Hash.zip
- SHA256 75cf32f90ea4a792df978cb6040aea24c046cd10e545a72179ccb2d4d096a77f
Overview
overview
9Static
static
7FilesUpdat...ts.bat
windows10-2004-x64
1FilesUpdat...ts.bat
windows11-ltsc_2024-x64
1FilesUpdat...ass.js
windows10-2004-x64
3FilesUpdat...ass.js
windows11-ltsc_2024-x64
3FilesUpdate/Main.exe
windows10-2004-x64
3FilesUpdate/Main.exe
windows11-ltsc_2024-x64
3FilesUpdat...ct.dll
windows10-2004-x64
9FilesUpdat...ct.dll
windows11-ltsc_2024-x64
9FilesUpdat...ct.exe
windows10-2004-x64
9FilesUpdat...ct.exe
windows11-ltsc_2024-x64
9FilesUpdat...32.exe
windows10-2004-x64
9FilesUpdat...32.exe
windows11-ltsc_2024-x64
9Behavioral task
behavioral1
Sample
FilesUpdate/Data/Lua/Windows/quests.bat
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
FilesUpdate/Data/Lua/Windows/quests.bat
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
FilesUpdate/Data/Lua/Windows/season_pass.js
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
FilesUpdate/Data/Lua/Windows/season_pass.js
Resource
win11ltsc2024-20260630-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral5
Sample
FilesUpdate/Main.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral6
Sample
FilesUpdate/Main.exe
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral7
Sample
FilesUpdate/dmoprotect.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
14 signatures
150 seconds
Behavioral task
behavioral8
Sample
FilesUpdate/dmoprotect.dll
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
9 signatures
150 seconds
Behavioral task
behavioral9
Sample
FilesUpdate/dmosys/dmoprotect.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral10
Sample
FilesUpdate/dmosys/dmoprotect.exe
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
19 signatures
150 seconds
Behavioral task
behavioral11
Sample
FilesUpdate/dmosys/dmoprotect32.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
6 signatures
150 seconds
Behavioral task
behavioral12
Sample
FilesUpdate/dmosys/dmoprotect32.exe
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
20 signatures
150 seconds
General
- Target Hash.zip
- Size 16.7MB
- Sample260706-pdagsaax4k
- SHA256 75cf32f90ea4a792df978cb6040aea24c046cd10e545a72179ccb2d4d096a77f
- MD5 3dbb549dca47207334fdabb15f3bafe9
- SHA1 a45e10052162eb7f7881970bbfad9da44332397a
- SHA512 d33d1c99efad4338bbbc8268cbf52fb37b3da0fd591ba17233341749abbf3235e946994db549ef367f0b6c0f879d8d1ba0682e61b8d190fae7fbc417bf0323b2
- SSDEEP 393216:mLqcFrRDXl6PP+au3KXxRzu5Gf4OtdQWRZXhLcEJQ0db:fkrRDXl6e3KXLi529IWRji0F
- TLSH T1120733B6E15AE1ACC401E7B76D84E100DB9C1936F05A46126CC5EBB0A61FB6F7E1F90C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
-
resource yara_rule static1/unpack001/FilesUpdate/dmoprotect.dll themida static1/unpack001/FilesUpdate/dmosys/dmoprotect.exe themida static1/unpack001/FilesUpdate/dmosys/dmoprotect32.exe themida - Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/FilesUpdate/Main.exe
File Explorer
-
Hash.zip.zip 16.7MB
-
FilesUpdate/Data/Local/Connect.msil480B
-
FilesUpdate/Data/Local/Eng/ItemTooltip.bmd992KB
-
FilesUpdate/Data/Local/Eng/ItemTooltipText.bmd130KB
-
FilesUpdate/Data/Local/Eng/Text.bmd139KB
-
FilesUpdate/Data/Local/Por/ItemTooltip.bmd992KB
-
FilesUpdate/Data/Local/Por/ItemTooltipText.bmd130KB
-
FilesUpdate/Data/Local/Por/Text.bmd139KB
-
FilesUpdate/Data/Local/ServerList.bmd165B
-
FilesUpdate/Data/Local/Spn/ItemTooltip.bmd992KB
-
FilesUpdate/Data/Local/Spn/ItemTooltipText.bmd130KB
-
FilesUpdate/Data/Local/Spn/Text.bmd139KB
-
FilesUpdate/Data/Lua/Texture/ModalBox_Background.ozt4KB
-
FilesUpdate/Data/Lua/Texture/craftpix/BottomBar_Background.craftpix4KB
-
FilesUpdate/Data/Lua/Texture/craftpix/Button_S1_Background.craftpix4KB
-
FilesUpdate/Data/Lua/Texture/craftpix/Checkbox_Background.craftpix4KB
-
FilesUpdate/Data/Lua/Texture/craftpix/Combo_Arrow.craftpix1KB
-
FilesUpdate/Data/Lua/Texture/craftpix/InputField_Background2.craftpix4KB
-
FilesUpdate/Data/Lua/Texture/craftpix/InputField_Focus.craftpix4KB
-
FilesUpdate/Data/Lua/Texture/craftpix/Window_Background.craftpix4KB
-
FilesUpdate/Data/Lua/Texture/craftpix/Window_Header.craftpix4KB
-
FilesUpdate/Data/Lua/Texture/craftpix/blood-castle-safe-zone.craftpix1.2MB
-
FilesUpdate/Data/Lua/Texture/craftpix/icons.craftpix64KB
-
FilesUpdate/Data/Lua/Texture/sfui_btn_exit.ozj.jpg 2KB
-
FilesUpdate/Data/Lua/Texture/sfui_btn_tab.ozt154KB
-
FilesUpdate/Data/Lua/Texture/sfui_check_option.ozt28KB
-
FilesUpdate/Data/Lua/Texture/sfui_check_radio.ozt28KB
-
FilesUpdate/Data/Lua/Texture/sfui_scroll_state.ozt56KB
-
FilesUpdate/Data/Lua/Texture/simpleui.ozt4.0MB
-
FilesUpdate/Data/Lua/Texture/simpleui_debug_crops.png.png 20KB
-
FilesUpdate/Data/Lua/Windows/quests.lua.bat 7KB
-
FilesUpdate/Data/Lua/Windows/season_pass.lua.js 15KB
-
FilesUpdate/Data/Lua/Windows/skin.lua3KB
-
FilesUpdate/Data/av-code45.pak58KB
-
FilesUpdate/Main.exe.exe 11.1MB
-
FilesUpdate/dmoprotect.dll.dll 4.6MB
-
FilesUpdate/dmosys/dmoprotect.exe.exe 4.0MB
-
FilesUpdate/dmosys/dmoprotect32.exe.exe 3.3MB
-
FilesUpdate/license.lic320B
-
hash.json5KB
FilesUpdate/Data/Local/Connect.msil
- SHA256 554ef7e0c2ec0cc17a84e46753c6417d4cf616ea89d6d193e752a12115a7aaed
- MD5 1c732868851107016eb221e891686a1f
- SHA1 8829aba4bf58925d4c59a97bbf051cd5860c184e
- SHA512 78f767279802e6f2ef26e48f47513ebb391526c55019a1d100ffcfe567f4122c153d9cc4a174ecb8300e1a7904ac5f2e0a278c413f4fe1588d3a0283d7f70dc9
- TLSH T1B0F02B5586DDD7DF94B13474AFC980C3B4468E109097430C47377C223E223A56036158
- MD5 SHA1 SHA512 TLSH
FilesUpdate/Data/Local/Eng/ItemTooltip.bmd
- SHA256 57fd809920080c2cb356393cb737e37b467b20f6be22a058c4cf60332c38d2fd
- MD5 01506a9fe2bd4044ca4b47e061b2fcfc
- SHA1 0fe2877ea789ab32233dc399112041655e77bc04
- SHA512 023f79ae11f7dbb51ffff29edfd5dd3984f7555f8498b34fe5131b37a79b546cee455f7b34f52671a40ff31b6bd51ada0c15b205cf0fd6e10b4d64d24b4c98a5
- SSDEEP 1536:GrNdnuKH5KgaAlT3bD3IaOP6UCf/OiokbXNBNJUt85Z9mS070UZ4Wy5LVDL4xDcK:4FIVDt
- TLSH T13525F8430AFCC9C56A414EAFE5F727A2B83DCB2452C627BD9A3DADA0DF604D014B4C59
- MD5 SHA1 SHA512 SSDEEP TLSH
FilesUpdate/Data/Local/Eng/ItemTooltipText.bmd
- SHA256 820c8861cda1e05cec16e2b59715b2722b8b4e21039fd78dbc11a179a5e1066a
- MD5 24cfc78e0f1ab8ad226fc4a627155410
- SHA1 94431a58ee1b06d83e326fb64d845f8ff0c8c311
- SHA512 871079e0c1b0a6f6f2026ae6e4b7f4abe8291269bc30dc9a57a14e809c237d4aa815143695ea7cf0b952c95aef65474b0317b5f11429537bb1d5098e017be37d
- SSDEEP 384:ntuFIPVvU5N2rtSjJY64t0KSHBWUmEnmv+tRkByR:tLK5MEd+0KVv+tV
- TLSH T1A5D37F17C3CCD585168E773B50D1660524ACC93C369AAB4F6D71CE278A73B2006B6BF6
- MD5 SHA1 SHA512 SSDEEP TLSH
FilesUpdate/Data/Local/Eng/Text.bmd
- SHA256 26b190a25128b17442124dab4b34ee19417695d3517c222596366e2a70615bfd
- MD5 33427bf037be178af18b55cda056061d
- SHA1 afd5d80920ade601f541e4ff188101cc204dfda4
- SHA512 ce1c943c8cadaf58bd369fa3352fd094971c4d4460d935817c9d2d83ad9cc3f0cf38cf5f522ec78589ee9ef58e69f6e337de268a3f3a9350df1af13d278c7dc4
- SSDEEP 3072:CJdvX967CaSBBw05UdjNHFu2iQWyLNbSXfbeTr:CJdAlwBw05UdJHfiQWyL0TeTr
- TLSH T106E37E4ED266C9D4DB3A4A7C0483AA03515A8658BFC84B144E6FC008F5E9FED177BC7A
- MD5 SHA1 SHA512 SSDEEP TLSH
FilesUpdate/Data/Local/Por/ItemTooltip.bmd
- SHA256 57fd809920080c2cb356393cb737e37b467b20f6be22a058c4cf60332c38d2fd
- MD5 01506a9fe2bd4044ca4b47e061b2fcfc
- SHA1 0fe2877ea789ab32233dc399112041655e77bc04
- SHA512 023f79ae11f7dbb51ffff29edfd5dd3984f7555f8498b34fe5131b37a79b546cee455f7b34f52671a40ff31b6bd51ada0c15b205cf0fd6e10b4d64d24b4c98a5
- SSDEEP 1536:GrNdnuKH5KgaAlT3bD3IaOP6UCf/OiokbXNBNJUt85Z9mS070UZ4Wy5LVDL4xDcK:4FIVDt
- TLSH T13525F8430AFCC9C56A414EAFE5F727A2B83DCB2452C627BD9A3DADA0DF604D014B4C59
- MD5 SHA1 SHA512 SSDEEP TLSH
FilesUpdate/Data/Local/Por/ItemTooltipText.bmd
- SHA256 820c8861cda1e05cec16e2b59715b2722b8b4e21039fd78dbc11a179a5e1066a
- MD5 24cfc78e0f1ab8ad226fc4a627155410
- SHA1 94431a58ee1b06d83e326fb64d845f8ff0c8c311
- SHA512 871079e0c1b0a6f6f2026ae6e4b7f4abe8291269bc30dc9a57a14e809c237d4aa815143695ea7cf0b952c95aef65474b0317b5f11429537bb1d5098e017be37d
- SSDEEP 384:ntuFIPVvU5N2rtSjJY64t0KSHBWUmEnmv+tRkByR:tLK5MEd+0KVv+tV
- TLSH T1A5D37F17C3CCD585168E773B50D1660524ACC93C369AAB4F6D71CE278A73B2006B6BF6
- MD5 SHA1 SHA512 SSDEEP TLSH
FilesUpdate/Data/Local/Por/Text.bmd
- SHA256 26b190a25128b17442124dab4b34ee19417695d3517c222596366e2a70615bfd
- MD5 33427bf037be178af18b55cda056061d
- SHA1 afd5d80920ade601f541e4ff188101cc204dfda4
- SHA512 ce1c943c8cadaf58bd369fa3352fd094971c4d4460d935817c9d2d83ad9cc3f0cf38cf5f522ec78589ee9ef58e69f6e337de268a3f3a9350df1af13d278c7dc4
- SSDEEP 3072:CJdvX967CaSBBw05UdjNHFu2iQWyLNbSXfbeTr:CJdAlwBw05UdJHfiQWyL0TeTr
- TLSH T106E37E4ED266C9D4DB3A4A7C0483AA03515A8658BFC84B144E6FC008F5E9FED177BC7A
- MD5 SHA1 SHA512 SSDEEP TLSH
FilesUpdate/Data/Local/ServerList.bmd
- SHA256 0b72e3b310f8106a9e82963f06752480e32a4bee8f0d7c07a41ad3990468a68b
- MD5 8e24d5be587b379c74dcef991724ee21
- SHA1 6537b741cd8e4d09f9b57acfb75a022dea4b1a8e
- SHA512 a8bdfe6dbafbd974f1a00b5e9dee18a78cdd6194299f982915f75a550842da178a230bff51ed77c0b308ce5110392ac45c7701e4283c857be19167a8c32f236c
- TLSH T1C7C0018CC8EED1E0270B9680E0C20E030280702E2F07CB9E873F1D38E44E35C263A6C0
- MD5 SHA1 SHA512 TLSH
FilesUpdate/Data/Local/Spn/ItemTooltip.bmd
- SHA256 57fd809920080c2cb356393cb737e37b467b20f6be22a058c4cf60332c38d2fd
- MD5 01506a9fe2bd4044ca4b47e061b2fcfc
- SHA1 0fe2877ea789ab32233dc399112041655e77bc04
- SHA512 023f79ae11f7dbb51ffff29edfd5dd3984f7555f8498b34fe5131b37a79b546cee455f7b34f52671a40ff31b6bd51ada0c15b205cf0fd6e10b4d64d24b4c98a5
- SSDEEP 1536:GrNdnuKH5KgaAlT3bD3IaOP6UCf/OiokbXNBNJUt85Z9mS070UZ4Wy5LVDL4xDcK:4FIVDt
- TLSH T13525F8430AFCC9C56A414EAFE5F727A2B83DCB2452C627BD9A3DADA0DF604D014B4C59
- MD5 SHA1 SHA512 SSDEEP TLSH
FilesUpdate/Data/Local/Spn/ItemTooltipText.bmd
- SHA256 820c8861cda1e05cec16e2b59715b2722b8b4e21039fd78dbc11a179a5e1066a
- MD5 24cfc78e0f1ab8ad226fc4a627155410
- SHA1 94431a58ee1b06d83e326fb64d845f8ff0c8c311
- SHA512 871079e0c1b0a6f6f2026ae6e4b7f4abe8291269bc30dc9a57a14e809c237d4aa815143695ea7cf0b952c95aef65474b0317b5f11429537bb1d5098e017be37d
- SSDEEP 384:ntuFIPVvU5N2rtSjJY64t0KSHBWUmEnmv+tRkByR:tLK5MEd+0KVv+tV
- TLSH T1A5D37F17C3CCD585168E773B50D1660524ACC93C369AAB4F6D71CE278A73B2006B6BF6
- MD5 SHA1 SHA512 SSDEEP TLSH
FilesUpdate/Data/Local/Spn/Text.bmd
- SHA256 26b190a25128b17442124dab4b34ee19417695d3517c222596366e2a70615bfd
- MD5 33427bf037be178af18b55cda056061d
- SHA1 afd5d80920ade601f541e4ff188101cc204dfda4
- SHA512 ce1c943c8cadaf58bd369fa3352fd094971c4d4460d935817c9d2d83ad9cc3f0cf38cf5f522ec78589ee9ef58e69f6e337de268a3f3a9350df1af13d278c7dc4
- SSDEEP 3072:CJdvX967CaSBBw05UdjNHFu2iQWyLNbSXfbeTr:CJdAlwBw05UdJHfiQWyL0TeTr
- TLSH T106E37E4ED266C9D4DB3A4A7C0483AA03515A8658BFC84B144E6FC008F5E9FED177BC7A
- MD5 SHA1 SHA512 SSDEEP TLSH
FilesUpdate/Data/Lua/Texture/ModalBox_Background.ozt
- SHA256 df8dd5812bdbbb09cd5e90ec1316daf49238f6dc2fc7b59f1ad0a07ed14b7224
- MD5 47e23ced70c0211471df47d89aaff409
- SHA1 31ea1cfafa110da31a2f337d4e6995ad0df9155a
- SHA512 84ec48411eb72dbf98d1115f1c5e0417581950b62cad08b3bd455a960e09a288553fc69a653ba4d33afaa45d80b20486537e7f6545850c5d64f54fa75d551432
- SSDEEP 48:aJIH5KjwXbVvrwbHFKXd7HQEy73mA/jeLGHbvdbd:aJ45jXbRKHg7yKWjuG7V
- TLSH T1EB813A337A634742C02247396486FE80B730C6DAAACED73AE2C567719D8CFA46C53168
- MD5 SHA1 SHA512 SSDEEP TLSH
FilesUpdate/Data/Lua/Texture/craftpix/BottomBar_Background.craftpix
- SHA256 6604bcb46eb6e3ec54e3c6cfc36085fdd74fbea9fe3f34f32313782d04e295c2
- MD5 dbcb4abc7e6522e828ec8963ed88f6bc
- SHA1 40a81fecc6538add5b0007a8de99fc63f133c740
- SHA512 6272ad24412c09f650bab52182315c7d36b391ee0030ef62122aa9503ab5553bab585853aaa004574a638ce68a18ebc6677c4e6054088a5d1afc364ba89253ec
- SSDEEP 96:GOI1Io5xTqWcICbHSN5/gTaX4RmlGRqLyC6yKwwMc:Q9W
- TLSH T1A78178A9C4DAAE199FB10FBAFCD07192BFA6F25D211CD335EC2A4189511C4EB80D9374
- MD5 SHA1 SHA512 SSDEEP TLSH
FilesUpdate/Data/Lua/Texture/craftpix/Button_S1_Background.craftpix
- SHA256 bafac49db1437d00c514b5b9ccf0b0280a3f271a37a368910b401221fe7b14ee
- MD5 4182d7a77673da9b5c5da55afba24d69
- SHA1 45f16ebe6c4d79d4c0c8c397f2ae1b8ec8047474
- SHA512 727b6e2ff7f1edf5f49e9008f1a6a81a6b381f7f4d170496269c52a5d1033560cc4c94726d973af7002d5af6c8db27942ccc3b169965e47d5600efdd7c0e8f0e
- SSDEEP 48:lroE0s48g1P0IJMxnJyHUC3kJhhenB85V63IBSMS0W0Rt9i12ymERyyku:ZAs4f1Mnxy3kLQnB6JHW0G2myQ
- TLSH T17F815D316BFB0317C2F26E7991E34706B576D940C363A27794C683BC8E543895F92EA8
- MD5 SHA1 SHA512 SSDEEP TLSH
FilesUpdate/Data/Lua/Texture/craftpix/Checkbox_Background.craftpix
- SHA256 41556239f0d44a12e420bed0a50f625e98abc167bdb73f35911fdde7c77bd74c
- MD5 bc509ba32245092e6ae243bbbd9e099e
- SHA1 081b65b61860dfb6e5d6c25a31124570c1e2a1a2
- SHA512 bc5d485cc13fd4d9c78a99bae3dda92730127e2209e9db56382b6d574d226ca246220a603b467a37752c46e30118e30fecc0ebdb128b06ef654b3f1e1b5e858e
- SSDEEP 24:aLM666666666666666iiqjAiF56+6YVP6D9n6306hq1yDjT4CDAh6A6Ev+6Qx56/:aLUZby9sHQUjtq6wuekfXUsY
- TLSH T1F9A1E94B6961ECB0D23E4230E2A9CF07525ADC21C340DE52D19B3CBD5EA38455FED87A
- MD5 SHA1 SHA512 SSDEEP TLSH
FilesUpdate/Data/Lua/Texture/craftpix/Combo_Arrow.craftpix
- SHA256 9356006a31eec5bb6408e8ff23c0a52ac4be979cb5ae169ccc105dbdb7cbbf51
- MD5 18c3c21b5b5a43825220e2ed79d7ffa0
- SHA1 38cad571fdab9853a633a293a22666a163e61ab5
- SHA512 3e3d286ad36aea349dee0d251e8ccea39b1450d4863db675d1804173871c8079bdf89227c6edeb3297994beb8f15d03aa0139a9b6b8ad682ea5062a831675add
- TLSH T15E21E589A527E003C2842278FAB00EF6F94C0FC0F08B1663CE2EBC083A3650F80984CC
- MD5 SHA1 SHA512 TLSH
FilesUpdate/Data/Lua/Texture/craftpix/InputField_Background2.craftpix
- SHA256 41a071f6e4f2c891fb95ce752aa89282698d959bfb23ace7e084b3e653e4c424
- MD5 0a3df6c8268a918a03ee0041120115e0
- SHA1 73484821cc98c6a25a798006f994b5d8db1fe8b2
- SHA512 2cd2507ffb84abf9fea7557d91d6848067139864f6bacd1bd46261ce4eba5411ef71ba7d165ac2ae24de63d41c59ac9046fd9c50decb9b38e02d56e9db7389c7
- SSDEEP 96:F30JJJJJkJJJJJJJJJJCIXlfuKtxqCr0dak0ikJXJtJJkkJx/Y:Dlrk
- TLSH T132812A141A4683A6D836CB774FED4B982E745E3797C7C38F2E40B1631449B848A3A8D2
- MD5 SHA1 SHA512 SSDEEP TLSH
FilesUpdate/Data/Lua/Texture/craftpix/InputField_Focus.craftpix
- SHA256 691a1eceb42426bbfbdfc0bded13563b89691834f61238376a334579cb70137c
- MD5 6e3173ff5119e9f23fdedd31c9a1571c
- SHA1 74f021743528a781f266b02bb763c8cb35d0f9cc
- SHA512 8247dbc514322e92cb5befa0aa5e83d2583fd230bbde50893b39e84b5eb183d7858a288776d779ae3060672574c81faa879bba74287c1152878f7858002e967c
- SSDEEP 96:J3pNJJJJOrUlSSpjjE1n0hDJJJOJJJJJJJQm:J3pXpjG0hVm
- TLSH T172818CA233413796D7988BB96D9097F4FF64FDAC42481F07BA0290634F4E3C51E26A4D
- MD5 SHA1 SHA512 SSDEEP TLSH
FilesUpdate/Data/Lua/Texture/craftpix/Window_Background.craftpix
- SHA256 df8dd5812bdbbb09cd5e90ec1316daf49238f6dc2fc7b59f1ad0a07ed14b7224
- MD5 47e23ced70c0211471df47d89aaff409
- SHA1 31ea1cfafa110da31a2f337d4e6995ad0df9155a
- SHA512 84ec48411eb72dbf98d1115f1c5e0417581950b62cad08b3bd455a960e09a288553fc69a653ba4d33afaa45d80b20486537e7f6545850c5d64f54fa75d551432
- SSDEEP 48:aJIH5KjwXbVvrwbHFKXd7HQEy73mA/jeLGHbvdbd:aJ45jXbRKHg7yKWjuG7V
- TLSH T1EB813A337A634742C02247396486FE80B730C6DAAACED73AE2C567719D8CFA46C53168
- MD5 SHA1 SHA512 SSDEEP TLSH
FilesUpdate/Data/Lua/Texture/craftpix/Window_Header.craftpix
- SHA256 f9f6444dbc5b215b063c12cd938597f4d83d31e8674b72b50ea3ed10236e7f57
- MD5 c0943561d72bf6f3d172c409ba4f8fd8
- SHA1 beb8541b3bb386a91b0134c2a9ed54577bf42b07
- SHA512 e1655ea3155d61c9116f036c521f1ef1c34e329724c3db2f9fb355126ba95e105592bbc2b876d2c7c7de80d43336dcb7f92ecf8ab4681f2e51234ec8490ff085
- SSDEEP 96:YIIJQJJJJJJkJJJJJJ6ydUhPjekOMjOlCJJJ:fhA
- TLSH T109817F621756C3EAF926EBFD4DED0A987336D1A0E7074FCB02C0B6720A65F5436A10C2
- MD5 SHA1 SHA512 SSDEEP TLSH
FilesUpdate/Data/Lua/Texture/craftpix/blood-castle-safe-zone.craftpix
- SHA256 933c3cf0e9a2577d8d47b23c5b4028b12fcc4115fb0af8b78e8c076afd7418c1
- MD5 69a1a4e5d8948f00e67f219c79f4c09f
- SHA1 1c7fe4ac106f7fc08d22e0e7334fd814557ec45b
- SHA512 dff13aa8af69a7dcd4ede03e415418b202305ba18451b76d3f6f61bb808967516a2c2462e5a80343874415c14d5389eb4f60b20f8523ab9ec47f0c11bed5a698
- SSDEEP 12288:LTC7QdbPqkc34hsPqerEAlk8TN1GLjd9SE5Dz074wXYcLjnJZ7diKTb3ivqmEvD1:JxqahCrEAm8TNsLR9SwarbdiK9flZWy
- TLSH T18F4509273F86DC0B07765AA896F0E7E9E0AD8A907D2B9641DE227CC599B4FCC3D454C0
- MD5 SHA1 SHA512 SSDEEP TLSH
FilesUpdate/Data/Lua/Texture/craftpix/icons.craftpix
- SHA256 ec3589fc03fc51a58210dd99d714014b54576eef0884c78fa8bff500048d64cd
- MD5 87f4f3710f2af6ea2b8263ed6cf57030
- SHA1 4b03d3df60548d8142890cf15f3fa3850c02e391
- SHA512 f16f0396e359911ec36b81341ba1130db55b4dfe9911ecf57066110521eb1efeb8796f97b6fd6476997d419444c2709cbac2f893e8a2a9ec30130650ea295acd
- SSDEEP 1536:AQgNzMMiMM2MMohL8p4blbgJGzR3rOAS71a6Nq3:kNAhL8p4xbg/ha6Nq3
- TLSH T16B532B3EAB50090EC0D9CE76D5E6273D57E8CEA22BBA474715107CA26CF12C11F16CD9
- MD5 SHA1 SHA512 SSDEEP TLSH
FilesUpdate/Data/Lua/Texture/sfui_btn_exit.ozj
- SHA256 0c7f246a92633e6dadafa4580f377ed76db7ca059f5d41bdcd0b18136c22b93a
- MD5 a974dd79dcc55229860bb039d624e2fa
- SHA1 f9860fe2b8a0da41a191bd1600bc55b58fa8ae8d
- SHA512 d727ef247c0e003f510a89016d1dce130d69d8d1fa68743f932c4568c676cba2b8d9f1ffc3a77b1283521188d43ec699130f2b680f02b38560eed905740aef28
- TLSH T187516C555F13E065ECABD473817F52F2C04A0B133158A98C2AF40A9C21DBCEDCB04027
- MD5 SHA1 SHA512 TLSH
FilesUpdate/Data/Lua/Texture/sfui_btn_tab.ozt
- SHA256 d921ad55fea6f5f36c65023856a1f84c2bd60d77ff7ce1933b403062bd715120
- MD5 85f825e4b38bbd27770e058112b3032c
- SHA1 fc8694bb139b22838134754a355f3254c2e9d53d
- SHA512 9f7a7b8facb026f6a0590f72c9b006baeabc0afd34ec914a11b4b78d6b1bd6a999846e4cca4b65e2932a46d4b63e6718def6cb0db5ff1b4bbbfc947be6d73078
- SSDEEP 3072:aXZau6hBUoLl0CqCmkKLXNsohgQuXhwEa2UZ0AY66G51r:q8hBUql07xXhH4hwNoG5J
- TLSH T1EBF31C1B6EB96C07F7880F3DC3E18754A352B26E24CE02FA16D5A95F920DE50CD4B9C9
- MD5 SHA1 SHA512 SSDEEP TLSH
FilesUpdate/Data/Lua/Texture/sfui_check_option.ozt
- SHA256 2e9bf2f601a3b42dc607ccb456f741d5ec17943ffa80eddf756fb61aceeecd94
- MD5 38c8f224d3bb82de8fe9b2d2aa7526ce
- SHA1 c131925395ff5762a57f70ea5c94d692432183ba
- SHA512 c4d6c065a13be54e9c1795467719c5cb3bfcb11effee3f7250199557cf192afc786b1a150fb435c6c9b2a5a08ca6035f4ef055ef77ca8dcc113754f9c43ea475
- SSDEEP 384:+hq888L88Lq89mAbHKka4l5quoRRU8L888g8hq888L88Lq8Nz84tH8GuvYXwn5Pd:WmA7Kka4l5quoRw8KJuvYAn5P
- TLSH T19FD2119F5D31AC2FDA19893AC0F4F710A363330E615E1979BCCA82DB0653781AD8DAD5
- MD5 SHA1 SHA512 SSDEEP TLSH
FilesUpdate/Data/Lua/Texture/sfui_check_radio.ozt
- SHA256 b237c9dcf7acccf83d511472fde1d322ab0561f03367c58592ec7909559a043e
- MD5 9d870a9a3e47865d2f4d10d8a7038b85
- SHA1 c17fb6dee0956fd1bc63195dc47e37645db9b36c
- SHA512 89137033f91e7db91d36130023e3c85364090cf4b4d6918b8027a7794979707990bf9f6ee9f6cb88fd5b327391413eeb98a8abdc46a15305d31211d9bd38c1cc
- SSDEEP 192:4YvZXufP7WXRvQLYvZXuL1pH1tLWXRvQ:TBXHXR/BXm1DtyXR
- TLSH T15CD2969EC14EB43AC999BD718CD8AF20B7E7117B4199411CEAFE660C43BEEECA345501
- MD5 SHA1 SHA512 SSDEEP TLSH
FilesUpdate/Data/Lua/Texture/sfui_scroll_state.ozt
- SHA256 038bb458375992e41897265c1fa4d8736f66b7085e995bf9f3393d51b107d2cc
- MD5 4c15f4ce22c01316d59799e9ec1236a9
- SHA1 706241fe91d152574b0e5737de74c7cc9d36d9a6
- SHA512 e2336248e3cd01ff53c3c58539d45c5a7cc67ec2216bb0bac378cb835b1b6574ee142e12dbe2d074d7ec40cd6fb5a8a6ff0eff8cfd6a38d1fa07ed6ad26a40a1
- SSDEEP 768:FacL0P9pf8zdn7Zcz4A+sfU0uQnwr4hqbBSxl2Q:gka9p09Gz4QsjQwUk89
- TLSH T102432D6ABA10E907E3552374C0A4F7F90A285FA8FD67D303E8E67C9BBA747015D581A0
- MD5 SHA1 SHA512 SSDEEP TLSH
FilesUpdate/Data/Lua/Texture/simpleui.ozt
- SHA256 32fd37c372f86dfe0b99f48618877d8b42bc9b24960b7f9836ed09691e0b1f49
- MD5 49d269c5f9d8ae893d3631e4efd16636
- SHA1 44423a91b315ebf5a9e8b6acdc1c5c5eb5b1aec5
- SHA512 c99a337ee80e46bdb4801d09d69c0ba6234baae5caed30410b4282169994d3a30c64a6307659626679638ee3a766327fb09606bced35a760b382dac6cfedc401
- SSDEEP 49152:gNpzyk7lIKdMEy37zKLg1siUWD1/3wK3gafjJ0ioclxlIZXBDL:2yk7lIKGKLU1/3wKJ10io2xlADL
- TLSH T10A16220C5F01895BE1659BF4ECF57B1712AD32E2BB1746109F524DD23B32BA80BD98E8
- MD5 SHA1 SHA512 SSDEEP TLSH
FilesUpdate/Data/Lua/Texture/simpleui_debug_crops.png
- SHA256 eea9efcc919e0027dd5b35bdd51302638bcc2c93aef40bc0bec673cbcb6b8d45
- MD5 ddb5e82189bca6ccd832dde25fa45a48
- SHA1 09a4af1589098ce63f31ea312cfea2ad4a2ede0c
- SHA512 317cb8d659a32be676e01ff47b3c885b5bca48e361c0976b72a69c2b7dff1885aca50b7d0ca6f6e17584ed11072191259abd17a65c074da8ddbad4d6d15c5f67
- SSDEEP 384:vTBDuSssKMSQSQS5heBAtVbBp5NODWUo2QlBq6jS9OlKi3wRcFICFnA6FmofNj/:vVDuSssKZFFzRV35kDWT2QlBnjediE0B
- TLSH T174A2B08AD9F5DAE9306FF0DFA1B74330082734284358CE8BD58F90A952BD79D15DC68A
- MD5 SHA1 SHA512 SSDEEP TLSH
FilesUpdate/Data/Lua/Windows/quests.lua
- SHA256 6bac232010c6e67ec7c200cb1f8320c6b4ee8826bf198d4da2ece852855b15ee
- MD5 b9b0af207ed97cf405fb2d3e79a1f5a3
- SHA1 29165588f92c0ff8f5fbb46aa3f7231a2e4cdce4
- SHA512 7fad2e7fc44fbe5bf369663ab136c7444d45aaa174f36d903cc11b670d88f18fa298c49b46ee2ca1e82cafc392f57625b29a96b94964f3deb29ef28ae3b82c21
- SSDEEP 192:yhwezioM+q8bKCQdCNNyZXu1EECmo+bqK1CF1p2f+MaZmMMsVmEkl6OLSecS6S+D:yh9iffIKC/byZeMmo+G7C+MjJSZeT592
- TLSH T138F1321BD8192050D4B2E5D6DC13CA45F311223B320A157B79BE85980F7966AE1ECFBD
- MD5 SHA1 SHA512 SSDEEP TLSH
FilesUpdate/Data/Lua/Windows/season_pass.lua
- SHA256 cf005782ed27c862303c61c59eb80bad89916fa69129e236db86148cdf3a2929
- MD5 63ed8f4ecde89ac1c72875326202176d
- SHA1 076d5c72c4509cc415e658806bff6397c81e0939
- SHA512 eca09f548be5f9dcefc7b7bf770ae61bd91fda898c5afc167454a191a1c850f0a529f2c0489fca05af49f86756fa96622c36a23afc637a40634035d3b34e9081
- SSDEEP 384:R4eOK3lx7JiJbl9RY+WnuZ5UkWbsf6xYocD9sfiD5JTK9FSTRY0YkK4VvKvb3Lhf:RmK3lx7JiZl9RY3nYUkWbxxYoODPQl
- TLSH T1C8722423E95124E385FBA5CA6D9B8C84F7111337101E42CF7A7DE1681F3E608E3E596A
- MD5 SHA1 SHA512 SSDEEP TLSH
FilesUpdate/Data/Lua/Windows/skin.lua
- SHA256 ce79c35247a5b6e6414c29e7e7c058a1647aaef624b7a33ba54c7ce203300dbf
- MD5 8322dd0d78e87173e5f97ec3b110c2ca
- SHA1 7d70830a961aedbc495c95b12b363910465599eb
- SHA512 ecc3c899f18544a4899364bd401ef221893bab880d26c4f3f3bbd7ba4308b52a46b39dd162d71f9e835d9d6e29fdb537058cbc4cd7b2dad8d14a26314031ba7d
- TLSH T11061DF36C9C7A1185231C0829EA24514E3670B1FD64DB6BFBBFE91826FBA02CD4D576C
- MD5 SHA1 SHA512 TLSH
FilesUpdate/Data/av-code45.pak
- SHA256 e8c4c6b31ea8786cda49c36d5dde515c6ab34556eb6c256b510460017ef30997
- MD5 124ae8075157749f23c9bce4a20f1a74
- SHA1 af694d9a109480c442a7e85cdbba7860e5e79b32
- SHA512 799083e8b3eba441f78e1d5e86513179fce5dd4c4840af8489b2d7f1e237e2dc87d61c790008397a0c1ce3c14034deb377401b132ea96cc5840a635ab07ba0cf
- SSDEEP 384:2qcBL37cgnvjrP0szLw1+MclmmPXuGKucH99AvTyLnjMeGoygqHTjcBuHVKo2ILK:2nTxkBJzARBX4qozRwkvagVhn
- TLSH T1E943A4165CFCC262CC77DBA18AF7B5C9806DD520962047BF96BE8C75A056BF983F0881
- MD5 SHA1 SHA512 SSDEEP TLSH
FilesUpdate/Main.exe
- IMPHASH 92d278993f1485ec0e4471f7075055da
- SHA256 3b60192f209ce61b02577254d30949914d2cead36fce81c5b5298f83e60d0238
- MD5 70671f5d567414b25c70e1dfe605dd62
- SHA1 6ded3f7a493e149f772276fed4bf1fa2bf026922
- SHA512 c7c55435bbe57d476b95b0afda52d8935cf3c42da2e088f3a6fd3483a6877ffe7cf8a33d6153d875bf3530040508d844bd68b98ff5e961d7663ebb29b97c9caa
- SSDEEP 196608:6/sDrIMQvv9eWF7DSj/y6UvgIjWMazRyf:6UDrIMQv027Db60jqMat
- TLSH T18DC6AE11B607D031C59521B1B47EAFFF857E69381F7928D3A3E0293D5A702D22B73A1A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
8817221
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\Users\DESKTOP3030\Documents\GitHub\MU2-NORMAL\Source\Main5.2\Release\Main.pdb
imm32
ImmGetDescriptionA
ImmSetCompositionWindow
ImmGetCompositionWindow
ImmGetDefaultIMEWnd
ImmGetConversionStatus
ImmGetCompositionStringA
ImmReleaseContext
ImmGetIMEFileNameA
ImmSetConversionStatus
ImmGetContext
opengl32
glColor4f
glDisable
glEnable
glEnd
glNormal3f
glVertex3f
glColor3f
glColor3fv
glColor4fv
glColorPointer
glDisableClientState
glDrawArrays
glEnableClientState
glGetFloatv
glNormal3fv
glNormalPointer
glTexCoord2f
glTexCoordPointer
glVertex2f
glVertex2fv
glVertex3fv
glVertexPointer
glColor4ub
glBindTexture
glBlendFunc
glDrawElements
glGenTextures
glScissor
glBegin
glTexParameteri
glGetBooleanv
glClear
glCopyTexSubImage2D
glDeleteTextures
glDepthMask
glGetError
glGetIntegerv
glIsEnabled
glViewport
glGetString
wglCreateContext
wglDeleteContext
wglGetCurrentContext
wglGetCurrentDC
wglGetProcAddress
wglMakeCurrent
wglShareLists
glAlphaFunc
glClearColor
glColorMask
glLoadIdentity
glMatrixMode
glOrtho
glPixelStorei
glPopAttrib
glPopMatrix
glPushAttrib
glTexImage2D
glColor4d
glColor4dv
glColor4i
glColor4iv
glColor4s
glColor4sv
glColor4ubv
glColor4ui
glColor4uiv
glColor4us
glColor4usv
glTexEnvf
glTexParameteriv
glFogf
glFogfv
glDepthFunc
glFrontFace
glPolygonMode
glStencilFunc
glStencilOp
glFlush
glScalef
glTranslatef
glRotatef
glReadPixels
glTexCoord2fv
glColor4b
glColor3usv
glColor3us
glColor3uiv
glColor3ui
glColor3ubv
glColor3ub
glColor3sv
glColor3s
glColor3iv
glColor3i
glColor3dv
glColor3d
glColor3bv
glColor3b
glVertex2i
glTexSubImage2D
glPushMatrix
glColor4bv
glu32
gluPerspective
winmm
mmioDescend
mmioAscend
timeGetDevCaps
timeBeginPeriod
mmioWrite
timeEndPeriod
timeGetTime
mmioClose
mmioRead
mmioOpenA
ws2_32
socket
gethostbyname
WSAStartup
WSACleanup
WSAGetLastError
WSAAsyncSelect
getpeername
ntohs
recv
send
setsockopt
inet_addr
htons
connect
shutdown
closesocket
dsound
ord1
ord2
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
wzaudio
wzAudioGetStreamOffsetRange
wzAudioOption
wzAudioStop
wzAudioCreate
wzAudioDestroy
wzAudioPlay
glew32
_glewInit@0
__glewUniform4fv
__glewUniform3f
__glewDeleteVertexArrays
__glewCompressedTexSubImage2D
__glewTexStorage2D
__glewRenderbufferStorage
__glewGenRenderbuffers
__glewGenFramebuffers
__glewFramebufferTexture2D
__glewFramebufferRenderbuffer
__glewDeleteRenderbuffers
__glewDeleteFramebuffers
__glewActiveTexture
__glewBindBuffer
__glewBufferData
__glewGenBuffers
__glewAttachShader
__glewCompileShader
__glewCreateProgram
__glewCreateShader
__glewDeleteProgram
__glewDeleteShader
__glewEnableVertexAttribArray
__glewGetProgramiv
__glewGetShaderiv
__glewGetUniformLocation
__glewLinkProgram
__glewShaderSource
__glewUniform1f
__glewUniform1i
__glewUniform4f
__glewUniformMatrix4fv
__glewUseProgram
__glewVertexAttribPointer
__glewBindVertexArray
__glewGenVertexArrays
__glewBufferSubData
__glewUniform1ui
__glewVertexAttribIPointer
__glewDrawRangeElements
__glewDisableVertexAttribArray
__glewDrawElementsInstanced
__glewVertexAttribDivisor
__glewDeleteBuffers
__glewGetProgramInfoLog
__glewGetShaderInfoLog
__glewUniform2f
__glewBindFramebuffer
__glewBindRenderbuffer
__glewCheckFramebufferStatus
kernel32
GetFileType
FreeLibraryAndExitThread
ResumeThread
ExitThread
GetTimeZoneInformation
GetModuleHandleExW
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwind
RaiseException
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
UnhandledExceptionFilter
IsProcessorFeaturePresent
SleepConditionVariableSRW
WakeAllConditionVariable
GetCPInfo
CompareStringEx
CloseThreadpoolWait
SetThreadpoolWait
CreateThreadpoolWait
CloseThreadpoolTimer
WaitForThreadpoolTimerCallbacks
SetThreadpoolTimer
ReadConsoleW
FreeLibraryWhenCallbackReturns
GetCurrentProcessorNumber
FlushProcessWriteBuffers
CreateSemaphoreExW
CreateEventExW
InitOnceExecuteOnce
LCMapStringEx
DecodePointer
EncodePointer
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
TryAcquireSRWLockExclusive
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
GetStringTypeW
CreateSymbolicLinkW
GetFileInformationByHandleEx
CreateHardLinkW
MoveFileExW
CopyFileW
CreateDirectoryExW
DeviceIoControl
AreFileApisANSI
GetTempPathW
SetFileTime
SetFileInformationByHandle
GetFullPathNameW
GetFinalPathNameByHandleW
GetFileInformationByHandle
GetFileAttributesExW
GetDiskFreeSpaceExW
FindNextFileW
FindFirstFileExW
FindFirstFileW
CreateFileW
CreateDirectoryW
GetConsoleOutputCP
SetFilePointerEx
GetCurrentDirectoryW
SetCurrentDirectoryW
GetLocaleInfoEx
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
IsThreadAFiber
VirtualProtect
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
HeapSize
HeapQueryInformation
GetExitCodeProcess
CreatePipe
DeleteFileW
SetConsoleCtrlHandler
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
OutputDebugStringW
SetStdHandle
SetEndOfFile
GetConsoleMode
CreateThreadpoolTimer
GetProcessHeap
HeapAlloc
HeapReAlloc
HeapFree
GetFileSizeEx
FormatMessageA
LoadLibraryExA
GetThreadTimes
CopyFileA
SetProcessWorkingSetSize
CreateThread
FlushFileBuffers
GetCommandLineA
SetConsoleTitleA
GetConsoleTitleA
ReadConsoleOutputA
SetConsoleTextAttribute
SetConsoleCursorPosition
FillConsoleOutputAttribute
FillConsoleOutputCharacterA
SetConsoleMode
FreeConsole
AllocConsole
SetLastError
lstrcmpiA
GetSystemDirectoryA
SetFilePointer
GetSystemInfo
GetVolumeInformationA
OpenMutexA
OpenProcess
CreateMutexA
ReleaseMutex
DuplicateHandle
GetCurrentDirectoryA
WaitForSingleObject
GetConsoleScreenBufferInfo
GetActiveProcessorCount
GetActiveProcessorGroupCount
SetProcessAffinityMask
GetProcessAffinityMask
GetVersionExA
GetPriorityClass
SetPriorityClass
GetThreadPriority
SetThreadPriority
QueryPerformanceFrequency
QueryPerformanceCounter
GetStdHandle
FileTimeToSystemTime
FileTimeToLocalFileTime
ReadFile
GetFileSize
Module32Next
Module32First
Process32Next
Process32First
CreateToolhelp32Snapshot
lstrcpynA
GetSystemTimeAsFileTime
DeleteFileA
GetPrivateProfileStringA
GetCurrentThreadId
CreateDirectoryA
GetFileAttributesA
GetFullPathNameA
OutputDebugStringA
GetLocalTime
GetTickCount
GetPrivateProfileIntA
WritePrivateProfileStringA
GetTickCount64
GetFileAttributesW
FreeLibrary
GetModuleFileNameW
GetProcAddress
LoadLibraryA
LoadLibraryW
MultiByteToWideChar
WideCharToMultiByte
FindClose
FindFirstFileA
FindNextFileA
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalFree
LocalFree
SetFileAttributesW
CloseHandle
GetCurrentProcess
ExitProcess
TerminateProcess
CreateProcessW
GetModuleHandleW
GetEnvironmentVariableA
lstrlenA
CreateFileA
RemoveDirectoryA
SetFileAttributesA
WriteFile
GetLastError
CreateProcessA
Sleep
GetCurrentThread
GetThreadContext
IsBadReadPtr
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
SetUnhandledExceptionFilter
GetCurrentProcessId
GetModuleFileNameA
GlobalMemoryStatus
WriteConsoleW
user32
wsprintfA
SendMessageA
GetFocus
OffsetRect
PtInRect
GetDoubleClickTime
GetCursorPos
SetCursorPos
RegisterHotKey
UnregisterHotKey
SetRect
PostMessageA
GetWindowLongA
DestroyWindow
GetDC
ReleaseDC
SetScrollPos
GetScrollPos
GetWindowTextW
GetCaretPos
GetWindowLongW
SetWindowLongW
wvsprintfA
GetKeyboardLayoutNameA
GetKeyboardLayout
DrawMenuBar
GetSystemMenu
RemoveMenu
UpdateWindow
EnumChildWindows
GetClassNameA
GetWindowThreadProcessId
DialogBoxParamA
GetMonitorInfoA
CheckDlgButton
IsDlgButtonChecked
SetForegroundWindow
FindWindowA
ChangeDisplaySettingsA
SetProcessDPIAware
KillTimer
LoadIconW
GetWindowRect
MessageBoxA
GetDesktopWindow
SetWindowsHookExA
ShowCursor
UnhookWindowsHookEx
CallNextHookEx
TrackMouseEvent
GetKeyState
ScreenToClient
IntersectRect
UnionRect
IsRectEmpty
OpenClipboard
CloseClipboard
SetClipboardData
GetClipboardData
EmptyClipboard
GetAsyncKeyState
GetMessageA
TranslateMessage
DispatchMessageA
CallWindowProcW
PeekMessageA
SendMessageW
PostMessageW
MonitorFromWindow
EndDialog
SystemParametersInfoA
MessageBoxW
AdjustWindowRect
GetClientRect
SetWindowTextW
DefWindowProcW
LoadIconA
PostQuitMessage
RegisterClassW
GetClassInfoW
CreateWindowExW
ShowWindow
IsWindowVisible
SetFocus
SetCapture
ReleaseCapture
SetTimer
GetForegroundWindow
SetWindowPos
EndPaint
BeginPaint
LoadCursorA
gdi32
SetBkColor
GetStockObject
SetTextColor
CreateFontA
GetTextExtentPoint32W
TextOutW
CreateCompatibleDC
DeleteDC
GetCurrentObject
SelectObject
CreateDIBSection
SwapBuffers
ChoosePixelFormat
DescribePixelFormat
SetPixelFormat
DeleteObject
CreateFontW
advapi32
RegCloseKey
RegDeleteValueA
RegEnumValueA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
shell32
Shell_NotifyIconW
ShellExecuteA
ole32
CoCreateInstance
CoUninitialize
CoInitialize
crypt32
CryptUnprotectData
CryptProtectData
wininet
FtpOpenFileA
FtpFindFirstFileA
InternetReadFile
HttpOpenRequestA
InternetOpenA
InternetCloseHandle
HttpSendRequestA
HttpQueryInfoA
InternetQueryDataAvailable
InternetConnectA
urlmon
URLDownloadToFileA
rpcrt4
UuidCreateSequential
bcrypt
BCryptOpenAlgorithmProvider
BCryptGetProperty
BCryptGenRandom
BCryptDestroyHash
BCryptFinishHash
BCryptHashData
BCryptCreateHash
BCryptCloseAlgorithmProvider
dbghelp
MiniDumpWriteDump
AmdPowerXpressRequestHighPerformance
GetFunctionOffset
GetSharedValue
NvOptimusEnablement
Name
.text
Size
9.5MB
Virtual Size
9.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
428KB
Virtual Size
143.7MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.fptable
Size
512B
Virtual Size
128B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=53, id=259, version=33145,
count=38, id=260, version=33145,
count=3, id=253, version=35207,
count=28, id=259, version=35207,
count=20, id=260, version=35207,
count=97, id=261, version=35207,
count=26, id=264, version=35228,
count=24, id=260, version=35211,
count=2, id=221, productName=VS2013 UPD5 build 40629, version=40629,
count=31, id=260, version=31329,
count=39, id=261, version=30159,
count=2, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
count=1, id=11, version=8966,
count=232, id=261, version=33145,
count=39, id=257, version=33145,
count=568, id=1, productName=Unmarked objects,
count=544, id=261, version=35228,
count=1, id=256, version=35228,
count=1, id=255, version=35228,
count=1, id=151,
count=1, id=258, version=35228,
FilesUpdate/dmoprotect.dll
- SHA256 2d0b5c16cf546ab1b2f4b285e542beaf390208eb0897d31283393f447babc333
- MD5 3a81360c7783a2bfd458244c3b814651
- SHA1 45f0d6539bccf0b212349233183bafa14b4cccbd
- SHA512 b703bf766e904dbc0c3d7cb0ee82a4187e89634b8bc7e2de6e3f347f26bc7bc88a766a72dbeb5605aa60f87e1d6cfddb59d8359049e08314913a0fce12bea928
- SSDEEP 98304:nXPh6DfY3L3e2cEMmQCKGKtpiPgRSt/dAlWlOqieQKpr38StkDpYZpZLB:n2sL3cbmQClJPgRShoWjieQErRtkN0pv
- TLSH T1122633210261ABC1C6EA6B73F9479E017C52BB8F6E594572DC4FA8D8133E6BCD324C94
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
a5:17:53:61:82:42:1f:5a:ca:39:8e:21:3b:f8:ac:a5:f7:f3:22:99:64:1e:3f:6e:29:ed:13:80:79:15:4b:2c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Liester Enriquez Nodarse,O=Liester Enriquez Nodarse,L=lehigh acres,ST=Florida,C=US
Chains
Jun 22, 2026
CN=Liester Enriquez Nodarse,O=Liester Enriquez Nodarse,L=lehigh acres,ST=Florida,C=US
CN=Microsoft ID Verified CS AOC CA 04,O=Microsoft Corporation,C=US
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Subject
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Serial Number
54:98:d2:d1:d4:5b:19:95:48:13:79:c8:11:c0:87:99
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Apr 16, 2020 - Apr 16, 2045
Subject
CN=Liester Enriquez Nodarse,O=Liester Enriquez Nodarse,L=lehigh acres,ST=Florida,C=US
Serial Number
33:00:02:59:bb:e1:03:fc:4c:3a:6b:5c:06:00:00:00:02:59:bb
Issuer
CN=Microsoft ID Verified CS AOC CA 04,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jun 20, 2026 - Jun 23, 2026
Subject
CN=Microsoft ID Verified CS AOC CA 04,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:16:31:92:8d:92:02:65:7b:9a:00:00:00:00:00:16
Issuer
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Mar 26, 2026 - Mar 26, 2031
Subject
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:07:87:a3:34:a3:7b:a5:8e:1c:00:00:00:00:00:07
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Apr 1, 2021 - Apr 1, 2036
Subject
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Nov 19, 2020 - Nov 19, 2035
Subject
CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft America Operations+OU=nShield TSS ESN:A500-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:56:7e:8f:9d:58:08:8e:e9:60:00:00:00:00:00:56
Issuer
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 23, 2025 - Oct 22, 2026
Minor OS version
0
Major OS version
6
Entry point
8994904
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
EntryProc
Name
Size
356KB
Virtual Size
771KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
Size
1.1MB
Virtual Size
1.2MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
Size
2KB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
6B
Virtual Size
128B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
192KB
Virtual Size
556KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
Size
34KB
Virtual Size
45KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.exports
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.imports
Size
1KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
2KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.themida
Size
Virtual Size
4.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.boot
Size
2.9MB
Virtual Size
2.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
16B
Virtual Size
4KB
Characteristics
IMAGE_SCN_MEM_READ
generic
count=22, id=259, version=33145,
count=189, id=261, version=33145,
count=28, id=260, version=33145,
count=25, id=259, version=35207,
count=19, id=260, version=35207,
count=1, id=263, version=33145,
count=89, id=261, version=35207,
count=41, id=257, version=33145,
count=494, id=1, productName=Unmarked objects,
count=35, id=261, version=35219,
count=2, id=207, version=50522,
count=45, id=265, version=35219,
count=1, id=256, version=35219,
count=1, id=255, version=35219,
count=1, id=151,
count=1, id=258, version=35219,
FilesUpdate/dmosys/dmoprotect.exe
- SHA256 2a00632e9b56be5754b07ed3db8d461683f6a08664fad0805212f1f7c810631e
- MD5 5110308132c050aa557517aec254ac13
- SHA1 3efb8e0a8d2fd579b5d3a09101ace11f48f829f2
- SHA512 e710f7dafefd8c010cbee523591fb0cbed9475a53dbb67fb940e609fb3960e1483c2c5670c565a30e84c9267b0eb84f2a2ee9214d7a7482907397dfa69480987
- SSDEEP 98304:dMSRu/D2FhZBS5QMUZdHGfBEfzEl6/A1Lpm:deD+hZWQM+midupm
- TLSH T1961623859BB0CE99E556097024E01B1C7DBAF3D5CAF803D93C81ED76A87873E853A634
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
b3:42:d2:fb:fd:82:cc:a5:27:06:a5:79:64:dc:d5:91:17:0d:3f:0f:d6:6d:83:6b:38:c5:1b:e6:ab:c7:b9:aa
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Liester Enriquez Nodarse,O=Liester Enriquez Nodarse,L=lehigh acres,ST=Florida,C=US
Chains
Jun 16, 2026
CN=Liester Enriquez Nodarse,O=Liester Enriquez Nodarse,L=lehigh acres,ST=Florida,C=US
CN=Microsoft ID Verified CS AOC CA 04,O=Microsoft Corporation,C=US
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Subject
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Serial Number
54:98:d2:d1:d4:5b:19:95:48:13:79:c8:11:c0:87:99
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Apr 16, 2020 - Apr 16, 2045
Subject
CN=Liester Enriquez Nodarse,O=Liester Enriquez Nodarse,L=lehigh acres,ST=Florida,C=US
Serial Number
33:00:02:1e:0b:b4:d3:4d:32:a3:51:ea:e3:00:00:00:02:1e:0b
Issuer
CN=Microsoft ID Verified CS AOC CA 04,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jun 14, 2026 - Jun 17, 2026
Subject
CN=Microsoft ID Verified CS AOC CA 04,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:16:31:92:8d:92:02:65:7b:9a:00:00:00:00:00:16
Issuer
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Mar 26, 2026 - Mar 26, 2031
Subject
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:07:87:a3:34:a3:7b:a5:8e:1c:00:00:00:00:00:07
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Apr 1, 2021 - Apr 1, 2036
Subject
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Nov 19, 2020 - Nov 19, 2035
Subject
CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft America Operations+OU=nShield TSS ESN:7A00-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:58:65:cd:eb:3f:a1:d7:fc:d2:00:00:00:00:00:58
Issuer
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 23, 2025 - Oct 22, 2026
Minor OS version
0
Major OS version
6
Entry point
8781912
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
Name
Size
221KB
Virtual Size
440KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
Size
53KB
Virtual Size
149KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
Size
869B
Virtual Size
1.3MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
10KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
Size
6B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
85KB
Virtual Size
402KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
Size
2KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.imports
Size
1024B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
403KB
Virtual Size
403KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.themida
Size
Virtual Size
5.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.boot
Size
3.2MB
Virtual Size
3.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
16B
Virtual Size
4KB
Characteristics
IMAGE_SCN_MEM_READ
generic
count=157, id=261, version=33145,
count=13, id=260, version=33145,
count=10, id=259, version=33145,
count=10, id=259, version=35207,
count=19, id=260, version=35207,
count=49, id=261, version=35207,
count=25, id=257, version=33145,
count=263, id=1, productName=Unmarked objects,
count=4, id=261, version=35219,
count=1, id=255, version=35219,
count=1, id=258, version=35219,
FilesUpdate/dmosys/dmoprotect32.exe
- SHA256 21fb28336efd2053ea8ea9888751657c39858a8360c7a4b6711af96f285d0872
- MD5 1ed9c149af9fa240bfa9138002c21ffb
- SHA1 c9f0248c285ee922e74b143e8ad7a7f22b196f3c
- SHA512 dca5eec690598297e7c85f0876e48114ca90caffdbe80f259a4e48deaf98fa167288d2de1c2d411bef350e6d4aeaca4df75a2aa6bea1039aec9196406b6c0ef7
- SSDEEP 98304:dSwZVAV94OpFP+pBcf/2GFP0vGxUWfvNLtgjI:4wm9tFPWBOeGFP0veNvNejI
- TLSH T1BEF523C2A670DAD9E667043428A50A1C3CBEF3DC47F443D53CC69E35A8A871E863DA75
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
40:8d:a9:33:b9:b5:c2:8f:8e:ea:bf:43:2b:e1:a2:4d:64:e5:29:13:0d:c4:92:f2:dc:e0:98:12:99:c1:d6:d2
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Liester Enriquez Nodarse,O=Liester Enriquez Nodarse,L=lehigh acres,ST=Florida,C=US
Chains
Jun 16, 2026
CN=Liester Enriquez Nodarse,O=Liester Enriquez Nodarse,L=lehigh acres,ST=Florida,C=US
CN=Microsoft ID Verified CS AOC CA 04,O=Microsoft Corporation,C=US
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Subject
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Serial Number
54:98:d2:d1:d4:5b:19:95:48:13:79:c8:11:c0:87:99
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Apr 16, 2020 - Apr 16, 2045
Subject
CN=Liester Enriquez Nodarse,O=Liester Enriquez Nodarse,L=lehigh acres,ST=Florida,C=US
Serial Number
33:00:02:1e:0b:b4:d3:4d:32:a3:51:ea:e3:00:00:00:02:1e:0b
Issuer
CN=Microsoft ID Verified CS AOC CA 04,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jun 14, 2026 - Jun 17, 2026
Subject
CN=Microsoft ID Verified CS AOC CA 04,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:16:31:92:8d:92:02:65:7b:9a:00:00:00:00:00:16
Issuer
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Mar 26, 2026 - Mar 26, 2031
Subject
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:07:87:a3:34:a3:7b:a5:8e:1c:00:00:00:00:00:07
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Apr 1, 2021 - Apr 1, 2036
Subject
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Nov 19, 2020 - Nov 19, 2035
Subject
CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft America Operations+OU=nShield TSS ESN:7800-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:57:24:d3:95:e0:a2:e9:c9:31:00:00:00:00:00:57
Issuer
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 23, 2025 - Oct 22, 2026
Minor OS version
0
Major OS version
6
Entry point
7028824
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
Size
190KB
Virtual Size
380KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
Size
35KB
Virtual Size
100KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
Size
794B
Virtual Size
1.3MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
6B
Virtual Size
128B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
85KB
Virtual Size
402KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
Size
17KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.imports
Size
1024B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
403KB
Virtual Size
403KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.themida
Size
Virtual Size
4.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.boot
Size
2.5MB
Virtual Size
2.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
16B
Virtual Size
4KB
Characteristics
IMAGE_SCN_MEM_READ
generic
count=14, id=259, version=33145,
count=157, id=261, version=33145,
count=20, id=260, version=33145,
count=24, id=259, version=35207,
count=19, id=260, version=35207,
count=46, id=261, version=35207,
count=25, id=257, version=33145,
count=259, id=1, productName=Unmarked objects,
count=4, id=261, version=35219,
count=1, id=255, version=35219,
count=1, id=258, version=35219,
FilesUpdate/license.lic
- SHA256 db99d826cfa059acc8c93aa7cf63fd297de647cd203a758012a31458e8dc0b2d
- MD5 0968a19eab8a15e9e9290f0ccee6714e
- SHA1 19c9c8c007dcfa1a33a5cbbe8c2f10c91126bc72
- SHA512 f915b82ed4daec0879dfa0830b2e302c1f130873b301209e405f932d795ab3302978a4e6fdc92e0f7503ab03a958845220eaef0949b62fae62cfe8e2be09cc40
- TLSH T13BE07D5A39199B2E5B056E86A3C04D9A9E1302C81DB5190F69204599F1A2F3DABCAA43
- MD5 SHA1 SHA512 TLSH
hash.json
- SHA256 efb745839d5f847944b5078075563b650d70b549259fed5f69f099a22d4410a9
- MD5 54775110121002332c059a56cc6b3013
- SHA1 0939c4e5537da368014bd306c55b456886a5f20d
- SHA512 e547cdba9b519d43d3b5c27598acbccbc5b9b3c9d790d1bdaf2a7c4bda60f7b47f83a203fcd0967e699b11ca4e327c5db1e751bb85cde9cf813f03522ef8cfda
- SSDEEP 96:bcxuwrsGAcDXduOQIyetReUGm0W4lcURHjxgIckRMcmHYUz:AgisONb+3RRDxgIckRMcmHYy
- TLSH T11EB157B088F76B63ABCC4155617692C7B7210D8EA2FC3EE23C8336849B681677175F90
- MD5 SHA1 SHA512 SSDEEP TLSH