nssm-2.24-101-g897c7ad.zip
- SHA256 99f5045fffbffb745d67fe3a065a953c4a3d9c253b868892d9b685b0ee7d07b8
Overview
overview
5Static
static
3nssm-2.24-...og.vbs
windows10-2004-x64
5nssm-2.24-...og.vbs
windows11-ltsc_2024-x64
5nssm-2.24-...nv.vbs
windows10-2004-x64
5nssm-2.24-...nv.vbs
windows11-ltsc_2024-x64
5nssm-2.24-...ry.vbs
windows10-2004-x64
5nssm-2.24-...ry.vbs
windows11-ltsc_2024-x64
5nssm-2.24-...gs.vbs
windows10-2004-x64
5nssm-2.24-...gs.vbs
windows11-ltsc_2024-x64
5nssm-2.24-...on.cmd
windows10-2004-x64
3nssm-2.24-...on.cmd
windows11-ltsc_2024-x64
3nssm-2.24-...sm.exe
windows10-2004-x64
3nssm-2.24-...sm.exe
windows11-ltsc_2024-x64
3nssm-2.24-...sm.exe
windows10-2004-x64
1nssm-2.24-...sm.exe
windows11-ltsc_2024-x64
1Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
nssm-2.24-101-g897c7ad/ChangeLog.vbs
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
nssm-2.24-101-g897c7ad/ChangeLog.vbs
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
nssm-2.24-101-g897c7ad/src/env.vbs
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
nssm-2.24-101-g897c7ad/src/env.vbs
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral5
Sample
nssm-2.24-101-g897c7ad/src/registry.vbs
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral6
Sample
nssm-2.24-101-g897c7ad/src/registry.vbs
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral7
Sample
nssm-2.24-101-g897c7ad/src/settings.vbs
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral8
Sample
nssm-2.24-101-g897c7ad/src/settings.vbs
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral9
Sample
nssm-2.24-101-g897c7ad/src/version.cmd
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral10
Sample
nssm-2.24-101-g897c7ad/src/version.cmd
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral11
Sample
nssm-2.24-101-g897c7ad/win32/nssm.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral12
Sample
nssm-2.24-101-g897c7ad/win32/nssm.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral13
Sample
nssm-2.24-101-g897c7ad/win64/nssm.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral14
Sample
nssm-2.24-101-g897c7ad/win64/nssm.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target nssm-2.24-101-g897c7ad.zip
- Size 405KB
- Sample260724-g14p5stdnb
- SHA256 99f5045fffbffb745d67fe3a065a953c4a3d9c253b868892d9b685b0ee7d07b8
- MD5 63175d3830b8a5cfd254353c4f561e5c
- SHA1 ca2f6782a05af85facf9b620e047b01271edd11d
- SHA512 f25fcc7b37d64aa3bb44336182a343250bf7fe7df1d22795bc742ae1cce574d9bbbb22afe2ba4352df40676e54f8442ae2dc1516c58a7b42c6e5c464804cd342
- SSDEEP 6144:TLzumLBsF+ymeoizDG1uLx8DMuxCoZ74JnySmcBzrVvqoR:jPXeFyKWg+F74sChEY
- TLSH T1D6942302D35A0865C03F6D7AB10E8E07FC5F97134986DA933A14D64E19DE1E7868BE8F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/nssm-2.24-101-g897c7ad/win32/nssm.exe unpack001/nssm-2.24-101-g897c7ad/win64/nssm.exe
File Explorer
-
nssm-2.24-101-g897c7ad.zip.zip 405KB
-
nssm-2.24-101-g897c7ad/ChangeLog.txt.vbs 8KB
-
nssm-2.24-101-g897c7ad/README.txt42KB
-
nssm-2.24-101-g897c7ad/src/.gitattributes22B
-
nssm-2.24-101-g897c7ad/src/account.cpp11KB
-
nssm-2.24-101-g897c7ad/src/account.h1KB
-
nssm-2.24-101-g897c7ad/src/console.cpp829B
-
nssm-2.24-101-g897c7ad/src/console.h112B
-
nssm-2.24-101-g897c7ad/src/env.cpp.vbs 7KB
-
nssm-2.24-101-g897c7ad/src/env.h597B
-
nssm-2.24-101-g897c7ad/src/event.cpp3KB
-
nssm-2.24-101-g897c7ad/src/event.h284B
-
nssm-2.24-101-g897c7ad/src/gui.cpp57KB
-
nssm-2.24-101-g897c7ad/src/gui.h405B
-
nssm-2.24-101-g897c7ad/src/hook.cpp15KB
-
nssm-2.24-101-g897c7ad/src/hook.h2KB
-
nssm-2.24-101-g897c7ad/src/imports.cpp3KB
-
nssm-2.24-101-g897c7ad/src/imports.h1KB
-
nssm-2.24-101-g897c7ad/src/io.cpp27KB
-
nssm-2.24-101-g897c7ad/src/io.h1KB
-
nssm-2.24-101-g897c7ad/src/messages.mc164KB
-
nssm-2.24-101-g897c7ad/src/nssm.cpp10KB
-
nssm-2.24-101-g897c7ad/src/nssm.h4KB
-
nssm-2.24-101-g897c7ad/src/nssm.ico31KB
-
nssm-2.24-101-g897c7ad/src/nssm.rc66KB
-
nssm-2.24-101-g897c7ad/src/nssm.sln1KB
-
nssm-2.24-101-g897c7ad/src/nssm.vcproj.xml 17KB
-
nssm-2.24-101-g897c7ad/src/process.cpp14KB
-
nssm-2.24-101-g897c7ad/src/process.h1KB
-
nssm-2.24-101-g897c7ad/src/registry.cpp.vbs 41KB
-
nssm-2.24-101-g897c7ad/src/registry.h3KB
-
nssm-2.24-101-g897c7ad/src/resource.h3KB
-
nssm-2.24-101-g897c7ad/src/service.cpp84KB
-
nssm-2.24-101-g897c7ad/src/service.h6KB
-
nssm-2.24-101-g897c7ad/src/settings.cpp56KB
-
nssm-2.24-101-g897c7ad/src/settings.h.vbs 1KB
-
nssm-2.24-101-g897c7ad/src/utf8.cpp3KB
-
nssm-2.24-101-g897c7ad/src/utf8.h444B
-
nssm-2.24-101-g897c7ad/src/version.cmd.cmd .bat 1KB
-
nssm-2.24-101-g897c7ad/win32/nssm.exe.exe 317KB
-
nssm-2.24-101-g897c7ad/win64/nssm.exe.exe 360KB
nssm-2.24-101-g897c7ad/ChangeLog.txt
- SHA256 0a1c351ea5f1daaac6e909686d1244bc72274a9f0190aa6e769cde95e689331b
- MD5 18a2b15fbe354823cebec12d241e0c28
- SHA1 9ea3acdcf0c538c6628090827e662c31b489e223
- SHA512 a5664d7dc3a6f33c9695671c28563f265d5a7a2d6613616ee3ff10ba0c644b1e9ad7ba442b7157fdf1827c1bca88375257003c7d04f529173636793e758dead1
- SSDEEP 192:7GOasBIBUT0rTh/WACTx7pyMOr8v2Xqd15Yg/h7bOg:3NORWFTLyMOr6HdrJhD
- TLSH T1A90285872D0B53B656F3C1546E59A2A6D31B01FF9209205035F9828C2F714DEA3BF6E9
- MD5 SHA1 SHA512 SSDEEP TLSH
nssm-2.24-101-g897c7ad/README.txt
- SHA256 d1500f6f48ddd4dbd0d916689fcb1e4502b92fccfc751a630a6498f755256b4a
- MD5 f952e8db048920dc232d6794c49b3120
- SHA1 b17c52744ba2824899805360371387f729f1c685
- SHA512 2c8b9fac33026ef97cc8597ebfc28f842a56f8aabf4b082c6472e1aac5ee620c4dcada67f5122cd087c4962d077f69261128a3bbb98f7f1053c7c136970cda03
- SSDEEP 768:QRnYVRTZ250G1Q92H0zX/DBc9205UdfPkrRa2RxmiUtXzIceShNuZNb3o:QBYVRTZ250G1Q92H0zX/DBc920S6rRaN
- TLSH T19D13E6C31E8F43B202D2D1662A0F51EAE32D517C6BAB361074F8859C239586D63FF5E9
- MD5 SHA1 SHA512 SSDEEP TLSH
nssm-2.24-101-g897c7ad/src/.gitattributes
- SHA256 8ce9c3cf4acfd80658a37f24fa0128ac56b8e9a386d447dd4338fc7b0c0c536c
- MD5 a95cae9a2dfc719b037c0dc426b05b0e
- SHA1 7c50ebaeb29de7d618bad1a08167cd1bd5fabb64
- SHA512 979438db58115ae1fcdda583ae42d423395ec95d4c2bb25694131d166661a410fc49a53eac210ca324872601ea1962f4bac501772d7d1e4a16be67747ccd6bea
- MD5 SHA1 SHA512
nssm-2.24-101-g897c7ad/src/account.cpp
- SHA256 c1e15317213d3771d1236f89b1febace1e06130a5d6a4a0784c6ecf3655e687c
- MD5 83c58cffb1f9db07a28ebb670920adb8
- SHA1 e7cbc717d08e8ed9130aafd10ef937509750081b
- SHA512 c965cc4a279f2c74f181848dc6ebe8b4be532301628cb50a95eaf260b3d7cfad146d1c6bd275dbfad274dfe870a7edc05cbf8d13da273e320a2a1f849c2faaba
- SSDEEP 192:pcKWfvNtbVLxbVXkxtBlm6s2v/b/d5lgHPElh/vjXwNKmoBtfEGapN:pcFHhxAV+HPOzEN
- TLSH T1F242B6A7246A791B0971533AB7905CDEF70ED92339AF6761B8D403012FA1048E9BC9DE
- MD5 SHA1 SHA512 SSDEEP TLSH
nssm-2.24-101-g897c7ad/src/account.h
- SHA256 cf372b36a1c2d53690343956c4498802014cd61e11fcba1d36fa36b64e767f99
- MD5 37123dbbe051afef76a91049570ab447
- SHA1 e70d7495e9b09cfe03b5943b90568cfa41bb33de
- SHA512 fe0a2bd473dc1f6e16681075ea0596d519b21c4549b705ded72df6a72211c4c9266a200c21e44dc67b0da0207173802f09e06980009a139951f4e0142c1c249a
- TLSH T13D214617448138F01C3456AA1A6A5D738244E8567F9FACE875EC0F8518C6F9D22F1BEF
- MD5 SHA1 SHA512 TLSH
nssm-2.24-101-g897c7ad/src/console.cpp
- SHA256 6178d87a00b7f2197605618bf070d75d5e4db889716140ad74e7ddcb0997ac66
- MD5 746d9ebf541e44693ad3cf2e2ba67357
- SHA1 b1912c107ab008795a148da821771219117cd21c
- SHA512 a7718c00e2e95042f7e0b9bc5eccce8e5b2d5c115ba3391c43ebafcfde61d9fbb260fb716b798581e407df8742dcd1ca5e33035f7b368afa1352d2bbad97641a
- TLSH T1D401CE815CC632B5953120541F97625AFB2A1C225367F2B834F1010C3BE817AE577DE0
- MD5 SHA1 SHA512 TLSH
nssm-2.24-101-g897c7ad/src/console.h
- SHA256 3bda2b7124f66cc979fc51434f42341f325b8dcf07a2f30a4f470115ae095124
- MD5 f311f1c21fd6b6e4eb208b998340776f
- SHA1 433389c80618fd01ec86022e7b981db6b50db7bb
- SHA512 664d249acb04108bf62b48d5bf506a2cd85ff8d388405faae58b7fa7fb051206dbc7396560cd87842d340b7534ee519c10bbb1dab8e39d2d72abae6efe2c7021
- TLSH T15BB0123329FB1770E8607A944E38859414580C53FAA27F2072E4E19D22ECC040457C9C
- MD5 SHA1 SHA512 TLSH
nssm-2.24-101-g897c7ad/src/env.cpp
- SHA256 e24804a0b6944793590e3fc0daea99f92b33fb525bfa3acc2bf6948df7c28849
- MD5 6265e20a24c71868c040449eead352c3
- SHA1 aababf0e344c53fa0f3cd74b795161cc2b11faa1
- SHA512 943b15c58894d20ebb0bfd0bc2cc7fb680da8bcdeaa3ec6dbc826c1ae40d6428f4ec988495d3a994ac277bb82867b6c9932c7b37fc33681d681d87fa47e54f43
- SSDEEP 96:jbN8zgZslcjuM8dAWtmQT/twOK12Wj6KcoP5d2fSdWajWoYdmU3huFLtpxB:/ikHuVV/KX1cE2qdW4WoY4U3hKLtpr
- TLSH T1D3E11445152AA1A32F74B2389A0CAC7ED77193331FB921E0B4DD48006FC9A7D16F8E5E
- MD5 SHA1 SHA512 SSDEEP TLSH
nssm-2.24-101-g897c7ad/src/env.h
- SHA256 2f603c8521d2927a84740c887c5e124c4084bb8fb4a19b4fd59ea9940a830863
- MD5 edce1a5c80a562be23b65e98e061ffd5
- SHA1 82b362644bc11c7f9de39e46880794b442b8b44f
- SHA512 e56f4e74b944fd954e0c3bacd9ecfd666830aed3a173674ee4577c95a350e7c3f508dde4262be68deac124b1ee53bbbc66388bca329a6e866112f004953cd6f0
- TLSH T1BBF049054676D8E03F61B4AE880ECCBD0264E3230ECD69A0404B5E04A884E2DA5FE73F
- MD5 SHA1 SHA512 TLSH
nssm-2.24-101-g897c7ad/src/event.cpp
- SHA256 2554b741fec0902141ab0275e913ac22695b420426338b20e5fd1fe19de2b953
- MD5 53ca1240b593d6277e58a9d3334b537c
- SHA1 1a620c2d5c5f9fbb7e892a308d3569d28da08ccb
- SHA512 b932e66692b6ec621702b245d4bdbca2427d3fc9af520750301f8d83ddcfb848d85952772f7470a55ccbace02e4e8b3288f09441ab0a5e38314733a4bf1caa2a
- TLSH T11671F189484BED1B0C79D73F77D12819EF1646872A7E3376F08E0E205E5594C4AF9B88
- MD5 SHA1 SHA512 TLSH
nssm-2.24-101-g897c7ad/src/event.h
- SHA256 2925727fca57a08928ee07edee3ff7131ffe9aacbb1a66edc065d56afed2537f
- MD5 bd2d50fa5fbbb97285f9984e6cd1e4d4
- SHA1 ab288a04079ab87a94888c897029d7b4ff950abc
- SHA512 e84f600c8886c621471d9c95167c37b2cf73145d80adeca137a992a8bc9382491096fefef1f4004c76a9011ba4bc89b9a76343cff4017f6c9e91acfb55ef0a9f
- TLSH T133D012DF048A94F5383FD41B706A5D6A454E588735EA7E71E00F0C7C551540C8B9E56C
- MD5 SHA1 SHA512 TLSH
nssm-2.24-101-g897c7ad/src/gui.cpp
- SHA256 d5b8ba85302470b12ce7eafe4c99d6f800add6f2377a65cde618d1cc6ec15bab
- MD5 4e17173f6c5c3ad5e4de1b347a2a5e24
- SHA1 17cc696c92d6365d6d8d7360ec7fe3b8841a094f
- SHA512 d299499c74b916f5b0601a8b0d7866b2da34984362290720b22e9e4f634866d20c7661c1bbdf92738277fdcd64103625fa5ee8d5d5759ffc5870a9dda946bc44
- SSDEEP 768:wzHHUXZvZq6SNYXtRUwS9JsGElLleZTnAt7VB/3HC5ydF817F3T4c9Xf0cHdYnyc:wzHLElWQ7LvH1p2LFeB
- TLSH T1764341C408922E16447D92393F93194BE72B49070ABB3715F6EC82206FF589D86F5EB7
- MD5 SHA1 SHA512 SSDEEP TLSH
nssm-2.24-101-g897c7ad/src/gui.h
- SHA256 8a5a6eab80d9b438079c9b63d5a31b9d1e956b4fe3e943f85e8f343356050d4b
- MD5 a015f901e2ece542ec8da0d62a2dec91
- SHA1 85b897b15015163480f231de600955cf3714edb4
- SHA512 850a59ebf9f8684b4deb89a8fd344d14977ce3b6207108bd03d80ce2d2f3d354715a70e0dc3273d197853267240e8f0d0c33a0186ca0ae1cedc49650597fe3e2
- TLSH T1F2E06851507D1663813258B579275160522DE04402CDF930E4E6F1CE79D1F8FA0AFFD9
- MD5 SHA1 SHA512 TLSH
nssm-2.24-101-g897c7ad/src/hook.cpp
- SHA256 c13b85e219e28583db09a5ac80929fe6b9819853438b4fd28f3bb5fd7717ca37
- MD5 00767c5df5755ba6f74186c661aced25
- SHA1 1198a8cdacb755d563ce90c5db00d32cf7e2a5c4
- SHA512 4d39bcf714775d97278cd464cefb13b8d349c270eeefa6cad527588863af97edb91d0480a267308c2cb33ae93170b1c075d8fc84771a50b6e1b791ff03e621fe
- SSDEEP 192:5ftKh5Sm1YtBAQvq5pmWR5IUqmCQmhkmbkmbymrIDEuowS15osKogMWB285lVsqs:Gh5Sm1pX5IUqm5memImumsd4oNMWpVYF
- TLSH T1317221DA947CBA925DB081793B220817E7BB532309BF3291F4C8DB361F6862C61E1D75
- MD5 SHA1 SHA512 SSDEEP TLSH
nssm-2.24-101-g897c7ad/src/hook.h
- SHA256 474abe9b8e61a8a4e0c4c07fb6a3bf14e94ecd6771c7e7b1c70dc44477523595
- MD5 21bfc4f70c14c0af961670596db83d18
- SHA1 b98d53f7bc26d98d8a74a4f1e7fed7d1b3de1f58
- SHA512 2d6d8123f1454bf0287f82b7a0944f414cf95cab70dbf05e20ea4321a5e29624367b907f786d0c3335d6b3a1b6dd55ce072db024113262fc33d7ef629cfb6d4c
- TLSH T10F51C2CE1AE57E901D71A975103B08431586DA334E5FBAEDF088AE295C48C1C65F26FE
- MD5 SHA1 SHA512 TLSH
nssm-2.24-101-g897c7ad/src/imports.cpp
- SHA256 dd7088f71396d7c9c64b4cdcc9a57920b30c0b868ab18f6aa026bef30283cadf
- MD5 2c85c53b840f430dd2043a814eb386b4
- SHA1 e33237dc4106ee8957702a967835a91710c40f8e
- SHA512 92bf3af61e78d29baf5d7a3b8aff45fb8f54ef27cc2b9d836eb05809c8306db76e8e589e7801f76b3bb6fc0bd3056f9d7d257bb3efdc2c188601f41fb014caef
- TLSH T11651C86F25492E9722B5A1381692443EFB77450313227B327DEE53313FA9060AF25EDD
- MD5 SHA1 SHA512 TLSH
nssm-2.24-101-g897c7ad/src/imports.h
- SHA256 d3a6f054dccb5e574fc622cf697529784f3dda4cdb1b46448f1793fab22d9bce
- MD5 8ae323f8f5e2abeab5c2e512272d8267
- SHA1 eb7e3d92860f07442d62f7dc9519d799001dcb39
- SHA512 804cf4d832da518e695a6c6a3e063087123e01eddc460a308970349a00bf263415a26f978b5583217e4f33340d1be298cf31105eaba668a7354fbbef2e43a29c
- TLSH T17621EE3EFC8114F9217ED8B9628605E5DE8DE2213E953B253CCB62446B2D480241BEDD
- MD5 SHA1 SHA512 TLSH
nssm-2.24-101-g897c7ad/src/io.cpp
- SHA256 e9efe609d8d46998e990b13466124ca293a7e5dc62a16891aa81f6c962aff827
- MD5 fcf64dc1b0426d8dc1fb752630865a6c
- SHA1 632c1d40b84d19ac6c5224188008de4041ed131a
- SHA512 f376d7077943c21d76e6d43f16acd2f4bd75dd8993ca34634c1d7bec6d6b96fe42493ecf01ea6f5560346d010e2ceea62c03e7ee86b32a1cddd7e57140f4b61c
- SSDEEP 384:vr1wSrxY3UKuvLsmcqLxjInPE7Y6PaTXcW+Moxlt+H:T1w6YMSq9jInPE7M
- TLSH T10BC252CD424CA462287923362F92480AF77981A7172E37B4B5DF53182FE486CD5B9FE4
- MD5 SHA1 SHA512 SSDEEP TLSH
nssm-2.24-101-g897c7ad/src/io.h
- SHA256 dfc2c3ff316be291cbe0ea6ef9cd5ea3468fc0d1060d089ceefe8c61e977d4f8
- MD5 64b28bf793b883fe832dfccb56db79ad
- SHA1 ae1ce3ceca537fd544cf37dee87fb7750742f949
- SHA512 14c0d5e8faa5626f26450c016390204f6847dc45e23c92bee6f09b9e899762ac8ce39faaaa83f4295fca17d6b401d8a3e2c5c20e2a74cd968173d3920883f9f5
- TLSH T1023145DF4A4084F13477A27717669EAA101CE1133F8B3D60708B1F1C6845849ABEBAF9
- MD5 SHA1 SHA512 TLSH
nssm-2.24-101-g897c7ad/src/messages.mc
- SHA256 ba5ac41306670cc6ac0cd6133340d500429d18eaedb185826c768771560f9c6d
- MD5 ec20cc22fbaeb5fa76c5608c20a08512
- SHA1 b12a14309ee8d073e805d04e08abbb0917e0616b
- SHA512 8bf4aed89f654fc0f901c8b5e7acef4dad185bb79e09d6aec89fc8977cc13f4ad37468aa0d399b02b0844f31dd01b0c21a6ff4102d43a62d0c8aba7811474d4b
- SSDEEP 768:xUoHk9dHmFoLuoEeo6Po4Ook9ocGoIWo0Go35oIaoAao8gobAobXo/eoK6ogCoOX:9Y8Yn9A8nxHfG3CzayjGZuUn
- TLSH T12DF3681263E86A48F6F77B40A93582354F37BC86AC3ED65C1184815E2AF1A58CD71BF3
- MD5 SHA1 SHA512 SSDEEP TLSH
nssm-2.24-101-g897c7ad/src/nssm.cpp
- SHA256 bf9e93e78eab4380d259c0f84d0f9ebf6b63a5eb99bb4da7c490a574ceab7bce
- MD5 376ef8d4fca118b7101dd736bc8788dd
- SHA1 92f626c66d089b11af4f5aa4bf4c46c944f02436
- SHA512 4c69b9ccefa56f8a5b9e9023c833a60c77666491b4d432808fc015997cf59adbc061afb0eeaeb34468f6ef50de5418bd70d2ea60db85099196c4d6280100f7a8
- SSDEEP 192:25tbXGwamxNh7L00OUhag/QAqIDrLDzbh8PsCT2ZkCojs4X+HTOAQh42PoBkb:258gfvvHz94dM8
- TLSH T17C32754605D376330B7652F63B06482BFB6E680A19AF2391F4CC8A452FB453963F4E78
- MD5 SHA1 SHA512 SSDEEP TLSH
nssm-2.24-101-g897c7ad/src/nssm.h
- SHA256 548b3f5d069f8b5de370f2a7e2ba0eaaa7c13a3b48a5263f50f20d9f7419fc5a
- MD5 13778bc4f107f0bf5941c1d18c5237e8
- SHA1 2b668afd46e4a9031fb8800ad3b08d4e478063fe
- SHA512 4303d6399525f96d4d6ecfb1a04012f7f1e81d022b568a888958821b90d6314bf58a7b8c809b89f2adf0544e33542e6a1d81e20dd058c289504401b1d5fa9ff5
- SSDEEP 96:sNdtcvaerzRz7a2C0ubByRxV4KIRn8Be8RjvetCBd8hFhSRh1miYIgFqQwtwxs:sOierzRzWhjSP137gS
- TLSH T19BA1119A8DEC0972047152D5222E4586824AF56B1B9F76EC705C6FEC7C40C8D61FB2FD
- MD5 SHA1 SHA512 SSDEEP TLSH
nssm-2.24-101-g897c7ad/src/nssm.ico
- SHA256 af2fa50996b6a60dba746e411d1fccdbe88633baaecb0e724a232ed139dda895
- MD5 4288408c2d7f43fbd9d920c8319f1956
- SHA1 226925f1a4fd021d5ccabbcabf3d195a3c97aadd
- SHA512 253cf56e1d8d94d76a2a8f31578da6e49de7b303792e9c5a4ecb05a06b2fc92c15c14b1152d3c579e1c236c7a15efb752c1c84d906dd72ca2a7443c623406c3e
- SSDEEP 384:9HOlg3MlBOu5vLZXBmKcGP1q00mgT3gIO/YGDLUi9ABE37EEQ+Ukj4ljo:9HOLdXBmKO00mgT3gh2nEJUkYjo
- TLSH T1B9E2E5097206C939CA5752B6DC56C6EC2212BE40DEE503773BC87F2F3DB21092639B99
- MD5 SHA1 SHA512 SSDEEP TLSH
nssm-2.24-101-g897c7ad/src/nssm.rc
- SHA256 d41e1b3867e90c15db79e5baac8ccfe657af685737fdbd853ceb1877907cc7a6
- MD5 571394bbb6f22cdfdfb6f52662ae546e
- SHA1 b7d94a0f259a0512ba137b731391b7b2f74f7500
- SHA512 0e1403341eaded3eaa1be0eef9af69136304e1d684483204ac3b71fe6d30ad4f0889f122399d8d45b8f9f96764d60dbcf41acc39bd4384753e13ece26083d975
- SSDEEP 1536:ke6q6eDe6tuSu4ueHu6u4uIDnxuvYuMseu3u0uYuIQPe6V6eWe6euEuoGudu1uBF:T
- TLSH T1D663AE26E8ED24187432F698AF9DC1798757B7E5413E483E01BD290B07C78116EA37FA
- MD5 SHA1 SHA512 SSDEEP TLSH
nssm-2.24-101-g897c7ad/src/nssm.sln
- SHA256 f9294df18b664b6517132b48943567181bd4a89973fdb1e827b9da5485b2a5d4
- MD5 f779189b1586dfa1d64f9279ad8e23ec
- SHA1 c154b12a289b7efdfeacc5a5b737215c1680b69b
- SHA512 02bc8ac137e2173d08e28cac6f97e8de62a8dae041e62fdd4823fb4c474119f28d98a55129e0952a634f46bb0e1ab2d0f1ed90fa579ba1e8a810243efd1632c2
- TLSH T117213B6C205D8AD292841967C0FCCD983D33C685616C167C3810E86A1B9BE28CB2604A
- MD5 SHA1 SHA512 TLSH
nssm-2.24-101-g897c7ad/src/nssm.vcproj
- SHA256 fd20dfcb6b0c21a048f8136287dcaf13ece8c12303ce43ad37ebb8c1640498eb
- MD5 c6e71da26fa55f72727a749d237fdddc
- SHA1 cc4ac0e03bba9327ab9cbd8a0ea378066fd670db
- SHA512 078f80ff5dedff009715bb0c8845151a853db2485587e83d9c5db0c4b2f268455402a0a2f1884c1d1f129c19f269fefc36ce25d01b1f1231dde7d27fc5b3b0c4
- SSDEEP 384:8Yg89Ilz/91+BS9Ivyc91Oi5n5w5RQi5n5w5Rvi5n5w5Rmi5n5w5Rqi5n5w5R0i2:8VgAFcmjAOFi27
- TLSH T12782A164371C3ED5A1D143936EF404C83A3ECE7E021D41FAE53EB976B58E8A913227A1
- MD5 SHA1 SHA512 SSDEEP TLSH
nssm-2.24-101-g897c7ad/src/process.cpp
- SHA256 9e4eea03b773f03b19d82a7aa1fcf4a408f6c63db3a8324fe9e532dc29b2cd83
- MD5 6b109eb7f99182f871dc758b901b5591
- SHA1 afd77927b4b0700820067bc58be8b3f79992639a
- SHA512 58d85a8830159524303df8e9af3c130087d3a9536e3064a979b6a74b0c66e38cfba920c47cb44434c5448e3736cc6b4f432d223f3d67d8787eecd17036062786
- SSDEEP 192:3nED3QEzKrLWpfLWtJj3PK6bXo52w324lqnFCBW8ZImWk7q1Q8zpRK2Y/OyPd62e:3NAf6DXdFx8peiD0o6fBd
- TLSH T1FC6282C990EDB75218F052347F51940BFBAB1686027A3370B9DD82103FE2655A3F6EE5
- MD5 SHA1 SHA512 SSDEEP TLSH
nssm-2.24-101-g897c7ad/src/process.h
- SHA256 de77c1de69197698812e419c0d6109c557a75f14342ceea8fc0223c163f394e7
- MD5 4332aa27e806adc3cb89c1b2013b72ef
- SHA1 17d9d5420e1a4402049f6da5f6e3677b58a0d27d
- SHA512 fa4d01d3f5a6f0dbd80c52d55176419b3143f1270d02c9ce975631ceb76e26dd76e4472a319802d6317cbbdb4f7bf3d0a850442985a6f46ab2238102052b1f39
- TLSH T16C21F24E9458D1F278F358A7661389928A7E96111ACA3D313092F21938C5D41F3AFEB6
- MD5 SHA1 SHA512 TLSH
nssm-2.24-101-g897c7ad/src/registry.cpp
- SHA256 bb616a1887dfc9275fe347c8fe0d75b38c3c28e05dbcc5f15e5980809dc9ff1d
- MD5 f30ee559bf68027cc1890b8b4545b255
- SHA1 bc33b6c59766fb59561998b59fa57ecccac55db4
- SHA512 4ea710ce41f7e7dedd5ce18475441ba1f972611d3e508a5a2e3d53f527854a4892493ecda2a49665e2febb584aa3cb0266844e467c937b9cc733c251958c60b9
- SSDEEP 768:O2G6MoLODHgQAgsXs5HF+HWmu+c1KKS2r16aDBs0CtZpss:OKMoLODHgQAgsXs5HgHWJ++KKS2r16aC
- TLSH T1851375CF9995BC7329B852766E52880BE72E0492272F3531F2ED06502FE187C91F9ED4
- MD5 SHA1 SHA512 SSDEEP TLSH
nssm-2.24-101-g897c7ad/src/registry.h
- SHA256 c06ef1aad5737aab5ca7032abe5768648f8919ad43e3beaf47e8750395a099c3
- MD5 bb73bc6e34b54bad8ee42e85d83d4cc0
- SHA1 1233fb447efa6a55bc6bf690b02a8bb6689a4ac5
- SHA512 10ce714cbb920caa5bf92284157440f60270e68239624566b083cfb3a2e4aab8fd1eb75ea57c4aadd10f71bcc3877a6d9cd933576eb3891b78ab8c231002c553
- TLSH T1C381A1CF5FA05CB27876D07A042A1D234108E9637F5F7D69309D0E185889819B1FABFD
- MD5 SHA1 SHA512 TLSH
nssm-2.24-101-g897c7ad/src/resource.h
- SHA256 dcc352dc2539b3f01b0aa3c1ee9d3fdf0aaed9cb7c68ffd5785ea9566d8908d8
- MD5 4dc1891dafffce12c3504e6c8ec2004f
- SHA1 c401161a9f6b5771562318e55c53e8708b42d271
- SHA512 db89de9035982448794cf510b9b96003dfe5fae8f420bfdafd46413e730e6801a2dbefa55f117d55d978001f9445a9de0817668079cc9e48c08bde712d373cd4
- TLSH T158712E794CD528CA987CF18904AE871150A8ED370AB58AEE325C2CD85F6418903FF4EF
- MD5 SHA1 SHA512 TLSH
nssm-2.24-101-g897c7ad/src/service.cpp
- SHA256 caea6c5915abad7b961d6be0ed2082e358cadacb49b8da6f27b5ef9dc8c0fce0
- MD5 6461ca408188838c32b233071059fbfe
- SHA1 537bf966146c9d414bb2c5e00ddfa4e322a3e2f4
- SHA512 37f4572c5e471ff35db52deb28f0269e978da3e9dab79008cc1c23206ebdfd67aab71acad13d87fd8e5bc3327b849937734f05ac0d3ba115bd5de2b0456e7f09
- SSDEEP 768:zOoXWES59KpSoOldEgr7fX05mn05kT2QattTMceD2yD8VSbHTDIRoexj0Whzk57v:zOoWES59Kmr7l8kT2kTDIR1AAk57Fax2
- TLSH T1DC835FCD58DA69331C75523C6F13484AF76F450B066E3A61BAFC42202FF5C9CC2B6AA5
- MD5 SHA1 SHA512 SSDEEP TLSH
nssm-2.24-101-g897c7ad/src/service.h
- SHA256 23397ba929a24409a59720def0e8a8ddd43c06b135a88a84ad31a647c47a99e3
- MD5 bfdd96730e90d38f662ed914b636bce8
- SHA1 3655e0a7fbb5bf3636385ce2d119c9d6036c867e
- SHA512 d436bf7c3d1f76aa389b4ddf878381cd236c5d70de4356bf8e7e512d2a24cf28052517c249c94732eaa0cfc07f2b3eb6b5817ec803da9998a2d337575ef829e5
- SSDEEP 96:WZx3VQjus4/woliDeHeHcmz+WpdFKYo4NoNYFr2PdBB0:WZxias4/liDeMyE3jLxqXa
- TLSH T16ED1565F0589D5F1287750AF5A278D9B015D92022ACB7C3076EF9E0864CAC0DE7AB2F9
- MD5 SHA1 SHA512 SSDEEP TLSH
nssm-2.24-101-g897c7ad/src/settings.cpp
- SHA256 693fd5f3a1e3093857697e31ef92c866d85856d81032c93e2e76ad8a1b70543f
- MD5 91ea7368d5f5242c0d7640d047f33f2b
- SHA1 67c28a139c5ff30df73162f831c012321b221fb6
- SHA512 ecd40e0200ba182fbf3dcbbd695f2482aaab089cf554012331194dedf2c6963c967e9984f3dac6ac4a2d7110e60e5e0f576721801e582e3fd50b53629901f9e8
- SSDEEP 384:Qhl3UOLJk4Jf1+sFGih1V6nH1AJ3G002mDs1lnD7sNQpgOggl/aiiHou8AahiaSx:QgAq4Jf1nRj4nS/gqG/EitFgS
- TLSH T1904330663C8774225D3291B9DF924C0AEB2942072A3A75F2F5FD09103FA6C4CC5B6F96
- MD5 SHA1 SHA512 SSDEEP TLSH
nssm-2.24-101-g897c7ad/src/settings.h
- SHA256 bc0f9f3582d6cbb1a57e47de59e550d499bca04ee3dc1270c0bdb24eb2549aa5
- MD5 15c77514d36c991c1902c3b24fb39a48
- SHA1 f0bd84326ad48ece5908ae11c0e8bb667a711aec
- SHA512 721a906e6ddd717ee19d8ab134cbf92e9595582d3b4de99267d5559d2127508e689f88e71184586c8039997e25e1578e9f85ab63993f43583e8c097e2b4585df
- TLSH T13131691A6E91A4A06871E4B4443E4D434525C9A73F3ED8BC716E0E142C56D8C80F7BFF
- MD5 SHA1 SHA512 TLSH
nssm-2.24-101-g897c7ad/src/utf8.cpp
- SHA256 13a67d0ce053f50590499a969d60c650348e104389bd54945677cc26021eca4c
- MD5 06ca6603d177e909ea0e5103a27fe6f5
- SHA1 287968ceb275a582f28eb7f83dda5db7c7ff7b4f
- SHA512 5fa4ec80af4e476bf55036ae60a6b6ff03b58a1a02debe57c1555b838853fc52c2a377cacec68dce7fcb02633a2a18999718f5f7597839c3d944c62fd61bb125
- TLSH T1E6710D8A184F7291B73A9F2B97470D0DF31D905627FAFAD0BC4080267E8226654FAF75
- MD5 SHA1 SHA512 TLSH
nssm-2.24-101-g897c7ad/src/utf8.h
- SHA256 4f832e836ec9e4b16597bb7e3b5b39d26d6df748b04db3befe5a43db56e7e404
- MD5 5a7a7e654127b5884e2d2d06669947c4
- SHA1 f49f15f9f627351f053b97f0076956b883c12808
- SHA512 5658d2b186977463ee8bfb6d7401dd74a4e37b058b250c00601c027326775c23453f5ddb37b4ef1410a7a30523a5a8fcbe41fe61dc9bb7b8ed5505515d283bd0
- TLSH T10EF08C4A985990F276379BA762435D29520CC49332E6ECA0488B3324C4C2886BF69FF8
- MD5 SHA1 SHA512 TLSH
nssm-2.24-101-g897c7ad/src/version.cmd
- SHA256 15b426e1c03c0976c9b133f82553da5c7e9cf3320dbb3b5cf269854afc80b548
- MD5 3e67b67b2ecb2d3042dfaa7d216883b1
- SHA1 1e857c1fac7a99a8d280e219e9a8f1bd4d315a5d
- SHA512 6482ee84a35462f38468cf3d4e31841524d4ad4b1bae9ac24df6f24c74676a8fe8c3999461698ec4e29bcfc57c9e1348795454edc9d95380c020dfdd5ba71407
- TLSH T19031D98B1A87993358AB2237BC2842467770C1722317C89CB4272A8867874E9A3F17C9
- MD5 SHA1 SHA512 TLSH
nssm-2.24-101-g897c7ad/win32/nssm.exe
- IMPHASH 4bff350fe402183942725ae4387ac5d4
- SHA256 682f1025b4c410ae78b1c5bdc4de7ad315f2eff292c66947c13969930028c98d
- MD5 bd3b9dac9198c57238d236435bf391ca
- SHA1 e0b966cfbe9e804319cfd3b756b12ad8a2294b24
- SHA512 81216cb8dae5a66d07b60c7d4efa598a47120ffec18a92c5355ea09ce8514d54efb57b8320aa61b2b20f654c913b7188755b445d6f3d95fcebfb1c2b9a3b20d0
- SSDEEP 6144:H1NJihCejVOjAG7awRtleN6A7kWxzGAnw+iPSWSHCGXkJqKLWr4ZrDosNX0:V8OywRszGAQGXkJqKSbsNX0
- TLSH T11764816163E89A21F5F77F70687942211F3B7C929E3DC18E1290956E2CB2E94CD707A3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
5
Entry point
89590
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
psapi
GetModuleFileNameExW
shlwapi
PathQuoteSpacesW
PathUnquoteSpacesW
PathFindExtensionW
kernel32
SystemTimeToFileTime
GetFileInformationByHandle
ReadFile
FlushFileBuffers
SetHandleInformation
CreatePipe
GetStdHandle
GetCommandLineW
TlsAlloc
GetModuleFileNameW
GetCurrentThread
GetProcessTimes
OpenProcess
Thread32Next
Thread32First
CreateToolhelp32Snapshot
GenerateConsoleCtrlEvent
SetConsoleCtrlHandler
Process32NextW
Process32FirstW
SetCurrentDirectoryW
GetCurrentDirectoryW
GetWindowsDirectoryW
DeleteCriticalSection
UnregisterWait
SetWaitableTimer
ResumeThread
SetProcessAffinityMask
RegisterWaitForSingleObject
CreateWaitableTimerW
InitializeCriticalSection
SetConsoleOutputCP
GetConsoleOutputCP
WideCharToMultiByte
CompareFileTime
WriteConsoleW
WriteConsoleA
RaiseException
HeapSize
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetConsoleMode
GetConsoleCP
VirtualAlloc
HeapReAlloc
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
SetStdHandle
InitializeCriticalSectionAndSpinCount
IsDebuggerPresent
LoadLibraryA
GetModuleFileNameA
GetCurrentThreadId
SetLastError
TlsFree
IsValidCodePage
GetOEMCP
CopyFileW
FileTimeToSystemTime
Sleep
SetFilePointer
MoveFileW
GetSystemTime
CreateFileW
SetFilePointerEx
SetEndOfFile
WriteFile
DuplicateHandle
FreeLibrary
GetProcAddress
LoadLibraryW
EnterCriticalSection
LeaveCriticalSection
CreateThread
GetExitCodeThread
WaitForSingleObject
GetSystemTimeAsFileTime
CloseHandle
GetExitCodeProcess
GetCurrentProcess
GetProcessAffinityMask
GetEnvironmentVariableW
FindResourceExW
LoadResource
GetModuleHandleW
LocalFree
TlsGetValue
LocalAlloc
TlsSetValue
GetUserDefaultLangID
FormatMessageW
CreateProcessW
TerminateProcess
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
ExpandEnvironmentStringsW
AllocConsole
GetConsoleWindow
GetCurrentProcessId
FreeConsole
GetComputerNameW
GetLastError
HeapFree
GetProcessHeap
HeapAlloc
CreateFileA
GetCPInfo
MultiByteToWideChar
GetACP
InterlockedDecrement
ExitProcess
RtlUnwind
SetHandleCount
GetFileType
GetStartupInfoA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InterlockedIncrement
user32
GetProcessWindowStation
GetSystemMetrics
LoadImageW
GetMessageW
IsDialogMessageW
TranslateMessage
DispatchMessageW
DestroyWindow
PostQuitMessage
ShowWindow
SetFocus
GetWindowLongW
CheckRadioButton
PostMessageW
SetDlgItemInt
SendMessageW
GetDlgItemTextW
SetDlgItemTextW
GetDlgItemInt
SendDlgItemMessageW
GetWindowRect
GetDesktopWindow
MoveWindow
GetDlgItem
EnableWindow
CreateDialogIndirectParamW
MessageBoxW
MessageBoxIndirectW
GetWindowThreadProcessId
PostThreadMessageW
EnumWindows
SetWindowPos
SetWindowLongW
comdlg32
GetOpenFileNameW
advapi32
CreateServiceW
StartServiceW
ControlService
QueryServiceStatusEx
SetServiceStatus
DeleteService
QueryServiceConfig2W
ChangeServiceConfig2W
CloseServiceHandle
ChangeServiceConfigW
QueryServiceConfigW
OpenServiceW
GetServiceDisplayNameW
GetServiceKeyNameW
EnumServicesStatusExW
OpenSCManagerW
QueryServiceStatus
RegDeleteKeyW
RegQueryValueExW
RegCloseKey
RegEnumValueW
RegSetValueExW
RegCreateKeyExW
RegOpenKeyExW
OpenThreadToken
ImpersonateSelf
LookupPrivilegeValueW
AdjustTokenPrivileges
StartServiceCtrlDispatcherW
AllocateAndInitializeSid
CheckTokenMembership
RegDeleteValueW
IsTextUnicode
RegisterEventSourceW
ReportEventW
DeregisterEventSource
LsaEnumerateAccountRights
LsaAddAccountRights
FreeSid
LsaLookupSids
LsaClose
LsaLookupNames
LsaFreeMemory
IsValidSid
GetSidSubAuthorityCount
GetSidLengthRequired
GetSidIdentifierAuthority
InitializeSid
GetSidSubAuthority
LsaOpenPolicy
LsaNtStatusToWinError
RegisterServiceCtrlHandlerExW
shell32
ShellExecuteExW
Name
.text
Size
126KB
Virtual Size
126KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
24KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
204KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
159KB
Virtual Size
159KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=19, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=112, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=15, id=123, productName=VS2005 build 50727, version=50727,
count=229, id=1, productName=Unmarked objects,
count=60, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
nssm-2.24-101-g897c7ad/win64/nssm.exe
- IMPHASH 486303637bc6ec8cd38f2967cc02503d
- SHA256 eee9c44c29c2be011f1f1e43bb8c3fca888cb81053022ec5a0060035de16d848
- MD5 1136efb1a46d1f2d508162387f30dc4d
- SHA1 f280858dcfefabc1a9a006a57f6b266a5d1fde8e
- SHA512 43b31f600196eaf05e1a40d7a6e14d4c48fc6e55aca32c641086f31d6272d4afb294a1d214e071d5a8cce683a4a88b66a6914d969b40cec55ad88fde4077d3f5
- SSDEEP 6144:0I6VyDGb+HiFr4kchE18dkuCj7jLwcYBQarDosNXJ:0IJDGb+Hiu9hE18dkxfdsNXJ
- TLSH T1C374715263E80664F1F77B70997A42229F377C919F3DC24E0290956E2DB2E94EC34B63
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
2
Major OS version
5
Entry point
106460
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
psapi
GetModuleFileNameExW
shlwapi
PathQuoteSpacesW
PathUnquoteSpacesW
PathFindExtensionW
kernel32
SystemTimeToFileTime
GetFileInformationByHandle
ReadFile
FlushFileBuffers
SetHandleInformation
CreatePipe
GetStdHandle
GetCommandLineW
TlsAlloc
GetModuleFileNameW
GetCurrentThread
GetProcessTimes
OpenProcess
Thread32Next
Thread32First
CreateToolhelp32Snapshot
GenerateConsoleCtrlEvent
SetConsoleCtrlHandler
Process32NextW
Process32FirstW
SetCurrentDirectoryW
GetCurrentDirectoryW
GetWindowsDirectoryW
DeleteCriticalSection
UnregisterWait
SetWaitableTimer
ResumeThread
SetProcessAffinityMask
RegisterWaitForSingleObject
CreateWaitableTimerW
InitializeCriticalSection
SetConsoleOutputCP
GetConsoleOutputCP
WideCharToMultiByte
CompareFileTime
WriteConsoleW
WriteConsoleA
HeapSize
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetConsoleMode
GetConsoleCP
HeapReAlloc
GetTickCount
QueryPerformanceCounter
HeapCreate
HeapSetInformation
SetStdHandle
RtlPcToFileHeader
RaiseException
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetModuleFileNameA
GetOEMCP
FlsAlloc
GetCurrentThreadId
SetLastError
FlsFree
FlsSetValue
CopyFileW
FileTimeToSystemTime
Sleep
SetFilePointer
MoveFileW
GetSystemTime
CreateFileW
SetFilePointerEx
SetEndOfFile
WriteFile
DuplicateHandle
FreeLibrary
GetProcAddress
LoadLibraryW
EnterCriticalSection
LeaveCriticalSection
CreateThread
GetExitCodeThread
WaitForSingleObject
GetSystemTimeAsFileTime
CloseHandle
GetExitCodeProcess
GetCurrentProcess
GetProcessAffinityMask
GetEnvironmentVariableW
FindResourceExW
LoadResource
GetModuleHandleW
LocalFree
TlsGetValue
LocalAlloc
TlsSetValue
GetUserDefaultLangID
FormatMessageW
CreateProcessW
TerminateProcess
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
ExpandEnvironmentStringsW
AllocConsole
GetConsoleWindow
GetCurrentProcessId
FreeConsole
GetComputerNameW
GetLastError
HeapFree
GetProcessHeap
HeapAlloc
CreateFileA
IsValidCodePage
MultiByteToWideChar
FlsGetValue
DecodePointer
ExitProcess
RtlLookupFunctionEntry
RtlUnwindEx
SetHandleCount
GetFileType
GetStartupInfoA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
GetCPInfo
GetACP
EncodePointer
user32
GetProcessWindowStation
LoadImageW
SetWindowLongPtrW
GetMessageW
IsDialogMessageW
TranslateMessage
DispatchMessageW
PostQuitMessage
DestroyWindow
GetWindowLongPtrW
SetFocus
ShowWindow
CheckRadioButton
PostMessageW
SetDlgItemInt
SendMessageW
GetDlgItemTextW
SetDlgItemTextW
GetDlgItemInt
SendDlgItemMessageW
GetWindowRect
GetDesktopWindow
MoveWindow
GetDlgItem
EnableWindow
CreateDialogIndirectParamW
MessageBoxW
MessageBoxIndirectW
GetWindowThreadProcessId
PostThreadMessageW
EnumWindows
SetWindowPos
GetSystemMetrics
comdlg32
GetOpenFileNameW
advapi32
CreateServiceW
StartServiceW
ControlService
QueryServiceStatusEx
SetServiceStatus
DeleteService
QueryServiceConfig2W
ChangeServiceConfig2W
CloseServiceHandle
ChangeServiceConfigW
QueryServiceConfigW
OpenServiceW
GetServiceDisplayNameW
GetServiceKeyNameW
EnumServicesStatusExW
OpenSCManagerW
QueryServiceStatus
RegDeleteKeyW
RegQueryValueExW
RegCloseKey
RegEnumValueW
RegSetValueExW
RegCreateKeyExW
RegOpenKeyExW
OpenThreadToken
ImpersonateSelf
LookupPrivilegeValueW
AdjustTokenPrivileges
StartServiceCtrlDispatcherW
AllocateAndInitializeSid
CheckTokenMembership
RegDeleteValueW
IsTextUnicode
RegisterEventSourceW
ReportEventW
DeregisterEventSource
LsaEnumerateAccountRights
LsaAddAccountRights
FreeSid
LsaLookupSids
LsaClose
LsaLookupNames
LsaFreeMemory
IsValidSid
GetSidSubAuthorityCount
GetSidLengthRequired
GetSidIdentifierAuthority
InitializeSid
GetSidSubAuthority
LsaOpenPolicy
LsaNtStatusToWinError
RegisterServiceCtrlHandlerExW
shell32
ShellExecuteExW
Name
.text
Size
145KB
Virtual Size
144KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
37KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
208KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
159KB
Virtual Size
159KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=107, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=10, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=15, id=123, productName=VS2005 build 50727, version=50727,
count=234, id=1, productName=Unmarked objects,
count=61, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,