antivirus.7z
- SHA256 10df6deb77e7822faa7a6c04152f42bb3e594bfc15f509142f5a74b9f49c9d6f
Overview
overview
3Static
static
1ac-v2.dll
windows10-2004-x64
3ac-v2.dll
windows11-ltsc_2024-x64
3az-v2.dll
windows10-2004-x64
3az-v2.dll
windows11-ltsc_2024-x64
1cn3.dll
windows10-2004-x64
3cn3.dll
windows11-ltsc_2024-x64
3nz.dll
windows10-2004-x64
3nz.dll
windows11-ltsc_2024-x64
3nzeE831D.tmp
windows10-2004-x64
3nzeE831D.tmp
windows11-ltsc_2024-x64
3Static task
static1
Behavioral task
behavioral1
Sample
ac-v2.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
120 seconds
Behavioral task
behavioral2
Sample
ac-v2.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
120 seconds
Behavioral task
behavioral3
Sample
az-v2.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
120 seconds
Behavioral task
behavioral4
Sample
az-v2.dll
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
0 signatures
120 seconds
Behavioral task
behavioral5
Sample
cn3.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
120 seconds
Behavioral task
behavioral6
Sample
cn3.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
3 signatures
120 seconds
Behavioral task
behavioral7
Sample
nz.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
120 seconds
Behavioral task
behavioral8
Sample
nz.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
3 signatures
120 seconds
Behavioral task
behavioral9
Sample
nzeE831D.tmp
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
120 seconds
Behavioral task
behavioral10
Sample
nzeE831D.tmp
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
120 seconds
General
- Target antivirus.7z
- Size 32KB
- Sample260801-az7bbaba82
- SHA256 10df6deb77e7822faa7a6c04152f42bb3e594bfc15f509142f5a74b9f49c9d6f
- MD5 fb7366184e1daabbeb22075238d14811
- SHA1 860d48f1a2fd506af34a9a50c2f8a8d747bb8249
- SHA512 b0ff9b47aac615b87448a82f3a4e5b4e7269b086c6f03dc36956513dbaffb376eb6f7db7e1d25c7dc11d2b8ebd57a09a86b1992da213c2c4c3ed3734e440b921
- SSDEEP 768:y00xHNYXDi9s3NHyPZDZjhb+T/IFGtaKHWIWF1kXAE5:GK29aNHY1Z1qrIFpKtWjkQk
- TLSH T179E2F11A0A3A18DE278D84FD1AB052D08621D4DE3FC611BBBD1106CCB290F1E5DEEE93
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
File Explorer
-
antivirus.7z.7z 32KB
-
ac-v2.dll.dll 18KB
-
az-v2.dll.dll 18KB
-
cn3.dll.dll 45KB
-
nz.dll.dll 18KB
-
nzeE831D.tmp9KB
ac-v2.dll
- IMPHASH 0b703b1d8b344fa3a8c2583b22e86b00
- SHA256 869b3e55be65c5d6bc0b180234e9da874ccff29f9e3a4d60707f7b0ac2bc551c
- MD5 61749f1eedb89c4390e868c8d79361e9
- SHA1 b2e8e732d595f8dd48c37a2bfdbd11d273c77716
- SHA512 f48212b9215d8a93a9d7e2522878f8c0d4efc639aa631048c835be2f05c8a415a5f5dceccfda76d2c07c37f8bff180a9865ee42980ef52897442454249c5de00
- SSDEEP 384:tokmuv30upwKNs43b7u9T3706y8RbmL4nNyaku:KkJsL43b2065ALa
- TLSH T132826C63AD505C43DC02AB74F4DA8A36B9B8F6E11B9385C36520C4798BC17D33AE925F
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
92:92:57:28:e9:bb:58:33:cf:35:56:2b:87:86:b8:84:02:31:00:a1:41:bc:4e:fb:be:a8:c5:37:39:40:71:b0
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Jennifer Flores Hernandez,O=Jennifer Flores Hernandez,ST=Sinaloa,C=MX
Chains
Jan 26, 2026
CN=Jennifer Flores Hernandez,O=Jennifer Flores Hernandez,ST=Sinaloa,C=MX
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=Jennifer Flores Hernandez,O=Jennifer Flores Hernandez,ST=Sinaloa,C=MX
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Serial Number
48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 25, 2021 - Dec 31, 2028
Subject
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Serial Number
62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Issuer
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Jennifer Flores Hernandez,O=Jennifer Flores Hernandez,ST=Sinaloa,C=MX
Serial Number
c7:45:9c:4b:b7:89:6f:be:8a:b7:2c:a6:40:3a:9b:d8
Issuer
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 19, 2023 - Dec 18, 2026
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
4
Entry point
4591
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
PDB paths
kernel32
CreateTimerQueueTimer
ExpandEnvironmentStringsA
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
user32
wsprintfA
MiFuncionConParametro
Name
.text
Size
1024B
Virtual Size
580B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
512B
Virtual Size
80B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
82B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
512B
Virtual Size
316B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
36B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
az-v2.dll
- IMPHASH a358a99085eb57f3f8354d5c93d87e81
- SHA256 31933244bf77d99a72f25de0b764d9f49ea75a9c3041fd778fb5e9a844e378d5
- MD5 aadda1b7472024c4c8db8f720f9278f0
- SHA1 ffdc8989ef84fcc6e71ecda69ea1545d1d1b2da5
- SHA512 6ec41edd9c8ab0a315fa1ec776f1593976a10637a8b7354ae3558040e1855c26bd73ea462e183ae4b864f3bb50a4e8177327d6f2a207475ef37632cb9364e17e
- SSDEEP 384:b0UaqgYjeK+r6WDgpwKNs43b7u98nby8RbmL4nNyE:brdyz66V43bP5AL
- TLSH T13D825D63AE505C83CD467F74B0CB9A6F7879B660074288C36934C4748F823D629AD2BF
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
59:e4:71:39:22:97:40:ee:bf:45:24:4c:ae:c8:04:0c:30:56:18:b6:af:61:b0:cd:54:1e:d1:2b:58:98:a2:0a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Jennifer Flores Hernandez,O=Jennifer Flores Hernandez,ST=Sinaloa,C=MX
Chains
Jan 25, 2026
CN=Jennifer Flores Hernandez,O=Jennifer Flores Hernandez,ST=Sinaloa,C=MX
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=Jennifer Flores Hernandez,O=Jennifer Flores Hernandez,ST=Sinaloa,C=MX
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Serial Number
48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 25, 2021 - Dec 31, 2028
Subject
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Serial Number
62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Issuer
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Jennifer Flores Hernandez,O=Jennifer Flores Hernandez,ST=Sinaloa,C=MX
Serial Number
c7:45:9c:4b:b7:89:6f:be:8a:b7:2c:a6:40:3a:9b:d8
Issuer
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 19, 2023 - Dec 18, 2026
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
4
Entry point
5358
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
PDB paths
kernel32
CloseHandle
CreateFileA
GetFileSize
GetProcAddress
LoadLibraryA
ReadFile
VirtualAlloc
VirtualFree
LoadDLLInMemory
Name
.text
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
512B
Virtual Size
20B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.edata
Size
512B
Virtual Size
76B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
512B
Virtual Size
280B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
cn3.dll
- IMPHASH 92f5176332fc754d904be0160f0bd258
- SHA256 c4b19773f4178e0b35132e40888bc20579629dc92b471acdf3bc13858bcb8943
- MD5 8bd7bdc49a15755a4137b1eaa9c78e86
- SHA1 49a45454a71386018acc43b72f15392f3cde3797
- SHA512 a56a742f13e095b653a9354c8cd526ee8f90f5c61e981f441006a8cad9743c2aed425df21e8b017a16b0fb44ccce3ff5568215eaec902be783ac42402d95f62a
- SSDEEP 768:K3SIWVxl7Bz29Y4hwppss423xpA8XDK43bkDCi55ALVe:7nlb4hapZ42hpAeDK43WCiY
- TLSH T16D235D967A73C8BAC8437B38B4CBD77FA53DA1018B634B93D72490798F87BC1254420A
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
3e:8c:44:57:90:ae:e7:06:47:ff:3a:c2:33:74:60:00:9c:b2:9a:1f:08:e1:66:d4:9c:68:85:da:c7:4f:b0:55
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Jennifer Flores Hernandez,O=Jennifer Flores Hernandez,ST=Sinaloa,C=MX
Chains
Mar 12, 2026
CN=Jennifer Flores Hernandez,O=Jennifer Flores Hernandez,ST=Sinaloa,C=MX
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=Jennifer Flores Hernandez,O=Jennifer Flores Hernandez,ST=Sinaloa,C=MX
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Serial Number
48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 25, 2021 - Dec 31, 2028
Subject
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Serial Number
62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Issuer
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Jennifer Flores Hernandez,O=Jennifer Flores Hernandez,ST=Sinaloa,C=MX
Serial Number
c7:45:9c:4b:b7:89:6f:be:8a:b7:2c:a6:40:3a:9b:d8
Issuer
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 19, 2023 - Dec 18, 2026
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
4
Entry point
4096
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
PDB paths
kernel32
CloseHandle
CreateFileA
ExitProcess
GetCurrentProcess
GetFileSize
GetModuleHandleA
GetProcessHeap
HeapAlloc
HeapFree
OutputDebugStringA
ReadFile
VirtualAllocEx
VirtualProtect
user32
MessageBoxA
@CEntity__SetModelIndex_hook@12
@CTaskSimpleAnim__MakeAbortable_hook@20
@CVehicle__CanBeDriven_hook@8
ApplyClothesSpeedUpPatch
ApplyGamePatches
CFont_GetStringWidth
CFont_PrintString
CFont_SetBackground
CFont_SetColor
CFont_SetDropShadowPosition
CFont_SetEdge
CFont_SetFontStyle
CFont_SetOrientation
CFont_SetProportional
CFont_SetScale
CNetGame__RegisterRPCs_hook
CNetGame__UnregisterRPCs_hook
CPad__Update_hook
CPad__Update_hookexit
CRadar_LimitRadarPoint
CRadar_LimitToMap
CRadar_TransformRadarPointToScreenSpace
CRadar_TransformRealWorldPointToRadarSpace
CStreamingInfo__AddToList_tramp
CStreaming__LoadRequestedModels_tramp
CTask_GetId
ChangeClothes
ChangeClothesByIndex
GangZoneLabels_Draw
GangZoneLabels_Find
GangZoneLabels_InstallHooks
GangZoneLabels_Remove
GangZoneLabels_Reset
GangZoneLabels_Upsert
GetClothesGroup
GetCurrentSampVersion
GetLocalPlayerId
GetMaxClothes
GetOffsets
GetPlayerPed
GetPlayerPedById
GetRelativeCallTarget
GetRsGlobal
InitDyingStuff
InstallDyingSendRPCHook
InstallHook
InstallJmp
IsRadarOrMapVisible
LoadMemFile
ModFz_Init
RPCHandler_GangZoneLabelRemove
RPCHandler_GangZoneLabelUpsert
RPCHandler_SetPlayerClothes
RPCID_GANGZONELABEL_REMOVE
RPCID_GANGZONELABEL_UPSERT
RPCID_SETPLAYERCLOTHES
RebuildPlayer
RedirectCall
RedirectJmp
RegisterCustomRPCs
RemoveClothes
SetNop
SetPlayerClothes
SetPlayerStats
TranslateRelativeJump
UnloadMemFile
UnregisterCustomRPCs
g_cachedPlayerImg
g_hSamp
g_pPlayerImgDir
g_sampOffsets
g_sampVersion
iReturnFileId
mem_copy
modfz_calloc
modfz_free
modfz_malloc
my_memset
my_strcmp
my_strlen_s
pCStreamingInfo_hookexit
pCStreamingInfo_og
pConvertToBufferObject
pReturnBuffer
Name
.text
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
660B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
512B
Virtual Size
496B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
nz.dll
- IMPHASH a358a99085eb57f3f8354d5c93d87e81
- SHA256 bb0194db4f88297238109313a18994fa102f9e0162c36cd21317cfeef7051d09
- MD5 d2e2fad2e4380c130b9571e5c2a2b779
- SHA1 7ef8b4fbd9c704e35be31bc7bb7d087094d93ec5
- SHA512 70b7b1183c61317d567347dbd935f8fdaca65e0ee46a670b1dc0bff741c7d517da89af294add173ec54322f9329560b21afc5f4118c839ae53d81b23dd2d5f7e
- SSDEEP 384:t0baqgYF+GD6WDIpwKNs43b7u9kcuBsSJIVE8E9VF0NyLz:tIdF366943bYC2EZ
- TLSH T1B4824C63EE505C83CD426F7970CB996FB97CB7510B5289C35534C4388F823D625AA2BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
f8:b2:8d:fb:c0:48:46:15:13:ff:b0:2a:dc:7d:e6:82:61:9c:46:8e:c2:30:1c:d6:7a:9d:75:4c:3a:ef:42:71
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Jennifer Flores Hernandez,O=Jennifer Flores Hernandez,ST=Sinaloa,C=MX
Chains
May 3, 2025
CN=Jennifer Flores Hernandez,O=Jennifer Flores Hernandez,ST=Sinaloa,C=MX
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=Jennifer Flores Hernandez,O=Jennifer Flores Hernandez,ST=Sinaloa,C=MX
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Serial Number
48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 25, 2021 - Dec 31, 2028
Subject
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Serial Number
62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Issuer
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Jennifer Flores Hernandez,O=Jennifer Flores Hernandez,ST=Sinaloa,C=MX
Serial Number
c7:45:9c:4b:b7:89:6f:be:8a:b7:2c:a6:40:3a:9b:d8
Issuer
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 19, 2023 - Dec 18, 2026
Subject
CN=DigiCert Timestamp 2024,O=DigiCert,C=US
Serial Number
0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 26, 2024 - Nov 25, 2035
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
4
Entry point
5358
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
PDB paths
kernel32
CloseHandle
CreateFileA
GetFileSize
GetProcAddress
LoadLibraryA
ReadFile
VirtualAlloc
VirtualFree
LoadDLLInMemory
Name
.text
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
512B
Virtual Size
20B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.edata
Size
512B
Virtual Size
73B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
512B
Virtual Size
280B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
nzeE831D.tmp
- SHA256 db924ef98d60ddb90010c8014c0096d7f83dba5690e2326c80180c4662b748c5
- MD5 113edfc97ce62f7d8c02c8b3bf3b99af
- SHA1 888dc067570a6d21210396c322ecf6c2ccba17b0
- SHA512 5d5d223e1ea969934e417912c6fd74bbd6b3cb318982112a27bd8039862ad2fa6822a656ebcc19298abce046d6d1031ccdbf8891f638592f5375f7be57b97551
- SSDEEP 96:Y878VjhuWh7V4QhLWkQlPShw6KJc2QS+2/P4Uo6L4Cd6YSA1VRB3QqdQqX3z0:tmzFLlIPWw2+2Q6YdVzgqeqX3
- TLSH T14D12C785FE17B0B3C406093612DBF09F9B3F6071E8A79C41DB408990BEDD4A5A65DB47
- MD5 SHA1 SHA512 SSDEEP TLSH