b1921d4747ed0ca08ecb31dda5b57079dcd6085d
- SHA256 3c806eec38fc8565c942fe0a79331bf3215989d494bb3d5fa8d8057dcef58e03
Overview
overview
7Static
static
7b1921d4747...5d.rar
windows7-x64
1b1921d4747...5d.rar
windows10-2004-x64
1-warcraft-...I7.exe
windows7-x64
7-warcraft-...I7.exe
windows10-2004-x64
7.............exe
windows7-x64
4.............exe
windows10-2004-x64
4BNGatewayEditor.exe
windows7-x64
5BNGatewayEditor.exe
windows10-2004-x64
5icyHell.net.url
windows7-x64
6icyHell.net.url
windows10-2004-x64
3Warcracft ...ac.zip
macos-10.15-amd64
1Warcracft ...up.exe
windows7-x64
3Warcracft ...up.exe
windows10-2004-x64
3W3CDKeyGrabber.exe
windows7-x64
3W3CDKeyGrabber.exe
windows10-2004-x64
3icyHell.net.url
windows7-x64
6icyHell.net.url
windows10-2004-x64
3W3Fixer.exe
windows7-x64
3W3Fixer.exe
windows10-2004-x64
3icyHell.net.url
windows7-x64
6icyHell.net.url
windows10-2004-x64
3WarCraft3_...iS.exe
windows7-x64
3WarCraft3_...iS.exe
windows10-2004-x64
3icyHell.net.url
windows7-x64
6icyHell.net.url
windows10-2004-x64
3Warcracft ...up.exe
windows7-x64
7Warcracft ...up.exe
windows10-2004-x64
7FTkey.exe
windows7-x64
3FTkey.exe
windows10-2004-x64
3cdkey.exe
windows7-x64
6cdkey.exe
windows10-2004-x64
6icyHell.net.url
windows7-x64
6Behavioral task
behavioral1
Sample
b1921d4747ed0ca08ecb31dda5b57079dcd6085d.rar
Resource
win7-20240903-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
b1921d4747ed0ca08ecb31dda5b57079dcd6085d.rar
Resource
win10v2004-20241007-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
-warcraft-tft-keygen-F82Z5I7.exe
Resource
win7-20240903-en
windows7-x64
7 signatures
150 seconds
Behavioral task
behavioral4
Sample
-warcraft-tft-keygen-F82Z5I7.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
8 signatures
150 seconds
Behavioral task
behavioral5
Sample
.............exe
Resource
win7-20240903-en
windows7-x64
11 signatures
150 seconds
Behavioral task
behavioral6
Sample
.............exe
Resource
win10v2004-20241007-en
windows10-2004-x64
10 signatures
150 seconds
Behavioral task
behavioral7
Sample
BNGatewayEditor.exe
Resource
win7-20240903-en
windows7-x64
8 signatures
150 seconds
Behavioral task
behavioral8
Sample
BNGatewayEditor.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
7 signatures
150 seconds
Behavioral task
behavioral9
Sample
icyHell.net.url
Resource
win7-20240903-en
windows7-x64
7 signatures
150 seconds
Behavioral task
behavioral10
Sample
icyHell.net.url
Resource
win10v2004-20241007-en
windows10-2004-x64
8 signatures
150 seconds
Behavioral task
behavioral11
Sample
Warcracft III Reforged/StarCraft-Setup-Mac.zip
Resource
macos-20241106-en
macos-10.15-amd64
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
Warcracft III Reforged/StarCraft-Setup.exe
Resource
win7-20240903-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral13
Sample
Warcracft III Reforged/StarCraft-Setup.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral14
Sample
W3CDKeyGrabber.exe
Resource
win7-20240903-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral15
Sample
W3CDKeyGrabber.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral16
Sample
icyHell.net.url
Resource
win7-20240708-en
windows7-x64
7 signatures
150 seconds
Behavioral task
behavioral17
Sample
icyHell.net.url
Resource
win10v2004-20241007-en
windows10-2004-x64
8 signatures
150 seconds
Behavioral task
behavioral18
Sample
W3Fixer.exe
Resource
win7-20240903-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral19
Sample
W3Fixer.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral20
Sample
icyHell.net.url
Resource
win7-20240708-en
windows7-x64
7 signatures
150 seconds
Behavioral task
behavioral21
Sample
icyHell.net.url
Resource
win10v2004-20241007-en
windows10-2004-x64
8 signatures
150 seconds
Behavioral task
behavioral22
Sample
WarCraft3_TFT_Keygen_by_CRiS.exe
Resource
win7-20241023-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral23
Sample
WarCraft3_TFT_Keygen_by_CRiS.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral24
Sample
icyHell.net.url
Resource
win7-20240903-en
windows7-x64
7 signatures
150 seconds
Behavioral task
behavioral25
Sample
icyHell.net.url
Resource
win10v2004-20241007-en
windows10-2004-x64
8 signatures
150 seconds
Behavioral task
behavioral26
Sample
Warcracft III Reforged/Warcraft III Reforged™ Setup.exe
Resource
win7-20240903-en
windows7-x64
8 signatures
150 seconds
Behavioral task
behavioral27
Sample
Warcracft III Reforged/Warcraft III Reforged™ Setup.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
7 signatures
150 seconds
Behavioral task
behavioral28
Sample
FTkey.exe
Resource
win7-20240729-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral29
Sample
FTkey.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral30
Sample
cdkey.exe
Resource
win7-20240729-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral31
Sample
cdkey.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
2 signatures
150 seconds
General
- Target b1921d4747ed0ca08ecb31dda5b57079dcd6085d
- Size 30.2MB
- Sample241108-22f1pasajc
- SHA256 3c806eec38fc8565c942fe0a79331bf3215989d494bb3d5fa8d8057dcef58e03
- MD5 03bf9239a1c35ef0f6f162180499167f
- SHA1 b1921d4747ed0ca08ecb31dda5b57079dcd6085d
- SHA512 6cd7a438a05c940649e8202e392318905e5785a0476a10388aa62081cdca2de9d9ede2045fb6fbabd116ad7b785b10c4970d0536fea8f945c5510db27c346273
- SSDEEP 786432:eQaNznirxs9+seaiiI0Ppr91OLvHh99br84AEEuDW:eQSzB9+sPiD0Pn1Uvh99brhTDW
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
-
resource yara_rule static1/unpack006/W3Fixer.exe aspack_v212_v242 -
resource yara_rule static1/unpack003/BNGatewayEditor.exe upx - Unsigned PE 8 IoCs
Checks for missing Authenticode signature.
resource unpack002/-warcraft-tft-keygen-F82Z5I7.exe unpack001/Warcracft III Reforged/StarCraft-Setup.exe unpack005/W3CDKeyGrabber.exe unpack006/W3Fixer.exe unpack007/WarCraft3_TFT_Keygen_by_CRiS.exe unpack001/Warcracft III Reforged/Warcraft III Reforged™ Setup.exe unpack009/FTkey.exe unpack009/cdkey.exe
File Explorer
-
b1921d4747ed0ca08ecb31dda5b57079dcd6085d.rar .zip 30.2MB
-
Warcracft III Reforged/-warcraft-tft-keygen-F82Z5I7.zip.zip 11.8MB
-
-warcraft-tft-keygen-F82Z5I7.exe.exe 9.5MB
-
.............exe.exe 3.9MB
-
Warcracft III Reforged/BNGatewayEditor.zip.zip 213KB
-
BNGatewayEditor.exe.exe 222KB
-
icyHell.net.URL49B
-
Warcracft III Reforged/CD Key.txt476B
-
Warcracft III Reforged/StarCraft-Setup-Mac.zip.app 3.8MB
-
Warcracft III Reforged/StarCraft-Setup.exe.exe 4.8MB
-
Warcracft III Reforged/W3CDKeyGrabber.zip.zip 15KB
-
W3CDKeyGrabber.exe.exe 64KB
-
icyHell.net.URL49B
-
Warcracft III Reforged/W3Fixer.zip.zip 484KB
-
W3Fixer.exe.exe 490KB
-
icyHell.net.URL49B
-
Warcracft III Reforged/WarCraft 3 Reforged Cheats.txt1KB
-
Warcracft III Reforged/WarCraft3_TFT_Keygen.rar.rar 101KB
-
WarCraft3_TFT_Keygen_by_CRiS.exe.exe 105KB
-
icyHell.net.URL49B
-
Warcracft III Reforged/Warcraft III Reforged™ Setup.exe.exe 10.6MB
-
Warcracft III Reforged/Warcraft III_ Reforged.zip.zip 672KB
-
Warcracft III Reforged/Warcraft III_ Reforged_Activation.txt755B
-
Warcracft III Reforged/wc3_roc_tft_keychanger.zip.zip 719KB
-
FTkey.exe.exe 475KB
-
cdkey.exe.exe 410KB
-
icyHell.net.URL49B
Warcracft III Reforged/-warcraft-tft-keygen-F82Z5I7.zip
- SHA256 51e48d89144500604298df196dc54ef6e615cb06e715a444fa2358ffcb90c981
- MD5 9de3e48d786e6b95069bb63ac24b05a0
- SHA1 b3a9d691b3e9441b2223f279b142090f8d3a620b
- SHA512 00b72497663d9badf40f8034f38b255b3fc609fde7b3cb5be30ca0339e42587045ba7cad384efd30beabd28c6ee949ce99c5ff961cd07e61851c0d96e507c3a0
- SSDEEP 196608:i1zTnpQ2tVEGa4znCnrxIjXDbyTs6WI1nWLnmSZWuEvqkgogqoTtUsltloex9:ilTa4BNznirxIjX6ANI1nWLmSAqeaTFz
- MD5 SHA1 SHA512 SSDEEP
-warcraft-tft-keygen-F82Z5I7.exe
- SHA256 fb3d286faee2cf6345988d4dd8c025688075e425a64c311439bed5d54461b0ab
- MD5 a959e89b1669d9657223e0708e60edca
- SHA1 5e6113b81512f75f7138994a72e7d1152ebbab05
- SHA512 bb183aede190f9886d18ee002ffaae6e66e485a4f8d0123887e37b622c63685f35f7beda400ea4118770491e962a48d401e29e9ed64f584e30b02df367702aba
- SSDEEP 196608:AW6aE7Lojzz2jXtfoZ08YKvF0n3mOr0ikl8UuYOOKDHoazb9keDC:OZ7Lszz2jX6ixKvF0n2Oo8wEDPkf
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
1
Entry point
38540
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
Name
CODE
Size
35KB
Virtual Size
35KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
DATA
Size
1024B
Virtual Size
584B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
BSS
Size
Virtual Size
3KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
Virtual Size
8B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
.............exe
- IMPHASH 86f57e806289961a1f03bcd6ad480f72
- SHA256 bdb03d50cba10bbbaea2409521c515d15f3e674e6ccabbadfec319bdc08cd1ea
- MD5 1c9d03acc5ce4d1565e01418e2892087
- SHA1 345be215d0017d06a3934150105389730038fa69
- SHA512 1442ad0b3af4fddc1c6980426a25f6d2c4b033902b8cc42596ad0077385ca3d56e4fed4517a61fe4d5b5b185b34030196ac9c5dcc61d93fd48292aed2b7998e8
- SSDEEP 49152:gnHn5pXUXb6c9YuoHjAbDiYFpIDckO4iNQxgei6HQR9sXafgkDFMVR9C1UhPJXMS:45pEXOc9AH8FpQrDgeJrBiCV2HXq
- MD5 SHA1 SHA512 SSDEEP
Digest
2a:bf:69:03:59:ac:bf:c2:71:45:2f:1c:b9:78:72:e1:7e:ac:be:4f:05:b9:76:e5:81:68:bb:40:3f:27:42:69
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=91310114MA1GT9FP6N,CN=Shanghai Changzhi Network Technology Co.\, Ltd.,OU=IT,O=Shanghai Changzhi Network Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13074a696164696e67,1.3.6.1.4.1.311.60.2.1.2=#13085368616e67686169,1.3.6.1.4.1.311.60.2.1.3=#1302434e
Chains
Nov 12, 2019
SERIALNUMBER=91310114MA1GT9FP6N,CN=Shanghai Changzhi Network Technology Co.\, Ltd.,OU=IT,O=Shanghai Changzhi Network Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13074a696164696e67,1.3.6.1.4.1.311.60.2.1.2=#13085368616e67686169,1.3.6.1.4.1.311.60.2.1.3=#1302434e
CN=Symantec Class 3 Extended Validation Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Digest
56:5a:b1:32:7e:1d:9e:60:62:af:42:ec:07:77:72:54:3a:14:ba:49
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=91310114MA1GT9FP6N,CN=Shanghai Changzhi Network Technology Co.\, Ltd.,OU=IT,O=Shanghai Changzhi Network Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13074a696164696e67,1.3.6.1.4.1.311.60.2.1.2=#13085368616e67686169,1.3.6.1.4.1.311.60.2.1.3=#1302434e
Chains
Nov 12, 2019
SERIALNUMBER=91310114MA1GT9FP6N,CN=Shanghai Changzhi Network Technology Co.\, Ltd.,OU=IT,O=Shanghai Changzhi Network Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13074a696164696e67,1.3.6.1.4.1.311.60.2.1.2=#13085368616e67686169,1.3.6.1.4.1.311.60.2.1.3=#1302434e
CN=Symantec Class 3 Extended Validation Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Subject
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Serial Number
1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Nov 8, 2006 - Nov 7, 2021
Subject
CN=Symantec Class 3 Extended Validation Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
19:1a:32:cb:75:9c:97:b8:cf:ac:11:8d:d5:12:7f:49
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2014 - Mar 3, 2024
Subject
SERIALNUMBER=91310114MA1GT9FP6N,CN=Shanghai Changzhi Network Technology Co.\, Ltd.,OU=IT,O=Shanghai Changzhi Network Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13074a696164696e67,1.3.6.1.4.1.311.60.2.1.2=#13085368616e67686169,1.3.6.1.4.1.311.60.2.1.3=#1302434e
Serial Number
1f:fe:b5:55:70:f8:da:94:bb:c4:04:3b:09:44:6f:fe
Issuer
CN=Symantec Class 3 Extended Validation Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Nov 29, 2017 - Nov 29, 2019
Subject
CN=DigiCert Timestamp Responder,O=DigiCert,C=US
Serial Number
03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Issuer
CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 22, 2014 - Oct 22, 2024
Subject
CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping
Timespan
Nov 10, 2006 - Nov 10, 2021
Subject
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Serial Number
1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Nov 8, 2006 - Nov 7, 2021
Subject
CN=Symantec Class 3 Extended Validation Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
19:1a:32:cb:75:9c:97:b8:cf:ac:11:8d:d5:12:7f:49
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2014 - Mar 3, 2024
Subject
SERIALNUMBER=91310114MA1GT9FP6N,CN=Shanghai Changzhi Network Technology Co.\, Ltd.,OU=IT,O=Shanghai Changzhi Network Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13074a696164696e67,1.3.6.1.4.1.311.60.2.1.2=#13085368616e67686169,1.3.6.1.4.1.311.60.2.1.3=#1302434e
Serial Number
1f:fe:b5:55:70:f8:da:94:bb:c4:04:3b:09:44:6f:fe
Issuer
CN=Symantec Class 3 Extended Validation Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Nov 29, 2017 - Nov 29, 2019
Subject
CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US
Serial Number
09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 4, 2017 - Jan 18, 2028
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
0
Major OS version
6
Entry point
624199
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
D:\work\trunk\downloader\bin\ldplayerinst.pdb
kernel32
HeapDestroy
HeapReAlloc
HeapSize
SetLastError
GetLogicalDriveStringsW
GetDriveTypeW
DeviceIoControl
GetDiskFreeSpaceExW
GetVolumeInformationW
DuplicateHandle
GetFileAttributesExW
FindFirstFileExW
GetCurrentDirectoryA
WritePrivateProfileStringA
WritePrivateProfileStringW
LockResource
SizeofResource
FreeResource
LoadResource
FindResourceW
GetTickCount
GetCurrentThreadId
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetCurrentProcess
HeapFree
HeapAlloc
GetProcessHeap
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GetLocalTime
CreateMutexW
GetVersionExW
SetEndOfFile
WriteConsoleW
SetStdHandle
LCMapStringW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
FlushFileBuffers
WideCharToMultiByte
MultiByteToWideChar
LoadLibraryW
GetWindowsDirectoryW
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
GetStartupInfoW
Sleep
DecodePointer
GetModuleHandleW
InitializeCriticalSectionAndSpinCount
OpenProcess
CreateProcessW
GetStdHandle
GetExitCodeProcess
SetFilePointer
WriteFile
ReadFile
GetModuleFileNameW
FindClose
DeleteFileW
FindNextFileW
FindFirstFileW
MoveFileExW
GetFileSize
GetFileSizeEx
CreateFileW
SetEvent
CloseHandle
TerminateThread
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetStringTypeW
GetConsoleCP
GetFileType
ReadConsoleW
GetConsoleMode
SetFilePointerEx
UnregisterWaitEx
InitializeSListHead
ReleaseSemaphore
VirtualProtect
VirtualFree
VirtualAlloc
GetModuleHandleA
FreeLibraryAndExitThread
GetThreadTimes
OutputDebugStringW
GetOEMCP
IsValidCodePage
GetModuleHandleExW
GetCPInfo
CreateSemaphoreW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCommandLineW
IsDebuggerPresent
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetThreadPriority
SetThreadPriority
SwitchToThread
SignalObjectAndWait
GetProcAddress
FindResourceExW
GetLastError
WaitForSingleObject
CreateEventW
RaiseException
CreateDirectoryW
FreeLibrary
TerminateProcess
GetCurrentDirectoryW
GetSystemTimeAsFileTime
GetCurrentThread
GetACP
ExitProcess
MulDiv
GetCurrentProcessId
EncodePointer
CreateThread
ExitThread
LoadLibraryExW
RtlUnwind
CreateTimerQueue
IsProcessorFeaturePresent
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
WaitForSingleObjectEx
user32
SetWindowPos
SendMessageW
BringWindowToTop
SetForegroundWindow
ShowWindow
GetWindowLongW
GetDC
ReleaseDC
IsIconic
GetSystemMetrics
KillTimer
SetTimer
GetWindowRect
MoveWindow
MonitorFromWindow
GetMonitorInfoW
EnableWindow
ClientToScreen
GetPropW
SetPropW
FindWindowExW
wsprintfW
LoadBitmapW
RegisterClassW
LoadCursorW
EndPaint
BeginPaint
wvsprintfW
SetCursor
UnionRect
OffsetRect
GetMessageW
TranslateMessage
DispatchMessageW
CallWindowProcW
RegisterClassExW
GetClassInfoExW
IsWindow
SetFocus
GetWindow
LoadImageW
IsWindowVisible
CharNextW
GetActiveWindow
GetFocus
GetKeyState
SetCapture
ReleaseCapture
GetUpdateRect
InvalidateRect
GetCursorPos
ScreenToClient
MapWindowPoints
IntersectRect
IsRectEmpty
PtInRect
IsZoomed
SetWindowRgn
GetWindowTextW
GetWindowTextLengthW
GetCaretBlinkTime
GetCaretPos
CharPrevW
FillRect
CreateCaret
HideCaret
ShowCaret
SetCaretPos
SetRect
GetSysColor
CreateAcceleratorTableW
InvalidateRgn
GetGUIThreadInfo
GetParent
DrawTextW
GetClientRect
SetWindowTextW
PostQuitMessage
MessageBoxW
DestroyWindow
SetWindowLongW
CreateWindowExW
PostMessageW
DefWindowProcW
gdi32
CreateSolidBrush
SetBkMode
SetTextColor
CreateFontW
BitBlt
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
DeleteObject
GetStockObject
GetObjectW
DeleteDC
GetDeviceCaps
CreateFontIndirectW
CreatePen
Rectangle
RestoreDC
SaveDC
GetTextMetricsW
SetWindowOrgEx
CreateRoundRectRgn
GetObjectA
CreatePatternBrush
CombineRgn
CreatePenIndirect
CreateRectRgnIndirect
GetCharABCWidthsW
GetClipBox
GetTextExtentPoint32W
LineTo
RoundRect
SelectClipRgn
ExtSelectClipRgn
SetBkColor
StretchBlt
SetStretchBltMode
CreateDIBSection
MoveToEx
TextOutW
ExtTextOutW
GdiFlush
advapi32
RegCloseKey
RegQueryValueExW
RegCreateKeyW
DuplicateTokenEx
OpenProcessToken
shell32
ord165
ShellExecuteW
ShellExecuteExW
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetMalloc
SHGetFolderPathW
ole32
CreateStreamOnHGlobal
OleLockRunning
CLSIDFromProgID
CLSIDFromString
CoCreateInstance
CoUninitialize
CoInitialize
shlwapi
PathFileExistsW
PathIsRootW
StrStrIW
StrStrIA
ws2_32
socket
setsockopt
connect
send
closesocket
shutdown
recv
gethostbyname
inet_addr
ntohs
WSAStartup
wininet
HttpSendRequestExW
InternetConnectW
InternetOpenW
InternetCloseHandle
HttpOpenRequestW
HttpSendRequestW
InternetReadFile
HttpQueryInfoW
HttpEndRequestW
psapi
EnumProcessModules
GetModuleFileNameExW
iphlpapi
GetAdaptersInfo
comctl32
_TrackMouseEvent
ord17
imm32
ImmSetCompositionFontW
ImmReleaseContext
ImmGetContext
ImmGetVirtualKey
ImmSetCompositionWindow
oleaut32
SysFreeString
VariantClear
VariantInit
SysAllocString
gdiplus
GdipAlloc
GdipFree
GdiplusStartup
GdiplusShutdown
GdipCloneBrush
GdipDeleteBrush
GdipCreateLineBrushI
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipCreateBitmapFromScan0
GdipCreateFromHDC
GdipSetCompositingQuality
GdipSetSmoothingMode
GdipSetPixelOffsetMode
GdipSetTextRenderingHint
GdipSetInterpolationMode
GdipGraphicsClear
GdipDrawImage
GdipDrawImageRectI
GdipDeleteFontFamily
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipDeleteFont
GdipGetFamily
GdipDrawString
GdipCreateStringFormat
GdipDeleteStringFormat
GdipSetStringFormatAlign
GdipSetStringFormatLineAlign
GdipLoadImageFromStream
GdipGetImageWidth
GdipGetImageHeight
GdipImageGetFrameDimensionsCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameCount
GdipImageSelectActiveFrame
GdipGetPropertyItemSize
GdipGetPropertyItem
GdipDeleteGraphics
Name
.text
Size
823KB
Virtual Size
822KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
213KB
Virtual Size
212KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
21KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2.8MB
Virtual Size
2.8MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
48KB
Virtual Size
47KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=225, version=20806,
count=1, id=199, version=41118,
count=42, id=223, productName=VS2013 build 21005, version=21005,
count=1, id=224, productName=VS2013 UPD5 build 40629, version=40629,
count=34, id=225, productName=VS2013 UPD5 build 40629, version=40629,
count=1, id=209, version=65501,
count=142, id=225, productName=VS2013 build 21005, version=21005,
count=253, id=224, productName=VS2013 build 21005, version=21005,
count=14, id=206, version=65501,
count=1, id=208, version=65501,
count=33, id=203, version=65501,
count=461, id=1, productName=Unmarked objects,
count=59, id=229, version=40629,
count=1, id=219, productName=VS2013 build 21005, version=21005,
count=1, id=151,
count=1, id=222, productName=VS2013 UPD5 build 40629, version=40629,
Warcracft III Reforged/BNGatewayEditor.zip
- SHA256 aa8eebbe6a4e6227d8c8b8f7f07c8b73506ff4aa6440f261594f2ac00cdad883
- MD5 bcf4d156bf8fd5ce19a26ac68040d8ee
- SHA1 6c3cff46f9f5a11784ec3e200e23a9fe079d4917
- SHA512 1b45eb13151a52aa5497322ce9da2894303658e197c28d320de15f368c43c2539073c52b77f31971c40f8b431b2fdf68fd2139de0d7e5362e4da6b7e9ea4963c
- SSDEEP 3072:w+OSMH4kK5k4IfnCo3KB6Fvwc476vhzZU0k1IlJIn0dWABzxLc+GER1gs4P+/ogT:P5re/Co3f6cW6vM0kSlmnwkMi1IbWXC
- MD5 SHA1 SHA512 SSDEEP
BNGatewayEditor.exe
- SHA256 3d08d4e044382696df6009772975c7c6c48402e7d08e8adaba48f1681d5a5a57
- MD5 40adea5692f30fbb2631ecfd9c941080
- SHA1 d185b4ab686ed828ae8eff170cc7752b89b8164f
- SHA512 dcb6a47b044e7534f4953bc5ba4de853be48ed37328151c6ce2b3882fb402b9559df55b4ff4d17ac7b3f435e114cf93b48f31eb7cdd1335acf92917a84238a3d
- SSDEEP 6144:dNsTt9Xb+bsPfpsA+XkVIQAGfwdvkAmaYRiyM3r:XU9rcQBsABqQAGYUDRVM3r
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
4e:60:5a:68:fa:57:b0:76:31:1f:3c:13:b9:bb:bc:b5:8f:4e:68:e9
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Soar Chin,OU=Quixotic Yawl Studio,O=Quixotic Yawl Studio,L=上海,ST=上海市,C=CN
Chains
Nov 5, 2024
Subject
OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network
Serial Number
4a:19:d2:38:8c:82:59:1c:a5:5d:73:5f:15:5d:dc:a3
Issuer
OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network
Timespan
May 12, 1997 - Jan 7, 2004
Subject
CN=CA365 Free Root Certificate,O=CA365,L=Beijing,ST=Beijing,C=CN
Serial Number
24:e1:bd:38:4a:95:29:f8
Issuer
CN=CA365 Free Root Certificate,O=CA365,L=Beijing,ST=Beijing,C=CN
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
May 12, 2001 - May 5, 2031
Subject
CN=Soar Chin,OU=Quixotic Yawl Studio,O=Quixotic Yawl Studio,L=上海,ST=上海市,C=CN
Serial Number
11:35:d7:89:76:9c:3c:c8
Issuer
CN=CA365 Free Root Certificate,O=CA365,L=Beijing,ST=Beijing,C=CN
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageKeyEncipherment, KeyUsageDataEncipherment
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jun 21, 2002 - Jun 21, 2003
Subject
CN=VeriSign Time Stamping Service,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)01,O=VeriSign\, Inc.
Serial Number
08:7a:6d:5c:6f:62:93:4f:ba:c4:fd:43:e1:14:18:9d
Issuer
OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Feb 28, 2001 - Jan 6, 2004
Minor OS version
0
Major OS version
4
Entry point
593248
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
Name
UPX0
Size
Virtual Size
368KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
208KB
Virtual Size
208KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
8KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
icyHell.net.URL
- SHA256 e105e65a7ab24c0bd44d0150518e82ebea690c5dc1e8df5a5571ec93f7d257ca
- MD5 511c6acc2e680e74ce2ca281ee3b8d3a
- SHA1 9e000557a6207f54be35e4f9a3be8016b9e2cb55
- SHA512 f15fafc3dd4eb2ae9864a98ab3c6e59348e3dbc28162940d1bf94207cf1fef337323da01c94508decebe13c726c0969526c8fec084d0f63b9cb78c079f679424
- MD5 SHA1 SHA512
Warcracft III Reforged/CD Key.txt
- SHA256 767062ebcc7509e86ef236cc01fb227da633833e36f6f4878c1e00ba3a72b8e9
- MD5 c8da2f4fe10b73245ae69152d062d1e7
- SHA1 facfe2da6fc3b8b3f74fefd6f535cca74e8d0879
- SHA512 29a8e3d07ff875452bd3eb809d3ffaf5f2779da4ade7913a82e3386fd7dc8024696c6bf83aa36096e8f1e6bbba0ee706bd030715aa709c0ad92d4cc51ccb0122
- MD5 SHA1 SHA512
Warcracft III Reforged/StarCraft-Setup-Mac.zip
- SHA256 124a392d7a6e26ea26c86bce5e5b4b8d96cbb1f7cad0f32c9cf296c6b49c53e7
- MD5 f5c292039b8cccd136b357f0a374f584
- SHA1 8629866741b44ccd4755085e85cf3349df0ebcb4
- SHA512 21410863bc53054833aa3df156341a244bc5db2470246050b4c8ca8fe820281fc71d3deb564df93eb715a891f2648fa0fbab7784c368d789b0e7c37707afe6a6
- SSDEEP 98304:RXh1dNFTXMAQaixWrGUXlFeGUpUfHP20oJ/fGVaVLa1yS1w0N:RfxXCnxWrbdm6+5nV41d
- MD5 SHA1 SHA512 SSDEEP
Warcracft III Reforged/StarCraft-Setup.exe
- IMPHASH 875580bdbb33eec424e10d3c2457293c
- SHA256 527111caf8051bff0e019113faf2258b2fe5b8b7dae0e93b68d20d04ed19995a
- MD5 0f66a5bbb9a1e750d98c9529d0a5f7d4
- SHA1 6d6ae5c4096c03a83e97f290ec5bbc55753b9ba7
- SHA512 331ea370cddeb2942ab3756338c74ad3ea988c5d1df840fa0e5ad94a08066a5d2c28a98ab0a1a7841f00850eacddce31e4f7871e96002f69d080e0c4668746b7
- SSDEEP 98304:djp5CzCWby2H8sh8nIKWc9fDmuqMR1GNe/GXh:r52r0fSuqHX
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
1304985
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
D:\BuildServer\bna-2\work-git\bootstrapper-repository\src\Release\Bootstrapper.pdb
uiautomationcore
UiaHostProviderFromHwnd
UiaReturnRawElementProvider
UiaRaiseAutomationPropertyChangedEvent
UiaRaiseAutomationEvent
UiaClientsAreListening
msimg32
AlphaBlend
rpcrt4
RpcStringFreeA
UuidToStringA
UuidCreate
ws2_32
bind
socket
freeaddrinfo
getaddrinfo
WSASetLastError
htons
WSACleanup
WSAStartup
connect
htonl
WSAGetLastError
gethostname
closesocket
shutdown
ntohl
getpeername
getsockname
getsockopt
ntohs
setsockopt
WSAIoctl
recvfrom
sendto
accept
listen
__WSAFDIsSet
select
ioctlsocket
send
recv
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
kernel32
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
GetThreadTimes
FreeLibraryAndExitThread
GetModuleFileNameW
GetModuleHandleA
LoadLibraryExW
VirtualAlloc
VirtualProtect
VirtualFree
ReleaseSemaphore
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
WaitForSingleObject
RtlUnwind
ExitProcess
GetModuleHandleExW
GetStdHandle
GetFileType
GetModuleFileNameA
WriteConsoleW
ExitThread
ResumeThread
WriteFile
GetACP
SetConsoleCtrlHandler
HeapReAlloc
FlushFileBuffers
GetConsoleCP
GetConsoleMode
OutputDebugStringA
GetDateFormatW
GetTimeFormatW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
ReadFile
ReadConsoleW
SetFilePointerEx
GetTimeZoneInformation
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
CreateThread
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetStdHandle
HeapSize
CreateFileW
SetEndOfFile
GetTickCount64
SleepEx
PeekNamedPipe
WaitForMultipleObjects
ExpandEnvironmentStringsA
FormatMessageA
VerSetConditionMask
GetSystemDirectoryA
LoadLibraryA
VerifyVersionInfoA
CreateFileA
GetFileSizeEx
InitializeCriticalSection
GetEnvironmentVariableW
SetCurrentDirectoryW
GetCurrentDirectoryW
CreateDirectoryW
DeleteFileW
FindFirstFileW
GetDiskFreeSpaceExW
GetFileAttributesW
GetFileAttributesExW
GetFileInformationByHandle
GetFileTime
GetFullPathNameW
RemoveDirectoryW
SetFileAttributesW
SetFileTime
DeviceIoControl
MoveFileExW
AreFileApisANSI
OpenEventA
SetWaitableTimer
GetSystemInfo
CreateWaitableTimerA
DeactivateActCtx
ActivateActCtx
CreateActCtxW
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
SystemTimeToTzSpecificLocalTime
GetDriveTypeW
lstrlenW
VirtualUnlock
ReleaseMutex
CreateMutexA
GlobalFree
GetExitCodeProcess
OpenThread
CreateFiber
VirtualQuery
MoveFileW
ConvertThreadToFiber
CreateFiberEx
WaitNamedPipeW
SetFileValidData
IsBadReadPtr
GlobalMemoryStatus
Module32NextW
VerifyVersionInfoW
SignalObjectAndWait
CreateTimerQueue
OutputDebugStringW
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
GetCurrentProcessId
ResetEvent
GetStringTypeW
GetLocaleInfoW
LCMapStringW
CompareStringW
GetCPInfo
SetThreadPriority
MultiByteToWideChar
GetSystemTimeAsFileTime
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
CreateEventW
InitializeCriticalSectionAndSpinCount
SetLastError
EncodePointer
GetExitCodeThread
SwitchToThread
Sleep
WaitForSingleObjectEx
DuplicateHandle
GetCurrentThreadId
TryEnterCriticalSection
LeaveCriticalSection
EnterCriticalSection
QueryPerformanceFrequency
QueryPerformanceCounter
WideCharToMultiByte
FindResourceW
LoadResource
LockResource
SizeofResource
CreateEventA
GetProcessHeap
HeapAlloc
SetEvent
HeapFree
GetCurrentThread
GetCurrentProcess
GetUserDefaultLangID
CloseHandle
OpenProcess
LocalFree
SystemTimeToFileTime
GetComputerNameW
lstrcpynA
GetFileSize
GetThreadContext
GetLocalTime
LocalAlloc
GetVersionExW
GetTickCount
FreeLibrary
GetModuleHandleW
DeleteCriticalSection
GetProcAddress
DecodePointer
LoadLibraryW
RaiseException
GetLastError
InitializeCriticalSectionEx
ConvertFiberToThread
ReadConsoleA
SetConsoleMode
GetOEMCP
Module32FirstW
Process32Next
DeleteFileA
FileTimeToSystemTime
GetTempPathA
CreateToolhelp32Snapshot
SwitchToFiber
SuspendThread
IsBadStringPtrA
Thread32First
GetCompressedFileSizeW
SetFilePointer
Thread32Next
GetProcessId
DeleteFiber
GetVolumeInformationW
SetNamedPipeHandleState
Process32First
IsBadWritePtr
RtlCaptureContext
GetShortPathNameW
GetDiskFreeSpaceW
user32
AllowSetForegroundWindow
GetDesktopWindow
MessageBoxA
GetDC
DrawTextW
GetWindowLongW
DefWindowProcW
AdjustWindowRectEx
GetWindowRect
DestroyWindow
SetWindowPos
MessageBoxW
CreateWindowExW
SendMessageW
GetSystemMetrics
SetWindowTextW
RegisterClassExW
ShowWindow
DispatchMessageW
SetTimer
PeekMessageW
TrackMouseEvent
TranslateMessage
LoadIconW
LoadCursorW
SetCapture
GetWindowDC
SetWindowLongW
UpdateLayeredWindow
PostQuitMessage
ReleaseCapture
InvalidateRect
IsIconic
ReleaseDC
GetCursorPos
BeginPaint
EndPaint
GetKeyState
GetUserObjectInformationW
ClientToScreen
PostMessageW
GetForegroundWindow
GetActiveWindow
GetShellWindow
GetWindowThreadProcessId
CharLowerA
SetFocus
MoveWindow
ScreenToClient
GetProcessWindowStation
gdi32
CreateDIBSection
GetObjectW
DeleteObject
AddFontMemResourceEx
EnumFontFamiliesExW
CreateFontW
GetStockObject
SetBkColor
RoundRect
SelectObject
GetLayout
SetLayout
DeleteDC
SetTextColor
SetBkMode
SetMapMode
SetTextAlign
CreateCompatibleDC
advapi32
OpenSCManagerW
OpenServiceW
QueryServiceConfigW
CloseServiceHandle
RegQueryValueExA
RegCloseKey
RegDeleteValueA
CryptEnumProvidersA
CryptSignHashA
CryptDecrypt
CryptExportKey
CryptGetUserKey
CryptGetProvParam
CryptSetHashParam
CryptAcquireContextW
ReportEventA
RegisterEventSourceA
DeregisterEventSource
RegGetValueW
SetEntriesInAclW
ConvertSecurityDescriptorToStringSecurityDescriptorW
SetNamedSecurityInfoW
GetNamedSecurityInfoW
GetFileSecurityW
MapGenericMask
BuildTrusteeWithSidW
RegSetValueExW
RegQueryValueExW
LookupPrivilegeValueW
AdjustTokenPrivileges
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetUserNameW
DuplicateTokenEx
OpenProcessToken
GetTokenInformation
ConvertSidToStringSidA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
OpenThreadToken
DuplicateToken
CryptEncrypt
CryptImportKey
CryptDestroyKey
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGenRandom
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextA
AccessCheck
AllocateAndInitializeSid
shell32
SHGetFolderPathW
ShellExecuteExA
SHGetMalloc
SHGetPathFromIDListW
SHBrowseForFolderW
ShellExecuteExW
CommandLineToArgvW
FindExecutableA
ole32
CoTaskMemFree
CoCreateInstance
wintrust
WinVerifyTrust
crypt32
CertOpenStore
CertCloseStore
CertFindCertificateInStore
CertFreeCertificateContext
CryptStringToBinaryA
CertAddCertificateContextToStore
CertGetNameStringA
CryptQueryObject
CertCreateCertificateChainEngine
CertGetCertificateChain
CertFreeCertificateChain
CryptMsgClose
CryptMsgGetParam
CertGetNameStringW
CertEnumCertificatesInStore
CertDuplicateCertificateContext
CertGetCertificateContextProperty
CertFreeCertificateChainEngine
wininet
HttpSendRequestA
InternetCloseHandle
InternetSetStatusCallbackA
InternetOpenA
InternetReadFileExA
InternetSetCookieW
InternetSetOptionA
InternetCrackUrlA
HttpOpenRequestA
HttpQueryInfoA
InternetConnectA
winhttp
WinHttpCloseHandle
WinHttpGetIEProxyConfigForCurrentUser
WinHttpGetProxyForUrl
WinHttpOpen
oleaut32
VariantClear
SysAllocString
SafeArrayCreateVector
SafeArrayPutElement
Name
.text
Size
2.8MB
Virtual Size
2.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
106KB
Virtual Size
477KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
583KB
Virtual Size
583KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
158KB
Virtual Size
157KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=22, id=259, version=25203,
count=204, id=261, version=25203,
count=27, id=260, version=25203,
count=7, id=199, version=41118,
count=32, id=259, version=26706,
count=133, id=261, version=26706,
count=43, id=260, version=26706,
count=2, id=262, version=25203,
count=35, id=257, version=25203,
count=515, id=1, productName=Unmarked objects,
count=554, id=260, productName=VS2017 v15.8.9? build 26730, version=26730,
count=42, id=261, productName=VS2017 v15.8.9? build 26730, version=26730,
count=391, id=265, version=26732,
count=1, id=255, productName=VS2017 v15.8.5 build 26732, version=26732,
count=1, id=258, productName=VS2017 v15.8.5 build 26732, version=26732,
Warcracft III Reforged/W3CDKeyGrabber.zip
- SHA256 4a46bf5643e87e9be2c5a728aa605cb28509ad618189031116f36537e44dcb02
- MD5 8d6bee64deaa8a7879001ddd6467fdf8
- SHA1 a6d8dc6879692459ec67645cc2267ad7ea6dbbef
- SHA512 39dda8621b2edba9d3e79bc85d6fbf9a1e25e19a898e52ba88a9615c95d2cd2591a867abfc856c434aae30554456dd9228ce17c0c5a8192f197e065a2d8655f0
- SSDEEP 384:V6L3M7U1sY4KS9viyk4f37mvzjDfDFamzd8Nn68pU0SxmTcH:V8c7UT/k5k4qvjfhr8N6pxmTS
- MD5 SHA1 SHA512 SSDEEP
W3CDKeyGrabber.exe
- IMPHASH be6bad09e3ac2b22673be8ec4722aad8
- SHA256 4d38069e48c93a588d022822f3788d72884aca66958572e417d0d1561b889054
- MD5 532e8469a56ca603d38a1212cd92b439
- SHA1 f4107211421b81e82d462b49000533029ccd501f
- SHA512 048aaa9db67dfaaa9f8f0623334cc853f1078e3b20b05367842e03a52246cb93101db419608ca5d3422c8312d2821616553a22fed016b3881733b85834d3cc92
- SSDEEP 1536:Iu8WSYXkWFFCx6qF5g7EPxMIlKBkvDWueo:dSYXkWFFCjcub
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4904
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
msvbvm60
_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaStrVarMove
__vbaFreeVarList
_adj_fdiv_m64
_adj_fprem1
__vbaRecAnsiToUni
__vbaStrCat
__vbaLsetFixstr
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaObjSet
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
ord598
_CIsin
ord632
__vbaChkstk
EVENT_SINK_AddRef
__vbaGenerateBoundsError
__vbaStrCmp
DllFunctionCall
_adj_fpatan
__vbaLateIdCallLd
__vbaRecUniToAnsi
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
ord608
__vbaFPException
__vbaStrVarVal
__vbaVarCat
_CIlog
__vbaErrorOverflow
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaI4Var
__vbaVarAdd
__vbaStrToAnsi
__vbaFpI4
_CIatan
__vbaStrMove
_allmul
_CItan
_CIexp
__vbaFreeStr
__vbaFreeObj
Name
.text
Size
52KB
Virtual Size
51KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=14, version=7299,
count=2, id=9, version=8041,
count=1, id=13, version=8169,
icyHell.net.URL
- SHA256 e105e65a7ab24c0bd44d0150518e82ebea690c5dc1e8df5a5571ec93f7d257ca
- MD5 511c6acc2e680e74ce2ca281ee3b8d3a
- SHA1 9e000557a6207f54be35e4f9a3be8016b9e2cb55
- SHA512 f15fafc3dd4eb2ae9864a98ab3c6e59348e3dbc28162940d1bf94207cf1fef337323da01c94508decebe13c726c0969526c8fec084d0f63b9cb78c079f679424
- MD5 SHA1 SHA512
Warcracft III Reforged/W3Fixer.zip
- SHA256 fc12aa9c8a3bd093a90dc44d4764676e457416930cf32dd2abd5d699001e8bd0
- MD5 5aaf33094cce07aef8faa48f5c2aedeb
- SHA1 75b866ecf7d76e7f0dc78cecda0cbefa4d953ef2
- SHA512 514453abccb70dd1fb273b0f1a8f1ddb4980a8c9eaa87f86a7200f4187e74f28749749325fe4a4f720e686ebeb92f59b022b55c532b0c4dd7227f1c221c9bdb5
- SSDEEP 6144:+g3sWVw8bN3Edi7uUFWkDAptCTostgOKd/N5xROzZIO7UBipCT70FzQ8nw81q9+:+us8w8bSubGUTeOu/gbHC8FzQuwAqs
- MD5 SHA1 SHA512 SSDEEP
W3Fixer.exe
- SHA256 63c2d15c7ad1cb951cefbbfd6fab56303d20d69a44f56fd5e897281a5d2a202d
- MD5 b9edcc7484ae0dc329e1946a56e1e49d
- SHA1 7866ee04717183fab357f29cbc1f5764db946182
- SHA512 987b7110b420da01b7c798423be10991b78d18b203664660a13083841f41372a2f8331a0a67cf1f9a0a7c2cd9b2d6cb603997b1b13ab2640782927ba3f45485f
- SSDEEP 6144:op9HOFKNhVw8bNdEdi7uYN2GhA66lpaxtyToctgOKd/N7xlOzZIOPUBiHCTl0Fzy:ovTw8bwWhGpGgTwOuVsbNCmFzCwwAq9
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
17227777
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
.text
Size
115KB
Virtual Size
240KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
7KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
7KB
Virtual Size
16.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
7KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.aspack
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.adata
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=9, id=11, version=8797,
count=33, id=14, version=7299,
count=130, id=10, version=8797,
count=16, id=19, version=9049,
count=4, productName=Unmarked objects (old),
count=258, id=1, productName=Unmarked objects,
count=26, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=3, id=19, version=8034,
count=55, id=11, version=8799,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
icyHell.net.URL
- SHA256 e105e65a7ab24c0bd44d0150518e82ebea690c5dc1e8df5a5571ec93f7d257ca
- MD5 511c6acc2e680e74ce2ca281ee3b8d3a
- SHA1 9e000557a6207f54be35e4f9a3be8016b9e2cb55
- SHA512 f15fafc3dd4eb2ae9864a98ab3c6e59348e3dbc28162940d1bf94207cf1fef337323da01c94508decebe13c726c0969526c8fec084d0f63b9cb78c079f679424
- MD5 SHA1 SHA512
Warcracft III Reforged/WarCraft 3 Reforged Cheats.txt
- SHA256 ec6db5fc33f017a182e9b4a00c20bb7d1e86fa49ca3c24263ff2cb3d2ea4402e
- MD5 cd5bf37b0f846c0b43351d2cf54b8936
- SHA1 43de5e3f0db0d95ea825cab505504104769c2eb4
- SHA512 f06a612fcf95accc27888c4d76ab8aa988e01c940e5e385bedad11a73cb85b6762ab2da5d1970633c07e620b8fc2e49ff1ff7671a2b2d8a7d41eb995683a103b
- MD5 SHA1 SHA512
Warcracft III Reforged/WarCraft3_TFT_Keygen.rar
- SHA256 39b16ece5bb0e784068c0ed6ba97a3d5d9d9d774930066dfc9f46f6a63aa844a
- MD5 6fab86031d5e446bf68f8b063ffe822f
- SHA1 51bfcc533ab890ffa7b160de08fa21a08b095383
- SHA512 92e1582007f9c762c307b928ed975a77ed842cc2a4da46bcc60759f1500813739190203ea9cb07e78582c47f156ea3cbb5c5b5afdcd07aae17c43a4d151d4bb5
- SSDEEP 3072:b5H5cWN5dTR69Hr+4ZFvJH2hYr9PAkf2vkSrwavwDoD0:zcWN5F6L9ZFvZQYZPUvkSk7g0
- MD5 SHA1 SHA512 SSDEEP
WarCraft3_TFT_Keygen_by_CRiS.exe
- SHA256 cc93b45e0835b94330151656afb59788a5f748479a5a6d75988b0ef1f1d81573
- MD5 2a25957404d3379f8a470b06932d5ecf
- SHA1 8ecae9e50a2afb9312b0de790d446856719e8055
- SHA512 e6daed850220ed529e395369f2b04cc4202f2f826a04e95422e6e4f51204122f8dc9022af227629618b1043189ec5696529808b391807b32636dc9a96e006512
- SSDEEP 3072:I5QVMnbLzdVR8CifXXXyWsSta8GoasuP:kQVGbndVCftt1Fb
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
175104
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
��0
Size
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
���1
Size
99KB
Virtual Size
100KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=1, id=13, version=8169,
icyHell.net.URL
- SHA256 e105e65a7ab24c0bd44d0150518e82ebea690c5dc1e8df5a5571ec93f7d257ca
- MD5 511c6acc2e680e74ce2ca281ee3b8d3a
- SHA1 9e000557a6207f54be35e4f9a3be8016b9e2cb55
- SHA512 f15fafc3dd4eb2ae9864a98ab3c6e59348e3dbc28162940d1bf94207cf1fef337323da01c94508decebe13c726c0969526c8fec084d0f63b9cb78c079f679424
- MD5 SHA1 SHA512
Warcracft III Reforged/Warcraft III Reforged™ Setup.exe
- IMPHASH d221b1dc8c3a08622f6512e7876527c8
- SHA256 fcd4dd0cd7f49f879cb94cdb263af2ab149e1b817ce59b10a13db9f338f47cfa
- MD5 69ed233958e8c23382060102217b22d4
- SHA1 5084e3104dd3da0b3614aba1e2d7c1357a9dcc14
- SHA512 5e157735442f1ed596a7faeea66ee5e5cd2f1546a036962f7d349e71196810fa07ff3201113a9f90db8878272099ab05d5e2be88efa0470e982c238bf382c272
- SSDEEP 196608:wuDdEGOylRlbMN34CJAk6t5/ooYzxVAruqZY/5slZSFOW6sqgCkujAnZZ:wqdxOqJQ4Xk6tivzzYNq5slcOBsbyjAf
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
7456
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
CloseHandle
WriteFile
CreateDirectoryA
lstrcpyA
CreateFileA
GetFileAttributesA
lstrlenA
GetTempPathA
lstrcmpA
lstrcatA
ExitProcess
DeleteFileA
FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetFileSize
GetLastError
CreateMutexA
GetModuleFileNameA
VirtualAlloc
VirtualFree
GetStartupInfoA
user32
MessageBoxA
wsprintfA
msvcrt
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.gentee
Size
92KB
Virtual Size
89KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4.9MB
Virtual Size
4.9MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=14, version=7299,
count=2, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,
count=5, id=19, version=8034,
count=40, id=1, productName=Unmarked objects,
count=17, id=10, productName=VS98 (6.0) build 8168, version=8168,
Warcracft III Reforged/Warcraft III_ Reforged.zip
- SHA256 20b4a3e5035935456a04bc7b4439e8a17b3f5838534eaf10d9b41ff3c78164aa
- MD5 601c6e207b277f88d6c34990eb6777e5
- SHA1 3d361980b4176037caf91674287d3038ed9ef117
- SHA512 6d71ed8cd8fb8a458efe6b3c4b98b68f8099515f4a7fa51759c682a348aa919d9d0ca49d77a50304756ff4a8e419e6c6297f2c256e4a8335f7f96fe46a3ec75e
- SSDEEP 12288:B+vg+f7wSf4C4B1Fd6EUlaR28mNAR7Nf+XnDe953HR9YIfIFpOkwoMbaHpo3CE6G:coSf4C4lalaIltXDePXR9YIWkLlGHENj
- MD5 SHA1 SHA512 SSDEEP
Warcracft III Reforged/Warcraft III_ Reforged_Activation.txt
- SHA256 1c9448d465a403bcbca9312367024ee2c6e33142c7600b8072fe2a0829aa9436
- MD5 c80c5651e8422f8c0be55317b18a1973
- SHA1 4716ffe7cbec01f8c85b249358f9f7ca5737377b
- SHA512 aca9be59117750e59e62ba0e70a284dce6901cc10ff0298e9584f3735c1cfb63c6f7bb86b63317045d8d3187b545dffaef42ba282b68d5250703b99de57e45dd
- MD5 SHA1 SHA512
Warcracft III Reforged/wc3_roc_tft_keychanger.zip
- SHA256 7d74ad93f9dccb255649fd7334ca81eac56b769ee70ae691623474d260e31a55
- MD5 73b29269a322c0fac397d4fee71950b8
- SHA1 1bb36fd4cad2eb1cb6978e20441fe0ed70f8c1be
- SHA512 972b0906ab98c195df49bb61aa8d5d5d48cb2587e744c63c3fdd8a246c3f9f2ff9bcb128cf1d15897991fae823f3353e7d29fc28f403a20500424561c05fabed
- SSDEEP 12288:lbKQs3PRwoQzHJhk5wqCasRr3cO1YsGfkL+pSibh5zuJTuO41O:lG3Ak5DCVGIyhFuTT41O
- MD5 SHA1 SHA512 SSDEEP
FTkey.exe
- IMPHASH dd5a011bcc2b7c0ab5f374f4d4b04f14
- SHA256 e0424b1bf56de09f3def9402775d078486d557df699a0189f1e727de13f488bf
- MD5 2c5fb7fba2e1261ab2b334e3aa71401c
- SHA1 36b38e02eaac12e68b9910fadba22fe5e1b0218e
- SHA512 1b009d2b3143039090723be052eb36662fc310220cbb995b9f17679c8380c2bba0063e33a6293f27dbae2045af6eee0c842657f8aa0afcbec1c53e7cb005c510
- SSDEEP 6144:pQyxZd3/xW8xEzU9iNJlv1AAMHsv9fCDl4iWYgIUrBxUHuEToctgOKd/N7xl8Yn:/d3s2ErNJ5eAMO9KRJXgRrzOJTwOuVj
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
120719
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
ole32
CoUninitialize
CoInitialize
CoCreateInstance
msvcrt
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_XcptFilter
sscanf
strncat
exit
_acmdln
_ftol
memmove
free
calloc
strtoul
isprint
qsort
_fullpath
_strnicmp
strncmp
strpbrk
_exit
strrchr
fclose
fopen
strstr
?raw_name@type_info@@QBEPBDXZ
__CxxFrameHandler
strchr
_beginthread
tolower
sprintf
_strlwr
strncpy
_purecall
isspace
isalnum
vsprintf
atof
?terminate@@YAXXZ
_onexit
__dllonexit
??1type_info@@UAE@XZ
_except_handler3
_stricmp
strcspn
strspn
_vsnprintf
wcslen
srand
rand
toupper
mbstowcs
winmm
PlaySoundA
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
kernel32
VirtualQuery
IsBadWritePtr
FreeLibrary
GetProcAddress
DeleteCriticalSection
GetProcessHeap
HeapFree
GetCurrentThreadId
InterlockedDecrement
EnterCriticalSection
InitializeCriticalSection
InterlockedIncrement
FormatMessageA
GetLastError
ExitProcess
lstrcatA
lstrcpyA
lstrlenA
SetLastError
GetEnvironmentVariableA
DeleteFileA
GetTempPathA
lstrcmpA
SetCurrentDirectoryA
GetCurrentDirectoryA
CreateDirectoryA
RemoveDirectoryA
FindClose
FindNextFileA
FindFirstFileA
lstrcmpiA
CloseHandle
CreateFileA
GetFileAttributesA
SetFileAttributesA
FlushFileBuffers
WriteFile
GetDriveTypeA
GetLogicalDrives
ReadFile
GetFileSize
SetVolumeLabelA
CreateProcessA
WaitForSingleObject
GetModuleHandleA
MultiByteToWideChar
GetLocalTime
GetVersionExA
GetCurrentProcess
GetModuleFileNameA
GetWindowsDirectoryA
GetSystemDirectoryA
GetTempFileNameA
GetUserDefaultLCID
Sleep
VirtualUnlock
LoadLibraryA
GetACP
MoveFileA
SetFilePointer
GetSystemDefaultLangID
GetSystemInfo
lstrcpynA
GetTickCount
QueryPerformanceCounter
SetThreadPriority
GetThreadPriority
GetCurrentThread
QueryPerformanceFrequency
WritePrivateProfileStringA
GetShortPathNameA
MoveFileExA
GetDiskFreeSpaceA
WideCharToMultiByte
GetCommandLineA
CreateEventA
SetErrorMode
SetEndOfFile
VirtualFree
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
VirtualLock
VirtualAlloc
GetStartupInfoA
IsBadReadPtr
GetComputerNameA
GetVolumeInformationA
SetEvent
CreateThread
HeapAlloc
OutputDebugStringA
GetVersion
GetExitCodeProcess
TerminateProcess
LeaveCriticalSection
user32
FindWindowA
GetLastActivePopup
GetTopWindow
GetActiveWindow
SetClassLongA
GetDesktopWindow
WaitMessage
LoadImageA
RegisterClassExA
GetSystemMetrics
AdjustWindowRect
EnableWindow
DestroyCursor
MoveWindow
PostQuitMessage
LoadIconA
GetWindowTextA
SetCapture
LoadCursorA
SetCursor
ReleaseCapture
GetAsyncKeyState
SendMessageA
GetDlgItemTextA
SetFocus
MessageBeep
CallWindowProcA
InvalidateRect
PeekMessageA
TranslateMessage
DispatchMessageA
ShowCursor
DestroyWindow
BeginPaint
FillRect
EndPaint
CreateWindowExA
ShowWindow
UpdateWindow
SetForegroundWindow
SetActiveWindow
EnumDisplaySettingsA
ChangeDisplaySettingsA
GetParent
ExitWindowsEx
ReleaseDC
GetWindowRect
SetWindowPos
SetWindowTextA
LoadStringA
KillTimer
WaitForInputIdle
GetDlgItem
RegisterWindowMessageA
SetWindowLongA
PostMessageA
EndDialog
SetDlgItemTextA
DialogBoxParamA
wvsprintfA
MessageBoxA
wsprintfA
RegisterClassA
DefWindowProcA
SetTimer
GetDC
IsWindow
IsWindowVisible
gdi32
TextOutW
GetDeviceCaps
CreateFontA
DeleteDC
CreateDIBSection
CreateCompatibleDC
SetBkColor
SetTextColor
SetTextAlign
SelectObject
CreatePalette
DeleteObject
GetStockObject
SelectPalette
RealizePalette
GetSystemPaletteEntries
SetPaletteEntries
SetDIBColorTable
BitBlt
advapi32
RegOpenKeyExA
GetUserNameA
RegEnumValueA
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegEnumKeyA
RegQueryInfoKeyA
RegDeleteValueA
RegDeleteKeyA
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
shell32
SHGetMalloc
SHGetSpecialFolderLocation
SHGetDesktopFolder
ShellExecuteA
SHGetFileInfoA
FindExecutableA
Name
.text
Size
196KB
Virtual Size
195KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
20KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
24KB
Virtual Size
111KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
48KB
Virtual Size
46KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=10, id=48, version=9044,
count=1, id=28, version=9178,
count=3, id=11, version=8047,
count=11, id=10, version=8047,
count=2, id=4, version=8047,
count=8, id=14, version=7299,
count=297, id=1, productName=Unmarked objects,
count=17, id=19, version=9049,
count=4, productName=Unmarked objects (old),
count=91, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
cdkey.exe
- SHA256 0fd7ba3f1b90b1b683a70e53a7cfd6d42ea26ef9f8884329d9289359f256d0d6
- MD5 cfc639aa681171e6d38c0bcf50ffc449
- SHA1 df4813d3dcc382141cde3e98a4a89e02ebbd33dc
- SHA512 d9194ea27e779a54f2b1495237e47561e041c2931d4bf0a93dbc6fd9d8ea1bdf3c220d228b61698b130e6e984ecb6034aa1544be788fc37294aaebb25bfc6f97
- SSDEEP 6144:xFJ5rQMZ8Oieyc05LqtzUqFdGaMkLoQzHhXrPXTBM5kkb6NBcwlJyo1yGLbcSg7T:RFwxej05ebKTwoQzHlFknwqAaCRR3s
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
368256
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
.code
Size
Virtual Size
248KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
108KB
Virtual Size
108KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
25KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=12, id=48, version=9044,
count=1, id=28, version=9178,
count=3, id=11, version=8047,
count=11, id=10, version=8047,
count=2, id=4, version=8047,
count=6, id=14, version=7299,
count=278, id=1, productName=Unmarked objects,
count=17, id=19, version=9049,
count=4, productName=Unmarked objects (old),
count=78, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
icyHell.net.URL
- SHA256 e105e65a7ab24c0bd44d0150518e82ebea690c5dc1e8df5a5571ec93f7d257ca
- MD5 511c6acc2e680e74ce2ca281ee3b8d3a
- SHA1 9e000557a6207f54be35e4f9a3be8016b9e2cb55
- SHA512 f15fafc3dd4eb2ae9864a98ab3c6e59348e3dbc28162940d1bf94207cf1fef337323da01c94508decebe13c726c0969526c8fec084d0f63b9cb78c079f679424
- MD5 SHA1 SHA512