Не подтверждено 807906[.]~

resource
unpack001/$PLUGINSDIR/INetC.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/OpenHardwareMonitor/Aga.Controls.dll
unpack001/OpenHardwareMonitor/OpenHardwareMonitor.exe
unpack001/OpenHardwareMonitor/OpenHardwareMonitorLib.dll
unpack001/OpenHardwareMonitor/OxyPlot.WindowsForms.dll
unpack001/OpenHardwareMonitor/OxyPlot.dll
unpack001/VirusTotalUpload.exe

Не подтверждено 807906.~

IMPHASH 1f23f452093b5c1ff091a2f9fb4fa3e9
SHA256 8507526b209551e01093ef6991491a1ed2ef1bd83a3011a593763d1b2481c858
MD5 73493ee93a0a5be10908a8c2cb5a8557
SHA1 63e59141aba45f8b86fc149f83b23fc97e1c9ca4
SHA512 7bacd53e494f2bc15426e5347de231e1fc6d84efc1ecc529f79301ead3ffdbc16a95ee96d44f00abfb3d0662f2413f429af549a24739b3d13ae81e235fe0ba50
SSDEEP 98304:wla3RCzQfS8PrpcyrYuJmudWJSAsKNZea+Y7kYOhLKUp0oePpAu3r1z7ov:wtoS8TpcONXIEAtNkaZkHhz1Fu71nov
TLSH
T1EB26335C9584FA51E58B6D7085FECA388AA1FC807823289A737D3B199DD33D8DC31267
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

34:d5:cb:e0:61:9a:3e:c1:5f:d0:d1:67:30:5e:2f:80:1e:cd:f6:dd:79:6c:0c:fe:55:33:1a:2e:13:79:5b:bd

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Global Security Center,O=Global Security Center,POSTALCODE=107140,STREET=Krasnoselskii 1-i Lane\, building 3,ST=Moscow,C=RU

Chains

Aug 6, 2021

CN=Global Security Center,O=Global Security Center,POSTALCODE=107140,STREET=Krasnoselskii 1-i Lane\, building 3,ST=Moscow,C=RU

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Digest

71:31:e7:38:e9:d7:a9:06:c2:50:2f:a1:52:b0:08:f1:10:93:e8:ef

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=Global Security Center,O=Global Security Center,POSTALCODE=107140,STREET=Krasnoselskii 1-i Lane\, building 3,ST=Moscow,C=RU

Chains

Aug 6, 2021

CN=Global Security Center,O=Global Security Center,POSTALCODE=107140,STREET=Krasnoselskii 1-i Lane\, building 3,ST=Moscow,C=RU

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Subject

CN=Global Security Center,O=Global Security Center,POSTALCODE=107140,STREET=Krasnoselskii 1-i Lane\, building 3,ST=Moscow,C=RU

Serial Number

99:ea:9c:4d:6b:28:90:71:f6:bf:21:49:88:9f:f8:17

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 30, 2019 - Jul 30, 2023

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 2, 2018 - Dec 31, 2030

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 2, 2019 - Jan 18, 2038

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 23, 2020 - Jan 22, 2032

Minor OS version

0

Major OS version

4

Entry point

13477

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ExitProcess SetFileAttributesW Sleep GetTickCount CreateFileW GetFileSize GetModuleFileNameW GetCurrentProcess SetCurrentDirectoryW GetFileAttributesW SetEnvironmentVariableW GetWindowsDirectoryW GetTempPathW GetCommandLineW GetVersion SetErrorMode lstrlenW lstrcpynW CopyFileW GetShortPathNameW GlobalLock CreateThread GetLastError CreateDirectoryW CreateProcessW RemoveDirectoryW lstrcmpiA GetTempFileNameW WriteFile lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject lstrcmpiW MoveFileW GetFullPathNameW SetFileTime SearchPathW CompareFileTime lstrcmpW CloseHandle ExpandEnvironmentStringsW GlobalFree GlobalUnlock GetDiskFreeSpaceW GlobalAlloc FindFirstFileW FindNextFileW DeleteFileW SetFilePointer ReadFile FindClose lstrlenA MulDiv MultiByteToWideChar WideCharToMultiByte GetPrivateProfileStringW WritePrivateProfileStringW FreeLibrary LoadLibraryExW GetModuleHandleW

user32

GetSystemMenu SetClassLongW EnableMenuItem IsWindowEnabled SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos LoadBitmapW CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard ScreenToClient GetWindowRect GetDlgItem GetSystemMetrics SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow GetDC SetTimer SetWindowTextW LoadImageW SetForegroundWindow ShowWindow IsWindow SetWindowLongW FindWindowExW TrackPopupMenu AppendMenuW CreatePopupMenu EndPaint CreateDialogParamW SendMessageTimeoutW wsprintfW PostQuitMessage

gdi32

SelectObject SetBkMode CreateFontIndirectW SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation ShellExecuteExW SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW

advapi32

AdjustTokenPrivileges RegCreateKeyExW RegOpenKeyExW SetFileSecurityW OpenProcessToken LookupPrivilegeValueW RegEnumValueW RegDeleteKeyW RegDeleteValueW RegCloseKey RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_Create ImageList_AddMasked ImageList_Destroy ord17

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

$PLUGINSDIR/INetC.dll

IMPHASH 735e27ae3d7df8c0487e4353d04f6f28
SHA256 c1e568e25ec111184deb1b87cfda4bfec529b1abeab39b66539d998012f33502
MD5 640bff73a5f8e37b202d911e4749b2e9
SHA1 9588dd7561ab7de3bca392b084bec91f3521c879
SHA512 39c6c358e2b480c8cbebcc1da683924c8092fb2947f2da4a8df1b0dc1fdda61003d91d12232a436ec88ff4e0995b7f6ee8c6efbdca935eaa984001f7a72fea0a
SSDEEP 384:wv1j9e9dEs+rN+qFLAjNXT37vYnOrvFhSL+ZwcSyekzANZBJ:w1AvEs3HBLzYn29vYh
TLSH
T1F2B2E69157EA135EF7F19F347475EB2249BBBC214821C8CF5633268E19B2242E930727
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

17741

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

GetProcAddress LocalFree WideCharToMultiByte TerminateThread lstrcpyW LoadLibraryA CreateThread WaitForSingleObject LocalAlloc lstrcpynW SleepEx MulDiv GetModuleHandleW ReadFile GetLastError CreateFileW lstrcmpiW CreateFileA lstrcatW GetFileSize SetFilePointer lstrcmpW MultiByteToWideChar lstrlenA WriteFile lstrlenW CloseHandle GlobalAlloc GlobalFree GetTickCount DeleteFileW

user32

GetDlgItem DestroyWindow GetClientRect MessageBoxW wsprintfA SystemParametersInfoW GetWindowTextW GetWindowLongW FindWindowExW IsWindow CreateDialogParamW GetParent ShowWindow KillTimer DispatchMessageW LoadIconW PostMessageW IsDialogMessageW GetMessageW SetWindowPos SendDlgItemMessageW SetWindowTextW TranslateMessage GetWindowRect RedrawWindow SetTimer EnableWindow UpdateWindow SetWindowLongW wsprintfW SendMessageW SetDlgItemTextW IsWindowVisible

comctl32

ord17

wininet

InternetConnectW HttpOpenRequestW InternetQueryOptionW InternetErrorDlg HttpSendRequestExW InternetWriteFile HttpSendRequestW InternetSetFilePointer HttpAddRequestHeadersA FtpCreateDirectoryW InternetCrackUrlW FtpOpenFileW InternetSetOptionW InternetOpenW InternetGetLastResponseInfoW HttpEndRequestW InternetReadFile HttpAddRequestHeadersW InternetCloseHandle HttpQueryInfoW

$PLUGINSDIR/System.dll

IMPHASH fc0224e99e736751432961db63a41b76
SHA256 a632d74332b3f08f834c732a103dafeb09a540823a2217ca7f49159755e8f1d7
MD5 75ed96254fbf894e42058062b4b4f0d1
SHA1 996503f1383b49021eb3427bc28d13b5bbd11977
SHA512 58174896db81d481947b8745dafe3a02c150f3938bb4543256e8cce1145154e016d481df9fe68dac6d48407c62cbe20753320ebd5fe5e84806d07ce78e0eb0c4
SSDEEP 192:X24sihno0bW+l97H4GB7QDs91kMtwtobTr4u+QHbazMNHT7dmNIEr:m8vJl97JeoxtN/r3z7YV
TLSH
T1E0327D1293E044F2F191853C086B3B5AAB7A65099BE24EA79FE381817D15AD6BD3D303
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10647

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$TEMP/AnVir.exe

IMPHASH c025852bb7b8f6f254448089f12d52ed
SHA256 e0cbf935b59a329b25581611ff509cbae7d023acc4e312f26d0cde43b3f1db40
MD5 4f43c88d7f927530e5e07d4d20e60071
SHA1 d229e9abd1eae3a8b17b93182282f4b463103f79
SHA512 77d9600637c43c75615073be404f4d497f3c0be45d97bcd154f01eb3924feb6301a4f07755822012e0f3c9df2edb9deb3b53ef78b102c97c3a8a526d7b3ab7ab
SSDEEP 98304:XE3aQfCwDm55vZ2mpWqAKziinEvYzH6r0Vq5sikGgaDY2ipmU9:0qUCwQ5h2mRAKziXYzH6K
TLSH
T14AC69D6A9F444127D67712F025070B92672BFD6862BA551300D8B00E7DF66BE4F3E2EB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Digest

b1:33:16:14:89:c1:c3:1c:01:33:ce:34:93:ce:e6:2e:ab:3b:00:b7:42:99:6e:2b:59:63:2e:14:4e:ec:eb:cc

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Global Security Center,O=Global Security Center,POSTALCODE=107140,STREET=Krasnoselskii 1-i Lane\, building 3,ST=Moscow,C=RU

Chains

Aug 6, 2021

CN=Global Security Center,O=Global Security Center,POSTALCODE=107140,STREET=Krasnoselskii 1-i Lane\, building 3,ST=Moscow,C=RU

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Digest

8c:85:e4:5e:3b:7d:ec:9c:13:4d:0f:11:e1:c1:34:0d:a2:f6:22:97

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=Global Security Center,O=Global Security Center,POSTALCODE=107140,STREET=Krasnoselskii 1-i Lane\, building 3,ST=Moscow,C=RU

Chains

Aug 6, 2021

CN=Global Security Center,O=Global Security Center,POSTALCODE=107140,STREET=Krasnoselskii 1-i Lane\, building 3,ST=Moscow,C=RU

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Subject

CN=Global Security Center,O=Global Security Center,POSTALCODE=107140,STREET=Krasnoselskii 1-i Lane\, building 3,ST=Moscow,C=RU

Serial Number

99:ea:9c:4d:6b:28:90:71:f6:bf:21:49:88:9f:f8:17

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 30, 2019 - Jul 30, 2023

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 2, 2018 - Dec 31, 2030

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 2, 2019 - Jan 18, 2038

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 23, 2020 - Jan 22, 2032

Minor OS version

1

Major OS version

5

Entry point

827375

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

shell32

ord155 ord18 Shell_NotifyIconA SHOpenFolderAndSelectItems SHGetDesktopFolder SHBrowseForFolderA SHGetPathFromIDListA SHGetMalloc SHFileOperationA DuplicateIcon ExtractIconExA SHGetFileInfoA SHGetSpecialFolderPathA ShellExecuteExA ord680 ShellExecuteA

version

VerQueryValueA GetFileVersionInfoA

shlwapi

ord9 ord8 StrFormatByteSizeW PathFindOnPathA ord10 PathCanonicalizeA

msi

ord172 ord216

kernel32

GetPrivateProfileStructA GetPrivateProfileStringA FormatMessageA GetFileAttributesA SetFileAttributesA DeleteFileA GetSystemDirectoryA GetWindowsDirectoryA GetSystemWow64DirectoryA GetEnvironmentVariableA GetTempPathA SetErrorMode GetDriveTypeA SystemTimeToFileTime GetLocaleInfoA GetDateFormatA FileTimeToLocalFileTime FileTimeToSystemTime LoadLibraryA CreateProcessA GlobalAlloc GlobalLock GlobalUnlock GetVolumeInformationA LocalFree GetCurrentProcess GetStdHandle TlsAlloc TlsGetValue TlsSetValue GetFileSize SetFilePointer MulDiv IsBadStringPtrA CompareStringA GlobalMemoryStatusEx SetProcessAffinityMask GetProcessAffinityMask GlobalFree lstrlenW GlobalReAlloc FindFirstFileA FindNextFileA FindClose CopyFileA MoveFileA GetPrivateProfileIntA GetSystemPowerStatus GetPriorityClass SetPriorityClass SuspendThread SetProcessWorkingSetSize VirtualAlloc VirtualFree DuplicateHandle GetFileType VirtualAllocEx VirtualFreeEx RemoveDirectoryA GetLogicalDrives GetDiskFreeSpaceExA DeviceIoControl GetExitCodeProcess WritePrivateProfileStringA GetCommandLineA GetCPInfo GetOEMCP IsValidCodePage FindFirstFileExA GetConsoleMode GetConsoleCP FlushFileBuffers GetStringTypeW LCMapStringW GetACP ExitProcess GetModuleHandleExW FreeLibraryAndExitThread ExitThread CreateThread VirtualProtect GetSystemInfo LoadLibraryExW TlsFree RtlUnwind GetSystemTimeAsFileTime QueryPerformanceCounter GetStartupInfoW TerminateProcess UnhandledExceptionFilter GetModuleHandleW CreateEventW WaitForSingleObjectEx ResetEvent IsProcessorFeaturePresent FlushInstructionCache InterlockedPushEntrySList InterlockedPopEntrySList InitializeSListHead EncodePointer OutputDebugStringW IsDebuggerPresent CreateDirectoryA GetSystemTime IsBadWritePtr VirtualQuery ReadFile SetEndOfFile GetFileTime ExpandEnvironmentStringsA lstrcatA GetLocalTime GetVersionExA lstrcpyA MapViewOfFile CreateFileMappingA TerminateThread SetEvent GetLongPathNameA lstrcpynA QueryDosDeviceA GetLogicalDriveStringsA GetProcessTimes GetCurrentProcessId OpenProcess lstrcmpA lstrlenA CreateFileA WriteFile ResumeThread SetThreadPriority GetExitCodeThread GetTickCount SetLastError DecodePointer GetCurrentThreadId SetUnhandledExceptionFilter Sleep WaitForSingleObject PulseEvent OpenEventA CreateEventA OpenMutexA CloseHandle CreateMutexA InterlockedIncrement InterlockedDecrement DeleteCriticalSection InitializeCriticalSectionAndSpinCount GetModuleFileNameA LoadLibraryExA FindResourceA GetLastError RaiseException IsDBCSLeadByte MultiByteToWideChar lstrcmpiA GetModuleHandleA GetProcAddress FreeLibrary LeaveCriticalSection EnterCriticalSection GetProcessHeap HeapAlloc HeapFree HeapReAlloc HeapSize HeapDestroy FindResourceExW FindResourceW LoadResource LockResource SizeofResource WideCharToMultiByte GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW WritePrivateProfileStructA SetStdHandle CreateFileW SetFilePointerEx WriteConsoleW ReadConsoleW SetFileTime

user32

DrawAnimatedRects DialogBoxIndirectParamA GetDialogBaseUnits ChildWindowFromPoint SendDlgItemMessageA CreateIconIndirect GetGuiResources FindWindowExA EnumThreadWindows SetScrollPos SetScrollInfo SetClassLongA GetScrollRange ScrollWindowEx FlashWindow WaitForInputIdle GetMenuStringA GetNextDlgTabItem GetScrollPos GetAsyncKeyState DragDetect AdjustWindowRectEx EqualRect GetDesktopWindow LockWindowUpdate EndDeferWindowPos DeferWindowPos BeginDeferWindowPos ClientToScreen SetParent IsChild SetRect IsRectEmpty TrackMouseEvent LoadBitmapA DrawStateA AppendMenuA PtInRect GetCapture SetCapture ReleaseCapture DrawFocusRect CharLowerA FrameRect WindowFromPoint GetMessagePos IsWindowEnabled EndPaint BeginPaint ScreenToClient GetLayeredWindowAttributes DestroyIcon DrawFrameControl TranslateAcceleratorA PostQuitMessage LoadStringW SetRectEmpty GetWindowTextLengthA DrawEdge LockWorkStation ExitWindowsEx GetForegroundWindow RegisterHotKey UnregisterHotKey IsZoomed IsIconic SetWindowsHookExA CallNextHookEx MonitorFromPoint UnhookWindowsHookEx ModifyMenuA GetMenuItemID MonitorFromRect CopyRect SetMenu GetMenu GetFocus SetMenuDefaultItem RegisterWindowMessageA DrawIconEx GetWindowDC GetDCEx OffsetRect GetSysColorBrush SystemParametersInfoA CallWindowProcA DefWindowProcA GetSysColor IsCharAlphaNumericA CharUpperBuffA FillRect InflateRect UpdateWindow SetMenuItemInfoA GetMenuItemInfoA IsMenu InvalidateRect RedrawWindow MoveWindow CharLowerBuffA DeleteMenu SetLayeredWindowAttributes CheckMenuRadioItem GetTopWindow GetWindowPlacement GetMenuState GetDlgItemTextA GetDlgCtrlID IntersectRect GetKeyState InsertMenuA RemoveMenu InsertMenuItemA GetSubMenu CreateDialogParamA GetMenuItemCount GetCursorPos BringWindowToTop IsDialogMessageA GetKeyboardLayoutList GetWindowThreadProcessId CloseClipboard SetClipboardData EmptyClipboard OpenClipboard DestroyMenu TrackPopupMenu TrackPopupMenuEx CreatePopupMenu GetClassLongA SendMessageTimeoutA LoadIconA CharUpperA SetDlgItemInt GetDlgItemInt CharNextA PostMessageA SetCursor MessageBeep EndDialog SetFocus EnableWindow GetShellWindow ReleaseDC GetDC GetClassNameA GetWindow MonitorFromWindow GetMonitorInfoA GetWindowRect GetParent GetClientRect MapWindowPoints EnumChildWindows GetWindowTextA DialogBoxParamA GetActiveWindow DrawTextA EnumWindows ShowWindowAsync wsprintfA IsWindowVisible MessageBoxA KillTimer SetDlgItemTextA SetTimer IsDlgButtonChecked CheckDlgButton SetWindowTextA SetWindowPos GetWindowLongA SendMessageA GetDlgItem SetWindowLongA CreateWindowExA UnregisterClassA GetClassInfoExA LoadImageA GetSystemMetrics RegisterClassExA LoadAcceleratorsA LoadMenuA LoadStringA DestroyWindow SetForegroundWindow DispatchMessageA TranslateMessage GetMessageA PeekMessageA FindWindowA ShowWindow IsWindow LoadCursorA

gdi32

RoundRect CreateDCA SetViewportOrgEx ExcludeClipRect ExtTextOutA CreateDIBSection SetBrushOrgEx PatBlt TextOutW CreatePatternBrush CreateBitmap GetClipBox SetWindowOrgEx DPtoLP LPtoDP RectVisible LineTo MoveToEx CreatePen GetStockObject CreateFontIndirectA RestoreDC SaveDC BitBlt CreateCompatibleBitmap GetObjectA SetTextColor SetBkColor SetBkMode CreateSolidBrush GetDeviceCaps Polygon SelectObject CreateCompatibleDC DeleteObject DeleteDC GetTextMetricsA GetTextExtentPoint32A Rectangle GetCurrentObject

comdlg32

FindTextA GetSaveFileNameA GetOpenFileNameA

advapi32

DuplicateTokenEx UnlockServiceDatabase ChangeServiceConfigA LockServiceDatabase QueryServiceStatusEx ControlService StartServiceA DeleteService ChangeServiceConfig2A CreateServiceA CloseServiceHandle OpenServiceA OpenSCManagerA LookupAccountSidA GetSecurityInfo GetTokenInformation AdjustTokenPrivileges LookupPrivilegeValueA OpenProcessToken QueryServiceConfigA SetSecurityInfo GetSecurityDescriptorSacl RegEnumValueA RegQueryInfoKeyA QueryServiceConfig2A RegQueryValueExA RegDeleteValueA RegCreateKeyExA RegSetValueExA RegOpenKeyExA RegDeleteKeyA RegCloseKey RegQueryInfoKeyW RegEnumKeyExA GetServiceDisplayNameA

ole32

CoTaskMemAlloc CoTaskMemFree CoInitializeEx CoCreateInstance CoInitialize CoUninitialize CoTaskMemRealloc

oleaut32

VarUI4FromStr VariantInit VariantClear VariantChangeType SysAllocString SysFreeString SysAllocStringLen

comctl32

ord17 CreatePropertySheetPageA ImageList_AddMasked _TrackMouseEvent InitCommonControlsEx ImageList_Remove ImageList_ReplaceIcon ImageList_Create ImageList_Destroy ImageList_LoadImageA ImageList_GetIconSize ImageList_Draw ImageList_DrawEx PropertySheetA DestroyPropertySheetPage ImageList_GetImageCount ImageList_GetIcon ImageList_DrawIndirect

uxtheme

IsAppThemed SetWindowTheme

psapi

GetModuleFileNameExA

crypt32

CertFindRDNAttr CertFreeCertificateContext CryptDecodeObjectEx

rpcrt4

UuidFromStringA

AnVir.exe

IMPHASH c025852bb7b8f6f254448089f12d52ed
SHA256 e0cbf935b59a329b25581611ff509cbae7d023acc4e312f26d0cde43b3f1db40
MD5 4f43c88d7f927530e5e07d4d20e60071
SHA1 d229e9abd1eae3a8b17b93182282f4b463103f79
SHA512 77d9600637c43c75615073be404f4d497f3c0be45d97bcd154f01eb3924feb6301a4f07755822012e0f3c9df2edb9deb3b53ef78b102c97c3a8a526d7b3ab7ab
SSDEEP 98304:XE3aQfCwDm55vZ2mpWqAKziinEvYzH6r0Vq5sikGgaDY2ipmU9:0qUCwQ5h2mRAKziXYzH6K
TLSH
T14AC69D6A9F444127D67712F025070B92672BFD6862BA551300D8B00E7DF66BE4F3E2EB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Digest

b1:33:16:14:89:c1:c3:1c:01:33:ce:34:93:ce:e6:2e:ab:3b:00:b7:42:99:6e:2b:59:63:2e:14:4e:ec:eb:cc

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Global Security Center,O=Global Security Center,POSTALCODE=107140,STREET=Krasnoselskii 1-i Lane\, building 3,ST=Moscow,C=RU

Chains

Aug 6, 2021

CN=Global Security Center,O=Global Security Center,POSTALCODE=107140,STREET=Krasnoselskii 1-i Lane\, building 3,ST=Moscow,C=RU

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Digest

8c:85:e4:5e:3b:7d:ec:9c:13:4d:0f:11:e1:c1:34:0d:a2:f6:22:97

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=Global Security Center,O=Global Security Center,POSTALCODE=107140,STREET=Krasnoselskii 1-i Lane\, building 3,ST=Moscow,C=RU

Chains

Aug 6, 2021

CN=Global Security Center,O=Global Security Center,POSTALCODE=107140,STREET=Krasnoselskii 1-i Lane\, building 3,ST=Moscow,C=RU

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Subject

CN=Global Security Center,O=Global Security Center,POSTALCODE=107140,STREET=Krasnoselskii 1-i Lane\, building 3,ST=Moscow,C=RU

Serial Number

99:ea:9c:4d:6b:28:90:71:f6:bf:21:49:88:9f:f8:17

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 30, 2019 - Jul 30, 2023

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 2, 2018 - Dec 31, 2030

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 2, 2019 - Jan 18, 2038

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 23, 2020 - Jan 22, 2032

Minor OS version

1

Major OS version

5

Entry point

827375

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

shell32

ord155 ord18 Shell_NotifyIconA SHOpenFolderAndSelectItems SHGetDesktopFolder SHBrowseForFolderA SHGetPathFromIDListA SHGetMalloc SHFileOperationA DuplicateIcon ExtractIconExA SHGetFileInfoA SHGetSpecialFolderPathA ShellExecuteExA ord680 ShellExecuteA

version

VerQueryValueA GetFileVersionInfoA

shlwapi

ord9 ord8 StrFormatByteSizeW PathFindOnPathA ord10 PathCanonicalizeA

msi

ord172 ord216

kernel32

GetPrivateProfileStructA GetPrivateProfileStringA FormatMessageA GetFileAttributesA SetFileAttributesA DeleteFileA GetSystemDirectoryA GetWindowsDirectoryA GetSystemWow64DirectoryA GetEnvironmentVariableA GetTempPathA SetErrorMode GetDriveTypeA SystemTimeToFileTime GetLocaleInfoA GetDateFormatA FileTimeToLocalFileTime FileTimeToSystemTime LoadLibraryA CreateProcessA GlobalAlloc GlobalLock GlobalUnlock GetVolumeInformationA LocalFree GetCurrentProcess GetStdHandle TlsAlloc TlsGetValue TlsSetValue GetFileSize SetFilePointer MulDiv IsBadStringPtrA CompareStringA GlobalMemoryStatusEx SetProcessAffinityMask GetProcessAffinityMask GlobalFree lstrlenW GlobalReAlloc FindFirstFileA FindNextFileA FindClose CopyFileA MoveFileA GetPrivateProfileIntA GetSystemPowerStatus GetPriorityClass SetPriorityClass SuspendThread SetProcessWorkingSetSize VirtualAlloc VirtualFree DuplicateHandle GetFileType VirtualAllocEx VirtualFreeEx RemoveDirectoryA GetLogicalDrives GetDiskFreeSpaceExA DeviceIoControl GetExitCodeProcess WritePrivateProfileStringA GetCommandLineA GetCPInfo GetOEMCP IsValidCodePage FindFirstFileExA GetConsoleMode GetConsoleCP FlushFileBuffers GetStringTypeW LCMapStringW GetACP ExitProcess GetModuleHandleExW FreeLibraryAndExitThread ExitThread CreateThread VirtualProtect GetSystemInfo LoadLibraryExW TlsFree RtlUnwind GetSystemTimeAsFileTime QueryPerformanceCounter GetStartupInfoW TerminateProcess UnhandledExceptionFilter GetModuleHandleW CreateEventW WaitForSingleObjectEx ResetEvent IsProcessorFeaturePresent FlushInstructionCache InterlockedPushEntrySList InterlockedPopEntrySList InitializeSListHead EncodePointer OutputDebugStringW IsDebuggerPresent CreateDirectoryA GetSystemTime IsBadWritePtr VirtualQuery ReadFile SetEndOfFile GetFileTime ExpandEnvironmentStringsA lstrcatA GetLocalTime GetVersionExA lstrcpyA MapViewOfFile CreateFileMappingA TerminateThread SetEvent GetLongPathNameA lstrcpynA QueryDosDeviceA GetLogicalDriveStringsA GetProcessTimes GetCurrentProcessId OpenProcess lstrcmpA lstrlenA CreateFileA WriteFile ResumeThread SetThreadPriority GetExitCodeThread GetTickCount SetLastError DecodePointer GetCurrentThreadId SetUnhandledExceptionFilter Sleep WaitForSingleObject PulseEvent OpenEventA CreateEventA OpenMutexA CloseHandle CreateMutexA InterlockedIncrement InterlockedDecrement DeleteCriticalSection InitializeCriticalSectionAndSpinCount GetModuleFileNameA LoadLibraryExA FindResourceA GetLastError RaiseException IsDBCSLeadByte MultiByteToWideChar lstrcmpiA GetModuleHandleA GetProcAddress FreeLibrary LeaveCriticalSection EnterCriticalSection GetProcessHeap HeapAlloc HeapFree HeapReAlloc HeapSize HeapDestroy FindResourceExW FindResourceW LoadResource LockResource SizeofResource WideCharToMultiByte GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW WritePrivateProfileStructA SetStdHandle CreateFileW SetFilePointerEx WriteConsoleW ReadConsoleW SetFileTime

user32

DrawAnimatedRects DialogBoxIndirectParamA GetDialogBaseUnits ChildWindowFromPoint SendDlgItemMessageA CreateIconIndirect GetGuiResources FindWindowExA EnumThreadWindows SetScrollPos SetScrollInfo SetClassLongA GetScrollRange ScrollWindowEx FlashWindow WaitForInputIdle GetMenuStringA GetNextDlgTabItem GetScrollPos GetAsyncKeyState DragDetect AdjustWindowRectEx EqualRect GetDesktopWindow LockWindowUpdate EndDeferWindowPos DeferWindowPos BeginDeferWindowPos ClientToScreen SetParent IsChild SetRect IsRectEmpty TrackMouseEvent LoadBitmapA DrawStateA AppendMenuA PtInRect GetCapture SetCapture ReleaseCapture DrawFocusRect CharLowerA FrameRect WindowFromPoint GetMessagePos IsWindowEnabled EndPaint BeginPaint ScreenToClient GetLayeredWindowAttributes DestroyIcon DrawFrameControl TranslateAcceleratorA PostQuitMessage LoadStringW SetRectEmpty GetWindowTextLengthA DrawEdge LockWorkStation ExitWindowsEx GetForegroundWindow RegisterHotKey UnregisterHotKey IsZoomed IsIconic SetWindowsHookExA CallNextHookEx MonitorFromPoint UnhookWindowsHookEx ModifyMenuA GetMenuItemID MonitorFromRect CopyRect SetMenu GetMenu GetFocus SetMenuDefaultItem RegisterWindowMessageA DrawIconEx GetWindowDC GetDCEx OffsetRect GetSysColorBrush SystemParametersInfoA CallWindowProcA DefWindowProcA GetSysColor IsCharAlphaNumericA CharUpperBuffA FillRect InflateRect UpdateWindow SetMenuItemInfoA GetMenuItemInfoA IsMenu InvalidateRect RedrawWindow MoveWindow CharLowerBuffA DeleteMenu SetLayeredWindowAttributes CheckMenuRadioItem GetTopWindow GetWindowPlacement GetMenuState GetDlgItemTextA GetDlgCtrlID IntersectRect GetKeyState InsertMenuA RemoveMenu InsertMenuItemA GetSubMenu CreateDialogParamA GetMenuItemCount GetCursorPos BringWindowToTop IsDialogMessageA GetKeyboardLayoutList GetWindowThreadProcessId CloseClipboard SetClipboardData EmptyClipboard OpenClipboard DestroyMenu TrackPopupMenu TrackPopupMenuEx CreatePopupMenu GetClassLongA SendMessageTimeoutA LoadIconA CharUpperA SetDlgItemInt GetDlgItemInt CharNextA PostMessageA SetCursor MessageBeep EndDialog SetFocus EnableWindow GetShellWindow ReleaseDC GetDC GetClassNameA GetWindow MonitorFromWindow GetMonitorInfoA GetWindowRect GetParent GetClientRect MapWindowPoints EnumChildWindows GetWindowTextA DialogBoxParamA GetActiveWindow DrawTextA EnumWindows ShowWindowAsync wsprintfA IsWindowVisible MessageBoxA KillTimer SetDlgItemTextA SetTimer IsDlgButtonChecked CheckDlgButton SetWindowTextA SetWindowPos GetWindowLongA SendMessageA GetDlgItem SetWindowLongA CreateWindowExA UnregisterClassA GetClassInfoExA LoadImageA GetSystemMetrics RegisterClassExA LoadAcceleratorsA LoadMenuA LoadStringA DestroyWindow SetForegroundWindow DispatchMessageA TranslateMessage GetMessageA PeekMessageA FindWindowA ShowWindow IsWindow LoadCursorA

gdi32

RoundRect CreateDCA SetViewportOrgEx ExcludeClipRect ExtTextOutA CreateDIBSection SetBrushOrgEx PatBlt TextOutW CreatePatternBrush CreateBitmap GetClipBox SetWindowOrgEx DPtoLP LPtoDP RectVisible LineTo MoveToEx CreatePen GetStockObject CreateFontIndirectA RestoreDC SaveDC BitBlt CreateCompatibleBitmap GetObjectA SetTextColor SetBkColor SetBkMode CreateSolidBrush GetDeviceCaps Polygon SelectObject CreateCompatibleDC DeleteObject DeleteDC GetTextMetricsA GetTextExtentPoint32A Rectangle GetCurrentObject

comdlg32

FindTextA GetSaveFileNameA GetOpenFileNameA

advapi32

DuplicateTokenEx UnlockServiceDatabase ChangeServiceConfigA LockServiceDatabase QueryServiceStatusEx ControlService StartServiceA DeleteService ChangeServiceConfig2A CreateServiceA CloseServiceHandle OpenServiceA OpenSCManagerA LookupAccountSidA GetSecurityInfo GetTokenInformation AdjustTokenPrivileges LookupPrivilegeValueA OpenProcessToken QueryServiceConfigA SetSecurityInfo GetSecurityDescriptorSacl RegEnumValueA RegQueryInfoKeyA QueryServiceConfig2A RegQueryValueExA RegDeleteValueA RegCreateKeyExA RegSetValueExA RegOpenKeyExA RegDeleteKeyA RegCloseKey RegQueryInfoKeyW RegEnumKeyExA GetServiceDisplayNameA

ole32

CoTaskMemAlloc CoTaskMemFree CoInitializeEx CoCreateInstance CoInitialize CoUninitialize CoTaskMemRealloc

oleaut32

VarUI4FromStr VariantInit VariantClear VariantChangeType SysAllocString SysFreeString SysAllocStringLen

comctl32

ord17 CreatePropertySheetPageA ImageList_AddMasked _TrackMouseEvent InitCommonControlsEx ImageList_Remove ImageList_ReplaceIcon ImageList_Create ImageList_Destroy ImageList_LoadImageA ImageList_GetIconSize ImageList_Draw ImageList_DrawEx PropertySheetA DestroyPropertySheetPage ImageList_GetImageCount ImageList_GetIcon ImageList_DrawIndirect

uxtheme

IsAppThemed SetWindowTheme

psapi

GetModuleFileNameExA

crypt32

CertFindRDNAttr CertFreeCertificateContext CryptDecodeObjectEx

rpcrt4

UuidFromStringA

AnvirHook8.dll

IMPHASH 4d3d5cda99c0f7e0bc7e72dc64b6e178
SHA256 a6c075b925098f4001ec38875e92a39c47c4bc3d41e14df207bff1690839b15a
MD5 7869927819a43348a46f59638dce158d
SHA1 38d54b1c37e645e80ac31174f79fb584acffc3e9
SHA512 822c4fbc8f4711c4a5654e664cdd11ab611722c22ff38554cabb7b4795e4aafb221a4f8162b8e2f96b176c2bf15642f9f7c191a399a715ac1abf3aec6e0cbbc6
SSDEEP 1536:rjnxEtiqQB13GJ3PCdZw3PWBf5dw57QTM2Gw21UVOnF4YbtZNRr5bqdmdmVUWXi2:+zQPGJow38wLNUWF4+tLqBUgb
TLSH
T1E5B37C01B3A45072D5F3083804E4EB324FB97C52EDF195477BEB2667AE683916A2934F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Digest

b5:aa:12:5a:32:7c:78:04:4a:62:e8:6f:20:28:db:5e:b6:ec:a2:5b:cc:f4:88:5f:61:c0:de:d1:61:20:08:bf

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Global Security Center,O=Global Security Center,POSTALCODE=107140,STREET=Krasnoselskii 1-i Lane\, building 3,ST=Moscow,C=RU

Chains

Aug 10, 2019

CN=Global Security Center,O=Global Security Center,POSTALCODE=107140,STREET=Krasnoselskii 1-i Lane\, building 3,ST=Moscow,C=RU

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Digest

32:63:28:d0:68:41:9a:3a:26:79:66:ea:aa:77:93:a4:fb:2b:4c:a2

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=Global Security Center,O=Global Security Center,POSTALCODE=107140,STREET=Krasnoselskii 1-i Lane\, building 3,ST=Moscow,C=RU

Chains

Aug 10, 2019

CN=Global Security Center,O=Global Security Center,POSTALCODE=107140,STREET=Krasnoselskii 1-i Lane\, building 3,ST=Moscow,C=RU

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Serial Number

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jun 7, 2005 - May 30, 2020

Subject

CN=COMODO Time Stamping CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

62:5c:4d:90:8c:d5:42:fb:ab:2e:a5:73:3f:f1:54:19

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Apr 27, 2011 - May 30, 2020

Subject

CN=Sectigo SHA-1 Time Stamping Signer,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

2b:73:db:74:63:11:4c:5a:5b:32:4a:f2:30:57:72:49

Issuer

CN=COMODO Time Stamping CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 2, 2019 - May 30, 2020

Subject

CN=Global Security Center,O=Global Security Center,POSTALCODE=107140,STREET=Krasnoselskii 1-i Lane\, building 3,ST=Moscow,C=RU

Serial Number

99:ea:9c:4d:6b:28:90:71:f6:bf:21:49:88:9f:f8:17

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 30, 2019 - Jul 30, 2023

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 2, 2018 - Dec 31, 2030

Subject

CN=Sectigo RSA Time Stamping Signer #1,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 2, 2019 - Aug 1, 2030

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 2, 2019 - Jan 18, 2038

Minor OS version

1

Major OS version

5

Entry point

34988

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

comctl32

ImageList_ReplaceIcon

shell32

SHGetMalloc SHGetPathFromIDListA SHGetDesktopFolder

msimg32

TransparentBlt

kernel32

GetVersionExA RaiseException lstrcmpA GetCurrentDirectoryA MultiByteToWideChar GetProcAddress lstrlenW WideCharToMultiByte OpenProcess SetPriorityClass GetPriorityClass GetFileAttributesA LoadLibraryW GetSystemTimeAsFileTime QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetStartupInfoW GetFileType SetHandleCount SetLastError TlsFree TlsSetValue GetTickCount TlsAlloc IsValidCodePage GetOEMCP GetACP InterlockedDecrement InterlockedIncrement GetCPInfo HeapSize IsProcessorFeaturePresent HeapDestroy HeapCreate GetModuleFileNameW GetStdHandle WriteFile ExitProcess GetModuleHandleW IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess TerminateProcess GetCommandLineA GetCurrentThreadId HeapReAlloc DecodePointer EncodePointer HeapFree HeapAlloc DeleteCriticalSection InitializeCriticalSectionAndSpinCount GetLastError LeaveCriticalSection EnterCriticalSection lstrcatA Sleep GetCurrentProcessId LoadLibraryA GetModuleFileNameA UnmapViewOfFile CloseHandle MapViewOfFile lstrlenA lstrcpyA OpenFileMappingA RtlUnwind LCMapStringW GetStringTypeW TlsGetValue

user32

GetMenuItemInfoA SetMenuItemInfoA RemoveMenu GetMenuState IsMenu DeleteMenu GetMenuItemID CheckMenuItem GetKeyState SendInput GetSystemMetrics InsertMenuA InsertMenuItemA CheckMenuRadioItem AppendMenuA TrackPopupMenuEx SetActiveWindow RedrawWindow GetWindowTextA GetWindowPlacement GetLayeredWindowAttributes InflateRect DrawFrameControl DrawIconEx GetSystemMenu LoadBitmapA PostMessageA SendMessageTimeoutA IsWindow RegisterClassA GetWindowDC ReleaseDC ClientToScreen SetWindowTextA LoadImageA LoadIconA wsprintfA GetWindowTextLengthA GetDlgCtrlID FindWindowExA GetClassNameA GetDlgItem SendMessageA EnumWindows SetTimer KillTimer DefWindowProcA FillRect GetClientRect EndPaint BeginPaint ShowWindowAsync SetWindowPos SetCapture IsWindowVisible SetLayeredWindowAttributes ShowWindow CreateWindowExA GetCursorPos UpdateWindow InvalidateRect CallWindowProcA CallWindowProcW SetWindowLongA SetWindowLongW IsWindowUnicode DestroyMenu TrackPopupMenu CreatePopupMenu DestroyWindow GetParent ScreenToClient OffsetRect ReleaseCapture PtInRect GetWindowLongA GetWindowRect GetDC

gdi32

SetWindowOrgEx DPtoLP SelectObject DeleteObject CreateCompatibleBitmap LPtoDP CreateCompatibleDC GetClipBox BitBlt CreateSolidBrush GetStockObject GetObjectA StretchBlt GetPixel Polyline CreatePen DeleteDC

ole32

CoTaskMemFree

uxtheme

IsAppThemed GetThemeEnumValue GetThemeInt IsThemeBackgroundPartiallyTransparent GetCurrentThemeName GetThemeFilename OpenThemeData CloseThemeData DrawThemeBackground GetThemeMargins

AnvirHook8_64.dll

IMPHASH 3c77569552017b41c37267fe86b374b6
SHA256 0347048170d988abcb8644913dbb0933f73271e4183e283acdf8b3a05acf6b57
MD5 0d638ef5f6d08754766fac4d38d5d522
SHA1 257fdfe94d5569020a07c031585012ef5dc3ae12
SHA512 31281c4dce52b4dd74c2bcacc83bce54beaae276f896663e3c9d35407a6ae5f7960a7adc38db87b23589dc55318e377dc4e74a4b45b0e8fea543bf5a66924b75
SSDEEP 3072:5sgnBll1XunPoc4uqTusDAF/kTRq01qQM6ivteg:5s0DuPJoTusDArQM6ic
TLSH
T1ABC38D4723A810BBD863C53484D39E26DBB27C4A57B2534F23B896966F173817E2E317
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Digest

ac:af:c8:07:f0:35:19:21:ad:22:11:27:99:e3:76:0d:35:d2:ed:0c:16:20:59:2a:6b:4b:c8:23:ce:13:5a:12

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Global Security Center,O=Global Security Center,POSTALCODE=107140,STREET=Krasnoselskii 1-i Lane\, building 3,ST=Moscow,C=RU

Chains

Aug 10, 2019

CN=Global Security Center,O=Global Security Center,POSTALCODE=107140,STREET=Krasnoselskii 1-i Lane\, building 3,ST=Moscow,C=RU

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Digest

48:00:fc:f7:aa:21:40:8b:fa:c6:43:e1:2d:c1:ff:16:a9:48:5f:ce

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=Global Security Center,O=Global Security Center,POSTALCODE=107140,STREET=Krasnoselskii 1-i Lane\, building 3,ST=Moscow,C=RU

Chains

Aug 10, 2019

CN=Global Security Center,O=Global Security Center,POSTALCODE=107140,STREET=Krasnoselskii 1-i Lane\, building 3,ST=Moscow,C=RU

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Serial Number

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jun 7, 2005 - May 30, 2020

Subject

CN=COMODO Time Stamping CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

62:5c:4d:90:8c:d5:42:fb:ab:2e:a5:73:3f:f1:54:19

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Apr 27, 2011 - May 30, 2020

Subject

CN=Sectigo SHA-1 Time Stamping Signer,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

2b:73:db:74:63:11:4c:5a:5b:32:4a:f2:30:57:72:49

Issuer

CN=COMODO Time Stamping CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 2, 2019 - May 30, 2020

Subject

CN=Global Security Center,O=Global Security Center,POSTALCODE=107140,STREET=Krasnoselskii 1-i Lane\, building 3,ST=Moscow,C=RU

Serial Number

99:ea:9c:4d:6b:28:90:71:f6:bf:21:49:88:9f:f8:17

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 30, 2019 - Jul 30, 2023

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 2, 2018 - Dec 31, 2030

Subject

CN=Sectigo RSA Time Stamping Signer #1,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 2, 2019 - Aug 1, 2030

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 2, 2019 - Jan 18, 2038

Minor OS version

2

Major OS version

5

Entry point

42772

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

comctl32

ImageList_ReplaceIcon

shell32

SHGetMalloc SHGetPathFromIDListA SHGetDesktopFolder

msimg32

TransparentBlt

kernel32

GetVersionExA RaiseException lstrcmpA GetCurrentDirectoryA MultiByteToWideChar GetProcAddress lstrlenW WideCharToMultiByte OpenProcess SetPriorityClass GetPriorityClass GetFileAttributesA LoadLibraryW GetSystemTimeAsFileTime QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetStartupInfoW GetFileType SetHandleCount FlsAlloc SetLastError FlsFree FlsGetValue IsValidCodePage GetTickCount GetACP GetCPInfo RtlUnwindEx HeapSize HeapDestroy HeapCreate GetVersion HeapSetInformation GetModuleFileNameW GetStdHandle WriteFile ExitProcess GetModuleHandleW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess TerminateProcess GetCommandLineA FlsSetValue GetCurrentThreadId HeapReAlloc DecodePointer EncodePointer HeapFree HeapAlloc DeleteCriticalSection InitializeCriticalSectionAndSpinCount GetLastError LeaveCriticalSection EnterCriticalSection lstrcatA Sleep GetCurrentProcessId LoadLibraryA GetModuleFileNameA UnmapViewOfFile CloseHandle MapViewOfFile lstrlenA lstrcpyA OpenFileMappingA LCMapStringW GetStringTypeW GetOEMCP RtlPcToFileHeader

user32

GetMenuItemInfoA SetMenuItemInfoA GetDC RemoveMenu GetMenuState IsMenu DeleteMenu GetMenuItemID GetSystemMenu GetKeyState SendInput GetSystemMetrics InsertMenuA InsertMenuItemA CheckMenuRadioItem AppendMenuA TrackPopupMenuEx SetActiveWindow RedrawWindow GetWindowPlacement GetLayeredWindowAttributes SetWindowLongA InflateRect DrawFrameControl CheckMenuItem DrawIconEx PostMessageA SendMessageTimeoutA IsWindow RegisterClassA GetWindowDC ReleaseDC ClientToScreen GetWindowTextA SetWindowTextA LoadImageA LoadIconA wsprintfA GetWindowTextLengthA GetDlgCtrlID FindWindowExA GetClassNameA GetDlgItem SendMessageA EnumWindows SetTimer KillTimer DefWindowProcA FillRect GetClientRect EndPaint BeginPaint GetWindowLongPtrA ShowWindowAsync SetWindowPos SetCapture IsWindowVisible SetLayeredWindowAttributes ShowWindow CreateWindowExA GetCursorPos UpdateWindow InvalidateRect CallWindowProcA CallWindowProcW SetWindowLongPtrA SetWindowLongPtrW IsWindowUnicode DestroyMenu TrackPopupMenu CreatePopupMenu DestroyWindow GetParent ScreenToClient OffsetRect ReleaseCapture PtInRect GetWindowLongA GetWindowRect LoadBitmapA

gdi32

SetWindowOrgEx DPtoLP SelectObject DeleteObject CreateCompatibleBitmap LPtoDP CreateCompatibleDC GetClipBox BitBlt CreateSolidBrush GetStockObject GetObjectA StretchBlt GetPixel Polyline CreatePen DeleteDC

ole32

CoTaskMemFree

uxtheme

IsAppThemed GetThemeEnumValue GetThemeInt IsThemeBackgroundPartiallyTransparent GetCurrentThemeName GetThemeFilename OpenThemeData CloseThemeData DrawThemeBackground GetThemeMargins

Languages/anvir_Croatian.txt

SHA256 216d7918eddb9d973c158ebb49684c84616fe8f574d132f7240bd9932be6573f
MD5 fe0cd1e796c8c1c79aa93f726a55754b
SHA1 b966b7afb70541fb7b3da9b73254bc27da5f51d9
SHA512 394519254446d76e1c2912395b79a8c8f57f89e843ec66999b12e368d0c1845ad8cdab0559a92593d279835d00272c07282b730aead2257c0aef727eec9cd38c
SSDEEP 768:WxRWV9w91RqcEjCH+9kGoW5jP/Z0L9ZCZi2MfzulIhns79b3mZeRD:8RWVQ8me9JgL9ZCg2MfzulIWhnD
TLSH
T110836242A7FD2904F5F77F40E9B856744A7BBCA16E3EC18E12800D4D09F5A90D972BA3
MD5 SHA1 SHA512 SSDEEP TLSH

Languages/anvir_Czech.txt

SHA256 535b97cc33f9591337ddc039d9d282ea5355216529263c372dbb9a4bc95ccdb8
MD5 2248558791c8abd27ba3f24f0a73dc07
SHA1 6c736b25fd3bdbbea1f0b9161f2cba9fb1be1341
SHA512 1c9db862208a0f876347df30e27bd12f7c6104fb7be046d0c01d3dc388e90b646da9b473d8d183c4382226c40cba9c4e9c92e0e9b2e6aa44b09a0c3dddfdcd81
SSDEEP 1536:GmXTl3TRSwjZg1rT7+pt5nteI4P6r9lND:GmpTRSke1rT7+pfnteI4P6r3ND
TLSH
T141838302A7F82944F2F76F41A9B445744A7BBC926F3EC58E22804D4D09F5A90D872BF3
MD5 SHA1 SHA512 SSDEEP TLSH

Languages/anvir_Danish.txt

SHA256 8c93b6556cb54ff4d7866bac499d67a9a688c5bacd74600103c2fb8ee981e52e
MD5 e658ce6ccc07aac4936ee20c9ce9d395
SHA1 74d8d665e7c9a5df193a668c1c2efb6b6d0c9d6b
SHA512 2ed98ae4e0bea5ea352fb12c41ce94c92985834fb386ac2a2b6d8ef41b97b55427e37b8c4f7d92b11fcc5a36f60d6c4114a0406dceefa7c54a6f74a33ca3cd0c
SSDEEP 768:S15WY1nnJMH+GoWWjJxPdthDZa22i/AMEaNKy8pD:kPbMHPIthDZai/AMEaNgD
TLSH
T1BF433B42B3F86908F5F3AF50A9B955744A76FC966E3FC58E22800C4D09F5A50D872BE3
MD5 SHA1 SHA512 SSDEEP TLSH

Languages/anvir_Dutch.txt

SHA256 2f5fa3215461c89c60c0eb04e2ec1f84ad49f0867e20e97c9a3f4eb08a878687
MD5 29fa66319a385408cd2dd91e8d08459a
SHA1 720fe58d0cef7a9a898f9630bb531488e180109a
SHA512 4d536e53b68ca6a976ca86e079816a2d0c7aead3a4bec5d61b08940fbd07ff066cc4bef69dfbd6f754e8cafee685a3dc1c8a8962f89f31e10877f6ebaf4b6960
SSDEEP 768:LxNTtwnjA5FzvGoWqjFxPg6FZNf2waIwrEZNKy8pD:PT8A5FzuF6FZNBaIwrEZNgD
TLSH
T129433842B7F96908F5F3AF50A9B855704A76FC966E3FC58E22800C4D09F5A50D872BE3
MD5 SHA1 SHA512 SSDEEP TLSH

Languages/anvir_Finnish.txt

SHA256 6bcaf6988f9c2a604b551bade6ed2345af4805bd3a489fe15a6deb54711018fa
MD5 e414e0174cb0a841feded552aae7a532
SHA1 b2182bd8752e85130953fc6decc0ccc6da85066d
SHA512 9dfe69c3e95480a97e20b3ff1d385ca3e551e287db8a8a34c2bc5ab4c6a3434f1d457c16c878080b3e28efce5d26fb3985b4f16291ace03c9672170809a14d2c
SSDEEP 1536:Z5RG/UM4Kw8+4fCF86XalkwdmoTn6idMD:Z5RG/UMJwH4KF8nlkwTTn6WMD
TLSH
T1A583A042A3FD6928F6F36F40E9B851600A77BD926E7EC58E26400C4D49F5A80D871BF7
MD5 SHA1 SHA512 SSDEEP TLSH

Languages/anvir_French.txt

SHA256 3247502731f242c521b4abf6d7488844b1fc8aaaee1fbfcd0258f26025c0ce13
MD5 4db7e1b564639873a402413c14fca66c
SHA1 4acc49b9d4d41dd4a5cc6bcddf27c75cfbb4a6f4
SHA512 905867af8e72a51172a3a0e419e61ee0a1e925255ff11f6499930d423d6e35458e2fe2cde68481b16f14dd0ff02c72fa5c8140411fe0291a643b47241c758697
SSDEEP 768:5qCayqjUD3NGGoW/j/x5gtIy1f2sgRgE9NKy8pD:qyZN3Uqy1lgRgE9NgD
TLSH
T1BC531752A3F96904F6F3BF50A9B855644A76FC966E3FC58E22800C4D09F5E50C872BE3
MD5 SHA1 SHA512 SSDEEP TLSH

Languages/anvir_German.txt

SHA256 504886cf3667961274c4c04769d42b0ef1b1433cf892fd03844ff61c8c411b95
MD5 969af0d3f584691c5b19181544facbad
SHA1 c609fcbb1f7c9ff567ae4329ee2f884ac192ee36
SHA512 7a043f7804a46ca1e54e2bd43f52505575a076c9ac183ed2b36330badca8ff48b9247b058a486a2b2b79ea9c23d02946f9828908b99775efff18e548caa121a4
SSDEEP 1536:OOWewwnfx2nSnMvprZy976ISR78zSjUoIfajOdBY1:OOWewwnfx2n9prZO76ISR78zSjUoIfaV
TLSH
T1CF93D612A3F96918F6F37F54AAB451645A76FCA26E3ED58E23400C4D09F1E40D872BB3
MD5 SHA1 SHA512 SSDEEP TLSH

Languages/anvir_Greek.txt

SHA256 b3eacbe2077fbfcc69de93f3d4dd2df0d9b0457d541ed6c134dbaa54e2fe4e11
MD5 a34251e0f41fc5b093459eb89571c7d0
SHA1 4bbc35a8bd1e92afa9deb9a1b8daf93b4c470af0
SHA512 b5b02fccf9468b65eacb381baa379565b7ff8e54ce6002132a855dd47c347b4afefa156732e3262e9da7c23be0a645ef86a336b4c15b32e959d19beae612eed1
SSDEEP 768:1YLyG8mvHw9lFC5M6WSEX1FzToj+j6utsaQdpTELCUwQW52EXNKy8pD:19GNH2wEX1JAaQdpTcCUwQW52EXNgD
TLSH
T1B473C506A7FB2904F6F26FA1A97541750B2EFC915E3ED59E32901C0C59FC910C8E2BA3
MD5 SHA1 SHA512 SSDEEP TLSH

Languages/anvir_Italian.txt

SHA256 33e1aa1dc21dd35c29d68b8f8d3fb0fc48f530cde768e1c5cb23d5e2ec33df90
MD5 3ad0615e2b3d922058652828d7b69513
SHA1 8697af60bb50f8482dd12fdef1bf2d3c0599c124
SHA512 ae43dba47ed032e56306518a4258971bf49cbaed0663a235be26cde866b98dd55f670104c7b9de1ba8f456ada241427ff13b5758b0303acf80bffe264f620426
SSDEEP 1536:LTTpBVoSwNZAOzoO5Vi7xz7XjyZydebvXRASD:LnpzoS4ZAOzoO5Vi7xz7XjyZydebvhA0
TLSH
T132837E52A3FD6908F2F37F40A97856644A76FD92AE3EC59E12900C4D09F1E50D872BB3
MD5 SHA1 SHA512 SSDEEP TLSH

Languages/anvir_Japanese.txt

SHA256 5a2bd6456303d211f67d058c400fd5ebd3e585fbbfc87365b20a0fbdf40dcc35
MD5 65238a3e3bea284e6b45d974fe3ccad7
SHA1 7dfb1921c8e22b3db3b54151c46f4937fe1b467e
SHA512 770550bc6ed3526c26a7163050a2f611673c865e19489898ce57e012803c614a3eafc689a4bab05305c86f1a6febbaf6114995570f915f25b19c81e4584354f8
SSDEEP 768:y9Io5Rs1l31cv8vCvtSrRTGoWRjC7xOO6hM7eQ6rUC7XyBep52THtDXWs5ED:jorG+vKycRKpZhM7edrpyJTNDNOD
TLSH
T1F563D342A3F86908F1F76F90A97865740B3AFC956E3EC59E26804C0E09F4A54C572BF3
MD5 SHA1 SHA512 SSDEEP TLSH

Languages/anvir_Korean.txt

SHA256 ced6a2e62c2b5b5b4162531918ceb91b206e97129ccff03c6dc505de6b3172da
MD5 7921139c7382b35bb0ce12d4c87f92a6
SHA1 29609fb6a840b77df9f90fcbee550232b61dd773
SHA512 8376223970b45fdf2a4f01f5803cdffd3500ffb8641839a5ce87369f1c0b8c8655fd390773accec4d0f08650732a46cd4ecf6db5cbc312cebbb027752d5430c4
SSDEEP 1536:bUKYP+5+wb6QZvYYxb2tz3JxxLmUQIrMi0D:bUKYP+5rOQZwY8tzNQ6Mi0D
TLSH
T16163EE13A7F96904F5F26F41EAB956744A3AFC916E3EC58E22800C4D09F1E50D872BE7
MD5 SHA1 SHA512 SSDEEP TLSH

Languages/anvir_Norwegian.txt

SHA256 1528f9efe6a8f2b5ba6f6e47b371df75e165ca5fa02af963349b3e9cd66bf6c7
MD5 f8923ec231f26fa5d5eb0c231c8f5a60
SHA1 e893b1e2e3dd2f5688dfc09a07c66c3ea3e7048e
SHA512 049d650efa3960e0f1b8db539b3613481eaaff22054cd1efcc9fe74ce6f1e2f59d521f8ed70febf1daea8a57a0e7e3238c0510b5e1a63f278314ba79f5ef06a7
SSDEEP 768:SWCRn3+SCaGoWdjZUxsdqX8ZNCQ5TEyNKy8pD:WROSCz/ZqX8ZNV5TEyNgD
TLSH
T16A433A42B3F86908F5F3AF90A9B855744A76FC956E3FC58E22800C4D09F5A50D872BE7
MD5 SHA1 SHA512 SSDEEP TLSH

Languages/anvir_Polish.txt

SHA256 9b0842a9b92120f71c9207744ec39e5317571f75437865b9ee48d328b57aea0d
MD5 e1e07305aa347ecfccfc5b436ed8e91f
SHA1 54e4a67f7f169b4c6418235d3595f788cc23aa32
SHA512 99931a0016afff4b878f2146e9e65893ea91935cb81157d02a321eb3d0b94ecddf3445ed978e38adb08cbc32746d5273a49686744bf3c5b3bdc4eb57bf77e38f
SSDEEP 768:KO4vyD3TaynKEcGO/IGoW2jUvide6CTihZyJE+zn5k7KrarpntqRXGD:+ae/lYe6CGhZmE+GxAUD
TLSH
T1B1837602A7F82944F6F76F50E9B855644A7BFC626E3EC19E22404C4D09F5E90D872BB3
MD5 SHA1 SHA512 SSDEEP TLSH

Languages/anvir_Portuguese.txt

SHA256 12f98b23e8201a3be88d744ccd5a94a690f516673dfe2e7b7117554ffa9c6812
MD5 44efc7e955fea5846f05fd9b9cab29fa
SHA1 6773514b7fa8e0bde07103d8e6230c80e9ebf7e7
SHA512 5bb37fd6ac2c93bd50e7702c9a1959ac0bd0ec3b91ef211de86106ff512e18952fb9cc283fcf9b71988bfaaa06f9769f906dd727f5b5c1e084cfe4bc73c07954
SSDEEP 768:wOK0yN5pGoWYj5nCO5LUuZT/TYB3m+pavJ8FA11KylCK:BEDUGuuZT7YQ+pah8FAXoK
TLSH
T195734D52A7FD2904F5F3BF51A9B855644A76BC92AE3EC58E22900C4D0DF1E50C872BE3
MD5 SHA1 SHA512 SSDEEP TLSH

Languages/anvir_Slovenian.txt

SHA256 3272454960bbf9210e7de505761bf31dc19576e9a71b958e7121acd1a406ab5c
MD5 f5cdfedfc9a46c66b14990ecf1d3060c
SHA1 0b68e2a10e240cc77e842cc077fee5929e9f1de1
SHA512 6271617a0a624f1c3ffa4f61e2618cc6363af477ef2d4e304294bb7311d4e8a92141d82674ab0d1cf19fef44ae449da6434439b6ed9e295ad9621abc83d27f32
SSDEEP 768:8labnFP1MvJrNqvEyhACZHiTAAow5Ozr4ABfO6/UblLjNKy8pD:2aRdMvJrNqcymC09Ozr4AlO6sblLjNgD
TLSH
T117734642A3F92908F5F77F40A9B855744A7AFCA56E3EC58E22900C4D09F1A90D572BF3
MD5 SHA1 SHA512 SSDEEP TLSH

Languages/anvir_Spanish.txt

SHA256 d6fb75871c47186a387257a3be74878516fbcf9af01a697999efd30cf1dabe93
MD5 3c030c63adfcab9a89ecd3e8b1931b6e
SHA1 c8af05dddfb019e2cd7d8bb7319c32cea01ff82d
SHA512 b76989c5bf6890611110e95329c86e2db76b3c9291f40e1612b7a8daaa7949b731623f9aa4077f4a2c64f4bd80484417fdaa1d412ac72a1c41c4e72455e40c32
SSDEEP 768:zLurq6CmOHaEGoWPjhxGQ/+hiL+1pO1qkE6NKy8pD:eTCv6l/+GT1ZE6NgD
TLSH
T17D532842A7F96904F5F3AF50A9B855744A76FC92AE3FC58E22900C4D09F1E50D872BE3
MD5 SHA1 SHA512 SSDEEP TLSH

Languages/anvir_Vietnamese.txt

SHA256 db231404020e9efe0658e8974d7055889ce85583c430291415276dea5eca2a43
MD5 a511ce01d296cea0d7751c5b0d246c0a
SHA1 d52d3c92b36387524386198f7427f695291e1a19
SHA512 726b34abd84d555cce6f3ec1af76a098d9f5d395f4c59935cbfbc1774c3a156abd7a916289711d0f31380437fad9dcb41939d2d1d6d9f76d0789b1cfd47d284a
SSDEEP 768:fZkmoQfiYjg/OGoWWjQDKYIYQyLIj+r42oRWHWF+NjKBmQqKuruyWD:+ck//YYQycj+2RWW+NjZQyqD
TLSH
T14093F52293FD2904FEF32B9195BC96609E36FC966E3EC68F22500C0D09F59819C657E7
MD5 SHA1 SHA512 SSDEEP TLSH

Languages/anvir_swedish.txt

SHA256 46fa1841b3e0bc3da56bd369563ce9ca539e7d73349123e77d8141a0dae177c1
MD5 61e3c85be39a4ff5a01a8902fe0714b2
SHA1 955326dcfb41fc22a79528c3afa1b194d570dc61
SHA512 4a9e221290a100a53e17184cfe256c399d27b9f163da7d152ffaa801d8f45f936ce58143e2cb41ab4c42e89fe3748cc3755fee7ee533385df6d5afe75af35625
SSDEEP 768:gUGqHMUVn1ObUGoWQj6xREBiZpi2jToEKNKy8pD:L1HM0ObZ8BiZpXToEKNgD
TLSH
T11F433A42B7F86908F5F3AF90A9B955740A76FC956E3FC58E22800C4D09F5A50D872BE3
MD5 SHA1 SHA512 SSDEEP TLSH

OpenHardwareMonitor/Aga.Controls.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 830e520caf3e89dccaa3c12e3bfc992221c164f2319a2ba57e402499c24290e3
MD5 f17be368ade3f7cfbb6aa9dd734ce328
SHA1 ff123eb412975eefa4681f35a6c1caaee3180bd2
SHA512 4c9a91b5a1d86d49036e66ad9adfba6cecfdc76c4b025c0b5a120293a18c867d42b728d59208333e0e4272cdb91d86bff4025d4915e2883ea62260abdc8080bb
SSDEEP 1536:GYmlkg0y3iUXMjL1cbQVVkRnnD+Bf3TZvX+gA3v1Pbsw0C5BDdL3dSyGZ4s8pnqo:GtocbnU3TVO3v1TeC7dLdDsMqo
TLSH
T1CDE33A392358CA2BD7CF853DF041106A83F0DE127596EB6EB944B5FD24F37A286811A7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

152050

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

OpenHardwareMonitor/License.html

SHA256 b14e66270c828c445662328127f68042a1d6b17e7382e150e542a2045b1a9075
MD5 56e35fd2e011977c42260637515e7e6a
SHA1 1285f30ff9048f56e0bf0cb57c81f561bdc8520f
SHA512 a9e4886710311960367318e4b731f4401e7540b9485f38fd9a0d9abc91e154f06b2a33c7ae125aaa4272c893193cb452c75abb80d6faf6f776a85ac84d02a0d1
SSDEEP 768:pr/DB7dhGuEGjR9xCzYO2J4Sv85ZzAVgsq2sUh6pLkbXfrEAbzOU:ps+Ots5sDpLYXfrEA2U
TLSH
T1D1C2C67F37482B730AC203797B5764DAE31EA06C3B2A1621305ED11B739782846FB6D9
MD5 SHA1 SHA512 SSDEEP TLSH

OpenHardwareMonitor/OpenHardwareMonitor.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 ec767a74c5659a05bdb7ac10bd42c2ea6d44fa946286029b2866aed476ad83bc
MD5 a261f824ab957a5331af53c7722fa2de
SHA1 65fe3a6c45fdfa7c92f72a276ad3cd0de723865d
SHA512 beb9badfc473911b26f8929b13e36fb625eac7cbfd30a7ad0dc3435e6cf3e6a97cc4cb9cb2fd913898bb509b507cac3795b59a28c882c6dec4e948d433857d71
SSDEEP 6144:yVFazTEmgydFPKLuqMgLHqHrHFHwHaC1UTvC38kAieWb2r:cazT7zPKL2AyvC3Rpi
TLSH
T186A49D5933E97112E3BB6278906B0142F376A946E41DCA28B48CD4EC1EF6B509437F7B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

482778

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

OpenHardwareMonitor/OpenHardwareMonitorLib.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ef02b0991aac678052bb79dfdfd5bfa0b42b1f34b209e35819ba606909655f58
MD5 84f1d429196cc4e89d22b2652e65f669
SHA1 1872656aafd1e4e3977edee368b05e110a0ead39
SHA512 22e5c3137ca24415946bb3c827a97faef3038db79a21c87d05c195f0debb8727ade37cb4e133779a8e68bc517337962c73d03580a3d9a9ea7a1fddffb671c519
SSDEEP 6144:d9zMSmePubTkkz/iH/2b2vdQh/eHpuCsnca9KQTDBHj:d9oSV8TkH6Cst5
TLSH
T1AA644C5073DC4905F0BFABB5A9B20C059BB1F6E62671DB4F4CA984AD1B633828D43763
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

316246

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

OpenHardwareMonitor/OxyPlot.WindowsForms.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 c92cfe4026ef2319c84aab392f274ebdeb135db85123ff0e44edf4a99b05c7d0
MD5 689121ca3540a36b3829fd887635756f
SHA1 7de120ff9936971cb4268fcbc9c7a8ab20a2dba2
SHA512 62a9eda0a818197c0b572cb355ddd5abbecd997ac823df4d0ee0771ff41d7e13b63d05e666a6b608bc42baead96e09ce6f3d46bc6aae441abcf8f413dacdbf64
SSDEEP 384:dtORGbrJUUrUuMPwrnSV2tJ+c8hCtJHH/LiiaZ4N6:dtdbFUU4RwXcOHH+ie
TLSH
T15AA25B1E73A8C33BCE7D47F974E556101371D205B593E7AB2EC4A4E8AC97BA00B053A2
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

26670

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

OpenHardwareMonitor/OxyPlot.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 d3a00f3b9fbf82c4ee9fcf495a0fcc80f9f26711b4bb4fe15e0b769d47488b50
MD5 f07e485ab092d993a4b2bfbabf6b1d75
SHA1 aedb62183d5c3e7e034f025c58e6ed6205158690
SHA512 b9bbf05ea00ba7da644ab8b288a37828ee7fba64afd64e7bcdc43326d935f70e9168e555dcb9acd87e4ed7d1c80becd75a159b81dd50cb8f001d2e55f61c8958
SSDEEP 6144:MInDiKZj1/YQiDdfNYIsmZRkeWYM3sH+tOtx:MInDgfWb
TLSH
T16C540A3D53ACCA39CD5D0634E020452942F1B105B369E76B8ED8B8DA2E4EBCB9147E67
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

310302

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

VirusTotalUpload.exe

IMPHASH 1c06186a7f0367e14a6db68fa3b0c6b3
SHA256 2993b9da943ba738dc82fee4486407ac96af351f2260bf11b3c014eae558d7bb
MD5 b42739ecb0217f6624a3940e16cfc31c
SHA1 b772165ace201feb428111809975385387b52572
SHA512 4c4646478e56721081425dec929051206c037555b1df045e67847b459c5aeb8cf192c90d5dfdeb2df6dda3f849d4da55789099ae7890c490aed3924aa053a553
SSDEEP 3072:THAr1uhHi8uSLEq6msBd7aDwTltQX748vniVpd+0yvaMn9BW:THApDSLomsn7UGltQX748finSV3W
TLSH
T181F37C2536E0C033D1B3253458B5C7B19E7EB9335A35868BB3981B3E1E70690EA39767
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

38903

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

wininet

InternetReadFile InternetCrackUrlW InternetConnectW InternetOpenW HttpEndRequestW InternetWriteFile HttpSendRequestExW InternetCloseHandle HttpOpenRequestW HttpQueryInfoW HttpSendRequestW

comctl32

InitCommonControlsEx

psapi

GetProcessImageFileNameW

kernel32

LocalAlloc QueryDosDeviceW OpenProcess Process32FirstW Process32NextW CreateToolhelp32Snapshot CreateThread GetFullPathNameW GetTickCount Sleep GetFileAttributesW ReadFile GetFileSizeEx GetCurrentProcess GetModuleFileNameW GetSystemDirectoryW GetConsoleMode GetConsoleCP SetFilePointer GetCurrentProcessId QueryPerformanceCounter DeleteCriticalSection SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW GetStdHandle HeapCreate WideCharToMultiByte ExitProcess GetCurrentThread LocalFree GetProcAddress CloseHandle GetLastError GetTempPathW CreateFileW WriteFile GetTempFileNameW HeapReAlloc GetStringTypeW GetModuleHandleW LoadLibraryW SetStdHandle SetEndOfFile GetProcessHeap GetTimeZoneInformation FlushFileBuffers SetEnvironmentVariableA WriteConsoleW CompareStringW GetCurrentDirectoryW GetFileType PeekNamedPipe GetFileInformationByHandle InitializeCriticalSectionAndSpinCount LeaveCriticalSection EnterCriticalSection IsProcessorFeaturePresent HeapSize LCMapStringW EncodePointer DecodePointer GetSystemTimeAsFileTime FindClose FileTimeToSystemTime FileTimeToLocalFileTime GetDriveTypeW FindFirstFileExW MultiByteToWideChar HeapFree HeapAlloc RtlUnwind GetCommandLineW HeapSetInformation GetStartupInfoW RaiseException TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement GetCPInfo GetACP GetOEMCP IsValidCodePage

user32

SendMessageW MessageBoxW SendDlgItemMessageW SetWindowTextW CheckDlgButton IsDlgButtonChecked EnableWindow SetTimer SetForegroundWindow DialogBoxParamW GetDlgItem EndDialog wsprintfW ShowWindow GetDlgItemTextW SetDlgItemTextW LoadImageW GetSysColor

gdi32

SetBkMode CreateSolidBrush SetTextColor

comdlg32

GetOpenFileNameW CommDlgExtendedError

advapi32

CryptReleaseContext CryptHashData CryptDestroyHash CryptCreateHash CryptAcquireContextW CryptGetHashParam AdjustTokenPrivileges GetLengthSid IsValidSecurityDescriptor FreeSid AddAccessAllowedAce SetSecurityDescriptorOwner AllocateAndInitializeSid InitializeAcl LookupPrivilegeValueW SetSecurityDescriptorDacl InitializeSecurityDescriptor DuplicateToken AccessCheck SetSecurityDescriptorGroup OpenThreadToken OpenProcessToken

shell32

ShellExecuteW DragQueryFileW SHGetPathFromIDListW SHBrowseForFolderW DragFinish CommandLineToArgvW

ole32

CoInitialize CoTaskMemFree CoUninitialize

anvir64.exe

IMPHASH 07a5d0d57bb63b2e4727581da8d89483
SHA256 6e8d0df6c01549a9516d33c38b57949e58f4bb873a38dfcfc58b85eea533fae6
MD5 2d14ba8078c7e2990e330d0798583eb8
SHA1 d1f2c320a5e188200a852cd3d10ed6d81306684c
SHA512 9891fd22dd32676649be9adfb76b3bd01aa3abae357460666f6bac104ae2e657c652149e0d66d5bed5b9815a5c37f503e058876424d8784c110c4afdaa55eb01
SSDEEP 6144:vtfK9ka512U8uklHP4veYALoeh6Xe/Zrhx/47R:vtfK9TaJuklHP4mxJhtrHQl
TLSH
T1C3246C16779850F8E0738534C6925A16F7B2BC251B21874F036533BA6F373A16E3EB26
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Digest

48:e2:c3:b1:61:70:a7:34:33:95:72:a6:d2:34:29:42:10:1e:84:11:c3:5a:6c:6d:a2:72:e9:62:6d:e9:ad:1f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Global Security Center,O=Global Security Center,POSTALCODE=107140,STREET=Krasnoselskii 1-i Lane\, building 3,ST=Moscow,C=RU

Chains

Aug 10, 2019

CN=Global Security Center,O=Global Security Center,POSTALCODE=107140,STREET=Krasnoselskii 1-i Lane\, building 3,ST=Moscow,C=RU

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Digest

9f:b6:fb:0c:00:52:f3:a1:1a:1b:53:a7:5b:7d:4b:ee:6f:03:f0:a6

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=Global Security Center,O=Global Security Center,POSTALCODE=107140,STREET=Krasnoselskii 1-i Lane\, building 3,ST=Moscow,C=RU

Chains

Aug 10, 2019

CN=Global Security Center,O=Global Security Center,POSTALCODE=107140,STREET=Krasnoselskii 1-i Lane\, building 3,ST=Moscow,C=RU

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Serial Number

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jun 7, 2005 - May 30, 2020

Subject

CN=COMODO Time Stamping CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

62:5c:4d:90:8c:d5:42:fb:ab:2e:a5:73:3f:f1:54:19

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Apr 27, 2011 - May 30, 2020

Subject

CN=Sectigo SHA-1 Time Stamping Signer,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

2b:73:db:74:63:11:4c:5a:5b:32:4a:f2:30:57:72:49

Issuer

CN=COMODO Time Stamping CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 2, 2019 - May 30, 2020

Subject

CN=Global Security Center,O=Global Security Center,POSTALCODE=107140,STREET=Krasnoselskii 1-i Lane\, building 3,ST=Moscow,C=RU

Serial Number

99:ea:9c:4d:6b:28:90:71:f6:bf:21:49:88:9f:f8:17

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 30, 2019 - Jul 30, 2023

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 2, 2018 - Dec 31, 2030

Subject

CN=Sectigo RSA Time Stamping Signer #1,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 2, 2019 - Aug 1, 2030

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 2, 2019 - Jan 18, 2038

Minor OS version

2

Major OS version

5

Entry point

47584

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

DeleteCriticalSection SetThreadPriority ResumeThread LoadLibraryExA FreeLibrary GetWindowsDirectoryA WideCharToMultiByte MultiByteToWideChar LoadLibraryA GetVersionExA GetVolumeInformationA GetModuleHandleA GetCurrentProcess GetStdHandle TlsAlloc TlsGetValue TlsSetValue WriteFile lstrcmpiA IsDBCSLeadByte RaiseException SizeofResource LoadResource FindResourceA CreateMutexA DecodePointer SetLastError OpenFileMappingA MapViewOfFile InitializeCriticalSectionAndSpinCount WriteConsoleW FlushFileBuffers SetFilePointerEx GetConsoleMode GetConsoleCP SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetCPInfo GetOEMCP IsValidCodePage FindNextFileA FindFirstFileExA FindClose HeapReAlloc HeapSize GetStringTypeW GetFileType LCMapStringW CloseHandle LeaveCriticalSection EnterCriticalSection GetLastError Sleep GetProcAddress GetCurrentThreadId lstrcpynA GetModuleFileNameA VirtualQuery GetSystemTime GetTickCount lstrcpyA lstrcatA GetACP ExitProcess VirtualProtect GetSystemInfo GetModuleHandleExW FreeLibraryAndExitThread ExitThread CreateThread LoadLibraryExW TlsFree RtlPcToFileHeader RtlUnwindEx GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter GetStartupInfoW GetModuleHandleW CreateEventW WaitForSingleObjectEx ResetEvent lstrlenA OpenMutexA IsDebuggerPresent OutputDebugStringW EncodePointer HeapAlloc HeapFree GetProcessHeap InitializeSListHead InterlockedPopEntrySList InterlockedPushEntrySList FlushInstructionCache VirtualAlloc VirtualFree RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent SetEvent CreateFileW

user32

wsprintfA LoadStringA PostQuitMessage SetTimer SetWindowTextA IsDialogMessageA CharNextA CreateDialogParamA UnregisterClassA DestroyWindow DefWindowProcA PeekMessageA GetMessageA TranslateMessage DispatchMessageA SetWindowLongPtrA

advapi32

RegDeleteValueA RegCreateKeyExA RegSetValueExA RegOpenKeyExA RegEnumKeyExA RegQueryInfoKeyW RegCloseKey RegDeleteKeyA

shell32

ord680

ole32

CoUninitialize CoInitialize CoCreateInstance CoTaskMemAlloc CoTaskMemRealloc CoTaskMemFree

oleaut32

VarUI4FromStr

comctl32

InitCommonControlsEx

Name

.text

Size

112KB

Virtual Size

112KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

53KB

Virtual Size

52KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

9B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

16KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

anvirlauncher.exe

IMPHASH 27cef9d26747652e0d11e3c14bb6154f
SHA256 7deb7f8fecdb65250b8f8c2df062534c3377738e73928cab39bdc93eafb8b3d6
MD5 e1a1808afc3aed337e607320e3ca167d
SHA1 8a413e204e7bb357af920eb709c7216fbdd32236
SHA512 86f98a88f9eae27840e7b7cdf9b538cf80348431fe152f5c2ffe29e6ac9e2602cf618fc84aaea954e9ac579603df6997d1dea1e70eea2e61d047468310fce56b
SSDEEP 1536:z3nBsqRbLXFvygnMfwHk2WifCems7i7u7Rq9kuh4+XQ9+sWOcdbaMUGAEg9VfB4i:zGoxv5fiWi7GRY1X+0baFEg3fBRiZ8g
TLSH
T17CC38D01B4C0C471F5720D3154B9DA618E3AFD616E608DAB339C366E1F782D16A3ADBB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Digest

8e:34:88:b8:69:22:76:3c:8a:b9:f9:0a:67:c2:8a:86:74:5c:9a:0b:16:2e:24:9c:b4:03:df:dc:1b:40:d1:1d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Global Security Center,O=Global Security Center,POSTALCODE=107140,STREET=Krasnoselskii 1-i Lane\, building 3,ST=Moscow,C=RU

Chains

Aug 10, 2019

CN=Global Security Center,O=Global Security Center,POSTALCODE=107140,STREET=Krasnoselskii 1-i Lane\, building 3,ST=Moscow,C=RU

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Digest

dc:05:83:f2:a4:df:4a:d0:3b:17:ec:eb:b7:ff:3a:c1:5a:5c:96:74

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=Global Security Center,O=Global Security Center,POSTALCODE=107140,STREET=Krasnoselskii 1-i Lane\, building 3,ST=Moscow,C=RU

Chains

Aug 10, 2019

CN=Global Security Center,O=Global Security Center,POSTALCODE=107140,STREET=Krasnoselskii 1-i Lane\, building 3,ST=Moscow,C=RU

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Serial Number

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jun 7, 2005 - May 30, 2020

Subject

CN=COMODO Time Stamping CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

62:5c:4d:90:8c:d5:42:fb:ab:2e:a5:73:3f:f1:54:19

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Apr 27, 2011 - May 30, 2020

Subject

CN=Sectigo SHA-1 Time Stamping Signer,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

2b:73:db:74:63:11:4c:5a:5b:32:4a:f2:30:57:72:49

Issuer

CN=COMODO Time Stamping CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 2, 2019 - May 30, 2020

Subject

CN=Global Security Center,O=Global Security Center,POSTALCODE=107140,STREET=Krasnoselskii 1-i Lane\, building 3,ST=Moscow,C=RU

Serial Number

99:ea:9c:4d:6b:28:90:71:f6:bf:21:49:88:9f:f8:17

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 30, 2019 - Jul 30, 2023

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 2, 2018 - Dec 31, 2030

Subject

CN=Sectigo RSA Time Stamping Signer #1,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 2, 2019 - Aug 1, 2030

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 2, 2019 - Jan 18, 2038

Minor OS version

0

Major OS version

6

Entry point

13529

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileAttributesA ReadFile WriteFile CloseHandle SetHandleInformation CreatePipe GetCurrentProcess TlsAlloc TlsGetValue TlsSetValue CreateProcessA GetVersionExA FreeLibrary GetModuleFileNameA GetModuleHandleA GetProcAddress LoadLibraryA MultiByteToWideChar WideCharToMultiByte CreateMutexA CreateEventA OpenEventA PulseEvent WaitForMultipleObjects DecodePointer RaiseException InitializeCriticalSectionEx DeleteCriticalSection CreateFileW WriteConsoleW FlushFileBuffers SetFilePointerEx GetConsoleMode GetConsoleCP SetStdHandle FindNextFileA FindFirstFileExA FindClose GetCommandLineW GetCommandLineA GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW GetCPInfo GetOEMCP GetStdHandle lstrlenA lstrcpyA IsValidCodePage GetLastError LCMapStringW HeapReAlloc HeapSize GetFileType GetStringTypeW HeapAlloc IsDebuggerPresent OutputDebugStringW EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent SetEvent ResetEvent WaitForSingleObjectEx CreateEventW GetModuleHandleW GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlUnwind InitializeCriticalSectionAndSpinCount TlsFree LoadLibraryExW GetModuleFileNameW SetLastError EncodePointer ExitProcess GetModuleHandleExW GetACP HeapFree

user32

CharToOemA wsprintfA LoadStringA

advapi32

SystemFunction036

shell32

ord680 ShellExecuteA

Name

.text

Size

56KB

Virtual Size

55KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

26KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gfids

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

9B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

16KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

portable.txt

SHA256 0d78257701b6598ab1fd42d9231df0bf2deda40cb2a1cd682242892f544a1c37
MD5 8e80ad62cd5994a9fbd94255bd012c96
SHA1 c723725550320750a2acbd41fd3e62e1f880580d
SHA512 4392859f47e1096b5200a5251101e59942f1806cf4d50468060a5af0f2b644b3a145519d08135d9cd7d4fe50b0ff214f8d7f1cdd2fd3cfd96d9a9705e0d6edfe
SSDEEP 96:XWmxld9K06awQ1tZYrvlfkG5DBdB2cN/KOf7oPiK1J:XJlm6Yr9culdAUbf0
TLSH
T15991734B114672659D5650E2B4385BAAF72FC97CB3AB4610286C902E3701FFFA3F51E2
MD5 SHA1 SHA512 SSDEEP TLSH

uninstall.exe.nsis

SHA256 fbc40a0d517df58eff947ca87bf5ff981be588d73f51a7da4f53ef8fdd120bb9
MD5 6a92cbdd262ffcad649432f5c0aa1c1a
SHA1 5db05bad5033e9177c7263b5dbefae9385442b6f
SHA512 d67fbf2a6d00f58f0230e3de48c38887a8fbea85c685fa610f4139d3a825305848cd338ba987287cda8e6b320780e3e911c9ba96a5b3379376ecfa3d774bbb5f
SSDEEP 192:A6jha2RhLlPAWXgupd2YQRHqr/romm3onB6SVM:AgkqljTyYQcfm3onB0
TLSH
T1FF22BE11AB47D895E90C18C6C0C4E6D33BE42AAC9D29A84D5E1D9DE68F635FD32BAC40
MD5 SHA1 SHA512 SSDEEP TLSH

Sharing

General

Malware Config

Signatures

File Explorer

Не подтверждено 807906.~

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

generic

$PLUGINSDIR/INetC.dll

kernel32

user32

comctl32

wininet

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

$TEMP/AnVir.exe

shell32

version

shlwapi

msi

kernel32

user32

gdi32

comdlg32

advapi32

ole32

oleaut32

comctl32

uxtheme

psapi

crypt32

rpcrt4

generic

AnVir.exe

shell32

version

shlwapi

msi

kernel32

user32

gdi32

comdlg32

advapi32

ole32

oleaut32

comctl32

uxtheme

psapi

crypt32

rpcrt4

generic

AnvirHook8.dll

comctl32

shell32

msimg32

kernel32

user32

gdi32

ole32

uxtheme

generic

AnvirHook8_64.dll

comctl32

shell32

msimg32

kernel32

user32

gdi32

ole32

uxtheme