2d67fed99
SHA1 f51c3394720c1ca8e5f4cfd28ea748353ba50ee8
SHA512 66a926e2def411aba09dca412f0144859ec1b5d362b56e2d328cf20ed5d51262a1e19037cd48183324bae9e955d327886bca56533418bd09c06046648fdd1887
MD5 SHA1 SHA512

Demo_Source_Code/ProcessMon/Properties/Settings.settings

SHA256 f6a4290723520caddd934b8800319c7ca6cc7eeab647059ec89b7a13b1513265
MD5 8c0f00d7d9b0046695a0255f1b11b061
SHA1 5e1d04de66ffcc5dfd813530ab6992e6daaae417
SHA512 a95c07dc3241b7c9f37b7f0a5c143c9c133c3bcbfa16e4a689cf47f45b3e9d0ccf5c965143a6848237e7a9fa8deecb89837dc12b12fabd8231fe94f3ccba26aa
MD5 SHA1 SHA512

Demo_Source_Code/ProcessMon/about.png

SHA256 96acb3a8a203e91dd6243941af3df0fd62d8a62b2ea5bb4b5078dea5e80a63b9
MD5 cd7b67afc587992e0c86a85d8c2537d4
SHA1 b871af0c18f4404dff26aa781f72c1351e89e566
SHA512 8bc5242cdac4f6ff5cc5eb9cac29971d0d6f0705f1963e549c354796d0195f49faeb721a93700896d2c8e5f3a0a2ac006ab706e2e1f3e96bc9acc3da3b2c7637
MD5 SHA1 SHA512

Demo_Source_Code/ProcessMon/app.config

SHA256 50c9c9f3cc99f39697cf537ff09c98f42f023c474cc12fe1deba11894cf52c07
MD5 e0d80706c31ea90fd5d09fcb3b2d49f9
SHA1 729ccdce546366ca702862cd957e91025537f3cd
SHA512 bf5a8e88f2554572157d044e0d9811bf8a6699e9cfce60d53d0df1b1fe5db8b9cddd56ed64b8dc38e0ab535122a57fee99359ec1407d4878133f66eea7201c4e
MD5 SHA1 SHA512

Demo_Source_Code/ProcessMon/app.manifest

SHA256 1285aaf1f15f5a70c0e6cec6cca29349e8923619faef68b2318e24e3bf079ff2
MD5 434e9a26d52e544ee4a8204f042a2bae
SHA1 95e1fcaa8c2eb02dd777e794bbfd5cf248fd49ad
SHA512 fcc5c39c095370fbf3380b93e5e86b0ccde362f9232a3661006e1a8efc34f57bb620769ed6f5fc3c01b36d43b70e8e420356201012bb4552b8a4ce61e26a4d04
MD5 SHA1 SHA512

Demo_Source_Code/ProcessMon/processmon.ico

SHA256 e71a24d128ea9151da63bc406572b30e3187f5662c8340c54ba7a7e07c7eec14
MD5 7455490841ccfb18fc3b29ff79981e9c
SHA1 9c4e44ff2a86e7d9b73cf67cbd4364228223b304
SHA512 73201ffb0e5d8698e1b550a286b154da23a8dfa928b04177b9eec0a38b82fa9066e2a927a9ea67777a0b8dc9fecbc5184fe9193d8fb4a32ace1a3d53fbba4a89
SSDEEP 384:914EEEEEEEEEEEEEEEEEi+Ys9dyhtc/JUUjyZsHfcq+m8iDXB:gEEEEEEEEEEEEEEEEEi+j9dyhtc/JqZQ
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/RegMon/Program.cs

SHA256 add298b51df50914756373706d87dcc0c8a99538b216c6aca8e02ec82c5ffbae
MD5 38a1ef3fcd3d8a29ab64b8a99140a23e
SHA1 f93af944878f50d1d80f013edabf190fb711b5ff
SHA512 a8a8a45e7739f8ae70049bd1f3a2020577f1fdeec564dd0a75df244001ff3807012f2d66ca5a5624757870f4c14d38df589826aa6613197144b8d6cd0a637f81
MD5 SHA1 SHA512

Demo_Source_Code/RegMon/Properties/AssemblyInfo.cs

SHA256 c98195848c4f7ca8981cdac01189901c69b64957ae3c757abe95d8f0c2d34dfa
MD5 7f7876f39f105fc445a23c121ae65540
SHA1 5a7737a4b3b5be0cbf66668df1c86504b2a9a6a6
SHA512 146d9d32b8ca7542354c20b8af9cec5c25eb6893e362f82d6357fb4736f424f30f8213a387349b6b29999e4def03be1ab609eb4e58832c6ec34b2ddbe8acf469
MD5 SHA1 SHA512

Demo_Source_Code/RegMon/Properties/Resources.Designer.cs

SHA256 c03390c6cc7d7e597aa5fc61eeddbce854c5dfa6024cbfe30dbc4b96e1b57b40
MD5 16be84e2153a0317a9d0bf6f3735cdd0
SHA1 5599af0811d1525c124886c5d25c2c0cb12498fd
SHA512 e15560490f29ad0c0ee6c805c0937afa9b5f4f1f8fe56221f641ae447c8eb5da4e02044fe26f548716ef6156210327c8c98c3b2d6103e6a7d0537f7964499ce9
MD5 SHA1 SHA512

Demo_Source_Code/RegMon/Properties/Resources.resx

SHA256 66b5ebd1b0fc73f041ba669ce2184f6f471d5e3524efa34ca31233e9f5395262
MD5 0cd8c971317d19bbed44757809bcb92b
SHA1 47b15748ecc8e952c5935170090db7c269ce4b4f
SHA512 883dba84bf7daae3ea49f9d54c13dda4f125da82ba63f90eeba0900602896ad9492a0adf7b69b67d838034090af20926af5c2934797afaadb38aa069786c1fc6
SSDEEP 96:fijrkiK5k5LPXbac9m5Lv6FzSvd4gIRjETUT200qSdvabvDIwQBugqvA:KjrbLPD9sLvIzSvKgIqUEa2
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/RegMon/Properties/Settings.Designer.cs

SHA256 f3b5212f6c8881ccce0ee02134c77d874e8f4c1db739028833c5ae617063f261
MD5 0ae6cda74ee710eb95df0ca93f53d9ec
SHA1 17f61ea9cda40a3f271727d8522b469ab0938aec
SHA512 1c987ad1560d80052a9b503650c91c077bdea857078ce6b72dae81a3c6fa4cc66ae8b8c3b7a41b260eee54e3420be8bc557f4468c122b972d5e4d7a3d2f8608f
MD5 SHA1 SHA512

Demo_Source_Code/RegMon/Properties/Settings.settings

SHA256 f6a4290723520caddd934b8800319c7ca6cc7eeab647059ec89b7a13b1513265
MD5 8c0f00d7d9b0046695a0255f1b11b061
SHA1 5e1d04de66ffcc5dfd813530ab6992e6daaae417
SHA512 a95c07dc3241b7c9f37b7f0a5c143c9c133c3bcbfa16e4a689cf47f45b3e9d0ccf5c965143a6848237e7a9fa8deecb89837dc12b12fabd8231fe94f3ccba26aa
MD5 SHA1 SHA512

Demo_Source_Code/RegMon/RegMon.csproj

SHA256 f86a78bab21115aae31350091e36aa0724fcb5b38b624c3310c7edaa3fa39934
MD5 182d4b1ab3ff18ece45db8f1f841a4bf
SHA1 cc18465fd6adb6400f3b0283165c35c2bd6393ba
SHA512 e81c4c266c2d7903a44efffafdfb1d048b9f4a72f4b2f7f4ffce01c4e0ce945e604b9cde75768c687583f681039e2757fc62edcd0f915f8e14de0afdbf4ad360
SSDEEP 96:yl5x8y0T5ZOTpV+0xmxeWd6Ux9qkk6UxqEZK5vBCHMOdsHSdtZX7O4L+U:Kx8yS5UTpVIqMF2tEU
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/RegMon/RegMonForm.Designer.cs

SHA256 636498a310ad60bd3d4a9ccc05c62adde97f2cfd7d24b0f644d8f3c4b94ff704
MD5 ce1ab5b36be39807cb8b836d6d6abf1e
SHA1 bf850cb5259fd8fc1d830892ce66026aa8c48186
SHA512 48c8d5d5810aa3967aa9e19eeed6dbfd27e424dcafbe55d0806f56d2ad92f742839d40d1727765e6fc9f1d045a1a2f0c3469792688667466602c311726fa8637
SSDEEP 192:swa+XiVKyPHvfQj+STNaCtRCulxl2lbs1jcK8fWNeDfPLeyEQ39hzHnyz8XiZc3O:sw1XSKyPPfQ6STNaCtRCulxl2lbs1jcW
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/RegMon/RegMonForm.cs

SHA256 b8d5698923cc68e28a41575827277f26665a7a92e4551db28a10cc63f32e32f8
MD5 b566a644d16d1a8f5567e5511c75ad78
SHA1 1af34c35955d4722589854ba176013f43f6bae4f
SHA512 dab9a505cfddacea26088ac84c1d5cf0f603376968fbc312c24ed528fea316bed467ac025a01031c41d3fc63b6d5b406c52c13419b19e5158b34ec537a6726a5
SSDEEP 96:wj1HO7o4h4Dcz02nXU1yOyLPCgjAuRemeojXWwwr8j3wJ3yZ5Iw3f9gysjX42M7l:wHOKGpzegjAuReJ8VwrcIwOX9ES1fS
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/RegMon/RegMonForm.resx

SHA256 0af841b60e4db771eec1f80a9bcdc0abb3ce4369e80b2e8ad4add745b6a74832
MD5 b69d4107c4f3cad44524aeb9f1839b5e
SHA1 5211650759e4a573c8a77830c2f7323677abbcd7
SHA512 c1228bb1c83e54070f1e33fbde8dad60bdd5b06595228185811ade31889332acea1fc46370b0dfca3f4e4859b47d089b7f01965c5356c806389265119999eef6
SSDEEP 1536:Kj2v6CHf8n4HwJ8Y/wbCk+I68bNAiJuNaAcUmOC:Kj2hHEn4HwO2wbCk+IrNZgNXI
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/RegMon/RegUnitTest.Designer.cs

SHA256 0e86eb18dd8521556186b911b396912f6d4687a92ce483ee4cdc926d0f1064ad
MD5 2256e48f17debd4070d1721c2011b4f7
SHA1 5e8265ecd10a8244c38d811d9a0c8315fed733fd
SHA512 3fc1e1955c4ef0afd134486acbeee34296e8bdb2b180b6c508923faa4b4dc4d05cf8a58688414bbcd3a71ebf72d505057ee297b6fbe9600fa68242d82c49694f
MD5 SHA1 SHA512

Demo_Source_Code/RegMon/RegUnitTest.cs

SHA256 182eacf5221f734695ec156921a19a4b6d1b1f1d1ac00199395351c28edf3e13
MD5 1426cf0774724b7b88709a5dcc33453a
SHA1 405132b30e16ea9256e5f80a8736740cacc0eecf
SHA512 0ce8073741670bce8297fb9cb7d810615230aa05adf41a6b43df61f7b465696885a1634487392283004755d8b578563d20655e6cddf490f6831bf553fad5f4a9
MD5 SHA1 SHA512

Demo_Source_Code/RegMon/RegUnitTest.resx

SHA256 d079c091570d074fa408518c378bb691def027345846e28fbcb139561accf377
MD5 7ecbb706ea22bb1d6de4476811dc18ff
SHA1 f0077c5ac50fd893915d983659f3c03123ebe1ae
SHA512 b47cb970233add81566533b4c01b371fc7ab239c580e0bbc54fb161ced1721cedfdf38b5c6468db29c05f229cddd960de7853bdef3331a08580dbf6ecd07c72b
SSDEEP 768:KjXdskSv6ToY0oGpaO867UocWWMU/rhGOl:Kj2v6EY2aO8h/5MU/rok
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/RegMon/RegistryAccessControlForm.Designer.cs

SHA256 05372d0dd6cea9e4239e4f4aa6c0db0ce1ec4cce2fa4a3694c12331a7b110626
MD5 8edb8dc64984c32fef637fcf53804af2
SHA1 7686d36794c2edc09b6bc26feabb2613727e6cf8
SHA512 c238d405459772a9297d6f68226c178e2c8f64ab517ad98cf4553eb43b19da894c790abdea038181dce6f6d696ece9f2fc5f00db7fb7cbf2f5de1cab7a397a02
SSDEEP 384:Jw1PnSNNZzrMBpzT5zJvKYqGf2HBsDJ3pMNHtLXhvcvhuJN98d4LrRd1kKvZZd6b:21PEEBJT59vKYqNUYFq
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/RegMon/RegistryAccessControlForm.cs

SHA256 3aa273259fbf6cd6b85a5bec404ca958b50627aa06e0f5cc7c5f5baa763a43a7
MD5 96af787be747f8e06cfacaab4cca3d10
SHA1 1e9cdd33460c32faceb09548c6b91e00e8fad68e
SHA512 1fe810d10e14dfa9a7cd85b23e89ad11225e72005c38e049a54511dff1c590faf2cea3a5a0b3e6bdcf86e1ce2d124a0ee973726060412b443c0ae037e0280b26
SSDEEP 192:wHOKGp6gVIEaBM0v3sM5FtNFphk5QT6hA7/zJtKqEEG2o6up5mnN:bKG2tx6grJcqEq
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/RegMon/RegistryAccessControlForm.resx

SHA256 4363cd7d5b8671c72442ce1a1bfc10d64ebd24b2d718b54bd4fcd025e4967298
MD5 4eb5913a0e5aa842250f7419538fa230
SHA1 31fb76e5d9babe97a11fea041081f96ce426107a
SHA512 846207f9db4c05d2070482c27af72c50b8f423ac1c7efb5266b059f6a41362704e9f5a590e428f4aefd791edd2e21c1b34473361911cbeea2cfcaf741b5bebff
SSDEEP 96:fijrkiK5k5LPXbac9m5Lv6FzSvd4gIRjETUT2+0qSdvabvDBwbjBu3FqvuFZ:KjrbLPD9sLvIzSvKgIqUyahFZ
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/RegMon/RegistryHandler.cs

SHA256 7da98ba660cc0088f8b322d9cbc9c76c2cce839a9bd7a51a02de063659131a56
MD5 c2ad8b03387a113be11617c3ca52d8bc
SHA1 69257fc54c4dbdcb1a39bae7d1460dc21c4a9f5c
SHA512 6a8efca3a1b7fe787add8be6abb4bf87373fd3903a577819edaab953e9a0fac7a5acaa8cb0ab3ec6c5b2531048dc12e2ef36c7a7a20c76d56d1cf042c31ad775
SSDEEP 384:gOf/6BnCjlQLk7m52WeO/p2sfTy+sfWiyBQaOiApanAsV8BYjiY0D1B8t+n7EAda:h6ljXe09
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/RegMon/RegistryUnitTest.cs

SHA256 5b623ba1d0f45693bce8e062066d675758b5c1d34b54cd4fa00602491d5e1afe
MD5 07b65adeaf85cbee7d9e29975c1273b5
SHA1 b59feda922562d8b5bc6825e7e33fa6df45857c0
SHA512 cf9bf10cb3fe74b6c8316bd52a6f1870e16c69a5d125dd66f617de3f9e4e35f324ee561eb43f27d9db0b625fa96166b53308de9a2c9d78741884624406ca3ab4
SSDEEP 384:gPKglYjiKsfTy+sfWiyZEkLC8aUBLWoCMV:Vs
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/RegMon/app.config

SHA256 50c9c9f3cc99f39697cf537ff09c98f42f023c474cc12fe1deba11894cf52c07
MD5 e0d80706c31ea90fd5d09fcb3b2d49f9
SHA1 729ccdce546366ca702862cd957e91025537f3cd
SHA512 bf5a8e88f2554572157d044e0d9811bf8a6699e9cfce60d53d0df1b1fe5db8b9cddd56ed64b8dc38e0ab535122a57fee99359ec1407d4878133f66eea7201c4e
MD5 SHA1 SHA512

Demo_Source_Code/RegMon/app.manifest

SHA256 1285aaf1f15f5a70c0e6cec6cca29349e8923619faef68b2318e24e3bf079ff2
MD5 434e9a26d52e544ee4a8204f042a2bae
SHA1 95e1fcaa8c2eb02dd777e794bbfd5cf248fd49ad
SHA512 fcc5c39c095370fbf3380b93e5e86b0ccde362f9232a3661006e1a8efc34f57bb620769ed6f5fc3c01b36d43b70e8e420356201012bb4552b8a4ce61e26a4d04
MD5 SHA1 SHA512

Demo_Source_Code/RegMon/registry-icon.ico

SHA256 23c93a575e46779b9f2644305f9140dc71af75d19c4a89065dbc91ebe31271b6
MD5 770338bf685a8e380c06b1d7f0c45853
SHA1 fc3a9d40b6bf7d2510cbb72f8cd48003078821d9
SHA512 1a45d63daa221778d0803452574530ea22a9e9869f21fafa729e4f09d7a140d9455e15b6aa002f6e198fdb02e6b029f37638c0326f35032c91ce862b27977be8
SSDEEP 48:d7VKnlU7M1PhS9MK8Vk0p7CbV5nm35+oeilvKo3ZrK+FBGfhz9CHDdH:dhKlUw1xKKhpe65lv57nGfJwd
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/SecureSandbox/AuthorizedProcessForm.Designer.cs

SHA256 ca2af18e4894b9c909d2c90b74ce486f3bd680d557d64dbd09130b63f6d13570
MD5 b71f539623f8c585cc13515d1f37defc
SHA1 a5bfe3a871941dbccdfa0f60ce02384f767abdef
SHA512 d5519b6061a12774c3e9930a081e3c96f9c1d24a36728a148179677eb2556e751284b4b877a7bfc459ba2ee99a39e28e39fbb9d2f55b5cee873c3571f05e52c0
SSDEEP 384:Tw1XS59jSnBGzhDMyODRcFprE+HopYBn7d1aeGIBHlR2xHANQnfapH4bxj5dVkWr:E1UpVjEFc+
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/SecureSandbox/AuthorizedProcessForm.cs

SHA256 a8957d5b304c618a5cb748853eff13305bf716228b925e3d5777937a136a194d
MD5 a2427605abd177cc5170581787247c91
SHA1 40e5dff4a9906ccb1f3eaa1cf8c109774b4989b2
SHA512 7b1707f9514575d53b0645780227af04c948080b03948ab6a41fc9a4795bc8f8d801d03be9aab1161d0330fea758c60f7fb054c48b49debe1fbd245468a26189
SSDEEP 192:wHOKGpC++HNo1V2t/o1LO216oxz71f/xh4xgphxUVvcLftBlxpzDoqbueo2oqI5s:bKGQXaxhFphxUSLf9Pb7kCHWVHVCf6pM
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/SecureSandbox/AuthorizedProcessForm.resx

SHA256 c2a7b5f541d2e96b887b51e1cd5f3e6502442b01fcafd1a98052bbaac44405dd
MD5 7753606e35b5f2f4b98a814975ca2105
SHA1 0abfd72514fb0d3ddbd809e4fa4a22678e4d82c5
SHA512 29b97ac354dc91f808ea3ea1e5249c6a8905876953b238e3c1c091d48723053a1f4b4f4ba2c1b6746d342aa33a1522d6d88e424b3bd25aa87840d319e5631345
SSDEEP 3072:Kj2gtGxWFxpi+zneB9NG+eVNVXVXV6ovxC9M8yOKhNqqqqNqqqqNbqqU:KhtGxWFxp+B9NG+eVNVXVXV6ovxOM8yM
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/SecureSandbox/EncryptEventHandler.cs

SHA256 a1cbba7f12934c4ed8b87c4633bc869d63d365a32af75cbdd60f81d8d54497c0
MD5 2ffa45d8a17bc8bfa3da86349c0b809d
SHA1 f5b368bb27f77b5330e69adca9cd8eab09758733
SHA512 80b1b65fe42dd0454415e2c6d693dfbe88332d1981cbb4b5c73f2e36bafbef73b420c8efaefa9f0d6f498f4f009427a220c135ed56d4836281d6c3d602e1139f
MD5 SHA1 SHA512

Demo_Source_Code/SecureSandbox/Info.png

SHA256 2f25dc302afe8949e97bc1321b1673622f608d72f013587822178185a05277a0
MD5 e08350eb6837eb0c7ae292da91714ef1
SHA1 8caa199ba28ada6c4ac63fa48dd2d4c63a8a041d
SHA512 9691d3d86bcadf0c2499bffe70e8b0a4dabc11f0148488298020024449381aea0aa07b87bd3fe7e28907ebe94a9974f24f456ec47f06f9f406d750acb25850ff
MD5 SHA1 SHA512

Demo_Source_Code/SecureSandbox/ProcessFileAccessRights.Designer.cs

SHA256 65355caa9667da5bd84f8baebde06968e227b111692e919f8d7fd21b010fe66f
MD5 4df555806d4c61c61158bd809fb146b8
SHA1 d71d80af19064b49a979c0d449a415215824478e
SHA512 abfcdc60520129e21db419b3ec9b7c9eecfefa0bf1933aced464efafe06453e88b9e82cf2226343e5295e5a7b8b0ffd314605eaf0b4d9eeeee5ca9703839643e
SSDEEP 384:Aw1XSTLNH4kwBXFx6AwLY/bnYMaDNEbxh7f1adlzVHs4txoHUEJo47trEwEDv:n1/ZtaK8
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/SecureSandbox/ProcessFileAccessRights.cs

SHA256 015f34c78bb5a0b4424aaa35304376524c0ed7cbd99636181ce93387f3e48365
MD5 fc428b352d9c5bca64554521f40d549d
SHA1 f4e880d84bb42099e2b1b9948828e09a20933413
SHA512 93da238f7d57e8b370ea523af97a7c84f92532c01ada2475856cd17c8dcb421b9af0446b4b9cd6eb2dcddb8de8bd6f0034cf1a5ef66761a1d05efcaf5a9b8a9f
SSDEEP 192:9KGphicmAB8IzkBY1HlfYhxUORz2Bkpz781vqBNdwbKfjUll1L:9KGLZlfYhxUE3xdwbKo
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/SecureSandbox/ProcessFileAccessRights.resx

SHA256 2d4d3b53dba8ad585ca9c2f9fa1ebf78d2edfd46aad13c668a0d0cfdee0e1b21
MD5 d3b4fc21b6ec3efcb5d9a18206005b1f
SHA1 1a692d7c7e827894efe4d704fe41cebb5c35ce4d
SHA512 50f76216f72eda2a0ebdf39f4040dd10a9565334d1679fb8154281867f779e99f69e8b12822d74f1374055a8839cd6ba86cfe62c4350dc02221fe0c426c0ed0d
SSDEEP 3072:Kj2WGxWFxpi+zneB9NG+eVNVXVXV6ovxC9M8yOKhNqqqqNqqqqNbqqU:KXGxWFxp+B9NG+eVNVXVXV6ovxOM8yOT
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/SecureSandbox/Program.cs

SHA256 3bf61e0127a3d3dbaec45483133e5f338165598b61b684a9acd74e264878cb4e
MD5 1910358b910326df42c782f2e3b84bce
SHA1 3f88da6fcb749d1937ba04b7034f252c4ca3723f
SHA512 b949bb7962968b2ec6c0d4d0f458e7171c55d4989ed8ff359019719c21549ea4bfbab8084784422a86a92d17e93af26691f1ec7ee46cbba7d20b33cc40deac53
MD5 SHA1 SHA512

Demo_Source_Code/SecureSandbox/Properties/AssemblyInfo.cs

SHA256 c889dde5086481541a7ae2133539ef5bd8d1651a3dca884f04d5f9856378b736
MD5 010192830a9f42cd69023322e8b1fd7c
SHA1 d105505ca0f8fafb6a72331b31ef8be8df34f061
SHA512 c35d9bffc9d08fb9a2850411345876d355c44f5dde9b7d31a06d6c92d5313372fcf34b041218af5ad123f49e848bd67ccdc722e34286ef2155c8f675d63a5d59
MD5 SHA1 SHA512

Demo_Source_Code/SecureSandbox/Properties/Resources.Designer.cs

SHA256 3688052bb4c355ad57e75cce20e6d0012d17766c4460bbfa1ffd9d75d8c34ac0
MD5 84d62dc4c6ec5e598706f267fa145356
SHA1 26b9d3829524936e4c049562856a1069c85a8a65
SHA512 7084c3038c9a002c804a2c76235155a7a6a423c7ba1e4ba1e4de1ca174906fe2e5a9b284c67dc62b6c805956182e75f511641c3f62571f876e7ee68b7321e7a9
MD5 SHA1 SHA512

Demo_Source_Code/SecureSandbox/Properties/Resources.resx

SHA256 902a1e3a041679422357b1c7266f397560ef0dabd1fa904bb4fefa33b1aa11df
MD5 8b1dc23ce4d881bf415600c212a41cca
SHA1 2d5d2c6b5792801a8253488e34d1ceb08f496274
SHA512 de930e88298172d226359f862dd0ee578d1763dcd444867ea1bd3543f4d6215ca455904931c768d8c3f58086cfc7cc4ba9f59c9055355aea8f5d55d71d01926b
SSDEEP 192:KjrbLPD9sLvIzSvKgIqUyahF8yokwCAokwCl:KjrbLPxsLvASvKgwyahF8yokwCAokwCl
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/SecureSandbox/Properties/Settings.Designer.cs

SHA256 7fffcf18cad33194200773651c056fe1b1f49c6c74eb98cb0b7e4c6439346b16
MD5 cf33e0f80f294567d9255182a25f8d30
SHA1 a747762bb5d3fa4970c4ede8963190fd467b7508
SHA512 aa859ad3f3acb7ae4fe14be1b486fb58f0cb804634d5b0c9ffba4b6be49cdae2ff4a09f2e72b4b7a73c07b1dd2340f1f8146883da17856818a8ac3b2a4154a93
MD5 SHA1 SHA512

Demo_Source_Code/SecureSandbox/Properties/Settings.settings

SHA256 f6a4290723520caddd934b8800319c7ca6cc7eeab647059ec89b7a13b1513265
MD5 8c0f00d7d9b0046695a0255f1b11b061
SHA1 5e1d04de66ffcc5dfd813530ab6992e6daaae417
SHA512 a95c07dc3241b7c9f37b7f0a5c143c9c133c3bcbfa16e4a689cf47f45b3e9d0ccf5c965143a6848237e7a9fa8deecb89837dc12b12fabd8231fe94f3ccba26aa
MD5 SHA1 SHA512

Demo_Source_Code/SecureSandbox/SecureSandbox.Designer.cs

SHA256 2771530554868556fe227338d405f21bede558088d2cffa25769c64d0c05743d
MD5 f56ca807ccf9462e8f25bca908a500d5
SHA1 ed4eadae93d44c9b7400681a68875b3a234b3a4c
SHA512 dfc5d22710833a84f3d49cbeacc4a88cd58adf21fd1d25fb528e0f2cb1ba3b74abfb8f0f191bc91eea1601a6c8a31a5a01daedda579792763d48e7dea48fbe59
SSDEEP 384:qw1XS3DOP18mwYiQfMOSTNHgtRv3aP1FnVwaZe94pIEAC9P6c3dd7OPs06/xJolU:l1xnn7cdIJQ
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/SecureSandbox/SecureSandbox.cs

SHA256 1618eda73ce64377e9cf1505b070b550e4e1694c7b4f4389e1edfeee32f9e74b
MD5 1b4216516ec58449aa92ae500e070a94
SHA1 51d000534961aa4f9a1008c65065f1af6a4732aa
SHA512 de7ed5ee4c49c0704800110c05f6a177bb9481fe0846a2e147c7cd14f31f7075be964fd02a3c7872ea424d0de7112192b3191c84daafd4db12c71b6a7f223861
SSDEEP 768:3npC04BP1ljYyK8BnrhVuByF0lAOAwa61xp:37aNsByFwAOAnc
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/SecureSandbox/SecureSandbox.csproj

SHA256 2d1a556eb745847100c499b73117ee6f63fa6ef5b5c12f8d929a1302caf3586b
MD5 b0182a97672688a111de68a0524fa342
SHA1 a802a330217f18924a1e7a3a08321ba6d3ba6bf3
SHA512 bb0e1c06e7383bc8fd7c46bbbbd0430df68e1a3c12bd60779363a24fc9349f1b5faeeb6d95e767c225f6dce070e606450b356e2ff0a9287602cad609b35261e8
SSDEEP 96:yl5x8913ZOTpV+00qkmxfJqs6Uxqc6UxVtEZK5vBCHMOdsHStoKXc4L+U:Kx8L3UTpV6qXquFworU
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/SecureSandbox/SecureSandbox.ico

SHA256 4fd930db4fd9dbb39f9ecc953c82dc32211e522166203e74079cd6b9b0c8eedb
MD5 5b4f070e5a010becebbb92cc1d24798d
SHA1 8d317626287f7bc269c1f95d310886338a7f75b0
SHA512 39df228cf304b9ad2d4a4c1cad066ccec7a10d14a1e31f252a85ae5d23cd17a1ad4b3a68b257dcefacf2bf3fb553a09b8956224ee172318431e210b9baa4ddf2
SSDEEP 1536:+LHMbvvvvv/vvvvv/vvvvv/vvvvvhfffPvvv4XXX8ZZLZZLZZLZZRPPPXaaDaaDZ:aHMyXXXaPPPnvvvFH6DHbPADP9
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/SecureSandbox/SecureSandbox.resx

SHA256 b120a0f9fd9e1b6ae2619af9eae9ea26265efa9a3f372ca57f4c0a8eb5baff99
MD5 e71e38c230fbff7641f3a0ad6b2b4645
SHA1 31ca596f3c814bd9c77847bce8049e8d1a5a91dc
SHA512 32c17ad0bda88b44604edd672248810b633efb47e825c1e58b1ba9a2dd70c858dc1b3639139c13d9f20f7169039ebe2aa822db7ab8254af1860f3e1aa63d6b50
SSDEEP 3072:Kj2nigSUGxWFxpi+zneB9NG+eVNVXVXV6ovxC9M8yOKhNqqqqNqqqqNbqqU:KOigSUGxWFxp+B9NG+eVNVXVXV6ovxOp
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/SecureSandbox/TrayForm.Designer.cs

SHA256 d2d474651adac1dcbe9df9bc3c125bbcc3c2fb69ca7f6357b68dd3892f7477fb
MD5 af5c7ec42818e4982b4b6f31be274846
SHA1 43501215518859512f4933e9e20a260a8873aa4e
SHA512 8e0f2a3d35721c032cdeb3d348c0ce30c96ef7040136b7c7770e37d2d6e684d383d26519da76f0abfd0754aa8f2f0941fb3596db4bf0efb40a6b44be528204a9
SSDEEP 96:6h2atwZ9c6iVjicdNDeyB4bdyz11aAFRP:6wa+zc6iV3dNDeU4bdyzTL
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/SecureSandbox/TrayForm.cs

SHA256 1a40fb2815818b38df11f7a50132f73db551ec598bcd409b572b8fc6894a5636
MD5 4d8f554137331c7f1da6040f43bcf26b
SHA1 13ac57ed216263d8f3f899cdd19186a70e485e76
SHA512 94d326037c50821980e7cb191a56ec820b4e26b6a0bf701087634382c38510396d8552324f22b6ec25f2dd498cacb395e484daeb6b367c9e08aae6bd65b1508b
MD5 SHA1 SHA512

Demo_Source_Code/SecureSandbox/TrayForm.resx

SHA256 522381782cc07b9fc25c4b7ae5b66c81232637ce8d09b92785a89b24d4c88cb0
MD5 39ed17f0611c5383998462fe80d9537c
SHA1 1f08789c1eec892e92661a2d900d96e12c711ec2
SHA512 d2e803c8987007790a015168ca5cfd877af45292f871aca17c940c6f2f0c274e407234f2461728b79b7fcd63d8460ddcbaf587940996126deceb41c166a0851a
SSDEEP 3072:Kj2NGxWFxpi+zneB9NG+eVNVXVXV6ovxC9M8yOKhNqqqqNqqqqNbqqU:KgGxWFxp+B9NG+eVNVXVXV6ovxOM8yOT
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/SecureSandbox/about.png

SHA256 96acb3a8a203e91dd6243941af3df0fd62d8a62b2ea5bb4b5078dea5e80a63b9
MD5 cd7b67afc587992e0c86a85d8c2537d4
SHA1 b871af0c18f4404dff26aa781f72c1351e89e566
SHA512 8bc5242cdac4f6ff5cc5eb9cac29971d0d6f0705f1963e549c354796d0195f49faeb721a93700896d2c8e5f3a0a2ac006ab706e2e1f3e96bc9acc3da3b2c7637
MD5 SHA1 SHA512

Demo_Source_Code/SecureSandbox/app.config

SHA256 50c9c9f3cc99f39697cf537ff09c98f42f023c474cc12fe1deba11894cf52c07
MD5 e0d80706c31ea90fd5d09fcb3b2d49f9
SHA1 729ccdce546366ca702862cd957e91025537f3cd
SHA512 bf5a8e88f2554572157d044e0d9811bf8a6699e9cfce60d53d0df1b1fe5db8b9cddd56ed64b8dc38e0ab535122a57fee99359ec1407d4878133f66eea7201c4e
MD5 SHA1 SHA512

Demo_Source_Code/SecureSandbox/app.manifest

SHA256 1285aaf1f15f5a70c0e6cec6cca29349e8923619faef68b2318e24e3bf079ff2
MD5 434e9a26d52e544ee4a8204f042a2bae
SHA1 95e1fcaa8c2eb02dd777e794bbfd5cf248fd49ad
SHA512 fcc5c39c095370fbf3380b93e5e86b0ccde362f9232a3661006e1a8efc34f57bb620769ed6f5fc3c01b36d43b70e8e420356201012bb4552b8a4ce61e26a4d04
MD5 SHA1 SHA512

Demo_Source_Code/SecureShare/ConsoleForm.Designer.cs

SHA256 50513f3eb76b353115aabd708f04687391933c2cb5b1be672a02afd46ad084c0
MD5 ea9e2e3f19839ad58cb86a7fcda42da4
SHA1 39412660f597ed761458bce6412b2242a436a156
SHA512 d7e434874971ae414e1adf524e22cb5f03123c8cca23e6de0d267ebdbaf63545fed081b676c390971e0eab4c6136109628e8b9c971f32bf2c934226b9bd5e060
SSDEEP 192:fwa+XiVqq8P8fWNe7TTZ95Juf0bSTNHgtRv8lxbklEeCBuyz0Xi2GTgckX:fw1XSqq8P8fWNe7TTZ95Af0bSTNHgtRH
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/SecureShare/ConsoleForm.cs

SHA256 ae067e4e306cb5325521c4609abf95b5989bb6b90639b4c656d67081d434f90d
MD5 5a91e070f4082cc9b4afbdd6d9368da6
SHA1 d94d7e68bfdbda1d17241b1ab0e84850e0824b71
SHA512 db2f48a16405dc1d1b7a1800ec5e93da84b659b61d44f1e74382ef78215ae5faf1934e1d6144789aee280cdb3bdba93f09a4717a15b7bc8875c84870188f7a86
SSDEEP 192:wHOKGp9HgjD5eJ8C5t7v1eBWGZD81/eW4ESQgidFBDiSD:bKGbAjD5K8C5tJjGZuf4agbi
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/SecureShare/ConsoleForm.resx

SHA256 e38b34262e8d908534b455f15f2c0a35376ee284313c34eecd9b4a3963b1d259
MD5 9184fda152e48a88364495302bc69a6b
SHA1 bdd3ddf36c00f92e6aef22742f51fbef185b759a
SHA512 a22c6237345530c7e7f859e14b48c77db6e903844478d259a932dfac9ac0ce3dbea2b6513e465bebfb7e3bac143f79b1307227c04f15b37c71103964cf39f945
SSDEEP 1536:Kj2v6gVA7T8rYXpwo1txthLZ8vFKxhV5czOl1I9YE3ngeQ:Kj2dV4YrYXFhtfCFKxhVFgYE3DQ
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/SecureShare/CreateShareEncryptedFileForm.Designer.cs

SHA256 32d905aecbc7dd9f08e246c0e37ebed991b9ed72af3b86dd91166873478ba287
MD5 49a80dd96317015dc9adc94670a7c5ed
SHA1 876825e3379b80dcacb46664b47a83f2ea097983
SHA512 a1a4fe763030cabe9566ca77e9dd2fefe18dee3e310bdf5c2311449ca150730c8c18f762fde381c1a8e85cb47879d5b3218c98ac1fde641bedbfda648ca4bb26
SSDEEP 384:ww1XShaBILfZRL6vfPX4s0SPGdcF1TNZ1LonSX4+2hwj9/jwJHcC8YdUBOQN8OEP:31XPZS
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/SecureShare/CreateShareEncryptedFileForm.cs

SHA256 62588877d74e22d11859700ffda1f5cb21023e48edc0b43f6ed9cb58c40f92fb
MD5 450b55c734faff075609a3835cc83edf
SHA1 50908b550224ffaa783844dd80fb529d5c995ef2
SHA512 90bf16d9389ddca46689ab130f309e232d9ac8591ec2110754580727fa2039ed462e35c12da2c8f664bf2cbdc0befc2711584b4ec2e9c8e83bc872fa7310d92b
SSDEEP 96:ko4h4Dcz02nXoxWqb8JvARzIavRz/J8PKsUFKl5wuYYm80ebA6AHpF:6KGpYoqbJRz9RzWP0FDuYYmDebAlP
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/SecureShare/CreateShareEncryptedFileForm.resx

SHA256 61d713b0cd161a08973b1dd2173ac9bec51fea7b6b9639c997a49e16e8b9afcf
MD5 1d9e2bfa9b59ec3bdd2bfc7aabad6c08
SHA1 8ca37cbec9257b15556e712ff24cf539e3509038
SHA512 b55b22d85174485527a917cb59ce113a7555523a86c04fde5f2b5b990e4646e64cad7948dc8086d017f7e2bf2c2bef7a4e30c79608a14015c26cb6a12aa5abb5
SSDEEP 768:KjXdskSv6tx2sR+oS1CMRDYE3/BVVQJA0e99txdlk1JTt5ESpDn/fvCGl:Kj2v6+GBwJqA0s9Jl4j3n
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/SecureShare/DRServer.cs

SHA256 45937f7a007243015b69048301476b4d4485f8859395c5113127f6f2ace8ab44
MD5 d2da5384d29301958bfaa844b60b6cac
SHA1 cd87114840bcf1876526ed86a89cd45f5b7dccdd
SHA512 a51ab9fabef701d750e10282fd3427062815760525858f09f7c1dd6baaa5ddefbe9d7708d4e92be8c653b143c687b818746ad295d9c1c3c4967e1b34114c55e1
SSDEEP 192:wHOsIpfFHyVP5O1OYsY45eBQbNRUCzVn1Eua2U4XvPTBD:bsIpfFH8O1OSggm1EuBU2vP9D
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/SecureShare/EncryptEventHandler.cs

SHA256 e3ca7747ff87df0dd4bdcca4cfb24c3d41578b71b151e3758eb286142e1dade4
MD5 16ac034f3932ebb81822bcc2624fa6eb
SHA1 912e340b56343fd67d9cabf036275999dbe194c5
SHA512 7aaf4fc70c2505b7ec262a05f65e643472731fc80119ef20aa3aac60a334c47a836d000bc86a0e7c5de5c072d20df72d346d0cbd1348bdb5a47b8258408ee773
SSDEEP 96:wj1HO7o4h4Dcz0Xy16UV0yNx647qV9TrbtZRpvLhm0W53W1oIbQOlaILHtzWrzPj:wHOKGxNNxr7ynTYB5GhbBzYzchO
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/SecureShare/Program.cs

SHA256 01ac569a08edf77a2ccb4425cda69f81fac0ab68706c153b6d605aea9809dc6f
MD5 1bbac920fd7c7fb0f2e02fb5263e6d01
SHA1 3019ed77067a4e73f0b85bb41f6437f4d2d277e2
SHA512 d7e675e6d643c559637e8cccf7b116ca61261e4f27869d5748720c1b3ff1dc1cc50d5fa9ca42b8e2177e79dac83f9a0f6f3b2e41f752d9be14a91d63f13ab952
MD5 SHA1 SHA512

Demo_Source_Code/SecureShare/Properties/AssemblyInfo.cs

SHA256 468d8f9bcdd280a196e2234ef2bc07e1f567f5b2c9cbf4db64140404fc99d0a2
MD5 b73e19f262d908f1a82d7bd14275a7bb
SHA1 09f0321597a73512f49c54d57c699ef377d27a4f
SHA512 c3597628ccda884bc4b643f306b99db3701225443bbfaf78085b17c871b7c150f6f67a818062ebac03a664e82b94d2d4c16f8b45e96a37cefe017270e17f4e99
MD5 SHA1 SHA512

Demo_Source_Code/SecureShare/Properties/Resources.Designer.cs

SHA256 7444fd170811352b42ec738e86802de72f70cc788a86458571f2ecc28cb29a3d
MD5 12a8b8fbe625b0e8c3d0541dc2e5c5a2
SHA1 b7061319cab3ceb05148aa506785467dd7f40aac
SHA512 c9b9b20d3d60cc65123a71935517d4c861f629d72623c8d67640440eebd0d79948ce61165f5f1793b103b3be8af5d51cbfc1202aa4ce57aa9c72131473c47acb
MD5 SHA1 SHA512

Demo_Source_Code/SecureShare/Properties/Resources.resx

SHA256 66b5ebd1b0fc73f041ba669ce2184f6f471d5e3524efa34ca31233e9f5395262
MD5 0cd8c971317d19bbed44757809bcb92b
SHA1 47b15748ecc8e952c5935170090db7c269ce4b4f
SHA512 883dba84bf7daae3ea49f9d54c13dda4f125da82ba63f90eeba0900602896ad9492a0adf7b69b67d838034090af20926af5c2934797afaadb38aa069786c1fc6
SSDEEP 96:fijrkiK5k5LPXbac9m5Lv6FzSvd4gIRjETUT200qSdvabvDIwQBugqvA:KjrbLPD9sLvIzSvKgIqUEa2
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/SecureShare/Properties/Settings.Designer.cs

SHA256 09742324f05ed1802bdf7f146c9c0e725c47e8439d09bf98958129cb139fe926
MD5 2103405acc5845b208d0e794a570ed7e
SHA1 6124ede1975c9c69eaa1ec90186fb21680748ea4
SHA512 f719c1519835675c26fca1185bd055ab205ebc02f540eeb182abaf261c3777c9865cdf5b1055b6c1b0818f586037a03d0030643c137119638733d43b1206f0b9
MD5 SHA1 SHA512

Demo_Source_Code/SecureShare/Properties/Settings.settings

SHA256 f6a4290723520caddd934b8800319c7ca6cc7eeab647059ec89b7a13b1513265
MD5 8c0f00d7d9b0046695a0255f1b11b061
SHA1 5e1d04de66ffcc5dfd813530ab6992e6daaae417
SHA512 a95c07dc3241b7c9f37b7f0a5c143c9c133c3bcbfa16e4a689cf47f45b3e9d0ccf5c965143a6848237e7a9fa8deecb89837dc12b12fabd8231fe94f3ccba26aa
MD5 SHA1 SHA512

Demo_Source_Code/SecureShare/SecureForm.Designer.cs

SHA256 5ba7c4353ca0e4f656ad03e37f73788462b87ed59c0c36f7a2fce1ff6af2468c
MD5 df17aa55d130239c50e6ac1550cb49f4
SHA1 25d49c92b7837cdc2fc286a7fe1124d713debb34
SHA512 1c873bc198464b8f88625c018f2634ad5c7f9a80fa0f78eac7a8f5ec22d3a1bed5c1dd58b5007da8210688b15b804b12697a480751aa84b4d80430f95da9a928
MD5 SHA1 SHA512

Demo_Source_Code/SecureShare/SecureForm.cs

SHA256 6436331109455d240e6e5d76b214f1d2798d1245b115fabb5d2121307e0e3339
MD5 5db6d0d053087d20530575aaa739390b
SHA1 20b0363324692aa619d531d8428c85bcb801fbc4
SHA512 3bcce4a3bf0e055bb7e34e03cb37793e5cb0578a610157bae74c4c14b0698456c1beae3a436d398ef13f6f7839404b16a137fa62dab44ee3e9ff9b7527b69a15
MD5 SHA1 SHA512

Demo_Source_Code/SecureShare/SecureForm.resx

SHA256 6f62b4196a26fb76757712a8471010f01cec6080aa3f59effd19a1a274d55d2e
MD5 c98e0834fbc89a0e61b10f035ed2132a
SHA1 b74f5d10a8f8412bcb89c007bdb018b90e5d773a
SHA512 027629a9d0f8fcdf56fff0613bc1e47523117d93358fae4c19ebe1bb03aa5fced635ffd20c125e3f099adadce4d01ed8de63254121a3afc356cc986fa7f7407d
SSDEEP 384:KjrbLPxsLvASvKgwyahFUgwUHYMaOWXBwSoVm2gbTHYda3TXBe9l92XHUHYea9QH:KjXdskSv6IQoBoVTgbM61e9l0XHr1mcU
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/SecureShare/SecureShare.csproj

SHA256 68157c93591982375d9dbf818243be4e01cfd60aeb278e51e8d0f0b2d7298640
MD5 02a87cf3401f0bcfd5220838fada080e
SHA1 87e865663880bbbf99416779a7d0dd46f52935bc
SHA512 8d0c2e1f321e81782ae76591087bb0ec1287808b53f9d36bf2475bde1a9eaf9ef4910109c1d4a5ef796fdf895d5af4df19b3e572838b9165f3393fa83a97224b
SSDEEP 96:yl5x8PeBrZOTpV+00qkm0qk8jWxEDoWxEtEZK5vkiBCHMOdsHSxUOz1Fb/rB8FZj:Kx8orUTpV6qMq+JEhz12QU
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/SecureShare/SecureShare.csproj.user

SHA256 435bfabbdc85fc22c8f634b1c7224c78ce54bfefafe98190947222876d07455d
MD5 5e89b9f3ba2fd73ae165ab8b109256fb
SHA1 d585886f8ec838250c2b6a438512fe305680a93d
SHA512 6df99eac26614e37a53f39451ce5b7f56bc49528b664ec979d1175b88b7b13ba545e01f60825301ff6a79786629d6b2009113c13bcc72e65e8567b2ab6f46f6c
MD5 SHA1 SHA512

Demo_Source_Code/SecureShare/SecureShareManager.ico

SHA256 8c362ea3b7420e50f73957ba970a8ca5125ec68dd4fb6d0e16baa3e2fe54d7f2
MD5 b0ede78910aa40e4e044625bb2cec801
SHA1 cf1808f40e7338dea031654655725c7b750cccdc
SHA512 7a268be88cae460ddfa16ab44b7d0113b10ecc5d5864de6dbd9dd0add48e0255f5ae8b9dc159e84a8f535f87359e0af122ba45e2d37f50d7b22e8c03362a209f
SSDEEP 768:PLrcgrcHRiv86LfCSHUkGLh+lK382fs8Au6L58zUL:jrdrQS8YVULh+0ffEu6LmUL
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/SecureShare/Service References/ServiceReference1/Reference.cs

SHA256 33cda90ce2bd2aa8ba5c52fbec8945a5f2fd57d800a9345975cacffdda244ded
MD5 6f87b1b64e76b35e1ff391af2922d628
SHA1 36960b56d71221f8b515faf931a39e0446eb82e8
SHA512 c5c163911c304eb8e66020776d7ecb5adb4b4d20c220ad0e5775f4fad39249e97d7838fbe195b2b3e9a557a36e23c05de0aec110ff1f6efbe0a9828e0dcfa872
SSDEEP 768:mImEoymGUv0uJUxtzrypZ6SDUc4MQw6+We2ZYADi6se+5y5jOVO:1
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/SecureShare/Service References/ServiceReference1/Reference.svcmap

SHA256 6b30828add87d0770ae8d771fd1c057c906f77b0c8b98f1ddc907606bee05172
MD5 9288e694b19b5d7b05d083dc17290c23
SHA1 c55ba5138c0a27ec3ff9868610369e039ae172f5
SHA512 40ebeba42801ed513be83af53bf68c489d17d4cd895b96d28081d9b8f13dd73a0b7e1d641d237fa59434756fffa58d653da17159c940fc3f788d053179168d85
MD5 SHA1 SHA512

Demo_Source_Code/SecureShare/Service References/ServiceReference1/configuration.svcinfo

SHA256 6f89b5cdfa1139f16f5821360ef06469287047e22ac7f13ccc418bd74d9ca364
MD5 2226981396c1d35e3f495dc6b8dd1b03
SHA1 7225d0c385cc48a2559bff4b7fb22cae7a489521
SHA512 a1a31a93720a5f9f8cf59ae10950705c676088be483b009ebc0bf4a5b27f1a8fa60df3efec62d72e426cfa7882f73993e9cf24feef15c52c1df75df7a315ff10
MD5 SHA1 SHA512

Demo_Source_Code/SecureShare/Service References/ServiceReference1/configuration91.svcinfo

SHA256 64c9bd215136412afd92c925b4f8208702dc4fb68813544ddcc9e6bfd4631f0a
MD5 78b4d862b9bb4c0e32dd99bb2ca90bf1
SHA1 198956e24c439bc2777857fa22758bebb82ec9c1
SHA512 76d9efd2f2ad2c0f1896b108477c681dbbe00db18224728ca6455474c1e525bdda4b91a1c9b842fb7ea18fa3c0df0f8811193182466051a22b3a88fe8fbfacef
SSDEEP 384:Q6nkNnDspfp2UxM+sFSMAyFf2hl7eWnI3qJFq0mgRryBJ1YBe7y/fAu/5QMGuoA0:tOUxy
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/SecureShare/Service References/ServiceReference1/webapi.disco

SHA256 d9be3773477a159d63b37fb3b7dffa41df4c8b19b6b95cae873a3e044622a1e4
MD5 9a12512f6b6c7d917687ab1c8adbc191
SHA1 3884d3fd4072edb31da81f74cec88a6f5ad2a6a6
SHA512 c4884aa920c4fc62ea651a809dd491df1e07530edbcc61ef4291c2e14f706fab04cf0eed2385997fc49fdd3768930795cac784698eaf619c793f308510315a43
MD5 SHA1 SHA512

Demo_Source_Code/SecureShare/Service References/ServiceReference1/webapi.wsdl

SHA256 80c17fad3b529f23e6e99319619a39dbb31daf15222b8b911cc591c5860f440f
MD5 b9f74a736438495140c4e82fbd547dfc
SHA1 774a03ac90ddd4fc2c172c30d4db7dbf57673672
SHA512 e42e206ddc14999c80747aaf07448af6079761ecca4862dfc715ee54d679df3959726bf3d9332c57321fe7d0469bfb686a4fef9135518949343e8278234f5850
SSDEEP 192:vhqJhXsJEn90cEDxM1m/j5GpGoYAwKAGwjMk4k/dF/nlztKmj:vhqJhXqv/9K2ghYhj
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/SecureShare/ShareFileForm.Designer.cs

SHA256 eb0b219932e82052c46c39cf0728ea286c63f7efe31df9ecdf64f77f6a2a52b6
MD5 a8f05a36513dba52b7c9ae7e8839c424
SHA1 1c052109a5fcfc9c3136a0cb5a2c6cd53c3c1eb8
SHA512 4980dd22f6adb7ba529e6edb524287a59bed4c0c06e6ea5b24fc6a2dc656da3f42efc97aa927058b9fb15dfea33fb6e671efc34c8f36dbd4d042e8265835b904
SSDEEP 384:Tw1XSE/LJijmzWX4s2titd/I68WyldGw02e5wHeqoWFX4+NHOSldZwEJU:E1Pm
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/SecureShare/ShareFileForm.cs

SHA256 f3d8a0c746fe3b2ef71c5e8a49afa775142cdd3ea7cc60fdb2a78efde14be2f0
MD5 71df900283fa2b29ed578e28061fed1f
SHA1 dc2a78471110c21fd58ebe9ba9a094f9b953a6d1
SHA512 2f80af67eabb70432b9e70046598c5afc09881d97385bd89c7c7e47c21d5f33bfd82334158a1d58c6f6eac4bcb4148b7352e8a7057e8e3adcac66cf73a7c884f
SSDEEP 192:wHOpKGpq1PLqkvqDZ+gT/FTC6su6fk2pXbgMptIljmVr:bpKGQRekCFl87d9
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/SecureShare/ShareFileForm.resx

SHA256 5ecdf86d537e52db5de64b3d513d1dc5c3183e18e688ba176b42dd7ee476ed8e
MD5 9c956003046fdfd55ab4292ab37fe96a
SHA1 96d78e847b078cc681c7112fb0600a75ea04b252
SHA512 136552deca4a2311aa7dfc68608fd357984a653d8ab2f15d0332376195848a5cbce3370a91350c157223dffdbbcef36161fa9146a5aa523fb2f99986b5a46199
SSDEEP 1536:Kj2v61Xpwo1txthLZ8vFKxhV5czOl1I9YE3ngeQ:Kj2MXFhtfCFKxhVFgYE3DQ
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/SecureShare/ShareFileManagerInLocal.Designer.cs

SHA256 0d2d0f6d99b5b0e1e7892187d120bf0a01ece22ee132aa89bc6bc27772c399f2
MD5 919eca7b1c7fb6a7f0cad6d237ff06c1
SHA1 eb9ba0164d3874fce85e223778b077b7c10d0e9c
SHA512 b0d715ff5d7d01893117f0f9921331f2737660a6ddd7d854f3c6016f7608d499f1e37b3f4c263bd65adf034ff81240b3cad74756c1ea2fe7c40c819a4b85e596
SSDEEP 48:S2OfOq2atwZxEAOHVOfXxsJPiXyhzuCsbynxWD5xFZxg+xXxJEOxvYRxUOLJ2bJ5:mh2atwZpiVRiXydWvDS1ykf6yz5xG
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/SecureShare/ShareFileManagerInLocal.cs

SHA256 ceffc9038a8dcdc22513604711a3eeeb3b6a45fe67fdbab51b6af659e583d783
MD5 7306b9422bf1e93a06657ce3bb09877b
SHA1 237b75d7d5a89f1c248087b9ff3a62f580619750
SHA512 fcc9231a2037fcb2df092d4dc6391784d157d9e28f2df2908b07aa414447f525ebb1174b19c124d8aa9fb26a09128272934cd1d57bffd3c108914aab2fb7fa56
SSDEEP 96:wj1HO7o4h4Dcz02nXyfBeOn5jQuhNB3RxI8YMvDSZVMvSP9PJ5GPWuFsrCT:wHOKGpKIImREaCT
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/SecureShare/ShareFileManagerInLocal.resx

SHA256 5a8d09181b2b3a79e1759f1c724ee7d657e11a297d42dd5107dd21ca363c3dad
MD5 cb742a90cfda83d02744d5995fcf3b83
SHA1 26466ad1291af2ff4400b83771ba505503ef19a7
SHA512 9e9c25d9256b4396deda138915db4762266d2c8e72b2b2caae4079d61162432bba0e38499c121aceb9c1ca02c470481194969444f58348946cf0d82f37f2803a
SSDEEP 192:KjrbLPD9sLvIzSvKgIqUyahFUgwrvGnW6qK7l:KjrbLPxsLvASvKgwyahFUgwrvGWvkl
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/SecureShare/ShareFileManagerInServer.Designer.cs

SHA256 35f8fe7e150235c69280055572e4e94d29165272420f4243a1c53ff9bccf1faa
MD5 c0c000ebe738594ce1220a2b2a971c3e
SHA1 e60c50f16ae2792de38130749d2914d132edaf76
SHA512 d740c3b7263f5fd9be489b3d543b1694dc589525309475bbe91f2c7d0c79c1841a901f6215a2e5f897885a94a82fb0206072f786455abd88dc383f0d93156a1c
SSDEEP 192:Awa+zc6iVJCG5rwwMkFUQAtmWEV2vkV0dTP/O6HfPIzW24VK:Aw1zc6SEG5rwwMkFUQAtmWEV2vkV0dPQ
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/SecureShare/ShareFileManagerInServer.cs

SHA256 ae5b376f951df7a50520282578e9a3f252e2a11a9b18e892b0458e08b7bd6452
MD5 e36eb94dc7f543876cb599ecd78f2baa
SHA1 e92bb841596d2dbd4961c1ee78f6a79af83bc787
SHA512 a2e7ff21c192be6074bc56fd7b102052a550761fbe80bb643ffc8a4e05469c9ea18a6d8d2b6d7eb94668b04919d520ffd52c5d86883461255a6e943580de148b
SSDEEP 96:wj1HO7oU4h4Dcz02nXy4VOy+3+VnJ8dVuHTneoYNnLT28oUv2iQov2u28ojnt:wHBKGpVDTnJ8TuzefNn324Bb92Fnt
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/SecureShare/ShareFileManagerInServer.resx

SHA256 533032c5e23ba3b57fdc976cc0854e11fb452391e496738a3f95c544a251a81f
MD5 69568bacd0cc7b34699142953dfc50a3
SHA1 30593cffaa7e72540ee4e020c9eeaf112417eec2
SHA512 34b93187891f5dacd7a6326ebdcce669de6e253f139c3edf8e22c20ea08680b053fd85ae113a3da6817a35229f52a6efc793b51e224fc45cb7575127069920db
SSDEEP 768:KjXdskSv6WdTCWfGQKjzcTLma2wxYjYAvmzsBKl:Kj2v61Wer0/m/wmjYAvmzsBg
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/SecureShare/ShareFileSettingForm.Designer.cs

SHA256 5f57a2e0431a3ccb7292b3285050f61d99a0cbce5c937bfe3a3e7bc53769e166
MD5 60214f790ac3dfbc171ff9c5ca796555
SHA1 9a048b0b098b852f09d618e4f52e50e957f57073
SHA512 c93cfc8e36a295442e26b22b3d15e7aa3acbfe275e1571fad9dbdf4e1e12751f6d76956e9ef5b8af2927a75f35aa5abf2f222aa9271d4c5ceae03db62a1705a5
SSDEEP 384:vw1XSE2keewKQFt7m/t1dvpUAiZSpDxe8EBBxaX4eqbEeg/rG9MMZ1vS/SXm0X41:o1Wzfx4l
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/SecureShare/ShareFileSettingForm.cs

SHA256 0700342e047855a1f5a6b824e50bdd1e062846386b98a70a82554771f1ac5a95
MD5 593e030903adf71f7b9fe7b1065c9456
SHA1 b661b8fb92844bf4e2160c9e95dc0f4be8437e24
SHA512 4f67fbcbf9cd329b354c004ccf31c9c558fe03d3235a76de4a67f6c6c0dd17eb538cf805f5ff72110dded3bf8ec34b33c70b311628881d53c47fff2e1bb21bb8
SSDEEP 96:wj1HO7o4h4Dcz02nXUo7eI1JIiJZXzV2WzIJlaa/lGiRZe9g7A2:wHOKGpDiEJR7zrzEyiRA2
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/SecureShare/ShareFileSettingForm.resx

SHA256 f183d5a75b2911bdfb38187548f98334423491d2a3c2851e782f289b3e7bba0e
MD5 ebc3cb2fefc56917c7c0ad54f4bf87d7
SHA1 8cb7bb986f71c97fe1b2ac709cc3fd7697ec6484
SHA512 666fb55bd78ee0f6582b18ecc39b0d3dacb14d0bf31040f63e8c70040692c93f2a076ea7d05a0ebb065425956d13f25429219517d4f7d307d23665562e77c5e6
SSDEEP 768:KjXdskSv64D9jpvgG9k2CImE/Xne1IememCr6jNcW++aF2owGKOU/CENAK+xFl:Kj2v6YjbCL0lCqNny26UxOxn
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/SecureShare/SharedFileAccessLogForm.Designer.cs

SHA256 2b3a89f609c4a889ed6b0abebd4f295f23f21e31d14bca6f36f1b13d99186811
MD5 8d0afbba004d683773dc1ddc77ef6a94
SHA1 56bfac04a93b260d453f9b36e16fff8cd4c317e0
SHA512 3bbf565cb457939071d269a3c5286f461f677feb5633dd95361c3562e2e20d8ee3c9507198d6174ffa78f4b1987a75935b0b64d8e35c3914f1cf79f954d50a55
SSDEEP 96:dh2atwZpiVSikf8EGQkGrAulFAMGxVyz2W2KJtm:dwa+XiVaf8JQtrAulFAlxVyz2TF
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/SecureShare/SharedFileAccessLogForm.cs

SHA256 54aa229d711a8ac30a3b4bb0830fb61368a2e8d7631cb9e2538316379c7a2e89
MD5 8542a03594dd19918b28af1091c3373a
SHA1 578c8154b90928985f7408d97bb27bbbdc764b13
SHA512 aea99b80d55c87a366b73ec93430981e9c848bc1a4c2231c52eb53b3fba08133ac28ef2d8cd6f5a0058c6c1b2fd15ac8166170279a78f50f090717246806121e
SSDEEP 96:wj1HO7o4h4Dcz02nXUR7UJPlaZ5nVnJDIrU24aGpFkF:wHOKGpw7UJPlkc
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/SecureShare/SharedFileAccessLogForm.resx

SHA256 15fa4b2cb8e7df57d7854db45ddee4cb9560ed28f72a8508d48522f28a7fe89c
MD5 f2f79ae6d8a7010d259a77b410e0dc23
SHA1 7784bf29428f49624aebfcca8bb3bc136bead0ef
SHA512 3747fee68d11c4e5a6f440fa0e265f3f45493aa791e82594d2a95f7f8ceb51b134756f78febb5a669dfcf83fb78132fa8eb142c258e633d2fcb16a08eec6cb8a
SSDEEP 768:KjXdskSv6MrwBx13MrDK8Xj/3S3333N333S33DwSApBxOl/qQT25MEgkCZiAYl:Kj2v6MreX8XjRKiRLqMEQdi
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/SecureShare/WebAPIService.cs

SHA256 463bb96f33841d9296d65e43022c1df47d719ee8b617c84ad66d262212e985c8
MD5 c8baf2ce809a8862dd21ff44bbab6fc1
SHA1 b5e9ed800aa5946bdc6ae2d5c3830a2a7f87802c
SHA512 92700e302f76b29949e2db152c3f8b670b0b48f966abe0fcf6c178b04a10c845b5b32607759283eecb3905e4169b47afee9a2dff54a4cf4b31817863846ac283
SSDEEP 96:JoU4h4Dcz02nXy14Vk1oF5kEXBHrthlgnEudegAu7mTJSbAFprzJ/PXNO6L:mKGpFmoDkExNgnEuRjMFQE
MD5 SHA1 SHA512 SSDEEP

Demo_Source_Code/SecureShare/app.config

SHA256 ff4d60930d29d2ec9601505d9dd193822a19d0a3d1855895fb96a541caa36817
MD5 5f6ff863bb47270d814198a1d02e6565
SHA1 7f995c546f3f63c26e7025c68f74583f4bfa5ed8
SHA512 a497b96868fca7a104dadb2404c64311844ee6dee3b82559014f33e7b09db565e214e69c8217d0ca0c5fbe0393ef754ead938e3ec24c3ec804c5ccc9fb0bebd6
MD5 SHA1 SHA512

Demo_Source_Code/SecureShare/app.manifest

SHA256 c957f96e440f0717d483b95640d8800bedb70ee29a4de2934b41142e8782e9c0
MD5 25ed60697d3036cd10b2c157aa43334b
SHA1 3b6bf160b4480b916722ab5eaf56a377001d9b77
SHA512 82a3aa2418f501fec142bbe096319334a714bbd2664bab89d00a7ca8cae51e943da050c661583af666215b6f9b3c092cd54a60e381c00753a5595f1d07fbf0e8
MD5 SHA1 SHA512

Doc/License.rtf

SHA256 a0fd3b7b94e4085714d894474d29f3f9d9a0174ef7bb49767b3da651c66f9a46
MD5 7054e76c62031fc0202434279299763e
SHA1 c5c49acb0afc992dfd5899a6d18c416587d6a19b
SHA512 7d07a1df0d3e154bfe0a36f0f0c90bdc673a90736199f2867b898ac74fbae9048541c8934bb53eaa2681486f30dce52d403b08726139ac6031d8301caa5c109a
SSDEEP 768:l4gKfaoxLL/cUqxtBjgkOacXqrccWcQO/Kccsfc6vgjn8l/NLoJ0e:l4Eoq9gfqrccWGKwTvgbEHe
MD5 SHA1 SHA512 SSDEEP

Doc/Manual.docx

SHA256 e6a9c7b75a71a586bc026590028daf2b714496719edd83b46032205f5b6dc03e
MD5 eb60a73f9119bf1f61a254a1a463e743
SHA1 02635567d7d1720a2d381caab769cacbd4f63b18
SHA512 aed0ed144e699b61210a8aa71b04a31e05e9c44004c1a3ffda3d5256f2049cd335c7745ea2fc22aa2626aa020c8445a6dc0cb0132d31553867d8267e19b7252e
SSDEEP 3072:uWhFaojuFMXjryFRc+hHKAefgWp4M1DEPSPyxshp3GAH97iIzf:uWhzjtj+FmoKAefgW/1DRn7/OIT
MD5 SHA1 SHA512 SSDEEP

office2007

Doc/Manual.pdf

SHA256 cb9cc3fac42be4e087a4643e1ad726933b1a516086c7d8ae05bff58331a4574e
MD5 053578eeeb879eb4bf8bd6c6822632ac
SHA1 f142c8a0378362d799cc873760944569078bc82d
SHA512 7e99f39efcf38abd276d0268fe80abbf11888430f3edab6aeb2a4af8da686b5f4ea55e69aa60e0e46ee89b3f3fa132bbd286337c74a7f59d7cb92180b7db5acf
SSDEEP 12288:OYrUKn4opjKGL1mMX0YQ77Kl4GCAgrs9iMoL64+0JkoQVW4Tlo60F6O0nAoUv/4U:OYr/n4opr0YKE4GCZsoMjoOW4sEW3v/9
MD5 SHA1 SHA512 SSDEEP

HTTP links in PDF interactive object

Detects HTTP links in interactive objects within PDF files.

pdf link

Extracted URLs

file http://easefilter.com
file http://www.easefilter.com/Order.htm
file https://www.easefilter.com/programming.htm

Doc/Order Products.url

SHA256 54270e7d856815cc62299b9a98242765bbb08f13ff1513dc462ee2094dfbacce
MD5 86a3ef0a7bf4252efe734daffeb18fed
SHA1 ac855da8dd2233eacee271a3aaa3a43d0d9b24d9
SHA512 2f02947bbcca9a91603eb25cb8aba3a799b3c125306552ab9d4cab9aee53c61b3d7e971b70964a8dadfeac8f2dbf11d5ae8bd53329a5ce8410c9616a62c2cc6d
MD5 SHA1 SHA512

Doc/easefilter_changeset.txt

SHA256 507653f5e3e46d6f7a7233e804320d4a92c0ce1127848fdcce79a18a8e1d237c
MD5 24991217f8c4a3c1a9bc74261f14bba0
SHA1 ce99bd6fd32acfa5a08c6bc94b60046f7ce1f589
SHA512 5a9ae30272516624ce747d76d7110f4a82df5eda4fb8c02c45c915731be15b2251c54a0a8b308b0a6edfc424638df4e48b3d1a29d957156fc0bc4947b78c10f2
SSDEEP 192:jvIZKPOoH9TXIJ8HSUI8OJkDxL7YSlmFv6jyPvHTpUXLLPYsfq8XBT9zqPK88L:LzK8HS12V7KcyvH1UQaq4BIcL
MD5 SHA1 SHA512 SSDEEP

EaseFltCSConsoleDemo.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 925297fcb084cf011ab2ea0efa2eba8711dc0f6dbf671be8ecb0fed2736c92f6
MD5 db207d30f174b3605f3be1b177d16532
SHA1 ef2ed9f2a606fd83ca52752c6452c2a3444b5a4c
SHA512 66ff5b1d927b65f2b44070790020121977036bc99be72ad0c869187823e75c603cb133cb2daa56ee477a4c1163b9ccd47beb7d9e4f2eabdcbfd6f42db16c29f4
SSDEEP 768:DZVvgYA1+AF8VJIS3E/l522Hd1nCWG2ShEw+3hMg:DZls4HGjX3hMg
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Digest

5c:59:43:f8:20:80:05:60:63:3f:15:7b:a3:47:d0:7e:10:91:df:ba:f9:3c:0d:5d:e5:44:71:d1:56:f5:c6:32

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Chains

Jan 7, 2022

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

be:ce:e3:30:17:19:65:42:da:1a:26:46:16:0a:55:f1:73:f4:03:13

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Chains

Jan 7, 2022

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Serial Number

0f:31:2f:ad:09:74:c5:12:c3:d6:5c:09:bd:62:fb:1c

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 11, 2019 - Nov 2, 2022

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Serial Number

0e:0a:2e:90:48:fa:06:fa:97:f5:26:31:d7:cd:2c:f1

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 11, 2019 - Nov 2, 2022

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

4

Entry point

39806

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\Development\Demo\EaseFltCSConsoleDemo\obj\Release\EaseFltCSConsoleDemo.pdb

FileMonitor.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 ecfef99cc3c6db14c577ac5971ac8832f38f5d0cc1d755338087db208e5dd85b
MD5 45da430cee19d5683a24892224191e3a
SHA1 ee96a8cf973f65c99d9d255b72358b7e850e6072
SHA512 508593f003acaf64c261918ef699e3f488843f22611142f5de8261914e68195015393353e4b134d67acc5d935a2a59a808ea7317b2f3946ccb7e4c2859369224
SSDEEP 3072:4Eoha9/05o2rOHlmevnVseUr4Sn6XWABtuAkUaxF5Xn1uW5:4Eoha9/05o2rOHlmevnVseUr4S6XMAoP
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Digest

88:8c:a6:30:b3:00:14:e6:e7:b3:9c:6c:5e:be:b5:96:5c:0e:34:b6:e2:b3:0a:9b:85:e2:1c:d1:fe:4f:cd:d9

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Chains

Jan 7, 2022

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

4f:87:06:4a:49:4e:e2:34:a4:35:6f:7e:e6:4b:48:16:46:ce:0c:60

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Chains

Jan 7, 2022

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Serial Number

0f:31:2f:ad:09:74:c5:12:c3:d6:5c:09:bd:62:fb:1c

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 11, 2019 - Nov 2, 2022

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Serial Number

0e:0a:2e:90:48:fa:06:fa:97:f5:26:31:d7:cd:2c:f1

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 11, 2019 - Nov 2, 2022

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

4

Entry point

134590

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\Development\Demo\FileMonitor\obj\Release\FileMonitor.pdb

FileProtector.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 5431ac7b90b61e92d68d12d4ecc523e180b5c24ccbb1b8ee22d3192030cec3ee
MD5 71a274afab4f0eeefb26c70e36b4921c
SHA1 b00f777bd12535ad91ca2443a7afe75ab83ed644
SHA512 e8e80a13fc7c455d48129f585e25eabd1456a3f7098effbc0276c6de3446a66ab7d70af21705eb3571063e9b870877286a953c48ec9f27aa204517b1ddc5fee6
SSDEEP 3072:aOW9vxqrk6clkhsqbsgBb0+gLe+iRC20Xg6m/b:6vx4k6okhslgBIRwAg6Ib
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Digest

6c:c0:07:2a:09:d5:31:c9:5c:f8:ca:53:e5:c1:da:9d:3b:6a:56:3f:07:a6:57:ca:4b:90:22:50:2a:0f:4c:b2

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Chains

Jan 7, 2022

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

ca:84:f8:25:68:3c:6a:84:bd:a6:b0:36:a0:c5:ad:55:94:18:0f:18

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Chains

Jan 7, 2022

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Serial Number

0f:31:2f:ad:09:74:c5:12:c3:d6:5c:09:bd:62:fb:1c

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 11, 2019 - Nov 2, 2022

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Serial Number

0e:0a:2e:90:48:fa:06:fa:97:f5:26:31:d7:cd:2c:f1

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 11, 2019 - Nov 2, 2022

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

4

Entry point

160046

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\Development\Demo\FileProtector\obj\Release\FileProtector.pdb

FilterControl.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 60a03eafc181274c0534e7085e87f6e04b695f4c12fcc7fa89cc7720ecb0a9ef
MD5 fc717ffc5eb557e3a1ff34ac181fd34b
SHA1 8cda7c70f234a6e5ba1071528527c46862d1c463
SHA512 27f212d83c3197e87f41aed6369c0d661084bb650a5355e2aa0eadbb15015c88c73da55f15bbd00142b4cf9f5efc472e7be333cba72e95ca16da2184b848d390
SSDEEP 3072:sXAc3D3ZMn704FIR4y96iPx5OHLuJOSPuNRXRSHa1p6jUS1RpW407:eTDI704TiPj2LuJOSPuNRXRSHa1p6jUL
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Digest

ba:08:3c:e1:2e:92:85:9b:fb:70:d6:0f:17:8a:81:2b:79:14:ea:28:76:b0:0d:51:80:89:c2:a1:bc:25:c0:d7

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Chains

Jan 7, 2022

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

23:33:c8:8e:e6:38:d4:66:4e:03:1e:5d:b4:57:3f:ee:aa:41:f0:44

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Chains

Jan 7, 2022

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Serial Number

0f:31:2f:ad:09:74:c5:12:c3:d6:5c:09:bd:62:fb:1c

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 11, 2019 - Nov 2, 2022

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Serial Number

0e:0a:2e:90:48:fa:06:fa:97:f5:26:31:d7:cd:2c:f1

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 11, 2019 - Nov 2, 2022

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

4

Entry point

174030

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\Development\Demo\FilterControl\obj\Release\FilterControl.pdb

FolderLocker.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 89b1ad9c8b679e5ad18efbcd5438e55ef19fe8a453ed03aee0d728559ee3cf9e
MD5 82a8cad27c7388468ac0985fe33cf9fb
SHA1 2999cc91b25865aabe7c2ee70111c23f07d2cef0
SHA512 1594741bf628012fd240dc4e4f26879fccd1856a46ad7bfb2b0fffd04bb055e2a701f139a7919c76951581f2ad1c71e3c646ec3baff59fc7d85208c88230ebcf
SSDEEP 3072:tXJd40FH38/8iCQwzJ3Rw7Ifj0mUwjUoR8AIMaZaYuUtb:tXv3Fs/8iCQwzJ3RxUlM6uUtb
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Digest

02:16:de:c7:b7:b9:bf:d6:2c:fb:3b:06:55:1c:4a:b1:0d:ec:e7:44:57:c3:5e:81:d5:54:e0:b0:5b:ad:cc:a6

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Chains

Jan 7, 2022

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

3a:42:0c:5e:e1:a3:6e:90:e4:76:4f:68:03:07:f2:9d:72:87:a0:96

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Chains

Jan 7, 2022

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Serial Number

0f:31:2f:ad:09:74:c5:12:c3:d6:5c:09:bd:62:fb:1c

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 11, 2019 - Nov 2, 2022

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Serial Number

0e:0a:2e:90:48:fa:06:fa:97:f5:26:31:d7:cd:2c:f1

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 11, 2019 - Nov 2, 2022

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

4

Entry point

256670

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\Development\Demo\FileLocker\obj\Release\FolderLocker.pdb

ProcessMon.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 30aeaa6bdd2c72f906c27ccd1d16c3d255eadf7093621b1391d60fbffda4b65e
MD5 9e0c1238713e23dd93a3fa826e8047a2
SHA1 3542d00a06e3ec6addece3ded5a9996b57254614
SHA512 2f62cdb222866eafce6fe0bcfd00064d7d2ae0c1b0f46368fd37a796d78da9d34ef40570e0e9c1de1917b0d8be6362f4cf8e407e6725c29202b75f7f50b0bf22
SSDEEP 3072:n3R0QgYi2QgYiL7QgYiyvHMyXXXaPPPnvvvFH6DHbPADP9kcRNb74VQgYisAS9:n6iDa8+wAS9
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Digest

30:4b:94:77:6d:25:8c:74:6c:09:18:d5:72:24:94:5c:d8:b5:87:50:dd:67:7c:e7:dc:ee:b2:44:08:db:db:28

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Chains

Jan 7, 2022

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

0c:9a:ad:39:cc:87:e7:e4:e1:b2:fc:00:c3:3f:e9:30:86:6f:ee:7d

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Chains

Jan 7, 2022

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Serial Number

0f:31:2f:ad:09:74:c5:12:c3:d6:5c:09:bd:62:fb:1c

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 11, 2019 - Nov 2, 2022

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Serial Number

0e:0a:2e:90:48:fa:06:fa:97:f5:26:31:d7:cd:2c:f1

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 11, 2019 - Nov 2, 2022

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

4

Entry point

243822

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\Development\Demo\ProcessMon\obj\Release\ProcessMon.pdb

ReadMe.txt

SHA256 d7d80a7fe33aa27718a9104ff323d0ae2c13f36246ccc3c95fdb3de057be5d3e
MD5 2450b884821297539b6b5e9aa52849a4
SHA1 9dc67a6fcdaa94579673501248a90600350787e3
SHA512 956f7ab1750e774a1582da41bbffdaf1e21c334f67fd1fcb87ff0ddd58b736f878887a9be10b03718124729b9b31171eb43bbf84ed51cac33ac90d821aa4003e
SSDEEP 96:uQE7cL1EKDNPRmPH4Z5srFLcw29lEw4d92OH1x3LHH1Av:l9LHWEEFI39lEw4d92OrH6v
MD5 SHA1 SHA512 SSDEEP

RegMon.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 67ada449efd916e44661b098dede490f16824e978b739a28b6c8a304ca03ebc3
MD5 eb6bc8cf075219ad45b55aad1b4758e6
SHA1 ee86d4e09924869cbad1612d1ec0a9c178702bdc
SHA512 90054e6bc3d885a468d83ef45d9f4a2f8c76b925a0e50067a737cc3c177b4c925041e43c5a44ead2320739ad3d944cf478da290754586f3f9cc97a8d9d7d451d
SSDEEP 1536:qGgHkoWHDfvPQZQiBycwry8ABZtDNjOA7t1Mo4CFko0pfYH4B/LV6HpA993hnP:jgEoWHcQiBxN8owA7t2NDBYH4BToJAlP
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Digest

94:cd:75:6f:68:fc:22:be:71:b2:a8:1c:d8:99:42:9d:b7:7b:a4:fe:94:52:de:33:1d:df:29:45:ac:00:42:23

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Chains

Jan 7, 2022

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

66:29:6c:c1:1e:8b:a6:52:73:5c:76:18:1e:de:7d:ce:e8:79:ac:1a

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Chains

Jan 7, 2022

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Serial Number

0f:31:2f:ad:09:74:c5:12:c3:d6:5c:09:bd:62:fb:1c

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 11, 2019 - Nov 2, 2022

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Serial Number

0e:0a:2e:90:48:fa:06:fa:97:f5:26:31:d7:cd:2c:f1

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 11, 2019 - Nov 2, 2022

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

4

Entry point

346414

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\Development\Demo\RegMon\obj\Release\RegMon.pdb

SecureSandbox.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 b4255b700445a08614e0c98cdf0659ee404ff56b6bce001b9c39e3165f0be28d
MD5 98b6ce42dbf21a7427454f5c56b4003c
SHA1 9b9f5c940cb67d1c6b25477bd52927ca6940464d
SHA512 0a9acc2cf3a46c82f286295a01f8ec5025a134b827499de191d5cddb91e76bdd768d053a7c8fdcb0a551922e4fc8323448294a6da9fbcacaa00cfbe112e9973d
SSDEEP 3072:txRbcDMFNeidaxMHb5HMyXXXaPPPnvvvFH6DHbPADP9DHMyXXXaPPPnvvvFH6DHw:PRgDMFNeidaxMHbJWMQrMmpqAoxx
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Digest

af:a9:d6:d6:dc:c0:a2:2d:8a:8f:4c:f1:e9:f5:8e:33:5c:8a:e7:dc:58:89:7b:55:19:7c:3d:81:f0:dc:34:96

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Chains

Jan 7, 2022

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

00:70:23:0b:ea:2d:06:51:58:fb:34:86:81:60:e7:d4:8b:d9:5f:e4

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Chains

Jan 7, 2022

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Serial Number

0f:31:2f:ad:09:74:c5:12:c3:d6:5c:09:bd:62:fb:1c

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 11, 2019 - Nov 2, 2022

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Serial Number

0e:0a:2e:90:48:fa:06:fa:97:f5:26:31:d7:cd:2c:f1

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 11, 2019 - Nov 2, 2022

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

4

Entry point

488670

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\Development\Demo\SecureSandbox\obj\Release\SecureSandbox.pdb

SecureShare.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 a516ced96e4a398adb3611c1fc4543a7003668910e1297cbcc03185e328d798f
MD5 fce286736eefd9db7e5713e1779975c5
SHA1 61d4b3d37ed89c967779746cc9c83d6c37d8d7e2
SHA512 45fc03c42080a11fa1417a7af841e65302b11dbd2faf50bfa1eb826f970689d68c5a46e476803f0c525552f4ddd7ae71176a910ef17740cf067be8344c4c213d
SSDEEP 3072:K4w4UO8Xi3cOWjRG09CBJg+sWjUoR8zIfj0mUv4Ifj0mUgT7oAOp7s8UuIfj0mU0:KGyCsEUbU+oBOpU44QF
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Digest

ac:f2:bf:08:8a:71:79:3b:80:f5:8c:fe:45:db:b3:74:bb:89:21:90:19:f4:5a:43:d6:06:d3:d2:29:28:6e:10

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Chains

Jan 7, 2022

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

0a:9f:4d:1c:23:04:18:79:90:f0:f3:4b:88:73:5d:d2:c7:e5:56:7a

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Chains

Jan 7, 2022

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Serial Number

0f:31:2f:ad:09:74:c5:12:c3:d6:5c:09:bd:62:fb:1c

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 11, 2019 - Nov 2, 2022

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

SERIALNUMBER=2864592,CN=EaseFilter Technologies Limited,O=EaseFilter Technologies Limited,L=Central,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b

Serial Number

0e:0a:2e:90:48:fa:06:fa:97:f5:26:31:d7:cd:2c:f1

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 11, 2019 - Nov 2, 2022

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

4

Entry point

314878

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\Development\Demo\SecureShare\obj\Release\SecureShare.pdb

uninst.exe

IMPHASH 6e7f9a29f2c85394521a08b9f31f6275
SHA256 ec9768fe782b9eed12a07165fa64ce14f0d8d53fb5458f529962f9d3b8a3fe5c
MD5 a6c15f9ff3e7b2dfb47d3aceb007b606
SHA1 e6185241282a9074eb89298c18019b1d4bbbfe2d
SHA512 56e151f2e30e2da111c1607394b37ce42ff35a90906f41d3bb289aeebc246adb4f33953e2fa8a775e9145d999ec83ecb31f18e9de09c4406e331c698c73a1783
SSDEEP 1536:RQNRwF/6HWFDw2ShOp0DiJkuNgdLeAyNZVjJJUeGEjtkjTvw:2NRCywDw1DiJkuNceAij/Ujzj7w
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

13509

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCreateKeyExW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken SetFileSecurityW RegOpenKeyExW RegEnumValueW

shell32

SHGetSpecialFolderLocation SHFileOperationW SHBrowseForFolderW SHGetPathFromIDListW ShellExecuteExW SHGetFileInfoW

ole32

OleInitialize OleUninitialize CoCreateInstance IIDFromString CoTaskMemFree

comctl32

ord17 ImageList_Create ImageList_Destroy ImageList_AddMasked

user32

GetClientRect EndPaint DrawTextW IsWindowEnabled DispatchMessageW wsprintfA CharNextA CharPrevW MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW GetSystemMetrics FillRect AppendMenuW TrackPopupMenu OpenClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetWindowLongW GetSysColor SetWindowPos PeekMessageW SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint EmptyClipboard CreatePopupMenu

gdi32

SetBkMode SetBkColor GetDeviceCaps CreateFontIndirectW CreateBrushIndirect DeleteObject SetTextColor SelectObject

kernel32

GetExitCodeProcess WaitForSingleObject GetModuleHandleA GetProcAddress GetSystemDirectoryW lstrcatW Sleep lstrcpyA WriteFile GetTempFileNameW CreateFileW lstrcmpiA RemoveDirectoryW CreateProcessW CreateDirectoryW GetLastError CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersion GetCommandLineW GetTempPathW GetWindowsDirectoryW SetEnvironmentVariableW ExitProcess CopyFileW GetCurrentProcess GetModuleFileNameW GetFileSize GetTickCount MulDiv SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW MoveFileExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW

$PLUGINSDIR/System.dll

IMPHASH fc0224e99e736751432961db63a41b76
SHA256 acf90ab6f4edc687e94aaf604d05e16e6cfb5e35873783b50c66f307a35c6506
MD5 6e55a6e7c3fdbd244042eb15cb1ec739
SHA1 070ea80e2192abc42f358d47b276990b5fa285a9
SHA512 2d504b74da38edc967e3859733a2a9cacd885db82f0ca69bfb66872e882707314c54238344d45945dc98bae85772aceef71a741787922d640627d3c8ae8f1c35
SSDEEP 192:MenY0qWTlt70IAj/lQ0sEWc/wtYbBH2aDybC7y+XBaIwL:M8+Qlt70Fj/lQRY/9VjjgL
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10719

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/modern-header.bmp

SHA256 8e58b3e6e3896a4bae05fa2f6adc238d391aa80bc51c138f851f373c6c23e518
MD5 eadf80c79f88337c58ca0fb5032cb579
SHA1 523d7118a3755790eaddd6e99f7b3814e97d47d0
SHA512 ed612cda75f4b345c1405be33575a0060d6399654d66356e8102ec82a057497ef7dc99906132bd729ae793e7fc4f46cdbd57256fca567a056bed642c1d58b7ed
SSDEEP 192:6K3Taw+vLvvswRvyb7qY1eL5qDJD8CUNObWF/U0p3+i8Esub:6MOLzYQdqDJHsxcWPX
MD5 SHA1 SHA512 SSDEEP

$PLUGINSDIR/nsExec.dll

IMPHASH c1c7505e1e6e929ebb6b9100e55b050a
SHA256 c1b7c3ef8b77a5bb335dc9ec9c3546b249014dde43aa2a9ed719b4d5933741df
MD5 ec9c99216ef11cdd85965e78bc797d2c
SHA1 1d5f93fbf4f8aab8164b109e9e1768e7b80ad88c
SHA512 35ff522c4efb3875fce0d6dce438f5225e5f27b414e7c16df88031e90b528c057fe10b4bbf755445c0500c3521e0797f562690aa7209f588169164bbfaceaba1
SSDEEP 96:JwzdzBzMDByZtr/HDQIUIq9m6v6vBckzu9wSBpLEgvElHlernNQaSGYuHUDQ:JTkDr/HA5v6G2IElFernNQZGdHs
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4231

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Sharing

General

Malware Config

Signatures

File Explorer