RegCureProSetup[.]exe

resource	yara_rule
static1/unpack001/$PLUGINSDIR/GraphicalInstaller.dll	acprotect

resource	yara_rule
static1/unpack001/$PLUGINSDIR/GraphicalInstaller.dll	upx

resource
unpack001/$COMMONFILES/ParetoLogic/UUS3/LiteUnzip.dll
unpack001/$PLUGINSDIR/AdvSplash.dll
unpack001/$PLUGINSDIR/GraphicalInstaller.dll
unpack002/out.upx
unpack001/$PLUGINSDIR/KillProcDLL.dll
unpack001/$PLUGINSDIR/Math.dll
unpack001/$PLUGINSDIR/SkinnedControls.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/UserInfo.dll
unpack001/$PLUGINSDIR/nsDialogs.dll
unpack001/sqlite3.dll
unpack003/$PLUGINSDIR/KillProcDLL.dll
unpack003/$PLUGINSDIR/System.dll
unpack003/$PLUGINSDIR/UserInfo.dll

resource
RegCureProSetup.exe
unpack001/$COMMONFILES/ParetoLogic/UUS3/Pareto_Update3.exe
unpack001/$COMMONFILES/ParetoLogic/UUS3/UUS3.dll
unpack001/7ZipDLL.dll
unpack001/CommonLoggingExtension.pxt
unpack001/CommonSpecialist.pxt
unpack001/ExtensionManager.dll
unpack001/HandleUpdate.dll
unpack001/LiteUnzip.dll
unpack001/LiteZip.dll
unpack001/MyResources.dll
unpack001/RegCurePro.exe
unpack001/RegHookSpecialist.pxt
unpack001/SandBoxer.dll
unpack001/Splash.exe
unpack001/Utility.pxt
unpack001/uninstall.exe

RegCureProSetup.exe

IMPHASH 32f3282581436269b3a75b6675fe3e08
SHA256 7a670e163d640b5fa60ef6709270ff1e08325e63a5c33a87e40228aa3d0089f5
MD5 97c0bfaa3f7612057779f3cea32660fe
SHA1 39159359b73530fe48995f2b34f550518d20fb55
SHA512 83fd860c5da4ccce3bce309100ccd08c1fd75606f225a5f09355fe33084e4709e5af3e07e69e9142d989efbb2c4e2b9bbb884a63c8486c98929bec2aaa704573
SSDEEP 196608:AmoqECBPeZi5O6GvhBmSQg9mIrmTLMEgKJPeR:5dJeZ3VJgDIKToEgPR
TLSH
T12B76338427BF0545FFB187F86A138345AA75A1724BEB83069548BFF7BC9E3910A83513
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

84:8a:67:91:a0:52:4e:6e:4a:49:20:bb:69:c5:5d:8f:fb:97:24:a6

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Paretologic Inc.,OU=Paretologic Inc.,O=Paretologic Inc.,L=Victoria,ST=British Columbia,C=CA

Chains

Feb 13, 2014

CN=Paretologic Inc.,OU=Paretologic Inc.,O=Paretologic Inc.,L=Victoria,ST=British Columbia,C=CA

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:2f:4e:e1:35:5c

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 13, 2011 - Apr 13, 2019

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Paretologic Inc.,OU=Paretologic Inc.,O=Paretologic Inc.,L=Victoria,ST=British Columbia,C=CA

Serial Number

11:21:f9:94:5d:68:b6:df:dd:55:72:92:b6:3c:5a:30:15:e1

Issuer

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 25, 2013 - Feb 26, 2015

Minor OS version

0

Major OS version

5

Entry point

14819

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFileTime CompareFileTime SearchPathW GetShortPathNameW GetFullPathNameW MoveFileW SetCurrentDirectoryW GetFileAttributesW GetLastError CreateDirectoryW SetFileAttributesW Sleep GetTickCount CreateFileW GetFileSize GetModuleFileNameW GetCurrentProcess CopyFileW ExitProcess GetWindowsDirectoryW GetTempPathW GetCommandLineW SetErrorMode CloseHandle lstrlenW lstrcpynW GetDiskFreeSpaceW GlobalUnlock GlobalLock CreateThread LoadLibraryW CreateProcessW lstrcmpiA GetTempFileNameW lstrcatW GetProcAddress LoadLibraryA GetModuleHandleA OpenProcess lstrcpyW GetVersionExW GetSystemDirectoryW GetVersion lstrcpyA RemoveDirectoryW lstrcmpA lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalAlloc WaitForSingleObject GetExitCodeProcess GlobalFree GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW WideCharToMultiByte lstrlenA MulDiv WriteFile ReadFile MultiByteToWideChar SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW lstrcpynA

user32

GetAsyncKeyState IsDlgButtonChecked ScreenToClient GetMessagePos CallWindowProcW IsWindowVisible LoadBitmapW CloseClipboard SetClipboardData EmptyClipboard OpenClipboard TrackPopupMenu GetWindowRect AppendMenuW CreatePopupMenu GetSystemMetrics EndDialog EnableMenuItem GetSystemMenu SetClassLongW IsWindowEnabled SetWindowPos DialogBoxParamW CheckDlgButton CreateWindowExW SystemParametersInfoW RegisterClassW SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharNextA CharUpperW CharPrevW wvsprintfW DispatchMessageW PeekMessageW wsprintfA DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW LoadCursorW SetCursor GetWindowLongW GetSysColor CharNextW GetClassInfoW ExitWindowsEx IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint FindWindowExW

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor SelectObject

shell32

SHBrowseForFolderW SHGetPathFromIDListW SHGetFileInfoW ShellExecuteW SHFileOperationW SHGetSpecialFolderLocation

advapi32

RegEnumKeyW RegOpenKeyExW RegCloseKey RegDeleteKeyW RegDeleteValueW RegCreateKeyExW RegSetValueExW RegQueryValueExW RegEnumValueW

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

Name

.text

Size

28KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

11KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

415KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.ndata

Size

Virtual Size

1.7MB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

91KB

Virtual Size

90KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

$APPDATA/ParetoLogic/RegCure Pro/dc_db.db

SHA256 df2271608ae9246f135278f4fb2fb90e9c629a3bf6627b53550e193ca67d0354
MD5 eddea8e6f76c94a9f0f82811141b986b
SHA1 2a0833316693f613ae10635dd0c0feb0d8701279
SHA512 ed2e1ffca65bf667597ce3f9dde4cfe435a592361dba4970f642a2248c5700e8f73034f20afc44ce55eae5daa5e14697c2fac607da0f8721156f42c213fd86b5
SSDEEP 48:7R2Z/eAHA+5+5KRZ4UcwuTrzftlPklwHtYVaY1FUTxGRX40MKbBGRX40MKbFBGRT:7HP5IyHbMe4uiKEl
TLSH
T1727297039ADB4A49F4F2BB390A76D1215F57BDE028BCD12C019C269D1FE3A50D9A07B3
MD5 SHA1 SHA512 SSDEEP TLSH

$APPDATA/ParetoLogic/UUS3/Master.xml

SHA256 d42ff308ea7cadcc4ef4ea86526cd094710eff775a083a003694c2b7407be676
MD5 5a24f2a5933018778e2c4182ea6bb51d
SHA1 61342a036461b108673a7ecddfe530ce3b75fa55
SHA512 db1e06fb98d046b7a80e8537257e31b2f16d4cbb9201f6854d077ea166b5f807611b1b2595899e589a582e95829774f1da895deafdbe376400280ee00afbbeff
TLSH
T10A01120327EC011476B3FA44EBB444751BA5BC12497ECD6C01901D8C84E3D90B9A2FE7
MD5 SHA1 SHA512 TLSH

$APPDATA/ParetoLogic/UUS3/Patch.xml

SHA256 c9c5188f949fc2887890a648eb7451d9341d17e5aa73f462d68cf24d4b9331a6
MD5 41dfa4985064a89fa124b2399dd54fc9
SHA1 f379c2a0968ef564848a50f9d00220a786d2ec0f
SHA512 f505d489449c4e6db4b54b18d062e049890e1bc6f719a434458b644d891d412d01870ff455f2a33d7ad14a1058ea2ceb22a6fd981c223c491569515577d08111
TLSH
T125E04F272ACE01029CF3F90882F05C7B6758BE0254ADCC1C48C12F0C80D6980B4A3FDB
MD5 SHA1 SHA512 TLSH

$APPDATA/ParetoLogic/UUS3/RegCure Pro/Master.xml

SHA256 393e4fdb131f81304fe82b64b519d31eb3f8771cde7d9bf6ce914b3fa4440451
MD5 1ecd4152c656f2b13e01c804117b11ba
SHA1 1cd5a6ca7b7e44562721ade3822f71ce030425f1
SHA512 87c62df5525f739142d9137272c60b469633741870108dc1a613d9b38d774fec82f2205c10e20bbe4ecb4fd99edeac0ca6684ff66b7c32ee7ccb3cdc2a4b7f86
TLSH
T13B112A4327EC0000B9B3FE44ABB148B517A9BC52596DCC6C05D06D8C94F3E90B8A2FE7
MD5 SHA1 SHA512 TLSH

$APPDATA/ParetoLogic/UUS3/RegCure Pro/Patch.xml

SHA256 f086e825664c58f519168d584a4f96c0ccac758f4423e9d576b6475909e815f7
MD5 8ed2f5186ae5706d78052225040ba184
SHA1 f2a21608380537b74ccbabda4a08dff9cd3028bc
SHA512 152dfce87468fca95722897dccaba7f66c4aabf3415b60721e355c255a0b1fd06ae1d41e16710b684a834181fffb8e2e48709405e3ce07a39c6c9f1092989c5c
TLSH
T161E0E5276ECE0111A8F3FA0892F0887A17987E0654ADCC0C48D42E0C85D6A40B8A2FDB
MD5 SHA1 SHA512 TLSH

$APPDATA/ParetoLogic/UUS3/RegCure Pro/Update.xml

SHA256 0e0f26a5f7c5896dc609643f7e6b857e01b398cd875e15668acb03cd5d265cef
MD5 634e170cd21b668882c6f49a7523852f
SHA1 d3f3f714cf46f212b18b75ed65de4b444741b9f4
SHA512 eb66af6fb5ce78716e63aa9e8625b75ed703d73baf5eabcf2c0a65042ffa93d32e2b29c45666399741c37c425ba43149fbd082b6a7ca51eecf729e824a1fbeec
TLSH
T1C001982373EA1200F6E6620C59B244740E2F7D53A938C66C10AC348DCFE7F6349A1BA7
MD5 SHA1 SHA512 TLSH

$APPDATA/ParetoLogic/UUS3/RegCure Pro/database.xml

SHA256 34be148a0a19984dd47cfbd6c85994d0a3211a9612ffff990d283a50674d4cfa
MD5 41bdceaa168a9e2c0b9f87a27c14c751
SHA1 70243a885af2363359e75c46e7325230a282449a
SHA512 40f935d2c5e86d39833be3db7d45e027bb87341618b9f398e2f3784993dfa44f38febb7f99cae4d1c9d8b506a58b22827c2216e0d62d703e2abe5489f6f913f7
TLSH
T19711845BAADC0309F8FB9E04E6B06995DA643D45B93DC50C10952C4C4971B44E8F3FEE
MD5 SHA1 SHA512 TLSH

$APPDATA/ParetoLogic/UUS3/Update.xml

SHA256 436423598e6c783b54d9ccc3d4c1f065830e8a05e32f31aff268729472eea375
MD5 a327484060a1af2b4681ae925fab81cb
SHA1 cf0776915d40533d651ebf7a98ba6065b1c7c9de
SHA512 5c5f9676a29b982caa1b9a4595b562e48c1aeba76e974706814c8bd1b34169f3c0e78a9a50ccfb3b37b61c93a3219ae8c7d223f471d70b4152c5bf2e48b4df60
TLSH
T14EF0A51377A61220F7A6260C5A7744640E2F7953A87CC67C10AC348DCFE7F6249A1BA3
MD5 SHA1 SHA512 TLSH

$COMMONFILES/ParetoLogic/UUS3/Images/Logo.png

SHA256 233dbf6582ddce04ab11b8cfec2458061c8d84c0dfc6e72e4fc15ba177185958
MD5 411c4ccf79183ecaf8ba69f077425f5f
SHA1 b4ff68f89af653a2de5450354c079219b796abac
SHA512 0d7c6df3db7b421025a858007a78577efb5b8c970ffe7bf264efa4789904e4fc209cc11c160eb689a805a6d1a00ff76ecb9cd3b53c0944fe6c062be45128bf88
SSDEEP 192:I0SDS0tKg9E05T9ffYuqCy82p0TlrHdqJvOhMc0sPo:aJXE05pf3d2WTlrY4hMc0F
TLSH
T1B8E1AFF9A6B25FCEDD7D32267E80C242EB68110C91E76E1850D265EC2026C3529FC9F5
MD5 SHA1 SHA512 SSDEEP TLSH

$COMMONFILES/ParetoLogic/UUS3/Images/ad_generic.jpg

SHA256 9088a7cdcb127973620799694efaa664e79183b9bda3f8af60e8c2fc8523ecfb
MD5 e29f1e2cedfb5cf0b63d1e72cb7b053a
SHA1 be86bc3e93b92c82e981e74a15d3e212e3787c12
SHA512 b194aff07b66c124f48e8066068e6fe70aab0638f977d2ded77cf87649ea34048f5694505b9ba3a51380df52e982c0bdebc6b4705d168a10db454b154341d83e
SSDEEP 768:rAZUxyGjpWQoMXsBHyVTCVGGAy+gj8IgI2y6OqYxUoAYGiP:rAucGjQY+BAdGBg26OzxU5sP
TLSH
T1ED13F145AA391CE675F1B9B39531FB5F7736C082A17333E3205119DEF39E2AA0989243
MD5 SHA1 SHA512 SSDEEP TLSH

$COMMONFILES/ParetoLogic/UUS3/Images/close.png

SHA256 769d6917e7f36c9e6d67005b87d476b0ce557a50d9532eeb65890e84cc53665b
MD5 00b510a6ba9e5d308bef82ec4c9698f8
SHA1 35023f2d674e6e3d7073987aba314f6bca5fa9e6
SHA512 93bc826c595712b796ef84f0d1e6a510c596eccb194ef493f9b2da5787381ffcf4cfb791efd3113ac312421b8c72cb435c42fbae7862707e60d69378f525bbc5
TLSH
T19D618CAF88A0B05E6E5E75430DCD9642F39D32AC4BD63238E5D132CF11A1C06AF251B4
MD5 SHA1 SHA512 TLSH

$COMMONFILES/ParetoLogic/UUS3/Images/close_md.png

SHA256 e92a35afc450eafe2355806353e7dbf48ccacc89a1fa3d86c13ca0639cac0c4a
MD5 fc257b9624016b6e0456d5143d7ec286
SHA1 ef905b61236b5092ff00d181fb9b63f54e4c59c2
SHA512 f905e310a99dfffedd37e7da8efebf92f7d62c4b2320eca714161cfd1ea6a5dc9155f561b53d4468c76bbcf14f7b9f800942aed6ae9b5fc4e4138cf3a945587d
TLSH
T110718EBF9970A09F65AE79510DCD1242D36D33BCC81A3B2498A246CF20F6D477B24077
MD5 SHA1 SHA512 TLSH

$COMMONFILES/ParetoLogic/UUS3/Images/close_mo.png

SHA256 fa1d33d1d9d5649adb0457f2117bc6850143f9c50c692e466375f82e0c95d897
MD5 2bcde03c36dc806b919b5924e935e5e5
SHA1 02e9eee3788db884e0d7bb2a285ab354d9e88bd1
SHA512 ce44973c2600fc2df01601689cf71aed6335b473718948e69f766cdf73c2442e800831e2b4846bd6eb9f1669bc256b1890f1149cf1a00d9f113bef5f1fdd6113
TLSH
T1D9716EAFC570A14FB96D756209CD1141FF19726D4C1B3228A4D069EB24A8D077F1747A
MD5 SHA1 SHA512 TLSH

$COMMONFILES/ParetoLogic/UUS3/Images/close_pu.png

SHA256 9e62e1e0577004c73aeeaca901af9154cafdf3716ae11295f13e87fb18e7a22b
MD5 8b2cd913fdbe42b0bcf1c67518be870d
SHA1 d87df819975c5d2ce4ecdaa964f12e807eb751b9
SHA512 182da4136f44bd8ac376c40219ea63a2c335e2bf50443af6265c6c569089cf3ccb5f2bedff00d5bdeced59803d004e99080d13ef7717827c6ac9d01cb0397dd5
TLSH
T1F3718DAFC920905FA8EDB5620CCD4082D72AB17C9A5B3178E8C1DDDE0058D0FBB560F6
MD5 SHA1 SHA512 TLSH

$COMMONFILES/ParetoLogic/UUS3/Images/close_pu_md.png

SHA256 4eaf3da6cfae2667fb01ba8cfb5d965efec72226d1faf32b9d04f4f251c0e90c
MD5 c27a83e328d3cbddf576a7cf5ed8fc00
SHA1 6ab5d0a79dadd74c676de1d56e8475c1a332beff
SHA512 cbe576165b6026ff500b422087792787f22342657cd23b939377ca797f86a2280db75c20e4e59dd91ba5aa2dab9437ece2ea4415765bbe1fdc30c4f1b2b80688
TLSH
T14D719D8FACB0B09EE9EEB9220DDF0108972C527C8F863638D5C019EC0889D0B7F85075
MD5 SHA1 SHA512 TLSH

$COMMONFILES/ParetoLogic/UUS3/Images/close_pu_mo.png

SHA256 a786e206d69b1c15da302a64495aa07b28a85df125e1f2fefd472177010af0b0
MD5 460d6841fe2d0eee380cbf0de553ba6d
SHA1 f540985c5f98358e04d686c627cbc462c7469258
SHA512 4ae38ca192a89edd1aaf88c9a4ca46f6abfe589970806c91e890beab3f0e48d2dcd79e6384838a054478b41afbf906671fb2e68e705e784b3f53d179f1bc3e6b
TLSH
T14C818CEA8560A98EBCEA3A614DDC4556D777334C8A773678ECC260EE40A2D072F23030
MD5 SHA1 SHA512 TLSH

$COMMONFILES/ParetoLogic/UUS3/Images/min.png

SHA256 c5aabec352c41e6a3e750da4885040e1249e89d44134b859ee00596e4e41ec3b
MD5 9a0322f582348c65cdad34ca6a30de86
SHA1 049f11f53c75198b769b627852d77ad7e47ea20c
SHA512 619eb76496a21e443345142623d15f40225461f7443523f2ab62894d6ddfde9b626e346454bec2bab7ee84185df0ef077a789102b92344bb0c13c7c1f39c4733
TLSH
T1C6617FAFA960308E79DD79510DDE1206D71C127CAF533A38D4D15AEE2066E077F530E5
MD5 SHA1 SHA512 TLSH

$COMMONFILES/ParetoLogic/UUS3/Images/min_md.png

SHA256 9f33ab7b7d46c1592f35ae82e6517aba64c42d2a3e92af8182e21b38ecbbf362
MD5 91e84fa674884d8b0d8c85ecf63b1ae7
SHA1 1525712b7631998ccfbde1c54474da5371b0a249
SHA512 d74d7f67bd6819cf8d656857f54b301de5e7c7728dd59dadbc91b44a92a092a018255ac78eb09dcfd4e405ef8d4bf8c4acff8f141705dcb93675dcc7251175b3
TLSH
T1A4616C9EEAA0709FB8CD78110DCE424663B832AD89563338A4D1D9CE04F1D4BFF52171
MD5 SHA1 SHA512 TLSH

$COMMONFILES/ParetoLogic/UUS3/Images/min_mo.png

SHA256 e46e013092c8f93fc1648ea98ecccbdf54fc5676514110ba922bcf1ddf203a05
MD5 67f3c566c92b1009815443720f47e470
SHA1 28b6ea2d7594b16d80d945d19bfa683a015fbd20
SHA512 b00891a84f9e130a63829fcf966e985dc30e42bb57ee2c80c8147dc4d84419e1d6c96aab0efb5ee6de4b55eb3fafc41e126c9c44f16494741244a6c6c6613951
TLSH
T1BD616EEE99A0604FAD9B79110DCE5141933A216C09573678E4E190DE10B0C1FBB5A472
MD5 SHA1 SHA512 TLSH

$COMMONFILES/ParetoLogic/UUS3/Images/progress_glow.png

SHA256 f8bd69a1a660ffe9c46412aa29ac38cf0b084ff3ade26eab92007c24bc49731b
MD5 b4ed24fc7fd0ad708305e0d282cd03a0
SHA1 21302254dc11b8390c04bd0946dd66872e2ec88c
SHA512 721fced18210b8ec3dae2bb191957a545312491bf19190f0d0734beeb3c7d6aa46f5898ed367c052ce53f8004bb367160aec7556aa7992c9088080784079e481
TLSH
T14911A5C0733AF264DE19E2A00205E7801F36266809799CC5984CD81FB36971F9DE3A1D
MD5 SHA1 SHA512 TLSH

$COMMONFILES/ParetoLogic/UUS3/Images/topbar_gradient.png

SHA256 996b444c815ccf8788fad71902f0dffd3e0576e9686cd59db0aa96f88011684b
MD5 ae08230df6371213126dd2505c936128
SHA1 c45416e45c40347c3b9f0c055b550919f8ae5b08
SHA512 3f787cb2e5de4e642d68e8ba83c0f03a4eb7dddcaca0828e138bfdad0404f7f7caa6c65cd802335762c67751873f04f112e4ba9a7d3518815c3a2765dcd8928d
TLSH
T161518CAFAA70B09E7DDD74420DCD0241E76C223C86573638A4D165DE0064D077F660B5
MD5 SHA1 SHA512 TLSH

$COMMONFILES/ParetoLogic/UUS3/LiteUnzip.dll

IMPHASH f7a84048399bc4a2d1221cc8bdd7c96e
SHA256 645fe3e7dc8ed3c2f363ee551f064986a10c36fdb9a37153b30ba5400cf738fe
MD5 1259c3b4bda98faf491bdfec7a147b36
SHA1 c8d0a31672ab51a9bda2def63a5830dbf59a92c1
SHA512 fdcdbb1042ba5dc2a365345bed123f317e8735dba5d9dbf3d6583d40a728049ce6c253e3311ce427c924ba3afc846f25dcd9241fff4b2b02380a457cb55c7b9c
SSDEEP 768:08zd/VxMu48xq5j+HW6D4nf6HSE53CtRGXDpD2F+8edR5xPa/JM:nd/VxMu48YQbtSE53cRGzpz8G0B
TLSH
T19D234C47EF9282BED0B2963A54B7273A5C72361673ADCDC3D24A181618734D1933A36F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

Minor OS version

0

Major OS version

4

Entry point

24224

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Name

.text

Size

28KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1024B

Virtual Size

595B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

shared

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

$COMMONFILES/ParetoLogic/UUS3/Pareto_Update3.exe

IMPHASH f592726dded90c4d7e23cee7f8218bbc
SHA256 5a6f0e2fd369c09b22d29d7e6cacf247d7696a0ea3b78b88d58f5898457c3d70
MD5 ebf9ebe8ed0cafdbfbb422bb2eac33a0
SHA1 a65dacede17b6c9855a91ab159a821a1ee91bcde
SHA512 bcc6c6d033a250c3280e746c0c2a0747dc24ae5f1ced8d37bba06a31b7a6745fa82817b7a466d5a3ea3c2d5bf1ac52d23f8a56d469128f21f0e3efd11099e898
SSDEEP 49152:sYTDBxsF2Lci2he3z3/ucVlbDYXJEH7iHbT5Sc7Fxsdt7+B0XE+ehEcP7DK:bz7Lci2hez/LlbMXJEH7iHbTSdIB0XEK
TLSH
T123958D3136E18076C772363086DDA7B9A6B9AA705B74428B25A02F3D2E704D3953C77F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

b8:9c:ba:cf:8e:0b:a8:95:f5:fe:69:f7:a1:44:67:85:70:5f:39:35

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Paretologic Inc.,OU=Paretologic Inc.,O=Paretologic Inc.,L=Victoria,ST=British Columbia,C=CA

Chains

Feb 13, 2014

CN=Paretologic Inc.,OU=Paretologic Inc.,O=Paretologic Inc.,L=Victoria,ST=British Columbia,C=CA

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:2f:4e:e1:35:5c

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 13, 2011 - Apr 13, 2019

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Paretologic Inc.,OU=Paretologic Inc.,O=Paretologic Inc.,L=Victoria,ST=British Columbia,C=CA

Serial Number

11:21:f9:94:5d:68:b6:df:dd:55:72:92:b6:3c:5a:30:15:e1

Issuer

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 25, 2013 - Feb 26, 2015

Minor OS version

1

Major OS version

5

Entry point

1217953

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Dev\Update\UniversalUpdate\Release\UniversalUpdate.pdb

wininet

InternetQueryDataAvailable InternetGetLastResponseInfoW InternetSetStatusCallbackW InternetSetFilePointer InternetWriteFile InternetOpenW HttpQueryInfoW InternetReadFile InternetCloseHandle HttpSendRequestW HttpAddRequestHeadersW HttpOpenRequestW InternetConnectW

shlwapi

PathFileExistsW PathFindExtensionW PathFindFileNameW PathStripToRootW PathRemoveFileSpecW PathIsUNCW

kernel32

SetEnvironmentVariableA GetTimeZoneInformation GetConsoleMode GetConsoleCP IsProcessorFeaturePresent LCMapStringW GetStringTypeW IsValidCodePage GetOEMCP GetACP GetCPInfo IsDebuggerPresent UnhandledExceptionFilter TerminateProcess QueryPerformanceCounter HeapDestroy HeapCreate SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW GetStdHandle SetUnhandledExceptionFilter VirtualQuery GetSystemInfo VirtualAlloc HeapSize HeapQueryInformation GetFileType SetStdHandle ExitThread ExitProcess RtlUnwind GetSystemTimeAsFileTime EncodePointer DecodePointer HeapReAlloc GetStartupInfoW HeapSetInformation GetCommandLineW VirtualProtect SearchPathW GetProfileIntW GetTempPathW GetNumberFormatW GetWindowsDirectoryW SetErrorMode GetCurrentDirectoryW GetTempFileNameW GetSystemDirectoryW GlobalFlags GetFullPathNameW GetVolumeInformationW DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile DeleteFileW GetFileTime GetFileSizeEx GetFileAttributesW GetFileAttributesExW FindFirstFileW FindClose GetThreadLocale GlobalGetAtomNameW LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc TlsGetValue InterlockedIncrement ResumeThread SetThreadPriority GetPrivateProfileStringW WritePrivateProfileStringW GetPrivateProfileIntW GetCurrentThread GetUserDefaultUILanguage ConvertDefaultLocale GetSystemDefaultUILanguage GetLocaleInfoW LoadLibraryExW InterlockedExchange InterlockedDecrement ReleaseActCtx CreateActCtxW GetCurrentProcessId GetCurrentThreadId GlobalAddAtomW GlobalFindAtomW GlobalDeleteAtom CompareStringW lstrcmpW FreeResource lstrlenA lstrcmpA LocalAlloc LeaveCriticalSection EnterCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount ActivateActCtx DeactivateActCtx FileTimeToLocalFileTime FileTimeToSystemTime SetLastError GlobalFree CopyFileW GlobalSize GlobalAlloc GlobalLock GlobalUnlock FreeLibrary GetProcAddress LoadLibraryW FindResourceExW GetModuleHandleW LocalFree FormatMessageW RaiseException WaitForSingleObject Sleep CreateThread lstrcmpiW SetCurrentDirectoryW CreateMutexW GetTickCount CreateFileW ReadFile CloseHandle GetLocalTime HeapAlloc GetLastError GetCurrentProcess GetProcessHeap HeapFree lstrlenW lstrcpyW MultiByteToWideChar WideCharToMultiByte GetModuleFileNameW MulDiv GetVersionExW FindResourceW LoadResource LockResource SizeofResource TlsFree WriteConsoleW

user32

SetLayeredWindowAttributes EnumDisplayMonitors SetRectEmpty CopyImage DestroyMenu GetMenuItemInfoW RealChildWindowFromPoint CharUpperW GetSysColorBrush LoadCursorW OffsetRect IsRectEmpty ShowOwnedPopups SetCursor GetMessageW TranslateMessage SetWindowContextHelpId MapDialogRect PostQuitMessage IntersectRect GetWindowThreadProcessId MapVirtualKeyW GetKeyNameTextW ClientToScreen LoadMenuW SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapW ModifyMenuW EnableMenuItem CheckMenuItem RegisterWindowMessageW SendDlgItemMessageA WinHelpW IsChild GetCapture SetWindowsHookExW CallNextHookEx GetClassLongW GetClassNameW SetPropW GetPropW RemovePropW GetForegroundWindow GetLastActivePopup DispatchMessageW BeginDeferWindowPos EndDeferWindowPos GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos PeekMessageW MonitorFromWindow GetMonitorInfoW MapWindowPoints ScrollWindow TrackPopupMenu GetKeyState SetMenu SetScrollRange GetScrollRange SetScrollPos GetScrollPos ShowScrollBar ValidateRect UpdateWindow CreateWindowExW GetClassInfoExW GetClassInfoW RegisterClassW GetSysColor AdjustWindowRectEx EqualRect DeferWindowPos GetScrollInfo SetScrollInfo SetWindowPlacement DefWindowProcW SubtractRect CopyRect GetWindowTextLengthW GetFocus SetFocus SetWindowPos CopyAcceleratorTableW GetDlgCtrlID SetWindowTextW IsDialogMessageW SetDlgItemInt SendDlgItemMessageW GetDlgItemTextW GetDlgItemInt CheckDlgButton GetWindow GetActiveWindow CreateDialogIndirectParamW DestroyWindow IsWindowEnabled GetNextDlgTabItem EndDialog GetMenuState GetMenuStringW AppendMenuW GetMenuItemID InsertMenuW GetMenuItemCount GetSubMenu RemoveMenu ExitWindowsEx SetDlgItemTextW GetWindowPlacement IsDlgButtonChecked DrawIcon BringWindowToTop SetActiveWindow LoadIconW SetForegroundWindow FindWindowW MessageBoxW GetWindowTextW GetDoubleClickTime CharUpperBuffW CopyIcon CallWindowProcW SetWindowLongW GetUpdateRect FrameRect IsClipboardFormatAvailable SetMenuDefaultItem GetDlgItem GrayStringW DrawTextExW DrawTextW TabbedTextOutW SetTimer KillTimer ShowWindow GetWindowLongW FillRect EndPaint BeginPaint SetRect ReleaseCapture SetCapture PtInRect ScreenToClient GetCursorPos GetSystemMetrics IsWindowVisible IsIconic GetDesktopWindow SetWindowRgn GetWindowDC IsWindow MoveWindow InvalidateRect GetClientRect GetParent PostMessageW SendMessageW GetWindowRect InvalidateRgn TranslateAcceleratorW CreatePopupMenu InsertMenuItemW LoadAcceleratorsW DestroyIcon LoadImageW ReuseDDElParam UnpackDDElParam CharNextW UnregisterClassW WindowFromPoint WaitMessage DeleteMenu RedrawWindow EnableWindow InflateRect ReleaseDC GetDC SystemParametersInfoW GetNextDlgGroupItem CreateMenu TranslateMDISysAccel DrawMenuBar GetWindowRgn DestroyCursor DefMDIChildProcW DefFrameProcW PostThreadMessageW IsMenu MonitorFromPoint UpdateLayeredWindow MapVirtualKeyExW IsCharLowerW EmptyClipboard CloseClipboard SetClipboardData OpenClipboard UnionRect RegisterClipboardFormatW LockWindowUpdate SetCursorPos CreateAcceleratorTableW GetKeyboardState GetKeyboardLayout ToUnicodeEx DrawFrameControl DrawEdge DrawStateW GetSystemMenu SetClassLongW DestroyAcceleratorTable SetParent IsZoomed DrawIconEx GetIconInfo NotifyWinEvent EnableScrollBar HideCaret DrawFocusRect InvertRect GetAsyncKeyState GetMenuDefaultItem GetMenu MessageBeep

gdi32

GetLayout SetLayout SelectClipRgn CreateRectRgn GetPixel SelectObject SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowOrgEx OffsetWindowOrgEx SetWindowExtEx ScaleWindowExtEx ExtSelectClipRgn DeleteDC CreatePatternBrush GetStockObject SelectPalette GetObjectType CreatePen CreateHatchBrush CreateRectRgnIndirect PatBlt SetRectRgn CombineRgn CreateEllipticRgn Ellipse LineTo GetTextExtentPoint32W GetTextMetricsW SetTextAlign EnumFontFamiliesW GetTextCharsetInfo GetRgnBox GetBkColor GetTextColor CreatePalette GetPaletteEntries GetNearestPaletteIndex RealizePalette GetSystemPaletteEntries CreatePolygonRgn Polyline Polygon SetDIBColorTable StretchBlt SetPixel Rectangle OffsetRgn EnumFontFamiliesExW GetWindowOrgEx GetViewportOrgEx PtInRegion FillRgn FrameRgn GetBoundsRect ExtFloodFill SetPaletteEntries SetPixelV GetTextFaceW CreateDIBitmap MoveToEx IntersectClipRect GetClipBox SetMapMode SetROP2 SetPolyFillMode RestoreDC SaveDC CreateBitmap SetBkColor SetTextColor CreateDCW CopyMetaFileW ExcludeClipRect Escape ExtTextOutW TextOutW RectVisible PtVisible BitBlt DPtoLP GetViewportExtEx GetWindowExtEx GetMapMode CreateCompatibleBitmap LPtoDP CreateCompatibleDC CreateRoundRectRgn CreateFontIndirectW GetObjectW SetBkMode CreateSolidBrush DeleteObject CreateDIBSection GetDeviceCaps

msimg32

AlphaBlend TransparentBlt

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW DocumentPropertiesW ClosePrinter

advapi32

RegQueryInfoKeyW RegEnumKeyExW RegCloseKey RegQueryValueExW RegCreateKeyExW RegSetValueExW RegDeleteValueW RegDeleteKeyW RegEnumKeyW RegEnumValueW RegQueryValueW AdjustTokenPrivileges LookupPrivilegeValueW GetUserNameW RegOpenKeyExW OpenProcessToken

shell32

ShellExecuteExW SHGetFileInfoW DragFinish DragQueryFileW SHAppBarMessage SHBrowseForFolderW ShellExecuteW SHGetSpecialFolderLocation SHGetPathFromIDListW SHGetDesktopFolder

comctl32

InitCommonControlsEx ImageList_GetIconSize

ole32

OleCreateMenuDescriptor OleDestroyMenuDescriptor OleTranslateAccelerator IsAccelerator OleLockRunning OleIsCurrentClipboard OleFlushClipboard DoDragDrop CoRevokeClassObject CoRegisterMessageFilter OleGetClipboard RegisterDragDrop CoLockObjectExternal RevokeDragDrop CoInitializeEx OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CLSIDFromString CLSIDFromProgID CoCreateGuid CreateStreamOnHGlobal OleDraw OleDuplicateData CoTaskMemAlloc ReleaseStgMedium CoTaskMemFree CoUninitialize CoCreateInstance CoInitialize

oleaut32

SysStringLen SystemTimeToVariantTime VariantTimeToSystemTime VariantCopy SafeArrayGetDim SafeArrayAccessData SafeArrayUnaccessData VariantInit VariantChangeType SafeArrayUnlock SafeArrayLock SafeArrayDestroy SafeArrayCreate SafeArrayGetUBound SafeArrayGetLBound SysStringByteLen VarBstrFromDate SysAllocStringByteLen SysAllocString VariantClear SysAllocStringLen OleCreateFontIndirect SafeArrayGetElemsize SysFreeString

oledlg

OleUIBusyW

gdiplus

GdipBitmapUnlockBits GdipBitmapLockBits GdipCreateBitmapFromStream GdipGetImagePalette GdipGetImagePaletteSize GdipGetImagePixelFormat GdipSetInterpolationMode GdipCreateBitmapFromHBITMAP GdiplusShutdown GdiplusStartup GdipGetImageGraphicsContext GdipCreateBitmapFromScan0 GdipDrawImageI GdipDrawImage GdipDrawImageRectI GdipDrawImageRect GdipGraphicsClear GdipStartPathFigure GdipGetFontHeight GdipCreateBitmapFromFile GdipCreateFromHDC GdipAddPathLineI GdipAddPathArcI GdipClonePath GdipAddPathEllipse ord1 GdipClosePathFigure GdipCreatePen1 GdipDeletePen GdipCreatePath GdipDeletePath GdipDrawPath GdipCreateSolidFill GdipDeleteBrush GdipFree GdipAlloc GdipCloneBrush GdipFillRectangle GdipFillPath GdipCreatePathGradientFromPath GdipSetPathGradientCenterColor GdipSetPathGradientCenterPoint GdipSetPathGradientSurroundColorsWithCount GdipGetPathGradientPointCount GdipSetPathGradientFocusScales GdipGetImageHeight GdipGetImageWidth GdipDeleteFont GdipCreateStringFormat GdipDeleteStringFormat GdipSetStringFormatAlign GdipSetStringFormatLineAlign GdipSetStringFormatTrimming GdipSetTextRenderingHint GdipDrawString GdipDeleteGraphics GdipCreateFontFromLogfontW GdipSetSmoothingMode GdipFillRectangleI GdipLoadImageFromFile GdipCloneImage GdipDisposeImage

oleacc

AccessibleObjectFromWindow CreateStdAccessibleObject LresultFromObject

imm32

ImmGetOpenStatus ImmReleaseContext ImmGetContext

winmm

PlaySoundW

$COMMONFILES/ParetoLogic/UUS3/UUS3.dll

IMPHASH d85694722aedbc4521bf434d2e9959ec
SHA256 543c0f7cd418f055a98aab2645816278bd44fd8a60771003431489b205139a60
MD5 97a7da8bdf2ee4b9a98e751b8d07636b
SHA1 9d76ad73ee0dae5854116007fa0b821e26733a54
SHA512 9ff5190ba2c7f8ecee9036dae4e67dbf64dc9732c3f7873968108bf0922ece4f61807bfbd39d852c4ed02d7bdee5a20a2611ca6ee54fb315a15bfa7f4c6ce6bd
SSDEEP 12288:O/fHAeW9e/7FKKBpGDwJkChY/CCsU9okbyZ+mBFD/aV:u7FKK/GcrY4U9ZbyRD/aV
TLSH
T1FC849F21BBD5C036D19E0135A779F75A292DB9325324D0C7BBD41A6E6D312C2BA38B0F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

ae:fb:94:ed:e0:38:60:65:c0:e6:bf:57:b7:55:d6:b3:0d:f0:6e:fc

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Paretologic Inc.,OU=Paretologic Inc.,O=Paretologic Inc.,L=Victoria,ST=British Columbia,C=CA

Chains

Feb 13, 2014

CN=Paretologic Inc.,OU=Paretologic Inc.,O=Paretologic Inc.,L=Victoria,ST=British Columbia,C=CA

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:2f:4e:e1:35:5c

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 13, 2011 - Apr 13, 2019

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Paretologic Inc.,OU=Paretologic Inc.,O=Paretologic Inc.,L=Victoria,ST=British Columbia,C=CA

Serial Number

11:21:f9:94:5d:68:b6:df:dd:55:72:92:b6:3c:5a:30:15:e1

Issuer

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 25, 2013 - Feb 26, 2015

Minor OS version

1

Major OS version

5

Entry point

171392

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\Dev\Update\UniversalUpdate\Release\UUS.pdb

wininet

InternetOpenW HttpOpenRequestW HttpAddRequestHeadersW HttpSendRequestW HttpQueryInfoW InternetReadFile InternetCloseHandle InternetCrackUrlW InternetConnectW

shell32

SHGetSpecialFolderPathW SHGetFolderPathW ShellExecuteExW ShellExecuteW

user32

CreateAcceleratorTableW GetDesktopWindow FillRect GetFocus LoadImageW GetMenuItemCount SetMenuDefaultItem GetMenuItemInfoW SetMenuItemInfoW PostMessageW PeekMessageW GetMessageW TranslateMessage DispatchMessageW IsWindow SetWindowLongW ReleaseCapture GetWindowLongW GetSystemMetrics SwitchToThisWindow CallWindowProcW TranslateAcceleratorW LoadMenuW LoadAcceleratorsW PostQuitMessage LoadStringA MessageBeep PtInRect CreatePopupMenu DestroyMenu TrackPopupMenuEx AppendMenuW RemoveMenu MonitorFromPoint DefWindowProcW RegisterWindowMessageW GetClassInfoExW LoadCursorW RegisterClassExW DestroyWindow wsprintfW UnregisterClassA DestroyAcceleratorTable GetSysColor CharNextW LoadStringW GetMonitorInfoW MonitorFromWindow GetClassNameW GetDlgItem GetParent IsChild GetWindow SetFocus SetCapture EnableWindow RedrawWindow IsWindowVisible ShowWindow InvalidateRgn InvalidateRect ReleaseDC GetDC EndPaint BeginPaint MapWindowPoints ScreenToClient ClientToScreen GetClientRect GetWindowRect SetWindowPos MoveWindow SetMenu GetWindowTextLengthW GetWindowTextW SetWindowTextW SendMessageW CreateWindowExW

kernel32

TerminateProcess LCMapStringW RtlUnwind GetCommandLineA GetSystemTimeAsFileTime GetCPInfo DecodePointer EncodePointer InitializeCriticalSection GetStringTypeW InterlockedExchange InterlockedPopEntrySList IsProcessorFeaturePresent InterlockedPushEntrySList InterlockedCompareExchange HeapSize HeapReAlloc HeapDestroy VirtualFree VirtualAlloc SetFilePointer UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapCreate ExitProcess GetStdHandle GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree SetHandleCount GetFileType GetStartupInfoW GetLocaleInfoW GetConsoleCP GetConsoleMode FlushFileBuffers GetTimeZoneInformation GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale SetStdHandle Sleep OutputDebugStringW CloseHandle ReadFile CreateFileW SizeofResource LockResource LoadResource FindResourceW FindResourceExW GetFileAttributesW CreateDirectoryW DeleteFileW MoveFileW GetModuleFileNameW CreateThread lstrcpyW WaitForSingleObject GetExitCodeThread WaitForMultipleObjects GetTempPathW RaiseException lstrcmpiW WriteFile MultiByteToWideChar WideCharToMultiByte lstrlenW GetFileSize LoadLibraryW GetProcAddress FreeLibrary GetLastError GetVersionExW EnterCriticalSection LeaveCriticalSection GetCurrentThreadId DeleteCriticalSection InterlockedDecrement FlushInstructionCache GetCurrentProcess GlobalAlloc lstrcmpW MulDiv InterlockedIncrement GlobalLock GlobalUnlock GetModuleHandleW LoadLibraryExW InitializeCriticalSectionAndSpinCount SetEnvironmentVariableA lstrcpynA lstrcpynW SetLastError HeapFree GetProcessHeap HeapAlloc WriteConsoleW SetEndOfFile CompareStringW GetLocalTime

gdi32

BitBlt CreateCompatibleDC CreateCompatibleBitmap CreateSolidBrush DeleteDC GetStockObject GetObjectW GetDeviceCaps SelectObject DeleteObject

advapi32

RegCreateKeyExW RegSetKeySecurity FreeSid SetSecurityDescriptorDacl InitializeSecurityDescriptor AddAce InitializeAcl AllocateAndInitializeSid CopySid GetLengthSid GetTokenInformation OpenProcessToken RegGetKeySecurity IsTextUnicode GetUserNameW RegDeleteKeyW RegCloseKey RegQueryInfoKeyW RegEnumKeyExW RegOpenKeyExW RegSetValueExW RegEnumKeyW RegDeleteValueW RegFlushKey RegQueryValueExW

ole32

CoTaskMemFree CoTaskMemAlloc CLSIDFromString CoCreateInstance CoInitialize CLSIDFromProgID CoGetClassObject CreateStreamOnHGlobal StringFromGUID2 OleLockRunning OleInitialize OleUninitialize CoTaskMemRealloc CoUninitialize

oleaut32

OleCreateFontIndirect SafeArrayUnaccessData SafeArrayAccessData DispCallFunc SafeArrayGetUBound SafeArrayGetLBound VarUI4FromStr SysAllocStringLen VariantInit VariantClear LoadRegTypeLi LoadTypeLi SysAllocString SysStringLen SysFreeString

shlwapi

PathAddBackslashW PathRemoveBackslashW PathRemoveFileSpecW PathFileExistsW PathAppendW

$COMMONFILES/ParetoLogic/UUS3/settings.xml

SHA256 f2cfbc6b9aecd94141c18b4bb1ed188cf1e390a3909e3d88416577921eaaacb1
MD5 687cd6f46c1c1abbcbd1139001babf51
SHA1 b6b78947f27926d0fbf5548140452cab9b017d1b
SHA512 b77de87148b9811db93e4346bddf50d7842bbd078d654c477bf34c0f211d14f57c29c9ea55eca42053d6bb825fc8c1aa81950224d3b1f3c9d7cf3e3d2883e3ee
TLSH
T160316E1737F86209B577BA8D8FFDD1E98735B4E286A5D65F0071120BC2E2C1648A233B
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/AdvSplash.dll

IMPHASH 18323a9b4dffb5fab0a7a28a154efdfd
SHA256 0990902460ec38bcd605b518bffa081942c6f4c5fe1828a61ba3965bbf15d8bd
MD5 41be2441ee7c684eaa76a62d4223b4c7
SHA1 05de8220e296db1025f7bd4d9de1f44370018162
SHA512 fec074a2196141e497334b57563dc7863a0b949d348164aec8c4f21d1b3c4ed795e03fd6e5726a2e90da7015abfbb4e28102647c0e343e84a707e99271a1a938
SSDEEP 48:i/UYdq4ThVJttIETQ1lk+MfSvZcLLefNDpXq65wtBpuRNanZNA6zu6cv9n1MFM0C:qvTFfSc+0OeLLefNDE6OuXaZq6VG6MJ
TLSH
T146C1C43BB6C0A2B2E16F02B13C26334383E05571236291354D77ADDC6AE6EA6DD58783
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

4763

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/GraphicalInstaller.dll

SHA256 7a72a7a6c28b9127d38cbdf14672ed1feaec86b72c83c0302cbcdbd03341da91
MD5 5691d9412413d3cff6c19f9e4c07e0f3
SHA1 6679230811fe3ba8fdf145e9a93babff66de8e70
SHA512 28c44a956a6951ce11fd03dac7f9b1eccde24720c385077315547d6b36e6df55fe5d19175f53a6e44068c6688400a52be10c720c1e4db47d57e75a6c8925b80e
SSDEEP 768:FsHjNDKSDTlZMXAy4IIZmr+FLtYCsKQPvatRNPjZjrQQEHZ2U7ReFH7:FiD1nlZMXJ49S+FJaKQPC7N9vQ1Zl7w7
TLSH
T16303F14C3164287EFDF2077CAFA8C7A36854EC28361A536D3387580F1E7964A16247F6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

ACProtect 1.3x - 1.4x DLL software

Detects file using ACProtect software.
UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

113152

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

out.upx

SHA256 3f8611395eccf62804a9f9d3a97757599c09d3c85efdd27ca949b9b330250c8e
MD5 82efe220c684bfba351eb781d3f4fca2
SHA1 82457041875357dd6d7a46c734d14c1b0db9bde7
SHA512 84864e2f41d482684b5b67997326cab73e501025db0a27bf7597f4dd64b947c17facc502f39e2dd0ee532e078dc44db19469e5321390cd33167d226d843c9bb3
SSDEEP 1536:a4GHRHdsdvYc6BEs77MeJlZSxzxTKP+h+C:UW+EqdzcAy+C
TLSH
T18F836C10B18098B2DCCE58BE501AD231B32E692357D6E5C7375F9E27BE723C1A636352
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6404

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/KillProcDLL.dll

IMPHASH d806a080e21508dd768fa70be247d2ae
SHA256 de1177a4bd1c56c3555f366d40b37d7dd9cb25e16c4973d0a4d22bf9a8af7aed
MD5 1cc87d2b5a79b18f133b4f944e2f2f74
SHA1 98e0ddb727c76e06be1668434d754e5b80a0c154
SHA512 d8fee1c09fef9af4e1f38baaffa3a6d059713b14ecad900815c086cc22855644fcdeacd6bba31ea6e6925831e650f7b0d34e6dea4c57a978fb4f5bf0cd6d72a9
SSDEEP 384:JLmJwO50x66T9JOpOUT38YZvml7xoKdyuwlx8xSiorppugBwUdJopS:JW50hJwwUTsXdPwxvtpDtdJo
TLSH
T1DFF26C507C8144F7C28E4235A5A9AB179FBF692036E55983CF269EDA1C311F0E93B307
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6841

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/Math.dll

IMPHASH 14a3860e30b9e9b7d8593963364c41b2
SHA256 4e540d1d8ca1c7564753232d18a884b0597fd7e5df88f8b5d370824d858954b7
MD5 7fc4a4937d364d42d4d06ff3554a464d
SHA1 ad7ddfa47d0abfa0f3e9546db4d6fd6d40a39b41
SHA512 da80c681fac9497d2002ceec33fee63f3d6ed0ef4a62213405f87343e3723b27ab0f51c98cf6f588a48d9edf10e68bbbe8856657e630bd6a15252ad96ede2da7
SSDEEP 3072:2REe7Z38wWD1faAg0Fugz//BNABN6X195j8e3:NwZMweZaAOg75yw+o
TLSH
T19FE39E25B4A3C4B3C5BA00B40465EF991F7B543503B988773FF81A6E4EB47E09AA3256
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

20979

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

lstrcpyW lstrcmpW GlobalFree lstrlenW lstrcatW GlobalAlloc lstrcpynW WideCharToMultiByte MultiByteToWideChar GetCurrentThreadId GetCommandLineA RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetProcAddress GetModuleHandleA GetLastError GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement HeapFree Sleep ExitProcess SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapCreate HeapDestroy VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage LeaveCriticalSection EnterCriticalSection SetFilePointer WriteFile GetConsoleCP GetConsoleMode HeapAlloc VirtualAlloc HeapReAlloc LoadLibraryA InitializeCriticalSectionAndSpinCount RtlUnwind LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW HeapSize CreateFileA CloseHandle FlushFileBuffers

$PLUGINSDIR/SkinnedControls.dll

IMPHASH 0b5ebf524f3364a6e46fa57d8d2ff79c
SHA256 5f7998711ea856730139c4dac403f11b947ed94a464dc6d2d4b22f928c3a8536
MD5 364bb3c9218429dd1315ad1db47e152d
SHA1 3253c1a381161c268bce8c487e892c8e5dd29dc3
SHA512 d9084068a259acb9a1691d10da8610053d3abdf6dc78d7357d80d1ac794d940478d2b05c3050484680ddee4c832ae30d71a67b2c2978845e298aca48058e01f6
SSDEEP 768:Q0p2dJFs6nYFg0vxrF9jd+IpMCGC8BnmmfJmLVp1aB5tEEThyX7QirbTGgyhTFDK:Q0YsX7vxGjBvJgVTadaXBTeh55axv
TLSH
T188737D417288C9FADCDE083A0C2AEF2595BE591247D2C5C33B5E6D56BE323CD9674382
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

5234

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

LCMapStringW LCMapStringA GetStringTypeW GetStringTypeA GetLocaleInfoA GetVersionExW GetVersion HeapFree GetProcessHeap GetModuleHandleW HeapAlloc lstrcmpW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetLastError VirtualProtect FlushInstructionCache GetProcAddress LoadLibraryA VirtualQuery IsValidCodePage GetOEMCP GetACP GetCPInfo InitializeCriticalSectionAndSpinCount GetModuleFileNameA GetStdHandle WriteFile ExitProcess Sleep InterlockedDecrement GetCurrentThreadId InterlockedIncrement TlsSetValue TlsGetValue HeapReAlloc VirtualAlloc EnterCriticalSection LeaveCriticalSection VirtualFree lstrlenW GetFileAttributesW LocalFree GetLastError FormatMessageW lstrcmpiW MultiByteToWideChar WideCharToMultiByte GlobalAlloc lstrcpynW lstrcpyW MulDiv GlobalFree

user32

IsWindowVisible SetCursor GetCursorPos ScreenToClient GetMessagePos ReleaseCapture KillTimer SetCapture SetTimer PtInRect MapWindowPoints CopyRect ReleaseDC GetWindowDC WindowFromDC InflateRect FrameRect OffsetRect GetWindowRect GetSysColorBrush GetSystemMetrics SetRect DrawFrameControl GetSysColor GetClientRect CreateWindowExW SendMessageW SetWindowPos ShowScrollBar SetScrollRange SetScrollPos SetScrollInfo GetScrollRange GetScrollPos GetScrollInfo EnableScrollBar FillRect LoadImageW ShowWindow FindWindowExW EnumChildWindows RemovePropW GetClassNameW GetParent UpdateWindow SetPropW GetDlgItem SetWindowLongW InvalidateRect PostMessageW CallWindowProcW GetDlgItemTextW GetClassLongW GetWindowLongW GetPropW DrawTextW wsprintfW DrawEdge

gdi32

ExtTextOutW SetBrushOrgEx PatBlt CreateBitmap UnrealizeObject CreateCompatibleBitmap SetBkColor GetObjectW PlayEnhMetaFile SetWindowOrgEx SelectClipRgn IntersectClipRect CreatePatternBrush CreateSolidBrush GetStockObject SetStretchBltMode BitBlt StretchBlt SetBkMode SetTextColor DeleteObject CreateCompatibleDC SelectObject GetPixel DeleteDC

$PLUGINSDIR/System.dll

IMPHASH 039bcbc605477e8e87ec550c2e60e748
SHA256 03cd57ab00236c753e7ddeee8ee1c10839ace7c426769982365531042e1f6f8b
MD5 959ea64598b9a3e494c00e8fa793be7e
SHA1 40f284a3b92c2f04b1038def79579d4b3d066ee0
SHA512 5e765e090f712beffce40c5264674f430b08719940d66e3a4d4a516fd4ade859f7853f614d9d6bbb602780de54e11110d66dbb0f9ca20ef6096ede531f9f6d64
SSDEEP 192:sRer7uivwq1XpKs4FVWSjMd8tIg2cREbyCsZ8q2R4Sy+Xe:s67Xws4FVWig86/5eCBqSy+Xe
TLSH
T1B3322A2657B0D2F2E6A1827408A639336BBA762412B50D1BDFF74481FC15BC67E39327
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

10085

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/UserInfo.dll

IMPHASH 45d25ca52c312b2254c60dbcb30342d1
SHA256 728472ba312ae8af7f30d758ab473e0772477a68fcd1d2d547dafe6d8800d531
MD5 d16e06c5de8fb8213a0464568ed9852f
SHA1 d063690dc0d2c824f714acb5c4bcede3aa193f03
SHA512 60502bb65d91a1a895f38bd0f070738152af58ffa4ac80bac3954aa8aad9fda9666e773988cbd00ce4741d2454bf5f2e0474ce8ea18cfe863ec4c36d09d1e27a
TLSH
T10281577B23F44473D09A4BBB01E60CD752A2D9309316442F498B4D6E14C1AA7FD6EB17
MD5 SHA1 SHA512 TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

4716

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/background.ole

SHA256 0e5aa56dd09707789400982b8085e38e79ae1714619be5fe692e6485aaed2753
MD5 e8d6edb75d9183af2eb076d8a203d8b8
SHA1 f83970613da628bf09920a07b72341f96cb50585
SHA512 6fe8ec6e09da9ec4fa6da61fd7782c77da9c29c8b388777b45d5d897779f29247ee1f6b94451c5d90d42320d2afbd762bded8c64801d8c25ad7c263515a4ff41
SSDEEP 6144:jWo1b58ubQse4ST1a/MwtZDBldta57Q0HYN3x/3:vULaEwvDBhW73Y5F3
TLSH
T19625D758DB9FA4C1ECEA2EB6F4B02DCA01226EB3EE5C4A3D4D0E700236B175D15D99C5
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/background_small.ole

SHA256 2af245e206d5ad274310833657c8d9ca2def5d8f81092fd1be1b09005f5ef4e4
MD5 1a5dbc7eaa413338b23748f72fc813e5
SHA1 496ec508bb8ed3c8f890627cd271a291894224c9
SHA512 c217574ca9dd6249dc9458b0d489f65fd2c04ef524a19db7296d74f1d836a5082bf0776faac378caf808d5c87e05220290cef029bbe4162b1eb7b00125c71750
SSDEEP 768:ufio1rWePlwXrlHvlYjDRsBG+r7rIsUf469Q+qsVEjBjq4nPQQ75KzSgbpzUDdOh:K
TLSH
T17D9470F5E161F2CE28196594E66424F4125B1CADF837C73BAC0AFD65B8BF642B076E00
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/button.bmp

SHA256 04313d78272ce38b87ceaca8951bc4f4b34afd8e8762b3f662c7be8b3c00a621
MD5 852ba1f1eb2ba4246f5b16a9c96f2d71
SHA1 253ff83ce255b0f59049de218bffab8cf1b3923a
SHA512 de79f96bcc1de25819da70a56f474f560d782aa929fb2beb6511ec75b68ffaa7aaffa746ab8a5a9010d9d0a06e663544d7a5e2ba3be59075c94722e0f4ca6380
SSDEEP 192:LsVKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKTKKKKKKKKKKKKKKKKKm:LmKKKKKKKKKKKKKKKKKKKKKKKKKKKKKM
TLSH
T1E2D1D2852DDDD532073ECB0E6943778972BC9AE316A3A78A54BCD0B1F96095044B3BCD
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/nsDialogs.dll

IMPHASH 9ea5bdc8c90dfcffe309465c26c89758
SHA256 2bee549b2816ba29f81c47778d9e299c3a364b81769e43d5255310c2bd146d6e
MD5 f7b92b78f1a00a872c8a38f40afa7d65
SHA1 872522498f69ad49270190c74cf3af28862057f2
SHA512 3ad6afa6269b48f238b48cf09eeefdef03b58bab4e25282c8c2887b4509856cf5cbb0223fbb06c822fb745aeea000dd1eee878df46ad0ba7f2ef520a7a607f79
SSDEEP 192:y1zQhZDqlJcKISw99ioU3MSfwLF/+nhHUisdz:ozoZDGKYw9goWyFGBU7z
TLSH
T1DB121B626688D5BBD2D1223636A92701DBF97328F0666C05D7B34E467DA42C67E39302
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

7449

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/splash.bmp

SHA256 4edf0bab5323fe66ccddb33d084e13506a53fc21e1151ac069d1f9b4b7b798d9
MD5 959c1d8648a28875f6da0ff99fb9de4d
SHA1 012994fb05ac3671008808aae23f008c1e9a3a0c
SHA512 f9f534e4d39e530868be134b2aa80f221b904a7e93baf6a4f68da8d8a802bf4d94a67dfed8469d0fecff75cb6b426e0b0eec82552659d6cd6171e5f85f9f4ac3
SSDEEP 3072:+tjSmSS5QBSS9SJ+rUSspFn5t4fQygDURlqSzO49xAB5/P5DSEJgWJBDT+NBY55w:FwyUPUubB3IakF14MtLEX2
TLSH
T12694A675DD542A47A28171F228B73CE9640AA1E054538B9FBD0328185FEEF7AC7207DE
MD5 SHA1 SHA512 SSDEEP TLSH

7ZipDLL.dll

IMPHASH d99d98917367f910bd71156c05f0c5fe
SHA256 56c8ce7d1130a47db66b6371d8a73842cbae7b4f23c2531efaa18b513749cf4c
MD5 d619f1d4576dfb1c098ad75d39e803f8
SHA1 bbc31087a48c9044f69e94b0ad6ae4e9f66d1d82
SHA512 9350fc67b05a66231693b1574432df7cef7df4c203cce94a9b85f73708ab1ea8cfc8e5e4caf2ce75b3c2d0e3217fa731dd08e0da1676cdeeee7ff9e765932f31
SSDEEP 6144:PxZKMZcL5HryEO+VpnvvdEBptqi5Bn7LNOLkmVKapZG9OOhX8xmyEtrVUjSSdQbZ:pUxdHl3dm37LNO7VVpU4+WYtrVUjqbIU
TLSH
T10BC44A3367E2D176D15F1230EA06F3E914AAE3768420954B7ED80F2E2FF06E5D509E0A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

ba:30:89:85:64:6b:12:7b:c1:39:4a:d9:0e:cf:0e:13:c9:a9:4f:e1

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Paretologic Inc.,OU=Paretologic Inc.,O=Paretologic Inc.,L=Victoria,ST=British Columbia,C=CA

Chains

Feb 13, 2014

CN=Paretologic Inc.,OU=Paretologic Inc.,O=Paretologic Inc.,L=Victoria,ST=British Columbia,C=CA

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:2f:4e:e1:35:5c

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 13, 2011 - Apr 13, 2019

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Paretologic Inc.,OU=Paretologic Inc.,O=Paretologic Inc.,L=Victoria,ST=British Columbia,C=CA

Serial Number

11:21:f9:94:5d:68:b6:df:dd:55:72:92:b6:3c:5a:30:15:e1

Issuer

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 25, 2013 - Feb 26, 2015

Minor OS version

1

Major OS version

5

Entry point

372338

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

GetVersionExA GetLastError WideCharToMultiByte MultiByteToWideChar SetLastError CloseHandle SetFileAttributesA DeleteFileA GetTempPathA GetTempFileNameA CreateFileA ReadFile WriteFile CompareFileTime GetSystemInfo GetProcAddress GetModuleHandleA DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetCurrentProcessId GetCurrentThreadId QueryPerformanceCounter GetTickCount WaitForMultipleObjects VirtualFree VirtualAlloc WaitForSingleObject SetEvent InitializeCriticalSection CreateEventA CreateSemaphoreA ReleaseSemaphore ResetEvent DosDateTimeToFileTime LocalFileTimeToFileTime SystemTimeToFileTime FileTimeToDosDateTime FileTimeToLocalFileTime GetStringTypeW LCMapStringW IsValidCodePage GetOEMCP GetACP GetCPInfo HeapReAlloc LoadLibraryW HeapAlloc HeapFree EncodePointer DecodePointer ExitThread CreateThread GetCommandLineA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent GetModuleHandleW ExitProcess GetStdHandle GetModuleFileNameW HeapCreate HeapDestroy Sleep HeapSize TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType GetStartupInfoW GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW GetSystemTimeAsFileTime RtlUnwind RaiseException

user32

CharPrevExA CharNextA CharLowerW CharUpperW CharLowerA CharUpperA CharPrevA

oleaut32

SysFreeString VariantCopy SysAllocString VariantClear SysAllocStringByteLen

CommonLoggingExtension.pxt

IMPHASH f364035b7b3aa1061a5bed268564bbb2
SHA256 7bf1be5af48ccc3c713ad8e0c825da329f6f28c060f93b1d171dd042831d7c36
MD5 1200dd01af26d8b9370895f0afc47d8d
SHA1 d5f7ecf7dd31bafea55c9e929273972a55d79536
SHA512 7ab94778170a165e0bdc9453af735a290c92e7f0540d2e41c088f43573a0494c3668664a80b42cb59e9294e859f3aa0bafae6a3afce9d8aa048cd669f9479d03
SSDEEP 3072:sMO/k7ZqgzQzIpPTnvwxWbgbro4F1LuB2qWiCzUcBW1ogaeqnFYLIDhQpebQU/zS:sMosAEMIpLnvwxWbgvosLuB2qBgUcg1J
TLSH
T18BE35A513EDBC035D24A1937A5FA975AB36B7B319733C4CB3724192849B0AD2AE39313
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

6e:6a:54:a7:38:8f:e4:00:24:de:fd:1f:67:58:9f:f3:7e:e7:34:eb

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Paretologic Inc.,OU=Paretologic Inc.,O=Paretologic Inc.,L=Victoria,ST=British Columbia,C=CA

Chains

Feb 13, 2014

CN=Paretologic Inc.,OU=Paretologic Inc.,O=Paretologic Inc.,L=Victoria,ST=British Columbia,C=CA

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:2f:4e:e1:35:5c

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 13, 2011 - Apr 13, 2019

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Paretologic Inc.,OU=Paretologic Inc.,O=Paretologic Inc.,L=Victoria,ST=British Columbia,C=CA

Serial Number

11:21:f9:94:5d:68:b6:df:dd:55:72:92:b6:3c:5a:30:15:e1

Issuer

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 25, 2013 - Feb 26, 2015

Minor OS version

1

Major OS version

5

Entry point

69585

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\Dev\SpeedyPC Pro\common\zeppelin\common\CommonLoggingExtension\Win32\Release\CommonLoggingExtension.pdb

kernel32

LockResource GetFileAttributesW WideCharToMultiByte MultiByteToWideChar GetFileSize SizeofResource UnmapViewOfFile CreateFileW CreateFileMappingW CloseHandle LoadResource FindResourceW FindResourceExW DeleteCriticalSection EnterCriticalSection LeaveCriticalSection MapViewOfFile FlushFileBuffers WriteConsoleW SetStdHandle GetConsoleMode GetConsoleCP LoadLibraryW RtlUnwind IsProcessorFeaturePresent GetCurrentProcess GetModuleFileNameW SetFilePointer WriteFile ExpandEnvironmentStringsW GetProcAddress GetModuleHandleW GetLastError GetACP RaiseException InitializeCriticalSectionAndSpinCount HeapDestroy HeapAlloc HeapFree HeapReAlloc HeapSize GetProcessHeap DecodePointer EncodePointer GetCurrentThreadId GetCommandLineA TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetStdHandle GetCPInfo InterlockedIncrement InterlockedDecrement GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError LCMapStringW GetStringTypeW Sleep ExitProcess SetHandleCount GetFileType GetStartupInfoW GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSection

shell32

ord51

ole32

CoCreateInstance CoTaskMemFree CoUninitialize CoInitialize

shlwapi

PathRemoveArgsW PathFileExistsW PathUnquoteSpacesW

CommonSpecialist.pxt

IMPHASH ccf8daa3a310ba373ad06900ca8287f9
SHA256 28d24d3e550fdd2085fc08f1cedc82eaaa119972e8f71a4cedeaf8a1328e2490
MD5 cfe84bdb41988e9463bdc7b8d30ce0fa
SHA1 89fbe7e60e0ebb30aa28094db3a441f67b76ca71
SHA512 d97be87b644506b004299d6b59126c3ed3bd499e4d8607b82c70952b96de2a9b472ed3c6b42a0965aa11c4fff84df7cbc5603454c84c904e41a859a0a9a3610f
SSDEEP 3072:6LgfRn1L3ZvyE9/VZCzyOuB780R/TFraZP0ErC:Jpn1L3ZvrFVwzyOuB780lTcZPnrC
TLSH
T1BEE36C11BEDBC131C29F293E99B89764236B7BB08B6644CB7B5C191CAD706C17E39302
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

08:e3:bc:e3:69:59:87:3f:a7:ea:4b:dc:e1:9c:c5:3a:b1:a7:da:6b

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Paretologic Inc.,OU=Paretologic Inc.,O=Paretologic Inc.,L=Victoria,ST=British Columbia,C=CA

Chains

Feb 13, 2014

CN=Paretologic Inc.,OU=Paretologic Inc.,O=Paretologic Inc.,L=Victoria,ST=British Columbia,C=CA

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:2f:4e:e1:35:5c

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 13, 2011 - Apr 13, 2019

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Paretologic Inc.,OU=Paretologic Inc.,O=Paretologic Inc.,L=Victoria,ST=British Columbia,C=CA

Serial Number

11:21:f9:94:5d:68:b6:df:dd:55:72:92:b6:3c:5a:30:15:e1

Issuer

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 25, 2013 - Feb 26, 2015

Minor OS version

1

Major OS version

5

Entry point

69023

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\Dev\SpeedyPC Pro\common\zeppelin\Zeppelin\Specialists\CommonSpecialist\Win32\Release\CommonSpecialist.pdb

kernel32

SizeofResource LockResource LoadResource WideCharToMultiByte FindResourceExW CreateFileW CloseHandle LeaveCriticalSection EnterCriticalSection DeleteCriticalSection InitializeCriticalSection GetLastError GetTickCount FindResourceW FlushFileBuffers WriteConsoleW SetStdHandle LoadLibraryW RtlUnwind GetCurrentProcess GetModuleFileNameW GetFileSize SetFilePointerEx ReadFile SetFilePointer WriteFile SetEndOfFile ExpandEnvironmentStringsW GetProcAddress GetModuleHandleW MultiByteToWideChar GetACP HeapDestroy HeapAlloc HeapFree HeapReAlloc HeapSize GetProcessHeap RaiseException InitializeCriticalSectionAndSpinCount DecodePointer EncodePointer GetCurrentThreadId GetCommandLineA UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCPInfo InterlockedIncrement InterlockedDecrement GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError LCMapStringW IsProcessorFeaturePresent GetStdHandle Sleep ExitProcess SetHandleCount GetFileType GetStartupInfoW GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW HeapCreate QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeW GetConsoleCP GetConsoleMode

shell32

SHGetFolderPathW

shlwapi

PathFileExistsW

ExtensionManager.dll

IMPHASH f8e7e237cc67b0cfc97826628ab9d3f1
SHA256 b19b8ad6b4f11482f14472e16e4db21475e0a3ea3d2911011ea20326190be4ec
MD5 0239b8875167c80e15c6c1beb0c925f2
SHA1 795ceae7265feaa696ab9055ab19012251b736dd
SHA512 90de8933ae5a6a6c79628aa028a381a3910093efb6f2ebcde4ad44ca7a14741b50948c9a1886298ef1c108049c969f4cef589f970731363a40c5bc91e31f5098
SSDEEP 1536:ZmZlNFtFk/PSW4LHqaJlediaXfkoITMpGYD/i2zKp5JLqRvjs:ZmZ5rlRJZ8dITMctgKp5JLqW
TLSH
T19B836C117AA0C035D0DA693189AAC6721A7E79319BF5C0CB7F8913BD4EA03C1BB39357
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

dd:79:09:d7:36:ae:51:9d:4f:06:66:03:6a:06:87:76:93:17:19:64

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Paretologic Inc.,OU=Paretologic Inc.,O=Paretologic Inc.,L=Victoria,ST=British Columbia,C=CA

Chains

Feb 13, 2014

CN=Paretologic Inc.,OU=Paretologic Inc.,O=Paretologic Inc.,L=Victoria,ST=British Columbia,C=CA

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:2f:4e:e1:35:5c

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 13, 2011 - Apr 13, 2019

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Paretologic Inc.,OU=Paretologic Inc.,O=Paretologic Inc.,L=Victoria,ST=British Columbia,C=CA

Serial Number

11:21:f9:94:5d:68:b6:df:dd:55:72:92:b6:3c:5a:30:15:e1

Issuer

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 25, 2013 - Feb 26, 2015

Minor OS version

1

Major OS version

5

Entry point

17675

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\Dev\SpeedyPC Pro\common\zeppelin\common\Extension\Win32\Release\ExtensionManager.pdb

kernel32

FindResourceW LoadResource LockResource SizeofResource FindClose FindNextFileW FindFirstFileExW GetProcAddress FindResourceExW FlushFileBuffers WriteConsoleW SetStdHandle GetConsoleMode GetConsoleCP GetCurrentProcess CloseHandle GetModuleFileNameW CreateFileW SetFilePointer WriteFile GetModuleHandleW GetLastError MultiByteToWideChar WideCharToMultiByte GetACP HeapDestroy HeapAlloc HeapFree HeapReAlloc HeapSize GetProcessHeap RaiseException EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount DeleteCriticalSection DecodePointer EncodePointer GetCurrentThreadId GetCommandLineA GetCPInfo InterlockedIncrement InterlockedDecrement GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess IsProcessorFeaturePresent GetStdHandle Sleep ExitProcess SetHandleCount GetFileType GetStartupInfoW GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeW LCMapStringW RtlUnwind LoadLibraryW

shlwapi

PathFileExistsW

rpcrt4

RpcStringFreeW UuidToStringW

HandleUpdate.dll

IMPHASH 232455a44c8d05b873f3ac9703614049
SHA256 657a51fc1ef6eca5fce1b29b622133cd54d4e3ce6a526a02fc032d2be23da2cb
MD5 8cb9a0d296db3186b8759f8cb375f567
SHA1 fcf3ada2fbf89937cb6acd855ecd29bf6e5658d8
SHA512 d3aeb8151d84fd36563f1e794d7e32b3f84df6736a6ba1238f5e7f7152511612487e7527751d14ccaea95193ca339f146637af1eb14d0d56c8844d9010d3a565
SSDEEP 49152:wcqgaNMrg1bqbgPF7G6yFi9wdHqqz+z+NTwq2OYZJtkaPfMD/mxL:w2a31+bgPF7G6yFi9w1qS+z+NkOYZzkE
TLSH
T1C4759E2276A08476C27F3730872AB3BDB6BD95704C3186476A918E3D7E31492961C7EF
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

b1:ff:c9:21:8b:ab:7b:cc:08:f2:59:2d:08:ac:13:a2:42:4d:1a:d1

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Paretologic Inc.,OU=Paretologic Inc.,O=Paretologic Inc.,L=Victoria,ST=British Columbia,C=CA

Chains

Feb 13, 2014

CN=Paretologic Inc.,OU=Paretologic Inc.,O=Paretologic Inc.,L=Victoria,ST=British Columbia,C=CA

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:2f:4e:e1:35:5c

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 13, 2011 - Apr 13, 2019

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Paretologic Inc.,OU=Paretologic Inc.,O=Paretologic Inc.,L=Victoria,ST=British Columbia,C=CA

Serial Number

11:21:f9:94:5d:68:b6:df:dd:55:72:92:b6:3c:5a:30:15:e1

Issuer

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 25, 2013 - Feb 26, 2015

Minor OS version

1

Major OS version

5

Entry point

1006114

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\Dev\SpeedyPC Pro\HandleUpdate\Release\HandleUpdate.pdb

shlwapi

PathRemoveFileSpecW PathFindExtensionW PathStripToRootW PathIsUNCW PathAppendW PathFindFileNameW

kernel32

WriteConsoleW GetConsoleMode IsValidCodePage GetOEMCP GetACP GetCPInfo GetConsoleCP LCMapStringW SetEnvironmentVariableA GetTimeZoneInformation SizeofResource LockResource LoadResource FindResourceW CopyFileW VirtualQueryEx GetCurrentProcess GetModuleFileNameW FreeLibrary InterlockedExchange GetProcAddress GetModuleHandleW IsProcessorFeaturePresent GlobalAlloc lstrcmpW GlobalLock WideCharToMultiByte MultiByteToWideChar SetLastError DeactivateActCtx GetLastError LoadLibraryW ActivateActCtx LoadLibraryExW GetLocaleInfoW GetSystemDefaultUILanguage ConvertDefaultLocale GetUserDefaultUILanguage GetCurrentThreadId GetCurrentThread GlobalDeleteAtom lstrcmpA MulDiv lstrlenW LocalFree FormatMessageW GlobalUnlock GlobalSize GlobalFree CloseHandle SetThreadPriority ResumeThread WaitForSingleObject GetStringTypeW QueryPerformanceCounter HeapDestroy HeapCreate GetEnvironmentStringsW FreeEnvironmentStringsW GetModuleFileNameA GetStartupInfoW GetStdHandle SetHandleCount IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess GetFileType SetStdHandle VirtualQuery GetSystemInfo VirtualAlloc GetSystemTimeAsFileTime HeapQueryInformation HeapSize CreateThread ExitThread HeapReAlloc RaiseException ExitProcess RtlUnwind HeapFree HeapAlloc GetCommandLineA DecodePointer EncodePointer FindResourceExW GetPrivateProfileIntW WritePrivateProfileStringW VirtualProtect GetNumberFormatW GetWindowsDirectoryW SearchPathW Sleep GetProfileIntW GetTickCount InitializeCriticalSectionAndSpinCount GetTempPathW GetTempFileNameW GetFileTime GetFileSizeEx GetFileAttributesW FileTimeToLocalFileTime GetFileAttributesExW GetFullPathNameW GetVolumeInformationW FindFirstFileW FindClose DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile CreateFileW lstrcmpiW FreeResource GlobalFindAtomW FileTimeToSystemTime lstrlenA GlobalGetAtomNameW GetVersionExW lstrcpyW GetSystemDirectoryW DeleteFileW InterlockedIncrement CompareStringW GlobalFlags GetCurrentDirectoryW SetErrorMode TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc InterlockedDecrement ReleaseActCtx CreateActCtxW GetCurrentProcessId GlobalAddAtomW GetPrivateProfileStringW

user32

GetWindowRgn DestroyCursor DrawIcon MapDialogRect GetNextDlgGroupItem HideCaret InvertRect SubtractRect MapVirtualKeyExW GetKeyNameTextW IsCharLowerW GetIconInfo GetDoubleClickTime CharUpperBuffW CopyIcon RegisterClipboardFormatW EmptyClipboard CloseClipboard SetClipboardData CopyImage OpenClipboard GetMenuDefaultItem GetUpdateRect IsClipboardFormatAvailable SetMenuDefaultItem WaitMessage PostThreadMessageW CreateMenu IsMenu UpdateLayeredWindow EnableScrollBar UnionRect MonitorFromPoint TranslateMDISysAccel DrawMenuBar DefMDIChildProcW DefFrameProcW UnpackDDElParam ReuseDDElParam LoadImageW InsertMenuItemW TranslateAcceleratorW CreateDialogIndirectParamW GetNextDlgTabItem EndDialog LockWindowUpdate BringWindowToTop SetCursorPos SetRect CreateAcceleratorTableW LoadAcceleratorsW GetKeyboardState GetKeyboardLayout MapVirtualKeyW ToUnicodeEx CopyAcceleratorTableW DrawFocusRect DrawFrameControl DrawEdge DrawIconEx DrawStateW MessageBeep ReleaseCapture SetCapture GetSystemMenu LoadMenuW SetClassLongW GetAsyncKeyState NotifyWinEvent WindowFromPoint CreatePopupMenu DestroyAcceleratorTable SetParent RedrawWindow SetWindowRgn IsZoomed OffsetRect IsRectEmpty IntersectRect DestroyMenu GetMenuItemInfoW InflateRect CharUpperW DestroyIcon IsIconic ShowWindow MoveWindow IsDialogMessageW CheckDlgButton RegisterWindowMessageW LoadIconW SendDlgItemMessageW SendDlgItemMessageA WinHelpW IsChild GetCapture GetClassLongW SetPropW GetPropW RemovePropW IsWindow SetFocus GetForegroundWindow SetActiveWindow BeginDeferWindowPos EndDeferWindowPos GetDlgItem GetTopWindow DestroyWindow GetMessageTime GetMessagePos MonitorFromWindow ScrollWindow TrackPopupMenu SetMenu SetScrollRange GetScrollRange SetScrollPos GetScrollPos SetForegroundWindow ShowScrollBar CreateWindowExW GetClassInfoExW PostQuitMessage PostMessageW RemoveMenu GetSubMenu GetMenuItemCount RegisterClassW AdjustWindowRectEx EqualRect DeferWindowPos GetScrollInfo SetScrollInfo SetWindowPlacement GetWindowPlacement CallWindowProcW GetMenu SetWindowLongW SetWindowPos GetWindowTextLengthW GetSysColorBrush GetClassInfoW DefWindowProcW MapWindowPoints GetClientRect LoadCursorW SetLayeredWindowAttributes GetSystemMetrics EnumDisplayMonitors SystemParametersInfoW GetMonitorInfoW SetRectEmpty CopyRect KillTimer SetTimer InvalidateRect UpdateWindow GetDesktopWindow RealChildWindowFromPoint GetWindow GetDlgCtrlID GetWindowRect GetClassNameW PtInRect GetWindowTextW SetWindowTextW InsertMenuW GetMenuItemID AppendMenuW GetMenuStringW GetMenuState CheckMenuItem EnableMenuItem ModifyMenuW SendMessageW GetParent GetFocus LoadBitmapW GetMenuCheckMarkDimensions SetMenuItemBitmaps ValidateRect GetCursorPos PeekMessageW GetKeyState IsWindowVisible GetActiveWindow DispatchMessageW TranslateMessage GetMessageW CallNextHookEx SetWindowsHookExW SetCursor ShowOwnedPopups MessageBoxW EnableWindow IsWindowEnabled GetLastActivePopup GetWindowLongW GetWindowThreadProcessId UnhookWindowsHookEx UnregisterClassW DeleteMenu FillRect TabbedTextOutW DrawTextW DrawTextExW GrayStringW ScreenToClient ClientToScreen GetDC ReleaseDC GetWindowDC BeginPaint EndPaint GetSysColor FrameRect

gdi32

SelectObject SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowOrgEx OffsetWindowOrgEx SetWindowExtEx ScaleWindowExtEx ExtSelectClipRgn DeleteDC CreatePatternBrush CreateCompatibleDC GetStockObject SelectPalette GetObjectType CreatePen CreateSolidBrush CreateHatchBrush CreateDIBitmap CreateFontIndirectW CreateCompatibleBitmap CreateRectRgnIndirect GetTextMetricsW EnumFontFamiliesW GetTextCharsetInfo GetTextExtentPoint32W SetRectRgn CombineRgn PatBlt DPtoLP CreateDIBSection Escape CreatePolygonRgn GetBkColor GetTextColor CreateEllipticRgn Polyline Ellipse TextOutW OffsetRgn GetRgnBox SetDIBColorTable RealizePalette StretchBlt SetPixel Rectangle CreatePalette GetPaletteEntries GetNearestPaletteIndex GetSystemPaletteEntries LPtoDP GetWindowOrgEx GetViewportOrgEx PtInRegion FillRgn FrameRgn GetBoundsRect ExtFloodFill SetPaletteEntries EnumFontFamiliesExW GetTextFaceW SetPixelV CreateRoundRectRgn ExtTextOutW RectVisible PtVisible GetPixel BitBlt GetWindowExtEx GetViewportExtEx GetObjectW MoveToEx CreateRectRgn SelectClipRgn DeleteObject LineTo IntersectClipRect ExcludeClipRect GetClipBox SetMapMode SetTextColor SetROP2 SetPolyFillMode SetBkMode SetLayout GetLayout CreateBitmap SaveDC Polygon RestoreDC SetTextAlign SetBkColor GetDeviceCaps CopyMetaFileW CreateDCW

msimg32

TransparentBlt AlphaBlend

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW ClosePrinter OpenPrinterW

advapi32

RegEnumKeyExW RegQueryValueExW RegOpenKeyExW RegCreateKeyExW RegSetValueExW RegDeleteValueW RegDeleteKeyW RegEnumKeyW RegCloseKey RegEnumValueW RegQueryValueW

shell32

SHGetFileInfoW ShellExecuteW DragFinish DragQueryFileW SHAppBarMessage SHGetDesktopFolder SHGetPathFromIDListW SHGetSpecialFolderLocation SHBrowseForFolderW

comctl32

ImageList_GetIconSize

ole32

DoDragDrop CreateStreamOnHGlobal OleLockRunning IsAccelerator OleTranslateAccelerator OleDestroyMenuDescriptor OleCreateMenuDescriptor CoInitializeEx CoInitialize CoCreateInstance CoUninitialize OleDuplicateData CoTaskMemAlloc ReleaseStgMedium RevokeDragDrop CoLockObjectExternal RegisterDragDrop OleGetClipboard CoTaskMemFree CoCreateGuid

oleaut32

SysStringLen VariantClear VariantChangeType VariantTimeToSystemTime SystemTimeToVariantTime SysAllocStringLen VarBstrFromDate VariantInit SysAllocString SysFreeString

gdiplus

GdipGetImageGraphicsContext GdipBitmapUnlockBits GdipBitmapLockBits GdipCreateBitmapFromScan0 GdipCreateBitmapFromStream GdipGetImagePalette GdipGetImagePaletteSize GdipGetImagePixelFormat GdipGetImageHeight GdipGetImageWidth GdipCloneImage GdipDrawImageRectI GdipSetInterpolationMode GdipCreateFromHDC GdiplusShutdown GdiplusStartup GdipCreateBitmapFromHBITMAP GdipDisposeImage GdipDeleteGraphics GdipAlloc GdipFree GdipDrawImageI

oleacc

LresultFromObject AccessibleObjectFromWindow CreateStdAccessibleObject

imm32

ImmReleaseContext ImmGetContext ImmGetOpenStatus

winmm

PlaySoundW

Images/Frame/bottom_logo.png

SHA256 7e895e8d2528ac50aa4ed48aa62339733be7ae4526859eb1c6be60b85c8ae1b6
MD5 a9cc7737c33a391a36fdb55383bba728
SHA1 dbab8b7fa3db10c50f7a34bbd0315677a4bbd121
SHA512 09010f325cdc5eb7aa17a2323d13ff702db4d2d86455ee4f5bddb57810e3743cb961c3e2c242229868ceb8fa9a203a832099810dd66b8b5baa3ba429e6a995f1
TLSH
T1B0813B5CEA7508191DF870802EE744B7DA1F15C1AECADA73FCEEA01A68D1328C606D87
MD5 SHA1 SHA512 TLSH

Images/Frame/close.png

SHA256 683e30d6bc30c137327c120ec1d6703a0f4ee2c1d95137e1ff1371c41ceb4ff7
MD5 8b8f2447af69de4e06e496d218e85fc4
SHA1 140db4a4b2762760bc6d73aa11a3c26cb5c49a36
SHA512 933818a5b0c76535ebbbc03090395709d51472790e5fa8ca076176f5c74702c57200b07f5073c399793c80ad43cf5818d09825043b7ebea9a93ff68394e60677
TLSH
T16FE0C0C249140B0CC03A174B810A3B04FCB145B4068A3CE24524E7EE1C55F2282D41D2
MD5 SHA1 SHA512 TLSH

Images/Frame/dlg_title.png

SHA256 355df090399b67b2cba24b1e366de09fadc75a7d27edc272af254f9445dc4ebd
MD5 ba93ff19de7a5875a2545d0dc95565b0
SHA1 24e03b4e3046b6e46d011b110da8476b9d209d6d
SHA512 7e2c5a153b8f1c461c72e71dd9a72defd215836145c079ded05e9a65221ca86f850c00916c7eef78daf1ae25ef531fdd228f6860bb7d3afc93bac6c5b577d8f4
SSDEEP 384:763ArvkGTinWHYXPsSjjkR5NLi+bASS+yMwt4bnmyI:u3z3nWqsSX85NeSWMMqmp
TLSH
T1E182D07AF62042C2C624F71962A780BE5C754C28DF5C7D6ABEF8C4179D7281403BDE49
MD5 SHA1 SHA512 SSDEEP TLSH

Images/Frame/logo.png

SHA256 60a6d6fb0c1844f49d2179c3cdea15c1c39ef5800eb0e8b63061cef3ca139d1d
MD5 bf7d174d2e9750f6ce12d0b96877173f
SHA1 0a4d62d931ad1c78216ddfc2689ce873b29e4dd9
SHA512 e9e598f4ca14eda18a83f986a4336f039941ec6fee0cd4ae94b7022362dd019b5cca8089947f9dce30a7f52573956d02e0d0988b09d5316f0c371c14a8fd43a4
SSDEEP 768:F35vlA41DAeIqivU7YCprDrV7xbNs2xMWPtBAzG:DMeIqipC1jbmIVaG
TLSH
T14EB2D07BE734D66FC988143D1C88C9A0D382279D42E525EDD3C5ADA38A9DF1B6E040E6
MD5 SHA1 SHA512 SSDEEP TLSH

Images/Frame/max.png

SHA256 8e2116768c6d16ace4119d58579287c51d203bd4085be3dfc049b9b55ac03db2
MD5 917af97fc8e48cefcf00f6b780f75d0b
SHA1 37e39b627067ea421212f2229afb849a120d80f7
SHA512 2cd862119a2c85680054caa68465017651dd1c2ed9dbe7611e468494aedb7449c08de7bf1bc8ba6659d4d026dd388f8811eb6d5722fd15bd838d0df00f7ebe4d
TLSH
T183D095C66E38175CC57922734743182CD97B0C490B5F354C950F89ED7CC7F440C92181
MD5 SHA1 SHA512 TLSH

Images/Frame/min.png

SHA256 28f2b5b3dd1644a5a15bbc8245bc7952437cce16cbb2f84e8a7ba1d5251525e7
MD5 6baf60a941ffefad7db90d7fc33b5b5d
SHA1 f142658e56b22f3a81aadfe40f025464eed69789
SHA512 5596175584359a2dd090b78a5930ae31e171288e446115056afc97b11deb73e311de3a6481ecb64840e275d7ee0aa3db0d21ec0530d461482a2d1d1eed6a899a
TLSH
T14DD0A7D10024196CD66646B312525615D8B35715179B5C090A5DD49E5DC2D2150D4243
MD5 SHA1 SHA512 TLSH

Images/Frame/register.png

SHA256 2df04e8b7fe6f23ad81851e775141d5084726f9bfdbc937e737235be287b5ef3
MD5 48953f8722084f523f079085394c7444
SHA1 a06889adaa9e19bc8ce60ee202afcdf6141e2e31
SHA512 1c81f13a075866ea8804848b454d6c6b14e2de93ed807f11f775c05604fdd1c5b3f1eb85b04f9401be1016915cd8cee5dfc0c56df9ce7563b0a239e87b64b3c4
SSDEEP 96:2kVWmPN/cBGkPqmp1PY4XaJno+ywFTGERjGsORGHKVdoPzN82NuSFN1iHt+4JmtN:2k/5an0KatvTv2RRdqzS2H1iNbJmtGOl
TLSH
T191027DC8BFBA6041F124542D6ED06835C522489B79D91E42F89ECE2E6F71643DC853DF
MD5 SHA1 SHA512 SSDEEP TLSH

Images/Frame/register_close.png

SHA256 c8055b34f5c501e1c1bc9f828047a0196c7e5333dff56c21b05a11a368f3c7a3
MD5 72dd0f7977a42b8ae9652d5f9a2de058
SHA1 b94d168b1f80a976ffb3b17777cc1f1e13b6a882
SHA512 2d6fe0777661f804a775ca220942ada7648b480607849bcb3b44d61c174a446342589e7b79793ee2e7b06b740476443b22eb469f3e568afc7190384995b9b820
TLSH
T102E02DC3393A6D3F802D01A38CE6C870ECC3076C00EB9C10A08F50286F0398BB084021
MD5 SHA1 SHA512 TLSH

Images/Frame/register_close_over.png

SHA256 85274d49dfca897aab82dcdbb9e10f6a20da9c3d812cfe2e3d576cea1d1d0eac
MD5 19ee32a4edd81bd609cbabbfa51cbf1a
SHA1 434a5f49ede99730947caa67330145298e1f252c
SHA512 309375603f7da95889641b12d78647d01c60e792f28ffa5702e243abfec5de50b36a24d44ab2f654e352ce74195f8b141e6d9399cc3d50f8b158a183a4b08b4c
TLSH
T105E0C0C51527643EC2254F05451B0819DA873759267F34A54849E8DFA9921EE62A84C1
MD5 SHA1 SHA512 TLSH

Images/Frame/register_over.png

SHA256 cdc5c923792435f56a65e5bd53ef01dedcb3556b125fa6f44756d2101a999b5e
MD5 62b87541c1bdc9424db4c315cc4ecd26
SHA1 8551f3d304093dea4edb4ac2e16fa0c32f9c86ea
SHA512 5b8a9785f04addeb353ecb65375bc323282479a4e0c67e809ff938facdc381a8e464d18ef670a8f1b020d33d3d63565affe271e8a425409d5ab1b9d2b4429fe8
SSDEEP 96:2kVWmPN/cBo48nYA1zorplckXwp6gGl2BspJOlwiXWiWlbsl8l0Uo15xGf38A7vC:2k/9XOlckK4TpJO5Wlbslnp1rA7vTm
TLSH
T17D124BC4BF2171C0F33D82A254E4919988672BEB3D800C1B358EDE740FB52929D997C7
MD5 SHA1 SHA512 SSDEEP TLSH

Images/Frame/renew.png

SHA256 fcc11791e3abfbe4b3e2e98b0b3f555a17b6d249295f2631474ecc880fe76b60
MD5 ffc89e0b584906f652fb5e9024b938e6
SHA1 47d91c2d1aec01ca4eab5daa65061e6bc1243a65
SHA512 4eed2f8570a0f89a4d34754943d417c2f6c1664b1e406ff1f530ae857969981effe75bba6cfb90c3b92a4aca0304f61e4682ee0510f81da5851354357c9be5a1
TLSH
T1FF413CE35FC6B6E82612A2785D87F060BC531C1644BCA6B4B06702D57735FD290F4321
MD5 SHA1 SHA512 TLSH

Images/Frame/renew_over.png

SHA256 2814afbc1a8a01a38fc5f3466ad4f4ff4f50f2b02dca668aabf5423e3a1952a4
MD5 4a8e1fcd2c0c5ccc7f5e874f887b7586
SHA1 111c69c17d722669ab12bc5a34413560a1b3c167
SHA512 0ff36eec1d86019ef5454f3cdd60afcadafeb99167af6056b0b29b18ec46b01a14f44adda8cdf2a2e75984acfc0fc18da5393652d901a228a33e96ef0a6b17f3
TLSH
T184516EF91A7E3EEDA839282B02C945C156D3123F731C06F15680056C1DADE899B703C1
MD5 SHA1 SHA512 TLSH

Images/Frame/restore.png

SHA256 1d0d72e71a49f3a0488f27721a93a94c618e89a6dcab29d32490b837970d27a5
MD5 094811b54c00fde816f94bb8082fbaf6
SHA1 5558fe132a7ea36915beb44731aa9be6fb1bcf01
SHA512 81e16fe3dbf40fc45602275e6d4496f112664fa0a491289da05ce15dd16d529f14eefe098b3fe36e3e6b6a9a80cc9f94cf5d97be528d745adc98fbfb4bdd0fe7
TLSH
T19CE0C0C61A101FAC89540FA768C700188C5B44C5062DB49C507F9C5DA9C274B4184041
MD5 SHA1 SHA512 TLSH

Images/Frame/tab_bg.png

SHA256 0d2bba386679ec88978ba477d889ec27178f878943b6865d5058a15243c8a212
MD5 cd1d0f6b87f41033caf2c6e710196ff3
SHA1 2196b0e987f69169231266d201b84130e06bca62
SHA512 fc49d99ac64c43ca05ad0395c274513b733f20186e65a392522dd9184f842b146515501a5a1b380f930380a498191e138e675c8a2d65b98b5912b0a75b2d2191
SSDEEP 96:1SDZ/I09Da01l+gmkyTt6Hk8nTtLPDm6D/5dzGlOVT5LpWN8:1SDS0tKg9E05TpDJT7zoqT5LpWm
TLSH
T1DE917E5AC534184F685E71A309CD5181F35A226DAA323674D2C516EE80D7D06BFAD4B3
MD5 SHA1 SHA512 SSDEEP TLSH

Images/Frame/tabactive_bg.png

SHA256 efb934192e15584225092bc860190709eddf4d78350820f0704d3543bb2bdf63
MD5 7bcb750b3819b1412772076d7ff0a19d
SHA1 9c67cd86229b9192c474b4443277baca877ff377
SHA512 7814b9977c35a0a616207360a05ccf6506c198d71bda8519b4389fbe9f275f4b9921bb8a1850a1feeb29766aad03d3ee41495e0e4f99f2e478500530f024aef3
SSDEEP 96:akVWmPN/cB7qV2+jh14n0rAVQWbYcHpFhVD5Sk:ak/nV+n0rAFYchVD5Sk
TLSH
T111C10AC16EA76041E03C817723F4E8AAD86700D7AE44CC88799FDA632F415D69DDA3CE
MD5 SHA1 SHA512 SSDEEP TLSH

Images/Frame/tabover_bg.png

SHA256 73d5f738f2e60f6a5180586377140b0549eed1443048cf8cc03607201a52bbb7
MD5 58d4ee1e14b6d1c68926751020ef0dbe
SHA1 af9d0116a363422f5d20daa9cc3c93c3998bfba9
SHA512 5dd4886dbbeeb844651a2ed60b9687686e5aca3fdd8c7b636d40e3e193b6542b6e69c12c4dca65afe7c921366172facf08ca393b20b5db96a67f1c8985936da4
SSDEEP 96:1SDZ/I09Da01l+gmkyTt6Hk8nT+p5EbE1nLfb+i/O9QCosY:1SDS0tKg9E05TWmImosY
TLSH
T1B8917EAE5F30745F6CAEB4021C9D5045932D32EC9573363858CA55EEB889E124ADB0A2
MD5 SHA1 SHA512 SSDEEP TLSH

Images/Frame/tfn_bg.png

SHA256 3e2e224c00cae6341a7ccb63ceb58696a11117ad9277d60110e134805583817b
MD5 85a23226c491ef39821d66bbb7e7fc8d
SHA1 aafff80f0d19c42feb38f6932e716641cbec31f0
SHA512 43ae315bd7ab584198160889009dcf5e82ba671db15b764bc92043460c4fd9ccd7b5a7d0d12a50827a84561c6449ae319878805ea5a75d6ef1c20c7d09ab0930
TLSH
T1A32163CCB6827481E479BB5178FA4837861A6BC0DFB0F465F8CA885394302F455A94C7
MD5 SHA1 SHA512 TLSH

Images/Frame/tfn_logo.png

SHA256 0d929077423acba9e5c7981c6e3bfb229a333554980fa656bb3cc51d8019f009
MD5 69ac5de306130bddb4cdd0d0ddf5c20c
SHA1 9a5d0ae35f68742fc42640452ba9c06a260fb360
SHA512 aa25d2211dec777c064eec690ec45120423792e2a23e9bc2e81cced797f5389d6e11908fc295306ed85ceee8a6dd70b6214a18f8d0f04fee3e65f57c52030aa8
TLSH
T1DE716CCAE649D88F1688642B0D6C4F64123627375C1E3C4A4259B79B525329F029DE70
MD5 SHA1 SHA512 TLSH

Images/Frame/title_bar.png

SHA256 26b8c52a90cfe8ee74712d230e18a7bebcb646cf6d1553f15587da664e5a6f7d
MD5 1e87116195255d62ee708060cf921249
SHA1 ccee72f142b25d38c83a13ede30dbd85da1eb958
SHA512 fd47f3f22ba9dca3ff5ac9c6948ab6ccf0a29d2a55373bde2d61a7138b75990fb6bf677222e551cf892e4b74f68860b7c0ad1de4519395d7db2aa96e4d856ee5
SSDEEP 1536:JPPrdE9RDQOryEZikesN14XTHzw8EkqWnwM3QANRNnt:hPrS9RsMXZiQ4X9EAd/RNt
TLSH
T1B96302A8A9C01705DC5B01F13EE49434D757A0FFE55C06927ADED0760B82A8DFD2B29B
MD5 SHA1 SHA512 SSDEEP TLSH

Images/Frame/top_logo.png

SHA256 10a63e3f4b39cf040194fbd315ac154ad072b7dd3656e94dc36deccb9c2f7126
MD5 48cfed7a3c045689ccde732446ac58ad
SHA1 b3ad478902b8fe377101e88f24f120463bbdf60a
SHA512 43d63459cfddd9c706e5655ace81d8f4ec9ac2d4f628edc133753db2628452aacd1a5769b83feda1cee2c14a105c4b2e2e987c5edcaa8df985ba707e68961884
SSDEEP 192:GQ5BWmwVb/DKZ7gRwsPb4WknUlx+8IFhiW8wI8hJJvUfkgR1n:GWBkb/DY7gRxEWsUlxa4wdhJJHgR1n
TLSH
T10712BF2DF492748E775E705E64FE0500FB875A84468FC314B24DD04B3EEE5F88B66289
MD5 SHA1 SHA512 SSDEEP TLSH

Images/Frame/upper_divider.png

SHA256 5792da16b87c4c81d9e502d7ebd972a3736c85630a87b8d66f5acd2678fb7e62
MD5 48f8e0a3cced600f36196ff58f89ebb7
SHA1 fd7be0e3038aaf5978f4723c8d929c6a2d93f111
SHA512 3b1592c91d1ef3e23536d015959e811522a2fd78f3ef97bcc0e0fd046deca0ceae671baac3b90772ac69fae825dc623d5bba91dafcc92c18ba0c90992183693b
TLSH
T1C071BCC1AEB22080F23C967526E09425DA3744D76E909C167D8ECE620F516D2DDCA3CB
MD5 SHA1 SHA512 TLSH

Images/Icons/cleaned.png

SHA256 fa2d1ec0c7e8362148d5d87ddd77eb364301b74d8113ae3b7d14fe16ce83b6e3
MD5 020b0342a825abdaee3665147d4b8e7c
SHA1 e4ff698880e4a0f6351c917667ca7882245ac58c
SHA512 0601c3eb12c6f5b7f4a5a8ecbda78fa16d74dc5f07a26f47a1534536cdbdb71776b7b1612aa3faff945f7fe2b2e93dc68bc1873e6c4812f50d16ca57b534f149
SSDEEP 192:ExczHAp7P2akmIHVMzWuG8/nSkHua3t3Q6vsx2PEuCNH5ol:ExcbG7PK1IGMHuad3QvWEuGSl
TLSH
T15302B086813F8056DCAACDF7A2CF81DE663FF61115C9AAC74917025A10F879C8235DC1
MD5 SHA1 SHA512 SSDEEP TLSH

Images/Icons/info.png

SHA256 a12f14c2a197be3fa0209f1f2ba5837448a454853db3a2c542c3256b61f57fd2
MD5 3d4b4fd42205b6d93912f692bb7f6d71
SHA1 33549a9008f628234c169a5407e50e907c130fd8
SHA512 de1f6c5111322832fe8cfe5d5b1c04f3147ca4e98af8cb41fdcafd438de27cf22d7013d1ab27b957554eb376f32e0f2f8ae40298889fc4cf4ee87ba4afe57335
SSDEEP 192:HIz0wM93wb1ZEkimvQSBfPy1DTX6qwdIg2J2LKCMG41gHgQ1OdkO:obMd+4SBKTqQg+2eCQ1w8r
TLSH
T128F19E1E5241F220E18D22D3C474CA559786732C16ABB7390AE3D9FCCED562AC1DAD35
MD5 SHA1 SHA512 SSDEEP TLSH

Images/Icons/warning.png

SHA256 c1478d9886e06a9b8417b306409c856b956c34ac7c1b679dd4a5e3db26aad811
MD5 c5104b9cbd826123f812ebaa86434279
SHA1 4736e27163f7356f7a76958e7bfc6f277f37cd34
SHA512 5edbc334f5729d5768afef4c9dacbf85d007bc9b6e093034684d6b16722b4bc4d9e240e76b7ef2b40f86b4925955efc308bc34eab8f246ade7452d0a4ec101d4
SSDEEP 96:MmumkQtI8VdkXPUUujz72wXF0W3ssf7hBpQOSBIlHs0mKWosXUKBE/XAxEuK2lKH:9Zk2PVC/dy+wqqnlGI5oosf5EuK2llRg
TLSH
T176B18D216F03812BC52A47679E07A18DDC9DF1821D2AC391A55CDAAEAEEE4D9C4D04AC
MD5 SHA1 SHA512 SSDEEP TLSH

Images/Scan/011.png

SHA256 1a045523ede9519032c5155dafd46fc5db7d7d5b3d5d6950436ec4210fa2e1d5
MD5 5a8b2d7c050552ad4819e8ec6f7f516d
SHA1 5adf549cf35563d5c5566cfdfad12bc46bfe027b
SHA512 3cf85f3c9dfa406e16b0e13a331e92bd62118f0fd7af1b144b342a5cc2513081480d4588cedded9e4f2be41125cc982651602c8288896e320a1a4d6b92a5051b
TLSH
T1F8410AC4C6A15274F7C3FA73F90443831D954B494118A1A6A05263A4FEEB3331EF2A53
MD5 SHA1 SHA512 TLSH

Images/Scan/012.png

SHA256 2f1333ad574fd5fcf4c7fb0a80fef6b7d632060e4019d5db24c22929f0688a02
MD5 a26a2c84c5f8571b59730673ae95f964
SHA1 72f7e84002bf5460a0bfc08e4444646889627f9d
SHA512 ebf29d0fe77b712e99f38276a4b0e947c6edf99cb250755465c5c47f3348c99ff6d44e29c04b35f5c2217d3f651300063449741407a7e33009584d4d02c45d5b
TLSH
T1D3413BC489EC5EFAE6AE6061B46013A7A0777C1A8E1541C3329EEEA03C3030674F8465
MD5 SHA1 SHA512 TLSH

Images/Scan/Fix.png

SHA256 2a4e1bf27f3013c1204d20d34ad15340f1f706592ab7f9ba82ac502f95f2f628
MD5 f99506f18c332415cf2e5ec8e01bcc00
SHA1 ad3a24d3ddf93ecc73fb1240fc7a3b07409aa94c
SHA512 b15d010e2c976cb7bcdb5faafe6c894722a8cfbb0dc2bc1ddfcbcdd912a4ca8237fff6ce8237e89e8f2a27eb64da9ea33f79ed2209ca7346aeaad4b5fc3c8e6b
SSDEEP 96:H2qJqoj/8HUnvHH2vP+nAwAOL85EC67P5nK3ATBU5dR:O+/PHHGlu3bpKwTBI
TLSH
T13DB18CA4F74108144A9CC1A878F2B875EF73A5D1E850999EBCDF0803BCAA63B4D940CF
MD5 SHA1 SHA512 SSDEEP TLSH

Images/Scan/Fix_over.png

SHA256 7b730ac8de3d3543cd8edaf492cb0c876e970fe6a1893ec2454e743726fcf90c
MD5 82bff38f389d9530a8e60a21da2cb83c
SHA1 445cf585fc939e230d5d949035812393cf0dd480
SHA512 c20a7bb29b1bcbec01cacb973fd78caac441b08a2496f1ffbb8aff3920934182daf59119ecfc4e82f718a8be7eeff911d81f9410f2e963f260e5cc34ad2b33a2
SSDEEP 96:H2IFEiyWQ8YxHKOFDW7vuiWuIoeYVBGL5vRtGsc4ROkkg+ofgLfBky/o3LwAvV1:piWEBqurBRtGsLkggjSy/o3LFV1
TLSH
T107C18D63FA22255CA0D8FE8590A2DC13DF137A6AB84161BAFC59DB15B09C07411AA08B
MD5 SHA1 SHA512 SSDEEP TLSH

Images/Scan/animation/01.png

SHA256 5c14a9015ce00729f5530a0fc0b91ad66092e4a9e629bac133753b8411b2da99
MD5 2417158ec77c4b2c7ecd31bac05a7ab2
SHA1 0dd30b3ff64f5e4b3e5f12e46b63bdfe4093a8b8
SHA512 15e6bb4fa161c787cec89db5f8fee6c8a0f6d47a262f5db8e3d92c92daf3ee4aa0cdb0dc6de717ecee7763f1bf3124389a009a34798de825798fcae0f916f6b7
TLSH
T1C821634AEC41349190BCD8D11CC6042AB82BAC41DD81ED6ABCE7F41707741FAC94A5DF
MD5 SHA1 SHA512 TLSH

Images/Scan/animation/02.png

SHA256 921ddea7f7219f4b2e1981c36978bf6f093e3ffa6e4737ff1b5033e4b2be67f3
MD5 8de77591737db22d8e9c3f5d37ceb34e
SHA1 5f6fc58c1b3898a2b22bace53b8ccd734d84038a
SHA512 3a7eca3daa61aa488e9236d2ac536a340ffa5b33e747aa9610f5e6957f10e5cf64937f725ade65c986f116727fdf790287b4d80c605566cde242d38a16cfad0a
TLSH
T17031B908EB50E461C398C95158DE9C23A53B8CC0B1D0E2A5E8C9FC2319B41FA27092CF
MD5 SHA1 SHA512 TLSH

Images/Scan/animation/03.png

SHA256 d1ac88fa21c6b2ad1f272031657b557cc8d17b490b5ad013eb7f75e6024bf6d8
MD5 93e3e7cda0aca6f117dbf6018702ba3a
SHA1 dbf926841a4e8f148cc857298e7621d461be39cd
SHA512 c5d539cd749d0174c743fa5804d521bd768a017c27ff6ed54e9bd1eb7ba72d3ca9e2eaa7917b97a64fcf1355f08fbcf2656c70c1b7a30954b16887a6aa13213b
TLSH
T11731C9C9E550B56046F8D44228D7441F9E074C84A870F4B2DC8EF91F1B301B70819ECB
MD5 SHA1 SHA512 TLSH

Images/Scan/animation/04.png

SHA256 3700b8885cf0b820bacd0c35aea251212e8bafb82e3c3e6a2bca1f5f90f4ad07
MD5 cc5635662a5bc25c5e4ba5f024148f6a
SHA1 12179df75435621c87f4dc44ce9f137f7a337bfe
SHA512 7f6f7a6f31fdee1659207538a57b04ee0de01cf5ecf91fd98e974e93e73b7332943b1542f462c159cbb0ed94f671a9649b7d16fe13f3c5066ba6c86146e92e7e
TLSH
T19B31B80DF1845D92005C9959B8FD5C27EE190E4095C0D9BFBCCBB44B59791F5444B3D3
MD5 SHA1 SHA512 TLSH

Images/Scan/animation/05.png

SHA256 565d0307dd9858994ab59610677da1f4e6a28f63d8bd036dcdfa85790637eee7
MD5 491cc5c962ac6cfc183c5a58206613a8
SHA1 ee76b63b3a3461f08d955ba8f0d8eb48cdd1a545
SHA512 d41a564d6587eefb191e6803634e0ba309556363a3788e6f07e42727a395759e841cb2869b9c8ff8469483f2808f44ef15f31b7c47f33ab221e214386413b9ab
TLSH
T10E3152A7F7483560426CEE5004D58843A56A5C80E5D0EC637DCEF5062AF61B3646D6DB
MD5 SHA1 SHA512 TLSH

Images/Scan/animation/06.png

SHA256 20cc6ffe3dc80b017da5a54d52051434b9a5195e5f75bab63522d4dba6497986
MD5 1f635eafa302446e9139b5f6b889eb7c
SHA1 a5ba41cbc6a5585d37ed03e51146f9dc00658b12
SHA512 0bbfef98e013ab6c79a86917af5fde0f5b487cf156c0a880fb93bdc360aaad99fe5504cd70045f997ea2a18ae6a2595d9f50051d4609803c1d58ae72f5b58416
TLSH
T1B231745AF7906AC09198D8594CF76867F8016C80E9E8D672A8CFF45508717F5900C5FF
MD5 SHA1 SHA512 TLSH

Images/Scan/animation/07.png

SHA256 795f1b371cf8559d0b3dabca2b74d3bf04d1887616cef4f6138a94885e91d36f
MD5 5dd5abea8828e2273ddf645be74164e6
SHA1 2d73d9c4327c4d1c2005b668cdc25fabc48365f3
SHA512 89bca1ed6607747e101ad699a8165ec46a83c6c9e20f2c9e3d05cbd9933cad7377a0a4b90008246e8297e7a1f45c3697c6da12e39594dd619c8f0a6b46daf541
TLSH
T12331545EB345A943169E578534CE4427FC9F4E40AD90A1B77CCAFC8B19782A184692D3
MD5 SHA1 SHA512 TLSH

Images/Scan/animation/08.png

SHA256 31e38b798890178f3e7670f0d0c30439b2c2ce930f1ceacdb7c16363873b6a1e
MD5 2bb6ec8d103306abab2fec5ff737ac18
SHA1 ed32922d212bdc1314478c9142a3fbe0ffd9e570
SHA512 da073ed582a1caaf77031bfa60cb3f7ac9f283ef29ead0ca2d964ba762847078da6c453f83705086b30199f9449220453fb6158f13838865d7c3c7ce008330ff
TLSH
T1B531944EF699A40012C4FDA118E40023DC2A5D81E1D4E9AA78CFF90F9E301B4C66D2EF
MD5 SHA1 SHA512 TLSH

Images/Scan/animation/09.png

SHA256 dc4fbc80a464c8dfee26ac74edd8beac2437c4f84c635805003ae1dd7bcc2310
MD5 d55f384ba5dead0017d479b51203a797
SHA1 cc7009ce49d0073c1eadfc24af43585589891c1c
SHA512 3332920926c6d294173004a3c227614b52f56c95057616b48e6fac5c2186345a8fda39083c6e7aa85e14b149c6d238ed0a0a0bd662f97602939159b26e1053fd
TLSH
T11431B60ABE84381190FCCD4654F5AC3A64274C80A5E0E0766CCFF85B9EF5279147A2F7
MD5 SHA1 SHA512 TLSH

Images/Scan/check.png

SHA256 ff815cd2bbdecffa207d40aa2222a80c938480b515efd44cb89e43c870bf90a8
MD5 3a4252c4666839cb6ecd059b49f232a2
SHA1 2d82c779b6ac9c827f416baff0ac9043f0066596
SHA512 bb0554fb077309e2f8bc7d3e5842115d092a84b60349fe31205785ca9e68a8f5abe63988f2c8589b32a37f4a80292352ba9a814add3450e43e4fc951a2e922d3
SSDEEP 96:im1B49A6wEoqyhcmRoKmZgPc0aY6irV64HJ4ZV:xukhcmVmWk0asB6gJ4ZV
TLSH
T18D918D9DF98FA64DA04E08165CD980F11572BB81C10AA5DB6B1FFF886DAC721F09CD40
MD5 SHA1 SHA512 SSDEEP TLSH

Images/Scan/damage1.png

SHA256 8ddd27a5aed43d5383e534d45ad4bcc912d86f0e2f2338dca77ece99b805d322
MD5 916be38b715e225f239021b0694ec228
SHA1 e7cc8736126704f15b99adf4f9d54547a30cdc06
SHA512 6ae540e838e0e4e40889350d1d63e44d18815bd2d3532b5dd8d343294746b8b7be18ae1f573ee617045c7850aa5b152125e9f3f4839b406dfc82653d8c74eefc
TLSH
T19621C289EE148FB2E3A0471A40A83275ACC2AB0576210EA09E8C50920EA6810B5E5E9E
MD5 SHA1 SHA512 TLSH

Images/Scan/damage2.png

SHA256 adb836af314b0599a081ff3ec14000d581d31865164069ca1c5b7c0c5efc04a0
MD5 26841bc4141c7ba4c911ffc783c38f7d
SHA1 3b3a4d259910485006dda1b781b55e0ade63a863
SHA512 f59456405f8331f7a19edc79ee871f9246d90a77dd314391484ebec6f09a4c9e5942978b983d0b878aa7b9b3410ededb2f2b48d6328f6af723ea90e12f0b9d82
TLSH
T19621CBC60BF0CF1A15419CC14644C541DCB9CADC8755C97874E6FA487478BD21DE4F76
MD5 SHA1 SHA512 TLSH

Images/Scan/damage3.png

SHA256 41bf1a3fa7c044e059e5f0f77208e6ae75f9afc621aaa136094925e84c62740d
MD5 c86d38142a4748cb87c5370cd0f2f02e
SHA1 74292147985509032f495d04123e755e3af37866
SHA512 75c78b9ca6bf44103aaefc6ecd480a60e3dd6d7ab1416a1377214fb7e5b2af4223ea42fab45cc3ba81739ce19faf92b741cbc955eb9b21f78a348f049b239b33
TLSH
T12E21D8D7B20B76D1C706153C64478451D59A06806532FC96B594949027EB2444DE052D
MD5 SHA1 SHA512 TLSH

Images/Scan/damage4.png

SHA256 e155767344d43826fe5fa0c828f8df1e9321262f662b36e22d1109410e00b79c
MD5 04471002fe82e49623f5fc4532c52952
SHA1 ac8f936e11079f9472bd1610f281f336f5edb57a
SHA512 bf1940ab3e1cf81d871d4a419ac3160c5bde7af26da4802c1e87e6600a42d70c71f7ebb2edac2fcb09cf9388eabbda72bcd6c0c23026199be537aeb163323445
TLSH
T1D221FBC397A5CCD04B1C36C107BA1434E86F0E6D5B20087D20D65477543C95C44295F8
MD5 SHA1 SHA512 TLSH

Images/Scan/damage5.png

SHA256 4455137c051480ba6cb35ce826f0ea57818652009baa9a2e6b38bb61bca8f0dd
MD5 65bf84ad8758cd8ebd93acc69feab6a5
SHA1 340a9b136ac83b0e6f1b0bd54587764248aca98e
SHA512 c719dec7920d55fcab4dbd98658f761cc2ed2f09171f23181bad0f44c53f3186d212bbb14e6f92640590d17c7dfacb4710713118e2d28dcf2d445fa6c20b5fb3
TLSH
T1C121F8CB545398E8E96982815D8C4AA07D55891A8D9CFF15C1ADE60571BEC420D843AD
MD5 SHA1 SHA512 TLSH

Images/Scan/damage6.png

SHA256 50dbd11347ff8619c12ca0c7e1abffb8d2fe24b275d926de42cc102a1110b4d7
MD5 8dbd5fd3da5fdd6748008dd3c6c4c2d6
SHA1 d115c6c950a6c10a772a0fb7057963ce35042d15
SHA512 e466d0f440cd5433315790e239041c7ffc10576abd95da1765a1dd0dc016bd567d39e11ebb7cbf25800aab02d2e895d8789fb94894ede1d5715e69f9853c3224
TLSH
T1B221D88755C7887A30133798099B180967734566AD7D9ACA3E4DC31C0EF6D86CA7236F
MD5 SHA1 SHA512 TLSH

Images/Scan/driver_animation/ani_1.png

SHA256 e9ba8639517c6e724e748f81e0ff8d3892e7078d286448e4244131d69b117989
MD5 7a94d88e198d5abd6e04c8efcbc7bf22
SHA1 c300bf6ca22e2d0016d798df1bcc46b608271c0b
SHA512 a718582eee0fcb6a44e8f6e5780b559321dcf74a2e2910095a79ec981286155016bb7c5dbc1d5b4ac8647db6b7c16c10e81df410cf5763850f2113e04917845c
SSDEEP 768:1354xQ4hIHv+aHUwPc5QlZXIKktVxVsYg+j6GSmzy4/wavM:mNKHvLuQlZYt96GSmHTE
TLSH
T1FFF2E09FA261D436B42F395E9DC62058DDC7666D0F9B33320D62336E4920F9A1EC34C2
MD5 SHA1 SHA512 SSDEEP TLSH

Images/Scan/driver_animation/ani_10.png

SHA256 3c236002b6ba18045b2edacbef27ddee4621789b6cebddebc16ce8ebacb338c8
MD5 16a29e828822bb4c6e4ce6bef1ee4a28
SHA1 a382ffd2504f2dc92af8f96ccc0e8b6d68557bf5
SHA512 0c3810f1e68cee59188445ccda3cfe385e471f1aad974cec4d3310e0da71e178f921ba5c56cfba2a5fd21b296ae9f041f0802cb37e1d99624c03f7be32519225
SSDEEP 768:c35fOmT8U7yU5DDtcn8kX2aZvAt9dByY9Q8DHq5MRH4DkUIvlApV4WNR4d:a8KyuDhImuv89dByY9DWs4jboqg
TLSH
T1841302B607B0C1D630E578F52D63A1AF35B997DD9F5E8B528CDA214022CCAC683F42E5
MD5 SHA1 SHA512 SSDEEP TLSH

Images/Scan/driver_animation/ani_11.png

SHA256 77a53c0802216a3880a591119ded286c60901a79e625a813a662038722fa9f89
MD5 8012e161d764c3646a3a192e5926c4ea
SHA1 743b137d191ec55822968ba5126241189bf459b0
SHA512 694811e84e049c65956bd4050d3f8cb44b476333c23145cfd4c9fde05211dfd9a544ac6f17d4bb2c8ace5fccae266b1f00c5816f65283317277b98017ecf6b57
SSDEEP 768:c358UWfh3MeMlcnSCQbqUzg0NyHwxhWLdMZj4/ChiEe5c6NFJe:dUuwlcSCKqf0QHcqqZ+7Ee5NA
TLSH
T19F03F1668C5C749F1C1D37A24A6ED7CCAB23021ECD1071E5889D8487D7CAE43E636965
MD5 SHA1 SHA512 SSDEEP TLSH

Images/Scan/driver_animation/ani_12.png

SHA256 916873ce6f666c8830388e93a87c92ef7de28d28271f3c2b1b380f736b8c3b30
MD5 c8c508fd20f6acf8e753fbee0eece7e4
SHA1 d6d80e0eb1664d848946b399a3eeb57627e3c3d0
SHA512 20133ac847a6ee82c440506f0bc84a69adc9b1575a8f4e89f7941700aba9eaeb034a902171f0548569913408cd177e2cea42bd05062a73dcdbf95f7e61d2a216
SSDEEP 768:c35W9ew6dzxpne+n8FIzFt7OYCgrHfpf3yJyKI+w1qzt0NdK7N:Ow6dzp3xt7Oqr5snIx1fKh
TLSH
T19813F1D91431596B6CDF2A800F9B8350138ED7BA3F0B848714FBA9E9D8E4FC7554E068
MD5 SHA1 SHA512 SSDEEP TLSH

Images/Scan/driver_animation/ani_13.png

SHA256 01e497d9c62742be3d55dbfe04b739d581c0d6817a0cbd1cec4d357f4a2ff0ba
MD5 492e929beef3b88f087ab62a0f783a39
SHA1 679ea540771c2c68909b4a4f88aa237b61af79d5
SHA512 40542e5405c594fcd509fa860267b63de6e914d79435827a77564db2dd9728e8e3760da4a109bd52f0e4775b5a88c8989aa428e32c1d3de463267231ab535ee7
SSDEEP 768:c35naFhthUgvDCmpiflrZVqD+FpmA58PrRb/vYi:/DL7OtB7K+/x01/vF
TLSH
T1B11301E84350A2EB78B67BF5069646BB67BD33FE090730534CFB795D590290246BC4C6
MD5 SHA1 SHA512 SSDEEP TLSH

Images/Scan/driver_animation/ani_14.png

SHA256 ad37c779f857b652ae3e1bda73ca824c57ff963e3c9fd27da867c27adbb52332
MD5 246b40d476e49b0cc52b70d524551375
SHA1 d5e0c6f001663b6d0c61b9bcf95705ecb299a5aa
SHA512 73e408191433f399d6965818882d68b56e498dbc8ff1a847211d1b8bb8db50b1ebcab0a36da06111d51c2effcd9b93451d78f05e4513d4f8b62bac4a76d549b0
SSDEEP 768:c35lZ+ugY/k7BluPfDKjHhLfChcd0Kmur5d1lp+Q5ZYklFpsPU:fNnBluXSBm2Fhf1asFR
TLSH
T10013F19F4363821B274E8C0AFDD11BD4A35B072DCB4D7AD5569B72B2280BC44792E33A
MD5 SHA1 SHA512 SSDEEP TLSH

Images/Scan/driver_animation/ani_15.png

SHA256 fd9218695f5d349d6dd508276485396404013b1b1c06cb608538d8cea85f7b16
MD5 05b09a961b0843e56db88a95c077e827
SHA1 d2a896c6a7792290c9b3d1b386e3173ff0a28010
SHA512 9fc29b4be5c2a8145eb1758671e37cef45f30a440ca24a86598d1e533b2ae2c63cd46bff564ba1e220bd9821aed52f6f184cb78cdb481fbef492f80746af174f
SSDEEP 768:c35p/VtmSfPsF0FDkCM4Zkjdnle5bZB8h6RjpQlcPyyRUnERX:OVtBPo0C9465nlUBrpCAyeosX
TLSH
T1FB13F1871EF4B9CE38CE418239391778C788183D0496C3E49CDD6F9A665ADC6ACF14D6
MD5 SHA1 SHA512 SSDEEP TLSH

Images/Scan/driver_animation/ani_16.png

SHA256 9442b29306f88aab1744ff006dc53af0f50cde31615d9e652cd4e120f48bcb64
MD5 9819b56c49145a1c6f90839b15715552
SHA1 823368033a560ec9542186a913e9588b75704bd3
SHA512 153fed77ac99557040a5119db09b14cb8f0de9ec3e93c4d4c83182bff5e40e3fe1786b5497c56fb2b38f2c895fbe4b7894b684302c582f303692cea45154ab3b
SSDEEP 768:c35h+29KJLPt0gztSocnDKXv9ynGDkKgzsLNOLZXL+cNLBu:z6IBcwvInGDkKcA4ScS
TLSH
T191130270DF0024603CA73D89CCCDA43D165476E1C7D8BBA406996DE9E006F6AEAFE496
MD5 SHA1 SHA512 SSDEEP TLSH

Images/Scan/driver_animation/ani_17.png

SHA256 18a870f241907d65b78620243b3f5636a633574ee20c0e8f785794d7fb3ad798
MD5 38f7e8e0c84459f18527d5965eda338c
SHA1 2283da3e2a2db79b790fd182c04b16c349ecf2b1
SHA512 5e766f6a9b9d7afabd22c7d35d822f3577fdef3b89b3a525fd8f9ffe68fb0d9a6eb7268410e9b38dea35eb58e02191acb4c8c876d80f709d1b61e7f7bc193a8b
SSDEEP 768:c35rxGL8+YvUoleLULI3sdy1BnxNdeaRGoC+OEMVF9wwKflCUxZp3Qee6+a:hY/lQ84xNMaQ73EMVF9JYlCUf2x6+a
TLSH
T1FC03F187984522AF8F7C035E2EA2E884187EB5340014625155EA9DEB1C6FF84BF24EF1
MD5 SHA1 SHA512 SSDEEP TLSH

Images/Scan/driver_animation/ani_18.png

SHA256 60b1c01a92b17dd99bda44c3834e494ccdb4b8d53a7dc96c269e938c05b91f7e
MD5 88fcdf08fb4adbf61d380feb63f2d4a8
SHA1 d4c7481ac1a5c64e0a643cc5dd1950f3b01db796
SHA512 315e83954770a382c750b9652fd13c259ed72ebf71fed88062dd2a09e7ae065eb7a87377f23dfcddf5b742175198370d6e2ee4d0dd901a4a3e0e1063781493ba
SSDEEP 768:c35iSvGYLUoLgJGJ0y3AYKpd5NumMDnA3XGBudV95rd/4SknfArBR30J:CFFLqUipdjFGA3WinrdbkoF+
TLSH
T13C1302DE2E51461FA36634B503E616F20524BFC81EAC9E6464D412FE64ABB035BF8923
MD5 SHA1 SHA512 SSDEEP TLSH

Images/Scan/driver_animation/ani_19.png

SHA256 0ff5e30a1770e91208503279353f188f7f11406092b599a704e889e0bd15a73d
MD5 d903e4d37caf6899c1f1306576400ce3
SHA1 d74eaf10d05230e429697cd915d5d29b09da3dec
SHA512 d3d9700f5d9510504cb19154ad9eeb147a7930639eb46bcff1ac9caccb8fce0a9aefde6627bd97fc37728ca53d8f8e97f47a6dd7260a9337efc8acac048d0dcc
SSDEEP 768:c35k5XQvl6uaSMN2y0ia0Gh+O5lztPuPSurbywqp6MCU6g9NSSCoiYIhDp:JKv8tSWa0Gh+O5lhGPS4bywe6MCU6wDW
TLSH
T18613F1D9A130B94308AE2C360CE53FD53D536CA4F4566A2CD0865AE0B19AF5D8A2617B
MD5 SHA1 SHA512 SSDEEP TLSH

Images/Scan/driver_animation/ani_2.png

SHA256 aaa66cf44ea0ef778b824ea408796d4f269f67a82e43776a0d214052ba852bcb
MD5 6a95518dbb1c2aef6bc42f72470f27ba
SHA1 d5707860ada8c990baef95195e8701391a8096ea
SHA512 46c2e1337947bf5c97b10aa935b0ad5409c238d3855677c96de258054f1f8d063696ef49f4b94b091a4247436a4b25682aaf224d765c829330d7b5e21116a873
SSDEEP 768:c35tFTo/JbcVZRGESS8FIdOk3QLf9+syVnlxG/mNuNvSTNgsmnwwP0+T:SuBKGAyIdOaYGe/mNuigsk10+T
TLSH
T1AB13029DCDC0794AC87B1A381DD9D5089602F5F7E5211D9B43CC226DF923D87932D653
MD5 SHA1 SHA512 SSDEEP TLSH

Images/Scan/driver_animation/ani_20.png

SHA256 e7539ef2755d555be648d893302a2cfc27558736925577c4bbcab1365311883f
MD5 559665a8685dbf30ebcd7e4fd517e729
SHA1 21b7c83ae50a4600deebd8b4b45d68472ece293c
SHA512 27a4628e1bba1fa16fdf8231661b9bb48d16464c17b0cee47ac3ded82905f2f3fbe9dcc163dd3ba035027511e18c7d17202fe6a57352161a21ed58c9d27e86fe
SSDEEP 768:135gyvLVOwzqvTpwBrwzNZORuW+syEV54LX/W/buK2U0siC5s4WFxuK:/vLVOwsCBG+CsyE76U0szSFT
TLSH
T19C03F1DF3D44B497AF8A7266F4DD2589890022F879033938D5FB19F21859353A2EF4A3
MD5 SHA1 SHA512 SSDEEP TLSH

Images/Scan/driver_animation/ani_21.png

SHA256 92edb531d1a5afbdf123f11fe58eb09ed4f23e0ad0fe906762f6b8cb79f767b8
MD5 58d12f800b0c74765cb8a83e3d7c5e8a
SHA1 6da3f2acda8e4b7efd3afe8f8599755af94c8ddb
SHA512 273ccf70babc9106aaefaa331a085730056b932f9e14f866b526af9c4f826da72d5bf363407fd89d4474f26ca559d7a97683471376c547b655562b712ab36ad2
SSDEEP 768:135X4b3yXjiRYbmfN57J+ZPsAEVLBmUISgywdZEYFjUXWXR:b47YiRYsf7JQPLE2Uh29pR
TLSH
T17F03E109AF4391475AF836005FAA6F4D21C329195E1F3D7FD9463DADD0B280E1F6598C
MD5 SHA1 SHA512 SSDEEP TLSH

Images/Scan/driver_animation/ani_22.png

SHA256 4cccc36af2355402f06fcad97362536888672df8bb68b1b7fa90eb3c06fc9b68
MD5 35e373a2276086d7d66d9e1e3937293e
SHA1 10b7e8e2c84d4669b27fa5cc4743a84a99a9a203
SHA512 171e05448eaffac70a09d8f49ef873d9ef2175ad98b180fafe7ab44826479073dd210543e43d855bf8289912ff80174f31a0fea7108a1454a67a7eb3077678dc
SSDEEP 768:c35O4F/J1KrNCVJg+aGoS4ni/lrg4rJQUxM86nY4PKhTIbOsoLuV:T4/1GUTaSf/lryRhY4PKhTIHV
TLSH
T10813026E5EE010DE34F834E5985FDAA9FD3693B95A2303E294C83249D0D2F1BD65C1B2
MD5 SHA1 SHA512 SSDEEP TLSH

Images/Scan/driver_animation/ani_3.png

SHA256 8c617ceb186160b85a4a98ad88a300ddbf4a0872bc5a65897abfe159e8d66e63
MD5 1a7672db2dc603d31fa5fa7585f721f8
SHA1 740e4047d5faaae11d360b752113e1210a244a19
SHA512 aabcee34544c92b08547baaaeb64560d7dab92ed34dcc7025fdb15a874c49a7f0504aa346b35639c8202ec943173d473bbee05c3ef8fd9a3e9d307ff0c6bedd1
SSDEEP 768:c35A7AgMbjRxS9sXvTNppSj/1z3RmCdhPCpFzS5t/mwN23Zhavigpt2hs:J7AhmmXvbq3/KpFCBQ3ZKi48O
TLSH
T14E13F2F55CF417077D3A2D128C2623D6506A62EBE06E3708608E6DED48E2FEC335D2A5
MD5 SHA1 SHA512 SSDEEP TLSH

Images/Scan/driver_animation/ani_4.png

SHA256 65172d3b9a10db598b67b7e5a24d93c881f4d3a22505dd1cbe8ccfd5f154e9b1
MD5 e8d8605528eb7aa38b5a3bd4a29ce1ec
SHA1 ea0090feaeef7a07c3c86a1df097b9a2db1f0ccf
SHA512 763c54883e82954136b45b8ee8f3356c8b0832306b8ff01abeda0e508d01c4eefd03568f879bfb9ded4454658f7478715ca13ce7b474b7865910c76a096052b4
SSDEEP 768:c357Qlq+p2G7I/NRfPAm5UuarbWQkVTXSa+6hWL0EXVBo0CPim2Js6sZIhGsKwa:VqzG7ezf15UuarbWJTXnYhBor6m2GF2U
TLSH
T117130278C4D7A9CF52E5756EF2C41D47529A04C8CEAD2BE84BD45CC08487DC3EBBA160
MD5 SHA1 SHA512 SSDEEP TLSH

Images/Scan/driver_animation/ani_5.png

SHA256 25f7f03a6e40ba661a4fc6631bfa82438f5dae3255633adceedd3fac6dbde7a3
MD5 e9d385e8f4eb59de870ef8b93daa7c4d
SHA1 ea5773b05c5783aed8d947c4eb20497e9682c4bf
SHA512 aac8f2112ac6c5e251120ab3d996152633ddff58f6ba8447a0608a642e8c27e191571aa3c1bdc4d2821e74433894b1b7644151ac893c9cef224d7c57e8cf85c9
SSDEEP 768:c35osqIUNLXk6vuh76F4S/kxXfmFb+/r9GlG/thIVV7YfpufcRo:iqIqrk6W56FAebI92G/XITgkfko
TLSH
T1E813E1E7DFD0456A703E3C300EC0962112F5C6ECDC4AB7A95980EDDCACEA5491BF9865
MD5 SHA1 SHA512 SSDEEP TLSH

Images/Scan/driver_animation/ani_6.png

SHA256 68d14c44b2eb1cbdd3f1b1e867ab4ec381439f10ac8f71a24e995dcfc1424c02
MD5 65c24a152ea825045dd089ed3637865d
SHA1 9e5a6dfd1da16d730961d1d9962216e53fd8f767
SHA512 959df03209c7a2db7254b7590d3cfe66f639a2af049181f398c2dfaaee8cd7f863433af0b7e09b7ca47e71034f76b3fd004aaf42c22ced83855d6f1b652fb9dc
SSDEEP 768:c35NFwN9wzDYOQOioLxbrgIMmchW0wCpVmSqh48I/DsCpUBp3hZ7fxUtg:1N9aA7oBcIMRd7pghCgCpUBzVatg
TLSH
T19413F15A7D8894FF3BBE76F20C8CA2596334A3C89E2DE774CA5683C05987D2D0E45A44
MD5 SHA1 SHA512 SSDEEP TLSH

Images/Scan/driver_animation/ani_7.png

SHA256 4e6f16ca4b63cc3b22156911f10e909228124995af829f5d6cc09b744f6816ee
MD5 cd62f8dc767befcfd0028e4ecdc38443
SHA1 5a858bcda55d07837b1c20d998e6b7528d9aab2d
SHA512 e2cbe19ac057c75ce429b7e53097b537410bc837c466d14165ea03d3b1d8fd92c1c28ff6fab17b5d663d85f796c4b9a2f8a9da06e614d376ba20491eed0d38ac
SSDEEP 768:c35aBrI96tBjSk7yMLeJXQbqG/1TZS08sMH4ZjGsLRSI1/Aek0:JI9Gj37rwQr/q0MHSGGRSI1/Aex
TLSH
T18203E1A403FCB4897CBF34AE16DF1CDB517882A8C51EF5F0A36D69A036416065E74D18
MD5 SHA1 SHA512 SSDEEP TLSH

Images/Scan/driver_animation/ani_8.png

SHA256 54441d521b265e13aa464ba3793d9096f829287d34571996ec010fe516237ed4
MD5 68eb6d199167d6900df7547fd57ee8d6
SHA1 48b1746b60fed967398a87c3297a53d0078efef0
SHA512 b8706aa4fb4e8a15b0597dc28bdbe7ef884b3ffea93386255a7a1bc08e069bd02b7ec13a6b90b648fc40385104a04ce894edcf39d5cbc85cc1a30b1383496acf
SSDEEP 768:135KX/SNbas+4buh6BPvs//KA95R9b2uvHB9OwuamCQtF+jppoEFNTEYrnVQXKx:W/SNWs+4rPICA95R9vO1L+j81InVQXm
TLSH
T17F03F118B6F4867C6C48336009CD9EE1A64662CD9D2B471159D82876BFACE2B4F17EF0
MD5 SHA1 SHA512 SSDEEP TLSH

Images/Scan/driver_animation/ani_9.png

SHA256 78a1e5edda71f31fa7fab66736d1bfb6dcccb4075709c9c359b27205ee147d5e
MD5 456eaf6267e951779bb37115a0734ec0
SHA1 4689abd2c8bc25d79996eaa499a49802d23943da
SHA512 e7e22e72e4473f27e830af8d3baebdfa2aedd11b882dca002fbb3295b1e91976970b31182417ed50bea9cde9ee0bd8fcb69fdf6217d97edb72d72166eb5ab899
SSDEEP 768:135D70Lgbde11Dr4R59cgXsyHxcp2I2y9OmMjgTXzUT:nwpzDIogcMcYfQVDzUT
TLSH
T199030175363809FFC1B5354499F4A1EC3204E39563CB3A28DAB641F14233D8FA7AB589
MD5 SHA1 SHA512 SSDEEP TLSH

Images/Scan/error.png

SHA256 75c46d8cf7c44bc046953e0997f913e3f8b438481f957578e76467d5812411e9
MD5 0d21f0b989b0b2c14bf0b738122f907b
SHA1 fc63f454e22604f0cf919c18d345de0b7b7e5fc7
SHA512 691c0b6bd2a353163abdf4eff24e45acd4bcdc068dd1f519ffce753a2a2a76082a3d887b6a2a7e98b53ba3033d100112915ddfe2ceed7e11c370185e22dfde94
SSDEEP 96:6FjFX640v4/9WAlG8CfY06Ybd/FcsSqJAJqbUsYv4iTk:6FhXqvI/6TjyJFvXTk
TLSH
T150917EF6313241ED404781860686A4F40F951FA9354326C49EB3B7024777EFD8B39B32
MD5 SHA1 SHA512 SSDEEP TLSH

Images/Scan/error_large.png

SHA256 2c1f34679930dca6c7ac4b706ab2b93de0990f17d84227ab757b9a3b8e7608cf
MD5 f5bc4840f47de36a0dde8ac48e60f56c
SHA1 e2a630dc239efbf4b897fa1e48de8e944c1ef432
SHA512 01552a59b54d07ec5d579fa497cc4e4959fec20f11d47abeaa55afe86eb548f03b63f7b6766023d8c4c021a7274138b539408088cf1c9ec283ab3b6a97e97288
SSDEEP 192:6SgTfKQgV+hupYfGWuXIi57ryoWsDnURYk1LO9jhesxXwd:1SbupYfGR3vBZDUL1LOdnxXs
TLSH
T105E19DCF892DACD89D4F79A6E6F25F77C24580674460A7CBC76C8465823A245B908880
MD5 SHA1 SHA512 SSDEEP TLSH

Images/Scan/junk.png

SHA256 13f30279b8fe9ea820e480b6410338395851b13ef6b50e8f87572f5706a48ca5
MD5 535e1652e9915604a0462aac28c4b430
SHA1 aa3eaa8c0a9b9fef628a7d28bd579e4e30429456
SHA512 9d3b50a73c0d8bab432a3eb9b50dd3375f7ce50bd1bd7b871b2358e2087bf8a079767a106eca2559ed9aa33a6edea99b8fdd7a4d356046738053efaa76a74631
TLSH
T1FA511A4FB7C014A092B9C9AA28E0607BBDB61E54E891B0A7B8C4DA290CA16F537240D3
MD5 SHA1 SHA512 TLSH

Images/Scan/malware.png

SHA256 90964837e0d0425d36ae70ae4a669c50e7abde5c0d5ed1acf2f992aaded6fc91
MD5 0bc2e9303efefbcfcad841299e551346
SHA1 a0e35072c8b7be6856b722a30d79893a7a6b7c0f
SHA512 34c229a3199435f57c42e3d092fc39ad9deb6042d673eef859afd308fd12ea54f6342d8fad02c5cce1ffafc5998f70aae031eacc6aa2ab51b0a88630dd0946cb
TLSH
T12A616D09F344FDC29448D9906EF2B452BF0A0DC45388F995F4D9802766A97A3CC4FB9E
MD5 SHA1 SHA512 TLSH

Images/Scan/md5.png

SHA256 624def5998cfc165f4479f20d12d028920d7968fb70c54bc74e5dab50ca6c5c1
MD5 7ae2b30028ce16bfb78f6128a8b9fbeb
SHA1 209507cab7b13ccfdc00f158b95118984eb5f6e3
SHA512 4a154348de82823c3ea5b5f64311d9db5f824fef8c2672557175e8a0c5ea86925465e8da2f3eeba4716d066b064e5902e71754479769516c304243162c2729f2
TLSH
T16A512C47974004D2A198E7653DEB801AE4275B828981F46A9EC7F49F0DF40FB89C57DB
MD5 SHA1 SHA512 TLSH

Images/Scan/privacy.png

SHA256 e127350c2e3e4d0379b445be37990ac59ff10800b9fbef5d388f770fec8e3eb2
MD5 6d0cc5bf13ae5382698ca2ebf28d04b6
SHA1 2b4d41560ee83164c5d61f34fc5cee1decf55b00
SHA512 4484fe82bfc07bfc98a6570f66d1b53344fd1571620194e1584354272972906e3f38defaf8973e39307c3560eb54699090da921cd89d021a5c1f2666dea03d90
TLSH
T1F0512B41A5953C45649DDA3E30EA607A87674C59DDD8F45C33DE8C05447C0B24A8F5EB
MD5 SHA1 SHA512 TLSH

Images/Scan/process-animation.gif

SHA256 fc54c1d463c8cc19ed40a18b51b5b889d490157be0b7aaf2d726b02c3ba280cf
MD5 a77ba96f7beaf07b0060de819ea6eabd
SHA1 c222a1a86bd985529bb52ea30f5dc9c6b6390da5
SHA512 0dc4413d05c305e1cfb35688218159634a586f9a154192ef6693cb8e079d2932b36234d5ef9969b4727d3988a79ef2f1cf2df0066d313c0aa8574bb10597ce76
SSDEEP 96:y4yn20G3K02pVxudyjWwAuOH7Q0zybSzwpoBaR7sNhXd+ZQzMemO:y4iK5vdyjF7O80smaJyMY
TLSH
T100B1188DB3000642CCFA2333C6964FA904353739B72635CD667CB268A22FACE5E4300B
MD5 SHA1 SHA512 SSDEEP TLSH

Images/Scan/rating_h.png

SHA256 bf622a1cda7f21343644d47782d47a4b31191d381d4b98abc2763fdf635799d9
MD5 57180c952c922623898e1fc59e613d85
SHA1 ecc9ff785ac075f5b6710cb433f5ae5ff0261b69
SHA512 1608a00f19c31b70bd8a116c89ad62584935239c39633f8246aa375bb6bcb1d13d54e7273893039e2dd567424cab3915b4b4522ee16f7c730aa8c4b62dd0c46e
SSDEEP 384:8vDjc9kPygwDo/DYKTZwBVCSTYmIp2h+/H3/+4H1LVfDBub:8rjKfc/FTZoCSTYm82h6jV4b
TLSH
T15FA2E19A8388E443D41F36DF68579A8782339C042352EBA0E5FC2CF613109BE51F55AE
MD5 SHA1 SHA512 SSDEEP TLSH

Images/Scan/rating_h_scan.png

SHA256 5f7d9140e46c1d04ba95c1ea958d3fc42c3aae36800bc6348e949e9de191984b
MD5 5cfed31bbd5b83463092d22d9d5375ab
SHA1 79127f4281db4a20f6529ba1c099243d62abce2e
SHA512 ae00939528b558959949b17cf50aa163f404b4c3ad886a3f186997df1638e15270c3437b8780925e623fc3b3c5c7458eaf384a2b6c09d5c2791ac68d0dd15af1
SSDEEP 384:1XQ10UzFnaiBtXFtTLAPE6t0UiJXpyq27lUiupczvoJBRv+hpOcT:1Xg9tVtTLAPE6t05JXpymzczqzW7
TLSH
T12CA2E1E7CD20BAE1C93BA99460CDA1660C8ABE2861FD5BF43540CD17B7457B68203EC7
MD5 SHA1 SHA512 SSDEEP TLSH

Images/Scan/rating_l.png

SHA256 2219a39d39de161581f2fe0b1ae560bb033e9589a8f1c48407d1cab038cd8ddb
MD5 aeb25b2e51f7b437e29ab03b30b51093
SHA1 2afc408a96d7ffb485f7cc6c895df0ba4da1464b
SHA512 bf8479f1ff2c727a31391b0b3385edbcb22a56deac7b99bfca36870b0ada3f55cb97e55468a9f940acfc11c6fb99cc37a8ce3a123dcbdb8b0ad5c49764398473
SSDEEP 384:l1OLrkAhlTqhNfZsLX7qJl4OIjdsVh8AlJ5qFR85/bKKPpLqPHy:lgLrDehc7ol4q02jeGzlh+y
TLSH
T1A2A2E13DE702D0E7F528413B3D878B768D5D514479B8FDB6198B24A7CB2E2B04E1A5C2
MD5 SHA1 SHA512 SSDEEP TLSH

Images/Scan/rating_l_scan.png

SHA256 6bf55d5aa06103ee4d12c93cf565e789312a3aba5f5caee21744d42212d428de
MD5 e63a305ecd364178b08e6a6c623e8659
SHA1 56bb52f6768039cdd71223eb96b179e79ae56f77
SHA512 1000536a750c14eac14bfa533c35757751118fd2c57e54f135dffe2c81c316657bde7b8aced87a8205e5ba265bcfa86129237af0353d44ecc3021c8e498efdb4
SSDEEP 384:Tv/N4lIVzxIywlZlbrZYa8LVBtDz+QZV4nRwXj/maQueS3u42HeuG:T94lIVzxMZl3A5Py4+nRUTRr0eB
TLSH
T19FA2D03D98079520A5EA1AAE340FE5F8C93A0E901A59FAE5B5C7DD0901F1EF460889C7
MD5 SHA1 SHA512 SSDEEP TLSH

Images/Scan/rating_m.png

SHA256 63cb2f17eb6819fd4db91c76d831a077604818c59cd2db5899b3c11001deeb66
MD5 310ae634677a6ceda206ac655e979a48
SHA1 09444a33ad20f480f4c05ec87df7b4d8fca56078
SHA512 7ac90b01cce8663b68b631973f17673ddeda8afc93adb632146fa8acc5959d64414b39d1d2254d7141d0d69f214215b17e183b52be9f052e16190e6ecd2ffa98
SSDEEP 384:+/pIj7QnkSZNpQF1TbLl1Ngyt6T9z6+Mn9iJ0hu12JIjeEpxYKAwph8hihoA8f1:+/e/fSZvQF1T3hB6htYcJ8rmyEX+w3qR
TLSH
T1F1A2D128B040E36053613345745B219BBF8388BCBDA355D975E3E06C40779A7ED92DE7
MD5 SHA1 SHA512 SSDEEP TLSH

Images/Scan/rating_m_scan.png

SHA256 081c69076c0b319d516423c8b5eb34049195a4f0148b6950d75a92503c32abb0
MD5 9b2f1c0e7ee93ba9c0d61644f519105b
SHA1 103e7cb180c1cadd1f2fce36a212a8ed36dd6d88
SHA512 9079b624c4caa895bcee35fa7410b95a18e1478ded7bb9bcaa64bb69261ed27990f3843ccdbe980ade8a5a8c90f71b21036874eda1cee6e84053518238be08df
SSDEEP 384:buZjhGZFuJzoJizQtz/ZArw09ABV4bN5A943niUhdYUN/9tJZ6HNzGe+s:ytuFuloYsz/uMgABEbAUiUh5N/9teSI
TLSH
T153A2E15A5AA5B9D23AB1E8664183626DDA3487DC8096810D745CD33F2C2F6BF0237CD7
MD5 SHA1 SHA512 SSDEEP TLSH

Images/Scan/rating_mh.png

SHA256 376ea421d0a723b8addbc1831874b449641242ecc2897fdaf1a4b40deca368d7
MD5 3547f6a52d17829811a3ec906061a729
SHA1 b6846689afe12026334b6510b9fa747e172d212e
SHA512 df3ba9f840cf4b694e59dce8c3fe05f4348d3fde33198dfa6908c619f1ec6836c5ddc45610872ce333e98cb63f752c0f58bcfa010ad7f33148c8dc7fb6bb73e6
SSDEEP 384:3xzGOotFpnMoQgbGzDTg6VoRl6GAnCGJPFnrIWU7WyjIdlIkDgmh9wBbRQsB8iZ:KqgbSDTdV06GANnkWU7lIdlZcG9wBbFN
TLSH
T1C4A2D0129186F587261CC4E12DE4CA3B5337D102E37855779FE62977F62A1F8C4622D3
MD5 SHA1 SHA512 SSDEEP TLSH

Images/Scan/rating_mh_scan.png

SHA256 8b771459e507a08968015a2b0c94641f682f4b5b82ddc1d6f31ec82b265dc4b5
MD5 073454e61d4cc72677f8821698d1df82
SHA1 e41370c79e4552d022ff4d878cf44b67abe970b9
SHA512 b8be3536fa4a241bcca3e8ac3ca72fed25cef129c9bb5cc6643a28d8d2b16e4ace90e22f301197db817d35e5f9897a8b0ce9bf4506f88f74ae49d5b3440c30dd
SSDEEP 384:HR+k7qpQ/m9W6/MNqfRpjSbOOUCalXWMJn/dPDz6MC5eV8rbUto2p1BCXEkdDZXq:HA46Qu9Wp0ffTOAXWqlPDMeV8klYUkva
TLSH
T1FBB2E15F76A52B840E269F5F08C9323B85034EB3A37824F2421EA8F293595760D07DE5
MD5 SHA1 SHA512 SSDEEP TLSH

Images/Scan/rating_ml.png

SHA256 9d260fc5580dd603933c09ae82de278ee303ebbdbf92b2fd41baee9c78378b32
MD5 9f80f2d7d38b60f09c6221939920db56
SHA1 d97ad5f045167fa8bb7a588894e0ad8a838b85e5
SHA512 e906b763687f04d8f9cdb9941cbf2632d386a7e1718a0b329b991e45699f5e413c097bfe7a7cc7dc0b63ed3d3db648311ee9c4226899a72495a2e2aa161d15bb
SSDEEP 384:2kRbpOFL9sBE+aDiAlM3CotF1GScUvZ6x9xZh9BjhIWj4vf:2epObsBE1DP2zdcjVZnpW8G
TLSH
T128A2C0D4DC115A218F7FC94D782D68A360EF1A3C7B58CAC57EEE410421390A698EF7E6
MD5 SHA1 SHA512 SSDEEP TLSH

Images/Scan/rating_ml_scan.png

SHA256 fd54f9fc904f7007ada901c7a0ef9d57951799c1d6754f14e5aa4cdaf44691f1
MD5 5cb6ea73c6352f665883f917a61037e4
SHA1 ddc826afeb024622c3bd63357b6fd4766ce28159
SHA512 88775db7208f69178b42a91db78ddf09debd26efd95b736f2644509895273573e67f96fa4d1b360cd29bef5e7c3aa23a961979a383588e471ddc371d258c061d
SSDEEP 384:EV1p3gjqLPd1Fsw19TxKJmp1jP3JtOr40UlCVrw01jfBvITfrcZgihksCoO479YP:63Wqp1FF7VyujxAL9rRj5SrcZZkQa7Eg
TLSH
T121B2E11DB4056683633B621CAEFF9C5B8E4B7AE3EFED0E9160C848515604A39040DFEA
MD5 SHA1 SHA512 SSDEEP TLSH

Images/Scan/registry.png

SHA256 f324f4449940fcad7e8ed005843cedd7521e1231ee6fd49f8aa50e5e3a879608
MD5 0ff22f4ad50b8fee1a480ac26b5498ab
SHA1 c7b019391f61d6a084c5fcacabd4c550ae486e9e
SHA512 6f2bbd6f99bca99d1514d0bf8c944992e7872182b0400cd64dd497346ff8245d86a47c71288f4c5b9a6c2f00579fe2ad51ad1b92e9dceebb7ee7a4c0fd84e98a
TLSH
T1D4412CC7F781E444C518D60924D3814B2B338CCE85D0D3AD6CDED4874EAA432544DEDB
MD5 SHA1 SHA512 TLSH

Images/Scan/warning.png

SHA256 2cb79e7d6b051f7a20110b70314a575fc43eebdac6178e04ae28a10a9b8b9b6f
MD5 7f7380e5753b1b8401a048078270ee46
SHA1 6df3abf6b97ce323037334b6878b65b88fd50d00
SHA512 5f5246a115cacc484ecaaebde2eb245cc353c7965343a3e30d53df5f403235e047a5a5df9ef1bf01718947735ce77426fec7fd540c5de45b9272e563a7f8f265
TLSH
T1A9716DED59C01A85AEC24DE5C57022A73B65297A9BD317D76A4F804B3979F0E4030DC5
MD5 SHA1 SHA512 TLSH

Images/Tabs/drivers.png

SHA256 0f7ef23b2d0bf8d9bca159e1b00d328812e0066ffa1631c83910cf399e35ed24
MD5 c923e323376b00fd32d87a51f7ff418a
SHA1 473880f038ebc31ff63321193e798f653f8e9a6a
SHA512 7ae80849dcf9be5eccf8466d49e6ebea405c7c95f511b6db7dc702d4fb748a0b7ade7d1e7ee3e9f94bb9261704216bdd0091a615fe16d3a829795e95877d2efa
TLSH
T1FF41D5CFBD503A845278D45632F24477982361A9D4E0BA93ECC2C14A86305E6A19EECF
MD5 SHA1 SHA512 TLSH

Images/Tabs/overview.png

SHA256 51ebfc637bdee28e5f899dd31b4c90a50ccdc242161e459be0be057220a306b2
MD5 a580a505cd9770fc870ca28cde7a9991
SHA1 c94915161a807c684bf2cd85b8f30f6becf5a8b8
SHA512 b37bb970fe1722556f302831aef3878e65d78c207b574540e4bd3f2c03e13f0486a55fc9cd5b8b076a66eaafeac67ebaf15082477aaf9e86eaf45f7924d088b4
TLSH
T1E411B3C327005D36DC1EB0080CA62184E3B11F3828A7C814F9F8048B056BA8560EC0A9
MD5 SHA1 SHA512 TLSH

Images/Tabs/restore.png

SHA256 e6462175c44dd1d1b4548f481be25068e29f2096991473a18b980a1d0cbd15a9
MD5 818ea6550600bc7f0dbdc7cb8d877eb5
SHA1 4e2845db69083a5205daa63c82baf815c992f274
SHA512 0ce8876f869988221d6af5db2ceba765eb671c6dfc898d7ef9abb3a28401d6a1d0eb2b5267b6ca91e733ade9a0623fbf77d0e277bb9c97c38cbff067c70d89ea
TLSH
T116310BB1987DC4383A0E3423E60C84F08E166950D3D5F71038AA0498A43A66AA15C3DD
MD5 SHA1 SHA512 TLSH

Images/Tabs/scan.png

SHA256 45273caa7810e040f8733042eba54bf007aed57d4cab228b42eec95a0cda9ec8
MD5 bf6fb3912af93b65ea93fbdd61e480f7
SHA1 1ad4ffc32b44c60eb03a043ec71dd58dcdcee66b
SHA512 b27abadca882f9aa8fce9d4bb68fda9a8727689ba1d9a2a6cb9c0d62649cdc07792054b9fe0da942617245536bf80e4999e43f814e2740ec2873d373eb898b38
TLSH
T18721DBEEF9D07839C8F076F1441D06CE44D7176F6C1EDB7E2450A144D22965723D454C
MD5 SHA1 SHA512 TLSH

Images/Tabs/settings.png

SHA256 1670396981abea6b8bfd8ebb88bcffaafecc8ec21fe25845fd904ec7495c788b
MD5 4e80b6722c6adf7a5c1d45e6a09ce6e3
SHA1 b59bdd4140dca1e36ab1b22a459878603416befd
SHA512 17e36555038fd1bd3ceeb674dcfc7e6558027bfeafb4e31436865a1da21de7894bc76e4c47b782eb3f11b52a76d1624ecf624569951de9e40c5382784d210309
TLSH
T16B21A77775CA08AFD4A17EE1200938A17CB385BB4A965A03946DDBDC53DA9C80169920
MD5 SHA1 SHA512 TLSH

Images/Tabs/tools.png

SHA256 93c337c4e5a7d7d151863c3e7a3d20de64012e6b0e701aae59d7356e24833a36
MD5 4ff4d4ff28b24a3a8169e36d42d3bce2
SHA1 c2c953210113cacf4b5ba8a59bd814dc417b0d70
SHA512 2e0eb1a233832f0fd0bc6dfd5cea74a64658fabce1ba406841e46fb786b519ab0cdfc20c3c201a635eb6af319895e2b212faa0fbe71bb6646d65a40afefca19f
TLSH
T1BC310A9A055445568C4023D1688ADAC9890F6E66A28A094EB1C6888A2A514A18F4CD56
MD5 SHA1 SHA512 TLSH

Images/buttons/btn.png

SHA256 41b4662daec8ea4ac5dee21be072d3bd3c478b850c7c1c314d70fbbe9704e194
MD5 f8283b8bde25f5a2496981f3ce4f7a89
SHA1 1b0cf6a749717d161ce1dd97dde12293775cdd01
SHA512 c7df5e18a9fc6bf511026788ad305eee5e037f1df2f263f8d18bba4f45e758bd16bcd1e82ebbbe57655d5b25da9a0d78323a4314ea6674d61df616ba2c9e578f
TLSH
T15E612BADE6044CEBA7E20DAC0532BA11C0E19666DD1D0C64B063175F33A1E95EF85733
MD5 SHA1 SHA512 TLSH

Images/buttons/btn_over.png

SHA256 7258a677c189cf0a82b6df95e9defe487e6d8f3f71517a2fb0b097d6f795deff
MD5 d99e6a47645ec919fa2fb5849539169b
SHA1 73d5f1518eab0c1e1c9d88bf01b8d3ad7b1bf065
SHA512 afa0e0c69aaa09582df32d3bcb6490f20f3d56e22bded7519c712c2e12a1706b9e14458384308b7e1a220574eabc5d577d83dfe7da3cb2016ff961c3b8a8ff0d
SSDEEP 96:H2RarC6N4h0qc3bKuWaGfbZCwRPElUkDJ5Xt7f5lKvUQ+vS7h+o3Kb1OnbZr:kJCPKuW9b4wRslnJ5Xt7f5l1o3Kgbl
TLSH
T19BB17D455E226A82700B94C1259D5833AEFB91DFEAC69BA84DED8D8708513E850DCACC
MD5 SHA1 SHA512 SSDEEP TLSH

Images/buttons/button_bho.png

SHA256 2dd1f4cceac5c162211bc37092b47f386f10e874f67863127b791d25f49712a2
MD5 16acdcc330af8a02582c4911f0e0a050
SHA1 6843fc1fa6957613d50414674c130603832c60cc
SHA512 0adf4b8e386891d1486d6a60fb7fbfec243708c5b0e68183cf89b0f7760cfbf0f75a627ffb604ffa58967663bcf62b890fe4e4776feaeebe130416831c0e46e0
SSDEEP 96:2O/8Gj2719QbpZDPLlPpdleF2KYQPinmu91K4VQl6yBCb1fUHJw8Di+mnizCGugW:2IubQb3fsPdqwyRJfdVUu1NFxWOWUl
TLSH
T111E1AFD85308EDF04045D8BB6040C7961D792B32249BDFB68C47B9665E750D3FC1B2D6
MD5 SHA1 SHA512 SSDEEP TLSH

Images/buttons/button_defrag.png

SHA256 f3f271594942da904a32412b06bfb9ff0f448c8c288dc39e330e61efa9156359
MD5 01175cc6808df9e9051bef8a4cd43a0b
SHA1 18c42d7ee40fdc277ac4f900300da8aadb1300ef
SHA512 df075564089d44d236cdeea51e416a3752bbe2202efa3886e5f0becb870e112941f796ef9a4ecde1670fc709904dc06d8fc13916e4322913d9703620d1a2e58c
SSDEEP 192:rEXFwnaPd0eeAYPUj6y4PMiZ4rWff9MMQSoa:rJnaP3r8U1Cxw+aKoa
TLSH
T1D7F18DB833FBAA24971EAD61B54B9E258A411B0A0233EB7C044097F7AB1A70FCF12545
MD5 SHA1 SHA512 SSDEEP TLSH

Images/buttons/button_file.png

SHA256 b888fc3cae35d2df6328ecbb1ba5c94295566eb18116f1e7760730e665372176
MD5 698ace635dbaf9d8f1c871eab6cb67bf
SHA1 e7462aac51bc9c2007eb79f340fd627b1b8d79db
SHA512 7f9f00ae60a097139cf93fad92f7dd1461fd601c9c3d6413357e6003df63c60933ea002badf76407fb0a931a23abc55da406d68fe8c38b1da556a392fc9ef7cd
SSDEEP 96:87SPMmhH+7FFZIOZAlmb13TqzyEToM6qad6y+XyyYeMgPntn4Jm1wUiL5/k:WS06H+7FFRZ0a3emkpad6RXrYYl1w558
TLSH
T198C18EED8316D4244F7E366E5C3397B12902C315B4F261EF9866ED55E1D8508513EE1C
MD5 SHA1 SHA512 SSDEEP TLSH

Images/buttons/button_generalsettings.png

SHA256 03735e1a0c00c062bb393f8a28180ba0188d7491c8fad773d7a83c29c805846b
MD5 d31246e57ab88b8d0e5e04c212dfb956
SHA1 b5779d7e36fae005bdcfe7a75d415ade66edd865
SHA512 5a448f6532d5694ea2d81cfd7666534d33ecea1715fc2a41e81fb715387c5471b596e61dc88ad48bc614b1d5f043737fe82ba872cba44a502b3d6e6545c72dbb
SSDEEP 192:UbNERjKBKrGGTwgfZ11nsTuTPQOCbAICT0VfSLNV0S9sxBshEGHBXo2D:UbGpAGkgfpsTuT1CZC45S9s7srdD
TLSH
T14912ADCCB377E0A4914DFF90DD23D9A0A53BBC95D818631D7A2A1856F025A10807EFB2
MD5 SHA1 SHA512 SSDEEP TLSH

Images/buttons/button_ignore.png

SHA256 b1cf0f28bdb4bc9c53cb89474ecfbaf6148f091221e22c7b340b43e985ec19a1
MD5 9bb311f3b40ac13d44d1a7016ff7a8b4
SHA1 9b3c176cba8a7d4c88b07fdd3c163b1bac27549a
SHA512 862bfa099c350b69a4b53ce521b79cfa5abe97e07b87c720fca3f310988b109a2201599626851a9f11a2ec31611c18339102ff67c974c1b340fb0897de46f6fe
SSDEEP 96:U2ukULVCS/P4LCgFEiI+a6A+qk5RrnJ7mkQRNn5l1cGxXAHrihTyq64tkyKh6qDp:UdYS/P42QEiFPDLJ79al1cbLihTXtbKZ
TLSH
T199A17DD850720B99A588698660E5FE0EE2672BCB7E4F231C31C641DB9FC47680C9DF22
MD5 SHA1 SHA512 SSDEEP TLSH

Images/buttons/button_junk.png

SHA256 e3685aead4b68e271c13e948b70d010639dff200e8b6ca88de0c46e7080305b5
MD5 e8f4540fe2b9cb3e4e5bb95785ded5cd
SHA1 b75bcd7a47074177875e8323323a8194cef184d4
SHA512 2b9a978ed5d0d7da4d26c94998bd71f2609098d54aaec4f66ce4a7c8f14c672dee69c93f177f486e245700da51d7038d957189b2d9c5f4a9c52d8b90d5bec393
SSDEEP 96:U1TbI+F7Rgjf6FBNojC+g+xNr7sl0N5Houro+HaXTWHqFh3oiqwqVpfD9A:U5F7e0BNojDRxNr42N5V6XT0IztCq
TLSH
T169D1AE32DD4893CC2DBBBB417CE56C1FBA505A911387E262A33C478C3A66B3D9CC6509
MD5 SHA1 SHA512 SSDEEP TLSH

Images/buttons/button_privacy.png

SHA256 159762e736366e872fa4a7aab27512ae49f215d249fd8b8d4bac64a0701ef2dc
MD5 dc8121911d4a852dd58f3efa49bb2aef
SHA1 e99f3f21d54622e7c3833def2a1c563668cca929
SHA512 468674e880d8c90328164e4af07abc5f1ef46357edabcdc43fad845bcd35daf2b3f871b6cbd0fe4b4127f626547eb1d7f44fdb2f4831b52d549f10dba2be4bb3
SSDEEP 192:UCEAQ+/HVur0QjZa1cWn/Xyh0JDyLEJvHIsWt:UCE1+/H4XVa1cWPyh0oLEJPNWt
TLSH
T1CCD1AFDAFB806733D8300F621AE1869168E2B7CE12C35DAC199EDE053E25DD0E4C6B05
MD5 SHA1 SHA512 SSDEEP TLSH

Images/buttons/button_process.png

SHA256 ec2c208322c835841d6a67d123fca943bb7c4cb089cc13eab68bb9e780a8951c
MD5 46537fd1fc737cff917d8317137f35b8
SHA1 9291d180528868a1473df39709e9302742a1ea3f
SHA512 2c9bb2ed3cc047b615a62b285adb6d91d46065d680d1aab06308e497478d4411a7917b341ea8a63edb85657e2a532fd8093dcda1ab9fa5516adefbd0e5e333f5
SSDEEP 192:WSIiiPyvr0XWgiGLzthdDKW0W+9f1sICNsnE+zKE:5ITMHgFLzthdDL+9fbCNt+zb
TLSH
T1D4D1BFA264BCC01B06A43DB24F2EEF845D1D2B50723F0022BE2A454C0A77D8CDAC7A92
MD5 SHA1 SHA512 SSDEEP TLSH

Images/buttons/button_registry.png

SHA256 531f0b7e6b28344ec8ce3067228e17b04ca6cb8c967943f13acc8cf8cf7beecb
MD5 699c2dbc6581326b93f8438799b5fd79
SHA1 b05e07078a42c1c4a6ce145b550e05e5c3cef12b
SHA512 3818d998def08113bb7ec21263d30548e9ff66d1c8b3c528a51f92bdab80abb145e901c68c877d7458ca4f2b8ad56643b6c75107af311b8270444be61ddaca92
SSDEEP 96:UWln9w/prnERBgIDQup0f+X5z476WoDqSw4/lAQFemhbzEvU1nisKk1oeRQlGMF:UWln6/pTEJFo+x47cqJClRNzmkNATF
TLSH
T1C7D18D62C2CEC235622743E1B689766D67E93F822B5FA24434DE63E6D2F70436521807
MD5 SHA1 SHA512 SSDEEP TLSH

Images/buttons/button_schedule.png

SHA256 11a21c942d64e04d4a167b29a0995dfccc37f3f7fbf30aaaa26bde4d7789ad9c
MD5 be05fd8daeecea43b8a61717009f6470
SHA1 9c7fa8db801f152a7b1435809681a6b58a7c4703
SHA512 a487c71896c6edeba63b9bd346e066a4d95af32a3e598388b0d550af5dcec4ab0b25913d4380cf17b892793721a0fe4a0fd0a7a0138cc19c6dd6b887d809e0d8
SSDEEP 192:U2W85cX/9IRkH9S0lf8wsSU9hU8er+/KtVNFNQ:UkSKRe9X84U9hURtjFS
TLSH
T1B5D19FD40D30AD5C5404A5E631F92C8BD8AAC32B89374A24B96E4C8E7DDFE483AA4851
MD5 SHA1 SHA512 SSDEEP TLSH

Images/buttons/button_startup.png

SHA256 9e632f58ba3cfcd2f2777fd3af9359dfe5e4ef1fd69a5dd66f9ee9528c2bb9ca
MD5 1d10fb6b01d49a6bebeab25619926bc3
SHA1 a69bd75c0d7b3b767f8be792da4db92c4d988050
SHA512 0177c8dfae286cc28543cec1c3f69a23179e607172fc1063e880b22916fd83c0a41b4d8ae2a2a6e6d4a289ae3c59a0c0d73dcf9f5e52f599ebff12c09b2bc630
SSDEEP 192:WShKYDseDK/yXlzetCJZedC5tRtOL2D39hHENGQ9:5hK+seDK/woqZedYtR0L839hHDa
TLSH
T1A9F1AEF11BBBD4CC51558E14CD16D0FEE18C29C82C68AE1C7FCF2B01B401AD4AA1DA5D
MD5 SHA1 SHA512 SSDEEP TLSH

Images/buttons/offeraction.png

SHA256 86b73e26fb163fb73cf2d6abe15eb6e7f49138b54e334bafa60c9a01472725a1
MD5 8d35cff44312d6053f40fc8a4b9928f5
SHA1 59ca69696a0ff8d9625b433e7adc696f66df134f
SHA512 f071592dde2957caa0440010f863db90da53cd377f23d07cbb9e6b69aff5093f69e4f3ce2608002ba8f76f0cf3bcffdf22685131e2770eeb34afca4041c58834
SSDEEP 96:3SoS5kEWRKxNX/+999794zsc57vSgbrSSDlNzdCWM8Kyd:3SP5kt4ejJaSgKys8X
TLSH
T19072B724BDF175A8950E9A372DD52186CC3347C3DA40AC48BBCD8D2D6F11B9E8C5F986
MD5 SHA1 SHA512 SSDEEP TLSH

Images/buttons/offeraction_over.png

SHA256 90c7460153f0d4a1a058e94eee30a0c6b98784d4459b70fc9fe77f8509d9763c
MD5 4b99e2b28ada576b295d8c0744130109
SHA1 d359543c56e3b12ab7fff0be816e0a0d8f9ce725
SHA512 02cc2e85717b4dc0e633f1319232ccd3021886f7748688b8afb28591841afc6c548124190078a3eab824f5ac4f59f8eea83894e219cd0a7d69d2df9f5243fe41
SSDEEP 96:3SoS5kEWR6xNXqj1WUWy0jtsc572TPqvSFwcTxXMD2aP9q93wC:3SP5ktoYRWUWy0kTIAhmv8gC
TLSH
T13082DA35B9F176A4A45A93362DC51046CE774A83CB80AC44BACD4E3A5F02B9D8C4F5CA
MD5 SHA1 SHA512 SSDEEP TLSH

Images/buttons/register.png

SHA256 6a3ebe8bee95398d3c4fa1145b630fbd7b9856a665be86727d49499e2a7759a9
MD5 a20b83f099d1172c6f6badd1ff7f7e09
SHA1 defb62b4bd2121c7f0b36070ee2a4427d035a2ca
SHA512 f75d07a539577f718ca9a7e55f916f525e9e5d5a337a7369a793f06a1421d3d2eb5deda3655bfa174a3588a4bf362e3b241b66780d841a60da04bb92bd89b6cb
SSDEEP 384:PJXE05J7HsvC+n8uD0U6UE8pCBrIZjUNh:N35J7HcZn8uhC8FwNh
TLSH
T15852CFD6D961CCCAE610D8225A8B71414B591B6D3A27F31D82DC5FCFB1ABA42AE87034
MD5 SHA1 SHA512 SSDEEP TLSH

Images/buttons/register_over.png

SHA256 af2ccdf196e4c7a86f9596f987dc88ea02f0c2df3713ffc8ca1840454ab9d006
MD5 31d0a39e6008565e9b07adf304c20947
SHA1 dbc4bd4098cc2531fc23ff24de7ffae9d9f8feac
SHA512 cb2b613da92390730e597b34e25dea255e0f0b75d067772983dc3a0489f18ff5504bc7d1bb6f798a673619402df1a714dd6558fbad98d547a137d50c589c8fdd
SSDEEP 192:ISDS0tKg9E05TlMghjxhBbb+Caqx3B91Kev73xx4454BEPOitJlBv10YVISKYCB0:PJXE05Jb9nxx/Kelx484YrdF5uSKYY0
TLSH
T1C052C0B2F11078D134F8A9A1650D55C0CB816FA4CE315B99584AF2EFA012CE2338EE59
MD5 SHA1 SHA512 SSDEEP TLSH

Images/buttons/register_over_small.png

SHA256 b1157bd35b67411e98de7c4c90bca139884018179990849839e0ffb09d78299c
MD5 93b303233587b387508def2d5a9e0d72
SHA1 7d090bf8976beb630286833fd443b5cf7961cf88
SHA512 35d97d7107f62852de19c747c6210eb9db7dc41fcd1773d8ca458e6b1374bda2874b43b733f67dfc63e2e4db6cfc93d038c4434a0186f2fd9b62fbf60749f014
SSDEEP 96:stkVWmPN/cB3Lft5Bdfu+PyrDQMssDFZFDFhrpqa0TVWp:stk/GFp/PadswF/D7rzU4p
TLSH
T1F4D14C89AFB56280E13C5A2703E0E834961362E36EC5AD053E4DCD262FF1552F8D53DA
MD5 SHA1 SHA512 SSDEEP TLSH

Images/buttons/register_small.png

SHA256 75d765a0956253f809bb6ed1b7cc770b16d1b2412985ee31aa6b5ddfc8e822b8
MD5 df938b293ac4f494cdb20c568c46088b
SHA1 012a09c5e37f3502278be1a82094d2c0a6172372
SHA512 da08306d6a20ae3fe9faff3e65c24dfa0aaec56df861fddc1fd779edda7068b686eaacb7581285c38b3fe71e3b2b3a73591e85ee13b7b1c817b5d93dfda57702
SSDEEP 96:stkVWmPN/cBgXXlEWA3WdbOI9IrUIgMPS:stk/LX7dqLrUAPS
TLSH
T11FC1E7C0AEE22080F13D5AF466E4947AD573188BBDA0EC4678CFC9610F41982ADD97C6
MD5 SHA1 SHA512 SSDEEP TLSH

Images/buttons/renew.png

SHA256 fd164babde51f3246aa9c00279f5e6bc451f304c4ebf035b6082e31ce6c6e616
MD5 51cb7d0fc75a26dae2e4714ec2c4a69d
SHA1 a4ba5de7185922e8234619864455006d8808d9b5
SHA512 fb33a377f06f08547e99d6123cc1469762fb8777175cfd95a77373740a5aae750a850ee2d346740761e6df3191b455cf1e6fbdcc3f0b6ea7746a5aea4e3a038a
SSDEEP 192:ZMQU06MDtr3ti5dp1wRXFq8mCRdprGGhN7ltCgkUH/OWh79RguxY:ZMm6eJ0rpUJR7yGFtEUHWWhxTY
TLSH
T15522CFAE6312F534FF024A28F2C199C36270B744393D4B41D436819B939BF7586E2B17
MD5 SHA1 SHA512 SSDEEP TLSH

Images/buttons/renew_over.png

SHA256 db769b56c012b741db81fdbf132155bbbfdde5dd2131a0ea64d20dfb38aa335a
MD5 75d62241196c8f1fcc61389278b452d1
SHA1 4885aa5c9fb0dd14994498b080a970dc9936b3cd
SHA512 6af02d0c1fe95db2dfa98d8ecd3ddfed3881f0eb79865ff8dce320026e8c23efa7a9f5099f75cbdbf5f7c54fcf01e19c2f8bc49412a845c9a7ced75c2d8a6ee3
SSDEEP 192:pq17eGhkVsCwajAe+ZiW1hvefaZMm/hPWCyUwGt9pD+/q5nkIH4FZlJDKK5EM:pq1SlVsCwaEe+Zi6GfcM4hOjWtAqxkIM
TLSH
T1E522BF89A1CE18D93FFAE4FD431207233DC5CB58C53A048B1E28112A1FA9F6D56E89B5
MD5 SHA1 SHA512 SSDEEP TLSH

Images/buttons/settings_button.png

SHA256 d7d1b83579487071f6d4d5106ad481e74e24f0d5a7b7f00531a2d9fe23c7ee6f
MD5 e230c273575ad1b5e3ce6bf6b045c399
SHA1 63f87bdad7a30474b45ea24749fd467939bc5cb9
SHA512 f51b369096181d2008f5946cc829435e244aaa0a660e42089c35f5a2b811cd5877b116c33b0862e0f8193afd03de1090c96d219d3f472577cf7d74151ee36c34
SSDEEP 192:imFlmLVBKQ6FZvT4KzUvY4V/HkHdDK2K/8QbcSaa6xmtz+:/jmpBK/3b4k4NH8xybeBwx+
TLSH
T1D312AF91853B9EEC5A40296EECCE29E116F105143F9C3C35B98E8D38D8E8F81BF91258
MD5 SHA1 SHA512 SSDEEP TLSH

Images/buttons/settings_button_over.png

SHA256 452402d41262089cf1c79f8c5eab2176ad56b6616e87be7688d3dbef4cbf586c
MD5 d5b88141528604e67a71e5b8b9375060
SHA1 fa42d538847ebea63df369c6f67b60d083e0c3eb
SHA512 8b49d5b19afa47cd83d058f388380ccdcccfa636bc4cb76f054922143e317b94d4c9268478c9dc5ac771d918f2adc8390d187ad8a398de84bc4aebeeb6f59d4e
SSDEEP 192:OUkaaq8UcJvbBghEBjtJhcf4/JVOc8evbpnd2bkvdzwt75C/ureP:9Rhuh/JVOc8SFd2bmEFreP
TLSH
T1EE32BFE866D04CC306C3ADD544963927A2B304D99F81DB9EF899EC317C3648518EABF1
MD5 SHA1 SHA512 SSDEEP TLSH

Images/buttons/start.png

SHA256 00e81108d73791fb9ac9a529176126af8f2f6a9b27a6db15f5aaa8c213db332d
MD5 6efb74de8d6e986ad59fbd29b32d5908
SHA1 0aef1e2fb031d48ab6da78670d4ba2470e82cd89
SHA512 43142487e48d528c0cafe786c439f2d8c2d0a1d51c9765ed6989c1fd103c353ffebe057fcb0c3f0720df2b6ca3c28dbf4ccbdc4d682cc03e76fbf2bfdd8ed0e4
SSDEEP 192:RDvpeQV2dHV17yWsjplKBRN/9gzDR5FxmpB+3q0gNfUk/:xBIdHf2WsXKP19ud52pk5gNv
TLSH
T1E1128DC836D02B56C4D6E62908B19427CDE49DACD6290EB22CCCE831553EE6BF725C5D
MD5 SHA1 SHA512 SSDEEP TLSH

Images/buttons/start_over.png

SHA256 30a2d9b1dc241f345eb1882439ccfc544f67272f4cbcf05ff45654211163bd11
MD5 4ba2cc08db43a7c2880ce93e061edafb
SHA1 85b73159dcdfaea3968c4bba043ab8c15cbd2bc3
SHA512 83cd489ee8ce855f20c74f5af1a9fd9828000c2687eb81656d932ab32e42aca55eaedd0b5c177d919bfa6b4562a1416e850416f5cea06c51457a844a19c82ea5
SSDEEP 192:kJ9uWjU5pBL4koa6Gc7fMOSur32MnNrwHSQhOtBKG9tPBF4YWrgJos6AQjjezHE4:kcsa6pM7u7FnNry5hBiHNCs6tjebEWr
TLSH
T1B422B08E215D4932F99D47336AC3E413058B3EECD149D4EC2697E8A1BB16AD153C07A8
MD5 SHA1 SHA512 SSDEEP TLSH

Images/defrag/c_empty.png

SHA256 46f88071ac6f8e4f393d98e7df3a5c8da9e7f719c575d138cba0d8d24e81d453
MD5 e8980d65e9d366003068dd87d341851b
SHA1 b3364ad63d24c419b07a27a4a060a549042e258d
SHA512 b60965777e2d5e89fba1f0f398d034b552363730bf83807639ffdc04e796feb265ee487d1ba53941435a12250fdfb0bd745edeeff41fc483bdc2aa414371dfa8
TLSH
T122517CAFC9B0A48FB8DDB8520DCD4102D76C32BC8917363CA0C16ADE1065E076B664B5
MD5 SHA1 SHA512 TLSH

Images/defrag/c_frag.png

SHA256 0c954fffd04285fbba777a79a15a75042ad2f7cfdda6cebcee3fd3a3b157773c
MD5 1f5faae47a4244d890041b45ef7920f5
SHA1 0dababb3d1c189e707998477c2a278fb8fbb0912
SHA512 c4f2424e405a228229e48676bba901f43a690b543b27f8cc27578d738d6d88c654da02f34a3d6868f7216d57ef439118540c509e66d24718180152bd090e5cb3
TLSH
T109517DAECA60A08E78DE78020DCD4202E768727C9A573638E4D155CE04D5D4B7F660B2
MD5 SHA1 SHA512 TLSH

Images/defrag/c_unfrag.png

SHA256 06a7a6751796f25013224deb7fd5a8d6d21dfa2500c3ccb22569bfb61193bf4b
MD5 398d2f6c3a4542e873aad4b70f9682ab
SHA1 d39c4a6df0442f48ebac91699c76d13ecd0879bb
SHA512 6082061e0f4ae25795b9346005fbcd2c40ebd0df5a9da77a0ceb6a7f96d9001d9a79dd8ce731d73e92ef731ca942b5fbb6fdae44b479590127731a452acf1e21
TLSH
T1D2516D9FDDB0A09EB8CE78410DDD4201D76A727C8A973738A4C155DE0091E0B7B550B6
MD5 SHA1 SHA512 TLSH

Images/defrag/c_unknown.png

SHA256 8a8be8e921b8484ecb31124a4bed7f55a6c324faed3b93779887e2789cb29806
MD5 ce606b5e60404098f8095d3192b63506
SHA1 8610a468dc07a8ace7b5b7afe16748a315f844fd
SHA512 609b371dd9af29f52ca4c744346287f65476a0655b3d2a546cfda95db0d83b1b8a7e834809e6ccc69a3579db04f73b243f54dd085a8bf4dbbcbf09d33d2ad15c
TLSH
T13F517D9F8AB0608FBDDE78110DCE0242E76D327C8A573238E4D155DE2099E077FA60B5
MD5 SHA1 SHA512 TLSH

Images/defrag/c_unmove.png

SHA256 79efc6fa35dfc12ba226f76db9d67101eca611bdb462f31cf59a13a93c8d08e1
MD5 a9af9e1d71e77ee8224de0173787ca41
SHA1 de4c3d28bc12b246d4a8606024445085515c4444
SHA512 2978160513d94f1293b63dd3ecc5d77eb6c099eff76ec7536adc29577e9e45b5ce994cb12b8ed20603b53998e799185ceedd4c12c17c8759bbd8baf3511025fc
TLSH
T129515AAE99A0648EBCED78410CCD8202E729226C96573634E0D056DE0491D077F260B6
MD5 SHA1 SHA512 TLSH

Images/general/collapse.png

SHA256 41960610ef60579f723e847d0f90d1820470560c4e2509193ca0d6e4d202c42d
MD5 bd9ef97482f0a3a928c1b76867968a3b
SHA1 e58ad93ec6671d1093d849fde849baedb6ed5808
SHA512 539e0c672e65a42ac295af5f83eb655fb0e0befc2ca5b2731e54460e1c6c6df2b548d37b156b64a1deecacbc122c4144c99bce5b325a408891253d055eb9d248
TLSH
T1D5717CEF9D70A19F799C79110ACEC242E33C722D9A973638D0C058DF1480D0B2BD50B1
MD5 SHA1 SHA512 TLSH

Images/general/delete.png

SHA256 54b2e15a090d4171ad336522c34d4750bcee33434ac181ed4cff69436274788a
MD5 ec0c8c890f6c2eca9a5308fee92c0d11
SHA1 ef8b8ae588ec546ffc16f6def970a0cd96908747
SHA512 e34835f29561e54ced1d08005c0e566372f3b6d837db60897c676297b4badd9ecce917a2db6184ab15bd9b007f499b1cd4665a7799694946bda102ac9bf261b8
TLSH
T182719E7F5930209E7C5D79220C9E1601DB17223C999B3B3C94D0A5CD50D5C87DB62079
MD5 SHA1 SHA512 TLSH

Images/general/driverbg.png

SHA256 9b8ce0be21e201c8b426c433a5e4751ed91d995414cda535d3fdb0ca00d68496
MD5 e1a724d769bdaf9e9fcef518ba3c5170
SHA1 9ec7bc2ae3084a4176685a083b82c68a03b45251
SHA512 a47f837d87dca3067b1cffac67d5393908f044a627c8d3d14f34105ba3c08b712248f633313fe0327af5091b518dc13b4bdfe97673a7d42fbc38afc464d9875b
SSDEEP 96:edY2kbJst48WFt6PjiA0u6cjCDxnbhdarJHvpH6rZkzMvG0W7GQN:edYm48G6PjF0pUGnbhErJHvN6rZkzMvG
TLSH
T10A913C39E8CCFD01D7A2D4BCF1D75170A972C29283D984B1FA8BD742D4171A87365D86
MD5 SHA1 SHA512 SSDEEP TLSH

Images/general/expand.png

SHA256 a4e886ab34a00e2474b6e205f50532e0cdb25833f50ed2f9f8ddd205922e0c98
MD5 a140dbf3a6284a6cf458e82091d40f83
SHA1 20cd6e13cdade359048a479c5cad8252651af75b
SHA512 d802f21157dcc37d881b0ebc9c74feb670720eccb99523ba15c1b884a857351e354e3e58a0dda9bd5bbb2388dc3d5b0ea2afdad449fcdefe6c07b5f929127572
TLSH
T1B4618B5F9CA0D05E6CDFB0420DCD0682A76523BCE8833738B4E0AADE8064D433B57574
MD5 SHA1 SHA512 TLSH

Images/general/progress_glow.png

SHA256 5892ced75bc087d6b7e556db223b4a8f1d16ec3c67f1ff83f86b62d59480f943
MD5 39d1fa149d014ae2ce9bcb3d85ed25bb
SHA1 0d73ef1c9815e81c92f16d20dea4b9be058d3768
SHA512 2e298613cd92a2c633093bc54ac3d28d7ad1c91010a0ce38551d1f05237debd090cb283429fad3e663a652bc2e150ebee22efd5169f26a0c739e7a30bf197dae
TLSH
T156818E6F8FA0A06FFEADBA6109CE1249DB3C363C4923363845D25DCC20A9D57A781065
MD5 SHA1 SHA512 TLSH

Images/group/bho.png

SHA256 2be847503b951697de489bb821903fcc57e8bb12d4685ed062b66305bff4ed57
MD5 5a25272a54ffdc64102d2e8856f9f1e7
SHA1 b6caaa9c4703ca256d771fcd70c0c4d61b31196d
SHA512 f743b8ccf30fafae44abf157d6eaff2ba243e5546e358784107d2071406ca478ae4f3f4d286514b891cbe9937b0c4f8ab44b16d37a570d43ad9b75280c847ffe
SSDEEP 96:27SDZ/I09Da01l+gmkyTt6Hk8nT7eVvQDllFvrT2q3K2ExU75aHJGJ3:oSDS0tKg9E05TTDllVt9Ic5n9
TLSH
T106B19E9E897495CD384A7A510EDA135BAA67226CD21A31789FD438DD10A0EA737870E1
MD5 SHA1 SHA512 SSDEEP TLSH

Images/group/dup_audio.png

SHA256 e10d6988f888ba36a29a0589f87bb3dd3fa2bff2be0fb73916759c146519a81d
MD5 499b7a94c4f37466bdc9eeef0edee8d8
SHA1 ba958bbba3643e79eaafbfe2b9591a1aeed5093d
SHA512 c50a2776c69269c1029466be0abb0ef32cb8b9da7748528892f63db76c80fe8e489ee332d726945fefe0dfc4f2664621363b9b660f33fd3cd4e2b416eeb069c1
SSDEEP 96:27SDZ/I09Da01l+gmkyTt6Hk8nT9/ZU8hQsb3Z/+RvyMf4:oSDS0tKg9E05T9BnhQBvyMf4
TLSH
T179918DFE8FA450DE6EABB1020ECEE005F73922ECE1567A2CA49261DF5052D07B747199
MD5 SHA1 SHA512 SSDEEP TLSH

Images/group/dup_doc.png

SHA256 97f091f9c9be0adb4ae69b3c415dbc08a91dd211ab493bcb0938657bf197fcba
MD5 37d3b6d521796a74ff0ccbb0f29d905a
SHA1 dcb8035e248f87826a52d40bdde9f7c91502ef7d
SHA512 a5a018df8e891f2554453c906af71831977d362a0dc74fdd86b91e34eed4c58c2e64d5c7bc4e1b2530019fe97a4212f09d49584cf06ca789d6c5227e09175cd3
SSDEEP 96:27SDZ/I09Da01l+gmkyTt6Hk8nTbCZBIZIXs5K:oSDS0tKg9E05TOZAIP
TLSH
T1BC818CCBD930A8CD38DC7FD00DCE92526368666CA193313CA1D254CA90ACE0267624A9
MD5 SHA1 SHA512 SSDEEP TLSH

Images/group/dup_image.png

SHA256 e26d598ee2dc6df04f73c404994d95c65d8f01e65a9c6f349f7a6eb9cb002b1b
MD5 18632255c8a3597c90344bc780153bfb
SHA1 94a81ab42f95acdf16a507bbd24cdeb7d1e39df1
SHA512 4204c7f45c403e9b1da9780ab4b9301704ed98fa338b2e42b9c0ba024275be7804992d7c81f24851ba94689c391d44c4c88cc2ccd8c10853f10177495215427d
SSDEEP 96:27SDZ/I09Da01l+gmkyTt6Hk8nToCmAZ/CUr7CJf+L:oSDS0tKg9E05TohAQUr7Y2L
TLSH
T13B818D2BDA1061EF64ED3A41999A4186C3EB312C8B133B2CC4D272EE04B8D86AF55169
MD5 SHA1 SHA512 SSDEEP TLSH

Images/group/dup_other.png

SHA256 ebed8ebae005aab59877a45cfdaee3decc38265e72b0ebadf1db7f8868b04473
MD5 e870a6f1f0b0399cef8be9667aad70eb
SHA1 83996314d4aae7634ae0f369d5c56501af96c035
SHA512 293b4a0ee00f4877dd96beeed9fbba396c17562fd4ab5a146cfe3025894381b57c1ab16f89221da3d20171fcd83537a4526c2ac055712b52502225cfd54657c6
SSDEEP 96:27SDZ/I09Da01l+gmkyTt6Hk8nTBBdxK1hcK2kpJs:oSDS0tKg9E05TjPohcQs
TLSH
T1A5918C2B55B4A0CFB6A9398282CD0907C6B9222D818C3738A4C28FDF6099CCBA754534
MD5 SHA1 SHA512 SSDEEP TLSH

Images/group/dup_video.png

SHA256 b75e219a9d6ff083677925ffd02650e99623bde2f5b6744410c688438f0d7f67
MD5 d0ab5dcbab91e1ecd8f01455412188d3
SHA1 e0ad8a65bb63c2fc43f9451ae94c5e59ef3656f6
SHA512 e5e0720af6bb29fc31bbcdc69f525be306f0de9e6871c4d58aaabe4f1f474bab8a3655a8f4d51182b405024ba2715a23aca48a912a9e7d358104a9e07ef153ef
SSDEEP 96:27SDZ/I09Da01l+gmkyTt6Hk8nTA83AwqORySCqhVThTxnBN:oSDS0tKg9E05TA834OASCaVTt1
TLSH
T11A918DEF2690508F2C8D7CD209CE814ED768B25D31233635C4D199CE54A6E43AB9A0F6
MD5 SHA1 SHA512 SSDEEP TLSH

Images/group/ig_drivers.png

SHA256 da38a2ed67bb713fe3e896c7e925118ca7bbb46cf859e539124943a823c39add
MD5 55691f6d5d7abb8efc467b2c63907d41
SHA1 25031762aaa798b898e0524ce9acb9d419112c93
SHA512 49f0e91b47ca3afd9e4692534e1ba321f1f759eab541c8273477a08ea3a148b4dca08b53cfd034231adb1f6fb4e6d8ec76a08848021fb432088c8985db80bfe0
SSDEEP 96:27SDZ/I09Da01l+gmkyTt6Hk8nT1Gm/2bk0iF1IjJ0J10E3uxUV7zPSZi9:oSDS0tKg9E05T1GfPi/GyDtus7zH9
TLSH
T169B19EB9AEB080CF2EE937024FD7125896BA139ADE6F23BC09C295DD4106C0F6F150A5
MD5 SHA1 SHA512 SSDEEP TLSH

Images/group/ig_proc.png

SHA256 b88cf4bf6bd563871023b2e37bc6b3b0cceb1e0be8e75e9e38e49a3323516446
MD5 7ee58a43891b90b13f9f95f8448fb7b6
SHA1 9762c6d2f17a0ad33cd79188e66b285ecd8bdd7c
SHA512 87461a2132c9bf3a17faa13e585d9d6b1e0abecf345b63ee96f7c2cbbdca667d5a9b96e11d05bbd17dc018898d0e2cd63d1ec308de9d234ede951d844584e164
SSDEEP 96:27SDZ/I09Da01l+gmkyTt6Hk8nTBBMtGJDk/IWKYpVetLxGwyhZSNc7:oSDS0tKg9E05TBBM4k/yY6iwgZSNe
TLSH
T11EC17DEB8570C04E69CE795309CE4321466A539FC667263EEDF928ED4075D6B6E13031
MD5 SHA1 SHA512 SSDEEP TLSH

Images/group/ig_reg.png

SHA256 8f142623eff9d7c379f77a6d2d32f152e08d88d7998f7f61c638628bf982221f
MD5 42e46d2b1374e85196c51c91d6bd7ca8
SHA1 0dc80ca7c07a891782a505979d7aa976e293aa35
SHA512 54875616c3061e27389b2083214cbbd895b0f9081810e52888619292cb0f45d2bbbcb1a7314833900af776c7c12ab7bca6cb5bce932be0cbc66ba260aabbb892
SSDEEP 96:27SDZ/I09Da01l+gmkyTt6Hk8nT93DoHERUFVNjhZIdf2fydvUB5q4/igq52pn:oSDS0tKg9E05TsERmjZIdufydwqNG
TLSH
T1B9B18E8FDC60706E2DDE3C1009CD1641D7B993688973256475E36ACFE0AEC81575521A
MD5 SHA1 SHA512 SSDEEP TLSH

Images/group/junk.png

SHA256 313b4d66ac8e8cb33e3cb69cb4a3b58bd0d3f7a4b43614ba27c7fa46c9336863
MD5 7c87d1ba2cf4290100f04e2d8b4543cc
SHA1 4f00f34b4c637aa40368afb5b17dff4ad4811e9e
SHA512 a0942c31150c982b740b8bd48bee3a7bbd5b5bfe516fb967f65893f4d5d6a1e8dcd3209bdca5362003a7554472f6b4758e3c1547382006f346145ed04a27048b
TLSH
T17B514D42E9C6E144414DD6E1FB90C4123F4E8DE39C56906B7EC585E9C778627C2DD13C
MD5 SHA1 SHA512 TLSH

Images/group/priv_3rd.png

SHA256 f9ba343c2c0df7a6f00cc5e54f0f9d0ba9a97efe82257fa6ed9765cd3b740bfe
MD5 4bac9ab85090f128161d10f61a999908
SHA1 679744b06d157d921f676609d86ca83db6493ad7
SHA512 9d02cd00ff1bd9fecf61996a72773a1183e32da34b6104ef868b4e77b45bb56b15deea5199793480ec42c33dff444d5efe0fdbe1493ff7205647761208a74b41
SSDEEP 96:27SDZ/I09Da01l+gmkyTt6Hk8nT9kqVVAG37T7eaSx/84RyQ0kpE:oSDS0tKg9E05TtVA0eppE
TLSH
T1C4B18EDD4B506E4F35ACF4A00EEF6400D6390584969A3A24E1D1C5EDD8B5EC377399B1
MD5 SHA1 SHA512 SSDEEP TLSH

Images/group/priv_browser.png

SHA256 24451a44dc1ce95584dc3e0eb4939afefad396931be7a77d5565cbd9a9165fef
MD5 0ba7cb89d33314f81a48ed73f15110b6
SHA1 c67cc75ab32e1fa406c737c1db4478b9710a0710
SHA512 78dd08ad68aa35e5cf6db5089259cd67f3e99c5b15e5c5f43735ba7201ba1e2eddb8e34d405e60555fefe3f9909266278550bb766998ed3e2685781ae84df2a9
SSDEEP 96:27SDZ/I09Da01l+gmkyTt6Hk8nT05DzRCNMpm4d5m/OHGlyHA98N8:oSDS0tKg9E05T+DzRumLTYOHGR6N8
TLSH
T137B17DC578F0E04E524E3C422CFF6043AA458B6DCA563A75885099DB61A9E913F620B5
MD5 SHA1 SHA512 SSDEEP TLSH

Images/group/priv_email.png

SHA256 b4eebda8c1c0cbcb4739f72da2232eb056cbb38a0d899468c19c3158d662d898
MD5 b83340235da6bb30f83ff81df7cf6c5a
SHA1 4ce93941040dbf7b4fb081fdefd93b77825e4dd7
SHA512 638797851d90649bc903f7be7f6e302d4c0c0dc9cd1c4ad34c4e6aa7305baf24b769bad29bf3b0f21438b9f6bf77250215fbee9b9a13a8627547ad65ffbbf1b0
SSDEEP 96:27SDZ/I09Da01l+gmkyTt6Hk8nT5ok65y6MDn1mT0PSflesHRdXp:oSDS0tKg9E05TCk65ypDn1mTdXp
TLSH
T1ACB18D7E5A30618E7F7EB2D04DDD4209D6F52A4CC06A5774D8E296CF007290B2B630B8
MD5 SHA1 SHA512 SSDEEP TLSH

Images/group/priv_fs.png

SHA256 dc549cc12ef35d8c402893ceb98068e94c9e3a9a0c13321cf0c405f14c0d4c28
MD5 638456484729358530652ca99f66ded2
SHA1 a3dd6f2b80175a1a7bf9095adf6c93d460ea195e
SHA512 95348f34589fafbfb909a9b8415add1677cdc0b1abd0163641c726d8fa60f12782d8885d739f6613c0120c53dd69e74517f52e0b3153f58db84c92b323e6baa4
SSDEEP 96:27SDZ/I09Da01l+gmkyTt6Hk8nTZx/ssheF1bYlWBOtL7MG6KHPuozeR6yFp:oSDS0tKg9E05TZxUsCfgL7Vj0p
TLSH
T161B19D9FBDB0C0DF7DFF38218E0D4501E31E66BE9928353968C259CF0429E9712806A2
MD5 SHA1 SHA512 SSDEEP TLSH

Images/group/priv_im.png

SHA256 dc0796653986b1ca7a7d2b3ac117d50c7a674851c06c2fcc80fe8e7fd15116f0
MD5 5e623ca9cebf4f7bc3c7e4d03dac3b88
SHA1 1b02bc4a747dccbedc3861ec2ff276cebdedfb10
SHA512 4487a1c1f2fd6cb77ddd36bd46f0e3aa6a1866e5107a135b91090b156184a04f180bbf488cb62ff4b0cb82cd900368fcf8607c16917efb2eb2bb8cb3312b99db
SSDEEP 96:27SDZ/I09Da01l+gmkyTt6Hk8nTXb0xuAoD5qkciWbnrAAbR9oyvoB1+:oSDS0tKg9E05TXb2diMncAbzb21+
TLSH
T151B19D6F583130EFBAADBC031ECE2906A1AA943C86125337D4D1ACDD2051C765F954F2
MD5 SHA1 SHA512 SSDEEP TLSH

Images/group/priv_multi.png

SHA256 2b6b1a3e3cb7c3a667a5a1429c4843bde87865db3bd16f0aedfc2e4bacaa2e6d
MD5 c7e07121eb42a5935739ed4d826a879b
SHA1 0349c616cbbbb9e1185055eb7a71edf283f5b1e5
SHA512 7faab74f0f96564ca21f42142f746b3d1ed44de80d141e7887389ddc93b974f8ac98853527b63e5cd168b71b4fa07a71054d55d60f6ea992e10c7ca4df2732e6
SSDEEP 96:27SDZ/I09Da01l+gmkyTt6Hk8nT7wrf9pLCiH3RYUDl+VBZu8ZTApuEG:oSDS0tKg9E05T8LnW7UDlKo8lBEG
TLSH
T123B19EABAD541406BAAEFA621CCF0A61A7AD271CD0D1373CD5D395DB5818D022F8F970
MD5 SHA1 SHA512 SSDEEP TLSH

Images/group/priv_office.png

SHA256 ca436353acf1f745a56ac83cd4d8833e0ea2d5db85c77eab79bddc5f33f9ecf6
MD5 32774d302fd6da86fc16556995442e29
SHA1 d05d7a3194b5469d19a5e80320dd70f7aee033e3
SHA512 0e602e8b75b3567c50809164817ffc6f5c8b3e6173b8cdcd51864a4be515cd72abea9a448a6339d28c53b45e61ff13844a58631a7de595ab89f76434837fa857
SSDEEP 96:27SDZ/I09Da01l+gmkyTt6Hk8nTowIXuiTxs3peadyXUB4:oSDS0tKg9E05TSXugs3pea8Xd
TLSH
T149B16DABFE3011AD58CE75500ECB5682F778253C85D672E4D0C12ACB44E3FAE6F64850
MD5 SHA1 SHA512 SSDEEP TLSH

Images/group/priv_other.png

SHA256 ebe02e83199ae1e4ee3f53b031b49f5968d6325c48314d01adb503d0dc20f9a9
MD5 a7a45f450e57858dc4cd5ce48a6ab116
SHA1 9b2edbe75e856d909de67a3a39b409fe07081fc6
SHA512 fc45c1d1087c84494600e89c6eee0aa602fa5bd473b0a04471faf8b05e7fa25f88033762b0b6077e16ce85c7a7e6c16328fbe71db68cd1d65b3e8999d110252e
SSDEEP 96:27SDZ/I09Da01l+gmkyTt6Hk8nTmm4tGPfTJfxeJD+39l:oSDS0tKg9E05TrpJfIol
TLSH
T1F6B18FE6CD70684BF69DB4420E985297FB74304C9E9D1578D3D639DED481C4B36260F1
MD5 SHA1 SHA512 SSDEEP TLSH

Images/group/priv_windows.png

SHA256 48ebad785f63641f87c9a1f8453e3af5a4f135acd10c8ebbc4eab558565997c0
MD5 0d5a8c3d9529f5b660a5f93d12750199
SHA1 d0e4d4696e528764f28c75d9c4b860e3b02911bd
SHA512 cf6b00b57c9b6e29b68599dc1589d977cd79ccd53f2f6701839ef6c2880f12c8f40ec4a7f3665860ba9812725cfba419797bff738007a70f4e4ed75dc3ff2463
SSDEEP 96:27SDZ/I09Da01l+gmkyTt6Hk8nT2F8HQGE99vDRnuvbJHQjGAWjDL:oSDS0tKg9E05T2+QF9DcvbhQidDL
TLSH
T181B18DA746B878EE19CE762109D66285E36C26BCC4133B38F4E298DB1299D0A6701869
MD5 SHA1 SHA512 SSDEEP TLSH

Images/group/reg_apppath.png

SHA256 39f867bcc6d91dc02c30c365863037e99c1d7f0d816e8f54359e6b7d55dbc7de
MD5 98bc1a3ec54bb011cf5e51880d9e6c89
SHA1 eb1fee5ddad07d2ad5f5089258acfbd0e722c4e1
SHA512 bc534d0a8f7e0039d8c659e360b1a645ac5e0711dec1952aff651a6184939e448c7f9d58e4d2da4073d10ad245988935b1b8703719e889ff5706a8da8bac0b33
SSDEEP 96:27SDZ/I09Da01l+gmkyTt6Hk8nTvlm/WkHHPtK1SOTtfJO0qNjZ:oSDS0tKg9E05Tvlm/XnFG5fsFX
TLSH
T170A19E36F624A08E691E35800C9E6111D77D3398CA273174A8E677EBD482F017F05473
MD5 SHA1 SHA512 SSDEEP TLSH

Images/group/reg_com.png

SHA256 322989b9bb9eab7fea9b3f0d87449349d2cff9247bc2d244e41ea6fee90cd6f8
MD5 a3f4249e9ad6137baa803e42eba04f21
SHA1 e6a0be4f201f193cf677e45a0b2218543b55d7c6
SHA512 9c2c4b3a937ccaad0807e517e2241b76f5a7cf04f349c6fc58b1e4bb45d2ae00a2e357aec3442c1a956e393df765c59ee04924a41cc792ab7d835d569976d508
SSDEEP 96:27SDZ/I09Da01l+gmkyTt6Hk8nT31jqU223l9PLKtWylhsJhCepm11:oSDS0tKg9E05T823laxakepu1
TLSH
T1C4A19D3FD1F142EB766B37901AEC8225BBEE662D8B97236875D168EE0441E4B2351432
MD5 SHA1 SHA512 SSDEEP TLSH

Images/group/reg_dll.png

SHA256 b46992558fa3aadfeff176f751c8fa726a0863c6048ee52d46f7e3e67116ff79
MD5 2789bfe00f07140397a9141c6a37fadc
SHA1 ce17786e9ab9b9b5bf84a60fabb790826974fbbe
SHA512 1751e0f3a335842ec3e4e969e792652d43160dc167aea1bec6f72cead1f0db95d4673cdb869e99d930d40d124612de5a502984de899fe359e83f8c923fe42321
SSDEEP 96:27SDZ/I09Da01l+gmkyTt6Hk8nT9Ns/VL+YtrMcd0Uc92OrTAUjsTJ:oSDS0tKg9E05T9NcVL+uMfvdIN
TLSH
T19BB17D9DDB60648FA55E38A249DC8A46E3D960A88E0733AC55C15BCF40BFC1727D9CF4
MD5 SHA1 SHA512 SSDEEP TLSH

Images/group/reg_empty.png

SHA256 9fe321d603e3a1aa42677928db2db278f739501663d0631aebfd0f2ad91aa4d8
MD5 b7d8b74fab4d19b394e56eebb3eabe18
SHA1 eb8412de6b4ed484e184aefdf091eff724c90de2
SHA512 89b7366013feff0f47c6a9127196c4ad01819b0e71f7f796a6841848c1b93c440d40a4dfc116e0839b1c549d13e38491f843f95b5387f4509d6ea4fd73bc7d1f
SSDEEP 96:27SDZ/I09Da01l+gmkyTt6Hk8nTXFuBhsh9S3NKihmrtzfb:oSDS0tKg9E05TXFohsh9JihGpb
TLSH
T14EA16F69C660908EBFEE359309CD5311E7AFA39C8975357C199382CF0455D1BAB140B3
MD5 SHA1 SHA512 SSDEEP TLSH

Images/group/reg_extensions.png

SHA256 ba5477fe59c2c5a00969f9980b3cf600edf92e7d14431c49537ab46197b4fb13
MD5 014bbcbeee9240231b7135d468b0a822
SHA1 ff87b541c30ff8244e9cbf1f7664133254e6293d
SHA512 ce847907bffb73c154d87071b657eb28cbe28ea12efa855c0e1fd0cba2971463c0a67e236373c9dd07bd656ba78f71ea09c4282ae4805d2c99f8616ee53e2aeb
SSDEEP 96:27SDZ/I09Da01l+gmkyTt6Hk8nTCyHmUOwmU4htzAXKahRVCN:oSDS0tKg9E05TBr3mU4LzAXKaHV0
TLSH
T1D2B18DBF90BC556B2B8E79514E89C300EBA5227816623738C1D09ADE6498C099B22677
MD5 SHA1 SHA512 SSDEEP TLSH

Images/group/reg_filepath.png

SHA256 b201f72c5d1cfa8e5b71f8b5ad413c0db9fd4560860b9d136e7f6f6461dec69a
MD5 406b477898ce0051855240571a07e457
SHA1 4607c15373a816996560eba744040fcc14248ec9
SHA512 cb2c96d621a692840588da46691908084f5b57b09a28db28b5fd06ab01812e8fefad6260577bc1132b936cfb423f22b682f42d0688874728c42297625b5b8342
SSDEEP 96:27SDZ/I09Da01l+gmkyTt6Hk8nTUeMZsGPqrk+IY+YslOUcnSu:oSDS0tKg9E05TU/aGCYyxslq
TLSH
T147A17EBFE030B04DA9893A022DDD82929752227C876327F46495B1EF7085E03B7439A5
MD5 SHA1 SHA512 SSDEEP TLSH

Images/group/reg_font.png

SHA256 51a283f28cc661f35cf0920105ec457e94fb51fb5e7aa7b1c90b38e34da09634
MD5 ee9e110c24623bef9c34354b062c0f53
SHA1 229fcc64d0143606ff6d24842ad6e1f09c7218bb
SHA512 762448de51120ae726dfa95e416a62dc73eea5967cbd9f18fd81855e66e78dcb9a3346f1c5647c906e7f929640ae4f5c1dfaecc613c59f25184970630f608764
SSDEEP 96:27SDZ/I09Da01l+gmkyTt6Hk8nT+Tt4OJEKkOITqceSaZdEnkw:oSDS0tKg9E05T+a0klWcexzw
TLSH
T157A19EABF5D8D66E3C9975130AFA8215EB6D713C4283363CC4D089CF9492C633B601B1
MD5 SHA1 SHA512 SSDEEP TLSH

Images/group/reg_help.png

SHA256 84bb959cd6879f86c8d92738da14706effda267f749bf40f3564e70b55b4ed6c
MD5 93efd1e27f5bf1ef7016e19516328dd9
SHA1 de940bec59634cc749fce45a03ee2d4f7c2a05ef
SHA512 247110e62c45bd618b0354965648a8741ab3e39a95cbe7cb21972b68c73e8d6a20a61082fc17ec33c7610e3233703cd357ee3748b46f5650ce7ca06ee77e377c
SSDEEP 96:27SDZ/I09Da01l+gmkyTt6Hk8nTmT9gVkc/wa11wLy/JWPUInQr0pBXEed5b:oSDS0tKg9E05Tg98/wa3csInlHb
TLSH
T1F7B1AEBD58F0699FE5DC74067EDD4083436993AC99133B18F080D2D63095C457B205BB
MD5 SHA1 SHA512 SSDEEP TLSH

Images/group/reg_shortcut.png

SHA256 2d259bef3a7b68da48271493c81f5234fd46c3021daea471068acbb2a5f9b61d
MD5 b229e7dc2647db77c4f1fab65c2c8268
SHA1 9e79ff3139444760aa876be3471510a1471c62b3
SHA512 889eb299fdc9cbb11c4492e4e8945292e895d1f4ca86945be9dcc77c784e28e3707e8380c329d3275c78b5e5d726fa793e00b549efad0d253a6796b3dc43266f
SSDEEP 96:27SDZ/I09Da01l+gmkyTt6Hk8nT/ixJk58EtgvFQmpMua+FvKzyIK4:oSDS0tKg9E05T6Jkm2I1dyzyQ
TLSH
T144B18ED92E14600DBACEBED31E9D23432F6D658CD6271934E442F5EE0DA5D822F6A072
MD5 SHA1 SHA512 SSDEEP TLSH

Images/group/reg_startup.png

SHA256 75c5a6c6f62e4a297fabd85df10bb46eb801f7964724ca1e231032ddbe1d00d7
MD5 89f9ca010971a4a61a6ca1f4c773e311
SHA1 cbafdb6e839602d1d2fa6315c1c144c485cea0f5
SHA512 b7e017c93dc4eb2c76ebe72958447b861895714f4c29ded59da84cc722e27bee08a1bedd9ab92ce19786b244ee9bde37c47d2aa55c7dfd74474279b56fca61a8
SSDEEP 96:27SDZ/I09Da01l+gmkyTt6Hk8nTmwLiWVnAKYKtxPk8rxuFmTYU9l:oSDS0tKg9E05TtK4xMqsFQR
TLSH
T1F7B18EFE9A60024D38FD35D3099CAA46EF6A21FCDDA332605080B6DD6442F4377450A1
MD5 SHA1 SHA512 SSDEEP TLSH

Images/group/reg_uninstall.png

SHA256 07d799ecd9a65f3b230abd76933b882a4fd11c86ead1ce1bdfe2f0d56c1d6286
MD5 40d255566dbe739b9b1b7ffc0e11d10d
SHA1 b62d7ccb37a16c1d5eb0177440d4e57fc1dd899a
SHA512 0a7d5e067ee1408893fefdf2d86da2a1a822bf60e8ecdbddf3d085c888da5478804e7f44fe09b1c67381576bf63269e17c87be247a05f708ad0bd03d6ad80394
SSDEEP 96:27SDZ/I09Da01l+gmkyTt6Hk8nT/P7npyBcSveodjWTMbCTlhKRF5czphkHpq:oSDS0tKg9E05T/P7ptqfhz6Epq
TLSH
T16EB19DEE6BF1AA4F3D1BB8120ECF6042EB8B86A9C8673B5816E4B0DA157CD013715571
MD5 SHA1 SHA512 SSDEEP TLSH

Images/group/startup.png

SHA256 16e8d8cce6142c5eb775cdfbc003bc174bf1e79c16aa5f488c5508435b21aae2
MD5 34f0c9f586991b1918b6864a670fec75
SHA1 03d935760e8c49cdbd2f557606d77ddb2d122614
SHA512 ff6509000779314d27696aa779e4c64e1dd0e50149723449e0046dc973a8d738e5912041a7002ca26783ce6e845e7421ec9bb228dea09697bc0b687a18e82c38
SSDEEP 96:27SDZ/I09Da01l+gmkyTt6Hk8nTRFvsEp+z/JNFyJtLtrI+w5+89zkJ:oSDS0tKg9E05TRF0Uyy1zw5+89W
TLSH
T1D8B18DFE0568504EBD8FB6D62FCE02C2B31EA5FC57643925A48459EE20A0A07378A476
MD5 SHA1 SHA512 SSDEEP TLSH

Images/headers/header_about.png

SHA256 e315d98b39b77042f9a8daa14e5dadeb61c62592fabf40a1a08624830f7bed04
MD5 32e336a672389136042039b42048b015
SHA1 7da1f8f9fff4d9432eee227da62040da9887cdcd
SHA512 c1174bc564976567ea75f091749f7eb95879a207a411072227d6ed4ba563b6226e82e4510d8b27a156abdd7e65053abc72146e7489b29a448e624e7a4180627d
SSDEEP 96:qSa2e3b/N5d9NoMtrYzOcMj7PXrSrOxFqjVGq8KI5kjBOuKkYHQFFIqlCix5:qSEp5drofzOcorXGrmFggqoSOFk8KmU
TLSH
T122D1AFF557DCF716646034E4A260DC88CF578136902EAC3C94A9A95B57EF28A4278CA0
MD5 SHA1 SHA512 SSDEEP TLSH

Images/headers/header_bho.png

SHA256 2dd1f4cceac5c162211bc37092b47f386f10e874f67863127b791d25f49712a2
MD5 16acdcc330af8a02582c4911f0e0a050
SHA1 6843fc1fa6957613d50414674c130603832c60cc
SHA512 0adf4b8e386891d1486d6a60fb7fbfec243708c5b0e68183cf89b0f7760cfbf0f75a627ffb604ffa58967663bcf62b890fe4e4776feaeebe130416831c0e46e0
SSDEEP 96:2O/8Gj2719QbpZDPLlPpdleF2KYQPinmu91K4VQl6yBCb1fUHJw8Di+mnizCGugW:2IubQb3fsPdqwyRJfdVUu1NFxWOWUl
TLSH
T111E1AFD85308EDF04045D8BB6040C7961D792B32249BDFB68C47B9665E750D3FC1B2D6
MD5 SHA1 SHA512 SSDEEP TLSH

Images/headers/header_clean.png

SHA256 4e488444e83700ed83f35b07a4c7c8e699c273283855c415de7d11c0ea39cefa
MD5 917a19497a811006d6e79535daa52bcf
SHA1 3dc5282f04d18ac2a82fc7e74781dd82c89c0892
SHA512 80194353d41ec2c6bea3f920d08c047c10fea1e3d188ec1a35cb553215a67823b21f570046c35d8a7fcb3f60cb9c06bde27cf873a4fd1aa29795757e01e05a76
SSDEEP 192:qSUBY3ndb+XlsXZpnPwj4xGshnWCBMqwXhhEqm87mTGKSi0KfAIc:lUO4XlsDwj4xGsho2B8yT5h0hIc
TLSH
T10202AF7B8F1D6F822CF374F5601C3A26E99714C8BA20BC9B183B1550AD3CA296729354
MD5 SHA1 SHA512 SSDEEP TLSH

Images/headers/header_defrag.png

SHA256 54dd4281e27cc97f4e4c2f3043e7d43e7f7cec8cc361216f8142ae94bf82d17b
MD5 c5bf5ed07dc6b6ad62a1a868f05f59b8
SHA1 ec8827e94ded4f85449fd36c348b073d5f93132a
SHA512 bd5fbd76afaff24a97898c9e8345af2e26b8189b0fec999ab3a556649a83a4f64bd1751efb0f77b911d80bcd12d49d1706356ef9d2947780d1006ccbb88bc2d3
SSDEEP 192:AwnIQ9XBdxiA2OzHNE9p0EddDFdiugwYb:Awn7BdxqOztGp1ddDFdZO
TLSH
T139F1ADDAA7392D3B556C282ACE608CB5F430F83F5D14F350D8A1317ACABE91109589CD
MD5 SHA1 SHA512 SSDEEP TLSH

Images/headers/header_driver.png

SHA256 fcabae8d8ab17114c9bf5eabc3fced99f9235f31c292a5e188361ea735f79c45
MD5 0173a839a8719acf7c4e02309977ad10
SHA1 ab2b83b1e2b2fd77fa25b87152cced6267685529
SHA512 0fc50757c6f9172d41e981d1314177c745e3c47cd9601f914067e92a832daf4234478137d05e2ad2fb7c7ebf45182a13017649cf9fe48a457b2036c45872b1c7
SSDEEP 192:6xrEQc7+NxqHrpbI1NEQgdRee1o6mpMN3kx9rwpbZiGWZ:6xQFCNxqLpG8eeYSJc9r0ZiGWZ
TLSH
T11B12C098FF60BD0FC005DA116A3A19A55E128CC6C9426D2739897054D0C3AEBC5AFE9E
MD5 SHA1 SHA512 SSDEEP TLSH

Images/headers/header_file.png

SHA256 b888fc3cae35d2df6328ecbb1ba5c94295566eb18116f1e7760730e665372176
MD5 698ace635dbaf9d8f1c871eab6cb67bf
SHA1 e7462aac51bc9c2007eb79f340fd627b1b8d79db
SHA512 7f9f00ae60a097139cf93fad92f7dd1461fd601c9c3d6413357e6003df63c60933ea002badf76407fb0a931a23abc55da406d68fe8c38b1da556a392fc9ef7cd
SSDEEP 96:87SPMmhH+7FFZIOZAlmb13TqzyEToM6qad6y+XyyYeMgPntn4Jm1wUiL5/k:WS06H+7FFRZ0a3emkpad6RXrYYl1w558
TLSH
T198C18EED8316D4244F7E366E5C3397B12902C315B4F261EF9866ED55E1D8508513EE1C
MD5 SHA1 SHA512 SSDEEP TLSH

Images/headers/header_junk.png

SHA256 14fb24f9c7b3e760509609575de6e6a62e110289f66e38e364f1ccf0261334b5
MD5 ee33decad117dd118f92447ea6ec8093
SHA1 d1d933f8a135722ffc24c3aea46d09f0636144f6
SHA512 d0e5a00b76b663c6743b601b9254875e242272a469a721de8412b7c4492373c7163c51eb83fa8ce0cce6dfbc80be91c969049c6d597d7d22699f5701b8df1864
SSDEEP 192:pAGgs+0CKPP6bR3lw0Fb2b2wI1kvhvg3wtxPMsK:pAGo1q/I1zADPVK
TLSH
T15AF1AF6D0646922E1F2D42C878FB204811BFDEE30D619378B76018E264D1B4DDCFAC74
MD5 SHA1 SHA512 SSDEEP TLSH

Images/headers/header_junk_settings.png

SHA256 c89b9d8e5a2f8286c1f2a12013473af7704555ca20bedb7a97f1aac9542494fc
MD5 2c2d6f2ee7d599781a9ed5bc777cbe1a
SHA1 b8ae85357dec1cca4009a270b0d56855480478cc
SHA512 6b45c245da466f622e8446cf413189fe42d44e964a24e35b1e42a33de1ecadc53478bb3b39739c89afad3f9ceb1d626afeb0ebfe869e11a4dde4a1c265385523
SSDEEP 96:tFhm1kmVhMVBc2OsRc0PG71bgnPCIAMaM3YO45DLlrEONTb2/ttM5NSC26u3g:Xhm1kmuTvGBbgPCIAM13bQO+ytMrg65
TLSH
T10DC19EEF60492D31C1A2DDB1C504C40E5EE3D95153862174FD8FAB6E7EA6238031C9CC
MD5 SHA1 SHA512 SSDEEP TLSH

Images/headers/header_malware.png

SHA256 d37a97c430e22ffec0b72493cf798486cf626e27f3ad6a9e5735707e5c1aecf5
MD5 3844077b43d32b4b2f34b0c1f71205fd
SHA1 24fb01245e5b4b224319aa5f64fcb07e042a8556
SHA512 282e355b2ee09cb51afb4dbaf6b586f1682ad49d20379811728721cd411d243c02633eba1d65fab63284a0e9aea71ed2274ad1d95a346fd3af31411baae231a9
SSDEEP 384:53iNavdj8CxdFnNfAdHvFMTnBBttQ9MAzDcNPGF006vJ7/k/sKOyXF0Kz/4:1i+djBdFnNEG1Btq9MAIQ00I98UKOy1q
TLSH
T1CE92E0FA2225F631A21A8D69986AC715CA6321254B1B3219B03E317AE109C6FDDD4FF4
MD5 SHA1 SHA512 SSDEEP TLSH

Images/headers/header_performance.png

SHA256 d37a97c430e22ffec0b72493cf798486cf626e27f3ad6a9e5735707e5c1aecf5
MD5 3844077b43d32b4b2f34b0c1f71205fd
SHA1 24fb01245e5b4b224319aa5f64fcb07e042a8556
SHA512 282e355b2ee09cb51afb4dbaf6b586f1682ad49d20379811728721cd411d243c02633eba1d65fab63284a0e9aea71ed2274ad1d95a346fd3af31411baae231a9
SSDEEP 384:53iNavdj8CxdFnNfAdHvFMTnBBttQ9MAzDcNPGF006vJ7/k/sKOyXF0Kz/4:1i+djBdFnNEG1Btq9MAIQ00I98UKOy1q
TLSH
T1CE92E0FA2225F631A21A8D69986AC715CA6321254B1B3219B03E317AE109C6FDDD4FF4
MD5 SHA1 SHA512 SSDEEP TLSH

Images/headers/header_privacy.png

SHA256 ef232abfa9c3692b953f1a5a2a13cc6dd05b919da7cc2f0a4c8674ca79daffe7
MD5 c800c065894366af9fc143f252e2517a
SHA1 75c6ae701a17f31fbafd60aad182e9133a19a1d3
SHA512 a222253c8b17c397cb56a7c1f756ed82afc02b6ef56bbb63e257ba2ce22b9359e4a5fb3e11ff9a73d30d20a08637f13bbe34610839ae3c8dad0397ff5c340ba0
SSDEEP 384:jebNknGImZpiTwKYOlUj3TL9WT/n6FlXiW7r:jUIoiMKYOmjDL9Wr6vXiyr
TLSH
T1BB52B06E4E4A7F794B85DEB070936D8A23B427157A0C62DF71B2E992014244CDF3C675
MD5 SHA1 SHA512 SSDEEP TLSH

Images/headers/header_process.png

SHA256 ec2c208322c835841d6a67d123fca943bb7c4cb089cc13eab68bb9e780a8951c
MD5 46537fd1fc737cff917d8317137f35b8
SHA1 9291d180528868a1473df39709e9302742a1ea3f
SHA512 2c9bb2ed3cc047b615a62b285adb6d91d46065d680d1aab06308e497478d4411a7917b341ea8a63edb85657e2a532fd8093dcda1ab9fa5516adefbd0e5e333f5
SSDEEP 192:WSIiiPyvr0XWgiGLzthdDKW0W+9f1sICNsnE+zKE:5ITMHgFLzthdDL+9fbCNt+zb
TLSH
T1D4D1BFA264BCC01B06A43DB24F2EEF845D1D2B50723F0022BE2A454C0A77D8CDAC7A92
MD5 SHA1 SHA512 SSDEEP TLSH

Images/headers/header_registry.png

SHA256 05e25fac80a0a4bd767f80be2688e94c1cb61966b23c482562d5fd48f114ab92
MD5 d96c2e9a6077d09c3a1915b356b77d83
SHA1 3368a9a14b241ab4dc2732e17e74925240e282bd
SHA512 cb87125340be112879678255a5a67ef0358df604239fd515a82e863cec21eaf90c20d88721305baa14fd5086de6d7cbbc6fa0c7f576f091adbcd880591b39c50
SSDEEP 384:qVrWNi5EmDyd1kgievDRzXKAVcNH2dwyZhw/ZiovCSQPw:qsjmGd171BcNHSwXxPCSH
TLSH
T12F72E1D41C38D3B4BAF27359801F5D78C5B7DA6938A26E28F0A1103051033967EAAF79
MD5 SHA1 SHA512 SSDEEP TLSH

Images/headers/header_restore.png

SHA256 581760eada7c8a9cf2c0be75aa2149081cb19398339551a32b53c8bd3d4d54d8
MD5 acc896f4cdb9b8b5caaa23b3fcc69eab
SHA1 1d28a877a52574a29a968a37a3863d17c717027f
SHA512 bf32e0ade7e3b519ba797f9e870e7154b033a180561b2142489f6029ac7f0241a164ae51abe5d35a77ee44d8c9cb93319d7aebe270617649e57e172c8f8bb7e3
SSDEEP 192:qSYB+uuyMnpVgulY8cKZS2A9FeQkYMTBlq7PJD+kb8Pwi87m6Q2HOtL+:l8+uuyaguZpAuDYUXwk3oTKd2HiL+
TLSH
T12312BFE84DECA7A301709268D20B0926DD5CEC159A61639A3C7E863EAD61372C0DDBE5
MD5 SHA1 SHA512 SSDEEP TLSH

Images/headers/header_settings.png

SHA256 f34eb9e6eb5b92f28968ba55fc3d8e39f017d9661c65106d3081973797be6a02
MD5 61724f062c39df85e66f6ad59a9aaa5e
SHA1 a5b1c01e7b89c7853a91de8e46f5f0b0a40f8b8a
SHA512 87b49ab7d1cf69df63e657adce36803461fece18ee707743fecfc662cb46308ccfb1208a54e1649eddd32effeca988f7562cb61969f3da2a06de5a7de349854c
SSDEEP 192:qSczoTt1QHnuimSXP+vcQOjIW/YsNL26aBk4q:lc8LQVjIcYsNL26aG
TLSH
T1BA12AEDA893519040F388F68C6C75E28D146855BCB820598D09E8DEFF672B6A0C3AB61
MD5 SHA1 SHA512 SSDEEP TLSH

Images/headers/header_startup.png

SHA256 9e632f58ba3cfcd2f2777fd3af9359dfe5e4ef1fd69a5dd66f9ee9528c2bb9ca
MD5 1d10fb6b01d49a6bebeab25619926bc3
SHA1 a69bd75c0d7b3b767f8be792da4db92c4d988050
SHA512 0177c8dfae286cc28543cec1c3f69a23179e607172fc1063e880b22916fd83c0a41b4d8ae2a2a6e6d4a289ae3c59a0c0d73dcf9f5e52f599ebff12c09b2bc630
SSDEEP 192:WShKYDseDK/yXlzetCJZedC5tRtOL2D39hHENGQ9:5hK+seDK/woqZedYtR0L839hHDa
TLSH
T1A9F1AEF11BBBD4CC51558E14CD16D0FEE18C29C82C68AE1C7FCF2B01B401AD4AA1DA5D
MD5 SHA1 SHA512 SSDEEP TLSH

Images/headers/header_tools.png

SHA256 6afa94ac05b205472cd605a93cb504f7ffd45dec1aa4738fc186761b2b64c960
MD5 746edb44e93e9c7dd91370b9642060ea
SHA1 467986771b4af7d228c7517486d6a34f4bdd0d01
SHA512 1fb0b4cdb85ec97fd030d1165d36eea9abe3cda762b9489f4dd75b004a5cb98d9be5f7eb578b09d550009d370ab0da37b29b817c7103b08e48f028b55fc3678a
SSDEEP 192:qSdG4oOCYjF0vbI08at+EA7gc8CX7U1iFfJsq0Pe0kqQmEXN/YozVLUDPTZtabak:ldG4oShSTQlD8CX7U2h10miop7zVAPdA
TLSH
T1DA32C0EE5E3194DBE6AF4068D37F38CAC69F25A72558C630632110B9584B0A94E941CF
MD5 SHA1 SHA512 SSDEEP TLSH

Images/headers/settings_general.png

SHA256 65023d3a946c9c7ec1a23746a1fe6a35e0c6c30fbdb1a430854e6c16f68aa0c7
MD5 315b1ab7275c889961864be383b5b36f
SHA1 682ff91d01b39207b27eeb250df4d3c96142eba5
SHA512 d4ffd960472bffd88ae964a6dd87ab6d43680c1456cb8c3675d169bcd3226a4be580028cb1033acd1788f25c20c10c27ae3f138924858cd28dd1be2445eef1fe
SSDEEP 192:qSuMIBsWVZPePROZ/JhOxspK37h5ujxNWwrl2NqvH8twfxcJX/Wp/xpsp:lIFrPe5O4xsW7mEU2FjvWpbs
TLSH
T14A329FEA30E49873535400A6275927AF05A328E35AD8718D2AFD8B7419B817D9E38CE5
MD5 SHA1 SHA512 SSDEEP TLSH

Images/headers/settings_ignore.png

SHA256 317a3daf27aa893cee7fbce5042f05156a5568536ca0455aa863474e9d8ca4ec
MD5 dce39b9b5924965789920f6d9844f5fc
SHA1 b7a8b4638e8a444d3d347852ea001379826a148a
SHA512 1bd255ed81307103458c5f7d80b910ee9d4ff0e8f14ed1cb613ea67075f1a64a012311c62adef547a6c094ecf90ad19b2fbe1872e3d2587b2c460f4bcff3dcfe
SSDEEP 96:I6xYTMZA1naKxVv8gZAwVB8xD9RyJl/X7S33nIn9fbFNXPkdrFsWPoDkedkDxExt:hSTZ1naKxVkHug5RyJl/X7S33nIn9bFH
TLSH
T1E9C19F0F65AEB7A8941CA87B3A084EC4A0C748FC7F923F35AEC9C457A76C16647449D0
MD5 SHA1 SHA512 SSDEEP TLSH

Images/headers/settings_privacy.png

SHA256 4722c89ebda71ab8c63f561272a77856f28f7102325ddab947c970f60b0d288e
MD5 869d695e0a2749d38d4e74458914863b
SHA1 fa3be63e39b10f7506c0a7b58099037c3dcf66ff
SHA512 9b984a7f496048e22fb1caab10db38d742dce70041ef03161857cd1e864563fd920c38143d39a6523c0300d797563d26641a4a312da00551b9fa01380625bcfd
SSDEEP 96:qSGqDohLENBLdR1fL7+OB6mzGgWp2LZTPKz6YloxGySnrz41JkAy2uCPJliLGE0Q:qSGcey5RlH+OIEVZ2owrUk3ChFKBpv
TLSH
T123F1B04BE1DE3845E8CF00C19F2D042378A77696782A68CDABC4C0D58BBF95DA454894
MD5 SHA1 SHA512 SSDEEP TLSH

Images/headers/settings_registry.png

SHA256 a676ed75d62130f6442e7d1e8430f9c09123b46b262ba9b7b4f283f307be910f
MD5 4f391e93ffc95d930cadfd6e42a49d98
SHA1 5d365b7166171c5a932b36e7c5547291de484a66
SHA512 6e1260d431cc09a81e3b696cc2d64c70cdea7b8ce4b849e1c9842671b86092448d2e0bf116674373945f3f2ae11e1acb8580ffb8b0bc5726a682719e24099742
SSDEEP 192:7PulNDfwjHLPlEH2BLmetPzakUOew3CxsaDUmFi5R2kNkbkAJ:DuHwbE2BLlGw3bEUm4ykNkQg
TLSH
T19712C0BA423FD094E46920225D3EADD2689699D7E686BFC5141C03CCA52F0D1EC2235F
MD5 SHA1 SHA512 SSDEEP TLSH

Images/headers/settings_schedule.png

SHA256 8b959faa123c8919503ba63fe429ce0100448484df0c555639fbe2628b8d5492
MD5 f74c664c18b9feb9092cacf5f5bbbf63
SHA1 ee1043db0d8106c59f405058f28a664cd15b104a
SHA512 aecfd4fdebdf49680205dbbbde0b3b73d33f17b820c0055c96a9fd3549a64e990faefe266e0f0c930eb5293161b94aada552362738c23d6d52b74bd851ccc993
SSDEEP 192:vY2HGGvabd1Ck1wEbV2/RTMQ8Qu5TbUI/LRsos8/y0Kas7:vjGjp1CVk6TMQNyR7/y0Kf
TLSH
T128F1AFC64A863D129EE5626BFDD29F47D496B25B307FA4ADB439E03940A0B101370F3C
MD5 SHA1 SHA512 SSDEEP TLSH

Images/list/drivers/cd.png

SHA256 def4d8a403c1eedbd3f4b9951f84b8fdcc169608ac5a1f67a2817621aec77464
MD5 98cc4b93ab940eb17281c71ef25a199e
SHA1 433357181b48df6b7ebeae5267f405c3607dedf7
SHA512 fd39c541d90dacd02c5a5b9a2421d54499c2b7ab0d1b0b5be97fed529eca0981bf87fd5dd13688cbe4ae0883c870bc4a1997d9300f385c714ece6178d88eafe6
SSDEEP 96:xSDZ/I09Da01l+gmkyTt6Hk8nTopWbH/J+Vlejtt8RCS:xSDS0tKg9E05TopYfIVlecN
TLSH
T1FC918DBE5C30B44E9D9E35A00D5D0D22A768755CC5EB3674E0D063CA105BC27BB61560
MD5 SHA1 SHA512 SSDEEP TLSH

Images/list/drivers/cpu.png

SHA256 571ebc6620650abee5536da310a0baa0846c5b89c0e2c9a4de654485d502c9e0
MD5 c37c9bbac88ac42f34820bf1f61aec05
SHA1 68939e8761837d4f51c5a0d9ff139a4a38cd29aa
SHA512 32b65fa0ebf2567cf71c80566c97a850f55b2818dfaed6ba2b284f975646d912ce55c752f9809f4806d761ec0255dea4fb6ab55036c2e1cb044e723d41306fa0
SSDEEP 96:xSDZ/I09Da01l+gmkyTt6Hk8nTBn1wY1EtTgZ3+flT:xSDS0tKg9E05TVXi
TLSH
T100818DBF9A6004DAF8CD38429ECE450AFB4966ACA062323494D058FE0059D47BF9B530
MD5 SHA1 SHA512 SSDEEP TLSH

Images/list/drivers/disk.png

SHA256 004f6c7a882f248640d8da188f3c0f4ce9b69d10141ce9ce1fd5c4d90205f8d0
MD5 75ee0a32e2315474f2b0d324551a0aae
SHA1 e479998b29f116dbde8b61129d927e621e1d9057
SHA512 09807999face1ed7dfc235cc65b7106cca1fe19bc804e8be4e9fc821df53b9a077aa4476b800bf9bf88c7ef671d8b542f62eeba5d73021e7ac2282e0fb998131
SSDEEP 96:xSDZ/I09Da01l+gmkyTt6Hk8nTInqjCt5AVAE4rLZzo0:xSDS0tKg9E05TInqjCt6/qFp
TLSH
T1BB918EBE8A74618E74CD7802498E4901B22D22BC43923B38B2D7D2DC1442F0777655EA
MD5 SHA1 SHA512 SSDEEP TLSH

Images/list/drivers/display.png

SHA256 8f25ec99796c3a5e2845b6cc3d2dd7626da7859f02d98fba99f9f4b6668146ac
MD5 57a1bf46e0b8bdb9a48d8125ea279bbc
SHA1 82da97ef17b38fbea122e96ffa6a092868246f97
SHA512 18551a6dc93a1c6bf63b6dcf7a8f0175ffac47720acfde29bfa1f2163b3e7c842b7c928b926592af61b609d951e9b0a5a33248795e17aad833bcfa5833c84368
SSDEEP 96:xSDZ/I09Da01l+gmkyTt6Hk8nTC7BeeVRzMYNTM1HQ:xSDS0tKg9E05TC7FPIYl
TLSH
T183918DB7A6B0948E3CCC76A20DCA5146EB2D236DC84236785DC1D1EEA092D436B920F6
MD5 SHA1 SHA512 SSDEEP TLSH

Images/list/drivers/driver_outdated.png

SHA256 1642a2e5b761722c7c9b2a74f31c6ea64765a547530bd97846f74c6bb7e3e665
MD5 e6fc40bc1346090f0f255c06b32cb580
SHA1 277c7330b9ce568743ac8dd4768d35f4c6f21c1a
SHA512 3d18f84b72cce488e3a4988ab50a416642190fee7341893e01707e549d2c0680f65d08f471e352e24c1cb7dff69419dd714e1199be7f5f452a780990f66d333e
SSDEEP 96:27SDZ/I09Da01l+gmkyTt6Hk8nTOR5/F+IJs7KaNE3TAGOuJcg2iX7g:oSDS0tKg9E05TORF0CaNE39aic
TLSH
T1DBC1AF7FC9B4E54D359C378004CC218CEA5762A8967B3954A9C1A0EF0817C2F67A7650
MD5 SHA1 SHA512 SSDEEP TLSH

Images/list/drivers/driver_uptodate.png

SHA256 dbfa69d066a7e738ca883a6d36e3a3a69b82f0a76545fbf8d21b8fb009ce9700
MD5 2cee6bfdb119542d0ab4802d28de3d9e
SHA1 cb04b7def6f2f3b0feb9e7031b90cebc38e8b952
SHA512 e567a3be641d252e8c1bab13f3792747960aa8c39d410beacae4a5001307d3f7d176ff2a5cf1197ff98d7467993a1ca48d35083432d5817ff6b2f176d8926487
SSDEEP 96:27SDZ/I09Da01l+gmkyTt6Hk8nTLJ1bUrwlvRqyzTCZUot9oOviDKqb6TN:oSDS0tKg9E05Td1bUfd2xOUKqQ
TLSH
T1A5C16EFD6F2060DA2B8E3AD25D450386D65F262DC42A3A1090D96EDA04A488ABF55421
MD5 SHA1 SHA512 SSDEEP TLSH

Images/list/drivers/floppy.png

SHA256 f8b36990a727cc5aba4bb0504a522a00ebe2ba71c78552dc0da35dcdb75f6acd
MD5 df53b5c243aca1afb6ddd32bd784033a
SHA1 1e7fab2164e656fcd82cb90c5616510b8ce0f44a
SHA512 6261548f1830ec4a83a90bed5b2975f9a82a2bfe004f24de792773a9ffa561eb03164d300c29c079b397c7c43213f07f0c6f71ddcc2abc408d896410d4735342
SSDEEP 48:x/6DocieftI9G9f6A+FIDOWu0lDl+gm7QyTtctIInQSy6IVpqlnBcODKqqprAWgn:xSDZ/I09Da01l+gmkyTt6Hk8nTx1YZM5
TLSH
T1DA815B968D60E08E6C9D3A920DCE410AD77A26BC4B223639DCE284FE1020D0367AB4B5
MD5 SHA1 SHA512 SSDEEP TLSH

Images/list/drivers/mouse_key.png

SHA256 92fc151f4bfe5dd1eb43876e30acdc63b8938b8aa87ae463dbb5f8c80b86db42
MD5 60f1a9374f504e5d9214ed39e60fa2df
SHA1 82700f49d591c35ebda80007b429cfa8a74d6102
SHA512 673f776d96baf7283c40463ae95577229469f727f68304ab211811eb5a08dbc1558b90f7944497ff1d8c4ecd8088c776a088a548588ecb11d277a91bedc47669
SSDEEP 96:xSDZ/I09Da01l+gmkyTt6Hk8nTSazVV+wpjBnEgKpDO4xchoS05:xSDS0tKg9E05TSw0GBEgKO2chr+
TLSH
T14B919C9A1974708D7D8E30B02CAE5B05AB38232CC61711B4DCE550DF8896A0BB7A397A
MD5 SHA1 SHA512 SSDEEP TLSH

Images/list/drivers/other.png

SHA256 d6a95ee70b7291fd9e14d9309a6807c8be40250073f15971327ca81457f2db73
MD5 5d1c1014c36bac41e860269f4521dfcc
SHA1 e0226d3fe6e4ffbc831dceb19d3395554d78e59f
SHA512 b20f41467e591a18b23b8d342b75227cc1bbb61ff8aa4c5d3a4619117ede345eb48cfaf2331fd980bda4a0d4f74385999491750218554fe522495b865eeb9185
TLSH
T1B5816B9F8570309E68CE744209CE6057D32C33AC8A573334DEC26ADF8128D07A7150B6
MD5 SHA1 SHA512 TLSH

Images/list/drivers/outdated.png

SHA256 86ab77cc8d25453f2fad47f27870d7e3746ada4dbe27d23fc631bd5cda824112
MD5 3dea60373ec9fe2ba814f2bb0bc6ffa8
SHA1 ef11150e7cbd066bb868cdbeb222df3cdbcbf6fc
SHA512 4da4e32500ad78e3dde0e22a5daef71f29364db334e6e9ca1fe295f0d4e274816db1ac469fa5027716c25a89c34f4f8eaf8cc89281bbd13671fff6df718071b6
SSDEEP 96:xSDZ/I09Da01l+gmkyTt6Hk8nTZrHgqVJaHTDdqmmmI:xSDS0tKg9E05TZXJMdnmV
TLSH
T1B4916BB689B450AF585E7C23098E4641D335B33C92163338E49288DE6085EC3BFC74EE
MD5 SHA1 SHA512 SSDEEP TLSH

Images/list/drivers/power.png

SHA256 df426f4b5be8b15b310cf531e964a70cfc8e8ada3ea0e93ce798a037f2cb3abb
MD5 fda5356a66bf94d04657443a29abf93f
SHA1 618f4248173027f63e63b9c2b56c4d2a8a619045
SHA512 cbd8094dfe5d4ee456eb98940d9c660626d94e1970f29b8f8e8366fa8318c9f61d11a3ef4195276280df76670ebb669ba28c823200dde846c0cc8f271b6a34c9
SSDEEP 96:xSDZ/I09Da01l+gmkyTt6Hk8nTUtxUXLSxriltXE/cV:xSDS0tKg9E05TU3UXLSxiXXE/cV
TLSH
T12C917E9DCC78069E6D9F79414E890159D35852BDE29A3F78D851A6CF00EAD03ABC1074
MD5 SHA1 SHA512 SSDEEP TLSH

Images/list/drivers/printer.png

SHA256 f2788843bff50f3843e0c56372f7e8bcd36dbad8f0cdb42c1fdea7872b095499
MD5 28e039496027da7081d4e26a17d84aad
SHA1 1bdff5ca394322bc4c8b50b54e0f8a262c01850b
SHA512 954da366e1bfa2fc5d32edcc0d265d8b9b37216c8e3fd7058cf092fcce28015a884375ead20d5fb62aa52ad9f894210a362807e34cd45cfe24ad294efdb9a97e
SSDEEP 96:xSDZ/I09Da01l+gmkyTt6Hk8nTGsH5C5GxAb4W:xSDS0tKg9E05TTZaGPW
TLSH
T189919EF98C54911FF49D705226CFA803E395339EA51B3231C886A4EFB05BD0B27B61B0
MD5 SHA1 SHA512 SSDEEP TLSH

Images/list/drivers/software.png

SHA256 0ed8f9a17959c4e03bafbeb1d9707338e916f77cea6821db855035eb9f661099
MD5 8184c4e93d95a559a375a45f5c1c3c3b
SHA1 f6b03a43bbab33a361d6a9c86bbe6a7f7dd50ee6
SHA512 88d9d65b657b706528a7150854e322a70e85a9a5b86b4d0260d245d98e6e2fabccc01cf6b08db9567d0903600e6c560813d1892595d2f2aebfe60d1a295c429b
SSDEEP 96:xSDZ/I09Da01l+gmkyTt6Hk8nT6QXQZOHYR5/0:xSDS0tKg9E05T6QgZO4Ry
TLSH
T10C917E1B9EE0AE876D8FB8910ECB4605B34CB77C09063528A29A55DF0013D851F56C6D
MD5 SHA1 SHA512 SSDEEP TLSH

Images/list/drivers/system.png

SHA256 1fbe89a4480cc1f625050548941f500e8c5454fff2cf618a5259bc658f0573cf
MD5 6dcaa0eb68deb810e42f4024873a5b33
SHA1 2aa3e53a66a5301b4415216fcc0dbb8d050cfb71
SHA512 036acec0feb2b04fa9640d518aff382de2f4ac308b4ea589e64de8456be2d443f085df5e1984ebd189b04900f6545c2fb0a7464665b37a540bc6ed7e59a29b42
SSDEEP 96:xSDZ/I09Da01l+gmkyTt6Hk8nTnCE3xP5A2EtsI8bPx+HIGPjAvN1i:xSDS0tKg9E05Tn3P5EKI8bpkzjm1i
TLSH
T137917E6B7C2050EFB4CCB1610FCE2141AB59763C9DA6B774A8E11EFD0850E0A5F52062
MD5 SHA1 SHA512 SSDEEP TLSH

Images/list/drivers/uptodate.png

SHA256 4615eec85377e16263fe2630b6009c69d76264ad4da3c3e1708588a9d1f9addb
MD5 b67849ec0a906f99af9a5198d10de73b
SHA1 5cebfe75c5fe91ab590fa2cb055eb2bac2dc60ab
SHA512 6a9d54d2106f73fa00454d57d9820d85ba8baf731125a417ab1da43ae587edd71390edac520c008f5aaac6c6bc07a4f83115aae68497b35f8fa2efa0d0d232a5
SSDEEP 96:xSDZ/I09Da01l+gmkyTt6Hk8nTETArl7iR7rNfqH1wd7:xSDS0tKg9E05TUArlmRgH1w1
TLSH
T1D1918E9F8570404DFC5D71D12CEA4247FB7D535C0596353814A7A1DF14C9C2A2B994E9
MD5 SHA1 SHA512 SSDEEP TLSH

Images/list/drivers/usb.png

SHA256 570f45f497d470b7cddb0f4822e20cac7501c6148723a75d33411c0b439e8eee
MD5 ab1885df4332f9d2932b463b0765e0c1
SHA1 cef929e9f99c2b3df91340e3a3e29e03c6d367d0
SHA512 3954ecdbded860fd5ef4cb1b95f7f7a3b8d960259e2b49c373881a164b8b3c157c48816208585d5bedf13d97a52ee043434e988fb32fe857aa133c76504d1907
SSDEEP 96:xSDZ/I09Da01l+gmkyTt6Hk8nT/GcEhjof2iAQVe:xSDS0tKg9E05T/jZvle
TLSH
T18D919EBE5E3060EF7D9976620DCC1541F723672C823B3F6CA0A024CEA825D072F7A465
MD5 SHA1 SHA512 SSDEEP TLSH

Images/list/other.png

SHA256 b02effdf6368f1d8547cc2d43b51d1b4c4d74291da07cf630f25f40f4947b9f6
MD5 ba339894346db9ea09ee8876a671664d
SHA1 7fef3eb2280edc21d273168f01886992c3ade6e3
SHA512 33092468c2232146dc67c621b43b35e2010908357413bf0352f223ae941265b08656484eaf7abd71dc91daffc486eb469df3e96c114b708e49c848a36b0c35da
SSDEEP 96:xSDZ/I09Da01l+gmkyTt6Hk8nT/fTeQj5gvXHHnMAdR+I:xSDS0tKg9E05T3TNKvXHHwI
TLSH
T165918E899BE0706FBD9B38601E8A41079B95217CCF913F29E2E5B1D930D1D47BF2E061
MD5 SHA1 SHA512 SSDEEP TLSH

Images/list/process/bho.png

SHA256 b69304514ddb7f9c8b6f41d669c10f728910b6a39b6fee5232986a01d27d0d1a
MD5 f210c9f53df46ce2f08727c4ba1877d2
SHA1 77ef03b92f63bd872c76f4a7c8cd48c27e1a497d
SHA512 8956191964e2466032f80a73d4f42ea45ca04b58321fe85a1ad68ba6ef91c1b2c20f48a5e02c62c078584b35d32891b8cb8d0069addf15317172f234d55dbecd
SSDEEP 96:xSDZ/I09Da01l+gmkyTt6Hk8nT3AJyENvDWUEm7rhdzc0L:xSDS0tKg9E05TQJXDEGr00L
TLSH
T19A919E4FDC60E45AAD6DB1C22CCF4247778561BC9B26183A31D554DED086D433B730B4
MD5 SHA1 SHA512 SSDEEP TLSH

Images/list/process/process.png

SHA256 33c5f7eda04de051599b415f4b4a57f8c4932bd9f5ea22d3e709813c670166d7
MD5 b7a04ad778251d156f7b860fc24c94da
SHA1 9c1308960abc803f95bdc715f95b97c67ed1c149
SHA512 46b1724dae3e7e64a41b91748ccca40a7099ae3dd146f44b9f46fe794e0b4e7435f157bd34053cc97461ae276606002b9248b5c3288826d56e904ef2fddc1572
SSDEEP 96:xSDZ/I09Da01l+gmkyTt6Hk8nToR58UHVoxBbif2aYRsN:xSDS0tKg9E05TI54nbiOaBN
TLSH
T183918E9ED4B0A5DBA99E70D24ECB80C9A321933C6517323819C1DFED00D5E0B7B5A0A2
MD5 SHA1 SHA512 SSDEEP TLSH

Images/list/process/startup.png

SHA256 021bc2a9a0b9dc552cd9b3c7cd503322ef1045f9c7c560a8bf7c693e40a33448
MD5 2b8dbc56f8d56d98a26202d0e0782cb2
SHA1 e326bd559672a8725d9947caae818b6746248e2f
SHA512 afab11f98d7547f8e1a1701c6592bd4172ce95eb022946287dd35acb836097ab24a741f45fd612ea0373d821de5b742b5cd7d098026d9fbf947e0b8cae0819c4
SSDEEP 96:xSDZ/I09Da01l+gmkyTt6Hk8nT/9f+Eo8Ra9skLc:xSDS0tKg9E05T/hOdS2c
TLSH
T1C5918EFE897040EFB4BB35118D8E530DD777B36CC1872A68A0C4DADC61E9C465B55461
MD5 SHA1 SHA512 SSDEEP TLSH

Images/list/recommendations/rec_malware16.png

SHA256 21f0aaab5c2325947e33e8e4aac560faf5a4900fc49fd82607601dba69c1704a
MD5 c0566f1de572bb5cf2084240b68b6c5c
SHA1 365f4b8fc5c14916a61b2e7685ecbd647409e453
SHA512 0a5c2f53fba314d3215740b42be1850480a14909f4b66cc094e359f94ab0674d8e056c93ceb245ca3e101bfb52e52301d1d718a1eb66ddbf5794870e1ca9bcba
TLSH
T14C715D5F8CB0905DAC6E7CD30C8A12429B66377D4967333CA0D274DE3456D4B7B63496
MD5 SHA1 SHA512 TLSH

Images/list/recommendations/rec_malware24.png

SHA256 2b70f2eb0b0fb823c7bed647763af9fc7db7748a0906acff18875dbcbb81ba59
MD5 b5cfd63ded8fc9dd0cdf68063d7dd302
SHA1 e1a73dd3d0c9f9c2b5426f734aec4997a9e9409a
SHA512 4fa654e3d4be237c04466812ae6e941a386644f92445bbb07cad738c286adac0195f7af3af5978af34d4bd1eac1e66c67547de96a4843f7e3148fd8b96caab87
SSDEEP 96:xSDZ/I09Da01l+gmkyTt6Hk8nT0BA64D99GFKk5IgMC:xSDS0tKg9E05T0qEmgMC
TLSH
T18C918EAA89D0255FA448355309CE1146DBAE733CA65A3924D0D057CE04A6D8A3FEA4A1
MD5 SHA1 SHA512 SSDEEP TLSH

Images/list/recommendations/rec_malware32.png

SHA256 8be185c8ce6e261e9dd5f74654b81802e68fad68ecac9d97c72accb98da75507
MD5 f35ab0ef4d05f5689c37b8cebb0da7cb
SHA1 3b13c26e7bcd98769865c6ad097263f087842207
SHA512 409973198cd759b5f2b6a70257a9fc30ec238b00418e0f33929f6d1442d7408f4c58792d8889247aa7126682c3128a4e31df355b35f78def64d4f897f5beb678
SSDEEP 96:27SDZ/I09Da01l+gmkyTt6Hk8nTIfSyVrXp/VNGh9HcbuvrhZuVN:oSDS0tKg9E05TzyPdIh98wnuVN
TLSH
T1BDB18D6F4990E2DFFD467E935B4D4201AB12262DD6E23B78E1E051DC988AD0337262B2
MD5 SHA1 SHA512 SSDEEP TLSH

Images/list/recommendations/rec_system16.png

SHA256 84a38e7d96a03a210cf27273b86488043cb693c9578f4539c2183f26d5ae027b
MD5 f76ad061374a1bee3103d72a73c9695d
SHA1 64e32d7b2666e53a1b51c82e97927b5605f72ba5
SHA512 5c72d08ef981c7602171c02743ce35606ecff8de3a0462f30150e960bd0f02898c19baa1512c371d4ed756ef9be80182ca4922725052bb228a61b2b648ba4be2
TLSH
T120717C5E957074EE2C6CB6A14ECE4304D71462BC95873A38BEC828DF90A1D877F22474
MD5 SHA1 SHA512 TLSH

Images/list/recommendations/rec_system24.png

SHA256 5012a9c689730f155ca23da743512a55ff0fc15530a21935e42d8d473d552b3d
MD5 99a9eff6cf81f72f930d30f5f920c045
SHA1 c935051c296510a934c9527920713c08f8d8c74f
SHA512 1ad05856c35791d2f66ccd43e5265f860dfbbd987ef0addd90dea67f892395deb7402925a27fd6a234f09ab47e653786d88812cc48ddaec31dee577879305b68
SSDEEP 96:xSDZ/I09Da01l+gmkyTt6Hk8nT8v/QCy0HB9WAUB9y/S+c:xSDS0tKg9E05TwQCRZKT
TLSH
T188915C5EA960319DACEEBB121CCD4344FB75337D5A6135A4E4C874DE1055D072FA04B2
MD5 SHA1 SHA512 SSDEEP TLSH

Images/list/recommendations/rec_system32.png

SHA256 1b6d1693b662bedd793fca9afcbb33b1a487f3a7c08e81a42d3cde7337d2d976
MD5 0c5b0ac322825707689a4b91d49f271b
SHA1 815b69d0c4a2c6ce81e6d507fc18eb9b8a8a3a9a
SHA512 88f8ffaf2674f613da0023395f31f78e5bd2261deb4355ad2397f3988a879f151959963a73794cfc08701b4061bdad2a178d39ff325ee99176296ba9859f15fc
SSDEEP 96:27SDZ/I09Da01l+gmkyTt6Hk8nTjTddSMDuDogJW0VTnct:oSDS0tKg9E05TjvSVIWTnct
TLSH
T17FB1B04B9E50A0CBB48CB5610D8FE741BE1D124C15EF372CA88B18FE905DECA6F500BA
MD5 SHA1 SHA512 SSDEEP TLSH

Images/list/recommendations/rec_unknown16.png

SHA256 37159177509ffbcd6256849d436e18f93413ecb8442639c49f1db2d6ad26e599
MD5 e8109302856707dc845cc852b3f83e75
SHA1 c265e52a05b60aaddf1e5b26a0ddc1700366a74c
SHA512 3a26fbe11f67c64b2533d3a3fce9c13bf2064b83bb85db37c44736c7bbf5c18f1e4b1a92c6deabe85f73cfbee476fef2cc0215863a26d87df748e51c980e8713
TLSH
T16C717DAF8970719E74DE74110DCE8441D7A6227C826B3774C4D085EE04E6D467BA68B4
MD5 SHA1 SHA512 TLSH

Images/list/recommendations/rec_unknown24.png

SHA256 b49e127a04d8430a9a490b6f9de6ea690e6c2217c29654cb1e734ea9587bd62c
MD5 b9bdde1354937615212c23dbffa2ce3e
SHA1 f96c7c3a23dce369a3ffc47cc693ea46ce1d0ff6
SHA512 dbed37c64fe9a5b92207bf99c652ca12ffb27c6e18f0b0f5664529dfe9b96bdc280aff081a3d8d799eeb3f9ab7f2fddc96f49e50176f566b4599f4cf4131ba75
SSDEEP 96:xSDZ/I09Da01l+gmkyTt6Hk8nT8KHUJ37J3UCes4WFrv/vdk:xSDS0tKg9E05TVHUJ3dAzWFrv2
TLSH
T1E0918D9FDE91341E09ACF6800ECE5003E774387D8A1B333C70E1B5CE51AAD0B9756168
MD5 SHA1 SHA512 SSDEEP TLSH

Images/list/recommendations/rec_unknown32.png

SHA256 2c461676d1cad9381f117b94f4979da6ed9508c076e8eb2e82d2fa39684c4d62
MD5 5af170a0dcf6be97823fc4cdacf11314
SHA1 a6dc60a949aaf7d47fd60716c350944ad29e99e2
SHA512 1a7d7421b1efcdec50bf3375f4de0636cc9bec564f961a6ccaa7e0d1a78ee407783eb60aa5e233401b6744b881b44ca3f3be71c2cb7d809055287511dee490c1
SSDEEP 96:27SDZ/I09Da01l+gmkyTt6Hk8nTGHi/vhNmxF9om5W8ksljePV+i3O3B1:oSDS0tKg9E05TG2No9oEW8k2kdO3P
TLSH
T116B18C9EE8D0648E6CEC7A130DDD2742DB7C76FC491E31BCE4E624EA4060D02274B875
MD5 SHA1 SHA512 SSDEEP TLSH

Images/list/recommendations/rec_unwanted16.png

SHA256 d1ea7def512b08ac7d71ba9529b3b43e305ad617cfa831a97bfafac63e6ea05b
MD5 59af69429f5c1c35a4c1ea9e8c5190ff
SHA1 292cf5aad97ac1b29d81aa6b99926dd373acadd6
SHA512 2d88ec64ae4af622c9c3f132c4c716ae88b5cd69604942b557b733fb747f0637a2d5b88c0b7ef6287b2a863531e14bc87fbb79192c39735c44921401da156be6
TLSH
T18C718D8F7D70B0AEB8AE79620ECD0106D7AF615CFA5B3A78E1C054CE0054D0BAF59452
MD5 SHA1 SHA512 TLSH

Images/list/recommendations/rec_unwanted24.png

SHA256 b6d62ab89ee9c65c0b586cd209dc74c44057a7e9a05d1f6a09994cdaa8ae6638
MD5 5c38e8a7fe0a5e3500ed4862f58b91e6
SHA1 87b21757d503c9ff5304b9a645ea725d30920aed
SHA512 7807bcb2d302ad4e4fc28ed91fdb7480b94c0c101bf60b9c6afb0a584692a9bb83e0e30d402dfdb03da5b2f841c53e6f67523804c520fbf4ed5d1c3b2f9c91e9
SSDEEP 96:xSDZ/I09Da01l+gmkyTt6Hk8nTyjR7eToS1CJBq72hYOTN:xSDS0tKg9E05TyjRSToS1Cb4KYOJ
TLSH
T14C918C2EED68619FAC9DF6809A9C014A9FFA607C9D4271304593E8FE504BF0267910F9
MD5 SHA1 SHA512 SSDEEP TLSH

Images/list/recommendations/rec_unwanted32.png

SHA256 4b44f33170e387e69bd013d19bb8dd4577305edd55b5535fca9111f3777a899e
MD5 75b5b5f584fc826b781efac8d35e34f1
SHA1 e3cbc4de780c12e47b1a8bc266309d7281b51aff
SHA512 3cbc653853784215e1857921163867e1a8ec666c96379dd45f827a6110743ae52e36bfc1587b241d5e68ae34256afdd89a666b5670a9de1d2313206988bfcdff
SSDEEP 96:27SDZ/I09Da01l+gmkyTt6Hk8nTjT+79ORT7ROzUfTU+HArbO+Nx6sl/Jx9v6BCl:oSDS0tKg9E05TjS70RT7ROzUfTnHWXff
TLSH
T1B7B1AFEAC92AE0DAC8CE75024D4C2A01FF5B918C079E371EE5C375CF4958A6B1B910ED
MD5 SHA1 SHA512 SSDEEP TLSH

Images/list/recommendations/rec_userapp16.png

SHA256 633406ff5a29e0eb45304f660e2d29ed731adc91db19479e30bc9187514a82a5
MD5 4a41188a6e12ca5c22d7c87e23a60fff
SHA1 eecef2bd86439d92e2796e712530fc0e809c30e4
SHA512 269078d2ecad49ffe37e20b95e8bf336e4164258fbcdbeafec9824288b893903c29426f31dfd9c17f381b56c9f1480559469179de3cf4084cb4027a0b419ceb8
TLSH
T139715BDEAAA054EE6899B9110ECE8282A76D23BC89133674F5D215DC15EAD076FB0029
MD5 SHA1 SHA512 TLSH

Images/list/recommendations/rec_userapp24.png

SHA256 c81291cafc01616cffae74ebb245b0ef1ca02c262320517fb0422fdb96d5bd77
MD5 55066572693139f75f95b78e7e55007e
SHA1 8899aaa2aa524f2523e2328073c3dfd7065bff17
SHA512 463eb2da6b3d2fb2f392161cfb497fe0b5725f4b601d62d0867ea2666b3da8392c35af47c27f7fe920bae4941f1aa26d2afb5eaf5b49d0c0869276896d80a73a
SSDEEP 96:xSDZ/I09Da01l+gmkyTt6Hk8nTqxH5L2WB4tXZrJ3:xSDS0tKg9E05TS8WB4tXr3
TLSH
T16B91AECF8C60705F2FDE3A8309D905D35316627D96853474E0E268DE19A2D57AF3A076
MD5 SHA1 SHA512 SSDEEP TLSH

Images/list/recommendations/rec_userapp32.png

SHA256 14b11aad115a8fa10d78e4a94e62b4f67113f9bc81c66b431679e22fb104aa08
MD5 9b3eea65c8c4196c9b80186ef4413e26
SHA1 ec4eb6a9bd8c4cda7a747e74caad1c9adfb9da83
SHA512 72b4e1f2baa30ee481784a77484c2cbb227c058e4dfecfef016c57121ae5a908f16509e8123f993a7b06cf89206c956c55e37be6fd1d1d4eae71d6e526921371
SSDEEP 96:27SDZ/I09Da01l+gmkyTt6Hk8nT9fSf1ISv2tEvORxwwDyYHR:oSDS0tKg9E05Th+1r2tTwwDyIR
TLSH
T18EB18CFFB1A4218C69A87B110CD911D6EF5A273CCD8A3328C0D455DE20ADA4623AB07B
MD5 SHA1 SHA512 SSDEEP TLSH

Images/splash.bmp

SHA256 4edf0bab5323fe66ccddb33d084e13506a53fc21e1151ac069d1f9b4b7b798d9
MD5 959c1d8648a28875f6da0ff99fb9de4d
SHA1 012994fb05ac3671008808aae23f008c1e9a3a0c
SHA512 f9f534e4d39e530868be134b2aa80f221b904a7e93baf6a4f68da8d8a802bf4d94a67dfed8469d0fecff75cb6b426e0b0eec82552659d6cd6171e5f85f9f4ac3
SSDEEP 3072:+tjSmSS5QBSS9SJ+rUSspFn5t4fQygDURlqSzO49xAB5/P5DSEJgWJBDT+NBY55w:FwyUPUubB3IakF14MtLEX2
TLSH
T12694A675DD542A47A28171F228B73CE9640AA1E054538B9FBD0328185FEEF7AC7207DE
MD5 SHA1 SHA512 SSDEEP TLSH

LiteUnzip.dll

IMPHASH f7a84048399bc4a2d1221cc8bdd7c96e
SHA256 bf5deda42ce9e6e1570d6b79d9a16099def9774c419be56a284908f6c33933b1
MD5 acc00da2fdbb86491f1c441be35cdd39
SHA1 84c2263dcffff7fa45571f6988035175a112fec0
SHA512 1852fe54c535a77711a31dd4d7569ea11b8112ed7f316f3310c7504210499f8af603dcfc9337fbfc308affefccbb5140252ea10b75410b1ceefa7232ea4a9ed1
SSDEEP 768:B8zd/VxMu48xq5j+HW6D4nf6HSE53CtRGXDpD2F+8edR5xPa/JML2uwov:4d/VxMu48YQbtSE53cRGzpz8G0BKjv
TLSH
T1ED335B87AF9281BED4B28A3954F723365C32761673ADCCC3D24A085518739D1A37A36F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

5b:50:a0:ae:e7:d9:83:67:7e:1b:3b:ed:6c:3a:21:9f:0f:e0:97:0d

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Paretologic Inc.,OU=Paretologic Inc.,O=Paretologic Inc.,L=Victoria,ST=British Columbia,C=CA

Chains

Feb 13, 2014

CN=Paretologic Inc.,OU=Paretologic Inc.,O=Paretologic Inc.,L=Victoria,ST=British Columbia,C=CA

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:2f:4e:e1:35:5c

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 13, 2011 - Apr 13, 2019

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Paretologic Inc.,OU=Paretologic Inc.,O=Paretologic Inc.,L=Victoria,ST=British Columbia,C=CA

Serial Number

11:21:f9:94:5d:68:b6:df:dd:55:72:92:b6:3c:5a:30:15:e1

Issuer

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 25, 2013 - Feb 26, 2015

Minor OS version

0

Major OS version

4

Entry point

24224

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Name

.text

Size

28KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1024B

Virtual Size

595B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

shared

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

LiteZip.dll

IMPHASH a4f9b29cfb961f52cf212be6c0353a3b
SHA256 cf1f238449738ec2da2a93e23b1b30f6449639ddc7d283cfcbe36c103b947cc0
MD5 96488b5b095566a69e4159552af83c22
SHA1 15ea99c76e5ef12911db5e9c0781d6a8df5446a1
SHA512 41b8bd0ec95d784358b4614e19af1ee7254dce8c6ae8bf6cd0f2e561995f48153629c90f183b37d1e4ba0ae15140142cff9e23312654053a945f487f57373727
SSDEEP 768:qy41BN8y3eMQ7kaXYeluJGa2vhZUBgAf9rY1Ve8R0jr5J2uwof7:qy4vqWThel+Gh63f2Ve1RjD
TLSH
T135236C43AB9981B3D4D68B3804EB2B33AC376A9257F989C7C385187D5D627D0B13835E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

e9:4e:c5:fd:c6:3a:1c:8c:60:43:ef:f3:81:f9:4c:a2:94:e6:24:1b

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Paretologic Inc.,OU=Paretologic Inc.,O=Paretologic Inc.,L=Victoria,ST=British Columbia,C=CA

Chains

Feb 13, 2014

CN=Paretologic Inc.,OU=Paretologic Inc.,O=Paretologic Inc.,L=Victoria,ST=British Columbia,C=CA

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:2f:4e:e1:35:5c

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 13, 2011 - Apr 13, 2019

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Paretologic Inc.,OU=Paretologic Inc.,O=Paretologic Inc.,L=Victoria,ST=British Columbia,C=CA

Serial Number

11:21:f9:94:5d:68:b6:df:dd:55:72:92:b6:3c:5a:30:15:e1

Issuer

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 25, 2013 - Feb 26, 2015

Minor OS version

0

Major OS version

4

Entry point

21168

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Name

.text

Size

25KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1024B

Virtual Size

668B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

shared

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

LogSettings.xml

SHA256 5edb83fb252366bd931042e40d87e064d580ce4dddcb9965389e478ae6866855
MD5 e5572a4a77ba9f2f741fabe73b9071c0
SHA1 6ea8cb9289863566f618741372f28eaf7d450f98
SHA512 4461dc586252382dfad7e50418aeb20d108aa7e1a237a62e45ffd0ca35a222792c5702e224655575754cc9ca8f128bdecf43ea7fe19ad94572c8458420b9052e
SSDEEP 192:MZVAU9ZA9J9coEJIERF1hZFd6yEX9R8o5FIUYMXLDXZ7uMoZk2XRiwj:MZVAU9ZA9J9coEJIERF1hZFd6yEX9R8x
TLSH
T15FD14741F13775FBC3F8623C06A7AD00326D07AD6144EBC5445C26A27EA29C6D0AE2EB
MD5 SHA1 SHA512 SSDEEP TLSH

MyResources.dll

IMPHASH 2e168f9fee36c65804acc85d4752ed9f
SHA256 00d24b7d2a05ae0038f8378ae90f503914e6389251d7309520d1d027465f24ee
MD5 927b0a5a7cad78eba75c433b8ddae0c2
SHA1 6e59c9891ca3f8481b885bcda4b62cd9e157d783
SHA512 0898f5e72c581b297b7aafea8ef33327410648e14c7de16a75f6dd2efa3cc7cd124b5bec9eac931c4f043e7698b590af0bced2c03bc62f6a7a78221a05506f68
SSDEEP 12288:7XFLM8Gh2/liKmhVRlZKmhVRlmKIBbscZOG:9MEiROl2zG
TLSH
T182B47B42A3F94528F2FB3F356D764A640A36BC86AD35C24E1650688FADB5B42DD30732
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

01:25:33:f0:2b:a0:1b:51:f7:92:29:ba:d2:42:58:cc:eb:5f:c2:96

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Paretologic Inc.,OU=Paretologic Inc.,O=Paretologic Inc.,L=Victoria,ST=British Columbia,C=CA

Chains

Feb 13, 2014

CN=Paretologic Inc.,OU=Paretologic Inc.,O=Paretologic Inc.,L=Victoria,ST=British Columbia,C=CA

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:2f:4e:e1:35:5c

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 13, 2011 - Apr 13, 2019

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Paretologic Inc.,OU=Paretologic Inc.,O=Paretologic Inc.,L=Victoria,ST=British Columbia,C=CA

Serial Number

11:21:f9:94:5d:68:b6:df:dd:55:72:92:b6:3c:5a:30:15:e1

Issuer

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 25, 2013 - Feb 26, 2015

Minor OS version

1

Major OS version

5

Entry point

4721

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\_BuildSystem\_builds\RCP310\SpeedyPC\MyResources\Release\MyResources.pdb

RegCurePro.exe

IMPHASH d50e25ad2d263ce41a1e3025d8746b1b
SHA256 3b15089bce8ca976491c3e6cec4417cded1e7abc6072242deade7aabb2e2ba00
MD5 4b2d6c65f9085cd0e4c91ac75556fb98
SHA1 8faf4f05b1cda2c16983f1234e3e8ee998aa541d
SHA512 bb1dc03a2a968b14ab6b5f27c12c1b452bde8bfb5ca3e9344ec3cd288d3c844d6376429581f9304dcc9688de9882588a361b2c59c668d0314c6a340665e16476
SSDEEP 98304:/cjUgm1RhSLpn5+50A7b0q3nnG/bdwUXyUIetuP4/Co9GBofkSszEb:/cwgeSFQDGl0jw/Co9GBCkU
TLSH
T1E426BE217B85C179D262153B91AAB37E626DF7311B3591C366A00E3CAD310D3BA3D72B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

55:a4:27:b8:2e:13:f0:9a:ec:a5:24:d5:59:9c:cf:61:a8:37:f1:e9

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Paretologic Inc.,OU=Paretologic Inc.,O=Paretologic Inc.,L=Victoria,ST=British Columbia,C=CA

Chains

Feb 13, 2014

CN=Paretologic Inc.,OU=Paretologic Inc.,O=Paretologic Inc.,L=Victoria,ST=British Columbia,C=CA

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:2f:4e:e1:35:5c

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 13, 2011 - Apr 13, 2019

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Paretologic Inc.,OU=Paretologic Inc.,O=Paretologic Inc.,L=Victoria,ST=British Columbia,C=CA

Serial Number

11:21:f9:94:5d:68:b6:df:dd:55:72:92:b6:3c:5a:30:15:e1

Issuer

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 25, 2013 - Feb 26, 2015

Minor OS version

1

Major OS version

5

Entry point

2499417

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\_BuildSystem\_builds\RCP310\bin\Release\SpeedyPC.pdb

winmm

timeGetTime PlaySoundW

rpcrt4

RpcStringFreeW UuidToStringW UuidCreateSequential

wininet

HttpAddRequestHeadersW HttpOpenRequestW InternetConnectW InternetOpenW InternetOpenUrlW HttpSendRequestW InternetWriteFile InternetSetFilePointer InternetSetStatusCallbackW HttpQueryInfoW InternetQueryDataAvailable InternetQueryOptionW InternetCanonicalizeUrlW InternetCrackUrlW InternetReadFile InternetCloseHandle InternetGetLastResponseInfoW

shfolder

SHGetFolderPathW

shell32

SHGetDiskFreeSpaceExW ord165 SHFileOperationW ShellExecuteW SHAppBarMessage SHGetMalloc SHGetSpecialFolderLocation SHGetDesktopFolder DragQueryFileW DragFinish SHEmptyRecycleBinW SHQueryRecycleBinW SHGetFileInfoW SHCreateDirectoryExW SHGetSpecialFolderPathW ShellExecuteExW SHGetPathFromIDListW SHBrowseForFolderW Shell_NotifyIconW

ole32

OleInitialize CoTaskMemFree ReleaseStgMedium CoTaskMemAlloc OleDuplicateData OleDraw CreateStreamOnHGlobal CoCreateGuid CoFreeUnusedLibraries CLSIDFromProgID CLSIDFromString CoGetClassObject StgOpenStorageOnILockBytes StgCreateDocfileOnILockBytes CreateILockBytesOnHGlobal CoRevokeClassObject OleIsCurrentClipboard OleFlushClipboard CoRegisterMessageFilter OleLockRunning DoDragDrop OleGetClipboard RegisterDragDrop CoLockObjectExternal RevokeDragDrop OleCreateMenuDescriptor OleDestroyMenuDescriptor OleTranslateAccelerator IsAccelerator StringFromGUID2 CoInitializeSecurity CoInitializeEx CoCreateInstance CoUninitialize CoInitialize OleUninitialize

shlwapi

PathFindOnPathW PathAddExtensionW PathGetCharTypeW ord215 ord217 PathAddBackslashW PathFileExistsW PathIsDirectoryW PathFindExtensionW StrFormatByteSizeW PathStripPathW PathFindFileNameW PathUnquoteSpacesW PathAppendW PathIsUNCW PathStripToRootW UrlUnescapeW SHDeleteKeyW PathIsNetworkPathW PathRemoveFileSpecW

gdi32

GetWindowOrgEx EnumFontFamiliesExW GetSystemPaletteEntries GetNearestPaletteIndex GetPaletteEntries CreatePalette CreateRoundRectRgn OffsetRgn Rectangle SetPixel StretchBlt RealizePalette GetDIBits SetDIBColorTable GetRgnBox GetTextCharsetInfo EnumFontFamiliesW CreateDIBitmap GetTextMetricsW Polygon Polyline GetTextColor GetBkColor CreatePolygonRgn Ellipse CreateEllipticRgn PatBlt CombineRgn SetRectRgn CreateRectRgnIndirect CreateHatchBrush GetObjectType SelectPalette CreateBitmap ExtSelectClipRgn SetTextColor PtInRegion SetWindowExtEx OffsetWindowOrgEx SetWindowOrgEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx GetPixel CreateRectRgn SelectClipRgn SetLayout GetLayout SetTextAlign MoveToEx LineTo IntersectClipRect ExcludeClipRect GetClipBox SetMapMode SetROP2 SetPolyFillMode SetBkMode RestoreDC SaveDC CopyMetaFileW CreateDIBSection GetStockObject CreatePatternBrush FillRgn CreatePen CreateDCA GetObjectA GetBitmapBits BitBlt GetCurrentObject DeleteObject SetBkColor DeleteDC ScaleWindowExtEx GetTextExtentPoint32W CreateDCW GetDeviceCaps SelectObject CreateFontIndirectW GetObjectW SetPixelV GetTextFaceW SetPaletteEntries ExtFloodFill GetViewportOrgEx GetBoundsRect FrameRgn DPtoLP GetViewportExtEx GetWindowExtEx GetMapMode CreateCompatibleBitmap LPtoDP CreateCompatibleDC Escape ExtTextOutW TextOutW RectVisible PtVisible CreateSolidBrush

comctl32

ImageList_GetIconSize InitCommonControlsEx ImageList_Draw

user32

MapVirtualKeyExW SetWindowPlacement CharNextW UnionRect GetWindowPlacement GetMenu GetDlgCtrlID TrackPopupMenu GetCursorPos DefFrameProcW SetMenuDefaultItem RegisterWindowMessageW IsDlgButtonChecked SendDlgItemMessageW GetDesktopWindow SetActiveWindow GetNextDlgTabItem EndDialog GetWindowTextLengthW GetScrollPos SetScrollPos GetWindowThreadProcessId IsWindowEnabled UnhookWindowsHookEx GetMenuState GetMenuStringW AppendMenuW GetMenuItemID InsertMenuW GetMenuItemCount RemoveMenu IsZoomed GetMonitorInfoW MonitorFromWindow wsprintfW DefMDIChildProcW DrawMenuBar TranslateMDISysAccel FrameRect GetUpdateRect CharUpperBuffW SubtractRect CreateMenu GetWindowRgn DestroyCursor SetScrollInfo InvalidateRgn CopyAcceleratorTableW SetLayeredWindowAttributes EnumDisplayMonitors RealChildWindowFromPoint UnregisterClassW GetSysColorBrush DrawFrameControl DrawEdge DrawStateW UnpackDDElParam ReuseDDElParam LoadAcceleratorsW InsertMenuItemW CreatePopupMenu BringWindowToTop TranslateAcceleratorW ShowOwnedPopups SetWindowContextHelpId MapDialogRect RegisterClipboardFormatW GetMenuItemInfoW CharUpperW WindowFromPoint LoadImageW GetIconInfo GetNextDlgGroupItem SetRectEmpty SetWindowRgn IsRectEmpty MapVirtualKeyW GetKeyNameTextW IntersectRect SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapW ModifyMenuW CheckMenuItem GetMessageW ClientToScreen SendDlgItemMessageA IsChild GetCapture SetWindowsHookExW CallNextHookEx GetClassLongW SetPropW GetPropW RemovePropW GetForegroundWindow EnableScrollBar EndDeferWindowPos GetTopWindow GetMessageTime MapWindowPoints ScrollWindow GetKeyState SetMenu SetScrollRange GetScrollRange ValidateRect CreateWindowExW GetClassInfoExW GetClassInfoW RegisterClassW AdjustWindowRectEx EqualRect UpdateLayeredWindow MonitorFromPoint IsMenu DeleteMenu PostThreadMessageW CallWindowProcW EnumChildWindows IsIconic DestroyMenu DrawFocusRect DestroyWindow WaitMessage DispatchMessageW TranslateMessage IsDialogMessageW PeekMessageW CreateDialogIndirectParamW GetWindow GetAsyncKeyState SetClipboardData EmptyClipboard GetWindowTextW WinHelpW SetWindowTextW MoveWindow SetWindowPos SetFocus CheckDlgButton GetSystemMenu GetClassNameW SetWindowLongW GetDlgItem GetDialogBaseUnits EndPaint GetWindowLongW DrawIcon BeginPaint MessageBeep GetLastActivePopup GetActiveWindow MessageBoxW UpdateWindow SetForegroundWindow ShowWindow LoadIconW DefWindowProcW FindWindowExW GetScrollInfo GetSystemMetrics SetParent PostQuitMessage ExitWindowsEx FillRect EnableMenuItem GetSubMenu LoadMenuW DrawIconEx DestroyIcon ShowScrollBar OffsetRect SystemParametersInfoW SetRect ReleaseCapture LoadCursorW SetCursor SetCapture CloseClipboard GetClipboardData OpenClipboard IsClipboardFormatAvailable ScreenToClient GetMessagePos IsWindow TrackMouseEvent InflateRect GetDC LoadStringW PostMessageW RedrawWindow PtInRect CopyRect GetParent GetSysColor SetTimer KillTimer IsWindowVisible TabbedTextOutW DrawTextW DrawTextExW GrayStringW EnableWindow GetFocus ReleaseDC SendMessageW GetWindowRect GetClientRect GetWindowDC InvalidateRect ToUnicodeEx GetKeyboardLayout GetKeyboardState DestroyAcceleratorTable CreateAcceleratorTableW NotifyWinEvent SetClassLongW LockWindowUpdate GetMenuDefaultItem GetUserObjectInformationW GetProcessWindowStation MessageBoxA SetCursorPos CopyIcon GetDoubleClickTime InvertRect HideCaret BeginDeferWindowPos IsCharLowerW CopyImage DeferWindowPos

version

GetFileVersionInfoW GetFileVersionInfoSizeW VerQueryValueW

kernel32

GetVersionExW GetCurrentThread HeapAlloc GetProcessHeap HeapFree TerminateProcess SetCurrentDirectoryW CreateMutexW GetLocalTime MulDiv GlobalAlloc LocalAlloc LocalLock LocalFree LocalUnlock GetSystemTime lstrcmpiW DeviceIoControl SetEvent CreateFileW WaitForMultipleObjects CreateEventW CreateTimerQueue DeleteTimerQueueTimer DeleteTimerQueue ChangeTimerQueueTimer CreateTimerQueueTimer FindResourceExW GlobalFree SystemTimeToFileTime GetFileSize SetFilePointerEx ReadFile OpenProcess WriteFile SetEndOfFile ExpandEnvironmentStringsW FindFirstFileW MoveFileExW FindNextFileW RemoveDirectoryW FindClose GetACP GetEnvironmentVariableW GetSystemDirectoryW GetWindowsDirectoryW VirtualAlloc VirtualFree GetFileSizeEx GetTimeZoneInformation GetSystemTimes SetFileAttributesW ResetEvent FormatMessageW GlobalSize CopyFileW CreateActCtxW ReleaseActCtx InterlockedDecrement FreeResource lstrcmpW InitializeCriticalSectionAndSpinCount CompareStringW GlobalDeleteAtom GlobalFindAtomW GlobalAddAtomW GetCurrentThreadId GetPrivateProfileIntW WritePrivateProfileStringW GetPrivateProfileStringW SetThreadPriority ResumeThread SuspendThread lstrcmpA lstrlenA GetThreadLocale MoveFileW FlushFileBuffers LockFile UnlockFile DuplicateHandle GetFullPathNameW GetShortPathNameW InterlockedExchange LoadLibraryExW GetLocaleInfoW CompareStringA GetSystemDefaultUILanguage ConvertDefaultLocale GetUserDefaultUILanguage GlobalGetAtomNameW RaiseException InterlockedIncrement TlsGetValue GlobalReAlloc GlobalHandle TlsAlloc TlsSetValue LocalReAlloc TlsFree GlobalFlags lstrcpyW GetUserDefaultLCID SetFileTime GetFileTime GetCurrentDirectoryW GetFileAttributesExW SetErrorMode GetNumberFormatW SearchPathW GetProfileIntW VirtualProtect GetCommandLineW HeapSetInformation GetStartupInfoW ExitProcess DecodePointer EncodePointer ExitThread CreateThread GetTimeFormatW GetDateFormatW HeapReAlloc RtlUnwind GetCPInfo SetStdHandle GetFileType GetSystemInfo VirtualQuery HeapQueryInformation HeapSize SetUnhandledExceptionFilter GetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount HeapCreate HeapDestroy QueryPerformanceCounter UnhandledExceptionFilter IsDebuggerPresent SetConsoleCtrlHandler GetOEMCP IsValidCodePage LCMapStringW GetStringTypeW IsProcessorFeaturePresent GetConsoleCP GetConsoleMode GetFileInformationByHandle PeekNamedPipe GetLocaleInfoA EnumSystemLocalesA IsValidLocale WriteConsoleW GetFullPathNameA SetEnvironmentVariableA GetCurrentProcessId TryEnterCriticalSection ActivateActCtx GetLastError DeactivateActCtx SetLastError FileTimeToLocalFileTime FileTimeToSystemTime WideCharToMultiByte WaitForSingleObject DeleteFileW GetTempFileNameW GetTempPathW OutputDebugStringW GlobalUnlock MultiByteToWideChar GlobalLock GetModuleFileNameW CreateDirectoryW GetFileAttributesW GlobalMemoryStatusEx GetModuleHandleW GetDiskFreeSpaceW GetVolumeInformationW GetDriveTypeW GetLogicalDriveStringsW GetDiskFreeSpaceExW GetCurrentProcess GetProcessTimes GetSystemTimeAsFileTime FlushConsoleInputBuffer ReadConsoleInputA SetConsoleMode GetTickCount FreeLibrary GetProcAddress LoadLibraryW LeaveCriticalSection EnterCriticalSection DeleteCriticalSection InitializeCriticalSection CloseHandle SetEnvironmentVariableW ReleaseMutex Sleep TerminateThread GetProcessId Process32NextW Process32FirstW CreateToolhelp32Snapshot LoadLibraryA QueryPerformanceFrequency CreateFileA CompareFileTime InterlockedCompareExchange GetExitCodeThread FindResourceW LoadResource LockResource SizeofResource SetFilePointer lstrlenW SleepEx GetFileAttributesA LockFileEx GetVersionExA GetTempPathA AreFileApisANSI DeleteFileA GetDriveTypeA FindFirstFileExA GetVersion GlobalMemoryStatus

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter DocumentPropertiesW OpenPrinterW

advapi32

RegQueryValueW RegEnumKeyW SetSecurityDescriptorOwner RegQueryInfoKeyW RegOpenKeyW RegEnumKeyExW FreeSid SetEntriesInAclW AllocateAndInitializeSid AdjustTokenPrivileges LookupPrivilegeValueW RegDeleteKeyW ConvertSidToStringSidW RegEnumValueW RegNotifyChangeKeyValue RegDeleteValueW GetUserNameW SetFileSecurityW GetSecurityDescriptorControl SetSecurityDescriptorDacl AddAccessAllowedAce AddAce EqualSid GetAce InitializeAcl GetLengthSid GetAclInformation GetSecurityDescriptorDacl InitializeSecurityDescriptor GetFileSecurityW LookupAccountNameW LookupAccountSidW GetTokenInformation OpenProcessToken OpenThreadToken RegSetValueExW RegCreateKeyExW RegQueryValueExW RegOpenKeyExW RegCloseKey ReportEventA RegisterEventSourceA DeregisterEventSource CreateWellKnownSid SetSecurityDescriptorGroup

oleaut32

SafeArrayGetDim SafeArrayGetElemsize SafeArrayAccessData SafeArrayUnaccessData SysStringLen OleCreateFontIndirect VariantCopy VariantChangeType SafeArrayUnlock SafeArrayLock SafeArrayDestroy SafeArrayCreate SafeArrayGetUBound SafeArrayGetLBound SysStringByteLen SysAllocStringByteLen SysAllocString VariantClear VariantInit SysAllocStringLen SysFreeString VarBstrFromDate SystemTimeToVariantTime VariantTimeToSystemTime

gdiplus

GdipSetStringFormatTabStops GdipSetStringFormatFlags GdipCreateFromHWND GdipCreatePath GdipDeletePath GdipAddPathLine2I GdipCreateMatrix2 GdipDeleteMatrix GdipCreateMatrix GdipScaleMatrix GdipTransformPath GdipGetPathWorldBounds GdipTranslateMatrix GdipDrawLineI GdipDrawImageI GdipBitmapUnlockBits GdipBitmapLockBits GdipCreateBitmapFromStream GdipGetImagePalette GdipGetImagePaletteSize GdipGetImagePixelFormat GdiplusShutdown GdiplusStartup GdipSetInterpolationMode GdipDrawImageRectRectI GdipResetClip GdipAddPathEllipse GdipCreatePen2 GdipDeletePen GdipSetClipRect GdipAddPathRectangle GdipDrawEllipse GdipFillEllipse GdipCreateFontFromLogfontW GdipSetStringFormatHotkeyPrefix GdipSetPathGradientFocusScales GdipGetPathGradientPointCount GdipSetPathGradientSurroundColorsWithCount GdipSetPathGradientCenterPoint GdipSetPathGradientCenterColor GdipCreatePathGradientFromPath GdipClosePathFigure GdipAddPathLine GdipCreatePen1 GdipMeasureString GdipDrawImageRectI GdipDrawString GdipSetStringFormatLineAlign GdipSetStringFormatAlign GdipSetStringFormatTrimming GdipDeleteStringFormat GdipCreateStringFormat GdipSetTextRenderingHint ord1 GdipCreateLineBrushFromRect GdipCombineRegionRect GdipDeleteRegion GdipCreateRegionPath GdipClonePath GdipAddPathArcI GdipCreateBitmapFromHBITMAP GdipDrawImageRect GdipDrawLine GdipFillRectangleI GdipCreateLineBrushFromRectI GdipSetPixelOffsetMode GdipSetSmoothingMode GdipFillRectangle GdipReleaseDC GdipGetDC GdipCreateHICONFromBitmap GdipCreateBitmapFromFile GdipGetFontSize GdipGetFontStyle GdipGetFontUnit GdipCreateFont GdipGetFamily GdipDeleteFontFamily GdipDrawImage GdipGraphicsClear GdipDeleteFont GdipLoadImageFromFile GdipGetFontHeight GdipGetImageGraphicsContext GdipCreateBitmapFromScan0 GdipCloneImage GdipDisposeImage GdipDrawRectangle GdipFillPath GdipDrawPath GdipAddPathPath GdipAddPathLineI GdipAddPathPolygonI GdipCloneBrush GdipAlloc GdipFree GdipDeleteBrush GdipCreateSolidFill GdipDeleteGraphics GdipCreateFromHDC GdipGetImageWidth GdipGetImageHeight GdipDrawImageRectRect GdipSetImageAttributesColorMatrix GdipDisposeImageAttributes GdipCreateImageAttributes GdipSetLineWrapMode

oledlg

OleUIBusyW

psapi

GetProcessMemoryInfo

crypt32

CertGetNameStringW

oleacc

AccessibleObjectFromWindow CreateStdAccessibleObject LresultFromObject

imm32

ImmGetContext ImmGetOpenStatus ImmReleaseContext

iphlpapi

GetAdaptersAddresses GetAdaptersInfo

msimg32

AlphaBlend TransparentBlt

wintrust

WTHelperGetProvSignerFromChain WinVerifyTrust WTHelperGetProvCertFromChain CryptCATAdminCalcHashFromFileHandle CryptCATAdminAcquireContext CryptCATAdminEnumCatalogFromHash CryptCATCatalogInfoFromContext CryptCATAdminReleaseContext WTHelperProvDataFromStateData

litezip

ZipClose ZipAddFileW ZipAddBufferW ZipCreateFileW

7zipdll

GetMethodProperty GetNumberOfMethodsDLL GetHandlerProperty2 GetNumberOfFormats SetLargePageMode CreateObject

msi

ord217 ord173

ws2_32

connect getprotobyname setsockopt getsockopt bind getsockname ioctlsocket send ntohs select __WSAFDIsSet inet_addr gethostname gethostbyname htons inet_ntoa recv WSAConnect WSAGetLastError WSASocketW WSACloseEvent closesocket WSACleanup WSAStartup GetAddrInfoW FreeAddrInfoW WSASetLastError WSACreateEvent WSASetEvent WSAEventSelect accept listen sendto recvfrom WSAEnumNetworkEvents WSAResetEvent WSASend shutdown socket WSARecv WSAGetOverlappedResult

setupapi

SetupDiGetClassDevsW SetupDiDestroyDeviceInfoList SetupFindNextLine SetupDiGetClassDescriptionW SetupDiGetDeviceRegistryPropertyW SetupDiGetDeviceInstanceIdW SetupEnumInfSectionsW SetupGetLineTextW SetupFindNextMatchLineW SetupFindFirstLineW SetupCloseInfFile SetupDiEnumDeviceInfo SetupOpenInfFileW

generic

count=9, id=152, version=20115,

count=1, id=132, productName=VS2008 SP1 build 30729, version=30729,

count=51, id=158, productName=VS2010 SP1 build 40219, version=40219,

count=21, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=436, id=171, productName=VS2010 SP1 build 40219, version=40219,

count=2, id=156, productName=VS2010 SP1 build 40219, version=40219,

count=295, id=170, productName=VS2010 SP1 build 40219, version=40219,

count=6, productName=Unmarked objects (old),

count=340, id=131, productName=VS2008 build 21022, version=21022,

count=8, id=171, productName=VS2010 build 30319, version=30319,

count=57, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=1138, id=1, productName=Unmarked objects,

count=253, id=175, version=40219,

count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,

count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,

RegHookSpecialist.pxt

IMPHASH 3b45d71c4b32ae6b60ae479b539135c7
SHA256 1fd8a45ae1ef4397b0f59fe7e7e1a0622721f70a6844a7c2af6e0cadd5fc8db3
MD5 17b7b88fbbfd9d5b5150601e8b013968
SHA1 bb47bedd82f275aa12fce85eb89501ff58ef3c12
SHA512 5e7261ef0ed14f7ee699b747888dcf77cbd7bf5e70aaa9662f4f3bb1d87a1f2963a415394935b9d4c751ec3d2637b38496ec8191008d98d93f2ce1df1a08c414
SSDEEP 3072:erxH+fulSq6qEfTvyHoBbnS4frBdZoJBLvPA/:erxH+fulSqlHHqbnSyfZoJxo/
TLSH
T1E0D36C617AA6C035C29D193F54B5872A732BB7769B7290C73B28156DAD306D2BE3C303
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

62:7d:0c:2e:1a:6b:88:d7:73:cc:a6:8b:1f:51:b5:50:5b:d4:f6:75

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Paretologic Inc.,OU=Paretologic Inc.,O=Paretologic Inc.,L=Victoria,ST=British Columbia,C=CA

Chains

Feb 13, 2014

CN=Paretologic Inc.,OU=Paretologic Inc.,O=Paretologic Inc.,L=Victoria,ST=British Columbia,C=CA

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:2f:4e:e1:35:5c

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 13, 2011 - Apr 13, 2019

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Paretologic Inc.,OU=Paretologic Inc.,O=Paretologic Inc.,L=Victoria,ST=British Columbia,C=CA

Serial Number

11:21:f9:94:5d:68:b6:df:dd:55:72:92:b6:3c:5a:30:15:e1

Issuer

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 25, 2013 - Feb 26, 2015

Minor OS version

1

Major OS version

5

Entry point

57698

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\Dev\SpeedyPC Pro\common\zeppelin\Zeppelin\Specialists\RegHookSpecialist\Win32\Release\RegHookSpecialist.pdb

kernel32

GetProcAddress LoadLibraryW FindResourceExW FindResourceW LoadResource LockResource SizeofResource GetLongPathNameW GetFileAttributesW LeaveCriticalSection EnterCriticalSection DeleteCriticalSection InitializeCriticalSection FlushFileBuffers WriteConsoleW SetStdHandle GetConsoleMode GetConsoleCP GetCurrentProcess CloseHandle GetModuleFileNameW CreateFileW SetFilePointer WriteFile ExpandEnvironmentStringsW GetModuleHandleW MultiByteToWideChar WideCharToMultiByte GetACP HeapDestroy HeapAlloc HeapFree HeapReAlloc HeapSize GetProcessHeap RaiseException InitializeCriticalSectionAndSpinCount DecodePointer EncodePointer GetCurrentThreadId GetCommandLineA TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCPInfo InterlockedIncrement InterlockedDecrement GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError LCMapStringW GetStringTypeW IsProcessorFeaturePresent GetStdHandle Sleep ExitProcess SetHandleCount GetFileType GetStartupInfoW GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind GetLastError

advapi32

RegOpenKeyExW RegEnumKeyExW RegEnumValueW RegSetValueExW RegCloseKey RegCreateKeyW RegEnumKeyW RegOpenKeyW

shlwapi

PathStripPathW PathUnquoteSpacesW PathRemoveArgsW PathFileExistsW

SandBoxer.dll

IMPHASH 9c2c447b2262ee25679c6721ea47bb1c
SHA256 144ac6852f9d29cb4904fce543964339086b1209eb382f7883a696be04d88bbe
MD5 0a56e9e9be78e8c0fa11df8dd4f0ee8d
SHA1 7fe5033f1db71bc7133d4afcf124c6cd35f796c4
SHA512 ab1cd6c18dc7fcbd2a99e730815cd550be6e82cb0ffcc1e24f57c4f612d2fc2f0f7d0c72ef836a754a9a979d99a9003db031bb44f387cec388ae796f420874bd
SSDEEP 12288:BxrAQUP3d70vOjGM2P/5VKgbpJVgN70amrHdMLX:nAbP3x0LM2RP9JSBmr9MLX
TLSH
T113C47D10BB90C039F4BA00B59AF986ACA52D7D719B6C10CBB3D16ECE1B356E19E35347
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

0d:19:bd:42:19:86:85:63:81:54:6e:a7:a0:bc:a5:5b:d3:2c:9f:4a

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Paretologic Inc.,OU=Paretologic Inc.,O=Paretologic Inc.,L=Victoria,ST=British Columbia,C=CA

Chains

Feb 13, 2014

CN=Paretologic Inc.,OU=Paretologic Inc.,O=Paretologic Inc.,L=Victoria,ST=British Columbia,C=CA

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:2f:4e:e1:35:5c

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 13, 2011 - Apr 13, 2019

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Paretologic Inc.,OU=Paretologic Inc.,O=Paretologic Inc.,L=Victoria,ST=British Columbia,C=CA

Serial Number

11:21:f9:94:5d:68:b6:df:dd:55:72:92:b6:3c:5a:30:15:e1

Issuer

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 25, 2013 - Feb 26, 2015

Minor OS version

0

Major OS version

4

Entry point

61728

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\dev\code\zeppelin\common\sandboxer\debug\SandBoxer.pdb

kernel32

LocalFree LocalAlloc GetVersion GetCurrentThreadId WideCharToMultiByte GetThreadLocale GetStartupInfoA GetLocaleInfoA GetCommandLineA FreeLibrary ExitProcess UnhandledExceptionFilter RtlUnwind RaiseException GetStdHandle TlsSetValue TlsGetValue TlsFree TlsAlloc lstrlenA lstrcpyW lstrcpyA lstrcmpiW lstrcmpiA lstrcatW WriteProcessMemory WaitForSingleObject WaitForMultipleObjects VirtualQueryEx VirtualQuery VirtualProtectEx VirtualProtect UnmapViewOfFile TerminateThread TerminateProcess Sleep SetThreadPriority SetLastError SetEvent ResumeThread ReleaseSemaphore ReleaseMutex ReadProcessMemory OpenProcess OpenMutexW OpenMutexA OpenFileMappingW OpenFileMappingA OpenEventW VirtualAlloc MapViewOfFile LoadLibraryExA LoadLibraryA IsBadWritePtr IsBadReadPtr GetVersionExW GetVersionExA GetTickCount GetThreadContext GetSystemDirectoryW GetSystemDirectoryA GetProcAddress GetModuleHandleW GetModuleHandleA GetModuleFileNameA GetFileAttributesW GetFileAttributesA GetExitCodeThread GetCurrentThread GetCurrentProcessId GetCurrentDirectoryW GetCurrentDirectoryA InterlockedExchange FormatMessageA DuplicateHandle DeleteFileW CreateThread CreateSemaphoreA CreateProcessW CreateProcessA CreatePipe CreateMutexW CreateMutexA CreateFileMappingW CreateFileMappingA CreateFileA CreateEventW CreateEventA CompareStringW CompareStringA GetLocaleInfoW GetTimeZoneInformation GetConsoleOutputCP WriteConsoleA SetStdHandle GetUserDefaultLCID EnumSystemLocalesA IsValidCodePage IsValidLocale VirtualFree InitializeCriticalSection EnterCriticalSection LeaveCriticalSection DeleteCriticalSection GetCurrentProcess GlobalAlloc GlobalFree GetFileSize ReadFile OutputDebugStringW CreateFileW SetFilePointer WriteFile CloseHandle SetEndOfFile OutputDebugStringA GetModuleFileNameW lstrlenW GetProcessHeap HeapAlloc GetLastError HeapReAlloc OpenEventA HeapFree GetStringTypeW GetStringTypeA GetDateFormatA GetTimeFormatA GetConsoleMode GetConsoleCP InterlockedIncrement InterlockedDecrement SetUnhandledExceptionFilter IsDebuggerPresent HeapValidate FatalAppExitA DebugBreak MultiByteToWideChar GetACP GetOEMCP GetCPInfo LCMapStringA LCMapStringW WriteConsoleW GetFileType SetConsoleCtrlHandler LoadLibraryW SetHandleCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapDestroy HeapCreate QueryPerformanceCounter GetSystemTimeAsFileTime FlushFileBuffers SetEnvironmentVariableA

user32

CloseDesktop DispatchMessageA GetUserObjectInformationA MsgWaitForMultipleObjects OpenInputDesktop PeekMessageA TranslateMessage MessageBoxA GetKeyboardType GetThreadDesktop

advapi32

AdjustTokenPrivileges AllocateAndInitializeSid EqualSid FreeSid GetLengthSid InitializeSecurityDescriptor IsValidSid LookupPrivilegeValueA RegCreateKeyExA RegDeleteKeyA RegEnumKeyA RegSetValueExA RegSetValueExW SetSecurityDescriptorDacl RegCloseKey RegOpenKeyExA RegQueryValueExA OpenProcessToken GetTokenInformation LsaOpenPolicy LsaAddAccountRights LsaRemoveAccountRights LookupAccountNameW GetKernelObjectSecurity

oleaut32

SysReAllocStringLen SysFreeString

shlwapi

PathAppendW PathRemoveFileSpecW

Name

.text

Size

320KB

Virtual Size

317KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

CODE

Size

108KB

Virtual Size

107KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

64KB

Virtual Size

63KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

8KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

DATA

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

4KB

Virtual Size

784B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

24KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Splash.exe

IMPHASH f180a00cc50346ef6c42bfc4ac7cca34
SHA256 c92559b6011054a0282eeb3fec4c4cafdc7c88c598c4ecfc773abbe61111ac57
MD5 4ac5b2a53802d0675e2565fb78e2708d
SHA1 5d9e7665e12695eda8bf7492c33fa8b5893d3480
SHA512 5a079a9d2ebf7fcf7f29a4041757e5de2153f09b50779a610331b44ccb0307aa16084db34e26ca58977ea6c609e5f2352ba08a0eee2b08dde9d91c3d125d834b
SSDEEP 98304:0AGvo/ouZen8eaZLRLWLZPq2IvKu9e4OiZrq1DfPHNADtV6v+4E2:BouYnISi2IvKus4O7NADtV6v+U
TLSH
T17DF5C032FD9D5429D4630232CEDDB37866BFBDB47A39121721903A2EBA717834929533
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

73:85:34:18:a2:ca:33:33:e6:96:7a:11:09:85:27:42:e9:05:db:35

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Paretologic Inc.,OU=Paretologic Inc.,O=Paretologic Inc.,L=Victoria,ST=British Columbia,C=CA

Chains

Feb 13, 2014

CN=Paretologic Inc.,OU=Paretologic Inc.,O=Paretologic Inc.,L=Victoria,ST=British Columbia,C=CA

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:2f:4e:e1:35:5c

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 13, 2011 - Apr 13, 2019

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Paretologic Inc.,OU=Paretologic Inc.,O=Paretologic Inc.,L=Victoria,ST=British Columbia,C=CA

Serial Number

11:21:f9:94:5d:68:b6:df:dd:55:72:92:b6:3c:5a:30:15:e1

Issuer

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 25, 2013 - Feb 26, 2015

Minor OS version

1

Major OS version

5

Entry point

1153578

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\Users\daniel.howard\Documents\Visual Studio 2012\Projects\Splash\Release\Splash.pdb

kernel32

GetTimeZoneInformation GetConsoleCP GetConsoleMode ReadConsoleW SetFilePointerEx OutputDebugStringW IsValidCodePage LCMapStringW WriteConsoleW SetEnvironmentVariableA TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetStartupInfoW GetProcessHeap GetStdHandle GetFileType SetStdHandle VirtualQuery VirtualAlloc GetSystemInfo GetSystemTimeAsFileTime SizeofResource HeapQueryInformation HeapSize IsProcessorFeaturePresent IsDebuggerPresent GetStringTypeW CreateThread GetModuleHandleExW ExitProcess HeapReAlloc RtlUnwind RaiseException HeapAlloc HeapFree GetCommandLineW FindResourceExW VirtualProtect Sleep GetProfileIntW GetTickCount SearchPathW GetTempPathW GetTempFileNameW GetWindowsDirectoryW GetFileTime GetFileSizeEx GetFileAttributesExW FileTimeToLocalFileTime SetErrorMode VerifyVersionInfoW lstrcpyW VerSetConditionMask lstrcmpiW GetCPInfo GetOEMCP ExitThread GetACP GetCurrentProcess DuplicateHandle WriteFile UnlockFile SetFilePointer SetEndOfFile ReadFile LockFile GetVolumeInformationW GetFullPathNameW GetFileSize FlushFileBuffers FindFirstFileW FindClose CreateFileW DeleteFileW GlobalFlags GetUserDefaultUILanguage GetSystemDefaultUILanguage GetLocaleInfoW CompareStringW GetCurrentDirectoryW FileTimeToSystemTime GlobalGetAtomNameW LocalReAlloc LocalAlloc GlobalHandle GlobalReAlloc TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSection InterlockedIncrement GlobalFindAtomW LoadLibraryA GetSystemDirectoryW DeleteCriticalSection LeaveCriticalSection EnterCriticalSection DecodePointer EncodePointer InterlockedDecrement GetCurrentProcessId GlobalAddAtomW WritePrivateProfileStringW GetPrivateProfileStringW GetPrivateProfileIntW ResumeThread SetThreadPriority WaitForSingleObject CloseHandle LoadLibraryW GetProcAddress GetModuleHandleW GetModuleHandleA FreeResource GetVersion OutputDebugStringA GetFileAttributesW lstrcmpW lstrcmpA GlobalDeleteAtom LoadLibraryExW FreeLibrary GetVersionExW GetCurrentThreadId GetCurrentThread InterlockedExchange MultiByteToWideChar WideCharToMultiByte SetLastError GetLastError CopyFileW FormatMessageW MulDiv LocalFree GlobalFree GlobalUnlock GlobalLock GlobalSize GlobalAlloc InitializeCriticalSectionAndSpinCount GetModuleFileNameW FindResourceW LoadResource LockResource

user32

GetWindowRgn DrawIcon PostThreadMessageW FrameRect CopyIcon ModifyMenuW CharUpperBuffW RegisterClipboardFormatW EmptyClipboard SetClipboardData CloseClipboard OpenClipboard SetClassLongW LockWindowUpdate SetParent SetRect SetCursorPos CopyAcceleratorTableW DestroyAcceleratorTable CreateAcceleratorTableW MapVirtualKeyW GetKeyboardState GetKeyboardLayout ToUnicodeEx DrawIconEx DrawFocusRect DrawFrameControl DrawEdge ReuseDDElParam UnpackDDElParam LoadImageW InsertMenuItemW TranslateAcceleratorW LoadAcceleratorsW BringWindowToTop MonitorFromPoint UnionRect EnableScrollBar DestroyMenu UpdateLayeredWindow IsMenu IsRectEmpty SetMenuDefaultItem GetMenuDefaultItem GetMenuItemInfoW CreatePopupMenu NotifyWinEvent OffsetRect MessageBeep SetWindowRgn GetSystemMenu LoadMenuW GetAsyncKeyState IsZoomed TrackMouseEvent IntersectRect InflateRect UnregisterClassW EnumDisplayMonitors SetRectEmpty SetLayeredWindowAttributes CharUpperW DestroyIcon SendDlgItemMessageA KillTimer RealChildWindowFromPoint DeleteMenu SystemParametersInfoW CopyImage WindowFromPoint ReleaseCapture SetCapture WaitMessage LoadCursorW GetSysColorBrush GetSystemMetrics IsDialogMessageW SetWindowTextW CheckDlgButton MoveWindow ShowWindow GetMonitorInfoW MonitorFromWindow WinHelpW GetScrollInfo SetScrollInfo GetWindow GetTopWindow GetClassLongW SetWindowLongW EqualRect CopyRect MapWindowPoints AdjustWindowRectEx GetWindowTextLengthW GetWindowTextW RemovePropW GetPropW SetPropW ShowScrollBar GetScrollRange SetScrollRange GetScrollPos SetScrollPos ScrollWindow RedrawWindow SetForegroundWindow GetForegroundWindow TrackPopupMenu SetMenu GetMenu GetCapture SetFocus GetDlgCtrlID EndDeferWindowPos DeferWindowPos BeginDeferWindowPos SetWindowPlacement GetWindowPlacement SetWindowPos IsChild CreateWindowExW GetClassInfoExW GetClassInfoW RegisterClassW CallWindowProcW DefWindowProcW GetMessageTime GetMessagePos RegisterWindowMessageW PtInRect GetWindowRect GetSysColor ScreenToClient ClientToScreen EndPaint BeginPaint ReleaseDC GetWindowDC GetDC TabbedTextOutW GrayStringW DrawTextExW DrawTextW UnhookWindowsHookEx GetClassNameW FillRect InvalidateRect UpdateWindow DrawStateW GetLastActivePopup GetWindowThreadProcessId MessageBoxW SetCursor ShowOwnedPopups GetComboBoxInfo MapDialogRect DestroyCursor CreateMenu SubtractRect GetUpdateRect IsClipboardFormatAvailable TranslateMDISysAccel DefMDIChildProcW DefFrameProcW DrawMenuBar MapVirtualKeyExW IsCharLowerW GetDoubleClickTime InvertRect HideCaret GetIconInfo GetNextDlgGroupItem GetKeyNameTextW CallNextHookEx SetWindowsHookExW GetCursorPos ValidateRect GetKeyState IsWindowVisible PeekMessageW DispatchMessageW TranslateMessage GetMessageW LoadBitmapW SetMenuItemInfoW GetMenuCheckMarkDimensions SetMenuItemBitmaps EnableMenuItem CheckMenuItem GetFocus GetParent GetDesktopWindow GetWindowLongW SetActiveWindow IsWindowEnabled GetActiveWindow GetNextDlgTabItem GetDlgItem EndDialog CreateDialogIndirectParamW DestroyWindow IsWindow PostQuitMessage PostMessageW RemoveMenu AppendMenuW InsertMenuW GetMenuItemCount GetMenuItemID GetSubMenu GetMenuState GetMenuStringW EnableWindow GetClientRect SendMessageW SetTimer LoadIconW IsIconic

gdi32

TextOutW ExtTextOutW SetViewportExtEx SetViewportOrgEx SetWindowExtEx SetWindowOrgEx OffsetViewportOrgEx OffsetWindowOrgEx ScaleViewportExtEx ScaleWindowExtEx CreateFontIndirectW GetTextExtentPoint32W GetTextMetricsW CreateCompatibleBitmap CreateDIBitmap CreateRectRgnIndirect EnumFontFamiliesW GetTextCharsetInfo CombineRgn PatBlt SetRectRgn DPtoLP CreateRoundRectRgn CreateDIBSection CreateEllipticRgn Ellipse GetBkColor GetTextColor CreatePolygonRgn Polygon Polyline RealizePalette SetPixel StretchBlt SetDIBColorTable MoveToEx OffsetRgn Rectangle CreatePalette GetNearestPaletteIndex GetPaletteEntries GetSystemPaletteEntries RoundRect ExtFloodFill SetPaletteEntries EnumFontFamiliesExW FillRgn FrameRgn GetBoundsRect PtInRegion GetWindowOrgEx LPtoDP GetViewportOrgEx SetPixelV GetTextFaceW SetROP2 SetPolyFillMode SetTextColor GetRgnBox CopyMetaFileW GetLayout SetLayout SetMapMode SetBkMode SetBkColor SelectPalette SelectObject ExtSelectClipRgn SelectClipRgn SaveDC RestoreDC RectVisible PtVisible LineTo IntersectClipRect GetWindowExtEx GetViewportExtEx GetPixel GetObjectType GetClipBox ExcludeClipRect Escape DeleteDC CreateRectRgn CreatePatternBrush CreatePen CreateHatchBrush CreateCompatibleDC BitBlt GetObjectW GetStockObject DeleteObject CreateSolidBrush CreateBitmap GetDeviceCaps CreateDCW SetTextAlign

msimg32

AlphaBlend TransparentBlt

winspool.drv

ClosePrinter OpenPrinterW DocumentPropertiesW

advapi32

RegEnumKeyExW RegEnumValueW RegQueryValueW RegEnumKeyW RegSetValueExW RegDeleteValueW RegDeleteKeyW RegCreateKeyExW RegQueryValueExW RegOpenKeyExW RegCloseKey

shell32

SHGetFileInfoW DragQueryFileW DragFinish ShellExecuteW SHGetPathFromIDListW SHBrowseForFolderW SHAppBarMessage SHGetDesktopFolder SHGetSpecialFolderLocation

shlwapi

PathFindFileNameW PathIsUNCW PathStripToRootW StrFormatKBSizeW PathFindExtensionW PathRemoveFileSpecW

uxtheme

OpenThemeData GetThemePartSize GetWindowTheme GetThemeSysColor IsAppThemed DrawThemeText DrawThemeParentBackground IsThemeBackgroundPartiallyTransparent GetCurrentThemeName CloseThemeData DrawThemeBackground GetThemeColor

ole32

OleLockRunning CreateStreamOnHGlobal DoDragDrop CoInitializeEx CoInitialize CoCreateGuid CoUninitialize ReleaseStgMedium CoTaskMemFree CoTaskMemAlloc RevokeDragDrop RegisterDragDrop CoLockObjectExternal OleDuplicateData OleGetClipboard IsAccelerator OleTranslateAccelerator OleDestroyMenuDescriptor OleCreateMenuDescriptor CoCreateInstance

oleaut32

SysFreeString VarBstrFromDate VariantTimeToSystemTime SystemTimeToVariantTime SysStringLen VariantChangeType VariantClear VariantInit SysAllocStringLen SysAllocString

gdiplus

GdipBitmapUnlockBits GdipBitmapLockBits GdipCreateBitmapFromScan0 GdipCreateBitmapFromStream GdipGetImagePaletteSize GdipGetImagePalette GdipGetImagePixelFormat GdipGetImageHeight GdipGetImageWidth GdipGetImageGraphicsContext GdipSetInterpolationMode GdipCreateBitmapFromHBITMAP GdiplusShutdown GdipDrawImageRectI GdipDeleteGraphics GdipCreateFromHDC GdipLoadImageFromFile GdipCloneImage GdipAlloc GdipDisposeImage GdipFree GdiplusStartup GdipDrawImageI

oleacc

CreateStdAccessibleObject AccessibleObjectFromWindow LresultFromObject

imm32

ImmReleaseContext ImmGetContext ImmGetOpenStatus

winmm

PlaySoundW

UNS.xml

SHA256 e5d7582364cd2524aeb4c1a6db330c1a71fc7fb218528cca0b910550d639de92
MD5 c97d45242aedf284905d9136e916eb6b
SHA1 ff0ad3e502f5f7de106f36a17e74edfb94698f7a
SHA512 0513cb2c53070b26c7dacf0d69bd55622e08a2b14747a5f3339dd51ffe52302b35a3b3361a35bd5d27e67fd384ab409607eddaae485f1a369939076c5a6f4afe
TLSH
T1EA111B4343DE2100B1F34A6CA831B4DB57927E80667DE20E00AAEC0CDAEBF11A051BE6
MD5 SHA1 SHA512 TLSH

Utility.pxt

IMPHASH f82a84f9a36e96b0e8e40c74bb0e618d
SHA256 60fff5708100c33a16e6522a75634c7a4e41dacc174c3aeb2d5c209674ae6c3f
MD5 b739710d3d9ae819cbe42291d0a8d14e
SHA1 2188e37ca8744c8842f70028ee441448c1c53803
SHA512 1ec5dbb71d30259f6d9a6dacae38511dbfb5398a72098771cd545bfa009dd6a122d26bf106a7ddbf8e5da782f5fcdda7fd44bffa850b6ec7c4302c52ab0543f1
SSDEEP 24576:eu+rZMRliWRIHf6mAtZMAmLn0Qlp51x7BT+mRjqTP:eDglIneu0Qlp51xx+mRjqTP
TLSH
T190159D21AE92C135E79F0672AABD7B2F253EAB660321D4CB77D42C585D308E27539307
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

e8:26:7d:30:d9:eb:12:19:61:c4:3c:75:cc:ee:34:7d:53:e6:eb:ab

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Paretologic Inc.,OU=Paretologic Inc.,O=Paretologic Inc.,L=Victoria,ST=British Columbia,C=CA

Chains

Feb 13, 2014

CN=Paretologic Inc.,OU=Paretologic Inc.,O=Paretologic Inc.,L=Victoria,ST=British Columbia,C=CA

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:2f:4e:e1:35:5c

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 13, 2011 - Apr 13, 2019

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Paretologic Inc.,OU=Paretologic Inc.,O=Paretologic Inc.,L=Victoria,ST=British Columbia,C=CA

Serial Number

11:21:f9:94:5d:68:b6:df:dd:55:72:92:b6:3c:5a:30:15:e1

Issuer

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 25, 2013 - Feb 26, 2015

Minor OS version

1

Major OS version

5

Entry point

595233

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\Dev\SpeedyPC Pro\common\zeppelin\common\UtilityExtensions\Win32\Release\UtilityExtensions.pdb

litezip

ZipClose ZipAddHandleW ZipAddFileW ZipCreateFileW

liteunzip

UnzipGetItemW UnzipClose UnzipSetBaseDirW UnzipOpenFileW UnzipItemToFileW

fltlib

FilterSendMessage FilterUnload FilterConnectCommunicationPort FilterGetMessage FilterReplyMessage FilterLoad

rpcrt4

UuidFromStringW UuidCreateSequential

kernel32

FindResourceExW CreateFileW CloseHandle MultiByteToWideChar GetFileSize SetFilePointerEx ReadFile OutputDebugStringW CreateFileMappingW MapViewOfFile UnmapViewOfFile GetModuleFileNameW SetFilePointer WriteFile SetEndOfFile FindFirstFileW FindNextFileW FindClose GetLogicalDriveStringsW GetDriveTypeW RemoveDirectoryW WideCharToMultiByte CreateEventW SetEvent WaitForSingleObject GetSystemTime FindFirstVolumeW FindVolumeClose WaitForMultipleObjects GetVolumeInformationW FindNextVolumeW DeviceIoControl GetVolumeNameForVolumeMountPointW ResetEvent ExpandEnvironmentStringsW GetLongPathNameW FindResourceW CopyFileW LoadLibraryW GetProcAddress FreeLibrary FormatMessageW LocalFree lstrcmpiW GetEnvironmentVariableW FileTimeToSystemTime GetModuleHandleW GetVersionExW MoveFileW OpenProcess GlobalAlloc GlobalFree GetLocalTime HeapAlloc GetProcessHeap HeapFree lstrlenW RaiseException GetCurrentProcessId GetTickCount CreateDirectoryW MoveFileExW Sleep DeleteFileW SetFileAttributesW GetFileAttributesW GetLastError DeleteCriticalSection InitializeCriticalSection LeaveCriticalSection EnterCriticalSection GetUserDefaultLCID GetLocaleInfoA LoadResource LockResource SizeofResource GetTimeFormatW GetDateFormatW GetTempPathW SystemTimeToFileTime EnumSystemLocalesA VirtualQuery IsValidLocale WriteConsoleW SetStdHandle CompareStringW SetEnvironmentVariableA ResumeThread QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetModuleFileNameA GetConsoleMode GetConsoleCP GetStartupInfoW GetFileType SetHandleCount GetTimeZoneInformation ExitProcess HeapCreate TlsFree IsValidCodePage GetOEMCP IsProcessorFeaturePresent IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetLocaleInfoW GetStdHandle LCMapStringW RtlUnwind GetCommandLineA GetCPInfo CreateThread GetCurrentThreadId ExitThread DecodePointer EncodePointer GetStringTypeW VirtualAlloc VirtualFree GetFullPathNameW GetFullPathNameA CreateFileA TlsGetValue UnlockFile LockFile GetSystemTimeAsFileTime TlsSetValue GetFileAttributesA FlushFileBuffers LockFileEx LoadLibraryA GetVersionExA TlsAlloc GetTempPathA AreFileApisANSI DeleteFileA GetCurrentProcess ReadProcessMemory SetLastError GetCurrentThread TerminateProcess GetACP HeapDestroy HeapReAlloc HeapSize InitializeCriticalSectionAndSpinCount InterlockedIncrement InterlockedDecrement InterlockedCompareExchange InterlockedExchange

user32

wsprintfW

advapi32

GetAce AdjustTokenPrivileges LookupPrivilegeValueW OpenThreadToken SetFileSecurityW GetSecurityDescriptorControl SetSecurityDescriptorDacl AddAccessAllowedAce AddAce EqualSid InitializeAcl GetLengthSid GetAclInformation GetSecurityDescriptorDacl InitializeSecurityDescriptor GetFileSecurityW LookupAccountNameW ConvertSidToStringSidW GetTokenInformation OpenProcessToken RegEnumKeyW RegDeleteValueW RegSetValueExW RegDeleteKeyW RegQueryValueExW RegEnumValueW RegEnumKeyExW RegQueryInfoKeyW RegCloseKey RegCreateKeyExW RegOpenKeyExW

shell32

SHFileOperationW SHGetFolderPathW SHCreateDirectoryExW

ole32

CoInitializeEx CoInitialize CoUninitialize CoCreateInstance StringFromGUID2 CoTaskMemFree

oleaut32

SysAllocStringLen SysFreeString

shlwapi

PathFindFileNameW PathAddBackslashW PathQuoteSpacesW PathIsDirectoryEmptyW StrToIntW PathFileExistsW PathAppendW PathRemoveFileSpecW PathIsDirectoryW

colors.xml

SHA256 e8c56d1fdfd9c7bdbe870123828b84c0f80100a3fa63ee4ff674c1ad1fcb7569
MD5 1d9a6f4abc0981d10b5b1b93a5f98efe
SHA1 7c3504b2d32208d08a152e43cdc23a14dc934316
SHA512 5dc1e35bd130941866217dfcad4082518565ad6849adfac431ec2b03b6fb1ee5a9386155946edff788f4198855a56a494202c0a5d97698799e81b41d42c17677
TLSH
T18361E921F2CD727B9B2683C38B31D16A662FECE4E2117D5664BBC47BBB870501FA5250
MD5 SHA1 SHA512 TLSH

html/0_days.htm

SHA256 58d8a27991c5026a0cbe202dc83767bc3bd5e7b9694e8db852cd7cac5ab73af6
MD5 f491a42853feeb0f9ad81bb3e3f9c5df
SHA1 6c7d24300b8fd1a5668691841ec5615bea7b75bf
SHA512 f5911df20a9afcbf3665d8696e64a0f188c7c6923f499161e8c948908ce20724aaf39c71d6555b99f6d0df18845940184e3d8b2f56ffbe919617ea0ad060d893
TLSH
T19051746099A63633052411A8B6F2668BD73AC53C572E88C4B855307F37D2008DFFB6DA
MD5 SHA1 SHA512 TLSH

html/15_days.htm

SHA256 dddf097e0b437289d2688d74d73367ebcf46618ed5fe8d05795f5547d11e6d1c
MD5 3719f59750e380e50966d65fd9e9d2d6
SHA1 a8b3a971ee300f991ea71d43fc49e5d61afd26e7
SHA512 85930e6dbff9669cbb73aaf1f1205c6072982f5c8e827023bf12fca60a89e7a9672d2285439140bd277943a79b975b2ca098145d83600f96b644cae7c5f180e5
TLSH
T1C05175605A9565B3052141F979FB7E8B8336892C632B48C4B85920BF3BD3108EBFF59D
MD5 SHA1 SHA512 TLSH

html/1_days.htm

SHA256 9727915461a11dcef5148fad73786e6396603b38aba7449bd4d6b3856c8be898
MD5 e8dc95f8c7ea9957863ef7330bc8d7a8
SHA1 ddb55d58d62c912ba83b4738f22a09c74e513cbc
SHA512 087e55a5bc71b5f7469e431d97aacf24ec60d230d57e1f4ededa74c778eeef4f007ed740a2c9b0d2b4d63a73be0fac9e2ac279b8070c559bfd34e547d94a7af8
TLSH
T15751952096952973052442B9B5F26B8F8736C43C671F48C87899607F3BD3108DBFF999
MD5 SHA1 SHA512 TLSH

html/2_days.htm

SHA256 08363932f94d0eccaab469c79490f9c141b5a35463714d7af39c89f5f9493313
MD5 173ac1530e4772f322fc781085837f70
SHA1 18184c290a17b1c1d91a16e28803df8a6b13048f
SHA512 639772b99c62c20cc76a77890570d64191a063264ee3cf3c087d203391cf0ee09895425d0cb4796ea927d0ff420acd1df6354b10ab409f84f83b478b1cc49266
TLSH
T1945145609ED22573452141F8B9F79A8AC376C82D631F54C4B459207F3BD31189BFB99C
MD5 SHA1 SHA512 TLSH

html/30_days.htm

SHA256 42352f192ec3727f63e5fe6dc2a26cd854ab2434b25918361c9e47bd14ed7434
MD5 35e1460314a2210ccbcd5efe57935d83
SHA1 97ded417cc6a2a67ec416aec7338022f45d9ae91
SHA512 5e728d19627d156747160940a88985d9319a9dca3e18bfe497e533568b5d548ec42d33b9bbb315048f1d239305f6f408c8402174f5e6c80870c65b0e17843261
TLSH
T18251642059A66973052142F8B9F27A4F977AC92D531B54C4B859307F2BD3008EFFF998
MD5 SHA1 SHA512 TLSH

html/5_days.htm

SHA256 7c14c0a6e2f96afbe9a1654c63ea6813293ba6d6f0d1d62e105b3a6dbc66a38a
MD5 cfccb75033aba8dc2c6a03fdbdd32805
SHA1 941dc469be54f4cb02f84d70a39e40a509cd54a1
SHA512 8ea0568418ba7d730ed76babe882ef6bc18a6b811dd065209b2cf97d221c30ca931787e93789e1af6c6d983a1d5e1b62ea94c30cbacbbe4bd0b674a698b34092
TLSH
T1C25195206E956673053142F979F2668BD336C82D672F58C4B85920BF37D3108ABFB99C
MD5 SHA1 SHA512 TLSH

html/container_content_bkimg.gif

SHA256 a78e219d22d7bc0ed1d8b84066f04a7457a1881fc0d3b4ddca6ef11cd83ef880
MD5 ab71756e1f04e0e64c1d197853ef7e6a
SHA1 fe9a5d8d5f3682fe0b6504a4149ce67b6e6fcd05
SHA512 81e3cca891cbf0feec3a45ed764eefed03e0939b6275a0660d54b7c96ade92b0c839410c1d5d83cdd81ee93543320165d220baf103875a333e83583922e3048e
TLSH
T132B01228ECD0A541C87C0875D2DD1924F30C87316D1E06E344974F01F1A73E3820F26D
MD5 SHA1 SHA512 TLSH

html/container_content_leftimg.gif

SHA256 3598f8cd1d0e1bfd56f36b93778467c7123f588eeb06cb87cf36645254ed3467
MD5 44d50683a0704f0967134db3747aa7c8
SHA1 f1951834dad8074af5afe493fca20472082f3a5f
SHA512 cce560dc228488d8be24867388d447ed5720fdc3c30e3eba688629212e46b66a06b563123676d77cef81b6cdab258cc1d6561f4a14fabaf2369accb784c55981
TLSH
T1F3E02BC3D14AF8FAE60F11B56DB2D18560E091226362123FA531BBABA2C2DD951E7804
MD5 SHA1 SHA512 TLSH

html/container_content_rightimg.gif

SHA256 35d95a1018f828d66c2e074a6beb53031ce2d1f104fc1076f18d6fb129882719
MD5 b538d929e2a14a9fa612b55fcf631050
SHA1 632fc1b063aa11ec7ca28cb42d331fd36512a5df
SHA512 dd16616a47bc700a838aadb5c683842298602d2c41450028c559c19557570cf18c4bd9929ca037c6c7b3f5d97980860956fd0e792025000b7fd98ed5f92f9194
TLSH
T1B2E0EBF79CD9570EFEEA21308BF65A887342BBA218C8112B011C3222B0011C77E36D62
MD5 SHA1 SHA512 TLSH

html/error_connect.html

SHA256 9b2065a7df517747faa0403bd39c60c3ddf4e81547974f1fb82c3302c4ba1d15
MD5 8ee7bec8b31f875e626f091e2bc0a5b3
SHA1 fbf89df1e4ca379834604fcf4fb99ef021096dc9
SHA512 0890ceaf58921aec66a58942a36ac752cbabc9346f093d9e0ec708bf599f76655dd6c6e8a66020b7bb4736d0f38bb8d0ab2e926f690c70542b904630b20588c2
TLSH
T17F21314D6B0C793792E243BD34F37924AB624955A309429474A0107F6AF7315ED6B2CE
MD5 SHA1 SHA512 TLSH

html/images/10x10.gif

SHA256 02d2855c8a5417cd637df1e81f781e42ff2b12ad6dffb923a3822f16b5bfa82a
MD5 76084e29cb2cf72b320e888edc583dfb
SHA1 8a1ca8ddc90d8a1bc2a6d2147bab31b5904bfd83
SHA512 0f0bb4434cde759b5d7cd40c8fb12e37e24ed28d687613d73c9f0475e413e79f2c92736b081b919fade6815c06bc35f4782afe0d1ff628bb7ed58dc890cc07fb
MD5 SHA1 SHA512

html/images/10x10tile.gif

SHA256 feaeaabbfc6acb192ad5cb1b82acdbddcf6c42787d40910a2843fd64dd83b580
MD5 b096a1bbbac04cc08e46ab561ab8657f
SHA1 bffc0c2cafff0f1d7e91baa4cc99606eec305510
SHA512 9efd282b5eb0ae149d5116480056bcbb33f1dab010f63db3d813d7f5461961cf80da07914c13b9a30cf1e3590337e43c33457bdec51360023b72eb09dd0e590c
MD5 SHA1 SHA512

html/images/background.jpg

SHA256 8bbc771a8afa40fcc415d8bec90f4d8be2df55c6a8ee40b048ae90c3bde3045b
MD5 6060ad08633164b61eff11a36203429b
SHA1 807b829e794ff5df6d5fce5318c2ed203c4fb7c8
SHA512 49c6c5440afb71610bfc5b7a7aa72fa31d43d23ccafacb290d81011d5df963f4ebbc9e50af1e278941919bf39d0a5e32b02866635da3ec0edb7afc628195d7e5
SSDEEP 384:1SMiZNiSSMiZlnKVvQ7QKuDpVl+5JhtOBodud1EpIeXUZSTpvVDwCPnlmnpf/o4A:YNclKVv46sHwmIdiHdTpvGElmh/ocG7
TLSH
T11FC2BF7293640F62F6D6457595A9CFEB1320CDA1A7B3A6073C6C7846BF746D24C282C3
MD5 SHA1 SHA512 SSDEEP TLSH

html/images/contentwrapper.gif

SHA256 87ef0be165f28e09bec94338281d92de36967f6ee318855f257a51ed4da074c0
MD5 ae9b93ec8667efedd1c3af1f73d822d8
SHA1 ba65f81e42646c8fab8d025cc0502b95eb60f8e0
SHA512 6a24f89e2bca6c832c7d815f0b5fb21c43657861490163a7dddbb0f0d3dd6eaafde99bb6fa7a344eca49c300e678f7da4370b9bac752c7e8a4a55b7c582ab2fc
TLSH
T1F2C02B84D4410230F05100304582C8093F2C0B105D504243094CD308E4206C15517033
MD5 SHA1 SHA512 TLSH

html/images/error_internet.jpg

SHA256 47173394ac9732c64ed3519bf6aada785e75244cce19aba8bd1a41459209c931
MD5 fc904eafc488983752b3a2df83529ab7
SHA1 830d2bd89c1c98d2e323b697ca9f6c9a3a27dc6b
SHA512 1e6f4e33388954bca3ac5be831bb8ccea8b078cf7bd0fac0bb28b0189b9c11996bbd24844e2c571b0ab5c4e59f4290a5240c51b977949c0b4c40a30fe9ac7706
SSDEEP 192:hKlnPlMJgFOpWysU43CHZR4oBnYzWzWjfi0PMdrB9Iqgp0L0yISi:0dMJnpWPb3uZR4okjjP4l98WLO
TLSH
T1CB22CF4B965A9FC2D5C412B00727CB06AB707EA1C273FDE2A0E6FA507CA28C359C1F45
MD5 SHA1 SHA512 SSDEEP TLSH

html/images/footerbarfill.gif

SHA256 d96757e76f921800932601c4d2fa580324ae35481cad57ed8687936d9f9aabf3
MD5 024f5c6244b281fed15b8a70ed40743b
SHA1 c0e708f961a4f6e8ccaac1700fdb2bcbbfc75519
SHA512 0d6f82562ad936484f7360711785890740ab40c29ef6a5e9b48a29a5d6a93f5ba4107626076b1f82a0ddba4cb3f28ca696e833aa2dc399b3c3709a0137d97d81
TLSH
T10AC02BD4E802AA31F6A146305982C82DEE2D47109C6493C3084C530CF533BD218571F7
MD5 SHA1 SHA512 TLSH

html/images/info_bubble.jpg

SHA256 767717cfb0f157f20903f52ead4f27aa662b4e585b4cf01ba6e3ac5bb149ca9f
MD5 deadf194fddf310d59ed6c54f2877ca3
SHA1 91112f986ab94057624a27d63b304f6015b77f3c
SHA512 6a30e138bae2cd027ecae378d367429565a354364d58f070118dae260d274578fc38ebb9ed4367da1c64c010d673bad44c8688d7a9b572af8f4e034e7705a38d
SSDEEP 192:NPt2/TNeOUqIly4lNHFLt2/TNeOUqxknHqsc7J7WbK2iZihM3NsNmul:e/gapiNK/gaKnKsc75/iS3NsAul
TLSH
T124625B25AB80CE22F5F5517488C7D5839212ED4167F75E937C8C7A8B3B327E2AC29183
MD5 SHA1 SHA512 SSDEEP TLSH

html/images/tile_footerbarbase.jpg

SHA256 5093ab6f3ae1c5f5aed809d57f58c4da0b84c1107ce12bb93e91ce15e2e9da16
MD5 4ff37f63b3afe0a38a661b73bd535518
SHA1 a93639a25e862b27ddc31796271a27104c897464
SHA512 553c57a682cb907cbdee9c63239c6542abe52cfc03b0cc9e4330c7a27c5d1f1e179ec71895d5b73a12a1b70e87a01e3fa1acc5dd00835376d586d352ca606076
TLSH
T190F0C0059B408E17D4F650354352C310BB574C52F0375F993899381478D00E38AE4D8D
MD5 SHA1 SHA512 TLSH

html/images/tile_subheadbarbase.jpg

SHA256 66675da7d1d26e369600a2f65a454c4c5c236b86d92a00892ef1fe35dbc1b681
MD5 5873e2de9d02fd92e2860a2d940e398e
SHA1 8162e83cc27d7b82ef7c2db2ad86a8a1c14d1aff
SHA512 2e4a985a902f3707bfbba7e26d3786632c70eac0a0d3f7e3615c047d083ccdee32fa354f849eff44cc3116e9863c15706aafbc84237615e20c41bfa1defc9e91
SSDEEP 96:alNg07KWOy4lcJOsfPlEsPlpJy1907GWJknHZWBV61IQHGM3:Y+dly4l9sf9l9S19mknHqVPQ53
TLSH
T18FF1502AABD0DD23F8E0553598E9C3C79310AC98A6A36B8778CC79867F753D14C2C742
MD5 SHA1 SHA512 SSDEEP TLSH

html/images/tile_titlebarbase.jpg

SHA256 b883c357a562899a2e61ef01d4d944a02fc731474d7bd19230e131457c4ca471
MD5 7bfd70e2959984343e4eeb66aa1a2876
SHA1 5e56690bb0c7ab8cee7d2b04e3e0981e97d54089
SHA512 2454da0ced0af2461f4b0d8974f8d078c92b2a24cf8f70cc9148db78f2ac4bcec5e92ddee9892f17fe4738229fe58332789231c2b86d63e1e8a7f950c6bc571b
SSDEEP 96:llJXTi7lWOy4lcJt40PmjsPmazi75WJknHZWBV61AQHGN:vtely4l040pdTknHqVHQM
TLSH
T1FEE14F26A7D0DD23F8E0563698E5D3C76310EC84A7A36B8B788C79823B753D25D2C752
MD5 SHA1 SHA512 SSDEEP TLSH

html/main.css

SHA256 774c67524c2cbad2ede047a4bba98953fe399249e4f1d4c203abd59975b1571a
MD5 02e09b9ba803abc9bc7e627414a940f5
SHA1 c3a8fb2e79c48c00b508b48486fd3fbbe0345f93
SHA512 c6c4170895fa72eae8067866c2ac76d0069e298f36bb7745fcaec3ae5a58d69cca75e1f8a04a790c231c4f1386ec1d2885a7a3e9ca8ace03dfafb3b524d5025a
TLSH
T15C41EE5DDAE9295EF30768FCB7F12B025E448426AE0FB5B5B4A02129A58106937F22C8
MD5 SHA1 SHA512 TLSH

html/main_error.css

SHA256 504718d91c2f4b5f013ed5097f50db660836ea463fdee85ddbd62c4371de376d
MD5 a04fbb7d82769f7f5405d5d21e8fab9d
SHA1 0cc4a6b5629da792aa6b6eb7a68d7e573e5672d5
SHA512 ddef5466548eed3af14fe228e2682c92917bd18d31acc369b45eba56ecf736e3dd0475e6d9da54cfa41255bb55ea10d8812b86896d266adc21e535cfdc65d62a
SSDEEP 48:s0V2uvAfm1wAw8KghX9ArrMB/YAoQJ0Rl10wLSj0c1/y7CMgSDL9yeFUrcv999Hv:moAfm2Aw8KgUrraxj0/LceCOHAU6e
TLSH
T16291229EEB49208FB31B7AA9F7B09F511F2C00E2DE0F1639B8751758D08A06837667D5
MD5 SHA1 SHA512 SSDEEP TLSH

html/package_titlebar_bkimg.jpg

SHA256 75d1d8d9e01dc9632e587236fae19c1b71d435715fde9597a81af982c27e6cd4
MD5 295b1d334c4b3fe85410e109bb67c021
SHA1 a1be3fc69a6a54d0915924fca7c8bedbe15ea518
SHA512 a2b730fc2fa0c10de1e0c2fa22be9b9674f769715e478921c7e3bcc29f0e8658b60fa24bd1af995f8108b17cf3b5f99021c1578d941d684a8bddcad44557d6d7
TLSH
T15EF0204B5BC28E33ECF0A1311222CB00BB2E9C16A0375B8934986868B8C06A35AC0D9C
MD5 SHA1 SHA512 TLSH

images/Buttons/register.png

SHA256 6a3ebe8bee95398d3c4fa1145b630fbd7b9856a665be86727d49499e2a7759a9
MD5 a20b83f099d1172c6f6badd1ff7f7e09
SHA1 defb62b4bd2121c7f0b36070ee2a4427d035a2ca
SHA512 f75d07a539577f718ca9a7e55f916f525e9e5d5a337a7369a793f06a1421d3d2eb5deda3655bfa174a3588a4bf362e3b241b66780d841a60da04bb92bd89b6cb
SSDEEP 384:PJXE05J7HsvC+n8uD0U6UE8pCBrIZjUNh:N35J7HcZn8uhC8FwNh
TLSH
T15852CFD6D961CCCAE610D8225A8B71414B591B6D3A27F31D82DC5FCFB1ABA42AE87034
MD5 SHA1 SHA512 SSDEEP TLSH

images/Buttons/register_over.png

SHA256 af2ccdf196e4c7a86f9596f987dc88ea02f0c2df3713ffc8ca1840454ab9d006
MD5 31d0a39e6008565e9b07adf304c20947
SHA1 dbc4bd4098cc2531fc23ff24de7ffae9d9f8feac
SHA512 cb2b613da92390730e597b34e25dea255e0f0b75d067772983dc3a0489f18ff5504bc7d1bb6f798a673619402df1a714dd6558fbad98d547a137d50c589c8fdd
SSDEEP 192:ISDS0tKg9E05TlMghjxhBbb+Caqx3B91Kev73xx4454BEPOitJlBv10YVISKYCB0:PJXE05Jb9nxx/Kelx484YrdF5uSKYY0
TLSH
T1C052C0B2F11078D134F8A9A1650D55C0CB816FA4CE315B99584AF2EFA012CE2338EE59
MD5 SHA1 SHA512 SSDEEP TLSH

images/Buttons/renew.png

SHA256 fd164babde51f3246aa9c00279f5e6bc451f304c4ebf035b6082e31ce6c6e616
MD5 51cb7d0fc75a26dae2e4714ec2c4a69d
SHA1 a4ba5de7185922e8234619864455006d8808d9b5
SHA512 fb33a377f06f08547e99d6123cc1469762fb8777175cfd95a77373740a5aae750a850ee2d346740761e6df3191b455cf1e6fbdcc3f0b6ea7746a5aea4e3a038a
SSDEEP 192:ZMQU06MDtr3ti5dp1wRXFq8mCRdprGGhN7ltCgkUH/OWh79RguxY:ZMm6eJ0rpUJR7yGFtEUHWWhxTY
TLSH
T15522CFAE6312F534FF024A28F2C199C36270B744393D4B41D436819B939BF7586E2B17
MD5 SHA1 SHA512 SSDEEP TLSH

images/Buttons/renew_over.png

SHA256 db769b56c012b741db81fdbf132155bbbfdde5dd2131a0ea64d20dfb38aa335a
MD5 75d62241196c8f1fcc61389278b452d1
SHA1 4885aa5c9fb0dd14994498b080a970dc9936b3cd
SHA512 6af02d0c1fe95db2dfa98d8ecd3ddfed3881f0eb79865ff8dce320026e8c23efa7a9f5099f75cbdbf5f7c54fcf01e19c2f8bc49412a845c9a7ced75c2d8a6ee3
SSDEEP 192:pq17eGhkVsCwajAe+ZiW1hvefaZMm/hPWCyUwGt9pD+/q5nkIH4FZlJDKK5EM:pq1SlVsCwaEe+Zi6GfcM4hOjWtAqxkIM
TLSH
T1E522BF89A1CE18D93FFAE4FD431207233DC5CB58C53A048B1E28112A1FA9F6D56E89B5
MD5 SHA1 SHA512 SSDEEP TLSH

images/Buttons/start.png

SHA256 00e81108d73791fb9ac9a529176126af8f2f6a9b27a6db15f5aaa8c213db332d
MD5 6efb74de8d6e986ad59fbd29b32d5908
SHA1 0aef1e2fb031d48ab6da78670d4ba2470e82cd89
SHA512 43142487e48d528c0cafe786c439f2d8c2d0a1d51c9765ed6989c1fd103c353ffebe057fcb0c3f0720df2b6ca3c28dbf4ccbdc4d682cc03e76fbf2bfdd8ed0e4
SSDEEP 192:RDvpeQV2dHV17yWsjplKBRN/9gzDR5FxmpB+3q0gNfUk/:xBIdHf2WsXKP19ud52pk5gNv
TLSH
T1E1128DC836D02B56C4D6E62908B19427CDE49DACD6290EB22CCCE831553EE6BF725C5D
MD5 SHA1 SHA512 SSDEEP TLSH

images/Buttons/start_over.png

SHA256 30a2d9b1dc241f345eb1882439ccfc544f67272f4cbcf05ff45654211163bd11
MD5 4ba2cc08db43a7c2880ce93e061edafb
SHA1 85b73159dcdfaea3968c4bba043ab8c15cbd2bc3
SHA512 83cd489ee8ce855f20c74f5af1a9fd9828000c2687eb81656d932ab32e42aca55eaedd0b5c177d919bfa6b4562a1416e850416f5cea06c51457a844a19c82ea5
SSDEEP 192:kJ9uWjU5pBL4koa6Gc7fMOSur32MnNrwHSQhOtBKG9tPBF4YWrgJos6AQjjezHE4:kcsa6pM7u7FnNry5hBiHNCs6tjebEWr
TLSH
T1B422B08E215D4932F99D47336AC3E413058B3EECD149D4EC2697E8A1BB16AD153C07A8
MD5 SHA1 SHA512 SSDEEP TLSH

images/Frame/register.png

SHA256 2df04e8b7fe6f23ad81851e775141d5084726f9bfdbc937e737235be287b5ef3
MD5 48953f8722084f523f079085394c7444
SHA1 a06889adaa9e19bc8ce60ee202afcdf6141e2e31
SHA512 1c81f13a075866ea8804848b454d6c6b14e2de93ed807f11f775c05604fdd1c5b3f1eb85b04f9401be1016915cd8cee5dfc0c56df9ce7563b0a239e87b64b3c4
SSDEEP 96:2kVWmPN/cBGkPqmp1PY4XaJno+ywFTGERjGsORGHKVdoPzN82NuSFN1iHt+4JmtN:2k/5an0KatvTv2RRdqzS2H1iNbJmtGOl
TLSH
T191027DC8BFBA6041F124542D6ED06835C522489B79D91E42F89ECE2E6F71643DC853DF
MD5 SHA1 SHA512 SSDEEP TLSH

images/Frame/register_over.png

SHA256 cdc5c923792435f56a65e5bd53ef01dedcb3556b125fa6f44756d2101a999b5e
MD5 62b87541c1bdc9424db4c315cc4ecd26
SHA1 8551f3d304093dea4edb4ac2e16fa0c32f9c86ea
SHA512 5b8a9785f04addeb353ecb65375bc323282479a4e0c67e809ff938facdc381a8e464d18ef670a8f1b020d33d3d63565affe271e8a425409d5ab1b9d2b4429fe8
SSDEEP 96:2kVWmPN/cBo48nYA1zorplckXwp6gGl2BspJOlwiXWiWlbsl8l0Uo15xGf38A7vC:2k/9XOlckK4TpJO5Wlbslnp1rA7vTm
TLSH
T17D124BC4BF2171C0F33D82A254E4919988672BEB3D800C1B358EDE740FB52929D997C7
MD5 SHA1 SHA512 SSDEEP TLSH

images/Frame/renew.png

SHA256 fcc11791e3abfbe4b3e2e98b0b3f555a17b6d249295f2631474ecc880fe76b60
MD5 ffc89e0b584906f652fb5e9024b938e6
SHA1 47d91c2d1aec01ca4eab5daa65061e6bc1243a65
SHA512 4eed2f8570a0f89a4d34754943d417c2f6c1664b1e406ff1f530ae857969981effe75bba6cfb90c3b92a4aca0304f61e4682ee0510f81da5851354357c9be5a1
TLSH
T1FF413CE35FC6B6E82612A2785D87F060BC531C1644BCA6B4B06702D57735FD290F4321
MD5 SHA1 SHA512 TLSH

images/Frame/renew_over.png

SHA256 2814afbc1a8a01a38fc5f3466ad4f4ff4f50f2b02dca668aabf5423e3a1952a4
MD5 4a8e1fcd2c0c5ccc7f5e874f887b7586
SHA1 111c69c17d722669ab12bc5a34413560a1b3c167
SHA512 0ff36eec1d86019ef5454f3cdd60afcadafeb99167af6056b0b29b18ec46b01a14f44adda8cdf2a2e75984acfc0fc18da5393652d901a228a33e96ef0a6b17f3
TLSH
T184516EF91A7E3EEDA839282B02C945C156D3123F731C06F15680056C1DADE899B703C1
MD5 SHA1 SHA512 TLSH

images/Scan/Fix.png

SHA256 2a4e1bf27f3013c1204d20d34ad15340f1f706592ab7f9ba82ac502f95f2f628
MD5 f99506f18c332415cf2e5ec8e01bcc00
SHA1 ad3a24d3ddf93ecc73fb1240fc7a3b07409aa94c
SHA512 b15d010e2c976cb7bcdb5faafe6c894722a8cfbb0dc2bc1ddfcbcdd912a4ca8237fff6ce8237e89e8f2a27eb64da9ea33f79ed2209ca7346aeaad4b5fc3c8e6b
SSDEEP 96:H2qJqoj/8HUnvHH2vP+nAwAOL85EC67P5nK3ATBU5dR:O+/PHHGlu3bpKwTBI
TLSH
T13DB18CA4F74108144A9CC1A878F2B875EF73A5D1E850999EBCDF0803BCAA63B4D940CF
MD5 SHA1 SHA512 SSDEEP TLSH

images/Scan/Fix_over.png

SHA256 7b730ac8de3d3543cd8edaf492cb0c876e970fe6a1893ec2454e743726fcf90c
MD5 82bff38f389d9530a8e60a21da2cb83c
SHA1 445cf585fc939e230d5d949035812393cf0dd480
SHA512 c20a7bb29b1bcbec01cacb973fd78caac441b08a2496f1ffbb8aff3920934182daf59119ecfc4e82f718a8be7eeff911d81f9410f2e963f260e5cc34ad2b33a2
SSDEEP 96:H2IFEiyWQ8YxHKOFDW7vuiWuIoeYVBGL5vRtGsc4ROkkg+ofgLfBky/o3LwAvV1:piWEBqurBRtGsLkggjSy/o3LFV1
TLSH
T107C18D63FA22255CA0D8FE8590A2DC13DF137A6AB84161BAFC59DB15B09C07411AA08B
MD5 SHA1 SHA512 SSDEEP TLSH

images/Scan/damage1.png

SHA256 8ddd27a5aed43d5383e534d45ad4bcc912d86f0e2f2338dca77ece99b805d322
MD5 916be38b715e225f239021b0694ec228
SHA1 e7cc8736126704f15b99adf4f9d54547a30cdc06
SHA512 6ae540e838e0e4e40889350d1d63e44d18815bd2d3532b5dd8d343294746b8b7be18ae1f573ee617045c7850aa5b152125e9f3f4839b406dfc82653d8c74eefc
TLSH
T19621C289EE148FB2E3A0471A40A83275ACC2AB0576210EA09E8C50920EA6810B5E5E9E
MD5 SHA1 SHA512 TLSH

images/Scan/damage2.png

SHA256 adb836af314b0599a081ff3ec14000d581d31865164069ca1c5b7c0c5efc04a0
MD5 26841bc4141c7ba4c911ffc783c38f7d
SHA1 3b3a4d259910485006dda1b781b55e0ade63a863
SHA512 f59456405f8331f7a19edc79ee871f9246d90a77dd314391484ebec6f09a4c9e5942978b983d0b878aa7b9b3410ededb2f2b48d6328f6af723ea90e12f0b9d82
TLSH
T19621CBC60BF0CF1A15419CC14644C541DCB9CADC8755C97874E6FA487478BD21DE4F76
MD5 SHA1 SHA512 TLSH

images/Scan/damage3.png

SHA256 41bf1a3fa7c044e059e5f0f77208e6ae75f9afc621aaa136094925e84c62740d
MD5 c86d38142a4748cb87c5370cd0f2f02e
SHA1 74292147985509032f495d04123e755e3af37866
SHA512 75c78b9ca6bf44103aaefc6ecd480a60e3dd6d7ab1416a1377214fb7e5b2af4223ea42fab45cc3ba81739ce19faf92b741cbc955eb9b21f78a348f049b239b33
TLSH
T12E21D8D7B20B76D1C706153C64478451D59A06806532FC96B594949027EB2444DE052D
MD5 SHA1 SHA512 TLSH

images/Scan/damage4.png

SHA256 e155767344d43826fe5fa0c828f8df1e9321262f662b36e22d1109410e00b79c
MD5 04471002fe82e49623f5fc4532c52952
SHA1 ac8f936e11079f9472bd1610f281f336f5edb57a
SHA512 bf1940ab3e1cf81d871d4a419ac3160c5bde7af26da4802c1e87e6600a42d70c71f7ebb2edac2fcb09cf9388eabbda72bcd6c0c23026199be537aeb163323445
TLSH
T1D221FBC397A5CCD04B1C36C107BA1434E86F0E6D5B20087D20D65477543C95C44295F8
MD5 SHA1 SHA512 TLSH

images/Scan/damage5.png

SHA256 4455137c051480ba6cb35ce826f0ea57818652009baa9a2e6b38bb61bca8f0dd
MD5 65bf84ad8758cd8ebd93acc69feab6a5
SHA1 340a9b136ac83b0e6f1b0bd54587764248aca98e
SHA512 c719dec7920d55fcab4dbd98658f761cc2ed2f09171f23181bad0f44c53f3186d212bbb14e6f92640590d17c7dfacb4710713118e2d28dcf2d445fa6c20b5fb3
TLSH
T1C121F8CB545398E8E96982815D8C4AA07D55891A8D9CFF15C1ADE60571BEC420D843AD
MD5 SHA1 SHA512 TLSH

images/Scan/damage6.png

SHA256 50dbd11347ff8619c12ca0c7e1abffb8d2fe24b275d926de42cc102a1110b4d7
MD5 8dbd5fd3da5fdd6748008dd3c6c4c2d6
SHA1 d115c6c950a6c10a772a0fb7057963ce35042d15
SHA512 e466d0f440cd5433315790e239041c7ffc10576abd95da1765a1dd0dc016bd567d39e11ebb7cbf25800aab02d2e895d8789fb94894ede1d5715e69f9853c3224
TLSH
T1B221D88755C7887A30133798099B180967734566AD7D9ACA3E4DC31C0EF6D86CA7236F
MD5 SHA1 SHA512 TLSH

images/Scan/rating_h.png

SHA256 bf622a1cda7f21343644d47782d47a4b31191d381d4b98abc2763fdf635799d9
MD5 57180c952c922623898e1fc59e613d85
SHA1 ecc9ff785ac075f5b6710cb433f5ae5ff0261b69
SHA512 1608a00f19c31b70bd8a116c89ad62584935239c39633f8246aa375bb6bcb1d13d54e7273893039e2dd567424cab3915b4b4522ee16f7c730aa8c4b62dd0c46e
SSDEEP 384:8vDjc9kPygwDo/DYKTZwBVCSTYmIp2h+/H3/+4H1LVfDBub:8rjKfc/FTZoCSTYm82h6jV4b
TLSH
T15FA2E19A8388E443D41F36DF68579A8782339C042352EBA0E5FC2CF613109BE51F55AE
MD5 SHA1 SHA512 SSDEEP TLSH

images/Scan/rating_h_scan.png

SHA256 5f7d9140e46c1d04ba95c1ea958d3fc42c3aae36800bc6348e949e9de191984b
MD5 5cfed31bbd5b83463092d22d9d5375ab
SHA1 79127f4281db4a20f6529ba1c099243d62abce2e
SHA512 ae00939528b558959949b17cf50aa163f404b4c3ad886a3f186997df1638e15270c3437b8780925e623fc3b3c5c7458eaf384a2b6c09d5c2791ac68d0dd15af1
SSDEEP 384:1XQ10UzFnaiBtXFtTLAPE6t0UiJXpyq27lUiupczvoJBRv+hpOcT:1Xg9tVtTLAPE6t05JXpymzczqzW7
TLSH
T12CA2E1E7CD20BAE1C93BA99460CDA1660C8ABE2861FD5BF43540CD17B7457B68203EC7
MD5 SHA1 SHA512 SSDEEP TLSH

images/Scan/rating_l.png

SHA256 2219a39d39de161581f2fe0b1ae560bb033e9589a8f1c48407d1cab038cd8ddb
MD5 aeb25b2e51f7b437e29ab03b30b51093
SHA1 2afc408a96d7ffb485f7cc6c895df0ba4da1464b
SHA512 bf8479f1ff2c727a31391b0b3385edbcb22a56deac7b99bfca36870b0ada3f55cb97e55468a9f940acfc11c6fb99cc37a8ce3a123dcbdb8b0ad5c49764398473
SSDEEP 384:l1OLrkAhlTqhNfZsLX7qJl4OIjdsVh8AlJ5qFR85/bKKPpLqPHy:lgLrDehc7ol4q02jeGzlh+y
TLSH
T1A2A2E13DE702D0E7F528413B3D878B768D5D514479B8FDB6198B24A7CB2E2B04E1A5C2
MD5 SHA1 SHA512 SSDEEP TLSH

images/Scan/rating_l_scan.png

SHA256 6bf55d5aa06103ee4d12c93cf565e789312a3aba5f5caee21744d42212d428de
MD5 e63a305ecd364178b08e6a6c623e8659
SHA1 56bb52f6768039cdd71223eb96b179e79ae56f77
SHA512 1000536a750c14eac14bfa533c35757751118fd2c57e54f135dffe2c81c316657bde7b8aced87a8205e5ba265bcfa86129237af0353d44ecc3021c8e498efdb4
SSDEEP 384:Tv/N4lIVzxIywlZlbrZYa8LVBtDz+QZV4nRwXj/maQueS3u42HeuG:T94lIVzxMZl3A5Py4+nRUTRr0eB
TLSH
T19FA2D03D98079520A5EA1AAE340FE5F8C93A0E901A59FAE5B5C7DD0901F1EF460889C7
MD5 SHA1 SHA512 SSDEEP TLSH

images/Scan/rating_m.png

SHA256 63cb2f17eb6819fd4db91c76d831a077604818c59cd2db5899b3c11001deeb66
MD5 310ae634677a6ceda206ac655e979a48
SHA1 09444a33ad20f480f4c05ec87df7b4d8fca56078
SHA512 7ac90b01cce8663b68b631973f17673ddeda8afc93adb632146fa8acc5959d64414b39d1d2254d7141d0d69f214215b17e183b52be9f052e16190e6ecd2ffa98
SSDEEP 384:+/pIj7QnkSZNpQF1TbLl1Ngyt6T9z6+Mn9iJ0hu12JIjeEpxYKAwph8hihoA8f1:+/e/fSZvQF1T3hB6htYcJ8rmyEX+w3qR
TLSH
T1F1A2D128B040E36053613345745B219BBF8388BCBDA355D975E3E06C40779A7ED92DE7
MD5 SHA1 SHA512 SSDEEP TLSH

images/Scan/rating_m_scan.png

SHA256 081c69076c0b319d516423c8b5eb34049195a4f0148b6950d75a92503c32abb0
MD5 9b2f1c0e7ee93ba9c0d61644f519105b
SHA1 103e7cb180c1cadd1f2fce36a212a8ed36dd6d88
SHA512 9079b624c4caa895bcee35fa7410b95a18e1478ded7bb9bcaa64bb69261ed27990f3843ccdbe980ade8a5a8c90f71b21036874eda1cee6e84053518238be08df
SSDEEP 384:buZjhGZFuJzoJizQtz/ZArw09ABV4bN5A943niUhdYUN/9tJZ6HNzGe+s:ytuFuloYsz/uMgABEbAUiUh5N/9teSI
TLSH
T153A2E15A5AA5B9D23AB1E8664183626DDA3487DC8096810D745CD33F2C2F6BF0237CD7
MD5 SHA1 SHA512 SSDEEP TLSH

images/Scan/rating_mh.png

SHA256 376ea421d0a723b8addbc1831874b449641242ecc2897fdaf1a4b40deca368d7
MD5 3547f6a52d17829811a3ec906061a729
SHA1 b6846689afe12026334b6510b9fa747e172d212e
SHA512 df3ba9f840cf4b694e59dce8c3fe05f4348d3fde33198dfa6908c619f1ec6836c5ddc45610872ce333e98cb63f752c0f58bcfa010ad7f33148c8dc7fb6bb73e6
SSDEEP 384:3xzGOotFpnMoQgbGzDTg6VoRl6GAnCGJPFnrIWU7WyjIdlIkDgmh9wBbRQsB8iZ:KqgbSDTdV06GANnkWU7lIdlZcG9wBbFN
TLSH
T1C4A2D0129186F587261CC4E12DE4CA3B5337D102E37855779FE62977F62A1F8C4622D3
MD5 SHA1 SHA512 SSDEEP TLSH

images/Scan/rating_mh_scan.png

SHA256 8b771459e507a08968015a2b0c94641f682f4b5b82ddc1d6f31ec82b265dc4b5
MD5 073454e61d4cc72677f8821698d1df82
SHA1 e41370c79e4552d022ff4d878cf44b67abe970b9
SHA512 b8be3536fa4a241bcca3e8ac3ca72fed25cef129c9bb5cc6643a28d8d2b16e4ace90e22f301197db817d35e5f9897a8b0ce9bf4506f88f74ae49d5b3440c30dd
SSDEEP 384:HR+k7qpQ/m9W6/MNqfRpjSbOOUCalXWMJn/dPDz6MC5eV8rbUto2p1BCXEkdDZXq:HA46Qu9Wp0ffTOAXWqlPDMeV8klYUkva
TLSH
T1FBB2E15F76A52B840E269F5F08C9323B85034EB3A37824F2421EA8F293595760D07DE5
MD5 SHA1 SHA512 SSDEEP TLSH

images/Scan/rating_ml.png

SHA256 9d260fc5580dd603933c09ae82de278ee303ebbdbf92b2fd41baee9c78378b32
MD5 9f80f2d7d38b60f09c6221939920db56
SHA1 d97ad5f045167fa8bb7a588894e0ad8a838b85e5
SHA512 e906b763687f04d8f9cdb9941cbf2632d386a7e1718a0b329b991e45699f5e413c097bfe7a7cc7dc0b63ed3d3db648311ee9c4226899a72495a2e2aa161d15bb
SSDEEP 384:2kRbpOFL9sBE+aDiAlM3CotF1GScUvZ6x9xZh9BjhIWj4vf:2epObsBE1DP2zdcjVZnpW8G
TLSH
T128A2C0D4DC115A218F7FC94D782D68A360EF1A3C7B58CAC57EEE410421390A698EF7E6
MD5 SHA1 SHA512 SSDEEP TLSH

images/Scan/rating_ml_scan.png

SHA256 fd54f9fc904f7007ada901c7a0ef9d57951799c1d6754f14e5aa4cdaf44691f1
MD5 5cb6ea73c6352f665883f917a61037e4
SHA1 ddc826afeb024622c3bd63357b6fd4766ce28159
SHA512 88775db7208f69178b42a91db78ddf09debd26efd95b736f2644509895273573e67f96fa4d1b360cd29bef5e7c3aa23a961979a383588e471ddc371d258c061d
SSDEEP 384:EV1p3gjqLPd1Fsw19TxKJmp1jP3JtOr40UlCVrw01jfBvITfrcZgihksCoO479YP:63Wqp1FF7VyujxAL9rRj5SrcZZkQa7Eg
TLSH
T121B2E11DB4056683633B621CAEFF9C5B8E4B7AE3EFED0E9160C848515604A39040DFEA
MD5 SHA1 SHA512 SSDEEP TLSH

images/Scan/security_high.png

SHA256 2b49f0d6fd7f3e3276e8138698a0b48250be82cacdf4bbd6bd18a4331e79fc32
MD5 398744e014721bfbc24d0d199febd01f
SHA1 b498c622361820531beae1476c38ad8452e46364
SHA512 d309feb2ad9c31700d6dd1760d5037107d4a71e0da493fee61223a8e0d9621a62a9706f2e9e4090fd32330887dd392f091811785a72504dc5e986110d59dfe78
TLSH
T1A1611954A9B63A62971BA3BF0EF5942748024441A8B0FE63F9DFE4191D603F2081A3CE
MD5 SHA1 SHA512 TLSH

images/Scan/security_low.png

SHA256 0b5a714a0ed72ececf0295e53c83fdd561884c3aa99d6ab14acc8569143b3a64
MD5 b01de5fcb5b2595cf9693c7c6d6c5d5f
SHA1 8f8814763b0d2dbb7667fc234c20147921372e4a
SHA512 84fdad91aa17e91521f99cb43f839b4dbeaf7e12ce74b51d4cf8ae75f3447577bf7931b8ed15a2296e42eff1f0dbb9654df7640120547dd334d24d9e51d0cf19
TLSH
T1C5612A4AA4A01F43635BCA6E99E5942F0C16551078E166BBC3CFC8165DF03E61A4E7CB
MD5 SHA1 SHA512 TLSH

privacy.db

SHA256 57aff943451d58580be0b8d87667ca1cef58e79f136a491d12396c56f0f5b5dc
MD5 4b7e2cb858f566a654cc26f63e472b55
SHA1 d7da7aed84b72aa7d78a4052459cd1918b26e3e3
SHA512 a3bc2221a53b129880b67c4166d7e100d84e257e598e43c53ae17b9d1adddbe3758a9844104673db1738335ebb877dedbce91b5879d585aca161c94995afc2e5
SSDEEP 768:yGhUr4U3R7WHLsTMZaWVXBJAd9efrcXFQwCv/1BRu9eGBHIPob5rC6:yG2V7WHLsT2aWVXXAd8gXFQvM9jqo9rp
TLSH
T1FF03F14B0681877AADA7694862D940DFE3FC49D01B2CF93F84ECD7F1984A04D6DB2C5A
MD5 SHA1 SHA512 SSDEEP TLSH

settings.xml

SHA256 970e5ce65bc2f57e31bc75fdbe4e12c012671730e13c8cc11fff5c9de02cdd25
MD5 081abecee1af3a6ff841377fadace879
SHA1 d3e83859248b12b3357929634794828551ffda75
SHA512 285cdd9d9182a1673675acb36e234c17b765cab3d308b4be8ddcb138104d65117ec1bd4ae5041aba928db61362774d8c2e20d91800fef9a7c97612fe9df17944
TLSH
T1A001BDAEF038A4B1E6276CE1DFB3772620158D6448B98150CE16B97798F14B873F4D98
MD5 SHA1 SHA512 TLSH

sqlite3.dll

IMPHASH cd4a5c39f36662a6a2f5167f71af9796
SHA256 aab3f06741535786f49881d6ad7a5a24b4c3591206cb04091d56752603a44751
MD5 da25d9633cb3669411ca07e29f8f7b55
SHA1 feaf2187537b16d69e304766c6ac2776b63429fa
SHA512 54ec2175a8008e0e283cae5754be6d49cd5ee4cd82b4a1ec19109a87c5fd3baaa4d7ac6700d20a550537f3d0faff7a74ed7ed8fe68cf698c4b717f5f8a49a84f
SSDEEP 6144:Bev+rIWWdd5VHtKKaNzTEPeHe1ARVfMx2rl0NP7Aaqlj:Y2r8dtHtKKaNa1kl0N4j
TLSH
T1F3644B53A952CC35D4921378C1A60736A63CE2F0AE67D787E694F43B5EE35C07A6830E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_DLL

PDB paths

sqlite3_aggregate_context sqlite3_aggregate_count sqlite3_bind_blob sqlite3_bind_double sqlite3_bind_int sqlite3_bind_int64 sqlite3_bind_null sqlite3_bind_parameter_count sqlite3_bind_parameter_index sqlite3_bind_parameter_name sqlite3_bind_text sqlite3_bind_text16 sqlite3_busy_handler sqlite3_busy_timeout sqlite3_changes sqlite3_close sqlite3_collation_needed sqlite3_collation_needed16 sqlite3_column_blob sqlite3_column_bytes sqlite3_column_bytes16 sqlite3_column_count sqlite3_column_decltype sqlite3_column_decltype16 sqlite3_column_double sqlite3_column_int sqlite3_column_int64 sqlite3_column_name sqlite3_column_name16 sqlite3_column_text sqlite3_column_text16 sqlite3_column_type sqlite3_commit_hook sqlite3_complete sqlite3_complete16 sqlite3_create_collation sqlite3_create_collation16 sqlite3_create_function sqlite3_create_function16 sqlite3_data_count sqlite3_db_handle sqlite3_enable_shared_cache sqlite3_errcode sqlite3_errmsg sqlite3_errmsg16 sqlite3_exec sqlite3_expired sqlite3_finalize sqlite3_free sqlite3_free_table sqlite3_get_autocommit sqlite3_get_auxdata sqlite3_get_table sqlite3_global_recover sqlite3_interrupt sqlite3_last_insert_rowid sqlite3_libversion sqlite3_libversion_number sqlite3_mprintf sqlite3_open sqlite3_open16 sqlite3_prepare sqlite3_prepare16 sqlite3_progress_handler sqlite3_reset sqlite3_result_blob sqlite3_result_double sqlite3_result_error sqlite3_result_error16 sqlite3_result_int sqlite3_result_int64 sqlite3_result_null sqlite3_result_text sqlite3_result_text16 sqlite3_result_text16be sqlite3_result_text16le sqlite3_result_value sqlite3_rollback_hook sqlite3_set_authorizer sqlite3_set_auxdata sqlite3_snprintf sqlite3_step sqlite3_thread_cleanup sqlite3_total_changes sqlite3_trace sqlite3_transfer_bindings sqlite3_update_hook sqlite3_user_data sqlite3_value_blob sqlite3_value_bytes sqlite3_value_bytes16 sqlite3_value_double sqlite3_value_int sqlite3_value_int64 sqlite3_value_text sqlite3_value_text16 sqlite3_value_text16be sqlite3_value_text16le sqlite3_value_type sqlite3_vmprintf

Name

.text

Size

241KB

Virtual Size

240KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

248B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

448B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.stab

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.stabstr

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

uninstall.exe

IMPHASH be41bf7b8cc010b614bd36bbca606973
SHA256 1d09b176f367136c3bafbcfe4c2c2238ae70ac7d7a118492450ce60f70440a00
MD5 f2ec926882b3bdba647eb39015256141
SHA1 cf49b24bd2c3a7a36057fd1a3707430ba3b453a0
SHA512 998dc3fa4b72f8aeeadc096da69e82fc17f8805578c2cdb7bfb751829dee44000178a09b5d4dbb84684a7bed6a4f5e16aeb51374496968a8d21dd344c0b984d2
SSDEEP 3072:D5BuYAVrgUCPneIpL8/lMoNLrn8Nkh/T+n6vEn1/ZnEl4Fsd1nFmYw3lKdo:D50gUCmOMnn8NkhW/l84FsdNFmYwV
TLSH
T1D734AE427BF08476E6EA0A712CB59B275A76FD211931C60B67109ECF3C71782DE29327
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

df:18:51:1b:52:5d:0c:3f:84:db:5f:bd:47:35:8a:ae:41:45:46:21

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Paretologic Inc.,OU=Paretologic Inc.,O=Paretologic Inc.,L=Victoria,ST=British Columbia,C=CA

Chains

Feb 13, 2014

CN=Paretologic Inc.,OU=Paretologic Inc.,O=Paretologic Inc.,L=Victoria,ST=British Columbia,C=CA

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:2f:4e:e1:35:5c

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 13, 2011 - Apr 13, 2019

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Paretologic Inc.,OU=Paretologic Inc.,O=Paretologic Inc.,L=Victoria,ST=British Columbia,C=CA

Serial Number

11:21:f9:94:5d:68:b6:df:dd:55:72:92:b6:3c:5a:30:15:e1

Issuer

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 25, 2013 - Feb 26, 2015

Minor OS version

0

Major OS version

5

Entry point

14511

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFileTime CompareFileTime SearchPathW GetShortPathNameW GetFullPathNameW MoveFileW SetCurrentDirectoryW GetFileAttributesW GetLastError CreateDirectoryW SetFileAttributesW Sleep GetTickCount GetFileSize GetModuleFileNameW GetCurrentProcess CopyFileW ExitProcess GetWindowsDirectoryW GetTempPathW GetCommandLineW SetErrorMode lstrcpynA CloseHandle lstrcpynW GetDiskFreeSpaceW GlobalUnlock GlobalLock CreateThread LoadLibraryW CreateProcessW lstrcmpiA CreateFileW GetTempFileNameW lstrcatW GetProcAddress LoadLibraryA GetModuleHandleA OpenProcess lstrcpyW GetVersionExW GetSystemDirectoryW GetVersion lstrcpyA RemoveDirectoryW lstrcmpA lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalAlloc WaitForSingleObject GetExitCodeProcess GlobalFree GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW WideCharToMultiByte lstrlenA MulDiv WriteFile ReadFile MultiByteToWideChar SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW lstrlenW

user32

GetAsyncKeyState IsDlgButtonChecked ScreenToClient GetMessagePos CallWindowProcW IsWindowVisible LoadBitmapW CloseClipboard SetClipboardData EmptyClipboard OpenClipboard TrackPopupMenu GetWindowRect AppendMenuW CreatePopupMenu GetSystemMetrics EndDialog EnableMenuItem GetSystemMenu SetClassLongW IsWindowEnabled SetWindowPos DialogBoxParamW CheckDlgButton CreateWindowExW SystemParametersInfoW RegisterClassW SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharNextA CharUpperW CharPrevW wvsprintfW DispatchMessageW PeekMessageW wsprintfA DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW LoadCursorW SetCursor GetWindowLongW GetSysColor CharNextW GetClassInfoW ExitWindowsEx IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint FindWindowExW

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor SelectObject

shell32

SHBrowseForFolderW SHGetPathFromIDListW SHGetFileInfoW ShellExecuteW SHFileOperationW SHGetSpecialFolderLocation

advapi32

RegEnumKeyW RegOpenKeyExW RegCloseKey RegDeleteKeyW RegDeleteValueW RegCreateKeyExW RegSetValueExW RegQueryValueExW RegEnumValueW

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

Name

.text

Size

29KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

11KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

458KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.ndata

Size

Virtual Size

580KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

88KB

Virtual Size

88KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

$PLUGINSDIR/KillProcDLL.dll

IMPHASH d806a080e21508dd768fa70be247d2ae
SHA256 de1177a4bd1c56c3555f366d40b37d7dd9cb25e16c4973d0a4d22bf9a8af7aed
MD5 1cc87d2b5a79b18f133b4f944e2f2f74
SHA1 98e0ddb727c76e06be1668434d754e5b80a0c154
SHA512 d8fee1c09fef9af4e1f38baaffa3a6d059713b14ecad900815c086cc22855644fcdeacd6bba31ea6e6925831e650f7b0d34e6dea4c57a978fb4f5bf0cd6d72a9
SSDEEP 384:JLmJwO50x66T9JOpOUT38YZvml7xoKdyuwlx8xSiorppugBwUdJopS:JW50hJwwUTsXdPwxvtpDtdJo
TLSH
T1DFF26C507C8144F7C28E4235A5A9AB179FBF692036E55983CF269EDA1C311F0E93B307
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6841

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/System.dll

IMPHASH 039bcbc605477e8e87ec550c2e60e748
SHA256 03cd57ab00236c753e7ddeee8ee1c10839ace7c426769982365531042e1f6f8b
MD5 959ea64598b9a3e494c00e8fa793be7e
SHA1 40f284a3b92c2f04b1038def79579d4b3d066ee0
SHA512 5e765e090f712beffce40c5264674f430b08719940d66e3a4d4a516fd4ade859f7853f614d9d6bbb602780de54e11110d66dbb0f9ca20ef6096ede531f9f6d64
SSDEEP 192:sRer7uivwq1XpKs4FVWSjMd8tIg2cREbyCsZ8q2R4Sy+Xe:s67Xws4FVWig86/5eCBqSy+Xe
TLSH
T1B3322A2657B0D2F2E6A1827408A639336BBA762412B50D1BDFF74481FC15BC67E39327
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

10085

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/UserInfo.dll

IMPHASH 45d25ca52c312b2254c60dbcb30342d1
SHA256 728472ba312ae8af7f30d758ab473e0772477a68fcd1d2d547dafe6d8800d531
MD5 d16e06c5de8fb8213a0464568ed9852f
SHA1 d063690dc0d2c824f714acb5c4bcede3aa193f03
SHA512 60502bb65d91a1a895f38bd0f070738152af58ffa4ac80bac3954aa8aad9fda9666e773988cbd00ce4741d2454bf5f2e0474ce8ea18cfe863ec4c36d09d1e27a
TLSH
T10281577B23F44473D09A4BBB01E60CD752A2D9309316442F498B4D6E14C1AA7FD6EB17
MD5 SHA1 SHA512 TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

4716

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

whitelist.dat

SHA256 9a7980a54fb9753a7b810989ed761e07338f0b4937b25a17abf0559c35562b76
MD5 1290bcaf88908675197c69551a993c09
SHA1 269b0633fb3c2c3ad7497f83e6e6e9904cf126e4
SHA512 de44d9886624468a2097af7a56e77a5f178d84309c7383a599f6dde22125e74a62cba24e92caeb56732ff18f0248482674b1ce2fecb949880443e7a945ad66f1
SSDEEP 192:tS9rDtQzgXnBMZKAul3B2rS9rDtQzgXnBMZKtul3B2S9rDtQzgXnBMZKAul3Be:mWzgXBjlIUWzgXBwlTWzgXBjlE
TLSH
T1E1F1D9EE7EAE40C1D9CDE1C431E696D27D9710118A416A39B2B5F248664CD3BFBDEC10
MD5 SHA1 SHA512 SSDEEP TLSH

Sharing

General

Malware Config

Signatures

File Explorer

RegCureProSetup.exe

PE Signature issue

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

generic

$APPDATA/ParetoLogic/RegCure Pro/dc_db.db

$APPDATA/ParetoLogic/UUS3/Master.xml

$APPDATA/ParetoLogic/UUS3/Patch.xml

$APPDATA/ParetoLogic/UUS3/RegCure Pro/Master.xml

$APPDATA/ParetoLogic/UUS3/RegCure Pro/Patch.xml

$APPDATA/ParetoLogic/UUS3/RegCure Pro/Update.xml

$APPDATA/ParetoLogic/UUS3/RegCure Pro/database.xml

$APPDATA/ParetoLogic/UUS3/Update.xml

$COMMONFILES/ParetoLogic/UUS3/Images/Logo.png

$COMMONFILES/ParetoLogic/UUS3/Images/ad_generic.jpg

$COMMONFILES/ParetoLogic/UUS3/Images/close.png

$COMMONFILES/ParetoLogic/UUS3/Images/close_md.png

$COMMONFILES/ParetoLogic/UUS3/Images/close_mo.png

$COMMONFILES/ParetoLogic/UUS3/Images/close_pu.png

$COMMONFILES/ParetoLogic/UUS3/Images/close_pu_md.png

$COMMONFILES/ParetoLogic/UUS3/Images/close_pu_mo.png

$COMMONFILES/ParetoLogic/UUS3/Images/min.png

$COMMONFILES/ParetoLogic/UUS3/Images/min_md.png

$COMMONFILES/ParetoLogic/UUS3/Images/min_mo.png

$COMMONFILES/ParetoLogic/UUS3/Images/progress_glow.png

$COMMONFILES/ParetoLogic/UUS3/Images/topbar_gradient.png

$COMMONFILES/ParetoLogic/UUS3/LiteUnzip.dll

kernel32

user32

generic

$COMMONFILES/ParetoLogic/UUS3/Pareto_Update3.exe

PE Signature issue

wininet

shlwapi

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

ole32

oleaut32

oledlg

gdiplus

oleacc

imm32

winmm

generic

$COMMONFILES/ParetoLogic/UUS3/UUS3.dll

PE Signature issue

wininet

shell32

user32

kernel32

gdi32

advapi32

ole32

oleaut32

shlwapi

generic

$COMMONFILES/ParetoLogic/UUS3/settings.xml

$PLUGINSDIR/AdvSplash.dll

kernel32

user32

gdi32

winmm