Valorant Tracker - Installer[.]exe

resource	yara_rule
static1/unpack001/$PLUGINSDIR/nsis7z.dll	acprotect

resource	yara_rule
static1/unpack001/$PLUGINSDIR/nsis7z.dll	upx

resource
unpack001/$PLUGINSDIR/Microsoft.Win32.TaskScheduler.dll

Valorant Tracker - Installer.exe

IMPHASH 56a78d55f3f7af51443e58e0ce2fb5f6
SHA256 099ff0f5831f8f813a67cc46743c77c7b8c5d078a1f9a6d9c340153bcbe1b9c2
MD5 8a41359ec3e2a2c2c47add68444a99dc
SHA1 6882ac68c50e5d5781b395090eabbfc4bcb13b42
SHA512 d489fdeb879feb80cb947689e042a517cc58fdaa27087eea19f9533886f996856d1c4ea7c1a9e5b519ce2ddd14209ef01f7c540ff692793a7fcb101022c851ca
SSDEEP 49152:+E6vKFxE87vxpsrFpIvQugIpwGkgsWYzIw3UhsooAFhR8M1YHzcp:+nK3PN+TIvPcGDqzrkhsbc8M1YT
TLSH
T1CFD5336186EC42AFDA0ABB3375F5456F9475FD0A32380BABB3849C5439E4D82534C53B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

29:73:32:08:f2:b1:dd:38:a3:2b:17:88:38:51:f8:d4:0b:a3:d9:ad:70:0a:8d:ea:46:b4:a1:1a:5f:ef:97:65

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=514330331,CN=Overwolf Ltd,O=Overwolf Ltd,L=Tel Aviv-Yafo,C=IL,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302494c

Chains

Feb 9, 2026

SERIALNUMBER=514330331,CN=Overwolf Ltd,O=Overwolf Ltd,L=Tel Aviv-Yafo,C=IL,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302494c

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=514330331,CN=Overwolf Ltd,O=Overwolf Ltd,L=Tel Aviv-Yafo,C=IL,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302494c

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2013 - Jan 15, 2038

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

SERIALNUMBER=514330331,CN=Overwolf Ltd,O=Overwolf Ltd,L=Tel Aviv-Yafo,C=IL,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302494c

Serial Number

02:13:8d:80:29:d8:fe:c8:5c:a2:91:9d:08:d1:31:55

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 14, 2023 - May 3, 2026

Subject

CN=Dummy certificate

Serial Number

01

Issuer

CN=Unknown issuer

Key Usages

KeyUsageCertSign

Ext Key Usages

Timespan

Jan 1, 2013 - Apr 1, 2013

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

13613

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCreateKeyExW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken SetFileSecurityW RegOpenKeyExW RegEnumValueW

shell32

SHGetSpecialFolderLocation SHFileOperationW SHBrowseForFolderW SHGetPathFromIDListW ShellExecuteExW SHGetFileInfoW

ole32

OleInitialize OleUninitialize CoCreateInstance IIDFromString CoTaskMemFree

comctl32

ord17 ImageList_Create ImageList_Destroy ImageList_AddMasked

user32

GetClientRect EndPaint DrawTextW IsWindowEnabled DispatchMessageW wsprintfA CharNextA CharPrevW MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW GetSystemMetrics FillRect AppendMenuW TrackPopupMenu OpenClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetSysColor SetWindowPos GetWindowLongW PeekMessageW SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint EmptyClipboard CreatePopupMenu

gdi32

SetBkMode SetBkColor GetDeviceCaps CreateFontIndirectW CreateBrushIndirect DeleteObject SetTextColor SelectObject

kernel32

GetExitCodeProcess WaitForSingleObject GetModuleHandleA GetProcAddress GetSystemDirectoryW lstrcatW Sleep lstrcpyA WriteFile GetTempFileNameW CreateFileW lstrcmpiA RemoveDirectoryW CreateProcessW CreateDirectoryW GetLastError CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersionExW GetCommandLineW GetTempPathW GetWindowsDirectoryW SetEnvironmentVariableW CopyFileW ExitProcess GetCurrentProcess GetModuleFileNameW GetFileSize GetTickCount MulDiv SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW MoveFileExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW

$PLUGINSDIR/CommandLine.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 569307401b949368527b128155b4e16b349803ec7d65c1052cc23c7b7a1336d8
MD5 210472e9e333d3329072c9ea3ef06326
SHA1 298c5473a79ab2c34d1ef05a75cbdd04905c822a
SHA512 c0f41486e8e7a8178322bd1fcd37fe645e4a23041e0aa84d3571b8031e2d1881029aeac1b4a554aa2f6a4f1b57d23a063872fcc72a04984fbaec2bfd12fd4b01
SSDEEP 1536:/Zj9JT17qpL/6ePMqBNzrstoJSkrjbgbwziM3hwW:/x9JT17WPMqBNWAkbwzibW
TLSH
T1C953292193EC472BD6FF0BB9B47462610BB5FF86B523E36E8D49A09A1853F4144613B3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

c4:bf:69:a7:49:b7:36:1a:42:33:23:37:55:f1:07:a4:20:71:2e:f4:5c:b0:07:6b:66:62:b2:98:fd:b4:db:a8

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Chains

Sep 6, 2022

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Serial Number

0e:e0:0d:4b:1a:48:0c:a8:70:01:b5:40:80:63:da:71

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 27, 2020 - Mar 3, 2023

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

4

Entry point

60874

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

G:\src\commandline\src\libcmdline\obj\Release\CommandLine.pdb

$PLUGINSDIR/DotNetZip.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 6c512d9943a225d686b26fc832589e4c8bef7c4dd0a8bdfd557d5d27fe5bba0f
MD5 190e712f2e3b065ba3d5f63cb9b7725e
SHA1 75c1c8dd93c7c8a4b3719bb77c6e1d1a1620ae12
SHA512 2b4898d2d6982917612d04442807bd58c37739b2e4b302c94f41e03e685e24b9183b12de2057b3b303483698ad95e3a37795e6eb6d2d3b71e332b59deeca7d02
SSDEEP 6144:GuCInHLhJI4FY/ixjci6ychf8xalGQGtSV41kJDsTDDpBnse6OVxLV/Wo0k:UQL32ikCaUS4csRBse6sfWNk
TLSH
T10FA4AE0427EC4B57E1EF5BB5E0B295A2C3B1B462693EEB8F5C4024EE2D17350D911BA3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

13:8b:f6:d8:5e:11:a7:7d:99:23:3f:a2:cf:77:74:08:78:12:2e:73:c4:3d:bf:8e:a7:85:e5:13:b1:43:8d:6a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Chains

Nov 30, 2021

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Serial Number

0e:e0:0d:4b:1a:48:0c:a8:70:01:b5:40:80:63:da:71

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 27, 2020 - Mar 3, 2023

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

4

Entry point

465934

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\projects\dotnetzip-semverd\src\Zip\obj\Release\DotNetZip.pdb

$PLUGINSDIR/INetC.dll

IMPHASH 735e27ae3d7df8c0487e4353d04f6f28
SHA256 0ecf8b76a413726d2a9c10213ad6e406211330e9e79cfde5024968eedc64a750
MD5 87050902acf23fa5aa6d6aa61703db97
SHA1 d5555e17151540095a8681cd892b79bce8246832
SHA512 d75d3fc84a61887ee63bad3e5e38f6df32446fd5c17bedce3edca785030b723b13134b09a9bbbbaca86d5ea07405b8c4afd524cc156a8c1d78f044a22dee9eab
SSDEEP 384:5v1j9e9dEs+rN+qFLAjNXT37vYnOrvFhSL+ZwcSyekzANZBJbIYiPWMirgAM+o/o:51AvEs3HBLzYn29vYhkYiPoEAMxkE1e
TLSH
T1E6F22A9247E51A4AEBB29F3075B4EB3649BBBC525C61C8CF5237528D0672342EA34337
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

c5:27:e8:0b:91:0a:23:9e:ef:1d:b7:48:fd:9e:2e:d8:27:6d:4f:96:c3:f7:ca:e9:b2:1d:0b:71:a4:59:12:b3

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Chains

Aug 27, 2024

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Serial Number

0d:ac:c0:f7:43:c7:9d:8a:64:64:dc:96:7a:f3:b0:39

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jan 27, 2023 - Mar 3, 2026

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

17741

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

GetProcAddress LocalFree WideCharToMultiByte TerminateThread lstrcpyW LoadLibraryA CreateThread WaitForSingleObject LocalAlloc lstrcpynW SleepEx MulDiv GetModuleHandleW ReadFile GetLastError CreateFileW lstrcmpiW CreateFileA lstrcatW GetFileSize SetFilePointer lstrcmpW MultiByteToWideChar lstrlenA WriteFile lstrlenW CloseHandle GlobalAlloc GlobalFree GetTickCount DeleteFileW

user32

GetDlgItem DestroyWindow GetClientRect MessageBoxW wsprintfA SystemParametersInfoW GetWindowTextW GetWindowLongW FindWindowExW IsWindow CreateDialogParamW GetParent ShowWindow KillTimer DispatchMessageW LoadIconW PostMessageW IsDialogMessageW GetMessageW SetWindowPos SendDlgItemMessageW SetWindowTextW TranslateMessage GetWindowRect RedrawWindow SetTimer EnableWindow UpdateWindow SetWindowLongW wsprintfW SendMessageW SetDlgItemTextW IsWindowVisible

comctl32

ord17

wininet

InternetConnectW HttpOpenRequestW InternetQueryOptionW InternetErrorDlg HttpSendRequestExW InternetWriteFile HttpSendRequestW InternetSetFilePointer HttpAddRequestHeadersA FtpCreateDirectoryW InternetCrackUrlW FtpOpenFileW InternetSetOptionW InternetOpenW InternetGetLastResponseInfoW HttpEndRequestW InternetReadFile HttpAddRequestHeadersW InternetCloseHandle HttpQueryInfoW

$PLUGINSDIR/Microsoft.Win32.TaskScheduler.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 0bdad6deb1b651e0a52bab4db2c7883c9332884aa37300b3439c69d85b054c7c
MD5 198949a4c3e67b9eb916140dff75c114
SHA1 a05d674e3ca569c68b5810c9ed1b7111992c4f00
SHA512 0dba2df28ca76a7b8a2ae8996aafdcea47e3f652b7441caefa3860cb74e9e659ac61b9c4670f1e8919173eb43c9672dfdf4d4ea827de345bbb18502cc695667d
SSDEEP 3072:tBCeNh/pcfnLq3wyXYsKRNRwxz+gT37teucRpH0:tB/w4xQWO
TLSH
T1D2C3191237EC493AEBEF5B79E539162057F0F1462622E70A8C4CB0D98D173C69E616B3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

125134

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\Users\dahall\Documents\Visual Studio 2010\Projects\TaskService\obj\Release\Microsoft.Win32.TaskScheduler.pdb

$PLUGINSDIR/Newtonsoft.Json.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 7b44639cbfbc8ddac8c7a3de8ffa97a7460bebb0d54e9ff2e1ccdc3a742c2b13
MD5 98cbb64f074dc600b23a2ee1a0f46448
SHA1 c5e5ec666eeb51ec15d69d27685fe50148893e34
SHA512 eb9eabee5494f5eb1062a33cc605b66d051da6c6990860fe4fd20e5b137458277a636cf27c4f133012d7e0efaa5feb6f48f1e2f342008482c951a6d61feec147
SSDEEP 12288:p9BzaPm657wqehcZBLX+HK+kPJUQEKx07N0TCBGiBCjC0PDgM5j9FKjc3SH:p8m657w6ZBLmkitKqBCjC0PDgM5CH
TLSH
T1CEE44A0623F88F66D1AF2735B8305A1997F6F407A2B6EBCF6904D5B81D677608E00367
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

2e:83:93:14:a9:06:f5:64:04:02:a1:dc:eb:a3:1a:a7:e9:21:c8:88:2c:dd:c2:3c:e4:c0:45:50:4c:ee:75:10

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Chains

Nov 23, 2021

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Digest

2e:83:93:14:a9:06:f5:64:04:02:a1:dc:eb:a3:1a:a7:e9:21:c8:88:2c:dd:c2:3c:e4:c0:45:50:4c:ee:75:10

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

Chains

Mar 17, 2021

SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Nov 10, 2006 - Nov 10, 2031

Subject

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Serial Number

07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 27, 2018 - Apr 27, 2028

Subject

SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

Serial Number

0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e

Issuer

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Oct 25, 2018 - Oct 29, 2021

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Serial Number

0e:e0:0d:4b:1a:48:0c:a8:70:01:b5:40:80:63:da:71

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 27, 2020 - Mar 3, 2023

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

4

Entry point

698886

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb

$PLUGINSDIR/OWInstaller.exe

SHA256 c02c0d47bca8180c5004d1ca58c7a929d4c3a45db557fc5dd3c74036334baa38
MD5 c44c32b145682776af5ac2a7af0c9b8a
SHA1 0167482422fbebd4cbe23876d459ba59c27eb482
SHA512 820b72cf2ff26295b8d3242c72af93b51907b9a7794402802cbf469ed190c5c6eabc3df95867afb7dbb905c1ac594bcfc965349f4216dd73902362ddaff4e43e
SSDEEP 6144:dqsN1nf6fdOfXJZmtTBZe+pRYza9b87oSFm9pneWRq2WJ9plcyc2:DSUfX7mLk+YhoSKnW82
TLSH
T17B744B1123F94619F6BF4B79B8B249108BB6BE877477EB8C894164CE1AB3311C990773
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Digest

7d:7c:40:6e:70:dd:ca:9c:71:a3:af:40:38:33:fc:bc:c5:82:ca:3e:b1:26:19:31:7a:c1:13:95:26:a5:17:4d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Chains

Feb 9, 2026

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Serial Number

0d:ac:c0:f7:43:c7:9d:8a:64:64:dc:96:7a:f3:b0:39

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jan 27, 2023 - Mar 3, 2026

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

E:\Jenkins\workspace\OWInstaller-NET4.8\OWInstaller\OWInstaller\obj\x64\OWInstaller\OWInstaller.pdb

$PLUGINSDIR/OWInstaller.exe.config

SHA256 272e4c5364193e73633caa3793e07509a349b79314ea01808b24fdb12c51b827
MD5 82d22e4e19e27e306317513b9bfa70ff
SHA1 ff3c7dd06b7fff9c12b1beaf0ca32517710ac161
SHA512 b0fb708f6bcab923f5b381b7f03b3220793eff69559e895d7cf0e33781358ec2159f9c8276bf8ba81302feda8721327d43607868de5caaa9015d7bb82060a0b9
TLSH
T1F9F0E11048C4FF268F3185A33B774814EF3883B7108C091C705E39AB0B271964317233
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/OverWolf.Client.CommonUtils.dll

SHA256 932c1a58f0d71225a95b7ade333f448c535c6b9bb3259206afbe322a625dd4f2
MD5 29417b0c2494eacd3fd6a2525231b691
SHA1 095023056ef999e07fadaa88eb9d3b1804e8c6e7
SHA512 fa4aee0b54b11def6ff87b35ede17c1f8a6ea825b3cc8b012f1eebf55fd4ebcb568894047a8f89b970e91a994270fda15dd417e2b3272db7ec12c0ebc1666d79
SSDEEP 6144:4Is/9BVy+32E6PSaSSZt6grv32XI9QG4G+eO5hATSMe65AKgaFbPf9ougV/QbgbI:4IUBs+sPSaSSZtTAG+wTSMeUlGucZbJ6
TLSH
T1D5E45A1233F8C67AE0BE2B31A8B012029775F506A566EB4E395C904D1FB374A8D51FB3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Digest

af:0b:38:27:ad:42:21:85:cd:6b:ed:28:45:62:86:08:54:a0:3f:dc:d1:8f:01:6a:1a:72:90:f1:63:92:14:f0

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Chains

Feb 5, 2026

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Serial Number

0d:ac:c0:f7:43:c7:9d:8a:64:64:dc:96:7a:f3:b0:39

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jan 27, 2023 - Mar 3, 2026

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

E:\Jenkins\workspace\OWInstaller-NET4.8\OverWolf.Client.CommonUtils\obj\x64\OWInstaller\OverWolf.Client.CommonUtils.pdb

$PLUGINSDIR/SharpRaven.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 776c6b0642f7a3f3f3ad3cc6bb5f1d528e90c6029b671d8f82b0320b185b92a7
MD5 271251960bf1d6a491803e15bd562e45
SHA1 1a305315dec8b44b4d80ef8c23452880b7e90380
SHA512 d5fe5c76f2074a05d32785945ee9f088fb4293786968a1c84389233d83e9bf0480d04d5fa9676c70fd0fed47213f434ec0e0cb2e38379f720919d680336aed4c
SSDEEP 1536:aa9qjviI1YjOrfRK9bvyyfpHbnzDwky7PndZ:aEuqI1lRKbvyyB7nly/
TLSH
T13C832B3123988728CF9D6734B078225A63B8625E3B31E6D6DB1C615E6F973C347212B7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

29:d0:9c:eb:5a:81:f2:af:42:7d:8b:61:a8:eb:de:5f:10:60:8f:fd:1e:fb:3c:28:61:47:e3:b0:8d:21:5a:01

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Chains

Dec 9, 2024

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Serial Number

0d:ac:c0:f7:43:c7:9d:8a:64:64:dc:96:7a:f3:b0:39

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jan 27, 2023 - Mar 3, 2026

Subject

CN=DigiCert Timestamp 2024,O=DigiCert,C=US

Serial Number

0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 26, 2024 - Nov 25, 2035

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

79586

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\projects\raven-csharp\build\obj\Release\net35\SharpRaven.pdb

$PLUGINSDIR/System.dll

IMPHASH fc0224e99e736751432961db63a41b76
SHA256 4dbc79d2b1c7987cc64bb5d014db81bb5108bdd6d8bf3a5f820fac1ded62be33
MD5 51bd16a2ea23ae1e7a92cedc6785c82e
SHA1 a9fbaeb9a695b9f2ba8a3ed8f0d95d2bf6a3d36c
SHA512 66ffc18b2daf6c4cba01aef0e4af2f006a51aa218eab0f21dc66e47eea0389d2b1748ef0e30d2ec9f0123fd7f38ed3aee964dd6bde5779aaee19ebf55369af79
SSDEEP 384:ASUmlw9T7DmnI5+N273FPlIYiPWfPJsaAM+o/8E9VF0NySk/bF:ASYTrINE3cYiPmvAMxkEt/Z
TLSH
T197A28DA246509CB1EC468D7074C8AB3B5B3866476AD0CAD3A3A7C0419F543C77FBC2B6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

cb:06:37:18:70:f1:4e:cb:fe:61:13:58:0e:8d:bc:91:c0:03:7c:4d:6b:f7:8a:94:46:4b:8e:d9:89:35:56:db

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Chains

Aug 27, 2024

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Serial Number

0d:ac:c0:f7:43:c7:9d:8a:64:64:dc:96:7a:f3:b0:39

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jan 27, 2023 - Mar 3, 2026

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

10134

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/UserInfo.dll

IMPHASH e1c0bd3d5b9f3f5cec7ea773ff66ac6e
SHA256 a27dc3069793535cb64123c27dca8748983d133c8fa5aaddee8cdbc83f16986d
MD5 1dd4ca0f4a94155f8d46ec95a20ada4a
SHA1 5869f0d89e5422c5c4ad411e0a6a8d5b2321ff81
SHA512 f4914edc0357af44ed2855d5807c99c8168b305e6b7904dc865771ad0ee90756038612fe69c67b459c468396d1d39875395b1c8ec69e6da559fb92859204763e
SSDEEP 192:9xvcecVMIYiYF8tO7zhjjWvp9A5K+o/y2sE9jBF0Ny+aiQE7:kruIYiPWhjjWvHAM+o/8E9VF0Nyp6
TLSH
T1C2624BB386A45C15DC0B8E7135C8997B9EB0FB922AD081D7621BC1814B84787BFED2B5
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

b0:a6:fb:d2:0e:65:07:16:7f:67:a5:4c:17:a6:bb:87:e4:12:dd:86:01:11:a7:44:db:ed:08:c9:5d:7d:8e:57

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Chains

Aug 27, 2024

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Serial Number

0d:ac:c0:f7:43:c7:9d:8a:64:64:dc:96:7a:f3:b0:39

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jan 27, 2023 - Mar 3, 2026

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

4714

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/app/_locales/de/messages.json

SHA256 2fadb00ad366f03c039e9b4f3943a268aa08b52da301817d977cae9a3b1db337
MD5 01d6d6ffec6df04d9aa20db38f8fff37
SHA1 bbcc61624b83278fd51dfd1efe2dab4848cc5c4a
SHA512 41bd55e34c95b00a762a60c5931c3cfbfd462a9082fced376327cbfc0a7182290a10b33b158732a9a4a3db28dd20a9af9a834fe8aa8112b2f5efedf094169c8b
SSDEEP 192:RAJZco4VLBeZo9NizhochYRl173tFUWIh239gdzu:bRSYd7V6a
TLSH
T13B427D01DCF1AE3B01BA43293C67A605B362576F1060681F7AF9504D0B62DF3D9EBB99
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/_locales/en/messages.json

SHA256 5c2fba2311105df5c8509ce61968e5f8fd8de607f52221e45c291d2de8411b3d
MD5 51a8fce92482f5024a70822d00ccda1c
SHA1 60d0e57bec8dd7c2778cb9ea0738aac7cf0f3452
SHA512 99890d40e615239029dd461bea44db583bcf8bfc7597de70fedb46bec6762ad166bc96e415183041dc3867a085588b282a22fdb752b72387cddbcd872436ba18
SSDEEP 192:+ANFsiqgFAy3IpCGtkb9yBj6j/pPPaqpMPy:2gFACIpCY29U0PSPy
TLSH
T17D424A09DDA1AE3B06B643293CA77615B362176F11505C1F3AF9104C0BA2EB3D9F7B89
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/_locales/es/messages.json

SHA256 4af1ad22fdb9c4ca3b2e5d7ad0152fe1133501408b75a22e4540de91b8c8066c
MD5 b8e35320edf365e901070e7f128f3846
SHA1 a91976704b4cc6d699a2e3019ce9aa63f6080290
SHA512 5556069bc1a9aaaef6720299b1146f9ea0068ae888e290248a1485768912864f4e36816eb6a37249f502e5d5a3250dcc0835625e03c7c2d1d6ee8cb23c616e16
SSDEEP 96:TSmHNbp4V9NzWuWGswh6VJJt9AS2xzwO/enB80IKsw8Ao6bdgOMC+lSzJZreOz2:dHN25z9u/d2T/eBAKsibP+8zJZFz2
TLSH
T1E9426901CDE56E2B16B743693CA7A216F3A1075F2010980F7AF9154C0BA2DE7D8F7B99
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/_locales/fr/messages.json

SHA256 cda2fdf66408fcc0572086dbd1d4ad849a0f1fc8d106b7dd321f4e0ffeb715d5
MD5 ae00b07fb78dd6c0a0288dee9889c51b
SHA1 7e7ae729c2695cdc0cbebed7961fd8b572e846ee
SHA512 eeb78c7d3c8a497bb4812fd4f6410bf71820fc5d997ce635fad31dab557935f8141e804c6980ee892f704f43ff72db1bfd2e4c59f1793531f8c113836b36ed5e
SSDEEP 192:9euPfuQtnqnfmdIkT3KpGvzjjX6+R/QBOOWmW:yYufmdIkT3qGvzjPQBOOQ
TLSH
T13E42BC4BFDE1AA9F06CB43273E33F26A5571439CE104983D7E99280C02C9DF6A997791
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/_locales/it/messages.json

SHA256 43b4dbf9eadbfd67f15a4274eb879263fc0ee33b2373c0e494cc51f5f535e15e
MD5 fb7fb01a3394f202856ee3bfb517cb85
SHA1 dbbf1c3154c05c6b621141974f80406724c0961c
SHA512 f67d4271c5a4678c064dec4433259dfa55e7aa55f58b3c60a75da549a7c1a4e89112ee72e1fceb14eb64505f6c476efda6dad0d343e9934c0d937fe784bc361f
SSDEEP 192:jp7a5KqWPVRImAOoaODwcambEbpuFOratb3KJ:5qWPVVSDuMEV4Oob6J
TLSH
T162424915DCF16D3B15B643693C677609F3721B6F2010681B3AFA114C1BA2DA3E8E7B89
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/_locales/ja/messages.json

SHA256 6eef2f8eeb3162fa9c84aad624f84fb49560a03831beb2a452351e43f09290f4
MD5 e67d80fd6575f9baa639f30b02c5e381
SHA1 05b5362e86c278050b4e3f71e129b4bd501fed85
SHA512 1d87edfa2462faf28ec539e16c3df3cd0cd7b5e4d07ae8a0b6309452bb1914a457e58790fc528673bed51d47727eac94bd547bbd98d01490f8c8b1c450a4cac1
SSDEEP 96:vbt9L0Fvmq0cn9alw2Vx5AkA0h31GYzPxs0q0yVeMyHIf3X24fvcWd7GxQpLCZNZ:bqElwOuEQq/Dc124f0GjIlITc
TLSH
T13752790CDDE16D2B05B642363C5A7345B2624F5FE460282B36BD904C1B61DEFD8E6BB8
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/_locales/ko/messages.json

SHA256 1c3d772dffd9f5aee2caf1f4cc41eaa047718a1e3b1a001eea682c6b2d671f62
MD5 1d0c0d1d0e0db8d11d9638fcadf40eda
SHA1 1cfb61812066014a667f93adad4da97753fa6cf9
SHA512 2f76efdd17ed44e99dbfe7c848c383629466f6135fc707440be72adc902c5d9211129364f72863ea04adbef22930ee2042854ecc17c7d4dc04b879ec55454b6b
SSDEEP 96:20Lnmlou+29abFqYDrhg8Ude48y4gVHWS9wLBKgi2ikhoglwQxDj/b5d:206aPz34fwI2ikhnjTb5d
TLSH
T14842AE41DCE26E6B02B682153DF6B204B3A1576F2211181F7EF9594C0B619F3CCE6FA9
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/_locales/pl/messages.json

SHA256 5a72ea2093b78802d0086606174afa66ed574ac6c8ea888f851a0797a5c1179d
MD5 727f8ef308ab15eb134a50f12796bebc
SHA1 fd51735305ace46fec9b2f2b13e46f63735af7bc
SHA512 77063242f996d4171be1cea00a256031e2bbfad1f2b0da45e750a931cfe3f2e9dee3469e307da64deb6586c3b60f2e59eb623eadb0be8ebfd830e16bf6f39149
SSDEEP 192:JkokRd0l5MtqydKTFabPUhyj9194AI/5x+KunXuU1X:OzdKpaLUhyFtI/5AKmuUZ
TLSH
T112424B05DCE16D2B06BA82293CA77605F3A6076F50505C1F3AFA154C0BA29F3DDF6B89
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/_locales/pt/messages.json

SHA256 5091f122e60714f35dbcbb37f983af2fafbd52fe404c77aa78e69abdce1a0c45
MD5 00df432fac4927e42d6d094d7cfb8ae0
SHA1 a9fbc71223134270033bb24d3454229af9b497b1
SHA512 4e17f63d6d5a416eda8a53c5e90e45b657edf5ebc8d4aed37e3b3ffcf4beb26568ad6a45af703fb56229afc5918785e301196be55a54cdf8e2e9738e5a4b6039
SSDEEP 192:PdZpgbn/T9l7vEd1ltT0j8fbt+DBFIdfY:Pdc/T9lLwXtT0QZ+NFI2
TLSH
T10A425815DCE16E2B167A43693DA76706F361075F20109C1F3AFA164C0BA2DE3D8E7B89
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/_locales/ru/messages.json

SHA256 fd4545ae7c47a6e807bc74bf0e3579811ddf9b14fab4e4743205afa2eaa1682e
MD5 d4915408dd2f7596a51cfe8b42f28735
SHA1 c2fed4ca228073de14acc028f4c59730f67870b9
SHA512 7ef043ef009d836f237f00804d80125a622cf9a0ad2c514ca04abb2e2476ddd5a8c64c2db9a15eae79130d521c03a8697fffec82e3e0fd3e2fa1cde59b55ddfa
SSDEEP 192:hxopOFKQb8f0mv5sNwLToezIF97/Yz6eOicV7FKe:hMQb81v5O8tzdJ64e
TLSH
T14A62BE11CCE56C7F0176922AEC15BB0976E607BF36205A1B39B03C5D27F29B2C5B6B48
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/_locales/tr/messages.json

SHA256 557ad0a237f2a0e65468a00259bdf185540909dd6c21caf4ec01e61679e48e84
MD5 bf0b3290d7b2589d9c508a17c5244a9b
SHA1 31f6aac4ac49dcba742621d7111e621004d46ba0
SHA512 555db28e912f7a1eb0bdc77f2ec120012fde3775c9811cc4be22af0909d25c1f61c9338062f3a84fa208989a7aa108866c92a06962c7a36d42ae1caae857fd47
SSDEEP 96:/o9oJmTNCu69YKLtuQb34bJthPjSDID6v+iVcMgJVvBP4E0sauEWaxpX5A3XKC:YT5KAQr49SDIuHgJV1KHFXgXKC
TLSH
T1B3425E01DCF56D3F02BA43667DA66605F2A21B5F1120AC0F3EF5155D0BA2AF3D8E6B48
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/_locales/vi/messages.json

SHA256 b01e8e59c4590ccaeadfbffcf5b042fa857eff1f8bbdf9858091523122b06638
MD5 a794a3b13aca25db94a6f53843adb370
SHA1 bd439ca29d0b3255f00757d4406056c0b40ec3bb
SHA512 778ddf3a750bf7dae8dc1b371c39a9a73b8536f86b237505556cc52f22941c6138f285e110a5e9050ddb73f7c756f23158e38d0f7a9bb2a4b63c6282b77bc4af
SSDEEP 192:vDA6IMxCb6kSKrk03+4Q8W8pQfZlraoBMJ2sf55qlQ:vLxCb6kSKrk03c8W8pYLaoxCnuQ
TLSH
T18B528B018CE47D3B01BE43397C6A6609B3E55B5F6190AC1F3AF8155C0BA1DA2DDE2F89
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/_locales/zh-tw/messages.json

SHA256 477f0b1b154f4bd07cea22b4285167ee5985b3dcc7285341f738c8eae5662138
MD5 348051345b75fa1f8d49015ca5b5302f
SHA1 5854388eca2bc878218c8c7e62045c3e19cc9487
SHA512 facf58a22085ea6cce5fc98d1c2501dc97db52f3d76d610737bba0ddcbdee35ac31bc4d8011f6457bf1d07b55109494e8d25e0b936b6b25a38eaea3597bf8ef4
SSDEEP 96:IDHmAvreV9Hi0Q/fg1ePhnmU2KckmRbbDHukFDRnk0gsmZ5B2:PAaji0Q4M2Kc1RvbvFNk0gJH2
TLSH
T1D4324805DCB16E3F02BA42693D666205B2711B5F1060AC5F3EF5654C0B62EF3E9E2B89
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/_locales/zh/messages.json

SHA256 882d4b1976dd5da8cf82700f0eaabe8a7197358bff20ce5b8f78e6c8454f7d05
MD5 ada2db2ff9691b5cea7072f674417a8e
SHA1 32a579feeff4948dd90a79763c9ef22210953200
SHA512 28bdfb16f22cac5ca226a1d80f9582b3bb6ccd39798fb168613538e3fd0a3543bef2becdf136125b229ca06d73a912bacf08ce2ce2601de9a7b24ece5c6481b5
SSDEEP 96:Z3mAoD6V9yJxLljPmghdDPfcIfb39bC4toTbYFbLxPf1R0:EAv23JL/fcGTM4toMPb0
TLSH
T145324605DCF1AE3B02BA42293D6A7209B271175F2150AC5F3AB5154C1BA1DF3D9E2B8D
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/assets/fonts/lato/LatoLatin-Regular.eot

SHA256 c6c970b103b3c3aa83f7a45172619a4451ea5f015f9f3ef4fd08c9a4aa895cbc
MD5 6cfad5881181ae658a6efdd68889a690
SHA1 5b54f6ccc20ed3a078fbdf94d7a68ac80002624d
SHA512 ddd3d43540eb3d4eef48d0834136de1e7bf23a52f286d0a666cf57c7d685aadf1cea6d37c88f9d7ce5ad6143d7c3213f54b16a11f616b7dce154bba50997bbe7
SSDEEP 1536:Y3UqIyK9PLLUbTiyEl4u9Iau0j6aEPmFm/MsE+Eas7AdCtkUq:EUqIyK9T4bTiF99f2PmFm/PpEL7A8tkr
TLSH
T12263F2C483FAE84D52672BBE88055620D51B34557333E8F9FD76892B8C6AF8066E1337
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/assets/fonts/lato/LatoLatin-Regular.woff

SHA256 9c46f7929b08c87518aa7efbbf1601e485eeed829f149e3f01beb50120cdb3be
MD5 586ec8dc57c264cffafa044f8603e7bb
SHA1 1437242617ce9257b6de45315c11d10f8847b78d
SHA512 0d89a93b0fff118023b422ef25b54dc945e7f9324fbf8df4a1a867eac1cf1b47de09f118662cc429f0ae1d0b3d5a3abd7dfc81c817be80f1d01db3f0a6494d83
SSDEEP 768:4/h9yknndta1jUYKVkQn16+qb37ErIxaSwJxBSJu3UF5REHaMgVQQQQQQQ35SAED:4CGndtyjOkQn1lTrIx73yHaNCS4K
TLSH
T1DB63D0E17273768FA137D0B73212B279AD77561299D063038062F87D379F8632E8561B
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/assets/fonts/montserrat/Montserrat-Black.woff

SHA256 ddfea34e191867f7b9e0fa19d35dbabb4951bb0de75ff20b3cff43f9f961fcf0
MD5 2225a642b9340e250cee8676dcbbb033
SHA1 8cc27779e10bb71829f2472a20658d1d63e0b58c
SHA512 1d0a89ef7db05d063c88e5c4402245c385c639192deb101f1635efa7ea46d49147d4fdeaadd7043012fe09a15731701fadce1b4c2f18cf2c9f7f5e97f1544e11
SSDEEP 3072:BqaBGfyhKJfXre1V+sal0NiaV0FaixuH1aG:WyhKdre1K0rV0huHgG
TLSH
T10FB312090DB85D19C01A3F796152A72650B4740E4BA7F4F6F37BB97CBA041EE2AC06DE
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/assets/fonts/montserrat/Montserrat-Bold.woff

SHA256 df4e049d933a5be9949549581b205ec296b105589fa853cc51292adddff076d8
MD5 f20f5fc1c9c94e6017b42093b8e5ee58
SHA1 d875fdc36df142dc70d765c7f945a00b93bfd736
SHA512 4d340665668cf21853cd8b705c8fb97cf2f36ac0f51d0e565f2fe1cc48ea555c71a79a97b996fadf58436378f2cee3835ff85c0033a5de37ab99aeec08f4b090
SSDEEP 3072:V6fa1hptdfAnYiGjuUPPVgIt1gszRe+m+uKwRvG:Sa1hDhADIzP+It1gwRe+OhG
TLSH
T1A1B3121122B2C213875C78FC2AE9975373E2E55A80A8EDBBF356CFF542141ACCB57066
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/assets/fonts/montserrat/Montserrat-Medium.woff

SHA256 ad8f52c4309164c9d7f32ce948eab5f447985a7143cd7dc7688861eea757108f
MD5 d84781735e74acd4f580568ae76c7912
SHA1 7e994ced9eefcb166f4a3d96f2a6119012d06d97
SHA512 306a2c8805d14761efb085fc47cb177146230b4704841088950c866445b43a91ed1f0e84f5bd4e2dd17652fc5455da5b202461fb40acf14e3ca00aaa036c25b9
SSDEEP 3072:K8CUHjSfEoasuqtXOa9j16/5PbiRVMD1PTG:dCUDAWqDooRVeG
TLSH
T139B312141DE63D1BC86DBA799BAAB3A093BE16D847B1D118F6F4D685413302D2CCB3D4
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/assets/fonts/montserrat/Montserrat-Regular.woff

SHA256 7380f7e1292ea1cc94812ce0d810a6701fd7ff7db6d55be737ed150c9fd5bea7
MD5 f845731f0912cd89d37099b5f3cf8f40
SHA1 bcb2d69aa1445166812eb40bd10a35f199a4edc3
SHA512 34d76fe7f37f181259eec92b204b417014481ca750f0e57bf5612c38973c9a77a6916eba41215192ef46030cb5dce95b5818bb6fc55fc69039d339a9eca1743b
SSDEEP 3072:9gVvuZ8+0pJGcfJ+bTma83kDwOCaPHCAVg03+XIG:skrR2J+ba38wwPiAVgaG
TLSH
T125B312969CF85BA3CBA86AFDA710420891C4BB9A473091F2FF47D6C6175C2D90D01B7E
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/assets/fonts/montserrat/Montserrat-SemiBold.woff

SHA256 283c759c223b45a6273f4f4c34ce55a0ac606978d54d4fac5d8a3ad16216f2ac
MD5 13be84bdcabf4d49a7e005e1ee33e8d9
SHA1 7b04eaba391b93a8c7b0f5f7ee51f23fed8419c1
SHA512 e7d96cdece6483a5afb9aeb4ae311ed20848cac07c80123b96b4751741ffb68130af6264d85cfd15999d84f7873ad196aa0010acaaf044b507dfa19dec6145ed
SSDEEP 3072:ixTaqcfgqiLLbyGJxbSj3IQ0/urefg3ezRuw7zG:i5n2ULOIx2j4Safg3dw3G
TLSH
T107B3120B4CA15A46E56E3EA4F86C6708833D72DD4CFA4023EB22B4CDD6585FCA8961DD
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/cmp.html

SHA256 6c21e8c07ce28327dca05f873d73fe85d5473f9b22a751a4d3d28931f5d0c74f
MD5 d7b8b31b190e552677589cfd4cbb5d8e
SHA1 09ffb3c63991d5c932c819393de489268bd3ab88
SHA512 32794507a4b9a12e52ceb583222cb93300e38c634a72ea3f51a0189127aba60cf476fb7918942355a4f826185d7071e876cb40348ba34cf5d1ca7e9546ccb310
SSDEEP 48:t9rc0/GLAoShbEHaLKNGiNQtvmolOGR36tgtr/GTvJP8AscaV4LiMt7ByBZXGz+p:4VLjHa2NGiivmmpWsBVutFwAk5vSG
TLSH
T114B1EA1A2D9924690173F3380B6BA204F72AA1A72105CE053EACDE513FB152BD58FFCC
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

$PLUGINSDIR/app/css/styles.min.css

SHA256 610963c91f15e9f55287a288a85c993da11e2dddbcf361da67a7a2da2dc06bf3
MD5 4d46269bdd74d65ef444a25f2a267b27
SHA1 cf352070b40a9bfa725920e2e5795f0f8b0ff1f9
SHA512 ec36f89bfe83d6c78a022f450d3c53f35659235f16edb71f3230a0904e51d9a51c512e962ff786adb23a073fbec151693a5a686e26a3cc48e94771ab16b59b24
SSDEEP 384:73JlhPswS3FMev2v7JgjEc2asN1vnYBgfZZ6:7OwS3FMev2v7JaEBa65nO3
TLSH
T19692A721D236202DF63B862AB5D1BA5E3035C513D6635A7EFA159674C6CB0872F13B8C
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/game_detection_database.json

SHA256 f1c9a0867ee544f27d4fef2660a180dca0cdd355eadcb8a160dde64e711a4bf8
MD5 4fa59435796a04c511f7ef19538c99d6
SHA1 c8fdb37dd7fe3660a90c3bceedb9e0a085c757b7
SHA512 68dd49c5bf20417a4852d71056dba312a2852eece7ceaa3bdcfd2b8671895e86868e46a4602e5456f0ab74bebfaed68f7194e21df141977c17b3e1ddac00afe6
SSDEEP 192:1npXvXj1ZAWj802H5Nxji2FDF83mXqdEzzohblboUWIsv7a7svfxF3L3xjQ1uwN1:H/O02ZNxmxlQXs
TLSH
T111E27156F671882FA4F66364DE594B5AFBA4436F10C30E0739BC904CDF3698B5006BAE
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/images/big-icon-fallback.png

SHA256 46b318ffab431aa7f0559560632c0eca28a0527fe9ec766e947d3b49708e3de5
MD5 435663128120e807ec9c33d5b277198a
SHA1 6de278d5f8850da54405fc3a444cfdf8054f6a05
SHA512 97cd952ab6833cea217ea6b5f5a83624f4ae1311ac0c4d66f2bb7d61a6c224b7cfb6205074e008ea33aaa7b82474fed4230ec3f4f8f085e884b716ee992624e1
TLSH
T165E0F1E6C780062F895A682F6493B98825370AE7CC30387FBE94E0245185395D2BB551
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/images/bottom-arrow-hover.png

SHA256 26cdda24dbd4efae0868bb7bf71286bf999d506470f766a8ca0f31e2a3904a2c
MD5 5286c95f01f9ea6cc91674f88bbf49ca
SHA1 5e8142a6d698a186c47755afefa76391e0a7ac15
SHA512 2e540ba32db8bd5412200c171698fbcfbad536673512c395fb4be54d115c5ff8db5284190b6529aa00872e4064a061bb2f2613cc1c6e93a0827dc9238e7d3183
TLSH
T156D0EBF776275C3B0E1C0847507986A3943B88F70111AA281C00D490C2998C5B1833E4
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/images/bottom-arrow.png

SHA256 4488cc42802621e09102a90b83180196976b14ccb4f7f4270596be8001749c87
MD5 cd25d5daee303f8bf23a3079a1a0a5fb
SHA1 6f3747b276800c298a3b0341d540faeb728104c5
SHA512 e6e0eb37d488ef42068195d0b643b6fef8d44210ba1aec533d0bc3e9ce5c69cec8d467b5f2f7b1d83ff40f26442eb9bea60c7bcb8f390c060f4b1dd1afb4bee8
TLSH
T109E0EBF6E7600C3BF00F0A76817FC532F16B9ABB11D210069CA0F8600309F148ABB286
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/images/bundled-cri-bg-fallback.png

SHA256 453e759fb9af22ced7a824838e0ff9b9f7e757978483e460ac57a7b98d51bf9c
MD5 c05aff8fbae3345d5639b8a6c17b22a4
SHA1 c851a6d694b8567f865c4148606441ab5aa3407c
SHA512 9ec7f6f21c1c2ab5e5a66f3115fb7466a7a1ff15fa7fb6ad91aa1cbd12f397694df60a4865c3ea9cdc926146f7913eb3ca211515374579dba8dfb8f619bf5325
TLSH
T172E07DD652E2CCD5C1A81BE223600751FC672918563405921B0D724DB8FD13B6B0B051
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/images/checkbox-checked.png

SHA256 fc67178d51fecb20e8827e1204100f65897e39818a38dbedfe6e9cf9ea8db12b
MD5 f3c865c9fe47e701a38d6a4b29a50aeb
SHA1 d3ddca12bd7fca2bf3a3f06b6c797ea6416acbd3
SHA512 1c2df3a43bbc1dc90e7d5a2b6a3ccdf295c7ecf9199b0189bc6a34dcfd37fdcb3a9a2c273bc00cb579f655511bc7597c3f114f9d9c2a1b628e1e8f3de7b2d327
TLSH
T1C0D097C5024A0D3A520C1263A7BA2002ACAEA91C2B03921CAC326428010644042912A2
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/images/close-hover.png

SHA256 83fff6ded423944d0d6d044437f82b5509a24ff16c034ecc5d6169ca3c61c383
MD5 0ca9c12a07f04842507753c785151283
SHA1 a476853326ea9ab6155f5a1fc86533cfd24f60ce
SHA512 8d310c96af1e2c5ecdc571d8f25cfed9e5e292cee35746107a28830e78a1cf68b65bb35bbfba66537cf5c38d0ed0b358bd6c9bbd4676cf42623d00c0d4b5cfe1
TLSH
T1D3D023DDC75D445BD61CD4BF82670112B55F1D9F053C600CE9146430147544D3D47391
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/images/close-normal.png

SHA256 ced445f13824aa3e0e130446dd04865e27c2beb85d16179a9cf05f76708ecb84
MD5 c6503858e81b5c797ef63e551b9e244a
SHA1 1d0b949e6cd21933bf224ea1e1b46436c021735e
SHA512 1f57824aa23cb02ec46d5f03ee0db70a7938e9bc0f6fbfada2fb75fe35bf804cca4d553818aac5bcdb0f89a6d001238b35475fd0520288e7cacc9be6516106fd
TLSH
T1F8D095C3374E586ACC6CA13E239E31C4596F2C5CC0F552057D442032DA383801395FA6
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/images/header-logo.png

SHA256 1e1a02ead151269cf7bede5b5b7adc45b05e983bf16e7b4ab2d1173c16bf5f0b
MD5 815f85c50c912f92b38526fa92307058
SHA1 f832b2d04af017c7b745e6ed253c75794113a960
SHA512 76572ebf6edbcb71392d25e689ca96d5f90e6bfb8682e4b438a089903439b88d39ffab95443d411d45645ecf02844cc6bb5efa3b3e23b5907ef1f2a41e410943
TLSH
T1141161F62CB2DA3E0D6E07B8421604A42727DA7616514688ABB37C144020EA1B541755
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/images/icon-fallback.png

SHA256 772fe7450824cb84dbcbc9cdb401278dec1a511ca3ae2cceb073e8bf4dc8fa61
MD5 3880ad80fd07870118b0aeb8fff308d4
SHA1 37b30e87d89d3bc56eb5ca3f8ec6c7f22e5ee6a1
SHA512 3917e7b6623f284a0378702e489a5131c3ad328827a87e1332d24a89d6e54d68e7dca3e5bfeb0bb22fe54da1572d2d8a9107eec8f36b9ba7db1f50c0a5205d8f
TLSH
T18ED023C63B5C08BB4B0C087F46FB05112057393B40704C084D20C03301B0A60A90B3C0
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/images/icon.ico

SHA256 a71f6f953b52f06c7bf635e542a711b9b51cee2b0cddeeea29b122fa7458559c
MD5 2fad08e4f4526267964f6949de4e3e74
SHA1 91b9a94388ae3406ac57f72a4a16e50fb3e72d92
SHA512 df0a28488c2c6c276687bf04214645323b71ae4c50072e6c882befdef83ab367363acc39552ec43c90426826b507fa57c09d2b5982ab967db8682c4e5ade320a
SSDEEP 192:PmJMMMMMMMMMMMMMMLHLjcEMMMMMMMMMMMMMMkRi7imhP0zx5JvTczAawqRSuS:eMRimCUx5JGANV
TLSH
T1B282713E21C84AFFC19E3337817A656E6234FD1F7B68332B74843D9E86C466A9055283
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/images/large-logo.png

SHA256 465a29a9e00705aa31500ed1dc9cea4d2d9d62781f81b9d531e1f65260f6c69b
MD5 8122a52a914c6fe1a1c536c43378db1a
SHA1 6377e01ba87e6e4177d261bf4f63b8123169e554
SHA512 a0a9498e529607864a2557d6bff3b9497dc203898d711dc20d397f3f0f962f9d88d54e247e3d1c0b4a2ef0e2dab2bf60a18e94be02df49a2025380a29dbc0067
TLSH
T15DF0DCC32B028648F6179C61E7A057E032399EFF11118A0F1889F521DA336F92588006
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/images/minimize-hover.png

SHA256 6e66b6818e37e154fdb40bd3d3ec6d4ebee5a0766076d5ff05fd77b9d72e357e
MD5 a705b18c8e3ca9e4449893859dd42881
SHA1 25f338ec389411a7ac2708f0adbfb2f3857f5a98
SHA512 9203d472727a8ffa055059b1f5c7690ebc5474c0639622cc034874d2a1c28acc9f4fb339558bd08f375774ee7beb478362264381376edfe9cff3103ac6bb59a6
TLSH
T1AFC080C557551879D0185576125B064558775D85181111093D11F85116198845649361
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/images/minimize-normal.png

SHA256 2bb07ea586a9375205256a96a4ba0118de0547fa4a935d293f2be3965e701576
MD5 c5d6fd1e224a5a5f2fab29cde44f90f1
SHA1 2ae4c72421c19de84bd7d37adb6fd93b0037b4d2
SHA512 c2fa4f08ceb1e469397871d134a9abbc6b64d32f82d979e5a8dc94c5d75421084285fa11b16fa8ad90b0ab961293c8e6d11afb58ec86d65616641cc341e77990
TLSH
T163C08CCFAE5048BD842C862A229F05E064B72DA90022314CBA22A851242884023C6361
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/images/more-info-hover.png

SHA256 7450ef57e4b8e5a0249156b6da90667fa9fa99fb569a303ec38cba57a1c093b5
MD5 ae19fda52575d20f152a6643ffe8014e
SHA1 150ad6853a7199908c530a9036d08f3493462835
SHA512 8c4dfc3ae87d7d55871f6f7164bb080a779b5f8be499459f98eeee361db60b595e1c80b89d3bde0c98882940a561b9b2ac09d0028f4bc169068d27ccbb31d14a
TLSH
T1D1F005DBB15C3C2ED575107BED098078C43B0F6E074B625D971845A6E5058B8A327379
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/images/more-info.png

SHA256 c0ae0cc0cbebcf666a21229897b9c766e34f911745081596000333d2041f66ea
MD5 fdf8010f70f01931edfda9da35ff37eb
SHA1 f12838afd69f5b1290f098990c5f860771f3b05b
SHA512 4f8a7c7d6d1832bc2a862815d53865c92244e6a7000d8b11fd92b8eaa2fae756c4a2fc9ebb50054a722bfb93675e26f957b29365608351b99184ad8797ce3a34
TLSH
T192F0C0EAA77955F1860CD97061AB4229CC0B1E25D303030959D4653338634C95A0B5D6
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/images/ow-md-logo.png

SHA256 8de2c2bcb72caeda6eb93c3a8e55fdbb835f8c4a39f6277c71fc44f22fa969c5
MD5 07b13528d8fe6927ca4ba53556efd8a0
SHA1 92e900109495608754dc84bfd599c8865c7be502
SHA512 66886f6a535cc963a6133d4962948a32ad53128339d3f22cb16d5c55260f6316f2b5e9205d1d45620828aa227c10ec7d5a6ecb056a2ff078c87bd664e691a0fa
TLSH
T1BCF0D49FB735B6DE824ECB2B19674194E177452301090119FCBEB01D0125D1C5757293
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/images/plus.png

SHA256 7f2a42d5477cfff7e267452939a994483d7dea694045fa1f770afd7133b480f1
MD5 761c06890a85cfd65b4c17ed26f3db7d
SHA1 2bc23e317da5f136c1fe9b431d8c1d2705a540af
SHA512 083e177cd1ca4e5dab114c4811e365df1884e541504efee386f6a4534fa75136736ce4de0536bc90180ff78ed6d0d6a6544286686426c5735ca93bb0220fa910
TLSH
T1B7C08CCEBB09ECBE852DCA76866652609427296E41C12804BDA5A42C281DAC4855AB92
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/images/progress-01-overwolf.png

SHA256 4da28ba55f43cc1d03d5cf1eeb040985d3bb5fd2a7230667c871254f006c512e
MD5 3d98876bb3f09090568aa3ef90a84dc0
SHA1 5f98121ef031920b8c8ecab21435cc64bd531c19
SHA512 2bfb612a6aa0061f123e8d342ab4d049e2f38b2c111f2662d4da8c8a22a73893c5d9743a337766ff2e6346cb04ef2b4c63ea72e5e749b34593fd372889033d6e
SSDEEP 384:aOTXx6gYKAzHwRSRJLrw5NsgRCc7xXWMvgu8kz82H:a8Afrw4gj2vP2H
TLSH
T13242C0FED2D47460C4E7BE7E68A62A53BFFEC82308A13795E61CAC281DDB1255444891
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/images/progress-02.png

SHA256 130eafc5dc7ef993134d0bcff40bfbf11b99d41c63a5c6ad1d70c7ad4db2a5e7
MD5 3781b597e18900a6b779ab588d8a8e21
SHA1 0fd2084a62f507ec802646f7423c9714ba547d7f
SHA512 22f2cdc6cdd81503d48f8f23c84abbd23c6c9e3a137b7e4e91846823d957abeee348f4e3cff88667a263503ca310d80253187d699f733975133d08b5729e647d
SSDEEP 192:5H+KSySpZ21z6dIPH/tRtif8AqGnKWAiGufSzjmhgRjvvEOmbukJc:ZLSJZgz6cztmlqmdAJuazjZvVSRJc
TLSH
T17E22C0B761160EF5C158613BED44306C58F04D2CC21DE5DA393EF178BA4C1693BEA48A
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/images/progress-app-image-01.png

SHA256 032335dca37195df73cef1fc5f019bc8705284c3226dbdd54f81d61b714c4915
MD5 6276c4f73df3a91718a12878c63dcf24
SHA1 a86fe5338c78dc396f680e489766f8186e6cbe81
SHA512 11a4e465614e65a04e72b5d6b80f0c5643d51757a06595168894d3e0a419bd68ad31152221a22ec1fd6db03c5c159d31aa5054f1f4d8c633099477afd6f92607
TLSH
T106511D381149BD39A3FC7A554B7B867604F7D3D4141C240C2C5E4989A91B3BD90DF4F5
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/images/progress-app-image-02.png

SHA256 9363bf7bf35a32278d95b8410bda989c63d9cd09fa17fdcb04d93aef1d433b3c
MD5 9626ec7a1330f4fa65abb37f08ff6421
SHA1 914801589106fec21ff3d7f5673aa035bb5bf129
SHA512 f43caa916f385158cb3a3fb20193a80ce8ee84f1063e6497fa0a9265dd28b8983750d0c44006936aefb9d6b16230d92105bd344707bda8d55e3283b344ec792f
TLSH
T196412B3657947F783999C79A74FC4632C4C8C8969400A0941C9F1BB5BB11774F2E9CD9
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/images/progress-app-image-03.png

SHA256 827f9bd53d624da1397e0f8d3a68fa96bbe7146b74f6ea8af5cd6acfc3839cd5
MD5 38ead88ccac4d4f8077e265aafc186bc
SHA1 eb3c2de5065ab597c8e9799a3c31487545ce4828
SHA512 a473af7f5d1dd87a670b1d7f1c9e34d66d7bbc77647dc72d540acf97e1d296bbaa59469663354ae4223423688142d6d828e35f571d37bd7ae813274ccfcec519
TLSH
T1E73128BA0029BA291535FF9D983704E6A8A46F445337C15F2E0AC834D0C3B396ABE582
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/images/small-logo.png

SHA256 0ee19b8f79232886f6234cc6dc21c0327e90df94a189c5effe1d8a6444543726
MD5 ef0803e881fe7bba90e5e9ec1678d950
SHA1 43e9ac35b2f4bc22e404bb2362eaa7bfef24f9bf
SHA512 11c6126429f4fc3ea32edf6132dbad840a1df35f58237c8730f5171c491588425190897f4370545bcc4ed4d42838dd95a2789a3b6ca20cf8cbc7bef78472f253
TLSH
T12CF005DA3358D13A475B536CF61B94489C770278EB11915C2B11E532D342B9C1186AE7
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/images/tile-fallback.png

SHA256 d173d88df0d31e3d4f83b299cba4ec031dd286dff2f963e58d747617649108a2
MD5 0148cc4040f730247ce079e723fc030b
SHA1 ee316fdbaa54a7cb5cd350adc4919787e7edb63c
SHA512 a441046265ccbc2e8e25bba5e10a46d65f28d2a9100ee12742e0ef5da943461996cc036f57031ef6c21fb0929ebb941e27874a08e53677e46ea28c097136cc75
TLSH
T1DE11DDD96F0C7EBE89BB6EDF006EF11C67245E34304B2A176142180616768CC0650BE6
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/images/v-check.png

SHA256 af10225db6ff7d4b67d00b12f37b211c1f368bb99ae900856b023ce5999dc9ae
MD5 cdd7415f59e5c003dd5956b971a3cde1
SHA1 89a3cd6591cd66fde5fe389a216272cf11d7696f
SHA512 bf36f6ed5f9a5bd9da0bdcb0baa03ad73e12e4d30ef64752e14c307280825e994deee50c5436f683048711104634f0410684188d47f5698dfe5309ae4f55b2a9
TLSH
T18411B3D9CC2822ACE0DC4E0ED8E3E46430A67F2B4BA273326E582C9A808488485C7770
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/images/welcome-logo.png

SHA256 e18add518b697e4c6fa897bbe528e6e142fd0f350c31e39bf71894fcc833c3ed
MD5 d477c702a6d114e9b251a8d5a754885e
SHA1 49ab31614def0a24869e9e61deefd5c0b8e72749
SHA512 bef5296cff23dbea67dc21914c2f353e6d74da630324ae277faab1cccc375805b3ceeeaf557e37647dec8ed6c8f1a7802f442b448b8d4e19320cb30df8728b8b
TLSH
T1FA0165CA27E189DB859E42BE43DE20060C1E57187541909418640124F2F4BE42F45780
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/index.html

SHA256 a01c397205cd5c244d251e2d45c4ba0defaebb65e46b19dd41c374aa57845609
MD5 5e1eded62b16e51764c2caca1d573cd3
SHA1 aa0a80b807e05e221c3a1a9d97b995e999afbaf2
SHA512 8cff142861fc840ac516a146ab92ec6c09ffc45b7a88807e610c184e92d105e0d035aee81b4a3e268809a762a60200d712b41b6dc7e43e46aada1e62914e4475
SSDEEP 384:H3JlhPswS3FMev2v7JgjEc2asN1vnYBgfZZ285+mppHL:HOwS3FMev2v7JaEBa65nOA5thL
TLSH
T118C2A611DA36102DB237462EB5E1BA5E3024C117E5538A7FFA5C5A35CBDB18B1E13B8C
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

$PLUGINSDIR/app/js/app.js

SHA256 80c73fa054dc523403bac4ce9cb4b80243e4d8d768e37e0d4d9e2fb0b26bf8a3
MD5 22b5a0e6b59bece1ee52d613b2948ea6
SHA1 ec174cbd58e227e7ccb74ce0c287a4b4defccd15
SHA512 589df0bbe16a959e184f2c30999f366477f71dab5b24013bb91ee53080ae1409333d117befe3a3ca5e381d9011c4ec2031874441cafacd358e729eca8ad8a55d
SSDEEP 384:4X+ycDQrczkyKdLGb9pBg02wjI3A4nzwF52xxYRifG6wBEoR3FGHWdeLj8T:0+ycDQYITdybKH3A4nzIAnGifG11R3Ym
TLSH
T171B2748E96791228E572633DAF1F4A14FB32162F15058A273AFD45C14F714128297FFE
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/js/block_inputs.js

SHA256 f8dbd6793b35f7a26806f4dabad157aaafdf6d66fad094b50c77d60f223fd544
MD5 b5b52c92b90f4283a761cb8a40860c75
SHA1 7212e7e566795017e179e7b9c9bf223b0cdb9ec2
SHA512 16ad53ede5424ca1384e3caea25225589e9eec9e80e2d845948802db90fad222f709a7b651cd7601a34ba67a0627433f25764638fd542cbd4612871308e7b353
TLSH
T14301D2D864D3A87A597DA328536BE748F7391964905A1054F0DC8C64BAF003BC16EDFD
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/js/libs/cmp.bundle.js

SHA256 039d5d4e442cc360b6f54923c53cba5432d80727b8d614a3ee99f7c70307bcae
MD5 48ccfc31db67a9e9d6decd5b18df96f3
SHA1 2086877b894bd0ddec2ae80dd853e47fcbdc638d
SHA512 e369682bbba708ea66797024bc2885e85a4e2b4ac6a4005cc648a7a81d8a4b1c3691c5484408bbd847c40ee80d12e72c5d9722950da020b284843c10d05d0963
SSDEEP 3072:iyUYM9z8F+GxPMqbOISP88WEAtvgnnhLCVJkNO7Z6BEFltnxKg8rq0gU:LrF+GxPQWEDLmkNO7Z6BAly
TLSH
T13D842B8D7991B0E617D722F1802F900BF33A6458784CC490B660D8F1ADF96AD927BF6D
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/js/libs/jquery-1.10.2.min.js

SHA256 bc44d3631ffef1df7960e359f02002d3ada45ee05205c2cf1edd85da2f518144
MD5 44e3f0db3e4ab6fedc5758c05cf27591
SHA1 2d408aa1d35661019c95adcc60b78c0727ed25b4
SHA512 4d4844e53e686fc59a52e86588f328dca3ed6fdad7195c58942a98c51755a24981b903ee7c7b27785375eaad5a7d9501cf74b999674b79f214e66103bad9efdc
SSDEEP 1536:O4mCgi8DyCuXXFiJ+L0kJQsJVPEKuQRZdC/RAfDknv+p0WzH/Io9Z7qABZnu0JFV:OGsKYAI2p0WP9bDrJ7fak
TLSH
T1D493F8DDB2D1B06257BB21BD006F540FF236195D280D8850F129E8EABC74A499277FAD
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/js/models/notifications.js

SHA256 c32495d55eed52f47dc7268eeccb90fb6bdc5686135ed089416c6bb8f703a578
MD5 911451f65b2503d23bc27c6a6aa6af72
SHA1 01d3654b23ef7f5adeb4097bd851e8c100a7b2ab
SHA512 06edaebb0bb2980a7b6d6baa31a9c0894a9bb5f14a91468ffb8f182d98f04bb811df2a4c37f0b56d612603528aa21f390eaa7cf885874ae770a24dce2f9b249c
SSDEEP 96:sOr8u1s9FHYYdfHsW/GZwzpJGf8mui+U8QrGjqTxoOxoYsdfHsW/GZwvpZGNjINU:sGu9GYl3rNQ8K+JQC+N5Rsl3rxeEYIo
TLSH
T1F5C1AB5F90BA00A7057293A819370342FA5753AF49408CAF737C5EB40F311A6B4E5EDE
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/js/utils/analytics.js

SHA256 1b7a51f60f9104c8790dab1556e4ce1b31e89372688e3e179f1d8c50a849dd21
MD5 cd174d47c7d45655226f17acb386fabb
SHA1 b6c91ff15f297a59a95d919e38482e10e3b92a1b
SHA512 61e46e4d43b02431145d9b1c3719a2ced4d215cf8b46110f0c4c8faace1d4ca4c19e75a08c17a2672be403ba4dceaa8b5d7bf94908c2f58fec3e28f92d9b0126
SSDEEP 96:LlYkmHqqVHlnZ4JGvt+QP2EvVkuko3sO2Ld+gObNSPgPgzauV:AHq1GV+kodNObNSPvzaA
TLSH
T106C18829246A719068B373B68F5B1519EBB117233144E9223BBE87416FF6D02C693FCC
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/js/utils/commands.js

SHA256 cadd2cef20dfcc04296d9cef6fb747966eb3d059d5c0eabe65607c4094d803cd
MD5 5987718e473fbf0ee77eaeef1c9bccd2
SHA1 156e240876de09d7813f8855610d90140d5330c8
SHA512 0783dfd010da0a0b0eef36fec23f06fed6d040dbcf1fb78afadca8bc79eca83558a36bbd7e1560042a5efc6bd1c0c15b13e79903fe15fc570ba3ab6c9741b8f9
SSDEEP 384:2Ur5HB8cDe1uUvULQq06W8tusv5qEWOnvAUF:2VTsh
TLSH
T1A962CAAA68A721651933B73DDB9B4215FB33083B11465C107EED86917FF6802C2A6FDC
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/js/utils/cookies.js

SHA256 9d3cb3822e20d6f5157faa02dc69bdaef44576c3fb5523e00aa152107ce30287
MD5 6c60e675f8c8c68c0174b644d3a63a2a
SHA1 3635a3fe07ccc4a6f33a986ddb690522d0611abb
SHA512 1dc9ec7b139bcf37107ecd673c01e4fcc606332ea1645a4a1b4e5d95f817d4c99d5964cd3d941a6a526689341d9623b17b4efc002cdf4c73404299d52b1be452
TLSH
T17721E0087580D81EC5725739AE286778FD30992611C6D54DB88CA4F02F30C169DBE9FF
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/js/utils/modal-events-delegate.js

SHA256 267661f932a2ea78d8c7a98cc03d1b18d7cb8132deb84636772ecd1fcfbe4857
MD5 117e4fdbdb0ecf211c8bd909efd337d1
SHA1 9f8684d856b7c95bdffb139217dfd89f41373187
SHA512 f474ee20b59d3d0c11f9f6aee6b6e2b66f7025beaec9841f88455e60533dc96cb4e27910be0dae92b0028c5578932b7f459fdb91d594ad010f72a3b3af6addb1
TLSH
T13C31D54D36FD173AE5B7172B5B2F5F8CAB72120B09054A26B2E69A804F354241196CFF
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/js/utils/strings-loader.js

SHA256 96445709fde2613af50f4b8908296d4bfccdccb2d9db9febc34a9bf4dcc70ecf
MD5 9c94eb933d8a43dd3825e67a7e30c980
SHA1 7ec7b16af6f399219209ba5967d377040486a11b
SHA512 a662a299e31633f71a9b9675970359430fdac06dcc284fd7ce92919f244c7f921639f97a42356e993a95865e6c9f198dcba82c126f82065bf2009a31ec9b02f5
SSDEEP 96:FXS/WSBWlbBtDhWFTnTeWsNkEj1I/6WfwkUlx416moPdXDKP8j8yZrME6:FXSuQwBBh0nTevNkEj1O6Wme0muXDK0W
TLSH
T163B1FD58289314118C32B764CD935264ED6A4917023996F3FDEEC2686FB149E82F8FEC
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/js/utils/utils.js

SHA256 b4f0c48cbfeaf8141fd44b12031e3f0410cb0cdc313888ffdb14fdf1d2341246
MD5 a0952ebeab701c05c75710c33d725e7e
SHA1 1da8a2e889f1213d481ae3cd5571670c01e64adc
SHA512 5e5ae616d3fded7d2bf47a326242c4477ca3119fb52897bfb41de0be230ccbd6c3da2c00268b3973e9bf7b4f2886aba64fd9719b448662e4130ee66d87913389
TLSH
T1ADB01274B7AC73A2D315377AACBF6C1DF0375C368414B099B19034E19572D04519DCD4
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/js/windows/cri/cri-controller.js

SHA256 051f1d8fd41a0e7a6727c628885be179fe3e390c5b431b18a03911fcc710c601
MD5 222a3efccc749b1442f012aa64757753
SHA1 f0f13e5e3e3bda57f0662032c700a6bcd4aee807
SHA512 292e0413dc9f821b934ebeaa988a6b9cac8cf94053af27e7a01cc47f9e99104b2f5a7ce250098426a9400f3cc188efa3f3c1c79340e959114454f5da472b14b3
SSDEEP 96:u6CeVFfOhETv5T6ToY/aqBb2WCtvKqKLANwGy0keErsvwn:u6jVtOyl2EY/aESWCqANu0krsvwn
TLSH
T158B1CE5C3CF9866158B7277ACF261518E73742172241AA2A7AFE47804FF5F00461AFAD
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/js/windows/cri/template.js

SHA256 016ef6ba4ccb64f2cbdf63357d180f0d3a5f74857633556b311eff57be8d023b
MD5 2f82acef2d339db31fab5c73edf8af19
SHA1 d9138de6fe1320cd232fd6e1971fbbfdb9225bd6
SHA512 90311035970edf2c1d0175c9b718c731fad4f58ad5a0b43a2588e2e6132cc09deff1d49328174408c51fe3082d62612f7a2a6c25179ac474101468ab68c2abcd
TLSH
T188212E24441C90331B7B979BDA13276CE9519301D80B7D3871AE43A82BF3B828E62359
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/js/windows/cris/cris-controller.js

SHA256 8c1fb6f5bd30ce21ae2f3f23c815b094d3351673513b0f6190919c1e776ae0de
MD5 d62bcf3408f8a28371fbc6bd976ec371
SHA1 49d7ef51d862f8a3539dfddda92f1969a757fd0e
SHA512 d2516f128d48dfa0bd25ff687cdda15293908f5bb1146211af2182fc16c1aaa2de3ae16bd26e20e78177c6866492bd5d30f6673b17a00a1d70a5523bb543ff48
SSDEEP 192:cRdar5Yvyl2AxrZn2Cb4vd/Hc7z3e5ankGMelZCcgqR6U:kamyl2eV2CI/Hcn9MeliqP
TLSH
T1CD2232459CAE26299AB7B275CF6A0505FB3043176984EA2E78FCD3840FB510181B7FED
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/js/windows/cris/template.js

SHA256 b990022c56a909a0e0979346e8ece1ef6adcfcab54ddd7ee11cca0f857a30f6a
MD5 fe0f4c4c71096d1badb922430336cf8c
SHA1 deb92b6fb4d8d605024267eb3e5c00cf32d33447
SHA512 d6d65a50508c473564d5fbd3363972c8cc42c6af4d8523c8b22876f9ed4d32e4cb5ef7edddc43aa2fdd210221d4a169534291b9a9b44c3fa5bd65ab18b12e85e
TLSH
T195E09B1541359A30373F526F93671B28B622D1124F42593845D75350327F4978E4979B
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/js/windows/finish-with-recommended-app/finish-with-recommended-app-controller.js

SHA256 0e677188974e100509526b147492af99c82fbfe6d0cfb88444cad6598f4300f8
MD5 2f346559cddb2d3b37dc32b3d39ab816
SHA1 560f89254912a5d03843ece74cf5f46af9f5c377
SHA512 d22682aa46c2d901f7b41a65c7e13039d75db5264aaf6d9250bbe9b059b76454ed3c3b37d6cbf66ad6159a43bbcd12de4ad9d65f1f91fce24655cc8768cbf98d
SSDEEP 192:otBaiFc1rnGDtjcnvpu7t7jt/Pv0+bnZ7uc:otBaiLZ6+tHt/5nZ7t
TLSH
T150D1004CAE9E5568E53BB33ACE9B4188F73502271540AA17BCDD97946FF0305026AFEC
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/js/windows/finish-with-recommended-app/template.js

SHA256 f2f955faf5dc90e9ad50815566aa42a693128f97f07d02c5c3a1dbac27f570c4
MD5 e3f895c48a2c99c3e8656c9093075286
SHA1 4d1c13a0f03ba903787b23f5f27563966cc08a31
SHA512 7c71787b7bc49e77923e178fbc38e2fe7e45283f257766020a21e25535ff095b7896406e612e254c46fef5af4a0fd2a4a9f5ecb0b33fab91261f01a3bad9a54a
TLSH
T1D1315859425F9A73173A468E9B670EAD3960DF02C8B00F11B5DF4784E3735888EA7318
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/js/windows/finish/finish-controller.js

SHA256 b0be8e18cb9be81b32667561e037ed39bc254dc728778be68c7528b7e25e9931
MD5 b2d960bd83d18a3ba247df248c03c803
SHA1 6ee210685c3b5ca847244b80b60cd0170b8f6b79
SHA512 f8d3ab77f2c13121527773ed0cd072afc5d3dfc5a4aefe22cfd80900af88f73232a1c3aa7b281acf767706bd9311a13693c829361b67338262ad33cfbe68c4ce
TLSH
T14B417A487EFA43B667713F3EDE290655F732426B0A4A4A6A3DDC52C08FB1014029DFE5
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/js/windows/finish/template.js

SHA256 cedc900131ac48e92bd931926946dc342a99de1b16757969b7416f8ba037fad7
MD5 6410e00eec2197f48a0d2ff66d0c07d2
SHA1 480c640d3849cc90fc881306322ea96e31c1207b
SHA512 302f2fa32afdc0d2e8729a91ce20d16427f2a6d56f97a84aa1785c3babaaeb080ff8d1ba400a0d1c3917646b1597e1800a36622f3ebdcf14979da6e3a76879f4
TLSH
T13221289D426B5B37073A469C52675E6D3C60DE00C9710E29B4D74780E37789D8EA630D
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/js/windows/main/main-controller.js

SHA256 06f9408a9ac6d1adc1bf00c35031a24fe53cd579d29e31aab3f47a421afd93a9
MD5 9d79b949c35645b033792e79a47071c2
SHA1 94828d1c7844fe4b481a475be15c184e2389b051
SHA512 1c12d713c7ae4c78649a7f27b0d16b59b86f09581f466c7aa8681bb9f8908289827bbea70ef9b5f5d970f6d049cb43d1d26c1c51651bdf63094369e6a4df2d84
SSDEEP 192:28RUCEI9NxThFzkzLZ1ksEIA6li5djpAAgvUqFHVgMKV59GsZ2d5GwOVTfkqdfj2:2tChTTzkzLZhJi0y3Z8QwVaf6
TLSH
T1F852DD0879B916A4E5B7333EDF2B4614FB71442B45068B1A39ED82C04FB6810426BFFE
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/js/windows/main/template.js

SHA256 d827fab7a8ec31dd68bcd7e6725c01b7d72d1224fc0c1a136dac513cc7884d0d
MD5 694ea1756f2dace45053080494afbb70
SHA1 f503248779de58075f5a3ea9ba97a4838b95d1a7
SHA512 aae8397bbea463cbcff7a26efbc8be6e9697a65073fb566fbe0d32a68dd4e656f9ca70268a1faacd2b137cd7fdeee1a380f4b4126cb1ee2a6d2bcf07bf076029
TLSH
T1956131221065157267BA42DA56266E7AFE61E303C58B9F25B6EE13C007F3C42CDB760B
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/js/windows/modal/modal-controller.js

SHA256 4565ee81ffe222b31982088b1c18850076e3acf59198ebce08118e12cbd87ea1
MD5 b04bdfd1c7d09bdbdb94a2455fdd677b
SHA1 f000ba4866ff16d75bfd6cf446763498e19b12b1
SHA512 3cb6ef0a16309046e7f407e7321eb12212b0eec09ec1a04b1d813f6c7a04546714865c3b398a93985041f598156ed905ebd23a64260801281b29ada9bc19ec5c
TLSH
T17351228E281B218195B7777F8F8740A9FF77446B0602475A3FCE87610FB0410929FEA8
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/js/windows/privacy/privacy-controller.js

SHA256 14d9c60cd97f18e74fee2dd80b6a190eaccc526085991f356feb6b4d330a0fc3
MD5 15bbec339f5046f525e3aa96d36c30ec
SHA1 f73d40bf06584737fe327f1eec6f4b0446545226
SHA512 2b0edfd2d5efb3f739e56eb6f3bcfae4789af3e1639f5f8e5f7530f5af10eb1a61464d665c9d9b2f4eb3796f2445108599d8bea75f1709aa562feebee519da4e
TLSH
T1154100ADB4B802B415727639DF27A244FAB3812F5509CD277AEC57811FF240A424DFD8
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/js/windows/privacy/template.js

SHA256 95c459eae0edccdb94702aea603a097e461daa0e5f37dcd0e30de7df665433a8
MD5 cf8d2c26520d7c84e560dfa79e31dcd3
SHA1 716f2ec17480d5cc9c145bc147833fbfc39d36f0
SHA512 d466dcf7e86a4295857020feea281fc89f519f6bf1e79c3b5e1046d0745c9c9010377b1941e06c9a9b2c78a4173ed9909332d5d6c39b05f460e8a863086c895b
TLSH
T105F0C83C85A881211976C708CF12D625BE90C35B4D3F7C7671CF078357E7C01C921645
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/js/windows/progress/progress-1-controller.js

SHA256 1a325433b4066727876b91185e110bee5811f48985c9a814f8ca7997688a0b2b
MD5 e50b56dab56eeb731c5be72a57e0827d
SHA1 c705625f675804a96ae3826cd619adb16b6425ab
SHA512 7b537b08e18b6eb81337759d34de9d9f51c5f26df648e1f16b67cb8d89604ed467de8a172d26bbc1b04f16ecbb907917a7319afd3eb21b84f66faaed8d2eeda5
TLSH
T10B31024E786542796DB3AB39DB3E6509FB33421B500AC9207CFDB5804F3051A449AEFD
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/js/windows/progress/template.js

SHA256 a7128a08bca53dd919cab3e5cb4dab31ded7ae2dafc957209b9fdd23f3b944ab
MD5 92b145e6649ba0add3dee9a69d3fa91e
SHA1 4db1a45392ec973cc8a7eecf3a30a9a7ecc7a64d
SHA512 747a087dffdba5c92d9f4c8923615d388b9c4c79d3b71d3cb90487aa37c132290a4f5107eef3055c03eadcb9614e20d4655393dc9251fab7e0ee2438f0d95751
TLSH
T1DDD09742C2A082312B3A1F6EA3F32320BE2040040B2A7630E6FF1081232B003860DBC6
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/js/windows/settings/settings-controller.js

SHA256 8089a35b557838d04b7aee5fc44d2df58f55ddc18839fb958e4ddeea8264b542
MD5 a15c3a8ed7fd18e83fc7a850500009aa
SHA1 915baec3026bdbe93cefdea562ee5e68d45eb198
SHA512 306b91913f336dd5f8850a41193d4c3a58f6843bc7ef2dc65254e76d1aa5936a9a4b85dabdbe1618dea8af0edf59eb4c9d816f36a6dfc26de41ecd04235c111d
SSDEEP 96:5RFTr5TvuTlpwWXs/t4CyV9OqIJ6OFGR+4V6RjTmoSrOlidbtmfPNVC8V/pGHmIu:5RFBjugWX8/yV9UAf+4CeoSrGWmNh
TLSH
T17FE1208EF9B4157284B7537D8E368A15FF77499B0142CE35BCEE59881FB4080424BE9E
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/js/windows/settings/template.js

SHA256 8014a7c919da249ba2f2196d9c9b62639d20851be426f3ffaef161cbe477c45f
MD5 28513de0830383a516028e4a6e7585a0
SHA1 d31fc3a6f4a3ce6c4afb82ff2342a1ed718809e5
SHA512 0f7321c2ae13145bb694368dae1b74e6fe20e6b09712da2178bc46e6aa65223ab84c38abbf0ed074c85b42dba1a238a5f3f8d1ae060a0af6df748c5befe11b61
SSDEEP 48:Zx8LQmDdbaoFRpm4+0A2AEeQmDdbaoFCpm4+0A2AW:wpm4+5nHym4+5nW
TLSH
T18891086384219412477680DA5B369F1EFB65CF0241E65E34B2FF6BCC978BC8156ABB0C
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/js/windows/welcome/template.js

SHA256 42c546e9da748ef76fdab56b96fd511eb607617a9ba37b3dc420148b769d8acb
MD5 17f54fca6723b983875d940d931e0afb
SHA1 01774cd5cea36bd74c80a708d6f77567e8091024
SHA512 401df9a54cd14c19227d91bd08b4775a7b437644b4ca0d1d636d3e07b04591f9c5516e80040ae6a79ba400457d15e3d80aa148a63de870a64664fc5a02f7a038
TLSH
T12D31FF0AC55D81361533C3FAE28B5A5C7860AE40C9BDBC3439AF075967ABC00B933B70
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/js/windows/welcome/welcome-controller.js

SHA256 6155691dbdd66290109afb91617f9cf68af6bd912991d5d27b922f5faa7f530b
MD5 50f676754862a2ab47a582dd4d79ecf3
SHA1 1cb2f4b11f9f8cfc8dc57ff29d0256dec4811158
SHA512 ccfc89e08fd36f0a694fcda17efb84ca285b6c62afe2e3a794fdad19b6882a4b618645f4d9171673ba56fb4c55fce336d6b8d26dec3a5cc11293ae2b211f499f
TLSH
T17141AB99E9F583742A757B3E9F2A0648FB32932B0A198B6C79CC52800F71118465AFF4
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/manifest.json

SHA256 6d9458aec8b6ca023377fc82e549a6cae51519d21d61008ed3754bca31ebef2b
MD5 b914bf31baf4c8cdf04aeda37f15c1be
SHA1 c6cfe17f6597334ef2375ace3efddf95362cd68b
SHA512 1515fedca9b430d7e0731079ac5b820cb209b09e5abba6ca3d1e3dddcf6304ef10c13b3ec62fcf34b46d13b981bebe30c3eaaa1160fb57c0eb990f17e2ff7ed6
TLSH
T13D01C21DE8A46DEB167A7A27A8F50740FB89423F02034F4B77BC504C5FB215A1457EB8
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/progress.html

SHA256 56638807c963782537d74c88c3239aa38445bc033bbe3785313238948cab14ec
MD5 ed794325be38a653cde04b18cd1e680e
SHA1 677d8c35e9b081ee64454dcf54e38f20bb1ab195
SHA512 b1cb1ea125b830aab187536cc9907822a3c66a37ebc6c7d83a53fe07b56397daf08ac45bd683a87c10dc249eae3d41dff6ef10760d1407358bfe9afb095c2b9e
SSDEEP 384:d53JlhPswS3FMev2v7JgjEc2asN1vnYBgfZZEeu1JE36+:vOwS3FMev2v7JaEBa65nOkof+
TLSH
T192C2B520A63B202EB527465F70F27A5D3129C913D667863EFA686272C3C75872F1378C
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

$PLUGINSDIR/log4net.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ae9c8073c3357c490f5d1c64101362918357c568f6b9380a60b09a4a4c1ff309
MD5 f15c8a9e2876568b3910189b2d493706
SHA1 32634db97e7c1705286cb1ac5ce20bc4e0ec17af
SHA512 805cd0a70aba2f1cf66e557d51ad30d42b32fbafcfbc6685ec204bc69847619479f653f4f33a4e466055707880d982eb1574ddab8edfa3c641e51cda950e2a0e
SSDEEP 3072:F+8gmdoxSO7ZbQFroo7RVir/dtnK0sgdnogtHcU5qFG1RSGCkE9kKn7GCcaLoWnS:I1N8LLI/PK0scnodG1RS1T93caLQD
TLSH
T15044065477F84A19F2FF6BB8A475411587B6F946B87ED39E0A80A4FC2C33B1089117A3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

21:19:ce:02:3c:42:51:72:0c:88:f7:ad:2c:58:50:e2:68:0d:4d:30:91:26:84:c2:91:ea:0d:c8:21:6e:f8:1e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Chains

Dec 25, 2022

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Serial Number

0e:e0:0d:4b:1a:48:0c:a8:70:01:b5:40:80:63:da:71

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 27, 2020 - Mar 3, 2023

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

4

Entry point

264682

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/nsProcess.dll

IMPHASH 439074d1c01f7b16781bdf060930814a
SHA256 d530589a90918334b8e08d7355630892dd62f41333d948a860735d5becfcb391
MD5 10e47e822b85d2a12fa4727001612182
SHA1 12826a0cc7103e13f9be20a00ecc2c0fc995d2d5
SHA512 1ca0fa5d3727c23bdf5cf3123bc784070a93982e11e3fd1a875712ee3422730c0fba54a121aa814585466ba837f8122bc72b39c08de07d8ad369ced5155955f7
SSDEEP 192:jUl64IGsjBIYiYF8tO7zBNUjgA5K+o/y2sE9jBF0NyAa53Ug:QZwIYiPWBNUkAM+o/8E9VF0NyD9Ug
TLSH
T157625AB38A985C62DD4B4C3172C4493BAEB4A6971AD0C1D7B31BC1814F90786BBF82F1
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Digest

6a:40:64:7e:cf:b4:15:9e:4c:19:dc:39:a4:ad:7a:28:7b:d7:0a:e8:a0:1f:bb:06:2e:9c:29:ef:12:55:89:2d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Chains

Aug 27, 2024

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Serial Number

0d:ac:c0:f7:43:c7:9d:8a:64:64:dc:96:7a:f3:b0:39

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jan 27, 2023 - Mar 3, 2026

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

5

Entry point

4097

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/nsis7z.dll

SHA256 623050e40f346b540b921d23caf27dd5bf27d741540d2d530e0415cc7bf662fe
MD5 3e11cd60342d736275e96075d3dec89b
SHA1 a0b1b1053ae931ed4b2fc9a740510e108778623b
SHA512 222b0e67ffc20c6210e684bc42e8f0f85c5ec5c8b6ddbbc7cd217ea553734579d115b4a7782836321cec97b607b4dd72e60675db0359a20c63bd6d874ae01386
SSDEEP 3072:C4W0KMrKri9UX0X8Z365LUqXYwBleqleoutQLK8Ix:p1ZXqK5L3XsoSXlx
TLSH
T11FA3F16385A42C4AC8A759307AC9893BB5B0F64959D0C0F33269C15987813A77BFC6F7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

ACProtect 1.3x - 1.4x DLL software

Detects file using ACProtect software.
UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx

Digest

93:8d:9c:78:89:31:8a:93:f5:79:cf:86:24:d1:b7:bc:b8:ad:61:80:fe:26:d8:67:50:7c:39:ac:0e:87:82:1b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Chains

Feb 9, 2026

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Digest

93:8d:9c:78:89:31:8a:93:f5:79:cf:86:24:d1:b7:bc:b8:ad:61:80:fe:26:d8:67:50:7c:39:ac:0e:87:82:1b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Chains

Aug 26, 2024

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Serial Number

0d:ac:c0:f7:43:c7:9d:8a:64:64:dc:96:7a:f3:b0:39

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jan 27, 2023 - Mar 3, 2026

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Minor OS version

0

Major OS version

5

Entry point

210848

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/nsis7z64.dll

IMPHASH dd7cd06a0b2436c11533a6ea17d01100
SHA256 2368be6d8b21e0047146d3f61f90966a71d0737eed0146bc692b59f3cac97793
MD5 284c46af1fd2ec3a60ee0c28f276f2a4
SHA1 4d4d41c0af12d928e4e553ab6b80e6b4ab8007bc
SHA512 ca9e4ef79c9c7c5f2282ddeee34ec39a51cddf26dcad4e9f2e42230499b0b898ac2dfd33f25438aa995741d23037fa01a0269823c283b234ecec0f155d3c05ec
SSDEEP 6144:C5IQHIy4gGVccVSVwp78nPfRvFbVWHWWDwkUzF2C/GJAiLwQ9r1uykJE6KizMSZJ:eIQHIXVL8g7EW2z4oGJ4gr8FzvJ
TLSH
T198B45A1AFB648672D467D174C9638686F3B2B48A4A30C70F12E5A37E7F277A05D2D321
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Digest

ba:a8:88:23:4f:59:31:f3:22:e5:c5:1f:ba:f4:19:0b:c8:81:65:f8:c9:2a:cf:65:b3:b9:10:e7:96:be:d5:e9

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Chains

Mar 4, 2020

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Serial Number

0e:e0:0d:4b:1a:48:0c:a8:70:01:b5:40:80:63:da:71

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 27, 2020 - Mar 3, 2023

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

6

Entry point

287264

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

kernel32

GetFileInformationByHandle SetLastError DeviceIoControl GetModuleHandleW GetProcAddress HeapAlloc HeapFree GetProcessHeap GetSystemTimeAsFileTime GetStdHandle WaitForMultipleObjects GetTickCount SetFileApisToOEM SetFileApisToANSI AreFileApisANSI GlobalAlloc GlobalFree lstrcpynW lstrcpyW MultiByteToWideChar WideCharToMultiByte FreeLibrary GetModuleFileNameW LoadLibraryExW GetCurrentDirectoryW CreateDirectoryW DeleteFileW RemoveDirectoryW FormatMessageW SetFileTime GetTempPathW GetCurrentProcessId GetCurrentThreadId MoveFileW FindClose FindFirstFileW GetFileAttributesW GetModuleHandleA SetEndOfFile GetCurrentProcess GetSystemInfo HeapSize WriteConsoleW SetFilePointerEx SetStdHandle GetStringTypeW GetCommandLineW CreateSemaphoreW LocalFree CreateEventW WaitForSingleObject ReleaseSemaphore ResetEvent SetEvent InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc GetLastError CloseHandle WriteFile SetFilePointer ReadFile GetFileSize CreateFileW SetFileAttributesW GetCommandLineA FreeEnvironmentStringsW GetEnvironmentStringsW GetCPInfo GetOEMCP GetACP IsValidCodePage GetConsoleMode GetConsoleCP FlushFileBuffers GetFileType HeapReAlloc RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter InitializeSListHead RtlUnwindEx RtlPcToFileHeader EncodePointer RaiseException InterlockedFlushSList InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree CreateThread ExitThread FreeLibraryAndExitThread GetModuleHandleExW ExitProcess LCMapStringW

user32

CharUpperW SendMessageW FindWindowExW SetWindowTextW GetDlgItem wsprintfW

advapi32

SystemFunction036 SetFileSecurityW LookupPrivilegeValueW AdjustTokenPrivileges OpenProcessToken

oleaut32

VariantCopy VariantClear SysAllocStringLen SysStringLen SysFreeString

Name

.text

Size

334KB

Virtual Size

334KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

137KB

Virtual Size

136KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

10KB

Virtual Size

39KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

19KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gfids

Size

512B

Virtual Size

184B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

912B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

$PLUGINSDIR/uac.dll

IMPHASH 0ef725341a4aecf8398c0e2132f38049
SHA256 10a0e8cf46038ab3b2c3cf5dce407b9a043a631cbde9a5c8bcf0a54b2566c010
MD5 861f7e800bb28f68927e65719869409c
SHA1 a12bfcd2b9950e758ead281a9afbf1895bf10539
SHA512 f2bf24a0da69bbe4b4a0f0b1bfc5af175a66b8bcc4f5cc379ed0b89166fa9ffe1e16206b41fca7260ac7f8b86f8695b76f016bb371d7642aa71e61e29a3976eb
SSDEEP 384:5GVY6ClGoWxXH75T1WVl83lLsFIYiPWc+6AM+o/8E9VF0NyOk:tBWxXH9TYqlAyYiPjAMxkEH
TLSH
T14BB27DE682980E6AEA235D3175D563335FF8B6502DE0C1DF161786448B607D3BB3C27A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

79:04:2e:67:54:30:2a:4f:b2:2c:9d:24:87:82:cd:a0:27:ef:29:53:e1:c6:e4:73:2e:65:5a:4f:04:36:1f:b3

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Chains

Aug 27, 2024

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Serial Number

0d:ac:c0:f7:43:c7:9d:8a:64:64:dc:96:7a:f3:b0:39

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jan 27, 2023 - Mar 3, 2026

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

10632

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

SetLastError GetCurrentProcessId GetCommandLineW GetProcAddress CreateThread GlobalFree LoadLibraryA OpenProcess GlobalAlloc CreateFileMappingW Sleep MapViewOfFile GetModuleHandleW UnmapViewOfFile CreateEventW SetCurrentDirectoryW GetVersionExW GetExitCodeProcess lstrcatW LocalFree GetPrivateProfileStringW FormatMessageW GetPrivateProfileIntW CreateProcessW CloseHandle GetLastError DuplicateHandle GetCurrentThreadId lstrlenW SetEvent WaitForSingleObject lstrcmpiW GetExitCodeThread GetModuleFileNameW

user32

SetWindowPos GetClientRect GetWindowThreadProcessId SetWindowLongW DefWindowProcW GetDlgItem CallWindowProcW CallNextHookEx GetClassNameW PeekMessageW DestroyWindow SendMessageW SetForegroundWindow IsWindowVisible MsgWaitForMultipleObjects LoadStringW EndDialog EnableWindow DialogBoxParamW LoadImageW MessageBoxW GetWindowLongW DispatchMessageW ShowWindow wsprintfW CreateDialogParamW GetWindowRect IsDialogMessageW FindWindowExW CharNextW CreateWindowExW LoadIconW PostMessageW SetWindowsHookExW UnhookWindowsHookEx TranslateMessage

shell32

ShellExecuteExW

advapi32

OpenServiceW QueryServiceStatus CloseServiceHandle OpenProcessToken OpenSCManagerW GetUserNameW AdjustTokenPrivileges LookupPrivilegeValueW GetTokenInformation EqualSid

ole32

CoInitialize

$PLUGINSDIR/utils.dll

IMPHASH d1df4ecc5e6dee090f109d6f03e8eed9
SHA256 251ab3e2690562dcfcd510642607f206e6dcf626d06d94b74e1fa8297b1050a0
MD5 c6b46a5fcdccbf3aeff930b1e5b383d4
SHA1 6d5a8e08de862b283610bad2f6ce44936f439821
SHA512 97616475ef425421959489b650810b185488fcb02a1e90406b3014e948e66e5101df583815fd2be26d9c4d293a46b02ba4025426f743e682ed15d228f027f55c
SSDEEP 768:cmLFb5dc9LS+8dayUhaPxYkkLE53UEDNnxqWLb1pA26MbwYiPbAMxkEu:cmLFtd9+O0fkV7xpD6ww7Pbxy
TLSH
T1AD434B1172A0C433D5665A3069E8D6629E7E7C422BF480CB7FA9027E5FB13C16B78367
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Digest

83:1d:c8:ec:d8:0f:cb:ab:13:f6:1f:a6:8f:1a:5a:6e:25:7a:10:2a:ff:5c:72:d7:28:46:7a:55:81:da:e9:f6

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Chains

Aug 26, 2024

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Serial Number

0d:ac:c0:f7:43:c7:9d:8a:64:64:dc:96:7a:f3:b0:39

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jan 27, 2023 - Mar 3, 2026

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

1

Major OS version

5

Entry point

7935

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\development\tfs\Overwolf\InDev\MainDev\Source\Client\Branches\Iter108.1\OWInstaller\Tagger\Release\utils.pdb

$PLUGINSDIR/websocket-sharp.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 b152284fd1ef5cebee56802f13b46def7c136f0c50fb173ae29cf0648bb4cb1f
MD5 1b4fcde3554ed9ca14e8e7c3a1706fb3
SHA1 78070a29fc2943f49e896fb16e681431596bc613
SHA512 091940363d0f4873bf169721082ac63e1f6208fa79c42da6255aac8b43aa7e01879e8ae9f1475df68e77a50fb157d298a5a480ea94d6c0a57b03b47d69a1bfe3
SSDEEP 6144:2QNVC/FesewE4JVcmOBj6ssqq70ZOAs3PPJPsgUrf:0/MsaiVxOBnq7PM
TLSH
T1B844075827F8164AE9BF6BBDC4B050208779F906BD2BE71E0A9452FA1C73790CC25327
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

09:4f:1b:38:76:64:6c:7c:cb:f5:98:ee:e8:1f:86:35:8e:56:15:7b:93:22:7f:f7:fa:3a:4c:9c:f1:11:51:77

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Chains

Mar 4, 2020

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Serial Number

0e:e0:0d:4b:1a:48:0c:a8:70:01:b5:40:80:63:da:71

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 27, 2020 - Mar 3, 2023

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

4

Entry point

264830

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Sharing

General

Malware Config

Signatures

File Explorer

Valorant Tracker - Installer.exe

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

generic

$PLUGINSDIR/CommandLine.dll

mscoree

dotnet

$PLUGINSDIR/DotNetZip.dll

mscoree

dotnet

$PLUGINSDIR/INetC.dll

kernel32

user32

comctl32

wininet

generic

$PLUGINSDIR/Microsoft.Win32.TaskScheduler.dll

mscoree

dotnet

$PLUGINSDIR/Newtonsoft.Json.dll

mscoree

dotnet

$PLUGINSDIR/OWInstaller.exe

generic

$PLUGINSDIR/OWInstaller.exe.config

$PLUGINSDIR/OverWolf.Client.CommonUtils.dll

generic

$PLUGINSDIR/SharpRaven.dll

mscoree

dotnet

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

$PLUGINSDIR/UserInfo.dll

kernel32

advapi32

generic

$PLUGINSDIR/app/_locales/de/messages.json

$PLUGINSDIR/app/_locales/en/messages.json

$PLUGINSDIR/app/_locales/es/messages.json

$PLUGINSDIR/app/_locales/fr/messages.json

$PLUGINSDIR/app/_locales/it/messages.json

$PLUGINSDIR/app/_locales/ja/messages.json

$PLUGINSDIR/app/_locales/ko/messages.json

$PLUGINSDIR/app/_locales/pl/messages.json

$PLUGINSDIR/app/_locales/pt/messages.json

$PLUGINSDIR/app/_locales/ru/messages.json

$PLUGINSDIR/app/_locales/tr/messages.json

$PLUGINSDIR/app/_locales/vi/messages.json

$PLUGINSDIR/app/_locales/zh-tw/messages.json

$PLUGINSDIR/app/_locales/zh/messages.json

$PLUGINSDIR/app/assets/fonts/lato/LatoLatin-Regular.eot

$PLUGINSDIR/app/assets/fonts/lato/LatoLatin-Regular.woff

$PLUGINSDIR/app/assets/fonts/montserrat/Montserrat-Black.woff

$PLUGINSDIR/app/assets/fonts/montserrat/Montserrat-Bold.woff

$PLUGINSDIR/app/assets/fonts/montserrat/Montserrat-Medium.woff

$PLUGINSDIR/app/assets/fonts/montserrat/Montserrat-Regular.woff

$PLUGINSDIR/app/assets/fonts/montserrat/Montserrat-SemiBold.woff

$PLUGINSDIR/app/cmp.html

$PLUGINSDIR/app/css/styles.min.css

$PLUGINSDIR/app/game_detection_database.json

$PLUGINSDIR/app/images/big-icon-fallback.png

$PLUGINSDIR/app/images/bottom-arrow-hover.png

$PLUGINSDIR/app/images/bottom-arrow.png

$PLUGINSDIR/app/images/bundled-cri-bg-fallback.png

$PLUGINSDIR/app/images/checkbox-checked.png

$PLUGINSDIR/app/images/close-hover.png

$PLUGINSDIR/app/images/close-normal.png