Everything-1[.]4[.]1[.]1026[.]x64-Setup[.]exe

resource
unpack001/$PLUGINSDIR/InstallOptions.dll
unpack001/$PLUGINSDIR/LangDLL.dll
unpack001/$PLUGINSDIR/System.dll

Everything-1.4.1.1026.x64-Setup.exe

IMPHASH 61259b55b8912888e90f516ca08dc514
SHA256 dae32a49b6052f0ec70895dd4e35b2b26222f7f4c19c36d9d309033e2fb622bc
MD5 d421ffd2ba591f56d43f601deeec09c5
SHA1 39c58fe62e2e6110d46a51eff235d69cae92e034
SHA512 abdfa8bfcedcc45528630a1c9ec618fe1ef013de2b13e10327598ed31e4fae0897d97d565111b02bc8fefc822120be9c7a24ce0a98fbf586f7fe00ea555be0bd
SSDEEP 49152:C4TW5myjkHicujBk84J8bOdiIMYvLl88d971/Kl:C4y5LjkCNjBkN8KA7YvLld99y
TLSH
T150952319B791CAB3D8218A31DD8E84E296E6BC380604A6C3376B7F7F7631247FE19511
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

6d:38:81:3b:aa:30:da:56:99:e2:07:e2:95:4e:74:af:b6:15:28:18:b7:96:0b:db:d1:aa:7b:7e:5b:81:29:63

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=voidtools,O=voidtools,L=Wilmington,ST=South Australia,C=AU

Chains

Aug 1, 2024

CN=voidtools,O=voidtools,L=Wilmington,ST=South Australia,C=AU

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=voidtools,O=voidtools,L=Wilmington,ST=South Australia,C=AU

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=voidtools,O=voidtools,L=Wilmington,ST=South Australia,C=AU

Serial Number

03:0f:a0:91:94:b2:2d:c5:1d:00:65:31:c9:c1:61:04

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 21, 2021 - Mar 17, 2025

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

13888

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCreateKeyExW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken SetFileSecurityW RegOpenKeyExW RegEnumValueW

shell32

SHGetSpecialFolderLocation SHFileOperationW SHBrowseForFolderW SHGetPathFromIDListW ShellExecuteExW SHGetFileInfoW

ole32

OleInitialize OleUninitialize CoCreateInstance IIDFromString CoTaskMemFree

comctl32

ord17 ImageList_Create ImageList_Destroy ImageList_AddMasked

user32

GetClientRect EndPaint DrawTextW IsWindowEnabled DispatchMessageW wsprintfA CharNextA CharPrevW MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW GetSystemMetrics FillRect AppendMenuW TrackPopupMenu OpenClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetSysColor SetWindowPos GetWindowLongW PeekMessageW SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint EmptyClipboard CreatePopupMenu

gdi32

SetBkMode SetBkColor GetDeviceCaps CreateFontIndirectW CreateBrushIndirect DeleteObject SetTextColor SelectObject

kernel32

GetExitCodeProcess WaitForSingleObject GetModuleHandleA GetProcAddress GetSystemDirectoryW lstrcatW Sleep lstrcpyA WriteFile GetTempFileNameW lstrcmpiA RemoveDirectoryW CreateProcessW CreateDirectoryW GetLastError CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersionExW GetCommandLineW GetTempPathW GetWindowsDirectoryW SetEnvironmentVariableW CopyFileW ExitProcess GetCurrentProcess GetModuleFileNameW GetFileSize CreateFileW GetTickCount MulDiv SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW MoveFileExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW

$PLUGINSDIR/Everything/License.txt

SHA256 4f066c930db22da8bf0a940f4f9ecd43a208b4697288adea26ab5eb7daeaaa81
MD5 3ca499e57472869658d7e877e1ef7aba
SHA1 49d8075d373186f98336c16fcb9b91f1abca4599
SHA512 8ff7f037479ef7e8fe02e62671646cf44ede84ca1befc718c4960ee579190b588fb0bfa409c20afea117c5a4a7756eef96598c33d56605298e672d4a990bd288
TLSH
T10B51965B33810BB318E2135065AABDC4B29DE02E3E6B6E04287DF348533B42DC9FB844
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/Everything/everything.exe

IMPHASH d67c7cffdc58fd075aa466c7917d6010
SHA256 c194acec8a66c7c73438098e673328bbab594ab489401823038bc3a97ec70a72
MD5 59872dc7c88df7d0b01f9e93e5a4489d
SHA1 b0458bfc15492416e15f3a8f77f9fbbac856f261
SHA512 c5a6cf1ebd4bb7572cb5fa2d3f7c07abfad869c80b7eb8346f1b9b02f908ad8d60bc2d66e2c643ed162abf1ad844cc994a5151b8dd7771b12efb0e395a6fe01a
SSDEEP 49152:wQdoNDZW77glh0iABCIN2ZTEBV2h3iIf4jKr:wQf7mwNZ8UK
TLSH
T1C4A57E43937540E9E9ABC03A89569523D7B1F4044722A7EF1690EFB12F237F19A7E312
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Digest

71:58:30:7f:62:55:b7:10:74:d4:eb:62:2c:aa:d0:73:d4:a4:13:28:db:eb:5b:82:4c:7c:b8:e7:de:a2:f4:01

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=voidtools,O=voidtools,L=Wilmington,ST=South Australia,C=AU

Chains

Aug 1, 2024

CN=voidtools,O=voidtools,L=Wilmington,ST=South Australia,C=AU

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=voidtools,O=voidtools,L=Wilmington,ST=South Australia,C=AU

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=voidtools,O=voidtools,L=Wilmington,ST=South Australia,C=AU

Serial Number

03:0f:a0:91:94:b2:2d:c5:1d:00:65:31:c9:c1:61:04

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 21, 2021 - Mar 17, 2025

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

1744112

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

comctl32

ImageList_GetIconSize ImageList_DrawEx _TrackMouseEvent InitCommonControlsEx

ws2_32

WSAGetLastError WSACleanup closesocket send recv connect WSAAsyncSelect setsockopt socket WSAStartup shutdown listen bind getpeername ntohs getsockname accept inet_addr htons gethostbyname

shlwapi

SHRegGetUSValueW PathIsRootW PathCombineW PathRemoveFileSpecW

kernel32

GetSystemTime FreeResource LockResource LoadResource SizeofResource FindResourceW GetSystemDefaultLangID LoadLibraryA CopyFileW TerminateProcess OpenProcess CreateMutexW SetLastError GetStartupInfoW HeapAlloc GetProcessHeap HeapFree VirtualAlloc VirtualFree QueryDosDeviceW SetErrorMode DeleteFileW RemoveDirectoryW MoveFileW MoveFileExW CreateDirectoryW GetFileAttributesW GlobalFree GlobalUnlock GlobalLock GlobalAlloc GetComputerNameW GetVolumeInformationW GetDiskFreeSpaceW GetFullPathNameW GetFileSize FindFirstFileW FindNextFileW GetDriveTypeW GetThreadPriority CreateEventW GetProcAddress FreeLibrary GetModuleFileNameW FileTimeToSystemTime GetCurrentDirectoryW GetFileAttributesExW LocalFileTimeToFileTime SystemTimeToFileTime FileTimeToLocalFileTime SystemTimeToTzSpecificLocalTime __C_specific_handler WaitForMultipleObjects GetSystemDirectoryW LoadLibraryW ExpandEnvironmentStringsW GetSystemInfo GetVersionExA LocalFree LocalAlloc ConnectNamedPipe CreateNamedPipeW GetTimeZoneInformation MulDiv GetTimeFormatW GetNumberFormatW GetDateFormatW MultiByteToWideChar HeapCreate HeapSetInformation GetModuleFileNameA FlsAlloc TlsSetValue FlsFree TlsFree FlsSetValue FlsGetValue GetModuleHandleA RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess GetStartupInfoA GetCommandLineA CreateThread ExitThread SetFilePointer GetTempPathW CreateFileW FreeConsole AllocConsole SetStdHandle SetConsoleScreenBufferSize ExitProcess QueryPerformanceFrequency QueryPerformanceCounter WriteFile FlushFileBuffers GetStdHandle GetFileType GetConsoleScreenBufferInfo SetConsoleTextAttribute WriteConsoleW GetLocaleInfoW GetCalendarInfoW DeviceIoControl GetOverlappedResult ResetEvent Sleep FindNextChangeNotification FindFirstChangeNotificationW GetFileInformationByHandle GetLocalTime FindCloseChangeNotification FindClose GetSystemTimeAsFileTime GetCurrentThread SetThreadPriority InitializeCriticalSection WaitForSingleObject DeleteCriticalSection EnterCriticalSection GetTickCount LeaveCriticalSection SetEvent GetCommandLineW GetCurrentThreadId GetModuleHandleW ReadFile GetLastError CloseHandle WideCharToMultiByte GetCPInfo GetACP GetOEMCP IsValidCodePage FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetCurrentProcessId HeapReAlloc LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize GetWindowsDirectoryW

user32

IsWindowVisible SetCursor SetCapture ChangeClipboardChain DrawEdge DrawFrameControl EqualRect GetSubMenu GetMenu SetClipboardViewer EnumWindows ActivateKeyboardLayout LoadIconW IsDlgButtonChecked SetScrollInfo UpdateWindow ScrollWindowEx SetDlgItemInt GetMenuState RemoveMenu GetMenuItemID GetMenuDefaultItem EnableMenuItem AdjustWindowRect GetSysColorBrush OffsetRect InvalidateRgn MessageBeep SetCursorPos GetDlgItemInt GetDlgCtrlID SendDlgItemMessageW GetDesktopWindow ValidateRect CharLowerW CharUpperW CreateIconIndirect UnregisterHotKey PostQuitMessage IsClipboardFormatAvailable OpenIcon GetForegroundWindow AttachThreadInput SetActiveWindow BringWindowToTop EnumChildWindows CheckDlgButton GetMenuItemInfoW GetKeyboardLayoutList LoadCursorW GetScrollInfo InvalidateRect ClientToScreen ScreenToClient ShowWindow IsIconic GetWindowPlacement IsZoomed GetWindowTextLengthW GetWindowTextW GetParent CopyRect EmptyClipboard SetClipboardData GetWindowLongPtrW SetWindowLongPtrW SetFocus PtInRect FindWindowW InsertMenuW SetDlgItemTextW SetForegroundWindow BeginPaint EndPaint OpenClipboard GetClipboardData CloseClipboard FillRect CreateWindowExW GetClassInfoExW RegisterClassExW GetAsyncKeyState GetClientRect GetCapture GetLastActivePopup ReleaseCapture IsWindowEnabled GetFocus GetNextDlgTabItem EnableWindow SetWindowPos SetWindowTextW SetWindowLongW MessageBoxW DialogBoxIndirectParamW DrawTextW GetMenuItemCount CreatePopupMenu AppendMenuW DeleteMenu SetMenuItemInfoW GetWindowLongW AdjustWindowRectEx CallWindowProcW GetDlgItem GetWindowRect MapWindowPoints IntersectRect GetMonitorInfoW SystemParametersInfoW GetDC ReleaseDC SetWindowsHookExW PeekMessageW WaitMessage SetMenu RegisterClipboardFormatW RedrawWindow GetMessagePos RegisterWindowMessageA ReplyMessage GetCursorPos CreateMenu SetMenuDefaultItem TrackPopupMenu DestroyMenu KillTimer GetDoubleClickTime GetKeyState RegisterHotKey PostThreadMessageW GetSysColor EndDialog PostMessageW DestroyIcon SetTimer DestroyWindow DefWindowProcW SendMessageTimeoutW GetWindowThreadProcessId IsWindow GetKeyNameTextW MapVirtualKeyExW GetKeyboardLayout UnhookWindowsHookEx CallNextHookEx GetClassNameW SendMessageW GetMessageW TranslateMessage DispatchMessageW GetSystemMetrics LoadImageW CreateDialogIndirectParamW

gdi32

GetDeviceCaps GetDIBits SelectClipRgn TextOutW SetStretchBltMode SetTextAlign CreateCompatibleBitmap OffsetClipRgn OffsetRgn CombineRgn GetDCOrgEx GetRandomRgn EnumFontFamiliesExW GetTextAlign CreateCompatibleDC BitBlt StretchDIBits GetRegionData ExtCreateRegion GetObjectW CreateFontIndirectW GetStockObject GetNearestColor CreateSolidBrush CreateRectRgn CreateDIBSection GetCurrentObject ExcludeClipRect RectVisible GetTextExtentExPointW GetTextExtentPoint32W DeleteDC SetBkMode CreateBitmapIndirect CreatePatternBrush SetBrushOrgEx SetBkColor SetTextColor PatBlt SelectObject GetTextMetricsW StretchBlt DeleteObject

comdlg32

GetOpenFileNameW GetSaveFileNameW ChooseColorW CommDlgExtendedError

advapi32

RegisterServiceCtrlHandlerW StartServiceCtrlDispatcherW DeleteService CloseServiceHandle RegOpenKeyA RegQueryValueW InitializeSecurityDescriptor SetSecurityDescriptorDacl QueryServiceConfigW RegDeleteValueW RegSetValueExW RegQueryValueExW RegCreateKeyExW RegOpenKeyExW RegEnumKeyW RegCloseKey RegDeleteKeyW GetUserNameW QueryServiceStatusEx RegisterEventSourceW ReportEventW DeregisterEventSource CreateServiceW StartServiceW OpenSCManagerW OpenServiceW ControlService SetServiceStatus

shell32

DragFinish DragAcceptFiles Shell_NotifyIconW SHBrowseForFolderW SHGetFileInfoW DragQueryFileW SHGetSpecialFolderLocation ord16 SHFileOperationW ShellExecuteExW SHGetDesktopFolder SHGetPathFromIDListW SHChangeNotify DragQueryPoint

ole32

CoTaskMemFree OleUninitialize OleInitialize CoCreateInstance CoInitializeEx CoUninitialize CLSIDFromString CreateStreamOnHGlobal CoTaskMemAlloc RevokeDragDrop DoDragDrop RegisterDragDrop ReleaseStgMedium

$PLUGINSDIR/InstallOptions.dll

IMPHASH 4b45b7e00344a87332fbd12653854d1a
SHA256 c7fef6457989d97fecc0616a69947927da9d8c493f7905dc8475c748f044f3cf
MD5 ece25721125d55aa26cdfe019c871476
SHA1 b87685ae482553823bf95e73e790de48dc0c11ba
SHA512 4e384735d03c943f5eb3396bb3a9cb42c9d8a5479fe2871de5b8bc18db4bbd6e2c5f8fd71b6840512a7249e12a1c63e0e760417e4baa3dc30f51375588410480
SSDEEP 384:EXsC43tPegZ3eBaRwCPOYY7nNYXC06/Yosa:EXJTgZ3eBTCmrnNA5p
TLSH
T1E1624D1137C558B3E2D62A797EE3B7138FA5F722A4438E0BC7332E06281A5956E7C311
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

11022

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

GetCurrentDirectoryW GlobalUnlock GlobalLock GetModuleHandleW CloseHandle SetEndOfFile SetCurrentDirectoryW GetPrivateProfileStringW GetPrivateProfileIntW MultiByteToWideChar ReadFile GetFileSize CreateFileW lstrcmpiW lstrcatW lstrcpynW WritePrivateProfileStringW lstrlenW lstrcpyW GlobalFree GlobalAlloc WriteFile SetFilePointer

user32

LoadCursorW SetWindowRgn GetDlgCtrlID CloseClipboard DrawFocusRect OpenClipboard DrawTextW SetCursor LoadIconW LoadImageW SetWindowLongW CreateWindowExW MapDialogRect SetWindowPos GetWindowRect CreateDialogParamW GetClientRect ShowWindow GetSystemMenu EnableWindow GetDlgItem DestroyIcon DestroyWindow DispatchMessageW TranslateMessage GetMessageW IsDialogMessageW CallWindowProcW PostMessageW MessageBoxW GetSysColor CharNextW wsprintfW GetWindowTextW SetWindowTextW SendMessageW GetWindowLongW EnableMenuItem PtInRect MapWindowPoints GetClipboardData

gdi32

SetTextColor DeleteObject CombineRgn CreateRectRgn GetDIBits SelectObject CreateCompatibleDC GetObjectW

shell32

SHGetDesktopFolder SHGetPathFromIDListW ShellExecuteW SHBrowseForFolderW

comdlg32

GetOpenFileNameW GetSaveFileNameW CommDlgExtendedError

ole32

CoTaskMemFree

$PLUGINSDIR/InstallOptions.ini

SHA256 b520532ce65105e5414423491084a05eec67add6ca5fef67b56bb9866c07bb95
MD5 f4b7ea54a35fe41eb4abb5f9e53cd9dd
SHA1 34f28f80c6c1d5d5656d42eaa5ad1fd7794eb939
SHA512 5734c29dc499935171bfe45d7d7b667d11ae1dbda97dd8d72dfd65320e8194eb8daadd085c34749c01aa27dd3010102b0b7dbb3f0503e0279510683ec8f0668d
TLSH
T1BB01DDC8504193799870D446287F2DDEBB51643C39423CD4F2A154C3DFC9DE63DAC289
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/InstallOptions2.ini

SHA256 6003368f4183b166539c96b734c01595a9d1b1494c11f16aedefe8ad68e9cfa8
MD5 2d388f85f070760e18ec39c0df0980db
SHA1 39428de0b440531f7544b4ea5e7e21df32317815
SHA512 04b02c6954b87852471c0e5fe5ec32fe2b5a228390c0b03604250c60aa1e7dcfa0d92775ddf1bd45ca17c2ddd62788d151ebdd9af884dac64031a97ed4a4b3c1
TLSH
T1DF11B4959502913DBD30910139BF7AC16BA029242F011864F5E218C3DBD9CE76CBE1D9
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/LangDLL.dll

IMPHASH 3e8d18bb71c7ebbda2ddc2a4bb03547b
SHA256 18e8b40ba22c7a1687bd16e8d585380bc2773fff5002d7d67e9485fcc0c51026
MD5 68b287f4067ba013e34a1339afdb1ea8
SHA1 45ad585b3cc8e5a6af7b68f5d8269c97992130b3
SHA512 06c38bbb07fb55256f3cdc24e77b3c8f3214f25bfd140b521a39d167113bf307a7e8d24e445d510bc5e4e41d33c9173bb14e3f2a38bc29a0e3d08c1f0dca4bdb
SSDEEP 48:S46+/nTKYKxbWsptIpBtWZ0iV8jAWiAJCvxft2O2B8mFofjLl:zFuPbOBtWZBV8jAWiAJCdv2Cm0L
TLSH
T16BC19474B3C248B9C491513768AB33D36612EE746784500F9F6711AA38209F7AD3EBC3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5439

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/System.dll

IMPHASH fc0224e99e736751432961db63a41b76
SHA256 8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8
MD5 cff85c549d536f651d4fb8387f1976f2
SHA1 d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e
SHA512 531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88
SSDEEP 192:Zjvco0qWTlt70m5Aj/lQ0sEWD/wtYbBHFNaDybC7y+XBz0QPi:FHQlt70mij/lQRv/9VMjzr
TLSH
T126426B129BB089F2F591583814667F2A6FBE9C5D27F50563CFE304D63D212CB983A283
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10879

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/ioSpecial.ini

SHA256 d95aed234f932a1c48a2b1b0d98c60ca31f962310c03158e2884ab4ddd3ea1e0
MD5 e2d5070bc28db1ac745613689ff86067
SHA1 282e080b4cf847174c5c11e4f9157b8c338ecb19
SHA512 a50ca2014869629135b54e848f03cb4983ad8029cd811300d02b0fc54de0436185f418fea4d3db888eb0f3170e33a59d486aa885f024ab29e630e9bc0ae1a2de
TLSH
T1D3D0C9C9501A802944208642A97A2FA263E03E210B1725FAF5724C87EB4CDE79C9D682
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/modern-wizard.bmp

SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
MD5 cbe40fd2b1ec96daedc65da172d90022
SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
TLSH
T139C29757DE6B6EA4BE0804EF1A0694931C71FE211AB0CD0561D2B767B4FC93B19A0B3C
MD5 SHA1 SHA512 SSDEEP TLSH

Sharing

General

Malware Config

Signatures

File Explorer