gulp[.]zip | Triage™

resource	yara_rule
static1/unpack002/Crack/Activation_Keygen.exe	upx
static1/unpack002/Crack/Alternative/adobe.snr.patch-painter.exe	upx

resource
unpack005/DE6/Setup.dll
unpack002/Adobe CC 2015/packages/setup.exe
unpack002/Adobe CC 2015/payloads/UpdateManagementTool8_0/umt-8.0-set-up.exe
unpack002/Adobe CC 2015/resources/AdobePIM.dll
unpack002/Crack/Activation_Keygen.exe
unpack002/Crack/Alternative/adobe.snr.patch-painter.exe

resource
unpack002/Adobe CC 2015/Set-up.exe
unpack003/CCMNative.dll
unpack003/Utilities/AAMHelper.exe
unpack003/Utilities/AdobeApplicationManager(URIHandler).exe
unpack003/Utilities/AdobeApplicationManager.exe
unpack003/Utilities/npAdobeAAMDetect32.dll
unpack003/Utilities/npAdobeAAMDetect64.dll
unpack003/tools/7za.exe
unpack004/D6Native.dll
unpack004/Setup.exe
unpack004/TokenGenerator64.exe
unpack005/ARKSelector.dll
unpack005/DE5/Setup.dll
unpack005/DE5/resources/libraries/ARKCmdCaps.dll
unpack005/DE5/resources/libraries/ARKCmdDefrag.dll
unpack005/DE5/resources/libraries/ARKCmdFS.dll
unpack005/DE5/resources/libraries/ARKEngine.dll
unpack005/DE5/resources/libraries/AdobePIM.dll
unpack005/DE5/resources/libraries/Adobe_Helperx32.exe
unpack005/DE5/resources/libraries/Adobe_Helperx64.exe
unpack005/DE5/resources/libraries/CustomHook_Helperx64.exe
unpack005/DE5/resources/libraries/EventMessages.dll
unpack005/DE5/resources/libraries/TokenResolverx64.exe
unpack005/DE5/resources/libraries/adobeFileVersioner.dll
unpack005/DE5/resources/libraries/patchw32.dll
unpack005/DE5/resources/libraries/updaterinventory.dll
unpack005/DE6/resources/libraries/ARKCmdCaps.dll
unpack005/DE6/resources/libraries/ARKCmdDefrag.dll
unpack005/DE6/resources/libraries/ARKCmdFS.dll
unpack005/DE6/resources/libraries/ARKEngine.dll
unpack005/DE6/resources/libraries/AdobePIM.dll
unpack005/DE6/resources/libraries/Adobe_Helperx32.exe
unpack005/DE6/resources/libraries/Adobe_Helperx64.exe
unpack005/DE6/resources/libraries/CustomHook_Helperx64.exe
unpack005/DE6/resources/libraries/EventMessages.dll
unpack005/DE6/resources/libraries/TokenResolverx64.exe
unpack005/DE6/resources/libraries/adobeFileVersioner.dll
unpack005/DE6/resources/libraries/patchw32.dll
unpack005/DE6/resources/libraries/updaterinventory.dll
unpack005/PlatformUtil.exe
unpack005/Setup.exe
unpack006/DWANative.dll
unpack006/Setup.exe
unpack006/TokenGenerator64.exe
unpack007/AdobeIPCBroker.exe
unpack007/customhook/AdobeIPCBrokerCustomHook.exe
unpack008/AAM Registration Notifier.exe
unpack008/PWANative.dll
unpack008/adobe_caps.dll
unpack008/adobe_licutil.exe
unpack008/adobe_oobelib.dll
unpack008/adobe_upgrade.dll
unpack008/amtservices.dll
unpack008/asneu.dll
unpack009/AAM Registration Notifier.exe
unpack009/IMSLib.dll
unpack009/P6Native.dll
unpack009/VulcanBridge.dll
unpack009/VulcanMessage.dll
unpack009/adobe_licutil.exe
unpack009/adobe_oobelib.dll
unpack009/adobe_upgrade.dll
unpack009/axlib.dll
unpack002/Adobe CC 2015/payloads/Microsoft VC 2008 Redist (x86)/vcredist_x86.exe
unpack002/Adobe CC 2015/payloads/Microsoft VC 2010 Redist (x64)/vcredist_x64.exe
unpack002/Adobe CC 2015/payloads/Microsoft VC 2010 Redist (x86)/vcredist_x86.exe
unpack002/Adobe CC 2015/resources/updaterinventory.dll
unpack002/autoplay.exe
unpack002/unicows.dll

resource	yara_rule
static1/unpack002/Adobe CC 2015/payloads/UpdateManagementTool8_0/umt-8.0-set-up.exe	innosetup

gulp.zip

SHA256 02055b7ed7f448bf284d9c8a426cf95b11507cc52e4b189b59f2c62fae018cbd
MD5 46b167849dc0f0a1401d979777e3e345
SHA1 32d123ebf11022964b5d72faaa98c40ccd7122ef
SHA512 4921252c498ce7384d485dbd7937a0d0095c54670786236f361c36be054cfdb30330516ad77a8a45eddfbd8da46b84ef69bf751c22b28c1d8c7cd748ceeb8abb
SSDEEP 25165824:aUmiQkM82yJ/D8Z1XH5BNfAv8jN7pcy8RBywT8j9:TVQk92mD8ZBZBN+S7pF4ywTk9
TLSH
T181B933A8EB730D26EF39B76473A6175AE0209192D2F1FC36F32607499F00BC6761E945
MD5 SHA1 SHA512 SSDEEP TLSH

_Getintopc.com_Adobe.Flash.Pro.CC.2015.iso

SHA256 4ef715dc447c0492e069e759b94cd8b577b9cdc5252871b4988057e270dd5470
MD5 bb95b2831e5d856e81a7a71fe0cc5da0
SHA1 e8e5d2b066989e554b8c7018ac8a39b6c1a65819
SHA512 de3a1af0c04049943e9f63ab17109f740917cd728686cb988539d9c68a88df04b0b579aa1ae32994a2a9730bb85642dfdf78679e33be6f2a7b3dc61ae6142566
SSDEEP 25165824:VReQYRv3fOUafPnHJ4H0j5eBb/wqU2esP2xIyGXkRy2M8Fbh8l:qHRv3fOU2H2HKeBvU2QxIGy2M8FF8l
TLSH
T17EB9337C62701476E202B3F1AB941BE5EE2D903F93305492F2991B5F19F21CD5A2B72E
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/Set-up.exe

IMPHASH 4e688fb97df93999c8a802e65f41d0b1
SHA256 0f8ccdf2162915f2d056702e9df32c65e4ed2e0c0d5d5ea606aa8803b4ef5d9b
MD5 a810f9c99d82cb8d15667e2494020ebe
SHA1 e816848423a57939181651be0074de942b700f32
SHA512 2731e617800a326d01ffd0a764765bb96675e8ad50285cad77e86f4e8749a5e6a00c21a3173f560a62c3c9d55b9ebfc5cf1d2cf42fc0896f476f74e0b56b3721
SSDEEP 49152:H2RUvjn/TCGDQiMDpU/Sb8HDWSrbmnidPtrDEKhPlGRr4909Q7Kitj:Wyn/+GDhOcSb8HDhrK8rwGlGRr4d
TLSH
T10BB5AF217BA19272D57306706E1CB31DA0BDB5B00B3546DB63DC1E6D2D704C2AA3E7A7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

7d:56:49:9a:1a:0a:d7:c6:c5:27:cc:ba:ae:34:e6:72:43:e3:42:02

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=2748129,CN=Adobe Systems Incorporated,OU=AAM 256,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

Apr 29, 2015

SERIALNUMBER=2748129,CN=Adobe Systems Incorporated,OU=AAM 256,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

CN=Symantec Class 3 Extended Validation Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Symantec Class 3 Extended Validation Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

6c:59:ef:a9:e1:00:e1:0e:e3:06:ba:8f:e0:29:25:59

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Jun 7, 2012 - Jun 6, 2022

Subject

SERIALNUMBER=2748129,CN=Adobe Systems Incorporated,OU=AAM 256,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Serial Number

58:a0:b9:25:d5:bd:9e:14:2f:9e:9b:39:4e:ce:62:70

Issuer

CN=Symantec Class 3 Extended Validation Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jan 14, 2014 - Jan 7, 2016

Minor OS version

1

Major OS version

5

Entry point

1527558

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

none

comctl32

InitCommonControlsEx _TrackMouseEvent ord17

user32

DrawIcon GetClientRect wsprintfW EnableWindow SendMessageW GetWindow LoadIconW GetWindowLongW EnableMenuItem KillTimer PostMessageW LoadImageW IsIconic GetWindowRect SetTimer GetSystemMenu GetDesktopWindow ReleaseDC GetDC IsRectEmpty DestroyIcon IsWindowVisible IsWindow InvalidateRect InflateRect GetIconInfo SetRectEmpty LoadCursorW GetParent GetFocus DrawIconEx FillRect SetCursor CheckMenuItem SetMenuItemBitmaps SetWindowLongW UnregisterClassW GetSystemMetrics GetMenuCheckMarkDimensions SetMenuItemInfoW LoadBitmapW IsWindowEnabled MessageBoxW GetWindowThreadProcessId GetLastActivePopup DestroyWindow CreateDialogIndirectParamW EndDialog GetDlgItem GetWindowRgn DestroyCursor CreateMenu SubtractRect GetUpdateRect IsClipboardFormatAvailable TranslateMDISysAccel DefMDIChildProcW DefFrameProcW DrawMenuBar FrameRect CharUpperBuffW ModifyMenuW SetMenuDefaultItem CopyIcon GetDoubleClickTime SetClassLongW SetCursorPos DestroyAcceleratorTable CreateAcceleratorTableW GetKeyboardState ToUnicodeEx LockWindowUpdate MapVirtualKeyExW IsCharLowerW GetKeyboardLayout IsZoomed GetComboBoxInfo TrackMouseEvent MonitorFromPoint UpdateLayeredWindow IsMenu SetWindowRgn DrawFrameControl DrawEdge DrawStateW EmptyClipboard SetClipboardData CloseClipboard OpenClipboard EnumDisplayMonitors SetLayeredWindowAttributes SetParent UnionRect GetKeyNameTextW MapVirtualKeyW NotifyWinEvent InvertRect HideCaret EnableScrollBar GetAsyncKeyState DrawFocusRect ReuseDDElParam UnpackDDElParam InsertMenuItemW TranslateAcceleratorW LoadAcceleratorsW BringWindowToTop GetMenuDefaultItem CreatePopupMenu PostThreadMessageW MessageBeep GetNextDlgGroupItem SetRect InvalidateRgn CopyAcceleratorTableW OffsetRect CharNextW CharUpperW WindowFromPoint ReleaseCapture SetCapture WaitMessage DeleteMenu CopyImage IntersectRect GetSysColorBrush RealChildWindowFromPoint LoadMenuW SystemParametersInfoW GetMenuItemInfoW DestroyMenu SendDlgItemMessageA RegisterClipboardFormatW GetCursorPos TranslateMessage GetMessageW MapDialogRect SetWindowContextHelpId ShowOwnedPopups PostQuitMessage IsDialogMessageW SetWindowTextW CheckDlgButton MoveWindow ShowWindow GetMonitorInfoW MonitorFromWindow WinHelpW GetScrollInfo SetScrollInfo CallNextHookEx UnhookWindowsHookEx SetWindowsHookExW GetTopWindow GetClassNameW GetClassLongW PtInRect EqualRect CopyRect MapWindowPoints AdjustWindowRectEx GetWindowTextLengthW GetWindowTextW RemovePropW GetPropW SetPropW ShowScrollBar GetScrollRange SetScrollRange GetScrollPos SetScrollPos ScrollWindow RedrawWindow ValidateRect SetForegroundWindow GetForegroundWindow UpdateWindow TrackPopupMenu SetMenu GetMenu GetCapture GetKeyState SetFocus GetDlgCtrlID EndDeferWindowPos DeferWindowPos BeginDeferWindowPos SetWindowPlacement GetWindowPlacement SetWindowPos IsChild CreateWindowExW GetClassInfoExW GetClassInfoW RegisterClassW CallWindowProcW DefWindowProcW GetMessageTime GetMessagePos PeekMessageW DispatchMessageW RegisterWindowMessageW RemoveMenu AppendMenuW InsertMenuW GetMenuItemCount GetMenuItemID GetSubMenu GetMenuState GetMenuStringW GetSysColor ScreenToClient ClientToScreen EndPaint BeginPaint GetWindowDC TabbedTextOutW GrayStringW DrawTextExW DrawTextW SetActiveWindow GetActiveWindow GetNextDlgTabItem

ole32

CLSIDFromString ReleaseStgMedium OleDuplicateData StgOpenStorageOnILockBytes CoFreeUnusedLibraries CoGetClassObject CoDisconnectObject OleRun CoUninitialize RevokeDragDrop RegisterDragDrop CoLockObjectExternal OleGetClipboard IsAccelerator OleTranslateAccelerator OleDestroyMenuDescriptor OleCreateMenuDescriptor OleLockRunning DoDragDrop CreateStreamOnHGlobal CoRegisterMessageFilter OleIsCurrentClipboard OleFlushClipboard CoRevokeClassObject StgCreateDocfileOnILockBytes OleUninitialize CreateILockBytesOnHGlobal OleInitialize CoTaskMemFree CoTaskMemAlloc CoCreateGuid StringFromGUID2 CoInitialize CoInitializeEx CLSIDFromProgID CoCreateInstance

oleaut32

SysAllocString SysStringLen VariantClear VariantCopy VariantInit SysFreeString SysAllocStringLen VariantChangeType SystemTimeToVariantTime VariantTimeToSystemTime GetErrorInfo OleCreateFontIndirect LoadTypeLi VarBstrFromDate SafeArrayDestroy

shlwapi

PathIsFileSpecW PathAppendW PathRenameExtensionW StrFormatKBSizeW PathStripToRootW PathIsUNCW PathRemoveExtensionW PathFindExtensionW PathFindFileNameW PathRemoveFileSpecW StrRChrW PathFileExistsW PathRemoveBackslashW PathIsNetworkPathW PathGetDriveNumberW PathIsRootW PathIsDirectoryW PathAddExtensionW

kernel32

WaitForMultipleObjects lstrlenA IsDBCSLeadByteEx TerminateThread OpenMutexW GetLocalTime SetEnvironmentVariableA WriteConsoleW EnumSystemLocalesW IsValidLocale LCMapStringW GetTimeFormatW GetDateFormatW OutputDebugStringW ReadConsoleW GetStringTypeW GetTimeZoneInformation GetConsoleMode GetConsoleCP SetFilePointerEx GetCPInfo GetOEMCP GetACP IsValidCodePage SetUnhandledExceptionFilter UnhandledExceptionFilter FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetStartupInfoW VirtualQuery VirtualAlloc GetSystemInfo IsProcessorFeaturePresent IsDebuggerPresent HeapQueryInformation ExitThread GetModuleHandleExW ExitProcess RtlUnwind GetSystemTimeAsFileTime GetFileType SetStdHandle FindResourceExW GetUserDefaultLCID VirtualProtect SearchPathW GetProfileIntW GetTempFileNameW VerifyVersionInfoW VerSetConditionMask lstrcpyW GetFileTime GetFileAttributesExW SetErrorMode GetWindowsDirectoryW DuplicateHandle UnlockFile SetFilePointer SetEndOfFile LockFile GetVolumeInformationW GetFullPathNameW GetCurrentDirectoryW GetSystemDefaultUILanguage GetLocaleInfoW CompareStringW LocalReAlloc GlobalHandle GlobalReAlloc TlsFree TlsSetValue TlsGetValue TlsAlloc GetThreadLocale GlobalGetAtomNameW InitializeCriticalSection GlobalFlags GetTickCount ResumeThread SetThreadPriority WritePrivateProfileStringW GetPrivateProfileStringW GetPrivateProfileIntW lstrcmpA GetCurrentThread FileTimeToSystemTime FileTimeToLocalFileTime GlobalFindAtomW GlobalAddAtomW LoadLibraryA GlobalDeleteAtom LoadLibraryExW GetSystemDirectoryW GetCurrentThreadId LeaveCriticalSection EnterCriticalSection EncodePointer FormatMessageW GlobalSize GlobalAlloc MulDiv GlobalFree GlobalUnlock GlobalLock GetModuleHandleA FreeResource OutputDebugStringA GetFileSizeEx CreateToolhelp32Snapshot FindNextFileW lstrcmpiW Process32NextW Process32FirstW FindClose SetLastError FlushFileBuffers lstrcmpW CreateFileW ReadFile TerminateProcess GetFileAttributesW GetVersionExW OpenProcess WriteFile GetCurrentProcess MoveFileExW FindFirstFileW GetFileSize CreateDirectoryW GetUserDefaultUILanguage GetTempPathW GetExitCodeProcess CopyFileW GetUserDefaultLangID CreateProcessW GetDriveTypeW LockResource SizeofResource LoadResource FindResourceW CreateThread SetFileAttributesW DeleteFileW RemoveDirectoryW SetCurrentDirectoryW CreateEventW ResetEvent GetProcAddress GetStdHandle GetModuleFileNameW FreeConsole LoadLibraryW GetModuleHandleW SetEvent FreeLibrary GetCommandLineW MultiByteToWideChar WideCharToMultiByte LocalFree GetCurrentProcessId CloseHandle ReleaseMutex OpenSemaphoreW LocalAlloc CreateSemaphoreW ReleaseSemaphore Sleep WaitForSingleObject CreateMutexW DeleteCriticalSection DecodePointer HeapSize GetLastError RaiseException GetProcessHeap HeapFree HeapAlloc HeapReAlloc InitializeCriticalSectionAndSpinCount

gdi32

GetDeviceCaps GetObjectW Rectangle CreateCompatibleBitmap CreateCompatibleDC CreateSolidBrush CreateRoundRectRgn GetTextFaceW GetViewportOrgEx LPtoDP GetWindowOrgEx GetBoundsRect FillRgn SetPaletteEntries ExtFloodFill SetPixelV PtInRegion FrameRgn RoundRect OffsetRgn EnumFontFamiliesExW Polyline Polygon CreatePolygonRgn Ellipse CreateEllipticRgn SetDIBColorTable CreateDIBSection StretchBlt SetPixel GetTextCharsetInfo EnumFontFamiliesW CreateDIBitmap RealizePalette GetSystemPaletteEntries GetPaletteEntries GetNearestPaletteIndex CreatePalette GetRgnBox GetTextColor GetBkColor DPtoLP SetRectRgn PatBlt GetMapMode CreateRectRgnIndirect CombineRgn GetTextMetricsW GetTextExtentPoint32W CreateDCW CopyMetaFileW ScaleWindowExtEx ScaleViewportExtEx OffsetWindowOrgEx OffsetViewportOrgEx SetWindowOrgEx SetWindowExtEx SetViewportOrgEx SetViewportExtEx ExtTextOutW TextOutW MoveToEx SetTextAlign SetTextColor SetROP2 SetPolyFillMode GetLayout SetLayout SetMapMode SetBkMode SetBkColor SelectPalette ExtSelectClipRgn SelectClipRgn SaveDC RestoreDC RectVisible PtVisible LineTo IntersectClipRect GetWindowExtEx GetViewportExtEx GetPixel GetObjectType GetClipBox ExcludeClipRect Escape CreateRectRgn CreatePatternBrush CreatePen CreateHatchBrush BitBlt DeleteDC CreateFontIndirectW CreateBitmap DeleteObject SelectObject GetStockObject

msimg32

TransparentBlt AlphaBlend

winspool.drv

DocumentPropertiesW ClosePrinter OpenPrinterW

advapi32

RegEnumKeyW SetSecurityDescriptorDacl AllocateAndInitializeSid SetEntriesInAclW FreeSid RegQueryValueExW RegOpenKeyExW RegCloseKey RegEnumKeyExW RegEnumValueW RegQueryValueW InitializeSecurityDescriptor RegSetValueExW RegDeleteValueW RegDeleteKeyW RegCreateKeyExW

shell32

SHCreateDirectoryExW SHAppBarMessage SHBrowseForFolderW DragFinish DragQueryFileW SHGetDesktopFolder SHGetSpecialFolderLocation SHGetPathFromIDListW SHGetFileInfoW SHGetSpecialFolderPathW CommandLineToArgvW ord680 ShellExecuteW

uxtheme

GetThemePartSize DrawThemeBackground IsThemeBackgroundPartiallyTransparent DrawThemeParentBackground OpenThemeData CloseThemeData GetThemeColor GetCurrentThemeName IsAppThemed GetThemeSysColor GetWindowTheme DrawThemeText

oledlg

OleUIBusyW

oleacc

CreateStdAccessibleObject AccessibleObjectFromWindow LresultFromObject

gdiplus

GdipDeleteGraphics GdipBitmapUnlockBits GdipBitmapLockBits GdipCreateBitmapFromScan0 GdipCreateBitmapFromStream GdipGetImagePaletteSize GdipDrawImageI GdipGetImagePixelFormat GdipGetImageHeight GdipGetImageWidth GdipGetImageGraphicsContext GdipDisposeImage GdipCloneImage GdiplusStartup GdipFree GdipAlloc GdiplusShutdown GdipCreateBitmapFromHBITMAP GdipCreateFromHDC GdipSetInterpolationMode GdipDrawImageRectI GdipGetImagePalette

imm32

ImmGetOpenStatus ImmReleaseContext ImmGetContext

winmm

PlaySoundW

winhttp

WinHttpGetIEProxyConfigForCurrentUser WinHttpSendRequest WinHttpConnect WinHttpCloseHandle WinHttpQueryHeaders WinHttpSetStatusCallback WinHttpQueryDataAvailable WinHttpOpen WinHttpOpenRequest WinHttpGetProxyForUrl WinHttpReadData WinHttpSetCredentials WinHttpAddRequestHeaders WinHttpReceiveResponse

Adobe CC 2015/deploy/cs_CZ_deployment.xml

SHA256 573e87e9b6a0f953b1ee0aba0560e4b62872c38151fc3844db48b3def7abf76e
MD5 e7e8514d76d91bea931fa9791a40cb72
SHA1 fc7f4ddcb4e0e67d7a9a53bc89a0c3568b22ddda
SHA512 8416e38b643852c009a92635b07c2260399d6dd9e79d0e82df072bc615b2786d969f763d6e22d882bc87b5fe2eb9f5baa6e9ec09e8b05e34913e0fdefdc28548
TLSH
T1BCF0FC51B7159E7559A1122BC17BB8A4F7293CD27C3C10447FC20A7F9AD19B43603577
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/deploy/da_DK_deployment.xml

SHA256 316faf6f73ac740eb394a92b796eb89ddc5fb2931fe23ca9daa52fb073e2f2ca
MD5 d072c14378697f2a6ccb38065638b491
SHA1 8d0c766e53c5afecef35c5fb0bac8fb7ee640b9d
SHA512 c321336d4fa1553546a4a99ef386925dddc94a87b914e4e28e86f3e3716740da3e2e279f316f2df6367769af909ac35b5b1557d75ca956746db15e246a5287c4
TLSH
T165F04C40B7159E7509A1122BC17BB8A4F72A3CD27C3810447FC2063F8AC19B43603577
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/deploy/de_DE_deployment.xml

SHA256 40b5e7f3e5bc361d6e75263f49fb5a321536a8d7dedd56be3de97b7202efca74
MD5 6c7d139a56d619a2c304846c0400f666
SHA1 9bc048374444a6a2be1b2337aa21dff81a722ea9
SHA512 ed6945ca1e6100232c9aa56e95917493d4d2bf24b53fa046f56e29130f5b38e0ae0ff7bdf9016728d96a56d76ed591c46da8941c7310b181b2b6c36fc4611bd7
TLSH
T13DF0FC51B7159E7559A1122BC17BB8A4F7293CD67C3810487FC2067F8AD29B43603577
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/deploy/en_AE_deployment.xml

SHA256 dd0c686526c9a2ab6c841a6e812d5fca566c2ae5180f6252c9db982bdfb3a5e0
MD5 8c65cec4512bedb532b4d08cd25aa715
SHA1 7fd05e1af7efa07a9879175b624e17ede5c694f7
SHA512 d209de9309fa96b5dcd14d9a966846e880ac4fe0f7fc966f2fba998ba4be05b3bc4ebb2c178b2e4ddfbd83f80694f175afbb8f82d0aa20f905195437a802ebf1
TLSH
T177F0FC51B7159F7559A1122BC17BB8A4F7293CD27C3810447FC2067F8AD19B47603577
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/deploy/en_GB_deployment.xml

SHA256 e0bdab07633b202af3909c93371c34222086f94889cdeaeae625e901d395f27b
MD5 7400e2f81191ce8a8ae15333b77a44c5
SHA1 dd537359b4d52fab57cebd52c6d3399fc04a9c78
SHA512 5c1000b123d78902cf950f8d7b6ce39a7f246684fd6346e015abb6529f32051076b0c36f550ce1a0d61dd3f678d410765f64e19005a5a4df57a126fee51f58e4
TLSH
T1D1F0FC51B7159E7559A1122BC17BB8A4F7293CD27C3810447FC2067F9AD19B43603577
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/deploy/en_IL_deployment.xml

SHA256 dec7febc2b4c68df81b3a43aa4e335993af83127d12c25d1c767c45afd50974a
MD5 4782c0acef3eeecefefce4ea74895c61
SHA1 6094d9b2fa89518ee4c79b6cf4a1e66967536d53
SHA512 8c600d2db8146093581a4a33fac335eaf0b7ab590ae59a8add25f5e67e886bb87a15a4e58cded33abc43131fa24cf989b3e743b98e247dec12add106150bee08
TLSH
T1E9F0FC51B7159E7559A1122BC17BB8A4F72A3CD27C3810447FC2067F8AD19B43603577
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/deploy/en_US_deployment.xml

SHA256 e36021daac7f714ce618c4f5899d1c2c93da5e9b1256002db3c05dc4550b7bbc
MD5 5390494bb8abd05adf47f2190cd9051f
SHA1 652c2f625122ae869da3c0fbd5396e9df8d2301c
SHA512 84134ac1dd4caf1cb912e238fe636308622195185fcce812d140464c8e996f7f26408f1f179de108e19514bdb28db689968a0daf013733c83c25b59f56a2b10a
TLSH
T1A3F0F651B7259E7659A2222BC17BB8A4F72A3CD77C3810487FC2067F8AD19B4360357B
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/deploy/es_ES_deployment.xml

SHA256 f483face797c01e881b4cbc30eeba0d9d2d451412c74282a89791c9bcd770dca
MD5 6d61afa8461934c6109b7ada6af4bd87
SHA1 def5ca221353023ef7eecb5c8c54eb39eb57fa1d
SHA512 a4aa323888a81db50c2b5654815180130dc9ead42d59ca2cc28bf770f73116fa215aaedb474268eae18c47c579df40cd8842daf04fa936b11722e2d0198a2415
TLSH
T128F0FC51B7259E7659A1122BC17BB8A4F7293CD27C3810447FC2467F8AD19B43603577
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/deploy/es_MX_deployment.xml

SHA256 05d73a7e422ae2006d1edf8d188a190bf3a5f4d624049c375f29016b9ce24444
MD5 c329d2603ab5905bafa97bddb561e4f1
SHA1 26703a0e023513acb92932ce2618ae877afc742c
SHA512 be6b1365f09b9bb8ed19c3bf73beda39442d737f1f4da29c7f43bc899cc2a43d76a183290bce4161f04feda16b895071c9cbfb395931ab92be67fa26e5b44ecd
TLSH
T16FF04C50B7258E7509A1122BC17BB8A4F7293CD27C3810447FC2063F8AC19B43603577
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/deploy/fi_FI_deployment.xml

SHA256 1c874363c308ba20437bc55855b0745e53a33b4e8d8b9cab3b8751d50cac1fde
MD5 5ae05565551fbb0eb2a10f94cdfc1d09
SHA1 0eb6ee07c1e8d2ad1a135b1a12453125f61954ac
SHA512 111ee8f9cb36f6ff1354764740ad9aa24eef9ea241b9f631dd6be8d81671b94b4330ab1e8a0bb098c7fc89db2cec41c24edd78ce0ac660715a34f95b7deab7c7
TLSH
T1FDF0F651BB159E7659A1222BC17BB8A4F72A3CD27C3C50487FC2067F8AD29B4360357B
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/deploy/fr_CA_deployment.xml

SHA256 2e38d81572747613103c1d470296e1d07e47f73f80563915a5bb5fa2eb231b7a
MD5 1353738527cc4a99f8f70d125d32dd04
SHA1 5c64527723decb979fe5bc831f674f0f0aefeb01
SHA512 731cc4a8cbb017736470e175134f89d59ec086fef0f8238611558f7f8b24d46c072c7ddfa619d482b536a00157cadede18cde720553613a4c0c01f1b87193933
TLSH
T125F0F651B7159E7659A1222BC17BB8A4F72A3CD27C3C10487FC20A7F9AD29B4360357B
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/deploy/fr_FR_deployment.xml

SHA256 6703a4198728ec742ca6409f6756213223c8c6e76c5c7cfe46534bdb2f226b55
MD5 6d9f2b2cdfbaad1ce516095d71001d3c
SHA1 bb747644c0378bd9ef8375f584ca75ca8b8696b3
SHA512 4e7d0122880c196524c0dc87c5cfc04514067c605b4f5b26a1c40a09a44e9cf08df609b1d13f5d17ae105bc12b6151703f91bf98c3b54366a1e01005917362ac
TLSH
T128F04690BB158E7609A1222BC17BB8A4F72A3CD67C3810487FC3063F8AC19B4360357B
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/deploy/fr_MA_deployment.xml

SHA256 d3b39dc6655b55c75fa3d88caf097b20e8f86899df1267acba95ce84efad5730
MD5 3cc75fba90508204b9398f641f010a4f
SHA1 e5c38914f4b515c3c6f3c48a04d04f1ae18f71a1
SHA512 e962142278029f169d9d5df86507c33c7ffcb3951abaa42d25d7f7dfe076911a0ba1bd876590ded1fa5e51a5e6c8bc55deadb9634f5ad556ebb06b701ba520b5
TLSH
T1D8F0F651B7159E7659A1222BC17BB8A4F72A3CD27C3C10487FC2067F9AD29B4360357B
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/deploy/hu_HU_deployment.xml

SHA256 bfd4dafe1530a46c7d5b2b451888bd89d21b63941e656474621bf43ac20fee3d
MD5 18d5f3077bc5ea75c63efe5cb0c99358
SHA1 261d2efc1f842de11ba3d27dd3ee948836e2b54e
SHA512 f22c83e08f401f54601a176aaa283cb325e8e5aab24d3457d45d5e859a55ae4e42ca10d0d48d254bf8816b8d08c917ac8660da22c490f0bb2dc64069dae29e97
TLSH
T14CF0F651B7159E7659A1222BC17BB8A4F72A3CD27C3810487FC2067F8AD19B4360357B
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/deploy/it_IT_deployment.xml

SHA256 401535486eb6e3e7bd89ecf9bfc6a9ef51a722911d418fac54632db1e31f3daa
MD5 20218a9e0c0ba4ff06a269a8f1bfae92
SHA1 285c8b2aaf5e1f4fc426adf7d3d543028a535e7c
SHA512 37d0a4edec731a1ad0f97e75572405c706d358434305ab5681209e59d6fb46c4cea3380fff10e1bca7b55dae3baff7402d4ad42d0a3db1762f2bed5a779d1f7d
TLSH
T1ACF0FC51B7159F7559A1122BC17BB8A4F72A3CD27C3850447FC2067F8AD19B43603577
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/deploy/ja_JP_deployment.xml

SHA256 461eeed335a813886d609846062860ba712bb0b328d245d72a5928335a161f3e
MD5 3cbe2d05290731565babfd490bb6d6ff
SHA1 242243a94fbe60c16f450ac8eace1e6d7d2e3ebe
SHA512 7ed71e8bc4c2f33333d47d98f9a4ed7b60473a5c13538116e7a9756650186d26a8516268f377d28ae2b21fafcb0722414e39b49dffb10e53ba3d8860d3724ff4
TLSH
T17BF02241B7158E6609A1222AC17BB8A4F72A3CD27C3810487FC2063F8AD1AA4760357B
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/deploy/ko_KR_deployment.xml

SHA256 cb0262d06028242c5082a6427ae8cc13821ceca7c14599c8cdc8963b6fcb6cc5
MD5 55ae3da83fe7dde81bbc538ff1ffc586
SHA1 f9d387a656840b2c79dd917e8e712be8c156c8d0
SHA512 2c1d46c37e22a675f314fc4bd68da9561f160a8db9dec8403ad348b67904faf6422b88fb15b20dddbd10068a435d24f576d686f4ccebf4865e0616ee58938bda
TLSH
T1DBF04690B7158F7609A1222BC17BB8A4F72A3CD27C3850487FC2063F8AC19B4360357B
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/deploy/nb_NO_deployment.xml

SHA256 edd7ca947ee1e4c4d72f979f0cdd364d5e91be359499eee39a237bad0553ba49
MD5 7bfe0d2a6bc200422ffc463c314e1358
SHA1 0bebbbb4072e6f6e987ccae694c34addba20d305
SHA512 78a8705e0a61102158ce6e2f53ec8fd0fde146423f85f8ca9b4f2e1010aa8fbce852d14ac711308daf6aa407cdaa1a0ea695cc1f3601bd2dfc22cd5a04204424
TLSH
T133F0F651B7159E7659A1222BC17BB8A4F72A3CD27C3850487FC2067F8AD1AB4360357B
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/deploy/nl_NL_deployment.xml

SHA256 4c69085cc23954612e757eaa367c3a15a61dcd0c216609ffdef7407ab30fe180
MD5 443acd7ab30b8c8321927ed898a812f9
SHA1 801bf9f3f0cbdae80d63451bfaf97273be4d2494
SHA512 e564caf0e157589646b1cfe2eabfc57efeb86515026536763557d4284fe35b25f967f37306cbefefbca9df33b25de8d67f44653af9ea8cb2825b487305f117fc
TLSH
T162F04640B7158E7609A1222BC17BB8A4F72A3CD27C3810487FC2063F8AC19B4360357B
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/deploy/pl_PL_deployment.xml

SHA256 1090678eb0bb512da5a45d9765886c9ee34bcd815655ff3191073dada326bbd7
MD5 8e268b5d63c069128b5a8a023a70cfdc
SHA1 f0a12750a7107f9b0ca59a05fed2bea43bcdaa03
SHA512 c1f7ddf17939c0a49f98ae85118d5463850663ccbc4efee42363c4b504b670bdffb91eb5eef9fd3693a2e8e8fb21fda3bc18acf324f479d43bd1a9f54d43edc4
TLSH
T19FF0F651BB159F7659A1222BC17BB8A4F72A3CD27C3810487FC2067F8AD19B4360357B
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/deploy/pt_BR_deployment.xml

SHA256 2e64becb3f8523e6f03a7ce686e4f2fbb5e5a469551e4666d8a4313087e06d96
MD5 7bed62ded8d991123ac708cf11b18e9a
SHA1 afa37103099629971622813a310f653cefd13b86
SHA512 3360407a04c082466b236163e8135759c42012af6f054cad02d066fc94c16cb760bd4cd4492f2a54c9c1187c71041df97b38a899148890331f26734f61fe10ce
TLSH
T191F0C291B7159E6659A1262BC17BB8A4F72A3CD27C3810487FC2067F8AD19A4360357B
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/deploy/ro_RO_deployment.xml

SHA256 e98607b772354380d7836dc1638f30b6d0f8e1258cfc0f2bfc5039379d94bf24
MD5 7126f4e7452350d00223b8962e26e338
SHA1 141438ef52e28dcdb71fc218179eea3843636340
SHA512 ea823a16ff995b74e4840848ccb5be252d4f20c80cef04d84c00789c8bb54c3c929c7f842a5c2a93d8c86bddf81ad79f5b97a76439fb26de48011c9fb8b903de
TLSH
T189F0F651B7159E7659A1222BC17BB8A4F72A3CD27C3810487FC3067F8AD19B4360357B
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/deploy/ru_RU_deployment.xml

SHA256 a47805c8a43f681f6e0446db9c4dda634d5498de5cbc312defeb4db3adeab1ea
MD5 3dcb097fd2a40ff8aeff40b6367ae6d0
SHA1 d393b65b58d8067122f11943e7b118cb111caae8
SHA512 6cdc18699c1d6a969c1ba6976d6d9fce72c1c57c9a459e195cbbe765e2b0b0b8dad32439e8b4ac9fc2d26578e53dd06febe1ad2eb1a5c26430b892c7dc4d6db2
TLSH
T1F6F0F651B7159E7659A1222BC17BB8A4F72A3CD27C3810487FC2067F8AD19B4360357B
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/deploy/sv_SE_deployment.xml

SHA256 75b2534132141b95e6a0ce940728439a70209a2cb3833c5e9c504606c0409e18
MD5 b291f0f857b01e255b695425d435cfd6
SHA1 9a3b2aa0410fc52d1ceb1814601fa2d157d0954d
SHA512 f1ca765d59b742a14ba26693660690ab5d0d2807acb73cb2153039f6431b475feccf735a6154b3f46bcbbf188fcc598bf7760765b4fb78e723bf0d2fb39f1a86
TLSH
T13AF04C40B7168E7519A1122BC17BB8A4F7293CD37C3810447FC2063F9AC19B43603577
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/deploy/tr_TR_deployment.xml

SHA256 799877cd135c4faf322efc0c4580fe23776e5f0d3655ae6119642614c6b4b8dc
MD5 3af2faf4cdf185b8a2f9e7bfaa500091
SHA1 6d3ded6487b4af0413ac2cc9badec9b71901bc93
SHA512 01174624469008d31e6da3cb0984ac7ff2a72e40771b22ea52341f6219c61ac7010938d479dfca5daf2b850ccbbc1bdcd9b4b1df56c37edabcf3e3b806786521
TLSH
T134F0C291B7159E6659A1222BC17BB8A4F72A3CD27C3810487FC24A7F8AD19B4360357B
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/deploy/uk_UA_deployment.xml

SHA256 84f9558864aa40788f6688e40d3a9917b30921c5f641f911a124794853aea598
MD5 1454741dbc574249d55f68a17ec41300
SHA1 39261ce8771a7d2c521eac8c9c4301b86dbba90a
SHA512 ab550f04e051481a6bba735c58b6dd1711952f6b4306a897ebcaf5c4fe5e7abf22665182dbbd619a0ffd74bdb31897858900766259049e21d3decc1cf7199f67
TLSH
T10BF04640B7158E7609A1222BC17BB8A4F72A3CD27C3810487FC2067F8AC29B4360357B
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/deploy/uninstall.xml

SHA256 83292d86df2a5fd82f187c1fe21b99df66a6b98bbc9395de0381dc1dce6edebd
MD5 262d20448e56c4326c926cdf1f62cbda
SHA1 3d4d685f58d7259882f6aabd1407738c1ee0a08c
SHA512 6752629aedee7d980d0085f18f437ed3ee9fc95c7584b9d09176af172bce39523599960d9e4aa568f1dd0a7d8b719a2ff589739cafdda4bee30766dc464edea0
TLSH
T1CAE0D890B224ED555BB2313A42FBB8B8F61A3C676C39010477C70FBFD640AB42805427
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/deploy/zh_CN_deployment.xml

SHA256 7fe4553ce63e029df720892be43ac0a0dda61124c2dbe606698836686cffaaef
MD5 69821c73b9b341c57c4bfd953a4f7f09
SHA1 45518fbb3c078f2e6baaad7ca3386b889032d248
SHA512 d30dd8588a3557e36e881e71a752343f3e65dff800ced124c4879a28f87f921545b4904a08ad1898342f12c6ca9768376e5b0808a985e3ef70823f5653ea8f3a
TLSH
T1CBF0C251B7159E6659A1222AC17BB8A4F72A3CD27C3810487FC60A7F8AD19A4360357B
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/deploy/zh_TW_deployment.xml

SHA256 390bce19c4ee9506048e67d3847415e54cb35eb509f91fcd4775e18049efefc3
MD5 ab98ac52abc4dbe127b446b7f9449694
SHA1 60f55930ae38a1dd7a843a47c150e4a0d470f4c7
SHA512 a8a47434560dd1a74cd1c91fdb909ba017acf80b6efae5cc2ed99ae87238c59d9eed80f998c1a755409d2a5522468000f9d037aa047ba1b5890790b25c53ed49
TLSH
T115F0F691B7159E7659A1222BC17BB8A4F72A3CD37C3810487FC20A7F8AD19B4360357B
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/packages/CCM/CCM.pima

SHA256 f767fdebd9493e5f1df685fe9bcf2549f1ee64c1ed2ccd1491bdf5ee45a11124
MD5 900dbebbde56a81da17442e0e14dc5d5
SHA1 108ac8a6ab091d96a6d496739f9bdfa5ee4260ef
SHA512 0734f8d95932893ad6c8d0dfc1930ab44abafdcca88ff002aa95ebf8ed5337f94a32be054f5582d8cff5b4907e358f12e8b36abf16bc867042ae76ecbb7af579
SSDEEP 98304:oWDmX3t3+erIGTkvVXKZ9dx4eCic99B+j94zxsaEhYpEMofH4:T63t3bICWA9knZzmaEhEEvfY
TLSH
T1D84633A2B71B8AA7C521D9F0A6CE5588D42C800BB1343AF3E87D1463C5973F64AD7F25
MD5 SHA1 SHA512 SSDEEP TLSH

CCMFlex.swf

SHA256 1cf7a79d196775dd4e29c9f8adb3b8be8a554fdc00e932ca71cd4649c423d878
MD5 90782433e189075f3ad59b7c3c7e8ea5
SHA1 21afc4e756cb14cbf24de88196a89d1b298e633d
SHA512 4468f945f11ba227d401ec49e5c4bcf476ce59cd38bd57873570ce64bfee0d1fb89cf4a68f731c198c3b0549d325f2075d6c9a2f41ce4e6666b2523553b35a22
SSDEEP 24576:WDErjzG70LZ8zsTtoo0HG63qJCCEIujuSq/WVlAdISlmZEpNISowVUC+Hg6+Z2no:WD/ILEoobqX3ujOSmvQZIXU6
TLSH
T1436533D995CFCAA89D048CD6F302F4A8870C1C3E79E994552BFA6D5E81090B72DC2B77
MD5 SHA1 SHA512 SSDEEP TLSH

CCMNative.dll

IMPHASH b2032d9d67d8e0c989d39a9c1e80a194
SHA256 f2c68963f57bb5389f729fcfd8db22dd57d81063bc7de8743e0de7f6b3730db4
MD5 1b66b059ddd6fd5715f363c72ef0dcbc
SHA1 b89cf84516f1dc15a670ffda9e4b5ce012f2af56
SHA512 1c57167945848af07645576198b40e5a40c26e0b00812bd39a2e608f112d70df9f3b77a720eb6b19974a906d82c61e1d07be1753faa2d64f289d2b9b6302852b
SSDEEP 24576:NvUH0ztIYpAC0kLofcWzPcyQRrqtIrmHrvYQWxcrzvwDM/rOw:gSyQL0NJ8nxcrTwDM/rOw
TLSH
T1E8857B11B7D3C135F8FB12B059386B5A683DB9550B3489EFA3C81D9E29306C2AB36357
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

8d:5b:2f:e8:3f:e3:89:28:2e:e8:39:82:ca:d2:62:f4:19:60:7f:77

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Chains

Apr 28, 2014

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Serial Number

1d:37:83:b3:de:cd:5d:bb:16:e3:3c:d3:a6:b3:bf:db

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 20, 2014 - Feb 21, 2015

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

1

Major OS version

5

Entry point

1026529

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\builds\AAM\8.0\source\dev\aamcore\target\win\Release\CCMNative.pdb

shell32

SHGetMalloc SHGetSpecialFolderLocation SHBrowseForFolderW ord680 ShellExecuteExW SHGetSpecialFolderPathW SHGetFolderLocation SHGetPathFromIDListW SHGetFolderPathW SHCreateDirectoryExW

shlwapi

PathIsFileSpecW PathRenameExtensionW PathAddExtensionW PathFindFileNameW PathFileExistsW PathAppendW PathRemoveBackslashW PathStripPathW PathIsDirectoryW PathRemoveFileSpecW PathIsNetworkPathW PathRemoveExtensionW

winhttp

WinHttpGetIEProxyConfigForCurrentUser WinHttpOpenRequest WinHttpQueryDataAvailable WinHttpSetCredentials WinHttpSendRequest WinHttpCloseHandle WinHttpConnect WinHttpSetTimeouts WinHttpSetOption WinHttpOpen WinHttpQueryAuthSchemes WinHttpGetProxyForUrl WinHttpQueryHeaders WinHttpReceiveResponse WinHttpReadData

setupapi

SetupDiGetDeviceRegistryPropertyW SetupDiGetClassDevsW SetupDiDestroyDeviceInfoList SetupDiEnumDeviceInfo CM_Get_DevNode_Status SetupDiGetDeviceInstanceIdW

msi

ord113 ord70

advapi32

SetNamedSecurityInfoW GetUserNameW GetFileSecurityW DuplicateToken AccessCheck MapGenericMask CryptHashData CryptDestroyHash CryptCreateHash CryptReleaseContext CryptAcquireContextW CryptGetHashParam RegQueryValueExW RegCloseKey RegOpenKeyExW RegQueryValueExA FreeSid SetEntriesInAclW AllocateAndInitializeSid GetNamedSecurityInfoW OpenProcessToken

user32

GetSystemMetrics SendMessageW GetActiveWindow wsprintfW

ole32

CoTaskMemFree StringFromGUID2 CoCreateGuid CoCreateInstance CLSIDFromProgID CLSIDFromString OleRun CoUninitialize CoInitialize CoSetProxyBlanket CoInitializeSecurity CoInitializeEx

oleaut32

SysAllocStringByteLen GetErrorInfo SysFreeString VariantChangeType VariantInit VariantCopy VariantClear SysStringLen SysAllocString

kernel32

HeapSize GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW TlsFree TlsSetValue TlsGetValue TlsAlloc CreateNamedPipeW ConnectNamedPipe GetStdHandle GlobalFree SetFilePointerEx SetEndOfFile OpenMutexW GetProcessHeap SetUnhandledExceptionFilter UnhandledExceptionFilter GetCPInfo HeapReAlloc IsDebuggerPresent RtlUnwind RaiseException GetTimeZoneInformation GetConsoleMode ReadConsoleW GetFileType IsValidCodePage GetOEMCP LoadLibraryExW FormatMessageA GetConsoleCP GetModuleFileNameA GetFullPathNameW GetEnvironmentStringsW FreeEnvironmentStringsW GetFullPathNameA CreateFileA QueryPerformanceCounter OutputDebugStringW UnlockFile LockFile GetTickCount SetStdHandle WriteConsoleW SetEnvironmentVariableA GetSystemTimeAsFileTime GetFileAttributesA LockFileEx GetModuleHandleW GetCommandLineA GetModuleHandleExW ExitProcess HeapAlloc HeapFree DecodePointer EncodePointer GetStringTypeW DeleteFileA AreFileApisANSI GetTempPathA GetDiskFreeSpaceA LoadLibraryA GetLocalTime GetFileSizeEx GetTimeFormatW GetDateFormatW GetDiskFreeSpaceW GetCurrentThreadId SetFilePointer CreateSemaphoreW ReleaseSemaphore ReleaseMutex GetCurrentProcess CopyFileW GetFileAttributesW CreateFileW lstrlenW FlushFileBuffers GetLastError CloseHandle LocalFree SetFileAttributesW WideCharToMultiByte GetACP MultiByteToWideChar CreateDirectoryW InitializeCriticalSectionAndSpinCount GetTempPathW GetLocaleInfoA EnumSystemLocalesW GetProcAddress GetUserDefaultUILanguage FindFirstFileW FreeLibrary CreateProcessW WaitForSingleObject LoadLibraryW GetExitCodeProcess GetModuleFileNameW FindClose RemoveDirectoryW FindNextFileW DeleteFileW lstrlenA InterlockedIncrement InterlockedDecrement InitializeCriticalSection LeaveCriticalSection EnterCriticalSection DeleteCriticalSection CreateThread OpenFile GetDriveTypeW SetEvent FormatMessageW GetVersionExW IsProcessorFeaturePresent GlobalMemoryStatusEx GetSystemInfo OpenEventW GetDiskFreeSpaceExW GetCurrentProcessId GetSystemTime Sleep TerminateProcess GetStartupInfoW GetLongPathNameW TerminateThread ResumeThread GetFileSize CreateMutexW MoveFileExW WriteFile ReadFile SetLastError

generic

count=2, id=199, version=41118,

count=40, id=205, version=50929,

count=86, id=207, version=50929,

count=234, id=206, version=50929,

count=2, id=188, version=30716,

count=1, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=1, id=206, productName=VS2012 UPD4 build 61030, version=61030,

count=1, id=190, version=30716,

count=23, id=185, version=30716,

count=274, id=1, productName=Unmarked objects,

count=34, id=207, productName=VS2012 UPD4 build 61030, version=61030,

count=116, id=211, version=61030,

count=1, id=202, productName=VS2012 UPD4 build 61030, version=61030,

count=1, id=201, productName=VS2012 UPD4 build 61030, version=61030,

count=1, id=151,

count=1, id=204, productName=VS2012 UPD4 build 61030, version=61030,

Utilities/AAMHelper.exe

IMPHASH 34c799c8d0bec4da49b6ba81b5f826a8
SHA256 8d33edaeb18e91203df05a8c5edfce8560388843dd15569121ba5c7ec81ab8a5
MD5 17ed7967f7d2cb901838e7998c414839
SHA1 b340641b17c8b8de4f06d28a909c3603570b8f36
SHA512 a13d15254adb39fb7b4641b91880b23524ccc9f39c3d39956c3003278adce5bb3203b6501e6e5566d164b2ac80c9723534046a5d0d49259100a1b61bdf610858
SSDEEP 6144:jKdHzYj8dFGMrAaai6F9G8aC+OsAOn0AO+uCuv:jKdHzYjdAai6znh+OsB0tv
TLSH
T1E4948D1073D2C136DAB203710B7DAB5A953EBD104F6555EBE3E80D1E8E706C1AB36B62
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

49:8a:07:f5:25:26:0b:42:d8:f9:82:72:11:f8:60:a0:dc:ad:2f:e8

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Chains

Apr 28, 2014

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Serial Number

1d:37:83:b3:de:cd:5d:bb:16:e3:3c:d3:a6:b3:bf:db

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 20, 2014 - Feb 21, 2015

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

1

Major OS version

5

Entry point

94848

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\builds\AAM\8.0\source\dev\aamcore\target\win\Release\AAMHelper.pdb

psapi

GetModuleFileNameExW

kernel32

GetTempPathW GetLastError GetProcAddress CloseHandle lstrlenA InterlockedIncrement InterlockedDecrement InitializeCriticalSectionAndSpinCount GetSystemTimeAsFileTime GetVersionExW FileTimeToSystemTime SetDllDirectoryW Sleep GetCurrentProcessId WriteFile InitializeCriticalSection LeaveCriticalSection ReadFile CreateFileW EnterCriticalSection DeleteCriticalSection CreateThread SetFilePointer GetCurrentThreadId GetDateFormatW GetTimeFormatW GetFileSizeEx GetLocalTime CreateMutexW OpenMutexW ReleaseMutex LocalAlloc MultiByteToWideChar QueryPerformanceCounter GetModuleHandleW GetModuleFileNameW GetExitCodeProcess LoadLibraryW WideCharToMultiByte OpenProcess WaitForSingleObject GetCurrentProcess CreateProcessW FreeLibrary CompareStringW SetEnvironmentVariableA SetEndOfFile WriteConsoleW SetStdHandle OutputDebugStringW HeapReAlloc GetConsoleCP FlushFileBuffers SetFilePointerEx ReadConsoleW GetConsoleMode GetOEMCP GetStartupInfoW TlsFree TlsSetValue TlsGetValue TlsAlloc TerminateProcess SetLastError SetUnhandledExceptionFilter UnhandledExceptionFilter GetCPInfo GetACP IsValidCodePage LoadLibraryExW HeapSize FreeEnvironmentStringsW GetEnvironmentStringsW GetFileType GetProcessHeap GetStdHandle LocalFree EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW GetStringTypeW EncodePointer DecodePointer GetCommandLineW HeapFree HeapAlloc ExitProcess GetModuleHandleExW MoveFileExW GetTimeZoneInformation IsDebuggerPresent IsProcessorFeaturePresent RaiseException RtlUnwind

user32

wsprintfW

advapi32

LookupPrivilegeValueW CryptHashData CryptDestroyHash CryptCreateHash CryptReleaseContext CryptAcquireContextW CryptGetHashParam AdjustTokenPrivileges OpenProcessToken

shell32

SHCreateDirectoryExW ord680

ole32

CoCreateInstance CLSIDFromProgID CLSIDFromString OleRun CoUninitialize CoInitialize

oleaut32

SysFreeString VariantInit VariantCopy VariantClear SysAllocString GetErrorInfo

shlwapi

PathRenameExtensionW PathAppendW PathAddExtensionW PathFindFileNameW PathIsFileSpecW PathFileExistsW PathRemoveFileSpecW PathIsDirectoryW PathRemoveExtensionW

crypt32

CertGetNameStringW

wintrust

WTHelperGetProvSignerFromChain WTHelperGetProvCertFromChain WTHelperProvDataFromStateData WinVerifyTrust

Utilities/AdobeApplicationManager(URIHandler).exe

IMPHASH dff89fea4a428b93343f0cbda1e7482f
SHA256 4298254c6335720c53944b0bbbf3c34368d24c78e1bddd30d42a290dc2d98235
MD5 a53e0ea599581786cc9e9bc0739f3818
SHA1 2f7f09a7fdfe70d0911ee70ee579adba06fa1ac8
SHA512 455dbb27fef606994ae1022977ed970763ed430b4e1fd117b9a30e22c60a8604b83326c7bb594d694320cef80f82b11d2eec45b65066ec0b7bb0c7c8c96d274a
SSDEEP 12288:RrMVtb5V0p5SVRRBvdxxo/5RJ2OfQqwsBOIj8h5:RQhsgxoRRoOl765
TLSH
T169D46C90B7A3E1B1D9A241F40D6DEB0A742DAC180B664EFBF3D80A1D1D719C11B36BB5
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

43:02:5b:7f:bc:f9:0c:5c:e9:0d:7b:92:25:6a:93:67:eb:ee:0f:44

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Chains

Apr 28, 2014

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Serial Number

1d:37:83:b3:de:cd:5d:bb:16:e3:3c:d3:a6:b3:bf:db

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 20, 2014 - Feb 21, 2015

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

1

Major OS version

5

Entry point

225960

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\builds\AAM\8.0\source\dev\aamcore\target\win\Release\AdobeApplicationManager(URIHandler).pdb

advapi32

OpenProcessToken LookupPrivilegeValueW AdjustTokenPrivileges RegCreateKeyExW RegDeleteKeyW RegOpenKeyExW RegEnumKeyExW RegCloseKey RegSetValueExW

shlwapi

PathRenameExtensionW PathAppendW PathAddExtensionW PathRemoveFileSpecW PathIsFileSpecW PathRemoveExtensionW PathFileExistsW PathIsDirectoryW PathFindFileNameW

shell32

SHGetSpecialFolderPathW SHCreateDirectoryExW

wininet

InternetCanonicalizeUrlW

kernel32

SetEnvironmentVariableA SetEndOfFile WriteConsoleW FreeLibrary CreateProcessW GetCurrentProcess WaitForSingleObject OpenProcess WideCharToMultiByte LoadLibraryW GetExitCodeProcess GetModuleFileNameW MultiByteToWideChar GetTempPathW GetLastError GetProcAddress CloseHandle DeleteFileW SetFileAttributesW lstrlenA InterlockedIncrement InterlockedDecrement InitializeCriticalSectionAndSpinCount GetModuleHandleW GetEnvironmentVariableW SetDllDirectoryW GetCurrentProcessId lstrlenW InitializeCriticalSection LeaveCriticalSection EnterCriticalSection DeleteCriticalSection SetFilePointer WriteFile CreateFileW GetCurrentThreadId GetDateFormatW GetTimeFormatW ReadFile GetFileSizeEx GetLocalTime CreateMutexW OpenMutexW ReleaseMutex LocalFree QueryPerformanceCounter GetStringTypeW Sleep EncodePointer DecodePointer GetCommandLineW HeapFree HeapAlloc GetFileAttributesExW GetSystemTimeAsFileTime MoveFileExW GetTimeZoneInformation IsDebuggerPresent IsProcessorFeaturePresent RaiseException RtlUnwind GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW ExitProcess GetModuleHandleExW GetStdHandle GetProcessHeap GetFileType GetEnvironmentStringsW FreeEnvironmentStringsW HeapSize IsValidCodePage GetACP GetOEMCP GetConsoleMode ReadConsoleW SetFilePointerEx FlushFileBuffers GetConsoleCP HeapReAlloc LoadLibraryExW OutputDebugStringW SetStdHandle

ole32

StringFromGUID2 CoCreateGuid CoCreateInstance CLSIDFromProgID CLSIDFromString OleRun CoUninitialize CoInitialize

oleaut32

GetErrorInfo SysFreeString VariantInit VariantCopy VariantClear SysAllocString

Utilities/AdobeApplicationManager.exe

IMPHASH 0a17acb79fb7635b17907014a833bbce
SHA256 f24ce3b6125d085fb7700be445ccd58e4fcd13baf797c74ed516fe1efb820b1b
MD5 7d18772c8b6bfc67c73b71c3a0c1df22
SHA1 0c7b41a958257fa296acfce05c7bac7dcc88ec95
SHA512 25a5b0b537cf83913629e62bbac052d26d1fcf453124e050c15e58ac17ee41d820e94a821cc0f3af022ed3d009d9f37700cddeccd232bb7619756033f624bc45
SSDEEP 24576:HYP7P/G0jd3cvEDmjacOM5GG6eXh5bQ0jNcNOF8h73tsDT86nKd8jdtN482HXshg:4L3okPcOm5xG73aDTJhR48nTldQ
TLSH
T167B52751A3E59129F6F32770AABD5A664A7EBC115B35C0DFA3900C0D09F0AC09E367B7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

5e:7a:22:78:78:de:68:f7:3d:2a:cd:d5:f3:3d:59:83:3f:9f:68:f8

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Chains

Feb 27, 2014

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Serial Number

1d:37:83:b3:de:cd:5d:bb:16:e3:3c:d3:a6:b3:bf:db

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 20, 2014 - Feb 21, 2015

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

1

Major OS version

5

Entry point

822605

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\builds\AAM\8.0\source\dev\aamcore\target\win\Release\LBS\AdobeApplicationManager.pdb

shell32

ShellExecuteExW SHGetSpecialFolderPathW ShellExecuteW CommandLineToArgvW ord680 SHCreateDirectoryExW

shlwapi

PathFindFileNameW PathRemoveFileSpecW PathRemoveExtensionW PathIsDirectoryW PathStripPathW PathIsNetworkPathW PathRenameExtensionW PathAppendW PathAddExtensionW PathIsFileSpecW PathFileExistsW

winhttp

WinHttpAddRequestHeaders WinHttpSetStatusCallback WinHttpReceiveResponse WinHttpQueryHeaders WinHttpGetProxyForUrl WinHttpOpen WinHttpSetOption WinHttpQueryAuthSchemes WinHttpSetCredentials WinHttpSendRequest WinHttpOpenRequest WinHttpQueryDataAvailable WinHttpReadData WinHttpConnect WinHttpCloseHandle WinHttpSetTimeouts WinHttpGetIEProxyConfigForCurrentUser

comctl32

ord17

setupapi

SetupDiGetDeviceInstanceIdW CM_Get_DevNode_Status SetupDiEnumDeviceInfo SetupDiDestroyDeviceInfoList SetupDiGetDeviceRegistryPropertyW SetupDiGetClassDevsW

kernel32

SetEnvironmentVariableA IsDBCSLeadByteEx WriteConsoleW SetStdHandle WaitForMultipleObjects OutputDebugStringW GetConsoleCP ReadConsoleW GetConsoleMode GetLocaleInfoA EnumSystemLocalesW GetModuleHandleW GetACP GetProcAddress GetUserDefaultUILanguage MultiByteToWideChar SetFilePointer WriteFile ReadFile CreateFileW GetLastError CloseHandle DosDateTimeToFileTime CreateFileA SetFileTime GetFileAttributesA FlushFileBuffers GetFileTime LocalFileTimeToFileTime FindFirstFileW FreeLibrary CreateProcessW GetCurrentProcess WaitForSingleObject WideCharToMultiByte LoadLibraryW GetExitCodeProcess GetModuleFileNameW GetTempPathW FindClose RemoveDirectoryW FindNextFileW DeleteFileW SetFileAttributesW lstrlenA InterlockedIncrement InterlockedDecrement InitializeCriticalSectionAndSpinCount CreateMutexW Sleep ReleaseSemaphore CreateSemaphoreW LocalAlloc OpenSemaphoreW ReleaseMutex GetCurrentProcessId LocalFree GetVersionExW GetSystemTime SetDllDirectoryW FindResourceW LoadResource SizeofResource LockResource TerminateThread ResumeThread CreateThread GetFileAttributesW SetEndOfFile SetFilePointerEx InitializeCriticalSection EnterCriticalSection LeaveCriticalSection DeleteCriticalSection GetFileSizeEx GlobalFree GetCurrentThreadId GetDateFormatW GetTimeFormatW GetLocalTime OpenMutexW GetFileSize MoveFileExW SetEvent SetLastError CreateEventW CreateDirectoryW GetFullPathNameW GetFullPathNameA QueryPerformanceCounter UnlockFile LockFile GetTickCount GetSystemTimeAsFileTime FormatMessageA LockFileEx GetDiskFreeSpaceW LoadLibraryA GetDiskFreeSpaceA GetTempPathA AreFileApisANSI ConnectNamedPipe CreateNamedPipeW GetTimeZoneInformation GetStringTypeW EncodePointer DecodePointer GetCommandLineW ExitProcess GetModuleHandleExW HeapFree HeapAlloc IsDebuggerPresent IsProcessorFeaturePresent RaiseException RtlUnwind HeapReAlloc GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID GetStdHandle GetProcessHeap GetFileType GetEnvironmentStringsW FreeEnvironmentStringsW IsValidCodePage GetOEMCP HeapSize LoadLibraryExW DeleteFileA

user32

SendMessageW EnableWindow SetWindowTextW TranslateAcceleratorW GetMessageW GetDlgItemTextW LoadAcceleratorsW DispatchMessageW wsprintfW MessageBoxW ShowWindow SendDlgItemMessageW EndDialog PostMessageW GetDlgItem EnableMenuItem DialogBoxParamW GetWindowTextLengthW GetSystemMenu LoadImageW TranslateMessage

advapi32

RegQueryValueExA RegOpenKeyExW RegCloseKey InitializeSecurityDescriptor SetSecurityDescriptorDacl AllocateAndInitializeSid SetEntriesInAclW FreeSid CryptGetHashParam CryptAcquireContextW CryptReleaseContext CryptCreateHash CryptDestroyHash CryptHashData GetUserNameW

ole32

CoInitializeEx CoInitializeSecurity CoSetProxyBlanket CoUninitialize CoInitialize OleRun CLSIDFromString CLSIDFromProgID CoCreateGuid StringFromGUID2 CoCreateInstance

oleaut32

GetErrorInfo SysFreeString SysAllocString SysStringLen VariantClear VariantCopy SysAllocStringByteLen VariantInit

Utilities/npAdobeAAMDetect32.dll

IMPHASH c30471c98f9d7fb90393d68e884a73a2
SHA256 067f220fa2e61b6871b42c62d396abfdd0b3f1831cdb98327db8dbd29022c652
MD5 637839ac6ed995510a411327c5c2da61
SHA1 3461b894701c142303d2ea9dd4ee896bf4691072
SHA512 ab0d4498f16b4fa610bed6b5838fa4fffec4050d1db1a5568775b92836a20c303b0b39418589c4ad7eb8415401b1e640ae951122ad62eaacad12e023dd75c3c8
SSDEEP 24576:nPD4yfIhjm5TuSw7shpU9U9e9PeRtt5gD+BTu:pInIhi9H+tt5MATu
TLSH
T162355C61B756C23AD9DD12B29D3DE7CE852EB9A30B2045C7B38C6B4E6E705C36532603
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

a5:f6:56:77:26:4f:e6:60:56:8c:0c:9a:bd:c7:e1:a2:18:14:67:b1

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Chains

Dec 15, 2012

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

02:3a:64

Issuer

CN=GeoTrust Global CA,O=GeoTrust Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - May 20, 2022

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

7e:1f:df:72:99:e8:d2:45:a1:5d:0b:a8:e5:b1:59:ba

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - May 19, 2022

Subject

Serial Number

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageNetscapeServerGatedCrypto

Timespan

Nov 8, 2006 - Nov 7, 2021

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Serial Number

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 19, 2012 - Sep 19, 2013

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

1

Major OS version

5

Entry point

487606

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

TlsFree GetSystemTimeAsFileTime ReleaseSemaphore lstrlenW MultiByteToWideChar lstrlenA FreeLibrary GetProcAddress GetModuleHandleW lstrcmpiW RaiseException SizeofResource LoadResource FindResourceW LoadLibraryExW GetModuleFileNameW DeleteCriticalSection EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount GetCurrentProcess MulDiv FlushInstructionCache SetLastError DuplicateHandle CreateSemaphoreA GetTickCount GetProcessHeap HeapFree WaitForMultipleObjects SetWaitableTimer TlsGetValue SystemTimeToFileTime TlsSetValue OpenEventA HeapAlloc ResetEvent GetCurrentProcessId Sleep CreateWaitableTimerW FormatMessageA TlsAlloc WideCharToMultiByte InterlockedCompareExchange GetStringTypeW InitializeCriticalSection EncodePointer DecodePointer GetCommandLineA RtlUnwind LCMapStringW GetCPInfo TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent HeapSize ExitProcess WriteFile GetStdHandle GetLocaleInfoW SetHandleCount GetFileType GetStartupInfoW GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW HeapCreate HeapDestroy QueryPerformanceCounter GetACP GetOEMCP IsValidCodePage HeapReAlloc GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale LoadLibraryW SetFilePointer GetConsoleCP GetConsoleMode SetStdHandle WriteConsoleW FlushFileBuffers CreateFileW InterlockedPushEntrySList VirtualFree VirtualAlloc InterlockedPopEntrySList GetLastError InterlockedExchange InterlockedDecrement InterlockedIncrement GlobalFree GlobalAlloc lstrcpyA GetThreadLocale SetThreadLocale SetEvent WaitForSingleObject CloseHandle CreateEventA LocalFree GetCurrentThreadId

ws2_32

WSAStartup WSACleanup

user32

EndPaint BeginPaint ReleaseDC UnionRect IntersectRect OffsetRect RegisterClassExW GetDC GetClassInfoExW PtInRect GetClientRect SetCursor LoadCursorW DefWindowProcW InvalidateRect GetWindowRect CharNextW CallWindowProcW EqualRect CreateWindowExW IsWindow ShowWindow SetFocus GetKeyState GetWindowLongW SetWindowLongW GetFocus IsChild SetWindowRgn SetWindowPos DestroyWindow PostMessageW UnregisterClassA

gdi32

SetViewportOrgEx LPtoDP DeleteDC GetDeviceCaps CreateDCW CreateRectRgnIndirect SetMapMode SaveDC RestoreDC SetWindowOrgEx SetTextAlign TextOutW

ole32

CoTaskMemFree CoCreateInstance OleRegGetMiscStatus OleRegEnumVerbs OleRegGetUserType CreateOleAdviseHolder CoTaskMemAlloc StringFromGUID2 CoTaskMemRealloc

oleaut32

LoadTypeLi VarUI4FromStr UnRegisterTypeLi RegisterTypeLi SysStringByteLen SysAllocStringByteLen SafeArrayCreate SafeArrayRedim SafeArrayDestroy SafeArrayLock VariantCopyInd SafeArrayGetLBound SafeArrayGetUBound SafeArrayCopy SafeArrayGetVartype SafeArrayUnlock VariantCopy VariantChangeType OleCreatePropertyFrame VariantInit SysAllocStringLen VariantClear SysAllocString SysStringLen LoadRegTypeLi SysFreeString

advapi32

RegEnumKeyExW RegCloseKey RegDeleteKeyW RegOpenKeyExW RegSetValueExW RegCreateKeyExW RegDeleteValueW RegQueryInfoKeyW

wininet

InternetQueryOptionW

urlmon

IsValidURL CreateAsyncBindCtx CreateURLMonikerEx

Name

.text

Size

816KB

Virtual Size

815KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

163KB

Virtual Size

163KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

66KB

Virtual Size

75KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

2B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

70KB

Virtual Size

70KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Utilities/npAdobeAAMDetect64.dll

IMPHASH dff1d4639dbc794c8ab111e79e052f0e
SHA256 83868c4bdd2e3dabf5ab803517e6ea0f6ab3d5f66e4b6600049936670a646510
MD5 4e31de484ad120894d0d3e7740979108
SHA1 f8c1e3ad231ebb5847abcf70cc120d881dc82f99
SHA512 eb619941261194cd41908b33691d71367e67e48b2090d5c00ceff031b2a67e55c2900a65d3f1916e8552ff29cd26777038dde18d8b0fee7c0b0292d8fa5cde25
SSDEEP 24576:o2VgiKfFwtFg0eC6lfD9HLlzTKkoBd42FFt3yxhApqvkO4xbl9b1McZEy1J9NE/y:o2VnKfFwtFgBC6lfD9HLlzukoBd42FF7
TLSH
T10A65291A766C80A1D079C27CCDE6868AE2F238814F21DBDB2165935F1F7BFE4593D620
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:5 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

27:2f:73:09:55:51:de:e0:68:d3:52:a9:d3:8e:bd:a4:f0:ba:54:40

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Chains

Dec 15, 2012

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

02:3a:64

Issuer

CN=GeoTrust Global CA,O=GeoTrust Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - May 20, 2022

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

7e:1f:df:72:99:e8:d2:45:a1:5d:0b:a8:e5:b1:59:ba

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - May 19, 2022

Subject

Serial Number

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageNetscapeServerGatedCrypto

Timespan

Nov 8, 2006 - Nov 7, 2021

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Serial Number

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 19, 2012 - Sep 19, 2013

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

2

Major OS version

5

Entry point

536996

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

kernel32

MultiByteToWideChar lstrlenA FreeLibrary GetProcAddress GetModuleHandleW lstrcmpiW RaiseException SizeofResource LoadResource FindResourceW LoadLibraryExW GetModuleFileNameW DeleteCriticalSection EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount GetCurrentProcess MulDiv FlushInstructionCache SetLastError DuplicateHandle CreateSemaphoreA GetTickCount GetProcessHeap HeapFree WaitForMultipleObjects SetWaitableTimer TlsGetValue SystemTimeToFileTime TlsSetValue OpenEventA HeapAlloc ResetEvent GetCurrentProcessId Sleep CreateWaitableTimerW FormatMessageA LocalFree WideCharToMultiByte GetStringTypeW InitializeCriticalSection EncodePointer DecodePointer lstrlenW GetCommandLineA RtlPcToFileHeader RtlLookupFunctionEntry RtlUnwindEx LCMapStringW GetCPInfo TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlCaptureContext HeapSize ExitProcess WriteFile GetStdHandle GetLocaleInfoW FlsGetValue FlsFree FlsAlloc SetHandleCount GetFileType GetStartupInfoW GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW HeapSetInformation GetVersion HeapCreate HeapDestroy QueryPerformanceCounter GetACP GetOEMCP IsValidCodePage HeapReAlloc GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale LoadLibraryW SetFilePointer GetConsoleCP GetConsoleMode SetStdHandle WriteConsoleW FlushFileBuffers CreateFileW InterlockedPushEntrySList VirtualFree VirtualAlloc InterlockedPopEntrySList ReleaseSemaphore GetSystemTimeAsFileTime TlsFree TlsAlloc GetLastError GlobalFree GlobalAlloc lstrcpyA GetThreadLocale SetThreadLocale SetEvent WaitForSingleObject CloseHandle CreateEventA FlsSetValue GetCurrentThreadId

ws2_32

WSAStartup WSACleanup

user32

EndPaint BeginPaint ReleaseDC UnionRect IntersectRect OffsetRect RegisterClassExW GetDC GetClassInfoExW PtInRect GetClientRect SetCursor LoadCursorW DefWindowProcW InvalidateRect GetWindowRect CharNextW CallWindowProcW EqualRect CreateWindowExW IsWindow ShowWindow SetFocus GetKeyState GetWindowLongPtrW SetWindowLongPtrW GetFocus IsChild SetWindowRgn SetWindowPos DestroyWindow PostMessageW UnregisterClassA

gdi32

SetViewportOrgEx LPtoDP DeleteDC GetDeviceCaps CreateDCW CreateRectRgnIndirect SetMapMode SaveDC RestoreDC SetWindowOrgEx SetTextAlign TextOutW

ole32

CoTaskMemFree CoCreateInstance OleRegGetMiscStatus OleRegEnumVerbs OleRegGetUserType CreateOleAdviseHolder CoTaskMemAlloc StringFromGUID2 CoTaskMemRealloc

oleaut32

LoadTypeLi VarUI4FromStr UnRegisterTypeLi RegisterTypeLi SysStringByteLen SysAllocStringByteLen SafeArrayCreate SafeArrayRedim SafeArrayDestroy SafeArrayLock VariantCopyInd SafeArrayGetLBound SafeArrayGetUBound SafeArrayCopy SafeArrayGetVartype SafeArrayUnlock VariantCopy VariantChangeType OleCreatePropertyFrame VariantInit SysAllocStringLen VariantClear SysAllocString SysStringLen LoadRegTypeLi SysFreeString

advapi32

RegEnumKeyExW RegCloseKey RegDeleteKeyW RegOpenKeyExW RegSetValueExW RegCreateKeyExW RegDeleteValueW RegQueryInfoKeyW

wininet

InternetQueryOptionW

urlmon

IsValidURL CreateAsyncBindCtx CreateURLMonikerEx

Name

.text

Size

938KB

Virtual Size

937KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

364KB

Virtual Size

363KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

74KB

Virtual Size

85KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

50KB

Virtual Size

49KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

2B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

ZStringResources/FontCustomization.xml

SHA256 6a01cfc74ac88b1e1678b5ed70ac9dfe5ea74a3b0ed56c18044b5043bc0ec661
MD5 bd6e64e1344f15b96b6540f33ad7df90
SHA1 c1f0b0bc41ebeb6b894c9e5858afbf696449cac3
SHA512 b8c1737f5f34beda7290a04bcf7d0b4bd30c7f4421bca37517de0504541e4aaedaa9e9a13967074408974e2c6a94a3d8ef4f9e00a60c6f51e70fc0ca40db0314
TLSH
T13E316C9D3673176667D316EB23B958C03A2F691956574D2280622E3F05C307D7FE2906
MD5 SHA1 SHA512 TLSH

ZStringResources/cs_CZ/stringtable.xml

SHA256 34df062a3751f9e4d4c66ea57245fc45605852c5765026ae7d3baccb04777b9e
MD5 4e23218136079250c549489e58e894ad
SHA1 6aae2cb2f4a37e7d28e4636a6bd17010781ea1ca
SHA512 a8fb9d6c377f27a897bad9016ae5a628fa374186ed095cbd197abdeba7078b3e994c4dbfab989e7718d52fbdd61ea0a8519e384874d82749e3c3856454b08a59
SSDEEP 768:7oPKuJ2YiOwknYwB93/WnKwbNYqbGEj5PFnHvKxjvdic0MtTinV:7oPKu4YtwknYwB5W/J96ug5VUV
TLSH
T183F2255272A87F1C6886956F8A7620C4004FDCFC25B8646372AF757B3F61D880AFBD64
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/da_DK/stringtable.xml

SHA256 7dda7cd2a70e7b90f8174ba1d94ae9160ea25bbbef9bf1e5eb6e8d0f802d8d4e
MD5 6d7a85c4666c3c41f9f4965090d240e8
SHA1 51774dbee472ecc963ef72b98e690d65eab3cd22
SHA512 2d51c7166ad763b4aa1723611625b9e50cd005f300d41688ac17f210d52dac7db71f4dac679065b619358078a38485ad7ebba607476ec8d4f08b5d007f687291
SSDEEP 384:FHd8Yg+1ILj7ErlrMoYZx87v7pcDrV1nHq8BH7zeW:FHdvs6rMoYAb7+DrHnHqweW
TLSH
T1E1F2468272B8BF2C6846957F8AB220C8011F9CBC25B46467729E757B3F51D480BFF964
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/de_DE/stringtable.xml

SHA256 9fd4094b27f47d88a71888302d5e95b99fe81230a9a0df9195de16653d4b1f6e
MD5 71c9e48a0dd05c3df68c67dafe345223
SHA1 e029979b0bae97b4bd87f94fccfbf0be8c016542
SHA512 fa61ed9ac245a40b8e14e08d06c740c108410e0bbf4176f0a67b53ad5a705240ce4118c690d9a714c9acf3d01b8975047cb00217f02746c8485eb003ff8e2416
SSDEEP 192:kscB1ojoqAv0vxjS7D5ki1zwbLCZBOotvtt65St6QAitgtUttOskEEdHusTQFXd9:ksK0MkiJwyvTt653dMnHmmXMHJXls
TLSH
T1CEF2575272B8BF2C6446A67F8A7220C5110FDCBC21786862729EB57B3F61D440BFF964
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/en_AE/stringtable.xml

SHA256 39e299be33e079f7016c1ebc8f7740c3e1d72a85c432b76ac43c0d34f8845db6
MD5 abc8b64ac0ef8cdf7982919c93c272c1
SHA1 fe92c90b8e730d70a6241185ccd17770b8026978
SHA512 0ac2158c4499269af0d97035b7050c3ed408a488b793334c9d87822464435359316262cd68dc12ce9085117a9fa24288023ab862f8d3ffade03922c0ef072ca4
SSDEEP 384:GmUTcoudN4PzEmvU+9Vd3TiOzd5nHPhdiIJUKj:GmUTconzjvhh3TiY5nHPmA
TLSH
T1F6D237927264BF2C2896817F8A7531D4051F9CFC76A8642331AEB53F3B11E8406F7DA9
MD5 SHA1 SHA512 SSDEEP TLSH

ZStringResources/en_GB/stringtable.xml

SHA256 28e259a3aac78bb3aa9cfb16f8d1859f68b7f7b0e3a85db16b0fc88016ae71fb
MD5 5db5547923cca763f3dbecf963d80f88
SHA1 0290132db7dd7f0578d2911ff6015a88c8755bce
SHA512 eb303e6fe855cd8c82d8cb785a0beddce8bbd645aa6a713312bb98336f6602671da3c109cc9a75481e0dc5b4a7a6006ad74694442eb8d87acfb21934d40c1b48
SSDEEP 384:GCMUTcoudN4PzEmvU+9Vd3TiOzdvnHPhdiIJUUj:GCMUTconzjvhh3TiYvnHPmK
TLSH
T1B0D237927264BF2C2896817F8A7531D4051F9CFC36A8642331AE753F3B11E8406F7DA9
MD5 SHA1 SHA512 SSDEEP TLSH

ZStringResources/en_IL/stringtable.xml

SHA256 39e299be33e079f7016c1ebc8f7740c3e1d72a85c432b76ac43c0d34f8845db6
MD5 abc8b64ac0ef8cdf7982919c93c272c1
SHA1 fe92c90b8e730d70a6241185ccd17770b8026978
SHA512 0ac2158c4499269af0d97035b7050c3ed408a488b793334c9d87822464435359316262cd68dc12ce9085117a9fa24288023ab862f8d3ffade03922c0ef072ca4
SSDEEP 384:GmUTcoudN4PzEmvU+9Vd3TiOzd5nHPhdiIJUKj:GmUTconzjvhh3TiY5nHPmA
TLSH
T1F6D237927264BF2C2896817F8A7531D4051F9CFC76A8642331AEB53F3B11E8406F7DA9
MD5 SHA1 SHA512 SSDEEP TLSH

ZStringResources/en_US/stringtable.xml

SHA256 39e299be33e079f7016c1ebc8f7740c3e1d72a85c432b76ac43c0d34f8845db6
MD5 abc8b64ac0ef8cdf7982919c93c272c1
SHA1 fe92c90b8e730d70a6241185ccd17770b8026978
SHA512 0ac2158c4499269af0d97035b7050c3ed408a488b793334c9d87822464435359316262cd68dc12ce9085117a9fa24288023ab862f8d3ffade03922c0ef072ca4
SSDEEP 384:GmUTcoudN4PzEmvU+9Vd3TiOzd5nHPhdiIJUKj:GmUTconzjvhh3TiY5nHPmA
TLSH
T1F6D237927264BF2C2896817F8A7531D4051F9CFC76A8642331AEB53F3B11E8406F7DA9
MD5 SHA1 SHA512 SSDEEP TLSH

ZStringResources/en_XM/stringtable.xml

SHA256 6974b02da40a99bb20441c53e9c90bd93afae8d684481e79d1b7f02b46cf92da
MD5 5ef9ac72b091db1f3e42f6a4b84ea9a7
SHA1 dd59bae596e92937312c39e84541497bf75def91
SHA512 50f877327d7a97f75ce8a04c2c742cc5f86cf92fdf41ae611668a5949f908d3320eeb08f9b90606466bd7ae3a460b997e480e6ee09bbd2c251aac9ff7cbc7eca
SSDEEP 384:GFUTcoudN4PzEmvU+9Vd3TiOzdvnHPhdiIJUEj:GFUTconzjvhh3TiYvnHPm6
TLSH
T18BD247927264BF2C2896817F8A7531D4041F9CFC76A8642331AEB53F3B51E8406F7DA9
MD5 SHA1 SHA512 SSDEEP TLSH

ZStringResources/es_ES/stringtable.xml

SHA256 55e50c6a5b6c54f6b11a9b14133776ac599c7587356ecd59e97e036afb3e63a5
MD5 ac71aeae967b535e0ce69bb995d454aa
SHA1 617a52c88d5b648963752eeecb8dfe3e87a2c848
SHA512 eb0767d7723c5d2a78076c541eea23888748c9976037340567cbe1c475d4fff395291d1227a8d37209fd948dc82bafcab72cd104c5bceb1bf98a05fbaf6caffd
SSDEEP 192:RqOzNs4Ws7pOL0LzE+GbMxRbq4i8LxLKFddUm3XFzcst1sTz0NNWzqdtVHQi+qea:cOks7ayybMbbqNnH46W4tVwi+qea
TLSH
T102F2799272B86F1C6446956F8AB270C5004F9CBC34B85462B29E757B3FA0D884BFFD64
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/es_LA/stringtable.xml

SHA256 bff9c4319297498c94f03961460a7b8ed7a6c1b1ff9a569a245a530e1ca97e14
MD5 aab6211eb9559b8c5518c70bfb56fff0
SHA1 30d4d241255dab5e7800a09b685d83d2f56110bd
SHA512 4fb55d935216ea0294db45569e7ee768096170c6dbe480df981757e8c801fc4b7cf96f65587b8127684a06d76dcfa9f7e0bbeee6a6870f43abfe6178c237f151
SSDEEP 192:RqOzNs4Ws7pOL0LzE+GbMxRbq4i8LxLOFddUm3XFzcst1sTz0NNWzqdLVHQivqea:cOks7ayybMbbq5nH46W4LVwivqea
TLSH
T149F2799272B87F1C6446956F8AB270C5004F9CBC34B85462B29E757B3FA0D884BBFD64
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/es_MX/stringtable.xml

SHA256 bff9c4319297498c94f03961460a7b8ed7a6c1b1ff9a569a245a530e1ca97e14
MD5 aab6211eb9559b8c5518c70bfb56fff0
SHA1 30d4d241255dab5e7800a09b685d83d2f56110bd
SHA512 4fb55d935216ea0294db45569e7ee768096170c6dbe480df981757e8c801fc4b7cf96f65587b8127684a06d76dcfa9f7e0bbeee6a6870f43abfe6178c237f151
SSDEEP 192:RqOzNs4Ws7pOL0LzE+GbMxRbq4i8LxLOFddUm3XFzcst1sTz0NNWzqdLVHQivqea:cOks7ayybMbbq5nH46W4LVwivqea
TLSH
T149F2799272B87F1C6446956F8AB270C5004F9CBC34B85462B29E757B3FA0D884BBFD64
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/es_NA/stringtable.xml

SHA256 bff9c4319297498c94f03961460a7b8ed7a6c1b1ff9a569a245a530e1ca97e14
MD5 aab6211eb9559b8c5518c70bfb56fff0
SHA1 30d4d241255dab5e7800a09b685d83d2f56110bd
SHA512 4fb55d935216ea0294db45569e7ee768096170c6dbe480df981757e8c801fc4b7cf96f65587b8127684a06d76dcfa9f7e0bbeee6a6870f43abfe6178c237f151
SSDEEP 192:RqOzNs4Ws7pOL0LzE+GbMxRbq4i8LxLOFddUm3XFzcst1sTz0NNWzqdLVHQivqea:cOks7ayybMbbq5nH46W4LVwivqea
TLSH
T149F2799272B87F1C6446956F8AB270C5004F9CBC34B85462B29E757B3FA0D884BBFD64
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/fi_FI/stringtable.xml

SHA256 31eb9e617f9029dd4f569d5f5521df18bbbfa310b89a7ddb8662674988ad2d9d
MD5 4a4e7cca9ae8a46e868abe4a936e654d
SHA1 7716446f24708ec5a41bb13913a0c17e741fbaf0
SHA512 06679fcea3988a814cfff51f87094c668b092a2c4731a44b66471c3d2680b2cad12653e6bc5cd0b4cd8560d5b35326e165d3dc45631a6ba6a5fb57b36c34f136
SSDEEP 192:21Kep1TIZWSyBrdbJznpSJGZrFGfaR78eB1BCshwHvvdUm3XFzcsaLs4z0NN+eFA:M31cYDBJb7r6CR782w9nHV7Tek9zNiR
TLSH
T10FF2499232B8AF1C644A997F8AB120C9004FDCFC25785863729E75BB3F61D441AFBD64
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/fr_CA/stringtable.xml

SHA256 c573c7f8cf9572091ae50c8592dfe1849e8e6b7bd95c3a8b398b4a4595bee81f
MD5 4b613a84d7a485241702fdcef9bb5e99
SHA1 e531aff5497cc3507bc9457a12b6bd25ce349150
SHA512 5de49be9bff157ed77b7fdb6ab48909b919d968ea6c6021487bad2240810bf7908bf815d8ac8545fdea8f1a70c85145561bfa3e9592e010828d12593d2984876
SSDEEP 384:dDOp+jRM35sh1xsJfq2YUlo+Pt2ZyYLHa+nHO0zSnV2Q/:dSpMRL1GJfq2YUlo+PIbHa+nHOH2W
TLSH
T195F2344272B87F2C6886956F8A7231C5001FDCBC3168646272AF657B3F61D8847FF9A4
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/fr_FR/stringtable.xml

SHA256 7e70ed470b8619a416428ff8dfb1ca6100616102ef4b13c5f120409a422bce33
MD5 fcf064ad5dd4e9f51f78f425719e6556
SHA1 1f07bd61bb1fdfedbeb6851992d50a16f7e0d7e6
SHA512 5c68cf43c54ecf0c0674afb3d18368e5334e50eb84de39acd9d0fee5b09ca9db6513d6288d599d110692c878ac9cec8f56b1c67db76fc748bdc090a313b4d59f
SSDEEP 384:JDOp+jRM35sh1xsJfq2YUlo+Pt2ZyYLHY+nHO0zSn/HQ/:JSpMRL1GJfq2YUlo+PIbHY+nHOhHW
TLSH
T112F2344272B87F2C6886956F8A7231C5001FDCBC3168646272AF657B3F61D8847FF9A4
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/fr_MA/stringtable.xml

SHA256 39e299be33e079f7016c1ebc8f7740c3e1d72a85c432b76ac43c0d34f8845db6
MD5 abc8b64ac0ef8cdf7982919c93c272c1
SHA1 fe92c90b8e730d70a6241185ccd17770b8026978
SHA512 0ac2158c4499269af0d97035b7050c3ed408a488b793334c9d87822464435359316262cd68dc12ce9085117a9fa24288023ab862f8d3ffade03922c0ef072ca4
SSDEEP 384:GmUTcoudN4PzEmvU+9Vd3TiOzd5nHPhdiIJUKj:GmUTconzjvhh3TiY5nHPmA
TLSH
T1F6D237927264BF2C2896817F8A7531D4051F9CFC76A8642331AEB53F3B11E8406F7DA9
MD5 SHA1 SHA512 SSDEEP TLSH

ZStringResources/fr_XM/stringtable.xml

SHA256 7e70ed470b8619a416428ff8dfb1ca6100616102ef4b13c5f120409a422bce33
MD5 fcf064ad5dd4e9f51f78f425719e6556
SHA1 1f07bd61bb1fdfedbeb6851992d50a16f7e0d7e6
SHA512 5c68cf43c54ecf0c0674afb3d18368e5334e50eb84de39acd9d0fee5b09ca9db6513d6288d599d110692c878ac9cec8f56b1c67db76fc748bdc090a313b4d59f
SSDEEP 384:JDOp+jRM35sh1xsJfq2YUlo+Pt2ZyYLHY+nHO0zSn/HQ/:JSpMRL1GJfq2YUlo+PIbHY+nHOhHW
TLSH
T112F2344272B87F2C6886956F8A7231C5001FDCBC3168646272AF657B3F61D8847FF9A4
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/hu_HU/stringtable.xml

SHA256 39e299be33e079f7016c1ebc8f7740c3e1d72a85c432b76ac43c0d34f8845db6
MD5 abc8b64ac0ef8cdf7982919c93c272c1
SHA1 fe92c90b8e730d70a6241185ccd17770b8026978
SHA512 0ac2158c4499269af0d97035b7050c3ed408a488b793334c9d87822464435359316262cd68dc12ce9085117a9fa24288023ab862f8d3ffade03922c0ef072ca4
SSDEEP 384:GmUTcoudN4PzEmvU+9Vd3TiOzd5nHPhdiIJUKj:GmUTconzjvhh3TiY5nHPmA
TLSH
T1F6D237927264BF2C2896817F8A7531D4051F9CFC76A8642331AEB53F3B11E8406F7DA9
MD5 SHA1 SHA512 SSDEEP TLSH

ZStringResources/it_IT/stringtable.xml

SHA256 b08b51636bf39b89e05837671240851dde5466cff7ba9d5a5e7f1d17d066dc03
MD5 3e1747727711a802216abb0937a821e6
SHA1 8b6906000cba9afefe282a4c6db76a7d48070f01
SHA512 f62d7b383352c8ea3479d52af89cd11c5f366c89b6f7a05c546336d494c06368175af10cb508772be8d30af516d6a266eb797dfb556fce1f898e7a73dc27e176
SSDEEP 384:0nq7oVHDjMS+PPAUSWdRwV/+e/jDqm55Q9ZBWnHic+Blxrlut:xQ/y+0m11nHiXBHJa
TLSH
T1DAF2476272B87F1C6846956F8AB231C8010FDCFC25686462729F667B3F91D480AFFD64
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/ja_JP/stringtable.xml

SHA256 e1b011a960d3721f8c055dca0d61c29f2f3758ac4c97cc13378a907c17526e69
MD5 df544025829ab814d4196b21c1fdacd8
SHA1 d91466176e9d720b9bf6b2e5643043a26f5d2591
SHA512 256ba000abebb5ee403ed3c04009613f6b819392ed15573e548d8e379ca17a287dc9d9fda1dd74ba086f7290daa901a7ae3f4c8e55b7c9eade6d196ab235b02c
SSDEEP 192:EAVFMKdY5dN286IZe65nWDWxWiWLJSFQdUm3XFzcsaTswz0NNzWmMdtf3eGkU6:RdYN2+8xnH9DzN6gU6
TLSH
T1C803785D72A87F1D9845947F4AB631C4000F9CBCA9B46472616EE47B3F60E8CCABB874
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/ko_KR/stringtable.xml

SHA256 6773cde2fcb6a9707f51c70df8bd9271bfe6c72d75b35eaab445967e988ebc7a
MD5 c07c2cc05cc18df76f7a08ad315659d4
SHA1 e2aa693f1c3c6864a0376d65a6c7f50ed25224b4
SHA512 cb6ea4f38f074299df8bb834ba76d04f0f538c61025a5f8114a341accbf998fd5ca329194dd54d6d865052f95b2262891f5503240194c552ba2caf4017a3f3df
SSDEEP 384:weZZvOa80cmH4m0pFH3jQXMjIfem57ZQNleghnHay8OU+y5VK:EaFcmH4m0pFXUXMjIfem57ZQNAanHaQ/
TLSH
T112F2689232B97F1C5486956F8AB271C4014F9CFC72645462729EA97B3F60D880AFFC78
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/nb_NO/stringtable.xml

SHA256 1bc5d5c53f9c416bee633551e985c376126f2bacfadf3acd46a4f79e7bc64333
MD5 957af6ff82670a98b00a7d735e5c2f32
SHA1 9736b791090f82883d98c8f92ef82ac20820c906
SHA512 341529a070ba3479785bc03211bf507c6bab39cf7659f53458b76f67c1b032de4996ed6ac56b9855f6fad27b49bd66c47ffa95da40c38bf0a71e55495597ef33
SSDEEP 384:YwVtLQXoybvl4fT3jWB/GeOyPfCcePEsdvzZnHq8oPJ+c2F6:YwVtLrRSB/GeOyPfCFPdvlnHqrY6
TLSH
T1FCE2394272B87F1C6856957F8AB230C8010F9CBC65B46862729E757B3F61D880BFF964
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/nl_NL/stringtable.xml

SHA256 87c489a4eacc2743129ad90c0d71770e7dd602d925762043f4a78e6839250c24
MD5 ae62d922406ce49a3801aabdbde0fc27
SHA1 95a1f4ad0d4f05fb00e4f0d23b9fc4b92d8a4b1e
SHA512 091743bba6a8e0909687ea7e19b77827e9bcdbfbd38d93b91c48f727ddec88de61162f56ceeb35d41dbdc05a74a40666668adda4ca96b594fc242c8b3bbb7735
SSDEEP 384:jZPxxzDDQMOSw5MMQ3qzn7vnFJSkZNVv/I7p9Lik+A65I5XLZxnHvFepvaP/bP:KMARVndk+AFnHv8IL
TLSH
T15BF2584271B87F2C6886957F8AB220C9010FDCFC61B85466729EB57B3F51E480AFF964
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/pl_PL/stringtable.xml

SHA256 19ec87851405ab9adeecb662754b5246e0bd68c32eabff608d153741d3c8eed3
MD5 1e273cbe5d4f7c88d94bf311ca9081ff
SHA1 beaf74fd03200c215b2bcfc3620acf0842be2c22
SHA512 54e485a9348119b838800c0d62b5a49ae12ddcf191e009c23b0e31b4e0bd2c4936ccef8379e84fa157b363a88154fcee29a7ab40df859a83031eea38b91e4991
SSDEEP 768:FzoxDtvAGqj+O6f2RrFSZjlB0nHyVpUmde1:JYI
TLSH
T105F2264272B86F1C6895946F8AB221C8044F8CFC25785466729F757B3F61E880BFFD68
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/pt_BR/stringtable.xml

SHA256 cb97ee5f6583c81ed2f455bcd2e7ba73fa0e08aa3e358a3ae17cca0088e2458d
MD5 47fc4ffeb557d3c7208d2ce119b197a8
SHA1 8c9c17c3065de97a207c294e17fe177c8a962e09
SHA512 59d43e3f153b698bf62c4e28f9ef5ee98af2dc8b7a13355bbd510ced363dbc80999764dc062f5eec5d1ed860f8761353f685741de8ac4d6c86b4cb41e650a148
SSDEEP 192:3oQ8tQ0zoObrxwq9rPVc7HM5trCWl7WSjIqKQFbdUm3XFzcsWbsAz0NNR4PtobdW:UtQSxJZVcCr7ljmOnHNTR4PmBxcHokN
TLSH
T1B7F2795232A87F2C6846966F8AB231C5004F9CBC2578546272AF767B3F91D840BFFD64
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/ru_RU/stringtable.xml

SHA256 040f6410ac229e08fce3e2a8c0da7007ed0224aaf53369f44f1d7a481c0fe810
MD5 6d55238f675e9def9999f4f77a0f973a
SHA1 9472a8a8791d7da610fa95948f339675fc4e765d
SHA512 3bbaa2ad17e8b3224e27b729b8a93be21ca5c96688fb5eb5ae86f1c9769f517a39225fff6768745f4fb52f07bc778d28df8ba268fab98666aa30ece851b5a6db
SSDEEP 192:+FXwv6eXslEN3Sp4pp4+4pCAGHZ2g9LQrzKcZB5ivvdUm3XFzcscTsyz0NNXCJdz:+O9N3SW2GHZ2glQrucZOFnHnZGmNG
TLSH
T17613895231A87F5C1449A43FCA31B588144F8CFC3A79666332AD397B3EA1C444BBF968
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/sv_SE/stringtable.xml

SHA256 d739609b411599d6d42f7abe17ad9eda046104fd940aca62fb020cb80bd11d7d
MD5 a056b4784011b7dcddf2bb1e8d5584e7
SHA1 47efa1abfbd1984033cc560a34dce061b6850483
SHA512 0b0fd6d9b9a64621e0d0c144930ab640e58672c2256bfdd6687d11d5ec6f22bc49c6e1b5a4bed14f55a4127c7e970e672f80ef011dd6136a1c37b66db9451c75
SSDEEP 384:lOx5vgqLGhpcmEi5NECvebnHj9ahCYAInki:lOxhZafEi5NEbnHjfYAIki
TLSH
T160E2264272B8BF2C6856957F8AB230C5004FDCBC21B46866729E657B3F51D880BFF964
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/tr_TR/stringtable.xml

SHA256 2b712ffa00281b764232d993cbcf2cf13142bbafc6ebabdef33a0d19a039eac4
MD5 a03f1a66028eba4dfa60a89e4b5cea14
SHA1 bf334cbf06007ad3cbd6a8c5fddc3c60502cf1f2
SHA512 4ab8c2d7cb1d617240bc472c6111114c9e97d2138ed178d4e7c07883e39f469d9f2ca310eff8ee70d2f8dc0e297a8ace30480f15e9897a4e3f440236f4ef57cc
SSDEEP 384:kWalCaMwjzO7TOBANxIx5FWhxHxMnHQgDpJxp5:kWWC667TOBANxUrIRMnHQy
TLSH
T170F2689231B87F1C5856A56F8AB221C9404FDCFC22746863726EA57B3F60D840BFBD64
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/uk_UA/stringtable.xml

SHA256 39e299be33e079f7016c1ebc8f7740c3e1d72a85c432b76ac43c0d34f8845db6
MD5 abc8b64ac0ef8cdf7982919c93c272c1
SHA1 fe92c90b8e730d70a6241185ccd17770b8026978
SHA512 0ac2158c4499269af0d97035b7050c3ed408a488b793334c9d87822464435359316262cd68dc12ce9085117a9fa24288023ab862f8d3ffade03922c0ef072ca4
SSDEEP 384:GmUTcoudN4PzEmvU+9Vd3TiOzd5nHPhdiIJUKj:GmUTconzjvhh3TiY5nHPmA
TLSH
T1F6D237927264BF2C2896817F8A7531D4051F9CFC76A8642331AEB53F3B11E8406F7DA9
MD5 SHA1 SHA512 SSDEEP TLSH

ZStringResources/zh_CN/stringtable.xml

SHA256 1c3bb71c035efa4ce4cf0e4b12e4af47a0e3cf760c73cfe48480bec568778830
MD5 6bc4dd886824f8ba1e220e3fff156072
SHA1 dfe6bc8ee0bcae4f1abbf2519caccbe73620fc29
SHA512 fe57a1472282a81565013f097a70a748287a6bcf6aa463fc8cca8a73cb265e3c303bf6d4baf3bd58b2a3257b57302388a1d674dfdfea2b16b3a9f52508f2d6f4
SSDEEP 192:nUzomYc1/23UU8n5sC3142ElKdwe65kYFufdUm3XFzcs+nsoz0NNU42HdymCuEn:5gR23UUU5s242ElKdN66nH1rIuuEn
TLSH
T1D5E2F69232B87F1C5446957F8AB670C8000F9CBC25B468A2729E757B3F61D480BFBD69
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/zh_TW/stringtable.xml

SHA256 ce0bd8d82d41193b2f672393aa190bed587ac618d034e36c1f08e2bedbb95605
MD5 e51e64c712b6c438b0aa21fa8cedea2e
SHA1 2fd119e7bf89d21c2b81d3cffb3869abb9ed3354
SHA512 4d04b31eda99b4f87fbeb0cfa2c2170f5a6362565ff80406e058512e7329f3a6b4dd8d72659532ac38947e53f35b16d9ace5c9d90c98a56bdf26b1ec156bcfa4
SSDEEP 384:5VwDwQOEvrLucvS7AHCL62FbXEQ/ag+T6sImdnHkJmfKG/W0:rw2EecvS7lXV/aFT6sddnHk8SGF
TLSH
T152E2379231B87F1C5846987F8AB630C8005F9CBC25B46863726E757B3F61D480BBBD69
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

assets/EULA/EULAVersion.xml

SHA256 4e0489fc1289694613293755162e6e244fd30703f08b87619ae41205128ee308
MD5 0f236e7e159f8d4f37d4ad32bd6924b7
SHA1 119556347020eadb45e49fc4799f120f9c17d46d
SHA512 180a5afc1e16b9a0d5b73e148886c7ac80f0e99e252910c79ed31ce18d17a7337caeb8e8fbe882da2cd5844dd12fdc39479303bb80cbef4f6f93d9e2cfe854a1
TLSH
T11890024CA0808B33E139133E52023091E32C870C0A08C44694E9024BD288C1D84C2460
MD5 SHA1 SHA512 TLSH

assets/EULA/cs_CZ/license.html

SHA256 ef2332be8b0c47c1757e4e7b8a6e043fc4bbc2c8fc77041e4e335ed13274c062
MD5 b2de89458410868ffeafd6ff653e5f4a
SHA1 1acd32ea01957eb03c45b6bc3a651e0d48cb5f68
SHA512 f3e3ac320dc446bf2a8b716f0c58d1617627e80635d7161005f683e8cbf48bd08260e9564ada658f1ed9a45242d4c1019b3869ce96eadfe9c938befde3331965
SSDEEP 1536:0l5BhA/ZepV/AZlyAVElbet36tdSxuDHsk4iniZ981B9bZYQDpg60:0HdpV/AZlyAVEktKtdAaMais1B8kpg3
TLSH
T16283F92F8942BC1BFB9B43DC67A99718AD5E8638013D94653E8B564F4072F789EF8C40
MD5 SHA1 SHA512 SSDEEP TLSH

assets/EULA/da_DK/license.html

SHA256 e436c4684b67a0c6a58d5b0269adbd1d05fccefacaa3bdbaa5ffac42794c69e8
MD5 e45e8f78cf8fd0d55103ea62d918ac61
SHA1 79db613f7ec531cff01dff9e7111bf9c89718215
SHA512 3c84aa262e8dc8bdf158ad9b8bfe47c629b5104e19bfa457710e172d520382e06b212597fa41bc51c24b76311a3b07ae287d5c3c47f68af09261ead4ac849b7d
SSDEEP 768:0lHPs9VJJVBlYoOqXUOqQHcEDHDk8T6KKeyY9v6rq11tketGWl9x+ahvkIfE0czx:0VfQI8T6KKevqJet1lUvrB
TLSH
T16583E581B4183B3EEA6F4376E5110A6FEBBFA62CC0655195B1C4C1EBA0D3CA4537E1C6
MD5 SHA1 SHA512 SSDEEP TLSH

assets/EULA/de_DE/license.html

SHA256 e5897b8e01ddae06bf10ae8951ee5279a7b64fbe7ac5bee07e030be8565b78b3
MD5 9a255533cfa70804ef7e9e0110ed95e2
SHA1 31b9dc3e278242bf46273d91fb9dc3cfdae7780d
SHA512 93de20fe65c741a61ec7e8fe45a83a14fe59d5afa4f48a5f80de1e9dd9266a454354fc930cb30810099cf02d966d6d4358fc59d122a7efc8adbf78ca694581e0
SSDEEP 1536:0Ay5LWMwA14tUa2jKcsYmVn7gfPyBzADuvOKphs8A3pGKVsJu76xuObh3:07dKcjUWa8C2AoRK
TLSH
T154932A91BCC91B2E928B73B6B301DEAA776CA379C3827055F29CD1B363864F0417D469
MD5 SHA1 SHA512 SSDEEP TLSH

assets/EULA/en_AE/license.html

SHA256 a807551a6e095e1941670d0bfc0c4e95eb9747f7d39cf97f56ce033deeda80ec
MD5 494ee75e9f5c594619a6acd3f62c5656
SHA1 1c4b3c213815712b2abb650e5169960b08680c3d
SHA512 0fe3bf2bcf82bec4293f9ea0aa00a5c0be333f239aaf3d0fe42344bb9536a2d9bf311d424ea0f3b474660089df1496297ddefc6cae64dac59ad075974bcd512a
SSDEEP 1536:0Zi96qlGqKsaYOV0hugs2HWTtamTimwhWnFqo6kwpGYxvgK:0et6stOV00OWUmwhWnFN6kwpdmK
TLSH
T1B673C55673252BB71AC303B26A8F9ED4FB3B807863B15684719D809B23C3C64537B6D5
MD5 SHA1 SHA512 SSDEEP TLSH

assets/EULA/en_GB/license.html

SHA256 1234e7564644aee675f1e12cbef89c4a2588f6e8c4418328cf474efaa403626f
MD5 b3c77cbbe94b6d4f26c9eb6be887ed44
SHA1 e91a5e56cc76ca2ae246cb0400a99aca36becfd4
SHA512 1012a5676a132529f582bc1e5aca21497536c7aeef59daaccb7a876c70bd5c42e843cfc960ebaa297d3ecbde79b8d338896f8c214629870743d9c083fb3aafef
SSDEEP 1536:0FU96qlGqKsaYsVEhugO2HWTtamTimwZE1Bqo6kwpGIxvgt:0Yt6stsVE0YWUmwZE1BN6kwppmt
TLSH
T1E673D55773252BB719C303B26A8F9ED4FB3B807862B25684719D809B23C3C64537BAD5
MD5 SHA1 SHA512 SSDEEP TLSH

assets/EULA/en_IL/license.html

SHA256 009f17827534e89044f89a3c99251694e5f8a73f408059832e438e8a86f3020f
MD5 9a47f0ad8b02130373c9f6a086f99c62
SHA1 dec280d13a6694e4aa34f00034a40e77feffd4c3
SHA512 2652885c2f705744c0016f44bb8e427a0d8c206b401995e0a4644e938833999a4142a26460eb19671471e534618a56bed2764833ac79ce168fbaa7cb29cbe743
SSDEEP 1536:0Y896qlGqKuaYQVOhugI2HWTtamTimwDSfXqo6kwpGyxvgh:0Tt6utQVO0aWUmwDSfXN6kwpzmh
TLSH
T17873C55A73252BB719C303B26A8F9ED4FB3B807862B29684719D805B23C3C64537B6D5
MD5 SHA1 SHA512 SSDEEP TLSH

assets/EULA/en_US/license.html

SHA256 65d6e88abe954be714af5c2528e148bf6fba3d39cb2873b801c1e1ca81d87cf9
MD5 32a00190cb8676f849b5af53ccdcf3ad
SHA1 9124c52c0f872bb8695e6445956b26c92c868983
SHA512 de99484bea7b262f0ff8c34c9aeae5bd820ff6224a82cd81d727004525f9595aef19d656d9622313be56c039245c07bb859e978c7f8dfd27edad73aab25c7e80
SSDEEP 1536:0FU96qlGqKsaYsVEhugO2HWTtamTimwZE1Bqo6kwpGIxvgS:0Yt6stsVE0YWUmwZE1BN6kwppmS
TLSH
T1AB73D55773252BB719C303B26A8F9ED4FB3B807862B25684719D809B23C3C64537BAD5
MD5 SHA1 SHA512 SSDEEP TLSH

assets/EULA/es_ES/license.html

SHA256 b6c1c20dc962670aa4d2faf2af43d674f7bd26e1dc8a9b2111861eea345550b7
MD5 7d6ad948a3b82f8f5d92aaf194fa378a
SHA1 8a846ab87fcc0d9f1926a70369cf03fce2480f2c
SHA512 0f6d72161f1c4cfa00a6e8dfe199f3d72fbcb152aa07c03dc06a226cf20fa0f80d74e4230e47305d8134df8ac75e217b3000bc9a3b90de037adcd7692eac8830
SSDEEP 1536:0dd6CmwDl1fk4m5WrFpIYus44Urz1pBxKt+w/t393Mz1wuTm0H+bxewGW3igHblo:0lDApLU+wlN3MZwuTdGxjdRDmd
TLSH
T18D83B63579C82F679583439DF282C667F9E89194B84DD082E29953AF11CDACCC33EA94
MD5 SHA1 SHA512 SSDEEP TLSH

assets/EULA/es_MX/license.html

SHA256 443f76b84f65ba27102a268bbfb573cb9c023421242501ef2dd3f1e11caff616
MD5 c596e3c46a175de6592d27a2a14926ba
SHA1 41b80cbbc207d58f486c3765c087f4ad69bd4089
SHA512 360175c23f403ef1bc75b861d9adf9ecddf5d8c01f945bc78ac3d04a8a5195c8907e79e16b40b42179e920299562358a51308ffdb95229e4b294283c01304eca
SSDEEP 1536:0dd6CmwDl1fk4m5WrFpIYus44Urz1pBxKt+w/t393Mz1wuTm0H+bxewGW3igHblD:0lDApLU+wlN3MZwuTdGxjdRDmO
TLSH
T1FB83B63579C82F679583439DF2C2C667F9E89194B84DD082E29953AF11CDACCC33EA94
MD5 SHA1 SHA512 SSDEEP TLSH

assets/EULA/fi_FI/license.html

SHA256 febe6cd1d0da4e456982b305c54b43c493420de863fc833a256c2ef772187b28
MD5 4276816e869909900e54a9155b27e926
SHA1 28fe3b382e2abeeb8dc94dfed5d49c6198bba3dd
SHA512 0aa1eb2db97d3cda0aefff0e1d9db53da529d631a85fd249030b72ea26dd0f54115b866661384296afd3cd37f4bfe3d63d258aedd19c1ad01e3fbfbc9f0c88e2
SSDEEP 1536:0c3+yfPX/IyApRerguXv0lnzPl3l7m3YQVzUjGHE:0cOy3X/IyAverguX8xVl73aDHE
TLSH
T1BC83F7E61144E477B1C9C2FDECA09229B7D0D22A8D35D588F1D3D3FB12DA948276326E
MD5 SHA1 SHA512 SSDEEP TLSH

assets/EULA/fr_CA/license.html

SHA256 ac57e25ac91a217f988ff79f822ef862214b2ea5da1d000a893921490ca70062
MD5 646ba844fc058607808fb7da81c7c4ae
SHA1 7d2e796251b193c931bf89eea2004dfb5b3b4d13
SHA512 95485b3addde9c565b089133e09d16362d743495ef78ade7164bafb40b3970f1b2bae640af07919b67f738bba41dd062d9ed4ce83abd6701703e2676e35ce5ce
SSDEEP 1536:0mH6l6tZvo0Vc2dLTPtZURR0YBIrXGpSYzwFt23TfqcbIj+TAzPEb1vzf8/tuLON:0flQoYlZQKYBIbkrSYk
TLSH
T16693E76AE5C439AB6EC75273FB42E796E738C0086166E214D5E7819B03C28DCD34F1E5
MD5 SHA1 SHA512 SSDEEP TLSH

assets/EULA/fr_FR/license.html

SHA256 494dcdb948a4f56e3af6d6b6e8e15f19c96907b60709d08a7ae908d79cd83728
MD5 6e77c6905e05aa7248d8f092ea8e4460
SHA1 4ae5032c22cf8589ce80919a60ddb05ae8f10385
SHA512 6f173fa032883e367d48877e3ac61d06d687619ebaa1e296ccd43c53c2931276b650176a6638088e30ce4cdd99d4ebd06739fcb4929a397fec64da782eed2fef
SSDEEP 1536:0mH6l6tZvo0Vc2dLTPtZURR0YBIrXGpSYzwFt23TfqcbIj+TAzPEb1vzf8/tuLOJ:0flQoYlZQKYBIbkrSYU
TLSH
T14593E76AE5C439AB6EC75273FB42E796EB38C0086166E214D5E7819B03C28DCD34F1E5
MD5 SHA1 SHA512 SSDEEP TLSH

assets/EULA/fr_MA/license.html

SHA256 a371048ad3701756c0360012441710defb04056032dd542f927f135e3638b640
MD5 6677438780b3d2674d1cbccf50f705c1
SHA1 7dbe1d8c448442e83c7f8ddba531dde74f643d2c
SHA512 f692081733ed50d38d8e2765d871e2d66a8649416d7a64dfc268be7f4c6bb343c87dc36d78c3391a5fc76c5f6a11348322d1610482f70083d185c45164a2cd4f
SSDEEP 1536:0kVH6l6tZvo0Vc2dLTPtZURR0YBIrXGpSYzwFt23TfqcbIj+TAzPEb1vzf8/tuLo:0tlQoYlZQKYBIbkrSYC
TLSH
T12D93E76AE5C439AB6EC75273FB42E796EB38C0086166E214D5E7819B03C28DCD34F1E5
MD5 SHA1 SHA512 SSDEEP TLSH

assets/EULA/hu_HU/license.html

SHA256 b4e64bc03ca59808a1ea9f28bc0ba5ad73cc0bdd1e661c31457edf1b105a18be
MD5 eb7be29bffee68097696f548838dce95
SHA1 e0eb92e23ab631fb14197e6da5443185434bc603
SHA512 a41cc9f0b645470005beae062cf29dfed454f64587d663fade04334dc8745ddd67d82ef236c38969e441386f5722e4a535c2c5a77f3e8630f8fa992c201473bc
SSDEEP 1536:0lmXjQ3QZ1fv/KPV8lGLLmzVYPBOUWZMjhsAZE0mDE5IwyYKt7ObacXFbH2RqFa2:0cjQ3QZ1fv/KPOsLmhYZZWGeAZErwRow
TLSH
T1AD933C7A1B209D9FB71F0AB7A250BF0C26D5412DAA3F747965C7C45B309068B6CCB8C6
MD5 SHA1 SHA512 SSDEEP TLSH

assets/EULA/it_IT/license.html

SHA256 7967ed34c61a5c4b60af4886ac35275ca8681e20e42a246610ec3124edd7c0ff
MD5 d889a92c134266306f98ff062bb7a7de
SHA1 48d9f4e0a6da9b7cc2e4aceb52e952d998cc87bd
SHA512 f51adfaa2aef4fc14aea60d39c642ea803175b71bcfe971c5e3cd79b325430df1b687839cbc9d424147d13eb538d4f4eef1709a2683a48349eb44d7261aa04e1
SSDEEP 1536:0Rw+uNFK75Y8ynyGcCmDp5Z8kG99bf+ELf6ONzsvncH:0RnYPyKaEL/NzsvM
TLSH
T11483D93575C53637A68743D99663E244FB3ED4D8EC4E7011A6DE025F21CEA80F32EA86
MD5 SHA1 SHA512 SSDEEP TLSH

assets/EULA/ja_JP/license.html

SHA256 f73a9b4c6fef4e09552e7256f9d323f79ec80debbfdbfdac5b51dd428f787b3a
MD5 fb1078b3f9e35096b6186e79db0affa2
SHA1 4079e8da296bf4ef75acdaf2595fa0f7104ea72c
SHA512 97503b50eec3daf5b003cd4dc494c401f7dcbfe9a80def937622cecdac1b79a8ca1a325f66965f9014582936949ed4d643273c284f5889010447f24b1c814a61
SSDEEP 3072:0eztOhHfF4kJlllZfmsNnNnXr27sccUR4f7dOEb:0+tOckDlHf5jnXi7sc9R4fxO6
TLSH
T1A2A332BDE3C1A83AA91192A26C4E73A47558DC6FDD93B736407ED03B6664ECDD400BB0
MD5 SHA1 SHA512 SSDEEP TLSH

assets/EULA/ko_KR/license.html

SHA256 98f79348729b4cccef635ce753a4974d9b71dcc6960e0ec619dafbbb5979220e
MD5 382c5060a33da634d444894099e086b1
SHA1 ded116f43238c98003c5a4b0791a9aa6f1ed4f02
SHA512 c7ce18c895a6d774da0d8675ddc8df646fb0e04ecc7004cc7d3f464256c04d4ee21bda288392441c5b0e1e91c4ae50cd5c8d807b14e047d19f5cc92df0090753
SSDEEP 1536:0Z323ZiCpDIsE0nOkPJqFC+2AcAoAu75Nx9B9aJOx9Z//mYVNe9yKvBmIzULXm2C:0ZwiCpDIsZdPJdyc7Au192gL1TVNe93f
TLSH
T1D18348B03EA775DA5593CEC6FED2F760D28284739F9305B4AD40CE47A844687048E6FA
MD5 SHA1 SHA512 SSDEEP TLSH

assets/EULA/nb_NO/license.html

SHA256 fca29607a6ae0d0b6de8846d62ab2642347c08692f8e0692ed21ccf0d67b12d9
MD5 a42daa034f873e76e854255c5602acf9
SHA1 4a7ef413cec5ed552cad50e2418f05e58bb99ee3
SHA512 ac7eba4f192f132845a4f1be2a315104decdb67e82df3f1baa30ad53a0aab0df7eadaa36be6f4b4d022618006bbefd3fa3700f72c7bf8c126decb5cf24fdb079
SSDEEP 1536:03ebXFYLrlvu2rGDDoosbo1VtuZzBfqYcnp9MZb:03eRL2rGDGo/tuJBfqYowF
TLSH
T17E73F742E8113B3FEB2B8775E4044B6ACBAED11CD4B85A5059CDD19F80E3EB453BE186
MD5 SHA1 SHA512 SSDEEP TLSH

assets/EULA/nl_NL/license.html

SHA256 b3af4b2567f4ddd3049ac1b293c0476f5d2e28f9f3db00211deda886c5304f58
MD5 c5c1c3fdc57731d6b4b7c312b5c3c5aa
SHA1 0c84fde6ed5b859f61fa2e4a39e89b16292c7439
SHA512 32003cfe87e21d8918f02914ce8722493ea155d9f35628e67dd2930e917ec034f15b1715a3b3ad0a5e09836f7eb0dead12c0aacbb06d7b5eb5ba3ad98a22b02e
SSDEEP 1536:03bPyBJN/LK53r5idzW6WotOBMxJ+e1UF0VVv4lV2p0a+DZ:03bPAJN/LK53r5idzW6WiOBOJNC0VVvY
TLSH
T13D93A6563CC91A3E64C26B59E90A1AB7FB56C17CC22CF0E9B9DCC6B77052DA9013C5C1
MD5 SHA1 SHA512 SSDEEP TLSH

assets/EULA/pl_PL/license.html

SHA256 655d8f6d401986d12a1cf1488b322f539c2c987b21044dd0f043f81005952289
MD5 24539afe4f03d6f7e3dde6349087a226
SHA1 490cfd7c714ed8ebab22c6164b7dd0b0e46083f8
SHA512 dc5aed11510369a9b435a5e41a840eecdef064ae468ddfb2aae45d79f8ec086ca852ec6cd09bd972115405beb6edebf7d4a516d6e3cce467a2a6f84a03597baa
SSDEEP 1536:0YpCSYrD/EZjZWTtXHYoMIM5SprieK1lllVtDRMvHOBFhWRZ4rMKk+6qRCCphv4q:0YpCSKTEZjKt3YrIzBie45tNlFhWRCz7
TLSH
T17893194948D0652FCBB247DDE3E39F28AAECC8C8E065C64DA98F486F8157F84177D1A4
MD5 SHA1 SHA512 SSDEEP TLSH

assets/EULA/pt_BR/license.html

SHA256 80e08cace6c22872841bf3e8d8592578ef649dd794a266c1e36a0b2439567d52
MD5 8cc0a5df19773bdfd6b7910b9967354c
SHA1 8b05bfa1bcd3a3251aeef735b8db7ab4953b9c10
SHA512 bc5adfd7f791b876e6e4bb17c0e3bd84c4f4937da85098be5373965f4f05772d7ed16e68fa32d4bbd3dd6c02c73fa87d456308a9d2b4c1a244563027f3b922b7
SSDEEP 1536:0wIZzM48/082oeQAzVRr2Xu84zJKiNw/hOAuS6E56Ws0ePBW:0jZK32jQABRr2Xu84zJKSw/hOAH6E5h9
TLSH
T11C83C73C35C9273B410283526783DB16F689A2C4EA56D582E7EA47CFB3C6D84D73EA41
MD5 SHA1 SHA512 SSDEEP TLSH

assets/EULA/ru_RU/license.html

SHA256 7a14fd1f1745f435fcd248775047215d255693f26750ee2cd8590d7d72ad6848
MD5 0af237e265cd3950496e6fa83799d6e5
SHA1 45de7f7c5ce6597b592b9aff512e34cc9b587712
SHA512 fa863d61c54fb6e797f5f9c9a0c4c31242d07057d2f0e47458d81a146fa512409b83d3814c655acccb7fff766ef671e1b7ddb2c6a0a6b2292420025612886199
SSDEEP 3072:0kmcUz1ocUNsQuhIFRwp8qk25+m2qRNqxj3nibrscGU+21CZe7DEuXk+zt94zeMv:0QBMcwj7IxDjGE4zgxdaJ7UrD27Y2QQu
TLSH
T15EF3A861959A28DF1201B81BDC04BF087DEB55FE7FA7932715A02D7B31F2038CA7961A
MD5 SHA1 SHA512 SSDEEP TLSH

assets/EULA/sv_SE/license.html

SHA256 9977c4441c3f555b499d99604baf140ecc9c49ece449d8280b2617b28c24da0f
MD5 553d1eee6efc59c5e65cdec5f3a98507
SHA1 b0c6aab786fb1ddb3a445103a7dc7b04d626982a
SHA512 4b600ab55e513bfbc456620bbca8b6e668d61ef50f9ef6ea0eed012306ee9a09fec18fab4c42b1cfccab498d14f7b8e718034aedb66985902af2fe9e7de16333
SSDEEP 1536:05VYwa1RLqbff9s+mVVAb5RnxUrCCBj/AAQ8KWuTmHyOmFLntwGkUnskO+2mDkxi:0mqLbpRnxUrCCBj/AAaKyZtmGkUnu2o4
TLSH
T15D83D64399106D7BF7BB437AC584026E57ECD01CE6E2580078DA8DEF9953DAC12BE24B
MD5 SHA1 SHA512 SSDEEP TLSH

assets/EULA/tr_TR/license.html

SHA256 939ddc991ed0ee415fefa11bcb34099ee9b667bc27f6dfa6f25c8a1cf3582529
MD5 dafbb732d3209ea151b91df37868d265
SHA1 e9655241fef60eb0e1ea00db98fa5fb8e523eddc
SHA512 a12eecc0b9d5720a1f25734343b510d7eeb727d17e778c260757b2093ab8b0d7372d06b447dda449802c66e76b5de5427e931d11a11515e86305024054089ce3
SSDEEP 1536:0wgFP360iLciBG79jVtSJ3MJyP/90/sXIknItEhiu5ffJCko+30fv3k9Bfv:0w2360iLciBG79RtSJ8JyP/90/sXIqjP
TLSH
T10E93D5C1ACCA3C1FDB6A07DFE2D14292F9EF53436670E1459516AA173E0A79643CEA0C
MD5 SHA1 SHA512 SSDEEP TLSH

assets/EULA/uk_UA/license.html

SHA256 1c5c135f139815d3e3b10575e0ac6422ad0a374dbc40e515bef83b89a945bd4f
MD5 e1879f32195ccc6c2b7e0868212180e2
SHA1 b8fdf1b3e2d9b6a686a613a24426d831e0a2b746
SHA512 caeb6cdf017af5653f8aa080e6b1634119c26a0cb4ad612a61d5adb16820660f6a6b9c79ad271579c437be8ce7ddfc5c0a03900af64d45aaee1236e8cc4f61f8
SSDEEP 3072:0rtHYtYwnn7iKTyjB9UAIu5x6tucf+o9g9FzRxK+anS4jQoHYpIiDgN:0rtHYtPQUAIu50ucfh9g9FzC+anSBFUN
TLSH
T12AE39AA195AD18EF0506F06BE8447E497DEB85BE77A3971331643DBF35E20208A3C729
MD5 SHA1 SHA512 SSDEEP TLSH

assets/EULA/zh_CN/license.html

SHA256 5c34819e8525b5fa27682a11ad997f30718ca20d0a3a3e6ad157296c77e36129
MD5 ac3fa00684a97207dbbc420452372fdb
SHA1 f4cd54d16d26a978002ab1ffa50232bbd623e598
SHA512 9f4cb070277b0ba4a4c6e43c7b9c9267f090bc8955d84691c64d8e1910cc7ba94205efe732cb20fefb9a6738110929980abd8beefc5c78b5bdfc1e5b3cd73a25
SSDEEP 1536:0xybyrF5mK6F2dTrvkuJl+oKb9byLGKu+FL/71cnYOTjI:0xybQFQForvku7+oKbFyLGKuU/71cjU
TLSH
T1F653E99F151BEEEF00CF12F4675C631872D4AA1381779AE4EBF350976B98C620224D9B
MD5 SHA1 SHA512 SSDEEP TLSH

assets/EULA/zh_TW/license.html

SHA256 ac81c7da3275e8e3330d29adcd223ebdcce733bc5851f26b026fcad941eff0e7
MD5 6f4abd22819625892f592a08daf6cff4
SHA1 b16194c144fdb3c73b61703476beb9428b54250a
SHA512 c52292ffe9190574d1b5870eddc5dfd13fac0cc8e9c1e4737e46c58c7def88a3b599f1d50178bb511b3839d6faa8a68a8f303ec29840aac76bc4e4ffd08c3728
SSDEEP 1536:0ik4Gv1a5UVjH/pDBrHA7BSIRkGn8opn2D7G+04uo8vekmLvcr39T8yWVVW:0DnA7BSi6l8ve1jW
TLSH
T1EF530ADD35735EFF410DB771B3881325B69DA9B14372BDA8E6DA209F3E81F61812048A
MD5 SHA1 SHA512 SSDEEP TLSH

assets/logo.png

SHA256 b6e1be42e80624a757b316ad2347740f312f2f87f336e7297641eee5c88b0a50
MD5 53f688c35f49c4b963ecce557252c600
SHA1 a2a4acaf7890853dba5ffd95bef0ebdcff39089e
SHA512 50485e7bfb2b24358fd4122156566e6e37392dbc973ddd6f25d884e480fb1376c5315013cce8bd3d2f070b4175054f83a6732e6511eff2c63584f490f8d3514e
TLSH
T12D41E6457CF299D1BB92AE1502F6B145CC73224355C0A959313FC8731F21B922B2F1DB
MD5 SHA1 SHA512 TLSH

tools/7za.exe

IMPHASH 15847eb10d7d06dcd5980e8a9b786fd6
SHA256 38242f4c6260f6dadb0be0149249c4df1029b78a36a04acccfa6614e4ab78d84
MD5 e13f5fc1132237f5dc57753086eb6eb7
SHA1 43d6f69fc3294d9b6fb3a4dd876f509ce2592c3f
SHA512 84563d7a3b188527bf76676d91088c3e05400f4cae295122d91650478241b08222c5baa80098a42cfe7adf2d904c09fd93654159fee9dd9f7d56442cf2c356e0
SSDEEP 12288:gyyKdVnyNhXCV4EkP7AIfzNXZ0b5NrnkcAqIV0A1caRIr:gKvyNhXCV4E8BXAfrnkcAqU0Aq
TLSH
T190C47C263AE5C079D6521530CB6E5BF6D0F693680F2308C727949F2C1E359D6CA3AE39
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

e4:c7:20:be:41:df:b9:34:cb:44:28:a2:b2:e6:c2:4c:2b:40:59:4c

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Chains

Jul 26, 2013

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

Serial Number

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageNetscapeServerGatedCrypto

Timespan

Nov 8, 2006 - Nov 7, 2021

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Serial Number

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 19, 2012 - Sep 19, 2013

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

0

Major OS version

4

Entry point

446284

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

oleaut32

SysAllocString SysAllocStringByteLen VariantClear VariantCopy SysFreeString

user32

CharLowerA CharUpperA CharLowerW CharPrevExA CharNextA CharUpperW

kernel32

SetEndOfFile GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA SetConsoleCtrlHandler FileTimeToLocalFileTime GetCommandLineW SetFileApisToOEM GetVersionExA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection GetConsoleMode SetConsoleMode GetStdHandle MultiByteToWideChar WideCharToMultiByte GetLastError FreeLibrary LoadLibraryA AreFileApisANSI GetModuleFileNameA LocalFree FormatMessageA FormatMessageW GetWindowsDirectoryA GetWindowsDirectoryW CloseHandle SetFileTime CreateFileW SetLastError SetFileAttributesA RemoveDirectoryA MoveFileA SetFileAttributesW RemoveDirectoryW MoveFileW CreateDirectoryA CreateDirectoryW DeleteFileA DeleteFileW lstrlenA GetFullPathNameA GetFullPathNameW GetCurrentDirectoryA SetCurrentDirectoryA SetCurrentDirectoryW GetCurrentDirectoryW SearchPathA SearchPathW GetTempPathA GetTempPathW GetTempFileNameA GetTempFileNameW FindClose FindFirstFileA FindFirstFileW FindNextFileA FindNextFileW CreateFileA GetFileSize SetFilePointer DeviceIoControl ReadFile WriteFile GetCurrentProcess GetProcAddress CompareFileTime FileTimeToSystemTime GetSystemInfo GlobalMemoryStatus GetModuleHandleA DosDateTimeToFileTime FileTimeToDosDateTime SystemTimeToFileTime GetSystemTime WaitForMultipleObjects OpenEventA UnmapViewOfFile MapViewOfFile OpenFileMappingA GetTickCount GetProcessTimes LocalFileTimeToFileTime QueryPerformanceCounter GetCurrentThreadId GetCurrentProcessId VirtualAlloc VirtualFree WaitForSingleObject CreateEventA SetEvent ResetEvent CreateSemaphoreA ReleaseSemaphore InitializeCriticalSection RtlUnwind RaiseException HeapAlloc HeapFree HeapReAlloc CreateThread TlsSetValue TlsGetValue ExitThread GetCommandLineA GetVersion ExitProcess TlsAlloc SetUnhandledExceptionFilter TerminateProcess HeapSize GetEnvironmentVariableA HeapDestroy HeapCreate IsBadWritePtr SetHandleCount GetFileType GetStartupInfoA FlushFileBuffers UnhandledExceptionFilter FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW InterlockedDecrement InterlockedIncrement IsBadReadPtr IsBadCodePtr SetStdHandle GetCPInfo GetACP GetOEMCP

Adobe CC 2015/packages/CCM/CCM.pimx

SHA256 feabf69597d432bd024ebece79147b18e69cb8c45d33cc03fa5c70e8c0d33f82
MD5 523c06ed598205f06b46f357338aca59
SHA1 50f911b431c2577c37c7824901ece26249f7f59d
SHA512 3b18f9656b66c99cd4d0164f8973c22cd09cdf7ecba56357c0aa29e6e45e242405362d5316368f2728eadc487e139128806fc8ff1d29f0dc2fd19653b26aa18d
SSDEEP 1536:RJNwEsUjONslsoOZfSS4tCRFxmfm8PdkbladT:WqmSf+m/dkMT
TLSH
T15E73D2A811695BE27407DF603D245E4B2A0FB17DF6B032F8B2984E7686C598F4D8B533
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/packages/CCM/CCM.sig

SHA256 465bfa2bee553f15d9431bbfce27f8a5f8db9cd290cc915115d5daa80e8f59ba
MD5 cb34f68b60f32e7b571d7d765b06249f
SHA1 3bec7cfd3dc5f3b1f6f09ca172ca836464147204
SHA512 174d3b0930a6559ab183d7f3ecddeccd1d7ca8277d4447b3c58eaad06cb11e5d4998e2a86e3c5fc40ce49b66ac6232686f01c3b1ec5dbd234d51239c53c3a2bb
TLSH
T1BC31F74881DC6754D8370BF2EB001D006E88A3DBADA9840D34D5424E7F170219B575FD
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/packages/D6/D6.pima

SHA256 3c1d986c1a94d2b9101d45885f849baa62d96ed4c653ef7c274224a4f415634e
MD5 72a01d3c360d18c43324f383d9918841
SHA1 ca091b55fdc244a9c56b61805b5d9b4290c1424b
SHA512 aec32e31f696c287d4fa26afdf9cdb51038135152b81a9bb7fed030416224c2c05b2904fc2436c4ee711c24935ea5e930ae91d9be900e5efacd10041d7470d85
SSDEEP 49152:NuazEtXJiU7uH3eUrdcz6Rsh5XVtVvp1GvaAr+EntecaoJJ6SXiCa:N+tXN72NrdcziCRzVtAKEteJoJJ1yd
TLSH
T1C5B533E6C7584200D93AABF13AECFC03F71B095658B7AD776E03211395345E492F2B66
MD5 SHA1 SHA512 SSDEEP TLSH

D6Flex.swf

SHA256 7fb9a37944e49693433b0b8ea621d66bac8038ebfab314cb1da34c0955f95a19
MD5 3a1f81c8adc62c8886ef26645ecc6645
SHA1 9661d90cf57964fcaf91d835ad05495780aba5c3
SHA512 3022c472f6b96b6e7f97c8245de2caa7dc601844e60cc666b618a9793e6ea7e6c096b7c133016b86fc9380696f6cff0b9a57ae62dd0c700d325a17399ebc2852
SSDEEP 24576:RMUaB6IgTE8oxpemMym2suHOMEikuuPpuYuhM4cBVPENUzcDEHctG7Od8nPJh9:Rs8PPDymFuHOikuuPp7uhM4cBVPuG08d
TLSH
T1CA753348D6353343AE0611A0B2B43497DB0F6B3017A3AF67D90AEA6FB560DC9C34A537
MD5 SHA1 SHA512 SSDEEP TLSH

D6Native.dll

IMPHASH 3a454276ecf85548a0cbddeb545d6cfa
SHA256 b6440fd67c25e94a495b747ae31503631d97d35341e31dd41514588036de0083
MD5 1b9cbc830075ffcdac53f88953d67bf6
SHA1 90f96a63a6cc204abf1f8763c02de65d6b6f4982
SHA512 8d402856f5c220a81b46cc63d9afedd066784d491757986d84c411892d48ef30b64943cb3d1f44b2c0a8537161111c20b620757f99e5c8b50cfa8f7a1d2da35e
SSDEEP 12288:sXcc++4s98x9w3yoalNAJtjPZTorcEvvH36WxgdwkWti:sXcc++4U2NlADjPZy3KOUWo
TLSH
T1F9157CA2EBD3C135E8EB117056BD6BAB483DBA058734C4CBA3C4189959305E3B73E716
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

ee:d5:1c:c6:53:68:a6:aa:20:da:4e:5e:0b:02:ee:7f:c7:71:d0:b3

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Chains

Apr 28, 2014

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Serial Number

1d:37:83:b3:de:cd:5d:bb:16:e3:3c:d3:a6:b3:bf:db

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 20, 2014 - Feb 21, 2015

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

1

Major OS version

5

Entry point

544717

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\builds\AAM\8.0\source\dev\aamcore\target\win\Release\D6Native.pdb

shlwapi

PathAppendW PathRemoveExtensionW PathIsFileSpecW PathFileExistsW PathRenameExtensionW PathIsNetworkPathW PathRemoveBackslashW PathStripPathW PathRemoveFileSpecW PathFindFileNameW PathIsDirectoryW PathAddExtensionW

kernel32

CloseHandle GetCurrentProcessId LocalFree InitializeCriticalSectionAndSpinCount CreateDirectoryW MultiByteToWideChar GetTempPathW GetFileSize FindFirstFileW CreateProcessW MoveFileExW GetCurrentProcess SetEvent GetModuleHandleW WriteFile WideCharToMultiByte CopyFileW GetVersionExW GetExitCodeProcess GetFileAttributesW ReadFile GetModuleFileNameW CreateFileW FlushFileBuffers SetLastError GetProcAddress FindClose RemoveDirectoryW FindNextFileW DeleteFileW GetSystemTime SetFileAttributesW lstrlenA InterlockedIncrement InterlockedDecrement lstrcpyW OpenFile GetDriveTypeW FormatMessageW IsProcessorFeaturePresent GlobalMemoryStatusEx GetSystemInfo ReleaseMutex GetDiskFreeSpaceExW CreateThread ExitProcess GetFullPathNameW GetFullPathNameA CreateFileA SetFilePointer SetEndOfFile FreeLibrary QueryPerformanceCounter UnlockFile LockFile GetTickCount GetSystemTimeAsFileTime FormatMessageA InitializeCriticalSection LoadLibraryW GetFileAttributesA LeaveCriticalSection LockFileEx EnterCriticalSection GetDiskFreeSpaceW LoadLibraryA GetDiskFreeSpaceA DeleteCriticalSection GetCurrentThreadId GetTempPathA AreFileApisANSI DeleteFileA ConnectNamedPipe CreateNamedPipeW lstrlenW GetACP FreeEnvironmentStringsW GetTimeFormatW GetFileSizeEx GetLocalTime OpenMutexW EnumSystemLocalesW GetUserDefaultLCID IsValidLocale SetEnvironmentVariableA WriteConsoleW SetStdHandle CreateSemaphoreW GetLastError ReleaseSemaphore Sleep WaitForSingleObject CreateMutexW GetModuleHandleExW HeapSize GetStdHandle GetProcessHeap GetFileType GetModuleFileNameA GetEnvironmentStringsW OpenEventW GetDateFormatW GetLocaleInfoW LCMapStringW CompareStringW GetStartupInfoW TlsFree TlsSetValue TlsGetValue TlsAlloc TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter GetCPInfo GetConsoleCP OutputDebugStringW LoadLibraryExW GetOEMCP IsValidCodePage SetFilePointerEx ReadConsoleW GetConsoleMode GetTimeZoneInformation RtlUnwind RaiseException GetCommandLineA HeapReAlloc IsDebuggerPresent HeapFree HeapAlloc DecodePointer EncodePointer GetStringTypeW

user32

GetActiveWindow SendMessageW GetSystemMetrics wsprintfW

advapi32

RegOpenKeyExW RegQueryValueExW GetNamedSecurityInfoW SetNamedSecurityInfoW FreeSid SetEntriesInAclW AllocateAndInitializeSid

shell32

SHCreateDirectoryExW SHGetFolderLocation SHGetFolderPathW SHGetPathFromIDListW SHGetMalloc SHGetSpecialFolderLocation ShellExecuteExW SHBrowseForFolderW SHGetSpecialFolderPathW ord680

ole32

CLSIDFromProgID StringFromGUID2 CLSIDFromString OleRun CoInitialize CoTaskMemFree CoCreateGuid CoCreateInstance

oleaut32

GetErrorInfo VariantClear SysFreeString VariantInit VariantCopy SysAllocString

Setup.exe

IMPHASH f652d84b17a7eff1d76c16cd13b8e089
SHA256 a5197c085aad2441e6b863de443a9ec8eb5e6ec7a03bc4c7abde3c753070f08c
MD5 2a886a84f20318ccc4ca841ab8603370
SHA1 2bfc5e400aae12a78fbd25b461eb40fec3524678
SHA512 e6295e000cfc6e755a973f19bc765a275111f82ae81f941f45e01f43b29854f7bbd365a986fb221c066f305a6cd8008f7ca6b3b52be841f1690f713d6034af1c
SSDEEP 1536:B0Khuz0qx0vrvCDA8L0i+UcZE7Cs8jcdNl+963+gO6Y0KnLe7u/IcA5LPhjr+EO:B3rnYN+nE7nN263y6MyC/IcA5T5rdO
TLSH
T114D35C0373E28472E0B21B3108B09B51567BBC275B7B8A5F3784768F7D716909E66B23
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

43:95:19:5c:41:59:c3:5a:18:de:68:62:93:2a:3b:13:b9:77:4e:df

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Chains

Apr 22, 2014

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Serial Number

1d:37:83:b3:de:cd:5d:bb:16:e3:3c:d3:a6:b3:bf:db

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 20, 2014 - Feb 21, 2015

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

1

Major OS version

5

Entry point

16756

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\builds\RIBS\8.0\source\build\Redirector\vc\Release\Setup.pdb

shlwapi

PathRemoveFileSpecW

kernel32

WriteConsoleW GetStdHandle CloseHandle WaitForSingleObject GetExitCodeProcess CreateProcessW GetModuleFileNameW FreeConsole AttachConsole GetConsoleWindow SetFilePointerEx GetStringTypeW GetConsoleMode GetConsoleCP EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection SetStdHandle GetFileType GetLastError InitializeCriticalSectionAndSpinCount RaiseException RtlUnwind GetCommandLineW WriteFile IsProcessorFeaturePresent HeapAlloc HeapFree InterlockedDecrement ExitProcess GetModuleHandleExW GetProcAddress MultiByteToWideChar HeapSize Sleep DeleteCriticalSection IsDebuggerPresent GetStartupInfoW SetLastError InterlockedIncrement CreateFileW GetCurrentThreadId GetProcessHeap QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW OutputDebugStringW LoadLibraryExW LoadLibraryW WideCharToMultiByte LCMapStringW IsValidCodePage GetACP GetOEMCP GetCPInfo HeapReAlloc FlushFileBuffers

user32

SendMessageW

shell32

CommandLineToArgvW

TokenGenerator64.exe

IMPHASH ca81f65a54a0ce33f7aae819df8057a5
SHA256 3fff3645d6003b77fb09b69ec8e0ef49186b09f12debd4abbda77d7c69fedb7d
MD5 aa07f93437e30b8cc4825ba23e3e29ef
SHA1 07d30468cdc6e5428767458b2cce3af08a648d2a
SHA512 f082ee3b547e16f1554e3858174a6755405345cff579d45ef7cb56ef0b3add551d1cac6a5129ccfd0ec4fd4e2404f3f0ba3a42ed8c9f1a0337b725ef92db5199
SSDEEP 3072:/mCUPWtAOg8YGLI6gp9mnhqjjjLTSXtEkx5P5U2Vr7a4b+oZiVIMPLwz5Zg1bA69:/mCUPWt08PLI64IQbTAvhU24ANScfIbJ
TLSH
T19B444A4973A40DF4E8B7C23D89A28645E6B27C560B70D7CF17A4425A5F336E09E3E722
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

8a:6a:d6:a0:2d:31:84:bb:00:4d:b2:3e:7e:06:98:4e:71:02:be:bd

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Chains

Apr 28, 2014

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Serial Number

1d:37:83:b3:de:cd:5d:bb:16:e3:3c:d3:a6:b3:bf:db

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 20, 2014 - Feb 21, 2015

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

0

Major OS version

6

Entry point

68412

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\builds\AAM\8.0\source\dev\aamcore\target\win\Release\TokenGenerator64.pdb

kernel32

MultiByteToWideChar GetTempPathW GetCommandLineW MoveFileExW GetCurrentProcess GetModuleHandleW WriteFile WideCharToMultiByte ReadFile GetModuleFileNameW CreateFileW FlushFileBuffers SetLastError GetProcAddress InitializeCriticalSectionAndSpinCount lstrlenA InitializeCriticalSection LeaveCriticalSection EnterCriticalSection DeleteCriticalSection SetFilePointer GetCurrentThreadId GetDateFormatW GetTimeFormatW GetFileSizeEx GetLocalTime OpenMutexW GetModuleHandleExW ExitProcess CreateDirectoryW LocalFree GetCurrentProcessId CloseHandle ReleaseMutex CreateSemaphoreW GetLastError ReleaseSemaphore Sleep CreateMutexW WaitForSingleObject SetEnvironmentVariableA SetEndOfFile WriteConsoleW SetStdHandle SetFilePointerEx GetConsoleCP LoadLibraryW OutputDebugStringW LoadLibraryExW IsDebuggerPresent HeapReAlloc EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW IsProcessorFeaturePresent GetStartupInfoW TlsFree TlsSetValue GetOEMCP GetACP IsValidCodePage ReadConsoleW GetConsoleMode FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetFileType GetProcessHeap GetStdHandle GetStringTypeW EncodePointer DecodePointer HeapFree HeapAlloc GetSystemTimeAsFileTime GetTimeZoneInformation RtlPcToFileHeader RaiseException RtlLookupFunctionEntry RtlUnwindEx GetCPInfo RtlCaptureContext RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess TlsAlloc TlsGetValue HeapSize

user32

wsprintfW

shell32

SHCreateDirectoryExW CommandLineToArgvW SHGetSpecialFolderPathW

ole32

CoCreateInstance CLSIDFromProgID OleRun CoInitialize CLSIDFromString

oleaut32

SysFreeString VariantInit VariantCopy VariantClear SysAllocString GetErrorInfo

shlwapi

PathRemoveExtensionW PathFindFileNameW PathIsDirectoryW PathFileExistsW PathIsFileSpecW PathAddExtensionW PathAppendW PathRenameExtensionW PathRemoveFileSpecW

ZStringResources/FontCustomization.xml

SHA256 6a01cfc74ac88b1e1678b5ed70ac9dfe5ea74a3b0ed56c18044b5043bc0ec661
MD5 bd6e64e1344f15b96b6540f33ad7df90
SHA1 c1f0b0bc41ebeb6b894c9e5858afbf696449cac3
SHA512 b8c1737f5f34beda7290a04bcf7d0b4bd30c7f4421bca37517de0504541e4aaedaa9e9a13967074408974e2c6a94a3d8ef4f9e00a60c6f51e70fc0ca40db0314
TLSH
T13E316C9D3673176667D316EB23B958C03A2F691956574D2280622E3F05C307D7FE2906
MD5 SHA1 SHA512 TLSH

ZStringResources/cs_CZ/stringtable.xml

SHA256 88cb35f34baf8cab1e8b6593f0e2102ab0681b56ca1d2ff3fe53486cabdb9a04
MD5 38c1a4fbc69ec5dc76115947d182341e
SHA1 38de2b288cf185460e7d792af33c06fdcc7b2411
SHA512 5479dd539e2bdef429606e6da5991224c3fcd832c0514aceb24cb99f687a4e87e837431e041530369714f0c6e523e3e7f74abe5bf739981117acfc68fd6984fb
SSDEEP 768:K9Y8zjoijhxWx4naZGQ6NazfUcCnGqS0wGTatkDwPYMqBtsZKxq4IxACYYjbB81H:K9YsfuHsW6S0wGTatkDcYMqBJxq4j6bI
TLSH
T1CDF2765272BCAF1C6856956F8A7230C8441FCCBD1178A4A271AF75773F61E880BFB864
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/da_DK/stringtable.xml

SHA256 a3c6efa0881cf59685e445024e91dc4cfe7af75d0b2a517ecb9da4627cd61176
MD5 c7abb8a77784d684f1d2aff530e78cf5
SHA1 e8c45cd0c452bac16c75e7fa89934725fbbc015f
SHA512 d3b94e653c80b95bfb1648698256b3b5ac9fe26defd47288405f8df00977e4b4a9d4f3dc3ba8dcacb1962df0e836fa20340ed3e4e6c2e32947f228a07e15bd0d
SSDEEP 384:wBrnMgqkk0dAFpWdeeewySccG7GTY80rY6lxB4bpOipjEM6WdCmqCrTS9q:wcLZ+c4bpOipjEM6WdCmqGTS9q
TLSH
T1B1E2998272BCAF2C6856967F8A7220C8406FDCBD1174586271AE717B3F61D840BFF864
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/de_DE/stringtable.xml

SHA256 7bf5daea310022d46446409f7a12f2318f13f827a28059fa4a4c7d5da908aa35
MD5 ebf52d01f1627732a7cdc34f1e7120c0
SHA1 859e9bb05eb573ddbd9afd2a094937957f973ab2
SHA512 75e16f43bae5b08a8dee6b9553e32319db81c327f71194a08929ffd76f34d022996e9bc702d7083dc997560f0bbbe5e729a2de0642df914f80191ca3b4c79e6a
SSDEEP 768:/bWFyxzqXy/a7lXTSm5thzL+XeYf5V1DZS9q:/bIMgJX+m5thzLUeYf5V1L
TLSH
T101F2A84272FCBF2C6456966F8A3124C5251FECBE1174686672AEA1773F21D840BBF870
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/en_AE/stringtable.xml

SHA256 bb28ff58c6d6ca627149a4955b21b03f7e1895d7e0f3115b579243dd80b687fa
MD5 e89b411038c828fe85f818844266d2c6
SHA1 c9f542d4846b270fd082e9c50c0e050cdf49faf6
SHA512 3fac47cfb575b6f815018450644149fc2f588ccd15ca25747d7a6e1e0172f499214f1b644e99795585b230ccf38194d5b6983dbac71a8ce41634326ced9cd0ab
SSDEEP 768:B32kIZf3NlzXWoUGAw+3JYqPYlc1gafpO4mS9q:B32kWDzXqZZY0YwgaO
TLSH
T14AD23792B398BF2C2896427F4A3130C1556FDCB916B8641730AF753B3B51E844AF7DA8
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/en_GB/stringtable.xml

SHA256 36a0d1419e631c817040ecec6a686e19fba3ca17cd7515054d061448cb0c0c47
MD5 1f28022e5bcd7090aa98b92d4f45f342
SHA1 6998717f53b5014b5b9e1d47e5bf6b4cbaf528b3
SHA512 65b9d2a97757921f067921c01725a4672d1da0955da39ac8b9526dd86c7261d4477caa72356739713349408a552bb6052a33434c04ccdeba7e3abf8dfb7e46b1
SSDEEP 768:BCj2kOZf3NlzXWoUGUw+3JiqPYlc1gaDpO2CS9q:B82kYDzXGZZi0Ywg0a
TLSH
T190D23792B3A8AF2C2896417F4A3130C1556FDCBD16B8641730AF753B3B51E844AF7DA8
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/en_IL/stringtable.xml

SHA256 8dec4cbb01f63e2ab7978a2a5911afb3cf866598f4c5bb8966a38cd00ba50aa4
MD5 5d90955683e4f7d8a79019ffe1cd7121
SHA1 e742aa095c588a704c1d4abd73f04eb9d857f412
SHA512 e42349e5ec5a583ee6c5f8602521b4564d8cf5060136ea5479b7d4c6c665c154876f04ad8aa671e26f74e093fc8a5f52fce1b83bb2680b89588b2127d2134b51
SSDEEP 768:BA2kvZf3NlzXWoUGTw+3JXqPYlc1gaIpOZsS9q:BA2kxDzXlZZX0YwgBN
TLSH
T195D24892B398AF2C2896417F4A3130C1556FDCBD16B8641730AF753B3B61E844AF7DA8
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/en_US/stringtable.xml

SHA256 a5f6ddf66f67c041a5976e3f4280a6d354eaf179f1bfb6acd3b829ed2060f3d8
MD5 75de6c7a1fc473ea762d79b2fa276067
SHA1 38f91eced88cb39bd4ccb14f2e34cff957309156
SHA512 9f3cacff8e95a899e8c586d658cc5e80f7e63d9c00ea477ab6cad97ba170919e8dae40e2ace284176a9760c2cece954a2a0cad14d20cdbea7628e1509fb6dad7
SSDEEP 768:BF2kRZf3NlzXWoUGMw+3JaqPYlc1gadpOF3S9q:BF2kvDzXeZZa0Ywguk
TLSH
T11DD23792B398AF2C2896417F4A3130C1556FDCBD16B8641730AF753B3B51E844AF7DA8
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/en_XM/stringtable.xml

SHA256 f9864d4a4ac4822f086cd2d74ab3ab855d6c730b213d8e426901a7b985021371
MD5 82e50d56c00d778979e2d68b7729ca69
SHA1 0db57bbd703134aaece12ec66a2edd4a8a2be87e
SHA512 60ac7d13316030f217959c7a83538ec9441dfda13fbcb7045db1794d7bf579f842dab5685f5f217c2dec6776d075a6ff1e021d8698401b96f6a769e2b5b4a207
SSDEEP 768:Bq2kRZf3NlzXWoUGXw+3JfqPYlc1gaspORjgS9q:Bq2kvDzXhZZf0YwgX4C
TLSH
T1AFD24792B398AF2C2896427F4A3130C1552FDCBD56B8641730AF753B3B51E844AF7DA8
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/es_ES/stringtable.xml

SHA256 63ea7d7aaa6677c5475aca6b6662cafd41e218d562d4949d9236159899c9c6bd
MD5 7c2bc88ebc55ad98e2f08dc4460ee7e1
SHA1 8b74fdf9c636af63280405a338c74dd924a14507
SHA512 e09c8836b8b40396ba598d12c61499dbf3c5b451628557252c8b489eba6d42bb5d53897f325306428e6fff7d61781d5b24ab971057ea3d115c376e66a44a57a1
SSDEEP 384:5OygNowfXif7viwlYVxQBAZX0oXt687HjgtNaXKPu3160gp0SHS9q:5LgNojEVENa6P860sJHS9q
TLSH
T1B6F2B94172EC6F1C6452952F8A7260C5905FDCBD257894A2B1AE71B73FA0D884BFFC60
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/es_LA/stringtable.xml

SHA256 21f9e70c7a024f0e42c6a9e1de5b519444f8768542a0a3a2653762d199490194
MD5 2595d8a8510ff9bdac175bba4a3d780b
SHA1 7524b0f62120bdc0e8abb03ad29fe66cbc4b7ca2
SHA512 2eed27a40493f968393d05903e3d990292d92372e3e7747509e756a7184e4179a33a5b5170f584cdc44b7bc0e7e98854f66a1c30e49a58081816c55308c6c7b0
SSDEEP 384:mOygNowfXif7viwlYVxQBAZX0oXt687HjgONaQKPu316zgp015S9q:mLgNojEVjNaTP86zsy5S9q
TLSH
T1A6F2BA4272EC6F1C6452952F8A7270C5905FDCBD247894A2B1AE61B73FA0D884BFFC64
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/es_MX/stringtable.xml

SHA256 21f9e70c7a024f0e42c6a9e1de5b519444f8768542a0a3a2653762d199490194
MD5 2595d8a8510ff9bdac175bba4a3d780b
SHA1 7524b0f62120bdc0e8abb03ad29fe66cbc4b7ca2
SHA512 2eed27a40493f968393d05903e3d990292d92372e3e7747509e756a7184e4179a33a5b5170f584cdc44b7bc0e7e98854f66a1c30e49a58081816c55308c6c7b0
SSDEEP 384:mOygNowfXif7viwlYVxQBAZX0oXt687HjgONaQKPu316zgp015S9q:mLgNojEVjNaTP86zsy5S9q
TLSH
T1A6F2BA4272EC6F1C6452952F8A7270C5905FDCBD247894A2B1AE61B73FA0D884BFFC64
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/es_NA/stringtable.xml

SHA256 21f9e70c7a024f0e42c6a9e1de5b519444f8768542a0a3a2653762d199490194
MD5 2595d8a8510ff9bdac175bba4a3d780b
SHA1 7524b0f62120bdc0e8abb03ad29fe66cbc4b7ca2
SHA512 2eed27a40493f968393d05903e3d990292d92372e3e7747509e756a7184e4179a33a5b5170f584cdc44b7bc0e7e98854f66a1c30e49a58081816c55308c6c7b0
SSDEEP 384:mOygNowfXif7viwlYVxQBAZX0oXt687HjgONaQKPu316zgp015S9q:mLgNojEVjNaTP86zsy5S9q
TLSH
T1A6F2BA4272EC6F1C6452952F8A7270C5905FDCBD247894A2B1AE61B73FA0D884BFFC64
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/fi_FI/stringtable.xml

SHA256 f745a09518d78da6e1685a57a9076e54b225dd9294406c2c8dc70e92cc5a037b
MD5 e58d0e8aca8b4c75ac14f126ea4ef906
SHA1 7d6d074b03675e2452100bfa2b4cbfa326578410
SHA512 104b172989b436416c74ec416bf4ce4439b695993be69dbf17fb2dfc7cbc88585a1882f2fdb4ba4286d1d740945efa0fba2c52bd7e3fb448e59f852cf6e52f38
SSDEEP 384:vrp2C/fYZf8mtD2KSiVsXXJ4ZJmflSsYlwUKk4t7lEDxvRNJiXrOgp8dwMlS9q:vrh/fkz7+Zt7lEDxvRNJiXCgp8d3lS9q
TLSH
T196E28B5272ACAF1C6496952F8A7130C9405FDCBE11785862B1AE71BB3F60D840AFBD78
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/fr_CA/stringtable.xml

SHA256 e984d0cd536bdad04571aab896d4991cbcf9f801a2c2eef9ee70f82626d5c048
MD5 6136a80e652eb146794e7091f0007226
SHA1 d2e9007a375c2ac91a03467342218294a571d791
SHA512 c7e48b065dd0a68a0e11f958b03b371c9dfaeb3d4cbd052a23d85c13e9f4b6b2cd24862db04041583d3353c1c6b2a233023794611be5fe172675de3966e4d9ff
SSDEEP 768:s1epuJUwptiYOjpO3AFdRPMJFIy+zqnEcXMMMCwfgVFB4S9q:NpupGjGaRPMJFIy++nN7SfX
TLSH
T1CDF2B98272BC6F6C6486952F8A7270C5402FDCBD2178646271AF71773F61D884BFB8A4
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/fr_FR/stringtable.xml

SHA256 852c6273fa86156b53836bfc3e080d62f93c2f845d80b9f5406d92161ae3ae98
MD5 12a255c794cfe542d7a23ddc250c69eb
SHA1 85625c9a130015eadf573dd74de8880287188809
SHA512 c35336b4f4abdc350966adc3d52c016bcde323cd1986c6241742161058991ff72bfe817cb548466b757f1ab9727eeca48ce00c66024127d0d12539504686be07
SSDEEP 768:Y1e+uJUwptiYOjpO3AFdR8MJFI5+zqnEcXMMMpwfgVFKqS9q:Z+upGjGaR8MJFI5++nN7RfO
TLSH
T12CF2BA8272BC6F6C6486952F8A7270C5402FDCBD2178646271AF71773F61D884BFB8A4
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/fr_MA/stringtable.xml

SHA256 4acd06c49b2b86ccc2211889d248710b307af99ee0966389da39f94212d4d45a
MD5 40c19622f789d89aaba7d57894bb6d30
SHA1 3246fbd2dd13b2f7f7c189491f8043df7a022f1f
SHA512 6d072adc377e0e86523b81d31efe83530bd83425a688a083d6454548f468f7740bfae9608a5f30529e57fc2da0ebe029599fba94e26ce0b98af2d21cb0926b5d
SSDEEP 768:q1enuJUwptiYOjpO3AFdRNMJFIM+zqnEcXMMMYwfgVF3US9q:rnupGjGaRNMJFIM++nN7Yft
TLSH
T19DF2BA8272BC6F6C6486952F8A7270C5402FDCBD2178646271AF71773F61D884BFB8A4
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/fr_XM/stringtable.xml

SHA256 852c6273fa86156b53836bfc3e080d62f93c2f845d80b9f5406d92161ae3ae98
MD5 12a255c794cfe542d7a23ddc250c69eb
SHA1 85625c9a130015eadf573dd74de8880287188809
SHA512 c35336b4f4abdc350966adc3d52c016bcde323cd1986c6241742161058991ff72bfe817cb548466b757f1ab9727eeca48ce00c66024127d0d12539504686be07
SSDEEP 768:Y1e+uJUwptiYOjpO3AFdR8MJFI5+zqnEcXMMMpwfgVFKqS9q:Z+upGjGaR8MJFI5++nN7RfO
TLSH
T12CF2BA8272BC6F6C6486952F8A7270C5402FDCBD2178646271AF71773F61D884BFB8A4
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/hu_HU/stringtable.xml

SHA256 eb121ee37044c4586ba0657a749847433ca78994d71bbe2458d4165e26cd4ebd
MD5 21baf4a54f928caeb9f6733bb8441ed2
SHA1 274a2ae363e49ada4508d1905a6d9e0e7f7fd63b
SHA512 829898d3f78228d7b89497e2db361f21720cab64c94196bce1f26c34b09355f3a8553ea1f3b7b1556b35a3c97050e3b951e3290e4f6d135cecadef5dd17c3db8
SSDEEP 768:ybwcqkc0CL4uxKZXUtS5EoZE2yVcLt3favJTGRS9q:G4mB5t2ZcLt3favJTM
TLSH
T161F26BA232BC6F1C6456956F8A7220C8405FDCBD1575687372AE617B3F60D480EFBCA8
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/it_IT/stringtable.xml

SHA256 5e8083147af1e3d0870bc651a516f9d14a13523d4731a3da56160d96b868008b
MD5 abea8dd819b6b3446a43d66b6dfe85c2
SHA1 5f54503e4fa0e2d7cd371b891b489649d52a9c6d
SHA512 3516098f33f90a1f764270a804136b16544f9d0dda6dc084ce0bbe12e2878e91977f59b2379de23037e460987347dd1fa1c809634e8e2dbb0b7b1cffeb753345
SSDEEP 384:az9sjtec78TlEflf4X5LdgWm2+Osuw6tjspbe+mJrA7GXudA0oVu8MQg1ThB2BgS:Sxc4cAhaMVu8MQg1ThB2BgeVf5S9q
TLSH
T159E2865272BC6F2C6846952F8A7230C4511FECFD2578646271AF217B3FA1D844AFF8A4
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/ja_JP/stringtable.xml

SHA256 397a4ee06f8e0a49debc30155d485043bf4f2340da966e6248fcabfd734be6c9
MD5 46c098ea511e9da0f50ffd3267fec537
SHA1 ddc4e5426c1744103a09614e08f6d54f8033159b
SHA512 dc5cc23cc8c565d32513a046cc7b19ee882b405ba9ebe427fd53528f19591ebacbfc242d5e56504c4f228cf533e62a2beec8abb16cbc6493cbbf2723cad656d2
SSDEEP 384:eV7B0wD9Gi7aai9i999fz9z9R9Sp5UU8w7CLODbuW2gpLtS9q:eVl0yVVxODbuW2gpLtS9q
TLSH
T14203845DB3E86F1DA821943B4A7630C4401EDCBED9796462317EA0773F60D8C8ABB974
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/ko_KR/stringtable.xml

SHA256 d68487faa773dc661ba3c6d8e705f5e475005b5aa7e39e256a9cce1048c27d47
MD5 072d2ecb1c1dd3a67505dcbdfe458db7
SHA1 249d84427a9d8f8aa6076d3b0de65c467da19e7a
SHA512 0985154909a378948b91e18fdc46d133909209e19aed11d606bfc5f0bee2e37d9b5ea23e8deb36d2be5cfae1a8ef61eaa64222b6ba0c4371a7670bbfd0b47d50
SSDEEP 768:+uX84IfuhyO690LhR3fAZSBUX9lNJTS9q:+wIH0LhR3fA7V
TLSH
T19DF2AE9232FD6F1C2452996B8AB270C4425FCCBE22755462B16E69773F60D840AFFCB4
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/nb_NO/stringtable.xml

SHA256 b1327e4573e2d9516b57fca8de56e6e9729b5ddc6cd11a056717f81c6477b70d
MD5 eade0d69126dda8950b8d3476415a251
SHA1 6df422ed03d7c3afe4e717853743e197650adf5a
SHA512 bed23bc9353ac5423074c88268fbcd419a4eb90beeb7719e5ef8b0825c92a8e61dd7f81cd787202ba3997aa6cbc3be0f410b3feffb1e53c8c73d1d5de6cb8801
SSDEEP 768:g+DZeoHG4745JjeDResmsAilRuYzZRS9q:3eQGL7e9esgARLt
TLSH
T10BE28942B2BC7F2C6856952F8A7220C9415FDCBD11B858A271AE717B3F61D840BFF864
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/nl_NL/stringtable.xml

SHA256 2d5fd346720cb7f547940e1492d3f99f066e908a5db261104628d9f51588f8ab
MD5 6eb591194c0c3c8b6c8dd8b1aef71b3b
SHA1 ae75a0d0e41b06925fc1f7ff3957beee8ed3ee41
SHA512 a371978ac2c684dd57bffcb53f392226f7e27532d0473606b43c61afe9eaa4d4f7b376a75e5acdd7ba08a2d7b4638f8ec24b2c47d0fed3be686dbfaf240d793c
SSDEEP 384:7DSl8XGPonCMKxPeZofXS44jELeTLeZLeVLeILeOLe8g05EcgLcL07/eL8Pdcvwo:7DSl8XXR2i4rTK8P0w1BMbbBS9q
TLSH
T15BF2CC4272BC6F2C6496966F8A3230C9511FDCBD11B854A2B1AFB17B3F61D440AFF864
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/pl_PL/stringtable.xml

SHA256 3f1e10feee69d7709d6a8e0a00b5f8180fb010822d20e6d1adacf6530301161e
MD5 b53069dd20f23349edf356e2e3996fb0
SHA1 400623b27f8cdd27eb875daf52053cab80c0992d
SHA512 3a68a4a5ab104a8d9b9277bd533087a36c8d79c74afe7a10e7c15dd0732633a3a837903b324afaacec5805ab03cc7faa123e7337afd68842eaa5b4181618c969
SSDEEP 768:iz7RXCLquCsQbp3RSFByeU8+/jyb4r/RedHhL/6tGe2vyZ9OX15LS9q:csQ1RpybS/Shcy
TLSH
T176F2865172BCAF1C6856986F8AB220C8045FDCFD11785462B1AF717B3F61E480BFB8A4
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/pt_BR/stringtable.xml

SHA256 6915ea7100ff01c801319763cad68b70eeb28565c5550edf1bececec90ea9ec4
MD5 f7e48e191208b65e30bc80fb8c4231aa
SHA1 228ff57c85edff605a3ac03ce638f40a661e4ad5
SHA512 dac2e26fca4f53767e0669e189e9d8b2913e1547358d227888c506e9b4d4af72879fc52f606001db3c64e0857164609107ecfed16d6b19eea0eb9a58b80425cb
SSDEEP 768:KDzgmp0B3MuSUB4H+9T1JCzRmvlCtraMJbS9q:zMi8zRgCtraMf
TLSH
T1A6E2A84172EC6F1C6446966F8A7230C5404FDCBD257498A2B1AF26773FA1D884BFBC64
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/ru_RU/stringtable.xml

SHA256 7700d29990a4a71043b4ee4a739abd72f9274ec375f4a137dd859eab950f42a0
MD5 92fd938ca3d6801b2e4920f214046032
SHA1 9df79edcf7272dd348cf115cb5eab000c5c094c5
SHA512 edc33b05e1bf8a0d54da7b3ff27311b78c2cc0b9a13c904dc6be544147fe8b0030b6cf5f1cc88d3538a42c37411a3f61485f3b0c0d212a7b2bd68d2de34f59f2
SSDEEP 384:xB8AIu6VQ62ZfzOnRIes5M9zu40P5E9nBdnBnb783zVeE859/7dSIAiecFyS9q:x2AIudJyRr4VeL59/7dSIAf+yS9q
TLSH
T110137A5172EC6F5C1505A42BCA30B88824AFCCFE2B795662316D397B3FB1C444ABF964
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/sv_SE/stringtable.xml

SHA256 3c53a1e043da1632164700b98011f7b4acad128584558e134831df27129e46a8
MD5 f7ade9ad801b3c67e90501c7b6569a96
SHA1 1cfe9973f0944b3786529d5928594f6656dbe04d
SHA512 12135f6b421851f32a94202e3f3446780814285a586567b033401cb0750a26df0e6e22d23aac8486afd702ba8e0495883353cb2b2fb3feee9a79cc7c8dfbde9e
SSDEEP 768:gk95OHl7cxwB1y07u/gtQGl5cIDEXaNXwrm+98n5/PfS9q:395OHl7cSB1y0VDEXaNXwrm+98n5/p
TLSH
T10BE2984272BCBF1C7456962F8A7220C9005FECBD11B4686271AE657B3F61D880BFF964
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/tr_TR/stringtable.xml

SHA256 76b0d06e19fc7736fc9653e9bc8d051e11e561ee978c224f7e5522f4b54f99d0
MD5 f21a7620a6149003fc9264202c6bdaae
SHA1 629e2c3136182ec9e2252fe7be4703b861b88604
SHA512 9502b93e95aa56a264bc9932552d370e8c48ae57668d95239beabf677a15fa9897a879402a9d0e66e2deca38738d37ce98b8cee54760697d04802f75bf368a48
SSDEEP 384:EYU7n/pZJXVMVCMRRPbmHHypA3iUzfeSnfqhyCz2JO0YeoiplPS9q:EYMhXaVziTCzqO3eoWlPS9q
TLSH
T1C0E2AA8172FC7F1C6856956F8AB120C8845FDCB91274A86372AE757B3F60D840BFB864
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/uk_UA/stringtable.xml

SHA256 64a8e5ff7d8abce54a49586375e12c81d81e39ffba519927a6c4b44aea7b5ba4
MD5 ead7884ecfa90cbc995dec77d9f41f0b
SHA1 2686f4925ef68f935268688954760add9b3f14df
SHA512 9756eb8f7e556daf85dfd998799a32bfaf08a3a1b9d815e14ee3ca7bf27d5c035e911d7c453fc19655b08a3ff43ce8a003b44faa25a72a2d330804b983fed9f3
SSDEEP 384:245znryzBokyJrfEYCZYhQOmGs9FNPmkrTljmUX5Jw6TAMHE7ByzEHZyUfABwNmo:bXOBfV1TAyE0EHlulVOS9q
TLSH
T1AF13465172EC6F9D1406A46BCA70B488289F8CFE2675561331AD397B3FE0C444BBFA64
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/zh_CN/stringtable.xml

SHA256 44df7f51b607a6b93f2e8712232d9aeff218763a78a93598caf39b3718f3f286
MD5 66ae7a66a1b244699b0b91952fd8916a
SHA1 85990a4adf725e47610e476412a0422ec7a0859f
SHA512 18835fe17b8e8e9100e0ce40a02835ea8fc77cd7a56f18b9ad4f3978c7a9fd9d0c58d74ecb722ababd781d00a703fe4fccbbeef8dbe8fb572a8ac8a04e718dc9
SSDEEP 384:p4NMgJfBA2lThRy9Jf1OVEE7wULK8II22hqMy6NpwcDUDT+zVXBrfmV4TgDS9q:p4NMgJJA7xCqMy6jvw3+zJ0V4sDS9q
TLSH
T199E2788232AC7F5C6456996F8A7230C4405FDCBD11B568A271AE717B3F60D880BFBC69
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/zh_TW/stringtable.xml

SHA256 fd1c29a668681aae57f57feae5917798ea99f6dcae7c78eb528dc4b0f36f9877
MD5 3b69cfce0f27f602dd0b8a9b2fb841f0
SHA1 01f975e1424c466e8d987d8f1e40904063461803
SHA512 3316f329c1f3e9445df003cbc76d553ab9d504072522b0f1a91dd75e6c02ae773a587f4140619c73376327ba42df5de45b1e2e994f02d395d942a0990df4853c
SSDEEP 384:yxd965IT+ztecqwwSJ0IAsDNoMWmPkI5f7TcEm4/oVz0jjwGUS9q:Mf65/tt3kI5zAbcoVWjwGUS9q
TLSH
T14AE2579272BC6F1C6456996B8B7120C4405FDCBD15B468A271AE31BB3F60D880FFBC69
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

Adobe CC 2015/packages/D6/D6.pimx

SHA256 7908f8318fc0ee65893c4984bdfdf6017ea4423328a4c345edd8c8568769d825
MD5 e172038d9de5ea6259e41b0398bee872
SHA1 98e803acd7e437a2641fb422c2c8cf0f280d295b
SHA512 b77893e1a7a7aab04fbfbf0ed1782d5379fcad9248bc50f06f1824ee3ca8361f57e0b010ba4063d601944d74ac8079a6d494bd2ef887ab053574b7bb4aeb0e3e
SSDEEP 1536:McmPHJFsf0Gnx8dVILTry24eNFXYw4FQ6SJ:aJGadgvoeNV4Qn
TLSH
T19A93C1A911695BE17407CE653C205E472A0FF17DF67031F8B2984D7A86DA98F4E8B233
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/packages/D6/D6.sig

SHA256 660bdf0a1184b79fc300d3ee0bff7fe8886043747144f61434e8dc12bbc70054
MD5 cf05fc34c1cd8f82058561db9b643909
SHA1 e7fac39564ab7ae4e36d1d4461701c1ffb7e3434
SHA512 bf6b543458a35893c2da9ff3964783ee3a889162b86f13cd48dd61a0753038dda68b2fa830e544565c8d9c14f9b6ab7c44e2ea478e25ea73838ac70cbc16a484
TLSH
T1EB31F96A75D05DD4453319B07646994D771167DB2BDED80DA8C00D8BBFEB42041430FA
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/packages/DECore/DECore.pima

SHA256 c31d1e57c6ec92c5fa6ce67dd4cc68a4483819ed7cba9a2a4c54ea8aac6456f9
MD5 b4707243474b8a831b5061fa2b7d0626
SHA1 3412a2efd20cd608ccefaf61f78a7a28100194a2
SHA512 759613cff54fab0694deca52275890d2722746275c74273a1b6686d10f51a14726acc9928f81123dfc5fe206761becef53b28d366cdaf95dbb792acb7d63a7b6
SSDEEP 196608:eJpzz18fGtGndQ0feYY6Sh+bcDwbZhyDE46hpa+o6WeVjFwCeQMEHMIzY8c5/FP7:AKG0QRh+Xqw4czVJwkZzlchFP7
TLSH
T1EFD633458FC7CE0288BD3237725FC14A72425C1E327A63E780F5CAA9652A3B55B3D9C6
MD5 SHA1 SHA512 SSDEEP TLSH

ARKSelector.dll

IMPHASH 1fa3470fcfcd91e36344e0c4074157a7
SHA256 f148e41ddc55430aa5dfcea0d199823d0516b31c63e6be1c8cf94517277a9941
MD5 4510af14cd121973fc6dc5c16b3046d8
SHA1 4433b8510b98117ae1c8b7e4f188b90755d7cdac
SHA512 03a53004127c255f553dae2feb9a55e23897e5cae246d9224a43b2a15e46a0fb4789785681910cffb0dd94a1ea69c7169dc53cad664e60c3d1d2264a50c5a1a6
SSDEEP 384:lcqQYlrIBqQJav8ikpn/JkCQaZ3anMVJtUIVntnUJhaMflIInkl2wKSd46WYvi8M:l/Sc1hqtUI/EKF+RfqhHQjHJh
TLSH
T103037D06670591B2DDDE0A74BAA96F0F943866600FE949DBE36503CE4D72BE12F3710B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

5e:bd:11:28:29:cf:af:b6:bf:25:d4:92:a3:74:9b:89:ff:2c:1c:d0

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Chains

Apr 22, 2014

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Serial Number

1d:37:83:b3:de:cd:5d:bb:16:e3:3c:d3:a6:b3:bf:db

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 20, 2014 - Feb 21, 2015

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

1

Major OS version

5

Entry point

17119

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\builds\RIBS\8.0\source\build\ARKSelector\vc\Release\ARKSelector.pdb

DE5/Setup.dll

IMPHASH 64daf01cfa4999e6af3e6dc3052e55e1
SHA256 d080d7247be29e8defbc39074024c4f9daecfe075865e663a6be36a72f3d6750
MD5 d3356eabe5721d0ecb78c79fc3123f33
SHA1 649264a13045b47941668fe1f75ed6b4a596ae6c
SHA512 b0fe06a4132c77729722e0e5591478c4f85c37051207c88c44b7a0767152fb41de439cb3144209f366378f628c8e828f6081e62bcce78ab2a35eec4b405f761e
SSDEEP 49152:URwNVSRaT7Md9045KR6v4q5ijFVe+nSRqeXIpsl73B7XolAGhZvUcY8uTyuI96bO:URwNVSkUIMKR00
TLSH
T11DD53A807982D129E8AD05B4A9747AF5B028FCA5473BCCDF6ACCBA5D0471DCB2637319
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

9b:31:9f:98:87:28:69:61:6f:70:d6:37:f5:a7:fb:46:b4:1d:74:df

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Chains

Feb 19, 2014

CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Serial Number

11:c9:54:ae:24:12:01:1c:f5:4a:7c:3c:b1:8d:75:1e

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 19, 2013 - Feb 20, 2014

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

1

Major OS version

5

Entry point

1059851

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\1\releases\build\Ahmbed\vc10\obj\Release\bin\Setup.pdb

mpr

WNetAddConnection2W WNetCancelConnection2W

kernel32

FormatMessageW GetFileAttributesW ReadFile GetModuleFileNameW lstrcmpW lstrlenW GetTempPathW GetCurrentDirectoryW FindClose LocalAlloc SetCurrentDirectoryW RemoveDirectoryW FindNextFileW GetDiskFreeSpaceExW DeleteFileW LocalFree SetFileAttributesW lstrcpyW GetVolumeInformationW FindResourceExW LoadResource LockResource GetUserDefaultUILanguage ReleaseMutex CreateProcessW GetCurrentProcess GetUserDefaultLangID OpenProcess Thread32First GetExitCodeProcess Thread32Next Process32FirstW QueryDosDeviceW Module32FirstW Process32NextW CreateToolhelp32Snapshot Module32NextW GetTempFileNameW GetThreadLocale IsProcessorFeaturePresent GlobalMemoryStatusEx GetCurrentThread GetTickCount Sleep InterlockedDecrement lstrcatW InitializeCriticalSection LeaveCriticalSection EnterCriticalSection QueryPerformanceCounter QueryPerformanceFrequency GetProcessHeap HeapAlloc HeapFree ReleaseSemaphore GetSystemTimeAsFileTime DuplicateHandle CreateSemaphoreA CreateFileA InterlockedCompareExchange GetUserDefaultLCID GetStringTypeExA LCMapStringA LoadLibraryA SetFilePointer SetFilePointerEx GetCurrentThreadId SystemTimeToFileTime DeleteFileA GetDiskFreeSpaceA GetDiskFreeSpaceW GetFileAttributesA GetFullPathNameA GetFullPathNameW LockFile LockFileEx SetEndOfFile UnlockFile InterlockedIncrement GetCurrentProcessId GetVersionExA FormatMessageA GetTempPathA AreFileApisANSI ConnectNamedPipe CreateNamedPipeW GetModuleHandleA HeapReAlloc GlobalLock GlobalAlloc GlobalFree GlobalUnlock IsDebuggerPresent DecodePointer EncodePointer CreateWaitableTimerA TlsFree TlsSetValue TlsGetValue TlsAlloc ResumeThread SetWaitableTimer ResetEvent WaitForMultipleObjects OpenEventA SetErrorMode GetDriveTypeW FindFirstFileW GetFileSize MultiByteToWideChar GetACP WideCharToMultiByte GetVersionExW GetSystemTime GetLastError WaitForSingleObject CreateMutexW FlushFileBuffers CreateFileW CopyFileW WriteFile CloseHandle DeleteCriticalSection GetProcAddress SetLastError GetStdHandle RaiseException SetEvent CreateEventA GetConsoleWindow FreeConsole LoadLibraryW GetModuleHandleW FreeLibrary InterlockedExchange LoadLibraryExA

user32

GetSystemMetrics SendMessageW EnumThreadWindows GetWindowTextW GetWindowTextLengthW PostMessageW LoadStringA

advapi32

GetLengthSid IsValidSecurityDescriptor FreeSid SetSecurityDescriptorOwner AllocateAndInitializeSid InitializeAcl ImpersonateSelf SetSecurityDescriptorDacl InitializeSecurityDescriptor RegQueryValueExW AccessCheck SetSecurityDescriptorGroup OpenThreadToken SetEntriesInAclW GetNamedSecurityInfoW SetNamedSecurityInfoW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken CreateWellKnownSid RegOpenKeyExW RegDeleteKeyW RegSetValueExW RegCloseKey ReportEventW DeregisterEventSource RegCreateKeyExW RegisterEventSourceW RevertToSelf AddAccessAllowedAce

shell32

SHCreateDirectoryExW SHGetFolderPathW SHGetPathFromIDListW SHGetFolderLocation ord75 ord165

ole32

OleInitialize CoTaskMemFree CoInitializeEx CLSIDFromProgID CoUninitialize CoCreateInstance OleUninitialize CoInitialize

oleaut32

SysAllocString SysFreeString VariantInit VariantCopy VariantClear SysStringLen

atl110

ord31

shlwapi

PathStripPathW PathRemoveFileSpecW PathAppendW PathIsFileSpecW PathFindFileNameW PathRemoveBackslashW PathIsRootW PathFileExistsW PathAddBackslashW PathIsUNCW PathMakePrettyW PathStripToRootW PathGetCharTypeW PathIsRelativeW

msvcp110

??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z ?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z ?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z ?_Add_vtordisp1@?$basic_istream@DU?$char_traits@D@std@@@std@@UAEXXZ _Mbrtowc ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z ?_Swap_all@_Container_base0@std@@QAEXAAU12@@Z ?is@?$ctype@_W@std@@QBE_NF_W@Z ?widen@?$ctype@_W@std@@QBE_WD@Z ?narrow@?$ctype@_W@std@@QBED_WD@Z ?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z ?exceptions@ios_base@std@@QAEXH@Z ?getloc@ios_base@std@@QBE?AVlocale@2@XZ ?clear@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z ?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBE_WD@Z ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@G@Z ?imbue@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAE?AVlocale@2@ABV32@@Z ?id@?$ctype@_W@std@@2V0locale@2@A ?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z ?id@?$numpunct@D@std@@2V0locale@2@A ??0_Locinfo@std@@QAE@PBD@Z ??1_Locinfo@std@@QAE@XZ ?_Getcvt@_Locinfo@std@@QBE?AU_Cvtvec@@XZ ?_Getlconv@_Locinfo@std@@QBEPBUlconv@@XZ ?_Getfalse@_Locinfo@std@@QBEPBDXZ ?_Gettrue@_Locinfo@std@@QBEPBDXZ ??Bid@locale@std@@QAEIXZ ?_Incref@facet@locale@std@@UAEXXZ ?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ ??0facet@locale@std@@IAE@I@Z ?_Winerror_map@std@@YAPBDH@Z ?_Syserror_map@std@@YAPBDH@Z ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?_Xbad_alloc@std@@YAXXZ ?_Xout_of_range@std@@YAXPBD@Z ?_Xlength_error@std@@YAXPBD@Z ?uncaught_exception@std@@YA_NXZ ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z ?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z ?_Orphan_all@_Container_base0@std@@QAEXXZ ??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@ ?id@?$numpunct@_W@std@@2V0locale@2@A ?_BADOFF@std@@3_JB ??1_Lockit@std@@QAE@XZ ??0_Lockit@std@@QAE@H@Z ?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ ?_Init@locale@std@@CAPAV_Locimp@12@_N@Z ?classic@locale@std@@SAABV12@XZ ??_7facet@locale@std@@6B@ ??1facet@locale@std@@MAE@XZ ??_7?$basic_ostream@_WU?$char_traits@_W@std@@@std@@6B@ ??_7_Facet_base@std@@6B@ ?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ ??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ ??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z ??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ ?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ ?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z ?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ ?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD0@Z ?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ ?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z ?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ ?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ ?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ ?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ ?_Add_vtordisp2@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAEXXZ ??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ ?_Add_vtordisp2@?$basic_ostream@DU?$char_traits@D@std@@@std@@UAEXXZ ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z ?_Add_vtordisp1@?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAEXXZ ??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ ?_Add_vtordisp1@?$basic_ios@DU?$char_traits@D@std@@@std@@UAEXXZ ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ ?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z ?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ ?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z ?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z ?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z ?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ ?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ ?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ ?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ ??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ

version

GetFileVersionInfoW GetFileVersionInfoSizeW VerQueryValueW

ws2_32

WSACleanup WSAStartup

msvcr110

__clean_type_info_names_internal _except_handler4_common _initterm_e _initterm _malloc_crt _amsg_exit __CppXcptFilter _vsnprintf_s ??1type_info@@UAE@XZ __crtTerminateProcess __crtUnhandledException _crt_debugger_hook _onexit __dllonexit _calloc_crt _unlock _lock ?terminate@@YAXXZ _beginthreadex wcschr wcsncat_s _waccess_s _wfullpath _wgetcwd sscanf_s _snprintf_s strncpy_s strncmp realloc wcslen memset memcmp strcmp strcpy __CxxFrameHandler3 _CxxThrowException strlen memcpy ftell fwrite ferror fprintf fread ??3@YAXPAX@Z wcsncpy_s ?what@exception@std@@UBEPBDXZ ??1exception@std@@UAE@XZ ??0exception@std@@QAE@ABQBD@Z ??0exception@std@@QAE@ABQBDH@Z ??0exception@std@@QAE@ABV01@@Z memmove free __iob_func setvbuf ??_V@YAXPAX@Z strcpy_s _purecall _open_osfhandle ??2@YAPAXI@Z _fdopen ??1bad_cast@std@@UAE@XZ ??0bad_cast@std@@QAE@PBD@Z ??0bad_cast@std@@QAE@ABV01@@Z ??8type_info@@QBE_NABV0@@Z _vsnwprintf_s ??0exception@std@@QAE@XZ swprintf_s _wsplitpath_s _wstat64i32 _snwprintf_s rand srand _time64 calloc _wcsicmp malloc wcscpy_s _wcsnicmp printf memchr atoi strstr sprintf_s _wfopen_s fwprintf fclose _stricmp _localtime64_s strftime toupper _gmtime64 fopen tolower asctime_s _close fputc sprintf strerror _errno

psapi

GetModuleBaseNameW EnumProcessModules

Name

.text

Size

1.7MB

Virtual Size

1.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

254KB

Virtual Size

253KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

129KB

Virtual Size

145KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

2B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

382KB

Virtual Size

382KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

207KB

Virtual Size

207KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

DE5/resources/libraries/ARKCmdCaps.dll

IMPHASH 752e2505af20869b900629fad87d1842
SHA256 4a71e4b876b2166a8c7567e5b3baee43b9ff8e4738b7d5d9c9bdca19ec42ae81
MD5 c9f141c24d03a9f4edbee91bca5fa535
SHA1 8c8268d4b11a64ff0e56cfa663e6ac7bcde3dd68
SHA512 cc64bbe40632a42af6803cd4bd61c51e0c1ad7120a69a43de3486fd67480cd113383570fa2af6f687c78a44bf02eacd6419205b0ff9122d1fae1d76377c72569
SSDEEP 6144:zugQxLskkdIN/mF8eGc5JlgTixO+SnttFMtGiahI9ycDSnI8MabdwExe8uX:zugQxLskoINI8eGmJ2ixO+6FMtWSyfI7
TLSH
T10974AE43B5A39031D88911B061685FA26DFDFC312BA684D7CFD81899CE349D2E72E35B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

43:0e:72:c3:26:bc:2e:ef:61:8e:af:4a:ba:48:4d:43:c2:a1:1a:78

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Chains

Feb 19, 2014

CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Serial Number

11:c9:54:ae:24:12:01:1c:f5:4a:7c:3c:b1:8d:75:1e

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 19, 2013 - Feb 20, 2014

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

1

Major OS version

5

Entry point

254893

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\1\releases\build\ARKCmdCaps\vc10\Release\ARKCmdCaps.pdb

ole32

CoTaskMemFree

advapi32

FreeSid SetNamedSecurityInfoW AllocateAndInitializeSid SetEntriesInAclW GetNamedSecurityInfoW

shlwapi

PathRemoveBackslashW PathFileExistsW PathAppendW PathStripPathW

shell32

SHCreateDirectoryExW SHGetFolderPathW SHGetFolderLocation SHGetPathFromIDListW

kernel32

EncodePointer DecodePointer WideCharToMultiByte MultiByteToWideChar CreateFileW FlushFileBuffers GetFileAttributesW CloseHandle GetLastError LocalFree lstrlenW CreateFileA IsDebuggerPresent DeleteFileW GetDiskFreeSpaceA GetDiskFreeSpaceW GetFileAttributesA GetFileSize GetFullPathNameA GetFullPathNameW LockFile LockFileEx ReadFile SetEndOfFile SetFilePointer UnlockFile WriteFile GetTempPathW QueryPerformanceCounter InitializeCriticalSection EnterCriticalSection LeaveCriticalSection DeleteCriticalSection Sleep InterlockedIncrement GetCurrentProcessId GetCurrentThreadId GetSystemTime GetSystemTimeAsFileTime GetTickCount GetVersionExA FreeLibrary GetProcAddress FormatMessageA LoadLibraryA LoadLibraryW GetTempPathA DisableThreadLibraryCalls IsProcessorFeaturePresent DeleteFileA AreFileApisANSI

arkengine

?GetUnistallDBQueryString@ARKCommand@@UAE_NAAV?$list@UUninstallDBQuery@@V?$allocator@UUninstallDBQuery@@@std@@@std@@@Z ?GetDBQueryString@ARKCommand@@UAE_NAAV?$list@UUninstallDBQuery@@V?$allocator@UUninstallDBQuery@@@std@@@std@@@Z ?GetUnistallDBQueryString@ARKCommand@@UAE_NAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z ??1ARKCommand@@UAE@XZ ??0ARKCommand@@QAE@AAVLogAppender@@@Z ?SetInstallSequenceNumber@ARKCommand@@UAEXI@Z ?GetInstallSequenceNumber@ARKCommand@@UBEIXZ ?GetTargetFileName@ARKCommand@@UBE_NAAVFileSystemPath@@@Z ?GetLogger@ARKCommand@@UBEAAVLogAppender@@XZ

msvcp110

?_Winerror_map@std@@YAPBDH@Z ?_Xlength_error@std@@YAXPBD@Z ?_Xout_of_range@std@@YAXPBD@Z ?_Xbad_alloc@std@@YAXXZ ?_Syserror_map@std@@YAPBDH@Z

msvcr110

__clean_type_info_names_internal _crt_debugger_hook __crtUnhandledException __crtTerminateProcess strstr ?terminate@@YAXXZ memmove _purecall ??3@YAXPAX@Z ??2@YAPAXI@Z _time64 memcpy strcmp strlen _CxxThrowException __CxxFrameHandler3 atoi strcpy free malloc _initterm_e memset wcscpy_s wcslen realloc memcmp strncmp _localtime64_s _lock _unlock _calloc_crt __dllonexit _onexit ??1type_info@@UAE@XZ __CppXcptFilter _amsg_exit _malloc_crt _initterm _except_handler4_common

DE5/resources/libraries/ARKCmdDefrag.dll

IMPHASH 21f037090b030313eec16b9519710302
SHA256 4bfdf2f464581e4d6b68af6f6b7e7e46cb809945ad7a1b17f5de0b0d79c6dd4d
MD5 a4fdd057b6ce1709d9244cb731daae16
SHA1 0d8926c599cbfb847e0d30081b04cf2f5a2da472
SHA512 406c93cf4487dc9d4f1833940dc200040d06e2a05a0cb9bc17b16838256c4fd71124e47c328c1ed0255488b923cba2f2dc8c24804645054a64459478afa7ce6f
SSDEEP 768:PgedSLOx/naf9/wBRxA2ddx0Zl5y87J2sj5kLF2HJ0jdS891eXUEJ+Lb4r5Lnx:9S/V2ddxKl5yA2UkLFCz8yXUEJ+LWV
TLSH
T1B473291233958174E9DA53B1B979971E8478FE410BE045C7EB9A5BAE0D34BC32E32B43
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

01:5c:ad:bc:22:2a:6d:27:65:98:11:ef:bd:75:10:f5:ba:7b:f0:ac

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Chains

Feb 19, 2014

CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Serial Number

11:c9:54:ae:24:12:01:1c:f5:4a:7c:3c:b1:8d:75:1e

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 19, 2013 - Feb 20, 2014

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

1

Major OS version

5

Entry point

38143

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\1\releases\build\ARKCmdDefrag\vc10\Release\ARKCmdDefrag.pdb

kernel32

GetTickCount GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter IsProcessorFeaturePresent IsDebuggerPresent DecodePointer GetVersionExW CloseHandle DeviceIoControl GetLastError CreateFileW MultiByteToWideChar WideCharToMultiByte GetCurrentThreadId EncodePointer DisableThreadLibraryCalls

ole32

CoUninitialize CoInitialize

arkengine

?GetInstallSequenceNumber@ARKCommand@@UBEIXZ ?GetTargetFileName@ARKCommand@@UBE_NAAVFileSystemPath@@@Z ?GetLogger@ARKCommand@@UBEAAVLogAppender@@XZ ??0ARKCommand@@QAE@AAVLogAppender@@@Z ??1ARKCommand@@UAE@XZ ?GetUnistallDBQueryString@ARKCommand@@UAE_NAAV?$list@UUninstallDBQuery@@V?$allocator@UUninstallDBQuery@@@std@@@std@@@Z ?GetUnistallDBQueryString@ARKCommand@@UAE_NAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z ?GetDBQueryString@ARKCommand@@UAE_NAAV?$list@UUninstallDBQuery@@V?$allocator@UUninstallDBQuery@@@std@@@std@@@Z ?SetInstallSequenceNumber@ARKCommand@@UAEXI@Z

msvcp110

?_Xbad_alloc@std@@YAXXZ ?_Xout_of_range@std@@YAXPBD@Z ?_Xlength_error@std@@YAXPBD@Z ?_BADOFF@std@@3_JB ?uncaught_exception@std@@YA_NXZ ?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z ?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ ??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ ??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z ??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ ?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ ?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z ?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@K@Z ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z ?_Add_vtordisp2@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAEXXZ ??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ ?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z ?_Add_vtordisp1@?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAEXXZ ??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ ?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z ?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ ?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z ?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z ?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z ?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ ?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ ?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ ?_Syserror_map@std@@YAPBDH@Z ??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ ?ends@std@@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@1@AAV21@@Z ?endl@std@@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@1@AAV21@@Z ??_7ios_base@std@@6B@ ??_7?$basic_ios@_WU?$char_traits@_W@std@@@std@@6B@ ?seekp@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z ?tellp@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE?AV?$fpos@H@2@XZ ?_Winerror_map@std@@YAPBDH@Z ?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ

msvcr110

??3@YAXPAX@Z ??2@YAPAXI@Z _CxxThrowException __CxxFrameHandler3 memcpy memset _wsplitpath _wstat64i32 ??_V@YAXPAX@Z _lock _unlock _calloc_crt __dllonexit _onexit ??1type_info@@UAE@XZ __CppXcptFilter _amsg_exit free _malloc_crt _initterm _initterm_e ?terminate@@YAXXZ _crt_debugger_hook __crtUnhandledException __crtTerminateProcess _except_handler4_common __clean_type_info_names_internal memmove _purecall

DE5/resources/libraries/ARKCmdFS.dll

IMPHASH 8122ea0fe0f3b2d0505c2d11e6c89cd1
SHA256 5ca0f58c6ae1928587e804cc5a8f5dc61bc082f4f8fca395bb47c09910839e13
MD5 beca11f625796d6a6c4093514c8b2530
SHA1 8147263c9f0b20ea10993a00081619a979f6f8a8
SHA512 4b52e21762432bbd60dccc003a7f0663f13fbeb04003cd0bd5815ef663fb510af5e93303aba4c8682f7fd6717b4e6b124e8f422c8c347fd101e396d3f10b1b13
SSDEEP 6144:jwn8VzVpz9Cu/auxkCwcevWYrs7f/4J3zWzhoJRnCxcg0JlCq11IR2rE:jHVJpRC1CgWnf/O3zWzWJRnWu8R2rE
TLSH
T123943A20F7978236ECDF13B0797B7B8940296E945B3909DBD3885E5E2970AC35A32713
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

02:3e:8c:32:8b:af:55:45:1c:1d:bc:92:c5:fd:ab:01:c5:d2:96:22

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Chains

Feb 19, 2014

CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Serial Number

11:c9:54:ae:24:12:01:1c:f5:4a:7c:3c:b1:8d:75:1e

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 19, 2013 - Feb 20, 2014

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

1

Major OS version

5

Entry point

289685

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\1\releases\build\ARKCmdFS\vc10\Release\ARKCmdFS.pdb

ole32

CoTaskMemFree CoInitialize CoUninitialize CoCreateInstance

advapi32

GetServiceKeyNameW FreeSid OpenProcessToken CreateRestrictedToken CreateProcessAsUserW LookupPrivilegeValueW AdjustTokenPrivileges CreateWellKnownSid SetNamedSecurityInfoW GetNamedSecurityInfoW RegCreateKeyExW RegQueryValueExW RegQueryInfoKeyW InitializeSecurityDescriptor RegDeleteKeyW SetSecurityDescriptorDacl RegGetKeySecurity RegDeleteValueW SetEntriesInAclW RegEnumValueW RegSetKeySecurity RegOpenKeyExW RegEnumKeyExW RegCloseKey RegSetValueExW GetSecurityDescriptorDacl AllocateAndInitializeSid CreateServiceW CloseServiceHandle DeleteService OpenSCManagerW QueryServiceConfigW OpenServiceW QueryServiceConfig2W ChangeServiceConfig2W StartServiceW ChangeServiceConfigW QueryServiceStatusEx GetServiceDisplayNameW ControlService

shlwapi

PathIsUNCW PathRemoveFileSpecW PathUnmakeSystemFolderW PathMakeSystemFolderW PathIsRelativeW PathAppendW PathMakePrettyW PathCombineW PathIsDirectoryW PathStripPathW PathRemoveBackslashW PathRenameExtensionW PathIsRootW PathFileExistsW PathAddBackslashW PathFindFileNameW PathFindExtensionW PathStripToRootW

shell32

SHSetLocalizedName SHChangeNotify ord75 SHCreateDirectoryExW ord709 SHGetFolderPathW SHGetPathFromIDListW SHGetFolderLocation

mscms

InstallColorProfileW UninstallColorProfileW

psapi

EnumProcessModules EnumProcesses GetModuleFileNameExW

kernel32

DecodePointer IsDebuggerPresent IsProcessorFeaturePresent RaiseException GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime LoadLibraryExA QueryPerformanceCounter EncodePointer LCMapStringW LoadLibraryA GetStringTypeExW GetUserDefaultLCID FreeLibrary InterlockedExchange InterlockedCompareExchange GetModuleHandleW lstrcatW MoveFileW lstrcmpiW lstrlenW GetLastError CreateProcessW GetCurrentProcess WaitForSingleObject OpenProcess GetExitCodeProcess TerminateProcess LocalAlloc CloseHandle LocalFree Sleep WideCharToMultiByte CopyFileW HeapAlloc HeapFree GetProcessHeap LoadLibraryW GetProcAddress GetTickCount SystemTimeToFileTime SetFileTime CreateFileW GetSystemTime GetFileSize ReadFile SetDllDirectoryW GetModuleFileNameW MultiByteToWideChar FindFirstFileW MoveFileExW FormatMessageW GetFileAttributesW lstrcmpW GetTempPathW GetCurrentDirectoryW SetLastError FindClose SetCurrentDirectoryW RemoveDirectoryW FindNextFileW DeleteFileW SetFileAttributesW lstrcpyW CreateDirectoryW

user32

LoadStringW

gdi32

AddFontResourceW RemoveFontResourceW

oleaut32

VariantClear SysAllocString SysFreeString

arkengine

?SetInstallSequenceNumber@ARKCommand@@UAEXI@Z ?GetUnistallDBQueryString@ARKCommand@@UAE_NAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z ?GetDBQueryString@ARKCommand@@UAE_NAAV?$list@UUninstallDBQuery@@V?$allocator@UUninstallDBQuery@@@std@@@std@@@Z ?Perform@ARKCommand@@QAE_NXZ ?GetUnistallDBQueryString@ARKCommand@@UAE_NAAV?$list@UUninstallDBQuery@@V?$allocator@UUninstallDBQuery@@@std@@@std@@@Z ??1ARKCommand@@UAE@XZ ??0ARKCommand@@QAE@AAVLogAppender@@@Z ?GetLogger@ARKCommand@@UBEAAVLogAppender@@XZ ?GetTargetFileName@ARKCommand@@UBE_NAAVFileSystemPath@@@Z ?GetInstallSequenceNumber@ARKCommand@@UBEIXZ

msvcp110

??0_Lockit@std@@QAE@H@Z ??Bid@locale@std@@QAEIXZ ?always_noconv@codecvt_base@std@@QBE_NXZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ ?_Add_vtordisp1@?$basic_ios@DU?$char_traits@D@std@@@std@@UAEXXZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ ?_Add_vtordisp2@?$basic_ostream@DU?$char_traits@D@std@@@std@@UAEXXZ ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ ?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z ?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z ?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ ?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ ?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ ?_Winerror_map@std@@YAPBDH@Z ?_Syserror_map@std@@YAPBDH@Z ?_Xbad_alloc@std@@YAXXZ ?_Xout_of_range@std@@YAXPBD@Z ?_Xlength_error@std@@YAXPBD@Z ?_Orphan_all@_Container_base0@std@@QAEXXZ ??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@ ?_BADOFF@std@@3_JB ??1_Lockit@std@@QAE@XZ ?uncaught_exception@std@@YA_NXZ ?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ ?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z ?id@?$codecvt@DDH@std@@2V0locale@2@A ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z ?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ

msvcr110

memcpy __CxxFrameHandler3 memset _CxxThrowException __clean_type_info_names_internal _except_handler4_common _initterm_e _initterm _malloc_crt _amsg_exit __CppXcptFilter __crtTerminateProcess ??8type_info@@QBE_NABV0@@Z __crtUnhandledException _crt_debugger_hook ?terminate@@YAXXZ ??1type_info@@UAE@XZ _onexit __dllonexit _calloc_crt _unlock _lock memmove _wtoi _purecall ??3@YAXPAX@Z ??2@YAPAXI@Z ??_V@YAXPAX@Z free malloc strcat_s wcstoul toupper wcscpy_s sprintf_s ?what@exception@std@@UBEPBDXZ ??1exception@std@@UAE@XZ ??0exception@std@@QAE@ABQBD@Z ??0exception@std@@QAE@ABV01@@Z _vsnwprintf_s fputc ??1bad_cast@std@@UAE@XZ ??0bad_cast@std@@QAE@PBD@Z ??0bad_cast@std@@QAE@ABV01@@Z _unlock_file ungetc fgetpos _fseeki64 fflush fgetc fsetpos setvbuf _lock_file memcpy_s fwrite fclose memchr swprintf_s _wstat64i32 _snwprintf_s rand srand _time64 vswprintf_s wprintf

DE5/resources/libraries/ARKEngine.dll

IMPHASH b37f8be8f74e22e52576e3d3be4624a4
SHA256 5b0bfe799d19facd17f82b44604b6fe488990efc8a0cf7518bb10b4249595b4e
MD5 7423ee695b15504e1d93f23dfab5bfff
SHA1 e14a9ae7c7a006bb9d144a9e236b3d609033b4b9
SHA512 35c442070a4026383ecd140fc6146907df790d5302ad741ce67ec190fe1dfa1ea5f603697e6178e5787c9fec6a8b84b1b25014c566a336ed2c83aeb5d54e8fc2
SSDEEP 12288:ZUibDzvBThcwIYUcf4pcUWL4/485oSIgUUdwoWTUrtlZ:ZUSBWwIofMcUWEA85oSIgUsWTslZ
TLSH
T15AB49E11B292C236D8EE02B066EC6B4D59BDFE30073698D7C7C81DA91D709D19B3639B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

16:eb:6c:b6:8e:e9:75:f8:48:22:aa:fc:b9:3b:d2:2d:ef:f0:d5:45

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Chains

Feb 19, 2014

CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Serial Number

11:c9:54:ae:24:12:01:1c:f5:4a:7c:3c:b1:8d:75:1e

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 19, 2013 - Feb 20, 2014

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

1

Major OS version

5

Entry point

392259

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\1\releases\build\ARKEngine\vc10\Release\ARKEngine.pdb

kernel32

MultiByteToWideChar GetFileSize FindFirstFileW CopyFileW FormatMessageW GetFileAttributesW ReadFile GetModuleFileNameW CreateFileW lstrcmpW lstrlenW GetTempPathW GetCurrentDirectoryW FindClose RemoveDirectoryW FindNextFileW DeleteFileW SetFileAttributesW lstrcpyW CreateProcessW WaitForSingleObject GetModuleHandleW GetExitCodeProcess GetProcAddress SetFilePointer WriteFile DosDateTimeToFileTime CreateDirectoryW SetFileTime GetFileTime LocalFileTimeToFileTime CreateFileA DeleteFileA FlushFileBuffers GetDiskFreeSpaceA GetDiskFreeSpaceW GetFileAttributesA GetFullPathNameA GetFullPathNameW LockFile LockFileEx SetEndOfFile UnlockFile QueryPerformanceCounter InitializeCriticalSection EnterCriticalSection LeaveCriticalSection DeleteCriticalSection Sleep InterlockedIncrement GetCurrentProcessId GetCurrentThreadId GetSystemTime GetSystemTimeAsFileTime GetTickCount GetVersionExA FreeLibrary FormatMessageA LoadLibraryA LoadLibraryW GetTempPathA AreFileApisANSI WideCharToMultiByte lstrcmpiW LocalFree CloseHandle LocalAlloc GetCurrentProcess SetLastError lstrcatW GetLastError IsProcessorFeaturePresent IsDebuggerPresent DecodePointer EncodePointer

advapi32

SetEntriesInAclW GetNamedSecurityInfoW SetNamedSecurityInfoW CreateWellKnownSid

shell32

SHGetFolderLocation SHGetPathFromIDListW SHCreateDirectoryExW SHGetFolderPathW

ole32

CoTaskMemFree

msvcp110

?_Winerror_map@std@@YAPBDH@Z ?_Syserror_map@std@@YAPBDH@Z ?_Xbad_alloc@std@@YAXXZ ?_Xout_of_range@std@@YAXPBD@Z ?_Xlength_error@std@@YAXPBD@Z ?_Orphan_all@_Container_base0@std@@QAEXXZ ?_BADOFF@std@@3_JB ?uncaught_exception@std@@YA_NXZ ?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z ?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ ??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ ??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z ??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ ?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ ?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z ??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ ?_Add_vtordisp1@?$basic_istream@_WU?$char_traits@_W@std@@@std@@UAEXXZ ?_Add_vtordisp1@?$basic_istream@DU?$char_traits@D@std@@@std@@UAEXXZ ?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@K@Z ?_Add_vtordisp2@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAEXXZ ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z ?_Add_vtordisp2@?$basic_ostream@DU?$char_traits@D@std@@@std@@UAEXXZ ?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z ??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ ?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z ?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ ?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z ?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z ?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z ?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ ?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ ?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ ?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ ??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ

msvcr110

realloc _CxxThrowException __clean_type_info_names_internal _except_handler4_common memmove _wtoi _purecall ??3@YAXPAX@Z ??2@YAPAXI@Z isalpha ??_V@YAXPAX@Z isdigit _stricmp memchr atoi _wtoi64 strstr _vsnwprintf_s swprintf_s sprintf_s ?what@exception@std@@UBEPBDXZ ??1exception@std@@UAE@XZ ??0exception@std@@QAE@ABQBD@Z ??0exception@std@@QAE@ABV01@@Z _wsplitpath_s _wstat64i32 _snwprintf_s free malloc fopen fread ferror fwrite ftell fseek fclose _wfopen_s wcsrchr wcscat_s wcscpy_s _wcsdup __CxxFrameHandler3 memcmp memcpy memset strcmp strncmp _localtime64_s _wgetcwd calloc _wfullpath _waccess_s wcsncpy_s wcsncat_s strncpy_s _lock _unlock _calloc_crt __dllonexit _onexit ??1type_info@@UAE@XZ ?terminate@@YAXXZ _vsnprintf_s _crt_debugger_hook __crtUnhandledException __crtTerminateProcess __CppXcptFilter _amsg_exit _malloc_crt _initterm _initterm_e

shlwapi

PathIsRelativeW PathFindFileNameW PathIsSameRootW PathFileExistsW PathIsRootW PathRemoveBackslashW PathStripPathW PathStripToRootW PathMakePrettyW PathIsUNCW PathAddBackslashW

DE5/resources/libraries/AdobePIM.dll

IMPHASH d6d600f3ff306b01fa866de68d697719
SHA256 9a42c1cd46414610d2c2989afe2fb8c5a3cd051995dba84ccefa96433121be75
MD5 db9c6ebfed9002eb71872d98195e7cec
SHA1 54d73a7fe1a47a1c7ac44c37b19d1a0fb364d13c
SHA512 5e0ba84faae83b97de01797750b41e96b491d53eac4bb6e24637d1c61c2c1fcefb27c3d0d88e89806bd0d30f6f5f8d5f740a5abc63ddb91f6d46b71e532033e9
SSDEEP 24576:VyfQPbtnR5UVMxwoPzDG2Mtj7uEgIwThj:VyfQPbb51Mtj7QfThj
TLSH
T19205AD61E681C131F4EB11B2A2B95B7A0C3EA915673045C7F3C46D98AE305E2B77E31B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

cb:d4:7a:5c:a6:91:13:0b:40:4d:5a:ad:a9:eb:c4:87:17:42:10:c2

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Adobe Systems Incorporated,OU=Information Systems+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Chains

Mar 27, 2012

CN=Adobe Systems Incorporated,OU=Information Systems+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=Adobe Systems Incorporated,OU=Information Systems+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Serial Number

15:e5:ac:0a:48:70:63:71:8e:39:da:52:30:1a:04:88

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 15, 2010 - Dec 14, 2012

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

1

Major OS version

5

Entry point

576614

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\oobe\3.0\c3p0\dev5\target\win\Release\resources\AdobePIM.pdb

msi

ord74 ord147 ord145

kernel32

ReleaseMutex CloseHandle GetCurrentProcessId LocalFree InterlockedIncrement InterlockedDecrement WideCharToMultiByte MultiByteToWideChar GetDateFormatW SetFilePointer CreateDirectoryW WriteFile GetTimeFormatW CreateFileW GetTempPathW GetLocalTime FreeLibrary LoadLibraryW GetProcAddress FindFirstFileW CreateProcessW MoveFileExW SetEvent Sleep CopyFileW GetVersionExW GetModuleFileNameW FindClose ResetEvent CreateEventW RemoveDirectoryW FindNextFileW GetDiskFreeSpaceExW DeleteFileW SetFileAttributesW GetFileSize ReadFile FlushFileBuffers OpenSemaphoreW lstrlenA DosDateTimeToFileTime CreateFileA SetFileTime GetFileAttributesA GetFileTime LocalFileTimeToFileTime GetFullPathNameW GetFullPathNameA SetEndOfFile QueryPerformanceCounter UnlockFile LockFile GetTickCount GetSystemTimeAsFileTime FormatMessageA InitializeCriticalSection LeaveCriticalSection GetFileAttributesW LockFileEx EnterCriticalSection GetDiskFreeSpaceW LoadLibraryA GetDiskFreeSpaceA DeleteCriticalSection GetCurrentThreadId GetTempPathA GetSystemTime AreFileApisANSI DeleteFileA GetACP GetCurrentProcess lstrlenW lstrcpyW CompareStringW GetProcessHeap LocalAlloc CreateSemaphoreW GetLastError ReleaseSemaphore IsValidCodePage WaitForSingleObject CreateMutexW SetEnvironmentVariableA TlsAlloc TlsGetValue WriteConsoleW SetStdHandle GetStringTypeW LCMapStringW HeapSize GetEnvironmentStringsW FreeEnvironmentStringsW GetModuleFileNameA GetTimeZoneInformation GetStartupInfoW GetOEMCP GetCPInfo HeapDestroy HeapCreate ExitProcess GetModuleHandleW GetStdHandle IsProcessorFeaturePresent IsDebuggerPresent GetFileType SetHandleCount GetConsoleMode GetConsoleCP InitializeCriticalSectionAndSpinCount SetLastError TlsFree DecodePointer EncodePointer HeapAlloc HeapFree MoveFileW MoveFileA HeapReAlloc GetCommandLineA RaiseException RtlUnwind TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter TlsSetValue

user32

wsprintfW

advapi32

FreeSid GetNamedSecurityInfoW SetNamedSecurityInfoW SetEntriesInAclW AllocateAndInitializeSid SetSecurityDescriptorDacl InitializeSecurityDescriptor

shell32

SHGetSpecialFolderPathW SHCreateDirectoryExW SHGetFolderLocation SHGetPathFromIDListW SHGetFolderPathW

ole32

StringFromGUID2 CoCreateGuid CLSIDFromProgID CLSIDFromString CoTaskMemFree CoCreateInstance OleRun

oleaut32

SysFreeString VariantInit VariantCopy VariantClear SysStringLen SysAllocString GetErrorInfo

shlwapi

PathIsDirectoryW PathRemoveFileSpecW PathStripPathW PathAppendW PathRemoveBackslashW PathFileExistsW

DE5/resources/libraries/Adobe_Helperx32.exe

IMPHASH 37a5b396eaf7dce14108843d756d9939
SHA256 789caa3d22e1710dca208b92f1edd225c85c833b15d7a0b243271978bf583ac7
MD5 27350561257a62b239c327ff7ea79a0a
SHA1 9f60ef3659ee31ac805bf0b98b122930c477210b
SHA512 c20fea514ed4aa7ddd114ac6b77d184637610485fdc9cf93a4e9940d77ceff59409aa91a2472b98c89905eb3f356257b83adf5760cb93906f16a3d075be46127
SSDEEP 49152:BBFoot7YSrwwLTpZDt9EXD866Aeja7wSjEX8FYDxAr:Joot7frwwhBt9mD867Qa5jEX8FYc
TLSH
T1CD958D32F981D07EC5730331DA4CB368B2FDB6719A39128B66911E2D2AB1493953CB77
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

3d:62:4e:8d:7d:a3:8a:09:1b:96:7c:c5:d9:94:84:35:da:a8:c2:11

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Chains

Feb 19, 2014

CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Serial Number

11:c9:54:ae:24:12:01:1c:f5:4a:7c:3c:b1:8d:75:1e

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 19, 2013 - Feb 20, 2014

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

1

Major OS version

5

Entry point

1140097

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\1\releases\build\Adobe_Helperx64\bin\windows\Release\Adobe_Helperx64.pdb

kernel32

ResumeThread InterlockedIncrement lstrcmpA GlobalGetAtomNameW FileTimeToSystemTime EncodePointer DecodePointer GetSystemDirectoryW FreeResource LoadLibraryExW LoadLibraryA GlobalAddAtomW GlobalFindAtomW FlushFileBuffers GetFullPathNameW LockFile SetEndOfFile SetFilePointer UnlockFile WriteFile DuplicateHandle lstrcmpiW CompareStringW GetUserDefaultUILanguage GlobalFlags InterlockedExchange GetVersionExW FileTimeToLocalFileTime GetFileAttributesExW GetFileSizeEx GetFileTime GetWindowsDirectoryW VerSetConditionMask VerifyVersionInfoW GetTempFileNameW Sleep GetTickCount GetProfileIntW SearchPathW VirtualProtect FindResourceExW IsDebuggerPresent IsProcessorFeaturePresent GetSystemTimeAsFileTime HeapFree HeapAlloc GetCommandLineW RaiseException RtlUnwind CreateThread ExitThread HeapSize HeapQueryInformation ExitProcess GetModuleHandleExW GetSystemInfo VirtualAlloc VirtualQuery SetStdHandle GetFileType GetStdHandle GetConsoleCP GetConsoleMode GetStartupInfoW IsValidCodePage GetOEMCP GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess GetTimeZoneInformation GetProcessHeap QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetStringTypeW ReadConsoleW SetFilePointerEx OutputDebugStringW GetDateFormatW GetTimeFormatW LCMapStringW WriteConsoleW SetEnvironmentVariableA FormatMessageA GetModuleHandleA GetVersion OutputDebugStringA MulDiv GlobalSize FindResourceW SizeofResource LockResource LoadResource GetCurrentProcessId InterlockedDecrement LocalReAlloc GlobalFree GlobalUnlock GlobalHandle GlobalLock GlobalReAlloc GlobalAlloc TlsFree TlsSetValue TlsGetValue TlsAlloc DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection SetThreadPriority GetCurrentThreadId HeapReAlloc GetVolumeInformationW lstrcpyW SetCurrentDirectoryW FindClose GetCurrentDirectoryW lstrcmpW GetModuleFileNameW GetFileAttributesW FormatMessageW CopyFileW FindFirstFileW GetFileSize SetLastError GetLastError CreateFileW ReadFile WaitForSingleObject GetModuleHandleW LocalFree CloseHandle LocalAlloc GetCurrentProcess GetTempPathW MultiByteToWideChar GetACP WideCharToMultiByte GetProcAddress InitializeCriticalSectionAndSpinCount LoadLibraryW GlobalDeleteAtom FreeLibrary

advapi32

RegCloseKey RegCreateKeyExW RegDeleteKeyW RegOpenKeyExW RegDeleteValueW RegEnumKeyExW RegSetValueExW RegQueryValueExW CreateWellKnownSid SetEntriesInAclW GetNamedSecurityInfoW SetNamedSecurityInfoW

shell32

ShellExecuteW SHGetSpecialFolderLocation SHGetDesktopFolder DragQueryFileW DragFinish SHBrowseForFolderW SHAppBarMessage SHGetPathFromIDListW SHGetFileInfoW

ole32

IsAccelerator OleGetClipboard CoLockObjectExternal RegisterDragDrop RevokeDragDrop OleCreateMenuDescriptor OleTranslateAccelerator CoTaskMemAlloc OleLockRunning DoDragDrop OleDestroyMenuDescriptor CreateStreamOnHGlobal CoInitializeEx CoInitialize CoUninitialize CoCreateInstance ReleaseStgMedium OleDuplicateData CoTaskMemFree

oleaut32

SysAllocStringLen SysStringLen SystemTimeToVariantTime VariantTimeToSystemTime VariantClear SysFreeString VariantChangeType SysAllocString VarBstrFromDate VariantInit

msimg32

TransparentBlt AlphaBlend

shlwapi

PathRemoveFileSpecW PathStripPathW PathRemoveBackslashW PathFindFileNameW PathIsRelativeW PathFindExtensionW PathStripToRootW PathIsUNCW PathFileExistsW StrFormatKBSizeW

uxtheme

GetThemePartSize DrawThemeText DrawThemeParentBackground OpenThemeData CloseThemeData DrawThemeBackground GetThemeColor GetCurrentThemeName IsAppThemed IsThemeBackgroundPartiallyTransparent GetThemeSysColor GetWindowTheme

oleacc

LresultFromObject AccessibleObjectFromWindow CreateStdAccessibleObject

gdiplus

GdipDeleteGraphics GdipBitmapUnlockBits GdipBitmapLockBits GdipCreateBitmapFromScan0 GdipDrawImageI GdipCreateBitmapFromStream GdipGetImagePaletteSize GdipGetImagePalette GdipCreateBitmapFromHBITMAP GdipCreateFromHDC GdipSetInterpolationMode GdipGetImagePixelFormat GdipAlloc GdipFree GdiplusStartup GdiplusShutdown GdipCloneImage GdipDisposeImage GdipGetImageGraphicsContext GdipGetImageWidth GdipGetImageHeight GdipDrawImageRectI

imm32

ImmGetContext ImmGetOpenStatus ImmReleaseContext

winmm

PlaySoundW

user32

GetAsyncKeyState EnableScrollBar HideCaret InvertRect NotifyWinEvent CreatePopupMenu GetMenuDefaultItem MapVirtualKeyW LoadMenuW SetLayeredWindowAttributes EnumDisplayMonitors OpenClipboard CloseClipboard SetClipboardData EmptyClipboard DrawStateW DrawEdge DrawFrameControl SetWindowRgn UnionRect IsMenu UpdateLayeredWindow MonitorFromPoint BringWindowToTop LoadAcceleratorsW TranslateAcceleratorW InsertMenuItemW UnpackDDElParam ReuseDDElParam GetKeyNameTextW TrackMouseEvent GetComboBoxInfo IsZoomed GetSystemMenu PostThreadMessageW WaitMessage GetKeyboardLayout IsCharLowerW MapVirtualKeyExW ToUnicodeEx GetKeyboardState CreateAcceleratorTableW DestroyAcceleratorTable CopyAcceleratorTableW SetCursorPos SetRect SetParent LockWindowUpdate SetClassLongW GetDoubleClickTime CopyIcon SetMenuDefaultItem ModifyMenuW RegisterClipboardFormatW CharUpperBuffW FrameRect DrawMenuBar DefFrameProcW DefMDIChildProcW TranslateMDISysAccel IsClipboardFormatAvailable GetUpdateRect SubtractRect CreateMenu MapDialogRect DestroyCursor GetWindowRgn DrawIcon DrawTextExW DrawTextW RealChildWindowFromPoint GetDesktopWindow ClientToScreen DestroyIcon IsDialogMessageW SetWindowTextW CheckDlgButton MoveWindow ShowWindow GetMonitorInfoW MonitorFromWindow WinHelpW DeleteMenu SetScrollInfo LoadIconW MessageBeep GetTopWindow GetClassNameW GetClassLongW SetWindowLongW PtInRect EqualRect CopyRect MapWindowPoints ScreenToClient AdjustWindowRectEx GetWindowRect GetClientRect RemovePropW GetPropW SetPropW ShowScrollBar GetScrollRange SetScrollRange GetScrollPos SetScrollPos ScrollWindow RedrawWindow SetForegroundWindow GetForegroundWindow SetActiveWindow UpdateWindow TrackPopupMenu SetMenu GetMenu GetCapture SetFocus GetDlgCtrlID GetDlgItem EndDeferWindowPos DeferWindowPos BeginDeferWindowPos SetWindowPlacement GetWindowPlacement SetWindowPos DestroyWindow IsChild IsWindow CreateWindowExW GetClassInfoExW GetClassInfoW RegisterClassW CallWindowProcW DefWindowProcW PostMessageW GetMessageTime GetMessagePos RegisterWindowMessageW LoadBitmapW SetMenuItemInfoW GetMenuCheckMarkDimensions SetMenuItemBitmaps EnableMenuItem CheckMenuItem GetFocus GetWindowTextLengthW GetWindowTextW LoadCursorW GetSysColorBrush GetSysColor ReleaseDC GetDC GetSystemMetrics CallNextHookEx SetWindowsHookExW GetCursorPos ValidateRect GetKeyState GetActiveWindow IsWindowVisible PeekMessageW DispatchMessageW TranslateMessage GetMessageW RemoveMenu AppendMenuW InsertMenuW GetMenuItemCount GetMenuItemID GetSubMenu GetMenuState GetMenuStringW GetLastActivePopup GetWindowThreadProcessId GetParent GetWindowLongW MessageBoxW IsWindowEnabled EnableWindow SendMessageW UnhookWindowsHookEx SetCursor ShowOwnedPopups IntersectRect IsIconic PostQuitMessage SendDlgItemMessageA GetIconInfo DrawIconEx LoadImageW IsRectEmpty OffsetRect SetRectEmpty DrawFocusRect WindowFromPoint ReleaseCapture SetCapture GetNextDlgGroupItem GetNextDlgTabItem EndDialog CreateDialogIndirectParamW InvalidateRect KillTimer GetWindow SetTimer CopyImage SystemParametersInfoW InflateRect GetMenuItemInfoW DestroyMenu FillRect EndPaint BeginPaint GetWindowDC TabbedTextOutW GetScrollInfo GrayStringW CharUpperW

gdi32

OffsetWindowOrgEx ScaleViewportExtEx ScaleWindowExtEx CreateFontIndirectW GetTextExtentPoint32W CombineRgn CreateRectRgnIndirect PatBlt SetRectRgn DPtoLP CreatePalette GetNearestPaletteIndex GetPaletteEntries GetSystemPaletteEntries RealizePalette GetBkColor GetTextMetricsW CreateCompatibleBitmap CreateDIBitmap EnumFontFamiliesW OffsetViewportOrgEx SetWindowOrgEx SetWindowExtEx SetViewportOrgEx SetViewportExtEx ExtTextOutW TextOutW CreateDCW GetDeviceCaps CreateBitmap SetBkColor MoveToEx GetObjectW DeleteObject BitBlt CreateCompatibleDC CreateHatchBrush CreatePen CreatePatternBrush CreateRectRgn CreateSolidBrush DeleteDC Escape ExcludeClipRect GetClipBox GetObjectType GetPixel GetStockObject GetViewportExtEx GetWindowExtEx IntersectClipRect LineTo PtVisible RectVisible RestoreDC SaveDC SelectClipRgn ExtSelectClipRgn SelectObject SelectPalette SetBkMode SetMapMode SetLayout GetLayout SetPolyFillMode SetROP2 SetTextColor CopyMetaFileW GetTextFaceW GetTextCharsetInfo SetPixel StretchBlt GetViewportOrgEx LPtoDP CreateDIBSection SetDIBColorTable CreateEllipticRgn Ellipse GetTextColor CreatePolygonRgn Polygon Polyline Rectangle EnumFontFamiliesExW GetRgnBox OffsetRgn CreateRoundRectRgn RoundRect FrameRgn PtInRegion SetPixelV ExtFloodFill SetPaletteEntries FillRgn GetBoundsRect GetWindowOrgEx SetTextAlign

winspool.drv

ClosePrinter DocumentPropertiesW OpenPrinterW

DE5/resources/libraries/Adobe_Helperx64.exe

IMPHASH a198f1b9f1b22c7f3895f045bff16047
SHA256 40360fa6b51a1b37cf43c69c551d451fe6ca6df705b1d6947e77fd2b008e0df1
MD5 f946fe7c5d960366bcccbb47d3baf85a
SHA1 11479869fda504f7b2b112ee3278d5092cac0a7c
SHA512 67fd549f6df96f17eee69d533dc1b391b710064a65c528d3d403354e9462747363a5c50ec08c78e914c6567c310ab1ba8d065d92d8a99c1049edded47061061b
SSDEEP 49152:+FToLFFwf4fB/Kx8dNaXitvzZCanNqEBWuccsdKAJ5R4hejOcg7S/O:uY/t3sdKAbR40CcESm
TLSH
T14AC56BAB67E850EAD467C1B8C906C50FDBB2B4651931C39F80A507AE5F632734E9D323
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

2a:d9:1a:67:16:28:5d:f0:9f:7a:fb:ce:16:8b:96:9f:08:58:e7:25

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Chains

Feb 19, 2014

CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Serial Number

11:c9:54:ae:24:12:01:1c:f5:4a:7c:3c:b1:8d:75:1e

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 19, 2013 - Feb 20, 2014

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

0

Major OS version

6

Entry point

1515928

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\1\releases\build\Adobe_Helperx64\bin\windows_x64\Release\Adobe_Helperx64.pdb

kernel32

GetCurrentThreadId SetThreadPriority ResumeThread lstrcmpA GlobalGetAtomNameW FileTimeToSystemTime EncodePointer DecodePointer GetSystemDirectoryW FreeResource DeactivateActCtx GlobalDeleteAtom GlobalAddAtomW GlobalFindAtomW FlushFileBuffers GetFullPathNameW LockFile SetEndOfFile SetFilePointer UnlockFile WriteFile DuplicateHandle lstrcmpiW CompareStringW GetUserDefaultUILanguage GlobalFlags GetVersionExW FileTimeToLocalFileTime GetFileAttributesExW GetFileSizeEx GetFileTime GetWindowsDirectoryW VerSetConditionMask VerifyVersionInfoW GetTempFileNameW Sleep GetTickCount GetProfileIntW SearchPathW VirtualProtect FindResourceExW IsDebuggerPresent IsProcessorFeaturePresent GetSystemTimeAsFileTime HeapFree HeapAlloc GetCommandLineW RtlPcToFileHeader RaiseException RtlLookupFunctionEntry RtlUnwindEx CreateThread ExitThread HeapSize HeapQueryInformation ExitProcess GetSystemInfo VirtualAlloc VirtualQuery SetStdHandle GetFileType GetStdHandle GetConsoleCP GetConsoleMode GetStartupInfoW IsValidCodePage GetOEMCP GetCPInfo RtlCaptureContext RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess GetTimeZoneInformation GetProcessHeap QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetStringTypeW ReadConsoleW SetFilePointerEx OutputDebugStringW GetDateFormatW GetTimeFormatW LCMapStringW WriteConsoleW SetEnvironmentVariableA FormatMessageA ActivateActCtx CreateActCtxW GetModuleHandleExW OutputDebugStringA MulDiv GlobalSize FindResourceW SizeofResource LockResource LoadResource GetCurrentProcessId LocalReAlloc GlobalFree GlobalUnlock GlobalHandle GlobalLock GlobalReAlloc GlobalAlloc TlsFree TlsSetValue TlsGetValue TlsAlloc DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection QueryActCtxW HeapReAlloc FindActCtxSectionStringW GetVolumeInformationW lstrcpyW SetCurrentDirectoryW FindClose GetCurrentDirectoryW lstrcmpW GetModuleFileNameW GetFileAttributesW FormatMessageW CopyFileW FindFirstFileW GetFileSize SetLastError GetLastError CreateFileW ReadFile WaitForSingleObject GetModuleHandleW LocalFree CloseHandle LocalAlloc GetCurrentProcess GetTempPathW MultiByteToWideChar GetACP WideCharToMultiByte GetProcAddress InitializeCriticalSectionAndSpinCount LoadLibraryW LoadLibraryExW FreeLibrary

advapi32

RegCloseKey RegCreateKeyExW RegDeleteKeyW RegOpenKeyExW RegDeleteValueW RegEnumKeyExW RegSetValueExW RegQueryValueExW CreateWellKnownSid SetEntriesInAclW GetNamedSecurityInfoW SetNamedSecurityInfoW

shell32

ShellExecuteW SHGetSpecialFolderLocation SHGetDesktopFolder DragQueryFileW DragFinish SHBrowseForFolderW SHAppBarMessage SHGetPathFromIDListW SHGetFileInfoW

ole32

IsAccelerator OleGetClipboard CoLockObjectExternal RegisterDragDrop RevokeDragDrop OleCreateMenuDescriptor OleTranslateAccelerator CoTaskMemAlloc OleLockRunning DoDragDrop OleDestroyMenuDescriptor CreateStreamOnHGlobal CoInitializeEx CoInitialize CoUninitialize CoCreateInstance ReleaseStgMedium OleDuplicateData CoTaskMemFree

oleaut32

SysAllocStringLen SysStringLen SystemTimeToVariantTime VariantTimeToSystemTime VariantClear SysFreeString VariantChangeType SysAllocString VarBstrFromDate VariantInit

msimg32

TransparentBlt AlphaBlend

shlwapi

PathRemoveFileSpecW PathStripPathW PathRemoveBackslashW PathFindFileNameW PathIsRelativeW PathFindExtensionW PathStripToRootW PathIsUNCW PathFileExistsW StrFormatKBSizeW

uxtheme

GetThemePartSize DrawThemeText DrawThemeParentBackground OpenThemeData CloseThemeData DrawThemeBackground GetThemeColor GetCurrentThemeName IsAppThemed IsThemeBackgroundPartiallyTransparent GetThemeSysColor GetWindowTheme

oleacc

LresultFromObject AccessibleObjectFromWindow CreateStdAccessibleObject

gdiplus

GdipDeleteGraphics GdipBitmapUnlockBits GdipBitmapLockBits GdipCreateBitmapFromScan0 GdipDrawImageI GdipCreateBitmapFromStream GdipGetImagePaletteSize GdipGetImagePalette GdipCreateBitmapFromHBITMAP GdipCreateFromHDC GdipSetInterpolationMode GdipGetImagePixelFormat GdipAlloc GdipFree GdiplusStartup GdiplusShutdown GdipCloneImage GdipDisposeImage GdipGetImageGraphicsContext GdipGetImageWidth GdipGetImageHeight GdipDrawImageRectI

imm32

ImmGetContext ImmGetOpenStatus ImmReleaseContext

winmm

PlaySoundW

user32

GetIconInfo MessageBeep GetAsyncKeyState EnableScrollBar HideCaret InvertRect NotifyWinEvent CreatePopupMenu GetMenuDefaultItem MapVirtualKeyW LoadMenuW SetLayeredWindowAttributes EnumDisplayMonitors OpenClipboard CloseClipboard SetClipboardData EmptyClipboard DrawStateW DrawEdge DrawFrameControl SetWindowRgn UnionRect IsMenu UpdateLayeredWindow MonitorFromPoint BringWindowToTop LoadAcceleratorsW TranslateAcceleratorW InsertMenuItemW UnpackDDElParam ReuseDDElParam GetKeyNameTextW TrackMouseEvent GetComboBoxInfo IsZoomed GetSystemMenu PostThreadMessageW WaitMessage GetKeyboardLayout IsCharLowerW MapVirtualKeyExW ToUnicodeEx GetKeyboardState CreateAcceleratorTableW DestroyAcceleratorTable CopyAcceleratorTableW SetCursorPos SetRect SetParent LockWindowUpdate SetClassLongPtrW GetDoubleClickTime CopyIcon SetMenuDefaultItem ModifyMenuW RegisterClipboardFormatW CharUpperBuffW FrameRect DrawMenuBar DefFrameProcW DefMDIChildProcW TranslateMDISysAccel IsClipboardFormatAvailable GetUpdateRect SubtractRect CreateMenu MapDialogRect DestroyCursor GetWindowRgn DrawIcon RealChildWindowFromPoint GetDesktopWindow ClientToScreen CharUpperW DestroyIcon SetWindowTextW CheckDlgButton MoveWindow ShowWindow GetMonitorInfoW MonitorFromWindow WinHelpW GetScrollInfo ShowOwnedPopups LoadIconW GetWindow DrawIconEx GetClassNameW GetClassLongPtrW SetWindowLongPtrW GetWindowLongPtrW SetWindowLongW PtInRect EqualRect CopyRect MapWindowPoints ScreenToClient AdjustWindowRectEx GetWindowRect GetClientRect RemovePropW GetPropW SetPropW ShowScrollBar GetScrollRange SetScrollRange GetScrollPos SetScrollPos ScrollWindow RedrawWindow SetForegroundWindow GetForegroundWindow SetActiveWindow UpdateWindow TrackPopupMenu SetMenu GetMenu GetCapture SetFocus GetDlgCtrlID GetDlgItem EndDeferWindowPos DeferWindowPos BeginDeferWindowPos SetWindowPlacement GetWindowPlacement SetWindowPos DestroyWindow IsChild IsWindow CreateWindowExW GetClassInfoExW GetClassInfoW RegisterClassW CallWindowProcW DefWindowProcW PostMessageW GetMessageTime GetMessagePos RegisterWindowMessageW LoadBitmapW SetMenuItemInfoW GetMenuCheckMarkDimensions SetMenuItemBitmaps EnableMenuItem CheckMenuItem GetFocus GetWindowTextLengthW GetWindowTextW LoadCursorW GetSysColorBrush GetSysColor ReleaseDC GetDC GetSystemMetrics CallNextHookEx SetWindowsHookExW GetCursorPos ValidateRect GetKeyState GetActiveWindow IsWindowVisible PeekMessageW DispatchMessageW TranslateMessage GetMessageW RemoveMenu AppendMenuW InsertMenuW GetMenuItemCount GetMenuItemID GetSubMenu GetMenuState GetMenuStringW GetLastActivePopup GetWindowThreadProcessId GetParent GetWindowLongW MessageBoxW IsWindowEnabled EnableWindow SendMessageW UnhookWindowsHookEx IntersectRect IsIconic PostQuitMessage SendDlgItemMessageA CopyImage SystemParametersInfoW LoadImageW IsRectEmpty OffsetRect SetRectEmpty DrawFocusRect WindowFromPoint ReleaseCapture SetCapture GetNextDlgGroupItem GetNextDlgTabItem EndDialog CreateDialogIndirectParamW InvalidateRect KillTimer SetTimer DeleteMenu GetTopWindow SetCursor InflateRect GetMenuItemInfoW DestroyMenu FillRect EndPaint BeginPaint GetWindowDC TabbedTextOutW GrayStringW DrawTextExW SetScrollInfo DrawTextW IsDialogMessageW

gdi32

OffsetWindowOrgEx ScaleViewportExtEx ScaleWindowExtEx CreateFontIndirectW GetTextExtentPoint32W CombineRgn CreateRectRgnIndirect PatBlt SetRectRgn DPtoLP CreatePalette GetNearestPaletteIndex GetPaletteEntries GetSystemPaletteEntries RealizePalette GetBkColor GetTextMetricsW CreateCompatibleBitmap CreateDIBitmap EnumFontFamiliesW OffsetViewportOrgEx SetWindowOrgEx SetWindowExtEx SetViewportOrgEx SetViewportExtEx ExtTextOutW TextOutW CreateDCW GetDeviceCaps CreateBitmap SetBkColor MoveToEx GetObjectW DeleteObject BitBlt CreateCompatibleDC CreateHatchBrush CreatePen CreatePatternBrush CreateRectRgn CreateSolidBrush DeleteDC Escape ExcludeClipRect GetClipBox GetObjectType GetPixel GetStockObject GetViewportExtEx GetWindowExtEx IntersectClipRect LineTo PtVisible RectVisible RestoreDC SaveDC SelectClipRgn ExtSelectClipRgn SelectObject SelectPalette SetBkMode SetMapMode SetLayout GetLayout SetPolyFillMode SetROP2 SetTextColor CopyMetaFileW GetTextFaceW GetTextCharsetInfo SetPixel StretchBlt GetViewportOrgEx LPtoDP CreateDIBSection SetDIBColorTable CreateEllipticRgn Ellipse GetTextColor CreatePolygonRgn Polygon Polyline Rectangle EnumFontFamiliesExW GetRgnBox OffsetRgn CreateRoundRectRgn RoundRect FrameRgn PtInRegion SetPixelV ExtFloodFill SetPaletteEntries FillRgn GetBoundsRect GetWindowOrgEx SetTextAlign

winspool.drv

ClosePrinter DocumentPropertiesW OpenPrinterW

DE5/resources/libraries/CustomHook_Helperx64.exe

IMPHASH 6edfc990001b49c57ad9561505516a2d
SHA256 1f433ec84aaf817c7ba8bc58e637ed16ddca3c53e2a9322ba7bf4183dec8615d
MD5 1028c11ebc45cfad75a54e1913da20c6
SHA1 d9451933bb0f0190af1f3487c16f33367f9b2ae3
SHA512 6ca0e06748acaf9245fd316442c77a6f1c2fc2b57797cb7f0731020606277ba31842f902ab9ca09257a43e11a3eb45d5d839a8bd0d280f5b4af0c01b0510b5c4
SSDEEP 6144:/z80pQMqXNlpHRCncJNeT3FXXeItqc78kpuray:/JbqXNbxYzEc78Sq
TLSH
T1BC744909B7A858F5D967C27C89914646E3B278564B71DBCF13A0421E3F33AE09E3E721
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

9d:60:63:b7:05:06:c1:ef:7e:55:56:da:95:58:81:a8:12:d0:d3:7b

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Chains

Feb 19, 2014

CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Serial Number

11:c9:54:ae:24:12:01:1c:f5:4a:7c:3c:b1:8d:75:1e

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 19, 2013 - Feb 20, 2014

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

0

Major OS version

6

Entry point

106404

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\1\releases\build\CustomHook_Helperx64\vc10\x64\Release\CustomHook_Helperx64.pdb

shlwapi

PathStripToRootW PathRemoveFileSpecW PathIsFileSpecW PathStripPathW PathRemoveBackslashW PathIsUNCW PathFileExistsW PathFindFileNameW PathIsRelativeW

kernel32

HeapReAlloc ReadConsoleW GetConsoleMode FreeEnvironmentStringsW GetEnvironmentStringsW GetCurrentProcessId WideCharToMultiByte GetACP MultiByteToWideChar GetDriveTypeW FormatMessageW ReadFile GetModuleFileNameW CreateFileW lstrcmpW lstrlenW GetTempPathW GetLastError GetCurrentDirectoryW SetLastError RemoveDirectoryW CloseHandle DeleteFileW LocalFree GetCurrentProcess FreeLibrary CreateProcessW GetModuleHandleW LoadLibraryW WaitForSingleObject GetExitCodeProcess GetProcAddress SetFilePointerEx OutputDebugStringW WriteFile CreateEventA SetEvent FlushFileBuffers GetCurrentThreadId GetCommandLineW QueryPerformanceCounter LoadLibraryExW GetConsoleCP SetStdHandle FormatMessageA SetEndOfFile WriteConsoleW SetEnvironmentVariableA LocalAlloc GetFileType GetStdHandle HeapSize GetModuleHandleExW GetTimeZoneInformation GetOEMCP IsValidCodePage EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection Sleep GetStringTypeW GetSystemTimeAsFileTime HeapFree HeapAlloc IsDebuggerPresent IsProcessorFeaturePresent GetFullPathNameW GetFileAttributesExW RtlPcToFileHeader RaiseException RtlLookupFunctionEntry RtlUnwindEx GetCPInfo InitializeCriticalSectionAndSpinCount RtlCaptureContext RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW ExitProcess GetProcessHeap

advapi32

SetEntriesInAclW GetNamedSecurityInfoW SetNamedSecurityInfoW CreateWellKnownSid

shell32

CommandLineToArgvW ord165 SHGetFolderLocation SHGetPathFromIDListW SHGetFolderPathW

ole32

CoTaskMemFree

DE5/resources/libraries/EventMessages.dll

SHA256 78a29f0a6049623a1c3688b3b30d8d7c3260fc5b2b2e4a46da93ff08d303b53b
MD5 de8f5e537b8344b638d413389023a0db
SHA1 47f4233c65aa6b36200a6a8be6abae03d3ab25fa
SHA512 0f597f4fc94886db647e0894b107117856875800604281ce2966057464dff987b7b8da4afa1aaebeb1b59e35a4a90c21cf5156ceec8b788d37bd4d8d89f7478f
SSDEEP 192:NlnYe+PjPqrTBCpvynJr9ZCspE+TMorgFJyjXs:PnYPLCBLn8eM0s
TLSH
T1F9F108CB1B2560A2DECA8FB0C2D6D56BAD31B3D02EC5A05A54B980D17EC5F703B5A40E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

fc:9a:a6:1c:d0:93:88:21:2f:b6:8e:da:87:da:58:32:cc:dd:c1:3b

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Chains

Feb 19, 2014

CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Serial Number

11:c9:54:ae:24:12:01:1c:f5:4a:7c:3c:b1:8d:75:1e

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 19, 2013 - Feb 20, 2014

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

DE5/resources/libraries/TokenResolverx64.exe

IMPHASH d7599ce64fbe14ef79f16fa0e0bef1c0
SHA256 6ad54bcd81d1ed90ae40505c0d059e5c8f7985efa7675ba913ee27de9e9aee81
MD5 09d7a655b4b9a60c6e9650ee389aee0b
SHA1 7e0fd582e8823ac5296af6a3942f132efdd33ec8
SHA512 7ad73f690693670c7dd4e0738dd66ee0039dd03c05414ec3b36d595ebd08c2119505acfa2b35b628a2a654eafa8dcd966ee0be7903398547ad52464fe8c5030a
SSDEEP 1536:X3Rd/Ci4ruPTmT4ybYSIbFjmawIcZpqJyWYf:nRddsuPTmsbSIFSNZpqEWy
TLSH
T1A8835C4A33F404F5E5A79678C9F28A05EBB2F8425779D38F526443962F637C05E3A322
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

55:6d:35:99:07:06:d7:c6:67:87:27:20:c8:37:e6:9d:38:fd:16:66

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Chains

Feb 19, 2014

CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Serial Number

11:c9:54:ae:24:12:01:1c:f5:4a:7c:3c:b1:8d:75:1e

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 19, 2013 - Feb 20, 2014

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

2

Major OS version

5

Entry point

9852

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

E:\York1820\oobe\3.0\installertech\5.0\dev5\build\TokenResolver\vc10\x64\Release\TokenResolver.pdb

kernel32

WriteFile CreateFileW GetLastError CloseHandle WideCharToMultiByte GetACP MultiByteToWideChar FlushFileBuffers HeapReAlloc GetStringTypeW LCMapStringW WriteConsoleW SetStdHandle GetProcAddress GetModuleHandleW ExitProcess DecodePointer GetCommandLineW GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext HeapAlloc HeapFree EncodePointer InitializeCriticalSectionAndSpinCount DeleteCriticalSection LeaveCriticalSection EnterCriticalSection LoadLibraryW FlsGetValue FlsSetValue FlsFree SetLastError GetCurrentThreadId FlsAlloc RtlUnwindEx GetStdHandle GetModuleFileNameW RaiseException RtlPcToFileHeader FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType HeapSetInformation GetVersion HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetOEMCP IsValidCodePage Sleep HeapSize

shell32

SHGetFolderPathW SHGetPathFromIDListW SHGetFolderLocation

ole32

CoTaskMemFree

DE5/resources/libraries/adobeFileVersioner.dll

IMPHASH c31e39c26cb35baa1c1d95d9983dcdea
SHA256 9ca19b6ca742852e5e9cfe30d625d64879632fd142562d0cfb249d546786bb08
MD5 92f95053e44a3d784112e74cfcc30e66
SHA1 54532686cf92ca7e2e512a0544467b3a124af170
SHA512 4840468460cad4688773b9a6e45b3c0b582a1719eb570ba8f688b5828d17141cf90783acca737ff98fc6f537ea2ad9e94fdb4ac53a692df2c4c5123cec1fffc0
SSDEEP 6144:ETJ9A4mJKteONUOf7fDkIyq1E7URqkDjrOP:ET3tzNU6XP1E7UgkrOP
TLSH
T13D447CA03680C53AEDDE03B1997CAA5D40EDAEA24BB4C4C7E3D81E4D5D725C21B32767
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

39:4a:e8:44:7d:1a:4d:28:9d:76:3c:5d:f7:42:1f:fa:28:af:19:ef

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Chains

Feb 19, 2014

CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Serial Number

11:c9:54:ae:24:12:01:1c:f5:4a:7c:3c:b1:8d:75:1e

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 19, 2013 - Feb 20, 2014

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

1

Major OS version

5

Entry point

141743

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

CreateFileW GetFileSize ReadFile CloseHandle MultiByteToWideChar WideCharToMultiByte GetACP Sleep InterlockedExchange InterlockedCompareExchange FreeLibrary LoadLibraryA LCMapStringW LCMapStringA GetUserDefaultLCID GetStringTypeExA WriteConsoleW SetStdHandle SetFilePointerEx GetConsoleMode GetConsoleCP HeapReAlloc EncodePointer DecodePointer RaiseException RtlUnwind GetCommandLineA GetCurrentThreadId GetStdHandle WriteFile GetModuleFileNameW IsProcessorFeaturePresent GetLastError HeapAlloc HeapFree InterlockedDecrement ExitProcess GetModuleHandleExW GetProcAddress HeapSize IsDebuggerPresent SetLastError InterlockedIncrement IsValidCodePage GetOEMCP GetCPInfo GetStringTypeW GetProcessHeap GetFileType InitializeCriticalSectionAndSpinCount DeleteCriticalSection GetStartupInfoW GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW OutputDebugStringW LoadLibraryExW LoadLibraryW EnterCriticalSection LeaveCriticalSection FlushFileBuffers

user32

LoadStringA

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

DE5/resources/libraries/patchw32.dll

IMPHASH 8f296cd7497fd33e575100bd64339788
SHA256 c727b828ecc4d7a10d6eef4bb49b14fdbe8991cfc2122edecb1c0d787934574f
MD5 d9897cad1123a4324527434520f75ab0
SHA1 b3148e7a1315fa488ee394f2430a12358c771869
SHA512 c6e1282e62f287241e8390e1ec1d8aa98fbe888748d008584da6b11571c1dbf37610e74ba59182f68e990021859ec989c9ece97c8d604445217c7726698950a4
SSDEEP 6144:pB+qvXHzno7F9/wLssXxWYlrAOYg+s9k8LaVkr35VnEBUrg:pw0To7FFnsXxVlrA4JLaVkr35ZoCg
TLSH
T17B347D82F9D881F0D4D82AF434362B766E77F90432B9C696DBC01C395CB7B119918B6E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:1 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

88:9b:f5:c9:cc:56:3e:e8:f5:54:f4:81:84:ac:59:0a:08:e8:75:8f

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Chains

Feb 19, 2014

CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Serial Number

11:c9:54:ae:24:12:01:1c:f5:4a:7c:3c:b1:8d:75:1e

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 19, 2013 - Feb 20, 2014

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

0

Major OS version

1

Entry point

142432

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

user32

wsprintfA DdeInitializeA DispatchMessageA OemToCharA PeekMessageA DdeUninitialize TranslateMessage CharToOemA DdeCreateDataHandle DdeDisconnect DdeClientTransaction DdeCreateStringHandleA DdeFreeStringHandle DdeConnect LoadStringA wvsprintfA

advapi32

RegCloseKey RegQueryInfoKeyA RegEnumValueA RegEnumKeyA RegEnumValueW RegSetValueExW RegEnumKeyW RegDeleteValueA RegDeleteValueW RegQueryValueExW RegOpenKeyExW RegCreateKeyExW RegDeleteKeyA RegDeleteKeyW RegEnumKeyExA SetFileSecurityW GetFileSecurityW RegOpenKeyExA RegSetValueExA RegCreateKeyExA RegQueryValueExA FreeSid AccessCheck IsValidSecurityDescriptor SetSecurityDescriptorOwner SetSecurityDescriptorGroup SetSecurityDescriptorDacl AddAccessAllowedAce InitializeAcl GetLengthSid InitializeSecurityDescriptor AllocateAndInitializeSid DuplicateToken OpenProcessToken OpenThreadToken

ole32

CoUninitialize CoInitialize

version

GetFileVersionInfoSizeW GetFileVersionInfoA GetFileVersionInfoW GetFileVersionInfoSizeA VerQueryValueA

kernel32

ReleaseMutex GetPrivateProfileSectionA GetProfileStringA GetDiskFreeSpaceA VirtualAlloc GetSystemDirectoryA FlushFileBuffers CreateDirectoryA VirtualFree DeleteFileW GetFileType MoveFileW GetDriveTypeW GetCommandLineA SetStdHandle ExitProcess GetCurrentProcessId GetCPInfo GetOEMCP GetACP GetTimeZoneInformation GetStartupInfoA GlobalFree GlobalAlloc MulDiv GetVersion FreeLibrary GetDriveTypeA GetProcAddress LoadLibraryA SetEndOfFile SetFilePointer CloseHandle UnmapViewOfFile MapViewOfFile CreateFileMappingA GetFileSize CreateFileA GetWindowsDirectoryA GetShortPathNameA GetFullPathNameA MoveFileExW MoveFileExA CopyFileA GetFileAttributesA GetModuleFileNameA MoveFileA SetEnvironmentVariableA GetTempPathA SetErrorMode CreateMutexA SetFileApisToANSI CreateFileW AreFileApisANSI WaitForSingleObject LocalFree LocalAlloc GetCurrentProcess GetLastError GetCurrentThread WriteFile lstrlenA ReadFile SetNamedPipeHandleState WaitNamedPipeA GetLocalTime SetCurrentDirectoryW GetEnvironmentStrings WideCharToMultiByte GetProfileSectionA FindNextFileW FindClose GetPrivateProfileStringA GetSystemTime DeleteFileA SetFileAttributesA WriteProfileStringA WriteProfileSectionA WritePrivateProfileStringA WritePrivateProfileSectionA WriteProfileStringW WritePrivateProfileStringW CopyFileW GetExitCodeProcess CreateProcessA lstrcmpiA SystemTimeToFileTime GetSystemInfo LockResource LoadResource FindResourceA SetFileApisToOEM MultiByteToWideChar GetVolumeInformationA SetEnvironmentVariableW GetCurrentDirectoryW FindFirstFileW FindFirstFileA FindNextFileA FileTimeToSystemTime FileTimeToLocalFileTime LocalFileTimeToFileTime GetModuleHandleA SetFileAttributesW SetFileTime GetFileAttributesW GetShortPathNameW GetFullPathNameW GetStdHandle RaiseException RemoveDirectoryW RemoveDirectoryA GetCurrentDirectoryA SetCurrentDirectoryA RtlUnwind CreateDirectoryW GetLogicalDrives

Name

.text

Size

173KB

Virtual Size

173KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

35KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

296B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

14KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

440B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

13KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

DE5/resources/libraries/updaterinventory.dll

IMPHASH bad3015008dc3e428fc873c464835fbd
SHA256 6ba99f378a9e0a95dedbabee6bf9f9dc94913a684f7bbb36055d7863bbb31313
MD5 87c79e5b308f347a2360ae5da407a479
SHA1 3adf9ba5e45d25986a1af1c68d74f17e6022fd37
SHA512 916e629c847e5c740d8d6258e8b426f54db94bee1bc01684cd961d5c004e3df7de119c3d214149e4022bf61e7aff61b0c8e83be2a92e22c4a274fe672f6c1b10
SSDEEP 6144:zO1SJIndl6FIJ+Ki+vBRcOS6yWjzOR2IKLA4ZxA/4HR21AwU7L:zO1SJWQsc16njzOgn84ZxAig1xU7L
TLSH
T127A4AC11B9C1C071E86E02B0722D9B2605BDBDB14B698AD7E3D8AD4F1F726C15B32B17
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

bd:68:cb:48:b8:25:1d:f3:46:e4:b7:a3:86:fd:7d:63:d5:e8:d2:b9

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Chains

Feb 19, 2014

CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Serial Number

11:c9:54:ae:24:12:01:1c:f5:4a:7c:3c:b1:8d:75:1e

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 19, 2013 - Feb 20, 2014

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

1

Major OS version

5

Entry point

109034

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\P4\garuda_1970\oobe\8.0\dev\updater\build\updaterinventory\vc\outdir-Release\updaterinventory.pdb

kernel32

EncodePointer DecodePointer GetSystemTimeAsFileTime GetCommandLineA GetCurrentThreadId IsDebuggerPresent IsProcessorFeaturePresent ExitProcess GetModuleHandleExW GetProcAddress HeapSize Sleep GetStdHandle WriteFile GetModuleFileNameW RaiseException InterlockedIncrement IsValidCodePage GetACP GetOEMCP GetCPInfo SetLastError GetTimeZoneInformation WideCharToMultiByte GetFileType DeleteCriticalSection GetStartupInfoW GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW EnterCriticalSection LeaveCriticalSection LoadLibraryExW MultiByteToWideChar HeapReAlloc RtlUnwind OutputDebugStringW LoadLibraryW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetStringTypeW GetConsoleCP GetConsoleMode SetFilePointerEx SetStdHandle WriteConsoleW FlushFileBuffers CreateFileW SetEnvironmentVariableA GetLongPathNameW GetTempPathW LocalFree CreateDirectoryW RemoveDirectoryW SetFileAttributesW DeleteFileW CopyFileW MoveFileW GetVersionExW SetFilePointer SetEndOfFile ReadConsoleW LocalAlloc GetLastError GetProcessHeap HeapFree HeapAlloc CreateThread GetExitCodeThread InitializeCriticalSectionAndSpinCount TerminateThread WaitForSingleObject InterlockedDecrement CloseHandle FindNextFileW FindClose GetCurrentProcess FindFirstFileW ReadFile

advapi32

SetNamedSecurityInfoW CreateWellKnownSid GetSecurityDescriptorDacl RegOpenKeyExW RegSetKeySecurity SetEntriesInAclW RegDeleteValueW RegGetKeySecurity SetSecurityDescriptorDacl InitializeSecurityDescriptor RegQueryValueExW RegSetValueExW RegCloseKey RegCreateKeyExW

shell32

SHFileOperationW SHGetSpecialFolderLocation SHGetMalloc SHGetPathFromIDListW

ole32

CoInitializeSecurity CoTaskMemFree CoInitializeEx CoUninitialize CoCreateInstance CoInitialize

oleaut32

VariantInit VariantClear SysAllocString SysFreeString

shlwapi

PathIsFileSpecW PathFileExistsW PathIsDirectoryW PathRemoveFileSpecW

DE5/resources/uninstall/Uninstall.db

SHA256 26915426641b265d5e77f93b0b35ed6ca95dbb144d2917f85db11025bfc6e889
MD5 45e2bbb50c3dce90beabc845b63362d9
SHA1 75c29a86b1ea37ee07f5c4770adc4cfd7f5f4dae
SHA512 f806da7b24bfccce909ca4ca12cf1c0554516bce1886544188fbec715ac093f885708bef1b89bd394c782d1a340bfde5e4a0d97c6647c6f7bcbdc02fd857c9c2
SSDEEP 768:TOUTP61NQUQRGVUZOEWGpg6hRRU8Qd4qRPAnbszKPTvG5MzFV1ASj:2JWh
TLSH
T130638CCF5F1A3312C5E14131DAD203E36C3C565EA77A66D03AA211F2BEA20B769715F8
MD5 SHA1 SHA512 SSDEEP TLSH

DE6/Setup.dll

IMPHASH eeb4787dc3697b9a7d205b62a703f08c
SHA256 f1edd755ec500d029c03c6c86715707eabe8d0c279564e0d50f0ae96c158330b
MD5 061688144d5ac5dcdc450bb154114fd7
SHA1 6769ddbfd431dafcaec3f5cadc4dfc6527a6f162
SHA512 0c1640c4f12e3b1c9cc4c3d673cb9416dec03ef92e7e872e20f2925f1d83043ef3260777b77b2e94a1192c3cc180a8c3d037d9568061df61b65e57189c954ade
SSDEEP 49152:LHM7j/her0vpX6jyy2p9JOwVmSDperTTmqDdtsT+RFaL:LH2ucpep2DJ9geT
TLSH
T1CAF51748BE82C15DE9CD04FAAD797AF93428FCA4073BCDCF56987D4A04725CA6936306
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

Minor OS version

1

Major OS version

5

Entry point

1472427

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\builds\RIBS\8.0\source\build\Ahmbed\vc\obj\Release\bin\Setup.pdb

mpr

WNetCancelConnection2W WNetAddConnection2W

setupapi

SetupDiGetClassDevsW SetupDiGetDeviceRegistryPropertyW SetupDiGetDeviceInstanceIdW SetupDiDestroyDeviceInfoList SetupDiEnumDeviceInfo CM_Get_DevNode_Status

kernel32

MoveFileExW FormatMessageW GetFileAttributesW ReadFile GetModuleFileNameW lstrcmpW lstrlenW GetTempPathW GetCurrentDirectoryW FindClose LocalAlloc SetCurrentDirectoryW RemoveDirectoryW lstrcmpiW FindNextFileW GetDiskFreeSpaceExW DeleteFileW LocalFree SetFileAttributesW lstrcpyW GetVolumeInformationW FindResourceExW LoadResource LockResource GetUserDefaultUILanguage ReleaseMutex CreateProcessW GetCurrentProcess GetUserDefaultLangID OpenProcess Thread32First GetExitCodeProcess Thread32Next Process32FirstW QueryDosDeviceW Module32FirstW Process32NextW CreateToolhelp32Snapshot Module32NextW GetTempFileNameW GetThreadLocale IsProcessorFeaturePresent GlobalMemoryStatusEx GetCurrentThread GetTickCount Sleep InterlockedDecrement lstrcatW CreateDirectoryW InitializeCriticalSection LeaveCriticalSection EnterCriticalSection QueryPerformanceCounter QueryPerformanceFrequency GetProcessHeap HeapAlloc HeapFree ReleaseSemaphore GetSystemTimeAsFileTime DuplicateHandle CreateSemaphoreA CreateFileA MultiByteToWideChar InterlockedCompareExchange InterlockedExchange GetUserDefaultLCID GetStringTypeExA LCMapStringA LoadLibraryA CopyFileExW SystemTimeToFileTime DeleteFileA GetDiskFreeSpaceA GetDiskFreeSpaceW GetFileAttributesA SetErrorMode GetFullPathNameW LockFile LockFileEx SetEndOfFile SetFilePointer UnlockFile InterlockedIncrement GetCurrentProcessId GetCurrentThreadId GetVersionExA FormatMessageA GetTempPathA AreFileApisANSI ConnectNamedPipe CreateNamedPipeW GetModuleHandleA HeapReAlloc GlobalLock GlobalAlloc GlobalFree GlobalUnlock GetLocalTime GetTimeFormatW GetDateFormatW UnlockFileEx lstrlenA OpenMutexW TlsGetValue TlsAlloc ResumeThread SetWaitableTimer ResetEvent WaitForMultipleObjects OpenEventA GetDriveTypeW FindFirstFileW GetACP WideCharToMultiByte GetVersionExW GetSystemTime GetLastError WaitForSingleObject CreateMutexW GetFileSizeEx FlushFileBuffers CreateFileW CopyFileW WriteFile CloseHandle DeleteCriticalSection GetProcAddress SetLastError GetStdHandle RaiseException SetEvent CreateEventA GetConsoleWindow FreeConsole LoadLibraryW GetModuleHandleW FreeLibrary GetFullPathNameA TlsSetValue TlsFree CreateWaitableTimerA EncodePointer DecodePointer GetFileSize IsDebuggerPresent LoadLibraryExA

user32

FindWindowW GetWindowTextW GetWindowTextLengthW GetWindowThreadProcessId EnumThreadWindows SendMessageW LoadStringA PostMessageW GetSystemMetrics

advapi32

InitializeSecurityDescriptor RegQueryValueExW AccessCheck SetSecurityDescriptorGroup OpenThreadToken SetEntriesInAclW GetNamedSecurityInfoW SetNamedSecurityInfoW AdjustTokenPrivileges CheckTokenMembership FreeSid AllocateAndInitializeSid DuplicateTokenEx LookupPrivilegeValueW OpenProcessToken CreateWellKnownSid RegOpenKeyExW RegDeleteKeyW RegSetValueExW RegCloseKey ReportEventW DeregisterEventSource RegCreateKeyExW RegisterEventSourceW ImpersonateSelf InitializeAcl SetSecurityDescriptorOwner AddAccessAllowedAce RevertToSelf IsValidSecurityDescriptor GetLengthSid SetSecurityInfo SetSecurityDescriptorDacl

shell32

ord75 SHGetFolderPathW SHGetPathFromIDListW SHGetFolderLocation ord165 SHCreateDirectoryExW

ole32

CoSetProxyBlanket CoInitializeEx OleUninitialize OleInitialize CoTaskMemFree CLSIDFromProgID CoInitialize CoUninitialize CoCreateInstance CoInitializeSecurity

oleaut32

VariantClear SysAllocStringByteLen VariantInit VariantCopy SysAllocString SysFreeString SysStringLen

atl110

ord31

shlwapi

PathIsRelativeW PathStripPathW PathRemoveFileSpecW PathAppendW PathAddBackslashW PathAddExtensionW PathRenameExtensionW PathIsFileSpecW PathIsDirectoryW PathRemoveBackslashW PathRemoveExtensionW PathFileExistsW PathIsRootW PathFindExtensionW PathGetCharTypeW PathStripToRootW PathMakePrettyW PathIsUNCW PathFindFileNameW

msvcp110

??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@K@Z ??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z ?set_new_handler@std@@YAP6AXXZP6AXXZ@Z ?_Add_vtordisp2@?$basic_ios@DU?$char_traits@D@std@@@std@@UAEXXZ ?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z ?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z ?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z ?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ ?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z ?id@?$codecvt@DDH@std@@2V0locale@2@A ?always_noconv@codecvt_base@std@@QBE_NXZ ?in@?$codecvt@_WDH@std@@QBEHAAHPBD1AAPBDPA_W3AAPA_W@Z ?out@?$codecvt@_WDH@std@@QBEHAAHPB_W1AAPB_WPAD3AAPAD@Z ?unshift@?$codecvt@_WDH@std@@QBEHAAHPAD1AAPAD@Z ?_Getcat@?$codecvt@_WDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z ?_Add_vtordisp2@?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAEXXZ ??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UAE@XZ ?_Add_vtordisp1@?$basic_istream@_WU?$char_traits@_W@std@@@std@@UAEXXZ ?getline@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@PA_W_J@Z ??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z ?getloc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QBE?AVlocale@2@XZ ?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXXZ ?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z ?id@?$codecvt@_WDH@std@@2V0locale@2@A ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z ?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z ?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ ?_Add_vtordisp1@?$basic_istream@DU?$char_traits@D@std@@@std@@UAEXXZ ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z ??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z ?_Swap_all@_Container_base0@std@@QAEXAAU12@@Z ?is@?$ctype@_W@std@@QBE_NF_W@Z ?_Winerror_map@std@@YAPBDH@Z ?_Syserror_map@std@@YAPBDH@Z ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?_Xbad_alloc@std@@YAXXZ ?_Xout_of_range@std@@YAXPBD@Z ?_Xlength_error@std@@YAXPBD@Z ?uncaught_exception@std@@YA_NXZ ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z ?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z ?_Orphan_all@_Container_base0@std@@QAEXXZ ??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@ ?id@?$numpunct@_W@std@@2V0locale@2@A ?_BADOFF@std@@3_JB ??1_Lockit@std@@QAE@XZ ??0_Lockit@std@@QAE@H@Z ?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ ?_Init@locale@std@@CAPAV_Locimp@12@_N@Z ?classic@locale@std@@SAABV12@XZ ??_7facet@locale@std@@6B@ _Mbrtowc ??_7?$basic_ostream@_WU?$char_traits@_W@std@@@std@@6B@ ??_7_Facet_base@std@@6B@ ?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ ??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ ??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z ??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ ?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ ?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W00@Z ?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z ?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ ?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD0@Z ?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ ?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z ?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ ?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ ?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ ?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ ?_Add_vtordisp2@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAEXXZ ??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ ?_Add_vtordisp2@?$basic_ostream@DU?$char_traits@D@std@@@std@@UAEXXZ ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z ?_Add_vtordisp1@?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAEXXZ ??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ ?_Add_vtordisp1@?$basic_ios@DU?$char_traits@D@std@@@std@@UAEXXZ ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ ?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z ?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ ?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z ?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z ?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z ?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ ?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ ?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ ?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ ??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ ??1facet@locale@std@@MAE@XZ ??0facet@locale@std@@IAE@I@Z ?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ ?_Incref@facet@locale@std@@UAEXXZ ??Bid@locale@std@@QAEIXZ ?_Gettrue@_Locinfo@std@@QBEPBDXZ ?_Getfalse@_Locinfo@std@@QBEPBDXZ ?_Getlconv@_Locinfo@std@@QBEPBUlconv@@XZ ?_Getcvt@_Locinfo@std@@QBE?AU_Cvtvec@@XZ ??1_Locinfo@std@@QAE@XZ ??0_Locinfo@std@@QAE@PBD@Z ?id@?$numpunct@D@std@@2V0locale@2@A ?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z ?id@?$ctype@_W@std@@2V0locale@2@A ?imbue@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAE?AVlocale@2@ABV32@@Z ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@G@Z ?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBE_WD@Z ?clear@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z ?getloc@ios_base@std@@QBE?AVlocale@2@XZ ?exceptions@ios_base@std@@QAEXH@Z ?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z ?narrow@?$ctype@_W@std@@QBED_WD@Z ?widen@?$ctype@_W@std@@QBE_WD@Z

version

GetFileVersionInfoW GetFileVersionInfoSizeW VerQueryValueW

ws2_32

WSACleanup WSAStartup

msvcr110

fgetwc _open _write __clean_type_info_names_internal _except_handler4_common _initterm_e _initterm _malloc_crt _amsg_exit __CppXcptFilter ??1type_info@@UAE@XZ __crtTerminateProcess __crtUnhandledException _crt_debugger_hook _onexit __dllonexit _calloc_crt _unlock _lock ?terminate@@YAXXZ _beginthreadex _ftime64_s _wrename wcsftime _wopen _lseeki64 sprintf strerror _close wcstombs _aligned_free _aligned_malloc ??9type_info@@QBE_NABV0@@Z ?name@type_info@@QBEPBDPAU__type_info_node@@@Z wcsncmp sscanf _errno isalnum fputc fprintf _vsnprintf_s wcschr strchr wcsncat_s strncat_s _waccess_s _wfullpath _set_errno _wunlink _wfsopen _wmkdir _wgetcwd sscanf_s _snprintf_s strncpy_s strncmp realloc ??3@YAXPAX@Z wcsncpy_s ?what@exception@std@@UBEPBDXZ ??1exception@std@@UAE@XZ ??0exception@std@@QAE@ABQBD@Z ??0exception@std@@QAE@ABQBDH@Z ??0exception@std@@QAE@ABV01@@Z memmove free __iob_func setvbuf ??_V@YAXPAX@Z strcpy_s _purecall _open_osfhandle ??2@YAPAXI@Z _fdopen ??1bad_cast@std@@UAE@XZ ??0bad_cast@std@@QAE@PBD@Z ??0bad_cast@std@@QAE@ABV01@@Z ??8type_info@@QBE_NABV0@@Z _vsnwprintf_s ??0exception@std@@QAE@XZ memchr atoi swprintf_s _wsplitpath_s _wstat64i32 _snwprintf_s rand srand _time64 calloc memcpy_s _wcsicmp wcscpy_s _wcsnicmp malloc fgetws printf strstr _wfopen_s fclose sprintf_s fwprintf _stricmp tolower _localtime64_s strftime toupper _gmtime64 fputwc _unlock_file ungetwc ungetc fgetpos _fseeki64 fflush fgetc fsetpos _lock_file fwrite isspace isalpha isxdigit memcpy strcpy strcmp strlen _CxxThrowException __CxxFrameHandler3 wcslen memcmp memset fread

psapi

EnumProcessModules GetModuleBaseNameW

Name

.text

Size

2.1MB

Virtual Size

2.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

311KB

Virtual Size

310KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

158KB

Virtual Size

191KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

2B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

382KB

Virtual Size

382KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

286KB

Virtual Size

285KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

generic

count=8, id=199, version=41118,

count=15, id=205, version=50929,

count=14, id=206, version=50929,

count=6, id=203, version=50929,

count=3, id=188, version=30716,

count=17, id=125, productName=VS2005 build 50727, version=50727,

count=2, id=190, version=30716,

count=15, id=207, version=50929,

count=117, id=109, productName=VS2005 build 50727, version=50727,

count=2, id=206, productName=VS2012 UPD4 build 61030, version=61030,

count=26, id=207, productName=VS2012 UPD4 build 61030, version=61030,

count=748, id=1, productName=Unmarked objects,

count=35, id=185, version=30716,

count=187, id=211, version=61030,

count=1, id=202, productName=VS2012 UPD4 build 61030, version=61030,

count=1, id=201, productName=VS2012 UPD4 build 61030, version=61030,

count=24, id=151,

count=1, id=204, productName=VS2012 UPD4 build 61030, version=61030,

DE6/resources/libraries/ARKCmdCaps.dll

IMPHASH dabce6fe60b773f20cc76586a6e0bcc2
SHA256 2b296d41ff81af0c972c941032cea0d445eda0577b021e6f6a70b06093d8b05c
MD5 2c07b8c6703c6fd8358bd3201d6b2933
SHA1 acb700df8fbf80e6c0eb4d6e166cd80b264fc610
SHA512 7d6f2360ef84d68aded2b9ed43e4dc412da65c99c745c760acb99c9e3950fe27f99917f12c4a69a80b9d50f5324826ac343eb76f2bf9b39259b08098beb8fe25
SSDEEP 6144:WbIgwXTRQRSs1IJFsPkkeK7mBFB/v0bpxYH8REfBwI15ELWl5L0zFEk6bdwbmeBt:WbIgwXTRQRS0IbpLKaBF90FebfBtn+ZH
TLSH
T13C74AE43B5A39031D89911B062689F626DFDBC313BA694D3CFD81895CE309D2E72E35B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

3c:29:4c:bd:22:b0:25:18:31:84:68:7c:5c:01:18:72:fd:5e:64:94

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Chains

Apr 22, 2014

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Serial Number

1d:37:83:b3:de:cd:5d:bb:16:e3:3c:d3:a6:b3:bf:db

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 20, 2014 - Feb 21, 2015

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

1

Major OS version

5

Entry point

254919

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\builds\RIBS\8.0\source\build\ARKCmdCaps\vc\Release\ARKCmdCaps.pdb

ole32

CoTaskMemFree

advapi32

FreeSid SetNamedSecurityInfoW AllocateAndInitializeSid SetEntriesInAclW GetNamedSecurityInfoW

shlwapi

PathRemoveBackslashW PathFileExistsW PathAppendW PathStripPathW

shell32

SHCreateDirectoryExW SHGetFolderPathW SHGetFolderLocation SHGetPathFromIDListW

kernel32

EncodePointer DecodePointer WideCharToMultiByte MultiByteToWideChar CreateFileW FlushFileBuffers GetFileAttributesW CloseHandle GetLastError LocalFree lstrlenW CreateFileA IsDebuggerPresent DeleteFileW GetDiskFreeSpaceA GetDiskFreeSpaceW GetFileAttributesA GetFileSize GetFullPathNameA GetFullPathNameW LockFile LockFileEx ReadFile SetEndOfFile SetFilePointer UnlockFile WriteFile GetTempPathW QueryPerformanceCounter InitializeCriticalSection EnterCriticalSection LeaveCriticalSection DeleteCriticalSection Sleep InterlockedIncrement GetCurrentProcessId GetCurrentThreadId GetSystemTime GetSystemTimeAsFileTime GetTickCount GetVersionExA FreeLibrary GetProcAddress FormatMessageA LoadLibraryA LoadLibraryW DisableThreadLibraryCalls AreFileApisANSI IsProcessorFeaturePresent DeleteFileA GetTempPathA

arkengine

?GetUnistallDBQueryString@ARKCommand@@UAE_NAAV?$list@UUninstallDBQuery@@V?$allocator@UUninstallDBQuery@@@std@@@std@@@Z ?GetDBQueryString@ARKCommand@@UAE_NAAV?$list@UUninstallDBQuery@@V?$allocator@UUninstallDBQuery@@@std@@@std@@@Z ?GetUnistallDBQueryString@ARKCommand@@UAE_NAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z ??1ARKCommand@@UAE@XZ ??0ARKCommand@@QAE@AAVLogAppender@@@Z ?SetInstallSequenceNumber@ARKCommand@@UAEXI@Z ?GetInstallSequenceNumber@ARKCommand@@UBEIXZ ?GetTargetFileName@ARKCommand@@UBE_NAAVFileSystemPath@@@Z ?GetLogger@ARKCommand@@UBEAAVLogAppender@@XZ

msvcp110

?_Winerror_map@std@@YAPBDH@Z ?_Xlength_error@std@@YAXPBD@Z ?_Xout_of_range@std@@YAXPBD@Z ?_Xbad_alloc@std@@YAXXZ ?_Syserror_map@std@@YAPBDH@Z

msvcr110

__clean_type_info_names_internal _crt_debugger_hook __crtUnhandledException __crtTerminateProcess strstr ?terminate@@YAXXZ memmove _purecall ??3@YAXPAX@Z ??2@YAPAXI@Z _time64 memcpy strcmp strlen _CxxThrowException __CxxFrameHandler3 atoi strcpy free malloc _initterm_e memset wcscpy_s wcslen realloc memcmp strncmp _localtime64_s _lock _unlock _calloc_crt __dllonexit _onexit ??1type_info@@UAE@XZ __CppXcptFilter _amsg_exit _malloc_crt _initterm _except_handler4_common

DE6/resources/libraries/ARKCmdDefrag.dll

IMPHASH 21f037090b030313eec16b9519710302
SHA256 7b4811a187b66d8ecd5dac8f4d6aff4e8daa025146582a5fbd74b42ffba34e2a
MD5 03c288f686b8133bf84bf6c341ac30da
SHA1 2d7f4e3f20047162844121e2fae2eb854a783116
SHA512 d0c539c0f81e57b8c3105f2c6d56189207b3cd91d69f9fcf11444fc0378d74a2fcd489a490640f9ded6f49551e58ee1deed40f184c242fe0e3c361eee991e06d
SSDEEP 1536:oMKJ8xmBplFyxlbkrCW/tdhUEJ+4LJMJtQ:jIIulGlbKCW/tdPJ3LOJy
TLSH
T182734B1233948174E9DE53B1B979972A8478FE410BE045C7EB991B6E1E35BC32E32B43
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

68:a0:4d:3e:71:d6:36:ee:7c:7e:05:fc:d3:8e:a0:15:d5:ad:57:24

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Chains

Apr 22, 2014

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Serial Number

1d:37:83:b3:de:cd:5d:bb:16:e3:3c:d3:a6:b3:bf:db

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 20, 2014 - Feb 21, 2015

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

1

Major OS version

5

Entry point

38239

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\builds\RIBS\8.0\source\build\ARKCmdDefrag\vc\Release\ARKCmdDefrag.pdb

kernel32

GetTickCount GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter IsProcessorFeaturePresent IsDebuggerPresent DecodePointer GetVersionExW CloseHandle DeviceIoControl GetLastError CreateFileW MultiByteToWideChar WideCharToMultiByte GetCurrentThreadId EncodePointer DisableThreadLibraryCalls

ole32

CoUninitialize CoInitialize

arkengine

?GetInstallSequenceNumber@ARKCommand@@UBEIXZ ?GetTargetFileName@ARKCommand@@UBE_NAAVFileSystemPath@@@Z ?GetLogger@ARKCommand@@UBEAAVLogAppender@@XZ ??0ARKCommand@@QAE@AAVLogAppender@@@Z ??1ARKCommand@@UAE@XZ ?GetUnistallDBQueryString@ARKCommand@@UAE_NAAV?$list@UUninstallDBQuery@@V?$allocator@UUninstallDBQuery@@@std@@@std@@@Z ?GetUnistallDBQueryString@ARKCommand@@UAE_NAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z ?GetDBQueryString@ARKCommand@@UAE_NAAV?$list@UUninstallDBQuery@@V?$allocator@UUninstallDBQuery@@@std@@@std@@@Z ?SetInstallSequenceNumber@ARKCommand@@UAEXI@Z

msvcp110

?_Xbad_alloc@std@@YAXXZ ?_Xout_of_range@std@@YAXPBD@Z ?_Xlength_error@std@@YAXPBD@Z ?_BADOFF@std@@3_JB ?uncaught_exception@std@@YA_NXZ ?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z ?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ ??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ ??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z ??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ ?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ ?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z ?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@K@Z ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z ?_Add_vtordisp2@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAEXXZ ??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ ?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z ?_Add_vtordisp1@?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAEXXZ ??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ ?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z ?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ ?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z ?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z ?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z ?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ ?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ ?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ ?_Syserror_map@std@@YAPBDH@Z ??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ ?ends@std@@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@1@AAV21@@Z ?endl@std@@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@1@AAV21@@Z ??_7ios_base@std@@6B@ ??_7?$basic_ios@_WU?$char_traits@_W@std@@@std@@6B@ ?seekp@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z ?tellp@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE?AV?$fpos@H@2@XZ ?_Winerror_map@std@@YAPBDH@Z ?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ

msvcr110

??3@YAXPAX@Z ??2@YAPAXI@Z _CxxThrowException __CxxFrameHandler3 memcpy memset _wsplitpath _wstat64i32 ??_V@YAXPAX@Z _lock _unlock _calloc_crt __dllonexit _onexit ??1type_info@@UAE@XZ __CppXcptFilter _amsg_exit free _malloc_crt _initterm _initterm_e ?terminate@@YAXXZ _crt_debugger_hook __crtUnhandledException __crtTerminateProcess _except_handler4_common __clean_type_info_names_internal memmove _purecall

DE6/resources/libraries/ARKCmdFS.dll

IMPHASH 782f22ba7b78bb2b0a467252181c7dc4
SHA256 8570b698ecbe08cb980df28429e0efad2ddb183a83ed6512f63a6c7c017d0dab
MD5 c27ab5a50a24e1c04e5a9aa16d4ec0e9
SHA1 21ec39e53e28e11673bd82def85ac03dda945412
SHA512 60f5c35d979abc4b5b846b168e660c08cf8132f3a8e4ab4e7dc1a347a468be189e8eeed8016ca68e4c7761c777b8e4aac8c0b98991ce4b1d74335f81c8fc6648
SSDEEP 6144:TlEayL6fZH36zVP7CW02s6yJ5WBu03Lha4R+1J4is0JlCq9mPWO5Vu:TldwoWVyJ5Wo07hBR+1cu8+O5Vu
TLSH
T135A43A10E79B8235EDEF07B0797A7B49406969984B3A06C7D7895E2E2D70EC35E32703
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

46:57:57:0b:78:b0:82:6c:1b:fa:f2:bb:b7:b2:6a:0e:39:80:dc:0f

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Chains

Apr 22, 2014

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Serial Number

1d:37:83:b3:de:cd:5d:bb:16:e3:3c:d3:a6:b3:bf:db

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 20, 2014 - Feb 21, 2015

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

1

Major OS version

5

Entry point

293829

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\builds\RIBS\8.0\source\build\ARKCmdFS\vc\Release\ARKCmdFS.pdb

ole32

CoTaskMemFree CoInitialize CoUninitialize CoCreateInstance

advapi32

GetServiceKeyNameW FreeSid OpenProcessToken CreateRestrictedToken CreateProcessAsUserW LookupPrivilegeValueW AdjustTokenPrivileges CreateWellKnownSid SetNamedSecurityInfoW GetNamedSecurityInfoW RegCreateKeyExW RegQueryValueExW RegQueryInfoKeyW InitializeSecurityDescriptor RegDeleteKeyW SetSecurityDescriptorDacl RegGetKeySecurity RegDeleteValueW SetEntriesInAclW RegEnumValueW RegSetKeySecurity RegOpenKeyExW RegEnumKeyExW RegCloseKey RegSetValueExW GetSecurityDescriptorDacl AllocateAndInitializeSid CreateServiceW CloseServiceHandle DeleteService OpenSCManagerW QueryServiceConfigW OpenServiceW QueryServiceConfig2W ChangeServiceConfig2W StartServiceW ChangeServiceConfigW QueryServiceStatusEx GetServiceDisplayNameW ControlService

shlwapi

PathIsUNCW PathRemoveFileSpecW PathUnmakeSystemFolderW PathMakeSystemFolderW PathIsRelativeW PathAppendW PathMakePrettyW PathCombineW PathIsDirectoryW PathStripPathW PathRemoveBackslashW PathRenameExtensionW PathIsRootW PathFileExistsW PathAddBackslashW PathFindFileNameW PathFindExtensionW PathStripToRootW

shell32

SHSetLocalizedName SHChangeNotify ord75 SHCreateDirectoryExW ord709 SHGetFolderPathW SHGetPathFromIDListW SHGetFolderLocation

mscms

InstallColorProfileW UninstallColorProfileW

psapi

EnumProcessModules EnumProcesses GetModuleFileNameExW

kernel32

DecodePointer IsDebuggerPresent IsProcessorFeaturePresent RaiseException GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime LoadLibraryExA QueryPerformanceCounter EncodePointer LCMapStringW LoadLibraryA GetStringTypeExW GetUserDefaultLCID FreeLibrary InterlockedExchange InterlockedCompareExchange GetModuleHandleW lstrcatW MoveFileW lstrcmpiW lstrlenW GetLastError CreateProcessW GetCurrentProcess WaitForSingleObject OpenProcess GetExitCodeProcess TerminateProcess LocalAlloc CloseHandle LocalFree Sleep WideCharToMultiByte CopyFileW HeapAlloc HeapFree GetProcessHeap LoadLibraryW GetProcAddress GetTickCount SystemTimeToFileTime SetFileTime CreateFileW GetSystemTime GetFileSize ReadFile SetDllDirectoryW GetModuleFileNameW MultiByteToWideChar FindFirstFileW MoveFileExW FormatMessageW GetFileAttributesW lstrcmpW GetTempPathW GetCurrentDirectoryW SetLastError FindClose SetCurrentDirectoryW RemoveDirectoryW FindNextFileW DeleteFileW SetFileAttributesW lstrcpyW CreateDirectoryW

user32

LoadStringW

gdi32

AddFontResourceW RemoveFontResourceW

oleaut32

VariantClear SysAllocString SysFreeString

arkengine

?SetInstallSequenceNumber@ARKCommand@@UAEXI@Z ?Perform@ARKCommand@@QAE_NXZ ?GetDBQueryString@ARKCommand@@UAE_NAAV?$list@UUninstallDBQuery@@V?$allocator@UUninstallDBQuery@@@std@@@std@@@Z ?GetUnistallDBQueryString@ARKCommand@@UAE_NAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z ?GetUnistallDBQueryString@ARKCommand@@UAE_NAAV?$list@UUninstallDBQuery@@V?$allocator@UUninstallDBQuery@@@std@@@std@@@Z ??1ARKCommand@@UAE@XZ ??0ARKCommand@@QAE@AAVLogAppender@@@Z ?GetLogger@ARKCommand@@UBEAAVLogAppender@@XZ ?GetTargetFileName@ARKCommand@@UBE_NAAVFileSystemPath@@@Z ?GetInstallSequenceNumber@ARKCommand@@UBEIXZ

msvcp110

??0_Lockit@std@@QAE@H@Z ??Bid@locale@std@@QAEIXZ ?always_noconv@codecvt_base@std@@QBE_NXZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ ?_Add_vtordisp1@?$basic_ios@DU?$char_traits@D@std@@@std@@UAEXXZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ ?_Add_vtordisp2@?$basic_ostream@DU?$char_traits@D@std@@@std@@UAEXXZ ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ ?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z ?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z ?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ ?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ ?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ ?_Winerror_map@std@@YAPBDH@Z ?_Syserror_map@std@@YAPBDH@Z ?_Xbad_alloc@std@@YAXXZ ?_Xout_of_range@std@@YAXPBD@Z ?_Xlength_error@std@@YAXPBD@Z ?_Orphan_all@_Container_base0@std@@QAEXXZ ??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@ ?_BADOFF@std@@3_JB ??1_Lockit@std@@QAE@XZ ?uncaught_exception@std@@YA_NXZ ?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ ?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z ?id@?$codecvt@DDH@std@@2V0locale@2@A ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z ?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ

msvcr110

memcpy memset __CxxFrameHandler3 _CxxThrowException __clean_type_info_names_internal _except_handler4_common _initterm_e _initterm _malloc_crt _amsg_exit __CppXcptFilter __crtTerminateProcess ??8type_info@@QBE_NABV0@@Z __crtUnhandledException _crt_debugger_hook ?terminate@@YAXXZ ??1type_info@@UAE@XZ _onexit __dllonexit _calloc_crt _unlock _lock memmove _wtoi _purecall ??3@YAXPAX@Z ??2@YAPAXI@Z ??_V@YAXPAX@Z free malloc strcat_s wcstoul toupper wcscpy_s sprintf_s ?what@exception@std@@UBEPBDXZ ??1exception@std@@UAE@XZ ??0exception@std@@QAE@ABQBD@Z ??0exception@std@@QAE@ABV01@@Z _vsnwprintf_s fputc ??1bad_cast@std@@UAE@XZ ??0bad_cast@std@@QAE@PBD@Z ??0bad_cast@std@@QAE@ABV01@@Z _unlock_file ungetc fgetpos _fseeki64 fflush fgetc fsetpos setvbuf _lock_file memcpy_s fwrite fclose memchr swprintf_s _wstat64i32 _snwprintf_s rand srand _time64 vswprintf_s wprintf

DE6/resources/libraries/ARKEngine.dll

IMPHASH 69048ad2f2cb7114ee79410e3853e1c7
SHA256 2963f472c53983eb6fa76921c332af89a89882642020e8044f0df97fce8ba4d2
MD5 cf551cfffbeea969701e20e14c5d5ea3
SHA1 02dabb0fa00f9b24cc85175d3d6c613da29af354
SHA512 365c6a5212e37482f2cff97e57e8833f53621fdb7080aec02560a2ea8717c9464c4c884ffa09f3f1de7d99c0a7483a4736f8552eddb336b26f8972ca8d6f85d3
SSDEEP 12288:19pjKADjORgJ4I1wIFrcpQVe0GLe1biN4uV9f6NVCdwwgTsMkBhb:1aR64ImIrYQVe0A2b84uVZ6NcgTNob
TLSH
T1F9C4AE12F242C132D8E903B162EC6B5A9DBDBD300B3A95E7D7C85D681D709D1AB3A347
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

8a:7f:44:c8:21:dd:c0:bc:77:b3:ed:b2:cd:02:55:0c:17:8e:0a:5c

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Chains

Apr 22, 2014

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Serial Number

1d:37:83:b3:de:cd:5d:bb:16:e3:3c:d3:a6:b3:bf:db

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 20, 2014 - Feb 21, 2015

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

1

Major OS version

5

Entry point

411217

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\builds\RIBS\8.0\source\build\ARKEngine\vc\Release\ARKEngine.pdb

kernel32

MultiByteToWideChar GetFileSize FindFirstFileW CopyFileW FormatMessageW GetFileAttributesW ReadFile GetModuleFileNameW CreateFileW lstrcmpW lstrlenW GetTempPathW GetCurrentDirectoryW FindClose RemoveDirectoryW FindNextFileW DeleteFileW SetFileAttributesW lstrcpyW CreateProcessW WaitForSingleObject GetModuleHandleW GetExitCodeProcess GetProcAddress CreateFileA DeleteFileA FlushFileBuffers GetDiskFreeSpaceA GetDiskFreeSpaceW GetFileAttributesA GetFullPathNameA LockFile LockFileEx SetEndOfFile SetFilePointer UnlockFile WriteFile QueryPerformanceCounter InitializeCriticalSection EnterCriticalSection LeaveCriticalSection DeleteCriticalSection Sleep InterlockedIncrement GetCurrentProcessId GetCurrentThreadId GetSystemTime GetSystemTimeAsFileTime GetTickCount GetVersionExA FreeLibrary FormatMessageA LoadLibraryA LoadLibraryW GetTempPathA AreFileApisANSI DosDateTimeToFileTime CreateDirectoryW SetFileTime lstrcatW GetFileTime LocalFileTimeToFileTime FileTimeToSystemTime FileTimeToLocalFileTime IsProcessorFeaturePresent IsDebuggerPresent WideCharToMultiByte lstrcmpiW SetLastError GetLastError LocalFree CloseHandle LocalAlloc GetFullPathNameW GetCurrentProcess DecodePointer EncodePointer

advapi32

SetEntriesInAclW GetNamedSecurityInfoW SetNamedSecurityInfoW CreateWellKnownSid

shell32

SHGetFolderPathW SHGetPathFromIDListW SHGetFolderLocation SHCreateDirectoryExW

ole32

CoTaskMemFree

msvcp110

??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ ?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ ?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ ?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ ?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ ?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z ?_Winerror_map@std@@YAPBDH@Z ?_Syserror_map@std@@YAPBDH@Z ?_BADOFF@std@@3_JB ?_Xbad_alloc@std@@YAXXZ ?_Xout_of_range@std@@YAXPBD@Z ?_Xlength_error@std@@YAXPBD@Z ?uncaught_exception@std@@YA_NXZ ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ ?_Add_vtordisp2@?$basic_ostream@DU?$char_traits@D@std@@@std@@UAEXXZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ ?_Orphan_all@_Container_base0@std@@QAEXXZ ?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z ?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ ??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ ??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z ??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ ?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ ?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z ??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ ?_Add_vtordisp1@?$basic_istream@_WU?$char_traits@_W@std@@@std@@UAEXXZ ?_Add_vtordisp1@?$basic_istream@DU?$char_traits@D@std@@@std@@UAEXXZ ?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@K@Z ?_Add_vtordisp2@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAEXXZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z ?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z ??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ ?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z ?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ ?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z ?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z

msvcr110

strncpy_s _CxxThrowException __clean_type_info_names_internal _except_handler4_common memmove _purecall ??3@YAXPAX@Z ??2@YAPAXI@Z _wtoi ??_V@YAXPAX@Z _stricmp memchr atoi isalpha _wtoi64 isdigit ?what@exception@std@@UBEPBDXZ ??1exception@std@@UAE@XZ ??0exception@std@@QAE@ABQBD@Z ??0exception@std@@QAE@ABV01@@Z strstr _wfopen_s fclose _vsnwprintf_s swprintf_s sprintf_s _wsplitpath_s _wstat64i32 _snwprintf_s free _wcsnicmp malloc realloc memcmp memcpy memset strcmp strncmp _localtime64_s _wgetcwd calloc _wfullpath _waccess_s fread fseek wcsncpy_s wcsncat_s __CxxFrameHandler3 wcsrchr wcscat_s wcscpy_s _wcsdup wcschr _wmakepath_s wcsstr fopen ferror fwrite ftell _lock _unlock _calloc_crt __dllonexit _onexit ??1type_info@@UAE@XZ ?terminate@@YAXXZ _vsnprintf_s _crt_debugger_hook __crtUnhandledException __crtTerminateProcess __CppXcptFilter _amsg_exit _malloc_crt _initterm _initterm_e

shlwapi

PathFindExtensionW PathIsRelativeW PathFindFileNameW PathStripToRootW PathAddBackslashW PathFileExistsW PathIsRootW PathRenameExtensionW PathRemoveBackslashW PathStripPathW PathMakePrettyW PathIsUNCW PathIsSameRootW

DE6/resources/libraries/AdobePIM.dll

IMPHASH eb85531a0232873d71bb8c18b90e2c2e
SHA256 19220dd05f6aca5f103a1fad59cae3681fac676c6fb7f03b1cee8529a742cbba
MD5 80070baba696da53a85f4c9484d11c8d
SHA1 e8e9b7fcce389723f33fc1fd0673e2bb198f5e01
SHA512 fa161004976f118e788513e767d806891f487b549ec18d08e9df2be44ccc46c2af46e73f30e00950723fb9f60be3e629ddf88e8ea378c33cdc6b82bb3fe31812
SSDEEP 24576:eUNDHrN8P/R588WVBdysOFWO+5rLhRT7Y/KTojNJi:THrGMVG0JbY/KToNJi
TLSH
T185558D11B392C171E8EB11F01A7D7F9E193C6915072489DBE3D82C996D301D2BB3BBA6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

af:fa:ee:3b:ec:13:03:da:e2:64:75:bb:aa:24:f8:dd:71:76:5e:66

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Chains

Apr 28, 2014

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Serial Number

1d:37:83:b3:de:cd:5d:bb:16:e3:3c:d3:a6:b3:bf:db

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 20, 2014 - Feb 21, 2015

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

1

Major OS version

5

Entry point

790781

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\builds\AAM\8.0\source\dev\aamcore\target\win\Release\resources\AdobePIM.pdb

msi

ord147 ord74 ord145

kernel32

CreateDirectoryW GetTempPathW GetDateFormatW GetTimeFormatW GetLocalTime OpenProcess Process32FirstW Process32NextW CreateToolhelp32Snapshot FindFirstFileW CreateProcessW MoveFileExW SetEvent CopyFileW GetVersionExW GetModuleFileNameW FindClose ResetEvent CreateEventW FindNextFileW GetDiskFreeSpaceExW SetFileAttributesW GetFileSize GetCurrentProcess GetModuleHandleW WriteFile GetExitCodeProcess GetFileAttributesW ReadFile CreateFileW FlushFileBuffers SetLastError GetProcAddress RemoveDirectoryW lstrcmpiW DeleteFileW GetSystemTime GetFullPathNameW GetFullPathNameA CreateFileA SetFilePointer SetEndOfFile FreeLibrary QueryPerformanceCounter UnlockFile LockFile GetTickCount GetSystemTimeAsFileTime FormatMessageA InitializeCriticalSection LoadLibraryW GetFileAttributesA LeaveCriticalSection LockFileEx EnterCriticalSection GetDiskFreeSpaceW LoadLibraryA GetDiskFreeSpaceA DeleteCriticalSection GetCurrentThreadId MultiByteToWideChar AreFileApisANSI DeleteFileA lstrlenW GetACP GetFileSizeEx lstrlenA DosDateTimeToFileTime SetFileTime lstrcatW GetFileTime LocalFileTimeToFileTime OpenMutexW WriteConsoleW SetStdHandle WideCharToMultiByte InterlockedDecrement InterlockedIncrement LocalFree GetCurrentProcessId CloseHandle ReleaseMutex HeapReAlloc OpenSemaphoreW LocalAlloc CreateSemaphoreW GetLastError ReleaseSemaphore Sleep WaitForSingleObject CreateMutexW InitializeCriticalSectionAndSpinCount SetEnvironmentVariableA GetCommandLineA OutputDebugStringW LoadLibraryExW GetConsoleCP SetFilePointerEx ReadConsoleW GetConsoleMode FreeEnvironmentStringsW GetEnvironmentStringsW GetModuleFileNameA GetFileType GetOEMCP IsValidCodePage GetProcessHeap GetStdHandle HeapSize GetModuleHandleExW IsProcessorFeaturePresent IsDebuggerPresent HeapFree HeapAlloc DecodePointer EncodePointer GetStringTypeW GetTimeZoneInformation ExitProcess EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetStartupInfoW TlsFree TlsSetValue TlsGetValue TlsAlloc TerminateProcess RaiseException GetTempPathA SetUnhandledExceptionFilter UnhandledExceptionFilter GetCPInfo RtlUnwind

user32

wsprintfW

advapi32

SetSecurityDescriptorDacl CreateWellKnownSid GetNamedSecurityInfoW SetNamedSecurityInfoW FreeSid SetEntriesInAclW AllocateAndInitializeSid InitializeSecurityDescriptor

shell32

SHGetPathFromIDListW SHGetFolderPathW SHGetFolderLocation SHGetSpecialFolderPathW SHCreateDirectoryExW

ole32

CoCreateInstance OleRun CoUninitialize CoInitialize StringFromGUID2 CoCreateGuid CLSIDFromProgID CLSIDFromString CoTaskMemFree

oleaut32

SysFreeString VariantInit VariantCopy VariantClear SysStringLen SysAllocString GetErrorInfo

shlwapi

PathRemoveExtensionW PathRemoveBackslashW PathIsFileSpecW PathFindFileNameW PathStripPathW PathRenameExtensionW PathRemoveFileSpecW PathIsDirectoryW PathFileExistsW PathAddExtensionW PathAppendW

DE6/resources/libraries/Adobe_Helperx32.exe

IMPHASH 439fbf994f6b0ba56021952f270747d0
SHA256 f97bce556ba68b72acaa939d1e0790bb270b10ebef7bfc21cbdc0919f0a89870
MD5 16cf579be82e6ef9c6a5411059c2c0af
SHA1 9cda20ee0903527d51e7729e3d4a2693b2250181
SHA512 09e79789e7d2d3ffe7803f0c32331b5dcbefdf1f8fe43babf7cb92afbe8695a374c770c6da91a35c60cc3c8f3e3494835daa2049b503414a484b0005696234da
SSDEEP 49152:2MjvqdovHpY0aw5QCzbVD59YCye8kF00wNp76VKT7:Tvq2vJY0a5CzxD5mde8kF00wNAk
TLSH
T122959C32F582D07EC5330331DA4CB369A2FDB7715A3A129762E11E2D2AB14939538B77
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

78:5f:ed:24:91:4f:66:b4:66:80:39:50:42:09:04:6c:af:7d:31:5b

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Chains

Apr 22, 2014

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Serial Number

1d:37:83:b3:de:cd:5d:bb:16:e3:3c:d3:a6:b3:bf:db

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 20, 2014 - Feb 21, 2015

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

1

Major OS version

5

Entry point

1140049

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\builds\RIBS\8.0\source\build\Adobe_Helperx64\bin\windows\Release\Adobe_Helperx64.pdb

kernel32

ResumeThread InterlockedIncrement lstrcmpA GlobalGetAtomNameW FileTimeToSystemTime EncodePointer DecodePointer GetSystemDirectoryW FreeResource GetModuleHandleA GlobalDeleteAtom LoadLibraryA GlobalAddAtomW GlobalFindAtomW FlushFileBuffers GetFullPathNameW LockFile SetEndOfFile SetFilePointer UnlockFile WriteFile DuplicateHandle CompareStringW GetUserDefaultUILanguage GlobalFlags InterlockedExchange GetVersionExW FileTimeToLocalFileTime GetFileAttributesExW GetFileSizeEx GetFileTime GetWindowsDirectoryW VerSetConditionMask VerifyVersionInfoW GetTempFileNameW Sleep GetTickCount GetProfileIntW SearchPathW VirtualProtect FindResourceExW IsDebuggerPresent IsProcessorFeaturePresent GetSystemTimeAsFileTime HeapFree HeapAlloc GetCommandLineW RaiseException RtlUnwind SetThreadPriority CreateThread ExitThread HeapSize HeapQueryInformation ExitProcess GetModuleHandleExW GetSystemInfo VirtualAlloc VirtualQuery SetStdHandle GetFileType GetStdHandle GetConsoleCP GetConsoleMode GetStartupInfoW IsValidCodePage GetOEMCP GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess GetTimeZoneInformation GetProcessHeap QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetStringTypeW ReadConsoleW SetFilePointerEx OutputDebugStringW GetDateFormatW GetTimeFormatW LCMapStringW WriteConsoleW SetEnvironmentVariableA FormatMessageA GetVersion OutputDebugStringA MulDiv GlobalSize FindResourceW SizeofResource LockResource LoadResource GetCurrentProcessId InterlockedDecrement LocalReAlloc GlobalFree GlobalUnlock GlobalHandle GlobalLock GlobalReAlloc GlobalAlloc TlsFree TlsSetValue TlsGetValue TlsAlloc DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection GetCurrentThreadId HeapReAlloc GetVolumeInformationW lstrcpyW lstrcmpiW SetCurrentDirectoryW FindClose GetCurrentDirectoryW lstrcmpW GetModuleFileNameW GetFileAttributesW FormatMessageW CopyFileW FindFirstFileW GetFileSize SetLastError GetLastError CreateFileW ReadFile WaitForSingleObject GetModuleHandleW LocalFree CloseHandle LocalAlloc GetCurrentProcess GetTempPathW MultiByteToWideChar GetACP WideCharToMultiByte GetProcAddress InitializeCriticalSectionAndSpinCount LoadLibraryW LoadLibraryExW FreeLibrary

advapi32

RegCloseKey RegCreateKeyExW RegDeleteKeyW RegOpenKeyExW RegDeleteValueW RegEnumKeyExW RegSetValueExW RegQueryValueExW CreateWellKnownSid SetEntriesInAclW GetNamedSecurityInfoW SetNamedSecurityInfoW

shell32

ShellExecuteW SHGetSpecialFolderLocation SHGetDesktopFolder DragQueryFileW DragFinish SHBrowseForFolderW SHAppBarMessage SHGetPathFromIDListW SHGetFileInfoW

ole32

IsAccelerator OleGetClipboard CoLockObjectExternal RegisterDragDrop RevokeDragDrop OleCreateMenuDescriptor OleTranslateAccelerator CoTaskMemAlloc OleLockRunning DoDragDrop OleDestroyMenuDescriptor CreateStreamOnHGlobal CoInitializeEx CoInitialize CoUninitialize CoCreateInstance ReleaseStgMedium OleDuplicateData CoTaskMemFree

oleaut32

SysAllocStringLen SysStringLen SystemTimeToVariantTime VariantTimeToSystemTime VariantClear SysFreeString VariantChangeType SysAllocString VarBstrFromDate VariantInit

msimg32

TransparentBlt AlphaBlend

shlwapi

PathRemoveFileSpecW PathStripPathW PathRemoveBackslashW PathFindFileNameW PathIsRelativeW PathFindExtensionW PathStripToRootW PathIsUNCW PathFileExistsW StrFormatKBSizeW

uxtheme

GetThemePartSize DrawThemeText DrawThemeParentBackground OpenThemeData CloseThemeData DrawThemeBackground GetThemeColor GetCurrentThemeName IsAppThemed IsThemeBackgroundPartiallyTransparent GetThemeSysColor GetWindowTheme

oleacc

LresultFromObject AccessibleObjectFromWindow CreateStdAccessibleObject

gdiplus

GdipDeleteGraphics GdipBitmapUnlockBits GdipBitmapLockBits GdipCreateBitmapFromScan0 GdipDrawImageI GdipCreateBitmapFromStream GdipGetImagePaletteSize GdipGetImagePalette GdipCreateBitmapFromHBITMAP GdipCreateFromHDC GdipSetInterpolationMode GdipGetImagePixelFormat GdipAlloc GdipFree GdiplusStartup GdiplusShutdown GdipCloneImage GdipDisposeImage GdipGetImageGraphicsContext GdipGetImageWidth GdipGetImageHeight GdipDrawImageRectI

imm32

ImmGetContext ImmGetOpenStatus ImmReleaseContext

winmm

PlaySoundW

user32

GetAsyncKeyState EnableScrollBar HideCaret InvertRect NotifyWinEvent CreatePopupMenu GetMenuDefaultItem MapVirtualKeyW LoadMenuW SetLayeredWindowAttributes EnumDisplayMonitors OpenClipboard CloseClipboard SetClipboardData EmptyClipboard DrawStateW DrawEdge DrawFrameControl SetWindowRgn UnionRect IsMenu UpdateLayeredWindow MonitorFromPoint BringWindowToTop LoadAcceleratorsW TranslateAcceleratorW InsertMenuItemW UnpackDDElParam ReuseDDElParam GetKeyNameTextW TrackMouseEvent GetComboBoxInfo IsZoomed GetSystemMenu PostThreadMessageW WaitMessage GetKeyboardLayout IsCharLowerW MapVirtualKeyExW ToUnicodeEx GetKeyboardState CreateAcceleratorTableW DestroyAcceleratorTable CopyAcceleratorTableW SetCursorPos SetRect SetParent LockWindowUpdate SetClassLongW GetDoubleClickTime CopyIcon SetMenuDefaultItem ModifyMenuW RegisterClipboardFormatW CharUpperBuffW FrameRect DrawMenuBar DefFrameProcW DefMDIChildProcW TranslateMDISysAccel IsClipboardFormatAvailable GetUpdateRect SubtractRect CreateMenu MapDialogRect DestroyCursor GetWindowRgn DrawIcon DrawTextExW DrawTextW RealChildWindowFromPoint GetDesktopWindow ClientToScreen DestroyIcon IsDialogMessageW SetWindowTextW CheckDlgButton MoveWindow ShowWindow GetMonitorInfoW MonitorFromWindow WinHelpW DeleteMenu SetScrollInfo LoadIconW MessageBeep GetTopWindow GetClassNameW GetClassLongW SetWindowLongW PtInRect EqualRect CopyRect MapWindowPoints ScreenToClient AdjustWindowRectEx GetWindowRect GetClientRect RemovePropW GetPropW SetPropW ShowScrollBar GetScrollRange SetScrollRange GetScrollPos SetScrollPos ScrollWindow RedrawWindow SetForegroundWindow GetForegroundWindow SetActiveWindow UpdateWindow TrackPopupMenu SetMenu GetMenu GetCapture SetFocus GetDlgCtrlID GetDlgItem EndDeferWindowPos DeferWindowPos BeginDeferWindowPos SetWindowPlacement GetWindowPlacement SetWindowPos DestroyWindow IsChild IsWindow CreateWindowExW GetClassInfoExW GetClassInfoW RegisterClassW CallWindowProcW DefWindowProcW PostMessageW GetMessageTime GetMessagePos RegisterWindowMessageW LoadBitmapW SetMenuItemInfoW GetMenuCheckMarkDimensions SetMenuItemBitmaps EnableMenuItem CheckMenuItem GetFocus GetWindowTextLengthW GetWindowTextW LoadCursorW GetSysColorBrush GetSysColor ReleaseDC GetDC GetSystemMetrics CallNextHookEx SetWindowsHookExW GetCursorPos ValidateRect GetKeyState GetActiveWindow IsWindowVisible PeekMessageW DispatchMessageW TranslateMessage GetMessageW RemoveMenu AppendMenuW InsertMenuW GetMenuItemCount GetMenuItemID GetSubMenu GetMenuState GetMenuStringW GetLastActivePopup GetWindowThreadProcessId GetParent GetWindowLongW MessageBoxW IsWindowEnabled EnableWindow SendMessageW UnhookWindowsHookEx SetCursor ShowOwnedPopups IntersectRect IsIconic PostQuitMessage SendDlgItemMessageA GetIconInfo DrawIconEx LoadImageW IsRectEmpty OffsetRect SetRectEmpty DrawFocusRect WindowFromPoint ReleaseCapture SetCapture GetNextDlgGroupItem GetNextDlgTabItem EndDialog CreateDialogIndirectParamW InvalidateRect KillTimer GetWindow SetTimer CopyImage SystemParametersInfoW InflateRect GetMenuItemInfoW DestroyMenu FillRect EndPaint BeginPaint GetWindowDC TabbedTextOutW GetScrollInfo GrayStringW CharUpperW

gdi32

OffsetWindowOrgEx ScaleViewportExtEx ScaleWindowExtEx CreateFontIndirectW GetTextExtentPoint32W CombineRgn CreateRectRgnIndirect PatBlt SetRectRgn DPtoLP CreatePalette GetNearestPaletteIndex GetPaletteEntries GetSystemPaletteEntries RealizePalette GetBkColor GetTextMetricsW CreateCompatibleBitmap CreateDIBitmap EnumFontFamiliesW GetTextCharsetInfo OffsetViewportOrgEx SetWindowOrgEx SetWindowExtEx SetViewportOrgEx SetViewportExtEx ExtTextOutW TextOutW CreateDCW GetDeviceCaps CreateBitmap MoveToEx SetTextColor GetObjectW DeleteObject BitBlt CreateCompatibleDC CreateHatchBrush CreatePen CreatePatternBrush CreateRectRgn CreateSolidBrush DeleteDC Escape ExcludeClipRect GetClipBox GetObjectType GetPixel GetStockObject GetViewportExtEx GetWindowExtEx IntersectClipRect LineTo PtVisible RectVisible RestoreDC SaveDC SelectClipRgn ExtSelectClipRgn SelectObject SelectPalette SetBkMode SetMapMode SetLayout GetLayout SetPolyFillMode SetROP2 SetBkColor CopyMetaFileW GetTextFaceW SetPixel StretchBlt CreateDIBSection GetViewportOrgEx LPtoDP SetDIBColorTable CreateEllipticRgn Ellipse GetTextColor CreatePolygonRgn Polygon Polyline Rectangle EnumFontFamiliesExW GetRgnBox OffsetRgn CreateRoundRectRgn RoundRect FrameRgn PtInRegion SetPixelV ExtFloodFill SetPaletteEntries FillRgn GetBoundsRect GetWindowOrgEx SetTextAlign

winspool.drv

ClosePrinter DocumentPropertiesW OpenPrinterW

DE6/resources/libraries/Adobe_Helperx64.exe

IMPHASH f67ddcb58feec6ca98a664808b9fe161
SHA256 d59b1947a812bf9b27ae9b975bc89b50df4cf99d5bed8b8f1b1278791a203bb8
MD5 3907d997503b5321ed1f4095d673e947
SHA1 b564ddceac1fb6284705dac6021af741b98eb0be
SHA512 b12a31d11f51670ebe984fb4cbe002efa98d3e7948a473c78e2a8e9368911ac2d1a14e6859ddf38e1db6f4b882b0248e28c91ede6f65778e40de78d22df676cb
SSDEEP 49152:Jx/R1da25e9k1Lic/4FQIFRgG/+Vbfs+OGrcVb3FfAS4GirajIDMzk:7MgfVzcVby5haIMY
TLSH
T1EDC57D5B6BA885E4D053D1BDC517960FDBF3B4660D30C3AF80A6069E5FB32625D2E322
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

0b:c3:f4:84:f2:94:9d:2f:ae:2a:6d:7c:e7:de:31:30:44:c7:a6:4a

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Chains

Apr 22, 2014

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Serial Number

1d:37:83:b3:de:cd:5d:bb:16:e3:3c:d3:a6:b3:bf:db

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 20, 2014 - Feb 21, 2015

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

0

Major OS version

6

Entry point

1515896

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\builds\RIBS\8.0\source\build\Adobe_Helperx64\bin\windows_x64\Release\Adobe_Helperx64.pdb

kernel32

GetCurrentThreadId SetThreadPriority ResumeThread lstrcmpA GlobalGetAtomNameW FileTimeToSystemTime EncodePointer DecodePointer GetSystemDirectoryW ActivateActCtx LoadLibraryExW GlobalDeleteAtom GlobalAddAtomW GlobalFindAtomW FlushFileBuffers GetFullPathNameW LockFile SetEndOfFile SetFilePointer UnlockFile WriteFile DuplicateHandle CompareStringW GetUserDefaultUILanguage GlobalFlags GetVersionExW FileTimeToLocalFileTime GetFileAttributesExW GetFileSizeEx GetFileTime GetWindowsDirectoryW VerSetConditionMask VerifyVersionInfoW GetTempFileNameW Sleep GetTickCount GetProfileIntW SearchPathW VirtualProtect FindResourceExW IsDebuggerPresent IsProcessorFeaturePresent GetSystemTimeAsFileTime HeapFree HeapAlloc GetCommandLineW RtlPcToFileHeader RaiseException RtlLookupFunctionEntry HeapReAlloc CreateThread ExitThread HeapSize HeapQueryInformation ExitProcess GetSystemInfo VirtualAlloc VirtualQuery SetStdHandle GetFileType GetStdHandle GetConsoleCP GetConsoleMode GetStartupInfoW IsValidCodePage GetOEMCP GetCPInfo RtlCaptureContext RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess GetTimeZoneInformation GetProcessHeap QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetStringTypeW ReadConsoleW SetFilePointerEx OutputDebugStringW GetDateFormatW GetTimeFormatW LCMapStringW WriteConsoleW SetEnvironmentVariableA FormatMessageA CreateActCtxW GetModuleHandleExW OutputDebugStringA MulDiv GlobalSize FindResourceW SizeofResource LockResource LoadResource GetCurrentProcessId LocalReAlloc GlobalFree GlobalUnlock GlobalHandle GlobalLock GlobalReAlloc GlobalAlloc TlsFree TlsSetValue TlsGetValue TlsAlloc DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection QueryActCtxW FindActCtxSectionStringW RtlUnwindEx DeactivateActCtx GetVolumeInformationW lstrcpyW lstrcmpiW SetCurrentDirectoryW FindClose GetCurrentDirectoryW lstrcmpW GetModuleFileNameW GetFileAttributesW FormatMessageW CopyFileW FindFirstFileW GetFileSize SetLastError GetLastError CreateFileW ReadFile WaitForSingleObject GetModuleHandleW LocalFree CloseHandle LocalAlloc GetCurrentProcess GetTempPathW MultiByteToWideChar GetACP WideCharToMultiByte GetProcAddress InitializeCriticalSectionAndSpinCount LoadLibraryW FreeResource FreeLibrary

advapi32

RegCloseKey RegCreateKeyExW RegDeleteKeyW RegOpenKeyExW RegDeleteValueW RegEnumKeyExW RegSetValueExW RegQueryValueExW CreateWellKnownSid SetEntriesInAclW GetNamedSecurityInfoW SetNamedSecurityInfoW

shell32

ShellExecuteW SHGetSpecialFolderLocation SHGetDesktopFolder DragQueryFileW DragFinish SHBrowseForFolderW SHAppBarMessage SHGetPathFromIDListW SHGetFileInfoW

ole32

IsAccelerator OleGetClipboard CoLockObjectExternal RegisterDragDrop RevokeDragDrop OleCreateMenuDescriptor OleTranslateAccelerator CoTaskMemAlloc OleLockRunning DoDragDrop OleDestroyMenuDescriptor CreateStreamOnHGlobal CoInitializeEx CoInitialize CoUninitialize CoCreateInstance ReleaseStgMedium OleDuplicateData CoTaskMemFree

oleaut32

SysAllocStringLen SysStringLen SystemTimeToVariantTime VariantTimeToSystemTime VariantClear SysFreeString VariantChangeType SysAllocString VarBstrFromDate VariantInit

msimg32

TransparentBlt AlphaBlend

shlwapi

PathRemoveFileSpecW PathStripPathW PathRemoveBackslashW PathFindFileNameW PathIsRelativeW PathFindExtensionW PathStripToRootW PathIsUNCW PathFileExistsW StrFormatKBSizeW

uxtheme

GetThemePartSize DrawThemeText DrawThemeParentBackground OpenThemeData CloseThemeData DrawThemeBackground GetThemeColor GetCurrentThemeName IsAppThemed IsThemeBackgroundPartiallyTransparent GetThemeSysColor GetWindowTheme

oleacc

LresultFromObject AccessibleObjectFromWindow CreateStdAccessibleObject

gdiplus

GdipDeleteGraphics GdipBitmapUnlockBits GdipBitmapLockBits GdipCreateBitmapFromScan0 GdipDrawImageI GdipCreateBitmapFromStream GdipGetImagePaletteSize GdipGetImagePalette GdipCreateBitmapFromHBITMAP GdipCreateFromHDC GdipSetInterpolationMode GdipGetImagePixelFormat GdipAlloc GdipFree GdiplusStartup GdiplusShutdown GdipCloneImage GdipDisposeImage GdipGetImageGraphicsContext GdipGetImageWidth GdipGetImageHeight GdipDrawImageRectI

imm32

ImmGetContext ImmGetOpenStatus ImmReleaseContext

winmm

PlaySoundW

user32

GetIconInfo MessageBeep GetAsyncKeyState EnableScrollBar HideCaret InvertRect NotifyWinEvent CreatePopupMenu GetMenuDefaultItem MapVirtualKeyW LoadMenuW SetLayeredWindowAttributes EnumDisplayMonitors OpenClipboard CloseClipboard SetClipboardData EmptyClipboard DrawStateW DrawEdge DrawFrameControl SetWindowRgn UnionRect IsMenu UpdateLayeredWindow MonitorFromPoint BringWindowToTop LoadAcceleratorsW TranslateAcceleratorW InsertMenuItemW UnpackDDElParam ReuseDDElParam GetKeyNameTextW TrackMouseEvent GetComboBoxInfo IsZoomed GetSystemMenu PostThreadMessageW WaitMessage GetKeyboardLayout IsCharLowerW MapVirtualKeyExW ToUnicodeEx GetKeyboardState CreateAcceleratorTableW DestroyAcceleratorTable CopyAcceleratorTableW SetCursorPos SetRect SetParent LockWindowUpdate SetClassLongPtrW GetDoubleClickTime CopyIcon SetMenuDefaultItem ModifyMenuW RegisterClipboardFormatW CharUpperBuffW FrameRect DrawMenuBar DefFrameProcW DefMDIChildProcW TranslateMDISysAccel IsClipboardFormatAvailable GetUpdateRect SubtractRect CreateMenu MapDialogRect DestroyCursor GetWindowRgn DrawIcon RealChildWindowFromPoint GetDesktopWindow ClientToScreen CharUpperW DestroyIcon SetWindowTextW CheckDlgButton MoveWindow ShowWindow GetMonitorInfoW MonitorFromWindow WinHelpW GetScrollInfo ShowOwnedPopups LoadIconW GetWindow DrawIconEx GetClassNameW GetClassLongPtrW SetWindowLongPtrW GetWindowLongPtrW SetWindowLongW PtInRect EqualRect CopyRect MapWindowPoints ScreenToClient AdjustWindowRectEx GetWindowRect GetClientRect RemovePropW GetPropW SetPropW ShowScrollBar GetScrollRange SetScrollRange GetScrollPos SetScrollPos ScrollWindow RedrawWindow SetForegroundWindow GetForegroundWindow SetActiveWindow UpdateWindow TrackPopupMenu SetMenu GetMenu GetCapture SetFocus GetDlgCtrlID GetDlgItem EndDeferWindowPos DeferWindowPos BeginDeferWindowPos SetWindowPlacement GetWindowPlacement SetWindowPos DestroyWindow IsChild IsWindow CreateWindowExW GetClassInfoExW GetClassInfoW RegisterClassW CallWindowProcW DefWindowProcW PostMessageW GetMessageTime GetMessagePos RegisterWindowMessageW LoadBitmapW SetMenuItemInfoW GetMenuCheckMarkDimensions SetMenuItemBitmaps EnableMenuItem CheckMenuItem GetFocus GetWindowTextLengthW GetWindowTextW LoadCursorW GetSysColorBrush GetSysColor ReleaseDC GetDC GetSystemMetrics CallNextHookEx SetWindowsHookExW GetCursorPos ValidateRect GetKeyState GetActiveWindow IsWindowVisible PeekMessageW DispatchMessageW TranslateMessage GetMessageW RemoveMenu AppendMenuW InsertMenuW GetMenuItemCount GetMenuItemID GetSubMenu GetMenuState GetMenuStringW GetLastActivePopup GetWindowThreadProcessId GetParent GetWindowLongW MessageBoxW IsWindowEnabled EnableWindow SendMessageW UnhookWindowsHookEx IntersectRect IsIconic PostQuitMessage SendDlgItemMessageA CopyImage SystemParametersInfoW LoadImageW IsRectEmpty OffsetRect SetRectEmpty DrawFocusRect WindowFromPoint ReleaseCapture SetCapture GetNextDlgGroupItem GetNextDlgTabItem EndDialog CreateDialogIndirectParamW InvalidateRect KillTimer SetTimer DeleteMenu GetTopWindow SetCursor InflateRect GetMenuItemInfoW DestroyMenu FillRect EndPaint BeginPaint GetWindowDC TabbedTextOutW GrayStringW DrawTextExW SetScrollInfo DrawTextW IsDialogMessageW

gdi32

OffsetWindowOrgEx ScaleViewportExtEx ScaleWindowExtEx CreateFontIndirectW GetTextExtentPoint32W CombineRgn CreateRectRgnIndirect PatBlt SetRectRgn DPtoLP CreatePalette GetNearestPaletteIndex GetPaletteEntries GetSystemPaletteEntries RealizePalette GetBkColor GetTextMetricsW CreateCompatibleBitmap CreateDIBitmap EnumFontFamiliesW GetTextCharsetInfo OffsetViewportOrgEx SetWindowOrgEx SetWindowExtEx SetViewportOrgEx SetViewportExtEx ExtTextOutW TextOutW CreateDCW GetDeviceCaps CreateBitmap MoveToEx SetTextColor GetObjectW DeleteObject BitBlt CreateCompatibleDC CreateHatchBrush CreatePen CreatePatternBrush CreateRectRgn CreateSolidBrush DeleteDC Escape ExcludeClipRect GetClipBox GetObjectType GetPixel GetStockObject GetViewportExtEx GetWindowExtEx IntersectClipRect LineTo PtVisible RectVisible RestoreDC SaveDC SelectClipRgn ExtSelectClipRgn SelectObject SelectPalette SetBkMode SetMapMode SetLayout GetLayout SetPolyFillMode SetROP2 SetBkColor CopyMetaFileW GetTextFaceW SetPixel StretchBlt CreateDIBSection GetViewportOrgEx LPtoDP SetDIBColorTable CreateEllipticRgn Ellipse GetTextColor CreatePolygonRgn Polygon Polyline Rectangle EnumFontFamiliesExW GetRgnBox OffsetRgn CreateRoundRectRgn RoundRect FrameRgn PtInRegion SetPixelV ExtFloodFill SetPaletteEntries FillRgn GetBoundsRect GetWindowOrgEx SetTextAlign

winspool.drv

ClosePrinter DocumentPropertiesW OpenPrinterW

DE6/resources/libraries/CustomHook_Helperx64.exe

IMPHASH e1f7574f343d2db22de69a871d03bacf
SHA256 9959e8db57915e2f4be2d0548359fca24b5971c105910d59b3329a8d3de8342d
MD5 a2a82f33f4fcf503c3c21405413b087d
SHA1 c9e9eaf5cf167ebd1e3105ee81d78da5ac0f5695
SHA512 a79e7e15149471ef4a0cdf0ec93b1d477e46793ae414d78135b271131149df84ffed3d94fc83fd95e15c7337040afd5a5edb1c5c6f0c931e23e323a743b5bae0
SSDEEP 6144:CftbNLDBUThc8LZ8MgxWT/OsNAUg0KopaN24vovRbdbegIE:CbLDBUiSB+0Ko3f
TLSH
T1AC843A09F76448E5D467C27C89668645E3B27C6A4B70AFCF22A4431E2F33AE05D3E721
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

67:59:9f:ce:6f:f0:63:42:aa:d2:1b:1d:fa:bb:ba:d4:dd:e1:cc:e2

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Chains

Apr 22, 2014

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Serial Number

1d:37:83:b3:de:cd:5d:bb:16:e3:3c:d3:a6:b3:bf:db

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 20, 2014 - Feb 21, 2015

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

0

Major OS version

6

Entry point

121180

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\builds\RIBS\8.0\source\build\CustomHook_Helperx64\vc\x64\Release\CustomHook_Helperx64.pdb

shlwapi

PathStripToRootW PathRemoveExtensionW PathIsDirectoryW PathIsFileSpecW PathRemoveFileSpecW PathAddExtensionW PathAppendW PathIsUNCW PathIsRelativeW PathStripPathW PathRemoveBackslashW PathRenameExtensionW PathFileExistsW PathFindFileNameW

kernel32

OutputDebugStringW LoadLibraryExW HeapReAlloc ReadConsoleW GetConsoleMode WideCharToMultiByte GetACP MultiByteToWideChar GetDriveTypeW MoveFileExW FormatMessageW ReadFile GetModuleFileNameW CreateFileW lstrcmpW lstrlenW GetTempPathW GetLastError GetCurrentDirectoryW SetLastError LocalAlloc CloseHandle DeleteFileW GetConsoleCP GetCurrentProcess FreeLibrary CreateProcessW GetModuleHandleW LoadLibraryW WaitForSingleObject GetExitCodeProcess GetProcAddress IsProcessorFeaturePresent CreateEventA SetEvent GetCommandLineW QueryPerformanceCounter InitializeCriticalSection LeaveCriticalSection EnterCriticalSection DeleteCriticalSection SetFilePointer WriteFile GetFileSizeEx GetCurrentThreadId GetDateFormatW GetTimeFormatW GetLocalTime CreateMutexW OpenMutexW ReleaseMutex FreeEnvironmentStringsW SetFilePointerEx SetStdHandle SetEndOfFile FlushFileBuffers WriteConsoleW SetEnvironmentVariableA FormatMessageA LocalFree GetEnvironmentStringsW GetCurrentProcessId GetOEMCP IsValidCodePage GetProcessHeap GetFileType GetStdHandle HeapSize GetModuleHandleExW ExitProcess EnumSystemLocalesW GetUserDefaultLCID GetStringTypeW EncodePointer DecodePointer Sleep GetSystemTimeAsFileTime HeapFree HeapAlloc IsDebuggerPresent GetFullPathNameW GetFileAttributesExW GetTimeZoneInformation RtlPcToFileHeader RaiseException RtlLookupFunctionEntry RtlUnwindEx GetCPInfo InitializeCriticalSectionAndSpinCount RtlCaptureContext RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale

advapi32

SetEntriesInAclW GetNamedSecurityInfoW SetNamedSecurityInfoW CreateWellKnownSid

shell32

SHGetFolderPathW SHGetPathFromIDListW SHGetFolderLocation CommandLineToArgvW SHCreateDirectoryExW

ole32

CoTaskMemFree

DE6/resources/libraries/EventMessages.dll

SHA256 381b6530ee2e60255e40b46b235ab4ca416dc5a517524a565ee6b242b83c8a17
MD5 ebd9f5c88089e0b3394de8bd11313164
SHA1 aeb4a3a06a78e1a107fc0ec99efba3189d430214
SHA512 af55774cfd4009afc6852596282c6b0fcc8e8625b7803c4e6f6f39cc3be5a5af5be809ec0923e5d127744b27bcb4b77c3dc1b86f6c25bd2a483095093735a0be
SSDEEP 192:mnYe+PjPrrAOP3BK/Vzr9ZCspE+TMorig74ze:mnYPLo9deeM2ye
TLSH
T1CCF1E9C71B346862DDCA8E70D2D7D93BAD31B3916FC4A4A650B980D02EC6FB03B5540E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

fc:9a:a6:1c:d0:93:88:21:2f:b6:8e:da:87:da:58:32:cc:dd:c1:3b

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Chains

Apr 22, 2014

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Serial Number

1d:37:83:b3:de:cd:5d:bb:16:e3:3c:d3:a6:b3:bf:db

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 20, 2014 - Feb 21, 2015

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

DE6/resources/libraries/TokenResolverx64.exe

IMPHASH 8e199d0ba77d88fec5d971be6478a5c2
SHA256 2949826944d7d70c06fb5893d836f7e319670c7a5def130302a9b1193781d094
MD5 5ab433b5d097437d9a424dad62a84198
SHA1 4a6342573b4f3ab0e3207c65438ddddc28aba9a1
SHA512 4c19829e451e723e077f0602401ec6c3dd002176618eb6a7a40ac133ef3998e9409cb715c74e51cc534dabe8f0082f0f2d3b9a0ac7c92d0f9a48fddb7a5b3af5
SSDEEP 1536:Oy93MbZFTTwnFA2kZ7mcNmEt8sQsWtedPV+ViNS15GZ/p:OyZIFTEnFA2kZ7Pdz9+VySyZ/p
TLSH
T14EB34B9B33E530F9E0B7C678C9A24945D772F87546719B8F5364028A1F632D09E3AB32
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

9a:8f:c6:19:08:20:07:66:d7:ed:63:4d:4a:93:47:4e:1e:c6:f6:de

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Chains

Apr 22, 2014

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Serial Number

1d:37:83:b3:de:cd:5d:bb:16:e3:3c:d3:a6:b3:bf:db

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 20, 2014 - Feb 21, 2015

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

2

Major OS version

5

Entry point

11812

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\builds\RIBS\8.0\source\build\TokenResolver\vc\x64\Release\TokenResolver.pdb

kernel32

WriteFile CreateFileW GetLastError CloseHandle WideCharToMultiByte GetACP MultiByteToWideChar WriteConsoleW SetStdHandle GetStringTypeW LCMapStringW EncodePointer DecodePointer ExitProcess GetModuleHandleExW GetProcAddress GetCommandLineW IsDebuggerPresent IsProcessorFeaturePresent HeapSize Sleep RtlUnwindEx GetStdHandle GetModuleFileNameW HeapFree EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount DeleteCriticalSection RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW LoadLibraryExW IsValidCodePage GetOEMCP GetCPInfo HeapAlloc RtlPcToFileHeader RaiseException GetCurrentThreadId GetProcessHeap GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW HeapReAlloc GetConsoleCP GetConsoleMode SetFilePointerEx OutputDebugStringW LoadLibraryW FlushFileBuffers

shell32

SHGetFolderPathW SHGetPathFromIDListW SHGetFolderLocation

ole32

CoTaskMemFree

DE6/resources/libraries/adobeFileVersioner.dll

IMPHASH c31e39c26cb35baa1c1d95d9983dcdea
SHA256 ceaa749128156b5d138873a5f005a03ecf89330eb135674d8a06d6ceec99518a
MD5 3fc1baafcbffcecb741cadb04e112f8a
SHA1 7482ad8649c4a4bf18f15395450838124f09bb62
SHA512 b46ce03b3ceb8cc27f25d83d887903375058ffdef2c4516dccf9a6f0a0c8c5a078cd29fc1dd460463874afe696b452c915cdf4d9c08a63167a9a2d987c2b6829
SSDEEP 6144:fTJ9A4mJKteONUOf7fDkIyq1E7URqkH8rOA:fT3tzNU6XP1E7Ug/rOA
TLSH
T16A447BA03680C539EDDE02B1997CAA5E40EDAEA24FB4C4C7E3D81E4D5D725C21B31767
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

b4:32:84:eb:5b:4b:05:e3:f5:f2:6a:4f:5c:5f:45:32:a3:5c:86:22

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Chains

Apr 22, 2014

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Serial Number

1d:37:83:b3:de:cd:5d:bb:16:e3:3c:d3:a6:b3:bf:db

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 20, 2014 - Feb 21, 2015

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

1

Major OS version

5

Entry point

141743

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

CreateFileW GetFileSize ReadFile CloseHandle MultiByteToWideChar WideCharToMultiByte GetACP Sleep InterlockedExchange InterlockedCompareExchange FreeLibrary LoadLibraryA LCMapStringW LCMapStringA GetUserDefaultLCID GetStringTypeExA WriteConsoleW SetStdHandle SetFilePointerEx GetConsoleMode GetConsoleCP HeapReAlloc EncodePointer DecodePointer RaiseException RtlUnwind GetCommandLineA GetCurrentThreadId GetStdHandle WriteFile GetModuleFileNameW IsProcessorFeaturePresent GetLastError HeapAlloc HeapFree InterlockedDecrement ExitProcess GetModuleHandleExW GetProcAddress HeapSize IsDebuggerPresent SetLastError InterlockedIncrement IsValidCodePage GetOEMCP GetCPInfo GetStringTypeW GetProcessHeap GetFileType InitializeCriticalSectionAndSpinCount DeleteCriticalSection GetStartupInfoW GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW OutputDebugStringW LoadLibraryExW LoadLibraryW EnterCriticalSection LeaveCriticalSection FlushFileBuffers

user32

LoadStringA

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

DE6/resources/libraries/patchw32.dll

IMPHASH 8f296cd7497fd33e575100bd64339788
SHA256 d8f7aa32b779ed7d8023fec951e7250f94f119a0ea4104f03285b7348c2312a7
MD5 bece436a1cad7464258d3a3d81ca27a3
SHA1 7504ecae3f9ba7d96c91bc102c2fd98b8d6f8475
SHA512 70c0db78cec2428f7fedb13a2b3b96af260f9eb3cfd0f2444b41f0b49906f65cf4a17abdef32b246e5e71d8592b88daf3b2e6b4606a55ba9e9d055e037889575
SSDEEP 6144:1B+qvXHzno7F9/wLssXxWYlrAOYg+s9k8LaVkr35VnEBUrj:1w0To7FFnsXxVlrA4JLaVkr35ZoCj
TLSH
T137347D82F9D481F0D4D82AF430362B766E77F90472B9C696DBC01C395CB7B119918B6E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:1 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

88:9b:f5:c9:cc:56:3e:e8:f5:54:f4:81:84:ac:59:0a:08:e8:75:8f

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Chains

Apr 22, 2014

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Serial Number

1d:37:83:b3:de:cd:5d:bb:16:e3:3c:d3:a6:b3:bf:db

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 20, 2014 - Feb 21, 2015

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

0

Major OS version

1

Entry point

142432

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

user32

wsprintfA DdeInitializeA DispatchMessageA OemToCharA PeekMessageA DdeUninitialize TranslateMessage CharToOemA DdeCreateDataHandle DdeDisconnect DdeClientTransaction DdeCreateStringHandleA DdeFreeStringHandle DdeConnect LoadStringA wvsprintfA

advapi32

RegCloseKey RegQueryInfoKeyA RegEnumValueA RegEnumKeyA RegEnumValueW RegSetValueExW RegEnumKeyW RegDeleteValueA RegDeleteValueW RegQueryValueExW RegOpenKeyExW RegCreateKeyExW RegDeleteKeyA RegDeleteKeyW RegEnumKeyExA SetFileSecurityW GetFileSecurityW RegOpenKeyExA RegSetValueExA RegCreateKeyExA RegQueryValueExA FreeSid AccessCheck IsValidSecurityDescriptor SetSecurityDescriptorOwner SetSecurityDescriptorGroup SetSecurityDescriptorDacl AddAccessAllowedAce InitializeAcl GetLengthSid InitializeSecurityDescriptor AllocateAndInitializeSid DuplicateToken OpenProcessToken OpenThreadToken

ole32

CoUninitialize CoInitialize

version

GetFileVersionInfoSizeW GetFileVersionInfoA GetFileVersionInfoW GetFileVersionInfoSizeA VerQueryValueA

kernel32

ReleaseMutex GetPrivateProfileSectionA GetProfileStringA GetDiskFreeSpaceA VirtualAlloc GetSystemDirectoryA FlushFileBuffers CreateDirectoryA VirtualFree DeleteFileW GetFileType MoveFileW GetDriveTypeW GetCommandLineA SetStdHandle ExitProcess GetCurrentProcessId GetCPInfo GetOEMCP GetACP GetTimeZoneInformation GetStartupInfoA GlobalFree GlobalAlloc MulDiv GetVersion FreeLibrary GetDriveTypeA GetProcAddress LoadLibraryA SetEndOfFile SetFilePointer CloseHandle UnmapViewOfFile MapViewOfFile CreateFileMappingA GetFileSize CreateFileA GetWindowsDirectoryA GetShortPathNameA GetFullPathNameA MoveFileExW MoveFileExA CopyFileA GetFileAttributesA GetModuleFileNameA MoveFileA SetEnvironmentVariableA GetTempPathA SetErrorMode CreateMutexA SetFileApisToANSI CreateFileW AreFileApisANSI WaitForSingleObject LocalFree LocalAlloc GetCurrentProcess GetLastError GetCurrentThread WriteFile lstrlenA ReadFile SetNamedPipeHandleState WaitNamedPipeA GetLocalTime SetCurrentDirectoryW GetEnvironmentStrings WideCharToMultiByte GetProfileSectionA FindNextFileW FindClose GetPrivateProfileStringA GetSystemTime DeleteFileA SetFileAttributesA WriteProfileStringA WriteProfileSectionA WritePrivateProfileStringA WritePrivateProfileSectionA WriteProfileStringW WritePrivateProfileStringW CopyFileW GetExitCodeProcess CreateProcessA lstrcmpiA SystemTimeToFileTime GetSystemInfo LockResource LoadResource FindResourceA SetFileApisToOEM MultiByteToWideChar GetVolumeInformationA SetEnvironmentVariableW GetCurrentDirectoryW FindFirstFileW FindFirstFileA FindNextFileA FileTimeToSystemTime FileTimeToLocalFileTime LocalFileTimeToFileTime GetModuleHandleA SetFileAttributesW SetFileTime GetFileAttributesW GetShortPathNameW GetFullPathNameW GetStdHandle RaiseException RemoveDirectoryW RemoveDirectoryA GetCurrentDirectoryA SetCurrentDirectoryA RtlUnwind CreateDirectoryW GetLogicalDrives

Name

.text

Size

173KB

Virtual Size

173KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

35KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

296B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

14KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

440B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

13KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

DE6/resources/libraries/updaterinventory.dll

IMPHASH bad3015008dc3e428fc873c464835fbd
SHA256 5c39b46809e5d7a3eed9102d6863dff7f6fe9e26010f9f84e94a9838c0826b96
MD5 43b9b277bfbd5f5159bf9d033abccc69
SHA1 17301a2eb7f99ed7bd5455276a7c8a9a76295bba
SHA512 b8414e8084cbe202909ada8626d9ee883b97dd21b0cb4e0de26f1571c2fb69e3444a362884a54148a874eff52100342e890b89924666335fbf75af2cb32d0e86
SSDEEP 6144:oO1SJIndl6FIJ+Ki+vBRcOS6yWjzOR2IKLA4ZxA/4HR21AwUt:oO1SJWQsc16njzOgn84ZxAig1xUt
TLSH
T175A4AD11B9C1C071E86E02B0722DAB2605BDBDB14B698AD7E3D8AD4F1F726C15B31B17
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

bd:68:cb:48:b8:25:1d:f3:46:e4:b7:a3:86:fd:7d:63:d5:e8:d2:b9

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Chains

Apr 22, 2014

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Serial Number

1d:37:83:b3:de:cd:5d:bb:16:e3:3c:d3:a6:b3:bf:db

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 20, 2014 - Feb 21, 2015

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

1

Major OS version

5

Entry point

109034

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\P4\garuda_1970\oobe\8.0\dev\updater\build\updaterinventory\vc\outdir-Release\updaterinventory.pdb

kernel32

EncodePointer DecodePointer GetSystemTimeAsFileTime GetCommandLineA GetCurrentThreadId IsDebuggerPresent IsProcessorFeaturePresent ExitProcess GetModuleHandleExW GetProcAddress HeapSize Sleep GetStdHandle WriteFile GetModuleFileNameW RaiseException InterlockedIncrement IsValidCodePage GetACP GetOEMCP GetCPInfo SetLastError GetTimeZoneInformation WideCharToMultiByte GetFileType DeleteCriticalSection GetStartupInfoW GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW EnterCriticalSection LeaveCriticalSection LoadLibraryExW MultiByteToWideChar HeapReAlloc RtlUnwind OutputDebugStringW LoadLibraryW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetStringTypeW GetConsoleCP GetConsoleMode SetFilePointerEx SetStdHandle WriteConsoleW FlushFileBuffers CreateFileW SetEnvironmentVariableA GetLongPathNameW GetTempPathW LocalFree CreateDirectoryW RemoveDirectoryW SetFileAttributesW DeleteFileW CopyFileW MoveFileW GetVersionExW SetFilePointer SetEndOfFile ReadConsoleW LocalAlloc GetLastError GetProcessHeap HeapFree HeapAlloc CreateThread GetExitCodeThread InitializeCriticalSectionAndSpinCount TerminateThread WaitForSingleObject InterlockedDecrement CloseHandle FindNextFileW FindClose GetCurrentProcess FindFirstFileW ReadFile

advapi32

SetNamedSecurityInfoW CreateWellKnownSid GetSecurityDescriptorDacl RegOpenKeyExW RegSetKeySecurity SetEntriesInAclW RegDeleteValueW RegGetKeySecurity SetSecurityDescriptorDacl InitializeSecurityDescriptor RegQueryValueExW RegSetValueExW RegCloseKey RegCreateKeyExW

shell32

SHFileOperationW SHGetSpecialFolderLocation SHGetMalloc SHGetPathFromIDListW

ole32

CoInitializeSecurity CoTaskMemFree CoInitializeEx CoUninitialize CoCreateInstance CoInitialize

oleaut32

VariantInit VariantClear SysAllocString SysFreeString

shlwapi

PathIsFileSpecW PathFileExistsW PathIsDirectoryW PathRemoveFileSpecW

DE6/resources/uninstall/Uninstall.db

SHA256 f40f0c31f4c9c46e73154b4a53e52259874270c1bf99a672bb3103be1baf09e8
MD5 fb12635a53615a05ad7d96fc663b6bdd
SHA1 780a92361b39546b03cf98ae9e5e4ed15523b5f3
SHA512 5fe3ffc32a5fc133c713f9b6206a70316c3e068a2405f2cd4fdf0b34654be70041b80dbeaa9f454ea28f4bf04cda2d2a598d82a821552acb8200971a561be7db
SSDEEP 768:TOUTP61NQUQRGVUZOEWGpg6hRRU8Qd4qRPAnBeKPTvG5MzFV1ASj:2JMz
TLSH
T16D638CCF5F1A3212C5E14131DAD203E36C3C565EA77A66D03AA211F2BEA20B775715F8
MD5 SHA1 SHA512 SSDEEP TLSH

PlatformUtil.exe

IMPHASH 7fb64253751cf3b9f4074f344eb13385
SHA256 0bb74165565a1364397c5faa880fc2fcde118317d4f99de8b3533e5ed452bf4b
MD5 0f89e635468c55c171914a4f10d487f1
SHA1 b200c875f5e9e3d172c38db061d658ca33ae1c7d
SHA512 171bb4d90592a353b1de5e98e523bd52cc5bbaba1d78c766d7ee76d1e34cf8238f555d8c412ff49883f8f007aee5496038ef228e907bb9481e5676f7acea08b8
SSDEEP 384:Pe9XXlYs1ro22NjuqQmaCimaP9E4owMpvG/h5acnYPLo9deeMCJiy:olnrozNjuIaCjaPN+pvG/jnJLJn
TLSH
T110D25D137A9A4672E886D6B019B1D32A54F7FD722F2461DBE291426D1FA4BD01F3320F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

18:22:ac:aa:28:6b:eb:78:d5:79:21:7f:9e:d8:00:73:97:f3:31:47

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Chains

Apr 22, 2014

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Serial Number

1d:37:83:b3:de:cd:5d:bb:16:e3:3c:d3:a6:b3:bf:db

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 20, 2014 - Feb 21, 2015

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

1

Major OS version

5

Entry point

12820

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\builds\RIBS\8.0\source\build\PlatformUtil\vc\Release\PlatformUtil.pdb

kernel32

GetCommandLineW FreeConsole GetConsoleWindow GetStdHandle AttachConsole LocalFree lstrlenW GetCurrentProcessId QueryPerformanceCounter IsProcessorFeaturePresent GetSystemTimeAsFileTime IsDebuggerPresent DecodePointer EncodePointer GetCurrentThreadId

user32

SendMessageW

shell32

CommandLineToArgvW

msvcp110

?_BADOFF@std@@3_JB ?id@?$codecvt@_WDH@std@@2V0locale@2@A ??1_Lockit@std@@QAE@XZ ??0_Lockit@std@@QAE@H@Z ?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ ?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z ??_7?$basic_ostream@_WU?$char_traits@_W@std@@@std@@6B@ ?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXXZ ?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W00@Z ?getloc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QBE?AVlocale@2@XZ ??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ ??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z ??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ ?clear@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z ?write@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@PB_W_J@Z ?_Add_vtordisp2@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAEXXZ ??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ ?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z ?_Add_vtordisp1@?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAEXXZ ??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ ?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z ?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z ?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ ??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ ?_Getcat@?$codecvt@_WDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z ?unshift@?$codecvt@_WDH@std@@QBEHAAHPAD1AAPAD@Z ?out@?$codecvt@_WDH@std@@QBEHAAHPB_W1AAPB_WPAD3AAPAD@Z ?in@?$codecvt@_WDH@std@@QBEHAAHPBD1AAPBDPA_W3AAPA_W@Z ?always_noconv@codecvt_base@std@@QBE_NXZ ??Bid@locale@std@@QAEIXZ ?_Xlength_error@std@@YAXPBD@Z ?_Syserror_map@std@@YAPBDH@Z ?_Xbad_alloc@std@@YAXXZ ?_Winerror_map@std@@YAPBDH@Z ?_Xout_of_range@std@@YAXPBD@Z

mpr

WNetGetUniversalNameW

msvcr110

_purecall ??3@YAXPAX@Z _open_osfhandle ??2@YAPAXI@Z _fdopen wprintf ??0bad_cast@std@@QAE@PBD@Z ??0bad_cast@std@@QAE@ABV01@@Z ??0exception@std@@QAE@ABV01@@Z fputwc _unlock_file ungetwc ungetc fgetpos _fseeki64 fflush fgetc fsetpos wcsstr _lock_file fgetwc memcpy_s fwrite wcsncmp _vsnwprintf_s fclose _lock _unlock _calloc_crt __dllonexit _onexit ??1type_info@@UAE@XZ _crt_debugger_hook __crtUnhandledException __crtTerminateProcess _XcptFilter __crtGetShowWindowMode _amsg_exit __wgetmainargs __set_app_type exit _exit _cexit _configthreadlocale __setusermatherr _initterm_e _initterm _wcmdln _fmode _commode _except_handler4_common ?terminate@@YAXXZ __crtSetUnhandledExceptionFilter _invoke_watson _controlfp_s __iob_func memmove ??1bad_cast@std@@UAE@XZ _CxxThrowException __CxxFrameHandler3 memcpy setvbuf

Setup.exe

IMPHASH 5a555336dc1b94aec42bf4abff26a676
SHA256 8eb222feece9667f82a7c8f460c6209fd171ca9b76051170a563f54d0e3235cd
MD5 6a602860a7ce108190e42d6808fe2b63
SHA1 f9fec936e4adb6f9befe15c1bd7e83adeca2375c
SHA512 0bcb029823714565c003f3bc8e6f1c55336de4857a90dc93ad60509d443450a8eacaafefccc6b58482e65beb578c3d1ac3f0ba0f82d4109645c1f0d6591727ee
SSDEEP 12288:IOAsUYLs2TUNI3IyeQsgLDdYpWorwOW9xFTxfdwIsTMGeIdi4/+:/jUNILeQsgLxYQorwOuvsTMad9/+
TLSH
T173D4BE127613E036C8A191F05ABC9F52987DBC350B2B44DBA3C46E995D708D17F3A3AB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

ba:3f:20:87:0c:05:d2:e0:ad:95:d2:03:3b:dc:da:61:13:ae:b5:06

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Chains

Apr 22, 2014

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Serial Number

1d:37:83:b3:de:cd:5d:bb:16:e3:3c:d3:a6:b3:bf:db

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 20, 2014 - Feb 21, 2015

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

1

Major OS version

5

Entry point

385042

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\builds\RIBS\8.0\source\build\Setup\vc\Release\Setup.pdb

mpr

WNetAddConnection2W WNetCancelConnection2W

msvcp110

?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z ?_Add_vtordisp2@?$basic_ostream@DU?$char_traits@D@std@@@std@@UAEXXZ ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z ?_Add_vtordisp1@?$basic_ios@DU?$char_traits@D@std@@@std@@UAEXXZ ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ ?_Orphan_all@_Container_base0@std@@QAEXXZ ??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ ??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ ?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ ?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W00@Z ?_Add_vtordisp2@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAEXXZ ?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z ??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ ?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z ?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ ?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z ?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z ?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z ?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ ?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ ?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ ?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ ??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z ?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z ?id@?$codecvt@_WDH@std@@2V0locale@2@A ??1_Lockit@std@@QAE@XZ ??0_Lockit@std@@QAE@H@Z ?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ ?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z ?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXXZ ?getloc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QBE?AVlocale@2@XZ ??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z ?getline@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@PA_W_J@Z ?_Add_vtordisp1@?$basic_istream@_WU?$char_traits@_W@std@@@std@@UAEXXZ ??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UAE@XZ ?_Add_vtordisp2@?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAEXXZ ?_Getcat@?$codecvt@_WDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z ?unshift@?$codecvt@_WDH@std@@QBEHAAHPAD1AAPAD@Z ?out@?$codecvt@_WDH@std@@QBEHAAHPB_W1AAPB_WPAD3AAPAD@Z ?in@?$codecvt@_WDH@std@@QBEHAAHPBD1AAPBDPA_W3AAPA_W@Z ?always_noconv@codecvt_base@std@@QBE_NXZ ??Bid@locale@std@@QAEIXZ ??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z ??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@K@Z ??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@ ?_Winerror_map@std@@YAPBDH@Z ?_Syserror_map@std@@YAPBDH@Z ?_BADOFF@std@@3_JB ?_Xbad_alloc@std@@YAXXZ ?_Xout_of_range@std@@YAXPBD@Z ?_Xlength_error@std@@YAXPBD@Z ?uncaught_exception@std@@YA_NXZ ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ

msvcr110

wcscpy_s _open _time64 srand rand memchr _wsplitpath_s ??0exception@std@@QAE@ABV01@@Z ??0exception@std@@QAE@ABQBD@Z ??1exception@std@@UAE@XZ ?what@exception@std@@UBEPBDXZ swprintf_s ??_V@YAXPAX@Z free wcsncpy_s ??2@YAPAXI@Z ??3@YAXPAX@Z _purecall memmove _write _controlfp_s _invoke_watson __crtSetUnhandledExceptionFilter _except_handler4_common _vsnprintf_s __crtTerminateProcess __crtUnhandledException _crt_debugger_hook ?terminate@@YAXXZ ??1type_info@@UAE@XZ _onexit __dllonexit _calloc_crt _unlock _lock _commode _fmode _wcmdln _initterm _initterm_e __setusermatherr _configthreadlocale _cexit _exit exit __set_app_type __wgetmainargs _amsg_exit __crtGetShowWindowMode _XcptFilter _ftime64_s _wrename wcsftime wcstombs _wopen _lseeki64 sprintf _errno strerror _close strncpy_s wcsncat_s _waccess_s _wfullpath calloc _wgetcwd strncmp realloc wcslen strstr __CxxFrameHandler3 _CxxThrowException fread strlen strcmp strcpy memset memcmp memcpy fwrite memcpy_s fgetwc _lock_file fsetpos fgetc fflush _fseeki64 fgetpos ungetc ungetwc _unlock_file fputwc ??0bad_cast@std@@QAE@ABV01@@Z ??0bad_cast@std@@QAE@PBD@Z ??1bad_cast@std@@UAE@XZ _fdopen _open_osfhandle setvbuf __iob_func _vsnwprintf_s _localtime64_s fclose atoi _wfopen_s fgetws malloc

mfc110u

ord12760 ord10278 ord12085 ord8230 ord989 ord6723 ord2154 ord3794 ord5789 ord12077 ord10224 ord7505 ord2432 ord12374 ord12375 ord12697 ord7770 ord14415 ord9248 ord4093 ord4031 ord12779 ord7789 ord1985 ord11820 ord11821 ord14287 ord12364 ord7847 ord14487 ord6218 ord14489 ord6220 ord4528 ord7844 ord8169 ord14409 ord5233 ord2194 ord8314 ord9059 ord10095 ord8062 ord12089 ord12057 ord2254 ord8064 ord5285 ord7563 ord7572 ord5109 ord5287 ord5131 ord5638 ord5401 ord9200 ord5635 ord5425 ord5128 ord14488 ord6219 ord1463 ord13732 ord2335 ord2331 ord7573 ord2355

kernel32

FlushFileBuffers AttachConsole GetStdHandle FreeConsole SetDllDirectoryW GetCommandLineW SetEvent CreateEventA InterlockedDecrement GetFileSizeEx GetVersionExW GetCurrentThread IsProcessorFeaturePresent GetExitCodeProcess LoadLibraryW OpenProcess WaitForSingleObject GetCurrentProcess CreateProcessW FreeLibrary lstrcpyW SetFileAttributesW LocalFree DeleteFileW CloseHandle lstrcmpiW LocalAlloc SetLastError GetCurrentDirectoryW GetLastError GetTempPathW lstrlenW CreateFileW GetModuleFileNameW ReadFile GetFileAttributesW GetFileSize DeleteCriticalSection GetProcAddress MultiByteToWideChar GetACP WideCharToMultiByte GetModuleHandleW AreFileApisANSI GetDateFormatW GetTimeFormatW GetLocalTime CreateMutexW OpenMutexW ReleaseMutex EncodePointer DecodePointer IsDebuggerPresent CreateFileA DeleteFileA GetDiskFreeSpaceA GetDiskFreeSpaceW GetFileAttributesA GetFullPathNameA GetFullPathNameW LockFile LockFileEx SetEndOfFile SetFilePointer UnlockFile WriteFile QueryPerformanceCounter InitializeCriticalSection EnterCriticalSection LeaveCriticalSection Sleep InterlockedIncrement GetCurrentProcessId GetCurrentThreadId GetSystemTime GetSystemTimeAsFileTime GetTickCount GetVersionExA FormatMessageA LoadLibraryA GetTempPathA

user32

FindWindowW GetWindowThreadProcessId

advapi32

OpenProcessToken GetLengthSid IsValidSecurityDescriptor RevertToSelf AddAccessAllowedAce SetSecurityDescriptorOwner InitializeAcl ImpersonateSelf SetSecurityDescriptorDacl InitializeSecurityDescriptor AccessCheck SetSecurityDescriptorGroup OpenThreadToken SetEntriesInAclW GetNamedSecurityInfoW SetNamedSecurityInfoW CheckTokenMembership FreeSid AllocateAndInitializeSid DuplicateTokenEx CreateWellKnownSid

shell32

SHGetFolderLocation CommandLineToArgvW SHGetPathFromIDListW SHGetFolderPathW SHCreateDirectoryExW ord75

comctl32

InitCommonControlsEx

shlwapi

PathRemoveExtensionW PathMakePrettyW PathStripToRootW PathIsRelativeW PathFindFileNameW PathFileExistsW PathRenameExtensionW PathRemoveBackslashW PathAddExtensionW PathIsFileSpecW PathIsDirectoryW PathIsUNCW PathAppendW PathRemoveFileSpecW PathStripPathW

atl110

ord31

ole32

OleInitialize CLSIDFromProgID CoCreateInstance CoTaskMemFree OleUninitialize

oleaut32

SysFreeString SysAllocString VariantClear VariantInit SysStringLen

atl110.dll

IMPHASH e4a6b094cdcc4132831ddfe978d2211d
SHA256 c7e81fce9d5f071361774f3755690a8cfefdcff714bc1debdb35066f64bccce0
MD5 315d47153122903c52051b7027988f85
SHA1 7e6d2d68dabf9d08ca347adb4b811abc43661e6f
SHA512 1f1f0cd46e0be455900f5a57d85cd698b5e7eaf4092ae115b12688566516f7dd1834db008ebd44beef2abcdf6b46ac727539666ff192bfcf6b7295335cfedbb6
SSDEEP 3072:GlZdGcL1pRgH9DQ7hFa6OMlk2AhuchQd040wKDjpSQVeu+8Kj:GlvLnRgdEhFv4ACQV0wKD7cj
TLSH
T1F2F37D01F3D4D071D16B02315B67B75267BD7E724EF8DE4A2B982E4E1DB02C0A629B63
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Digest

97:54:2e:d7:a6:5f:6f:74:17:2b:38:4c:9c:dd:e3:f6:1f:61:2a:fe:31:ba:cd:a0:bd:f7:34:4c:ab:c9:73:ff

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 10, 2013

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

PE Signature issue

Digest

7a:69:2f:70:d3:1f:9a:64:12:1b:ca:7b:5a:89:c2:0b:56:ae:e5:39

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 10, 2013

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:B8EC-30A4-7144,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:34:24:31:40:c9:a0:c1:79:8d:00:00:00:00:00:34

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 27, 2013 - Jun 27, 2014

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:b0:11:af:0a:8b:d0:3b:9f:dd:00:01:00:00:00:b0

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jan 24, 2013 - Apr 24, 2014

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:33:26:1a:00:00:00:00:00:31

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 31, 2010 - Aug 31, 2020

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:16:68:34:00:00:00:00:00:1c

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 3, 2007 - Apr 3, 2021

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:08:e2:79:fa:0d:25:58:45:ea:00:00:00:00:00:08

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 7, 2012 - Oct 7, 2013

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:09:81:2a:00:00:00:00:00:02

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jul 1, 2010 - Jul 1, 2025

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:C0F4-3086-DEF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:28:90:67:b9:04:b0:3c:6e:66:00:00:00:00:00:28

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 27, 2013 - Jun 27, 2014

Minor OS version

0

Major OS version

6

Entry point

77054

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

atl110.i386.pdb

kernel32

CreateFileW GetFileSize ReadFile CloseHandle RaiseException GetLastError EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount DeleteCriticalSection InterlockedIncrement InterlockedDecrement DisableThreadLibraryCalls FreeLibrary GetModuleFileNameW GetModuleHandleW GetProcAddress LoadLibraryExW LoadResource SizeofResource lstrcmpiW FindResourceW MultiByteToWideChar EncodePointer DecodePointer SetLastError WaitForSingleObject GetCurrentProcess GetCurrentThreadId FlushInstructionCache LockResource GlobalAlloc GlobalLock GlobalHandle GlobalUnlock GlobalFree MulDiv lstrcmpW FindResourceA WideCharToMultiByte InterlockedExchange LoadLibraryExA IsDebuggerPresent IsProcessorFeaturePresent HeapFree HeapAlloc GetCommandLineA GetStdHandle WriteFile ExitProcess GetModuleHandleExW HeapSize Sleep UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetProcessHeap HeapReAlloc RtlUnwind GetFileType GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW OutputDebugStringW LoadLibraryW LCMapStringW IsValidCodePage GetACP GetOEMCP GetCPInfo GetConsoleCP GetConsoleMode SetFilePointerEx GetStringTypeW SetStdHandle WriteConsoleW FlushFileBuffers InterlockedCompareExchange InitializeSListHead InterlockedPopEntrySList InterlockedPushEntrySList VirtualAlloc VirtualFree

mfc110u.dll

IMPHASH dbc5fd773616e397fab9dcb66b2c8884
SHA256 33f631c0b561199b5feb9020faa99e50efa9f421d7484ffa640c5561494726da
MD5 b8de851298e99a005bfd34aa906b3fe8
SHA1 1f07fa8fac4c81c3fccb98363f1f5ae4424b91f8
SHA512 3b6f2a406a7d3bb496d48545af10f57530dae4157fc5128416fea61151c197d0c059de47f360b538696b59b36f17e5dd650fd24af86a8f654a4953e15a191b1d
SSDEEP 98304:tra1QTpsfQ//4/IzLPQ6EOmh0U+0d7fFLOAkGkzdnEVomFHKnPQg+n:t50j+0hFLOyomFHKnPQg+n
TLSH
T16426BF027EDC40EAD96F12314E69B73C96AFBDA0E531471719743B2BBE72301692D227
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Digest

18:4f:f4:25:b1:ee:cc:72:5e:a8:ba:2b:3f:89:b5:75:5e:23:c9:9d:f2:0e:74:74:42:5b:ca:b4:a4:c2:91:1d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 10, 2013

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

PE Signature issue

Digest

3e:95:7a:ae:ff:3a:e3:9a:16:d4:37:7f:55:0e:b6:5b:12:0e:d7:db

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 10, 2013

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:F528-3777-8A76,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:33:e5:27:86:a3:0e:4a:2a:80:00:00:00:00:00:33

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 27, 2013 - Jun 27, 2014

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:b0:11:af:0a:8b:d0:3b:9f:dd:00:01:00:00:00:b0

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jan 24, 2013 - Apr 24, 2014

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:33:26:1a:00:00:00:00:00:31

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 31, 2010 - Aug 31, 2020

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:16:68:34:00:00:00:00:00:1c

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 3, 2007 - Apr 3, 2021

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:08:e2:79:fa:0d:25:58:45:ea:00:00:00:00:00:08

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 7, 2012 - Oct 7, 2013

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:09:81:2a:00:00:00:00:00:02

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jul 1, 2010 - Jul 1, 2025

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:F528-3777-8A76,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:29:97:4e:7c:82:cb:20:16:41:00:00:00:00:00:29

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 27, 2013 - Jun 27, 2014

Minor OS version

0

Major OS version

6

Entry point

4672

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

f:\binaries.x86ret\bin\i386\mfc110u.i386.pdb

advapi32

RegCloseKey RegCreateKeyExW RegSetValueExW RegOpenKeyExW RegEnumValueW RegQueryValueExW RegDeleteKeyW RegDeleteValueW RegEnumKeyExW RegEnumKeyW RegQueryValueW RegSetValueW GetFileSecurityW SetFileSecurityW IsTextUnicode RegOpenKeyExA RegQueryValueExA

kernel32

SizeofResource LoadResource FindResourceW InitializeCriticalSectionAndSpinCount GetLastError DeleteCriticalSection EnterCriticalSection LeaveCriticalSection SetLastError GetModuleHandleA GetModuleHandleW GetProcAddress GetVersion GetFileAttributesW LoadLibraryA LoadLibraryW GetModuleFileNameW OutputDebugStringA MultiByteToWideChar lstrcpyW GlobalAlloc GlobalLock GlobalUnlock GetCurrentThreadId InitializeCriticalSection DeleteFileW MulDiv InterlockedIncrement InterlockedDecrement VerSetConditionMask VerifyVersionInfoW FreeLibrary InterlockedExchange CloseHandle GetTempPathW GetTempFileNameW CreateFileW SetFilePointer Sleep GetCurrentDirectoryW lstrcmpW GetSystemDirectoryW LoadLibraryExW DecodePointer EncodePointer GlobalFree GetTickCount GetWindowsDirectoryW lstrcmpiW SetThreadPriority LocalAlloc LocalFree TlsAlloc TlsFree GlobalHandle GlobalReAlloc TlsGetValue LocalReAlloc TlsSetValue GetFileSize GlobalSize SearchPathW GetLocaleInfoW GetUserDefaultUILanguage GetSystemDefaultUILanguage CompareStringW GetCurrentThread GetVersionExW WideCharToMultiByte lstrcmpA CompareStringA GlobalDeleteAtom SetErrorMode GetCurrentProcessId GlobalAddAtomW GetPrivateProfileIntW GetPrivateProfileStringW WritePrivateProfileStringW FindResourceExW GetUserDefaultLCID IsDBCSLeadByte lstrcpyA RaiseException VirtualProtect GetDiskFreeSpaceW GetFullPathNameW GetFileTime SetFileTime ReplaceFileW SystemTimeToFileTime GetProfileIntW DuplicateHandle GetCurrentProcess ReadFile WriteFile FlushFileBuffers LockFile UnlockFile SetEndOfFile MoveFileW GetVolumeInformationW FindFirstFileW FindClose GetThreadLocale GetStringTypeExW GetShortPathNameW FileTimeToSystemTime FileTimeToLocalFileTime FindNextFileW GetFileSizeEx GetFileAttributesExW LocalFileTimeToFileTime SetFileAttributesW FormatMessageW WaitForSingleObject CreateSemaphoreW ReleaseSemaphore CreateMutexW ReleaseMutex CreateEventW WaitForMultipleObjects CopyFileW SetEvent ResumeThread SuspendThread GetAtomNameW GlobalGetAtomNameW LocalLock LocalUnlock ExpandEnvironmentStringsA LoadLibraryExA GetSystemTimeAsFileTime QueryPerformanceCounter IsProcessorFeaturePresent IsDebuggerPresent GetSystemTime GlobalFindAtomW GlobalFlags GetEnvironmentVariableW FormatMessageA GetEnvironmentVariableA LockResource

msvcr110

memmove_s memcpy_s abort wcslen _purecall wmemcpy_s wcscspn wcsspn _wcslwr_s toupper _CxxThrowException __clean_type_info_names_internal _except_handler4_common _initterm_e _initterm _malloc_crt _amsg_exit __CppXcptFilter __crtTerminateProcess __crtUnhandledException _crt_debugger_hook ?terminate@@YAXXZ _onexit __dllonexit _calloc_crt _unlock _lock ??1type_info@@UAE@XZ _mbscspn _vscprintf _mbsinc _mbsupr_s _wcsrev _mbsspn _mbscoll _mbsrchr _mbschr vsprintf_s _ismbcspace _mbsstr _mbsicoll _mbsrev memmove _mbsicmp _mbslwr_s _mbspbrk _expand _msize _beginthreadex _endthreadex strcpy_s _ultow_s fclose fflush ftell fseek fgetws fputws fwrite clearerr_s ferror feof fread __doserrno _fdopen _open_osfhandle _fileno _get_osfhandle _wfullpath realloc wcstoul wcstol _vsnwprintf_s _snwscanf_s _mbscmp _mktime64 strnlen wcsnlen _ltow_s _itow_s swprintf_s wcsncpy_s _strnicmp __wargv __argc _snwprintf_s _errno _recalloc _resetstkoflw wcstod _time64 _wmakepath_s strlen _wcsdup _beginthread _endthread _localtime64_s wcscat_s swscanf_s memcmp _wtol towlower towupper iswprint iswalnum iswalpha iswdigit wcscpy_s wcsncmp _wcsicoll wcscoll _wsplitpath_s exp ceil fabs floor __CxxFrameHandler3 sin cos abs memcpy clock wcsrchr wcspbrk atan2 sqrt calloc _wcsupr_s _wtoi ldiv labs malloc free wcsstr iswspace wcschr _vscwprintf vswprintf_s wcscmp memset _wcsicmp _wcsnicmp

user32

SendDlgItemMessageA UnpackDDElParam ReuseDDElParam InsertMenuItemW GetMenuBarInfo GetWindowDC BeginPaint EndPaint DefFrameProcW TranslateMDISysAccel DrawMenuBar DefMDIChildProcW CheckDlgButton CheckRadioButton GetDlgItemInt GetDlgItemTextW SendDlgItemMessageW SetDlgItemInt SetDlgItemTextW IsDlgButtonChecked ScrollWindowEx RealChildWindowFromPoint OemToCharBuffA CharToOemBuffA GetActiveWindow InsertMenuW IsWindowEnabled ShowScrollBar FrameRect GetWindowRgn ReleaseDC GetDC GetDoubleClickTime GetWindowTextW EnumChildWindows InvertRect HideCaret SetMenuDefaultItem GetMenuDefaultItem GetScrollPos EnableScrollBar UpdateLayeredWindow GetMessageW GetLastActivePopup SubtractRect DrawFrameControl GetMenuItemInfoW SetFocus CheckMenuItem SetWindowTextW CharUpperW MapVirtualKeyW ToUnicodeEx GetKeyboardState CopyAcceleratorTableW CreateAcceleratorTableW DestroyCursor IsClipboardFormatAvailable GetClassLongW GetSysColor EnumDisplayMonitors DestroyWindow GetTopWindow DestroyAcceleratorTable NotifyWinEvent SetWindowRgn DeleteMenu ModifyMenuW IsZoomed IsMenu GetSystemMenu GetNextDlgTabItem EnableMenuItem SetScrollPos IntersectRect CreatePopupMenu AppendMenuW EndDeferWindowPos BeginDeferWindowPos GetKeyState LockWindowUpdate SetWindowPos UnionRect GetUpdateRect UnhookWindowsHookEx SetWindowsHookExW CallNextHookEx SetLayeredWindowAttributes ValidateRect SystemParametersInfoW MonitorFromWindow GetMonitorInfoW DrawIcon GetForegroundWindow IsIconic GetMenuItemID GetMenuItemCount GetWindow DefWindowProcW GetClassInfoW PostThreadMessageW GetSubMenu LoadMenuW DestroyMenu GetSystemMetrics TranslateAcceleratorW LoadAcceleratorsW GetCapture DrawStateW CloseClipboard SetClipboardData EmptyClipboard OpenClipboard GetAsyncKeyState GetDesktopWindow WaitMessage DispatchMessageW TranslateMessage PeekMessageW SetForegroundWindow LoadCursorW GetFocus IsChild TrackPopupMenu LoadIconW GetNextDlgGroupItem DrawFocusRect SetCursor GetWindowLongW CopyImage GetIconInfo FillRect LoadImageW CopyRect LoadBitmapW MapWindowPoints MessageBeep SetCursorPos WindowFromPoint ClientToScreen SetCapture ReleaseCapture CopyIcon BringWindowToTop RegisterWindowMessageW DestroyIcon GetClassNameW SetParent ShowWindow GetWindowPlacement IsRectEmpty GetDlgCtrlID PostMessageW DeferWindowPos EqualRect GetSysColorBrush SetClassLongW GetParent DrawIconEx InflateRect OffsetRect PtInRect UpdateWindow SetTimer TrackMouseEvent ScreenToClient GetCursorPos IsWindowVisible MapVirtualKeyExW GetKeyboardLayout GetKeyNameTextW IsCharLowerW EnableWindow SetRect IsWindow RedrawWindow InvalidateRect SendMessageW GetWindowRect SetRectEmpty KillTimer GetClientRect ScrollWindow GetScrollInfo SetScrollInfo GetScrollRange WinHelpW RegisterClassW TrackPopupMenuEx SetWindowPlacement GetClassInfoExW CreateWindowExW SetMenu GetMenu CountClipboardFormats AdjustWindowRectEx SetScrollRange WindowFromDC GetMenuStringW InSendMessage SendNotifyMessageW ClipCursor IsDialogMessageW SetWindowContextHelpId CharNextW MsgWaitForMultipleObjectsEx RemoveMenu GetDCEx GetDialogBaseUnits GetMessagePos GetMessageTime MapDialogRect SetPropW RemovePropW GetPropW EndDialog CreateDialogIndirectParamW GetDlgItem GetTabbedTextExtentW GetWindowTextLengthW GrayStringW DrawTextExW DrawTextW TabbedTextOutW InvalidateRgn MoveWindow CreateMenu SetActiveWindow CallWindowProcW GetMenuCheckMarkDimensions SetMenuItemInfoW SetMenuItemBitmaps SetWindowLongW MessageBoxW GetWindowThreadProcessId ShowOwnedPopups UnregisterClassW PostQuitMessage DrawEdge CharUpperBuffW GetComboBoxInfo MonitorFromPoint RegisterClipboardFormatW GetMenuState

gdi32

CreateSolidBrush CreateCompatibleDC DeleteObject SelectObject GetObjectType GetTextColor Polygon Rectangle GetStockObject GetPaletteEntries CreatePalette RealizePalette GetNearestPaletteIndex GetSystemPaletteEntries GetPixel CreatePolygonRgn PtInRegion FrameRgn CreateCompatibleBitmap SetPixelV BitBlt GetRgnBox CreateRectRgnIndirect OffsetRgn CreateDIBSection SetPixel Ellipse GetBkColor CreateFontIndirectW GetDeviceCaps GetTextCharsetInfo EnumFontFamiliesW CreatePen CreatePatternBrush CreateDIBitmap SetPaletteEntries ExtFloodFill StartPage EndPage EndDoc DeleteDC GetCurrentObject PatBlt CreateRectRgn CombineRgn GetBoundsRect FillRgn SetRectRgn CreateRoundRectRgn EnumFontFamiliesExW StretchBlt SetDIBColorTable CreateBitmap SetBkColor SelectPalette GetDIBits Polyline ExtTextOutW CreateHatchBrush CreateEllipticRgn RoundRect StretchDIBits GetObjectW GetCharWidthW LPtoDP CreateMetaFileW CloseMetaFile DeleteMetaFile GetViewportOrgEx PtVisible RectVisible TextOutW Escape GetClipBox GetTextAlign GetCurrentPositionEx MoveToEx SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SaveDC RestoreDC GetROP2 GetBkMode GetPolyFillMode GetStretchBltMode GetNearestColor GetTextFaceW GetWindowExtEx GetViewportExtEx SetTextColor SetMapMode SetWindowExtEx ScaleWindowExtEx GetWindowOrgEx SetWindowOrgEx IntersectClipRect CreateDCW SetBrushOrgEx SetAbortProc StartDocW DPtoLP AbortDoc CopyMetaFileW UnrealizeObject SetBkMode SetPolyFillMode SetROP2 SetStretchBltMode SetGraphicsMode SetWorldTransform ModifyWorldTransform OffsetWindowOrgEx SelectClipRgn ExcludeClipRect OffsetClipRgn LineTo SetTextAlign SetTextJustification SetTextCharacterExtra SetMapperFlags GetLayout SetLayout ArcTo SetArcDirection PolyDraw PolylineTo SetColorAdjustment PolyBezierTo SelectClipPath GetClipRgn ExtSelectClipRgn PlayMetaFileRecord PlayMetaFile EnumMetaFile ExtCreatePen CreateDIBPatternBrushPt GetMapMode GetTextExtentPoint32W CreateFontW GetTextMetricsW

ole32

OleUninitialize CoFreeUnusedLibraries OleInitialize CoRevokeClassObject CoRegisterClassObject RevokeDragDrop RegisterDragDrop CoLockObjectExternal DoDragDrop CoGetMalloc StgOpenStorage StgIsStorageFile StgCreateDocfile OleIsCurrentClipboard OleFlushClipboard OleSetClipboard OleGetClipboard OleRegGetUserType GetClassFile CreateBindCtx CreateFileMoniker OleRun OleIsRunning OleQueryLinkFromData OleQueryCreateFromData OleSetMenuDescriptor CreateGenericComposite CreateItemMoniker WriteClassStm IsAccelerator GetHGlobalFromILockBytes ReadClassStg OleLoad OleSave OleCreate OleCreateLinkToFile OleCreateFromFile OleCreateStaticFromData OleCreateLinkFromData OleCreateFromData OleSetContainedObject StringFromCLSID OleLockRunning StgOpenStorageOnILockBytes CLSIDFromString CLSIDFromProgID PropVariantCopy CoInitializeEx CoGetClassObject StringFromGUID2 ReadFmtUserTypeStg OleLoadFromStream StgCreateDocfileOnILockBytes CreateILockBytesOnHGlobal ReadClassStm OleSaveToStream CreateOleAdviseHolder OleDestroyMenuDescriptor OleCreateMenuDescriptor ReleaseStgMedium OleTranslateAccelerator GetRunningObjectTable WriteClassStg OleDuplicateData OleDraw OleRegGetMiscStatus OleRegEnumVerbs CoDisconnectObject CoRegisterMessageFilter CoTreatAsClass SetConvertStg OleGetIconOfClass CreateDataAdviseHolder CoTaskMemAlloc CreateDataCache CreateStreamOnHGlobal CoUninitialize CoInitialize PropVariantClear CoCreateGuid CoTaskMemFree CoCreateInstance WriteFmtUserTypeStg

oleaut32

SysAllocStringLen SysStringLen SysFreeString VariantChangeType VariantClear VariantTimeToSystemTime SystemTimeToVariantTime VarBstrFromDate OleCreatePropertyFrame OleTranslateColor OleCreateFontIndirect OleCreatePictureIndirect OleLoadPicture LoadTypeLi RegisterTypeLi LoadRegTypeLi VariantInit DispCallFunc VarBstrCmp VariantCopy SafeArrayDestroy SysStringByteLen SafeArrayGetDim SafeArrayGetElemsize SafeArrayGetLBound SafeArrayGetUBound SafeArrayAccessData SafeArrayUnaccessData SafeArrayCreate SafeArrayRedim SysAllocStringByteLen SysReAllocStringLen VarCyFromStr VarBstrFromCy SafeArrayCopy SafeArrayAllocData SafeArrayAllocDescriptor SafeArrayGetElement SafeArrayPtrOfIndex SafeArrayPutElement SafeArrayLock SafeArrayUnlock SafeArrayDestroyData SafeArrayDestroyDescriptor VarDateFromStr VarDecFromStr VarBstrFromDec SafeArrayCreateVector VarParseNumFromStr SysAllocString

shlwapi

SHStrDupW PathFindExtensionW PathFindFileNameW PathRemoveExtensionW PathRemoveFileSpecW PathIsUNCW PathStripToRootW UrlUnescapeW StrFormatKBSizeW

imm32

ImmGetContext ImmGetOpenStatus ImmReleaseContext

uxtheme

GetThemePartSize IsThemeBackgroundPartiallyTransparent DrawThemeText GetThemeSysColor GetWindowTheme GetCurrentThemeName CloseThemeData OpenThemeData GetThemeColor DrawThemeBackground DrawThemeParentBackground IsAppThemed

msvcp110.dll

IMPHASH 098e9eddf1a24b3fd9465ee992148a02
SHA256 c8d5572ca8d7624871188f0acabc3ae60d4c5a4f6782d952b9038de3bc28b39a
MD5 3e29914113ec4b968ba5eb1f6d194a0a
SHA1 557b67e372e85eb39989cb53cffd3ef1adabb9fe
SHA512 75078c9eaa5a7ae39408e5db1ce7dbce5a3180d1c644bcb5e481b0810b07cb7d001d68d1b4f462cd5355e98951716f041ef570fcc866d289a68ea19b3f500c43
SSDEEP 12288:FqULIc5nb9rywgfyhUgiW6QR7t5sA3Ooc8sHkC2eRxUH:PLHnhryLfBA3Ooc8sHkC2eRxUH
TLSH
T187B44A237B824CF5D19E53B231C5431587FAFC6181A1F353ABDEF1692FA6286E123A11
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Digest

bd:da:49:3e:e0:d0:cf:a8:1e:ba:49:76:d1:38:5e:50:ea:b9:84:2f:8b:f8:ee:1c:ee:b6:de:b5:98:7f:ae:bf

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Nov 6, 2012

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

PE Signature issue

Digest

bf:fa:d4:6b:19:62:38:e3:7a:c8:07:80:df:f1:d6:ab:5d:65:be:e9

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Nov 6, 2012

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:9d:1e:8d:27:ae:b8:f3:d8:38:00:01:00:00:00:9d

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 4, 2012 - Mar 4, 2013

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:C0F4-3086-DEF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:2b:39:32:48:c1:b2:c9:48:f3:00:00:00:00:00:2b

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 4, 2012 - Dec 4, 2013

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:33:26:1a:00:00:00:00:00:31

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 31, 2010 - Aug 31, 2020

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:16:68:34:00:00:00:00:00:1c

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 3, 2007 - Apr 3, 2021

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:08:e2:79:fa:0d:25:58:45:ea:00:00:00:00:00:08

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 7, 2012 - Oct 7, 2013

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:09:81:2a:00:00:00:00:00:02

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jul 1, 2010 - Jul 1, 2025

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:F528-3777-8A76,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:07:c8:30:00:00:00:00:00:0d

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 9, 2012 - Apr 9, 2013

Minor OS version

0

Major OS version

6

Entry point

239889

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

msvcp110.i386.pdb

msvcr110

fgetpos fsetpos _fseeki64 fwrite setvbuf ungetc _lock_file _unlock_file memcpy_s memset _fsopen fseek _wfsopen ?__ExceptionPtrDestroy@@YAXPAX@Z ?__ExceptionPtrCopy@@YAXPAXPBX@Z ?__ExceptionPtrRethrow@@YAXPBX@Z ?_ScheduleTask@_CurrentScheduler@details@Concurrency@@SAXP6AXPAX@Z0@Z ?set@event@Concurrency@@QAEXXZ ldexp sprintf_s strcspn wcslen _Strftime _Wcsftime strcmp setlocale _malloc_crt _realloc_crt ?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z fgetwc fputwc ungetwc __uncaught_exception towupper towlower _errno memcmp _wcsdup ___lc_locale_name_func ___lc_collate_cp_func __crtCompareStringA __crtLCMapStringA ___lc_codepage_func _ismbblead remove rename _wremove _wgetcwd _wchdir _wmkdir _wrmdir _wrename _getcwd _chdir _mkdir _rmdir __crtIsPackagedApp __crtCreateSymbolicLinkW calloc ??0_Condition_variable@details@Concurrency@@QAE@XZ fgetc ?wait@_Condition_variable@details@Concurrency@@QAEXAAVcritical_section@3@@Z ?wait_for@_Condition_variable@details@Concurrency@@QAE_NAAVcritical_section@3@I@Z ?notify_one@_Condition_variable@details@Concurrency@@QAEXXZ ?notify_all@_Condition_variable@details@Concurrency@@QAEXXZ _beginthreadex _endthreadex ??0critical_section@Concurrency@@QAE@XZ ??1critical_section@Concurrency@@QAE@XZ ?lock@critical_section@Concurrency@@QAEXXZ ?try_lock@critical_section@Concurrency@@QAE_NXZ ?try_lock_for@critical_section@Concurrency@@QAE_NI@Z ?unlock@critical_section@Concurrency@@QAEXXZ ?terminate@@YAXXZ __crtFlsAlloc __crtFlsFree __crtFlsGetValue __crtFlsSetValue ??0operation_timed_out@Concurrency@@QAE@XZ ?Alloc@Concurrency@@YAPAXI@Z ?ScheduleTask@CurrentScheduler@Concurrency@@SAXP6AXPAX@Z0@Z ??0invalid_link_target@Concurrency@@QAE@PBD@Z ??0message_not_found@Concurrency@@QAE@XZ ?_Trace_agents@Concurrency@@YAXW4Agents_EventType@1@_JZZ ??0bad_target@Concurrency@@QAE@XZ ??0invalid_operation@Concurrency@@QAE@PBD@Z ?wait@event@Concurrency@@QAEII@Z ??1event@Concurrency@@QAE@XZ ??0event@Concurrency@@QAE@XZ ?Free@Concurrency@@YAXPAX@Z ??1_Scoped_lock@_ReentrantPPLLock@details@Concurrency@@QAE@XZ ??0_Scoped_lock@_ReentrantPPLLock@details@Concurrency@@QAE@AAV123@@Z ??0_ReentrantPPLLock@details@Concurrency@@QAE@XZ ??1_Scoped_lock@_NonReentrantPPLLock@details@Concurrency@@QAE@XZ ??0_Scoped_lock@_NonReentrantPPLLock@details@Concurrency@@QAE@AAV123@@Z ??0_NonReentrantPPLLock@details@Concurrency@@QAE@XZ ?_Yield@_Context@details@Concurrency@@SAXXZ ?_UnderlyingYield@details@Concurrency@@YAXXZ ?_SpinOnce@?$_SpinWait@$00@details@Concurrency@@QAE_NXZ ?GetNumberOfVirtualProcessors@CurrentScheduler@Concurrency@@SAIXZ ?IsCurrentTaskCollectionCanceling@Context@Concurrency@@SA_NXZ ??0task_canceled@Concurrency@@QAE@XZ ??1_SpinLock@details@Concurrency@@QAE@XZ ??0_SpinLock@details@Concurrency@@QAE@ACJ@Z ?Log2@details@Concurrency@@YAKI@Z _lock _unlock __pctype_func isupper _calloc_crt __crtGetLocaleInfoEx islower __crtLCMapStringW isspace tolower memchr sqrt isdigit isalnum __crtCompareStringW __dllonexit _onexit ??1type_info@@UAE@XZ __CppXcptFilter _amsg_exit _initterm _initterm_e _except_handler4_common _crt_debugger_hook __crtUnhandledException __crtTerminateProcess __clean_type_info_names_internal fflush fclose __CxxFrameHandler3 _CxxThrowException ?what@exception@std@@UBEPBDXZ ??1bad_cast@std@@UAE@XZ ??0bad_cast@std@@QAE@ABV01@@Z _W_Gettnames _W_Getmonths _W_Getdays _Gettnames _Getmonths _Getdays localeconv ??0bad_cast@std@@QAE@PBD@Z ??_V@YAXPAX@Z ??1exception@std@@UAE@XZ ??0exception@std@@QAE@ABV01@@Z ??0exception@std@@QAE@ABQBDH@Z ??0exception@std@@QAE@ABQBD@Z ??0exception@std@@QAE@XZ memmove strlen memcpy malloc free ___mb_cur_max_func _purecall rand_s fputs fputc __iob_func abort log __crtInitializeCriticalSectionEx ??3@YAXPAX@Z ??1_Condition_variable@details@Concurrency@@QAE@XZ ??2@YAPAXI@Z

kernel32

GetCurrentProcessId QueryPerformanceCounter IsDebuggerPresent IsProcessorFeaturePresent GetStringTypeW InterlockedDecrement InterlockedIncrement GetSystemTimeAsFileTime InterlockedExchange GetExitCodeThread GetCurrentThreadId GetCurrentThread GetCurrentProcess Sleep WaitForSingleObject DuplicateHandle AreFileApisANSI CreateHardLinkW CopyFileW GetLastError CloseHandle SetFileTime GetFileInformationByHandle GetFileAttributesExW GetDiskFreeSpaceExW FindNextFileW FindFirstFileExW FindClose CreateFileW WideCharToMultiByte MultiByteToWideChar DecodePointer EncodePointer DeleteCriticalSection LeaveCriticalSection EnterCriticalSection DisableThreadLibraryCalls

??$_Getvals@_W@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@IAEX_WABV_Locinfo@1@@Z ??$_Getvals@_W@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@IAEX_WABV_Locinfo@1@@Z ??$_Getvals@_W@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@IAEX_WABV_Locinfo@1@@Z ??0?$_Yarn@D@std@@QAE@ABV01@@Z ??0?$_Yarn@D@std@@QAE@PBD@Z ??0?$_Yarn@D@std@@QAE@XZ ??0?$_Yarn@_W@std@@QAE@XZ ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ ??0?$basic_ios@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z ??0?$basic_ios@GU?$char_traits@G@std@@@std@@IAE@XZ ??0?$basic_ios@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z ??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ ??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@IAE@$$QAV01@@Z ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z ??0?$basic_iostream@GU?$char_traits@G@std@@@std@@IAE@$$QAV01@@Z ??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z ??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@IAE@$$QAV01@@Z ??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z ??0?$basic_istream@DU?$char_traits@D@std@@@std@@IAE@$$QAV01@@Z ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N1@Z ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@W4_Uninitialized@1@@Z ??0?$basic_istream@GU?$char_traits@G@std@@@std@@IAE@$$QAV01@@Z ??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N1@Z ??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z ??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@W4_Uninitialized@1@@Z ??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@IAE@$$QAV01@@Z ??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N1@Z ??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z ??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@W4_Uninitialized@1@@Z ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@IAE@$$QAV01@@Z ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@W4_Uninitialized@1@_N@Z ??0?$basic_ostream@GU?$char_traits@G@std@@@std@@IAE@$$QAV01@@Z ??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z ??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE@W4_Uninitialized@1@_N@Z ??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@IAE@$$QAV01@@Z ??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z ??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@W4_Uninitialized@1@_N@Z ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@ABV01@@Z ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@W4_Uninitialized@1@@Z ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ ??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@ABV01@@Z ??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@W4_Uninitialized@1@@Z ??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@XZ ??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@ABV01@@Z ??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@W4_Uninitialized@1@@Z ??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ ??0?$codecvt@DDH@std@@QAE@ABV_Locinfo@1@I@Z ??0?$codecvt@DDH@std@@QAE@I@Z ??0?$codecvt@GDH@std@@QAE@ABV_Locinfo@1@I@Z ??0?$codecvt@GDH@std@@QAE@I@Z ??0?$codecvt@_WDH@std@@QAE@ABV_Locinfo@1@I@Z ??0?$codecvt@_WDH@std@@QAE@I@Z ??0?$ctype@D@std@@QAE@ABV_Locinfo@1@I@Z ??0?$ctype@D@std@@QAE@PBF_NI@Z ??0?$ctype@G@std@@QAE@ABV_Locinfo@1@I@Z ??0?$ctype@G@std@@QAE@I@Z ??0?$ctype@_W@std@@QAE@ABV_Locinfo@1@I@Z ??0?$ctype@_W@std@@QAE@I@Z ??0?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z ??0?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z ??0?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z ??0?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z ??0?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z ??0?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@I@Z ??0?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z ??0?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z ??0?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z ??0?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z ??0?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z ??0?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@I@Z ??0?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@IAE@PBDI@Z ??0?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z ??0?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z ??0?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@IAE@PBDI@Z ??0?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z ??0?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z ??0?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@IAE@PBDI@Z ??0?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z ??0?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@I@Z ??0?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z ??0?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z ??0?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@IAE@PBDI@Z ??0?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z ??0?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z ??0?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@IAE@PBDI@Z ??0?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z ??0?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@I@Z ??0Init@ios_base@std@@QAE@XZ ??0_Concurrent_queue_base_v4@details@Concurrency@@IAE@I@Z ??0_Concurrent_queue_iterator_base_v4@details@Concurrency@@IAE@ABV_Concurrent_queue_base_v4@12@@Z ??0_Container_base12@std@@QAE@ABU01@@Z ??0_Container_base12@std@@QAE@XZ ??0_Facet_base@std@@QAE@ABV01@@Z ??0_Facet_base@std@@QAE@XZ ??0_Init_locks@std@@QAE@XZ ??0_Locimp@locale@std@@AAE@ABV012@@Z ??0_Locimp@locale@std@@AAE@_N@Z ??0_Locinfo@std@@QAE@HPBD@Z ??0_Locinfo@std@@QAE@PBD@Z ??0_Lockit@std@@QAE@H@Z ??0_Lockit@std@@QAE@XZ ??0_Pad@std@@QAE@ABV01@@Z ??0_Pad@std@@QAE@XZ ??0_Runtime_object@details@Concurrency@@QAE@H@Z ??0_Runtime_object@details@Concurrency@@QAE@XZ ??0_Timevec@std@@QAE@ABV01@@Z ??0_Timevec@std@@QAE@PAX@Z ??0_UShinit@std@@QAE@XZ ??0_Winit@std@@QAE@XZ ??0agent@Concurrency@@QAE@AAVScheduleGroup@1@@Z ??0agent@Concurrency@@QAE@AAVScheduler@1@@Z ??0agent@Concurrency@@QAE@XZ ??0codecvt_base@std@@QAE@I@Z ??0ctype_base@std@@QAE@I@Z ??0facet@locale@std@@IAE@I@Z ??0id@locale@std@@QAE@I@Z ??0ios_base@std@@IAE@XZ ??0time_base@std@@QAE@I@Z ??1?$_Yarn@D@std@@QAE@XZ ??1?$_Yarn@_W@std@@QAE@XZ ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ ??1?$basic_ios@GU?$char_traits@G@std@@@std@@UAE@XZ ??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ ??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UAE@XZ ??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ ??1?$basic_istream@GU?$char_traits@G@std@@@std@@UAE@XZ ??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UAE@XZ ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ ??1?$basic_ostream@GU?$char_traits@G@std@@@std@@UAE@XZ ??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ ??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAE@XZ ??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ ??1?$codecvt@DDH@std@@MAE@XZ ??1?$codecvt@GDH@std@@MAE@XZ ??1?$codecvt@_WDH@std@@MAE@XZ ??1?$ctype@D@std@@MAE@XZ ??1?$ctype@G@std@@MAE@XZ ??1?$ctype@_W@std@@MAE@XZ ??1?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MAE@XZ ??1?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MAE@XZ ??1?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MAE@XZ ??1?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MAE@XZ ??1?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MAE@XZ ??1?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MAE@XZ ??1?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MAE@XZ ??1?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MAE@XZ ??1?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MAE@XZ ??1?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MAE@XZ ??1?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MAE@XZ ??1?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MAE@XZ ??1Init@ios_base@std@@QAE@XZ ??1_Concurrent_queue_base_v4@details@Concurrency@@MAE@XZ ??1_Concurrent_queue_iterator_base_v4@details@Concurrency@@IAE@XZ ??1_Concurrent_vector_base_v4@details@Concurrency@@IAE@XZ ??1_Container_base12@std@@QAE@XZ ??1_Facet_base@std@@UAE@XZ ??1_Init_locks@std@@QAE@XZ ??1_Locimp@locale@std@@MAE@XZ ??1_Locinfo@std@@QAE@XZ ??1_Lockit@std@@QAE@XZ ??1_Pad@std@@QAE@XZ ??1_Timevec@std@@QAE@XZ ??1_UShinit@std@@QAE@XZ ??1_Winit@std@@QAE@XZ ??1agent@Concurrency@@UAE@XZ ??1codecvt_base@std@@UAE@XZ ??1ctype_base@std@@UAE@XZ ??1facet@locale@std@@MAE@XZ ??1ios_base@std@@UAE@XZ ??1time_base@std@@UAE@XZ ??4?$_Iosb@H@std@@QAEAAV01@ABV01@@Z ??4?$_Yarn@D@std@@QAEAAV01@ABV01@@Z ??4?$_Yarn@D@std@@QAEAAV01@PBD@Z ??4?$_Yarn@_W@std@@QAEAAV01@PB_W@Z ??4?$basic_iostream@DU?$char_traits@D@std@@@std@@IAEAAV01@$$QAV01@@Z ??4?$basic_iostream@GU?$char_traits@G@std@@@std@@IAEAAV01@$$QAV01@@Z ??4?$basic_iostream@_WU?$char_traits@_W@std@@@std@@IAEAAV01@$$QAV01@@Z ??4?$basic_istream@DU?$char_traits@D@std@@@std@@IAEAAV01@$$QAV01@@Z ??4?$basic_istream@GU?$char_traits@G@std@@@std@@IAEAAV01@$$QAV01@@Z ??4?$basic_istream@_WU?$char_traits@_W@std@@@std@@IAEAAV01@$$QAV01@@Z ??4?$basic_ostream@DU?$char_traits@D@std@@@std@@IAEAAV01@$$QAV01@@Z ??4?$basic_ostream@GU?$char_traits@G@std@@@std@@IAEAAV01@$$QAV01@@Z ??4?$basic_ostream@_WU?$char_traits@_W@std@@@std@@IAEAAV01@$$QAV01@@Z ??4?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEAAV01@ABV01@@Z ??4?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEAAV01@ABV01@@Z ??4?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEAAV01@ABV01@@Z ??4Init@ios_base@std@@QAEAAV012@ABV012@@Z ??4_Container_base0@std@@QAEAAU01@ABU01@@Z ??4_Container_base12@std@@QAEAAU01@ABU01@@Z ??4_Facet_base@std@@QAEAAV01@ABV01@@Z ??4_Init_locks@std@@QAEAAV01@ABV01@@Z ??4_Pad@std@@QAEAAV01@ABV01@@Z ??4_Timevec@std@@QAEAAV01@ABV01@@Z ??4_UShinit@std@@QAEAAV01@ABV01@@Z ??4_Winit@std@@QAEAAV01@ABV01@@Z ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAF@Z ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAG@Z ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAI@Z ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAJ@Z ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAK@Z ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAM@Z ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAN@Z ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAO@Z ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAPAX@Z ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_J@Z ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_K@Z ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_N@Z ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@DU?$char_traits@D@std@@@1@AAV21@@Z@Z ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z ??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAF@Z ??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAG@Z ??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAH@Z ??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAI@Z ??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAJ@Z ??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAK@Z ??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAM@Z ??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAN@Z ??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAO@Z ??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAPAX@Z ??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AA_J@Z ??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AA_K@Z ??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AA_N@Z ??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z ??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@GU?$char_traits@G@std@@@1@AAV21@@Z@Z ??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z ??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z ??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAF@Z ??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAG@Z ??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAH@Z ??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAI@Z ??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAJ@Z ??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAK@Z ??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAM@Z ??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAN@Z ??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAO@Z ??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAPAX@Z ??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AA_J@Z ??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AA_K@Z ??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AA_N@Z ??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z ??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@_WU?$char_traits@_W@std@@@1@AAV21@@Z@Z ??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z ??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@F@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@M@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@O@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@DU?$char_traits@D@std@@@1@AAV21@@Z@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_K@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_N@Z ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@F@Z ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@G@Z ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@H@Z ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@I@Z ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@J@Z ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@K@Z ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@M@Z ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@N@Z ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@O@Z ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@GU?$char_traits@G@std@@@1@AAV21@@Z@Z ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@PBX@Z ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@_J@Z ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@_K@Z ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@_N@Z ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@F@Z ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@G@Z ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@I@Z ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@J@Z ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@K@Z ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@M@Z ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@N@Z ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@O@Z ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@_WU?$char_traits@_W@std@@@1@AAV21@@Z@Z ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@PBX@Z ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@_J@Z ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@_K@Z ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@_N@Z ??7ios_base@std@@QBE_NXZ ??Bid@locale@std@@QAEIXZ ??Bios_base@std@@QBEPAXXZ ??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@ ??_7?$basic_ios@GU?$char_traits@G@std@@@std@@6B@ ??_7?$basic_ios@_WU?$char_traits@_W@std@@@std@@6B@ ??_7?$basic_iostream@DU?$char_traits@D@std@@@std@@6B@ ??_7?$basic_iostream@GU?$char_traits@G@std@@@std@@6B@ ??_7?$basic_iostream@_WU?$char_traits@_W@std@@@std@@6B@ ??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@ ??_7?$basic_istream@GU?$char_traits@G@std@@@std@@6B@ ??_7?$basic_istream@_WU?$char_traits@_W@std@@@std@@6B@ ??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@ ??_7?$basic_ostream@GU?$char_traits@G@std@@@std@@6B@ ??_7?$basic_ostream@_WU?$char_traits@_W@std@@@std@@6B@ ??_7?$basic_streambuf@DU?$char_traits@D@std@@@std@@6B@ ??_7?$basic_streambuf@GU?$char_traits@G@std@@@std@@6B@ ??_7?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@6B@ ??_7?$codecvt@DDH@std@@6B@ ??_7?$codecvt@GDH@std@@6B@ ??_7?$codecvt@_WDH@std@@6B@ ??_7?$ctype@D@std@@6B@ ??_7?$ctype@G@std@@6B@ ??_7?$ctype@_W@std@@6B@ ??_7?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@6B@ ??_7?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@6B@ ??_7?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@6B@ ??_7?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@6B@ ??_7?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@6B@ ??_7?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@6B@ ??_7?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@6B@ ??_7?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@6B@ ??_7?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@6B@ ??_7?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@6B@ ??_7?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@6B@ ??_7?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@6B@ ??_7_Facet_base@std@@6B@ ??_7_Locimp@locale@std@@6B@ ??_7_Pad@std@@6B@ ??_7codecvt_base@std@@6B@ ??_7ctype_base@std@@6B@ ??_7facet@locale@std@@6B@ ??_7ios_base@std@@6B@ ??_7time_base@std@@6B@ ??_8?$basic_iostream@DU?$char_traits@D@std@@@std@@7B?$basic_istream@DU?$char_traits@D@std@@@1@@ ??_8?$basic_iostream@DU?$char_traits@D@std@@@std@@7B?$basic_ostream@DU?$char_traits@D@std@@@1@@ ??_8?$basic_iostream@GU?$char_traits@G@std@@@std@@7B?$basic_istream@GU?$char_traits@G@std@@@1@@ ??_8?$basic_iostream@GU?$char_traits@G@std@@@std@@7B?$basic_ostream@GU?$char_traits@G@std@@@1@@ ??_8?$basic_iostream@_WU?$char_traits@_W@std@@@std@@7B?$basic_istream@_WU?$char_traits@_W@std@@@1@@ ??_8?$basic_iostream@_WU?$char_traits@_W@std@@@std@@7B?$basic_ostream@_WU?$char_traits@_W@std@@@1@@ ??_8?$basic_istream@DU?$char_traits@D@std@@@std@@7B@ ??_8?$basic_istream@GU?$char_traits@G@std@@@std@@7B@ ??_8?$basic_istream@_WU?$char_traits@_W@std@@@std@@7B@ ??_8?$basic_ostream@DU?$char_traits@D@std@@@std@@7B@ ??_8?$basic_ostream@GU?$char_traits@G@std@@@std@@7B@ ??_8?$basic_ostream@_WU?$char_traits@_W@std@@@std@@7B@ ??_D?$basic_iostream@DU?$char_traits@D@std@@@std@@QAEXXZ ??_D?$basic_iostream@GU?$char_traits@G@std@@@std@@QAEXXZ ??_D?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ ??_D?$basic_istream@DU?$char_traits@D@std@@@std@@QAEXXZ ??_D?$basic_istream@GU?$char_traits@G@std@@@std@@QAEXXZ ??_D?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEXXZ ??_D?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ ??_D?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEXXZ ??_D?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ ??_F?$codecvt@DDH@std@@QAEXXZ ??_F?$codecvt@GDH@std@@QAEXXZ ??_F?$codecvt@_WDH@std@@QAEXXZ ??_F?$ctype@D@std@@QAEXXZ ??_F?$ctype@G@std@@QAEXXZ ??_F?$ctype@_W@std@@QAEXXZ ??_F?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAEXXZ ??_F?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAEXXZ ??_F?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAEXXZ ??_F?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAEXXZ ??_F?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAEXXZ ??_F?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAEXXZ ??_F?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAEXXZ ??_F?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAEXXZ ??_F?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAEXXZ ??_F?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAEXXZ ??_F?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAEXXZ ??_F?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAEXXZ ??_F_Locinfo@std@@QAEXXZ ??_F_Timevec@std@@QAEXXZ ??_Fcodecvt_base@std@@QAEXXZ ??_Fctype_base@std@@QAEXXZ ??_Ffacet@locale@std@@QAEXXZ ??_Fid@locale@std@@QAEXXZ ??_Ftime_base@std@@QAEXXZ ?NFS_Allocate@details@Concurrency@@YAPAXIIPAX@Z ?NFS_Free@details@Concurrency@@YAXPAX@Z ?NFS_GetLineSize@details@Concurrency@@YAIXZ ?_10@placeholders@std@@3V?$_Ph@$09@2@A ?_11@placeholders@std@@3V?$_Ph@$0L@@2@A ?_12@placeholders@std@@3V?$_Ph@$0M@@2@A ?_13@placeholders@std@@3V?$_Ph@$0N@@2@A ?_14@placeholders@std@@3V?$_Ph@$0O@@2@A ?_15@placeholders@std@@3V?$_Ph@$0P@@2@A ?_16@placeholders@std@@3V?$_Ph@$0BA@@2@A ?_17@placeholders@std@@3V?$_Ph@$0BB@@2@A ?_18@placeholders@std@@3V?$_Ph@$0BC@@2@A ?_19@placeholders@std@@3V?$_Ph@$0BD@@2@A ?_1@placeholders@std@@3V?$_Ph@$00@2@A ?_20@placeholders@std@@3V?$_Ph@$0BE@@2@A ?_2@placeholders@std@@3V?$_Ph@$01@2@A ?_3@placeholders@std@@3V?$_Ph@$02@2@A ?_4@placeholders@std@@3V?$_Ph@$03@2@A ?_5@placeholders@std@@3V?$_Ph@$04@2@A ?_6@placeholders@std@@3V?$_Ph@$05@2@A ?_7@placeholders@std@@3V?$_Ph@$06@2@A ?_8@placeholders@std@@3V?$_Ph@$07@2@A ?_9@placeholders@std@@3V?$_Ph@$08@2@A ?_Add_vtordisp1@?$basic_ios@DU?$char_traits@D@std@@@std@@UAEXXZ ?_Add_vtordisp1@?$basic_ios@GU?$char_traits@G@std@@@std@@UAEXXZ ?_Add_vtordisp1@?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAEXXZ ?_Add_vtordisp1@?$basic_istream@DU?$char_traits@D@std@@@std@@UAEXXZ ?_Add_vtordisp1@?$basic_istream@GU?$char_traits@G@std@@@std@@UAEXXZ ?_Add_vtordisp1@?$basic_istream@_WU?$char_traits@_W@std@@@std@@UAEXXZ ?_Add_vtordisp2@?$basic_ios@DU?$char_traits@D@std@@@std@@UAEXXZ ?_Add_vtordisp2@?$basic_ios@GU?$char_traits@G@std@@@std@@UAEXXZ ?_Add_vtordisp2@?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAEXXZ ?_Add_vtordisp2@?$basic_ostream@DU?$char_traits@D@std@@@std@@UAEXXZ ?_Add_vtordisp2@?$basic_ostream@GU?$char_traits@G@std@@@std@@UAEXXZ ?_Add_vtordisp2@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAEXXZ ?_Addcats@_Locinfo@std@@QAEAAV12@HPBD@Z ?_Addfac@_Locimp@locale@std@@AAEXPAVfacet@23@I@Z ?_Addstd@ios_base@std@@SAXPAV12@@Z ?_Advance@_Concurrent_queue_iterator_base_v4@details@Concurrency@@IAEXXZ ?_Assign@_Concurrent_queue_iterator_base_v4@details@Concurrency@@IAEXABV123@@Z ?_Atexit@@YAXP6AXXZ@Z ?_BADOFF@std@@3_JB ?_Byte_reverse_table@details@Concurrency@@3QBEB ?_C_str@?$_Yarn@D@std@@QBEPBDXZ ?_C_str@?$_Yarn@_W@std@@QBEPB_WXZ ?_Callfns@ios_base@std@@AAEXW4event@12@@Z ?_Clocptr@_Locimp@locale@std@@0PAV123@A ?_Close_dir@sys@tr2@std@@YAXPAX@Z ?_Copy_file@sys@tr2@std@@YAHPBD0_N@Z ?_Copy_file@sys@tr2@std@@YAHPB_W0_N@Z ?_Current_get@sys@tr2@std@@YAPADPAD@Z ?_Current_get@sys@tr2@std@@YAPA_WPA_W@Z ?_Current_set@sys@tr2@std@@YA_NPBD@Z ?_Current_set@sys@tr2@std@@YA_NPB_W@Z ?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ ?_Donarrow@?$ctype@G@std@@IBEDGD@Z ?_Donarrow@?$ctype@_W@std@@IBED_WD@Z ?_Dowiden@?$ctype@G@std@@IBEGD@Z ?_Dowiden@?$ctype@_W@std@@IBE_WD@Z ?_Empty@?$_Yarn@D@std@@QBE_NXZ ?_Empty@?$_Yarn@_W@std@@QBE_NXZ ?_Equivalent@sys@tr2@std@@YAHPBD0@Z ?_Equivalent@sys@tr2@std@@YAHPB_W0@Z ?_Ffmt@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABAPADPADDH@Z ?_Ffmt@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABAPADPADDH@Z ?_Ffmt@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABAPADPADDH@Z ?_File_size@sys@tr2@std@@YA_KPBD@Z ?_File_size@sys@tr2@std@@YA_KPB_W@Z ?_Findarr@ios_base@std@@AAEAAU_Iosarray@12@H@Z ?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z ?_Fiopen@std@@YAPAU_iobuf@@PBGHH@Z ?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z ?_Fput@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@DPBDIIII@Z ?_Fput@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABA?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@GPBDIIII@Z ?_Fput@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABA?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_WPBDIIII@Z ?_Future_error_map@std@@YAPBDH@Z ?_GetCombinableSize@details@Concurrency@@YAIXZ ?_GetCurrentThreadId@details@Concurrency@@YAKXZ ?_GetNextAsyncId@details@Concurrency@@YAIXZ ?_Get_future_error_what@std@@YAPBDH@Z ?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z ?_Getcat@?$codecvt@GDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z ?_Getcat@?$codecvt@_WDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z ?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z ?_Getcat@?$ctype@G@std@@SAIPAPBVfacet@locale@2@PBV42@@Z ?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z ?_Getcat@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z ?_Getcat@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z ?_Getcat@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z ?_Getcat@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z ?_Getcat@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z ?_Getcat@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z ?_Getcat@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z ?_Getcat@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z ?_Getcat@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z ?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z ?_Getcat@?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z ?_Getcat@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z ?_Getcat@facet@locale@std@@SAIPAPBV123@PBV23@@Z ?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ ?_Getctype@_Locinfo@std@@QBE?AU_Ctypevec@@XZ ?_Getcvt@_Locinfo@std@@QBE?AU_Cvtvec@@XZ ?_Getdateorder@_Locinfo@std@@QBEHXZ ?_Getdays@_Locinfo@std@@QBEPBDXZ ?_Getfalse@_Locinfo@std@@QBEPBDXZ ?_Getffld@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@1AAVios_base@2@PAH@Z ?_Getffld@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@1AAVios_base@2@PAH@Z ?_Getffld@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@1AAVios_base@2@PAH@Z ?_Getffldx@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@1AAVios_base@2@PAH@Z ?_Getffldx@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@1AAVios_base@2@PAH@Z ?_Getffldx@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@1AAVios_base@2@PAH@Z ?_Getfmt@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@IBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@PBD@Z ?_Getfmt@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@IBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@PBD@Z ?_Getfmt@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@IBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@PBD@Z ?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ ?_Getifld@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@1HABVlocale@2@@Z ?_Getifld@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@1HABVlocale@2@@Z ?_Getifld@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@1HABVlocale@2@@Z ?_Getint@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABAHAAV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@0HHAAHABV?$ctype@D@2@@Z ?_Getint@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABAHAAV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@0HHAAHABV?$ctype@G@2@@Z ?_Getint@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABAHAAV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@0HHAAHABV?$ctype@_W@2@@Z ?_Getlconv@_Locinfo@std@@QBEPBUlconv@@XZ ?_Getmonths@_Locinfo@std@@QBEPBDXZ ?_Getname@_Locinfo@std@@QBEPBDXZ ?_Getpfirst@_Container_base12@std@@QBEPAPAU_Iterator_base12@2@XZ ?_Getptr@_Timevec@std@@QBEPAXXZ ?_Gettnames@_Locinfo@std@@QBE?AV_Timevec@2@XZ ?_Gettrue@_Locinfo@std@@QBEPBDXZ ?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBE_JXZ ?_Gnavail@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBE_JXZ ?_Gnavail@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBE_JXZ ?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ ?_Gndec@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEPAGXZ ?_Gndec@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ ?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ ?_Gninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEPAGXZ ?_Gninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ ?_Gnpreinc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ ?_Gnpreinc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEPAGXZ ?_Gnpreinc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ ?_Id_cnt@id@locale@std@@0HA ?_Ifmt@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABAPADPADPBDH@Z ?_Ifmt@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABAPADPADPBDH@Z ?_Ifmt@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABAPADPADPBDH@Z ?_Incref@facet@locale@std@@UAEXXZ ?_Index@ios_base@std@@0HA ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAPAD0PAH001@Z ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ ?_Init@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXPAPAG0PAH001@Z ?_Init@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXXZ ?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPAPA_W0PAH001@Z ?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXXZ ?_Init@?$codecvt@DDH@std@@IAEXABV_Locinfo@2@@Z ?_Init@?$codecvt@GDH@std@@IAEXABV_Locinfo@2@@Z ?_Init@?$codecvt@_WDH@std@@IAEXABV_Locinfo@2@@Z ?_Init@?$ctype@D@std@@IAEXABV_Locinfo@2@@Z ?_Init@?$ctype@G@std@@IAEXABV_Locinfo@2@@Z ?_Init@?$ctype@_W@std@@IAEXABV_Locinfo@2@@Z ?_Init@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@IAEXABV_Locinfo@2@@Z ?_Init@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@IAEXABV_Locinfo@2@@Z ?_Init@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@IAEXABV_Locinfo@2@@Z ?_Init@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@IAEXABV_Locinfo@2@@Z ?_Init@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@IAEXABV_Locinfo@2@@Z ?_Init@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@IAEXABV_Locinfo@2@@Z ?_Init@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@IAEXABV_Locinfo@2@@Z ?_Init@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@IAEXABV_Locinfo@2@@Z ?_Init@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@IAEXABV_Locinfo@2@@Z ?_Init@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@IAEXABV_Locinfo@2@@Z ?_Init@?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@IAEXABV_Locinfo@2@@Z ?_Init@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@IAEXABV_Locinfo@2@@Z ?_Init@ios_base@std@@IAEXXZ ?_Init@locale@std@@CAPAV_Locimp@12@_N@Z ?_Init_cnt@Init@ios_base@std@@0HA ?_Init_cnt@_UShinit@std@@0HA ?_Init_cnt@_Winit@std@@0HA ?_Init_cnt_func@Init@ios_base@std@@CAAAHXZ ?_Init_ctor@Init@ios_base@std@@CAXPAV123@@Z ?_Init_dtor@Init@ios_base@std@@CAXPAV123@@Z ?_Init_locks_ctor@_Init_locks@std@@CAXPAV12@@Z ?_Init_locks_dtor@_Init_locks@std@@CAXPAV12@@Z ?_Internal_assign@_Concurrent_vector_base_v4@details@Concurrency@@IAEXABV123@IP6AXPAXI@ZP6AX1PBXI@Z4@Z ?_Internal_capacity@_Concurrent_vector_base_v4@details@Concurrency@@IBEIXZ ?_Internal_clear@_Concurrent_vector_base_v4@details@Concurrency@@IAEIP6AXPAXI@Z@Z ?_Internal_compact@_Concurrent_vector_base_v4@details@Concurrency@@IAEPAXIPAXP6AX0I@ZP6AX0PBXI@Z@Z ?_Internal_copy@_Concurrent_vector_base_v4@details@Concurrency@@IAEXABV123@IP6AXPAXPBXI@Z@Z ?_Internal_empty@_Concurrent_queue_base_v4@details@Concurrency@@IBE_NXZ ?_Internal_finish_clear@_Concurrent_queue_base_v4@details@Concurrency@@IAEXXZ ?_Internal_grow_by@_Concurrent_vector_base_v4@details@Concurrency@@IAEIIIP6AXPAXPBXI@Z1@Z ?_Internal_grow_to_at_least_with_result@_Concurrent_vector_base_v4@details@Concurrency@@IAEIIIP6AXPAXPBXI@Z1@Z ?_Internal_move_push@_Concurrent_queue_base_v4@details@Concurrency@@IAEXPAX@Z ?_Internal_pop_if_present@_Concurrent_queue_base_v4@details@Concurrency@@IAE_NPAX@Z ?_Internal_push@_Concurrent_queue_base_v4@details@Concurrency@@IAEXPBX@Z ?_Internal_push_back@_Concurrent_vector_base_v4@details@Concurrency@@IAEPAXIAAI@Z ?_Internal_reserve@_Concurrent_vector_base_v4@details@Concurrency@@IAEXIII@Z ?_Internal_resize@_Concurrent_vector_base_v4@details@Concurrency@@IAEXIIIP6AXPAXI@ZP6AX0PBXI@Z2@Z ?_Internal_size@_Concurrent_queue_base_v4@details@Concurrency@@IBEIXZ ?_Internal_swap@_Concurrent_queue_base_v4@details@Concurrency@@IAEXAAV123@@Z ?_Internal_swap@_Concurrent_vector_base_v4@details@Concurrency@@IAEXAAV123@@Z ?_Internal_throw_exception@_Concurrent_queue_base_v4@details@Concurrency@@IBEXXZ ?_Internal_throw_exception@_Concurrent_vector_base_v4@details@Concurrency@@IBEXI@Z ?_Ios_base_dtor@ios_base@std@@CAXPAV12@@Z ?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z ?_Ipfx@?$basic_istream@GU?$char_traits@G@std@@@std@@QAE_N_N@Z ?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE_N_N@Z ?_Iput@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@DPADI@Z ?_Iput@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABA?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@GPADI@Z ?_Iput@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABA?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_WPADI@Z ?_Last_write_time@sys@tr2@std@@YAXPBD_J@Z ?_Last_write_time@sys@tr2@std@@YAXPB_W_J@Z ?_Last_write_time@sys@tr2@std@@YA_JPBD@Z ?_Last_write_time@sys@tr2@std@@YA_JPB_W@Z ?_Launch@_Pad@std@@QAEXPAU_Thrd_imp_t@@@Z ?_Link@sys@tr2@std@@YAHPBD0@Z ?_Link@sys@tr2@std@@YAHPB_W0@Z ?_Locimp_Addfac@_Locimp@locale@std@@CAXPAV123@PAVfacet@23@I@Z ?_Locimp_ctor@_Locimp@locale@std@@CAXPAV123@ABV123@@Z ?_Locimp_dtor@_Locimp@locale@std@@CAXPAV123@@Z ?_Locinfo_Addcats@_Locinfo@std@@SAAAV12@PAV12@HPBD@Z ?_Locinfo_ctor@_Locinfo@std@@SAXPAV12@HPBD@Z ?_Locinfo_ctor@_Locinfo@std@@SAXPAV12@PBD@Z ?_Locinfo_dtor@_Locinfo@std@@SAXPAV12@@Z ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ ?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAEXXZ ?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ ?_Lockit_ctor@_Lockit@std@@CAXPAV12@@Z ?_Lockit_ctor@_Lockit@std@@CAXPAV12@H@Z ?_Lockit_ctor@_Lockit@std@@SAXH@Z ?_Lockit_dtor@_Lockit@std@@CAXPAV12@@Z ?_Lockit_dtor@_Lockit@std@@SAXH@Z ?_Lstat@sys@tr2@std@@YA?AW4file_type@123@PBDAAH@Z ?_Lstat@sys@tr2@std@@YA?AW4file_type@123@PB_WAAH@Z ?_MP_Add@std@@YAXQA_K_K@Z ?_MP_Get@std@@YA_KQA_K@Z ?_MP_Mul@std@@YAXQA_K_K1@Z ?_MP_Rem@std@@YAXQA_K_K@Z ?_Make_dir@sys@tr2@std@@YAHPBD@Z ?_Make_dir@sys@tr2@std@@YAHPB_W@Z ?_Makeloc@_Locimp@locale@std@@CAPAV123@ABV_Locinfo@3@HPAV123@PBV23@@Z ?_Makeushloc@_Locimp@locale@std@@CAXABV_Locinfo@3@HPAV123@PBV23@@Z ?_Makewloc@_Locimp@locale@std@@CAXABV_Locinfo@3@HPAV123@PBV23@@Z ?_Makexloc@_Locimp@locale@std@@CAXABV_Locinfo@3@HPAV123@PBV23@@Z ?_Mtx_delete@threads@stdext@@YAXPAX@Z ?_Mtx_lock@threads@stdext@@YAXPAX@Z ?_Mtx_new@threads@stdext@@YAXAAPAX@Z ?_Mtx_unlock@threads@stdext@@YAXPAX@Z ?_New_Locimp@_Locimp@locale@std@@CAPAV123@ABV123@@Z ?_New_Locimp@_Locimp@locale@std@@CAPAV123@_N@Z ?_Open_dir@sys@tr2@std@@YAPAXPADPBDAAHAAW4file_type@123@@Z ?_Open_dir@sys@tr2@std@@YAPAXPA_WPB_WAAHAAW4file_type@123@@Z ?_Orphan_all@_Container_base0@std@@QAEXXZ ?_Orphan_all@_Container_base12@std@@QAEXXZ ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ ?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEXXZ ?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ ?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBE_JXZ ?_Pnavail@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBE_JXZ ?_Pnavail@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBE_JXZ ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ ?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEPAGXZ ?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ ?_Ptr_cerr@std@@3PAV?$basic_ostream@DU?$char_traits@D@std@@@1@A ?_Ptr_cin@std@@3PAV?$basic_istream@DU?$char_traits@D@std@@@1@A ?_Ptr_clog@std@@3PAV?$basic_ostream@DU?$char_traits@D@std@@@1@A ?_Ptr_cout@std@@3PAV?$basic_ostream@DU?$char_traits@D@std@@@1@A ?_Ptr_wcerr@std@@3PAV?$basic_ostream@GU?$char_traits@G@std@@@1@A ?_Ptr_wcerr@std@@3PAV?$basic_ostream@_WU?$char_traits@_W@std@@@1@A ?_Ptr_wcin@std@@3PAV?$basic_istream@GU?$char_traits@G@std@@@1@A ?_Ptr_wcin@std@@3PAV?$basic_istream@_WU?$char_traits@_W@std@@@1@A ?_Ptr_wclog@std@@3PAV?$basic_ostream@GU?$char_traits@G@std@@@1@A ?_Ptr_wclog@std@@3PAV?$basic_ostream@_WU?$char_traits@_W@std@@@1@A ?_Ptr_wcout@std@@3PAV?$basic_ostream@GU?$char_traits@G@std@@@1@A ?_Ptr_wcout@std@@3PAV?$basic_ostream@_WU?$char_traits@_W@std@@@1@A ?_Put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@PBDI@Z ?_Put@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABA?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@PBGI@Z ?_Put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABA?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@PB_WI@Z ?_Raise_handler@std@@3P6AXABVexception@stdext@@@ZA ?_Random_device@std@@YAIXZ ?_Read_dir@sys@tr2@std@@YAPADPADPAXAAW4file_type@123@@Z ?_Read_dir@sys@tr2@std@@YAPA_WPA_WPAXAAW4file_type@123@@Z ?_Release@_Pad@std@@QAEXXZ ?_Remove_dir@sys@tr2@std@@YA_NPBD@Z ?_Remove_dir@sys@tr2@std@@YA_NPB_W@Z ?_Rename@sys@tr2@std@@YAHPBD0@Z ?_Rename@sys@tr2@std@@YAHPB_W0@Z ?_Rep@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@DI@Z ?_Rep@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABA?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@GI@Z ?_Rep@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABA?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@_WI@Z ?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z ?_Rng_abort@std@@YAXPBD@Z ?_Segment_index_of@_Concurrent_vector_base_v4@details@Concurrency@@KAII@Z ?_Setgloballocale@locale@std@@CAXPAX@Z ?_Src@?1??_Getffldx@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@DU?$char_traits@D@std@@@3@1AAVios_base@3@PAH@Z@4QBDB ?_Src@?1??_Getffldx@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@GU?$char_traits@G@std@@@3@1AAVios_base@3@PAH@Z@4QBDB ?_Src@?1??_Getffldx@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@3@1AAVios_base@3@PAH@Z@4QBDB ?_Src@?1??_Getifld@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@DU?$char_traits@D@std@@@3@1HABVlocale@3@@Z@4QBDB ?_Src@?1??_Getifld@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@GU?$char_traits@G@std@@@3@1HABVlocale@3@@Z@4QBDB ?_Src@?1??_Getifld@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@3@1HABVlocale@3@@Z@4QBDB ?_Src@?3??_Getffld@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@DU?$char_traits@D@std@@@3@1AAVios_base@3@PAH@Z@4QBDB ?_Src@?3??_Getffld@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@GU?$char_traits@G@std@@@3@1AAVios_base@3@PAH@Z@4QBDB ?_Src@?3??_Getffld@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@3@1AAVios_base@3@PAH@Z@4QBDB ?_Stat@sys@tr2@std@@YA?AW4file_type@123@PBDAAH@Z ?_Stat@sys@tr2@std@@YA?AW4file_type@123@PB_WAAH@Z ?_Statvfs@sys@tr2@std@@YA?AUspace_info@123@PBD@Z ?_Statvfs@sys@tr2@std@@YA?AUspace_info@123@PB_W@Z ?_Swap_all@_Container_base0@std@@QAEXAAU12@@Z ?_Swap_all@_Container_base12@std@@QAEXAAU12@@Z ?_Symlink@sys@tr2@std@@YAHPBD0@Z ?_Symlink@sys@tr2@std@@YAHPB_W0@Z ?_Sync@ios_base@std@@0_NA ?_Syserror_map@std@@YAPBDH@Z ?_Throw_C_error@std@@YAXH@Z ?_Throw_Cpp_error@std@@YAXH@Z ?_Throw_future_error@std@@YAXABVerror_code@1@@Z ?_Throw_lock_error@threads@stdext@@YAXXZ ?_Throw_resource_error@threads@stdext@@YAXXZ ?_Tidy@?$_Yarn@D@std@@AAEXXZ ?_Tidy@?$_Yarn@_W@std@@AAEXXZ ?_Tidy@?$ctype@D@std@@IAEXXZ ?_Tidy@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@AAEXXZ ?_Tidy@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@AAEXXZ ?_Tidy@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@AAEXXZ ?_Tidy@ios_base@std@@AAEXXZ ?_Unlink@sys@tr2@std@@YAHPBD@Z ?_Unlink@sys@tr2@std@@YAHPB_W@Z ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ ?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAEXXZ ?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ ?_W_Getdays@_Locinfo@std@@QBEPBGXZ ?_W_Getmonths@_Locinfo@std@@QBEPBGXZ ?_W_Gettnames@_Locinfo@std@@QBE?AV_Timevec@2@XZ ?_Winerror_map@std@@YAPBDH@Z ?_XLgamma@std@@YAMM@Z ?_XLgamma@std@@YANN@Z ?_XLgamma@std@@YAOO@Z ?_Xbad_alloc@std@@YAXXZ ?_Xbad_function_call@std@@YAXXZ ?_Xinvalid_argument@std@@YAXPBD@Z ?_Xlength_error@std@@YAXPBD@Z ?_Xout_of_range@std@@YAXPBD@Z ?_Xoverflow_error@std@@YAXPBD@Z ?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z ?_Xruntime_error@std@@YAXPBD@Z ?adopt_lock@std@@3Uadopt_lock_t@1@B ?always_noconv@codecvt_base@std@@QBE_NXZ ?bad@ios_base@std@@QBE_NXZ ?c_str@?$_Yarn@D@std@@QBEPBDXZ ?cancel@agent@Concurrency@@QAE_NXZ ?cancel_current_task@Concurrency@@YAXXZ ?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A ?classic@locale@std@@SAABV12@XZ ?classic_table@?$ctype@D@std@@SAPBFXZ ?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z ?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXI@Z ?clear@?$basic_ios@GU?$char_traits@G@std@@@std@@QAEXH_N@Z ?clear@?$basic_ios@GU?$char_traits@G@std@@@std@@QAEXI@Z ?clear@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z ?clear@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXI@Z ?clear@ios_base@std@@QAEXH@Z ?clear@ios_base@std@@QAEXH_N@Z ?clear@ios_base@std@@QAEXI@Z ?clog@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?copyfmt@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEAAV12@ABV12@@Z ?copyfmt@?$basic_ios@GU?$char_traits@G@std@@@std@@QAEAAV12@ABV12@@Z ?copyfmt@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEAAV12@ABV12@@Z ?copyfmt@ios_base@std@@QAEAAV12@ABV12@@Z ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?date_order@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AW4dateorder@time_base@2@XZ ?date_order@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AW4dateorder@time_base@2@XZ ?date_order@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AW4dateorder@time_base@2@XZ ?defer_lock@std@@3Udefer_lock_t@1@B ?do_always_noconv@?$codecvt@DDH@std@@MBE_NXZ ?do_always_noconv@?$codecvt@GDH@std@@MBE_NXZ ?do_always_noconv@?$codecvt@_WDH@std@@MBE_NXZ ?do_always_noconv@codecvt_base@std@@MBE_NXZ ?do_date_order@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AW4dateorder@time_base@2@XZ ?do_date_order@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AW4dateorder@time_base@2@XZ ?do_date_order@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AW4dateorder@time_base@2@XZ ?do_encoding@?$codecvt@GDH@std@@MBEHXZ ?do_encoding@?$codecvt@_WDH@std@@MBEHXZ ?do_encoding@codecvt_base@std@@MBEHXZ ?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAAG@Z ?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAAI@Z ?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAAJ@Z ?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAAK@Z ?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAAM@Z ?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAAN@Z ?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAAO@Z ?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAAPAX@Z ?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAA_J@Z ?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAA_K@Z ?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAA_N@Z ?do_get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHAAG@Z ?do_get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHAAI@Z ?do_get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHAAJ@Z ?do_get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHAAK@Z ?do_get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHAAM@Z ?do_get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHAAN@Z ?do_get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHAAO@Z ?do_get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHAAPAX@Z ?do_get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHAA_J@Z ?do_get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHAA_K@Z ?do_get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHAA_N@Z ?do_get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAAG@Z ?do_get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAAI@Z ?do_get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAAJ@Z ?do_get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAAK@Z ?do_get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAAM@Z ?do_get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAAN@Z ?do_get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAAO@Z ?do_get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAAPAX@Z ?do_get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAA_J@Z ?do_get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAA_K@Z ?do_get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAA_N@Z ?do_get@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@DD@Z ?do_get@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@DD@Z ?do_get@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@DD@Z ?do_get_date@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z ?do_get_date@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z ?do_get_date@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z ?do_get_monthname@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z ?do_get_monthname@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z ?do_get_monthname@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z ?do_get_time@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z ?do_get_time@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z ?do_get_time@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z ?do_get_weekday@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z ?do_get_weekday@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z ?do_get_weekday@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z ?do_get_year@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z ?do_get_year@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z ?do_get_year@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z ?do_in@?$codecvt@DDH@std@@MBEHAAHPBD1AAPBDPAD3AAPAD@Z ?do_in@?$codecvt@GDH@std@@MBEHAAHPBD1AAPBDPAG3AAPAG@Z ?do_in@?$codecvt@_WDH@std@@MBEHAAHPBD1AAPBDPA_W3AAPA_W@Z ?do_is@?$ctype@G@std@@MBEPBGPBG0PAF@Z ?do_is@?$ctype@G@std@@MBE_NFG@Z ?do_is@?$ctype@_W@std@@MBEPB_WPB_W0PAF@Z ?do_is@?$ctype@_W@std@@MBE_NF_W@Z ?do_length@?$codecvt@DDH@std@@MBEHAAHPBD1I@Z ?do_length@?$codecvt@GDH@std@@MBEHAAHPBD1I@Z ?do_length@?$codecvt@_WDH@std@@MBEHAAHPBD1I@Z ?do_max_length@?$codecvt@GDH@std@@MBEHXZ ?do_max_length@?$codecvt@_WDH@std@@MBEHXZ ?do_max_length@codecvt_base@std@@MBEHXZ ?do_narrow@?$ctype@D@std@@MBEDDD@Z ?do_narrow@?$ctype@D@std@@MBEPBDPBD0DPAD@Z ?do_narrow@?$ctype@G@std@@MBEDGD@Z ?do_narrow@?$ctype@G@std@@MBEPBGPBG0DPAD@Z ?do_narrow@?$ctype@_W@std@@MBED_WD@Z ?do_narrow@?$ctype@_W@std@@MBEPB_WPB_W0DPAD@Z ?do_out@?$codecvt@DDH@std@@MBEHAAHPBD1AAPBDPAD3AAPAD@Z ?do_out@?$codecvt@GDH@std@@MBEHAAHPBG1AAPBGPAD3AAPAD@Z ?do_out@?$codecvt@_WDH@std@@MBEHAAHPB_W1AAPB_WPAD3AAPAD@Z ?do_put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@DJ@Z ?do_put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@DK@Z ?do_put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@DN@Z ?do_put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@DO@Z ?do_put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@DPBX@Z ?do_put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@D_J@Z ?do_put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@D_K@Z ?do_put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@D_N@Z ?do_put@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@GJ@Z ?do_put@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@GK@Z ?do_put@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@GN@Z ?do_put@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@GO@Z ?do_put@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@GPBX@Z ?do_put@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@G_J@Z ?do_put@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@G_K@Z ?do_put@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@G_N@Z ?do_put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_WJ@Z ?do_put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_WK@Z ?do_put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_WN@Z ?do_put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_WO@Z ?do_put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_WPBX@Z ?do_put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_W_J@Z ?do_put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_W_K@Z ?do_put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_W_N@Z ?do_put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@DPBUtm@@DD@Z ?do_put@?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@GPBUtm@@DD@Z ?do_put@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_WPBUtm@@DD@Z ?do_scan_is@?$ctype@G@std@@MBEPBGFPBG0@Z ?do_scan_is@?$ctype@_W@std@@MBEPB_WFPB_W0@Z ?do_scan_not@?$ctype@G@std@@MBEPBGFPBG0@Z ?do_scan_not@?$ctype@_W@std@@MBEPB_WFPB_W0@Z ?do_tolower@?$ctype@D@std@@MBEDD@Z ?do_tolower@?$ctype@D@std@@MBEPBDPADPBD@Z ?do_tolower@?$ctype@G@std@@MBEGG@Z ?do_tolower@?$ctype@G@std@@MBEPBGPAGPBG@Z ?do_tolower@?$ctype@_W@std@@MBEPB_WPA_WPB_W@Z ?do_tolower@?$ctype@_W@std@@MBE_W_W@Z ?do_toupper@?$ctype@D@std@@MBEDD@Z ?do_toupper@?$ctype@D@std@@MBEPBDPADPBD@Z ?do_toupper@?$ctype@G@std@@MBEGG@Z ?do_toupper@?$ctype@G@std@@MBEPBGPAGPBG@Z ?do_toupper@?$ctype@_W@std@@MBEPB_WPA_WPB_W@Z ?do_toupper@?$ctype@_W@std@@MBE_W_W@Z ?do_unshift@?$codecvt@DDH@std@@MBEHAAHPAD1AAPAD@Z ?do_unshift@?$codecvt@GDH@std@@MBEHAAHPAD1AAPAD@Z ?do_unshift@?$codecvt@_WDH@std@@MBEHAAHPAD1AAPAD@Z ?do_widen@?$ctype@D@std@@MBEDD@Z ?do_widen@?$ctype@D@std@@MBEPBDPBD0PAD@Z ?do_widen@?$ctype@G@std@@MBEGD@Z ?do_widen@?$ctype@G@std@@MBEPBDPBD0PAG@Z ?do_widen@?$ctype@_W@std@@MBEPBDPBD0PA_W@Z ?do_widen@?$ctype@_W@std@@MBE_WD@Z ?done@agent@Concurrency@@IAE_NXZ ?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ ?eback@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ ?eback@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ ?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ ?egptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ ?egptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ ?empty@?$_Yarn@D@std@@QBE_NXZ ?empty@locale@std@@SA?AV12@XZ ?encoding@codecvt_base@std@@QBEHXZ ?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z ?endl@std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@1@AAV21@@Z ?endl@std@@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@1@AAV21@@Z ?ends@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z ?ends@std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@1@AAV21@@Z ?ends@std@@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@1@AAV21@@Z ?eof@ios_base@std@@QBE_NXZ ?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ ?epptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ ?epptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ ?exceptions@ios_base@std@@QAEXH@Z ?exceptions@ios_base@std@@QAEXI@Z ?exceptions@ios_base@std@@QBEHXZ ?fail@ios_base@std@@QBE_NXZ ?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEDD@Z ?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ ?fill@?$basic_ios@GU?$char_traits@G@std@@@std@@QAEGG@Z ?fill@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEGXZ ?fill@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAE_W_W@Z ?fill@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBE_WXZ ?flags@ios_base@std@@QAEHH@Z ?flags@ios_base@std@@QBEHXZ ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ ?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV12@XZ ?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ ?flush@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z ?flush@std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@1@AAV21@@Z ?flush@std@@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@1@AAV21@@Z ?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z ?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXH@Z ?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXH@Z ?gcount@?$basic_istream@DU?$char_traits@D@std@@@std@@QBE_JXZ ?gcount@?$basic_istream@GU?$char_traits@G@std@@@std@@QBE_JXZ ?gcount@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QBE_JXZ ?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@AAD@Z ?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@AAV?$basic_streambuf@DU?$char_traits@D@std@@@2@@Z ?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@AAV?$basic_streambuf@DU?$char_traits@D@std@@@2@D@Z ?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z ?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_JD@Z ?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ ?get@?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV12@AAG@Z ?get@?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV12@AAV?$basic_streambuf@GU?$char_traits@G@std@@@2@@Z ?get@?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV12@AAV?$basic_streambuf@GU?$char_traits@G@std@@@2@G@Z ?get@?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV12@PAG_J@Z ?get@?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV12@PAG_JG@Z ?get@?$basic_istream@GU?$char_traits@G@std@@@std@@QAEGXZ ?get@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@AAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@@Z ?get@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@AAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@_W@Z ?get@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@AA_W@Z ?get@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@PA_W_J@Z ?get@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@PA_W_J_W@Z ?get@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEGXZ ?get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAAG@Z ?get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAAI@Z ?get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAAJ@Z ?get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAAK@Z ?get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAAM@Z ?get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAAN@Z ?get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAAO@Z ?get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAAPAX@Z ?get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAA_J@Z ?get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAA_K@Z ?get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAA_N@Z ?get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHAAG@Z ?get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHAAI@Z ?get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHAAJ@Z ?get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHAAK@Z ?get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHAAM@Z ?get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHAAN@Z ?get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHAAO@Z ?get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHAAPAX@Z ?get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHAA_J@Z ?get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHAA_K@Z ?get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHAA_N@Z ?get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAAG@Z ?get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAAI@Z ?get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAAJ@Z ?get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAAK@Z ?get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAAM@Z ?get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAAN@Z ?get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAAO@Z ?get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAAPAX@Z ?get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAA_J@Z ?get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAA_K@Z ?get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAA_N@Z ?get@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@DD@Z ?get@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@PBD4@Z ?get@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@DD@Z ?get@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@PBG4@Z ?get@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@DD@Z ?get@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@PB_W4@Z ?get_date@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z ?get_date@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z ?get_date@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z ?get_monthname@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z ?get_monthname@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z ?get_monthname@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z ?get_new_handler@std@@YAP6AXXZXZ ?get_time@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z ?get_time@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z ?get_time@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z ?get_weekday@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z ?get_weekday@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z ?get_weekday@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z ?get_year@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z ?get_year@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z ?get_year@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z ?getline@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z ?getline@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_JD@Z ?getline@?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV12@PAG_J@Z ?getline@?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV12@PAG_JG@Z ?getline@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@PA_W_J@Z ?getline@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@PA_W_J_W@Z ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ ?getloc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QBE?AVlocale@2@XZ ?getloc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QBE?AVlocale@2@XZ ?getloc@ios_base@std@@QBE?AVlocale@2@XZ ?global@locale@std@@SA?AV12@ABV12@@Z ?good@ios_base@std@@QBE_NXZ ?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ ?gptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ ?gptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ ?id@?$codecvt@DDH@std@@2V0locale@2@A ?id@?$codecvt@GDH@std@@2V0locale@2@A ?id@?$codecvt@_WDH@std@@2V0locale@2@A ?id@?$collate@D@std@@2V0locale@2@A ?id@?$collate@G@std@@2V0locale@2@A ?id@?$collate@_W@std@@2V0locale@2@A ?id@?$ctype@D@std@@2V0locale@2@A ?id@?$ctype@G@std@@2V0locale@2@A ?id@?$ctype@_W@std@@2V0locale@2@A ?id@?$messages@D@std@@2V0locale@2@A ?id@?$messages@G@std@@2V0locale@2@A ?id@?$messages@_W@std@@2V0locale@2@A ?id@?$money_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A ?id@?$money_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@2V0locale@2@A ?id@?$money_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@2V0locale@2@A ?id@?$money_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A ?id@?$money_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@2V0locale@2@A ?id@?$money_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@2V0locale@2@A ?id@?$moneypunct@D$00@std@@2V0locale@2@A ?id@?$moneypunct@D$0A@@std@@2V0locale@2@A ?id@?$moneypunct@G$00@std@@2V0locale@2@A ?id@?$moneypunct@G$0A@@std@@2V0locale@2@A ?id@?$moneypunct@_W$00@std@@2V0locale@2@A ?id@?$moneypunct@_W$0A@@std@@2V0locale@2@A ?id@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A ?id@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@2V0locale@2@A ?id@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@2V0locale@2@A ?id@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A ?id@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@2V0locale@2@A ?id@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@2V0locale@2@A ?id@?$numpunct@D@std@@2V0locale@2@A ?id@?$numpunct@G@std@@2V0locale@2@A ?id@?$numpunct@_W@std@@2V0locale@2@A ?id@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A ?id@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@2V0locale@2@A ?id@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@2V0locale@2@A ?id@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A ?id@?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@2V0locale@2@A ?id@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@2V0locale@2@A ?ignore@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z ?ignore@?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV12@_JG@Z ?ignore@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@_JG@Z ?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QAE?AVlocale@2@ABV32@@Z ?imbue@?$basic_ios@GU?$char_traits@G@std@@@std@@QAE?AVlocale@2@ABV32@@Z ?imbue@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAE?AVlocale@2@ABV32@@Z ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z ?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEXABVlocale@2@@Z ?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z ?imbue@ios_base@std@@QAE?AVlocale@2@ABV32@@Z ?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z ?in@?$codecvt@GDH@std@@QBEHAAHPBD1AAPBDPAG3AAPAG@Z ?in@?$codecvt@_WDH@std@@QBEHAAHPBD1AAPBDPA_W3AAPA_W@Z ?in_avail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JXZ ?in_avail@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAE_JXZ ?in_avail@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JXZ ?init@?$basic_ios@DU?$char_traits@D@std@@@std@@IAEXPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@_N@Z ?init@?$basic_ios@GU?$char_traits@G@std@@@std@@IAEXPAV?$basic_streambuf@GU?$char_traits@G@std@@@2@_N@Z ?init@?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAEXPAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@_N@Z ?intl@?$moneypunct@D$00@std@@2_NB ?intl@?$moneypunct@D$0A@@std@@2_NB ?intl@?$moneypunct@G$00@std@@2_NB ?intl@?$moneypunct@G$0A@@std@@2_NB ?intl@?$moneypunct@_W$00@std@@2_NB ?intl@?$moneypunct@_W$0A@@std@@2_NB ?ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z ?ipfx@?$basic_istream@GU?$char_traits@G@std@@@std@@QAE_N_N@Z ?ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE_N_N@Z ?is@?$ctype@D@std@@QBEPBDPBD0PAF@Z ?is@?$ctype@D@std@@QBE_NFD@Z ?is@?$ctype@G@std@@QBEPBGPBG0PAF@Z ?is@?$ctype@G@std@@QBE_NFG@Z ?is@?$ctype@_W@std@@QBEPB_WPB_W0PAF@Z ?is@?$ctype@_W@std@@QBE_NF_W@Z ?is_current_task_group_canceling@Concurrency@@YA_NXZ ?is_task_cancellation_requested@Concurrency@@YA_NXZ ?isfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEXXZ ?isfx@?$basic_istream@GU?$char_traits@G@std@@@std@@QAEXXZ ?isfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEXXZ ?iword@ios_base@std@@QAEAAJH@Z ?length@?$codecvt@DDH@std@@QBEHAAHPBD1I@Z ?length@?$codecvt@GDH@std@@QBEHAAHPBD1I@Z ?length@?$codecvt@_WDH@std@@QBEHAAHPBD1I@Z ?max_length@codecvt_base@std@@QBEHXZ ?move@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEX$$QAV12@@Z ?move@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXAAV12@@Z ?move@?$basic_ios@GU?$char_traits@G@std@@@std@@QAEX$$QAV12@@Z ?move@?$basic_ios@GU?$char_traits@G@std@@@std@@QAEXAAV12@@Z ?move@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEX$$QAV12@@Z ?move@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXAAV12@@Z ?narrow@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDDD@Z ?narrow@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEDGD@Z ?narrow@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBED_WD@Z ?narrow@?$ctype@D@std@@QBEDDD@Z ?narrow@?$ctype@D@std@@QBEPBDPBD0DPAD@Z ?narrow@?$ctype@G@std@@QBEDGD@Z ?narrow@?$ctype@G@std@@QBEPBGPBG0DPAD@Z ?narrow@?$ctype@_W@std@@QBED_WD@Z ?narrow@?$ctype@_W@std@@QBEPB_WPB_W0DPAD@Z ?opfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE_NXZ ?opfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE_NXZ ?opfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE_NXZ ?osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ ?osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEXXZ ?osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ ?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z ?out@?$codecvt@GDH@std@@QBEHAAHPBG1AAPBGPAD3AAPAD@Z ?out@?$codecvt@_WDH@std@@QBEHAAHPB_W1AAPB_WPAD3AAPAD@Z ?overflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z ?overflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEGG@Z ?overflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGG@Z ?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z ?pbackfail@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEGG@Z ?pbackfail@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGG@Z ?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ ?pbase@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ ?pbase@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ ?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z ?pbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXH@Z ?pbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXH@Z ?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ ?peek@?$basic_istream@GU?$char_traits@G@std@@@std@@QAEGXZ ?peek@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEGXZ ?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ ?pptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ ?pptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ ?precision@ios_base@std@@QAE_J_J@Z ?precision@ios_base@std@@QBE_JXZ ?pubimbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE?AVlocale@2@ABV32@@Z ?pubimbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAE?AVlocale@2@ABV32@@Z ?pubimbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE?AVlocale@2@ABV32@@Z ?pubseekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@_JHH@Z ?pubseekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@_JII@Z ?pubseekoff@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAE?AV?$fpos@H@2@_JHH@Z ?pubseekoff@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAE?AV?$fpos@H@2@_JII@Z ?pubseekoff@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE?AV?$fpos@H@2@_JHH@Z ?pubseekoff@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE?AV?$fpos@H@2@_JII@Z ?pubseekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@V32@H@Z ?pubseekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@V32@I@Z ?pubseekpos@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAE?AV?$fpos@H@2@V32@H@Z ?pubseekpos@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAE?AV?$fpos@H@2@V32@I@Z ?pubseekpos@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE?AV?$fpos@H@2@V32@H@Z ?pubseekpos@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE?AV?$fpos@H@2@V32@I@Z ?pubsetbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEPAV12@PAD_J@Z ?pubsetbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEPAV12@PAG_J@Z ?pubsetbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEPAV12@PA_W_J@Z ?pubsync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ ?pubsync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEHXZ ?pubsync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEHXZ ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z ?put@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV12@G@Z ?put@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@_W@Z ?put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@DJ@Z ?put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@DK@Z ?put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@DN@Z ?put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@DO@Z ?put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@DPBX@Z ?put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@D_J@Z ?put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@D_K@Z ?put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@D_N@Z ?put@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@GJ@Z ?put@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@GK@Z ?put@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@GN@Z ?put@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@GO@Z ?put@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@GPBX@Z ?put@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@G_J@Z ?put@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@G_K@Z ?put@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@G_N@Z ?put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_WJ@Z ?put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_WK@Z ?put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_WN@Z ?put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_WO@Z ?put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_WPBX@Z ?put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_W_J@Z ?put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_W_K@Z ?put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_W_N@Z ?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@DPBUtm@@DD@Z ?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@DPBUtm@@PBD3@Z ?put@?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@GPBUtm@@DD@Z ?put@?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@GPBUtm@@PBG3@Z ?put@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_WPBUtm@@DD@Z ?put@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_WPBUtm@@PB_W4@Z ?putback@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z ?putback@?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV12@G@Z ?putback@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@_W@Z ?pword@ios_base@std@@QAEAAPAXH@Z ?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@PAV32@@Z ?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ ?rdbuf@?$basic_ios@GU?$char_traits@G@std@@@std@@QAEPAV?$basic_streambuf@GU?$char_traits@G@std@@@2@PAV32@@Z ?rdbuf@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEPAV?$basic_streambuf@GU?$char_traits@G@std@@@2@XZ ?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEPAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@PAV32@@Z ?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBEPAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@XZ ?rdstate@ios_base@std@@QBEHXZ ?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z ?read@?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV12@PAG_J@Z ?read@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@PA_W_J@Z ?readsome@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_JPAD_J@Z ?readsome@?$basic_istream@GU?$char_traits@G@std@@@std@@QAE_JPAG_J@Z ?readsome@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE_JPA_W_J@Z ?register_callback@ios_base@std@@QAEXP6AXW4event@12@AAV12@H@ZH@Z ?resetiosflags@std@@YA?AU?$_Smanip@H@1@H@Z ?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ ?sbumpc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ ?sbumpc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ ?scan_is@?$ctype@D@std@@QBEPBDFPBD0@Z ?scan_is@?$ctype@G@std@@QBEPBGFPBG0@Z ?scan_is@?$ctype@_W@std@@QBEPB_WFPB_W0@Z ?scan_not@?$ctype@D@std@@QBEPBDFPBD0@Z ?scan_not@?$ctype@G@std@@QBEPBGFPBG0@Z ?scan_not@?$ctype@_W@std@@QBEPB_WFPB_W0@Z ?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z ?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z ?seekg@?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z ?seekg@?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV12@_JH@Z ?seekg@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z ?seekg@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@_JH@Z ?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@H@2@_JHH@Z ?seekoff@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE?AV?$fpos@H@2@_JHH@Z ?seekoff@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE?AV?$fpos@H@2@_JHH@Z ?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z ?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z ?seekp@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z ?seekp@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV12@_JH@Z ?seekp@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z ?seekp@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@_JH@Z ?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@H@2@V32@H@Z ?seekpos@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE?AV?$fpos@H@2@V32@H@Z ?seekpos@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE?AV?$fpos@H@2@V32@H@Z ?set_new_handler@std@@YAP6AXXZP6AXXZ@Z ?set_rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@@Z ?set_rdbuf@?$basic_ios@GU?$char_traits@G@std@@@std@@QAEXPAV?$basic_streambuf@GU?$char_traits@G@std@@@2@@Z ?set_rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXPAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@@Z ?setbase@std@@YA?AU?$_Smanip@H@1@H@Z ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z ?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEPAV12@PAG_J@Z ?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z ?setf@ios_base@std@@QAEHH@Z ?setf@ios_base@std@@QAEHHH@Z ?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z ?setg@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXPAG00@Z ?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W00@Z ?setiosflags@std@@YA?AU?$_Smanip@H@1@H@Z ?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z ?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD0@Z ?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXPAG00@Z ?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXPAG0@Z ?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W00@Z ?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W0@Z ?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXI@Z ?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QAEXH_N@Z ?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QAEXI@Z ?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z ?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXI@Z ?setstate@ios_base@std@@QAEXH@Z ?setstate@ios_base@std@@QAEXH_N@Z ?setstate@ios_base@std@@QAEXI@Z ?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z ?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ ?sgetc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ ?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ ?sgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPAD_J@Z ?sgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAE_JPAG_J@Z ?sgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPA_W_J@Z ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ ?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JXZ ?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ ?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ ?snextc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ ?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ ?sputbackc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z ?sputbackc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGG@Z ?sputbackc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z ?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGG@Z ?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z ?sputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAE_JPBG_J@Z ?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z ?start@agent@Concurrency@@QAE_NXZ ?status@agent@Concurrency@@QAE?AW4agent_status@2@XZ ?status_port@agent@Concurrency@@QAEPAV?$ISource@W4agent_status@Concurrency@@@2@XZ ?stossc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ ?stossc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEXXZ ?stossc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEXXZ ?sungetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ ?sungetc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ ?sungetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ ?swap@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXAAV12@@Z ?swap@?$basic_ios@GU?$char_traits@G@std@@@std@@QAEXAAV12@@Z ?swap@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXAAV12@@Z ?swap@?$basic_iostream@DU?$char_traits@D@std@@@std@@IAEXAAV12@@Z ?swap@?$basic_iostream@GU?$char_traits@G@std@@@std@@IAEXAAV12@@Z ?swap@?$basic_iostream@_WU?$char_traits@_W@std@@@std@@IAEXAAV12@@Z ?swap@?$basic_istream@DU?$char_traits@D@std@@@std@@IAEXAAV12@@Z ?swap@?$basic_istream@GU?$char_traits@G@std@@@std@@IAEXAAV12@@Z ?swap@?$basic_istream@_WU?$char_traits@_W@std@@@std@@IAEXAAV12@@Z ?swap@?$basic_ostream@DU?$char_traits@D@std@@@std@@IAEXAAV12@@Z ?swap@?$basic_ostream@GU?$char_traits@G@std@@@std@@IAEXAAV12@@Z ?swap@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@IAEXAAV12@@Z ?swap@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXAAV12@@Z ?swap@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXAAV12@@Z ?swap@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXAAV12@@Z ?swap@ios_base@std@@QAEXAAV12@@Z ?sync@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ ?sync@?$basic_istream@GU?$char_traits@G@std@@@std@@QAEHXZ ?sync@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEHXZ ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ ?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEHXZ ?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ ?sync_with_stdio@ios_base@std@@SA_N_N@Z ?table@?$ctype@D@std@@QBEPBFXZ ?table_size@?$ctype@D@std@@2IB ?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ ?tellg@?$basic_istream@GU?$char_traits@G@std@@@std@@QAE?AV?$fpos@H@2@XZ ?tellg@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE?AV?$fpos@H@2@XZ ?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ ?tellp@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE?AV?$fpos@H@2@XZ ?tellp@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE?AV?$fpos@H@2@XZ ?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@PAV32@@Z ?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ ?tie@?$basic_ios@GU?$char_traits@G@std@@@std@@QAEPAV?$basic_ostream@GU?$char_traits@G@std@@@2@PAV32@@Z ?tie@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEPAV?$basic_ostream@GU?$char_traits@G@std@@@2@XZ ?tie@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEPAV?$basic_ostream@_WU?$char_traits@_W@std@@@2@PAV32@@Z ?tie@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBEPAV?$basic_ostream@_WU?$char_traits@_W@std@@@2@XZ ?tolower@?$ctype@D@std@@QBEDD@Z ?tolower@?$ctype@D@std@@QBEPBDPADPBD@Z ?tolower@?$ctype@G@std@@QBEGG@Z ?tolower@?$ctype@G@std@@QBEPBGPAGPBG@Z ?tolower@?$ctype@_W@std@@QBEPB_WPA_WPB_W@Z ?tolower@?$ctype@_W@std@@QBE_W_W@Z ?toupper@?$ctype@D@std@@QBEDD@Z ?toupper@?$ctype@D@std@@QBEPBDPADPBD@Z ?toupper@?$ctype@G@std@@QBEGG@Z ?toupper@?$ctype@G@std@@QBEPBGPAGPBG@Z ?toupper@?$ctype@_W@std@@QBEPB_WPA_WPB_W@Z ?toupper@?$ctype@_W@std@@QBE_W_W@Z ?try_to_lock@std@@3Utry_to_lock_t@1@B ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ ?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEGXZ ?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ ?uncaught_exception@std@@YA_NXZ ?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ ?underflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEGXZ ?underflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ ?unget@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ ?unget@?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV12@XZ ?unget@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ ?unsetf@ios_base@std@@QAEXH@Z ?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z ?unshift@?$codecvt@GDH@std@@QBEHAAHPAD1AAPAD@Z ?unshift@?$codecvt@_WDH@std@@QBEHAAHPAD1AAPAD@Z ?wait@agent@Concurrency@@SA?AW4agent_status@2@PAV12@I@Z ?wait_for_all@agent@Concurrency@@SAXIPAPAV12@PAW4agent_status@2@I@Z ?wait_for_one@agent@Concurrency@@SAXIPAPAV12@AAW4agent_status@2@AAII@Z ?wcerr@std@@3V?$basic_ostream@GU?$char_traits@G@std@@@1@A ?wcerr@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A ?wcin@std@@3V?$basic_istream@GU?$char_traits@G@std@@@1@A ?wcin@std@@3V?$basic_istream@_WU?$char_traits@_W@std@@@1@A ?wclog@std@@3V?$basic_ostream@GU?$char_traits@G@std@@@1@A ?wclog@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A ?wcout@std@@3V?$basic_ostream@GU?$char_traits@G@std@@@1@A ?wcout@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z ?widen@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEGD@Z ?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBE_WD@Z ?widen@?$ctype@D@std@@QBEDD@Z ?widen@?$ctype@D@std@@QBEPBDPBD0PAD@Z ?widen@?$ctype@G@std@@QBEGD@Z ?widen@?$ctype@G@std@@QBEPBDPBD0PAG@Z ?widen@?$ctype@_W@std@@QBEPBDPBD0PA_W@Z ?widen@?$ctype@_W@std@@QBE_WD@Z ?width@ios_base@std@@QAE_J_J@Z ?width@ios_base@std@@QBE_JXZ ?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z ?write@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV12@PBG_J@Z ?write@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@PB_W_J@Z ?ws@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@1@AAV21@@Z ?ws@std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@1@AAV21@@Z ?ws@std@@YAAAV?$basic_istream@_WU?$char_traits@_W@std@@@1@AAV21@@Z ?xalloc@ios_base@std@@SAHXZ ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z ?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JPAG_J@Z ?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z ?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JPBG_J@Z ?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z _Call_once _Call_onceEx _Cnd_broadcast _Cnd_destroy _Cnd_do_broadcast_at_thread_exit _Cnd_init _Cnd_register_at_thread_exit _Cnd_signal _Cnd_timedwait _Cnd_unregister_at_thread_exit _Cnd_wait _Cosh _Denorm _Dint _Dnorm _Do_call _Dscale _Dtento _Dtest _Dunscale _Eps _Exp _FCosh _FDenorm _FDint _FDnorm _FDscale _FDtento _FDtest _FDunscale _FEps _FExp _FInf _FNan _FRteps _FSinh _FSnan _FXbig _FXp_addh _FXp_addx _FXp_getw _FXp_invx _FXp_ldexpx _FXp_movx _FXp_mulh _FXp_mulx _FXp_setn _FXp_setw _FXp_sqrtx _FXp_subx _FZero _Getcoll _Getctype _Getcvt _Getdateorder _Getwctype _Getwctypes _Hugeval _Inf _LCosh _LDenorm _LDint _LDscale _LDtento _LDtest _LDunscale _LEps _LExp _LInf _LNan _LPoly _LRteps _LSinh _LSnan _LXbig _LXp_addh _LXp_addx _LXp_getw _LXp_invx _LXp_ldexpx _LXp_movx _LXp_mulh _LXp_mulx _LXp_setn _LXp_setw _LXp_sqrtx _LXp_subx _LZero _Lock_shared_ptr_spin_lock _Mbrtowc _Mtx_clear_owner _Mtx_current_owns _Mtx_destroy _Mtx_getconcrtcs _Mtx_init _Mtx_lock _Mtx_reset_owner _Mtx_timedlock _Mtx_trylock _Mtx_unlock _Mtxdst _Mtxinit _Mtxlock _Mtxunlock _Nan _Once _Poly _Rteps _Sinh _Snan _Stod _Stodx _Stof _Stoflt _Stofx _Stold _Stoldx _Stoll _Stollx _Stolx _Stopfx _Stoul _Stoull _Stoullx _Stoulx _Stoxflt _Strcoll _Strxfrm _Thrd_abort _Thrd_create _Thrd_current _Thrd_detach _Thrd_equal _Thrd_exit _Thrd_join _Thrd_lt _Thrd_sleep _Thrd_start _Thrd_yield _Tolower _Toupper _Towlower _Towupper _Tss_create _Tss_delete _Tss_get _Tss_set _Unlock_shared_ptr_spin_lock _Wcrtomb _Wcscoll _Wcsxfrm _Xbig _Xp_addh _Xp_addx _Xp_getw _Xp_invx _Xp_ldexpx _Xp_movx _Xp_mulh _Xp_mulx _Xp_setn _Xp_setw _Xp_sqrtx _Xp_subx _Xtime_diff_to_millis _Xtime_diff_to_millis2 _Xtime_get_ticks _Zero __Wcrtomb_lk towctrans wctrans wctype xtime_get

msvcr110.dll

IMPHASH e057a95f8936f77238b048f253956b3b
SHA256 b30160e759115e24425b9bcdf606ef6ebce4657487525ede7f1ac40b90ff7e49
MD5 4ba25d2cbe1587a841dcfb8c8c4a6ea6
SHA1 52693d4b5e0b55a929099b680348c3932f2c3c62
SHA512 82e86ec67a5c6cddf2230872f66560f4b0c3e4c1bb672507bbb8446a8d6f62512cbd0475fe23b619db3a67bb870f4f742761cf1f87d50db7f14076f54006f6c6
SSDEEP 12288:TmCyHcMpK7QdgD+9Tr8r3FmJciMgLFWkA8qTWu+FVlofpJCjNdr12iqwZeq:TmCyHNIQdTryVmCipIkqTWu+Fr
TLSH
T19A15BE12B6D2C0B2C57200701628E772597FBA72547999BBAFD98E0E1DB06C0F71B772
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Digest

d2:28:17:88:08:cf:56:44:da:80:3e:bc:8d:b4:d0:f7:6f:2b:96:48:b2:24:6c:ee:31:43:70:6e:3a:90:25:9d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Nov 6, 2012

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

PE Signature issue

Digest

7f:48:28:6b:9a:08:17:2f:0b:a1:53:12:4c:43:44:c3:d6:a4:27:be

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Nov 6, 2012

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:9d:1e:8d:27:ae:b8:f3:d8:38:00:01:00:00:00:9d

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 4, 2012 - Mar 4, 2013

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:B8EC-30A4-7144,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:02:92:4a:00:00:00:00:00:20

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 9, 2012 - Apr 9, 2013

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:33:26:1a:00:00:00:00:00:31

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 31, 2010 - Aug 31, 2020

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:16:68:34:00:00:00:00:00:1c

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 3, 2007 - Apr 3, 2021

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:08:e2:79:fa:0d:25:58:45:ea:00:00:00:00:00:08

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 7, 2012 - Oct 7, 2013

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:09:81:2a:00:00:00:00:00:02

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jul 1, 2010 - Jul 1, 2025

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:B8EC-30A4-7144,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:07:d4:55:00:00:00:00:00:0e

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 9, 2012 - Apr 9, 2013

Minor OS version

0

Major OS version

6

Entry point

65852

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

msvcr110.i386.pdb

kernel32

EncodePointer DecodePointer RaiseException GetModuleFileNameA GetModuleFileNameW GetLastError InterlockedDecrement ExitProcess GetModuleHandleW GetModuleHandleExW GetProcAddress AreFileApisANSI MultiByteToWideChar GetStdHandle WriteFile GetCommandLineA GetCommandLineW GetCurrentThreadId EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount DeleteCriticalSection CloseHandle CreateThread ExitThread ResumeThread LoadLibraryExW SetLastError InterlockedIncrement GetCurrentThread FindClose FindFirstFileExA FindNextFileA FindFirstFileExW FindNextFileW IsProcessorFeaturePresent GetLogicalDrives GetDiskFreeSpaceA SystemTimeToTzSpecificLocalTime FileTimeToSystemTime SetErrorMode Beep Sleep SetEnvironmentVariableA SetCurrentDirectoryA GetCurrentDirectoryA SetCurrentDirectoryW GetCurrentDirectoryW GetFullPathNameA GetDriveTypeW GetCurrentProcessId GetFileAttributesExW SetEnvironmentVariableW SetFileAttributesW GetFullPathNameW CreateDirectoryW MoveFileExW RemoveDirectoryW FileTimeToLocalFileTime DeleteFileW WaitForSingleObject GetExitCodeProcess CreateProcessA FreeLibrary LoadLibraryExA CreateProcessW ReadFile DuplicateHandle GetCurrentProcess GetTempPathA GetTempPathW GetSystemTimeAsFileTime GetTimeZoneInformation GetLocalTime WideCharToMultiByte LocalFileTimeToFileTime SetFileTime SystemTimeToFileTime SetLocalTime TlsGetValue TlsSetValue InterlockedPopEntrySList InterlockedFlushSList QueryDepthSList InterlockedPushEntrySList CreateTimerQueue CreateTimerQueueTimer UnregisterWait SetEvent RegisterWaitForSingleObject CreateEventW SwitchToThread SignalObjectAndWait GetNumaHighestNodeNumber GetProcessAffinityMask SetThreadAffinityMask DeleteTimerQueueTimer TryEnterCriticalSection SetProcessAffinityMask GetTickCount VirtualFree GetVersionExW SetThreadPriority VirtualAlloc VirtualProtect InitializeSListHead ReleaseSemaphore ChangeTimerQueueTimer TlsAlloc UnregisterWaitEx TlsFree GetThreadPriority LoadLibraryW OutputDebugStringW FreeLibraryAndExitThread GetModuleHandleA GetThreadTimes DebugBreak GetStringTypeW IsValidCodePage GetACP GetOEMCP GetCPInfo RtlUnwind HeapFree HeapAlloc GetProcessHeap HeapReAlloc HeapSize HeapQueryInformation HeapValidate HeapCompact HeapWalk GetSystemInfo VirtualQuery GetFileType GetStartupInfoW GetFileInformationByHandle PeekNamedPipe CreateFileW GetConsoleMode ReadConsoleW GetConsoleCP SetFilePointerEx FlushFileBuffers SetFilePointer CreatePipe SetStdHandle GetNumberOfConsoleInputEvents PeekConsoleInputA ReadConsoleInputA SetConsoleMode ReadConsoleInputW WriteConsoleW SetEndOfFile InterlockedExchange LockFileEx UnlockFileEx IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess CreateSemaphoreW SetConsoleCtrlHandler QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW OutputDebugStringA

$I10_OUTPUT ??0?$_SpinWait@$00@details@Concurrency@@QAE@P6AXXZ@Z ??0?$_SpinWait@$0A@@details@Concurrency@@QAE@P6AXXZ@Z ??0SchedulerPolicy@Concurrency@@QAA@IZZ ??0SchedulerPolicy@Concurrency@@QAE@ABV01@@Z ??0SchedulerPolicy@Concurrency@@QAE@XZ ??0_CancellationTokenState@details@Concurrency@@AAE@XZ ??0_Cancellation_beacon@details@Concurrency@@QAE@XZ ??0_Condition_variable@details@Concurrency@@QAE@XZ ??0_Context@details@Concurrency@@QAE@PAVContext@2@@Z ??0_Interruption_exception@details@Concurrency@@QAE@PBD@Z ??0_Interruption_exception@details@Concurrency@@QAE@XZ ??0_NonReentrantBlockingLock@details@Concurrency@@QAE@XZ ??0_NonReentrantPPLLock@details@Concurrency@@QAE@XZ ??0_ReaderWriterLock@details@Concurrency@@QAE@XZ ??0_ReentrantBlockingLock@details@Concurrency@@QAE@XZ ??0_ReentrantLock@details@Concurrency@@QAE@XZ ??0_ReentrantPPLLock@details@Concurrency@@QAE@XZ ??0_Scheduler@details@Concurrency@@QAE@PAVScheduler@2@@Z ??0_Scoped_lock@_NonReentrantPPLLock@details@Concurrency@@QAE@AAV123@@Z ??0_Scoped_lock@_ReentrantPPLLock@details@Concurrency@@QAE@AAV123@@Z ??0_SpinLock@details@Concurrency@@QAE@ACJ@Z ??0_StructuredTaskCollection@details@Concurrency@@QAE@PAV_CancellationTokenState@12@@Z ??0_TaskCollection@details@Concurrency@@QAE@PAV_CancellationTokenState@12@@Z ??0_TaskCollection@details@Concurrency@@QAE@XZ ??0_Timer@details@Concurrency@@IAE@I_N@Z ??0__non_rtti_object@std@@QAE@ABV01@@Z ??0__non_rtti_object@std@@QAE@PBD@Z ??0bad_cast@std@@AAE@PBQBD@Z ??0bad_cast@std@@QAE@ABV01@@Z ??0bad_cast@std@@QAE@PBD@Z ??0bad_target@Concurrency@@QAE@PBD@Z ??0bad_target@Concurrency@@QAE@XZ ??0bad_typeid@std@@QAE@ABV01@@Z ??0bad_typeid@std@@QAE@PBD@Z ??0context_self_unblock@Concurrency@@QAE@PBD@Z ??0context_self_unblock@Concurrency@@QAE@XZ ??0context_unblock_unbalanced@Concurrency@@QAE@PBD@Z ??0context_unblock_unbalanced@Concurrency@@QAE@XZ ??0critical_section@Concurrency@@QAE@XZ ??0default_scheduler_exists@Concurrency@@QAE@PBD@Z ??0default_scheduler_exists@Concurrency@@QAE@XZ ??0event@Concurrency@@QAE@XZ ??0exception@std@@QAE@ABQBD@Z ??0exception@std@@QAE@ABQBDH@Z ??0exception@std@@QAE@ABV01@@Z ??0exception@std@@QAE@XZ ??0improper_lock@Concurrency@@QAE@PBD@Z ??0improper_lock@Concurrency@@QAE@XZ ??0improper_scheduler_attach@Concurrency@@QAE@PBD@Z ??0improper_scheduler_attach@Concurrency@@QAE@XZ ??0improper_scheduler_detach@Concurrency@@QAE@PBD@Z ??0improper_scheduler_detach@Concurrency@@QAE@XZ ??0improper_scheduler_reference@Concurrency@@QAE@PBD@Z ??0improper_scheduler_reference@Concurrency@@QAE@XZ ??0invalid_link_target@Concurrency@@QAE@PBD@Z ??0invalid_link_target@Concurrency@@QAE@XZ ??0invalid_multiple_scheduling@Concurrency@@QAE@PBD@Z ??0invalid_multiple_scheduling@Concurrency@@QAE@XZ ??0invalid_operation@Concurrency@@QAE@PBD@Z ??0invalid_operation@Concurrency@@QAE@XZ ??0invalid_oversubscribe_operation@Concurrency@@QAE@PBD@Z ??0invalid_oversubscribe_operation@Concurrency@@QAE@XZ ??0invalid_scheduler_policy_key@Concurrency@@QAE@PBD@Z ??0invalid_scheduler_policy_key@Concurrency@@QAE@XZ ??0invalid_scheduler_policy_thread_specification@Concurrency@@QAE@PBD@Z ??0invalid_scheduler_policy_thread_specification@Concurrency@@QAE@XZ ??0invalid_scheduler_policy_value@Concurrency@@QAE@PBD@Z ??0invalid_scheduler_policy_value@Concurrency@@QAE@XZ ??0message_not_found@Concurrency@@QAE@PBD@Z ??0message_not_found@Concurrency@@QAE@XZ ??0missing_wait@Concurrency@@QAE@PBD@Z ??0missing_wait@Concurrency@@QAE@XZ ??0nested_scheduler_missing_detach@Concurrency@@QAE@PBD@Z ??0nested_scheduler_missing_detach@Concurrency@@QAE@XZ ??0operation_timed_out@Concurrency@@QAE@PBD@Z ??0operation_timed_out@Concurrency@@QAE@XZ ??0reader_writer_lock@Concurrency@@QAE@XZ ??0scheduler_not_attached@Concurrency@@QAE@PBD@Z ??0scheduler_not_attached@Concurrency@@QAE@XZ ??0scheduler_resource_allocation_error@Concurrency@@QAE@J@Z ??0scheduler_resource_allocation_error@Concurrency@@QAE@PBDJ@Z ??0scheduler_worker_creation_error@Concurrency@@QAE@J@Z ??0scheduler_worker_creation_error@Concurrency@@QAE@PBDJ@Z ??0scoped_lock@critical_section@Concurrency@@QAE@AAV12@@Z ??0scoped_lock@reader_writer_lock@Concurrency@@QAE@AAV12@@Z ??0scoped_lock_read@reader_writer_lock@Concurrency@@QAE@AAV12@@Z ??0task_canceled@Concurrency@@QAE@PBD@Z ??0task_canceled@Concurrency@@QAE@XZ ??0unsupported_os@Concurrency@@QAE@PBD@Z ??0unsupported_os@Concurrency@@QAE@XZ ??1SchedulerPolicy@Concurrency@@QAE@XZ ??1_CancellationTokenState@details@Concurrency@@UAE@XZ ??1_Cancellation_beacon@details@Concurrency@@QAE@XZ ??1_Condition_variable@details@Concurrency@@QAE@XZ ??1_NonReentrantBlockingLock@details@Concurrency@@QAE@XZ ??1_ReentrantBlockingLock@details@Concurrency@@QAE@XZ ??1_Scoped_lock@_NonReentrantPPLLock@details@Concurrency@@QAE@XZ ??1_Scoped_lock@_ReentrantPPLLock@details@Concurrency@@QAE@XZ ??1_SpinLock@details@Concurrency@@QAE@XZ ??1_TaskCollection@details@Concurrency@@QAE@XZ ??1_Timer@details@Concurrency@@MAE@XZ ??1__non_rtti_object@std@@UAE@XZ ??1bad_cast@std@@UAE@XZ ??1bad_typeid@std@@UAE@XZ ??1critical_section@Concurrency@@QAE@XZ ??1event@Concurrency@@QAE@XZ ??1exception@std@@UAE@XZ ??1reader_writer_lock@Concurrency@@QAE@XZ ??1scoped_lock@critical_section@Concurrency@@QAE@XZ ??1scoped_lock@reader_writer_lock@Concurrency@@QAE@XZ ??1scoped_lock_read@reader_writer_lock@Concurrency@@QAE@XZ ??1type_info@@UAE@XZ ??2@YAPAXI@Z ??2@YAPAXIHPBDH@Z ??3@YAXPAX@Z ??3@YAXPAXHPBDH@Z ??4?$_SpinWait@$00@details@Concurrency@@QAEAAV012@ABV012@@Z ??4?$_SpinWait@$0A@@details@Concurrency@@QAEAAV012@ABV012@@Z ??4SchedulerPolicy@Concurrency@@QAEAAV01@ABV01@@Z ??4__non_rtti_object@std@@QAEAAV01@ABV01@@Z ??4bad_cast@std@@QAEAAV01@ABV01@@Z ??4bad_typeid@std@@QAEAAV01@ABV01@@Z ??4exception@std@@QAEAAV01@ABV01@@Z ??8type_info@@QBE_NABV0@@Z ??9type_info@@QBE_NABV0@@Z ??_7__non_rtti_object@std@@6B@ ??_7bad_cast@std@@6B@ ??_7bad_typeid@std@@6B@ ??_7exception@std@@6B@ ??_F?$_SpinWait@$00@details@Concurrency@@QAEXXZ ??_F?$_SpinWait@$0A@@details@Concurrency@@QAEXXZ ??_F_Context@details@Concurrency@@QAEXXZ ??_F_Scheduler@details@Concurrency@@QAEXXZ ??_Fbad_cast@std@@QAEXXZ ??_Fbad_typeid@std@@QAEXXZ ??_U@YAPAXI@Z ??_U@YAPAXIHPBDH@Z ??_V@YAXPAX@Z ??_V@YAXPAXHPBDH@Z ?Alloc@Concurrency@@YAPAXI@Z ?Block@Context@Concurrency@@SAXXZ ?Create@CurrentScheduler@Concurrency@@SAXABVSchedulerPolicy@2@@Z ?Create@Scheduler@Concurrency@@SAPAV12@ABVSchedulerPolicy@2@@Z ?CreateResourceManager@Concurrency@@YAPAUIResourceManager@1@XZ ?CreateScheduleGroup@CurrentScheduler@Concurrency@@SAPAVScheduleGroup@2@AAVlocation@2@@Z ?CreateScheduleGroup@CurrentScheduler@Concurrency@@SAPAVScheduleGroup@2@XZ ?CurrentContext@Context@Concurrency@@SAPAV12@XZ ?Detach@CurrentScheduler@Concurrency@@SAXXZ ?DisableTracing@Concurrency@@YAJXZ ?EnableTracing@Concurrency@@YAJXZ ?Free@Concurrency@@YAXPAX@Z ?Get@CurrentScheduler@Concurrency@@SAPAVScheduler@2@XZ ?GetExecutionContextId@Concurrency@@YAIXZ ?GetNumberOfVirtualProcessors@CurrentScheduler@Concurrency@@SAIXZ ?GetOSVersion@Concurrency@@YA?AW4OSVersion@IResourceManager@1@XZ ?GetPolicy@CurrentScheduler@Concurrency@@SA?AVSchedulerPolicy@2@XZ ?GetPolicyValue@SchedulerPolicy@Concurrency@@QBEIW4PolicyElementKey@2@@Z ?GetProcessorCount@Concurrency@@YAIXZ ?GetProcessorNodeCount@Concurrency@@YAIXZ ?GetSchedulerId@Concurrency@@YAIXZ ?GetSharedTimerQueue@details@Concurrency@@YAPAXXZ ?Id@Context@Concurrency@@SAIXZ ?Id@CurrentScheduler@Concurrency@@SAIXZ ?IsAvailableLocation@CurrentScheduler@Concurrency@@SA_NABVlocation@2@@Z ?IsCurrentTaskCollectionCanceling@Context@Concurrency@@SA_NXZ ?Log2@details@Concurrency@@YAKI@Z ?Oversubscribe@Context@Concurrency@@SAX_N@Z ?RegisterShutdownEvent@CurrentScheduler@Concurrency@@SAXPAX@Z ?ResetDefaultSchedulerPolicy@Scheduler@Concurrency@@SAXXZ ?ScheduleGroupId@Context@Concurrency@@SAIXZ ?ScheduleTask@CurrentScheduler@Concurrency@@SAXP6AXPAX@Z0@Z ?ScheduleTask@CurrentScheduler@Concurrency@@SAXP6AXPAX@Z0AAVlocation@2@@Z ?SetConcurrencyLimits@SchedulerPolicy@Concurrency@@QAEXII@Z ?SetDefaultSchedulerPolicy@Scheduler@Concurrency@@SAXABVSchedulerPolicy@2@@Z ?SetPolicyValue@SchedulerPolicy@Concurrency@@QAEIW4PolicyElementKey@2@I@Z ?VirtualProcessorId@Context@Concurrency@@SAIXZ ?Yield@Context@Concurrency@@SAXXZ ?_Abort@_StructuredTaskCollection@details@Concurrency@@AAEXXZ ?_Acquire@_NonReentrantBlockingLock@details@Concurrency@@QAEXXZ ?_Acquire@_NonReentrantPPLLock@details@Concurrency@@QAEXPAX@Z ?_Acquire@_ReentrantBlockingLock@details@Concurrency@@QAEXXZ ?_Acquire@_ReentrantLock@details@Concurrency@@QAEXXZ ?_Acquire@_ReentrantPPLLock@details@Concurrency@@QAEXPAX@Z ?_AcquireRead@_ReaderWriterLock@details@Concurrency@@QAEXXZ ?_AcquireWrite@_ReaderWriterLock@details@Concurrency@@QAEXXZ ?_Cancel@_CancellationTokenState@details@Concurrency@@QAEXXZ ?_Cancel@_StructuredTaskCollection@details@Concurrency@@QAEXXZ ?_Cancel@_TaskCollection@details@Concurrency@@QAEXXZ ?_CheckTaskCollection@_UnrealizedChore@details@Concurrency@@IAEXXZ ?_CleanupToken@_StructuredTaskCollection@details@Concurrency@@AAEXXZ ?_ConcRT_CoreAssert@details@Concurrency@@YAXPBD0H@Z ?_ConcRT_Trace@details@Concurrency@@YAXHPB_WZZ ?_Confirm_cancel@_Cancellation_beacon@details@Concurrency@@QAE_NXZ ?_Copy_str@exception@std@@AAEXPBD@Z ?_CurrentContext@_Context@details@Concurrency@@SA?AV123@XZ ?_Current_node@location@Concurrency@@SA?AV12@XZ ?_DeregisterCallback@_CancellationTokenState@details@Concurrency@@QAEXPAV_CancellationTokenRegistration@23@@Z ?_Destroy@_AsyncTaskCollection@details@Concurrency@@EAEXXZ ?_Destroy@_CancellationTokenState@details@Concurrency@@EAEXXZ ?_DoYield@?$_SpinWait@$00@details@Concurrency@@IAEXXZ ?_DoYield@?$_SpinWait@$0A@@details@Concurrency@@IAEXXZ ?_Get@_CurrentScheduler@details@Concurrency@@SA?AV_Scheduler@23@XZ ?_GetConcRTTraceInfo@Concurrency@@YAPBU_CONCRT_TRACE_INFO@details@1@XZ ?_GetConcurrency@details@Concurrency@@YAIXZ ?_GetCurrentInlineDepth@_StackGuard@details@Concurrency@@CAAAIXZ ?_GetNumberOfVirtualProcessors@_CurrentScheduler@details@Concurrency@@SAIXZ ?_GetScheduler@_Scheduler@details@Concurrency@@QAEPAVScheduler@3@XZ ?_Id@_CurrentScheduler@details@Concurrency@@SAIXZ ?_Invoke@_CancellationTokenRegistration@details@Concurrency@@AAEXXZ ?_IsCanceling@_StructuredTaskCollection@details@Concurrency@@QAE_NXZ ?_IsCanceling@_TaskCollection@details@Concurrency@@QAE_NXZ ?_IsSynchronouslyBlocked@_Context@details@Concurrency@@QBE_NXZ ?_Name_base@type_info@@CAPBDPBV1@PAU__type_info_node@@@Z ?_Name_base_internal@type_info@@CAPBDPBV1@PAU__type_info_node@@@Z ?_NewCollection@_AsyncTaskCollection@details@Concurrency@@SAPAV123@PAV_CancellationTokenState@23@@Z ?_NewTokenState@_CancellationTokenState@details@Concurrency@@SAPAV123@XZ ?_NumberOfSpins@?$_SpinWait@$00@details@Concurrency@@IAEKXZ ?_NumberOfSpins@?$_SpinWait@$0A@@details@Concurrency@@IAEKXZ ?_Oversubscribe@_Context@details@Concurrency@@SAX_N@Z ?_Reference@_Scheduler@details@Concurrency@@QAEIXZ ?_RegisterCallback@_CancellationTokenState@details@Concurrency@@QAEPAV_CancellationTokenRegistration@23@P6AXPAX@Z0H@Z ?_RegisterCallback@_CancellationTokenState@details@Concurrency@@QAEXPAV_CancellationTokenRegistration@23@@Z ?_Release@_NonReentrantBlockingLock@details@Concurrency@@QAEXXZ ?_Release@_NonReentrantPPLLock@details@Concurrency@@QAEXXZ ?_Release@_ReentrantBlockingLock@details@Concurrency@@QAEXXZ ?_Release@_ReentrantLock@details@Concurrency@@QAEXXZ ?_Release@_ReentrantPPLLock@details@Concurrency@@QAEXXZ ?_Release@_Scheduler@details@Concurrency@@QAEIXZ ?_ReleaseRead@_ReaderWriterLock@details@Concurrency@@QAEXXZ ?_ReleaseWrite@_ReaderWriterLock@details@Concurrency@@QAEXXZ ?_ReportUnobservedException@details@Concurrency@@YAXXZ ?_Reset@?$_SpinWait@$00@details@Concurrency@@IAEXXZ ?_Reset@?$_SpinWait@$0A@@details@Concurrency@@IAEXXZ ?_RunAndWait@_StructuredTaskCollection@details@Concurrency@@QAG?AW4_TaskCollectionStatus@23@PAV_UnrealizedChore@23@@Z ?_RunAndWait@_TaskCollection@details@Concurrency@@QAG?AW4_TaskCollectionStatus@23@PAV_UnrealizedChore@23@@Z ?_Schedule@_StructuredTaskCollection@details@Concurrency@@QAEXPAV_UnrealizedChore@23@@Z ?_Schedule@_StructuredTaskCollection@details@Concurrency@@QAEXPAV_UnrealizedChore@23@PAVlocation@3@@Z ?_Schedule@_TaskCollection@details@Concurrency@@QAEXPAV_UnrealizedChore@23@@Z ?_Schedule@_TaskCollection@details@Concurrency@@QAEXPAV_UnrealizedChore@23@PAVlocation@3@@Z ?_ScheduleTask@_CurrentScheduler@details@Concurrency@@SAXP6AXPAX@Z0@Z ?_SetSpinCount@?$_SpinWait@$00@details@Concurrency@@QAEXI@Z ?_SetSpinCount@?$_SpinWait@$0A@@details@Concurrency@@QAEXI@Z ?_SetUnobservedExceptionHandler@details@Concurrency@@YAXP6AXXZ@Z ?_ShouldSpinAgain@?$_SpinWait@$00@details@Concurrency@@IAE_NXZ ?_ShouldSpinAgain@?$_SpinWait@$0A@@details@Concurrency@@IAE_NXZ ?_SpinOnce@?$_SpinWait@$00@details@Concurrency@@QAE_NXZ ?_SpinOnce@?$_SpinWait@$0A@@details@Concurrency@@QAE_NXZ ?_SpinYield@Context@Concurrency@@SAXXZ ?_Start@_Timer@details@Concurrency@@IAEXXZ ?_Stop@_Timer@details@Concurrency@@IAEXXZ ?_Tidy@exception@std@@AAEXXZ ?_Trace_agents@Concurrency@@YAXW4Agents_EventType@1@_JZZ ?_Trace_ppl_function@Concurrency@@YAXABU_GUID@@EW4ConcRT_EventType@1@@Z ?_TryAcquire@_NonReentrantBlockingLock@details@Concurrency@@QAE_NXZ ?_TryAcquire@_ReentrantBlockingLock@details@Concurrency@@QAE_NXZ ?_TryAcquire@_ReentrantLock@details@Concurrency@@QAE_NXZ ?_TryAcquireWrite@_ReaderWriterLock@details@Concurrency@@QAE_NXZ ?_Type_info_dtor@type_info@@CAXPAV1@@Z ?_Type_info_dtor_internal@type_info@@CAXPAV1@@Z ?_UnderlyingYield@details@Concurrency@@YAXXZ ?_ValidateExecute@@YAHP6GHXZ@Z ?_ValidateRead@@YAHPBXI@Z ?_ValidateWrite@@YAHPAXI@Z ?_Value@_SpinCount@details@Concurrency@@SAIXZ ?_Yield@_Context@details@Concurrency@@SAXXZ ?__ExceptionPtrAssign@@YAXPAXPBX@Z ?__ExceptionPtrCompare@@YA_NPBX0@Z ?__ExceptionPtrCopy@@YAXPAXPBX@Z ?__ExceptionPtrCopyException@@YAXPAXPBX1@Z ?__ExceptionPtrCreate@@YAXPAX@Z ?__ExceptionPtrCurrentException@@YAXPAX@Z ?__ExceptionPtrDestroy@@YAXPAX@Z ?__ExceptionPtrRethrow@@YAXPBX@Z ?__ExceptionPtrSwap@@YAXPAX0@Z ?__ExceptionPtrToBool@@YA_NPBX@Z ?_inconsistency@@YAXXZ ?_invalid_parameter@@YAXPBG00II@Z ?_is_exception_typeof@@YAHABVtype_info@@PAU_EXCEPTION_POINTERS@@@Z ?_name_internal_method@type_info@@QBEPBDPAU__type_info_node@@@Z ?_open@@YAHPBDHH@Z ?_query_new_handler@@YAP6AHI@ZXZ ?_query_new_mode@@YAHXZ ?_set_new_handler@@YAP6AHI@ZH@Z ?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z ?_set_new_mode@@YAHH@Z ?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZH@Z ?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z ?_sopen@@YAHPBDHHH@Z ?_type_info_dtor_internal_method@type_info@@QAEXXZ ?_wopen@@YAHPB_WHH@Z ?_wsopen@@YAHPB_WHHH@Z ?before@type_info@@QBE_NABV1@@Z ?current@location@Concurrency@@SA?AV12@XZ ?from_numa_node@location@Concurrency@@SA?AV12@G@Z ?get_error_code@scheduler_resource_allocation_error@Concurrency@@QBEJXZ ?lock@critical_section@Concurrency@@QAEXXZ ?lock@reader_writer_lock@Concurrency@@QAEXXZ ?lock_read@reader_writer_lock@Concurrency@@QAEXXZ ?name@type_info@@QBEPBDPAU__type_info_node@@@Z ?native_handle@critical_section@Concurrency@@QAEAAV12@XZ ?notify_all@_Condition_variable@details@Concurrency@@QAEXXZ ?notify_one@_Condition_variable@details@Concurrency@@QAEXXZ ?raw_name@type_info@@QBEPBDXZ ?reset@event@Concurrency@@QAEXXZ ?set@event@Concurrency@@QAEXXZ ?set_new_handler@@YAP6AXXZP6AXXZ@Z ?set_task_execution_resources@Concurrency@@YAXGPAU_GROUP_AFFINITY@@@Z ?set_task_execution_resources@Concurrency@@YAXK@Z ?set_terminate@@YAP6AXXZH@Z ?set_terminate@@YAP6AXXZP6AXXZ@Z ?set_unexpected@@YAP6AXXZH@Z ?set_unexpected@@YAP6AXXZP6AXXZ@Z ?swprintf@@YAHPAGIPBGZZ ?swprintf@@YAHPA_WIPB_WZZ ?terminate@@YAXXZ ?try_lock@critical_section@Concurrency@@QAE_NXZ ?try_lock@reader_writer_lock@Concurrency@@QAE_NXZ ?try_lock_for@critical_section@Concurrency@@QAE_NI@Z ?try_lock_read@reader_writer_lock@Concurrency@@QAE_NXZ ?unexpected@@YAXXZ ?unlock@critical_section@Concurrency@@QAEXXZ ?unlock@reader_writer_lock@Concurrency@@QAEXXZ ?vswprintf@@YAHPA_WIPB_WPAD@Z ?wait@Concurrency@@YAXI@Z ?wait@_Condition_variable@details@Concurrency@@QAEXAAVcritical_section@3@@Z ?wait@event@Concurrency@@QAEII@Z ?wait_for@_Condition_variable@details@Concurrency@@QAE_NAAVcritical_section@3@I@Z ?wait_for_multiple@event@Concurrency@@SAIPAPAV12@I_NI@Z ?what@exception@std@@UBEPBDXZ _CIacos _CIasin _CIatan _CIatan2 _CIcos _CIcosh _CIexp _CIfmod _CIlog _CIlog10 _CIpow _CIsin _CIsinh _CIsqrt _CItan _CItanh _CRT_RTC_INIT _CRT_RTC_INITW _CreateFrameInfo _CxxThrowException _EH_prolog _FindAndUnlinkFrame _Getdays _Getmonths _Gettnames _HUGE _IsExceptionObjectToBeDestroyed _Lock_shared_ptr_spin_lock _NLG_Dispatch2 _NLG_Return _NLG_Return2 _Strftime _Unlock_shared_ptr_spin_lock _W_Getdays _W_Getmonths _W_Gettnames _Wcsftime _XcptFilter __AdjustPointer __BuildCatchObject __BuildCatchObjectHelper __CppXcptFilter __CxxDetectRethrow __CxxExceptionFilter __CxxFrameHandler __CxxFrameHandler2 __CxxFrameHandler3 __CxxLongjmpUnwind __CxxQueryExceptionSize __CxxRegisterExceptionObject __CxxUnregisterExceptionObject __DestructExceptionObject __FrameUnwindFilter __RTCastToVoid __RTDynamicCast __RTtypeid __STRINGTOLD __STRINGTOLD_L __TypeMatch ___crtCreateSemaphoreExW@24 ___lc_codepage_func ___lc_collate_cp_func ___lc_locale_name_func ___mb_cur_max_func ___mb_cur_max_l_func ___setlc_active_func ___unguarded_readlc_active_add_func __argc __argv __badioinfo __clean_type_info_names_internal __control87_2 __create_locale __crtCompareStringA __crtCompareStringEx __crtCompareStringW __crtCreateSymbolicLinkW __crtEnumSystemLocalesEx __crtFlsAlloc __crtFlsFree __crtFlsGetValue __crtFlsSetValue __crtGetDateFormatEx __crtGetLocaleInfoEx __crtGetShowWindowMode __crtGetTimeFormatEx __crtGetUserDefaultLocaleName __crtInitializeCriticalSectionEx __crtIsPackagedApp __crtIsValidLocaleName __crtLCMapStringA __crtLCMapStringEx __crtLCMapStringW __crtSetThreadStackGuarantee __crtSetUnhandledExceptionFilter __crtTerminateProcess __crtUnhandledException __daylight __dllonexit __doserrno __dstbias __fpecode __free_locale __get_current_locale __get_flsindex __get_tlsindex __getmainargs __initenv __iob_func __isascii __iscsym __iscsymf __iswcsym __iswcsymf __lconv __lconv_init __libm_sse2_acos __libm_sse2_acosf __libm_sse2_asin __libm_sse2_asinf __libm_sse2_atan __libm_sse2_atan2 __libm_sse2_atanf __libm_sse2_cos __libm_sse2_cosf __libm_sse2_exp __libm_sse2_expf __libm_sse2_log __libm_sse2_log10 __libm_sse2_log10f __libm_sse2_logf __libm_sse2_pow __libm_sse2_powf __libm_sse2_sin __libm_sse2_sinf __libm_sse2_tan __libm_sse2_tanf __mb_cur_max __p___argc __p___argv __p___initenv __p___mb_cur_max __p___wargv __p___winitenv __p__acmdln __p__commode __p__daylight __p__dstbias __p__environ __p__fmode __p__iob __p__mbcasemap __p__mbctype __p__pctype __p__pgmptr __p__pwctype __p__timezone __p__tzname __p__wcmdln __p__wenviron __p__wpgmptr __pctype_func __pioinfo __pwctype_func __pxcptinfoptrs __report_gsfailure __set_app_type __setlc_active __setusermatherr __strncnt __swprintf_l __sys_errlist __sys_nerr __threadhandle __threadid __timezone __toascii __tzname __unDName __unDNameEx __unDNameHelper __uncaught_exception __unguarded_readlc_active __vswprintf_l __wargv __wcserror __wcserror_s __wcsncnt __wgetmainargs __winitenv _abnormal_termination _abs64 _access _access_s _acmdln _aligned_free _aligned_malloc _aligned_msize _aligned_offset_malloc _aligned_offset_realloc _aligned_offset_recalloc _aligned_realloc _aligned_recalloc _amsg_exit _assert _atodbl _atodbl_l _atof_l _atoflt _atoflt_l _atoi64 _atoi64_l _atoi_l _atol_l _atoldbl _atoldbl_l _beep _beginthread _beginthreadex _byteswap_uint64 _byteswap_ulong _byteswap_ushort _c_exit _cabs _callnewh _calloc_crt _cexit _cgets _cgets_s _cgetws _cgetws_s _chdir _chdrive _chgsign _chkesp _chmod _chsize _chsize_s _clearfp _close _commit _commode _configthreadlocale _control87 _controlfp _controlfp_s _copysign _cprintf _cprintf_l _cprintf_p _cprintf_p_l _cprintf_s _cprintf_s_l _cputs _cputws _creat _create_locale _crt_debugger_hook _cscanf _cscanf_l _cscanf_s _cscanf_s_l _ctime32 _ctime32_s _ctime64 _ctime64_s _cwait _cwprintf _cwprintf_l _cwprintf_p _cwprintf_p_l _cwprintf_s _cwprintf_s_l _cwscanf _cwscanf_l _cwscanf_s _cwscanf_s_l _daylight _difftime32 _difftime64 _dosmaperr _dstbias _dup _dup2 _dupenv_s _ecvt _ecvt_s _endthread _endthreadex _environ _eof _errno _except_handler2 _except_handler3 _except_handler4_common _execl _execle _execlp _execlpe _execv _execve _execvp _execvpe _exit _expand _fclose_nolock _fcloseall _fcvt _fcvt_s _fdopen _fflush_nolock _fgetchar _fgetwc_nolock _fgetwchar _filbuf _filelength _filelengthi64 _fileno _findclose _findfirst32 _findfirst32i64 _findfirst64 _findfirst64i32 _findnext32 _findnext32i64 _findnext64 _findnext64i32 _finite _flsbuf _flushall _fmode _fpclass _fpieee_flt _fpreset _fprintf_l _fprintf_p _fprintf_p_l _fprintf_s_l _fputchar _fputwc_nolock _fputwchar _fread_nolock _fread_nolock_s _free_locale _freea _freea_s _freefls _fscanf_l _fscanf_s_l _fseek_nolock _fseeki64 _fseeki64_nolock _fsopen _fstat32 _fstat32i64 _fstat64 _fstat64i32 _ftell_nolock _ftelli64 _ftelli64_nolock _ftime32 _ftime32_s _ftime64 _ftime64_s _ftol _fullpath _futime32 _futime64 _fwprintf_l _fwprintf_p _fwprintf_p_l _fwprintf_s_l _fwrite_nolock _fwscanf_l _fwscanf_s_l _gcvt _gcvt_s _get_current_locale _get_daylight _get_doserrno _get_dstbias _get_errno _get_fmode _get_heap_handle _get_invalid_parameter_handler _get_osfhandle _get_output_format _get_pgmptr _get_printf_count_output _get_purecall_handler _get_terminate _get_timezone _get_tzname _get_unexpected _get_wpgmptr _getc_nolock _getch _getch_nolock _getche _getche_nolock _getcwd _getdcwd _getdiskfree _getdllprocaddr _getdrive _getdrives _getmaxstdio _getmbcp _getpid _getptd _getsystime _getw _getwch _getwch_nolock _getwche _getwche_nolock _getws _getws_s _global_unwind2 _gmtime32 _gmtime32_s _gmtime64 _gmtime64_s _heapadd _heapchk _heapmin _heapset _heapused _heapwalk _hypot _hypotf _i64toa _i64toa_s _i64tow _i64tow_s _initptd _initterm _initterm_e _inp _inpd _inpw _invalid_parameter _invalid_parameter_noinfo _invalid_parameter_noinfo_noreturn _invoke_watson _iob _isalnum_l _isalpha_l _isatty _iscntrl_l _isctype _isctype_l _isdigit_l _isgraph_l _isleadbyte_l _islower_l _ismbbalnum _ismbbalnum_l _ismbbalpha _ismbbalpha_l _ismbbgraph _ismbbgraph_l _ismbbkalnum _ismbbkalnum_l _ismbbkana _ismbbkana_l _ismbbkprint _ismbbkprint_l _ismbbkpunct _ismbbkpunct_l _ismbblead _ismbblead_l _ismbbprint _ismbbprint_l _ismbbpunct _ismbbpunct_l _ismbbtrail _ismbbtrail_l _ismbcalnum _ismbcalnum_l _ismbcalpha _ismbcalpha_l _ismbcdigit _ismbcdigit_l _ismbcgraph _ismbcgraph_l _ismbchira _ismbchira_l _ismbckata _ismbckata_l _ismbcl0 _ismbcl0_l _ismbcl1 _ismbcl1_l _ismbcl2 _ismbcl2_l _ismbclegal _ismbclegal_l _ismbclower _ismbclower_l _ismbcprint _ismbcprint_l _ismbcpunct _ismbcpunct_l _ismbcspace _ismbcspace_l _ismbcsymbol _ismbcsymbol_l _ismbcupper _ismbcupper_l _ismbslead _ismbslead_l _ismbstrail _ismbstrail_l _isnan _isprint_l _ispunct_l _isspace_l _isupper_l _iswalnum_l _iswalpha_l _iswcntrl_l _iswcsym_l _iswcsymf_l _iswctype_l _iswdigit_l _iswgraph_l _iswlower_l _iswprint_l _iswpunct_l _iswspace_l _iswupper_l _iswxdigit_l _isxdigit_l _itoa _itoa_s _itow _itow_s _j0 _j1 _jn _kbhit _lfind _lfind_s _libm_sse2_acos_precise _libm_sse2_asin_precise _libm_sse2_atan_precise _libm_sse2_cos_precise _libm_sse2_exp_precise _libm_sse2_log10_precise _libm_sse2_log_precise _libm_sse2_pow_precise _libm_sse2_sin_precise _libm_sse2_sqrt_precise _libm_sse2_tan_precise _loaddll _local_unwind2 _local_unwind4 _localtime32 _localtime32_s _localtime64 _localtime64_s _lock _lock_file _locking _logb _longjmpex _lrotl _lrotr _lsearch _lsearch_s _lseek _lseeki64 _ltoa _ltoa_s _ltow _ltow_s _makepath _makepath_s _malloc_crt _mbbtombc _mbbtombc_l _mbbtype _mbbtype_l _mbcasemap _mbccpy _mbccpy_l _mbccpy_s _mbccpy_s_l _mbcjistojms _mbcjistojms_l _mbcjmstojis _mbcjmstojis_l _mbclen _mbclen_l _mbctohira _mbctohira_l _mbctokata _mbctokata_l _mbctolower _mbctolower_l _mbctombb _mbctombb_l _mbctoupper _mbctoupper_l _mbctype _mblen_l _mbsbtype _mbsbtype_l _mbscat_s _mbscat_s_l _mbschr _mbschr_l _mbscmp _mbscmp_l _mbscoll _mbscoll_l _mbscpy_s _mbscpy_s_l _mbscspn _mbscspn_l _mbsdec _mbsdec_l _mbsicmp _mbsicmp_l _mbsicoll _mbsicoll_l _mbsinc _mbsinc_l _mbslen _mbslen_l _mbslwr _mbslwr_l _mbslwr_s _mbslwr_s_l _mbsnbcat _mbsnbcat_l _mbsnbcat_s _mbsnbcat_s_l _mbsnbcmp _mbsnbcmp_l _mbsnbcnt _mbsnbcnt_l _mbsnbcoll _mbsnbcoll_l _mbsnbcpy _mbsnbcpy_l _mbsnbcpy_s _mbsnbcpy_s_l _mbsnbicmp _mbsnbicmp_l _mbsnbicoll _mbsnbicoll_l _mbsnbset _mbsnbset_l _mbsnbset_s _mbsnbset_s_l _mbsncat _mbsncat_l _mbsncat_s _mbsncat_s_l _mbsnccnt _mbsnccnt_l _mbsncmp _mbsncmp_l _mbsncoll _mbsncoll_l _mbsncpy _mbsncpy_l _mbsncpy_s _mbsncpy_s_l _mbsnextc _mbsnextc_l _mbsnicmp _mbsnicmp_l _mbsnicoll _mbsnicoll_l _mbsninc _mbsninc_l _mbsnlen _mbsnlen_l _mbsnset _mbsnset_l _mbsnset_s _mbsnset_s_l _mbspbrk _mbspbrk_l _mbsrchr _mbsrchr_l _mbsrev _mbsrev_l _mbsset _mbsset_l _mbsset_s _mbsset_s_l _mbsspn _mbsspn_l _mbsspnp _mbsspnp_l _mbsstr _mbsstr_l _mbstok _mbstok_l _mbstok_s _mbstok_s_l _mbstowcs_l _mbstowcs_s_l _mbstrlen _mbstrlen_l _mbstrnlen _mbstrnlen_l _mbsupr _mbsupr_l _mbsupr_s _mbsupr_s_l _mbtowc_l _memccpy _memicmp _memicmp_l _mkdir _mkgmtime32 _mkgmtime64 _mktemp _mktemp_s _mktime32 _mktime64 _msize _nextafter _onexit _open _open_osfhandle _outp _outpd _outpw _pclose _pctype _pgmptr _pipe _popen _printf_l _printf_p _printf_p_l _printf_s_l _purecall _putch _putch_nolock _putenv _putenv_s _putw _putwch _putwch_nolock _putws _pwctype _read _realloc_crt _recalloc _recalloc_crt _resetstkoflw _rmdir _rmtmp _rotl _rotl64 _rotr _rotr64 _scalb _scanf_l _scanf_s_l _scprintf _scprintf_l _scprintf_p _scprintf_p_l _scwprintf _scwprintf_l _scwprintf_p _scwprintf_p_l _searchenv _searchenv_s _seh_longjmp_unwind _seh_longjmp_unwind4 _set_SSE2_enable _set_abort_behavior _set_controlfp _set_doserrno _set_errno _set_error_mode _set_fmode _set_invalid_parameter_handler _set_malloc_crt_max_wait _set_output_format _set_printf_count_output _set_purecall_handler _seterrormode _setjmp _setjmp3 _setmaxstdio _setmbcp _setmode _setsystime _sleep _snprintf _snprintf_c _snprintf_c_l _snprintf_l _snprintf_s _snprintf_s_l _snscanf _snscanf_l _snscanf_s _snscanf_s_l _snwprintf _snwprintf_l _snwprintf_s _snwprintf_s_l _snwscanf _snwscanf_l _snwscanf_s _snwscanf_s_l _sopen _sopen_s _spawnl _spawnle _spawnlp _spawnlpe _spawnv _spawnve _spawnvp _spawnvpe _splitpath _splitpath_s _sprintf_l _sprintf_p _sprintf_p_l _sprintf_s_l _sscanf_l _sscanf_s_l _stat32 _stat32i64 _stat64 _stat64i32 _statusfp _statusfp2 _strcoll_l _strdate _strdate_s _strdup _strerror _strerror_s _strftime_l _stricmp _stricmp_l _stricoll _stricoll_l _strlwr _strlwr_l _strlwr_s _strlwr_s_l _strncoll _strncoll_l _strnicmp _strnicmp_l _strnicoll _strnicoll_l _strnset _strnset_s _strrev _strset _strset_s _strtime _strtime_s _strtod_l _strtoi64 _strtoi64_l _strtol_l _strtoui64 _strtoui64_l _strtoul_l _strupr _strupr_l _strupr_s _strupr_s_l _strxfrm_l _swab _swprintf _swprintf_c _swprintf_c_l _swprintf_p _swprintf_p_l _swprintf_s_l _swscanf_l _swscanf_s_l _sys_errlist _sys_nerr _tell _telli64 _tempnam _time32 _time64 _timezone _tolower _tolower_l _toupper _toupper_l _towlower_l _towupper_l _tzname _tzset _ui64toa _ui64toa_s _ui64tow _ui64tow_s _ultoa _ultoa_s _ultow _ultow_s _umask _umask_s _ungetc_nolock _ungetch _ungetch_nolock _ungetwc_nolock _ungetwch _ungetwch_nolock _unlink _unloaddll _unlock _unlock_file _utime32 _utime64 _vcprintf _vcprintf_l _vcprintf_p _vcprintf_p_l _vcprintf_s _vcprintf_s_l _vcwprintf _vcwprintf_l _vcwprintf_p _vcwprintf_p_l _vcwprintf_s _vcwprintf_s_l _vfprintf_l _vfprintf_p _vfprintf_p_l _vfprintf_s_l _vfwprintf_l _vfwprintf_p _vfwprintf_p_l _vfwprintf_s_l _vprintf_l _vprintf_p _vprintf_p_l _vprintf_s_l _vscprintf _vscprintf_l _vscprintf_p _vscprintf_p_l _vscwprintf _vscwprintf_l _vscwprintf_p _vscwprintf_p_l _vsnprintf _vsnprintf_c _vsnprintf_c_l _vsnprintf_l _vsnprintf_s _vsnprintf_s_l _vsnwprintf _vsnwprintf_l _vsnwprintf_s _vsnwprintf_s_l _vsprintf_l _vsprintf_p _vsprintf_p_l _vsprintf_s_l _vswprintf _vswprintf_c _vswprintf_c_l _vswprintf_l _vswprintf_p _vswprintf_p_l _vswprintf_s_l _vwprintf_l _vwprintf_p _vwprintf_p_l _vwprintf_s_l _waccess _waccess_s _wasctime _wasctime_s _wassert _wchdir _wchmod _wcmdln _wcreat _wcreate_locale _wcscoll_l _wcsdup _wcserror _wcserror_s _wcsftime_l _wcsicmp _wcsicmp_l _wcsicoll _wcsicoll_l _wcslwr _wcslwr_l _wcslwr_s _wcslwr_s_l _wcsncoll _wcsncoll_l _wcsnicmp _wcsnicmp_l _wcsnicoll _wcsnicoll_l _wcsnset _wcsnset_s _wcsrev _wcsset _wcsset_s _wcstod_l _wcstoi64 _wcstoi64_l _wcstol_l _wcstombs_l _wcstombs_s_l _wcstoui64 _wcstoui64_l _wcstoul_l _wcsupr _wcsupr_l _wcsupr_s _wcsupr_s_l _wcsxfrm_l _wctime32 _wctime32_s _wctime64 _wctime64_s _wctomb_l _wctomb_s_l _wctype _wdupenv_s _wenviron _wexecl _wexecle _wexeclp _wexeclpe _wexecv _wexecve _wexecvp _wexecvpe _wfdopen _wfindfirst32 _wfindfirst32i64 _wfindfirst64 _wfindfirst64i32 _wfindnext32 _wfindnext32i64 _wfindnext64 _wfindnext64i32 _wfopen _wfopen_s _wfreopen _wfreopen_s _wfsopen _wfullpath _wgetcwd _wgetdcwd _wgetenv _wgetenv_s _wmakepath _wmakepath_s _wmkdir _wmktemp _wmktemp_s _wopen _wperror _wpgmptr _wpopen _wprintf_l _wprintf_p _wprintf_p_l _wprintf_s_l _wputenv _wputenv_s _wremove _wrename _write _wrmdir _wscanf_l _wscanf_s_l _wsearchenv _wsearchenv_s _wsetlocale _wsopen _wsopen_s _wspawnl _wspawnle _wspawnlp _wspawnlpe _wspawnv _wspawnve _wspawnvp _wspawnvpe _wsplitpath _wsplitpath_s _wstat32 _wstat32i64 _wstat64 _wstat64i32 _wstrdate _wstrdate_s _wstrtime _wstrtime_s _wsystem _wtempnam _wtmpnam _wtmpnam_s _wtof _wtof_l _wtoi _wtoi64 _wtoi64_l _wtoi_l _wtol _wtol_l _wunlink _wutime32 _wutime64 _y0 _y1 _yn abort abs acos asctime asctime_s asin atan atan2 atexit atof atoi atol bsearch bsearch_s btowc calloc ceil clearerr clearerr_s clock cos cosh div exit exp fabs fclose feof ferror fflush fgetc fgetpos fgets fgetwc fgetws floor fmod fopen fopen_s fprintf fprintf_s fputc fputs fputwc fputws fread fread_s free freopen freopen_s frexp fscanf fscanf_s fseek fsetpos ftell fwprintf fwprintf_s fwrite fwscanf fwscanf_s getc getchar getenv getenv_s gets gets_s getwc getwchar is_wctype isalnum isalpha iscntrl isdigit isgraph isleadbyte islower isprint ispunct isspace isupper iswalnum iswalpha iswascii iswcntrl iswctype iswdigit iswgraph iswlower iswprint iswpunct iswspace iswupper iswxdigit isxdigit labs ldexp ldiv llabs lldiv localeconv log log10 longjmp malloc mblen mbrlen mbrtowc mbsrtowcs mbsrtowcs_s mbstowcs mbstowcs_s mbtowc memchr memcmp memcpy memcpy_s memmove memmove_s memset modf perror pow printf printf_s putc putchar puts putwc putwchar qsort qsort_s raise rand rand_s realloc remove rename rewind scanf scanf_s setbuf setlocale setvbuf signal sin sinh sprintf sprintf_s sqrt srand sscanf sscanf_s strcat strcat_s strchr strcmp strcoll strcpy strcpy_s strcspn strerror strerror_s strftime strlen strncat strncat_s strncmp strncpy strncpy_s strnlen strpbrk strrchr strspn strstr strtod strtok strtok_s strtol strtoul strxfrm swprintf_s swscanf swscanf_s system tan tanh tmpfile tmpfile_s tmpnam tmpnam_s tolower toupper towlower towupper ungetc ungetwc vfprintf vfprintf_s vfwprintf vfwprintf_s vprintf vprintf_s vsprintf vsprintf_s vswprintf_s vwprintf vwprintf_s wcrtomb wcrtomb_s wcscat wcscat_s wcschr wcscmp wcscoll wcscpy wcscpy_s wcscspn wcsftime wcslen wcsncat wcsncat_s wcsncmp wcsncpy wcsncpy_s wcsnlen wcspbrk wcsrchr wcsrtombs wcsrtombs_s wcsspn wcsstr wcstod wcstok wcstok_s wcstol wcstombs wcstombs_s wcstoul wcsxfrm wctob wctomb wctomb_s wmemcpy_s wmemmove_s wprintf wprintf_s wscanf wscanf_s

vccorlib110.dll

IMPHASH b942c533d7091ee15c10dddd2e641592
SHA256 0f4a9f6976c0b7fb34e362cc5220b70da32d3420771fbfcac70981da3b505d08
MD5 c5c2295981eedeff9924889a7f084cc2
SHA1 6a77860e26b7a14f60da2957ebcd2848c5caa00c
SHA512 ace879be15bf129c286b8f984a96368a0321e6689a4ec743476b58c6dfaa34aa7595f34085f327992a5a24ac424dcb492fbf9a51251ffb5e84353fb426f351dc
SSDEEP 6144:/LNmQfmriZ5UUvs5UdeTC2tmku/iCikka/+MMB6V1aFW9+ex/DnI:/LhmTC2tmku/iCikka/+MMB6P9+oT
TLSH
T1B0342A127691C4B9E97F1A318B94A364609FB5058EE2D63F3D949F1E1EB07C02D24A3F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Digest

86:9e:d1:f1:83:ef:af:11:a2:30:34:06:7c:6c:13:e4:36:a9:c7:d9:ae:0e:2d:71:34:87:98:da:ed:94:cc:7b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Nov 6, 2012

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

PE Signature issue

Digest

a2:8a:24:6f:7b:b3:16:3f:58:17:00:1d:7c:74:3d:80:c2:ea:62:b4

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Nov 6, 2012

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:9d:1e:8d:27:ae:b8:f3:d8:38:00:01:00:00:00:9d

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 4, 2012 - Mar 4, 2013

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:C0F4-3086-DEF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:2b:39:32:48:c1:b2:c9:48:f3:00:00:00:00:00:2b

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 4, 2012 - Dec 4, 2013

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:33:26:1a:00:00:00:00:00:31

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 31, 2010 - Aug 31, 2020

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:16:68:34:00:00:00:00:00:1c

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 3, 2007 - Apr 3, 2021

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:08:e2:79:fa:0d:25:58:45:ea:00:00:00:00:00:08

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 7, 2012 - Oct 7, 2013

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:09:81:2a:00:00:00:00:00:02

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jul 1, 2010 - Jul 1, 2025

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:31C5-30BA-7C91,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:07:dd:6d:00:00:00:00:00:0f

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 9, 2012 - Apr 9, 2013

Minor OS version

0

Major OS version

6

Entry point

142807

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

vccorlib110.i386.pdb

kernel32

RaiseException ReleaseSRWLockExclusive AcquireSRWLockExclusive ReleaseSRWLockShared AcquireSRWLockShared FormatMessageW IsDebuggerPresent HeapAlloc InterlockedIncrement InterlockedDecrement HeapFree InterlockedCompareExchange OutputDebugStringW InitializeCriticalSection HeapDestroy LeaveCriticalSection HeapCreate EnterCriticalSection DeleteCriticalSection EncodePointer SetEvent WaitForMultipleObjectsEx GetLastError DecodePointer CreateEventExW CloseHandle InitializeCriticalSectionEx QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime DisableThreadLibraryCalls IsProcessorFeaturePresent

msvcr110

__CxxFrameHandler3 _lock _unlock _calloc_crt __dllonexit _onexit __CppXcptFilter _amsg_exit ?terminate@@YAXXZ _malloc_crt _initterm _initterm_e _crt_debugger_hook __crtUnhandledException __crtTerminateProcess _except_handler4_common __clean_type_info_names_internal ??1type_info@@UAE@XZ memmove ??2@YAPAXI@Z ?what@exception@std@@UBEPBDXZ __wgetmainargs _invoke_watson wcscpy_s _aligned_free free _aligned_offset_malloc memcpy _CxxThrowException ??3@YAXPAX@Z ??_V@YAXPAX@Z printf vswprintf_s _purecall ??1exception@std@@UAE@XZ memset

msvcp110

?_Xlength_error@std@@YAXPBD@Z ?_Xout_of_range@std@@YAXPBD@Z ?_Xbad_alloc@std@@YAXXZ ?_Syserror_map@std@@YAPBDH@Z ?_Winerror_map@std@@YAPBDH@Z _Inf _FInf

api-ms-win-core-winrt-string-l1-1-0

WindowsGetStringLen WindowsDuplicateString WindowsDeleteString WindowsCompareStringOrdinal WindowsCreateString WindowsGetStringRawBuffer WindowsStringHasEmbeddedNull WindowsCreateStringReference WindowsIsStringEmpty

api-ms-win-core-winrt-error-l1-1-0

RoCaptureErrorContext GetRestrictedErrorInfo RoTransformError RoOriginateErrorW SetRestrictedErrorInfo

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory RoRegisterActivationFactories RoRevokeActivationFactories RoUninitialize RoInitialize

ole32

CoGetInterfaceAndReleaseStream CoMarshalInterThreadInterfaceInStream CoRevokeInitializeSpy CoGetApartmentType CoRegisterInitializeSpy CoAddRefServerProcess CoGetContextToken CoTaskMemAlloc CoTaskMemFree CoCreateFreeThreadedMarshaler CoGetObjectContext CoReleaseServerProcess

oleaut32

SysAllocStringLen SysFreeString SysStringLen

?<Dispose>@Exception@Platform@@U$AAAXXZ ?<Dispose>@String@Platform@@U$AAAXXZ ?<Dispose>@Type@Platform@@U$AAAXXZ ??0AccessDeniedException@Platform@@Q$AAA@P$AAVString@1@@Z ??0AccessDeniedException@Platform@@Q$AAA@XZ ??0Attribute@Metadata@Platform@@Q$AAA@XZ ??0Boolean@Platform@@QAA@_N@Z ??0COMException@Platform@@Q$AAA@H@Z ??0COMException@Platform@@Q$AAA@HP$AAVString@1@@Z ??0ChangedStateException@Platform@@Q$AAA@P$AAVString@1@@Z ??0ChangedStateException@Platform@@Q$AAA@XZ ??0ClassNotRegisteredException@Platform@@Q$AAA@P$AAVString@1@@Z ??0ClassNotRegisteredException@Platform@@Q$AAA@XZ ??0Delegate@Platform@@Q$AAA@XZ ??0DisconnectedException@Platform@@Q$AAA@P$AAVString@1@@Z ??0DisconnectedException@Platform@@Q$AAA@XZ ??0Enum@Platform@@Q$AAA@XZ ??0Exception@Platform@@Q$AAA@H@Z ??0Exception@Platform@@Q$AAA@HP$AAVString@1@@Z ??0FailureException@Platform@@Q$AAA@P$AAVString@1@@Z ??0FailureException@Platform@@Q$AAA@XZ ??0GridLength@Xaml@UI@Windows@@QAA@NW4GridUnitType@123@@Z ??0IntPtr@Platform@@QAA@H@Z ??0IntPtr@Platform@@QAA@PAX@Z ??0InvalidArgumentException@Platform@@Q$AAA@P$AAVString@1@@Z ??0InvalidArgumentException@Platform@@Q$AAA@XZ ??0InvalidCastException@Platform@@Q$AAA@P$AAVString@1@@Z ??0InvalidCastException@Platform@@Q$AAA@XZ ??0MTAThreadAttribute@Platform@@Q$AAA@XZ ??0NotImplementedException@Platform@@Q$AAA@P$AAVString@1@@Z ??0NotImplementedException@Platform@@Q$AAA@XZ ??0NullReferenceException@Platform@@Q$AAA@P$AAVString@1@@Z ??0NullReferenceException@Platform@@Q$AAA@XZ ??0Object@Platform@@Q$AAA@XZ ??0ObjectDisposedException@Platform@@Q$AAA@P$AAVString@1@@Z ??0ObjectDisposedException@Platform@@Q$AAA@XZ ??0OnePhaseConstructedAttribute@CompilerServices@Runtime@Platform@@Q$AAA@XZ ??0OperationCanceledException@Platform@@Q$AAA@P$AAVString@1@@Z ??0OperationCanceledException@Platform@@Q$AAA@XZ ??0OutOfBoundsException@Platform@@Q$AAA@P$AAVString@1@@Z ??0OutOfBoundsException@Platform@@Q$AAA@XZ ??0OutOfMemoryException@Platform@@Q$AAA@P$AAVString@1@@Z ??0OutOfMemoryException@Platform@@Q$AAA@XZ ??0Rect@Foundation@Windows@@QAA@VPoint@12@0@Z ??0Rect@Foundation@Windows@@QAA@VPoint@12@VSize@12@@Z ??0RepeatBehavior@Animation@Media@Xaml@UI@Windows@@QAA@N@Z ??0STAThreadAttribute@Platform@@Q$AAA@XZ ??0SizeT@Platform@@QAA@H@Z ??0SizeT@Platform@@QAA@PAX@Z ??0Type@Platform@@Q$AAA@P$AAVObject@1@@Z ??0Type@Platform@@Q$AAA@VIntPtr@1@@Z ??0Type@Platform@@Q$AAA@VTypeName@Interop@Xaml@UI@Windows@@@Z ??0ValueType@Platform@@Q$AAA@XZ ??0WrongThreadException@Platform@@Q$AAA@P$AAVString@1@@Z ??0WrongThreadException@Platform@@Q$AAA@XZ ??0char16@default@@QAA@_W@Z ??0float32@default@@QAA@M@Z ??0float64@default@@QAA@N@Z ??0int16@default@@QAA@F@Z ??0int32@default@@QAA@H@Z ??0int64@default@@QAA@_J@Z ??0int8@default@@QAA@C@Z ??0uint16@default@@QAA@G@Z ??0uint32@default@@QAA@I@Z ??0uint64@default@@QAA@_K@Z ??0uint8@default@@QAA@E@Z ??BIntPtr@Platform@@SA?AV01@H@Z ??BIntPtr@Platform@@SA?AV01@PAX@Z ??BIntPtr@Platform@@SAPAXV01@@Z ??BType@Platform@@SA?AVTypeName@Interop@Xaml@UI@Windows@@P$AAV01@@Z ??BType@Platform@@SAP$AAV01@VTypeName@Interop@Xaml@UI@Windows@@@Z ??DMatrix3D@Media3D@Media@Xaml@UI@Windows@@SA?AV012345@V012345@0@Z ??GDuration@Xaml@UI@Windows@@SA?AV0123@V0123@0@Z ??HDuration@Xaml@UI@Windows@@SA?AV0123@V0123@0@Z ??MDuration@Xaml@UI@Windows@@SA_NV0123@0@Z ??NDuration@Xaml@UI@Windows@@SA_NV0123@0@Z ??ODuration@Xaml@UI@Windows@@SA_NV0123@0@Z ??PDuration@Xaml@UI@Windows@@SA_NV0123@0@Z ?AlignedAllocate@Heap@Details@Platform@@SAPAXII@Z ?AlignedAllocateException@Heap@Details@Platform@@SAPAXII@Z ?AlignedFree@Heap@Details@Platform@@SAXPAX@Z ?AlignedFreeException@Heap@Details@Platform@@SAXPAX@Z ?Allocate@Heap@Details@Platform@@SAPAXI@Z ?AllocateException@Heap@Details@Platform@@SAPAXI@Z ?Compare@Duration@Xaml@UI@Windows@@SAHV1234@0@Z ?Contains@Rect@Foundation@Windows@@QAA_NVPoint@23@@Z ?CreateException@Exception@Platform@@SAP$AAV12@H@Z ?CreateException@Exception@Platform@@SAP$AAV12@HP$AAVString@2@@Z ?CreateValue@Details@Platform@@YGP$AAVObject@2@P$AAVType@2@PBX@Z ?EnableFactoryCache@@YAXXZ ?EnumerateAllocatedObjects@Heap@Details@Platform@@SAXP$AAVHeapEntryHandler@23@@Z ?Equals@Attribute@Metadata@Platform@@Q$AAA_NP$AAVObject@3@@Z ?Equals@Boolean@Platform@@QAA_NP$AAVObject@2@@Z ?Equals@Delegate@Platform@@Q$AAA_NP$AAVObject@2@@Z ?Equals@Enum@Platform@@Q$AAA_NP$AAVObject@2@@Z ?Equals@Exception@Platform@@U$AAA_NP$AAVObject@2@@Z ?Equals@MTAThreadAttribute@Platform@@Q$AAA_NP$AAVObject@2@@Z ?Equals@Object@Platform@@Q$AAA_NP$AAV12@@Z ?Equals@OnePhaseConstructedAttribute@CompilerServices@Runtime@Platform@@Q$AAA_NP$AAVObject@4@@Z ?Equals@STAThreadAttribute@Platform@@Q$AAA_NP$AAVObject@2@@Z ?Equals@Type@Platform@@U$AAA_NP$AAVObject@2@@Z ?Equals@ValueType@Platform@@Q$AAA_NP$AAVObject@2@@Z ?Equals@char16@default@@QAA_NP$AAVObject@Platform@@@Z ?Equals@float32@default@@QAA_NP$AAVObject@Platform@@@Z ?Equals@float64@default@@QAA_NP$AAVObject@Platform@@@Z ?Equals@int16@default@@QAA_NP$AAVObject@Platform@@@Z ?Equals@int32@default@@QAA_NP$AAVObject@Platform@@@Z ?Equals@int64@default@@QAA_NP$AAVObject@Platform@@@Z ?Equals@int8@default@@QAA_NP$AAVObject@Platform@@@Z ?Equals@uint16@default@@QAA_NP$AAVObject@Platform@@@Z ?Equals@uint32@default@@QAA_NP$AAVObject@Platform@@@Z ?Equals@uint64@default@@QAA_NP$AAVObject@Platform@@@Z ?Equals@uint8@default@@QAA_NP$AAVObject@Platform@@@Z ?EventSourceAdd@Details@Platform@@YG?AVEventRegistrationToken@Foundation@Windows@@PAPAXPAUEventLock@12@P$AAVDelegate@2@@Z ?EventSourceGetTargetArray@Details@Platform@@YGPAXPAXPAUEventLock@12@@Z ?EventSourceGetTargetArrayEvent@Details@Platform@@YGPAXPAXI@Z ?EventSourceGetTargetArraySize@Details@Platform@@YGIPAX@Z ?EventSourceInitialize@Details@Platform@@YGXPAPAX@Z ?EventSourceRemove@Details@Platform@@YGXPAPAXPAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z ?EventSourceUninitialize@Details@Platform@@YGXPAPAX@Z ?FlushFactoryCache@@YGXXZ ?Free@Heap@Details@Platform@@SAXPAX@Z ?FreeException@Heap@Details@Platform@@SAXPAX@Z ?GetActivationFactory@Details@Platform@@YGJPAVModuleBase@1WRL@Microsoft@@PAUHSTRING__@@PAPAUIActivationFactory@@@Z ?GetActivationFactoryByPCWSTR@@YGJPAXAAVGuid@Platform@@PAPAX@Z ?GetCmdArguments@Details@Platform@@YAPAPA_WPAH@Z ?GetHashCode@Attribute@Metadata@Platform@@Q$AAAHXZ ?GetHashCode@Boolean@Platform@@QAAHXZ ?GetHashCode@Delegate@Platform@@Q$AAAHXZ ?GetHashCode@Enum@Platform@@Q$AAAHXZ ?GetHashCode@Exception@Platform@@U$AAAHXZ ?GetHashCode@Guid@Platform@@QAAHXZ ?GetHashCode@MTAThreadAttribute@Platform@@Q$AAAHXZ ?GetHashCode@Object@Platform@@Q$AAAHXZ ?GetHashCode@OnePhaseConstructedAttribute@CompilerServices@Runtime@Platform@@Q$AAAHXZ ?GetHashCode@STAThreadAttribute@Platform@@Q$AAAHXZ ?GetHashCode@Type@Platform@@U$AAAHXZ ?GetHashCode@ValueType@Platform@@Q$AAAHXZ ?GetHashCode@char16@default@@QAAHXZ ?GetHashCode@float32@default@@QAAHXZ ?GetHashCode@float64@default@@QAAHXZ ?GetHashCode@int16@default@@QAAHXZ ?GetHashCode@int32@default@@QAAHXZ ?GetHashCode@int64@default@@QAAHXZ ?GetHashCode@int8@default@@QAAHXZ ?GetHashCode@uint16@default@@QAAHXZ ?GetHashCode@uint32@default@@QAAHXZ ?GetHashCode@uint64@default@@QAAHXZ ?GetHashCode@uint8@default@@QAAHXZ ?GetIBoxArrayVtable@Details@Platform@@YGPAXPAX@Z ?GetIBoxVtable@Details@Platform@@YGPAXPAX@Z ?GetIidsFn@@YGJHPAKPBU__s_GUID@@PAPAVGuid@Platform@@@Z ?GetObjectContext@Details@Platform@@YGPAUIUnknown@@XZ ?GetProxyImpl@Details@Platform@@YGJPAUIUnknown@@ABU_GUID@@0PAPAU3@@Z ?GetType@Boolean@Platform@@QAAP$AAVType@2@XZ ?GetType@Guid@Platform@@QAAP$AAVType@2@XZ ?GetType@Object@Platform@@Q$AAAP$AAVType@2@XZ ?GetType@char16@default@@QAAP$AAVType@Platform@@XZ ?GetType@float32@default@@QAAP$AAVType@Platform@@XZ ?GetType@float64@default@@QAAP$AAVType@Platform@@XZ ?GetType@int16@default@@QAAP$AAVType@Platform@@XZ ?GetType@int32@default@@QAAP$AAVType@Platform@@XZ ?GetType@int64@default@@QAAP$AAVType@Platform@@XZ ?GetType@int8@default@@QAAP$AAVType@Platform@@XZ ?GetType@uint16@default@@QAAP$AAVType@Platform@@XZ ?GetType@uint32@default@@QAAP$AAVType@Platform@@XZ ?GetType@uint64@default@@QAAP$AAVType@Platform@@XZ ?GetType@uint8@default@@QAAP$AAVType@Platform@@XZ ?GetTypeCode@Type@Platform@@SA?AW4TypeCode@2@P$AAV12@@Z ?GetWeakReference@Details@Platform@@YGPAU__abi_IUnknown@@Q$ADVObject@2@@Z ?InitializeData@Details@Platform@@YAJH@Z ?Intersect@Rect@Foundation@Windows@@QAAXV123@@Z ?IntersectsWith@Rect@Foundation@Windows@@QAA_NV123@@Z ?Invert@Matrix3D@Media3D@Media@Xaml@UI@Windows@@QAAXXZ ?ReCreateException@Exception@Platform@@SAP$AAV12@H@Z ?ReCreateFromException@Details@Platform@@YGJP$AAVException@2@@Z ?ReferenceEquals@Object@Platform@@SA_NP$AAV12@0@Z ?ReferenceEquals@Object@Platform@@SA_NP$AAVString@2@0@Z ?RegisterFactories@Details@Platform@@YGP$AAVObject@2@PAPAVModuleBase@1WRL@Microsoft@@PAPAU__abi_Module@@P6GXXZ@Z ?ReleaseInContextImpl@Details@Platform@@YGJPAUIUnknown@@0@Z ?ResolveWeakReference@Details@Platform@@YGP$AAVObject@2@ABU_GUID@@PAPAU__abi_IUnknown@@@Z ?RunApplicationServer@Details@Platform@@YGXPAPAVModuleBase@1WRL@Microsoft@@PAPAU__abi_Module@@PB_W@Z ?RunServer@Details@Platform@@YGXPAPAVModuleBase@1WRL@Microsoft@@PAPAU__abi_Module@@PB_W@Z ?TerminateModule@Details@Platform@@YG_NPAVModuleBase@1WRL@Microsoft@@@Z ?ToInt32@IntPtr@Platform@@QAAHXZ ?ToString@Attribute@Metadata@Platform@@Q$AAAP$AAVString@3@XZ ?ToString@Boolean@Platform@@QAAP$AAVString@2@XZ ?ToString@Delegate@Platform@@Q$AAAP$AAVString@2@XZ ?ToString@Enum@Platform@@Q$AAAP$AAVString@2@XZ ?ToString@Exception@Platform@@U$AAAP$AAVString@2@XZ ?ToString@Guid@Platform@@QAAP$AAVString@2@XZ ?ToString@MTAThreadAttribute@Platform@@Q$AAAP$AAVString@2@XZ ?ToString@OnePhaseConstructedAttribute@CompilerServices@Runtime@Platform@@Q$AAAP$AAVString@4@XZ ?ToString@STAThreadAttribute@Platform@@Q$AAAP$AAVString@2@XZ ?ToString@Type@Platform@@U$AAAP$AAVString@2@XZ ?ToString@ValueType@Platform@@Q$AAAP$AAVString@2@XZ ?ToString@char16@default@@QAAP$AAVString@Platform@@XZ ?ToString@float32@default@@QAAP$AAVString@Platform@@XZ ?ToString@float64@default@@QAAP$AAVString@Platform@@XZ ?ToString@int16@default@@QAAP$AAVString@Platform@@XZ ?ToString@int32@default@@QAAP$AAVString@Platform@@XZ ?ToString@int64@default@@QAAP$AAVString@Platform@@XZ ?ToString@int8@default@@QAAP$AAVString@Platform@@XZ ?ToString@uint16@default@@QAAP$AAVString@Platform@@XZ ?ToString@uint32@default@@QAAP$AAVString@Platform@@XZ ?ToString@uint64@default@@QAAP$AAVString@Platform@@XZ ?ToString@uint8@default@@QAAP$AAVString@Platform@@XZ ?UninitializeData@Details@Platform@@YAXH@Z ?Union@Rect@Foundation@Windows@@QAAXV123@@Z ?Union@Rect@Foundation@Windows@@QAAXVPoint@23@@Z ?WriteLine@Console@Details@Platform@@SAXP$AAVObject@3@@Z ?WriteLine@Console@Details@Platform@@SAXP$AAVString@3@@Z ?WriteLine@Console@Details@Platform@@SAXXZ ?__abi_FailFast@@YGXXZ ?__abi_ObjectToString@__abi_details@@YGP$AAVString@Platform@@P$AAVObject@3@_N@Z ?__abi_WinRTraiseAccessDeniedException@@YGXXZ ?__abi_WinRTraiseCOMException@@YGXJ@Z ?__abi_WinRTraiseChangedStateException@@YGXXZ ?__abi_WinRTraiseClassNotRegisteredException@@YGXXZ ?__abi_WinRTraiseDisconnectedException@@YGXXZ ?__abi_WinRTraiseFailureException@@YGXXZ ?__abi_WinRTraiseInvalidArgumentException@@YGXXZ ?__abi_WinRTraiseInvalidCastException@@YGXXZ ?__abi_WinRTraiseNotImplementedException@@YGXXZ ?__abi_WinRTraiseNullReferenceException@@YGXXZ ?__abi_WinRTraiseObjectDisposedException@@YGXXZ ?__abi_WinRTraiseOperationCanceledException@@YGXXZ ?__abi_WinRTraiseOutOfBoundsException@@YGXXZ ?__abi_WinRTraiseOutOfMemoryException@@YGXXZ ?__abi_WinRTraiseWrongThreadException@@YGXXZ ?__abi_cast_Object_to_String@__abi_details@@YGP$AAVString@Platform@@_NP$AAVObject@3@@Z ?__abi_cast_String_to_Object@__abi_details@@YGP$AAVObject@Platform@@P$AAVString@3@@Z ?__abi_make_type_id@@YGP$AAVType@Platform@@ABU__abi_type_descriptor@@@Z ?__getActivationFactoryByHSTRING@@YGJPAUHSTRING__@@AAVGuid@Platform@@PAPAX@Z ?get@Bottom@Rect@Foundation@Windows@@QAAMXZ ?get@BreakOnAllocationId@Heap@Details@Platform@@SAHXZ ?get@BreakOnFreeId@Heap@Details@Platform@@SAHXZ ?get@CurrentAllocationId@Heap@Details@Platform@@SAHXZ ?get@Empty@Rect@Foundation@Windows@@SA?AV234@XZ ?get@Empty@Size@Foundation@Windows@@SA?AV234@XZ ?get@FullName@Type@Platform@@Q$AAAP$AAVString@3@XZ ?get@HasInverse@Matrix3D@Media3D@Media@Xaml@UI@Windows@@QAA_NXZ ?get@Message@Exception@Platform@@Q$AAAP$AAVString@3@XZ ?get@ObjectCount@Heap@Details@Platform@@SAHXZ ?get@Right@Rect@Foundation@Windows@@QAAMXZ ?get@TrackingLevel@Heap@Details@Platform@@SA?AW4HeapAllocationTrackingLevel@34@XZ ?set@BreakOnAllocationId@Heap@Details@Platform@@SAXH@Z ?set@BreakOnFreeId@Heap@Details@Platform@@SAXH@Z ?set@TrackingLevel@Heap@Details@Platform@@SAXW4HeapAllocationTrackingLevel@34@@Z

Adobe CC 2015/packages/DECore/DECore.pimx

SHA256 a756a2e44e956f36f9e546ae199713b31d2c3f76d557a673adcd8bd64f2f21b4
MD5 ee17e6f863d0da59fa1beb1725aafa8f
SHA1 b54f38bec97d7760d073e4a40cdc5d6f01d6fb12
SHA512 34e1ec12633570c7643cd2c333ab85de6b50e9678e2aff2d0dddc8d2b25ce7f1d0e887dc0d62deec74f4f44d29e2e4039b165bd708ee0d8ab45bed1b94ba50ac
SSDEEP 1536:Qg6JHHIp9VCYYplBvjj1iC8ga7V9gR+86BRfY46h:RaocplBvtimlMRfY/
TLSH
T15E93D2AC21695BE17407DE243C645E472A0FB07DF6B431F8B2980E7A86D599F4E8B133
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/packages/DECore/DECore.sig

SHA256 f195ae430b9ae475103eb5446cb47d434ecd837665d483116e6d2797e4fcecda
MD5 12eed35d730d8da3e3d06cdfeb871627
SHA1 7dd06aa6dda693e951e7f7f27653f293aaffd3c4
SHA512 647feea136983d1e30a81e83e9371fa64bf2e78654c98af1a2eafe207c847e3c110dad14e06950039934bd7101e70e2aab85c7578fc1c1c518733d3b70c35fbd
TLSH
T1E031FB9D4BD93BB456334FF2AE228C11BD405B5D1B28C044718185A2EF1ED10260F266
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/packages/DWA/DWA.pima

SHA256 fce72dbe443e80ced4b51b9077006214e80e284bfea54a897a71bea19a73853a
MD5 c10d95cae4685c149db31f4a7a6f5aa2
SHA1 2a5ae17709833debf2a2d6e92d6d3585440abc68
SHA512 7557d14c894a081a7efa41d79bbe08dc4ea44f21fd58e1714e90de261cca29b1bc364ee724227f5f360d76746f4cf34861d99461132de76ad6954228bc0b815d
SSDEEP 49152:/iyf/M+buLPwd75pD7NAVV9OXDmYtlEyKXy+vtTUdYrzXl+TP1Qji0GbR3Cnx3:/ix+buyP7NAVf4JlRKiSMYlqhtbR3Cd
TLSH
T1C6D533787A93432AE3A5217DDFA00B179B93098CB3B63937C99660D8F9338E4552748D
MD5 SHA1 SHA512 SSDEEP TLSH

AdobeIDFlex.swf

SHA256 1007e0e7743aad8de60622d374498167dfe670802f26b59726cdba86f6e31048
MD5 4520c94a8c76b788fd8a46df11b87fef
SHA1 0b4da7fe5ae074b0f1315fa80410880321cd618a
SHA512 891abe71abee9f4ab11d8b1c6f1d69eaa495fec03b8f0a5f877a89c271449389c2ef7259bdc5ddd7943dd6e8793211a8e6153f8c0e120001becdf92c8d898a32
SSDEEP 12288:lXXDoyIozKVFlnEIWfg9YiskjEyU2Oj1mT/FqZDCbZm9XKV14sQdnnrILyjeO0Np:xToy3zKFlqgDs3yUkT/08bSXa4sYnnMl
TLSH
T108D4337689C31F0BD1CE162D229104B58D6F4F8F65B4C867B9A1387C99FF678840AE27
MD5 SHA1 SHA512 SSDEEP TLSH

DWAFlex.swf

SHA256 2f0b8b2b118503e254732a21fac9f196fc3a2ada87f3e91bd10896a95cddefc6
MD5 7ae4f9f1c1b12664c81717adf65cf182
SHA1 83ffa4f82c62dbf06e305cc5c328df3d273a6941
SHA512 909528a6ebd527591ed281eb598fbc9b90918d321dfffb1b1f6b8b7dacdaa2b51631c38aa3aaceee3ace386ab81a86bbc033e8be61b9e47e46726e23d6cf86c5
SSDEEP 12288:zNhYzR5kXWlEFpIqFE329ApRj0kuAxvgN8ST7nF0vvmyyl4PIaBPOkBhf/O:AGXiEbIIj9AgeGZ/unS2BPlf/O
TLSH
T119D423BD53605049429279244CE348178AE34E14881EFD36B70DBBF5FC83994AFEFA96
MD5 SHA1 SHA512 SSDEEP TLSH

DWANative.dll

IMPHASH cab3415d2f5fc9d0d08fbf16020c8b50
SHA256 e689272719240aa59108254dc72cfb669db92bfc5dd1a984a75f7d84fbdbdbec
MD5 6ff854d599f070fcf890ea5d5c987b03
SHA1 c0b8c5001cb1195ac689b2145216e454a617b311
SHA512 59716e8a6dd9e3c56000290809c9091dc6239bd3eaa3e01ea384a61e4aaf452f8787d9d10af2519712747303b8395115d1abad4753f2f2ede38486b5df4148d5
SSDEEP 12288:sZVUXWd1L20BEpTnDHWdtvit9uVWEZp2A1RhRe6v1Tkhj94d2dwBSP:eCXWXS0B2TzetvM9oNZZ7Re69T+94d6
TLSH
T1A9F47D52A6D2C13EF4EB25B0967D2B3B1C39B826133485C7B7C419998E705E2BA3D317
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

b5:7e:72:d4:10:41:48:f8:dc:8a:24:2a:6f:50:45:40:c6:1c:fa:50

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Chains

Sep 20, 2012

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Serial Number

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 1, 2012 - Dec 31, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Serial Number

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 19, 2012 - Sep 19, 2013

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

1

Major OS version

5

Entry point

504518

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\oobe\3.0\c3p0\dev5\target\win\Release\DWANative.pdb

shlwapi

PathFileExistsW PathStripPathW PathIsNetworkPathW PathRemoveBackslashW PathRemoveFileSpecW PathIsDirectoryW PathAppendW

kernel32

CloseHandle GetCurrentProcessId LocalFree GetDateFormatW SetFilePointer CreateDirectoryW WriteFile GetTimeFormatW CreateFileW MultiByteToWideChar GetTempPathW GetLocalTime GetFileSize FindFirstFileW CreateProcessW SetEvent WideCharToMultiByte Sleep GetExitCodeProcess ReadFile GetModuleFileNameW FlushFileBuffers FindClose RemoveDirectoryW FindNextFileW DeleteFileW lstrlenA InterlockedIncrement InterlockedDecrement GetShortPathNameW OpenFile GetDriveTypeW GetCurrentProcess GetModuleHandleW FormatMessageW GetVersionExW IsProcessorFeaturePresent GetProcAddress GlobalMemoryStatusEx OpenEventW GetDiskFreeSpaceExW CreateThread ExitProcess GetFullPathNameW GetFullPathNameA CreateFileA SetEndOfFile FreeLibrary QueryPerformanceCounter UnlockFile LockFile GetTickCount GetSystemTimeAsFileTime FormatMessageA InitializeCriticalSection LoadLibraryW LeaveCriticalSection GetFileAttributesA GetFileAttributesW LockFileEx EnterCriticalSection GetDiskFreeSpaceW LoadLibraryA GetDiskFreeSpaceA DeleteCriticalSection GetCurrentThreadId GetTempPathA GetSystemTime AreFileApisANSI DeleteFileA ConnectNamedPipe CreateNamedPipeW GetCPInfo SetFileAttributesW CopyFileW lstrlenW GetACP GetEnvironmentStringsW FreeEnvironmentStringsW GetModuleFileNameA SetEnvironmentVariableA CompareStringW CreateSemaphoreW GetLastError ReleaseSemaphore WaitForSingleObject HeapSize GetConsoleCP GetConsoleMode GetSystemInfo GetStartupInfoW GetFileType InitializeCriticalSectionAndSpinCount SetHandleCount GetTimeZoneInformation SetLastError TlsFree TlsSetValue TlsGetValue TlsAlloc HeapDestroy GetStringTypeW LCMapStringW WriteConsoleW SetStdHandle IsValidCodePage GetOEMCP HeapCreate GetStdHandle IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess RaiseException RtlUnwind GetCommandLineA HeapReAlloc HeapFree DecodePointer EncodePointer HeapAlloc

user32

SendMessageW GetActiveWindow GetSystemMetrics wsprintfW

advapi32

SetNamedSecurityInfoW RegOpenKeyExW RegQueryValueExW FreeSid SetEntriesInAclW AllocateAndInitializeSid GetNamedSecurityInfoW

shell32

SHGetFolderLocation SHGetFolderPathW SHGetPathFromIDListW SHGetMalloc SHGetSpecialFolderLocation ShellExecuteExW SHBrowseForFolderW SHGetSpecialFolderPathW ord680 SHCreateDirectoryExW

ole32

CLSIDFromProgID StringFromGUID2 CLSIDFromString OleRun CoInitialize CoTaskMemFree CoCreateGuid CoCreateInstance

oleaut32

SysFreeString VariantInit VariantCopy VariantClear SysAllocString GetErrorInfo

Setup.exe

IMPHASH f652d84b17a7eff1d76c16cd13b8e089
SHA256 3b58e8202d8d75e27c54682c397eafe86a4fdcbbf7215f7be23c2e7715d453ad
MD5 440a11781132aa88ba18717d9a0c75f8
SHA1 8d0754e9f0f24ba3f57b417f22ba1ca47b0b88d6
SHA512 51a71476b2394764f8907f2f1cf607fedd7938e952cd58d8fdc5d5c6c16a4a5f4367cc563b891dde5de7edc8017aae2cf2aa0c03b533763302af365942571588
SSDEEP 1536:P0Khuz0qx0vrvCDA8L+i+ccZE7Cs8jcdNd+963bvqxTw5GYA5NGPd7LPhjrEA:P3rnYX+/E7nN+63uxTr5NGd7T5rF
TLSH
T1C384468171D0C48AE86B09725A3AB93030E2FD9E51BBCD0D679D7F2906B2351549FF2E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

86:1c:d3:a2:5e:64:43:1d:2d:00:06:8c:cb:d7:b7:44:12:d3:02:d3

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Chains

Feb 19, 2014

CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Serial Number

11:c9:54:ae:24:12:01:1c:f5:4a:7c:3c:b1:8d:75:1e

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 19, 2013 - Feb 20, 2014

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

1

Major OS version

5

Entry point

16756

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\1\releases\build\Redirector\vc10\Release\Setup.pdb

shlwapi

PathRemoveFileSpecW

kernel32

WriteConsoleW GetStdHandle CloseHandle WaitForSingleObject GetExitCodeProcess CreateProcessW GetModuleFileNameW FreeConsole AttachConsole GetConsoleWindow SetFilePointerEx GetStringTypeW GetConsoleMode GetConsoleCP EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection SetStdHandle GetFileType GetLastError InitializeCriticalSectionAndSpinCount RaiseException RtlUnwind GetCommandLineW WriteFile IsProcessorFeaturePresent HeapAlloc HeapFree InterlockedDecrement ExitProcess GetModuleHandleExW GetProcAddress MultiByteToWideChar HeapSize Sleep DeleteCriticalSection IsDebuggerPresent GetStartupInfoW SetLastError InterlockedIncrement CreateFileW GetCurrentThreadId GetProcessHeap QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW OutputDebugStringW LoadLibraryExW LoadLibraryW WideCharToMultiByte LCMapStringW IsValidCodePage GetACP GetOEMCP GetCPInfo HeapReAlloc FlushFileBuffers

user32

SendMessageW

shell32

CommandLineToArgvW

TokenGenerator64.exe

IMPHASH 8266186537c9574129823c009a79f97f
SHA256 98595ffa4a6319cbdae4efe7a9df84c7f5d477f93e6ee008e021e81cc6c363ff
MD5 f601c0e160672b9cd1f2955dce182b1c
SHA1 b814342186394eea4303139e689448c652935524
SHA512 33de0fd511dbb6ca781d794e660928ab952485c972ea9f96eb2c9999b6abb7984add50b4c8e3658e1756a097833600262e671a975fa44b2fd4fa75555b2c0aa8
SSDEEP 3072:KEWnqDRPbvPTiE2O730cwt9WVgPIqWsEbOD3:VWnqDlbXTn730cwt2Tqlr7
TLSH
T1C9C36C4733F810F5E4A7D278C9F64646D7B2B8664775838F1260425A6F237E0AE3A723
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

04:7e:49:d2:23:88:d7:c3:55:98:b1:ef:66:9d:78:29:04:81:5e:70

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Chains

Sep 20, 2012

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Serial Number

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 1, 2012 - Dec 31, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Serial Number

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 19, 2012 - Sep 19, 2013

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

2

Major OS version

5

Entry point

19172

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\oobe\3.0\c3p0\dev5\target\win\Release\TokenGenerator64.pdb

kernel32

CloseHandle GetCurrentProcessId LocalFree GetDateFormatW SetFilePointer CreateDirectoryW WriteFile GetTimeFormatW CreateFileW MultiByteToWideChar GetTempPathW GetLocalTime GetCommandLineW WideCharToMultiByte Sleep GetModuleFileNameW FlushFileBuffers lstrlenA HeapSize EnterCriticalSection CreateSemaphoreW GetLastError ReleaseSemaphore WaitForSingleObject GetStringTypeW LCMapStringW WriteConsoleW SetStdHandle HeapReAlloc IsValidCodePage GetOEMCP LeaveCriticalSection LoadLibraryW GetTickCount QueryPerformanceCounter DeleteCriticalSection GetFileType InitializeCriticalSectionAndSpinCount SetHandleCount GetACP GetCPInfo GetConsoleMode GetConsoleCP DecodePointer EncodePointer GetSystemTimeAsFileTime HeapFree HeapAlloc GetStartupInfoW RaiseException RtlPcToFileHeader TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetStdHandle HeapSetInformation GetVersion HeapCreate GetProcAddress GetModuleHandleW ExitProcess FlsGetValue FlsSetValue FlsFree SetLastError GetCurrentThreadId FlsAlloc RtlUnwindEx FreeEnvironmentStringsW GetEnvironmentStringsW

user32

wsprintfW

shell32

SHGetSpecialFolderPathW CommandLineToArgvW

ole32

CLSIDFromProgID CLSIDFromString OleRun CoCreateInstance CoInitialize

oleaut32

SysFreeString VariantInit VariantCopy VariantClear GetErrorInfo SysAllocString

shlwapi

PathFileExistsW

ZStringResources/cs_CZ/stringtable.xml

SHA256 9e9d55573d8ac448235d15723510be68f6c52ffe73dba19282f82747bb9a9ceb
MD5 95ec71855116e500a8aa1d1e16a5a654
SHA1 d2874d9ac0599f76fb644a5a5db86358777873c8
SHA512 36db96c992840c64695b8586299efb6ba970066e32c2cd450a1f53151888538a86f865b960d6696923779cbff4250b3248b6c49b35dcc581a9516e84ec79e60b
SSDEEP 768:ZpvB03izrwR1v+CeDGdPh9J0nVjNZu1y32hAXpm8QcWGYhjC4e4qvdZnHy:ZP0OwR1vR1J0nt3nscWGF9dQ
TLSH
T1DB23BD5232B87F1C6845956F5AB230C4440FDCFC25A85863769EB67B3FA0E480AFB974
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/da_DK/stringtable.xml

SHA256 5969d80337bc677ba5bde577b5c265e8a8dfe306c6d769c06825092807e647e9
MD5 4f8ddb9ab32210576b49b93ea30d411c
SHA1 65e719344c5ca904fe113a36dd4fcc6262ca57c6
SHA512 d60b2dc0e87b6ad31eeb3b0b68a636e4dcf1c11bca2b0c9cf9cd62ebf0a2a4348ccd9de664ce211ed3a186e572e81370bfce9df8004b44ab4d7eac91429fd901
SSDEEP 384:UPji6bmCKKI6nR9VzDJZPUdissZFtdqBgX51E6DYuEEqsgiEgFZqyaebnHy:U2wmtKRnR99zPj7qBI51tDYzaqhebnHy
TLSH
T19513CC9232B87F2CA846D57F9A7224C9401FECBC25A42463729DA17B3F91D440BFF964
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/de_DE/stringtable.xml

SHA256 c6589dbba525dd0e623c31121245e82c0cd3dc60af9a4d43d6c822491e31b11f
MD5 d0bb8a13805aa21c1a4c7c6c63fd0227
SHA1 e1f5c9593ddc2c6241e75f28203cbf71c71cbb37
SHA512 d793d256293c1d1828ab90c5656ec53dedf9ba13fd8e33691fdbc1cbd7a4e21960d2ddac67dddda7aa6f67a680436141b7fb309310274b7c354c9eda65a984b9
SSDEEP 384:StjRRmFkld3N25LwY53VKbRLchhHQ7+GlDN161qfMilzVxQAqyXnHy:Stf/iLwI30NLchh7GpN1HkilxxQsnHy
TLSH
T1B0238D5235F8BF2CA846D66F4A7224C5211FECF821A46462B29EA1773F50E440BFF974
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/en_GB/stringtable.xml

SHA256 eeec5a09723ff911a302020f50e06f4609cddb267ab152280e282bfa1fda7d25
MD5 a3e2c9ee5b79145180708f5868a5377b
SHA1 e70e50940aaf24828fee332d89ccae404529d8fb
SHA512 bc8a86b2104a67285e7aaa4a6b90413ded5e8c8b9c175ace8cea9b8dbea23efd81bb12a69b251ac3db81ddb34bec0c416d236c81d64982536b5cc97d3cd8d007
SSDEEP 768:B4ak/lZB4vfsAzv/s3CRSslCIqJRdFE7tpWlYwcKxGMAH9aRnHy:B4ak/DB43M3CIslCv2W2w1sEo
TLSH
T13903AB9677987F2C2C8681BF5D7534D5541FACB836A8601321EEB53B3B40E840AF7DA8
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/en_US/stringtable.xml

SHA256 19da5ccdc2b78729a4e77fade850ecddf40269ffa2fab090a5551078aad73d7a
MD5 110c0063979dccfcbe92cd2696c513a5
SHA1 4e3cedc9912a6f34c902209d111a66e011b9928b
SHA512 bb2453603a39fb7b126b6e92dd3d345b2afbef057ca789218c3de6998c5db74c4013acd93640cbc697dc68c3866a8f1d081ad8514e27a93d9690633a0629752a
SSDEEP 768:B4ak/lZB4visAzv/E3CRSslCIqJRd/EWupWlYwcE7GMAH9aRnHy:B4ak/DB4Kk3CIslCvSW2wBsEo
TLSH
T1DA03AB9677987F2C2C8A81BF5D7534C5541FACF836A86013219EB13B3B41E844AF7DA8
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/en_XM/stringtable.xml

SHA256 7c88ca1eb907eb50d5d7fa6456fcd116fd4a1fa111537bde8e810fce1a7d6daf
MD5 abe469decf6bfb68d0356cf8e425f980
SHA1 e0821ef0769e68491cc2b143d8e820460c20acb4
SHA512 9c4527c07f229f14a2f897ef4806f104dce1a622871419291d7f67afbe81940481bc0efde3e5746fbb0d9f90b5a70cb092041aab590b3234c2228a75b5fffcc8
SSDEEP 768:B4ak/lZB4vYsAzv/83CRSslCIqJRdxEAspWlYwcI3GMAH9aRnHy:B4ak/DB4gc3CIslCvWW2w1sEo
TLSH
T10003BC9677987F2C2C8681BF5D7534D5541FACF836A8601321AEB13B3B41E840AF7DA8
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/es_ES/stringtable.xml

SHA256 43e13957bfceddec1d513be759227038e279857f193e4eb03cf90ce22a0b7bf9
MD5 691fc271e46577a6e30d745ccb399fe4
SHA1 c16e5f54ac8e3a381b0ae59a79be3be9578dff28
SHA512 cf1841ed517e983b2a796b84afc6d616de1a771a2119a48215c1846f5124fa5d289c5bfdbb467cc3e9ef84d036b95a943d011c4e02772102f5fde2bb51325d17
SSDEEP 384:47U6NgSDA3TowJz+Zx0A4FGRx4OWAb3p2G19FmhI9xQqSBQpywPnHy:4NGSDwUkzkgG1PmW1IwPnHy
TLSH
T18D23CE5132F87F1C5886946F9AB120D5900FDCF834A85462B29E657B3F90E884BFFD64
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/es_LA/stringtable.xml

SHA256 b22a96ad222c79ba7c7a3e747a89d5c3f438e451a0d54310bb008ad7370d0378
MD5 f31949626eccfe037a99629f3f6590ae
SHA1 3e73bbf56559e5775247d5cd2e3186391ea36205
SHA512 54deb74398c4f176c821fd585448085f3dd5479197a93e9133422ad4122cf0db5b7706b6933d5a5e66ca67d23e4918072ad9a8f3acc16bb8bc9a53135e9b5752
SSDEEP 384:47U6NgVDAHTowJz+Zx0A4FGRx4O5AbUy2G19FmhI9ulqS/QpywPnHy:4NGVD4UkzaRG1PmWFGwPnHy
TLSH
T17B23CE5132F87F1C5886946F9AB120D5900FDCF834A85462B29E65BB3F90E884BFFD64
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/es_MX/stringtable.xml

SHA256 b22a96ad222c79ba7c7a3e747a89d5c3f438e451a0d54310bb008ad7370d0378
MD5 f31949626eccfe037a99629f3f6590ae
SHA1 3e73bbf56559e5775247d5cd2e3186391ea36205
SHA512 54deb74398c4f176c821fd585448085f3dd5479197a93e9133422ad4122cf0db5b7706b6933d5a5e66ca67d23e4918072ad9a8f3acc16bb8bc9a53135e9b5752
SSDEEP 384:47U6NgVDAHTowJz+Zx0A4FGRx4O5AbUy2G19FmhI9ulqS/QpywPnHy:4NGVD4UkzaRG1PmWFGwPnHy
TLSH
T17B23CE5132F87F1C5886946F9AB120D5900FDCF834A85462B29E65BB3F90E884BFFD64
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/es_NA/stringtable.xml

SHA256 b22a96ad222c79ba7c7a3e747a89d5c3f438e451a0d54310bb008ad7370d0378
MD5 f31949626eccfe037a99629f3f6590ae
SHA1 3e73bbf56559e5775247d5cd2e3186391ea36205
SHA512 54deb74398c4f176c821fd585448085f3dd5479197a93e9133422ad4122cf0db5b7706b6933d5a5e66ca67d23e4918072ad9a8f3acc16bb8bc9a53135e9b5752
SSDEEP 384:47U6NgVDAHTowJz+Zx0A4FGRx4O5AbUy2G19FmhI9ulqS/QpywPnHy:4NGVD4UkzaRG1PmWFGwPnHy
TLSH
T17B23CE5132F87F1C5886946F9AB120D5900FDCF834A85462B29E65BB3F90E884BFFD64
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/fi_FI/stringtable.xml

SHA256 69a0a8fca1e03af03b59c272273a283a9a465f7a1dd64184990c862d2320ab1a
MD5 7d70cb2849b487d648c7792a271b3f73
SHA1 0017130790906e5379dadb2fc1d3f8961d11482b
SHA512 5e258a4ee17073b43f7d5c24350c775cf9a777e09b513023ae587469cfede9097ccc88763e41bd59774367be22c974cc3cc050a60b59ef582a699f5e093e1e2d
SSDEEP 384:CUyHWaMHn9vF2h6qBFvtzYBxjdeRIRMLt9e1PkKkhBqqFAaYRwJ2dZnHy:C2n9vch6qDIKrje18enaYRR7nHy
TLSH
T17D237F5232E8AF1CA445D47F4AB170D9404FDCFC25A85862B25EA2BB3F60D441AFBD78
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/fr_CA/stringtable.xml

SHA256 cb624126cc696d9168478adce33376f991525a5bcc03c5adc4e839b5a0834e6a
MD5 9a0ed0a1a50b849454413e9663635414
SHA1 423ad5fac44a470c599fc536e06f4f79a490c8ec
SHA512 dd9534b5d271b210cbde2ad91be26d2b4e9bfb86f1ca0d0cbb307bc1397fecfe9b03871f90a12cff8e97f4b3b209efc39e37e7df12a352558443341924c318e5
SSDEEP 768:kriFAB/DFnl3TSyyo2oLl+ss8E08hQ1zwR4XlMtX4FqnHy:krlBTSGeyN
TLSH
T1E423BC5232F87F2C6886956F5A7220C9501FDCF831A46462B29E61773F91D8807FF9B8
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/fr_FR/stringtable.xml

SHA256 6cc5d6b13c4d5c3b8a52eb31839b033e0e8ab57812c59ad4589e105f8e2c222e
MD5 3304cea5e46f7780fbd438ecbd5102b5
SHA1 eb0e2e440bcca9081d7ffe61a44d251db602aa11
SHA512 e7ee6c75927a18a447ff5886f582c2f6f185c66869de918a32f4bf1ff1d786231f71a03e3600aff91722fae14bfc234d95cec9782587aaeae9a0ccc2ac328f79
SSDEEP 768:kriFAB/DFnw3jSyyo2WLl+ss8E0nkQ1zwRCplMtX4FqnHy:krlyjSG4iN
TLSH
T15F23BC5232F87F2C6886956F5A7220C9501FDCF831A46462B29E61773F91D8807FF9B8
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/fr_XM/stringtable.xml

SHA256 6cc5d6b13c4d5c3b8a52eb31839b033e0e8ab57812c59ad4589e105f8e2c222e
MD5 3304cea5e46f7780fbd438ecbd5102b5
SHA1 eb0e2e440bcca9081d7ffe61a44d251db602aa11
SHA512 e7ee6c75927a18a447ff5886f582c2f6f185c66869de918a32f4bf1ff1d786231f71a03e3600aff91722fae14bfc234d95cec9782587aaeae9a0ccc2ac328f79
SSDEEP 768:kriFAB/DFnw3jSyyo2WLl+ss8E0nkQ1zwRCplMtX4FqnHy:krlyjSG4iN
TLSH
T15F23BC5232F87F2C6886956F5A7220C9501FDCF831A46462B29E61773F91D8807FF9B8
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/hu_HU/stringtable.xml

SHA256 95ab8153668353ef7074b1ffc4db54d3e38fdf84bd0335991fa1bb973244065c
MD5 f804acb71045628cd8237f32cb5e5c5a
SHA1 4c67013ade1c269c40b3628f4569e0f2103ced6c
SHA512 e27740bbd8de04c726c6eb31072b4402b6e72eaaa02f782ac31bd0aa996bb18f397a60e90d667a82cc1debcd3b1f7c0ce19b87569a5e5ef91c0355ed1c4da242
SSDEEP 384:KUuiNWipJ8DyovGRdSrhb1GGyNPNHjNkJbblPpc+J4n1d7rwqMQmqZrWjRxRxDoM:KwXj0vGRdSDx9pc+Wn1nMi9WfC6GvnHy
TLSH
T100237DB232A87F1CA846946F5AB231C5401FDCFC25B41463729E657B3F90E480EFB969
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/it_IT/stringtable.xml

SHA256 07ca7a40c94abc46f3dc72cb520eef3fd7aff427ddca2976eb5a92c5a158c409
MD5 4796cf6e27ae9943943e2c545c917c44
SHA1 85329c569007f9d291e52430e3f7cbb4d1fe5d71
SHA512 463bbac78bac25acf5b87c7b1f8649ea247f9b3633a0d6371acf646a2b40292d7ad4510ea5a11752d0823598a066eb6f6de335905253e92416a619929161dd44
SSDEEP 384:+5XMrFoeaVdtSZ4YWpoj0HBDFA1xbvRFJo+aqqMVZ155W9tTWenOFjCcbq+YnHy:+6FCVlNfA1xbvRFiW++YnHy
TLSH
T14323AD6171B87F1C6846956F8AB230C8511FECFC39A42462729E627B3F91D440AFFD68
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/ja_JP/stringtable.xml

SHA256 bfcef4c373296eb04eb9faa465444f41b58e210ee3f264df225b13c7206c14a4
MD5 3060b0f3e03a3179c1622845295d8735
SHA1 6a1c389418bfa773b6d5d3844da4359ddf47da8b
SHA512 3aad08a3c08e74d7e3537bc3418a9d7f1631db2a73860c17abf1c786c2cf5fcab313d5341ab7548c3fa320a80e7353841eed75075b41fa972324d7c1f1ddfe49
SSDEEP 768:HvcjURbJliahmreNatki1RaZ6Q18UmsqDiqnHy:HwURbJliahmreNatliN
TLSH
T10E33A95E73A93F2D9851943B49B631C4400F9CBDE8A42472616EE1773F60E8CCABB974
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/ko_KR/stringtable.xml

SHA256 08589b894bc27b5775aa36d58b728ddd88db9e8c78ac762956e32b9a412d64f9
MD5 931e1c85077d4039e9d24db86afc8f2c
SHA1 7dd4d837aca0e24a72c606ab25621b6c9466c3b2
SHA512 4cccef0921d9ea1bf9537103e36f14ce57e6306a5752ae69fb2d6521d7262ddb6e29b694dbec06e14704560583a1addc6612c0cd8e05045ceda716ea811cd319
SSDEEP 384:Fo3WmmXc5ILdv0ppXbXG5OKTUQr18hv4qgQB6Kc2InHy:Fnk5ILdv0TbXrKT9r18h9g+6Kc2InHy
TLSH
T11823BD9232F96F1C5842946B4AF271C4420FDCF936651462B64DA97B3FA0D840AFFDB8
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/nb_NO/stringtable.xml

SHA256 8b6c08b73682c6471333aebda71b10d337da8a58dae33e535444485d6da530cd
MD5 c8dd76bbbca7f0232b9a6761fba81e90
SHA1 0f63b240e016d7ea81ebc0ac96434d3a4c33be29
SHA512 a9bf6917fae12bb61da334208cceac3ec0c782d9fc951523ce8dcf7025a3d085881df88fb9c60e71ff382f964995dac28f96f6e81984b70a4b1afa6b78e1e755
SSDEEP 768:FHJHk7YImnt8IHfr+IgEow81TdbyCyMsY+dmhvIO0feVEnHy:FpTXHfWsRdmhvIO08
TLSH
T1A9139C5132B87F1CA855957F9A7220C9410FECBC25A41463729EB17B3FA1E880BFF964
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/nl_NL/stringtable.xml

SHA256 b82754ecd7884cafff2b6a1871ea644ef166a60e65a22cf7b1ba9f3355fb64e1
MD5 11979734653ef11531b82d1ca1cacffe
SHA1 6a7db8b5a88a1525ed76fd258404c2e1d6191fd3
SHA512 e1ce715f7b2a5ce2b10122041a72ab97b97d83f435fcee0d1a3e9caf069ae906aa4ece5b5d2cf13fbd943c176a8c40822ac34105c353d62745a876d9091ba355
SSDEEP 384:QOJrXyoLkSEVzMZ2K0zYgOUfG7n1VL9LxL2LjLwfOBaq8MiZiIidiRtHieiy8bJO:QlyZ0ORn1w8Htj8bJDnHy
TLSH
T19123CF5231B87F2C6845D56F9A7230D9510FECFC25A82462B29EA17B3F50D480AFF9B4
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/pl_PL/stringtable.xml

SHA256 f4074ff79d3240576012a8879964c37140f928c62af4d5123b146756838f35dd
MD5 22f2472f55ef28a549f7ff9232921233
SHA1 8d4cb39c8b8c97a0d9dead9750f5e789fb1e4aa4
SHA512 f510f641cfca1b1660654082dddd54eb14034b38b847d3a9e5b11da111e020a395d945e8a1f772c0968a1d026cba9a659cd3b6f461201799cca0506eb58445c0
SSDEEP 768:IYNNM9xLfM4MNCPZQnqMWURYZZmQT+jz2bBN1PVmJhNKCbX+8eGnHy:IJM9s
TLSH
T18023885132B86F1C6945946F8AB230C9404FDCF834A86463729E657B3F91E480BFFDA9
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/pt_BR/stringtable.xml

SHA256 4806e7487c1f340143f4283e34b494dd590f2146cee5a90184de01665fd65e30
MD5 a985f92dec454b3dd3b9473889b0182d
SHA1 daa2bea98562d74e7fa3dcfe0f3c4a9350c4baff
SHA512 0de78bbe43fbb870c597d8526a319633ff48b6cacc443d9eb45f69aae77db2370cc2f994b951e5ec8ecbd2bf6abe8bd623ab92037c3e9d747a9dc9bce75e11e7
SSDEEP 768:kCXtcPTExKApO2z6KX9lM0uWkG1gkYIjMWVff/7MPyB/TYP2bQyoLnHy:kvT6EkSW
TLSH
T1BA23BB5232E83F2C6846957F9A7230C5400F9CB835645463B6AE667B3FD0E884BBFD64
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/ru_RU/stringtable.xml

SHA256 1ae1d0dff3e91e17f42721b9b1fb94ea4be7f227fe3be8fc11b47008068a7166
MD5 d0e399eba4100ddd4fe241da66b81e88
SHA1 581c470c90a8fc87050870bf9e134e240dfb9bb7
SHA512 696442a64e83fea338b2163ce19dbbc4e4087b21f8411357eaaf4eac15ffb029a803ca96cf62b08d05b0864cd0f69622aa34d3e0bad678e1e1b57b56a3766159
SSDEEP 384:ajyZYu5SvvoP4oNekqnBhZ243h7ng1m11oRnqdthvPfjGnnFkZuH/E6mBCfCnHy:ajzqV4oNekqnpg1Ed4/68fCnHy
TLSH
T1C843986131E93F9C1505A42FCA31B988249F9CFD3B695663215C397B3EE0C144BBFA68
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/sv_SE/stringtable.xml

SHA256 1a59d43bdb8359176c3d67d72f0ef5650d4021f9145635dfd842263cd1df182e
MD5 37c6475958a87b627eccc27eade88a14
SHA1 2c9edb90e3311f30b6236df2661d987bbdbf7a8d
SHA512 1e365a3ecfef162ca4a0bcff1afd9c4aaa9f9541356e6b1feddad1cd8fd18bbd172389395c77c1db6c7d2ab8e5c1930877732ebff4a899466961b196e2b08618
SSDEEP 384:9WCUjtASTKG+sHXJnOBB7qJrS1/Q+wjqqU+28c5+WNnHy:9ZytDTKGvHXJo7qRS14+/qUOc5+WNnHy
TLSH
T178239E5232B8BF1CA852956F8AB220D9001FECF835F46462729E657B3F90D440AFF975
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/tr_TR/stringtable.xml

SHA256 82ff8f2b20b3d58e52366b84b1cbdbe68a25cb36cce753d3e2504154da7edbfe
MD5 605c46f5130e6f3b1dc4ce17f0309895
SHA1 a253d894d84811d6a42310954a32355617e15ba4
SHA512 a1a051e3b7ea40339da3290e076146e8c2a5a0ef00e6c6140c4d72e9fd30770dc4f67173208f592680656758b4d995e557bd9da9e33f945b9cb91ef12f903dad
SSDEEP 384:0gqxaBbVRncJNZnb7wpFW0ze11jkX5iq1IN/MZaOMnHy:0qbvcJNtz0C11jkpn1RZaOMnHy
TLSH
T12C23FD9135F87F1CA946956F8AB221C4800F9CF836B4B463725EA67B3F50E440AFB974
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/uk_UA/stringtable.xml

SHA256 de1da670406c0eb16494f988f81dc8c69d7e0c9439f66727ee66b0e006c7ac6d
MD5 86557c2033ff362da0b30753d5c84867
SHA1 b0460737831904629f4c439bbcc0197b35dc60e2
SHA512 90b4d827169059b1b223ae2c13b76459a207862b46dd8a2eb1ad1f9888267043ded138b21871353b4314884b75a37663b2b174f154d99942f2ef6f77943ef890
SSDEEP 384:+APfihWHdFY5+LeZkhLXkJAMN4Kri5PEOvSfQ4fXVH4U2BeSnG1DpX71NEOTqbqP:+3iPKZaI/zoJG1DLgEo0Sp5nHy
TLSH
T15743995131E86F9D140AE06BD974B5C8249F8CFD3AA5561332AD397B3EE0C044EBFA64
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/zh_CN/stringtable.xml

SHA256 050b2600a2e0465073c86c6aa478e945d9a1dd38b612288fd24cfa9931da7b92
MD5 aff79b8a2807e77a1cfc1c8a2ddf7f5a
SHA1 2dbd414f4b0402e647f2d54e0964bd90c5e0caed
SHA512 6f547db8165a0df9dc980ae53142fc3b3f2d12cc1a92141bdf872d2dfb0f9396def0d1234589b373cce249349d42eceea8c180ef40bf172a8331115ea9c2078f
SSDEEP 384:VpgXB7yj11fuKd8an3M+1y36TRqlabR/1E69UzuOttnHy:Vj1Kanc+146IlabR/1E69UzuitnHy
TLSH
T1C3135A9232A87F1C5846987B5AB221D8400FECFC35A468A3725E657B3F50D480BFFD69
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/zh_TW/stringtable.xml

SHA256 0c72e35fc21f06045790a04bdc46eab88c3ffa142cf2054405b9da8ddfd68807
MD5 c90bc5bf20e92e9d544e8759efaef496
SHA1 7114c5f824f57dec68c4ed4cb40005e5fa8295f3
SHA512 4134d66fe5e5a44692823d428966bce0c3be79cec3e4b27150cb24914ad888adcc7d44aad5f68bd2ca28d38ffb7662386c74afe19d845570526b1094b88b77f3
SSDEEP 384:tRP6YMO1q+pJ55i4y9XWpPi29qX1kSHqfnJoHFqnHy:t71qixP1YX1kPBoHFqnHy
TLSH
T17313889231A87F5C5846D87B5BB221D8401FECFC25A42863B29D627B3F50D480BFB969
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

adobeIdManifest.xml

SHA256 b8454875d59517fdfb8248abacda20bf34ee003255c81ad5e444d945f53b2de9
MD5 161a971d515998f21aa0f978e330ecc2
SHA1 8981e70a7dddcf51cb91fe065605f1295bd443d3
SHA512 094feb3572ed49a7e2dc59acbde38dbfa00658684188c8f27182eb5c57e55f89cce07a49c93c1e3c8ae69610f2a88034b8757f7c4cf5fe44e52c3ea11630a1c1
TLSH
T1BEC080D271DDD91345509A254977C1047315964C0BB0888CD0D506F7564613C3E47006
MD5 SHA1 SHA512 TLSH

assets/fonts_clean.swf

SHA256 6726074bc11d56a179f844c321fa648f4d3ce38d0257f5a51f79431825eea82b
MD5 ed67bfa23913387c9f3fb4a619ac7159
SHA1 775812cf6f302a4e0876a5e730a71a544cba82b4
SHA512 9cd234ada8d8fd52ca6905f749fb86fbe00248a6e4cbda06867373b6af62dfaa0097807c70623f7df19cfcc238104f1d7732b34f6348b0cd92cb1418465f630b
SSDEEP 12288:9VFtlI2ydhmdlLydn74Dvvu26r5D9f+MvNN4E/iVNp3UVi1RjfvTMJEF:9VFtlLyPUL47F5pf+MvNN4bVPsicJC
TLSH
T10CE423DF62FE10F709E5132FA6412E1E7617B1C957FF1D61012E58AE293259C8C22AEC
MD5 SHA1 SHA512 SSDEEP TLSH

assets/fonts_system.swf

SHA256 ab65a0454d8833b84c98c91994a3187410df4cafc2a07479180d09bce742a483
MD5 4c028eb89e513122692461adc1fa743a
SHA1 1df8c3f83bc97968e93fd84e49e58da6a8ff93be
SHA512 aea09edd67d07ae8c962507f5740cf00f0bceb280f42bc1d0184d6b762711d67b3dabc7c2d0bede2ae3c81ecdd065b76879b8518012ab579836c79e75479de1c
SSDEEP 6144:h0ANFuhD57w50bAWRizgx7J7RFzFBN+V62:GANFuhl3A9gzfFBEV62
TLSH
T10D1412E69405CAAE273C3AE7F02D9E5111C08429BF18E92A70C57557F528CE2AAC9273
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/packages/DWA/DWA.pimx

SHA256 fb4bb515c175b1f63a5132db1a1cd89dc6045c48274dc17bddeade9a70d61884
MD5 8d845bc95c61927bd99ff94388bbec2d
SHA1 c8fc28efed4b87ff79e590cbafde12cac0c4595b
SHA512 1f281c6c0395043f00751f5b31b488cfb49db53b378619547b8ff597b4e806c0f7af969e8c2a44c7d809f2ab3eee6c42b0f4b75d7096742a739b34918f1caf4f
SSDEEP 768:eZ4CSmXxzOsOTLoky8pLbNlC7ysU09bsrob48zYQ:S4CSmhtO3Ly8xNNsU0arob4AYQ
TLSH
T1DD23046C50691BE1B40BCE653D245E471A1FB07DF6B030F472984EB68AD998F4E8B237
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/packages/DWA/DWA.sig

SHA256 78ba6a2452cb6c313d82379ec0539cfba74adb43165843f2ce06c41380b9de64
MD5 aa8b413e38856788c2d21a1579e78870
SHA1 c2febbc349f07b9e6cc1b030a84b419710b399f4
SHA512 23e006f74359447e24e89e68d14648be9838de6555b7e05d5af6fc18c2a0bfd2e25e36e92bef13a17d16ce5bc4589d0e7be25730c2aa9b60605b151468e4c12c
TLSH
T10731E97CE0E152950A300EE3DA378A46481061E6BFE5101A76918BBFAF95CB45133FFC
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/packages/IPC/IPC.pima

SHA256 1150cf89b4253f5576bd45b406a98bdc3a46fbd3c261be82df5cad343031c268
MD5 0cf6d28749bde51eb864163eb2b41a41
SHA1 c0f97fa436c733d4147cbdda049d9b8842ceaf3b
SHA512 164e3684cacf17b0754c1c158ed9189ee801c14f7b750392cdaab7e049370c25de68dbd96b31819dd753dc3439a63b922416055d431f257bf3722a1de9c7c0a2
SSDEEP 6144:YOu1FdXFa5YQp5wCaJbyRhLdjHX0LLHoj2T+ymm3UL8GDNfvDBe7Wm8C4+bX:/uP9Fup5lB7X0QktXWNfvA7s+T
TLSH
T12F942356E16FD1E4E4987EEEE29981F1D6A5E29637C70C90E163423C1F3A03D86C9C94
MD5 SHA1 SHA512 SSDEEP TLSH

AdobeIPCBroker.exe

IMPHASH da24f67347bc58cb3dc1e70b50652545
SHA256 30c5c93b267fb6371281b1c5e7c1d37897196157e47e8824eb42d3c3c4d69b3b
MD5 1f85a80ebc4c4c1d562094f5ab231077
SHA1 2b56649a10d238f2d346c493c7d1584b6d316a67
SHA512 b3644957564530a284a9db62b8cdc888bd3c2b041727c934c304dc407a0f531f4e99af9165ad810158812241bc400f4ab2d05c56c84b73ded6d11edfe980cda3
SSDEEP 12288:fXHavCTe4QDFmICY6N/GYnvV0HvDjMY+BQ+QAQGEZFSqJMwnbUcCe:fX6SBNj9EDjrKQOEXJMlcCe
TLSH
T157F4AE317681C079D1A602748ABDD7BA183EF232C73566D7B2E41A6C5D242E06B3E35F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

86:d3:3e:df:d9:49:1f:82:ed:34:2d:4b:15:60:af:3d:76:7d:d0:1d

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Adobe Systems Incorporated,OU=CoreTech+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Chains

Feb 19, 2014

CN=Adobe Systems Incorporated,OU=CoreTech+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Adobe Systems Incorporated,OU=CoreTech+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Serial Number

62:f7:ce:7b:39:4a:c6:00:36:61:5d:f8:32:69:f4:6b

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 28, 2013 - Mar 1, 2014

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

1

Major OS version

5

Entry point

387917

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

AdobeIPCBroker.pdb

kernel32

TlsGetValue TlsSetValue InterlockedIncrement TlsAlloc Sleep TlsFree GetCurrentThreadId InterlockedCompareExchange ReleaseMutex WaitForSingleObject CloseHandle CreateMutexA GetVersionExA MultiByteToWideChar GetModuleHandleA GetModuleFileNameA LeaveCriticalSection EnterCriticalSection DeleteCriticalSection InitializeCriticalSection GetLastError CreateMutexW SetEnvironmentVariableA CompareStringW GetProcessHeap SwitchToThread GetCurrentProcessId GetEnvironmentVariableW FreeEnvironmentStringsW GetCommandLineW GetTickCount GetCurrentThread FindClose ConnectNamedPipe GetOverlappedResult ReadFile WriteFile DuplicateHandle CreateFileW GetTempPathW GetFileSizeEx SetFilePointerEx SetEndOfFile LockFileEx UnlockFile GetFullPathNameW GetCurrentDirectoryW SetCurrentDirectoryW CreateNamedPipeW PeekNamedPipe GetNamedPipeInfo FlushFileBuffers WaitForMultipleObjects CreateEventW SetEvent ResetEvent LoadLibraryExW GetProcAddress GetModuleFileNameW SetEnvironmentVariableW GetEnvironmentStringsW GetStdHandle SetStdHandle SetThreadPriority GetThreadPriority VirtualAlloc VirtualFree GetCurrentProcess FormatMessageW LocalAlloc LocalFree LocalReAlloc LCMapStringW RtlCaptureStackBackTrace SetFilePointer GetSystemTimeAsFileTime TerminateProcess GetCommandLineA HeapSetInformation HeapFree EncodePointer DecodePointer GetTimeZoneInformation HeapReAlloc HeapAlloc FileTimeToSystemTime FileTimeToLocalFileTime GetDriveTypeA FindFirstFileExA GetDriveTypeW FindFirstFileExW RtlUnwind RaiseException ExitThread CreateThread SetUnhandledExceptionFilter GetModuleHandleW ExitProcess WideCharToMultiByte SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType GetStartupInfoW SetLastError InterlockedDecrement HeapCreate QueryPerformanceCounter UnhandledExceptionFilter IsDebuggerPresent HeapSize IsProcessorFeaturePresent GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage GetFullPathNameA GetFileInformationByHandle CreateFileA GetStringTypeW LoadLibraryW WriteConsoleW

user32

TranslateMessage GetWindowLongW DispatchMessageW MsgWaitForMultipleObjectsEx DestroyWindow KillTimer SetTimer PeekMessageW DefWindowProcW RegisterClassW CreateWindowExW SetWindowLongW PostMessageW PostQuitMessage

advapi32

GetUserNameW

shell32

CommandLineToArgvW ShellExecuteExW SHCreateDirectoryExW

ole32

OleRun CoUninitialize CoInitializeEx CoCreateInstance

oleaut32

VariantInit SysFreeString VariantClear

Name

.text

Size

507KB

Virtual Size

507KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

122KB

Virtual Size

121KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

17KB

Virtual Size

36KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

2B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

46KB

Virtual Size

46KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

51KB

Virtual Size

50KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

StartupOptions.xml

SHA256 815f61621d9210a57f1aa2967cd337f466f08dbc3d2f12346b4addf9edbae2a6
MD5 ee4877cf55d6ca5321cf313d8bedaf2a
SHA1 edca2254b3fb5db4766df23faa168bcbeb654f2e
SHA512 9734cfe174e51d3c3bd2e80765e749ed1cb92fd4783ceb630ee3359fc926f082eb253fb758ec0e12cbff9e727e7e45460155814a093cebd5e49331ea06a54dca
TLSH
T1E011A1E1F7E8A2962574825F2A7140ECDA3ADD4A106A042C758E73773F1361641EB364
MD5 SHA1 SHA512 TLSH

customhook/AdobeIPCBrokerCustomHook.exe

IMPHASH 72557946c0092eeadcd852a40f6079f3
SHA256 e5d2f86258522add4f4107714a3a13d46b68df85fe7ba57bb7c582541a7cb6f3
MD5 4ed6289ccba757256f5aac18432c4885
SHA1 4ae4210cdf95064857bb84a17eee536dde75dcba
SHA512 15bf00364ffdd7551f50b2dd8b4f1aac5c1c9f0d9250b1da9fa3fac4813b1c84e54429f57ca39a71f073de1dc9cebba0b61e31c98d33156ecad640b65514bf64
SSDEEP 1536:+XPaqUt/XTBX2V/PATcQEPDpJqTC8SWzOUgpiGzh1RTba0G2Nkwlua+:+fFA/DBX2V3lrjIDSC0fRq0G2NkJ
TLSH
T121C38C2135C5C073E15312348EA9D7B28A3AF8B14F7168CBBBD906BA5F286C1973531B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

e0:87:70:ed:81:5a:55:a6:2b:f2:ab:44:30:99:53:07:3e:1d:18:b0

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Adobe Systems Incorporated,OU=CoreTech+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Chains

Feb 19, 2014

CN=Adobe Systems Incorporated,OU=CoreTech+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Adobe Systems Incorporated,OU=CoreTech+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Serial Number

62:f7:ce:7b:39:4a:c6:00:36:61:5d:f8:32:69:f4:6b

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 28, 2013 - Mar 1, 2014

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

1

Major OS version

5

Entry point

28373

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

AdobeIPCBrokerCustomHook.pdb

shlwapi

PathAppendW

kernel32

SetEndOfFile OpenProcess Sleep TerminateProcess Process32FirstW Process32NextW CreateToolhelp32Snapshot CloseHandle CreateFileW CreateFileA WriteConsoleW SetStdHandle LoadLibraryW InterlockedIncrement InterlockedDecrement EncodePointer DecodePointer InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLastError HeapFree WideCharToMultiByte GetCommandLineA HeapSetInformation RaiseException RtlUnwind HeapAlloc LCMapStringW MultiByteToWideChar GetCPInfo GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType GetStartupInfoW IsProcessorFeaturePresent HeapCreate GetProcessHeap GetProcAddress GetModuleHandleW ExitProcess ReadFile SetFilePointer WriteFile GetConsoleCP GetConsoleMode FlushFileBuffers GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoW HeapSize GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeW HeapReAlloc

user32

FindWindowExW PostMessageW

shell32

SHGetFolderPathW

Adobe CC 2015/packages/IPC/IPC.pimx

SHA256 6192cfce0da35d776994d30538dbbc1908e2fe35f3793030aca78a622e05f3a3
MD5 e84eb3edc819f6e17045c78fbdf83503
SHA1 d9bd5350ea85851dec8a50773d4ad9569004f975
SHA512 76975ebcbd6ad9375aeb724c73a5e8403ac178c2b047b090df6c278a96b50d18a0f9bfd66b0759e30c412bac68042635e442e7aac042e8bdbc64e70f5a27992d
SSDEEP 48:gB5UeLGPPZza9Gppa5woAoQiqc08HjP0iysmuv4VvfzUHzNO:PeLGHwGK5JAu0YP0iysdvYOI
TLSH
T139811AA824A94BE17843CF627C729E07695FB63DB23034F07AA94E7646C182F1C4B533
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/packages/IPC/IPC.sig

SHA256 828ab15b6e2a3f13cb9fff1c25db89082d3de2f29ea27d76bbe787d829aced3b
MD5 0503a96f391b7b147c512cd84ceb1113
SHA1 3aaae9ba9a2a845b18c921ef5a44672c39f61cda
SHA512 81a155206f7d873652840b1200757e9eb3155ecba8216aaf06e0353f2b21ba9e17ab8914e2493c08058308eaae8899403863a7835bbc62f246d686feb1f43f35
TLSH
T1BD31193662B02A5A0271AFF3DE0A5515C05B40C71B3A280871E3C3177F33538B9430AA
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/packages/LWA/LWA.pima

SHA256 534db32142926de449ad55d4c6c9e0ac727eadbdb60267e8552f09619063fe4e
MD5 b92a6be4904bc8a7310727c8de6010dc
SHA1 413ab4815aada13936936a121e1b533b3dcda276
SHA512 d4193bf5ddbd98210904a9d9fabb762288af85682d2492b0dd31ba75776c78f848f502e962dd6e92da3b95744462c283a4b3d978d2e3f87eea01ccf9ceb117aa
SSDEEP 98304:aEi9G6WTvzkfSVFnBtf1KB+HrpAVTPZ0CcZRDcU9v6tvMuegxLfXubi:aB9DWjof4FBtf1KBceTx0CGRDcUktjzp
TLSH
T12C463364CA2CD03DD667A37765C44923341CC11675A430B66D8D04FEBCBFAA58AA3CBB
MD5 SHA1 SHA512 SSDEEP TLSH

AAM Registration Notifier.exe

IMPHASH 67fea5fef213e1a0a746934b53e82d2b
SHA256 fec7ed7adf479a3e9776f641a1b1805dc741c55813d39894ab0db28bcabd5fe6
MD5 d464e4223c903840d34576502fd3bb45
SHA1 1e771b08a3cfb566f95e4e5b597196fcf03ee1c0
SHA512 be94c69cc15c57cd5d0beabdf589a422f26678e4af7e82e044f139809fe2a5babd70edf5e4e8d8c49173e440536e357495ffdf70e7fb4d8e7f11298da3cf4381
SSDEEP 3072:yAiblH8gK/Gi+KSqWUgwnySSYGXvNdy+6M8vbwNPZJtznrlV+rMj5NPweaoOp:yAiblHPs8wn2YGXvahvmPlZVo8NPwMg
TLSH
T11F446C2077D18D36E5A316318DB9977A467ABC650B3191CBA3B43A6DDD303D29E3032B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

49:9d:8e:fc:23:61:51:92:8d:63:45:13:38:12:53:79:61:8d:5a:a7

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Chains

Sep 20, 2012

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Serial Number

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 1, 2012 - Dec 31, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Serial Number

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 19, 2012 - Sep 19, 2013

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

1

Major OS version

5

Entry point

73799

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\oobe\3.0\c3p0\dev5\target\win\Release\AAMRegistrationNotifier.pdb

user32

DefWindowProcW UpdateWindow SendMessageW CreateWindowExW ShowWindow LoadIconW RegisterClassExW LoadAcceleratorsW wsprintfW EndPaint DestroyWindow TranslateAcceleratorW GetMessageW PostQuitMessage PostMessageW LoadCursorW BeginPaint TranslateMessage DispatchMessageW

ole32

CoCreateInstance OleRun CoInitialize

oleaut32

GetErrorInfo SysFreeString VariantClear SysAllocString

shlwapi

PathRemoveFileSpecW PathIsDirectoryW PathFileExistsW

kernel32

UnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent HeapSize TerminateProcess GetCurrentProcess CreateEventW GetProcessHeap SetEndOfFile WriteConsoleW SetStdHandle HeapReAlloc GetStringTypeW IsValidLocale EnumSystemLocalesA GetLocaleInfoA IsValidCodePage GetTickCount QueryPerformanceCounter HeapCreate SetLastError TlsFree TlsSetValue TlsGetValue TlsAlloc GetFileType InitializeCriticalSectionAndSpinCount SetHandleCount GetOEMCP GetACP GetLocaleInfoW GetConsoleMode GetConsoleCP GetCommandLineW WaitForSingleObject SetEvent GetCurrentThreadId CloseHandle CreateThread ReleaseSemaphore GetLastError CreateSemaphoreW LocalAlloc OpenSemaphoreW GetCurrentProcessId LocalFree GetDateFormatW SetFilePointer CreateDirectoryW WriteFile GetTimeFormatW CreateFileW MultiByteToWideChar GetTempPathW GetLocalTime FreeLibrary LoadLibraryW GetProcAddress GetSystemDefaultLangID GetUserDefaultLCID WideCharToMultiByte Sleep ReadFile GetModuleFileNameW FlushFileBuffers GetEnvironmentStringsW GetUserDefaultUILanguage DeleteFileW InterlockedIncrement InterlockedDecrement IsDBCSLeadByteEx EncodePointer DecodePointer InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapSetInformation GetStartupInfoW HeapFree GetSystemTimeAsFileTime HeapAlloc RtlUnwind RaiseException LCMapStringW GetCPInfo SetUnhandledExceptionFilter GetModuleHandleW ExitProcess GetStdHandle FreeEnvironmentStringsW

advapi32

InitializeSecurityDescriptor AllocateAndInitializeSid SetEntriesInAclW FreeSid SetSecurityDescriptorDacl

shell32

CommandLineToArgvW ShellExecuteW Shell_NotifyIconW

AMT/AdobeConfig.xml

SHA256 efb6f8982f6b094016aa6e80b5a5f152a5ed0cce1ed190b7ca67264ea9fe6b7a
MD5 b3318b5ce540e6beee0be93f2da58418
SHA1 aed27a2e975e7cebb7dec1a0862ae686f64dc617
SHA512 fa9a709d4830ccb93741931fa73bf841ec600c609b26273f89977fdd3556cac3f6805fdf30e48c7061ed55839a4de545ae674911d853c57ddea6a6f8dc3eaca4
SSDEEP 768:goNRc/Hz1H1j1EVW7J1I1q15NR1aGToqjSxVjZ4ErWWMZz3BooRulhaUYHZK1XaD:gkc/HKw7l9TFlBl0caoP4rVdxhI
TLSH
T17263091399F53626993C0EF1CE307543BE02E6BA11B6429BF6FFC6544CE47821AF6216
MD5 SHA1 SHA512 SSDEEP TLSH

AMT/application.sif

SHA256 bb446002a62e0313967199998ab6a2e1026e3bcb4eb77ed6d216683c60471fb1
MD5 c97e783c3ed6cbc12897426bd36560d7
SHA1 1e2d162b23cb58689cfe59bde4372001effe24d9
SHA512 097dd121bb52189c8ed92a7c171f89b45b6907aed41e74352fbf4655640deb2794da0dfccbc8c648496a21fd3ebba0a2bff7682f118529b62e0794493ee5c41f
TLSH
T1A3D09282BB40F401C51222FC1CCE0F60E730F0362E1E0B43020D17AC0C222EA0C62A58
MD5 SHA1 SHA512 TLSH

AdobeIDFlex.swf

SHA256 367725fe2df951f8b458979aa42fa02b9607011dbfc96f777f857c343ebc1167
MD5 c83662810c896527f795ec8896cb156a
SHA1 ba2537ed8cceac60a7e899d75655af26ccbebf6e
SHA512 66dbd3675307da002b1052db9ab538adfdc2ff4ef895edc945e407b6ce018e917829675f7ba890dafca83f0febf7202584b599f38fba673edb27d9f76f772a7f
SSDEEP 12288:mpTBux0plVNkiPBd+WZyjP+El0Z4k4qs0o+8AMkqYxUS7ZVSnH0F:eBp7NhYjP+ElVZqsiVxUS7vSna
TLSH
T1C8D42393ABFED40E9D8AB226D3AE20F1493FD510434C6163B519268479F49AC2DBCC96
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/ar_AE/ConnectionFAQ.html

SHA256 d8b820365e17237d8e08b478c2637451097c8e84408d0dbd14ccfe3508086d3a
MD5 e8d6ed9dfd168040856585c3e491920c
SHA1 7267961d3e2906cf98a171c985373655dc77a6a1
SHA512 39a6490ce66df765af731ca31bfaeb11590616b551efe79c320655171a1e69b9b316fef7505555781ac4f9a5c57e031f084db047c100607e9f3663416c3711a9
SSDEEP 96:VJinKsPCBD0hdtHvFKR8n+x9LEZ6l9ucio5t2Tf4meO/jgRzeWjgRLYTWjgRLqSO:tBcE8n2l8o5CfzIKYdqSp82KzqEXEw
TLSH
T15B322F32EB18050AF0E655D971B222957458DB49A30354B6F077BE2ABCCB9F733C126A
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/ar_AE/LicenseFAQ.html

SHA256 9409ea79c89cfc5c93896a0eff9214d12d4852330c5c07ad8384ba34876bab25
MD5 c0e7bde62780c17aacc2dd7a364725e9
SHA1 3452000e41b83b4a194f2e7e68fba36db8e6fb1e
SHA512 8bd625c44518ff10b395e4f64e252dd315f7ac59eb99e1141c2c22366fe29844f39004924fca1f81d80b26a4bd592fbb4343111cd98547b1d53f1e63a5dc2125
SSDEEP 192:tCcYB8n2l8o5UrPKpp828ZuU6/jxUoQgp5ojiebm:tCb8n2l8o5UrPKnVfjxNJJ+m
TLSH
T1BF82FF21EB281406B0F648D9B166129464A4EA4CA3165875F1777D7EBCCF8FB33D036E
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/ar_AE/Main.zdct

SHA256 5eb6542300631d67bda80f2bef70ef634cf136f041ea8d0c2dd37719331dd378
MD5 045490ac8f0c33379dd442fb66ffbb3f
SHA1 de6475a3c017cb4f070cd074e4c70e6320fb0f72
SHA512 3ed48bcd3f1137d4d1bef64b66d5389c730189d1e30b6bce383715a0aa734df0e2bf985687bc4d039eab9e5f8058fecf76c3ad7235e7015115de915ddaf2d7bd
TLSH
T18C41BC013AACDB39EA4B5335D42AC717C3699447ACCE0B3F02A08E110B5E5703A4FAD1
MD5 SHA1 SHA512 TLSH

OBLRes/bg_BG/ConnectionFAQ.html

SHA256 6e067e7b49cfc00cbc022b224b66645c1e766d0f0030308a09ce7d38769bcf81
MD5 c7a1c7ad22f55945883f6088598ddad2
SHA1 03fdbe3f8a7b35f22647992e92cfd9dbfb040266
SHA512 f4522246fea0ffce242be2ec4f415465d36741f7599a55f20a2cc8ec8d941c21d9c44212788bc628a784105929864a3040ec31f9e915ba2c501295d3509ae456
SSDEEP 192:W9wq8Tll8o5CfzIKYdqVgWiaqTRFqGr9Fxt9cD+:WF8Tll8o5CfzIKYdagWnqtFqGrbxtCC
TLSH
T1AC424022E7181989F0F25AD5B0B216516474DB49E30364F6F0377E6BB8CB8B737C2266
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/bg_BG/LicenseFAQ.html

SHA256 e1cc56aa044e6a17fed1b468bba2abbbd4be0be1e9757f1db3f1bb7d25443255
MD5 015be0e6ecb2135ba75e4904b9dc15da
SHA1 d015b1f200355d58f21d4a309236c7d19756c319
SHA512 6702d60fc1a2e8d2d848674006a3a8ec9b2d65cfa9f23b7175f69324a5f0d15883882a6aee90c4ddff044eb4de9ec112220b15d63bab90f8038a31e66bd8b828
SSDEEP 384:WN8Tll8o5UrPKygW7ombH4ocO05FgyL5APYX:WN8Rd5NiombH4o+XAI
TLSH
T1EB822022F7291489A0B54ED8B1A713546464DB48A306A8B4F03B7C7ABCCF4FB37D1369
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/bg_BG/Main.zdct

SHA256 5bdac9b8b2ee3ab3a48ce6b6b39853f74bea0d85f56eb73a48f9d2a6f7bd47fc
MD5 c193a187b9f3fd1838a346f72cd78ca0
SHA1 b6dd938fee2b3fb518699e694d47e2bae3a83608
SHA512 1d2cf10f581f077c247d751f2bea6caeeac5fea14c4f8b3c98ef83fda3770bc5e046ad63d94ba733369d9f14f19e7b3b9bf630ab844471570d309e8bd02f5551
TLSH
T11451994FE6FCA10172B6920C2F7A48E615EE7B052B1D898D556F7C9C50ECA3163263CB
MD5 SHA1 SHA512 TLSH

OBLRes/bg_BG/oobe_launcher.zdct

SHA256 b92878d7ea406dd54c8ebce2235520787e7d8439e470e86b4a3e7514beec2e05
MD5 09b4e586f1641ad6eb6f34665ef1f8f1
SHA1 3932bf40beadef80c74f0816e3e9233860f1ecee
SHA512 21e08e756aa1ee306257b9bc5cb9c46b7e4efba2219c44fda97be3d7ada1d5d13236201ee366c2afbbdba347eaa71c29eedac44bd52edec66d8b9df41946f1a6
TLSH
T12CF0A7B9DA42A366578CA1FB70CEC4C6FDFCA2AC82F43C1502021285B59363921778A2
MD5 SHA1 SHA512 TLSH

OBLRes/cs_CZ/ConnectionFAQ.html

SHA256 706cea3ac5229ba42974a5dc2d98e1fcaf5984be605d3e52b26a1b5bad382d34
MD5 bc21a0d2dd6bf447543cf973992774c5
SHA1 9314e664da60951cd1f4ab4f81ceecb2f37d6ead
SHA512 7b25620a07812100353d02ae481fbb942cb0ac83fbde39a2fe949e54e3e657da46f4baa66fffd0f0c96abb6e461999a578962da63a3b6aca144434ddcc186f02
SSDEEP 96:VJinosPCvu6hatUvmFDn8T3I95Nh6l9ucio5t2Tf4meO/jgRzeWjgRLYTWjgRLqg:Xjq8Tll8o5CfzIKYdqVgW4dACQg6oJ
TLSH
T151324232E7090549F0F645D9B0B312517868D749934794B6F0777E6ABCCB8B723C22AA
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/cs_CZ/LicenseFAQ.html

SHA256 441b86951a7169c29e02372bc48cf7c39dae7f8e43339ebb64e6bb0dc0fbac8c
MD5 874e53d2bd349b1f98b08367b6dc8c3b
SHA1 f2febec8fc4153c6335362ff93c2da30ec3c02af
SHA512 c9819d64a1d2490db7b69eb0e6e29ce12f6b16a794ddafca8f3c681cd6615fed1da6b86c4f85e7c5023d7fbb7b4608d683b4ce054263e4b03348d864ae1e767b
SSDEEP 192:XKUO8Tll8o5UrPKygW9B+CFzp5somVKBhNNntL:Xu8Tll8o5UrPKygW9B+CF7sotZlF
TLSH
T167824322FB280415B0F649C9B0A713946464EB4CA3569475F07B7D7ABCCA8BB33E1379
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/cs_CZ/Main.zdct

SHA256 4b1a4a381219d82862cb0397c52f7a28e04855784163fd435155f767ca117721
MD5 919352a5292500ebb6e499b48380dc1c
SHA1 f7850573e76b8b9030dfda4150bae7d9b9ebe7cf
SHA512 50f0d944676da09c8841dc1336e9bcaf4728cbd0a98c1c56a7ffd34497cf53c3c8cd7d945bde6f03580a703cef4580bd9f0ea632d1d61dbb62c89d81815d9da4
TLSH
T1C641251176FC0642F7BB7F3169B013664D7BBC96A939C74E4140079D0A369C0B8E0BA3
MD5 SHA1 SHA512 TLSH

OBLRes/cs_CZ/oobe_launcher.zdct

SHA256 12b0fb5a8e53fcc7df11c15b0d7b48dba7b0bbfde11f9f5d5d50b2efa656a327
MD5 1e2256820e1795baf698ae77924bc733
SHA1 e3ce0d138b8b5495a48e454ae38d6abe956a584b
SHA512 7368c8b70fe956be5159b384bb91cfdf6bf13cb6de20a9bccdb69a33fadcb9bf1e7f376001add4dfc634b3dca35fef37183df2a36c796b6f38fdf475a31933f5
SSDEEP 96:YLAUy7CEsWq7CEsWq7CEtv7CEj7CEz7C7C7CER7CE+7CExzC:YyKWEKWEbhFDXGX
TLSH
T149A16D02B2F91744F5F3BB1AABB735956E3F7EA5B830C15D6124010C1976B859890B33
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/da_DK/ConnectionFAQ.html

SHA256 74542227a4d048728bacaa55f40ecf75a9f2bae2c1ece220e880173ad8d34e0d
MD5 e5385a09f8b439becbeb8c4fe5b04092
SHA1 9cd97ac38f39646e972d5835f6f57e469f24cc76
SHA512 8bf27adbdc608497ac7aacc1ac6d1529fd3192c242d3cc4aa07b6c62f888862f551464a4843591697ee0353ac8f5e9a948e5ebb31324dc36341b95cad43baa18
SSDEEP 96:VJin+sPCD6hatUvmFDn8T3I95Nh6l9ucio5t2Tf4meO/jgRzeWjgRLYTWjgRLqbE:dEq8Tll8o5CfzIKYdqVgW9oow
TLSH
T125424032E7190619F0F649D5B0B222956468D749D31354B6F0767E3BBCCB8B733C22AA
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/da_DK/LicenseFAQ.html

SHA256 3fb08a864591f2b78ce205f340ee580f6a7c72725847870123413c7c13ccc5bb
MD5 2470698e1ebe7b8966f420bdd23bad1b
SHA1 f90f662a23c9f194d8ebf17472bc76b095d9fd0e
SHA512 87223f5464a36d3e6cfbbd92bf68c66dd47f9ec6bd26a21b8df7001eade8dd1459d2e5c2643dc1960399b78cdeddafd507bfdc308c5e54b3e79cc537fa499119
SSDEEP 192:d9UO8Tll8o5UrPKygWmlzBSkeHt9sUf49ZCEiY0MXHL:dL8Tll8o5UrPKygWml1yNfnYn
TLSH
T1A3823322EB280415B0F64AD5B16213A56498DB4CD31658B5F07ABC7AFCCF8BB33D1369
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/da_DK/Main.zdct

SHA256 2556c4942ee8802922644b0f35cb488961b02a5d8996d59acbdc4a4ff5155e7e
MD5 5e330c054b630127be01e42d6294a814
SHA1 3ae4e0b3d386edbb8f76fa964bec2b7957bca6d7
SHA512 afc169d0891e2b6821c0e7ae4b42dbff8a1d3ed4ca58c7362ba054478e26505e1c573e1e27cff8cdac41ae7cbbac29bff8da6f34635db4182dd536e8ab2525ba
TLSH
T13A41D110B7E94B1EFAFB2B317DB542425A70FCC2BD7ADA0D1244564C0D7A5C0A5A0B73
MD5 SHA1 SHA512 TLSH

OBLRes/da_DK/oobe_launcher.zdct

SHA256 c0f0accab5843168cd665f6625dc1f3aa4c29b3773746518d6f7c6330a757001
MD5 c3d00e99370be1d39143ef7515f30338
SHA1 4a0d481e21f473ae26c7c2894512490d1661c447
SHA512 42e0796f7967fbc661225ef3f9532076b9c5ff673edfa857425b7a7d57b849772ed02f2796f9674f6ea87da3406e015bc18be9d30633511e50788e62de37566a
SSDEEP 96:XVqC7UFC1IiFC1IiFC1+lFC1WFC1OFC1OdC1LFC1gFC1f6dC:XAl++nrzjMdH
TLSH
T12691F612B3F95609F9F7372AAEB771842F3EBD95A53DC25D2260450C1CB6B858980B33
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/de_DE/ConnectionFAQ.html

SHA256 416d9d4c1cd083aaddc82060092a11a6545fa2f5cb9b70f7966c8b6ec623f4f6
MD5 f5f4a59c696e5a77349fef6bb0400bbb
SHA1 250fdb37f3ae90ef76159edd31da485f3c490c07
SHA512 c7e5faaf781df7dc6106915ff5b0477745b3f6d1af24df94130c58603daf34e0135e65bcdd88a849415ed415e2aef295072bbebc2e4143673e14d6c79a08ceda
SSDEEP 192:dF9q8Tll8o5CfzIKYdqVgWtL0QRp3oz7FljvKLvAoaZP:de8Tll8o5CfzIKYdagW5CnFsLm
TLSH
T11D427332E7090509B0F256D5B1B212A17468D759D31364B5F077AE3BFCCB8B727C226A
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/de_DE/LicenseFAQ.html

SHA256 c430aacb3dce799d6df06e3ecaa471edae33c9826c8f1a7f7f65e1731b7d1fd5
MD5 1eba6aeaec0e67abc3c9e6949a53c3ba
SHA1 0f561fc5398f6dff6bdab69419ad29411d1df1f4
SHA512 bf32936c27615caedccc66fd2161a0dbdb42f18c81ae32b3a2f89d84db9cac78ac060af7109fd3afc72c4e3623ea13da4891bc14792f4eb6638faf70f45df39f
SSDEEP 192:dK9UO8Tll8o5UrPKygWw74ubGMC35mD1dPBz64+to5u6EXbErvO/vafufVFVVuUC:du8Tll8o5UrPKygWSbGMJQQjO3dfrxy
TLSH
T1ED824322EB190409B0F64AC5B16213A534A4D75DA3129874F07BBD7ABCCF4BB33D127A
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/de_DE/Main.zdct

SHA256 223ed42a3ca21279b9460556351d1150638f5a0308c4f5a1fc0df75b54c1446f
MD5 070b22d458a0c4ba4b30dabe97c859b5
SHA1 3430ea734b00b2c3c8ce7cd4e66c424ff7a2f293
SHA512 4ba96b72c8b7b16b0ca3a5573741e3c2e0122b50b462f80d0683e137591edfeb0f1f3fa4dcf26189d1473c6070e170eee5299e87343d4f4d5c9011f241949cac
TLSH
T18C51901067E4870EF7F73B35AE7853995E72FCC6B875A64E034055184D36A40A9A0F73
MD5 SHA1 SHA512 TLSH

OBLRes/de_DE/oobe_launcher.zdct

SHA256 a092765949c1bd9e8f56c441d41a1e7278d1f055f1d02c2bfbcf25039e38f464
MD5 d36d1ae2ac18c1bef2f19064e2724b27
SHA1 5f0ca0d785b83593d5aa9a62b7bf4a1ffef19139
SHA512 cf94a583e2bc7fd1a26fc4ace690c639a2023dfc4129c521daa607a50a3185f5f5cf6e0f6ead96b50670048062d47ecae5af292639596c5e24053148861edc96
SSDEEP 96:StE1EWCQu1EWCQu1E2CQUC1EWCQJ1EWCQfE1EWCEcXWCQE1EWCQDE1EWCQ41EWC:xBeBeZ7B5BMB1UBwBoB
TLSH
T114B11911A3FA9708F2F337166EB672946F7E7DD6A834E65C2360055C0CB6B0488A4B33
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/el_GR/ConnectionFAQ.html

SHA256 5e853e130754976496ceb56b465cb8e908c0fcd7888da848f9fc1369f38430fb
MD5 4c13864f285824753e0613422191d29b
SHA1 37b50776bffbef13edbc64fbdadbf98621af4156
SHA512 8aacf5494654d86dcf846085a733dbec5347378a36993edea33a6fb84bbacb2b3355921fb2e59991ed85117149c14f66804ad2ef975f3edf3cb74a6b38604a51
SSDEEP 192:k8Aq8Tll8o5CfzIKYdqVgWT4ZBz/e/REKuX:kY8Tll8o5CfzIKYdagWKd/sk
TLSH
T1D7427531E7190509B0F25AD5B0B212517868C759D30395B5F07ABE6BBCCB8B737C22AB
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/el_GR/LicenseFAQ.html

SHA256 f832c7f6360ca7498554f9dbc79354b491a1211cc7c388f65207929cccdffaef
MD5 79c0e8623022b5f788df9d7d741c61e0
SHA1 a46966a0a3a94d4f153f76ef3c9f7c3f37dbfed8
SHA512 4068384c9b1911be337095a9fedb0783e43278d8b69541dc3d0d91d0e96e942dd7d47ca4c9d6528494f8b94a1b7d2a65f9d806566e0597dd915004785dff801a
SSDEEP 192:kNAUO8Tll8o5UrPKygWukKjIiTZwAG4Akeeu2hunHgBhuMh2LeCCU:k+8Tll8o5UrPKygWu4cJe9p00
TLSH
T18B824312E7240409B0B64ED9B06612956454DB1CE3569875F07BBDABBCCFCBB33C13AA
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/el_GR/Main.zdct

SHA256 683b89efd61a76e30e0ece6716b7dd9691d5ed616e3be248f200e0e6be85ff65
MD5 a204af0412729afe95c5067ac120aea7
SHA1 8cd19c0d53310113e0ec3b6cd8995b768b7316b6
SHA512 a8dd06f85fc245446620a6ddc8e03fd2c405d656435b11479a97c397baeba80a87a600223226efc51276205c567bff5872e49c40ea05fd4a36299cb8824a332d
TLSH
T15051274D2DEF4B12EFABAAF155339296866FF8425814DE2B31F07118ED0E90019C6E46
MD5 SHA1 SHA512 TLSH

OBLRes/en_GB/ConnectionFAQ.html

SHA256 8ba72a16729211dae68bb3e093d43e54a29f99019cf9c612c5734d1e728503ef
MD5 5ebcacb7f0e1422f0c3fa20bfaa29c3c
SHA1 7fc7064e6e0bd5563078be36e1c3754991f9a865
SHA512 7a2e015d8af095f04a2c7460e652a9ff15babd699bcd27f22b44b8f16225d9630d2ef51cff47824cb4cf1e9ab37219ef5da5ee814ddfb00f0f0c53789c12a9c4
SSDEEP 192:BHe1a8XUVbQk10gVpfTY2di/nSWnG4obEz7qW:BT8X4bQk10gVpfTY2dsnZhoYn9
TLSH
T1F4426232E72A010591F746E5B1B21252F438E749931754B5F137BA7AACCB8F623C22B2
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/en_GB/LicenseFAQ.html

SHA256 50ffa995427d576ac7a4c1d564788a6a552a8bcb4b7cf393c7d132a443f48cbf
MD5 665e1985893f9e0701f79dfb1f99a4d7
SHA1 b695b2c8f15852dd204edaad62254447606fa4f3
SHA512 00a4fdb70d80d0881d1498139b177821c6be70e910d93eb5b32a9cdc57f9eed121656e975f8e86bbecf6039943e0c7ec2579e5d8e23f1553d92d0fe6ece3aa81
SSDEEP 384:BE8X4bQkY3TYUnZwSrLGOJZn86JaichcJ:BE8iQkM0UnmSr0iJ
TLSH
T15C826522E7260014A1F60AE571A613D6A478E64DA3165470F13BBD7DACCF8FB33D22B5
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/en_GB/Main.zdct

SHA256 4509f0d68b32a8c71c60d44e35cd5c9a6b2c76848d3fad6d0e9d985fcdc8ca90
MD5 4390c02fc1846ea13f1119307845e7ab
SHA1 07b23fd227c2219d92f8147ee7005fb4729ae0f9
SHA512 0722643c8bd51c942cf168c44c8ce50e7b1dfde7e37f163f85eb9994fc82847b0e8a0b04d7fdfede00d03d4b45dd3940111e8cfea642c2438cccf693e65447f9
TLSH
T18D410D00B7E80315FAFB3B35A8B462564E76BC96BC79DA1D4244015D4E3AA80ACE0B73
MD5 SHA1 SHA512 TLSH

OBLRes/en_GB/oobe_launcher.zdct

SHA256 da39bf60ceaa93ec0eb314a0bfc0f14dbb269df5f64fe851f941f0ca011460f6
MD5 0020055b059af61bf62115728d0a893c
SHA1 14ed32a55e5b27ddb644ba284ee7bfbd8feb8ae8
SHA512 e68bd3aec9458ae7a7fee30a5bc68394a68888151c3ba3ffcc998e4ed392144f507487bee63159d1bb137c124967530e84bbb3275b84936e873db37ff26fa8e6
SSDEEP 96:VE7J1ECs71ECs71ECsGO1ECs51ECsB1ECscy1ECsY1ECsY1ECsf1EC:Oqdqdqfq/qXqPqequqpq
TLSH
T14B911C45B3F95608F6F33B296AB670952F3FBE95A978C29C2150554D0C77B418CA0B33
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/en_MX/ConnectionFAQ.html

SHA256 8ba72a16729211dae68bb3e093d43e54a29f99019cf9c612c5734d1e728503ef
MD5 5ebcacb7f0e1422f0c3fa20bfaa29c3c
SHA1 7fc7064e6e0bd5563078be36e1c3754991f9a865
SHA512 7a2e015d8af095f04a2c7460e652a9ff15babd699bcd27f22b44b8f16225d9630d2ef51cff47824cb4cf1e9ab37219ef5da5ee814ddfb00f0f0c53789c12a9c4
SSDEEP 192:BHe1a8XUVbQk10gVpfTY2di/nSWnG4obEz7qW:BT8X4bQk10gVpfTY2dsnZhoYn9
TLSH
T1F4426232E72A010591F746E5B1B21252F438E749931754B5F137BA7AACCB8F623C22B2
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/en_MX/LicenseFAQ.html

SHA256 50ffa995427d576ac7a4c1d564788a6a552a8bcb4b7cf393c7d132a443f48cbf
MD5 665e1985893f9e0701f79dfb1f99a4d7
SHA1 b695b2c8f15852dd204edaad62254447606fa4f3
SHA512 00a4fdb70d80d0881d1498139b177821c6be70e910d93eb5b32a9cdc57f9eed121656e975f8e86bbecf6039943e0c7ec2579e5d8e23f1553d92d0fe6ece3aa81
SSDEEP 384:BE8X4bQkY3TYUnZwSrLGOJZn86JaichcJ:BE8iQkM0UnmSr0iJ
TLSH
T15C826522E7260014A1F60AE571A613D6A478E64DA3165470F13BBD7DACCF8FB33D22B5
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/en_MX/Main.zdct

SHA256 2bec0455e8c5906a4011cce5867c087f1be050120020e2d0d32bd0d00cccba2b
MD5 5188a59973439763252c90d9973fcd78
SHA1 bc26bdfc98e9e32ff07a2fd7bc7f8bed67997beb
SHA512 0ea7703bcbb652153d5c44bcb41c90335b25e83caf39cc6170419978ba69d2bdfd7a04264a027bdb572a45e573f8cd6866bc0a4551da8d6e5cb07a289c2927d5
TLSH
T127516991A7EC6614B6F32F0CBD7915500EFEBD9AAE3DCA1C1160045E08F5A40C8A2B73
MD5 SHA1 SHA512 TLSH

OBLRes/en_MX/oobe_launcher.zdct

SHA256 b92878d7ea406dd54c8ebce2235520787e7d8439e470e86b4a3e7514beec2e05
MD5 09b4e586f1641ad6eb6f34665ef1f8f1
SHA1 3932bf40beadef80c74f0816e3e9233860f1ecee
SHA512 21e08e756aa1ee306257b9bc5cb9c46b7e4efba2219c44fda97be3d7ada1d5d13236201ee366c2afbbdba347eaa71c29eedac44bd52edec66d8b9df41946f1a6
TLSH
T12CF0A7B9DA42A366578CA1FB70CEC4C6FDFCA2AC82F43C1502021285B59363921778A2
MD5 SHA1 SHA512 TLSH

OBLRes/en_US/ConnectionFAQ.html

SHA256 8ba72a16729211dae68bb3e093d43e54a29f99019cf9c612c5734d1e728503ef
MD5 5ebcacb7f0e1422f0c3fa20bfaa29c3c
SHA1 7fc7064e6e0bd5563078be36e1c3754991f9a865
SHA512 7a2e015d8af095f04a2c7460e652a9ff15babd699bcd27f22b44b8f16225d9630d2ef51cff47824cb4cf1e9ab37219ef5da5ee814ddfb00f0f0c53789c12a9c4
SSDEEP 192:BHe1a8XUVbQk10gVpfTY2di/nSWnG4obEz7qW:BT8X4bQk10gVpfTY2dsnZhoYn9
TLSH
T1F4426232E72A010591F746E5B1B21252F438E749931754B5F137BA7AACCB8F623C22B2
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/en_US/LicenseFAQ.html

SHA256 50ffa995427d576ac7a4c1d564788a6a552a8bcb4b7cf393c7d132a443f48cbf
MD5 665e1985893f9e0701f79dfb1f99a4d7
SHA1 b695b2c8f15852dd204edaad62254447606fa4f3
SHA512 00a4fdb70d80d0881d1498139b177821c6be70e910d93eb5b32a9cdc57f9eed121656e975f8e86bbecf6039943e0c7ec2579e5d8e23f1553d92d0fe6ece3aa81
SSDEEP 384:BE8X4bQkY3TYUnZwSrLGOJZn86JaichcJ:BE8iQkM0UnmSr0iJ
TLSH
T15C826522E7260014A1F60AE571A613D6A478E64DA3165470F13BBD7DACCF8FB33D22B5
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/en_US/Main.zdct

SHA256 4509f0d68b32a8c71c60d44e35cd5c9a6b2c76848d3fad6d0e9d985fcdc8ca90
MD5 4390c02fc1846ea13f1119307845e7ab
SHA1 07b23fd227c2219d92f8147ee7005fb4729ae0f9
SHA512 0722643c8bd51c942cf168c44c8ce50e7b1dfde7e37f163f85eb9994fc82847b0e8a0b04d7fdfede00d03d4b45dd3940111e8cfea642c2438cccf693e65447f9
TLSH
T18D410D00B7E80315FAFB3B35A8B462564E76BC96BC79DA1D4244015D4E3AA80ACE0B73
MD5 SHA1 SHA512 TLSH

OBLRes/en_US/oobe_launcher.zdct

SHA256 c3a3c6a2b6d43a16cdb5cf88543ebca6393e76c7f704ee6406028d4ac7b4456a
MD5 fbbffcf43f2c4304a96567ed94f7680d
SHA1 07adf3761a23bf528b9b480b434947c4fc996c3a
SHA512 e952e9b21386aaa103d8cd39442056a5cdd8136dbac95a876a6fefca059c2d820befbcd98cc7574edf22fbd2f9081ea1920c28e4ac99396ca32c8aeb3a836fcd
SSDEEP 96:97J1EC171EC171EC1GO1EC151EC1B1EC1cy1EC1Y1EC1Y1EC1f1EC:PqUqUqWqmq2quqHqPqIq
TLSH
T14E912945B3F9960CF5F33B296AB674952F3EBE55A978C29C2160514D0CB7B418CA0B33
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/en_XM/ConnectionFAQ.html

SHA256 8ba72a16729211dae68bb3e093d43e54a29f99019cf9c612c5734d1e728503ef
MD5 5ebcacb7f0e1422f0c3fa20bfaa29c3c
SHA1 7fc7064e6e0bd5563078be36e1c3754991f9a865
SHA512 7a2e015d8af095f04a2c7460e652a9ff15babd699bcd27f22b44b8f16225d9630d2ef51cff47824cb4cf1e9ab37219ef5da5ee814ddfb00f0f0c53789c12a9c4
SSDEEP 192:BHe1a8XUVbQk10gVpfTY2di/nSWnG4obEz7qW:BT8X4bQk10gVpfTY2dsnZhoYn9
TLSH
T1F4426232E72A010591F746E5B1B21252F438E749931754B5F137BA7AACCB8F623C22B2
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/en_XM/LicenseFAQ.html

SHA256 50ffa995427d576ac7a4c1d564788a6a552a8bcb4b7cf393c7d132a443f48cbf
MD5 665e1985893f9e0701f79dfb1f99a4d7
SHA1 b695b2c8f15852dd204edaad62254447606fa4f3
SHA512 00a4fdb70d80d0881d1498139b177821c6be70e910d93eb5b32a9cdc57f9eed121656e975f8e86bbecf6039943e0c7ec2579e5d8e23f1553d92d0fe6ece3aa81
SSDEEP 384:BE8X4bQkY3TYUnZwSrLGOJZn86JaichcJ:BE8iQkM0UnmSr0iJ
TLSH
T15C826522E7260014A1F60AE571A613D6A478E64DA3165470F13BBD7DACCF8FB33D22B5
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/en_XM/Main.zdct

SHA256 4509f0d68b32a8c71c60d44e35cd5c9a6b2c76848d3fad6d0e9d985fcdc8ca90
MD5 4390c02fc1846ea13f1119307845e7ab
SHA1 07b23fd227c2219d92f8147ee7005fb4729ae0f9
SHA512 0722643c8bd51c942cf168c44c8ce50e7b1dfde7e37f163f85eb9994fc82847b0e8a0b04d7fdfede00d03d4b45dd3940111e8cfea642c2438cccf693e65447f9
TLSH
T18D410D00B7E80315FAFB3B35A8B462564E76BC96BC79DA1D4244015D4E3AA80ACE0B73
MD5 SHA1 SHA512 TLSH

OBLRes/en_XM/oobe_launcher.zdct

SHA256 dbd6ca8249ba14865a1c4fc9becc9a0bf6b7984f35cdeab3b6f16e47b00a32c2
MD5 b4dc3c085d943be1fd435383379a3807
SHA1 81cdb2d589d580f07b7a00a113b66e8590a75db4
SHA512 71885ab521e1de415ba83a19e946b27af4ce376b4d852860e5096cb143f0fee8de627b7ab5af2113461385c9823feb090168dbfefb95945411ca268d17045854
SSDEEP 96:v6t7J1EC171EC171EC1GO1EC151EC1B1EC1cy1EC1Y1EC1Y1EC1f1EC:C/qsqsqequqOqWq/qXqgq
TLSH
T1BA911945B3F9960CF5F33B296AB671952F7EBE95A978C29C2160514C0CB7B418CA0B33
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/es_ES/ConnectionFAQ.html

SHA256 89ba48259ba1592389266c0c083d4a9410bfb33d5a1bb42cd7db9130cfc597bb
MD5 28353436fc2a08ffd172e8e001c34dbc
SHA1 0056e197d3eacd5f87e1e09e72272da52e9ab279
SHA512 80efcf97e82863dad32af717516a9b4347720530d9689429b669dd9c368b7065a2ec13e6d34a1c68c571caf01d66a0a74bd956e44b0e34eda37f215253979050
SSDEEP 384:+g8T3Qo/nfz5Dx63w9v7itRLYzWRglRTRE31oROJ8E1u2QEjE3Ct0EGhexH3sdr2:Z8H/n7596AVubk1lRTRE31oROJ8E1u29
TLSH
T171823122F10C0041B2F645D5B4BB39616014C78DE78B94F8B0777A1A78DF6BA2BC66B7
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/es_ES/LicenseFAQ.html

SHA256 084ca6786e8da6e50df896f9a94738d7292371b385b08cf750252751c79e8262
MD5 cd2ee54ef1b354ebb594683dac1df721
SHA1 6630e2953186846971358a2c7fa41f4959a94149
SHA512 68c4419bc6594529650cb33b1bb323c3070697ed49a9dadaf47832bb031d967a0b7707f2e365b5fb2d7da284380d08e7b0646ab008b5decbcf615713f6805d42
SSDEEP 384:eg8T3Qo/sDxp3f9v7XtmLzzJDglR7EE3qTE1MzE9E32fbE3XVWE3GYE35ERE31TV:58H/s9pPVzIvClR7EE3qTE1MzE9E32fN
TLSH
T1B1B22222F00C0046A2F605C5B4A635716014E74ED78B94F8B06B7D5B7CDEABE2BC52BB
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/es_ES/Main.zdct

SHA256 bfb70eacfef972924c5d0348836d80169b2efaa1d39a9dcdd90aa2f79924130f
MD5 87bbcf0ea575f31bc4c026b445c52dd5
SHA1 f6e0a518b4fdd8a12def2b84b05ea39e2200ad02
SHA512 a5bac5a81be6a7dd6bfb1d211835ec3b83cea1915051edfb6c415683bb47601ebf37ccc795602ae206d2858cc944e1b604f87d77fc10d2a196db3f8040dca782
TLSH
T1EB41FF0067F8178AF7F73B36693526568D33BCD6EC389A0E025046594E35E84ADE4B73
MD5 SHA1 SHA512 TLSH

OBLRes/es_ES/oobe_launcher.zdct

SHA256 b62759d922a4c3081ef196c1d38fc2d681f18eba4392d669933f9780c6572e16
MD5 60162cbc1645ff054f430ccd17625736
SHA1 ada81c8ebb8722087fd63cfc7b43594404e1cf1a
SHA512 c64446b34737b9e80f366abe40685b9feab8da30262e1ee7437ece860eeddaca9228d2457b52f89eed255258d7b075a2c8cbb6b5e25e937b51bd78c99d2ad173
SSDEEP 96:H7XnCE2nCE2nCE/BnCECQnCEOnCE/nCECuBnCEInCEJnC:zmmhhVOxNhU3
TLSH
T13D91DE15F3F86749F6F33719AABA70546F3EBDA69838866D226055081CB6B048DD0B33
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/es_LA/oobe_launcher.zdct

SHA256 60c7326131022048ff6493945cd4271fc6131d406d0182031e71e4c0b0ff9bde
MD5 371c630f733984df345df29b498bbebb
SHA1 8b791b91095d99019507a59a02a5352347864d91
SHA512 417b57e580a3b0cc0c43c64276cab3375cab2281fe6e4f221c5f987d09522c107d33e6a724a44bd4ddaab59d773f688c0186ba8f9f9d7411e41f1b40685a649f
SSDEEP 96:YK/xHC7CuxHC1CAHC14HCT+HCgmHCYHHCp1mHChOZHCrPHCp:fhIhyvn69HCuE0
TLSH
T159919616A3F86748F6F3371DAA7A74A49F7EBD959838816D2230450C4CBAE448DD0B33
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/es_MX/ConnectionFAQ.html

SHA256 89ba48259ba1592389266c0c083d4a9410bfb33d5a1bb42cd7db9130cfc597bb
MD5 28353436fc2a08ffd172e8e001c34dbc
SHA1 0056e197d3eacd5f87e1e09e72272da52e9ab279
SHA512 80efcf97e82863dad32af717516a9b4347720530d9689429b669dd9c368b7065a2ec13e6d34a1c68c571caf01d66a0a74bd956e44b0e34eda37f215253979050
SSDEEP 384:+g8T3Qo/nfz5Dx63w9v7itRLYzWRglRTRE31oROJ8E1u2QEjE3Ct0EGhexH3sdr2:Z8H/n7596AVubk1lRTRE31oROJ8E1u29
TLSH
T171823122F10C0041B2F645D5B4BB39616014C78DE78B94F8B0777A1A78DF6BA2BC66B7
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/es_MX/LicenseFAQ.html

SHA256 084ca6786e8da6e50df896f9a94738d7292371b385b08cf750252751c79e8262
MD5 cd2ee54ef1b354ebb594683dac1df721
SHA1 6630e2953186846971358a2c7fa41f4959a94149
SHA512 68c4419bc6594529650cb33b1bb323c3070697ed49a9dadaf47832bb031d967a0b7707f2e365b5fb2d7da284380d08e7b0646ab008b5decbcf615713f6805d42
SSDEEP 384:eg8T3Qo/sDxp3f9v7XtmLzzJDglR7EE3qTE1MzE9E32fbE3XVWE3GYE35ERE31TV:58H/s9pPVzIvClR7EE3qTE1MzE9E32fN
TLSH
T1B1B22222F00C0046A2F605C5B4A635716014E74ED78B94F8B06B7D5B7CDEABE2BC52BB
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/es_MX/Main.zdct

SHA256 664ab9794c7739917c1460964b9dd1875ffae05ea88c9cb379cad33359c08f06
MD5 2da81646d1fd6d0d480f1e37fb6cd708
SHA1 a27668aa7eca7062fe3b64fd0d4ba79c10794f40
SHA512 9afcf0a0cf9542fb71b34bea1957a35236d3526776f8a5eeb75e71631b05ac3804ed4899948906a546486320719052a2dc7b36a754865be8fdb18ae456ee474d
TLSH
T1CF51779197EC264AB2F33B0C7E3918554EBFBE96EE38DA0C1170581D09F4E4499A1B73
MD5 SHA1 SHA512 TLSH

OBLRes/es_MX/oobe_launcher.zdct

SHA256 60c7326131022048ff6493945cd4271fc6131d406d0182031e71e4c0b0ff9bde
MD5 371c630f733984df345df29b498bbebb
SHA1 8b791b91095d99019507a59a02a5352347864d91
SHA512 417b57e580a3b0cc0c43c64276cab3375cab2281fe6e4f221c5f987d09522c107d33e6a724a44bd4ddaab59d773f688c0186ba8f9f9d7411e41f1b40685a649f
SSDEEP 96:YK/xHC7CuxHC1CAHC14HCT+HCgmHCYHHCp1mHChOZHCrPHCp:fhIhyvn69HCuE0
TLSH
T159919616A3F86748F6F3371DAA7A74A49F7EBD959838816D2230450C4CBAE448DD0B33
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/es_NA/oobe_launcher.zdct

SHA256 60c7326131022048ff6493945cd4271fc6131d406d0182031e71e4c0b0ff9bde
MD5 371c630f733984df345df29b498bbebb
SHA1 8b791b91095d99019507a59a02a5352347864d91
SHA512 417b57e580a3b0cc0c43c64276cab3375cab2281fe6e4f221c5f987d09522c107d33e6a724a44bd4ddaab59d773f688c0186ba8f9f9d7411e41f1b40685a649f
SSDEEP 96:YK/xHC7CuxHC1CAHC14HCT+HCgmHCYHHCp1mHChOZHCrPHCp:fhIhyvn69HCuE0
TLSH
T159919616A3F86748F6F3371DAA7A74A49F7EBD959838816D2230450C4CBAE448DD0B33
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/et_EE/ConnectionFAQ.html

SHA256 2e28693c0bc432f53bae1fabaca11081f35d370347f010873e17b326e7d8f680
MD5 90444962c73a0957c0b714160a68ef0c
SHA1 9fd352601e4abe3b00033fc9f02d02bdc9203b11
SHA512 79ad55a7b2007729f467107d8e1e98bd49df4adf49c709f03f3eb656ffa5bc36dd245831ca190237424af0149039b6f2479028d09a6db7c96ad9259efe7901b3
SSDEEP 96:VJin7sPCay6hatUvmFDn8T3I95Nh6l9ucio5t2Tf4meO/jgRzeWjgRLYTWjgRLqe:4iq8Tll8o5CfzIKYdqVgWbUk8yAt
TLSH
T189326232E7190619B0B255D5B1B322917468D749930394B6F0767E2BFCCF9B733C22AA
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/et_EE/LicenseFAQ.html

SHA256 34edeb82980cbf4993969a2c02d1dc46fa43814a4b74fda3bca50f8140f0155f
MD5 d6ca6183cb0582c86169bd84d40bbeaf
SHA1 31286e56421805875243035ceaea0f04bef6124d
SHA512 c1c7eb94576fd9cd0bfc9c32a0b7eeac1795b5dc03ca1441b2894f60bc34f41507633b4d40ece3e947c5035c388ab985be3821536abf2e34aab839cf1463319b
SSDEEP 192:4hUO8Tll8o5UrPKygWIOczHOnSSaCmj7S4jL:4H8Tll8o5UrPKygWIOcKHmXS4H
TLSH
T192823312E7281405B0B54AD9B1A313A164A4DB4DA31298B5F07B7C7ABCCF9FB33D1369
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/et_EE/Main.zdct

SHA256 85d080c7fcab939843b5588b2bad44539cce7bbade40f1a40fef86ccb844a62d
MD5 06a966b5be8c3d2858f9053d47ee5241
SHA1 498261d1951deb81acb617b6ed15192e9181d962
SHA512 f443a4447faf80eccf546260e96460047e1c8ebf81c0459e9a5a1f77145216f63b4f38809df1f25fbdfe73015f22cb974cee778d1006101331663d2566529fe9
TLSH
T124517A9187ECA605F3F33F0C7D7815510AEBBE8BAE3ACA4C1560585D08F9A90D572B63
MD5 SHA1 SHA512 TLSH

OBLRes/et_EE/oobe_launcher.zdct

SHA256 b92878d7ea406dd54c8ebce2235520787e7d8439e470e86b4a3e7514beec2e05
MD5 09b4e586f1641ad6eb6f34665ef1f8f1
SHA1 3932bf40beadef80c74f0816e3e9233860f1ecee
SHA512 21e08e756aa1ee306257b9bc5cb9c46b7e4efba2219c44fda97be3d7ada1d5d13236201ee366c2afbbdba347eaa71c29eedac44bd52edec66d8b9df41946f1a6
TLSH
T12CF0A7B9DA42A366578CA1FB70CEC4C6FDFCA2AC82F43C1502021285B59363921778A2
MD5 SHA1 SHA512 TLSH

OBLRes/fi_FI/ConnectionFAQ.html

SHA256 6d7db75bda97b780aec89bbf5d57544c7a104f7e9497892e84e09aaa14f0a69d
MD5 b667e13a527a46da3610a05d39950a7a
SHA1 ec8c5480fa896ed6459b346095ab76a7d0b1f299
SHA512 24a0a6448495fd96f6fe7c57b19ae5399d02d619c3208456e169c705059b6b3267688309923ab9a87877f499445e92716ecaa0aaf3e630ac25c3b793d940f579
SSDEEP 384:fZzQohtfzsIwfDx63w9v7itRLYzWVggaaWa58XL1qLatEeHGe5SOLs5j+j582I/O:hht7sIwf96AVubkvgaaWa58XL0LatEe3
TLSH
T113822322E20D0052B1F785D6B4F625307010C749A78764B9F1A77A1AB8DB9FB2FC167B
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/fi_FI/LicenseFAQ.html

SHA256 301303410b96d8da7be155f9bf5a34f9b819fe17e0b9de52734e1ef79033d47b
MD5 a16d794dbcbc7fab6c3bce124d1aecf0
SHA1 67463c51684f21e998b1d6068d8609037b32239d
SHA512 6f851a16b04622b68d90ab8b0a528bf35b18c66188330012f3472bb602f01d423f531261c088fa57c57648c476cf7aaabac644d25eba6a103b4217fe566f0b49
SSDEEP 384:4Zw5ohOIwfDx63w9v7itRLYzWpggacW55SvGiVq5RjFsuW7q5SP13q5SOIhq5SEU:ShOIwf96AVubkNgacW55SvG0q5RjFsu8
TLSH
T182A22223F1090452A1F644D5B8A926746000874DA746A8B8F2EB756BB8CA5FF3FC177B
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/fi_FI/Main.zdct

SHA256 fdcb19ad8316e58f2223326f4bff8b40177cc0e83c1c07d9e20096ca92463d54
MD5 9a5451f67aa40dc53ebf6ba0e748c8cf
SHA1 e31857ffd65892bf4bd23e40b7b8837b5f31e15f
SHA512 1b2fd7b93b792f6f2dd491088a34ff1ee80211610fb6cfe7a2ba2639a05989e40ac2067f546a0818f9f1578620739fa0e0624a7d58f55e54da0865fb4361b2aa
TLSH
T16E41E80563F98729F7F76F316EB053164632BDD3ADB9E60E0A00561C4A351C0A8B0BB7
MD5 SHA1 SHA512 TLSH

OBLRes/fi_FI/oobe_launcher.zdct

SHA256 4787d1f0045a75f71132bc5a039205be4c8c352548bdcdedd2ff77d4b0b3d47a
MD5 b28329399edb73d8db7fe37eef085ca3
SHA1 e278a6e122efbf67b043850226dc89a7cbc69f0c
SHA512 fb95be26045541dcc642f79b5a4bde50b3cad0486e7085db7740d19fbf37e30e9a5081f3f8bbb42ab735a4d1d470117ebee8f3d83fa3f010b33e009cefe123c7
SSDEEP 96:u7cj9CFsj9CFsj9CFNj9CFQj9CFfj9Cv3c7CF4j9CFF6j9Cy73Gj7C:HvvizMtLyoHa
TLSH
T180A13D26B6F99609F7F36B199AB670402B3FBED76838D65C1224152C1C776018CE0B37
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/fr_CA/ConnectionFAQ.html

SHA256 f033815a71c5b79dce7c4e5abaa03979549d05ebfe345b937510e8543ce442df
MD5 126b927df1ddfc80574fe0eb1f64fb32
SHA1 6cd7ba40c7c5bdac94bdc44b92c1eca8e33dac9a
SHA512 02ff7f706d28264d3fea97151d23a8be88b3b22ba560b6585e6e2f158729303177b8659d97fd494fe23b79661b1d01f11bc7d0019924ddbbd47bd88868bbed5d
SSDEEP 192:dyq8Tll8o5CfzIKYdqVgWEDmyjCXL/qnv:dh8Tll8o5CfzIKYdagWEDmyjCb/qnv
TLSH
T1CB423332E7190509F0F345E5B1B212516468DB49930394B5F07B7E7AF8CB8BB73C22AA
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/fr_CA/LicenseFAQ.html

SHA256 1e5298bd3360af691a824f02b8cc00075d1cb5b82e5d7f182c297241286f8c57
MD5 fe2b2e1beb6dcc9bafafe08e09402dba
SHA1 8826b3701c770ffaf1a5c57a9b238248e0682327
SHA512 774c089a01a8007cdd586b9a2c7583673ae09f87ceabd7c4f14d18640bada7175bc4cd0fe436bb08514c6f76a1320f6ac016d27e7b7ebce9374d937596a164f3
SSDEEP 384:dX8Tll8o5UrPKygWrms7Os/p9xQagEO8hS:dX8Rd5NSms7O6p9xQag44
TLSH
T134823122E7281419B0F649D9B15213956468DB48A3469474F07BBD7ABCCF8FF33C13AA
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/fr_CA/Main.zdct

SHA256 224514c655c81e0f8bb9554aed004ca8ae62f408eb4a073a104264f207d98dd9
MD5 1a890b8bb04ef19681d7540dc273c0c6
SHA1 ca3ff1fbaecc41186705d385295ff24c3de4ab37
SHA512 3041c0ab921f64c999bb69fad7ed1082b71cadaf20a9702e7adf598e96c3e26c6f9876468597d72d6b82c520b0c11f10dde7a24a158d97d29e7ee95c678fd89e
TLSH
T1C8514A91A7EC6A06F2F33B0E7D7D04410EAF3D9AAE39C90C14A0594D0DF5A44D9B2763
MD5 SHA1 SHA512 TLSH

OBLRes/fr_CA/oobe_launcher.zdct

SHA256 2719b20206908f6b1554b84496108f369e626507da9121a2cdb2f281bbad4536
MD5 5af3df6f86fd14be1efdfb7e887fd3d6
SHA1 a0a53e4ea81887ffe79ed2198f630401e27a19d6
SHA512 a31440ac12d5e277c893cee2fa1b6170a780c58f618dc022825c6b026b42165e2dbdbf2b50a307fd8e0dbf0ab831f0aefaad4e544b0d93d62f9bbcb3504de866
SSDEEP 96:YKBiSnaCC54iSnaCE53SnaCU+5SnaCKdSnaCpfSnaCR4SnaCQ1fSnaC2O2BiaCqn:hauaKaTaoaxaGaya9Owxea9
TLSH
T163B13916B3F85209F7F33B0AAA7A70551F3F7D9AE835C5AD2524414C0CAAE8489D0B33
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/fr_FR/ConnectionFAQ.html

SHA256 f033815a71c5b79dce7c4e5abaa03979549d05ebfe345b937510e8543ce442df
MD5 126b927df1ddfc80574fe0eb1f64fb32
SHA1 6cd7ba40c7c5bdac94bdc44b92c1eca8e33dac9a
SHA512 02ff7f706d28264d3fea97151d23a8be88b3b22ba560b6585e6e2f158729303177b8659d97fd494fe23b79661b1d01f11bc7d0019924ddbbd47bd88868bbed5d
SSDEEP 192:dyq8Tll8o5CfzIKYdqVgWEDmyjCXL/qnv:dh8Tll8o5CfzIKYdagWEDmyjCb/qnv
TLSH
T1CB423332E7190509F0F345E5B1B212516468DB49930394B5F07B7E7AF8CB8BB73C22AA
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/fr_FR/LicenseFAQ.html

SHA256 1e5298bd3360af691a824f02b8cc00075d1cb5b82e5d7f182c297241286f8c57
MD5 fe2b2e1beb6dcc9bafafe08e09402dba
SHA1 8826b3701c770ffaf1a5c57a9b238248e0682327
SHA512 774c089a01a8007cdd586b9a2c7583673ae09f87ceabd7c4f14d18640bada7175bc4cd0fe436bb08514c6f76a1320f6ac016d27e7b7ebce9374d937596a164f3
SSDEEP 384:dX8Tll8o5UrPKygWrms7Os/p9xQagEO8hS:dX8Rd5NSms7O6p9xQag44
TLSH
T134823122E7281419B0F649D9B15213956468DB48A3469474F07BBD7ABCCF8FF33C13AA
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/fr_FR/Main.zdct

SHA256 c2dcc6451605d2d77fbcc2ca0b4a3dd7b1f70955198d7d2869970a591e6d4237
MD5 6d81ce932d60e9d10cf21be986fdd78a
SHA1 6012da55f0aaf44b9d3cc7508e858a1c78db3be4
SHA512 36d77a6e3006168c3b00ea389af0d845097c93968b853ba9972b7f252d574ce3cab3cf19c51bc95f134c17255412455594450f3ccd4d7a2b7da1f355d5d26f2e
TLSH
T1F541C00177E8171BF6F73B36ACB912464A767C9AED36C90E0084564C0E3AB44A8E0B63
MD5 SHA1 SHA512 TLSH

OBLRes/fr_FR/oobe_launcher.zdct

SHA256 01191ef5e9cb13ca616b0a36865202104771072625a6c9370d2b336854293db0
MD5 49837a17e029107506dd0d3bff18571d
SHA1 bedb64ee1479b33c383889cfe8a84d91af1ae479
SHA512 05c2a19cfb1b3fe59a2af7431fa4def1b97e46f383d7973b15cb1c0b186cc9f2daece83d3cd52d6f5ce8826f2de0175a71e00c6d08c86fb684e66acf9e65863d
SSDEEP 96:Se74S3yCufS3yCufS3yCuBiS3yCu53S3yCudS3yCuDS3yCu54iS3yCu+5S3yCHBk:NCeCeC1CoCcCCCCCRCsx
TLSH
T117A16915B3F85609FAF73B16AEB670452F3F7DA6E838C59C2660515C0CA7B858890B33
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/fr_MX/ConnectionFAQ.html

SHA256 f033815a71c5b79dce7c4e5abaa03979549d05ebfe345b937510e8543ce442df
MD5 126b927df1ddfc80574fe0eb1f64fb32
SHA1 6cd7ba40c7c5bdac94bdc44b92c1eca8e33dac9a
SHA512 02ff7f706d28264d3fea97151d23a8be88b3b22ba560b6585e6e2f158729303177b8659d97fd494fe23b79661b1d01f11bc7d0019924ddbbd47bd88868bbed5d
SSDEEP 192:dyq8Tll8o5CfzIKYdqVgWEDmyjCXL/qnv:dh8Tll8o5CfzIKYdagWEDmyjCb/qnv
TLSH
T1CB423332E7190509F0F345E5B1B212516468DB49930394B5F07B7E7AF8CB8BB73C22AA
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/fr_MX/LicenseFAQ.html

SHA256 1e5298bd3360af691a824f02b8cc00075d1cb5b82e5d7f182c297241286f8c57
MD5 fe2b2e1beb6dcc9bafafe08e09402dba
SHA1 8826b3701c770ffaf1a5c57a9b238248e0682327
SHA512 774c089a01a8007cdd586b9a2c7583673ae09f87ceabd7c4f14d18640bada7175bc4cd0fe436bb08514c6f76a1320f6ac016d27e7b7ebce9374d937596a164f3
SSDEEP 384:dX8Tll8o5UrPKygWrms7Os/p9xQagEO8hS:dX8Rd5NSms7O6p9xQag44
TLSH
T134823122E7281419B0F649D9B15213956468DB48A3469474F07BBD7ABCCF8FF33C13AA
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/fr_MX/Main.zdct

SHA256 224514c655c81e0f8bb9554aed004ca8ae62f408eb4a073a104264f207d98dd9
MD5 1a890b8bb04ef19681d7540dc273c0c6
SHA1 ca3ff1fbaecc41186705d385295ff24c3de4ab37
SHA512 3041c0ab921f64c999bb69fad7ed1082b71cadaf20a9702e7adf598e96c3e26c6f9876468597d72d6b82c520b0c11f10dde7a24a158d97d29e7ee95c678fd89e
TLSH
T1C8514A91A7EC6A06F2F33B0E7D7D04410EAF3D9AAE39C90C14A0594D0DF5A44D9B2763
MD5 SHA1 SHA512 TLSH

OBLRes/fr_MX/oobe_launcher.zdct

SHA256 2719b20206908f6b1554b84496108f369e626507da9121a2cdb2f281bbad4536
MD5 5af3df6f86fd14be1efdfb7e887fd3d6
SHA1 a0a53e4ea81887ffe79ed2198f630401e27a19d6
SHA512 a31440ac12d5e277c893cee2fa1b6170a780c58f618dc022825c6b026b42165e2dbdbf2b50a307fd8e0dbf0ab831f0aefaad4e544b0d93d62f9bbcb3504de866
SSDEEP 96:YKBiSnaCC54iSnaCE53SnaCU+5SnaCKdSnaCpfSnaCR4SnaCQ1fSnaC2O2BiaCqn:hauaKaTaoaxaGaya9Owxea9
TLSH
T163B13916B3F85209F7F33B0AAA7A70551F3F7D9AE835C5AD2524414C0CAAE8489D0B33
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/fr_XM/ConnectionFAQ.html

SHA256 f033815a71c5b79dce7c4e5abaa03979549d05ebfe345b937510e8543ce442df
MD5 126b927df1ddfc80574fe0eb1f64fb32
SHA1 6cd7ba40c7c5bdac94bdc44b92c1eca8e33dac9a
SHA512 02ff7f706d28264d3fea97151d23a8be88b3b22ba560b6585e6e2f158729303177b8659d97fd494fe23b79661b1d01f11bc7d0019924ddbbd47bd88868bbed5d
SSDEEP 192:dyq8Tll8o5CfzIKYdqVgWEDmyjCXL/qnv:dh8Tll8o5CfzIKYdagWEDmyjCb/qnv
TLSH
T1CB423332E7190509F0F345E5B1B212516468DB49930394B5F07B7E7AF8CB8BB73C22AA
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/fr_XM/LicenseFAQ.html

SHA256 1e5298bd3360af691a824f02b8cc00075d1cb5b82e5d7f182c297241286f8c57
MD5 fe2b2e1beb6dcc9bafafe08e09402dba
SHA1 8826b3701c770ffaf1a5c57a9b238248e0682327
SHA512 774c089a01a8007cdd586b9a2c7583673ae09f87ceabd7c4f14d18640bada7175bc4cd0fe436bb08514c6f76a1320f6ac016d27e7b7ebce9374d937596a164f3
SSDEEP 384:dX8Tll8o5UrPKygWrms7Os/p9xQagEO8hS:dX8Rd5NSms7O6p9xQag44
TLSH
T134823122E7281419B0F649D9B15213956468DB48A3469474F07BBD7ABCCF8FF33C13AA
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/fr_XM/Main.zdct

SHA256 c2dcc6451605d2d77fbcc2ca0b4a3dd7b1f70955198d7d2869970a591e6d4237
MD5 6d81ce932d60e9d10cf21be986fdd78a
SHA1 6012da55f0aaf44b9d3cc7508e858a1c78db3be4
SHA512 36d77a6e3006168c3b00ea389af0d845097c93968b853ba9972b7f252d574ce3cab3cf19c51bc95f134c17255412455594450f3ccd4d7a2b7da1f355d5d26f2e
TLSH
T1F541C00177E8171BF6F73B36ACB912464A767C9AED36C90E0084564C0E3AB44A8E0B63
MD5 SHA1 SHA512 TLSH

OBLRes/fr_XM/oobe_launcher.zdct

SHA256 01191ef5e9cb13ca616b0a36865202104771072625a6c9370d2b336854293db0
MD5 49837a17e029107506dd0d3bff18571d
SHA1 bedb64ee1479b33c383889cfe8a84d91af1ae479
SHA512 05c2a19cfb1b3fe59a2af7431fa4def1b97e46f383d7973b15cb1c0b186cc9f2daece83d3cd52d6f5ce8826f2de0175a71e00c6d08c86fb684e66acf9e65863d
SSDEEP 96:Se74S3yCufS3yCufS3yCuBiS3yCu53S3yCudS3yCuDS3yCu54iS3yCu+5S3yCHBk:NCeCeC1CoCcCCCCCRCsx
TLSH
T117A16915B3F85609FAF73B16AEB670452F3F7DA6E838C59C2660515C0CA7B858890B33
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/he_IL/ConnectionFAQ.html

SHA256 4cba97114d3f129a24387e42437064a4cacb520559f5d192d5eaab47b798ad48
MD5 3c07f4f478b0e8e0d2904b8eb9514d4e
SHA1 bdc1a2cc919902fdec0a247f99cf7040beb9df7d
SHA512 58f83c472fac8158fa978fe91fa1f2bdeeea1fbe364d4f6a6b7d4ebbf2142413da85887a04283bb65b0254e6cfc9cf76c4e6eb54f99410d60cad0a9e28d4b5be
SSDEEP 192:myq8Tll8o5CfzIKYdqVgWOiJx9Dj8R2PKwL:mh8Tll8o5CfzIKYdagWOi3lc2rL
TLSH
T1F0321132E7080549B0F655E5B0B722617464CB59930364B6F0767E7BBCCA8B737C23AA
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/he_IL/LicenseFAQ.html

SHA256 c3cac01f4efbd6ac73f3cf4118af6c3ed20f170953aea31a4a000d65f5545b01
MD5 6f3ca96ac9753ca20a517dac144b7fcc
SHA1 5296471337e2cc6e954fab10ef17c21dd05bebf8
SHA512 f2e3517a5febd290c0bd5b23d61304ae45ff8de0abc99b94218f0813cd9fb984da3c9a92d15726f23f5a6c8acf80fc8cec11f92561235abd922ab400c60c122f
SSDEEP 192:mnUO8Tll8o5UrPKygW2nawrpcOuf7U6pRBxNFEX2VNasNqPBWiMU:mR8Tll8o5UrPKygWQvujUYvNF0Zk6
TLSH
T179721112EB180805B0F64DD9B0A622A56464DA5CA3429475F03B7D7ABCDF8FB37C13AD
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/he_IL/Main.zdct

SHA256 d8e492a16831fe717adf418889d7a78fc9c1bb0f841728ca75ac81f3e5b845a2
MD5 de68f40b7f6a0d3b1b6cfa25a3c8341d
SHA1 5be488be0bab9137a7f77c2e01bd0619ec872160
SHA512 747df9ac4aa03a4cebaf2d2b7c653ccac39bfc91630a2f09be93a67791b4bf86fa991d4ade2e63f3d12aa78ca1c4ab655dfa2974761a1ebe115e5f59dbafd9b1
TLSH
T10941374032E0D7D9EF5BEF33A2AD552E9324EA40507E3F07508C52600D2EA91A6AC7AC
MD5 SHA1 SHA512 TLSH

OBLRes/hr_HR/ConnectionFAQ.html

SHA256 b8762e8fd6bac93775a7df71e8c09117004214e3adca7169be4ec0fa047a2135
MD5 940dded14d40ee63d9884eb75ce9aaa8
SHA1 986ead007cbc5cefcb120fee75665021d5df4a7a
SHA512 69df4d2517f418e1c577a921c558e5abb02d8d693ea530171287600da5ba4b71206f5a763224c249e4e15d6f145b1a1619886b8ca91dabe6de4a0cd3fe3f846a
SSDEEP 192:XV0q8Tll8o5CfzIKYdqVgWqbv8di0zq7x:Xl8Tll8o5CfzIKYdagWgD0Y
TLSH
T1B7324F32E7090905F1F655D5B1B312507468DB49930794B6F07B6E3ABCCB8B727C22AA
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/hr_HR/LicenseFAQ.html

SHA256 0fbc0ce8d25ab52aaaa696af2f2163c3b75361f9eac305fbdb7151e0797fdced
MD5 22ce1ef18129918d464ea8847dda1343
SHA1 dd04e112c8dddba41eaf1a9aebfc6e694590ef9d
SHA512 c2b4f0973efab4e52880f698878406f22e4a2db47cf7ae182bfa3075bed3fea797ceb92d92b64380ae022a6eb7b5da1a89de35790581d7dea610a2e579c364f4
SSDEEP 384:Xt8Tll8o5UrPKygWq/ah8BfEa3rNsHcJrR:Xt8Rd5NNP51lR
TLSH
T10C822321EB250405B1F689D9B1A2135424A8DB4CE3169475F07BBD7ABCCB8BB33D1379
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/hr_HR/Main.zdct

SHA256 ad4e438ec9660acf10c83f2d5d6ff971082236f69678823e71daf983ec557900
MD5 c9ddac21047484d4f04e8f9b1065bb3e
SHA1 2a96e3b589a4705f471e37f916dd4584e0f55e7c
SHA512 c70507c56d793b7c85efd2469678097cb71695baeeefe9f4a9dc02ae85eaa53d2e87f82d2b14758bd89f9649d6aa36ea3201f6d96a3559aac7472f2abf37fa18
TLSH
T1C1517F82A7EC2645F2F33F0CBA7806210EBF7E66BE39C64D1460594C05F5A80D5B2B63
MD5 SHA1 SHA512 TLSH

OBLRes/hr_HR/oobe_launcher.zdct

SHA256 dcd84473a298c2d1574aba9632a164ecfa86dbdf7596a566339f99d4376e05f4
MD5 9938acdc349c772e0f424485f5e44a05
SHA1 3e0b904410362a520ac326aa6966d3d16ede8178
SHA512 891b42324e24ba5f0315b2c513a2ae0486da020881ab2abf794ee0bc99da92afd8683dbfd58d3543e3a592aa86eefe4b84417e41406b0ad94944256efa032261
SSDEEP 96:YKrh0Z5Ccrh0Z5Cqrq0Z5CK10Z5C0Cq0Z5Cnoxj0Z5C/R0Z5Cu1oxj0Z5CUOj0ZT:La59a5DX5m58X5lk5J5sk5Dn59oW5T
TLSH
T1C2A11B2673F86618F9F377099A7A25A42F3FBDB5A438C16D2160454C087BE848DD1B33
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/hu_HU/ConnectionFAQ.html

SHA256 db5e912f1dededf447b03544b157cac5cc006133a67fe1376b481bbdd5e44ce8
MD5 8bb00c0444b907575fc0f951e703fa9f
SHA1 7bda6adbe2e72f6440ef82eaa8ee4837b1e06b5e
SHA512 6fbf51863bdb2605b9c109f2fd0678e91bf73913b6a85009bdc776e47b4308d420078a81baa74697b456c5a46fab0efd527aaeb7edb6951000ce88eca88d8e75
SSDEEP 96:VJinosPCR6hatUvmFDn8T3I95Nh6l9ucio5t2Tf4meO/jgRzeWjgRLYTWjgRLqb4:XSq8Tll8o5CfzIKYdqVgW+/r3IHUCiaq
TLSH
T152425332E719091AF0F655D5B0B222512468D749A31394B6F07B6E3AF8CB8F737C126A
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/hu_HU/LicenseFAQ.html

SHA256 67992b3a84054890ef76af319702e0cec112255b09e8480cf0bd0c94624b66ef
MD5 1d12fdc7aeb40e6f9b1478a645f7d791
SHA1 bcee76b19d72d03d57e281c5cce5dae9cf6690e2
SHA512 97da9b8d6ccf23b226a8a76998c57d499ee902370c73766e680f32b37d1642dcb35bc3a46f5a3d00112477c9ad1cb51d90b3ec104c54c4d80810b4465320a50a
SSDEEP 192:XDUO8Tll8o5UrPKygWXLJ9C7LeTsXeetEy8puBp90VaqL:XV8Tll8o5UrPKygW7JIHeT2eIEb4c
TLSH
T1E5822322E7240409B0FA4DD9B06212956458DB4CA35295B5F17B7C7EBCCB8FB37C12B9
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/hu_HU/Main.zdct

SHA256 31d66b94f41a56bb89e8ab936ce46fd1b5cd1fcd0959d094d74fb4950f3082d0
MD5 9729ff5053afc02ad7647dc8649500a9
SHA1 541ade3f46067809efb4d0b2d25f0ea546fbc626
SHA512 0064e682c6c96d5d1626be6aa74194bc713091cf339a96e87ed1fa375a232afdb528d3f935b55557a06c3af10315ce353fa9e81102d422c2b6b06b75725ed2f2
TLSH
T15E41B40572FD4B06F6FB6F327D7097964931BC69AD7DC60E8184528C0D3A680E8B0F92
MD5 SHA1 SHA512 TLSH

OBLRes/hu_HU/oobe_launcher.zdct

SHA256 32500292134a7679fe7efafd12d9b6792665ba7cbae5986d24d0de53fb4be93f
MD5 aa33c6fde44d8f4fb2a2d8cf8f3c1cdd
SHA1 4b990b30b77afa56db6a9401127f8609c690820b
SHA512 cab003abeae644cf5bf809affb587c04b0721f2e2fc5ebff2c9c28b0ca0cdc02f25fec959d2d999b54d2c6f1b57fd4c9d0449b14f7f424d64e2713c95d46b752
SSDEEP 96:mG9snOCJsSuaOCJsSuaOCJsFOCJsrOCJsqOCM0BZOCJsdOCJsBOCJsvoOC:mHOhSu9hSu9hYhShNSBshAhEhv3
TLSH
T1A0A16105B2EC2609F1F77B167EF3B1403B3EBD99E83CD29D6590A14C0C666448864B37
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/it_IT/ConnectionFAQ.html

SHA256 0d2624bcb23b8edcdbfdb6a3aad80598520b223de0873b8d354568361630a44e
MD5 fc1836d3933acc4b6e9100a2d109d229
SHA1 876f2188235eb03e80ef3add7d25e085bca3318d
SHA512 3e3b4d33c69d512d3e2deb23b7e392a0b0d9f1789d7090bddc1fd8eef3c0bd2909dcd229e4f826ffcc5b9a7daee47f754d365270e97323e0b90eb26a79df53a0
SSDEEP 192:df6q8Tll8o5CfzIKYdqVgWl68gEx918zY:dfp8Tll8o5CfzIKYdagW4gD8zY
TLSH
T1D9424332E7090509F0F245D5B0B222507468DB89E30364B5F1776E7BB8CB8B777D22AA
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/it_IT/LicenseFAQ.html

SHA256 ee5c89d5fb87e27a46fc2ddf3a6139baf41e26b75b69d12abe8d5ba24a9da4b8
MD5 e42d92bc44e149f957737a12f4eddbd4
SHA1 965512ffeca6d89fd333219af8e4228453eb711f
SHA512 a47cb64af1d1bea9c7e9ad72f1b3d278ec6c77fdaa0b0732f180fa587a5f6832cab9407d5f2e0319db6fa26d591d2deef0b7100d29bb9084587d9aab5086af7c
SSDEEP 384:dge8Tll8o5UrPKygWy7fg2srbeRgzEhDt/hi:dh8Rd5NH7qeRgYhC
TLSH
T120822221E7140415B0F64AC9B1A322946468DB8CE3466475F17B7D7ABCCF8BB33E136A
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/it_IT/Main.zdct

SHA256 755985113b60b1cf0e83e9860dd2a664ccb09d68a4b755fba4f41baceb3041fe
MD5 7cbfa7e7bbf741b67816193f59b22dc9
SHA1 6b4f805b13a489b9b785909ea549e07cd8d71ece
SHA512 ae491cc21f5f69414a17b41b216b763af5fe060d1a041c8f6988f75140a551530857de8fdf8a1dddba502f39b146cfd04d0f02261b488e4d1df7596087d2895f
TLSH
T15E41F302B7F84719F7F73B357A3852564977BCA6EC32DA0E0240165C4A36A90A8F0B63
MD5 SHA1 SHA512 TLSH

OBLRes/it_IT/oobe_launcher.zdct

SHA256 b77e30db62ecd43e402767b1c219a323a1920d73e34eacc6be61234e95ba49e9
MD5 0705f63c075f1d68d20615effadac13a
SHA1 a632987b8602186ddf7ec199c7494970f4b3fcab
SHA512 60f3fd77b44219e934dcb8e35d327db61355c9899b246104784f62329ea672ee40c10d184acd4ed7db53be0f9503f6f1d1be0aaf4fa0a6c14a62abbf2ba64a89
SSDEEP 96:C799CfX9CfX9CfIP9Cfg9CfS9Cf09DKCfr9CfJ9CflDKC:SmmHl39qak/
TLSH
T151911712B3FD5748F9F377199ABA75856F3EBEA5A43CC29C2260511C4C62A054C90B33
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/ja_JP/ConnectionFAQ.html

SHA256 955324169eb9af6f2c11496b0b8bbbd9400ca201f7a4160a6a91b9ea12a49883
MD5 915889fb05c189e9322ab6b1912c2efe
SHA1 1d6c585a606a09cfd8e5d3da45e88c23f45ad8f1
SHA512 ea3e2c4f6dbc2bd1ff46ba94ed0e69be4f57f9ebdd2abe1550df1699a383cb32f784d66f21d9fa28e576d2ce10d2d842a7727c8956bf02d74777dd5a74f86ec4
SSDEEP 96:VJinPsPC36hatUvmFDn8T3I95Nh6l9ucio5t2Tf4meO/jgRzeWjgRLYTWjgRLqbQ:2Iq8Tll8o5CfzIKYdqVgWGvzdkzAh
TLSH
T10E424231E7190506B0B685D671B322917468CB4A931364B6F077AE37FCCB9B737C229A
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/ja_JP/LicenseFAQ.html

SHA256 309c380b73594871af579a27208b653dd524474064751d145f067da65acaf4df
MD5 5672ca4f20b403ee1845a2511f946a84
SHA1 36d1067390745ff2eba00d74a0fd1cf17d962a2a
SHA512 64a36c6504da4b102067acaeff39902b30032d8d3e2ec684e5741d2d2f1331681c4481222c7561fe62ae6d8c3d1de34e900f4cd23af7dedb9f78de505fbc5d09
SSDEEP 192:2VUO8Tll8o5UrPKygWG13vWwFg0cSROypsUU7wBJynWu4BJJhtuW:2z8Tll8o5UrPKygWG13pRzpsFBWV
TLSH
T134821031E7280405A0B68AD5B17623A06068DB5DA3129575F13B7D7ABCCF9FB37C02AD
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/ja_JP/Main.zdct

SHA256 e5ab79acc3dce1ca76a43e6652a63b524eabda7b955df30cc32535e2a79cd00b
MD5 5bf1568b5cc1a75fa8e2207a85ad4cdb
SHA1 066a8bb3cd48a47859cb0134e4ee5d2935f5e057
SHA512 c4a822ba69851392e61c0c1d102c93b94e5dc016a0f6f9ffd42a6f04acbd0b2ed85baf1a6f166ce6c5c73cb2b015fab4a368345a4fdc51591ef5b1351ff3c97f
TLSH
T13F31004832E54F1FE6E7727A41A2E35686B4FD14B2C64C8300C4D20A0A4D2C17697FBB
MD5 SHA1 SHA512 TLSH

OBLRes/ja_JP/oobe_launcher.zdct

SHA256 dd7b4b47c6213483ad7a794766cb132def8a0c3fde10caf36a59fd1c0ceb72e1
MD5 dd4f983ca1eaa9e1e2f9495b64de6b9d
SHA1 80c0ff14a14b55f1850104d1f960d433197995a6
SHA512 ab90f3e8ac78553768f57ead3d11bd7bd5d880da273b2b1276375fd6d69af37584c213cdf189e679db2ef69057057b24572427292c290a95a0d24f29548f1e34
TLSH
T11271F549B6F96608F4F3337D5EF770823F7FBE909464E19862204648482BB454D88B77
MD5 SHA1 SHA512 TLSH

OBLRes/ko_KR/ConnectionFAQ.html

SHA256 b1e1d990e2d77d438e758efe986478587c7bcd3ad43ec5fe7062be6a371705ac
MD5 93a79c3cc6d0442edb81c3fe8d0053b3
SHA1 a1426f047250ca2e0fe2b56cb6b561106e585fba
SHA512 a0ac3294e7d03ff8d3d4817e82027ae3e5ddc08c3fe13451dbd49262411e6deeeb5197ce80cd41c5e6c7ab83774629acf9102822129e30c028daa5d4d5ee7f98
SSDEEP 192:YMq8Tll8o5CfzIKYdqVgW6XDnrzkYN4VQ9U2:YD8Tll8o5CfzIKYdagWYvXx
TLSH
T16E322131E7180505F0A659D6B4B212517468DB49D34364BAF07B6E2BFCCB8B737C226A
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/ko_KR/LicenseFAQ.html

SHA256 2475118bcf0b4e115484cebf7350d7261439a0825516bf74f7750c3a22ef0b4c
MD5 399f2d999cc5589b18d6546801701e1b
SHA1 2e4ac3cc7a04e32bbec094a69316e1c369f201b6
SHA512 7d24280a8d40ac1fcf4ba63f6e380962dbe844bf57b154b38c54f201d21da492c6d0cbce57971a9cf1dcd0512c10b4ef2126a697b1136c6aec339e4ca1b908be
SSDEEP 192:YvUO8Tll8o5UrPKygWY5DD1wvfF4Wr3ErM0en0DNt+L:YJ8Tll8o5UrPKygWKvSwda
TLSH
T14D821222EB280405B0BA49DAB06613946464DB4DB3526475F07B7D7AFCCE8BB33D13A9
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/ko_KR/Main.zdct

SHA256 a49e2884c1f0ad8e554d2f86c924a7253995f842b80e61393a8ef11955bdecf2
MD5 6eb72e5174632f6fb76515e5658a50c7
SHA1 2dd533faccfd679fd83ba93bc67b75c19801265a
SHA512 40fddb666e0c800ca89d396c402b50daef8cd4648c4044f24a11aa7f237e3502483f04db28d0c47e0779c0b805e0a6c3fc09ef02590ae84cd69842719fae0053
TLSH
T11D31DF0236E56B17DE8BB3B7569183E78265F981F8530C0B624096148E1F7D2B2B17C5
MD5 SHA1 SHA512 TLSH

OBLRes/ko_KR/oobe_launcher.zdct

SHA256 3e7ab9d076d592b4a204eadbaa0518f53d45555fa066156f107dbfd56a19a260
MD5 8f9e2cea189fb4ef730bf11c448c88ca
SHA1 afa30cf5892dafcc10cb658218812d8a70779ebb
SHA512 9701d2557ef533c5c6690120c644be5a8b6163b9643fbf1969fc7c1c309129fc0ae0feb812faacb4ec89041d6184b81819fd3c45f7ba705a4b2856179bfc9da8
TLSH
T10D71B109B3F96605F9F3A32D9FFBB1512B3EBEA58062D19D6230014C0CA77858990B77
MD5 SHA1 SHA512 TLSH

OBLRes/lt_LT/ConnectionFAQ.html

SHA256 a2658f022c2eef1ad6d7d1834341b0d6327dfbc9042848285c46249d4c8a716d
MD5 cdd3a8fabecf187f7946d128755bcffd
SHA1 565963833fbd1310efc6579ea5244d9b0b85fcb3
SHA512 0093532ab99b5ea1329d69f10f9ccffbd5126a8458866b5bd29c0e3def3756270d84e663227a94807f2891ab85d30cbe89316ad3e407a1144da88a791b0b28bf
SSDEEP 96:VJin7sPCK6hatUvmFDn8T3I95Nh6l9ucio5t2Tf4meO/jgRzeWjgRLYTWjgRLqbT:43q8Tll8o5CfzIKYdqVgWO36y3izTZ
TLSH
T1D1424132E7180946B1F655D9B0B212506468D759A30354B6F077AE3BFCCB8BB37C13AA
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/lt_LT/LicenseFAQ.html

SHA256 62618d9fcfe523b823f60bb193567cf29c1906551aedb9d7578c52c3407fd78b
MD5 4d43c9b8381d4ad96d3d01c7055bf819
SHA1 d52e9ea884559fb57c59379375f9226e658fdbb5
SHA512 5aa487c1dda8ad320ff41bf9648ff41c8b9f46d82097aef1dc4bb358bf25850d2a406ce50152dae09a3f221e58a836329be5780c46aa0dc61d94920368529557
SSDEEP 192:4KUO8Tll8o5UrPKygWZRdikEEO2eXLkhK3+L:4u8Tll8o5UrPKygWbI2eXOKK
TLSH
T1B5820022E729044571FA49D9B1A612A42458EA4CA3029875F07B7D7BFCCB5BB33D03BD
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/lt_LT/Main.zdct

SHA256 b9a4121249ff28523fbbb5e3cb731ca26017e11d60bacda1f996e7a24fa88c79
MD5 854aad3eabc37c906f839a08af885222
SHA1 fef41049d986b8dbfcd5f0a6be47273e1b3e745f
SHA512 8af302a9666e2081c7c324fd10449a9f8cef692bca75172006e90cc8f5071cd88d19e10478643c54280872f33d9d5da6f07352a6f2f43c7bc31f3261fa6b0581
TLSH
T1C751C0A0A7EC2609F2F31B1C69BD45160FEFBE66AE3DD60E1470548D05F0A81D4B2763
MD5 SHA1 SHA512 TLSH

OBLRes/lt_LT/oobe_launcher.zdct

SHA256 b92878d7ea406dd54c8ebce2235520787e7d8439e470e86b4a3e7514beec2e05
MD5 09b4e586f1641ad6eb6f34665ef1f8f1
SHA1 3932bf40beadef80c74f0816e3e9233860f1ecee
SHA512 21e08e756aa1ee306257b9bc5cb9c46b7e4efba2219c44fda97be3d7ada1d5d13236201ee366c2afbbdba347eaa71c29eedac44bd52edec66d8b9df41946f1a6
TLSH
T12CF0A7B9DA42A366578CA1FB70CEC4C6FDFCA2AC82F43C1502021285B59363921778A2
MD5 SHA1 SHA512 TLSH

OBLRes/lv_LV/ConnectionFAQ.html

SHA256 b8b2be1ac57fd9dc11ca9a3563dcf3046351989be75697a0a03e32544f9380f9
MD5 8c6123b5fdb96e1102c435809b80de93
SHA1 595358eff9f1a2fe08260e2a70dbc9fa549eb952
SHA512 2f1298c962d762b0d145453ebc126010e558e294e2f83f650a7bfa67bc11aaf5c0084596cbbb179d558d8049fb4002e1fdfef1ed6b415f7eb74786ccba9c4737
SSDEEP 96:VJin7sPCXpLhatUvmFDn8T3I95Nh6l9ucio5t2Tf4meO/jgRzeWjgRLYTWjgRLqj:4pq8Tll8o5CfzIKYdqVgWrfaVx+6m
TLSH
T15B324032E7090A49F0F249D5B1B216516458DB49A31354B6F0777E7BB8CB8B733C23AA
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/lv_LV/LicenseFAQ.html

SHA256 a6fbc003cc1c859b5cb10bd27d275e435ae53ac0f6d2c528cceff388a0e3f0bf
MD5 eced45b77f778dab40b0b5f4a4e871e1
SHA1 1a687385a1dcec1562f8a061a369b7c928afbc95
SHA512 2e3c6ff70f9fdac8a3757259663628938d250c2a389f62e4e03e944377c876712632bb96a31a7f552beb404666cdb742876a8a142ec2d8acb3aaf39149b8b3e8
SSDEEP 192:4MUO8Tll8o5UrPKygWBBlLniyXjynsqoL:4M8Tll8o5UrPKygWnlGyzys
TLSH
T1EF822221EB280415A0F649D8B1A213946498DB4CA31698B1F07B7D7BBCDE8BB33D1379
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/lv_LV/Main.zdct

SHA256 02f837092168c13a95be9c0948305f7a9e609d413bfb20b664af136076b1f7c9
MD5 9ff89ed016e263d3184d594c723c0801
SHA1 7f5c5b46e5a88620117af6188addb431106f7027
SHA512 c86f8c8b9ef23d2518e3f283c54f904d2d0d922c5ca8e438f6ea295feea360f8a957643e75209fd61f370a4441292f05eb321213d7db10d4b4963dfd4967d3cf
TLSH
T1FD51589193EC2619F3F31F0C7E7849561EBF7D97AE38D60E047058AD08F5A4098A2B63
MD5 SHA1 SHA512 TLSH

OBLRes/lv_LV/oobe_launcher.zdct

SHA256 b92878d7ea406dd54c8ebce2235520787e7d8439e470e86b4a3e7514beec2e05
MD5 09b4e586f1641ad6eb6f34665ef1f8f1
SHA1 3932bf40beadef80c74f0816e3e9233860f1ecee
SHA512 21e08e756aa1ee306257b9bc5cb9c46b7e4efba2219c44fda97be3d7ada1d5d13236201ee366c2afbbdba347eaa71c29eedac44bd52edec66d8b9df41946f1a6
TLSH
T12CF0A7B9DA42A366578CA1FB70CEC4C6FDFCA2AC82F43C1502021285B59363921778A2
MD5 SHA1 SHA512 TLSH

OBLRes/nb_NO/ConnectionFAQ.html

SHA256 830e018d16105021f3cd102d0beb17113f4f96dc702c1437e214f0c85d8df8b9
MD5 ef145fcb367ca77f1c7022881de8939b
SHA1 bfe71b256c3b4ca808019b7588e9d184e7a700fb
SHA512 acbada4581afc1164b6ae682b755901e0ecf728d6a652074e16fb06c6eff41f841e51e05c8ffa1f2a94a4aa0eff4e5054fd36b246f51a27c224e6bd3b9c6d698
SSDEEP 192:dJq8Tll8o5CfzIKYdqVgWD+dUJYE9gMNekS:dk8Tll8o5CfzIKYdagWD+dUJYE9gMO
TLSH
T19D424332EB09055AB0F645D6B0B212556468CB49931354B6F0777E3BFCCB8B733C22AA
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/nb_NO/LicenseFAQ.html

SHA256 40ba6635ac0cf8c8e1d6f408218a3931e4bac00c209783ffb6e17211e80b8b67
MD5 5a4e7bf980fecdcf08ae666ea220022a
SHA1 bce35add9edb60b74554e0636b96780333a4e932
SHA512 b24a6b6064846fa661b0661152b74b7a5a7e996ee5efb92470ca5bfce86c7d88ec34ccd5e57d504d7749ac181439f4e0c518c39730c327f81d7078bcd659fedd
SSDEEP 192:d+UO8Tll8o5UrPKygWu6FDnkGkmPoAldPD2TsyM3KUvL:da8Tll8o5UrPKygWu6BkGDoAnyTKr
TLSH
T1C0824412EB24041970FA49D5B06613952068EB4CE3269875F07ABC7AFCDF8BB33D1369
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/nb_NO/Main.zdct

SHA256 352456bab15d03d77386247965eb11a9f7fbf1cddf9a40618324fa6fe1607ea4
MD5 498b4c5bda85803e913e5336701362a9
SHA1 d61c36d6d820248c40d7fc977bc5ce9c8a1f9aab
SHA512 0787d9a6923bb0c2144fba4552de12592488bf696b3196f6f2d58b319f6bc9e59fb3ddfd7d34d767d9f74c29a914a4c7d6768124a422106edd92e7f71c17253e
TLSH
T12D41E150B7F91B1EF6FB2B317EB542525A79FCC2BD79C60E0144125C0D3A6D0A4E0B62
MD5 SHA1 SHA512 TLSH

OBLRes/nb_NO/oobe_launcher.zdct

SHA256 8218767951a3cde6e16955b95ecf03291de866508a85de2ae344d84ce0e5e4e1
MD5 287d43e5828797c5c26c334c8963b41c
SHA1 22fc66aa36b66529107b0435aef4b1129e051270
SHA512 7fbeb623b5d5561994005a443a37d83ba21fcdd374c50d3251f4874025635360b987bfe3dc216a654ced91a6d9cbbf52627083dc3e5aad3c0feef55bdd968ff8
SSDEEP 96:u7nHIYOdC7nHpiYOdC7nHpiYOdC7nHEAMYOdC7nHgYOdC7nHmYOdC7nHqOVC7nHF:+qcqcqiqcqiqlqHqAqHq
TLSH
T135A10825B3F95709F5F76B2A6EB670846B3EBD919938D29C2660110C0C73A8588E0F37
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/nl_NL/ConnectionFAQ.html

SHA256 316fd3a0adc8a9d9be36a70beb68dfcbb4c941082f69048c0105be354d66849d
MD5 d3d443d5bc31b393c7783d0d6ec339d0
SHA1 ff2364533fd81662027136cf4d4b9f3180412cde
SHA512 951a00791712d7bf8403e95706d6980ed8aed616e96b0822e0e1c3f482708cc210e8df812cb4b230930d4e232bb8edc920aa39bb911a2a9303129baa871fd409
SSDEEP 192:d6q8Tll8o5CfzIKYdqVgW5+T9dQZ5mKcXXXb:dp8Tll8o5CfzIKYdagW5+T9WrmKcXXXb
TLSH
T15D424132E7080519F0E245D5B1B222917558D749D34794F9F07AAE7AFCCB8B733C229A
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/nl_NL/LicenseFAQ.html

SHA256 30fe7d08283d17153d4170bbef100f24c7105a691d5a0826fc64fa908c20449f
MD5 7bce0fbfbc1f2f0b6bfe6102872b666b
SHA1 20b0df5aa8dcb332c6f61e5d5481dc0633571fb6
SHA512 36d4918a88330d054cb0387772632f7e3a180f1317bfe3d770a4ffc448d7b6fab7edacfab080169092ed25beb450057d2dea0a8ac262c379e7aab3ead6138824
SSDEEP 192:dJUO8Tll8o5UrPKygWwf01djKQm8ost4iKM4SY1bL:df8Tll8o5UrPKygWwf0XjttfjC
TLSH
T1A3825412FB280419B0F64AC9B05212A57454D74DA35698B4F07EBD7AFCCB8FB33D12A9
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/nl_NL/Main.zdct

SHA256 df50eac9bcaac16e25a9077473b6f9a78aa3ad1e4550934c178d9bd7529d3da2
MD5 30321b8b7e9c807e53d4f13d43a51265
SHA1 ad984b2ea4de74bd6aea545c3f11718ea42f6ac8
SHA512 eec45093ce428ad78c730396d52cb4c75e8c7d34deb900585592c82f39f23bc8027551fcfd1316bd54447405fe1e35486b2270582bd151ac38b68bb2ce13cffa
TLSH
T1F051DF0137F8861DF6FB3B366D7992568E35FCC6E831964E0350066C4D36A80A9A5B73
MD5 SHA1 SHA512 TLSH

OBLRes/nl_NL/oobe_launcher.zdct

SHA256 3a9277e8003869ea17da8c019ca2dfaa9e2b43413b0bf3039fe813c990d69ac1
MD5 9843568a2ed878441135c2624f184744
SHA1 b4cadf3de0026982d85d3b8875281e5c99adc1db
SHA512 8607074a8590f7384ec343ec8f8abc6ae688bc2b301dba7fee616d00063e6e2acdd6b815759e7df0ac94af32696b84ad6716db65adffea1804583529b07d4891
SSDEEP 96:tt7qm11NCIvenm11NCIvenm11NCIBRm11NCIKom11NCI1m11NCI6m1pCISom11N2:tbVVVVV0VyV+VfTaVjVhT
TLSH
T1F7912956B3F89608F5F33B29AEB770842F3EBDA5A874D29C1664151C0C77B1489A4B33
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/pl_PL/ConnectionFAQ.html

SHA256 7035bdeec896dec02942fbb7724c5faddb06d0984e6c55911da3990df970158c
MD5 da41e06fe286cc372dfa139d33dbe312
SHA1 fdb27d4fa5d79ef23e2a0ce29612cb474dc7e12b
SHA512 3e38444dbca2c3bb4e738404eb6bb54ab08475160fe612b313f18ea4c7138c32fe22cea2b60716f0c0a846976a3f2e9db182f0a2dacd522f36b21c36fd16df3e
SSDEEP 192:Xqq0q8Tll8o5CfzIKYdqVgWvfSQTxGDb/:Xqo8Tll8o5CfzIKYdagWvfSaxGf
TLSH
T1EA422022E7180545F0F645E5B0B3165174A8DB49930354B6F07A6E3BFCCB8BB77C22AA
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/pl_PL/LicenseFAQ.html

SHA256 4bf0f3d79ddfc288247c15477c75fe4d3e00cdae5d911ca5402f9af7e34c6af0
MD5 38839b4b6a55f9afb0016b6d7a77c65e
SHA1 2af2f178da04954d3e2603db84abebbd1a1fc70c
SHA512 e23ef3079a865d627e308b474528a44fa8c6e206da32db23b7a77fe4bf019c6d30cab51992b2b71dc4049f4d9d738751df694865f64e0ca648631dd8101a1856
SSDEEP 384:Xxz8Tll8o5UrPKygWk+15UqRUo0cAw1DkRl:Xxz8Rd5NN+fFUUwRl
TLSH
T109820F22E7280445A0F649D9B1A3139464A8DA48A3125875F17FBD7BFCCB8BB33D1379
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/pl_PL/Main.zdct

SHA256 412662f89dd8407c8873e11ed025050d59d9fcaf917a4c00e1ffc780d8fc2e2a
MD5 b3c780d6a06d71afc4367187b951c822
SHA1 ffb469403cf5c6357a37d2be549a1f0244d53516
SHA512 60ac9664cda13e7979428955de087bc60d7617dca7bde30ce0bd47dd97d8064ad0f5961e2bd84a057d4ff93288b4eb3b7008cc53572179c0159aa2b6eff09e0c
TLSH
T12341294077F40B15F6FF6F3095756296C936BC12FE3A458F294162880E39990E5B1B73
MD5 SHA1 SHA512 TLSH

OBLRes/pl_PL/oobe_launcher.zdct

SHA256 6d29628e19aee6bd969122c915903ce52a4f28382653c83fac138cdf4bb236a5
MD5 b3a24d3b73071ce2b4ed037a4802d2ca
SHA1 cfa043f20a1a413b830fc7ad693c1e3109a55ab2
SHA512 c72397e72be0916e213d24dec66078fb1c5e24f0839b8ad8ba08a892880b3c863da3e143f2a1b51d7379cf3bc484148f8bd4b3f1a7a41b9641ec31a1ad0398a4
SSDEEP 96:g/EiACSKiACSKiACSREiACSkiACSGiACEx1jxUTiACSQiACS+U3iACSPiiAC:FUUpiK4JRQuWM3k
TLSH
T114A19405B3F94649F2F33719AABB75946F3FBD66A934C29D2610024C2CB67908990B33
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/pt_BR/ConnectionFAQ.html

SHA256 c994c9521dc2f4386267dc95d3ded8488c2a263f9e894d710c7c0b038ecb73ea
MD5 673c26ad693378ddad7bb28c589e4346
SHA1 2c1d9f36956921ba5bb44d03a61a4b4021be35eb
SHA512 0658491a5edc51975d7ec77d0351a2eb2c93fd6196f4fd3809aa4dce22b1c301e0b7799323439cd126cc14e3ec8c51865106704c0f78805a9c1f010c7247246e
SSDEEP 96:VJin+sPCB6hatUvmFDn8T3I95Nh6l9ucio5t2Tf4meO/jgRzeWjgRLYTWjgRLqbR:diq8Tll8o5CfzIKYdqVgWtARQPwa
TLSH
T1A5423232E7090505F0F245D5B0B722527468D749930394B6F07B6E7AF8CB8B777C22AA
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/pt_BR/LicenseFAQ.html

SHA256 3d731867d17d0b3b2052316e13db88b550a4898a3324b749d2dd457994f58a2c
MD5 ca26d9580cdd693b678073ec6ceaa805
SHA1 8cd5e2d874b1c560ca3137adf71f953d1156a153
SHA512 f9f94f88b93aecd8e088f16c37228a99f3fad4e954bd08276b44bdf17bbcd86dea5f8a441d0b2a76d1cdaad925925000c74c586b17649c702dd05df4140968ed
SSDEEP 96:VJin+sPCs6hatUGirFSLK8T3I95Nh6l9ucio5tkPlWjgRLPeWjgRL0RgN5+NNkT5:d5UO8Tll8o5UrPKygWqx3al/5kT2OnL
TLSH
T1E9825521EB180405B0F689C5B1A7139564A8DB48A3029875F07B7D7ABCCF8BB73D177A
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/pt_BR/Main.zdct

SHA256 40ee76185d2e2709c3565790fca747a027b217fb69d926d8281ccb8092d3ba61
MD5 ae3699e79f2868fc6501bfbf94b4256a
SHA1 484265f9df0eb06aff24b8070cd4736a2d2aaf5c
SHA512 1c55a67a1e8f0255e93c9940bc6b2511926dd624b1352236f8fc69d2f1b8e15a0f37eab943aada7f8479b5cffa2840dd91258508f11264563fed9a945942e0df
TLSH
T1A541010177F8171AFAF73B362A3552918D37BC96F831DA4E015002490E3AF80A8E4BB3
MD5 SHA1 SHA512 TLSH

OBLRes/pt_BR/oobe_launcher.zdct

SHA256 ca3d8da86da34fb8ea00f509f244e7b952ef7413a97a896838eefd5b776fc6a3
MD5 c4007e3a2e0f954636cfc17cf977f2ee
SHA1 17b4b9b7993af45b7af514af62149f8685402967
SHA512 04bda8bc27732937b361835e0eeeccaadea628fa08e35b4f333730ce4ead9d51adebbce73e20fab3fc443d127a16cbb1deb2346606cc6426fa919df59ed6d647
SSDEEP 96:CfUHt0GCH1HJGCH1HJGCH1HrGCH1HyG0GCH1Hn0GCH1D2CH1HyeGCH1Hp0GCHq4d:BRY0Y0YKYHYLTY4YFH
TLSH
T196A16C05B2FC1B04FAF3772A6ABB74956F3FBDA5A438D29D126046480CB6B414D90B33
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/ro_RO/ConnectionFAQ.html

SHA256 8ee9d3adbcdf5bba14459c9f2193ea7d59a6b1577850bde26518d69adab71838
MD5 26235f873952010dc67e9859e0ce8e61
SHA1 da3af8dd0bd038ca6f1f663736edb10b235cc4aa
SHA512 6a038d99e785859416443b4be7abf47343f32d18504dfa6766b65048856072c93c54bca6cc15b40f0160e0f12bba7f29ec0efacaca283084d76c228808f0722f
SSDEEP 192:X4q8Tll8o5CfzIKYdqVgWj1EfQc0+ZggY:Xn8Tll8o5CfzIKYdagWZluBY
TLSH
T1E1423232E71C0505F1F245D9B0B222927464D789930394B5F17B6E7ABCCB8B733D269A
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/ro_RO/LicenseFAQ.html

SHA256 85848b3e246036d098ed35008b8c04c6f3faeadcdd1edd2719d988b918ed4d92
MD5 7c33746b871d8d8b435d72c5d357cc6e
SHA1 de4a2af5eb7fc33b358c7da57ac99d9c3f887a11
SHA512 bb0d438039d73b6188be11ffe8117db8dc5319d05751d94ce3ed045667debb9970df1a042102f4b097f88235441e5e4f55357364a96c8a50d858ea43a4548a9d
SSDEEP 384:Xr8Tll8o5UrPKygWXIMfVvi9J3FIHxIfVr:Xr8Rd5NzMf1QJqKfVr
TLSH
T1F2825322F7281405B0F649D5B1561296A494EB4CA30298B5F07E7C7ABCCF4FB33E07A9
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/ro_RO/Main.zdct

SHA256 40eb3636f3529077b251638362e053e67dbad9773f41f841096726383cd415dc
MD5 011bcecd4c28702fb40bd149025cf0fa
SHA1 db06197bed7e91aa7da05ee5a59046e63d9ae0af
SHA512 28aef0fd084e5c170176a72a2c95cf28404174b480710e0c49fcf1d4bc812493c7eb9721ca5096a6b5a2bf7fe42892d5713e15043775f39e3ce4a7866504fda2
TLSH
T11441E10027F8171AF7F73B35393912564D377D66AE79DA4F1200525D0D36E80ADA4B63
MD5 SHA1 SHA512 TLSH

OBLRes/ro_RO/oobe_launcher.zdct

SHA256 ab9dc4c24ba642ce13c54b1b515f0f424cf08b2657ca6725038584c220e120c6
MD5 c69987355a4684290d6519c51ba5ae54
SHA1 ff673fe512b5c8337aa152d8a34f78d6e78267db
SHA512 8c2ac802faa0e994498048e2c060066ad97cd5cffb8470fb081b50598277f8be19a963b4a91c4f4e6d43f954905fd71787cb7a0f99b902cbc3ef460f6596cf8d
SSDEEP 96:U7NSC3KiSC3KiSC3wSC3iSC3ESC3uVSC3oSC3DSC3vSC:H3p3pMqAU8Vl
TLSH
T1D9914D42B3F92705F2F33B29AEB675446F3F7E66A839C25D226045590C76A848C90B33
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/ru_RU/ConnectionFAQ.html

SHA256 534ebb0da5742e8f3d4d6ac63e3a592a16b0be5cb9e176a76fef55390e497cdc
MD5 cd1fc2b93dcacce724364856642f5dbd
SHA1 45fa0751ca92997fbcb6c8756a5929765eaaf537
SHA512 0fdc7398cf8bf03590e644f813dc6f89f235461a81ae8bcbc8f04e94323d942b5774fe8e286b137b23cdd49fe377ea8ab59fd05cff339c9f2905408dff383def
SSDEEP 192:WUq8Tll8o5CfzIKYdqVgWT5OAUiqYQygUp:WL8Tll8o5CfzIKYdagWT5OA3qYQyg+
TLSH
T16F423332E7080949B0F649E5B0B716506464CB49D30754B5F07BAE7BBCCB8B737C22AA
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/ru_RU/LicenseFAQ.html

SHA256 32f00c8bec1f23633257b4392005ba90a7e42b834a4df60fba608d9204bc3998
MD5 18f37b95232087ef8c493db890833741
SHA1 02af82aa9c96491031bb8cba98fa43ad1e333b31
SHA512 949d5766da99b06eb36f2dc2362517761d1dec2fe073d16bf654cd8691d9d5dc8d45c1c93e497bed65cf37203fe6c6b52823a662fbcc8e2b06f345a50b9b0781
SSDEEP 192:WvUO8Tll8o5UrPKygW2sQWld2IfaFuGGl3oUO0EiY4L:WJ8Tll8o5UrPKygW2sQWOIfaFuGGlXX
TLSH
T10E825122E7180459A0B54DE9B0A7139464A4DF4DA356A474F03BBC7ABCCF4BB37C13A9
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/ru_RU/Main.zdct

SHA256 8d81b9119d8ef2d110814e1868b0aa309660aaad189688b672623c5d90e67c9e
MD5 2ac8175f25b6c25d8ceb9024c5446d87
SHA1 b92ea520a9069ada8f464dffd1cd27d613104488
SHA512 6cb6b3ad75d52af0988a645634a10c8013d604e3dd24931862643739fda3c92315ce2836820aeb53a94f318d8c4410a367f38620c1f844b1e94fcbbd7c22c6ba
TLSH
T116419D0FBABC8601FA4AF3751F628AD72129BB00771945C7428F7E95652D63133563C7
MD5 SHA1 SHA512 TLSH

OBLRes/ru_RU/oobe_launcher.zdct

SHA256 84719a9537b8be5b56b0479bca0719ed62ff84483c26a25d19fb490a7591d2c9
MD5 2fa238214a9ea42e98a7fa510b1fbce7
SHA1 9bd972b80191c888fded18690059a19bbc5e3ad7
SHA512 a5262224d833c63bf66940cc6b7d46c57445d3b0aa37b632876382eeeeadd6a8a90ed88fdd418110c0bd65d1ec72b9272b7926248b71440a65b2223d53bea4b9
SSDEEP 96:6CRdkCMgkCMgkCMc/kCMudkCMydkCtQ0CMmkCMvdkCbkH0C:u33acV5MJo8
TLSH
T171A1000FF6FC8A04F5B363590FB375C1267EBF48A3208589225F9E0D142A7312A68767
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/sk_SK/ConnectionFAQ.html

SHA256 0b5997f50eb51c01088fc72d449d6c60951c2942d718402aa22f9850512a260b
MD5 431690d1164c2933eab308c28f2d59d0
SHA1 53995f6f5b235efd6a46dd4999527e6b504c922d
SHA512 d781ac45b1af3d76d1a3c03c0a79e9d671cc051c1f75f15506dbc9612a546ac7954a00a4f6ea91013ab2edb538efe43e097c48bc8a931b33aa7821fc30b527d0
SSDEEP 96:VJinosPCRu6hatUvmFDn8T3I95Nh6l9ucio5t2Tf4meO/jgRzeWjgRLYTWjgRLq3:XNq8Tll8o5CfzIKYdqVgWRUR5jx4X
TLSH
T1D7424132E7180909F0F745D9B0B212917568DB49934364B5F07BAE6BFCCB8B723C129A
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/sk_SK/LicenseFAQ.html

SHA256 8bdbdfb093c0d54f4b036a52da581e65ad1ede4c6127ccee9cb32eb8d248b8b3
MD5 f60036a731b0787cbc2ca1d57e0fd9e3
SHA1 b50fc083f4c11968d9771775637d510853349e8c
SHA512 5719e06e2a9e874c58df1c1b83e5990c433e519ebffbfa9d18ce7229b0e71667c67c643d3bf4d900c42fb7658e991db21f6e9054ce04b94c875fab111ee975cc
SSDEEP 192:XQUO8Tll8o5UrPKygWOgn8R0OsIof9Yq1L:XY8Tll8o5UrPKygWJpOs119
TLSH
T135824422EB240815B0F649C9B1A312A56468EB4CA3429474F07B7D7ABCDB4FB33D176D
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/sk_SK/Main.zdct

SHA256 f77c65c1f23d98d4abf2310ece993554acbc7f86ac4752306a1933f89fe8685e
MD5 c154ee9bace9e39879001491b1d0b4a6
SHA1 f3a9895e1777e346c79c2f2e7f7de568286a77d9
SHA512 ab3558ba30e27f4333927b9d728339d370f170369afe3b487453941855a70a208323502f0a46fbe728973cb3870bf2aa0af280fb2090b7ea585d629114dda269
TLSH
T10951D492A3FC2542F6F36F0C7D7805660DFF799A6F3DC64E5960058C08F5A8099A27A3
MD5 SHA1 SHA512 TLSH

OBLRes/sk_SK/oobe_launcher.zdct

SHA256 f467f7a4654e6393fe99a22e8738ff331e9ffdba5d2b5823609cc4f15a5b01ab
MD5 d6f8d145d6bf7487e53e4a1ecd5370b9
SHA1 ec9277d30ab9d1fa29ab5e9e52db71c8a60f17f2
SHA512 d0b61db1700fa0d3bb7fe204f71cdfe861def87c2a87e85e0db9a4c5420b2f982250b0800c9e16d90876169bc5011ac9447a22901e361a8c1f94de45de3db524
SSDEEP 96:YU21sw4Co21sw4Cu21Rw4C+21Zw4Cg214w4CT21ldw4Cr211w4CE721ldw4CSQ2R:JPNVPNbiNbaN9LNeedNG2N1edNBQJFFK
TLSH
T1A8B1195272FC6649F6F3370DAAB665A49F7F7D98B938C25D6020425C096BE808CD0B33
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/sl_SI/ConnectionFAQ.html

SHA256 b6f7d4c1abdb4a30802b411778013fca5221d9ad4342c9c8f02aec0fd8636d10
MD5 c40b83453a22bb28bcfd50f02af5707a
SHA1 2a290991c02a7d9498f08792c9962c1f77d5f2e8
SHA512 92b7dd6345f2bf0204c857933e1064a02e0ec53cd9092bea99af91db8e4c817dd3bff3e3e314f645c1226f1a09417570496cb9baec4dc1288aa52307905410dd
SSDEEP 192:X60q8Tll8o5CfzIKYdqVgWlGXsk6b/qEjn:X48Tll8o5CfzIKYdagWlGXQb/Rjn
TLSH
T107424032E7090919B0F655D5B0B212507468DB49D30394B6F07A7E7BF8CB8BB77C12AA
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/sl_SI/LicenseFAQ.html

SHA256 42d47d385651598302ec514164468dd3d1310077e3d12918ad51328cd17ef9c0
MD5 c4ee287898074a6ef01003bdc4a83480
SHA1 d6fd25b8d134f6fc9e938641d52fa8b7e7f6f05a
SHA512 b028165388a88347551baf48756ef4c30d82586080551266f26c743565cbc0538d827e9c999d1957229ea373dcf501399384b12413125ec2fcc57115972471f5
SSDEEP 192:XF0UO8Tll8o5UrPKygWE8i0iggILrmbCfKxYjJTEL:Xq8Tll8o5UrPKygWEFgUbsuYjJTk
TLSH
T18B822222E7190809B0F689D9B0A213546468DB4CA316D875F07B7D7BBCDE9BB33D0369
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/sl_SI/Main.zdct

SHA256 eb40a4637d9ff2276441a95e6a2a7783a7e7d0348ccc5603f189f31d8bb55ba7
MD5 000e66b480a0aa25182676db197c7533
SHA1 ed9276e3072bb6d15c74fdccd0cd4ca5db1905d8
SHA512 2cea0893c4f22ff104c3c3deb5ecd88886bda61c9b3aaaac7a683e2ec746ee3403fb243a24aff5d62ae87f72d60dba1ee0e9eac4c984ffe6e761a5cda5d408c2
TLSH
T1EC515C91A3FC6A09F2F33B0C7DB815610ABF7DA5BA38C60D1574159C08F698195A2BB3
MD5 SHA1 SHA512 TLSH

OBLRes/sl_SI/oobe_launcher.zdct

SHA256 c36aa7d8d6d6f84488f7325f783d43899b166e155be99d5ec3e1d7a318c19dbf
MD5 894e301a1123dd237f2e25c26d04827a
SHA1 54c1326ee6ce7efb7e3db58830232f85bb3dda9c
SHA512 487b835e85473feaa8e7c0299d2f89583ea2b010d3c45020c4de5852e0168b9215ed6fc11f7b2d320d2f787f22e7257c5e5c7c6005a5950fdaef2a406c2c1cf9
SSDEEP 96:YKnCJJgJCJ3gACJXNCJBtCJSRCJKnCJb15CJrOtCJJseCJb:HXJxAU6jlmeWze4
TLSH
T1C1B11F55B3FC2609F9F73B0996BA71981E7FBDA4E934C15D2225419C08B7E8189D0B33
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/sv_SE/ConnectionFAQ.html

SHA256 4d85b35a88d1c89e55bca62ed63f50321ffa3aa662dd64e1beaa4fcf54df81d0
MD5 a25744a45c839944f15cde6b5a78eb27
SHA1 cc8a0ee2db6234d6d116ecf9bd70efda578941d6
SHA512 1d2ecf0a0fc842e39b5b8855d9eba81d19735d9414ac29da10cee16a0294e1035fb9540874bd36848b831fd618fcdc6013d69544fa7f2bbdc208506c50eff3d0
SSDEEP 96:VJin+sPCb6hatUvmFDn8T3I95Nh6l9ucio5t2Tf4meO/jgRzeWjgRLYTWjgRLqbE:dsq8Tll8o5CfzIKYdqVgWYW3O3
TLSH
T160325132E7180959B0F245D9B1B212917868D749A31354B5F0766E3AFCCB8B733D22AB
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/sv_SE/LicenseFAQ.html

SHA256 f6b4e30b83efb069d8f3521cf2aa418386b34d21baafe4d5909c571e07cd4bf9
MD5 2a35f75ba35605e5e7498beed3f522c1
SHA1 c793d9eee87d6cb146cc5992ef6732de87a213d3
SHA512 4c70d75bf8387af5059f632dd9f5a75031aca393030940f4928b7d58ae8838b0786ce5ea61dd9cb63f4d8ec26e83ebc3dc035f284df77981fea7fe9443644136
SSDEEP 192:dTUO8Tll8o5UrPKygW6pPz75H1QmnYLaFPtsCiKq6kSL:dl8Tll8o5UrPKygW6pPz7tCaPsC/
TLSH
T11B825612EB140855B0F649D9B16213D46498EB4CA3529874F07ABC7AFCDF8BB33D136A
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/sv_SE/Main.zdct

SHA256 5e957ceb39268884a84159c8715c62a868eebc67ffd0850f716a35f1393fb270
MD5 ae0e97099d5cece119ec741bad2b3728
SHA1 3d10bb21e7e4c3f3a58e095b86b3953c03098858
SHA512 3258a2383f413a278b4901eaf6340fe17344e8e44a939ff1bb464ba216f9743b9e030da31b57b085b0a410b35fd2c12f96fb879480f0005247cb5386eac4100f
TLSH
T121411340B7EC1B2EFAFB2B357DB543615DB5FC85BC79E60E01001A5C093A984A8B4B66
MD5 SHA1 SHA512 TLSH

OBLRes/sv_SE/oobe_launcher.zdct

SHA256 ea735c41e0ebf8288ef6e1dcb7fd9e00c2cf0270eab05506bfb6028e55d0d0f2
MD5 07fb47412c0939ac2ad1dd02b3df68fb
SHA1 03251c7e1aabc89bc5ca43f7d9028b4e28b6d90a
SHA512 4cb871b7e4917be69bb2fe00d3f46b3aa5e62ed49ba086021298929b95115ce09f8f81567662074f1510f41a5c090f617ba004264f1ef9ff83ee969f6247e359
SSDEEP 96:37TOFCLgrOFCLgrOFCLgd9OFCLgnOFCLgjOFCLBUOfCLgWOFCLgROFCLg1OfCL:Xys6ys6ys+ysuysqys+MsfysUysAMs
TLSH
T128913E16B3FD5609F8F32B19AAFA71802F3E7DD19979D29D2650150C0C72A8589E0B37
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/tr_TR/ConnectionFAQ.html

SHA256 7feb4693d6e87e3debcea47c2a1cdb9c8997c4aefdda73704985f4e3e2b3ef56
MD5 6ce2480836f738d53762df31b44656a6
SHA1 1d83ade7b0a3910a5b9c5525a287362a7b910854
SHA512 e3a0f75ded0e3d8ba8b87af53cd7e85f9f62f903b33e54f3162e24eeb43abc386d321aaffa428fcbed7ab44cea74d3be16b8a54884a9cf5a64cd009020819987
SSDEEP 96:VJinMsPCH6hatUvmFDn8T3I95Nh6l9ucio5t2Tf4meO/jgRzeWjgRLYTWjgRLqbF:L4q8Tll8o5CfzIKYdqVgWbGx+3TOC
TLSH
T133323121E7190509F0B645DAB5F612617468CB49A30394B6F0767E3BFCCB8B733C226A
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/tr_TR/LicenseFAQ.html

SHA256 fb323e39ea7472a648d00c1a7404a3afeb025411a14067b035ad8951ff349125
MD5 83286e3c30b67bc883669f59541dbbc8
SHA1 17c923ffa9061b7cb3b4da6b01f580c7a05b2474
SHA512 7252eab032f5fa2d6a08c76443a9cc2938ce4ce1864345c4adc029a4ec29f7cc9d416edaea008f3bcb0ad64f56a6070b96af7e841ae6c1d922617b5db385dcd0
SSDEEP 192:LTUO8Tll8o5UrPKygWNQYOug6icHFMz4/BBbtgQZeL:Ll8Tll8o5UrPKygWORuDicHGEBltgS6
TLSH
T188822111E7290409B0F64AD9B0A313A164A8DB59B3129475F03A7D7ABCCE4FB33C176D
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/tr_TR/Main.zdct

SHA256 c3731ed627fa35a385afa56c55e185334616be48f0514e63ab0d6a943ccbe067
MD5 ea8d9e6d19b15cd3bcdfd7193fa74173
SHA1 68037a4e727f46e1d46d8386e2b412c1d1ac1917
SHA512 39c43a30928c352da6914adadf0f1fe3468c3219291f41b0577c5e01275e9326882fc18f51e44eb461ad546507b25a0ccf73359df4c5d407b57179413794b8e5
TLSH
T12A41070467DD5B47FBF72F3128B563934BA1BCF1F834960F125162244D366C068A5BB2
MD5 SHA1 SHA512 TLSH

OBLRes/tr_TR/oobe_launcher.zdct

SHA256 185005fba4e1058b308ace7e00efb8468d389790378bb9b49e28b13cd4fbff57
MD5 37804521abeb16fb891340878ca4a545
SHA1 53f34f4dccbbc9cec1d398e76634f45d9d3ade03
SHA512 d435593938d66891cf412f20048ecca5954b3c772e5b4a144b729c874620bb3fdee6d3711f76dad7dbeb10ff04921f3d808c80480cc21f61ac56d8a45065c734
SSDEEP 96:Yn0GC7w0GC7w0GC7A0GC7qX0GC7e0GC7ihU0oCh7VX0GC7WD0GC7d0oCh7:HGCGCGWGFEGAGdFoQVEG9oG5oQ
TLSH
T15E918105B3F96609F5F32B1D9AF770552F7EBDE6E83586AE226012580837B8448D0B73
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/uk_UA/ConnectionFAQ.html

SHA256 03384fe14b474dca02cf473c356df433de5dbb895ec9f9b674c1cec2d6f802bc
MD5 ce5f0c53eb33f88713b247e8177a2cca
SHA1 7ff972f3f584e3efcdbe0f17d7e491b4b965aee1
SHA512 e628681ce033901ecd2f5719aca90391accdbf2d1cb7652c60f087f824bf102676d283519f2ef2d5d895e572910ddc7bd4b06d3a514145e1575ba0788affeb39
SSDEEP 384:Wh8Tll8o5CfzIKYdagW8kDHlH5RvvCJtc:Wh8Rd5C7EeDFLktc
TLSH
T199424332E7180949B0F649D570B612616464DB4A930364B5F037AE3BFCDF8B737C16AA
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/uk_UA/LicenseFAQ.html

SHA256 6941ca5904160347834095432c7c54bcdf597fd10ed7a155d04a17a6871aa146
MD5 36f5371c7c4380aaaa0f0d855269fe9d
SHA1 f08e6f2b69b34d6f044292b7f703efd434faab9a
SHA512 d270080aae9f9938ce0c8c271397f746765d10b4c12dd58fc8951065601cd3c37b889edb11aaef317133d0b1d0aae0afe66aacf590819ad5a9528245f6b4963e
SSDEEP 192:W7UO8Tll8o5UrPKygWBvJPhVdeP9evFpiPfXRwzJra13eL:W98Tll8o5UrPKygW7hPQ9upiHWEA
TLSH
T1A6821322E7280449B0B54DD9B09613642494DF4DA35698B5F03BBD7AFCDE8BB33C06B9
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/uk_UA/Main.zdct

SHA256 264d1b8d05eb495681646f6f4aae1e845ebfc81ced2acbab215e1baf9f45b2c0
MD5 632a670978290313d55f2985ea0baf44
SHA1 60aae2905936b7ef343eca1fef82af4f4237b9cf
SHA512 1e9b1e2d0ce819d5cac40141addcb3cb0e4ed37dcf8a3cfc7518ba3dbf62100eb80253517302134798cc5e39c5cb5f744f1942ae273d6fc2d9777fd0870a791a
TLSH
T11D51BB0FBAB8E604EB9EE3754E52CADB1074BB0023A946CA624F7E30543E67133516C7
MD5 SHA1 SHA512 TLSH

OBLRes/uk_UA/oobe_launcher.zdct

SHA256 97d7cfc3d089af050f2d39473c45b04ca5a980445cd55e926d995efb6a30f5b9
MD5 f7bf7d15ea282fbccf3061f45bb748a3
SHA1 167a77f68d551a4f7ad7c82f95b81dc99379fbf5
SHA512 e0eea6efcfec0425b47e32b9b3ca85e0ddf059a72115cbadece46783df9f62a2344d3a89c48ba6f7665a4598ba3817f45d48e83e4b954b343114da7e746c8264
SSDEEP 96:WfND19CI4019CI4019CIu8Y19CIt19CI019CmH9CIJY19CIG19CIvtr9C:SB2K2KcrPUpyqlT
TLSH
T1D0A1040BF6F8A604F6B3B3195AB370C52B3EBF544764C2C8311F65181426B346BA8B67
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/zh_CN/ConnectionFAQ.html

SHA256 0ad1c9866ce567352444b5afdcd8048ced98ef1384d3d30015dc167c63c3aa3a
MD5 5c2740d52ee7cdc266065daa1ef0cf97
SHA1 c590279852c23eb504c840c15717c3b9fe796b61
SHA512 20cd4d1d0d5be53a14ad01feee69a89bc36e328b6787413357b00410a9ef936ffa30921b7ebe1c82fd6ee7b60e856753fe51a406d3d092c16523bed1daa73876
SSDEEP 192:p5q8Tll8o5CfzIKYdqVgWe/D90td8hRLu:pU8Tll8o5CfzIKYdagWFD
TLSH
T1F9320032E7190519B0F695D5B0B312507458CB49A30364B6F077BE6BFCCB8B767C229A
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/zh_CN/LicenseFAQ.html

SHA256 cbabc7c287a76be346a904c1cdb6612b80ecbd458df6bf183a1f8c4801b764ee
MD5 8f843d8ee8bf8d6bc72fef59ac2c5783
SHA1 73e7a5b8524d292d82fa52f3efa2c30fb76e4333
SHA512 7d3ea32923c61f2d62eabfe7cc4a38da5d18d960ff451f6c8e3fbccf99e6a9fbda2ae11d9e94c3a62dc908f46af8f5e480aee4c9fbf61df562f20eb29a54025b
SSDEEP 192:puUO8Tll8o5UrPKygWet0LHUWU7r/QX7tQv3uW:pK8Tll8o5UrPKygWe2LRLtc
TLSH
T198720F22EB290405B0FA49D9B0A612946454DB4CA3069475F13BBD7AFCCE8FB33D13AD
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/zh_CN/Main.zdct

SHA256 dea6a42f75ec633be2bd1515e1515f55d89104d8c1fac295a49d76c7f7c5bb83
MD5 658bcc1f0bb9e615bf83c2358f3bd71b
SHA1 e64d35e5f8a5a8474a08a40f56edf06a106871ed
SHA512 eb372363582dc41fc39708e7e44e10fe2f99513d3fcb1c8274b5ebeec5e8448a012b72fcfe988b0e898d2f80592c057309e60fedd4d9b88aaba3fd404b6bf333
TLSH
T19B21DC2133E15B12D7973332E56A938BE376F811B959080BA588DB905F0FA8272527CB
MD5 SHA1 SHA512 TLSH

OBLRes/zh_CN/oobe_launcher.zdct

SHA256 98cabb3267cac0ab1c594e5fb339ab9e9666214d897bde1a8fc6ede6c0218d76
MD5 90f64ecdb0f096f65e61013f4069903c
SHA1 5b4af1a31e79a8f68d384631ab78145b72598c0d
SHA512 79e76401423713b04d45da95998a5316dbaf0838746b2f15fafaaf68f290ed923bb4aba53ebd901b4590d05462a50ab3b4f33151ddb51d94fa15d6cd8541ec91
TLSH
T158515D06B6F86609F5F3732F6BB7B4846F3EFE55506482AA2A30490C1927B454C85B37
MD5 SHA1 SHA512 TLSH

OBLRes/zh_TW/ConnectionFAQ.html

SHA256 93f8aa1c3d53257ab6eddeb543fba8b024f0a99078629905fda55f5e63b2dd1a
MD5 988f358398bc118540499638ba979d62
SHA1 2ac7f13cb613e715b8030f0b86257b03af86f55b
SHA512 5408c53bfc985666373603e396d156d9b4807281c9712b132390b19494a02fc1fd1fa6043a85494301ea61dd98d9e36ee9c5423e12a00ceb84ed162031cce337
SSDEEP 96:VJinpsPCP0hdtHvFKR8n+x9LEZ6l9ucio5t2Tf4meO/jgRzeWjgRLYTWjgRLqSBP:mAE8n2l8o5CfzIKYdqSp82eV/RJaF
TLSH
T1A7322031EB19050AF0E359D5B0B212616468D789930394BAF0777E7AFCCB9B733C126A
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/zh_TW/LicenseFAQ.html

SHA256 83f30bb1a993fb070736b390c85f355af4f7d12e73ba489274bd6199f5a9fd8a
MD5 522a9bd77691d5677fc3d41959404641
SHA1 252f51c6ec3154cf62755c813741ecff54e8031c
SHA512 18cd6b9f1bd4310cbbee20f600b62255a9ea33c15a63f2276130f48f0a9e0b211c16d1b81adfbafcf526e389f909a426f478aca7181c4a1f45b6ae6746e0f6bc
SSDEEP 96:VJinpsPC+0hdtHcdFjjF8n+x9LEZ6l9ucio5tkPlWjgRLPeWjgRLpBv8Mr6RTNwm:mNYB8n2l8o5UrPKpp82cqGt/9oK
TLSH
T15672E122EB290405B0F649D9B1A212A46464EB4DE35254B5F07B7D7AFCDE8BB33C0269
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/zh_TW/Main.zdct

SHA256 7094649957148bfcaf4a700c30d1ca54f04d931cc79792828b0e0fd5a335a863
MD5 f601e048fb8bf6dea6e2402c05bb5f60
SHA1 113150994bfb97dd83f944d29a241fdbe4118605
SHA512 ced6807c1ac20861b06ffc65a6471f11c01a3e7c552266b910974d89cce8bdff325affa47044488d0ecfc417b54475859034b56ea323c44b3e94cd14a88f36c0
TLSH
T11E21AF0433E80F56EFA7733A61A693ABC571FC01BADA0A0B6184C754CF5F98134907DA
MD5 SHA1 SHA512 TLSH

OBLRes/zh_TW/oobe_launcher.zdct

SHA256 b9067b2e2a01746b4a8e9952ae095889d621ff15ba5e35e50402132916f79a17
MD5 f044d0241f854d4a078dc0ebae71e34c
SHA1 80b4e93dcb61f7c19ed824c4f5607d37aff8341b
SHA512 368072115ab778aa4060345469bceefd3af072c8271af4953f1ad0b4bc28c4e50442a402b2537d675e27e4d5eea5801f2e615c974c042b5bda67f299ca3c382d
TLSH
T1D461510AB2FDA649F5F3732A5AFBB0913F3DBEA95464C2ED2234460C1817B150990B37
MD5 SHA1 SHA512 TLSH

PWAFlex.swf

SHA256 6622b80883566082551c280cafa6e9b32ff6d70237cb8ffeba29257777ed0f9a
MD5 c9b2eb3798b4227bf3323f4616c832be
SHA1 e07cdeb705c09136b66487f2b33f21813d0ee5d9
SHA512 b70299211d0012eacf13f60088c3a9bc57f18a85c21576f2aa465fdb87a3c71e54859e1ea27a195abb5fa5346ae6b63b817082c02adb9305aa97b3fd68c4d6a7
SSDEEP 24576:bngUIU4D9TjvP17hT+Ph4RjOcgKCKFzSZCv9cHWfiZnVi:bngUI/9HNVSPh4dOSCqSZa9cBnU
TLSH
T16A2533A9CE361B59A0C77395A24B6CC58B80D2FB09423902F05456AD2D8507FCDFFA9F
MD5 SHA1 SHA512 SSDEEP TLSH

PWANative.dll

IMPHASH 5e8f605ed2c42b8108626c6a95e590e5
SHA256 05ab097d5a51329ff32d320311e7f36c401d0541361325df379246b948df86b9
MD5 d64acc955bd5b639719d20b79bc5860b
SHA1 93d01b1ebd1201afc6d8533134ad71e76ba0a55f
SHA512 d2f44a557c27a8f6160b5747768cdb0a88aa7770b0002822847075970b460756b1450df1dc30138458f289818a7f83e0edfb55258840e67ba7fc70f3dd9947da
SSDEEP 12288:IB6be0jzZZeZs7ili7egGu7msoSCZQZcFR7lYnz6R+LpG3/9yj8:7bVZZ0s7iYGuYSDcFJlYn7Lp6k8
TLSH
T1AEF47E52AAA1C139F0EB12B1967C1FB74C39FD32173584C772C459589E70AE2AA3D327
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

8d:67:8e:b8:49:a3:8c:0e:09:fa:64:bd:71:32:ed:ab:da:d1:02:7c

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Chains

Sep 20, 2012

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Serial Number

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 1, 2012 - Dec 31, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Serial Number

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 19, 2012 - Sep 19, 2013

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

1

Major OS version

5

Entry point

504379

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\oobe\3.0\c3p0\dev5\target\win\Release\PWANative.pdb

kernel32

WriteFile MultiByteToWideChar ReadFile GetFileSize WideCharToMultiByte WaitForSingleObject CreateProcessW GetModuleFileNameW Sleep GetTempPathW RemoveDirectoryW InterlockedIncrement InterlockedDecrement lstrlenA CreateSemaphoreW ReleaseSemaphore GetCurrentProcessId CreateDirectoryW SetFilePointer GetDateFormatW GetTimeFormatW GetLocalTime FreeLibrary GetProcAddress LoadLibraryW LeaveCriticalSection DeleteFileW DeleteCriticalSection InitializeCriticalSection GetCurrentThreadId GetVersionExW AreFileApisANSI SetEndOfFile UnlockFile LockFile GetFileAttributesA DeleteFileA GetFileAttributesW LoadLibraryA QueryPerformanceCounter GetTickCount GetSystemTime GetSystemTimeAsFileTime LockFileEx GetTempPathA FormatMessageA GetFullPathNameA GetFullPathNameW GetDiskFreeSpaceA GetDiskFreeSpaceW CreateFileA GetCurrentProcess SetFileAttributesW CopyFileW lstrlenW GetACP GetFileInformationByHandle GetTimeZoneInformation CreateFileW GetLastError FlushFileBuffers CloseHandle LocalFree FindFirstFileW FindNextFileW FindClose EnterCriticalSection SetEnvironmentVariableA WriteConsoleW SetEnvironmentVariableW CompareStringW IsValidCodePage GetProcessHeap SetStdHandle GetStringTypeW LCMapStringW GetConsoleMode GetConsoleCP HeapSize GetOEMCP GetCPInfo GetStdHandle ExitProcess HeapDestroy HeapCreate IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetModuleFileNameA GetStartupInfoW SetHandleCount InitializeCriticalSectionAndSpinCount GetEnvironmentStringsW FreeEnvironmentStringsW GetCurrentDirectoryW GetFileType RaiseException RtlUnwind HeapFree HeapAlloc DecodePointer EncodePointer HeapReAlloc FileTimeToSystemTime FileTimeToLocalFileTime GetDriveTypeW FindFirstFileExW GetCommandLineA IsProcessorFeaturePresent TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW SetLastError TerminateProcess PeekNamedPipe

user32

wsprintfW

advapi32

GetNamedSecurityInfoW SetNamedSecurityInfoW AllocateAndInitializeSid SetEntriesInAclW FreeSid

shell32

SHGetFolderPathW SHGetFolderLocation SHGetPathFromIDListW SHGetSpecialFolderPathW SHCreateDirectoryExW

ole32

OleRun StringFromGUID2 CLSIDFromString CoTaskMemFree CLSIDFromProgID CoCreateGuid CoInitialize CoCreateInstance

oleaut32

VariantClear VariantCopy VariantInit SysFreeString SysAllocString GetErrorInfo

shlwapi

PathFileExistsW PathIsDirectoryW PathRemoveFileSpecW PathStripPathW PathRemoveBackslashW PathAppendW StrToIntExA

RNResources/Dictionary/cs_CZ/stringTable.zdct

SHA256 9c623dcbf491bbb77bde3eda26fe83501988006b0e4e43b48e1607934e5d166b
MD5 1343403c9fe3628f008daf3d2a96ce00
SHA1 0c2c442139ba236b0c348c3a5e564626eb26e1c7
SHA512 e3836e403d44e961cc579a5bfce34c3e2e1a9547d7c1d26935a3fe3b0b6ea146fa80f525d8fc99274e6cf34535cc0fc88715fe1a981991ed2b26aa819a4ce0c0
TLSH
T1F0F06D022BF5069AF3FA2B247ABD1CA816BF3C655A38C68E1455424E48F4B90D290767
MD5 SHA1 SHA512 TLSH

RNResources/Dictionary/da_DK/stringTable.zdct

SHA256 3be23cc20941eecaa5f7d3d98a9f7288ca615cd898a65254a3f2120fdbd61956
MD5 cfeca6867f2558774c796940d25241d8
SHA1 8ff2751522ab0923b1e50cb3191df1fc8859bf07
SHA512 bb890d8cbc7d7433908ce9bf9a878bafba20cd0866ffb6eb79f16d168baa7ea2669497ec9181a7f09680970376e735729b5c25d47adf06a476246cfd7b56c94b
TLSH
T1A0E0860217F5864DF3F21720267D6C5917BF7C9A6634D45D1194150D4CB8B81D690BAB
MD5 SHA1 SHA512 TLSH

RNResources/Dictionary/de_DE/stringTable.zdct

SHA256 10934bcff7f14aab6da5cb9c6abaa3d690a5b7cebc4bb305cb739a145b7976da
MD5 55657430710168bbc0583014e1e86233
SHA1 0816361f34f7b1fbc43bb67508e86206a0428974
SHA512 5c0a1d7c0c3a9f4720b69ef2d6f6bac4ff19542de62df5772f1f5e929998685ffb350bd55b667efd1f49e8fe4bd542d0fd4d12d581fc1edad85acf22bf184ca3
TLSH
T1D0E0DF024BF60559F3F227247FBE5C690B7F7CAA2938CA5D0448090D44F4A80C990B7B
MD5 SHA1 SHA512 TLSH

RNResources/Dictionary/en_GB/stringTable.zdct

SHA256 f530b3336e21d1a0f60f2ce1c8b1f2f42820225e9bd0937961a4784a8615cb19
MD5 ae8aaffb4e2667774abee147715adcd3
SHA1 0b6a6cdc70e979cc35efde075d2294d652dadcc4
SHA512 647c28fb722070f53c9881672710379f2271adec0c80d111de00c4b1ae362aed54a91bec451b684e216b309e46b933058cf6f2edd4c985f01a5fd3248ac66502
TLSH
T154E04F0267F94149F3F33A107B3D6C791BBF38965A38D18D0055054E48F4E80C950B67
MD5 SHA1 SHA512 TLSH

RNResources/Dictionary/en_US/stringTable.zdct

SHA256 f530b3336e21d1a0f60f2ce1c8b1f2f42820225e9bd0937961a4784a8615cb19
MD5 ae8aaffb4e2667774abee147715adcd3
SHA1 0b6a6cdc70e979cc35efde075d2294d652dadcc4
SHA512 647c28fb722070f53c9881672710379f2271adec0c80d111de00c4b1ae362aed54a91bec451b684e216b309e46b933058cf6f2edd4c985f01a5fd3248ac66502
TLSH
T154E04F0267F94149F3F33A107B3D6C791BBF38965A38D18D0055054E48F4E80C950B67
MD5 SHA1 SHA512 TLSH

RNResources/Dictionary/es_ES/stringTable.zdct

SHA256 f81f26127ff33cfc740d0ff5af7538c754ba896d7c68b6c5762cb25da1e35df4
MD5 3f3bedf19ef2ab8669b6d64168664875
SHA1 904d19a3f4427e074b2c1955b7989e78918f5f6a
SHA512 7727943ac9c1845828a4c61fc4893b453663ef48c3ea74fb499b2c4200b14d0843eb6162fe534d5474a7b13257d7b1551c17bfe14a2813292a4fbed760472057
TLSH
T1E3E065021BF91245F3F33B10AA7E1C688E7F38969D38D04D1084040E98F4E80CAA0B67
MD5 SHA1 SHA512 TLSH

RNResources/Dictionary/es_LA/stringTable.zdct

SHA256 f81f26127ff33cfc740d0ff5af7538c754ba896d7c68b6c5762cb25da1e35df4
MD5 3f3bedf19ef2ab8669b6d64168664875
SHA1 904d19a3f4427e074b2c1955b7989e78918f5f6a
SHA512 7727943ac9c1845828a4c61fc4893b453663ef48c3ea74fb499b2c4200b14d0843eb6162fe534d5474a7b13257d7b1551c17bfe14a2813292a4fbed760472057
TLSH
T1E3E065021BF91245F3F33B10AA7E1C688E7F38969D38D04D1084040E98F4E80CAA0B67
MD5 SHA1 SHA512 TLSH

RNResources/Dictionary/es_MX/stringTable.zdct

SHA256 f81f26127ff33cfc740d0ff5af7538c754ba896d7c68b6c5762cb25da1e35df4
MD5 3f3bedf19ef2ab8669b6d64168664875
SHA1 904d19a3f4427e074b2c1955b7989e78918f5f6a
SHA512 7727943ac9c1845828a4c61fc4893b453663ef48c3ea74fb499b2c4200b14d0843eb6162fe534d5474a7b13257d7b1551c17bfe14a2813292a4fbed760472057
TLSH
T1E3E065021BF91245F3F33B10AA7E1C688E7F38969D38D04D1084040E98F4E80CAA0B67
MD5 SHA1 SHA512 TLSH

RNResources/Dictionary/es_NA/stringTable.zdct

SHA256 f81f26127ff33cfc740d0ff5af7538c754ba896d7c68b6c5762cb25da1e35df4
MD5 3f3bedf19ef2ab8669b6d64168664875
SHA1 904d19a3f4427e074b2c1955b7989e78918f5f6a
SHA512 7727943ac9c1845828a4c61fc4893b453663ef48c3ea74fb499b2c4200b14d0843eb6162fe534d5474a7b13257d7b1551c17bfe14a2813292a4fbed760472057
TLSH
T1E3E065021BF91245F3F33B10AA7E1C688E7F38969D38D04D1084040E98F4E80CAA0B67
MD5 SHA1 SHA512 TLSH

RNResources/Dictionary/fi_FI/stringTable.zdct

SHA256 9f44ab523bad0a4b47209df507b07e24511f2d3ec07a30401ecc9c556fe3b7f6
MD5 e0746c79d5d567b0d15b3775d8b9e707
SHA1 e9c4a9399cdc5679912e95bbba0afa6215acc198
SHA512 94a96dd1a6f6c1f077aed918f15f969e881eb3cf3fd0daa3f81526897ee1026d5103ddca798cff36bb06bd4cf7bd4f41458628da796fffa8451041bdebdb1218
TLSH
T105E0920303F94769F3F26B147B7D9C680A7B3C561FB9D55D0944144C84A4990D560B7B
MD5 SHA1 SHA512 TLSH

RNResources/Dictionary/fr_CA/stringTable.zdct

SHA256 6110946cf7543309536a57f869f64846e246d491303c0b9a987b3fc27e47ee6d
MD5 004e692331094347dcaa8f956ac33fb6
SHA1 4368830a382b98ef1a18bc45f06dbb3fd0376b31
SHA512 2657e6df87a3e4a554ffb91de298bf609722edb228f12352a44f8e36559bfa2fe97f2957d7c1530976b73231ed42593db35b3ac73f9720c4f17933d3aac6a71c
TLSH
T1DFF06D02A7FC1645F7F32B106BBD6C284B7F389B8E38C09D1469658D58B5E50CAA0767
MD5 SHA1 SHA512 TLSH

RNResources/Dictionary/fr_FR/stringTable.zdct

SHA256 6110946cf7543309536a57f869f64846e246d491303c0b9a987b3fc27e47ee6d
MD5 004e692331094347dcaa8f956ac33fb6
SHA1 4368830a382b98ef1a18bc45f06dbb3fd0376b31
SHA512 2657e6df87a3e4a554ffb91de298bf609722edb228f12352a44f8e36559bfa2fe97f2957d7c1530976b73231ed42593db35b3ac73f9720c4f17933d3aac6a71c
TLSH
T1DFF06D02A7FC1645F7F32B106BBD6C284B7F389B8E38C09D1469658D58B5E50CAA0767
MD5 SHA1 SHA512 TLSH

RNResources/Dictionary/fr_XM/stringTable.zdct

SHA256 6110946cf7543309536a57f869f64846e246d491303c0b9a987b3fc27e47ee6d
MD5 004e692331094347dcaa8f956ac33fb6
SHA1 4368830a382b98ef1a18bc45f06dbb3fd0376b31
SHA512 2657e6df87a3e4a554ffb91de298bf609722edb228f12352a44f8e36559bfa2fe97f2957d7c1530976b73231ed42593db35b3ac73f9720c4f17933d3aac6a71c
TLSH
T1DFF06D02A7FC1645F7F32B106BBD6C284B7F389B8E38C09D1469658D58B5E50CAA0767
MD5 SHA1 SHA512 TLSH

RNResources/Dictionary/hr_HR/stringTable.zdct

SHA256 c85427f9079de1967eedadeba99dba4085b0744d9f0bc2a8ffbdfa9d1c8c6dbb
MD5 e3bfdbf13a50074ed9f8390b5602a334
SHA1 fafc5beead9431537cb2caf8d33b42a1b6c3aedd
SHA512 b6b3622d9885e52bb809883077d774dac175adc898191b0736fb5aef8b1ee25bb5634451afc730effbe8f9c77a709431241b48e63a51936cd95b0d559515a2d0
TLSH
T187F0ED0257FD4584F2F67F14A7B95C69067F7C69AA38C14D4190054D88B4ED0D5A07AB
MD5 SHA1 SHA512 TLSH

RNResources/Dictionary/hu_HU/stringTable.zdct

SHA256 e677cfcc503f40e442d5243e7b0e58bd5266767aab4272197f335855628ee785
MD5 99254b07bcf7132269b92554f748d108
SHA1 11154d4cd89ff2fa4a05f5bc9d6ac17da9624fa2
SHA512 5cb5e62b6d17ec33736d418e8c4a66639ad9e9c15b36d6da6392fe519a84e43cbd6733bab7798ea382fe78ff9f487adb333b1f808c669de6e958ff2602169323
TLSH
T192E0924243FC064AF2F76B21AABDAE59023FB824863CC14D5144160D4CB0AC4C550B67
MD5 SHA1 SHA512 TLSH

RNResources/Dictionary/it_IT/stringTable.zdct

SHA256 f1cecfb9cd48f9494fa0db6a253278a2884fe73e28d1780ff2b492bce1223580
MD5 329aec272e7da41553b7d027e0ed839f
SHA1 2df033007a9935587b4ceb41638bd81034ae32c2
SHA512 c8a11e0dcf7e5e6f615213e760ce060245585088f9bf3d4f0c6248268ff8781c641dfff961c26ea8f761090f4079eba888d07850d67c5a55a5704b1b2ca14ff6
TLSH
T1E8F0D80117F81149F3F67B146B3E5C684B7F7D6A5E3CC04D0454044E54F4D50D9A0767
MD5 SHA1 SHA512 TLSH

RNResources/Dictionary/ja_JP/stringTable.zdct

SHA256 d5c0bb11c4c5bd9852a036eebee5288ce93f79c7dd43ca7d6d7af37b454a3181
MD5 7e1846494b51ac2f9ac4626149176086
SHA1 d5b39b454c66d2a2c84d09c4ce1828f9a5bbb892
SHA512 594374a13fc68671d017fde8d99f032eeedbfcdfa493e395cd7bfefa6934e07603f8784e1ecd4b3432ea08f4f456dc007bd6ba46494417aee033ebe4007b5e76
TLSH
T13CE02E0207E8048DF3E0662A13BEACBE0BFFB4460A3CC4A910D5010D44E8A80C2A07AF
MD5 SHA1 SHA512 TLSH

RNResources/Dictionary/ko_KR/stringTable.zdct

SHA256 d43a249da31c47770a71138cf924d2785cdd5d7dd6b65c87d24833ec70b1d3ee
MD5 8425f3ce7b93deee9b82823286d8d43c
SHA1 e4dc3387e6661c841dac4e3019254c9b81fae0b6
SHA512 d61da55a3f75779a2bbbdf5bc5bb2dc969e34fc127f0b8c5fec6367848395f864cce13cd6d6211d2cc63324f7e59af011dc7aa101de3e6746bf9252513a194eb
TLSH
T18AE0CD6257F54845F3E1D717137F9CA907BF34180729D05F94401A0E40F0AC0D1503DB
MD5 SHA1 SHA512 TLSH

RNResources/Dictionary/nb_NO/stringTable.zdct

SHA256 b8d6b814dde112411c3d021026fecc1109d753f902b9ecd6f35d38b40291ccc1
MD5 457c42a2411b7d61e79d9bbebc250fbc
SHA1 9284a763da71c28fc71e5e0061135a7bff2e354b
SHA512 364449c1aefd8be89f54b1222523afef4622dea7f8081dc523aea3cc50b7adece04727fb61f371b7b78819c8db12bae0ad44066bb1a551eb2cc37ff5a273f579
TLSH
T1F9E04F0243F5414AF3F326243EBE6C6C067F7C999A38A55D0190050D18B4AC5D2E0B77
MD5 SHA1 SHA512 TLSH

RNResources/Dictionary/nl_NL/stringTable.zdct

SHA256 0ff938e7c28e8e55e4fcfe6e765f47f042112855f0f144dba6bb5cd5a8ca5896
MD5 8e7721f3895e76c322983a6913130279
SHA1 958145ae60280babecfaf81bb4679fbe26b29b63
SHA512 308ab2bee089a48ab7946e5afce8502c0b6702a8271a1d8a54334e428cb940e07c5dd1c3c4448680d9d84d8bd2641571a42a920c5d93f37f506b8d230189a91b
TLSH
T1DAE01A4207F94649F3F257256FBA2C68073FBCDA6634D49D0590154D48B5E80C6807AB
MD5 SHA1 SHA512 TLSH

RNResources/Dictionary/pl_PL/stringTable.zdct

SHA256 a36873918825cb5ff6c25fdbfd0d416e254bdb7465f78cb27969321cbaf67533
MD5 4034159898cd7fbe289f00dced1576c3
SHA1 49918bdc2f974261625b5b23f06a869aa17ac115
SHA512 ef82165c3946c7fe20ef4b9efd20c2be5d5cc9d4a46d681947b2b6d0de734f04e8207fce3711199e7922cc880ae7d2c370056c65b068de4c3977204fb66644cf
TLSH
T1E9F09B1303F41685F3E61F14E67AAC5C473F78296738C08F6461600D48B4ED4C550B67
MD5 SHA1 SHA512 TLSH

RNResources/Dictionary/pt_BR/stringTable.zdct

SHA256 9ff9393941e7d0b140c0a593c8f8b1d96ab39117f1af347384905fda6577b212
MD5 a9f275eef37122af44f2423b292bee81
SHA1 2d66eabb6ef5bb3f495d0727e647d9b3dfbf555e
SHA512 554d45cfbb9ade2d3819ecee9a66ebf60f9b5c5737297e650f1ece9940bb1aee4b068b7de5cfc2d491172a05946c9ec9e16c297c85f1045880cdf9a0b2c07408
TLSH
T1CFE065026BFE1286F3F32B10AA7D5CA88FBF38566938D05D0484050E88F4E80C960767
MD5 SHA1 SHA512 TLSH

RNResources/Dictionary/ro_RO/stringTable.zdct

SHA256 ff8e1e8e4e7f89b71d7d859256795dc99a0a83be2d8b294951620b1836154c24
MD5 0ae67189920986f0839f459bbcbf465c
SHA1 768c4878e020ab6bd7a3d822d05ac53c8b836c6a
SHA512 8719f41ad78030f7630ef529d7d45cf5e1475054801c72a6dec3c4551d38f849ae2eec3101d7265d330af2e74c9c4c8fc4c8ae8c8c7dbd8ed6f6a13e3b09a1e7
TLSH
T19AE06D435BFD2606F3F32B247BBD6C680ABF39165A3CC15E1050050E48B4E84CA90B6B
MD5 SHA1 SHA512 TLSH

RNResources/Dictionary/ru_RU/stringTable.zdct

SHA256 6e808d1b4f74f07df14d0afda70da0999fabb439f095a04bec633877a99c13ab
MD5 49c6ac10605762bd03e842300816b668
SHA1 a20601f4b929f2a1877a7464067dc93c0a6beff1
SHA512 3342b468d763de9e158b3e1f971103cf6967730e06babf7c2a227b07edb2e71530ab49e33592cab15d0fae8d52af1fa8779dd01e5cfa3b8154f3cd34edc29b25
TLSH
T1F3E0E5079BE88144F3E52304577A5C9A02BE7B180338C0CB808F4A1E00BC970E2017A7
MD5 SHA1 SHA512 TLSH

RNResources/Dictionary/sk_SK/stringTable.zdct

SHA256 0107bcb0ee90e2ad794dc0318744081b024378ac47a734e34d2d0f4c9b54019e
MD5 703b48235ba6170151f4f03c7a12ae80
SHA1 01f618dc3df277a4c6bc0d1c91e2cbfd475f35c4
SHA512 0463f60dbe0ad626c2dc7bef4d238a05df2a1a5ff85ff27f772176c8f306088e76958cd21fb17876695d2919e378a52877b81cc3f93982c5f5cc04fa5d0a7b29
TLSH
T1BEE09A2307F80586F3FA3B18A7BD1C280ABF38658638C04E6484018E48F4B90D6907AB
MD5 SHA1 SHA512 TLSH

RNResources/Dictionary/sl_SI/stringTable.zdct

SHA256 60f95a8f1ebad7d739a539a820b0cf3196c39a219a1cefa2ffa20c4ad4178bbd
MD5 8776b9dc8ef57f3656477589fa2c2065
SHA1 0eba24f46f006873e3e1685ac3c7ebd43b464f9c
SHA512 5fea1b79c50881979e0232adb3cdcaa60a8273eafe1a71ff7216c795acc655418fbb41bac783e6cd8e4e71271376762f7eb2ae6e3787d3bafdf099f58faf70bd
TLSH
T1BAF06D0227F90159F2F37B14ABB91CA807BF78759B38C14E00A5024D49B5EC1C2A07A7
MD5 SHA1 SHA512 TLSH

RNResources/Dictionary/sv_SE/stringTable.zdct

SHA256 502d67dabd12547e40aeae7d24fec0e08d517f577d033188001453eedb178d14
MD5 74c3611069197058fd66b87d49618096
SHA1 2febcd87500194c15b86fac5506511f436bd440d
SHA512 e13d24b94fe690a708f068ea6736911a78a30d44c0c7b6bc84661867d0d79562c2f42ad7bbb79b2c41a0230ee4b480c92e481aec96e5d157eed29ba5a4ec4723
TLSH
T1D9E0D8124BE9854DF7F357246B7E6C29067F7CC52A79E55D0144094C0CB4B90C690B77
MD5 SHA1 SHA512 TLSH

RNResources/Dictionary/tr_TR/stringTable.zdct

SHA256 30a2fdf5ac0f590f4158f50f541ef647237d2ee2cae2cb9c67bdb5f238656e66
MD5 897ac3c3435eb0aaa3dd47e27a41ba44
SHA1 1914d2185f2097eb8740752f82a651808b1cb28e
SHA512 04c97b5c3fce1096ef1d992ee341d2e2aa43324e87bca940ff65d461ff3ce26040d1257d4f52923505971ec326e07b8267fcbf2b0a1685f76308b8d360f773dd
TLSH
T1D5E0920207E91549F3F31B107F7C5C660ABF3C746938D01A2191040D48F0AA0CA60B67
MD5 SHA1 SHA512 TLSH

RNResources/Dictionary/uk_UA/stringTable.zdct

SHA256 3a51428ddbca7c718cc11c008e9f0eb038674b61f692d93c665f24c5c369df8b
MD5 dcf86e756dda43f734ff39d37d7964c9
SHA1 5253e8bb4545136457a28030b1a7b2bcced36497
SHA512 61f1e309a26b4e7c32dc7ee9e92b133397380d20d5ba5fd9b79fbe9736e996cccf48a787d3cb56360e9e949ffd84f5bb363c628b0caf6ad3064dee7003a339db
TLSH
T148E02B034FF84148F2E16214977A5CD941BF37540324C089214F1A1D14FCEB0B340797
MD5 SHA1 SHA512 TLSH

RNResources/Dictionary/zh_CN/stringTable.zdct

SHA256 dd61bc01ba38b512d479581062b1d417b2ff3300a8e6c2b784a50c87ff6dbc37
MD5 7c12a63cd5473616330f254a4ddb87e5
SHA1 f70ea5b39732f8d739c35f170fca4a920b26b9bf
SHA512 26ddb5dde69961214f856f13b0524d7848b517fbd549da8869298bd69434ac4841359e07f1832e072e5f6bacf0c9502dfdd8adf6568c4be695923f7e60f05a69
TLSH
T1C1D02E0187FA808AF3E23A0013BE5C6C07BF74050A2CE0EE2491020E89F4990DA203AB
MD5 SHA1 SHA512 TLSH

RNResources/Dictionary/zh_TW/stringTable.zdct

SHA256 b15415c8dfb47afb2eb0c327f5fc5a96f5a42bf53b9bcd3305167ff8d0fdcf70
MD5 65181268855559cad547489d01427fba
SHA1 cda7cb06315e0904807fe91904cd8324abe9e596
SHA512 b6a096fd4e5d081ec7f33b762ed285b33b78eda1ebcb4add95f0deeaae6a73c24c5a61c4fa2708549cc5209bb7c0573cd7517ff7c4560e90e36343a9cbcf6a27
TLSH
T159D02E0283F9008EF3E236081B3D2CBE47BFB9080A38C0AD1091000D96F8A81D2223AB
MD5 SHA1 SHA512 TLSH

ZStringResources/cs_CZ/stringtable.xml

SHA256 f93ecd1f46bc329e70244399b6e7e54cf4c139c12b4553de3a125a17a0644021
MD5 f4cd1683e8d2c43ce72544642a77791f
SHA1 f8b31ddc62d91bb9d7c3c7f6fc7d77fa9fa6e77f
SHA512 58249967f325fd1228f5cf3e164db895d4f52d17d03b5ac73279f8d19dc44284fdad9c20486145a315ecbcbfed6704f2e567162c4b33d55c306bbc3431916714
SSDEEP 768:47w/nLfPbfVCPi08YHs4cGlUN6y6y+NioAOzDOKPhgLnjC:gw/LfPx308YjcGlUf8NigOKP6y
TLSH
T1B453BB5231E87F2C5486957B4AB230C8440FDCFC25B85453B69EB67B3FA0E480AFB964
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/da_DK/stringtable.xml

SHA256 fd56a68b6ef959372f53d66ab4e41c258b2656fee242a228171ef2d15e190157
MD5 4b68a86136254baff05b62eba5a51e06
SHA1 ce4d6cfc978102138c2f0daa164e228c87f136a5
SHA512 c8a24e46e57bd4cda3896ef4612515bb3bc00cf6d03bb3415983d972db91ff522bf223ff510169839110dcdde6b81460222240e2f61d5d5d84239e0ce0951fe8
SSDEEP 768:3om6SY98Y/dYHWTQyNP+NioAOcQMn/nV6N2Y5jnjC:3jsuNi8lK
TLSH
T1BC53B99275A87F1C9846857F9AB120C9401FECBC25B46453B29DB1773FA0D880BFF9A4
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/de_DE/stringtable.xml

SHA256 e5edbbe8760c061379b1dc7ffb9162ff4691a56f30a93928e311f63f250500a0
MD5 9c96b780cf960071c9c16be10ccce2a0
SHA1 1955be113b453d84f186c757b89eff05038c709f
SHA512 db597db02a64fe95015bcf0752db06536567eb621f22841bc98601829b2a174e2c97691f7db4594380e415a22416ac007de57936e2db94a6f1577c8525abda10
SSDEEP 768:JWX+sWQaG/EzBeAstIn+NioAOq9oPCCkAnjC:QXXWQ5EqI+NirCkV
TLSH
T19C53AC5235E87F1C5486957F4AB224C9201FECFC21A46452B29DA1773FA0E884BFF9B4
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/en_GB/stringtable.xml

SHA256 195e09f581e2c426f14f5661afa702d4e363f1bd0b028ef534dae72635a1bb85
MD5 9471b419acb06f81f114e51aebaeba66
SHA1 712c695639560141e8995188473331a1d08b9581
SHA512 44ded5f414cfba79be7b04f43ad0da50ca421b0b17141587a245155222c95870217f5abdbcbd1d8d4018896d2703f7816d1d9d32ed2e965fa9932d9f9b27db79
SSDEEP 768:BGKeKHhScMD3AbmBbmRio/+NioAOwUabh9Uub5ZcbjJnjC:BG9cpmMUNivbMub5KbjU
TLSH
T15743FE9676987F2C188741BF1DB530D5541FACF836A86013319EB13B3B90E845AFBDA8
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/en_US/stringtable.xml

SHA256 89b51e43cead73e8855334790ef9179fc15b7ca6f60f45fb96db612bf498abd1
MD5 c3823f3a88b77fff1ca0f410fd80dd04
SHA1 55bfc74f495c35b0685bd13f716b122ee401f4cb
SHA512 4b6b7e726462de0beca26b633e86047b5aaf22ab7282f892f3eb146b187cbf3ba86cddb3e3a8b750de5d12e193059be1efcf703ac0d15365b0fc2ce3fb3c0667
SSDEEP 768:BGKeuHhscMN3AVmBuYrZoE+NioAOwUfbh9zYbNZ+LjJnjC:BGzcJmxsNikb7YbNkLjU
TLSH
T18C43DE9677987F2C188641BF5DB530C5541FACF836A86013319EB13B3B90E845AFBDA8
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/en_XM/stringtable.xml

SHA256 30a901f4ca89f18a96767e8729355ae08b8e6f7152a5cb75f1655e6057e8cb32
MD5 3c450fa3b7641f6260a6e93517c9087a
SHA1 121172fb9a5855fa31018ee43f5b224d65d90451
SHA512 688ed8c50ef7e0cf1e0fe564729d5322db08817bb3e9e9ff532604149bede317654228f4acadc5c10a20d883b6a1a7855582fc478f0ecf0c89531876ade87fd9
SSDEEP 768:BGKe+HhMcMH3AvmByoVDoo+NioAOwUxbh9LAbJZ81jJnjC:BGHcBmxaNikbzAbJy1jU
TLSH
T17143EE9676947F2C188781BF1DB530D5541FACF836A86013319EB13B3B90E845AFBDA8
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/es_ES/stringtable.xml

SHA256 ba3c7167bd5e8c45aad86c7552b1871b9d2ec6538cc7115c54f0dcf8fbcc7262
MD5 48ca575c4d685a34eb272fd378767e82
SHA1 ad51c7cd8325c19c6f689fcf612ff3268eda1fd7
SHA512 ebf5ce7075defbfeb982275cf80b5426ace567b06b2d2016f7bce8004eb05d5a9713e37834e52c3f344234fa4db426903f850491e039bcb1321acab731c8cf39
SSDEEP 384:I7E10JOQYcDCSLxdG2xE5qF6D3Pb8Fa+fURolEGGn34BG9APDrgPWixBdMLAv9fL:I70KzHGe67wk+NioAOAVfdc8OvnjC
TLSH
T1BE53ED5176E83F1C5486956F4AB160D9500FECF834A8A452B28DB27B3F90E884BFFD64
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/es_LA/stringtable.xml

SHA256 4f86bd276149c22c034eb4142bee001a5144062a150f0b6851d73891211bfa6b
MD5 fb59217173f21916e3b30a575356cd8f
SHA1 2b7d89237e9fec237e18c42fbcd4d2e467d56de0
SHA512 76b556024b8e241e739d18a654e57c15508671701dd0d31009cb519fd2b3c657a292c806d5813037b01a250de691eab07ded2e1a50fc9eaa14d02f44f9fd11b0
SSDEEP 384:IZE1vJRQYFDCSLxGZ2xE5GF6DF1b88q+fURolEGGn34BG9APDrgPWixBdMLAv9fv:IZ0BqvZ66paZ+NioAOAVfrUuOvnjC
TLSH
T13F53DD5136F87F1C5486856F4AB160D9500FECF834A8A452B29DA27B3F90E884BFFD64
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/es_MX/stringtable.xml

SHA256 4f86bd276149c22c034eb4142bee001a5144062a150f0b6851d73891211bfa6b
MD5 fb59217173f21916e3b30a575356cd8f
SHA1 2b7d89237e9fec237e18c42fbcd4d2e467d56de0
SHA512 76b556024b8e241e739d18a654e57c15508671701dd0d31009cb519fd2b3c657a292c806d5813037b01a250de691eab07ded2e1a50fc9eaa14d02f44f9fd11b0
SSDEEP 384:IZE1vJRQYFDCSLxGZ2xE5GF6DF1b88q+fURolEGGn34BG9APDrgPWixBdMLAv9fv:IZ0BqvZ66paZ+NioAOAVfrUuOvnjC
TLSH
T13F53DD5136F87F1C5486856F4AB160D9500FECF834A8A452B29DA27B3F90E884BFFD64
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/es_NA/stringtable.xml

SHA256 4f86bd276149c22c034eb4142bee001a5144062a150f0b6851d73891211bfa6b
MD5 fb59217173f21916e3b30a575356cd8f
SHA1 2b7d89237e9fec237e18c42fbcd4d2e467d56de0
SHA512 76b556024b8e241e739d18a654e57c15508671701dd0d31009cb519fd2b3c657a292c806d5813037b01a250de691eab07ded2e1a50fc9eaa14d02f44f9fd11b0
SSDEEP 384:IZE1vJRQYFDCSLxGZ2xE5GF6DF1b88q+fURolEGGn34BG9APDrgPWixBdMLAv9fv:IZ0BqvZ66paZ+NioAOAVfrUuOvnjC
TLSH
T13F53DD5136F87F1C5486856F4AB160D9500FECF834A8A452B29DA27B3F90E884BFFD64
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/fi_FI/stringtable.xml

SHA256 ae01dbabef963130e7a99613d5ef349c45a95fff59ed0c025ec483376edaddad
MD5 f8b6c8ec87f24489a1c5b3b8c52fc160
SHA1 d7d136a0ea8472922feb24444fd8eeb9e92dff6d
SHA512 178cc20139e7a42d9720e2bc8eb6b6d266f9ec16618d65d14c94bf09d7b21dcd687664c6c919c05e30cca3cfe738ddf313ff02ab1b3fdbfd59ab6d65f00b5680
SSDEEP 768:ySVP31DlISUuCN+i+NioAOLPdlyUsd7njC:ySR9eSUuCN+ZNiqdleC
TLSH
T196539D9132A8BF1C5445957F4AB120D8504FECFC25B85853B29EB2BB3FA0D441AFB978
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/fr_CA/stringtable.xml

SHA256 142b39fefb1d6204dbbfdae867bb4b9287ce8d0ab2b2158681a07578139bfd1c
MD5 9a7050d3970a9fab4fae0d06841b0da3
SHA1 044d4317295bedea7ab699fe8a39cf3e2eaed292
SHA512 1c7d9bc0022d7436f71a374614345f7f7df2b6037e413495dec80e18cc673688e502da90dd8a3030aab60149c84aea464f07a58ee686ca52f1dd22cf26eff16e
SSDEEP 768:moUsvSUzz36VEEbHbaz0FwP1mCKBm1Ll+s5810ugkbA0IyPs1/mY++NioAOaGqIg:m7/EEY019s1/hNiv5mgXT9
TLSH
T16153DD5272E87F2C5886857B5AB230C9501FDCF821746452B29E717B3FA0D884BFF9A4
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/fr_FR/stringtable.xml

SHA256 0a63b87aba8aaf837fc68dcf6ba5f618e0057f3affa7991654c384dda782a3c8
MD5 d8637412ca5a7d5a34e9e4f1f529150c
SHA1 337176b4522f130a125e2f5126e9b97383dc2575
SHA512 4c67ef3f878396740e120a7e96cd35023eb4e1e1d26556726983315cf125e6b0d1b6796548b4827b6e9f53d396dd77bf13d1d16ae0cf0734619976b7fd1f5f12
SSDEEP 768:moUsvSUzzz6VEEbHydz0FwPUmbKBm1Ll+s5810s1kbu0IyPsf/mXB+NioAOLGqI9:m7DEEgp23tf/LNiGwb7XN9
TLSH
T19453BC5272E87F1C5886857B5AB230C9501FDCF821746462B29E717B3FA0D884BFF9A4
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/fr_XM/stringtable.xml

SHA256 0a63b87aba8aaf837fc68dcf6ba5f618e0057f3affa7991654c384dda782a3c8
MD5 d8637412ca5a7d5a34e9e4f1f529150c
SHA1 337176b4522f130a125e2f5126e9b97383dc2575
SHA512 4c67ef3f878396740e120a7e96cd35023eb4e1e1d26556726983315cf125e6b0d1b6796548b4827b6e9f53d396dd77bf13d1d16ae0cf0734619976b7fd1f5f12
SSDEEP 768:moUsvSUzzz6VEEbHydz0FwPUmbKBm1Ll+s5810s1kbu0IyPsf/mXB+NioAOLGqI9:m7DEEgp23tf/LNiGwb7XN9
TLSH
T19453BC5272E87F1C5886857B5AB230C9501FDCF821746462B29E717B3FA0D884BFF9A4
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/hr_HR/stringtable.xml

SHA256 0620b2167e20401b56ac24cbce1f36dc82ed37dd67858280cb73a4c8cb1b2e86
MD5 a06d007a26c94e34bf5c1fb71419b002
SHA1 91be7816dc778d18e4eafcac41c6687bba7754fc
SHA512 0f4116d18575f55b44513be19af86b3d6ada3a1e629dfc9bdcae94475fa8ee6f54cc0e2e254382f3197ccc7436b9978dfd58d4e73b56188ac29a55f640200d01
SSDEEP 1536:wNDz2smpHNzX8N1pw/GaNia+3qhDbSbYNg:KK/NpY
TLSH
T1B853AA9272F87F1C5886D57B4AB260C4101FDCFC25645462B29EA67B3F90E480AFFE64
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/hu_HU/stringtable.xml

SHA256 ab04c8d630cada6336c5654ca3b1b5b39e36c4eaa02c7e0cee81ee5293a0389b
MD5 e2a941b2492faf9578fc5cad6086f7e9
SHA1 9395c7c433d8b2c1264aebd6626d17f53e473234
SHA512 eaf6b3eb67323cf44ea95c9bfc43211675415dddf4605412f4032cfa2d1db5df6e4b5645569b8c26eb2c9d7af0590543bc6381d4e2ce7a7d09329625fc7e2f4a
SSDEEP 768:NXEp4YY7pC3K/xyb0q+NioAOuPUJJW7MMLeNXMnjC:FEp820hNiog1LeNXB
TLSH
T1EA53BE6232A87F1C9846957B5AB230C9101FDCFC25781463729EA5773FA0E480EFBDA5
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/it_IT/stringtable.xml

SHA256 32394bbd322208ffc03c614b01eddd65a4c49f08fae065543699d5a2a03a9831
MD5 4e75d6df1635310f7ccdad3fcd54c802
SHA1 c355c773a2df686aae8e94ef8cc0ce458b87722b
SHA512 8d88963d3492eed1967c4956297df2b23dec78a20b718ea79488db8f0148a14038a87a9ba2a4fdf676cfe25a10369e15906cd83f0fca3d91da37e36771f45abb
SSDEEP 384:Ro5qTCjqV6iTnU4enr5uukPugqTU5tbqpbVZ155W9tTeGXOUzgZlo0g0NOvS+Q1L:e58kZYEpTl+NioAOeqe71xR8Dr++njC
TLSH
T1C953DE6272E87F1C5886957F4AB270C8501FECF835642462B29E627B3F90D484AFFD64
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/ja_JP/stringtable.xml

SHA256 018c104a0e167e312151c973acc56953168da0ff08037690529d6251f487c4b8
MD5 9d9b6e6493eecd9fe64d210153a17477
SHA1 d6552be21ef6229a13c2c3b9614e6c04c70073e6
SHA512 4ab9ab6028e673c7404dc309feb792f1444050b12b0d930d7ebe18b8d7dee5845abb5812c22f09925df0bd31bf0850a17043d0f0d3eb8f3eabd5a354577fc6d9
SSDEEP 1536:jQwI3hA9NTQuTpKnaVZG/ryj8PPxhlprl5O2lFuBEJ0pY9o1UfBbpQggjOhd/NiS:9wFtN/
TLSH
T10E63DA6E32A93F2C5452957B09B230C8501FECBDF5647462616EA0773F50E8CCABB9B4
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/ko_KR/stringtable.xml

SHA256 401585b2225bb165278002988fcfa2a80edec2acfa30be590231c6fbddd0d4bb
MD5 8377d011d7b8375ee5fa2a16ffbdc132
SHA1 6be48772da0d3ac463faf1f088918cd8cab4057d
SHA512 409eac1e147f54e335299f53acea62cd8bd6e66e044d503eed9e6a6e5f591b604526e155454167114c14872a962917b6ef8e86fef42827cf80eec5c157427170
SSDEEP 768:yWo9/AVq7kfoZT+NioAOF/4WmLEPOQnjC:yD/Av7Nis4oOF
TLSH
T14453DC9231F96F1C5846996B9EF230C4410FDCF932651462B64DA97B3FA0D840ABFDB8
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/nb_NO/stringtable.xml

SHA256 d8f14b02a8cc38ba5da86b29cbfb1b906a01f635a854400eb9fb398b86fd1158
MD5 d1e55639abbe63e715a5aae18392fe33
SHA1 c91e73e3d05cafedd2c272d943bd31733cda5f1d
SHA512 94452ca8b8837f57eade86a6e55108d58d2d09e4e98bd4d1650d1c93a5705b1fd2c347b191e2fbb96e366ad96239e5dd99bb7ac0544ccb5ff22d019560ad9638
SSDEEP 768:icWPC+oQDez+wVAvBZNkKGw1Gw+NioAOANm9yU7jMNyCyG20njC:ieqB8KGw1+Nif2A92J
TLSH
T1D7538B5176E87F1C6846947F59B120C9801FECBC25B46452B29DB17B3FA0E880BFF9A4
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/nl_NL/stringtable.xml

SHA256 bbb52dd66280241696acb072b43a4448a1a1dc729e641433b45fbffe5c6808e8
MD5 d682cac90f5b8591a7d03479e883c0df
SHA1 345b6a7aee9ff2cad4511eeeeebfcf5e5634dd13
SHA512 83a086e1f505fc17f07f62ca83ec524a437276d2c17d121249ffd7f4c79d07d8f46e820f9482682f26a7596871e197a2cccd2540514e488bd22303d9cad6cc82
SSDEEP 768:h5ITUrHjO9NkosyWrCQLIqPH+2K35+NioAOOnnmcGwrG6njC:hXHuPsyWrZ+JgNiRnSD
TLSH
T19353BE5275A87F2C6485D47F5AB130C9510FECFC21B42462B29DA2773FA0D880AFF9A4
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/pl_PL/stringtable.xml

SHA256 017a8018de8ab94b83cd93123017da1735c76a6d30a6bc014218a91627de24b0
MD5 5a246706fab9c47d03ac5913c56f8e3d
SHA1 da96a696fd9a9c2cb0cc5874d661abed0009bfca
SHA512 68068c87f0554d8869c0d7d4567ebf3d593bcc8313e93d80031e766e1e8917b504512ba547541ef265c229e315ca44c6a785f1dc74c398b984e729a03240edbc
SSDEEP 384:6KLFlOLOh88+gaX5yO2wo0ZNuNyTOgC/ahzOPziFxF3KYLZQQwQmcxNH+fURolE3:6YJOdyO2Wx1KYlb+NioAOODx81njC
TLSH
T12D53999131F87F1C5985946B4AB230C8505FDCF825B86453B29E657B3FA0E480BFF9A8
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/pt_BR/stringtable.xml

SHA256 f8434fea34a215045fed067968dba8bb484eb40ea269a7e4b97c0c45987735de
MD5 e077abb22cd29e7f57a8d730907f4375
SHA1 20fcf889228b3bfc8a3a2bd45f043275c939ba8a
SHA512 a5da4a2a7e0306b2ef5b04f83ecc1461520e58bab6679b55c5573589e42e2089f93aee00af9535cd484090c5ca5186175a51fa93e5cb1b92421bf5d44759b609
SSDEEP 768:Khrv2UzdiQBj1DIDdXsjWkvLW/jp+NioAOzYDVCnjC:KoHTk5NitVL
TLSH
T1D953CB5136E83F2C5446967B8AB130C5404F9CF835A85452B29EA67B3FE0E884BFFD64
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/ro_RO/stringtable.xml

SHA256 981e32b0903729b98e09f23e3e56827bf4a63acfef31e680ceec07a7600fd11b
MD5 c7d553d6c537dff8931d144e6c6889d6
SHA1 ecfe84e0676539b57d69732ed7f791ad3277d34c
SHA512 5ea1d4e5cb9576eb79a5ab9aedcac6863f9c83f1a5ed955adbbbd091869c55066cefec1b1069ea8002b04be28bc6c6f2f1950aacf65b8cc3cb73d186b0f28395
SSDEEP 768:0tZ2O0GB0c8Dffr4uy7vef341W++NioAOnh2RnjC:02uYX34QNi2h28
TLSH
T1F653AD52B1E87F2C5846956B4AB130D6404F9CFC21646496B29EA1BB3FD0D880BFFDE4
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/ru_RU/stringtable.xml

SHA256 8c27b7dee01aae207aea521721953315f3ff03828b32e99f1cc28a6a1873602e
MD5 5d807293320ad6af02f0e0314bd89940
SHA1 5d073fc564659fe9ab4ff5f3adf544eeb8c1a8f0
SHA512 fe676c3227a084c519fff8f0c538c472efad7ebfa7e8a7a40a2d30926464e16ceadbdec10c0a3e57779a5f8dc8b64452407a2985f37e029b15ec8ee03c463def
SSDEEP 768:9stgWCIqz1pGT2LA9jhDfLP47+NioAO03jJq1nHUofxMnjC:9stxCb1pnM9jhTLP4qNiN89xB
TLSH
T1FA83C95131E87F5C150AA42FC971B488245F9CFD3E695663225C39BB3EE0D084BBF9A8
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/sk_SK/stringtable.xml

SHA256 68a3f6bc39d442bee60aad8550de21fff8cf2d12e2f394163da426c5204db5c3
MD5 978ed5bd665714453842e893ac77a1f3
SHA1 9f361ff04f75d5d9c186fe79a1e1b0c8d80c592a
SHA512 165776af5ea9b46aaf3c795376b34cf44c3e709ffc168ec18c85fe95077f12188b6a9bd3657d062232224cc3e79ed70d46993e91f7812019826b848f50adf6ba
SSDEEP 768:hR6zFRnh+jGVNGZUzCTjzZH6BJaN+NioAOblg+HXWKL6njC:T6wC6xapNiQ3TLD
TLSH
T119539D9231B87F1C9846946F4AB230C4545F9CFC25B85462B69E727B3FA0E480BFF964
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/sl_SI/stringtable.xml

SHA256 1655dfa926377c909881c02dfad29f2fda86b8797f6f68af53f92044bc10e472
MD5 5e68b33d6561b38ca2910f37f9ce6edd
SHA1 b7a814bac1491d41b8e1db7e18b3f10b9a8186dc
SHA512 5c6f18e3373f217714872b6d5c00e3a1e01fca0cf8dac04cbba26750cee03d3e9470989bb8646095a744b8cae42058795770cdc8cdba919999e72c9f6d479787
SSDEEP 384:CxvUPJPCJPRgWm/q/G6uAhTx+SU3NujjeoAGo4+fURolEGGn34BG9APDrgPWixBe:q/2WZEmeoa4+NioAO7gNFbCthnqnjC
TLSH
T14853AC6231B97F1C584AD57F5AB120C4504FDCFC25749462B29EB27B3EA0E880AFF964
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/sv_SE/stringtable.xml

SHA256 19e13e24616f68c90371258e6ae63b46a0684e86e46319e81b9bcb97a8e8ccd0
MD5 b5270c78689f79a07b0ec466d5da8ab6
SHA1 395f048831b61b42bebaac3652ade24a11181b83
SHA512 b1c4a23fb2573c6b203c34b3e7e67093c90e0cef3dcc9b66de313ac15abe5db2176951d7c01847b4a0b60c1ff5175c092b4e9a9c5ec8a82a98f4a2193b494f9e
SSDEEP 768:Z1T0xZRKSVQeiD0UFIIJpEMv1+NioAOck2njC:Z1T0rRvVcD0SjJpEM8NiFkv
TLSH
T121539F5232A8BF1C6846957F4AB130D9401FECF835B46452B29D657B3FA0E880BFF964
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/tr_TR/stringtable.xml

SHA256 e67f27ccee2ba9a0a06ce05718b01eaca50c6c22d60ca47b5c3149b574de95fd
MD5 fa51eb06eb9866eb6d523589fe2b2f17
SHA1 150ecdab55575158e4ccb03cedef9b9691e4b8de
SHA512 a05db48fa465d8fe3d28946692c27ac2d51e525f2c751552c44bcc8e39fda935bd0b0ba5e1c319aad57bdf40dc6bdb341113b68f18abd6ba4a7178c435bd768c
SSDEEP 768:W+TF0s5qzuex/JRYHGx3AuP69D+NioAOm6BqBZYA+Ia6yTRBnjC:W+aPR6G5Au5NiR/iM
TLSH
T13D53EC9131F87F1C5846997F9AF220C4904F9CF836746462B29DA67B3F90E440AFF968
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/uk_UA/stringtable.xml

SHA256 fe4c5edd3926ec4ebea6330dc8c84d531c2d3c928305703a03fe575b511c63b7
MD5 712f454ea129f2eff4aa069449a0fe17
SHA1 6bd5d46d468f732a6eb9335b5f8ceb153cf761bb
SHA512 dd52852eec2911683de251d473a2446d00ade38040af3f3e6a81d66f14e16d6dd732296bf25a534da49ed8d9ec6d7850810b266a57334625d4dde3c5ae6d45b3
SSDEEP 384:KiW2ZFHysPG0FRnL8p0gUjsboLFekWfX0TmU8tmnIHOBa/g02D6wlfTvTTQfP18d:Py8SyVuFu6wPR+NioAOo1injC
TLSH
T12273B95135EC6F9D050AE42B99B4B0C8245F8CFD3AA55613329D397B3EE0C444FBEAA4
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/zh_CN/stringtable.xml

SHA256 5b124a1f4974ab211fade349db211e176aa6f154a971534cffb917a727b2db50
MD5 116264964652bbfcb8feb65cbcb9cdf1
SHA1 ef7f4c1cf6152fbc9b21a82d4c0eddf2336ef9e4
SHA512 9fd1c34e0052b9a9f5b67cd964141138777748d7707bf2113e65b9333b46f83074512a2334b01509a14cba62c98ee079a82853b189212121edb0a493445f8f5b
SSDEEP 768:kl2NM+ahGOYjbR/1EUzL9he+NioAOW6W7u6Fd6oc/Zb7njC:g2IGOYjbR/1EUzL9bNihWC
TLSH
T173437B9232A87F2C5446997B4AB230D8500FECFC25B46463B25D657B3F90D880BBFD69
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/zh_TW/stringtable.xml

SHA256 050cc2a93ddf9abe54a64f300445a2a56849bebbca6135f4292891dbc995a2bd
MD5 18dd3140c4c143626aabe26d054bc73d
SHA1 ed052f76942b59cac63cd3b3f0b28bbc13099153
SHA512 f9525fc52d14bc7b5f60f699f5be6b60466b2abbc1d4f40041ace68225159eaaf8622858f19c4419f4495b07ea91497dffeaa5046ff4c6501f0f64add8e05e6f
SSDEEP 768:aHmhn0PkcsMW+NioAOyH+NBYpVbvL662njC:esoNibTvL66v
TLSH
T1D553AB9631A87F2C544698BB5AB230D8401FECFC25B42863725E717B3F60D481AFF969
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

adobeIdManifest.xml

SHA256 b8454875d59517fdfb8248abacda20bf34ee003255c81ad5e444d945f53b2de9
MD5 161a971d515998f21aa0f978e330ecc2
SHA1 8981e70a7dddcf51cb91fe065605f1295bd443d3
SHA512 094feb3572ed49a7e2dc59acbde38dbfa00658684188c8f27182eb5c57e55f89cce07a49c93c1e3c8ae69610f2a88034b8757f7c4cf5fe44e52c3ea11630a1c1
TLSH
T1BEC080D271DDD91345509A254977C1047315964C0BB0888CD0D506F7564613C3E47006
MD5 SHA1 SHA512 TLSH

adobe_caps.dll

IMPHASH 5dc689234bd587c30d88fa8b0128a74a
SHA256 ce49ebe5b6214f6b3312e599949a9715c797ff20ae741acc0f62f4d85373eda0
MD5 663cb739df232d92203a0dc216ce62ea
SHA1 aab3e44aa455b4bf3279e0335ad1ae934298bb80
SHA512 76402710e02542815bfdcf5dda08f70858bf800e106492fc6395da2365caa02a665fb79df7dacc345019894c0e6a99d268c68768aef556adaa9287abecc0768b
SSDEEP 6144:ctQdQg8MBJjapuDlkaQ/Vogw14h34OiaQv7MnoCllje4clVdO7g3m93/AfiPY:cK98MzDMNio4PMnoCre4OVdO7P3/fY
TLSH
T14D94AE12F1E1D032E4AA217045619F625EFDFC211977859BAED8388ADF70AD2E739313
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

81:ac:bc:69:4b:b7:0a:1e:74:ad:4d:7f:ee:a2:a2:c2:5e:a9:b0:16

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Chains

Sep 20, 2012

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Serial Number

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 1, 2012 - Dec 31, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Serial Number

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 19, 2012 - Sep 19, 2013

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

1

Major OS version

5

Entry point

263722

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\Oberibsrel50\build\releases\public\caps\libraries\windows\Release\dynamic\adobe_caps.pdb

ole32

CoTaskMemFree

shlwapi

PathAppendW PathRemoveBackslashW PathStripPathW PathFileExistsW

shell32

SHGetFolderLocation SHGetPathFromIDListW SHGetFolderPathW SHCreateDirectoryExW

advapi32

AllocateAndInitializeSid SetEntriesInAclW SetNamedSecurityInfoW FreeSid GetNamedSecurityInfoW

kernel32

GetStringTypeW GetConsoleMode WriteConsoleW GetProcessHeap CompareStringW SetEnvironmentVariableA LCMapStringW InitializeCriticalSection WideCharToMultiByte GetACP MultiByteToWideChar GetLastError CloseHandle LocalFree GetCurrentProcess SystemTimeToFileTime GetFileAttributesExW GetFileAttributesW SetFileAttributesW FlushFileBuffers CreateFileW CopyFileW lstrlenW GetCurrentThreadId EnterCriticalSection LeaveCriticalSection GetVersionExA AreFileApisANSI Sleep ReadFile SetFilePointer WriteFile SetEndOfFile GetFileSize UnlockFile LockFile GetFileAttributesA DeleteFileA DeleteFileW LoadLibraryA LoadLibraryW GetProcAddress FreeLibrary QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTime GetSystemTimeAsFileTime DeleteCriticalSection LockFileEx InterlockedIncrement GetTempPathA GetTempPathW FormatMessageA GetFullPathNameA GetFullPathNameW GetDiskFreeSpaceA GetDiskFreeSpaceW CreateFileA RaiseException RtlUnwind HeapFree HeapAlloc DecodePointer GetCommandLineA HeapReAlloc IsProcessorFeaturePresent EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW SetLastError InterlockedDecrement TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapCreate HeapDestroy ExitProcess GetStdHandle GetModuleFileNameW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType GetStartupInfoW GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW GetTimeZoneInformation HeapSize GetCPInfo GetOEMCP IsValidCodePage SetStdHandle GetConsoleCP

GetSetupManifest capsBackup capsCloseSession capsGetCollection capsGetCollectionData capsGetCollectionDataKeys capsGetCollectionDataKeysAndValues capsGetCollectionPayloads capsGetCollections capsGetInstallState capsGetLastModTime capsGetPayload capsGetPayloadCollections capsGetPayloadCollectionsAcrossUpgrades capsGetPayloadConstraint capsGetPayloadData capsGetPayloadDataKeys capsGetPayloadDataKeysAndValues capsGetPayloads capsGetUpgradedPayloadsKeysAndValues capsOpenSession capsOpenSessionNoCreate capsRemoveCollectionData capsRemoveCollectionDomainData capsRemovePayloadData capsRemovePayloadDomainData capsSessionCommit capsSessionRollback capsSetCollectionData capsSetPayloadData mdbCloseSession mdbGetBrandingData mdbGetDependencyData mdbGetDependencyDataEx mdbGetEulaData mdbGetEulaLanguageList mdbGetPayload mdbGetPayloadData mdbGetProduct mdbGetProductIDList mdbGetProductPayloads mdbOpenSession mdbOpenSessionNoCreate mdbOpenSessionWithPath mdbSessionRollback pcdCacheGetLastModTime pcdCloseSession pcdGetDomainData pcdGetDomainDataKeys pcdGetDomainDataSubdomains pcdGetLastModTime pcdOpenCacheSession pcdOpenCacheSessionNoCreate pcdOpenSession pcdOpenSessionNoCreate pcdRemoveDomainData pcdSessionCommit pcdSessionRollback pcdSetDomainData pdbCloseSession pdbGetInstallState pdbGetLastModTime pdbGetPayload pdbGetPayloadData pdbGetPayloadDataKeys pdbGetPayloadDataKeysAndValues pdbGetPayloadDependency pdbGetPayloadDependencyKeysAndValues pdbGetPayloadDependencyReverse pdbGetPayloads pdbGetUpgradedPayloadsKeysAndValues pdbGetUserAction pdbOpenSession pdbOpenSessionNoCreate pdbSessionRollback

adobe_licutil.exe

IMPHASH c84c4d1fa763b03427be4ed7b5d2f070
SHA256 8527c897b089cbeec68f8b62bd4e58a16f6c15e1810929db73341713344869b8
MD5 1197275f64e8387e2eee7b65c8399efb
SHA1 6132da6037abfd0970dc5e53eba5aa248710a884
SHA512 f26c81428fce4cd04f03ad03ee1bfc83ea200c9902224da346bf3ca5ecc2168ae1050b107d04efb0bfdcdaa5fc31d2a51d3a0548826d35680ea63f712839100f
SSDEEP 6144:t0CJKHVyhEWPfj/epbvs+gbLYwZxLlEPwOFT3/hF/iRtTDp4hw:t0CJKH4KWrkbQLYwj2wOFPhcRgu
TLSH
T156749E217705D032E8920071CBBA9B7F487EF9211B2664C7B3E8197E9E646D26B3135F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

fe:92:55:1f:30:3d:f2:5c:d2:98:1f:c5:98:b1:4d:ed:19:39:46:e1

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Chains

Sep 20, 2012

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Serial Number

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 1, 2012 - Dec 31, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Serial Number

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 19, 2012 - Sep 19, 2013

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

1

Major OS version

5

Entry point

164456

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

none

winhttp

WinHttpConnect WinHttpOpenRequest WinHttpAddRequestHeaders WinHttpSendRequest WinHttpReadData WinHttpQueryDataAvailable WinHttpSetStatusCallback WinHttpReceiveResponse WinHttpGetIEProxyConfigForCurrentUser WinHttpOpen WinHttpGetProxyForUrl WinHttpCloseHandle

kernel32

CompareStringW GetProcessHeap SetEndOfFile WriteConsoleW IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID GetStringTypeW WideCharToMultiByte GetModuleFileNameW CloseHandle GetLastError CreateProcessW SetEnvironmentVariableA MultiByteToWideChar CreateMutexW GlobalFree SetEvent WaitForMultipleObjects CreateEventW GetTimeZoneInformation GetVersionExW GetComputerNameExW IsDBCSLeadByteEx GetCurrentDirectoryW CreateFileW QueryPerformanceCounter GetTempPathW OutputDebugStringA LoadLibraryW GetProcAddress InterlockedIncrement InterlockedDecrement InterlockedExchange Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection EncodePointer DecodePointer HeapFree HeapAlloc RaiseException RtlUnwind DeleteFileW GetSystemTimeAsFileTime HeapReAlloc GetCurrentProcessId GetCommandLineW HeapSetInformation GetDriveTypeW GetFileAttributesW CreateDirectoryW GetFullPathNameW LCMapStringW GetCPInfo IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapCreate GetModuleHandleW ExitProcess WriteFile GetStdHandle TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapSize SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType GetStartupInfoW GetConsoleCP GetConsoleMode FlushFileBuffers ReadFile SetFilePointer GetACP GetOEMCP IsValidCodePage FreeEnvironmentStringsW GetEnvironmentStringsW GetTickCount GetLocaleInfoW SetStdHandle

user32

MessageBoxW

shell32

SHGetFolderPathW

adobe_oobelib.dll

IMPHASH 58b7843a32cfed75be2a94f00ea746b5
SHA256 2a4087cf11ba800b58141672c79fad00e72dea96b448380a90f617fbda8356bf
MD5 782cc2384643508229f99fd8877c4f99
SHA1 baca241192a2c04d05f334a3a73a69e995c176ed
SHA512 ebf743bbb84aefeb1eb1ad478b2a6203006613aa1c2ad383d305bfbe95b6e969ecab831d7082393045295b28f8e7ca0ca097e7d74b6cd3a16477240baffae681
SSDEEP 24576:2z4NSPsFuo65tFRNFf7dgw3bowuhqoxMKZbp7g7yoj+CZZsoOwOCyfcOQeYzvz0N:2z4NSPI65tFRNFf7dgw3Ewu3g7yoCCZW
TLSH
T19B15AEE26641C132E9DF01B19A3C676B087EB575172418C7E3C85DAD7DB89E2AA3031F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

41:c4:5b:66:fe:54:92:a2:c4:8a:ce:c3:80:31:81:8a:06:ed:b0:f6

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Chains

Sep 20, 2012

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Serial Number

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 1, 2012 - Dec 31, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Serial Number

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 19, 2012 - Sep 19, 2013

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

1

Major OS version

5

Entry point

577668

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

winhttp

WinHttpCloseHandle WinHttpConnect WinHttpOpenRequest WinHttpAddRequestHeaders WinHttpSendRequest WinHttpReadData WinHttpQueryDataAvailable WinHttpSetStatusCallback WinHttpReceiveResponse WinHttpGetIEProxyConfigForCurrentUser WinHttpOpen WinHttpGetProxyForUrl

kernel32

GetStartupInfoW SetHandleCount CreateSemaphoreW SetEnvironmentVariableA GetModuleFileNameA CloseHandle GetLastError CreateProcessW MultiByteToWideChar InitializeCriticalSection DeleteCriticalSection ReleaseSemaphore WaitForSingleObject LeaveCriticalSection EnterCriticalSection GetVersionExW CreateThread GetComputerNameExW SetEvent OpenEventW GlobalFree WaitForMultipleObjects CreateEventW WideCharToMultiByte GetExitCodeThread TerminateThread OutputDebugStringA QueryPerformanceCounter GetTempPathW GetModuleFileNameW LoadLibraryW FreeLibrary SetStdHandle GetFileAttributesW LocalFree GetTimeZoneInformation GetTickCount GetUserDefaultLCID WriteFile Sleep ReadFile CreateFileW FlushFileBuffers FindClose DeleteFileW GetDateFormatW SetFilePointer CreateDirectoryW GetTimeFormatW GetLocalTime lstrlenA InterlockedIncrement InterlockedDecrement GetCurrentProcessId GetCurrentDirectoryW GetConsoleCP GetConsoleMode GetLocaleInfoW FreeEnvironmentStringsW GetEnvironmentStringsW CreateFileA GetFileAttributesA GetProcAddress GetFileType PeekNamedPipe GetFileInformationByHandle TerminateProcess InitializeCriticalSectionAndSpinCount HeapSize SetLastError IsValidCodePage CompareStringW WriteConsoleW GetProcessHeap SetEndOfFile IsValidLocale EnumSystemLocalesA GetLocaleInfoA TlsFree TlsSetValue TlsGetValue TlsAlloc GetStdHandle ExitProcess GetModuleHandleW HeapDestroy HeapCreate IsProcessorFeaturePresent GetOEMCP GetACP IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetStringTypeW InterlockedCompareExchange InterlockedExchange EncodePointer DecodePointer HeapFree HeapAlloc RaiseException RtlUnwind GetSystemTimeAsFileTime HeapReAlloc FileTimeToSystemTime FileTimeToLocalFileTime GetDriveTypeW FindFirstFileExW GetCurrentThreadId GetCommandLineA GetTimeFormatA GetDateFormatA GetFullPathNameW MoveFileA LCMapStringW GetCPInfo GetCurrentProcess

user32

wsprintfW

advapi32

LookupAccountNameW FreeSid SetEntriesInAclW AllocateAndInitializeSid GetNamedSecurityInfoW SetNamedSecurityInfoW GetUserNameW

shell32

SHCreateDirectoryExW SHGetSpecialFolderPathW SHGetFolderPathW

ole32

CoInitializeSecurity CoSetProxyBlanket OleRun CLSIDFromString CLSIDFromProgID CoInitialize CoCreateInstance CoUninitialize CoInitializeEx

oleaut32

SysFreeString VariantChangeType VariantInit VariantCopy VariantClear SysAllocString GetErrorInfo

shlwapi

PathRemoveFileSpecW PathFileExistsW

Adobe_OOBELib_BackDoorUpgradeCheck Adobe_OOBELib_CalculateVC Adobe_OOBELib_CheckSubscriptionMode Adobe_OOBELib_CheckSubscriptionValidity Adobe_OOBELib_CheckSubscriptionValidityOnline Adobe_OOBELib_CheckWFType Adobe_OOBELib_CheckforUpgrade Adobe_OOBELib_CleanUpCachePCD Adobe_OOBELib_CreateRef Adobe_OOBELib_Deactivate Adobe_OOBELib_DeactivateLicense Adobe_OOBELib_DisAssociateAll Adobe_OOBELib_EnumerateKeys Adobe_OOBELib_GetAdobeId Adobe_OOBELib_GetChallengeString_UpgradeCheck Adobe_OOBELib_GetRefID Adobe_OOBELib_GetSerialInfo Adobe_OOBELib_GetServiceClaimData Adobe_OOBELib_GetValueforKeyInSubDomain Adobe_OOBELib_Getversion Adobe_OOBELib_ISOTaggingAtInstall Adobe_OOBELib_LaunchPurchaseWorkFlow Adobe_OOBELib_LoadTrial Adobe_OOBELib_Process_file Adobe_OOBELib_ProtectedContentCheck Adobe_OOBELib_QueryLicenses Adobe_OOBELib_ReleaseRef Adobe_OOBELib_RemoveKeyInSubDomainInCache Adobe_OOBELib_Remove_payload Adobe_OOBELib_Retrieve_SerialNumber Adobe_OOBELib_Retryactivation Adobe_OOBELib_SaveAdobeId Adobe_OOBELib_SetAdobeId Adobe_OOBELib_SetAdobeIdExtProfile Adobe_OOBELib_SetAppXMLData Adobe_OOBELib_SetClaimStatus Adobe_OOBELib_SetClaimStatusEx Adobe_OOBELib_SetCredentialsForProxy Adobe_OOBELib_SetUniversalCookie Adobe_OOBELib_SetValueforKeyInSubDomainInCache Adobe_OOBELib_Set_Eula Adobe_OOBELib_Set_InstallLocale Adobe_OOBELib_Set_serialnumber Adobe_OOBELib_SuppressRegistrationNag Adobe_OOBELib_UpgradeCheck Adobe_OOBELib_UpgradeDoneAtInstallTime Adobe_OOBELib_Validate_SerialNumber

adobe_upgrade.dll

IMPHASH b8801d5281dc47eccdced0f96a88288c
SHA256 e1498a472b2418f4651fc14d88f566382df5c2c4d436c59984b4fbc26051e5cf
MD5 ffa09c5ee3f2def53f10987c710c8131
SHA1 106f7bdc99c776946263e242a246ca8c9a774533
SHA512 6cf88c93f5ecce9505bb73bea334a351153481c58b15342a8297a5c8820da1f8cacfb4716e49b51e1257eda3ec59a669acd2243eedce151bf702631ddbf7d5b5
SSDEEP 12288:ofJZn3agJMCizZefBe+4Zcv5QPsaJQZXPq9ka:unqEMCKZefbspsaJC
TLSH
T133D4AF123740C2B5F0AE517A897E737D1A6E6D97072086D7B7E42B5E8C312C1CB3A35A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

68:59:5b:15:6c:e0:cb:7e:f6:0f:87:0e:a6:47:9d:71:d7:e5:3e:76

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Chains

Sep 20, 2012

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Serial Number

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 1, 2012 - Dec 31, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Serial Number

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 19, 2012 - Sep 19, 2013

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

1

Major OS version

5

Entry point

318049

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

shlwapi

PathRemoveBackslashA

kernel32

OutputDebugStringA LoadLibraryW MultiByteToWideChar WideCharToMultiByte GetModuleFileNameW GetCurrentProcess CloseHandle GetLastError lstrcpyA lstrcmpA LoadLibraryA GetProcAddress FreeLibrary GetEnvironmentVariableA IsValidLocale CompareStringW InterlockedCompareExchange QueryPerformanceCounter EnumSystemLocalesA GetLocaleInfoA HeapFree GetCurrentProcessId RtlUnwind RaiseException GetSystemTimeAsFileTime GetTimeFormatA GetDateFormatA EnterCriticalSection LeaveCriticalSection EncodePointer DecodePointer HeapAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess SetEnvironmentVariableA GetDriveTypeW GetCurrentThreadId GetCommandLineA GetFullPathNameW InitializeCriticalSection GetFileAttributesW HeapReAlloc HeapCreate HeapDestroy TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetModuleHandleW SetLastError InterlockedDecrement IsProcessorFeaturePresent GetTimeZoneInformation GetCPInfo GetACP GetOEMCP IsValidCodePage Sleep WriteFile GetConsoleCP GetConsoleMode FlushFileBuffers InitializeCriticalSectionAndSpinCount DeleteCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoW ExitProcess HeapSize GetLocaleInfoW ReadFile SetFilePointer GetCurrentDirectoryW GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW GetTickCount CreateFileW SetStdHandle CreateFileA LCMapStringW GetStringTypeW WriteConsoleW InterlockedExchange SetEndOfFile GetProcessHeap GetUserDefaultLCID

advapi32

RegQueryValueExA RegOpenKeyExA RegCloseKey

amtservices.dll

IMPHASH 51cac0aa2868e2c01592256457c39caf
SHA256 23c42e4ff2752536add35a49873fc7cccacf7914ce2548d514b7620610087275
MD5 911deb78000d4df3a21231de2b021c59
SHA1 18361d39a454e001020bfa259e04d357f6eefef5
SHA512 de36e61e2e80f36357ea5a95be191320507e4d3ba3d860f4e74695d9d5ed0ada4f63ffe40236f0accc4e133be7e53774561e26ec6bb3e42ab66d6dad5875b9bb
SSDEEP 24576:vUN9dDS89wk7Tc7gCUQiJzpF56QEJAu5RJdv1Xx457Zv:w62TSPUPlF5bEf5J1Xx457R
TLSH
T1DC35A0223E41C231FDCF11F7D57EBBAE0C6CAA220B2494C7B2A919696D605C35B3535B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

67:29:a1:4c:85:a7:0f:b0:6b:36:f8:43:c9:9e:d8:c6:40:95:be:75

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Chains

Sep 20, 2012

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Serial Number

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 1, 2012 - Dec 31, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Serial Number

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 19, 2012 - Sep 19, 2013

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

1

Major OS version

5

Entry point

315971

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

none

iphlpapi

GetIfTable

winhttp

WinHttpQueryDataAvailable WinHttpCloseHandle WinHttpOpen WinHttpGetIEProxyConfigForCurrentUser WinHttpReceiveResponse WinHttpCrackUrl WinHttpConnect WinHttpOpenRequest WinHttpAddRequestHeaders WinHttpGetProxyForUrl WinHttpSetStatusCallback WinHttpQueryHeaders WinHttpReadData WinHttpSendRequest WinHttpSetCredentials

setupapi

SetupDiGetDeviceRegistryPropertyW SetupDiDestroyDeviceInfoList SetupDiEnumDeviceInfo SetupDiGetClassDevsW SetupDiGetDeviceInstanceIdW CM_Get_DevNode_Status

kernel32

lstrlenW LocalFree lstrlenA SetFileAttributesW GetModuleFileNameW LoadLibraryW FreeLibrary GetProcAddress GetTempPathW MultiByteToWideChar WideCharToMultiByte GetEnvironmentVariableA QueryPerformanceCounter QueryPerformanceFrequency OutputDebugStringA InitializeCriticalSection EnterCriticalSection TryEnterCriticalSection LeaveCriticalSection DeleteCriticalSection CreateEventW CloseHandle ResetEvent WaitForMultipleObjects SetEvent SwitchToThread ResumeThread CreateThread RaiseException RtlUnwind GetSystemTimeAsFileTime GetLastError HeapFree EncodePointer DecodePointer GetCurrentThreadId GetCommandLineA GetFullPathNameW FindClose FileTimeToSystemTime FileTimeToLocalFileTime GetDriveTypeW FindFirstFileExW SetFileTime LocalFileTimeToFileTime SystemTimeToFileTime GetFileAttributesW DeleteFileW CreateDirectoryW GetCurrentProcessId GetTimeFormatA GetDateFormatA HeapAlloc IsProcessorFeaturePresent TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetModuleHandleW SetLastError InterlockedDecrement GetCurrentThread TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapCreate HeapDestroy GetCPInfo GetACP GetOEMCP IsValidCodePage Sleep HeapSize ExitProcess WriteFile GetConsoleCP GetConsoleMode FlushFileBuffers InitializeCriticalSectionAndSpinCount FatalAppExitA SetHandleCount GetStdHandle GetFileType GetStartupInfoW GetLocaleInfoW GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW GetTickCount GetCurrentDirectoryW SetCurrentDirectoryW GetFullPathNameA GetFileInformationByHandle PeekNamedPipe CreateFileW SetStdHandle CreateFileA GetFileAttributesA SetFilePointer ReadFile GetTimeZoneInformation LCMapStringW GetStringTypeW GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale HeapReAlloc SetConsoleCtrlHandler InterlockedExchange WriteConsoleW SetEndOfFile GetProcessHeap CompareStringW SetEnvironmentVariableA InterlockedCompareExchange FindNextFileW FindFirstFileW GlobalFree

advapi32

RegCreateKeyExW EqualSid RegQueryValueExA RegDeleteKeyA RegOpenKeyA RegCreateKeyA SetSecurityInfo RegOpenKeyExW RegQueryValueExW FreeSid RegSetValueExW RegCloseKey RegDeleteKeyW OpenThreadToken OpenProcessToken GetTokenInformation AllocateAndInitializeSid

shell32

SHGetFolderPathW

ole32

CoInitializeSecurity CoCreateInstance CoSetProxyBlanket CoUninitialize CoInitializeEx

oleaut32

SysStringLen SysFreeString VariantClear SysAllocStringByteLen GetErrorInfo VariantChangeType CreateErrorInfo SetErrorInfo VariantInit SysAllocString

C_AMTAUMServiceCreate C_AMTAUMServiceGetLEIDXml C_AMTAUMServiceGetLibVersion C_AMTAUMServiceIsUpdaterEnabled C_AMTAUMServiceNotificationsRelease C_AMTConfigurationGetLoadTrial C_AMTConfigurationGetRunningLocale C_AMTConfigurationIsAppAllowedtobeRelaunched C_AMTConfigurationIsGrowlSuppressed C_AMTConfigurationIsRegistrationSuppressed C_AMTConfigurationServiceAMTConfigInstallPath C_AMTConfigurationServiceAMTConfigPath C_AMTConfigurationServiceAMTConfigRelativePath C_AMTConfigurationServiceAMTDirectoryPath C_AMTConfigurationServiceAppLicensingCode C_AMTConfigurationServiceAppPayloadCode C_AMTConfigurationServiceApplicationDirectoryPath C_AMTConfigurationServiceApplicationPath C_AMTConfigurationServiceBaseConfigPath C_AMTConfigurationServiceBridgeTalkCodeAtIndex C_AMTConfigurationServiceBridgeTalkCodeCount C_AMTConfigurationServiceCanonicalLEID C_AMTConfigurationServiceCheckSerialNumber C_AMTConfigurationServiceCreate C_AMTConfigurationServiceCurrentLicense C_AMTConfigurationServiceDominatingLEsForLEID C_AMTConfigurationServiceDriverLicensingCode C_AMTConfigurationServiceDriverPayloadCode C_AMTConfigurationServiceInstallDate C_AMTConfigurationServiceInstalledLocales C_AMTConfigurationServiceIsInstalled C_AMTConfigurationServiceIsSerialNumberRegisteredAsRejected C_AMTConfigurationServiceIsSubscription C_AMTConfigurationServiceLocale C_AMTConfigurationServiceMapCLEToLEID C_AMTConfigurationServiceMappedLEIDForCLE C_AMTConfigurationServiceMediaTag C_AMTConfigurationServicePathForLocalizedResource C_AMTConfigurationServicePathForLocalizedResourceInDirectory C_AMTConfigurationServicePathForResource C_AMTConfigurationServicePathForResourceInDirectory C_AMTConfigurationServicePrecedenceValueForEnigmaID C_AMTConfigurationServiceProductName C_AMTConfigurationServiceRegisterSerialNumberAsRejected C_AMTConfigurationServiceRemoveKey C_AMTConfigurationServiceRemoveKeyInLocale C_AMTConfigurationServiceRemoveSerialNumber C_AMTConfigurationServiceSerialNumber C_AMTConfigurationServiceSetApplicationPath C_AMTConfigurationServiceSetCurrentLicense C_AMTConfigurationServiceSetDefaultConfigurationService C_AMTConfigurationServiceSetInstalledLocales C_AMTConfigurationServiceSetLocale C_AMTConfigurationServiceSetSerialNumber C_AMTConfigurationServiceSetValueForKey C_AMTConfigurationServiceSetValueForKeyInLocale C_AMTConfigurationServiceUpdaterCode C_AMTConfigurationServiceValueForKey C_AMTConfigurationServiceValueForKeyInLocale C_AMTConfigurationShowEULAForPassive C_AMTEnigmaServiceAllLocales C_AMTEnigmaServiceCreate C_AMTEnigmaServiceDecryptSerialNumber C_AMTEnigmaServiceDefaultLocale C_AMTEnigmaServiceEncryptSerialNumber C_AMTEnigmaServiceExpirationDateData C_AMTEnigmaServiceGetProductID C_AMTEnigmaServiceGetProductInfo C_AMTEnigmaServiceGetProductVersion C_AMTEnigmaServiceGetProductVersionString C_AMTEnigmaServiceGetScenarioKey C_AMTEnigmaServiceGetUpgradeScenario C_AMTEnigmaServiceIsEnigmaSerialNumber C_AMTErrnoServiceALMErrno C_AMTErrnoServiceCreate C_AMTErrnoServiceErrno C_AMTErrnoServiceSetALMErrno C_AMTErrnoServiceSetErrno C_AMTGetTypeID C_AMTLog C_AMTLogAll C_AMTLoggerCreateFileLoggerWithFile C_AMTLoggerCreateFileLoggerWithPath C_AMTLoggerCreateFileLoggerWithPathAndSize C_AMTLoggingServiceAddGroupLogger C_AMTLoggingServiceAddLogger C_AMTLoggingServiceCleanUpResource C_AMTLoggingServiceCreateWithID C_AMTLogv C_AMTLogvAll C_AMTPCDServiceAllKeysInSubDomain C_AMTPCDServiceAllKeysInSubDomainForLocale C_AMTPCDServiceAllSubDomains C_AMTPCDServiceBeginTransaction C_AMTPCDServiceCachePCDIsWritable C_AMTPCDServiceCheckDatabase C_AMTPCDServiceCreate C_AMTPCDServiceEndTransaction C_AMTPCDServiceInstallDateForAdobeCode C_AMTPCDServiceLicensingCodeForAdobeCode C_AMTPCDServiceMasterHiveExistsForSubDomain C_AMTPCDServiceMasterPCDExists C_AMTPCDServiceMasterPCDIsWritable C_AMTPCDServiceOwnerAdobeCodeForAdobeCode C_AMTPCDServicePopulatedLocalesForSubDomain C_AMTPCDServicePrimarySubDomains C_AMTPCDServiceRemoveAllKeysInSubDomain C_AMTPCDServiceRemoveAllKeysInSubDomainForLocale C_AMTPCDServiceRemoveKeyInSubDomain C_AMTPCDServiceRemoveKeyInSubDomainForLocale C_AMTPCDServiceRemoveKeyWithPropertyInSubDomain C_AMTPCDServiceRemoveKeyWithPropertyInSubDomainForLocale C_AMTPCDServiceSetMode C_AMTPCDServiceSetValueForKeyInSubDomain C_AMTPCDServiceSetValueForKeyInSubDomainForLocale C_AMTPCDServiceSetValueForKeyWithPropertyInSubDomain C_AMTPCDServiceSetValueForKeyWithPropertyInSubDomainForLocale C_AMTPCDServiceSubDomainExists C_AMTPCDServiceSubDomainForLocaleExists C_AMTPCDServiceSubDomainsForPrimarySubDomain C_AMTPCDServiceValueForKeyInSubDomain C_AMTPCDServiceValueForKeyInSubDomainForLocale C_AMTPCDServiceValueForKeyWithPropertyInSubDomain C_AMTPCDServiceValueForKeyWithPropertyInSubDomainForLocale C_AMTRegistrationServiceCreate C_AMTRegistrationServiceHasDataToSend C_AMTRegistrationServiceNeedsToShowRegistrationScreen C_AMTRegistrationServiceSendData C_AMTRegistrationServiceShowRegistrationDialog C_AMTRelease C_AMTRetain C_AMTStringListAddString C_AMTStringListCopyInto C_AMTStringListCount C_AMTStringListCreate C_AMTStringListCreateWithConstStrings C_AMTStringListCreateWithStrings C_AMTStringListIndexOfString C_AMTStringListNextString C_AMTStringListRemoveAllStrings C_AMTStringListRewind C_AMTStringListStringAtIndex C_AMTUISwitchIsUpdateAvailable C_AMTUISwitchIsUpdateCheckEnabled C_AMTUISwitchServiceCreate C_AMTUISwitchServiceGetMode C_AMTUISwitchServiceSetLaunchContext C_AMTUISwitchServiceSetMode C_AMTUISwitchServiceSetParentWindow C_AMTUISwitchShowCreateAdobeID C_AMTUISwitchShowEULA C_AMTUISwitchShowProvisioningUI C_AMTUISwitchShowRegistration C_AMTUISwitchShowUpdatesUI C_AMTUISwitchSuppressUpdates C_AMTUISwitchTriggerUpdateCheck C_AMTUpdaterNotificationsLaunchAAMNotifierOnQuitIfReqd C_AMTUpgradeServiceAcceptsChallengeResponse C_AMTUpgradeServiceCloseSession C_AMTUpgradeServiceCreate C_AMTUpgradeServiceGetChallengeString C_AMTUpgradeServiceGetQualifyingSerialNumbers C_AMTUpgradeServiceGetUpgradeStatus C_AMTUpgradeServiceIsQualifyingSerialNumberForAnyProduct C_AMTUpgradeServiceIsQualifyingSerialNumberForProduct C_AMTUpgradeServiceNeedsUpgradeCheck C_AMTUpgradeServiceNextProduct C_AMTUpgradeServiceSetQualifyingSerialNumbers C_EULAServiceCreate C_EULA_GetEULAFolder C_EULA_GetState C_EULA_SetState C_LC_GetCacheStatus C_LC_LaunchTypeForCache C_LC_SetCacheStatus C_LaunchCacheServiceCreate C_SLCoreServiceActivateLicense C_SLCoreServiceCreate C_SLCoreServiceCreateDictionary C_SLCoreServiceDeactivateAllLicenses C_SLCoreServiceDeactivateLicense C_SLCoreServiceDeleteLicense C_SLCoreServiceDestroy C_SLCoreServiceDestroyDictionary C_SLCoreServiceGetAllDictionaryKeysValues C_SLCoreServiceGetAllLicenses C_SLCoreServiceGetDictionaryValue C_SLCoreServiceGetErrorString C_SLCoreServiceGetFeatures C_SLCoreServiceGetLicenseDurationFromProductConfig C_SLCoreServiceGetLicenseInfo C_SLCoreServiceGetLicenseServerData C_SLCoreServiceGetLicenseUserData C_SLCoreServiceGetLicensingEvents C_SLCoreServiceGetMachineIDHash C_SLCoreServiceGetMachineIDHashWOStorage C_SLCoreServiceGetVersion C_SLCoreServiceLoadLicenseExtension C_SLCoreServiceLoadLicenseFromProductConfig C_SLCoreServiceQueryFeatures C_SLCoreServiceRefreshLicense C_SLCoreServiceResetTrialLicense C_SLCoreServiceSetDictionaryValue C_SLCoreServiceSetLEID C_SLCoreServiceSetLicenseUserData C_SLCoreServiceSetProxySettings C_SLCoreServiceSynchronize

asneu.dll

IMPHASH 785d273c7cac083d4d0a3beae368461e
SHA256 da6e8fe51e32da9e0dc4b6ee34fab103bb2debe2b180574fdf36b483c82016df
MD5 0b2cd277a96359780c4af2c26eeb9348
SHA1 be59f9457b2e611aa6e02dd3442ee39b5badaa44
SHA512 1772055543484f8069279335ab9763124bc75b3b1494c62c6c2ec6a4d688136dcc658b594590d8e4d22c9e46c201cd143fa8d3cf1ceede8d9c40aa6d3091f76e
SSDEEP 1536:v9Ic3Ulv2cvAckh4kF4YYSLYWwPa+G56dg7ipxVm7RPl+EUYzK0yUbh1U5eWPBMM:FlGOh4gRYdPk5xipCUWK0Xbk5eWP
TLSH
T1F5E38C507586C473D54A163E4426C7714F3B79609FB8AAC3BB840BA98F253E1EF3634A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

22:e7:83:35:dd:e4:90:bf:3c:9d:42:0a:34:2d:1d:47:80:a9:cb:9b

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Chains

Sep 20, 2012

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Serial Number

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 1, 2012 - Dec 31, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Serial Number

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 19, 2012 - Sep 19, 2013

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

0

Major OS version

5

Entry point

43092

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\esg\asn\1.6\Asn\AsnEndUser\Release\asneu.pdb

kernel32

InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RtlUnwind RaiseException GetLastError HeapFree HeapAlloc FindClose FileTimeToSystemTime FileTimeToLocalFileTime GetDriveTypeA FindFirstFileA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCurrentThreadId GetCommandLineA LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo GetModuleHandleW GetProcAddress TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError HeapCreate HeapDestroy VirtualFree VirtualAlloc HeapReAlloc ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetFullPathNameA GetCurrentDirectoryA ReadFile CloseHandle SetFilePointer SetHandleCount GetFileType GetStartupInfoA GetConsoleCP GetConsoleMode FlushFileBuffers HeapSize FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA GetStringTypeW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount LoadLibraryA GetTimeZoneInformation SetStdHandle CreateFileW WriteConsoleA GetConsoleOutputCP WriteConsoleW GetLocaleInfoW SetEndOfFile GetProcessHeap CreateFileA CompareStringA CompareStringW SetEnvironmentVariableA

assets/fonts_clean.swf

SHA256 fa1d286881ff1d3afb60c1963f0f99aef962a351440c8f62269bbba6efa76b63
MD5 3a212cda1c946bdbf9a820d660d35fb4
SHA1 f617aa15014af4f4f5cb3f4b9f619307d17e7b30
SHA512 c947f3ca8a35418afa7e6211dd730bd7aff6ec43be24b6536496b5a1b45eb5826c9fbf0f207b15c4800060a01cc607e5f74ad783baf61268b3179282cfc41852
SSDEEP 12288:pVFcFmxcBBALEYy+5TGWZIku6UHIKBQCsKYDIA7UEciiC/6gYaTBExaB:pVFUBAQYV5THZI16VKyCs/Xc1GDBz
TLSH
T10EE423D88FE820E1427A4336BCE9AD02140C9B6BDE48DD95891D1A6DBDFAD32F4431F5
MD5 SHA1 SHA512 SSDEEP TLSH

assets/fonts_system.swf

SHA256 3720ce7f657d60c3d87646c9b975f0cbf099ccc522a573b9259a282fdc989af7
MD5 bceeaa19bc4d2a9ca004a0ca3e8bac99
SHA1 a315e724e834eabfb8811d5eddfed9e542f2eb9f
SHA512 0dee909c4527239a8414c69a04d70bfa01d323540fa7403325e5cd04815301034de74d24f9e2ebc14e63fa42ecb0304079a7fe002059bc9f65fa4fa5981ef85f
SSDEEP 6144:f9cMC/oWDvFzzuHJse27lg1Y+FUe7ZS5B8N92k0m1osajUq/0iWaiu/N:fz0otCekaY+37wT6d5eDzv
TLSH
T187642360D278E65B0177ED8CC4DFA687781AC70BD5C7F4C81D4902E96B8EEA1F093698
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/packages/LWA/LWA.pimx

SHA256 9ac55f4c9b4056308ca171e496d7fcdc7527eed6637665376241b495e1ce1cf2
MD5 84071b4404273adfc0532c1a87a56980
SHA1 e6e1baf130fcfae253b8ee1ffd89b9c4c91edf61
SHA512 ccde1a5128ec33702edf78740870959c03d8c79e8d942481a979a79b2df836d63c3e83333f679ce813332df128c15652dc510e1b1c78b6804e1b2833b6d945b6
SSDEEP 384:gNCQsMCFwIY0VSsDHyMazFtAcWUVTp1JyUELxz9xtiWm7ImGnfAClVh4Oe+nraFV:gNC+ACresn5TyZBLtXNjn4inraYng
TLSH
T1982317AC01696BE1740BDE643C601E47694FB27EF67031F472984EB686D5A8F0E8B533
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/packages/LWA/LWA.sig

SHA256 40894e5e4c6a2ccc0d37957f0dd537d28b70a3236be50397e389a2d4f36ce160
MD5 5bcb9fe2759a4d353eae935ba912b880
SHA1 79e0f1e3af8cddeac67198e7cf06527a26828eec
SHA512 2aeea0701df16e1c2f644c465a6448b7dc8514e19d99a7437a788cd7e826969682ffdd91226c4d5eb1b986d56be5224490d5bad328e7fdacc3e93f92dfd1305f
TLSH
T1A1310996305DB051E6B75DE38A2429273740C4A76F2D414EB4E186AFFF6C86A1F130F4
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/packages/P6/P6.pima

SHA256 97c6b4f22dbd20c069926fee6c62ef6baf2cb75aab2c9705a831a4707d351919
MD5 a0eaad394b7c060bcf5a3b62fa28dd19
SHA1 e473dcc25e70e3b547d50690017a5fdecc2384e7
SHA512 03d09f4ef3cb2d425e4fd936a9f443d507ab83bfd968cf479527efd6ba2e75f5d5f3ddd68d23dfd7497ea54e9dee6cb2c3e96fa1e28c9d11769d11149dc71aab
SSDEEP 196608:G8hE+2GVQtf73j+I8E5Ge9D2bPLKFNIrwa:Gr+6tHZ8Feq+Fawa
TLSH
T1E2663321FD45F016F666E33205502027F9004444191DF6BE0EA977B27E2ABD78FFBA9A
MD5 SHA1 SHA512 SSDEEP TLSH

AAM Registration Notifier.exe

IMPHASH ab5cbd58af43be8e1db35bb6c0a7177f
SHA256 586df54f5c5dc1ec59b71984c6a94c74e37093337e0a512ed1898dbfd6cf775c
MD5 d35cbec68691bb1c6bf193f4cd92f76b
SHA1 48fdb04d1c97bd57f408af67155132d59eb5f15a
SHA512 6344ffb73066106873a2db2fce3f552bdca4e30775db82e16711e7a6b21377c296b3b3e20600862f840d2ab038bb04aa8fa8465f6dda8ee2d1c3fb277f0fea72
SSDEEP 6144:tKJFvFfgWZHHWVf9JSFPMVZF/CNQRJwELmPx:tKJFvyC259QMVZF/CNQLw/x
TLSH
T116546B20A6A0C037E4A31631CDBEA76A493ABC315F61D1CBFB943A2D5D707D19A3171B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

ca:04:86:e9:db:09:38:ae:08:ef:ba:6c:c9:63:75:ad:e9:9b:9f:2f

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Chains

Apr 22, 2014

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Serial Number

1d:37:83:b3:de:cd:5d:bb:16:e3:3c:d3:a6:b3:bf:db

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 20, 2014 - Feb 21, 2015

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

1

Major OS version

5

Entry point

90408

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\oobe\7.mbls\dev\aamcore\target\win\Release\AAMRegistrationNotifier.pdb

user32

DefWindowProcW UpdateWindow SendMessageW CreateWindowExW ShowWindow LoadIconW RegisterClassExW LoadAcceleratorsW wsprintfW EndPaint DestroyWindow TranslateAcceleratorW GetMessageW PostQuitMessage PostMessageW LoadCursorW BeginPaint TranslateMessage DispatchMessageW

ole32

CoCreateInstance OleRun CoInitialize

oleaut32

GetErrorInfo SysFreeString VariantClear SysAllocString

shlwapi

PathRenameExtensionW PathAppendW PathAddExtensionW PathIsFileSpecW PathRemoveExtensionW PathRemoveFileSpecW PathIsDirectoryW PathFileExistsW

kernel32

TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent GetTickCount SetEnvironmentVariableA CompareStringW GetProcessHeap SetEndOfFile CreateFileA WriteConsoleW SetStdHandle HeapReAlloc GetStringTypeW IsValidLocale QueryPerformanceCounter HeapCreate TlsFree TlsSetValue TlsGetValue TlsAlloc GetFileType InitializeCriticalSectionAndSpinCount SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID IsValidCodePage GetOEMCP GetACP GetLocaleInfoW GetConsoleMode GetConsoleCP GetCommandLineW WaitForSingleObject SetEvent GetCurrentThreadId CloseHandle CreateThread CreateMutexW Sleep ReleaseSemaphore GetLastError CreateSemaphoreW LocalAlloc OpenSemaphoreW ReleaseMutex GetCurrentProcessId LocalFree GetDateFormatW CreateDirectoryW WriteFile GetTimeFormatW CreateFileW MultiByteToWideChar GetTempPathW GetLocalTime FreeLibrary LoadLibraryW GetProcAddress GetSystemDefaultLangID WideCharToMultiByte ReadFile GetModuleFileNameW FlushFileBuffers SetLastError CreateEventW GetStdHandle GetUserDefaultUILanguage DeleteFileW InterlockedIncrement InterlockedDecrement IsDBCSLeadByteEx InitializeCriticalSection LeaveCriticalSection EnterCriticalSection DeleteCriticalSection SetFilePointer GetFileSizeEx OpenMutexW EncodePointer DecodePointer HeapSetInformation GetStartupInfoW HeapFree HeapAlloc GetSystemTimeAsFileTime RtlUnwind RaiseException MoveFileW GetTimeZoneInformation LCMapStringW GetCPInfo SetUnhandledExceptionFilter GetModuleHandleW ExitProcess HeapSize

advapi32

SetSecurityDescriptorDacl AllocateAndInitializeSid SetEntriesInAclW FreeSid InitializeSecurityDescriptor

shell32

CommandLineToArgvW SHCreateDirectoryExW ShellExecuteW Shell_NotifyIconW

AXFB/AX_SLConfig.xml

SHA256 e75ee110d3e95d99dcec280124b2b0b1fa5f118484d7dbb347ba2bf36ff3e3ba
MD5 68943c19c380aaa4fe8b5c1f46ac71a3
SHA1 c23d911f3fc66c02aa75a378b8870e7496da549e
SHA512 7bb23b9b5dfca885574aeb0aa6480b3645698c03ef163766ad79be263612be2f5f1e76bb71c0f60a32cc80b30830eb27968b897638d7a3a476ca4575b0a4ddf4
SSDEEP 384:Sq3vAbTPFIcB3aKO7dcB3aNJT6xc0aN5j6DvBxq3LXXkd6DvAtBxq3LXWB0:S/PPqwOB/JWxamzSkAktv0
TLSH
T13B62D84602D3312FBDF7732101A6BB1AFE54652311AD34CAF2EF94400F52626E6A7E1D
MD5 SHA1 SHA512 SSDEEP TLSH

AXFB/AX_application.sif

SHA256 0209f2f2a91e25851ada5341cb1126819c13cb348a7da0f87548032ef96ab003
MD5 82aa00f13e438bb2f645f0153e1c5f90
SHA1 ea90c49ca8825cbf37d358e9e3f64bb84b395411
SHA512 1e9597ea22cede555b2efabeb88c5498f4675d64a7e3f0ddf51cee7573e0b952aaaea4643c0241fb8081f8ad279d06107139554e8cfa0268b849c90a590a4fb5
TLSH
T14B71E7A77748BC3DD6D123BD298D1F3973B6E0B02E8A8767115C1BAC1C132D01ED4958
MD5 SHA1 SHA512 TLSH

AXFB/FB_SLConfig.xml

SHA256 73693234072bd271cb9fc739e4274b15d79ba884155a66b858aa5ba262bb5f0f
MD5 110849d681255b1bd72179feba8b582d
SHA1 a26d2fa70af7313a6d00554bfe64eebba7964886
SHA512 f0df68d1dc9b3e5cefcb0fa17eab457db8c2da66a2a9e145c2672b4ec77fa3eb19e1c5d820b62978be6ed3a3d6b97e5201da559a48d57d41b6559970d48e2ec8
SSDEEP 384:2FV3z/owP9peEvXIrvD8yMvmV3zbvLzU0UprHuxziJwFvpFcX6BwdEw9c5kbTw6p:Eol81uQJN6B2bTPUjaZYab
TLSH
T1772394074EC73E2B63D6224200FE35C9DE5C5B67169A00D9BA9FF444972221EE5F3A6C
MD5 SHA1 SHA512 SSDEEP TLSH

AXFB/FB_application.sif

SHA256 6f79d2884730f71172a9266cb91fc790b82fa22805a9669d2b3f64d1b76ed0cd
MD5 4d6d48d6c20cde87750b63c65e220e63
SHA1 f6c85d4e67abaaf82cbac65edd3a1ff791b6ef4b
SHA512 2e3dba8b235615405f97df23f392d397014bd29e080f736ca06eaed8a08a5b77e8399d2df617f751900adfed00e9a3e1acd76c60d4167b9ecdd0d59e5a7937af
SSDEEP 96:r5GdaWk4ytu8V7TrzDIcIgcOsvx1U6jZ8EgJ4wDvk:r5AaWk4ytu8V7TrzDIcIgcOsZ1U6jZ8G
TLSH
T1EDB1DF9B7B14F921CA1624FC4D9E7FA8570AE4752C4E338BA44C5B4E3C670F50EA4D98
MD5 SHA1 SHA512 SSDEEP TLSH

IMSLib.dll

IMPHASH d2bd03e0f585d5b9428a537d680aff97
SHA256 fb2dcadfa6957614689358cc15b7b1025b9fb4b0c464a37d25695e81ecf99242
MD5 a929a601adf84d0aba2a17fec23bae3a
SHA1 e399f8b24793de82ebea52b092af584702102330
SHA512 083fe0aeb5d29f15a0a17337ad6bee366df1a2cff74e79626245aa33857ff29759378997e12cc68c5ce91011b22cb1aa4f8e32c65485f81c208d5aeb73527b4b
SSDEEP 24576:UGV4WrZbdsahQc7FjWl1KM0G5MvIfBZRA3ACY1suRjtICNempl:SWZbfbjWY6UALofY1su4CImpl
TLSH
T160459D11ABE0C679F0EB12B59A3D5B2E1D3DB921172081CFB7C02D994E706D19E3A367
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

fd:e0:be:a3:c6:d2:42:84:33:42:ba:df:cd:2e:f3:c0:3e:3b:0b:d5

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Chains

Nov 5, 2013

CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Serial Number

11:c9:54:ae:24:12:01:1c:f5:4a:7c:3c:b1:8d:75:1e

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 19, 2013 - Feb 20, 2014

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

1

Major OS version

5

Entry point

805051

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\oobe\7.0\dev\aamcore\target\win\Release\OOBECommon\IMSLib.pdb

winhttp

WinHttpConnect WinHttpCloseHandle WinHttpSendRequest WinHttpGetIEProxyConfigForCurrentUser WinHttpAddRequestHeaders WinHttpQueryHeaders WinHttpSetStatusCallback WinHttpQueryDataAvailable WinHttpOpen WinHttpOpenRequest WinHttpGetProxyForUrl WinHttpCrackUrl WinHttpReceiveResponse WinHttpSetCredentials WinHttpReadData

setupapi

SetupDiGetDeviceInstanceIdW SetupDiGetDeviceRegistryPropertyW SetupDiDestroyDeviceInfoList SetupDiEnumDeviceInfo SetupDiGetClassDevsW CM_Get_DevNode_Status

kernel32

GetEnvironmentStringsW GetFileInformationByHandle WaitForSingleObject SetEvent MultiByteToWideChar GetLastError GlobalFree CreateEventW WaitForMultipleObjects CloseHandle CreateThread InitializeCriticalSection LeaveCriticalSection EnterCriticalSection DeleteCriticalSection GetFileSize CreateMutexW SystemTimeToFileTime GetCurrentProcess GetModuleHandleW WriteFile WideCharToMultiByte Sleep GetVersionExW GetFileAttributesW ReadFile GetModuleFileNameW CreateFileW FlushFileBuffers GetTempPathW SetLastError GetProcAddress FindClose GetCurrentDirectoryW ReleaseMutex DeleteFileW LocalFree GetSystemTime SetFileAttributesW lstrlenA InterlockedIncrement InterlockedDecrement ReleaseSemaphore CreateSemaphoreW GetCurrentProcessId CreateDirectoryW GetDateFormatW GetTimeFormatW GetLocalTime QueryPerformanceCounter SetFilePointer GetFileSizeEx GetCurrentThreadId OpenMutexW GetFullPathNameW GetFullPathNameA CreateFileA SetEndOfFile FreeLibrary UnlockFile LockFile GetTickCount GetSystemTimeAsFileTime FormatMessageA LoadLibraryW GetFileAttributesA LockFileEx GetDiskFreeSpaceW LoadLibraryA GetDiskFreeSpaceA GetTempPathA AreFileApisANSI DeleteFileA FreeEnvironmentStringsW GetModuleFileNameA PeekNamedPipe SetStdHandle GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetDriveTypeW GetConsoleCP GetConsoleMode GetProcessHeap WriteConsoleW CompareStringW SetEnvironmentVariableA FindFirstFileExW GetStartupInfoW GetFileType SetHandleCount IsValidCodePage GetOEMCP GetACP InitializeCriticalSectionAndSpinCount TlsFree TlsSetValue TlsGetValue TlsAlloc GetLocaleInfoW HeapSize GetStdHandle ExitProcess HeapDestroy HeapCreate FileTimeToLocalFileTime FileTimeToSystemTime GetCommandLineA HeapReAlloc HeapAlloc HeapFree DecodePointer EncodePointer GetStringTypeW IsProcessorFeaturePresent IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess GetCPInfo LCMapStringW RtlUnwind RaiseException GetTimeZoneInformation MoveFileW InterlockedCompareExchange InterlockedExchange

user32

wsprintfW

advapi32

GetUserNameW

shell32

SHGetSpecialFolderPathW SHGetFolderPathW SHCreateDirectoryExW

ole32

CoInitializeEx CoInitializeSecurity CoSetProxyBlanket CoInitialize CoUninitialize OleRun CLSIDFromString CLSIDFromProgID CoCreateInstance

oleaut32

SysFreeString VariantChangeType VariantInit SysAllocStringByteLen VariantCopy VariantClear SysStringLen SysAllocString GetErrorInfo

shlwapi

PathFindFileNameW PathRemoveFileSpecW PathFileExistsW PathRemoveExtensionW PathIsFileSpecW PathAddExtensionW PathAppendW PathRenameExtensionW PathIsDirectoryW

OBLRes/ar_AE/ConnectionFAQ.html

SHA256 d8b820365e17237d8e08b478c2637451097c8e84408d0dbd14ccfe3508086d3a
MD5 e8d6ed9dfd168040856585c3e491920c
SHA1 7267961d3e2906cf98a171c985373655dc77a6a1
SHA512 39a6490ce66df765af731ca31bfaeb11590616b551efe79c320655171a1e69b9b316fef7505555781ac4f9a5c57e031f084db047c100607e9f3663416c3711a9
SSDEEP 96:VJinKsPCBD0hdtHvFKR8n+x9LEZ6l9ucio5t2Tf4meO/jgRzeWjgRLYTWjgRLqSO:tBcE8n2l8o5CfzIKYdqSp82KzqEXEw
TLSH
T15B322F32EB18050AF0E655D971B222957458DB49A30354B6F077BE2ABCCB9F733C126A
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/ar_AE/LicenseFAQ.html

SHA256 9409ea79c89cfc5c93896a0eff9214d12d4852330c5c07ad8384ba34876bab25
MD5 c0e7bde62780c17aacc2dd7a364725e9
SHA1 3452000e41b83b4a194f2e7e68fba36db8e6fb1e
SHA512 8bd625c44518ff10b395e4f64e252dd315f7ac59eb99e1141c2c22366fe29844f39004924fca1f81d80b26a4bd592fbb4343111cd98547b1d53f1e63a5dc2125
SSDEEP 192:tCcYB8n2l8o5UrPKpp828ZuU6/jxUoQgp5ojiebm:tCb8n2l8o5UrPKnVfjxNJJ+m
TLSH
T1BF82FF21EB281406B0F648D9B166129464A4EA4CA3165875F1777D7EBCCF8FB33D036E
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/ar_AE/Main.zdct

SHA256 94aae88889376b4adc40a162963bdbd9588f09dd0952896a7d83da7beacb0df5
MD5 28438a66a4336f13f0f9a56b502e1707
SHA1 e8e39fa290bf567a608d577173c055459e631d0a
SHA512 02a8ca8bb02a4b60628b8a68112e684833ef6a4f9641a7df737059224b55ac2fe09b91a944542a38628106bed95beffb1b5978f724d809a55521536500dadf0b
TLSH
T19D41F9819BDCEA3477B30A1CFD3EC81346EE76466ECD8A3D15B08C1D05E55609A1BAE3
MD5 SHA1 SHA512 TLSH

OBLRes/bg_BG/ConnectionFAQ.html

SHA256 6e067e7b49cfc00cbc022b224b66645c1e766d0f0030308a09ce7d38769bcf81
MD5 c7a1c7ad22f55945883f6088598ddad2
SHA1 03fdbe3f8a7b35f22647992e92cfd9dbfb040266
SHA512 f4522246fea0ffce242be2ec4f415465d36741f7599a55f20a2cc8ec8d941c21d9c44212788bc628a784105929864a3040ec31f9e915ba2c501295d3509ae456
SSDEEP 192:W9wq8Tll8o5CfzIKYdqVgWiaqTRFqGr9Fxt9cD+:WF8Tll8o5CfzIKYdagWnqtFqGrbxtCC
TLSH
T1AC424022E7181989F0F25AD5B0B216516474DB49E30364F6F0377E6BB8CB8B737C2266
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/bg_BG/LicenseFAQ.html

SHA256 e1cc56aa044e6a17fed1b468bba2abbbd4be0be1e9757f1db3f1bb7d25443255
MD5 015be0e6ecb2135ba75e4904b9dc15da
SHA1 d015b1f200355d58f21d4a309236c7d19756c319
SHA512 6702d60fc1a2e8d2d848674006a3a8ec9b2d65cfa9f23b7175f69324a5f0d15883882a6aee90c4ddff044eb4de9ec112220b15d63bab90f8038a31e66bd8b828
SSDEEP 384:WN8Tll8o5UrPKygW7ombH4ocO05FgyL5APYX:WN8Rd5NiombH4o+XAI
TLSH
T1EB822022F7291489A0B54ED8B1A713546464DB48A306A8B4F03B7C7ABCCF4FB37D1369
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/bg_BG/Main.zdct

SHA256 5bdac9b8b2ee3ab3a48ce6b6b39853f74bea0d85f56eb73a48f9d2a6f7bd47fc
MD5 c193a187b9f3fd1838a346f72cd78ca0
SHA1 b6dd938fee2b3fb518699e694d47e2bae3a83608
SHA512 1d2cf10f581f077c247d751f2bea6caeeac5fea14c4f8b3c98ef83fda3770bc5e046ad63d94ba733369d9f14f19e7b3b9bf630ab844471570d309e8bd02f5551
TLSH
T11451994FE6FCA10172B6920C2F7A48E615EE7B052B1D898D556F7C9C50ECA3163263CB
MD5 SHA1 SHA512 TLSH

OBLRes/bg_BG/oobe_launcher.zdct

SHA256 b92878d7ea406dd54c8ebce2235520787e7d8439e470e86b4a3e7514beec2e05
MD5 09b4e586f1641ad6eb6f34665ef1f8f1
SHA1 3932bf40beadef80c74f0816e3e9233860f1ecee
SHA512 21e08e756aa1ee306257b9bc5cb9c46b7e4efba2219c44fda97be3d7ada1d5d13236201ee366c2afbbdba347eaa71c29eedac44bd52edec66d8b9df41946f1a6
TLSH
T12CF0A7B9DA42A366578CA1FB70CEC4C6FDFCA2AC82F43C1502021285B59363921778A2
MD5 SHA1 SHA512 TLSH

OBLRes/cs_CZ/ConnectionFAQ.html

SHA256 706cea3ac5229ba42974a5dc2d98e1fcaf5984be605d3e52b26a1b5bad382d34
MD5 bc21a0d2dd6bf447543cf973992774c5
SHA1 9314e664da60951cd1f4ab4f81ceecb2f37d6ead
SHA512 7b25620a07812100353d02ae481fbb942cb0ac83fbde39a2fe949e54e3e657da46f4baa66fffd0f0c96abb6e461999a578962da63a3b6aca144434ddcc186f02
SSDEEP 96:VJinosPCvu6hatUvmFDn8T3I95Nh6l9ucio5t2Tf4meO/jgRzeWjgRLYTWjgRLqg:Xjq8Tll8o5CfzIKYdqVgW4dACQg6oJ
TLSH
T151324232E7090549F0F645D9B0B312517868D749934794B6F0777E6ABCCB8B723C22AA
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/cs_CZ/LicenseFAQ.html

SHA256 441b86951a7169c29e02372bc48cf7c39dae7f8e43339ebb64e6bb0dc0fbac8c
MD5 874e53d2bd349b1f98b08367b6dc8c3b
SHA1 f2febec8fc4153c6335362ff93c2da30ec3c02af
SHA512 c9819d64a1d2490db7b69eb0e6e29ce12f6b16a794ddafca8f3c681cd6615fed1da6b86c4f85e7c5023d7fbb7b4608d683b4ce054263e4b03348d864ae1e767b
SSDEEP 192:XKUO8Tll8o5UrPKygW9B+CFzp5somVKBhNNntL:Xu8Tll8o5UrPKygW9B+CF7sotZlF
TLSH
T167824322FB280415B0F649C9B0A713946464EB4CA3569475F07B7D7ABCCA8BB33E1379
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/cs_CZ/Main.zdct

SHA256 5d39922768ba901c5e81a6958daaeb44ef7808ea18f55e493c6b35971a597560
MD5 dfb1416e0431ffd0a0d2b624dba53ff8
SHA1 cb72fd99e86e8b36f13adcd0995e2cdb09873498
SHA512 1f1664f41bb59400a8f91485558ce18aabf251dfcd65cc481a45ee9fc4c9aaf22a9273dc89231ae7635e5d5b8b9b7ffd82b67826d354add5c54ef620c421230a
TLSH
T14051AD9153FC2501B2F36F0CBE7815660DFF7996AE3DCA4E58A0094D05F5A80D9A2BA3
MD5 SHA1 SHA512 TLSH

OBLRes/cs_CZ/oobe_launcher.zdct

SHA256 64edf68f7bb764647801c17c687bf63864e60ebd0aa4cfd3434970993c2097e4
MD5 e926887fcc71030d4ac6a332034fb74d
SHA1 d94b86056405a234c07e646a656c605cfd5698e7
SHA512 cb7677209c790f8b41e95998506fb88307c576537735806a40267943f546e9cc959bc42a288bbd81f90cfb60f1393f4309b89de4e844f1435b31301a9e1bf129
SSDEEP 96:mtf7CIB7CWT7CGO7CAj7CTsWa7CbvC7CIsWa7CVxhDCHS7Cv:6bLcBbWc7GWce/Xo
TLSH
T15EA1391273F81654F6F37B0DAABA35A15E3F7D94B930C15E6128424C09BAE859CD0B33
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/da_DK/ConnectionFAQ.html

SHA256 74542227a4d048728bacaa55f40ecf75a9f2bae2c1ece220e880173ad8d34e0d
MD5 e5385a09f8b439becbeb8c4fe5b04092
SHA1 9cd97ac38f39646e972d5835f6f57e469f24cc76
SHA512 8bf27adbdc608497ac7aacc1ac6d1529fd3192c242d3cc4aa07b6c62f888862f551464a4843591697ee0353ac8f5e9a948e5ebb31324dc36341b95cad43baa18
SSDEEP 96:VJin+sPCD6hatUvmFDn8T3I95Nh6l9ucio5t2Tf4meO/jgRzeWjgRLYTWjgRLqbE:dEq8Tll8o5CfzIKYdqVgW9oow
TLSH
T125424032E7190619F0F649D5B0B222956468D749D31354B6F0767E3BBCCB8B733C22AA
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/da_DK/LicenseFAQ.html

SHA256 3fb08a864591f2b78ce205f340ee580f6a7c72725847870123413c7c13ccc5bb
MD5 2470698e1ebe7b8966f420bdd23bad1b
SHA1 f90f662a23c9f194d8ebf17472bc76b095d9fd0e
SHA512 87223f5464a36d3e6cfbbd92bf68c66dd47f9ec6bd26a21b8df7001eade8dd1459d2e5c2643dc1960399b78cdeddafd507bfdc308c5e54b3e79cc537fa499119
SSDEEP 192:d9UO8Tll8o5UrPKygWmlzBSkeHt9sUf49ZCEiY0MXHL:dL8Tll8o5UrPKygWml1yNfnYn
TLSH
T1A3823322EB280415B0F64AD5B16213A56498DB4CD31658B5F07ABC7AFCCF8BB33D1369
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/da_DK/Main.zdct

SHA256 7b8cd3ef7c80b75e433025c7940c632af691b8b40830379c9df71ece94117a9f
MD5 8623fca8be11700bfca129b992b88089
SHA1 587ed7fb189f4c06de7424172507d3eee9a1ceae
SHA512 463e3cc47abf64e1f153962a81e4f0e0c3e4ab33677211c001637c4ee2dbfca70d5825407450ede58516c47cf6379baa86742ddb2138c3f9114876afe80a8794
TLSH
T129514891A7EC6A09F6F31B1C7E7904510EEAFE866E3ECA0C2560594C08F5580D5B2B73
MD5 SHA1 SHA512 TLSH

OBLRes/da_DK/oobe_launcher.zdct

SHA256 df59239359e21d36b22478d7cbc580cb7daedc244d7e81100713fff68fcbc8e6
MD5 b9beead31e264b57792738b1e76e0c99
SHA1 31aae69552f004ee18c75c58b11cab017c6a2178
SHA512 7c94ac56c52d173707829c01b1ee1a1ae128bafdbcbf5c42dd311a7fe4cd50c649fd05d9e7532f8e767eb54e64ae40106d63cd81ff4e9631aa3c26277f5e0fe2
SSDEEP 96:p+1FCJ7FC3GFCXQFCB+FCSISFCKEFCb1ISFCrOfqtCJ+tCB:MQZ//vsa8h/i
TLSH
T1DEA1E52673F96608F5F7271DAABA70941F7EBDD4A939C26D2160410C0CBAF8589D0B33
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/de_DE/ConnectionFAQ.html

SHA256 416d9d4c1cd083aaddc82060092a11a6545fa2f5cb9b70f7966c8b6ec623f4f6
MD5 f5f4a59c696e5a77349fef6bb0400bbb
SHA1 250fdb37f3ae90ef76159edd31da485f3c490c07
SHA512 c7e5faaf781df7dc6106915ff5b0477745b3f6d1af24df94130c58603daf34e0135e65bcdd88a849415ed415e2aef295072bbebc2e4143673e14d6c79a08ceda
SSDEEP 192:dF9q8Tll8o5CfzIKYdqVgWtL0QRp3oz7FljvKLvAoaZP:de8Tll8o5CfzIKYdagW5CnFsLm
TLSH
T11D427332E7090509B0F256D5B1B212A17468D759D31364B5F077AE3BFCCB8B727C226A
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/de_DE/LicenseFAQ.html

SHA256 c430aacb3dce799d6df06e3ecaa471edae33c9826c8f1a7f7f65e1731b7d1fd5
MD5 1eba6aeaec0e67abc3c9e6949a53c3ba
SHA1 0f561fc5398f6dff6bdab69419ad29411d1df1f4
SHA512 bf32936c27615caedccc66fd2161a0dbdb42f18c81ae32b3a2f89d84db9cac78ac060af7109fd3afc72c4e3623ea13da4891bc14792f4eb6638faf70f45df39f
SSDEEP 192:dK9UO8Tll8o5UrPKygWw74ubGMC35mD1dPBz64+to5u6EXbErvO/vafufVFVVuUC:du8Tll8o5UrPKygWSbGMJQQjO3dfrxy
TLSH
T1ED824322EB190409B0F64AC5B16213A534A4D75DA3129874F07BBD7ABCCF4BB33D127A
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/de_DE/Main.zdct

SHA256 f75df711de3885bdbe4504d0f7b9dd9c2aa931c96522d2faed65488368d46bab
MD5 4c49c8d0dc821f2eb8a7023629c8f32d
SHA1 5fe392352cdcc76ad26cf5e701829ac8229d6a3d
SHA512 20fee89e5b46d1158906477c76cd6ce3fde5fff259b872154d72074c3b6d3a35652dcef8cf9d8219383164ed6e43f3b9093099102dd0754f7f1aa54748566bff
TLSH
T178515E5187E8A609F2F32B0CBE3C16551EBBBDC6BE39DA0C1660581D08F5A409962B73
MD5 SHA1 SHA512 TLSH

OBLRes/de_DE/oobe_launcher.zdct

SHA256 404189c9fc1e8ddb2c386ed1636b4cc2fa18bb0cb2d5cb1ea0b5a91022e818c6
MD5 4b08bec1f13c87c1cb7472b2c869466a
SHA1 7da9e0ca989449ff2f07b00c18131d8b2052e083
SHA512 3f631922c24669e8b6e2cb02f9fc975459576ba7cc80da63e76ca5d45fb7275a9a2466eb7c58cc78a9ec1c3cf14f0521469513113421b46f0845b4b940d7715c
SSDEEP 96:AjC10+Czx10+Cu10+C8E10+CGE10+CPk10eCtE10+CP10+CIX10+CAcn+C+:Dh4hrhyhYhBJbhyh3XhBN
TLSH
T13BB1F91263F9A748F2F33719AE7A72A01F7F7DD5A834E15D2260454C4CBAE4489A4B33
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/el_GR/ConnectionFAQ.html

SHA256 5e853e130754976496ceb56b465cb8e908c0fcd7888da848f9fc1369f38430fb
MD5 4c13864f285824753e0613422191d29b
SHA1 37b50776bffbef13edbc64fbdadbf98621af4156
SHA512 8aacf5494654d86dcf846085a733dbec5347378a36993edea33a6fb84bbacb2b3355921fb2e59991ed85117149c14f66804ad2ef975f3edf3cb74a6b38604a51
SSDEEP 192:k8Aq8Tll8o5CfzIKYdqVgWT4ZBz/e/REKuX:kY8Tll8o5CfzIKYdagWKd/sk
TLSH
T1D7427531E7190509B0F25AD5B0B212517868C759D30395B5F07ABE6BBCCB8B737C22AB
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/el_GR/LicenseFAQ.html

SHA256 f832c7f6360ca7498554f9dbc79354b491a1211cc7c388f65207929cccdffaef
MD5 79c0e8623022b5f788df9d7d741c61e0
SHA1 a46966a0a3a94d4f153f76ef3c9f7c3f37dbfed8
SHA512 4068384c9b1911be337095a9fedb0783e43278d8b69541dc3d0d91d0e96e942dd7d47ca4c9d6528494f8b94a1b7d2a65f9d806566e0597dd915004785dff801a
SSDEEP 192:kNAUO8Tll8o5UrPKygWukKjIiTZwAG4Akeeu2hunHgBhuMh2LeCCU:k+8Tll8o5UrPKygWu4cJe9p00
TLSH
T18B824312E7240409B0B64ED9B06612956454DB1CE3569875F07BBDABBCCFCBB33C13AA
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/el_GR/Main.zdct

SHA256 2f850b23be8b90d3bb96c0f0fa33b29decc4b8ba7d703c59344d94dd82a31888
MD5 4a396195a78f20e1a6cda0e540a471fd
SHA1 9f5c7c099a6adb5905ff9cecd18ce053a44adad6
SHA512 4db0a8c565dfeb48d045cfb3a6590d524ffd51d6a4790f07fe22865d89a98cf989eafa2ab39f28d74fbe519dcbf7711f4d8b5ea4fb5c6b6a257a6fcde2299dcb
TLSH
T12751E28D8AEF6A11FAB75AEC793B45424BDFF9461908CE1E35B0700DD8EC90049D3A53
MD5 SHA1 SHA512 TLSH

OBLRes/en_AE/ConnectionFAQ.html

SHA256 8ba72a16729211dae68bb3e093d43e54a29f99019cf9c612c5734d1e728503ef
MD5 5ebcacb7f0e1422f0c3fa20bfaa29c3c
SHA1 7fc7064e6e0bd5563078be36e1c3754991f9a865
SHA512 7a2e015d8af095f04a2c7460e652a9ff15babd699bcd27f22b44b8f16225d9630d2ef51cff47824cb4cf1e9ab37219ef5da5ee814ddfb00f0f0c53789c12a9c4
SSDEEP 192:BHe1a8XUVbQk10gVpfTY2di/nSWnG4obEz7qW:BT8X4bQk10gVpfTY2dsnZhoYn9
TLSH
T1F4426232E72A010591F746E5B1B21252F438E749931754B5F137BA7AACCB8F623C22B2
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/en_AE/LicenseFAQ.html

SHA256 50ffa995427d576ac7a4c1d564788a6a552a8bcb4b7cf393c7d132a443f48cbf
MD5 665e1985893f9e0701f79dfb1f99a4d7
SHA1 b695b2c8f15852dd204edaad62254447606fa4f3
SHA512 00a4fdb70d80d0881d1498139b177821c6be70e910d93eb5b32a9cdc57f9eed121656e975f8e86bbecf6039943e0c7ec2579e5d8e23f1553d92d0fe6ece3aa81
SSDEEP 384:BE8X4bQkY3TYUnZwSrLGOJZn86JaichcJ:BE8iQkM0UnmSr0iJ
TLSH
T15C826522E7260014A1F60AE571A613D6A478E64DA3165470F13BBD7DACCF8FB33D22B5
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/en_AE/Main.zdct

SHA256 b85ed26e8a037805183d7558943d9d02de007906b83453af54c3618dfae3ec16
MD5 cf4d276079a857f528c6d6b5d3708408
SHA1 b20ecdf34ea3aab0c8747378a6d686990ee6371b
SHA512 ed45ba8fe41678ed413ed14cf86a514e8a70e2d69718e313ccd0e8b985190ef2cb06e7bd9435a2c25eeb0a227343db0d3ce8a5dfa3d321d6a634a75088880903
TLSH
T160516991A7EC6614B6F32F0CBD7915540EFEBD9AAE3DCA1C1160045E08F5A40C8A2B73
MD5 SHA1 SHA512 TLSH

OBLRes/en_AE/oobe_launcher.zdct

SHA256 5a8b648403ce7fc70ace2f22b76b360dbd6c588e1eadd9495fd7003fc8a0cbf4
MD5 66177cb0198f74f0f4c8a7e49aa7d8a8
SHA1 cd2d8022506740dd1d4898a22a421425398a0be8
SHA512 6ec5da7cb79ec0334567ea94de2d9e92c26d4a4a8567454592e32cfb738593041fcc9811049ea44f253921d92a71524e1111c8e10dcd8f9434ab1c962403f502
SSDEEP 96:pG+1sCWI1sCQJ1sCgI1sCex1sCdL1sClZ1sCE1L1sCSOv1sC+ci1sCM:Xi8iziyiticiei/iZGi9iT
TLSH
T11CA12B46B3F85608F6F32B1D5A7A74952F7FBD85A938C2AD2160454C4CBAF418CA0B33
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/en_GB/ConnectionFAQ.html

SHA256 8ba72a16729211dae68bb3e093d43e54a29f99019cf9c612c5734d1e728503ef
MD5 5ebcacb7f0e1422f0c3fa20bfaa29c3c
SHA1 7fc7064e6e0bd5563078be36e1c3754991f9a865
SHA512 7a2e015d8af095f04a2c7460e652a9ff15babd699bcd27f22b44b8f16225d9630d2ef51cff47824cb4cf1e9ab37219ef5da5ee814ddfb00f0f0c53789c12a9c4
SSDEEP 192:BHe1a8XUVbQk10gVpfTY2di/nSWnG4obEz7qW:BT8X4bQk10gVpfTY2dsnZhoYn9
TLSH
T1F4426232E72A010591F746E5B1B21252F438E749931754B5F137BA7AACCB8F623C22B2
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/en_GB/LicenseFAQ.html

SHA256 50ffa995427d576ac7a4c1d564788a6a552a8bcb4b7cf393c7d132a443f48cbf
MD5 665e1985893f9e0701f79dfb1f99a4d7
SHA1 b695b2c8f15852dd204edaad62254447606fa4f3
SHA512 00a4fdb70d80d0881d1498139b177821c6be70e910d93eb5b32a9cdc57f9eed121656e975f8e86bbecf6039943e0c7ec2579e5d8e23f1553d92d0fe6ece3aa81
SSDEEP 384:BE8X4bQkY3TYUnZwSrLGOJZn86JaichcJ:BE8iQkM0UnmSr0iJ
TLSH
T15C826522E7260014A1F60AE571A613D6A478E64DA3165470F13BBD7DACCF8FB33D22B5
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/en_GB/Main.zdct

SHA256 b85ed26e8a037805183d7558943d9d02de007906b83453af54c3618dfae3ec16
MD5 cf4d276079a857f528c6d6b5d3708408
SHA1 b20ecdf34ea3aab0c8747378a6d686990ee6371b
SHA512 ed45ba8fe41678ed413ed14cf86a514e8a70e2d69718e313ccd0e8b985190ef2cb06e7bd9435a2c25eeb0a227343db0d3ce8a5dfa3d321d6a634a75088880903
TLSH
T160516991A7EC6614B6F32F0CBD7915540EFEBD9AAE3DCA1C1160045E08F5A40C8A2B73
MD5 SHA1 SHA512 TLSH

OBLRes/en_GB/oobe_launcher.zdct

SHA256 45b28a7425a534d6f1e4f0692bc6558b5c049db2266ddb55f4e8b7f1215edd27
MD5 111abbd6b05d13cc93558d77c4e4a2ea
SHA1 e93923e3169553a2141ca087260afc9d981b33ac
SHA512 7f3a886e94344868efdb94fbc3db2f1440cbf3c003647eb1f64d4137fe73c697ad8e9492b164b898ad32aa1c6d98442c73ad7aa6f79bdbde68ead0af07db6b0d
SSDEEP 96:pG+1sCAI1sCWJ1sCGI1sCox1sCrL1sCzZ1sCS1L1sCwOv1sCYci1sCW:XiCi9iciTiCiwiBi3GiDiN
TLSH
T12FA1FB56B3F85608F6F32B1D5A7A74952F7FBD85A938C2AD2160414C4DBAF448CA0B33
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/en_IL/ConnectionFAQ.html

SHA256 8ba72a16729211dae68bb3e093d43e54a29f99019cf9c612c5734d1e728503ef
MD5 5ebcacb7f0e1422f0c3fa20bfaa29c3c
SHA1 7fc7064e6e0bd5563078be36e1c3754991f9a865
SHA512 7a2e015d8af095f04a2c7460e652a9ff15babd699bcd27f22b44b8f16225d9630d2ef51cff47824cb4cf1e9ab37219ef5da5ee814ddfb00f0f0c53789c12a9c4
SSDEEP 192:BHe1a8XUVbQk10gVpfTY2di/nSWnG4obEz7qW:BT8X4bQk10gVpfTY2dsnZhoYn9
TLSH
T1F4426232E72A010591F746E5B1B21252F438E749931754B5F137BA7AACCB8F623C22B2
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/en_IL/LicenseFAQ.html

SHA256 50ffa995427d576ac7a4c1d564788a6a552a8bcb4b7cf393c7d132a443f48cbf
MD5 665e1985893f9e0701f79dfb1f99a4d7
SHA1 b695b2c8f15852dd204edaad62254447606fa4f3
SHA512 00a4fdb70d80d0881d1498139b177821c6be70e910d93eb5b32a9cdc57f9eed121656e975f8e86bbecf6039943e0c7ec2579e5d8e23f1553d92d0fe6ece3aa81
SSDEEP 384:BE8X4bQkY3TYUnZwSrLGOJZn86JaichcJ:BE8iQkM0UnmSr0iJ
TLSH
T15C826522E7260014A1F60AE571A613D6A478E64DA3165470F13BBD7DACCF8FB33D22B5
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/en_IL/Main.zdct

SHA256 b85ed26e8a037805183d7558943d9d02de007906b83453af54c3618dfae3ec16
MD5 cf4d276079a857f528c6d6b5d3708408
SHA1 b20ecdf34ea3aab0c8747378a6d686990ee6371b
SHA512 ed45ba8fe41678ed413ed14cf86a514e8a70e2d69718e313ccd0e8b985190ef2cb06e7bd9435a2c25eeb0a227343db0d3ce8a5dfa3d321d6a634a75088880903
TLSH
T160516991A7EC6614B6F32F0CBD7915540EFEBD9AAE3DCA1C1160045E08F5A40C8A2B73
MD5 SHA1 SHA512 TLSH

OBLRes/en_IL/oobe_launcher.zdct

SHA256 0903e916bda98ae0d9dca64d33f7f45cafe712910935431e56a3a8826f7d53fe
MD5 b6c389c5ca77a8b1924dd08c18a6f120
SHA1 5b63f8c3da889fd23692e052fa8be620415b1bf1
SHA512 518b4efe8df1e6143be184e3e6098149141d0c273376acf742cf41e7b9add1dd143f597c62d030138fb0f0d3b3c42f06eb59863934224a0630d249e9842c94b5
SSDEEP 96:pG+1sCHI1sC5J1sCJI1sCPx1sCsL1sCUZ1sCV1L1sCVOv1sCnci1sCv:Xi1iCibi8i1ifiWiGGikiA
TLSH
T117A12D45B3F85608F6F32B1D6A7A74951F7FBD95A938C2AD2120454C4CBAF508CA0B33
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/en_MX/ConnectionFAQ.html

SHA256 8ba72a16729211dae68bb3e093d43e54a29f99019cf9c612c5734d1e728503ef
MD5 5ebcacb7f0e1422f0c3fa20bfaa29c3c
SHA1 7fc7064e6e0bd5563078be36e1c3754991f9a865
SHA512 7a2e015d8af095f04a2c7460e652a9ff15babd699bcd27f22b44b8f16225d9630d2ef51cff47824cb4cf1e9ab37219ef5da5ee814ddfb00f0f0c53789c12a9c4
SSDEEP 192:BHe1a8XUVbQk10gVpfTY2di/nSWnG4obEz7qW:BT8X4bQk10gVpfTY2dsnZhoYn9
TLSH
T1F4426232E72A010591F746E5B1B21252F438E749931754B5F137BA7AACCB8F623C22B2
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/en_MX/LicenseFAQ.html

SHA256 50ffa995427d576ac7a4c1d564788a6a552a8bcb4b7cf393c7d132a443f48cbf
MD5 665e1985893f9e0701f79dfb1f99a4d7
SHA1 b695b2c8f15852dd204edaad62254447606fa4f3
SHA512 00a4fdb70d80d0881d1498139b177821c6be70e910d93eb5b32a9cdc57f9eed121656e975f8e86bbecf6039943e0c7ec2579e5d8e23f1553d92d0fe6ece3aa81
SSDEEP 384:BE8X4bQkY3TYUnZwSrLGOJZn86JaichcJ:BE8iQkM0UnmSr0iJ
TLSH
T15C826522E7260014A1F60AE571A613D6A478E64DA3165470F13BBD7DACCF8FB33D22B5
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/en_MX/Main.zdct

SHA256 b85ed26e8a037805183d7558943d9d02de007906b83453af54c3618dfae3ec16
MD5 cf4d276079a857f528c6d6b5d3708408
SHA1 b20ecdf34ea3aab0c8747378a6d686990ee6371b
SHA512 ed45ba8fe41678ed413ed14cf86a514e8a70e2d69718e313ccd0e8b985190ef2cb06e7bd9435a2c25eeb0a227343db0d3ce8a5dfa3d321d6a634a75088880903
TLSH
T160516991A7EC6614B6F32F0CBD7915540EFEBD9AAE3DCA1C1160045E08F5A40C8A2B73
MD5 SHA1 SHA512 TLSH

OBLRes/en_MX/oobe_launcher.zdct

SHA256 b92878d7ea406dd54c8ebce2235520787e7d8439e470e86b4a3e7514beec2e05
MD5 09b4e586f1641ad6eb6f34665ef1f8f1
SHA1 3932bf40beadef80c74f0816e3e9233860f1ecee
SHA512 21e08e756aa1ee306257b9bc5cb9c46b7e4efba2219c44fda97be3d7ada1d5d13236201ee366c2afbbdba347eaa71c29eedac44bd52edec66d8b9df41946f1a6
TLSH
T12CF0A7B9DA42A366578CA1FB70CEC4C6FDFCA2AC82F43C1502021285B59363921778A2
MD5 SHA1 SHA512 TLSH

OBLRes/en_US/ConnectionFAQ.html

SHA256 8ba72a16729211dae68bb3e093d43e54a29f99019cf9c612c5734d1e728503ef
MD5 5ebcacb7f0e1422f0c3fa20bfaa29c3c
SHA1 7fc7064e6e0bd5563078be36e1c3754991f9a865
SHA512 7a2e015d8af095f04a2c7460e652a9ff15babd699bcd27f22b44b8f16225d9630d2ef51cff47824cb4cf1e9ab37219ef5da5ee814ddfb00f0f0c53789c12a9c4
SSDEEP 192:BHe1a8XUVbQk10gVpfTY2di/nSWnG4obEz7qW:BT8X4bQk10gVpfTY2dsnZhoYn9
TLSH
T1F4426232E72A010591F746E5B1B21252F438E749931754B5F137BA7AACCB8F623C22B2
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/en_US/LicenseFAQ.html

SHA256 50ffa995427d576ac7a4c1d564788a6a552a8bcb4b7cf393c7d132a443f48cbf
MD5 665e1985893f9e0701f79dfb1f99a4d7
SHA1 b695b2c8f15852dd204edaad62254447606fa4f3
SHA512 00a4fdb70d80d0881d1498139b177821c6be70e910d93eb5b32a9cdc57f9eed121656e975f8e86bbecf6039943e0c7ec2579e5d8e23f1553d92d0fe6ece3aa81
SSDEEP 384:BE8X4bQkY3TYUnZwSrLGOJZn86JaichcJ:BE8iQkM0UnmSr0iJ
TLSH
T15C826522E7260014A1F60AE571A613D6A478E64DA3165470F13BBD7DACCF8FB33D22B5
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/en_US/Main.zdct

SHA256 b85ed26e8a037805183d7558943d9d02de007906b83453af54c3618dfae3ec16
MD5 cf4d276079a857f528c6d6b5d3708408
SHA1 b20ecdf34ea3aab0c8747378a6d686990ee6371b
SHA512 ed45ba8fe41678ed413ed14cf86a514e8a70e2d69718e313ccd0e8b985190ef2cb06e7bd9435a2c25eeb0a227343db0d3ce8a5dfa3d321d6a634a75088880903
TLSH
T160516991A7EC6614B6F32F0CBD7915540EFEBD9AAE3DCA1C1160045E08F5A40C8A2B73
MD5 SHA1 SHA512 TLSH

OBLRes/en_US/oobe_launcher.zdct

SHA256 070727f6ca4d5b6ecde0216008b0bfd24a976b2a7af01080ea56b0d37d56eba7
MD5 d4c8b6bead3259aafa92e87c3614d880
SHA1 5a8a4c71217fed816f176fd7cb06099a3fd37643
SHA512 080a87109aa535624976741327f7c6e69d8ea359c613623a0315d4b11540b7ae446a4e12cea5798ef36a2a2dfc4817e435bb9f337df8c1f8e900dfea1b01204d
SSDEEP 96:pG+1sCJI1sC3J1sCXI1sCBx1sCSL1sCKZ1sCb1L1sCrOv1sCJci1sCB:Xirici1iSiLiBioiUGi6iK
TLSH
T13D910B56B3F85608F6F32B1D5A7A74952F7FBD95A938C2AD2120414C4DBAF448CA0B33
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/en_XM/ConnectionFAQ.html

SHA256 8ba72a16729211dae68bb3e093d43e54a29f99019cf9c612c5734d1e728503ef
MD5 5ebcacb7f0e1422f0c3fa20bfaa29c3c
SHA1 7fc7064e6e0bd5563078be36e1c3754991f9a865
SHA512 7a2e015d8af095f04a2c7460e652a9ff15babd699bcd27f22b44b8f16225d9630d2ef51cff47824cb4cf1e9ab37219ef5da5ee814ddfb00f0f0c53789c12a9c4
SSDEEP 192:BHe1a8XUVbQk10gVpfTY2di/nSWnG4obEz7qW:BT8X4bQk10gVpfTY2dsnZhoYn9
TLSH
T1F4426232E72A010591F746E5B1B21252F438E749931754B5F137BA7AACCB8F623C22B2
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/en_XM/LicenseFAQ.html

SHA256 50ffa995427d576ac7a4c1d564788a6a552a8bcb4b7cf393c7d132a443f48cbf
MD5 665e1985893f9e0701f79dfb1f99a4d7
SHA1 b695b2c8f15852dd204edaad62254447606fa4f3
SHA512 00a4fdb70d80d0881d1498139b177821c6be70e910d93eb5b32a9cdc57f9eed121656e975f8e86bbecf6039943e0c7ec2579e5d8e23f1553d92d0fe6ece3aa81
SSDEEP 384:BE8X4bQkY3TYUnZwSrLGOJZn86JaichcJ:BE8iQkM0UnmSr0iJ
TLSH
T15C826522E7260014A1F60AE571A613D6A478E64DA3165470F13BBD7DACCF8FB33D22B5
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/en_XM/Main.zdct

SHA256 b85ed26e8a037805183d7558943d9d02de007906b83453af54c3618dfae3ec16
MD5 cf4d276079a857f528c6d6b5d3708408
SHA1 b20ecdf34ea3aab0c8747378a6d686990ee6371b
SHA512 ed45ba8fe41678ed413ed14cf86a514e8a70e2d69718e313ccd0e8b985190ef2cb06e7bd9435a2c25eeb0a227343db0d3ce8a5dfa3d321d6a634a75088880903
TLSH
T160516991A7EC6614B6F32F0CBD7915540EFEBD9AAE3DCA1C1160045E08F5A40C8A2B73
MD5 SHA1 SHA512 TLSH

OBLRes/en_XM/oobe_launcher.zdct

SHA256 6f81ee86f3b9878e3f666132e98cdfcb10d71e8f6b393226e0f74c0101e17cd0
MD5 40b5e5be66fcabdc4b162c723dbe8bbc
SHA1 7f82b3c634e23ea4d04871415fadb0446ca69479
SHA512 c8c77f46919b162b4ccdca245c7a59d539e1248de0071fe701405d499164d7b706a835e83c0c5c339647f2ffd5b8531d60d1679bc724fdd149a384a953ce0494
SSDEEP 96:pG+1sCJI1sC3J1sCXI1sCBx1sCSL1sCKZ1sCb1L1sCrOv1sCJci1sCB:XiDiEitiaiDi5iAiMGiyiS
TLSH
T149A11B46B3F85608F6F32B1D5A7A74952F7FBD85A938C2AD2164414C4DBAF408CA0B33
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/es_ES/ConnectionFAQ.html

SHA256 89ba48259ba1592389266c0c083d4a9410bfb33d5a1bb42cd7db9130cfc597bb
MD5 28353436fc2a08ffd172e8e001c34dbc
SHA1 0056e197d3eacd5f87e1e09e72272da52e9ab279
SHA512 80efcf97e82863dad32af717516a9b4347720530d9689429b669dd9c368b7065a2ec13e6d34a1c68c571caf01d66a0a74bd956e44b0e34eda37f215253979050
SSDEEP 384:+g8T3Qo/nfz5Dx63w9v7itRLYzWRglRTRE31oROJ8E1u2QEjE3Ct0EGhexH3sdr2:Z8H/n7596AVubk1lRTRE31oROJ8E1u29
TLSH
T171823122F10C0041B2F645D5B4BB39616014C78DE78B94F8B0777A1A78DF6BA2BC66B7
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/es_ES/LicenseFAQ.html

SHA256 084ca6786e8da6e50df896f9a94738d7292371b385b08cf750252751c79e8262
MD5 cd2ee54ef1b354ebb594683dac1df721
SHA1 6630e2953186846971358a2c7fa41f4959a94149
SHA512 68c4419bc6594529650cb33b1bb323c3070697ed49a9dadaf47832bb031d967a0b7707f2e365b5fb2d7da284380d08e7b0646ab008b5decbcf615713f6805d42
SSDEEP 384:eg8T3Qo/sDxp3f9v7XtmLzzJDglR7EE3qTE1MzE9E32fbE3XVWE3GYE35ERE31TV:58H/s9pPVzIvClR7EE3qTE1MzE9E32fN
TLSH
T1B1B22222F00C0046A2F605C5B4A635716014E74ED78B94F8B06B7D5B7CDEABE2BC52BB
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/es_ES/Main.zdct

SHA256 c8d371a54c27318a245e5db6d064e10d2fdd8cf4b29c6a10bb9c8648a0703cd9
MD5 4628d8c3736290cc84f973f20de92509
SHA1 f71b9e1e439c10c43634c7491a3b8d3b672af4f1
SHA512 1658e48c7804ce8fa86513c57f3e6fc0bb751297a4d77a8fd191dd4f87a7d59a5da2fea3ecd0e086510fe3eadf819aa751a08f7a48c65de5097200134456e88f
TLSH
T1D351789197EC264AB2F33B0C7E3918554EBFBE96EE38DA0C1170581D09F4E4499A1B73
MD5 SHA1 SHA512 TLSH

OBLRes/es_ES/oobe_launcher.zdct

SHA256 5ad17ef0d4691403074842efdb07b924593dcc610be457bbb9f7a18a56f12e14
MD5 2127f59084f6b076980cad818cef2e79
SHA1 beec3f5cdce607c66d493d73dfb82e0d559cf83e
SHA512 38ad6bcaa27bc096dd9580f88075b291a780fdce87e0df59b200ffab1596ae72536f223e8ba3e725f493cd1bc71c66507746096ec9aa8cbea8f09e80986780c3
SSDEEP 96:p/xHCAHCuxHCA5CAHCAJ4HCAP+HCAsmHCAUHHCAV1mHCAVOZHCAnPHCAv:xh5hPyifkS/uFF
TLSH
T1E5919516A3F86748F6F33B1DAA7A74A45F7FBD959838816D2130850C4CBAE4489D0B33
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/es_LA/oobe_launcher.zdct

SHA256 a3433c5a2142b326912459e81853e58b9696292a3cc434e179e827f201041bd5
MD5 830405461cc864396ae8ef044841ca06
SHA1 03e63d7673851dd7a7fb4797f7675c73a9f46d9f
SHA512 bc056a2a5f0d2576df2e2b65d2deca2794a18a7ce5a732c95399ef74629ee383e08fa2fabd5101d1dab673453a2ca3799b9f72c628d17ad4860d832d001bd746
SSDEEP 96:p/xHC7CuxHC1CAHC14HCT+HCgmHCYHHCp1mHChOZHCrPHCL:xhIhyvn69HCuEc
TLSH
T17E919616A3F86748F6F3371DAA7A74A49F7EBD959838816D2230450C4CBAE448DD0B33
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/es_MX/ConnectionFAQ.html

SHA256 89ba48259ba1592389266c0c083d4a9410bfb33d5a1bb42cd7db9130cfc597bb
MD5 28353436fc2a08ffd172e8e001c34dbc
SHA1 0056e197d3eacd5f87e1e09e72272da52e9ab279
SHA512 80efcf97e82863dad32af717516a9b4347720530d9689429b669dd9c368b7065a2ec13e6d34a1c68c571caf01d66a0a74bd956e44b0e34eda37f215253979050
SSDEEP 384:+g8T3Qo/nfz5Dx63w9v7itRLYzWRglRTRE31oROJ8E1u2QEjE3Ct0EGhexH3sdr2:Z8H/n7596AVubk1lRTRE31oROJ8E1u29
TLSH
T171823122F10C0041B2F645D5B4BB39616014C78DE78B94F8B0777A1A78DF6BA2BC66B7
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/es_MX/LicenseFAQ.html

SHA256 084ca6786e8da6e50df896f9a94738d7292371b385b08cf750252751c79e8262
MD5 cd2ee54ef1b354ebb594683dac1df721
SHA1 6630e2953186846971358a2c7fa41f4959a94149
SHA512 68c4419bc6594529650cb33b1bb323c3070697ed49a9dadaf47832bb031d967a0b7707f2e365b5fb2d7da284380d08e7b0646ab008b5decbcf615713f6805d42
SSDEEP 384:eg8T3Qo/sDxp3f9v7XtmLzzJDglR7EE3qTE1MzE9E32fbE3XVWE3GYE35ERE31TV:58H/s9pPVzIvClR7EE3qTE1MzE9E32fN
TLSH
T1B1B22222F00C0046A2F605C5B4A635716014E74ED78B94F8B06B7D5B7CDEABE2BC52BB
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/es_MX/Main.zdct

SHA256 664ab9794c7739917c1460964b9dd1875ffae05ea88c9cb379cad33359c08f06
MD5 2da81646d1fd6d0d480f1e37fb6cd708
SHA1 a27668aa7eca7062fe3b64fd0d4ba79c10794f40
SHA512 9afcf0a0cf9542fb71b34bea1957a35236d3526776f8a5eeb75e71631b05ac3804ed4899948906a546486320719052a2dc7b36a754865be8fdb18ae456ee474d
TLSH
T1CF51779197EC264AB2F33B0C7E3918554EBFBE96EE38DA0C1170581D09F4E4499A1B73
MD5 SHA1 SHA512 TLSH

OBLRes/es_MX/oobe_launcher.zdct

SHA256 a3433c5a2142b326912459e81853e58b9696292a3cc434e179e827f201041bd5
MD5 830405461cc864396ae8ef044841ca06
SHA1 03e63d7673851dd7a7fb4797f7675c73a9f46d9f
SHA512 bc056a2a5f0d2576df2e2b65d2deca2794a18a7ce5a732c95399ef74629ee383e08fa2fabd5101d1dab673453a2ca3799b9f72c628d17ad4860d832d001bd746
SSDEEP 96:p/xHC7CuxHC1CAHC14HCT+HCgmHCYHHCp1mHChOZHCrPHCL:xhIhyvn69HCuEc
TLSH
T17E919616A3F86748F6F3371DAA7A74A49F7EBD959838816D2230450C4CBAE448DD0B33
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/es_NA/oobe_launcher.zdct

SHA256 a3433c5a2142b326912459e81853e58b9696292a3cc434e179e827f201041bd5
MD5 830405461cc864396ae8ef044841ca06
SHA1 03e63d7673851dd7a7fb4797f7675c73a9f46d9f
SHA512 bc056a2a5f0d2576df2e2b65d2deca2794a18a7ce5a732c95399ef74629ee383e08fa2fabd5101d1dab673453a2ca3799b9f72c628d17ad4860d832d001bd746
SSDEEP 96:p/xHC7CuxHC1CAHC14HCT+HCgmHCYHHCp1mHChOZHCrPHCL:xhIhyvn69HCuEc
TLSH
T17E919616A3F86748F6F3371DAA7A74A49F7EBD959838816D2230450C4CBAE448DD0B33
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/et_EE/ConnectionFAQ.html

SHA256 2e28693c0bc432f53bae1fabaca11081f35d370347f010873e17b326e7d8f680
MD5 90444962c73a0957c0b714160a68ef0c
SHA1 9fd352601e4abe3b00033fc9f02d02bdc9203b11
SHA512 79ad55a7b2007729f467107d8e1e98bd49df4adf49c709f03f3eb656ffa5bc36dd245831ca190237424af0149039b6f2479028d09a6db7c96ad9259efe7901b3
SSDEEP 96:VJin7sPCay6hatUvmFDn8T3I95Nh6l9ucio5t2Tf4meO/jgRzeWjgRLYTWjgRLqe:4iq8Tll8o5CfzIKYdqVgWbUk8yAt
TLSH
T189326232E7190619B0B255D5B1B322917468D749930394B6F0767E2BFCCF9B733C22AA
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/et_EE/LicenseFAQ.html

SHA256 34edeb82980cbf4993969a2c02d1dc46fa43814a4b74fda3bca50f8140f0155f
MD5 d6ca6183cb0582c86169bd84d40bbeaf
SHA1 31286e56421805875243035ceaea0f04bef6124d
SHA512 c1c7eb94576fd9cd0bfc9c32a0b7eeac1795b5dc03ca1441b2894f60bc34f41507633b4d40ece3e947c5035c388ab985be3821536abf2e34aab839cf1463319b
SSDEEP 192:4hUO8Tll8o5UrPKygWIOczHOnSSaCmj7S4jL:4H8Tll8o5UrPKygWIOcKHmXS4H
TLSH
T192823312E7281405B0B54AD9B1A313A164A4DB4DA31298B5F07B7C7ABCCF9FB33D1369
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/et_EE/Main.zdct

SHA256 85d080c7fcab939843b5588b2bad44539cce7bbade40f1a40fef86ccb844a62d
MD5 06a966b5be8c3d2858f9053d47ee5241
SHA1 498261d1951deb81acb617b6ed15192e9181d962
SHA512 f443a4447faf80eccf546260e96460047e1c8ebf81c0459e9a5a1f77145216f63b4f38809df1f25fbdfe73015f22cb974cee778d1006101331663d2566529fe9
TLSH
T124517A9187ECA605F3F33F0C7D7815510AEBBE8BAE3ACA4C1560585D08F9A90D572B63
MD5 SHA1 SHA512 TLSH

OBLRes/et_EE/oobe_launcher.zdct

SHA256 b92878d7ea406dd54c8ebce2235520787e7d8439e470e86b4a3e7514beec2e05
MD5 09b4e586f1641ad6eb6f34665ef1f8f1
SHA1 3932bf40beadef80c74f0816e3e9233860f1ecee
SHA512 21e08e756aa1ee306257b9bc5cb9c46b7e4efba2219c44fda97be3d7ada1d5d13236201ee366c2afbbdba347eaa71c29eedac44bd52edec66d8b9df41946f1a6
TLSH
T12CF0A7B9DA42A366578CA1FB70CEC4C6FDFCA2AC82F43C1502021285B59363921778A2
MD5 SHA1 SHA512 TLSH

OBLRes/fi_FI/ConnectionFAQ.html

SHA256 6d7db75bda97b780aec89bbf5d57544c7a104f7e9497892e84e09aaa14f0a69d
MD5 b667e13a527a46da3610a05d39950a7a
SHA1 ec8c5480fa896ed6459b346095ab76a7d0b1f299
SHA512 24a0a6448495fd96f6fe7c57b19ae5399d02d619c3208456e169c705059b6b3267688309923ab9a87877f499445e92716ecaa0aaf3e630ac25c3b793d940f579
SSDEEP 384:fZzQohtfzsIwfDx63w9v7itRLYzWVggaaWa58XL1qLatEeHGe5SOLs5j+j582I/O:hht7sIwf96AVubkvgaaWa58XL0LatEe3
TLSH
T113822322E20D0052B1F785D6B4F625307010C749A78764B9F1A77A1AB8DB9FB2FC167B
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/fi_FI/LicenseFAQ.html

SHA256 301303410b96d8da7be155f9bf5a34f9b819fe17e0b9de52734e1ef79033d47b
MD5 a16d794dbcbc7fab6c3bce124d1aecf0
SHA1 67463c51684f21e998b1d6068d8609037b32239d
SHA512 6f851a16b04622b68d90ab8b0a528bf35b18c66188330012f3472bb602f01d423f531261c088fa57c57648c476cf7aaabac644d25eba6a103b4217fe566f0b49
SSDEEP 384:4Zw5ohOIwfDx63w9v7itRLYzWpggacW55SvGiVq5RjFsuW7q5SP13q5SOIhq5SEU:ShOIwf96AVubkNgacW55SvG0q5RjFsu8
TLSH
T182A22223F1090452A1F644D5B8A926746000874DA746A8B8F2EB756BB8CA5FF3FC177B
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/fi_FI/Main.zdct

SHA256 cc2bcbf02407888fccf9b5faf8c9027fde37049e1115abb831e2118e75353a19
MD5 7b309421b02c3f806ae34a12c51a12fd
SHA1 50286a420098a853f7e9aca92461313ba8d64584
SHA512 5b678dadb14067815a0efc98c54465854a38ad292a1a6855dfb4b7194d66522fcf388700d1d6bbd0a70ac14e270972ee31ccd80491c93fe352a3417bc9ceaf48
TLSH
T16A51599593ECA628F3F35F1C7EB805110AAF7E876E7DDA0D0960581D09F55808972BB3
MD5 SHA1 SHA512 TLSH

OBLRes/fi_FI/oobe_launcher.zdct

SHA256 cc2e2bbef29ae80a5238aa7431e7bf829bff1b55a23292faa24e02e01daf1740
MD5 0dd48e112d6e26e0da2e19a919fcced0
SHA1 013f2e5dc81cd93162fa70691cb9fd2c7618c89a
SHA512 3d74d204b7cdabe3a85b576eff9f3a1ebd5298b669f76a28264d1d22d90f62f1611753ca898ba4a2ca4df1a1639ac7d526502b24074f3f43f24d0e788721b7fa
SSDEEP 96:pNTNC54TNCHQTNCnF6TNCxfTNCisTNC6cTNCr1sTNCbh73GT7C73M7CR:V/h4gImubshCxy
TLSH
T1B3A1E726B6F89618F3F36B1D967A70502F7FBED76834D16C1224451C4CBAA4188E0B3B
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/fr_CA/ConnectionFAQ.html

SHA256 f033815a71c5b79dce7c4e5abaa03979549d05ebfe345b937510e8543ce442df
MD5 126b927df1ddfc80574fe0eb1f64fb32
SHA1 6cd7ba40c7c5bdac94bdc44b92c1eca8e33dac9a
SHA512 02ff7f706d28264d3fea97151d23a8be88b3b22ba560b6585e6e2f158729303177b8659d97fd494fe23b79661b1d01f11bc7d0019924ddbbd47bd88868bbed5d
SSDEEP 192:dyq8Tll8o5CfzIKYdqVgWEDmyjCXL/qnv:dh8Tll8o5CfzIKYdagWEDmyjCb/qnv
TLSH
T1CB423332E7190509F0F345E5B1B212516468DB49930394B5F07B7E7AF8CB8BB73C22AA
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/fr_CA/LicenseFAQ.html

SHA256 1e5298bd3360af691a824f02b8cc00075d1cb5b82e5d7f182c297241286f8c57
MD5 fe2b2e1beb6dcc9bafafe08e09402dba
SHA1 8826b3701c770ffaf1a5c57a9b238248e0682327
SHA512 774c089a01a8007cdd586b9a2c7583673ae09f87ceabd7c4f14d18640bada7175bc4cd0fe436bb08514c6f76a1320f6ac016d27e7b7ebce9374d937596a164f3
SSDEEP 384:dX8Tll8o5UrPKygWrms7Os/p9xQagEO8hS:dX8Rd5NSms7O6p9xQag44
TLSH
T134823122E7281419B0F649D9B15213956468DB48A3469474F07BBD7ABCCF8FF33C13AA
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/fr_CA/Main.zdct

SHA256 224514c655c81e0f8bb9554aed004ca8ae62f408eb4a073a104264f207d98dd9
MD5 1a890b8bb04ef19681d7540dc273c0c6
SHA1 ca3ff1fbaecc41186705d385295ff24c3de4ab37
SHA512 3041c0ab921f64c999bb69fad7ed1082b71cadaf20a9702e7adf598e96c3e26c6f9876468597d72d6b82c520b0c11f10dde7a24a158d97d29e7ee95c678fd89e
TLSH
T1C8514A91A7EC6A06F2F33B0E7D7D04410EAF3D9AAE39C90C14A0594D0DF5A44D9B2763
MD5 SHA1 SHA512 TLSH

OBLRes/fr_CA/oobe_launcher.zdct

SHA256 73803a1863d5e3a5c91cb7f06ca6f055ecca1721d4e2f24b380e4f4882faa54a
MD5 dd1de74f99a16d84a6f400520b6219bb
SHA1 f5f0c47abf52af71063d4c4e613e1285c6d92301
SHA512 0f49786d70d1f0cdddaa58b83e7bec16e83c4b4a2c1ae0a462062ccc73a7bb6d85bedefc7ac1eb51a0ed2d7f157ff476f18cc3d0a10dc5e4bc05a5f183c9d5b5
SSDEEP 96:pBiSnaCP54iSnaCB53SnaCB+5SnaCndSnaCUfSnaCs4SnaCd1fSnaC9O2BiaC/Di:fa7afaGaNa8aDa/auOwxTaY
TLSH
T113B12716B3F85209F6F33B0AAA7A70551F3F7D9AE835C5AD2524414C0CAAE848DD0B33
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/fr_FR/ConnectionFAQ.html

SHA256 f033815a71c5b79dce7c4e5abaa03979549d05ebfe345b937510e8543ce442df
MD5 126b927df1ddfc80574fe0eb1f64fb32
SHA1 6cd7ba40c7c5bdac94bdc44b92c1eca8e33dac9a
SHA512 02ff7f706d28264d3fea97151d23a8be88b3b22ba560b6585e6e2f158729303177b8659d97fd494fe23b79661b1d01f11bc7d0019924ddbbd47bd88868bbed5d
SSDEEP 192:dyq8Tll8o5CfzIKYdqVgWEDmyjCXL/qnv:dh8Tll8o5CfzIKYdagWEDmyjCb/qnv
TLSH
T1CB423332E7190509F0F345E5B1B212516468DB49930394B5F07B7E7AF8CB8BB73C22AA
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/fr_FR/LicenseFAQ.html

SHA256 1e5298bd3360af691a824f02b8cc00075d1cb5b82e5d7f182c297241286f8c57
MD5 fe2b2e1beb6dcc9bafafe08e09402dba
SHA1 8826b3701c770ffaf1a5c57a9b238248e0682327
SHA512 774c089a01a8007cdd586b9a2c7583673ae09f87ceabd7c4f14d18640bada7175bc4cd0fe436bb08514c6f76a1320f6ac016d27e7b7ebce9374d937596a164f3
SSDEEP 384:dX8Tll8o5UrPKygWrms7Os/p9xQagEO8hS:dX8Rd5NSms7O6p9xQag44
TLSH
T134823122E7281419B0F649D9B15213956468DB48A3469474F07BBD7ABCCF8FF33C13AA
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/fr_FR/Main.zdct

SHA256 4d42219489cec9cf274d3b9d09292cea6b702f45a9571635dc313aeaf320a405
MD5 7a03c4c004b6107bdb33c8494b0244f3
SHA1 1364d4eadcbe2df23c5bfd2c8a8849566d6e1dec
SHA512 63a8bc23bf736094c0218fd0ac6d8da24b81a28f79cf21d3657fcdae916022aef57e4391aa70853aaed09feec92aaa9fd2217903c72b7fa370d9feaaa0b42795
TLSH
T1E6514A91A7EC6A06F2F33B0E7D7D04510EAF3D9AAE39C90C14A0594D0DF5A44D9B2763
MD5 SHA1 SHA512 TLSH

OBLRes/fr_FR/oobe_launcher.zdct

SHA256 6fc352616f4f38b5f535f38bfa614440a2a59b7d1281378b3ba7d430a9ecebbb
MD5 8461258136ce26da98d754d4d4381321
SHA1 0192624bed4f958e2ba7d6fc930c1f794c395804
SHA512 3db64ba108ed791b14db5558b1a5ee75fa04d27ccd55ce1350f798a38a5ca70f09ec97da7e53946c9df7d73e9bbae1b62e586a54836356b485fe7e4bc8789a1b
SSDEEP 96:pBiSnaCC54iSnaCE53SnaCU+5SnaCKdSnaCpfSnaCR4SnaCQ1fSnaC2O2BiaCqDZ:fauaKaTaoaxaGaya9OwxeaH
TLSH
T1B6B13916B3F85209F7F33B0AAA7A70551F3F7D9AE835C5AD2524414C0CAAE8489D0B33
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/fr_MA/ConnectionFAQ.html

SHA256 f033815a71c5b79dce7c4e5abaa03979549d05ebfe345b937510e8543ce442df
MD5 126b927df1ddfc80574fe0eb1f64fb32
SHA1 6cd7ba40c7c5bdac94bdc44b92c1eca8e33dac9a
SHA512 02ff7f706d28264d3fea97151d23a8be88b3b22ba560b6585e6e2f158729303177b8659d97fd494fe23b79661b1d01f11bc7d0019924ddbbd47bd88868bbed5d
SSDEEP 192:dyq8Tll8o5CfzIKYdqVgWEDmyjCXL/qnv:dh8Tll8o5CfzIKYdagWEDmyjCb/qnv
TLSH
T1CB423332E7190509F0F345E5B1B212516468DB49930394B5F07B7E7AF8CB8BB73C22AA
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/fr_MA/LicenseFAQ.html

SHA256 1e5298bd3360af691a824f02b8cc00075d1cb5b82e5d7f182c297241286f8c57
MD5 fe2b2e1beb6dcc9bafafe08e09402dba
SHA1 8826b3701c770ffaf1a5c57a9b238248e0682327
SHA512 774c089a01a8007cdd586b9a2c7583673ae09f87ceabd7c4f14d18640bada7175bc4cd0fe436bb08514c6f76a1320f6ac016d27e7b7ebce9374d937596a164f3
SSDEEP 384:dX8Tll8o5UrPKygWrms7Os/p9xQagEO8hS:dX8Rd5NSms7O6p9xQag44
TLSH
T134823122E7281419B0F649D9B15213956468DB48A3469474F07BBD7ABCCF8FF33C13AA
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/fr_MA/Main.zdct

SHA256 224514c655c81e0f8bb9554aed004ca8ae62f408eb4a073a104264f207d98dd9
MD5 1a890b8bb04ef19681d7540dc273c0c6
SHA1 ca3ff1fbaecc41186705d385295ff24c3de4ab37
SHA512 3041c0ab921f64c999bb69fad7ed1082b71cadaf20a9702e7adf598e96c3e26c6f9876468597d72d6b82c520b0c11f10dde7a24a158d97d29e7ee95c678fd89e
TLSH
T1C8514A91A7EC6A06F2F33B0E7D7D04410EAF3D9AAE39C90C14A0594D0DF5A44D9B2763
MD5 SHA1 SHA512 TLSH

OBLRes/fr_MA/oobe_launcher.zdct

SHA256 7f82d103dd66c583c857ccc83f5a82617b46932befb96f374d1ee275e398dc4a
MD5 5799cc80dec1f3382c731249e37435f5
SHA1 32cf52554f2ce26d4f0f3ba67dcce485a6faee90
SHA512 ed34663597384d81796b044b497ceca4c9e63ca7d41c6aedb68f1f81a76264af49adc900a110aa542f06df1d7dab4d28b04e1e4fb2c7677d55c05e0df3815dd3
SSDEEP 96:pBiSnaCB54iSnaCv53SnaCf+5SnaCpdSnaCqfSnaCy4SnaCT1fSnaCDO2BiaCxDY:fa1aRaoajayataxa8Owxtai
TLSH
T14DB12816B3F85209F6F33B0AAA7A70551F3F7D9AE835C5AD2524414C0CAAF8489D0B33
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/fr_MX/ConnectionFAQ.html

SHA256 f033815a71c5b79dce7c4e5abaa03979549d05ebfe345b937510e8543ce442df
MD5 126b927df1ddfc80574fe0eb1f64fb32
SHA1 6cd7ba40c7c5bdac94bdc44b92c1eca8e33dac9a
SHA512 02ff7f706d28264d3fea97151d23a8be88b3b22ba560b6585e6e2f158729303177b8659d97fd494fe23b79661b1d01f11bc7d0019924ddbbd47bd88868bbed5d
SSDEEP 192:dyq8Tll8o5CfzIKYdqVgWEDmyjCXL/qnv:dh8Tll8o5CfzIKYdagWEDmyjCb/qnv
TLSH
T1CB423332E7190509F0F345E5B1B212516468DB49930394B5F07B7E7AF8CB8BB73C22AA
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/fr_MX/LicenseFAQ.html

SHA256 1e5298bd3360af691a824f02b8cc00075d1cb5b82e5d7f182c297241286f8c57
MD5 fe2b2e1beb6dcc9bafafe08e09402dba
SHA1 8826b3701c770ffaf1a5c57a9b238248e0682327
SHA512 774c089a01a8007cdd586b9a2c7583673ae09f87ceabd7c4f14d18640bada7175bc4cd0fe436bb08514c6f76a1320f6ac016d27e7b7ebce9374d937596a164f3
SSDEEP 384:dX8Tll8o5UrPKygWrms7Os/p9xQagEO8hS:dX8Rd5NSms7O6p9xQag44
TLSH
T134823122E7281419B0F649D9B15213956468DB48A3469474F07BBD7ABCCF8FF33C13AA
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/fr_MX/Main.zdct

SHA256 224514c655c81e0f8bb9554aed004ca8ae62f408eb4a073a104264f207d98dd9
MD5 1a890b8bb04ef19681d7540dc273c0c6
SHA1 ca3ff1fbaecc41186705d385295ff24c3de4ab37
SHA512 3041c0ab921f64c999bb69fad7ed1082b71cadaf20a9702e7adf598e96c3e26c6f9876468597d72d6b82c520b0c11f10dde7a24a158d97d29e7ee95c678fd89e
TLSH
T1C8514A91A7EC6A06F2F33B0E7D7D04410EAF3D9AAE39C90C14A0594D0DF5A44D9B2763
MD5 SHA1 SHA512 TLSH

OBLRes/fr_MX/oobe_launcher.zdct

SHA256 6fc352616f4f38b5f535f38bfa614440a2a59b7d1281378b3ba7d430a9ecebbb
MD5 8461258136ce26da98d754d4d4381321
SHA1 0192624bed4f958e2ba7d6fc930c1f794c395804
SHA512 3db64ba108ed791b14db5558b1a5ee75fa04d27ccd55ce1350f798a38a5ca70f09ec97da7e53946c9df7d73e9bbae1b62e586a54836356b485fe7e4bc8789a1b
SSDEEP 96:pBiSnaCC54iSnaCE53SnaCU+5SnaCKdSnaCpfSnaCR4SnaCQ1fSnaC2O2BiaCqDZ:fauaKaTaoaxaGaya9OwxeaH
TLSH
T1B6B13916B3F85209F7F33B0AAA7A70551F3F7D9AE835C5AD2524414C0CAAE8489D0B33
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/fr_XM/ConnectionFAQ.html

SHA256 f033815a71c5b79dce7c4e5abaa03979549d05ebfe345b937510e8543ce442df
MD5 126b927df1ddfc80574fe0eb1f64fb32
SHA1 6cd7ba40c7c5bdac94bdc44b92c1eca8e33dac9a
SHA512 02ff7f706d28264d3fea97151d23a8be88b3b22ba560b6585e6e2f158729303177b8659d97fd494fe23b79661b1d01f11bc7d0019924ddbbd47bd88868bbed5d
SSDEEP 192:dyq8Tll8o5CfzIKYdqVgWEDmyjCXL/qnv:dh8Tll8o5CfzIKYdagWEDmyjCb/qnv
TLSH
T1CB423332E7190509F0F345E5B1B212516468DB49930394B5F07B7E7AF8CB8BB73C22AA
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/fr_XM/LicenseFAQ.html

SHA256 1e5298bd3360af691a824f02b8cc00075d1cb5b82e5d7f182c297241286f8c57
MD5 fe2b2e1beb6dcc9bafafe08e09402dba
SHA1 8826b3701c770ffaf1a5c57a9b238248e0682327
SHA512 774c089a01a8007cdd586b9a2c7583673ae09f87ceabd7c4f14d18640bada7175bc4cd0fe436bb08514c6f76a1320f6ac016d27e7b7ebce9374d937596a164f3
SSDEEP 384:dX8Tll8o5UrPKygWrms7Os/p9xQagEO8hS:dX8Rd5NSms7O6p9xQag44
TLSH
T134823122E7281419B0F649D9B15213956468DB48A3469474F07BBD7ABCCF8FF33C13AA
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/fr_XM/Main.zdct

SHA256 224514c655c81e0f8bb9554aed004ca8ae62f408eb4a073a104264f207d98dd9
MD5 1a890b8bb04ef19681d7540dc273c0c6
SHA1 ca3ff1fbaecc41186705d385295ff24c3de4ab37
SHA512 3041c0ab921f64c999bb69fad7ed1082b71cadaf20a9702e7adf598e96c3e26c6f9876468597d72d6b82c520b0c11f10dde7a24a158d97d29e7ee95c678fd89e
TLSH
T1C8514A91A7EC6A06F2F33B0E7D7D04410EAF3D9AAE39C90C14A0594D0DF5A44D9B2763
MD5 SHA1 SHA512 TLSH

OBLRes/fr_XM/oobe_launcher.zdct

SHA256 6fc352616f4f38b5f535f38bfa614440a2a59b7d1281378b3ba7d430a9ecebbb
MD5 8461258136ce26da98d754d4d4381321
SHA1 0192624bed4f958e2ba7d6fc930c1f794c395804
SHA512 3db64ba108ed791b14db5558b1a5ee75fa04d27ccd55ce1350f798a38a5ca70f09ec97da7e53946c9df7d73e9bbae1b62e586a54836356b485fe7e4bc8789a1b
SSDEEP 96:pBiSnaCC54iSnaCE53SnaCU+5SnaCKdSnaCpfSnaCR4SnaCQ1fSnaC2O2BiaCqDZ:fauaKaTaoaxaGaya9OwxeaH
TLSH
T1B6B13916B3F85209F7F33B0AAA7A70551F3F7D9AE835C5AD2524414C0CAAE8489D0B33
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/he_IL/ConnectionFAQ.html

SHA256 4cba97114d3f129a24387e42437064a4cacb520559f5d192d5eaab47b798ad48
MD5 3c07f4f478b0e8e0d2904b8eb9514d4e
SHA1 bdc1a2cc919902fdec0a247f99cf7040beb9df7d
SHA512 58f83c472fac8158fa978fe91fa1f2bdeeea1fbe364d4f6a6b7d4ebbf2142413da85887a04283bb65b0254e6cfc9cf76c4e6eb54f99410d60cad0a9e28d4b5be
SSDEEP 192:myq8Tll8o5CfzIKYdqVgWOiJx9Dj8R2PKwL:mh8Tll8o5CfzIKYdagWOi3lc2rL
TLSH
T1F0321132E7080549B0F655E5B0B722617464CB59930364B6F0767E7BBCCA8B737C23AA
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/he_IL/LicenseFAQ.html

SHA256 c3cac01f4efbd6ac73f3cf4118af6c3ed20f170953aea31a4a000d65f5545b01
MD5 6f3ca96ac9753ca20a517dac144b7fcc
SHA1 5296471337e2cc6e954fab10ef17c21dd05bebf8
SHA512 f2e3517a5febd290c0bd5b23d61304ae45ff8de0abc99b94218f0813cd9fb984da3c9a92d15726f23f5a6c8acf80fc8cec11f92561235abd922ab400c60c122f
SSDEEP 192:mnUO8Tll8o5UrPKygW2nawrpcOuf7U6pRBxNFEX2VNasNqPBWiMU:mR8Tll8o5UrPKygWQvujUYvNF0Zk6
TLSH
T179721112EB180805B0F64DD9B0A622A56464DA5CA3429475F03B7D7ABCDF8FB37C13AD
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/he_IL/Main.zdct

SHA256 f58fb15bfff155283c16d36ec9aea908812ef26e048b7125f25e65818c67d22a
MD5 8033aac0dd251f50364a148a76dec95a
SHA1 076662c4f33bcc651bf8775d42aba5f2079489c4
SHA512 37c94ecb31b24c4ddf3e1e6ae4ef58534e062a22f827d6003ef44b285c3cf7ab181e52b3529f4ac853ee617bd2cbd7b56826d4db72e9f9863680e193cac07ed7
TLSH
T176412A8053D8E6887AB3DF0FBA7D481D0ADDFB054A1DBE0F5478546904FE640812E77A
MD5 SHA1 SHA512 TLSH

OBLRes/hr_HR/ConnectionFAQ.html

SHA256 b8762e8fd6bac93775a7df71e8c09117004214e3adca7169be4ec0fa047a2135
MD5 940dded14d40ee63d9884eb75ce9aaa8
SHA1 986ead007cbc5cefcb120fee75665021d5df4a7a
SHA512 69df4d2517f418e1c577a921c558e5abb02d8d693ea530171287600da5ba4b71206f5a763224c249e4e15d6f145b1a1619886b8ca91dabe6de4a0cd3fe3f846a
SSDEEP 192:XV0q8Tll8o5CfzIKYdqVgWqbv8di0zq7x:Xl8Tll8o5CfzIKYdagWgD0Y
TLSH
T1B7324F32E7090905F1F655D5B1B312507468DB49930794B6F07B6E3ABCCB8B727C22AA
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/hr_HR/LicenseFAQ.html

SHA256 0fbc0ce8d25ab52aaaa696af2f2163c3b75361f9eac305fbdb7151e0797fdced
MD5 22ce1ef18129918d464ea8847dda1343
SHA1 dd04e112c8dddba41eaf1a9aebfc6e694590ef9d
SHA512 c2b4f0973efab4e52880f698878406f22e4a2db47cf7ae182bfa3075bed3fea797ceb92d92b64380ae022a6eb7b5da1a89de35790581d7dea610a2e579c364f4
SSDEEP 384:Xt8Tll8o5UrPKygWq/ah8BfEa3rNsHcJrR:Xt8Rd5NNP51lR
TLSH
T10C822321EB250405B1F689D9B1A2135424A8DB4CE3169475F07BBD7ABCCB8BB33D1379
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/hr_HR/Main.zdct

SHA256 8c9494a1413a627b52c9dce7360e2a63092b76751682a1ce4c64feeb5865b40c
MD5 ecb37c825cc6ecbb6ec7ccbaa50129be
SHA1 6df53ef13b6d6ea82efbc8c83a03c9ebbbf3e8ec
SHA512 f6786c3a9d832eabbd7400eeef04a181d1033528a0270c33da092c8b8c3cf8b386aeaa0071b1b4c06d6f9f7d522dbe64714d4c5c5a2f3a644dd4eef1ed95c9be
TLSH
T125517F82A7EC2645F2F33F0CBA7806210EBF7E66BE39C64D1460594C05F5A80D5B2B63
MD5 SHA1 SHA512 TLSH

OBLRes/hr_HR/oobe_launcher.zdct

SHA256 f36280b2c74e0e962bf017a33614b629ffb8c0483b91acd40151ff8f5997bd69
MD5 2eac328ee834546d410acd7b097d83cd
SHA1 399b011402f0696927a1646a7e61000c18951335
SHA512 84558b8a2c484dc484ec6eca75ea8f4ba1e72e2d14a1310d6f6f1c602fbd1fbcade2738005aea3ab7892ac63580a3e8589b0cb8d2b334b6796657827329e94d8
SSDEEP 96:prl0Z5Ccrl0Z5CqrW0Z5CKJ0Z5C0GW0Z5CnStH0Z5C/V0Z5Cu1StH0Z5CUOH0Z5z:1u59u5Dj5a5Aj57tY5V5QtY5Dz59oK5p
TLSH
T142A11B5273F86618FAF3770D9A7A25A42F3FBDA5A438C16D2160458C097BE848DD1B33
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/hu_HU/ConnectionFAQ.html

SHA256 db5e912f1dededf447b03544b157cac5cc006133a67fe1376b481bbdd5e44ce8
MD5 8bb00c0444b907575fc0f951e703fa9f
SHA1 7bda6adbe2e72f6440ef82eaa8ee4837b1e06b5e
SHA512 6fbf51863bdb2605b9c109f2fd0678e91bf73913b6a85009bdc776e47b4308d420078a81baa74697b456c5a46fab0efd527aaeb7edb6951000ce88eca88d8e75
SSDEEP 96:VJinosPCR6hatUvmFDn8T3I95Nh6l9ucio5t2Tf4meO/jgRzeWjgRLYTWjgRLqb4:XSq8Tll8o5CfzIKYdqVgW+/r3IHUCiaq
TLSH
T152425332E719091AF0F655D5B0B222512468D749A31394B6F07B6E3AF8CB8F737C126A
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/hu_HU/LicenseFAQ.html

SHA256 67992b3a84054890ef76af319702e0cec112255b09e8480cf0bd0c94624b66ef
MD5 1d12fdc7aeb40e6f9b1478a645f7d791
SHA1 bcee76b19d72d03d57e281c5cce5dae9cf6690e2
SHA512 97da9b8d6ccf23b226a8a76998c57d499ee902370c73766e680f32b37d1642dcb35bc3a46f5a3d00112477c9ad1cb51d90b3ec104c54c4d80810b4465320a50a
SSDEEP 192:XDUO8Tll8o5UrPKygWXLJ9C7LeTsXeetEy8puBp90VaqL:XV8Tll8o5UrPKygW7JIHeT2eIEb4c
TLSH
T1E5822322E7240409B0FA4DD9B06212956458DB4CA35295B5F17B7C7EBCCB8FB37C12B9
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/hu_HU/Main.zdct

SHA256 70065354d49f2b57a6bfb22d41c771b5ea311f11cf4ad49d28886d4b92883005
MD5 46814264a6e8d36e0ecade0d3f880300
SHA1 5fe936d35ce3e4858faad8ae9c67b16845c09996
SHA512 fe16f69c6699fc8514c393e6643bb55529b3fb1f960ba3a63eedb524d95de55e926f9410c3081b16d4568ca8029604b17f020495b34d5fadac9b2d83e3f4b17a
TLSH
T18551E69593ED6A05F2F36F0C7D7846410EBE7E69AE3DCA0D44A0548C0CF5A80C972BA3
MD5 SHA1 SHA512 TLSH

OBLRes/hu_HU/oobe_launcher.zdct

SHA256 a92b45fce2c5b33c6165a56dddba8395cfc2920571a70cb651672b076c2bcb70
MD5 a32abacb5918c1eea3ca2b40a0c401b8
SHA1 dcfb0cff3c8af8b3e2756c7f4a4e94cd326003bc
SHA512 8c04c4f728474e45649372e2eb45e78a2ef1e68969d483754ba667de22437b32ef5d793603bc1438ca4ce00909a2cbb815b6ab28c2b1891b46aea5536d42abcd
SSDEEP 96:fs1GCVsNGCLsbGC7sxGCts6GCmsSuqGCesXGCVsSuqGCJQsv4GCQ0BJGCj:0wFIjKj89t8Su90WVSu9e5vn2BUo
TLSH
T1B8B11F5662FC2108F1F37B09BEB7B1502F3FBD98A839C19D65A0A14C4C66A44C8A0B77
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/it_IT/ConnectionFAQ.html

SHA256 0d2624bcb23b8edcdbfdb6a3aad80598520b223de0873b8d354568361630a44e
MD5 fc1836d3933acc4b6e9100a2d109d229
SHA1 876f2188235eb03e80ef3add7d25e085bca3318d
SHA512 3e3b4d33c69d512d3e2deb23b7e392a0b0d9f1789d7090bddc1fd8eef3c0bd2909dcd229e4f826ffcc5b9a7daee47f754d365270e97323e0b90eb26a79df53a0
SSDEEP 192:df6q8Tll8o5CfzIKYdqVgWl68gEx918zY:dfp8Tll8o5CfzIKYdagW4gD8zY
TLSH
T1D9424332E7090509F0F245D5B0B222507468DB89E30364B5F1776E7BB8CB8B777D22AA
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/it_IT/LicenseFAQ.html

SHA256 ee5c89d5fb87e27a46fc2ddf3a6139baf41e26b75b69d12abe8d5ba24a9da4b8
MD5 e42d92bc44e149f957737a12f4eddbd4
SHA1 965512ffeca6d89fd333219af8e4228453eb711f
SHA512 a47cb64af1d1bea9c7e9ad72f1b3d278ec6c77fdaa0b0732f180fa587a5f6832cab9407d5f2e0319db6fa26d591d2deef0b7100d29bb9084587d9aab5086af7c
SSDEEP 384:dge8Tll8o5UrPKygWy7fg2srbeRgzEhDt/hi:dh8Rd5NH7qeRgYhC
TLSH
T120822221E7140415B0F64AC9B1A322946468DB8CE3466475F17B7D7ABCCF8BB33E136A
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/it_IT/Main.zdct

SHA256 2b67c55277265c98cecf4db5c5cba159f1e8d97c9d4091a08c081e27eefcdb5d
MD5 40b2c367957a393c3602758067138be6
SHA1 81ea097b56ce3860a942566c44b1e7d34e974d2f
SHA512 aeffd60cf41fe6970720c7f5e78a17657cec4f74f964abd801e361e09c257ce4f14609e6552ba4abc1ad95e431695c9a0b8daaaf8d30339adf740ebad4def501
TLSH
T197515892A7EC6608F2F33B0C7E3D54150EBF7E96AE39CA0D0570585D05F2A54D4A2B63
MD5 SHA1 SHA512 TLSH

OBLRes/it_IT/oobe_launcher.zdct

SHA256 d884dd3c6148e4bc4c732dbe6730b7488e0ecce134400d69d614e364ca67aba7
MD5 1cc0db38b0d09cd982d22f45243d8334
SHA1 53613b0b01b51185ef75ed9324a66a90f2fab5ad
SHA512 27842e000226147eed9f2b5a1074b492dd49fac8aa634655b43d4a90ea6149659bf122fd75ba79a62e685707301a6cead97f09f7c9c4d70d9d0c0cffdf3e199a
SSDEEP 96:pIfNCz7NCtQNC9ZNC7CNC4HNCANNCh1HNC5OVDCCT0NDCCz:i1OF6hXdyqbW0
TLSH
T175A1C212B3F85748F6F377099A7A74915F7FBE95A838C2AD2220514C48AAE458DD0B33
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/ja_JP/ConnectionFAQ.html

SHA256 955324169eb9af6f2c11496b0b8bbbd9400ca201f7a4160a6a91b9ea12a49883
MD5 915889fb05c189e9322ab6b1912c2efe
SHA1 1d6c585a606a09cfd8e5d3da45e88c23f45ad8f1
SHA512 ea3e2c4f6dbc2bd1ff46ba94ed0e69be4f57f9ebdd2abe1550df1699a383cb32f784d66f21d9fa28e576d2ce10d2d842a7727c8956bf02d74777dd5a74f86ec4
SSDEEP 96:VJinPsPC36hatUvmFDn8T3I95Nh6l9ucio5t2Tf4meO/jgRzeWjgRLYTWjgRLqbQ:2Iq8Tll8o5CfzIKYdqVgWGvzdkzAh
TLSH
T10E424231E7190506B0B685D671B322917468CB4A931364B6F077AE37FCCB9B737C229A
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/ja_JP/LicenseFAQ.html

SHA256 309c380b73594871af579a27208b653dd524474064751d145f067da65acaf4df
MD5 5672ca4f20b403ee1845a2511f946a84
SHA1 36d1067390745ff2eba00d74a0fd1cf17d962a2a
SHA512 64a36c6504da4b102067acaeff39902b30032d8d3e2ec684e5741d2d2f1331681c4481222c7561fe62ae6d8c3d1de34e900f4cd23af7dedb9f78de505fbc5d09
SSDEEP 192:2VUO8Tll8o5UrPKygWG13vWwFg0cSROypsUU7wBJynWu4BJJhtuW:2z8Tll8o5UrPKygWG13pRzpsFBWV
TLSH
T134821031E7280405A0B68AD5B17623A06068DB5DA3129575F13B7D7ABCCF9FB37C02AD
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/ja_JP/Main.zdct

SHA256 c161cb0a7638b8b8d307402b20f40d59dc4fda8b4d24b0a4bf440c05eacc2ae1
MD5 e4a78e50834a9062eca70f762d0ca59d
SHA1 e817a94a820f45410ecddb3f359af543f551b9d1
SHA512 154680a48e74705f8ccf7dfffe4d2d139a69bca7f4b85a5f4d8e80e664e69733220e9dd6361b6062b35672acd2ea000616d4fdd8d77b8312b7db3f2aca3f7d3e
TLSH
T10C4126C4A7EC6909B2F31A5C7D3E59110AEFBB55AB8DCC4C14F4940E04E86809263BBB
MD5 SHA1 SHA512 TLSH

OBLRes/ja_JP/oobe_launcher.zdct

SHA256 fcb0cc42e7d413ae269d5ea9de5a79f923a09f995d4be2ae634a7a3ff755950d
MD5 73c3adbe84a19cda22b18c2b70fab6ee
SHA1 24cb1303b7a9f440072a262d1399a7e5c5be24f8
SHA512 80b0bdb7e3a53044e301f58d1af4615978459cd2348c0fb838568f2f106e51f81b1589c72a336ba3574bff1ccbf18d04d500a1c62d69adddf79001d77c1189e5
TLSH
T19B81E68973F96648F5F3636D8E7B30922BBF7D94A465E0AC6130828C446EE0589C0B77
MD5 SHA1 SHA512 TLSH

OBLRes/ko_KR/ConnectionFAQ.html

SHA256 b1e1d990e2d77d438e758efe986478587c7bcd3ad43ec5fe7062be6a371705ac
MD5 93a79c3cc6d0442edb81c3fe8d0053b3
SHA1 a1426f047250ca2e0fe2b56cb6b561106e585fba
SHA512 a0ac3294e7d03ff8d3d4817e82027ae3e5ddc08c3fe13451dbd49262411e6deeeb5197ce80cd41c5e6c7ab83774629acf9102822129e30c028daa5d4d5ee7f98
SSDEEP 192:YMq8Tll8o5CfzIKYdqVgW6XDnrzkYN4VQ9U2:YD8Tll8o5CfzIKYdagWYvXx
TLSH
T16E322131E7180505F0A659D6B4B212517468DB49D34364BAF07B6E2BFCCB8B737C226A
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/ko_KR/LicenseFAQ.html

SHA256 2475118bcf0b4e115484cebf7350d7261439a0825516bf74f7750c3a22ef0b4c
MD5 399f2d999cc5589b18d6546801701e1b
SHA1 2e4ac3cc7a04e32bbec094a69316e1c369f201b6
SHA512 7d24280a8d40ac1fcf4ba63f6e380962dbe844bf57b154b38c54f201d21da492c6d0cbce57971a9cf1dcd0512c10b4ef2126a697b1136c6aec339e4ca1b908be
SSDEEP 192:YvUO8Tll8o5UrPKygWY5DD1wvfF4Wr3ErM0en0DNt+L:YJ8Tll8o5UrPKygWKvSwda
TLSH
T14D821222EB280405B0BA49DAB06613946464DB4DB3526475F07B7D7AFCCE8BB33D13A9
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/ko_KR/Main.zdct

SHA256 26a58b91604486ca16ab331c22e7cfb2b3b65898777292e48d5ca2b45a3731b8
MD5 8345a703a82aba9a857beff8933d19c6
SHA1 364f81cc19ae3a2d8a5885d911a9152ad3e17d00
SHA512 9f9a53c52c8295ad3ec3b9f3fe83a7241fb59bd98de1c11c9fc233e7a2aa52935006b1d3643e4909dfe40432077d181a1e0705f4d7839da1a091118dcc0ca585
TLSH
T161415492A7DC7505BAF36B4D7E7D45920ADE3A45AE0EC80D2570981D04FAA90D2327E3
MD5 SHA1 SHA512 TLSH

OBLRes/ko_KR/oobe_launcher.zdct

SHA256 6d3acb85252ad9fd4a2085e74ca25a5f0b4caf8554e36b96790194c4302f65c2
MD5 fdd95386e383be089a65966ca6ebb0d0
SHA1 a0f01df29c0a5e5b235228cf44f9a72938dd64c3
SHA512 11b788adbb03b732f4e18b69a0947374c425eef1d4354c3a05eae871015b359d80e2db46225cca51a2290e20173b75220acb3c72942ffe4ee2307dffd7598334
TLSH
T15871A016B3F96504F5F3A70D9ABB71A12B7F7EA49461C0AE6530014C4CABA84C8D1BB7
MD5 SHA1 SHA512 TLSH

OBLRes/lt_LT/ConnectionFAQ.html

SHA256 a2658f022c2eef1ad6d7d1834341b0d6327dfbc9042848285c46249d4c8a716d
MD5 cdd3a8fabecf187f7946d128755bcffd
SHA1 565963833fbd1310efc6579ea5244d9b0b85fcb3
SHA512 0093532ab99b5ea1329d69f10f9ccffbd5126a8458866b5bd29c0e3def3756270d84e663227a94807f2891ab85d30cbe89316ad3e407a1144da88a791b0b28bf
SSDEEP 96:VJin7sPCK6hatUvmFDn8T3I95Nh6l9ucio5t2Tf4meO/jgRzeWjgRLYTWjgRLqbT:43q8Tll8o5CfzIKYdqVgWO36y3izTZ
TLSH
T1D1424132E7180946B1F655D9B0B212506468D759A30354B6F077AE3BFCCB8BB37C13AA
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/lt_LT/LicenseFAQ.html

SHA256 62618d9fcfe523b823f60bb193567cf29c1906551aedb9d7578c52c3407fd78b
MD5 4d43c9b8381d4ad96d3d01c7055bf819
SHA1 d52e9ea884559fb57c59379375f9226e658fdbb5
SHA512 5aa487c1dda8ad320ff41bf9648ff41c8b9f46d82097aef1dc4bb358bf25850d2a406ce50152dae09a3f221e58a836329be5780c46aa0dc61d94920368529557
SSDEEP 192:4KUO8Tll8o5UrPKygWZRdikEEO2eXLkhK3+L:4u8Tll8o5UrPKygWbI2eXOKK
TLSH
T1B5820022E729044571FA49D9B1A612A42458EA4CA3029875F07B7D7BFCCB5BB33D03BD
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/lt_LT/Main.zdct

SHA256 b9a4121249ff28523fbbb5e3cb731ca26017e11d60bacda1f996e7a24fa88c79
MD5 854aad3eabc37c906f839a08af885222
SHA1 fef41049d986b8dbfcd5f0a6be47273e1b3e745f
SHA512 8af302a9666e2081c7c324fd10449a9f8cef692bca75172006e90cc8f5071cd88d19e10478643c54280872f33d9d5da6f07352a6f2f43c7bc31f3261fa6b0581
TLSH
T1C751C0A0A7EC2609F2F31B1C69BD45160FEFBE66AE3DD60E1470548D05F0A81D4B2763
MD5 SHA1 SHA512 TLSH

OBLRes/lt_LT/oobe_launcher.zdct

SHA256 b92878d7ea406dd54c8ebce2235520787e7d8439e470e86b4a3e7514beec2e05
MD5 09b4e586f1641ad6eb6f34665ef1f8f1
SHA1 3932bf40beadef80c74f0816e3e9233860f1ecee
SHA512 21e08e756aa1ee306257b9bc5cb9c46b7e4efba2219c44fda97be3d7ada1d5d13236201ee366c2afbbdba347eaa71c29eedac44bd52edec66d8b9df41946f1a6
TLSH
T12CF0A7B9DA42A366578CA1FB70CEC4C6FDFCA2AC82F43C1502021285B59363921778A2
MD5 SHA1 SHA512 TLSH

OBLRes/lv_LV/ConnectionFAQ.html

SHA256 b8b2be1ac57fd9dc11ca9a3563dcf3046351989be75697a0a03e32544f9380f9
MD5 8c6123b5fdb96e1102c435809b80de93
SHA1 595358eff9f1a2fe08260e2a70dbc9fa549eb952
SHA512 2f1298c962d762b0d145453ebc126010e558e294e2f83f650a7bfa67bc11aaf5c0084596cbbb179d558d8049fb4002e1fdfef1ed6b415f7eb74786ccba9c4737
SSDEEP 96:VJin7sPCXpLhatUvmFDn8T3I95Nh6l9ucio5t2Tf4meO/jgRzeWjgRLYTWjgRLqj:4pq8Tll8o5CfzIKYdqVgWrfaVx+6m
TLSH
T15B324032E7090A49F0F249D5B1B216516458DB49A31354B6F0777E7BB8CB8B733C23AA
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/lv_LV/LicenseFAQ.html

SHA256 a6fbc003cc1c859b5cb10bd27d275e435ae53ac0f6d2c528cceff388a0e3f0bf
MD5 eced45b77f778dab40b0b5f4a4e871e1
SHA1 1a687385a1dcec1562f8a061a369b7c928afbc95
SHA512 2e3c6ff70f9fdac8a3757259663628938d250c2a389f62e4e03e944377c876712632bb96a31a7f552beb404666cdb742876a8a142ec2d8acb3aaf39149b8b3e8
SSDEEP 192:4MUO8Tll8o5UrPKygWBBlLniyXjynsqoL:4M8Tll8o5UrPKygWnlGyzys
TLSH
T1EF822221EB280415A0F649D8B1A213946498DB4CA31698B1F07B7D7BBCDE8BB33D1379
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/lv_LV/Main.zdct

SHA256 02f837092168c13a95be9c0948305f7a9e609d413bfb20b664af136076b1f7c9
MD5 9ff89ed016e263d3184d594c723c0801
SHA1 7f5c5b46e5a88620117af6188addb431106f7027
SHA512 c86f8c8b9ef23d2518e3f283c54f904d2d0d922c5ca8e438f6ea295feea360f8a957643e75209fd61f370a4441292f05eb321213d7db10d4b4963dfd4967d3cf
TLSH
T1FD51589193EC2619F3F31F0C7E7849561EBF7D97AE38D60E047058AD08F5A4098A2B63
MD5 SHA1 SHA512 TLSH

OBLRes/lv_LV/oobe_launcher.zdct

SHA256 b92878d7ea406dd54c8ebce2235520787e7d8439e470e86b4a3e7514beec2e05
MD5 09b4e586f1641ad6eb6f34665ef1f8f1
SHA1 3932bf40beadef80c74f0816e3e9233860f1ecee
SHA512 21e08e756aa1ee306257b9bc5cb9c46b7e4efba2219c44fda97be3d7ada1d5d13236201ee366c2afbbdba347eaa71c29eedac44bd52edec66d8b9df41946f1a6
TLSH
T12CF0A7B9DA42A366578CA1FB70CEC4C6FDFCA2AC82F43C1502021285B59363921778A2
MD5 SHA1 SHA512 TLSH

OBLRes/nb_NO/ConnectionFAQ.html

SHA256 830e018d16105021f3cd102d0beb17113f4f96dc702c1437e214f0c85d8df8b9
MD5 ef145fcb367ca77f1c7022881de8939b
SHA1 bfe71b256c3b4ca808019b7588e9d184e7a700fb
SHA512 acbada4581afc1164b6ae682b755901e0ecf728d6a652074e16fb06c6eff41f841e51e05c8ffa1f2a94a4aa0eff4e5054fd36b246f51a27c224e6bd3b9c6d698
SSDEEP 192:dJq8Tll8o5CfzIKYdqVgWD+dUJYE9gMNekS:dk8Tll8o5CfzIKYdagWD+dUJYE9gMO
TLSH
T19D424332EB09055AB0F645D6B0B212556468CB49931354B6F0777E3BFCCB8B733C22AA
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/nb_NO/LicenseFAQ.html

SHA256 40ba6635ac0cf8c8e1d6f408218a3931e4bac00c209783ffb6e17211e80b8b67
MD5 5a4e7bf980fecdcf08ae666ea220022a
SHA1 bce35add9edb60b74554e0636b96780333a4e932
SHA512 b24a6b6064846fa661b0661152b74b7a5a7e996ee5efb92470ca5bfce86c7d88ec34ccd5e57d504d7749ac181439f4e0c518c39730c327f81d7078bcd659fedd
SSDEEP 192:d+UO8Tll8o5UrPKygWu6FDnkGkmPoAldPD2TsyM3KUvL:da8Tll8o5UrPKygWu6BkGDoAnyTKr
TLSH
T1C0824412EB24041970FA49D5B06613952068EB4CE3269875F07ABC7AFCDF8BB33D1369
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/nb_NO/Main.zdct

SHA256 fe123f704df7bfe1b0cbc5318fece6a124ab0f56a8e864e0ef545dbf7509ca19
MD5 0983a00e718c5ac7714caf6402ad8ece
SHA1 f388403ae16e3db16b8b798223e4cc32205b051e
SHA512 f43710254b3d69a3fec5da0da9c18bfa92ac36f8f874766ba0b61dd96bcf779755fd159e6a096504f27ce1a13ee3fbec0bb20ff4a396f7abbba6789324902906
TLSH
T123514CA1A7EC6A19F2F31B0C7E7D04510AEEBE867E3DCA0C1560655C08F6690D5B2B73
MD5 SHA1 SHA512 TLSH

OBLRes/nb_NO/oobe_launcher.zdct

SHA256 14b94623c53315d3d459951c00fc054c2dcc51028e420ddad2cba7d00fe194b9
MD5 c756d9e33309fb0cee3f225b99b0df88
SHA1 a3cfb29af3e48af469ceeea4cb88d4ef21a2354f
SHA512 c27016e01aa6d97e9cdaf085695901b39f13f2e565294f00a4b67e168e800fe18f708cb4cf89663d332fd79de9c22f9ab013ff5321e5364b4ee1f0747393b7f5
SSDEEP 96:pnHEAMoOtCXnHboOtCpnHgoOtC5nHUoOtCfnHmoOtCcnHpioOtCknHIoOtCF1nHF:jiDiKiuiWiZixi4ieAiZio
TLSH
T111A10B26B3F95608F1F7671DADBA30942F3E7DD59938C26D2524510C0D7AA8488E0F33
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/nl_NL/ConnectionFAQ.html

SHA256 316fd3a0adc8a9d9be36a70beb68dfcbb4c941082f69048c0105be354d66849d
MD5 d3d443d5bc31b393c7783d0d6ec339d0
SHA1 ff2364533fd81662027136cf4d4b9f3180412cde
SHA512 951a00791712d7bf8403e95706d6980ed8aed616e96b0822e0e1c3f482708cc210e8df812cb4b230930d4e232bb8edc920aa39bb911a2a9303129baa871fd409
SSDEEP 192:d6q8Tll8o5CfzIKYdqVgW5+T9dQZ5mKcXXXb:dp8Tll8o5CfzIKYdagW5+T9WrmKcXXXb
TLSH
T15D424132E7080519F0E245D5B1B222917558D749D34794F9F07AAE7AFCCB8B733C229A
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/nl_NL/LicenseFAQ.html

SHA256 30fe7d08283d17153d4170bbef100f24c7105a691d5a0826fc64fa908c20449f
MD5 7bce0fbfbc1f2f0b6bfe6102872b666b
SHA1 20b0df5aa8dcb332c6f61e5d5481dc0633571fb6
SHA512 36d4918a88330d054cb0387772632f7e3a180f1317bfe3d770a4ffc448d7b6fab7edacfab080169092ed25beb450057d2dea0a8ac262c379e7aab3ead6138824
SSDEEP 192:dJUO8Tll8o5UrPKygWwf01djKQm8ost4iKM4SY1bL:df8Tll8o5UrPKygWwf0XjttfjC
TLSH
T1A3825412FB280419B0F64AC9B05212A57454D74DA35698B4F07EBD7AFCCB8FB33D12A9
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/nl_NL/Main.zdct

SHA256 a4478e8237963c369e0f908840f81bdca86ec8df70aa570bbb1a84c46c3bec63
MD5 108b9596a1e5a7204230ce84968dd5ac
SHA1 5320ecb2681ab7e0d607fb25c0084f741ccfdb20
SHA512 e63810710ab10ffaf13c2ec01a81e5068ba434d44c3e523fb3daee0fdb06ed4552cd62f2acdcb11d77f00b2da78c06b015bb958a4529cfcbd337c862d974303a
TLSH
T1FC513B9167ECAA18B2F32B1C7D7D54514EBEBD86AE39CA4C0670186C08F5A409962B73
MD5 SHA1 SHA512 TLSH

OBLRes/nl_NL/oobe_launcher.zdct

SHA256 7b68c388924c9029886d35c3189cc86ee29ea59abcfa15b53b669760710c2bd6
MD5 6bc2c59d7b68b566b8ec94b0f6ffbc08
SHA1 389c90cc2a60d2643cd6b7231d93d8a2535f35a3
SHA512 e773ccda1fd97a711f3dceaa4b873ae749ae0b84de9456496172e77b35ca5fcd8c33de6813d59c35db309f07d9d76ac5c8c892883d50934e42e0476c7a6c5582
SSDEEP 96:pBRml19CkSoml19CSKoml19CC2ml19CM1ml19CPvenml19CXqml19C21venml19K:IFmFwFRFKFSFYFJFbCzzzR
TLSH
T17AA1FA5673F89608F5F33B1DAA7B70942F7E7DA5A874C29C1664414C4CBAE1489E0B33
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/pl_PL/ConnectionFAQ.html

SHA256 7035bdeec896dec02942fbb7724c5faddb06d0984e6c55911da3990df970158c
MD5 da41e06fe286cc372dfa139d33dbe312
SHA1 fdb27d4fa5d79ef23e2a0ce29612cb474dc7e12b
SHA512 3e38444dbca2c3bb4e738404eb6bb54ab08475160fe612b313f18ea4c7138c32fe22cea2b60716f0c0a846976a3f2e9db182f0a2dacd522f36b21c36fd16df3e
SSDEEP 192:Xqq0q8Tll8o5CfzIKYdqVgWvfSQTxGDb/:Xqo8Tll8o5CfzIKYdagWvfSaxGf
TLSH
T1EA422022E7180545F0F645E5B0B3165174A8DB49930354B6F07A6E3BFCCB8BB77C22AA
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/pl_PL/LicenseFAQ.html

SHA256 4bf0f3d79ddfc288247c15477c75fe4d3e00cdae5d911ca5402f9af7e34c6af0
MD5 38839b4b6a55f9afb0016b6d7a77c65e
SHA1 2af2f178da04954d3e2603db84abebbd1a1fc70c
SHA512 e23ef3079a865d627e308b474528a44fa8c6e206da32db23b7a77fe4bf019c6d30cab51992b2b71dc4049f4d9d738751df694865f64e0ca648631dd8101a1856
SSDEEP 384:Xxz8Tll8o5UrPKygWk+15UqRUo0cAw1DkRl:Xxz8Rd5NN+fFUUwRl
TLSH
T109820F22E7280445A0F649D9B1A3139464A8DA48A3125875F17FBD7BFCCB8BB33D1379
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/pl_PL/Main.zdct

SHA256 3e0fb1eea8e43e572b02974ead2429c842222a24a13f58422f5d3cfec89088ca
MD5 041c99bcf05988d86b2ce02d890fc5eb
SHA1 c38193f250dac18ef215c7593ec9045fd2616430
SHA512 e94aaf8d747b643bae02f8ff06f7e4f41d3b0e1c8a62ada791fe8eef20cc17ff0fb79321350947fcdc727783cb22124d4761a5ebc0f7d51d0f576104740765f8
TLSH
T1E9517E81A3FC2A04B2FB5F0CBA7929914ABF7E12AF3DC58E2860654C09F4950D572773
MD5 SHA1 SHA512 TLSH

OBLRes/pl_PL/oobe_launcher.zdct

SHA256 cd97ee2db7088b359159e1ba5249b45a3dfe22ff2ee812d40a35100d7e121b06
MD5 e13ba9b0e16de9065c8f3cee126a7086
SHA1 86a11e96cfd6830c7b2cb16b5fdeb8d031122d75
SHA512 cd68a5509d95020f9f433fffa16f0bb623bb802266f0122b76968dc6777741577997f5cb37f2a36eb59febc336519690400a408288f1d7ab34d08ab77dc32a3d
SSDEEP 96:tR0i4CuAi4CIUi4CI+Uni4CmWi4C1ai4CN0i4Ceai4C+qPSi4CrEx1jxUDi4CI:DaKUE0MpjY148VR4P
TLSH
T1AEB1520273F85648F2F37B0C9A7E78945F3FBDA5A935C1AD2524424C1CBAA8489D1B33
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/pt_BR/ConnectionFAQ.html

SHA256 c994c9521dc2f4386267dc95d3ded8488c2a263f9e894d710c7c0b038ecb73ea
MD5 673c26ad693378ddad7bb28c589e4346
SHA1 2c1d9f36956921ba5bb44d03a61a4b4021be35eb
SHA512 0658491a5edc51975d7ec77d0351a2eb2c93fd6196f4fd3809aa4dce22b1c301e0b7799323439cd126cc14e3ec8c51865106704c0f78805a9c1f010c7247246e
SSDEEP 96:VJin+sPCB6hatUvmFDn8T3I95Nh6l9ucio5t2Tf4meO/jgRzeWjgRLYTWjgRLqbR:diq8Tll8o5CfzIKYdqVgWtARQPwa
TLSH
T1A5423232E7090505F0F245D5B0B722527468D749930394B6F07B6E7AF8CB8B777C22AA
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/pt_BR/LicenseFAQ.html

SHA256 3d731867d17d0b3b2052316e13db88b550a4898a3324b749d2dd457994f58a2c
MD5 ca26d9580cdd693b678073ec6ceaa805
SHA1 8cd5e2d874b1c560ca3137adf71f953d1156a153
SHA512 f9f94f88b93aecd8e088f16c37228a99f3fad4e954bd08276b44bdf17bbcd86dea5f8a441d0b2a76d1cdaad925925000c74c586b17649c702dd05df4140968ed
SSDEEP 96:VJin+sPCs6hatUGirFSLK8T3I95Nh6l9ucio5tkPlWjgRLPeWjgRL0RgN5+NNkT5:d5UO8Tll8o5UrPKygWqx3al/5kT2OnL
TLSH
T1E9825521EB180405B0F689C5B1A7139564A8DB48A3029875F07B7D7ABCCF8BB73D177A
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/pt_BR/Main.zdct

SHA256 5c97fd98bf9c82d5e7b73485cd1f087fc08b2b781f91cf712800ac12c0c0ec37
MD5 c2bb6ae120e8c3a95b617457336b9cb3
SHA1 fedf4b10e99dfd342c39ce51a80451ce938e88bc
SHA512 9f5d6684aeb9cdaa53c59e195915a8f29a9134557cffc4aaff78c7d710bf9df88bf4c9995974a860d14fd62d8f238c8fcee31c89253f64db13cb2fcccf67e42e
TLSH
T17F41199297FC2A08F6F33B0D7E3904510DBF7E96AE39DA4C1470584D0AF5A4099A6B73
MD5 SHA1 SHA512 TLSH

OBLRes/pt_BR/oobe_launcher.zdct

SHA256 1217cadda9832ad4e1d8b0e043f6aba936772177bd5c3ac55ef6e33ebd1a4fc1
MD5 d4168878759283e1de25ff3763c528bf
SHA1 d86889d9d7a70b5e41dc40a78033f6749339301f
SHA512 5ed03476f6a07d57f92f639f32c1c3611077d1e77ecbad519026955994b1489cbb8bd3a1cec0bd898b25a364119c1d9463b014639bba5095ed4690adbc0769ec
SSDEEP 96:mH/OCHZHyCOCHfHyGkOCHvHpYOCHRHnYOCHiHtOCHaHtkOCHpHtOCHCRXOCHRzeb:2GUMqXqhM/fQXx0QREHb
TLSH
T1A2A1F856B2FC1604F6F37B1A9A7A34952F3FBD95A839C26D1124464C0CAAF458CD0B33
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/ro_RO/ConnectionFAQ.html

SHA256 8ee9d3adbcdf5bba14459c9f2193ea7d59a6b1577850bde26518d69adab71838
MD5 26235f873952010dc67e9859e0ce8e61
SHA1 da3af8dd0bd038ca6f1f663736edb10b235cc4aa
SHA512 6a038d99e785859416443b4be7abf47343f32d18504dfa6766b65048856072c93c54bca6cc15b40f0160e0f12bba7f29ec0efacaca283084d76c228808f0722f
SSDEEP 192:X4q8Tll8o5CfzIKYdqVgWj1EfQc0+ZggY:Xn8Tll8o5CfzIKYdagWZluBY
TLSH
T1E1423232E71C0505F1F245D9B0B222927464D789930394B5F17B6E7ABCCB8B733D269A
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/ro_RO/LicenseFAQ.html

SHA256 85848b3e246036d098ed35008b8c04c6f3faeadcdd1edd2719d988b918ed4d92
MD5 7c33746b871d8d8b435d72c5d357cc6e
SHA1 de4a2af5eb7fc33b358c7da57ac99d9c3f887a11
SHA512 bb0d438039d73b6188be11ffe8117db8dc5319d05751d94ce3ed045667debb9970df1a042102f4b097f88235441e5e4f55357364a96c8a50d858ea43a4548a9d
SSDEEP 384:Xr8Tll8o5UrPKygWXIMfVvi9J3FIHxIfVr:Xr8Rd5NzMf1QJqKfVr
TLSH
T1F2825322F7281405B0F649D5B1561296A494EB4CA30298B5F07E7C7ABCCF4FB33E07A9
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/ro_RO/Main.zdct

SHA256 27f07fce6090c105f3cb1998f6c0818954967b54aa2eafea5e4aaf13007a7f3d
MD5 7d9bde1fd0f4e59d7ba6fe9006d3ee8c
SHA1 5b37d3dfb60676677d1f67788e69442351db633f
SHA512 5fc6f344b2257c5678d455d1ba3a625ce2abbd54ccb0ddfd96df51ac6e9b32bc77a0b99d0e3af7ad8669d45ac757b71150356df347c2c6f3aa4f6e8c52086a5a
TLSH
T157519A9197EC2605F3F32B1C7E3D04150EAF3E66AE3DCA0E1570594E08F6E8099A1B63
MD5 SHA1 SHA512 TLSH

OBLRes/ro_RO/oobe_launcher.zdct

SHA256 cdd86590eaf8d88b6088fa5eddf60cb2e0fa03a9871a086596a2e1b4f3778d74
MD5 f90ee3e20e17abd3b503be78d0f96db5
SHA1 093bcc810bdb7a85d45f3c34727db94d17a60f4a
SHA512 089b2f0caa07f98f72171f8b3f65f37d223d28bea05b09a60e624f0a3433fdd27833785b4f98b0ea415cb126d4b6296eca21b9cc8661d00088267d245ea810c6
SSDEEP 96:pA6CLY6ClS6ClT6Cj06CQKS6Cod6CZ1KS6CxO/6Cbul6C7:dgkH0gZCLZiRg8
TLSH
T139A10A5273F82204F2F33B1DAA7A74546E7F7D96A839C16E2120854D0CBAE84CC90B73
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/ru_RU/ConnectionFAQ.html

SHA256 534ebb0da5742e8f3d4d6ac63e3a592a16b0be5cb9e176a76fef55390e497cdc
MD5 cd1fc2b93dcacce724364856642f5dbd
SHA1 45fa0751ca92997fbcb6c8756a5929765eaaf537
SHA512 0fdc7398cf8bf03590e644f813dc6f89f235461a81ae8bcbc8f04e94323d942b5774fe8e286b137b23cdd49fe377ea8ab59fd05cff339c9f2905408dff383def
SSDEEP 192:WUq8Tll8o5CfzIKYdqVgWT5OAUiqYQygUp:WL8Tll8o5CfzIKYdagWT5OA3qYQyg+
TLSH
T16F423332E7080949B0F649E5B0B716506464CB49D30754B5F07BAE7BBCCB8B737C22AA
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/ru_RU/LicenseFAQ.html

SHA256 32f00c8bec1f23633257b4392005ba90a7e42b834a4df60fba608d9204bc3998
MD5 18f37b95232087ef8c493db890833741
SHA1 02af82aa9c96491031bb8cba98fa43ad1e333b31
SHA512 949d5766da99b06eb36f2dc2362517761d1dec2fe073d16bf654cd8691d9d5dc8d45c1c93e497bed65cf37203fe6c6b52823a662fbcc8e2b06f345a50b9b0781
SSDEEP 192:WvUO8Tll8o5UrPKygW2sQWld2IfaFuGGl3oUO0EiY4L:WJ8Tll8o5UrPKygW2sQWOIfaFuGGlXX
TLSH
T10E825122E7180459A0B54DE9B0A7139464A4DF4DA356A474F03BBC7ABCCF4BB37C13A9
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/ru_RU/Main.zdct

SHA256 d0d848b664273e42c4d8bf362fdcc11d375cee095062f8810b93f0f978a93f79
MD5 65940745f67d2dc0edb89cbb93e29153
SHA1 a5bd88c6d4280e5063c987bb55ad7d77e0d52ed6
SHA512 d59d8520abece2b3d7f8c48c55a1bf3a35567e5816c575125df73afc3bcfdcd61ba5aa76f5dd4d6d03d579c3d3652c1d58dab85f449d153f18b348ec3e3089de
TLSH
T10151CF4FEAECA40076B6921C2E3A48D215EE7B146B1DC58E55AF6C5D20FCA3073223D7
MD5 SHA1 SHA512 TLSH

OBLRes/ru_RU/oobe_launcher.zdct

SHA256 cc1260ddccaa193bd21471329aece2a4793532b314c4f06c539db088d8d04157
MD5 47f61e60d941409c870e92324c71e019
SHA1 65ed359c9e29435253fb1ff9d3fa68b33c9c64ab
SHA512 48815110cb5f8da1531a7e22a3c86bc88f42245e9d8a704fefbb3e8e47ac29173569c2dce120d15a86c9fc1743a92ca16094b49212bffddf5351fec7367d11df
SSDEEP 96:IcvMCg2MCmuNMC2vNMCoyNMC7wMCDRNMCgwMCjPwp8CRg8CJ:DkN3WFOjzEdYa
TLSH
T1EEA1AD0FF2FC9904F6B363094A7B34D1267EBF486720C19D216E9E0C446AB30AA95777
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/sk_SK/ConnectionFAQ.html

SHA256 0b5997f50eb51c01088fc72d449d6c60951c2942d718402aa22f9850512a260b
MD5 431690d1164c2933eab308c28f2d59d0
SHA1 53995f6f5b235efd6a46dd4999527e6b504c922d
SHA512 d781ac45b1af3d76d1a3c03c0a79e9d671cc051c1f75f15506dbc9612a546ac7954a00a4f6ea91013ab2edb538efe43e097c48bc8a931b33aa7821fc30b527d0
SSDEEP 96:VJinosPCRu6hatUvmFDn8T3I95Nh6l9ucio5t2Tf4meO/jgRzeWjgRLYTWjgRLq3:XNq8Tll8o5CfzIKYdqVgWRUR5jx4X
TLSH
T1D7424132E7180909F0F745D9B0B212917568DB49934364B5F07BAE6BFCCB8B723C129A
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/sk_SK/LicenseFAQ.html

SHA256 8bdbdfb093c0d54f4b036a52da581e65ad1ede4c6127ccee9cb32eb8d248b8b3
MD5 f60036a731b0787cbc2ca1d57e0fd9e3
SHA1 b50fc083f4c11968d9771775637d510853349e8c
SHA512 5719e06e2a9e874c58df1c1b83e5990c433e519ebffbfa9d18ce7229b0e71667c67c643d3bf4d900c42fb7658e991db21f6e9054ce04b94c875fab111ee975cc
SSDEEP 192:XQUO8Tll8o5UrPKygWOgn8R0OsIof9Yq1L:XY8Tll8o5UrPKygWJpOs119
TLSH
T135824422EB240815B0F649C9B1A312A56468EB4CA3429474F07B7D7ABCDB4FB33D176D
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/sk_SK/Main.zdct

SHA256 1c3cb77a67e566b263af9b11f2e8c0998d9b89663c39cd6f79e35b4bde150fb2
MD5 93fe1dceb3639f593d0528c2d1fb965f
SHA1 aae33ec6daffc8c0fb937cc02217fa16ce962763
SHA512 d641d9126f37804da552310d81f752db40972728d6abf76d9235915e0a6b0ca6b59afe3ffd5d30d5142a10e2a34ede399c42d04f05711c797a9ce299ae44f9db
TLSH
T11C51D592A3FC2542F6F36F0C7D7805660DFF799A6F3DC64E5960058C08F598099617A3
MD5 SHA1 SHA512 TLSH

OBLRes/sk_SK/oobe_launcher.zdct

SHA256 50f8a538f33a36884cb11edec74441ab28d08b5737df12817e106ab0ac384c9c
MD5 9a18aaa2f8d808c003acc939607cb5d6
SHA1 1882a844c4498737d3c9302e1c6bcd78c5df525b
SHA512 0e56d95466be2dad5301dbd934399a2a8763d3d9333715ad842172dda3f9afd05b17ae0b2e68673bfae728bcc6d7817eefcebb1d8b08e0986fccbc09bdb618a5
SSDEEP 96:n218w4Co218w4Cu21Fw4C+21Nw4Cg21kw4CT21RRw4Cr21pw4CE721RRw4CSQ215:nPNVPNbONbGN9/NeCRNGCN1CRNBQ9FFm
TLSH
T10DB1085272FC6649F6F3370DAAB625A49F7F7DA9B938C15D6020424C096BE818CD0B37
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/sl_SI/ConnectionFAQ.html

SHA256 b6f7d4c1abdb4a30802b411778013fca5221d9ad4342c9c8f02aec0fd8636d10
MD5 c40b83453a22bb28bcfd50f02af5707a
SHA1 2a290991c02a7d9498f08792c9962c1f77d5f2e8
SHA512 92b7dd6345f2bf0204c857933e1064a02e0ec53cd9092bea99af91db8e4c817dd3bff3e3e314f645c1226f1a09417570496cb9baec4dc1288aa52307905410dd
SSDEEP 192:X60q8Tll8o5CfzIKYdqVgWlGXsk6b/qEjn:X48Tll8o5CfzIKYdagWlGXQb/Rjn
TLSH
T107424032E7090919B0F655D5B0B212507468DB49D30394B6F07A7E7BF8CB8BB77C12AA
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/sl_SI/LicenseFAQ.html

SHA256 42d47d385651598302ec514164468dd3d1310077e3d12918ad51328cd17ef9c0
MD5 c4ee287898074a6ef01003bdc4a83480
SHA1 d6fd25b8d134f6fc9e938641d52fa8b7e7f6f05a
SHA512 b028165388a88347551baf48756ef4c30d82586080551266f26c743565cbc0538d827e9c999d1957229ea373dcf501399384b12413125ec2fcc57115972471f5
SSDEEP 192:XF0UO8Tll8o5UrPKygWE8i0iggILrmbCfKxYjJTEL:Xq8Tll8o5UrPKygWEFgUbsuYjJTk
TLSH
T18B822222E7190809B0F689D9B0A213546468DB4CA316D875F07B7D7BBCDE9BB33D0369
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/sl_SI/Main.zdct

SHA256 eadadc1815f29ff218afcf61c4c0747be112057e1b70e461f049814507a81602
MD5 23aee28f0e5bfa0f46b30261bcd3fd26
SHA1 599e5b76f098d188f25c24ce8262ae8084a8f69c
SHA512 45455e6494fa3213f05e339a43cf99659e83e188d594e9fc28d9ac0d0d7ebbf385ca7f6c3b858c14f49f3aa14a570aa30a7b4f29e3816cddff8c181865b03a32
TLSH
T1F3515C91A3FC6A09F2F33B0C7DB815610ABF7DA5BA3CC60D1574159C08F698195A2BB3
MD5 SHA1 SHA512 TLSH

OBLRes/sl_SI/oobe_launcher.zdct

SHA256 f5294523c04c366f94538e061d7c07d1d3a6def3b79ffec9763dcc950a3b4043
MD5 caed7b6ca4a3133c4f774d0af82cf903
SHA1 940affdc90b3d4f9c82accf2f53ed4620d6ac51d
SHA512 d6312ca08be518d43ea6e0f899888da4ea5d5260329e14922c071bc2a67912f0f3b2d678cd5b75f80800e75d89e1c3d66a3dba826a6864b52036c017b2993a6d
SSDEEP 96:pPCJJgJCJ3g0CJXZCJB5CJSBLCJKzCJb1BDCJrO5CJJsyCJB:hXJx0Y+/RaeKzyo
TLSH
T1EAB1FE45B3FC2608F9F73B099ABA71691E7FBDA4E935C15D2225458C08B7E8189D0B33
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/sv_SE/ConnectionFAQ.html

SHA256 4d85b35a88d1c89e55bca62ed63f50321ffa3aa662dd64e1beaa4fcf54df81d0
MD5 a25744a45c839944f15cde6b5a78eb27
SHA1 cc8a0ee2db6234d6d116ecf9bd70efda578941d6
SHA512 1d2ecf0a0fc842e39b5b8855d9eba81d19735d9414ac29da10cee16a0294e1035fb9540874bd36848b831fd618fcdc6013d69544fa7f2bbdc208506c50eff3d0
SSDEEP 96:VJin+sPCb6hatUvmFDn8T3I95Nh6l9ucio5t2Tf4meO/jgRzeWjgRLYTWjgRLqbE:dsq8Tll8o5CfzIKYdqVgWYW3O3
TLSH
T160325132E7180959B0F245D9B1B212917868D749A31354B5F0766E3AFCCB8B733D22AB
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/sv_SE/LicenseFAQ.html

SHA256 f6b4e30b83efb069d8f3521cf2aa418386b34d21baafe4d5909c571e07cd4bf9
MD5 2a35f75ba35605e5e7498beed3f522c1
SHA1 c793d9eee87d6cb146cc5992ef6732de87a213d3
SHA512 4c70d75bf8387af5059f632dd9f5a75031aca393030940f4928b7d58ae8838b0786ce5ea61dd9cb63f4d8ec26e83ebc3dc035f284df77981fea7fe9443644136
SSDEEP 192:dTUO8Tll8o5UrPKygW6pPz75H1QmnYLaFPtsCiKq6kSL:dl8Tll8o5UrPKygW6pPz7tCaPsC/
TLSH
T11B825612EB140855B0F649D9B16213D46498EB4CA3529874F07ABC7AFCDF8BB33D136A
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/sv_SE/Main.zdct

SHA256 4f60e0b9e3ba6f53f04ba758f6605c256d489dfaf589a43685e00a0e29891d44
MD5 8186572ade2b53e854b6c9029f7a9c7a
SHA1 2300084baedab410f457785f81853d638f55cd98
SHA512 18e2affd6443fd163de70b9d842321af00b1214311d0be03694fa99d2ea0e65f2baf9dbdb668896adcb40b1760f17a81dc99474555653f969228dd208cdfa97b
TLSH
T1CC519D91A7EC6A28F6F31B0C7E7905210EEEBD85AE3DEA0C1570285C04F594488B2B73
MD5 SHA1 SHA512 TLSH

OBLRes/sv_SE/oobe_launcher.zdct

SHA256 697d8b6e3d3ccd488b989fcb9a4955a0911a2dbf68a5f2ac91ebb8f2e4023816
MD5 9112181a6c55f1973460cdc616bab6b6
SHA1 5e88ecdd804a84e60542341d36f61e83270afed7
SHA512 448b4584b5998315c013373a11620c16254fa960f2604172c6e4307a65b916511afa76a4c5802bb7891e7912e808616ae06bae3a1e0bfdc066340d20656a21a5
SSDEEP 96:pdNOFCL8mOFCLK3OFCLqhOFCLUzOFCLH7OFCLfjOFCLO17OFCL0OFOPCLFEOPCLq:5asbaswasyaseasbasLas2as0qksaksq
TLSH
T1E6914E13B3F96208F5F32B0DAABE34901A7E7DC5A979D16D2624454C0C76E84C8E0B37
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/tr_TR/ConnectionFAQ.html

SHA256 7feb4693d6e87e3debcea47c2a1cdb9c8997c4aefdda73704985f4e3e2b3ef56
MD5 6ce2480836f738d53762df31b44656a6
SHA1 1d83ade7b0a3910a5b9c5525a287362a7b910854
SHA512 e3a0f75ded0e3d8ba8b87af53cd7e85f9f62f903b33e54f3162e24eeb43abc386d321aaffa428fcbed7ab44cea74d3be16b8a54884a9cf5a64cd009020819987
SSDEEP 96:VJinMsPCH6hatUvmFDn8T3I95Nh6l9ucio5t2Tf4meO/jgRzeWjgRLYTWjgRLqbF:L4q8Tll8o5CfzIKYdqVgWbGx+3TOC
TLSH
T133323121E7190509F0B645DAB5F612617468CB49A30394B6F0767E3BFCCB8B733C226A
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/tr_TR/LicenseFAQ.html

SHA256 fb323e39ea7472a648d00c1a7404a3afeb025411a14067b035ad8951ff349125
MD5 83286e3c30b67bc883669f59541dbbc8
SHA1 17c923ffa9061b7cb3b4da6b01f580c7a05b2474
SHA512 7252eab032f5fa2d6a08c76443a9cc2938ce4ce1864345c4adc029a4ec29f7cc9d416edaea008f3bcb0ad64f56a6070b96af7e841ae6c1d922617b5db385dcd0
SSDEEP 192:LTUO8Tll8o5UrPKygWNQYOug6icHFMz4/BBbtgQZeL:Ll8Tll8o5UrPKygWORuDicHGEBltgS6
TLSH
T188822111E7290409B0F64AD9B0A313A164A8DB59B3129475F03A7D7ABCCE4FB33C176D
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/tr_TR/Main.zdct

SHA256 5ec02196ec262fee217cbfd4f73463fe6300903e6e26f6f6d6e3bda259c0274b
MD5 ebc7fc8cf4ec4380176557573e55afe9
SHA1 2482e707bb158196c896ad3cf80d3c20eb9f7358
SHA512 80d23d769159dd0853b91e227b420be7836f1d6922a1f6b711df38cb37f259669c8a1f04a45cb316b6ea9ce99724bd52d4b564556c1878f1566e8cbbea1fb2bb
TLSH
T19D51A19197DC6A06F2F32F0C3D7955930BEE7EA5BE38D90D1571691C08F46809426BB3
MD5 SHA1 SHA512 TLSH

OBLRes/tr_TR/oobe_launcher.zdct

SHA256 af3ff664a06b316bfbb3dbc5ddf798f6b9f8328506adb8252cd4e0875f3d9e96
MD5 22f6527fec49d01e20355b4809dcd593
SHA1 905b6ccfc57cc2d9d64c6ce0e71883e73cc6c7b9
SHA512 c7f293fe6bd9e4ce669141e47968922ca8d7f631dd9df36b5e2955f0567e96086805f5def50d86d0b328db82f9cf30a38d56b2428764b0207b5e6deea28f1b0f
SSDEEP 96:E0eC77BX0eC77lX0eC7QXD0eC77l0eC77Q0eC77p0eC780eC77CW0eC77JhU0YC+:VeeBEeelEePXoeeKeeZee2eeeeCveero
TLSH
T1F1A1A01673F8A619F5F32B0D9ABB30551B7EBDE9B831816E2174524C0877E8488D1B73
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/uk_UA/ConnectionFAQ.html

SHA256 03384fe14b474dca02cf473c356df433de5dbb895ec9f9b674c1cec2d6f802bc
MD5 ce5f0c53eb33f88713b247e8177a2cca
SHA1 7ff972f3f584e3efcdbe0f17d7e491b4b965aee1
SHA512 e628681ce033901ecd2f5719aca90391accdbf2d1cb7652c60f087f824bf102676d283519f2ef2d5d895e572910ddc7bd4b06d3a514145e1575ba0788affeb39
SSDEEP 384:Wh8Tll8o5CfzIKYdagW8kDHlH5RvvCJtc:Wh8Rd5C7EeDFLktc
TLSH
T199424332E7180949B0F649D570B612616464DB4A930364B5F037AE3BFCDF8B737C16AA
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/uk_UA/LicenseFAQ.html

SHA256 6941ca5904160347834095432c7c54bcdf597fd10ed7a155d04a17a6871aa146
MD5 36f5371c7c4380aaaa0f0d855269fe9d
SHA1 f08e6f2b69b34d6f044292b7f703efd434faab9a
SHA512 d270080aae9f9938ce0c8c271397f746765d10b4c12dd58fc8951065601cd3c37b889edb11aaef317133d0b1d0aae0afe66aacf590819ad5a9528245f6b4963e
SSDEEP 192:W7UO8Tll8o5UrPKygWBvJPhVdeP9evFpiPfXRwzJra13eL:W98Tll8o5UrPKygW7hPQ9upiHWEA
TLSH
T1A6821322E7280449B0B54DD9B09613642494DF4DA35698B5F03BBD7AFCDE8BB33C06B9
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/uk_UA/Main.zdct

SHA256 f45f4c84ea9a2668f7103eb1c23015f3ec60d25010a9eab9883b5fe97e0e3935
MD5 9554a4e30e85dcf6281b407c70431ac3
SHA1 a5618b7f67cf8a8f66d3ddb4ffe504601a48db01
SHA512 8843dc82d116fab72008a2c28cf672b68e5e63c72a22f90c2ebba8cbc7aac0251fdec08f49fa1252446bf4c8be1c1c0871ff5576295e56c26dced17031ec7f20
TLSH
T10151914BEAFCA50076BA925C6E3988D705EE77042B9DC58C256F6C6810FDA3073226C7
MD5 SHA1 SHA512 TLSH

OBLRes/uk_UA/oobe_launcher.zdct

SHA256 2ef49c6a42a0f85e245bed56ac88b23939bf9bbe76f67eb31f679b7ea7edf577
MD5 8577e11c969f8274f89c0ea651074bf8
SHA1 7816aa768914c92a66110ad233739f6c4488eaff
SHA512 9f9d93071dc839cf95060628d794143dadad9b1d47061a7b6a42174c72b01e73889d2f78927a69e12706a5230bd70786082366651531c3747f1ac67acdbdaf92
SSDEEP 96:fu8YlNC0JYlNCKtlNCKGlNCc0lNCn40lNCvDlNCE40lNCuAvtbNCy3NCY:Wb2dEAnSEKSFYzN/
TLSH
T16CA1B20BB6F8A604F6F3630D493634D5167E7F885714C2DC216F650C086AA349BE5B77
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/zh_CN/ConnectionFAQ.html

SHA256 0ad1c9866ce567352444b5afdcd8048ced98ef1384d3d30015dc167c63c3aa3a
MD5 5c2740d52ee7cdc266065daa1ef0cf97
SHA1 c590279852c23eb504c840c15717c3b9fe796b61
SHA512 20cd4d1d0d5be53a14ad01feee69a89bc36e328b6787413357b00410a9ef936ffa30921b7ebe1c82fd6ee7b60e856753fe51a406d3d092c16523bed1daa73876
SSDEEP 192:p5q8Tll8o5CfzIKYdqVgWe/D90td8hRLu:pU8Tll8o5CfzIKYdagWFD
TLSH
T1F9320032E7190519B0F695D5B0B312507458CB49A30364B6F077BE6BFCCB8B767C229A
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/zh_CN/LicenseFAQ.html

SHA256 cbabc7c287a76be346a904c1cdb6612b80ecbd458df6bf183a1f8c4801b764ee
MD5 8f843d8ee8bf8d6bc72fef59ac2c5783
SHA1 73e7a5b8524d292d82fa52f3efa2c30fb76e4333
SHA512 7d3ea32923c61f2d62eabfe7cc4a38da5d18d960ff451f6c8e3fbccf99e6a9fbda2ae11d9e94c3a62dc908f46af8f5e480aee4c9fbf61df562f20eb29a54025b
SSDEEP 192:puUO8Tll8o5UrPKygWet0LHUWU7r/QX7tQv3uW:pK8Tll8o5UrPKygWe2LRLtc
TLSH
T198720F22EB290405B0FA49D9B0A612946454DB4CA3069475F13BBD7AFCCE8FB33D13AD
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/zh_CN/Main.zdct

SHA256 1c91dbabac12372e6a1b096ab2af3a914eebe197be421cabc8b36ca891fc1027
MD5 13fe11c3726818e25c1093efa681ffd3
SHA1 f467a94ad192e2356d9ea7495fefab192eeacaed
SHA512 9f5f364d7c729e20350f5111965c556733e4e8f1bec9c52b56d09e6ddebe0701ae982a59207df761f8c23d51f9f15ce11e7ebb223495f58fd8659810e13354ba
TLSH
T12331CEA0A7DD7810B3F31B1CBE3D44464AEFBA466E0CC80D68B4AC4C05F9A0192237E7
MD5 SHA1 SHA512 TLSH

OBLRes/zh_CN/oobe_launcher.zdct

SHA256 a6d338a5a8766bab3f5ef5157ac81f1453b77f5405ce540b4549217590bba64c
MD5 43b01e27b63bd7c2be11dae36776f4e9
SHA1 e8aa8c1b2b1f96a8ce41741f9cdb5098f75268f2
SHA512 a4c0a981af65f0aa59622f5583678dae01b4c935c94aec46a90195d5cb91cd13121bea158e40a3d6c815e92b368d5488273f760541abcf8e016102cca6e3556e
TLSH
T108612F6672F86648F1F3770FAB7B74842F7EBD956420C2AE2570890C096BE058C91B37
MD5 SHA1 SHA512 TLSH

OBLRes/zh_TW/ConnectionFAQ.html

SHA256 93f8aa1c3d53257ab6eddeb543fba8b024f0a99078629905fda55f5e63b2dd1a
MD5 988f358398bc118540499638ba979d62
SHA1 2ac7f13cb613e715b8030f0b86257b03af86f55b
SHA512 5408c53bfc985666373603e396d156d9b4807281c9712b132390b19494a02fc1fd1fa6043a85494301ea61dd98d9e36ee9c5423e12a00ceb84ed162031cce337
SSDEEP 96:VJinpsPCP0hdtHvFKR8n+x9LEZ6l9ucio5t2Tf4meO/jgRzeWjgRLYTWjgRLqSBP:mAE8n2l8o5CfzIKYdqSp82eV/RJaF
TLSH
T1A7322031EB19050AF0E359D5B0B212616468D789930394BAF0777E7AFCCB9B733C126A
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/zh_TW/LicenseFAQ.html

SHA256 83f30bb1a993fb070736b390c85f355af4f7d12e73ba489274bd6199f5a9fd8a
MD5 522a9bd77691d5677fc3d41959404641
SHA1 252f51c6ec3154cf62755c813741ecff54e8031c
SHA512 18cd6b9f1bd4310cbbee20f600b62255a9ea33c15a63f2276130f48f0a9e0b211c16d1b81adfbafcf526e389f909a426f478aca7181c4a1f45b6ae6746e0f6bc
SSDEEP 96:VJinpsPC+0hdtHcdFjjF8n+x9LEZ6l9ucio5tkPlWjgRLPeWjgRLpBv8Mr6RTNwm:mNYB8n2l8o5UrPKpp82cqGt/9oK
TLSH
T15672E122EB290405B0F649D9B1A212A46464EB4DE35254B5F07B7D7AFCDE8BB33C0269
MD5 SHA1 SHA512 SSDEEP TLSH

OBLRes/zh_TW/Main.zdct

SHA256 d87e6d594108bb951ccf86570444d4d90a677c9c195c254ed08f5f2d415f885b
MD5 2906fc440428c755853ca93f1ded60c0
SHA1 aff6c8766bbdd0594cc37671ab1d337b44fe736d
SHA512 136bd86ad3c6d34e4f2c9c63bf579c62bdd8a5f359394d0f2541ae75461c53c67c26e7d069e0ba47114f6445043a4de3ca0b0fecba7cfcb337f5b5a37e7bff7a
TLSH
T11F31C591A3DC7A44B2F32B0C7E7E58520EEF7A466F8DCE0D28B4984D45F590085727A7
MD5 SHA1 SHA512 TLSH

OBLRes/zh_TW/oobe_launcher.zdct

SHA256 a54d5679cb9d87d22781e0a3123d8561ebc7ef246bc633263f2ad896e2f42c2c
MD5 2bcc6f257c11585592673338a50e1dd6
SHA1 84c8b16f864654558ce7ca5a250686e103af35fc
SHA512 5e743b0a8fa92b659595823a6dc4b00268bc8db6dddf343272c283d19eef5e7789f9e9b2dbdf41b8c84bdb4185d5e18612e6ca223104454854ae088fe3c1da42
TLSH
T18B714D1A72FD6558F5F3631E9A7F70911F7EBDA85424C1FE2174860C08AAE0489D1B37
MD5 SHA1 SHA512 TLSH

P6Flex.swf

SHA256 f3cfa840cff9c905725008d71cce4af311da99c805ea4176cda333f234edfc92
MD5 355cf0d9a324081c45cff7b33158a593
SHA1 4ea8a49b5b1c5ecb7e09a9ac6df50aaec5f49cd9
SHA512 e0110f2f26b9da46469fad1aa520e7b9e90d8fee04d3813f3cceab9627a091a59cc5338644d65664ed4370270d15f8f2cf2feb83aec5f56d9aeaf07ac8f66cd3
SSDEEP 49152:HzRQLzNfo9FgZ8tF5wN7WhuCtRH6ROKv/MumN8o+3eC:TREzW9FgZzWECrH3KXmN8o+D
TLSH
T1EC8533CD1691158FE1449FE5CE2FB07B44D38020F57E5F6624E82E392FA11CE58B8AE6
MD5 SHA1 SHA512 SSDEEP TLSH

P6Native.dll

IMPHASH cd5c5071b012ca09c96c1d597830267e
SHA256 1610423c08c170fb78ddf1f797ea1f788ddb7b4efd8f4175ed531b4a87d9691a
MD5 42a8e780bf55dc398b389fd77a85b328
SHA1 541320eae0986986e8d6100ef9e2520670740a82
SHA512 8d251dff866b15bb93900a152990385d3a626d9b0883e2c3748c652e88d62e093bb14fd8fd2c62469d40efe466af0533e28c1e5b0ec8cb15173bea0832bc20cc
SSDEEP 24576:YwS5WwyPk7jPzOYUAi4vWP2CPZd1W0/gTSstYt9eMfAx5x4AIw:YwS5gk7j7iOCPZd1W0F4Yt9eMAx5x4rw
TLSH
T18F357E2177E0C035F4FB26B19A392B694D3AF972273080CFB6D4195D9D706D2AA39327
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

40:9f:0e:86:f5:c8:4d:4a:b1:62:b4:bf:9b:92:f7:ea:2c:0f:c4:6c

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Chains

Apr 22, 2014

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Serial Number

1d:37:83:b3:de:cd:5d:bb:16:e3:3c:d3:a6:b3:bf:db

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 20, 2014 - Feb 21, 2015

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

1

Major OS version

5

Entry point

683198

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\oobe\7.mbls\dev\aamcore\target\win\Release\P6Native.pdb

netapi32

NetApiBufferFree NetUserGetLocalGroups

secur32

GetUserNameExW

kernel32

CloseHandle ReleaseMutex CreateMutexW SetLastError FlushFileBuffers CreateFileW DeleteFileW WriteFile MultiByteToWideChar ReadFile GetFileSize WideCharToMultiByte WaitForSingleObject CreateProcessW GetModuleFileNameW Sleep GetTempPathW RemoveDirectoryW InterlockedIncrement lstrlenA CreateSemaphoreW ReleaseSemaphore GetCurrentProcessId CreateDirectoryW GetDateFormatW GetTimeFormatW GetLocalTime FreeLibrary GetProcAddress LoadLibraryW SetDllDirectoryW LocalFree EnterCriticalSection DeleteCriticalSection InitializeCriticalSection GetCurrentThreadId AreFileApisANSI SetFilePointer SetEndOfFile UnlockFile LockFile GetFileAttributesA DeleteFileA GetFileAttributesW LoadLibraryA QueryPerformanceCounter GetTickCount GetSystemTime GetSystemTimeAsFileTime LockFileEx GetTempPathA FormatMessageA GetFullPathNameA GetFullPathNameW GetDiskFreeSpaceA GetDiskFreeSpaceW CreateFileA GetCurrentProcess SetFileAttributesW CopyFileW lstrlenW GetACP GetFileSizeEx OpenMutexW IsDebuggerPresent SetEnvironmentVariableA WriteConsoleW SetEnvironmentVariableW FindFirstFileW FindNextFileW FindClose GetVersionExW GetSystemInfo GetLastError InterlockedDecrement GetCurrentDirectoryW UnhandledExceptionFilter SetUnhandledExceptionFilter LeaveCriticalSection CompareStringW GetProcessHeap SetStdHandle GetFileType GetStringTypeW IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID GetConsoleMode GetConsoleCP HeapSize GetModuleFileNameA GetStartupInfoW SetHandleCount IsValidCodePage GetOEMCP GetLocaleInfoW GetStdHandle PeekNamedPipe GetFileInformationByHandle IsProcessorFeaturePresent GetCPInfo LCMapStringW GetTimeZoneInformation MoveFileW GetCommandLineA HeapReAlloc HeapAlloc InitializeCriticalSectionAndSpinCount ExitProcess GetEnvironmentStringsW FreeEnvironmentStringsW HeapDestroy HeapCreate GetModuleHandleW TlsFree TlsSetValue TlsGetValue TlsAlloc TerminateProcess EncodePointer DecodePointer RaiseException FileTimeToSystemTime FileTimeToLocalFileTime GetDriveTypeW FindFirstFileExW RtlUnwind HeapFree

user32

wsprintfW GetSystemMetrics

advapi32

GetNamedSecurityInfoW SetNamedSecurityInfoW AllocateAndInitializeSid SetEntriesInAclW FreeSid GetUserNameW

shell32

SHGetSpecialFolderPathW SHGetFolderLocation SHGetPathFromIDListW SHGetFolderPathW SHCreateDirectoryExW

ole32

StringFromGUID2 OleRun CLSIDFromProgID CoInitialize CoTaskMemFree CoInitializeEx CoUninitialize CoCreateInstance CoSetProxyBlanket CLSIDFromString CoInitializeSecurity CoCreateGuid

oleaut32

VariantInit SysStringLen VariantCopy SysFreeString SysAllocString GetErrorInfo VariantClear

shlwapi

PathRemoveFileSpecW PathIsDirectoryW PathStripPathW StrToIntExA PathRemoveBackslashW PathAppendW PathRemoveExtensionW PathIsFileSpecW PathAddExtensionW PathRenameExtensionW PathFileExistsW

RNResources/Dictionary/cs_CZ/stringTable.zdct

SHA256 b1799d8e9b15f00521607336e68121d3e1151fd2c5f1ba39c84682ef769bf3bd
MD5 9e3e9c56fccdf6bc3e33aedcafbfed1d
SHA1 99b110bed7771bb401e7a8865e3fb9d5f6d15702
SHA512 ff08ee8180d4c2984c8fec77a100acda23c70b6c8c4082203c2153e5c5ddb83b17959878af5a288487fd0f417d493dcc762e7ad6dd1b03f43ea9a7806c947468
TLSH
T15BE0E2021BF94A5BF2F22B08AABD1C281A7F78294E38D05E5154054D85F19C5D1A17AB
MD5 SHA1 SHA512 TLSH

RNResources/Dictionary/da_DK/stringTable.zdct

SHA256 50e29371c63e97bee61fe290add47363b4ffb2c5037f2fe904736c8b58b6d527
MD5 da207d435420f251240e61fc08fdcf82
SHA1 dfcf4c4e0d30c36f7d8238f676a1ea2312cbcf56
SHA512 387848313392c5d758bc59a98b516b2c6fbd95c0f9fcef220638faac61f65b59574b73d4fc26ff00e9393de385ab9a50bdf19507b0628905099fc76de0ec5819
TLSH
T1F9E0C70207F04A1FF2F00B2079BC0C2C0ABFF844253CE48C0184010C8CB1794C0A07AB
MD5 SHA1 SHA512 TLSH

RNResources/Dictionary/de_DE/stringTable.zdct

SHA256 3bb580716833daa0e25ac676bd6de643e5b67658c3eaeba09fff18a3e0c35b6b
MD5 55a7471952820f271e7f1ed6c6bf3872
SHA1 59e4b1791bfcd7b154e5c314c1b42ef38e55f735
SHA512 9b13d8d831ce57632005fef1f1881d8926807aad5014d272ece91ae1a585dcd524f7e73c2917b24b1390612f0c6be58433375fbecde492a3b7b737a489ad1c67
TLSH
T19BE08C020BF94A0EF2F12F107BBD5D5C0A7BBCC51A78E04E1240000D98F0A98E260B7B
MD5 SHA1 SHA512 TLSH

RNResources/Dictionary/en_AE/stringTable.zdct

SHA256 4991e8569026f5e05e0d55e0cb953ff88d08cae64dcb66553020ce7ae4fa0f94
MD5 d0fb22a5bbb40dcd54fc4656bcd9a6a0
SHA1 44185de6f032186f3f7d7ddfa510b59167c9296f
SHA512 f9e9bb15555345911ce8b60027e6a48abefcf07792ec4fce6a0c989ac9d7ee1c0d4e19a26531a28b5707039e3202e23d0f25bf89074894cfda0944ee9118f090
TLSH
T131E05B1267F9551AF3F23F05AE7D5C28497F7CA54D3DD09D5151058F88F0A44D1503AB
MD5 SHA1 SHA512 TLSH

RNResources/Dictionary/en_GB/stringTable.zdct

SHA256 4991e8569026f5e05e0d55e0cb953ff88d08cae64dcb66553020ce7ae4fa0f94
MD5 d0fb22a5bbb40dcd54fc4656bcd9a6a0
SHA1 44185de6f032186f3f7d7ddfa510b59167c9296f
SHA512 f9e9bb15555345911ce8b60027e6a48abefcf07792ec4fce6a0c989ac9d7ee1c0d4e19a26531a28b5707039e3202e23d0f25bf89074894cfda0944ee9118f090
TLSH
T131E05B1267F9551AF3F23F05AE7D5C28497F7CA54D3DD09D5151058F88F0A44D1503AB
MD5 SHA1 SHA512 TLSH

RNResources/Dictionary/en_IL/stringTable.zdct

SHA256 4991e8569026f5e05e0d55e0cb953ff88d08cae64dcb66553020ce7ae4fa0f94
MD5 d0fb22a5bbb40dcd54fc4656bcd9a6a0
SHA1 44185de6f032186f3f7d7ddfa510b59167c9296f
SHA512 f9e9bb15555345911ce8b60027e6a48abefcf07792ec4fce6a0c989ac9d7ee1c0d4e19a26531a28b5707039e3202e23d0f25bf89074894cfda0944ee9118f090
TLSH
T131E05B1267F9551AF3F23F05AE7D5C28497F7CA54D3DD09D5151058F88F0A44D1503AB
MD5 SHA1 SHA512 TLSH

RNResources/Dictionary/en_US/stringTable.zdct

SHA256 4991e8569026f5e05e0d55e0cb953ff88d08cae64dcb66553020ce7ae4fa0f94
MD5 d0fb22a5bbb40dcd54fc4656bcd9a6a0
SHA1 44185de6f032186f3f7d7ddfa510b59167c9296f
SHA512 f9e9bb15555345911ce8b60027e6a48abefcf07792ec4fce6a0c989ac9d7ee1c0d4e19a26531a28b5707039e3202e23d0f25bf89074894cfda0944ee9118f090
TLSH
T131E05B1267F9551AF3F23F05AE7D5C28497F7CA54D3DD09D5151058F88F0A44D1503AB
MD5 SHA1 SHA512 TLSH

RNResources/Dictionary/es_ES/stringTable.zdct

SHA256 469eefdead780e7c5267d627bf8c8044cdbc1cdbd9132cf9d8b79bc2c16d0dc1
MD5 e21d967aceb7600084dc43f3e5dcf5ef
SHA1 f472360d0cbfdd0b8a12dc171475d29b40bf5f45
SHA512 2ae61e8bc40cf12069e3d2ddd7fd0c0136d911da16765ee54077db8396e9177fcd652bfee272bfce25410b948c5fc3a859213089ac0c1635cbcc53313e99f0ce
TLSH
T136E0EC0117F8462AF2F13F057E7E5C2C4EBFB4258D39E09E1155054E98F1A44D150797
MD5 SHA1 SHA512 TLSH

RNResources/Dictionary/es_LA/stringTable.zdct

SHA256 469eefdead780e7c5267d627bf8c8044cdbc1cdbd9132cf9d8b79bc2c16d0dc1
MD5 e21d967aceb7600084dc43f3e5dcf5ef
SHA1 f472360d0cbfdd0b8a12dc171475d29b40bf5f45
SHA512 2ae61e8bc40cf12069e3d2ddd7fd0c0136d911da16765ee54077db8396e9177fcd652bfee272bfce25410b948c5fc3a859213089ac0c1635cbcc53313e99f0ce
TLSH
T136E0EC0117F8462AF2F13F057E7E5C2C4EBFB4258D39E09E1155054E98F1A44D150797
MD5 SHA1 SHA512 TLSH

RNResources/Dictionary/es_MX/stringTable.zdct

SHA256 469eefdead780e7c5267d627bf8c8044cdbc1cdbd9132cf9d8b79bc2c16d0dc1
MD5 e21d967aceb7600084dc43f3e5dcf5ef
SHA1 f472360d0cbfdd0b8a12dc171475d29b40bf5f45
SHA512 2ae61e8bc40cf12069e3d2ddd7fd0c0136d911da16765ee54077db8396e9177fcd652bfee272bfce25410b948c5fc3a859213089ac0c1635cbcc53313e99f0ce
TLSH
T136E0EC0117F8462AF2F13F057E7E5C2C4EBFB4258D39E09E1155054E98F1A44D150797
MD5 SHA1 SHA512 TLSH

RNResources/Dictionary/es_NA/stringTable.zdct

SHA256 469eefdead780e7c5267d627bf8c8044cdbc1cdbd9132cf9d8b79bc2c16d0dc1
MD5 e21d967aceb7600084dc43f3e5dcf5ef
SHA1 f472360d0cbfdd0b8a12dc171475d29b40bf5f45
SHA512 2ae61e8bc40cf12069e3d2ddd7fd0c0136d911da16765ee54077db8396e9177fcd652bfee272bfce25410b948c5fc3a859213089ac0c1635cbcc53313e99f0ce
TLSH
T136E0EC0117F8462AF2F13F057E7E5C2C4EBFB4258D39E09E1155054E98F1A44D150797
MD5 SHA1 SHA512 TLSH

RNResources/Dictionary/fi_FI/stringTable.zdct

SHA256 7967dd24e3046678203142fd45e3d84476b9c7f6358f2bda8dd8a9b4b532719c
MD5 19064765bb2318b4ebd6805d52fd3e40
SHA1 a31141b9731a8a7ceeec27468d681294b2740df2
SHA512 dc7000ddf97b46977bbb552acc391c1d64ef51bdc3e247af40a6c5e04f01dfa157f0742550102dbc851ec21b2ef548baaccf36dad47672d554852e95c128f8ff
TLSH
T181E08C1207E8824AF2F16F242A796C5C1E7E79254D3BE06E1210048CD0B0A90E4A2B6B
MD5 SHA1 SHA512 TLSH

RNResources/Dictionary/fr_CA/stringTable.zdct

SHA256 f1dff8b2462f8399a6f4eb3de57f0b779a65e07578834e5c04fbe23729438d8a
MD5 8011879d9b819ad015201d2a3e1f3c19
SHA1 abe50561f0bdbc231cfd6afdbc21054ed6dab129
SHA512 c587ab086af94c036dcb795bcb8438d806fa46a8713dccf645c4479ff2aee6de12732a651afb2d303d0c3f3387fab9d025b06aa7225d36953e68f46fa012ba81
TLSH
T128E0C21217FC011AF2E03B01AA7D1C1C8B7F7C188E38D06D0158014D98F2A80C99036B
MD5 SHA1 SHA512 TLSH

RNResources/Dictionary/fr_FR/stringTable.zdct

SHA256 f1dff8b2462f8399a6f4eb3de57f0b779a65e07578834e5c04fbe23729438d8a
MD5 8011879d9b819ad015201d2a3e1f3c19
SHA1 abe50561f0bdbc231cfd6afdbc21054ed6dab129
SHA512 c587ab086af94c036dcb795bcb8438d806fa46a8713dccf645c4479ff2aee6de12732a651afb2d303d0c3f3387fab9d025b06aa7225d36953e68f46fa012ba81
TLSH
T128E0C21217FC011AF2E03B01AA7D1C1C8B7F7C188E38D06D0158014D98F2A80C99036B
MD5 SHA1 SHA512 TLSH

RNResources/Dictionary/fr_MA/stringTable.zdct

SHA256 f1dff8b2462f8399a6f4eb3de57f0b779a65e07578834e5c04fbe23729438d8a
MD5 8011879d9b819ad015201d2a3e1f3c19
SHA1 abe50561f0bdbc231cfd6afdbc21054ed6dab129
SHA512 c587ab086af94c036dcb795bcb8438d806fa46a8713dccf645c4479ff2aee6de12732a651afb2d303d0c3f3387fab9d025b06aa7225d36953e68f46fa012ba81
TLSH
T128E0C21217FC011AF2E03B01AA7D1C1C8B7F7C188E38D06D0158014D98F2A80C99036B
MD5 SHA1 SHA512 TLSH

RNResources/Dictionary/fr_XM/stringTable.zdct

SHA256 f1dff8b2462f8399a6f4eb3de57f0b779a65e07578834e5c04fbe23729438d8a
MD5 8011879d9b819ad015201d2a3e1f3c19
SHA1 abe50561f0bdbc231cfd6afdbc21054ed6dab129
SHA512 c587ab086af94c036dcb795bcb8438d806fa46a8713dccf645c4479ff2aee6de12732a651afb2d303d0c3f3387fab9d025b06aa7225d36953e68f46fa012ba81
TLSH
T128E0C21217FC011AF2E03B01AA7D1C1C8B7F7C188E38D06D0158014D98F2A80C99036B
MD5 SHA1 SHA512 TLSH

RNResources/Dictionary/hr_HR/stringTable.zdct

SHA256 21c60fec44aed34ea8b1b2f83c038ace32bbbfd311e548035e412077ed1aeb79
MD5 20544bb67fe7b43a40f0bd20ec19af66
SHA1 ff28369cf45665d70c64da8a20d435821a4d5565
SHA512 37e90edb8324cc71a33ea1cfb24c8b8ec61e2f4d0b26e86a95d524dbaced5dfc48e176018f1bae7418f3d9004b905e3e26f530b4196c8e2b77f8c9dc30e06732
TLSH
T14FE0C2020BFC050AF1F23E08AB7C1D2C0A7F38B45E38C00D6041054D89F0E84D4E0397
MD5 SHA1 SHA512 TLSH

RNResources/Dictionary/hu_HU/stringTable.zdct

SHA256 fda9de8cf6f7398c7af789c34345845bb3f2fb340f226c2e04d1d35f428408fc
MD5 5248363f8e11896ed6d4183a8de1da37
SHA1 cf4c74ac4a8eac92eda28533b23fdacaf30c9f82
SHA512 cb4369000c53f4c6d3160c50766ec866dfcc8a34d97fdee906949bd8bc0802267698e6a73513b87597f07e828872437d2a5550e1e1b38a87a3791ca7e54c8cdc
TLSH
T1CBE0868267F8014BF1F66F54A5BC9E5D0A7EB4285A3CE04D4454160E8CF0544C560B57
MD5 SHA1 SHA512 TLSH

RNResources/Dictionary/it_IT/stringTable.zdct

SHA256 22c30a52d8085ab590b0e62a69a02c4e56d5a61eabf6b21c3a46884c9bd1b3d3
MD5 49ecc56ef15a47c27935b5737543c3ea
SHA1 ec20f84e5fb2e73aea6bb8c5d1c089e23c99be30
SHA512 d3e689359c1be2a4a9143323426cdfcb8b1ccac98adef01617ce04246b74c2b9689f47c7d1066d5b69c62b6d8e8943964dd5c827547d13d4c18d0446e7549732
TLSH
T178E0C2431BF9122AF2F33F00BE3E6C6C4A3FB8244D39D09C0141005E80F1554D0607AB
MD5 SHA1 SHA512 TLSH

RNResources/Dictionary/ja_JP/stringTable.zdct

SHA256 18f6880acde86cd84a8e7cc009e020b62434ea8a696e50c5959263ca92242100
MD5 1f4775a0fc0f4c98d1acce5fecbf126d
SHA1 36d7eda06ecc7da32c80454ebbd5f6978ae18421
SHA512 c87cd3991d3d7fc51c6ea6acfbc80c3bc982850286e316505bbf75c40cf2579f63dda67c59aa1c67bdd214ece41e62784fcb50bb836d6a6fbe4a2fdb261600d8
TLSH
T1EED0A7520BE50815F1F13A0966BD5C2806BE74289728E0A95151050D80E064183907EF
MD5 SHA1 SHA512 TLSH

RNResources/Dictionary/ko_KR/stringTable.zdct

SHA256 9359902c513a2dc52127f486f94b6942240d3b24bedc840eb9b86ba747a963cd
MD5 134e5a5eb62a71a0bf953cdac9ab74dd
SHA1 ab506908816253e47f022967803289d12cc76b87
SHA512 d18d78acb92e0698506017b56ca126c88e7726bf3b298c665c397bd042e721027a86e6b103afb6276cf39983da31bb618cacf315ef32d7b56d5a4f485a6979fb
TLSH
T1C9D05E821FFA040AF2E06A1853BD5CA822FEB598CA28804E9950050D85E05E091513DF
MD5 SHA1 SHA512 TLSH

RNResources/Dictionary/nb_NO/stringTable.zdct

SHA256 fb4fa3b0de77881fa0f8029f6fa9ae76957b7a28d13bb9914d9f6439ecaff48e
MD5 7d7209238aede4d76aa0fb45c1bcd6db
SHA1 6253a97394ce1ac44a5b54574fe36a4c2ead5824
SHA512 faefb6ed8b02f1b382d18c1fc773d30f9fcbc409fbb33653d20cf6fefdf179bddaf8510d85e4332677a036e558245ed70a0053581369b5ad1b51b7e619a8ed70
TLSH
T1A2E0C70203F44A0FF2F10B107EBC4C2C0A7FFC95053AE04C1101010E80F2998C4907AB
MD5 SHA1 SHA512 TLSH

RNResources/Dictionary/nl_NL/stringTable.zdct

SHA256 66b399a93bd4a7ea622873ef636c9fe659249c7aa0626edd4bd46b018dac851f
MD5 0d54b60ece6ac1d1c171c83ca10f33ee
SHA1 5d12d51969382d6ab4347458c166c84dc17aaa31
SHA512 ab657f1f32df2d3f03cb8dd917fe38916161e1624eff8dc310176fece24cd6c3691f95400e93f6aa8c8cd3d321f5608df13e7a4c1066128f3490188aa33b4de0
TLSH
T121E0C24317F4411AF2E15B106E7D2C180B3F7C8A0938D0CD0150010E84B1D44D55176B
MD5 SHA1 SHA512 TLSH

RNResources/Dictionary/pl_PL/stringTable.zdct

SHA256 24c39385265d99ffb3eca04e0a0c993b86d824478e7152af23c1a6c02b4e9806
MD5 06978f93608c307b83426481a5b3af85
SHA1 49991de967a1f9822ff52ffb3cf808c31d9573ac
SHA512 3dd53eaf44a87a10a976537acde3e6d53de5a4e4d32a6e18eb5c2deaeb7dc62b09d95b182773c3e13b1bbc7c6c33a8bd60974deb135d7763fc08b5f4ac9fe0ea
TLSH
T110E012022BF50649F2F65A189ABD1D6C0A7F7839153CC04E85A5010D49F0ED4D160797
MD5 SHA1 SHA512 TLSH

RNResources/Dictionary/pt_BR/stringTable.zdct

SHA256 9f453a33b61289fba4a774a126dfdb17cf824a7fae56ec8cdb1b68d8d37e60b3
MD5 24254bc53aab4a16244e7923c09b2a75
SHA1 aaa7e47ecf728261078d63da79ea1fb583d4bfbd
SHA512 f117a0453505c8a60a3ef1f1367b4778d07be7925e0bfb57cf72b9b6a07d3331baa1a33095e2486fc77a2bdca74789e6d37dd7517204462ede30577b2f10f88c
TLSH
T15AE0820207FD021AF2F23F00AA3D1C6C4EBFB8160E3CD08E0120090E99F2A80D5603AB
MD5 SHA1 SHA512 TLSH

RNResources/Dictionary/ro_RO/stringTable.zdct

SHA256 f9e63db65b04d9898ce46327f4e9e29b4ed627683182a72b0ba06b9c4309918d
MD5 99a0e1f5221adf780adb3d4ff702edac
SHA1 f6b1a7025110516444c7c492598275cc3d04b7dc
SHA512 2fc32e07609833d85b7ab392e9ae5e2fecdb579e52ab11e56285d7c9707fb6a6da259887a36e3210d0e255c189e88b711c24e864241a63349f3f50650ebdb4bd
TLSH
T115E086425BF8102BF3F22F10BDBC1C1845BF78660E39E15E1154050E5CF0988D161767
MD5 SHA1 SHA512 TLSH

RNResources/Dictionary/ru_RU/stringTable.zdct

SHA256 f46dd69b9eed024924990b3f32d58bb0d9e26f7f46a7d997a45dd1365f12d583
MD5 81de356cf5963d9263ba86fb4c75c971
SHA1 46eba29187a6a4d7a1566f1dee6239e304b0a35d
SHA512 6df95da627aafe13d6c40349ca3b669abc24f184c552bc8c0de87b5caea0f9147827c85c3e71c0d31b710a3b0eeed6a258b7958d84eca62b050d435dc70081b1
TLSH
T10DE0460B9BFC8455F2E1D6046FBD1CE912BF79281628908A441F0D1A40A4A71A3007DB
MD5 SHA1 SHA512 TLSH

RNResources/Dictionary/sk_SK/stringTable.zdct

SHA256 e972410c20796bbe8dc0a995f0f0972601b25c95c50c3679ac29fd3eecdff038
MD5 9207ce53cde642eec8c4a2e3deaae171
SHA1 45fd090522f0b316b92882fd618d518241b37483
SHA512 9c0cbeeb16efcaa6585f3485bb4c9671a92288a8532f27dba7aa7a9a85efa5f4c45504905ece604e15820030d9d89945661540433b9bdf0303fd48b033e34199
TLSH
T103E0E20207F8499BF2F23E08AABD1E280ABF783A4E38D05E5154055D89F09D6D1A07AB
MD5 SHA1 SHA512 TLSH

RNResources/Dictionary/sl_SI/stringTable.zdct

SHA256 f1325ad2d655aeabdc8a8a5d1313a1458cc79c451aada38c55d44045cfbdd28e
MD5 2847f9a7f7cf216a823c970d03f8a8b8
SHA1 dfb21afb9f6b19f7cbdf001ecf9f865be96a38b9
SHA512 fd381ae98ff996d71f6a209c1d038d7cbf84f9bed5100f8ba3e395a4e011aa4ae852ac5badb8d7c25cbb511af87c7e766dfec084e1510e4598e91517a0925fcf
TLSH
T1BAE0120347F9469FF1F33F045BBD1D280ABE78645E38D05EA154051D55F1D85D0607A7
MD5 SHA1 SHA512 TLSH

RNResources/Dictionary/sv_SE/stringTable.zdct

SHA256 2c4c744b3147a43dc030b02f86ff8c04ed99df3fb8d464e162db673ddcf40baf
MD5 54106de7035467833fdd88fdaefe4195
SHA1 ca85e60fcec26938b8abd94ccbd0ef0e405ba322
SHA512 ee85bd5e2e1a8a6a7a79cacf6254e6e571f85dfdf8a0c9463f05d82392fab8272b925f4144d4519b0b0fcba94a8a9d8564e9d52445d1d9f7fed0a6b6fd54e4d6
TLSH
T177E0C21207F4450AF2F10B10797D0C1C0A7FBCC5153EE59E1184084C48B1E64C65036B
MD5 SHA1 SHA512 TLSH

RNResources/Dictionary/tr_TR/stringTable.zdct

SHA256 421e4b8336e1f6ee056b95480fbc6a435f230ae9cdfbc79429d55949f78fae38
MD5 d44dc8522499fd0aa65465c540e8a5a2
SHA1 d43c9e66678b96e9c115a3c533a0f2bdf455b3c3
SHA512 3fe0a36c2cab435fe2fb4e87b8472a12c75509c3138f61ebf9acd40d6199411491538cea3ad4320bedc8d9ca3dcb1bc26e8160a9f1798be7361461fc986eeca5
TLSH
T15EE0C24207FC0486F1F32F08AA7E6C280BBF3C651E38E14F2151010C40F0AA4A1407EB
MD5 SHA1 SHA512 TLSH

RNResources/Dictionary/uk_UA/stringTable.zdct

SHA256 55fc49a0a98f14718e2573107af5c8667e306e70b05cd89a380b506233d446c7
MD5 39852736a77486cf8f46d6f0d3fe6d16
SHA1 583182ade3b99bf407f73e718d909cd9d2d6ff6e
SHA512 c3120c9d654199caf1dc22f26d1c61b704a05f9ffb1d0fcb00ad4f8fad0d44bb36804904772e874e5bb38e3fd7f58a8b9d3972e93a2417d9ef9003c44507b319
TLSH
T14DE08C0B9BF44044F2E596146EBD5DEA02FDB91807A8C0C9242F512F40F0A71A340BDB
MD5 SHA1 SHA512 TLSH

RNResources/Dictionary/zh_CN/stringTable.zdct

SHA256 dc0033a53febe81152ac5c51b264087953f9930ea1f2664db43f5b1fcf538203
MD5 f30625ce22a8ce02788fcf55d1515267
SHA1 028bd5ea43f81b92d4ba10de01548688fcd602a9
SHA512 c84d2890a2819a5ca0dcbd40bafcf434f36b0f2ec1121366fd119cc0bc5c0332081aa931d4613e187dccc7fba946b66154cd3ae31b204da20e9788c6a7f7a0b0
TLSH
T160D0A95107EE458EF2E02E08667E2C6D07FF3888192CC0AEA070460E95F098091A639F
MD5 SHA1 SHA512 TLSH

RNResources/Dictionary/zh_TW/stringTable.zdct

SHA256 954bce139c2369a612ef596f519dc8799e5f0755e59f39d0b002cfc6e1f39cad
MD5 b84164419e9d6a134545506c85df69ed
SHA1 43cbdfc9d9cf028c858238483a35df8607d50191
SHA512 f9dbd4524768b790d5b3f1d279dc4b0adb603b8c63e9bd9d2c5cb0feb930620918dfdc4ba14cd3ec9d05c14c76609535a355ef78756d029312b646b691c4c039
TLSH
T131D0A9810BFA044BF2F52E08AA7DAC6D0AFF389C0618D04F44A2060D84E094081A039F
MD5 SHA1 SHA512 TLSH

VulcanBridge.dll

IMPHASH bef4ee6bcd0da427c42e6c5dcab96e32
SHA256 8bc6861e2938c019e2c5cb9d9221a35ac62e53586cec2433e808a7e0140bef47
MD5 705ffdafe2570437c7fd28aa3d7a2031
SHA1 ba631b42fe47faf48881de6589329e7d903280d7
SHA512 431224b499fa92f184958d7def1de529f46eae9b1c2a7eda95443ff80ea2b482ac3e3a37c2791512a97c9c66d5e6c14dc1f333d8462339a5ea290a5aeec8de64
SSDEEP 3072:QrL8EN5AyHR0lOqbdF3Z6LSN8DpUN6uIr9O1Dt2cFqu+:QrL8E3AyxpwFpKSNTQuvnIt
TLSH
T142047D217290C033D2AB12349A76D7B65A3D78614BB8D1C7BBD84F3A5E647C1AB3530B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

c3:4a:c7:0d:00:34:53:2b:e1:b8:5d:5d:4f:dd:9d:86:c4:41:ef:b4

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Chains

Apr 22, 2014

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Serial Number

1d:37:83:b3:de:cd:5d:bb:16:e3:3c:d3:a6:b3:bf:db

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 20, 2014 - Feb 21, 2015

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

1

Major OS version

5

Entry point

47990

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\oobe\7.mbls\dev\aamcore\target\win\Release\VulcanBridge.pdb

vulcanmessage

??0SuiteMessage@api@vulcan@adobe@@QAE@PBD@Z ??1SuiteMessage@api@vulcan@adobe@@UAE@XZ ?SetPayload@SuiteMessage@api@vulcan@adobe@@QAEXPBD@Z ?TYPE_PREFIX@SuiteMessage@api@vulcan@adobe@@2QBDB ?Create@IVulcanMessageDispatcher@api@vulcan@adobe@@SAPAV1234@PBDPAVIVulcanMessageListener@234@1@Z

kernel32

CreateMutexW WaitForSingleObject Sleep ReleaseSemaphore GetLastError CreateSemaphoreW ReleaseMutex CloseHandle GetCurrentProcessId GetDateFormatW CreateDirectoryW WriteFile WriteConsoleW CreateFileW MultiByteToWideChar GetTempPathW GetLocalTime InitializeCriticalSection LeaveCriticalSection EnterCriticalSection DeleteCriticalSection SetFilePointer GetFileSizeEx WideCharToMultiByte OpenMutexW SetStdHandle CreateFileA SetEndOfFile GetProcessHeap CompareStringW GetTimeFormatW GetCurrentThreadId LoadLibraryW HeapReAlloc GetStringTypeW IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID IsValidCodePage GetOEMCP GetACP InterlockedIncrement InterlockedDecrement EncodePointer DecodePointer HeapFree HeapAlloc GetSystemTimeAsFileTime SetEnvironmentVariableA GetCommandLineA MoveFileW GetTimeZoneInformation RaiseException RtlUnwind LCMapStringW GetCPInfo TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent GetStdHandle GetModuleFileNameW GetLocaleInfoW HeapCreate HeapDestroy GetProcAddress GetModuleHandleW ExitProcess TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType GetStartupInfoW GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount HeapSize ReadFile GetConsoleCP GetConsoleMode FlushFileBuffers

user32

wsprintfW

shell32

SHCreateDirectoryExW

shlwapi

PathAppendW PathAddExtensionW PathRemoveFileSpecW PathRenameExtensionW PathIsDirectoryW PathRemoveExtensionW PathFileExistsW PathIsFileSpecW

VulcanMessage.dll

IMPHASH 6bef78ab713ff794cd4a02c503ce8198
SHA256 5a2c9b5da23181176443ac02898f3d362c716d8b54f7afdf9ae7a0dda775137a
MD5 4b4ffa41cf13ac3ed21a0a221316cae1
SHA1 318c0f06575a5d7397e1534c8bf5822b361ad7bb
SHA512 d470c273ca1ff7c584600817b012b446fbdbb04b528c9afb6a688d0e36cc3a5e6365bfc8e087e30d5066cdfdb75fe2772557feb3e9c14450dff29108f2a8f0e3
SSDEEP 1536:M+3FeLAiQsDQy/q88EfzsDPAwdqkj8cJSPxoragZNd+VodI9sUXZbdZUCMf5KFOc:11yTsFdXJ6ZbdZUC8KFOZJcKq5q
TLSH
T1ABF339333E018576E69F537DB4BE76994A1ED8438F2828C7B288564ADDB44D32E32317
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

8e:48:e1:49:73:b5:27:91:8f:ba:60:3e:c1:87:87:f2:71:30:2a:d7

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Adobe Systems Incorporated,OU=Information Systems+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Chains

Mar 10, 2012

CN=Adobe Systems Incorporated,OU=Information Systems+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=Adobe Systems Incorporated,OU=Information Systems+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Serial Number

15:e5:ac:0a:48:70:63:71:8e:39:da:52:30:1a:04:88

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 15, 2010 - Dec 14, 2012

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

1

Major OS version

5

Entry point

102000

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\sdkbuild\products\vulcan\CS6\perforce\vulcan\main\projects\native\VulcanMessageLib\Binaries\Win32\Release\VulcanMessage.pdb

kernel32

WideCharToMultiByte LoadLibraryW GetProcAddress GetCurrentProcessId GetCurrentThreadId GetTickCount QueryPerformanceCounter DisableThreadLibraryCalls IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess TerminateProcess InterlockedCompareExchange Sleep InterlockedExchange DecodePointer EncodePointer GetSystemTimeAsFileTime

msvcp100

?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z ?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z ?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ ?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ ?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ ?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ ?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ ?gcount@?$basic_istream@DU?$char_traits@D@std@@@std@@QBE_JXZ ?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ ?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ ?good@ios_base@std@@QBE_NXZ ?rdstate@ios_base@std@@QBEHXZ ?_Swap_all@_Container_base0@std@@QAEXAAU12@@Z ?_Xinvalid_argument@std@@YAXPBD@Z ?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ ?_Xlength_error@std@@YAXPBD@Z ??0id@locale@std@@QAE@I@Z ?_Orphan_all@_Container_base0@std@@QAEXXZ ??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@ ?_BADOFF@std@@3_JB ??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@ ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ?_Xout_of_range@std@@YAXPBD@Z ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ ?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z ?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD0@Z ?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z

msvcr100

_unlock __dllonexit _lock _onexit _malloc_crt free _encoded_null _initterm _initterm_e _amsg_exit __CppXcptFilter _crt_debugger_hook _except_handler4_common ?_type_info_dtor_internal_method@type_info@@QAEXXZ __clean_type_info_names_internal ?terminate@@YAXXZ memchr ??0exception@std@@QAE@XZ _errno _wstat64i32 _wgetenv strstr memmove ??2@YAPAXI@Z ??3@YAXPAX@Z ??_V@YAXPAX@Z ??0exception@std@@QAE@ABV01@@Z ??0exception@std@@QAE@ABQBD@Z ??1exception@std@@UAE@XZ _purecall ?what@exception@std@@UBEPBDXZ memcpy _CxxThrowException __CxxFrameHandler3 __RTDynamicCast

??0EndPoint@api@vulcan@adobe@@QAE@ABV0123@@Z ??0EndPoint@api@vulcan@adobe@@QAE@XZ ??0ErrorMessage@api@vulcan@adobe@@QAE@ABV0123@@Z ??0ErrorMessage@api@vulcan@adobe@@QAE@XZ ??0GetAppPathMessage@api@vulcan@adobe@@QAE@ABV0123@@Z ??0GetAppPathMessage@api@vulcan@adobe@@QAE@XZ ??0GetTargetSpecifiersMessage@api@vulcan@adobe@@QAE@ABV0123@@Z ??0GetTargetSpecifiersMessage@api@vulcan@adobe@@QAE@XZ ??0HostMessage@api@vulcan@adobe@@QAE@ABV0123@@Z ??0HostMessage@api@vulcan@adobe@@QAE@PBD@Z ??0IVulcanMessageDispatcher@api@vulcan@adobe@@QAE@ABV0123@@Z ??0IVulcanMessageDispatcher@api@vulcan@adobe@@QAE@XZ ??0IVulcanMessageListener@api@vulcan@adobe@@QAE@ABV0123@@Z ??0IVulcanMessageListener@api@vulcan@adobe@@QAE@XZ ??0IsAppInstalledMessage@api@vulcan@adobe@@QAE@ABV0123@@Z ??0IsAppInstalledMessage@api@vulcan@adobe@@QAE@XZ ??0IsAppRunningMessage@api@vulcan@adobe@@QAE@ABV0123@@Z ??0IsAppRunningMessage@api@vulcan@adobe@@QAE@XZ ??0LaunchAppMessage@api@vulcan@adobe@@QAE@ABV0123@@Z ??0LaunchAppMessage@api@vulcan@adobe@@QAE@XZ ??0SuiteMessage@api@vulcan@adobe@@QAE@ABV0123@@Z ??0SuiteMessage@api@vulcan@adobe@@QAE@PBD@Z ??0VulcanMessage@api@vulcan@adobe@@QAE@ABV0123@@Z ??0VulcanMessage@api@vulcan@adobe@@QAE@XZ ??1EndPoint@api@vulcan@adobe@@UAE@XZ ??1ErrorMessage@api@vulcan@adobe@@UAE@XZ ??1GetAppPathMessage@api@vulcan@adobe@@UAE@XZ ??1GetTargetSpecifiersMessage@api@vulcan@adobe@@UAE@XZ ??1HostMessage@api@vulcan@adobe@@UAE@XZ ??1IVulcanMessageDispatcher@api@vulcan@adobe@@UAE@XZ ??1IsAppInstalledMessage@api@vulcan@adobe@@UAE@XZ ??1IsAppRunningMessage@api@vulcan@adobe@@UAE@XZ ??1LaunchAppMessage@api@vulcan@adobe@@UAE@XZ ??1SuiteMessage@api@vulcan@adobe@@UAE@XZ ??1VulcanMessage@api@vulcan@adobe@@UAE@XZ ??4EndPoint@api@vulcan@adobe@@QAEAAV0123@ABV0123@@Z ??4ErrorMessage@api@vulcan@adobe@@QAEAAV0123@ABV0123@@Z ??4GetAppPathMessage@api@vulcan@adobe@@QAEAAV0123@ABV0123@@Z ??4GetTargetSpecifiersMessage@api@vulcan@adobe@@QAEAAV0123@ABV0123@@Z ??4HostMessage@api@vulcan@adobe@@QAEAAV0123@ABV0123@@Z ??4IVulcanMessageDispatcher@api@vulcan@adobe@@QAEAAV0123@ABV0123@@Z ??4IVulcanMessageListener@api@vulcan@adobe@@QAEAAV0123@ABV0123@@Z ??4IsAppInstalledMessage@api@vulcan@adobe@@QAEAAV0123@ABV0123@@Z ??4IsAppRunningMessage@api@vulcan@adobe@@QAEAAV0123@ABV0123@@Z ??4LaunchAppMessage@api@vulcan@adobe@@QAEAAV0123@ABV0123@@Z ??4MessageUtil@api@vulcan@adobe@@QAEAAV0123@ABV0123@@Z ??4SuiteMessage@api@vulcan@adobe@@QAEAAV0123@ABV0123@@Z ??4VulcanMessage@api@vulcan@adobe@@QAEAAV0123@ABV0123@@Z ??8EndPoint@api@vulcan@adobe@@QBE_NABV0123@@Z ??9EndPoint@api@vulcan@adobe@@QBE_NABV0123@@Z ??_7EndPoint@api@vulcan@adobe@@6B@ ??_7ErrorMessage@api@vulcan@adobe@@6B@ ??_7GetAppPathMessage@api@vulcan@adobe@@6B@ ??_7GetTargetSpecifiersMessage@api@vulcan@adobe@@6B@ ??_7HostMessage@api@vulcan@adobe@@6B@ ??_7IVulcanMessageDispatcher@api@vulcan@adobe@@6B@ ??_7IVulcanMessageListener@api@vulcan@adobe@@6B@ ??_7IsAppInstalledMessage@api@vulcan@adobe@@6B@ ??_7IsAppRunningMessage@api@vulcan@adobe@@6B@ ??_7LaunchAppMessage@api@vulcan@adobe@@6B@ ??_7SuiteMessage@api@vulcan@adobe@@6B@ ??_7VulcanMessage@api@vulcan@adobe@@6B@ ?Clone@ErrorMessage@api@vulcan@adobe@@UBEPAV1234@XZ ?Clone@GetAppPathMessage@api@vulcan@adobe@@UBEPAV1234@XZ ?Clone@GetTargetSpecifiersMessage@api@vulcan@adobe@@UBEPAV1234@XZ ?Clone@HostMessage@api@vulcan@adobe@@UBEPAV1234@XZ ?Clone@IsAppInstalledMessage@api@vulcan@adobe@@UBEPAV1234@XZ ?Clone@IsAppRunningMessage@api@vulcan@adobe@@UBEPAV1234@XZ ?Clone@LaunchAppMessage@api@vulcan@adobe@@UBEPAV1234@XZ ?Clone@SuiteMessage@api@vulcan@adobe@@UBEPAV1234@XZ ?Create@EndPoint@api@vulcan@adobe@@SA?AV1234@PBD@Z ?Create@IVulcanMessageDispatcher@api@vulcan@adobe@@SAPAV1234@PBDPAVIVulcanMessageListener@234@1@Z ?CreateMessage@MessageUtil@api@vulcan@adobe@@SAPAVVulcanMessage@234@PBD@Z ?CreateMessageByType@MessageUtil@api@vulcan@adobe@@SAPAVVulcanMessage@234@PBD@Z ?GetAppId@EndPoint@api@vulcan@adobe@@QBEXPAD@Z ?GetAppId@VulcanMessage@api@vulcan@adobe@@UBEXPAD@Z ?GetAppIdSize@EndPoint@api@vulcan@adobe@@QBEIXZ ?GetAppIdSize@VulcanMessage@api@vulcan@adobe@@QBEIXZ ?GetCmdLine@LaunchAppMessage@api@vulcan@adobe@@QBEXPAD@Z ?GetCmdLineSize@LaunchAppMessage@api@vulcan@adobe@@QBEIXZ ?GetData@ErrorMessage@api@vulcan@adobe@@UBEXPAD@Z ?GetData@GetAppPathMessage@api@vulcan@adobe@@UBEXPAD@Z ?GetData@GetTargetSpecifiersMessage@api@vulcan@adobe@@UBEXPAD@Z ?GetData@HostMessage@api@vulcan@adobe@@UBEXPAD@Z ?GetData@IsAppInstalledMessage@api@vulcan@adobe@@UBEXPAD@Z ?GetData@IsAppRunningMessage@api@vulcan@adobe@@UBEXPAD@Z ?GetData@LaunchAppMessage@api@vulcan@adobe@@UBEXPAD@Z ?GetData@SuiteMessage@api@vulcan@adobe@@UBEXPAD@Z ?GetDataSize@ErrorMessage@api@vulcan@adobe@@UBEIXZ ?GetDataSize@GetAppPathMessage@api@vulcan@adobe@@UBEIXZ ?GetDataSize@GetTargetSpecifiersMessage@api@vulcan@adobe@@UBEIXZ ?GetDataSize@HostMessage@api@vulcan@adobe@@UBEIXZ ?GetDataSize@IsAppInstalledMessage@api@vulcan@adobe@@UBEIXZ ?GetDataSize@IsAppRunningMessage@api@vulcan@adobe@@UBEIXZ ?GetDataSize@LaunchAppMessage@api@vulcan@adobe@@UBEIXZ ?GetDataSize@SuiteMessage@api@vulcan@adobe@@UBEIXZ ?GetDestinationCount@SuiteMessage@api@vulcan@adobe@@QBEIXZ ?GetDestinations@SuiteMessage@api@vulcan@adobe@@QBEXPAVEndPoint@234@@Z ?GetError@ErrorMessage@api@vulcan@adobe@@QBEXPAD@Z ?GetErrorSize@ErrorMessage@api@vulcan@adobe@@QBEIXZ ?GetFault@ErrorMessage@api@vulcan@adobe@@QBEXPAD@Z ?GetFaultSize@ErrorMessage@api@vulcan@adobe@@QBEIXZ ?GetFocus@LaunchAppMessage@api@vulcan@adobe@@QBE_NXZ ?GetId@EndPoint@api@vulcan@adobe@@QBEXPAD@Z ?GetIdSize@EndPoint@api@vulcan@adobe@@QBEIXZ ?GetPayload@HostMessage@api@vulcan@adobe@@QBEXPAD@Z ?GetPayload@SuiteMessage@api@vulcan@adobe@@QBEXPAD@Z ?GetPayloadSize@HostMessage@api@vulcan@adobe@@QBEIXZ ?GetPayloadSize@SuiteMessage@api@vulcan@adobe@@QBEIXZ ?GetResult@GetAppPathMessage@api@vulcan@adobe@@QBEXPAD@Z ?GetResult@GetTargetSpecifiersMessage@api@vulcan@adobe@@QBEXIPAD@Z ?GetResult@IsAppInstalledMessage@api@vulcan@adobe@@QBE_NXZ ?GetResult@IsAppRunningMessage@api@vulcan@adobe@@QBE_NXZ ?GetResult@LaunchAppMessage@api@vulcan@adobe@@QBE_NXZ ?GetResultCount@GetTargetSpecifiersMessage@api@vulcan@adobe@@QBEIXZ ?GetResultSize@GetAppPathMessage@api@vulcan@adobe@@QBEIXZ ?GetResultSize@GetTargetSpecifiersMessage@api@vulcan@adobe@@QBEII@Z ?GetScope@VulcanMessage@api@vulcan@adobe@@QBE?AW4MessageScope@234@XZ ?GetSource@SuiteMessage@api@vulcan@adobe@@QBE?AVEndPoint@234@XZ ?GetTargetSpecifier@GetAppPathMessage@api@vulcan@adobe@@QBEXPAD@Z ?GetTargetSpecifier@IsAppInstalledMessage@api@vulcan@adobe@@QBEXPAD@Z ?GetTargetSpecifier@IsAppRunningMessage@api@vulcan@adobe@@QBEXPAD@Z ?GetTargetSpecifier@LaunchAppMessage@api@vulcan@adobe@@QBEXPAD@Z ?GetTargetSpecifierSize@GetAppPathMessage@api@vulcan@adobe@@QBEIXZ ?GetTargetSpecifierSize@IsAppInstalledMessage@api@vulcan@adobe@@QBEIXZ ?GetTargetSpecifierSize@IsAppRunningMessage@api@vulcan@adobe@@QBEIXZ ?GetTargetSpecifierSize@LaunchAppMessage@api@vulcan@adobe@@QBEIXZ ?GetType@VulcanMessage@api@vulcan@adobe@@QBEXPAD@Z ?GetTypeSize@VulcanMessage@api@vulcan@adobe@@QBEIXZ ?GetXmlSize@EndPoint@api@vulcan@adobe@@QBEIXZ ?GetXmlSize@VulcanMessage@api@vulcan@adobe@@UBEIXZ ?INVALID_ENDPOINT@EndPoint@api@vulcan@adobe@@2V1234@B ?IsHostMessage@HostMessage@api@vulcan@adobe@@SA_NABVVulcanMessage@234@@Z ?IsSuiteMessage@SuiteMessage@api@vulcan@adobe@@SA_NABVVulcanMessage@234@@Z ?SetAppId@EndPoint@api@vulcan@adobe@@QAEXPBD@Z ?SetAppId@MessageUtil@api@vulcan@adobe@@SAXAAVVulcanMessage@234@PBD@Z ?SetCmdLine@LaunchAppMessage@api@vulcan@adobe@@QAEXPBD@Z ?SetData@ErrorMessage@api@vulcan@adobe@@UAEXPBD@Z ?SetData@GetAppPathMessage@api@vulcan@adobe@@UAEXPBD@Z ?SetData@GetTargetSpecifiersMessage@api@vulcan@adobe@@UAEXPBD@Z ?SetData@HostMessage@api@vulcan@adobe@@UAEXPBD@Z ?SetData@IsAppInstalledMessage@api@vulcan@adobe@@UAEXPBD@Z ?SetData@IsAppRunningMessage@api@vulcan@adobe@@UAEXPBD@Z ?SetData@LaunchAppMessage@api@vulcan@adobe@@UAEXPBD@Z ?SetData@SuiteMessage@api@vulcan@adobe@@UAEXPBD@Z ?SetDestination@SuiteMessage@api@vulcan@adobe@@QAEXABVEndPoint@234@@Z ?SetDestinations@SuiteMessage@api@vulcan@adobe@@QAEXPBVEndPoint@234@I@Z ?SetFocus@LaunchAppMessage@api@vulcan@adobe@@QAEX_N@Z ?SetId@EndPoint@api@vulcan@adobe@@QAEXPBD@Z ?SetPayload@HostMessage@api@vulcan@adobe@@QAEXPBD@Z ?SetPayload@HostMessage@api@vulcan@adobe@@QAEXPBDI@Z ?SetPayload@SuiteMessage@api@vulcan@adobe@@QAEXPBD@Z ?SetPayload@SuiteMessage@api@vulcan@adobe@@QAEXPBDI@Z ?SetSource@SuiteMessage@api@vulcan@adobe@@QAEXABVEndPoint@234@@Z ?SetTargetSpecifier@GetAppPathMessage@api@vulcan@adobe@@QAEXPBD@Z ?SetTargetSpecifier@IsAppInstalledMessage@api@vulcan@adobe@@QAEXPBD@Z ?SetTargetSpecifier@IsAppRunningMessage@api@vulcan@adobe@@QAEXPBD@Z ?SetTargetSpecifier@LaunchAppMessage@api@vulcan@adobe@@QAEXPBD@Z ?TYPE@ErrorMessage@api@vulcan@adobe@@2QBDB ?TYPE@GetAppPathMessage@api@vulcan@adobe@@2QBDB ?TYPE@GetTargetSpecifiersMessage@api@vulcan@adobe@@2QBDB ?TYPE@IsAppInstalledMessage@api@vulcan@adobe@@2QBDB ?TYPE@IsAppRunningMessage@api@vulcan@adobe@@2QBDB ?TYPE@LaunchAppMessage@api@vulcan@adobe@@2QBDB ?TYPE_PREFIX@HostMessage@api@vulcan@adobe@@2QBDB ?TYPE_PREFIX@SuiteMessage@api@vulcan@adobe@@2QBDB ?TYPE_PREFIX@VulcanMessage@api@vulcan@adobe@@2QBDB ?ToXml@EndPoint@api@vulcan@adobe@@QBEXPAD@Z ?ToXml@VulcanMessage@api@vulcan@adobe@@UBEXPAD@Z

ZStringResources/FontCustomization.xml

SHA256 b448a07030080d68615d7456d143d27cac5477c6832e1d6ab6ffbb30faef0fda
MD5 39cc007b96744a32611e7157fb5c137a
SHA1 4b4c05872967640681e97600e75942d6cee33596
SHA512 0f26454ccc7fb6e4045d4de1e85e32dd00f1d0e3d4f5e15411c30ce384c566c7161a9331916638748dd480f15513d81174070c01a3a7050687add54fff0db547
TLSH
T17A317D9D3673276667D316EB23B958C03A2F691957574D2280622E3F05C307D7FE2A06
MD5 SHA1 SHA512 TLSH

ZStringResources/cs_CZ/stringtable.xml

SHA256 3c4839cfa3f3c5c997bf59e34e5c024c877e55bab9eb3719496f2b80db688a40
MD5 54e6a5726f60e6bd0656ef5504e61b93
SHA1 db246b0d7b2aae4cf2e31aa37b0f12b04bc82969
SHA512 ebc8a888c2c21db0015aa285d5ba57f57cfc6671dea43bfda27956eb1fc944d6afcc4741f6c9e6cc375ec983a8aeae0ab539de5f001493193f65097866513721
SSDEEP 768:3OWjdWViWVFWVbWVSWV8WjLKb7otc6IhmdVIIFV6R0iz+9M31CHHh:DMhiIJjIcI5UIR0iCM3g
TLSH
T12433AB5231AD7F2C6486946F5AB270C8400FDCF812B8945371AE76B73E91D884EFF964
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/da_DK/stringtable.xml

SHA256 0cbc5dc812c7c4da82296322f9838da93b76ac865244621e611f023e49cde86b
MD5 ae7e2ae74c953a2f2f89bd203b5c06e3
SHA1 f530064842ea98b315f0d8352d90362332b1efbe
SHA512 78e6a33c85a6537c22dc69287d69faedf64512a2ebc65d5d630b8fc026a19ba6136fa38e8261de4f45d4d85b6692a9a4b4319ed1e3a590a30c1a29df66ed32e4
SSDEEP 768:4vGuJyzwx4fZR93lmUfUDniZnGFM/ZHHh:buR4fZ3
TLSH
T13233798271AC7F2C9486947F8A7160C9005FECBC15B46863B2ADB1773EA1D844BFF964
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/de_DE/stringtable.xml

SHA256 c15bf282e4f008662877868e50152fae79d310cf1933a9e2d5031bd657772f64
MD5 2a7e12e5397fff025973a62fff06c112
SHA1 837ee5cf2b28991bef4375ed5d66314394d7e8a7
SHA512 b22484e63dc0725f054aa05c7c48595d3a29e491c88b2da8df2295569bb4cea57ce919ed38eccfd587317347f5172301892f635cffdc423244b0f4c831ada57b
SSDEEP 768:ILzopaKtaT70UmhsGE1drpMxrgdVa9G/HHh:yIaKtacUBRdrpAU
TLSH
T12E338B5235FC7F2C5486A5AF4A7124C9111FECFC22B86452B2ADA1773E60E840AFF974
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/en_AE/stringtable.xml

SHA256 b86eec27e3aca09a9e9e9c3a8e1242fa219137e4c1cd4d92ed7c38223090c3be
MD5 de14c9b26d03c9e9657a2520ea5624fe
SHA1 e39849f01a945473ba424f6a1c4d2b4378f9af3b
SHA512 311431d64a03e369bcafb9fb05757639260fabf4ba7cb2cc792622685b8580e2d18c28ec939e07a4820af95455913f10122ab3d4ffd49c096513763fc1124d23
SSDEEP 768:BGoBvcZpFXXwYwRwIwnw+w1APIsghu+W5qujq0HHh:B+vg/W8ujx
TLSH
T1FB138A927698BF2C288750BF5C7530C5541FECF866A8641330AEB53B3751E844AF7EA8
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/en_GB/stringtable.xml

SHA256 e8ea36aa07d55c44f753ab23b6b5b457e3ed7e3d3e75bc0b86e8580857d1e544
MD5 dc0364f000574ff309b037d536d35e21
SHA1 0d3c92ebaca60b7c4fa3ffb1e0dd7bc29a41e127
SHA512 d10513df0d02bd1898ff535a4d4778f9db8ceeae6d87c60f6154f84efcde1c953f69a3f3926bccd0214d4dc7450e4d5d5de3b7fbfdd1e935a1358f763fa715b2
SSDEEP 768:BCC2R1cZHrX/wYwRwIwnw+w1APIsGFuoW5aAjq+HHh:BPnGxW8AjX
TLSH
T15A138A927298BF2C288750BF5D7570C5541FECF866A8601330AEB53B3751E844AF7EA8
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/en_IL/stringtable.xml

SHA256 c10d1917bbbeee0de7c31ac8e7312ef2a848ab825e0d464bfbe5fb4a03e231c2
MD5 3e1d88551d7458bb04b9e4675cc43cfb
SHA1 7f952840f0d204f563ba4948bbc118e4a5232df8
SHA512 eaca01a9e479b2955dda3b026cadfb58101ef7120daac9bf41852fa91e892b0a6589bdfe53db71d0e7df5163fbc53db5d370d15bf4e712d3e7bf09c50c7ee5bb
SSDEEP 768:BFfoqcZ1OX5wYwRwIwnw+w1APIstQuMW58hjqIHHh:BvJtUWOhj1
TLSH
T1E81379927298BF2C298740BF5C7570C5541FECF866A8605330AEB13B3751E845AF7EA8
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/en_US/stringtable.xml

SHA256 678af225450b70aa02a768014d563b37ad7a8d8f5857c5e00feab72f837388cf
MD5 0bb5dd704bbfd84b9861068df489191c
SHA1 4171512b797e20c366fbcc9c71b1617385276a70
SHA512 61e6adf3dd9ef1c18acddee1717efc5e7d307e8305864ad3a77fd2bd5e81bc34fb0e0a2a3a563960e9c8d8a87bc6774590f9ac179460265d3e2288d750d3e11d
SSDEEP 768:BcgSccZxsXVwYwRwIwnw+w1APIsLWu0W5gfjqcHHh:BXFLGWCfjp
TLSH
T1001379927298BF2C288750BF5C7570C5541FECF866A8601330AEB53B3751E845AF7EA8
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/en_XM/stringtable.xml

SHA256 d346453ee7e414b10cd51d8355b1f870154bd2f70faf83cd44700f0c4e1b3da1
MD5 efbfeea60e45bd14ce7c761901a0b1e1
SHA1 e2a8121ee06f4d1577d02888a32c188e3d1e7e2f
SHA512 5782775f99418cfdd4b820b12176231dc6966fa78943ebb686059d8dafbb5934d71132af2af92bfeb56c2b336efdbfc85c1449f95cf7163c14db830df86f664a
SSDEEP 768:BH4qM0cZRYXM8wYwRwIwnw+w1APIsT0usW581jq4HHh:BYu8WTIW+1jJ
TLSH
T1E6137B927298BF2C188740BF5C7570C5541FECF866A8601730AEB13B3B51E845AF7EA8
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/es_ES/stringtable.xml

SHA256 241ef2beb4a580f81f709cf62b92745759249a549213f765ee6ec8a45678f59b
MD5 3125c13cb3d3603d36f77e6cc1fbcbf2
SHA1 bf92ba4cc3f1f67daff40233d3fa7d619dc9240f
SHA512 bcf600024e9cd2975ca6a646a8ae92a30424ac4b24d542ff8764b633706478ee98451bdde241db24d08e6170924fb31b09d60cbae25fdb84d871de3b386315a1
SSDEEP 384:DLWyCjx6+ZiTayuh4hPhIHnzFlMHBDuIZ7fIXrgF31K1mpzZbvi1B38186u1diO/:DSXx6uz+nOmCHHh
TLSH
T16B338D5131FC7F1C5482A46F8AB270D5504FDCF829A89462B1AD62B73E90E884BFFD64
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/es_LA/stringtable.xml

SHA256 ca9b6e155bbd25e5e6cc25a8d4db78e70db27f126f9ca9a67d3a15ccb48b3f69
MD5 d1c4efc21961a00da9185638539b769c
SHA1 688601370a587b6d60bc8b7ed924f8d2b962d313
SHA512 ef8b9be9f0aa88de6ba067321948fd58c303838ab895d5520e710f382b44591eb2ccf1aa1ce85d10ad70fbcc2899f88101657253106dc8d06c05bca6b22e31ad
SSDEEP 384:DbWyNjx6qyzNayrh4hPhIHnzFlPH4DuIyOfIXrgF31K1mpzyWvi1338186Y1MiOd:Diux6jvGcOm8HHh
TLSH
T125339D5231FC7F1C5482946F8AB270D5504FDCF829A89462B1AD62B73E90E884BFFD64
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/es_MX/stringtable.xml

SHA256 ca9b6e155bbd25e5e6cc25a8d4db78e70db27f126f9ca9a67d3a15ccb48b3f69
MD5 d1c4efc21961a00da9185638539b769c
SHA1 688601370a587b6d60bc8b7ed924f8d2b962d313
SHA512 ef8b9be9f0aa88de6ba067321948fd58c303838ab895d5520e710f382b44591eb2ccf1aa1ce85d10ad70fbcc2899f88101657253106dc8d06c05bca6b22e31ad
SSDEEP 384:DbWyNjx6qyzNayrh4hPhIHnzFlPH4DuIyOfIXrgF31K1mpzyWvi1338186Y1MiOd:Diux6jvGcOm8HHh
TLSH
T125339D5231FC7F1C5482946F8AB270D5504FDCF829A89462B1AD62B73E90E884BFFD64
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/es_NA/stringtable.xml

SHA256 ca9b6e155bbd25e5e6cc25a8d4db78e70db27f126f9ca9a67d3a15ccb48b3f69
MD5 d1c4efc21961a00da9185638539b769c
SHA1 688601370a587b6d60bc8b7ed924f8d2b962d313
SHA512 ef8b9be9f0aa88de6ba067321948fd58c303838ab895d5520e710f382b44591eb2ccf1aa1ce85d10ad70fbcc2899f88101657253106dc8d06c05bca6b22e31ad
SSDEEP 384:DbWyNjx6qyzNayrh4hPhIHnzFlPH4DuIyOfIXrgF31K1mpzyWvi1338186Y1MiOd:Diux6jvGcOm8HHh
TLSH
T125339D5231FC7F1C5482946F8AB270D5504FDCF829A89462B1AD62B73E90E884BFFD64
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/fi_FI/stringtable.xml

SHA256 7e752694cd6cd3a0f9c13926c6736aab0826d706bb15efcaaac59b3b3c9fbf02
MD5 5b95a4ee34a0e3bae54fccd8b707c9a8
SHA1 d25429f7182d8e0ec6eed294fdf39f561e228d49
SHA512 244dc8643e8609395510a312e2988e990d664ae68150cd405919904d9bebcd2aa519ea05c4644900496569896441feab1d2676fb720ac8a6b54537f7c1d0c194
SSDEEP 768:W/eX9qHuQja75/H/JtZXZ4baRh/RlkYsNhuHHh:W/Cfzt4axKNs
TLSH
T19D337B9132ACBF1C6485E47F49B170C9404FECFD25B85852B2AE62B73E91D440AFB978
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/fr_CA/stringtable.xml

SHA256 24e7c8ef3025549909d04288a5f5b4772653a332fc640786a2bb5dce7e69a7c8
MD5 f57e3d4275e933be642ecf4770f38e57
SHA1 8c57baafbbb37879923ff724ea101f65b8eac50f
SHA512 f80d278c183bc72e014dc4d996756af447f0a110ed2cb087cade57d47443bc5cc94fa000cbe0eecac9949de467674930ac441a984fa4e1d7d89f73e4e252452f
SSDEEP 768:Rn8xdL9+aOnR1s6wQka2YGU7V/Ip3DLcXYA/MdD9vRLHHHh:Rn8/LgbdFTORRF
TLSH
T172338D4171AC7F2C6486947B4E7270C5401FDCF82578A492B2AE71773EA1D884BFFAA4
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/fr_FR/stringtable.xml

SHA256 074cfb42df7a842fff50ce5b0d606de7faa129e413919a66ac6c402eec11cdcd
MD5 79816800939431a4565c7337e7f7c584
SHA1 f2c2526a175973da7ec9b25330e9c6998cfd3e96
SHA512 7adbbc743fbc88a714d97fe7662e7d224e9c6a1719bd57f679024430696acb23e50f62b84c4ee22bb7791b13595264a833c8ce6264fd7f53a1639e5e77b349cc
SSDEEP 768:ln8x/L9xaOKY1s6wQkc2YGU7V/Ip345cXY5oUdD9VeLNHHh:ln8JLnb3bvDvef
TLSH
T1E3338C4171AC7F1C6486946B4E7270C5401FDCF82578A492B2AE71773EA1D884BFFEA4
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/fr_MA/stringtable.xml

SHA256 60e9ba3ce35d56ceb61d4a7e5a531f94f68ea21a4800a9a94cde517191dff4fe
MD5 be8a56341c12fe90923c3c62a6b511f0
SHA1 2de9106a1e9f11661a7e9fea9073022dfd7016e8
SHA512 3370683b78320ace675f976c6141706b5b771d7cad1e59694a8da4e5f94de51b60eeb97dc9e8c6b21facd260994c9f4956150f26162889a43dbe9b9f1dac1ea8
SSDEEP 768:7n8xRL9saOlb1s6wQk22YGU7V/Ip3ZHcXYmhkdD9XDL7HHh:7n8DLab5JTopDR
TLSH
T19E338C4171AC7F1C6486947B4A7270C5401FDCF82578A492B2AE71773EA1D884BFFEA8
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/fr_XM/stringtable.xml

SHA256 074cfb42df7a842fff50ce5b0d606de7faa129e413919a66ac6c402eec11cdcd
MD5 79816800939431a4565c7337e7f7c584
SHA1 f2c2526a175973da7ec9b25330e9c6998cfd3e96
SHA512 7adbbc743fbc88a714d97fe7662e7d224e9c6a1719bd57f679024430696acb23e50f62b84c4ee22bb7791b13595264a833c8ce6264fd7f53a1639e5e77b349cc
SSDEEP 768:ln8x/L9xaOKY1s6wQkc2YGU7V/Ip345cXY5oUdD9VeLNHHh:ln8JLnb3bvDvef
TLSH
T1E3338C4171AC7F1C6486946B4E7270C5401FDCF82578A492B2AE71773EA1D884BFFEA4
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/hr_HR/stringtable.xml

SHA256 da6450a3e3a84070cea20ed1401cdd8ab9be2fa48dfdfbcab0ee0bc7b8a7a9a6
MD5 d8b1e8838cb9495ab93152ab09c3a3a2
SHA1 656961b6777d7689951aaaa6930baad6daf5ba4d
SHA512 3bc98853275f09204b78a7d41c230ca85ea2352c53283c5a2d99bd37e0f68f657f664f2a4a6cf0e64b524d53a90ce7b99f9c58e849f8e84c77e32514871c1398
SSDEEP 384:ml88Rmk5S0505PbFRxzSQeQr/FKWZtkGeJUFu5bYjol6UebHmLk1tF26l7sUL2gh:Fc2ol6U7YRtMcHHh
TLSH
T1C423479231B8BF1C5446D46B8AB161C4005FDCFC25B89463B2AEA6773E91D440BFFE64
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/hu_HU/stringtable.xml

SHA256 b8658ce775ff1c00b6f1aaf82e01f9a06a21cd00d501124b9d35cf64705fc02b
MD5 b791d5125bb19b606411f1a91791d8ad
SHA1 e16644a897e28d6c95bbae1ff2743f5f1e1d8ecd
SHA512 7843f823a8962a94406f4cecc4bd0c263e621fb3bdb6906fc843f3a97fedec5603bf07218e412f00e991ab309e8c37a642cd144034b8be59dfaddaf0ef3af702
SSDEEP 768:FyqtZJSz5CgpgRoudm9XQMGgp1ULMZt7q5dAjYC/g83X8nRjRH3HHh:xNgsZ5fx
TLSH
T117338F6232F8BF1CA856947B497130C5001FDCBC267854A372AEA5773E90E844EFBD69
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/it_IT/stringtable.xml

SHA256 0f8c5401ed2b1686f75ced83b90baf6decb824d608fc73d539cd81c60045318e
MD5 75d5546207b4ca517eb692f573c243ee
SHA1 abd0805396a2eab0ff8acf7d7419df4ee4688606
SHA512 3b563469e4ee0fa52cc050e32c3d17b887d2e26a242c12780ed4d74a923613a2349e50567a55a377abde7011b408b095ad0a61895b457001af698718b7b854a7
SSDEEP 384:t9Bt3DKzNKRQF5f8lBeQn+NV/OYWKrMa3gltIRBbV19R1B88T3c4fl308W9C8w6M:t8EGWKrzbVzM4f385TkPrBHHh
TLSH
T107339D5271EC7F1C5846A46F4A7270C8405FECF826B42462B2AE627B3ED1D844AFFD64
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/ja_JP/stringtable.xml

SHA256 2d3eb88bcba0f5b01d4f5d34cc7227d7727ffd9c3f887bb21fcaa97f69685193
MD5 6e6663a84dffa827296c90b47c49693b
SHA1 ea0b42d0ba207418db8a47023ba9072b5ec5b759
SHA512 48af4f79cb4a7b99707334de168967d2816166ba74f1ad844f7c1d78f1590dfaea409aac4658c6781e48ae9987ca11e582725ae83ea707a7cc90426d01b69bd6
SSDEEP 1536:3Wug7Zem2urlItrlZFqscljEAatQtOiX9Qc0Asfvfacs8IG5dG+tnAycUGyabOMd:HlhQ
TLSH
T1BE4397AE72AC7F2C5011A43B49B171C4001FECBDE9657462617EA0773E50E8CCABBA75
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/ko_KR/stringtable.xml

SHA256 397925e8b7a9642f17bf30ac8817fc78d3ee3f8468bc767faa2410fccc0eae94
MD5 c0a6eba2c81b379122051d6ecca916fe
SHA1 5d835bb5c0bcc4c3da3968905751421d3d105ad5
SHA512 220d3acccebd48f24e6fd2fea15b386b93e2de789d60e1d2e5d1478700dc030c27ef8cf4d660a56520d9ff6221849babae0c6deef55bf397d4fec81dd2d73917
SSDEEP 768:9uohi/F/ykiROf4VpLrnJbsvbi5eCOd48m88CSfwzcCHHh:9yvDi53A
TLSH
T17633B99231BD7F1C6486986B8EF270C4410FDCB822751462B15DA97B7EA0D850AFFDB8
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/nb_NO/stringtable.xml

SHA256 0258fff2598a5f47d4dc17cec5f9386b2d6681f9539c8ee88836be603ae612f1
MD5 2663ef143bc1d1a865e2074ec75c48da
SHA1 73306f1b930c4ac02d0d6cbf094b35082df51a13
SHA512 7bc7d5e5eccbd0c87d5bdee2530653977854268f8b5ffccc1a69ee154769254238543de90b5f06cabe171847d4cbbf5a9a3ce4a3aea6d52ff2deee2e5f2000c5
SSDEEP 384:ruHmeZwTHmrfefGoW/iitsY2n/pWtoa4Ixu2+d+MILZXiemFqXztqDj7L4OpMCja:rzHkaBrkvIe8PPE1YoyyxZ2ntNJg5HHh
TLSH
T103337D4272AC7F1CA846947F4A7131C9405FECBC16B858A272ADB1773EA1D840BFF964
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/nl_NL/stringtable.xml

SHA256 716511191e09fac15e63da9c7a7981ab19e047825a7af18cebab52e8acbab693
MD5 4dc554c0541c66519fa9b7c2a8155ecf
SHA1 f223723c723ef68c7a9b79d6f3ad9d4cb0411c34
SHA512 d5f27e35070d307316a64257e1f424d1b15edbd4bf5980154cd1014499a67470f507c48aeeea332a5f785c56a66710ce23bdd548f9256fb3c0c145d6073e3f3f
SSDEEP 384:lR8SJSHvBMKtEK69vtPECkpDhq3aPVPp91+x7v0yMyXBHSsJBsSUivi1UIaxbVv7:lRPJSHZMKuKAHMyxNGU1qzOJ5HHh
TLSH
T1A2338C9235BC7F2C9486D4AF4A7130C9110FECFC52B46496B2ADA1773E91D840AFF964
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/pl_PL/stringtable.xml

SHA256 266a7dd9f9124b3448d84c06b9ecf6b3ea05a9be11aec5e48d1dba5a24d8850b
MD5 f583191fbb1fc074da3ecdeb405d3cca
SHA1 936924bd3113b391777b7f344efa3c3bd540a666
SHA512 8a3a7fe05527d4b961c750ac11f33c231a9b147c50cef8ced51751468b710f8cee84c21504d94809417eee417e1c919e7fd0aa4480622b6c492c7f279470c1c9
SSDEEP 768:8fyoe7rqueYLJ4G0aTBvqPBfIM54gGlua8UHHh:8qoe7rqub4dIM54gGlzj
TLSH
T1C033795171FC7F1C9885946F8AB230C8045FDCF825B86456B1AEA5773E90E480BFF9A8
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/pt_BR/stringtable.xml

SHA256 5df15fbb09fe2d4674893684877a9bb79c90ea3a96a35547b185c9243ce6f8a2
MD5 97b692726d2780c30ccaece001d9c78f
SHA1 a219269d613f50de2d322774a4358a69fb6d23ab
SHA512 e8ecf0ab07000a8bb09f4a15eb2af39708fce88224ff6e6ffd2432628474ebc0978b541969ad3abf5437511b99b6a4c535642ad06f6bebfaf2be409097c2cb21
SSDEEP 384:IHcUIUdePsfdogzP7tr/foiSD/npX16qvnCMFKVYmFrBibKghfjGXQxiS6HL7LUt:IHT0AiAXGBYcg2bKLQoPYURpUHHh
TLSH
T10F336A5132EC7F2C6446A57B4AB230C5404FECF8257894A272AE76773EE0D844BBBD64
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/ro_RO/stringtable.xml

SHA256 4b9764d7b00de1da0ea1303d6fec80ef42d59b37de5f892f768bd33d9ffe1d60
MD5 df9327dc77dc5d10f85cb76361808dbb
SHA1 4b4e212c0306709292d51657f49104e854f1587c
SHA512 b87ccb5bd81a6f780d28a5d158b450c9799ba9158c5fa3402b73775644d1e9c3ad4c12e8a02361e7c8ff0d9436280928b7643de6dc993ecbbc15f00fb378f097
SSDEEP 384:mRxnycCy87mg8Hs3zM91hfdkrTmV9+UuQF269EKzeYUVnPxBx5nlsQXntHHh:macCy8x8nNfr99u4ZCr1z9HHh
TLSH
T1FD33AA4171EC7F2C6882957F4AB170C6404FDCF826646496B2AEA1773E90D884AFFDE4
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/ru_RU/stringtable.xml

SHA256 e56083895129680f801b1dbe06fe02c745e8d87ae4713671088b33e47093ed71
MD5 001fed11c0ef02479b4d4e1e7a48c186
SHA1 ee70bdcd42722f380329d7dbe73282f377ee253d
SHA512 171a6c8bb9af954fe74f7f67ab0fb7feaa369ec1a9363d455373045ecfaf6d41f65d49efcfdecc04dc45c9992b7d0d7a9614ce12cc44fc3b52a55491f47fbc10
SSDEEP 768:Kgbo0Czopb2UisRbZHEUYkp2TCi1jCFHAZWHHh:KX0Cspb2UisgUiWeCFHSa
TLSH
T1A153465231EC7F5C1506A42FC934B489205FDCFD2EB96652216C39BB3EE1C444ABFA68
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/sk_SK/stringtable.xml

SHA256 8f7da94a4991552fe2b040111928fff783af215166a24acbead6031742727295
MD5 1c137db4685f84e04806920b9cd4bb28
SHA1 246062ea6c3bd6d15edb8eb814f6a6520d51d4b7
SHA512 4d82b3393b9f170a8509b8934b01643ae65f908dff22c9de2cffafc706cf4b9ed56dfc12cc6bd922782175a4c012772c22212744a9377b39ca0c3016561ba4d0
SSDEEP 768:vbj1cGUUuXUuxUuhUuSUuLUn0Ki4/Vue4H81l8FXXdD7Cp3+27XdFkHHh:DO+RlpiZpVonq6
TLSH
T1AE33AB9271BC7F2C9486946B8AB270C8404FECFC11B8586271AD72773E91D884AFFD65
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/sl_SI/stringtable.xml

SHA256 f019982fae3b2c1f3e214c3a73ba68f9c3f13623c12b21b4187c2e79b9194cc1
MD5 a9161e2655465347dab974dc4c1fa0a9
SHA1 ce63573a1cb66073cdf613e145be620a6547001c
SHA512 2d740e58c30126a0e905864d0581ea28d2f5f824ad5af4f30778004e7f4d6ce6cbfed59785a0c9c6fce03a4b7738f91414b44b55064c1141d1b5b214c1d1d9ca
SSDEEP 384:wLwEFlwFVW0YSkR2sHEx7dDYZJ5/mhKLN57dSPgN+epxukm3CkQ9cf+GNrTVfRoh:XOggN+epxNm5Q9+fb6iT0SaHHh
TLSH
T195335B6231BD7F1C5846E46F4A7260C5044FDCBC25B89462729EB2B73EA0E844AFFD64
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/sv_SE/stringtable.xml

SHA256 593c1098ff42be8d67ba045d73dc14c16d4eec99165548d69bd24f58a2a60fc6
MD5 3e5ffb3aac5267f11f7113a7bd01851b
SHA1 208667a831e9c88675401ffaef0068ac703ccec4
SHA512 ae034e5f42e162ef76502cb2c4d7ca6051d56cb4ef8cc018afe0201518b6dd1c04c6203591b4b6b6ad2c2b664a3259d966a413b9dbc5c9963e304f887eb1f72b
SSDEEP 1536:GWD8c9FJJG1s0tnabKtHLCRyWhOSyYbMhTBJ:F+VLCRyWcSyjv
TLSH
T140336A4271BCBF1CA446A46F8A7120C9005FECFC26B46852B2AD657B7E90D440BFFA65
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/tr_TR/stringtable.xml

SHA256 01bc313e79779d1426285259b535130cf7a0c1a409905455b870c1b9b1f29b20
MD5 57e13a698d582104e37e498ee64fa99e
SHA1 f6fd2790aaf821f6e8580fc68f8b86696c1cb377
SHA512 ff0ed258ac6600606924a08c1f907573372f6c6e460128a9dbf7ebb656477dfa41575bc2b898d99d20056c51913d018f06ae87fbfbfe46af43acaa7169fdc2e0
SSDEEP 768:et7SRRR8Km1C2fIh4SNKqi8YDz6SHCv07rb5HHh:exSRRR8SIR7
TLSH
T10A339B8131BC7F1C9846A87F99B121C8905FDCF82674B452B2ADB57B3E50D840AFF968
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/uk_UA/stringtable.xml

SHA256 7004a7d9f3a1abed6d87b3248d7b06795ba535e9d54074248057e849036b4760
MD5 9ac929bae447def18f6aa73e9c40c14a
SHA1 3e4e385734d18a25fcfffe99810345b12dee05b1
SHA512 ff5753abf6c45d5a35c05d786ccc3a33ce19594a05ad411b57f8c043ea57bce7d1b7d7619f952202f80215e61f88d68b6c4d04acc30c19f1bb8c004bc2af7c74
SSDEEP 384:iVFnHTxdiaDyEQ6DXEwNzp6wFs/r3McopD73VUKR2jZFd6jnu5RY8rA502pMe36p:aBDzBXXYfHHh
TLSH
T1305354A271EC6F9D0506E42FD874B488145F8CFC3AB55B5331A9397B3DE0C444ABEA68
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/zh_CN/stringtable.xml

SHA256 6d8c25adb479d48dffac9680c676f0fb668fdccded037d35656ac81aa84fb10c
MD5 ff0018ab3cbd522e1aaad0c47aa9125a
SHA1 a96104f13e3ea1ed9a291894fef4b391ccac87d5
SHA512 5e93014e1b2a84f359b4add9bbb984c891de4085be697955bda0fe58f620b2327621f059de8c21620541310135700ab2de96b994211fedef2b44a5cf230ea8c1
SSDEEP 384:dRX634nIu/rcPr4R4zqKV9Fbv4v8k69S99I/A4urIf66SeL0L66Sdbj1SzHHh:dRtyzZVm65X6AgmHbjOHHh
TLSH
T1FB23499132AC7F2C5446987F4AB270D4400FECFD25B859A2B1AD617B3E90D840EBFD69
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

ZStringResources/zh_TW/stringtable.xml

SHA256 eb7674866b4c976a2410e157e41e0c100371db02851948f352383492f2277ead
MD5 d74c8ad0d662c2415fd65e26bbbe1903
SHA1 7aa2a3cebd94334048ff8ad84caa057084772089
SHA512 878ccd85aa053f503cba3dfa751a330789d3d7fa3825a5a7a239a64ce4ee12b480d4d959888766c293ae62ea9a5c8ea48eb312f7f4cd5d272a0a998d53563fe0
SSDEEP 768:URrPFVPGFRXFycKbfEOyQwaY4+4VDCqMBbjYHHh:Kbfqc
TLSH
T10823489231BC7F1C5446D86F5AB235D4001FECFC29B86863726E617B3E50D880EBB969
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

adobe_licutil.exe

IMPHASH 41f7b4e000caae0168ab446a0178f167
SHA256 cbeed53b5fb89420459355efc478e9cbb35bc996d24a6d06cb9d288aa0e8c6e4
MD5 f9b89fbaab17b8d2e17be1b7bdd7164d
SHA1 aa9a7f1b8e38c844b0fe572ea99898403bf7c311
SHA512 31c41c73bf2113c87520c405da05255f39cb43b61dfe81df362d5600f041d4006c8df492e7971236a09272cba9519a6ccbd50fbe67a7be4cc2b4668808b3e27d
SSDEEP 49152:AWZV6OzJeqzZkzUDFGh+zA2QPc//PSXHEWJb:AWZVZzJeqzZkzUDFlDQPc//dWl
TLSH
T1B4859D21BB42C136F4D312B2997D6B6F193CAA21071594D3F3D42E995E702E25B3E32B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

13:b4:4e:da:07:6c:00:65:d0:30:8b:49:7e:c6:4b:9d:cd:d2:38:40

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Chains

Apr 22, 2014

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Serial Number

1d:37:83:b3:de:cd:5d:bb:16:e3:3c:d3:a6:b3:bf:db

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 20, 2014 - Feb 21, 2015

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

1

Major OS version

5

Entry point

1147288

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

none

winhttp

WinHttpGetProxyForUrl WinHttpSetOption WinHttpGetIEProxyConfigForCurrentUser WinHttpOpen WinHttpReceiveResponse WinHttpQueryDataAvailable WinHttpSetStatusCallback WinHttpQueryHeaders WinHttpReadData WinHttpCrackUrl WinHttpCloseHandle WinHttpConnect WinHttpOpenRequest WinHttpAddRequestHeaders WinHttpSetCredentials WinHttpSendRequest

setupapi

SetupDiGetDeviceInstanceIdW SetupDiGetClassDevsW SetupDiEnumDeviceInfo SetupDiDestroyDeviceInfoList SetupDiGetDeviceRegistryPropertyW CM_Get_DevNode_Status

kernel32

GetModuleFileNameW GlobalFree GetComputerNameExW InterlockedIncrement InterlockedDecrement CloseHandle CreateProcessW SetEnvironmentVariableA CreateMutexW SetEvent WaitForMultipleObjects CreateEventW GetTimeZoneInformation GetVersionExW UnlockFileEx FlushFileBuffers SetEndOfFile WriteFile SetFilePointer LockFileEx GetFileSize CreateFileW OutputDebugStringA GetTempPathW QueryPerformanceCounter GetEnvironmentVariableA QueryPerformanceFrequency lstrlenA LocalFree GetCurrentProcess GetCurrentThread FindClose FindNextFileW FindFirstFileW InitializeCriticalSection EnterCriticalSection LeaveCriticalSection DeleteCriticalSection SetFileAttributesW LoadLibraryW CreateDirectoryW IsDBCSLeadByteEx ReadFile LocalAlloc WaitForSingleObject WideCharToMultiByte SetLastError DeleteFileW GetDateFormatW GetTimeFormatW GetLocalTime GetFullPathNameW GetFullPathNameA CreateFileA UnlockFile LockFile GetTickCount GetSystemTimeAsFileTime FormatMessageA GetFileAttributesA GetDiskFreeSpaceW LoadLibraryA GetDiskFreeSpaceA GetCurrentThreadId GetCurrentProcessId GetTempPathA GetSystemTime AreFileApisANSI DeleteFileA ReleaseSemaphore CreateSemaphoreW HeapSize GetStdHandle ExitProcess GetProcAddress GetLastError FreeLibrary SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType CompareStringW GetStartupInfoW GetConsoleCP GetConsoleMode FreeEnvironmentStringsW GetEnvironmentStringsW Sleep GetFileInformationByHandle PeekNamedPipe GetCurrentDirectoryW SetStdHandle GetLocaleInfoW GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale MultiByteToWideChar WriteConsoleW GetProcessHeap GetFileAttributesW HeapCreate IsValidCodePage GetOEMCP GetACP IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess GetModuleHandleW TlsFree TlsSetValue TlsGetValue TlsAlloc IsProcessorFeaturePresent GetCPInfo LCMapStringW MoveFileA FindFirstFileExA GetDriveTypeA SystemTimeToFileTime LocalFileTimeToFileTime SetFileTime FindFirstFileExW GetDriveTypeW FileTimeToLocalFileTime FileTimeToSystemTime GetDateFormatA GetTimeFormatA HeapSetInformation GetCommandLineW InterlockedCompareExchange InterlockedExchange GetStringTypeW EncodePointer DecodePointer RaiseException RtlUnwind HeapFree HeapAlloc HeapReAlloc

user32

wsprintfW MessageBoxW

advapi32

OpenThreadToken GetNamedSecurityInfoW SetNamedSecurityInfoW CryptDestroyKey CryptGenKey CryptReleaseContext CryptAcquireContextW CryptExportKey SetEntriesInAclW SetSecurityDescriptorDacl InitializeSecurityDescriptor RegQueryValueExA RegDeleteKeyA RegOpenKeyA RegCreateKeyA SetSecurityInfo RegOpenKeyExW RegQueryValueExW RegCreateKeyExW RegSetValueExW RegCloseKey RegDeleteKeyW OpenProcessToken GetTokenInformation AllocateAndInitializeSid EqualSid FreeSid GetUserNameW

shell32

SHCreateDirectoryExW SHGetSpecialFolderPathW SHGetFolderPathW

ole32

CoInitialize CoInitializeEx CoInitializeSecurity CoCreateInstance CoSetProxyBlanket CoUninitialize

oleaut32

SysStringLen SysAllocString SysFreeString VariantClear SysAllocStringByteLen

shlwapi

PathRemoveFileSpecW PathFileExistsW

adobe_oobelib.dll

IMPHASH 5a599eb932a0034c415503b58c6c69af
SHA256 604a00f760930dd4d210a9845143f0454d5b50142744c88562a2314c7ec2813b
MD5 ea21b215d572082aa96062cbeb0701a9
SHA1 0d2c223bb0d9b19ce5bb058ac41d896b0c9e0290
SHA512 77c4502f86e916b3add397a7add9642e69498add2fd1a664220d1e1abe61d4de5bf974467a73409f99a1f7148f1b66671d561a14abd2f676dfcd41a2a9e97348
SSDEEP 49152:qUxvSZr1O5bxxyLgDVGIk2CmWh9IkZK0An149J9AffUO+KDKHKhNy:JvSZr1O5bxxykBGIk22h9IkfAi9J9AV2
TLSH
T1C3B59D22BA41C136F5DB00B6A53C6B6F186DA635072898C3F3D06E9C79705E26B3971F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

c6:69:5b:23:f9:b4:4c:16:6f:f4:51:17:a7:bd:33:5b:62:95:78:95

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Chains

Apr 22, 2014

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Serial Number

1d:37:83:b3:de:cd:5d:bb:16:e3:3c:d3:a6:b3:bf:db

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 20, 2014 - Feb 21, 2015

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

1

Major OS version

5

Entry point

1655477

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

none

winhttp

WinHttpGetIEProxyConfigForCurrentUser WinHttpGetProxyForUrl WinHttpSetOption WinHttpOpen WinHttpReceiveResponse WinHttpQueryDataAvailable WinHttpSetStatusCallback WinHttpQueryHeaders WinHttpReadData WinHttpSendRequest WinHttpCrackUrl WinHttpCloseHandle WinHttpConnect WinHttpOpenRequest WinHttpAddRequestHeaders WinHttpSetCredentials

iphlpapi

GetIfTable

setupapi

SetupDiEnumDeviceInfo SetupDiDestroyDeviceInfoList SetupDiGetDeviceRegistryPropertyW SetupDiGetDeviceInstanceIdW CM_Get_DevNode_Status SetupDiGetClassDevsW

kernel32

SetEndOfFile WriteFile SetFilePointer LockFileEx GetFileSize CreateFileW InitializeCriticalSection DeleteCriticalSection ReleaseSemaphore WaitForSingleObject LeaveCriticalSection EnterCriticalSection SwitchToThread ResumeThread CreateThread FreeLibrary GetProcAddress LoadLibraryW WideCharToMultiByte GetModuleFileNameW GlobalFree GetComputerNameExW InterlockedIncrement InterlockedDecrement GetVersionExW SetEvent OpenEventW WaitForMultipleObjects CreateEventW GetExitCodeThread TerminateThread OutputDebugStringA QueryPerformanceCounter GetEnvironmentVariableA QueryPerformanceFrequency GetTempPathW GetTimeZoneInformation lstrlenA LocalFree lstrlenW GetCurrentProcess GetCurrentThread FindClose MultiByteToWideChar FindFirstFileW SetFileAttributesW GetFileAttributesW CreateDirectoryW ReadFile LocalAlloc GetTickCount GetLocalTime FlushFileBuffers Sleep SetLastError DeleteFileW GetDateFormatW GetTimeFormatW GetFullPathNameW GetFullPathNameA CreateFileA UnlockFile LockFile GetSystemTimeAsFileTime FormatMessageA GetFileAttributesA GetDiskFreeSpaceW LoadLibraryA GetDiskFreeSpaceA GetCurrentThreadId GetCurrentProcessId GetTempPathA GetSystemTime AreFileApisANSI DeleteFileA SystemTimeToFileTime GetACP GetFileType PeekNamedPipe CreateProcessW GetLastError CloseHandle GetModuleFileNameA CompareStringW SetEnvironmentVariableA CreateSemaphoreW GetCurrentDirectoryW SetHandleCount InitializeCriticalSectionAndSpinCount GetStartupInfoW GetConsoleCP GetConsoleMode GetOEMCP IsValidCodePage HeapSize SetStdHandle GetLocaleInfoW FreeEnvironmentStringsW GetEnvironmentStringsW GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale UnlockFileEx GetProcessHeap WriteConsoleW FindNextFileW GetFileInformationByHandle IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess TlsFree TlsSetValue TlsGetValue TlsAlloc GetStdHandle ExitProcess GetModuleHandleW HeapDestroy HeapCreate IsProcessorFeaturePresent GetCPInfo LCMapStringW MoveFileA LocalFileTimeToFileTime SetFileTime GetDateFormatA GetTimeFormatA GetCommandLineA FindFirstFileExW GetDriveTypeW HeapReAlloc FindFirstFileExA GetDriveTypeA FileTimeToLocalFileTime FileTimeToSystemTime RtlUnwind RaiseException HeapAlloc HeapFree DecodePointer EncodePointer InterlockedExchange GetStringTypeW InterlockedCompareExchange

user32

wsprintfW

advapi32

AllocateAndInitializeSid CryptDestroyKey CryptGenKey CryptReleaseContext CryptAcquireContextW CryptExportKey GetNamedSecurityInfoW SetNamedSecurityInfoW SetEntriesInAclW SetSecurityDescriptorDacl InitializeSecurityDescriptor RegQueryValueExA RegDeleteKeyA RegOpenKeyA RegCreateKeyA SetSecurityInfo RegOpenKeyExW RegQueryValueExW RegCreateKeyExW RegSetValueExW RegCloseKey RegDeleteKeyW OpenThreadToken OpenProcessToken GetTokenInformation EqualSid FreeSid LookupAccountNameW GetUserNameW

shell32

SHGetFolderLocation SHCreateDirectoryExW SHGetFolderPathW SHGetSpecialFolderPathW SHGetPathFromIDListW

ole32

CoTaskMemFree CoInitialize CoInitializeEx CoInitializeSecurity CoCreateInstance CoSetProxyBlanket CoUninitialize

oleaut32

SysStringLen SysAllocString SysFreeString VariantClear SysAllocStringByteLen

shlwapi

PathRemoveFileSpecW PathFileExistsW PathStripPathW PathRemoveBackslashW PathAppendW

Adobe_OOBELib_Activate Adobe_OOBELib_BackDoorUpgradeCheck Adobe_OOBELib_CalculateVC Adobe_OOBELib_CheckForUpgradeOnline Adobe_OOBELib_CheckSubscriptionMode Adobe_OOBELib_CheckSubscriptionValidity Adobe_OOBELib_CheckSubscriptionValidityOnline Adobe_OOBELib_CheckWFType Adobe_OOBELib_CheckforUpgrade Adobe_OOBELib_CleanUpCachePCD Adobe_OOBELib_CreateRef Adobe_OOBELib_Deactivate Adobe_OOBELib_DeactivateLicense Adobe_OOBELib_DeactivateLicenseForSerial Adobe_OOBELib_DisAssociateAll Adobe_OOBELib_EnumerateKeys Adobe_OOBELib_Generate_OffLineExcpType1_ReqCode Adobe_OOBELib_GetAdobeId Adobe_OOBELib_GetChallengeString_UpgradeCheck Adobe_OOBELib_GetCredentialsForProxy Adobe_OOBELib_GetCurrentLicenseState Adobe_OOBELib_GetEntitlement Adobe_OOBELib_GetLicenseStatus Adobe_OOBELib_GetLicenseStatusEx Adobe_OOBELib_GetRefID Adobe_OOBELib_GetSerialInfo Adobe_OOBELib_GetServiceClaimData Adobe_OOBELib_GetValueforKeyInSubDomain Adobe_OOBELib_Get_OffLineExcpType1_ReqCode Adobe_OOBELib_Get_SeatID Adobe_OOBELib_Getversion Adobe_OOBELib_ISOTaggingAtInstall Adobe_OOBELib_LaunchPurchaseWorkFlow Adobe_OOBELib_LoadActivationGraceLicense Adobe_OOBELib_LoadOfflineGraceLicense Adobe_OOBELib_LoadOnlineTrial Adobe_OOBELib_LoadTrial Adobe_OOBELib_ProcessExceptionFile Adobe_OOBELib_Process_file Adobe_OOBELib_ProtectedContentCheck Adobe_OOBELib_QueryLicenses Adobe_OOBELib_ReleaseRef Adobe_OOBELib_RememberAdobeID Adobe_OOBELib_RemoveKeyInSubDomainInCache Adobe_OOBELib_RemoveLastLoggedInUser Adobe_OOBELib_Remove_payload Adobe_OOBELib_Retrieve_SerialNumber Adobe_OOBELib_Retrieve_SerialNumberEx Adobe_OOBELib_Retryactivation Adobe_OOBELib_SaveAdobeId Adobe_OOBELib_SetAdobeId Adobe_OOBELib_SetAdobeIdExtProfile Adobe_OOBELib_SetAppXMLData Adobe_OOBELib_SetClaimStatus Adobe_OOBELib_SetClaimStatusEx Adobe_OOBELib_SetCredentialsForProxy Adobe_OOBELib_SetLEID Adobe_OOBELib_SetUniversalCookie Adobe_OOBELib_SetValueforKeyInSubDomainInCache Adobe_OOBELib_Set_Eula Adobe_OOBELib_Set_InstallLocale Adobe_OOBELib_Set_serialnumber Adobe_OOBELib_SuppressRegSerialNag Adobe_OOBELib_SuppressRegistrationNag Adobe_OOBELib_Suppress_Eula Adobe_OOBELib_Suppress_Registration Adobe_OOBELib_UpdateLastLoggedInUser Adobe_OOBELib_UpgradeCheck Adobe_OOBELib_UpgradeDoneAtInstallTime Adobe_OOBELib_ValidateSerialOnline Adobe_OOBELib_Validate_SerialNumber Adobe_OOBELib_Verify_OffLineExcpType1_ServerResponseCode GetAsnVersion IAL_ActivateLicense IAL_CloseSession IAL_CreateSession IAL_DeactivateLicense IAL_GetAULData IAL_GetEntitledSerialData IAL_GetEntitlementsForLEIDS IAL_GetSLConfigData IAL_GetType2aOfflineException IAL_GetVersion IAL_ReloadLocalDispatchTable IAL_SetLicensingLEID IAL_SetLoggingMethod IAL_SetProxyDetails IAL_ValidateSerial asnInst_InstallerProductInfo_constructor asnInst_getAsnProductInfo asnInst_getAsnProductInfoInMem asn_exit asn_info asn_init asn_makePrivate asn_makePrivateEx

adobe_upgrade.dll

IMPHASH d8ab1023a8d497c22333105a507dd420
SHA256 89182c32a746cd77a16bca84a86fbecc67d96cb0fceb157291deb627d90f4091
MD5 f17e8af1449274c78606f173e4757e94
SHA1 31461c85e17bc20cbc0742357d85e1885298bed0
SHA512 276e05905cf4d7c1501edc003d4b20ec1cbe0098c97d6dd2f0ab0286d5faab9a6de8c94dddefa34ab7b35925ef4ae6ab6f38d3967910e311ebe83b5135756365
SSDEEP 24576:rPTtYvfn1PFa64PN6DaI4G7zP38l3UBtgj:bJAxj7bY3UBCj
TLSH
T17735CF117A41C531F4AE21B54A39BB9E197DFAA20B2141C3F7E81E5D9D302C2EB3A357
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

30:46:07:54:22:5f:de:7a:e6:91:bc:f0:77:87:ae:a3:53:75:05:8b

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Chains

Apr 22, 2014

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Serial Number

1d:37:83:b3:de:cd:5d:bb:16:e3:3c:d3:a6:b3:bf:db

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 20, 2014 - Feb 21, 2015

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

1

Major OS version

5

Entry point

693646

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

setupapi

CM_Get_DevNode_Status SetupDiGetClassDevsW SetupDiEnumDeviceInfo SetupDiGetDeviceInstanceIdW SetupDiGetDeviceRegistryPropertyW SetupDiDestroyDeviceInfoList

shlwapi

PathStripPathW PathAppendW PathFileExistsW PathRemoveBackslashW PathRemoveBackslashA

kernel32

WideCharToMultiByte MultiByteToWideChar OutputDebugStringA LoadLibraryW GetModuleFileNameW GetTempPathW InitializeCriticalSection EnterCriticalSection LeaveCriticalSection DeleteCriticalSection FindFirstFileW CreateDirectoryW GetFileAttributesW FindClose FindNextFileW GetFileSize SetFilePointer SetEndOfFile UnlockFileEx WriteFile ReadFile CreateFileW FlushFileBuffers LockFileEx LocalAlloc LocalFree GetCurrentProcess InterlockedDecrement lstrlenW QueryPerformanceCounter GetACP GetCurrentThreadId GetVersionExA AreFileApisANSI Sleep UnlockFile LockFile GetFileAttributesA DeleteFileA DeleteFileW GetTickCount GetCurrentProcessId GetSystemTime GetSystemTimeAsFileTime GetTempPathA FormatMessageA GetFullPathNameA GetFullPathNameW GetDiskFreeSpaceA GetDiskFreeSpaceW CreateFileA CloseHandle GetLastError lstrcpyA lstrcmpA LoadLibraryA GetProcAddress FreeLibrary GetEnvironmentVariableA GetStringTypeW WriteConsoleW InterlockedExchange GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA InterlockedCompareExchange IsValidLocale GetProcessHeap lstrlenA CompareStringW InterlockedIncrement LCMapStringW SetStdHandle PeekNamedPipe GetFileInformationByHandle GetEnvironmentStringsW FreeEnvironmentStringsW GetModuleFileNameA GetCurrentDirectoryW GetLocaleInfoW HeapSize ExitProcess GetStartupInfoW GetFileType GetStdHandle SetHandleCount InitializeCriticalSectionAndSpinCount GetConsoleMode GetConsoleCP IsValidCodePage GetOEMCP GetCPInfo GetTimeZoneInformation IsProcessorFeaturePresent SetLastError HeapFree RtlUnwind RaiseException GetTimeFormatA GetDateFormatA EncodePointer DecodePointer HeapAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess SetEnvironmentVariableA GetDriveTypeW GetCommandLineA HeapReAlloc FileTimeToSystemTime FileTimeToLocalFileTime GetDriveTypeA FindFirstFileExA HeapCreate HeapDestroy TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW

advapi32

SetEntriesInAclW GetNamedSecurityInfoW SetNamedSecurityInfoW FreeSid AllocateAndInitializeSid SetSecurityDescriptorDacl InitializeSecurityDescriptor RegQueryValueExA RegOpenKeyExA RegCloseKey

shell32

SHCreateDirectoryExW SHGetPathFromIDListW SHGetFolderLocation SHGetFolderPathW

ole32

CoSetProxyBlanket CoInitializeSecurity CoInitializeEx CoTaskMemFree CoCreateInstance CoUninitialize

oleaut32

SysStringLen SysFreeString VariantClear SysAllocStringByteLen SysAllocString

axlib.dll

IMPHASH 78aeb6aa6ec1389415ef05f618cab8fb
SHA256 00062fbe0ae2165aa0fbea76afe5d1ef0182e0698114762d422ca084344bb297
MD5 cbad75f844e6cc771a27a9332369f91a
SHA1 a149debba05fc3899f6b8ecd4e986088814d78c3
SHA512 8f7c1777b110b35212e6e96b87c7baceefb074b62450a81462b20a67b774c60c2c4bb4d0892b9a5929353679253278008367f2b1fe02cc3ea39c51b3e36fecda
SSDEEP 24576:bfh7426as2lgzYphBCCwfoLVuUx5t5gPcDksZl65G1gz0hPY:bfh74tfIhsCwfoLVZxyPckQY5G1gz0hw
TLSH
T1F625BF117A41C136F8EB00B1A9396B6E1D6DB9320B2180C3FBD47E989D315D2BB3A357
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

92:fa:e3:fc:4d:c2:ac:3b:43:9b:f9:09:27:ed:8c:c9:03:21:1d:d5

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Chains

Apr 22, 2014

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Serial Number

1d:37:83:b3:de:cd:5d:bb:16:e3:3c:d3:a6:b3:bf:db

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 20, 2014 - Feb 21, 2015

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

1

Major OS version

5

Entry point

668340

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\r2d2_7mbls\win32\r2d2\client\obj\output-dir\axlib\Win32-Release\axlib.pdb

setupapi

SetupDiEnumDeviceInfo SetupDiDestroyDeviceInfoList SetupDiGetDeviceRegistryPropertyW SetupDiGetDeviceInstanceIdW CM_Get_DevNode_Status SetupDiGetClassDevsW

kernel32

LocalFree GetCurrentProcess SystemTimeToFileTime GetFileAttributesW SetFileAttributesW FlushFileBuffers CreateFileW lstrlenW WideCharToMultiByte GetACP MultiByteToWideChar GetCurrentThreadId EnterCriticalSection CloseHandle GetVersionExA AreFileApisANSI Sleep ReadFile SetFilePointer WriteFile SetEndOfFile GetFileSize UnlockFile LockFile GetFileAttributesA DeleteFileA DeleteFileW LoadLibraryA LoadLibraryW GetProcAddress FreeLibrary LeaveCriticalSection GetTickCount GetCurrentProcessId GetSystemTime GetSystemTimeAsFileTime DeleteCriticalSection LockFileEx InterlockedIncrement InitializeCriticalSection GetTempPathA GetTempPathW FormatMessageA GetFullPathNameA GetFullPathNameW GetDiskFreeSpaceA GetDiskFreeSpaceW CreateFileA GetEnvironmentVariableA QueryPerformanceFrequency OutputDebugStringA GetModuleFileNameW GetCurrentThread FindClose FindNextFileW FindFirstFileW GetTimeZoneInformation CreateDirectoryW InterlockedDecrement UnlockFileEx LocalAlloc lstrlenA HeapDestroy GetOEMCP IsValidCodePage GetConsoleCP GetConsoleMode GetLastError GetFileInformationByHandle PeekNamedPipe GetCurrentDirectoryW SetEnvironmentVariableA SetStdHandle GetLocaleInfoW HeapSize GetStringTypeW GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale WriteConsoleW GetProcessHeap CompareStringW QueryPerformanceCounter HeapCreate GetEnvironmentStringsW FreeEnvironmentStringsW GetModuleFileNameA GetStartupInfoW GetFileType InitializeCriticalSectionAndSpinCount GetStdHandle SetHandleCount ExitProcess SetLastError GetModuleHandleW TlsFree TlsSetValue TlsGetValue TlsAlloc IsProcessorFeaturePresent IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess GetCPInfo LCMapStringW FindFirstFileExA GetDriveTypeA LocalFileTimeToFileTime SetFileTime FindFirstFileExW InterlockedExchange EncodePointer DecodePointer GetCommandLineA RaiseException RtlUnwind HeapFree HeapAlloc HeapReAlloc GetTimeFormatA GetDateFormatA FileTimeToSystemTime FileTimeToLocalFileTime GetDriveTypeW

advapi32

OpenThreadToken SetSecurityDescriptorDacl InitializeSecurityDescriptor RegQueryValueExA RegDeleteKeyA RegOpenKeyA RegCreateKeyA SetSecurityInfo RegOpenKeyExW RegQueryValueExW RegCreateKeyExW RegSetValueExW RegCloseKey RegDeleteKeyW GetTokenInformation EqualSid GetNamedSecurityInfoW AllocateAndInitializeSid SetEntriesInAclW SetNamedSecurityInfoW OpenProcessToken FreeSid

shell32

SHGetFolderLocation SHGetPathFromIDListW SHGetFolderPathW SHCreateDirectoryExW

ole32

CoInitializeEx CoInitializeSecurity CoCreateInstance CoSetProxyBlanket CoUninitialize CoTaskMemFree

oleaut32

SysStringLen SysAllocString SysFreeString VariantClear SysAllocStringByteLen

shlwapi

PathRemoveBackslashW PathAppendW PathStripPathW PathFileExistsW

dispatchtable.xml

SHA256 28e633435fb67763c9bc6f50731821134fd6225dd52199d4e2915d77c3a56070
MD5 809b07b9435d9f16a964bacaa482cfb5
SHA1 f8757c367a4cd74eba45a9b010d81f92c341a581
SHA512 3542f7d8ec7f7effa416a5914cd4d9838b159a1d2f1c12e29b434ed80b2e45305d2b6e90fd56929e0583ce2cf7d48ad7c378010b77ea6501fde95000cc5947de
TLSH
T1965159EB15B72597028B02F50DA2B82F5C3367AA44DCD05DF24FAD7323641A7869FB84
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/packages/P6/P6.pimx

SHA256 c91fb2cf564355c4db075df73027f6ab9e7146d270a8671886c5535e2574ac8b
MD5 6bb2e15f1d89ddb2746754b1fac46593
SHA1 f931a793e0de15145ebb5db60ba7dbe32b0c1464
SHA512 166e668790a016c6c445a94720dd1fbfd3e24eddd748cb55521b7a077b75d51cc28b9b8d0e0527622d7ad59e5160d6b4ba0325cc2954a976dbf03fe1381e2b82
SSDEEP 768:CCxP86WNXqyiEIi9PFY7hF3LGi94VqICk3KKABh9gSlGFjShZGP5twRvaQ:CCxk6WNXqFK6htiqICkO9nhw0RvaQ
TLSH
T1266305AD11695BE1B407CE643C602E472A0FB17DF6B031F8B2984E7686D5A4F5D8B233
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/packages/P6/P6.sig

SHA256 43a6860536f129e27f13e2d5e5e69c3cdd975ef8fdb7ccea31f7689f38019896
MD5 180e14f2a493fb839b798089de0826f7
SHA1 1c161b3503361264389d4835677c1359b8270896
SHA512 050321d50e6dcf2f0bcb685b56df1e415c1abd635f2100230b14ac1261176ff56ac7120c290cc2b3453ff50c385f596a68caa0514036e171ac6dfee31bbb27f4
TLSH
T17031D91141A03B91D4740FB3E2A44A031D906B8C650B080878823C4F7F9F765AF4B4FA
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/packages/P7/P7.pima

SHA256 42b61c467b289a0e56fce1bd34e01a3a5d267a616b095dbdc79cc4809515fc25
MD5 e5c0dec28e36648e926f0d34d14b506b
SHA1 1b5a5ed8eef44a8efee5f8509db64abb8f29b59a
SHA512 6ddfe34cb6fa9a48b62c4b0a2008d8a681002755c8c4b4c9797869bcb186a635892ab0cfa102137226c9e60869256e8216e8280629ca65409e41d170584025ac
SSDEEP 196608:1AqJvyQaGcmSYdaG1ddT631gK3y21h2RpmzBft6Tr8pCH3hAXADrWKP:1ZvsmSBG56J3F4pYI8AHKQDrH
TLSH
T172863316D54E8031E07FF7791EB206E3FCA4885A952134BB4876C0760EA36F91BD9F89
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/packages/P7/P7.pimx

SHA256 1121e73bcafc4c8f3cf19e0cbf8674b278ed8e888cf13bf1387649869f40265f
MD5 16d53c337e661fd91b304c4ac74a6347
SHA1 aa6a9a836f7ebe5b85f7fef0704db7910b608396
SHA512 bbbe0b9d2911718b2c6d51a2d59cf272ed6dfb1548d2da7ef759b70ca6a989b80b2101e8cede4724eff94820ce28a7be4b0cc73b39a579b85e856bfca1ec9ad1
SSDEEP 768:iypb7yGLy9rRfe7vH58VJDJxIq1ssiC1aMhQ3:iM2+y9rWZqPssiC1aUQ3
TLSH
T1D843D2AC21691BE17407DE603D601E472A4FB17DF6B431F8B2984D7A86D9A8F4D8B133
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/packages/P7/P7.sig

SHA256 62e5c7e276685b96d00780a5671f8a5c40d72678faa77170afa579935db2a8c3
MD5 06ffccd59010e9c86d4deced3ebfad27
SHA1 26741933baece126723f85ab665ada6edd34fa4c
SHA512 24d8863cd893df637e2ef14d79b47ad8481bd8154d49a2b2f265f64ec15b407682ec5080017d29392b300216bec1faf5080cb0eef7f22ae3deb44e3b5f1104fd
TLSH
T1D931D774A0E139D0E23A0BF3B4194884EE54C58DA3BA5519B0E6084EED739904B137E8
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/packages/UWA/UWA.pima

SHA256 9383ca11a8c52f54da1ce31a433db8040a738de2d221058cec9d66dca967ec36
MD5 b8a0f783442ad1d5b63a738ab4bf9561
SHA1 ad69bf2487783956c8c0704ae5dbd89ddd95b4a7
SHA512 d70b991a5a9ccf0c9136ae236d3630664c9f73be9eb683cb0d1aee686355aaefff4ac5f99f71d826afab7ec767a5dd5c1a4b6e660c31941c69bfb5b4328c69db
SSDEEP 98304:LJoAuGfaEp2QGkzoPytFET33OxOgk7hUCAgn/XzO+VeZDAeX+vLL8+aW5ZG7V4zf:LKApfaWzoP4FKn6OgkVUCAgvznVADOLZ
TLSH
T1D1563333A055DC13CD29ABB14721C0678635C08B52ABF8B66F65B28437FE14E4DFAE46
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/packages/UWA/UWA.pimx

SHA256 a77603d92b12b533ef19a9721d2a98255d18b0a523bf8d8ed920d9cf3423f1e6
MD5 f2e0f47abb2d05c407a4f6c8adc6b165
SHA1 05105010fae570a57c2cd712c328375c4ef20d16
SHA512 0df4004e41575977b6689623779651f4bb4da4c98946d7d6ab272ff3c27a4238f17ca31e3b5c591f51a8acbc90986e4838d90415926f2509015d8ad180e83322
SSDEEP 1536:6a3JFK/q3RvA0VLd2gkeYxVkAj2IBLj7EJhliqH6akj6kVT:UwRzdkGjK/gJhcbzV
TLSH
T1C6C3E2AC11695BE17407DE603C605E472A0FB17DF6B031F8B2A84D7A86D9A4F4E8B533
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/packages/UWA/UWA.sig

SHA256 7a228c82c76dd303dfa57327c00ed9701973f8e0bebb122f0b2652418e109fce
MD5 618dd12ab8ff63769cc4958e1bd95dbc
SHA1 47a492beb9bd36c4b396c199221ae39b0e6486d5
SHA512 de10df1ed1d2a582df2edc2fbdfbcc2dd9f0e4888811c8e90b5dde870dec0c20d9032e70ae62c8b2c2d6c2e08e85991e37e125ada8285aa0ed7e3d4e1d0540f2
TLSH
T15231079991E86EB0D2709EA3543E4B42C6CDE5CE1B3944187DC3416F6F6E460A8F70FA
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/packages/core/PDApp.pima

SHA256 03bf5557ee7761666f8443f3237063603f36aa7d7edb2ea79f5d68d00babf7a6
MD5 ab24e3edaba13b5be01aa054a5aed5c1
SHA1 94383311b1a2f103ac33d729d2d5b91c64f80dcf
SHA512 1fbb2168245dc476a84295da4d3eb88a715a8b685eded077448e772ab558aece2bf6671dc860ac054214a96835196d23820b2912e009ef006937d6dc58dbecdd
SSDEEP 196608:4NHW9bmUtsKSM31S6p9Q6ShLp7F/jtP1z65vJbIdQrfJHUehuKBbhO7xN3ezv6b5:qW9FlSVRhFJ/RVEvJMCjhxJU7TuuH
TLSH
T102D6337B6AC75762EC4ED73486D13A0ACCE12819D2D1BAF3C2D811E70DF6A6E1295C0D
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/packages/core/PDApp.pimx

SHA256 0f5be120218281093702f31812523573fee56f110322abff48284001a6c2e664
MD5 409004721e7faac6ea83309038613a4d
SHA1 c7a922d32c81d0662d68cae85dc3247c0047a6ff
SHA512 bc52d30ff11178fce754d91788bbf3482f7e1b8c2c5a9b3feb022f8cb429d29aab07ad44d08caedf7213cbfa25c9db0f382f8b62b9af410ab9ab23135966e84f
SSDEEP 1536:NIPrpYW0cSPBH6hFge2bm2XR7LhUFUXjXM9kLB6+LvpPQRtJmneyN9SZz0oRRAu0:qicoHXe2rBxUFWvLvNQHJ3yNYZz0Yvah
TLSH
T1A504D2AC11295BE1B407DE653C605E472A0FB07EF6B031F872980EBA86D5A4F4D8B537
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/packages/core/PDApp.sig

SHA256 c27eb7ef36091a37f8b54d3392a5d700824c8dd8c856ae150678bd280b1a451e
MD5 f8cfde5026a1bb652b10ddcb8e940d67
SHA1 5be1460731b45b7af04334fdc1d2de16d3cbeca8
SHA512 55447272b8baf32181317eb787577f36040d1b893bc53d069cadce494436afc6a96da4880da89a09f86e419c8a9725e4d6b4c8dea9c92a5ec61b0ab91d2d2d71
TLSH
T1F931D7049AE986EF74392BF967079C834644E2BA664C1648BB81446DCFAA52D031B0EE
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/packages/install.sig

SHA256 4a0c975271a1bc8bc1667e281942a5f961151c88207edd8fc7815b8d6ad9f003
MD5 0b3195693d2fe8c04e10f3dd07245925
SHA1 6ef8ba55205ce8291679c2b2c5a2dfedacc4f16e
SHA512 7ef3964b479d515c78eed6e56af0b32215eef65ffedfc9d0a70fbe2ae0f57ef1dcc8c173f967c3abeb64be178510a4ac2398fbff02836988ad2ffc082419e34c
SSDEEP 96:80Vtni2mFPCLTUmLLlBfXhdYKzKTyOMxd0YEmr:w/CDlZhuKPOMHCmr
TLSH
T19902D5C74B8963AD2AEE33FBA99DC4D65A774C0FD9E405247990D07EC62382E03DB524
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/packages/setup.exe

IMPHASH 1d1577d864d2da06952f7affd8635371
SHA256 433d01f895649d583e45d29380be5b762cc22989793dd4d33b9e483b01f918a9
MD5 056106ee10b11c65a163532802ac1837
SHA1 5c4dccca31a6816e3d225a05d99d63b1ce825520
SHA512 60167a7140dedb825a83ad1ab074d8b81d9c81c72809c641514281eff850275696f8ed320081612216ce3aee2046d77894253b86437603cd7b8285bbf1591731
SSDEEP 3072:Cyg5QeNeW2MVhTB/3ilknk6M3BFSXkndowSmm6MyC/Isr4:Fg5RNDianZM3BFIkndNSmmByA4
TLSH
T14ED39E5377E2C5F7D0E212B109912F9161B6FA3D071B4983B780790BBB729C8E63E646
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

Minor OS version

0

Major OS version

4

Entry point

79935

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

comctl32

ord17

shell32

SHGetSpecialFolderPathW ShellExecuteW SHGetMalloc SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW ShellExecuteExW

gdi32

CreateCompatibleDC CreateFontIndirectW DeleteObject DeleteDC GetCurrentObject StretchBlt GetDeviceCaps CreateCompatibleBitmap SelectObject SetStretchBltMode GetObjectW

advapi32

FreeSid AllocateAndInitializeSid CheckTokenMembership

user32

GetMenu SetWindowPos GetWindowDC ReleaseDC CopyImage GetKeyState GetWindowRect ScreenToClient GetWindowLongW SetTimer GetMessageW DispatchMessageW KillTimer DestroyWindow EndDialog SendMessageW wsprintfW GetClassNameA GetWindowTextW GetWindowTextLengthW GetSysColor wsprintfA SetWindowTextW CreateWindowExW GetDlgItem GetClientRect SetWindowLongW UnhookWindowsHookEx SetFocus GetSystemMetrics SystemParametersInfoW ShowWindow DrawTextW GetDC ClientToScreen GetWindow DialogBoxIndirectParamW DrawIconEx CallWindowProcW DefWindowProcW CallNextHookEx PtInRect SetWindowsHookExW LoadImageW LoadIconW MessageBeep EnableWindow IsWindow EnableMenuItem GetSystemMenu wvsprintfW CharUpperW MessageBoxA GetParent

ole32

CreateStreamOnHGlobal CoCreateInstance CoInitialize

oleaut32

SysAllocString VariantClear OleLoadPicture

kernel32

SetFileTime SetEndOfFile EnterCriticalSection DeleteCriticalSection GetModuleHandleA LeaveCriticalSection WaitForMultipleObjects ReadFile SetFilePointer GetFileSize FormatMessageW lstrcpyW LocalFree IsBadReadPtr GetSystemDirectoryW GetCurrentThreadId SuspendThread TerminateThread InitializeCriticalSection ResetEvent SetEvent CreateEventW GetVersionExW GetModuleFileNameW GetCurrentProcess SetProcessWorkingSetSize SetCurrentDirectoryW GetDriveTypeW CreateFileW GetCommandLineW GetStartupInfoW CreateProcessW CreateJobObjectW ResumeThread AssignProcessToJobObject CreateIoCompletionPort SetInformationJobObject GetQueuedCompletionStatus GetExitCodeProcess CloseHandle SetEnvironmentVariableW GetTempPathW GetSystemTimeAsFileTime lstrlenW CompareFileTime SetThreadLocale FindFirstFileW DeleteFileW FindNextFileW FindClose RemoveDirectoryW ExpandEnvironmentStringsW WideCharToMultiByte VirtualAlloc GlobalMemoryStatusEx lstrcmpW GetEnvironmentVariableW lstrcmpiW lstrlenA GetLocaleInfoW MultiByteToWideChar GetUserDefaultUILanguage GetSystemDefaultUILanguage GetSystemDefaultLCID lstrcmpiA GlobalAlloc GlobalFree MulDiv FindResourceExA SizeofResource LoadResource LockResource LoadLibraryA ExitProcess lstrcatW GetDiskFreeSpaceExW SetFileAttributesW SetLastError Sleep GetExitCodeThread WaitForSingleObject CreateThread GetLastError SystemTimeToFileTime GetLocalTime GetFileAttributesW CreateDirectoryW WriteFile GetStdHandle VirtualFree GetModuleHandleW GetProcAddress GetStartupInfoA

msvcrt

??3@YAXPAX@Z ??2@YAPAXI@Z memcmp free memcpy _controlfp _except_handler3 __set_app_type __p__fmode __p__commode _adjust_fdiv __setusermatherr _initterm __getmainargs _acmdln exit _XcptFilter _exit ??1type_info@@UAE@XZ _onexit __dllonexit _CxxThrowException _beginthreadex _EH_prolog ?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z memset _wcsnicmp strncmp wcsncmp malloc memmove _wtol _purecall

Adobe CC 2015/packages/setup.xml

SHA256 6e55e580c40e472b99b30e31506047e4e4f4a6c48a176ea2a81139744f2ce8d8
MD5 153e81faaec182dfd137bcc313e3045e
SHA1 b3199f8b361f3715ea142b4ae0dffd7329234ac5
SHA512 e771891e89a4ef8d6017ebc05b0e05c8f5170a9d95803e77899c521ac3d23749a2464553958601baf7c9daae129e492627053c8f73e0001bbf62e1156fcac104
TLSH
T1CD21E1CA2A30D302564B287FEE7B3418AA2F66BFB639D091B505957B960136E360345D
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/payloads/AIRforIOS_Flash15.0-mul-x64/Assets1_1.sig

SHA256 892a569bbfdc359fd4b2f439b570d7cacbe5b065fd09b6e51372ec2addc3ba4b
MD5 f9266504f595838d61d7ac49068a2413
SHA1 d33e4ca5e52eea913f730a972f190264735c55e6
SHA512 009e8d2aa014462107a80d00a39052eb8e7c469b050aaac1d4b93efc0f3941e48b75b9fba3cb0e7ba71e70d201ef71637b1f3811e8c62ba242efe7558bae8902
TLSH
T11C21DA6404E1EA74E8B18EF2813CCC8856883F68B88F9E1435F74A23751ADA46F57CE5
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/payloads/AIRforIOS_Flash15.0-mul-x64/Assets1_1.zip

SHA256 4aee30da08afd244c3a1999b7a658eeaf7817db2263c936231adccb72146e243
MD5 1798e3a54ba1baca662a0ce795c245f5
SHA1 c891a9a73b926fc3c797c6f191975ef75a04c4af
SHA512 2606e3a37acbec94a504d40bb93c19137d7205744476cf75856daeba69c2436ea3a248e26f4252ca48514614105803144922f31505373d24688a547b7d87f0e8
SSDEEP 12288:8yP9UQvqPmVteYfn1FjvZLlrecDbNqpqvVDykct6:daQvfeYP/vZLtTbke+kcY
TLSH
T10CC42351E699C86AFC7C4FFD5FC4D002A725CEF642AC0DB678B11670A0DECAB566C026
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/payloads/AIRforIOS_Flash15.0-mul-x64/Assets2_1.sig

SHA256 086ad97c276c53c0a41d0961e65bcc98a89c7b6567259f990abc81cc2a29451a
MD5 4a16c7b28d7774d1023a2452643b8bde
SHA1 2200828851fe946feb67ca358c53e698213b5619
SHA512 ee4dc695c99fd6b88bf7cb7327ca86bf6f1b8f78f82094bbf5088880e2d36bbb7b9f47e6bf6189074879abb377d62d45cf781173fc4b8baaf11e94dde9e3a883
TLSH
T1B521B71622F539B09673DEA4219AC419B433E689884E8D55D582CB821F4AD3443BBEB7
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/payloads/AIRforIOS_Flash15.0-mul-x64/Assets2_1.zip

SHA256 0055ec29f316158cf37a6ea1ab97f7b21fb6a55a62e90edd10d1a6c86abf4836
MD5 15ae37d32a4b0995783dfd733d4a7a72
SHA1 24d00a21a1aa7912cdf0de73fc4425cbb6dbb168
SHA512 b8ad284df673e1a4e6c68f9dea1bc535a970cb4b76da4cb0388067ed30877130fc7a6c4e7f43214e52f7809e08af9cbe173309938abae84d863716c4dd854932
TLSH
T13E2174B62BA8C762D65D8AB132D1EC00FC6309E681014DAB0814E5464F9549919E876E
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/payloads/AIRforIOS_Flash15.0-mul-x64/Install.db

SHA256 3806c263aa50082861a4d2d822865ed67935af5ef4e129f338ab632facf61cba
MD5 6ab45ca7496d5b4647528a9a12a04005
SHA1 71f6b118b880580709e91c399c4195d93988632d
SHA512 a5adc2066a3d3f328881bc162952f1bb1821d4124dd33b48ad2f8289b0d56dfaae5814122989c6f3b826a1dbb862ccc28a50dcbfe2e3798a6bf578c2337af689
SSDEEP 768:gOUTP61NQUQJGVUZOEWGpg6hRR78QduqRPAJBeKPTvG5MzFV1ASBH:ODe1H
TLSH
T19373EECF5F4A3322C5E14171DAD203E7583D195EA37A66D03AA211F2BEA217379709F8
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/payloads/AIRforIOS_Flash15.0-mul-x64/Install.sig

SHA256 422aa0dbc69e7f5f533538b1f890f79ba4ac761197bd4a30cf5523e448d799c1
MD5 38fc48ee3209ffe9ca42b7b2ee5e220a
SHA1 b48b09549ce247856cda66a6c5b83193e25be265
SHA512 72a9335d2c648a5055a10612d0f54482b2af16299450070aceec1b66243725b6e596dde62bf9b156d226a9f15e152edf458d8a3027eaa5684beb59f083e752f0
TLSH
T12421B43C07B6FD38B3213DFA36B9889021A5A7C80459880C71D2237C5879B80634F5F4
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/payloads/AIRforIOS_Flash15.0-mul-x64/Media_db.db

SHA256 05332be8766f70ac6f6e171d35bfe45445e18a45e03904c08a2ac2f2baec200e
MD5 deb65d3556e4fc17e4bbf3110a23b7f6
SHA1 b28455ce447c6077110f7eddd867f9c9878f0d42
SHA512 b692d788d22e24588a59f4fc2d6c6a21bda2923d55d85e7618c9b627ff9d2e06361e4e3790c7c853fcc837d1e7ebe371a0050ba3d5a4bfbe55af313de6a9d6b9
SSDEEP 768:Rki41+Jg+elEfVVpsjLjEVERvoxDDc2od5btdEf:1gvlGV7sPaEFIAnbu
TLSH
T174937AC46464B5D6F2707AF944F076BE9C6C24DF9E809098607F1FCD9AEE5E8290F04A
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/payloads/AdobeCameraRaw8.0All-x64-040615192324/Assets1_1.sig

SHA256 c7c9c8acd0b8649e567befce543ba5fc31d09453ad6c2220f8625136fbc346cc
MD5 ef4e5680c7305f9d12ac14ef32897990
SHA1 f9ac62d4b6f37a44e12e8d051786a8ede077fa59
SHA512 e8258c6552b201291e906416468b2bcfd84f247144007e045b9526a29de3acb2e61c5f8137f3598e166333fb20a4f2bb491ef74ba92933e3630904d35538d838
TLSH
T1B8210A30D5553EA394063CFFA437C85BAA88415E03154B66B2F4B213673C4718A438F4
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/payloads/AdobeCameraRaw8.0All-x64-040615192324/Assets1_1.zip

SHA256 7e1fcec321f6b7a080190f5a148ff77297120fe2bf277a1c09707121b98b603c
MD5 eb252f07268a9a5565671017c50f1f8d
SHA1 e5c9f976d1bc4799f9e202c92f31178052e25487
SHA512 d633f3e47ca467900cd138f1209466e83b72ba6d28c9031d62469cb8ad5c1a81e89bce0bc8b725935d2ba0fb7804ee33341a262374ee94c8881705b660aad603
TLSH
T152B0021DDD07D020E42002B3DD327B8A377572C70018854324B876FC4E8E7C0CCC0148
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/payloads/AdobeCameraRaw8.0All-x64-040615192324/Install.db

SHA256 c5925d50dfcba76073652c397b05fbfef70f8d949fa0b33f9d781b195898eda2
MD5 3aa06b3c98f3fcaf8c19bc853f598ea6
SHA1 935a91c7a94953f74f5c1359b31debe860b76ae8
SHA512 903a7b5a63430382b073db9490a8bcb17f843ea7932d8cecd2fd9b6b5793121c0a910067aebb35318ae88762c4417d6ed4a54ab6c5b566c8732e524bdb12a9e6
SSDEEP 768:xhO8OUTPt1NQU2GpUZOEAGpg6hRR2QdcqRVA4lchKPB1FbvG5MzFV1:qfa
TLSH
T1EE6317CF5F163312C9E14171D9D203E36C3C565E937AA6E036A211F2BE920B768619B8
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/payloads/AdobeCameraRaw8.0All-x64-040615192324/Install.sig

SHA256 3bcc024dacde4e7bfb799a33ed6a44f37d06bc18147a8ac0ab5bd8d381d82b7a
MD5 e834e419990fc73d716232e4e2762203
SHA1 340f9b891782837c1dfd94f0f973a7c341380c42
SHA512 1f0476a424eae5dc97420b2944d924020fda268d68182044de2dd16aab48a9eeac37bd08430deeaa51462759504b776327ca0cf9ad4e8fc22e5acc53153e422e
TLSH
T19921B70AC459B9534BB5DBB215B30247E38162F911EE8C84268A741B0340968E7829BE
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/payloads/AdobeCameraRaw8.0All-x64/Assets1_1.sig

SHA256 f3e079214cd65ce67c9269f28b3be5a57f2ba6fa176e8da30f2be5feda3369a2
MD5 8bc8628f6f1dd7ff3eb80766bb90925f
SHA1 002b49527db56e8072ffc8d5af1d720cfacf1a15
SHA512 13850d7cea60e603856511173604aa6885cdd0dc1e70ac920527dd9f9f6c8b2022e8c996ee6c203356147f2ff58bdc8c7a173def5f7e97299bd651451f36f7fd
TLSH
T11D21E4FB64C0EDA213F00EB85D90E12E5705E0CA183D880A65F564E7939A8B82DC20E8
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/payloads/AdobeCameraRaw8.0All-x64/Assets1_1.zip

SHA256 ba64314bd6a3fc75e0aac97c2111794de58af39af17eadd80b606605852d4081
MD5 a0d66e5831506895f6a82caae55cec88
SHA1 3e809d604a38678d58dc01e9b1c766f68fd55c7a
SHA512 3fb215df7b2a3de2e3cb305e856af3bb105f66dd1b1d6bc06ca162286e465b81220a9e1fcbd03caccb029e002189b3cf4b4b4ade2cab5196f0cd2dbd1170b932
SSDEEP 786432:Gp5BAebZnXChXZNhRzQwkGzOyVh6T3BpuUDDwv3/dqV62yYC8:GCeRClZNvjNz3b6rBpuUDkkyv8
TLSH
T1EC87335D10662548DFBC7C0102130EFEE625FBCAD2E0951AB3DDAF59CB10EE9096E396
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/payloads/AdobeCameraRaw8.0All-x64/Install.db

SHA256 e40db1710704c80684bd999c4775cda9fd6a8f55a13e0ff3c9f2f6e1ee6f4662
MD5 d8ec306e06cb1f32dbc59550e53ebc59
SHA1 8a087ef3f0c43c41d031b55e94a613d6c8a5e6ed
SHA512 4688f4368aeeb86ec38b33b88aef37a099f27d38aaaa4bbaf8aa3342c843fe8a0acb930d7d7171bc3c65f9a2bc4e093fdab51ced6f29e531cd9ac85a26123f84
SSDEEP 768:yOUTP61NQUQRGVUZOEWGpg6hRRf8QdzqRPAmLBeKPTvGcMzFV1ASj:culF+
TLSH
T101639FCF5F1A3312C5E14131DAD203E36C3C565E9779A6E03AA211F2BEA20B769715F8
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/payloads/AdobeCameraRaw8.0All-x64/Install.sig

SHA256 6d462faab0480155c2fb51a428133a1e8266fc9f8ed889564aaa1e879b026cd6
MD5 85bd27370b942d9505a80a0b7fbf50ac
SHA1 df8b502ca3862069022e44740ae581839d8e2048
SHA512 532d3622c788f25d3ee3ad19fbb66fa1c3833ca1ea3f1698e516a03e25d40594d6a27e6382f040bef543a9766441e47e7327f9f6c6c57e2ea0e4adb48e2f4d25
TLSH
T18A2107F272A09920AEA50FB27E4EA6243ED2C38FB384882658D1310D052083513038EC
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/payloads/AdobeCameraRaw8.0All-x64/Media_db.db

SHA256 d8c9d0a215fca9520c156b00c83e9a3f8a2acf469936f1b6fe5fe04854ebc2f6
MD5 bec5e5b0093a3c9c99aa8ba4165881c0
SHA1 583f3c4890babca8e1c3445de00944d32ff96a43
SHA512 34164a200f1dbb36b8eb77e0e0ecd3e052dd7afd96f50c009d255fcc71b7ff752b95b7f4f6e1935f4c300f1c1a523bdc08bdf3b480c90379181122b714edafad
SSDEEP 384:P7YA41+HpqEZqXt+vJYgolXkeXBqYDAz6yRfsVEeKJSKx1sY976ob5C+W6BRa3U0:Pf41+HpPdYtlJyzIVxSgLPbDH7Z
TLSH
T1DF9351FB5C986AE9EA49FCFC5A6E8830D6F6A4CC234851F072071BD6C295DC52C2305B
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/payloads/AdobeCameraRawProfile8.0All-040615190646/Assets1_1.sig

SHA256 66495388c51d9e2c640f0baded343a6f9166cff1c7cf80fcf8e8a6696773bd72
MD5 e7e04f1b6c2b6b08da8632bc4350e45c
SHA1 3748dd3e6e09e9fa408dae93d562a7ff13f254f0
SHA512 ccace6a5f3bb3944b66dce5daddcb8cc5f57e6d3b99d1245212b80ea161bb726f9f9a0a6347791602d3f703b9f4e66f42635362ed1692e1d436d3076d9f07f8d
TLSH
T1D121EADA5128D128927495D07F7704083308D2DE1F8F8E4835D2876F690C4BA4E53AFD
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/payloads/AdobeCameraRawProfile8.0All-040615190646/Assets1_1.zip

SHA256 7e1fcec321f6b7a080190f5a148ff77297120fe2bf277a1c09707121b98b603c
MD5 eb252f07268a9a5565671017c50f1f8d
SHA1 e5c9f976d1bc4799f9e202c92f31178052e25487
SHA512 d633f3e47ca467900cd138f1209466e83b72ba6d28c9031d62469cb8ad5c1a81e89bce0bc8b725935d2ba0fb7804ee33341a262374ee94c8881705b660aad603
TLSH
T152B0021DDD07D020E42002B3DD327B8A377572C70018854324B876FC4E8E7C0CCC0148
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/payloads/AdobeCameraRawProfile8.0All-040615190646/Install.db

SHA256 19672f0e348b6172e355ee198ef26bf4f30af673a0cabe9455a07813f02393cf
MD5 bc734bceeb8c7f7a6ffba6b501c618eb
SHA1 5d8e0e894cae0947d47e3490020ebe68e1217db3
SHA512 6e4f18e254694233c1a6cb863c564b24b316e029fb288a2f705afea63114ac7a34d1dd570a2c96576239db96b95702e679d5efba3f05b2d7da75d8e9cd3d2c0c
SSDEEP 768:hhO8OUTPt1NQU2GpUZOEAGpg6hRR2QdcqRVAngchKPB1FbvG5MzFV1:aU9
TLSH
T1BC6317CF5F163312C9E14171D9D203E36C3C565E937AA6E03AA611F2FE9207768719B8
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/payloads/AdobeCameraRawProfile8.0All-040615190646/Install.sig

SHA256 65826da55dc3471fea7e9379865306bab9848a4211e2ea4204639abade95ed92
MD5 b3371995905b194c5dd10c41c7143b3e
SHA1 e27babfdf438c36befa4ba396402f9d8096f4340
SHA512 a72090ee92dca983bc26be90729cc3a29b3105c1cdecda3cdade860be148f7d8f2cd5ac8a93e8151a670c33ece19ab736a8100a1a9e7318d59432e5a399ab01d
TLSH
T10021E73EC9A429B0F3151DB7EE73ED44AEB49298664A032921C6469F754A02006CB0E9
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/payloads/AdobeCameraRawProfile8.0All/Assets1_1.sig

SHA256 d052527716fa24dec80e1908c2e4d39ede91264146602dd50f0509ed2ffc1048
MD5 f79148cc87db13753adec97be6a51273
SHA1 ef36dc52a56086dc57489f98b6a05b2c2a35de88
SHA512 1be72e271a1751912cb8f0d4ac2ac5e4ee07ce71fba6ba26fd7ae7c0c3ff04218acdf2537164ef791e9b3c0cf530cc908aeaaa433fd49603659966f81c548125
TLSH
T14621B77D20B2B4446F200EFC306D57903100CED938500645BCEA97EA4AD9FBA14278FA
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/payloads/AdobeCameraRawProfile8.0All/Assets1_1.zip

SHA256 2788e193dc37859cf08432fbb7cc9cb2cdc66dec5b9e4d3803816d1ecf854b89
MD5 4275cbde80b0537002b54cc137b703f5
SHA1 a3ca7f42f29eb1459cbe0b49df3b8527c5d3856d
SHA512 fd87f77b9f722458e5e51e229c777ac828f4f4e7b314c8a2acc6b5058c298e104c329facaa832e9650c664d8e221d9707c8f0246d5c4d46be6770e4f2e6811f1
SSDEEP 3145728:0m/C741i4fj7f8Ef3eD1HufxwnSwSXJ0+1dayd/omV1teVnZ5yyF0mlX6+8j4WiI:0mL3fj7UEf3wu+xcVvjeKtGZfFTlX6rZ
TLSH
T1F1983374FF5B1855E99AB3B909D943D2E370527113F2AF2F4A5183401D962A2BFC3A0B
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/payloads/AdobeCameraRawProfile8.0All/Install.db

SHA256 0ad61cc25ccf6020ed9cf1727cdd6202dd718ca0a20044d2442a40326cb3944e
MD5 05724d4c4055c33a6b646f4965a19099
SHA1 b013a8e0d30bbe9946436ffce8637ba51547b8b1
SHA512 77d63abc1252dc9e312cb2abaede8f7fdd87e64777567e463dfb11c5ebb26c1006867d050d1db3cf30e69281e9e5dae0dd8e4915dfcec700d401556148d8800d
SSDEEP 12288:VGn0LeD/HER2ZiTIfGRat2/RTZIfMzQ1P9e122AI5h4LgqNeDdoojEgDlJ2/zWby:VGn0LgHw24TIfGRat2/RTZIfMzQ1P9eS
TLSH
T105C45097A0C95E72E7A87B7C67393E3DC07D3C49968418985BA1019E7CB7287A840DF3
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/payloads/AdobeCameraRawProfile8.0All/Install.sig

SHA256 6e15dacda31bb7adaeac4b442f4c8cea2e9ebe34a98a715257371af9b5ebd858
MD5 4fdd5bab8bcf699c7470a8941419917c
SHA1 e6b925d16d283178968f826f1ad1937397613908
SHA512 50c3c67ea8c5435e3f31e046383f5ee654dab8773195e696e8d9ebad211543d96914ef7994c5502aa300d8d8cdd91a9f9c6561d393f85bf801aae8588dfb9429
TLSH
T13E21E72C98CA3EFE4AE80B91B1171C11625DE00F4E71ADCB56D9A1BEAE088100843DEA
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/payloads/AdobeCameraRawProfile8.0All/Media_db.db

SHA256 37f9c59aa72a822ef9ecf55a3943b9458cc3d9c54084104a82386c845a8876a1
MD5 5ed0fd0893e5357baf8d34ba51cb51ed
SHA1 a710f2506a017150a4a5194f4976113aef9bcf71
SHA512 af6da0448e144221986c018f638434cc17cce54f6c2e8fc073dc8950a53d8d6a05c6324cc1925ac38d9fd4a2b6b936aab51038b53c341f240b62f00198bc16ce
SSDEEP 1536:+TbaVjjW/nGyutLDBa2QjaVgjFKcm54Wc8G8bWyuAJGnvIdVOW0+QV0:LyutPBALQrW/yGnU0jV0
TLSH
T17E048ADD2C953833EE54BB7B8EDDA3B89815EC44A142C4B43E675A8CA39F88C550B44F
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/payloads/AdobeColorCommonSetCMYK5_0-mul/Assets2_1.sig

SHA256 9b0c0b52f830b7bbf59ce6097ad57474198c82d73781fa60a3275c10c5f2660d
MD5 adb4aef04da86ff1bffbe6b996a573cd
SHA1 8ce903653e547f4b16e66b8de98207d5b95ffde6
SHA512 65d53375bf820ed95b8c7ab80a38a4bd954cab42567d8d82536388610dae84fb6af5f252a690f26f90bd13a33faa0c8c5263be46ede358a3c15b31d02bd23bbe
TLSH
T11B2184EDF8E63F425078AF67928EEE6E51A07384090D098E39A0039B0D7A4350A825F7
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/payloads/AdobeColorCommonSetCMYK5_0-mul/Assets2_1.zip

SHA256 fc3a5eafd3fe0cfef994a6ce0dc4fd02104fcc2c65fc1100cf7fbba419b02104
MD5 bd1a4b0582456fa74e90494dcdc602c7
SHA1 34b4c4e4566d1eb3bdcceff59533441f41bdecc8
SHA512 82ba794b4eeecac064656e0f905ec90dede74baeca46df1a7d0fbbea2c9cf331b93dbde4522320ec5dd66e25b03691c1d61db372a6ae246ffab56f0a6e2c58bb
SSDEEP 196608:M1+d/HOoxxQYPATn2HL20VdOFlGgJHKluNEqRbJNZgtnN9Z0Gl:m+dPQnkVdOFlhKaGRfZXl
TLSH
T12086337222CAFB14DA484D2ECA8234C6F37509F3DEE1695F073AB609D14B0B4F5A256D
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/payloads/AdobeColorCommonSetCMYK5_0-mul/Install.db

SHA256 f94c8dd76327e8eeb752796db1ddd864f60f4c5e171a46ba2bb1224ee3631b13
MD5 41adc6044c33842e809094c16d0c9dfd
SHA1 7bc53a2d5a7a2011fce31555ac34a2e652e674c6
SHA512 0a9baa6cb55fa82e78b0f5bf5fc73ee12f656718c51a1f2ddeda1f68d6f6d6b0b967323e2954f1a0661d09ecba0eeb03a957eb274309080935f04ad8eab89224
SSDEEP 768:zOUTP61NQUQRGVUZOEWGpg6hRRi8Qd4qRPAojvBeKPTvG5MzFV1AS7Bw/mBZRE5t:IZLjJrBw/mBZRE5eBm+lJK9iXw
TLSH
T12E7322CF5F4A3222CAE15131DAC103932C3D569E933D66D03AE614E6BEA30B765605F9
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/payloads/AdobeColorCommonSetCMYK5_0-mul/Install.sig

SHA256 6c4a595ea7d776c1734f925b376129396efc2176689916362444c46145af567c
MD5 a50e9ef207a70074f8773006ffce3350
SHA1 e10fc7283b88cb30db0ec41cfa08de1089768526
SHA512 fa11f754495ae6de89ece012a572cb2b98a5b12359a7546a13d17dccffc6dc7e6d3d4827624feb62f5191894a3d532099e37f0c02c554ed11ca7a4210b17fcef
TLSH
T1D421A745DCA41BA23AE55BE5210A8456523DC288F00C55973FFF2A07186CCAA2E77DFD
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/payloads/AdobeColorCommonSetCMYK5_0-mul/Media_db.db

SHA256 045907676b85b0e703dfb9eaa91175dcc4f05cb86adaab4705b8a4b326af8d21
MD5 6d498232caa3d2d213130286d18bdc70
SHA1 d4b867728f28919abbac37b8c8aed8ef037d1dc9
SHA512 3aac04f483b9799d013830fc244786f0f3100a707b5a828b328bb7de3e8fd30ea4c0bd464e4554061974e104cc47be9ca6ba203ca5ba7c1cceb0c10b3198bd48
SSDEEP 384:JQYjAF1+nXd4VkFk+RI1G88ejIXCUlYR+e:+F1+XdCAmGI+e
TLSH
T17E23DCF9BECC70ACE3EA5475E8A4563F1DFA71457A121CA24638C1C29F2B4D52C2F096
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/payloads/AdobeColorCommonSetRGB5_0-mul/Assets2_1.sig

SHA256 6ac16520a52faf9eaaeee2019bbce10ea3966015a3d4d6d777b8095cb5bfe040
MD5 f6c50f6a6a09c1bb2752fa6172dc87bd
SHA1 3bb2fa82bf3f90364926cca968fbd25b5b7bdc34
SHA512 2f97236999377062be38d19bfa2e3ae275dca140cbb85915fd2bdb0ce268014c5e5c1e652c316c99f54bd7a1c19f45de9f66381259fe6a8b419cb924f0c816e7
TLSH
T13521B79D61811EE054F98B6201302E48F264CE29011F4ECA3DB8B61B667FEF012636EF
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/payloads/AdobeColorCommonSetRGB5_0-mul/Assets2_1.zip

SHA256 a62aebacaf398ade8e67ae22c634e5f23f506d3c34182ea6a8b07668ca1ab919
MD5 12efc32daa546e6bd91cdf96055ffdf6
SHA1 7d74d5342b9d5a5832c5b0ce0062b2a388ca4fff
SHA512 c573be4d2ac6f38ddf7cdbce490d9fc87f1be81211ff851a1846397ba8bdb7cd971e0b351bcd279aa827ac68c5bc65b6cf353114e1f39c346474f60c195b5994
SSDEEP 96:nFbNUeQUYu5NUxbrjfUyppQe315Kh5XZGd99Yzfls1Ni71HFrpfChVqwFw:nMjlDK9G79Yz8wTp6hcwS
TLSH
T1C5E1F951BB830E83C915D57968FF92C1FA0AF2BC4337459BA88911BBE26BD901D06E18
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/payloads/AdobeColorCommonSetRGB5_0-mul/Install.db

SHA256 0aa5984d9172fe8ea755e4ea54a84fc60753187bd99c67103d29cb3a15850d5c
MD5 a36964c31f37e4aeafa3e894aef5c8af
SHA1 3ae883dfcf1f6d262d3aa21b223cf053c002f341
SHA512 81342e6e0c125b8095bcd851ec34fdc157240c47f682728f85328fe218cd3d964d407334bd61b707f3456264408425320cb5e24bc8652b3cebfeb09e3572aac3
SSDEEP 768:2OUTP61NQU8RGVUZOEWGpg6hRRLx8QdUqRPAMjBBeKPTvG5MzFV1ASzttk1eMpex:613jjDttk1eMpeXh
TLSH
T16D73D0CF5F5A3222C9E15131DAC203E32C3C565E9339A6D03AA650F6BEA20B775615F8
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/payloads/AdobeColorCommonSetRGB5_0-mul/Install.sig

SHA256 c9d6045fed9b19716c96230f4d2aff75b7a9ff8d0132934bb434da8b3e87b181
MD5 2f1fff1251129035007027797be24842
SHA1 e599878b8065a2f4bbd01d27c46bcf51bb98a552
SHA512 528466168e547287d7d7a508c8a013ed04d4312e275cc781d6c33f3757483fc9b921dbd29a8386684800c55470ff30d1ed3a19b8d9b51d26adb576314eaca9b3
TLSH
T1EA21EAB8A2A6A5996EDA06E2BB0F150D479F66DD5A4DC948B0D00D6E7F08C9108035E6
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/payloads/AdobeColorCommonSetRGB5_0-mul/Media_db.db

SHA256 ee8564658524702ed747798c9d5a4a9e29651ea6516e1543dff35f350c42a87f
MD5 a1f3ede3c64365cd51b855b12d01c323
SHA1 66550a25bd7f1a0391be29d03ac3126d0fc8b5c4
SHA512 94b233bf7a555fe2e53fb49c4dfa94f8435a8d78ecd3fd9675b3775d32190aa518f7c94f17efaec6c85ce11da04b4f7e716e24118accb465f83c537b8d6a5d47
SSDEEP 192:8R37XUwXYXy9K1+YvGYRDx2zRUgViGLoiaRXMGepL:8towAn1+YvGYRd2zRIG+RXMGepL
TLSH
T1C7F2FEEC0CD072FDC6665A7849806B6DACFAFA493E9071884B795713E0539CD8B1F12E
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/payloads/AdobeFlash15.0-en_US/Assets1_1.sig

SHA256 1a4af013503629e278097ba4cb074232f52666fa563f97425b994262252e315c
MD5 a1e6210a3db14c3a1d1bca21724d5027
SHA1 092352f9915b89ff6f280e4e89c48222ccd06337
SHA512 f698d2de2ff4ce6025aecb28ed443d673dd0a6a19b97693e08d8adc9ddaba48c563da1ccec0a1adb5efd67ac99cd90963b3e962df16935d06aff3059fca41cea
TLSH
T10121074CECE03C05E01BBC522476D14382B0CB57B8CE7809D5F5A38F2DE9A2120AB23B
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/payloads/AdobeFlash15.0-en_US/Assets1_1.zip

SHA256 076a648af24b6504bca9383a9b95a3eae497e7f7ee4156bff4e51e28742b2324
MD5 07ae637de462fc5eefc3501e6a0a8426
SHA1 278425e633731529a78005440725ea3cc485cc22
SHA512 419361520cc3b4a9dc3369aca1108b1de720e2ae2d55b9ebda641396415e511d5d039036703f40325ebacc37482a9b94fbdeba396c9185a56328242fa61ac459
SSDEEP 98304:Q3Q2jTbr4YFzCkNzlAgel++F/+spaK8LYNaZvsfASflJr/eiIIlXMab7w42dA:aQ+34o4LQ+F+niNYn8hei3XHww
TLSH
T1EC36335C870F892EE6560BFC248F13DAF8B88544C8706DCBF8363644AE4999CBD5B54E
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/payloads/AdobeFlash15.0-en_US/Assets2_1.sig

SHA256 f241898b62b3f3785f7a9b191228a2dda0421e98e2eec902f1df3159f4675faa
MD5 5bfbd8d67299d45b8fee5e4df8335d55
SHA1 7f16478525335c5969d8ce7054e62fb4a8114565
SHA512 6f761d1b1126c3116ab32f2cec15f72422408ecfced330746e4dcf965ca03e887adde270cf6bbb1bd75c63ed8d72af2c395d9a1324139cc980546558c3b558f7
TLSH
T1AC21EA14BE78437147614BA399BE08021BE0D2E28CD5049C2786760770CCC2CFB1BD96
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/payloads/AdobeFlash15.0-en_US/Assets2_1.zip

SHA256 c785dc51e5bf6ae8b2cc1408204d7a9166f8482a28c3f7780e20d12645d611f0
MD5 ccf5ca1d467ed2fc2c9d362286c5d26e
SHA1 3bfdb038c4bfcb549906809d19b3d95cfd3c5f5c
SHA512 9dbf3ff3b60e975d39911a3dcc1d762942a2f59951af6d4212961b5f2816a7aff51622b2afc022ceccbde8bc9d701e6305888d09650160c4e6775fc8eb84a8c6
TLSH
T1FD21A56B8A545B0ED1370B75069BBB03E3B843450172CB0B063C1FB189DD7538C67593
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/payloads/AdobeFlash15.0-en_US/Install.db

SHA256 0f568eab7a37542f0fdff2bea3923c332e61a5487b4f87c9f7c28a06e1532d70
MD5 179b331646c003e20163ac5967b58412
SHA1 349b6fef854d5c6eada032f6c43e5db6f119a7c3
SHA512 f874d08fbe6477fd83cc04e5eb5aa5ce54fe0b093d602979a13bbff6e984f8b50ebcad89fdf68c9e39d0c3c1e4a5c369e47236d6ba91ed8ed539eb414d819aec
SSDEEP 768:COUTP61NQUQRGVUZOEWGpg6hRRs8QdzjqRPAxBeKPTvG0MzFV1ASbeURgcljd45D:DH6eaeUR549TUMXD
TLSH
T1DAB383EBC2866692D3512332E7E20F6B847D242C530812857FB631D977FA1B3B856DB1
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/payloads/AdobeFlash15.0-en_US/Install.sig

SHA256 30b7b52a9a2cc2666a6ae99a4ecc48e798681bbd13c556195c798ba107ae8133
MD5 a25e51e9cc2369510b9dbe424a8e88aa
SHA1 6b7828f606f3318437d794874955b51a8d5bcf96
SHA512 e61f938b18c7d7a378322567acff5498d28c4a6d7b31a8c99c1dd542dad6d0959e3b9ca330117ee01a96293d2afd58b0ff338e478a117034689fab33f63562fd
TLSH
T1F321DA42CE307DD858B54B9B6A2FEA097F0612CD2DBB502477410376CA11930FE9B5F2
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/payloads/AdobeFlash15.0-en_US/Media_db.db

SHA256 e645ac7f6c96d5a39229a73d8417082e0287d14704ea53f500bfe25495c30c93
MD5 e6229d75fe9f97ab5f82db364cef1079
SHA1 b081745ca1862a89de993afe8c40fb19b0a831b5
SHA512 a8f71c0d9ea3357c57cd4b442139dd4800993ecd2b7fa34e7d107ac169220e4ca36a4abfcfd8ad8a2b9d70daed461cc576cbed08d29e817f27b39a3a78065419
SSDEEP 768:T21+rhkUlG3gzozhzMqYwta919NpoB2zngv10yq:7kUl3MpfHAvS2J
TLSH
T18283BC88947ED569F6783EF662F060BDBE980ADBC504E054617F1F8CC6E50F42D0E29A
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/payloads/AdobeFlash15.0-mul/Assets1_1.sig

SHA256 3e0c4639a0cef6c648ee25a6777b9852ec4f239d098e18160e9923a3cd0103cf
MD5 7fa78fc80a45d38ae2893d7ed3a2e19c
SHA1 2dad3ac17f3c015dcb889b570a34e3f15a82640c
SHA512 e3d3290878aae2c76a656688e206b2ac14fa07d7f1dd9d17a98b84932740dc69e1a27012d31d9de5876f122d17f05c719891ff1dbe6a7b9e898b6917fb544c92
TLSH
T19721B4E070EBD5D16A668F798F38928D68655BC855E90846B074099F93DCC29082FAD4
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/payloads/AdobeFlash15.0-mul/Assets1_1.zip

SHA256 5ef7efe8742398824a369dccb7d76fc46e762cfeacac651d281468e0e146c4f9
MD5 aa25fd7df48431b23af111ba3f999647
SHA1 808a8713a472d2bc7d8f3d7abf137612f50fd759
SHA512 a71bc958b5b8f1f5af05819a3866c69abd1213805eeb04e32b1fe43765e4c71229380a3d45afe589a8fd1100cb07528fb5145a597bcd90b846607b3ac42bb2b8
SSDEEP 12582912:YPH0jtQkshBYY7/wqU2eT4PfexI9ZqBbfAqaX5K+/Ay2k:WH0j5eBb/wqU2esP2xIyGXkRy2k
TLSH
T18C593349E751D8C8E61FF77E5BC81B1AFCA2A00D50765C07FB6912660C86BDA2A0F50F
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/payloads/AdobeFlash15.0-mul/Assets2_1.sig

SHA256 3163a379c137ad52c9e83267fa4aa1e3b4816644825e3d4724ac496dd2132d4c
MD5 c0f36ab3147ea28a7e4754222dd859cf
SHA1 c6dd39410df0ee48893be0728c4bb818fe591036
SHA512 a30667c6365e9fd90f8579b31d268bf6d28a2eed56e8ecd4802d0251dad3fdbe6c2dab592613d95b09ffec38152d90cf8549e3efdf500193fe3f0acebd14dcf7
TLSH
T1B721E7B0A1A4FB85AFB08E1590030A0331A403E89FD6A70F70EC2B88665E3AC22131B5
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/payloads/AdobeFlash15.0-mul/Assets2_1.zip

SHA256 9c400609916f55e7cd029589fa5f0cf953b8c43d4970108b6205d692477c8cf0
MD5 10bd55c775f100fd0b1b6485e94523cf
SHA1 09a6b871ceac84347961bce83d44d2636378c342
SHA512 64d84ee4c6c2888e1a6ec704d01590a4e749cc8d03e9181a1c7da48ba98e889bf9e87161de23758dd774dfceb4bad4afee2c3f893a5f98c2c89d7b9c1b16226d
SSDEEP 786432:AgDaMm76RJggWwC5xvjISV0DrePXQdR90uT9R7hUyDzif4iWFiEkouEGLKrXbFrO:V6Xr5NV8RrTntxiftWFDhrB2aLnxi
TLSH
T181C733EDA085A988D932C67787173DB79B5E67D2D2F15C290C854F098CB7BC8E32A05C
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/payloads/AdobeFlash15.0-mul/Install.db

SHA256 c44e19898c96221e0f79970d4be297baf185ea304fb98271815bee7c4abfdc43
MD5 9a3d19357e7a073b82a7d501e395eee3
SHA1 cb12db9c83f8a1caf71e07057fab4572fec1c9be
SHA512 d2413c263a78d4ae7f01b877245e50c7cc0cdf4fd8afa736cb7641cb956d7031e61e5df1ef388f32004bc30cf0b820e31a24f2ea0b984ec54ad5a417bb19504f
SSDEEP 6144:Ds0nacq/RL9yldVJFBxW77wmijr0HWceiiItHiE:DtCZ9yltFBewmijQWiiQiE
TLSH
T15CE453A2C1C451EAE31117B2A3A62E1FC4FE15348382215937D7395D32FA263FD54EBA
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/payloads/AdobeFlash15.0-mul/Install.sig

SHA256 6455051fb54d36af8b8e2ebc4abf3bd7fe8e38bc0529155c504647a58cdf178e
MD5 b2b31b8982ca1a34bef70fb07d71e3a6
SHA1 21e4bc9f03b934d4e79d1a901c1b5b8cc55c1451
SHA512 8af58086e4eee5c8aba9c4e2691b94959ab0aaf85e60c0221c292d07adb92f1c9c6bdf996cf4c33cbbd7be4e29b1b7fcfb7db7638f33d30bbb9ec779c2428968
TLSH
T10B21B708B45C0EE2FE154FEDB051FD09F964AECA38484D282BD446676A40DA5771B0FB
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/payloads/AdobeFlash15.0-mul/Media_db.db

SHA256 ba00a59e1d3f87c7d4bed27594d353f3d3708aae30d299e07166b77cfa601340
MD5 80ced5f26f3f96c8d7442b2062a59ce1
SHA1 8d6719ae0bbeca8919d79f3846d658f2e3aec14a
SHA512 19899c2202034180ddb18168cbff8c9ec7e3ae7a4a1df1083c6c3bb6b0927aa004a2d73975a2443c26634a890620a588d1cca0ce28171065daeb935a89f19989
SSDEEP 24576:O2VDnG03L21anest65SX6Z2CNSpta4KqPp4cbCmPY9N8VkpqsZ0pYQyrJN:rVrG621anest65SX6Z2CNSwx0pYQm
TLSH
T164E57D79618438BFC24253B6E6816B99FFAD81BBE351D30020DEB61F31C19A4C37E5A5
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/payloads/AdobeFlash15.0-ru_RU/Assets1_1.sig

SHA256 c1d40f74dbd2a22b2849d2a72949e83cc8fef549d3c1d238f8b64b0090e218fc
MD5 5533f5d7cbe864afe8a017b2517fce44
SHA1 bb5c868e212ce3dc5a6e6a764ea879b919402bbf
SHA512 1ddd11071272f00ead35c6125535165be587c633f6b24bbdb6e8abd45952d2d5552691697ac5ff3743b2980f3b9a2d80a3fac29d29b9df0f33e6d981717f501c
TLSH
T1F62184E894C798414D712FC142289006771EDF66BD8D8259349055FB611F9DC226F4B6
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/payloads/AdobeFlash15.0-ru_RU/Assets1_1.zip

SHA256 bf1538fd111f8704ac9ae5cfc7197deb06a4e9662d4c0568aa5063fae5d3638a
MD5 8a4f415f6f319327bb8ee69088a64ccb
SHA1 0af12f348c739088d90036a3cd144ce723962576
SHA512 0f5206854c5358dad923035af73fcc0082b89cf602b58b4d944232a6df0ae91b7d2307d0dbb33e4ec37fe02ea7be5712a4132a9c32983dd6c478a24463d89ab3
SSDEEP 98304:/42dZjCmAob8Ak551nUeIzBynORgU4hqByMrrbSZ5Yl4ECiItBCzxk0au8:/hCUQAk/uBUmgUzBZw52+iSCzCe8
TLSH
T1AC363374419A8521E60B9BB83E8B03F3B87950044176DE9FE86529550E2B3D83F4F9FE
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/payloads/AdobeFlash15.0-ru_RU/Assets2_1.sig

SHA256 e87406d2c11c518033f2c4670f63411915dbd0c621bc113ae5b8efe784c8767b
MD5 e820c8348229bf16a36f9a9ad5ee528b
SHA1 e9273879d59255049f48397713cd026d3491c235
SHA512 cd949acff5b9510f88f10c484fe43693bdab5c89509f6ae82753ed5ebfc2b72896c39fe816e5ab48076be55900703889d882b9069ef79349b4b165ee58ab1e1f
TLSH
T16C21AAE58395141271B23B558E0450D216B5C7CD23FF8F143AD18A6AC3096973DCB5EE
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/payloads/AdobeFlash15.0-ru_RU/Assets2_1.zip

SHA256 285dbae794301e2f8b48dc55ce46c4472eaf3a9910f2656378147fa02ed451b0
MD5 4e1fd1a053e32d874724310628a58766
SHA1 99e9c3308515e6e9ca113733505b859e896b506c
SHA512 65956756346f07c5dc1cb4446a744d98518aeaa4e2946a75dd996f744ee517373a25e6d66ba42020c95d16b3717d8be6328c3f8065f68e17332cef5cfe5bc513
TLSH
T1BF31E8A2092DA0DFC766457B0FD2170CC2BC99042AFB15360C4822491E3AC5113DE736
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/payloads/AdobeFlash15.0-ru_RU/Install.db

SHA256 29dc079a2c3d83f84088372a49533654fe30f66544ea835863b33f9a993fde33
MD5 99391fd35b05faf523ec5f54872ccf1e
SHA1 c584f7eba3c5c759e08e1a74f8dc87c7fb47e73a
SHA512 128cca4863904f637473fdd11a5b5c45adbaa2343ddbe3f743834323c95b4cdb65bfb30b022731c4c0f613d011686d8d1a64396d30dca3a30d8ab63915f54e84
SSDEEP 768:5OUTP61NQUQRGVUZOEWGpg6hRRs8Qd+EqRPAhBeKPTvGfMzFV1ASXsZRgc3jwmyN:k+mRsZRxw/E0ADVq
TLSH
T118B365EF838A5756D3111332E7E20FAB847D243D4318124937AA31F9B6FA2637994DB1
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/payloads/AdobeFlash15.0-ru_RU/Install.sig

SHA256 bbdcfdb851010e04c39d7744df7a79e185365b472e9a923a797cbc2ee57b1119
MD5 62cb21d2c3b9e8a58d4d4ba2c8933e5a
SHA1 25e933f9b3d01e3127e3023e70d6b316a3f66d31
SHA512 1d1f3bab48c7c21e435e33f895b861738f7dbf14e46b4854846be44369c99ed99d58aaf2c69c33a377822ac3255e901e46271dcd7d1e2731779537e4aefaa3d1
TLSH
T1B221EA898974844232301FB06501ED4CDB14A1A1AD549F25CFE4C55726B14B23B1BA79
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/payloads/AdobeFlash15.0-ru_RU/Media_db.db

SHA256 98cc671fd52b678576f890461cca668c920691c40f1c355b2cf7a89cafbc2017
MD5 5e94ede25ad07296d1e88b0f5c348d03
SHA1 875a8aa6da8a2cd082e958720ce9ef1d25a77cce
SHA512 726093b2bbb32bacaaf44858c4ea08b1dab08c5b44185d6375496859fc8f4493862d958bc2be0f10ab2213a1fa40dc26f4d545f20df7a0deddf3110bd6def77b
SSDEEP 768:Kb1+qGcOOnbzw+cF/+S+zSpVAMkS8Ah/+yLV31Qv:J/sbOIrSpV0ELwv
TLSH
T10A738B814821E81AF3387AF20DF413BF659849FFC620C515221F6FAF95638D71E2D96A
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/payloads/Media_db.db

SHA256 2a1724fa875e8d964aae05ff06c8cb3ce9b47af9c4105685e9239cbc5eaf3266
MD5 982c107700631c882e2553e48829528f
SHA1 5efef4b66db45354476bc330b71354c356359865
SHA512 7a9561a7bd40621ddda050e0984e537f61b202d4b19700050101842e65804a51a5884ace9e14e4197279163764b07ea5bf5ab255b1fb61507f3ebc4636c46282
SSDEEP 24576:x617vwJr64AHz4LxZjWxPqfC6ia9j+R0Z9SaODMXRSTtuQgMHnTxibiJ8mABodvT:oT6SxSfFia9j+R0Z9SaODMXRS7l0lpgP
TLSH
T14F066EB9648438BBD74153BAD5D0ABA9FEADC0FFD301D140309F6A5F21C6998832F469
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/payloads/Media_db.sig

SHA256 05cd105eb9e2f5edcb0918d165f52b751b8daabb92ce67705436c4b7d469b10f
MD5 837717ac199df479d4cfb7c0eead9092
SHA1 5868ba854797607f3af8334f701fafa130e2427b
SHA512 a7b3afb99c6695204fdf246046bab18948be8ce2a9d07b3d3be497a52c2c382b78f3deb5955c85158d8a9ae16568b19d8474e6a17689bd8947f4b1d0ded1fcbc
TLSH
T16121EADB74D078A0AEB14F92BD92C5525703C75B015046CCB5D1C23B1D3A5402D8B5FE
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/payloads/Microsoft VC 2008 Redist (x86)/Media_db.db

SHA256 8d046724514ee60af66105b216a1800ff73693180dab97c7bac07277db98131d
MD5 58ca5bef1f662730d1bcad127a59a222
SHA1 03962365728f3765042f4cb091c101660dc20f4d
SHA512 31910b8b3ee36462927823952bfb32aaa1120556641d4d826d54fce68170f4b14c29df96d95055afa832f4370b6cb721da774c28e20f17c40c99c935596b4b3e
SSDEEP 384:lt8w8M8M3O+49OTX9L8sG48dh80L8Q8W80878378JhN8b78JhR:R3O+i7a
TLSH
T1BAC274DDCA64B35CEEB0D9F0C1E0CE61AC0D6E4F5BA042D453D962F9D28B983913A036
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/payloads/Microsoft VC 2008 Redist (x86)/vcredist_x86.exe

IMPHASH 092eb6daba2f17cbda102fd1a32acd00
SHA256 6b3e4c51c6c0e5f68c8a72b497445af3dbf976394cbb62aa23569065c28deeb6
MD5 35da2bf2befd998980a495b6f4f55e60
SHA1 470640aa4bb7db8e69196b5edb0010933569e98d
SHA512 bf630667c87b8f10ef85b61f2f379d7ce24124618b999babfec8e2df424eb494b8f1bf0977580810dff5124d4dbdec9539ff53e0dc14625c076fa34dfe44e3f2
SSDEEP 98304:vT4tlQ0aeY51XNURYxaA6qjEb9tRuPmBmWBDLTMTtbslyzRt9cuISY6Qa:vKlhE9U6476itR+mLPw6lyZY61
TLSH
T1982633EE1E32462AD70B42B2E4352783D578F0A68C7B8DD79D93553EE1E3266FA10046
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

d0:b8:36:c9:ae:3b:cb:20:6d:59:26:4f:5f:9c:95:6f:4b:15:75:3a

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 19, 2011

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

2

Major OS version

5

Entry point

22898

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP IMAGE_FILE_NET_RUN_FROM_SWAP

PDB paths

kernel32

GetDriveTypeA HeapFree FormatMessageA LeaveCriticalSection DeleteFileA EnterCriticalSection TerminateProcess WaitForMultipleObjects CreateEventW SetEvent Sleep SetEnvironmentVariableA GetEnvironmentVariableA WideCharToMultiByte HeapAlloc SetLastError WriteFile MoveFileA ExitProcess DeleteCriticalSection FlushFileBuffers GetVersionExA WaitForSingleObject OpenEventA GetCurrentProcess GetFileAttributesA GetCommandLineA GetModuleFileNameA CreateFileA FindNextFileA FindFirstFileA CopyFileA SetFileAttributesA SystemTimeToFileTime GetSystemTime GetDiskFreeSpaceA QueryDosDeviceA GetCurrentDirectoryA SetEndOfFile SetFileTime LocalFileTimeToFileTime DosDateTimeToFileTime GetExitCodeProcess CreateProcessA ExpandEnvironmentStringsA GetFileSize CreateThread CreateEventA GetProcessHeap InitializeCriticalSectionAndSpinCount GetModuleHandleA QueryPerformanceCounter GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime SetUnhandledExceptionFilter CloseHandle DeviceIoControl GetSystemDirectoryA LoadLibraryA GetProcAddress FreeLibrary SetErrorMode GetTickCount CreateDirectoryA GetLastError RemoveDirectoryA MoveFileExA SetFilePointer FindClose ReadFile

msvcrt

strchr _strnicmp _stricmp strrchr _strlwr strncpy strstr _snprintf sprintf

advapi32

AllocateAndInitializeSid GetTokenInformation GetLengthSid InitiateSystemShutdownA CryptReleaseContext CryptGenRandom CryptAcquireContextA SetSecurityDescriptorDacl AddAccessAllowedAce InitializeAcl InitializeSecurityDescriptor OpenProcessToken

user32

ShowWindow SendDlgItemMessageA SendMessageA DialogBoxParamA LoadStringA EndDialog SetParent MessageBoxA

ntdll

NtShutdownSystem NtAdjustPrivilegesToken NtClose NtOpenProcessToken

comctl32

ord17

shell32

SHBrowseForFolderA SHGetPathFromIDListA

Adobe CC 2015/payloads/Microsoft VC 2010 Redist (x64)/Media_db.db

SHA256 861801b1fa1c5fba74bccf1803a112381bab42bdaae5d40d1e6eab21159d5151
MD5 a0ffe6bc1bf86bf19fa0fdfa21eac2da
SHA1 8c48f586f2b95bf43940cd3fc0be6f26aad8b3ed
SHA512 1dc21bc3ce6b6fc1da5be7125e216cf2bf0dc4f18cbbcff22b9a0ea0a46e96e132daa0a7f948b18e01eb0ed257d314f8b16144af6e6b2b570bfb73681e746a5b
SSDEEP 384:lBV5VPk3O+49E+g7VAQKDgROYKBjlrr3lr5:S3O+iYw
TLSH
T134C2749ECA547394DAB1D6F0C280CE60AD1D1B5F6BA042D453D852ECE18B6C3A53E435
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/payloads/Microsoft VC 2010 Redist (x64)/vcredist_x64.exe

IMPHASH a1f6f100bff4507a3332f3f0cdfc24f5
SHA256 cc7ec044218c72a9a15fca2363baed8fc51095ee3b2a7593476771f9eba3d223
MD5 c9d9eebccef20d637f193490cec05e79
SHA1 15d032d669078aa6f0f7fd1cbf4115a070bd034d
SHA512 24b56b5d9b48d75baf53a98e007ace3e7d68fbd5fa55b75ae1a2c08dd466d20b13041f80e84fdb64b825f070843f9247daba681eff16baf99a4b14ea99f5cfd6
SSDEEP 196608:n9A3D5MBD0vwqMKgL29M2JWMWiKV/nPlnqIaAAVINqsAsbPnpCxmz7dU8:23D5MBwZMd0b4oSQ7VSrAs1gEdU8
TLSH
T189A6332DD2128E2EFEDB3730E1EE94EAD064D244C25722C3F15BB186B6B768D171E641
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

3e:29:68:50:9f:c0:15:85:b2:43:f6:40:df:72:7e:8c:87:c3:b3:4f

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 29, 2011

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

2

Major OS version

5

Entry point

25599

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP IMAGE_FILE_NET_RUN_FROM_SWAP

PDB paths

sfxcab.pdb

msvcrt

__setusermatherr _initterm __getmainargs __initenv exit _cexit _adjust_fdiv _exit _c_exit strncpy strstr _strlwr strrchr _stricmp __p__commode __p__fmode __set_app_type _except_handler3 _controlfp _XcptFilter _snprintf sprintf strchr _strnicmp _vsnprintf

advapi32

InitializeAcl AddAccessAllowedAce SetSecurityDescriptorDacl CryptAcquireContextA CryptGenRandom CryptReleaseContext AllocateAndInitializeSid OpenProcessToken GetTokenInformation GetLengthSid InitiateSystemShutdownA InitializeSecurityDescriptor

kernel32

CreateThread GetFileSize ExpandEnvironmentStringsA CreateProcessA GetExitCodeProcess InitializeCriticalSectionAndSpinCount LocalFileTimeToFileTime SetFileTime SetEndOfFile CreateEventA QueryDosDeviceA GetDiskFreeSpaceA GetSystemTime QueryPerformanceCounter GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentDirectoryA GetProcessHeap CopyFileA SetFileAttributesA DosDateTimeToFileTime SetEvent GetVersionExA ReadFile SetFilePointer MoveFileExA RemoveDirectoryA GetLastError CreateDirectoryA GetTickCount SetErrorMode FreeLibrary GetProcAddress LoadLibraryA GetSystemDirectoryA CloseHandle DeviceIoControl CreateFileA GetDriveTypeA HeapFree FormatMessageA LeaveCriticalSection DeleteFileA EnterCriticalSection TerminateProcess WaitForMultipleObjects CreateEventW FindFirstFileA Sleep SetEnvironmentVariableA GetEnvironmentVariableA WideCharToMultiByte HeapAlloc SetLastError WriteFile MoveFileA ExitProcess DeleteCriticalSection FlushFileBuffers WaitForSingleObject OpenEventA GetCurrentProcess GetFileAttributesA GetCommandLineA GetModuleFileNameA FindClose FindNextFileA SystemTimeToFileTime

user32

SendDlgItemMessageA SendMessageA DialogBoxParamA MessageBoxA SetParent EndDialog LoadStringA ShowWindow

ntdll

NtOpenProcessToken NtAdjustPrivilegesToken NtClose NtShutdownSystem

comctl32

ord17

shell32

SHBrowseForFolderA SHGetPathFromIDListA

Adobe CC 2015/payloads/Microsoft VC 2010 Redist (x86)/Media_db.db

SHA256 88ef667160b32dbf044b7d9009be6c884119afc91ee275e8ae06201745b769ee
MD5 a3549c530dd28e9b249d98744089dc18
SHA1 73993f1a91e1ab3221343cac600268bd08e4731a
SHA512 6c1340fca5b47092b2a734962516529fea1302f2847346addc14d7d3ffedc1951f717df2a918eb4f4868bc6888cbcccbbdf9a9a93c6cb067219066ca473cf665
SSDEEP 384:lcALc3O+49tyXnVsQKPVVSUul3lJhrblJh5:I3O+iDs
TLSH
T1CFC2839DCA647354DAB1A6F4C2C0CE60AC1D5E5F5FA002D853D952ECE28BEC3A43A035
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/payloads/Microsoft VC 2010 Redist (x86)/vcredist_x86.exe

IMPHASH a1f6f100bff4507a3332f3f0cdfc24f5
SHA256 67313b3d1bc86e83091e8de22981f14968f1a7fb12eb7ad467754c40cd94cc3d
MD5 1801436936e64598bab5b87b37dc7f87
SHA1 28c54491be70c38c97849c3d8cfbfdd0d3c515cb
SHA512 0b8f20b0f171f49eb49367f1aafa7101e1575ef055d7007197c21ab8fe8d75a966569444449858c31bd147357d2bf5a5bd623fe6c4dbabdc7d16999b3256ab8c
SSDEEP 196608:e9A3DAnfudQZKuNK0kMp2Wxw2tr3aA5Jegn9kaK6Hj0aaNz9ZBJ7C:t3DAnGKZKuNK0SvAn9kaK6gaaNRZbC
TLSH
T1789633D714300ADFFC07BB70F7568555D8E9496233A8D7EA4AC60CC89AEEAE4C0B6750
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

58:5d:c5:26:99:03:d9:98:d7:bd:f4:32:05:e3:4e:3b:e4:dd:15:47

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 29, 2011

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

2

Major OS version

5

Entry point

25599

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP IMAGE_FILE_NET_RUN_FROM_SWAP

PDB paths

sfxcab.pdb

msvcrt

__setusermatherr _initterm __getmainargs __initenv exit _cexit _adjust_fdiv _exit _c_exit strncpy strstr _strlwr strrchr _stricmp __p__commode __p__fmode __set_app_type _except_handler3 _controlfp _XcptFilter _snprintf sprintf strchr _strnicmp _vsnprintf

advapi32

InitializeAcl AddAccessAllowedAce SetSecurityDescriptorDacl CryptAcquireContextA CryptGenRandom CryptReleaseContext AllocateAndInitializeSid OpenProcessToken GetTokenInformation GetLengthSid InitiateSystemShutdownA InitializeSecurityDescriptor

kernel32

CreateThread GetFileSize ExpandEnvironmentStringsA CreateProcessA GetExitCodeProcess InitializeCriticalSectionAndSpinCount LocalFileTimeToFileTime SetFileTime SetEndOfFile CreateEventA QueryDosDeviceA GetDiskFreeSpaceA GetSystemTime QueryPerformanceCounter GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentDirectoryA GetProcessHeap CopyFileA SetFileAttributesA DosDateTimeToFileTime SetEvent GetVersionExA ReadFile SetFilePointer MoveFileExA RemoveDirectoryA GetLastError CreateDirectoryA GetTickCount SetErrorMode FreeLibrary GetProcAddress LoadLibraryA GetSystemDirectoryA CloseHandle DeviceIoControl CreateFileA GetDriveTypeA HeapFree FormatMessageA LeaveCriticalSection DeleteFileA EnterCriticalSection TerminateProcess WaitForMultipleObjects CreateEventW FindFirstFileA Sleep SetEnvironmentVariableA GetEnvironmentVariableA WideCharToMultiByte HeapAlloc SetLastError WriteFile MoveFileA ExitProcess DeleteCriticalSection FlushFileBuffers WaitForSingleObject OpenEventA GetCurrentProcess GetFileAttributesA GetCommandLineA GetModuleFileNameA FindClose FindNextFileA SystemTimeToFileTime

user32

SendDlgItemMessageA SendMessageA DialogBoxParamA MessageBoxA SetParent EndDialog LoadStringA ShowWindow

ntdll

NtOpenProcessToken NtAdjustPrivilegesToken NtClose NtShutdownSystem

comctl32

ord17

shell32

SHBrowseForFolderA SHGetPathFromIDListA

Adobe CC 2015/payloads/Microsoft VC 2012 Redist (x64)/Media_db.db

SHA256 fb9dd730c6c2db8168c520d9f594f4c6eea2329988e9d82bbec793c919e498b3
MD5 7959e05d30c8d095a74daad14049cbe8
SHA1 d80d11b577bf3672e5bff4faf1e33a948db60b66
SHA512 7807a12fcd51f8ad9e832c92c1305a112cdc97c1b05305db7720701085dadd4b427cfafa2fdf86c9e4a7b85d439253dc5a4b41bf472a63a6a253284b0932c5c3
SSDEEP 192:T9UsgSnDAtIt9tYXF4NviK1+COLf+cKIvjTrd3TrlR:5UsgMDAtIreid1+C/cKIvjTrd3TrL
TLSH
T137D262DECA547728DAF096B0C280DD61AD1D5A4FAF9042D853D421FDE28B583A13F03A
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/payloads/Microsoft VC 2012 Redist (x64)/vcredist_x64.exe

IMPHASH 33c6db41ca15b47cfcec52de6c2ab2b7
SHA256 681be3e5ba9fd3da02c09d7e565adfa078640ed66a0d58583efad2c1e3cc4064
MD5 3c03562b5af9ed347614053d459d7778
SHA1 1a5d93dddbc431ab27b1da711cd3370891542797
SHA512 6c2f4eeb38705c2dafc4d75d8de0036a0aed197f83e9cb261d255fe26e4391f24b0b156e9019c739dd99057041c2bb80f9ab80f56869bc1e01f0469a76f24f75
SSDEEP 98304:vRWKtOl5CCGomEBkHUBmExJrIUg32t9RRyvo7VnOcyP24Vc35re94tb0eYbY1poo:v3tO3CCT/hBxtVtyUVnmSprzVIY7QKAk
TLSH
T1B876333286989427D1A32073F618D5217FBCB15C1F1048ABD3549A6D3B68AC6BEFB347
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

Digest

f9:21:a8:7f:5a:3b:9a:0a:03:ac:c7:ff:64:14:0d:fb:d7:83:d6:35:6f:b3:45:b4:6a:5d:07:98:a0:f2:ce:30

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 30, 2013

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

PE Signature issue

Digest

fa:4d:cd:f6:4c:96:60:0c:ed:96:a4:ab:84:4d:56:72:9b:e5:6f:2f

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 30, 2013

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:C0F4-3086-DEF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:2b:39:32:48:c1:b2:c9:48:f3:00:00:00:00:00:2b

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 4, 2012 - Dec 4, 2013

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:b0:11:af:0a:8b:d0:3b:9f:dd:00:01:00:00:00:b0

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jan 24, 2013 - Apr 24, 2014

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:33:26:1a:00:00:00:00:00:31

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 31, 2010 - Aug 31, 2020

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:16:68:34:00:00:00:00:00:1c

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 3, 2007 - Apr 3, 2021

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:1a:77:bb:74:b3:07:d1:16:b8:00:00:00:00:00:1a

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 24, 2013 - Dec 24, 2014

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:09:81:2a:00:00:00:00:00:02

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jul 1, 2010 - Jul 1, 2025

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:BBEC-30CA-2DBE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:2c:d7:29:77:3b:67:cc:1b:c6:00:00:00:00:00:2c

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 27, 2013 - Jun 27, 2014

Minor OS version

1

Major OS version

5

Entry point

18251

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP IMAGE_FILE_NET_RUN_FROM_SWAP

PDB paths

E:\delivery\Dev\wix36_dev11\build\ship\x86\x86\burn.pdb

kernel32

CopyFileExW MapViewOfFile CreateFileMappingW CreateMutexW SetFileTime LocalFileTimeToFileTime DosDateTimeToFileTime ResetEvent SetEndOfFile DeleteFileW GetThreadLocale UnmapViewOfFile GetFullPathNameW GetTempFileNameW CreateDirectoryW GetLocalTime SetFilePointer GetComputerNameW CreateFileA GetProcessHeap GetModuleHandleA CopyFileW MoveFileExW GlobalFree GlobalAlloc GetFileSizeEx GetCurrentDirectoryW SystemTimeToFileTime SystemTimeToTzSpecificLocalTime RaiseException GetConsoleCP GetConsoleMode SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW FormatMessageW HeapSetInformation GetStartupInfoW SetUnhandledExceptionFilter GetModuleHandleW Sleep GetProcAddress ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId GetLastError InterlockedDecrement HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent FreeLibrary InterlockedExchange LoadLibraryA InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage HeapAlloc VirtualAlloc HeapReAlloc RtlUnwind HeapSize GetLocaleInfoA WideCharToMultiByte GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW GetTimeZoneInformation CompareStringW InitializeCriticalSection CloseHandle LocalFree ReleaseMutex GetVersionExW GetProcessId ReadFile CreateNamedPipeW ConnectNamedPipe SetNamedPipeHandleState lstrlenW WaitForSingleObject OpenProcess CreateFileW SetFilePointerEx lstrlenA RemoveDirectoryW GetFileAttributesW ExpandEnvironmentStringsW VerifyVersionInfoW VerSetConditionMask GetTempPathW GetSystemDirectoryW GetSystemWow64DirectoryW GetVolumePathNameW GetWindowsDirectoryW GetSystemDefaultLangID GetUserDefaultLangID GetDateFormatW GetSystemTime LoadLibraryW InterlockedCompareExchange GetExitCodeThread CreateThread SetEvent WaitForMultipleObjects CreateEventW ProcessIdToSessionId SetFileAttributesW FindClose FindNextFileW FindFirstFileW CreateProcessW GetExitCodeProcess SetThreadExecutionState FlushFileBuffers

msi

ord171 ord45 ord137 ord125 ord17 ord8 ord141 ord238 ord190 ord88 ord90 ord173 ord111 ord70 ord169 ord118 ord115 ord116 ord205

shell32

SHGetFolderPathW ShellExecuteExW CommandLineToArgvW

rpcrt4

UuidCreate

wininet

HttpQueryInfoW InternetCrackUrlW InternetSetOptionW InternetConnectW InternetCloseHandle InternetOpenW HttpAddRequestHeadersW HttpOpenRequestW InternetErrorDlg InternetReadFile HttpSendRequestW

wintrust

WinVerifyTrust WTHelperGetProvSignerFromChain WTHelperProvDataFromStateData CryptCATAdminCalcHashFromFileHandle

crypt32

CertGetCertificateContextProperty CryptHashPublicKeyInfo

gdi32

DeleteDC DeleteObject GetObjectW CreateCompatibleDC SelectObject StretchBlt

cabinet

ord23 ord22 ord20

advapi32

CryptAcquireContextW CryptCreateHash CryptHashData CryptGetHashParam CryptDestroyHash CryptReleaseContext SetNamedSecurityInfoW AllocateAndInitializeSid CheckTokenMembership RegDeleteKeyW RegCreateKeyExW RegEnumKeyExW RegEnumValueW RegQueryInfoKeyW RegSetValueExW InitializeSecurityDescriptor SetEntriesInAclA SetSecurityDescriptorOwner SetSecurityDescriptorGroup SetSecurityDescriptorDacl RegOpenKeyExW GetTokenInformation OpenSCManagerW OpenServiceW QueryServiceStatus CloseServiceHandle ChangeServiceConfigW DecryptFileW SetEntriesInAclW InitializeAcl CreateWellKnownSid InitiateSystemShutdownExW GetUserNameW RegQueryValueExW RegDeleteValueW RegCloseKey ConvertStringSecurityDescriptorToSecurityDescriptorW OpenProcessToken LookupPrivilegeValueW AdjustTokenPrivileges QueryServiceConfigW

oleaut32

SysFreeString SysAllocString VariantInit VariantClear

ole32

CLSIDFromProgID CoInitializeSecurity CoTaskMemFree CoCreateInstance CoInitialize CoInitializeEx CoUninitialize StringFromGUID2

user32

LoadBitmapW IsWindow PostMessageW PeekMessageW GetMessageW GetWindowLongW SetWindowLongW DefWindowProcW UnregisterClassW DispatchMessageW TranslateMessage IsDialogMessageW CreateWindowExW RegisterClassW MsgWaitForMultipleObjects LoadCursorW PostQuitMessage GetCursorPos MonitorFromPoint GetMonitorInfoW PostThreadMessageW MessageBoxW

version

GetFileVersionInfoW VerQueryValueW GetFileVersionInfoSizeW

Name

.text

Size

312KB

Virtual Size

312KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.wixburn

Size

512B

Virtual Size

56B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

9B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

16KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Adobe CC 2015/payloads/Microsoft VC 2012 Redist (x86)/Media_db.db

SHA256 586ad436b309ea80e68b290c67b8614d81a90eb10486c112f88f96fa100e080a
MD5 086fcfb49f9423998cf91fcc0e3c5284
SHA1 37b079a99097f31d366c290bfc2300e91cc1d6fd
SHA512 b0f843163896543b33cd90adae98c696a955d692d7a5433ce9bf1e22d5794ddf0b74408bae7005e09fd69af712c4ea2f0bea2ef512dbe5d60ecde86aa6f016b0
SSDEEP 192:YAXHDstIAYXnBPK1+CODf+Q28T3TJhdbTJhlR:YAXHDstI/n81+CDQ28T3TJhdbTJhL
TLSH
T1BED250CECE087728DAF092F4D2C0DD61AC1C5E5F9FA041D853D452E9E28B983A13B43A
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/payloads/Microsoft VC 2012 Redist (x86)/vcredist_x86.exe

IMPHASH 33c6db41ca15b47cfcec52de6c2ab2b7
SHA256 b924ad8062eaf4e70437c8be50fa612162795ff0839479546ce907ffa8d6e386
MD5 7f52a19ecaf7db3c163dd164be3e592e
SHA1 96b377a27ac5445328cbaae210fc4f0aaa750d3f
SHA512 60220a7c9de72796bd0d6d44e2b82dbdd9c850cc611e505b7dc0213f745ff1f160b2d826eaf62fd6e07c1a31786a71d83dc6e94389690fd59b895e85aba7444b
SSDEEP 196608:OwKjLs+UIkzHlAv4X6zQRgiwHLD2LQIX/:9KjaxFFP1iLD2LnP
TLSH
T149663333B9549032D26214B3E555D670BE3D70282F2048FB9794DB1A39B89C6BBFB247
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

Digest

51:3c:0e:d0:e9:29:66:d4:05:e1:26:24:9d:da:d9:c0:63:79:c5:68:38:c7:69:c5:25:f3:62:ab:0e:b8:a4:f6

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 30, 2013

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

PE Signature issue

Digest

8c:12:40:11:a9:d9:22:02:f1:9b:18:34:2a:70:2d:89:dc:3c:69:a5

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 30, 2013

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:C0F4-3086-DEF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:2b:39:32:48:c1:b2:c9:48:f3:00:00:00:00:00:2b

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 4, 2012 - Dec 4, 2013

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:b0:11:af:0a:8b:d0:3b:9f:dd:00:01:00:00:00:b0

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jan 24, 2013 - Apr 24, 2014

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:33:26:1a:00:00:00:00:00:31

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 31, 2010 - Aug 31, 2020

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:16:68:34:00:00:00:00:00:1c

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 3, 2007 - Apr 3, 2021

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:1a:77:bb:74:b3:07:d1:16:b8:00:00:00:00:00:1a

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 24, 2013 - Dec 24, 2014

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:09:81:2a:00:00:00:00:00:02

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jul 1, 2010 - Jul 1, 2025

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:BBEC-30CA-2DBE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:2c:d7:29:77:3b:67:cc:1b:c6:00:00:00:00:00:2c

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 27, 2013 - Jun 27, 2014

Minor OS version

1

Major OS version

5

Entry point

18251

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP IMAGE_FILE_NET_RUN_FROM_SWAP

PDB paths

E:\delivery\Dev\wix36_dev11\build\ship\x86\x86\burn.pdb

kernel32

CopyFileExW MapViewOfFile CreateFileMappingW CreateMutexW SetFileTime LocalFileTimeToFileTime DosDateTimeToFileTime ResetEvent SetEndOfFile DeleteFileW GetThreadLocale UnmapViewOfFile GetFullPathNameW GetTempFileNameW CreateDirectoryW GetLocalTime SetFilePointer GetComputerNameW CreateFileA GetProcessHeap GetModuleHandleA CopyFileW MoveFileExW GlobalFree GlobalAlloc GetFileSizeEx GetCurrentDirectoryW SystemTimeToFileTime SystemTimeToTzSpecificLocalTime RaiseException GetConsoleCP GetConsoleMode SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW FormatMessageW HeapSetInformation GetStartupInfoW SetUnhandledExceptionFilter GetModuleHandleW Sleep GetProcAddress ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId GetLastError InterlockedDecrement HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent FreeLibrary InterlockedExchange LoadLibraryA InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage HeapAlloc VirtualAlloc HeapReAlloc RtlUnwind HeapSize GetLocaleInfoA WideCharToMultiByte GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW GetTimeZoneInformation CompareStringW InitializeCriticalSection CloseHandle LocalFree ReleaseMutex GetVersionExW GetProcessId ReadFile CreateNamedPipeW ConnectNamedPipe SetNamedPipeHandleState lstrlenW WaitForSingleObject OpenProcess CreateFileW SetFilePointerEx lstrlenA RemoveDirectoryW GetFileAttributesW ExpandEnvironmentStringsW VerifyVersionInfoW VerSetConditionMask GetTempPathW GetSystemDirectoryW GetSystemWow64DirectoryW GetVolumePathNameW GetWindowsDirectoryW GetSystemDefaultLangID GetUserDefaultLangID GetDateFormatW GetSystemTime LoadLibraryW InterlockedCompareExchange GetExitCodeThread CreateThread SetEvent WaitForMultipleObjects CreateEventW ProcessIdToSessionId SetFileAttributesW FindClose FindNextFileW FindFirstFileW CreateProcessW GetExitCodeProcess SetThreadExecutionState FlushFileBuffers

msi

ord171 ord45 ord137 ord125 ord17 ord8 ord141 ord238 ord190 ord88 ord90 ord173 ord111 ord70 ord169 ord118 ord115 ord116 ord205

shell32

SHGetFolderPathW ShellExecuteExW CommandLineToArgvW

rpcrt4

UuidCreate

wininet

HttpQueryInfoW InternetCrackUrlW InternetSetOptionW InternetConnectW InternetCloseHandle InternetOpenW HttpAddRequestHeadersW HttpOpenRequestW InternetErrorDlg InternetReadFile HttpSendRequestW

wintrust

WinVerifyTrust WTHelperGetProvSignerFromChain WTHelperProvDataFromStateData CryptCATAdminCalcHashFromFileHandle

crypt32

CertGetCertificateContextProperty CryptHashPublicKeyInfo

gdi32

DeleteDC DeleteObject GetObjectW CreateCompatibleDC SelectObject StretchBlt

cabinet

ord23 ord22 ord20

advapi32

CryptAcquireContextW CryptCreateHash CryptHashData CryptGetHashParam CryptDestroyHash CryptReleaseContext SetNamedSecurityInfoW AllocateAndInitializeSid CheckTokenMembership RegDeleteKeyW RegCreateKeyExW RegEnumKeyExW RegEnumValueW RegQueryInfoKeyW RegSetValueExW InitializeSecurityDescriptor SetEntriesInAclA SetSecurityDescriptorOwner SetSecurityDescriptorGroup SetSecurityDescriptorDacl RegOpenKeyExW GetTokenInformation OpenSCManagerW OpenServiceW QueryServiceStatus CloseServiceHandle ChangeServiceConfigW DecryptFileW SetEntriesInAclW InitializeAcl CreateWellKnownSid InitiateSystemShutdownExW GetUserNameW RegQueryValueExW RegDeleteValueW RegCloseKey ConvertStringSecurityDescriptorToSecurityDescriptorW OpenProcessToken LookupPrivilegeValueW AdjustTokenPrivileges QueryServiceConfigW

oleaut32

SysFreeString SysAllocString VariantInit VariantClear

ole32

CLSIDFromProgID CoInitializeSecurity CoTaskMemFree CoCreateInstance CoInitialize CoInitializeEx CoUninitialize StringFromGUID2

user32

LoadBitmapW IsWindow PostMessageW PeekMessageW GetMessageW GetWindowLongW SetWindowLongW DefWindowProcW UnregisterClassW DispatchMessageW TranslateMessage IsDialogMessageW CreateWindowExW RegisterClassW MsgWaitForMultipleObjects LoadCursorW PostQuitMessage GetCursorPos MonitorFromPoint GetMonitorInfoW PostThreadMessageW MessageBoxW

version

GetFileVersionInfoW VerQueryValueW GetFileVersionInfoSizeW

Name

.text

Size

312KB

Virtual Size

312KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.wixburn

Size

512B

Virtual Size

56B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

9B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

16KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Adobe CC 2015/payloads/Microsoft VC 2013 Redist (x64)/Media_db.db

SHA256 094f1174cdab1a620439dfdf4cfe65b3b775f090965f29d289717fc3f8e593ef
MD5 1799a19786e524248fd39c267466b1da
SHA1 fdd3bf0225074d6cab88e137e73e0868e8c564b4
SHA512 26077645c5f77a1ac60f450f72257cafc32cf3c2dce7be85a62ca110e87b11a9f61ba81848cae1aaba6a415c81c4952b8762bbb0cf314ca6bb2bb0a615df132b
SSDEEP 192:PTEzT8IsbrxF5rEDq1/vujcrW3crrThD8R7sWVY3:LEzTiFNf1/vujcrW3cr+RdY3
TLSH
T1F3D2649DCF087F6CC9F092B5D2819D616D5E2E0FAB9042D453E721F9D287583A13E03A
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/payloads/Microsoft VC 2013 Redist (x64)/vcredist_x64.exe

IMPHASH dcbe94b8cc54b8e53867c61cc96811d6
SHA256 e554425243e3e8ca1cd5fe550db41e6fa58a007c74fad400274b128452f38fb8
MD5 96b61b8e069832e6b809f24ea74567ba
SHA1 8bf41ba9eef02d30635a10433817dbb6886da5a2
SHA512 3a55dce14bbd455808bd939a5008b67c9c7111cab61b1339528308022e587726954f8c55a597c6974dc543964bdb6532fe433556fbeeaf9f8cb4d95f2bbffc12
SSDEEP 196608:19OaQ54oYY7jLwXjZ41OON2uk3bQWgtyccMEL:Gz5x7jLXkmkU4cFe
TLSH
T131763331E7B05023D6F201B2E411D528BD3DB2291F109CAAD794DD2D3AA9AD6E7F7213
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

Digest

2b:f8:ab:c0:0e:bd:66:17:f3:88:d4:c2:ed:ee:9e:c8:b7:72:a3:88:31:d9:3b:3b:8f:74:9b:40:1e:cc:4a:48

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

May 1, 2014

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

PE Signature issue

Digest

9f:b7:ab:91:35:d2:5f:20:d4:e3:b8:4e:41:38:9b:0b:57:4d:91:b9

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

May 1, 2014

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:B8EC-30A4-7144,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:34:24:31:40:c9:a0:c1:79:8d:00:00:00:00:00:34

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 27, 2013 - Jun 27, 2014

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:ca:6c:d5:32:12:35:c4:e1:55:00:01:00:00:00:ca

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 22, 2014 - Jul 22, 2015

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:33:26:1a:00:00:00:00:00:31

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 31, 2010 - Aug 31, 2020

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:16:68:34:00:00:00:00:00:1c

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 3, 2007 - Apr 3, 2021

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:1a:77:bb:74:b3:07:d1:16:b8:00:00:00:00:00:1a

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 24, 2013 - Dec 24, 2014

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:09:81:2a:00:00:00:00:00:02

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jul 1, 2010 - Jul 1, 2025

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7D2E-3782-B0F7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:2d:25:81:14:5f:a2:d5:f2:d3:00:00:00:00:00:2d

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 27, 2013 - Jun 27, 2014

Minor OS version

1

Major OS version

5

Entry point

163358

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

E:\delivery\Dev\wix37\build\ship\x86\burn.pdb

advapi32

AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken ConvertStringSecurityDescriptorToSecurityDescriptorW RegCloseKey RegDeleteValueW RegQueryValueExW GetUserNameW InitiateSystemShutdownExW CreateWellKnownSid InitializeAcl SetEntriesInAclW DecryptFileW ChangeServiceConfigW ControlService CloseServiceHandle QueryServiceStatus OpenServiceW OpenSCManagerW CryptAcquireContextW CryptCreateHash CryptHashData CryptGetHashParam CryptDestroyHash CryptReleaseContext RegDeleteKeyW RegCreateKeyExW RegEnumKeyExW RegEnumValueW RegQueryInfoKeyW RegSetValueExW SetEntriesInAclA SetSecurityDescriptorGroup RegOpenKeyExW GetTokenInformation CheckTokenMembership AllocateAndInitializeSid FreeSid LookupAccountNameW SetNamedSecurityInfoW InitializeSecurityDescriptor SetSecurityDescriptorDacl SetSecurityDescriptorOwner QueryServiceConfigW

user32

GetMessageW PeekMessageW PostMessageW PostThreadMessageW PostQuitMessage SetWindowLongW DefWindowProcW UnregisterClassW DispatchMessageW TranslateMessage GetMonitorInfoW IsDialogMessageW MessageBoxW GetWindowLongW RegisterClassW IsWindow MsgWaitForMultipleObjects WaitForInputIdle LoadCursorW LoadBitmapW GetCursorPos MonitorFromPoint CreateWindowExW

oleaut32

SysFreeString SysAllocString VariantInit VariantClear

gdi32

DeleteObject GetObjectW CreateCompatibleDC SelectObject DeleteDC StretchBlt

shell32

ShellExecuteExW SHGetFolderPathW CommandLineToArgvW

ole32

CoTaskMemFree CoInitializeSecurity CLSIDFromProgID CoCreateInstance CoInitialize StringFromGUID2 CoInitializeEx CoUninitialize

kernel32

ReadFile SetFilePointerEx CreateFileW GetCurrentProcessId GetProcessId WriteFile ConnectNamedPipe SetNamedPipeHandleState lstrlenW CompareStringW LocalFree CreateNamedPipeW WaitForSingleObject OpenProcess lstrlenA RemoveDirectoryW GetFileAttributesW ExpandEnvironmentStringsW LeaveCriticalSection EnterCriticalSection FreeLibrary GetProcAddress VerifyVersionInfoW VerSetConditionMask GetComputerNameW GetTempPathW GetSystemDirectoryW GetSystemWow64DirectoryW GetVolumePathNameW GetWindowsDirectoryW GetSystemDefaultLangID RtlUnwind GetDateFormatW GetSystemTime InterlockedExchange LoadLibraryW InterlockedCompareExchange GetExitCodeThread CreateThread SetEvent WaitForMultipleObjects CreateEventW ProcessIdToSessionId InterlockedIncrement InterlockedDecrement GetStringTypeW GetModuleHandleW FindClose FindNextFileW FindFirstFileW CreateProcessW SetCurrentDirectoryW GetCurrentDirectoryW GetExitCodeProcess DuplicateHandle SetThreadExecutionState CopyFileExW UnmapViewOfFile MapViewOfFile CreateFileMappingW CreateMutexW SetEndOfFile ResetEvent SetFileTime LocalFileTimeToFileTime DosDateTimeToFileTime CreateFileA CompareStringA GetSystemTimeAsFileTime VirtualFree VirtualAlloc DeleteFileW GetThreadLocale GetVersionExW GetCurrentThreadId TlsAlloc TlsSetValue ReleaseMutex GetLastError Sleep TlsGetValue CloseHandle DeleteCriticalSection GetTimeZoneInformation GetACP GetCPInfo RaiseException HeapAlloc HeapFree IsDebuggerPresent UnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent SystemTimeToTzSpecificLocalTime SystemTimeToFileTime GlobalAlloc GlobalFree SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode TlsFree InitializeCriticalSection GetCurrentProcess HeapSetInformation GetOEMCP SetFileAttributesW IsValidCodePage HeapSize HeapReAlloc LCMapStringW MultiByteToWideChar SetStdHandle WriteConsoleW FlushFileBuffers GetLocalTime FormatMessageW GetTempFileNameW GetFullPathNameW CreateDirectoryW GetProcessHeap GetModuleHandleA GetFileSizeEx GetUserDefaultLangID GetTickCount QueryPerformanceCounter HeapCreate SetLastError EncodePointer GetFileType InitializeCriticalSectionAndSpinCount SetHandleCount GetEnvironmentStringsW MoveFileExW FreeEnvironmentStringsW GetModuleFileNameW GetStdHandle DecodePointer GetCommandLineW GetStartupInfoW SetUnhandledExceptionFilter ExitProcess CopyFileW

cabinet

ord23 ord22 ord20

crypt32

CryptHashPublicKeyInfo CertGetCertificateContextProperty

msi

ord116 ord17 ord125 ord171 ord8 ord115 ord118 ord205 ord45 ord137 ord141 ord238 ord190 ord88 ord90 ord173 ord111 ord70 ord169

rpcrt4

UuidCreate

wininet

InternetCrackUrlW HttpQueryInfoW InternetCloseHandle HttpAddRequestHeadersW HttpOpenRequestW InternetErrorDlg InternetReadFile HttpSendRequestW InternetSetOptionW InternetConnectW InternetOpenW

wintrust

CryptCATAdminCalcHashFromFileHandle WTHelperProvDataFromStateData WTHelperGetProvSignerFromChain WinVerifyTrust

version

GetFileVersionInfoW GetFileVersionInfoSizeW VerQueryValueW

Name

.text

Size

227KB

Virtual Size

226KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

103KB

Virtual Size

102KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.wixburn

Size

512B

Virtual Size

56B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

9B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

14KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

17KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Adobe CC 2015/payloads/Microsoft VC 2013 Redist (x86)/Media_db.db

SHA256 c733beb6b8cb0a4e45f255e7f3ec9269d744fd526b96b6d0599f419cde4d9b1b
MD5 7149741bf5574e6cb9795df73eb22ed1
SHA1 748d8a34097aec6520b4f64f6d2382fc9b32dea2
SHA512 78d4a528fa2213dc8e378b3cea9fb53c080c80c8a580f15f4238f9c5bcdd5a2efa9a1d56abf3308a79f5cd44fab96a8209c8876134fa3062cec0561920484037
SSDEEP 192:PTEzTJwHBzdQDqBDzq3cJhWbcJhrTw9BVY3:LEzTgBBjBDzq3cJhWbcJhQVY3
TLSH
T152D2549ECF487F6CC9B092B4D1C19D506D1E2E5F6BA041D493E721F9D687983A13A03A
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/payloads/Microsoft VC 2013 Redist (x86)/vcredist_x86.exe

IMPHASH dcbe94b8cc54b8e53867c61cc96811d6
SHA256 a22895e55b26202eae166838edbe2ea6aad00d7ea600c11f8a31ede5cbce2048
MD5 0fc525b6b7b96a87523daa7a0013c69d
SHA1 df7f0a73bfa077e483e51bfb97f5e2eceedfb6a3
SHA512 729251371ed208898430040fe48cabd286a5671bd7f472a30e9021b68f73b2d49d85a0879920232426b139520f7e21321ba92646985216bf2f733c64e014a71d
SSDEEP 98304:hQEKzHx15bWUuBrNatjJh2eNUrzKRL/RaIswn7aBOC5qZxVqFb2iExMc7FvxwGvf:WRDnuBotjJh2emr8L/YIsG7MOgqHG64
TLSH
T13566233296642033D6F10873F469E2217E3E721C2F1188BAD294DC5D3EA95DAA7F7352
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

Digest

3f:c4:25:81:d5:e9:9a:60:b6:34:e2:5c:4c:27:94:7c:7d:b2:b0:62:45:49:72:9f:27:6e:3a:f5:b9:e7:7f:bd

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

May 1, 2014

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

PE Signature issue

Digest

85:c8:56:1b:b1:ff:1a:0a:28:75:4d:7c:00:d4:94:b5:a4:ea:82:68

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

May 1, 2014

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:F528-3777-8A76,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:33:e5:27:86:a3:0e:4a:2a:80:00:00:00:00:00:33

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 27, 2013 - Jun 27, 2014

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:ca:6c:d5:32:12:35:c4:e1:55:00:01:00:00:00:ca

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 22, 2014 - Jul 22, 2015

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:33:26:1a:00:00:00:00:00:31

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 31, 2010 - Aug 31, 2020

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:16:68:34:00:00:00:00:00:1c

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 3, 2007 - Apr 3, 2021

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:1a:77:bb:74:b3:07:d1:16:b8:00:00:00:00:00:1a

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 24, 2013 - Dec 24, 2014

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:09:81:2a:00:00:00:00:00:02

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jul 1, 2010 - Jul 1, 2025

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:31C5-30BA-7C91,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:2b:72:aa:2e:f6:49:bb:ec:d7:00:00:00:00:00:2b

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 27, 2013 - Jun 27, 2014

Minor OS version

1

Major OS version

5

Entry point

163358

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

E:\delivery\Dev\wix37\build\ship\x86\burn.pdb

advapi32

AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken ConvertStringSecurityDescriptorToSecurityDescriptorW RegCloseKey RegDeleteValueW RegQueryValueExW GetUserNameW InitiateSystemShutdownExW CreateWellKnownSid InitializeAcl SetEntriesInAclW DecryptFileW ChangeServiceConfigW ControlService CloseServiceHandle QueryServiceStatus OpenServiceW OpenSCManagerW CryptAcquireContextW CryptCreateHash CryptHashData CryptGetHashParam CryptDestroyHash CryptReleaseContext RegDeleteKeyW RegCreateKeyExW RegEnumKeyExW RegEnumValueW RegQueryInfoKeyW RegSetValueExW SetEntriesInAclA SetSecurityDescriptorGroup RegOpenKeyExW GetTokenInformation CheckTokenMembership AllocateAndInitializeSid FreeSid LookupAccountNameW SetNamedSecurityInfoW InitializeSecurityDescriptor SetSecurityDescriptorDacl SetSecurityDescriptorOwner QueryServiceConfigW

user32

GetMessageW PeekMessageW PostMessageW PostThreadMessageW PostQuitMessage SetWindowLongW DefWindowProcW UnregisterClassW DispatchMessageW TranslateMessage GetMonitorInfoW IsDialogMessageW MessageBoxW GetWindowLongW RegisterClassW IsWindow MsgWaitForMultipleObjects WaitForInputIdle LoadCursorW LoadBitmapW GetCursorPos MonitorFromPoint CreateWindowExW

oleaut32

SysFreeString SysAllocString VariantInit VariantClear

gdi32

DeleteObject GetObjectW CreateCompatibleDC SelectObject DeleteDC StretchBlt

shell32

ShellExecuteExW SHGetFolderPathW CommandLineToArgvW

ole32

CoTaskMemFree CoInitializeSecurity CLSIDFromProgID CoCreateInstance CoInitialize StringFromGUID2 CoInitializeEx CoUninitialize

kernel32

ReadFile SetFilePointerEx CreateFileW GetCurrentProcessId GetProcessId WriteFile ConnectNamedPipe SetNamedPipeHandleState lstrlenW CompareStringW LocalFree CreateNamedPipeW WaitForSingleObject OpenProcess lstrlenA RemoveDirectoryW GetFileAttributesW ExpandEnvironmentStringsW LeaveCriticalSection EnterCriticalSection FreeLibrary GetProcAddress VerifyVersionInfoW VerSetConditionMask GetComputerNameW GetTempPathW GetSystemDirectoryW GetSystemWow64DirectoryW GetVolumePathNameW GetWindowsDirectoryW GetSystemDefaultLangID RtlUnwind GetDateFormatW GetSystemTime InterlockedExchange LoadLibraryW InterlockedCompareExchange GetExitCodeThread CreateThread SetEvent WaitForMultipleObjects CreateEventW ProcessIdToSessionId InterlockedIncrement InterlockedDecrement GetStringTypeW GetModuleHandleW FindClose FindNextFileW FindFirstFileW CreateProcessW SetCurrentDirectoryW GetCurrentDirectoryW GetExitCodeProcess DuplicateHandle SetThreadExecutionState CopyFileExW UnmapViewOfFile MapViewOfFile CreateFileMappingW CreateMutexW SetEndOfFile ResetEvent SetFileTime LocalFileTimeToFileTime DosDateTimeToFileTime CreateFileA CompareStringA GetSystemTimeAsFileTime VirtualFree VirtualAlloc DeleteFileW GetThreadLocale GetVersionExW GetCurrentThreadId TlsAlloc TlsSetValue ReleaseMutex GetLastError Sleep TlsGetValue CloseHandle DeleteCriticalSection GetTimeZoneInformation GetACP GetCPInfo RaiseException HeapAlloc HeapFree IsDebuggerPresent UnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent SystemTimeToTzSpecificLocalTime SystemTimeToFileTime GlobalAlloc GlobalFree SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode TlsFree InitializeCriticalSection GetCurrentProcess HeapSetInformation GetOEMCP SetFileAttributesW IsValidCodePage HeapSize HeapReAlloc LCMapStringW MultiByteToWideChar SetStdHandle WriteConsoleW FlushFileBuffers GetLocalTime FormatMessageW GetTempFileNameW GetFullPathNameW CreateDirectoryW GetProcessHeap GetModuleHandleA GetFileSizeEx GetUserDefaultLangID GetTickCount QueryPerformanceCounter HeapCreate SetLastError EncodePointer GetFileType InitializeCriticalSectionAndSpinCount SetHandleCount GetEnvironmentStringsW MoveFileExW FreeEnvironmentStringsW GetModuleFileNameW GetStdHandle DecodePointer GetCommandLineW GetStartupInfoW SetUnhandledExceptionFilter ExitProcess CopyFileW

cabinet

ord23 ord22 ord20

crypt32

CryptHashPublicKeyInfo CertGetCertificateContextProperty

msi

ord116 ord17 ord125 ord171 ord8 ord115 ord118 ord205 ord45 ord137 ord141 ord238 ord190 ord88 ord90 ord173 ord111 ord70 ord169

rpcrt4

UuidCreate

wininet

InternetCrackUrlW HttpQueryInfoW InternetCloseHandle HttpAddRequestHeadersW HttpOpenRequestW InternetErrorDlg InternetReadFile HttpSendRequestW InternetSetOptionW InternetConnectW InternetOpenW

wintrust

CryptCATAdminCalcHashFromFileHandle WTHelperProvDataFromStateData WTHelperGetProvSignerFromChain WinVerifyTrust

version

GetFileVersionInfoW GetFileVersionInfoSizeW VerQueryValueW

Name

.text

Size

227KB

Virtual Size

226KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

103KB

Virtual Size

102KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.wixburn

Size

512B

Virtual Size

56B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

9B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

14KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

17KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Adobe CC 2015/payloads/Setup.xml

SHA256 36b375e96ca5abffb897657e16972cde47af883e385e18f631975bf2af7bd469
MD5 3210506f7f5a54cf3397601d4d849a03
SHA1 e22a31b91a0c18b0f1aa871ce27fadefb52ef09a
SHA512 4765894f876aa6c522038878cb96585b7629192e44a132ffeecb5d6a262571caf8fa7dc1b0564a596c19bea4727834fa7a1698c1bcbaa17e0113239bd41d527b
TLSH
T1C93154F17200E86DAF6177BE9080CD04A59B7EA37C5225162957388BFC8B6E4F150065
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/payloads/UpdateManagementTool8_0/Media_db.db

SHA256 ae5a5970764ae81ec50c2311bb6d52c43c7b8886dca019f618dd43de29126f53
MD5 1aff5935112c5299be91aca2a2efec7b
SHA1 df408ee6c2d2ef9ce0ebec07abd85a428cb96ab3
SHA512 7637a4ae514fc8566248670f2cdc99a64e5b5c07a723b7f6574314837a0e7e19ad8a495e5a84c8088f1cb0b2c9904acebf04cc90950c8414ebbd2f9cc54b2e76
SSDEEP 192:BdQxuDB4LyJXiE+HWxpO+h+93jPQptxIMiZR:BiEDB4mJXiNCpO+49zIvxW
TLSH
T11BC266CEDF18B550D9F2E1B0C2C1DEB2AC692E1F9F6042D493E461F5E5D6583A22A036
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/payloads/UpdateManagementTool8_0/umt-8.0-set-up.exe

IMPHASH 48aa5c8931746a9655524f67b25a47ef
SHA256 3606d0caf0827a697546f5d4a96272a0182eb8c33d4e20205fc334b444fdc263
MD5 f959650139e0be2de63c3c7a26989bad
SHA1 808487c3b36519eeaf97e8232fcccc14b4720401
SHA512 f293a4b8fe12cd6f6103307fa3100a0a0289ffa0be3cff10996d3b8c08e57d0cd23027d3e30e4fc54557b7c13fa20609ee0952be9ebfa4d0af64420af0c27449
SSDEEP 786432:Frv8TqZK1BiAo3qXS3RNVjJQig8d1Wli4ail+3crL4GGqnV6ao6DxLDsnFFaV:d8jUAo3EMZo+Wli4ailtH4GLnaMDs3K
TLSH
T1C4A7334D36394077D9444BB9B903C471AA2B4138B4E9E25938B2E58F1F333792E3B976
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
Inno Setup is an open-source installation builder for Windows applications.

Inno Setup installer

installer

Minor OS version

0

Major OS version

5

Entry point

70588

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

oleaut32

SysFreeString SysReAllocStringLen SysAllocStringLen

advapi32

RegQueryValueExW RegOpenKeyExW RegCloseKey RegQueryValueExW RegOpenKeyExW RegCloseKey OpenProcessToken LookupPrivilegeValueW AdjustTokenPrivileges

user32

GetKeyboardType LoadStringW MessageBoxA CharNextW CreateWindowExW TranslateMessage SetWindowLongW PeekMessageW MsgWaitForMultipleObjects MessageBoxW LoadStringW GetSystemMetrics ExitWindowsEx DispatchMessageW DestroyWindow CharUpperBuffW CallWindowProcW

kernel32

GetACP Sleep VirtualFree VirtualAlloc GetSystemInfo GetTickCount QueryPerformanceCounter GetVersion GetCurrentThreadId VirtualQuery WideCharToMultiByte MultiByteToWideChar lstrlenW lstrcpynW LoadLibraryExW GetThreadLocale GetStartupInfoA GetProcAddress GetModuleHandleW GetModuleFileNameW GetLocaleInfoW GetCommandLineW FreeLibrary FindFirstFileW FindClose ExitProcess WriteFile UnhandledExceptionFilter RtlUnwind RaiseException GetStdHandle CloseHandle TlsSetValue TlsGetValue LocalAlloc GetModuleHandleW WriteFile WideCharToMultiByte WaitForSingleObject VirtualQuery VirtualProtect VirtualFree VirtualAlloc SizeofResource SignalObjectAndWait SetLastError SetFilePointer SetEvent SetErrorMode SetEndOfFile ResetEvent RemoveDirectoryW ReadFile MultiByteToWideChar LockResource LoadResource LoadLibraryW GetWindowsDirectoryW GetVersionExW GetUserDefaultLangID GetThreadLocale GetSystemInfo GetStdHandle GetProcAddress GetModuleHandleW GetModuleFileNameW GetLocaleInfoW GetLastError GetFullPathNameW GetFileSize GetFileAttributesW GetExitCodeProcess GetEnvironmentVariableW GetDiskFreeSpaceW GetCurrentProcess GetCommandLineW GetCPInfo InterlockedExchange InterlockedCompareExchange FreeLibrary FormatMessageW FindResourceW EnumCalendarInfoW DeleteFileW CreateProcessW CreateFileW CreateEventW CreateDirectoryW CloseHandle Sleep

comctl32

InitCommonControls

Name

.text

Size

60KB

Virtual Size

60KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.itext

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

21KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

8B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

401KB

Virtual Size

400KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Adobe CC 2015/resources/AdobePIM.dll

IMPHASH eb85531a0232873d71bb8c18b90e2c2e
SHA256 e6e2d06d3079eb31699808cd146262c705d35c93b3b2785b9ca0025da98a5628
MD5 d89cdbf1a64fbe024390bfebb21239dc
SHA1 59dee85b8a5c54c2d3bf4b70d44b54a17a223355
SHA512 98a13835845b04b4df3e0386b8931ae7690c62b1297f977e8c903b18b22b934957e52334994fe5f22cbfdf053318f9c3a2d0f7a7ea0f1e0a19afcc69ff27dd27
SSDEEP 24576:OUNDH3N8P/R588WVBdysOFWO+5rLhRT7YDBTpjGp:DH3GMVG0JbYDBTVGp
TLSH
T156558D11B393C171E8EB11F01A7D7F9A193C6915072489DBE3D82C996D301D2BB3BBA6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

Minor OS version

1

Major OS version

5

Entry point

790781

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\builds\AAM\8.0\source\dev\aamcore\target\win\Release\resources\AdobePIM.pdb

msi

ord147 ord74 ord145

kernel32

CreateDirectoryW GetTempPathW GetDateFormatW GetTimeFormatW GetLocalTime OpenProcess Process32FirstW Process32NextW CreateToolhelp32Snapshot FindFirstFileW CreateProcessW MoveFileExW SetEvent CopyFileW GetVersionExW GetModuleFileNameW FindClose ResetEvent CreateEventW FindNextFileW GetDiskFreeSpaceExW SetFileAttributesW GetFileSize GetCurrentProcess GetModuleHandleW WriteFile GetExitCodeProcess GetFileAttributesW ReadFile CreateFileW FlushFileBuffers SetLastError GetProcAddress RemoveDirectoryW lstrcmpiW DeleteFileW GetSystemTime GetFullPathNameW GetFullPathNameA CreateFileA SetFilePointer SetEndOfFile FreeLibrary QueryPerformanceCounter UnlockFile LockFile GetTickCount GetSystemTimeAsFileTime FormatMessageA InitializeCriticalSection LoadLibraryW GetFileAttributesA LeaveCriticalSection LockFileEx EnterCriticalSection GetDiskFreeSpaceW LoadLibraryA GetDiskFreeSpaceA DeleteCriticalSection GetCurrentThreadId MultiByteToWideChar AreFileApisANSI DeleteFileA lstrlenW GetACP GetFileSizeEx lstrlenA DosDateTimeToFileTime SetFileTime lstrcatW GetFileTime LocalFileTimeToFileTime OpenMutexW WriteConsoleW SetStdHandle WideCharToMultiByte InterlockedDecrement InterlockedIncrement LocalFree GetCurrentProcessId CloseHandle ReleaseMutex HeapReAlloc OpenSemaphoreW LocalAlloc CreateSemaphoreW GetLastError ReleaseSemaphore Sleep WaitForSingleObject CreateMutexW InitializeCriticalSectionAndSpinCount SetEnvironmentVariableA GetCommandLineA OutputDebugStringW LoadLibraryExW GetConsoleCP SetFilePointerEx ReadConsoleW GetConsoleMode FreeEnvironmentStringsW GetEnvironmentStringsW GetModuleFileNameA GetFileType GetOEMCP IsValidCodePage GetProcessHeap GetStdHandle HeapSize GetModuleHandleExW IsProcessorFeaturePresent IsDebuggerPresent HeapFree HeapAlloc DecodePointer EncodePointer GetStringTypeW GetTimeZoneInformation ExitProcess EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetStartupInfoW TlsFree TlsSetValue TlsGetValue TlsAlloc TerminateProcess RaiseException GetTempPathA SetUnhandledExceptionFilter UnhandledExceptionFilter GetCPInfo RtlUnwind

user32

wsprintfW

advapi32

SetSecurityDescriptorDacl CreateWellKnownSid GetNamedSecurityInfoW SetNamedSecurityInfoW FreeSid SetEntriesInAclW AllocateAndInitializeSid InitializeSecurityDescriptor

shell32

SHGetPathFromIDListW SHGetFolderPathW SHGetFolderLocation SHGetSpecialFolderPathW SHCreateDirectoryExW

ole32

CoCreateInstance OleRun CoUninitialize CoInitialize StringFromGUID2 CoCreateGuid CLSIDFromProgID CLSIDFromString CoTaskMemFree

oleaut32

SysFreeString VariantInit VariantCopy VariantClear SysStringLen SysAllocString GetErrorInfo

shlwapi

PathRemoveExtensionW PathRemoveBackslashW PathIsFileSpecW PathFindFileNameW PathStripPathW PathRenameExtensionW PathRemoveFileSpecW PathIsDirectoryW PathFileExistsW PathAddExtensionW PathAppendW

Adobe CC 2015/resources/Dictionary/cs_CZ/stringTable.zdct

SHA256 33f6b5780baa9cee821ca926414e0425652f6a2e7747f0a5ec2296d5a0ab5000
MD5 eddc4cef125c3c07ee9951301f2a901b
SHA1 ec16b1ae45a231f9abac862388b21846f8b81f66
SHA512 42219d03b0e5750798a028ff3a51c2a26dd0f5784cada98dffb8fb2d718a6c0aadf46b4e021d65fad5a11077097062af015d3eb9b573dac8714eaf4ba0b26cab
SSDEEP 96:Yad1hENbr+yb3uw8KSKANxJoIhWmZLnXDEr68eBRwgIUBn8piGweu:PpENbtbn8RKANDXK6pWoGw/
TLSH
T131C1C152B7F82154F5F33F49B9B81A624ABF7D55AD39C41E43510A4D08F2A80E8B0B73
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/resources/Dictionary/da_DK/stringTable.zdct

SHA256 68b528670272f16ad6e56b695fb8731acbbda3f4089fa5b8e158e861ca387ed4
MD5 76f5cea9f6b28065200cc434a640d8ca
SHA1 ff15c56a462bd9e40c41ddb512164c6d36320146
SHA512 c3f2d7a685dc32c0531953c523e98c166b899c9737df828097e6925829ae105f92069c47b435d886d8c3524619757c3427abaf77608f5f23408d13f8fe34f4b1
SSDEEP 96:Ya/ycZOOnvHmG2IrhihsYUJxhgTopWJuYqNu5g+hq9nOi+zuAPDjojFe:Pl/XjPyuW0Nu5C2
TLSH
T19FC16E92A3F82218FAF32F44BDBD596119BEBD955D3AD92C1354184C0DF2A88D4B0B73
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/resources/Dictionary/de_DE/stringTable.zdct

SHA256 77936d1edaf4e303a9f9b71a74455ce7f76d265a905c5127a9bb2fb45d58f809
MD5 556eb18a9971e9f304540bc9e96364ad
SHA1 f892331cbae7eac769b24ed34c32d683af5a9683
SHA512 5b6b4382b01cdb4c2715f9b24deb53e1789bdd7bff552207264fd647955a53c8919fc4664e9653c0b0279c434fd84d5a0d13b862a952ef3690b96b6fb45f3289
SSDEEP 96:YabIbMtTVG8fOAaIN0pO/JsiAcaWVosHsgNWD9uwnXnnEqidJpi2:PsoSo6pO/4WbHTNiQxR
TLSH
T158D15C62A3F46618F6F32F84BDBD6A611EBEBC996D3AD92D1350144C08F1A44D470B73
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/resources/Dictionary/en_AE/stringTable.zdct

SHA256 005f99f69237cd437ae05bf93720c81e6cdfbd9e0d3153d84098640d333a2f15
MD5 3997b6fd5325d3bb705e93071d4617c4
SHA1 4fc4c5796649bc39f5813563f56412b79d2c3a5c
SHA512 d51a50612f463309afc2573561da3a80c61ba2fb9da17a80f41748fcc7ad83208a15936b45325918f7a81ca34240a4f7b71155bdf6323ac503b63821b31f6e3a
SSDEEP 96:x+C/QpXGbcd68A5nOQohpn1IFgjnEqizuG:x78WD8jRpnaF3zh
TLSH
T1FCB14A92A3F82218F6F73F48BDB968615EBE7C559D3AD52C1751080D09F2A44D8B0B73
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/resources/Dictionary/en_GB/stringTable.zdct

SHA256 103abd70b4b5cdc76d740632362a5fd38c84a6a779980f4327d0b102238ff52d
MD5 8107b8505631a3e6fe04252b37d65a89
SHA1 6cb0bf5dbfae4d5e3963f0838e7604e3f73c201a
SHA512 fd7f2ccfedcbef4f2608a047e1602bbcd97254e1432b5af89f17817ad9ccc1c95285ad6c96bf9aa753c44658e4f950bb6d88ca30e5e1a1236854cc128bdd5bcf
SSDEEP 96:x+CQz6SGGsw6kA5nF/oZkS1IFgDnEqizq:xUz2rksykSaFXzq
TLSH
T143B13A91A3F82218F6F73F48BEB969615EBE7C569C36D52C1251080D09F2A44D8B0B33
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/resources/Dictionary/en_IL/stringTable.zdct

SHA256 005f99f69237cd437ae05bf93720c81e6cdfbd9e0d3153d84098640d333a2f15
MD5 3997b6fd5325d3bb705e93071d4617c4
SHA1 4fc4c5796649bc39f5813563f56412b79d2c3a5c
SHA512 d51a50612f463309afc2573561da3a80c61ba2fb9da17a80f41748fcc7ad83208a15936b45325918f7a81ca34240a4f7b71155bdf6323ac503b63821b31f6e3a
SSDEEP 96:x+C/QpXGbcd68A5nOQohpn1IFgjnEqizuG:x78WD8jRpnaF3zh
TLSH
T1FCB14A92A3F82218F6F73F48BDB968615EBE7C559D3AD52C1751080D09F2A44D8B0B73
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/resources/Dictionary/en_US/stringTable.zdct

SHA256 103abd70b4b5cdc76d740632362a5fd38c84a6a779980f4327d0b102238ff52d
MD5 8107b8505631a3e6fe04252b37d65a89
SHA1 6cb0bf5dbfae4d5e3963f0838e7604e3f73c201a
SHA512 fd7f2ccfedcbef4f2608a047e1602bbcd97254e1432b5af89f17817ad9ccc1c95285ad6c96bf9aa753c44658e4f950bb6d88ca30e5e1a1236854cc128bdd5bcf
SSDEEP 96:x+CQz6SGGsw6kA5nF/oZkS1IFgDnEqizq:xUz2rksykSaFXzq
TLSH
T143B13A91A3F82218F6F73F48BEB969615EBE7C569C36D52C1251080D09F2A44D8B0B33
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/resources/Dictionary/en_XM/stringTable.zdct

SHA256 005f99f69237cd437ae05bf93720c81e6cdfbd9e0d3153d84098640d333a2f15
MD5 3997b6fd5325d3bb705e93071d4617c4
SHA1 4fc4c5796649bc39f5813563f56412b79d2c3a5c
SHA512 d51a50612f463309afc2573561da3a80c61ba2fb9da17a80f41748fcc7ad83208a15936b45325918f7a81ca34240a4f7b71155bdf6323ac503b63821b31f6e3a
SSDEEP 96:x+C/QpXGbcd68A5nOQohpn1IFgjnEqizuG:x78WD8jRpnaF3zh
TLSH
T1FCB14A92A3F82218F6F73F48BDB968615EBE7C559D3AD52C1751080D09F2A44D8B0B73
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/resources/Dictionary/es_ES/stringTable.zdct

SHA256 011ab6d603284d098ebaf7959609343c09a8b9f558479aa9c903ab915643e75d
MD5 2bb0b6e3ab7b645ebc0b3116bbcfbfc1
SHA1 f278d1be7e11dc819be031413065b99e382a386f
SHA512 c83fcec6b9d339703d1db8e8804341c96816cb7d6521d06505bccce2737f8945bdb3078207b1c6a80ae022bf55273a810fbd455d0870521eef328e0dc94461ab
SSDEEP 96:YaB4F2T89SomrTaVMQGmBa4EDFY9upim4uVVgM6CSV0G2VuDYnEqin0HnkV:PJxpGwpOPnV
TLSH
T1D1C14352A7F86245FAF33F48A9B929614EBFBD919C3AC81D4320491D09F2E44D970B73
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/resources/Dictionary/es_LA/stringTable.zdct

SHA256 565465d24b923dd78bb7f0f84a301217678220d61f98f129ecdc59fb15175345
MD5 388ca3387c6632c101ceea71501c3ed4
SHA1 313fc1165627c24d32497d9cfd297762d02c8297
SHA512 bb06ffcebe7c9a530cee142414dfc788a26c8161778cbb78ff6b64ae9269ce20913ca1b35cde70a0208389587a3dc880a490f727f80520322b344a7867852cab
SSDEEP 96:xB4F2T89SomrTaVMQGmBa4EDFY9upim4uVVgM6CSV0G2VuDYnEqin0HnkP:xJxpGwpOPnP
TLSH
T147C15352A7F86245FAF33F48A9B928614EBFBD919C3AC81D4320491D08F2E44D970B33
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/resources/Dictionary/es_MX/stringTable.zdct

SHA256 011ab6d603284d098ebaf7959609343c09a8b9f558479aa9c903ab915643e75d
MD5 2bb0b6e3ab7b645ebc0b3116bbcfbfc1
SHA1 f278d1be7e11dc819be031413065b99e382a386f
SHA512 c83fcec6b9d339703d1db8e8804341c96816cb7d6521d06505bccce2737f8945bdb3078207b1c6a80ae022bf55273a810fbd455d0870521eef328e0dc94461ab
SSDEEP 96:YaB4F2T89SomrTaVMQGmBa4EDFY9upim4uVVgM6CSV0G2VuDYnEqin0HnkV:PJxpGwpOPnV
TLSH
T1D1C14352A7F86245FAF33F48A9B929614EBFBD919C3AC81D4320491D09F2E44D970B73
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/resources/Dictionary/es_NA/stringTable.zdct

SHA256 565465d24b923dd78bb7f0f84a301217678220d61f98f129ecdc59fb15175345
MD5 388ca3387c6632c101ceea71501c3ed4
SHA1 313fc1165627c24d32497d9cfd297762d02c8297
SHA512 bb06ffcebe7c9a530cee142414dfc788a26c8161778cbb78ff6b64ae9269ce20913ca1b35cde70a0208389587a3dc880a490f727f80520322b344a7867852cab
SSDEEP 96:xB4F2T89SomrTaVMQGmBa4EDFY9upim4uVVgM6CSV0G2VuDYnEqin0HnkP:xJxpGwpOPnP
TLSH
T147C15352A7F86245FAF33F48A9B928614EBFBD919C3AC81D4320491D08F2E44D970B33
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/resources/Dictionary/fi_FI/stringTable.zdct

SHA256 26c71513bff94dff5cb582aeddda26bd982404c5e55aef2f8c6acf35316ace72
MD5 7d19f39c19321c78b41689e54440410b
SHA1 bf2a60ed03b77def1f19ec545b0d0d1275b5c061
SHA512 4fe2b2c750855c30031b53eab51854077dab1fe04128a21a6bbe326a1104b262e6f8fc4b4076a3b6e47e20be06159e33ee8988434097743bcb04d5a63ed0e2ae
SSDEEP 96:Yacz7rardXTki7z1NXOpTHEWFnEqiF0S1:PKrCXTki/n+pTHdCF0o
TLSH
T1B5B16E92A7F96228F6F31F446DB85A110ABF7DA65DBAD42D0B54080C09F2684E871B73
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/resources/Dictionary/fr_CA/stringTable.zdct

SHA256 b4d7350b5610c7d51025b7b3d6551e289e5c4dd026d5997cb40c93fa4be7a0b7
MD5 ce5f1fe5353566f06fe3262f0adc7844
SHA1 22318d4d3afbf12d184821cd069164df17706944
SHA512 a0a6a7427bb6ba620cb9a175da8708330835fa7afb013f8629282825baf14485a626b1672b0cb0962ccd5b9812a88e63bb101a2cd8de886d7c35571386e636df
SSDEEP 96:Yapiby3HX7E+GMx7JrMaK4y2b36Z47VyAY2nEqihtKs4P4:PYGIXw7JoaK72OC7rIhtK5g
TLSH
T1B2D11592A7F85214FAF33F48B9BA68651EBF7C8A9D35C42C1751584D08F2A44D8B0B73
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/resources/Dictionary/fr_FR/stringTable.zdct

SHA256 b4d7350b5610c7d51025b7b3d6551e289e5c4dd026d5997cb40c93fa4be7a0b7
MD5 ce5f1fe5353566f06fe3262f0adc7844
SHA1 22318d4d3afbf12d184821cd069164df17706944
SHA512 a0a6a7427bb6ba620cb9a175da8708330835fa7afb013f8629282825baf14485a626b1672b0cb0962ccd5b9812a88e63bb101a2cd8de886d7c35571386e636df
SSDEEP 96:Yapiby3HX7E+GMx7JrMaK4y2b36Z47VyAY2nEqihtKs4P4:PYGIXw7JoaK72OC7rIhtK5g
TLSH
T1B2D11592A7F85214FAF33F48B9BA68651EBF7C8A9D35C42C1751584D08F2A44D8B0B73
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/resources/Dictionary/fr_MA/stringTable.zdct

SHA256 6974f6143c2ff7593cb324a397e702b3a91091d50e8fef3e025838c0852adacd
MD5 ce6bbaf57d946b2bebd4a1356e6ebf37
SHA1 2b1d3cba5e4e0a377a4bdbf26cd83b173ea8a9d9
SHA512 9b25ae66f7440f691a1c5bbe8ac031932bee67c69479ebbb5ad4a763006e8d9b13751e6ec47c4cbf2b02a103969c94e7373b92da23b527c2c4c639e8580b28cd
SSDEEP 96:xpiby3HX7E+GMx7JrMaK4y2bXaZ47VyAY2nEqihtKs4Po:xYGIXw7JoaK72zaC7rIhtK5g
TLSH
T157D11692A7F86214FAF33F44B9BE58610EBF7D8A9D35C42C1751584D08F2A44D9B0B23
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/resources/Dictionary/fr_XM/stringTable.zdct

SHA256 6974f6143c2ff7593cb324a397e702b3a91091d50e8fef3e025838c0852adacd
MD5 ce6bbaf57d946b2bebd4a1356e6ebf37
SHA1 2b1d3cba5e4e0a377a4bdbf26cd83b173ea8a9d9
SHA512 9b25ae66f7440f691a1c5bbe8ac031932bee67c69479ebbb5ad4a763006e8d9b13751e6ec47c4cbf2b02a103969c94e7373b92da23b527c2c4c639e8580b28cd
SSDEEP 96:xpiby3HX7E+GMx7JrMaK4y2bXaZ47VyAY2nEqihtKs4Po:xYGIXw7JoaK72zaC7rIhtK5g
TLSH
T157D11692A7F86214FAF33F44B9BE58610EBF7D8A9D35C42C1751584D08F2A44D9B0B23
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/resources/Dictionary/hu_HU/stringTable.zdct

SHA256 7c4c397a70211fad006182002a965643ca1fb8cb0bff321f977b01744d02ce9d
MD5 1dc80f50a4a3b65841c76e6e57bc50ad
SHA1 4c059bdd51455472bae68fc6a22850c4d661323a
SHA512 1910eceb2e1831acdee252cefd84ca898ab1c08daac1810a92dbca241671521bb636e18c2ae85745324bffec9e6587b5438e30c3a4d49ae15a4f6ef99e1fa7ad
SSDEEP 96:YaTJtf2bsOtdLeYQkWdhz5r4T1YYEto7A33QuPa5y7nEqiGaegVb7:PlFSsKdpbo5rE2Zto7M3Q2gGw
TLSH
T137B19D52A2FC2105F9F35F497DFD69A10A7E7D24AE3EC52E8690554C0AF2980D870BB3
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/resources/Dictionary/it_IT/stringTable.zdct

SHA256 2158a339add7faf61dc40bd42cef0ed50363d5f39e076b560b4a3c51af62a726
MD5 4d32ba27e1f59a41bec509b45aba43d5
SHA1 0e6813ef4463c5a276b8e6cb35e984c81420479e
SHA512 fd8d5fcfbc4fe8f90325a4782b2d3a359f10e7203d701926784b360069b107c56d2e37b528e22089f90d8a98b8e55463000216c66e0f44c07a3189f2d214e4c3
SSDEEP 96:Yay9S833GeHdVNs4jN4OQwF4X8nEqi2dTn/7:PNT+dPs4uA4t4D
TLSH
T167C13652A3F82218F5F33B48BD7D59644EBFBE569D3AC42D0295085C09F2A54D8B0B73
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/resources/Dictionary/ja_JP/stringTable.zdct

SHA256 647d60621036fb83f206ddf659a2d2a5e999f629206a753c1e7de56ed8ac3d24
MD5 64aee8d767207f6eab4638a270ccb188
SHA1 4378a01918f359ace6a60a533f1235ea3a8ffc14
SHA512 204fc24bab342bebb169f6c4c16b3a36e42acd4e6a162ea18fbc8b032db34480922835541b32fbb21c31d455ac50919d577fb3fe5175774b5bbe547df88a0141
TLSH
T116814556B7F02609F8F30BC809BD7D3129BEBD141D17C86D5BA1880D48F2A49D6617B3
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/resources/Dictionary/ko_KR/stringTable.zdct

SHA256 0e04223ed425182cc193b054799471189b82aa3dafad7ce8341222807f538b37
MD5 def407d1dd772f6eecd0db26e5ab3bdb
SHA1 a07e73d8e75e6df3e85556f439ee4cdcde817cf3
SHA512 3a01d384b9adef8b9b1504c6ed92e5d29e38faea8d953795b6a962f36083cbb0720336cca128d99331738f2011b948aefc1363ef718cf4ba27235dd820ed8166
TLSH
T197715687E3F96310B4B36A8D65BD3D7116BF7A591D2BD82D0775082C0EF2A14D520BA3
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/resources/Dictionary/nb_NO/stringTable.zdct

SHA256 0eb3a1a61d427bcbb31521aad789b5dc74cb54d4ddff9b048a6fe00bdc790c6e
MD5 2c64d8595cd8675a93266586a4645b75
SHA1 b8469dcd818bbdf909d80c7b7b82e3174fe3a74e
SHA512 def019f213597e864296cf99acc1a6c70ebb8f2a08eea7bd5cc9b3a3abd92ac0034cfaaecf1f04f80ebf28137666df2d15fe146adfb09ec71f6f46ac195e2e24
SSDEEP 96:YaLFGrFdWH8lHEGV788iFiCUTeZ2i4hbCo3Mz6O92F9FYnEqi+mg1QUvo:P8JdWShfal4Nqz6Pp
TLSH
T1EAB18EA2B3F92218F5F32F44BDBC596109BE7CA15D39D92C0314185D09F2A98E5B0B73
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/resources/Dictionary/nl_NL/stringTable.zdct

SHA256 60e527b863fc57f322307150a3d516b19a7341c158ca798d27f2fcd8e3f2a6c3
MD5 90190367bf4bb5113ab2b54800553dab
SHA1 6faefa1c1ce9ec631f119c0c67a91c0a9ed00c7b
SHA512 fd73237d8cf3f7d094b2288dabb7905763d1968ac44dc7de2ce72560103102a01cbdfdf55ef75ff60b5165a0030b90351e17317ac0869c9490fa766cff1f57bb
SSDEEP 96:Yauk1JiONG88iOC4GnSjsviQlowtV4nrOT8ptncqiLBKUK1:P9w/UueFtorNys
TLSH
T1D4C18B52A3F86218FAF32B447DBD69215EBFBC956D36D52C0350089C09F2A44E8B0B33
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/resources/Dictionary/pl_PL/stringTable.zdct

SHA256 f75a0c6018632db9d89ac54aa33fb8f9ca4c15a107a922f6daa6ae8b48ac404d
MD5 6c969434bc227faa2b75ec150a22c0d3
SHA1 fdea6a39fac8f279cea8081c3708b56bca5a1c7f
SHA512 564a5ff39a28599eb8475371e7a399edb73e33e085ab9626d7d4fda7f97b739999b84664331222043192cf2922337290b93528f539a3294d6623a4820b26e545
SSDEEP 96:YaRTadxZD+DFG9Bp+DD/8kjBCMUs38kIijnDi9sVxER:PVaD98BCMH239sVWR
TLSH
T112C1D012B3F81258F5F72F88A9B96A754EBFBC256E35C46E5361080D09F1A80D970B73
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/resources/Dictionary/pt_BR/stringTable.zdct

SHA256 7835c6c2289d163a2d51869d9c4befd194063d52fa66f675cc9b853aa21bd601
MD5 39441adea88bbc8ff72d6e5bf483042e
SHA1 1515c75996692d14bc3dd022602407e515ee70dc
SHA512 d5b9511f3d856c2a2d836eea3668720d3076c6c8e070489fcf45cfb38653a8decddab466e5c17dcbf4f2027b3817df008e7d8779820f60898a961ffde8631461
SSDEEP 96:YaSurE4Ti3GJGFD3GL+Yx0FiXG0/79WW2ozznEqiiwLTLQ:PShxBMx5P9Wru
TLSH
T1BEB13452A7F82254FAF32F4A6AB829A14ABF7D51AC3AC41D4760095D0DF2F40D970B73
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/resources/Dictionary/ru_RU/stringTable.zdct

SHA256 55b55ce9ea6153298ce6534d95a50d0c3663f0531048038402a788eee3c7c137
MD5 5f3628802ea7bbafe91649404dc21db5
SHA1 f71a4d76be98ead0daba147949bd24bc5ee5e9ca
SHA512 d260e1133371406bef9a157b03c25a7d2781e67b07dcb5eb50172d34c35018099e76b8e6e7e02cd3312a7505a2699a2c136acd0f90c4e223b1c88adfb10292d2
SSDEEP 96:YaFuXcQF1fdI56bD4z9R/0YTMOWPmT2NROnNiNcSbnd:PFuX7f5bD4z9R/0YTXWOTytbnd
TLSH
T139C1074AF7B86200F4B2E7881EBA5CE2116E7858191684DD76AC7C1C18F9B75B330BD7
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/resources/Dictionary/sv_SE/stringTable.zdct

SHA256 529a4a632643d8bd96a2475865e044c1e379cf56b1e12038f24c1c5226925b5c
MD5 acff47e5b85d8b3267971dc02a44a8a3
SHA1 460db08bdf22369b83ca262f1423b2363e20a8c2
SHA512 abe9d1ea016827c2ddccec30b2f4e4259b5f05c16c30254532491e519c0eb8946b1c68eb5f8b8c6358d18259aba8a41b505051c942febf50c5e855bab9408f11
SSDEEP 96:YaDk0unF2bG84dAIxly3uRhayTo2lWM/zOQ1pnEqipr:PDk0ch06ly2v5lWM/zcpr
TLSH
T123B18F92A7F82218F9F35F88BDBD596119BEBC955D3AD82D1714085C08F2A88D4B0B73
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/resources/Dictionary/tr_TR/stringTable.zdct

SHA256 ae99a9e5b896cf6f71cfba30ca8df3806709bad665d245ea2e9e69aaac97f54b
MD5 63ca61e0c13de8970d647d8274bd8332
SHA1 2b19ac91ecc15f321775b156424d2fcb760eee1d
SHA512 c647ec9bf81fee80b567cf9167d771a96afbaa521eaf79186c5c3be2298cc9a0f8671fde40d29aa7dac49ef22468046edc4054f588c886df61b3c7975d4341c6
SSDEEP 96:YaPZApg2pKGwmC65Zk3kCmKwCmRGInEqij0CsCd6:PGre65Zk0TQ+
TLSH
T195B1AA55A3F86209F5F32B496DFD68610BBE7D957D3AC42E0371181C09F2AC68460BB7
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/resources/Dictionary/uk_UA/stringTable.zdct

SHA256 215a4ce4e46b87a226fb9915076b1d454fee78420ab60c8f7046e0d641b7c50d
MD5 94ba672d44158f67c1442c0a8e361735
SHA1 44207344fc8816b6ef7cb61805db58c7fa4d7a60
SHA512 0b4e86c5f707494aef10febd4420983511ae710b5d484db12bc22ffb8c07fafa6b4cd8e1d0b4c5534a2c77b59386adf655098b9cafa05631c4870cadc72f16e6
SSDEEP 96:YazpcuQ7J7TFYNqFwhC/tvnfibJmX9fCz:P0NTFY8uh1bYXFI
TLSH
T14AB12716F7B45204A4B297890ABF5CE3256EB8541857C4D977AD7C0C08FAA7AB2307D3
MD5 SHA1 SHA512 SSDEEP TLSH

Adobe CC 2015/resources/Dictionary/zh_CN/stringTable.zdct

SHA256 99af52bdb0e55127c0da7d0d5e36db1ce2e9c68c8bf1405bfeb6246aca899e83
MD5 757849aa974338f56e01d206a82b0644
SHA1 b15ed82eedf6e36b465956be47e5f39e9027b757
SHA512 700ffee1ce4d3cc7b6bd178e1dee8b1be40ac0781c17a38f70bd285c6a073044cd9484680c58df83e01dede6956412fb93da05ab36bb65ebcff7635ca65c2906
TLSH
T10E610463F3F02104F9F32F8C5AFD6D325ABE7A545E26C43E87A5580D09F2A459460BA3
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/resources/Dictionary/zh_TW/stringTable.zdct

SHA256 c92ba094b15ab4c70b6593ab5bea2b7fc7168a1ba092725a8b6fb39c8c3babb5
MD5 6ad608ffc0cde5e564615200f42e3df8
SHA1 815b6b037268241c783d9c9977b5293d5f1f0a46
SHA512 40e25fe1f882ba673146bf67c1e550a6cd73c1f7df3dc99e2280218de6973cf889bb50277deabc12747f4eddd6d3c1931c8902d0c50d566aee66c766d7a8e903
TLSH
T10261F663B3F02601F4B32B8E5AFE2C735ABE7A141D26C87D57B5580D09F2A45D4607A3
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/resources/setup.xml

SHA256 6e55e580c40e472b99b30e31506047e4e4f4a6c48a176ea2a81139744f2ce8d8
MD5 153e81faaec182dfd137bcc313e3045e
SHA1 b3199f8b361f3715ea142b4ae0dffd7329234ac5
SHA512 e771891e89a4ef8d6017ebc05b0e05c8f5170a9d95803e77899c521ac3d23749a2464553958601baf7c9daae129e492627053c8f73e0001bbf62e1156fcac104
TLSH
T1CD21E1CA2A30D302564B287FEE7B3418AA2F66BFB639D091B505957B960136E360345D
MD5 SHA1 SHA512 TLSH

Adobe CC 2015/resources/updaterinventory.dll

IMPHASH d18b3d7f185c4671a86ee1d8769c65af
SHA256 f33c4e3c40115b85cb7ca2819804a059ba386a10c9827d6b8923a8d2bb76b922
MD5 9165642b427738f5787a752657bd32a2
SHA1 5c9d4d7d1d210de5ffc00aee96ab320e3e2d614e
SHA512 528c696525c87192940bda863292aaa1724033e1ec5828032695d9fbf12bf1a5a6d96ca2cb0c14e73d902e7c21021c81d75f47a1ce3098f588a3b74731028ee7
SSDEEP 6144:LV0SIgsfpeunGrrednB7ZCn87L6B7FocK2Na7pxeW821+xSj:LV0SIzEwZU8/6B7yjyKpxeWp1aSj
TLSH
T1F8A4AD11B9C1C071E82E02B0712D9B2605BDBDB14B698AD7E7D8AD4F1F72AC15B32B17
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

06:bd:05:cd:e6:cb:c4:03:dc:ad:49:ee:00:be:58:53:f3:e5:39:61

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Chains

Feb 27, 2014

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Serial Number

1d:37:83:b3:de:cd:5d:bb:16:e3:3c:d3:a6:b3:bf:db

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 20, 2014 - Feb 21, 2015

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

1

Major OS version

5

Entry point

109034

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\builds\Updater\8.0\source\build\updaterinventory\vc\outdir-Release\updaterinventory.pdb

kernel32

EncodePointer DecodePointer GetSystemTimeAsFileTime GetCommandLineA GetCurrentThreadId IsDebuggerPresent IsProcessorFeaturePresent ExitProcess GetModuleHandleExW GetProcAddress HeapSize Sleep GetStdHandle WriteFile GetModuleFileNameW RaiseException InterlockedIncrement IsValidCodePage GetACP GetOEMCP GetCPInfo SetLastError GetTimeZoneInformation WideCharToMultiByte GetFileType DeleteCriticalSection GetStartupInfoW GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW EnterCriticalSection LeaveCriticalSection LoadLibraryExW MultiByteToWideChar HeapReAlloc RtlUnwind OutputDebugStringW LoadLibraryW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetStringTypeW GetConsoleCP GetConsoleMode SetFilePointerEx SetStdHandle WriteConsoleW FlushFileBuffers CreateFileW SetEnvironmentVariableA GetLongPathNameW GetTempPathW LocalFree CreateDirectoryW RemoveDirectoryW SetFileAttributesW DeleteFileW CopyFileW MoveFileW GetVersionExW SetFilePointer ReadFile SetEndOfFile ReadConsoleW LocalAlloc GetLastError GetProcessHeap HeapFree HeapAlloc CreateThread GetExitCodeThread InitializeCriticalSectionAndSpinCount TerminateThread WaitForSingleObject InterlockedDecrement CloseHandle FindNextFileW FindClose GetCurrentProcess FindFirstFileW

advapi32

SetNamedSecurityInfoW CreateWellKnownSid GetSecurityDescriptorDacl RegOpenKeyExW RegSetKeySecurity SetEntriesInAclW RegDeleteValueW RegGetKeySecurity SetSecurityDescriptorDacl InitializeSecurityDescriptor RegQueryValueExW RegSetValueExW RegCloseKey RegCreateKeyExW

shell32

SHFileOperationW SHGetSpecialFolderLocation SHGetPathFromIDListW SHGetMalloc

ole32

CoInitializeSecurity CoInitializeEx CoTaskMemFree CoInitialize CoUninitialize CoCreateInstance

oleaut32

VariantInit VariantClear SysAllocString SysFreeString

shlwapi

PathIsDirectoryW PathFileExistsW PathIsFileSpecW PathRemoveFileSpecW

Adobe CC 2015/resources/version.txt

SHA256 ae0d5dd4fb936d6fb26b9438bcf1f084ff1259486f4aff1bbf966287e29cba4d
MD5 1ef429a593dea64c5e2ca12a9ff22dce
SHA1 f23d5eba4482060d971ffce87b33dcb924e16baa
SHA512 f8929fb9ff3255a50e69e27363c0d487f54242349636d28174947ff8079bcd9612c1f455e74ca35d0649b6f2e35287d2dbed90b07b5cc0ca6f77050fe0c7e848
MD5 SHA1 SHA512

Autoplay/langdata/en_US/lang.dat

SHA256 b4b0fba35e7055ea8c8848148406d023c1cfb33b4c623c26553dcabc683e9d61
MD5 5f67151e4fafc3dbac71abf0d05be974
SHA1 97d46288b5d7d7d2e7053b71f8b6772eb9767200
SHA512 136ca295833bd6c0403b480b917ee64ec0f2b69d2d84758b5a33c42ed38859581d40d891d86da3d209603c37f857af58245ffbb98f28d1e383741d81bc305860
SSDEEP 192:c8BIqbFNkH7BdMk6SUhMcQ4LGmohbcQXA0C7hLcQHb3ZkhccQIcYUZh5cQFelwgZ:j9bF87BdpdQ3d6lEM1P75gSD6bwoserw
TLSH
T184228C1231E9246CB577BAD6EBE9C57EC396B4E4821B8D2E61D4030741DD802AF03EB7
MD5 SHA1 SHA512 SSDEEP TLSH

Autoplay/langdata/ru_RU/lang.dat

SHA256 bdc511e0627dfde6f01d1b1015e57928dac5fa4f19aa36cc2f6a46ec3d30ca77
MD5 68ce101782616ac4e73cee9985e03b66
SHA1 f7394f14d7aecc9d82a2ac381d291607843d14f3
SHA512 6b4cc157332bd82514c1b8db271c0241a9a6853704765794dc609a817b0f2c0bd90ca04c5c069c31cb54cc4302b7632fe5fc4a8859f1202c86c992dea9245016
SSDEEP 192:c8BIqbFNkN7Gdvtk6SUhMcQ4LGmohbcQXA0C7hLcQHb3ZkhccQIcYUZh5cQFelwU:j9bFe7GdQdQ3d6TEM1Po5gSD3bwosIrq
TLSH
T1B522A01335E9246DB467BAD6EBE9C57EC396B5E4820B8D2E61D8030741CD8026F03EB7
MD5 SHA1 SHA512 SSDEEP TLSH

Autoplay/main.ini

SHA256 b7f0126214406c6164bf20e57c9a8c15a24bc93760666ba0e903a35db441f2c5
MD5 2fe16d359468eb8b8e1adb7e44083789
SHA1 02865bdda8f8307d56019c09bb45027a4a92a262
SHA512 c8dc5022f7f608c40f399351fccaaaa86146b0942b26cc60a5f339b41834bda64a5801d85ceadde210a2e18512c77ee942ce0c1ece28f1b7fbb169c2c261dcd4
SSDEEP 96:38ntHDxjDSD4DuxLPdLB3fgKvuSEnQRkBaqp1Immor:38Mxzd93fySEnNow1Immor
TLSH
T1B5914A2276E92118B2A3B6D6DFDEC175C725F8F9551E8D6E10D6020B46DC8006E13FBB
MD5 SHA1 SHA512 SSDEEP TLSH

Autoplay/resdata/Autoplay.ico

SHA256 d8cd187a2a91523f40b9ea052ab0da80765c963036ca17b8f0ce575016b70e76
MD5 113f8bd0c58ace172be6acffec209292
SHA1 125443d6d19cfaa50af908f4517c8e55d195b3ce
SHA512 79d8cdac3526ccb50d3ac3c994858744b0454cbfe1a0c68468571495afa5893fb3bcd7bf023162bffe883c44a6c42d46f51dd11841ec53206175e180429ee559
SSDEEP 384:H4SU8Rlnu/aInHjaPci4/juCKPLM3Q7kmc8BEzE0REoGhlNB2MQJ8LBGLmYC+bzg:yiInHjluCKDYRPazmlvG/
TLSH
T1DF74475A32B8DC8FC11516F49CAF36F872A15FAD64913BC4F81A5AAB1DF128C3D4B118
MD5 SHA1 SHA512 SSDEEP TLSH

Autoplay/resdata/FL_autoplay_bg.bmp

SHA256 646c4889452fc8ca77e7838f20bfe6cf403e6fd2f47eb75a651e117ee67bb7df
MD5 9990e379109d638bf567204c628e6129
SHA1 550ec31f6f931f47e70f2d9f8843e06c2d8b11d7
SHA512 aaaeb907b53f415a21ec3a9a7a728f28cc25b24754f7f1046c1f8a23748a6e8571609193fcf550645416bc16b5f979c2078b638c33ecf1127d0990673153b39f
SSDEEP 192:mxUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUs:mvaWiOMdt/Nd4XO0VvscUlPbWFr3Ni5G
TLSH
T1D9F4013F727AE43E858EB7E12352D2DA24D2A65F4E1885C4E194DFF1A4B011C5AC13DE
MD5 SHA1 SHA512 SSDEEP TLSH

Autoplay/resdata/autoplay_blank_N.bmp

SHA256 7edf78f2b852336be1d8bb096072858a99b0b5ab29d90214b2b36813ace4d912
MD5 017d4839ed574e2394243eeb07e526e5
SHA1 7a69da1ef4236ffe5b40210460c3211d5ef5fe46
SHA512 1063d53fda432647dae1823509aca437a1bece82597a10b05958efdf3548a0edf49c4196264d9bfa1adff764af8af3f3a37ed77200e372eb8e0ae5879072c1e0
SSDEEP 24:z/krucTiLkhpXtnpbFhhFpHtXpbVDVLHAqOzJEn:rkacTiopHATJO
TLSH
T12B6300E490386C63A63EE86BDC1C8D25FB201522FB7CD51695F1FC961A279ECC854B23
MD5 SHA1 SHA512 SSDEEP TLSH

Autoplay/resdata/autoplay_blank_R.bmp

SHA256 3c6ef1b2998c7031542d819e00ba2433d148b27e400683fc12b2291bd8525281
MD5 085b44ea973e1b8dbac298b8fc258948
SHA1 fc03fd590219f14c78d143f6a5c72939100fd697
SHA512 b5bd43f1848c0edc989fcb78c2769bf27adc3366493f1c2ba0a2754eb7ce5f9b93cb1e9835677b357fd17fc5c77f9ebe88854db3a5ee641aed7637d1dcbe7df7
SSDEEP 12:oU/SK6y8ZqUqDhvhvlxr5P5P5XDVZpXpvimzrN1V7HaaogwAuQyfn76n:z/kgZDtDhhTVZ9QKVzaUlyfn76n
TLSH
T1456301E541387D13A2EAC593D949AC35EB254164FA2EA203F0E3FD863267EF8C510327
MD5 SHA1 SHA512 SSDEEP TLSH

Autoplay/resdata/autoplay_blank_S.bmp

SHA256 7edf78f2b852336be1d8bb096072858a99b0b5ab29d90214b2b36813ace4d912
MD5 017d4839ed574e2394243eeb07e526e5
SHA1 7a69da1ef4236ffe5b40210460c3211d5ef5fe46
SHA512 1063d53fda432647dae1823509aca437a1bece82597a10b05958efdf3548a0edf49c4196264d9bfa1adff764af8af3f3a37ed77200e372eb8e0ae5879072c1e0
SSDEEP 24:z/krucTiLkhpXtnpbFhhFpHtXpbVDVLHAqOzJEn:rkacTiopHATJO
TLSH
T12B6300E490386C63A63EE86BDC1C8D25FB201522FB7CD51695F1FC961A279ECC854B23
MD5 SHA1 SHA512 SSDEEP TLSH

Autoplay/resdata/autoplay_disc_N.ico

SHA256 79239745e920ed908667cf2bd7bf60ded19a3564a89e09a3545fa38577b50951
MD5 ee2010c43070d153c3ec2de7b9c8035a
SHA1 30ac2c1b40acfa0b0c873c400fe41bf52a17a577
SHA512 e430213794e202fc5026dfa6f382f1ca773d6fef9f08cc12ec15d69615205052ac4250bbc47c8f5c0797afc5b5ee100f39f670d91445942223aa2de8bf416543
TLSH
T1C631CCC7A45959B8EC5AD8BC06AFA9AAC141FD2AC2104861D0CA7C7ADD24925707E3D3
MD5 SHA1 SHA512 TLSH

Autoplay/resdata/autoplay_disc_R.ico

SHA256 79239745e920ed908667cf2bd7bf60ded19a3564a89e09a3545fa38577b50951
MD5 ee2010c43070d153c3ec2de7b9c8035a
SHA1 30ac2c1b40acfa0b0c873c400fe41bf52a17a577
SHA512 e430213794e202fc5026dfa6f382f1ca773d6fef9f08cc12ec15d69615205052ac4250bbc47c8f5c0797afc5b5ee100f39f670d91445942223aa2de8bf416543
TLSH
T1C631CCC7A45959B8EC5AD8BC06AFA9AAC141FD2AC2104861D0CA7C7ADD24925707E3D3
MD5 SHA1 SHA512 TLSH

Autoplay/resdata/autoplay_disc_S.ico

SHA256 79239745e920ed908667cf2bd7bf60ded19a3564a89e09a3545fa38577b50951
MD5 ee2010c43070d153c3ec2de7b9c8035a
SHA1 30ac2c1b40acfa0b0c873c400fe41bf52a17a577
SHA512 e430213794e202fc5026dfa6f382f1ca773d6fef9f08cc12ec15d69615205052ac4250bbc47c8f5c0797afc5b5ee100f39f670d91445942223aa2de8bf416543
TLSH
T1C631CCC7A45959B8EC5AD8BC06AFA9AAC141FD2AC2104861D0CA7C7ADD24925707E3D3
MD5 SHA1 SHA512 TLSH

Autoplay/resdata/autoplay_generic_extras_N.ico

SHA256 04a3b73acc78224ad8cec1f0537c8c2c5cd5451a21f0b75ca611ad27e532c849
MD5 bf76dd9bc3c96ca56eaa44af01660e00
SHA1 bf794e463ecb7aef9512249c5ffda150ab51fb82
SHA512 ce7fb7f762f245e84a8f6ed575cd384879ffa5f8a81456d703a1460f44d8fe049469cb213e893f8d0e1f20b128a6f6ab2adb2e9f3f9234d6474b3fee29307668
TLSH
T1E131CBA6FB048149E9859F714C26C69B4D4DFD8D419112D03AF27C9B7FF27223699202
MD5 SHA1 SHA512 TLSH

Autoplay/resdata/autoplay_generic_extras_R.ico

SHA256 04a3b73acc78224ad8cec1f0537c8c2c5cd5451a21f0b75ca611ad27e532c849
MD5 bf76dd9bc3c96ca56eaa44af01660e00
SHA1 bf794e463ecb7aef9512249c5ffda150ab51fb82
SHA512 ce7fb7f762f245e84a8f6ed575cd384879ffa5f8a81456d703a1460f44d8fe049469cb213e893f8d0e1f20b128a6f6ab2adb2e9f3f9234d6474b3fee29307668
TLSH
T1E131CBA6FB048149E9859F714C26C69B4D4DFD8D419112D03AF27C9B7FF27223699202
MD5 SHA1 SHA512 TLSH

Autoplay/resdata/autoplay_generic_extras_S.ico

SHA256 04a3b73acc78224ad8cec1f0537c8c2c5cd5451a21f0b75ca611ad27e532c849
MD5 bf76dd9bc3c96ca56eaa44af01660e00
SHA1 bf794e463ecb7aef9512249c5ffda150ab51fb82
SHA512 ce7fb7f762f245e84a8f6ed575cd384879ffa5f8a81456d703a1460f44d8fe049469cb213e893f8d0e1f20b128a6f6ab2adb2e9f3f9234d6474b3fee29307668
TLSH
T1E131CBA6FB048149E9859F714C26C69B4D4DFD8D419112D03AF27C9B7FF27223699202
MD5 SHA1 SHA512 TLSH

Autoplay/resdata/autoplay_readme_N.ico

SHA256 0b2f889f153b5ce59e5876dd4bf88a901097951cca7b1c2a162a56fda569af15
MD5 21ed7ff8c94d67276b650d15460f7644
SHA1 c266d9ebde946163cc199f95ccc54ce215df168d
SHA512 2d3611e1c7e0291bbcbb3eef22ab465ffe7bc2f828d0f3a4a2bdcecde9f34bb88d8968fac8bea16620f44b2864fd9a78f7866404ce35d5ab10472101f2980e0c
TLSH
T13831AA80E799C8E9E40210B66853FB411256F961F060DC2510FF752B95762C385B6E0F
MD5 SHA1 SHA512 TLSH

Autoplay/resdata/autoplay_readme_R.ico

SHA256 0b2f889f153b5ce59e5876dd4bf88a901097951cca7b1c2a162a56fda569af15
MD5 21ed7ff8c94d67276b650d15460f7644
SHA1 c266d9ebde946163cc199f95ccc54ce215df168d
SHA512 2d3611e1c7e0291bbcbb3eef22ab465ffe7bc2f828d0f3a4a2bdcecde9f34bb88d8968fac8bea16620f44b2864fd9a78f7866404ce35d5ab10472101f2980e0c
TLSH
T13831AA80E799C8E9E40210B66853FB411256F961F060DC2510FF752B95762C385B6E0F
MD5 SHA1 SHA512 TLSH

Autoplay/resdata/autoplay_readme_S.ico

SHA256 0b2f889f153b5ce59e5876dd4bf88a901097951cca7b1c2a162a56fda569af15
MD5 21ed7ff8c94d67276b650d15460f7644
SHA1 c266d9ebde946163cc199f95ccc54ce215df168d
SHA512 2d3611e1c7e0291bbcbb3eef22ab465ffe7bc2f828d0f3a4a2bdcecde9f34bb88d8968fac8bea16620f44b2864fd9a78f7866404ce35d5ab10472101f2980e0c
TLSH
T13831AA80E799C8E9E40210B66853FB411256F961F060DC2510FF752B95762C385B6E0F
MD5 SHA1 SHA512 TLSH

Autoplay/resdata/autoplay_secondary-content_N.ico

SHA256 3e4cc4fb430060b7c92453fa998fbd07e1069af3cbea963b6a046d6dbe7f62ab
MD5 9372e30ee976922403f14fd34ca9fedc
SHA1 a78d4ff97b64549d3dfce7bf7983ea98353b25de
SHA512 5afc210b93b24f1dd3fdfee870f736d052a45a4d110b1eff93631155da6a9212e8e7b5555a49c947bf573e5174af65ead7d5d4aad67a08a06225b1b08340c893
TLSH
T19131A893AF0CC5CEC2509871380EDA427983F80A82919D0EB2D3BB7794A821F459ED0E
MD5 SHA1 SHA512 TLSH

Autoplay/resdata/autoplay_secondary-content_R.ico

SHA256 3e4cc4fb430060b7c92453fa998fbd07e1069af3cbea963b6a046d6dbe7f62ab
MD5 9372e30ee976922403f14fd34ca9fedc
SHA1 a78d4ff97b64549d3dfce7bf7983ea98353b25de
SHA512 5afc210b93b24f1dd3fdfee870f736d052a45a4d110b1eff93631155da6a9212e8e7b5555a49c947bf573e5174af65ead7d5d4aad67a08a06225b1b08340c893
TLSH
T19131A893AF0CC5CEC2509871380EDA427983F80A82919D0EB2D3BB7794A821F459ED0E
MD5 SHA1 SHA512 TLSH

Autoplay/resdata/autoplay_secondary-content_S.ico

SHA256 3e4cc4fb430060b7c92453fa998fbd07e1069af3cbea963b6a046d6dbe7f62ab
MD5 9372e30ee976922403f14fd34ca9fedc
SHA1 a78d4ff97b64549d3dfce7bf7983ea98353b25de
SHA512 5afc210b93b24f1dd3fdfee870f736d052a45a4d110b1eff93631155da6a9212e8e7b5555a49c947bf573e5174af65ead7d5d4aad67a08a06225b1b08340c893
TLSH
T19131A893AF0CC5CEC2509871380EDA427983F80A82919D0EB2D3BB7794A821F459ED0E
MD5 SHA1 SHA512 TLSH

Autoplay/resdata/autoplay_secondarylink_rollover_LG_N.bmp

SHA256 1e70f20a85184c1d9eec717b7cbec398f0e67fb047b4ad226355656c99b0d6cf
MD5 4de472c2e4468cc13bf2738ebc8dda27
SHA1 e7cac25da4ba6b8538b71189f93cee5f88383360
SHA512 b17e69486c93a0aa850dcf9c96402efe8389d9c0b102a7ed2116ba934538b1bcc9f4de6e72e4c81abfa8514b42be6440001f9ecad06f3bab393527685ea5362e
SSDEEP 6:uLato6yjna6pepuqFruq/c4uqpHuqBuqciZhuqT5uqT5uq3BuqlLuqvs4uqZhust:0atxyrP03bWiDHnbrxYReBGD3uJc8b
TLSH
T12C8211F490390C23863EE827AC6D4C05DB142523EA2DD811D5BAFE9304239FCD858B57
MD5 SHA1 SHA512 SSDEEP TLSH

Autoplay/resdata/autoplay_secondarylink_rollover_LG_R.bmp

SHA256 1e70f20a85184c1d9eec717b7cbec398f0e67fb047b4ad226355656c99b0d6cf
MD5 4de472c2e4468cc13bf2738ebc8dda27
SHA1 e7cac25da4ba6b8538b71189f93cee5f88383360
SHA512 b17e69486c93a0aa850dcf9c96402efe8389d9c0b102a7ed2116ba934538b1bcc9f4de6e72e4c81abfa8514b42be6440001f9ecad06f3bab393527685ea5362e
SSDEEP 6:uLato6yjna6pepuqFruq/c4uqpHuqBuqciZhuqT5uqT5uq3BuqlLuqvs4uqZhust:0atxyrP03bWiDHnbrxYReBGD3uJc8b
TLSH
T12C8211F490390C23863EE827AC6D4C05DB142523EA2DD811D5BAFE9304239FCD858B57
MD5 SHA1 SHA512 SSDEEP TLSH

Autoplay/resdata/autoplay_secondarylink_rollover_LG_S.bmp

SHA256 1e70f20a85184c1d9eec717b7cbec398f0e67fb047b4ad226355656c99b0d6cf
MD5 4de472c2e4468cc13bf2738ebc8dda27
SHA1 e7cac25da4ba6b8538b71189f93cee5f88383360
SHA512 b17e69486c93a0aa850dcf9c96402efe8389d9c0b102a7ed2116ba934538b1bcc9f4de6e72e4c81abfa8514b42be6440001f9ecad06f3bab393527685ea5362e
SSDEEP 6:uLato6yjna6pepuqFruq/c4uqpHuqBuqciZhuqT5uqT5uq3BuqlLuqvs4uqZhust:0atxyrP03bWiDHnbrxYReBGD3uJc8b
TLSH
T12C8211F490390C23863EE827AC6D4C05DB142523EA2DD811D5BAFE9304239FCD858B57
MD5 SHA1 SHA512 SSDEEP TLSH

Autoplay/resdata/autoplay_secondarylink_rollover_N.bmp

SHA256 f55d51e068e57040b2a1f3ef8477de0ed8c987db2e6cf5286d523531258d8f9e
MD5 017a411e79605210fcd9503643c916f9
SHA1 1e11abf11dd3d3be0d7c8e9eb431896a0815ec68
SHA512 c26015a33d4e7b91ffe7cf26ccc68352aa880c3f761b85ddc629e72b617467dbeb6b1d0703e20b63d223c63e0c5f25bb5b6360ef6230a576acdf9f3d0a2ce170
SSDEEP 6:22iY/6yjza6ZeZuqFXuq/c4uqpzuqhuqcGZhuqTtuqTtuq3xuqlnuqvM4uqZhuAX:6XyXPEbbKGrXr7nlYSWRzuJ8or
TLSH
T13B5212F490390863863EE827AC6D0C05DB142523FA2DD811D5BAFE9304139FCD848B12
MD5 SHA1 SHA512 SSDEEP TLSH

Autoplay/resdata/autoplay_secondarylink_rollover_R.bmp

SHA256 f55d51e068e57040b2a1f3ef8477de0ed8c987db2e6cf5286d523531258d8f9e
MD5 017a411e79605210fcd9503643c916f9
SHA1 1e11abf11dd3d3be0d7c8e9eb431896a0815ec68
SHA512 c26015a33d4e7b91ffe7cf26ccc68352aa880c3f761b85ddc629e72b617467dbeb6b1d0703e20b63d223c63e0c5f25bb5b6360ef6230a576acdf9f3d0a2ce170
SSDEEP 6:22iY/6yjza6ZeZuqFXuq/c4uqpzuqhuqcGZhuqTtuqTtuq3xuqlnuqvM4uqZhuAX:6XyXPEbbKGrXr7nlYSWRzuJ8or
TLSH
T13B5212F490390863863EE827AC6D0C05DB142523FA2DD811D5BAFE9304139FCD848B12
MD5 SHA1 SHA512 SSDEEP TLSH

Autoplay/resdata/autoplay_secondarylink_rollover_S.bmp

SHA256 f55d51e068e57040b2a1f3ef8477de0ed8c987db2e6cf5286d523531258d8f9e
MD5 017a411e79605210fcd9503643c916f9
SHA1 1e11abf11dd3d3be0d7c8e9eb431896a0815ec68
SHA512 c26015a33d4e7b91ffe7cf26ccc68352aa880c3f761b85ddc629e72b617467dbeb6b1d0703e20b63d223c63e0c5f25bb5b6360ef6230a576acdf9f3d0a2ce170
SSDEEP 6:22iY/6yjza6ZeZuqFXuq/c4uqpzuqhuqcGZhuqTtuqTtuq3xuqlnuqvM4uqZhuAX:6XyXPEbbKGrXr7nlYSWRzuJ8or
TLSH
T13B5212F490390863863EE827AC6D0C05DB142523FA2DD811D5BAFE9304139FCD848B12
MD5 SHA1 SHA512 SSDEEP TLSH

Autoplay/resdata/button_M_N.bmp

SHA256 fd6e5226ae1859fb518a5dc71b95d60ad78a8fce136046cca1ccbf46c2896d72
MD5 e17950b90d1222b99252eb92a410b634
SHA1 bd1a772f9ad7b1baa5931727924eebdbfcf0b7b0
SHA512 1ca90136c7f75c133743adb1f669ec7c69fcd8863044e53b2b8fd6125832940b8980468084f787ad4b44271642e1f7912f470316d116785eb14361d6ea0ed56a
SSDEEP 12:6XH1M57eVbagqD6DeqDK15NHvvHclObguM/:gs0bmDwNW1nn84bw/
TLSH
T16D5215D17185FE72CC018836B939C7CEB07022E0FE82A531623A3D2A45B93947B37362
MD5 SHA1 SHA512 SSDEEP TLSH

Autoplay/resdata/button_M_R.bmp

SHA256 fd6e5226ae1859fb518a5dc71b95d60ad78a8fce136046cca1ccbf46c2896d72
MD5 e17950b90d1222b99252eb92a410b634
SHA1 bd1a772f9ad7b1baa5931727924eebdbfcf0b7b0
SHA512 1ca90136c7f75c133743adb1f669ec7c69fcd8863044e53b2b8fd6125832940b8980468084f787ad4b44271642e1f7912f470316d116785eb14361d6ea0ed56a
SSDEEP 12:6XH1M57eVbagqD6DeqDK15NHvvHclObguM/:gs0bmDwNW1nn84bw/
TLSH
T16D5215D17185FE72CC018836B939C7CEB07022E0FE82A531623A3D2A45B93947B37362
MD5 SHA1 SHA512 SSDEEP TLSH

Autoplay/resdata/button_M_S.bmp

SHA256 fd6e5226ae1859fb518a5dc71b95d60ad78a8fce136046cca1ccbf46c2896d72
MD5 e17950b90d1222b99252eb92a410b634
SHA1 bd1a772f9ad7b1baa5931727924eebdbfcf0b7b0
SHA512 1ca90136c7f75c133743adb1f669ec7c69fcd8863044e53b2b8fd6125832940b8980468084f787ad4b44271642e1f7912f470316d116785eb14361d6ea0ed56a
SSDEEP 12:6XH1M57eVbagqD6DeqDK15NHvvHclObguM/:gs0bmDwNW1nn84bw/
TLSH
T16D5215D17185FE72CC018836B939C7CEB07022E0FE82A531623A3D2A45B93947B37362
MD5 SHA1 SHA512 SSDEEP TLSH

Crack/Activation_Keygen.exe

SHA256 e5ace324e1e75ac1fb0ba4cd19297cc1d2b5a29694e5c6bd6c275b5f4a35bee2
MD5 f81a4b9d7e8dd8fe2927598a99798b67
SHA1 964aba40cc46890a67d4fbc934c0718431b4e342
SHA512 0ede6cdc7db1875f42a38bbcc937c3dda5a0298ed21881953e7ee3a756f363d343cb5e03ef0f198b1ba293085828cf3ccaeb90a2723375a01e5f5b06c546affd
SSDEEP 1536:AQewk8wmdWBRo4P35m4XHN72UtlbtKG6frwMUq9e8CLiCAVrFlU6xlE+xF5:AQG8ZdWBRoe35DV7btKLrwMUb8CLiC8t
TLSH
T1D2930221ED423C91D5219B7D32DDD5746C24CC911AE7AAB382EF7CEFFAB0A252465203
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

652176

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_ISOLATION IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Crack/Alternative/adobe.snr.patch-painter.exe

SHA256 a38ef1a02456b767690b8217e1cad2664ac2ff23d57a0cae1debbef2a23d7900
MD5 b28eb76dde67e6c0d91d32cabafbab13
SHA1 dda257ffdfd888f900e07daea02965fbeb46309e
SHA512 17d35a0ac8c178c97197af0891ddbbc4b71ef4607c360363363e2418a226253bbf2931ee1ded3a92922eac1a994cf3833a51a1ae1e8b4cde3e61e80ceeda6616
SSDEEP 3072:HGsgVlopVVACCYZDFpMWjV8l7rZ8IJ2f6fE/vF8SQDPLH5NEAisJQUlc+jf3qK:HGsYlpYZDDM/HZ8L6MnF8S2r5N9JQUl/
TLSH
T1621412F34D224073CE501FB5A7968AA41A952024253ECCF7B6EB8D035DF7769E420B79
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

1650288

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Crack/Check_Disable.cmd

SHA256 6d12d961ac8e7ed617e8a46e837a4810baa124aa149e2ffbcd3511afbecf7e1b
MD5 86e1d0c712554c1871a78f61b5d194e7
SHA1 62c5a5d7c8873d33634f2e30dbcf43046badb74c
SHA512 627e605f42e006dfca7b221a20fb73ad66fa86a489844fb013c1cb8c1113a72a9fdf47d20df893eaeb69239fe5bae920fee3fe35e4c72a12c9de707a80189ba6
TLSH
T10351680D1F48E92E44703134498B55BF2B2BF356EA9EE844352A9C47D322AED4539CFC
MD5 SHA1 SHA512 TLSH

Crack/readme.txt

SHA256 1aece7b76084f1e06bf5456b41385a800cb053f304f22f985ecc167ba9663e62
MD5 92ece00edf70c58ff08f6c0d1a78cec1
SHA1 83cf0026e6cab092efa9dd58942cacf2fb6b5517
SHA512 d8a792b1bf5ac415ee4ed3ddd0693ccfd8e8870d722bb3591de10fe72798930126878b2a6587969850f19543b86f12fffbde10d6811283ca893a053611622215
SSDEEP 192:NJG/q6wBqE2iiTaPYGZ2bphZoKTw34InG/q6wBqE2iiTMYGZ2aHDIq:J8QuZ3e8Mz
TLSH
T1BF2226214A8A259F0211B15FD808BD09FADA45FF3F6B936735A42E7E3BF2020813D759
MD5 SHA1 SHA512 SSDEEP TLSH

Crack/x-force.nfo

SHA256 0405bd0589b6a015d7a5351b83dc499cb4c13163d34ba37f656c1e33de26216b
MD5 e0f1c0e83b7542f39f46dc74f7c0ff4a
SHA1 5bec446935a81c403f01df33427e9850c47256ff
SHA512 8b900ff1c83aceff1f5abd41bd74636de59c72aedd3c9c96378af3b696d9e6cb673f4fb68f16eb0699b1050ef4a7d267ccdf98cb6f52efb750a805e6dba236ef
SSDEEP 24:Su/7aY6p+Ncd/Bp0IOKLTfON6yZ3GVn+o4tUXjKXVDO0LRsuJ3U6SZLf/tWc0GaP:SH+mPvbONDen3GUX6as3+/tWk18
TLSH
T1D7B1F70ABF4662BEA320DF75C0060656F91D6C1F926904A4704FA3F82F7B3761348676
MD5 SHA1 SHA512 SSDEEP TLSH

autoplay.exe

IMPHASH ec7603dfc11290c5ea59ede1b41eac50
SHA256 3b9dabd99dc58a5242616cb6d1d876bca3046119a9b150c7d7868bf02202ea82
MD5 76ef16e94f77454aaffdfa4c700be85f
SHA1 9b45b3826706337a11e43248095fb2c62e42d14d
SHA512 4185cf9393877fd6d80ecfb7290c10d40a62fc7013d175e5fc91df56870500ea33b518e4f55b4e7d8a7865d3f7707fb5f49f621d5d944bb1edffda4734f99d53
SSDEEP 3072:fNCpBPbYsMn1mx6nWGdN6YROBxQo6PfSPgHvUJjX1qINSxT3OIpkApPxn:fNiGC6nWGdN6YO6Pf9vAjX1qINGLdRz
TLSH
T18F047B6232D050F3E49368B299999BB68776FC74433D85D3E3743D2A25222F27B38365
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

55:7e:59:12:c0:ed:63:3a:cb:5b:e7:da:2f:6c:23:99:5e:d6:5d:d2

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Information Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Chains

Aug 6, 2008

CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Information Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Serial Number

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Jul 16, 2004 - Jul 15, 2014

Subject

CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Information Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Serial Number

4b:ea:81:7c:ba:c7:c3:8a:ba:72:e7:be:6f:00:de:6d

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Nov 7, 2007 - Dec 10, 2008

Minor OS version

0

Major OS version

4

Entry point

75130

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

comctl32

_TrackMouseEvent ord17

msvfw32

MCIWndCreateW MCIWndCreateA

winmm

waveOutSetVolume waveOutGetVolume PlaySoundA waveOutGetNumDevs

shlwapi

PathRemoveFileSpecW

kernel32

InterlockedExchange GetModuleHandleA GetModuleFileNameA GetWindowsDirectoryA GetSystemDirectoryA LoadLibraryA SetLastError GetOEMCP GetACP SetEndOfFile CreateFileA FlushFileBuffers SetStdHandle GetTimeZoneInformation GetSystemTimeAsFileTime GetCurrentProcessId GetCurrentThreadId GetTickCount QueryPerformanceCounter VirtualQuery GetSystemInfo VirtualProtect GetLocaleInfoA IsBadCodePtr IsBadReadPtr SetFilePointer GetStringTypeA IsBadWritePtr VirtualAlloc VirtualFree HeapCreate HeapDestroy GetCommandLineW GetCommandLineA GetEnvironmentStrings FreeEnvironmentStringsA UnhandledExceptionFilter CompareStringA WaitForSingleObject CloseHandle DeviceIoControl MulDiv FreeLibrary Sleep ReleaseMutex GetLastError GetUserDefaultLCID GetUserDefaultUILanguage GetSystemDefaultLangID WriteFile ReadFile GetStartupInfoA GetFileType GetStdHandle SetHandleCount SetUnhandledExceptionFilter SetEnvironmentVariableA HeapSize HeapReAlloc RtlUnwind FindClose FileTimeToSystemTime FileTimeToLocalFileTime FindFirstFileA RaiseException ExitProcess TerminateProcess GetCurrentProcess GetVersionExA HeapAlloc HeapFree LCMapStringA

user32

DestroyIcon GetSystemMetrics SetFocus BeginPaint FillRect DrawEdge keybd_event SetForegroundWindow UpdateWindow TranslateMessage ReleaseDC GetAsyncKeyState SetCursor EndPaint RedrawWindow MoveWindow GetIconInfo CreateIconIndirect GetClientRect InvalidateRect ShowWindow PostQuitMessage DrawIconEx SetRect GetDC GetWindowRect

gdi32

CreateSolidBrush GetStockObject PatBlt CreateCompatibleBitmap CreateCompatibleDC SetTextAlign SetLayout LineTo SetBkMode StretchBlt BitBlt SetTextColor CreatePenIndirect SelectObject MoveToEx Polyline DeleteObject DeleteDC

advapi32

RegQueryValueA RegCloseKey

autorun.inf

SHA256 f6e3c4549690718297924317757db3941e9f282c0534d9ae1d20132d4f8d6659
MD5 95ce97cd76fb08e07e005f3a419757b1
SHA1 4a5256ea0f40d31773072b7311afbd4cd5f50616
SHA512 bfb56939d24cb3a13577df79238edb5d70f5c7d15b06ea188531265a49ce79b484232b19258f7b359fa888a87ce2028275bb8eb8d96d8064d416811979cb2261
TLSH
T194A002B7E98E246F6B1D6454F4E6143CE7FAE0A4190023DC2257079518D85492F39492
MD5 SHA1 SHA512 TLSH

m0nkrus.nfo

SHA256 4ae69bf3c1a7dd926b3f31d07e0b6e5df6219e50ccf3c8d5e0843f97fdc7f448
MD5 a947d9849a90b0b0ebeae5d03033f7be
SHA1 d11d19a41ed0c52af558c28cc935e150abc67746
SHA512 735c67c198beb4d9cc1a060c5fd22d7abdb2b6668e420cab88c39796f0bbec768566bd1bb205be272bcc4a06eb5603fb923c0aa3b84a121cfaeb071aa0a1970b
TLSH
T11E51332B3C4272271D3A8A90179C8E3AEF1AA427A35A98F0331DE7CDAB7031045DC5DD
MD5 SHA1 SHA512 TLSH

unicows.dll

IMPHASH 785d5607ed2f18f4ea0be5809350b169
SHA256 22f23cc65698741184ec34f46e6f69717644e0b5aabf5d5bd015101f2d72e56e
MD5 e1102cedf0c818984c2aca2a666d4c5f
SHA1 d8d88ea7083aee9c40f6fdc6c56451a018d21a83
SHA512 e58b35815801d6d3797f95c986834d2ca5450ccc3f1fa1d27d127a8d1d36f8e21279173715a00686c9c831d22d7c5b5b9cc5874170223a4d78f09c4eefa390a2
SSDEEP 3072:fEWAQKw38JvCAib0uT++ICSQ6UOX/mQhYQXS0FsmaiUZZynGJ5x/59XH7PMYV1Nz:qwgvCAib0PAOOQhS0/s5x/R1PkOFB5
TLSH
T180344A19BCC05E43EF6733BEF9207B74D7DB8A241538AC8646CE5E0E25B1681133E5A6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

74:61:85:10:84:38:b9:d3:08:de:5e:77:88:9b:e4:51

Digest Algorithm

md5

PE Digests Matches

Trusted

Not trusted

Signing Certificate

Chains

Jan 1, 0001

Subject

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Serial Number

4a:19:d2:38:8c:82:59:1c:a5:5d:73:5f:15:5d:dc:a3

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Timespan

May 12, 1997 - Jan 7, 2004

Subject

CN=VeriSign Time Stamping Service,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)01,O=VeriSign\, Inc.

Serial Number

08:7a:6d:5c:6f:62:93:4f:ba:c4:fd:43:e1:14:18:9d

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Feb 28, 2001 - Jan 6, 2004

Subject

Serial Number

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40

Issuer

Timespan

Jan 10, 1997 - Dec 31, 2020

Subject

Serial Number

6a:0b:99:4f:c0:00:de:aa:11:d4:d8:40:9a:a8:be:e6

Issuer

Key Usages

KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 10, 2000 - Nov 12, 2005

Subject

Serial Number

61:07:11:43:00:00:00:00:00:34

Issuer

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 25, 2002 - Nov 25, 2003

Minor OS version

0

Major OS version

6

Entry point

57683

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

unicows.pdb

kernel32

GetDiskFreeSpaceA GetDiskFreeSpaceW GetDriveTypeA GetDriveTypeW FreeEnvironmentStringsA GetEnvironmentStrings GetEnvironmentStringsW GetEnvironmentVariableA GetEnvironmentVariableW FindClose IsDBCSLeadByte GetFullPathNameA GetFullPathNameW GetLocaleInfoW GetLogicalDriveStringsA GetLogicalDriveStringsW GetModuleFileNameA GetModuleFileNameW GetModuleHandleW GetNamedPipeHandleStateA GetNamedPipeHandleStateW GetNumberFormatA GetNumberFormatW GetPrivateProfileIntA GetPrivateProfileIntW GetPrivateProfileSectionA GetPrivateProfileSectionW GetPrivateProfileSectionNamesA GetPrivateProfileSectionNamesW GetPrivateProfileStringA GetPrivateProfileStringW GetPrivateProfileStructA GetPrivateProfileStructW GetProfileIntA GetProfileIntW GetProfileSectionA GetProfileSectionW GetProfileStringA GetProfileStringW GetShortPathNameA GetShortPathNameW GetStartupInfoA GetStartupInfoW GetStringTypeExA GetStringTypeExW GetSystemDirectoryA GetSystemDirectoryW GetTempFileNameW GetTempPathW GetTimeFormatA GetTimeFormatW GetVersionExA GetVersionExW GetVolumeInformationA GetVolumeInformationW GetWindowsDirectoryA GetWindowsDirectoryW GlobalAddAtomW GlobalFindAtomA GlobalFindAtomW GlobalGetAtomNameA GlobalGetAtomNameW IsBadStringPtrW IsValidCodePage LCMapStringA LCMapStringW LoadLibraryW LoadLibraryExW lstrcatW lstrcmpW lstrcmpiW lstrcpyW lstrcpynW MoveFileW OpenEventA OpenEventW GetDefaultCommConfigW OpenFileMappingW OpenMutexA OpenMutexW OpenSemaphoreA OpenSemaphoreW OutputDebugStringA OutputDebugStringW PeekConsoleInputA PeekConsoleInputW QueryDosDeviceA QueryDosDeviceW ReadConsoleA ReadConsoleW ReadConsoleInputA ReadConsoleInputW ReadConsoleOutputA ReadConsoleOutputW ReadConsoleOutputCharacterA ReadConsoleOutputCharacterW RemoveDirectoryA RemoveDirectoryW ScrollConsoleScreenBufferA ScrollConsoleScreenBufferW SearchPathA SearchPathW SetComputerNameA SetComputerNameW SetConsoleTitleA SetConsoleTitleW SetCurrentDirectoryA SetCurrentDirectoryW SetDefaultCommConfigA SetDefaultCommConfigW SetEnvironmentVariableA SetEnvironmentVariableW SetFileAttributesA SetFileAttributesW SetLocaleInfoA SetLocaleInfoW SetVolumeLabelA SetVolumeLabelW VerLanguageNameA VerLanguageNameW WaitNamedPipeA WaitNamedPipeW WriteConsoleA WriteConsoleW WriteConsoleInputA WriteConsoleInputW WriteConsoleOutputA WriteConsoleOutputW WriteConsoleOutputCharacterA WriteConsoleOutputCharacterW WritePrivateProfileSectionA WritePrivateProfileSectionW WritePrivateProfileStringA WritePrivateProfileStringW WritePrivateProfileStructA WritePrivateProfileStructW WriteProfileSectionA WriteProfileSectionW WriteProfileStringA WriteProfileStringW FindResourceA lstrcpyA IsBadWritePtr SetErrorMode GetStringTypeW FindResourceW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter GetDefaultCommConfigA GetDateFormatW GetDateFormatA GetCurrentDirectoryA GetCurrentDirectoryW GetCurrencyFormatW GetCurrencyFormatA GetConsoleTitleW GetConsoleTitleA GetComputerNameW GetComputerNameA GetAtomNameW GetAtomNameA FormatMessageW FormatMessageA LocalFree HeapReAlloc LocalAlloc FreeEnvironmentStringsW FindNextFileW FindNextFileA FindFirstFileW FindFirstFileA FindFirstChangeNotificationW FindFirstChangeNotificationA FindAtomW FindAtomA FillConsoleOutputCharacterW FillConsoleOutputCharacterA FatalAppExitW FatalAppExitA ExpandEnvironmentStringsW ExpandEnvironmentStringsA EnumTimeFormatsW EnumTimeFormatsA EnumSystemLocalesW EnumSystemLocalesA EnumSystemCodePagesW EnumDateFormatsW EnumDateFormatsA EnumCalendarInfoW EnumCalendarInfoA DeleteFileW CreateSemaphoreW CreateSemaphoreA CreateProcessW CreateProcessA CreateNamedPipeW CreateNamedPipeA CreateMutexW CreateMutexA CreateMailslotW CreateMailslotA CreateFileMappingW CreateFileMappingA CreateFileW CreateEventW CreateEventA CreateDirectoryExW CreateDirectoryExA CreateDirectoryW CreateDirectoryA CopyFileW CopyFileA CompareStringW CommConfigDialogW CommConfigDialogA CallNamedPipeW CallNamedPipeA BuildCommDCBAndTimeoutsW BuildCommDCBAndTimeoutsA BuildCommDCBW BuildCommDCBA AddAtomW AddAtomA InitializeCriticalSection GetACP GetOEMCP DeleteCriticalSection GetFileAttributesA LoadLibraryExA EnumResourceTypesW EnumResourceNamesW EnumResourceLanguagesW lstrlenW FindResourceExW SizeofResource LoadResource LockResource FreeResource GetTempFileNameA GetTempPathA DeleteFileA MoveFileA _lclose _lread _lwrite _llseek VirtualQuery GetSystemInfo VirtualFree VirtualAlloc VirtualProtect TlsAlloc TlsFree TlsGetValue TlsSetValue GetCurrentProcessId EnterCriticalSection LeaveCriticalSection CompareStringA GlobalAddAtomA AreFileApisANSI GlobalLock GlobalAlloc GlobalUnlock GlobalFree GetCurrentThreadId lstrcmpA WideCharToMultiByte lstrcmpiA GetLocaleInfoA CreateFileA GetFileSize CloseHandle IsDBCSLeadByteEx LoadLibraryA InterlockedExchange FreeLibrary GetModuleHandleA GetProcAddress GetCPInfo GetVersion GetFileAttributesW GetLastError lstrlenA GetProcessHeap HeapAlloc SetLastError MultiByteToWideChar OpenFileMappingA HeapFree RtlUnwind

user32

SystemParametersInfoW TranslateAcceleratorW TabbedTextOutA TabbedTextOutW UnregisterClassA UnregisterClassW VkKeyScanExA VkKeyScanExW WinHelpA WinHelpW wvsprintfW EnumClipboardFormats GetClipboardData VkKeyScanW wsprintfW IsCharLowerW IsCharAlphaNumericW IsCharAlphaW InsertMenuItemW InsertMenuItemA InsertMenuW InsertMenuA GrayStringW GrayStringA GetWindowTextLengthW GetWindowTextLengthA GetWindowTextW GetWindowTextA GetWindowLongW GetTabbedTextExtentW GetTabbedTextExtentA GetPropW GetMessageW GetMenuStringW GetMenuStringA GetMenuItemInfoW GetMenuItemInfoA GetKeyNameTextW GetKeyboardLayout GetKeyNameTextA GetKeyboardLayoutNameW GetKeyboardLayoutNameA GetDlgItemTextW GetDlgItemTextA GetClipboardFormatNameW GetClipboardFormatNameA GetClassNameW GetClassLongW GetClassLongA GetClassInfoExW GetClassInfoExA GetClassInfoW GetClassInfoA FindWindowExW FindWindowExA FindWindowW FindWindowA EnableWindow EnumPropsExW EnumPropsExA EnumPropsW EnumPropsA EnumDisplaySettingsW EnumDisplaySettingsA DrawTextExW DrawTextExA DrawTextW DrawTextA DrawStateW DrawStateA DlgDirSelectExW DlgDirSelectExA DlgDirSelectComboBoxExW DlgDirSelectComboBoxExA DlgDirListComboBoxW DlgDirListComboBoxA DlgDirListW SystemParametersInfoA DispatchMessageW DialogBoxParamW DialogBoxParamA DialogBoxIndirectParamW DialogBoxIndirectParamA DefMDIChildProcW DefFrameProcW DefDlgProcW DdeQueryStringW DdeQueryStringA DdeQueryConvInfo DdeInitializeW DdeInitializeA DdeCreateStringHandleW DdeCreateStringHandleA DdeConnectList DdeConnect CharUpperBuffW CharUpperW CharToOemBuffW CharToOemW CharPrevW CharNextW CharLowerBuffW CharLowerW ChangeMenuW SetWindowTextW SetWindowTextA SetWindowsHookExW SetWindowsHookW SetWindowsHookA SetWindowLongW SetPropW SetMenuItemInfoW SetMenuItemInfoA SetDlgItemTextW SetDlgItemTextA SetClassLongW SetClassLongA SendNotifyMessageW SendMessageTimeoutW SendMessageCallbackW SendMessageW SendDlgItemMessageW RemovePropW RegisterWindowMessageW RegisterClipboardFormatW RegisterClipboardFormatA RegisterClassExW RegisterClassExA RegisterClassW RegisterClassA PostThreadMessageW PostMessageW PeekMessageW OemToCharBuffW OemToCharW ModifyMenuW ModifyMenuA MessageBoxIndirectW MessageBoxIndirectA MessageBoxExW MessageBoxW MapVirtualKeyExW MapVirtualKeyExA ChangeMenuA ChangeDisplaySettingsW ChangeDisplaySettingsA CreateWindowExW CreateWindowExA CreateMDIWindowW CreateMDIWindowA CreateDialogParamW CreateDialogParamA CreateDialogIndirectParamW CreateDialogIndirectParamA CreateAcceleratorTableW CreateAcceleratorTableA CopyAcceleratorTableW CopyAcceleratorTableA CallWindowProcW CallMsgFilterW CallMsgFilterA AppendMenuW AppendMenuA GetWindowThreadProcessId SetWindowLongA TranslateAcceleratorA IsDialogMessageA DispatchMessageA PeekMessageA GetMessageA PostThreadMessageA PostMessageA SendNotifyMessageA SendMessageTimeoutA SendMessageCallbackA SendMessageA DefWindowProcA CallWindowProcA DefMDIChildProcA DefFrameProcA DefDlgProcA GetWindowLongA GetParent GetDlgItem SetPropA RemovePropA GetPropA IsDlgButtonChecked GetClassNameA CharLowerA CharUpperA UnhookWindowsHookEx SetWindowsHookExA MapVirtualKeyW CallNextHookEx MapVirtualKeyA LoadStringW LoadMenuIndirectW LoadMenuIndirectA EnumChildWindows RegisterWindowMessageA LoadMenuW LoadMenuA LoadKeyboardLayoutW LoadKeyboardLayoutA LoadImageW LoadImageA LoadIconW LoadIconA LoadCursorFromFileW LoadCursorFromFileA LoadCursorW LoadCursorA LoadBitmapW LoadBitmapA LoadAcceleratorsW LoadAcceleratorsA IsWindowUnicode IsWindow IsDialogMessageW DlgDirListA IsClipboardFormatAvailable IsCharUpperW

gdi32

GetEnhMetaFileDescriptionW GetGlyphOutlineA GetGlyphOutlineW GetICMProfileA GetICMProfileW GetKerningPairsA GetKerningPairsW GetLogColorSpaceA GetLogColorSpaceW GetMetaFileA GetMetaFileW GetObjectA GetObjectType GetObjectW GetOutlineTextMetricsA GetOutlineTextMetricsW GetTextExtentExPointA GetTextExtentExPointW GetTextExtentPointA GetEnhMetaFileDescriptionA GetTextExtentPoint32A GetTextExtentPoint32W GetTextFaceA GetTextFaceW GetTextMetricsA GetTextMetricsW PolyTextOutA PolyTextOutW RemoveFontResourceA RemoveFontResourceW ResetDCA ResetDCW SetICMProfileA SetICMProfileW StartDocA StartDocW TextOutW UpdateICMRegKeyA UpdateICMRegKeyW GetEnhMetaFileW GetEnhMetaFileA GetCharacterPlacementW GetCharacterPlacementA GetCharWidthFloatW GetCharWidthFloatA GetCharWidth32W GetCharWidthW GetCharWidthA GetCharABCWidthsFloatW GetCharABCWidthsFloatA GetCharABCWidthsW GetCharABCWidthsA ExtTextOutW ExtTextOutA EnumICMProfilesW EnumICMProfilesA EnumFontsW EnumFontsA EnumFontFamiliesExW EnumFontFamiliesExA EnumFontFamiliesW EnumFontFamiliesA CreateScalableFontResourceW CreateScalableFontResourceA CreateMetaFileW CreateMetaFileA CreateICW CreateICA CreateFontIndirectW CreateFontIndirectA CreateFontW CreateFontA CreateEnhMetaFileW CreateEnhMetaFileA CreateDCW CreateDCA CreateColorSpaceW CreateColorSpaceA CopyMetaFileW CopyMetaFileA CopyEnhMetaFileW CopyEnhMetaFileA AddFontResourceW AddFontResourceA GetFontData GetTextExtentPointW TranslateCharsetInfo GetTextCharset

mpr

WNetGetUniversalNameW MultinetGetConnectionPerformanceW WNetAddConnectionA WNetAddConnectionW WNetAddConnection2A WNetAddConnection2W WNetAddConnection3A WNetAddConnection3W WNetCancelConnectionA WNetCancelConnectionW WNetCancelConnection2A WNetCancelConnection2W WNetConnectionDialog1A WNetConnectionDialog1W WNetDisconnectDialog1A WNetDisconnectDialog1W WNetEnumResourceA WNetEnumResourceW WNetGetConnectionA WNetGetConnectionW WNetGetLastErrorA WNetGetLastErrorW WNetGetNetworkInformationA WNetGetNetworkInformationW WNetGetProviderNameA WNetUseConnectionW WNetUseConnectionA WNetOpenEnumW WNetOpenEnumA WNetGetUserW WNetGetUserA MultinetGetConnectionPerformanceA WNetGetUniversalNameA WNetGetResourceParentW WNetGetResourceParentA WNetGetResourceInformationW WNetGetResourceInformationA WNetGetProviderNameW

advapi32

RegOpenKeyA RegEnumValueA RegUnLoadKeyW RegUnLoadKeyA RegSetValueExW RegSetValueExA RegSetValueW RegSetValueA RegSaveKeyW RegSaveKeyA RegReplaceKeyW RegReplaceKeyA RegQueryValueExW RegQueryValueExA RegQueryValueW RegQueryValueA RegQueryMultipleValuesW RegQueryMultipleValuesA RegQueryInfoKeyW RegQueryInfoKeyA RegOpenKeyExW RegOpenKeyW RegCloseKey RegLoadKeyW RegLoadKeyA RegEnumValueW RegEnumKeyExW RegEnumKeyExA RegEnumKeyW RegEnumKeyA RegDeleteValueW RegDeleteValueA RegDeleteKeyW RegDeleteKeyA RegCreateKeyExW RegCreateKeyExA RegCreateKeyW RegCreateKeyA RegConnectRegistryW RegConnectRegistryA IsTextUnicode GetUserNameW GetUserNameA RegOpenKeyExA

comdlg32

GetOpenFileNameW GetFileTitleW GetFileTitleA FindTextW ChooseFontW ChooseFontA ChooseColorW ChooseColorA ReplaceTextW FindTextA ReplaceTextA GetOpenFileNameA GetSaveFileNameA PageSetupDlgA PageSetupDlgW PrintDlgA PrintDlgW GetSaveFileNameW

version

VerQueryValueW VerQueryValueA VerInstallFileW VerInstallFileA VerFindFileW VerFindFileA GetFileVersionInfoSizeW GetFileVersionInfoSizeA GetFileVersionInfoW GetFileVersionInfoA

shell32

SHGetPathFromIDListA ord180 ord179 SHGetFileInfoA SHFileOperationA SHChangeNotify SHBrowseForFolderA Shell_NotifyIconA ShellExecuteExA ShellExecuteW ShellExecuteA ShellAboutW ShellAboutA FindExecutableW FindExecutableA ExtractIconExA DragQueryFileA DragQueryFileW ExtractIconW ExtractIconA

winspool.drv

GetPrinterW GetPrinterDataW GetPrinterDriverW GetPrinterDriverDirectoryA GetPrinterDriverDirectoryW GetPrintProcessorDirectoryA GetPrintProcessorDirectoryW GetJobW OpenPrinterW ResetPrinterA ResetPrinterW SetJobA SetJobW SetPrinterA SetPrinterW SetPrinterDataA SetPrinterDataW StartDocPrinterA EnumPrintProcessorsW EnumPrintProcessorDatatypesW EnumPrintersW EnumPrinterDriversW EnumPortsW EnumMonitorsW DocumentPropertiesW DocumentPropertiesA DeviceCapabilitiesW DeviceCapabilitiesA DeletePrintProvidorW DeletePrintProvidorA DeletePrintProcessorW DeletePrintProcessorA DeletePrinterDriverW DeletePrinterDriverA DeletePortW DeletePortA DeleteMonitorW DeleteMonitorA ConfigurePortW ConfigurePortA AdvancedDocumentPropertiesW AdvancedDocumentPropertiesA AddPrintProvidorW AddPrintProvidorA AddPrintProcessorW AddPrintProcessorA AddPrinterDriverW AddPrinterDriverA AddPrinterW AddPrinterA AddPortW AddPortA AddMonitorW AddMonitorA AddJobW AddJobA OpenPrinterA StartDocPrinterW

oledlg

OleUIUpdateLinksW OleUIPromptUserW OleUIPasteSpecialW OleUIObjectPropertiesW OleUIInsertObjectW OleUIEditLinksW OleUIConvertW OleUIChangeSourceW OleUIChangeIconW OleUIBusyW ord8 OleUIAddVerbMenuW ord1 ord6

winmm

waveOutGetErrorTextW waveOutGetErrorTextA waveOutGetDevCapsW waveOutGetDevCapsA waveInGetErrorTextW mixerGetControlDetailsW midiOutGetErrorTextW midiOutGetErrorTextA midiOutGetDevCapsW midiOutGetDevCapsA midiInGetErrorTextW midiInGetDevCapsW midiInGetDevCapsA mciSendStringW mciSendStringA mciSendCommandW mciGetErrorStringW mciGetErrorStringA midiInGetErrorTextA mciGetDeviceIDW mciGetDeviceIDA joyGetDevCapsW joyGetDevCapsA auxGetDevCapsW auxGetDevCapsA PlaySoundW PlaySoundA mixerGetDevCapsW mixerGetLineControlsW mixerGetLineInfoW mmioInstallIOProcW mmioOpenA mmioOpenW mmioRenameA mmioRenameW mmioStringToFOURCCA mmioStringToFOURCCW sndPlaySoundA sndPlaySoundW waveInGetDevCapsA waveInGetDevCapsW waveInGetErrorTextA mixerGetDevCapsA

avicap32

capCreateCaptureWindowA capGetDriverDescriptionA

msvfw32

MCIWndCreateW MCIWndCreateA GetSaveFileNamePreviewW GetOpenFileNamePreviewW

imm32

ImmReleaseContext ImmGetCompositionStringA ImmGetContext ImmGetCompositionStringW

AcquireCredentialsHandleW AddAtomW AddFontResourceW AddJobW AddMonitorW AddPortW AddPrintProcessorW AddPrintProvidorW AddPrinterDriverW AddPrinterW AdvancedDocumentPropertiesW AppendMenuW BeginUpdateResourceA BeginUpdateResourceW BroadcastSystemMessageW BuildCommDCBAndTimeoutsW BuildCommDCBW CallMsgFilterW CallNamedPipeW CallWindowProcA CallWindowProcW ChangeDisplaySettingsExW ChangeDisplaySettingsW ChangeMenuW CharLowerBuffW CharLowerW CharNextW CharPrevW CharToOemBuffW CharToOemW CharUpperBuffW CharUpperW ChooseColorW ChooseFontW CommConfigDialogW CompareStringW ConfigurePortW CopyAcceleratorTableW CopyEnhMetaFileW CopyFileExW CopyFileW CopyMetaFileW CreateAcceleratorTableW CreateColorSpaceW CreateDCW CreateDialogIndirectParamW CreateDialogParamW CreateDirectoryExW CreateDirectoryW CreateEnhMetaFileW CreateEventW CreateFileMappingW CreateFileW CreateFontIndirectW CreateFontW CreateICW CreateMDIWindowW CreateMailslotW CreateMetaFileW CreateMutexW CreateNamedPipeW CreateProcessW CreateScalableFontResourceW CreateSemaphoreW CreateStdAccessibleProxyW CreateWaitableTimerW CreateWindowExW CryptAcquireContextW CryptEnumProviderTypesW CryptEnumProvidersW CryptGetDefaultProviderW CryptSetProviderExW CryptSetProviderW CryptSignHashW CryptVerifySignatureW DdeConnect DdeConnectList DdeCreateStringHandleW DdeInitializeW DdeQueryConvInfo DdeQueryStringW DefDlgProcW DefFrameProcW DefMDIChildProcW DefWindowProcW DeleteFileW DeleteMonitorW DeletePortW DeletePrintProcessorW DeletePrintProvidorW DeletePrinterDriverW DeviceCapabilitiesW DialogBoxIndirectParamW DialogBoxParamW DispatchMessageW DlgDirListComboBoxW DlgDirListW DlgDirSelectComboBoxExW DlgDirSelectExW DocumentPropertiesW DragQueryFileW DrawStateW DrawTextExW DrawTextW EnableWindow EndUpdateResourceA EndUpdateResourceW EnumCalendarInfoExW EnumCalendarInfoW EnumClipboardFormats EnumDateFormatsExW EnumDateFormatsW EnumDisplayDevicesW EnumDisplaySettingsExW EnumDisplaySettingsW EnumFontFamiliesExW EnumFontFamiliesW EnumFontsW EnumICMProfilesW EnumMonitorsW EnumPortsW EnumPrintProcessorDatatypesW EnumPrintProcessorsW EnumPrinterDriversW EnumPrintersW EnumPropsA EnumPropsExA EnumPropsExW EnumPropsW EnumSystemCodePagesW EnumSystemLocalesW EnumTimeFormatsW EnumerateSecurityPackagesW ExpandEnvironmentStringsW ExtTextOutW ExtractIconExW ExtractIconW FatalAppExitW FillConsoleOutputCharacterW FindAtomW FindExecutableW FindFirstChangeNotificationW FindFirstFileW FindNextFileW FindResourceExW FindResourceW FindTextW FindWindowExW FindWindowW FormatMessageW FreeContextBuffer FreeEnvironmentStringsW GetAltTabInfoW GetAtomNameW GetCPInfo GetCPInfoExW GetCalendarInfoW GetCharABCWidthsFloatW GetCharABCWidthsW GetCharWidth32W GetCharWidthFloatW GetCharWidthW GetCharacterPlacementW GetClassInfoExW GetClassInfoW GetClassLongW GetClassNameW GetClipboardData GetClipboardFormatNameW GetComputerNameW GetConsoleTitleW GetCurrencyFormatW GetCurrentDirectoryW GetCurrentHwProfileW GetDateFormatW GetDefaultCommConfigW GetDiskFreeSpaceExW GetDiskFreeSpaceW GetDlgItemTextW GetDriveTypeW GetEnhMetaFileDescriptionW GetEnhMetaFileW GetEnvironmentStringsW GetEnvironmentVariableW GetFileAttributesExW GetFileAttributesW GetFileTitleW GetFileVersionInfoSizeW GetFileVersionInfoW GetFullPathNameW GetGlyphOutlineW GetICMProfileW GetJobW GetKerningPairsW GetKeyNameTextW GetKeyboardLayoutNameW GetLocaleInfoW GetLogColorSpaceW GetLogicalDriveStringsW GetLongPathNameW GetMenuItemInfoW GetMenuStringW GetMessageW GetMetaFileW GetModuleFileNameW GetModuleHandleW GetMonitorInfoW GetNamedPipeHandleStateW GetNumberFormatW GetObjectW GetOpenFileNamePreviewW GetOpenFileNameW GetOutlineTextMetricsW GetPrintProcessorDirectoryW GetPrinterDataW GetPrinterDriverDirectoryW GetPrinterDriverW GetPrinterW GetPrivateProfileIntW GetPrivateProfileSectionNamesW GetPrivateProfileSectionW GetPrivateProfileStringW GetPrivateProfileStructW GetProcAddress GetProfileIntW GetProfileSectionW GetProfileStringW GetPropA GetPropW GetRoleTextW GetSaveFileNamePreviewW GetSaveFileNameW GetShortPathNameW GetStartupInfoW GetStateTextW GetStringTypeExW GetStringTypeW GetSystemDirectoryW GetSystemWindowsDirectoryW GetTabbedTextExtentW GetTempFileNameW GetTempPathW GetTextExtentExPointW GetTextExtentPoint32W GetTextExtentPointW GetTextFaceW GetTextMetricsW GetTimeFormatW GetUserNameW GetVersionExW GetVolumeInformationW GetWindowLongA GetWindowLongW GetWindowModuleFileNameW GetWindowTextLengthW GetWindowTextW GetWindowsDirectoryW GlobalAddAtomW GlobalFindAtomW GlobalGetAtomNameW GrayStringW InitSecurityInterfaceW InitializeSecurityContextW InsertMenuItemW InsertMenuW IsBadStringPtrW IsCharAlphaNumericW IsCharAlphaW IsCharLowerW IsCharUpperW IsClipboardFormatAvailable IsDestinationReachableW IsDialogMessageW IsTextUnicode IsValidCodePage IsWindowUnicode LCMapStringW LoadAcceleratorsW LoadBitmapW LoadCursorFromFileW LoadCursorW LoadIconW LoadImageW LoadKeyboardLayoutW LoadLibraryExW LoadLibraryW LoadMenuIndirectW LoadMenuW LoadStringW MCIWndCreateW MapVirtualKeyExW MapVirtualKeyW MessageBoxExW MessageBoxIndirectW MessageBoxW ModifyMenuW MoveFileW MultiByteToWideChar MultinetGetConnectionPerformanceW OemToCharBuffW OemToCharW OleUIAddVerbMenuW OleUIBusyW OleUIChangeIconW OleUIChangeSourceW OleUIConvertW OleUIEditLinksW OleUIInsertObjectW OleUIObjectPropertiesW OleUIPasteSpecialW OleUIPromptUserW OleUIUpdateLinksW OpenEventW OpenFileMappingW OpenMutexW OpenPrinterW OpenSemaphoreW OpenWaitableTimerW OutputDebugStringW PageSetupDlgW PeekConsoleInputW PeekMessageW PlaySoundW PolyTextOutW PostMessageW PostThreadMessageW PrintDlgW QueryContextAttributesW QueryCredentialsAttributesW QueryDosDeviceW QuerySecurityPackageInfoW RasConnectionNotificationW RasCreatePhonebookEntryW RasDeleteEntryW RasDeleteSubEntryW RasDialW RasEditPhonebookEntryW RasEnumConnectionsW RasEnumDevicesW RasEnumEntriesW RasGetConnectStatusW RasGetEntryDialParamsW RasGetEntryPropertiesW RasGetErrorStringW RasGetProjectionInfoW RasHangUpW RasRenameEntryW RasSetEntryDialParamsW RasSetEntryPropertiesW RasSetSubEntryPropertiesW RasValidateEntryNameW ReadConsoleInputW ReadConsoleOutputCharacterW ReadConsoleOutputW ReadConsoleW RegConnectRegistryW RegCreateKeyExW RegCreateKeyW RegDeleteKeyW RegDeleteValueW RegEnumKeyExW RegEnumKeyW RegEnumValueW RegLoadKeyW RegOpenKeyExW RegOpenKeyW RegQueryInfoKeyW RegQueryMultipleValuesW RegQueryValueExW RegQueryValueW RegReplaceKeyW RegSaveKeyW RegSetValueExW RegSetValueW RegUnLoadKeyW RegisterClassExW RegisterClassW RegisterClipboardFormatW RegisterDeviceNotificationW RegisterWindowMessageW RemoveDirectoryW RemoveFontResourceW RemovePropA RemovePropW ReplaceTextW ResetDCW ResetPrinterW SHBrowseForFolderW SHChangeNotify SHFileOperationW SHGetFileInfoW SHGetNewLinkInfoW SHGetPathFromIDListW ScrollConsoleScreenBufferW SearchPathW SendDlgItemMessageW SendMessageCallbackW SendMessageTimeoutW SendMessageW SendNotifyMessageW SetCalendarInfoW SetClassLongW SetComputerNameW SetConsoleTitleW SetCurrentDirectoryW SetDefaultCommConfigW SetDlgItemTextW SetEnvironmentVariableW SetFileAttributesW SetICMProfileW SetJobW SetLocaleInfoW SetMenuItemInfoW SetPrinterDataW SetPrinterW SetPropA SetPropW SetVolumeLabelW SetWindowLongA SetWindowLongW SetWindowTextW SetWindowsHookExW SetWindowsHookW ShellAboutW ShellExecuteExW ShellExecuteW Shell_NotifyIconW StartDocPrinterW StartDocW SystemParametersInfoW TabbedTextOutW TextOutW TranslateAcceleratorW UnregisterClassW UpdateICMRegKeyW UpdateResourceA UpdateResourceW VerFindFileW VerInstallFileW VerLanguageNameW VerQueryValueW VkKeyScanExW VkKeyScanW WNetAddConnection2W WNetAddConnection3W WNetAddConnectionW WNetCancelConnection2W WNetCancelConnectionW WNetConnectionDialog1W WNetDisconnectDialog1W WNetEnumResourceW WNetGetConnectionW WNetGetLastErrorW WNetGetNetworkInformationW WNetGetProviderNameW WNetGetResourceInformationW WNetGetResourceParentW WNetGetUniversalNameW WNetGetUserW WNetOpenEnumW WNetUseConnectionW WaitNamedPipeW WideCharToMultiByte WinHelpW WriteConsoleInputW WriteConsoleOutputCharacterW WriteConsoleOutputW WriteConsoleW WritePrivateProfileSectionW WritePrivateProfileStringW WritePrivateProfileStructW WriteProfileSectionW WriteProfileStringW __FreeAllLibrariesInMsluDll auxGetDevCapsW capCreateCaptureWindowW capGetDriverDescriptionW joyGetDevCapsW lstrcatW lstrcmpW lstrcmpiW lstrcpyW lstrcpynW lstrlenW mciGetDeviceIDW mciGetErrorStringW mciSendCommandW mciSendStringW midiInGetDevCapsW midiInGetErrorTextW midiOutGetDevCapsW midiOutGetErrorTextW mixerGetControlDetailsW mixerGetDevCapsW mixerGetLineControlsW mixerGetLineInfoW mmioInstallIOProcW mmioOpenW mmioRenameW mmioStringToFOURCCW sndPlaySoundW waveInGetDevCapsW waveInGetErrorTextW waveOutGetDevCapsW waveOutGetErrorTextW wsprintfW wvsprintfW

Sharing

General

Malware Config

Signatures

File Explorer

gulp.zip

_Getintopc.com_Adobe.Flash.Pro.CC.2015.iso

Adobe CC 2015/Set-up.exe

PE Signature issue

comctl32

user32

ole32

oleaut32

shlwapi

kernel32

gdi32

msimg32

winspool.drv

advapi32

shell32

uxtheme

oledlg

oleacc

gdiplus

imm32

winmm

winhttp

generic

Adobe CC 2015/deploy/cs_CZ_deployment.xml

Adobe CC 2015/deploy/da_DK_deployment.xml

Adobe CC 2015/deploy/de_DE_deployment.xml

Adobe CC 2015/deploy/en_AE_deployment.xml

Adobe CC 2015/deploy/en_GB_deployment.xml

Adobe CC 2015/deploy/en_IL_deployment.xml

Adobe CC 2015/deploy/en_US_deployment.xml

Adobe CC 2015/deploy/es_ES_deployment.xml

Adobe CC 2015/deploy/es_MX_deployment.xml

Adobe CC 2015/deploy/fi_FI_deployment.xml

Adobe CC 2015/deploy/fr_CA_deployment.xml

Adobe CC 2015/deploy/fr_FR_deployment.xml

Adobe CC 2015/deploy/fr_MA_deployment.xml

Adobe CC 2015/deploy/hu_HU_deployment.xml

Adobe CC 2015/deploy/it_IT_deployment.xml

Adobe CC 2015/deploy/ja_JP_deployment.xml

Adobe CC 2015/deploy/ko_KR_deployment.xml

Adobe CC 2015/deploy/nb_NO_deployment.xml

Adobe CC 2015/deploy/nl_NL_deployment.xml

Adobe CC 2015/deploy/pl_PL_deployment.xml

Adobe CC 2015/deploy/pt_BR_deployment.xml

Adobe CC 2015/deploy/ro_RO_deployment.xml

Adobe CC 2015/deploy/ru_RU_deployment.xml

Adobe CC 2015/deploy/sv_SE_deployment.xml

Adobe CC 2015/deploy/tr_TR_deployment.xml

Adobe CC 2015/deploy/uk_UA_deployment.xml

Adobe CC 2015/deploy/uninstall.xml

Adobe CC 2015/deploy/zh_CN_deployment.xml

Adobe CC 2015/deploy/zh_TW_deployment.xml

Adobe CC 2015/packages/CCM/CCM.pima

CCMFlex.swf

CCMNative.dll

PE Signature issue

shell32

shlwapi

winhttp

setupapi

msi

advapi32

user32

ole32

oleaut32

kernel32

generic

Utilities/AAMHelper.exe

PE Signature issue

psapi

kernel32

user32

advapi32

shell32

ole32