Clip Studio Paint EX v5.0.0.zip
- SHA256 3f481fe4daa6908a933196fb0b6dd7fc5087709d81353ccde30762b036f40c91
Static task
static1
1 signatures
General
- Target Clip Studio Paint EX v5.0.0.zip
- Size 522.5MB
- Sample260628-ar2qvsew6m
- SHA256 3f481fe4daa6908a933196fb0b6dd7fc5087709d81353ccde30762b036f40c91
- MD5 24af85bee85e5aea41a4497c0c64011b
- SHA1 5ccfdc747b729c97cb5f925c214e870cbad5a4ac
- SHA512 ea2c5cfd47675bc0d43b183b0be18ccc227f8484090b3d337246818aa8693dff444845ff096e843c75b1808aa06a54708fde7e27dde2b76e6d74e04206ba497b
- SSDEEP 12582912:0oPLl9+YI9CfnOpPTRMYPyWTrrNVMKgLFmrkDdosTUV/0wrG:0oPj+D9CfnOpLWYPlTrrNVMLmZsI+
- TLSH T1BF4933CD75EB9FC0642F902EBF2945063502748AB13E9DB862E16794ED7D62336CEC81
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/Clip Studio Paint EX v5.0.0/Patch1/CLIPStudioPaint.exe unpack001/Clip Studio Paint EX v5.0.0/Patch2/CLIPStudioPaint.exe
File Explorer
-
Clip Studio Paint EX v5.0.0.zip.zip 522.5MB
-
Clip Studio Paint EX v5.0.0/CSP_500w_setup.exe.exe 462.9MB
-
Clip Studio Paint EX v5.0.0/Patch1/Anti-Resale. Proudly brought to you by bbs.itzmx.com. This patch is absolutely free! Please do not purchase it.txt654B
-
Clip Studio Paint EX v5.0.0/Patch1/CLIPStudioPaint.exe.exe 36.7MB
-
Clip Studio Paint EX v5.0.0/Patch1/【防倒卖】bbs.itzmx.com荣誉出品。本补丁完全免费！请勿购买！如发现贩卖，请退款差评举报！.txt553B
-
Clip Studio Paint EX v5.0.0/Patch2/Anti-Resale. Proudly brought to you by bbs.itzmx.com. This patch is absolutely free! Please do not purchase it.txt654B
-
Clip Studio Paint EX v5.0.0/Patch2/CLIPStudioPaint.exe.exe 35.4MB
-
Clip Studio Paint EX v5.0.0/Patch2/【防倒卖】bbs.itzmx.com荣誉出品。本补丁完全免费！请勿购买！如发现贩卖，请退款差评举报！.txt553B
-
Clip Studio Paint EX v5.0.0/README.txt2KB
-
Clip Studio Paint EX v5.0.0/START PASSWORD.txt122B
-
Clip Studio Paint EX v5.0.0/TURN THIS OFF step 1.png.png 91KB
-
Clip Studio Paint EX v5.0.0/TURN THIS OFF step 2.png.png 18KB
Clip Studio Paint EX v5.0.0/CSP_500w_setup.exe
- IMPHASH a5a0f941862df8e0d01359e62a3aaaf6
- SHA256 b48251870701a944450d642a3d366ee56ec2e8144ad3291acd68809c3a4df7c2
- MD5 516c73acf581e1971703f2cb73a7b18b
- SHA1 ef12f2b5a79497a8a4fbce2e470a386073442c45
- SHA512 f3302aa24438fcdb735f1da4fb2726103c4fe2607cf94650dac9c9b3bcd92ce20836b78e02bcacd1fce907cc256ab7441c3d824b70e114a4256d229476ae016c
- SSDEEP 12582912:tQ7rPN45y+dPPgjrafCxObiF/pkZ2VF0Uvh2Pc8xO:tQ7J4w+dPPgjrNQbiF/m40jcV
- TLSH T1E8393327A185891EE5BB0331EEAF4E52B6613C332731848B7290FF581CF16D27D67A16
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
75:24:59:85:85:fb:c1:e1:46:5d:23:b9:69:70:f2:a2:25:1d:b0:f3:13:65:e8:2b:35:73:e5:61:f9:ea:ee:5c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=0111-01-062869,CN=CELSYS\, Inc.,OU=Development,O=CELSYS\, Inc.,L=Shinjuku-ku,ST=Tokyo,C=JP,1.3.6.1.4.1.311.60.2.1.3=#13024a50,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Mar 9, 2026
SERIALNUMBER=0111-01-062869,CN=CELSYS\, Inc.,OU=Development,O=CELSYS\, Inc.,L=Shinjuku-ku,ST=Tokyo,C=JP,1.3.6.1.4.1.311.60.2.1.3=#13024a50,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
SERIALNUMBER=0111-01-062869,CN=CELSYS\, Inc.,OU=Development,O=CELSYS\, Inc.,L=Shinjuku-ku,ST=Tokyo,C=JP,1.3.6.1.4.1.311.60.2.1.3=#13024a50,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
04:00:00:00:00:01:21:58:53:08:a2
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Mar 18, 2009 - Mar 18, 2029
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
SERIALNUMBER=0111-01-062869,CN=CELSYS\, Inc.,OU=Development,O=CELSYS\, Inc.,L=Shinjuku-ku,ST=Tokyo,C=JP,1.3.6.1.4.1.311.60.2.1.3=#13024a50,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
33:c3:6b:d1:59:66:4a:74:09:9c:0f:2d
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 8, 2025 - Feb 11, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
1
Major OS version
5
Entry point
273600
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\CodeBases\isdev\redist\Language Independent\i386\ISP\setup.pdb
comctl32
ord17
kernel32
CopyFileW
GetSystemDefaultUILanguage
GlobalAlloc
GlobalFree
DecodePointer
MulDiv
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SleepConditionVariableSRW
WakeAllConditionVariable
SetEnvironmentVariableW
ReleaseSRWLockExclusive
VerLanguageNameW
IsValidLocale
GetLocaleInfoW
WideCharToMultiByte
lstrcpyA
GetTickCount
ExitThread
CreateThread
GetExitCodeProcess
WaitForSingleObject
ReadFile
GetProcessHeap
GetVersionExW
GetTempPathW
CreateFileW
LoadLibraryA
GetSystemDirectoryA
FindResourceW
GlobalUnlock
GlobalLock
SizeofResource
LockResource
LoadResource
MultiByteToWideChar
FormatMessageW
HeapFree
HeapAlloc
SetFileAttributesW
GetFileTime
FileTimeToLocalFileTime
GetCurrentDirectoryW
SetCurrentDirectoryW
ExpandEnvironmentStringsW
GetUserDefaultLangID
GetSystemDefaultLangID
CompareStringA
CompareStringW
IsBadReadPtr
MoveFileW
GetPrivateProfileIntW
LoadLibraryW
lstrcatW
lstrcpynW
lstrcmpiW
LoadLibraryExW
FreeLibrary
WriteConsoleW
FlushFileBuffers
SetFilePointerEx
GetConsoleMode
GetConsoleCP
SetStdHandle
FindResourceExW
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
VirtualQuery
GetSystemInfo
GetSystemTimeAsFileTime
CreateEventW
CreateMutexW
ReleaseMutex
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
QueryPerformanceFrequency
SetErrorMode
RaiseException
WriteFile
SetFilePointer
GetFileSize
GetFileAttributesW
GetDiskFreeSpaceExW
GetDiskFreeSpaceW
FindFirstFileW
FindClose
GetCommandLineW
LocalFree
GetWindowsDirectoryW
GetSystemDirectoryW
SetLastError
GetLastError
RemoveDirectoryW
DeleteFileW
lstrlenW
lstrcpyW
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
CreateProcessW
Sleep
CloseHandle
CreateDirectoryW
AcquireSRWLockExclusive
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
FindFirstFileExW
LCMapStringW
GetOEMCP
IsValidCodePage
GetCPInfo
HeapReAlloc
HeapSize
MoveFileExW
lstrcmpW
FindNextFileW
GetCurrentThread
SystemTimeToFileTime
lstrcmpA
ResetEvent
SetEvent
QueryPerformanceCounter
GetStringTypeW
GetFileType
GetStdHandle
GetModuleHandleExW
ExitProcess
GetACP
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
RtlUnwind
InitializeCriticalSectionEx
FreeResource
GetPrivateProfileSectionNamesA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcatA
lstrcmpiA
InitializeSListHead
GetCurrentThreadId
GetStartupInfoW
VirtualProtect
LoadLibraryExA
IsDebuggerPresent
OutputDebugStringW
EnterCriticalSection
LeaveCriticalSection
GetCurrentProcessId
GetLocalTime
GetVersion
lstrlenA
CompareFileTime
GetTempFileNameW
SetFileTime
GetProcessTimes
GetCurrentProcess
TerminateProcess
OpenProcess
GetDateFormatW
GetTimeFormatW
IsProcessorFeaturePresent
user32
ShowWindow
SetWindowPos
SendDlgItemMessageW
IsWindow
DispatchMessageW
TranslateMessage
LoadIconW
SetWindowLongW
DestroyWindow
PeekMessageW
GetWindowLongW
wsprintfW
WaitForInputIdle
SendMessageW
MoveWindow
MessageBoxW
GetWindowRect
SetWindowTextW
DialogBoxIndirectParamW
EndDialog
GetDlgItem
SetDlgItemTextW
PostMessageW
SetForegroundWindow
EnumChildWindows
MsgWaitForMultipleObjects
SystemParametersInfoW
GetWindow
FillRect
GetSysColor
MapWindowPoints
RemovePropW
GetPropW
SetPropW
EndPaint
ExitWindowsEx
CharUpperW
wsprintfA
CallWindowProcW
CreateWindowExW
DrawIcon
DrawTextW
UpdateWindow
GetWindowDC
InvalidateRect
DrawFocusRect
CopyRect
InflateRect
EnableWindow
GetClassNameW
MapDialogRect
RegisterClassExW
GetDlgItemTextW
IntersectRect
MonitorFromPoint
BeginPaint
EnableMenuItem
GetSystemMetrics
SetFocus
DefWindowProcW
GetMessageW
LoadStringW
LoadImageW
ReleaseDC
GetDC
CreateDialogParamW
GetParent
GetWindowTextW
CharNextW
GetDesktopWindow
GetClientRect
IsWindowEnabled
CreateDialogIndirectParamW
IsWindowVisible
IsDialogMessageW
FindWindowExW
ScreenToClient
SetActiveWindow
gdi32
TextOutW
SetTextColor
SetBkMode
SetBkColor
SaveDC
RestoreDC
CreateSolidBrush
UnrealizeObject
CreateHalftonePalette
GetDIBColorTable
SelectPalette
SelectObject
RealizePalette
GetSystemPaletteEntries
GetDeviceCaps
DeleteDC
CreatePalette
CreateCompatibleDC
BitBlt
GetObjectW
TranslateCharsetInfo
DeleteObject
CreateFontIndirectW
CreateCompatibleBitmap
CreateDCW
CreatePatternBrush
GetStockObject
GetTextExtentPoint32W
DeleteMetaFile
CreateDIBitmap
CreateBitmap
CreateRectRgn
PatBlt
PlayMetaFile
SelectClipRgn
SetMapMode
SetMetaFileBitsEx
SetPixel
StretchBlt
SetStretchBltMode
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
advapi32
FreeSid
RegEnumValueW
RegQueryValueExW
SetEntriesInAclW
RegQueryInfoKeyW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
CreateWellKnownSid
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegOpenKeyW
OpenProcessToken
AdjustTokenPrivileges
AllocateAndInitializeSid
LookupPrivilegeValueW
RegEnumKeyW
OpenThreadToken
EqualSid
GetTokenInformation
shell32
ShellExecuteExW
SHGetMalloc
SHGetFolderPathW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
ole32
CoUninitialize
CoInitializeEx
CreateStreamOnHGlobal
CoInitializeSecurity
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
oleaut32
VariantChangeType
VariantClear
VariantInit
SysAllocStringByteLen
SysStringByteLen
GetErrorInfo
SysReAllocStringLen
SysAllocStringLen
VarUI4FromStr
SysFreeString
SysAllocString
VarBstrCmp
SysStringLen
VarBstrCat
shlwapi
PathFileExistsW
rpcrt4
UuidToStringW
RpcStringFreeW
UuidCreate
gdiplus
GdipGetImageWidth
GdipGetImageHeight
GdipAlloc
GdipFree
GdiplusStartup
GdipCloneImage
GdipDisposeImage
GdipCreateBitmapFromStream
GdipCreateBitmapFromFile
GdipCreateBitmapFromResource
GdipCreateFromHDC
GdipDeleteGraphics
GdipSetInterpolationMode
GdipDrawImageRectI
Name
.text
Size
470KB
Virtual Size
469KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
102KB
Virtual Size
101KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.didat
Size
512B
Virtual Size
136B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
295KB
Virtual Size
294KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
28KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=241, version=40116,
count=140, id=243, version=40116,
count=25, id=242, version=40116,
count=1, id=265, version=33816,
count=25, id=259, version=33731,
count=21, id=260, version=33731,
count=2, id=260, version=33816,
count=56, id=261, version=33731,
count=1, id=205, version=65501,
count=5, id=206, version=65501,
count=23, id=203, version=65501,
count=471, id=1, productName=Unmarked objects,
count=45, id=261, version=33816,
count=1, id=255, version=33816,
count=1, id=151,
count=1, id=258, version=33816,
Clip Studio Paint EX v5.0.0/Patch1/Anti-Resale. Proudly brought to you by bbs.itzmx.com. This patch is absolutely free! Please do not purchase it.txt
- SHA256 0e28d41958b1151f044c3003a8fd6f52d5a05b4ff1607e2580955fbf34caf298
- MD5 19b5688c3fcb245ef89506cdae915601
- SHA1 e9e122dbba6003bb05df1abf29bc8c2f1ea7e9d1
- SHA512 f2d9b06beaffb61c2935a334b013a13e574273a0f8bbb05d6b8a23d9fc3255af4dd340983f34875f95cae5732f2e71afd3b0ddda41d96fc6d97937a8657ca1f1
- TLSH T11EF0D32FEFB217790F1111C41C0AAF65F6463CE1AB5657C57F55E0043359D0F458486E
- MD5 SHA1 SHA512 TLSH
Clip Studio Paint EX v5.0.0/Patch1/CLIPStudioPaint.exe
- SHA256 cd27de50e20aef9a3eccbb21d4c52d9044c59e3a6dea5dfc0d7638f5ad2709cd
- MD5 c8bc97c9c77e46dd255820983d4b93e6
- SHA1 e545da1b626cad3186f3798e2dee0b03255e471a
- SHA512 6b6465fc747fd6592c51c97eaae8496fbe78a33936258ba3a8bb850d322fcb8ae57371b2747d9a7f811706be0f18600135c4d9ec5f935fc65d0d869e82903922
- SSDEEP 786432:Fo3q2Lv6tRwESF6oewu0To1i7GBzTm7hWTbnoi:FXDdwu0OHBnZJ
- TLSH T11A870115BBC8E0C4CA1AB1F4919957F312DDED6DDAA0210FF1897D9C3DB238E10A69C6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
109689784
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
Name
Size
21.7MB
Virtual Size
66.9MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
5.0MB
Virtual Size
13.5MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
245KB
Virtual Size
4.9MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
Virtual Size
2.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
3KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
Virtual Size
3.7MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
46KB
Virtual Size
448KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
3.7MB
Virtual Size
3.7MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
Size
2.2MB
Virtual Size
5.5MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
3.8MB
Virtual Size
3.8MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=10, id=260, version=30034,
count=15, id=259, version=30034,
count=8, id=257, version=30034,
count=6, id=253, version=28518,
count=1, id=260, version=30159,
count=10, productName=Unmarked objects (old),
count=5, id=257, version=30159,
count=28, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=261, version=29395,
count=2, id=257, productName=VS2019 v16.7.5 build 29112, version=29112,
count=48, id=261, version=30034,
count=1, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=2, id=262, version=29395,
count=9, id=260, version=29395,
count=2, id=257, version=30145,
count=68, id=257, version=29395,
count=4, id=257, version=30146,
count=10, id=257, productName=VS2019 v16.7.1 build 29111, version=29111,
count=4, id=257, productName=VS2019 v16.11.1 build 30133, version=30133,
count=2005, id=1, productName=Unmarked objects,
count=1, id=260, version=30158,
count=420, id=261, productName=VS2019 v16.7.1 build 29111, version=29111,
count=572, id=260, productName=VS2019 v16.7.1 build 29111, version=29111,
count=5395, id=261, version=30159,
count=1, id=256, version=30159,
count=1, id=255, version=30159,
count=1, id=151,
count=1, id=258, version=30159,
Clip Studio Paint EX v5.0.0/Patch1/【防倒卖】bbs.itzmx.com荣誉出品。本补丁完全免费！请勿购买！如发现贩卖，请退款差评举报！.txt
- SHA256 66d5425ea2b87722699632f85b2e10801b38be575cae6284fcf0a2bfe2bb55f3
- MD5 7fc782e4d9dd756b9abef49460918a86
- SHA1 86674b53bd2bd3aa8df06c6b59c18003ffb2166c
- SHA512 27d5e109a8b01cff787a69fb7c84dce5392a76059f8a74a1195482ec40909da89608e8b85c813f964681b4f498cd23fd6a49e861595258620fa74e52af964c53
- TLSH T1C9F0202FBB7326380D2120C01D0AFFA9F50C3CE0AC529B84BE15A048336A61F8480C3E
- MD5 SHA1 SHA512 TLSH
Clip Studio Paint EX v5.0.0/Patch2/Anti-Resale. Proudly brought to you by bbs.itzmx.com. This patch is absolutely free! Please do not purchase it.txt
- SHA256 0e28d41958b1151f044c3003a8fd6f52d5a05b4ff1607e2580955fbf34caf298
- MD5 19b5688c3fcb245ef89506cdae915601
- SHA1 e9e122dbba6003bb05df1abf29bc8c2f1ea7e9d1
- SHA512 f2d9b06beaffb61c2935a334b013a13e574273a0f8bbb05d6b8a23d9fc3255af4dd340983f34875f95cae5732f2e71afd3b0ddda41d96fc6d97937a8657ca1f1
- TLSH T11EF0D32FEFB217790F1111C41C0AAF65F6463CE1AB5657C57F55E0043359D0F458486E
- MD5 SHA1 SHA512 TLSH
Clip Studio Paint EX v5.0.0/Patch2/CLIPStudioPaint.exe
- SHA256 a464835458aea1f82d56f949a1589021e755c9f6334cbdd395a4e878b9f8e91a
- MD5 7fbab0f9a1fec8ff431208f3f9c3d155
- SHA1 3249b64519e61aea21679ea02c40c326e8554a06
- SHA512 d0df158940a6857b2a75e9b7d2fc24648e486b44dea39c75956599fb15cdaa83ee803795412bb2d2600aa7ae743b55b6e32fde946b52a835a032f638cf27153f
- SSDEEP 786432:v+xIVwSN43NLV+D0MG0VQ25+R8hGBARJXyW8VPqAimS/UV1hW8:2xIXNKDCQ2QR8hqARn8VPAk
- TLSH T1D787F115BBC8E0C0CA1AB5F4D19957F712DDED6DDAA0200FB1897D9C3DB238E10A69C6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
109685604
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
Name
Size
21.7MB
Virtual Size
66.9MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
5.0MB
Virtual Size
13.5MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
245KB
Virtual Size
4.9MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
Virtual Size
2.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
3KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
Virtual Size
3.7MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
46KB
Virtual Size
448KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
3.7MB
Virtual Size
3.7MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
Size
792KB
Virtual Size
5.5MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
3.8MB
Virtual Size
3.8MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=10, id=260, version=30034,
count=15, id=259, version=30034,
count=8, id=257, version=30034,
count=6, id=253, version=28518,
count=1, id=260, version=30159,
count=10, productName=Unmarked objects (old),
count=5, id=257, version=30159,
count=28, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=261, version=29395,
count=2, id=257, productName=VS2019 v16.7.5 build 29112, version=29112,
count=48, id=261, version=30034,
count=1, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=2, id=262, version=29395,
count=9, id=260, version=29395,
count=2, id=257, version=30145,
count=68, id=257, version=29395,
count=4, id=257, version=30146,
count=10, id=257, productName=VS2019 v16.7.1 build 29111, version=29111,
count=4, id=257, productName=VS2019 v16.11.1 build 30133, version=30133,
count=2005, id=1, productName=Unmarked objects,
count=1, id=260, version=30158,
count=420, id=261, productName=VS2019 v16.7.1 build 29111, version=29111,
count=572, id=260, productName=VS2019 v16.7.1 build 29111, version=29111,
count=5395, id=261, version=30159,
count=1, id=256, version=30159,
count=1, id=255, version=30159,
count=1, id=151,
count=1, id=258, version=30159,
Clip Studio Paint EX v5.0.0/Patch2/【防倒卖】bbs.itzmx.com荣誉出品。本补丁完全免费！请勿购买！如发现贩卖，请退款差评举报！.txt
- SHA256 66d5425ea2b87722699632f85b2e10801b38be575cae6284fcf0a2bfe2bb55f3
- MD5 7fc782e4d9dd756b9abef49460918a86
- SHA1 86674b53bd2bd3aa8df06c6b59c18003ffb2166c
- SHA512 27d5e109a8b01cff787a69fb7c84dce5392a76059f8a74a1195482ec40909da89608e8b85c813f964681b4f498cd23fd6a49e861595258620fa74e52af964c53
- TLSH T1C9F0202FBB7326380D2120C01D0AFFA9F50C3CE0AC529B84BE15A048336A61F8480C3E
- MD5 SHA1 SHA512 TLSH
Clip Studio Paint EX v5.0.0/README.txt
- SHA256 7dcd7e5fb92ee2b55028912e0d132322b7ab631a7b7e448e1cecbfb613b421f8
- MD5 92266554b8bea16c4d8f05c055604a2e
- SHA1 548122d86d0e46bd3ffda9325fb9568ef8f83d19
- SHA512 dc7a481d83195f61100e9c5650e59b1d572fedac2072601abc75556f84248d7a90228b8d411b03dab9893d85e8e30ef4bad5d0507eeecb8696de776cfbedaad6
- TLSH T16141C6306BD6A0680422208FAE0A3D08F5B724FD1F768B89385D2A6DB1C0769415F97D
- MD5 SHA1 SHA512 TLSH
Clip Studio Paint EX v5.0.0/START PASSWORD.txt
- SHA256 2b5d354a82dc23e8fbd1cdff4f41e8e71ece24f660137541a301fdc77c99347a
- MD5 e1fb0fd13061d7ec2450f95ec17b8cd2
- SHA1 ae73e46df2068fbc21598ab95f4931ec91c07e72
- SHA512 b60c3ac2433a69ebf95dce047db0719a769d72c749617011938bad145cda6e9f170fb55d0b6a9fed89d9634b204b6563a3b0875778d338a9e5d318a4013d619b
- TLSH T1BEB09B53FF74503D113204C01D095DBDF01554D191958F855D4D70413385A5F5CD4875
- MD5 SHA1 SHA512 TLSH
Clip Studio Paint EX v5.0.0/TURN THIS OFF step 1.png
- SHA256 a159e3aa8a4db8a28ec84d5e02c999bb8bcb2e9a6a496176b40232d77a328e17
- MD5 1417083a464c0b1a5a4fce739841cdc9
- SHA1 9b3bbc3a6fbcb09bbaf9f679e430bed550a626be
- SHA512 2f5827ffecacfec5aea82549d03e51870b92075be3ea68bb4f6dd844eb975c6e2d88a33cc77eed3998be72ead56dfd58d733619bf0361e3eddd08cbe46141efb
- SSDEEP 1536:btDUUsAIJc+O7wph3MXVjgTEFg179ioB9NGVEWnTsip:5DhsAIJc+VkuTKmB98VRp
- TLSH T1F293BF90CD51F46FC319C6F989705EC726E29AF2ACCC158093BB6535CE24866A063EFD
- MD5 SHA1 SHA512 SSDEEP TLSH
Clip Studio Paint EX v5.0.0/TURN THIS OFF step 2.png
- SHA256 68a7df78102f45934d6ba9340c12837080ab1a93194716d93887f794aa496f37
- MD5 ef71755cbab72d88b357f7c0da60cad5
- SHA1 c65cdbc3766a0e69b0f73826d874adb4df8d4185
- SHA512 b3b4d8371fa7cd3dbccc1a4a8597abaa6bc8a4e760768f4780e1e3ec56b26e1dcea8cf826cad5e336eebaeccff80f77ca9479e9409fc171968d28e9a23d06bf1
- SSDEEP 384:ON8dkhBNQqIRkff1P/1aodymiYzIOrwqR/:dd8OqtXF/TMmiYIix/
- TLSH T19F828CC9DA0D51A4E3B084DD28DAB37632FC6D034D6E630286DE61242F5D2DA1E367DE
- MD5 SHA1 SHA512 SSDEEP TLSH