HabboAirPlus_Standalone_x86.zip
- SHA256 4ff69e81d8471f253d674684c6a068f8b040f9fa6e531a21bcdde6365ecb70a1
Overview
overview
5Static
static
5HabboAirPl...86.zip
windows11-21h2-x64
1HabboAirPl...IR.dll
windows11-21h2-x64
3HabboAirPl...IR.vch
windows11-21h2-x64
3HabboAirPl...ry.exe
windows11-21h2-x64
3HabboAirPl...ry.exe
windows11-21h2-x64
3HabboAirPl...rt.dll
windows11-21h2-x64
3HabboAirPl...OPYING
windows11-21h2-x64
3HabboAirPl...PL-2.1
windows11-21h2-x64
3HabboAirPl...PL-1.1
windows11-21h2-x64
3HabboAirPl...OPYING
windows11-21h2-x64
3HabboAirPl...OPYING
windows11-21h2-x64
3HabboAirPl...bo.exe
windows11-21h2-x64
3HabboAirPl...ir.swf
windows11-21h2-x64
3HabboAirPl...er.exe
windows11-21h2-x64
1HabboAirPl...on.xml
windows11-21h2-x64
4HabboAirPl...se.txt
windows11-21h2-x64
3HabboAirPl...ME.txt
windows11-21h2-x64
3HabboAirPl...go.png
windows11-21h2-x64
HabboAirPl...28.png
windows11-21h2-x64
HabboAirPl...16.png
windows11-21h2-x64
HabboAirPl...56.png
windows11-21h2-x64
HabboAirPl...32.png
windows11-21h2-x64
HabboAirPl...48.png
windows11-21h2-x64
HabboAirPl...nt.swf
windows11-21h2-x64
3HabboAirPl...re.swf
windows11-21h2-x64
3HabboAirPl...et.swf
windows11-21h2-x64
3HabboAirPl...em.swf
windows11-21h2-x64
3HabboAirPl...ow.swf
windows11-21h2-x64
3HabboAirPl...or.swf
windows11-21h2-x64
3HabboAirPl...metype
windows11-21h2-x64
3Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
HabboAirPlus_Standalone_x86.zip
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
HabboAirPlus_Standalone_x86/Adobe AIR/Versions/1.0/Adobe AIR.dll
Resource
win11-20260513-en
windows11-21h2-x64
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
HabboAirPlus_Standalone_x86/Adobe AIR/Versions/1.0/Resources/Adobe AIR.vch
Resource
win11-20260513-en
windows11-21h2-x64
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
HabboAirPlus_Standalone_x86/Adobe AIR/Versions/1.0/Resources/CaptiveAppEntry.exe
Resource
win11-20260513-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral5
Sample
HabboAirPlus_Standalone_x86/Adobe AIR/Versions/1.0/Resources/CaptiveCmdEntry.exe
Resource
win11-20260513-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral6
Sample
HabboAirPlus_Standalone_x86/Adobe AIR/Versions/1.0/Resources/DDrawFontSupport.dll
Resource
win11-20260513-en
windows11-21h2-x64
3 signatures
150 seconds
Behavioral task
behavioral7
Sample
HabboAirPlus_Standalone_x86/Adobe AIR/Versions/1.0/Resources/Licenses/cairo/COPYING
Resource
win11-20260513-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral8
Sample
HabboAirPlus_Standalone_x86/Adobe AIR/Versions/1.0/Resources/Licenses/cairo/COPYING-LGPL-2.1
Resource
win11-20260513-en
windows11-21h2-x64
4 signatures
150 seconds
Behavioral task
behavioral9
Sample
HabboAirPlus_Standalone_x86/Adobe AIR/Versions/1.0/Resources/Licenses/cairo/COPYING-MPL-1.1
Resource
win11-20260513-en
windows11-21h2-x64
4 signatures
150 seconds
Behavioral task
behavioral10
Sample
HabboAirPlus_Standalone_x86/Adobe AIR/Versions/1.0/Resources/Licenses/pcre2/COPYING
Resource
win11-20260513-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral11
Sample
HabboAirPlus_Standalone_x86/Adobe AIR/Versions/1.0/Resources/Licenses/pixman/COPYING
Resource
win11-20260513-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral12
Sample
HabboAirPlus_Standalone_x86/Habbo.exe
Resource
win11-20260513-en
windows11-21h2-x64
3 signatures
150 seconds
Behavioral task
behavioral13
Sample
HabboAirPlus_Standalone_x86/HabboAir.swf
Resource
win11-20260513-en
windows11-21h2-x64
4 signatures
150 seconds
Behavioral task
behavioral14
Sample
HabboAirPlus_Standalone_x86/HabboCustomLauncher.exe
Resource
win11-20260513-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral15
Sample
HabboAirPlus_Standalone_x86/META-INF/AIR/application.xml
Resource
win11-20260513-en
windows11-21h2-x64
11 signatures
150 seconds
Behavioral task
behavioral16
Sample
HabboAirPlus_Standalone_x86/META-INF/AIR/license.txt
Resource
win11-20260513-en
windows11-21h2-x64
4 signatures
150 seconds
Behavioral task
behavioral17
Sample
HabboAirPlus_Standalone_x86/README.txt
Resource
win11-20260513-en
windows11-21h2-x64
5 signatures
150 seconds
Behavioral task
behavioral18
Sample
HabboAirPlus_Standalone_x86/habbo_logo.png
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral19
Sample
HabboAirPlus_Standalone_x86/icon128.png
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral20
Sample
HabboAirPlus_Standalone_x86/icon16.png
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral21
Sample
HabboAirPlus_Standalone_x86/icon256.png
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral22
Sample
HabboAirPlus_Standalone_x86/icon32.png
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral23
Sample
HabboAirPlus_Standalone_x86/icon48.png
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral24
Sample
HabboAirPlus_Standalone_x86/local_include/HabboRoomContent.swf
Resource
win11-20260513-en
windows11-21h2-x64
4 signatures
150 seconds
Behavioral task
behavioral25
Sample
HabboAirPlus_Standalone_x86/local_include/PlaceHolderFurniture.swf
Resource
win11-20260513-en
windows11-21h2-x64
4 signatures
150 seconds
Behavioral task
behavioral26
Sample
HabboAirPlus_Standalone_x86/local_include/PlaceHolderPet.swf
Resource
win11-20260513-en
windows11-21h2-x64
4 signatures
150 seconds
Behavioral task
behavioral27
Sample
HabboAirPlus_Standalone_x86/local_include/PlaceHolderWallItem.swf
Resource
win11-20260513-en
windows11-21h2-x64
4 signatures
150 seconds
Behavioral task
behavioral28
Sample
HabboAirPlus_Standalone_x86/local_include/SelectionArrow.swf
Resource
win11-20260513-en
windows11-21h2-x64
4 signatures
150 seconds
Behavioral task
behavioral29
Sample
HabboAirPlus_Standalone_x86/local_include/TileCursor.swf
Resource
win11-20260513-en
windows11-21h2-x64
4 signatures
150 seconds
Behavioral task
behavioral30
Sample
HabboAirPlus_Standalone_x86/mimetype
Resource
win11-20260513-en
windows11-21h2-x64
1 signatures
150 seconds
General
- Target HabboAirPlus_Standalone_x86.zip
- Size 18.3MB
- Sample260808-mgqbasdn9z
- SHA256 4ff69e81d8471f253d674684c6a068f8b040f9fa6e531a21bcdde6365ecb70a1
- MD5 b3f0329a3b1a9fc69aeb93b3a190b837
- SHA1 5b5f3f874b9275fc554e288e227e76ab65e46294
- SHA512 5c0259e442d2b199daaeae737ed2b22964817e8564042ca9a6efaeb3950742086325c204b2473d5753dd204d54b52f91d972e40dae06ecaa4452f53579eabe3b
- SSDEEP 393216:/WcYtaUMQg4vNejiBQS39fBk+CQ6RN9xKHhsaivjdGoPyNt3KrWcXoUC:/wtaaP8IQS39fG+CQ67XKHSai5GoPyNl
- TLSH T10E1733DA34DCD01CDB645EF9E1AECD0540EE59727A51F1F09CB4C12228EAAFCA1776A0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Codesign digest Mismatch 1 IoCs
File was altered after it was signed.
resource unpack001/HabboAirPlus_Standalone_x86/Adobe AIR/Versions/1.0/Resources/DDrawFontSupport.dll - Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/HabboAirPlus_Standalone_x86/Adobe AIR/Versions/1.0/Resources/CaptiveAppEntry.exe unpack001/HabboAirPlus_Standalone_x86/Habbo.exe unpack001/HabboAirPlus_Standalone_x86/HabboCustomLauncher.exe
File Explorer
-
HabboAirPlus_Standalone_x86.zip.zip 18.3MB
-
HabboAirPlus_Standalone_x86/Adobe AIR/Versions/1.0/Adobe AIR.dll.dll 14.9MB
-
HabboAirPlus_Standalone_x86/Adobe AIR/Versions/1.0/Resources/Adobe AIR.vch349KB
-
HabboAirPlus_Standalone_x86/Adobe AIR/Versions/1.0/Resources/CaptiveAppEntry.exe.exe 81KB
-
HabboAirPlus_Standalone_x86/Adobe AIR/Versions/1.0/Resources/CaptiveCmdEntry.exe.exe 94KB
-
HabboAirPlus_Standalone_x86/Adobe AIR/Versions/1.0/Resources/DDrawFontSupport.dll.dll 19KB
-
HabboAirPlus_Standalone_x86/Adobe AIR/Versions/1.0/Resources/Licenses/cairo/COPYING1KB
-
HabboAirPlus_Standalone_x86/Adobe AIR/Versions/1.0/Resources/Licenses/cairo/COPYING-LGPL-2.126KB
-
HabboAirPlus_Standalone_x86/Adobe AIR/Versions/1.0/Resources/Licenses/cairo/COPYING-MPL-1.125KB
-
HabboAirPlus_Standalone_x86/Adobe AIR/Versions/1.0/Resources/Licenses/pcre2/COPYING102B
-
HabboAirPlus_Standalone_x86/Adobe AIR/Versions/1.0/Resources/Licenses/pixman/COPYING2KB
-
HabboAirPlus_Standalone_x86/Habbo.exe.exe 427KB
-
HabboAirPlus_Standalone_x86/HabboAir.swf10.9MB
-
HabboAirPlus_Standalone_x86/HabboCustomLauncher.exe.exe 228KB
-
HabboAirPlus_Standalone_x86/META-INF/AIR/application.xml1KB
-
HabboAirPlus_Standalone_x86/META-INF/AIR/license.txt888B
-
HabboAirPlus_Standalone_x86/README.txt186B
-
HabboAirPlus_Standalone_x86/habbo_logo.png.png 467B
-
HabboAirPlus_Standalone_x86/icon128.png.png 1KB
-
HabboAirPlus_Standalone_x86/icon16.png.png 1015B
-
HabboAirPlus_Standalone_x86/icon256.png.png 1000B
-
HabboAirPlus_Standalone_x86/icon32.png.png 1KB
-
HabboAirPlus_Standalone_x86/icon48.png.png 1KB
-
HabboAirPlus_Standalone_x86/local_include/HabboRoomContent.swf184KB
-
HabboAirPlus_Standalone_x86/local_include/PlaceHolderFurniture.swf8KB
-
HabboAirPlus_Standalone_x86/local_include/PlaceHolderPet.swf15KB
-
HabboAirPlus_Standalone_x86/local_include/PlaceHolderWallItem.swf8KB
-
HabboAirPlus_Standalone_x86/local_include/SelectionArrow.swf7KB
-
HabboAirPlus_Standalone_x86/local_include/TileCursor.swf7KB
-
HabboAirPlus_Standalone_x86/mimetype59B
HabboAirPlus_Standalone_x86/Adobe AIR/Versions/1.0/Adobe AIR.dll
- IMPHASH a2109ddc74c914614cd702150523c38d
- SHA256 2bea7b28d6606f754093d0fdd254f7a53aadef6ce98b10ec1662ce0a0e4d9bc5
- MD5 9ca77ffcdd8ab3e5a4cc428ae710544b
- SHA1 0bba33b72e164f3bc466a1c94ead2f6aacaa088a
- SHA512 4589bf0f4042d0d0391531177a378b8692d0d294125cadbb1ead31296a50fd6baefcb316540ea1c78d567f354ac15ac241f7afb2bd79f78f95d5c2111b22d6de
- SSDEEP 196608:wBOBwdqusf/PP9SW/9agN98MIvPzZoSTzqYsaitX:wBOKoXUWogSPzZzTzeX
- TLSH T152F6CF22BF4285B1D99F913A053A6B2E81BEDA41873194C37754908B5F721F19F3E2E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
76:97:07:75:5d:80:b0:5c:82:98:67:2e:7e:cb:e2:4d:bc:e5:a1:75:a8:6d:40:ca:b1:a3:85:9c:9e:94:b4:1a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=3489342,CN=Wipro Connected Services\, Inc.,OU=Wipro Engineering – Connected Services,O=Wipro Connected Services\, Inc.,STREET=445 Indio Way,L=Sunnyvale,ST=California,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Mar 2, 2026
SERIALNUMBER=3489342,CN=Wipro Connected Services\, Inc.,OU=Wipro Engineering – Connected Services,O=Wipro Connected Services\, Inc.,STREET=445 Indio Way,L=Sunnyvale,ST=California,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Subject
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
SERIALNUMBER=3489342,CN=Wipro Connected Services\, Inc.,OU=Wipro Engineering – Connected Services,O=Wipro Connected Services\, Inc.,STREET=445 Indio Way,L=Sunnyvale,ST=California,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
08:e6:ca:cb:ed:86:b2:9b:46:ff:44:49
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 11, 2026 - Feb 12, 2027
Subject
CN=Globalsign TSA for CodeSign1 - R6,O=GlobalSign nv-sa,C=BE
Serial Number
01:00:0b:20:05:b3:94:07:62:db:3e:36:79:94:9b:a9
Issuer
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 11, 2025 - Dec 10, 2034
Subject
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jun 20, 2018 - Dec 10, 2034
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Serial Number
45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Dec 10, 2014 - Dec 10, 2034
Minor OS version
0
Major OS version
6
Entry point
493600
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
d:\adobe\AIR\code\build\win\results\Release\info\runtime_sdk_withdrm\Runtime-SDK-WithDRM.vc2015.pdb
kernel32
GetDiskFreeSpaceA
GetDiskFreeSpaceW
LockFile
LockFileEx
UnlockFile
UnlockFileEx
CreateFileMappingW
FormatMessageA
AreFileApisANSI
GetEnvironmentVariableA
GetNumberFormatW
GetCurrencyFormatW
CreateFileW
WriteConsoleW
CreateThread
WaitForSingleObjectEx
CloseHandle
OutputDebugStringA
SetFilePointerEx
GetConsoleMode
GetConsoleCP
FlushFileBuffers
WriteFile
SetStdHandle
GetStringTypeW
HeapReAlloc
HeapSize
SetConsoleCtrlHandler
GetFileType
GetStdHandle
GetProcessHeap
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindNextFileA
DebugBreak
LoadLibraryA
QueryPerformanceFrequency
GetSystemTime
GetLocalTime
SystemTimeToFileTime
GetTimeZoneInformation
WaitForSingleObject
SleepEx
QueueUserAPC
OpenThread
SetThreadPriority
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
IsDBCSLeadByte
GlobalAlloc
GlobalSize
GlobalLock
GlobalUnlock
LoadLibraryW
SystemTimeToTzSpecificLocalTime
TzSpecificLocalTimeToSystemTime
FileTimeToSystemTime
SetCurrentDirectoryW
GetCurrentDirectoryW
GetSystemDirectoryW
SetEvent
ResetEvent
CreateEventW
TerminateThread
GetTickCount
WaitForMultipleObjects
CreateWaitableTimerW
VerSetConditionMask
CreateFileA
DeleteFileW
GetFileAttributesW
GetFileSize
ReadFile
SetFilePointer
ExitThread
CreateProcessA
GetSystemDirectoryA
GetVersionExW
FindResourceExW
LoadResource
LockResource
GlobalFree
FindResourceExA
MoveFileExW
VerifyVersionInfoW
GetUserDefaultUILanguage
GetUserDefaultLangID
FindFirstFileW
GetTempPathW
ExpandEnvironmentStringsA
ExpandEnvironmentStringsW
CreateDirectoryA
CreateDirectoryW
DeleteFileA
GetDriveTypeW
GetFileAttributesA
GetFileAttributesExW
GetFileInformationByHandle
GetFileSizeEx
GetFullPathNameW
GetLogicalDriveStringsW
GetLongPathNameW
GetTempFileNameW
GetVolumeInformationW
RemoveDirectoryW
SetEndOfFile
DeviceIoControl
CreateMutexA
CreateProcessW
lstrlenW
GetTempPathA
GetTempFileNameA
GetSystemWow64DirectoryW
SetFileTime
GetProcessTimes
FreeConsole
AttachConsole
SetNamedPipeHandleState
BeginUpdateResourceW
UpdateResourceW
EndUpdateResourceW
ReleaseSemaphore
CreateSemaphoreW
DuplicateHandle
GetExitCodeThread
GetLocaleInfoA
GetModuleHandleA
GetExitCodeProcess
LocalFree
ConnectNamedPipe
GetOverlappedResult
OpenProcess
CreateNamedPipeA
ReleaseMutex
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
lstrlenA
GetComputerNameExW
SetHandleInformation
CreateNamedPipeW
CancelIo
FormatMessageW
GenerateConsoleCtrlEvent
SizeofResource
lstrcmpiW
FindResourceW
SetThreadAffinityMask
CompareFileTime
CreateEventA
SetWaitableTimer
CancelWaitableTimer
CreateWaitableTimerA
VerifyVersionInfoA
SwitchToFiber
DeleteFiber
CreateFiber
ConvertFiberToThread
ConvertThreadToFiber
GetEnvironmentVariableW
ReadConsoleA
ReadConsoleW
SetConsoleMode
InterlockedPopEntrySList
FlushInstructionCache
LoadLibraryExA
GetFullPathNameA
FreeLibraryAndExitThread
PeekNamedPipe
FindFirstFileExA
FindClose
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetCurrentThread
HeapAlloc
HeapFree
WideCharToMultiByte
MultiByteToWideChar
GetModuleFileNameW
GetModuleFileNameA
GetModuleHandleExW
ExitProcess
LoadLibraryExW
GetProcAddress
FreeLibrary
TlsFree
TlsAlloc
InitializeCriticalSectionAndSpinCount
SetLastError
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwind
EncodePointer
OutputDebugStringW
TerminateProcess
GetCurrentProcess
InitializeSListHead
GetModuleHandleW
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetSystemInfo
TlsSetValue
TlsGetValue
GetCurrentThreadId
SwitchToThread
Sleep
DeleteCriticalSection
TryEnterCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetLastError
RaiseException
DecodePointer
GetProcessAffinityMask
user32
OffsetRect
ChangeDisplaySettingsExW
EnumDisplayMonitors
CreateCaret
DestroyCaret
ShowCaret
SetCaretPos
UnregisterClassA
CharUpperW
CharLowerW
GetKeyboardState
ToAscii
MapVirtualKeyW
ActivateKeyboardLayout
GetKeyboardLayout
SendInput
DdeInitializeW
DdeUninitialize
DdeConnect
DdeDisconnect
DdeClientTransaction
DdeCreateStringHandleA
DdeFreeStringHandle
CreateMenu
CreatePopupMenu
DestroyMenu
TrackPopupMenu
GetMenuInfo
SetMenuInfo
RemoveMenu
InsertMenuItemW
GetMenuItemInfoW
SetMenuItemInfoW
GetLastInputInfo
UpdateLayeredWindow
EnumDisplayDevicesA
CharNextW
EnumDisplayDevicesW
RegisterWindowMessageA
PostMessageA
GetProcessWindowStation
GetUserObjectInformationW
SetRect
GetCursor
SetCursor
MessageBoxW
MessageBoxA
GetWindowRect
SetWindowLongW
IsIconic
GetSysColor
GetPropW
SetPropW
EndPaint
BeginPaint
GetSystemMetrics
IsWindowEnabled
EnableWindow
KillTimer
EnumDisplaySettingsW
SetFocus
GetDlgItemTextW
GetDlgItemTextA
SetDlgItemTextW
SetDlgItemTextA
GetDlgItem
EndDialog
DialogBoxIndirectParamW
DialogBoxParamW
SetWindowPos
MoveWindow
ShowWindow
DestroyWindow
CreateWindowExW
GetClassInfoExW
RegisterClassExW
DefWindowProcW
PostMessageW
SendMessageTimeoutW
SendMessageW
PeekMessageW
DispatchMessageW
TranslateMessage
GetMessageW
IsClipboardFormatAvailable
EmptyClipboard
GetClipboardData
SetClipboardData
CloseClipboard
OpenClipboard
wsprintfW
ReleaseDC
GetDC
GetClipboardFormatNameA
RegisterClipboardFormatW
RegisterClipboardFormatA
ScreenToClient
GetCursorPos
GetKeyState
GetDoubleClickTime
GetWindow
EnumWindows
GetClassLongW
IsWindowVisible
UnregisterClassW
SetWindowPlacement
GetWindowPlacement
GetWindowDC
SetWindowTextW
GetMenuBarInfo
FlashWindowEx
ShowWindowAsync
IsWindow
MonitorFromPoint
GetAncestor
FindWindowExW
EnumChildWindows
RemovePropW
SetForegroundWindow
SetParent
GetForegroundWindow
WaitForInputIdle
PostThreadMessageW
GetWindowInfo
LoadCursorW
GetWindowThreadProcessId
CopyRect
ClientToScreen
SetCursorPos
InvalidateRect
MapWindowPoints
GetWindowTextW
InflateRect
SetWindowRgn
UpdateWindow
DeleteMenu
GetSystemMenu
DrawMenuBar
SetMenu
GetActiveWindow
SetTimer
IsZoomed
ReleaseCapture
SetCapture
GetCapture
GetQueueStatus
GetFocus
GetWindowLongW
PtInRect
CallWindowProcW
PostQuitMessage
AttachThreadInput
GetMessageTime
TrackMouseEvent
LoadStringW
CloseWindow
MsgWaitForMultipleObjects
GetMonitorInfoW
MonitorFromWindow
SystemParametersInfoW
CreateIconIndirect
DestroyIcon
LoadIconW
GetParent
GetWindowTextLengthW
GetDesktopWindow
GetClientRect
SetRectEmpty
ole32
RegisterDragDrop
RevokeDragDrop
DoDragDrop
OleSetClipboard
OleGetClipboard
OleFlushClipboard
OleIsCurrentClipboard
CoUninitialize
CoTaskMemFree
CoInitialize
CoSetProxyBlanket
CoInitializeEx
CoMarshalInterThreadInterfaceInStream
CoCreateInstance
CreateBindCtx
ReleaseStgMedium
CoGetInterfaceAndReleaseStream
PropVariantClear
OleUninitialize
OleInitialize
CoTaskMemAlloc
CoTaskMemRealloc
MkParseDisplayName
oleaut32
LoadTypeLi
VarUI4FromStr
LoadRegTypeLi
SysStringLen
VariantClear
VariantInit
SafeArrayCreateVector
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayDestroy
SysAllocStringByteLen
SysStringByteLen
SysAllocStringLen
SysAllocString
SysFreeString
d2d1
ord1
ord2
dwrite
DWriteCreateFactory
crypt32
CertVerifySubjectCertificateContext
CertFindCertificateInStore
CertCloseStore
CertCreateCertificateContext
CryptUnprotectData
CryptProtectData
CertGetCertificateContextProperty
CertFreeCertificateContext
CryptVerifyMessageSignature
CryptGetMessageCertificates
CertOpenStore
CertEnumCertificatesInStore
CertGetValidUsages
CertOpenSystemStoreA
CertFreeCertificateChain
CertGetCertificateChain
CertDuplicateCertificateContext
winspool.drv
GetPrinterW
OpenPrinterW
EnumPrintersW
ClosePrinter
winmm
mixerClose
mixerOpen
mixerGetDevCapsA
waveInMessage
waveOutMessage
waveOutGetDevCapsA
mixerGetID
waveInClose
mixerGetLineInfoA
waveInGetDevCapsA
waveInGetNumDevs
mixerGetLineControlsA
mixerGetControlDetailsA
waveOutPause
waveOutRestart
waveInPrepareHeader
waveInUnprepareHeader
waveInAddBuffer
waveOutGetNumDevs
waveOutGetPosition
waveOutReset
waveOutWrite
waveOutUnprepareHeader
waveOutPrepareHeader
waveInStart
waveInStop
waveInReset
waveInGetPosition
mixerSetControlDetails
waveOutGetDevCapsW
waveInOpen
waveOutClose
timeEndPeriod
timeBeginPeriod
timeGetDevCaps
waveOutOpen
timeGetTime
timeKillEvent
timeSetEvent
oleacc
AccessibleObjectFromWindow
ws2_32
getaddrinfo
getsockopt
freeaddrinfo
listen
accept
getnameinfo
getpeername
shutdown
WSASocketW
WSAIoctl
WSAAsyncSelect
WSAGetLastError
WSACleanup
WSAStartup
getservbyname
gethostname
WSAEventSelect
WSAEnumNetworkEvents
getsockname
WSAAddressToStringA
__WSAFDIsSet
bind
connect
ioctlsocket
recv
recvfrom
select
send
sendto
setsockopt
WSACloseEvent
WSACreateEvent
getservbyport
gethostbyname
gethostbyaddr
socket
ntohs
ntohl
inet_ntoa
inet_addr
htons
htonl
WSASetLastError
closesocket
gdi32
StretchBlt
SetStretchBltMode
ExtCreatePen
StrokePath
SelectClipPath
FillPath
EndPath
BeginPath
AbortDoc
EndPage
GetFontData
EnumFontFamiliesExW
StartPage
DeleteObject
StartDocW
StretchDIBits
SetPolyFillMode
SaveDC
ResetDCW
RestoreDC
GetStretchBltMode
CreatePalette
Rectangle
CreateSolidBrush
CreateICW
CreateDCW
DPtoLP
ExtTextOutW
ExtTextOutA
SetWorldTransform
GetWorldTransform
GetTextMetricsW
GetTextMetricsA
SetTextAlign
SetTextColor
SetTextCharacterExtra
SetGraphicsMode
SetBkMode
SetBkColor
IntersectClipRect
GetTextExtentPoint32W
GetTextExtentPoint32A
GetTextColor
GetSystemPaletteEntries
PolyBezierTo
LPtoDP
GetTextAlign
GetTextCharacterExtra
GetCurrentObject
GetClipRgn
GetBkMode
GetBkColor
EnumFontFamiliesW
EnumFontFamiliesA
CreateRectRgn
CreateFontIndirectA
GdiFlush
MoveToEx
SelectClipRgn
OffsetRgn
LineTo
CreatePen
CombineRgn
GetClipBox
CreateRectRgnIndirect
GetDeviceCaps
GetDIBits
CreateCompatibleBitmap
SelectPalette
RealizePalette
GetICMProfileA
SetPixel
GetStockObject
CreateFontIndirectW
CreateDCA
CreateBitmap
GetObjectW
BitBlt
CreateDIBSection
SetDIBitsToDevice
SelectObject
DeleteDC
CreateCompatibleDC
GdiAlphaBlend
EndDoc
msimg32
AlphaBlend
advapi32
CryptDestroyHash
OpenProcessToken
GetTokenInformation
CredWriteA
CredReadA
CredFree
InitializeAcl
InitializeSecurityDescriptor
MakeSelfRelativeSD
SetSecurityDescriptorControl
SetSecurityDescriptorDacl
SetEntriesInAclW
SetSecurityInfo
RegEnumKeyExW
RegOpenKeyA
DeregisterEventSource
RegisterEventSourceW
ReportEventW
CryptDestroyKey
CryptSetHashParam
CryptGetProvParam
CryptGetUserKey
CryptExportKey
CryptDecrypt
CryptSignHashW
CryptEnumProvidersW
CryptReleaseContext
CryptGenRandom
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegCreateKeyExA
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
CryptHashData
RegOpenKeyExA
RegQueryValueExA
CryptCreateHash
CryptGetHashParam
RegQueryInfoKeyW
RegSetValueExA
RegSetValueExW
CryptAcquireContextW
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
GetFileVersionInfoW
VerQueryValueA
VerQueryValueW
GetFileVersionInfoSizeW
comdlg32
CommDlgExtendedError
GetSaveFileNameW
PageSetupDlgW
PrintDlgW
GetOpenFileNameW
shell32
SHGetSpecialFolderPathW
ShellExecuteExW
SHGetFileInfoW
CommandLineToArgvW
ShellExecuteW
SHChangeNotify
SHGetSpecialFolderLocation
Shell_NotifyIconW
ord4
ord2
SHCreateItemFromParsingName
SHGetDiskFreeSpaceExW
SHFileOperationW
SHGetFolderPathW
SHAppBarMessage
SHGetSettings
SHBrowseForFolderW
SHGetFolderLocation
SHGetPathFromIDListW
SHCreateDirectoryExW
SHGetFolderPathA
shlwapi
ord219
StrStrIW
PathRemoveFileSpecW
PathFileExistsW
ord12
StrCmpW
StrDupW
AssocQueryStringW
PathAppendA
PathAppendW
StrRStrIW
wininet
InternetErrorDlg
msi
ord159
ord78
ord153
ord151
ord92
ord20
ord17
ord32
ord125
ord90
ord173
ord84
ord72
ord137
ord141
ord8
ord96
ord37
ord205
ord16
ord88
ord113
ord121
urlmon
CoInternetCompareUrl
CoInternetParseUrl
CopyStgMedium
comctl32
ImageList_GetIconSize
ImageList_Draw
mscms
CloseColorProfile
OpenColorProfileW
CreateColorTransformW
DeleteColorTransform
TranslateBitmapBits
secur32
LsaFreeReturnBuffer
LsaGetLogonSessionData
iphlpapi
GetAdaptersAddresses
dnsapi
DnsQuery_UTF8
DnsFree
ADLWMain
ActiveXWMain
AppEntryWinMain
AppInstallWinMain
CaptiveAppEntryWinMain
CaptiveCmdEntry
ExtendedAppEntryWinMain
FREAcquireBitmapData
FREAcquireBitmapData2
FREAcquireByteArray
FREAcquireNativeWindowHandle
FRECallObjectMethod
FREDispatchStatusEventAsync
FREGetArrayElementAt
FREGetArrayLength
FREGetContextActionScriptData
FREGetContextNativeData
FREGetFREContextFromExtensionContext
FREGetNativeContext3DHandle
FREGetObjectAsBool
FREGetObjectAsDouble
FREGetObjectAsInt32
FREGetObjectAsUTF8
FREGetObjectAsUint32
FREGetObjectProperty
FREGetObjectType
FREGetRenderMode
FREInvalidateBitmapDataRect
FREMediaBufferLock
FREMediaBufferUnlock
FRENewByteArray
FRENewObject
FRENewObjectFromBool
FRENewObjectFromDouble
FRENewObjectFromInt32
FRENewObjectFromUTF8
FRENewObjectFromUint32
FREReleaseBitmapData
FREReleaseByteArray
FREReleaseNativeWindowHandle
FRESetArrayElementAt
FRESetArrayLength
FRESetContextActionScriptData
FRESetContextNativeData
FRESetObjectProperty
FRESetRenderSource
FRETrace
NAIPWMain
RuntimeInstallerWinMain
Name
.text
Size
8.9MB
Virtual Size
8.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
5.0MB
Virtual Size
5.0MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
276KB
Virtual Size
1.2MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
209KB
Virtual Size
209KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
576KB
Virtual Size
576KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=75, id=264, version=24215,
count=237, id=260, productName=VS2015 UPD3.1 build 24215, version=24215,
count=7, id=199, version=41118,
count=2, id=207, version=65501,
count=17, id=206, version=65501,
count=52, id=241, version=40116,
count=188, id=243, version=40116,
count=40, id=242, version=40116,
count=3, id=261, version=23013,
count=28, id=259, version=24123,
count=59, id=261, version=24123,
count=34, id=260, version=24123,
count=568, id=260, version=24233,
count=4, id=208, version=65501,
count=798, id=1, productName=Unmarked objects,
count=53, id=203, version=65501,
count=995, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=3, id=151,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
HabboAirPlus_Standalone_x86/Adobe AIR/Versions/1.0/Resources/Adobe AIR.vch
- SHA256 6bbbd95a80f0a615366e4d07ee215995383f894b75ce5b7015a5db04b49c3993
- MD5 dfb3b039e734030b3bae244992f06825
- SHA1 a7ea3f84bea2a14d329dfbd927107025e78930ce
- SHA512 2ed465ea6d88c94c83bef59863308a2c3d91b0b20490718fb3216183660410336f9a88f7840ba65763ba586ec58ed63e08ef587b7059125dab19ed836d1c5ec0
- SSDEEP 6144:3hno7IfnwKp9YVSqy0Pphwfs2a39L05iOGhbhrNoZQEYRe+GFYqhtVe7P8p+WZZc:3heIIQfxk9LAl0bhrNoZQPRLE5V+WZMx
- TLSH T1C17412A29F082045AE3F189D597CFACE6763BF806193AFA44A42F6487FDCD3A0155D31
- MD5 SHA1 SHA512 SSDEEP TLSH
HabboAirPlus_Standalone_x86/Adobe AIR/Versions/1.0/Resources/CaptiveAppEntry.exe
- IMPHASH b2fc0f5791bec90017f316a9652bd713
- SHA256 9f1816a256ff9fe42b85878f0a994ac86ad05a288acab9b5129b45a4dbb78b3e
- MD5 4c3cba49dce6741a747401bd1003ba88
- SHA1 5de55d147cc1deeb746f06fa9ae2da7a0b955313
- SHA512 b75d246bcd98d0ff59110873ca83aa1646adf1a1f6fb8aacb2899e15e16cd94567da8deca16c7b92b562765d8b881ba4b0d3c613556293f47afd8ef16648cbc9
- SSDEEP 1536:2/KkOPftjb1M85cG9yUt346RKTrZfItQfssWncdfD3GQhEHYmMNV96MMsNbaiwrU:HjbZ5cYys46khaS3ftyiw7o7
- TLSH T1CE831703B6E18871F5B32A3508B586605A3FBE225F748AEF234416AD4E385D0AD35F77
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
5440
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB paths
d:\adobe\AIR\code\build\win\results\Release\info\CaptiveAppEntry.vc2015.pdb
kernel32
SetStdHandle
WriteConsoleW
GetProcAddress
ExitProcess
HeapAlloc
GetProcessHeap
GetModuleHandleW
LoadLibraryW
GetFileAttributesW
CreateFileW
GetUserDefaultUILanguage
GetModuleFileNameW
GetStdHandle
GetCommandLineW
RaiseException
DecodePointer
SetFilePointerEx
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetCurrentProcess
TerminateProcess
FlushFileBuffers
WriteFile
CloseHandle
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
MultiByteToWideChar
WideCharToMultiByte
RtlUnwind
GetLastError
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
GetFileType
GetModuleFileNameA
GetModuleHandleExW
GetACP
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStringTypeW
GetConsoleCP
GetConsoleMode
HeapSize
HeapReAlloc
HeapFree
shell32
CommandLineToArgvW
user32
MessageBoxExW
shlwapi
StrCmpW
AmdPowerXpressRequestBetterBatteryLife
NvOptimusDisablement
Name
.text
Size
42KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
30KB
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
920B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=11, id=241, version=40116,
count=125, id=243, version=40116,
count=24, id=242, version=40116,
count=2, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=17, id=259, version=24123,
count=29, id=261, version=24123,
count=17, id=260, version=24123,
count=15, id=203, version=65501,
count=132, id=1, productName=Unmarked objects,
count=1, id=265, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
HabboAirPlus_Standalone_x86/Adobe AIR/Versions/1.0/Resources/CaptiveCmdEntry.exe
- IMPHASH 83dcfffbd74250b0342bec041553d421
- SHA256 9f02b37794a806d8eb87030797eed3960431f0bdaed8773b463d60a3970950e3
- MD5 75ceecbe46fe62fdc524173265f1be5e
- SHA1 a40d62bc4bf3ea940eb9da8ed37f2b3960b9a23e
- SHA512 6fed1618d81a07d02c6b9176fac016c25e27556fa9eec8d1a9d2a791ecb5baa18f2304699f930826cf842d891a2b678ea07b65f2805581029d50a7a0e9c6d119
- SSDEEP 1536:lb7Ikkfretbwmty4WmeiHZ9bGOX5BrO3rsiYrBxOJ+Yf+osWU6cdWWWGQhEHYmM+:lftbf/WviHZpGgJO3rBHJ+KEWBydP3dV
- TLSH T1A6931713B5E19431E5B32A3518B498605A3EFE614F74CAEF2388126E0F746C19E35B7B
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
e5:5d:9d:5c:25:c2:e9:16:ea:79:95:fd:84:34:b2:b9:4e:98:c1:8c:e5:61:4c:0e:1b:29:64:33:81:26:26:d5
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=886255,CN=Harman International Industries\, Incorporated,OU=Information Technology,O=Harman International Industries\, Incorporated,L=Stamford,ST=Connecticut,C=US,2.5.4.15=#131450726976617465206f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Jul 30, 2024
SERIALNUMBER=886255,CN=Harman International Industries\, Incorporated,OU=Information Technology,O=Harman International Industries\, Incorporated,L=Stamford,ST=Connecticut,C=US,2.5.4.15=#131450726976617465206f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=886255,CN=Harman International Industries\, Incorporated,OU=Information Technology,O=Harman International Industries\, Incorporated,L=Stamford,ST=Connecticut,C=US,2.5.4.15=#131450726976617465206f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=886255,CN=Harman International Industries\, Incorporated,OU=Information Technology,O=Harman International Industries\, Incorporated,L=Stamford,ST=Connecticut,C=US,2.5.4.15=#131450726976617465206f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
01:27:49:02:31:41:c9:77:7a:bc:f7:6d:61:4e:6f:84
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 20, 2023 - Sep 21, 2026
Subject
CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US
Serial Number
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 14, 2023 - Oct 13, 2034
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
6
Entry point
5536
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB paths
I:\Adobe\AIR51\code\build\win\results\Release\info\CaptiveCmdEntry.vc2015.pdb
kernel32
SetStdHandle
WriteConsoleW
GetProcAddress
ExitProcess
HeapAlloc
GetProcessHeap
GetModuleHandleW
LoadLibraryW
GetFileAttributesW
CreateFileW
GetUserDefaultUILanguage
GetModuleFileNameW
GetStdHandle
GetCommandLineW
RaiseException
DecodePointer
SetFilePointerEx
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetCurrentProcess
TerminateProcess
FlushFileBuffers
WriteFile
CloseHandle
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
MultiByteToWideChar
WideCharToMultiByte
RtlUnwind
GetLastError
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
GetFileType
GetModuleFileNameA
GetModuleHandleExW
GetCommandLineA
GetACP
CompareStringW
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
GetStringTypeW
GetConsoleCP
GetConsoleMode
HeapSize
HeapReAlloc
HeapFree
shell32
CommandLineToArgvW
user32
MessageBoxExW
shlwapi
StrCmpW
PathAppendW
PathRemoveFileSpecW
msi
ord90
AmdPowerXpressRequestBetterBatteryLife
NvOptimusDisablement
Name
.text
Size
45KB
Virtual Size
45KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
30KB
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
920B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=11, id=241, version=40116,
count=124, id=243, version=40116,
count=24, id=242, version=40116,
count=2, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=17, id=259, version=24123,
count=29, id=261, version=24123,
count=17, id=260, version=24123,
count=15, id=203, version=65501,
count=132, id=1, productName=Unmarked objects,
count=1, id=265, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
HabboAirPlus_Standalone_x86/Adobe AIR/Versions/1.0/Resources/DDrawFontSupport.dll
- IMPHASH 1b62ca9c4e3eb0ea9c94b05e2dbf5086
- SHA256 5bd508adb8246957a7bd0be81476fc82c66782fdc7047b481ec6d6680bab6d1f
- MD5 6af4821144b4fe4975788147206f462b
- SHA1 1ef993768d0d069fec0c7e050ca6d96f1d195d70
- SHA512 a36ecd6a48f712311ed5a40e5f491b284fa3f1367451370d942e868d1a33e09b1bb8fd8d9110fdaac5a79c519a070092e34aa0e578760d8994f8ecb692ce1c0f
- SSDEEP 384:7p/qTnhTBkOKMMDv6ki2UirSzKzCKjd3gSGBkSm:70jhTBkgUy2/OzKzCKZik7
- TLSH T168927D63AB645193DF4C4EFDA0E2E9278C7CFB414ED81047B31B830D2D45395BAAA61A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Codesign digest Mismatch
File was altered after it was signed.
PE Signature issue
Digest
e2:dd:4e:46:7d:c9:db:8c:51:a2:81:cf:fa:3a:b3:c8:95:bf:3a:a5:11:89:4e:4c:9e:f5:d0:47:1d:be:66:71
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
SERIALNUMBER=3489342,CN=Wipro Connected Services\, Inc.,OU=Wipro Engineering – Connected Services,O=Wipro Connected Services\, Inc.,STREET=445 Indio Way,L=Sunnyvale,ST=California,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Mar 2, 2026
SERIALNUMBER=3489342,CN=Wipro Connected Services\, Inc.,OU=Wipro Engineering – Connected Services,O=Wipro Connected Services\, Inc.,STREET=445 Indio Way,L=Sunnyvale,ST=California,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Subject
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
SERIALNUMBER=3489342,CN=Wipro Connected Services\, Inc.,OU=Wipro Engineering – Connected Services,O=Wipro Connected Services\, Inc.,STREET=445 Indio Way,L=Sunnyvale,ST=California,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
08:e6:ca:cb:ed:86:b2:9b:46:ff:44:49
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 11, 2026 - Feb 12, 2027
Subject
CN=Globalsign TSA for CodeSign1 - R6,O=GlobalSign nv-sa,C=BE
Serial Number
01:00:0b:20:05:b3:94:07:62:db:3e:36:79:94:9b:a9
Issuer
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 11, 2025 - Dec 10, 2034
Subject
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jun 20, 2018 - Dec 10, 2034
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Serial Number
45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Dec 10, 2014 - Dec 10, 2034
Minor OS version
0
Major OS version
6
Entry point
5361
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
d:\adobe\AIR\code\build\win\results\Release\DDrawFontSupport.pdb
dwrite
DWriteCreateFactory
vcruntime140
__std_type_info_destroy_list
_except_handler4_common
memset
api-ms-win-crt-runtime-l1-1-0
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_crt_atexit
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_initialize_narrow_environment
_cexit
kernel32
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
DrawColourGlyphRun
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
916B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.gfids
Size
512B
Virtual Size
20B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
304B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=24123,
count=1, id=259, version=24123,
count=10, id=261, version=24123,
count=11, id=260, version=24123,
count=5, id=257, version=27412,
count=29, id=1, productName=Unmarked objects,
count=3, id=265, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
HabboAirPlus_Standalone_x86/Adobe AIR/Versions/1.0/Resources/Licenses/cairo/COPYING
- SHA256 4fdcde2e1f6aeb1df3d767a8330aff6ed6e6c0031d3c8ea72e95620613b4f827
- MD5 ef5a4e944085278eb1a7b7a881cceaf6
- SHA1 f42c3e7ec4cd0349c9a44178811eb0da809b68fe
- SHA512 c3fb06941e0374041605e3cd956221469b0e3db269969e64c324c649a8b540a1200065e772c204b2d74cb728f92be882215dcb991a5fd13200ba54b5c745fb48
- TLSH T1C73141A36B89037306C60785535F35CBF31A41E8B43F746F746889582536C7683FAAE9
- MD5 SHA1 SHA512 TLSH
HabboAirPlus_Standalone_x86/Adobe AIR/Versions/1.0/Resources/Licenses/cairo/COPYING-LGPL-2.1
- SHA256 6f900e8acd64a5451373d39271cdb4ff55e073855574b0b1ad99a86c728545a5
- MD5 86ce596bc517e1d7c5fe6149c75b1bdf
- SHA1 01a50bc2cba30010116c6db30a2bce318a7a40de
- SHA512 2d19f2cf7604a9f83784585afe36a90cf323d34708687b1f4df72b445438df6bd8d8d686a1f1e5fa6df7063a3942c1d061182360561c9dcf8fff1c9899695e75
- SSDEEP 384:VjIBNk+x/vIq001qX6sT6AATeINgKP+nHQg1fgcmmItyOQeMvZrWEJZnjuo4:V0Bqs/qOTeDnXqFXOrlJZnjuo4
- TLSH T1F2C2853AB70603B206E202505A0FA4DEE31BD07932675A6474DDC19D236BC3553FBBEA
- MD5 SHA1 SHA512 SSDEEP TLSH
HabboAirPlus_Standalone_x86/Adobe AIR/Versions/1.0/Resources/Licenses/cairo/COPYING-MPL-1.1
- SHA256 fa01277004aff314888151ea523bdf390992892e13523984f221695d48c7455b
- MD5 1b8b981cbb6b2b3f93c43b1915bdf812
- SHA1 992f31454b275eb1b85c802c278363d847c301b2
- SHA512 0b169c79d54bc05e4bb500a38e28ddc964f6ad33f8ea090410de0fd9a5070bd6f8da10f013a81015be9705af63569c05bda404d43533747869c597b7235226b3
- SSDEEP 384:buWs7CnfRzQeCrmKr2UQDjYi4dd7KGBKPm0XgUVfVq/XBXC1UQlyX:ds7Cc5/QDpZsKe6fVq/XB0UQlyX
- TLSH T15BC2737B764D137216F202729F17A8CFF31AA02F666A1060719DC11C2FB796453FA2AD
- MD5 SHA1 SHA512 SSDEEP TLSH
HabboAirPlus_Standalone_x86/Adobe AIR/Versions/1.0/Resources/Licenses/pcre2/COPYING
- SHA256 4f8defd8b03d6e0df53c3a37fd37caf2bd8a5e8e77f7886fe3557ba4cda45e8c
- MD5 1f800c179f381b72e818aab4ba25c504
- SHA1 114565c21ebbb35caf43e8f1885431f51ade6f0d
- SHA512 4df4315b97754da7c9906fa00abdb1e41c41a15210406e18ed5e79afeaccdd0cdbad724aa057170063d063231bfb9b705ed9bf1de34708b2c1ab400161918db2
- TLSH T17FB012FC0446037B8F950C909E44939A732DD10C564B05563864C1246019828F2FB8AC
- MD5 SHA1 SHA512 TLSH
HabboAirPlus_Standalone_x86/Adobe AIR/Versions/1.0/Resources/Licenses/pixman/COPYING
- SHA256 6e9f39a63e6e8ae87de8afdf5e7e9571b964a52717614edb84675016042f6afc
- MD5 1168f6da9f901d48731a7d51940fecad
- SHA1 8ae6889f5c1bc2e9c4645a7ad35eb305018d5035
- SHA512 48b5bff9ceb8526e1b3ecdddeed2d9a9403198a16d17d544ec3412ce6bdefb62fc967d38f2927558f8b541a2993bf9e1aa67e717dd8b98da4fd886bbb55a5588
- TLSH T11041ED4E764863123B7613E7D654D8CCE13AB6EE3A4B0D46F46DD3841E2689982B7C0A
- MD5 SHA1 SHA512 TLSH
HabboAirPlus_Standalone_x86/Habbo.exe
- IMPHASH b2fc0f5791bec90017f316a9652bd713
- SHA256 d531b155dbdba9ab03c1189ddd61f4fdc21a9ce6b77073f6cb8941a09652e0ce
- MD5 2b6d9442bc9bc1c7be47133f924f3bf6
- SHA1 a63b4bf94b2e34517c897d54d05852d3a4a9891a
- SHA512 169edb966aad5d7ec2be9037fd8409e7bc509e1cc6a45899fa16017cad70438ec90878b5480a69729f1898c470ff11ad23ce772208ae0f0f6d630981df302dba
- SSDEEP 1536:U/KkOPftjb1M85cG9yUt346RKTrZfItQfssWncdfD3GQhEHYmMNV96MMsNbaiwr8:5jbZ5cYys46khaS3ftyiwVze7
- TLSH T1AC94CE016694881DF3B51D317B7CE1731526BFCA8B20495EF9CC2F5F3B688B04A66B61
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
5440
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB paths
d:\adobe\AIR\code\build\win\results\Release\info\CaptiveAppEntry.vc2015.pdb
kernel32
SetStdHandle
WriteConsoleW
GetProcAddress
ExitProcess
HeapAlloc
GetProcessHeap
GetModuleHandleW
LoadLibraryW
GetFileAttributesW
CreateFileW
GetUserDefaultUILanguage
GetModuleFileNameW
GetStdHandle
GetCommandLineW
RaiseException
DecodePointer
SetFilePointerEx
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetCurrentProcess
TerminateProcess
FlushFileBuffers
WriteFile
CloseHandle
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
MultiByteToWideChar
WideCharToMultiByte
RtlUnwind
GetLastError
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
GetFileType
GetModuleFileNameA
GetModuleHandleExW
GetACP
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStringTypeW
GetConsoleCP
GetConsoleMode
HeapSize
HeapReAlloc
HeapFree
shell32
CommandLineToArgvW
user32
MessageBoxExW
shlwapi
StrCmpW
AmdPowerXpressRequestBetterBatteryLife
NvOptimusDisablement
Name
.text
Size
42KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
30KB
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
347KB
Virtual Size
346KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=11, id=241, version=40116,
count=125, id=243, version=40116,
count=24, id=242, version=40116,
count=2, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=17, id=259, version=24123,
count=29, id=261, version=24123,
count=17, id=260, version=24123,
count=15, id=203, version=65501,
count=132, id=1, productName=Unmarked objects,
count=1, id=265, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
HabboAirPlus_Standalone_x86/HabboAir.swf
- SHA256 07f35e6da70d87286dc669bca30a0aace689d3a5ec45c16a9697d898ce941693
- MD5 8fc18e80ae8356b38d10b609b638f550
- SHA1 3b4f57b87fea58585971af73fa6c76c8d3fcac15
- SHA512 ec9b5eb3c8e895e0861f1b74697e0a30e85ff7c8ab3c026463aa0277c316ff0aa081c6b4196dde7c91c700ba4a739b696fe3610825348454c7339df353e50c6c
- SSDEEP 196608:Mf9/KfNpmmvSaDItrRI89huA5OIkpoaG9+PiT+Y24uI2ti7AAcu4/sIjz+6q:Mf9INJSaDQR3cAUIOG9lTsdti7nt4/sD
- TLSH T1CEB633C229DCE82D5EB01AD5D2DECD5560FD2632472071E15CFAC02F18AB7BCF19A691
- MD5 SHA1 SHA512 SSDEEP TLSH
HabboAirPlus_Standalone_x86/HabboCustomLauncher.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 0b516897d1fb6e66f3735290b7f3d817ed2442b0bd368e610845c5488a7319d0
- MD5 5f05583242b55b75cdc531228a5a0033
- SHA1 c8bcff078f14fa3e5ebed0bdc167d74ea051ad5f
- SHA512 a6094ddc9c933f46a7b74a999d93294d2e7fe86efb2a2014ede5f44d9c8b6f1dc218dbac54f074faa431b73e45fca7c29105b04772cea13520e94c85f8a66c96
- SSDEEP 768:8jDvbQjnqBz2RWmC7jdmv+UIqZK8RWxpAflLjARWIpAafq:8PbQjnm2RKHoIqZUxpAflLj1IpAafq
- TLSH T16C341F493D608159E5131F34CAA5E53982397D2AAE384DC330CC7FAF39F6911D90EA2B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
136622
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\lilit\Desktop\HabboCustomLauncher-minimal\obj\Release\HabboCustomLauncher.pdb
mscoree
_CorExeMain
Name
.text
Size
125KB
Virtual Size
125KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
102KB
Virtual Size
101KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
HabboAirPlus_Standalone_x86/META-INF/AIR/application.xml
- SHA256 22ab7c147bd983ff68c21481a8f1167e804798834e0f33f0f9de07c6f4676170
- MD5 1833fd79e4b026e02e2f57edf7bc7043
- SHA1 03eb866ab73e98a01a9de8e1b29800a9e0904c42
- SHA512 9cadc0132fa0095d2270f26fbba766580990a407d38d7204eeabd3cf7c8254a8a1bdad80d1006f46d08340eb68840874633535058d998b088eee88206425cb80
- TLSH T14C21FE4284D031F34331E297B626A422DA36AA7F89DE480476C9420B9F7E84847E3743
- MD5 SHA1 SHA512 TLSH
HabboAirPlus_Standalone_x86/META-INF/AIR/license.txt
- SHA256 f519b3078604cf6898978dba7be4bc4cf05b49fd671bfa19ceb1ab4d99edf059
- MD5 59df8041e974f6cc6500687cd4a6b6e8
- SHA1 e00add3bea56979483aa6360497cc2ab6d7a786b
- SHA512 a077ab843cc0dee828cc5d1936575a752d7b8dead1f0aff25f893b52f93fa2657262a3107a099242a8685ef2a9eaf0f67d10eb746175fb741907ae39af0490da
- TLSH T1C311EBD565947AD33E1D0CB2DF11EA64145C0E73C60E21C860F101507D82DB8F050ED7
- MD5 SHA1 SHA512 TLSH
HabboAirPlus_Standalone_x86/README.txt
- SHA256 e06c0e0ac103c07cafe02a231ef41e8759231eade342d816ddddc8b16b057a36
- MD5 8890b755a32f16d01fbb6677ef6ee5f9
- SHA1 a8ed46b54bb26849ec476a26f0f2366d0c5922e6
- SHA512 c89424aaf3d7d6a816aa552fdf56f56543ed9c53233fc43c4278c6931ca51ba20688519484058c84cb4323646b4778a144d06923a3f1ea114ea645c9cc1a197a
- TLSH T158C0221A833383F60ED5469E872CA1A1BE1B41C93110022ABC25200E209607C1026F80
- MD5 SHA1 SHA512 TLSH
HabboAirPlus_Standalone_x86/habbo_logo.png
- SHA256 04699235371ffe45b7ef346632fd6336badcd806d63358042dfa0af5bf214320
- MD5 9c64bc29c62dc2a1a19be1fe3458a5fc
- SHA1 76e093c575183e6aab0ece45766bbc0d2d4b6579
- SHA512 610c84651cf651e7a4ca59e1db798d68d6f50a6fe8429a6e1ee2a5e38c5df7635c5d1d88ab5317fcd1297ac88f6cc484a91e140d28e08aaa34477f5dd95ccbd0
- TLSH T158F054E7B3594B9342201E9809255800FF3046090E270EC70283A45904D393C85C032B
- MD5 SHA1 SHA512 TLSH
HabboAirPlus_Standalone_x86/icon128.png
- SHA256 aae05764879b16a5b4476a5ddc5696c15fb235d699b41967788433eb1e10c388
- MD5 040636ba26c3eadae9b6c0cdca4d8d0c
- SHA1 341bdcfa8efbcb62feea43f407b97f3a312d271c
- SHA512 b3c53274dc5cad0ee563715591826d6615b9f1f5f46ff575ca8321788ee1d5e47667803c0eccbcb84ad38d6ea60e8014b4a9f90f67f31184a5b4cc03d6ee4190
- TLSH T1622150CED9406D124D09934538E7B037EE4354808DB08626FDDACC869EA8AE5902A4DF
- MD5 SHA1 SHA512 TLSH
HabboAirPlus_Standalone_x86/icon16.png
- SHA256 0a2fd5df8b646db464afb18a5e2a49b7df0c11323bd594cd65f86fe3457fcc01
- MD5 8d28fe2801dbebdc803378dc41af8845
- SHA1 28106f1edf87fabdb3b4c597083a5c3693d40196
- SHA512 312288fd97dbd72f3a7f77b97410821c704a0c46b50d18d490167a25a4ff231af0956058ffebd647ffe6bf1c22033228d80520fd2d2c870bd66cffde4ead1b09
- TLSH T1DA11259AE9517C014769D5822DE35427AD2A1D50D6D0E471ACDECC1308A4DF4882DACF
- MD5 SHA1 SHA512 TLSH
HabboAirPlus_Standalone_x86/icon256.png
- SHA256 514f589871d59a91365c80938eb92b16d8898b3d9c1a31ef8398ab9a4d0aca7e
- MD5 f1a4fae58fb2548b6d5dd5dc56e2b80a
- SHA1 395463649e9a02ac09eaf41908a735323592ed91
- SHA512 65acba0814ae5f47cecb29711fe0688ae0adcb43880fa71478935cd1f244752f7267fe62570f6ee4a4609e1ef5f93500e4fe89809c5f2859c42beb08979d2083
- TLSH T1DA11C5D65F7803F1E1B6C8B36E59C0F0CB2747C7D2A3F111031848B5256FB245042185
- MD5 SHA1 SHA512 TLSH
HabboAirPlus_Standalone_x86/icon32.png
- SHA256 ba023aa6a71860426e03c16ee944fac8742dfff70befdff657556f8fac8fe094
- MD5 97e3e23f43411f019226b46ee0f00113
- SHA1 410988f7f1e049b7bfb522734b84934af91d5a29
- SHA512 fad47e9fa288cf1e7e2c43c82138f67acf374b1ee978fce1e7b6c5ae98578620c6f666e312fe8f3e1e8b18d33e42ec241d3db35cb8772ba0a9ac18647cdb13c4
- TLSH T19011659AF9D26C00835CE6811CE7842B5D170D90A9E0E476BCDEC82309744F9C82CBCF
- MD5 SHA1 SHA512 TLSH
HabboAirPlus_Standalone_x86/icon48.png
- SHA256 c22e391b0054ebe6178520d0ab6ecc0b28de36d232b66a6eb21a5723a3908508
- MD5 990a971f4d2adc69e4481eccdd101c51
- SHA1 7feb41b4736b8d561cea7ced3c492a101851fcd1
- SHA512 d8654fefe7167a8cf253b9fdb194e7baacfd31022752aa2e1322cb3b4cad17bbad9156736bdb915903e78251086bbc9182a267fe734c9b3969583b4ff7fc96d6
- TLSH T1971135DAE9522C01536CD5855CF25437A91A5EC0D9D1E4726CDECC2308F1CB8456DACF
- MD5 SHA1 SHA512 TLSH
HabboAirPlus_Standalone_x86/local_include/HabboRoomContent.swf
- SHA256 2d3f058d8aa59912da1857b92b072084221a285120f2a02c4f7f674c0e7d907d
- MD5 aab9c1fee7d13a729f716a88e6f0c3a6
- SHA1 ed9dc1ae086c821ca857f98efbc39f5d6f3819b7
- SHA512 e6d5100656ff8aa930888893fccc1c8f78d8cca3e94a6a400219dca827d56fca2b2f7d0c3f2cfc93926b0c8bed561954302902c669057beeae5771e737ddaadb
- SSDEEP 3072:TPKB5l+ANJWhTP1SLDP4amfPU5fpTZoM4nzhU6fsBi6HpvYRWgN/eVRt/o6XmOnr:TPslJJWhTPwLDQaaPU51Zmls0KpwxYaG
- TLSH T1D004122B09524D14DAE7D36325F8EFAE21691FD13582B423FFA287286830C25694E47F
- MD5 SHA1 SHA512 SSDEEP TLSH
HabboAirPlus_Standalone_x86/local_include/PlaceHolderFurniture.swf
- SHA256 c6713fff0a90a2bbca052d1cc80f2c6592b95158346819de828fb2a51f7498c9
- MD5 75e6e20cc8c86852fcb9f70293b9f642
- SHA1 30bc169aba27cbcac270dde47da201f454afdcda
- SHA512 209c4cc1d45e65c1b93b1c961d9ea53b8408f5a72d0b778ab66cfae560c2b64bc1416c4b7270d76aeda402c3575c9166a9cb34aae771d20d628ca39ca9e5a03d
- SSDEEP 192:GfN0JuxTqKe3nGJPoKKFmsk7T3PFjriNaU+gDSKuaG0InUIOCdVfjg:GfyYnZJPoPFU5fgDryZO+VM
- TLSH T1AD02BFE7320E28897582D820C79C083B4E067E12215B1FB6E33B0721AF7E4569DD01EE
- MD5 SHA1 SHA512 SSDEEP TLSH
HabboAirPlus_Standalone_x86/local_include/PlaceHolderPet.swf
- SHA256 a9cf10fa6946d4295c37da49d25e84bec5e50c156423f2d09e8aa8ce920d70ca
- MD5 3eb61f611a5f301859325e5942deca3b
- SHA1 db3d9879843a5832be1a914d1f2c380999dca6d2
- SHA512 d9353e1bdfcf03a664506ef6c077759d711166402bfbdb68278c76dd6cc0c629929f0acfcee5730180f49d80dbfa6eadcf06b16502797b2ad11f3bc3e713ea6c
- SSDEEP 384:kX3JScR5FRBT84wf5GBW2eYC/1D/q4aflpcDP2:WJScfB8FxGA2eYArYh
- TLSH T1F462C09D65C2B8AD9A4DE757183CFF4C94F4388ED17B8A03EC981320D5EA97103529BD
- MD5 SHA1 SHA512 SSDEEP TLSH
HabboAirPlus_Standalone_x86/local_include/PlaceHolderWallItem.swf
- SHA256 089b772f15b4b36c58a69728b6f6acaf7e09de3830f541e4d3b5661fb6938987
- MD5 2099d27732d39f6c20d0f4b51430f8a2
- SHA1 c4da89be28a311b8e7daa9c8ce778c4e67abdaee
- SHA512 de5fc0950b27b41a0827aa50806404c8df51c980ab9458fabaece0cdfb64e16ab4495dc115dfb58b212b20540bd0b4dbfaf355ab310eb90c7ca400b6018e3c69
- SSDEEP 192:HV0cIzrSwUo/slotVS0Ygoriw7FiqJO8OogF0/Oa+:H65zrS6kkVSDoqJtOocja+
- TLSH T15602BFDE4D724AE1CF5D59AF8D06B2C09CF3287D876046F61C5760B09A4981B32E107A
- MD5 SHA1 SHA512 SSDEEP TLSH
HabboAirPlus_Standalone_x86/local_include/SelectionArrow.swf
- SHA256 00a942253806b83a98f5898c5441000894c5b7a034c2cab8908e56bacf938f7b
- MD5 a1b8a8ef7fbca87651d5570aaa9cd1fb
- SHA1 3a79eb4906845300244868133955fe3c313f4e18
- SHA512 a801159658ec466a04df49cb51149ce75ed4052794e7f18434cb11a533806dc044cb7d89563888e2df5850f353c239580b35355e4786c5fee14b80eb2c8a316e
- SSDEEP 192:fOp6yIAsq7mapo4/dOmI3j0II3q9RuKpmnGupIvrSr:fOIxsoQdOd3jR9R5up/r
- TLSH T189F1AFCB386BC4257BCB9E83AB885BD7C84020554CDD4B2D37799B4DF4E8A994B4C229
- MD5 SHA1 SHA512 SSDEEP TLSH
HabboAirPlus_Standalone_x86/local_include/TileCursor.swf
- SHA256 3bfe55540fa1563a2fa20e16d3fc85ef858580cc98c33b231f1467d795aadc3f
- MD5 79d35c2f594eb42e697d19c1e256a3df
- SHA1 04996545dfb05904b9e8ea80ee00175404301a83
- SHA512 ceafe1e7176dda1f9f5df9e76fe3e9b98f53e9b95bf9e669e61de8ccfd6392a9b6fca52ce40295c842f21aca432a77e20ea70ef56927401631284e65782b5f85
- SSDEEP 192:YRi1UkdSKt2DtQ4qgMgih3P8Vd83K0NXvXTzh5:yi1UMSY6Q45Mg5mBXnD
- TLSH T15CF19D4F338939FC3D838E50D6F61C407F90A5391F7C1855C89FA9E65E939168A06AE1
- MD5 SHA1 SHA512 SSDEEP TLSH
HabboAirPlus_Standalone_x86/mimetype
- SHA256 d3fa026fce131ca31a82d2340f2d0aa2012ef764de81d7aca91aff7255dcb757
- MD5 60649e4365437442732ee45233b18f0c
- SHA1 ee3d2fdb51bf4c48956542988d2b3ba1c20f09e6
- SHA512 584bfa5823d82e1a4ce387387baa5f9a296bcc0a08939b2e7a757ba78c98306bb2b3be594c5aa6e83ab13c944f16c090e712cbc03d6dfadae639d1c170835525
- TLSH T1AFA002C7132301E01F97276B154A80B56026B4AC18C597A57943240B001A00F522305A
- MD5 SHA1 SHA512 TLSH