JaffaCakes118_c3c55bad2076b6df227c374d58e06127

resource	yara_rule
static1/unpack001/$PLUGINSDIR/md5dll.dll	acprotect
static1/unpack001/$PLUGINSDIR/nsRandom.dll	acprotect

resource	yara_rule
static1/unpack001/$PLUGINSDIR/md5dll.dll	upx
static1/unpack001/$PLUGINSDIR/nsRandom.dll	upx

resource
JaffaCakes118_c3c55bad2076b6df227c374d58e06127
unpack002/$PLUGINSDIR/ExtractDLLEx.dll
unpack002/$PLUGINSDIR/IEFunctions.dll
unpack002/$PLUGINSDIR/InetLoad.dll
unpack002/$PLUGINSDIR/NSISdl.dll
unpack002/$PLUGINSDIR/Processes.dll
unpack002/$PLUGINSDIR/System.dll
unpack002/$PLUGINSDIR/Time.dll
unpack002/$PLUGINSDIR/UserInfo.dll
unpack002/$PLUGINSDIR/chrmPref.dll
unpack002/$PLUGINSDIR/mt.dll
unpack002/$PLUGINSDIR/nsisos.dll
unpack003/$PLUGINSDIR/NSISdl.dll
unpack003/$PLUGINSDIR/System.dll
unpack003/$PLUGINSDIR/Time.dll
unpack003/$PLUGINSDIR/mt.dll
unpack003/$PLUGINSDIR/nsisos.dll
unpack005/$PLUGINSDIR/ExtractDLLEx.dll
unpack005/$PLUGINSDIR/InetLoad.dll
unpack005/$PLUGINSDIR/NSISdl.dll
unpack005/$PLUGINSDIR/Processes.dll
unpack005/$PLUGINSDIR/System.dll
unpack005/$PLUGINSDIR/Time.dll
unpack005/$PLUGINSDIR/UserInfo.dll
unpack005/$PLUGINSDIR/chrmPref.dll
unpack005/$PLUGINSDIR/mt.dll
unpack005/$PLUGINSDIR/nsisos.dll
unpack001/$PLUGINSDIR/LangDLL.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/inetc.dll
unpack001/$PLUGINSDIR/md5dll.dll
unpack007/out.upx
unpack001/$PLUGINSDIR/nsDialogs.dll
unpack001/$PLUGINSDIR/nsRandom.dll
unpack008/out.upx

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2
static1/unpack001/$LOCALAPPDATA/funmoods.exe	nsis_installer_1
static1/unpack001/$LOCALAPPDATA/funmoods.exe	nsis_installer_2
static1/unpack002/FM4ffx.exe	nsis_installer_1
static1/unpack002/FM4ffx.exe	nsis_installer_2
static1/unpack002/FM4ie.exe	nsis_installer_1
static1/unpack002/FM4ie.exe	nsis_installer_2

IMPHASH 7fa974366048f9c551ef45714595665e
SHA256 2918e0684797403afa75ccbf12249420d33f98ca6e45569758ab1e4054e65583
MD5 c3c55bad2076b6df227c374d58e06127
SHA1 50d88018db5e39c1c7c2309a5b1debf4577d92a6
SHA512 3c31132cd2a6d16c8fbef921ff3ef93168668bd0aa4ef938b11a062e73a7d741787dd3f670b4decb2481089cc3702ed53c465f5b315fe8ca63c305b43879046a
SSDEEP 49152:CFQjdzmZI7sBubIqSmT/MLRpEPKPocxt1arufjB:CFQBSBubB90LRDocxWr0
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

12538

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CompareFileTime SearchPathA GetShortPathNameA GetFullPathNameA MoveFileA SetCurrentDirectoryA GetFileAttributesA GetLastError CreateDirectoryA SetFileAttributesA Sleep GetTickCount GetFileSize GetModuleFileNameA GetCurrentProcess CopyFileA ExitProcess GetWindowsDirectoryA SetFileTime GetCommandLineA SetErrorMode LoadLibraryA lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread CreateProcessA RemoveDirectoryA CreateFileA GetTempFileNameA lstrlenA lstrcatA GetSystemDirectoryA GetVersion CloseHandle lstrcmpiA lstrcmpA ExpandEnvironmentStringsA GlobalFree GlobalAlloc WaitForSingleObject GetExitCodeProcess GetModuleHandleA LoadLibraryExA GetProcAddress FreeLibrary MultiByteToWideChar WritePrivateProfileStringA GetPrivateProfileStringA WriteFile ReadFile MulDiv SetFilePointer FindClose FindNextFileA FindFirstFileA DeleteFileA GetTempPathA

user32

EndDialog ScreenToClient GetWindowRect EnableMenuItem GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard RegisterClassA TrackPopupMenu AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA DestroyWindow CreateDialogParamA SetTimer SetWindowTextA PostQuitMessage SetForegroundWindow wsprintfA SendMessageTimeoutA FindWindowExA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA OpenClipboard ExitWindowsEx IsWindow GetDlgItem SetWindowLongA LoadImageA GetDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint ShowWindow

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectA SetBkMode SetTextColor SelectObject

shell32

SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA SHGetSpecialFolderLocation

advapi32

RegQueryValueExA RegSetValueExA RegEnumKeyA RegEnumValueA RegOpenKeyExA RegDeleteKeyA RegDeleteValueA RegCloseKey RegCreateKeyExA

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

$LOCALAPPDATA/bloson.bmp

SHA256 03884e865dcc74b4b90f92a430388fe6cdfa3d53e4dbf7c6d9b1d9a40eb8eef8
MD5 9d76cbb404f76d227b2015d08fb90de9
SHA1 cc2d925128f1fec7ffb8f760e7615eaf7665f23b
SHA512 e3bbcef8e95019ff434a33818ade93fb399d12051d849377c152e13ddcd63c66bff95bba71b44c083b3b891d51a5b20d241444257ea5913550a122c790a1200d
SSDEEP 192:FnqmELNjT5191NYICn76GGhKPOzHdfU4tgOy1pBbhG7w7vcUdZPZTFy:FnqmELNjT51DGICn761hhlaZbHzTFy
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$LOCALAPPDATA/dealply.bmp

SHA256 0f84e3d4cf457f6601c12f52ea349e803ce12730de38657651b80e6cdcb6d098
MD5 622892e1bfd696d8964c75977e538674
SHA1 fd78c36c6aee910b534d075781869eac5e96564e
SHA512 0504546af904ba9074143173e498c51977c9913733689d1a8d22357e957b4311a62b177c180150f1b8a51986e4669935973f25f3840e39710fe3c167938206a4
SSDEEP 1536:uOPffSTfV5jJcuowkQU2+breKc2ANFDPIsjt:OLYct
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$LOCALAPPDATA/facemoods.bmp

SHA256 7d6b6e9d5ff4b39c40b895fedf3ca1e1366f602960cb653ee89ea59b5dd811aa
MD5 1d6442c13237dcb3446f30ecc8066a48
SHA1 c9df7681d8a442000aa93401a772160fcf0d4103
SHA512 32ad14ba09c88e37ef3dded57676d45baf4c7a797e9b8921d7c54a3ce55a538f6c932d5e0d326f47b3100a980eee05fbe323a18bc422e6d4e2691613ff3b5342
SSDEEP 1536:HqCXbI0p3Ar2J3S9IRcxtVI5oBo9QqbRQ9EGnC/l:K/02r5KjAm
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$LOCALAPPDATA/funmoods.exe

IMPHASH 7fa974366048f9c551ef45714595665e
SHA256 73db5f6b89963d6692e3c43c8f3e5265ec4512ce87fe652e9ec3a4a0bb036db8
MD5 badf0b8e9bc8d7352fb084951255ee4f
SHA1 e584634b5565fd81d7258fca86c632c9d3e1cd14
SHA512 3b704e3b0d440f1e580cc277c3c68223139f35156b00250ebf9a231f03d5f74bd19bbf948061e7b8be13b9c08aca9f30a0929cfce5a9d5cc3558cd187a05d53e
SSDEEP 24576:VtxBMupYpmZICsiWuu0uFYBimEuDYYmTj67rRXFO6BbwZTdNFtr6Ps7QOWxQ6NVN:p6HmZICsfujIvGmTW7rRQakZpt+xQON
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

86:0f:9a:14:b9:76:ed:ae:b5:37:c3:ab:f7:93:04:d5:70:1b:84:89

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Volonet Ltd,O=Volonet Ltd,POSTALCODE=67778,STREET=hazfira 19,L=Tel Aviv,ST=Israel,C=IL

Chains

Jan 25, 2012

Minor OS version

0

Major OS version

4

Entry point

12538

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CompareFileTime SearchPathA GetShortPathNameA GetFullPathNameA MoveFileA SetCurrentDirectoryA GetFileAttributesA GetLastError CreateDirectoryA SetFileAttributesA Sleep GetTickCount GetFileSize GetModuleFileNameA GetCurrentProcess CopyFileA ExitProcess GetWindowsDirectoryA SetFileTime GetCommandLineA SetErrorMode LoadLibraryA lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread CreateProcessA RemoveDirectoryA CreateFileA GetTempFileNameA lstrlenA lstrcatA GetSystemDirectoryA GetVersion CloseHandle lstrcmpiA lstrcmpA ExpandEnvironmentStringsA GlobalFree GlobalAlloc WaitForSingleObject GetExitCodeProcess GetModuleHandleA LoadLibraryExA GetProcAddress FreeLibrary MultiByteToWideChar WritePrivateProfileStringA GetPrivateProfileStringA WriteFile ReadFile MulDiv SetFilePointer FindClose FindNextFileA FindFirstFileA DeleteFileA GetTempPathA

user32

EndDialog ScreenToClient GetWindowRect EnableMenuItem GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard RegisterClassA TrackPopupMenu AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA DestroyWindow CreateDialogParamA SetTimer SetWindowTextA PostQuitMessage SetForegroundWindow wsprintfA SendMessageTimeoutA FindWindowExA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA OpenClipboard ExitWindowsEx IsWindow GetDlgItem SetWindowLongA LoadImageA GetDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint ShowWindow

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectA SetBkMode SetTextColor SelectObject

shell32

SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA SHGetSpecialFolderLocation

advapi32

RegQueryValueExA RegSetValueExA RegEnumKeyA RegEnumValueA RegOpenKeyExA RegDeleteKeyA RegDeleteValueA RegCloseKey RegCreateKeyExA

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

$LOCALAPPDATA/Google/Chrome/User Data/default/Local Storage/chrome-extension_fdloijijlkoblmigdofommgnheckmaki_0.localstorage

SHA256 2af3e0f282942a6a94d441acd9fe930fe2401fbdfbc67a1e44f490fe914afe7d
MD5 97471c285c1afe9b7a2604b573ea4dcc
SHA1 722841633891847a5636d0ef48799e3b0e431c91
SHA512 eb33ef015ac8ff79fc13dcc0bb62629d0c32fef36b7997f01117616c403864bf3419d0d8d5aa0b16939b26e86f831bcacf60da42a239b6d199880ce958da4374
MD5 SHA1 SHA512

NSIS installer

installer

$PLUGINSDIR/ExtractDLLEx.dll

IMPHASH bab48790663c56c456d63bc3e045f161
SHA256 73acba7dd477dfd6cf4249911f4e3c781196c7cf6b28425761dcb2d4f90c36c5
MD5 ba4063f437abb349aa9120e9c320c467
SHA1 b045d785f6041e25d6be031ae2af4d4504e87b12
SHA512 48a813f55834069f8c6b90740de3df01564a136b0fe637f9f85cc1a19d7f32b1f70205ff2462526508fe3c1962d7c1e8e384c40463e328538aeba28e8d0fb92a
SSDEEP 96:lyEPmi/06iLbX8SIP59L1MmqPbgkk/eWKCHGojGYYIF/ggiomsTeZUzI:lyEPmymbMbPZOz+/eWJmoUItiopTeZ
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

5889

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/IEFunctions.dll

IMPHASH ae3c20f5897e4e6190276a273c58129b
SHA256 465e81022be2df0433a6e02d427a79dc733031abc89d99746b73576a976857e3
MD5 5a3a8d916dd0071f16d217bbcfe7d047
SHA1 c2265fa5cec491706d0921e4274c674b693f326f
SHA512 8908ee2e329171d2ee430aacf7f86be565472cdb9b338786188ab37d6e6a714e5bc98552a39737ff8a5f314730c9f351aa0f1fa8207eff32289d7bccb3e05a08
SSDEEP 96:GibIzePROHQWH6hhawoA8Blnw4npQhrfgWV6R6CtqLZ:GibcXvScwoAMlnw4npkroWV6RN4
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

1

Major OS version

5

Entry point

5033

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/InetLoad.dll

IMPHASH 24a4a671f5cc294ce3543d18a1e873cd
SHA256 bf01a1f272e0daf82df3407690b646e0ff6b2c562e36e47cf177eda71ccb6f6c
MD5 994669c5737b25c26642c94180e92fa2
SHA1 d8a1836914a446b0e06881ce1be8631554adafde
SHA512 d0ab7ca7f890ef9e59015c33e6b400a0a4d1ce0d24599537e09e845f4b953e3ecd44bf3e3cbe584f57c2948743e689ed67d2d40e6caf923bd630886e89c38563
SSDEEP 384:nUOPTbiJmdztwwKq8W1cyMjPzV0Ac9k+LMkIX1+Gn+XHdjf:nTikliwKq8W1rMjPzz+f
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

11241

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

msvcrt

strchr _adjust_fdiv malloc _initterm free memset strstr strtol strncmp strtoul time strrchr

kernel32

GlobalFree lstrcpynA CreateThread WaitForSingleObject TerminateThread GetModuleHandleA lstrcpyA GlobalAlloc LoadLibraryA GetProcAddress lstrcmpiA CreateFileA lstrcmpA lstrlenA MulDiv WriteFile lstrcatA GetLastError DeleteFileA CloseHandle SleepEx

user32

GetDlgItem SendMessageA SetWindowTextA wsprintfA GetWindowTextA RegisterWindowMessageA CallWindowProcA PostMessageA DestroyWindow EnableWindow GetWindowLongA CreateWindowExA GetWindowRect GetClientRect ShowWindow IsWindowVisible GetFocus MessageBoxA SendDlgItemMessageA SetDlgItemTextA SetTimer LoadIconA DispatchMessageA TranslateMessage GetMessageA IsDialogMessageA IsWindow CreateDialogParamA FindWindowExA RedrawWindow SetWindowLongA

wininet

InternetErrorDlg InternetSetFilePointer HttpQueryInfoA InternetQueryOptionA HttpSendRequestA HttpAddRequestHeadersA InternetSetOptionA HttpOpenRequestA FtpOpenFileA InternetGetLastResponseInfoA InternetConnectA InternetCrackUrlA InternetOpenA InternetReadFile InternetCloseHandle

comctl32

ord17

$PLUGINSDIR/NSISdl.dll

IMPHASH 9cce555dd3ff1b6c7dc92d64c794c51a
SHA256 dacc88a12d3ba438fdae3535dc7a5a1d389bce13adc993706424874a782e51c9
MD5 a5f8399a743ab7f9c88c645c35b1ebb5
SHA1 168f3c158913b0367bf79fa413357fbe97018191
SHA512 824e567f5211bf09c7912537c7836d761b0934207612808e9a191f980375c6a97383dbc6b4a7121c6b5f508cbfd7542a781d6b6b196ca24841f73892eec5e977
SSDEEP 192:tUZTobBDJ68r67wmsvJI5ad9cXzFOVu+mZ/P3p+57CvpVqDxVp01Dwn2GRPgsfA:6Bo/680dCI5adOjFOg9//p27uNw2Go
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

8903

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/Processes.dll

IMPHASH eaa5f91829171a65db414b9e64ec9548
SHA256 3b5388e13dab53d53e08791f492ed7d3094a0cee51e9841af83ce02534e0621c
MD5 cc0bd4f5a79107633084471dbd4af796
SHA1 09dfcf182b1493161dec8044a5234c35ee24c43a
SHA512 67ba90ec04366e07d0922ffb4dbbb4f12f90b6785b87700adaae29327db9ec2a03d750b229f858db0594f439499d6346fbf1ebc17c77162bf8da027515219ee3
SSDEEP 768:WmswCIbuzwEmd7Fp4KpDAKngV9tV3rJy63JgaVwoz7si4uYqUYWu1gYwmj552RFB:WmswCIbuzwEy7n3YD3Jgw7shKrp55io
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

5

Entry point

7219

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

LoadLibraryA GetProcAddress FreeLibrary OpenProcess CloseHandle TerminateProcess GlobalFree lstrcpyA FlushFileBuffers CreateFileA GetCurrentThreadId GetCommandLineA GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetLastError InterlockedDecrement HeapFree Sleep ExitProcess SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate HeapDestroy VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WriteFile GetConsoleCP GetConsoleMode EnterCriticalSection LeaveCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage HeapAlloc VirtualAlloc HeapReAlloc InitializeCriticalSectionAndSpinCount RtlUnwind SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize

user32

GetDesktopWindow FindWindowA UpdateWindow wsprintfA

$PLUGINSDIR/System.dll

IMPHASH 2017f2acbdaa42ab3e4adeb8b4c37e7b
SHA256 dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
MD5 c17103ae9072a06da581dec998343fc1
SHA1 b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
SHA512 d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
SSDEEP 192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

10544

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/Time.dll

IMPHASH 2e3a4d1f132aea64d421c1e936bcc407
SHA256 b4a95a455e53372c59f91bc1b5fb9e5c8e4a10a506fa04aaf7be27048b30ae35
MD5 38977533750fe69979b2c2ac801f96e6
SHA1 74643c30cda909e649722ed0c7f267903558e92a
SHA512 e17069395ad4a17e24f7cd3c532670d40244bd5ae3887c82e3b2e4a68c250cd55e2d8b329d6ff0e2d758955ab7470534e6307779e49fe331c1fd2242ea73fd53
SSDEEP 192:oNcwTweFbs9t2n2Sgiga65/aHdaGZavaJIYX4Hw2:oNcwBFg22SEw47CPU
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

5280

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/UserInfo.dll

IMPHASH afa8e526425f3585465337467d0b5909
SHA256 564c80dec62d76c53497c40094db360ff8a36e0dc1bda8383d0f9583138997f5
MD5 7579ade7ae1747a31960a228ce02e666
SHA1 8ec8571a296737e819dcf86353a43fcf8ec63351
SHA512 a88bc56e938374c333b0e33cb72951635b5d5a98b9cb2d6785073cbcad23bf4c0f9f69d3b7e87b46c76eb03ced9bb786844ce87656a9e3df4ca24acf43d7a05b
MD5 SHA1 SHA512

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

4762

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/chrmPref.dll

IMPHASH 73560154a4cae5f2674985bd67926ba9
SHA256 c9ccc486c3353bad0d2819a42203c0db7ba98b4826b6a2b8d4deee832e4d3d8e
MD5 6845d147b88de1f005d9c6ebb6596574
SHA1 64523302e2b1e2ee7a31580d2acac852db3c7e45
SHA512 cd4caa6669b5f90ead60579a2e5b01a9cd2d17fd2919651cecda6327acb32e2eb3b9953412c085d50dee89779d2f60df658236fb4c3cc54bed4ae66929590606
SSDEEP 3072:H+PBtVBjFBb/xZQ1VsqijYj8Wc+OYfaimTMIP7hjyhZN2OOsHuVI:H+PBdjFBb/TGzBOoaiGP7hjQE
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

1

Major OS version

5

Entry point

67797

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

SizeofResource LockResource LoadResource FindResourceW FindResourceExW WideCharToMultiByte GetProcAddress GlobalFree lstrcpyA SetEnvironmentVariableA GetCurrentThreadId WaitForSingleObject GetTickCount ReleaseMutex CloseHandle CreateMutexA Sleep FreeLibrary LoadLibraryA SetEndOfFile CreateFileW CreateFileA SetStdHandle WriteConsoleW LoadLibraryW IsValidLocale RaiseException EnterCriticalSection LeaveCriticalSection GetLastError InitializeCriticalSectionAndSpinCount DeleteCriticalSection HeapDestroy HeapAlloc HeapFree HeapReAlloc HeapSize GetProcessHeap InterlockedIncrement InterlockedDecrement InitializeCriticalSection EncodePointer DecodePointer RtlUnwind GetCommandLineA LCMapStringW MultiByteToWideChar GetCPInfo TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW SetLastError TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetACP GetOEMCP IsValidCodePage IsProcessorFeaturePresent HeapCreate SetHandleCount GetStdHandle GetFileType GetStartupInfoW ExitProcess WriteFile GetConsoleCP GetConsoleMode FlushFileBuffers ReadFile SetFilePointer GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetModuleFileNameW GetLocaleInfoW GetStringTypeW GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA

user32

PeekMessageA TranslateMessage DispatchMessageA MsgWaitForMultipleObjects

$PLUGINSDIR/mt.dll

IMPHASH 4b5bae2aede4b4438c292da900ad65e1
SHA256 6dc2644a389feeef9e0ac65e2c8b01fc18ca6e53b253f10efffcb117e0a852dd
MD5 aac69f856c4540edd4ef7ce6c8571639
SHA1 2860f55ea9774d631219e66604051e90a43258b7
SHA512 ebacc8117c44d298ae519705510285c576932761b3c7b697eeb91cb7620150ebe551102d1ab83d68f4c78e1496b191a55ad8f78c491f5b4af456c4de6ad72dcd
SSDEEP 48:am+jZiVMdzNNqdugTvfbAMHpyncQk7IZigYyPSx1A8v1XlWzNKjW1Qg/BTv:zKiVMdhwr7k0pycQBZtJuA8vUQi1QkN
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

1

Major OS version

5

Entry point

4097

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/nsisos.dll

IMPHASH a70233c77fd258ec47709388c2338273
SHA256 ba79ab7f63f02ed5d5d46b82b11d97dac5b7ef7e9b9a4df926b43ceac18483b6
MD5 69806691d649ef1c8703fd9e29231d44
SHA1 e2193fcf5b4863605eec2a5eb17bf84c7ac00166
SHA512 5e5e0319e701d15134a01cb6472c624e271e99891058aef4dfe779c29c73899771a5b6f8b1cd61b543a3b3defeaecaa080c9cc4e76e84038ca08e12084f128eb
SSDEEP 48:6EyuygeHCfxwU5x+6kx/k1gONv27oBc2OkIrHHl:VeHCf2762kKsu7oGjkIrn
MD5 SHA1 SHA512 SSDEEP

windows:1 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

1

Entry point

4424

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Name

.text

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

80B

Virtual Size

80B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

588B

Virtual Size

588B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

156B

Virtual Size

156B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE

Name

.edata

Size

96B

Virtual Size

96B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_READ

$_12_/searchplugins/funmoods.xml

SHA256 3a8c47b1df750f58c70e7d0e6be476085749229a70bbfdec8285a6584fcd1cd6
MD5 024c000cdf53843a1b63e51a372c30cf
SHA1 fb6f38e5217a8fdff1c2fa771e5514ccadc21d16
SHA512 304ab3315b62dd73ccc1efb34395aa24f288c91f6a988b298b5eb557373e5aae455fb22830c635520fd55a83826a24fe4ced249fcdadbd19f0cd4a64e7c0a3f5
MD5 SHA1 SHA512

NSIS installer

installer

FM4ffx.exe

IMPHASH 7fa974366048f9c551ef45714595665e
SHA256 3ac3c700060a0487060724f3fd22faf70d5f633e69401641964d7ba4d6e6e570
MD5 fe768a6b82ed2a59c58254eae67b8cf9
SHA1 3dad9bf5011fb73b9be2fe6c601bb6281a3ceaf6
SHA512 3d8caadc61ea127bd0e3d01f35274a2ebfa34a0ac12b0932988300d011347f74a09c2bf3c85e58bfbe5200288c6e6f100b4f08916d23e56d7b52a70130aad14b
SSDEEP 6144:Ve34G2ct7JdUwA2UL4iCPfAHfWpR+0BmiBEaiXLoyX:Et9BHjAupYMmyk7R
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

cf:06:16:7a:09:5d:1b:8b:a6:6b:e5:8e:98:3f:d6:32:0f:4c:d2:b4

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Volonet Ltd,O=Volonet Ltd,POSTALCODE=67778,STREET=hazfira 19,L=Tel Aviv,ST=Israel,C=IL

Chains

Jan 25, 2012

Minor OS version

0

Major OS version

4

Entry point

12538

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CompareFileTime SearchPathA GetShortPathNameA GetFullPathNameA MoveFileA SetCurrentDirectoryA GetFileAttributesA GetLastError CreateDirectoryA SetFileAttributesA Sleep GetTickCount GetFileSize GetModuleFileNameA GetCurrentProcess CopyFileA ExitProcess GetWindowsDirectoryA SetFileTime GetCommandLineA SetErrorMode LoadLibraryA lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread CreateProcessA RemoveDirectoryA CreateFileA GetTempFileNameA lstrlenA lstrcatA GetSystemDirectoryA GetVersion CloseHandle lstrcmpiA lstrcmpA ExpandEnvironmentStringsA GlobalFree GlobalAlloc WaitForSingleObject GetExitCodeProcess GetModuleHandleA LoadLibraryExA GetProcAddress FreeLibrary MultiByteToWideChar WritePrivateProfileStringA GetPrivateProfileStringA WriteFile ReadFile MulDiv SetFilePointer FindClose FindNextFileA FindFirstFileA DeleteFileA GetTempPathA

user32

EndDialog ScreenToClient GetWindowRect EnableMenuItem GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard RegisterClassA TrackPopupMenu AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA DestroyWindow CreateDialogParamA SetTimer SetWindowTextA PostQuitMessage SetForegroundWindow wsprintfA SendMessageTimeoutA FindWindowExA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA OpenClipboard ExitWindowsEx IsWindow GetDlgItem SetWindowLongA LoadImageA GetDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint ShowWindow

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectA SetBkMode SetTextColor SelectObject

shell32

SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA SHGetSpecialFolderLocation

advapi32

RegQueryValueExA RegSetValueExA RegEnumKeyA RegEnumValueA RegOpenKeyExA RegDeleteKeyA RegDeleteValueA RegCloseKey RegCreateKeyExA

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

$PLUGINSDIR/NSISdl.dll

IMPHASH 9cce555dd3ff1b6c7dc92d64c794c51a
SHA256 dacc88a12d3ba438fdae3535dc7a5a1d389bce13adc993706424874a782e51c9
MD5 a5f8399a743ab7f9c88c645c35b1ebb5
SHA1 168f3c158913b0367bf79fa413357fbe97018191
SHA512 824e567f5211bf09c7912537c7836d761b0934207612808e9a191f980375c6a97383dbc6b4a7121c6b5f508cbfd7542a781d6b6b196ca24841f73892eec5e977
SSDEEP 192:tUZTobBDJ68r67wmsvJI5ad9cXzFOVu+mZ/P3p+57CvpVqDxVp01Dwn2GRPgsfA:6Bo/680dCI5adOjFOg9//p27uNw2Go
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

8903

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/System.dll

IMPHASH 2017f2acbdaa42ab3e4adeb8b4c37e7b
SHA256 dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
MD5 c17103ae9072a06da581dec998343fc1
SHA1 b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
SHA512 d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
SSDEEP 192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

10544

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/Time.dll

IMPHASH 2e3a4d1f132aea64d421c1e936bcc407
SHA256 b4a95a455e53372c59f91bc1b5fb9e5c8e4a10a506fa04aaf7be27048b30ae35
MD5 38977533750fe69979b2c2ac801f96e6
SHA1 74643c30cda909e649722ed0c7f267903558e92a
SHA512 e17069395ad4a17e24f7cd3c532670d40244bd5ae3887c82e3b2e4a68c250cd55e2d8b329d6ff0e2d758955ab7470534e6307779e49fe331c1fd2242ea73fd53
SSDEEP 192:oNcwTweFbs9t2n2Sgiga65/aHdaGZavaJIYX4Hw2:oNcwBFg22SEw47CPU
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

5280

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/mt.dll

IMPHASH 4b5bae2aede4b4438c292da900ad65e1
SHA256 6dc2644a389feeef9e0ac65e2c8b01fc18ca6e53b253f10efffcb117e0a852dd
MD5 aac69f856c4540edd4ef7ce6c8571639
SHA1 2860f55ea9774d631219e66604051e90a43258b7
SHA512 ebacc8117c44d298ae519705510285c576932761b3c7b697eeb91cb7620150ebe551102d1ab83d68f4c78e1496b191a55ad8f78c491f5b4af456c4de6ad72dcd
SSDEEP 48:am+jZiVMdzNNqdugTvfbAMHpyncQk7IZigYyPSx1A8v1XlWzNKjW1Qg/BTv:zKiVMdhwr7k0pycQBZtJuA8vUQi1QkN
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

1

Major OS version

5

Entry point

4097

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/nsisos.dll

IMPHASH a70233c77fd258ec47709388c2338273
SHA256 ba79ab7f63f02ed5d5d46b82b11d97dac5b7ef7e9b9a4df926b43ceac18483b6
MD5 69806691d649ef1c8703fd9e29231d44
SHA1 e2193fcf5b4863605eec2a5eb17bf84c7ac00166
SHA512 5e5e0319e701d15134a01cb6472c624e271e99891058aef4dfe779c29c73899771a5b6f8b1cd61b543a3b3defeaecaa080c9cc4e76e84038ca08e12084f128eb
SSDEEP 48:6EyuygeHCfxwU5x+6kx/k1gONv27oBc2OkIrHHl:VeHCf2762kKsu7oGjkIrn
MD5 SHA1 SHA512 SSDEEP

windows:1 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

1

Entry point

4424

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Name

.text

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

80B

Virtual Size

80B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

588B

Virtual Size

588B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

156B

Virtual Size

156B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE

Name

.edata

Size

96B

Virtual Size

96B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_READ

$_12_/extensions/[email protected]/chrome.manifest

SHA256 71abc8728fc4d1b4afb257208b07aa15b732f5e5b1d0e5250af358146c708c61
MD5 dbfdad8541045207e847c7fbd782455c
SHA1 807ec972bab29e60852ead187cb20776ebae00c7
SHA512 60d0a84107c2836f5388d2a85fda9f41432dcfb1c85745292a9d8555d253d8ded4b35b9d031354a1ff1730b0bc29d5b4f70ae271dad70520e4752c844776d588
MD5 SHA1 SHA512

NSIS installer

installer

$_12_/extensions/[email protected]/content/funmoods.css

SHA256 cd74208502712339beeba0e59b6d14d3ef4b366a68eb9f2a90bea1c3cb0f05d3
MD5 fa85f713ada77d9c4946bc33528316dc
SHA1 4f3889ecaad3512e04ee64ef3b728a66955591a0
SHA512 e9c0385cf8146ab14896a016d7572a9e2529c7283ffe4685656ee0384736f7f2b3a25ad190ff24b23fc80a4e909634232ca0a767d779e753ca61b459583f401d
MD5 SHA1 SHA512

NSIS installer

installer

$_12_/extensions/[email protected]/content/funmoods.xul

SHA256 d4617e14b943fbde2acb8255829b7aa262f0217bd7a866940b2df93fb6f58acb
MD5 c8cbdee794e14616a5dd21aba2620284
SHA1 2929805189def49e4d8bc325838493aeae92ca98
SHA512 1fa9fd7fc79888533b20a06436981c7e636611daa9d2cc3405c6e4a683050c53e1e424f8d0e513a0bb5b70c7bc574918bc5283f302076f35acf4d9043961f19c
MD5 SHA1 SHA512

NSIS installer

installer

$_12_/extensions/[email protected]/content/imgs/arwDwn.gif

SHA256 09d5f001629c8f26137e88cf7a0f7636e6c17d0d75abff9fd3ac106a85571617
MD5 2aa11fa4dcf0f03a0c8fb08170272566
SHA1 9e304d6bd0b0183a54baa2821772aa9f72ef149f
SHA512 8ee3d2e19a20ae5a2d84eed2c722d4bafe9ccc67eb7a061723f660178564945d5938584614f2bbdf5c90b2c78eddd3368196828a2992935f3a688db46f624080
MD5 SHA1 SHA512

NSIS installer

installer

$_12_/extensions/[email protected]/content/imgs/flgs/ae.png

SHA256 18501f97e8f6782e1e13028632e28cf248e36f590992942de1800cad44c5c250
MD5 6eaf2387ebb3d038f6684457fc16bc44
SHA1 37efdfd3af3fb46e7b5158f045a1d471f15a3fa6
SHA512 f00a6e48be6c08044119cfcb578aaa3c5df6fc42bf51ee0d6334dd46d19afc254875bce0e6732fad1683834ae824578f10b124a5b07ae11cb2e720d510dff097
MD5 SHA1 SHA512

NSIS installer

installer

$_12_/extensions/[email protected]/content/imgs/flgs/bg.png

SHA256 c4838a24ad388f934b04dbf9dba02a8bc6e9e58d0a1076477b47b5987a5c2d64
MD5 77b2183ab10cd26ee4e79fdfc12b8621
SHA1 c46dc6e0512560af14fceef6be24e8448e0f85f3
SHA512 50ddb2ce4bc0597bd3abba49ccfed0bc57484bffad6d44b8eaf2e8bdbffb52576167c7c575d218693c984d94775f6dd4b573038740d95cd6c402b8aeea49b885
MD5 SHA1 SHA512

NSIS installer

installer

$_12_/extensions/[email protected]/content/imgs/flgs/ch.png

SHA256 7058233b5bdfdd4279e92e9dfe64bd4a61afd7e76d97dba498ce1d5777b92185
MD5 a82ff00f39eff54062328b4474c33dbc
SHA1 9c7185e038ea1000382fb1b14b88f3e9f2d99c14
SHA512 be801e5bbd51f6edb324dcd5b19239c64e011bb559e976875b2bcfe71b6a6eb1fd210454cc60402e7aeb6560e3ea6f277b1ca1eb4ff81bbb3dd99c3175a625f7
MD5 SHA1 SHA512

NSIS installer

installer

$_12_/extensions/[email protected]/content/imgs/flgs/cn.png

SHA256 7058233b5bdfdd4279e92e9dfe64bd4a61afd7e76d97dba498ce1d5777b92185
MD5 a82ff00f39eff54062328b4474c33dbc
SHA1 9c7185e038ea1000382fb1b14b88f3e9f2d99c14
SHA512 be801e5bbd51f6edb324dcd5b19239c64e011bb559e976875b2bcfe71b6a6eb1fd210454cc60402e7aeb6560e3ea6f277b1ca1eb4ff81bbb3dd99c3175a625f7
MD5 SHA1 SHA512

NSIS installer

installer

$_12_/extensions/[email protected]/content/imgs/flgs/cz.png

SHA256 0f39366d88fabe6f6f5c7a3cb6a11165de6bc6bc2108802c49df5f9840bc6541
MD5 815b6d2bf60a3179c0652f0b6895bcbb
SHA1 6e8ced4d87b16744fb54c674fe95dc14e86babf4
SHA512 4b59d849d28741ae7ef338d293c41298c3d646748ccaf3b07985df0f1470da7738f17ca73f6af75f237244ec87ad4c38de80ff0587f9e104c74cf39442e7f1c7
MD5 SHA1 SHA512

NSIS installer

installer

$_12_/extensions/[email protected]/content/imgs/flgs/de.png

SHA256 3323814006fe6739493d27057954941830b59eff37ebaac994310e17c522dd57
MD5 ddabae687ecae5edaaeb808d440543e6
SHA1 1daf2d67ccaa5be01a330a231ac996a9d5575594
SHA512 5bfbe453e635ede38a7e495badb349a2ebaa152a794d26d5b69b657f8e8fd5188436542bfe8c35d0c1117c3a25500d0404069d4b854faece914e07684d07a928
MD5 SHA1 SHA512

NSIS installer

installer

$_12_/extensions/[email protected]/content/imgs/flgs/eg.png

SHA256 e4c44b7ce8a72720e2ab8b38b8885fca36dda04daa14ae37909bbd501d853074
MD5 09c48d3562f0dc51e2f9507704f6437f
SHA1 2e391c4c1a76533812f5ffe27076bcacb0fc3386
SHA512 dad27de417df66001869193a315af87a18d20bd472c369f7a66141b4208809ad1286504130e9f1307aa8de6ee9e37efa20006ada8822e20567eb411239351d88
MD5 SHA1 SHA512

NSIS installer

installer

$_12_/extensions/[email protected]/content/imgs/flgs/en.png

SHA256 36cce5cae3d2e0045b2b2b6cbffdad7a0aba3e99919cc219bbf0578efdc45585
MD5 968591e0050981be9fa94bd2597afb48
SHA1 dd9e149e2b5ad59dd8b4b262f5fdeb5cc10ecf43
SHA512 ba8e09654cff264d428b1b3cf6df764699c6a754f2db329643881fb75cc8647a9c2777f05bb8c0d81b9d648d345796ffdb14fd231e2bb1caf71530098d12f219
MD5 SHA1 SHA512

NSIS installer

installer

$_12_/extensions/[email protected]/content/imgs/flgs/es.png

SHA256 e9aa6fcf5e814e25b7462ed594643e25979cf9c04f3a68197b5755b476ac38a7
MD5 d6693ce2a6346b2da89ceda335554e0a
SHA1 a88880bf0da5063d8082b66b066c4456e4d2e0d9
SHA512 6170bc86ff2076a7211161eeb09cf950da548c5e6c6a354054319ceb1f706e747ebae3ebf758efc24f0839266594bfc45eb3438677eb8c699420b60919cdc970
MD5 SHA1 SHA512

NSIS installer

installer

$_12_/extensions/[email protected]/content/imgs/flgs/fr.png

SHA256 79a39793efbf8217efbbc840e1b2041fe995363a5f12f0c01dd4d1462e5eb842
MD5 c1cf1874c3305e5663547a48f6ad2d8c
SHA1 0f67f12d76a0543772a3259a3b38935381349e01
SHA512 c00e202e083f703e39cafbb86f3e3f6b330359906e3a6c7a6a78364d6adeb489f8b8ab1b2d6a1b8d9ef1a17702cfc8fc17219cf1aae3e5a7c18833f028037843
MD5 SHA1 SHA512

NSIS installer

installer

$_12_/extensions/[email protected]/content/imgs/flgs/gr.png

SHA256 5648d2078756ae0b084312c46b02d82905cd9fb84262267cafcf9b71828ac358
MD5 fd9b321b80be31c027585c8992f1799f
SHA1 a7642c9048b600752746cbeb619db06986cb33aa
SHA512 9cdd89209e8d465e054f7259b3134bd4f45a758f7a1c805bb9839fa2e1a016887b0853b8cf943b1e64b8bb08155256bb1f1481e491b6d1df09195aac8f9c9d34
MD5 SHA1 SHA512

NSIS installer

installer

$_12_/extensions/[email protected]/content/imgs/flgs/he.png

SHA256 5432e244f03e3973153451b1ec88d649459580eab66e2df936fe2f70f2fed823
MD5 a135fcdefe8a391b416bdb102476e12b
SHA1 69193e287d1aff860283b7bfec58268cc1a22cce
SHA512 7aa881a7bf15107198f9ac1ff5b7583b7c0f501bfc6ca88c938501881d67972ce826c757a5c3ac7e3bbacab76abe2438b217bfccb1dd04c4beaacc5608c619e9
MD5 SHA1 SHA512

NSIS installer

installer

$_12_/extensions/[email protected]/content/imgs/flgs/il.png

SHA256 5432e244f03e3973153451b1ec88d649459580eab66e2df936fe2f70f2fed823
MD5 a135fcdefe8a391b416bdb102476e12b
SHA1 69193e287d1aff860283b7bfec58268cc1a22cce
SHA512 7aa881a7bf15107198f9ac1ff5b7583b7c0f501bfc6ca88c938501881d67972ce826c757a5c3ac7e3bbacab76abe2438b217bfccb1dd04c4beaacc5608c619e9
MD5 SHA1 SHA512

NSIS installer

installer

$_12_/extensions/[email protected]/content/imgs/flgs/it.png

SHA256 c7992f57d67156f994a38c6bb4ec72fa57601a284558db5e065c02dc36ee9d8c
MD5 784f7eb333f0591558bcce9616a3c105
SHA1 c786c15b1b86629c1bbb6ac12be5fba39181dec0
SHA512 0f3feaa63385520f2565c7aed0d6d7a0b6f66b78fb6c8845a026199c375707911822b93534033c15f0f517677c1e9a400263c1b6022794401cbf8d7367639b6d
MD5 SHA1 SHA512

NSIS installer

installer

$_12_/extensions/[email protected]/content/imgs/flgs/ja.png

SHA256 5efce88ac7228ea159bcf7fd1cc56d73c19428394218706524bac0e9151d4c61
MD5 10958397bc7c25c746e6e122365c003c
SHA1 3c5b175471d77c6e813a140c6859bca53952d9d3
SHA512 de6380d995a3f7ba70e05112332a4ba72f88ac2aa2f502a308d3f979197dc0a75c9822012b491c7f2f95519571ad6ca15b757b10a05cb95dc7006b0bde650ea3
MD5 SHA1 SHA512

NSIS installer

installer

$_12_/extensions/[email protected]/content/imgs/flgs/jp.png

SHA256 5efce88ac7228ea159bcf7fd1cc56d73c19428394218706524bac0e9151d4c61
MD5 10958397bc7c25c746e6e122365c003c
SHA1 3c5b175471d77c6e813a140c6859bca53952d9d3
SHA512 de6380d995a3f7ba70e05112332a4ba72f88ac2aa2f502a308d3f979197dc0a75c9822012b491c7f2f95519571ad6ca15b757b10a05cb95dc7006b0bde650ea3
MD5 SHA1 SHA512

NSIS installer

installer

$_12_/extensions/[email protected]/content/imgs/flgs/nl.png

SHA256 1546928846ee0a8377fd30865d4c43cef501eba7d775d494b98d1ce699627a4a
MD5 6186550ebc77b1c51cd3ae37e78c33c1
SHA1 622ec95e782d65a5115921b1788b7fc3e97d90ef
SHA512 e816190dfd411f4d9caac81448f8aa8296ee42536a7c2d48fd8af8f519c2bd924913d5003ff1afdb0fa1d277d378f87ea9ee0162048894a78fad5687d9c30f6b
MD5 SHA1 SHA512

NSIS installer

installer

$_12_/extensions/[email protected]/content/imgs/flgs/no.png

SHA256 f8dc302371c809ebda3e9183c606264601f8dd851d2b1878fd25f0f6abe2988c
MD5 559ce5baaee373db8da150a5066c1062
SHA1 ee80e5f63c986d04f46bff10f639113c88107ced
SHA512 c0ca7595cdd2dcef0385ccb1c0d15bb74accaea63b9531233bddf14c1791ffc9712dff660292706cfa269a975d29d7a189885cd09046ac6d8ed39a57ec9557ca
MD5 SHA1 SHA512

NSIS installer

installer

$_12_/extensions/[email protected]/content/imgs/flgs/pl.png

SHA256 34f6a1822d880608e7124d2ea0e3da4cd9b3a3b3b7d18171b61031cedbe6e72f
MD5 fad0e96c20f20be196499d26a6c74cd1
SHA1 e383eba9af578aced6f5e9b896b7fbb4d7ef120c
SHA512 e6f25c2c165341ab56241518b5cf574623370ca68a1865defbd681210c8ed02dc080c3f998018e8278399f4d9a711051ba66f06bc345c32cfd6272188db30b83
MD5 SHA1 SHA512

NSIS installer

installer

$_12_/extensions/[email protected]/content/imgs/flgs/pt.png

SHA256 ba636f1cb6bfd323dac1fb079cd002b5d486ed5eff54f4c4744b81316b257e96
MD5 5b8ab69ac52129bd32a3927f1b94d170
SHA1 058abf2f3e55994f2d952dbe8619bf9ad190635c
SHA512 f590d64f2e4407c3746b580dd94938d5288f0799e6bce082218639c80500dcb39110a75049d0c3f54977bafe1f9ffd212ea5b4c4a275658af5daf7c5a9e52a58
MD5 SHA1 SHA512

NSIS installer

installer

$_12_/extensions/[email protected]/content/imgs/flgs/ro.png

SHA256 0f83abcca7f07368819e3268d42f161edabcee4b56329c67de93779c1fba3ec5
MD5 d038c9c152c5e14f875c7b13afcd4711
SHA1 f141b663f5e234edabcb29e5fc69ce52f93be993
SHA512 9859531f797639458316f2a34aae3d56e8798ff45a7fed586c2e4129c93d1246af3d3d8509975d36a2ce7f4b38723ee79026020b1fe4fde628ef082e7e283769
MD5 SHA1 SHA512

NSIS installer

installer

$_12_/extensions/[email protected]/content/imgs/flgs/ru.png

SHA256 c6e9489e25e7854a58db93acc5a91b3cc023d33a70c4931dce8d2ef2868b5e94
MD5 0d31ef75adef220e73f0cb93a84a7422
SHA1 24b172c54d4691a8862403c73624f6b0bf23fc09
SHA512 708a416718a8461b26112ae05cea350eb44147ac43df9368280346a071440fec09155d069cf72554debbd6912c795a860cfe999c34a3dfbd588deb9a07db6764
MD5 SHA1 SHA512

NSIS installer

installer

$_12_/extensions/[email protected]/content/imgs/flgs/sa.png

SHA256 8a82f9366b0218584e72ba24eefdbf0f9dd6030480219e39f13cf1e7fe87a03a
MD5 605884cec6f446d418a092c0941acad5
SHA1 d305493e396df549a97ebc6ab3a81f7307431799
SHA512 3de20f2c9d18cbc5195b65a68534612d98b16e31dfc9c615b8c764da343b1a7d598c927a58d16be6c94a2b3e506400fcdc2ac338eaa8b5eef0e7d0419ac16585
MD5 SHA1 SHA512

NSIS installer

installer

$_12_/extensions/[email protected]/content/imgs/flgs/se.png

SHA256 dc67a89a0d57005dad961a1213206395e0dfd8c7825249a0611e140bf211e323
MD5 4c01f06db23324267e2802dcade3572f
SHA1 f3e4cb0b941ff02eb176bab9ba45feff6f544a17
SHA512 47d7f06f7f1c3e7d49dcd75e36185a39be94b81c233f6154c200bd3ebcd25b23ce40a25a4c0708051507b9a734beae56c7c66dcd6e2eb006f21c58d7c0044b8a
MD5 SHA1 SHA512

NSIS installer

installer

$_12_/extensions/[email protected]/content/imgs/flgs/sv.png

SHA256 9722f682cdac58479490bd4ad3e2988aaf69fff9f73c4795f586fd6537cc97af
MD5 c6c853766dfbab2ddd225980d3012f5c
SHA1 a66a15a3d88a4343d0cac61d0b8c97fce2198b7d
SHA512 e513ca04828ce764389b6204d52f336344e95bd2d229a90f393773daa8f380164cedaa83cafcc9f58f0be8466da96b87a26fc6fdeb198e183fbee6c759aecc20
MD5 SHA1 SHA512

NSIS installer

installer

$_12_/extensions/[email protected]/content/imgs/flgs/tr.png

SHA256 292d592f7fa1df2fa653ecc1e03d5eb2ae68277c6df264f762aefb8218e23454
MD5 31ea1f705854ad57c432845068bd05d3
SHA1 e1821d04141354bfdeb2e25e488ac8a7face8900
SHA512 48258f8dd8184851243f72ba042d00acec6c3fade4b3acb6265a41ec078802505352c7f09a307567ee9331583568bcc8165e806648a462e637856e2d272413b5
MD5 SHA1 SHA512

NSIS installer

installer

$_12_/extensions/[email protected]/content/imgs/flgs/ua.png

SHA256 9ae2f204178855c4fdb29ce75a0a1b2588fc3db3a7084d29715876bacd293508
MD5 7ef7a6f5def3a4117d5c2f08e37008ff
SHA1 9fd21d733a8d9d551c5880c8f0b6a5e5c6916f57
SHA512 ab9d39fedf5a1e0c7fcc8226a4e43a0e241dfe3e08dfb3eeec028dc44a48431c56e7c434d99c75e11024aa36a1c383ca4fb1749126719acc9ff1bc7f7d311d71
MD5 SHA1 SHA512

NSIS installer

installer

$_12_/extensions/[email protected]/content/imgs/flgs/us.png

SHA256 36cce5cae3d2e0045b2b2b6cbffdad7a0aba3e99919cc219bbf0578efdc45585
MD5 968591e0050981be9fa94bd2597afb48
SHA1 dd9e149e2b5ad59dd8b4b262f5fdeb5cc10ecf43
SHA512 ba8e09654cff264d428b1b3cf6df764699c6a754f2db329643881fb75cc8647a9c2777f05bb8c0d81b9d648d345796ffdb14fd231e2bb1caf71530098d12f219
MD5 SHA1 SHA512

NSIS installer

installer

$_12_/extensions/[email protected]/content/imgs/help_16.gif

SHA256 c0f88266f7bed444f325f262776de2e93ea08f0daefe34e6afe4321cea96464d
MD5 2a2dc1f7306ae44a3311fff7a6fb2a7f
SHA1 b404705e22dee4e3a2a4afddeb906aabb5178774
SHA512 fda8f40551c1d1ee2bf9f4eed7e1c3139e69ddc0ce89252d8272759520b58516ea4f9be6e3d039bd1286c6d490eac59f4a0199e89762ec5141284648198ff59a
MD5 SHA1 SHA512

NSIS installer

installer

$_12_/extensions/[email protected]/content/imgs/home.gif

SHA256 82e60bcbb0e378b47cf29f468e90f9bf380dac0832aa090d01567b4f92a00f6d
MD5 d755d9075bc4e174adc0277569b9ff0f
SHA1 5436346d99061cf9b443db01fd1ce9272d155fb4
SHA512 5b6b26a6b5be6bb5c1e12bfe782c56e55a35da7b7e0c3321d6dfd71c23dac72c1eaddd71809abe05d59b6af8f57303b1c48811e6e41b1e70080443f24bac50ce
MD5 SHA1 SHA512

NSIS installer

installer

$_12_/extensions/[email protected]/content/imgs/logo.png

SHA256 ea94c117ec1aa8077cb5582ed7600c661ef4adbea1d5e39ae31a308eb0f028b7
MD5 ad000bbce06733694151384b614c94d7
SHA1 7d2c7e141479e4ed9f8eaa8454ca15ed27438762
SHA512 c605c5742f70f08500898add2d0eafadc3381a9b4d125d0b6a5abf8ff64a7ec50ab2d901533df82c0c7f978b354dc0cddb198c8a5fcdae4f3994a00d801c5ce2
MD5 SHA1 SHA512

NSIS installer

installer

$_12_/extensions/[email protected]/content/imgs/privecy_16_hot.gif

SHA256 f39738751127030af7f04870ae22120df86355174a0162ec63169b85a0a0b657
MD5 88cf50e9f311da3b28823f47eb8c556b
SHA1 c8eab21735068e31487d150b8a1fbe8a5cbfc291
SHA512 d7ae9ad6a02b8e13e483a5804f83054d67009a883973fc1c139496e8f163fa82879b6f41f811b8697a252c4948da9993a05ea9941665205c056ff46d53fede8d
MD5 SHA1 SHA512

NSIS installer

installer

$_12_/extensions/[email protected]/content/imgs/tellafriend.gif

SHA256 cce0853613b237b4fbe284e485ccc7835db14cdb628c4f1dc7be19b637d5f5bf
MD5 42742d7e90c946ecf4f127f6e7c1ecce
SHA1 ec02244f0bc625ea156e6be8c1e08f2ced107b3a
SHA512 3c7af7b5758175d2bbbe6199d6eba27622530a3e5eb3602aecc74060b7b84a7e027a811c89b9ecc65f0f30c147fbce9245f4e8ec8db28f1a162e4f38084bcc0a
MD5 SHA1 SHA512

NSIS installer

installer

$_12_/extensions/[email protected]/content/loader.xul

SHA256 202e35385e5e971397ec44930e0c25f18fbb7e8c7633a9786b649dedd5677fb1
MD5 f583e5fba29e124acc0d3a3f74d7de54
SHA1 d5be9ea9a76e468b07ef27539ce29425eab35119
SHA512 ff359d780464cd1ce0acc96767380c47d14dbdf7580628882085c6f29763838e3501520054805f7ffb0da622bb2558bea05dc27037ee0620eda7443839756e53
MD5 SHA1 SHA512

polyglot

NSIS installer

installer

$_12_/extensions/[email protected]/content/mtstart.js

SHA256 cad051f85f074cec48a51a436fadbfbe36888bb17e9539be8f19d60d17ccbf6b
MD5 477c076ceefa0175810aee798167c75e
SHA1 fc87568ce7fdcaded375e8ea6f4d3a2919b9a747
SHA512 e20cdf406b5dad053e478c5435f9b1497e65da9bb6c20b2c084a39d6b45dc4d08e629d89690b7267c76da0b3fbec595212a30759c8f6ed0b5904b6319179c932
SSDEEP 192:4/LnCMXfeZSVekdgml7qIk+S0kGk/0r8c0JtSxNJOM:iLCMXfeZSVVeml7qIk+SvGk/jc0Jtwh
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$_12_/extensions/[email protected]/content/tmplt.js

SHA256 fe078bc40ffc977388a1f93d81858e901addbf2239bef51f5fe5f2a29fef5d64
MD5 ae6b7bb925f76c14e06cce500ebbc8ca
SHA1 61630e438c7e659409b2629a78c25bd7d3295184
SHA512 95928919c84c65108f80c587218d568380071f099b93180d1883642cf51873deb740381afa58b1a38cb84641fad1e815b21b0a065f5bdc95e0f7d3c0edb9f62c
SSDEEP 96:ZJpFZ7+xMkgTXM7qp3NDBPFrpR1pvAiz8v9JVXA96wDsdUslRydFkbsqBuu7hqTN:Z3F+MtXMep3xBPFrpbRzzNa5cybExaPC
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$_12_/extensions/[email protected]/content/uninsthk.js

SHA256 383d8a569dceec32f6cbf5ca4728a622f3a37b240d04e4fbdf97e7ba1857c927
MD5 531b89c676a4c6952888a5960afec0e8
SHA1 229592e622dba2209b85f1d9021c8dd8d8400c13
SHA512 a6f13ae6066c8c0b92a2cf2b9ac44109082a7c14aae4b807826d1e0ace8b0cf9ad889e6a1f16aaa425b051a3c2e5bb65dbb75edb2a7a19ec51b6477b8b762048
MD5 SHA1 SHA512

NSIS installer

installer

$_12_/extensions/[email protected]/install.rdf

SHA256 e89f3633b30638a021de0c770bd60f5da99b88a1c2e2d19599a8218874742552
MD5 fed7ec5f06787d5ff8216469696c2f89
SHA1 8c1985537770c0bd8bdd28e7c3d006d97070e3c4
SHA512 93234bb9a8e5e0781b6d24888fb28b3a492ae079d11f401ee0dd3ab0a7f219f55a70903e552be41e8df59839a17408b365f1ce0324d1eabdf64bebe365ed6b76
MD5 SHA1 SHA512

NSIS installer

installer

$_12_/extensions/staged/[email protected]/[email protected]

SHA256 4a6f960ad1bc730ff5f8bd372a0651cec975ccd4193987ffba0916a4f5811fa4
MD5 fa6c572fb0f001be8638bb315e8aea15
SHA1 46cdd34da010a7202c60edfd29d7d031ecbb4e02
SHA512 e66a7b90b46dd4df0a9e60ed3dc47cbeb4fbc0a0b04b822f3dcba79abdd0b749ed05162a2faa3ae76352428646fae473f7fd8a7493a1150b4b2619288bd5a409
MD5 SHA1 SHA512

NSIS installer

installer

$_12_/searchplugins/funmoods.xml

SHA256 3a8c47b1df750f58c70e7d0e6be476085749229a70bbfdec8285a6584fcd1cd6
MD5 024c000cdf53843a1b63e51a372c30cf
SHA1 fb6f38e5217a8fdff1c2fa771e5514ccadc21d16
SHA512 304ab3315b62dd73ccc1efb34395aa24f288c91f6a988b298b5eb557373e5aae455fb22830c635520fd55a83826a24fe4ced249fcdadbd19f0cd4a64e7c0a3f5
MD5 SHA1 SHA512

NSIS installer

installer

funmoods.xpi

SHA256 0d31e83ba5f8feb4f3189240d6596d8e59ea10589fe28daa6b0b6a042f55343d
MD5 6258f7b6a4fab9db966cd75d6d8ae6d2
SHA1 b13057eb9e92f7bac80df92b5b1c2ce690077256
SHA512 954395fef9493580aa348daf4267c42538d0ee774a038db3bb97cc5c229886652af1c8003eb84a46b2486f970f34229a859829782576ef4cf8fbec086367e654
SSDEEP 768:0tHqMH2ODELd/XtvF+JUz0xU+77lSeS35O0z4QsLuCum5KhAUuYya:0VqMWODEFtvFIxx7lSeho4Q6ruUlYya
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

META-INF/le_c6a58f26_4d2d_4341_b387_c4f2289b6170.rsa

SHA256 0a8d13e60037a5c6fa7a138b5b7d65e79c78d474251bd74304bcbd1ca1481a87
MD5 7e0328468b2d107bd797f7dce5c6b3bc
SHA1 2b77385017ef2be69e537f277f03b5d2683cdcf9
SHA512 e9affc775653123a444880ed3a92c8c53cb4e79abf00efa7ece839aecc583df6894aadf0843974dc9ff256acf7d3edf9665f79a6878ac0d019bc068f19627a50
SSDEEP 96:1SDHs/vVSog236vzj4dLddSbTLTKb41Zm2h46oUMisY8LKhcfU/1UHF7u:bVbg22zk38LWM1kfHix8ccI1uc
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

META-INF/le_c6a58f26_4d2d_4341_b387_c4f2289b6170.sf

SHA256 f97a7b7c704f6cd3d5b92e48ad24dacf4629d9fa6639b569a5cf36d9ca43e947
MD5 fc7d553eaefeb4159abfc26ef07cbc02
SHA1 90e5352c2138453158048c1b9f96a38a764720fd
SHA512 1aa3bc87e29898aae19149c4717b7455c655464c49a5106527b37dcbc9d43200fa95dd11e52c0f922c4e69f57b4d093b1a6900ddef4b18735218bee52a509e16
MD5 SHA1 SHA512

NSIS installer

installer

META-INF/manifest.mf

SHA256 31b97e14db9fbb7be12dc34527a90655cca1ee28087748f0cb14a00db5ad04ea
MD5 1f6f09fefcccd3b1bd3c257b97afe5cc
SHA1 0f9048a10ac310df1d13f88d265177b08aca49c8
SHA512 a6c50e9ab826ac3b6829b7055c9def80ae78d468383d3ca3f7562a2c9799feb6cfab0995f9b14c674c372fd20905fcdf862d44aa9d47e6c19a864caae4541f23
MD5 SHA1 SHA512

NSIS installer

installer

chrome.manifest

SHA256 71abc8728fc4d1b4afb257208b07aa15b732f5e5b1d0e5250af358146c708c61
MD5 dbfdad8541045207e847c7fbd782455c
SHA1 807ec972bab29e60852ead187cb20776ebae00c7
SHA512 60d0a84107c2836f5388d2a85fda9f41432dcfb1c85745292a9d8555d253d8ded4b35b9d031354a1ff1730b0bc29d5b4f70ae271dad70520e4752c844776d588
MD5 SHA1 SHA512

NSIS installer

installer

content/funmoods.css

SHA256 cd74208502712339beeba0e59b6d14d3ef4b366a68eb9f2a90bea1c3cb0f05d3
MD5 fa85f713ada77d9c4946bc33528316dc
SHA1 4f3889ecaad3512e04ee64ef3b728a66955591a0
SHA512 e9c0385cf8146ab14896a016d7572a9e2529c7283ffe4685656ee0384736f7f2b3a25ad190ff24b23fc80a4e909634232ca0a767d779e753ca61b459583f401d
MD5 SHA1 SHA512

NSIS installer

installer

content/funmoods.xul

SHA256 d4617e14b943fbde2acb8255829b7aa262f0217bd7a866940b2df93fb6f58acb
MD5 c8cbdee794e14616a5dd21aba2620284
SHA1 2929805189def49e4d8bc325838493aeae92ca98
SHA512 1fa9fd7fc79888533b20a06436981c7e636611daa9d2cc3405c6e4a683050c53e1e424f8d0e513a0bb5b70c7bc574918bc5283f302076f35acf4d9043961f19c
MD5 SHA1 SHA512

NSIS installer

installer

content/imgs/arwDwn.gif

SHA256 09d5f001629c8f26137e88cf7a0f7636e6c17d0d75abff9fd3ac106a85571617
MD5 2aa11fa4dcf0f03a0c8fb08170272566
SHA1 9e304d6bd0b0183a54baa2821772aa9f72ef149f
SHA512 8ee3d2e19a20ae5a2d84eed2c722d4bafe9ccc67eb7a061723f660178564945d5938584614f2bbdf5c90b2c78eddd3368196828a2992935f3a688db46f624080
MD5 SHA1 SHA512

NSIS installer

installer

content/imgs/flgs/ae.png

SHA256 18501f97e8f6782e1e13028632e28cf248e36f590992942de1800cad44c5c250
MD5 6eaf2387ebb3d038f6684457fc16bc44
SHA1 37efdfd3af3fb46e7b5158f045a1d471f15a3fa6
SHA512 f00a6e48be6c08044119cfcb578aaa3c5df6fc42bf51ee0d6334dd46d19afc254875bce0e6732fad1683834ae824578f10b124a5b07ae11cb2e720d510dff097
MD5 SHA1 SHA512

NSIS installer

installer

content/imgs/flgs/bg.png

SHA256 c4838a24ad388f934b04dbf9dba02a8bc6e9e58d0a1076477b47b5987a5c2d64
MD5 77b2183ab10cd26ee4e79fdfc12b8621
SHA1 c46dc6e0512560af14fceef6be24e8448e0f85f3
SHA512 50ddb2ce4bc0597bd3abba49ccfed0bc57484bffad6d44b8eaf2e8bdbffb52576167c7c575d218693c984d94775f6dd4b573038740d95cd6c402b8aeea49b885
MD5 SHA1 SHA512

NSIS installer

installer

content/imgs/flgs/ch.png

SHA256 7058233b5bdfdd4279e92e9dfe64bd4a61afd7e76d97dba498ce1d5777b92185
MD5 a82ff00f39eff54062328b4474c33dbc
SHA1 9c7185e038ea1000382fb1b14b88f3e9f2d99c14
SHA512 be801e5bbd51f6edb324dcd5b19239c64e011bb559e976875b2bcfe71b6a6eb1fd210454cc60402e7aeb6560e3ea6f277b1ca1eb4ff81bbb3dd99c3175a625f7
MD5 SHA1 SHA512

NSIS installer

installer

content/imgs/flgs/cn.png

SHA256 7058233b5bdfdd4279e92e9dfe64bd4a61afd7e76d97dba498ce1d5777b92185
MD5 a82ff00f39eff54062328b4474c33dbc
SHA1 9c7185e038ea1000382fb1b14b88f3e9f2d99c14
SHA512 be801e5bbd51f6edb324dcd5b19239c64e011bb559e976875b2bcfe71b6a6eb1fd210454cc60402e7aeb6560e3ea6f277b1ca1eb4ff81bbb3dd99c3175a625f7
MD5 SHA1 SHA512

NSIS installer

installer

content/imgs/flgs/cz.png

SHA256 0f39366d88fabe6f6f5c7a3cb6a11165de6bc6bc2108802c49df5f9840bc6541
MD5 815b6d2bf60a3179c0652f0b6895bcbb
SHA1 6e8ced4d87b16744fb54c674fe95dc14e86babf4
SHA512 4b59d849d28741ae7ef338d293c41298c3d646748ccaf3b07985df0f1470da7738f17ca73f6af75f237244ec87ad4c38de80ff0587f9e104c74cf39442e7f1c7
MD5 SHA1 SHA512

NSIS installer

installer

content/imgs/flgs/de.png

SHA256 3323814006fe6739493d27057954941830b59eff37ebaac994310e17c522dd57
MD5 ddabae687ecae5edaaeb808d440543e6
SHA1 1daf2d67ccaa5be01a330a231ac996a9d5575594
SHA512 5bfbe453e635ede38a7e495badb349a2ebaa152a794d26d5b69b657f8e8fd5188436542bfe8c35d0c1117c3a25500d0404069d4b854faece914e07684d07a928
MD5 SHA1 SHA512

NSIS installer

installer

content/imgs/flgs/eg.png

SHA256 e4c44b7ce8a72720e2ab8b38b8885fca36dda04daa14ae37909bbd501d853074
MD5 09c48d3562f0dc51e2f9507704f6437f
SHA1 2e391c4c1a76533812f5ffe27076bcacb0fc3386
SHA512 dad27de417df66001869193a315af87a18d20bd472c369f7a66141b4208809ad1286504130e9f1307aa8de6ee9e37efa20006ada8822e20567eb411239351d88
MD5 SHA1 SHA512

NSIS installer

installer

content/imgs/flgs/en.png

SHA256 36cce5cae3d2e0045b2b2b6cbffdad7a0aba3e99919cc219bbf0578efdc45585
MD5 968591e0050981be9fa94bd2597afb48
SHA1 dd9e149e2b5ad59dd8b4b262f5fdeb5cc10ecf43
SHA512 ba8e09654cff264d428b1b3cf6df764699c6a754f2db329643881fb75cc8647a9c2777f05bb8c0d81b9d648d345796ffdb14fd231e2bb1caf71530098d12f219
MD5 SHA1 SHA512

NSIS installer

installer

content/imgs/flgs/es.png

SHA256 e9aa6fcf5e814e25b7462ed594643e25979cf9c04f3a68197b5755b476ac38a7
MD5 d6693ce2a6346b2da89ceda335554e0a
SHA1 a88880bf0da5063d8082b66b066c4456e4d2e0d9
SHA512 6170bc86ff2076a7211161eeb09cf950da548c5e6c6a354054319ceb1f706e747ebae3ebf758efc24f0839266594bfc45eb3438677eb8c699420b60919cdc970
MD5 SHA1 SHA512

NSIS installer

installer

content/imgs/flgs/fr.png

SHA256 79a39793efbf8217efbbc840e1b2041fe995363a5f12f0c01dd4d1462e5eb842
MD5 c1cf1874c3305e5663547a48f6ad2d8c
SHA1 0f67f12d76a0543772a3259a3b38935381349e01
SHA512 c00e202e083f703e39cafbb86f3e3f6b330359906e3a6c7a6a78364d6adeb489f8b8ab1b2d6a1b8d9ef1a17702cfc8fc17219cf1aae3e5a7c18833f028037843
MD5 SHA1 SHA512

NSIS installer

installer

content/imgs/flgs/gr.png

SHA256 5648d2078756ae0b084312c46b02d82905cd9fb84262267cafcf9b71828ac358
MD5 fd9b321b80be31c027585c8992f1799f
SHA1 a7642c9048b600752746cbeb619db06986cb33aa
SHA512 9cdd89209e8d465e054f7259b3134bd4f45a758f7a1c805bb9839fa2e1a016887b0853b8cf943b1e64b8bb08155256bb1f1481e491b6d1df09195aac8f9c9d34
MD5 SHA1 SHA512

NSIS installer

installer

content/imgs/flgs/he.png

SHA256 5432e244f03e3973153451b1ec88d649459580eab66e2df936fe2f70f2fed823
MD5 a135fcdefe8a391b416bdb102476e12b
SHA1 69193e287d1aff860283b7bfec58268cc1a22cce
SHA512 7aa881a7bf15107198f9ac1ff5b7583b7c0f501bfc6ca88c938501881d67972ce826c757a5c3ac7e3bbacab76abe2438b217bfccb1dd04c4beaacc5608c619e9
MD5 SHA1 SHA512

NSIS installer

installer

content/imgs/flgs/il.png

SHA256 5432e244f03e3973153451b1ec88d649459580eab66e2df936fe2f70f2fed823
MD5 a135fcdefe8a391b416bdb102476e12b
SHA1 69193e287d1aff860283b7bfec58268cc1a22cce
SHA512 7aa881a7bf15107198f9ac1ff5b7583b7c0f501bfc6ca88c938501881d67972ce826c757a5c3ac7e3bbacab76abe2438b217bfccb1dd04c4beaacc5608c619e9
MD5 SHA1 SHA512

NSIS installer

installer

content/imgs/flgs/it.png

SHA256 c7992f57d67156f994a38c6bb4ec72fa57601a284558db5e065c02dc36ee9d8c
MD5 784f7eb333f0591558bcce9616a3c105
SHA1 c786c15b1b86629c1bbb6ac12be5fba39181dec0
SHA512 0f3feaa63385520f2565c7aed0d6d7a0b6f66b78fb6c8845a026199c375707911822b93534033c15f0f517677c1e9a400263c1b6022794401cbf8d7367639b6d
MD5 SHA1 SHA512

NSIS installer

installer

content/imgs/flgs/ja.png

SHA256 5efce88ac7228ea159bcf7fd1cc56d73c19428394218706524bac0e9151d4c61
MD5 10958397bc7c25c746e6e122365c003c
SHA1 3c5b175471d77c6e813a140c6859bca53952d9d3
SHA512 de6380d995a3f7ba70e05112332a4ba72f88ac2aa2f502a308d3f979197dc0a75c9822012b491c7f2f95519571ad6ca15b757b10a05cb95dc7006b0bde650ea3
MD5 SHA1 SHA512

NSIS installer

installer

content/imgs/flgs/jp.png

SHA256 5efce88ac7228ea159bcf7fd1cc56d73c19428394218706524bac0e9151d4c61
MD5 10958397bc7c25c746e6e122365c003c
SHA1 3c5b175471d77c6e813a140c6859bca53952d9d3
SHA512 de6380d995a3f7ba70e05112332a4ba72f88ac2aa2f502a308d3f979197dc0a75c9822012b491c7f2f95519571ad6ca15b757b10a05cb95dc7006b0bde650ea3
MD5 SHA1 SHA512

NSIS installer

installer

content/imgs/flgs/nl.png

SHA256 1546928846ee0a8377fd30865d4c43cef501eba7d775d494b98d1ce699627a4a
MD5 6186550ebc77b1c51cd3ae37e78c33c1
SHA1 622ec95e782d65a5115921b1788b7fc3e97d90ef
SHA512 e816190dfd411f4d9caac81448f8aa8296ee42536a7c2d48fd8af8f519c2bd924913d5003ff1afdb0fa1d277d378f87ea9ee0162048894a78fad5687d9c30f6b
MD5 SHA1 SHA512

NSIS installer

installer

content/imgs/flgs/no.png

SHA256 f8dc302371c809ebda3e9183c606264601f8dd851d2b1878fd25f0f6abe2988c
MD5 559ce5baaee373db8da150a5066c1062
SHA1 ee80e5f63c986d04f46bff10f639113c88107ced
SHA512 c0ca7595cdd2dcef0385ccb1c0d15bb74accaea63b9531233bddf14c1791ffc9712dff660292706cfa269a975d29d7a189885cd09046ac6d8ed39a57ec9557ca
MD5 SHA1 SHA512

NSIS installer

installer

content/imgs/flgs/pl.png

SHA256 34f6a1822d880608e7124d2ea0e3da4cd9b3a3b3b7d18171b61031cedbe6e72f
MD5 fad0e96c20f20be196499d26a6c74cd1
SHA1 e383eba9af578aced6f5e9b896b7fbb4d7ef120c
SHA512 e6f25c2c165341ab56241518b5cf574623370ca68a1865defbd681210c8ed02dc080c3f998018e8278399f4d9a711051ba66f06bc345c32cfd6272188db30b83
MD5 SHA1 SHA512

NSIS installer

installer

content/imgs/flgs/pt.png

SHA256 ba636f1cb6bfd323dac1fb079cd002b5d486ed5eff54f4c4744b81316b257e96
MD5 5b8ab69ac52129bd32a3927f1b94d170
SHA1 058abf2f3e55994f2d952dbe8619bf9ad190635c
SHA512 f590d64f2e4407c3746b580dd94938d5288f0799e6bce082218639c80500dcb39110a75049d0c3f54977bafe1f9ffd212ea5b4c4a275658af5daf7c5a9e52a58
MD5 SHA1 SHA512

NSIS installer

installer

content/imgs/flgs/ro.png

SHA256 0f83abcca7f07368819e3268d42f161edabcee4b56329c67de93779c1fba3ec5
MD5 d038c9c152c5e14f875c7b13afcd4711
SHA1 f141b663f5e234edabcb29e5fc69ce52f93be993
SHA512 9859531f797639458316f2a34aae3d56e8798ff45a7fed586c2e4129c93d1246af3d3d8509975d36a2ce7f4b38723ee79026020b1fe4fde628ef082e7e283769
MD5 SHA1 SHA512

NSIS installer

installer

content/imgs/flgs/ru.png

SHA256 c6e9489e25e7854a58db93acc5a91b3cc023d33a70c4931dce8d2ef2868b5e94
MD5 0d31ef75adef220e73f0cb93a84a7422
SHA1 24b172c54d4691a8862403c73624f6b0bf23fc09
SHA512 708a416718a8461b26112ae05cea350eb44147ac43df9368280346a071440fec09155d069cf72554debbd6912c795a860cfe999c34a3dfbd588deb9a07db6764
MD5 SHA1 SHA512

NSIS installer

installer

content/imgs/flgs/sa.png

SHA256 8a82f9366b0218584e72ba24eefdbf0f9dd6030480219e39f13cf1e7fe87a03a
MD5 605884cec6f446d418a092c0941acad5
SHA1 d305493e396df549a97ebc6ab3a81f7307431799
SHA512 3de20f2c9d18cbc5195b65a68534612d98b16e31dfc9c615b8c764da343b1a7d598c927a58d16be6c94a2b3e506400fcdc2ac338eaa8b5eef0e7d0419ac16585
MD5 SHA1 SHA512

NSIS installer

installer

content/imgs/flgs/se.png

SHA256 dc67a89a0d57005dad961a1213206395e0dfd8c7825249a0611e140bf211e323
MD5 4c01f06db23324267e2802dcade3572f
SHA1 f3e4cb0b941ff02eb176bab9ba45feff6f544a17
SHA512 47d7f06f7f1c3e7d49dcd75e36185a39be94b81c233f6154c200bd3ebcd25b23ce40a25a4c0708051507b9a734beae56c7c66dcd6e2eb006f21c58d7c0044b8a
MD5 SHA1 SHA512

NSIS installer

installer

content/imgs/flgs/sv.png

SHA256 9722f682cdac58479490bd4ad3e2988aaf69fff9f73c4795f586fd6537cc97af
MD5 c6c853766dfbab2ddd225980d3012f5c
SHA1 a66a15a3d88a4343d0cac61d0b8c97fce2198b7d
SHA512 e513ca04828ce764389b6204d52f336344e95bd2d229a90f393773daa8f380164cedaa83cafcc9f58f0be8466da96b87a26fc6fdeb198e183fbee6c759aecc20
MD5 SHA1 SHA512

NSIS installer

installer

content/imgs/flgs/tr.png

SHA256 292d592f7fa1df2fa653ecc1e03d5eb2ae68277c6df264f762aefb8218e23454
MD5 31ea1f705854ad57c432845068bd05d3
SHA1 e1821d04141354bfdeb2e25e488ac8a7face8900
SHA512 48258f8dd8184851243f72ba042d00acec6c3fade4b3acb6265a41ec078802505352c7f09a307567ee9331583568bcc8165e806648a462e637856e2d272413b5
MD5 SHA1 SHA512

NSIS installer

installer

content/imgs/flgs/ua.png

SHA256 9ae2f204178855c4fdb29ce75a0a1b2588fc3db3a7084d29715876bacd293508
MD5 7ef7a6f5def3a4117d5c2f08e37008ff
SHA1 9fd21d733a8d9d551c5880c8f0b6a5e5c6916f57
SHA512 ab9d39fedf5a1e0c7fcc8226a4e43a0e241dfe3e08dfb3eeec028dc44a48431c56e7c434d99c75e11024aa36a1c383ca4fb1749126719acc9ff1bc7f7d311d71
MD5 SHA1 SHA512

NSIS installer

installer

content/imgs/flgs/us.png

SHA256 36cce5cae3d2e0045b2b2b6cbffdad7a0aba3e99919cc219bbf0578efdc45585
MD5 968591e0050981be9fa94bd2597afb48
SHA1 dd9e149e2b5ad59dd8b4b262f5fdeb5cc10ecf43
SHA512 ba8e09654cff264d428b1b3cf6df764699c6a754f2db329643881fb75cc8647a9c2777f05bb8c0d81b9d648d345796ffdb14fd231e2bb1caf71530098d12f219
MD5 SHA1 SHA512

NSIS installer

installer

content/imgs/help_16.gif

SHA256 c0f88266f7bed444f325f262776de2e93ea08f0daefe34e6afe4321cea96464d
MD5 2a2dc1f7306ae44a3311fff7a6fb2a7f
SHA1 b404705e22dee4e3a2a4afddeb906aabb5178774
SHA512 fda8f40551c1d1ee2bf9f4eed7e1c3139e69ddc0ce89252d8272759520b58516ea4f9be6e3d039bd1286c6d490eac59f4a0199e89762ec5141284648198ff59a
MD5 SHA1 SHA512

NSIS installer

installer

content/imgs/home.gif

SHA256 82e60bcbb0e378b47cf29f468e90f9bf380dac0832aa090d01567b4f92a00f6d
MD5 d755d9075bc4e174adc0277569b9ff0f
SHA1 5436346d99061cf9b443db01fd1ce9272d155fb4
SHA512 5b6b26a6b5be6bb5c1e12bfe782c56e55a35da7b7e0c3321d6dfd71c23dac72c1eaddd71809abe05d59b6af8f57303b1c48811e6e41b1e70080443f24bac50ce
MD5 SHA1 SHA512

NSIS installer

installer

content/imgs/logo.png

SHA256 ea94c117ec1aa8077cb5582ed7600c661ef4adbea1d5e39ae31a308eb0f028b7
MD5 ad000bbce06733694151384b614c94d7
SHA1 7d2c7e141479e4ed9f8eaa8454ca15ed27438762
SHA512 c605c5742f70f08500898add2d0eafadc3381a9b4d125d0b6a5abf8ff64a7ec50ab2d901533df82c0c7f978b354dc0cddb198c8a5fcdae4f3994a00d801c5ce2
MD5 SHA1 SHA512

NSIS installer

installer

content/imgs/privecy_16_hot.gif

SHA256 f39738751127030af7f04870ae22120df86355174a0162ec63169b85a0a0b657
MD5 88cf50e9f311da3b28823f47eb8c556b
SHA1 c8eab21735068e31487d150b8a1fbe8a5cbfc291
SHA512 d7ae9ad6a02b8e13e483a5804f83054d67009a883973fc1c139496e8f163fa82879b6f41f811b8697a252c4948da9993a05ea9941665205c056ff46d53fede8d
MD5 SHA1 SHA512

NSIS installer

installer

content/imgs/tellafriend.gif

SHA256 cce0853613b237b4fbe284e485ccc7835db14cdb628c4f1dc7be19b637d5f5bf
MD5 42742d7e90c946ecf4f127f6e7c1ecce
SHA1 ec02244f0bc625ea156e6be8c1e08f2ced107b3a
SHA512 3c7af7b5758175d2bbbe6199d6eba27622530a3e5eb3602aecc74060b7b84a7e027a811c89b9ecc65f0f30c147fbce9245f4e8ec8db28f1a162e4f38084bcc0a
MD5 SHA1 SHA512

NSIS installer

installer

content/loader.xul

SHA256 202e35385e5e971397ec44930e0c25f18fbb7e8c7633a9786b649dedd5677fb1
MD5 f583e5fba29e124acc0d3a3f74d7de54
SHA1 d5be9ea9a76e468b07ef27539ce29425eab35119
SHA512 ff359d780464cd1ce0acc96767380c47d14dbdf7580628882085c6f29763838e3501520054805f7ffb0da622bb2558bea05dc27037ee0620eda7443839756e53
MD5 SHA1 SHA512

polyglot

NSIS installer

installer

content/mtstart.js

SHA256 cad051f85f074cec48a51a436fadbfbe36888bb17e9539be8f19d60d17ccbf6b
MD5 477c076ceefa0175810aee798167c75e
SHA1 fc87568ce7fdcaded375e8ea6f4d3a2919b9a747
SHA512 e20cdf406b5dad053e478c5435f9b1497e65da9bb6c20b2c084a39d6b45dc4d08e629d89690b7267c76da0b3fbec595212a30759c8f6ed0b5904b6319179c932
SSDEEP 192:4/LnCMXfeZSVekdgml7qIk+S0kGk/0r8c0JtSxNJOM:iLCMXfeZSVVeml7qIk+SvGk/jc0Jtwh
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

content/tmplt.js

SHA256 fe078bc40ffc977388a1f93d81858e901addbf2239bef51f5fe5f2a29fef5d64
MD5 ae6b7bb925f76c14e06cce500ebbc8ca
SHA1 61630e438c7e659409b2629a78c25bd7d3295184
SHA512 95928919c84c65108f80c587218d568380071f099b93180d1883642cf51873deb740381afa58b1a38cb84641fad1e815b21b0a065f5bdc95e0f7d3c0edb9f62c
SSDEEP 96:ZJpFZ7+xMkgTXM7qp3NDBPFrpR1pvAiz8v9JVXA96wDsdUslRydFkbsqBuu7hqTN:Z3F+MtXMep3xBPFrpbRzzNa5cybExaPC
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

content/uninsthk.js

SHA256 383d8a569dceec32f6cbf5ca4728a622f3a37b240d04e4fbdf97e7ba1857c927
MD5 531b89c676a4c6952888a5960afec0e8
SHA1 229592e622dba2209b85f1d9021c8dd8d8400c13
SHA512 a6f13ae6066c8c0b92a2cf2b9ac44109082a7c14aae4b807826d1e0ace8b0cf9ad889e6a1f16aaa425b051a3c2e5bb65dbb75edb2a7a19ec51b6477b8b762048
MD5 SHA1 SHA512

NSIS installer

installer

install.rdf

SHA256 e89f3633b30638a021de0c770bd60f5da99b88a1c2e2d19599a8218874742552
MD5 fed7ec5f06787d5ff8216469696c2f89
SHA1 8c1985537770c0bd8bdd28e7c3d006d97070e3c4
SHA512 93234bb9a8e5e0781b6d24888fb28b3a492ae079d11f401ee0dd3ab0a7f219f55a70903e552be41e8df59839a17408b365f1ce0324d1eabdf64bebe365ed6b76
MD5 SHA1 SHA512

NSIS installer

installer

FM4ie.exe

IMPHASH 7fa974366048f9c551ef45714595665e
SHA256 abcde03656f4c6f51d4d4c788ece555581b8c7b52bfe1c18ef70678cb3a2e872
MD5 ddcada8c66d56df6e4ef2bbedf2bb865
SHA1 059a7f8bb8ed2e99d5153d26ecf986e91c24df19
SHA512 63a3ca5d733cef71cc4ff61d6b5b3dd74613d57bac2b5d41efffbbf64ab6031bde66c0cd7058bf50c047e64e4ee0ef87dff3c7864a18c118521f5711ab69cc91
SSDEEP 24576:dJKgBMupYpmTl6Er2XzmtD3y42DZoNFtXlua97Y1QZTjc:p6HmTYEr2jMuj9oB0O7Ygc
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

2c:55:e7:85:8f:70:e1:c7:6c:ce:25:42:b1:8a:ea:63:25:f2:4c:d6

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Volonet Ltd,O=Volonet Ltd,POSTALCODE=67778,STREET=hazfira 19,L=Tel Aviv,ST=Israel,C=IL

Chains

Jan 25, 2012

Minor OS version

0

Major OS version

4

Entry point

12538

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CompareFileTime SearchPathA GetShortPathNameA GetFullPathNameA MoveFileA SetCurrentDirectoryA GetFileAttributesA GetLastError CreateDirectoryA SetFileAttributesA Sleep GetTickCount GetFileSize GetModuleFileNameA GetCurrentProcess CopyFileA ExitProcess GetWindowsDirectoryA SetFileTime GetCommandLineA SetErrorMode LoadLibraryA lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread CreateProcessA RemoveDirectoryA CreateFileA GetTempFileNameA lstrlenA lstrcatA GetSystemDirectoryA GetVersion CloseHandle lstrcmpiA lstrcmpA ExpandEnvironmentStringsA GlobalFree GlobalAlloc WaitForSingleObject GetExitCodeProcess GetModuleHandleA LoadLibraryExA GetProcAddress FreeLibrary MultiByteToWideChar WritePrivateProfileStringA GetPrivateProfileStringA WriteFile ReadFile MulDiv SetFilePointer FindClose FindNextFileA FindFirstFileA DeleteFileA GetTempPathA

user32

EndDialog ScreenToClient GetWindowRect EnableMenuItem GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard RegisterClassA TrackPopupMenu AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA DestroyWindow CreateDialogParamA SetTimer SetWindowTextA PostQuitMessage SetForegroundWindow wsprintfA SendMessageTimeoutA FindWindowExA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA OpenClipboard ExitWindowsEx IsWindow GetDlgItem SetWindowLongA LoadImageA GetDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint ShowWindow

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectA SetBkMode SetTextColor SelectObject

shell32

SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA SHGetSpecialFolderLocation

advapi32

RegQueryValueExA RegSetValueExA RegEnumKeyA RegEnumValueA RegOpenKeyExA RegDeleteKeyA RegDeleteValueA RegCloseKey RegCreateKeyExA

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

$LOCALAPPDATA/Google/Chrome/User Data/default/Local Storage/chrome-extension_fdloijijlkoblmigdofommgnheckmaki_0.localstorage

SHA256 2af3e0f282942a6a94d441acd9fe930fe2401fbdfbc67a1e44f490fe914afe7d
MD5 97471c285c1afe9b7a2604b573ea4dcc
SHA1 722841633891847a5636d0ef48799e3b0e431c91
SHA512 eb33ef015ac8ff79fc13dcc0bb62629d0c32fef36b7997f01117616c403864bf3419d0d8d5aa0b16939b26e86f831bcacf60da42a239b6d199880ce958da4374
MD5 SHA1 SHA512

NSIS installer

installer

$PLUGINSDIR/ExtractDLLEx.dll

IMPHASH bab48790663c56c456d63bc3e045f161
SHA256 73acba7dd477dfd6cf4249911f4e3c781196c7cf6b28425761dcb2d4f90c36c5
MD5 ba4063f437abb349aa9120e9c320c467
SHA1 b045d785f6041e25d6be031ae2af4d4504e87b12
SHA512 48a813f55834069f8c6b90740de3df01564a136b0fe637f9f85cc1a19d7f32b1f70205ff2462526508fe3c1962d7c1e8e384c40463e328538aeba28e8d0fb92a
SSDEEP 96:lyEPmi/06iLbX8SIP59L1MmqPbgkk/eWKCHGojGYYIF/ggiomsTeZUzI:lyEPmymbMbPZOz+/eWJmoUItiopTeZ
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

5889

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/InetLoad.dll

IMPHASH 24a4a671f5cc294ce3543d18a1e873cd
SHA256 bf01a1f272e0daf82df3407690b646e0ff6b2c562e36e47cf177eda71ccb6f6c
MD5 994669c5737b25c26642c94180e92fa2
SHA1 d8a1836914a446b0e06881ce1be8631554adafde
SHA512 d0ab7ca7f890ef9e59015c33e6b400a0a4d1ce0d24599537e09e845f4b953e3ecd44bf3e3cbe584f57c2948743e689ed67d2d40e6caf923bd630886e89c38563
SSDEEP 384:nUOPTbiJmdztwwKq8W1cyMjPzV0Ac9k+LMkIX1+Gn+XHdjf:nTikliwKq8W1rMjPzz+f
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

11241

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

msvcrt

strchr _adjust_fdiv malloc _initterm free memset strstr strtol strncmp strtoul time strrchr

kernel32

GlobalFree lstrcpynA CreateThread WaitForSingleObject TerminateThread GetModuleHandleA lstrcpyA GlobalAlloc LoadLibraryA GetProcAddress lstrcmpiA CreateFileA lstrcmpA lstrlenA MulDiv WriteFile lstrcatA GetLastError DeleteFileA CloseHandle SleepEx

user32

GetDlgItem SendMessageA SetWindowTextA wsprintfA GetWindowTextA RegisterWindowMessageA CallWindowProcA PostMessageA DestroyWindow EnableWindow GetWindowLongA CreateWindowExA GetWindowRect GetClientRect ShowWindow IsWindowVisible GetFocus MessageBoxA SendDlgItemMessageA SetDlgItemTextA SetTimer LoadIconA DispatchMessageA TranslateMessage GetMessageA IsDialogMessageA IsWindow CreateDialogParamA FindWindowExA RedrawWindow SetWindowLongA

wininet

InternetErrorDlg InternetSetFilePointer HttpQueryInfoA InternetQueryOptionA HttpSendRequestA HttpAddRequestHeadersA InternetSetOptionA HttpOpenRequestA FtpOpenFileA InternetGetLastResponseInfoA InternetConnectA InternetCrackUrlA InternetOpenA InternetReadFile InternetCloseHandle

comctl32

ord17

$PLUGINSDIR/NSISdl.dll

IMPHASH 9cce555dd3ff1b6c7dc92d64c794c51a
SHA256 dacc88a12d3ba438fdae3535dc7a5a1d389bce13adc993706424874a782e51c9
MD5 a5f8399a743ab7f9c88c645c35b1ebb5
SHA1 168f3c158913b0367bf79fa413357fbe97018191
SHA512 824e567f5211bf09c7912537c7836d761b0934207612808e9a191f980375c6a97383dbc6b4a7121c6b5f508cbfd7542a781d6b6b196ca24841f73892eec5e977
SSDEEP 192:tUZTobBDJ68r67wmsvJI5ad9cXzFOVu+mZ/P3p+57CvpVqDxVp01Dwn2GRPgsfA:6Bo/680dCI5adOjFOg9//p27uNw2Go
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

8903

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/Processes.dll

IMPHASH eaa5f91829171a65db414b9e64ec9548
SHA256 3b5388e13dab53d53e08791f492ed7d3094a0cee51e9841af83ce02534e0621c
MD5 cc0bd4f5a79107633084471dbd4af796
SHA1 09dfcf182b1493161dec8044a5234c35ee24c43a
SHA512 67ba90ec04366e07d0922ffb4dbbb4f12f90b6785b87700adaae29327db9ec2a03d750b229f858db0594f439499d6346fbf1ebc17c77162bf8da027515219ee3
SSDEEP 768:WmswCIbuzwEmd7Fp4KpDAKngV9tV3rJy63JgaVwoz7si4uYqUYWu1gYwmj552RFB:WmswCIbuzwEy7n3YD3Jgw7shKrp55io
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

5

Entry point

7219

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

LoadLibraryA GetProcAddress FreeLibrary OpenProcess CloseHandle TerminateProcess GlobalFree lstrcpyA FlushFileBuffers CreateFileA GetCurrentThreadId GetCommandLineA GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetLastError InterlockedDecrement HeapFree Sleep ExitProcess SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate HeapDestroy VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WriteFile GetConsoleCP GetConsoleMode EnterCriticalSection LeaveCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage HeapAlloc VirtualAlloc HeapReAlloc InitializeCriticalSectionAndSpinCount RtlUnwind SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize

user32

GetDesktopWindow FindWindowA UpdateWindow wsprintfA

$PLUGINSDIR/System.dll

IMPHASH 2017f2acbdaa42ab3e4adeb8b4c37e7b
SHA256 dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
MD5 c17103ae9072a06da581dec998343fc1
SHA1 b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
SHA512 d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
SSDEEP 192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

10544

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/Time.dll

IMPHASH 2e3a4d1f132aea64d421c1e936bcc407
SHA256 b4a95a455e53372c59f91bc1b5fb9e5c8e4a10a506fa04aaf7be27048b30ae35
MD5 38977533750fe69979b2c2ac801f96e6
SHA1 74643c30cda909e649722ed0c7f267903558e92a
SHA512 e17069395ad4a17e24f7cd3c532670d40244bd5ae3887c82e3b2e4a68c250cd55e2d8b329d6ff0e2d758955ab7470534e6307779e49fe331c1fd2242ea73fd53
SSDEEP 192:oNcwTweFbs9t2n2Sgiga65/aHdaGZavaJIYX4Hw2:oNcwBFg22SEw47CPU
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

5280

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/UserInfo.dll

IMPHASH afa8e526425f3585465337467d0b5909
SHA256 564c80dec62d76c53497c40094db360ff8a36e0dc1bda8383d0f9583138997f5
MD5 7579ade7ae1747a31960a228ce02e666
SHA1 8ec8571a296737e819dcf86353a43fcf8ec63351
SHA512 a88bc56e938374c333b0e33cb72951635b5d5a98b9cb2d6785073cbcad23bf4c0f9f69d3b7e87b46c76eb03ced9bb786844ce87656a9e3df4ca24acf43d7a05b
MD5 SHA1 SHA512

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

4762

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/chrmPref.dll

IMPHASH 73560154a4cae5f2674985bd67926ba9
SHA256 c9ccc486c3353bad0d2819a42203c0db7ba98b4826b6a2b8d4deee832e4d3d8e
MD5 6845d147b88de1f005d9c6ebb6596574
SHA1 64523302e2b1e2ee7a31580d2acac852db3c7e45
SHA512 cd4caa6669b5f90ead60579a2e5b01a9cd2d17fd2919651cecda6327acb32e2eb3b9953412c085d50dee89779d2f60df658236fb4c3cc54bed4ae66929590606
SSDEEP 3072:H+PBtVBjFBb/xZQ1VsqijYj8Wc+OYfaimTMIP7hjyhZN2OOsHuVI:H+PBdjFBb/TGzBOoaiGP7hjQE
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

1

Major OS version

5

Entry point

67797

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

SizeofResource LockResource LoadResource FindResourceW FindResourceExW WideCharToMultiByte GetProcAddress GlobalFree lstrcpyA SetEnvironmentVariableA GetCurrentThreadId WaitForSingleObject GetTickCount ReleaseMutex CloseHandle CreateMutexA Sleep FreeLibrary LoadLibraryA SetEndOfFile CreateFileW CreateFileA SetStdHandle WriteConsoleW LoadLibraryW IsValidLocale RaiseException EnterCriticalSection LeaveCriticalSection GetLastError InitializeCriticalSectionAndSpinCount DeleteCriticalSection HeapDestroy HeapAlloc HeapFree HeapReAlloc HeapSize GetProcessHeap InterlockedIncrement InterlockedDecrement InitializeCriticalSection EncodePointer DecodePointer RtlUnwind GetCommandLineA LCMapStringW MultiByteToWideChar GetCPInfo TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW SetLastError TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetACP GetOEMCP IsValidCodePage IsProcessorFeaturePresent HeapCreate SetHandleCount GetStdHandle GetFileType GetStartupInfoW ExitProcess WriteFile GetConsoleCP GetConsoleMode FlushFileBuffers ReadFile SetFilePointer GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetModuleFileNameW GetLocaleInfoW GetStringTypeW GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA

user32

PeekMessageA TranslateMessage DispatchMessageA MsgWaitForMultipleObjects

$PLUGINSDIR/mt.dll

IMPHASH 4b5bae2aede4b4438c292da900ad65e1
SHA256 6dc2644a389feeef9e0ac65e2c8b01fc18ca6e53b253f10efffcb117e0a852dd
MD5 aac69f856c4540edd4ef7ce6c8571639
SHA1 2860f55ea9774d631219e66604051e90a43258b7
SHA512 ebacc8117c44d298ae519705510285c576932761b3c7b697eeb91cb7620150ebe551102d1ab83d68f4c78e1496b191a55ad8f78c491f5b4af456c4de6ad72dcd
SSDEEP 48:am+jZiVMdzNNqdugTvfbAMHpyncQk7IZigYyPSx1A8v1XlWzNKjW1Qg/BTv:zKiVMdhwr7k0pycQBZtJuA8vUQi1QkN
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

1

Major OS version

5

Entry point

4097

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/nsisos.dll

IMPHASH a70233c77fd258ec47709388c2338273
SHA256 ba79ab7f63f02ed5d5d46b82b11d97dac5b7ef7e9b9a4df926b43ceac18483b6
MD5 69806691d649ef1c8703fd9e29231d44
SHA1 e2193fcf5b4863605eec2a5eb17bf84c7ac00166
SHA512 5e5e0319e701d15134a01cb6472c624e271e99891058aef4dfe779c29c73899771a5b6f8b1cd61b543a3b3defeaecaa080c9cc4e76e84038ca08e12084f128eb
SSDEEP 48:6EyuygeHCfxwU5x+6kx/k1gONv27oBc2OkIrHHl:VeHCf2762kKsu7oGjkIrn
MD5 SHA1 SHA512 SSDEEP

windows:1 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

1

Entry point

4424

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Name

.text

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

80B

Virtual Size

80B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

588B

Virtual Size

588B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

156B

Virtual Size

156B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE

Name

.edata

Size

96B

Virtual Size

96B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_READ

$_12_/searchplugins/funmoods.xml

SHA256 3a8c47b1df750f58c70e7d0e6be476085749229a70bbfdec8285a6584fcd1cd6
MD5 024c000cdf53843a1b63e51a372c30cf
SHA1 fb6f38e5217a8fdff1c2fa771e5514ccadc21d16
SHA512 304ab3315b62dd73ccc1efb34395aa24f288c91f6a988b298b5eb557373e5aae455fb22830c635520fd55a83826a24fe4ced249fcdadbd19f0cd4a64e7c0a3f5
MD5 SHA1 SHA512

NSIS installer

installer

bh/funmoods.dll

IMPHASH d47b1e55220a4ab084e05fc6d1d43f73
SHA256 ba6870cd06e5700f918c30ee92391d8a77c99b3fda06372c42b35983ee88253c
MD5 d5a9ec59fbf50e576b1d3b60ccfb7117
SHA1 cc22b0aa6f4b5367865b75f3c0afa788c7f97d8e
SHA512 60b4965d7f4ff6df4aedda7ec87a074e1d2c13860a3dea325eb551191e643ea9cbed4efe13c3ea2358a3b896c010b773c1c76ac52be81c0a171796fe988be086
SSDEEP 6144:BYgn1+Qe3u0GsN2CvAJkVAp7ah/axO6r+JSASNAv:ygUQe3BGsN2CvAzp7ah/axO6vA
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

e9:4a:52:6e:33:39:1d:21:7c:52:c7:fe:0b:50:91:09:3a:54:a2:8c

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Volonet Ltd,O=Volonet Ltd,POSTALCODE=67778,STREET=hazfira 19,L=Tel Aviv,ST=Israel,C=IL

Chains

Jan 25, 2012

Minor OS version

1

Major OS version

5

Entry point

92481

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

sensapi

IsNetworkAlive

kernel32

InitializeCriticalSectionAndSpinCount DeleteCriticalSection lstrlenA lstrcmpiA GetModuleFileNameA GetModuleHandleW IsDBCSLeadByte InterlockedIncrement InterlockedDecrement FreeLibrary FindResourceA LoadLibraryExA SetThreadLocale GetThreadLocale GetLastError GetCurrentProcess GetCurrentThreadId lstrcpyW SetLastError GetTickCount GetEnvironmentVariableA SetEnvironmentVariableA SetFilePointer LoadLibraryW EnterCriticalSection FlushInstructionCache LeaveCriticalSection GetStringTypeW GetCurrentProcessId QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetStartupInfoW GetFileType SetHandleCount RaiseException InitializeCriticalSection CreateMutexA ReleaseMutex lstrlenW MultiByteToWideChar WideCharToMultiByte GetModuleHandleA GetProcAddress FindResourceExW FindResourceW LoadResource LockResource SizeofResource GetConsoleCP LCMapStringW Sleep WaitForSingleObject GetConsoleMode FlushFileBuffers CloseHandle CreateFileW WriteConsoleW SetStdHandle HeapCreate ExitProcess IsValidCodePage GetOEMCP GetACP GetCPInfo TlsFree TlsSetValue TlsGetValue TlsAlloc TerminateProcess IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetModuleFileNameW GetStdHandle WriteFile GetCommandLineA GetSystemTimeAsFileTime VirtualQuery GetSystemInfo VirtualProtect HeapDestroy HeapAlloc HeapFree HeapReAlloc HeapSize GetProcessHeap InterlockedCompareExchange InterlockedPushEntrySList IsProcessorFeaturePresent VirtualFree VirtualAlloc InterlockedPopEntrySList LocalFree DecodePointer EncodePointer RtlUnwind

user32

KillTimer GetWindowLongA RegisterClassExA CharNextA CharNextW GetParent GetFocus GetWindowRect SetWindowLongA GetClientRect ShowWindow GetClassInfoExA LoadCursorA MoveWindow CharLowerBuffA SetTimer DefWindowProcA UnregisterClassA DispatchMessageA TranslateMessage PeekMessageA MsgWaitForMultipleObjects SetWindowPos IsWindow CallWindowProcA CreateWindowExA

advapi32

RegQueryInfoKeyA RegEnumKeyExA RegQueryInfoKeyW RegSetValueExA RegDeleteValueA RegDeleteKeyA RegOpenKeyExA RegCloseKey RegCreateKeyExA

shell32

SHGetFileInfoA

ole32

CreateItemMoniker CoTaskMemAlloc CoTaskMemRealloc CoTaskMemFree StringFromGUID2 CoCreateInstance OleRun StringFromCLSID CLSIDFromString GetRunningObjectTable CLSIDFromProgID

oleaut32

LoadTypeLi GetErrorInfo SysStringLen SysAllocStringLen VariantCopy VarBstrCmp DispCallFunc VariantInit LoadRegTypeLi SysStringByteLen SysAllocStringByteLen VariantClear VarUI4FromStr RegisterTypeLi UnRegisterTypeLi SysFreeString SysAllocString

shlwapi

StrStrIW SHDeleteValueA

funmoodsApp.dll

IMPHASH e35113ee0fd47e29fc8dfce476256148
SHA256 e4b3df5ead761fe83da367d5e2ae1d416d0f89a572480deecc20c4b4295f17eb
MD5 12be59f427297e54fef41f9bb32d4233
SHA1 0088967a4ed52f491976136c95d43e0e1b06cc31
SHA512 0f8f3826e8a9205771863c042a8386315784927e260ca8617c44f83b5f3f3a501500d6d39ae732da11c0621dbd6c8c6d75ac7af660a46bb70acac9c12991d2db
SSDEEP 6144:stda/v7xrjJ/by215eeNfe4qDge3tQOO0O3kolaL8T/9fpSDLYvttgOz1:s36v7xrjhby210Cfrqse3tvO0O3IL8TV
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

5b:a9:23:60:61:0a:18:d1:24:3e:88:c0:80:60:7c:39:a1:06:1a:00

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Volonet Ltd,O=Volonet Ltd,POSTALCODE=67778,STREET=hazfira 19,L=Tel Aviv,ST=Israel,C=IL

Chains

Jan 25, 2012

Minor OS version

1

Major OS version

5

Entry point

156567

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

iphlpapi

GetAdaptersInfo

kernel32

lstrlenA MultiByteToWideChar lstrcmpiA lstrlenW GetModuleFileNameA InterlockedIncrement InterlockedDecrement EnterCriticalSection LeaveCriticalSection IsDBCSLeadByte GetModuleHandleW FreeLibrary FindResourceA LoadLibraryExA SetThreadLocale GetThreadLocale GetCurrentThreadId LoadLibraryA InitializeCriticalSection DeleteFileA GetVolumeInformationA WaitForSingleObject GetTickCount ReleaseMutex SetEvent ResetEvent CloseHandle CreateMutexA CreateEventA FindResourceExW Sleep GetModuleHandleA ReadFile WriteFile SetFilePointer GetFileSize VirtualProtect VirtualQuery GetCurrentProcess GetVersionExA GetEnvironmentVariableA SetEnvironmentVariableA QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetStartupInfoW GetFileType SetHandleCount IsValidCodePage GetOEMCP GetACP GetCPInfo IsProcessorFeaturePresent SetLastError FindFirstFileA FindNextFileA FindClose FindResourceW LoadResource LockResource SizeofResource DeleteCriticalSection InitializeCriticalSectionAndSpinCount GetLastError RaiseException WideCharToMultiByte CreateFileA GetProcAddress GetCurrentProcessId TlsFree TlsSetValue TlsGetValue TlsAlloc CompareStringW FlushFileBuffers CreateFileW WriteConsoleW SetStdHandle GetConsoleMode GetConsoleCP TerminateProcess IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter HeapCreate GetModuleFileNameW GetStdHandle ExitProcess GetCommandLineA GetSystemTimeAsFileTime GetSystemInfo VirtualAlloc RtlUnwind EncodePointer DecodePointer LocalFree GetProcessHeap HeapSize HeapReAlloc HeapFree HeapAlloc HeapDestroy GetStringTypeW LCMapStringW LoadLibraryW GetTimeZoneInformation

user32

CharNextA KillTimer SetTimer CharNextW DispatchMessageA TranslateMessage PeekMessageA MsgWaitForMultipleObjects GetParent

advapi32

RegQueryValueExA RegEnumValueA RegQueryInfoKeyA RegQueryInfoKeyW RegDeleteValueA RegEnumKeyExA RegSetValueExA RegCloseKey RegDeleteKeyA RegCreateKeyExA RegOpenKeyExA

shell32

ord165 SHGetSpecialFolderPathA SHGetFileInfoA

ole32

OleRun CoCreateInstance CoTaskMemFree StringFromCLSID CLSIDFromProgID CLSIDFromString CoTaskMemAlloc CoTaskMemRealloc StringFromGUID2 CoCreateGuid

oleaut32

GetErrorInfo SysFreeString SysStringLen VarBstrCmp VariantInit VariantClear VarBstrCat DispCallFunc SysStringByteLen SysAllocStringByteLen RegisterTypeLi UnRegisterTypeLi VarUI4FromStr LoadTypeLi LoadRegTypeLi SysAllocString SysAllocStringLen VariantCopy

shlwapi

StrStrW StrCmpIW PathFindNextComponentA PathAppendA PathIsURLW SHSetValueA SHGetValueA

funmoodsEng.dll

IMPHASH f557e9fb9f5265548bcf5dc283c79ef2
SHA256 3d1b55bbb46e5788ca3e8ce68e515f52bdf63c0f53ceaad7236964eedf97f281
MD5 d5e0f923b3ee640efd6a58ec0c70cbdc
SHA1 74f62a9acdb9f9dd0580d69450c062ba8870deea
SHA512 471eca5adb43ba82cfed4fdb395471414301e3eeb602ba4fa6cccb9721869847a06bd8096d7eb15cbdcab908d6dfc47d48d293e1f77b881271f6d7dd4f54f3f0
SSDEEP 12288:gWv8EvxW/nkCIAhK6x8MmxKxfiYXjzDJajwzvOhgNU8d13GXTaqnq4p:PvcmGpKwzvOQHuqW
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

f0:6d:8a:6d:47:c3:ca:9a:39:91:cf:74:fa:89:54:f9:f5:9a:27:3d

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Volonet Ltd,O=Volonet Ltd,POSTALCODE=67778,STREET=hazfira 19,L=Tel Aviv,ST=Israel,C=IL

Chains

Jan 25, 2012

Minor OS version

1

Major OS version

5

Entry point

268586

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

psapi

GetModuleBaseNameA

kernel32

GetThreadLocale LockResource FindResourceW FindResourceExW GetCurrentProcess CloseHandle WaitForSingleObject FlushInstructionCache GetCurrentThreadId SetLastError CreateFileA CreateThread InitializeCriticalSection GetTickCount InterlockedExchange lstrcmpA MulDiv GlobalUnlock GlobalLock GlobalAlloc LoadLibraryA GetDateFormatA FileTimeToSystemTime Sleep ReleaseMutex SetEvent ResetEvent CreateMutexA CreateEventA GetEnvironmentVariableA SetEnvironmentVariableA WriteFile FileTimeToLocalFileTime GetFileTime MapViewOfFile CreateFileMappingA OpenFileMappingA GetFileSize UnmapViewOfFile ReadFile SetFilePointer HeapDestroy HeapAlloc InitializeCriticalSectionAndSpinCount LeaveCriticalSection EnterCriticalSection CreateDirectoryA SetThreadLocale CompareStringW FlushFileBuffers CreateFileW WriteConsoleW SetStdHandle LoadLibraryW GetConsoleMode GetConsoleCP IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID GetStringTypeW GetTimeZoneInformation GetCurrentProcessId QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetStartupInfoW GetFileType SetHandleCount GetLocaleInfoW GetModuleFileNameW GetStdHandle IsValidCodePage GetOEMCP GetACP ExitProcess TlsFree TlsSetValue TlsGetValue TlsAlloc HeapCreate TerminateProcess IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetCPInfo LCMapStringW GetTimeFormatA GetCommandLineA GetSystemTimeAsFileTime VirtualQuery GetSystemInfo VirtualProtect RtlUnwind LocalFree DecodePointer EncodePointer InterlockedPopEntrySList VirtualAlloc VirtualFree IsProcessorFeaturePresent LoadLibraryExA FindResourceA LoadResource SizeofResource FreeLibrary InterlockedDecrement InterlockedIncrement IsDBCSLeadByte GetModuleHandleW lstrcmpiA lstrlenA GetModuleHandleA GetProcAddress RaiseException MultiByteToWideChar GetModuleFileNameA CreateProcessA lstrlenW WideCharToMultiByte GetLastError HeapFree DeleteCriticalSection InterlockedPushEntrySList InterlockedCompareExchange GetProcessHeap HeapSize HeapReAlloc

user32

SetWindowLongA CharNextA PostMessageA GetClassInfoExA LoadCursorA CreateWindowExA RegisterClassExA DestroyWindow CharUpperBuffA DefWindowProcA GetWindowLongA CallWindowProcA SetWindowTextA GetWindowRect GetClientRect ScreenToClient IsWindowVisible SetTimer IsWindow CharNextW UnregisterClassA MsgWaitForMultipleObjects PeekMessageA TranslateMessage DispatchMessageA FindWindowExA EnumChildWindows GetWindowThreadProcessId SystemParametersInfoA InflateRect SetForegroundWindow GetWindowTextLengthA GetWindowTextA AnimateWindow GetCursorPos OffsetRect ShowWindow RegisterWindowMessageA SendMessageTimeoutA GetCaretBlinkTime CreateAcceleratorTableA SendMessageA GetDesktopWindow SetFocus DestroyAcceleratorTable BeginPaint EndPaint FillRect ReleaseCapture GetClassNameA GetDlgItem SetCapture RedrawWindow InvalidateRgn InvalidateRect ReleaseDC GetDC ClientToScreen SetWindowPos MoveWindow GetSysColor UpdateLayeredWindow CharLowerBuffA GetFocus GetParent GetWindow IsChild

gdi32

CreateCompatibleBitmap OffsetViewportOrgEx GetStockObject CreateSolidBrush GetDeviceCaps BitBlt GetObjectA CreateDIBSection DeleteObject SelectObject DeleteDC CreateCompatibleDC

advapi32

RegQueryValueExA RegEnumValueW RegQueryInfoKeyA RegEnumKeyExA RegQueryInfoKeyW RegSetValueExA RegCloseKey RegDeleteValueA RegDeleteKeyA RegCreateKeyExA RegOpenKeyExA

shell32

SHGetSpecialFolderPathW SHGetFileInfoA

ole32

CoTaskMemFree CoTaskMemRealloc CoTaskMemAlloc CoCreateInstance StringFromGUID2 StringFromCLSID OleRun CoInitialize CoUninitialize CreateItemMoniker CLSIDFromProgID CLSIDFromString OleLockRunning CoGetClassObject CreateStreamOnHGlobal OleInitialize OleUninitialize GetRunningObjectTable CoCreateGuid

oleaut32

OleCreateFontIndirect GetErrorInfo DispCallFunc SafeArrayCopy SafeArrayDestroy SafeArrayUnlock SafeArrayLock SafeArrayGetVartype SafeArrayGetDim SafeArrayGetUBound SafeArrayGetLBound VarBstrCat VariantCopy SysStringLen SysFreeString VariantClear SysAllocStringByteLen SysStringByteLen SysAllocString LoadTypeLi UnRegisterTypeLi RegisterTypeLi VarUI4FromStr VarBstrCmp SysAllocStringLen LoadRegTypeLi VariantInit

shlwapi

StrCmpIW SHSetValueA SHDeleteValueA SHGetValueA StrToIntExA

gdiplus

GdiplusShutdown

ws2_32

freeaddrinfo getaddrinfo WSASetLastError WSACleanup WSAStartup

funmoodsOEM.crx

SHA256 dbb1b7a95e1d639503f48d97732f0e50f431945fd923e6ccb9ee050eaf90d267
MD5 376547166affd0a765b9a2854dbabe90
SHA1 146dde5881a576134d8b9ba5b47711067d8177c4
SHA512 b817b54ab165489fc55b14ad8746cc6c8bce4bf32d0118d6d4b6ac343aa8df3535fac54d79849b5a3367cbda65e3277623e092c99d3ee65287685c79b2ce36a4
SSDEEP 768:zD3Bqd9YIL35PlH6ROtBxowFxA2JAQlwNnVwFDFYa9E5T6:v3M3jZPa2J3anVA+E
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

background.html

SHA256 142d338fee36140c43b037c3cfd4d9c44ba0e86756de41152c23c5eb7e150867
MD5 9568d567d3f0e6c6d63adb5d4c0d6f43
SHA1 eb846a3659c5997837de4580ebee0da5c3b576f8
SHA512 8833ddfb5753e9fd5df3f714563a9cfd16604382cf5e24eea2279dbd763a41883018d63b09c3e06080b314da7e7ae8c29724b360189e3e0f5bb9b06c8e291b0f
SSDEEP 96:CcclqZ9K07rUiATEqpy7u0/c8pNcmjUY/cWSIFRYwjNytpFIw30uG:CcZ9K07Ii8hy7FZT/cWZztjQEuG
MD5 SHA1 SHA512 SSDEEP

polyglot

NSIS installer

installer

dropdown.html

SHA256 3ecdc442c12fcfb97d1a197d588abe4e48f27df1c70ef4af67b8e5eda9e5613f
MD5 6d88ef2b75e7daf1cb7cc2fa4bb5b341
SHA1 b6502009339fca8e003be6fd145271fa8f86b3f2
SHA512 53ceb2577ae656e7a9dab6cdff169cd7f0bacc0e4cb2836b98fa0f95a560d4cc00031f9627adb7278416e2ea2326a5c23c041c2732eb03f7a3be70cc1ef33a83
MD5 SHA1 SHA512

polyglot

NSIS installer

installer

img/128.png

SHA256 fa00a8498a9db637baae05a7d5e2d23b72e68bd34b428ce4198340a6782df8de
MD5 7ad77b02b20fb1fd0297f1c9f677497c
SHA1 4a636e1949b351eb7164117188aee83c9396cd4d
SHA512 d864c72d52d1ccb9564f5fe56cb92694c171e6c241e7511cd8e133bf3241c1f1e3b06e3421dd535211503a13024d4c59db40050ba4df333e06edcfda89e51f0f
SSDEEP 384:5JXE05Pm3eHcTqG0hjZBfZLmjpwFYeGr2JaBcHXGx:r35PlH6ROtBxowFxA2JANx
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

img/16.png

SHA256 b748184b727f2175a5f1cf310784599aa9030fd124d9a764277e7aac301a7159
MD5 5203b90cf64318066ad46298257b5e60
SHA1 3350f62af4e81a6f8988b73150fa53fc9edb68b7
SHA512 f70085cda636d40ff8e58282fd68efcc974f42e048a877851ee977f79b3c4912a632d628302de5116c08b9d1778fe6bf0b797c712f644118e23f5a7039b6fa8a
MD5 SHA1 SHA512

NSIS installer

installer

img/32.png

SHA256 822adc04180e8893f87a63b750f6fcc0b0d996a02aa2f3c49855c73caffd2c00
MD5 289aa791661f74cac22be15fc7c67a05
SHA1 c9d9d3376dc8ac169270229119d92e27f495bdc4
SHA512 1770b50e02f3010d08d26ac4bf6bc989ef52106df8541a4f9003f26d73a114a381900e9d4f62e7e398be4bcc867b9c769fbff068882e7bd78462dd98bceef0ab
MD5 SHA1 SHA512

NSIS installer

installer

img/48.png

SHA256 10817f3e7123712637eb946460f63ae1e24982024a3c29576ae2396a151131ba
MD5 2b5730585dd3c65960696e60d5430901
SHA1 e891f335bc79488db2eeb4ed2661c8085dafa931
SHA512 9f48f03918c3098b1692550f10c0fcf1060860f07077ea0da691cf157d6ae1de830fc5e4562094973a52c0ca63879bd330a3954f103fc9a55b3bfbf55ff75002
MD5 SHA1 SHA512

NSIS installer

installer

img/64.png

SHA256 21f5ff83f481a3cc7533dc7f3a31addf4db959ca5862c8a8bfeae02291de9b15
MD5 6e83973e8a36db265f574777e13a80c2
SHA1 13eefd936445583e86c0b23edb9313075fb3888f
SHA512 5438f3ee5c2cb745b264cd82b255005e93cca611265c0d4bb042b2022708c0b4cdf89ba863137b02b5f83df97bdd96a8a6095f059c65bb2607d9e51ed44759be
MD5 SHA1 SHA512

NSIS installer

installer

img/ajax-loader.gif

SHA256 11beae7afc13803e67f552dd3c9e73ecd1be724cc8d2f9be4ab6859da46d8e4f
MD5 120815c454179a5f747e9d0110796dd9
SHA1 b8af186281369b2d6805cbc10fabccb14e30c4b1
SHA512 93d10b41fab7e25df20e2bcfff85f9eb01591b20437ba341102fafcb960ddb7f07e0ccb8f59dbddde8281ef06fe333e27d9db651bae0d79a5c4d970f47f984fd
MD5 SHA1 SHA512

NSIS installer

installer

js/FMLoader.js

SHA256 d650f26af6295fc9dc43f0ef7778fc81b48a0b14f9b2383bdf16621d756e3415
MD5 159a385a890c23d0a7f71bc9ccdac14b
SHA1 21454bbe8126069219c2315c6dabc054c1f0482a
SHA512 a01bc73a5fcb4645aec2422b7c83bab16b68680c3e0b2785206e228d102ddd1fad5773061b3857a67aebab9e215a6a56eccbca9282b6cda98b46be8a7a96fc44
MD5 SHA1 SHA512

NSIS installer

installer

js/mtrprt.js

SHA256 c0e6b0d688d447d4f04a542dc9aa8e556eadfad98218fa6b02f90a3be4cbbef4
MD5 2a71eff2b6fd3ee3a20aaa1aea96dd9d
SHA1 a73d3a67f972713b19827d8ca1f39bf03fad494c
SHA512 23195f81a6fc2bfc20c068393d71dcc44ebb08757ea63e07d003b376f00b1aec6e0aa31dce19b3cd2435736e26672b2c1a8a0defaa74965636790416ce9a4d70
MD5 SHA1 SHA512

NSIS installer

installer

manifest.json

SHA256 917301ee6934e6b2d945dee82704faddac897ee47b8eacd9d8cc338761ab7e39
MD5 3b0b69f08c3b79367211f79afffc6402
SHA1 1d4b95372e78e2f03deb48e164eee60ceaf5193a
SHA512 af1ac76ec25ca66c6c5941e2fc6087e00cb7827cdb73bdd74db7e738db50b661de0fd2c6f9cc52feadcea9576fc1fd6165a952cf303a4c3e1a66edd0fe511c9c
MD5 SHA1 SHA512

NSIS installer

installer

style/funmoods_chrome_1.0.1.css

SHA256 b6b253a03768c1a6597aec8537cebbac12c270418e6889c9a1e5036bf675535e
MD5 932e88939025dea549719b7ffb869668
SHA1 5ce566e183cea2674950c26746b9de5319434e24
SHA512 373056ec4d2e2cdd0a82c5d3f993532c409efe3a9e48c9ac4e42a7f7f41d89145d6fe68174dc7b105cf82f0cb14b545ac47dfb560496af23a7556ab6ad82310b
MD5 SHA1 SHA512

NSIS installer

installer

funmoodsTlbr.dll

IMPHASH ba74bcfef586b29720db3f114112697c
SHA256 b1fa4dacf9656e31588eebeca1f831c72a33d9affca07ede0d5f5d113ec14aaf
MD5 7f8be790b6614f46adeafd59761abbeb
SHA1 a1be7d513d40b1a0af1aa1fd73c2c2b6173ac700
SHA512 4d17c74368543092a8e7604208689bc6a5fc5bcc46c60cfb9255622d031a4265adaa13d7c0b5f410ababed802f29cb89c2dd7d7b1adc1af33fbb5f55e4a8a5ca
SSDEEP 3072:bxW/28HFiVkPdiCty0mYHAfT8GVhmkZKGgt5HEoW5+Dierdr:bxuplKkry1r8M7ZKG7QDi+dr
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

6e:ee:e3:15:03:da:8d:ad:79:79:f9:8b:ca:26:5c:c1:f4:e9:c7:24

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Volonet Ltd,O=Volonet Ltd,POSTALCODE=67778,STREET=hazfira 19,L=Tel Aviv,ST=Israel,C=IL

Chains

Jan 25, 2012

Minor OS version

1

Major OS version

5

Entry point

99499

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

FindResourceA LoadLibraryExA SetThreadLocale GetThreadLocale lstrcmpA MulDiv GlobalUnlock GlobalLock GlobalAlloc GetEnvironmentVariableA SetEnvironmentVariableA SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess TlsFree TlsSetValue TlsGetValue TlsAlloc HeapCreate GetModuleFileNameW GetStdHandle WriteFile ExitProcess GetCommandLineA FreeLibrary GetModuleHandleW InitializeCriticalSection CreateMutexA ReleaseMutex IsDBCSLeadByte WaitForSingleObject FlushFileBuffers CloseHandle CreateFileW WriteConsoleW SetStdHandle GetStringTypeW LCMapStringW GetConsoleMode SetLastError InterlockedDecrement InterlockedIncrement GetCurrentThreadId GetModuleFileNameA lstrlenW GetCurrentProcess FlushInstructionCache lstrcmpiA MultiByteToWideChar lstrlenA GetModuleHandleA GetProcAddress FindResourceExW FindResourceW LoadResource LockResource SizeofResource DeleteCriticalSection InitializeCriticalSectionAndSpinCount LeaveCriticalSection EnterCriticalSection GetLastError RaiseException WideCharToMultiByte VirtualQuery GetSystemInfo GetConsoleCP SetFilePointer LoadLibraryW GetCurrentProcessId GetTickCount QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetStartupInfoW GetFileType SetHandleCount Sleep IsValidCodePage VirtualProtect GetSystemTimeAsFileTime EncodePointer DecodePointer RtlUnwind LocalFree HeapSize HeapReAlloc HeapDestroy InterlockedPopEntrySList VirtualAlloc VirtualFree IsProcessorFeaturePresent HeapAlloc GetProcessHeap HeapFree InterlockedPushEntrySList InterlockedCompareExchange IsDebuggerPresent GetCPInfo GetACP GetOEMCP

user32

ClientToScreen SendMessageA GetWindowRect KillTimer SetTimer DestroyWindow SetWindowLongA ShowWindow IsWindow GetClassInfoExA LoadCursorA CharNextA RegisterClassExA GetClientRect CreateWindowExA CharNextW DefWindowProcA GetWindowLongA RegisterWindowMessageA GetWindowTextLengthA GetWindowTextA SetWindowTextA CreateAcceleratorTableA GetDesktopWindow SetFocus GetFocus DestroyAcceleratorTable FillRect ReleaseCapture GetClassNameA GetDlgItem IsChild SetCapture RedrawWindow InvalidateRgn InvalidateRect ReleaseDC GetDC MapWindowPoints SetWindowPos MoveWindow GetSysColor IsWindowVisible ScreenToClient GetCursorPos BeginPaint EndPaint GetParent GetWindow UnregisterClassA DispatchMessageA TranslateMessage PeekMessageA MsgWaitForMultipleObjects CallWindowProcA

gdi32

GetStockObject GetObjectA CreateSolidBrush GetDeviceCaps BitBlt CreateCompatibleDC CreateCompatibleBitmap SelectObject DeleteObject SetViewportOrgEx OffsetWindowOrgEx SetWindowOrgEx DeleteDC

advapi32

RegQueryInfoKeyA RegQueryInfoKeyW RegDeleteValueA RegEnumKeyExA RegSetValueExA RegCloseKey RegDeleteKeyA RegCreateKeyExA RegOpenKeyExA

shell32

SHGetFileInfoA

ole32

CreateItemMoniker CoTaskMemFree StringFromCLSID CoTaskMemAlloc CoTaskMemRealloc StringFromGUID2 CoCreateInstance OleLockRunning CoGetClassObject CLSIDFromProgID CLSIDFromString CreateStreamOnHGlobal OleInitialize OleUninitialize GetRunningObjectTable OleRun

oleaut32

VariantClear VariantCopy OleCreateFontIndirect SysAllocStringLen RegisterTypeLi UnRegisterTypeLi VarUI4FromStr LoadTypeLi LoadRegTypeLi DispCallFunc SysStringLen VariantInit SysAllocString SysFreeString GetErrorInfo

funmoodssrv.exe

IMPHASH 4adc191a64065fbf77b874c712d735dd
SHA256 93587b81f4e717b25a6e5fd2fb7158d7fb825f79af1c02ed0a61d5de15b6327b
MD5 ffba0384096f7a6c2189009b3c54c8db
SHA1 e1e883b9345bd74b0c7e158751c60b0ee2139677
SHA512 7ea59cd57a0b6ecb1258af1d271dcb68236d0b95fca0d5905d177dd8df980771b0a182a459a6a6f01cb4789433d193306324fa178b88b6ec3677aa5c589571dc
SSDEEP 12288:jFe2Ni3zogkFkLs5CXYWgAvvVpr2sXqZpgRQl/VQ:JDO962vvVphaZgoNQ
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

29:e1:b4:16:9a:bb:df:78:f0:31:17:c7:88:75:82:c2:97:17:d0:1b

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Volonet Ltd,O=Volonet Ltd,POSTALCODE=67778,STREET=hazfira 19,L=Tel Aviv,ST=Israel,C=IL

Chains

Jan 25, 2012

Minor OS version

1

Major OS version

5

Entry point

158903

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

sensapi

IsNetworkAlive

kernel32

InterlockedIncrement lstrlenA GetModuleFileNameA GetModuleHandleExA GetTickCount RaiseException EnterCriticalSection LeaveCriticalSection lstrcmpiA IsDBCSLeadByte Sleep CreateThread CreateEventA GetModuleHandleW GetCurrentThreadId SetEvent ExitProcess FreeLibrary FindResourceA LoadLibraryExA GetCommandLineA FlushInstructionCache GetCurrentProcess SetLastError LoadLibraryA SetFilePointer CreateDirectoryA GetTempPathA MoveFileExA GetTempFileNameA InitializeCriticalSection GlobalUnlock GlobalLock GlobalAlloc lstrcmpA MulDiv ReleaseMutex ResetEvent CreateMutexA GetVersionExA GetEnvironmentVariableA SetEnvironmentVariableA CreateFileA HeapReAlloc HeapSize CompareStringW CreateFileW InitializeCriticalSectionAndSpinCount WriteConsoleW FlushFileBuffers SetStdHandle LoadLibraryW LCMapStringW GetConsoleMode GetConsoleCP GetStringTypeW GetCurrentProcessId QueryPerformanceCounter GetFileType SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW IsValidCodePage GetOEMCP GetACP GetCPInfo TlsFree TlsSetValue TlsGetValue TlsAlloc GetModuleFileNameW GetStdHandle GetTimeZoneInformation TerminateProcess IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter HeapCreate GetSystemTimeAsFileTime GetStartupInfoW HeapSetInformation VirtualQuery GetSystemInfo VirtualProtect GetDateFormatA GetTimeFormatA RtlUnwind EncodePointer DecodePointer LocalFree InterlockedPopEntrySList VirtualAlloc VirtualFree IsProcessorFeaturePresent WaitForSingleObject GetFileTime InterlockedDecrement lstrlenW MultiByteToWideChar FileTimeToLocalFileTime FileTimeToSystemTime WriteFile WideCharToMultiByte CloseHandle GetModuleHandleA FindResourceExW FindResourceW LoadResource LockResource SizeofResource DeleteCriticalSection GetLastError GetProcessHeap GetProcAddress HeapFree HeapAlloc HeapDestroy InterlockedPushEntrySList InterlockedCompareExchange

user32

CharUpperA GetMessageA DispatchMessageA TranslateMessage LoadIconA CharNextA PostThreadMessageA UnregisterClassA SetWindowPos ShowWindow DestroyWindow SetTimer KillTimer SendMessageA IsWindow SetWindowLongA CharNextW FillRect MsgWaitForMultipleObjects PeekMessageA GetWindowTextLengthA GetWindowTextA CreateAcceleratorTableA DestroyAcceleratorTable GetDesktopWindow SetFocus GetFocus GetWindow BeginPaint EndPaint GetClassInfoExA ReleaseCapture GetClassNameA GetDlgItem GetParent IsChild SetCapture RedrawWindow InvalidateRgn InvalidateRect ReleaseDC GetDC ScreenToClient ClientToScreen GetClientRect MoveWindow GetSysColor RegisterWindowMessageA PostQuitMessage CreateWindowExA RegisterClassExA CallWindowProcA GetWindowLongA DefWindowProcA LoadCursorA SetWindowTextA

gdi32

BitBlt GetStockObject GetObjectA CreateSolidBrush GetDeviceCaps DeleteObject CreateCompatibleDC CreateCompatibleBitmap DeleteDC SelectObject

advapi32

RegQueryInfoKeyW RegEnumValueA RegQueryValueExA RegQueryInfoKeyA RegDeleteValueA RegEnumKeyExA RegSetValueExA RegCloseKey RegDeleteKeyA RegCreateKeyExA RegOpenKeyExA

shell32

ShellExecuteExA Shell_NotifyIconA SHGetSpecialFolderPathW ord165 SHGetSpecialFolderPathA SHGetFileInfoA

ole32

CoCreateGuid OleUninitialize OleInitialize OleRun CoCreateInstance CLSIDFromProgID CLSIDFromString CoTaskMemFree StringFromCLSID CoTaskMemAlloc CoTaskMemRealloc CoInitialize CoUninitialize CoRevokeClassObject CoRegisterClassObject StringFromGUID2 CoAddRefServerProcess CoReleaseServerProcess CoInitializeEx CreateStreamOnHGlobal OleLockRunning CoGetClassObject

oleaut32

LoadRegTypeLi GetErrorInfo SafeArrayGetDim OleCreateFontIndirect SysStringByteLen SysAllocStringByteLen VarBstrCat DispCallFunc RegisterTypeLi UnRegisterTypeLi VarUI4FromStr LoadTypeLi SafeArrayLock SafeArrayCopy SafeArrayDestroy SysAllocStringLen VariantCopy SysAllocString VariantClear VariantInit SysFreeString VarBstrCmp SysStringLen SafeArrayUnlock SafeArrayGetLBound SafeArrayGetUBound SafeArrayGetVartype

shlwapi

SHGetValueA PathAppendA PathRenameExtensionA PathFindFileNameA PathFindExtensionA StrStrW StrToIntW PathIsURLW PathAddBackslashA PathRemoveFileSpecA

uninstall.exe.nsis

SHA256 9ac8d924510442d2951e04541b343f0baab849a6c2ebd35e4fe937eeb2277b68
MD5 aa70d2e0220f6d11d8cf3f2bbb1b0454
SHA1 dd21a2d8e0cdf9f37530af87d1e658e8e52cb3d2
SHA512 30bc3154df5399af40a32f89a247996e658326fd6fc0f3cc9508024cf16fba90697cdd1f4e0e9dc7ace2986a195fd4c67f41dcf676948fdc0f9958c49e681d1d
SSDEEP 768:VyoCd3yModj0mnO/RycUoLqzUv5CLWX+VhouUJP4NOQdJcZfRxB0oWo:cJGj16bUi4VhYJfQfQf2oT
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$LOCALAPPDATA/lateral1.bmp

SHA256 e9be711645adceef7a7f55ad9b573cf67910c885ebf63024928656823079512b
MD5 09fbaede48cfedb759e640bed10d5dbf
SHA1 e1c0a5a77042595beae53955cad72143aac61045
SHA512 aeb67c0ccfea4b5c09dcbb398be9e863c3c35eb3f9cb8c8eb666e8d69fd00ac6195024e443333ce5645a04b00c38c17182533d9f8ba7312ff446f1be5cba0d28
SSDEEP 192:tLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLe:mAiUHnoQkU6KCrdD
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$LOCALAPPDATA/lateral2.bmp

SHA256 ca2a72e55aa5249a9c47983f7a03dcad7509b68adcf109b7913d26c9cf2fd353
MD5 d0d2b5814833b7412a66c89e8b75021d
SHA1 9b6c821d9078aa1054f522d3669686a1f7792b37
SHA512 04e1ae6a68ac73ef37bbe799e95ee6f218b846f129ee29fb7c6f24ea2134074dc88fc038fe67b47e49d7ce0675abb61c697eb54c6d67ac4b88984fefbefef141
SSDEEP 192:tLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLT:CcAiUHnoQkU6KCrdD
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$LOCALAPPDATA/lateral3.bmp

SHA256 6b9ca40f2943ce7ca4585cf1d0dda3cef8c96b305a6eb1f4df2686bf10c842ec
MD5 e1ce13e6f1ed1f339f8595ccf9d0198e
SHA1 666997a9f8786074193c6cb2160c2ef3962d3ecc
SHA512 6eb991deee612f18635d84d9d889388e4c8f9d9cd7021bd05a1dce480d067733d7da77c2da96c536ac39abc826188123fabdf3a21ee7da515d2d01a9f97c18f7
SSDEEP 192:mWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWW2:RGjOTJthkj6K2rQe
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/LangDLL.dll

IMPHASH 9b6b6a7858e17fb0b17e1c1428330343
SHA256 60a964095af1be79f6a99b22212fefe2d16f5a0afd7e707d14394e4143e3f4f5
MD5 9384f4007c492d4fa040924f31c00166
SHA1 aba37faef30d7c445584c688a0b5638f5db31c7b
SHA512 68f158887e24302673227adffc688fd3edabf097d7f5410f983e06c6b9c7344ca1d8a45c7fa05553adcc5987993df3a298763477168d4842e554c4eb93b9aaaf
SSDEEP 48:iV6pAvmNC6iMPUptxEZK65x/AmvycNSmwVsOYJyvrpXptp/JvR0Jlof5d2:2811GED5ZTvycNSmwVsTJuftpZR0Sd2
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

5526

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/System.dll

IMPHASH 2017f2acbdaa42ab3e4adeb8b4c37e7b
SHA256 dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
MD5 c17103ae9072a06da581dec998343fc1
SHA1 b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
SHA512 d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
SSDEEP 192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

10544

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/inetc.dll

IMPHASH e886a412cdaf11998a8eeffda508e913
SHA256 983859570099b941c19d5eb9755eda19dd21f63e8ccad70f6e93f055c329d341
MD5 1efbbf5a54eb145a1a422046fd8dfb2c
SHA1 ec4efd0a95bb72fd4cf47423647e33e5a3fddf26
SHA512 7fdeba8c961f3507162eb59fb8b9b934812d449cc85c924f61722a099618d771fed91cfb3944e10479280b73648a9a5cbb23482d7b7f8bfb130f23e8fd6c15fb
SSDEEP 384:XErRo4TdlKCdUk6qz46qu2vPqUcnlSHmkuPJOiya4fF0Ac9khYLMkIX0+GvBgK3M:XiRoW7Kc5bBq1qNlSHmkuPJOJa4f4CD
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

17793

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

msvcrt

_mbschr _adjust_fdiv malloc _initterm free strlen strchr strrchr _mbsrchr strtoul memset _mbsstr strtol

kernel32

GlobalFree CreateThread WaitForSingleObject TerminateThread GetModuleHandleA MulDiv lstrcpyA GlobalAlloc LoadLibraryA GetProcAddress lstrcmpiA CreateFileA GetFileSize lstrlenA WriteFile ReadFile lstrcmpA lstrcpynA lstrcatA GetLastError DeleteFileA CloseHandle SleepEx SetFilePointer GetTickCount

user32

MessageBoxA GetParent ShowWindow SetWindowLongA IsWindow SetWindowTextA SendDlgItemMessageA GetDlgItem PostMessageA GetWindowTextA SendMessageA SetDlgItemTextA SetWindowPos SystemParametersInfoA GetClientRect GetWindowRect SetTimer LoadIconA DestroyWindow KillTimer UpdateWindow RedrawWindow DispatchMessageA TranslateMessage IsDialogMessageA GetMessageA IsWindowVisible EnableWindow CreateDialogParamA FindWindowExA wsprintfA GetWindowLongA

wininet

HttpSendRequestA HttpSendRequestExA HttpQueryInfoA FtpCreateDirectoryA FtpOpenFileA InternetGetLastResponseInfoA InternetSetFilePointer InternetSetOptionA InternetQueryOptionA InternetCloseHandle InternetErrorDlg HttpAddRequestHeadersA HttpOpenRequestA HttpEndRequestA InternetConnectA InternetCrackUrlA InternetOpenA InternetReadFile InternetWriteFile

comctl32

ord17

$PLUGINSDIR/md5dll.dll

SHA256 fbed2f1160469f42ce97c33ad558201b2b43e3020257f9b2259e3ce295317a70
MD5 0745ff646f5af1f1cdd784c06f40fce9
SHA1 bf7eba06020d7154ce4e35f696bec6e6c966287f
SHA512 8d31627c719e788b5d0f5f34d4cb175989eaa35aa3335c98f2ba7902c8ae01b23de3ccb9c6eb95945f0b08ef74d456f9f22ca7539df303e1df3f6a7e67b358da
SSDEEP 96:GL2PcvGn5olZMTZxEp8agTsflVwn4GogZcko5N1ub:U2Pxn5UZMTZipyaw4ZkKP2
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

ACProtect 1.3x - 1.4x DLL software

Detects file using ACProtect software.
UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

31488

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

out.upx

SHA256 79653364f46754d144e3c6db81258d8cba965aae5d9d7b66030f7535d761b585
MD5 537a21e0573b7e13469e4b1ac35bd52d
SHA1 ecdc814bde9fec1c909e1907bd2c1bbac4914f54
SHA512 5a7efdd11ac09330cc6257999d670c4cdd97ef1acf5f121278d3811f4439feed745e2e1a04e1fa62abb04ac24b2130fa6e496ef5740d7a11d00f7ad5dd5f30e8
SSDEEP 96:yX4qYlYGflug0Dvxn6GuKM9sh1gdrN9+oB7FT9I4GogZcko5N1:yXMhugRK8hlTZkKP
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

4480

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/modern-header.bmp

SHA256 ecedfdae5316b8a8529c71949cc1e0e53a3e4cbc9552ab3301ec961404185220
MD5 b94ce22e857bffbbff032d747653b3b0
SHA1 fd7ee723aefb384db149bf92a36603cfb70f4d98
SHA512 cd89199ed395ebf873712d4a41e74a8271834e8104e67adb833c8c5884d081b9b65c49d2fa902d4a15eb14dba42246486ebfd33ddf80f4ed1add6b8891b49733
SSDEEP 384:l121P4+YUzC3vygNWiWnBz+bYhDJi+u7KrEOn4VhzytFC+D:DttH/lW1Bz3Dk+x63Ga+D
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/nsDialogs.dll

IMPHASH 1e2884056e655f2b7bc5a904e352fc80
SHA256 e31ad6c6e82e603378cb6b80e67d0e0dcd9cf384e1199ac5a65cb4935680021a
MD5 c10e04dd4ad4277d5adc951bb331c777
SHA1 b1e30808198a3ae6d6d1cca62df8893dc2a7ad43
SHA512 853a5564bf751d40484ea482444c6958457cb4a17fb973cf870f03f201b8b2643be41bccde00f6b2026dc0c3d113e6481b0dc4c7b0f3ae7966d38c92c6b5862e
SSDEEP 96:hBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4VndY7ndS27gA:h6n+0SAfRE+/8ZYxMdqn420
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

7410

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/nsRandom.dll

SHA256 db267d9920395b4badc48de04df99dfd21d579480d103cae0f48e6578197ff73
MD5 ab467b8dfaa660a0f0e5b26e28af5735
SHA1 596abd2c31eaff3479edf2069db1c155b59ce74d
SHA512 7d002dc203997b8a4d8ec20c92cd82848e29d746414f4a61265c76d4afb12c05bce826fc63f4d2bd3d527f38506c391855767d864c37584df11b5db9ca008301
SSDEEP 384:LCHDPMs4GdtyO5roguusMxUXiO3wOw95euooP2UgKbd9BvNtf:LCHD6Gh87MKXil/5r2U3z
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

ACProtect 1.3x - 1.4x DLL software

Detects file using ACProtect software.
UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

68128

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

out.upx

SHA256 5e5303e06d8457a10b294fafa628e115b403569703a1ae80c416916c5ed9b08b
MD5 501650d47110eec0b72b7d73b41478f7
SHA1 eaec655c4a6d175cf152a8d533b1cf611e445c01
SHA512 0615b3d50d57f3248f66cb2532fb43c494e5c9e97d1ea288bcd74d935cf0baa9f7fea5479418a34fc3532f7fbc0692376183c36bcd31dfe84ced42da853af7d6
SSDEEP 768:oCeqBQGwr4MINuUFp6dgUL5f9sC63x2mM6TyTFIK:PeqBQgMgNbASPtTyTSK
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

33064

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

28KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

1KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

73B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer