JaffaCakes118_05dc61097a763e7aff9e6d4e43f31477

resource
JaffaCakes118_05dc61097a763e7aff9e6d4e43f31477
unpack001/$PLUGINSDIR/ExecDos.dll
unpack001/$PLUGINSDIR/InstallOptions.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/$TEMPImg/Installer.exe
unpack002/$PLUGINSDIR/ExecDos.dll
unpack002/$PLUGINSDIR/System.dll
unpack003/$PLUGINSDIR/CABSetup.dll
unpack003/$PLUGINSDIR/InetLoad.dll
unpack003/$PLUGINSDIR/InstallOptions.dll
unpack003/$PLUGINSDIR/ScrollLicense.dll
unpack003/$PLUGINSDIR/System.dll
unpack003/$PLUGINSDIR/UserInfo.dll
unpack004/Helper.dll
unpack004/ImageConversion.dll
unpack004/RSSReader_plugin.dll
unpack004/RadioPlugin.dll
unpack004/SearchComponent.dll
unpack004/Toolbar.dll
unpack004/TroubleShooter.exe
unpack004/bookmarksplugin.dll
unpack004/emailchecker_plugin.dll
unpack004/gedit.exe
unpack004/msgboxplugin.dll
unpack004/weatherplugin.dll
unpack003/$PLUGINSDIR/gplunger.dll
unpack003/$PLUGINSDIR/nsExec.dll
unpack003/$PLUGINSDIR/nsisFirewall.dll
unpack003/$PLUGINSDIR/textreplace.dll
unpack003/$PLUGINSDIR/unicode.dll
unpack002/$TEMPImg/VerControl.exe
unpack002/$TEMPImg/chk.exe
unpack002/$TEMPImg/vcheck.exe
unpack002/Uninst.exe
unpack005/$PLUGINSDIR/Processes.dll
unpack001/IrisSkin2.dll
unpack001/SingleInstance.dll
unpack001/Uninst.exe
unpack006/$PLUGINSDIR/Processes.dll
unpack001/WallpaperRotator.exe
unpack001/tools/register.exe
unpack001/tools/register_y.exe

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2
static1/unpack001/$TEMPImg/Installer.exe	nsis_installer_1
static1/unpack001/$TEMPImg/Installer.exe	nsis_installer_2
static1/unpack002/$TEMPImg/PazeraToolbar.exe	nsis_installer_1
static1/unpack002/Uninst.exe	nsis_installer_1
static1/unpack002/Uninst.exe	nsis_installer_2
static1/unpack001/Uninst.exe	nsis_installer_1

IMPHASH 7fa974366048f9c551ef45714595665e
SHA256 0b6db0cbd5af09eba2eea7a3145f468ca190a1db48905df96a28acddb96efb67
MD5 05dc61097a763e7aff9e6d4e43f31477
SHA1 e9f3d1a0dcd77c4de75bce6ff3abc50b17dc94fd
SHA512 da59e9be895151e7ff095deb8479e86abb376e85d58987609d1766a8530971cfd9814e90d06dd3059adc66e71ed79621322a647b3caaac4193963489b516abad
SSDEEP 98304:R/ZGgMhv+5aR+uPCkQ4YCZL3zNc6a9Zpn6d/3VrDkk4EdKy3NixJ9pfhEhcyNo6m:R/Ar254tQEOD3YdPlDkpA3yn3MrN1An
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

12491

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CompareFileTime SearchPathA GetShortPathNameA GetFullPathNameA MoveFileA SetCurrentDirectoryA GetFileAttributesA GetLastError CreateDirectoryA SetFileAttributesA Sleep GetTickCount GetFileSize GetModuleFileNameA GetCurrentProcess CopyFileA ExitProcess GetWindowsDirectoryA SetFileTime GetCommandLineA SetErrorMode LoadLibraryA lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread CreateProcessA RemoveDirectoryA CreateFileA GetTempFileNameA lstrlenA lstrcatA GetSystemDirectoryA GetVersion CloseHandle lstrcmpiA lstrcmpA ExpandEnvironmentStringsA GlobalFree GlobalAlloc WaitForSingleObject GetExitCodeProcess GetModuleHandleA LoadLibraryExA GetProcAddress FreeLibrary MultiByteToWideChar WritePrivateProfileStringA GetPrivateProfileStringA WriteFile ReadFile MulDiv SetFilePointer FindClose FindNextFileA FindFirstFileA DeleteFileA GetTempPathA

user32

EndDialog ScreenToClient GetWindowRect EnableMenuItem GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard RegisterClassA TrackPopupMenu AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA DestroyWindow CreateDialogParamA SetTimer SetWindowTextA PostQuitMessage SetForegroundWindow wsprintfA SendMessageTimeoutA FindWindowExA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA OpenClipboard ExitWindowsEx IsWindow GetDlgItem SetWindowLongA LoadImageA GetDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint ShowWindow

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectA SetBkMode SetTextColor SelectObject

shell32

SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA SHGetSpecialFolderLocation

advapi32

RegQueryValueExA RegSetValueExA RegEnumKeyA RegEnumValueA RegOpenKeyExA RegDeleteKeyA RegDeleteValueA RegCloseKey RegCreateKeyExA

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

$PLUGINSDIR/ExecDos.dll

IMPHASH 2dfc6a992d004b736e85c64219a88b4a
SHA256 69ac56d2fdf3c71b766d3cc49b33b36f1287cc2503310811017467dfcb455926
MD5 a7cd6206240484c8436c66afb12bdfbf
SHA1 0bb3e24a7eb0a9e5a8eae06b1c6e7551a7ec9919
SHA512 b9ee7803301e50a8ec20ab3f87eb9e509ea24d11a69e90005f30c1666acc4ed0a208bd56e372e2e5c6a6d901d45f04a12427303d74761983593d10b344c79904
SSDEEP 48:6jOBtU/BXN8kUByyy/Aklkcrkyg7Vg5RibGoTCTo0gqVeeaeQqzM5rv774YRljmB:y/DMy4ncrkyg7tbpQFLUEYRxe
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

6470

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/InstallOptions.dll

IMPHASH b1cd0d78f652ce5fc63f0879371af012
SHA256 c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b
MD5 325b008aec81e5aaa57096f05d4212b5
SHA1 27a2d89747a20305b6518438eff5b9f57f7df5c3
SHA512 18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf
SSDEEP 192:86d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jwK72dwF7dBEnbok:86UdHXcIiY535zBt2jw+BEnbo
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

10696

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

SetCurrentDirectoryA GetCurrentDirectoryA MultiByteToWideChar GetPrivateProfileIntA GlobalLock GetModuleHandleA lstrcmpiA GetPrivateProfileStringA lstrcatA lstrcpynA WritePrivateProfileStringA lstrlenA lstrcpyA GlobalFree GlobalUnlock GlobalAlloc

user32

MapWindowPoints GetDlgCtrlID CloseClipboard GetClipboardData OpenClipboard PtInRect SetWindowRgn LoadIconA LoadImageA SetWindowLongA CreateWindowExA MapDialogRect SetWindowPos GetWindowRect CreateDialogParamA ShowWindow EnableMenuItem GetSystemMenu EnableWindow GetDlgItem DestroyIcon DestroyWindow DispatchMessageA TranslateMessage GetMessageA IsDialogMessageA LoadCursorA SetCursor DrawTextA GetWindowLongA DrawFocusRect CallWindowProcA PostMessageA MessageBoxA CharNextA wsprintfA GetWindowTextA SetWindowTextA SendMessageA GetClientRect

gdi32

SetTextColor CreateCompatibleDC GetObjectA GetDIBits CreateRectRgn CombineRgn DeleteObject SelectObject

shell32

SHBrowseForFolderA SHGetDesktopFolder SHGetPathFromIDListA ShellExecuteA

comdlg32

GetOpenFileNameA GetSaveFileNameA CommDlgExtendedError

ole32

CoTaskMemFree

$PLUGINSDIR/System.dll

IMPHASH 2017f2acbdaa42ab3e4adeb8b4c37e7b
SHA256 dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
MD5 c17103ae9072a06da581dec998343fc1
SHA1 b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
SHA512 d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
SSDEEP 192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

10544

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/iOClean.ini

SHA256 76b7c9b8aa4f2a5f0e64c1b703aa222ad45d3f89d3133ce14c072562d95f76f5
MD5 728d629a1550a9ac623aa6ac95181632
SHA1 729e6e07ef672895e082544ba159f4c0d8f31a29
SHA512 ff32ad33a0427a3fb0847fac3833c06d7436b4ac78fd42021da5984355078fe5b97cc7e6e073cf6ced707d0d2bd62aff6ae8f3a30d6cc2ba7155cd93a5820163
MD5 SHA1 SHA512

NSIS installer

installer

$PLUGINSDIR/ioSpecial.ini

SHA256 d95aed234f932a1c48a2b1b0d98c60ca31f962310c03158e2884ab4ddd3ea1e0
MD5 e2d5070bc28db1ac745613689ff86067
SHA1 282e080b4cf847174c5c11e4f9157b8c338ecb19
SHA512 a50ca2014869629135b54e848f03cb4983ad8029cd811300d02b0fc54de0436185f418fea4d3db888eb0f3170e33a59d486aa885f024ab29e630e9bc0ae1a2de
MD5 SHA1 SHA512

NSIS installer

installer

$PLUGINSDIR/modern-wizard.bmp

SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
MD5 cbe40fd2b1ec96daedc65da172d90022
SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$TEMPImg/Installer.exe

IMPHASH 7fa974366048f9c551ef45714595665e
SHA256 091088c5d1ee6da6b7584af2a7fd1315f5cd5b09789c3f375654f29b372bbdea
MD5 186b0136f303bbdfa28d4186073bea8a
SHA1 6cb4cf0098b71a486ff5deaf222b8ffafcde818a
SHA512 b0f47bdba9914e1f114039b2a90e224a980fa5b83d7d1981a80592a84ea06760cac2a335e78b38323f71c4bb34e3590fe9b2123318e704a38d9bd083229688af
SSDEEP 98304:3ZGgMhv+5aR+uPCkQ4YCZL3zNc6a9Zpn6d/3VrDkk4EdKy3NixJ9pfhEhcyNo6Ne:3Ar254tQEOD3YdPlDkpA3yn3MrN1An
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

12491

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CompareFileTime SearchPathA GetShortPathNameA GetFullPathNameA MoveFileA SetCurrentDirectoryA GetFileAttributesA GetLastError CreateDirectoryA SetFileAttributesA Sleep GetTickCount GetFileSize GetModuleFileNameA GetCurrentProcess CopyFileA ExitProcess GetWindowsDirectoryA SetFileTime GetCommandLineA SetErrorMode LoadLibraryA lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread CreateProcessA RemoveDirectoryA CreateFileA GetTempFileNameA lstrlenA lstrcatA GetSystemDirectoryA GetVersion CloseHandle lstrcmpiA lstrcmpA ExpandEnvironmentStringsA GlobalFree GlobalAlloc WaitForSingleObject GetExitCodeProcess GetModuleHandleA LoadLibraryExA GetProcAddress FreeLibrary MultiByteToWideChar WritePrivateProfileStringA GetPrivateProfileStringA WriteFile ReadFile MulDiv SetFilePointer FindClose FindNextFileA FindFirstFileA DeleteFileA GetTempPathA

user32

EndDialog ScreenToClient GetWindowRect EnableMenuItem GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard RegisterClassA TrackPopupMenu AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA DestroyWindow CreateDialogParamA SetTimer SetWindowTextA PostQuitMessage SetForegroundWindow wsprintfA SendMessageTimeoutA FindWindowExA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA OpenClipboard ExitWindowsEx IsWindow GetDlgItem SetWindowLongA LoadImageA GetDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint ShowWindow

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectA SetBkMode SetTextColor SelectObject

shell32

SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA SHGetSpecialFolderLocation

advapi32

RegQueryValueExA RegSetValueExA RegEnumKeyA RegEnumValueA RegOpenKeyExA RegDeleteKeyA RegDeleteValueA RegCloseKey RegCreateKeyExA

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

$PLUGINSDIR/ExecDos.dll

IMPHASH 2dfc6a992d004b736e85c64219a88b4a
SHA256 69ac56d2fdf3c71b766d3cc49b33b36f1287cc2503310811017467dfcb455926
MD5 a7cd6206240484c8436c66afb12bdfbf
SHA1 0bb3e24a7eb0a9e5a8eae06b1c6e7551a7ec9919
SHA512 b9ee7803301e50a8ec20ab3f87eb9e509ea24d11a69e90005f30c1666acc4ed0a208bd56e372e2e5c6a6d901d45f04a12427303d74761983593d10b344c79904
SSDEEP 48:6jOBtU/BXN8kUByyy/Aklkcrkyg7Vg5RibGoTCTo0gqVeeaeQqzM5rv774YRljmB:y/DMy4ncrkyg7tbpQFLUEYRxe
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

6470

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/System.dll

IMPHASH 2017f2acbdaa42ab3e4adeb8b4c37e7b
SHA256 dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
MD5 c17103ae9072a06da581dec998343fc1
SHA1 b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
SHA512 d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
SSDEEP 192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

10544

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$TEMPImg/AskInstallChecker-1.5.0.0.exe

IMPHASH 66c8920bc3035d736f66f927d463ca2b
SHA256 4501e3f8f41966d403e76d3b1d04525098f0b6d41b65741a8351f3b0d3e4397e
MD5 8f9b5f4f87207be1cf810ddc95124f92
SHA1 f5cec54c9aac59167ba95ec8077438be381fba3d
SHA512 dac421d8132e474ddfc9ba5954928b40d952af17c4c2085c30f5f3dc631962c2f05db52cb487371108b6b61e6fbc0a82d68ced48e9075a1fbc5a214d5d201097
SSDEEP 3072:L9Sc/cBP7ZyFQyNGhwPjVr88LkkPl5qcV21BSA5mffoL6xB3UCWT4zeNpdrhUu5g:L9+B9AHKyjVrTLkkP7qcXvxZzchm
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

9d:57:87:b3:49:ab:20:9c:6f:45:88:6d:66:c8:2c:d0:36:16:51:59

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Ask.com,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Distribution,O=Ask.com,L=Oakland,ST=California,C=US

Chains

Apr 5, 2010

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Serial Number

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Jul 16, 2004 - Jul 15, 2014

Subject

CN=Ask.com,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Distribution,O=Ask.com,L=Oakland,ST=California,C=US

Serial Number

28:6f:8a:30:e2:ea:c6:96:5b:93:6f:82:6a:05:30:5d

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jun 17, 2008 - Jun 17, 2011

Minor OS version

0

Major OS version

5

Entry point

56678

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\hudson\jobs\Installchecker\workspace\build\installchecker\Release\AskInstallChecker.pdb

wininet

HttpSendRequestExW InternetReadFile InternetCrackUrlW InternetCloseHandle HttpEndRequestW HttpOpenRequestW InternetSetOptionW HttpSendRequestW InternetConnectW InternetOpenW

kernel32

GetLocaleInfoW lstrlenA WideCharToMultiByte MultiByteToWideChar lstrlenW FreeLibrary LoadLibraryW GetProcAddress DeleteFileW GetLocalTime lstrcatW GetCurrentProcess SetEndOfFile GetModuleHandleW WriteFile GetVersionExW ReadFile CreateFileW GetTempPathW CloseHandle lstrcpyW InterlockedDecrement GetPrivateProfileStringW GetFileTime GetModuleHandleA LoadLibraryA GetProcessHeap GetCurrentProcessId GetUserDefaultLCID CreateDirectoryW HeapFree SetStdHandle WriteConsoleW GetConsoleOutputCP WriteConsoleA CreateFileA InitializeCriticalSectionAndSpinCount GetStringTypeW GetTickCount GetLocaleInfoA QueryPerformanceCounter GetStringTypeA IsValidLocale EnumSystemLocalesA InterlockedIncrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLastError GetCommandLineW TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetSystemTimeAsFileTime GetStartupInfoW RaiseException RtlUnwind LCMapStringA LCMapStringW GetCPInfo HeapAlloc GetConsoleCP GetConsoleMode SetHandleCount GetStdHandle GetFileType GetStartupInfoA HeapCreate VirtualFree VirtualAlloc HeapReAlloc FlushFileBuffers TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId SetFilePointer HeapSize ExitProcess GetACP GetOEMCP IsValidCodePage GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW

user32

wsprintfW

advapi32

RegEnumKeyExW RegDeleteKeyW RegCloseKey RegOpenKeyExW RegEnumValueW RegDeleteValueW RegQueryInfoKeyW RegQueryValueExW

shell32

SHGetFolderPathW

ole32

CoInitialize CoUninitialize CoCreateInstance

oleaut32

SysAllocString SysFreeString

shlwapi

PathFileExistsW StrStrIW

$TEMPImg/FVM.exe

IMPHASH 81638d02019c0bfcaaf23a9c69f2f12c
SHA256 24f96b0e81b026f81a6d7a3f4c86eb0e4cd86f2e003324c374f69d23445e848e
MD5 7647c48e0ac6a521e9b97bd107b2a215
SHA1 d464f46d7532f2f23222e61657d0c9ee43777b2d
SHA512 d470c7b17e9bcade5cc677396282b541e3d8d5823ffc6b9f9faa37a2f88e9041d89f8b0a9ce6406a880c45f0194207919596df0982e74a17d3b5205aa94af96a
SSDEEP 24576:XKkTWMfcFPkyuYyCUMJvuGHtekf8Iu8SzFnGpGcJ/5QrIjf4zdkB/huKb:XKkYayuYyCBxuGHtekfLjwpGpG8Xadk9
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

N/A

Digest Algorithm

N/A

PE Digests Matches

Not matched

Trusted

Not trusted

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Serial Number

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Jul 16, 2004 - Jul 15, 2014

Subject

CN=Conduit Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Conduit Ltd.,ST=Israel,C=IL

Serial Number

59:ab:9b:2e:e6:79:14:b7:df:4c:47:95:40:de:c5:61

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jan 17, 2007 - Mar 23, 2010

Minor OS version

0

Major OS version

4

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

$TEMPImg/PazeraToolbar.exe

IMPHASH 7fa974366048f9c551ef45714595665e
SHA256 db3119182761d71fe962e662aaff8aba64121130f3f1d39ac548020f26deec77
MD5 4d14c69f86a74fc25ad116c38f8f05f9
SHA1 bf8399d5f22aec7e4db7b4c385591ed5d42e71d0
SHA512 2f4acf84eb9e588ebe7a1c4731a472c0664f280982f90ec104c04021fbf6e9fc1c4708ce639fb1433ea014954ed24cd79fa94a5d3617e13b8b2e2058cac7a4dc
SSDEEP 49152:qKmU/FmbvQyw+Lx8GtekgJV2cEraOdDJLQDwydRm0qw9d/YDTn3UOesiX9iYvmEd:JmUoU+LSGtYJVqraOb5yds0tf0EOevXT
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

N/A

Digest Algorithm

N/A

PE Digests Matches

Not matched

Trusted

Not trusted

Minor OS version

0

Major OS version

4

Entry point

12478

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CompareFileTime SearchPathA GetShortPathNameA GetFullPathNameA MoveFileA SetCurrentDirectoryA GetFileAttributesA GetLastError CreateDirectoryA SetFileAttributesA Sleep GetTickCount GetFileSize GetModuleFileNameA GetCurrentProcess CopyFileA ExitProcess GetWindowsDirectoryA SetFileTime GetCommandLineA SetErrorMode LoadLibraryA lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread CreateProcessA RemoveDirectoryA CreateFileA GetTempFileNameA lstrlenA lstrcatA GetSystemDirectoryA GetVersion CloseHandle lstrcmpiA lstrcmpA ExpandEnvironmentStringsA GlobalFree GlobalAlloc WaitForSingleObject GetExitCodeProcess GetModuleHandleA LoadLibraryExA GetProcAddress FreeLibrary MultiByteToWideChar WritePrivateProfileStringA GetPrivateProfileStringA WriteFile ReadFile MulDiv SetFilePointer FindClose FindNextFileA FindFirstFileA DeleteFileA GetTempPathA

user32

EndDialog ScreenToClient GetWindowRect EnableMenuItem GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard RegisterClassA TrackPopupMenu AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA DestroyWindow CreateDialogParamA SetTimer SetWindowTextA PostQuitMessage SetForegroundWindow wsprintfA SendMessageTimeoutA FindWindowExA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA OpenClipboard ExitWindowsEx IsWindow GetDlgItem SetWindowLongA LoadImageA GetDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint ShowWindow

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectA SetBkMode SetTextColor SelectObject

shell32

SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA SHGetSpecialFolderLocation

advapi32

RegQueryValueExA RegSetValueExA RegEnumKeyA RegEnumValueA RegOpenKeyExA RegDeleteKeyA RegDeleteValueA RegCloseKey RegCreateKeyExA

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

$PLUGINSDIR/CABSetup.dll

IMPHASH 5070fa13a62547a5beae58004a204cbb
SHA256 82f78bcf453ef5bc4383dbb586bcdb7db7b79877ca79991f8b83c9284b6eeedc
MD5 971a2e4b537d8b3f0bf5699c4b086192
SHA1 72c062e122288b8c015cd1cd806bef4a22530b60
SHA512 2269002046c774112201a4ebb86638e554c11fa3ef2ba2f48266b5427b64fc35e66a94a1dc45c085f713aaf2852ac55a40876ff6bd0fe8625dce9eac05ace657
SSDEEP 384:1+euflfDS/VtTPYCfdW/QJCG0wNXB9SNCNLH:1+eufdpYg4JCwnSENLH
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

14532

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/InetLoad.dll

IMPHASH 24a4a671f5cc294ce3543d18a1e873cd
SHA256 b908ac66f5e0876fefe0be8ee692095132a780a8362ba3a68e99ba0d53dc8ebc
MD5 588d2a4e27dee47f1d7a9c10e67ca948
SHA1 019aad53a317892c3875761a5f6f2fb470376b7b
SHA512 c9de72dcb87f27e0a67c6b0220dab67b8c5813bc803bd76fb2b3070e88447457afdc76ffc391be42c14e9f31218fb74e8ddcd2a867e1f4d6f057986a8e31955b
SSDEEP 384:kUyPTZJ/XdzJwwTh8W1cyMjPzt0Ac9k+LMkIX1+Gn+XHfs:k37/luwTh8W1rMjPzbus
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

11241

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

msvcrt

strchr _adjust_fdiv malloc _initterm free memset strstr strtol strncmp strtoul time strrchr

kernel32

GlobalFree lstrcpynA CreateThread WaitForSingleObject TerminateThread GetModuleHandleA lstrcpyA GlobalAlloc LoadLibraryA GetProcAddress lstrcmpiA CreateFileA lstrcmpA lstrlenA MulDiv WriteFile lstrcatA GetLastError DeleteFileA CloseHandle SleepEx

user32

GetDlgItem SendMessageA SetWindowTextA wsprintfA GetWindowTextA RegisterWindowMessageA CallWindowProcA PostMessageA DestroyWindow EnableWindow GetWindowLongA CreateWindowExA GetWindowRect GetClientRect ShowWindow IsWindowVisible GetFocus MessageBoxA SendDlgItemMessageA SetDlgItemTextA SetTimer LoadIconA DispatchMessageA TranslateMessage GetMessageA IsDialogMessageA IsWindow CreateDialogParamA FindWindowExA RedrawWindow SetWindowLongA

wininet

InternetErrorDlg InternetSetFilePointer HttpQueryInfoA InternetQueryOptionA HttpSendRequestA HttpAddRequestHeadersA InternetSetOptionA HttpOpenRequestA FtpOpenFileA InternetGetLastResponseInfoA InternetConnectA InternetCrackUrlA InternetOpenA InternetReadFile InternetCloseHandle

comctl32

ord17

$PLUGINSDIR/InstallOptions.dll

IMPHASH 57354bdeea3dfae6e948101add87501a
SHA256 0f4d3cee24e3f310fa804983c931d3628613988a24f0be7854f63a9309b8e45f
MD5 1d5c649dde35003a618b9679d5d71b92
SHA1 0409bbab3ab34f8c01289cdd847b4d1a32d05b18
SHA512 b432ebcc52905662d61a3f17e08e209a3f9d836a9071b3b5e80070af7ebcf34cf66c44426dda041c2a258fda4787e5692e2b35acbcd73288fb84fe3c977bbfd9
SSDEEP 384:pKlm7i+c3QW6ckPhyDEaLnA2bbBBIXwZ:8qi8BcyhEhLBbbTI
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

10417

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/ScrollLicense.dll

IMPHASH 674bbf1e72dbf6f2664d8aea288261e0
SHA256 d81d764e13b8e7a7ede9964f118d2de44b13c39c442527c0ffa11ed25cac5014
MD5 9de28704babdcf38f423c36eae737e17
SHA1 dd7f7b03430bbc9d568c6ea31de88fc281c3eec3
SHA512 74e0b8b2cbf2de7ffde19e31567976e4c59fc68df351621acee5b0f00734fe7cb95f29fc822313f58ab9cf5f2822763d6021643e088fa6a37bf6d4672f6cbeea
SSDEEP 1536:IU49ZxlN9m68X7Yo7n8roGNHyJelIXkzqGvl/H3C:OZxz9QA1SkHzvl/XC
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

23841

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

lstrcmpiA lstrlenW GetModuleHandleA MultiByteToWideChar GetModuleFileNameA GetLastError LeaveCriticalSection EnterCriticalSection WideCharToMultiByte FreeLibrary SizeofResource LoadResource FindResourceA LoadLibraryExA IsDBCSLeadByte LCMapStringW LCMapStringA LoadLibraryA IsBadCodePtr IsBadReadPtr GetOEMCP GetCPInfo GetStringTypeW GetStringTypeA InterlockedDecrement GetCurrentProcessId GetTickCount QueryPerformanceCounter WriteFile UnhandledExceptionFilter GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA GetStartupInfoA GetFileType GetStdHandle SetHandleCount HeapSize SetUnhandledExceptionFilter TerminateProcess GetProcAddress TlsGetValue TlsSetValue TlsFree SetLastError TlsAlloc IsBadWritePtr InterlockedIncrement lstrlenA CompareStringA HeapAlloc GlobalFree GetProcessHeap HeapFree GetCurrentProcess FlushInstructionCache DeleteCriticalSection InitializeCriticalSection RaiseException GetVersionExA GetThreadLocale GetLocaleInfoA GetACP InterlockedExchange GlobalAlloc lstrcpynA VirtualFree HeapCreate HeapDestroy ExitProcess GetCommandLineA GetCurrentThreadId HeapReAlloc VirtualQuery GetSystemInfo lstrcpyA GetSystemTimeAsFileTime RtlUnwind VirtualProtect VirtualAlloc

user32

SetWindowLongA DrawTextA SendMessageA UpdateWindow IsWindowEnabled GetSysColor GetFocus DrawFocusRect FillRect EndPaint BeginPaint GetDlgCtrlID GetCursorPos ScreenToClient SetCursor DestroyWindow InvalidateRect PtInRect SetFocus SetCapture GetWindowLongA ReleaseCapture GetCapture FindWindowExA GetDlgItem CallWindowProcA SetRectEmpty GetClassNameA LoadCursorA OffsetRect ReleaseDC GetDC DefWindowProcA CharNextA SetWindowPos IsWindow GetParent GetClientRect GetWindowTextLengthA GetWindowTextA SetWindowTextA CreateWindowExA

gdi32

SetBkMode SetTextColor GetStockObject DeleteDC DeleteObject SelectObject GetObjectA CreateFontIndirectA

advapi32

RegDeleteValueA RegOpenKeyExA RegSetValueExA RegEnumKeyExA RegQueryInfoKeyA RegCloseKey RegCreateKeyExA RegDeleteKeyA RegQueryValueExA

shell32

ShellExecuteA

ole32

CoCreateInstance CoTaskMemFree CoTaskMemAlloc CoTaskMemRealloc

oleaut32

VarUI4FromStr

comctl32

_TrackMouseEvent

$PLUGINSDIR/System.dll

IMPHASH 4ec328f99bdd944fc98d8a5cf11f7a62
SHA256 cf61ddd15d63c25a12caee70f51ea736cfc02195c42e56ee01b33f689d3754c5
MD5 4eff5fafd746f5decb93a44e3a3d570c
SHA1 a11aa7681b7e2df1c7f7492a127d332d1495ea8a
SHA512 cde82d2a1f28506e4c2264f6b82017a00af32f138ebcdbaf4cc58463870fa626f708aa57465294c5a6f096c886841e7b9112b85bf3ea2f1d8f2da816b51b2d72
SSDEEP 192:0OycJo/rJVCmIDNLU0dq5RD00lspbub76yL:6/QQ0d0RD0USq/6y
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

10323

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/UserInfo.dll

IMPHASH 48cfa0ea7e353e4a7dd23572da8374ef
SHA256 74a4283da525512b7fa14d40cafd905e63a8c2a3c9faca4d0605ad71f1a05a7d
MD5 eaf5036ef8e7fbdfa76d42c18233764f
SHA1 acd9f46c0500b00648933c4a172ef258ec64a1f3
SHA512 93d3e698c5d40f28c9d899f95f5b8ae60eceb8e96e57000ed458b9bffadcc98616aeadd4d6b930f3f91bd2a822681ef284dfc0eda6ae776ba1b7cc6ff87704ef
MD5 SHA1 SHA512

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

4663

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/dca.ini

SHA256 26389930838c6e5766e3558332f94a3bb81cdb0dbcdca5d59c401f17bd4c451d
MD5 dda84b1c31abf79bcfa2c7ae54cbc6e0
SHA1 1d87efccdb699b9820e658a0f6db0b1ec274e52f
SHA512 02ac2f3f883bf6f20120100c110f253cc1b4f65352e0fca77fdd76063cb5fed9deb7cb7fe538aaed18c97d8ccc019a1f7250e7828d5db31ecb825e587c3cde79
MD5 SHA1 SHA512

NSIS installer

installer

$PLUGINSDIR/frtb_static_files.cab

SHA256 bff481505e2b88297d4de474bc3947ac8a5dc5fd198b237d8c6e526dcef7b944
MD5 7d9cb18bea6767c0f1188e6503e69342
SHA1 a3e2cafaae52590709f674bce8eb4ab908006e41
SHA512 4babc2a5e62e38ec3a0776649828cdc5cbcc1197f80884fa9a609fdd10e44cbfa33f5e2735e138214335273eb845d42605c4724a5f46946791c61767ef6a6f7e
SSDEEP 49152:JFmbvQyw+Lx8GtekgJV2cEraOdDJLQDwydRm0qw9d/YDTn3UOesiX9iYvms:eU+LSGtYJVqraOb5yds0tf0EOevXJus
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Helper.dll

IMPHASH 34a3df05d2cc08ee3da4457ce628c357
SHA256 24c0fadffd1ce7a497519bdca98e553d9903e8f6e19e2d755f4317db2dfe2682
MD5 d374b5262dab852732718f3968fedd43
SHA1 060bfe6b9322a50ea626595f41d6f2e0c07e1f07
SHA512 bb364ad46c122226aace34e841bfa1b22e4e629553d45f8a8887d3926cd71f927f08954a32b0acab7f8c368160b9be23c6cb2a421b34244d4edfea2ae0db40b8
SSDEEP 6144:ZBrPDCDJKGraMNuBOQl+wyh+O2TP8JUEgsv:zjDCMXMoBOQl+wK+O2gK
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

5

Entry point

96019

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

d:\Work\.Current\Freecause\Trunk\SVN.Trunk\package\Helper.pdb

shlwapi

PathStripPathW PathRemoveFileSpecW UrlIsW PathFileExistsW PathAppendW

rpcrt4

UuidFromStringA

wininet

HttpQueryInfoA HttpSendRequestW HttpAddRequestHeadersW InternetSetStatusCallbackW HttpOpenRequestA InternetConnectW InternetOpenW InternetCloseHandle InternetCrackUrlW InternetReadFile

urlmon

ObtainUserAgentString IsValidURL

url

InetIsOffline

kernel32

GetStringTypeW GetStringTypeA LCMapStringA FlushFileBuffers GetConsoleMode GetConsoleCP SetStdHandle InitializeCriticalSectionAndSpinCount CreateThread WaitForSingleObject GetExitCodeThread TerminateThread GetVersionExW LoadLibraryW GetProcAddress InterlockedDecrement SizeofResource LockResource LoadResource FindResourceW FindResourceExW ReleaseMutex SetEvent SwitchToThread CreateEventW CloseHandle DeleteFileW MoveFileW lstrlenW WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSection DeleteCriticalSection GetCurrentThreadId GetCurrentProcess FlushInstructionCache SetLastError RaiseException GetVersion FreeLibrary lstrlenA MultiByteToWideChar GetModuleFileNameW GetFileSize ReadFile CreateFileW CreateMutexA GetModuleHandleW lstrcmpiW GetLastError LoadLibraryExW GetLocaleInfoA DisableThreadLibraryCalls SetThreadPriority ResumeThread CreateSemaphoreW ReleaseSemaphore WriteFile Sleep IsBadReadPtr GetTimeZoneInformation GetModuleHandleA GetCurrentProcessId GetTickCount QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA LCMapStringW IsValidCodePage GetOEMCP GetACP GetCPInfo GetModuleFileNameA HeapCreate GetStartupInfoA GetFileType SetEndOfFile WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA VirtualQuery CompareStringA CompareStringW GetStdHandle SetHandleCount SetFilePointer ExitProcess TlsFree TlsSetValue TlsAlloc TlsGetValue RtlUnwind GetCommandLineA IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess GetSystemTimeAsFileTime GlobalAddAtomA VirtualAlloc VirtualFree IsProcessorFeaturePresent LoadLibraryA InterlockedCompareExchange HeapSize HeapReAlloc HeapAlloc SetEnvironmentVariableA InterlockedIncrement HeapFree GetProcessHeap HeapDestroy

user32

GetWindowLongW SetWindowLongW DefWindowProcW LoadCursorW GetClassInfoExW RegisterClassExW SendMessageTimeoutW CreateWindowExW SendMessageW PostMessageW KillTimer SetTimer DispatchMessageW TranslateMessage GetMessageW PeekMessageW CharNextW CallWindowProcW FindWindowW UnregisterClassA IsWindow MessageBoxW

advapi32

RegDeleteValueW RegDeleteKeyW RegQueryValueExW RegCreateKeyExW RegSetValueExW RegOpenKeyExW RegEnumKeyExW RegQueryInfoKeyW RegCloseKey GetUserNameW

shell32

DoEnvironmentSubstW

ole32

CoInitialize CoUninitialize CoTaskMemFree CoTaskMemRealloc CoTaskMemAlloc StringFromGUID2 CoCreateInstance

oleaut32

VariantCopy VariantInit VariantClear VariantChangeType LoadRegTypeLi UnRegisterTypeLi LoadTypeLi SysStringLen RegisterTypeLi VarUI4FromStr SysAllocString SysFreeString

dnsapi

DnsQuery_W

Name

.text

Size

169KB

Virtual Size

168KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

40KB

Virtual Size

39KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

8KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.SHARED

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

15KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

ImageConversion.dll

IMPHASH 44781c6895de7935eaa213d8ae356e35
SHA256 b8196f6e55bebc9368fde1743db5251f756ab32b66e67628449bc042042caed8
MD5 18a95233a49fb06e0d7d29e396c65f7d
SHA1 ac9ca3e837e4c4b07f28b5e8a1ff55d6bc853b56
SHA512 ab7d9a71f895329035a73b9e5e8cdc92e188eb90630e5016dc34a66ff16ddeef548b0326792a96d9116fcf219368a9d1b95ee65afefcd772c55d943177398669
SSDEEP 3072:mEad4E4Ik6UU1caVFn2krQ2ZOEIQTBfbAg0Fu125/cgJ:mEaLkQtVFn2cJZxIQTBDAO0z
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

5

Entry point

76684

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

GetLastError HeapFree HeapAlloc EnterCriticalSection LeaveCriticalSection RtlUnwind GetCurrentThreadId GetCommandLineA UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess GetCurrentProcess IsDebuggerPresent HeapCreate HeapDestroy VirtualFree DeleteCriticalSection VirtualAlloc HeapReAlloc GetModuleHandleW Sleep GetProcAddress ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA SetStdHandle GetSystemTimeAsFileTime CloseHandle CreateFileA GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId MultiByteToWideChar ReadFile GetModuleHandleA SetFilePointer InitializeCriticalSectionAndSpinCount LoadLibraryA SetEndOfFile GetProcessHeap LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA WriteConsoleA GetConsoleOutputCP WriteConsoleW HeapSize RaiseException

RSSReader_plugin.dll

IMPHASH a654a29e2f99af5247506fac6ee4864b
SHA256 c665399f65111393c015814ef0ab9c8cb2215e048fa8d64c52e94c3ebb7a5eec
MD5 c77745740c3823c6bcfec35327a630bc
SHA1 d1d49cc042f4b4e8cd5466008643a893947d9127
SHA512 80f492caa1c86f3a0944ae6cd6daf48b165cff3336e4dafa38ec9ea5ffe737731b65a7d94329c0fe04ee9865598117dc984c140408846f169721f26a845f4732
SSDEEP 6144:geOPipxlbzFYDIWBd1xhp0vll5tUFGhU17Qvz+fj2li/siabzC8gysQvKHXyU5fX:gxipxlbhYDIWht036GhU9S+b2w/9h
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

5

Entry point

168394

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

d:\Work\.Current\Freecause\Trunk\SVN.Trunk\package\RSSReader_plugin.pdb

wininet

InternetCrackUrlW

shlwapi

PathAppendW PathFileExistsW PathRemoveFileSpecW

urlmon

URLDownloadToCacheFileW

kernel32

LoadLibraryExW GetModuleFileNameW InterlockedIncrement LoadLibraryW GetCurrentProcess FlushInstructionCache GetCurrentThreadId Sleep OutputDebugStringW SetLastError lstrcpyW CompareStringW GetStringTypeW GetStringTypeA InitializeCriticalSectionAndSpinCount GetLocaleInfoA GetConsoleMode GetConsoleCP SetFilePointer GetModuleHandleA GetCurrentProcessId GetTickCount QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA GetStartupInfoA GetFileType GetLastError LCMapStringA LCMapStringW IsValidCodePage GetOEMCP GetACP GetCPInfo GetTimeZoneInformation HeapCreate ExitProcess GetModuleFileNameA GetStdHandle WriteFile TlsFree TlsSetValue TlsAlloc TlsGetValue RtlUnwind GetCommandLineA GetSystemTimeAsFileTime IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess GlobalAddAtomA VirtualAlloc VirtualFree IsProcessorFeaturePresent LoadLibraryA InterlockedCompareExchange HeapSize HeapReAlloc HeapAlloc HeapDestroy GetProcessHeap HeapFree lstrlenA RaiseException lstrcmpiW FreeLibrary GetModuleHandleW GetProcAddress MultiByteToWideChar CloseHandle ReadFile GetFileSize CreateFileW VirtualQuery InterlockedDecrement LeaveCriticalSection EnterCriticalSection DeleteCriticalSection InitializeCriticalSection WideCharToMultiByte lstrlenW FindResourceExW FindResourceW LoadResource LockResource SizeofResource SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA FlushFileBuffers CompareStringA SetEnvironmentVariableA SetHandleCount

user32

FillRect OffsetRect DrawTextW ReleaseDC GetDC GetWindowTextLengthW CreateWindowExW LoadCursorW GetClassNameW ScreenToClient GetCapture SetCursor PtInRect InvalidateRect EndPaint BeginPaint DestroyIcon SetRectEmpty DestroyWindow CreateDialogParamW EndDialog DialogBoxParamW GetActiveWindow SetCapture UpdateWindow IsWindowEnabled CheckRadioButton IsDlgButtonChecked DispatchMessageW TranslateMessage PeekMessageW GetCursorPos IsWindow CheckDlgButton GetDlgCtrlID SendMessageW CallWindowProcW DefWindowProcW SetWindowLongW SetActiveWindow GetSysColor GetDlgItemTextW SetFocus EnumChildWindows GetWindowTextW SetWindowTextW GetWindow GetWindowLongW MonitorFromWindow GetMonitorInfoW GetWindowRect GetParent GetClientRect MapWindowPoints SetWindowPos MessageBoxW GetDlgItem EnableWindow SetDlgItemTextW CharNextW SetTimer PostMessageW KillTimer UnregisterClassA GetFocus DrawFocusRect FindWindowW ReleaseCapture

gdi32

GetObjectW GetStockObject CreateSolidBrush SetBkMode DeleteObject SetTextColor CreateFontIndirectW SelectObject

advapi32

RegEnumKeyExW RegCreateKeyExW RegQueryValueExW RegSetValueExW RegDeleteKeyW RegOpenKeyExW RegQueryInfoKeyW RegDeleteValueW RegCloseKey

ole32

CoTaskMemFree CoTaskMemRealloc CoTaskMemAlloc CoCreateInstance

oleaut32

VariantInit VariantClear SysStringLen SysAllocStringByteLen VarUI4FromStr VarBstrCmp SysAllocString SysFreeString

comctl32

ImageList_DragMove ImageList_EndDrag ImageList_DragLeave ImageList_Create ImageList_Destroy ImageList_LoadImageW ImageList_ReplaceIcon ImageList_GetIcon ImageList_DragEnter _TrackMouseEvent ImageList_BeginDrag

RadioPlugin.dll

IMPHASH 8e37a09dc6394fe8978f45de107c05a9
SHA256 f580d67ab9498bfbab8b9f992a030fc1a90ae1fbf9c8cf960cd1a55c16414c04
MD5 7384485085d0711fe6c8971b7d61f8b7
SHA1 a2fa933bd7613d3e51c73f9e102cf60f3f6fca3f
SHA512 2b485626aba41ec2886c2ee7ec1930f2da727640f35fa723f7f68a6a40944f0986d1224d575f436754e055ef61c1c36d228753bd95437681c37b8fb355d0adb0
SSDEEP 6144:YB1iniSKoj2L+nLeUDgRHNvI6zTA0dPUcTIcAU99iRTyBb2Awro7js8pBMCVUI/:Y7eiSffidPUcTIcA+KTUbnwr98HJ/
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

5

Entry point

184728

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

d:\Work\.Current\Freecause\Trunk\SVN.Trunk\package\RadioPlugin.pdb

urlmon

URLDownloadToFileW URLDownloadToCacheFileW IsValidURL

wininet

InternetCloseHandle InternetOpenA InternetConnectW HttpOpenRequestW HttpSendRequestA HttpQueryInfoW InternetCrackUrlW

kernel32

GetModuleFileNameW OutputDebugStringA InterlockedDecrement InterlockedIncrement lstrlenW DeleteCriticalSection InitializeCriticalSection RaiseException GlobalUnlock GlobalLock GlobalAlloc MulDiv lstrcmpW Sleep GetTickCount lstrlenA MultiByteToWideChar FreeLibrary LoadLibraryExW lstrcmpiW GlobalFree WideCharToMultiByte GlobalReAlloc LoadLibraryA GetFullPathNameW FindFirstFileW GetVersionExW lstrcpynW CompareStringW FindClose FindNextFileW lstrcpyW FreeEnvironmentStringsA GetStartupInfoA GetFileType SetHandleCount LCMapStringW LCMapStringA TlsFree TlsSetValue TlsAlloc TlsGetValue IsValidCodePage GetOEMCP LoadLibraryW GetCPInfo GetModuleFileNameA GetStdHandle WriteFile ExitProcess HeapCreate RtlUnwind GetCommandLineA CreateThread ResumeThread CloseHandle ExitThread IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess GetSystemTimeAsFileTime GlobalAddAtomA HeapSize HeapReAlloc HeapDestroy VirtualAlloc VirtualFree IsProcessorFeaturePresent HeapAlloc GetProcessHeap HeapFree InterlockedCompareExchange InitializeCriticalSectionAndSpinCount GetStringTypeA GetStringTypeW GetLocaleInfoA SetFilePointer GetConsoleCP GetConsoleMode SetStdHandle WriteConsoleA GetLastError GetFileAttributesW GetVersion GetProcAddress GetModuleHandleW GetModuleHandleA SetLastError FindResourceExW FindResourceW LoadResource LockResource SizeofResource LeaveCriticalSection EnterCriticalSection GetCurrentThreadId FlushInstructionCache GetCurrentProcess GetTimeZoneInformation GetConsoleOutputCP WriteConsoleW CreateFileA FlushFileBuffers CompareStringA SetEnvironmentVariableA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetCurrentProcessId GetACP VirtualQuery

user32

GetAncestor SetActiveWindow SetRect DispatchMessageW TranslateMessage GetWindowThreadProcessId SetWindowsHookExW CallNextHookEx DrawTextW GetMessageW UnhookWindowsHookEx OffsetRect GetWindowRect MessageBoxW ShowWindow WindowFromPoint GetCursorPos GetCapture PostMessageW FindWindowW LoadImageW UpdateWindow EnableWindow SetWindowRgn SetParent KillTimer DestroyIcon CopyRect GetMonitorInfoW MapWindowPoints SetDlgItemTextW GetDlgItemTextW CheckRadioButton GetActiveWindow CreateDialogParamW IsDlgButtonChecked EnumChildWindows EndDialog SystemParametersInfoW PtInRect AdjustWindowRectEx DrawFocusRect GetSystemMetrics InflateRect DrawEdge IsWindowEnabled SetTimer RegisterWindowMessageW GetWindowTextLengthW GetWindowTextW SetWindowTextW BeginPaint EndPaint IsChild GetFocus GetWindow IsWindow GetClassNameW GetSysColor CharNextW SetWindowPos RedrawWindow GetClassInfoExW CreateWindowExW DestroyWindow CreateAcceleratorTableW ClientToScreen GetParent ScreenToClient MoveWindow SetCapture ReleaseCapture FillRect GetClientRect InvalidateRgn InvalidateRect GetDC ReleaseDC GetDesktopWindow DestroyAcceleratorTable LoadCursorW RegisterClassExW GetDlgItem GetDlgCtrlID SendMessageW CallWindowProcW DefWindowProcW GetWindowLongW SetWindowLongW SetFocus UnregisterClassA SetCursor DialogBoxParamW SetRectEmpty MonitorFromWindow GetMenu

gdi32

CreateDIBSection ExtCreateRegion CombineRgn StretchBlt CreateRectRgnIndirect GetTextExtentPoint32W SetTextColor SetBkMode CreateSolidBrush CreateCompatibleDC CreateCompatibleBitmap SelectObject BitBlt DeleteDC GetStockObject GetObjectW CreateFontIndirectW DeleteObject GetDeviceCaps

advapi32

RegSetValueExW RegCloseKey RegEnumKeyExW RegOpenKeyExW RegDeleteValueW RegDeleteKeyW RegQueryInfoKeyW RegCreateKeyExW RegQueryValueExW

shell32

SHBrowseForFolderW SHGetPathFromIDListW SHGetMalloc

ole32

CLSIDFromString CLSIDFromProgID CoGetClassObject CoCreateInstance OleInitialize OleLockRunning StringFromGUID2 CoTaskMemAlloc OleUninitialize CoUnmarshalInterface CoTaskMemRealloc CoTaskMemFree CoMarshalInterface CoInitialize CoUninitialize CreateStreamOnHGlobal

oleaut32

VariantInit VarBstrCmp VarUI4FromStr DispCallFunc SysAllocStringLen VariantClear LoadTypeLi LoadRegTypeLi OleCreateFontIndirect SysAllocString SysFreeString SysStringLen

shlwapi

PathIsDirectoryW PathFileExistsW PathAppendW PathStripPathW UrlEscapeW PathRemoveFileSpecW PathFindExtensionW PathRemoveExtensionW

SearchComponent.dll

IMPHASH 6299116dafc34c4ef19d19e43b8d6694
SHA256 fc24d4248c49606f760ed871512bda7d09ba1a1d242347e33a60ebf8b8d72192
MD5 19a3c58c3d4161f67d63ab1aa32d89e2
SHA1 46fc810f1dcfe26826a87d347cb4606b35cc675b
SHA512 70f36bdf420ec3697777062aacaf5805de9de7ed4b03d4032512690ded305c0c3f3cdde63bafdf3f3d6a0b2ab9b0f1b9ad0c934deea2fb50d1a49a254792528f
SSDEEP 3072:A5Y6PErq0i4qtw0WjVhuqHzYwU+qDLvYJL1CfImwUXl/5CMXaPPVR:MPPE6tw0W9TfWDLvYJLwILmQMKPb
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

5

Entry point

80000

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

d:\Work\.Current\Freecause\Trunk\SVN.Trunk\package\SearchComponent.pdb

urlmon

IsValidURL

kernel32

WaitForSingleObject ReleaseMutex CloseHandle SetEvent CreateEventW CreateMutexW EnterCriticalSection LeaveCriticalSection InitializeCriticalSection DeleteCriticalSection GetCurrentThreadId GetCurrentProcess FlushInstructionCache SetLastError RaiseException FreeLibrary lstrlenW GetProcAddress GetModuleHandleW lstrcmpiW GetLastError LoadLibraryExW InterlockedDecrement InterlockedIncrement CreateFileW GetFileSize ReadFile CompareStringW CompareStringA CreateFileA SetEndOfFile WriteConsoleW GetConsoleOutputCP WriteConsoleA FlushFileBuffers SetStdHandle GetConsoleMode GetConsoleCP GetStringTypeW MultiByteToWideChar FindResourceExW FindResourceW LoadResource LockResource SizeofResource SetEnvironmentVariableA GetModuleFileNameW HeapSize GetStringTypeA LCMapStringA InitializeCriticalSectionAndSpinCount GetLocaleInfoA GetTimeZoneInformation GetModuleHandleA GetCurrentProcessId GetTickCount QueryPerformanceCounter GetEnvironmentStringsW lstrlenA WideCharToMultiByte HeapFree GetProcessHeap HeapDestroy HeapAlloc HeapReAlloc VirtualQuery InterlockedCompareExchange LoadLibraryA IsProcessorFeaturePresent VirtualFree VirtualAlloc GlobalAddAtomA TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent ExitThread ResumeThread CreateThread GetCommandLineA RtlUnwind GetSystemTimeAsFileTime WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree HeapCreate Sleep ExitProcess GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringW SetFilePointer SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW

user32

CharNextW CreateWindowExW GetWindowLongW SetWindowLongW DefWindowProcW LoadCursorW GetClassInfoExW RegisterClassExW SendMessageW SendMessageTimeoutW SetTimer KillTimer DispatchMessageW GetMessageW CallWindowProcW UnregisterClassA IsWindow FindWindowW

advapi32

RegCreateKeyExW RegSetValueExW RegOpenKeyExW RegEnumKeyExW RegQueryInfoKeyW RegCloseKey RegDeleteKeyW RegDeleteValueW

ole32

CoInitialize CoUninitialize CoTaskMemFree CoTaskMemAlloc CoCreateInstance CoTaskMemRealloc

oleaut32

VariantClear VarUI4FromStr SysFreeString SysAllocString

shlwapi

UrlEscapeW

Name

.text

Size

151KB

Virtual Size

151KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

35KB

Virtual Size

34KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

7KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.SHARED

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

13KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Toolbar.dll

IMPHASH be7add6560b15c5bc3f7a0b1f583a08e
SHA256 1ccbdbd920108a2a65976f8b6ddfc23ac96159c9deb952abbac3a4ce52797dbb
MD5 3fa1d20c85db96db556c7d5b580bf38b
SHA1 31faae19dc0684b09339a1a9440ef7214916b8b0
SHA512 d5ae224f5c98cb8d5c64f970e9894f2bd93ab6db4c6aac121a4f8e3cb9d0381bf555dbc918b8d0e85ad39bf8ebd2705c1f932c9232dcd91717ba472537719e7b
SSDEEP 24576:HV+WW1lOzTEdiqUE9yeqdAo/KHNF/4u8abCaw725NVdgu5:1+FSTEdiqb0eqOoSb/4u88C925NVdg
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

5

Entry point

836345

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

d:\Work\.Current\Freecause\Trunk\SVN.Trunk\package\Toolbar.pdb

urlmon

ObtainUserAgentString IsValidURL URLDownloadToFileW

wininet

InternetConnectA InternetOpenA InternetCrackUrlA InternetCrackUrlW InternetGetConnectedState InternetSetCookieW InternetGetCookieW FindCloseUrlCache FindNextUrlCacheEntryW InternetQueryOptionW FindFirstUrlCacheEntryW InternetCloseHandle InternetErrorDlg HttpQueryInfoA HttpSendRequestW HttpOpenRequestA InternetConnectW InternetOpenW InternetSetOptionW HttpAddRequestHeadersA DeleteUrlCacheEntryW InternetReadFile

shlwapi

PathIsRelativeW PathFindFileNameW UrlUnescapeW SHDeleteKeyW SHCopyKeyW PathIsDirectoryW PathStripPathW UrlIsW PathRemoveFileSpecW PathFileExistsW PathAppendW

rpcrt4

UuidFromStringW UuidToStringW UuidCreate RpcStringFreeW

setupapi

SetupIterateCabinetW

dbghelp

SymGetSymFromAddr SymCleanup SymLoadModule SymInitialize SymSetOptions SymFunctionTableAccess StackWalk SymGetLineFromAddr SymGetModuleBase SymGetOptions

winmm

PlaySoundW

version

GetFileVersionInfoW GetFileVersionInfoSizeW VerQueryValueW

kernel32

RtlUnwind GetStringTypeW GetStringTypeA GetLocaleInfoA InitializeCriticalSectionAndSpinCount QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA GetStartupInfoA GetFileType SetHandleCount GetTimeZoneInformation GetModuleHandleA GetModuleHandleW GetProcAddress GetFileAttributesW GetVersion WideCharToMultiByte lstrlenW RaiseException InitializeCriticalSection DeleteCriticalSection SizeofResource LockResource LoadResource FindResourceW FindResourceExW GetLastError lstrcmpiW LoadLibraryW SetLastError GetModuleFileNameW OutputDebugStringA LoadLibraryExW InterlockedIncrement InterlockedDecrement FreeLibrary MultiByteToWideChar EnterCriticalSection LeaveCriticalSection FlushInstructionCache GetCurrentProcess GetCurrentThreadId Sleep lstrcpyW HeapFree GetProcessHeap GlobalAlloc lstrcmpW MulDiv GlobalUnlock GlobalLock lstrlenA DeleteFileW CopyFileW GlobalFree GlobalHandle GetCurrentProcessId LocalFree FindNextFileW FindClose WaitForSingleObject IsDebuggerPresent CreateMutexA CloseHandle GetFullPathNameW FindFirstFileW GetFileAttributesExW GetVersionExW GetCurrentThread CreateDirectoryW RemoveDirectoryW MoveFileW CreateMutexW WriteFile CreateFileW LoadLibraryA DisableThreadLibraryCalls lstrcatW GlobalDeleteAtom GlobalAddAtomW GlobalGetAtomNameW ResumeThread SetThreadPriority CreateThread LocalAlloc GetFileTime SystemTimeToTzSpecificLocalTime FileTimeToSystemTime SetEvent CreateEventW OutputDebugStringW OpenProcess Process32NextW Process32FirstW CreateToolhelp32Snapshot Module32NextW Module32FirstW TerminateProcess GetShortPathNameW GlobalGetAtomNameA GetTickCount ReadFile GetFileSize QueueUserWorkItem SetUnhandledExceptionFilter HeapAlloc IsBadWritePtr ReadProcessMemory lstrcpynW IsBadCodePtr IsBadReadPtr WinExec TerminateThread OpenThread SetFileAttributesW CreateProcessW MoveFileExW DebugBreak SetCurrentDirectoryW UnhandledExceptionFilter GlobalAddAtomA VirtualAlloc VirtualFree IsProcessorFeaturePresent InterlockedExchange HeapDestroy SetFilePointer GetConsoleCP GetConsoleMode SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA GetSystemTimeAsFileTime VirtualProtect GetSystemInfo VirtualQuery ExitThread GetCommandLineA HeapCreate ExitProcess GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree FlushFileBuffers GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringW LCMapStringA CompareStringA CompareStringW SetEnvironmentVariableA HeapReAlloc HeapSize ReleaseMutex InterlockedCompareExchange

user32

EnableWindow CheckDlgButton CheckRadioButton IsDlgButtonChecked SetParent EnumWindows SetRect SubtractRect GetLayeredWindowAttributes AnimateWindow SendMessageTimeoutW SetLastErrorEx DialogBoxParamW wsprintfW GetActiveWindow LoadBitmapW SetActiveWindow AppendMenuW ValidateRect GetWindowRgnBox RemoveMenu GetMenuItemCount CreatePopupMenu IsMenu LoadCursorFromFileW DestroyCursor UpdateWindow LoadImageW OffsetRect FrameRect GetWindowDC CopyRect MapWindowPoints GetMessagePos GetSystemMetrics GetIconInfo SetCursor RegisterWindowMessageW GetWindowTextLengthW GetWindowTextW SetWindowTextW GetWindowThreadProcessId MessageBoxW GetKeyState CreateAcceleratorTableW GetFocus DestroyAcceleratorTable GetDesktopWindow BeginPaint EndPaint DrawTextW ReleaseCapture GetDlgItem IsChild SetCapture InvalidateRgn ScreenToClient MoveWindow GetSysColor DialogBoxIndirectParamW IsRectEmpty CharUpperBuffW SetWindowsHookExW SetDlgItemTextW SetWindowContextHelpId MapDialogRect EndDialog GetMessageW EnumChildWindows CallNextHookEx UnhookWindowsHookEx SetLayeredWindowAttributes PeekMessageW TranslateMessage UpdateLayeredWindow GetAncestor ClientToScreen EnumThreadWindows GetParent GetClassNameW PostMessageW CreateWindowExW GetClassInfoExW RegisterClassExW CallWindowProcW DefWindowProcW LoadCursorW IsWindow GetWindow SetFocus KillTimer SetTimer RedrawWindow IsWindowVisible ShowWindow InvalidateRect ReleaseDC GetDC GetClientRect GetWindowRect SetWindowPos SendMessageW GetWindowLongW SetWindowLongW DestroyWindow CharLowerBuffW CharNextW CreateDialogParamW MonitorFromWindow GetMonitorInfoW SystemParametersInfoW AdjustWindowRectEx GetDlgCtrlID IsWindowEnabled GetMenu PtInRect GetMenuItemInfoW GetCapture GetAsyncKeyState TrackPopupMenu GetCursorPos DestroyMenu DrawEdge DestroyIcon FillRect SetWindowRgn UnregisterClassA FindWindowW DispatchMessageW

gdi32

SetBkMode SelectObject DeleteObject GetTextExtentPointW MoveToEx LineTo CreateRectRgnIndirect RestoreDC SaveDC CombineRgn GetPixel TextOutW CreateBrushIndirect StretchBlt SetBkColor SetTextColor SetViewportOrgEx CreatePatternBrush GetTextMetricsW CreateRectRgn SelectClipRgn CreateSolidBrush CreatePen GetObjectW ExcludeClipRect CreateFontIndirectW ExtTextOutW DeleteDC BitBlt CreateCompatibleBitmap CreateCompatibleDC GetStockObject GetDeviceCaps CreateDIBSection CreateFontW GetTextExtentPoint32W

shell32

SHFileOperationW ShellExecuteW DragQueryFileW DoEnvironmentSubstW

ole32

OleDraw CoTaskMemFree CoTaskMemRealloc CoTaskMemAlloc CoCreateInstance CoMarshalInterThreadInterfaceInStream CoGetInterfaceAndReleaseStream StringFromGUID2 OleLockRunning CoGetClassObject CLSIDFromProgID CLSIDFromString CreateStreamOnHGlobal CoCreateGuid OleInitialize OleUninitialize CoInitialize ReleaseStgMedium CoUninitialize RegisterDragDrop

oleaut32

SysStringLen SysFreeString VarUI4FromStr LoadRegTypeLi LoadTypeLi VarBstrCmp VariantInit VariantClear SysAllocString SysAllocStringByteLen SysStringByteLen SysAllocStringLen VariantCopy VariantChangeType OleCreateFontIndirect SafeArrayUnaccessData SafeArrayAccessData SafeArrayCreate CreateDispTypeInfo DispCallFunc DispGetIDsOfNames DispInvoke SafeArrayDestroy SafeArrayCreateVector UnRegisterTypeLi RegisterTypeLi VarBstrCat

Name

.text

Size

957KB

Virtual Size

956KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

313KB

Virtual Size

312KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

43KB

Virtual Size

60KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.SHARED

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

59KB

Virtual Size

59KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

98KB

Virtual Size

98KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

TroubleShooter.exe

IMPHASH 7e560e1cf79aa015363d94a640ecdbbb
SHA256 a438a2abd2bd5146ce664e082ca9112d4b38bff91f9b953f2294a54dd6e07d31
MD5 fb89c402ca8462895c4fa6379284e575
SHA1 36ee6776af57e459326bf0530ad5a37b00e778f9
SHA512 958dfc81d04e59c08bc6898ac3ed4b001a5722f526dac62ffedfa220a4693e418f6eb0af96617fe0dfd06d077a2dd601f67d9c477fcce913dc20271e09fbd9c8
SSDEEP 1536:n1A6JO7YCLHPEzgUaqympJem3S4R8UA/ff1mQMwg:ndOkCLjY5pJem3S4R8UA/fAwg
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

5

Entry point

13746

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

aboutTabs.7.js

SHA256 ae19c282e02ca598f8b064ba438a6efc7e2bf7508813752f0af17d3814a8fd51
MD5 dd12932ca73c255f6e52d6b2416a9ad4
SHA1 57ea53957aaedcc791aced3a0354039fedba19dd
SHA512 cd1c25ac3b32d98e43f445370fd686a517228a61e8f48300eb796eeae9ec5f2ae3dbf08b1bac612ec6f3df00aed2ec2d1097585710f4d6ee129f85ab080fdcb2
MD5 SHA1 SHA512

NSIS installer

installer

aboutTabs.8.js

SHA256 20ec50cd098cd7cdef32000a016e21ec167e6a2be0c4d091973cf60d6f09eac4
MD5 a7467bed1916cd3fc1aa8e79c45896ce
SHA1 8412bf86a5ddce866a7f6a413e9dd2055b8191c8
SHA512 a52548ec10f90c0754faa7e65eff60c840b523d211abc5bd3b6c18483dc6ba8a8e9546c83b00603554117657bafba47a249e8bc011a3be31c1290d0e8fcefc34
MD5 SHA1 SHA512

NSIS installer

installer

audio.bmp

SHA256 bab3819a01e9ee31281d428f6ad457e076bf262b97512298051f813fc59b289e
MD5 5d31431106b37ed1aecc4741c2416b89
SHA1 94894b06059e4bfb6cdb0da5a83d1e738933a8f3
SHA512 1c732fa97440fbc127a3901b80db1f15aaa455db791f4ac83e07d4ec27ae52668e8a9b7dc184ab98455cd738cfde141e2e3473334d1779599c97b1cad94e0ffc
MD5 SHA1 SHA512

NSIS installer

installer

banner_container.html

SHA256 168a303af47dc49897deee7847d02bfd895869bddd8cbf0b039d70d3b6d8f622
MD5 64af0196c82e9aff9bc4580d1953773b
SHA1 185b52470a2ec78e944aa97700fcbbc45f5fca80
SHA512 d2141ad3c6c0d404e14c482bb814971f965683ab160988fdb93dd4b7acc49abc82f06c586c00db44003fd6cc343e79983764c07184a7ba9269315869573ae1d0
MD5 SHA1 SHA512

polyglot

NSIS installer

installer

blockcursor.cur

SHA256 3f6c53fb03ddf8871380f5a7cfb4d52ce5aae94957afa30fafcb5fbc00349e80
MD5 cf7c1de471b600e00a3f1f75b304e91e
SHA1 32b269fe9f59093e3090835e92bbab952d21d68d
SHA512 0dfb11ec6a0dbb21339ec29a6b7207cb3072ef91cc0a7b69608e586a726b0fca4a9c81c9f3d90a5e7018865cbc6a82390d65163e5b46ee307838c621dd5680f6
MD5 SHA1 SHA512

NSIS installer

installer

blocksound.wav

SHA256 df7cad111688dadb00469203dd7228df99e49e86ae7ba937e308d947cd9790f2
MD5 12be3833764f37d1ba31350935e3fa2a
SHA1 b984b53ad3fccf3748f8ff7d045f243cd509038b
SHA512 c4e3c0c13a215bf78a1531352b624c2568c1d671f7975a889a1ddb352a0c6860c545314bae3575a927024a608efde13962dba1c05c4818675a9ff1a2bba47410
SSDEEP 192:4uh8FCpmK4E44XA8Nq0PrFyogU+nchHmDY27BK3rOQSsn83j2RHGfvvLjfvqs4zS:4ekCEE5A8Y0TFLmcJKjQSs83jffqsUS
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bookmark_off.bmp

SHA256 a76c8521c590d3f93138ddd2a8bb75c3f13205b632b1b673c82fe0e780bffab5
MD5 f691faa798329022e59a7ab3d1599329
SHA1 b155a0d2595c6d36b9eab1b84ca48d0a8c7881e8
SHA512 91a0a09c2277edf33d3afa38ece170060f1367c57521ed9f6b5442e6a9a499d4b4fd781bab31f759e633bdcfed4ca582904ba5719ed04206d0ec35067fbbbfb1
MD5 SHA1 SHA512

NSIS installer

installer

bookmark_on.bmp

SHA256 b5715167b7dcf7483e06810b6b97ea87a67eb6b4a1bffa56e9fe5f0e84ee4de7
MD5 549cd66d20db4c94bb225997560432d8
SHA1 13c5d5549d28237b48a09aa055d0ecb3dfcc7851
SHA512 ba528dcc68563bd7b9469b963def2776493dbb5465edd1ceb825c39efe146d3ea01b1a6f0be8f7011f6794a74cd18f1fcf3842d3d7b8a5ed210beffebded03bb
MD5 SHA1 SHA512

NSIS installer

installer

bookmarksplugin.dll

IMPHASH e563b5e0ac42ca459ba9f51cfd361743
SHA256 998664bb232081eb912786d2114182ff9c8158377b30654765df743f1603a2d5
MD5 102ae9a3bfc7c526b3d95ccf2cbf1114
SHA1 7043cc1326f21c383e71e33d1ea09eb2cb5c67c7
SHA512 06662e5a7d5cf748697c4c0eaa969b772f24bc3083329716bcf79dda63de63257c115e79b48217f6820fd72ee5f71d609ff4e7d7751fa4e0bbb4e534da9d88ce
SSDEEP 6144:AmhHrB1DIu0VJ7q66AWey/400UqbagraGDOdOXRZD:fh1tIu0VJ7q66bey/4RUqGwD
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

5

Entry point

114657

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

d:\Work\.Current\Freecause\Trunk\SVN.Trunk\package\bookmarksplugin.pdb

kernel32

GetCurrentThreadId GetCurrentProcess FlushInstructionCache LoadLibraryW lstrlenA FindClose SetLastError GetFullPathNameW FindFirstFileW lstrcpyW FindNextFileW GetPrivateProfileStringW GetCurrentProcessId CreateMutexW SetEnvironmentVariableA CompareStringW CompareStringA CreateFileA FlushFileBuffers SetStdHandle WriteConsoleW GetConsoleOutputCP WriteConsoleA GetStringTypeW GetStringTypeA LCMapStringA InterlockedIncrement InitializeCriticalSectionAndSpinCount GetLocaleInfoA GetTimeZoneInformation GetModuleHandleA GetTickCount QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA GetStartupInfoA GetFileType SetHandleCount CloseHandle GetConsoleMode InterlockedDecrement DeleteCriticalSection InitializeCriticalSection GetModuleFileNameW LoadLibraryExW MultiByteToWideChar GetLastError EnterCriticalSection RaiseException LeaveCriticalSection GetConsoleCP WideCharToMultiByte LCMapStringW IsValidCodePage GetOEMCP GetACP GetCPInfo ExitProcess Sleep HeapCreate TlsFree TlsSetValue VirtualQuery TlsAlloc TlsGetValue GetModuleFileNameA GetStdHandle lstrcmpiW GetModuleHandleW GetProcAddress lstrlenW FreeLibrary FindResourceExW FindResourceW LoadResource LockResource SetFilePointer SizeofResource HeapFree GetProcessHeap HeapDestroy HeapAlloc HeapReAlloc HeapSize InterlockedCompareExchange LoadLibraryA IsProcessorFeaturePresent VirtualFree VirtualAlloc GlobalAddAtomA TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA RtlUnwind GetSystemTimeAsFileTime WriteFile

user32

IsDlgButtonChecked CheckDlgButton ReleaseCapture UpdateWindow ShowCursor SetCapture SetFocus GetCursorPos CallWindowProcW DefWindowProcW SendDlgItemMessageW DestroyIcon EnableWindow FindWindowW ShowWindow LoadImageW EndDialog GetWindowTextLengthW GetWindow GetWindowLongW MonitorFromWindow GetMonitorInfoW GetWindowRect GetParent GetClientRect MapWindowPoints SetWindowPos GetDlgItem SetDlgItemTextW EnumChildWindows GetWindowTextW SetWindowTextW SetTimer KillTimer SetWindowLongW DialogBoxParamW PostMessageW CharNextW UnregisterClassA IsWindow SendMessageW

advapi32

RegCloseKey RegQueryInfoKeyW RegEnumKeyExW RegOpenKeyExW RegSetValueExW RegCreateKeyExW RegDeleteValueW RegEnumValueW RegDeleteKeyW

shell32

SHGetSpecialFolderPathW

ole32

CoTaskMemAlloc CoCreateInstance CoTaskMemRealloc CoTaskMemFree

oleaut32

SysAllocString VariantClear SysStringLen SysFreeString VarUI4FromStr

shlwapi

PathRemoveFileSpecW PathAppendW

comctl32

ImageList_Create ImageList_LoadImageW ImageList_ReplaceIcon ImageList_GetIcon ImageList_Destroy ImageList_BeginDrag ImageList_DragEnter ImageList_DragLeave ImageList_DragMove ImageList_EndDrag

bubble_permissions.html

SHA256 9e6c76e0048deee8f7ce616ff550ff67888a9abe42a9a9a7d472b89448abd10e
MD5 5c5648c86c9cdaf343a4f182c316c9db
SHA1 a7586923fea6a1615e188e6126582d2b11d77bc3
SHA512 0434df228d55fe19aebe5efdcff2639fb908e2dff4587acab0d068e274baa44d15659fa427625bf4781cd4167bd2fcbcc4389c78e0e0463113f7c19ef1e4ca66
MD5 SHA1 SHA512

NSIS installer

installer

build

SHA256 662153f605225bc199c4626363f6ecb404503a20d887f56630c5e53354dddf7d
MD5 d6a2816093df8fb5d3640f89732dc55c
SHA1 2ed7612dff97c8f26a7162e7e49a6fd2c571507f
SHA512 14166f3988e53add729a3fe9ddc7f7476ffbdc82eb20c2912f49af44a0dfde0431b4077b95ef51be2f3727b8bc2e546bf7fce349b2350e52fbec50602c008f2f
MD5 SHA1 SHA512

NSIS installer

installer

caching_banner.html

SHA256 a490bcb45abb855a343508f3a47755c58b64fff5d39717653be080d385dce60c
MD5 0e84d11babd12c56510e19a8d47d8e38
SHA1 69e947739deecc59559219e85c91bf2e8623bc33
SHA512 fabf52f467bda795283aa5efa02f802b2c5d4540b0bf973f6fd9dee0a44dfd73726c5fd79b83917f9a7ada0571522137d1a10a9d7e2f65a41ec33e46a51cbc9a
SSDEEP 96:CMNSju/SsOHyPYS7OUOsVbrsb+kgynQwi:CMU0YS7OmVbAFgyQf
MD5 SHA1 SHA512 SSDEEP

polyglot

NSIS installer

installer

chevron.bmp

SHA256 67c4edc9f7fda0ff1859e2d0fab7b6cb472fa239456309296d150cd534698c68
MD5 28ee586f15c23fb169dca7140ef1954e
SHA1 36532533432e80d2f462dafa7b3adf5f1ca005b4
SHA512 c7f167156d8cf125f8a3f30bcebe304610a2c6bd1e13f6f83075e18a4464945e6fc99b7892270f6b4f9e2f7193295f36c30697958b8a43fc0e16d2d38fa60e08
MD5 SHA1 SHA512

NSIS installer

installer

component.xsl

SHA256 b49f398103f55825efa78804ac75baf0845e2df61cb943f433760441345519bf
MD5 43c3dcb410f2b57a0dcd23113c623bde
SHA1 3ddc01077bfb84c3862b77ad86ceb9d26a801dd6
SHA512 71ccfed93bc7f1ba4c4b675b6170ff1ddb836317b587be77fdbf3d5493f3db8c593d8ce889955c9a84e229b8c4641318e5faeb798dde9a047c50be47320de237
MD5 SHA1 SHA512

NSIS installer

installer

efolder.bmp

SHA256 5e404f508b7b0352065f9eee28be1b571e7eb4e1170e7c7a3d57f7d2a91fc8ea
MD5 5e167bb66d43e800c5ae44ff59a73310
SHA1 0d212453aecb76fd137d7d1b00a23326108f77f0
SHA512 d4b22684b89c814e6b951d6ba25248b607954ff50890e7cb7556845783b39c10e4d9f07ad1a692871208928374c865a9762840dbf7a53c36ab25ff347fb0b79b
MD5 SHA1 SHA512

NSIS installer

installer

email.bmp

SHA256 0138a87057b4ba368459ee14b634bd6eece65a57349de59661f5b16c23b0af3c
MD5 5c05a2b4459052ce89bc18fed40ab682
SHA1 492c69e6fc088639abca697ae17b8c88ad26076c
SHA512 a0a063f5166173a1f7833b94f3c774d7400d1b72e38f83784596fe347d3f5a4e9bb924e52862f473d45b70a8a3f18e672b8719dcee8a4bc3f6641c63c20455ac
MD5 SHA1 SHA512

NSIS installer

installer

email2.bmp

SHA256 683a878acffc9ea39026365ec761e19fa4a0bcd819f9d7f58bc757a99801714a
MD5 4e72d92a6fc21b338ea34e795d5f8025
SHA1 781a1be3c213a75acd0ae99a4e039d42c5ccde31
SHA512 8d453eb9ca1aeaa96e3515bd1c402f7d475078f066d683f89d763e6ee0bdc031351474f5ca3f8dea55411c6119e28ca244bf868437c7c6435b6751303c3d903b
MD5 SHA1 SHA512

NSIS installer

installer

emailchecker_plugin.dll

IMPHASH 12417e76af468159503b8e5ed44b08c9
SHA256 09e989328c5f3dffa70422804f1e80278e36114c7da0ec8ce9b11dc8eab76437
MD5 aa7d2b8dd2aa6fa9a83abfc5ccb65e50
SHA1 666109df06ffa91cd0bf669f2b0af250baa5bf46
SHA512 b32006c76d49941e5981607b5f12901d0c73007dbc66737ba6ca8f0714878e61b16adfe160f107f6abe40134b2affa99b0c0509b8f24ca1ebdee5cd690f5d356
SSDEEP 12288:zUXwH+uT4Id+KI+k0Ur4XrC5S13LJKWIPcAWfMEINdd:zKwH/wHCUEXj1UWIkAWiNdd
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

5

Entry point

235813

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

d:\Work\.Current\Freecause\Trunk\SVN.Trunk\package\emailchecker_plugin.pdb

wsock32

closesocket send recv connect inet_ntoa WSACleanup htons gethostbyname socket WSAStartup

wininet

InternetGetCookieA InternetReadFile HttpQueryInfoA HttpSendRequestW HttpAddRequestHeadersA InternetSetOptionW InternetQueryOptionW HttpOpenRequestA InternetConnectA InternetOpenA InternetCrackUrlA InternetCloseHandle InternetSetCookieW

kernel32

FindResourceW FindResourceExW RaiseException InitializeCriticalSection DeleteCriticalSection lstrlenW WideCharToMultiByte GetLastError lstrlenA MultiByteToWideChar InterlockedDecrement GetProcAddress LoadLibraryW GetModuleFileNameW FreeLibrary GetModuleHandleW lstrcmpiW LoadLibraryExW InterlockedIncrement CreateEventW CreateThread SetThreadPriority ResumeThread WaitForSingleObject SetEvent CloseHandle SetLastError GlobalUnlock GlobalLock GlobalAlloc MulDiv lstrcmpW TerminateThread ResetEvent Sleep CreateMutexW ReleaseMutex GetThreadPriority GetCurrentThread GetStringTypeW GetStringTypeA LCMapStringA SetFilePointer GetLocaleInfoA GetModuleHandleA GetTimeZoneInformation GetCurrentProcessId GetTickCount QueryPerformanceCounter LoadResource FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA InitializeCriticalSectionAndSpinCount GetStartupInfoA SetHandleCount GetConsoleMode GetConsoleCP GetFileType SetStdHandle LCMapStringW IsValidCodePage GetOEMCP GetACP GetCPInfo GetModuleFileNameA GetStdHandle WriteFile HeapCreate TlsFree TlsSetValue TlsAlloc TlsGetValue RtlUnwind GetCommandLineA VirtualQuery GetSystemInfo VirtualProtect ExitProcess ExitThread GetSystemTimeAsFileTime IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess HeapSize HeapReAlloc HeapDestroy VirtualAlloc VirtualFree IsProcessorFeaturePresent LoadLibraryA HeapAlloc InterlockedCompareExchange GetProcessHeap HeapFree GlobalAddAtomA LockResource SizeofResource SetEnvironmentVariableA CompareStringW LeaveCriticalSection EnterCriticalSection GetCurrentThreadId FlushInstructionCache GetCurrentProcess GetConsoleOutputCP WriteConsoleA WriteConsoleW FlushFileBuffers ReadFile CreateFileA CompareStringA GetEnvironmentStringsW

user32

SetTimer PostMessageW MsgWaitForMultipleObjects KillTimer GetParent DialogBoxParamW IsDlgButtonChecked CheckDlgButton EnableWindow GetActiveWindow SendMessageW GetClientRect GetDlgItem FindWindowW UnregisterClassA SetDlgItemTextW SetWindowLongW GetFocus CharNextW GetWindowLongW DefWindowProcW CallWindowProcW PostThreadMessageW PeekMessageW GetMessageW TranslateMessage DispatchMessageW RegisterClassExW LoadCursorW DestroyAcceleratorTable GetDesktopWindow CheckRadioButton ShowWindow SendDlgItemMessageW EndDialog GetDlgItemTextW MonitorFromWindow GetMonitorInfoW GetWindowRect MapWindowPoints RegisterWindowMessageW GetWindowTextLengthW GetWindowTextW SetWindowTextW BeginPaint EndPaint IsChild ReleaseDC SetFocus GetWindow IsWindow GetClassNameW GetSysColor SetWindowPos RedrawWindow GetClassInfoExW CreateWindowExW DestroyWindow CreateAcceleratorTableW ClientToScreen ScreenToClient MoveWindow SetCapture ReleaseCapture FillRect InvalidateRgn InvalidateRect GetDC

gdi32

CreateCompatibleBitmap SelectObject DeleteObject CreateCompatibleDC DeleteDC GetStockObject GetObjectW GetDeviceCaps BitBlt CreateSolidBrush

advapi32

RegDeleteKeyW RegDeleteValueW RegOpenKeyExW RegEnumKeyExW RegQueryInfoKeyW RegSetValueExW RegQueryValueExW RegEnumValueW RegCloseKey RegCreateKeyExW

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListW

ole32

OleUninitialize CoGetClassObject CoTaskMemFree CoTaskMemRealloc CoTaskMemAlloc CoCreateInstance CoInitialize CoUninitialize CreateStreamOnHGlobal StringFromGUID2 OleLockRunning OleInitialize CLSIDFromString CLSIDFromProgID

oleaut32

VariantChangeType VariantCopy VarBstrCmp SysAllocStringLen VariantClear LoadTypeLi LoadRegTypeLi SysStringLen OleCreateFontIndirect VarUI4FromStr SysFreeString SysAllocString VariantInit

shlwapi

PathAppendW PathRemoveFileSpecW

crypt32

CertCloseStore

secur32

EncryptMessage FreeContextBuffer DeleteSecurityContext AcquireCredentialsHandleW QueryContextAttributesW DecryptMessage InitializeSecurityContextW ApplyControlToken FreeCredentialsHandle

facebook.feature

SHA256 2f14ac60600f144860afc3f03cacadef62b46f785fa0cbbfe522066611cca354
MD5 83722c16e8492c751c3d58c4e84c8165
SHA1 4f34b56db2ed061fb8bf39f3bdcce418ee7677d1
SHA512 e2707f5c9915b0209fe67b8e40143ec5ac80523974657c1f5ccd6a6808869f544e6eff32a5c39956577577461046c48372d18f07958bbea2326b1d788be78adf
MD5 SHA1 SHA512

NSIS installer

installer

fbrss.xsl

SHA256 4d0cf974cb9efd035c099f04689cf3f33b46543586285c5e5fe8c49d344e59ce
MD5 1901402fce1242bcee7c4b627232e7fb
SHA1 5aa1770902486d09d6d41172699f08190534a80b
SHA512 ba5e44fc4dfc9216bd2a0fc916de006753b6ac58dff2d89ac77b08a815a484401a0707aa71208721c90d93cf4eb91054b2488b33392c651b6d39fc6272d7e2f7
MD5 SHA1 SHA512

NSIS installer

installer

ff.xsl

SHA256 096d29709fb9ba1738035a7e102b6bbb4a6b71a813f65fb04a016c0c79ba3b80
MD5 16ac4df099711f2eddcf4db58ee964b8
SHA1 e81369a73bf9647ccc715d6943f7aa8ff0cc53de
SHA512 4dc7a56029d0d2816356855d29a6eef1fddedaf23dc6e9cff28f76d50d6e8be9c7c16cbe8c66f916aad861ffb8093e7a31d67b1e5a319ef9be1ba4d2d0872d77
SSDEEP 3072:kYeHDauP0kE83xRlMLfohriIHiZRiRLLimsLatC+sgaS84KL4UcoSzjo:QHP02hXMrohrtbLY2A+sgm4UcoSzM
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

folder.bmp

SHA256 00bc0114013b76d35e70d89073a84561d0f02abea6966a614203042a946c108a
MD5 1f480dfb0d274144c2effa95f80611be
SHA1 f80e33f5910b0d978a43d8f8395e426783d5748e
SHA512 7473d929a1345fed20f8da9fc72d500b2f8000b4930b2edac3eeb8f0bd3a4a9bc74a519bf5d906791f2556c82e2c5276117e317fa07edfd74dc8a1a84bdd3962
MD5 SHA1 SHA512

NSIS installer

installer

gedit.exe

IMPHASH a795589b34089fa942ee977fd356efd0
SHA256 df6bf65d324e71e3a8f9fdaa93be0ea6f66ae1393d32e6cd8a0a7aaa9ebece9c
MD5 0f2dbfee092771d55b3e53f7e9cc6923
SHA1 740c05d41056c0da87081781aed28a4543444b68
SHA512 f957d1aadbb0d29755f252b47c679e144e8ae4c13e23a9eff410ea61915b3fd0d0e85125b6c81c14f6e5d953ac92ad56ea8807a36359db8e5d9a3504428def6a
SSDEEP 3072:2ecou/nPozLNFJYYXyIPl07jmclww5e5sVf85wOm2u7rWinb5AA5:vcoIP2LNFJniIPlwjGk4w92u7rVqS
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

5

Entry point

56176

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

rpcrt4

UuidFromStringA

shlwapi

PathFileExistsA

kernel32

FlushFileBuffers GetLastError DeleteFileA InterlockedIncrement InterlockedDecrement Sleep InterlockedExchange InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree GetCommandLineA RaiseException RtlUnwind LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo HeapAlloc GetModuleHandleW GetProcAddress TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId SetHandleCount GetStdHandle GetFileType GetStartupInfoA WriteFile GetConsoleCP GetConsoleMode SetFilePointer ReadFile InterlockedCompareExchange HeapCreate VirtualFree VirtualAlloc HeapReAlloc CloseHandle GetACP GetOEMCP IsValidCodePage HeapSize ExitProcess GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle CreateFileA LoadLibraryA GetLocaleInfoW CreateFileW SetEndOfFile GetProcessHeap

iefavelem.bmp

SHA256 93d5ae754e303587874b35e3a44f93ec5508ff7867618f2e5f1494b14721b275
MD5 641788d9e4139ed4ff70865e4edd3b2f
SHA1 0837ee60200dc8a17c2840be54bb2faf205baefd
SHA512 1e44bca1c53d561e2778ebd12a90c93dc04723f9631e76b32f3bea3de8c5cd7a1836e79b8ed2c6c32b60ba6dc26e1d20f7be74b154c9237142b71d178f919fca
MD5 SHA1 SHA512

NSIS installer

installer

images/msgbox/down.gif

SHA256 5ad40fb49bc2deaf1ce9916274dc6e13159619f05ab687653bb0a0024117b650
MD5 04b0ae4d0cd7bb939c89a984576e359d
SHA1 898f68f331238536ab4d20c1a7d14847162be7f7
SHA512 e9d9ba7930ee90a61656e24e14973ad44b589ebd2e0eebc99dad401aef120051577bc4d1a9dc5c67cd29c3ba89827c2ca190d423e5c5e9f1cb07ccdd8075e7f0
MD5 SHA1 SHA512

NSIS installer

installer

images/msgbox/hr.bmp

SHA256 776e746994516eb06ff3268547ac682a960122cc8979d436a985b414ac1cf2f8
MD5 f50abd46549cc68876231505d20a528c
SHA1 1813316c9f47347cb645868786f4f53f538c8199
SHA512 def7607a4bac3fbef98f996d3f186ee7ce9c8a95bcfe446c9a7f8653cb4579ec1ec8b29394594e8f7fac77e2ab53d965bea21e38faf8dd59231a19a5228a3fce
MD5 SHA1 SHA512

NSIS installer

installer

images/msgbox/mark.png

SHA256 99b5c0e8f762812ba4f17e6c1b4d3b7882c73c67e70115b58536d256a1e44e54
MD5 d0f02d05c1866056fed253bd6ffe2299
SHA1 0d3d6ecfd310aa37f9c1653ee08168fadbe5a1fb
SHA512 578d21c6b3a1d8fb5fabacdb264363094ed8ea2f98940392d40462d17c1acd0f2af19c19d12cca26bd6f861d323f38400aff8cba25cd5f26c3e8d66a6ca8a793
MD5 SHA1 SHA512

NSIS installer

installer

images/msgbox/mark_do.png

SHA256 b1f4b4abb7266749efc07596b53714593a393d8060fafd29153a9a24ed8db9e7
MD5 8d03a7a2037869572d3a30c7db1ba180
SHA1 5e5cc54392421912bc1bf1b7233244116d4175bf
SHA512 0ce9ee6eb4bafa1cfc68e37391e45908f69500295412510c0bf30e31d63444765eef3732da48f99490eb9909acc9e39331a0e69ef5671ccab35136b2e9315139
MD5 SHA1 SHA512

NSIS installer

installer

images/msgbox/mark_na.png

SHA256 07cb4662f4f02f6064eead0d36532ea1f1f25f70fb2a98c2aee90936a9620fb5
MD5 80be889207b3d7820f9d257c0d6898f0
SHA1 af516a214d5ff3d9a84ae2cee0173de6e4411c34
SHA512 5e23a9f678b53c8b70691aedfd7f98ebf98cc491be98bd6f2f3b9060b14816e34b6f16b6e94a6c8d032e372ad9bce79835aeb194e3051818f7ad9f7e1c3648b2
MD5 SHA1 SHA512

NSIS installer

installer

images/msgbox/navbg.bmp

SHA256 bc3dcd1f9582840be076cd911362804cb0540399c91e2cc5749c22824ac5b2ed
MD5 3cee740e699238732d5742c21aecd218
SHA1 40633dd7895c973923f2f5ccb763d01e5cb6804e
SHA512 7848a93b74acabf9d98d1555453a4194dfa7089b44660c83cbc6fc5b117952ff68250eb3c7631ac4e6a444781833ac07d40980b8c71c3060ba6abf3e223efdaa
MD5 SHA1 SHA512

NSIS installer

installer

images/msgbox/refresh.png

SHA256 cde146f511a85271735667bc99c558c75f9000116549084e66512e4e54ba8942
MD5 7d49499773f9f1c4cd7db1c1f5be277d
SHA1 918ad94e45fb459e970abecb65a6a6a90a926758
SHA512 b6a4a79c1a270d812e040f7036289f2a93f1992cc065345abd3919cae4f202ed606c5e79974a9acffc314ff9fb7f4644ddadecd02ff30a3c4e779aac2d53c295
MD5 SHA1 SHA512

NSIS installer

installer

images/msgbox/refresh_do.png

SHA256 e9f5abc0997b85edd9bea9cb2d2240fd302873c4776ee4e332badb14838c3d0c
MD5 91d88c558f01feb5370c993b83c9e34b
SHA1 4a94178343bcfaa82de1cbd1d8e116c0d2f4ed35
SHA512 cf5f72779533465c75e32c8dd56a8443d264b63b8446271ff901b3049c9d94cd69d3c2f99d162b82a6d8126091d20613fe5fb6162461442f2b824f013556c3d8
MD5 SHA1 SHA512

NSIS installer

installer

images/msgbox/refresh_na.png

SHA256 80c9b8394e5e9dd2a3f9f9150d3e5c6aa1f525bf6a6697015bc199f06017dae9
MD5 cf6669ef8912e9168a3177fb39d17914
SHA1 87d3e7f01f664b6f72c826cb34d8e32327a59c54
SHA512 976bf3cbc7c5a2ed22253ca64b082081c3b046f03191216f8aa22aba242c2ed69c6d9790a45e4247ad9074945af8b2959ee9620f337916d81d0eb0ba122b4232
MD5 SHA1 SHA512

NSIS installer

installer

images/msgbox/trash.png

SHA256 9e8ed362f9a178d7371f121a7231db35d53489344965c231cfa12db9bee0d33e
MD5 45516cc4b4ea79c4e14c685a38fd511e
SHA1 9e83563f83d487d1984d569052b81cb0cf2557ba
SHA512 3668d75d34a16af15f95adcc13c0f005d7b6f437c2ac8ce4a090e5ebf66c604e080723b06634f172527a8ae9c9cea4c35f9aaf212ef3f5d8dd97f2937b06f41c
MD5 SHA1 SHA512

NSIS installer

installer

images/msgbox/trash_do.png

SHA256 40465d396a5c3beb1974566fa6651d2c1d5ec11c6141d80cc670b55ebbc3d739
MD5 28e23ff605960de312f8648ff5bdff64
SHA1 a201c563f7cf34eac5063fad79b72a4b4025429c
SHA512 f3b3030a888664af16da938a80996fe0c10b7125c594f67c395135d76cd984b215192abee51936b650ac5a4fff2323905646690f2fe00c8118e36b08215a7dca
MD5 SHA1 SHA512

NSIS installer

installer

images/msgbox/trash_na.png

SHA256 60c87919ec270a0602ad5ff535fd9b6afa9d0b4e32b52461094a94440242b264
MD5 e254969bf635aa60295c3da3e217093f
SHA1 5ec6c504423cfa714ab85ec0a5598a8613eb30c9
SHA512 8aa2f0a6dffae6afcb6e8746b54fa3280a983cda23fd3cfbd250906b25988a24e7cd7349a968fc5b23bceee7ec05aeca5f03e0247b7f9fcaf72cd3ed01cd153f
MD5 SHA1 SHA512

NSIS installer

installer

images/msgbox/unmark.png

SHA256 714df026a953898f539b0c66bac683ac521c80fed60ac6cdfb1bc0823200d6d7
MD5 ef59c1eeb7d6b3fb99bf568d55e6f463
SHA1 f90bd8c719a2c3fa9eaae1060f3dfc678f1fa5e9
SHA512 2782839d79d3ec546b5a2c4e4687ba5a59c38ab5688f062f23d2e2ae3d8de02d74e480778e467ccced429e0b175e482edc4c9280faa23725dd20b44a86def24c
MD5 SHA1 SHA512

NSIS installer

installer

images/msgbox/unmark_do.png

SHA256 5c2f0a7e0ffaadb1ea61d83242379d3e333025936e33355d133b0353ef11d412
MD5 7c41015afe016c8dbb1d756db6057ff4
SHA1 04b46717d2d1f36ad6ebe8b3f380e2a98b7577f1
SHA512 ec9731684e6359fb822d00c3751671dd548e87e9267861a4db91a5d05ccee46e212c750e5f4784fb06a6d4d8462278eb5eed984376f8bc56bbfbd3def36f871a
MD5 SHA1 SHA512

NSIS installer

installer

images/msgbox/unmark_na.png

SHA256 b15cc713a479efd84a5af70b2f98243568af797709c94484bf5306b57703de40
MD5 de00c383bccddbd53bbdf540eaad70c8
SHA1 5ee79a7091213cd0aa475bebc21b491ec9255e32
SHA512 ee4b3299dd3af0d34809a51cc72c5392a42986d8d944bafe45005b0061c41541493f6bc9ad3e9c0ec4c04046298d30b59ecbbb7742dfe196bd939c0eb9251c36
MD5 SHA1 SHA512

NSIS installer

installer

images/msgbox/up.gif

SHA256 66fb1dd5cd97ffeb7a20a8242ec7e417cb9094e07256e8d23cd7fbc1671c13ab
MD5 d0be94881db4a5093080885c1c9f51dc
SHA1 2210f6ff2c9d235f768984b38e98fa949fefc6da
SHA512 e22acc9b77e6e5fa54161c208705ce1d8465aeb5e7f4a792cffb06fff3e3dc36adbc3196733ebcbc8b221867a435d20158935ea93151ad104b265d726aaeb7cd
MD5 SHA1 SHA512

NSIS installer

installer

images/ticker/left.gif

SHA256 c09f2d8d673be8915a8492302cbee971ac65e6c1d8a12902640eddfd00fb83cf
MD5 87b3584bd44118aa8472c3bb7a5c6692
SHA1 71c81534d528add4ebc84a2f92a14491a94851a1
SHA512 b70b67f6e1468674c298c6bfbd53e2755f12fe63bcfd29d82c5da4b62792705c0246828161d7d720bf997f81b20525a95a40c54236f5d97f1c5f7ca1fa50d201
MD5 SHA1 SHA512

NSIS installer

installer

images/ticker/right.gif

SHA256 59b0f30c730aca3d602f85ef16a732d0725b86752144c7ac290708328e8d5d72
MD5 3d64e0a14105cd1b6d205a5a5c970c75
SHA1 b8eb5bdf9199831f2846a2b891348033a928529b
SHA512 7637a7930147edcb3f636a56d8a4ee11db70bf3a6fa9c3c24effd1ce91d5765715a0268dbc2d9445118ab957952a144d9d9970b1661754af01bc412f20d8297e
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/0.bmp

SHA256 4ef59694feb5d43d4209726f2016e59f2fd18249bcb2497fe2e5b807bcfe7777
MD5 a0874f0d48e3f61e5200b7898f433d16
SHA1 cda90f6f4014e3facac13f29314cfcb1dc389234
SHA512 db8e93b5a826621b2f84cee6aca20ecd92d835935ffffd6c6808e2724b145eccc51edcbd477a9adf482a9c91ba7d674a5d2745f914bae0c58d643736fd708ef7
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/1.bmp

SHA256 4ef59694feb5d43d4209726f2016e59f2fd18249bcb2497fe2e5b807bcfe7777
MD5 a0874f0d48e3f61e5200b7898f433d16
SHA1 cda90f6f4014e3facac13f29314cfcb1dc389234
SHA512 db8e93b5a826621b2f84cee6aca20ecd92d835935ffffd6c6808e2724b145eccc51edcbd477a9adf482a9c91ba7d674a5d2745f914bae0c58d643736fd708ef7
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/10.bmp

SHA256 79cde4e65043057d5ea06258140f95e7273b7227d4d488ee747a8435b9896929
MD5 8bd02e082de9c6c616c7d5d1d6f32c2d
SHA1 81745a9d6854dba85ce8711944a0a351e1a91600
SHA512 fba1a6e302fb639f7b079c6d9d92e44420270367a4a5b3eadf1db37e9d35571a2b5b460dc8f9837ac3679de5be28d0dc8ee94011c454e9a177a9b37cf008d7a0
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/11.bmp

SHA256 0b4dbe539dd83f2b0f1cc62bea7f5e79941440575878dd6fff184104d3447280
MD5 92f48b191650474b5ace4a68cbef9970
SHA1 b44f2c49471c85eb02c81769126a2dfe155b564a
SHA512 4343fea6132a20478aed5ed40f89ba914fb605f231c3e96a510c222be7dc2320f06e1173912ff1c9bbdfdf52e867429f1a10d30d5f7eae6a7cf875103e6bde18
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/12.bmp

SHA256 b7bae6bfe3e40c90b17fe3db607b4575637eb76fe10be84d7c59cbec34c64c1c
MD5 0769979e8bb89c9a5ccb232ed4f846dc
SHA1 4a19383fb15d9288f4db8114288a02ba5cf38f20
SHA512 c706936dfac5ad2273dff49251e4484468e59d5cafb1a75d260f9c60cdf87dc7e223418b5530a1b51db0ed572870dfdf76024f8ba59babea3b4f5aa0c2212b15
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/13.bmp

SHA256 976006d552cf70f3531c4227df3c13a531d29258bf71376215956d434c36b17d
MD5 312c08313b45c040b3861118b680daa1
SHA1 9b895db0dc49f867b0316306521f5414b46cd5a2
SHA512 2cfe0f91641ddb32b2253e2ae1c17f914b884fb502584a6e9d0a13e8289fc3f555d5dcfdabf9c83808f8e4f56e844f4fce2db664ea50c4a9178a078db16254ba
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/14.bmp

SHA256 e533cb7a9068f9e2c14a79135fca269f46ec7a1fb3a5ac7ff66b311ad26cd893
MD5 440723afd4431bbd81df3b00a97bfc58
SHA1 ea872dd789677dc93ace9bb07679008ff54fbe3d
SHA512 02a891d66d33452d9102649d89d9e702f86662aed7472a2cee66c657f7cafe97d66154db8f376beb9103765a0ab71defa435b22d08a35f56b6fdb23b26d57ac7
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/15.bmp

SHA256 0ca33ffa6534e11c44a76a5599d51fc2f1d394b03377f08e0d73eace3e44ac90
MD5 9e649fcd187eccb54675e41fee627469
SHA1 c7147a54c8c4af2a0d74045a132618f70416c7dd
SHA512 d609bab58fe2caf8d636b908f343497fa082cb7945654d9f2e960bf73fe65121e2d66803aafde22584dfd77f77fba64d38e9bdccf241c9df9d72d7d7aa116012
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/16.bmp

SHA256 8df3aba83a58cef45db1d2d557571d82d68eac1ee8c4b8f0f01abc0bf4abadef
MD5 9d8931b55f930f2e3bfb3e50905c8992
SHA1 4f19fe989d8b76ce5fed0318512294774a814892
SHA512 7277769c7b7147842a1c1d8e88874513236a4b2ce0ee29e042006075180bf361f05d10a0b5ae28bf961f4b228f1524935b192ec6711cde5c6c2f34f4771bcbd5
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/17.bmp

SHA256 4ef59694feb5d43d4209726f2016e59f2fd18249bcb2497fe2e5b807bcfe7777
MD5 a0874f0d48e3f61e5200b7898f433d16
SHA1 cda90f6f4014e3facac13f29314cfcb1dc389234
SHA512 db8e93b5a826621b2f84cee6aca20ecd92d835935ffffd6c6808e2724b145eccc51edcbd477a9adf482a9c91ba7d674a5d2745f914bae0c58d643736fd708ef7
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/18.bmp

SHA256 d011d35c5c40fb1c8ca8857e360f1884b2df284ab2941d7e07e0f70440856967
MD5 f3b66a6d8458acfdd9e21e42b292845c
SHA1 a8e351bb78deadc3675e37db3ee06edb5c73fc5d
SHA512 6443db0b12fc1077498c28faf4f24042697e7cb1d84e8c57c5c5047dbbabda01a3f274d46665b0a9f23fb5b5075f369497f6755de54841eca588777b560f54a0
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/19.bmp

SHA256 7a6c64fce6bc014eec9c0467a6af02a828d400be95932a2300e2b57ab4b1773e
MD5 5e48d5bd7eacd3aa3ee5829b9a630496
SHA1 234df84bcee7da405df697474c4bedf4b88d0c7d
SHA512 4138296b4c2efd6e41a8842b69b0b50eaf99d628a76f242d34ba7e3fe3489ae8aefbc4f4240538a34b5377d443c3931f351c3cdc1f5c1fe4f9819764924d06e4
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/2.bmp

SHA256 4ef59694feb5d43d4209726f2016e59f2fd18249bcb2497fe2e5b807bcfe7777
MD5 a0874f0d48e3f61e5200b7898f433d16
SHA1 cda90f6f4014e3facac13f29314cfcb1dc389234
SHA512 db8e93b5a826621b2f84cee6aca20ecd92d835935ffffd6c6808e2724b145eccc51edcbd477a9adf482a9c91ba7d674a5d2745f914bae0c58d643736fd708ef7
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/20.bmp

SHA256 730ed866d341c263a1eafb239972b22d14849769e1c03bf7ab56d5379e4b8fba
MD5 8db7e186e43ad9428f2f7905e401ff79
SHA1 70f64dc836ca2e61d570a60a8121d1cf8da9e9ab
SHA512 c5e430d1abf5cb3dfd144485a6e35802a1ca0befd214c39268a2ac20fed2decd27d07ce0063adbb4387c88fd1b563d140a437cf70ec78534f891a5aaf00c4eda
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/21.bmp

SHA256 a4c92c7b94f70260c0c07b55686896fb6f763b05823a7d65359998f16b085dcf
MD5 f2801440f07b7eeccf6900b445ca2fb1
SHA1 137d4a71ed35a222207fffe84e84872fdc4137cd
SHA512 1cecd33f691c81d17da1b59674a888e1b04f677abe4b251573794ded4b0578cf7e9752bc756ac2cb363d159abfd49f022c0b8494276cdb2d4080f19c9cd3400e
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/22.bmp

SHA256 f6f5f27cf51149ce0b2bfd3a56e4b159e0544ce5bee75b25810658ccfedfb0fb
MD5 f196568c7c7b52a22bddddcd1f36092e
SHA1 6c5471a23d0267139e82dbb855003294417038b7
SHA512 6e94aa7ef3442f483def0d4edd823cb36780ebcdb5943db20e050c1c1462f992db808c64bd7f77cf07183cef786889e36a34b7e4015eaa6bc02d2de6fbf42698
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/23.bmp

SHA256 1ad0ea9dc521fe6a054fa31f7dc72581bc9cf463e25030de8a766bc83ec1b876
MD5 2b42a30f39e5a81c01f13881e29ef8ed
SHA1 a83b34892a91249814980ee270b0da9ec10b250c
SHA512 c9c3d03db3a3bb6bca582cee5481c6a2e88d11d416c531bd07984be1a2e7f80806fd253caae50f4f772892ee52a822f84f3b054e580759400152c3190fae0185
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/24.bmp

SHA256 1ad0ea9dc521fe6a054fa31f7dc72581bc9cf463e25030de8a766bc83ec1b876
MD5 2b42a30f39e5a81c01f13881e29ef8ed
SHA1 a83b34892a91249814980ee270b0da9ec10b250c
SHA512 c9c3d03db3a3bb6bca582cee5481c6a2e88d11d416c531bd07984be1a2e7f80806fd253caae50f4f772892ee52a822f84f3b054e580759400152c3190fae0185
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/25.bmp

SHA256 fdd20d3d41f0fe8e81bb59fc10d819a090022702e443fd136e2e3722a62e6539
MD5 1b9ca86ccf97658b00af190099a4bf73
SHA1 71a461174e3035171a9610a95f2ee575d255705f
SHA512 240354327a2e77c4e0ba31628b04d5013baba4f74081277e199b6410a130d155931580bc69fffa81624ef43ccc07e661513cb9e66f026fa7e20651876db0a002
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/26.bmp

SHA256 31c8c9127566227e921df2089fceb1c4205ca554444cd7c2631644864d282e7e
MD5 5ce1ee109d37318827623e586c57341d
SHA1 937f2a8383c6bb4bf6ff263558efc5247372d389
SHA512 d2ba8d3c5694dc2982da56c743ddbc68de63bd002927b24af91d822c80c52faae030f5d47d04650da7588746ceaf07cd0a8924d4303b3b287e03ba21f142f9f7
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/27.bmp

SHA256 6f7e8f469438c83a4751a20564ad19d9eec7bdcd0b5a1942c195f410480ec848
MD5 8705007148f9562f4988b1c0a12f70ca
SHA1 71450e6fa9c61c38bee582606696f16e6c72e556
SHA512 6a38f97b4b8066a0ce6448a9cc46c5f63fe3aa69edbb9624b28cd3122ae9e1183b26701c158a2859692b5d9f3fac0c4821d71d61f448d3a55b392647ece0dba0
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/28.bmp

SHA256 169b328cac093777b232abf89b009460aeaed0ea6d9a6527086cd0b9e8337085
MD5 507f0e105ea195625fe0d61f4d9ebf06
SHA1 95db02204da26ac3277d946531478d9c80e39681
SHA512 019f1ae716c9bd85a5f8bb9d036ab9f4e018130ff40b079aa0594be58a5edf8b7f16db86971c021c438b7157a648d4c8f3404047aad8c2bfd468ac047ec43925
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/29.bmp

SHA256 162e797c5ade83920ba2a2d82ae090a4f63ecd843fbc511ebc31ad1c5339cb78
MD5 38cca0bf867c266213cfdc5871cbcf23
SHA1 8d5003c77b3ef3d74b98e15e0d564b7d2feaac43
SHA512 4182dddb845d7ad8f49c36e6a171fea7be81d75a36fae5db5a512c42a5e8e452a8a5fb01141ba7617e7d8ad6062a80983fd8c54b181dd44a8fd27296192ac833
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/3.bmp

SHA256 4ef59694feb5d43d4209726f2016e59f2fd18249bcb2497fe2e5b807bcfe7777
MD5 a0874f0d48e3f61e5200b7898f433d16
SHA1 cda90f6f4014e3facac13f29314cfcb1dc389234
SHA512 db8e93b5a826621b2f84cee6aca20ecd92d835935ffffd6c6808e2724b145eccc51edcbd477a9adf482a9c91ba7d674a5d2745f914bae0c58d643736fd708ef7
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/30.bmp

SHA256 19685fbbec9f64061f1efe51e12969910f7cfb4ee53ad6d47e39e887a7ace2bd
MD5 539db8847cbf256c929e9c7b5aba25a9
SHA1 3489b5f79ce9b95aebc2b9cd6bd5a55ed4fb23c5
SHA512 6208c6946f2f0b81df87090288042275118b015a05adf1e099daf7414969cd92ba7fdc082c52bb1aaa93a9ac95b86d4002821f9a6bf48cd31924865200b451ba
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/31.bmp

SHA256 ec61ee4b98e0385503bdf3f4d6490e98dcc4fdce373f2fc1832949117e7ab242
MD5 8b8f0c43b59a872299a46304b3ab8246
SHA1 559633153845cbc29ac1b58d5ccd3eed257adb51
SHA512 cac247a483376b026bf90d78cc081a3727db18d831e03678c749e1632f62b7a514a4cbddc3264e82e77d9f1828fb26bbfa66e7fd53df5780b4c180e03045f459
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/32.bmp

SHA256 198c63c0ab6e0edf8d36573a46fc73b6d100026a654b23e26a7a14ec2be3a9b7
MD5 18a2fbe6eb772b142ba1071f1da85175
SHA1 fb5a03019252aede636585dbae1ae86090520d80
SHA512 e434a681dad3a29ce6a6fb396627deae211e18859cf7b68a064c9fdb2cb0991c4e73b79dda4741fcceca955b5686a93b0471e2fcac87426d0ba9fb535b2742a4
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/33.bmp

SHA256 5fa7cafe4cd66888cbbdfd1c61bf64c3a3564dac990535b80cb09b435ec18c24
MD5 4881e21b48bf1670c63e6bfde889c575
SHA1 a10f4c3999340e518f54eb2e62a3dc87fe233509
SHA512 4590a292ed7f101d082e897af4ee6fd3134ac0a642543b5cd445d4fe0ca16171de9ceefe306de1b6bbe7a0fd73e6fd3ee204f3a6bded87061671dd761120f0f1
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/34.bmp

SHA256 fba271c7008219db9af41eb72b1583a0b8196a02d10efa1abc5567f968f83580
MD5 0d66c8ba6bb665ff6fe380d0c7dffe0a
SHA1 3f655f7c1a896fb7495a5b88cfbb848951f445cf
SHA512 06b1dceaf0dc597bd50cd7d21f5c66973009ee73f2722d104b7e3baff4e0b8d33f7381c452a1ff4308dcd74829f46d81250d06b9485fad13a7af7dfc05b2dde6
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/35.bmp

SHA256 4ef59694feb5d43d4209726f2016e59f2fd18249bcb2497fe2e5b807bcfe7777
MD5 a0874f0d48e3f61e5200b7898f433d16
SHA1 cda90f6f4014e3facac13f29314cfcb1dc389234
SHA512 db8e93b5a826621b2f84cee6aca20ecd92d835935ffffd6c6808e2724b145eccc51edcbd477a9adf482a9c91ba7d674a5d2745f914bae0c58d643736fd708ef7
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/36.bmp

SHA256 6331b908a320e093ed27243f5cb58bc53847305dffc47019afd127cce95b9be7
MD5 1e9da6c902022a2824ca1f8decabbe2d
SHA1 feb7e12afa3b7eeff842de206c28d54bed7ba2c7
SHA512 cbb10879485156f1b5f539be5cdafce93ee85d6ff446eac18409009b4e4faaea4bd5b17929f308a8e561e0df3b3a1e1e83f449d14b2e07fa872bca95a445eff8
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/37.bmp

SHA256 1143e2c0bf2e6fe61893639f344518c4433ce77b7e1f26f1329ad43f628b089d
MD5 398d4cdc6201e302924c6c838fc05a3c
SHA1 39d4227478fead339d5ea7778b5aedef46bad777
SHA512 eebc1a69b9340bd4685d7678ce7cd6325d067763390dcb1db3725c9a34da562b7920983951f168f5c3b15276f4e2dbafccb5ff4ad36acaf31ba2429cf8325f34
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/38.bmp

SHA256 f2686d7c21356fa3a8f193600358b4aa00cd409e88684c0d4a9b092c7ece4221
MD5 72c3fa1389c61efebe73b361f7f25477
SHA1 9ba7765f17ba29e0f9439d1410c2102d6c58b2db
SHA512 90c6920510829074da65577bf455386829627ab68ea6166aa2be6732da61688f27870370a38b91e9de8361f5d394b1e8af4ff8dc29fe7804720e5df5cafc3fcd
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/39.bmp

SHA256 c4b9671a45e2e5c2301941a3a50724cf37133c0394bbe78c5e4b93d33f5b6412
MD5 6f97a404625542e5525fdae740c431bd
SHA1 e6b10a66ee549804c2e4f3e849d2eefd4af9ae32
SHA512 1f60e43d28e87c653e347b0a1a0e6a166f92ab7d30e2133e5a0047a0d84b46d411813f727a2f306d81f319fb2bffd41d429375ec38f1871eb72993122eedf7c7
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/4.bmp

SHA256 4ef59694feb5d43d4209726f2016e59f2fd18249bcb2497fe2e5b807bcfe7777
MD5 a0874f0d48e3f61e5200b7898f433d16
SHA1 cda90f6f4014e3facac13f29314cfcb1dc389234
SHA512 db8e93b5a826621b2f84cee6aca20ecd92d835935ffffd6c6808e2724b145eccc51edcbd477a9adf482a9c91ba7d674a5d2745f914bae0c58d643736fd708ef7
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/40.bmp

SHA256 b0f1db41074298223934a393005e3a02c6657f1045b6d04c0e4e8c02b2fc4513
MD5 f005f60e7d161ca8a1211564ed8b51dd
SHA1 090fc97c94221cc84d73f68f095bef84e3a0d79a
SHA512 fe598853606f7f478a6e38001d2e156fef22289657fc2f8fa94a7faf591e3f7ec777d832f8b5540735ea2713b4c02aa157faa8ab2c11c1bfcc2f31ce38e45a1a
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/41.bmp

SHA256 769bc3eaed6b9859354b3ef6858a3f7292cf84aab59e593277f758d6a0c163ef
MD5 f83165852bc489bcb7ba82c7648d64e3
SHA1 032e530740e44733d08f527493024b056013ee5c
SHA512 72a0637937c5d0c997356339672b02cb5d3e219628a22a7849658e065a27f84b19b670890aa5c423b114b788969a2976cf5fd033dbf801ff1ece4c522005612e
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/42.bmp

SHA256 d453c30b37f7b54a2bc43693b6101fd8e0f2026e461af94cc3e2c653bc22392c
MD5 a11e27091c2a16dfe0e32723bac66bc9
SHA1 1866095389d1064fb139af3a159f6997bfa13513
SHA512 2451b556c8124cedcb8d1e2c2c42d8b0668bc98c4b6c1ee394ba2e357424158dffc0fb96d0c1a9fd132e944835991f0d6a6beaa9736acf31a064abefbe1aa623
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/43.bmp

SHA256 4e8771be3031ce9cde6762fce1450eea05fbe8825e8e1267af69e2f7c6c9055f
MD5 34a8e7bf372f5dd3d3eeefdcf54ca7d6
SHA1 bfd132b0a581fa70de9f85094772af362e757d73
SHA512 5fd6e41c7ae32a8d5b9dbf526fa775b376b17bee461b9960b2760a033112bf7eb86b77d72a15e1d3f1e4210f6ddfe9f2b2084f1bcd3af0eac024b460738fcb73
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/44.bmp

SHA256 880ce1a334605016e8101cfb05093b207e914e8605d5b51e18074ac3e857ff81
MD5 608603e7c990503a84c94ad35575f20b
SHA1 e879c840d68e835a84c266fe046ec11cba29c634
SHA512 4ea6d1eb3c013d3ad3e76601ba6d46ff288d2345049170aa2736dbe55d39635f0bd93c84705c97a6fdfc9b3a81fb86762de7e47038640afc2da22e646eafbc07
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/45.bmp

SHA256 6ff7ee4fa00b1ee9dc3ee6f2fcae492a3bc113872f327798e6ba958cd24b3c8d
MD5 63f5ff764ddd9bacdd04d53b05598ec6
SHA1 6e3913854c03ea3d7d321ef9e2ae193a547381ad
SHA512 7bab9f744e681c36deea46a16b66126f041bf595bd181143f8bb09871d700e84873fba4924dd365bc155224dd4058d5a3c5e9aea8ef8778845f2825971d911a3
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/46.bmp

SHA256 1c5a3d98e706a1a6b485e37382cb6030db0347bc51b81de66b3f6a067636b301
MD5 cf0a9b64453e035bb20eaed5c7d96f40
SHA1 68028aded440a54dec24dce777e4b3393db03cd2
SHA512 e7c30332807b4b7a7566cd635d67e6d688ac458af9700ee444b2d6e37193b9907d6f1fd650fd4b818372ec0c169b8c7da6e91b3184495c9a37c7b4c2db6ef22b
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/47.bmp

SHA256 832ee9f48531d50af307da1d06a383b7df70c0d63a85c1d6365bb1736932e955
MD5 e59fcc8630ca0445379b505c53973dbd
SHA1 89b5a2692a95cf972755004f4de3e84ccf035109
SHA512 587f07cd8a18322b377f4946b6794c4978940c02a41a6a575f72e410cbea1e88112d2bf253ef2bfcdb214ac8a1dd4603b7a50a9554f3d10a1f4549e09ed3b0ed
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/5.bmp

SHA256 73feff216115965d62126f4013d831ad8c237e1634ae5de3f8bb347eb3817893
MD5 db8ed0f1342ba8cb7630a53a09a4b748
SHA1 07359278b65a815206d1c9f95069fe8eb6f968cf
SHA512 93ad30c44c6979b36a7d79b8f3e0930cc8420443e9d53fe8b0740c6c1f3a5bf992b9273201cec8f31f869543bdb434bf1b87ca4ec6051a640317e5d65a698b91
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/6.bmp

SHA256 a497134b9863283fb7011caafc2ce15ade64f32e342996dc930768ed33c1d59a
MD5 0bafc8464c8c1d4e8de0a3327db4ab3d
SHA1 d0050e4a344990a6a4b3ecb83a9b8b90e54293fc
SHA512 1104d17c573541cfafefcb41fa0ba3f6c61d8b270151b78af2094ebff31639b43647c6ae7903860676fa04afd621c32746a7e5cf9554d06cf4aadf03f703d742
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/7.bmp

SHA256 9a1efeaaec79e03cd0239359c5744a3c8245b073796165224d62753e12c625ab
MD5 0a80e07118043462ae319e1016b483f4
SHA1 2e195d89f606d2ca0f43b797d7ddaf75f538f3e3
SHA512 cc1dfc575c068cfadee38dea2deaa9ce96cbabd41eafec2fa705e3f7d341cfd1dc7096fb317fcfab18b76b5e26584c18b014b255f9e17763d060abc1dc181990
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/8.bmp

SHA256 252adcdcd24b87e330de22c14a633a5bd996e3ae5b5d45a64e573d3d9172c1c3
MD5 b9a0e6728ff8a0b7a250c45a560bd7f0
SHA1 efb0c4d4e9d61f379aab885bc419d3018654e85b
SHA512 21512df0b5056290c904e0d6711ed276cb6623de1468efa0ed43dfa71fe4b7b874f0c971560ff00aee68883699589a8ea98ac3040b23c7dbdc1409ba1806e1b6
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/9.bmp

SHA256 4aa59290cb2f421c3a3b19aeccca5a10a63f068f8666a82449fec291d7e5d632
MD5 d6b4090f62ad8d2d047d08ad3e9c0ed8
SHA1 e5e1b6c8bc79ac466e28ca7271180abc5c7b681d
SHA512 bc41fded6be416206c47338b6de52504774a3935b60cc7d1c52487a9e5507de7174cc89085244a0edf943ccad7cfa8ac56f6b02443e4770b90a7e508271a1dcd
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/hr.bmp

SHA256 776e746994516eb06ff3268547ac682a960122cc8979d436a985b414ac1cf2f8
MD5 f50abd46549cc68876231505d20a528c
SHA1 1813316c9f47347cb645868786f4f53f538c8199
SHA512 def7607a4bac3fbef98f996d3f186ee7ce9c8a95bcfe446c9a7f8653cb4579ec1ec8b29394594e8f7fac77e2ab53d965bea21e38faf8dd59231a19a5228a3fce
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/na.bmp

SHA256 19685fbbec9f64061f1efe51e12969910f7cfb4ee53ad6d47e39e887a7ace2bd
MD5 539db8847cbf256c929e9c7b5aba25a9
SHA1 3489b5f79ce9b95aebc2b9cd6bd5a55ed4fb23c5
SHA512 6208c6946f2f0b81df87090288042275118b015a05adf1e099daf7414969cd92ba7fdc082c52bb1aaa93a9ac95b86d4002821f9a6bf48cd31924865200b451ba
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/png/0.png

SHA256 8d27461141dc806c64c6c99f9c7a35502bff629932620bb02994ff6bd0fcf6f1
MD5 0c53eabe04650e9840bd5ef90c5610b9
SHA1 fe8652df9f9a27c95b8a99a57990c3c057382ab9
SHA512 3e79c4343ef51c4a6179025420990c2f760675841fe8af788332a7b73a2004c4c818e1a60f0f21a2e71895d9aefe6e2a836fd444bf6d9a9a3e288dc284dc587f
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/png/1.png

SHA256 8d27461141dc806c64c6c99f9c7a35502bff629932620bb02994ff6bd0fcf6f1
MD5 0c53eabe04650e9840bd5ef90c5610b9
SHA1 fe8652df9f9a27c95b8a99a57990c3c057382ab9
SHA512 3e79c4343ef51c4a6179025420990c2f760675841fe8af788332a7b73a2004c4c818e1a60f0f21a2e71895d9aefe6e2a836fd444bf6d9a9a3e288dc284dc587f
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/png/10.png

SHA256 1fd24f89149260ec07930db1fb753619f55d0a873215d81c1938f5fd59d99ad4
MD5 76e1d2d28eaa06d134efd0b8fcadf20e
SHA1 3cb3b83e671a46a1b8d16ae4a4abe8e6263896c8
SHA512 8b974fa2f7de41092f8b72b26933206a3a7bb16d61b162eb337b9e0201f78999c504b6eade9b20308d46b36428d63a5d935eebb4124fbfad9cbec23b122fab26
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/png/11.png

SHA256 f0e10fe646f9014082d66dbf7d9c7fcc59dbf9c3789d914bd0438d64e8c6c0d3
MD5 623447a3922b008b0b84d7efa9b9523f
SHA1 23f575ec44ca0bf4e3ce7532d68a2f5f2ac9ab83
SHA512 a94dc1436d12a09168434c77ada1a72886e436f6a59bca91431d47a136ccc59579f295b39a99e76642b85b48d816ad5170a812f54ddc909ec82a1eb637bda3ad
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/png/12.png

SHA256 016803c604c64d4c6536258b92035a37a3ebf24af2a734011f0079bc7135bbc5
MD5 373f37784dd84bb195b15c30e28a050c
SHA1 10390a26c945fb77356be83a6e9fd06aeee157c7
SHA512 397b82e197f1b15b08a4d6cd8f399158a099611650ac01f5a2b9be4f12dabadfa58aab993c45e3af815e7897348b9a8e1f96a5e4ed39d42418cf7b5defac7b21
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/png/13.png

SHA256 6bf7e8f4052675bcdb990bc56e6d821fdef934570b5fd80eebf6f06ee70485ad
MD5 1b03fe68e87f8d0ac9c69623b1411ea1
SHA1 3fef01c1ac3dc3addaaddb3abea796f25eeb0a23
SHA512 daab30f5ceae6e4aa114105e922b97a2b4c80d8b427e32815654b64597fe1ad04e0da4d9924cb77d5740c9a91e4eaa95b51fb1c6df09f9fe090f7815fef1827d
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/png/14.png

SHA256 77581f1820c2fcad6c870aba008eb2071fede093b2648764ee81f1cd723b6ac2
MD5 291675371c0c8c412cc59a4defeae8c8
SHA1 c977150c7b3c3b669954cc1a5384278a55aa1d32
SHA512 577d41923157b0c825d56290fd9363cfc908fef1f8d31fc998f48a5adb9ce8e5a13bf66793d4c3015d5c0c759187f03c6185b358f6830c0d0258296b00111704
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/png/15.png

SHA256 77e3be0f31e1deb837cb8c2d9dbd9e5c6f65890c7727fa027806326e4894f3d9
MD5 ab5b49fa7d24832a8c29d1e9bf309598
SHA1 80b98d99b5d6e9cfded09422d853199cc86ef3bd
SHA512 22eeac514dedf763f7ac9324adf203f89f738dd0411c4d9d95a97cbf4c1a063dac45969bf2756c4f3df196b8ad61cbd30f0109f631c5c44dac28b4c22ec26d8d
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/png/16.png

SHA256 dc2ace0ed8acafaf05e9762e3cf3196c6c4d5feba1f957d9a374bbf3a1c267e6
MD5 757e78649b29503f308d5c07e8740e16
SHA1 297ed013b554b0cde357d0a50eed3c7e08dad9b9
SHA512 75367c4c88f3a13ddbea8f8e2a627499daa517618d271c5d68712d35fc4b12f386a08a7455bba8180954f142ec13347f2dc29947130f6d6b76be304a16a4f105
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/png/17.png

SHA256 8d27461141dc806c64c6c99f9c7a35502bff629932620bb02994ff6bd0fcf6f1
MD5 0c53eabe04650e9840bd5ef90c5610b9
SHA1 fe8652df9f9a27c95b8a99a57990c3c057382ab9
SHA512 3e79c4343ef51c4a6179025420990c2f760675841fe8af788332a7b73a2004c4c818e1a60f0f21a2e71895d9aefe6e2a836fd444bf6d9a9a3e288dc284dc587f
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/png/18.png

SHA256 b07636591d86f8d918011fdbc8c8582f7a91e97416432ef39767fbe0e87fd06c
MD5 88da54ed917c9df90e1d72bafe02ef1d
SHA1 807f68398b26abb7a3393532dcc5dafd46162242
SHA512 ad17162f6d5c183f079de4fa3a27209574d07debdefcf097fe660cc01c3720d71e56b45b820d622ea76a9562a311de5acb54c9dab73eb9ac0004461c868b0e58
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/png/19.png

SHA256 4d510050cf176290329dbdf60080e39910396bb39f08cce7ee21f958da5f576b
MD5 c8d3b8165a2367f4aaa72e88883a9ed5
SHA1 e22efd0996b83b33bcecbe423e03d527ae243e78
SHA512 1b81f1bd1a871f9243b5219ede1c03557cff8067641ee808b5ad295c7385dacad24eba868fe86e0557fe51b07523bcd0c83275d432d3c5b6b98d85b2aba30a09
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/png/2.png

SHA256 8d27461141dc806c64c6c99f9c7a35502bff629932620bb02994ff6bd0fcf6f1
MD5 0c53eabe04650e9840bd5ef90c5610b9
SHA1 fe8652df9f9a27c95b8a99a57990c3c057382ab9
SHA512 3e79c4343ef51c4a6179025420990c2f760675841fe8af788332a7b73a2004c4c818e1a60f0f21a2e71895d9aefe6e2a836fd444bf6d9a9a3e288dc284dc587f
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/png/20.png

SHA256 c9ab85a8027bb09ebda7807e82e6c0041c35b9b25984e2123960db012fbe79ad
MD5 f6e9f9076a31d9861c3939ecf03fae10
SHA1 08844cdac106690bb3186611983281dae915112c
SHA512 535741cafadeab97eed22019fc1bdf5183644f336473d700231c0a8ed0376ed49302a56babd48d0a0c9c8a8fca0041aff22646e5bebb93a52d5ea1896ce12ba9
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/png/21.png

SHA256 60f3f3c51eeefa114ad7c89199bab6689a5d52c5df7104ea02d1e9e29daae230
MD5 ca94f2e706efd38312428e0ffd1d6d43
SHA1 f8c014d7780991f1b791fabc5e1514dc574cdb48
SHA512 888e4d9b28f795ff4305a8bb67d4f260e9f70f4d9146f01d37eed28683366783a992b7053974f4254ba4e637f5d8097608b4c601f87193404f3df459c66087db
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/png/22.png

SHA256 df44b7c8b5296d827f5fb94e32712e84637ee19fa6e654b103ac1f164443891b
MD5 ee53215fdae8e86c8e3298b676c0e734
SHA1 15f15e57cf11114ea6f8795a3c26001160bcfb21
SHA512 b366f9c460b6087990f10b722626be69a1a964b7eba330d90801617b27b8e378c02bbc80860b0d4c4f0a5fcf55ac616fac562758c1c5c09669962ae07499570a
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/png/23.png

SHA256 23fb6460f76d4c4f9a8e66394e5ddd12196403e2b20394a8f87334483ee44d0e
MD5 13f26fd6cb5eacfc83a7618155deb5b2
SHA1 05d40c553f848615f418de866739fd826b369122
SHA512 1adc6a364eaf556432853d92a64b1f1f9e8d51519a6e555b87fa6ce75a9078d342af5dec9f4614d779c56e76403fe3128faae0cb21da3656dc614015612167bb
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/png/24.png

SHA256 23fb6460f76d4c4f9a8e66394e5ddd12196403e2b20394a8f87334483ee44d0e
MD5 13f26fd6cb5eacfc83a7618155deb5b2
SHA1 05d40c553f848615f418de866739fd826b369122
SHA512 1adc6a364eaf556432853d92a64b1f1f9e8d51519a6e555b87fa6ce75a9078d342af5dec9f4614d779c56e76403fe3128faae0cb21da3656dc614015612167bb
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/png/25.png

SHA256 62d9e2d1904f96ca9077def03ad13f646ff7f881abe890cdd29fa63943276954
MD5 5732b35e74a4c76969d3dd1c09f2b638
SHA1 ba5b1a9d75b663431a59c8dc6002e91c7eab6e30
SHA512 7d6faaa7e845577b49a93bbdc68e1a998ace563981fbd402b4128ffc2eeb8f9900edec67c5137f33772dbbbb7956d296ba97f1615815ed930358b3ed79460110
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/png/26.png

SHA256 9dc37b9b6852f958251165a3fbe738c47556a1439d060eea9a0d801cdfdbc7b9
MD5 0ebf416467a1f59371f5a39fe84d1ee6
SHA1 a9372c8682e5c224d5000b34586a4574dcd7b47a
SHA512 bdd672550742937dc7d731c18af60d3f1b49e2043f7b200767d02561f68653a4f1a1aa653b60ecbc9da578858d3aadc68e4bfdc9a4ff27e20629949307157a8b
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/png/27.png

SHA256 be2651bf7c30be2a93c256378741d5077f4860364fca2f7520ccc4e390e0d7ed
MD5 befc8d8c9a34f902ad13a539871bf1b1
SHA1 d4c28969552a049c601c1831173c26b8c27e08da
SHA512 b97d2b7dffc81651c95bccfe60023da10b3a865612349bbbcac66c891d87f320dd81720bbf9dc358c75ca24a2a02bc56cd9b3d0a1d8510e83074f3720055ba9f
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/png/28.png

SHA256 7d2dae06ee1dac0f4ffeeebdf0c572263f6b073e13484bf695d2dfd92f4abf7e
MD5 62e38d35bef0b1a25aaaf87b5f2a976d
SHA1 04130bec18d3f886793ae9a1750717fd74745c40
SHA512 f247665f3edbaa4d4c35e95e36311cf80af22f5f8401562d6a84544e522a9fc2302df5ea362dbf14f09c315993391cb3a4d1d44b9acee026e50573ae277a9c10
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/png/29.png

SHA256 501e251da438aab6e933850b0b15005998d62b694f54ce5b4882dddb236dc767
MD5 68ac3b16adfe0c9f912a753b92a9212c
SHA1 58faaa27078a8dd47301ee36c1da5518bdcd7b98
SHA512 c9ce15a09fd426c6585066747a3aadcf28b2c31269a44f813668c464c5762c692ddb014617189518d60e381cbb2c5ba8446c59c5b33e02d4c7fa8ea84cc80b05
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/png/3.png

SHA256 8d27461141dc806c64c6c99f9c7a35502bff629932620bb02994ff6bd0fcf6f1
MD5 0c53eabe04650e9840bd5ef90c5610b9
SHA1 fe8652df9f9a27c95b8a99a57990c3c057382ab9
SHA512 3e79c4343ef51c4a6179025420990c2f760675841fe8af788332a7b73a2004c4c818e1a60f0f21a2e71895d9aefe6e2a836fd444bf6d9a9a3e288dc284dc587f
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/png/30.png

SHA256 7c6b2c3eeb2942f3b192f2882128b3a161804fc8f4add2c0ee21d77faf7b148c
MD5 822e9c96d068fc3e0462c9da0aba0f36
SHA1 9f4e4650398a61be2646fefda0612d65dc1da5eb
SHA512 73455088814ac4eb42c61610e1a226b3f22465690e7c905aac31c7c8898ac085681b2b694fa0999cdb1ae33b5d8b3a5b4b84cd1cc3fdffdb5d47b2faa4229fdd
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/png/31.png

SHA256 e0993f1e2589f545148874e66ef2110bc08afcd7258fc83de547342c693dfa0a
MD5 0637a7f4f538b69fda7c205ec68bb458
SHA1 9f14896985759609dd336e973c1708aba79cd920
SHA512 09e777af68a349c0fda2bd15b7d9610e39576ed2a958dd34f9043a152c3b6c5a184b0fa522b9b8ec22185dda7e99c373e48947d9dbc636a40831766df5fab72f
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/png/32.png

SHA256 7c89be158d3c6c5348214664a3a689a042e23b983e056a42872a25239a177888
MD5 971726fb154d2ccf7f0096ab4c6d5887
SHA1 cd428f6c6d6a0c83ccc76652ac7ca2dee46f7056
SHA512 f50820998e6292fb2f3e76636d62636045dd8643318ba810ed24bae266bbdfc39c2b398d99defc89e7209d76e5f03bcf799ec87c4130696ddc1819460e6c8d4a
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/png/33.png

SHA256 2826281e0e5ced539a661f6a0f7743b5aae0f85cc5d3dc08925fe3f5b02c5a71
MD5 3bcec4fa6d995bde20cfac0ea7a49e6e
SHA1 4bd6ca2db76189a1fa0f34151b2695c9e9a4bace
SHA512 f65351faa14d36508fc4406bd6feeadfafe2a4bb194ab44b6534c7d77828d0b6e8b0c835217b4667b6d3b5fc110785e672a3fc4fab9cfac74cd8350626d4a43d
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/png/34.png

SHA256 41697dcac9688116a059ede3f885c16c2fa8597cb05d0f7d6b2067e8b991cb1d
MD5 95dac6b708ea05baa7523be15728238f
SHA1 1fb5b5f2ebf143d620766a14a755c5cfefc91815
SHA512 7522df651761b22f4ac5e9d4d4c5f329ff292b5194d675634bcc4b80bf9ab533dbf56b4911307790a5094fb6fccc5dcb73578364df27d5913ab5a87a340b4e61
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/png/35.png

SHA256 8d27461141dc806c64c6c99f9c7a35502bff629932620bb02994ff6bd0fcf6f1
MD5 0c53eabe04650e9840bd5ef90c5610b9
SHA1 fe8652df9f9a27c95b8a99a57990c3c057382ab9
SHA512 3e79c4343ef51c4a6179025420990c2f760675841fe8af788332a7b73a2004c4c818e1a60f0f21a2e71895d9aefe6e2a836fd444bf6d9a9a3e288dc284dc587f
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/png/36.png

SHA256 e0bc5661ab982641092019e673d408493e8b784a47d2704355b16174dfb7787f
MD5 074ef5683ac89ba20388def00b9401b6
SHA1 26fd3c9c3bdddddd2238d7e71374000b565bd710
SHA512 e4786e19492ead65b2c4fd8e8b08a286cc18c0c278db7e688fedc8042e9de1fc1a638dca576312142907801385212c6f3ab5812e0b5a97748339ac866d60e8e7
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/png/37.png

SHA256 2a50e71ec6b5b3191db5fc97bdadc03cca33a221727f21738ca3df14458f3a60
MD5 8d6c0c45867af1a4cb7fed2c34152860
SHA1 721c93f1d1cfa955627400448b9e41c5ed96bc15
SHA512 e2df8a5db322dbd227cad396129923d066decb08b71e05066882878450f5ed0f3e8446e90028c122db2ee38b3b3462f8c79f7cd787119d344716a61f3f54eb6c
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/png/38.png

SHA256 814deae85d204a77b7932f219ad290f09d9fd7abd685d7d3b25fd528dfcc2636
MD5 3667a6a388ef0512ef49a8c55a39885f
SHA1 450cfaf24c4ce142f1efd436b84e457f55f5aaf3
SHA512 d5c93c6acae717574bdc576cbcc3318aef6062466440c33619ca88a94b284a12d5dcc5bdbd9162abbe43d139e39fb28b55d624a7623f25e82038fd9c64f4a6ae
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/png/39.png

SHA256 8f0bee3e5606b8b4ee77c3186de9ecbc54a9ee936c065e0866ce61346cb54df0
MD5 d0292b5167be997195a92e25e149b1e2
SHA1 a424a5ff446433ffed2aed17b80b08aa3a780dbd
SHA512 7ff52671665b2076671020f5d82c7532af1376cff527e2c5be7f942dda8a4fe840efd43e864cbc389cfa380da9a062e400eac3fff1f6a72b219cb6ac396ebe0e
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/png/4.png

SHA256 8d27461141dc806c64c6c99f9c7a35502bff629932620bb02994ff6bd0fcf6f1
MD5 0c53eabe04650e9840bd5ef90c5610b9
SHA1 fe8652df9f9a27c95b8a99a57990c3c057382ab9
SHA512 3e79c4343ef51c4a6179025420990c2f760675841fe8af788332a7b73a2004c4c818e1a60f0f21a2e71895d9aefe6e2a836fd444bf6d9a9a3e288dc284dc587f
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/png/40.png

SHA256 04be2f66e41436fe3464b3fd17b5712d00073205f63b6a88771ee75f54f63b69
MD5 ad0cd9a6e64d9a06f763e915572fd40d
SHA1 1bf5336cebf13f6822fbc80795498ef331604a21
SHA512 6bdeee55819ede9e53e0a3c19bb9db6673ad0d985af6b02d08f3e7358871e2252742e65e258ab95ff4fc805d974cc0d0c21b388209765ba77f4723c2ab636737
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/png/41.png

SHA256 686637388a4a396ffd3a82a03545a800ca1ef3e5b8d14d6cc48ab4f555210097
MD5 7b2603e99a1e070c84ff9405d3887e1c
SHA1 b63268171acab17ec67fd90b3d184a0505dd41a1
SHA512 09f5d0eb7deec2badd7d8a8fde002458af905a9f65ab6b253278feec1599eb4eeaa22e8db890b1a68e63683bf98ebdd1b7e3a532f1520a6f2567914da3f475e6
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/png/42.png

SHA256 924d7609362a1c4940714ccce69b33631cd1356232e356fe30690c188c3c5907
MD5 dde7dbbe4bea72ef09a4d8e5412d6996
SHA1 8bbd0f71443270e16989b962a5571df8a1c794b5
SHA512 1d90cb4d260db5e296cc4b894f40eef93b61a569f197eb78c902c95252c792f43460c4fef190bc2bdfe0ac3342eb9ce8a74587d9424a8105e73c3544a1153aa4
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/png/43.png

SHA256 58fbf60ed2ec4621de7db8abfc2855f8fcdf6f5d2afb5e88e8655327ba66e0df
MD5 095fa8e726899b6068bc11839229479b
SHA1 adf283e196ebed3fa32a60f159954409c83ddd85
SHA512 c0829bacf06f658d7777684c0a8bb471fce1af20c87f272f1cd6f50814a93d8fab3bb9be339893f07f88a05ae527e67e4f680a7479a4079fb2887ac1262c8f17
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/png/44.png

SHA256 9f970be9b1b2cb048a6e3844dd158dddc72f0a2126214713dc4dcedd072ee393
MD5 c29167c9cb6a255c8cd2678b9e71179f
SHA1 4583482cd1bed5d234ba481b406eda2f7c42e3d8
SHA512 df02ce7e9232d8e6fc1101ae131efa8e5d37512471cc6e0ee19cdcf44cb655248a8dbf28cc8cb838c424eb96503e2f2343ff984690e2aad760dccccbae763fbb
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/png/45.png

SHA256 810cb6798d7f6509ed9950f64f0a66b57c539f434e95892673ae7b33470c4dca
MD5 c8f7fccb8ac78fa3d36a7981af798498
SHA1 f308e08e249a016c0686ec8ae8ba05687856c857
SHA512 126804d5bf3fd0478a642f9e74816ded3b2f51d1257efd8d2203031c7d010837dabb2eefd6a3503ed83ac9e8ad2a0666619c711e81b8a33f05475ece3c22e42c
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/png/46.png

SHA256 8ca76c96115e6177fc338e2c45d99e5622b76e29c27b5ebd8df29bb3714b1ee4
MD5 9ff6e9bb075604993a4e8df16a7635c5
SHA1 e67d6e9dde66a4ded4f7d4f06922a483a6b9fe49
SHA512 8db235a9a6b7c10789e1fa92ebc8d7aeaa71dc3ae7eb75e826df3ade9ec7dcb6e1501649e9f431d52a0d2e2ecbaa3e9ebd1d9ed9c5e5279c26fc028368c0e6ca
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/png/47.png

SHA256 823efae6ee46881fbfaa7d0f0d646e2e371cdcd5109aaafecf22267302c8f957
MD5 7b5b969243e6c216e41ff716fb0b2f44
SHA1 8ad8c5695ae2347731b2f01bd4438ddc4457a249
SHA512 bc92905e2455da520bb4a54b9e68a84fd711e0201fa56446bee3df73f78dd134ae4003efc07288885b5c0eabd8c8ba6f8f463c57134a0c28b24262f0f59b686e
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/png/5.png

SHA256 16242b7d1ad940237a5f1f5abd234fc24d3b5402fe532e5385db10249a3c22d5
MD5 091620e7acff3f9ad3e92f5132744cc3
SHA1 4d1cce713883a1dec15a3989c665c75c32462879
SHA512 1c965b4bbc88445a1135b17f59eeed5f2f20a921798f320c6fad65c6c6b8fd3ff48b55edc67a07227a2c4499e5980f27c11a218ea30f65c12718a34c6c36a8e7
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/png/6.png

SHA256 56ffa34592fdfd950beb96be8cce6f9e8bb7b130c3e1f95ef46b4631ce94c3f1
MD5 eda7932954b19d366826f0ee2ec801fc
SHA1 0e185fddf94748be0be8b49b9a5aff5f6da1a09a
SHA512 ae76bacf48970bbdffac445e69f2ee99a4282207b4797d7a0572465bfcbbb8cd77fea2abb4519f0d2cec8e4754321ac595fce8dab8d42be9d00db27dc8d339e6
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/png/7.png

SHA256 bbe49182f693505331ef5fb8a62009b17a98cabc2fab6a7e3a4f159b16d6f72a
MD5 aa5a2fb2c9f7f72ded422dd75c63e21a
SHA1 e7f2e9974a8eb3ac1a8f2e0b140677a649296a85
SHA512 a998077b708d618fd93ce66a401b37b11d8fd0e6de6f3deb0d90704b3f33b1ed2c0e0832168a4399c46e7d0b5023849042355eca5e1acfd673aec424e2f4123f
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/png/8.png

SHA256 cfb6d7f1d3a3d4246084bac99a654ab4cafeb33646a8f85fad32a52dbf0b8233
MD5 18062b8aeca295f41ae302713f283111
SHA1 b3864bc69524cbb2ac02aa18b2aff5e4e4e3a987
SHA512 a2bbd76d26ae8a4ab2cb2ad3a3f94a4140115d474fb3320c325bdaf6b50fbaaefa18a207737f0396f204405f5b9a85712bc1eee77fae48f91bc92277500c77bd
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/png/9.png

SHA256 3504adc0b3d8c34b2444c206df641daf0aef1315949c604aa5b20ad5a830eac6
MD5 39825edcf52384bc10f9db99ee8b5768
SHA1 71c51a0c18eeb206e00b57f69330da9c2e72effb
SHA512 a4d6ddc74589ca812039d2a0982f52e52a409e2a617a31695b5297b4e57a752358b4e21e98109e108e1fdf41a25cdeb19291938b102b93657d43e0341927bf6f
MD5 SHA1 SHA512

NSIS installer

installer

images/weather/png/na.png

SHA256 9f970be9b1b2cb048a6e3844dd158dddc72f0a2126214713dc4dcedd072ee393
MD5 c29167c9cb6a255c8cd2678b9e71179f
SHA1 4583482cd1bed5d234ba481b406eda2f7c42e3d8
SHA512 df02ce7e9232d8e6fc1101ae131efa8e5d37512471cc6e0ee19cdcf44cb655248a8dbf28cc8cb838c424eb96503e2f2343ff984690e2aad760dccccbae763fbb
MD5 SHA1 SHA512

NSIS installer

installer

location.xsl

SHA256 d809e515ee38052cda19a28cecdfc17c17366181217c65f729c67aa7b01f1f7e
MD5 7384bb7f1f5735fa52b7ab35029a3ad4
SHA1 3c0c25cd35c5969b27a5d4456c520ffa9da66c24
SHA512 0a1aff6783d20ad5792a1022a8c04577c06f06e051570787378cf01009ab93068eadf25d789e88bb27082a6c31b35a6aeb499a10b860adb9c92eee776cee7930
MD5 SHA1 SHA512

NSIS installer

installer

magglass.ico

SHA256 4cc04e7964dc4d1e579b4d68f468b26274aa7f41614f97cc40f1cf333f006da4
MD5 1e66b8fe0382379668a8d337603abbbc
SHA1 05847b0f0895d6b357fdc6324a954766339e1b34
SHA512 6763313544c8b27e21cb57274fd73444cac63072f35122b2164479464bb26232618831b19ac42ffcb7f832da411290d0604b68548dffaf40749e70b33ffa3d63
MD5 SHA1 SHA512

NSIS installer

installer

manage_bookmarks.html

SHA256 13b1aaf99d28fdeebbc1fc66a24debc0c5adc1e8bbb5bc69fe66237495f3862a
MD5 45a9dfd90405624e36ee293c6d53ae3c
SHA1 a73811f2242b91f22e1d100f84d86094c3e4f2ed
SHA512 75c0ba4b1d422a9ce7b3f025d45953fefe0d038744c4ca091a6927e6a6df7fca792a4022ab388a9265bccdbad3c5f83cfc681eaa51432455d5450d8588ea8b3e
MD5 SHA1 SHA512

polyglot

NSIS installer

installer

marquee.html

SHA256 235995acdbb84f6c684df72578808ffd26b932a2a09e8dbec55863975e829c0a
MD5 efbae100b09dd2a417300d82f85c1d50
SHA1 7c11ce227e49da457a5d0ba721148eb9d561bc1e
SHA512 56a371f92ecb1a50813b95f2658e485622682aab598069c2ac1163b5779327b8175633a408203c1216bbc88c2cec30bb5a92a5bbc0370dfca36637e45f4d6a05
MD5 SHA1 SHA512

NSIS installer

installer

marquee_permissions.html

SHA256 00685f569675e1b11ba4a76d2c3fbdc7e9eedc6d64af0c5f2dec2728ec646c68
MD5 45e814c5bb941881b46c9ed11ba6bafc
SHA1 cc15200ac3bcf123a7c3e15e52e3fbb08cea6a98
SHA512 2938108fc3bec110fd566dd0fbc5f1e0cf3755074339e9dc94378e66592da81334469c3f904dfba06cc7976c33e538c01d3a3136feed29cabcb72e828f3f63d7
MD5 SHA1 SHA512

NSIS installer

installer

messaging.bmp

SHA256 4b36e9d209348e62c4f810b97e0a398e6c7cc999b8dcd6d54aa3814b44e583f8
MD5 9e0a495a6d58f4e5d005d19022961801
SHA1 c4c2903c5a0fc22a471b0034b78afe3d823f3e07
SHA512 15099d412c0ee8a6e8af0f389ea7569f921b579f8c02d9dc7340526b129182a5455be997518c0ffc50ea16e9d31a0944e245945391bdde6699e9425a0f40e927
MD5 SHA1 SHA512

NSIS installer

installer

minus.bmp

SHA256 ff43af585843e7745b22dc0a97fad5fe9bc373338479879e8ce0745ed181d95f
MD5 e1569b81e15fbbff8d309dc827f6b5e8
SHA1 da386fc83a6263bf5dd7f83b11fbcb013992f5e1
SHA512 3a86e9d34a90cdc49da47e90ebf0f4c185a3d098001b86b46c74611e2c342e49d6ba0515502462e9bd4e5c313a13551235032a001531937dea89a9422c9c2b31
MD5 SHA1 SHA512

NSIS installer

installer

msgbox_bubble.tmpl

SHA256 914164d7e94c03fb234a55f7f92a1af99cc104ca552781ec79fcb902da1a3f66
MD5 36cf50b845e7f3cf134ed2e53e7d0794
SHA1 4d5615f7df13b4f744395e100e1383e20b21456d
SHA512 e95df14fc9422d4153a9ab46a64f2f3f00196b4568c63ac2bdd818b7b846994bc7e7f0038c6881eac9796fd6fe50c7b6402029dce1518d03992ac01e720396c1
SSDEEP 192:JKQ1dgD4ntNz16+vzJBsm2Wf1lgH+svYaJBkidmmfbCrbIYfZLfa9Tvlx:L1SefY+Am2Wff8WsmmfbCIYfZfa9Rx
MD5 SHA1 SHA512 SSDEEP

polyglot

NSIS installer

installer

msgbox_openmsg.tmpl

SHA256 b82af0cdc31a112dcfd93d29c698a33e2cecbf943e0c7f2b2cbc19268a02ec3d
MD5 54b3f1f532d47ec758749f6a0cb04360
SHA1 fdd22160b7bb0523428221f1288acbccbcf4a4a0
SHA512 44c5b1ffc94bd4cbeb36453df89e57bdfec8d164c6bf48372705eb839bd02c24b7a0358ca4dd814146271e254f9d68848224cab1081434e8f73687cf77cca5ee
MD5 SHA1 SHA512

NSIS installer

installer

msgboxplugin.dll

IMPHASH f5bf42725c49d4c113e19d01bba98d36
SHA256 9769a161dbeb9ae2a1f41e7931892ad0c8a1195a00e478952bebd930183f7a3d
MD5 ed8ec95e6b7425bc47135c96328dda56
SHA1 dc17a3b1d5edb14152dc56a0b045da4b03d2f382
SHA512 24c71d8f3e5b560f6f3203dd04529afab32ff07c869e99db4e90858f083a68eb091f02ed1bafed1b80dc2331e5bd94da152bf2514984eac6002715dd9bf29558
SSDEEP 6144:+k1iO86zfw5264Xdk0WvgysOChFqORzvrNElhYnBYr:/1l8EXdk1IysOChFPvrNElSO
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

5

Entry point

125867

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

d:\Work\.Current\Freecause\Trunk\SVN.Trunk\package\msgboxplugin.pdb

kernel32

GlobalLock GlobalAlloc MulDiv lstrcmpW FreeLibrary GetModuleHandleW lstrcmpiW LoadLibraryExW WaitForSingleObject CreateEventW CloseHandle CreateThread SetThreadPriority ResumeThread SetEvent CreateDirectoryW CopyFileW TerminateThread ResetEvent GetCurrentProcessId GetFullPathNameW GetFileSize FindFirstFileW WriteFile Sleep ReadFile CreateFileW FindClose FindNextFileW GetFileAttributesExW lstrcpyW lstrlenA SetEnvironmentVariableA CompareStringW CompareStringA FlushFileBuffers CreateFileA WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle GlobalUnlock GetStringTypeW GetStringTypeA LCMapStringA GetConsoleMode GetConsoleCP GetProcAddress InitializeCriticalSectionAndSpinCount GetLocaleInfoA GetTimeZoneInformation GetModuleHandleA GetTickCount QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA GetStartupInfoA GetFileType SetHandleCount LCMapStringW IsValidCodePage GetOEMCP GetACP GetCPInfo HeapCreate ExitProcess GetModuleFileNameA GetStdHandle TlsFree TlsSetValue TlsAlloc TlsGetValue RtlUnwind GetCommandLineA ExitThread GetSystemTimeAsFileTime IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter FlushInstructionCache GetCurrentProcess SetLastError RaiseException GetCurrentThreadId GetLastError InterlockedIncrement DeleteCriticalSection InitializeCriticalSection LoadLibraryW GetModuleFileNameW WideCharToMultiByte lstrlenW MultiByteToWideChar FindResourceExW EnterCriticalSection FindResourceW LoadResource LockResource TerminateProcess GlobalAddAtomA VirtualAlloc VirtualFree IsProcessorFeaturePresent LoadLibraryA InterlockedCompareExchange GetProcessHeap HeapSize HeapReAlloc HeapFree HeapAlloc HeapDestroy SizeofResource InterlockedDecrement LeaveCriticalSection SetFilePointer VirtualQuery

user32

EndPaint FindWindowW UnregisterClassA KillTimer PostMessageW SetTimer RegisterClassExW LoadCursorW DefWindowProcW SetWindowLongW GetWindowLongW DestroyAcceleratorTable GetDesktopWindow ReleaseDC GetDC InvalidateRect CallWindowProcW InvalidateRgn GetClientRect FillRect ReleaseCapture SetCapture MoveWindow ScreenToClient GetParent DispatchMessageW TranslateMessage GetMessageW PeekMessageW PostThreadMessageW SetForegroundWindow ShowWindow ClientToScreen MonitorFromWindow GetMonitorInfoW GetWindowRect MapWindowPoints RegisterWindowMessageW GetWindowTextLengthW GetWindowTextW SetWindowTextW BeginPaint DestroyIcon IsChild GetFocus SetFocus GetWindow GetDlgItem SendMessageW IsWindow GetClassNameW GetSysColor CharNextW SetWindowPos RedrawWindow GetClassInfoExW CreateWindowExW DestroyWindow CreateAcceleratorTableW

gdi32

CreateCompatibleDC CreateCompatibleBitmap SelectObject DeleteObject BitBlt DeleteDC GetStockObject GetObjectW GetDeviceCaps CreateSolidBrush

advapi32

RegSetValueExW RegCloseKey RegQueryInfoKeyW RegEnumKeyExW RegDeleteValueW RegCreateKeyExW RegOpenKeyExW RegDeleteKeyW

ole32

CoTaskMemRealloc CoTaskMemFree OleInitialize CLSIDFromString CLSIDFromProgID CoGetClassObject CoCreateInstance CreateStreamOnHGlobal OleLockRunning StringFromGUID2 CoTaskMemAlloc OleUninitialize CoInitialize CoUninitialize

oleaut32

VariantClear SysAllocString VariantChangeType OleCreateFontIndirect SysStringLen LoadRegTypeLi LoadTypeLi SysAllocStringLen DispCallFunc VarUI4FromStr VarBstrCmp VariantInit SysFreeString VariantCopy

shlwapi

PathAppendW PathRemoveFileSpecW

comctl32

ImageList_GetIcon ImageList_Destroy ImageList_LoadImageW

wininet

InternetCrackUrlA InternetOpenA InternetConnectA HttpOpenRequestA InternetQueryOptionW InternetSetOptionW HttpAddRequestHeadersA HttpSendRequestW HttpQueryInfoA InternetReadFile InternetCloseHandle

offline.html

SHA256 462bd7d4bfe2f6806e671d8b89adb8096d926851ed1106cf9d5ba095200ed76e
MD5 dae87278d42fb9a1375d02a14e0e77d3
SHA1 25fae5add600772bcf55b63021a974b56c92d88d
SHA512 a3b4c494b4f41edbb2503d8fb274d176b2d132036d30cf1366a06af28a5ef40fd14f0f03a575505e3d9020a4b9ca0c9c3d2f747b6169f998cb347b1784d96927
MD5 SHA1 SHA512

polyglot

NSIS installer

installer

plus.bmp

SHA256 39d1106f119c160d6c95dc150c1a9f34e26ac73bf6f733fddd9507e3070e42f4
MD5 8e0531de27a03d285b272c0f99b1ca17
SHA1 591e6a6899875404ac7edbcf576c89ffcf17afb9
SHA512 e67888a09c08631401d78ffe6e8d4e9826de5986b1d7103a0265bc862306ae2b35c8c9e8058cdac74f638f8c5772a2fcc398128bf1f7a4449637df6c65b9d0d7
MD5 SHA1 SHA512

NSIS installer

installer

podcast.bmp

SHA256 6fb1556392a5f7ca0571415ae682af61b8e4c9f98804f6d50134de8bb51f5c39
MD5 5b144020de3a45e0423716a3d67abee5
SHA1 7ed0ff6439a4331dc7fa7fe7a2f130914db4d3f7
SHA512 5cb900e385960a57aac7bfe01e356fae1eaf52d80982abbbc3654d2767003e4874c33f65d0c186f8178e624feb2a844d3a312b5de1c3415227bc61cb86a8fa5c
MD5 SHA1 SHA512

NSIS installer

installer

podcast.xsl

SHA256 a2dfff476dcaf76e91cac532f41d63765e04a43d5a04aacd466c4224a33f1dcf
MD5 00c59f6cccfdb9afd6ff7c777e2fb391
SHA1 e2844e23682be4d6c5079dbde37b0fd0447d7e67
SHA512 2684c628f61007e7583e372f45ddfccabc8562cd7ad479bd796bd06945cea9cc8a78f2b1c51e223001a5746e0c593d31faebf5bdcac5155f217d3b8fe564e61b
MD5 SHA1 SHA512

NSIS installer

installer

radio.bmp

SHA256 041ad9c5af82cedb9ee18467d1202d2c2754c60cb1f5c8d59d22f796e44673af
MD5 5c6ef47cfb3462f0c44a8183f9333ba4
SHA1 7b1dc741e3df393cf7ec4d573e4d747f458dda93
SHA512 ee239269a3808d3015b82f41ec15be8693d1959ba38b08b3fac4ce11027a9ba2232921eedd004d1ae99a0933df3cf4fbee24437968f8d1b952d967a034a0c785
MD5 SHA1 SHA512

NSIS installer

installer

resize.bmp

SHA256 7d5e64a30a8d605bf235ea7bd607d5501fcfc4844fb1c2f78de6f5f6cdb09d4c
MD5 b3a1c14d0b92ffaa8bb428545a287f57
SHA1 dddb9c4df3a53fdce08e5b473809da74509b5e3f
SHA512 7f81d4997766cb87c7568cb7d683a7967d2af78ee3ac8c86766e8ee002847de66b6a3a06476df8edad4830c88eb3342b6b313adb32dda9fd3a2a4223b91e475e
MD5 SHA1 SHA512

NSIS installer

installer

rssfeed.bmp

SHA256 534f364b97d1ff3e58fba07a5a1a36a12071dd8657c3f0651fb3e1d4395bc11f
MD5 85741a60285cc723071679b9744b72d4
SHA1 d0a688a24a9c2b08522d15362477f3192904df3d
SHA512 b25104d17ce8aa3e0082f1bc1b1920c53b4bf0e7c6d83c009c82f729922e5eadb701b3a8c464d0bba226d92d2e17e47a5dded7befba274051369a8ad229c1244
MD5 SHA1 SHA512

NSIS installer

installer

search.xsl

SHA256 9600319bc1ce743c417e0bf745efec880c9bb8b6dc169a2e4c86e0720c4ce5e5
MD5 355b724fdae4672580641d411c9a5a41
SHA1 768e9ffafab6188180276c91c2a0f88448b42677
SHA512 cb66d8d19c2ae4880d266dadddf5cd03abeb119f4c49aa0ab220191aee38089a7a8b891d9d0f6da4a25a67e44f7575a667b468ff86f44a4aeb5b3a3ce025213d
MD5 SHA1 SHA512

NSIS installer

installer

skins/radio/gray03/Equalizer1.bmp

SHA256 991aee0fce82975323ac11d3efe05e9a78d717567ffb0772738853120d8ff86a
MD5 7b395d76bd285b3e3440689e6d37cfb9
SHA1 28ea872d901d7f40cca41d1dc0a090a6f9ed464f
SHA512 0540c93dd8ad76cffaa4c84760f7e8bf6d03795121585ab79f31af130f32464ad3dab152817d6e051ef8f23b7d524c735c9be5faf0b9f04a351f240cf0fdb08f
MD5 SHA1 SHA512

NSIS installer

installer

skins/radio/gray03/Equalizer2.bmp

SHA256 72523b133089bdbe189c26d09cbde5fcb6a361c514875062bf6578b934f82fcd
MD5 791eb99f191cc3f1dd02a6bfc098b02e
SHA1 e3f2ccf641de97431f0d2fe91abdac3a0662b93a
SHA512 4dd2437d274740bce9a6e94b820fb7efd24734ea7ef6f393041fc5097bf113c9b26a7d6b3dede603f5c43d4125202dc5401825a7f276189701ad70a469c22b33
MD5 SHA1 SHA512

NSIS installer

installer

skins/radio/gray03/Equalizer3.bmp

SHA256 a68203f306a95aa8af8ec15904c051e8255befffd109d68ec9e5dcab01310b7d
MD5 1f745084c785a1815c310562f258c11c
SHA1 ff5c0afe36c7e42982d358830805f8c4f1ef8fd2
SHA512 54681a9abd127c1b18e12207900fc3f331a77b8fc54faa51c681a047f9dae74c59dace7f3adc6909c6b5e547fc16d95d83641bca833b8b88b08b6be50907c1c4
MD5 SHA1 SHA512

NSIS installer

installer

skins/radio/gray03/Equalizer4.bmp

SHA256 4a5079a0f6b8aeb07a0ec320badb22534198c5436e9c841e707b16aab755f71f
MD5 23c8be10e222f88a4427ac168e99a29a
SHA1 6e54488b18cd685918af89e2d16761efe63cad6e
SHA512 def4f118a4611d04b70845f5c46c6111f8ea8a4c76a9e33d3308a9bd37c491cb6bdaeb6d882663b194009dc7116a678d8ce778b7b7dc53c560b06a3458e80133
MD5 SHA1 SHA512

NSIS installer

installer

skins/radio/gray03/Equalizer5.bmp

SHA256 d639e99b49d9a1ddeac3d426f0f58ec5c8d6eced5251b206d3d41f0ab2a2a7c3
MD5 c23a512962f5a67a5ff8a358322b7f2a
SHA1 bf0cee67fc212eebea4ac394a1ca36fd40e2f431
SHA512 1c170e96ba98d3cdba8854a6614cadfb843c1bccab2a1c927d39f7d6433317bab67b731f16b47bb2233e13f1f212c5fdf9b0f17d4c46bc83e6ac1a68a3745b5b
MD5 SHA1 SHA512

NSIS installer

installer

skins/radio/gray03/Equalizer6.bmp

SHA256 fb4f93c414651aaeec956679c7f2b779fba37770a2418fa1bf0b03627ec1a412
MD5 14d9ca358e81dfbfad81375c89756732
SHA1 b532717fab873584b96386c1df8746e709ad9048
SHA512 6470ca1eda2a151ff14ecea5d983807752f2f0923e1bf70ee1ec2af2ecb3dc862f11a364bf655f930e5c6f5d5dfa6ccb6f77c56e30d1fdacec3fe7d1e38e9708
MD5 SHA1 SHA512

NSIS installer

installer

skins/radio/gray03/btn_dropdwn_down.bmp

SHA256 25ca83454aaa96dbfb35dc122b0f499241ef8f77179db33baca2269b87c14f85
MD5 c728c9d4a122c8dca866887e1da8670e
SHA1 f16d281d71d218be5a0dd46c7b6f22b333be9dab
SHA512 c9eb94283cf0b3b2f2eb2c0aa655329aea1fcdc736e8ece7d50116e2d21f46da51dca4494ec70579f72a78cc184f8ba0039a62b7d29610decf0d0c108f69060e
MD5 SHA1 SHA512

NSIS installer

installer

skins/radio/gray03/btn_dropdwn_over.bmp

SHA256 bd76a3d2f97d5873fe6c79c3d46ad12add21367a51568fec8d25241453e5238b
MD5 2301895e4d4f8e247043bd4b5dd133c7
SHA1 a46b3f653417b46e7491100a22096e728be1be2a
SHA512 535fe4e095dae0652732287b7d7c7169bf62f044d2287c96518b80ecbbb56bbebf8c3b19c17df652e3f39e9ddc39dd03550dd22bd73339113f86c37b54caf81c
MD5 SHA1 SHA512

NSIS installer

installer

skins/radio/gray03/btn_dropdwn_up.bmp

SHA256 25ca83454aaa96dbfb35dc122b0f499241ef8f77179db33baca2269b87c14f85
MD5 c728c9d4a122c8dca866887e1da8670e
SHA1 f16d281d71d218be5a0dd46c7b6f22b333be9dab
SHA512 c9eb94283cf0b3b2f2eb2c0aa655329aea1fcdc736e8ece7d50116e2d21f46da51dca4494ec70579f72a78cc184f8ba0039a62b7d29610decf0d0c108f69060e
MD5 SHA1 SHA512

NSIS installer

installer

skins/radio/gray03/btn_max_down.bmp

SHA256 878ef1ac12e19d690c2db9f37339c2aec5e5b4c028056074ca8e9bb562149a69
MD5 cd655e61d0b2a9e14f51dfde9b868ef4
SHA1 6f3b2da5799d9192582ba16676f1381139c3155f
SHA512 c79493146cc79cd3b6ea105676e588907e39f4d6464223f41f1bc7de001aa7450bab1a7feedd9f8d8b5581ab6c5fe9c66078e4fb009e55d50822a54c5f424021
MD5 SHA1 SHA512

NSIS installer

installer

skins/radio/gray03/btn_max_over.bmp

SHA256 d0edcbda0a3a7d53eae915c5c67525bfb6721ac9f3db58adfa73d31ff7c854ae
MD5 4a20aecb833d5acf11ee9d055169a41b
SHA1 2afaaf7af71154fd165a08f14c126eb9d9d132d3
SHA512 ebfe68964859ed772d50c81df18dd7d50dead5efca061785c4ec376bc867e5f888021ab5a4d34c22488378d9f54c447a462bd7435c5112a45641df031516d1b5
MD5 SHA1 SHA512

NSIS installer

installer

skins/radio/gray03/btn_max_up.bmp

SHA256 878ef1ac12e19d690c2db9f37339c2aec5e5b4c028056074ca8e9bb562149a69
MD5 cd655e61d0b2a9e14f51dfde9b868ef4
SHA1 6f3b2da5799d9192582ba16676f1381139c3155f
SHA512 c79493146cc79cd3b6ea105676e588907e39f4d6464223f41f1bc7de001aa7450bab1a7feedd9f8d8b5581ab6c5fe9c66078e4fb009e55d50822a54c5f424021
MD5 SHA1 SHA512

NSIS installer

installer

skins/radio/gray03/btn_min_down.bmp

SHA256 e7349701125e97bc4aa5a735ddd52d2322cdf4a08b020643ff3be17bd51050a6
MD5 ef308032361f90ba10614c3712b4bde5
SHA1 8d8817ed7defd34614419c9be5869688c4df8347
SHA512 ceef8ae33147ea7697ec74f3bc0640019b8fb2dc0fc0e081aa7eb0476ee46f0a8cab108a11728086ffa1282b93b4ae512fa2333456ed616a158fba424fd11e0b
MD5 SHA1 SHA512

NSIS installer

installer

skins/radio/gray03/btn_min_over.bmp

SHA256 e8ea759b38490830d1d8de6081b0397c614378700617a9ceff2bdeb149f41645
MD5 8b7bbb21f563334f51108c3faa88e07a
SHA1 7a7bb10fb15afc47abd026f8a98d84cd90268dd8
SHA512 a53298de35c7564a6fde1363167700a8c1f96da6b47b824957690d9ca1f8c5269adfca87f759f7747a46a862294560c9ffad309b370eab87face7c8c9eb07100
MD5 SHA1 SHA512

NSIS installer

installer

skins/radio/gray03/btn_min_up.bmp

SHA256 e7349701125e97bc4aa5a735ddd52d2322cdf4a08b020643ff3be17bd51050a6
MD5 ef308032361f90ba10614c3712b4bde5
SHA1 8d8817ed7defd34614419c9be5869688c4df8347
SHA512 ceef8ae33147ea7697ec74f3bc0640019b8fb2dc0fc0e081aa7eb0476ee46f0a8cab108a11728086ffa1282b93b4ae512fa2333456ed616a158fba424fd11e0b
MD5 SHA1 SHA512

NSIS installer

installer

skins/radio/gray03/btn_pause_down.bmp

SHA256 90edfb090297da45a7bc7bb04f09835f76b43558c27c875c3940b33327adc6c7
MD5 5b8b260d89e9e7384fb6d1403c8a214c
SHA1 d200a4b4f5e2114dd2d465dabcce30712008374c
SHA512 162db5f4d04e0cd34e68de545368831b42982b613b48dc1f2cdfd57cdbaed88d72800be501cb74c3fe00d6ea3b2587c522cf27c0400dc36f702e38666a472bdc
MD5 SHA1 SHA512

NSIS installer

installer

skins/radio/gray03/btn_pause_over.bmp

SHA256 6a39e5b58daf19f9e7b3188c2085c02f9085f9e3d09cd3de37e088a0265ac352
MD5 10375529ddbf1fec66e18c36c5cdbb30
SHA1 301171de53609f8db89735f34d5864e4a6bce67a
SHA512 9bda6f25223e58aa3c2ee0624e89957015549a72842a10d039e98f795432a83e3b69675ef1594cfc0a68fad0e81d078c6747dde342d70e6f9e93ccb60f9361d0
MD5 SHA1 SHA512

NSIS installer

installer

skins/radio/gray03/btn_pause_up.bmp

SHA256 90edfb090297da45a7bc7bb04f09835f76b43558c27c875c3940b33327adc6c7
MD5 5b8b260d89e9e7384fb6d1403c8a214c
SHA1 d200a4b4f5e2114dd2d465dabcce30712008374c
SHA512 162db5f4d04e0cd34e68de545368831b42982b613b48dc1f2cdfd57cdbaed88d72800be501cb74c3fe00d6ea3b2587c522cf27c0400dc36f702e38666a472bdc
MD5 SHA1 SHA512

NSIS installer

installer

skins/radio/gray03/btn_play_down.bmp

SHA256 558ee8abc8453154e0d6b884ee866128c55cead92125ad5897a1828396a1e40d
MD5 003a7df2c012c1c939329c4e84cd4aad
SHA1 ea2a48fb4af142324d4c49ec7730095e5599cb44
SHA512 4a5c6df57377359e7f1472c32c76a775adc67afcfa746d9f45e906122f116259ce084f71a8e6abc07ac9fe12be02bd1ab52e60b984cb1e4d98ab48a09f715ebe
MD5 SHA1 SHA512

NSIS installer

installer

skins/radio/gray03/btn_play_over.bmp

SHA256 383c30cc0b5c3ec49a20a45ec43f5b0146ece707d226a7d9cb0da48c0bb84f6c
MD5 629345c98b8f796866b98b355ab0b9ee
SHA1 446b377d89b112b2b7333fa422c00f0f166fbfb4
SHA512 324e982449a0a007fc1e2c2e30d766edbcf2cd89635ac92eacb9f822613786ea4ca555a7544cae20687046b57c490497c1addf6fc8b7b49292b5835c57766f52
MD5 SHA1 SHA512

NSIS installer

installer

skins/radio/gray03/btn_play_up.bmp

SHA256 558ee8abc8453154e0d6b884ee866128c55cead92125ad5897a1828396a1e40d
MD5 003a7df2c012c1c939329c4e84cd4aad
SHA1 ea2a48fb4af142324d4c49ec7730095e5599cb44
SHA512 4a5c6df57377359e7f1472c32c76a775adc67afcfa746d9f45e906122f116259ce084f71a8e6abc07ac9fe12be02bd1ab52e60b984cb1e4d98ab48a09f715ebe
MD5 SHA1 SHA512

NSIS installer

installer

skins/radio/gray03/btn_playcntrl_over.bmp

SHA256 e5df7fb43aceeeadddb73a94e6194daf85b5f340661fe20fdc68dbfd7450a21f
MD5 603502df13fdb5998cfd9478e571b37c
SHA1 7b2e7edb303517a912f8c051b40dd66860d9f590
SHA512 efd6ee835478c13397b6a311477aadffef16f9690aa34214dba940373b21ef83266f988c87f5003ff6aca9bd0ee84410460cd27a16121c25c236682828c2036c
MD5 SHA1 SHA512

NSIS installer

installer

skins/radio/gray03/btn_playcntrl_up.bmp

SHA256 dc5c4ab323ed88e841e8eaa19c562d7e0b70b04d80a418e4db5faf294463543b
MD5 b0b12b46fcb94d1e4d8b7bd84e4a2906
SHA1 6217adac27f6f6c08f038ee5ad3feced1ffd8dc6
SHA512 930812debd9bdc00c79af078f96aba0d7a790af0e95dcb3d5619c592a8e35653a19d3ae404557e5da3c6abeee6f308d430ce2da2cd07ebaf6888a2467878b7b6
MD5 SHA1 SHA512

NSIS installer

installer

skins/radio/gray03/btn_stop_down.bmp

SHA256 263fac94792094d98fc459101aa87b7b18d55a0cc41c868d93b8a00240dcd111
MD5 94068936e28eb6760413ca7d1ec3eb2e
SHA1 f3323085d485026f287ab878e78c3b28967a7006
SHA512 d643a5cf1b80687efb70c9e5b925e10946b72dc181c418661ebec606222a892ec7e10f8d71318db482051ee1935e4ed000dc509d9575cbb1d764b66e188ccdb0
MD5 SHA1 SHA512

NSIS installer

installer

skins/radio/gray03/btn_stop_over.bmp

SHA256 e075660061b5616e479e49d6e3ea9d79172e0967159b54b6eb788b24cc034f87
MD5 9c3c4f2a5bce638cb55c34d9e6b381be
SHA1 7493109fcfb8fa43308704bcb82fd6cb31586369
SHA512 5247e3b2b7f0f2a7763d54a24af67e8faf6265992cdd1333e15d426fc6c1b2d0c59d8c99047c489c857e9915a5627cdd509699419a283495e5625a423841c608
MD5 SHA1 SHA512

NSIS installer

installer

skins/radio/gray03/btn_stop_up.bmp

SHA256 263fac94792094d98fc459101aa87b7b18d55a0cc41c868d93b8a00240dcd111
MD5 94068936e28eb6760413ca7d1ec3eb2e
SHA1 f3323085d485026f287ab878e78c3b28967a7006
SHA512 d643a5cf1b80687efb70c9e5b925e10946b72dc181c418661ebec606222a892ec7e10f8d71318db482051ee1935e4ed000dc509d9575cbb1d764b66e188ccdb0
MD5 SHA1 SHA512

NSIS installer

installer

skins/radio/gray03/btn_volcntrl_over.bmp

SHA256 5ec7a04ddf3bec9be5b3b1bdbe76542e5096ea3db4d77d264d5759c64d19eb60
MD5 a2675b539080b23d1408668459388361
SHA1 a8e76ad44aa09057506cc7dac2726f71bfe8ff34
SHA512 c7b0aa3f892533aa2f64f02346d8905f64529729130079401731ac22e401a67e8e0332bdce10abedb84ed2bdecd922cf9bcdf600f2b838c6733a0879e620b3da
MD5 SHA1 SHA512

NSIS installer

installer

skins/radio/gray03/btn_volcntrl_up.bmp

SHA256 5147c791d009d6c2d469b0079bbc181c1cb32a997d0ce07907c5b09d18a185e7
MD5 790780c10830365a2637227e3627fd37
SHA1 d02b695142d41687f0fd8ea636d8ca2a3ffa95be
SHA512 211899da1acad94038113869c5e6e9b7006e13e95653a429e330f53881142075fbb84e656be4a9c93c0cb3dd5614526d164036e41b872ee05b3162c319f6c4d9
MD5 SHA1 SHA512

NSIS installer

installer

skins/radio/gray03/playcntrl_bg.bmp

SHA256 87bfe027a7e2b3d89068ada865b90e432bf84af3de6b6edd4bed75f45b355aa0
MD5 3c2f113f5d6d42704d4b2c38808f2c0f
SHA1 5391f0db0954a2c0b9a085b6d4c3f61f96953a3c
SHA512 968718c48a6a130e37fd1c48fa3b28e04792ab7c136c7577f3121444868f34a17c569a0bf6446cf1c48bf6e5d5655def2b9a0f56ac241ffc274566ded2052f96
MD5 SHA1 SHA512

NSIS installer

installer

skins/radio/gray03/radio.bmp

SHA256 9ffd6cefd072cef2fab728ea7f71ddbc7336262814b2915e9726380e03eacd70
MD5 5376a892288b3af2efec99cca10024de
SHA1 4c4833826eeb630826663d070e6b5ea6746d0f9d
SHA512 805ae9a8dc96dc62d7b36fa1962754ee0897d3d5b47cc3030b2d85c58d2eb25c52d84bb15c2f99d600c29e61733ed8d3664df65325b9a8089072ebfac3fb9d15
SSDEEP 96:mvbA/tmjbe8aYQAk9c4BVrMB+Zb007Ws5D5aNLtDPq+vlXMHl7XOd:mvbRe1YQAk9e+ZT5D58LtDqcBO7X8
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skins/radio/gray03/radio_mask.bmp

SHA256 1fded38f7a5738d586adcc7ccf349a36edaf469756f8b913da2d54394a5a2298
MD5 77c8d539fd743dd033c11e62525a068b
SHA1 60ee6c3fda113bf38362338e442efee8055e3e79
SHA512 0eebcf74b8148c39864f4025dcdddab7f46c886a992955c075f95483ce2ad14ff428f292873c482f4988ec62bf03c66ede4743e17321273593fe6af7458a3797
MD5 SHA1 SHA512

NSIS installer

installer

skins/radio/gray03/radio_minimalized.bmp

SHA256 b46d4aadd84b07f28698d7569f07e82f284ead09366e9ecb98d493bb52305630
MD5 a16f6c516038a380c182b7769f022a52
SHA1 f110a5a943a1350d28005c51625716f7058efec4
SHA512 c22479ba04b85c580d5b459516e5c4038a48b6d72cf004e624537be7da4c0aef1a3fcbafbca791399ee571011c4a160e9ded161d655a3b2fa969ce42a586aeea
SSDEEP 96:rvJirKZvV/KbavjqVt+SpnjxrtSPmmAkIn5dWGwv/NIDdl/4DA:rvJdRV/Kbmqf7pSPZAkiWRv1IDd6DA
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skins/radio/gray03/radio_minimalized_mask.bmp

SHA256 6fc45e0d8bcaed098e0cd9e1db9ca50c6163e78e9a42a0e4a4f97a22c99f90f5
MD5 888d46a0fb7effc35e41bf9a81c00c70
SHA1 44a563bfe5aec60589a07d8310d0d93458dbc7f8
SHA512 1109f3f7cfe9a3cdb6966b712669716cc7a53dc79816e0721883ab5e78ca9dfe9beaaa0fb4aedeecb5cf62a7e6eda06f3f3cd75f6df019599952c2c210751309
MD5 SHA1 SHA512

NSIS installer

installer

skins/radio/gray03/station.bmp

SHA256 dfa72ba5901520026bcbab4d5847ca91c02e2490543aef0afa0d3097242c1478
MD5 ab3888d02a6ae093cb5aa63e77dbd71a
SHA1 7eff731e6227abe4cfb2c8a712b9af1dbfb7b090
SHA512 dfdd6a0a16f4184df0e8bc60187204a6d84d4c449f68fa6ae8caa97d0988a3745b91dd906619cd2d11bd566c6ed810fdba3950fa41d6b7a0d624d43bdd755c16
MD5 SHA1 SHA512

NSIS installer

installer

skins/radio/gray03/vol_01.bmp

SHA256 11931a3ebe9211c403c5481024a61823aaf8b67ab04b9ea9b041018506b1d983
MD5 6adc3f2c7873fddd281de26ceaa7ddbc
SHA1 94273ef73f7f51e9c563562645ef10622d83320d
SHA512 b4f1b90f862f3314c2b9d052159ec8eba2ad4fcb27ddc14a10e72f9610388b4b4bcb70d096e68cd4eb0c7e14267e9d7b94fc4e30eccf7f355c4490018ce4e498
MD5 SHA1 SHA512

NSIS installer

installer

skins/radio/gray03/vol_02.bmp

SHA256 01a165bd68cb6e10b22c39f50e730ab2315e1a821809c1e6508b5560417fef5b
MD5 c01b6c765d5c618308ba725183e6394b
SHA1 06b1dacc3a71dec14a9c38c1dcfa53cf4072c12d
SHA512 f97b45b89065e1f1259fc814e942a0dd973618461199211aefc0be3f53f4662154d22c074ef177d18041e4260f7b57d925349e76e7f1009abfb3d1c5741009cf
MD5 SHA1 SHA512

NSIS installer

installer

skins/radio/gray03/vol_03.bmp

SHA256 de829448f94cdcd62d06ff45ccfc34736f82c4658cefeec7beae5c782d9eb047
MD5 295f2d729f96a0cec1e8b43919df4f86
SHA1 abbca20a2776eaa03b40be702ff9540d48a6b561
SHA512 23665bdc20fcb0fa908c12f2d82eb4f749b55346ec44c39568cf8b2e776bcd9df76aca6a206e93842c23897b854f86d6bc69e0aecac10870469d1354506880fd
MD5 SHA1 SHA512

NSIS installer

installer

skins/radio/gray03/volslide_bg.bmp

SHA256 547394996cd189d59e5aa53a48ca11eca3a5a01f61230abae2d443b2323750e5
MD5 c6fe914bad7b7fafa490e35408f84dd6
SHA1 ef47057010b1978d821536803a0629b254e8fc85
SHA512 a9961e40b2cecac6bd295e18c0445cb411fb15acd4cbd9c2574c48cab073277c0e8219601743ea7a2798fb02b645fe7af3c5914378793851e6946cd8e0232aeb
MD5 SHA1 SHA512

NSIS installer

installer

skins/radio/gray03/volslide_track.bmp

SHA256 3daae758650de03ea14c5f0158b9ef84f6524684fe2699781095caaef5c0074e
MD5 672230d56b903d80e2158a533d5a3d9c
SHA1 39c93f7306af52586f4487bd3361bd0ca50ddc0b
SHA512 0d3b0b9df49bfc7625d407ed764c49c7eb15b52a0cd1c718b1f9663f479165fc75345f27756d986a461c725042b771ba2eb39d0ce8f5319cec0f901756a83305
MD5 SHA1 SHA512

NSIS installer

installer

star_on.gif

SHA256 e083cfb2427ea3b4d8f41e70e3017a099975843b84a2553acd74cc089ed9b5cf
MD5 8832be053f1bc88af74eb5e08fdb53e8
SHA1 265c457ca9d14e42cd6015deac9653bd18c33b27
SHA512 b689a1a3871c90e5dd8f13282672bca55361964f4bf61ac64aee3c71242b04e06671e43603481a54202edafa88018876a5ecd4c957ef1730c8045e6b4f52d742
MD5 SHA1 SHA512

NSIS installer

installer

update_progress.html

SHA256 c2dcd9f116807174a2503f3c417c6f9b4b96127561f15793ee61026361b38468
MD5 a2213739c4d83567404004bbb1c6a7c7
SHA1 cdc333d2f941d56e4b0244a8bc40248785c432ed
SHA512 02eca063f3f76838bd6975a35d45cecb0580f23446e1479e8253b4a0348ac0928dcf50399ce82d27cd73a4ce7408c79db1f8f04610375cc39dbf46efcf9fd7fe
MD5 SHA1 SHA512

polyglot

NSIS installer

installer

version.txt

SHA256 c03acc17f93d8740ba7845a9817198e4e2bb5f6d25ec86b848323817ea91730b
MD5 ac05af9babd47321defa0ada511eb614
SHA1 c4779f5ca44aa81694723fa5afa80d1a3db67951
SHA512 d1d8023b48a3dd04337228ab36a0de0e011fb3c78728e03880cbb63de16116e6d4edad3f03e27db23c1a33a0d61e459311a6cdf1c7c462269145820eda1bbe52
MD5 SHA1 SHA512

NSIS installer

installer

version.xsl

SHA256 32a9ab3313b0e606421047a65de1b1a02fe3d5a1db6fd4dbf73e29137ab3cacd
MD5 710bc89908f4df3f2e2db2b75cd2ed15
SHA1 c4ba736cc44a2be751a693d7ecb9a339cb44338d
SHA512 f828fece4c1742ffccffaa7089338eadc6828ad05202b33fc6f527d376e025b2955cf9bf2fcbbfacb193eb0823ee13b1094ab2bb70b9cfe3eecc4af024505eae
MD5 SHA1 SHA512

NSIS installer

installer

weather_bubble.tmpl

SHA256 22e16b5fe9438823f1228d990ed80423699dd8ae68b28a44cf100c34d05045e2
MD5 a2bd63f18ad819a2e47cf83ad8e3bf56
SHA1 0fafa7de5896e08802c978cad447c0c68e0c5e81
SHA512 54078e337fb15177ed7ff8a5f7ff6ced85e7b09fd4263b7fda2b2a3d84562d29f000dd5733847f6691a8cb9e82317c28a8ce927ebbfdbcae1cdae4f3d669b6ca
SSDEEP 96:4+fP5euDDqaQ7SNbV2L+e4YdRUiqCHFXR+RqXYqR+RGXYfWR+RiXYQR+RWXYfC+1:4+fguiJ7t+39iqCjuqXYquGXYfWuiXY7
MD5 SHA1 SHA512 SSDEEP

polyglot

NSIS installer

installer

weatherplugin.dll

IMPHASH 36574711ddac880ec666c66830955202
SHA256 17bf8b2f45a953e26496df9f695511680ff3eb487080feb92765560a0ad3891d
MD5 011152152c07b71f2357bba7bc00acbd
SHA1 1a0446b117da6c0cd36005a0f78afdce9bc932e4
SHA512 b56c34ce4b04a9f9f1e5bf6cf37cc3c220cc2d8d7c52249e1fdaf6aafad801431e40453daa7fd6ad43cecfc02f477d670e4e82e5ea2a1c0b40045821f420953e
SSDEEP 6144:91Ydq8E6f/jw4syoSviJR+0Cln/MVQIjP3De5:91Ydq8V/U4SSviJRZC5/MV9jA
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

5

Entry point

111075

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

d:\Work\.Current\Freecause\Trunk\SVN.Trunk\package\weatherplugin.pdb

kernel32

lstrlenA MultiByteToWideChar RaiseException GetProcAddress LoadLibraryW GetModuleFileNameW InitializeCriticalSection DeleteCriticalSection GetFullPathNameW GetFileSize FindFirstFileW InterlockedDecrement GetModuleHandleW WriteFile Sleep CopyFileW ReadFile CreateFileW SetLastError FindClose FindNextFileW GetFileAttributesExW CloseHandle lstrcpyW FreeLibrary lstrcmpiW GetLastError LoadLibraryExW InterlockedIncrement CreateEventW CreateThread SetThreadPriority ResumeThread SetEvent CreateDirectoryW ResetEvent SetEnvironmentVariableA CompareStringW CompareStringA FlushFileBuffers CreateFileA WriteConsoleW GetConsoleOutputCP WideCharToMultiByte SetStdHandle GetStringTypeW GetStringTypeA LCMapStringA GetConsoleMode GetConsoleCP SetFilePointer GetLocaleInfoA InitializeCriticalSectionAndSpinCount GetTimeZoneInformation GetModuleHandleA GetCurrentProcessId GetTickCount QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW TerminateThread WaitForSingleObject lstrlenW FindResourceExW FindResourceW LoadResource LockResource SizeofResource LeaveCriticalSection EnterCriticalSection GetEnvironmentStrings FreeEnvironmentStringsA GetStartupInfoA GetFileType SetHandleCount LCMapStringW IsValidCodePage GetOEMCP GetACP GetCPInfo GetModuleFileNameA GetStdHandle VirtualQuery HeapCreate ExitProcess TlsFree TlsSetValue TlsAlloc GetCurrentThreadId FlushInstructionCache WriteConsoleA GetCurrentProcess TlsGetValue GetSystemTimeAsFileTime RtlUnwind GetCommandLineA ExitThread IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess GlobalAddAtomA HeapSize HeapReAlloc HeapDestroy VirtualAlloc InterlockedCompareExchange HeapFree GetProcessHeap HeapAlloc LoadLibraryA IsProcessorFeaturePresent VirtualFree

user32

SetWindowTextW GetDlgItem CallWindowProcW DefWindowProcW GetWindowLongW SetWindowLongW UnregisterClassA FindWindowW CheckRadioButton SetDlgItemTextW GetWindowTextW EnumChildWindows SetTimer KillTimer GetParent SendMessageW CreateWindowExW LoadCursorW GetClassInfoExW RegisterClassExW IsWindow DispatchMessageW TranslateMessage GetMessageW PeekMessageW PostThreadMessageW CharNextW DestroyWindow PostMessageW ShowWindow IsDlgButtonChecked GetDlgItemTextW GetActiveWindow

advapi32

RegQueryInfoKeyW RegQueryValueExW RegSetValueExW RegOpenKeyExW RegEnumKeyExW RegCloseKey RegDeleteKeyW RegCreateKeyExW RegDeleteValueW

ole32

CoTaskMemAlloc CoUninitialize CoCreateInstance CoInitialize CoTaskMemRealloc CoTaskMemFree

oleaut32

VariantClear SysAllocString VarBstrCmp VarUI4FromStr VariantInit SysFreeString

shlwapi

PathAppendW PathRemoveFileSpecW PathIsDirectoryW PathFileExistsW UrlEscapeW

comctl32

PropertySheetW DestroyPropertySheetPage CreatePropertySheetPageW

wininet

InternetCrackUrlA InternetReadFile HttpQueryInfoA HttpSendRequestW HttpAddRequestHeadersA InternetSetOptionW InternetQueryOptionW HttpOpenRequestA InternetConnectA InternetCloseHandle InternetOpenA

$PLUGINSDIR/gplunger.dll

IMPHASH bb24ab9fddb167f7754f91e378a2b052
SHA256 3d76a243d61f3115828ba4fff522ba77787bf8ad3478f9310b5226da064f1a7a
MD5 bc5f89eaab81e7b404f5616536129cfa
SHA1 00e44b6e9327939b5db0931574dc5f1fccde7056
SHA512 1bcb59fbc4c155c2892deed891dc47034ad3c4e078cedbbbd9828811b97cff6dfe111640b4ff195976df7f321d957e3b779085b6e5425593a71d4a948d38de63
SSDEEP 1536:22Wi0TsEfM+ahZ9crL6zX6sl4iqhmZC4WvmYRREMmhXSFwLtjCxmbSJ5cXuUH6:2dCTiIX54mtYrETCF8tjC8q5UT6
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

5

Entry point

27729

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

GetLastError OpenProcess HeapAlloc GetProcessHeap HeapFree GetCurrentProcessId CreateProcessW GetNativeSystemInfo CreateFileW InitializeCriticalSection LocalFree GetLocaleInfoW CreateFileA LCMapStringW LCMapStringA GetStringTypeW GetStringTypeA IsValidLocale EnumSystemLocalesA CloseHandle GetTempFileNameA FreeLibrary WideCharToMultiByte lstrlenW GetProcAddress LoadLibraryA MultiByteToWideChar lstrlenA GlobalAlloc lstrcpynA lstrcpyA GlobalFree InterlockedDecrement FlushInstructionCache GetCurrentProcess GetCurrentThreadId GetLocaleInfoA GetUserDefaultLCID SetStdHandle WriteConsoleW GetConsoleOutputCP WriteConsoleA IsValidCodePage GetOEMCP GetACP GetCPInfo InitializeCriticalSectionAndSpinCount GetModuleHandleA InterlockedCompareExchange IsProcessorFeaturePresent VirtualFree VirtualAlloc TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA RtlUnwind RaiseException HeapCreate HeapDestroy DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError SetHandleCount GetStdHandle GetFileType GetStartupInfoA WriteFile GetConsoleCP GetConsoleMode SetFilePointer ReadFile Sleep FlushFileBuffers ExitProcess GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime HeapSize SetEndOfFile

user32

MessageBoxA SendMessageA GetDlgItem IsWindow CallWindowProcA DefWindowProcA GetWindowLongA SetWindowLongA CallNextHookEx UnhookWindowsHookEx GetWindowThreadProcessId SetWindowsHookExA FindWindowA

advapi32

GetSidSubAuthority GetSidSubAuthorityCount RegSetValueExA RegDeleteValueA RegQueryValueExA RegCloseKey SetSecurityInfo SetEntriesInAclA EqualSid GetTokenInformation OpenProcessToken GetExplicitEntriesFromAclA GetSecurityInfo RegOpenKeyExA DuplicateTokenEx

shell32

DoEnvironmentSubstW DoEnvironmentSubstA

ole32

CoInitialize CoCreateInstance CoUninitialize

oleaut32

GetErrorInfo SysStringLen SysFreeString VariantClear SysAllocString

shlwapi

UrlEscapeA PathAppendA

$PLUGINSDIR/ioSpecial.ini

SHA256 d95aed234f932a1c48a2b1b0d98c60ca31f962310c03158e2884ab4ddd3ea1e0
MD5 e2d5070bc28db1ac745613689ff86067
SHA1 282e080b4cf847174c5c11e4f9157b8c338ecb19
SHA512 a50ca2014869629135b54e848f03cb4983ad8029cd811300d02b0fc54de0436185f418fea4d3db888eb0f3170e33a59d486aa885f024ab29e630e9bc0ae1a2de
MD5 SHA1 SHA512

NSIS installer

installer

$PLUGINSDIR/modern-wizard.bmp

SHA256 77acf995b622b6f5e94547e08830c13d27dc304b75a4183ae87ddb4446f498c9
MD5 257933e2daf6d7506db866a37d3906f0
SHA1 97b299b88c451bf1f461c769377a3dc831d615c0
SHA512 422f646444424cf67aebafa50c37ce811283cd5920fd8e68dfbab49b40334dd165daa95ce764662de6190f0903c30698e00bd87f2332bed2eac77304bc2ce82f
SSDEEP 384:skjjd69/E7sZiZkufzaUmGjq7AhKFQf1PQBABBYmu06qc2tgcIK7bEAXJc9l:GWnNIBWcdUq
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/nsExec.dll

IMPHASH 053c8c5da7b5f6a2513024b82859e1b0
SHA256 d166786a2091215ab6360853bc591e7045dd9bc697f45f0b19332b8d629af32e
MD5 907db8118c510976d58a75dd9cf7d0e3
SHA1 90446f992946000038807d2966fd71e30e61b1c8
SHA512 f2afc42f03d95ef68c113cb13b47f3b027e5cf8ce7b492a4c15867d72bcd81122d2c70786c52146ac65d5b9e137ed15324b7515f089be3b3efc6711dc0c6e146
SSDEEP 96:xbX1XJX7MVnIPDmdpClMdqXHFI3eg1XGtXGlriUTMaVXmj8L4:dx1IVnIadpClyqVIRXQXwriUTMaVXA
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

4231

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/nsisFirewall.dll

IMPHASH 1a4c99175e8891c64634680f4f238d51
SHA256 2e204ee4f1d12b4ca35c8205cea0cabe354f2e79a471863cfb76a7cee83cf107
MD5 69f2e8c6fd141e9e720b2c4c366a8154
SHA1 a6279d93a102b6d7608dced32a36ddcd3e51994c
SHA512 bf23a5f3ce98e6a1c04fe8ae6b6f385483ceed62470cd109017c97f37c23adbf0203bfb43d09b007c6925aeb5da9617f33bc5c478618f00cc91da83a48cacaf2
SSDEEP 96:KCQjg8aCpUcmloiwmXaYY8NVxIYn69TEdUc1ND0RrXQAcuAtoFrJxalMu2k:KCQPeip58NjMNWND0RrXYuAWkM
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

7175

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/options.ini

SHA256 50ac704f4a93ab73c424a89992977c41c7452c005947068122b68b155d93db02
MD5 204d6f0638a17cd9d09b1508b02d46f8
SHA1 c24f886b269dfbc4fccbfb14a543b7dc497427f3
SHA512 cb627cd7f255cccedb8200e66284ffbd4e876f5c458db51b80b21ee1582ff3eb60e92e5bc89ed37565eedfdad574f37cfe4c372d140b5faef82b7d5201235a06
MD5 SHA1 SHA512

NSIS installer

installer

$PLUGINSDIR/textreplace.dll

IMPHASH c9b875d3f7604775d782afcb308d92df
SHA256 c058f4439617bdb2019c90abd9920070a23f751b9349051d0744280cd5d9c5d7
MD5 72d1177bad86f4df8eaee2a8afe50e6f
SHA1 c36019dfa2ff5c90c9da31c89dfcda08f93df68d
SHA512 e0e764fcafa833f94ad2d5ae2a407f3e35bd27efa078625d5a2c9372ea28d7889c4b339e457d6fd7c3c90475b2d1603142a8c46a23f59b5784478860b06ee1b3
SSDEEP 96:RHbaG527tDIdcuPYyKV20sWt5yzASW3zRvDOfGq:RHba5JCcmgV20sqhZ2
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

4818

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/unicode.dll

IMPHASH 05f29a3dc3b7096bfdca7ddbd6b47dd0
SHA256 35c497fdf47ae25f342b8fd1c5f0804f6ab295172cdbb1d5d0c33a57e02e7c34
MD5 6d57186e3f2111a34a921cd3f7d75e7d
SHA1 e8825b6c417298aac91e0e2063b3d0f4f4c55abe
SHA512 94a504b98e79c7a478c4dfa664d0322391c694b8e08dcb063a31804b3f14fe7f038b71b62ed90dc1c736282895ae849022eb4cbbfe7d9472a69249fe1f624c93
SSDEEP 192:xu6glHSUYhk9UdOWve2Rx/HrfVt5wGneBI1FnRg:s86mQjYlOBI1k
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

8177

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

ToolbarUpdate.exe

IMPHASH b4785ab5f09590fd79c781ce7cb4fba2
SHA256 ae48594c4c1b6161d47dfa568c5f3a73eb09974d9c0f0376ad3c5de77fc6dc96
MD5 6a93f3473e6ae62177004a689e1bd58a
SHA1 2c8a565facb5c2f81483734fdb8836277708096d
SHA512 a362d03479636cafad519baba549ff5416166a8a78af26ef6d87c61d151c99361202955a2e03cc68b5770ab5f5390b95700f129e97256e5f565782fe95942257
SSDEEP 1536:ZimCPTZ0KVx41/SRpm53T/RRZbp28DEYUIjmh8KKx9Q6t1cA/ff1mQMD4Ss:LCbZ0KVi/2pkdj9w8Hbt1cA/fADS
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

N/A

Digest Algorithm

N/A

PE Digests Matches

Not matched

Trusted

Not trusted

Minor OS version

0

Major OS version

4

Entry point

33824

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

d:\Work\.Current\Freecause\Trunk\SVN.Trunk\package\ToolbarUpdate.pdb

shlwapi

PathFileExistsA UrlIsA PathRemoveFileSpecA PathIsDirectoryA

setupapi

SetupIterateCabinetA

kernel32

FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA HeapSize GetModuleFileNameA GetProcAddress InterlockedDecrement lstrlenA InterlockedIncrement CloseHandle ReadFile GetFileSize CreateFileA CreateDirectoryA SetLastError SetFileAttributesA GlobalAddAtomA DeleteFileA GetLastError LoadLibraryA CopyFileA Sleep FreeLibrary GetEnvironmentStringsW FlushFileBuffers WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle GetConsoleMode GetConsoleCP SetFilePointer GetLocaleInfoA GetStringTypeW GetStringTypeA GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount SetUnhandledExceptionFilter SetHandleCount GetStdHandle QueryPerformanceCounter GetFileType WriteFile ExitProcess RaiseException EnterCriticalSection LeaveCriticalSection InitializeCriticalSection DeleteCriticalSection GetVersionExA TerminateProcess GetCurrentProcess UnhandledExceptionFilter VirtualAlloc IsDebuggerPresent RtlUnwind HeapFree HeapAlloc GetFileAttributesA GetCommandLineA GetProcessHeap GetStartupInfoA HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage GetModuleHandleA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW HeapDestroy HeapCreate VirtualFree

user32

GetCursorPos LoadStringA LoadImageA LoadIconA LoadCursorA RegisterClassExA CreateWindowExA ShowWindow GetMessageA TranslateMessage DispatchMessageA DestroyMenu DefWindowProcA UnregisterClassA TrackPopupMenu KillTimer PostMessageA SetTimer GetWindowLongA CreatePopupMenu AppendMenuA MessageBoxA PostQuitMessage FindWindowA IsWindow SendMessageA

gdi32

GetStockObject

shell32

Shell_NotifyIconA

ole32

CoInitialize

Uninst.exe.nsis

SHA256 2feb4441af19fa2509e6e2499110aadfa0101d2bc9747c4e6005626697deaf18
MD5 96c5fb96544e639504865e98006641f1
SHA1 8a2c01691d354cd56a23a7888a710bfc8cde27f3
SHA512 6d30eeae334d3f33554f70e81597bc14030c6f8d092461db377ada381f47a6c586332ffaca664b0979396a70f7914fb1952480f35f0a88ec78354b65c23bdfa0
SSDEEP 384:BYS9KR40vH5eHeGA5HDtio/DliRqXK6nrXCLG7hhj:BYS9KnvH5e+GA3iS0AXK6rCqNhj
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

default.xml

SHA256 bf12794965202770e6c81b41a6a0dc31ce3021dad821c5847db423af3d60671a
MD5 48787fc17349432d2cccb4bfacf4b827
SHA1 6cba67d24437a14b4e484833985db8638671fb09
SHA512 f358351f313d27afa45e6f52aed9cc43210aeaddf07da81b2b7026615b9d2d04f03decacfa2db40a245fdaada6b3868c0cefeba60d5c52d414d012de37bc6bcd
SSDEEP 96:ikv8QWqq8UTDLq15btxkEzkynVqU22E5oMBctKMKuCKyCtLK5+35MrWmPemlmvDc:ikUEDcoqU22E5o0+yCY52cQ7o
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

icons.bmp

SHA256 d4b82cb0f126eb2b3e7338083c95a33abd486dd28a122ef8ea32c99d11362832
MD5 3c9cbf9dca49737574bcb3cda19d34d6
SHA1 0282ccdd30e31b7d7721404c741e2f9f3c7e53ca
SHA512 7356c6a16cb9c43e5f927e6cfd0a378630f2d5662350ac5afffba011f97f15af9e6150698afb856e70fc59be9ea6a345b3c1e548dd393f37b04a336ddb667c52
SSDEEP 3072:w86nQONZTw4FvUBl/pGWwoFh1WqizMaCsiq7DZTHOpV9UJ2:wb9FFyBgWRLOMxEXZT2UJ2
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

images/amazon.bmp

SHA256 74ae458e97eb2fe20e8dd79ac67b221eff70dcf4c940cb12335ef75f5f72bb41
MD5 acdec81a787e941cd426264ec4effd32
SHA1 670c55a805517257501360f8961850a51b15d346
SHA512 952e9308e0c96c083a9da3cdc998e5d2b7ae373d4d122592e047a79955d8ec5d6eb4ed9d6593373b39f5a54fef32bde44406ed30a0a2fc3317a239effbde297e
MD5 SHA1 SHA512

NSIS installer

installer

images/ebay.bmp

SHA256 29b1fb45f672a6d9c5d38987d367f595ea4c124199570e2cda432b46ee62ce86
MD5 be4dbbc8276560194e163c9f96c30d1f
SHA1 d560bbae717091ce6a710a3c11f19401dcec51cd
SHA512 71f671ce45ba381d0ff1dd764928e1d60783bfddcbadda88dd05370904df5128afc2b598470d59ad93d560f5e6cdeb2c3c2296ff0087224df4a4110b41b85fb9
MD5 SHA1 SHA512

NSIS installer

installer

images/email.bmp

SHA256 0138a87057b4ba368459ee14b634bd6eece65a57349de59661f5b16c23b0af3c
MD5 5c05a2b4459052ce89bc18fed40ab682
SHA1 492c69e6fc088639abca697ae17b8c88ad26076c
SHA512 a0a063f5166173a1f7833b94f3c774d7400d1b72e38f83784596fe347d3f5a4e9bb924e52862f473d45b70a8a3f18e672b8719dcee8a4bc3f6641c63c20455ac
MD5 SHA1 SHA512

NSIS installer

installer

images/email2.bmp

SHA256 683a878acffc9ea39026365ec761e19fa4a0bcd819f9d7f58bc757a99801714a
MD5 4e72d92a6fc21b338ea34e795d5f8025
SHA1 781a1be3c213a75acd0ae99a4e039d42c5ccde31
SHA512 8d453eb9ca1aeaa96e3515bd1c402f7d475078f066d683f89d763e6ee0bdc031351474f5ca3f8dea55411c6119e28ca244bf868437c7c6435b6751303c3d903b
MD5 SHA1 SHA512

NSIS installer

installer

images/wikipedia.bmp

SHA256 25b67480e94d9f322527fc360259368295dae99751cc1a2bf1a1254ce10c38c0
MD5 55d637ad0d9324c6f7d3d670e364137b
SHA1 747adecb7518bed6aad6bbc94309d7e14a31ca40
SHA512 287b8af67f87f07441563fa24b354f415320f965a5959052774737717d69372109dd106baf4b2c2fe5b292e30389c1b48bd1411f539f851e03e75ec7a590b9dc
MD5 SHA1 SHA512

NSIS installer

installer

images/yahoo.bmp

SHA256 27d89d6375654154d31a6af6002f8dbe8a703a5ac45f8fbeedd019c4bf98c5a4
MD5 389a1a90599850cc017a44d2a32fb294
SHA1 cbd6e205a26964dc07f679ecf8f548aeb6d49b85
SHA512 07c58971716be45f2214f4085ba1873f00271fd178ccf72860e5c113556dd2d738f74aceb17c4da021b3c00a097e417a79b4650af347c8c5d78a96ee22fc2d19
MD5 SHA1 SHA512

NSIS installer

installer

localization.xml

SHA256 0fdcb48ec41e565e0024af4d68de27f25e9c9ccee36f69337268fee8a62b04c5
MD5 37106b2204c45cea5a1e0a782e00d6fa
SHA1 3ba88e7b0326ccbf9ca51ccf09fd7280502d231f
SHA512 f0cac10c8a9f2d3d1a75d493fb51e454f756fc79944e3d1d0986980693fa48fe5f7296157f8b64fcad4033a4a2a96bf9646cb746db50a5b5b0f46f744fe78369
SSDEEP 384:uHJmIg1NVXi8GJUUf2ynYpzOtnSEpzCZqGg4LW7F48tkwDu1FKiDUb5G4TAOO0BF:trTSvX
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

patch.bat

SHA256 8588ab7e9cd52863b423c19dae6669ed77e732a8d9ba1718fc885f40285ff5f9
MD5 bee10ebd3da704a1d2e547999de2b93a
SHA1 c7a7430dd31222483aab03886268f061ed9a581f
SHA512 cfcfed10b68f4603c513718585652a4ce86dafc492ed98cb459feede9bf6a23f3829d7a567dc9823682d6ef1b4acba6f5108aed1d76d7c8faa9225f6ba270a4f
MD5 SHA1 SHA512

NSIS installer

installer

settings

SHA256 c6c27327cb94d71ac244c970d82c0232b247043092743ea9dd614e704d1f8e7c
MD5 52e835e64b91d5becb00f6f165fffe7f
SHA1 e34aef600d2a9fce356947e88073ed5c23557367
SHA512 0f97120ee93b376ba83e532a4fddf1ac1f65d1860a013cdb020a603402137796ed8beec5795e97305a40f25dbd04134e676f410c44533c238c41251a1f1cdbff
SSDEEP 192:aM8+o7Yh2xfVp+0+4wluns8bxuPuFv5BP4Z8wNdMZYKtWkiaOjkdYki71nhhy:awo7YXF4wNQxuEv5lq8w8CmWk3skaZ5K
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

ticker.html

SHA256 119bc9422665a4dc64b2ef7744c4648e94ac236548bb586ffea06970949e1c1a
MD5 88d6a6a68f51c96f7b1e39bae9082cfe
SHA1 7c2ba73c2e4bbc91800bd24be379161a004e22f7
SHA512 3d4c850813f7131de1c1f46abd283a58698abaf6bbf510c94c24e8fdbdbd28579c90d75c2e6ee98ff621f081d34328cf467f07855e0e4d3827df1d297e6114d2
SSDEEP 96:M81KNMSuGRgjAKHTcNp/Z90WTcNrBffOQXUdMIVU5OVYzVoaLr:MKQuGRg/BffOQEdMIC5RhLr
MD5 SHA1 SHA512 SSDEEP

polyglot

NSIS installer

installer

$TEMPImg/VerControl.exe

IMPHASH 514a9a1e5bae119ec76c5ca238859d46
SHA256 399b54cfabcb46feca42ec219db44a9c35f63a99d3f184826d904b7d7c05e321
MD5 7b61cf742ffc6d75e16ec8847bdb963e
SHA1 345ed1c6ecdbc04d5454dc1487fa448ac19bae21
SHA512 2c24b6147b814a50c3663d944df0936e16916dc44f063a0d7cc4a3a005a4d33bed77c8182350036d3153f1ca7996576e8b28586e6f5bbd40e29375a536626810
SSDEEP 6144:B0T/7lSSGPXIlL+PdVMSG85EbMjWBB0bAE5Bnv6fk4a:CjAIR6V9GyEQiBBxE5pQk4a
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

135923

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

wininet

FindCloseUrlCache FindFirstUrlCacheEntryW DeleteUrlCacheEntryW FindNextUrlCacheEntryW

kernel32

GetFileAttributesW GetFileTime HeapAlloc RtlUnwind HeapFree GetProcessHeap GetStartupInfoW RaiseException HeapReAlloc ExitProcess HeapSize VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent VirtualFree HeapDestroy HeapCreate GetStdHandle GetModuleFileNameA FileTimeToLocalFileTime GetACP GetOEMCP LCMapStringA LCMapStringW FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetSystemTimeAsFileTime GetTimeZoneInformation GetConsoleCP GetConsoleMode GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA SetEnvironmentVariableA SetErrorMode GetTickCount CreateFileW GetFullPathNameW GetVolumeInformationW FindFirstFileW FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile WritePrivateProfileStringW FileTimeToSystemTime lstrlenA TlsFree LocalReAlloc TlsSetValue TlsAlloc GlobalHandle GlobalReAlloc TlsGetValue LocalAlloc GlobalFlags EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSection GetCurrentProcessId CloseHandle GetCurrentThread ConvertDefaultLocale GetVersion EnumResourceLanguagesW lstrcmpA GetLocaleInfoW CompareStringA InterlockedExchange GetModuleHandleA GetThreadLocale InterlockedIncrement WideCharToMultiByte InterlockedDecrement GetModuleFileNameW FreeResource GetCurrentThreadId GlobalAddAtomW GlobalFindAtomW GlobalDeleteAtom LoadLibraryW FreeLibrary CompareStringW LoadLibraryA lstrcmpW GetModuleHandleW GetProcAddress GetVersionExA GlobalFree GlobalAlloc GlobalLock GlobalUnlock FormatMessageW LocalFree lstrlenW MulDiv SetLastError GetLastError MultiByteToWideChar Sleep FindResourceW LoadResource LockResource SizeofResource GetCPInfo

user32

GetNextDlgGroupItem MessageBeep RegisterClipboardFormatW PostThreadMessageW CopyAcceleratorTableW UnregisterClassW DestroyMenu LoadCursorW GetSysColorBrush SetWindowContextHelpId MapDialogRect GetDesktopWindow CreateDialogIndirectParamW GetNextDlgTabItem EndDialog GetWindowThreadProcessId SetCursor GetMessageW TranslateMessage GetCursorPos ValidateRect PostQuitMessage EndPaint BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen GrayStringW DrawTextExW DrawTextW TabbedTextOutW CharNextW IsWindowEnabled MoveWindow SetWindowTextW IsDialogMessageW CharUpperW RegisterWindowMessageW LoadIconW SendDlgItemMessageW SendDlgItemMessageA WinHelpW IsChild GetCapture SetWindowsHookExW CallNextHookEx GetClassLongW GetClassNameW SetPropW GetPropW RemovePropW IsWindow GetWindowTextLengthW GetWindowTextW GetForegroundWindow GetLastActivePopup SetActiveWindow DispatchMessageW GetDlgItem GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime GetMessagePos PeekMessageW MapWindowPoints GetKeyState SetForegroundWindow IsWindowVisible UpdateWindow GetClientRect GetMenu MessageBoxW CreateWindowExW GetClassInfoExW GetClassInfoW RegisterClassW GetSysColor AdjustWindowRectEx ScreenToClient EqualRect CopyRect PtInRect GetDlgCtrlID DefWindowProcW CallWindowProcW GetWindowLongW ReleaseCapture SetCapture InvalidateRgn InvalidateRect SetRect IsRectEmpty SetWindowPos OffsetRect IntersectRect SystemParametersInfoA IsIconic GetWindowPlacement GetSystemMetrics GetWindow GetMenuItemID GetMenuItemCount GetSubMenu SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapW GetFocus ModifyMenuW GetMenuState EnableMenuItem CheckMenuItem GetActiveWindow ShowWindow SetWindowLongW SetTimer PostMessageW EnableWindow GetParent GetWindowRect SendMessageW UnregisterClassA SetFocus

gdi32

SetWindowExtEx ScaleWindowExtEx RectVisible ExtSelectClipRgn DeleteDC CreateRectRgnIndirect GetRgnBox GetMapMode PtVisible GetWindowExtEx GetViewportExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape ExtTextOutW GetDeviceCaps CreateBitmap DeleteObject SetMapMode RestoreDC SaveDC GetTextColor GetBkColor GetStockObject GetObjectW SetBkColor SetTextColor GetClipBox TextOutW

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter DocumentPropertiesW OpenPrinterW

advapi32

RegCreateKeyExW RegQueryValueW RegEnumKeyW RegDeleteKeyW RegOpenKeyW RegSetValueExW RegOpenKeyExW RegQueryValueExW RegCloseKey

shlwapi

PathFindFileNameW PathStripToRootW PathFindExtensionW PathIsUNCW

oledlg

OleUIBusyW

ole32

CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CLSIDFromString CLSIDFromProgID OleIsCurrentClipboard OleUninitialize CoTaskMemAlloc CoTaskMemFree OleFlushClipboard CoRegisterMessageFilter CoFreeUnusedLibraries OleInitialize CoRevokeClassObject

oleaut32

VariantClear SystemTimeToVariantTime VariantTimeToSystemTime VariantCopy OleCreateFontIndirect VariantChangeType SafeArrayCreate SafeArrayPutElement SafeArrayDestroy SafeArrayCreateVector VariantInit SafeArrayAccessData SafeArrayGetLBound SafeArrayGetUBound SafeArrayUnaccessData SysAllocString SysStringLen SysAllocStringLen SysFreeString

$TEMPImg/askToolbarInstaller-1.9.1.0.exe

IMPHASH 206513a2c97fa61166fe9ae13d91d955
SHA256 4d2f2a2cbaa420897a9362a2be0dbe23f8f4301fa35fd7fd5d5b093bcb2e16a7
MD5 aee02b9d3d9dfe2dfec230ace3804ba8
SHA1 ad44a69068930a5a5e100f7e1f14cf189842a670
SHA512 4b72ca26292bbe5136e9b471b8016b9931dc5578aa8e7a01b4a23a2b9ad6367f5f6c4f5f84c65f0c8cc9b601ae63240b13b0b25bfe0bb7a77d22a8bff085c6fb
SSDEEP 49152:LDnTDfkbVCs/2cex8CfdVY36EfrTzcZse23npE71z5tm6zuByY2prwt4i9oSQSqW:LDPfjDYKEgZYpE795FzuBxOY9oSpw3BG
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

6b:9b:f7:54:4a:13:f8:e0:8b:e3:76:a7:37:62:54:4d:10:5f:7d:c2

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Ask.com,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Distribution,O=Ask.com,L=Oakland,ST=California,C=US

Chains

Sep 29, 2010

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Serial Number

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Jul 16, 2004 - Jul 15, 2014

Subject

CN=Ask.com,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Distribution,O=Ask.com,L=Oakland,ST=California,C=US

Serial Number

28:6f:8a:30:e2:ea:c6:96:5b:93:6f:82:6a:05:30:5d

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jun 17, 2008 - Jun 17, 2011

Minor OS version

0

Major OS version

5

Entry point

43194

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\hudson\jobs\ToolbarCore-1.9.1.0\workspace\build\ToolbarCore\toolbar\ie\src\toolbar\wrapper\Release\externalwrapper.pdb

shlwapi

StrCmpNIW StrStrIW PathFileExistsW SHDeleteValueW

msi

ord70

kernel32

FindResourceW FreeLibrary LoadResource GetCurrentProcess WaitForSingleObject GetModuleHandleW WriteFile WideCharToMultiByte LoadLibraryW SizeofResource GetVersionExW GetExitCodeProcess CreateFileW MultiByteToWideChar lstrlenW GetTempPathW lstrlenA GetLastError GetProcAddress FindClose GetLocalTime GetSystemInfo lstrcmpiW CloseHandle FileTimeToLocalFileTime DeleteFileW CreateFileA SetFilePointer ReadFile WriteConsoleW GetConsoleOutputCP WriteConsoleA GetTempFileNameW FileTimeToDosDateTime SetEndOfFile GetProcessHeap FindFirstFileA TerminateProcess HeapSize FlushFileBuffers SetStdHandle LoadLibraryA InitializeCriticalSectionAndSpinCount GetLocaleInfoA GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA GetCurrentProcessId HeapFree HeapAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetSystemTimeAsFileTime GetStartupInfoW RaiseException RtlUnwind GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA GetConsoleCP GetConsoleMode GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount

user32

GetSystemMetrics MessageBoxW

advapi32

RegCloseKey RegEnumKeyExW RegOpenKeyExW RegEnumValueW RegDeleteValueW RegDeleteKeyW RegQueryInfoKeyW RegQueryValueExW RegSetValueExW

shell32

ShellExecuteExW

ole32

CoCreateGuid StringFromGUID2

wininet

InternetCrackUrlW HttpQueryInfoW InternetOpenW InternetReadFile HttpAddRequestHeadersA HttpSendRequestA HttpEndRequestW InternetConnectW HttpOpenRequestW InternetSetOptionW InternetCloseHandle HttpSendRequestExW

$TEMPImg/chk.exe

IMPHASH 514a9a1e5bae119ec76c5ca238859d46
SHA256 b851182aaf1d11cd24324f77687f62ad894d0882585b67480af5cfee76fc512e
MD5 d872c134003a8f69f66daa0aaaa28d08
SHA1 d65cc4d006dc6b9b703cb6f1b7c323633dd6855b
SHA512 c05a3dc717e5fdf4ea72b4842ed9ecbb7b706fb1d18bf42c33de0124374a50b1ef76fb787aafb388a3e24c74c3a8a8a2f02679006f48d1a19871ef8e7cccfb74
SSDEEP 6144:3n8yGlSGP3MIpxRAyoKKpbaGOcffVHAajNk4a:X4MWwyoHp2G/HACk4a
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

136003

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

wininet

FindCloseUrlCache FindFirstUrlCacheEntryW DeleteUrlCacheEntryW FindNextUrlCacheEntryW

kernel32

GetFileAttributesW GetFileTime HeapAlloc RtlUnwind HeapFree GetProcessHeap GetStartupInfoW RaiseException HeapReAlloc ExitProcess HeapSize VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent VirtualFree HeapDestroy HeapCreate GetStdHandle GetModuleFileNameA FileTimeToLocalFileTime GetACP GetOEMCP LCMapStringA LCMapStringW FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetSystemTimeAsFileTime GetTimeZoneInformation GetConsoleCP GetConsoleMode GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA SetEnvironmentVariableA SetErrorMode GetTickCount CreateFileW GetFullPathNameW GetVolumeInformationW FindFirstFileW FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile WritePrivateProfileStringW FileTimeToSystemTime lstrlenA TlsFree LocalReAlloc TlsSetValue TlsAlloc GlobalHandle GlobalReAlloc TlsGetValue LocalAlloc GlobalFlags EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSection GetCurrentProcessId CloseHandle GetCurrentThread ConvertDefaultLocale GetVersion EnumResourceLanguagesW lstrcmpA GetLocaleInfoW CompareStringA InterlockedExchange GetModuleHandleA GetThreadLocale InterlockedIncrement WideCharToMultiByte InterlockedDecrement GetModuleFileNameW FreeResource GetCurrentThreadId GlobalAddAtomW GlobalFindAtomW GlobalDeleteAtom LoadLibraryW FreeLibrary CompareStringW LoadLibraryA lstrcmpW GetModuleHandleW GetProcAddress GetVersionExA GlobalFree GlobalAlloc GlobalLock GlobalUnlock FormatMessageW LocalFree lstrlenW MulDiv SetLastError GetLastError MultiByteToWideChar Sleep FindResourceW LoadResource LockResource SizeofResource GetCPInfo

user32

GetNextDlgGroupItem MessageBeep RegisterClipboardFormatW PostThreadMessageW CopyAcceleratorTableW UnregisterClassW DestroyMenu LoadCursorW GetSysColorBrush SetWindowContextHelpId MapDialogRect GetDesktopWindow CreateDialogIndirectParamW GetNextDlgTabItem EndDialog GetWindowThreadProcessId SetCursor GetMessageW TranslateMessage GetCursorPos ValidateRect PostQuitMessage EndPaint BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen GrayStringW DrawTextExW DrawTextW TabbedTextOutW CharNextW IsWindowEnabled MoveWindow SetWindowTextW IsDialogMessageW CharUpperW RegisterWindowMessageW LoadIconW SendDlgItemMessageW SendDlgItemMessageA WinHelpW IsChild GetCapture SetWindowsHookExW CallNextHookEx GetClassLongW GetClassNameW SetPropW GetPropW RemovePropW IsWindow GetWindowTextLengthW GetWindowTextW GetForegroundWindow GetLastActivePopup SetActiveWindow DispatchMessageW GetDlgItem GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime GetMessagePos PeekMessageW MapWindowPoints GetKeyState SetForegroundWindow IsWindowVisible UpdateWindow GetClientRect GetMenu MessageBoxW CreateWindowExW GetClassInfoExW GetClassInfoW RegisterClassW GetSysColor AdjustWindowRectEx ScreenToClient EqualRect CopyRect PtInRect GetDlgCtrlID DefWindowProcW CallWindowProcW GetWindowLongW ReleaseCapture SetCapture InvalidateRgn InvalidateRect SetRect IsRectEmpty SetWindowPos OffsetRect IntersectRect SystemParametersInfoA IsIconic GetWindowPlacement GetSystemMetrics GetWindow GetMenuItemID GetMenuItemCount GetSubMenu SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapW GetFocus ModifyMenuW GetMenuState EnableMenuItem CheckMenuItem GetActiveWindow ShowWindow SetWindowLongW SetTimer PostMessageW EnableWindow GetParent GetWindowRect SendMessageW UnregisterClassA SetFocus

gdi32

SetWindowExtEx ScaleWindowExtEx RectVisible ExtSelectClipRgn DeleteDC CreateRectRgnIndirect GetRgnBox GetMapMode PtVisible GetWindowExtEx GetViewportExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape ExtTextOutW GetDeviceCaps CreateBitmap DeleteObject SetMapMode RestoreDC SaveDC GetTextColor GetBkColor GetStockObject GetObjectW SetBkColor SetTextColor GetClipBox TextOutW

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter DocumentPropertiesW OpenPrinterW

advapi32

RegCreateKeyExW RegQueryValueW RegEnumKeyW RegDeleteKeyW RegOpenKeyW RegSetValueExW RegOpenKeyExW RegQueryValueExW RegCloseKey

shlwapi

PathFindFileNameW PathStripToRootW PathFindExtensionW PathIsUNCW

oledlg

OleUIBusyW

ole32

CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CLSIDFromString CLSIDFromProgID OleIsCurrentClipboard OleUninitialize CoTaskMemAlloc CoTaskMemFree OleFlushClipboard CoRegisterMessageFilter CoFreeUnusedLibraries OleInitialize CoRevokeClassObject

oleaut32

VariantClear SystemTimeToVariantTime VariantTimeToSystemTime VariantCopy OleCreateFontIndirect VariantChangeType SafeArrayCreate SafeArrayPutElement SafeArrayDestroy SafeArrayCreateVector VariantInit SafeArrayAccessData SafeArrayGetLBound SafeArrayGetUBound SafeArrayUnaccessData SysAllocString SysStringLen SysAllocStringLen SysFreeString

$TEMPImg/vcheck.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 4321b89de48a199b076a5a9e27dcd4f9f82365ef340f42ac29ecd18510f1e43c
MD5 02ce8877565b7020ad6dd0857afb4cd4
SHA1 684435c0c0511a6fd7532496780bbcd6dd39b0d5
SHA512 c9ab0fa25aa692ce270063f47403a4c40056e5f400ae1e254af00cc5aa37dc02d7cb47f19bf263027b2ab18dff78cb6f5510155e4509c3d99e8733e6c124de8b
SSDEEP 192:TJsO7os14PoUwrImskktAsQo99HSPUAbswRJ3th+g:TJZosSP3mxnsQA9HSsSJS
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

16478

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\Work\GeneralWork\NeverblueAutoInstallers\TotalInstaller\AutoInstallerForExecutable\obj\Release\AutoInstallerForExecutable.pdb

Uninst.exe

IMPHASH 7fa974366048f9c551ef45714595665e
SHA256 55379de004db0c12678f1a61bbb93310baf4c4b9e6447812094cbb05a47f2f9d
MD5 69542b6fce7da1cb66279012323acc64
SHA1 7ca79b65bf28d7986028d8c10fcb92b769fccff8
SHA512 d2310a4c9d333a159fa01c017b7359425894570bb7488a8c1a121e7880f1d64554fa908cf97d2917161a5d6db6f8fcc7b452a4e98b9d4409ea7311b6e09332b2
SSDEEP 1536:bLXB65939tY6HBg4sXJCigtbcDWwM0Eg4ZTBp/2nE/1s2SXiMl5Dovxj+hH:bLk395hYXJ1zDegSTGE9s2giM0vxj+hH
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

12491

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CompareFileTime SearchPathA GetShortPathNameA GetFullPathNameA MoveFileA SetCurrentDirectoryA GetFileAttributesA GetLastError CreateDirectoryA SetFileAttributesA Sleep GetTickCount GetFileSize GetModuleFileNameA GetCurrentProcess CopyFileA ExitProcess GetWindowsDirectoryA SetFileTime GetCommandLineA SetErrorMode LoadLibraryA lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread CreateProcessA RemoveDirectoryA CreateFileA GetTempFileNameA lstrlenA lstrcatA GetSystemDirectoryA GetVersion CloseHandle lstrcmpiA lstrcmpA ExpandEnvironmentStringsA GlobalFree GlobalAlloc WaitForSingleObject GetExitCodeProcess GetModuleHandleA LoadLibraryExA GetProcAddress FreeLibrary MultiByteToWideChar WritePrivateProfileStringA GetPrivateProfileStringA WriteFile ReadFile MulDiv SetFilePointer FindClose FindNextFileA FindFirstFileA DeleteFileA GetTempPathA

user32

EndDialog ScreenToClient GetWindowRect EnableMenuItem GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard RegisterClassA TrackPopupMenu AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA DestroyWindow CreateDialogParamA SetTimer SetWindowTextA PostQuitMessage SetForegroundWindow wsprintfA SendMessageTimeoutA FindWindowExA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA OpenClipboard ExitWindowsEx IsWindow GetDlgItem SetWindowLongA LoadImageA GetDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint ShowWindow

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectA SetBkMode SetTextColor SelectObject

shell32

SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA SHGetSpecialFolderLocation

advapi32

RegQueryValueExA RegSetValueExA RegEnumKeyA RegEnumValueA RegOpenKeyExA RegDeleteKeyA RegDeleteValueA RegCloseKey RegCreateKeyExA

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

$PLUGINSDIR/Processes.dll

IMPHASH f5edecae12589e705677a6e272ad0394
SHA256 86b302fa9c85dfa0c1c03ba000864a928365dab571f3355347dba02da22949b7
MD5 2cfba79d485cf441c646dd40d82490fc
SHA1 83e51ac1115a50986ed456bd18729653018b9619
SHA512 cca186a7f9c5cff3f4eca410fbe8cc13dad2514a7e36aec9b1addfbcb239ace9b9b2d8427771858e3fd11783abce7e24d43c286f98da9f8b17562ca095a4c043
SSDEEP 768:uxEiycFoaj/+WSiJfmjvab7L/cUf7IIlMLRF:uxEm7sgfmjy//cgdlM/
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

6899

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$TEMPImg/ioClean.ini

SHA256 76b7c9b8aa4f2a5f0e64c1b703aa222ad45d3f89d3133ce14c072562d95f76f5
MD5 728d629a1550a9ac623aa6ac95181632
SHA1 729e6e07ef672895e082544ba159f4c0d8f31a29
SHA512 ff32ad33a0427a3fb0847fac3833c06d7436b4ac78fd42021da5984355078fe5b97cc7e6e073cf6ced707d0d2bd62aff6ae8f3a30d6cc2ba7155cd93a5820163
MD5 SHA1 SHA512

NSIS installer

installer

IrisSkin2.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 82ed6d56dfeaeab7fa9f732679af9c83285f9f93f51e15bd03b6416f1cf30edb
MD5 6c59d9b1b75a63e55a69f9fc6dc15a8e
SHA1 89a209b379f6a1dbd2db20b673fd9da651f1df0d
SHA512 803cf3dd4d61ab2cf590324b0f5fb5bbadba8b4ea33a9a5bc86b2550e826fe8932ef00d139ded0263a60255bf2ed51e17404cc9549914b9b2ddc5ada7f8e908c
SSDEEP 12288:zGH1M0Xct5Q7o2BhMnkKRP77zsvex6Kp:zG37t2kYfsvIv
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

542191

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

SingleInstance.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 1eea885d38c511928a5da2c22df37ee3eb3997754eebe87d0d50a77292fde69c
MD5 ff247ba4451b27a7404aa005df6d2056
SHA1 0da3134f94940207abb7a5cdcfdec68474ea0e4c
SHA512 11756d415917ff6bda79900056cb9b39ea80a89c1a62fb25118531905fe27e002f84fe48898be6c701667288c08f25bf90ef5b3cfa58c30cd2edcba31f5ba6a1
SSDEEP 48:68vy5V0Y11MhMt2EcRTGfilbmXe6ac/ULUOQzJiAoplhAEr34XC8oIfn+KkttS0D:6H0Y11rtTcNGfmCO65U6/C8okev
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

11534

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

SingleInstance.xml

SHA256 ff2c8414ad6461edf2bd34840137ebbac8a503647a44dc2fd5d6e0bc7b10acf2
MD5 0792f9de7bb1ccb57b78349cfe9d020f
SHA1 3c77012642aa0082eba42a5a7087de32511d881c
SHA512 df1e3b30187336108285910752557b1045da3b0e842eb385e512821bd296252cb686e56e3a9508d123b3a211603b4a2d85dbc49163e2415dd6628deebccfac8f
SSDEEP 96:5ZXU63AVJScZcUjJQMp/qJtJRDJTJNule0JNVM:5ZX93sJScHjJQv7/VOnU
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Uninst.exe

IMPHASH a23455b2d570c1e80b11b92360e41c00
SHA256 cb0060d93a2a4be5682d6683a6d77ac2b149b5b2c6cc881118fe07bee309f465
MD5 444e1036502ac839875b14c35e2012a3
SHA1 8e33ec3061d1add45103876165e2036eedc23382
SHA512 30c300f38413980bb6c611cd554853cbc33173e633d9e4fa40c74adf6cae5c94a64aae3e33530fe0cfa978260f79021eab47f1116be5bd415c10b4a814a7e789
SSDEEP 1536:nOup7DCUaAVrEnWzuuLmJfTB66E/1s2SXiMl5Dovxj+hx:RtbKWzPmJ46E9s2giM0vxj+hx
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

12492

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CompareFileTime SearchPathA GetShortPathNameA GetFullPathNameA MoveFileA SetCurrentDirectoryA GetFileAttributesA GetLastError CreateDirectoryA SetFileAttributesA Sleep GetFileSize GetModuleFileNameA GetTickCount GetCurrentProcess CopyFileA ExitProcess GetWindowsDirectoryA SetFileTime GetCommandLineA SetErrorMode LoadLibraryA lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread CreateProcessA RemoveDirectoryA CreateFileA GetTempFileNameA lstrlenA lstrcatA GetSystemDirectoryA GetVersion CloseHandle lstrcmpiA lstrcmpA ExpandEnvironmentStringsA GlobalFree GlobalAlloc WaitForSingleObject GetExitCodeProcess GetModuleHandleA LoadLibraryExA GetProcAddress FreeLibrary MultiByteToWideChar WritePrivateProfileStringA GetPrivateProfileStringA WriteFile ReadFile MulDiv SetFilePointer FindClose FindNextFileA FindFirstFileA DeleteFileA GetTempPathA

user32

EndDialog ScreenToClient GetWindowRect EnableMenuItem GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard RegisterClassA TrackPopupMenu AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA CreateDialogParamA DestroyWindow SetTimer SetWindowTextA PostQuitMessage SetForegroundWindow wsprintfA SendMessageTimeoutA FindWindowExA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA OpenClipboard ExitWindowsEx IsWindow GetDlgItem SetWindowLongA LoadImageA GetDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint ShowWindow

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectA SetBkMode SetTextColor SelectObject

shell32

SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA SHGetSpecialFolderLocation

advapi32

RegQueryValueExA RegSetValueExA RegEnumKeyA RegEnumValueA RegOpenKeyExA RegDeleteKeyA RegDeleteValueA RegCloseKey RegCreateKeyExA

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

$PLUGINSDIR/Processes.dll

IMPHASH f5edecae12589e705677a6e272ad0394
SHA256 86b302fa9c85dfa0c1c03ba000864a928365dab571f3355347dba02da22949b7
MD5 2cfba79d485cf441c646dd40d82490fc
SHA1 83e51ac1115a50986ed456bd18729653018b9619
SHA512 cca186a7f9c5cff3f4eca410fbe8cc13dad2514a7e36aec9b1addfbcb239ace9b9b2d8427771858e3fd11783abce7e24d43c286f98da9f8b17562ca095a4c043
SSDEEP 768:uxEiycFoaj/+WSiJfmjvab7L/cUf7IIlMLRF:uxEm7sgfmjy//cgdlM/
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

6899

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

WallpaperRotator.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 00a36fda9af88d51ee00b349da45b6a5b4cd3fd5328b21560e4fa13ff9b8e4ce
MD5 f3e12dfc0cb4225515e9ea889f31f806
SHA1 f846b8c015e0f0c2c17a22032902a664ab628820
SHA512 44b54895df8c852e5ad3a6d0f07bb08c5c1b201f551884633839041a17263c0747fa86fb455c81849bf72a66966b5234125d3d63d12e49b2e8f04a7032fd37aa
SSDEEP 1536:n9UdKam/0cyCQXiytIbax/Zkf5zWYlO8Qyigk/wySeGInOC9t:9UdKam8cVM18drloyq/xSeGInOC9
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

110190

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

WallpaperRotator.url

SHA256 ec814f3c77eda6cd59ce5863f66f2f8af57bcc59ffe483ce98fd910d3a7a006c
MD5 d590a944acab16166ab55ca1b26040b2
SHA1 52e370ed6a345f05a4bde5b05055e3d6fcf2feb6
SHA512 ad0e2fdae6184f1125f0b175276df53e3355f3a03d17e1f954bedc7c3ae453b39c70743dee93e7fe8200a1a9cce3a5f3cbc78478d48a78a2db787881af717a08
MD5 SHA1 SHA512

NSIS installer

installer

license.txt

SHA256 3046212f26c723e74063805019fee237abaea089f085d9cd9cc148482b0402c2
MD5 7f8fc22bebf84c197b19c6593c6d39ed
SHA1 cc8d5434d269fee2a24e4ff0f80780c246773301
SHA512 5248db8547c5aacfd117c453091153c71a32ce4bcb9de65463007267dd1ded646f242d25f06be7046da200994adf797d461cd46e02f8ae2aaa494404c1587f96
SSDEEP 384:dIQaInRRSAD68QwCbhATJ7But8KMyTy7XK:dbJWz6t2fRy7XK
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

tools/register.exe

IMPHASH 492138ce5716142bee4b8c6ddf19a2c0
SHA256 3e3f11f94a09771eb3a02ef6eca283ab422b21967971fe20d61f7af2ec81d5b0
MD5 b47da25e5b79743481752d2955facf94
SHA1 8638fdad52dd08b3698cce43b834eef3df8b9b4f
SHA512 0ddbb5e7fa46f1eb9402d7dc10772a087eda6a26e211566c575504897ea0cd12cb1f272894b4f6342c18fcf11778d3da537d42f2bc9e31a4c5915b95a2e69491
SSDEEP 768:MU5odLuZ46iXI+aKj+rx1xoNg03WSsxZGmXEZae8iMm2m0va4iYZo/:xf4XI+35g03VGWAe8iM37o/
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

25096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

tools/register_y.exe

IMPHASH 492138ce5716142bee4b8c6ddf19a2c0
SHA256 3071c49b130631dc5379fdc5af759c2d641b5477f4f3f42c03a1e7ded679e1dc
MD5 fd6bf42d7765d8b3fbfdc1dde78a2e72
SHA1 81108b58f2f5f07a8b658b62a734a2bdf9546bd4
SHA512 eb66a60806b8ffb720779db396a898c5543b726e07ebd0e0cef6b0a30949c222cf549a0d392eadc377e82905d59c982d161afaee3a03cc5831a42721ebb5b9a0
SSDEEP 768:BUlgdLutA6iXI+aKj+rx1xoNg03WSsxZGmXEZae8iMm2m0va4iYZoP:QbwXI+35g03VGWAe8iM37oP
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

25096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Sharing

General

Malware Config

Signatures

File Explorer