ce4b3b45a7e41e2198e47ee542f498d4_JaffaCakes118
- SHA256 4f800575229b731069024a88ee51d5029d6d692f5cf0b12be2a58f1d2ef570c0
Overview
overview
7Static
static
7RedVIP5Rel...88.exe
windows7-x64
7RedVIP5Rel...88.exe
windows10-2004-x64
7$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows7-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...nu.dll
windows7-x64
3$PLUGINSDI...nu.dll
windows10-2004-x64
3DLLCLT.dll
windows7-x64
3DLLCLT.dll
windows10-2004-x64
3DownLoad/attrib.exe
windows7-x64
3DownLoad/attrib.exe
windows10-2004-x64
3DownLoad/rar.exe
windows7-x64
3DownLoad/rar.exe
windows10-2004-x64
3McuFlash/Download.exe
windows7-x64
3McuFlash/Download.exe
windows10-2004-x64
3RedVIPControls.dll
windows7-x64
3RedVIPControls.dll
windows10-2004-x64
3VIP.exe
windows7-x64
4VIP.exe
windows10-2004-x64
4VIPExec.exe
windows7-x64
3VIPExec.exe
windows10-2004-x64
3VIPUpdate.exe
windows7-x64
3VIPUpdate.exe
windows10-2004-x64
3VPADLL.dll
windows7-x64
3VPADLL.dll
windows10-2004-x64
3VPVDLL.dll
windows7-x64
3VPVDLL.dll
windows10-2004-x64
3advert/ad_mcu.html
windows7-x64
3advert/ad_mcu.html
windows10-2004-x64
3divx.dll
windows7-x64
3divx.dll
windows10-2004-x64
3Behavioral task
behavioral1
Sample
RedVIP5Release_91502088.exe
Resource
win7-20240903-en
windows7-x64
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
RedVIP5Release_91502088.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240704-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral5
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win7-20240903-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral6
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral7
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win7-20240903-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral8
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral9
Sample
DLLCLT.dll
Resource
win7-20240903-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral10
Sample
DLLCLT.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral11
Sample
DownLoad/attrib.exe
Resource
win7-20240708-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral12
Sample
DownLoad/attrib.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral13
Sample
DownLoad/rar.exe
Resource
win7-20240708-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral14
Sample
DownLoad/rar.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral15
Sample
McuFlash/Download.exe
Resource
win7-20240903-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral16
Sample
McuFlash/Download.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral17
Sample
RedVIPControls.dll
Resource
win7-20240903-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral18
Sample
RedVIPControls.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral19
Sample
VIP.exe
Resource
win7-20240903-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral20
Sample
VIP.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral21
Sample
VIPExec.exe
Resource
win7-20240903-en
windows7-x64
4 signatures
150 seconds
Behavioral task
behavioral22
Sample
VIPExec.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral23
Sample
VIPUpdate.exe
Resource
win7-20240704-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral24
Sample
VIPUpdate.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral25
Sample
VPADLL.dll
Resource
win7-20240708-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral26
Sample
VPADLL.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral27
Sample
VPVDLL.dll
Resource
win7-20240903-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral28
Sample
VPVDLL.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral29
Sample
advert/ad_mcu.html
Resource
win7-20240903-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral30
Sample
advert/ad_mcu.html
Resource
win10v2004-20240802-en
windows10-2004-x64
7 signatures
150 seconds
Behavioral task
behavioral31
Sample
divx.dll
Resource
win7-20240903-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral32
Sample
divx.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
3 signatures
150 seconds
General
- Target ce4b3b45a7e41e2198e47ee542f498d4_JaffaCakes118
- Size 6.0MB
- Sample240906-bec3eaxelp
- SHA256 4f800575229b731069024a88ee51d5029d6d692f5cf0b12be2a58f1d2ef570c0
- MD5 ce4b3b45a7e41e2198e47ee542f498d4
- SHA1 7524a5a6facd268a289c582d0ecce6f53bcdfb8d
- SHA512 abea71c0d70f0c2971d8ae0dbd3fcdb6fab387038012eaaf522890699b965c66b5b45e18ef770147f1596425993a132d9a85abaea94af07c97b9deec5159379d
- SSDEEP 98304:ZjAt4thTNO/OtuP7tnMC+dMhv9UzjvIxyEO83wdvnvRwwey5MS0R2uhJ4ZWbYQky:ZjAt4vTNOMuZaa94vIxHO83QnpRbgR2I
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Malware Config
Signatures
-
resource yara_rule static1/unpack002/DLLCLT.dll aspack_v212_v242 static1/unpack002/VIP.exe aspack_v212_v242 static1/unpack002/VIPExec.exe aspack_v212_v242 static1/unpack002/VIPUpdate.exe aspack_v212_v242 static1/unpack002/VPADLL.dll aspack_v212_v242 static1/unpack002/VPVDLL.dll aspack_v212_v242 static1/unpack002/divx.dll aspack_v212_v242 static1/unpack002/ilbc_dll.dll aspack_v212_v242 static1/unpack002/redmcu_c.exe aspack_v212_v242 static1/unpack002/vish263m.dll aspack_v212_v242 static1/unpack002/vish323.dll aspack_v212_v242 - Unsigned PE 21 IoCs
Checks for missing Authenticode signature.
resource unpack001/RedVIP5Release_91502088.exe unpack002/$PLUGINSDIR/InstallOptions.dll unpack002/$PLUGINSDIR/LangDLL.dll unpack002/$PLUGINSDIR/StartMenu.dll unpack002/DLLCLT.dll unpack002/DownLoad/attrib.exe unpack002/DownLoad/rar.exe unpack002/McuFlash/Download.exe unpack002/RedVIPControls.dll unpack002/VIP.exe unpack002/VIPExec.exe unpack002/VIPUpdate.exe unpack002/VPADLL.dll unpack002/VPVDLL.dll unpack002/divx.dll unpack002/ilbc_dll.dll unpack002/redmcu_c.exe unpack002/uninstall.exe unpack003/$PLUGINSDIR/LangDLL.dll unpack002/vish263m.dll unpack002/vish323.dll - NSIS installer 2 IoCs
resource yara_rule static1/unpack001/RedVIP5Release_91502088.exe nsis_installer_1 static1/unpack002/uninstall.exe nsis_installer_1
File Explorer
-
ce4b3b45a7e41e2198e47ee542f498d4_JaffaCakes118.rar 6.0MB
-
RedVIP5Release_91502088.exe.exe 6.0MB
-
$PLUGINSDIR/InstallOptions.dll.dll 12KB
-
$PLUGINSDIR/LangDLL.dll.dll 5KB
-
$PLUGINSDIR/StartMenu.dll.dll 6KB
-
$PLUGINSDIR/ioSpecial.ini211B
-
$PLUGINSDIR/modern-wizard.bmp25KB
-
DLLCLT.dll.dll 24KB
-
DownLoad/attrib.exe.exe 11KB
-
DownLoad/rar.exe.exe 305KB
-
McuFlash/Download.exe.exe 128KB
-
McuFlash/_McuFlash.txt1KB
-
McuFlash/temp.bmp576KB
-
PhoneRing/LisenceCN.txt13KB
-
PhoneRing/.vcm934KB
-
PhoneRing/.vid7KB
-
RedVIPControls.dll.dll 200KB
-
RedVIPControls.lic41B
-
Skin/Thumbs.db7KB
-
Skin/redskin.gif.gif 7KB
-
Skin/redvip5std.gif.gif 12KB
-
VIP.exe.exe 814KB
-
VIPExec.exe.exe 130KB
-
VIPUpdate.exe.exe 127KB
-
VPADLL.dll.dll 63KB
-
VPVDLL.dll.dll 118KB
-
advert/Thumbs.db14KB
-
advert/ad_mcu.gif.html 297B
-
advert/ad_up.gif.gif 27KB
-
advert/mcu_ad1.gif.gif 77KB
-
advert/vip.gif.gif 30KB
-
divx.dll.dll 665KB
-
ilbc_dll.dll.dll 80KB
-
redmcu_c.exe.exe 1.9MB
-
regdll.bat30B
-
uninstall.exe.exe 42KB
-
$PLUGINSDIR/LangDLL.dll.dll 5KB
-
vipdial/redvip.pbk1KB
-
vipdial/redvipphone.pbk1KB
-
vish263m.dll.dll 458KB
-
vish323.dll.dll 800KB
-
安装说明.url.url 260B
RedVIP5Release_91502088.exe
- IMPHASH 18bc6fa81e19f21156316b1ae696ed6b
- SHA256 ae54713c81688a2970f7179dbd3644c51d81f3306283d9d7f05fb44a09d3187d
- MD5 95343e1de11b559191be2476f3fa2823
- SHA1 7e7279a83e764c73cbdf82c71783eb39c96cf166
- SHA512 9f7b5cfc68fb5e73815d7e8b542782ea7af0dadb1b2631c4d1cd019f1a8acc8eed4fafcc5fdff254b137174118dbaba35387104dc6e397b274e7d1f9c5f26c5c
- SSDEEP 98304:F39fENK1aUP1OtuCr5lthrDLMScRlwjbGSD+rpSvgATQyUHTTQ4GrZIhIhb5nBr5:UNsP1aFBhrDpcfbSDMcFUzTvAZIhIhbR
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
-
NSIS installer
Minor OS version
0
Major OS version
4
Entry point
12599
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
CloseHandle
SetFileTime
CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetFileSize
GetModuleFileNameA
GetTickCount
GetCurrentProcess
lstrcmpiA
ExitProcess
GetCommandLineA
GetWindowsDirectoryA
GetTempPathA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
CreateFileA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
lstrcmpA
GetEnvironmentVariableA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
SetErrorMode
GetModuleHandleA
LoadLibraryA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
CopyFileA
user32
ScreenToClient
GetWindowRect
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
EndDialog
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxA
CharPrevA
DispatchMessageA
PeekMessageA
CreateDialogParamA
DestroyWindow
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
RegisterClassA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
TrackPopupMenu
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow
gdi32
SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject
shell32
SHGetMalloc
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation
advapi32
RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA
comctl32
ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create
ole32
OleInitialize
OleUninitialize
CoCreateInstance
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
Name
.text
Size
22KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
108KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.ndata
Size
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=2, id=95, version=2190,
count=152, id=1, productName=Unmarked objects,
count=17, id=93, version=2179,
count=9, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
$PLUGINSDIR/InstallOptions.dll
- IMPHASH 57354bdeea3dfae6e948101add87501a
- SHA256 120e4fac0538b7e7b75934706668063a4e7785d0405dca43fde36d55f6d968de
- MD5 99bc22826a0568dce241be3a4ffd0c0d
- SHA1 62e4662250abdf10d23a61076fd7cbd00a5c5b6f
- SHA512 35b016b6e2dc850e5432becd57f35faf73b180c0a6f822a406cf9d5439a87126c41c49aac025cdeecd38bbd01705ddbd8c217cb33134e978ecc9624053b52be9
- SSDEEP 384:sKlm7i+c3QW6ckPhyDEaLnr2bbBBIXwZ:5qi8BcyhEhLCbbTI
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10417
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
SetCurrentDirectoryA
GetCurrentDirectoryA
GetPrivateProfileIntA
GetModuleHandleA
lstrcmpiA
GetPrivateProfileStringA
lstrcatA
lstrcpynA
WritePrivateProfileStringA
lstrlenA
lstrcpyA
GlobalFree
MultiByteToWideChar
GlobalAlloc
user32
GetDlgCtrlID
GetClientRect
SetWindowRgn
MapWindowPoints
LoadImageA
SetWindowLongA
CreateWindowExA
MapDialogRect
SetWindowPos
GetWindowRect
CreateDialogParamA
ShowWindow
EnableWindow
GetDlgItem
DestroyIcon
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
PtInRect
LoadCursorA
SetCursor
DrawTextA
GetWindowLongA
DrawFocusRect
CallWindowProcA
PostMessageA
MessageBoxA
CharNextA
wsprintfA
GetWindowTextA
SetWindowTextA
SendMessageA
LoadIconA
gdi32
SetTextColor
GetObjectA
SelectObject
GetDIBits
CreateRectRgn
CombineRgn
DeleteObject
CreateCompatibleDC
shell32
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetDesktopFolder
SHGetMalloc
ShellExecuteA
comdlg32
GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError
dialog
initDialog
show
Name
.text
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
152B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
954B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=65, id=1, productName=Unmarked objects,
count=11, id=93, version=2179,
count=1, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
$PLUGINSDIR/LangDLL.dll
- IMPHASH 2db813254ea8b4d2a92d703ecb659f39
- SHA256 fab7253d54818991c18da1a9548a31bbb8970430c1c8423474bb37747d665141
- MD5 d1017871e5fafca4f1a9ab0c459eb179
- SHA1 84afd186e8523be52b9d7d693f9ada0e1d1758df
- SHA512 f4efa4112e9c24a6bedd8063685e7f6a115ec87eeb3e0c0a463ef51dfed8a94ec7c3c146a654f39584b02b5333c038c8adff09788c8c299832d17cd71c08667c
- SSDEEP 48:SHIPtcWCeM7etAo1UurdGl4A0h2TpXHWFv+wewzpv1XP3GhaEJjof2ynh1:d1cWxfzrrh2cFvWwFtSU
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5415
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GlobalFree
lstrcpynA
lstrcmpA
lstrlenA
GetModuleHandleA
MulDiv
lstrcpyA
GlobalAlloc
user32
SetWindowTextA
SetDlgItemTextA
SendDlgItemMessageA
EndDialog
DialogBoxParamA
LoadIconA
SendMessageA
ShowWindow
GetDC
gdi32
CreateFontIndirectA
GetDeviceCaps
DeleteObject
LangDialog
Name
.text
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
681B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
352B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
254B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=20, id=1, productName=Unmarked objects,
count=7, id=93, version=2179,
count=1, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
$PLUGINSDIR/StartMenu.dll
- IMPHASH 28d94e5199b88ad374b3cb2118e31a66
- SHA256 f90ebff31051802116def3349310f9b0e3dbee0f0236d54f364149e1feb186bc
- MD5 c6ca47bb4198f483c8b31fd90b779acb
- SHA1 ea9024cb535fd5471f30d27b22318b59cb4d31f6
- SHA512 b761b4ae89ecf15edadb3015fe0d3012048f1480b84ec8d30997c128e210818d0da9c7ec75de9efe8e1e08f84501c314a32c109f4ff1e8adca2cec5a73fab7db
- SSDEEP 96:z1C0Qaep2wbE+WH1/FMXF6CGQhFzK1KQ5FnhElMmV4d:Vep2w5k/FyEttgN
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
6359
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
lstrcpynA
GlobalAlloc
MulDiv
GetModuleHandleA
GlobalFree
FindClose
FindNextFileA
FindFirstFileA
lstrcmpiA
lstrcatA
lstrcpyA
user32
GetMessageA
IsDialogMessageA
PostMessageA
CallWindowProcA
TranslateMessage
CheckDlgButton
ShowWindow
LoadIconA
GetClientRect
MoveWindow
ScreenToClient
GetWindowRect
ReleaseDC
GetDC
EnableWindow
SetWindowTextA
SendMessageA
IsDlgButtonChecked
GetWindowTextA
DispatchMessageA
DestroyWindow
GetDlgItem
CreateDialogParamA
SetWindowLongA
wsprintfA
GetWindowLongA
gdi32
GetTextMetricsA
SelectObject
shell32
SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListA
Init
Select
Show
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
296B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
460B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=42, id=1, productName=Unmarked objects,
count=9, id=93, version=2179,
count=1, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
$PLUGINSDIR/ioSpecial.ini
- SHA256 d95aed234f932a1c48a2b1b0d98c60ca31f962310c03158e2884ab4ddd3ea1e0
- MD5 e2d5070bc28db1ac745613689ff86067
- SHA1 282e080b4cf847174c5c11e4f9157b8c338ecb19
- SHA512 a50ca2014869629135b54e848f03cb4983ad8029cd811300d02b0fc54de0436185f418fea4d3db888eb0f3170e33a59d486aa885f024ab29e630e9bc0ae1a2de
- MD5 SHA1 SHA512
$PLUGINSDIR/modern-wizard.bmp
- SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
- MD5 cbe40fd2b1ec96daedc65da172d90022
- SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
- SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
- SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
- MD5 SHA1 SHA512 SSDEEP
DLLCLT.dll
- SHA256 29ccea5882a0605705a5576495e8c9585349dbf2904b674413a29bb74bb68a06
- MD5 a378b4bc6152ea81459a52223cf8f2f1
- SHA1 db25e0393496ffef8b1b2ddb18818bc50931d774
- SHA512 845d28ad2968ea8f57ff73bcf2bf00ef269c7bfdf1d227f207f9b40c343d8eadf0d7179df01403d7c6f805106eb061eafd0c218542874090c18cc6d58390ec26
- SSDEEP 384:Qvo3HaB0Y0kAgKrcjqsAyIbmyWAxor6+e9Pfqbn1bZ:QK1sAjmyBx/ha5bZ
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
114689
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
DLLCLT_MeetingMode
Name
.text
Size
7KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
512B
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
5KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.adata
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=2, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
count=5, id=49, version=9044,
count=8, id=19, version=8034,
count=1, id=14, version=7299,
count=4, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=183, id=1, productName=Unmarked objects,
count=10, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
count=8, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,
DownLoad/attrib.exe
- IMPHASH 3c9bab855f16ec1b1aa2b1df6aa2db97
- SHA256 6ec87e2160f3bfa90f58a5320c25ca21527635f78f685b4f3abac556b3d1132d
- MD5 6fc563ea5e147fb0aa414d15b7447edd
- SHA1 0084a689c0916298dccbf7ff5e6de4590316bb05
- SHA512 d223ceddd28b148875d52737c1058fa355786f1e61c89d48e6a792af284f5b6f974344f9349123253b540882433f64537d03b86cd2228a460e0d7c1085f7d21c
- SSDEEP 192:FOdtS/hlZ9wbJkMZQSRzRH1u+oNVbgwc4A3tOMk7umWCtW:F7bZWbJFZRVc5A3tOwmWCtW
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
8872
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
ulib
?PrepareToParse@ARGUMENT_LEXEMIZER@@QAEEPAVWSTRING@@@Z
?PutSeparators@ARGUMENT_LEXEMIZER@@QAEXPBD@Z
?SetCaseSensitive@ARGUMENT_LEXEMIZER@@QAEXE@Z
?PutSwitches@ARGUMENT_LEXEMIZER@@QAEXPBD@Z
?Initialize@ARGUMENT_LEXEMIZER@@QAEEPAVARRAY@@@Z
?Initialize@ARRAY@@QAEEKK@Z
?Initialize@WSTRING@@QAEEPBGK@Z
?Initialize@STREAM_MESSAGE@@QAEEPAVSTREAM@@00@Z
?Get_Standard_Input_Stream@@YGPAVSTREAM@@XZ
?Get_Standard_Output_Stream@@YGPAVSTREAM@@XZ
??0DSTRING@@QAE@XZ
??0PATH@@QAE@XZ
??0STRING_ARGUMENT@@QAE@XZ
??0ARRAY@@QAE@XZ
??0ARGUMENT_LEXEMIZER@@QAE@XZ
?QueryFsnodeArray@FSN_DIRECTORY@@QBEPAVARRAY@@PAVFSN_FILTER@@@Z
??1PROGRAM@@UAE@XZ
??1PATH_ARGUMENT@@UAE@XZ
?Initialize@STRING_ARGUMENT@@QAEEPAD@Z
??1STREAM_MESSAGE@@UAE@XZ
?ValidateVersion@PROGRAM@@UBEXKK@Z
?Usage@PROGRAM@@UBEXXZ
?GetStandardError@PROGRAM@@UAEPAVSTREAM@@XZ
?GetStandardOutput@PROGRAM@@UAEPAVSTREAM@@XZ
?GetStandardInput@PROGRAM@@UAEPAVSTREAM@@XZ
?Fatal@PROGRAM@@UBEXXZ
?Fatal@PROGRAM@@UBAXKKPADZZ
?DisplayMessage@PROGRAM@@UBEEKW4MESSAGE_TYPE@@@Z
?DisplayMessage@PROGRAM@@UBAEKW4MESSAGE_TYPE@@PADZZ
?Compare@OBJECT@@UBEJPBV1@@Z
??0STREAM_MESSAGE@@QAE@XZ
??0FSN_FILTER@@QAE@XZ
??0PATH_ARGUMENT@@QAE@XZ
??0FLAG_ARGUMENT@@QAE@XZ
??0PROGRAM@@IAE@XZ
?Initialize@CLASS_DESCRIPTOR@@QAEEXZ
??0CLASS_DESCRIPTOR@@QAE@XZ
?Initialize@FLAG_ARGUMENT@@QAEEPAD@Z
?Initialize@PATH_ARGUMENT@@QAEEPADE@Z
?Put@ARRAY@@UAEEPAVOBJECT@@@Z
?IsValueSet@ARGUMENT@@QAEEXZ
?DoParsing@ARGUMENT_LEXEMIZER@@QAEEPAVARRAY@@@Z
?Initialize@PATH@@QAEEPBGE@Z
?Initialize@PATH@@QAEEPBVWSTRING@@E@Z
?IsDrive@PATH@@QBEEXZ
?Initialize@WSTRING@@QAEEPBV1@KK@Z
?Strcat@WSTRING@@QAEEPBV1@@Z
?Initialize@PATH@@QAEEPBV1@E@Z
?QueryDirectory@SYSTEM@@SGPAVFSN_DIRECTORY@@PBVPATH@@E@Z
?Initialize@FSN_FILTER@@QAEEXZ
?SetFileName@FSN_FILTER@@QAEEPBD@Z
?SetAttributes@FSN_FILTER@@QAEEKKK@Z
?SetFileName@FSN_FILTER@@QAEEPBVWSTRING@@@Z
?DeleteAllMembers@ARRAY@@UAEEXZ
??1STRING_ARGUMENT@@UAE@XZ
??1PATH@@UAE@XZ
??1ARRAY@@UAE@XZ
??1ARGUMENT_LEXEMIZER@@UAE@XZ
??1OBJECT@@UAE@XZ
??1DSTRING@@UAE@XZ
?Display@MESSAGE@@QAAEPBDZZ
?Initialize@WSTRING@@QAEEPBDK@Z
??1FSN_FILTER@@UAE@XZ
?QueryString@WSTRING@@QBEPAV1@KK@Z
ntdll
wcschr
RtlFreeHeap
RtlAllocateHeap
swprintf
msvcrt
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__initenv
exit
_cexit
_XcptFilter
_exit
_c_exit
_except_handler3
kernel32
SetFileAttributesW
GetLastError
GetModuleHandleA
Name
.text
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
36B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
976B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=64, version=9210,
count=11, id=28, version=9178,
count=9, id=25, version=9210,
count=88, id=1, productName=Unmarked objects,
count=1, id=69, version=9111,
count=1, id=29, version=9178,
count=1, id=61, version=9210,
DownLoad/rar.exe
- IMPHASH 9e0ab8c69b9a74a6c08b7babe53344c5
- SHA256 0c547b64f395a6a6b3c2583125445323f1786541549263e824993f0b3c99396d
- MD5 f9b754dd4c9f04b3b53995d1f41fdeaa
- SHA1 1512862f0f1224bdbba1f64070aafd39686498b3
- SHA512 22d4c9a3737c3a2da57daabc8dc10a70040a9c24c610635d68f85f5f67b5cd6120086cafb70da39918dcf72ff324ccfbe4c03434f12cf8a4efdb0300369c02a6
- SSDEEP 6144:H7NC2iPjZpz3e8Zjwobw4CIVJ8IAF6B8FFfl2tIEMq4iA3InBPlSkW8E/CqksKie:H7NC28jZpzuM7tCFfl2kxkW8N
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4096
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
advapi32
AdjustTokenPrivileges
GetFileSecurityA
GetFileSecurityW
GetSecurityDescriptorLength
LookupPrivilegeValueA
OpenProcessToken
SetFileSecurityA
SetFileSecurityW
kernel32
BackupRead
BackupSeek
CloseHandle
CompareStringA
CompareStringW
CreateDirectoryA
CreateDirectoryW
CreateFileA
CreateFileW
DeleteFileA
DeleteFileW
DeviceIoControl
ExitProcess
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindFirstFileA
FindFirstFileW
FindNextFileA
FindNextFileW
FlushFileBuffers
FormatMessageA
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetConsoleMode
GetCurrentDirectoryA
GetCurrentProcess
GetCurrentThread
GetCurrentThreadId
GetDiskFreeSpaceA
GetDriveTypeA
GetEnvironmentStrings
GetFileAttributesA
GetFileAttributesW
GetFileTime
GetFileType
GetFullPathNameA
GetFullPathNameW
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetSystemTime
GetTickCount
GetVersion
GetVersionExA
GlobalMemoryStatus
HeapAlloc
HeapFree
IsDBCSLeadByte
LCMapStringA
LoadLibraryA
LocalFileTimeToFileTime
LocalFree
MoveFileA
MoveFileW
MultiByteToWideChar
RaiseException
ReadConsoleA
ReadFile
RemoveDirectoryA
RemoveDirectoryW
RtlUnwind
SetConsoleCtrlHandler
SetConsoleMode
SetCurrentDirectoryA
SetEndOfFile
SetErrorMode
SetFileAttributesA
SetFileAttributesW
SetFilePointer
SetFileTime
SetHandleCount
SetLastError
SetPriorityClass
SetThreadPriority
Sleep
SystemTimeToFileTime
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WideCharToMultiByte
WriteFile
user32
CharLowerA
CharLowerW
CharToOemA
CharToOemBuffA
CharUpperA
CharUpperW
EnumThreadWindows
ExitWindowsEx
LoadStringA
MessageBoxA
OemToCharA
OemToCharBuffA
wsprintfA
__GetExceptDLLinfo
___CPPdebugHook
Name
.text
Size
243KB
Virtual Size
244KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
17KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
3KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.edata
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
38KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
McuFlash/Download.exe
- IMPHASH e8a3144fa7e17dacc3234c6e7b759eb7
- SHA256 5858cedeacad2556e65bed29690adb2c72e63e72e116d92f4ecc3b859aec31cd
- MD5 63349ca44f11212fbdd9e29a675d2821
- SHA1 34b3377c3098287f05535d057b3b8c768ba70b76
- SHA512 70074c222f99c11808a62a5c0204253a8d3006717b27abb188aa72c895b22edf39cea4872c330157cd90e45498febe4556eb6dd71cb091d62c2f893edddc5d7f
- SSDEEP 384:98hPb5djVsYsO/MyYpSSuakYtmQTLXSw1ScPdkfdI5D1qwvLTPSdNYh4MVVEq:ChHjVAyY0ckYzfXSKxPdcI5xRb7VC
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
13983
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
ws2_32
htons
connect
getprotobyname
socket
WSAStartup
gethostbyname
send
recv
closesocket
setsockopt
WSACleanup
mfc42
ord2985
ord3081
ord2976
ord3402
ord3830
ord3831
ord3825
ord3079
ord4080
ord4627
ord4424
ord800
ord823
ord860
ord540
ord567
ord825
ord2414
ord3874
ord1641
ord2860
ord2379
ord6197
ord6880
ord1168
ord2864
ord535
ord537
ord4277
ord3262
ord858
ord4129
ord2764
ord4299
ord6267
ord4317
ord6272
ord506
ord4673
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord4622
ord3738
ord561
ord815
ord641
ord765
ord2514
ord1576
ord1134
ord5265
ord4376
ord4853
ord4998
ord4710
ord6052
ord1775
ord5280
ord4425
ord3597
ord324
ord4234
ord3698
ord1146
ord2302
ord6380
ord4160
ord2863
ord755
ord470
ord665
ord1979
ord6385
ord5186
ord924
ord354
ord1228
ord922
ord2818
ord2915
ord6877
ord5442
ord3318
ord1200
ord1105
ord4278
ord6663
ord3136
ord4465
ord3259
ord3147
ord2982
ord5277
ord2124
ord2446
ord5261
ord1727
ord5065
ord3749
ord6376
ord2055
ord2648
ord4441
ord4837
ord3798
ord5290
ord4353
ord6374
ord5163
ord2385
ord5241
ord4407
ord1776
ord4078
ord6055
ord4275
ord2621
msvcrt
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
?terminate@@YAXXZ
_except_handler3
_onexit
__dllonexit
_setmbcp
__CxxFrameHandler
_mbsicmp
_mbsrchr
atoi
sprintf
_ltoa
_exit
kernel32
GetStartupInfoA
GetModuleFileNameA
GetModuleHandleA
CreateMutexA
GetLastError
CloseHandle
GetProcAddress
FreeLibrary
user32
GetWindowLongA
GetSystemMetrics
AppendMenuA
GetSystemMenu
DrawIcon
IsIconic
SetWindowLongA
EnableWindow
SetActiveWindow
CopyRect
GetClientRect
GetParent
LoadImageA
GetWindowRect
InflateRect
SendMessageA
InvalidateRect
LoadIconA
gdi32
GetObjectA
CreateFontIndirectA
DeleteObject
shell32
DragFinish
DragQueryFileA
??0CHttpSocket@@QAE@ABV0@@Z
??0CHttpSocket@@QAE@XZ
??1CHttpSocket@@UAE@XZ
??4CHttpSocket@@QAEAAV0@ABV0@@Z
??_7CHttpSocket@@6B@
?CloseSocket@CHttpSocket@@QAEHXZ
?Connect@CHttpSocket@@QAEHPADH@Z
?FormatRequestHeader@CHttpSocket@@QAEPBDPAD0AAJ00JJH@Z
?GetField@CHttpSocket@@QAEHPBDPADH@Z
?GetRequestHeader@CHttpSocket@@QBEHPADH@Z
?GetResponseHeader@CHttpSocket@@QAEPBDAAH@Z
?GetResponseLine@CHttpSocket@@QAEHPADH@Z
?GetServerState@CHttpSocket@@QAEHXZ
?Receive@CHttpSocket@@QAEJPADJ@Z
?SendRequest@CHttpSocket@@QAEHPBDJ@Z
?SetTimeout@CHttpSocket@@QAEHHH@Z
?Socket@CHttpSocket@@QAEHXZ
Name
.text
Size
12KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
680B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
100KB
Virtual Size
97KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=4, productName=Unmarked objects (old),
count=1, id=11, version=8047,
count=2, id=14, version=7299,
count=11, id=10, version=8047,
count=2, id=4, version=8047,
count=2, id=4, version=9782,
count=297, id=1, productName=Unmarked objects,
count=11, id=19, version=8034,
count=8, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
McuFlash/_McuFlash.txt
- SHA256 7d79108e6438e6c13bcd9e8795dc60590c92d9b624beaab2c385a09672fff1b9
- MD5 24a19b9f31155ae739fce96770e96277
- SHA1 153b52ece89d8b8a76a7f9f968b8517d93ad318f
- SHA512 260ab32dba5581674dde4b1896d90fb702076538322ad1d321e73a51aa0113cc722ad9adf5faf353a887bb79de39660efd72f320156d2612c4b65bc2b24b78b1
- MD5 SHA1 SHA512
McuFlash/temp.bmp
- SHA256 3aa9168d7b20b4d3a04d513911b1b94b615b62e2526175b0c426dd66ed265239
- MD5 31865e00a393a6779c761bba95b80cfe
- SHA1 f940fcef567f01d7bf11767b0253b6819dde0f84
- SHA512 6d0849e4ceddafb3292135544219e24ee434653a30c1c8e15ef38d8271934d08f5f861b1c7aa4cd7f6435cdd050977714ef8f90b3e1b849fc9cff8fb9ddea588
- SSDEEP 12:zfT5GGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGG5:o
- MD5 SHA1 SHA512 SSDEEP
PhoneRing/LisenceCN.txt
- SHA256 21b072e599326c0644ddbc38440a95810a5dbbae02da38aa5491e89f7345d996
- MD5 101acaeab09040331169dfa8a8064d17
- SHA1 3828e66d9b5ff3411a670c9db3304fb0bc7cbca1
- SHA512 6a59f3efdd3b4ca4c675b130adc432bab4d980f94ccc447bd1e5d69136954fcbb6cd8a430efb9800b8a36c59cf44d8449a3ffa2d53cddab24aea6308c02a943b
- SSDEEP 384:uvOoiwwTkLZCbBzwVd8T/LsMnf4CHUYb8k/s:u2o4kLZCb2LSdfXHjb9s
- MD5 SHA1 SHA512 SSDEEP
PhoneRing/.vcm
- SHA256 e6d82f04d82f9342442e2c6ab0b89a0fa7704704e98b06b2694ced305a9e8bee
- MD5 2c166999b11158e943f8123fbcf2e3b3
- SHA1 2c546d0baebb508f8035c7657c8759a72b5119c2
- SHA512 93b92a614168aa528c6760d1915adf58396604a1ffbb04ff39e50e01b32144e6c0824916058cea6cf2f3a865a3d50a99e17e139717ddc556928f4b3f6d438c90
- SSDEEP 24576:GP3iv91Wz/+9Or8uub4VxImpwEiGpHDFUb2e:i3il18oM8uFVxDPppe
- MD5 SHA1 SHA512 SSDEEP
PhoneRing/.vid
- SHA256 17ce596738b2dff541aa4c2bc9ea50882629ea0226b649279393857a3f41f64d
- MD5 3e11e2f0a25b6cc99863db0e5ba33e9b
- SHA1 3fe1d6fc2810dca7ce9f13fc3336833f7b9498ef
- SHA512 08f2bb9f9f489642ef65b16ff17370c04b663f530cb291bc591a03db39b39d6e6b9ecde8466676958c424f93e241eb708657d2d4e80e5602e599058c08109d69
- SSDEEP 96:pB/LBVBGBnovgb/5/dygZcgZGyBgYyBXccnvSiqL:1ec9pqhL
- MD5 SHA1 SHA512 SSDEEP
RedVIPControls.dll
- IMPHASH f4089fe30323b0998ab170aa1ab245a6
- SHA256 2e13165e8df481e678acc149227880c4690bb1a0770d010eaf11ceebd10eb054
- MD5 908136c92cf64aff62decd83d72f7c09
- SHA1 63ecf62953119edb33f87258829398ac93a326e8
- SHA512 1f3cac47bc45aaeb1beb704ec4d84552cd7bedae183431ca02069bcbdffca4ec619e087ad9fa5f1a7d6d44df2672eea137dc866ab6b35af7b19ce25579a47aea
- SSDEEP 3072:88Y213Ox06h70aQnT33pY20jX8o+/0EAyy4uVF0wIER2jVrDOtTJznjETvjlgkiD:8e320+0HVYZj75H+iRR2OttHETbykG
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
556541
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
CreateStreamOnHGlobal
comctl32
ImageList_SetIconSize
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Name
CODE
Size
184KB
Virtual Size
528KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
15KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
512B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
RedVIPControls.lic
- SHA256 dcefe26a99f6f7d7e1a6d9b179762bc1fa4729180d9ad0774fa5358d66159ced
- MD5 987e5793c9cf8d314cde99ee01d145a5
- SHA1 76f6f9453a2387ebe16b800e7286942271a5a9f3
- SHA512 1cda8001ecdd3d27727411ffeade01752ff6db2091eda75220d31f5e756522bf9cc1bb86f396fbaa61d41589da72609908b28dc8d8fa68914a614c09976bc028
- MD5 SHA1 SHA512
Skin/Thumbs.db
- SHA256 31431bd03004dc1ef642c6f5cd69861572c0bc55ef04478ca8773fef7a79d6da
- MD5 3dc4b1eb0a8c1766c380ac340269cb7a
- SHA1 1950dfcdb8f051f7ea4eb1a8a46d8ae4ff3965bf
- SHA512 ac000e77711b05349be0aa77eba0fc3e0ded27d90ff4f98cd28f29c25c714c844d78bb57abb16ad2e85eb2a4f7530a0897c4f345d8b30ccb42cf046016fcdf78
- SSDEEP 96:e2yUT2E8yh3Hp3Ad/zpEjhBawkxIrb1aK2HKmPYFjSu:etJrzpc/kxMkKCxPYMu
- MD5 SHA1 SHA512 SSDEEP
Skin/redskin.gif
- SHA256 2f4d20588d8d733dd40ef0c7629896a8901bd3cfee39245cf602621da1c213e1
- MD5 e292a2b970bce267486ba24c5171481e
- SHA1 75450c23bff9e8da834830471b989c2bfced835d
- SHA512 39f4b78c89599c2efca2cc83fdff259dd46520447bed35271ee971e7ab96a15ec9e5fbc1dfd9a43b6cf91c3961cdc48b0b5aac891a4ef59a2d39cd1a6a2cf7f6
- SSDEEP 96:PaG+fj0jME4zPmhCS6IBUj/ZYL23Wwa4UWDTVPon2Me7m0s/C9cfm+BzRgx3qxSk:iiaPmESoHGwRV+URbb0gxaxMaLN
- MD5 SHA1 SHA512 SSDEEP
Skin/redvip5std.gif
- SHA256 2ad34a5875140456d790d4e18ab7c7072a72d92ca3f341dbd29d80295b5a6288
- MD5 ce4f39e61caa4eece4402edc5ae6c256
- SHA1 c5efec8322ececacc1eae8e404705b60a184caa9
- SHA512 b68d757c10fe0ce2c5d9dc49305db7044e0fbc91c45bb716e22e7767e67553775f395c94ba198df23d540921a73e2556499fe2e76877cc91876a61f75579d327
- SSDEEP 384:Aq90E235vPGluGZ2Bj//LnsSnBjZxtlf8v8AQA:Ayckl9Z2BXXBNt8EAQA
- MD5 SHA1 SHA512 SSDEEP
VIP.exe
- SHA256 e5afc3b73e6262349dcdd8060810da309324b0ccbdaadefba0cd4847dc7e0d19
- MD5 e23aac527fcc2f5856c7435aacbf1cad
- SHA1 867498c41f6b43aabf70eb612ce4d0b4aaa75739
- SHA512 bf86e9fa8beb1d4a01d6c9ab799a151571950d89fa3c53570240c6d904515063b687e141037b50da550bf62287c886465f653432689eaa0676262f3f100ae54c
- SSDEEP 12288:ihHsnpEQyLL2Y1sbXbd1g3PnvTcjTknYjladX9rGYSAucdkZR777:iJsnLyebYvvTcvYKYD
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
8491009
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
.text
Size
240KB
Virtual Size
692KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
35KB
Virtual Size
132KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
9KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
503KB
Virtual Size
7.2MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.aspack
Size
25KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.adata
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=1, productName=Unmarked objects (old),
count=2, id=93, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=12, version=7291,
count=8, id=11, version=8047,
count=1, id=10, version=8047,
count=10, id=95, version=2190,
count=28, id=14, version=7299,
count=174, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=40, id=93, version=2179,
count=749, id=1, productName=Unmarked objects,
count=3, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,
count=184, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
VIPExec.exe
- SHA256 daeb72dfc4ff17b3a58519b93a5259fce80cb8366b2205924b85553512c302fb
- MD5 7730be9cf9ce8fe484d6cbbb25a431f0
- SHA1 b44b62be5f460ef67d9ce544348cdcdb17c64b6a
- SHA512 521f5e7c005fa86f15f3394fb47582e6072dfb3becbca3c2308a1b5d9e7c50c6b715821684298de66e4620663ac304ade54ad351532fed6396eba73f92098867
- SSDEEP 3072:pDAhbD6/PB0eZReL+tYLkxnXlL1AH/oqAo0sS3mBNf:pSDuP/yL+lxXlJAH/oqAo0sH
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
368641
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
.text
Size
83KB
Virtual Size
156KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
11KB
Virtual Size
40KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
3KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
21KB
Virtual Size
124KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
10KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.adata
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=37, id=19, version=8022,
count=47, productName=Unmarked objects (old),
count=19, id=19, version=8034,
count=471, id=1, productName=Unmarked objects,
count=27, id=14, version=7299,
count=139, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=99, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
VIPUpdate.exe
- SHA256 84b349626de846ac1e03fe1176a4768ccead7764d2352cddb3bb74f3f05d4656
- MD5 84781cee5f1470f88e876f909475ed58
- SHA1 1684de93be24653a5b47e703e38dac9f23d42e46
- SHA512 9ac81dd98cd49f64d53b84ba0771bed0a3c340bdbbb22542f0291b8672b311b1d4f69fc02327d4a2f13db747d6ceab688e17605ea9b6da7cf8bb4b7134aa1b5c
- SSDEEP 3072:VeDgT3O5fEioGSYcvRS9XnXcosiMY/OagfVy2eCkeWh:VeDgT3OdEieHvRm4fFVy2eCkew
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
405505
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
.text
Size
92KB
Virtual Size
180KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
13KB
Virtual Size
48KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
3KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
6KB
Virtual Size
128KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.aspack
Size
10KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.adata
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=1, productName=Unmarked objects (old),
count=8, id=95, version=2190,
count=27, id=14, version=7299,
count=156, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=563, id=1, productName=Unmarked objects,
count=31, id=93, version=2179,
count=105, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
VPADLL.dll
- SHA256 e4d1c5b51f8bfaf46e5d70d93fec82a2bec931ffd9038598a8ed9bea58f1fdbe
- MD5 aa5dca0b2f5193743e49fda756d5ce77
- SHA1 5917418c424ac1e478d610e265b20a226155d18e
- SHA512 536ec5aed1565c1bde48cbb004e1982d909c5f18d07ddb3059cafc466e8c8acc9f8ee5e1cef8c088318d3607909e9f11514f097ef4e3c1b97d6e93a2815a2a58
- SSDEEP 1536:/3lTxtcyaeR+dqb2d96DsSS3edaEykaLxIouncC:vlbaeMUbW9izS3eda/XLxEV
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
139265
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
39KB
Virtual Size
84KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
1024B
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
3KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
5KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.adata
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=1, productName=Unmarked objects (old),
count=1, id=12, version=7291,
count=2, id=14, version=7299,
count=4, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=155, id=1, productName=Unmarked objects,
count=13, id=19, version=8034,
count=9, id=49, version=9044,
count=3, id=48, version=9044,
count=31, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
count=7, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,
VPVDLL.dll
- SHA256 af268ee9b2ab3a9be14a2105bed32a2b4ddafd96b20a7b63c594bac84c25bd2d
- MD5 7ab120c33f3ff2595997e4c1f1942ca3
- SHA1 64dfc13f87271f630b9d016e9154910de19aecdf
- SHA512 53d44a339de1b77989dd381cc88b0598982fa461e3fd17824b4e5732ff4c1b1d08c4e1ed38e72710f3515d4313d291d2a576422ff2c780826c2bd2e5b2160085
- SSDEEP 3072:lE5hNQCS0uaF/xDu7PfhLMS0VZJOlU8dUfvrh:G5bgaVxOoS0UlU8dUfvr
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
348161
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
87KB
Virtual Size
216KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
16KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
2KB
Virtual Size
88KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
5KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
5KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.adata
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=6, id=19, version=8022,
count=3, id=11, version=8047,
count=9, id=14, version=7299,
count=5, id=10, version=8047,
count=2, id=4, version=8047,
count=3, id=11, version=8569,
count=2, id=4, version=8569,
count=2, id=25, version=9210,
count=3, id=11, version=8966,
count=1, id=29, version=9178,
count=2, id=28, version=9178,
count=205, id=1, productName=Unmarked objects,
count=15, id=19, version=8034,
count=12, productName=Unmarked objects (old),
count=7, id=48, version=9044,
count=55, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
advert/Thumbs.db
- SHA256 840800987bf6f6cd1f2ffa8a27ba6317584887387c371adae63beaf737b8422a
- MD5 5a6cc2c545df9d60f96010dab073019f
- SHA1 7fab285d27629d549dfea9683a2fd193b6ef0580
- SHA512 eeb937f88cb64874a74ec74f8be0cc70c49bb2d5d4b61c8e3741fdf4c03f6b168f87048a685fff32d04d3789ab91c11fe3068a31a6a0121cb8fc878b4007f101
- SSDEEP 192:lOWXbCEpuzM9Putam2sUOxrwBWCWXbCEpuzM1QTrH4g/6qL5lrlrx1+8vI:YnIPu2NswoCnHXHUY9rx88g
- MD5 SHA1 SHA512 SSDEEP
advert/ad_mcu.gif
- SHA256 9d62ecc0d9862b36c8353e040c411317663f6793875664c68e26c22f38f95293
- MD5 9dba8fa6e94d7a54a75fbcff06df6757
- SHA1 f4d8aebeb717143fa5bc471de432eb594a10818a
- SHA512 95d5c73ce6d4977569dc06370d60dd566448e81c1cef87c2495e8176e72020b45bb3a7b9b25e52f885500b8459b31d11cbe504c1aac6c0e483b238e54d190d45
- MD5 SHA1 SHA512
advert/ad_up.gif
- SHA256 7e7e167558da5db11ff36d20e75fc3450d76c670fb43420e3856073cbc7b80b4
- MD5 de058c2e4f1c14fdddc9a514da11ba7c
- SHA1 1c3a03d98b8657c37aeea9ee5ecf419252c98a3d
- SHA512 f4d80b2ddb487ccc8d33dd6e667706a237f3221af9a7e5bc21bf257141862a79d57e65c467f100fa9f11128b2e3913ab44a3d652dbefaad4f1bad0017ca83320
- SSDEEP 384:70KgQ6xOEwsSBG/RFVlbjdwTuHjA2V6v7m9EvUw3DuHcmT6wTvnKRdJXowCNfMkx:IY3EBRblfjk2V4m98Uw3/WvKRfX8fM4
- MD5 SHA1 SHA512 SSDEEP
advert/mcu_ad1.gif
- SHA256 12eaee5d0bb49d99465218e0f2c70218ebc21655fd3c995175cf918118de1ac5
- MD5 54aabe216598bdb042ba314f9bd94b61
- SHA1 42861ddf22532f30bb106b0d858d8a0f0588154b
- SHA512 7cd5aaabaf44a29ea74f74e32b9a79ad5272c588cd2a6f8e7d6c9eb5b2a74c8d60e644b4bd381a7a5de55fef4c77969b601cbd37957256c52c171cea6f7679d1
- SSDEEP 1536:TbRfDZCEUeJIYNFuqvjjBHYM3YG33KEqDm1TribaGu+8NZEcTBpfQVWUYpUCi/0K:9TJbiCvBQ+6rD2ubw+8TEcXosDIcGZIq
- MD5 SHA1 SHA512 SSDEEP
advert/vip.gif
- SHA256 8e181a68438171985b17b17b3e10f39c1eb4c88126636d8592f8752118adb37a
- MD5 bd18a7a22a644e99f0c289aa6b75fdbb
- SHA1 b70416060c0657c2b46091c9c4a5203da7f73e53
- SHA512 9a724239b057854b44ff99a5c3d38f549266366a972b24fd7b0604e1dfcf61d5045b1b537c51efc218bc16d881162cd0338c1441b29bc1fd0f721e04a9c93ba0
- SSDEEP 768:gAvVh5zwTPpyj3FADZWN+qpfoKyAKJDXATV6CYlYdrUhN:gAvVhlwThcFADsNlzKJcplYlYhUhN
- MD5 SHA1 SHA512 SSDEEP
divx.dll
- SHA256 ae15ddb6f5254b0db7334cdaeb401855842a7bedb86a9be869763e290dc76450
- MD5 0a41851ce20b307f73496e329aa0424f
- SHA1 bbefa0a2dd3956f1a781a9089f68909d7a346d39
- SHA512 27339ce702fd7a3599dec7e49649a0d3511ca20269af0e6a9a1480c322fa6c515f40b41bd2b36e03a9b0e471fb584c0f270d557ad358a6238f5003ceedcafdc8
- SSDEEP 12288:WuqiPfi8FAWr3r8tkQCAt4V2L9LHjJU+BN/BYjgsMdy0ta:9q4fi8iWzrUCA+oL9HJUC/Bk1MU0ta
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1941505
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
DriverProc
NotifyAudio
SetAudioFormat
decore
decore_backdoor
encore
encore_backdoor
Name
Size
394KB
Virtual Size
1.2MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
28KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
27KB
Virtual Size
184KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
18KB
Virtual Size
100KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
106KB
Virtual Size
292KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
22KB
Virtual Size
48KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
67KB
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.adata
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=2, id=12, version=7291,
count=13, id=11, version=8047,
count=43, id=14, version=7299,
count=157, id=10, version=8047,
count=55, id=11, version=8569,
count=389, id=1, productName=Unmarked objects,
count=17, id=19, version=8034,
count=213, productName=Unmarked objects (old),
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
ilbc_dll.dll
- SHA256 28f251dd0f37230a92a76103151b8f1693862df6a258a2aad2aa69ca575c6579
- MD5 2f077c704b63b82ad1ce3ea1b5bad631
- SHA1 29338e60d9f82e36fadeb19964203b0fd327df32
- SHA512 550aa5b51f39f2370ec6756334afacc2e39284266af11aebc16630d2c7f29eee9d901ea589acddeaa830321738c40bbb4f98db271e82c7e82004f08824d54d47
- SSDEEP 1536:ALi/OUQcZ7SyuVlWxIN/LVtpovtmgMbFuIq3lKRseHcCIo5:AWGUT42xczVmAg0FuIq3lKBHR
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
131073
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
iLBCDeInitDecode
iLBCDeInitEncode
iLBCDecode
iLBCEncode
iLBCInitDecode
iLBCInitEncode
Name
.text
Size
40KB
Virtual Size
76KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
24KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
7KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
3KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.adata
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=2, id=96, productName=VS2003 (.NET) build 3077, version=3077,
count=28, id=15, productName=VS2003 (.NET) build 3077, version=3077,
count=3, id=93, version=2179,
count=73, id=1, productName=Unmarked objects,
count=119, id=95, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=92, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=90, productName=VS2003 (.NET) build 3077, version=3077,
redmcu_c.exe
- SHA256 be1ef431ce1c7929a085ee029e5e4474c0e53a30d0017ae41ba828deebe7b135
- MD5 0136fd7448270be35c7dec3c00ddb40d
- SHA1 7d5a933ccedeb2327be65e44ac016342e31cc599
- SHA512 eda863df48899aa14ee47c67985a582dfae660b1526ed24b50d126df570ae0fab9426f544853f5718f184b3632864c0f49fd7fc014497b4cdb63892109589441
- SSDEEP 49152:VlxRm61atMJ1rpkyG9QAKe6qU+NMxq6AvkOcaMr:zfdON/NMxNAdPMr
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
11792385
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
.text
Size
165KB
Virtual Size
420KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
24KB
Virtual Size
92KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
7KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1.7MB
Virtual Size
10.7MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.aspack
Size
13KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.adata
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=1, productName=Unmarked objects (old),
count=2, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
count=3, id=11, version=8798,
count=8, id=95, version=2190,
count=27, id=14, version=7299,
count=158, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=637, id=1, productName=Unmarked objects,
count=31, id=93, version=2179,
count=143, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
regdll.bat
- SHA256 0e528abbdc4c2efd576d0b773164a79300c8c327edc973a3b5f7dbf56cd13dab
- MD5 4bcec178f9a91a9028c87f9ce806e503
- SHA1 6a529ca978032a22c9702000129549992f6d0b42
- SHA512 0a45a47b36d4266b60ceaf2a05f82171d6d5c5a276ef0e1a8481ad2ba23f28a9a5dc1296463c877ace63c39d29b2d68fff796e27b4c092e25af0fbade66643da
- MD5 SHA1 SHA512
uninstall.exe
- IMPHASH 18bc6fa81e19f21156316b1ae696ed6b
- SHA256 430c8df17d3e685cec49ce30698d15de0a209f7b0e68f65da03ccceea34b5941
- MD5 63b71df313de92ae83dae5b351f44fb5
- SHA1 ae83ff4e74f9fc20d51f2035ec4f48508d4a3537
- SHA512 e379b4c06c69e1535bc356dfb541a1b869328c0808504222046570af71a8dccb5bdae50f4062dd0653d0765d57d77cc791a5cfd61d45ef971b0b025d8a85164b
- SSDEEP 768:3Pu7h0Pl8P/RoqB19ecMj+HY4GlJxShPFS6sWkJOuEK08inS3n:f4h6CTBWA/lh/kJ2K08in0
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
-
NSIS installer
Minor OS version
0
Major OS version
4
Entry point
12599
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
CloseHandle
SetFileTime
CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetFileSize
GetModuleFileNameA
GetTickCount
GetCurrentProcess
lstrcmpiA
ExitProcess
GetCommandLineA
GetWindowsDirectoryA
GetTempPathA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
CreateFileA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
lstrcmpA
GetEnvironmentVariableA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
SetErrorMode
GetModuleHandleA
LoadLibraryA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
CopyFileA
user32
ScreenToClient
GetWindowRect
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
EndDialog
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxA
CharPrevA
DispatchMessageA
PeekMessageA
CreateDialogParamA
DestroyWindow
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
RegisterClassA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
TrackPopupMenu
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow
gdi32
SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject
shell32
SHGetMalloc
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation
advapi32
RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA
comctl32
ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create
ole32
OleInitialize
OleUninitialize
CoCreateInstance
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
Name
.text
Size
22KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
108KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.ndata
Size
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=2, id=95, version=2190,
count=152, id=1, productName=Unmarked objects,
count=17, id=93, version=2179,
count=9, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
$PLUGINSDIR/LangDLL.dll
- IMPHASH 2db813254ea8b4d2a92d703ecb659f39
- SHA256 fab7253d54818991c18da1a9548a31bbb8970430c1c8423474bb37747d665141
- MD5 d1017871e5fafca4f1a9ab0c459eb179
- SHA1 84afd186e8523be52b9d7d693f9ada0e1d1758df
- SHA512 f4efa4112e9c24a6bedd8063685e7f6a115ec87eeb3e0c0a463ef51dfed8a94ec7c3c146a654f39584b02b5333c038c8adff09788c8c299832d17cd71c08667c
- SSDEEP 48:SHIPtcWCeM7etAo1UurdGl4A0h2TpXHWFv+wewzpv1XP3GhaEJjof2ynh1:d1cWxfzrrh2cFvWwFtSU
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5415
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GlobalFree
lstrcpynA
lstrcmpA
lstrlenA
GetModuleHandleA
MulDiv
lstrcpyA
GlobalAlloc
user32
SetWindowTextA
SetDlgItemTextA
SendDlgItemMessageA
EndDialog
DialogBoxParamA
LoadIconA
SendMessageA
ShowWindow
GetDC
gdi32
CreateFontIndirectA
GetDeviceCaps
DeleteObject
LangDialog
Name
.text
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
681B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
352B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
254B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=20, id=1, productName=Unmarked objects,
count=7, id=93, version=2179,
count=1, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
vipdial/redvip.pbk
- SHA256 67b945a178ee4f2cdc32bf3f9a684c1182d011617535234574f80ac2cd7e3ba0
- MD5 e546a2f600535f5ff425d95fb3319316
- SHA1 dfc633038f5ad31963cb542af2f9b83aa564ba16
- SHA512 86607b080a8b8065f74758d938c6da53b287d18ffa5f3fd88261308919b307026b4d0264c391adc3316b028968418e012741c2c028589d046d2ed0f32a00462f
- MD5 SHA1 SHA512
vipdial/redvipphone.pbk
- SHA256 12fe7abd1a62d2eff222dbb889eb4b015a3ac49ba8d57008f35a6ec7213607a8
- MD5 38286e98f190e57f7da5f9a6689f012a
- SHA1 47cd98cf249a85a13d0eb414d0f2918552209399
- SHA512 4ed5b65d9699dc343be9181bed03d8b613f60cb8f9414f611affbc202e44f4dfd188dc1fb061ebfdf3ac3514702ce02a59110bfc16552eafea7c88275ae4080b
- MD5 SHA1 SHA512
vish263m.dll
- SHA256 d59890672232f44110423dc0d8940898dfd91d8b13070766560833b3df21eeaa
- MD5 33c3c1229f07d27ecd83d179697ca656
- SHA1 40ef84dd54bd5d9885bfd8c5020f4b41777aa4b6
- SHA512 252a3cadd5aeb48f24cb9b2014f3cdbbc8a5aa1b143919ee9fddf9133d4bc2a0a7ac6cdf53f3cf0b5d4773db91b83f99775a32c79e3952c05cc607a05d33e34d
- SSDEEP 12288:JL3JlT8HumVjedMKTkoxZDbbv+hz3iqSUNd+UVp:JwHumhedugbv9qTNdF
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1777665
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
AllocContext
AllocFrame
CodecClose
CodecOpen
DecodeVideo
EncodeVideo
FindDecoder
FindEncoder
FreePtr
GetVer
InitCodec
Name
.text
Size
218KB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
208KB
Virtual Size
208KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
16KB
Virtual Size
384KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
9KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
4KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.adata
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=4, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=6, id=1, productName=Unmarked objects,
count=51, productName=Unmarked objects (old),
count=2, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=3, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,
vish323.dll
- SHA256 a49bc58d1981063586dd1a7bfe84c8a3385230f6d075456b8020055eb1a7f5a2
- MD5 46c4ef603be797d088a3f0b37dd832e9
- SHA1 2102119ac4a4a13de4e50e3178c6fb985320970b
- SHA512 dc780d5c9be5b8491996265a1fac9a671612c73aa63b8e69deae1b3d03d72e69656b38d107b19896349e68c6ff2afa090d2d2e1df12d38686ddf67e1e107a99d
- SSDEEP 12288:RUeSY31WOuCReX21QZvXEZ96iKdDpMqVF5GwBGvXxtgK:JS4WOHReXtfEZcilqVzGbvhm
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
2428929
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
??0CAudioMixer@@QAE@ABV0@@Z
??0CAudioMixer@@QAE@XZ
??0CAudioPlayer@@QAE@ABV0@@Z
??0CAudioPlayer@@QAE@XZ
??0CAudioRecorder@@QAE@ABV0@@Z
??0CAudioRecorder@@QAE@XZ
??0CH323EndPoint@@QAE@ABV0@@Z
??0CH323EndPoint@@QAE@H@Z
??0CILSClient@@QAE@ABV0@@Z
??0CILSClient@@QAE@XZ
??0CVideoGrabber@@QAE@ABV0@@Z
??0CVideoGrabber@@QAE@XZ
??0CVideoMixer@@QAE@ABV0@@Z
??0CVideoMixer@@QAE@XZ
??0CVolumeCtrl@@QAE@ABV0@@Z
??0CVolumeCtrl@@QAE@XZ
??1CAudioMixer@@UAE@XZ
??1CAudioPlayer@@UAE@XZ
??1CAudioRecorder@@UAE@XZ
??1CH323EndPoint@@UAE@XZ
??1CILSClient@@UAE@XZ
??1CVideoGrabber@@UAE@XZ
??1CVideoMixer@@UAE@XZ
??1CVolumeCtrl@@UAE@XZ
??4CAudioMixer@@QAEAAV0@ABV0@@Z
??4CAudioPlayer@@QAEAAV0@ABV0@@Z
??4CAudioRecorder@@QAEAAV0@ABV0@@Z
??4CH323EndPoint@@QAEAAV0@ABV0@@Z
??4CILSClient@@QAEAAV0@ABV0@@Z
??4CVideoGrabber@@QAEAAV0@ABV0@@Z
??4CVideoMixer@@QAEAAV0@ABV0@@Z
??4CVolumeCtrl@@QAEAAV0@ABV0@@Z
??_7CAudioMixer@@6B@
??_7CAudioPlayer@@6B@
??_7CAudioRecorder@@6B@
??_7CH323EndPoint@@6B@
??_7CILSClient@@6B@
??_7CVideoGrabber@@6B@
??_7CVideoMixer@@6B@
??_7CVolumeCtrl@@6B@
??_FCH323EndPoint@@QAEXXZ
?AddChannel@CAudioMixer@@QAEHKHKH@Z
?AddChannel@CVideoMixer@@QAEHKHKKH@Z
?AlertWithMedia@CH323EndPoint@@QAEXH@Z
?AnswerCall@CH323EndPoint@@QAEHK@Z
?Authorise@CH323EndPoint@@QAEHPBD@Z
?AutoSendVideo@CH323EndPoint@@QAEXH@Z
?ChannelExist@CAudioMixer@@QAEHKH@Z
?ChannelExist@CVideoMixer@@QAEHKH@Z
?Close@CAudioPlayer@@QAEHXZ
?Close@CAudioRecorder@@QAEHXZ
?Close@CVideoGrabber@@QAEHXZ
?Close@CVolumeCtrl@@QAEHXZ
?EnableAudioCodec@CH323EndPoint@@QAEHHH@Z
?EnableFastStart@CH323EndPoint@@QAEXH@Z
?EnableH245Tunnel@CH323EndPoint@@QAEXH@Z
?EnableH245inSetup@CH323EndPoint@@QAEXH@Z
?EnableVideoCodec@CH323EndPoint@@QAEXH@Z
?EnumUserNames@CILSClient@@QAEHAAK@Z
?EnumUsers@CILSClient@@QAEHAAK@Z
?GetAudioCodecCount@CH323EndPoint@@QBEKXZ
?GetAudioCodecName@CH323EndPoint@@QBEHHPADHAAH@Z
?GetAudioDataReceived@CH323EndPoint@@QBEKK@Z
?GetAudioDataSent@CH323EndPoint@@QBEKK@Z
?GetAudioSignalLevel@CH323EndPoint@@QBEKKH@Z
?GetBkgndColor@CVideoMixer@@QAEHKAAK@Z
?GetChannelCount@CAudioMixer@@QAEKH@Z
?GetChannelCount@CVideoMixer@@QAEKH@Z
?GetConnectionCount@CH323EndPoint@@QBEKXZ
?GetConnectionData@CH323EndPoint@@QBEKK@Z
?GetConnectionDuration@CH323EndPoint@@QBEHKAAK@Z
?GetConnectionStatus@CH323EndPoint@@QBE?AW4ConnStatus@@K@Z
?GetDeviceCount@CAudioPlayer@@SAKXZ
?GetDeviceCount@CAudioRecorder@@SAKXZ
?GetDeviceCount@CVideoGrabber@@QAEKXZ
?GetDeviceName@CAudioPlayer@@SAHHPADH@Z
?GetDeviceName@CAudioRecorder@@SAHHPADH@Z
?GetDeviceName@CVideoGrabber@@QAEHHPADH@Z
?GetFPS@CVideoMixer@@QAEHKHAAK@Z
?GetGatekeeperName@CH323EndPoint@@QAEHPADH@Z
?GetInitialBandwidth@CH323EndPoint@@QBEKXZ
?GetMaxAudioDelayJitter@CH323EndPoint@@QBEHKAAK@Z
?GetMaxConnection@CH323EndPoint@@QBEKXZ
?GetMixerMode@CAudioMixer@@QAEHKAAH@Z
?GetMixerMode@CVideoMixer@@QAEHKAAH@Z
?GetNoAnswerTimeout@CH323EndPoint@@QAEKXZ
?GetOutgoingAudio@CAudioMixer@@QAEHKAAHPAK@Z
?GetOutgoingVideo@CVideoMixer@@QAEHKAAHPAK@Z
?GetPreferredAudioCodec@CH323EndPoint@@QBEHXZ
?GetRemoteAddress@CH323EndPoint@@QBEHKPADH@Z
?GetRemoteApplication@CH323EndPoint@@QBEHKPADH@Z
?GetRemotePartyName@CH323EndPoint@@QBEHKPADH@Z
?GetRemotePartyNumber@CH323EndPoint@@QBEHKPADH@Z
?GetSilenceDetectionMode@CH323EndPoint@@QBEHKAAW4SilenceDetectionMode@@AAK@Z
?GetUserAlias@CH323EndPoint@@QBEXPADH@Z
?GetUserInfo@CILSClient@@QAEHAAKPBD@Z
?GetUserNameA@CH323EndPoint@@QBEXPADH@Z
?GetUserState@CILSClient@@QAEHAAK@Z
?GetVideoDataReceived@CH323EndPoint@@QBEKK@Z
?GetVideoDataSent@CH323EndPoint@@QBEKK@Z
?GetVideoFlip@CVideoMixer@@QAEHKHAAH0@Z
?GetVideoFrameReceived@CH323EndPoint@@QBEKK@Z
?GetVideoFrameSent@CH323EndPoint@@QBEKK@Z
?GetVideoQuality@CH323EndPoint@@QBEHKAAK@Z
?GetVideoSize@CH323EndPoint@@QBEHKAAW4VideoFormat@@@Z
?GetVolume@CVolumeCtrl@@QAEKXZ
?HangUp@CH323EndPoint@@QAEHKW4CallEndReason@@H@Z
?HoldAudio@CH323EndPoint@@QAEHKHH@Z
?HoldVideo@CH323EndPoint@@QAEHKHH@Z
?Initialize@CH323EndPoint@@QAEHPBD0GGW4CodeStatus@@G@Z
?Initialize@CILSClient@@QAEHXZ
?IsAudioHold@CH323EndPoint@@QBEHKH@Z
?IsAudioReceiving@CH323EndPoint@@QBEHK@Z
?IsAudioSending@CH323EndPoint@@QBEHK@Z
?IsH263Available@@YAHXZ
?IsOpened@CAudioPlayer@@QBEHXZ
?IsOpened@CAudioRecorder@@QBEHXZ
?IsOpened@CVideoGrabber@@QBEHXZ
?IsOpened@CVolumeCtrl@@QBEHXZ
?IsVideoHold@CH323EndPoint@@QBEHKH@Z
?IsVideoReceiving@CH323EndPoint@@QBEHK@Z
?IsVideoSending@CH323EndPoint@@QBEHK@Z
?MakeCall@CH323EndPoint@@QAEHAAKPBD@Z
?OnAnswerCall@CH323EndPoint@@UAEXKPBD@Z
?OnAudioStart@CH323EndPoint@@UAEHKHPBD@Z
?OnAudioStop@CH323EndPoint@@UAEHKHPBD@Z
?OnConnectionCleared@CH323EndPoint@@UAEXKKW4CallEndReason@@@Z
?OnConnectionEstablished@CH323EndPoint@@UAEXK@Z
?OnEnumUserNames@CILSClient@@UAEXKKPBD@Z
?OnEnumUsers@CILSClient@@UAEXKKAAUUSER_INFO@@@Z
?OnGetUserInfo@CILSClient@@UAEXKKAAUUSER_INFO@@@Z
?OnReadAudioFrame@CH323EndPoint@@UAEHKPAEH@Z
?OnReadVideoFrame@CH323EndPoint@@UAEHKPAEHH@Z
?OnReceiveNonStandardMsg@CH323EndPoint@@UAEXKPBD@Z
?OnReceiveUserInput@CH323EndPoint@@UAEXKPBD@Z
?OnRegister@CILSClient@@UAEXKK@Z
?OnRenderAudioFrame@CH323EndPoint@@UAEHKPAEH@Z
?OnRenderVideoFrame@CH323EndPoint@@UAEHKPAEHH@Z
?OnStream@CVideoGrabber@@UAEXPAEHH@Z
?OnUnregister@CILSClient@@UAEXKK@Z
?OnUpdate@CILSClient@@UAEXKK@Z
?OnUseGatekeeper@CH323EndPoint@@UAEXW4UseGKResult@@PBD@Z
?OnUserStateChanged@CILSClient@@UAEXKPBD@Z
?OnVideoStart@CH323EndPoint@@UAEHKHPBD@Z
?OnVideoStop@CH323EndPoint@@UAEHKHPBD@Z
?OnVolumeChanged@CVolumeCtrl@@UAEXK@Z
?OnWaitForAnswer@CH323EndPoint@@UAEXK@Z
?Open@CAudioPlayer@@QAEHH@Z
?Open@CAudioRecorder@@QAEHH@Z
?Open@CVideoGrabber@@QAEHHH@Z
?Open@CVolumeCtrl@@QAEHHH@Z
?Read@CAudioMixer@@QAEHKPAEKHPAK@Z
?Read@CAudioRecorder@@QAEHPAXH@Z
?Read@CVideoGrabber@@QAEHPAXHH@Z
?Read@CVideoMixer@@QAEHKPAEHHH@Z
?Register@CILSClient@@QAEHAAK@Z
?RemoveChannel@CAudioMixer@@QAEHKH@Z
?RemoveChannel@CVideoMixer@@QAEHKH@Z
?SendNonStandardMsg@CH323EndPoint@@QAEHKPBD@Z
?SendUserInput@CH323EndPoint@@QAEHKPBDW4SendUserInputModes@@@Z
?SetBkgndColor@CVideoMixer@@QAEHKK@Z
?SetConnectionData@CH323EndPoint@@QAEHKK@Z
?SetFPS@CVideoMixer@@QAEHKHK@Z
?SetGrabberMode@CVideoGrabber@@QAEHK@Z
?SetInitialBandwidth@CH323EndPoint@@QAEXK@Z
?SetMaxAudioDelayJitter@CH323EndPoint@@QAEHKK@Z
?SetMaxConnection@CH323EndPoint@@QAEXK@Z
?SetMixerMode@CAudioMixer@@QAEHKH@Z
?SetMixerMode@CVideoMixer@@QAEHKH@Z
?SetNoAnswerTimeout@CH323EndPoint@@QAEXK@Z
?SetOutgoingAudio@CAudioMixer@@QAEHKHPAK@Z
?SetOutgoingVideo@CVideoMixer@@QAEHKHPAK@Z
?SetPreferredAudioCodec@CH323EndPoint@@QAEHH@Z
?SetServer@CILSClient@@QAEHPBD00@Z
?SetSilenceDetectionMode@CH323EndPoint@@QAEHKW4SilenceDetectionMode@@K@Z
?SetUser@CILSClient@@QAEHPBUUSER_INFO@@@Z
?SetUserName@CH323EndPoint@@QAEXPBD0@Z
?SetVideoFlip@CVideoMixer@@QAEHKHHH@Z
?SetVideoQuality@CH323EndPoint@@QAEHKK@Z
?SetVideoSize@CH323EndPoint@@QAEHKW4VideoFormat@@@Z
?SetVolume@CVolumeCtrl@@QAEHK@Z
?StartListen@CH323EndPoint@@QAEHPBDG@Z
?StartSendAudio@CH323EndPoint@@QAEHK@Z
?StartSendVideo@CH323EndPoint@@QAEHK@Z
?StartStream@CVideoGrabber@@QAEHHH@Z
?StopSendAudio@CH323EndPoint@@QAEHK@Z
?StopSendVideo@CH323EndPoint@@QAEHK@Z
?StopStream@CVideoGrabber@@QAEHXZ
?Uninitialize@CILSClient@@QAEHXZ
?Unregister@CILSClient@@QAEHAAK@Z
?UnuseGatekeeper@CH323EndPoint@@QAEHXZ
?Update@CILSClient@@QAEHAAKPBUUSER_INFO@@K@Z
?UseGatekeeper@CH323EndPoint@@QAEHPBD0@Z
?Write@CAudioMixer@@QAEHKPAEKHPAK@Z
?Write@CAudioPlayer@@QAEHPAEH@Z
?Write@CVideoMixer@@QAEHKPAEHHH@Z
Name
.text
Size
378KB
Virtual Size
1.6MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
324KB
Virtual Size
324KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
40KB
Virtual Size
304KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
50KB
Virtual Size
140KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
6KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.adata
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=5, id=12, version=7291,
count=10, id=14, version=7299,
count=1, id=28, version=9178,
count=7, id=11, version=8966,
count=6, productName=Unmarked objects (old),
count=10, id=19, version=8022,
count=25, id=19, version=8034,
count=412, id=1, productName=Unmarked objects,
count=51, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=86, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
count=5, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,
安装说明.url
- SHA256 ac996e7c6b803289cbb4eb6cd62cc7e63dcd456aa18dd7fa88aed066b06218ac
- MD5 ed83e978f409fcebba2825b084f2c140
- SHA1 4548b5565354024dff5f387fa825fce7d11e67fe
- SHA512 2257a6118aac1a6368749357433e037798d1765dee71addb73fa3e98b27335bf7000786a0814d6a5b3a5f63eb25f13e49559da8e192f48dd230d1c344763a377
- MD5 SHA1 SHA512