c9599c492084773544a5c8fcfa2feaf99c07a0d5fba044ad8fd2ff37e7a37dae
- SHA256 c9599c492084773544a5c8fcfa2feaf99c07a0d5fba044ad8fd2ff37e7a37dae
Overview
overview
10Static
static
3vl0сtХ/V...64.exe
windows10-2004-x64
10vl0сtХ/V...64.exe
windows11-21h2-x64
10vl0сtХ/l...ng.dll
windows10-2004-x64
1vl0сtХ/l...ng.dll
windows11-21h2-x64
1vl0сtХ/l...ng.dll
windows10-2004-x64
1vl0сtХ/l...ng.dll
windows11-21h2-x64
1vl0сtХ/l...ng.dll
windows10-2004-x64
1vl0сtХ/l...ng.dll
windows11-21h2-x64
1Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
vl0сtХ/Vеl0сitуХ64.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
vl0сtХ/Vеl0сitуХ64.exe
Resource
win11-20260513-en
windows11-21h2-x64
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
vl0сtХ/locales/resources/app.asar.unpacked/node_modules/btime/binding.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
vl0сtХ/locales/resources/app.asar.unpacked/node_modules/btime/binding.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
vl0сtХ/locales/resources/app.asar.unpacked/node_modules/get-fonts/binding.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
vl0сtХ/locales/resources/app.asar.unpacked/node_modules/get-fonts/binding.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
vl0сtХ/locales/resources/app.asar.unpacked/node_modules/vibrancy-win/binding.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
vl0сtХ/locales/resources/app.asar.unpacked/node_modules/vibrancy-win/binding.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
150 seconds
General
- Target c9599c492084773544a5c8fcfa2feaf99c07a0d5fba044ad8fd2ff37e7a37dae
- Size 3.6MB
- Sample260528-bb1djaet91
- SHA256 c9599c492084773544a5c8fcfa2feaf99c07a0d5fba044ad8fd2ff37e7a37dae
- MD5 ebaf847c640e1c78c5e8ef55bae9ecec
- SHA1 0acc501c75232489f463cc3ab82315f29e9fcfca
- SHA512 98eb83327c31503fba6699f25315a6b0aa5b7d10becf5a5a949487588ee8913b159e124612dc2ab1bf22a7bcee4ba1aa47fc58fbd7f954e7daff2a511864a795
- SSDEEP 98304:c+PHp7hVjQqm4gnNM+kNjoSmu5cNLffmzL/KFNA:tVVjQIgnsNjokcNLmzL/KrA
- TLSH T1B80633691DEF8DA182F3597104F97AF24E8781010606A8D0FE3CE291DD788C535EBB6D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/vl0сtХ/locales/resources/app.asar.unpacked/node_modules/btime/binding.node unpack001/vl0сtХ/locales/resources/app.asar.unpacked/node_modules/get-fonts/binding.node unpack001/vl0сtХ/locales/resources/app.asar.unpacked/node_modules/vibrancy-win/binding.node - Untrusted Codesign Signers 1 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/vl0сtХ/Vеl0сitуХ64.exe
File Explorer
-
c9599c492084773544a5c8fcfa2feaf99c07a0d5fba044ad8fd2ff37e7a37dae.zip 3.6MB
-
vl0сtХ/Vеl0сitуХ64.exe.exe 1.6MB
-
vl0сtХ/locales/hi.pak787KB
-
vl0сtХ/locales/locales/af.pak327KB
-
vl0сtХ/locales/locales/sk.pak383KB
-
vl0сtХ/locales/locales/sl.pak369KB
-
vl0сtХ/locales/locales/sr.pak572KB
-
vl0сtХ/locales/locales/sv.pak334KB
-
vl0сtХ/locales/locales/sw.pak351KB
-
vl0сtХ/locales/locales/ta.pak899KB
-
vl0сtХ/locales/locales/te.pak836KB
-
vl0сtХ/locales/locales/th.pak704KB
-
vl0сtХ/locales/locales/tr.pak357KB
-
vl0сtХ/locales/locales/uk.pak605KB
-
vl0сtХ/locales/locales/ur.pak532KB
-
vl0сtХ/locales/locales/vi.pak424KB
-
vl0сtХ/locales/locales/zh-CN.pak308KB
-
vl0сtХ/locales/locales/zh-TW.pak305KB
-
vl0сtХ/locales/resources/app.asar.unpacked/node_modules/btime/binding.node.dll 118KB
-
vl0сtХ/locales/resources/app.asar.unpacked/node_modules/get-fonts/binding.node.dll 125KB
-
vl0сtХ/locales/resources/app.asar.unpacked/node_modules/vibrancy-win/binding.node.dll 118KB
-
vl0сtХ/locales/resources/tr.pak357KB
-
vl0сtХ/locales/resources/uk.pak605KB
-
vl0сtХ/locales/resources/ur.pak532KB
-
vl0сtХ/locales/resources/v8_context_snapshot.bin710KB
-
vl0сtХ/locales/resources/vi.pak424KB
-
vl0сtХ/locales/resources/vk_swiftshader_icd.json106B
vl0сtХ/Vеl0сitуХ64.exe
- IMPHASH d42595b695fc008ef2c56aabd8efd68e
- SHA256 9512c1dff0ff263e565fa5a75400d29a63545c2afd0faaaf8288696691ad712d
- MD5 e42252e41df9a1bc840e673b3c3a7af5
- SHA1 1381b18b00f368eb7733112b8df34abfd714369c
- SHA512 4a36a07f9fb6b2f178127820118b3059800af13fc137534d633d17586c49cd59eed8adad9ae4b912b5dc121083f048f05919e3bd60402d7225d2c3d5d4666018
- SSDEEP 24576:vblSfBk1K8tz3QG2hGnA2fKL4+Y1p6I/NBele5yK2CxLdurbxCqc:vb4fe133QNh+3K0ZPGkdt
- TLSH T121854B1ABC9009FAC4A663328CB61291BB76BC4A0F3223D72E60727C2F767D49D75745
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
a2:37:ad:bf:bf:0c:de:56:74:fc:a2:f0:98:8d:85:fc:c4:1f:5c:94
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=www.sjabr.org
Chains
May 27, 2026
CN=www.sjabr.org
Subject
CN=www.sjabr.org
Serial Number
06:03:69:22:e3:6f:40:a6:91:16:79:79:2a:ba:af:e2:8c:d2
Issuer
CN=E8
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign
Ext Key Usages
ExtKeyUsageServerAuth, ExtKeyUsageClientAuth
Timespan
May 8, 2026 - Aug 6, 2026
Minor OS version
1
Major OS version
6
Entry point
463360
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
WriteFile
WriteConsoleW
WerSetFlags
WerGetFlags
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
TlsAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
RtlVirtualUnwind
RtlLookupFunctionEntry
ResumeThread
RaiseFailFastException
PostQueuedCompletionStatus
LoadLibraryW
LoadLibraryExW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetErrorMode
GetEnvironmentStringsW
GetCurrentThreadId
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateEventA
CloseHandle
AddVectoredExceptionHandler
AddVectoredContinueHandler
Name
.text
Size
554KB
Virtual Size
554KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
956KB
Virtual Size
955KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
39KB
Virtual Size
332KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
17KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
512B
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
13KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
99KB
Virtual Size
99KB
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
vl0сtХ/locales/hi.pak
- SHA256 eda355e3785313e3d982c1d3652266dce1b6e08832056fe58854b825e0712ca5
- MD5 1185163466551aacae45329c93e92a91
- SHA1 0dcbfed274934991966ce666d6d941cfe8366323
- SHA512 6fad3e24eb868acf78db0591c7ba77abc84e92cda28e8bffee435ea89940a8607e7628c6c5159349377a8d933f373db2dfa4e5715ca404bc3e67fd4a0f22a606
- SSDEEP 3072:4m//Yxz8BS65Ob5EeQzFc67R7dk5Sv34QAEm5dmLrsoe4GR3doInN8edYbOqGPt5:rYZ895O9ExFlReg5R5HQO4
- TLSH T11805180CEBBEF3B55DEC3C8A32890D37D59D3674A3E9521348D5B3DB9844CB4146A2A2
- MD5 SHA1 SHA512 SSDEEP TLSH
vl0сtХ/locales/locales/af.pak
- SHA256 b1987cdcbb8d76598422aa1739a246ed6690dc1b211f950fcbf2f040491ed7a8
- MD5 c9312ff081e600e5fb4483b46ddd7c23
- SHA1 1ff05a6a06cc73caf2d7545a3821d90c228ac0af
- SHA512 20c136b44770aa0e06259687656675a3e14310ea4e8ba214726b216bc1bcad6026267bf0132cbca642c0b5c49293386d0a1bd93ba40e1c33b648ae70416e8898
- SSDEEP 6144:ZP+kgc+kVWlEvC9Z5D49Em7kLjB6oAYxjYgDbwxesB+xSK1IA3y25tHwDwv22iGe:ZPfclEvC2im4LjB6oAYxjYgDbwAVSK16
- TLSH T170641B0ADB80273D05E07696FA0445F7BB9CB26DD770B2BADD9981321962EFC01BD1D8
- MD5 SHA1 SHA512 SSDEEP TLSH
vl0сtХ/locales/locales/sk.pak
- SHA256 dbd82a2a08f8e9ba9581b2672bc49e0fa5c89f073b58f152225f9e2815228ddf
- MD5 989d000fbe286c0fd4bfb35305b52f48
- SHA1 5a30a2cc1abe9977b1ffc4c4712452e6d55bc7df
- SHA512 ed57c66237d5226d4d5cb63e98248c0df9d381ef86b6d4ef339523f430c54aab14f84121e05e9fedaf273323ec04b8a539c0aeb791245858890126de2ce38283
- SSDEEP 6144:HX/6WrhCQ+koL+vMFVxyXiFJ7VC35hJYLjaQ3yGLBGR:HX/6Wr8Q2hnxyXiHVO5hJYLjaQ3yGL2
- TLSH T1BD845E3FCFE61C1E8E990108DEF57210F9BE4690864DA4A6D44F328724E37DD9AB8D49
- MD5 SHA1 SHA512 SSDEEP TLSH
vl0сtХ/locales/locales/sl.pak
- SHA256 d0415bfa061b36a6eb93fa2c78563448da8b63c91e0523086c7eb2714933ab99
- MD5 234e628a62f822bd7b3546b91e79cab2
- SHA1 10f48382495bdbfa3b30c15b91768817df13d828
- SHA512 51234fc3fb5199a3a86dcb7ca68d3c471f1b97897b1a9f90139cfff9846a6c6fd039a0c817e7611e0e59637746cc51045f6ce493cd6f2d4e144fec1c6a561456
- SSDEEP 6144:mK8+KqhWYynnbANj7nHZiGm4ocyxPbPDZFu+Hr7ftjQLm55gdrcKx6EIbi/fzMNS:z8+awi91L55Arc7EMi/fzMiqg
- TLSH T1EB842B35ABA75E0E0DAA66CBFDB203017BDC048CD641D6A6FC4F33695012B2827BD599
- MD5 SHA1 SHA512 SSDEEP TLSH
vl0сtХ/locales/locales/sr.pak
- SHA256 d459c1a781ddc344de76558211983dd07d47e3ca6cacffb518043bd78dc48fbe
- MD5 aa4e2e54b648f66794f485318651b730
- SHA1 18c1d5badcc5c05dfcf9e68df66f53c69e33e0ab
- SHA512 cda7b189f48f28463d045174f3641f16737288b159adcf41da0c131a05a396a40e562b2f0aa10b08d323290f19d864755f238b074a698efa3c573d2b5512948d
- SSDEEP 12288:AqOufVklJRr1HI/Y11PPeHyxsYQf5uaxbbNK6374Xzt/k/t:AVIkh3HNcf53xnZ
- TLSH T1EDC457B19B9E64DB0501F41BD808BE493DAF41FE3FAB975611201DBD34E20B847B929E
- MD5 SHA1 SHA512 SSDEEP TLSH
vl0сtХ/locales/locales/sv.pak
- SHA256 3f0acf6f6319636c3e72cdc392b7b80ab0cfd8ae1a5a8e319624e4b46bcd3c42
- MD5 c5437bb175fed93e85c5e7caf76ff352
- SHA1 0d74f7df049ea73a47fe93b75c98e356b9bdd4b7
- SHA512 00af14e7d89a12f4f39fb45a3f9c136e20c06752f98fdedbad426ac9a5b820260a329059659cd82fd089ab1d94c1f51ab4202fb6b142b27538d0139e67877239
- SSDEEP 6144:UIcs6Ou/WpIjSwjcT+BjxEEkb/LX6uTSOoDE/xUDSS35655egbH:It/vjtBok5U5h
- TLSH T1D5743B428A20F536FBB2170DB904115F4ADDE15CE7E2848E78D9883DAE87D9845FF24B
- MD5 SHA1 SHA512 SSDEEP TLSH
vl0сtХ/locales/locales/sw.pak
- SHA256 dea6947693fceb6457801d912ea7c716add3c0cfb4c34782a9cfa4c4e06b9402
- MD5 e37fc1c3dce484bd0ce496f548f14a43
- SHA1 02b088a11363b0a4c0527053669af32737f1403b
- SHA512 c5c39d54f4eb6b0659903ce9b5c8804a750a254bf88cc7c6e729e7813ecbbcc88df882af9294b5b795ef5b8afe8f1a60fcb46b3929a9b2cdf41c84188e5852b2
- SSDEEP 6144:HhUmBklgBZcaZwoRdkN6Csdq0rnKKcLLK+9s35FSaDN+q5CwAyeKnHwQ0/:mplGCkp9KhHW35gyCHyG
- TLSH T1E974E76288B1D0195733518603D8FF7317DCED9C292B28A35A46BF4F218F98C57ABE49
- MD5 SHA1 SHA512 SSDEEP TLSH
vl0сtХ/locales/locales/ta.pak
- SHA256 e0421b4cf2736bb465ec02cd85c2df09809f86479cb7624195373f25edbcedd3
- MD5 5002d84bffb908a2dcc7e1b69836c265
- SHA1 4cbbe387a6744aa6c51b15b5a3a223135a3f6115
- SHA512 c2a4a46a27304eb080b066f049d2eae733470dbf0f8107220049eaefdd73fd8b41abd1b02b4a2ee6934b4cae18de97bca5360022a8e295427a0bd63603bec410
- SSDEEP 1536:gozNJu8JvUHZZvrdAYWSXR1q+y5fNU1prH+O8ep3EvFZRj2IpewYxg3ZHa4dpeJT:gsNJvUXdWSXRUlUj9yw5fG7zWtRjcA2S
- TLSH T159151CCE923EEE890F93288F0319536912996155C07BE3A27C756E1298ECC5DDF3427E
- MD5 SHA1 SHA512 SSDEEP TLSH
vl0сtХ/locales/locales/te.pak
- SHA256 f53e06181c9fa0f6028906a7388fd4e8f000ffb7277330634462433d34572395
- MD5 b1a4d471fd8af54dfb8ff252246bfde1
- SHA1 2044ee38f8d8d76176a735e726de189feac14985
- SHA512 18248d3fa8f4cc409788d28a244889230b074fff416ba5998f25f3b67ad0c627172a5e7e3947e61e72ce28a5b4cb2134d6627b6252b3d282b54f84b424136c87
- SSDEEP 12288:VluBe3p1F9fBiTlbUYgiNFOSdrUH4GrQKZkC28+5HX0Dkq9GyAdsoAkhodSMtS6f:VlUh4D5nM2
- TLSH T14B0592023A6AD310DAE70273752CF66C49681B8161D6732C1EAFA357FB87D7E0843676
- MD5 SHA1 SHA512 SSDEEP TLSH
vl0сtХ/locales/locales/th.pak
- SHA256 4fe2b7b6886e3ce068be0b7a0a71d45756eb797eda1e7d4fad52ab8a370e8336
- MD5 85f59bf2f1167e34ab2b666608805420
- SHA1 f0d8e8fc644c15c52c5f9d3419f88e6072799736
- SHA512 86d6061895c996ad1caa3f3871c014b656e7ba7bb91f05c72a591cb5877c3db61965bc1a5094dcf7c4127d11f8106622355464704fd0695372627d8400a16ddd
- SSDEEP 12288:kCoJR/3RMVqsUs5Uv/cLRflrj87rS6DotyeuLADu7Kle9don7j9Fo09XAyFHPL4i:poH25p5p
- TLSH T142E44BB33247D9D479441B5B262A7789673DAE693F73F8E00489215A73F071A8422EF3
- MD5 SHA1 SHA512 SSDEEP TLSH
vl0сtХ/locales/locales/tr.pak
- SHA256 5df18798a35b502a18fb4f82e9b03b7ca100903ecd5d192ab2a3f0bc7646c366
- MD5 da4c47bef469c086cdb7e5b74310304a
- SHA1 9f0569659eb21261003a232d5d92d3aae8d47b7a
- SHA512 55c745cd8d0aba6f4a2454c494b80eb4cc74f733771e7279b9033d52716551a85154e9eb31eebe17dce05ba71e0213e581c4b98b59a6b88aa8b9569c411e397a
- SSDEEP 6144:GqgGhItL0rKiPxTcQXKVSIOD7rB/78GgeD58/D+iMi1AxZE9VwiBsJm7:JhIN/i5TTmUrZ7f58/5
- TLSH T1FE740A8178EF382C8BB9278FD2E50626F99F0766F331E4469A169636774674703F620C
- MD5 SHA1 SHA512 SSDEEP TLSH
vl0сtХ/locales/locales/uk.pak
- SHA256 3fb15957c77f3635aa7cfca796b045a1ee1f1abfc0c12c163cfb537364f3c80a
- MD5 229325584cd98c8408f7fc5c5603c6de
- SHA1 dd31356ede30833a138fc3a6b8838cef89344a00
- SHA512 3b57f57649877700f03aee73bc6e6e863ad65ec7c13b9851a3fc7e5d06d11ea154ce087d0a64dc689cfc55aca9eb6492154c9eb18130f6d17b8d94ac8c37a6df
- SSDEEP 12288:c5cHmNYribnlyvk7KQ0N1nteW51B3IjNtE6TxLNiXEFqIDV2:c5cP+kT552Ef
- TLSH T10BD488B19A9D58DF0105F05BE84C7A0D7DA741FE7FA6871625A43DBF28F20248A3C71A
- MD5 SHA1 SHA512 SSDEEP TLSH
vl0сtХ/locales/locales/ur.pak
- SHA256 06a0c18d978b54dd163c7f77b7ee0f2ecf3607c5dc14032326f21b4a1f304d81
- MD5 6310a289e55b1022f12b4f3cc29fe831
- SHA1 150d81ec8db4d9aec6c0e83e5577dcb7f1956b38
- SHA512 acb538fce25486e6a01401aa0e9204a6f519cd1dfbca48663d6142e1fb6280bab271dfd2b4c5ddc858de6920805e539b791c48eddcad124d0aae298d479dcf48
- SSDEEP 12288:K6Du8PzOYzXPyn+jAcMR5RQEA2WzRbQYrkuvco/9NjjFpvUu:cYiD59WZ
- TLSH T115C410D1E6BC92B25A21D92780E33C34CB635F13D34BF286E56106C54E9A1136F6DE3A
- MD5 SHA1 SHA512 SSDEEP TLSH
vl0сtХ/locales/locales/vi.pak
- SHA256 f1602637e7f3e0a908d7a9a3f630b8dd38bfd26704cc64ef432d2c88a1ee7017
- MD5 1b1b14f542bb4a9f014d1801fb2e4007
- SHA1 0f56c35b2515fc92690126c54d57aa763a5c3288
- SHA512 3e98c44ad74d905fee06851eab16576f6261a15336f1c1f625f646af725988b75957ed89c16876ec6127150e2b28778a5b65f897b9540ad1e4cec98be705cde7
- SSDEEP 12288:PJnzrvsPgnzj0VyK1wSMTgG9lt5uEHziW+UH6JziV1ZH:xnzTsPgnzj0VySwSG1n5/TiW+UaliV1N
- TLSH T1A094861216E0702680AC553EC5CE540E6FCAE42FF7808FE57FE4297576221A56F21BAF
- MD5 SHA1 SHA512 SSDEEP TLSH
vl0сtХ/locales/locales/zh-CN.pak
- SHA256 97fe793b325d0c27669f62235bd157c51a3e1aeaffba30e7fe028c9d64939c5f
- MD5 32b1659c7abe8a01a702e46c69f0a3ce
- SHA1 43eba1f94417109834f25006a81653bf635ce9a0
- SHA512 72b932cb9e19788a67a1a7beaea0b9b076af0a5f1c568f9d2d6e8653d3c9fd4bc17db1a39db1f12b8184112b8e67125f443b8b2b60f31e62e16ef9c6a8e2c4a6
- SSDEEP 6144:ZdzIbmDPgQyQ74nqKm0YnHrYE85UN6RregFlo:DEm8QunqKRYnHx85UN6Rr4
- TLSH T18D647EE900FDBDEC054640902724617E7980620BF667AFB77ED244ED27A2F9E0757A0B
- MD5 SHA1 SHA512 SSDEEP TLSH
vl0сtХ/locales/locales/zh-TW.pak
- SHA256 280ba35171dfb6a54efb13fc4ddedc13a0283a9a6eebff4c15275767beb4ba77
- MD5 14f3f547a54713f91251b38459a096b5
- SHA1 02ac592a2eb4a7c6631dad5aae83726ef9c33ec0
- SHA512 0ad8c6a6eb0dcbcbbf6f9e114c93bc2cf6004dfa9ad7b68dba31c2a9856c0a56acb66507f65b1823434b1ad362c1ac812b72c254e5329a2858e888a761f45ec1
- SSDEEP 6144:c0oQX1m/Xs2eI7uhvxO4/x5wuznWMc/9yJTl:cQX1m6IaxO4/x5wuzWZ/u
- TLSH T151646CA608FFDEEE0901F884B3C9462F7C8B742CDD377637FC4918992E76A541A5214A
- MD5 SHA1 SHA512 SSDEEP TLSH
vl0сtХ/locales/resources/app.asar.unpacked/node_modules/btime/binding.node
- IMPHASH 0242ceb286e744ddd6dd8e963da637ee
- SHA256 98c51303c38dc03faeeba13f26fa3c6645d0c1a502b8a5d28177ce015dacf35f
- MD5 13a2579ed95366185a6247c9e4b9f0cc
- SHA1 61fef12da622484e44b3c9ddcd61706c9af00aa0
- SHA512 7aae5a45f5333355c81e4a7468d40c9d814a1b242c99a39747fea9b66e277dd1060bda290fc980e958beccab2ac0232fc4aba078426ac5ae39c19968ae8f58d0
- SSDEEP 1536:OMwHUFyUCyB7KdX2teZOpSPtvdO+tYLZI2mAq+J6sWyd09dlgh7tBrdO6t2:hwjUCyB7eC8OpSS+tYLZI5+NMKFdO6t
- TLSH T1ECC36C57B2E541BFD4768278C9930A45D3B2B82507309BDF07A4425A1F237E1AE3EB72
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
12732
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\Projects\obsidian-stage\electron\btime\build\Release\binding.pdb
kernel32
GetModuleHandleA
SetFileTime
CreateFileW
MultiByteToWideChar
GetLastError
CloseHandle
LoadLibraryExA
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapFree
HeapAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
GetProcessHeap
GetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
WriteConsoleW
GetSystemInfo
VirtualProtect
VirtualQuery
_register_binding_
Name
.text
Size
64KB
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
41KB
Virtual Size
41KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
148B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=11, id=260, version=27412,
count=5, id=259, version=27412,
count=134, id=261, version=27412,
count=14, id=260, version=28920,
count=9, id=259, version=28920,
count=39, id=261, version=28920,
count=3, id=257, version=27412,
count=120, id=1, productName=Unmarked objects,
count=2, id=265, version=29110,
count=1, id=256, productName=VS2019 v16.7.0 build 29110, version=29110,
count=1, id=255, productName=VS2019 v16.7.0 build 29110, version=29110,
count=1, id=258, productName=VS2019 v16.7.0 build 29110, version=29110,
vl0сtХ/locales/resources/app.asar.unpacked/node_modules/get-fonts/binding.node
- IMPHASH 2a1b9a0a23b390c22659b30f7660d0da
- SHA256 149bc3824ecbf68f7a892a311e77548ea156963b88db0590063b50725c9d883c
- MD5 eeb1d1ea9fc3f870f292161cfa79850d
- SHA1 ea4f4324245f9f4d6280ef285151f688221d6023
- SHA512 795269fba2737ca51d61bb0f6e674c8ed45f2590a48d1dbc53adae9a85b5565e372de6e2a888f038660173f6f4fe0ecda293c441415296e79097c261c452f254
- SSDEEP 3072:cd5+N3E2MosoJCakr0dHPAMMMtrAfz9MrRAG:yIxMQQakr0xPSfzirqG
- TLSH T1E4C35B1B73A440BBE4778179C8531A05E772B8610B71DBDF07A0429A1F637E1AE3EB61
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
16972
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\Projects\obsidian-stage\electron\get-fonts\build\Release\binding.pdb
kernel32
LoadLibraryExA
WideCharToMultiByte
GetUserDefaultLocaleName
GetModuleHandleA
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
GetLastError
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
GetProcessHeap
GetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
CreateFileW
CloseHandle
WriteConsoleW
GetSystemInfo
VirtualProtect
VirtualQuery
dwrite
DWriteCreateFactory
_register_binding_
Name
.text
Size
69KB
Virtual Size
69KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
43KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
148B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=11, id=260, version=27412,
count=5, id=259, version=27412,
count=134, id=261, version=27412,
count=14, id=260, version=28920,
count=9, id=259, version=28920,
count=39, id=261, version=28920,
count=5, id=257, version=27412,
count=125, id=1, productName=Unmarked objects,
count=3, id=265, version=29110,
count=1, id=256, productName=VS2019 v16.7.0 build 29110, version=29110,
count=1, id=255, productName=VS2019 v16.7.0 build 29110, version=29110,
count=1, id=258, productName=VS2019 v16.7.0 build 29110, version=29110,
vl0сtХ/locales/resources/app.asar.unpacked/node_modules/vibrancy-win/binding.node
- IMPHASH 56e83fb6e818a708f7895cf9d6058c3a
- SHA256 094bfeb0692885f1e56bb363e1065099eab48a7988c8603fd6a3fb49ec88b09c
- MD5 6c12c930f974e5bc7872b58964f42359
- SHA1 805c5c899c32535d2ee8b2bc12deefe5fdaae566
- SHA512 f46c416e3f33e0526c2d4cb3df738f7c9b11fece350b90ca9613e5d86bae7a363dd20b80d62f5745a9d51773b655199537b09fcf47acf226f35002f39f1596d3
- SSDEEP 3072:/WKjx2yp1tLqA1HB4kdeRqGmX5EMMi6leGS:3xBPVf1HB4kER4UFhS
- TLSH T18AC35C1BB3E540BBE1768138C8671A15D372B8214B61DBAF13A4465D1F237E0AD3EF62
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
12204
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\Projects\obsidian-stage\electron\vibrancy-win\build\Release\binding.pdb
kernel32
GetModuleHandleA
GetProcAddress
GetModuleHandleW
LoadLibraryExA
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
GetLastError
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
GetProcessHeap
GetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
CreateFileW
CloseHandle
WriteConsoleW
GetSystemInfo
VirtualProtect
VirtualQuery
_register_binding_
Name
.text
Size
64KB
Virtual Size
63KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
41KB
Virtual Size
41KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
148B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=11, id=260, version=27412,
count=5, id=259, version=27412,
count=134, id=261, version=27412,
count=14, id=260, version=28920,
count=9, id=259, version=28920,
count=39, id=261, version=28920,
count=3, id=257, version=27412,
count=118, id=1, productName=Unmarked objects,
count=2, id=265, version=29110,
count=1, id=256, productName=VS2019 v16.7.0 build 29110, version=29110,
count=1, id=255, productName=VS2019 v16.7.0 build 29110, version=29110,
count=1, id=258, productName=VS2019 v16.7.0 build 29110, version=29110,
vl0сtХ/locales/resources/tr.pak
- SHA256 5df18798a35b502a18fb4f82e9b03b7ca100903ecd5d192ab2a3f0bc7646c366
- MD5 da4c47bef469c086cdb7e5b74310304a
- SHA1 9f0569659eb21261003a232d5d92d3aae8d47b7a
- SHA512 55c745cd8d0aba6f4a2454c494b80eb4cc74f733771e7279b9033d52716551a85154e9eb31eebe17dce05ba71e0213e581c4b98b59a6b88aa8b9569c411e397a
- SSDEEP 6144:GqgGhItL0rKiPxTcQXKVSIOD7rB/78GgeD58/D+iMi1AxZE9VwiBsJm7:JhIN/i5TTmUrZ7f58/5
- TLSH T1FE740A8178EF382C8BB9278FD2E50626F99F0766F331E4469A169636774674703F620C
- MD5 SHA1 SHA512 SSDEEP TLSH
vl0сtХ/locales/resources/uk.pak
- SHA256 3fb15957c77f3635aa7cfca796b045a1ee1f1abfc0c12c163cfb537364f3c80a
- MD5 229325584cd98c8408f7fc5c5603c6de
- SHA1 dd31356ede30833a138fc3a6b8838cef89344a00
- SHA512 3b57f57649877700f03aee73bc6e6e863ad65ec7c13b9851a3fc7e5d06d11ea154ce087d0a64dc689cfc55aca9eb6492154c9eb18130f6d17b8d94ac8c37a6df
- SSDEEP 12288:c5cHmNYribnlyvk7KQ0N1nteW51B3IjNtE6TxLNiXEFqIDV2:c5cP+kT552Ef
- TLSH T10BD488B19A9D58DF0105F05BE84C7A0D7DA741FE7FA6871625A43DBF28F20248A3C71A
- MD5 SHA1 SHA512 SSDEEP TLSH
vl0сtХ/locales/resources/ur.pak
- SHA256 06a0c18d978b54dd163c7f77b7ee0f2ecf3607c5dc14032326f21b4a1f304d81
- MD5 6310a289e55b1022f12b4f3cc29fe831
- SHA1 150d81ec8db4d9aec6c0e83e5577dcb7f1956b38
- SHA512 acb538fce25486e6a01401aa0e9204a6f519cd1dfbca48663d6142e1fb6280bab271dfd2b4c5ddc858de6920805e539b791c48eddcad124d0aae298d479dcf48
- SSDEEP 12288:K6Du8PzOYzXPyn+jAcMR5RQEA2WzRbQYrkuvco/9NjjFpvUu:cYiD59WZ
- TLSH T115C410D1E6BC92B25A21D92780E33C34CB635F13D34BF286E56106C54E9A1136F6DE3A
- MD5 SHA1 SHA512 SSDEEP TLSH
vl0сtХ/locales/resources/v8_context_snapshot.bin
- SHA256 ea2ea0f97ac908fd127a423f505241ebf4acea0ba5d02635cae40f7cd9c2f464
- MD5 4d582d568efb15b489a15be358d9a68f
- SHA1 295393f0707d04ed60ebda8ea7c0297c411c7f33
- SHA512 ed8a6af3d51904020abc8e8f3e734ccbf1663d8bd3c0f526e1d69ebfdf47b6061fcf3660b70239ba755f1273f6c608054d6dccd3721a4bcd81e7e9f3a3c7daf9
- SSDEEP 6144:4dxIaCPBHaXAqTOLhzTRQsLRgBoGngm9R4T8kfS7eTTId5r1q5:4dxIdhaXAqEKGGg6Tkfdwd5r14
- TLSH T183F4A539F719CA2AEB03ADFD09C2D94531B1B948AF56152BB1E9072F71EBB581C70390
- MD5 SHA1 SHA512 SSDEEP TLSH
vl0сtХ/locales/resources/vi.pak
- SHA256 f1602637e7f3e0a908d7a9a3f630b8dd38bfd26704cc64ef432d2c88a1ee7017
- MD5 1b1b14f542bb4a9f014d1801fb2e4007
- SHA1 0f56c35b2515fc92690126c54d57aa763a5c3288
- SHA512 3e98c44ad74d905fee06851eab16576f6261a15336f1c1f625f646af725988b75957ed89c16876ec6127150e2b28778a5b65f897b9540ad1e4cec98be705cde7
- SSDEEP 12288:PJnzrvsPgnzj0VyK1wSMTgG9lt5uEHziW+UH6JziV1ZH:xnzTsPgnzj0VySwSG1n5/TiW+UaliV1N
- TLSH T1A094861216E0702680AC553EC5CE540E6FCAE42FF7808FE57FE4297576221A56F21BAF
- MD5 SHA1 SHA512 SSDEEP TLSH
vl0сtХ/locales/resources/vk_swiftshader_icd.json
- SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
- MD5 8642dd3a87e2de6e991fae08458e302b
- SHA1 9c06735c31cec00600fd763a92f8112d085bd12a
- SHA512 f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f
- TLSH T1A6B01211430088B36062AF3C41811F468765411C36020D491040540E83BBDB6A102394
- MD5 SHA1 SHA512 TLSH