bec1352ddf847b05f0938ba334e797ef_JaffaCakes118

resource
bec1352ddf847b05f0938ba334e797ef_JaffaCakes118
unpack001/$PLUGINSDIR/AnticareMsg.dll
unpack001/$PLUGINSDIR/ChkClient.dll
unpack001/$PLUGINSDIR/DLLWaitForKillProgram.dll
unpack001/$PLUGINSDIR/DLLWebCount_new.dll
unpack001/$PLUGINSDIR/IEFunctions.dll
unpack001/$PLUGINSDIR/InstallOptions.dll
unpack001/$PLUGINSDIR/IsVista.dll
unpack001/$PLUGINSDIR/Ischeck.dll
unpack001/$PLUGINSDIR/KillProcDLL.dll
unpack001/$PLUGINSDIR/SelfDelete.dll
unpack001/$PLUGINSDIR/UserMgr.dll
unpack001/$PLUGINSDIR/nsExec.dll
unpack001/$PLUGINSDIR/processes_second.dll
unpack001/$PLUGINSDIR/stack.dll
unpack001/$PLUGINSDIR/xml.dll
unpack001/ACAutoUpdate.exe
unpack001/ACEngine.dll
unpack001/AntiCare.exe
unpack001/etc/ACFilterDriver.SYS
unpack001/etc/ACmonRemote.dll
unpack001/etc/ACreport.exe
unpack001/etc/acMon.exe
unpack001/etc/acReg.exe
unpack001/etc/avsrv.exe
unpack001/etc/avsrvc.exe

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

IMPHASH 7fa974366048f9c551ef45714595665e
SHA256 186761a11648dd53507440f3c9f045fbaf507a460f3696650e2496dae208dba0
MD5 bec1352ddf847b05f0938ba334e797ef
SHA1 65f0d51d47619d7e2a2590f591535f70bb7aecb2
SHA512 44c4cb906558ac0da7db08ec92ff7dbe1a075cad65c3ee7409fe2957949ff1006078b94b547eaf3811998a8e4ac2d622fadff3e3bb24ce81ae6cfc2a4ef09012
SSDEEP 98304:TuJmYdNeRQRkbYUnhs/qhgs9kSZhJyI4fOVPoB:Tu44eikbY4u/qhgFSZmOqB
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

12538

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CompareFileTime SearchPathA GetShortPathNameA GetFullPathNameA MoveFileA SetCurrentDirectoryA GetFileAttributesA GetLastError CreateDirectoryA SetFileAttributesA Sleep GetTickCount GetFileSize GetModuleFileNameA GetCurrentProcess CopyFileA ExitProcess GetWindowsDirectoryA SetFileTime GetCommandLineA SetErrorMode LoadLibraryA lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread CreateProcessA RemoveDirectoryA CreateFileA GetTempFileNameA lstrlenA lstrcatA GetSystemDirectoryA GetVersion CloseHandle lstrcmpiA lstrcmpA ExpandEnvironmentStringsA GlobalFree GlobalAlloc WaitForSingleObject GetExitCodeProcess GetModuleHandleA LoadLibraryExA GetProcAddress FreeLibrary MultiByteToWideChar WritePrivateProfileStringA GetPrivateProfileStringA WriteFile ReadFile MulDiv SetFilePointer FindClose FindNextFileA FindFirstFileA DeleteFileA GetTempPathA

user32

EndDialog ScreenToClient GetWindowRect EnableMenuItem GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard RegisterClassA TrackPopupMenu AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA DestroyWindow CreateDialogParamA SetTimer SetWindowTextA PostQuitMessage SetForegroundWindow wsprintfA SendMessageTimeoutA FindWindowExA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA OpenClipboard ExitWindowsEx IsWindow GetDlgItem SetWindowLongA LoadImageA GetDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint ShowWindow

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectA SetBkMode SetTextColor SelectObject

shell32

SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA SHGetSpecialFolderLocation

advapi32

RegQueryValueExA RegSetValueExA RegEnumKeyA RegEnumValueA RegOpenKeyExA RegDeleteKeyA RegDeleteValueA RegCloseKey RegCreateKeyExA

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

$PLUGINSDIR/AnticareMsg.dll

IMPHASH 8b8eddae00f9a5773a0b64aa3a892677
SHA256 e84362455ac00ade7f45c58485533d3a7cebf5bb0fa1d4081b6e375ec1e7f788
MD5 0ab8dd4d754ee97df55dfefbc0836627
SHA1 c5a2065ca4750c3246d96e2f740387faaad70c3e
SHA512 2a83535f31c1dc5f861d6d7cbe78a92684b91653df1260b78cfc7bbc54c2c9448a491083d5b9b4ffd03cbc057217c4bd8e0e989a4a3a992bad2cc838bd0d18ba
SSDEEP 384:aP4rbSlT57iuBjR6cC7Xx4r7ruc8/l3jyuhSvr1OWuf+cA/8oPdZO:HyTBiufqx4r2RjrSz1OWj/8oS
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

4393

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/ChkClient.dll

IMPHASH aecb7480c3c11e4195dc369f6eb0c4b0
SHA256 5bdefe9a081e5e2f4af73891db6228a6b57e7dd320fac0ae233f5cd741db8a1f
MD5 3fe47e461bb686693cf440c8815f2a0b
SHA1 9a7d27d47a542b83d00f1e6027ba4c22d496f887
SHA512 687c57e17c4f527b90e8eafa9929fa9ee0a1fa82b2c9ba9c6a6385cfcb1fcdd1e09305acbf357cf61e7dd7e061d581a378d2661ed7df7dbfd554514f04646e61
SSDEEP 1536:Ic+9HlMqT+GbwVG7MPHFdufRxYj3fnN8smruI6qlCMQwIZ7:ITM9VBPHFsrOPN70bHlcwG7
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

10959

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

GetCurrentProcess ReadFile WriteFile SetFilePointer FlushFileBuffers RtlUnwind GetCommandLineA HeapAlloc HeapFree RaiseException HeapSize ExitProcess TerminateProcess GetACP SetHandleCount GetStdHandle GetFileType GetStartupInfoA FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW GetEnvironmentVariableA GetVersionExA HeapDestroy HeapCreate VirtualFree LCMapStringA LCMapStringW VirtualAlloc IsBadWritePtr GetStringTypeA GetStringTypeW SetUnhandledExceptionFilter Sleep IsBadReadPtr IsBadCodePtr SetStdHandle InterlockedExchange GetOEMCP GetCPInfo GlobalFlags lstrcmpA GetProcessVersion LoadLibraryA FreeLibrary GlobalGetAtomNameA lstrcmpiA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom GetModuleHandleA GetProcAddress GetLastError SetLastError GetVersion GetModuleFileNameA lstrcatA SetErrorMode TlsGetValue LocalReAlloc TlsSetValue EnterCriticalSection GlobalReAlloc GlobalLock LeaveCriticalSection TlsFree GlobalHandle GlobalUnlock DeleteCriticalSection TlsAlloc InitializeCriticalSection LocalAlloc GetCurrentThreadId CloseHandle LocalFree MultiByteToWideChar WideCharToMultiByte lstrlenA InterlockedDecrement InterlockedIncrement GetPrivateProfileStringA FindFirstFileA FindClose GlobalAlloc lstrcpynA GetTempPathA DeleteFileA lstrcpyA HeapReAlloc GlobalFree

advapi32

RegOpenKeyExA RegQueryValueExA RegCloseKey

comctl32

ord17

urlmon

URLDownloadToFileA

iphlpapi

GetAdaptersInfo

user32

CopyRect GetClientRect AdjustWindowRectEx SetFocus GetSysColor MapWindowPoints PostMessageA LoadIconA SetWindowTextA IsWindowEnabled LoadCursorA GetSysColorBrush ReleaseDC GetDC GetClassNameA PtInRect ClientToScreen PostQuitMessage DestroyMenu TabbedTextOutA DrawTextA GrayStringA EnableWindow GetTopWindow MessageBoxA GetCapture WinHelpA GetClassInfoA RegisterClassA GetMenu GetMenuItemCount GetSubMenu GetMenuItemID GetDlgItem GetWindowTextA GetDlgCtrlID DestroyWindow CreateWindowExA GetClassLongA SetPropA GetPropA CallWindowProcA RemovePropA DefWindowProcA GetMessageTime GetMessagePos GetLastActivePopup GetForegroundWindow SetForegroundWindow GetWindow GetWindowLongA SetWindowLongA SetWindowPos RegisterWindowMessageA SystemParametersInfoA IsIconic GetWindowRect GetSystemMetrics GetMenuCheckMarkDimensions LoadBitmapA GetMenuState ModifyMenuA SetMenuItemBitmaps CheckMenuItem EnableMenuItem GetFocus GetParent GetNextDlgTabItem LoadStringA UnregisterClassA UnhookWindowsHookEx DispatchMessageA SendMessageA GetKeyState CallNextHookEx PeekMessageA SetWindowsHookExA GetWindowPlacement

gdi32

SaveDC RestoreDC SelectObject GetStockObject GetClipBox DeleteDC DeleteObject SetMapMode SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowExtEx ScaleWindowExtEx GetDeviceCaps SetTextColor PtVisible RectVisible TextOutA ExtTextOutA Escape GetObjectA CreateBitmap SetBkColor

winspool.drv

ClosePrinter DocumentPropertiesA OpenPrinterA

$PLUGINSDIR/DLLWaitForKillProgram.dll

IMPHASH 2e92645153848ef99816d61ac6e2a921
SHA256 ed52bdad7b383a179b9b0e21fefdda2d72695c5263a815d5e1e0bfac6c718548
MD5 9c4b8ec42d89f7557bfd90798ce52787
SHA1 2376dde426ea65aa27c30e304086310605382475
SHA512 17c12a27a08746755868558c037376dd7e20f03f0f71888c1329903b70975a54f57786c3c32bf88aaf30119f11ed978a6830ba91949e11cfc94fbb5ad95305b7
SSDEEP 96:EP5ZuFye0MyQW4uPwhs+R/+gFrE1m/U/uG98bp2y+HS21kEZ1b+4Tu9C1uGg8wBu:akFyFRQ5wIzlH/UGq36EZY4T+Gul8U
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

6176

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Name

.text

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

4KB

Virtual Size

8B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

4KB

Virtual Size

944B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

544B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

$PLUGINSDIR/DLLWebCount_new.dll

IMPHASH eef21a13a3a20993251273037c6620dd
SHA256 5417af0fc8284e9745650a55803bb34217e314096dc7cedf113c960624ae08ad
MD5 f16f5feebd9b431a8bc63456c0ad267c
SHA1 acc75cfa3ed7888334aa2ccf305a6c6c58a08aaf
SHA512 ed1e62d903b511a29abd5def4419b5afa63699ee2d1c91a9d884ffb01d7debe5981559574cac4885140d1f27f4275be56236f5c6f1c327147dcac8893f965512
SSDEEP 96:3YP18J49uJPeaFX/0gOtJ/9nMjbnbk2Zl1bU6i9vtmAuSBudGaTA:3f1bFX/rOtJ/lMvbfJU6snpYdb
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

5792

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Name

.text

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

4KB

Virtual Size

8B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

4KB

Virtual Size

1008B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

568B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

$PLUGINSDIR/IEFunctions.dll

IMPHASH d3ade25d7710cc7b0801440c6df6098c
SHA256 3122b0413f74e88518cfd1b9c6e18435dd326ca177a2374b6405df78f43e776a
MD5 9701818d39318145dd164794ef3a3846
SHA1 7db701f8dc19163d46ba88e8b68d8dbf428a8152
SHA512 d92786630250e9eb6c47537b09684fa107f959b50d255c7f3952741eb438c3be47e171827d3a4407b049c33c12dad73f8ec381a7265b28a6d8ca101ff702e8a4
MD5 SHA1 SHA512

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

4876

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/InstallOptions.dll

IMPHASH b1cd0d78f652ce5fc63f0879371af012
SHA256 1f35bb6728237483c779005fc227e69fef51b0bafd32d15855d483948a337078
MD5 eef9e469e8a30717974499f277d97e2a
SHA1 2d33c25984ebd9116beeb55cdde4c5c86c023e5d
SHA512 d860132106a1c03dfa23f983b3c503f1216ac02f3d47833b96dfb333fb30bc8ab4d4fecd1f1f0a89f0c7f3586405461e2d53c26f282bb48970e549659b364b48
SSDEEP 192:8np6d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+MTjK72dwF7dBEnbok:8p6UdHXcIiY535zBtMTj+BEnbo
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

10696

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

SetCurrentDirectoryA GetCurrentDirectoryA MultiByteToWideChar GetPrivateProfileIntA GlobalLock GetModuleHandleA lstrcmpiA GetPrivateProfileStringA lstrcatA lstrcpynA WritePrivateProfileStringA lstrlenA lstrcpyA GlobalFree GlobalUnlock GlobalAlloc

user32

MapWindowPoints GetDlgCtrlID CloseClipboard GetClipboardData OpenClipboard PtInRect SetWindowRgn LoadIconA LoadImageA SetWindowLongA CreateWindowExA MapDialogRect SetWindowPos GetWindowRect CreateDialogParamA ShowWindow EnableMenuItem GetSystemMenu EnableWindow GetDlgItem DestroyIcon DestroyWindow DispatchMessageA TranslateMessage GetMessageA IsDialogMessageA LoadCursorA SetCursor DrawTextA GetWindowLongA DrawFocusRect CallWindowProcA PostMessageA MessageBoxA CharNextA wsprintfA GetWindowTextA SetWindowTextA SendMessageA GetClientRect

gdi32

SetTextColor CreateCompatibleDC GetObjectA GetDIBits CreateRectRgn CombineRgn DeleteObject SelectObject

shell32

SHBrowseForFolderA SHGetDesktopFolder SHGetPathFromIDListA ShellExecuteA

comdlg32

GetOpenFileNameA GetSaveFileNameA CommDlgExtendedError

ole32

CoTaskMemFree

$PLUGINSDIR/IsVista.dll

IMPHASH efa700f367af492674a29b601d27bd91
SHA256 17bb3331e2300aa01666fbee98b9552cec5e46212a4c5a340c0370b93df88f83
MD5 344d13fd0fdd2d97e8d61960f40a8a30
SHA1 3f0f120203005eea3e8ed1652a6ea8a607ea934d
SHA512 b4e49c58503532e270cc369f1cbd14d85edd46da5ab034dad730bd4297887dd541d445d2fbf205820e6afbbdba7ab6d5b78b694467554320fd6db8e06fe4f719
SSDEEP 384:x4MHyTfkIbqaddF1qabhJfl7Tisz7c7t3TyAvdjWu875USXdvlHZYklIsg:FSTpbqaLfHJflCszOTbdjWR3Nvl
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

4585

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/Ischeck.dll

IMPHASH 251a9619bbd921d60321154c493fcc9b
SHA256 544f3c2c03f7900539d4868437f8e08204c0b4c79357af666a1fb48d406c1ffd
MD5 6c1f65ce96712e05f64c7a26b7adee36
SHA1 6cea6c2618fb31902c52cb1d5fad04503bd34ed0
SHA512 5244d26d013dc2c7083bd4c167cac99307985babcabc1806a898a2621fce6b73d256b21d549bce8744f3221a51017ea5f621d2f6f5cd5aae83ec21ae41e5d5a6
SSDEEP 1536:1ki0RcSLEMxwjoTolPh9zyZFTEPmayYgH+t7Q0LtJhpdcOoyoJaZGUttW:IA/VHeZCP3ybHLK3hpdcO1oJaZttW
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

13071

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

WriteFile SetFilePointer FlushFileBuffers RtlUnwind GetCommandLineA GetTimeZoneInformation GetSystemTime GetLocalTime GetACP RaiseException HeapFree HeapSize HeapReAlloc ExitProcess TerminateProcess SetHandleCount GetStdHandle GetFileType GetStartupInfoA FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW GetEnvironmentVariableA GetVersionExA HeapDestroy HeapCreate VirtualFree LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW SetUnhandledExceptionFilter VirtualAlloc IsBadWritePtr IsBadReadPtr IsBadCodePtr SetStdHandle CompareStringA CompareStringW SetEnvironmentVariableA GetCurrentProcess GetOEMCP GetCPInfo GlobalFlags GetProcessVersion LoadLibraryA FreeLibrary GlobalGetAtomNameA lstrcmpiA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom GetModuleHandleA GetProcAddress GetLastError SetLastError lstrcmpA GetVersion GetModuleFileNameA lstrcatA SetErrorMode TlsGetValue LocalReAlloc TlsSetValue EnterCriticalSection GlobalReAlloc GlobalLock LeaveCriticalSection TlsFree GlobalHandle GlobalUnlock DeleteCriticalSection TlsAlloc InitializeCriticalSection LocalAlloc GetCurrentThreadId CloseHandle LocalFree MultiByteToWideChar WideCharToMultiByte lstrlenA InterlockedDecrement InterlockedIncrement GlobalAlloc lstrcpynA lstrcpyA GlobalFree GetPrivateProfileStringA GetTempPathA HeapAlloc DeleteFileA

advapi32

RegEnumKeyExA RegOpenKeyExA RegCloseKey RegQueryValueExA

comctl32

ord17

urlmon

URLDownloadToFileA

user32

EnableWindow CopyRect GetClientRect AdjustWindowRectEx SetFocus GetSysColor MapWindowPoints PostMessageA LoadIconA SetWindowTextA IsWindowEnabled LoadCursorA GetSysColorBrush ReleaseDC GetDC GetClassNameA PtInRect ClientToScreen PostQuitMessage DestroyMenu TabbedTextOutA DrawTextA GrayStringA GetTopWindow MessageBoxA GetCapture WinHelpA GetClassInfoA RegisterClassA GetMenu GetMenuItemCount GetSubMenu GetMenuItemID GetDlgItem GetWindowTextA GetDlgCtrlID DefWindowProcA DestroyWindow CreateWindowExA GetClassLongA SetPropA GetPropA CallWindowProcA RemovePropA GetMessageTime GetMessagePos GetLastActivePopup GetForegroundWindow SetForegroundWindow GetWindow GetWindowLongA SetWindowLongA SetWindowPos RegisterWindowMessageA SystemParametersInfoA IsIconic GetWindowRect GetSystemMetrics GetMenuCheckMarkDimensions LoadBitmapA GetMenuState ModifyMenuA SetMenuItemBitmaps CheckMenuItem EnableMenuItem GetFocus GetParent GetNextDlgTabItem LoadStringA UnregisterClassA UnhookWindowsHookEx DispatchMessageA SendMessageA GetKeyState CallNextHookEx PeekMessageA SetWindowsHookExA GetWindowPlacement

gdi32

SaveDC RestoreDC GetClipBox SelectObject GetStockObject SetMapMode SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowExtEx ScaleWindowExtEx DeleteDC SetTextColor PtVisible RectVisible TextOutA ExtTextOutA Escape DeleteObject GetDeviceCaps GetObjectA CreateBitmap SetBkColor

winspool.drv

ClosePrinter OpenPrinterA DocumentPropertiesA

$PLUGINSDIR/KillProcDLL.dll

IMPHASH 602d7a78172a6f5b4541df0fb5a6b875
SHA256 f38c669c87f2a73768a27a01622690997e9d93d5ca3830b349bd24c3ff9f8d2e
MD5 6958016193a066833556992077bad4fe
SHA1 5f564945936f99381d7e2408f034f97d069005a4
SHA512 fd6ab5c341b331b80c940ba97a2cd14547c796933a2df26d3dd87ede1602b86d9f8c37baebd7dd4c68d811199fc96a27ad4cb995bb8889d51af91db9f43ba0a7
SSDEEP 384:IL6T2Izs/XGCanZSwEfj5lwTSYlml89oayKA15JiQNRw/9uosAUdJofiiqd:88Y9gZSwq1lwTS2XA15DRm9cddJo6l
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

7415

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/SelfDelete.dll

IMPHASH 3d91458bc90a151726bcfdaeff902d08
SHA256 c0ad2c13d48c9fe62f898da822a5f08be3bf6c4e2c1c7ffdf7634f2ca4a8859e
MD5 7bf1bd7661385621c7908e36958f582e
SHA1 43242d7731c097e95fb96753c8262609ff929410
SHA512 8317af5cc3ac802eb095f3fa8cc71daa1265ca58fead031c07872f3d4bb07663a7002ae734fad392a7617f0923fe0caf1f54ed55afdf8516a6a08e202d86fa7f
SSDEEP 96:1dIrJYYrzPpqAAZ9sNIaI2y9WulXEGNRrG:nuYATpq/viyYuEYRr
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

5241

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/UserMgr.dll

IMPHASH bac2b3d4a0df9a23aee940b8ecd0d168
SHA256 955705c8c7188d06af16849e5cc3ceae79ea5d0808cc2851630a54d54bbc01f2
MD5 130f66c0161e6da46744abe3c0be4d9c
SHA1 d2a44a0cd07bc0c5d81fc0d056d6d45d200896ed
SHA512 915b9135da230ec8d3016ba83bd7102b3f8cb13050189a176f8d4d50363f13584fb971226458bc493cd2df27723c8ab7273effab7d6c6e14d49e735d24d7fac8
SSDEEP 768:fThBSJtwQegACHpCygw5eKeK/B/viiTRvTkujLWf2UEHzDSZA7yM5jt/BJE4lV:7SCQeLCHpCyNV9ZTRbkuOQzyMVt/blV
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

13593

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

LocalAlloc LocalFree GetEnvironmentVariableA GetProcessHeap HeapAlloc HeapReAlloc HeapFree GetCurrentProcess GetLastError CloseHandle FlushFileBuffers GetStringTypeW GetStringTypeA SetStdHandle LoadLibraryA GetProcAddress GetOEMCP GetACP GetCPInfo GlobalFree lstrcpyA lstrcpynA GlobalAlloc RtlUnwind InterlockedDecrement InterlockedIncrement GetCommandLineA GetVersion WideCharToMultiByte MultiByteToWideChar LCMapStringA LCMapStringW InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection ExitProcess TerminateProcess GetCurrentThreadId TlsSetValue TlsAlloc TlsFree SetLastError TlsGetValue SetHandleCount GetStdHandle GetFileType GetStartupInfoA GetModuleFileNameA FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW GetModuleHandleA GetVersionExA HeapDestroy HeapCreate VirtualFree WriteFile SetFilePointer VirtualAlloc

advapi32

LsaOpenPolicy LsaEnumerateAccountRights LsaNtStatusToWinError LsaFreeMemory GetNamedSecurityInfoA SetEntriesInAclA SetNamedSecurityInfoA LsaClose ConvertStringSidToSidA LookupAccountSidA GetUserNameA RegUnLoadKeyA ConvertSidToStringSidA RegOpenKeyExA LsaAddAccountRights LsaRemoveAccountRights AdjustTokenPrivileges LookupPrivilegeValueA OpenProcessToken LookupAccountNameA LogonUserA RegLoadKeyA RegCloseKey RegQueryValueExA

netapi32

NetUserAdd NetUserDel NetGroupDelUser NetLocalGroupGetMembers NetLocalGroupAddMembers NetLocalGroupAdd NetLocalGroupDel NetUserChangePassword NetUserSetInfo NetUserGetInfo NetWkstaUserGetInfo NetApiBufferFree

userenv

LoadUserProfileA UnloadUserProfile

$PLUGINSDIR/ioSpecial.ini

SHA256 d95aed234f932a1c48a2b1b0d98c60ca31f962310c03158e2884ab4ddd3ea1e0
MD5 e2d5070bc28db1ac745613689ff86067
SHA1 282e080b4cf847174c5c11e4f9157b8c338ecb19
SHA512 a50ca2014869629135b54e848f03cb4983ad8029cd811300d02b0fc54de0436185f418fea4d3db888eb0f3170e33a59d486aa885f024ab29e630e9bc0ae1a2de
MD5 SHA1 SHA512

NSIS installer

installer

$PLUGINSDIR/modern-wizard.bmp

SHA256 adfa387ab73662c2f7ca3d988e4d8f958db9a4241249ac70472d8dfcad579ecd
MD5 1404c101aaa1876bc74aee3bcd71820a
SHA1 b6b0fe0103ed34b781e01bdfbac54ffe606a18c6
SHA512 d15079e7d10c98c45d7525d5458a03ec6200f7d2c9923ddc2599e50c8e3312021cecf2cbf0927c845bfa30e0af5d7382ea509bf0caba1c3c4f86a966b67ce668
SSDEEP 384:MQTLynYSb8X9ddVHZZZ+F+p//fePNNMO96ZgTb:X3XgF+dePNNMO96ZAb
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/nsExec.dll

IMPHASH d83f71e61ee459ee63ca3e829966a9dc
SHA256 80b2740fb3a21ffab022a96ce6b420019072f8ef3a048fd9dea4a5b64498c0c8
MD5 cdff6b8f9523b6ef9f20fb5f9e90f1a5
SHA1 b25f6e0a19b41ff0a12de8e98e3005bc119d34fa
SHA512 62585c6a6103aed10f9a79c016df8cb630c3e37715542b5f26aa1a910771540c9b323ddbba3329db0ecf524143f7a27b782e198ce944317f764be6b9d04b792e
SSDEEP 96:W7GUb+YNfwgcr8zyKwZ5S4JxN8BS0ef9/3trCUTMxVXw32E:IKgfwgcr8zylsB49lrCUTMxVX7
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

4231

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/processes_second.dll

IMPHASH 522ca24d77f428ea710f83ca6b5d4867
SHA256 8fe4dad8f894bcdb9a83a9d302907de404695be4b50e619afd88f09d72583e69
MD5 f0a1eae66dd2f54fbe26c26db5493a6f
SHA1 46d56b4c6694da1ec4d88b0a5b153dad02b5dca7
SHA512 e1b3c946e90fc30b6cdf953c8c7e96121b462bf8529099e0587f7f243b9d73eeba52b510dd2598937f188f7a35bc1e3785b7589ec6c249996a5795c10dafd1e7
SSDEEP 3072:F+WSoWifAbFBgChOQcNg3kirQDNgv3gp9Ibzls8:iAAbFBgChOzNgUrDNgvgp
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

9760

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

e:\Nsis\플러그인\processes\setup-processes\src\Debug\processes.pdb

kernel32

FreeLibrary GetProcAddress LoadLibraryA CloseHandle OpenProcess TerminateProcess GlobalFree lstrcpyA CompareStringW CompareStringA GetLocaleInfoW GetSystemInfo VirtualProtect GetCurrentThreadId GetCommandLineA GetVersionExA DebugBreak RaiseException GetStdHandle WriteFile InterlockedDecrement OutputDebugStringA InterlockedIncrement GetModuleFileNameA GetCurrentProcess ExitProcess GetModuleHandleA TlsAlloc TlsFree TlsSetValue TlsGetValue SetLastError GetLastError GetCurrentThread IsBadWritePtr IsBadReadPtr HeapValidate SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapDestroy HeapCreate HeapFree VirtualFree UnhandledExceptionFilter RtlUnwind HeapAlloc GetProcessHeap SetFilePointer EnterCriticalSection LeaveCriticalSection FatalAppExitA SetConsoleCtrlHandler GetACP GetOEMCP GetCPInfo HeapReAlloc VirtualAlloc InitializeCriticalSection VirtualQuery InterlockedExchange SetStdHandle QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetTimeFormatA GetDateFormatA MultiByteToWideChar GetStringTypeA GetStringTypeW IsValidLocale IsValidCodePage GetLocaleInfoA EnumSystemLocalesA GetUserDefaultLCID LCMapStringA LCMapStringW FlushFileBuffers GetTimeZoneInformation SetEnvironmentVariableA

user32

FindWindowA UpdateWindow GetDesktopWindow wsprintfA

$PLUGINSDIR/stack.dll

IMPHASH 55ae76a2cfe164921f566c03cfbba5ec
SHA256 46b4a72ae8590b0afb3304cc5c13db0502bc4c4cb02f64f37c79008c17db814f
MD5 0f61a81a543822de5fcb9a8a43f230dd
SHA1 d01d4a0f542f3c654637fdfe5a574fe1f150ece1
SHA512 596b7a897ba64c32e26ba6168aa3628aad37b187a9814a286298307d8c42eabf8e8a679dbda558f8b2cdc8676c94ec819256432aa5ad7c05a5387759262a4402
SSDEEP 192:VBEc/BwQV5gTRk6uIu8uQubQuNu3fufuXuPDyuSuFujournu6udkuUuw0y9UrVo:VBEwBZmx97TSefeC/zIqoInvEkJ8y9x
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

6347

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/xml.dll

IMPHASH b5ed5b3a951d4443ce56e5453702d536
SHA256 e900fcb9d598643eb0ee3e4005da925e73e70dbaa010edc4473e99ea0638b845
MD5 42df1fbaa87567adf2b4050805a1a545
SHA1 b892a6efbb39b7144248e0c0d79e53da474a9373
SHA512 4537d408e2f54d07b018907c787da6c7340f909a1789416de33d090055eda8918f338d8571bc3b438dd89e5e03e0ded70c86702666f12adb98523a91cbb1de1d
SSDEEP 1536:U2A8OSGjylgkara+70LICin9zgtg2LxowhtJu6MqSNicNEtIfF42q2KC:OzjLkarn7O+n9z2L6whFtGF42bK
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

60879

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$TEMP/test.xml

SHA256 59405c88719a13ae92c441b4d5c81366c51444844cdef9d111fe1129b0ac7c0b
MD5 697029af9e5ddff0063f916d935d3f93
SHA1 eb0d88512ef39d18bc32a41d100b66746afc1dff
SHA512 4108cc6568caed245eb309572517a9e8ada44802e49bde9aaae8fd469b019e6452390270db2e6bb79803d92a4584102f5363c7a56d8999e009d4dec936577f70
MD5 SHA1 SHA512

NSIS installer

installer

ACAutoUpdate.exe

IMPHASH 1029228069b56e4392e0fd2538aa683a
SHA256 7fbbb22efb4b6169ea8e1473c6d9ab191dec0042db07a766721010be253be41c
MD5 4ded0bfb76d5ee29c14f9e0918da0c70
SHA1 b472a4477f8ae6562e7304d58d20fab4a9762c35
SHA512 d27fafec3054d8abd160907b096e708110be61c5195d4f38958b8af15ce96b23b3a487c9601d4dd8e3d71bdb18862b6e6a9badeee032e9a24120dc97b7aa089f
SSDEEP 12288:G5gjWMEQ8SvMqBMX4xglBpv09kEWorxhyPH:FjDEZhXdBCWorjyP
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

133210

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetOEMCP SetErrorMode GetTickCount RtlUnwind GetTimeZoneInformation GetSystemTime GetLocalTime RaiseException HeapFree HeapAlloc GetStartupInfoA GetCommandLineA CreateThread ExitThread SetStdHandle GetFileType GetACP HeapReAlloc HeapSize SetUnhandledExceptionFilter GetEnvironmentVariableA GetVersionExA HeapDestroy HeapCreate VirtualFree GetCPInfo IsBadWritePtr LCMapStringA LCMapStringW UnhandledExceptionFilter FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW SetHandleCount GetStdHandle GetStringTypeA GetStringTypeW IsBadReadPtr IsBadCodePtr IsValidLocale IsValidCodePage EnumSystemLocalesA GetUserDefaultLCID GetLocaleInfoW CompareStringA CompareStringW SetEnvironmentVariableA SizeofResource GetProcessVersion GetProfileStringA InterlockedExchange WritePrivateProfileStringA GlobalFlags TlsGetValue LocalReAlloc TlsSetValue GlobalReAlloc TlsFree GlobalHandle TlsAlloc GetFileTime GetFileAttributesA FileTimeToLocalFileTime FileTimeToSystemTime LeaveCriticalSection DeleteCriticalSection InitializeCriticalSection LocalAlloc EnterCriticalSection GetThreadLocale GetFullPathNameA lstrcpynA GetVolumeInformationA MoveFileA SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer DuplicateHandle MulDiv SetLastError LoadLibraryA FreeLibrary GetVersion lstrcatA GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GetModuleHandleA GetProcAddress InterlockedDecrement InterlockedIncrement GlobalUnlock GlobalFree LockResource FindResourceA LoadResource CreateEventA SuspendThread SetEvent GlobalLock GlobalAlloc GlobalDeleteAtom lstrcmpA GetCurrentThreadId MultiByteToWideChar WideCharToMultiByte CreateToolhelp32Snapshot Process32First Process32Next OpenProcess GetExitCodeProcess TerminateProcess WaitForSingleObject Sleep SetFileAttributesA FindNextFileA GetWindowsDirectoryA GetSystemDirectoryA CopyFileA WinExec DeleteFileA FormatMessageA LocalFree lstrcmpiA GetLocaleInfoA GetFileSize ReadFile CreateDirectoryA FindFirstFileA FindClose CreateFileA GetModuleFileNameA lstrcpyA lstrlenA WriteFile CloseHandle CreateProcessA SetThreadPriority GetCurrentThread GetCurrentProcess SetPriorityClass ResumeThread ExitProcess CreateMutexA VirtualAlloc GetLastError

user32

InvalidateRect RegisterClipboardFormatA PostThreadMessageA GetTopWindow IsChild GetCapture WinHelpA GetClassInfoA RegisterClassA GetMenu GetMenuItemCount GetSubMenu GetMenuItemID CreateWindowExA GetClassLongA SetPropA UnhookWindowsHookEx GetPropA CallWindowProcA RemovePropA DefWindowProcA GetMessageTime GetMessagePos GetForegroundWindow SetForegroundWindow RegisterWindowMessageA OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement GetWindowRect MapDialogRect GetWindow SetWindowContextHelpId SetFocus ShowWindow SetWindowPos MoveWindow SetWindowLongA GetDlgCtrlID GetWindowTextLengthA GetWindowTextA SetWindowTextA IsDialogMessageA CopyRect GetDC ReleaseDC EndDialog SetActiveWindow IsWindow CreateDialogIndirectParamA DestroyWindow GetNextDlgGroupItem GetMenuCheckMarkDimensions LoadBitmapA GetMenuState ModifyMenuA SetMenuItemBitmaps CheckMenuItem EnableMenuItem GetFocus GetNextDlgTabItem GetMessageA TranslateMessage DispatchMessageA wsprintfA LoadIconA EnableWindow UnregisterClassA HideCaret ShowCaret ExcludeUpdateRgn DrawFocusRect GetActiveWindow GetKeyState CallNextHookEx ValidateRect IsWindowVisible PeekMessageA GetCursorPos SetWindowsHookExA GetParent GetLastActivePopup IsWindowEnabled GetWindowLongA MessageBoxA DestroyMenu SetCursor PostMessageA FindWindowA PostQuitMessage KillTimer IsIconic GetSystemMetrics GetClientRect DrawIcon DefDlgProcA IsWindowUnicode SetTimer SendMessageA CopyAcceleratorTableA MessageBeep CharNextA InflateRect LoadStringA GetSysColorBrush PtInRect GetClassNameA GetDesktopWindow CharUpperA GrayStringA DrawTextA TabbedTextOutA EndPaint BeginPaint GetWindowDC ClientToScreen UpdateWindow MapWindowPoints GetSysColor GetDlgItem SetRect AdjustWindowRectEx ScreenToClient SendDlgItemMessageA LoadCursorA

gdi32

ScaleViewportExtEx SetWindowExtEx ScaleWindowExtEx IntersectClipRect DeleteObject SetViewportExtEx GetDeviceCaps GetViewportExtEx GetWindowExtEx CreateSolidBrush PtVisible RectVisible TextOutA ExtTextOutA Escape GetMapMode DPtoLP GetTextColor GetBkColor LPtoDP OffsetViewportOrgEx SetViewportOrgEx SetMapMode SetBkMode GetStockObject SelectObject RestoreDC SaveDC DeleteDC GetObjectA SetBkColor SetTextColor GetClipBox PatBlt CreateDIBitmap GetTextExtentPointA BitBlt CreateCompatibleDC CreateBitmap

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA OpenPrinterA ClosePrinter

advapi32

RegCloseKey RegCreateKeyExA RegOpenKeyExA RegSetValueExA

shell32

ShellExecuteA

comctl32

ord17

oledlg

ord8

ole32

CoRegisterMessageFilter OleFlushClipboard OleIsCurrentClipboard CoFreeUnusedLibraries OleUninitialize OleInitialize CoGetClassObject CLSIDFromString CLSIDFromProgID CoTaskMemAlloc CoTaskMemFree CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoRevokeClassObject

olepro32

ord253

oleaut32

VariantCopy SysAllocStringLen VariantClear SysAllocString SysFreeString VariantTimeToSystemTime SysStringLen SysAllocStringByteLen VariantChangeType

urlmon

URLDownloadToFileA

wininet

InternetGetLastResponseInfoA InternetQueryDataAvailable InternetWriteFile InternetSetFilePointer InternetSetStatusCallback InternetOpenUrlA InternetCloseHandle InternetReadFile HttpSendRequestA HttpOpenRequestA InternetConnectA InternetOpenA InternetGetConnectedState DeleteUrlCacheEntry InternetCrackUrlA InternetCanonicalizeUrlA InternetQueryOptionA

ws2_32

WSACleanup gethostname gethostbyname WSAStartup

shlwapi

StrFormatByteSizeA

ACEngine.dll

IMPHASH e57041b0e26d64c7363fe70e871bea28
SHA256 fa40d841ad1539ef4044c639641cf3200e22353a49fb009938770004770dae73
MD5 4d600f22c42bd968f920a7ec4ab8c7b4
SHA1 78d19dd519c187af41e866feba8c4542bdbd61fa
SHA512 cca58fbac2b984cfaa28caf8d66e8f7cbc4b6335b01e201e2567ac454a53bb9b98f8a801708621d49f8790d3d10fa3d1a2f794c281b7120aa01ddcb545fa7549
SSDEEP 12288:yXWJ4FBAiRWQzALZzGxlG4Wt9x7jtihzDdPMqY0XpJlFujxT:yXW0BAiRWmALZzGxlG409x7rqY0Ztujx
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

438490

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

version

GetFileVersionInfoA VerQueryValueA GetFileVersionInfoSizeA

kernel32

Process32First GetTempPathA FindNextFileA RemoveDirectoryA GetPrivateProfileStringA Sleep MoveFileExA HeapFree HeapAlloc GetProcessHeap WriteFile ReadFile CreateDirectoryA MapViewOfFile CreateFileMappingA UnmapViewOfFile GlobalFree Process32Next GetLocalTime lstrcpyA GetFileAttributesA lstrlenA lstrcatA SetFileTime LocalFileTimeToFileTime DosDateTimeToFileTime GetFileTime SetFilePointer SystemTimeToFileTime GetCurrentDirectoryA FileTimeToSystemTime GetFileInformationByHandle GetTickCount LoadLibraryA IsBadCodePtr IsBadReadPtr GetProcAddress GetUserDefaultLCID EnumSystemLocalesA GetLocaleInfoA CreateToolhelp32Snapshot Module32First Module32Next GetWindowsDirectoryA GetSystemDirectoryA OpenProcess TerminateProcess WaitForSingleObject CreateFileA GetLongPathNameA FindFirstFileA FindClose SetFileAttributesA WinExec GetModuleFileNameA DeleteFileA GetCurrentProcess CloseHandle SetEnvironmentVariableA lstrcmpiA GetVersionExA GetStdHandle MultiByteToWideChar lstrlenW WideCharToMultiByte GetFileSize GetLastError SetEndOfFile GetLocaleInfoW GlobalAlloc IsValidCodePage IsValidLocale GetEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsW FreeEnvironmentStringsA FlushFileBuffers SetUnhandledExceptionFilter GetStartupInfoA SetHandleCount GetStringTypeW GetStringTypeA IsBadWritePtr VirtualAlloc VirtualFree HeapCreate HeapDestroy GetEnvironmentVariableA GetModuleHandleA GetOEMCP GetACP EnterCriticalSection InitializeCriticalSection InterlockedExchange DeleteCriticalSection LeaveCriticalSection InterlockedDecrement InterlockedIncrement RtlUnwind HeapReAlloc SetStdHandle GetFileType ExitProcess RaiseException GetTimeZoneInformation GetSystemTime MoveFileA GetCommandLineA GetVersion LCMapStringA LCMapStringW GetCPInfo CompareStringA CompareStringW GetCurrentThreadId TlsSetValue TlsAlloc TlsFree SetLastError TlsGetValue HeapSize

user32

wsprintfA GetDesktopWindow MessageBoxA FindWindowA SendMessageA

advapi32

FreeSid RegQueryInfoKeyA GetUserNameA RegGetKeySecurity GetSidIdentifierAuthority GetSidSubAuthorityCount GetSidSubAuthority CopySid AddAce RegCreateKeyA AllocateAndInitializeSid GetLengthSid InitializeAcl AddAccessAllowedAce RegEnumValueA RegEnumKeyExA RegDeleteKeyA RegEnumKeyA InitializeSecurityDescriptor SetSecurityDescriptorDacl RegSetKeySecurity GetTokenInformation LookupAccountSidA RegDeleteValueA RegOpenKeyA RegSetValueExA OpenProcessToken LookupPrivilegeValueA AdjustTokenPrivileges RegOpenKeyExA RegQueryValueExA RegCloseKey

shell32

SHFileOperationA SHGetSpecialFolderPathA SHEmptyRecycleBinA

ole32

CoUninitialize CoCreateInstance CoInitialize

oleaut32

SysFreeString SysAllocStringLen

netapi32

NetApiBufferFree NetQueryDisplayInformation

wininet

FindFirstUrlCacheEntryA FindNextUrlCacheEntryA DeleteUrlCacheEntry

shlwapi

SHDeleteKeyA

ACUpdateServer.dat

SHA256 cc024b9f9b5adf7df63d0468e9c499cc4a8a7c6c64a365cf88abb4f4e09f0b42
MD5 04da52cbc0406d470f339f26b0d056ec
SHA1 bbf563cf411a99015af13d4b0ae4ce391dc9e291
SHA512 10d3c8699a7f7c311eeaa1c4abf1a68398654a0be04edca67a8bc295614253fb003a6c010d61656b8f96f15e85da95d30af08ae1d4a94e5ba3b127b65f46ce58
MD5 SHA1 SHA512

NSIS installer

installer

AntiCare.exe

IMPHASH 8c5bd1241294b9da289f6a9e4a9e0513
SHA256 557d1d676a79d054316dd097ba500a8a523fa5e096198d40c705d7f3f0be4b7c
MD5 fbdf35d1ab4c03ff7f85a7765618f500
SHA1 141cdd7a6c419ce696ef8fb3e11d4eb01f868d67
SHA512 fb44c4c8a6ce44bab4b707f078017054b2f9add25b396e765360ec384c50a39c9458411be250464680a4cf7a2b326088f90a480b47fa1af87c182bc63e63567d
SSDEEP 12288:NrEMZ2bP7yD5U60mQZYxylG4CuMsssCMV:NrC7yD5UvZYxylG4Cj
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

341713

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

acengine

PowerScan GetScanCurrentPos Init2 Engine2 Release AdRepair GetScanCurrentCount Scan GetRestartAVmon Quarantine_Close AdFailedRepair Repair QuarantinePow Quarantine Quarantine_Create ClearSearchFileFolder ClearSearchComputerAndPeople ClearSearchPictureAndMusicAndVideo ClearSearchInternet ClearRunList ClearMediaPlayLog ClearRecent ClearTemp ClearWinTemp ClearRecycleBin ClearHistory ClearAutoForm ClearSiteVisitedLog ClearIECache ClearCookie Quarantine_Restore GetRestoreCount Quarantine_RestoreInit

msvcrt

__p__commode _adjust_fdiv __setusermatherr _initterm __getmainargs _acmdln _XcptFilter _exit _except_handler3 _onexit __dllonexit ??1type_info@@UAE@XZ __p__fmode _beginthreadex exit _CxxThrowException ??0exception@@QAE@ABQBD@Z ??1exception@@UAE@XZ ??0exception@@QAE@ABV0@@Z malloc fprintf _setmbcp _itoa __set_app_type __CxxFrameHandler ??3@YAXPAX@Z sprintf _splitpath _mbscmp atoi ??2@YAPAXI@Z strtok strstr fclose fopen strncmp printf fread _iob _mbsnbcpy _mbschr _mbsstr _ftol free calloc _controlfp

mfc42

ord2379 ord800 ord3089 ord3874 ord540 ord4809 ord858 ord535 ord2915 ord860 ord924 ord2818 ord537 ord6648 ord939 ord6877 ord941 ord4129 ord2642 ord1200 ord1175 ord1168 ord665 ord2764 ord5572 ord354 ord4204 ord6883 ord4277 ord6143 ord6930 ord5265 ord4376 ord4853 ord4998 ord2514 ord6052 ord1775 ord4407 ord4425 ord3597 ord641 ord324 ord2302 ord4234 ord4710 ord755 ord470 ord6889 ord6676 ord3914 ord4224 ord5280 ord5861 ord1768 ord801 ord541 ord2614 ord668 ord3181 ord4215 ord1980 ord3178 ord4058 ord2781 ord2770 ord922 ord356 ord1979 ord5442 ord5186 ord5683 ord4299 ord6215 ord2086 ord4284 ord2100 ord1105 ord3301 ord6675 ord4278 ord6880 ord3753 ord6453 ord1945 ord4589 ord4588 ord4899 ord4370 ord4892 ord5076 ord4341 ord4349 ord4723 ord4890 ord4531 ord4545 ord4543 ord4526 ord4529 ord4524 ord4964 ord4961 ord4108 ord5240 ord3748 ord1726 ord5260 ord4432 ord813 ord560 ord4273 ord3663 ord3571 ord3626 ord2864 ord2414 ord6172 ord5873 ord5785 ord1641 ord1640 ord323 ord2575 ord4396 ord3574 ord609 ord556 ord809 ord2859 ord4202 ord5856 ord6283 ord6282 ord4673 ord4274 ord6375 ord4486 ord2554 ord2512 ord5731 ord3922 ord1089 ord5199 ord2396 ord3346 ord5300 ord5302 ord2725 ord4079 ord4698 ord5307 ord5289 ord5714 ord4622 ord3738 ord815 ord561 ord2621 ord1134 ord1146 ord6199 ord3610 ord656 ord283 ord5875 ord4476 ord5710 ord6662 ord940 ord5440 ord6383 ord5450 ord6394 ord5651 ord3616 ord3127 ord3318 ord350 ord3698 ord765 ord3797 ord6907 ord3998 ord3996 ord6007 ord816 ord6605 ord5789 ord562 ord2582 ord4402 ord3370 ord3640 ord3619 ord3573 ord3693 ord773 ord686 ord693 ord501 ord384 ord5600 ord5621 ord4243 ord2862 ord2097 ord2116 ord6242 ord6696 ord1083 ord415 ord5597 ord715 ord6888 ord1081 ord3286 ord3302 ord2405 ord3293 ord4133 ord4297 ord5788 ord6762 ord4287 ord2080 ord2652 ord1669 ord6905 ord5607 ord2762 ord5605 ord6197 ord2841 ord2107 ord5601 ord1783 ord3092 ord1779 ord3098 ord3873 ord3398 ord3733 ord810 ord4271 ord3303 ord3287 ord4400 ord3630 ord682 ord2971 ord5759 ord6192 ord5756 ord6186 ord4330 ord6189 ord6021 ord5794 ord5678 ord5736 ord5579 ord5571 ord6061 ord5864 ord3596 ord2380 ord2754 ord3721 ord795 ord3754 ord613 ord289 ord2408 ord2714 ord1949 ord818 ord2152 ord1233 ord3810 ord4220 ord2584 ord3654 ord2863 ord2438 ord1644 ord920 ord6458 ord2546 ord2616 ord291 ord5823 ord3664 ord5641 ord1871 ord6571 ord879 ord882 ord3993 ord996 ord1795 ord4023 ord5787 ord926 ord2243 ord2860 ord5981 ord4275 ord567 ord542 ord1086 ord616 ord802 ord3582 ord4424 ord4627 ord4080 ord3079 ord3825 ord3831 ord3830 ord3402 ord2976 ord3081 ord2985 ord3262 ord3136 ord4465 ord3259 ord3147 ord2982 ord5277 ord2124 ord2446 ord5261 ord1727 ord5065 ord3749 ord6376 ord2055 ord2648 ord4441 ord4837 ord3798 ord5290 ord4353 ord6374 ord5163 ord2385 ord5241 ord4398 ord1776 ord4078 ord6055 ord2578 ord4218 ord2023 ord2411 ord640 ord1576

kernel32

GetStartupInfoA GetModuleHandleA UnmapViewOfFile WriteFile SetFileTime GetFileAttributesA LocalFileTimeToFileTime GetCurrentDirectoryA SystemTimeToFileTime SetFilePointer GetVersion GetLocaleInfoA SetFileAttributesA RemoveDirectoryA GetTempPathA lstrcpyA lstrcatA WideCharToMultiByte DeleteFileA FindNextFileA GlobalAlloc GlobalLock GlobalUnlock MulDiv Sleep OpenProcess TerminateProcess GetTickCount WinExec CreateMutexA GetLastError lstrlenA GetCurrentProcess InitializeCriticalSection EnterCriticalSection DeleteCriticalSection SuspendThread ResumeThread GetSystemDirectoryA CreateFileA GetFileSize ReadFile CreateToolhelp32Snapshot Process32First Process32Next CloseHandle MultiByteToWideChar lstrcmpiA CreateDirectoryA WaitForSingleObject GetExitCodeProcess CreateProcessA FindFirstFileA FindClose GetVersionExA WritePrivateProfileStringA GetWindowsDirectoryA GetModuleFileNameA GetPrivateProfileStringA ExitProcess GetPrivateProfileIntA GetLocalTime

user32

wsprintfA GetDC GetFocus UpdateWindow DrawFrameControl CopyRect GetSysColor DrawFocusRect GetForegroundWindow SetActiveWindow InflateRect FrameRect IsRectEmpty LoadBitmapA GetWindowDC OffsetRect FillRect ReleaseDC PostQuitMessage FindWindowA LoadCursorA TrackPopupMenu DrawIcon PeekMessageA LoadIconA PtInRect SetCursor GetWindowRect ExitWindowsEx IsWindowVisible GetSystemMetrics GetClientRect RedrawWindow GetCursorPos ScreenToClient InvalidateRect SetForegroundWindow KillTimer SetTimer MessageBoxA EnableWindow SendMessageA GetParent ModifyMenuA GetMenuItemCount GetMenuItemID LoadMenuA GetSubMenu SetMenuDefaultItem IsWindow RegisterWindowMessageA ReleaseCapture SetCapture GrayStringA PostMessageA TranslateMessage DispatchMessageA DrawTextA TabbedTextOutA IsIconic LoadImageA

gdi32

CreateFontIndirectA RoundRect Escape TextOutA RectVisible PtVisible StretchBlt CreateDIBSection Rectangle ExtTextOutA CreatePen CreateSolidBrush CreateFontA GetTextExtentPoint32A SelectObject DeleteObject GetObjectA GetStockObject CreateCompatibleDC CreateCompatibleBitmap BitBlt CreateBitmap

advapi32

OpenProcessToken RegDeleteValueA RegOpenKeyA RegSetValueExA RegQueryValueExA RegCreateKeyA AdjustTokenPrivileges RegCloseKey LookupPrivilegeValueA

shell32

SHGetMalloc SHGetDesktopFolder SHGetSpecialFolderPathA SHGetPathFromIDListA ShellExecuteA SHGetFileInfoA Shell_NotifyIconA

comctl32

FlatSB_EnableScrollBar InitializeFlatSB ImageList_GetIconSize ImageList_Draw ImageList_DrawEx _TrackMouseEvent

ole32

CoInitializeEx CreateStreamOnHGlobal CoCreateInstance CoUninitialize

olepro32

ord251

msvcp60

??0_Lockit@std@@QAE@XZ ??1_Lockit@std@@QAE@XZ

wininet

InternetOpenA InternetCloseHandle InternetReadFile HttpSendRequestA HttpOpenRequestA InternetConnectA

netapi32

Netbios

Ep.dat

SHA256 8a77cec4ae0d47c13e73da5ccbf41fbdb1e48c5b1f3375720d493db422921529
MD5 c86d6f3a710adae080be7a18a5671697
SHA1 9b3b1bd2645012950b7aff3beee13e3050acf390
SHA512 21b8b620317ba95c8d0135c97db8d59e2559844ba85d0c5eb237ba2c6e6460eba106fc29f791d74b8fac51210f97d57b8903784123593d1082e75c392194e744
MD5 SHA1 SHA512

NSIS installer

installer

Lang/kr.xml

SHA256 341c20abe1ae2bae863e8975700626b54bddd7c6f37496c5fbb6ffb614cf5761
MD5 3e47a217533430bd36fa90749b1e0ea1
SHA1 b7616921e9f3c616ce48acfa8153535f71450edc
SHA512 2ce1eeb3cdc3a07291cd4787c19117441e7280d9bfb28e66f6b0c218999b4952e0e6af3058b0fdfd28da281c87247a30180303ce022f670d49151bf58506012f
SSDEEP 96:2epxUWs/uQRdxYxGGExGxhq90qg7y75UtHiZIBHIfYHMTexxaU:19sX+qg7W+Uyrr
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

SoACUpdateServer.dat

SHA256 1ea71bc758e201e00fc6727cc23cfe5914a351e7c9e26a8749357be4978158e0
MD5 c70aea8d42577e3126cd8755665d3879
SHA1 99c8578f46b0c29e191cf9193271a26a1cffc38b
SHA512 5262aeb4b5af0c2754cd53aa107a3ca94bd98069b527f9c4959881f713510e6608c2615dcf971fbd60a2a76cb870eb4e1a88ae8a62f1359fd40eb0dc5994bcac
MD5 SHA1 SHA512

NSIS installer

installer

conf.ini

SHA256 7e9a948e52db7296cf4f4a54b323f9f1e46f38fab78221cc0af5ed4dcfffcae6
MD5 f7423b5cd91232db807e7c5e6539dbdd
SHA1 260cee065c8965ef900c84fa3dfbc911758e2617
SHA512 172f9a9df2862a90e033c9fcdb538b33b1dfb82bbef86ca6064f50945b4b047bb9e866870a78de7ae5d653df89dfa82a7fef0298857ed0c3acccf7cb860303dc
MD5 SHA1 SHA512

NSIS installer

installer

db/addb.dat

SHA256 c768b0b1266308f5f78829c75e407c8a8f5eb1e10bacad2dcf1ff9c94724cb1e
MD5 a1fb5ea3b07840121eae02b7ed78d184
SHA1 6ec8272b141cc8026486db2cf63c58331bd711c5
SHA512 6e5a407f3ef73837f8bd16ea50274ba7bd539ce374b2e62591f9e68fda49d2becd8d791e18601597dca012cb90653ec0273a625dc9a7d3b7013bdd78b26a435d
SSDEEP 24576:w9mkqlR1uOg6ulARbedfB64ONSzGIUOn+4s/n+oNT:wNeR1uOg6ulARb8fvinn+oZ
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

db/adsub.dat

SHA256 da582b36a91eda5a7d8af4e00b9b12c979a78170cd1d2f7e631e0b7248fdf596
MD5 9d5ffc01d2290fd394736065c34c6be1
SHA1 0562f340b4cbb1a06c95bd5845c425b73fdb4632
SHA512 b2903fca9c0f984c4fd8e2035ee417f60b1815c18f6167c1e8beb9fb3b8f3ba958490e1f55da481040104b17ce9f3231f70d1832c7b115f9f8ee8316caae8750
SSDEEP 6144:0v1U5hImDAFs1l+DQ1lL/pw6K5C/mAECvMtPpp:0qGw+0X1OE6CvMP7
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

db/adtc.dat

SHA256 f68993dadbcbd347827979df35f87d81fd615fcd742b41f25a347f710f4df7a3
MD5 ca7e8ea1f3d08d6c29566f1727002f17
SHA1 c236ffb1f207e01c30e1018d57500bcf064e4b6a
SHA512 b4c1248ccea3011945032adbd63e697d978c0a9051d4101d62bcb06976f8797e24aebeb3e3eec97efa20d8dab17c3bbd4001ecb6d5bba5eb70675d34594e1acb
SSDEEP 192:oPR1K/kzRN33v4M2DFkYCLQ6otQSh05Gua1pb9ioII4VpIiTcXVMpalV/V/d:o51EkNNnv4M2DFHcotla5nYp5iPI4PoV
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

db/avmon.dat

SHA256 7f5fc558b195bf36492f39e3c837968c64e59fde85ccf8afb2bbae46b00cb849
MD5 38bfca3c295e1278ae60703d41ab6c15
SHA1 13f0366056c0c7af500a50bd687c52fee0151d73
SHA512 55199f8b439370da48bf75b1269fa6b8a1b8f0d13eb96d1a20d2d9c9c3c53c5700192280f6dfb1773a4ad8f4ccf4e2cd3453ae82e763f92626345be6ab630069
SSDEEP 6144:VpGck+qQObY6T+ywNaqUHhuIS5mb4kcnE+HDeZKr:kRbz+yIa3huIrQeZKr
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

db/filter.dll

SHA256 3e2265d442a8345d1fd73d817225664fa4b00092a62027358396765036f34429
MD5 29430dc8675d9baa5300109417ea7a0d
SHA1 6eae5d0fe8e2c954b48c19de0f68b645094b6d5b
SHA512 d699e87382bc1d9cc97b748800ae91c560a0745ca77afdbab9d13670fd25f37a46cfedb7666c529aafa6e87e85042691eb65bab9a4014739c7cc8157f9a069f9
MD5 SHA1 SHA512

NSIS installer

installer

db/inter.dll

SHA256 ffe4add885278b3f81a13d1e7243dbd8daa30fc3017d8ded0c6009b963bb01bc
MD5 b7ed86b36d7547394ba33bf93e64f1da
SHA1 189fb8dd13c59864d428428a9949c0e7aa19ed4b
SHA512 ede03d9f473c105e5f20b68ef9f857f66862b2dd8d50ae81c2d394a7acb2390f66a60d42c75c2dd6b6dc5c22601f009e8b5724c6533b5b69a46a14c7336aeb05
SSDEEP 6144:ljmK22l38tTZFGUCfdsA3Apwr5+aKkswz/9:Z8lGNdXAcKksi
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

db/pwdb.dat

SHA256 7739b3ae836e84e773075829df940ea21c1e0162b83fba4940cb2f6b6b7c290c
MD5 aa7861eb3ef1373e5696619f9c7f2b76
SHA1 2bb932df798c745a1ac6e8bff8c1c043982672f8
SHA512 ecefb74023573fa7ef059cb084aeacec7e9c4d0a43d6cd6d6848e8bd382405a446d2f4869f2573b1a0b5bb3670a368c0c5e321f7177b6f83a302759f67a0a432
SSDEEP 6144:1knI5ZhTKHC1YT9p455gi7rC2dNXQt82gwxf/pR6ksV8PRKrFaSvQ7M:2I5ZhTKut55r7rBVQt82goR6gZKJaSvX
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

db/vsdb.dat

SHA256 81fdcc5700f3479d634349c2abf27e623724f9e5700675270635a43914bd55be
MD5 8eb27ec40f7a56f79879d02e62433b00
SHA1 99f861730601c3d02406e2aaa830a08f107df465
SHA512 9c0cf36193c27d84903263d61543b12f904c31a0d9d548d6d5f1d517c73107c45c106b941280f19e5a18692afe4f3f3d563694d13ed0c88787202f331a0356ad
SSDEEP 3072:YeMP0LvBLgadoiAwMZE3C3sOAyKLMOUUafEOnEQfZc8D:pM4vBLzoEyG/gORKK8D
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

etc/ACFilterDriver.SYS

IMPHASH 9038267dffe5d0d2eb21c81354dee3f8
SHA256 2f65f0df035e6c13f92ba592a27d9a124f0aaf38639e7bc6da77faf94e679708
MD5 223fe0deba092b9f6272e26017d37e8f
SHA1 da874bdb35f5493e576a17b52e682d19fcdd9193
SHA512 2a1fc42bd4800b7be9eadc782fda5ed4d764c31c2524594dafe52dcbb21d9f276d7eb1daabf11fabf0effe9a52a7a88e4a8f414c2b078e13c666e5da34413ed7
SSDEEP 768:eQfN77x9bqKE3QJaSqMNlSWlJ2FyThGWKDxeWjXy5yQLO3EzJ4pOg99GJFaatHCo:1tlbs2aRbIxLzmnGfRit9EX
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

26288

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

22KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

INIT

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

etc/ACmonRemote.dll

IMPHASH ea7c687cee86e16921d6a74d46409d39
SHA256 a1233eef47fc3c7f1f9a002ea8633f89c73e87d42be422d332f652e92ade9249
MD5 f6a377a7f2250d899ccc1f19c3e81bd9
SHA1 177c714bc91aea3783444739e1fabb3bccc12230
SHA512 b1a6d6a7fd8516ff79c8df4c65324967a844afc317d29c3ed8871e24489101d1a8c68a19efd8d5c2f9df8683a8e12674f45fe3d0d07d7fd01f60b86b51b19aec
SSDEEP 6144:rOdjTNI+pY3SedgCPC+W33Lg1CssTcNNxbHsyqv4Tv:aNBLHsrLxbH3v
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

137836

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

UnmapViewOfFile WriteFile lstrcpyA lstrlenA lstrcatA LocalFileTimeToFileTime DosDateTimeToFileTime GetFileTime GetTempPathA Process32First Process32Next CreateToolhelp32Snapshot Module32First Module32Next GetSystemDirectoryA OpenProcess TerminateProcess WaitForSingleObject GetLongPathNameA CreateDirectoryA GetCurrentProcess GetVersionExA lstrcmpiA GetVersion CreateFileA GetFileSize GetLastError Sleep CloseHandle GetModuleFileNameA GetWindowsDirectoryA DeviceIoControl GetLogicalDrives GetDriveTypeA SetFileAttributesA FindFirstFileA DeleteFileA SetFileTime FindClose

user32

wsprintfA SendMessageA FindWindowA SetTimer KillTimer MessageBoxA

advapi32

RegCreateKeyA RegSetValueExA RegEnumKeyExA RegDeleteKeyA RegEnumKeyA InitializeSecurityDescriptor SetSecurityDescriptorDacl RegSetKeySecurity RegOpenKeyA RegDeleteValueA OpenProcessToken LookupPrivilegeValueA AdjustTokenPrivileges RegOpenKeyExA RegQueryValueExA RegCloseKey OpenSCManagerA DeleteService ControlService OpenServiceA StartServiceA CreateServiceA CloseServiceHandle

shell32

SHGetSpecialFolderPathA

msvcp60

?close@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ ??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ ??_8?$basic_ifstream@DU?$char_traits@D@std@@@std@@7B@ ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??0?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAE@PAU_iobuf@@@Z ??_7?$basic_ifstream@DU?$char_traits@D@std@@@std@@6B@ ?open@?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAEPAV12@PBDH@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z ??_8?$basic_ofstream@DU?$char_traits@D@std@@@std@@7B@ ??_7?$basic_ofstream@DU?$char_traits@D@std@@@std@@6B@ ??1_Lockit@std@@QAE@XZ ??0_Lockit@std@@QAE@XZ ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z ?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z ?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z ??0Init@ios_base@std@@QAE@XZ ??1Init@ios_base@std@@QAE@XZ ??0_Winit@std@@QAE@XZ ??1_Winit@std@@QAE@XZ ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z ??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z ?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z ?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z ?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB ??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z ?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z ?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ ?_Xran@std@@YAXXZ ??0runtime_error@std@@QAE@ABV01@@Z ??1runtime_error@std@@UAE@XZ ?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADH@Z ??_7runtime_error@std@@6B@ ?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z ?_Refcnt@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEAAEPBD@Z ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ ?freeze@strstreambuf@std@@QAEX_N@Z ?ends@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z ??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z ??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N1@Z ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PADH@Z ?seekpos@strstreambuf@std@@MAE?AV?$fpos@H@2@V32@H@Z ?seekoff@strstreambuf@std@@MAE?AV?$fpos@H@2@JW4seekdir@ios_base@2@H@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHPBDH@Z ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHPADH@Z ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ ?underflow@strstreambuf@std@@MAEHXZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ ?pbackfail@strstreambuf@std@@MAEHH@Z ?overflow@strstreambuf@std@@MAEHH@Z ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ ?_Init@strstreambuf@std@@IAEXHPAD0H@Z ?_Global@_Locimp@locale@std@@0PAV123@A ?_Init@locale@std@@CAPAV_Locimp@12@XZ ??1strstreambuf@std@@UAE@XZ ??1ostrstream@std@@UAE@XZ ??1?$basic_filebuf@DU?$char_traits@D@std@@@std@@UAE@XZ ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ ??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ ??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ ?close@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ ?close@?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAEPAV12@XZ ?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBDH@Z

msvcrt

calloc _strlwr _adjust_fdiv _initterm ??1type_info@@UAE@XZ _onexit __dllonexit fwrite ??2@YAPAXI@Z __CxxFrameHandler sprintf _splitpath strtok fclose fread fopen _itoa _mbsnbcpy free malloc realloc _mbsupr _mbslwr memmove _mbsinc _ismbcspace _mbsstr _mbscmp _vsnprintf strncpy ??0exception@@QAE@ABV0@@Z ??1exception@@UAE@XZ ??0exception@@QAE@ABQBD@Z _CxxThrowException ??0exception@@QAE@XZ _purecall fseek ftell atoi strrchr _strdup

msvcirt

??_Difstream@@QAEXXZ ??1ios@@UAE@XZ ??1ifstream@@UAE@XZ ?close@ifstream@@QAEXXZ ?read@istream@@QAEAAV1@PADH@Z ?open@ifstream@@QAEXPBDHH@Z ?sh_read@filebuf@@2HB ??0ifstream@@QAE@XZ

etc/ACreport.exe

IMPHASH 5d44b51ca3efef22577d1764f1615484
SHA256 03602b36776e2cd29e468c839440451227c0f80b2a1d1f1d86ad1bdb2c3ee257
MD5 2d1bb0cfa6db10d48a083e8d8ea7715f
SHA1 d27f73b8137d59f87e156fbbb952a87e44b144a2
SHA512 ebeda2ba91342772943e89c43db12b3a7c66b33064f6f76cba75a469fdeebe2a1bb5a8e4b09e79dafb615f80dda8d115e26d9be533cdc1c729be2a2a46cad2fa
SSDEEP 3072:a9N1KhwWvx5Ug1yD7JpWh3hgjJppn5VXLS6XMHgTCuV16R1JaFo8Dg85:a9r+pnUgM6atSYMHgTCuV1kna
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

115620

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

ws2_32

gethostbyname gethostname inet_ntoa

mfc42

ord567 ord3626 ord3663 ord2414 ord2370 ord2301 ord2302 ord1105 ord6199 ord4160 ord2863 ord2379 ord755 ord470 ord6334 ord4278 ord5683 ord858 ord1641 ord941 ord926 ord6883 ord922 ord5710 ord5981 ord4224 ord3874 ord3092 ord801 ord2820 ord3811 ord541 ord939 ord3097 ord2915 ord3693 ord5787 ord5788 ord6880 ord2754 ord2642 ord5875 ord4476 ord4129 ord6283 ord384 ord686 ord1099 ord1574 ord772 ord3701 ord500 ord1862 ord4220 ord2584 ord3654 ord2438 ord6142 ord4083 ord5606 ord2859 ord3571 ord2763 ord4277 ord2567 ord2614 ord2971 ord5759 ord6192 ord5756 ord6186 ord4330 ord6189 ord6021 ord6172 ord5873 ord5789 ord5794 ord5678 ord5736 ord5579 ord5571 ord6061 ord5864 ord3596 ord3619 ord640 ord6194 ord1640 ord323 ord5785 ord2405 ord2864 ord1175 ord2096 ord2408 ord5860 ord860 ord807 ord2920 ord2012 ord2120 ord554 ord4163 ord1644 ord5572 ord2919 ord940 ord4133 ord4297 ord1621 ord4202 ord5856 ord536 ord2452 ord2753 ord1195 ord472 ord5440 ord6383 ord5450 ord6394 ord2575 ord4396 ord3574 ord809 ord609 ord556 ord4275 ord4284 ord5053 ord4774 ord6270 ord613 ord289 ord2122 ord6358 ord1088 ord6197 ord283 ord6170 ord3797 ord3089 ord2860 ord5651 ord350 ord1832 ord6282 ord2393 ord3294 ord6069 ord3072 ord1133 ord1930 ord1842 ord4299 ord773 ord501 ord1083 ord5607 ord2762 ord6153 ord3790 ord6928 ord2781 ord668 ord2770 ord1576 ord665 ord6385 ord3127 ord3616 ord5442 ord3318 ord5186 ord354 ord5645 ord5583 ord3126 ord349 ord550 ord3337 ord1833 ord2917 ord1979 ord2803 ord958 ord6312 ord4177 ord6010 ord5773 ord2601 ord3180 ord3183 ord3176 ord3507 ord1168 ord1146 ord823 ord765 ord3573 ord3698 ord3402 ord5290 ord1776 ord6055 ord4234 ord641 ord324 ord3597 ord4425 ord4627 ord5277 ord2124 ord2446 ord5261 ord1727 ord5065 ord3749 ord6376 ord2055 ord2648 ord4441 ord4837 ord3798 ord5280 ord4353 ord6374 ord5163 ord2385 ord5241 ord4407 ord1775 ord4078 ord6052 ord4710 ord4998 ord4853 ord4376 ord5265 ord533 ord540 ord5194 ord2818 ord800 ord2764 ord537 ord535 ord924 ord6407 ord1997 ord798 ord1247 ord1199 ord1134 ord2621 ord2514 ord815 ord825 ord561 ord3738 ord4424 ord4622 ord4080 ord3079 ord3825 ord3831 ord3830 ord2976 ord3081 ord2985 ord3262 ord3136 ord4465 ord3259 ord3147 ord2982 ord5714 ord5289 ord5307 ord4698 ord4079 ord2725 ord5302 ord5300 ord3346 ord2396 ord5199 ord1089 ord3922 ord5731 ord2512 ord2554 ord4486 ord6375 ord4274 ord4673 ord356

msvcrt

_setmbcp __getmainargs _initterm __setusermatherr _adjust_fdiv __p__commode __p__fmode __set_app_type _except_handler3 _controlfp __CxxFrameHandler _mbscmp _unlink exit free malloc wcscpy wcslen _ftol memmove _mbsnbcpy _CxxThrowException _splitpath strncpy strncmp sprintf atol _chdir _getcwd _mbscoll rand srand time calloc __dllonexit _onexit ??1type_info@@UAE@XZ _exit _XcptFilter _acmdln

kernel32

GetLastError CreateToolhelp32Snapshot Process32First Process32Next CloseHandle GetWindowsDirectoryA SetFileAttributesA FileTimeToSystemTime GetVersionExA GetDriveTypeA GetTickCount SetVolumeLabelA GetDiskFreeSpaceA UnmapViewOfFile MapViewOfFile CreateFileMappingA GetModuleHandleA GetStartupInfoA FindClose FindNextFileA FindFirstFileA lstrcmpA Module32Next Module32First GetCurrentProcess GetProcAddress LoadLibraryA FreeLibrary GetVersion lstrlenA lstrlenW GetCPInfo LockResource LoadResource FindResourceA lstrcmpiA ReadFile GetFileSize CreateFileA SystemTimeToFileTime GetLocalTime HeapFree GetProcessHeap HeapAlloc GetSystemDirectoryA Sleep GetFileAttributesA

user32

DrawStateA OffsetRect InflateRect DrawFocusRect PostMessageA ClientToScreen WindowFromPoint GetActiveWindow InvalidateRect SetCursor GetParent GetNextDlgTabItem IsMenu GetWindowLongA DestroyCursor GetSubMenu RedrawWindow GetMenuStringA CreateMenu CreatePopupMenu GetMenuItemID GetMenuState ModifyMenuA GetMenuItemCount GetDesktopWindow GetDC ReleaseDC DrawIconEx IsWindow LoadImageA FrameRect LoadBitmapA UpdateWindow CharToOemBuffA OemToCharBuffA EnableWindow LoadIconA SendMessageA AppendMenuA GetSystemMenu IsWindowVisible EqualRect GetSysColorBrush DrawIcon GetClientRect GetSystemMetrics IsIconic GetWindowRect GetMenuItemInfoA SetRect DrawEdge DestroyIcon GrayStringA DrawTextA TabbedTextOutA SystemParametersInfoA GetSysColor CopyRect FillRect

gdi32

GetViewportOrgEx SetViewportOrgEx CreateBitmap SetBkColor SetTextColor GetStockObject PatBlt GetObjectA GetPixel SetPixel CreateDIBSection SelectObject DeleteObject DeleteDC Ellipse GetTextExtentPoint32A GetTextExtentPoint32W BitBlt Escape ExtTextOutA TextOutA RectVisible PtVisible CreateCompatibleBitmap CreateCompatibleDC CreateFontIndirectA GetBkMode GetDeviceCaps CreatePen Rectangle RoundRect CreateSolidBrush

advapi32

RegCloseKey RegQueryValueExA RegOpenKeyExA RegEnumKeyExA RegEnumValueA CloseServiceHandle QueryServiceConfigA OpenServiceA EnumServicesStatusA OpenProcessToken LookupPrivilegeValueA AdjustTokenPrivileges OpenSCManagerA

shell32

ShellExecuteA SHGetSpecialFolderPathA ShellExecuteExA

comctl32

ImageList_Draw ImageList_GetImageCount ImageList_GetIcon ImageList_AddMasked ImageList_ReplaceIcon _TrackMouseEvent

msvcp60

?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z ?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB ?_Xlen@std@@YAXXZ ?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB ?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z ?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z ?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ ?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z ?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z

wininet

InternetWriteFile HttpSendRequestExA HttpEndRequestA HttpOpenRequestA HttpAddRequestHeadersA InternetSetCookieA HttpSendRequestA InternetOpenA InternetCloseHandle InternetAttemptConnect InternetConnectA

netapi32

Netbios

winmm

PlaySoundA

etc/acMon.exe

IMPHASH f854bf22c9b13152f1412a284fd24f6e
SHA256 ef65de73091a2f1fc5ee73a683b5531addda023bf2a358fc4d4f5885387332f4
MD5 65b2892fb3d6bab987ea490b77c782e0
SHA1 37da9921b19bed3d03ffa9770d1440f3e2967708
SHA512 429a7adcec51b6abcbbd55e9e65dc8280e158e1832fb4dac101c2e11fadf22dce765f068075afb2a61e9b4246a07f25c8d8eb5fff648d268bc43cd433c515a15
SSDEEP 3072:qaXdtjVvF/QleyZL3tjDP8pH+NNpP2HOQiysnLVc5d0USvSdrqJLhN/DwmdK182v:q0vds3tXeylZy8LSV9SP2SOAr7FJ
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

66767

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetTickCount RtlUnwind HeapFree HeapAlloc GetStartupInfoA GetCommandLineA TerminateProcess RaiseException GetTimeZoneInformation GetSystemTime GetLocalTime HeapReAlloc HeapSize GetACP LCMapStringA LCMapStringW GetEnvironmentVariableA HeapDestroy HeapCreate VirtualFree IsBadWritePtr UnhandledExceptionFilter FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType SetUnhandledExceptionFilter GetStringTypeA GetStringTypeW IsBadReadPtr IsBadCodePtr SetStdHandle CompareStringA CompareStringW SetEnvironmentVariableA SetErrorMode GetProfileStringA GetOEMCP GetCPInfo SizeofResource GetProcessVersion WritePrivateProfileStringA GlobalFlags TlsGetValue LocalReAlloc TlsSetValue EnterCriticalSection GlobalReAlloc LeaveCriticalSection TlsFree GlobalHandle DeleteCriticalSection TlsAlloc InitializeCriticalSection LocalAlloc GetFileTime GetFileSize GetFileAttributesA FileTimeToLocalFileTime FileTimeToSystemTime GetThreadLocale GetFullPathNameA lstrcpynA GetVolumeInformationA SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile CreateFileA GetCurrentProcess DuplicateHandle FormatMessageA LocalFree lstrcatA GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA lstrcpyA MulDiv GetModuleHandleA SetLastError InterlockedDecrement InterlockedIncrement GlobalUnlock GlobalFree LockResource FindResourceA LoadResource GlobalLock GlobalAlloc GlobalDeleteAtom lstrcmpA GetCurrentThread GetCurrentThreadId MultiByteToWideChar WideCharToMultiByte lstrlenA GetVersion GetExitCodeProcess CreateToolhelp32Snapshot Process32First Process32Next CloseHandle CreateProcessA GetModuleFileNameA FreeLibrary GetLocaleInfoA lstrcmpiA GetProcAddress FindFirstFileA FindClose LoadLibraryA ExitProcess CreateMutexA GetLastError VirtualAlloc GetVersionExA

user32

GetSysColorBrush CharNextA CopyAcceleratorTableA SetRect GetNextDlgGroupItem MessageBeep InflateRect RegisterClipboardFormatA PostThreadMessageA wsprintfA GetClassInfoA RegisterClassA GetMenu GetMenuItemCount GetWindowTextLengthA GetWindowTextA GetDlgCtrlID CreateWindowExA GetClassLongA SetPropA UnhookWindowsHookEx GetPropA CallWindowProcA RemovePropA DefWindowProcA GetMessageTime GetMessagePos GetForegroundWindow SetWindowLongA IntersectRect IsIconic GetWindowPlacement GrayStringA DrawTextA TabbedTextOutA EndPaint BeginPaint GetWindowDC GetDC ClientToScreen ScreenToClient MapDialogRect SetWindowPos GetWindow SetWindowContextHelpId EndDialog GetSystemMetrics CreateDialogIndirectParamA LoadStringA GetMenuCheckMarkDimensions LoadBitmapA GetMenuState SetMenuItemBitmaps CheckMenuItem EnableMenuItem GetFocus GetNextDlgTabItem GetMessageA TranslateMessage DispatchMessageA GetActiveWindow GetKeyState CallNextHookEx ValidateRect IsWindowVisible LoadCursorA SetWindowsHookExA GetParent GetLastActivePopup IsWindowEnabled GetWindowLongA SetCursor SetActiveWindow SystemParametersInfoA GetClassNameA GetWindowRect ModifyMenuA GetCursorPos SetForegroundWindow TrackPopupMenu PostMessageA GetMenuItemID LoadMenuA GetSubMenu SetMenuDefaultItem MessageBoxA UnregisterClassA HideCaret ShowCaret ExcludeUpdateRgn DrawFocusRect DefDlgProcA IsWindowUnicode IsWindow DestroyIcon RegisterWindowMessageA InvalidateRect LoadImageA FillRect OffsetRect ReleaseDC GetClientRect SetTimer FindWindowA SendMessageA LoadIconA PtInRect GetDesktopWindow DestroyWindow PostQuitMessage KillTimer EnableWindow CharUpperA ShowWindow MoveWindow SetWindowTextA IsDialogMessageA UpdateWindow SendDlgItemMessageA MapWindowPoints GetSysColor SetFocus AdjustWindowRectEx CopyRect WinHelpA GetTopWindow PeekMessageA DestroyMenu IsChild GetDlgItem GetCapture

gdi32

SetBkMode SetTextColor SetMapMode SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowExtEx ScaleWindowExtEx GetClipBox IntersectClipRect DeleteObject SetBkColor GetDeviceCaps GetViewportExtEx GetWindowExtEx PtVisible RectVisible TextOutA ExtTextOutA Escape GetTextColor GetBkColor DPtoLP LPtoDP GetMapMode PatBlt GetStockObject RestoreDC SaveDC DeleteDC CreateBitmap GetObjectA CreateSolidBrush CreateCompatibleDC SelectObject BitBlt StretchBlt CreateDIBitmap GetTextExtentPointA CreateFontA

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter OpenPrinterA DocumentPropertiesA

advapi32

RegSetValueExA RegCloseKey RegOpenKeyExA RegCreateKeyExA RegOpenKeyA RegDeleteValueA

shell32

Shell_NotifyIconA ShellExecuteA

comctl32

ord17

oledlg

ord8

ole32

OleInitialize CoTaskMemAlloc CoTaskMemFree CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CLSIDFromString CLSIDFromProgID OleUninitialize CoFreeUnusedLibraries CoRegisterMessageFilter CoRevokeClassObject OleFlushClipboard OleIsCurrentClipboard

olepro32

ord253

oleaut32

VariantClear SysFreeString SysAllocStringLen VariantCopy SysAllocStringByteLen VariantChangeType VariantTimeToSystemTime SysStringLen SysAllocString

wininet

InternetGetConnectedState

etc/acReg.exe

IMPHASH 3d0ead594952d784716b79c808d5ca54
SHA256 a9ea58736d163504ea441115994e9a6204de3f5451b2c4f05c6cda41afae7d99
MD5 3a4aa3c8e9600ae88bfea4cc1835e521
SHA1 491804ff07cfe5d373422842f4fe39ff759ab98b
SHA512 86673a8d12f9a085814e6b97ebb8eaf1b64aa6069260e6e06f9312657ab38ddaeb24593a280369302bcc747227b1b599922f97017cec12b036fdb47c9e6945e5
SSDEEP 3072:VDIIOttE+goVYuA/Jsqv7kxRP+wljd0Ez1rjoJ1fVYZlaliZI2caCNzp:V4E+/vA2qvoCwlJrat0IZa
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

55125

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

TerminateProcess HeapFree HeapAlloc HeapReAlloc HeapSize GetACP GetTimeZoneInformation SetUnhandledExceptionFilter UnhandledExceptionFilter FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType GetEnvironmentVariableA GetVersionExA GetCommandLineA HeapCreate VirtualFree VirtualAlloc IsBadWritePtr LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW IsBadReadPtr IsBadCodePtr SetStdHandle CompareStringA CompareStringW SetEnvironmentVariableA GetStartupInfoA RaiseException RtlUnwind GetProfileStringA GetTickCount GetVolumeInformationA FindFirstFileA FindClose SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer GetCurrentProcess DuplicateHandle SetErrorMode GetFileTime GetFullPathNameA GetFileAttributesA FileTimeToLocalFileTime FileTimeToSystemTime GetOEMCP GetCPInfo GetThreadLocale SizeofResource GetProcessVersion GlobalFlags TlsGetValue LocalReAlloc TlsSetValue EnterCriticalSection GlobalReAlloc LeaveCriticalSection TlsFree GlobalHandle DeleteCriticalSection TlsAlloc InitializeCriticalSection LocalAlloc lstrlenW MulDiv SetLastError FormatMessageA LocalFree lstrcpynA LoadLibraryA FreeLibrary GetVersion lstrcatA GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA lstrcpyA GetModuleHandleA GetProcAddress MultiByteToWideChar WideCharToMultiByte lstrlenA InterlockedDecrement InterlockedIncrement GlobalUnlock GlobalFree LockResource FindResourceA LoadResource GlobalLock GlobalAlloc GlobalDeleteAtom lstrcmpA lstrcmpiA GetCurrentThread GetCurrentThreadId GetFileSize ReadFile CreateFileA WriteFile CloseHandle GetModuleFileNameA WritePrivateProfileStringA CreateMutexA GetLastError HeapDestroy ExitProcess

user32

GetSysColorBrush LoadStringA CharNextA CopyAcceleratorTableA SetRect GetNextDlgGroupItem MessageBeep CharUpperA InflateRect RegisterClipboardFormatA PostThreadMessageA AdjustWindowRectEx ScreenToClient CopyRect ScrollWindow GetScrollInfo SetScrollInfo ShowScrollBar GetScrollRange SetScrollRange GetScrollPos SetScrollPos GetTopWindow IsChild GetCapture WinHelpA wsprintfA GetClassInfoA RegisterClassA GetMenu GetMenuItemCount GetSubMenu GetMenuItemID GetWindowTextLengthA GetWindowTextA GetDlgCtrlID CreateWindowExA GetClassLongA SetPropA UnhookWindowsHookEx GetPropA CallWindowProcA RemovePropA DefWindowProcA GetMessageTime GetMessagePos SetWindowLongA RegisterWindowMessageA IntersectRect SystemParametersInfoA LoadCursorA MapDialogRect SetWindowPos GetWindow SetWindowContextHelpId EndDialog IsWindow CreateDialogIndirectParamA DestroyWindow GetDlgItem GetMenuCheckMarkDimensions LoadBitmapA GetMenuState ModifyMenuA CheckMenuItem EnableMenuItem GetFocus GetNextDlgTabItem GetMessageA TranslateMessage DispatchMessageA GetActiveWindow GetKeyState CallNextHookEx ValidateRect PeekMessageA GetCursorPos SetWindowsHookExA GetLastActivePopup IsWindowEnabled GetWindowLongA MessageBoxA SetCursor LoadIconA EnableWindow SetTimer UnregisterClassA HideCaret ShowCaret ExcludeUpdateRgn DrawFocusRect PostQuitMessage PostMessageA SetWindowRgn GetParent KillTimer IsWindowVisible GetForegroundWindow SetActiveWindow SetForegroundWindow FillRect GetWindowRect IsIconic GetSystemMetrics GetClientRect PtInRect GetClassNameA OffsetRect DrawIcon SendMessageA DefDlgProcA IsWindowUnicode FindWindowA GrayStringA DrawTextA TabbedTextOutA EndPaint BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen InvalidateRect DestroyMenu GetDesktopWindow ShowWindow MoveWindow SetWindowTextA IsDialogMessageA SetFocus SetMenuItemBitmaps UpdateWindow SendDlgItemMessageA MapWindowPoints GetWindowPlacement GetSysColor

gdi32

SetMapMode SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowExtEx ScaleWindowExtEx IntersectClipRect DeleteObject GetDeviceCaps GetViewportExtEx GetWindowExtEx PtVisible RectVisible TextOutA ExtTextOutA Escape LPtoDP DPtoLP GetTextColor GetBkColor GetMapMode PatBlt SetBkMode GetStockObject SelectObject RestoreDC SaveDC DeleteDC GetObjectA SetBkColor SetTextColor GetClipBox CreateBitmap CreateRoundRectRgn CreateDIBitmap GetTextExtentPointA BitBlt CreateCompatibleDC CreateSolidBrush

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

advapi32

RegCloseKey RegCreateKeyExA RegOpenKeyExA RegQueryValueExA RegOpenKeyA RegCreateKeyA RegSetValueExA

shell32

ShellExecuteA

comctl32

ord17

oledlg

ord8

ole32

CoFreeUnusedLibraries OleUninitialize OleInitialize CoTaskMemAlloc CoTaskMemFree CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CLSIDFromString CLSIDFromProgID CoUninitialize CoRegisterMessageFilter CoRevokeClassObject OleFlushClipboard OleIsCurrentClipboard

olepro32

ord253

oleaut32

VariantClear SysAllocStringLen SysFreeString SafeArrayGetUBound SafeArrayGetLBound SafeArrayGetElemsize SafeArrayGetDim SafeArrayCreate VariantCopy SysAllocString SysAllocStringByteLen VariantChangeType VariantTimeToSystemTime SysStringLen SafeArrayAccessData SafeArrayUnaccessData

wininet

InternetReadFile HttpSendRequestA HttpOpenRequestA InternetConnectA InternetOpenA InternetGetConnectedState

netapi32

Netbios

etc/avsrv.exe

IMPHASH 84bb2f902cf6ffc3af0f9dc5db790222
SHA256 4d11b5d90bd16b05f7798e583bc7addc0edaeebaedf8c510ee3a1b956a43f5e2
MD5 1903dcc05af5495e846b0d1370bdfc00
SHA1 77f55e99aeebd64648011d9b88dcaf8fa309fce8
SHA512 0cd1032f29729711aa14e394c23a4f2f70db3042e051bd998eba8e7f8d86c8c7d6fccc5c5007c5d0fef44cf0bb6b3a407b2057a5596efedc3b1134933f8fecb5
SSDEEP 768:jdFP0C0ZJi++QDHQLKRK/RNQJE09guJ6wjE5NeWXOSB9jMJFaat:ZB0C07i++QBRsQLguJ6fveWXBMfR
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

14550

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetEvent CreateEventA WaitForSingleObject OutputDebugStringA GetFileSize ReadFile GetSystemDirectoryA FindFirstFileA FindClose CreateFileA CloseHandle DeleteFileA GetProcessHeap HeapAlloc GetLastError HeapFree lstrcmpiA GetModuleFileNameA

shell32

SHFileOperationA

advapi32

AllocateAndInitializeSid GetLengthSid InitializeAcl AddAccessAllowedAce InitializeSecurityDescriptor SetSecurityDescriptorDacl RegSetKeySecurity FreeSid RegEnumKeyA RegOpenKeyExA RegEnumKeyExA RegDeleteKeyA RegOpenKeyA RegQueryValueExA RegSetValueExA RegDeleteValueA RegCloseKey SetServiceStatus RegisterServiceCtrlHandlerA StartServiceCtrlDispatcherA

version

VerQueryValueA GetFileVersionInfoSizeA GetFileVersionInfoA

msvcrt

_controlfp _except_handler3 __set_app_type __p__fmode __p__commode _adjust_fdiv ??3@YAXPAX@Z _mbsnbcpy free malloc realloc _mbsupr _mbslwr memmove _mbsinc _ismbcspace _mbsstr __CxxFrameHandler _mbscmp ??2@YAPAXI@Z sprintf _splitpath fprintf _iob strtok _exit _XcptFilter exit __p___initenv __getmainargs _initterm __setusermatherr

etc/avsrvc.exe

IMPHASH a1eeb980e0e04eb3be75569241d8a635
SHA256 32ca3628c280c7810761c2f9ae8375b58bae8f21f68d2e4f4d0b835e32a4b0aa
MD5 10144fcca735fac5d38054e91b1e29d3
SHA1 b2ddd6f7329378d1e73b6a9f0758289c15ad300b
SHA512 247a94adc11209a5c8ce070a9c5196080ec64d0d74515919eeb20f39566b484f30ea487d0cc4cce74c9ecf152122deb510570ed6fec182ed5548615a3db835c4
SSDEEP 384:3Rr4SNCBUSpTJfSvHttmVdzd6elHLmlAHuyyC7tC5kZcEGl4/:hrbNCBXBJfAtmVdjdkyn7txGlU
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

5517

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

skin/default.avs

SHA256 6370ac5d1df733347ab372af951429167f1da61cb0b967c2ab0b518ea5b2af54
MD5 3729b04cc53975bd50a2fb87ac0ccd77
SHA1 ca7c8beb820b18164858908ba988b91b6035bdcc
SHA512 7466fcf306a7906c30800506aca1aea564ac2c86898ecee48bb30110e906290837733c4352fc8813c3a5f427b744d08f45ca33ee0327ad1e3d85d54944114ad5
SSDEEP 12288:37NzDaMdRwnuvaX33jvYZkzT0qRp9eeep3YQCrRCFavX0Dcw8JGJRE5cB:5tsuSXDYZkzT0q1GpIQQlvkDcw8gGi
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

1.bmp

SHA256 1f6aeb19ee804fb7a8e089528487b912d1e4f59a557ee53568dd1e5b7aad4bb5
MD5 883b61c9f6569f3c1a37d90522b77cd3
SHA1 0735e81752475bf8db1236c527df5525e9e54ad0
SHA512 7243b5b53ea4cb77933b0a56c80d7dcb2ef4a0c34a1086edb07d003cade3d2de3e62107951cb236ee2db182885196f64fe36246ea686370eb91dfa4c6c78c0c8
MD5 SHA1 SHA512

NSIS installer

installer

2.bmp

SHA256 c041773ff1b12daed40bce6f3cbed3ba403f5ef5e555ddf535e948df909c532d
MD5 73fb2878b8cf78c18bf9e898b7af7a50
SHA1 10e4a473c21331e2a90bab05fffcc8576921e673
SHA512 f9126be3bd81ff88f797d0aed295ebcb93e5a2a84d5a73fe85554dc601c36a0247c1d4cca0b236c28fee9c544c87976ddaecd5dceb8b82e542c0d5ad25dc9dbe
MD5 SHA1 SHA512

NSIS installer

installer

3.bmp

SHA256 9b9be1d264f6c9fe9378287684f7ec017b734f2fc9a453dcbe275fe1b880e3cb
MD5 f6a3e89e45c5e606fa16fc1250811f2e
SHA1 01a3a1262db0218f82e7821ca337fa961c2a99c0
SHA512 dd8ea6f84227bc23f6d147d998f592911f79944537e6e2113465315f9bf5c9deceea88bb1dee3b3a196fab6e8676f1b2df1859f2e2e4a64146332da4f92ff53d
MD5 SHA1 SHA512

NSIS installer

installer

4.bmp

SHA256 503e3521b4c139c61a8f89085295f606e5828e8b9220a7636f37c1d6f1c53f58
MD5 6cacb48b205671fc18d3fa1ac2e447e6
SHA1 53ab3f5e5660e15ae7b967461bd24030b4fb3aa8
SHA512 a4b6662742acd7eff5c6bede33cbf2708bf662a7eceb5548e88e1e4b0159f84c09641385994c8e51388110f7b9fecccaa446648c731319555c22ea0ce505f7a7
MD5 SHA1 SHA512

NSIS installer

installer

5.bmp

SHA256 8c35cae19b6a21d19edcae1ce0e620cf33f96cddf878be24b03fd4dc7b2d0b9c
MD5 74c1937287fb283466a13f31b4d4409b
SHA1 dbc2e901a0b45ea7c0a6b450de2f7bf6dd7c61aa
SHA512 53bd00ed473028ee9cb3b1b10ad9dace78be410baf86a6a6a1fb018cb3dda52845144cb6eab084075ce001ae851c8743382d9071402ecb6be4c797648677c6bd
MD5 SHA1 SHA512

NSIS installer

installer

TrayMsg.bmp

SHA256 55ca1fa88ffb7bc41ca401b10c0f38a54f701c7b8c99f4cb89a15a8849421b14
MD5 2185a38bad7f834d8cd6199f74ef6b25
SHA1 8190f7ce3e8617f28d3fcbbe22342ca8b875dd57
SHA512 db3a7bd270b45fa33c2cc0d44653141bdc34ec3725e6558f3ef6554fb09aa2486074f119ea81664d9f683f26d468dbd262bcc8c289a76222610d05ce6b2a1601
SSDEEP 96:cflSS9X9RNfNNh9b9qo56zUkUbTrr1jz+Tr17tUk1NS617tzjzTml7tUkx1wt91n:aIo999s5qRSB5v9p8Nl8MrCue
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

about_blank.bmp

SHA256 06a49fee2e0718c99f18584617c1ad7328cfc9a32fd0ea37f35e7536fb8b5ac6
MD5 57f7eaea3275f376a42b5266ee0612f6
SHA1 de0287e66c07f74b80e1bafe61915ac99476a669
SHA512 2b1826ce20e41fdef971318f0dfa53c847d038946546012b4cd2f84e8527c7182884a3633ea964c90e019e917a04549acd81e4c74a5ed78a74cc6a9d19c5ba01
SSDEEP 6:UQl/CA6BSNuAbqw/gx4xtVqnaWoq8aYFQfRaNbabKamemOyKSCGC/4RaRxxLJakG:xa5UHbBM4gzoq8aYGapaCaRxxLtN6
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

all_select.bmp

SHA256 ce775c7818b5da8c9b75ec2dd64741a92fa4fa6ced883465149e99de437cc7d6
MD5 81f9536e2cee78fbb0d990fd4aea4033
SHA1 8095628b640d546bafa49712cf89b0d2e80215d1
SHA512 eb5bd751de1ada46ff335df657629f80e9860fb35eb90c095620ca8313e99e0d435e2ec1d7e719bd5ca3d7eb301c7b683baabe1c72375b50087af75252f21e00
SSDEEP 24:ww6i8lUlklEl8lsl8lAlxlglplAlplMlklglBlAl5lslElJelRelAlJlslMlpWl+:ww6l
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

all_select2.bmp

SHA256 c83180361425cab09cd2fb5dcb533fb5b3b7ae2617aef2f02042db86a07e0ffa
MD5 a50a06b0c7179ad6d66db9fbadce9bad
SHA1 18f8e9538c26de1abae4a8f5e770a3b7191fd433
SHA512 1abe5bb219488f39741d92e2857f9cc3ce72af97030792bf6722bcee81771c4938b2723a8d61f1e93fb51137341b8bcabecfe99c15c5256ac6bec332a885494a
MD5 SHA1 SHA512

NSIS installer

installer

bg.bmp

SHA256 dc4b118316131b32cd42209d12c2709024e9d82f1afed3d6fb4c1f35a2885fcf
MD5 52d418b8e64297f76ffc11758bb05aec
SHA1 4f6ca0c0d28ce4380600f30280ea9a4f149df7a1
SHA512 f0bf5b3055620ce39df3d8631528951f8b508594408a0e6583c7adc6a023ad332a2605d67a26dec501c8785d48f1b3fb3af353005e8d5c0bfda6364700846e4b
SSDEEP 3072:mkWG5KFgbKj+Gq6bIL3nTQca/Sq5TRB8629JS:5G6KjAHnTq5/
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_account.bmp

SHA256 64227a8e876223f4056a70aa997c79004b1f9bc27a28c351da013263fafbe27c
MD5 614e6b58c8c52868ad5c479662fc3783
SHA1 6980bc3d9d68994ef1b4d6ebb7c3257e8a115951
SHA512 53eee735d0ba3a46a7c5c661db710f08c64524316a6fe5cd5c6a4b73e518ae751a5c83badfc55a713719ce76be210ad4ecdef38f1cce6220c937b6268aee51dd
SSDEEP 48:wzKzNPidSdVduIdufaUalOOODadOlOkuOOODaf8PiOOOOOOOOOOOOOOOODa6BOOo:sdwSD71Oc18+ymLuiqltlih7
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_autoupdate.bmp

SHA256 164f1e6d6ef53419d3f2890e1c482142e110946cf46d0a802f38c5ac6f21f652
MD5 f02d5213ad6654c7bbbf50fe2c901fc6
SHA1 5827a9c6e4f4652d4b1d0682d26fc8bafd36a9c7
SHA512 fffd58a8e322fe8bc9843a1fa32c656e233d0b4de3748cb6003738b44b81c83b8184b2d509bbf711a080c887987537f3f6d8c05b1e86113a4a48cf5740b9c518
SSDEEP 48:mMJjMRKo62qzmqC+B9+wfqfBaw92qwfqfBgq5wfqff6q9mqfIqffmXpfgqfhwfqO:moW
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_cancel.bmp

SHA256 7010791161f5a4d7f7a9eadabd53661942f628dc4480d858e6c4cc66184ec376
MD5 520d23c146b54067b6c4bbfaff36ff9f
SHA1 c24af5a637122186b49c4f19cafaabc6f9a3b55a
SHA512 7d0eb81f5f6b3dea4e0a20b2b3d34936b5334ebee6553950a97fb32444a2e66d5bd8a4bda297b1f6700a7d0e6157c17905830c11683ccacf3de12629ffacfdcd
SSDEEP 96:DJdU1UhVUqHzHumJNHnA0MPM5WwM4s3svF8SAsbxRFkvEr7tHamFvErUY8USRzLP:D3HzHumPHnA0MPMJMgFWsfFr5aph8f
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_cure.bmp

SHA256 d3f4390a235c54aa9ea054f799d59a0e75d634ca1faede53f57926272564868d
MD5 4bd5aff9902e18aacd50ac9808beaf31
SHA1 12c158d331e39df289629cb2a6457050a51e971e
SHA512 5b8d0b3d8326f6408f019be5fae79b67c7e876de1efc51cc255b932e5a703ce5ff81b128c28c6b02d2995d5b6ed6283bfef256e6f1a0357e4bb02111118f2434
SSDEEP 192:DXT7TPb1ETPRMRWkRuJpIEaEMYFHcCgJuleuAUpwP2qWMP2lYjTeYjpByl8dOBo6:Djb2btcCgJulTdYmYlBJOBOi3KIZ6WcE
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_del.bmp

SHA256 303a797e6fdef4109eb9c005c5c0268a6eeb9efa73d1f92232fd06c2a79143bc
MD5 9e91e783fb92be6aff0cd5e712bbd769
SHA1 88cdd5d6cfaaaced4c0d56e2756ce646c61af4ed
SHA512 0816bea789b4a60a501608fa9a604ece1f1026bfe67de2a464bf02c6d97f4a92d16279a35fa79010f0bf167f8bd9607e346bfc382aae5db4ac0f392c3063607f
SSDEEP 384:DPwT15PrrDLluWwN+vEqOoqsTDoQuJas9m:TwT15PrXDwN+vEqOoqCDaG
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_del2.bmp

SHA256 567ba26f2c6151e39a29c98888d6bf97fc66d94d289ea7e49b5fc4b6c3da44fe
MD5 769ef60efe1762f35eebddcf43056fb7
SHA1 bc4f8da92a92290aa7afe35a6597b0449c228f47
SHA512 050ed595daa628a95551dc0ae5f92e418ee743e620bdd9faa4480db441e0ceb28e0cae02fbdcbba35ff2551304d3386b542bf5dad1f869b7360867c704e59ec6
SSDEEP 96:DJ2UEUE0kUUnV1+h/+W+Rw+zRSSAHrgEronFngErLHPI9tGcyrKcD:DUnv+XP0
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_pattern.bmp

SHA256 aa52e7123f6b42f9b455fb04811d9ef04cda62891fcf309b2092425038d52918
MD5 f7bda461ce2333206cebf28decd17c27
SHA1 ac31b5ad5f0e55505bbb628cce3ba1ec1453d142
SHA512 d03a7eb5ea62c0d6b66e8305b2c0a0788972b1c1cb2f348a60b368122efb553eedb0977a2e8356b789eca70f478d4680c5973b85b5a977a9631f8fbae00844b9
SSDEEP 192:Di3kcbPXasFRQ8XfB3/5+wtYax/zMaOZxWBTg:D36dFLl5+7alMjZ6E
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_popup_cancel.bmp

SHA256 354f672c7be6fbd9f711dce364c4914a253f9d05f7ea4f07954504f711f90b32
MD5 068027849cd4ea365e7d19044222174d
SHA1 25bd5f93a92f119f91fa60cdca9eb3b7a898f4e6
SHA512 1f4ea7909e919e40f367a2e9d031ce09ab622d63dbb5e018257bc8dcc0e49a912478ec0e54c0c6f46386b285a1e1b11bbbf658d9b749df20b8781118f3e76a6c
SSDEEP 192:DDvY9I0dMHIHE+x+Dh5w7P7vVqxnopm0uC21AhpLefa+/u0J8u0c:DDvYCmMHIHE+x+Dh5uTv8v0uhwpLSV8A
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_popup_cancel2.bmp

SHA256 600098bf72ad00f7b8513ef2da39182e7d7cbb91517e12740ad7e4f71a1a86c9
MD5 c18edd4483bb261784859fa672e5ae28
SHA1 4d618a39c3ddc13e4f4a92798fa7d212e5a47983
SHA512 fe1184a583d049eae2551806cb7f8013662e1946d7d28c35b59c18de402e3838a8bd5dc34144a42333db81cf94b14696b50796734bec1083021f16f9c9c29138
SSDEEP 96:cLlKq6aJmJUQJDLC02uRPDyQ+ycyQDGUX:cLlKq6aJmJUQJDw
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_popup_del.bmp

SHA256 8a88626660e87414bcd62f78f6c0eb7bf5b8cd148d3bd49a9252615c794c5041
MD5 2fb4cbac7181a1cfd7559590c56f6237
SHA1 7cf8b6b4a914b59095e32b8bf00c11b0d531712a
SHA512 bcfbaa9e542c76d504e33d559d2818966d9918d515c8fe0d106d10c2e61f60ea23106891d7b8c9cf1f0de7c6191aa1e525491f264cb9cab36d367110a55a8273
SSDEEP 96:cLlOvaanJJOQJD+w0vq2QQ7lPtyQV+TdnlyQ3GUX:cLlOvaanJJOQJDR
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_popup_end.bmp

SHA256 53eb1604fc5aa0bc61320de67dbd4d266f4ccce6a34c422218f6e5689973c39b
MD5 92b953f86b9dc39aab853d76e30188b6
SHA1 34a1fd697ec28b955bbc5e6d7d75ce394e811189
SHA512 c990c0407dfd1cdaa34bef1d4b59437b440b2aa4526700e35907b90ce8517db1f114f37b2b43825afd9020e91d53dbcf30fd368374b92ca16bc7c1a7293747e7
SSDEEP 48:cvcIlDwafMJUQJDc212hkyQSE3upTIlyQdGUmjQ:cLlDwafMJUQJDrQuyQR5lyQdGUX
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_popup_ndel.bmp

SHA256 29e3b463d769842014ea55e4dc4cf289e9a2ce8ef6954a407539abbebdbc0017
MD5 f1445c3ff2c530d114b601140774cdf6
SHA1 c832023c268cffd35ca661d7719f80a32b763438
SHA512 32d8a8e781a3b2779e576a0a1be30620bc17b5143e018f6c4c76fb4380cbb56f08d077c25ef6b3ef7fdc7a87845ff17c650cd3212362bd3e977c7eee3f976fde
SSDEEP 384:OOUAU1UAUkUAUeKLKkK445UPNP2DclwrLY2fG6y6zamEfY:4KLKkKv2/lwOQ
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_popup_sett.bmp

SHA256 5f6e033a1117ea039763c562e617ecfd5f7e9d5dec0ffada45c18e7720dce34b
MD5 8638e90dc19d20666a3708878ef13bdb
SHA1 a77fe726137c369a019c291366e7fe2865d46b8d
SHA512 77d181dde1f80cdddce8a7f7dd63a524317e23eb00e686c1e0cec96f8cf8341c8cbc29bcace3dd5d42eb3301f24122dc423be0f465ef5a5fef267193a5eeab21
SSDEEP 96:cLlPPaaEMKxQJD1kC0FPTyQHbnhyQjGUX:cLlPPaaEMKxQJD1Mr
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_repair_msg_cancel.bmp

SHA256 600098bf72ad00f7b8513ef2da39182e7d7cbb91517e12740ad7e4f71a1a86c9
MD5 c18edd4483bb261784859fa672e5ae28
SHA1 4d618a39c3ddc13e4f4a92798fa7d212e5a47983
SHA512 fe1184a583d049eae2551806cb7f8013662e1946d7d28c35b59c18de402e3838a8bd5dc34144a42333db81cf94b14696b50796734bec1083021f16f9c9c29138
SSDEEP 96:cLlKq6aJmJUQJDLC02uRPDyQ+ycyQDGUX:cLlKq6aJmJUQJDw
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_repair_msg_del.bmp

SHA256 8a88626660e87414bcd62f78f6c0eb7bf5b8cd148d3bd49a9252615c794c5041
MD5 2fb4cbac7181a1cfd7559590c56f6237
SHA1 7cf8b6b4a914b59095e32b8bf00c11b0d531712a
SHA512 bcfbaa9e542c76d504e33d559d2818966d9918d515c8fe0d106d10c2e61f60ea23106891d7b8c9cf1f0de7c6191aa1e525491f264cb9cab36d367110a55a8273
SSDEEP 96:cLlOvaanJJOQJD+w0vq2QQ7lPtyQV+TdnlyQ3GUX:cLlOvaanJJOQJDR
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_restore.bmp

SHA256 26cb34f75756c3dc6b1b8f023433479213d4895cffe72a3ed0f8d0eaa0d632a7
MD5 558feeb497aba40b334d37611f912da2
SHA1 789aa92750a2f5663ee00d0524ac250dc66d9f47
SHA512 01781f7e242dfa397a79523d22b94118d572876796a3dc7b940a41545133916f29bb1d3a689bbd2cd59bcd50e314714269882fc12befddf12cdc6bd5ab41db14
SSDEEP 384:DTs8ITg8EJRl/NsidPDEJJhnYOQFi9Wp39yVIyE:/s8IslrhdPDEJ7nYOOioRAmyE
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_scan.bmp

SHA256 8a01eccc23aead292aa164c74e72410e275cf4912b3df5d6d5cc8f379d55a07b
MD5 05f25aa1a29fb063dbd8d9307ce7b852
SHA1 eda2ba450cabd9282a3c0102e8122cdc4b428173
SHA512 a9303942f4a6a3788db59ee8839b2af59850607fb3ef7a266dbdf78b94264dfa8908f163d0ea4fd3de96618a7303106f8a31bdbbf738c1eb0b1123e4ed46fd5c
SSDEEP 384:DiuP417ebTZsSau+2lQ2w2MVMFsgT+n7uxhB0y:muPdbTZsSBSVMFsa+n7Eh3
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_scan_list_close.bmp

SHA256 7bffb7bf2bdf9563952c211f1bf9153727d9e0c7b4567a7124fee56aca292b7b
MD5 8d488b01d45bece2cdd469593f194904
SHA1 224b241bc6b285a7e88ad1223688fecdfccc4b23
SHA512 6d3d5fafec6e8314ce8c0d6724114758bd6ea11ad519181185550411067be0640ee37592975be285b715c50126c0bfae5ecd22b865c65faefe9ea493f9665c3e
MD5 SHA1 SHA512

NSIS installer

installer

btn_scan_list_delete.bmp

SHA256 5b09e6ffe2818a7d7a60635b65225bc34719eaf84ad2a82030a3115755ec39f5
MD5 069f091517f73ff527de03b2f3c9370c
SHA1 b59f44ce4f6fa36b06cb625cb223f78241c4a114
SHA512 a2ecf3cde624f080999070f6017a4d7eab49e12b23973e412ee0b364154287ba9f1dbc304eb1b9c332631495f9b591547c20912434cfaf9f3f786a7a474d3f05
SSDEEP 768:Q3uCXGOlgkMkaNwGWx7dp5xE5xmOOPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPJ:Q+C2Udbjpdb60
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_tray_close.bmp

SHA256 ba80755c075f23dbedcc0b74f4140cdd41baf85ec113bfae4e9178cdc598791f
MD5 522e7a2a5b6f4eaa6dafc4f17be7d6b0
SHA1 b5693d2204ec05c720f623e5e7592ab18cd4647d
SHA512 4c0348950542fee31b8fe4b43dacf721061292c09ac7ebaca6f219f869f87e94daf5e5a50cd88a9ee89a5a7cf4fb8281bdc4fc9320a342552f5eada5087bff54
MD5 SHA1 SHA512

NSIS installer

installer

btn_update.bmp

SHA256 edfa32a98430b856d5b309d7e2bb9465743bed12d7c685e748b86cf458ab6eeb
MD5 c20ffab9e0996234603da31e4429efa8
SHA1 33b131a6fe5236421404008bf519f89d857a1274
SHA512 56882e972d4afec65fdb343e95d91085a6e8b64bca2c56f31b9c9b4ef0158031b73832d88d8328797545ae783795d6f6b162cef4dc49c598bb6dfb16dc8c4722
MD5 SHA1 SHA512

NSIS installer

installer

btn_updateinfo.bmp

SHA256 b365331b0f8b60e0954343d8acd29135293c489ebdf35b2222e7a4075a415f4b
MD5 0cd42b2919dc7a57801702c1fca7bea2
SHA1 6b2f433089631ae7d22f28d0122492e7da8a6763
SHA512 86078b990f9e6d3bc1508a05b90f682df06c7d66bf01f91239a4effd208c4844d0a8d1fb1864b006306d337f799bf5081443b30c19d4bbe5da7ed6e6a5685121
MD5 SHA1 SHA512

NSIS installer

installer

btn_x.bmp

SHA256 4a3c38b7bfc822ac0923d878556ac21dc90355ebef2021f881490e5df0979503
MD5 a5cacaa98c74c1e3752ff895e6775f14
SHA1 67a85e9867742a4781253f8903039b988071e341
SHA512 76448debd5f3e2819b0e52a7a25f93db6e5caabe871fb334797e4c60697d4c9dec13d4714b4c83b1d39a39ec614c2bf3d2e28cc1eec65f8d7d84ed38809e399c
MD5 SHA1 SHA512

NSIS installer

installer

close.bmp

SHA256 b24cea0ed7c7f30248009abaea20aec96b51e25b60da5739c5e6a6ce26e2e54b
MD5 8108ba525bf327e1ac27266b36b99726
SHA1 b62121503065daaed16d41135b51d5ce1a5a2615
SHA512 89a78a06521161a1d98fa0982dcf3c8e574d9524aebba38d2d2552a93ba369651a119c71372ac20062f006c430756b47312fbee06b1e214b45701940394cc4dd
MD5 SHA1 SHA512

NSIS installer

installer

common_dlg_backpattern.bmp

SHA256 ac706addf1ca6f8b220127e607de9bbadc5d9dc0174ba68fd0d1cf5f6023ad74
MD5 6c54ba86bb045d2f2cad825c438be4a1
SHA1 9b612d9d2567e51a9ae7256dcc711618d4b4df4e
SHA512 47a62cd54deb8781343f6ec0ac985455b604ceb3a4e768c637d5bff2699323b865d036f85b3de1d2b9e38bdc958c3c729e57dc2dbc38a045fe4cc36a0f673359
SSDEEP 96:tAeGvErbHb1HdKcdnwrFKnyXExLJXHPocpH:tdGvqHb1HdKcdnWFKn8ExLJXHPxpH
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

common_exit.bmp

SHA256 4a038faa19baf2906e580d6ffe1d7b224f380284cc913e42055116e520c6f249
MD5 5ea101bd16813b297392d1cc848e42c7
SHA1 7448ba088e88cd272aaf4445e7ec80bcae7c725b
SHA512 7c25c9863b9f5ff6661cb6c908734d9d6468fb7f84eac7f8d94e5d6271c8d4e267ef60e12cfcebdeb28df6a322a979cb3b2540600f3e0cfaae395fc7225b0a13
MD5 SHA1 SHA512

NSIS installer

installer

del.bmp

SHA256 f3fa38c683003107b6674ee1e88bcdf70fa9ad6c259c91e52028490a73693f45
MD5 9368c63580616e3bb5670a9e5d9dbd71
SHA1 b900d7593c6abc30f8459dc6867b5e501eb56eee
SHA512 e225718d88f33df8f4b04110b1f910e6668401eca8be03ba2deffda790de7c8760dcca3c1407dff0ae851c04349febd26baf100a9d1757d5251028a4a7d80c39
SSDEEP 24:xK2BOsqzKqoac66POOyYdjJHAnhJ6yON0mI6wHd+LR6vxmUKfcIrSnH/HvYL/5os:xKWMFHkX
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

engine_ver.bmp

SHA256 a1d818b8afbb8a8222af2651cd411b50d3711d8e64d3396e5598d83493c12f0b
MD5 ad87ea58b883a1f02bff39059ffd57ed
SHA1 e24492a51940b9ade2d6c9a58b21f8c4e3d0a23e
SHA512 f2ca0fa130364f5023796e913388eb5d4a0333b1b8d987910f72e707b1ffd5b226b5f173da77208cf46732929a64a1c38c47f7a5a1dab38303a82e19a85d6988
MD5 SHA1 SHA512

NSIS installer

installer

help.bmp

SHA256 002e1872d4522e0b2627435870ad8aff5df7fdcaa9f59ef64f0099adb3e78567
MD5 76f9b71c094f4e8447faa2814598a328
SHA1 548c55578e7c7ab2151423ac40dd2b3e59b8b39f
SHA512 37b1514ddc7bff01f4355d6ef67da0971e86188548b197bf23f94fc5a35e920ea7abb9d14ecf6fb9c5fb7873c00f81ffe1c19c3e5cf9678b70158dcd1efa9f95
MD5 SHA1 SHA512

NSIS installer

installer

home.bmp

SHA256 679bf95945ef9c2391ce712ff284cb392654bf7f817dd5038a1ad517327590ec
MD5 64297013d96d759bae706784e37d46ba
SHA1 57710cfa5152a711317362c80e47423a5c461750
SHA512 e737845c55e84e8d3db639899fb0452b4c749abf834c481297d30f49a31ee7f4b62654e4ebad60c55671d6926e139a3ed156d328ad4dfa5d36eb2491b47c94a2
SSDEEP 96:Dr4qD4qD4qQ3yO3yLSqPsVuSqPsVU5pTchypyyp7cccZ0Nqd7ONv:Dr4w4w4pD65pTccptpALZ0NqdCNv
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

img_scan1.bmp

SHA256 c204d3a5bc12090b69d243552e660e46998e57a2d78676c13d229452e47b32da
MD5 3cbbef4ffa74cddb05cbef89a39bf7ea
SHA1 6e56c174d9bef2479958ff2f933dfa44cec6dc35
SHA512 1f378d4ea61b7a1dde1ef6d6c0fa61b83b4d2ced9e37ee0b220dc6bd3481f005bd94336b3ceb17a4126a05057685d6b6e80469b7f15fb1f760e9c009d7278421
SSDEEP 192:lEg4SGgv9AfrGRq7348kg7VTS43cwr5W1IZtjDO5wC8HyyA2DSiUip+WYb/SPz4o:lqVS2SiUioW4Vkn
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

img_scan2.bmp

SHA256 e0b9108e2751a611f8e3573f312a7c508a55b51da4838ae40f8fec0b0986bb73
MD5 d73cdc1adde91ce5ba1cb27c97161d80
SHA1 dd49579ac50912264bdd358ebdb99db253921bb6
SHA512 a79749e091362bcb23b40ead426cfd1a71aaf11b0f261d38665016c8c37a136395f1b0f51b500715e6b09e9420c353553473571f716261c2c81a75c2df470a4a
SSDEEP 96:gLhKav8Zt/y3rmiQcCnEy2Q8+mh9qwt8xIiI3pvcyFQ:GhLAqmiQcCnEy2Z7iI3pvcyFQ
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

img_scan3.bmp

SHA256 da10491de5f5b5c22ebfd630a955dc7465b93a1dd882f693774c5f0cbcf725f8
MD5 58cc968df68feddb3da14936f6e5d202
SHA1 1c68982ea0fbdb583ba8964cbb01415d1c791e46
SHA512 8618f22dd14fd88f8f871ff381e1656ddeacb6e95a73677e15a5c1e012ddefa2a1ed5efdc197b3715b01737d0ef0bf96d6c42058a0d06508e73598a752fb8af2
SSDEEP 192:lK4Sxvbfrbqy4sX58415HMpk5Eg9Atj94EnBGGF42M4eqZ+tprtxi6QahM9V90n+:l66GWQtprtYjgonqba
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

in_scan_title.bmp

SHA256 23bdee6efc44e2783ee3d774a4418b9e89e52eb9e4c8f69a41f5d933b585d8f8
MD5 5ed0ccd12126323ea14153061cc7a6bb
SHA1 32fd8465b0841fc8ab705d17585ae38a055cb8aa
SHA512 0d68d8d0d990f05ffa5e09d2cdcc984a0bbc4035a194b07d7fa442c4743cc690023ee1004dd4ef5d68d34ae07ec5ee891f3e14055f0f2aa008e6c5f8f788ba14
SSDEEP 24:UNPlbqS5qyMD5kNYNMjTOO2QZaQ1C1xjD2fX97XCEUcc8VAhtMc:UNdbqSQh5Hih2XQGOMWKP
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

last_scan_date.bmp

SHA256 a763cd866916ed528a2d8f840d7cf2411e8a33a27bd24af60d90826445afe9a4
MD5 6f279b1359e58b565352d7dfb22fb99b
SHA1 5d6bf9efd43cf44392e820d8de5bcf3397a13764
SHA512 8890d5fbbe63a67fda6fad36e5beae861f0c9b96ddaa941bc3daa47f3764226ea8adba8302b4ebc606682c83765d37a9d32db43d317f1b0e909112464b7cca4e
MD5 SHA1 SHA512

NSIS installer

installer

license_date.bmp

SHA256 da02a21ce3eb8bcfda30f79e0becde4cabf3947ef372d3ee7bab341887677bd8
MD5 3767779586d2d2bade00eb29d6ba1f32
SHA1 cfc26a256c8324ad0debb1959fe0eff815404961
SHA512 e760aa1437b29c6c409e6c00c5202bc6d7f31d2607113d56e9f3ae3dab5a74a2cc8032164559418d26d9d06b8deba00f13d69704dfa8a27daff9294313400a55
SSDEEP 192:LMwlLU9UUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUb:LEd
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

list_control/ColumnHeaderEnd.bmp

SHA256 4c4d31e562de80c50c8e99c31c05c984746dae51dfd96e2a3dbb0dff2132ea35
MD5 4de995d75110e1ab3d6b145002cd71e2
SHA1 f384d66a00076853b79cba92ec9ae62c518d8539
SHA512 114f04b91ff3c5337e74dfce03d9de9ef3ab29f95866b7dfed41188c8cda80f61de7563ff9bd129699e699257826bc3c262dfe7aab67c0d9f3aacc4be6f804de
MD5 SHA1 SHA512

NSIS installer

installer

list_control/ColumnHeaderSpan.bmp

SHA256 c9e2155299792469abb148fd49d969a1dfdadcdf0aeb6787a7aa8b7b298186b4
MD5 de08b2060f959eb068fe038f50cfbfbe
SHA1 bb4899ac1ffa77cf6299ac926f82608e4b3b5f10
SHA512 c549505c999dd331fa179362af1900b8cb6214d66104b9e9f3f7853a4b4dba9e4b42dceea5bb24a6ba19e5b75dd812b645f17d7096ffdfd1b90d7b1a3ce3523e
MD5 SHA1 SHA512

NSIS installer

installer

list_control/ColumnHeaderStart.bmp

SHA256 8bc062663fa097f20739272500ffdc4696cdbdbbe9c0a6d705c5a2cec237dd05
MD5 ab38ed6b4efd755cc4992ee8c13e3d2d
SHA1 cfdecdc7064816ddd3261e660eb12b8b6d0210df
SHA512 f480fc87173eee0253f5ae61f8b3511cc9a43e1618f32b111b2b2f02920c0866da611ec4e3d3d2403bb2a9d2e666a91e977e43778175af8b71e0a7092a27c7d4
MD5 SHA1 SHA512

NSIS installer

installer

list_control/HorizontalScrollBarLeftArrow.bmp

SHA256 26f219bc1619fce16f0a8507e1c485b41363f69fdadc8d2ca2da984a9d519557
MD5 8254dbe317ff0c912faa1bd062311b57
SHA1 3c0f57cb995636c06548871cb5ba02f9c90cc920
SHA512 639e1803c24ef6733ee3cc41dc16a856bfdefe553f0f6518a826cae2783fa74ccd5a2baaf1035ae9cd2d9e35ae7b17540dac041b5d20808d04773c1caa9c3f18
MD5 SHA1 SHA512

NSIS installer

installer

list_control/HorizontalScrollBarRightArrow.bmp

SHA256 33eda00d50c7e8a9dbe422bed75529609fc7ea0a1bae1f68552cfa4d299d9766
MD5 2f029b7f3be5ec814cb1425a08f58b94
SHA1 830ca1611f5b1a286244f4da0fa031614c126c93
SHA512 8ff4a9fd853b078e5148078016bfe142063e566d6f0e68b48189235906323efabb9f183f09c9356a30f1a1e3e64fb6ef0d8e59a77200b4be5a109a7a897cd8a9
MD5 SHA1 SHA512

NSIS installer

installer

list_control/HorizontalScrollBarSpan.bmp

SHA256 f7310f6649cbf9d7d0a9d4b19cb72db14e8bd5f719a5eb639bf57d5e5c0c10e3
MD5 aa6396dc8ca9da7edcbbb19342218ad9
SHA1 c41935288b7733ed9e10ca8286afa3b5f15b08da
SHA512 988e4b30ada67240e052cc4057cc3b450fed36f612810e1af67d759412dabcf6c61f845662071224f1b6963ecc824e7b0910aa7711b51d8136cc7eb620e9be8d
MD5 SHA1 SHA512

NSIS installer

installer

list_control/HorizontalScrollBarThumb.bmp

SHA256 d357ea88c935f14d9ef4714de57d482f8be83fd5b33dc7c0e8aa7292313e4d4e
MD5 ff6fc6ce3faec44aab84e94e12c74a5a
SHA1 4d360d1a1432a8302e22d42d52ba1226f0b1da75
SHA512 68968d0acf3294039d47f4910ee64c8fbcd3f28846c827edee1f368eb7233d47befea85c311c6ae85ecf14ba1ef1a8c6dd670141ed7d70d191b16d913f48be55
MD5 SHA1 SHA512

NSIS installer

installer

list_control/Thumbs.db

SHA256 8f005e91340eafd01b8bd98fa8eac66a4c7b3467818c15028123ffa1d4ffcf74
MD5 8d0ddcc2dc7e363270a3e0bb6d6b2711
SHA1 6894a30acace793193516776d7b8138ef2d3853f
SHA512 d387aab387a684456c06f4417370ea3fde9b759c48d4d9f4a77d90732e9f7d70374e720d287975f91368b1ffb67df97fdd7164b725eb04afd3ca4d674ad214cb
SSDEEP 96:q86ExYc1Hcf6m09tshFJ0muW39NFUI8y:qtCFcfbGO0muW3pky
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

list_control/VerticleScrollBarDownArrow.bmp

SHA256 f04398d044ede4c00e5770b415e36692fccfcd78f0b60cf845b01b042e3c9da8
MD5 97394bf0348fe7ae20b49dbc3cb5f7f9
SHA1 b5277b0a2913593b27898b2ccc631670d1a6c9b5
SHA512 f86c09c4d3566d486a51b88929a0234461af1a92a133a9b49a0fa2e5377644297afff6ff5b035aedc012d707792041f43918f268f5f108a8f666f340307fe405
MD5 SHA1 SHA512

NSIS installer

installer

list_control/VerticleScrollBarSpan.bmp

SHA256 e896cb61296a8eb0372d4d6f9e9be2291b5f9b8847f7cb8b707ae1204460ad70
MD5 97ccad42336cd7a7981d2f4f4cd09549
SHA1 3c39bdd95f8cb5454920475d4f4a89678c349f9a
SHA512 ac2bf7c255197f03e9ee41ab8d76a701e6bc620f6bfe5ba705c73982360aeed73b7b8c2058847b2b5db19435525372fd8bcacf36a8854f3202b140d49dca8dd9
MD5 SHA1 SHA512

NSIS installer

installer

list_control/VerticleScrollBarThumb.bmp

SHA256 b3973b6caff0641f136339d06bb6cd0f4ee53d79974d8baaa93491a855cd4718
MD5 7cbef3581313d45eba687d825abc6823
SHA1 b0bc0d7fc0e61a5cf4975d41438e37ab4b5ba03e
SHA512 49c82e3563954e4dbbf1372fbf4a4bbb110278f0707c41a724d19790d137e6a54c0c0c0de1ced933d6fa47b90d2c7f449321f4df80b2e1bcbd887bbbcb581b22
MD5 SHA1 SHA512

NSIS installer

installer

list_control/VerticleScrollBarUpArrow.bmp

SHA256 3b1df38c56ed0ef1e8e081afb5cc0b8f67f85c3d9d5906c1c9413588381482a4
MD5 369c805c4c0a0be362eeaf5703e122fb
SHA1 f82a536d9874cc1a5dd3154bff945efc8fac35e1
SHA512 354b9a646b9269f74082159fb3ce78bea8804fd6fb7d9d028872cf1fc17152565b687732e3cd6fabb0369e1535cafb108c7e62f57f6ccf021ed46991beb79bbf
MD5 SHA1 SHA512

NSIS installer

installer

list_control/VerticleScrollbarBottom.bmp

SHA256 d6297edd987c8b03a0fc5f33053a64234a6922b3727972c690dadb59ae0d9315
MD5 7951f1a0bb8ae3a9610ca7a99f827ce9
SHA1 510c6845e56fbe74d0a80fee2c7bfe3b59f69f97
SHA512 392bf3b2e14801d746d8499bddf87b93bb7581809fe13d0b51d0df9cb0670284c62a350bad80e5733db376effdca0291b85ea2bb5b63d5816c8ab30eadc8fc5c
MD5 SHA1 SHA512

NSIS installer

installer

list_control/VerticleScrollbarTop.bmp

SHA256 d6297edd987c8b03a0fc5f33053a64234a6922b3727972c690dadb59ae0d9315
MD5 7951f1a0bb8ae3a9610ca7a99f827ce9
SHA1 510c6845e56fbe74d0a80fee2c7bfe3b59f69f97
SHA512 392bf3b2e14801d746d8499bddf87b93bb7581809fe13d0b51d0df9cb0670284c62a350bad80e5733db376effdca0291b85ea2bb5b63d5816c8ab30eadc8fc5c
MD5 SHA1 SHA512

NSIS installer

installer

list_control/height_blank.bmp

SHA256 0d3a4fa1fc8a5aa57d19b872352706285863df98bdb63e47427ba282864cf8d8
MD5 f9ff7e891cc66c807fb719bbaa8f4a66
SHA1 511ad159c3f69e773cbc5dcb43ed12417bbb1eff
SHA512 32b9f280fddc92080dea9ddbc7265e32f365966f3be9de5b785fb3224a0c6360f06502c364c1de7315e7b2bd9db56af89738c70a2ec30ad39f59daf1cb8b4cab
MD5 SHA1 SHA512

NSIS installer

installer

list_control/left_pattern.bmp

SHA256 3ddc0baf018d3f73774c848b9aa6fbda1ea00c75e7a37f2015c40a12f54e839f
MD5 473fb99c93a45ac7f8c361f6e732ce19
SHA1 b3da2bc6e011bfac76ec5d4bc11edcfc7fafee44
SHA512 1cac7940af151247fff7efa856e9f91c59de81f659cdd7a20381b098fe035a725b098b3848a54dc001856bf69c3b405f0a0e7f7ec0ab40630d7a715edacc6b61
MD5 SHA1 SHA512

NSIS installer

installer

list_control/pattern.bmp

SHA256 f07e53968d22cea212e72d65e7d9cc87f375e757c2eaf3cc80e269ffdf00696b
MD5 acb3136cae1ad6a0229f0203130a8137
SHA1 662f2a7c84a6b4ba61c9dc2c242f9f410ceb16fc
SHA512 31dd5af2663ef5afb29e343cd32fc7f79f152a928c101978140dbee850c0a432f03ac1a999e290e549f9f239d3460ae8ffa41f0125963953ff79368329fbd8d8
MD5 SHA1 SHA512

NSIS installer

installer

list_control/right_pattern.bmp

SHA256 7db0496aa6bbaafe72e2fdbe486f965c41607f46713269cede59dfbdd7d90bb8
MD5 bff5e41bd4602edd4c8da09b28857f5c
SHA1 46e6a8f90b0b1854614876db883c881af99ed48f
SHA512 9b615416cc12b55f1a8700d74faf31e295682bb1bd18d3c289e660baff9221842bf97c570d4f88ebf2a33826ee690c234313679ade1752c5ccf4888f8afafa13
MD5 SHA1 SHA512

NSIS installer

installer

loading.bmp

SHA256 e38add56ab108bedb6e072e3404cdb2c23641e64ccb5f2370a10305861cd93a9
MD5 750b435e07590384a41d9c601a0962cb
SHA1 f56a8d305d1659f1398142eaadb1005f567aefd4
SHA512 685521a4fb61727bbc4c527f88eb9f7a53737a75ebf163cc07eb2951a154330a3f3d3db1a019b82deb7faa39a6eadcfceff1b1a90246202984fc56cbcc9e65eb
SSDEEP 384:6Cu35wp2N/j8hx5pfAugxBuqQ+WW5oZZZIX//xk+fkdbjB:WG2tjoxceBFw7RPfkdp
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

logo.bmp

SHA256 89d93f0e76da8fc1bb651228f004c0e1c8bcb6e88f892b15fa94688df5626822
MD5 b3e04c378e243357ecaa38a5295fbf4e
SHA1 d33edc9784dc0ad709f8013be0edb832f47294e4
SHA512 9d4dc4800c18ed6eafb60f3e2cd1b4b638edbc6046dbedd15d08725e9c1d175b00436522980987499d7ea58a004bf061973554efcfbd582a7f68920824ae01d2
SSDEEP 96:Hlap7aNg8+TU+4Cb1mfXZgSNrYG38dM8iMqOKMdJUY6WXTu7Pk:HANN8GmfXmSNsG38c1OZdJhXT4Pk
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

main_btn01.bmp

SHA256 135efb824bc0e84b63e40d7fd753e123f46b5a0934fa3fbe0cd3b2d66d3aa034
MD5 d6f3ccd4a12c01f67b0789e9ab0e2f99
SHA1 4a4573ef05d5fbc6e46d0830c70bcfebb21eec95
SHA512 83e8dbbec0380de80835e93d8ff37394ee9ab4552ab7b02250641fe4673c639944bcf89e967aebefd24acf8e6e8e77924bad465c1ff68c81f0106cb9d1418868
SSDEEP 1536:3kBGyGHs72lz/bO8I8az+yqC3LCl/CrCArC9uzaOfaqtx2WO5:3kBGyGHs72lz/bO8Yz+OjFgi8WO5
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

main_btn02.bmp

SHA256 5cc9e26421f0517e3838c1c3d7572b67ec5218a62159cfd59ac0c86e16e1b222
MD5 01d67daa32518a736141ccb0577bbddd
SHA1 f5724a17afd7aac57b8e3af1f07b528c9248c826
SHA512 a111dc016d4fec1c9ab0ba7dd83c86c783626157575a28a880f549fb7b9de4d7061e4fd0a0c5af65e80b8b6cc9dceff4879ffa6b9a24b18723ee092eaed99f9b
SSDEEP 1536:c9gQgr+bln5JbgII69eBrgqatWlBJFJTJ5k+mcVegHnWWF7lhi5:c9Mr+blgIIZrgR2vNTDnZZlhi5
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

main_btn03.bmp

SHA256 e847ec8dfc9901325718f31a152ee54f0dfdc5cc805697795b7eedd525415bf0
MD5 0bd15b8f26427a13582e58ae25122500
SHA1 f8f0d5fdaa2c1e898126726030e7c3bef08bc8c7
SHA512 104f3a04a553c9e57af111689a1cd230cc1a94d78cd17a31308bd1f190888f3b8ac7618a0a0cf06cfc8a510c29ddf59fc5b742167535c8ca332dc530d64494eb
SSDEEP 3072:K+aViXdyQPUomCC3p8uC4K+ghkWKzkbQtlhi5:K+aVityQPhmCDhkWKzkbElh4
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

main_btn04.bmp

SHA256 4dcb32a803e44da77fe06672353daaa6362756c0360e2eb008a41f65f2ccd179
MD5 cde3f8faebe0480da5f78e070ae879fb
SHA1 823eafdaf1401baee69c33f39799d1d7180b6309
SHA512 280e7c641cf235bee2e7d658151ae1eaa0fb6b7d77f1f10702af4f59fb62a9e35b2a8749c5db31b8043d6483faacd2717ead6122bf1881647c89d93adf3c184c
SSDEEP 1536:y062+vBWtZ5KsCRPaNZ290BGo2J3Aj5yUWwiB:y062+vBWtZ5KsCRPao0qJ3AFyUWJ
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

main_btn05.bmp

SHA256 cd9d31ed25dd4ba61ea70a2e0fab02374f12d72e6b1d6979e04d196e0b39a23a
MD5 ad07b7fda3fe115c42b4793619a788db
SHA1 4c42317ce65d7c74417a07e0f8435c82fd3af9e0
SHA512 4846ae4624f8067942be632800b3868dc5127ced0472956a23b6e922bb127631ebcd3af6aa5cca0b2de6823248dd2015e148993569acf0908c017434e789bdcd
SSDEEP 3072:75/cIrrrrrrrrrrrrrrrrrrrrFrrrrrrrrrrrrrrrrrrrrZrrrrrrrrrrrrrrrrh:BhcTg
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

main_btn06.bmp

SHA256 9daa3ce1b30b11c02813a613683afe70f9fab4ab5cd9c184ef188138a45bd2c6
MD5 072047a1ec7da07bded22123679a4bce
SHA1 606c3ec26af0b6e60084e09f51a5761db3932249
SHA512 bac3fe3bcac22048ec8b611c74c9d9b40618b24796e1848e036721da13f3649c768eb8896d99fdde8ab714cfdf2c69a14073832a134f93e0126667e54a4d3f4f
SSDEEP 768:7a/P4IIfeRIWAmLaB5QxrfgYUWT763+S7V:7a/P4CNaB5QpHT76x
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

main_btn_scan.bmp

SHA256 a2a3e6e182bb9da0bed9438903cf57259d0e310336487ee6f4172ce3b59590ec
MD5 1d19cbf59e470fcb1d16769e0ba9f0ff
SHA1 56b41b5a3186dbe2003bb1d15fb1b67c56e49485
SHA512 188576796a1564a1ebba9a97c34e94ff9af2ea9260e10c8f9be15976e4b36d7ae45ab7d9f1e4cc5f4341e1e109e6f52b29a55e43baaa70fc03b0a6ef55c89251
SSDEEP 192:XzP5HvShQVu4IyFeYHcGhUAzUj4qfyo8pVIDBGTKZ0VoZmmiPmGIUgJR3XQ3mBgt:XNPSCVuJyFJUjv8pyDBRZ513BUzua
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

main_btn_startpage.bmp

SHA256 c9c20c924dd21073c38dce85bd952fdb6ab3ab3d50ae1f9f088e85280062f965
MD5 762697b77ac06a81072b819c34d5a4c6
SHA1 0aeee297ab556f41c83b0b6f4fc55aa749e3a1e1
SHA512 7fcd72be95a958c2f2642bce8d02579e4b01280ac516bd279422d2e8099afbc37ec399f3cfecb5d143d5602b5219b8967783901aaf8ecad9052c5fa810619dec
SSDEEP 48:E1J4RaluMfPP28KQIjNw+Lv+M9+8xiujT:E16RuuOP28KQIjNw+Lv+M9+84eT
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

main_chk_general_scan2.bmp

SHA256 cb11d0a98a38f3d5b62e879e8f7a64a23e46c1b96f04c390f3278b622312ab31
MD5 db0b201a9d700cd7e39d9c358237172c
SHA1 ebcbce3f4b319a7298de4f39982c138b1b8aeb09
SHA512 cdd4951383565d782eb475a3a6c5e31f8df2f48a2ab5ee87b8713d1d901463267619b148819fdbe1f1abbc1707e956e0e879f6713dd460404ba1ad5551f0ff3b
SSDEEP 48:sUDDDDD3DDDDD3DDDDDVBDADDDDDlB2tDDDDDAVDrDDDDD6DDD4FDDD2pMgEDZDQ:s/2P
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

main_chk_power_scan2.bmp

SHA256 0bdb87d77fef656e8f76f10188b648ef2b5906b5f13b70a807bee6c0ed7c8b48
MD5 9f7524427e03023ece6d54202737314a
SHA1 1af8b781ce64244da443b7f361228e0241b23f62
SHA512 5e858d5522d1133dfa27674d37ee0a4b15c7b6c3010a6bcc59fd866bcd681850b0d3acbc90eec8e56f15e3dfb4750b0c4f95c25513e828326270fb6ff5350ddc
SSDEEP 48:sZDDDDD3DDDDDVbDDDDDDDtDRDDDDDIperDDDDDAVDstDDDzpMgEDuDDDDDDDecn:s8e/
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

main_chk_vs_scan2.bmp

SHA256 69d67b118313515269d36e3998ff5361a3cf514668ee1df32413ea6ef48de650
MD5 cff353fcf08d69a6508afc840feeb394
SHA1 422abf6816b9846ad5abe42f1903a1a04700600c
SHA512 dc244b90bf3e6e041d4b21d77390d77377db8ed45f3f1c6275161136192146b8f30bf71b314413311a9f22db8e8f0e3885c51807c7cbaacfbf0f00797ab8ce27
SSDEEP 12:Pec5TwqQQ004XFqMBFYsM/Fo0j7wTwF4z4gQzUkko6d3:PeIkXN6/ZHa5Qq
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

mark.bmp

SHA256 df2adb3c2ecfa62a7be7d11fc5b259e7527aeeefbfc954214054f1b0d3f39455
MD5 c3d1983ce7ec0e54abbae4ea12a43859
SHA1 808a0734f417daf3d8cbafed0974584860872b02
SHA512 219afb350dd8d0f6d85026ab13db79dbb5cce5dfaede76b2e286f9a1c114b29bd97bfb7a71fba172e683b22e767b84e93eab354d2940664669fce76627cb669c
MD5 SHA1 SHA512

NSIS installer

installer

maxmize.bmp

SHA256 282c67cf276748a641146639081729717961ed85ca20418bf9658f7a251481e8
MD5 9bbd27964d5fc44c492bd1b49e8aad40
SHA1 3a6315f9c036c9c40d55b3f7b2e6bb9759283005
SHA512 0280ae28c87daa144481116aca155aba840ff3809951f5b274e2147bf81d385ea955c2f835f2950cbd3c1173e681a1c6b88f4d584c66652a7688f4c91dd977e7
MD5 SHA1 SHA512

NSIS installer

installer

medical_btn_detail.bmp

SHA256 b2457d299ca988e1f743fcd6b5cb1be6237e75f233771c03ec657ec073bd7cf9
MD5 da9fe64b1bd5c6f00986251448f20298
SHA1 c799f9c3a8e21df8d91450f3036f83021c9a4394
SHA512 64351e9fbc279018af9501cbf4a3ec75788af5e62b9ed49c5b838ff3bc14956e038a7e0e552c96327944c87d203f42791a3666e6dfa15ef5c8f98704a9bc455d
MD5 SHA1 SHA512

NSIS installer

installer

medical_btn_set.bmp

SHA256 89a3f570b2a66f9d9eddf24d950ae6d41a61a03dc1ed1dd2c540132a2a129627
MD5 88f566a076e9e08f9f4daa5d98725ce1
SHA1 ae9a3605a25efe87061339c628e044e9950adcd2
SHA512 e2b13ff96d9260990022005db62efd4666a8f9391ccc936e482b64d2cfd58132e71b89bb60a59d07f9b45db3d12e111b848286fbd55827e6e51bc9bdb95267c9
MD5 SHA1 SHA512

NSIS installer

installer

minmize.bmp

SHA256 7f7f70360ab4474188bc952fae5c1abcbaf23d8bf6494d23b8a447771c920be5
MD5 1bdccfa0e8d21b842d6bf3d93a490525
SHA1 377eaa07ccd6262fc3bd20e850e7a17463bca7f3
SHA512 2f8e24009cfa1d869177807db81f9446e767b88cc5f136a20f5e7cdd260cdac6f9018a66c11622a073eede5b89bdddb40d5355646ffca02fc3cbcb3531f4515c
MD5 SHA1 SHA512

NSIS installer

installer

normal.bmp

SHA256 cddbf460d797de1fbe8b2aa3f0aca942c2f0ca24aae5c87636fb16db04b39a29
MD5 3ce0e359ffb069af67870469e03a3309
SHA1 0bbb3efba4a25bdf7ee5094402168b9b59ce30ee
SHA512 e5c6f886c6b4f66b62d27d5638f9307553c27c0480af9bd1eae4c434460fdb9fddba9b14abd6cabbe8933768ebdb5e027bd95a659ecca733b623c0162b43c9c8
MD5 SHA1 SHA512

NSIS installer

installer

option.bmp

SHA256 1ed1f21a8c9e3b85ef9046a040ef701e1055c6d1dc26fe1cc16ef362ea2f3efe
MD5 39b36ecf1ec69777f38b0a1a09050bd8
SHA1 11bec865ee3dfc35ffd0a9cad1ce8b5f8a613d1e
SHA512 10e85be52bb994cb5cdfe776c2e8d17adf048a0b4b3cdcfe144805115017862e555eb08a37eff52e99e018468bf22b19b5c66c6a8b1dde0c30d6da6355f219e7
MD5 SHA1 SHA512

NSIS installer

installer

option_btn_close.bmp

SHA256 41a566d0fa2003dacf7f9b35a35a6204bb239fc2e328473170c287695727bbd7
MD5 714f37da3d3f7ff3bbba0728c7b77eee
SHA1 5c6affee87c91d1f15022b5785b671766477e2da
SHA512 b6bd5e626c2afe0a79ff789b60ffdeb99a63ee00a83aeaedf2e832ec8733336a8cc58812c32b6028a603803743ec02bfb5efc04ddfe2f9077a758e012c5ed9e9
MD5 SHA1 SHA512

NSIS installer

installer

pattern_layer.bmp

SHA256 2ca2f73439cf8b884bbc235c40578e0b31c8d2a08752cf6f4c0016ef379440f9
MD5 93c062b99e6c024f01a5ea038cd0dfb2
SHA1 27016d97c20161c68f5d23b6c200751d14fe941b
SHA512 35b1bbd6679e1017b382a1dca73c6897168b1ba2db7e4312d32cf90b3b5b9b53fa0843b993e87fab4febf7450214ac79d82a94fead20aa57773afd2b7a7e6ac5
SSDEEP 12:Hgwtx4ddddddddddddddNtt9dDddddddddddddddddjtDtDTTjTddddddddddddN:HxTMRN/
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

pop_end_bg.bmp

SHA256 848227d3599c7b0ed28f1f91b719c9ffebd33557d3275a72a8e936e90e8f1c25
MD5 0c11e6f446115cd02bd244f06ce71b77
SHA1 5484a47862f936baacbb8f64c4f3f3de9c632706
SHA512 b38ec6dd1cda2e4f806ece399cb282b745a78fb55696b5102978b1ddaf4244dfb6e790331b939438d77e93138614d2e993cc476a1627775c11848ba74f897934
SSDEEP 1536:xgoUBHgLOgvm2udznQsDR06vJar4zLWikd19iXU11P1C6/34eaoUBHgLOgvm2udU:r
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

pop_end_bgdel.bmp

SHA256 c4b8fb3765b93f6e5936d4fa59aca0cbe583b03a34c4e9d6b3a05c0806a66d38
MD5 7a9273fab2ddfc34222f6ae512461034
SHA1 bb1e455690a5e284784fac11c30bf499d86ce3bf
SHA512 cf0ef027da3784ce313a1516a3c0bcd79391465ccf1a91235fd29e0545392b964ddab2a8486f0010b1160f5ada137ee8f7126d5aabadc96618bc5279001a6502
SSDEEP 1536:KSBL2x7qs4VJs+Cg+Hv38DwglooR5txJorKe:BA73Fg+HUxJorKe
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

pop_end_cancel.bmp

SHA256 7d93294eb7ecec5a00d496472d1c5fb750cacd0226a5c69a692ede56318928b1
MD5 44f65a7c86d797ce50baf1991848e5bb
SHA1 cd878d1021bbb7977e0baf6a55bc84c53f794d48
SHA512 e6e7beeb0400cc3da82114e2bcbcd2d1d24f80206cf8275470a239a6ea2c9eb95aa3510b83029511b8bb756c67900b9b475b5a267a4e1258ed857c6abe1d2693
SSDEEP 96:V2MSyQqbCmGO666qwmhgUeinmCdtjjjjjjjjUjYgA:VFxhwXUFm0gA
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

pop_end_yes.bmp

SHA256 e0c7ef6f165677dc1c90d6d80e15653774dd8f9db29889cedd6506cae9fc7ddc
MD5 d75ef3d90e54321af78d5c9ce8650478
SHA1 b5821c71cbddf7702d76034077986d049e712053
SHA512 cba8f273b29587fefe2118672073ce49c38fcd540815d324043e306cb2cbf27f21709e426e98ec1e836603096401eea071934b1463b0851ed00f5abf02870d0f
MD5 SHA1 SHA512

NSIS installer

installer

pop_result1_bg.bmp

SHA256 3ba5948020e6a844beb556a8600a2b00e206e054b86e80e41716327e81d059d6
MD5 fd66e35aadd0a1dfac1aee3b30f7f2b7
SHA1 afcf8de40f36a1a57e7246ddc9aa5724e8d60372
SHA512 e4942f64dda8d4732290e936457de567d485daddc3ddc9d4e8ca36ecafbe985b8b08f53b110bcc8cbd993288edbbba25076b1dd3b57599c5f3312e26979b00c9
SSDEEP 1536:KSBL2x7qs4VJwSZm12Hg5mDRZs8YRJIrKc:BA7LW6RJIrKc
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

pop_result1_bgdel.bmp

SHA256 1c454f62f144273497e4a67b2940be05db61475d48488ebde106024ac72f3236
MD5 215c64757db853d55594548f1d480feb
SHA1 ba7f518577c49ee7cc5eee33e4066a829226b267
SHA512 d4a36a5a226869807d0a133a92b7197c80bb33fb362a22c291f8c67c3a24fcadd772ecb442650b4e5574bb7ab938d188eb692f318194d0f897a6a168618eb0ab
SSDEEP 1536:KSBL2x7qs4VJwSwG12Hg5mDRZs8YRJIrKG:BA7LvaRJIrKG
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

pop_result1_cancel.bmp

SHA256 59807ac74f5c0a875cf156703f6bf29270da15550fd08101b9b0f679a91af08f
MD5 d8f2546380dd4def4c37e320f189ffc1
SHA1 e011117f4337a5a98f037ebcba865944cb716024
SHA512 f90f2077a931a9d37cd1d7cd247646fc54043f2e7734e1123a9dcf9dd269ec2ca769a344255061293f8703bb01a2dae81d94bbf9452f050cc4857b90f4afa6df
MD5 SHA1 SHA512

NSIS installer

installer

pop_result1_title.gif

SHA256 7c411464705907b1a09969c2c3110ab6b457601f0b5c8bd5689ba09fad540f52
MD5 5307e3868a5b2f6dcb4efab451e266c0
SHA1 cf4fb98e75b0cf5244c4dc6505797887553de92f
SHA512 a802af3d88db7898a8e3300eebb41a3eaf185d4ec20385be783bc3c4147906808ddb808be45d9b69dc8213f4ff092d41ebfed468a5eaacab118358906b1af56a
SSDEEP 96:ZCQkz2TmqlCZf1uEeETDZb/u1ucg/idjjH1cV8j1SidjjH1cV8jv:ZJVCJUib/uK/wi8j1Swi8jv
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

pop_result2_bg.bmp

SHA256 d570311fa2c2dd57ec35281bc496b25f34e9363d2bd9eb73f661f28c436dcc62
MD5 9f6e6d95244ec36eb83f8d21cc3b31b0
SHA1 31e1811aa28a0c4c66fffb21e8701a5374c7da30
SHA512 347064ecaa0afb06ffeb1235c42fad4978565cf1b404c9a5bf806029d43142f737f27587ceccbf0608e45c28b49b0ff429f37c5a541e537f8d956812615cfce2
SSDEEP 1536:KSBL2x7qs4VJwSzB+czMnrH8s83/JS9km:BA7LEn/JS9km
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

pop_result2_bgdel.bmp

SHA256 0ffc2f7ec6601f118e134a5f1c8d70eace901cc4083c6a4ed2fbc5f79508edc6
MD5 f5079697b8569bbbc9fad88bf94546df
SHA1 5796bd83a44a19c32680a31eacb8eb6a16d3aaf7
SHA512 6a83b4d0c17f4c77bca1fd9b5a78a1e0df24fd800c5dca84de7108fc11a6293d4c27ad40cf368a85abf6de019cc4979246d6f41c6df5c0187141450b713a8aa9
SSDEEP 1536:KSBL2x7qs4VJwSzE+ctunrHYs8ixJorKe:BA7LEDxJorKe
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

pop_result2_title.gif

SHA256 22fe0eb62fd9f2b3e56ca2ed83fddd5285b99297c9eea3b2702888fdd311aff8
MD5 4a4e8793b794f2025a839437d28ddb06
SHA1 5cde8b287394815cc014caf1767b15613ef693ef
SHA512 f77d52508ed679c0a94be7dce5fe35e276c3d7fe721cc8b71bd647b7c7752abad2b418409fbc470af7dcdc35289ee42fa47567004fd58dfacfcf6b439d2ac6e6
SSDEEP 96:GZC9nSYYuK884mEHTRqW5YNtmZVy/dy4aJUppZVy/dyCaJUpE:QC9nSQK886TRq+FfMy4EufMyCE5
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

pop_result2_titledel.gif

SHA256 c30f0eef98e4159aabb8a281281b5b880cc142e783ac30128333a3c051adfc7b
MD5 b71e0fdddbd6ed18fb1e6cf7b966a173
SHA1 7aadbccccad5539f0837c34dc483bbdb0f5d69cd
SHA512 e571ad93e9a9e8bfa3428e00906f1f8768beebadab24dabaefa13ee8333950d178b91b25f27d3d17c0b9bf3c84b0f67d8a17ee099c32a4050844fbb3a481176d
MD5 SHA1 SHA512

NSIS installer

installer

pop_resutl1_ok.bmp

SHA256 4a25593eab2bcea5cf1966057de14f5601102a900d378daa06e5fa91ff1cd153
MD5 81803080d082fcab04fc4585623beb4a
SHA1 385f880fcade69f007bccab9aa33beebd82450ba
SHA512 47eca9313fba6f9bae6496838027a256f27dba67a366eb63d4632067fe0e4d4c512bc29731e71e2184e9dcf4e70c9d13e8d5b30d22f6835ce162678d4165d48a
SSDEEP 48:mTPA0U2CfZIkCjjjjZuqrN263YplbGCXGRC35I5g5s5I5bm51akkk4kkkk4kkk4m:mTP1U2CfZItjjjj9Rulbf2RJqyO
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

popup_btn_curedel.bmp

SHA256 4a25593eab2bcea5cf1966057de14f5601102a900d378daa06e5fa91ff1cd153
MD5 81803080d082fcab04fc4585623beb4a
SHA1 385f880fcade69f007bccab9aa33beebd82450ba
SHA512 47eca9313fba6f9bae6496838027a256f27dba67a366eb63d4632067fe0e4d4c512bc29731e71e2184e9dcf4e70c9d13e8d5b30d22f6835ce162678d4165d48a
SSDEEP 48:mTPA0U2CfZIkCjjjjZuqrN263YplbGCXGRC35I5g5s5I5bm51akkk4kkkk4kkk4m:mTP1U2CfZItjjjj9Rulbf2RJqyO
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

qurantine_title.bmp

SHA256 2428ee8bdc990198dfd3283812d26b804e259b2ffe4a60075fb811ac320e096d
MD5 68cbd8f0606698041019e2abff0bffc4
SHA1 5c8e8efd5dfa62c2aab6e162d6adfbc7f789651a
SHA512 fede740f0329596b719ab7450b4072380a68ea158310a2d5eb64277325e380edd4fdc79ab37e50427b44f2c9787854f4f5df7e61657149c06fcb3e98b26973d6
SSDEEP 96:3hTu/4tE6IOiyDx48YE9MOxChK+2abyTHuZOWgO4amfx80:3h8/1lEhu9QS34H5/
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

re_scan.bmp

SHA256 c4d4637b262af80235a88cd3953daba5b87c07f0a2f0188b6455ae5fe167e0e4
MD5 01fd96a4ed5ee2bdccb69e1782515a6f
SHA1 98504e08c9a266a8326fa5620a73e7936dc27505
SHA512 149494110b81017c074db17597b4336e99765707e7bdb42974b7268b781076e65872312bc6e419526a4778ce37bbc303221aa718f2bf37675415af26acde642d
SSDEEP 24:XswUPdNbrVrR5vXAvXr7yTQ1TQJKx/J1/JvJhYrzYeVOrskSNKVr3VrhY/r6r/jm:XwBHmsQFQJ0LoAVokVVDVteOTmOVO7F
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

realtime_start.bmp

SHA256 7a4ff130e9d76a8cfa4f1b0808958dc02aa3b9f37ac743a8e4093d5d872d6ab8
MD5 3ab23e83d638a8b0547736889114aafe
SHA1 179a00210ebc08b99ffa90f7d3d16df6a840b3cc
SHA512 85ca0b35e8b4284f15731876b729c63ee7cd37c772705de4dcda1af9c29fec31eb82f523c262cf901fdbd2059424fbb1b680ebe9421db57e497527284b23f78d
SSDEEP 384:Yb6xYTOi79s3zYnkYnAIU7tvOvyr52nrAWSVgQ9QgTcTrNSBRTyEcvUPZGO:2iYTOi79s3cjKWqr520wYBLPZGO
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

realtime_stop.bmp

SHA256 f4d6b01bc92d9dba2fcdbdc9a9b8d3422bf64c31788854949c96338bc28ce110
MD5 c2f90590ad02751faa467bf4771a945e
SHA1 5b0ef1f61b5370cfd9db2c0fad7b73834c746d8d
SHA512 b2f20519975893dab0628aea65efd17c73c59fb14f4974f1ae064fd1a16f6b417b844903e22a8281809ec82b18a57daa3c4460c35fa0fcfef7876ba86aff1c1e
SSDEEP 384:cgFMzhBsw2d27IVaHZZZZdeZZZZZdegNndvdMOVOY9pwm6W:P+zhNICZZZZIZZZZZIa936W
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

realtime_title.bmp

SHA256 0226352bdaa6e8d88a43a4027667fb4970447453968d80a6a10ed4556163346c
MD5 2f3517084090777e1d9906cd81ef1ec2
SHA1 70af5ef3f36c8815af1f8b57b9be7d9fa456d663
SHA512 478b20a2f8a7c27442d193f39590c90279b2243ded8adda8afe74e56f2f4db0fb042a10da43ef9c59b623ab4e1ba5c8debebe723d32333ed9572faa135e2bc1b
SSDEEP 1536:hlupmkHc8PNTN79AGeePwVq6fAnA4vfnF2XI/raIlaz2Pqfqe+JC+WJK5Pl4/a9b:5MSE
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

release_all.bmp

SHA256 cd0cff12d608d4a50617f320606768676db54f58405de6e1f52ed1682e54aafe
MD5 62782f04c69a7c32a43bea501eabb6f0
SHA1 aff11daa8ed65120c73e2990470881921dde6132
SHA512 23e35acd9016db24bb6c6eec2e87456e06fa5281c438707e471d97504289c683e84d4b193712356d83340864879ef8e05c5960adc2656d02342fc6ab3f8b7588
SSDEEP 48:w/vn9T41JBtk+NsS33JY7a7A+lxEz+TI/RXMj:Mvn9TgxEo1lRTIRXO
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

release_all2.bmp

SHA256 82bd2541a2f2ea84e38f3fee3bcfd1ab5e13de16c1e8239a70b9e98081000642
MD5 102a74e37322a98d4b8d640f3c841249
SHA1 c5e1ac446bd9a5c08afc0ed5eae2b537602c4c36
SHA512 7d232687be34fdbb8565b98c37dbc0396fc4c9f896327214638c985e59d4fdd2940c88c6d01c32e8e1701dd4f12a4061c40f951598d45c7aa442cb0e3db9b618
SSDEEP 24:xKnMfUz7yTPGd1YOwHHHfNec5LRq+Uq+CUZiljKcILy3ps5+LbpRQy5TA+jIwrqZ:xKv7yKd5P
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

repair_msg_bg.bmp

SHA256 48853805db2b20371906b654998705847d8358e2bce9f2703e723ca5d994abc2
MD5 1682f6265106bae7a176a92fe9ea5ba6
SHA1 7a73d7ec93f5a7f762550be6014814e759a70942
SHA512 f997b13b2186ef18605cec6dcaa14aeba28f48855bf80c790d1608c275426ded514b6cfaeee5d98c7c613d299a531154b585d0b6f790192cf72a44a6bd1bad79
SSDEEP 1536:xgoUBHgLOgvm2udznQsDR06vJar4zLWikd19iXU11P1C6/34eDoUBHgLOgvm2udU:u
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

repair_msg_bg2.bmp

SHA256 77f4511006eb300aee3dc98122effa54c7e09b5cd8cba9637c43d6359598e33f
MD5 62e24aedc6a4b52606b0f19a4474ad1a
SHA1 8b661a0706cd5e697cbb362c5e39fb7f1aaa6398
SHA512 974ddb1b115cc27c917f2cecbf49b4feeb3a408ece6a4a49a33e8927f0c96d40d19201e89d08c9243ec90345008b843ae80476a0cfe0fc2d0d03b343b10010a5
SSDEEP 1536:xgoUBHgLOgvm2udznQsDR06vJar4zLWikd19iXU11P1C6/34eLoUBHgLOgvm2udU:C
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

report.bmp

SHA256 d9a9ea247caea67984da2b6f3c730327a3965ba9dee2bce0ca14c4ccd81e75c3
MD5 c111fb9ee45e1781297fc18a78834c88
SHA1 28e5eae3ab5663f4d398dd287fb2358a2102f0ff
SHA512 98e66e36668f2b05ff6097b9fa349baad9159fe9a1de9f44bc0b660fe5d29e9e7f22faa5f064871e8be66a250124871c2f141d6313a824fdf668ece23da71ef3
MD5 SHA1 SHA512

NSIS installer

installer

restore.bmp

SHA256 44476de06e409e94bf4655e2a19bd75b256263ccc709238446f9638fce6ccdde
MD5 1ac5fa3f1c46f9d5490dd04a8fbd0b05
SHA1 3539ed586f9a93f24d83e47210eb97835784a69f
SHA512 68d83fd56bae88ef06d74fc8080f9071e1b0a1ef9ef338decf83e991c83fd43404fcc9a22221a15185d097a8d1b102f15419ed94265530401c02699e0e11109b
MD5 SHA1 SHA512

NSIS installer

installer

scaing_repair.bmp

SHA256 92c4486a465e22a53bc801f16947ba30c0cba76662a912d2f1d00abd9f0010e0
MD5 0c0adaac49f8d93d470de3d8c800da5a
SHA1 82238438432846451cc161769a020cd8dfe361e6
SHA512 2c5701628b5812053174549d820836186294ad6cd41241b30f41dd502e5a0276e03f4c773ff476d586b8a74227af1e9a34d29a2904119a29f80e26da1d3a9749
SSDEEP 12:wg/iZnaCVKUjbAdM91FDn6VAaCaKa6aKaqaqaaaKayaKaCayaCaKaT1EUytUHdPD:w/stYjF2p1E9jG
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

scaing_repair_can.bmp

SHA256 087586f11410e01a6a3008a5a8c89e8810434c2aa017bf93eec44875c06854d4
MD5 7e96ac0eda9a0942e0ec36ca0187c00f
SHA1 4c007925d618cfa4fd6bcda225c218c2eb6a7125
SHA512 fd28881d453fec6196db91a03722f7680b72b3f6f3166c76270f2eb1a02d9580cd14f300c36626cc18349e76f760db800b04f59150b7c0b43769935d886e6964
SSDEEP 12:GtmexYMzppfw83T2i4b2Z22TIPW2M4T2k4pin:CBx6
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

scan_btn_cancel.bmp

SHA256 f6f39505bb066248e093fa5e6617dc2f77d1ee2cd88dd4a59faea534c548ce9b
MD5 9fadc99b863d63e4066a732954854220
SHA1 4720a89ad25424c0aed2012d269fc02b9bd021fc
SHA512 dc6cf2d5451e8bf9bebb9990ad5ddb86c014a893495debd91881b7cf27bfb0c69d652d3dbc3ade087e907169dc5c8061e4467b7f6d3a4629448c414bc96d710f
MD5 SHA1 SHA512

NSIS installer

installer

scan_btn_ok.bmp

SHA256 cec1e922ad9c9b6fb52089fa2854bca4d56f03c0bfcc548d2f4feb86c347faa9
MD5 fd0efecdad08ef72db40ca187dd8f388
SHA1 2a651b1a0e708ccfe3d0e189f65cf41dc9a10399
SHA512 12ab22e5fa4070fce82ba3f1ee5e465d73e3bbbd83fb16290f34be9e51877c6f2615a79fbc69f620c5c3efbdbed1f23bc2088b55674e4b90b6da674855824fcf
MD5 SHA1 SHA512

NSIS installer

installer

scan_db_update_info.bmp

SHA256 0d680f21adc0529b523ce2f26b1108449a1d62f83e0d3a8bfc76c0064e1f2765
MD5 358d677fa5a7efef0115a75d7c754df7
SHA1 98453fd6488b90132a6c9b56ae3e7aab45672b51
SHA512 b69bf4d4311b2f63a9bceddb77931b28a40ec60b04eaec2032af69ca084248e0e47b64d83f8bedbddfab50a2d349fd18109cdf3f3705e597d80f9d85ce7358be
SSDEEP 24:RoGna/2cpcPsScmFc7cecachcxeIScac7cPscbcLoFcacBcu:Roecr+XgoG
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

scan_engine_update_info.bmp

SHA256 2d4daf629bbed37ba7904e42541183836166be5a6371f8a7b0a92b018784d41e
MD5 8a796a34d063cdd8b4489366217113d3
SHA1 9f953ca0b6440c3ed6e59a5193174108a082ac89
SHA512 01bf6074e24358429e47d82ef220cb6cb80b9d88f01ebbe89b7fda621e4c41864e94367e8599e6733140b9d130cd45be050eb87434c0412f8c0af7a8695a747e
SSDEEP 12:k+U5Z2yyy+/jiyT3ilnfEEzEvLabLULaLzFEEQctfIt:k+w4Lt2KDdcW
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

scan_info.bmp

SHA256 614212b7555564b4e3fe961b2a96ab589b32948ff9d2ca37854a5f9fd70c52a6
MD5 c99b9cd0850d37798984f2d555686f52
SHA1 10722a6510dbbc9d0c379465a03bdeff998e17ec
SHA512 887f2c3fafaba207b969c11762e702f49f8f8ad80069c75605f010072eb1bd381551041f45cd41a857d0d8747185123a4c21ae3ad3e002f5f6fe00d06c5252e0
SSDEEP 48:HyAkik+cu9+km+mwi+fZvdw2ffdmfGcgq4vFqmkcwIGcXf2fwwDykbhfhqffwcm5:HyG/TUdi4ULC
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

scan_list_bg.bmp

SHA256 ba98260fdc9d615ad09b64e8178536cf3b242f4a1eff4e6492948069d4ff22f0
MD5 0311d850cb75d172793759839e321384
SHA1 b287be5c4d9c484aaadfd11b8f8d11b0c3d10fe2
SHA512 098d1f1f0bbfe98ee4bfd0fd6d98a24b2e2ed3faa07b634f2fe58ba5598bd3b6100b665f2a8e7738726fda418aa6f1edda1f77d81379de1d740dc205cf03805a
SSDEEP 1536:g/yRKp2nRgPn5XRgLyRgyZIIxuh6dL9K4VuZjDh/iAGqQs/NISJxliJyVPeFlh+u:g/yRKp2nRgPn5XRgLyRgyZIxE
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

scan_list_bgdel_bg.bmp

SHA256 bc3851bb510d091b2239a70066a03acc65dc1309e10fc67375237774b30ceec5
MD5 aac103495b3a951a485fe6d637840f5f
SHA1 bc6c0b5ff935945d1e0c2577cb4b503f51a4f4e1
SHA512 2f0cf771b342df546fa5d6990b5e97dc79229a839d1ce18d1816dd88a68fc703cbfd31c85a353b2d3db5433a847627acd0acb2c1a28cd77fc43b303a357c2be0
SSDEEP 384:hcrFuHNF7Zsg/Cd/fQ++++6l03G7uMHPFu0sZ3/ypD6A3x9Ak4Tl66HzKQ54MafH:2rFuHNF7Qfg3DMQ/ypDyninApqxLN3/
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

scan_start.bmp

SHA256 e813d927abc2fe91c3ec05c02d1628ea54dd69841dc863f05b2d16d60be751f8
MD5 c31ea125f3c17db4188c0c4e8858ee3f
SHA1 103a27a673948ae97e5f3aac813f5e60751ef618
SHA512 8f907f834cd8de39eae5da44c1f0183aab3635014be5268567a208e119f16bc3c1d69d503c474919ac7c4d5148183696d93afd6d06f4d6bb2fe13df6455ca735
SSDEEP 1536:h0000000000000000000000A0006c00ii00000000A00ixx+xi0000A00i0600iQ:iAzPVIQ
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

scan_start2.bmp

SHA256 57fa0598acc30829832b0956c4453a5eed1e444125310e5822d7efbccb1d00a8
MD5 da1b89b245ed058b6e214278e50ebf4f
SHA1 d93025aa21d41c2dc7204487da5b7ce133fc3f68
SHA512 d2058b799bececd74419298c57d50e5a1a05e8d4c93b2db75575f650bee2c984f9c8d24b2acaf52e39ef19b676e3c02a6bdf2b0424e769729020675d0b6ef953
SSDEEP 384:8kBtEoYLfRiTsUVV0F7yqApIRi2bDrPP7PDH:NRTs+KF7yqA2RLrPP7PT
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

scan_title.bmp

SHA256 7a60e6a1020c9dafb6d1411b14d56e38403c5ff74139d3295ffdc502eea08af9
MD5 2765410913b50bee00716598e805aacc
SHA1 c52f31f054f68aded89ed6601b5d222b76e0ae71
SHA512 88eb718a3c974ab9614b2374191f8e80e1bdb4b1cd0479155c1585d8a13bfb8942c04d0a7fb700625c26ddc8fe7cc872de447475e850a4af008ded9c0d885047
SSDEEP 96:0rHS4ubmixkdnl2FMX7LxbmHSN0jbIJOMcba79BJl0+R+xSw6wh1g7NxHf1BNhHY:0rHd517Fi6uaxnR+gDP1PmpPedPxwmZi
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

scan_txt1.bmp

SHA256 559b3945ae96a5623696be4a7d8266830f297356ac8a2e5bb7013fb1b9f4371a
MD5 c75b3b8e24f0a6dcf14099557a7eefc8
SHA1 8cd23f5f401d48fb9ff84a40d67342f7a89980dc
SHA512 8fa7a7843430a6ced750ece8ca7b96f3ec1a6e5453f8467a83d7c2212c9878144a4884ef198af2ed834e1e7d9d31039f0fba9b7039cda07ff4cdb0b07917fda1
MD5 SHA1 SHA512

NSIS installer

installer

scan_txt2.bmp

SHA256 05aa78aa4b934091fa73d85dd176b8cfe779eb98516bd311e83b258cdd2feccb
MD5 88a157d539a0cb86c5598534f4086dbf
SHA1 2149cf8399cff1645af49e60504b5a185418dede
SHA512 030cf3c3c2442a57fcb64a791518d86253495e382b0eed8c56383b6efd87c9e9873ac864676aeae27f3c27b8e0828d899c26a3eee32b8dbe0b38259bd2a93e5b
MD5 SHA1 SHA512

NSIS installer

installer

scan_txt3.bmp

SHA256 f4d869b199662f272a0e93a91893dd194409b74d6ea7c48ea77a2da4cbefb907
MD5 d6093e03f025d58b33661ed92ff4ccfb
SHA1 208cad7ab58b97979e51f82ec9fa2bde8276d138
SHA512 d79548d83a69064d12f111fef6015ede9480ad45ec3cdac7c2fee607da31407a7fcdf00bef3f58046840a9af3da0fec62070014263843d9c76dbbf3f1daf4936
MD5 SHA1 SHA512

NSIS installer

installer

scan_txt4.bmp

SHA256 e8a76f3216581534a94b77fda7ee6cf29194caaae5a03d2fb039701dde67ad76
MD5 ccaed8aa5275baf8367b2baa235efad6
SHA1 5369135ff3582545ec7552723fab8ae79fe12f4b
SHA512 b32100ea24369a458aab412163ab089bef92fb8ab298bf44d9e58edb09dc6f8cb353a165e7098bce564bffdb2228e190d40f5dd0448aa195d8d9b1892828bad3
MD5 SHA1 SHA512

NSIS installer

installer

scan_txt_disc1.bmp

SHA256 f26cbb1f97666d1f0770bc74c575a6d850c5a7f50efbf3ad121d8bda099162d7
MD5 7f0c7500a10086b68963a9f3954acea9
SHA1 2b7d46adadf5aef13a07ced5ec9eeff63353ad2a
SHA512 491937fcb6eee8d82db6532b8c53c7785e2f5aef17d402d54918f4933a04024171dc457ad8bfffcf892ea4e7c4776335aaa58a44cf5b07d1024085fa366cfa5a
MD5 SHA1 SHA512

NSIS installer

installer

scan_txt_disc2.bmp

SHA256 c92f6a8ccba03a42cad50b76c8ad783b095c93ee93626949a7c10d0318ac64a2
MD5 8a91e966d8d1d30e6e1fb3ee2ec86eb4
SHA1 fe7f8192c25eb9c39db80a4619fbd52dd604fb6d
SHA512 f4767d991a6256f77c7dbfd1f1007f9764752610ec66d9a197c51f5a21c625d3c71b7cbb6a7102ac3ae2fd41b56e1c44a60965d449a2bdd75aa563f5b8234734
MD5 SHA1 SHA512

NSIS installer

installer

scan_update_info.bmp

SHA256 300222148b4a71d6c65a4db972edc838edee0634ffd0049222b7a0ab539e9c35
MD5 23bed122c9d51a0954c8b7b3345cfd64
SHA1 175159efe6f978dbca8c7b4453c78c6fc9cf2f2c
SHA512 9d9e89d9ac8ff5f2a1cff5088fd36b40013b5ed053c7e2c98cab0d700939a3fa45a21b83dee8edf6a4675465bd1fadf2664d8dad63cd827850c08f2c7b490687
MD5 SHA1 SHA512

NSIS installer

installer

scaning_cancel.bmp

SHA256 d8bee8ed2df34325c341b3ecb088676d46b39830c5aaa63f7d4a52bbbd8dfed7
MD5 33e141c9ac7cdfee67b8f2812a496488
SHA1 19f58302f3d545ed61e0e966ffa0501d75021688
SHA512 e2ef361dd004a33950bf12032519adfa6b37a3a2d93375b8493dc95d4f143e425ca4c9abedf32596242e3e9a6967b5034d7ba8425357381ceb5239e42cc124ba
SSDEEP 6:UQl/CA6BeOnaRZtIUDi62qD4Z0ogE0Y4kw84EQ4gTw9aSX8UmVdUPXDSOnaR/:xa5ZnarKUOsEZYw94UsE7na5
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

scaning_counting.bmp

SHA256 cab28de0661863e3efd89475ca5cacaab8adb48e8569a28c8258690b885ec8a8
MD5 40ce5d7937b3a4fcf291cd2fade8fef3
SHA1 5ec685240294babece9127667ff541c7b92f7221
SHA512 d4a60f6c8616d181922536e3ffe0ebb812687ae80da8ed123ab798876a4118a31f3955e523fb974952a827bdad9bc9c238fa8a57982bcb2682f7169ed00ec8eb
SSDEEP 12:wlz5epMyq2nFiRJB2zNEETq80b2S653C26LabEd0D7FNLaLZTk3bfbUhARwREEmt:wfv7qDb5oTCXF5yu2hStR
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

scaning_objects_count.bmp

SHA256 709ae7885ff866eceee62d14c418c082ddfa0ddc705bbac1c16f037b7a02ebdf
MD5 850a44c9716fac955f2abd2e1592a20b
SHA1 e6e3372f965d6aaa8ac02ae3e7d77c7c8a7ec50f
SHA512 b8331fb4b720c63e918c542f4693913f06e399c11f28b1e85bfa052feaca5fd9994c168887c36ff818db9990f5c1db43f60de7919dfd14b8bc568a69248ac00a
MD5 SHA1 SHA512

NSIS installer

installer

scaning_pattern_count.bmp

SHA256 cee4b5df5d82561c36478904196ee6eb50ebdfddc75fdf71aa729ad3d19dfad2
MD5 53d07cda1500ed11f9f468a8e87bf01a
SHA1 a589b26cf83507234550929ae52662ef6742a213
SHA512 d5e8a4431a022fcf416466e80dac118049a4fb5bb8eb9357b63e36ad4b88543992dce04ba96f718820638f35f2e77c08fa44cdffe3664262f8aaf6806ea0ad0c
MD5 SHA1 SHA512

NSIS installer

installer

scaning_progresbar.bmp

SHA256 bf98f3a6cfd3fbd38a6064f564575c5e8a548a6873633ce48f7db66ec43cf4da
MD5 e586328544827f25ee96c1febbff6d32
SHA1 4427b1be46e020e849648e2edddfb99d2fcb7306
SHA512 dfe620c52421f9490a386e4122efa4cbe51ab5055d108e3c6ce1eb4a80142707108c6037c329df1b99ff9bd90589e0660c1763a73ca3ae39e90878434aabcf59
MD5 SHA1 SHA512

NSIS installer

installer

scaning_scan.bmp

SHA256 7c5bcafbec176ddf430a0688b0551fff0a1b11b4bc16ec252d69cf28646e5819
MD5 7a7f696ead8fb617694a8f6f5ae8cf76
SHA1 a57c5ac076e335d18adf0619640727c4ac6c2af3
SHA512 404726a6eda7c4d1a1b150aa8ef87b5f364b9d4e9fa3aec7dbee5af8d9c951bfd772bf8ab44a44994b15025b1a256c193304504c7e9d832cd06c6b5e2ffe702c
SSDEEP 12:wg5ZnaCVKUjbAdM91FDn6VAaCaKaKaiaqa0a3Ral1SxUbazUHdPcbEj4JunaY:wUstYjF2+1sR/Y
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

scaning_target.bmp

SHA256 2cc92558db6f0a5f7d6e70fdd98fba3252dfdc8f52c981d12880e2e73811ab95
MD5 02b7b1dc111229285aed120f94b7d958
SHA1 337f205d66d025726730cd2dd1e2156e699499bf
SHA512 d42679c2dfb0de3c0677cf2ea9dbcf7f728e77f116c981f61d2c31fe43c60f04f2b40a2a7dad7321745d238a3e109f3e68b1b0ecf0d06555ad2077b343952646
MD5 SHA1 SHA512

NSIS installer

installer

scanlog_title.bmp

SHA256 38b119e4dc0e47d172860ee1309805e4bab758afc136878c17e417beae51c71c
MD5 b038b25647aab7864dd2b2b4f11c3b1e
SHA1 c3a120b6c58d383ff7e859e081168c1e1f90429f
SHA512 0fac18d65f25abb89bd7349f403a4839c39b6df7c9960a13563e3caebefed36746c572275f34f0bb1f78fd81846eb4de0fc0f6b8d2f97db520148917fe9dd265
SSDEEP 96:gPHvnLwIr68nwqK57gozVvMk2cYYlfLA26Z7S2sql:MHvbr68nmHzB2+lDA2qj
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

service_bg.bmp

SHA256 00581d7737f978d3b7c0c0013c342af9fddf19a9ee408376be3e8823a851f7ce
MD5 38afe64a4a1290e3a881a503b35c11d9
SHA1 b1789812c48bcd764fc4106b1bed2efac4139f49
SHA512 215bf9ebc241973ed2c56dc8fc1e670b1164679d7bb6bd8adda7af9733ca5e10f715f7945cb26649f321ea06e45c1600138ddd937d6d3e9d9a1a41938c6d0a14
SSDEEP 96:tblLYGZL487UtdJ0s+uXnI5sF5mK9MjmQheheEanenQHqRkRjQzBxhPF98uee+fI:hOJ0s/XK05CjpKRuQ3ht98uTca6E8eF
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

service_internet_temp_title.bmp

SHA256 05f520d4c5b004f244fdf8cd898245fe256e33130c6ccbe9e0aa89ab07f6e96b
MD5 39dad4aad5c0147389a0b755d192d6aa
SHA1 5e8a74cd483bcd3e49bb879534753bfc05f4b689
SHA512 b940cd0a4c22a0f10c6cc10ad95fef403c4bb2444edd82c74a17fe5877319add3c1cc5b73b15acd95a9aacad3b93b6077b954d96a73271e99925c8cc807ff594
SSDEEP 48:tqp0QK6p25bcXFG9A1c/a/oUpx7PF06ROgHIMd3VRNRBEybzgyDuDangOT:tqpBDo9Nin7PF06ROgoMd3ZEynzc+pT
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

service_title.bmp

SHA256 872914300d9418b16ec098b101a5fd14ee1764bd9ac87b2a27c3f0f6752dd94d
MD5 e2df56156e72e9c61832c415a81f73e7
SHA1 505af080ff6bca8f5e8e7b83e59948436f113249
SHA512 129da636abe3856d328565b9016cb4cef203243468f47c0e2f2e24fa8e46f5e1fde9e4d29bcb97b80b60e4b082b7699e377c016300716ddaa071a924369e0976
SSDEEP 384:m1z7YWFoMC4CKC38H3RX898jM2m/VDd7g43+:SUu
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

service_win_searchlist_title.bmp

SHA256 1384bbf28d6d14d087d564e60010b17e01df5e694a96e9e373b0561ccd562faf
MD5 7e0bb9bc5fc48a07bd39fa0079b51524
SHA1 073a2829ee823b1f8aa65cde0f99b15dc5f8aad7
SHA512 19a9b5f97cb3df4e12f463903f6fbbbacacdadab53cdffc80f71c02787eb66bbfc6456def19641021f28d44a5b81e206fc091a251717f0c8828b1fc316ce76f7
SSDEEP 48:PtTwaWHCsT+aWUZVqg5i7EiwWUBooU37CbIQpl5CU21sUbQ2:PtZcCsKs75i7EiwDXtIQplIP2w
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

service_win_temp_title.bmp

SHA256 9e14905fc41b9b468ab4bf7fd811c3662f1bb46afb4d898d439c31ed67542632
MD5 6d1778a34252cabf6adbb79111f5b1b5
SHA1 1e5eb873c175ae94e2b6362727924d3e6cfdc391
SHA512 8bf569d276ae2e8a2c0e809b11d9baba4cd717c79b2ed728fd04ea71cbf10eba663ee6d46f4555fddf0914f53562e4939b7e6ec5ee4c5e72da9e63b1ef08e516
SSDEEP 48:dCSQVQ8XpcsUvae/PCURpjQI3vpfRCBXBXZTZNHkaa4+:dCPJ4ae/7H/peBXRZNHL+
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

setup.bmp

SHA256 72422a783e2e4b3cd98b4eb24e03ddd487e45803a4ce0feab7c3250a064c2734
MD5 d3f98ca5f9e875bb142abbeb0e74ff3d
SHA1 dcfffc6e0bc1472bfdeb71ccb2b35868638a2613
SHA512 3c0141168923501695a4bccd6cc501c7d5fdf93140740cfb917a9e527f655fb548743b592353dadcd98f1497e7097058df795b7e11936602fbdd4605ccb4080b
MD5 SHA1 SHA512

NSIS installer

installer

show_realtime.bmp

SHA256 3591718e5877239fc2643801ade043f19593f17861a4df56f8aa209f52c8ab40
MD5 9fa4992970b0a5d72deb6e1abced4e3a
SHA1 a05b00d7b6d99bdb1a9a68d9a25161cf666b17c8
SHA512 363de40da622576e91f63bfedffd3d553b17549cb2986659791e06b24d375dd382c3a2017cf7bbc136f4f0f6921de373ed6288ec5eb333734e1e3719d6c7d0c6
SSDEEP 768:03/NDx6bIL38XIL3EwgRgRjca7kJjx5uuL5UBIWNch30SnF7:0n6bIL38XIL3EwgRgRj7kJjx5uuFWNcz
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin.xml

SHA256 29a644add118331a500757b8799ff4a5408df3ca0d6ccd8b44d1a7b6e2225b8a
MD5 468599eb663768144cd109f304baac11
SHA1 4d4ca3afb8540cd265566513f7beda8ecdc42c1e
SHA512 bf1bb819776f423f284c420155912b07f3aa1de7958c2df3ec40fda451461d02da8f05284c4a60d0cfc24b07e3e362355b4ab6dc0143abd74e0e4ab9f912d22b
SSDEEP 192:GEttA8muKFAgEM2cdaDqinZll5g1fQi7z8b3IAgVieOEKjiQl:TteFFEAaDqinZ6+wgeb6
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

tab1.bmp

SHA256 76921653bf52405636b3cc2b4d6e5e001589045c017aef61e38c3c6a0c2e372b
MD5 8ca462dfcf60840e23cd43318d7b5c90
SHA1 7bc29d8e5056c9a344e67c9cf3e79a9a0a63bb68
SHA512 a0514b0c2688c94c60f91c2bb7ef84e1ce601f0e8347ecf16a6dc8807ed371cfccb7376a490b6419e0144229de1b6f685afea1bdf3c78c3aca63186434e7af01
SSDEEP 192:D2b4cLGyZ9yM8s6LYESKjjWjjjjjjjjjjIQtwS191vLu7nJm9Wp6Q95mUxM4BJDN:D21LGyZ5gQtj1knJLpJzxn93
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

tab2.bmp

SHA256 6e0ac57721689a21cb606acf0b7ce0f6dbf91123d7baee9ad4c90ac4017f46f5
MD5 039adc72a0e2c95a355f449c54c34df3
SHA1 4bda4aa65f909e2c3e6e38119a0e275559dd6cca
SHA512 43db167dd6817f262b511c610992ac99ccf46c5191e205507fbc11d9928b0fe5ddc13c5466fbbd5678a74d687aa96bec71d5d5f8182d64ff1a19139e5024272a
SSDEEP 192:D5in4MOaidTgasC+9v30jj2Rjjjjjjjjj0qy9HZ1BaJjzS6BBrC9UZlBUQT1j:D4IaidTCvaHZIu6BBIUPauj
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

top_txt1.bmp

SHA256 0597cf28938bac7b3cb8a484af6d44d9c5cc3b0ffc0cdc670992ddb2ba3daf38
MD5 9cb0d129c77390d1797f5cb4384d09cd
SHA1 853aca95a62fc40b8d5c0ef264774986015d7712
SHA512 c847ad619026c97af904c3e6d246815cb3b483c7be50c656995d303969c5e567028c7f03078506e03b3dc2655b1c1ebb17a62243a2f2127e2176071191dee708
SSDEEP 24:jMqkfFU3ZHXpJZn3ZXX53nJZpnjXJCUa7uWTtedwLUmIHHNuzyYZ04ti5wIcd:f6U53Z3p5JZJj0uW5OQ1IHdYZ0fwIcd
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

top_txt2.bmp

SHA256 e8a03a485076a7477d4c12f1f53a434bf0c196b7f666b29bd58b37509cf9eb30
MD5 4bc8858deb7f2cf8311c374bb30e1279
SHA1 265e923d0f3db5423f23b8c129dcd61da3c1e00a
SHA512 0c4dd2191aff49efd990ef71d4584a228fe7ceba1f27b9ac23d61d38f415a9a83b665ca1324e7093bbe506eb049862b5b5ab967bb77ef6db5f496a895519dbdc
SSDEEP 96:VJjb+03dzUr/3/ppSaZflCBrZ9G00vL1XtcikY624XeyWX:VJjbbNzUrHppXfkbG00j1uJYD4Xx0
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

top_txt3.bmp

SHA256 fcf53b199cc358981f06358b8ba9b32aaced3ceb3fe163d7c61eccaa2118bb48
MD5 0ce60e0287b9214a80205fa70020a46d
SHA1 6d61b3550c3e6a52c52c403a5f35df774ba1231f
SHA512 e8129fed58fdb21eab0525074f94e6be20f50f7edddb372783966f76dd330014dce514b5c6909e5140978041c2359f6124465941a5a7c7335231fff52ff3d987
SSDEEP 96:VgOPdFNYYPAVl+8eU3nWCnSTAffacuSZ7+:VgOlfD4z+8T3xHmp
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

top_txt4.bmp

SHA256 b18e10686490798dd620afd604534a6f5f88eb99bbc34f386afe3db092923edd
MD5 17c442313f914138caf9b966a9a0b954
SHA1 6cff1a084f05fe5cf99471cca0d18057c23843e3
SHA512 557fb15bb04c5955cf09fbe321db67644d008a59919cff45d13cbfcae95ceebf388ad204244346b8f30a18d32cdb22df679e6b5dfcf91fa2944977cfc40e9996
SSDEEP 24:pVsGFU3ZHXpJZn3ZXX53nJZpnVnzPZ1jyvPBNIxFkSEtYWijkhyzXvspkGvVK5og:pVs2U53Z3p5JZJRvjjjkMqkKdg
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

top_txt5.bmp

SHA256 5224aa813d336942162abe4d273ea1ac55852bfa26a7040c7da642850bafe9fc
MD5 b2d7af2656b3ccfcab01a90a2c665ff2
SHA1 a6dc9f96629cf1d773220bc9c60e8eb961779984
SHA512 6bbbc4af7d74c01c2d3c87e1f476a1d54c2a3bbf63c644856bd5f6eebd71cdf2ef4f8e3f16ea433c813ce1b167850adbe5f3904dd10fc9e9e9a70b3ec607d540
SSDEEP 48:WdU53Z3p5JZJoM9bS9Xg+arUnhRvn1e4o:qU5ZZZA9urWhC4o
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

tray_btn_close.bmp

SHA256 80d3ba118fe76ccd31d0c2ae66f40c3483a600608c5e4ef9f97baad22555bb49
MD5 663c48df7e8dbab30cb9b0bdf7a01d0b
SHA1 329251e341e9ac73df75941e7c3e759049cc5c7c
SHA512 27abf2308bca079748874911079f020b1d700453da4c75a6279f035a1a6b39edd7e41ceb57b8f51f069af3e4ab5b9593740119dcf75fa8de6304c5ead563eb8d
SSDEEP 192:HtkDkWR7wuo51BOq2va1GpMMLAprSyyoISIoyz:HtkDkWR7wvX1e1LApk
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

tray_btn_cure.bmp

SHA256 1f0ac8427c3b6909b00f634c9e32d269d83ca9eaf4027ce9d31844c7e4e148e9
MD5 c848ef1db46a164766c17196a44dd287
SHA1 7fc36a0a3bf4ab89817ff2e4235b50a7c51fb1b0
SHA512 b6cecc2104ef1ac44ddc1f18cc440ef274d6f422fe0c2f77190f31fe806f1dcbb097bf7abc0f849a13b1781e937775f096c0ebfc29f84b790d9d4d276ff75c28
SSDEEP 384:HcwXwLld/Ybo4pVVVVVVhVVVVVVVVVVVVVVVhVVVVTVVVVV7VVVVVVV7VVVVVVVg:mld/i9m
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

tray_btn_x.bmp

SHA256 a51448153a4326b5335dd58dbbbff108366979161e5596b6126e84b76ca14598
MD5 7076514b000c51b5fb889789bec6b552
SHA1 fe6edbd1fd1061853fdace8e237bd62eeb995550
SHA512 b97632817cb104885744c38256f23c5556ae30b2589b253b081847ed19a8c16d67b2d86cc0071bcf576e4df4ec11d183feec1fbc30032efa75068fe9ce1cd16d
MD5 SHA1 SHA512

NSIS installer

installer

tray_copy.gif

SHA256 c2294a04f45dc161bf1dac096794f95aad3ced5e9b881a408d9058c6a561ab81
MD5 3c7dd26e2b412efe415c644ff6d29a0f
SHA1 b03f0f3d9e7a8390b2b94ca9a78650e1ba1f9a20
SHA512 bbd677385eb628acc29da1977b3ca666e82616b4dd319f3fe5e8f69c45fc7c5956efc36d37f1979175e48aa4b683c811949181723120db3a347c7058d62f3510
MD5 SHA1 SHA512

NSIS installer

installer

updateinfo_title.bmp

SHA256 459e0f585894c083a00672b5303d47d88fcf7926a8e15c8efc54ebb8adaca4b0
MD5 31a3956515a3ff4afc18f397d5b07f31
SHA1 6c79039e926a1beb387551587bab9da1cfacf44a
SHA512 aef9f6ea7e1c037a4f1a4c522ee0030aa2eec49a1852a112e6c35d2b47ce177aa97b82d57408ee971049789ac0b4a97bed4145be9365495d9e4e7c7be50a3128
SSDEEP 96:cZmqTeJ+zm91a7q+ppKlp5HgrRJW7wPTpanfPGJ7Fp3M/bnXihhPQt8z9QZaehuy:4mqFSkPG37SDGXcdpBrISGTz1
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

window_option.bmp

SHA256 b7215cbaa96a8e4777ac19f8b6e401a286cdb8104eb6352507b1a8329ee4977f
MD5 47e0f342840fbda058d977ba70bb1c6d
SHA1 ca0c6d91b5a61fb2733135ca92947371393f733e
SHA512 a4f2427a1f0d03825497d735d0cbc2407c08feb44fc1a73381b962432e4ea639f6be8113a9caeff702921c4c548e6922a8d32a441063907af74c41ddaf7f742e
SSDEEP 6144:OggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggR:OggggggggggggggggggggggggggggggR
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Sharing

General

Malware Config

Signatures

File Explorer