6289_v.2.6.1.zip
- SHA256 9b5b6d43994986218f138e5d9cfd824ebeb594f44cbdf6733cc63d0933bddc08
Overview
overview
7Static
static
76289_v.2.6.1.zip
windows7-x64
46289_v.2.6.1.zip
windows10-2004-x64
1植物大�...aw.dll
windows7-x64
7植物大�...aw.dll
windows10-2004-x64
7植物大�...ne.dll
windows7-x64
3植物大�...ne.dll
windows10-2004-x64
3植物大�...3d.dll
windows7-x64
7植物大�...3d.dll
windows10-2004-x64
7植物大�...��.txt
windows7-x64
1植物大�...��.txt
windows10-2004-x64
1植物大�...mm.dll
windows7-x64
3植物大�...mm.dll
windows10-2004-x64
3植物大�...aw.dll
windows7-x64
3植物大�...aw.dll
windows10-2004-x64
3植物大�...o.conf
windows7-x64
3植物大�...o.conf
windows10-2004-x64
3植物大�...��.txt
windows7-x64
1植物大�...��.txt
windows10-2004-x64
1植物大�...mm.dll
windows7-x64
3植物大�...mm.dll
windows10-2004-x64
3植物大�...aw.dll
windows7-x64
3植物大�...aw.dll
windows10-2004-x64
3植物大�...o.conf
windows7-x64
3植物大�...o.conf
windows10-2004-x64
3植物大�...��.txt
windows7-x64
1植物大�...��.txt
windows10-2004-x64
1植物大�...��.txt
windows7-x64
1植物大�...��.txt
windows10-2004-x64
1植物大�...��.hta
windows7-x64
3植物大�...��.hta
windows10-2004-x64
3植物大�...��.pdf
windows7-x64
3植物大�...��.pdf
windows10-2004-x64
3Behavioral task
behavioral1
Sample
6289_v.2.6.1.zip
Resource
win7-20240903-en
windows7-x64
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
6289_v.2.6.1.zip
Resource
win10v2004-20241007-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
植物大战僵尸杂交版v2.6.1/【三选一】3D加速补丁/ddraw.dll
Resource
win7-20241010-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
植物大战僵尸杂交版v2.6.1/【三选一】3D加速补丁/ddraw.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral5
Sample
植物大战僵尸杂交版v2.6.1/【三选一】3D加速补丁/libwine.dll
Resource
win7-20240903-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral6
Sample
植物大战僵尸杂交版v2.6.1/【三选一】3D加速补丁/libwine.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral7
Sample
植物大战僵尸杂交版v2.6.1/【三选一】3D加速补丁/wined3d.dll
Resource
win7-20240903-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral8
Sample
植物大战僵尸杂交版v2.6.1/【三选一】3D加速补丁/wined3d.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral9
Sample
植物大战僵尸杂交版v2.6.1/【三选一】3D加速补丁/使用说明.txt
Resource
win7-20241010-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
植物大战僵尸杂交版v2.6.1/【三选一】3D加速补丁/使用说明.txt
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
植物大战僵尸杂交版v2.6.1/【三选一】DX12加速补丁/D3DImm.dll
Resource
win7-20241010-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral12
Sample
植物大战僵尸杂交版v2.6.1/【三选一】DX12加速补丁/D3DImm.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral13
Sample
植物大战僵尸杂交版v2.6.1/【三选一】DX12加速补丁/DDraw.dll
Resource
win7-20240903-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral14
Sample
植物大战僵尸杂交版v2.6.1/【三选一】DX12加速补丁/DDraw.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral15
Sample
植物大战僵尸杂交版v2.6.1/【三选一】DX12加速补丁/dgVoodoo.conf
Resource
win7-20240708-en
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral16
Sample
植物大战僵尸杂交版v2.6.1/【三选一】DX12加速补丁/dgVoodoo.conf
Resource
win10v2004-20241007-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral17
Sample
植物大战僵尸杂交版v2.6.1/【三选一】DX12加速补丁/使用说明.txt
Resource
win7-20241023-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral18
Sample
植物大战僵尸杂交版v2.6.1/【三选一】DX12加速补丁/使用说明.txt
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral19
Sample
植物大战僵尸杂交版v2.6.1/【三选一】DX加速补丁/D3DImm.dll
Resource
win7-20240903-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral20
Sample
植物大战僵尸杂交版v2.6.1/【三选一】DX加速补丁/D3DImm.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral21
Sample
植物大战僵尸杂交版v2.6.1/【三选一】DX加速补丁/DDraw.dll
Resource
win7-20240729-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral22
Sample
植物大战僵尸杂交版v2.6.1/【三选一】DX加速补丁/DDraw.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral23
Sample
植物大战僵尸杂交版v2.6.1/【三选一】DX加速补丁/dgVoodoo.conf
Resource
win7-20240903-en
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral24
Sample
植物大战僵尸杂交版v2.6.1/【三选一】DX加速补丁/dgVoodoo.conf
Resource
win10v2004-20241007-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral25
Sample
植物大战僵尸杂交版v2.6.1/【三选一】DX加速补丁/使用说明.txt
Resource
win7-20240903-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral26
Sample
植物大战僵尸杂交版v2.6.1/【三选一】DX加速补丁/使用说明.txt
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral27
Sample
植物大战僵尸杂交版v2.6.1/【不懂就看】文件用途说明.txt
Resource
win7-20240729-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral28
Sample
植物大战僵尸杂交版v2.6.1/【不懂就看】文件用途说明.txt
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral29
Sample
植物大战僵尸杂交版v2.6.1/【双击打开】存档与游戏文件夹.hta
Resource
win7-20241010-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral30
Sample
植物大战僵尸杂交版v2.6.1/【双击打开】存档与游戏文件夹.hta
Resource
win10v2004-20241007-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral31
Sample
植物大战僵尸杂交版v2.6.1/【常见问题】杂交版指南.pdf
Resource
win7-20240903-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral32
Sample
植物大战僵尸杂交版v2.6.1/【常见问题】杂交版指南.pdf
Resource
win10v2004-20241007-en
windows10-2004-x64
7 signatures
150 seconds
General
- Target 6289_v.2.6.1.zip
- Size 107.8MB
- Sample241109-e4dl1sxjbx
- SHA256 9b5b6d43994986218f138e5d9cfd824ebeb594f44cbdf6733cc63d0933bddc08
- MD5 2e44c4beeaa19b7a8cd5f6db35c86360
- SHA1 0a7ec5aec4ded89cadf3853481ea08856770afc4
- SHA512 8f8a45e2d55f730813548e98b64729f77a2d2e95bcbe9dd14d39be08103bcde3a19693faa7b9811d0935f3defb430f9438ff18020a6845acb2953c3afa971c10
- SSDEEP 1572864:goAwwvEvpkKJFOwlMJXbeFVKsTi0kPXuGhjs4fb2efBPtMV92K6LPk+FMjXAMZ:5USTLOuMJKGwkGGhz6M1Ml6LPVej5
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Malware Config
Signatures
- ACProtect 1.3x - 1.4x DLL software 5 IoCs
Detects file using ACProtect software.
resource yara_rule static1/unpack001/植物大战僵尸杂交版v2.6.1/【三选一】DX12加速补丁/D3DImm.dll acprotect static1/unpack001/植物大战僵尸杂交版v2.6.1/【三选一】DX12加速补丁/DDraw.dll acprotect static1/unpack001/植物大战僵尸杂交版v2.6.1/【三选一】DX加速补丁/D3DImm.dll acprotect static1/unpack001/植物大战僵尸杂交版v2.6.1/【三选一】DX加速补丁/DDraw.dll acprotect static1/unpack003/$PLUGINSDIR/md5dll.dll acprotect -
resource yara_rule static1/unpack003/$PLUGINSDIR/md5dll.dll upx - Unsigned PE 23 IoCs
Checks for missing Authenticode signature.
resource unpack001/植物大战僵尸杂交版v2.6.1/【三选一】3D加速补丁/ddraw.dll unpack001/植物大战僵尸杂交版v2.6.1/【三选一】3D加速补丁/libwine.dll unpack001/植物大战僵尸杂交版v2.6.1/【三选一】3D加速补丁/wined3d.dll unpack001/植物大战僵尸杂交版v2.6.1/【三选一】DX12加速补丁/D3DImm.dll unpack001/植物大战僵尸杂交版v2.6.1/【三选一】DX12加速补丁/DDraw.dll unpack001/植物大战僵尸杂交版v2.6.1/【三选一】DX加速补丁/D3DImm.dll unpack001/植物大战僵尸杂交版v2.6.1/【三选一】DX加速补丁/DDraw.dll unpack001/植物大战僵尸杂交版v2.6.1/植物大战僵尸杂交版v2.6.1安装程序.exe unpack003/$PLUGINSDIR/AccessControl.dll unpack003/$PLUGINSDIR/BgWorker.dll unpack003/$PLUGINSDIR/ShellExecAsUser.dll unpack003/$PLUGINSDIR/System.dll unpack003/$PLUGINSDIR/md5dll.dll unpack004/out.upx unpack003/$PLUGINSDIR/nsNiuniuSkin.dll unpack003/$PLUGINSDIR/nsProcess.dll unpack003/$PLUGINSDIR/nsis7zU.dll unpack006/pvzHE-Launcher.exe unpack003/uninst.exe unpack007/$PLUGINSDIR/BgWorker.dll unpack007/$PLUGINSDIR/System.dll unpack007/$PLUGINSDIR/nsNiuniuSkin.dll unpack007/$PLUGINSDIR/nsProcess.dll
File Explorer
-
6289_v.2.6.1.zip.zip 107.8MB
-
植物大战僵尸杂交版v2.6.1/【三选一】3D加速补丁/ddraw.dll.dll 589KB
-
植物大战僵尸杂交版v2.6.1/【三选一】3D加速补丁/libwine.dll.dll 1.7MB
-
植物大战僵尸杂交版v2.6.1/【三选一】3D加速补丁/wined3d.dll.dll 1.4MB
-
植物大战僵尸杂交版v2.6.1/【三选一】3D加速补丁/使用说明.txt210B
-
植物大战僵尸杂交版v2.6.1/【三选一】DX12加速补丁/D3DImm.dll.dll 201KB
-
植物大战僵尸杂交版v2.6.1/【三选一】DX12加速补丁/DDraw.dll.dll 244KB
-
植物大战僵尸杂交版v2.6.1/【三选一】DX12加速补丁/dgVoodoo.conf20KB
-
植物大战僵尸杂交版v2.6.1/【三选一】DX12加速补丁/使用说明.txt210B
-
植物大战僵尸杂交版v2.6.1/【三选一】DX加速补丁/D3DImm.dll.dll 201KB
-
植物大战僵尸杂交版v2.6.1/【三选一】DX加速补丁/DDraw.dll.dll 244KB
-
植物大战僵尸杂交版v2.6.1/【三选一】DX加速补丁/dgVoodoo.conf20KB
-
植物大战僵尸杂交版v2.6.1/【三选一】DX加速补丁/使用说明.txt210B
-
植物大战僵尸杂交版v2.6.1/【不懂就看】文件用途说明.txt2KB
-
植物大战僵尸杂交版v2.6.1/【双击打开】存档与游戏文件夹.hta.hta .vbs 3KB
-
植物大战僵尸杂交版v2.6.1/【常见问题】杂交版指南.pdf.pdf 3.4MB
-
植物大战僵尸杂交版v2.6.1/【运行后打开游戏】窗口白屏卡死.reg150B
-
植物大战僵尸杂交版v2.6.1/【需要管理员权限】数据执行保护-关闭DEP.bat379B
-
植物大战僵尸杂交版v2.6.1/植物大战僵尸杂交版v2.6.1安装程序.exe.exe 102.4MB
-
$PLUGINSDIR/AccessControl.dll.dll 15KB
-
$PLUGINSDIR/BgWorker.dll.dll 2KB
-
$PLUGINSDIR/ShellExecAsUser.dll.dll 43KB
-
$PLUGINSDIR/System.dll.dll 11KB
-
$PLUGINSDIR/license.rtf.rtf 45KB
-
$PLUGINSDIR/logo.ico264KB
-
$PLUGINSDIR/md5dll.dll.dll 6KB
-
out.upx.dll 8KB
-
$PLUGINSDIR/nsNiuniuSkin.dll.dll 891KB
-
$PLUGINSDIR/nsProcess.dll.dll 4KB
-
$PLUGINSDIR/nsis7zU.dll.dll 313KB
-
$PLUGINSDIR/skin.zip.zip 2.1MB
-
arrow_down.png.png 1KB
-
arrow_up.png.png 1KB
-
bgbottom.png.png 1016B
-
bgtop.png.png 444KB
-
cancel.png.png 2KB
-
checkbox.png.png 1KB
-
close.png.png 1KB
-
close1.png.png 1KB
-
configpage.xml3KB
-
default.xml.xml 1KB
-
finishpage.xml511B
-
install.png.png 4KB
-
install.xml1KB
-
installingpage.xml575B
-
license_bg.png.png 1KB
-
licensepage.xml975B
-
min.png.png 1KB
-
min1.png.png 1KB
-
modify.png.png 2KB
-
msgBox.xml.xml 2KB
-
msgBox2.xml.xml 2KB
-
msgWarning.png.png 1KB
-
ok.png.png 2KB
-
process_bottom.png.png 935B
-
process_top.png.png 935B
-
scroll.png.png 1KB
-
scroll1.png.png 1KB
-
step1.png.png 530KB
-
step2.png.png 546KB
-
step3.png.png 529KB
-
uninst_ok.png.png 2KB
-
uninst_process_bottom.png.png 935B
-
uninst_process_top.png.png 935B
-
uninstall.png.png 2KB
-
uninstall_bg1.png.png 36KB
-
uninstall_bg2.png.png 53KB
-
uninstall_bg3.png.png 35KB
-
uninstallfinishpage.xml526B
-
uninstallingpage.xml454B
-
uninstallpage.xml856B
-
app.7z.7z 96.8MB
-
pvzHE-Launcher.exe.exe 148.3MB
-
logo.ico264KB
-
uninst.exe.exe 2.8MB
-
$PLUGINSDIR/BgWorker.dll.dll 2KB
-
$PLUGINSDIR/System.dll.dll 11KB
-
$PLUGINSDIR/nsNiuniuSkin.dll.dll 891KB
-
$PLUGINSDIR/nsProcess.dll.dll 4KB
-
$PLUGINSDIR/skin.zip.zip 2.1MB
-
arrow_down.png.png 1KB
-
arrow_up.png.png 1KB
-
bgbottom.png.png 1016B
-
bgtop.png.png 444KB
-
cancel.png.png 2KB
-
checkbox.png.png 1KB
-
close.png.png 1KB
-
close1.png.png 1KB
-
configpage.xml3KB
-
default.xml.xml 1KB
-
finishpage.xml511B
-
install.png.png 4KB
-
install.xml1KB
-
installingpage.xml575B
-
license_bg.png.png 1KB
-
licensepage.xml975B
-
min.png.png 1KB
-
min1.png.png 1KB
-
modify.png.png 2KB
-
msgBox.xml.xml 2KB
-
msgBox2.xml.xml 2KB
-
msgWarning.png.png 1KB
-
ok.png.png 2KB
-
process_bottom.png.png 935B
-
process_top.png.png 935B
-
scroll.png.png 1KB
-
scroll1.png.png 1KB
-
step1.png.png 530KB
-
step2.png.png 546KB
-
step3.png.png 529KB
-
uninst_ok.png.png 2KB
-
uninst_process_bottom.png.png 935B
-
uninst_process_top.png.png 935B
-
uninstall.png.png 2KB
-
uninstall_bg1.png.png 36KB
-
uninstall_bg2.png.png 53KB
-
uninstall_bg3.png.png 35KB
-
uninstallfinishpage.xml526B
-
uninstallingpage.xml454B
-
uninstallpage.xml856B
植物大战僵尸杂交版v2.6.1/【三选一】3D加速补丁/ddraw.dll
- IMPHASH 7f1709c3ba88aade9949dfcc591e9724
- SHA256 507be9eb2f66596f33946fb05b711a2c3f8318b9abe34f804f803507f204a88e
- MD5 8df3233c870e8352bc89f3a08403ff70
- SHA1 7b1ec379eafa637a06f7017bea70b0fb3b8f5a9f
- SHA512 469d527f60865e159d3d0d59edb85d39fd6cdccf12adbd6c620a290dbbcb59fbc9e2e1a708e81149c6f3e6e4916be5b107c2f3f5e80b63559a7571655d1058b5
- SSDEEP 6144:vc6wKvaxx3odWeZxRxkSsP6AfTt+cvo05IV2S+rc0wci+Is9:vqKCVo3Z0PimfqM6cAs9
- MD5 SHA1 SHA512 SSDEEP
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5136
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
advapi32
RegCloseKey
RegOpenKeyA
RegQueryValueExA
gdi32
BitBlt
CombineRgn
CreateRectRgn
CreateRectRgnIndirect
DeleteObject
ExtCreateRegion
GetDCOrgEx
GetRandomRgn
GetRegionData
GetStockObject
OffsetRgn
kernel32
DeleteCriticalSection
DisableThreadLibraryCalls
EnterCriticalSection
EnumResourceNamesW
FindResourceW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetProcAddress
GetProcessHeap
GetSystemTimeAsFileTime
GetTickCount
GetVersion
HeapAlloc
HeapFree
HeapReAlloc
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryW
LoadResource
MultiByteToWideChar
QueryPerformanceCounter
RtlUnwind
SetUnhandledExceptionFilter
SizeofResource
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
user32
CreateWindowExA
DefWindowProcA
DestroyWindow
GetDC
GetDesktopWindow
GetMonitorInfoW
GetSystemMetrics
MessageBoxW
MonitorFromWindow
RegisterClassA
ReleaseDC
SetWindowPos
ShowWindow
UnregisterClassA
wined3d
wined3d_buffer_create
wined3d_buffer_decref
wined3d_buffer_get_resource
wined3d_calculate_format_pitch
wined3d_check_device_format
wined3d_create
wined3d_decref
wined3d_device_acquire_focus_window
wined3d_device_begin_scene
wined3d_device_begin_stateblock
wined3d_device_clear
wined3d_device_clear_rendertarget_view
wined3d_device_copy_sub_resource_region
wined3d_device_create
wined3d_device_decref
wined3d_device_draw_indexed_primitive
wined3d_device_draw_primitive
wined3d_device_end_scene
wined3d_device_end_stateblock
wined3d_device_evict_managed_resources
wined3d_device_get_available_texture_mem
wined3d_device_get_clip_plane
wined3d_device_get_depth_stencil_view
wined3d_device_get_device_caps
wined3d_device_get_gamma_ramp
wined3d_device_get_light
wined3d_device_get_light_enable
wined3d_device_get_material
wined3d_device_get_render_state
wined3d_device_get_rendertarget_view
wined3d_device_get_sampler_state
wined3d_device_get_stream_source
wined3d_device_get_swapchain
wined3d_device_get_texture
wined3d_device_get_texture_stage_state
wined3d_device_get_transform
wined3d_device_get_viewports
wined3d_device_incref
wined3d_device_init_3d
wined3d_device_init_gdi
wined3d_device_multiply_transform
wined3d_device_process_vertices
wined3d_device_release_focus_window
wined3d_device_reset
wined3d_device_restore_fullscreen_window
wined3d_device_set_base_vertex_index
wined3d_device_set_clip_plane
wined3d_device_set_depth_stencil_view
wined3d_device_set_gamma_ramp
wined3d_device_set_index_buffer
wined3d_device_set_light
wined3d_device_set_light_enable
wined3d_device_set_material
wined3d_device_set_multithreaded
wined3d_device_set_primitive_type
wined3d_device_set_render_state
wined3d_device_set_rendertarget_view
wined3d_device_set_sampler_state
wined3d_device_set_stream_source
wined3d_device_set_texture
wined3d_device_set_texture_stage_state
wined3d_device_set_transform
wined3d_device_set_vertex_declaration
wined3d_device_set_viewports
wined3d_device_setup_fullscreen_window
wined3d_device_uninit_3d
wined3d_device_uninit_gdi
wined3d_device_validate_device
wined3d_enum_adapter_modes
wined3d_get_adapter_display_mode
wined3d_get_adapter_identifier
wined3d_get_adapter_raster_status
wined3d_get_device_caps
wined3d_get_output_desc
wined3d_mutex_lock
wined3d_mutex_unlock
wined3d_palette_apply_to_dc
wined3d_palette_create
wined3d_palette_decref
wined3d_palette_get_entries
wined3d_palette_set_entries
wined3d_rendertarget_view_create_from_sub_resource
wined3d_rendertarget_view_decref
wined3d_rendertarget_view_get_sub_resource_parent
wined3d_rendertarget_view_incref
wined3d_rendertarget_view_set_parent
wined3d_resource_get_desc
wined3d_resource_get_priority
wined3d_resource_map
wined3d_resource_preload
wined3d_resource_set_parent
wined3d_resource_set_priority
wined3d_resource_unmap
wined3d_set_adapter_display_mode
wined3d_stateblock_apply
wined3d_stateblock_capture
wined3d_stateblock_create
wined3d_stateblock_decref
wined3d_swapchain_create
wined3d_swapchain_decref
wined3d_swapchain_get_back_buffer
wined3d_swapchain_get_desc
wined3d_swapchain_get_display_mode
wined3d_swapchain_incref
wined3d_swapchain_present
wined3d_swapchain_resize_buffers
wined3d_swapchain_set_palette
wined3d_swapchain_set_window
wined3d_texture_blt
wined3d_texture_create
wined3d_texture_decref
wined3d_texture_get_dc
wined3d_texture_get_lod
wined3d_texture_get_overlay_position
wined3d_texture_get_parent
wined3d_texture_get_pitch
wined3d_texture_get_resource
wined3d_texture_get_sub_resource_desc
wined3d_texture_get_sub_resource_parent
wined3d_texture_incref
wined3d_texture_release_dc
wined3d_texture_set_color_key
wined3d_texture_set_lod
wined3d_texture_set_overlay_position
wined3d_texture_set_sub_resource_parent
wined3d_texture_update_desc
wined3d_texture_update_overlay
wined3d_vertex_declaration_create_from_fvf
wined3d_vertex_declaration_decref
wined3d_vertex_declaration_incref
libwine
__wine_dbg_get_channel_flags
wine_dbg_log
wine_dbg_sprintf
msvcrt
__dllonexit
__setusermatherr
_amsg_exit
_errno
_exit
_initterm
_iob
_lock
_onexit
_setjmp3
_snwprintf
calloc
fprintf
free
fwprintf
fwrite
malloc
memcmp
memcpy
memmove
memset
raise
strlen
strncmp
_unlock
abort
vfprintf
wcscpy
longjmp
DirectDrawCreate
DirectDrawCreateClipper
DirectDrawCreateEx
DirectDrawEnumerateA
DirectDrawEnumerateExA
DirectDrawEnumerateExW
DirectDrawEnumerateW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetSurfaceFromDC
Name
.text
Size
212KB
Virtual Size
211KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
92KB
Virtual Size
92KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
411B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
44B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
32B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
15KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/4
Size
1024B
Virtual Size
544B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/19
Size
32KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/31
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/45
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/57
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/70
Size
512B
Virtual Size
281B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/81
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/92
Size
1024B
Virtual Size
624B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
植物大战僵尸杂交版v2.6.1/【三选一】3D加速补丁/libwine.dll
- IMPHASH 6437ff18af0ffde8d83b001ba7176cb0
- SHA256 e25dad210f90305ed0064de160ef7b79badea2b36713f561fbaa7e1a298c3f45
- MD5 65ad060a11835269e2b6350273c5cf99
- SHA1 a6b05e590360d8bd3bb36345ca13562e6b3e3f93
- SHA512 25ab513ec279c6f51a564f0e9071ed6cac3dc8e3ecde6714b47d765688ca7d83ec7ea3c13062cb92c44dabad66f6f4aeff3c65c89b6ff8f771ffd78ab9641113
- SSDEEP 12288:Xkx+iFYStkBCVC2gC/sogZaqKzDUDANoT45+a/jA/mqxPGef/woPd1lv53Jq1E2P:XkjYZBxmmEUDIoTXmvuFVv/2nsEQY
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5136
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
msvcrt
__dllonexit
_amsg_exit
_environ
_errno
_execv
_exit
_fstati64
_initterm
_iob
_lock
_onexit
_snwprintf
_stati64
_vsnprintf
calloc
exit
free
fwprintf
fwrite
getenv
malloc
memcmp
memcpy
memmove
perror
raise
realloc
sprintf
strcat
strchr
strcmp
strcpy
strcspn
strlen
strncmp
strrchr
_unlock
abort
vfprintf
wcscpy
bsearch
_write
_strdup
_read
_open
_getcwd
_close
user32
MessageBoxW
__wine_dbg_get_channel_flags
__wine_dbg_set_channel_flags
__wine_dbg_set_functions
__wine_dll_register
__wine_main_argc
__wine_main_argv
__wine_main_environ
__wine_main_wargv
atoiW
atolW
get_char_typeW
isalnumW
isalphaW
iscntrlW
isdigitW
isgraphW
islowerW
isprintW
ispunctW
isspaceW
isupperW
isxdigitW
memchrW
memicmpW
memrchrW
snprintfW
sprintfW
strcatW
strchrW
strcmpW
strcmpiW
strcpyW
strcspnW
strlenW
strlwrW
strncmpW
strncmpiW
strpbrkW
strrchrW
strspnW
strstrW
strtolW
strtoulW
struprW
tolowerW
toupperW
vsnprintfW
vsprintfW
wine_call_on_stack
wine_casemap_lower
wine_casemap_upper
wine_compare_string
wine_cp_enum_table
wine_cp_get_table
wine_cp_mbstowcs
wine_cp_wcstombs
wine_cpsymbol_mbstowcs
wine_cpsymbol_wcstombs
wine_dbg_log
wine_dbg_printf
wine_dbg_sprintf
wine_dbgstr_an
wine_dbgstr_wn
wine_dlclose
wine_dll_enum_load_path
wine_dll_get_owner
wine_dll_load
wine_dll_load_main_exe
wine_dll_set_callback
wine_dll_unload
wine_dlopen
wine_dlsym
wine_exec_wine_binary
wine_fold_string
wine_get_build_dir
wine_get_build_id
wine_get_config_dir
wine_get_data_dir
wine_get_server_dir
wine_get_sortkey
wine_get_user_name
wine_get_version
wine_init
wine_init_argv0_path
wine_is_dbcs_leadbyte
wine_pthread_get_functions
wine_pthread_set_functions
wine_switch_to_stack
wine_utf8_mbstowcs
wine_utf8_wcstombs
wine_wctype_table
Name
.text
Size
32KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
156B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
1.6MB
Virtual Size
1.6MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
/4
Size
512B
Virtual Size
68B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
44B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
32B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/14
Size
1024B
Virtual Size
544B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/29
Size
31KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/41
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/55
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/67
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/80
Size
512B
Virtual Size
281B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/91
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/102
Size
1024B
Virtual Size
600B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
植物大战僵尸杂交版v2.6.1/【三选一】3D加速补丁/wined3d.dll
- IMPHASH 9b0fab6fa3f7d26b430ae57599459bc1
- SHA256 8b1e337a569878fadcf5c046da1467abf743dfd714e95d4ad478eb3eb84a0076
- MD5 85de062553ae5b7438775b9c08453398
- SHA1 e7811e6f92c57ba6cf9e5399c22bb2eaa86f37d2
- SHA512 cc55df5474b97cdbe1ccc7c16e297f1758bac3bcdc88c4fd4c223dcd28c639555375de8a911d39360735c836f92baf886c507dc755fca2e49a22675ae36eb04f
- SSDEEP 24576:YYYdLhZefzRFZqEbTerwBYehS1LYqSYLsFLFeMb7FA6lrjImz:YYd7QsTeDHpoFLFeMb7FA6hz
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5136
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
advapi32
AllocateLocallyUniqueId
RegCloseKey
RegOpenKeyA
RegQueryValueExA
gdi32
BitBlt
ChoosePixelFormat
CreateBitmap
CreateCompatibleDC
D3DKMTCreateDCFromMemory
D3DKMTDestroyDCFromMemory
DeleteDC
DeleteObject
DescribePixelFormat
GetDeviceGammaRamp
GetObjectA
SelectObject
SetDIBColorTable
SetDeviceGammaRamp
SetPixelFormat
kernel32
CloseHandle
CreateEventW
CreateThread
DebugBreak
DeleteCriticalSection
DisableThreadLibraryCalls
EnterCriticalSection
FreeLibrary
FreeLibraryAndExitThread
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetProcAddress
GetProcessHeap
GetSystemTimeAsFileTime
GetTickCount
GetVersionExW
HeapAlloc
HeapFree
HeapReAlloc
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
QueryPerformanceFrequency
SetEvent
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
ntdll
RtlIsCriticalSectionLockedByThread
opengl32
glDisable
glEnable
wglCreateContext
wglDeleteContext
wglGetCurrentContext
wglGetCurrentDC
wglGetProcAddress
wglMakeCurrent
wglShareLists
user32
AdjustWindowRectEx
CallWindowProcA
CallWindowProcW
ChangeDisplaySettingsExW
ClientToScreen
ClipCursor
CreateIconIndirect
CreateWindowExA
DefWindowProcA
DefWindowProcW
DestroyCursor
DestroyWindow
EnumDisplayDevicesW
EnumDisplaySettingsExW
EnumDisplaySettingsW
GetClientRect
GetCursorPos
GetDC
GetDCEx
GetWindowLongA
GetWindowLongW
GetWindowRect
IntersectRect
IsWindow
IsWindowUnicode
IsWindowVisible
LoadCursorA
LoadIconA
LoadImageA
MapWindowPoints
MessageBoxW
MonitorFromPoint
MoveWindow
RegisterClassA
ReleaseDC
ScreenToClient
SetCursor
SetCursorPos
SetWindowLongA
SetWindowLongW
SetWindowPos
ShowWindow
UnregisterClassA
WindowFromDC
libwine
__wine_dbg_get_channel_flags
wine_dbg_log
wine_dbg_sprintf
wine_dbgstr_an
wine_dbgstr_wn
msvcrt
__dllonexit
__setusermatherr
_amsg_exit
_errno
_exit
_initterm
_iob
_lock
_onexit
_snwprintf
_vsnprintf
calloc
fprintf
free
fwprintf
fwrite
isprint
isspace
malloc
memcmp
memcpy
memmove
memset
raise
sprintf
sscanf
strcat
strchr
strcmp
strcpy
strlen
strncmp
strrchr
strstr
_unlock
abort
atoi
vfprintf
wcscpy
wined3d_blend_state_create
wined3d_blend_state_decref
wined3d_blend_state_get_parent
wined3d_blend_state_incref
wined3d_buffer_create
wined3d_buffer_decref
wined3d_buffer_get_parent
wined3d_buffer_get_resource
wined3d_buffer_incref
wined3d_calculate_format_pitch
wined3d_check_depth_stencil_match
wined3d_check_device_format
wined3d_check_device_format_conversion
wined3d_check_device_multisample_type
wined3d_check_device_type
wined3d_create
wined3d_decref
wined3d_device_acquire_focus_window
wined3d_device_begin_scene
wined3d_device_begin_stateblock
wined3d_device_clear
wined3d_device_clear_rendertarget_view
wined3d_device_clear_unordered_access_view_uint
wined3d_device_copy_resource
wined3d_device_copy_sub_resource_region
wined3d_device_copy_uav_counter
wined3d_device_create
wined3d_device_decref
wined3d_device_dispatch_compute
wined3d_device_dispatch_compute_indirect
wined3d_device_draw_indexed_primitive
wined3d_device_draw_indexed_primitive_instanced
wined3d_device_draw_indexed_primitive_instanced_indirect
wined3d_device_draw_primitive
wined3d_device_draw_primitive_instanced
wined3d_device_draw_primitive_instanced_indirect
wined3d_device_end_scene
wined3d_device_end_stateblock
wined3d_device_evict_managed_resources
wined3d_device_get_available_texture_mem
wined3d_device_get_base_vertex_index
wined3d_device_get_blend_state
wined3d_device_get_clip_plane
wined3d_device_get_clip_status
wined3d_device_get_compute_shader
wined3d_device_get_constant_buffer
wined3d_device_get_creation_parameters
wined3d_device_get_cs_resource_view
wined3d_device_get_cs_sampler
wined3d_device_get_cs_uav
wined3d_device_get_depth_stencil_view
wined3d_device_get_device_caps
wined3d_device_get_display_mode
wined3d_device_get_domain_shader
wined3d_device_get_ds_resource_view
wined3d_device_get_ds_sampler
wined3d_device_get_gamma_ramp
wined3d_device_get_geometry_shader
wined3d_device_get_gs_resource_view
wined3d_device_get_gs_sampler
wined3d_device_get_hs_resource_view
wined3d_device_get_hs_sampler
wined3d_device_get_hull_shader
wined3d_device_get_index_buffer
wined3d_device_get_light
wined3d_device_get_light_enable
wined3d_device_get_material
wined3d_device_get_max_frame_latency
wined3d_device_get_npatch_mode
wined3d_device_get_pixel_shader
wined3d_device_get_predication
wined3d_device_get_primitive_type
wined3d_device_get_ps_consts_b
wined3d_device_get_ps_consts_f
wined3d_device_get_ps_consts_i
wined3d_device_get_ps_resource_view
wined3d_device_get_ps_sampler
wined3d_device_get_raster_status
wined3d_device_get_rasterizer_state
wined3d_device_get_render_state
wined3d_device_get_rendertarget_view
wined3d_device_get_sampler_state
wined3d_device_get_scissor_rects
wined3d_device_get_software_vertex_processing
wined3d_device_get_stream_output
wined3d_device_get_stream_source
wined3d_device_get_stream_source_freq
wined3d_device_get_swapchain
wined3d_device_get_swapchain_count
wined3d_device_get_texture
wined3d_device_get_texture_stage_state
wined3d_device_get_transform
wined3d_device_get_unordered_access_view
wined3d_device_get_vertex_declaration
wined3d_device_get_vertex_shader
wined3d_device_get_viewports
wined3d_device_get_vs_consts_b
wined3d_device_get_vs_consts_f
wined3d_device_get_vs_consts_i
wined3d_device_get_vs_resource_view
wined3d_device_get_vs_sampler
wined3d_device_get_wined3d
wined3d_device_incref
wined3d_device_init_3d
wined3d_device_init_gdi
wined3d_device_multiply_transform
wined3d_device_process_vertices
wined3d_device_release_focus_window
wined3d_device_reset
wined3d_device_resolve_sub_resource
wined3d_device_restore_fullscreen_window
wined3d_device_set_base_vertex_index
wined3d_device_set_blend_state
wined3d_device_set_clip_plane
wined3d_device_set_clip_status
wined3d_device_set_compute_shader
wined3d_device_set_constant_buffer
wined3d_device_set_cs_resource_view
wined3d_device_set_cs_sampler
wined3d_device_set_cs_uav
wined3d_device_set_cursor_position
wined3d_device_set_cursor_properties
wined3d_device_set_depth_stencil_view
wined3d_device_set_dialog_box_mode
wined3d_device_set_domain_shader
wined3d_device_set_ds_resource_view
wined3d_device_set_ds_sampler
wined3d_device_set_gamma_ramp
wined3d_device_set_geometry_shader
wined3d_device_set_gs_resource_view
wined3d_device_set_gs_sampler
wined3d_device_set_hs_resource_view
wined3d_device_set_hs_sampler
wined3d_device_set_hull_shader
wined3d_device_set_index_buffer
wined3d_device_set_light
wined3d_device_set_light_enable
wined3d_device_set_material
wined3d_device_set_max_frame_latency
wined3d_device_set_multithreaded
wined3d_device_set_npatch_mode
wined3d_device_set_pixel_shader
wined3d_device_set_predication
wined3d_device_set_primitive_type
wined3d_device_set_ps_consts_b
wined3d_device_set_ps_consts_f
wined3d_device_set_ps_consts_i
wined3d_device_set_ps_resource_view
wined3d_device_set_ps_sampler
wined3d_device_set_rasterizer_state
wined3d_device_set_render_state
wined3d_device_set_rendertarget_view
wined3d_device_set_sampler_state
wined3d_device_set_scissor_rects
wined3d_device_set_software_vertex_processing
wined3d_device_set_stream_output
wined3d_device_set_stream_source
wined3d_device_set_stream_source_freq
wined3d_device_set_texture
wined3d_device_set_texture_stage_state
wined3d_device_set_transform
wined3d_device_set_unordered_access_view
wined3d_device_set_vertex_declaration
wined3d_device_set_vertex_shader
wined3d_device_set_viewports
wined3d_device_set_vs_consts_b
wined3d_device_set_vs_consts_f
wined3d_device_set_vs_consts_i
wined3d_device_set_vs_resource_view
wined3d_device_set_vs_sampler
wined3d_device_setup_fullscreen_window
wined3d_device_show_cursor
wined3d_device_uninit_3d
wined3d_device_uninit_gdi
wined3d_device_update_sub_resource
wined3d_device_update_texture
wined3d_device_validate_device
wined3d_enum_adapter_modes
wined3d_find_closest_matching_adapter_mode
wined3d_get_adapter_count
wined3d_get_adapter_display_mode
wined3d_get_adapter_identifier
wined3d_get_adapter_mode_count
wined3d_get_adapter_raster_status
wined3d_get_device_caps
wined3d_get_output_desc
wined3d_incref
wined3d_mutex_lock
wined3d_mutex_unlock
wined3d_palette_apply_to_dc
wined3d_palette_create
wined3d_palette_decref
wined3d_palette_get_entries
wined3d_palette_incref
wined3d_palette_set_entries
wined3d_query_create
wined3d_query_decref
wined3d_query_get_data
wined3d_query_get_data_size
wined3d_query_get_parent
wined3d_query_get_type
wined3d_query_incref
wined3d_query_issue
wined3d_rasterizer_state_create
wined3d_rasterizer_state_decref
wined3d_rasterizer_state_get_parent
wined3d_rasterizer_state_incref
wined3d_register_software_device
wined3d_rendertarget_view_create
wined3d_rendertarget_view_create_from_sub_resource
wined3d_rendertarget_view_decref
wined3d_rendertarget_view_get_parent
wined3d_rendertarget_view_get_resource
wined3d_rendertarget_view_get_sub_resource_parent
wined3d_rendertarget_view_incref
wined3d_rendertarget_view_set_parent
wined3d_resource_get_desc
wined3d_resource_get_parent
wined3d_resource_get_priority
wined3d_resource_map
wined3d_resource_preload
wined3d_resource_set_parent
wined3d_resource_set_priority
wined3d_resource_unmap
wined3d_sampler_create
wined3d_sampler_decref
wined3d_sampler_get_parent
wined3d_sampler_incref
wined3d_set_adapter_display_mode
wined3d_shader_create_cs
wined3d_shader_create_ds
wined3d_shader_create_gs
wined3d_shader_create_hs
wined3d_shader_create_ps
wined3d_shader_create_vs
wined3d_shader_decref
wined3d_shader_get_byte_code
wined3d_shader_get_parent
wined3d_shader_incref
wined3d_shader_resource_view_create
wined3d_shader_resource_view_decref
wined3d_shader_resource_view_generate_mipmaps
wined3d_shader_resource_view_get_parent
wined3d_shader_resource_view_incref
wined3d_shader_set_local_constants_float
wined3d_stateblock_apply
wined3d_stateblock_capture
wined3d_stateblock_create
wined3d_stateblock_decref
wined3d_stateblock_incref
wined3d_swapchain_create
wined3d_swapchain_decref
wined3d_swapchain_get_back_buffer
wined3d_swapchain_get_desc
wined3d_swapchain_get_device
wined3d_swapchain_get_display_mode
wined3d_swapchain_get_front_buffer_data
wined3d_swapchain_get_gamma_ramp
wined3d_swapchain_get_parent
wined3d_swapchain_get_raster_status
wined3d_swapchain_incref
wined3d_swapchain_present
wined3d_swapchain_resize_buffers
wined3d_swapchain_resize_target
wined3d_swapchain_set_fullscreen
wined3d_swapchain_set_gamma_ramp
wined3d_swapchain_set_palette
wined3d_swapchain_set_window
wined3d_texture_add_dirty_region
wined3d_texture_blt
wined3d_texture_create
wined3d_texture_decref
wined3d_texture_from_resource
wined3d_texture_get_dc
wined3d_texture_get_level_count
wined3d_texture_get_lod
wined3d_texture_get_overlay_position
wined3d_texture_get_parent
wined3d_texture_get_pitch
wined3d_texture_get_resource
wined3d_texture_get_sub_resource_desc
wined3d_texture_get_sub_resource_parent
wined3d_texture_incref
wined3d_texture_release_dc
wined3d_texture_set_color_key
wined3d_texture_set_lod
wined3d_texture_set_overlay_position
wined3d_texture_set_sub_resource_parent
wined3d_texture_update_desc
wined3d_texture_update_overlay
wined3d_unordered_access_view_create
wined3d_unordered_access_view_decref
wined3d_unordered_access_view_get_parent
wined3d_unordered_access_view_incref
wined3d_vertex_declaration_create
wined3d_vertex_declaration_create_from_fvf
wined3d_vertex_declaration_decref
wined3d_vertex_declaration_get_parent
wined3d_vertex_declaration_incref
Name
.text
Size
792KB
Virtual Size
792KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
988B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
300KB
Virtual Size
299KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
44B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
32B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
912B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
52KB
Virtual Size
52KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/4
Size
1024B
Virtual Size
864B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/19
Size
39KB
Virtual Size
39KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/31
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/45
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/57
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/70
Size
512B
Virtual Size
281B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/81
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/92
Size
1024B
Virtual Size
776B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
植物大战僵尸杂交版v2.6.1/【三选一】3D加速补丁/使用说明.txt
- SHA256 fd2a903796e8c36cdefadc6cc8b57880d350e65229bac5fd09d843c27ef0aac8
- MD5 a26261eecc6a50e7f1dacd3340b70210
- SHA1 d30062002725b03940b0774c1c81a61637d39d09
- SHA512 788a653ca3608b734849df35b7753ab53eed6b6d7743f88337b9eeaea61b58da0f7937900b671c5df8756de49e7778bf79ffd12f3223209ce0303235c3eb4378
- MD5 SHA1 SHA512
植物大战僵尸杂交版v2.6.1/【三选一】DX12加速补丁/D3DImm.dll
- SHA256 2a783cf64720072f2c42c93b85034f094ac825ce5660a51001cd0f9c7ba7ce37
- MD5 1becf6cd57c87a98e4a5f889e6ff290d
- SHA1 5af97b220272abe063e88dcbbb97abdbadeac90f
- SHA512 60f980d3b61a4fd084f0d422043e45f2642865286f604d504d1ac84239076fedacad2135aa6723b752239a41368d6ac0752843b6ab3753980b8adf791eee6ec3
- SSDEEP 6144:UqnXjZ8P0DNjwFZxtx/+FpMLF++srBTMRP:UGSshef+FyLF+3rFMRP
- MD5 SHA1 SHA512 SSDEEP
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
806496
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
GetD3DInterface
GetD3DVersion
Name
Size
Virtual Size
588KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
196KB
Virtual Size
200KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
3KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=2, id=260, version=30795,
count=5, id=257, version=30795,
count=59, id=1, productName=Unmarked objects,
count=2, id=261, version=30795,
count=5, id=15, productName=VS2003 (.NET) build 3077, version=3077,
count=4, id=259, version=33134,
count=10, id=261, version=33134,
count=139, id=265, version=33134,
count=1, id=256, version=33134,
count=1, id=255, version=33134,
count=1, id=151,
count=1, id=258, version=33134,
植物大战僵尸杂交版v2.6.1/【三选一】DX12加速补丁/DDraw.dll
- SHA256 4e6b06ce28ae49470273dae841dccfd102e9d5d0da74c77a9150b4050af1a29b
- MD5 5037897b3bf97eab6ef7cb38f112df95
- SHA1 b7fc5aa385eeebc87798c6361b114ca259b0822b
- SHA512 39aa6bc83095cca53e73599aa5167eb1ae0d51eeb9a4695beef32632659877d763822845e1f39877b9cbee19e7043fc175699b8ab6196d3e72dfa369ba7fd2a1
- SSDEEP 3072:w1QMXMAA+RlOY1V1sGvoXi8twzfHl8G+4mYDy4WLdBDXwgkbPiM1zyrj:w1BcbW1V1sgWtwzWGAY2TLdt/kbqM1z
- MD5 SHA1 SHA512 SSDEEP
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
929216
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
AcquireDDThreadLock
CompleteCreateSysmemSurface
D3DParseUnknownCommand
DDInternalLock
DDInternalUnlock
DirectDrawCreate
DirectDrawCreateClipper
DirectDrawCreateEx
DirectDrawEnumerateA
DirectDrawEnumerateExA
DirectDrawEnumerateExW
DirectDrawEnumerateW
DllCanUnloadNow
DllGetClassObject
ReleaseDDThreadLock
Name
Size
Virtual Size
672KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
232KB
Virtual Size
232KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
11KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=1, id=260, version=30795,
count=1, id=262, version=30795,
count=6, id=15, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=260, version=33134,
count=2, id=261, version=30795,
count=13, id=257, version=30795,
count=187, id=1, productName=Unmarked objects,
count=5, id=259, version=33134,
count=12, id=261, version=33134,
count=137, id=265, version=33134,
count=1, id=256, version=33134,
count=1, id=255, version=33134,
count=3, id=151,
count=1, id=258, version=33134,
植物大战僵尸杂交版v2.6.1/【三选一】DX12加速补丁/dgVoodoo.conf
- SHA256 ec014f0b253c104266ba31e3896df1c471b08c780b583b01c2f56fda0ef8513b
- MD5 5b5b9e012f641013e388ab72348cfc1a
- SHA1 13a8e78c1d2072c922c0690eb86012fa7fd1100f
- SHA512 130aaa0297c1dee5eddb1a2e04cd62f2499c74e9a9d8baf5b89fba0f82c76ad9990bad3b28a4c5170518861de7b7d64645770a40160ca3069d0a3394a79c8bc9
- SSDEEP 384:0CHUgoLUc/IUN6EFEfKv3HjFNG3GpjJgozAtjg8zgKZeZo:jxWIUN6vfKv3HjFI2xChzkm
- MD5 SHA1 SHA512 SSDEEP
植物大战僵尸杂交版v2.6.1/【三选一】DX12加速补丁/使用说明.txt
- SHA256 fd2a903796e8c36cdefadc6cc8b57880d350e65229bac5fd09d843c27ef0aac8
- MD5 a26261eecc6a50e7f1dacd3340b70210
- SHA1 d30062002725b03940b0774c1c81a61637d39d09
- SHA512 788a653ca3608b734849df35b7753ab53eed6b6d7743f88337b9eeaea61b58da0f7937900b671c5df8756de49e7778bf79ffd12f3223209ce0303235c3eb4378
- MD5 SHA1 SHA512
植物大战僵尸杂交版v2.6.1/【三选一】DX加速补丁/D3DImm.dll
- SHA256 2a783cf64720072f2c42c93b85034f094ac825ce5660a51001cd0f9c7ba7ce37
- MD5 1becf6cd57c87a98e4a5f889e6ff290d
- SHA1 5af97b220272abe063e88dcbbb97abdbadeac90f
- SHA512 60f980d3b61a4fd084f0d422043e45f2642865286f604d504d1ac84239076fedacad2135aa6723b752239a41368d6ac0752843b6ab3753980b8adf791eee6ec3
- SSDEEP 6144:UqnXjZ8P0DNjwFZxtx/+FpMLF++srBTMRP:UGSshef+FyLF+3rFMRP
- MD5 SHA1 SHA512 SSDEEP
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
806496
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
GetD3DInterface
GetD3DVersion
Name
Size
Virtual Size
588KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
196KB
Virtual Size
200KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
3KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=2, id=260, version=30795,
count=5, id=257, version=30795,
count=59, id=1, productName=Unmarked objects,
count=2, id=261, version=30795,
count=5, id=15, productName=VS2003 (.NET) build 3077, version=3077,
count=4, id=259, version=33134,
count=10, id=261, version=33134,
count=139, id=265, version=33134,
count=1, id=256, version=33134,
count=1, id=255, version=33134,
count=1, id=151,
count=1, id=258, version=33134,
植物大战僵尸杂交版v2.6.1/【三选一】DX加速补丁/DDraw.dll
- SHA256 4e6b06ce28ae49470273dae841dccfd102e9d5d0da74c77a9150b4050af1a29b
- MD5 5037897b3bf97eab6ef7cb38f112df95
- SHA1 b7fc5aa385eeebc87798c6361b114ca259b0822b
- SHA512 39aa6bc83095cca53e73599aa5167eb1ae0d51eeb9a4695beef32632659877d763822845e1f39877b9cbee19e7043fc175699b8ab6196d3e72dfa369ba7fd2a1
- SSDEEP 3072:w1QMXMAA+RlOY1V1sGvoXi8twzfHl8G+4mYDy4WLdBDXwgkbPiM1zyrj:w1BcbW1V1sgWtwzWGAY2TLdt/kbqM1z
- MD5 SHA1 SHA512 SSDEEP
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
929216
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
AcquireDDThreadLock
CompleteCreateSysmemSurface
D3DParseUnknownCommand
DDInternalLock
DDInternalUnlock
DirectDrawCreate
DirectDrawCreateClipper
DirectDrawCreateEx
DirectDrawEnumerateA
DirectDrawEnumerateExA
DirectDrawEnumerateExW
DirectDrawEnumerateW
DllCanUnloadNow
DllGetClassObject
ReleaseDDThreadLock
Name
Size
Virtual Size
672KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
232KB
Virtual Size
232KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
11KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=1, id=260, version=30795,
count=1, id=262, version=30795,
count=6, id=15, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=260, version=33134,
count=2, id=261, version=30795,
count=13, id=257, version=30795,
count=187, id=1, productName=Unmarked objects,
count=5, id=259, version=33134,
count=12, id=261, version=33134,
count=137, id=265, version=33134,
count=1, id=256, version=33134,
count=1, id=255, version=33134,
count=3, id=151,
count=1, id=258, version=33134,
植物大战僵尸杂交版v2.6.1/【三选一】DX加速补丁/dgVoodoo.conf
- SHA256 c7e210cce096a6401e4e0aef13f50b9aa0786a10cb5e6bceeaf569fb56b0d99f
- MD5 049a1666841e144b0ae4173dc1616384
- SHA1 3990dac81a4e7afdb09c68718a7222a86d9edbe4
- SHA512 7d9f779e03836e5210f1bc2f8d8b324d318272eb9422d13ea072aa787f08098cd6d46adcc3e003d1a5a0153c89ce31e853c05dca8f36c432e73732903724fa31
- SSDEEP 384:0CHUgo/Uc/IUN6EFEfKv3HjFNG3GpjJgozAtjg8zgKZeZo:j7WIUN6vfKv3HjFI2xChzkm
- MD5 SHA1 SHA512 SSDEEP
植物大战僵尸杂交版v2.6.1/【三选一】DX加速补丁/使用说明.txt
- SHA256 fd2a903796e8c36cdefadc6cc8b57880d350e65229bac5fd09d843c27ef0aac8
- MD5 a26261eecc6a50e7f1dacd3340b70210
- SHA1 d30062002725b03940b0774c1c81a61637d39d09
- SHA512 788a653ca3608b734849df35b7753ab53eed6b6d7743f88337b9eeaea61b58da0f7937900b671c5df8756de49e7778bf79ffd12f3223209ce0303235c3eb4378
- MD5 SHA1 SHA512
植物大战僵尸杂交版v2.6.1/【不懂就看】文件用途说明.txt
- SHA256 247671ae24ae0da6f7594dcf3661e31739632dd190424005b84ba019e7462e20
- MD5 ab2ab1cd4abe8aa10acd270a611e912a
- SHA1 c457071ccce5859e3c87dacf70dcf076a6cd77ad
- SHA512 d56e336ad8aeb366534d7331dd1351a7b99b4ce714904aabfe0ab0a2d8fb37bb0d855e92ad9548260645cca43548668841baeead49bba76c258f3ec088c25b84
- MD5 SHA1 SHA512
植物大战僵尸杂交版v2.6.1/【双击打开】存档与游戏文件夹.hta
- SHA256 a7bbd61cf32178bb873d9c089f840ac7183e5fe4e12ecf31c47a32b45bd4ebfe
- MD5 a9a30eac5f53a01cf0874c5bfca611e8
- SHA1 2d3adafbf0991f1082ce3c6f504ba4b892925ab1
- SHA512 822522c956f7bef746fadd7dca5ddf8f13a5520d5064470727af47fa689a2f6445b4b08b278098a70c11efdf44a0907aae1677ba84c689d25994c1c7ee4686e3
- MD5 SHA1 SHA512
植物大战僵尸杂交版v2.6.1/【常见问题】杂交版指南.pdf
- SHA256 b4fe9353663babb448789414a11aff7cfebd88e8132b470370d1f7a73d8f16f1
- MD5 0a42394102bd0974aad056d8e070ca30
- SHA1 1385324aecdfee73570cd9be3eef4671e91673f6
- SHA512 3a05119dd225a74ac0ade3de872199b0dc68513ff4f1bb9d9b337498ccf4a503c69c0a5df52d1725e5040951e82313ee16edce9ec22ea9beebaa20b0c4f0c79b
- SSDEEP 49152:K2dqhpdjLbJB26h3OJ+Zz6T9JiTfyj7Gnl/uGIZaISvFEjJ/I1r3Q6cpcr4gm19L:7+biUOYqKfHQ7neQxpcE9BBD
- MD5 SHA1 SHA512 SSDEEP
植物大战僵尸杂交版v2.6.1/【运行后打开游戏】窗口白屏卡死.reg
- SHA256 4998b716359273338f2c526fcaa7eab37fcbb7388a9964e437bf0dcae7ab2125
- MD5 ecf5820e55e7cf58eb8affdf9d123660
- SHA1 bb2ac460f04e38af337ef92cb1dcf7cf7d68efc3
- SHA512 1fb8ae1937bf24b2cdeea900d5e07e93cb1d15ea490c416939e5a751494cb19d9fa11b5f9eef6079b856d92ac156311ee2119b2fa8f3cc9628cc12f93eb2a177
- MD5 SHA1 SHA512
植物大战僵尸杂交版v2.6.1/【需要管理员权限】数据执行保护-关闭DEP.bat
- SHA256 7de76157f31bacfab8fd6ab84cabc7df88f80cdc6de9f8e158b7306b0f355dd4
- MD5 d06419b489d82cc9423ac1b3790ab5b2
- SHA1 957cc753ae2e493182579405814a11772e0387f6
- SHA512 115b3314b3f5824ae28f29af2b4f13f8dd6cf6b54a66a41abc9396a2556708b79ed6c1ba7e175a56862d7dd1c95de127de6023547ddf4bfa8b40b1f887badf27
- MD5 SHA1 SHA512
植物大战僵尸杂交版v2.6.1/植物大战僵尸杂交版v2.6.1安装程序.exe
- IMPHASH be41bf7b8cc010b614bd36bbca606973
- SHA256 ffc7f1f83525fff84f63a0074b769bc7005a0e9610e7ce1b81013cb1b3c7228a
- MD5 98849e138ab6156ba18cb20db32bc2ac
- SHA1 676b47bd3be7d47c96327194d7a70d5fbae48b24
- SHA512 ed342f015b9442b1fedf8053292935519e90cfc065531766a0647431516ff48eeef23ed8b60b0fc3b9b450cbf2e105a7c71a592e095a0497512e475f1ebc5e95
- SSDEEP 1572864:48kRu3M0FLfwREdnoPdk9DRqXblGRbMccLFiy2p1NMPcJbfa2RA30uOROr8+CuvQ:4/GMKf9n2dk4hccsy2NC6bS2FuORFfoC
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
5
Entry point
14511
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
SetFileTime
CompareFileTime
SearchPathW
GetShortPathNameW
GetFullPathNameW
MoveFileW
SetCurrentDirectoryW
GetFileAttributesW
GetLastError
CreateDirectoryW
SetFileAttributesW
Sleep
GetTickCount
GetFileSize
GetModuleFileNameW
GetCurrentProcess
CopyFileW
ExitProcess
GetWindowsDirectoryW
GetTempPathW
GetCommandLineW
SetErrorMode
lstrcpynA
CloseHandle
lstrcpynW
GetDiskFreeSpaceW
GlobalUnlock
GlobalLock
CreateThread
LoadLibraryW
CreateProcessW
lstrcmpiA
CreateFileW
GetTempFileNameW
lstrcatW
GetProcAddress
LoadLibraryA
GetModuleHandleA
OpenProcess
lstrcpyW
GetVersionExW
GetSystemDirectoryW
GetVersion
lstrcpyA
RemoveDirectoryW
lstrcmpA
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GlobalFree
GetModuleHandleW
LoadLibraryExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
WideCharToMultiByte
lstrlenA
MulDiv
WriteFile
ReadFile
MultiByteToWideChar
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW
lstrlenW
user32
GetAsyncKeyState
IsDlgButtonChecked
ScreenToClient
GetMessagePos
CallWindowProcW
IsWindowVisible
LoadBitmapW
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
TrackPopupMenu
GetWindowRect
AppendMenuW
CreatePopupMenu
GetSystemMetrics
EndDialog
EnableMenuItem
GetSystemMenu
SetClassLongW
IsWindowEnabled
SetWindowPos
DialogBoxParamW
CheckDlgButton
CreateWindowExW
SystemParametersInfoW
RegisterClassW
SetDlgItemTextW
GetDlgItemTextW
MessageBoxIndirectW
CharNextA
CharUpperW
CharPrevW
wvsprintfW
DispatchMessageW
PeekMessageW
wsprintfA
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
LoadCursorW
SetCursor
GetWindowLongW
GetSysColor
CharNextW
GetClassInfoW
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
EndPaint
FindWindowExW
gdi32
SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectW
SetBkMode
SetTextColor
SelectObject
shell32
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetFileInfoW
ShellExecuteW
SHFileOperationW
SHGetSpecialFolderLocation
advapi32
RegEnumKeyW
RegOpenKeyExW
RegCloseKey
RegDeleteKeyW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegEnumValueW
comctl32
ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create
ole32
CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
Name
.text
Size
29KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
458KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.ndata
Size
Virtual Size
724KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
267KB
Virtual Size
266KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=3, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=17, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=172, id=1, productName=Unmarked objects,
count=12, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
$PLUGINSDIR/AccessControl.dll
- IMPHASH 6b225baf8d24583523d4f42890e12522
- SHA256 5fd5d8aec97cffaad9b7df6371b348d436cf1401e86fab614dc4cb8575428e52
- MD5 d74bb4447af48da081c7d9b499f3a023
- SHA1 dadf6e140e6fd8e49a1851cc144bb022e0adb185
- SHA512 9a15de5c6b08914f5e5bbc1c318fb0e84da28a316cf51ccddca8dfb64cd67b7ad06acac307b41d5086a0740055d327007ff890807d6853bb2e767179a3b3d758
- SSDEEP 192:0hdGZ2E0hm+Gc7ROMzCPvXWROt086dXHGrEKcDDi0b5ZsgMgiCXyo1Fp01eLLuIt:0hdGZ2E0YWV2908oj21ILud8
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14295
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GlobalAlloc
CloseHandle
lstrlenW
lstrcatW
lstrcmpiW
GetFileAttributesW
LocalAlloc
LoadLibraryA
GetCurrentProcess
GetProcAddress
lstrcpyW
GetLastError
LocalFree
GlobalFree
lstrcpynW
user32
wsprintfW
advapi32
GetSecurityDescriptorOwner
GetSecurityDescriptorGroup
GetSidSubAuthority
RegCloseKey
OpenProcessToken
RegGetKeySecurity
LookupAccountSidW
GetSidIdentifierAuthority
AdjustTokenPrivileges
LookupPrivilegeValueW
SetNamedSecurityInfoW
SetSecurityDescriptorDacl
RegOpenKeyExW
RegSetKeySecurity
IsValidSid
GetSecurityDescriptorDacl
GetUserNameW
GetNamedSecurityInfoW
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
GetSidSubAuthorityCount
InitializeSecurityDescriptor
LookupAccountNameW
SetEntriesInAclW
ClearOnFile
ClearOnRegKey
DenyOnFile
DenyOnRegKey
DisableFileInheritance
DisableRegKeyInheritance
EnableFileInheritance
EnableRegKeyInheritance
GetCurrentUserName
GetFileGroup
GetFileOwner
GetRegKeyGroup
GetRegKeyOwner
GrantOnFile
GrantOnRegKey
NameToSid
RevokeOnFile
RevokeOnRegKey
SetFileGroup
SetFileOwner
SetOnFile
SetOnRegKey
SetRegKeyGroup
SetRegKeyOwner
SidToName
Name
.text
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
348B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=7, id=123, productName=VS2005 build 50727, version=50727,
count=42, id=1, productName=Unmarked objects,
count=1, id=114, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
$PLUGINSDIR/BgWorker.dll
- IMPHASH db2755f409b81c4dbfc04f648cfb80b9
- SHA256 50f735ab8f3473423e6873d628150bbc0777be7b4f6405247cddf22bb00fb6be
- MD5 33ec04738007e665059cf40bc0f0c22b
- SHA1 4196759a922e333d9b17bda5369f14c33cd5e3bc
- SHA512 2318b01f0c2f2f021a618ca3e6e5c24a94df5d00154766b77160203b8b0a177c8581c7b688ffe69be93a69bc7fd06b8a589844d42447f5060fb4bcf94d8a9aef
- MD5 SHA1 SHA512
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4654
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
lstrcmpiA
GetModuleHandleA
CloseHandle
SetThreadPriority
CreateThread
user32
IsWindowUnicode
PostMessageA
DispatchMessageA
TranslateMessage
PeekMessageA
MsgWaitForMultipleObjects
CallAndWait
Name
.text
Size
1024B
Virtual Size
987B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
66B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=1, productName=Unmarked objects,
count=5, id=93, version=2179,
count=1, id=49, version=9044,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
$PLUGINSDIR/ShellExecAsUser.dll
- IMPHASH 528f2917a2dc35fa1bf451bc9717c5a7
- SHA256 1d1b08f87537884fcd95f4a8520bef11b89eeb852a025b04bf4cf62780992b5b
- MD5 34f26f7c3fe27d37dad8b799f61f2f06
- SHA1 13693a61ef439137b9d4a05624f1b080c3773850
- SHA512 18afe311c82574b77c344b3bb83bb9429614d51c3f408704b4544ada1a11dd9ef91fe1f41d7b7c246c4f028af65cfbe8df5b6b2455980d3426ebcf123b815891
- SSDEEP 768:ENC1Ci32Komp/MQvvt/nkfohB0kk7AwnTEDlP4viKdHw8:ENC8i3mu1neAuk2JMxKdt
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
7780
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
MultiByteToWideChar
GlobalFree
lstrcpyW
GetCurrentProcess
WaitForSingleObject
SetEvent
OutputDebugStringW
GetModuleHandleW
GetVersionExW
lstrcmpW
RaiseException
GetProcAddress
CreateEventW
lstrcpynW
GetStringTypeW
LCMapStringW
HeapSize
HeapReAlloc
RtlUnwind
GetModuleFileNameW
WriteFile
LoadLibraryW
WideCharToMultiByte
CloseHandle
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
ExitThread
GetCurrentThreadId
GetLastError
CreateThread
DecodePointer
GetCommandLineA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
ExitProcess
Sleep
IsProcessorFeaturePresent
HeapAlloc
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
user32
TranslateMessage
wsprintfW
DispatchMessageW
DefWindowProcW
DestroyWindow
GetMessageW
PostQuitMessage
PostMessageW
RegisterClassExW
GetWindowLongW
SetWindowLongW
CreateWindowExW
advapi32
OpenProcessToken
GetTokenInformation
shell32
ShellExecuteW
ole32
CoInitialize
CoUninitialize
CoCreateInstance
oleaut32
SysAllocString
SysFreeString
VariantInit
VariantClear
shlwapi
ord176
ShellExecAsUser
Name
.text
Size
21KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
436B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=24, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=14, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=67, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=2, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=15, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=102, id=1, productName=Unmarked objects,
count=2, id=175, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
$PLUGINSDIR/System.dll
- IMPHASH 039bcbc605477e8e87ec550c2e60e748
- SHA256 7851cb12fa4131f1fee5de390d650ef65cac561279f1cfe70ad16cc9780210af
- MD5 bf712f32249029466fa86756f5546950
- SHA1 75ac4dc4808ac148ddd78f6b89a51afbd4091c2e
- SHA512 13f69959b28416e0b8811c962a49309dca3f048a165457051a28a3eb51377dcaf99a15e86d7eee8f867a9e25ecf8c44da370ac8f530eeae7b5252eaba64b96f4
- SSDEEP 192:0N2gQuUwXzioj4KALV2upWzVd7q1QDXEbBZ8KxHdGzyS/Kx:rJoiO8V2upW7vQjS/
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
5
Entry point
10024
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GlobalAlloc
GlobalFree
GlobalSize
GetLastError
lstrcpyW
lstrcpynW
GetProcAddress
WideCharToMultiByte
lstrcatW
lstrlenW
lstrcmpiW
LoadLibraryW
GetModuleHandleW
MultiByteToWideChar
VirtualAlloc
VirtualProtect
FreeLibrary
user32
wsprintfW
ole32
CLSIDFromString
StringFromGUID2
Alloc
Call
Copy
Free
Get
Int64Op
Store
StrAlloc
Name
.text
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
963B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
64B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1024B
Virtual Size
588B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=7, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=21, id=1, productName=Unmarked objects,
count=6, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=4, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
$PLUGINSDIR/license.rtf
- SHA256 0c47640694d32f91febb8c837081b77bc97aeb274152dba04c4e5448845d9520
- MD5 68ccbb8270c98f94d370eb924589e7a9
- SHA1 bb9368843e0d0a78f540b6df69eb98256b4c042f
- SHA512 f4b0629d0ce11839ca384e5b041ec192b0727f80b559886029deaaf4c75b8126b1f55364f3ef4465c7aab31f953a31b635991d98e585c512ecf6ed80c24ef0eb
- SSDEEP 384:YJggqaxikc+LAFzFdozPEFJDxGtH3/tirLmi6rGsuWTzc9TLvzh4nMNLoJ0o:YJggqagFVkH3/ti3HWTz2TLFNLoJ0o
- MD5 SHA1 SHA512 SSDEEP
$PLUGINSDIR/logo.ico
- SHA256 ad55f328eb4dd9290a15dfbf4da474baed3269f934fd4a86de7b9487ee450cc4
- MD5 6fb38ffb714d6d7d1e12697513fef822
- SHA1 ce7e98021d2dbeb3108e373e217deaf3019a20d3
- SHA512 bcba7e5a9e4b619b0b9192d4e6c5efc31a2b08c65ac7339338712bc4891f9beb12625e9c816f124022129336e7ce84ba86dadd94394b09d32b0f7165361fa266
- SSDEEP 1536:e1iXJzS7Yn67R0yhOUP8WYmWzJz1bp+C7Yvyh8uMGlauNmh1k3yR7j66wBihGxhC:Ai5zqQ6z+ZN+C6Fk3yRq6/wlSzr1L
- MD5 SHA1 SHA512 SSDEEP
$PLUGINSDIR/md5dll.dll
- SHA256 32c3d36f38e7e8a8bafd4a53663203ef24a10431bda16af9e353c7d5d108610f
- MD5 7059f133ea2316b9e7e39094a52a8c34
- SHA1 ee9f1487c8152d8c42fecf2efb8ed1db68395802
- SHA512 9115986754a74d3084dd18018e757d3b281a2c2fde48c73b71dba882e13bd9b2ded0e6e7f45dc5b019e6d53d086090ccb06e18e6efeec091f655a128510cbe51
- SSDEEP 96:5mArJv6F3TqDmgK4ghEin1US36eHQZDUDgGogZcko5Nt4AMP:5XJ63LhR6inZ6dsgZkKQT
- MD5 SHA1 SHA512 SSDEEP
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
35664
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
GetFileMD5
GetMD5
GetMD5File
GetMD5Random
GetMD5String
Name
UPX0
Size
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
3KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=15, id=1, productName=Unmarked objects,
count=5, id=19, version=8034,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=2, id=49, version=9044,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
out.upx
- SHA256 1d4c3b4184538309e9572bd9e8bf2bb3e5b996592169da9bac3488d41672cfcb
- MD5 d9c765fe2f48c840178b2466c1080f15
- SHA1 98d4d7a8611b82a08a616e7fb1d41f0043b7c7d0
- SHA512 39214f9fc8ae01772e5a7d6dedd8f1b3869d45260a7512899847dbd18a2687726896077e3a45fb7b2e1ec4d15ef5bd48d2964e10ad233d38bf02fd0f21cf9e5f
- SSDEEP 96:8wViSwBT9Cg0Dvxn6GuKM9sh1gdrN9+oB7FT9nGogZcko5Nt4A:8XSACgRK8hlHZkKQ
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4580
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
992B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
162B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=15, id=1, productName=Unmarked objects,
count=5, id=19, version=8034,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=2, id=49, version=9044,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
$PLUGINSDIR/nsNiuniuSkin.dll
- IMPHASH d5c478d000c5c26f099a32477a25dc97
- SHA256 6a38b8084e7493ff57ea3eda7101fbfd6113d8470531b479ce05cefb4e34bc79
- MD5 cb9ccb0f6923b5e38221a2c9603eb669
- SHA1 7214cae53f36cab79841e9d49b07cffd7ce5e1c5
- SHA512 5d510870559737ba9f10447716a654e3aa609b64a1b753e2d3722b7b92e1768980d2ff070e639add57a13a7941c1d680ffa6e13abd47c44b1d18a230590ebb6c
- SSDEEP 24576:1pIQCUFPxa+iDkpxMJIpgT62mQh8lZIn:yUFPxarJICm25oZE
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
5
Entry point
49646
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
E:\NiuNiuCapture\nsNiuniuSkin\plugin\nsNiuniuDui\bin\nsNiuniuDUI.pdb
kernel32
TlsSetValue
TlsFree
SetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapAlloc
HeapCreate
HeapDestroy
VirtualFree
VirtualAlloc
HeapReAlloc
ReadFile
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
HeapSize
GetModuleFileNameA
SetFilePointer
CloseHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
CreateFileW
InitializeCriticalSectionAndSpinCount
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
LoadLibraryA
GetLocaleInfoW
SetEndOfFile
GetProcessHeap
TlsAlloc
MulDiv
lstrlenW
LoadLibraryW
GetCurrentDirectoryW
GetFileSize
GlobalUnlock
GlobalLock
LockResource
SizeofResource
FreeResource
LoadResource
FindResourceW
LocalFree
FormatMessageW
SystemTimeToFileTime
LocalFileTimeToFileTime
CreateDirectoryW
GetFileAttributesW
SetFileTime
lstrcmpiW
GetLocalTime
GetOEMCP
GetACP
GetCPInfo
LCMapStringW
LCMapStringA
RaiseException
RtlUnwind
GetCommandLineA
GetCurrentThreadId
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapFree
GetLastError
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
Sleep
InterlockedDecrement
InterlockedIncrement
TlsGetValue
GetProcAddress
CreateFileA
GetModuleHandleW
GetModuleHandleA
lstrcpyW
GlobalFree
lstrcpynW
WideCharToMultiByte
GlobalAlloc
ExitProcess
MultiByteToWideChar
lstrlenA
user32
GetCaretBlinkTime
KillTimer
GetFocus
ReleaseCapture
GetCursorPos
MapWindowPoints
IsWindowVisible
IsRectEmpty
EndPaint
BeginPaint
GetUpdateRect
GetActiveWindow
InvalidateRect
SetCapture
FillRect
DrawTextW
CharPrevW
SetRect
UpdateLayeredWindow
MoveWindow
GetWindowRgn
SetForegroundWindow
IsWindowEnabled
GetKeyNameTextW
MapVirtualKeyExW
GetKeyboardLayout
InvalidateRgn
CreateAcceleratorTableW
GetGUIThreadInfo
GetWindowTextLengthW
GetWindowTextW
EqualRect
MessageBoxW
SetWindowRgn
IsZoomed
IsIconic
GetCaretPos
CreatePopupMenu
AppendMenuW
EnableMenuItem
TrackPopupMenu
DestroyMenu
IntersectRect
CharNextW
SetTimer
PtInRect
ClientToScreen
SetCaretPos
ShowCaret
HideCaret
CreateCaret
SetCursor
UnionRect
InflateRect
OffsetRect
SetPropW
GetPropW
GetWindowLongW
CallWindowProcW
GetClassInfoExW
RegisterClassExW
LoadCursorW
RegisterClassW
GetSystemMetrics
LoadImageW
SendMessageW
GetParent
MonitorFromWindow
GetMonitorInfoW
GetWindow
EnableWindow
SetFocus
PostQuitMessage
ShowWindow
SetWindowLongW
CreateWindowExW
DefWindowProcW
UpdateWindow
GetClientRect
GetDC
ScreenToClient
DispatchMessageW
SetWindowTextW
IsWindow
SetWindowPos
TranslateMessage
PostMessageW
GetMessageW
GetWindowRect
DestroyWindow
GetKeyState
ReleaseDC
wsprintfW
GetSysColor
shell32
SHBrowseForFolderW
DragQueryFileW
SHGetPathFromIDListW
ole32
OleDuplicateData
RegisterDragDrop
CreateStreamOnHGlobal
ReleaseStgMedium
CLSIDFromString
OleLockRunning
CoCreateInstance
DoDragDrop
CoInitialize
CLSIDFromProgID
gdi32
BitBlt
CloseEnhMetaFile
SaveDC
SelectObject
RestoreDC
GetTextMetricsW
GetObjectW
DeleteObject
CreateFontIndirectW
AddFontMemResourceEx
SetWindowOrgEx
CreateCompatibleDC
GetDeviceCaps
PlayEnhMetaFile
CreateCompatibleBitmap
GetEnhMetaFileHeader
CreateDIBitmap
GetStockObject
CreateRoundRectRgn
CreatePen
DeleteDC
RemoveFontMemResourceEx
SetBitmapBits
SelectClipRgn
ExtSelectClipRgn
CreateRectRgnIndirect
GetClipBox
CombineRgn
CreateDIBSection
StretchBlt
SetStretchBltMode
CreateSolidBrush
LineTo
MoveToEx
CreatePenIndirect
RoundRect
SetTextColor
SetBkMode
GetObjectA
TextOutW
GetTextExtentPoint32W
GetCharABCWidthsW
SetBkColor
GdiFlush
PtInRegion
CreateRectRgn
GetBitmapBits
CreateEnhMetaFileW
oleaut32
VariantClear
SysAllocString
VariantInit
SysFreeString
imm32
ImmSetCompositionWindow
ImmReleaseContext
ImmGetContext
comctl32
ord17
_TrackMouseEvent
gdiplus
GdipImageSelectActiveFrame
GdipImageGetFrameDimensionsCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameCount
GdipGetPropertyItemSize
GdiplusStartup
GdiplusShutdown
GdipLoadImageFromStream
GdipLoadImageFromStreamICM
GdipAlloc
GdipFree
GdipDisposeImage
GdipCloneImage
GdipDeleteGraphics
GdipDeleteBrush
GdipFillRectangleI
GdipCreateFromHDC
GdipCloneBrush
GdipCreateSolidFill
GdipDeletePen
GdipDrawRectangleI
GdipSetPenMode
GdipCreatePen1
GdipDeleteFont
GdipDeleteStringFormat
GdipDrawString
GdipMeasureString
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipSetStringFormatFlags
GdipSetStringFormatTrimming
GdipCloneStringFormat
GdipStringFormatGetGenericTypographic
GdipSetInterpolationMode
GdipSetSmoothingMode
GdipSetTextRenderingHint
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipDrawImageRectI
GdipRotateWorldTransform
GdipTranslateWorldTransform
GdipGetImageHeight
GdipGetImageWidth
GdipGetPropertyItem
BindCallBack
ExitDUISetup
GetControlAttribute
GetWindowSize
InitSkinPage
InitSkinSubPage
SelectInstallDir
SetControlAttribute
SetWindowSize
SetWindowTile
ShowPage
ShowPageItem
ShowSkinSubPage
StringHelper
Name
.text
Size
723KB
Virtual Size
722KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
114KB
Virtual Size
113KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
11KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
40KB
Virtual Size
39KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=33, id=149, productName=VS2008 build 21022, version=21022,
count=1, id=110, productName=VS2005 build 50727, version=50727,
count=172, id=131, productName=VS2008 build 21022, version=21022,
count=122, id=132, productName=VS2008 build 21022, version=21022,
count=15, id=109, productName=VS2005 build 50727, version=50727,
count=19, id=123, productName=VS2005 build 50727, version=50727,
count=336, id=1, productName=Unmarked objects,
count=5, id=138, version=21022,
count=1, id=146, productName=VS2008 build 21022, version=21022,
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
$PLUGINSDIR/nsProcess.dll
- IMPHASH d6b0243dd90845123f35b66da1032c84
- SHA256 51da07da18a5486b11e0d51ebff77a3f2fcbb4d66b5665d212cc6bda480c4257
- MD5 88d3e48d1c1a051c702d47046ade7b4c
- SHA1 8fc805a8b7900b6ba895d1b809a9f3ad4c730d23
- SHA512 83299dd948b40b4e2c226256d018716dbacfa739d8e882131c7f4c028c0913bc4ed9d770deb252931f3d4890f8f385bd43dcf2a5bfe5b922ec35f4b3144247a7
- MD5 SHA1 SHA512
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4221
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
lstrlenW
CloseHandle
TerminateProcess
OpenProcess
lstrcmpiW
FreeLibrary
LocalFree
LocalAlloc
GetProcAddress
LoadLibraryW
GetVersionExW
GlobalFree
lstrcpynW
GlobalAlloc
user32
wsprintfW
_FindProcess
_KillProcess
_Unload
Name
.text
Size
1024B
Virtual Size
993B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
566B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
218B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=18, id=1, productName=Unmarked objects,
count=5, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=2, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,
$PLUGINSDIR/nsis7zU.dll
- IMPHASH b6854db8fde386e6ef367d623b9e75d8
- SHA256 e4ab3064f2e094910ae80104ef9d371ccb74ebbeeed592582cf099acd83f5fe9
- MD5 06a47571ac922f82c098622b2f5f6f63
- SHA1 8a581c33b7f2029c41edaad55d024fc0d2d7c427
- SHA512 04b3d18042f1faa536e1393179f412a5644d2cf691fbc14970f79df5c0594eeedb0826b495807a3243f27aaa0380423c1f975fe857f32e057309bb3f2a529a83
- SSDEEP 6144:rA9ssOlBrbYr5UP4m3mC/FvBbhQ1JzI+yQKiJGxdNtsm0:r2S165UP4mL/FvBtC8zQdSDmm0
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
190958
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
LeaveCriticalSection
DeleteCriticalSection
CloseHandle
GetLastError
InitializeCriticalSection
SetEvent
ResetEvent
ReleaseSemaphore
WaitForSingleObject
CreateEventW
CreateSemaphoreW
GetStdHandle
ReadFile
WriteFile
WaitForMultipleObjects
AreFileApisANSI
SetFileApisToOEM
SetFileApisToANSI
GlobalAlloc
GlobalFree
lstrcpynW
lstrcpyW
MultiByteToWideChar
WideCharToMultiByte
GetModuleFileNameW
LoadLibraryExW
LoadLibraryW
CreateDirectoryW
CreateFileW
DeleteFileW
GetFullPathNameW
EnterCriticalSection
RemoveDirectoryW
SetFileAttributesW
SetFileTime
GetTempPathW
lstrlenW
MoveFileW
FindClose
FindFirstFileW
GetFileSize
SetEndOfFile
SetFilePointer
GetCurrentProcess
GetSystemInfo
GetModuleHandleW
GetProcAddress
GetStringTypeW
WriteConsoleW
SetFilePointerEx
SetStdHandle
LCMapStringW
GetVersionExW
VirtualFree
GetTempFileNameW
VirtualAlloc
OutputDebugStringW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
HeapFree
HeapAlloc
EncodePointer
DecodePointer
CreateThread
GetCurrentThreadId
ExitThread
IsDebuggerPresent
IsProcessorFeaturePresent
RaiseException
RtlUnwind
HeapReAlloc
GetCommandLineA
GetProcessHeap
InterlockedDecrement
ExitProcess
GetModuleHandleExW
SetLastError
InterlockedIncrement
Sleep
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
HeapSize
GetFileType
FlushFileBuffers
GetConsoleCP
GetConsoleMode
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
user32
FindWindowExW
SetWindowTextW
GetDlgItem
SendMessageW
wsprintfW
CharLowerW
CharUpperW
oleaut32
VariantCopy
VariantClear
SysAllocStringByteLen
SysAllocString
SysFreeString
Extract
ExtractWithCallback
ExtractWithDetails
Name
.text
Size
218KB
Virtual Size
218KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
58KB
Virtual Size
58KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
912B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
22KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=35, id=207, version=50929,
count=18, id=205, version=50929,
count=110, id=206, version=50929,
count=1, id=188, version=30716,
count=161, id=1, productName=Unmarked objects,
count=9, id=185, version=30716,
count=23, id=206, productName=VS2012 UPD4 build 61030, version=61030,
count=119, id=207, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=202, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=201, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=204, productName=VS2012 UPD4 build 61030, version=61030,
$PLUGINSDIR/skin.zip
- SHA256 48eed97139a311cc329a89b237bef6c1438fbb3ca86d43f6e11e5e4e628ba602
- MD5 7b367f3b001486efcdbbdac82a89a12d
- SHA1 6b9d75ac79f5a407a42779f23b5e37d750143108
- SHA512 b10a7f0709946ed53516146bde31cd7af144445adc1ceac58b6ef91dbf1204c8685e8c37512e654fdc51bb0b273ddb871bfc5abab38b74a0a664e0dd28ef731b
- SSDEEP 49152:9aDByhxJo+8Xw1ugefgoP7a1eiTuqcGdhTomt3OP8/okfAg:9GBeJo+8GproPWkiJig
- MD5 SHA1 SHA512 SSDEEP
arrow_down.png
- SHA256 267cb6ad07b93059cef86b76015c7306dd4ab54408d8ef195c4c3ebb4e075ecd
- MD5 f02f7695a75befec7460a9ec5d0e0313
- SHA1 ebd553808a9886eb5dd64b07bf9a6b490fa8b411
- SHA512 b6da875a7731826e8921f4c993696c4da5b0e164f58ec85b3d93265cca2227cd34cfb209425b6409f4a9f47f4d42e236838a184b79278a667c6cfa7658c33aaa
- MD5 SHA1 SHA512
arrow_up.png
- SHA256 3b52308899d8ca80f6e92da1ce35545c7e88c7b9c5f8847712534b7bc2f2a694
- MD5 e9eda9ead029b5d3ce134d67e0a84545
- SHA1 d2ee074c25524717e3ce39bdfdc780d8575434c4
- SHA512 ce6cc5201799d2df8b7ed96001f1622b5f4afe31c2891ea2e461b66ea8891c1ad8ff006887ea74c4028de33f23a4a84dfcc5a9d08ce06306ebb9f70562ea1f10
- MD5 SHA1 SHA512
bgbottom.png
- SHA256 4955652c5b10a7543dc15378bf521143eec8daa2301d2951500a36acb66f0012
- MD5 6d07d2b2845ff673bd4c2cffa8de6434
- SHA1 726288cb53096781fe29d7191040c78a91775e2a
- SHA512 00e21bafc7f7c0bbda1df32e5b5f2fdfb587b8fcd05f93a51f74590c9b5676a8aacf6989f16fc819d40430e280c4fb8a24c3bc396ca22e586ef2d0eabd11bd51
- MD5 SHA1 SHA512
bgtop.png
- SHA256 ada2e6bb5171728d51a65d6c24ec2c34c906cb267542082ccc776839f198cee1
- MD5 bf483d49cca0feee9b795a2bec8082b7
- SHA1 b92e887399ff60f9259bb556b1272117cf92ad5e
- SHA512 bd5b6686f3cd0865f026b2ff1eef2f2ba5096bb68c0e252d2a414d722bc11eab6886d6859f9a80d021c8a60292f79c8e5589a1dcdc33298432c564d3a49588c0
- SSDEEP 12288:AwXjHejgOH3IcJLYwFRjYYfV1QmTE/B6Yp:pA3IcdTdZe0Yp
- MD5 SHA1 SHA512 SSDEEP
cancel.png
- SHA256 e768107486ec89a6c5248daa6c8a80223feb3278abaed5e5574ae35b74087281
- MD5 64ec3ae32c485b6335c81b4f2fc44f9a
- SHA1 e1d11991d78aa9b585793264957a2da7dfd8b3a7
- SHA512 9106cc665f08322ae6ea6aebc754e0c02350b11f57fddeac2a8d4049c6153abdd95784ff6da357f63d3b38e63c30773cc522c8ee797156ab28bc6d54db76ee85
- MD5 SHA1 SHA512
checkbox.png
- SHA256 aa67fd80c4499ea56ee7d3b24f6676ae2cafcbfaf2c9e9cf9164bb36ca07e6e0
- MD5 792e4eee80464dbdef27619bda7abe36
- SHA1 1d5aab47c2c60251add62343abda3e09d685b170
- SHA512 5d5d2d2d28aa69717ead2327c38823539bb15e5d5a54f324d3f306d38e70c1119da75d79ec3580c95066be558bd27ebe25a270218f3bf6d9b61cae30f2503664
- MD5 SHA1 SHA512
close.png
- SHA256 abee15f422b607526067d5f9f679b16e7476b8776dbd62bef7ba872831418ed6
- MD5 636bc5dc8c1573705486d8183ad1bb1e
- SHA1 db61d4f655f611d0ab08e967a6118510c5da9a07
- SHA512 9fee82613085e0767f47a3ea94d2ba8c1aabc602a5885a2dcf94a3de8e2bacee1397de9fd52a32607e7c1e67c1f85ed420223c576a304f4ebafe4774cbb2be0b
- MD5 SHA1 SHA512
close1.png
- SHA256 65bbd8d31471a41b5504ef8d39cc829d92cba36b469799da2f1d00004a8c90be
- MD5 b3915d18145410a66ec50bfed9371aec
- SHA1 5c8c8123d36c207c78e7902a9ac08e702f447ff9
- SHA512 2732ef35059aa0450c6dbb87ea2d845a5d6cbf7f9c2f1f53bd7a56ec66a910fc521114c2c59e2472127e98907835be5c1f806cb8c4fe1fbb43a399954d35a3f9
- MD5 SHA1 SHA512
configpage.xml
- SHA256 9af59bc702ea64d8cce629f3eb99889f83e78dc447f28f1c0c855ed139bd903b
- MD5 b3ed9d44ee7c83194330dba875e5929d
- SHA1 ae266d2e6d1d9533acca7bc360acec24a103979c
- SHA512 c4a559dc19ed8e46dcf8e608dd5a88a79be290b79a9c9278da3f28451e4eaf12e19bba63c090c0e28b2edf108563e2b9a96fc63fdcdc38700d9652366ae30eb0
- MD5 SHA1 SHA512
default.xml
- SHA256 4df251895778c5982315c162bc846de3c457914903a47cf3bdc7fe252a0f3b06
- MD5 c371bb6182e079c730a37b546301cda6
- SHA1 e1cb3e9db4791bfc01cff06020db8d466a81fa03
- SHA512 882ef02fd8fc76e9cc4dd2920a4aaaa99cec02e95ea0cb2d6ffc5e16c7ac343069758c0a5e6068d62b8d2ca71e092c1d88c207ebbec74677cbc82d89f3a470c9
- MD5 SHA1 SHA512
finishpage.xml
- SHA256 2994ae4321a2bc893c68d578a558d10725fb94630590382d122a602eecda3ee7
- MD5 554462b8d452f672e4a71be561ae5007
- SHA1 9362df820a4e72b68266cf4af2a9b7cdcfa8fd63
- SHA512 fc32c8bac8ab919a803634d26c7220b6d03d99317d5e825fb4087cb16ae05a3e16f2d1ad75d0f0fb94fcf80404d9c7ad59a92e07bafef23de36aa40f0fe348e0
- MD5 SHA1 SHA512
install.png
- SHA256 419e3ebca34426260b3b116ae0d4975b59d08b93ffaa03290d443e48b77fb5c2
- MD5 cb42261cca6e4bdffca61ea42965d2a4
- SHA1 b7eb72605c950978b9f1ead2806f7877771a0c85
- SHA512 670be9e374bcf0cd00fc92d2087944734f081362b9f6c0471a5f5eaa6ca3f79e76464588eeab8d9e93c7b4f608c42998ff8426faa0653fc9482a8969a4519d72
- SSDEEP 96:IStwknmWp80RcY1HiyrwLQiudwkj3uD6p0S:ISeknjn1XwpLkj+Wpj
- MD5 SHA1 SHA512 SSDEEP
install.xml
- SHA256 1bc66d62f829197ff7d1efd24d79ee2b38ed2206d30084472fd71348af5fb4ea
- MD5 e434d0c995953c39d438affafeddbb1f
- SHA1 945533798755c108fcdce3b0bba70250e5fe3051
- SHA512 5c0b93545c1bdcbbc5f913062c67de196fa23924da5aeeee58f4ea7b10368da0eff31a5b5872dfcff3d5260f3393fe33730abf75c2bc6a36ba1e957dfce8a50f
- MD5 SHA1 SHA512
installingpage.xml
- SHA256 a9da61af0b9fe94a876bbbd856213bd10724b75b5eddc2a4347be655f6fa1ab0
- MD5 2b0952d5a5843f838dbcd85fdaa32497
- SHA1 63362db4ccc16e1aefa4347012d161b74170d99f
- SHA512 e1f9d84992f57f035489e94ab74aa5580a2285431c11ed9c14bc301430e5a984543ae9c9dd5d8d93a822be4174302a41b2dda3ea5b31bf90e88408bbf4785626
- MD5 SHA1 SHA512
license_bg.png
- SHA256 655f76283c134fab748c6edbfce4a2d98e4e9d2389865eeb1e87c40fc92b214b
- MD5 dc1d0639de30e48b008459b2e104474a
- SHA1 6659dfc3c82652fc76be9b1c647ae53ecc5e0ad9
- SHA512 e13f83a2c8c3a0cd8db969db97cca889ad13296d73bcd813f1b1040cdb22b8686f4eaa4c3f6e663a311547ee721d689f682d91ebd8c18f70044701b866312064
- MD5 SHA1 SHA512
licensepage.xml
- SHA256 4cd478c6eaf8500702b294eae8778c658df7285ff46b7618bd28b92f38e29e2f
- MD5 cb0a2588fa0b4b1639e7fdca691bc48b
- SHA1 463db9163fa42f69d8bc72acad2f4ea39b13dea2
- SHA512 dc76cffc9c80a9d23ee3bf627246fb745afa5202402d351fd046ff3fef40f805771435b7db0233480c02de5cf9727d608637e2a21f9fab502749dae441deff33
- MD5 SHA1 SHA512
min.png
- SHA256 5a5889c949526e923f76a4ceaa25e2bd3b9753202617438c9a0f0d44e00e2936
- MD5 791f8d1d9dfa4c0c323b3a48d9f11728
- SHA1 12d266f17d44f200d0c376d1499cece782639c25
- SHA512 ebd00172aee8aed57f957408d6915e6d39d06a7b5acd2076f0a56b7e03e2ace490cb4705ccc9f94e37f691a5e18746a1bf21c347c7e1719bcae62dae02655f91
- MD5 SHA1 SHA512
min1.png
- SHA256 3d36d4b6d4b628a075cac33257ec707ad8f75255338dd8b489addc270c3b3ef5
- MD5 1be6b9890c0cc6e14b589c20086ddc26
- SHA1 888bab06dc54f86ce6083caf361afc85a6432be2
- SHA512 ea35195d97da0a61f393b907883ea0fdb29a5ce60f1456e10b90fb16449ea989a5388bd7e593761b146f0be478561749ad08d54f533d54230eb1c9aad82c2809
- MD5 SHA1 SHA512
modify.png
- SHA256 71828080bb4c39652bb13752e325e137dbced9afa52b89e5554c572e10ef59fc
- MD5 c386f421bb7f5aa535b8ea5e0daca944
- SHA1 28e54a28ea2c7f70cd49e23a23ae0e0e948d16f6
- SHA512 70b7e880f7091b445cad24dbdfee1982b77b0645671e87332a6670e2452cd86e163ae9f8f94ab309abe6d6d73f59db6199fa69d9c253619adfd7afeb0a6161bc
- MD5 SHA1 SHA512
msgBox.xml
- SHA256 b8c30ee31eefa70ea2ed038d67ef7b53888215d3cf7361455303e764a0aa3387
- MD5 055948e7b615502f4548812b36d35e52
- SHA1 aa83485cb1a6626ec40b2cae49f5751dfc4d5bae
- SHA512 8714c385272a1dad44faca80a43eec791c465fed81ae4b4b8ccca682ea72d62ed1ad6285c9ef0420614e77396896226e482f6e14665797c8f1527d7288cbe976
- MD5 SHA1 SHA512
msgBox2.xml
- SHA256 61eec58f87676c589507d1f1623e49b601060ae3d31e9f39ed024a9a96fb287b
- MD5 c6a5aab7d33ef33b3e112d5af9620929
- SHA1 deee5965edc396e364eed329b1ace8493bdcb95e
- SHA512 bdf9af060ef112824bf3512ec46697005a3f17773bd6d02d18cc4001359bbd1bdce7cc3e7beed8dac70d2f6205715e8c697d47b681b7c71094cb61384c15f0cb
- MD5 SHA1 SHA512
msgWarning.png
- SHA256 b49f5146d5d4dbf99a19b684eb70e4dd39555b1a4ce4f0f9c94b584763af939d
- MD5 ccc618849cc8e6fc26b17751c1799194
- SHA1 097c9eac802c56e4e7ac47b242384fb1a3fc6011
- SHA512 07e8de9e176ddf7d23c7c98250f2d9faeafd305d2e237a244bc54c93d9a1bc0792f609afdf40d87cbb81a04696ae3ab0d5703eb741bdd236c5ddbbafd586f107
- MD5 SHA1 SHA512
ok.png
- SHA256 b708ec43df965d403004dd347424baf83477aa965066f634ede46b437039262c
- MD5 71c02fe40772b1fa0200e8d70f5b027f
- SHA1 84aaa4573c115eb606b4e9df9ccb092238c34e91
- SHA512 ad8b26d1a9398155abf7fb6df76cfbe2a0beebc3c080736874a1f76ba1def408dda852784a84d99fa40d20e83419556551d380e79fd1a4d7d5aa9bc3a5187bd2
- MD5 SHA1 SHA512
process_bottom.png
- SHA256 6da0141d936618c06391a524580b134a4c3efd803bd027e4a3d0dc8c1df39b09
- MD5 b2b57360438ade4b87d54fd186cce683
- SHA1 415b80ad5afa6bea8e0ae8c376a2b2b9840683d4
- SHA512 b3dade74104a4a92ae1062081bc0edca633e7f4d51c0a20e6cafec35e369a8315f22bf8785f3171ee103211d60621e8ec2d3964fb855ac0630ee88db28f18684
- MD5 SHA1 SHA512
process_top.png
- SHA256 b26fda2daa5c7d145ae4580c5bc6f7b9aeadb76ddeb9f18a709a73aef36d532c
- MD5 5cd03fbcdb7e5e634df43119c3bf00ef
- SHA1 23a8a61bae4d565e0dedcc399b868e32bcf6d586
- SHA512 1c5900a570f6a49f8f186c90dbc3333c9ccae4122d59fef54880ec8f666b025846c1de9deab1248404719d5a21897f6fd209e6bc7e563b0f51e43e495b457e08
- MD5 SHA1 SHA512
scroll.png
- SHA256 c3615c51dab0004d844f2e6caa549a4c7dff6ec591a7fe6830fba9f0b19f0e04
- MD5 9f71a17cef5bd4367ac61864feb5597c
- SHA1 fc0a4a6d7b95195cb1e80b86c31d160efbc5add8
- SHA512 c1bb23fb422b4230977812c5e70b4635e6c960cfde537d6da6803d25a1ee989bdc7eb7b87a6f5723f3f006eec1acae754f9d6a17e0b848d327c64aefcdff3c4b
- MD5 SHA1 SHA512
scroll1.png
- SHA256 89a03d62b52a497aa32a29ae3e3c8d89a9e79818776e4c9b7fe85d23355d9c16
- MD5 a37498dcdf19c25831d6438f6f61ac5f
- SHA1 b2f1fd41a5ca715395001adaaa595ac7956e0d5c
- SHA512 855b196ce63dc6d6f356b488963101d7fa740142b3ff07343d9922caa511cfb757ed4a6d3cc463d380918f1e6710eb3a1bba0177a73e1b0159b62b6742daa383
- MD5 SHA1 SHA512
step1.png
- SHA256 c8b8cf5e60ccca68f76a37210a02b05fc4fbf2b60013f89853689900c011af1b
- MD5 3a41f3fff85483aa6f16ce0ad7d53a29
- SHA1 2eb4ef3751554920c7a149466fa7559059683ff2
- SHA512 fce902aa007b3612b070ebfa99728427b9f322eddbd1dd80541ff09fc1631f18a6166edf77ecb41996a616e3d373ee013c12e4d4140c5097d267105798f3f1bd
- SSDEEP 12288:p8+pCiD386S70wUG1NtzxnKXVgRF7rWKJ6r89P+rLF4Qx44i:WiD3G0wUCNxWVgRRrWTAUr5Bx44i
- MD5 SHA1 SHA512 SSDEEP
step2.png
- SHA256 3580e95dd9171e520147e0254cdcf0c265c93c14128ae37a95f297baa9d988ae
- MD5 a6f5eac9505e466b99effa0ed3d77767
- SHA1 b5f28708f13684364bbe3af7aae247b2236712fb
- SHA512 7b3ab4d1c119e454b091dc991e0b90268e48731d7a7133115baf0cb74601134895651ddaec3b1a9107e54813b5c4af0821506bfca302f709c9f2c7159bec2580
- SSDEEP 12288:gYGufiOcJGk2t7USgjotf4emSHHYIHEZqSLsObWCrGNDH+yaX:AlhIkyypcH1HKqSnbhKL/aX
- MD5 SHA1 SHA512 SSDEEP
step3.png
- SHA256 9fb65dab13267ec0bd2f8b275d80d6314873f324edd2a55915d478108f603ed4
- MD5 647864a445464be41e001afb94ffd65b
- SHA1 aa5cf667a756c402412e03c9d61fea63685162b3
- SHA512 c1806f704222de263b9c2627a6eb06a11db31741fa5018ffe0dfd367ce7fa629fb9ea3ef1abfc187153f3c74a3e1300ba6c320a0a5e83b6a812ee113f32d1ce9
- SSDEEP 12288:iN1xG6JUovuKmdG5SwKNh+nttEpj08v2+wFBjcK95Uv33:uxRgvdG5SwKN2ttSj08BwoKTqH
- MD5 SHA1 SHA512 SSDEEP
uninst_ok.png
- SHA256 b7ebdf29a3addd42e2bfd59bef2981ed85f96a16186400c899b1cae2c7a695af
- MD5 b5d57e70474e962b6832bc8ea1c42a4e
- SHA1 b9309f74fbef2a14f40e73a6530dd63e8d8ef52b
- SHA512 cabf94f7a85c894cb324cd352c5e4a9e4c3d7ede57c0a39d2525d7b740aada09ce19256ecea3e90acb364bb0da9201fd274ed676ebe51518949e5bd365b93023
- MD5 SHA1 SHA512
uninst_process_bottom.png
- SHA256 95734f20c97cdac1fe0d9b3c8937532f63ee23a6f643c6931fb4a0f7a74d795f
- MD5 d1791ccd6ba61a6e9a79abdf030535fe
- SHA1 970e2a9c04681630f7dbb4b871b04fa88c8feb7f
- SHA512 2f3cb281926966cdeadf8331d022238ffebee3e1feea0b6eed04e0cd62e6daff7e120b0909aa6d3ad9147584fb1190f5338cb92c21150c6db8f31cfcb4b0920d
- MD5 SHA1 SHA512
uninst_process_top.png
- SHA256 96f84f9d68f5706d298f7d7e676a2341595be2cf056383f2dd0a8d06c9ba48e6
- MD5 6ecfd5a1d1c124107729b233c39ff4b4
- SHA1 a4bd6071bce1925d20064293e9f886d8fe9a3090
- SHA512 b93673517dcdf5c8b2c8dbcfafc43c8c8ff792fcca1dcd591ef1ea887ffa3b87fe722dd71362ae2c69cf534f63027ada12b86cba6180fecec77c9e936107ec85
- MD5 SHA1 SHA512
uninstall.png
- SHA256 004abdc429eece774ca4c980c3066a863cb414a3e85a877c4cd66f24c1cd288b
- MD5 51cdea518dde6b91c1c5285db03c8d70
- SHA1 b6d5e91a076db3617692a6773ab38d9fdf8f46a6
- SHA512 aefa5bd754080cc3aa54943fad695d0cf49aab6d0b16728a734f8d47216078168aa7e0046357d5996e926904f5224fb08be7d5b9336d5278841116235ffdea92
- MD5 SHA1 SHA512
uninstall_bg1.png
- SHA256 9012c25afac5b2c02e470f42e67dbcc3c36b7218ea7a2e06bc05854c162f556a
- MD5 710ce1d110d7c192f431d9aad6667532
- SHA1 5e68c571cb68c248fbcca5a35a53716a938b4d52
- SHA512 9b069550bd20df558f0eb0f34c31c3c7ab4014d7b4a0697805218a6ff953e308f72965230bd36ee048e2454651faa8b16fa063be3edf79ef63aec80e675e258b
- SSDEEP 768:Ww5CwTX6fCqtfnz8VgVpuGA5jqXY5p2NI+JhxStfbnMedYxxUu:WwbTX90YVn+2wNbJnGfDtu9
- MD5 SHA1 SHA512 SSDEEP
uninstall_bg2.png
- SHA256 fb07f8041c8633fc329ec8973f1dbb4d23e54a3d27d8b380a77cef1ba7167bb3
- MD5 5d2d496a00cb340432859b7b67540648
- SHA1 991d6750a36d61dbbf5269da8b26681cd839c971
- SHA512 e60962e68f01c4a576a1166bff64c92e0897779329ec5b132fdf3419c046f31cb7691eb96004d9a8779a2e5e376898643b9f284a34911ec57590b96cd7631697
- SSDEEP 1536:5X2TTAU2TiK1UPgQgdF5aboIIzDWEHgIY:s/21Ig7TI4WEAb
- MD5 SHA1 SHA512 SSDEEP
uninstall_bg3.png
- SHA256 ecb2710e5d66a99a076f30a1237ee7e0bebeb94a080dd8c7e5bc16f33f6be01d
- MD5 2df8d436f31bca9da2c68bfff502777e
- SHA1 ed9afd9d21d18e270a1eedb0794747ec2af6db6e
- SHA512 cac93ddaf70b40f388eebbb2d53728f48c75c98beca1e3473c006fb65c340df5214998f5dee77c4393615da61bb7983c77ee7bf38062bef7ad1ef059c07bd25a
- SSDEEP 384:WnDQhqunMZuZhLey5/d1/PrNwuA6JwfVCuI/ZfG722u+9689/lo76FfGLhpEAn6x:Wtib1/z0k9YuqM76WhpD35VDXp66+Pr
- MD5 SHA1 SHA512 SSDEEP
uninstallfinishpage.xml
- SHA256 9f0a1cc1e8ec26d9094ce132d727fa5708ab90e5d328580ea65076742020a55a
- MD5 1c0645c71d42f96c09efeedda5c1e61d
- SHA1 c8d06a108c4ddad9ec6b3eca85a03d5d6f8c8abd
- SHA512 ed1e2b51f799b214ccf3648cf0f225821bb419570bce0d08cb347a15af6c4e9b82e2db096738b0fcd1a2c6a0e9887515364636ad3b5e693b274138073f7cebe0
- MD5 SHA1 SHA512
uninstallingpage.xml
- SHA256 05306109200bc38c0159f28ea85f98e65074c4f9181826eefa8fbc42cc4beb22
- MD5 46aeb6418ab20fd887d2a5f52860d2b3
- SHA1 3e34ee64bd64d457b0dbc4761f49f472b6f3316d
- SHA512 f22b46ce3f55d33c23069de31f52a7ddf259a169aa95dcf8bcbb9a5d8010591373c38c56bfd8284e6e6936bca0fb32575c9cbb93d99e1e19a9d53f8c695bdc57
- MD5 SHA1 SHA512
uninstallpage.xml
- SHA256 c92967e6f7691070fc16983189e1165c3ff975a87e9fa72aba0dc6e20010db3e
- MD5 a86435782bfa4aeb51bfde186f5666fd
- SHA1 5566ae80721418c46c47f51da74f36275c9ddf27
- SHA512 e293b590143d616080702e3d55f7aeb0d934240a1ff8062933d3d983a23524e1bf6f2be21addf9a850f4b0741a9ce43265530ac64e46cd9ee49186d037f15057
- MD5 SHA1 SHA512
app.7z
- SHA256 52f9658e75b7b37470590e229dca4dd628cef135bf12995c2ef041816ac82221
- MD5 7b1f3f2cecff5f24300d00b2a4ee4857
- SHA1 5b6584f4b73fe2664d0872afa04d6f45e967852a
- SHA512 6179a337efdc620707db4f1400eb9325f7b275e2508e2a406bac36963ae1a68411c188dc1ccce8f5fa91786e9d229745b11cb5230cf4ed15827a6b1fbc0a211c
- SSDEEP 1572864:K6fCJSk2K22Pwz6LluNaKn/7MWHaQyLyoATzJWgeX8cv3RgJJAOCX19JCs:KiTkY2PCYOaAHaQsyoAg3X7vgAOC9Cs
- MD5 SHA1 SHA512 SSDEEP
pvzHE-Launcher.exe
- IMPHASH baae94c249ba146bfd59fa89a7d865f4
- SHA256 83d16589a357b366af7e471529f41f71448bb5b5876e9cf6ccf69455d8973fb9
- MD5 8f42ad11a3571f1cdef77004c00a6539
- SHA1 a28e050175d7a2d64351fcad0d53e8d76865c085
- SHA512 168df686c6c488a47551a45ac9942aa6ff557aaaabbeaaa4fe51fb217dfcc92042f7d30083f3fe6dc7a26b1df900eb1358a37838c1e212700763fcf1be279ace
- SSDEEP 3145728:eAkcko7i8iQi/iOiriIiTiLiQiJikiFi6i4i3iwi9i0iqti4i+i1ingibieiUiTp:eAkckoFWhmxLaj
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
1318670
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB paths
pvzhe_launcher.pdb
kernel32
GetProcessTimes
GetCurrentProcess
GetCurrentProcessId
TerminateProcess
SwitchToThread
CreateThread
GetCurrentThreadId
IsProcessorFeaturePresent
GlobalMemoryStatusEx
GetSystemInfo
GetSystemTimeAsFileTime
GetSystemDirectoryW
VirtualAlloc
VirtualProtect
VirtualQuery
FreeLibrary
GetModuleFileNameW
GetProcAddress
LoadLibraryW
LocalFree
GetConsoleOutputCP
HeapSize
SetStdHandle
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
GetCommandLineA
GetModuleHandleExW
WriteFile
TlsFree
TlsSetValue
TlsAlloc
DeleteCriticalSection
CompareStringW
MultiByteToWideChar
WideCharToMultiByte
LCMapStringW
RtlUnwind
GetStartupInfoW
SetUnhandledExceptionFilter
CreateMutexA
WaitForSingleObjectEx
WaitForSingleObject
ReleaseMutex
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
HeapFree
HeapReAlloc
UnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
CreateWaitableTimerW
Sleep
SetWaitableTimer
GetModuleHandleA
GetFullPathNameW
WriteConsoleW
CreateProcessW
GetWindowsDirectoryW
CreateNamedPipeW
ExitProcess
GetModuleHandleW
GetFileType
GetConsoleMode
CopyFileExW
HeapAlloc
SetLastError
GetLastError
RaiseException
DuplicateHandle
AreFileApisANSI
TlsGetValue
DeleteFileW
CreateDirectoryW
GetFileInformationByHandle
FindClose
FindNextFileW
lstrlenW
LoadLibraryA
QueryPerformanceFrequency
WriteFileEx
GetStdHandle
SleepEx
ReadFileEx
SetFilePointerEx
FlushFileBuffers
GetCommandLineW
SetEnvironmentVariableW
GetEnvironmentVariableW
GetEnvironmentStringsW
GetCurrentDirectoryW
RtlCaptureContext
QueryPerformanceCounter
GetCurrentThread
AddVectoredExceptionHandler
FreeEnvironmentStringsW
FormatMessageW
GetFileAttributesW
FindFirstFileW
OpenProcess
ReadProcessMemory
WriteProcessMemory
SetFileAttributesW
CreateFileW
GetVersionExW
GetStringTypeW
CloseHandle
GetProcessIoCounters
GetSystemTimes
GetProcessHeap
VirtualQueryEx
advapi32
OpenProcessToken
IsValidSid
GetLengthSid
CopySid
GetTokenInformation
psapi
GetPerformanceInfo
GetProcessMemoryInfo
GetModuleFileNameExW
pdh
PdhAddCounterW
PdhCollectQueryData
PdhOpenQueryA
PdhCloseQuery
PdhRemoveCounter
PdhGetFormattedCounterValue
shell32
CommandLineToArgvW
powrprof
CallNtPowerInformation
oleaut32
SysFreeString
GetErrorInfo
SysStringLen
ntdll
NtReadFile
NtCreateFile
RtlNtStatusToDosError
NtQueryInformationProcess
NtQuerySystemInformation
NtWriteFile
RtlGetVersion
Name
.text
Size
1.3MB
Virtual Size
1.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
146.6MB
Virtual Size
146.6MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
265KB
Virtual Size
264KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
62KB
Virtual Size
61KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=14, id=259, version=28900,
count=141, id=261, version=28900,
count=21, id=260, version=28900,
count=39, id=261, version=33218,
count=19, id=260, version=33218,
count=22, id=259, version=33218,
count=373, id=1, productName=Unmarked objects,
count=233, productName=Unmarked objects (old),
count=1, id=261, version=33135,
count=1, id=255, version=33523,
count=1, id=258, version=33523,
logo.ico
- SHA256 ad55f328eb4dd9290a15dfbf4da474baed3269f934fd4a86de7b9487ee450cc4
- MD5 6fb38ffb714d6d7d1e12697513fef822
- SHA1 ce7e98021d2dbeb3108e373e217deaf3019a20d3
- SHA512 bcba7e5a9e4b619b0b9192d4e6c5efc31a2b08c65ac7339338712bc4891f9beb12625e9c816f124022129336e7ce84ba86dadd94394b09d32b0f7165361fa266
- SSDEEP 1536:e1iXJzS7Yn67R0yhOUP8WYmWzJz1bp+C7Yvyh8uMGlauNmh1k3yR7j66wBihGxhC:Ai5zqQ6z+ZN+C6Fk3yRq6/wlSzr1L
- MD5 SHA1 SHA512 SSDEEP
uninst.exe
- IMPHASH be41bf7b8cc010b614bd36bbca606973
- SHA256 81d350278884ed0dc91e94584d5fc3862877a8e9dad973e0c9a4e33bd27101e2
- MD5 81f01ef23da7d45127c0154f37db2770
- SHA1 112f45bb3c44ad5a7a00722adc40b03052841fdc
- SHA512 1fcf8f8ea017a98ceee74f1f4d06640b99809ed2ab728d6465b601e6ac69549032b8b64566d05044fe8f26e382108981c55a0c647ae2c660cc7d81f6b4685a36
- SSDEEP 49152:PVaDT1tGldzwcumeRyojfJmbTUuqvsdXTbrt3y4kYFspaN+PI39UWg:PVGT+ldXDjoj8VhJBIINUWg
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
5
Entry point
14511
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
SetFileTime
CompareFileTime
SearchPathW
GetShortPathNameW
GetFullPathNameW
MoveFileW
SetCurrentDirectoryW
GetFileAttributesW
GetLastError
CreateDirectoryW
SetFileAttributesW
Sleep
GetTickCount
GetFileSize
GetModuleFileNameW
GetCurrentProcess
CopyFileW
ExitProcess
GetWindowsDirectoryW
GetTempPathW
GetCommandLineW
SetErrorMode
lstrcpynA
CloseHandle
lstrcpynW
GetDiskFreeSpaceW
GlobalUnlock
GlobalLock
CreateThread
LoadLibraryW
CreateProcessW
lstrcmpiA
CreateFileW
GetTempFileNameW
lstrcatW
GetProcAddress
LoadLibraryA
GetModuleHandleA
OpenProcess
lstrcpyW
GetVersionExW
GetSystemDirectoryW
GetVersion
lstrcpyA
RemoveDirectoryW
lstrcmpA
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GlobalFree
GetModuleHandleW
LoadLibraryExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
WideCharToMultiByte
lstrlenA
MulDiv
WriteFile
ReadFile
MultiByteToWideChar
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW
lstrlenW
user32
GetAsyncKeyState
IsDlgButtonChecked
ScreenToClient
GetMessagePos
CallWindowProcW
IsWindowVisible
LoadBitmapW
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
TrackPopupMenu
GetWindowRect
AppendMenuW
CreatePopupMenu
GetSystemMetrics
EndDialog
EnableMenuItem
GetSystemMenu
SetClassLongW
IsWindowEnabled
SetWindowPos
DialogBoxParamW
CheckDlgButton
CreateWindowExW
SystemParametersInfoW
RegisterClassW
SetDlgItemTextW
GetDlgItemTextW
MessageBoxIndirectW
CharNextA
CharUpperW
CharPrevW
wvsprintfW
DispatchMessageW
PeekMessageW
wsprintfA
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
LoadCursorW
SetCursor
GetWindowLongW
GetSysColor
CharNextW
GetClassInfoW
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
EndPaint
FindWindowExW
gdi32
SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectW
SetBkMode
SetTextColor
SelectObject
shell32
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetFileInfoW
ShellExecuteW
SHFileOperationW
SHGetSpecialFolderLocation
advapi32
RegEnumKeyW
RegOpenKeyExW
RegCloseKey
RegDeleteKeyW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegEnumValueW
comctl32
ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create
ole32
CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
Name
.text
Size
29KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
458KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.ndata
Size
Virtual Size
724KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
267KB
Virtual Size
266KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=3, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=17, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=172, id=1, productName=Unmarked objects,
count=12, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
$PLUGINSDIR/BgWorker.dll
- IMPHASH db2755f409b81c4dbfc04f648cfb80b9
- SHA256 50f735ab8f3473423e6873d628150bbc0777be7b4f6405247cddf22bb00fb6be
- MD5 33ec04738007e665059cf40bc0f0c22b
- SHA1 4196759a922e333d9b17bda5369f14c33cd5e3bc
- SHA512 2318b01f0c2f2f021a618ca3e6e5c24a94df5d00154766b77160203b8b0a177c8581c7b688ffe69be93a69bc7fd06b8a589844d42447f5060fb4bcf94d8a9aef
- MD5 SHA1 SHA512
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4654
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
lstrcmpiA
GetModuleHandleA
CloseHandle
SetThreadPriority
CreateThread
user32
IsWindowUnicode
PostMessageA
DispatchMessageA
TranslateMessage
PeekMessageA
MsgWaitForMultipleObjects
CallAndWait
Name
.text
Size
1024B
Virtual Size
987B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
66B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=1, productName=Unmarked objects,
count=5, id=93, version=2179,
count=1, id=49, version=9044,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
$PLUGINSDIR/System.dll
- IMPHASH 039bcbc605477e8e87ec550c2e60e748
- SHA256 7851cb12fa4131f1fee5de390d650ef65cac561279f1cfe70ad16cc9780210af
- MD5 bf712f32249029466fa86756f5546950
- SHA1 75ac4dc4808ac148ddd78f6b89a51afbd4091c2e
- SHA512 13f69959b28416e0b8811c962a49309dca3f048a165457051a28a3eb51377dcaf99a15e86d7eee8f867a9e25ecf8c44da370ac8f530eeae7b5252eaba64b96f4
- SSDEEP 192:0N2gQuUwXzioj4KALV2upWzVd7q1QDXEbBZ8KxHdGzyS/Kx:rJoiO8V2upW7vQjS/
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
5
Entry point
10024
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GlobalAlloc
GlobalFree
GlobalSize
GetLastError
lstrcpyW
lstrcpynW
GetProcAddress
WideCharToMultiByte
lstrcatW
lstrlenW
lstrcmpiW
LoadLibraryW
GetModuleHandleW
MultiByteToWideChar
VirtualAlloc
VirtualProtect
FreeLibrary
user32
wsprintfW
ole32
CLSIDFromString
StringFromGUID2
Alloc
Call
Copy
Free
Get
Int64Op
Store
StrAlloc
Name
.text
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
963B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
64B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1024B
Virtual Size
588B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=7, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=21, id=1, productName=Unmarked objects,
count=6, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=4, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
$PLUGINSDIR/nsNiuniuSkin.dll
- IMPHASH d5c478d000c5c26f099a32477a25dc97
- SHA256 6a38b8084e7493ff57ea3eda7101fbfd6113d8470531b479ce05cefb4e34bc79
- MD5 cb9ccb0f6923b5e38221a2c9603eb669
- SHA1 7214cae53f36cab79841e9d49b07cffd7ce5e1c5
- SHA512 5d510870559737ba9f10447716a654e3aa609b64a1b753e2d3722b7b92e1768980d2ff070e639add57a13a7941c1d680ffa6e13abd47c44b1d18a230590ebb6c
- SSDEEP 24576:1pIQCUFPxa+iDkpxMJIpgT62mQh8lZIn:yUFPxarJICm25oZE
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
5
Entry point
49646
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
E:\NiuNiuCapture\nsNiuniuSkin\plugin\nsNiuniuDui\bin\nsNiuniuDUI.pdb
kernel32
TlsSetValue
TlsFree
SetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapAlloc
HeapCreate
HeapDestroy
VirtualFree
VirtualAlloc
HeapReAlloc
ReadFile
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
HeapSize
GetModuleFileNameA
SetFilePointer
CloseHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
CreateFileW
InitializeCriticalSectionAndSpinCount
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
LoadLibraryA
GetLocaleInfoW
SetEndOfFile
GetProcessHeap
TlsAlloc
MulDiv
lstrlenW
LoadLibraryW
GetCurrentDirectoryW
GetFileSize
GlobalUnlock
GlobalLock
LockResource
SizeofResource
FreeResource
LoadResource
FindResourceW
LocalFree
FormatMessageW
SystemTimeToFileTime
LocalFileTimeToFileTime
CreateDirectoryW
GetFileAttributesW
SetFileTime
lstrcmpiW
GetLocalTime
GetOEMCP
GetACP
GetCPInfo
LCMapStringW
LCMapStringA
RaiseException
RtlUnwind
GetCommandLineA
GetCurrentThreadId
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapFree
GetLastError
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
Sleep
InterlockedDecrement
InterlockedIncrement
TlsGetValue
GetProcAddress
CreateFileA
GetModuleHandleW
GetModuleHandleA
lstrcpyW
GlobalFree
lstrcpynW
WideCharToMultiByte
GlobalAlloc
ExitProcess
MultiByteToWideChar
lstrlenA
user32
GetCaretBlinkTime
KillTimer
GetFocus
ReleaseCapture
GetCursorPos
MapWindowPoints
IsWindowVisible
IsRectEmpty
EndPaint
BeginPaint
GetUpdateRect
GetActiveWindow
InvalidateRect
SetCapture
FillRect
DrawTextW
CharPrevW
SetRect
UpdateLayeredWindow
MoveWindow
GetWindowRgn
SetForegroundWindow
IsWindowEnabled
GetKeyNameTextW
MapVirtualKeyExW
GetKeyboardLayout
InvalidateRgn
CreateAcceleratorTableW
GetGUIThreadInfo
GetWindowTextLengthW
GetWindowTextW
EqualRect
MessageBoxW
SetWindowRgn
IsZoomed
IsIconic
GetCaretPos
CreatePopupMenu
AppendMenuW
EnableMenuItem
TrackPopupMenu
DestroyMenu
IntersectRect
CharNextW
SetTimer
PtInRect
ClientToScreen
SetCaretPos
ShowCaret
HideCaret
CreateCaret
SetCursor
UnionRect
InflateRect
OffsetRect
SetPropW
GetPropW
GetWindowLongW
CallWindowProcW
GetClassInfoExW
RegisterClassExW
LoadCursorW
RegisterClassW
GetSystemMetrics
LoadImageW
SendMessageW
GetParent
MonitorFromWindow
GetMonitorInfoW
GetWindow
EnableWindow
SetFocus
PostQuitMessage
ShowWindow
SetWindowLongW
CreateWindowExW
DefWindowProcW
UpdateWindow
GetClientRect
GetDC
ScreenToClient
DispatchMessageW
SetWindowTextW
IsWindow
SetWindowPos
TranslateMessage
PostMessageW
GetMessageW
GetWindowRect
DestroyWindow
GetKeyState
ReleaseDC
wsprintfW
GetSysColor
shell32
SHBrowseForFolderW
DragQueryFileW
SHGetPathFromIDListW
ole32
OleDuplicateData
RegisterDragDrop
CreateStreamOnHGlobal
ReleaseStgMedium
CLSIDFromString
OleLockRunning
CoCreateInstance
DoDragDrop
CoInitialize
CLSIDFromProgID
gdi32
BitBlt
CloseEnhMetaFile
SaveDC
SelectObject
RestoreDC
GetTextMetricsW
GetObjectW
DeleteObject
CreateFontIndirectW
AddFontMemResourceEx
SetWindowOrgEx
CreateCompatibleDC
GetDeviceCaps
PlayEnhMetaFile
CreateCompatibleBitmap
GetEnhMetaFileHeader
CreateDIBitmap
GetStockObject
CreateRoundRectRgn
CreatePen
DeleteDC
RemoveFontMemResourceEx
SetBitmapBits
SelectClipRgn
ExtSelectClipRgn
CreateRectRgnIndirect
GetClipBox
CombineRgn
CreateDIBSection
StretchBlt
SetStretchBltMode
CreateSolidBrush
LineTo
MoveToEx
CreatePenIndirect
RoundRect
SetTextColor
SetBkMode
GetObjectA
TextOutW
GetTextExtentPoint32W
GetCharABCWidthsW
SetBkColor
GdiFlush
PtInRegion
CreateRectRgn
GetBitmapBits
CreateEnhMetaFileW
oleaut32
VariantClear
SysAllocString
VariantInit
SysFreeString
imm32
ImmSetCompositionWindow
ImmReleaseContext
ImmGetContext
comctl32
ord17
_TrackMouseEvent
gdiplus
GdipImageSelectActiveFrame
GdipImageGetFrameDimensionsCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameCount
GdipGetPropertyItemSize
GdiplusStartup
GdiplusShutdown
GdipLoadImageFromStream
GdipLoadImageFromStreamICM
GdipAlloc
GdipFree
GdipDisposeImage
GdipCloneImage
GdipDeleteGraphics
GdipDeleteBrush
GdipFillRectangleI
GdipCreateFromHDC
GdipCloneBrush
GdipCreateSolidFill
GdipDeletePen
GdipDrawRectangleI
GdipSetPenMode
GdipCreatePen1
GdipDeleteFont
GdipDeleteStringFormat
GdipDrawString
GdipMeasureString
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipSetStringFormatFlags
GdipSetStringFormatTrimming
GdipCloneStringFormat
GdipStringFormatGetGenericTypographic
GdipSetInterpolationMode
GdipSetSmoothingMode
GdipSetTextRenderingHint
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipDrawImageRectI
GdipRotateWorldTransform
GdipTranslateWorldTransform
GdipGetImageHeight
GdipGetImageWidth
GdipGetPropertyItem
BindCallBack
ExitDUISetup
GetControlAttribute
GetWindowSize
InitSkinPage
InitSkinSubPage
SelectInstallDir
SetControlAttribute
SetWindowSize
SetWindowTile
ShowPage
ShowPageItem
ShowSkinSubPage
StringHelper
Name
.text
Size
723KB
Virtual Size
722KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
114KB
Virtual Size
113KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
11KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
40KB
Virtual Size
39KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=33, id=149, productName=VS2008 build 21022, version=21022,
count=1, id=110, productName=VS2005 build 50727, version=50727,
count=172, id=131, productName=VS2008 build 21022, version=21022,
count=122, id=132, productName=VS2008 build 21022, version=21022,
count=15, id=109, productName=VS2005 build 50727, version=50727,
count=19, id=123, productName=VS2005 build 50727, version=50727,
count=336, id=1, productName=Unmarked objects,
count=5, id=138, version=21022,
count=1, id=146, productName=VS2008 build 21022, version=21022,
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
$PLUGINSDIR/nsProcess.dll
- IMPHASH d6b0243dd90845123f35b66da1032c84
- SHA256 51da07da18a5486b11e0d51ebff77a3f2fcbb4d66b5665d212cc6bda480c4257
- MD5 88d3e48d1c1a051c702d47046ade7b4c
- SHA1 8fc805a8b7900b6ba895d1b809a9f3ad4c730d23
- SHA512 83299dd948b40b4e2c226256d018716dbacfa739d8e882131c7f4c028c0913bc4ed9d770deb252931f3d4890f8f385bd43dcf2a5bfe5b922ec35f4b3144247a7
- MD5 SHA1 SHA512
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4221
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
lstrlenW
CloseHandle
TerminateProcess
OpenProcess
lstrcmpiW
FreeLibrary
LocalFree
LocalAlloc
GetProcAddress
LoadLibraryW
GetVersionExW
GlobalFree
lstrcpynW
GlobalAlloc
user32
wsprintfW
_FindProcess
_KillProcess
_Unload
Name
.text
Size
1024B
Virtual Size
993B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
566B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
218B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=18, id=1, productName=Unmarked objects,
count=5, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=2, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,
$PLUGINSDIR/skin.zip
- SHA256 48eed97139a311cc329a89b237bef6c1438fbb3ca86d43f6e11e5e4e628ba602
- MD5 7b367f3b001486efcdbbdac82a89a12d
- SHA1 6b9d75ac79f5a407a42779f23b5e37d750143108
- SHA512 b10a7f0709946ed53516146bde31cd7af144445adc1ceac58b6ef91dbf1204c8685e8c37512e654fdc51bb0b273ddb871bfc5abab38b74a0a664e0dd28ef731b
- SSDEEP 49152:9aDByhxJo+8Xw1ugefgoP7a1eiTuqcGdhTomt3OP8/okfAg:9GBeJo+8GproPWkiJig
- MD5 SHA1 SHA512 SSDEEP
arrow_down.png
- SHA256 267cb6ad07b93059cef86b76015c7306dd4ab54408d8ef195c4c3ebb4e075ecd
- MD5 f02f7695a75befec7460a9ec5d0e0313
- SHA1 ebd553808a9886eb5dd64b07bf9a6b490fa8b411
- SHA512 b6da875a7731826e8921f4c993696c4da5b0e164f58ec85b3d93265cca2227cd34cfb209425b6409f4a9f47f4d42e236838a184b79278a667c6cfa7658c33aaa
- MD5 SHA1 SHA512
arrow_up.png
- SHA256 3b52308899d8ca80f6e92da1ce35545c7e88c7b9c5f8847712534b7bc2f2a694
- MD5 e9eda9ead029b5d3ce134d67e0a84545
- SHA1 d2ee074c25524717e3ce39bdfdc780d8575434c4
- SHA512 ce6cc5201799d2df8b7ed96001f1622b5f4afe31c2891ea2e461b66ea8891c1ad8ff006887ea74c4028de33f23a4a84dfcc5a9d08ce06306ebb9f70562ea1f10
- MD5 SHA1 SHA512
bgbottom.png
- SHA256 4955652c5b10a7543dc15378bf521143eec8daa2301d2951500a36acb66f0012
- MD5 6d07d2b2845ff673bd4c2cffa8de6434
- SHA1 726288cb53096781fe29d7191040c78a91775e2a
- SHA512 00e21bafc7f7c0bbda1df32e5b5f2fdfb587b8fcd05f93a51f74590c9b5676a8aacf6989f16fc819d40430e280c4fb8a24c3bc396ca22e586ef2d0eabd11bd51
- MD5 SHA1 SHA512
bgtop.png
- SHA256 ada2e6bb5171728d51a65d6c24ec2c34c906cb267542082ccc776839f198cee1
- MD5 bf483d49cca0feee9b795a2bec8082b7
- SHA1 b92e887399ff60f9259bb556b1272117cf92ad5e
- SHA512 bd5b6686f3cd0865f026b2ff1eef2f2ba5096bb68c0e252d2a414d722bc11eab6886d6859f9a80d021c8a60292f79c8e5589a1dcdc33298432c564d3a49588c0
- SSDEEP 12288:AwXjHejgOH3IcJLYwFRjYYfV1QmTE/B6Yp:pA3IcdTdZe0Yp
- MD5 SHA1 SHA512 SSDEEP
cancel.png
- SHA256 e768107486ec89a6c5248daa6c8a80223feb3278abaed5e5574ae35b74087281
- MD5 64ec3ae32c485b6335c81b4f2fc44f9a
- SHA1 e1d11991d78aa9b585793264957a2da7dfd8b3a7
- SHA512 9106cc665f08322ae6ea6aebc754e0c02350b11f57fddeac2a8d4049c6153abdd95784ff6da357f63d3b38e63c30773cc522c8ee797156ab28bc6d54db76ee85
- MD5 SHA1 SHA512
checkbox.png
- SHA256 aa67fd80c4499ea56ee7d3b24f6676ae2cafcbfaf2c9e9cf9164bb36ca07e6e0
- MD5 792e4eee80464dbdef27619bda7abe36
- SHA1 1d5aab47c2c60251add62343abda3e09d685b170
- SHA512 5d5d2d2d28aa69717ead2327c38823539bb15e5d5a54f324d3f306d38e70c1119da75d79ec3580c95066be558bd27ebe25a270218f3bf6d9b61cae30f2503664
- MD5 SHA1 SHA512
close.png
- SHA256 abee15f422b607526067d5f9f679b16e7476b8776dbd62bef7ba872831418ed6
- MD5 636bc5dc8c1573705486d8183ad1bb1e
- SHA1 db61d4f655f611d0ab08e967a6118510c5da9a07
- SHA512 9fee82613085e0767f47a3ea94d2ba8c1aabc602a5885a2dcf94a3de8e2bacee1397de9fd52a32607e7c1e67c1f85ed420223c576a304f4ebafe4774cbb2be0b
- MD5 SHA1 SHA512
close1.png
- SHA256 65bbd8d31471a41b5504ef8d39cc829d92cba36b469799da2f1d00004a8c90be
- MD5 b3915d18145410a66ec50bfed9371aec
- SHA1 5c8c8123d36c207c78e7902a9ac08e702f447ff9
- SHA512 2732ef35059aa0450c6dbb87ea2d845a5d6cbf7f9c2f1f53bd7a56ec66a910fc521114c2c59e2472127e98907835be5c1f806cb8c4fe1fbb43a399954d35a3f9
- MD5 SHA1 SHA512
configpage.xml
- SHA256 9af59bc702ea64d8cce629f3eb99889f83e78dc447f28f1c0c855ed139bd903b
- MD5 b3ed9d44ee7c83194330dba875e5929d
- SHA1 ae266d2e6d1d9533acca7bc360acec24a103979c
- SHA512 c4a559dc19ed8e46dcf8e608dd5a88a79be290b79a9c9278da3f28451e4eaf12e19bba63c090c0e28b2edf108563e2b9a96fc63fdcdc38700d9652366ae30eb0
- MD5 SHA1 SHA512
default.xml
- SHA256 4df251895778c5982315c162bc846de3c457914903a47cf3bdc7fe252a0f3b06
- MD5 c371bb6182e079c730a37b546301cda6
- SHA1 e1cb3e9db4791bfc01cff06020db8d466a81fa03
- SHA512 882ef02fd8fc76e9cc4dd2920a4aaaa99cec02e95ea0cb2d6ffc5e16c7ac343069758c0a5e6068d62b8d2ca71e092c1d88c207ebbec74677cbc82d89f3a470c9
- MD5 SHA1 SHA512
finishpage.xml
- SHA256 2994ae4321a2bc893c68d578a558d10725fb94630590382d122a602eecda3ee7
- MD5 554462b8d452f672e4a71be561ae5007
- SHA1 9362df820a4e72b68266cf4af2a9b7cdcfa8fd63
- SHA512 fc32c8bac8ab919a803634d26c7220b6d03d99317d5e825fb4087cb16ae05a3e16f2d1ad75d0f0fb94fcf80404d9c7ad59a92e07bafef23de36aa40f0fe348e0
- MD5 SHA1 SHA512
install.png
- SHA256 419e3ebca34426260b3b116ae0d4975b59d08b93ffaa03290d443e48b77fb5c2
- MD5 cb42261cca6e4bdffca61ea42965d2a4
- SHA1 b7eb72605c950978b9f1ead2806f7877771a0c85
- SHA512 670be9e374bcf0cd00fc92d2087944734f081362b9f6c0471a5f5eaa6ca3f79e76464588eeab8d9e93c7b4f608c42998ff8426faa0653fc9482a8969a4519d72
- SSDEEP 96:IStwknmWp80RcY1HiyrwLQiudwkj3uD6p0S:ISeknjn1XwpLkj+Wpj
- MD5 SHA1 SHA512 SSDEEP
install.xml
- SHA256 1bc66d62f829197ff7d1efd24d79ee2b38ed2206d30084472fd71348af5fb4ea
- MD5 e434d0c995953c39d438affafeddbb1f
- SHA1 945533798755c108fcdce3b0bba70250e5fe3051
- SHA512 5c0b93545c1bdcbbc5f913062c67de196fa23924da5aeeee58f4ea7b10368da0eff31a5b5872dfcff3d5260f3393fe33730abf75c2bc6a36ba1e957dfce8a50f
- MD5 SHA1 SHA512
installingpage.xml
- SHA256 a9da61af0b9fe94a876bbbd856213bd10724b75b5eddc2a4347be655f6fa1ab0
- MD5 2b0952d5a5843f838dbcd85fdaa32497
- SHA1 63362db4ccc16e1aefa4347012d161b74170d99f
- SHA512 e1f9d84992f57f035489e94ab74aa5580a2285431c11ed9c14bc301430e5a984543ae9c9dd5d8d93a822be4174302a41b2dda3ea5b31bf90e88408bbf4785626
- MD5 SHA1 SHA512
license_bg.png
- SHA256 655f76283c134fab748c6edbfce4a2d98e4e9d2389865eeb1e87c40fc92b214b
- MD5 dc1d0639de30e48b008459b2e104474a
- SHA1 6659dfc3c82652fc76be9b1c647ae53ecc5e0ad9
- SHA512 e13f83a2c8c3a0cd8db969db97cca889ad13296d73bcd813f1b1040cdb22b8686f4eaa4c3f6e663a311547ee721d689f682d91ebd8c18f70044701b866312064
- MD5 SHA1 SHA512
licensepage.xml
- SHA256 4cd478c6eaf8500702b294eae8778c658df7285ff46b7618bd28b92f38e29e2f
- MD5 cb0a2588fa0b4b1639e7fdca691bc48b
- SHA1 463db9163fa42f69d8bc72acad2f4ea39b13dea2
- SHA512 dc76cffc9c80a9d23ee3bf627246fb745afa5202402d351fd046ff3fef40f805771435b7db0233480c02de5cf9727d608637e2a21f9fab502749dae441deff33
- MD5 SHA1 SHA512
min.png
- SHA256 5a5889c949526e923f76a4ceaa25e2bd3b9753202617438c9a0f0d44e00e2936
- MD5 791f8d1d9dfa4c0c323b3a48d9f11728
- SHA1 12d266f17d44f200d0c376d1499cece782639c25
- SHA512 ebd00172aee8aed57f957408d6915e6d39d06a7b5acd2076f0a56b7e03e2ace490cb4705ccc9f94e37f691a5e18746a1bf21c347c7e1719bcae62dae02655f91
- MD5 SHA1 SHA512
min1.png
- SHA256 3d36d4b6d4b628a075cac33257ec707ad8f75255338dd8b489addc270c3b3ef5
- MD5 1be6b9890c0cc6e14b589c20086ddc26
- SHA1 888bab06dc54f86ce6083caf361afc85a6432be2
- SHA512 ea35195d97da0a61f393b907883ea0fdb29a5ce60f1456e10b90fb16449ea989a5388bd7e593761b146f0be478561749ad08d54f533d54230eb1c9aad82c2809
- MD5 SHA1 SHA512
modify.png
- SHA256 71828080bb4c39652bb13752e325e137dbced9afa52b89e5554c572e10ef59fc
- MD5 c386f421bb7f5aa535b8ea5e0daca944
- SHA1 28e54a28ea2c7f70cd49e23a23ae0e0e948d16f6
- SHA512 70b7e880f7091b445cad24dbdfee1982b77b0645671e87332a6670e2452cd86e163ae9f8f94ab309abe6d6d73f59db6199fa69d9c253619adfd7afeb0a6161bc
- MD5 SHA1 SHA512
msgBox.xml
- SHA256 b8c30ee31eefa70ea2ed038d67ef7b53888215d3cf7361455303e764a0aa3387
- MD5 055948e7b615502f4548812b36d35e52
- SHA1 aa83485cb1a6626ec40b2cae49f5751dfc4d5bae
- SHA512 8714c385272a1dad44faca80a43eec791c465fed81ae4b4b8ccca682ea72d62ed1ad6285c9ef0420614e77396896226e482f6e14665797c8f1527d7288cbe976
- MD5 SHA1 SHA512
msgBox2.xml
- SHA256 61eec58f87676c589507d1f1623e49b601060ae3d31e9f39ed024a9a96fb287b
- MD5 c6a5aab7d33ef33b3e112d5af9620929
- SHA1 deee5965edc396e364eed329b1ace8493bdcb95e
- SHA512 bdf9af060ef112824bf3512ec46697005a3f17773bd6d02d18cc4001359bbd1bdce7cc3e7beed8dac70d2f6205715e8c697d47b681b7c71094cb61384c15f0cb
- MD5 SHA1 SHA512
msgWarning.png
- SHA256 b49f5146d5d4dbf99a19b684eb70e4dd39555b1a4ce4f0f9c94b584763af939d
- MD5 ccc618849cc8e6fc26b17751c1799194
- SHA1 097c9eac802c56e4e7ac47b242384fb1a3fc6011
- SHA512 07e8de9e176ddf7d23c7c98250f2d9faeafd305d2e237a244bc54c93d9a1bc0792f609afdf40d87cbb81a04696ae3ab0d5703eb741bdd236c5ddbbafd586f107
- MD5 SHA1 SHA512
ok.png
- SHA256 b708ec43df965d403004dd347424baf83477aa965066f634ede46b437039262c
- MD5 71c02fe40772b1fa0200e8d70f5b027f
- SHA1 84aaa4573c115eb606b4e9df9ccb092238c34e91
- SHA512 ad8b26d1a9398155abf7fb6df76cfbe2a0beebc3c080736874a1f76ba1def408dda852784a84d99fa40d20e83419556551d380e79fd1a4d7d5aa9bc3a5187bd2
- MD5 SHA1 SHA512
process_bottom.png
- SHA256 6da0141d936618c06391a524580b134a4c3efd803bd027e4a3d0dc8c1df39b09
- MD5 b2b57360438ade4b87d54fd186cce683
- SHA1 415b80ad5afa6bea8e0ae8c376a2b2b9840683d4
- SHA512 b3dade74104a4a92ae1062081bc0edca633e7f4d51c0a20e6cafec35e369a8315f22bf8785f3171ee103211d60621e8ec2d3964fb855ac0630ee88db28f18684
- MD5 SHA1 SHA512
process_top.png
- SHA256 b26fda2daa5c7d145ae4580c5bc6f7b9aeadb76ddeb9f18a709a73aef36d532c
- MD5 5cd03fbcdb7e5e634df43119c3bf00ef
- SHA1 23a8a61bae4d565e0dedcc399b868e32bcf6d586
- SHA512 1c5900a570f6a49f8f186c90dbc3333c9ccae4122d59fef54880ec8f666b025846c1de9deab1248404719d5a21897f6fd209e6bc7e563b0f51e43e495b457e08
- MD5 SHA1 SHA512
scroll.png
- SHA256 c3615c51dab0004d844f2e6caa549a4c7dff6ec591a7fe6830fba9f0b19f0e04
- MD5 9f71a17cef5bd4367ac61864feb5597c
- SHA1 fc0a4a6d7b95195cb1e80b86c31d160efbc5add8
- SHA512 c1bb23fb422b4230977812c5e70b4635e6c960cfde537d6da6803d25a1ee989bdc7eb7b87a6f5723f3f006eec1acae754f9d6a17e0b848d327c64aefcdff3c4b
- MD5 SHA1 SHA512
scroll1.png
- SHA256 89a03d62b52a497aa32a29ae3e3c8d89a9e79818776e4c9b7fe85d23355d9c16
- MD5 a37498dcdf19c25831d6438f6f61ac5f
- SHA1 b2f1fd41a5ca715395001adaaa595ac7956e0d5c
- SHA512 855b196ce63dc6d6f356b488963101d7fa740142b3ff07343d9922caa511cfb757ed4a6d3cc463d380918f1e6710eb3a1bba0177a73e1b0159b62b6742daa383
- MD5 SHA1 SHA512
step1.png
- SHA256 c8b8cf5e60ccca68f76a37210a02b05fc4fbf2b60013f89853689900c011af1b
- MD5 3a41f3fff85483aa6f16ce0ad7d53a29
- SHA1 2eb4ef3751554920c7a149466fa7559059683ff2
- SHA512 fce902aa007b3612b070ebfa99728427b9f322eddbd1dd80541ff09fc1631f18a6166edf77ecb41996a616e3d373ee013c12e4d4140c5097d267105798f3f1bd
- SSDEEP 12288:p8+pCiD386S70wUG1NtzxnKXVgRF7rWKJ6r89P+rLF4Qx44i:WiD3G0wUCNxWVgRRrWTAUr5Bx44i
- MD5 SHA1 SHA512 SSDEEP
step2.png
- SHA256 3580e95dd9171e520147e0254cdcf0c265c93c14128ae37a95f297baa9d988ae
- MD5 a6f5eac9505e466b99effa0ed3d77767
- SHA1 b5f28708f13684364bbe3af7aae247b2236712fb
- SHA512 7b3ab4d1c119e454b091dc991e0b90268e48731d7a7133115baf0cb74601134895651ddaec3b1a9107e54813b5c4af0821506bfca302f709c9f2c7159bec2580
- SSDEEP 12288:gYGufiOcJGk2t7USgjotf4emSHHYIHEZqSLsObWCrGNDH+yaX:AlhIkyypcH1HKqSnbhKL/aX
- MD5 SHA1 SHA512 SSDEEP
step3.png
- SHA256 9fb65dab13267ec0bd2f8b275d80d6314873f324edd2a55915d478108f603ed4
- MD5 647864a445464be41e001afb94ffd65b
- SHA1 aa5cf667a756c402412e03c9d61fea63685162b3
- SHA512 c1806f704222de263b9c2627a6eb06a11db31741fa5018ffe0dfd367ce7fa629fb9ea3ef1abfc187153f3c74a3e1300ba6c320a0a5e83b6a812ee113f32d1ce9
- SSDEEP 12288:iN1xG6JUovuKmdG5SwKNh+nttEpj08v2+wFBjcK95Uv33:uxRgvdG5SwKN2ttSj08BwoKTqH
- MD5 SHA1 SHA512 SSDEEP
uninst_ok.png
- SHA256 b7ebdf29a3addd42e2bfd59bef2981ed85f96a16186400c899b1cae2c7a695af
- MD5 b5d57e70474e962b6832bc8ea1c42a4e
- SHA1 b9309f74fbef2a14f40e73a6530dd63e8d8ef52b
- SHA512 cabf94f7a85c894cb324cd352c5e4a9e4c3d7ede57c0a39d2525d7b740aada09ce19256ecea3e90acb364bb0da9201fd274ed676ebe51518949e5bd365b93023
- MD5 SHA1 SHA512
uninst_process_bottom.png
- SHA256 95734f20c97cdac1fe0d9b3c8937532f63ee23a6f643c6931fb4a0f7a74d795f
- MD5 d1791ccd6ba61a6e9a79abdf030535fe
- SHA1 970e2a9c04681630f7dbb4b871b04fa88c8feb7f
- SHA512 2f3cb281926966cdeadf8331d022238ffebee3e1feea0b6eed04e0cd62e6daff7e120b0909aa6d3ad9147584fb1190f5338cb92c21150c6db8f31cfcb4b0920d
- MD5 SHA1 SHA512
uninst_process_top.png
- SHA256 96f84f9d68f5706d298f7d7e676a2341595be2cf056383f2dd0a8d06c9ba48e6
- MD5 6ecfd5a1d1c124107729b233c39ff4b4
- SHA1 a4bd6071bce1925d20064293e9f886d8fe9a3090
- SHA512 b93673517dcdf5c8b2c8dbcfafc43c8c8ff792fcca1dcd591ef1ea887ffa3b87fe722dd71362ae2c69cf534f63027ada12b86cba6180fecec77c9e936107ec85
- MD5 SHA1 SHA512
uninstall.png
- SHA256 004abdc429eece774ca4c980c3066a863cb414a3e85a877c4cd66f24c1cd288b
- MD5 51cdea518dde6b91c1c5285db03c8d70
- SHA1 b6d5e91a076db3617692a6773ab38d9fdf8f46a6
- SHA512 aefa5bd754080cc3aa54943fad695d0cf49aab6d0b16728a734f8d47216078168aa7e0046357d5996e926904f5224fb08be7d5b9336d5278841116235ffdea92
- MD5 SHA1 SHA512
uninstall_bg1.png
- SHA256 9012c25afac5b2c02e470f42e67dbcc3c36b7218ea7a2e06bc05854c162f556a
- MD5 710ce1d110d7c192f431d9aad6667532
- SHA1 5e68c571cb68c248fbcca5a35a53716a938b4d52
- SHA512 9b069550bd20df558f0eb0f34c31c3c7ab4014d7b4a0697805218a6ff953e308f72965230bd36ee048e2454651faa8b16fa063be3edf79ef63aec80e675e258b
- SSDEEP 768:Ww5CwTX6fCqtfnz8VgVpuGA5jqXY5p2NI+JhxStfbnMedYxxUu:WwbTX90YVn+2wNbJnGfDtu9
- MD5 SHA1 SHA512 SSDEEP
uninstall_bg2.png
- SHA256 fb07f8041c8633fc329ec8973f1dbb4d23e54a3d27d8b380a77cef1ba7167bb3
- MD5 5d2d496a00cb340432859b7b67540648
- SHA1 991d6750a36d61dbbf5269da8b26681cd839c971
- SHA512 e60962e68f01c4a576a1166bff64c92e0897779329ec5b132fdf3419c046f31cb7691eb96004d9a8779a2e5e376898643b9f284a34911ec57590b96cd7631697
- SSDEEP 1536:5X2TTAU2TiK1UPgQgdF5aboIIzDWEHgIY:s/21Ig7TI4WEAb
- MD5 SHA1 SHA512 SSDEEP
uninstall_bg3.png
- SHA256 ecb2710e5d66a99a076f30a1237ee7e0bebeb94a080dd8c7e5bc16f33f6be01d
- MD5 2df8d436f31bca9da2c68bfff502777e
- SHA1 ed9afd9d21d18e270a1eedb0794747ec2af6db6e
- SHA512 cac93ddaf70b40f388eebbb2d53728f48c75c98beca1e3473c006fb65c340df5214998f5dee77c4393615da61bb7983c77ee7bf38062bef7ad1ef059c07bd25a
- SSDEEP 384:WnDQhqunMZuZhLey5/d1/PrNwuA6JwfVCuI/ZfG722u+9689/lo76FfGLhpEAn6x:Wtib1/z0k9YuqM76WhpD35VDXp66+Pr
- MD5 SHA1 SHA512 SSDEEP
uninstallfinishpage.xml
- SHA256 9f0a1cc1e8ec26d9094ce132d727fa5708ab90e5d328580ea65076742020a55a
- MD5 1c0645c71d42f96c09efeedda5c1e61d
- SHA1 c8d06a108c4ddad9ec6b3eca85a03d5d6f8c8abd
- SHA512 ed1e2b51f799b214ccf3648cf0f225821bb419570bce0d08cb347a15af6c4e9b82e2db096738b0fcd1a2c6a0e9887515364636ad3b5e693b274138073f7cebe0
- MD5 SHA1 SHA512
uninstallingpage.xml
- SHA256 05306109200bc38c0159f28ea85f98e65074c4f9181826eefa8fbc42cc4beb22
- MD5 46aeb6418ab20fd887d2a5f52860d2b3
- SHA1 3e34ee64bd64d457b0dbc4761f49f472b6f3316d
- SHA512 f22b46ce3f55d33c23069de31f52a7ddf259a169aa95dcf8bcbb9a5d8010591373c38c56bfd8284e6e6936bca0fb32575c9cbb93d99e1e19a9d53f8c695bdc57
- MD5 SHA1 SHA512
uninstallpage.xml
- SHA256 c92967e6f7691070fc16983189e1165c3ff975a87e9fa72aba0dc6e20010db3e
- MD5 a86435782bfa4aeb51bfde186f5666fd
- SHA1 5566ae80721418c46c47f51da74f36275c9ddf27
- SHA512 e293b590143d616080702e3d55f7aeb0d934240a1ff8062933d3d983a23524e1bf6f2be21addf9a850f4b0741a9ce43265530ac64e46cd9ee49186d037f15057
- MD5 SHA1 SHA512