ZelloSetup (5)[.]exe

resource
unpack001/$PLUGINSDIR/InstallOptions.dll
unpack001/$PLUGINSDIR/System.dll

ZelloSetup (5).exe

IMPHASH c05041e01f84e1ccca9c4451f3b6a383
SHA256 41f7f163d85a7f2e5ecb97babe00f7db6b53c7040c924df27fd77da434cd4c66
MD5 4de61ce5de9af05d98f07499b7510df9
SHA1 05192f0cc51f54d6a7f64a4f8355971cb59d9a9b
SHA512 2fc0d47621295416631d211c236f0539a457c8804d1a9024d75a377d6ac593d13d35dc88166223d58aed1a991f19a9d290a4007925955c85713fbec4ca57c815
SSDEEP 98304:T2B7+SpqzbwrfjtMnzgZhz+gH/Kksxvc8:T2x+0qfWjqnkZhFH/KksV
TLSH
T17CF53302F199457FCC331B3A6BA7C4DB498B7EBF9614D4C72BD937443A26EC4291A221
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

7e:ce:cb:71:5b:17:96:b0:8c:fc:44:e6:3d:34:6a:35:a2:e3:a1:45:a7:5e:72:dc:a1:ad:5c:db:16:2b:82:70

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Zello Inc,O=Zello Inc,POSTALCODE=78703,STREET=Suite 450+STREET=1717 W 6th,L=Austin,ST=Texas,C=US

Chains

Dec 14, 2020

CN=Zello Inc,O=Zello Inc,POSTALCODE=78703,STREET=Suite 450+STREET=1717 W 6th,L=Austin,ST=Texas,C=US

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Digest

3c:4c:5c:8c:c5:e9:18:53:42:f8:2f:80:0c:8b:40:68:2e:17:b7:fb

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=Zello Inc,O=Zello Inc,POSTALCODE=78703,STREET=Suite 450+STREET=1717 W 6th,L=Austin,ST=Texas,C=US

Chains

Dec 14, 2020

CN=Zello Inc,O=Zello Inc,POSTALCODE=78703,STREET=Suite 450+STREET=1717 W 6th,L=Austin,ST=Texas,C=US

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Subject

CN=Zello Inc,O=Zello Inc,POSTALCODE=78703,STREET=Suite 450+STREET=1717 W 6th,L=Austin,ST=Texas,C=US

Serial Number

6a:dc:09:74:6e:b9:f0:27:97:32:be:bf:05:c1:ca:a9

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 19, 2019 - Dec 18, 2021

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 2, 2018 - Dec 31, 2030

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 10, 2006 - Nov 10, 2021

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Serial Number

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 1, 2019 - Oct 17, 2030

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 7, 2016 - Jan 7, 2031

Minor OS version

0

Major OS version

4

Entry point

13784

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCreateKeyExW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken SetFileSecurityW RegOpenKeyExW RegEnumValueW

shell32

SHGetSpecialFolderLocation SHFileOperationW SHBrowseForFolderW SHGetPathFromIDListW ShellExecuteExW SHGetFileInfoW

ole32

OleInitialize OleUninitialize CoCreateInstance IIDFromString CoTaskMemFree

comctl32

ord17 ImageList_Create ImageList_Destroy ImageList_AddMasked

user32

GetClientRect EndPaint DrawTextW IsWindowEnabled DispatchMessageW wsprintfA CharNextA CharPrevW MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW GetSystemMetrics FillRect AppendMenuW TrackPopupMenu OpenClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetWindowLongW GetSysColor SetWindowPos PeekMessageW SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint EmptyClipboard CreatePopupMenu

gdi32

SetBkMode SetBkColor GetDeviceCaps CreateFontIndirectW CreateBrushIndirect DeleteObject SetTextColor SelectObject

kernel32

GetExitCodeProcess WaitForSingleObject GetModuleHandleA GetProcAddress GetSystemDirectoryW lstrcatW Sleep lstrcpyA WriteFile GetTempFileNameW lstrcmpiA RemoveDirectoryW CreateProcessW CreateDirectoryW GetLastError CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersion GetCommandLineW GetTempPathW GetWindowsDirectoryW SetEnvironmentVariableW ExitProcess CopyFileW GetCurrentProcess GetModuleFileNameW GetFileSize CreateFileW GetTickCount MulDiv SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW MoveFileExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW

$PLUGINSDIR/InstallOptions.dll

IMPHASH 4b45b7e00344a87332fbd12653854d1a
SHA256 b34fb342f21d690aac024b6f48a597e78d15791ef480ac55159cd585d0f64af7
MD5 0a9fb96a7579b685ec36b17fc354e6a3
SHA1 355754104dd47d5fcf8918dee0dc2e2ee53390a6
SHA512 67870206fa7f1e7df45c8c1bc2f51fb430f0a048a2bdb55a4a41525388ca3b50203784537f139169705a03db4bb13b591162a79a5d2df81a4d11fd849615c86b
SSDEEP 384:EFC43tPegZ3eBaRwCPOYY7nNYXCg/Yosa:EMTgZ3eBTCmrnNAo
TLSH
T183624D1137C558B3E2D62A797EE2B7138FA5F722A4438E0BC7332E06281A5956E7C311
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

11022

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

GetCurrentDirectoryW GlobalUnlock GlobalLock GetModuleHandleW CloseHandle SetEndOfFile SetCurrentDirectoryW GetPrivateProfileStringW GetPrivateProfileIntW MultiByteToWideChar ReadFile GetFileSize CreateFileW lstrcmpiW lstrcatW lstrcpynW WritePrivateProfileStringW lstrlenW lstrcpyW GlobalFree GlobalAlloc WriteFile SetFilePointer

user32

LoadCursorW SetWindowRgn GetDlgCtrlID CloseClipboard DrawFocusRect OpenClipboard DrawTextW SetCursor LoadIconW LoadImageW SetWindowLongW CreateWindowExW MapDialogRect SetWindowPos GetWindowRect CreateDialogParamW GetClientRect ShowWindow GetSystemMenu EnableWindow GetDlgItem DestroyIcon DestroyWindow DispatchMessageW TranslateMessage GetMessageW IsDialogMessageW CallWindowProcW PostMessageW MessageBoxW GetSysColor CharNextW wsprintfW GetWindowTextW SetWindowTextW SendMessageW GetWindowLongW EnableMenuItem PtInRect MapWindowPoints GetClipboardData

gdi32

SetTextColor DeleteObject CombineRgn CreateRectRgn GetDIBits SelectObject CreateCompatibleDC GetObjectW

shell32

SHGetDesktopFolder SHGetPathFromIDListW ShellExecuteW SHBrowseForFolderW

comdlg32

GetOpenFileNameW GetSaveFileNameW CommDlgExtendedError

ole32

CoTaskMemFree

$PLUGINSDIR/System.dll

IMPHASH fc0224e99e736751432961db63a41b76
SHA256 7a9ddee34562cd3703f1502b5c70e99cd5bba15de2b6845a3555033d7f6cb2a5
MD5 564bb0373067e1785cba7e4c24aab4bf
SHA1 7c9416a01d821b10b2eef97b80899d24014d6fc1
SHA512 22c61a323cb9293d7ec5c7e7e60674d0e2f7b29d55be25eb3c128ea2cd7440a1400cee17c43896b996278007c0d247f331a9b8964e3a40a0eb1404a9596c4472
SSDEEP 192:nenY0qWTlt70IAj/lQ0sEWc/wtYbBH2aDybC7y+XBDIwL:n8+Qlt70Fj/lQRY/9VjjfL
TLSH
T1F6427D1193B089F2F590593805A67F2A6FBEAC5C27E44963CFE345853D702DFA47A243
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10719

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/ioSpecial.ini

SHA256 d95aed234f932a1c48a2b1b0d98c60ca31f962310c03158e2884ab4ddd3ea1e0
MD5 e2d5070bc28db1ac745613689ff86067
SHA1 282e080b4cf847174c5c11e4f9157b8c338ecb19
SHA512 a50ca2014869629135b54e848f03cb4983ad8029cd811300d02b0fc54de0436185f418fea4d3db888eb0f3170e33a59d486aa885f024ab29e630e9bc0ae1a2de
TLSH
T1D3D0C9C9501A802944208642A97A2FA263E03E210B1725FAF5724C87EB4CDE79C9D682
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/ltnsis.dll

IMPHASH d2490a62fd66df80650eeebf31c1e62b
SHA256 082ecda048088ca888073637cd6628b37581816db9b999da7c70af38dd736bb3
MD5 ac3ad7a7662fc4b51a5b107d22045941
SHA1 bd88d4d23d4316668a17f2a77c2b919bef086d01
SHA512 7ff02c3b38b512e8276ed8c7235579ea913704c2720ccf057b3c95d1f2248e1a4a680d3971f7ff59ed20db4cbcc18da2fbbc2d8f1f986b177f56765103cefee1
SSDEEP 1536:Cw+lnkkQc/8CCLSDXOPWFI2X7+JZjaeabuvTJt7+pK+AUfC:CXR/fCYeIL4ZjaNuvTJt7zv
TLSH
T156738D12B690C473C96A993864A5CB319E7DB8109EF2848B7F5B07BD5F223C2573931B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Digest

b3:9e:3f:39:4e:52:e4:46:20:02:4d:77:cb:ef:62:95:fd:a1:ae:87:f2:40:41:22:58:2d:f4:0c:97:bd:08:34

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Zello Inc,O=Zello Inc,POSTALCODE=78703,STREET=Suite 450+STREET=1717 W 6th,L=Austin,ST=Texas,C=US

Chains

Dec 14, 2020

CN=Zello Inc,O=Zello Inc,POSTALCODE=78703,STREET=Suite 450+STREET=1717 W 6th,L=Austin,ST=Texas,C=US

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Digest

57:6d:bc:55:dc:e1:0c:fd:45:00:53:76:c8:50:f7:ec:36:2c:5f:b5

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=Zello Inc,O=Zello Inc,POSTALCODE=78703,STREET=Suite 450+STREET=1717 W 6th,L=Austin,ST=Texas,C=US

Chains

Dec 14, 2020

CN=Zello Inc,O=Zello Inc,POSTALCODE=78703,STREET=Suite 450+STREET=1717 W 6th,L=Austin,ST=Texas,C=US

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Subject

CN=Zello Inc,O=Zello Inc,POSTALCODE=78703,STREET=Suite 450+STREET=1717 W 6th,L=Austin,ST=Texas,C=US

Serial Number

6a:dc:09:74:6e:b9:f0:27:97:32:be:bf:05:c1:ca:a9

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 19, 2019 - Dec 18, 2021

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 2, 2018 - Dec 31, 2030

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 10, 2006 - Nov 10, 2021

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Serial Number

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 1, 2019 - Oct 17, 2030

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 7, 2016 - Jan 7, 2031

Minor OS version

0

Major OS version

5

Entry point

12428

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

InitializeCriticalSectionAndSpinCount GetModuleHandleW GetProcAddress GetCurrentProcess VirtualQueryEx GetDriveTypeW DeviceIoControl LCMapStringW LCMapStringA GetStringTypeW MultiByteToWideChar GetStringTypeA MulDiv GetLocaleInfoA LoadLibraryA IsValidCodePage GetOEMCP GetACP GetCPInfo HeapReAlloc VirtualAlloc GetSystemTimeAsFileTime CloseHandle WriteFile CreateFileW MoveFileW GetFileAttributesW LeaveCriticalSection EnterCriticalSection DeleteCriticalSection GetTickCount QueryPerformanceCounter VirtualFree HeapDestroy HeapCreate GetEnvironmentStringsW WideCharToMultiByte FreeEnvironmentStringsW TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCurrentThreadId GetCommandLineA RaiseException RtlUnwind GetLastError HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement Sleep HeapSize ExitProcess HeapAlloc SetHandleCount GetStdHandle GetFileType GetStartupInfoA GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings GetCurrentProcessId

user32

ReleaseDC GetDC EndPaint DrawTextW BeginPaint GetClientRect PostMessageW CallWindowProcW UpdateWindow InvalidateRect MapWindowPoints SendMessageW IsWindow GetWindowLongW SetWindowLongW SetWindowPos ScreenToClient GetWindowRect GetParent

gdi32

CreateFontIndirectW GetDeviceCaps SetBkMode SelectObject DeleteObject

advapi32

RegCloseKey RegQueryValueExW RegOpenKeyExW

shell32

SHGetSpecialFolderPathW SHFileOperationW

shlwapi

PathStripToRootW

$PLUGINSDIR/modern-header.bmp

SHA256 1741cfb090726bf82f3cd40a5c957a5fe91456088f30f325fe3687840a214052
MD5 9d4146b0dd6b0a24625064a1f57489e4
SHA1 d62d9d219d8671664e948d499c226d8bce4e39d8
SHA512 7db7e20d01434c7d11a4d0522b7c3f02b34ee55afec076cd0b89fd6316c8b6e547ea00ce2dd356628882fefad36e76281ccc911ce6dd448e316ca03cdd7ea8e6
SSDEEP 48:KkBU+BAWSa8QHwhjSGA8+RW87WNcTbzfeU4uMZIcm:KeUGBpAw3f5WZIcm
TLSH
T19A12DC44B8FE7CD9CFE25EBA8275E73419A40E877740409864DDAD2BB04D8BB394C724
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/modern-wizard.bmp

SHA256 e5f6ab595bc90e8856f1b81c9c1890197c3ed1d5d0e9de4a583b09d112ff8f62
MD5 a30785fb2d9bc2c02f466c29a4f0ff75
SHA1 bf855ebfe44f520dd68297c29cc6006773a59e0d
SHA512 5a1afbc39112fb0b5864c51bab7851857ea2c17cac009e6a63508c5a5906839b24d6d94e40d7cc40026b7f3074ea76e9802fcb3dd72dc2a3044c6d431d20f6bc
SSDEEP 768:UYcpnLrvoq2YiMrqJMvC/msypHw2c9MCNzPPzqW/2EH:BcpqqjEH
TLSH
T134E3C8F4F8BC98CBB33755187B65F168A1ECAC41610A614F702ABA504AB374139BDF6C
MD5 SHA1 SHA512 SSDEEP TLSH

$TEMP/Zello.exe

IMPHASH e17d3fc7c26f9940ca2c7a99dc3ea45f
SHA256 48b0770ac9463b84be6508cb946edf03c9088fa01333c95182a76e065407b7fe
MD5 4dcabf7d7a4f3dff7cc46eea6d1e7a4c
SHA1 19ddb006148f3a4200fac73e6540ea2a8b744019
SHA512 5c769636c2e769661233144c4824f41e44f2597e6add7c258c5334217bb1d76784870bebcb373ced5f2c3958b063efe43a5726c1a252824696971457ed53330b
SSDEEP 98304:XDwY2pBXHqPDOBzorVUBZLbhzFuMnozB9TwvHHmxYQCgff3dXDedNqG4ROXPP+wf:kY2/9v8zB9TaHNQXAdoGtn+wf
TLSH
T11586BE02BBD4C0F5E5E21B7098669BA94AB2FB304B31C4C776C44A1D6E70ED18E39767
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Digest

0c:84:8e:27:de:c9:41:ea:bb:1b:3d:5f:31:a0:14:65:f3:6b:7d:97:c2:eb:40:ab:e7:39:cf:f6:3b:5b:78:1e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Zello Inc,O=Zello Inc,POSTALCODE=78703,STREET=Suite 450+STREET=1717 W 6th,L=Austin,ST=Texas,C=US

Chains

Dec 14, 2020

CN=Zello Inc,O=Zello Inc,POSTALCODE=78703,STREET=Suite 450+STREET=1717 W 6th,L=Austin,ST=Texas,C=US

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Digest

48:bc:8a:e0:77:92:37:33:8b:88:a8:9f:66:be:f2:cf:d1:c7:0a:d9

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=Zello Inc,O=Zello Inc,POSTALCODE=78703,STREET=Suite 450+STREET=1717 W 6th,L=Austin,ST=Texas,C=US

Chains

Dec 14, 2020

CN=Zello Inc,O=Zello Inc,POSTALCODE=78703,STREET=Suite 450+STREET=1717 W 6th,L=Austin,ST=Texas,C=US

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Subject

CN=Zello Inc,O=Zello Inc,POSTALCODE=78703,STREET=Suite 450+STREET=1717 W 6th,L=Austin,ST=Texas,C=US

Serial Number

6a:dc:09:74:6e:b9:f0:27:97:32:be:bf:05:c1:ca:a9

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 19, 2019 - Dec 18, 2021

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 2, 2018 - Dec 31, 2030

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 10, 2006 - Nov 10, 2021

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Serial Number

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 1, 2019 - Oct 17, 2030

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 7, 2016 - Jan 7, 2031

Minor OS version

0

Major OS version

5

Entry point

4666314

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

g:\projects\zelloptt\zello-windows-client\bin\release\Zello.pdb

crypt32

CertFreeCertificateContext CertEnumCertificatesInStore CertFindCertificateInStore CertOpenStore CertGetCertificateContextProperty CertCloseStore CertDuplicateCertificateContext

ws2_32

WSAConnect htons inet_addr WSASocketW getsockname WSAGetLastError setsockopt WSAEnumNetworkEvents sendto closesocket WSAEventSelect WSACreateEvent shutdown listen bind recvfrom recv __WSAFDIsSet select WSACloseEvent WSACleanup connect socket getaddrinfo getnameinfo freeaddrinfo WSASend send ioctlsocket WSAStartup WSAWaitForMultipleEvents WSASetLastError getservbyport gethostbyaddr getservbyname htonl inet_ntoa gethostbyname ntohs

version

GetFileVersionInfoW GetFileVersionInfoSizeW VerQueryValueW

winmm

waveInClose waveInStart mixerGetLineInfoW mixerGetLineControlsW mixerGetID mixerOpen mixerClose mixerGetControlDetailsW mixerSetControlDetails waveOutOpen waveOutPrepareHeader waveOutGetPosition waveOutWrite waveOutRestart waveOutReset waveOutClose mixerGetDevCapsW waveOutGetDevCapsW waveInMessage waveOutMessage waveOutGetNumDevs waveInGetNumDevs waveInAddBuffer waveInGetDevCapsW waveInOpen waveInPrepareHeader waveInStop waveInReset

iphlpapi

GetAdaptersAddresses GetBestInterfaceEx NotifyAddrChange

rpcrt4

UuidCreateSequential UuidToStringA RpcStringFreeA

psapi

GetProcessImageFileNameW

oleacc

LresultFromObject AccessibleObjectFromWindow GetRoleTextW

msacm32

acmStreamSize acmGetVersion acmDriverEnum acmDriverDetailsW acmFormatTagEnumW acmMetrics acmFormatEnumW acmStreamConvert acmStreamOpen acmStreamPrepareHeader acmStreamUnprepareHeader acmStreamClose acmDriverOpen acmFormatDetailsW acmDriverClose

wininet

HttpAddRequestHeadersA InternetOpenW InternetOpenUrlW InternetConnectW HttpOpenRequestW HttpSendRequestW HttpSendRequestExW InternetReadFile InternetWriteFile InternetCloseHandle HttpQueryInfoW HttpAddRequestHeadersW HttpEndRequestW InternetQueryOptionW InternetSetOptionW

hid

HidD_GetAttributes HidD_GetHidGuid HidD_GetProductString HidD_GetManufacturerString

kernel32

GetModuleHandleA SetWaitableTimer OpenEventA RtlUnwind TerminateProcess UnhandledExceptionFilter VirtualAlloc VirtualFree IsProcessorFeaturePresent LocalAlloc CreateWaitableTimerA GetLastError EnterCriticalSection LeaveCriticalSection GlobalFree GlobalUnlock GlobalReAlloc GlobalLock GlobalAlloc MultiByteToWideChar lstrlenA lstrlenW MulDiv LockResource SizeofResource LoadResource FindResourceW InitializeCriticalSection DeleteCriticalSection InterlockedIncrement InterlockedDecrement RaiseException FlushInstructionCache GetCurrentProcess GetCurrentThreadId SetLastError lstrcpyW FreeLibrary LoadLibraryW CloseHandle WaitForSingleObject Sleep GetTickCount CreateDirectoryW GetFileAttributesW ReadFile GetFileSize CreateFileW GetVolumeInformationW SetFilePointerEx SetFilePointer SetEvent SetUnhandledExceptionFilter CreateEventW GetSystemTimeAsFileTime TerminateThread WideCharToMultiByte WriteFile DeleteFileW CreateThread SetEndOfFile SystemTimeToFileTime GetSystemTime InitializeCriticalSectionAndSpinCount GetTimeFormatW GetDateFormatW FileTimeToSystemTime FileTimeToLocalFileTime GetProcAddress GetModuleHandleW CancelIo WaitForMultipleObjects CreateEventA HeapFree GetProcessHeap HeapAlloc WaitForSingleObjectEx DeviceIoControl ClearCommError SetCommMask GetCommModemStatus WaitCommEvent lstrcpynW GetModuleFileNameW TryEnterCriticalSection GetTempFileNameW GetTempPathW CreateFileA GetDriveTypeA GetLogicalDrives GetFileSizeEx CopyFileW MoveFileExW FlushFileBuffers CreateSemaphoreA ReleaseSemaphore WaitForMultipleObjectsEx GetFileTime GetShortPathNameW GetVersionExW GetOverlappedResult GetUserDefaultLCID FindClose FindNextFileW FindFirstFileW VirtualQueryEx GetLocalTime OutputDebugStringW MoveFileW CreateMutexW lstrcmpiW lstrcmpW LoadLibraryExW SetProcessAffinityMask GetModuleFileNameA OpenEventW GetCurrentProcessId GlobalMemoryStatusEx lstrcpynA LoadLibraryA GetSystemDirectoryA ExpandEnvironmentStringsW CreateMailslotW GetMailslotInfo InterlockedExchange CompareStringW LCMapStringW ResumeThread QueryPerformanceFrequency RemoveDirectoryW SetFileAttributesW OpenProcess GetDriveTypeW GetLocaleInfoW GetModuleHandleExW InterlockedCompareExchange TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedExchangeAdd DeleteFiber SwitchToFiber CreateFiber GetEnvironmentVariableW GetVersion GetFileType GetStdHandle FormatMessageW QueryPerformanceCounter ConvertFiberToThread ConvertThreadToFiber GetConsoleMode SetConsoleMode ReadConsoleA ReadConsoleW FlushViewOfFile OutputDebugStringA UnmapViewOfFile UnlockFileEx UnlockFile MapViewOfFile LockFileEx LockFile LocalFree HeapCompact HeapValidate HeapSize HeapReAlloc HeapDestroy HeapCreate GetVersionExA GetTempPathA GetSystemInfo GetFullPathNameW GetFullPathNameA GetFileAttributesExW GetFileAttributesA GetDiskFreeSpaceW GetDiskFreeSpaceA FormatMessageA DeleteFileA CreateFileMappingW CreateFileMappingA AreFileApisANSI IsDebuggerPresent VirtualProtect VirtualQuery ExitThread GetStartupInfoW ExitProcess SetConsoleCtrlHandler FindFirstFileA LCMapStringA GetCPInfo GetStringTypeW GetACP GetOEMCP IsValidCodePage SetHandleCount GetStartupInfoA GetConsoleCP GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetStdHandle GetFileInformationByHandle PeekNamedPipe GetCurrentDirectoryA GetTimeZoneInformation WriteConsoleA GetConsoleOutputCP WriteConsoleW CompareStringA SetEnvironmentVariableA ResetEvent

user32

GetKeyNameTextW GetNextDlgGroupItem GetClassNameW GetMenuItemInfoW GetAsyncKeyState RegisterClassW GetWindowPlacement DestroyIcon OpenClipboard TrackPopupMenu CheckMenuItem CloseClipboard SetClipboardData EmptyClipboard wvsprintfW GetMessageW CharNextW InvalidateRgn IsChild GetDesktopWindow DestroyAcceleratorTable LoadAcceleratorsW LoadStringW CreateAcceleratorTableW RegisterWindowMessageW SetMenu SetMenuDefaultItem keybd_event EqualRect WindowFromPoint TranslateAcceleratorW GetMenuState CheckMenuRadioItem GetMenuItemCount GetMenuItemID TrackPopupMenuEx ModifyMenuW CreateMenu GetMenuInfo SetMenuInfo InsertMenuItemW SetClassLongW UnhookWindowsHookEx IsMenu ReplyMessage CallNextHookEx DialogBoxIndirectParamW SetWindowsHookExW GetActiveWindow DeleteMenu GetWindowThreadProcessId DrawFrameControl MessageBeep CharLowerW GetAncestor PostQuitMessage GetRawInputDeviceList LoadStringA RegisterDeviceNotificationW GetDlgCtrlID ShowScrollBar IntersectRect NotifyWinEvent CopyRect SetDlgItemInt GetDialogBaseUnits GetUserObjectInformationW RegisterHotKey CreateWindowExW RegisterClassExW LoadCursorW GetClassInfoExW GetNextDlgTabItem EnableWindow IsWindowEnabled InvalidateRect UpdateWindow DestroyWindow PtInRect ClientToScreen GetFocus SetRect SetWindowLongW EndPaint BeginPaint GetWindowDC FillRect OffsetRect DrawTextW GetWindow MonitorFromWindow GetMonitorInfoW MapWindowPoints SetWindowPos GetDlgItem GetParent SetFocus ShowWindow ScreenToClient GetClientRect GetWindowRect MoveWindow GetWindowTextW SetWindowTextW SendMessageW GetWindowLongW EndDialog IsDialogMessageW GetForegroundWindow DrawEdge SetForegroundWindow IsWindowVisible UnregisterDeviceNotification GetRawInputDeviceInfoW GetDlgItemInt IsWindow SetWindowRgn GetCapture ReleaseCapture SetCapture BeginDeferWindowPos DeferWindowPos EndDeferWindowPos AdjustWindowRectEx GetCursorPos GetSysColor DrawFocusRect CreatePopupMenu AppendMenuW DestroyMenu SetCursor MessageBoxW KillTimer GetDC UnregisterHotKey FrameRect SetMenuItemInfoW RemoveMenu InsertMenuW EnableMenuItem GetMenu GetWindowTextLengthW CreateDialogIndirectParamW LoadMenuW GetSubMenu GetDlgItemTextW wsprintfW DrawIconEx SetActiveWindow MonitorFromPoint LoadImageW CharUpperW UpdateLayeredWindow GetScrollInfo MapVirtualKeyW TrackMouseEvent GetDoubleClickTime MapDialogRect RedrawWindow SystemParametersInfoW GetMessagePos GetProcessWindowStation SetRectEmpty SetDlgItemTextW SendDlgItemMessageW SetTimer PeekMessageW TranslateMessage DispatchMessageW CreateIconIndirect GetSystemMetrics InflateRect GetClassLongW ReleaseDC GetSysColorBrush CallWindowProcW DefWindowProcW SetParent GetKeyState PostMessageW UnregisterClassA

gdi32

Polygon RestoreDC SaveDC SetWindowOrgEx ExtTextOutW DeleteObject SetViewportOrgEx GetTextMetricsW SetBrushOrgEx GetCurrentObject GetClipBox GetTextColor GetBkColor LineTo MoveToEx PtInRegion CreateBitmap CreatePatternBrush PatBlt GetDIBits OffsetRgn CreateRectRgn SelectClipRgn RoundRect CreatePen GetStockObject SetBkColor SetTextColor SetStretchBltMode StretchBlt CreateCompatibleBitmap GetTextExtentPoint32W CreateSolidBrush BitBlt CreateDIBSection CombineRgn CreateRectRgnIndirect ExcludeClipRect GetObjectW CreateFontIndirectW GetDeviceCaps CreateCompatibleDC DeleteDC SelectObject SetBkMode IntersectClipRect Rectangle GetClipRgn LPtoDP DPtoLP Polyline

comdlg32

CommDlgExtendedError GetOpenFileNameW GetSaveFileNameW

advapi32

CryptEnumProvidersW DeregisterEventSource CryptDecrypt CryptCreateHash CryptSetHashParam CryptSignHashW CryptDestroyHash CryptExportKey CryptGenRandom RegisterEventSourceW RegCloseKey RegOpenKeyExW RegEnumValueW RegQueryValueExW RegDeleteKeyW RegDeleteValueW RegCreateKeyExW RegSetValueExW RegQueryInfoKeyW RegEnumKeyExW SetSecurityDescriptorDacl InitializeSecurityDescriptor ReportEventW CryptReleaseContext CryptDestroyKey CryptGetProvParam CryptGetUserKey CryptAcquireContextW

shell32

ShellExecuteExW SHGetSpecialFolderPathW ShellExecuteW ord155 SHOpenFolderAndSelectItems ord190 DragQueryFileW Shell_NotifyIconW SHFileOperationW

ole32

RevokeDragDrop RegisterDragDrop ReleaseStgMedium PropVariantClear OleUninitialize OleInitialize CLSIDFromString CLSIDFromProgID CoGetClassObject OleLockRunning StringFromGUID2 CoTaskMemRealloc CoTaskMemAlloc CoSetProxyBlanket CreateStreamOnHGlobal CoTaskMemFree CoCreateInstance CoInitializeEx CoInitializeSecurity CoUninitialize CoCreateGuid

oleaut32

VariantCopyInd VariantChangeType CreateDispTypeInfo DispCallFunc SysStringByteLen SysAllocStringByteLen LoadTypeLi LoadRegTypeLi OleCreateFontIndirect VarUI4FromStr SysStringLen SysAllocStringLen VariantClear SysReAllocString SysFreeString SysAllocString VariantInit

shlwapi

PathStripToRootW

comctl32

ImageList_Create ImageList_Remove PropertySheetW ImageList_Draw ImageList_GetIconSize DestroyPropertySheetPage CreatePropertySheetPageW CreateStatusWindowW ImageList_GetImageCount InitCommonControlsEx ImageList_ReplaceIcon _TrackMouseEvent ImageList_Destroy ImageList_GetIcon ImageList_Add ImageList_AddMasked ImageList_DrawIndirect

msimg32

AlphaBlend TransparentBlt

setupapi

CM_Get_Parent SetupDiDestroyDeviceInfoList SetupDiGetDeviceRegistryPropertyW SetupDiGetDeviceInterfaceDetailW SetupDiEnumDeviceInterfaces SetupDiClassGuidsFromNameW SetupDiGetClassDevsW SetupDiEnumDeviceInfo SetupDiOpenDevRegKey

Lng/ar

SHA256 f334483c44591953fb036b98430dc446408bc70c4cfeb17e1d63e272e59f6948
MD5 00f2780af84e49a496beb5891b7bdfbb
SHA1 b79fadb3258a689387d897962c703d82ca173972
SHA512 7d0331ac20f59ef0c09ba09b1e0b1177fb0daa8e77c07f1ed99dbfce0161d8b69f0925d96f975c4b0cd9b04443de3538e7af05f8ff89454742e575e885541434
SSDEEP 768:AAAqUtSWgNIsrp3e9LCTZS7Bb6sANAJfGIyf:Cqm9gNIOLg7EBAJfGIyf
TLSH
T155F27527C4614D7702F293837CCA5952F6A0934F83910C0B79BDD24C1FB658EE6DBAA6
MD5 SHA1 SHA512 SSDEEP TLSH

Lng/bg

SHA256 329a0d7cc29750af4ea0a62a3c304dc1ccefe0818100ebae292ed7fb536e283f
MD5 03d765775f7b617f90036a74176ae607
SHA1 b37e7cb6395e86eb052c0a859b64bcf9f3b4c8b9
SHA512 67dd1d6cc8b22ed4c0c16dbf197069bcd6131e7259b69b51f4b7a321c5eeaca83717921a20224e4c92c9851165de904ab971e3979781b4d168b6f810a39fa036
SSDEEP 1536:RZwNup24sfsH7t1CaklhI2QhhpjYIAjk6:PfcSV5pjgjk6
TLSH
T11F33BB63C6595C9A0071E01A98087D0AFEDA43FF3FE2865735785C6D3FF607482A9A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Lng/cs

SHA256 797558143d4f57ba5e4c4cc24a7ed049f6c7a877ea9cebebbf43343318c2673a
MD5 66b9fa1caff36f7c97626f5f24eb5136
SHA1 480c071860a3f14bfdca5a301ad43f47c91365ed
SHA512 567be072e20904455f05def2e9a2160dc866bba09ea2e34ec5f157b68917dbeda130b0c70ee60c288297da35c1db441a873dea791c582c815e8acb3aa6818f0b
SSDEEP 384:jUvfq8t+vtMT+J/CEgU8R9Ccez67sVqhp8Q7u85+2S7AH5JTV7GQihTcqkINGAxu:jUFtxEgN+znm9RZS7VQrzAJfGIyf
TLSH
T1B7F2A223C4A14D7602F293C67CCA5942F6A4535F83A20C0B78BDD14C1F7694EE6DBEA9
MD5 SHA1 SHA512 SSDEEP TLSH

Lng/de

SHA256 b56cda2456d4c32606757078db6710752b255cee6a3a5516dc4a5d3bd6e40e62
MD5 ebbe27e0e76852b3f287ccb4d19fbbb8
SHA1 19e3f78c62b7804821a80eefaa220d79b2f40027
SHA512 21824c024d7b62fc9ba73f3509ee265c0d4573d64df2babb0e2882d5236e6446ccca0d58961c41d41b9f29011029b28943a9e27b0ddcdfadccd05a89de0f92a6
SSDEEP 384:yavYiWfXqTVemtvcQZMJcajDgx+6b1guyvE2wBPFTiaWGLC5g9kIhkAwnBPisGAd:5vYZqhrZcSMuCY+uPDFLZ+AcLG2f
TLSH
T18703A617C9A09DAA02F19386A8898992F7A4931FC3910C0F78BCD21C1F7655FD3DBA75
MD5 SHA1 SHA512 SSDEEP TLSH

Lng/el

SHA256 03e5d20bad26e39d83073e3ca2ff709f33fbafb1d53a58c9fba4169f7205ea28
MD5 1bee4c76c6a68ee0f9789d52df4b0499
SHA1 45c84268da270f84dfc2defa96de72c327f571ed
SHA512 6cc318039b3526e4e1c1deaa1dea0d15ef9f7ca298c13a871e583bce29b99ef7e3012ebe4478d791d24225c47c108e31be4841dd5999ee48744b1a3e527f18c2
SSDEEP 1536:2OHyU3NlkbNIglPwuBzKR94988XZthrsOX0nak1t:2CrOIYBe3k6nay
TLSH
T1F243B6DFE0941DBD40B5810288E8A079F7865F2F9655CADA763ECA2C7FF9462D810D0B
MD5 SHA1 SHA512 SSDEEP TLSH

Lng/en

SHA256 0f3e54a0b7aebc9952701d7efcc3f2cbef42da56a340633a2abf1f5e87ea42e2
MD5 62ef36d16bc2d2d4073aaeb499f61f83
SHA1 81a7dd32333e12051be8b2115ff2c0073f8ebfa1
SHA512 dea6f288b0f73bea650e7b43c5fcdd6a59d4a3de4928777c883eadd579de35c4e6394fd0eb6a8134dc704d283900ab1058cafb2f219e7b3dbd63a600f504b799
SSDEEP 384:tjnaUQeWBZbhsZu+S/jNRNjoNhsF3hP4aX4FOUvbtiO/7eP/0rSSO9yFzIhpKs3u:tbUeKUu+6Ru0B4Fdde30FO0kpK2Ov
TLSH
T187134127D4604D6701F2A3927CBA8592F614A36F53410D0F397CD24C1FB78AAE687B67
MD5 SHA1 SHA512 SSDEEP TLSH

Lng/es

SHA256 be3b4a21a896da371d952083ffc71408fa18c3f96eca235dad7b6c65fe2800a0
MD5 36705321fd638713e179e9b83a23f5ec
SHA1 81535b818cc4e9e1fe35f087581ef68dbf979913
SHA512 761be5e041bb8b412c1958bea45e1420775dcdee046c7f70cd70b426a9905b6857104ca8a1326b1a221c718da424faa2737fc54fea6d8d526edf0401b6f6b2c7
SSDEEP 768:ow1JvStx9/mYWnwvRmW0pSBtfbLJTUAx9L1+Qoge2exOQABcW8JZZLTipTQZFqtX:/USwvRmWT3APcQhbZZXs
TLSH
T10C03A513C4944E6303F25386788A9A13F190934FA1958C4B79BEC35C2FF59CEC59BEA9
MD5 SHA1 SHA512 SSDEEP TLSH

Lng/fi

SHA256 00492622fb9f7786bf2f85303844ed4ee2ce5b7b40fb549e63dacae7feda1ceb
MD5 24126e76fdae2505e474464148f90db8
SHA1 e37ba8907cbc9de749172dd963766bb3bdf4ea28
SHA512 d27880e5ae5e37b07a003e5df7acef8e60c8052d8be442d847ad09a37c001758477877154093f76743134fb015dac3545be9e5d56cb2bcc8a2a2ec77287be327
SSDEEP 384:ryQUpCigbdBzMJQPAc+U8a9/Tho2hdGsVuRpfLiRI8+2S7AH53ctG6qho8AqkIr0:r+8dQc+NQThBltPZS766eANAJfGIyf
TLSH
T179F28417C4615D7702F293C778CA5552F6A0634F83910C0B79BDD24C0FB698AE2DBEAA
MD5 SHA1 SHA512 SSDEEP TLSH

Lng/fr

SHA256 d23824e5f4ca060fc3abeaa599f2e420313942689aa11d9415161549844ea4d7
MD5 69473dd6c4bc56028657a92e68e8f503
SHA1 cb03b130f87bf20d0a785bcfd771ffa96363538a
SHA512 24d5d60e1c6d7efa0d5e00b5b2a788ea18b580a8e9735e6ce04ffb901602063814ca3821f5c8128cf603b3e8b9903b36ddf34d587dd7a89da00df63772f81fd1
SSDEEP 768:6sgt4qWsNPPuCrcytWZS7b6iANAJfGIyf:Ry4FsNuC4g7unAJfGIyf
TLSH
T166038427C4A14D6702F293C37C8A5542F6A0934FC3910D0B75BDD25C4FB658EE29BAEA
MD5 SHA1 SHA512 SSDEEP TLSH

Lng/fr-CA

SHA256 efb2620e4bcd7b3828e738a5a4ceefd92dfbb907635b1cebde18d48fd045f7ce
MD5 337a6b366e598e2277921184e3e214f5
SHA1 96eebd0688981c49c6fa8bd6ad727c1a8038bf8c
SHA512 ad841e8d8152aaf0ba4d1e110fa2c2d2bd62820a88ad5203500936505d3ea418376e4ce1e818d964f601301cc29bdb80166565b5bb1a29908f4b5ea0bbc6a5c8
SSDEEP 768:YK4K/uADyPFSM5s4XoJ1r0yNzekYTfdd1Q:YKBhDyPFns4XgzeTTfdd1Q
TLSH
T11A037417C4D04D6603F143867A8A9643F160C34FD3A1490BB9BD934C1FBA9DDE29BAE9
MD5 SHA1 SHA512 SSDEEP TLSH

Lng/gl

SHA256 573c3a044abb3aee6a1726d523132c14f834e832444aadec01922b425927e89d
MD5 17e2e77254e07cdcf9ac920508ea7b96
SHA1 5e72b9bff68c81ebb0ca2126deb8b594f6ecc478
SHA512 ea239f0dc28738ded816e21a679570dd4cdbec934764fe509319139e0d6d891fdefa92196c9e667ba209ec26b2cd2ce95c2cc8b7972916f7708dc462dfe754a8
SSDEEP 768:qG62tvWgNEZ1SJ7/OZdZS7K6AARAJfGIyf:qh2cgNE3xg7fZAJfGIyf
TLSH
T12DF27617C4614D7702F293C27CCA5552F6A0934F83910C0B79BDD24C5FB698EE2DBAAA
MD5 SHA1 SHA512 SSDEEP TLSH

Lng/he

SHA256 5a279adc56280ededa21c15df3fe4610c0037338211b1474d7569328ec6a6931
MD5 a5bc510e11d9e6916cda01263226f7b1
SHA1 56720c266f710a066fe8274aa4f44c737ae65134
SHA512 29cbc2ea1c76dfd60616927382ecaac73d91b7b22844c5826e30bccbb7bb3b0218175202d31fcae27789654f440eaf7cfe96634407ee3d25b3c243417621afa5
SSDEEP 768:Fv3k3C3T4P9ZWhBqDVDnFnTnusv90dsLAEfGIyf:x0yD4P3WTahFTusv90aAEfGIyf
TLSH
T15E033383D5F00D25427156835DA8A505FBA18FBF86D8288BBB3C920C5F334D6E997BB4
MD5 SHA1 SHA512 SSDEEP TLSH

Lng/hr

SHA256 8c8017ab8b1e6ca0265e1117f4352aa92e7157e4afe4fd077ef384432c5442b9
MD5 0f60c2647e47de26984b22e20efb1b4e
SHA1 785f66c747b64b60b6e6c6fddc24e792fbb6238f
SHA512 045f8c106eb45c569c4768bf976e8b644179ae5450c94d26cc6b4cbcb42b196a0daf599dd5f73b346446b9e04dd79fdaa3be23e0987dc4f0f6e7d8b52e2c7f4e
SSDEEP 768:5YfoY33ooIVcVPhV3M7HX0HSp9iUlCrBnmodLnj:53Y33oFVcVPhV3M7HX0HGQUgJmodLnj
TLSH
T11C038513C8B08D6947F693CA6ED64602F5B9030FD2904C1B38BDD60D5FB658EA0DEE69
MD5 SHA1 SHA512 SSDEEP TLSH

Lng/hu

SHA256 55c4dd61495e7e35eb3a5e0835c5be57316fd8994b229bc68849f0502c755706
MD5 676af4c3d460d195575acc7a5d1725ed
SHA1 0ca4a4820195db001fbc669b292fbc06d35ca694
SHA512 06abf98d57f6b03009a795cf26ca12f5db6dc96f0ffbdac50dda99556903db685e540a4bf9d8b838e7d0f5b97d0c9aadae64faa631b730e878388d9c5738aa7c
SSDEEP 768:h08t3yLHTNt4yJqTTIQunAlZS7DCt2NNAWfGIyf:O+oTNtpJET/lg7DCEnAWfGIyf
TLSH
T1D203A623C4614DB646F193C378DD1552F2A4930F83A20C0F75BED24C1F7658AE6DBAAA
MD5 SHA1 SHA512 SSDEEP TLSH

Lng/id

SHA256 3c73d7e4f64cf3fbccee6d0e4b46651387769c1ac70ad59dafc1b3729d361b2e
MD5 b6ddfe3ce1096c8dfd9017b35ca533d7
SHA1 8a30de4197309d7579869e67f7b6e1db3ce81b4e
SHA512 333b362760905394e549d8e4fba39cffb2cd9de8c6ce248c2f53c8063df564439b43184b3b2353d5ecc8bc3324dd6107cad26a24d80a013f4269d505b212f4cf
SSDEEP 384:cytiLaUIwyGJ84KrwcAPJZwStlCJSCHpv2uJfdEscEGOX15yoN2AoVBy3G170tdw:jtiLaUIEJ8jrw3wSIHVsOXaAXGRv
TLSH
T16903A823C8A55CA607F143D6A8CD0A52F5A4531F93910C0BB57CCF2C1F76999F28AEB9
MD5 SHA1 SHA512 SSDEEP TLSH

Lng/it

SHA256 09ef962d7fd8336fdfc2fc46145c30a2b344c36ade72211dbe7a582e35535ab7
MD5 c54d766c5553802dec3cdf5429ffb50f
SHA1 06a545ff191fa910209cc8abc571a526be557a51
SHA512 4e904e42e2be3587651a0f332b84bdba99dc1a254de07397006b7c80a382ecfb206465eea7a540cb3dff7de2a579ece3e3fb45f91f4bc08be8b16e5dd064bcf1
SSDEEP 768:ufmY7WgNEZ1SJ7/OZdZS7K6AARAJfGIyf:kBKgNE3xg7fZAJfGIyf
TLSH
T1DFF26427C4614D6702F293837CCA5552F660934F83910C0F79BDD24C5FB698EE2DBAAA
MD5 SHA1 SHA512 SSDEEP TLSH

Lng/ja

SHA256 deeaf1d1084e07aa1383c561b944c0a34697f62c0d24f301ecf57daf3593608a
MD5 1a10c6e82b225d1a240be9c3f465f668
SHA1 881b193979e4ddc8ffb171f5fd85092e0d0d171c
SHA512 5dac0da71c37e9559bb84f4c05e6ac0225396bedd04c0b3c5ebc084c5ffae58bcb46f456a59376413c553228b1fdd18fef4dc97ddcc2cc1c7a9f7e5c2ccc07d7
SSDEEP 384:QdA0sJ36/Mlb3BEBvkBgZZGwnw9szpcUIbNIloS52vNjSIBRenxKQzop/nC4DcJm:gAR3RWGrHIGrf7lw9n5ae/A5GID
TLSH
T10013732FC2904C2605B193E36C8D6582F6609F5FD7A20A0B747DC25C1F7198EE19ABF5
MD5 SHA1 SHA512 SSDEEP TLSH

Lng/lt

SHA256 431e2df2f5a792a584bb7e5fe7e88f10d650601902bad604a7e1bc11fc4bb7ef
MD5 dff1e4d6c96b919502704fa88f744942
SHA1 63ff97a8f45a70ba7a26cc4194ca080342f60480
SHA512 6e3b9d28ec95d09348d93e6cbaf10a4be252a0e5ca85d2ec41555ff71f3762576762eb55b9458528506a8856b660d005458c9468d7f5fff9824cdd9a889a0359
SSDEEP 768:t03gTGQqrPqCF4/yTbZHLFd6IKJtKARW5t5sgS3fQTXiyhsWOzTnh:AVrCCF4qfMI4fQTXiyhyh
TLSH
T1C603A503C4A15DFA07B1C3C658994666F1A8470F91D00C0BB87EC35DAF7788AE5E9E7A
MD5 SHA1 SHA512 SSDEEP TLSH

Lng/ms

SHA256 f37bb3a116b260edf2cad2f76547d3660c991f39f45ec08b39fa2a17f5630d2a
MD5 d441281f5db1efdd06b096f96031b1d8
SHA1 5f8c01e919703092f72304ed61b3ad4fb6c7fcea
SHA512 adbffcec89174136c91a876bf5e0af3151550ddc82ffefcf6eee37f1a0d946fc3c04491085d4962a80ff2a431e18637603430182978c3ad2728e368b63f0fbd7
SSDEEP 768:ufmY7WgNEZ1SJ7/OZdZS7K6AARAJfGIyf:kBKgNE3xg7fZAJfGIyf
TLSH
T155F26427C4614D6702F293837CCA5552F660934F83910C0F79BDD24C5FB698EE2DBAAA
MD5 SHA1 SHA512 SSDEEP TLSH

Lng/nl

SHA256 d83535d81a0f9504deb5589d7e837868b2eace261a56fc09892e1c66df13073f
MD5 6b385e0f091461202c9d41e0944bab65
SHA1 8cf9293231251d2a5be8479674416d9d2b628611
SHA512 caee1d5033cf8b878a057dbe4cc852391c4e987c629f9343d569f87e295446453483c3121c83b10cb932fc9c51e9d72f69c7d20c399eb9c959f4e56a540793eb
SSDEEP 384:LoMBtLWUtWCVvV74o7Ulp908hAIMx5V6Vu37ssI6QzBCDvO9EK5mGrG62hOqgR1F:L1qUtUo7oI8W3ey7Nk9G6lOAOyf
TLSH
T1E3F28617C8514D7B03F293C2B88A5952F6A0535F83910C0F78BDD25C1F7698EE29BAA6
MD5 SHA1 SHA512 SSDEEP TLSH

Lng/pl

SHA256 7ac170752ed6ec75b74db1a6f87ebdf581b6d55f81ce5669b67edb8efd2464ae
MD5 695e3dfe37e55bc81246ac8f195b2784
SHA1 da78dde70c0f1e14d28ac7ca3aff825cab9fa227
SHA512 d69f883757c927fb281b05a005bd744ac066c26420a784f14dc02274512519179b617e799f553cca8d4682a4ce625aacbf48c9db8f5988ce5522e440edf7b31a
SSDEEP 768:J7wqrnVbO2tCgPiNYevios4WjufwB847p3GsYXnEcf:J7LTVC2tnPeYkBWjufG847wsCEw
TLSH
T17903A62BC0E05E6A0AF143C7A9DB5A66F5D9430FC2504D0F387ED10C2F7518AD5EEAA9
MD5 SHA1 SHA512 SSDEEP TLSH

Lng/pt

SHA256 003046847964ef0bbde636f799cc89d95c536989009a51e61ef2f3678f878896
MD5 4206bf9825a5c86a871feecbba1a5d34
SHA1 ca667550775eb424fe7eb7cab4c47b3102b83a6a
SHA512 104f660d40e9ca08d4c28d638a941fb1b9a618594bc620b14d37bb4f0e75b17f6fa073442a8bcf8efc8f65259900819329d5cca98b0ade71973019d489161049
SSDEEP 384:v7qc/RyJbfEjBAHiE7FxmztsqtR1rI8bx9aifaCSSyzZ6cIm9lPQD7EIeHHe3nJY:v7x5T6FBq98FSnRpqbAxGpf
TLSH
T18303A617C9900D7703B253C3788A5A52F290534F93914C4BB9BED34C1FB698AE2DBAB5
MD5 SHA1 SHA512 SSDEEP TLSH

Lng/pt-br

SHA256 3ff03b4db4df26abd242812dd73c1a9c754f087db25fcc7def2e44c3e7891c4e
MD5 7004a871ac603527b8a083f10a12483a
SHA1 3618ce8f0051a63f0742c55e63615974b5190aff
SHA512 272e4ff550aae368fe82ccde37e33d6c831caa764af19e5692220d0b93c964605ea3da4eff07d0ec133076519f6e971c069b652d2632ca31a002c836ec25d575
SSDEEP 384:zinMbo5YDzzN0ipxfxKX+r5w8Cq9nCQgy89v13qkTvnY/inoRbd/safOHNqJOuoT:ZE0p3JQMWfPQqaVwu/aynQ
TLSH
T127039417C9910D6707B253C2788A5A12F290430FD2A68C4FB9FED74C1FF5986D28BA79
MD5 SHA1 SHA512 SSDEEP TLSH

Lng/ro

SHA256 6d2da9e8d50d4b6c43dd99a49a640c1bec5b3330a07d82fd6e0740fb961e1360
MD5 af9d5f63d618c6c067441190a31c91b2
SHA1 7c2ab110c3f31c35ce7d8511bb8d51d7eab111d3
SHA512 5a2e703c6e60f4dc835f2318cae5a0d47cb0ccb2a07871212998bc20bc8af0638320737436418ff97b9a76b5ab60bbe7f68f077b370f8bf914f2626a6d6db9c9
SSDEEP 384:o6fuC40JXuO4N9sFl1O9O4MiIx8/QhO/s4PDJlVIsAzxrJG4GpCJKlZ37hdcIOSg:Xur0JelsF/h0QFzDgZsIOhcm1
TLSH
T1AE03A223C4E04CA60AF1038279AA5A43F5C9135FD281084B75FEC69C1F75ACBD65AEDB
MD5 SHA1 SHA512 SSDEEP TLSH

Lng/ru

SHA256 e60c0b95b9677bd785dec482bd2f2ab2149c69bf98416c14626a3c78bca889bf
MD5 f8e8e948e03f45bd4d51ff842bde699c
SHA1 87db79276f45b7045c2334b4a12e31a1647d58b0
SHA512 9c85eb7810885c243cdb1f93ebfb868d60bd9e2ac31fd454c9a7bacadf68f3262ac2f9f467f1e823056786a951f0d2d329a38dbef8acbbbcfefe2db23057170d
SSDEEP 768:dNKrOg9jXlaBeP6m2pa3vDtytrxUjIKxydQN+n:dNKrOg9jlaBeAC5kxUjl8dQN+n
TLSH
T1ED33CE63C259AC9E0171B01BD8046D0BFAAA43BF6F960717383C5C6E3FF3525C269A56
MD5 SHA1 SHA512 SSDEEP TLSH

Lng/sk

SHA256 6b6c25b5ad064dd00acc4c06977a094c0db309a49c1664c78782809713356da3
MD5 68390ca49120f061965403e2f3f70d2f
SHA1 2eb0235c72d18933756c33986b5235da06070bed
SHA512 86e6a6b4526009b2b5bdc6bbe6b417a32298b973482c02d58d0ccadb5646af672a4fc39162eb1c8fa48a2f86c6156f3c9141ccf129cc58a5cd04b898cc3766e3
SSDEEP 768:kMFY7WgNEZ1SJ7/OZdZS7K6AARAJfGIyf:R6KgNE3xg7fZAJfGIyf
TLSH
T1BFF28527C4614D6707F293837CCA5952F2A4934F83910C0B79BDD24C1F7658EE2DBAAA
MD5 SHA1 SHA512 SSDEEP TLSH

Lng/sr

SHA256 e727c6e314979ce8d46a9dd7d4cc20790114f483990ebc58bc8673b9ac2e7460
MD5 3400a48939474e20d07a7f2e494c73be
SHA1 0f6c4c0f61d94d45cdcad3d36fcf7a0934d532a0
SHA512 c09b6eb8bc2d87a484f1a6ba13dc559d270a94a8cf5de23458309452292658d486f1f277512c57da5959ed2fd618dc68abb27ad08d0fd83f7147ebfa6bef8b1e
SSDEEP 768:XY5oBR36i5hcVPhV3M7XWMwtSk9EXKCZBnmodJnW:XfBR36WhcVPhV3M7XWMwtvuXJLmodJnW
TLSH
T1EE037523C8B04D6907F693CA6ED74642F5B9030FC2904C1B38BDD60D5FB658AA0DEE69
MD5 SHA1 SHA512 SSDEEP TLSH

Lng/sv

SHA256 6160fd3b495da28e768adb8aeddb0b138575c9704b9d004260fd82612984baee
MD5 bd9130e680440a4b95d2d9f7aaa4a98a
SHA1 02de0c9e9352a3b829616c0578aa037b37085ff5
SHA512 556bf100aca319a3049373c4b20913421411784f81a23aab59c17a7a02615a9dbf15e276f3490861b97e1c7d626099cb27092bab32549377982747e56eff6fd1
SSDEEP 384:bantQz8X18LhTGDHg6YnRASyNR5utZ0Aqq1lN1gLaWoFuZSzi6RNitdNI3nHIGDG:bGQweNGU6YWlOWhSkmDOADG/
TLSH
T1EB03A613C8605D7B16F18386689D0986F6E8535F82E10C0B38FDC65C1F76489E6DFAAA
MD5 SHA1 SHA512 SSDEEP TLSH

Lng/th

SHA256 0a291059a5e7667bf59588f8e9d04d96ee8a0ce150fb97011745df55ae41f21a
MD5 e944edb57d1b08373cd9cd180d749ca7
SHA1 9aecf3bd6bf9a5fae217f0d1b9b35c930c54597c
SHA512 0ee3151fb90f246767f00c3dcea8952388d089664392f4921eebd6274bed778fc9f1dfb778296d62d90151a2d44ad371a468e3878f3960ea297264e35018f477
SSDEEP 768:djIlOs/UDfqjTpUsxDHI4RUImwEoMe5nzW1IAHW3XvAnQqLI5RClf43k+3WY4B4z:wrB0p4qGGS8N+/ZAJfGIyf
TLSH
T1BC43CD33E04A9D9425740B47285AB285F2686B5F3762F8D6B0BC554E6FF470EC022EE7
MD5 SHA1 SHA512 SSDEEP TLSH

Lng/tr

SHA256 84b0ce3f80994e4e001e591f74728eea8870234e602c6f435c3a7495036197a8
MD5 0d0b33e7efd9865c6ce7b29f042981c0
SHA1 bc267471566a7a398de61014b2ef7bcb3edcc81b
SHA512 0a6d213327ba4b9a4a90edc7389cd99f51150bf50897fe02426d39f0bfb20908c4351e2ef30999ea212aa7637fbd48feec14e75c192bae0ab99740926b4bdee1
SSDEEP 768:uk+auyMLnBg1rqVUzFPd5HlK5x6xezqC0Aq+v/A/GAf:uPEMLOuqpjcx6xezqC0AH/A/GAf
TLSH
T17C03C603C8B10C6A47F213C6B88E4992F5E5535FC3A10C0B79BDC24C1F7659AE2DBA69
MD5 SHA1 SHA512 SSDEEP TLSH

Lng/zh

SHA256 60800b4d040bef558db77d222932b58353e2c48c89b3bbfaa91178cd5298953e
MD5 d4f31257c164a86c94701713c96b110a
SHA1 706a36e96f6c60c5ed830f62751e9e25052d68c3
SHA512 f0159ea0b796e855d9b1eca6f5bc279a868da6c0605e8d54f308dc2e137de9b38dcc3a23e2ddf4f5da57148385fcd7d62075a0d03964933e508d87f62ce00cae
SSDEEP 768:rUskDzQHNZP8PynAzuGMRUmkNO3E6ZS7AnvG0PAbVAfGIyf:QzQ3P8Wg7AOuA2fGIyf
TLSH
T15EF29727C8654D7A01F293827C9A5542F2A0934F93A10C0B787DE24C5F7698FE2DBE96
MD5 SHA1 SHA512 SSDEEP TLSH

Lng/zh-Hans

SHA256 ca15323a27288af50277fe3322b9634484fa71ddd2bb66239f09342246638141
MD5 2a5f491c2e1fa59032adf395bb237323
SHA1 e5b058cb708835ca21481502611513d8dcab7f4c
SHA512 edb25ab106dfa1be6e0537a92532c7c06aa167e00d4efebf58d4cfd5ac38937cd508a6c013778280a0beda2a2ad3b9ae4555c3f44176bec36bfd50d821df4e3b
SSDEEP 768:nSB4oty0Hj5M8FPIxLzXwse0xEZS7Mve5nb/ANXjfGIyf:VoFM8Ng7MGBA1fGIyf
TLSH
T1F4F29527C8A54DB602F293C27C8A5552F2A0534FD3910C0B79BDD20C5F7698EE2DBB96
MD5 SHA1 SHA512 SSDEEP TLSH

Snd/alert.wav

SHA256 7d0cd2a947fd994712147dead864a6f9d5aaa722946628d87149c194b9d3a282
MD5 cd73ce8cf1f2922c07ca5b4d99df47cb
SHA1 f176993311a5d841a4eab8c6cca4765d5cec751f
SHA512 7ade62aed140de545100c1817b4e17d7d193fe7e7be6049a2cb8e434a89603f20bf1c54592dbda4054827bf0e127a29c949da21623c7bb8647aee0b5053e5dc0
SSDEEP 3072:1b44dr0rdvwB4dihjVU3pPW72P9yOsxXOVxU2GkghMSj5AWcw/B:1h6pwOdiDU3ZGu9yRXOvt4hBVMq
TLSH
T198E32A81B382FD00C426797A4D1AE6E45733BF84AF06A2233051BB7F7EAA9514DDD6C1
MD5 SHA1 SHA512 SSDEEP TLSH

Snd/chirsp.wav

SHA256 92436e8d76a67dde28d6a71daa05c7142aca1c24e8b464d267b905c08899a3da
MD5 ce31b5053d7e6b8e70c15f8766c59a78
SHA1 bd214b4ea1c52adc0d1af155fcf267a449d108da
SHA512 0b3bf1d59c3a6eeb98aca7951f18358b52b63a27b7af1bb27c4a4c92271e64d3f12a6b3a1c6a0df582c30edd3f9986b4f632a6a616e0cb763fab84e7dc1343b6
SSDEEP 384:FvRhcA1ZjOT8jxQG9RMnyhFwbbGywSWMa6GfOYGNtSDoDhTh4hKJb8WHeta+CflA:P57jOTCW2RMnyH2GS5DYGNtSDoDhTh4B
TLSH
T1A2A284847381FD05D456B9BE0A4AC6E86773BFC81F05922770A2A7BF2E68E450CDD2C5
MD5 SHA1 SHA512 SSDEEP TLSH

Snd/error.wav

SHA256 55b676ee65fa43338557b2bf3925f9ac913935f5b5e7c4b2dcfd1bfaa94c4ef3
MD5 fcc8c1df4f9bfa03c0fa439e1cb151ca
SHA1 fa3771f404dc38800c168a9877c3278af2399828
SHA512 db7a26b0cb06d662767d55945911c277137abcaa04c13ba912af8e2327cb24b75d082b0582da0976a8ec6f50ef07c9a23f45ae8d5fe86b8d73820b7396ad0c45
SSDEEP 768:/4x5D2aRoF/0rpi5rKBWk3WzD4UO0sdM3VVt46bI0s7WftIjSj5uzJJdJgU3Zvwj:QWVswMn0DOwdLYp4a0I8aSpOcdVODhxc
TLSH
T15A63A181B785FD85C80478FE0A8EE6ED9727BBC51B02A3637051B77B6AA8E040DDC5C5
MD5 SHA1 SHA512 SSDEEP TLSH

Snd/image.wav

SHA256 ce3033504a0da9b75eaa38290507cba291ac4e28114a4a4f5c9b7995d307e327
MD5 9a323a514e5b9a579b7cc9e94578bc1a
SHA1 26330d385b4fb5ca30104eab57e487e34ca8fdab
SHA512 137fbd0649b3f788f6f68f8b45cb705f46906f7f2b3bef38ebf4ce43ca09e6e050872cf2bed652c0ecb5f82a851c1053df4f1b1c7ab22da9ee8340425fcbea4d
SSDEEP 384:xLyTjbBVd45p8PSPETyGsMrXeCGAIFNZCEKFeplwGVbns+G0iftU9hUJeAcRCaya:F6psErTyxMrOhnKEgss+Ki9CMAgCJDmb
TLSH
T1F1B29692F640ED50C4556E7E4D2AEAE847337B92EF4B62263040B73B3DF29C1996C6C1
MD5 SHA1 SHA512 SSDEEP TLSH

Snd/incoming.wav

SHA256 d9e32ffa3c8866a99f5d19da515e3a29887a471992306c42ffc98ad7f54214cc
MD5 a69e91968cb9c2a6672df5245eba6140
SHA1 a008a9fb3cee47af8fe8e508b18fe31d5a0cbb86
SHA512 bfec84bc794513ded396cfc2529c9adee2e8a76ad50f233000e4a506859262f49de72ed7af023c51105c5e9c8e68ce65304cd1cbbece28cbcaade4e520029e6c
SSDEEP 384:Z/aTIYvBvLomRen2Z547iz3Ux6HXUrxqMPDBaqYnZoMME1DL6o0efSxuEvof:JaEABz2xei3NCKhkDfoef
TLSH
T18623B019CCC8A234F1A8CF7C14F78E48F273308D776D16A2621D518A9D656EDD90BB8B
MD5 SHA1 SHA512 SSDEEP TLSH

Snd/incoming_soft.wav

SHA256 ebbc2b5df43e2a550bb9a6ec64db4d807df07adc9c31efc6ed3fb72071b1971d
MD5 e55620650d603e40a46bae7648d46f7b
SHA1 16afd58f6a7b6ba7ddb212b657e8025ccd6e6ac2
SHA512 0f5fc39b58f5f0dfd9f06585f97e54b2f1e59cd55557750a992c19260307104f9f17bfab576afb441379792d8dff916932f2d1c88d4f7c655aa45d1590a12145
SSDEEP 768:pXZPfWOROqlnX3iUi0OUDVWbvlrCjOuruS4Fjme:pXRfWYTnii6b9rQy/jme
TLSH
T148234162E144AFA4558ADE7E91B7911F631C0ABFCF623F8E2940FE6078424C97B913D4
MD5 SHA1 SHA512 SSDEEP TLSH

Snd/new_conversation.wav

SHA256 fa495bb2c0e7422a6cf3926c16abfd80d539987e7d46227f2d37767383b1551e
MD5 6268b0c5e61f346bc4e7061bfdce55a3
SHA1 913189e406aa636cbf96635514d963c71abe95ba
SHA512 78db9e015a01ce14e73addc45543946571d304fb870d0c71e662f1142d5925c4b9789dfc08f3b4edba5d5705ae88bc31a37c24f3262dff0729a29968ceaea8cc
SSDEEP 384:LGJHJNnCf0xNDy1YqzEZ9w1e43dRDfMYENCtFyf8dUdi4VHoebu+h38c:8JNCfAqYjZ9wbPE5f6Udi4VHoIR
TLSH
T11042BFF0E1ED85EC903A2D3D0D7A74E40B49F25F9E50BA0363009AB735127984867AEF
MD5 SHA1 SHA512 SSDEEP TLSH

Snd/out.wav

SHA256 8fb1a49acf9bd98e0840afc6b1ca0aeccdb96b0a7135819922e7cfa3533aa3f7
MD5 904773c3711bce0f182674678e9418e4
SHA1 516329223027103c11169fb38cedfc773545064d
SHA512 8cbe27f716ed9cdb53a3da5f5e2895ac8dd0fcd91b742792f7d29e1f5510959ca51cf20e352c32d120a980686efae685aed9518d0a9c0c7606519e5bd42efb3e
SSDEEP 768:HBUaO/HTkhRiciacnealbfKBmIgCa56jxx+PynPU4jvSNMfPsm:HSaOQhRihTeAf2m5Z56jxx+PUPkMHz
TLSH
T167139DE6F5DA52E16042F46E2B44B474A94F1FA32E52E3653030B32F678422B8CF6DD5
MD5 SHA1 SHA512 SSDEEP TLSH

Snd/outgoing.wav

SHA256 9918649255896dc79854097c077e8f406280466fa2d014cbcd84861b30686f16
MD5 e3e3e111935b7eb05986c7d5e6afae4a
SHA1 335619c7b02770ab3cf2301918787fd53552a942
SHA512 3017c1a300e6694e8162bfee3fb3aa59ff21bc202310a8cde31f2eea950ec9734ff3544992253eda5dd94b45c5235798d51804eb1f9e1af9ec01aadd39172f9b
SSDEEP 384:gcmYYu9K7xiDmXGHC0EPGQI5JKeCNu1JDsx4itf6452FoYbHzLNmJlu:9mYYiFDmXGHC0EPGQI/KeCNu1JDsx4iG
TLSH
T1FB520C447381C900EAA4F9BA5DDFC8F513267D849F60E5533AF77B2B2A725039C4A748
MD5 SHA1 SHA512 SSDEEP TLSH

Snd/over.wav

SHA256 b3019da388e0fda3e2e0f9a5d2d8504ac91ad3017f67953ac856c751c399e110
MD5 122e70466b9a99b6f467829dfb8a13c0
SHA1 f7366878efb39474caae496e56f8365e098b483a
SHA512 40727a0476e2acb772fc53e46d88c6c236e9ff0ade3b7a3581b40fb148679f65b2878ef46016ad030e55d128c3f6e3f7e5d4bec4a6f0b361b5c679bd4f16b703
SSDEEP 384:kcgBPCnxQYAI3YOdJOeG8zRsWgIuKNQPN9eN05jwqFoW9X0Gsb4UVuOwy1:C6xjAIo1ynRuLN97DFoWaGs9gO11
TLSH
T1038202688D2D8B76103929318132CADADB755347380B3E5F5225FFCC5909F88BAE3E59
MD5 SHA1 SHA512 SSDEEP TLSH

Snd/pow.wav

SHA256 75cefb8c51d5cc138b9c96f90bdf2bee1290a0ecb01b2c4f943608ddee2746db
MD5 1383770f7c39f543032dac305bc6c541
SHA1 c1f667d054b7bd060ab9d46364b9f106ceb0da3a
SHA512 d08904aa90e3d5afb2be911991f3534574c08460b5b808d438ce98f4d0a6a0d8a77c57d31e69bf948c486aa89700fea04df9b3ee6366ccad714eacb23ff21b2f
SSDEEP 384:3pFGD5KkbSwLatIqteGCqGwWmPO4cW+9Xowk+ttNU0b9V7qy+2TKHm/6w:vGD/V2CqteGCqGwLO4cno16N/b95qy5b
TLSH
T167A2BF78F5838942676792957E610A8244D0B0464C6DA0BF368DCE2F76C7760F3B8BEC
MD5 SHA1 SHA512 SSDEEP TLSH

Snd/pttup.wav

SHA256 38e87a0e899e64d51474df7c5a8c5568bc4a2e8da01b7e0ee87d80bbac2a81b2
MD5 a17f2de757ee8073c1749484d1f29bbe
SHA1 e87f5b100fc3e8525ec65deea7a3630f04172900
SHA512 a8177481dd3df371284fe0b8cd98779ea971a4d2ae3dd5fe84677fa27a307c820b44d996f7b305a4b8822ae635f49394dfe06f6789c6df47accd074339a1e75a
SSDEEP 96:d9tXQWBq5hZVOyqyPN36DAj6IqBSWWB/rzvJ:dngWBq58yv36RRBSWWBzzB
TLSH
T14C918D32AD4D5379907BC4D9F060A0978D72BF99A4E648B1AD4F2BB1ADC863DC743384
MD5 SHA1 SHA512 SSDEEP TLSH

Uninstall.exe.nsis

SHA256 94f8f5ecb42b972a60c81b4bc1f0104a10bff248d1e9980696b5a1fe967b4acf
MD5 fcbf4967b1363602994b9958691dc06a
SHA1 cf95a64cc3a98d2cd97494d843ced03bd858ba3e
SHA512 3ad973f0a4883cccb2abdeb955595e803f1e3feccc0ff7c1cec69d0274ffc1deeb0f8f1e4cf60411d8780728fe9fcb1833312d58f8e9e55a05b5f3d96cade698
SSDEEP 768:8h7Ut8dornP+pwvc6Mw9kLncDai8pOYa8yo5OL8S04eoRis3/n5J0tA1NLtpp8n1:8ppqjT06Mw9EncOmGOoSh2sRutkzSciR
TLSH
T1644302B480C02D24ACB485D4352B7684E172295D79EBF9F8360F6BCBA9B5F62C3117B1
MD5 SHA1 SHA512 SSDEEP TLSH

Zello.exe

IMPHASH e17d3fc7c26f9940ca2c7a99dc3ea45f
SHA256 48b0770ac9463b84be6508cb946edf03c9088fa01333c95182a76e065407b7fe
MD5 4dcabf7d7a4f3dff7cc46eea6d1e7a4c
SHA1 19ddb006148f3a4200fac73e6540ea2a8b744019
SHA512 5c769636c2e769661233144c4824f41e44f2597e6add7c258c5334217bb1d76784870bebcb373ced5f2c3958b063efe43a5726c1a252824696971457ed53330b
SSDEEP 98304:XDwY2pBXHqPDOBzorVUBZLbhzFuMnozB9TwvHHmxYQCgff3dXDedNqG4ROXPP+wf:kY2/9v8zB9TaHNQXAdoGtn+wf
TLSH
T11586BE02BBD4C0F5E5E21B7098669BA94AB2FB304B31C4C776C44A1D6E70ED18E39767
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Digest

0c:84:8e:27:de:c9:41:ea:bb:1b:3d:5f:31:a0:14:65:f3:6b:7d:97:c2:eb:40:ab:e7:39:cf:f6:3b:5b:78:1e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Zello Inc,O=Zello Inc,POSTALCODE=78703,STREET=Suite 450+STREET=1717 W 6th,L=Austin,ST=Texas,C=US

Chains

Dec 14, 2020

CN=Zello Inc,O=Zello Inc,POSTALCODE=78703,STREET=Suite 450+STREET=1717 W 6th,L=Austin,ST=Texas,C=US

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Digest

48:bc:8a:e0:77:92:37:33:8b:88:a8:9f:66:be:f2:cf:d1:c7:0a:d9

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=Zello Inc,O=Zello Inc,POSTALCODE=78703,STREET=Suite 450+STREET=1717 W 6th,L=Austin,ST=Texas,C=US

Chains

Dec 14, 2020

CN=Zello Inc,O=Zello Inc,POSTALCODE=78703,STREET=Suite 450+STREET=1717 W 6th,L=Austin,ST=Texas,C=US

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Subject

CN=Zello Inc,O=Zello Inc,POSTALCODE=78703,STREET=Suite 450+STREET=1717 W 6th,L=Austin,ST=Texas,C=US

Serial Number

6a:dc:09:74:6e:b9:f0:27:97:32:be:bf:05:c1:ca:a9

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 19, 2019 - Dec 18, 2021

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 2, 2018 - Dec 31, 2030

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 10, 2006 - Nov 10, 2021

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Serial Number

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 1, 2019 - Oct 17, 2030

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 7, 2016 - Jan 7, 2031

Minor OS version

0

Major OS version

5

Entry point

4666314

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

g:\projects\zelloptt\zello-windows-client\bin\release\Zello.pdb

crypt32

CertFreeCertificateContext CertEnumCertificatesInStore CertFindCertificateInStore CertOpenStore CertGetCertificateContextProperty CertCloseStore CertDuplicateCertificateContext

ws2_32

WSAConnect htons inet_addr WSASocketW getsockname WSAGetLastError setsockopt WSAEnumNetworkEvents sendto closesocket WSAEventSelect WSACreateEvent shutdown listen bind recvfrom recv __WSAFDIsSet select WSACloseEvent WSACleanup connect socket getaddrinfo getnameinfo freeaddrinfo WSASend send ioctlsocket WSAStartup WSAWaitForMultipleEvents WSASetLastError getservbyport gethostbyaddr getservbyname htonl inet_ntoa gethostbyname ntohs

version

GetFileVersionInfoW GetFileVersionInfoSizeW VerQueryValueW

winmm

waveInClose waveInStart mixerGetLineInfoW mixerGetLineControlsW mixerGetID mixerOpen mixerClose mixerGetControlDetailsW mixerSetControlDetails waveOutOpen waveOutPrepareHeader waveOutGetPosition waveOutWrite waveOutRestart waveOutReset waveOutClose mixerGetDevCapsW waveOutGetDevCapsW waveInMessage waveOutMessage waveOutGetNumDevs waveInGetNumDevs waveInAddBuffer waveInGetDevCapsW waveInOpen waveInPrepareHeader waveInStop waveInReset

iphlpapi

GetAdaptersAddresses GetBestInterfaceEx NotifyAddrChange

rpcrt4

UuidCreateSequential UuidToStringA RpcStringFreeA

psapi

GetProcessImageFileNameW

oleacc

LresultFromObject AccessibleObjectFromWindow GetRoleTextW

msacm32

acmStreamSize acmGetVersion acmDriverEnum acmDriverDetailsW acmFormatTagEnumW acmMetrics acmFormatEnumW acmStreamConvert acmStreamOpen acmStreamPrepareHeader acmStreamUnprepareHeader acmStreamClose acmDriverOpen acmFormatDetailsW acmDriverClose

wininet

HttpAddRequestHeadersA InternetOpenW InternetOpenUrlW InternetConnectW HttpOpenRequestW HttpSendRequestW HttpSendRequestExW InternetReadFile InternetWriteFile InternetCloseHandle HttpQueryInfoW HttpAddRequestHeadersW HttpEndRequestW InternetQueryOptionW InternetSetOptionW

hid

HidD_GetAttributes HidD_GetHidGuid HidD_GetProductString HidD_GetManufacturerString

kernel32

GetModuleHandleA SetWaitableTimer OpenEventA RtlUnwind TerminateProcess UnhandledExceptionFilter VirtualAlloc VirtualFree IsProcessorFeaturePresent LocalAlloc CreateWaitableTimerA GetLastError EnterCriticalSection LeaveCriticalSection GlobalFree GlobalUnlock GlobalReAlloc GlobalLock GlobalAlloc MultiByteToWideChar lstrlenA lstrlenW MulDiv LockResource SizeofResource LoadResource FindResourceW InitializeCriticalSection DeleteCriticalSection InterlockedIncrement InterlockedDecrement RaiseException FlushInstructionCache GetCurrentProcess GetCurrentThreadId SetLastError lstrcpyW FreeLibrary LoadLibraryW CloseHandle WaitForSingleObject Sleep GetTickCount CreateDirectoryW GetFileAttributesW ReadFile GetFileSize CreateFileW GetVolumeInformationW SetFilePointerEx SetFilePointer SetEvent SetUnhandledExceptionFilter CreateEventW GetSystemTimeAsFileTime TerminateThread WideCharToMultiByte WriteFile DeleteFileW CreateThread SetEndOfFile SystemTimeToFileTime GetSystemTime InitializeCriticalSectionAndSpinCount GetTimeFormatW GetDateFormatW FileTimeToSystemTime FileTimeToLocalFileTime GetProcAddress GetModuleHandleW CancelIo WaitForMultipleObjects CreateEventA HeapFree GetProcessHeap HeapAlloc WaitForSingleObjectEx DeviceIoControl ClearCommError SetCommMask GetCommModemStatus WaitCommEvent lstrcpynW GetModuleFileNameW TryEnterCriticalSection GetTempFileNameW GetTempPathW CreateFileA GetDriveTypeA GetLogicalDrives GetFileSizeEx CopyFileW MoveFileExW FlushFileBuffers CreateSemaphoreA ReleaseSemaphore WaitForMultipleObjectsEx GetFileTime GetShortPathNameW GetVersionExW GetOverlappedResult GetUserDefaultLCID FindClose FindNextFileW FindFirstFileW VirtualQueryEx GetLocalTime OutputDebugStringW MoveFileW CreateMutexW lstrcmpiW lstrcmpW LoadLibraryExW SetProcessAffinityMask GetModuleFileNameA OpenEventW GetCurrentProcessId GlobalMemoryStatusEx lstrcpynA LoadLibraryA GetSystemDirectoryA ExpandEnvironmentStringsW CreateMailslotW GetMailslotInfo InterlockedExchange CompareStringW LCMapStringW ResumeThread QueryPerformanceFrequency RemoveDirectoryW SetFileAttributesW OpenProcess GetDriveTypeW GetLocaleInfoW GetModuleHandleExW InterlockedCompareExchange TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedExchangeAdd DeleteFiber SwitchToFiber CreateFiber GetEnvironmentVariableW GetVersion GetFileType GetStdHandle FormatMessageW QueryPerformanceCounter ConvertFiberToThread ConvertThreadToFiber GetConsoleMode SetConsoleMode ReadConsoleA ReadConsoleW FlushViewOfFile OutputDebugStringA UnmapViewOfFile UnlockFileEx UnlockFile MapViewOfFile LockFileEx LockFile LocalFree HeapCompact HeapValidate HeapSize HeapReAlloc HeapDestroy HeapCreate GetVersionExA GetTempPathA GetSystemInfo GetFullPathNameW GetFullPathNameA GetFileAttributesExW GetFileAttributesA GetDiskFreeSpaceW GetDiskFreeSpaceA FormatMessageA DeleteFileA CreateFileMappingW CreateFileMappingA AreFileApisANSI IsDebuggerPresent VirtualProtect VirtualQuery ExitThread GetStartupInfoW ExitProcess SetConsoleCtrlHandler FindFirstFileA LCMapStringA GetCPInfo GetStringTypeW GetACP GetOEMCP IsValidCodePage SetHandleCount GetStartupInfoA GetConsoleCP GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetStdHandle GetFileInformationByHandle PeekNamedPipe GetCurrentDirectoryA GetTimeZoneInformation WriteConsoleA GetConsoleOutputCP WriteConsoleW CompareStringA SetEnvironmentVariableA ResetEvent

user32

GetKeyNameTextW GetNextDlgGroupItem GetClassNameW GetMenuItemInfoW GetAsyncKeyState RegisterClassW GetWindowPlacement DestroyIcon OpenClipboard TrackPopupMenu CheckMenuItem CloseClipboard SetClipboardData EmptyClipboard wvsprintfW GetMessageW CharNextW InvalidateRgn IsChild GetDesktopWindow DestroyAcceleratorTable LoadAcceleratorsW LoadStringW CreateAcceleratorTableW RegisterWindowMessageW SetMenu SetMenuDefaultItem keybd_event EqualRect WindowFromPoint TranslateAcceleratorW GetMenuState CheckMenuRadioItem GetMenuItemCount GetMenuItemID TrackPopupMenuEx ModifyMenuW CreateMenu GetMenuInfo SetMenuInfo InsertMenuItemW SetClassLongW UnhookWindowsHookEx IsMenu ReplyMessage CallNextHookEx DialogBoxIndirectParamW SetWindowsHookExW GetActiveWindow DeleteMenu GetWindowThreadProcessId DrawFrameControl MessageBeep CharLowerW GetAncestor PostQuitMessage GetRawInputDeviceList LoadStringA RegisterDeviceNotificationW GetDlgCtrlID ShowScrollBar IntersectRect NotifyWinEvent CopyRect SetDlgItemInt GetDialogBaseUnits GetUserObjectInformationW RegisterHotKey CreateWindowExW RegisterClassExW LoadCursorW GetClassInfoExW GetNextDlgTabItem EnableWindow IsWindowEnabled InvalidateRect UpdateWindow DestroyWindow PtInRect ClientToScreen GetFocus SetRect SetWindowLongW EndPaint BeginPaint GetWindowDC FillRect OffsetRect DrawTextW GetWindow MonitorFromWindow GetMonitorInfoW MapWindowPoints SetWindowPos GetDlgItem GetParent SetFocus ShowWindow ScreenToClient GetClientRect GetWindowRect MoveWindow GetWindowTextW SetWindowTextW SendMessageW GetWindowLongW EndDialog IsDialogMessageW GetForegroundWindow DrawEdge SetForegroundWindow IsWindowVisible UnregisterDeviceNotification GetRawInputDeviceInfoW GetDlgItemInt IsWindow SetWindowRgn GetCapture ReleaseCapture SetCapture BeginDeferWindowPos DeferWindowPos EndDeferWindowPos AdjustWindowRectEx GetCursorPos GetSysColor DrawFocusRect CreatePopupMenu AppendMenuW DestroyMenu SetCursor MessageBoxW KillTimer GetDC UnregisterHotKey FrameRect SetMenuItemInfoW RemoveMenu InsertMenuW EnableMenuItem GetMenu GetWindowTextLengthW CreateDialogIndirectParamW LoadMenuW GetSubMenu GetDlgItemTextW wsprintfW DrawIconEx SetActiveWindow MonitorFromPoint LoadImageW CharUpperW UpdateLayeredWindow GetScrollInfo MapVirtualKeyW TrackMouseEvent GetDoubleClickTime MapDialogRect RedrawWindow SystemParametersInfoW GetMessagePos GetProcessWindowStation SetRectEmpty SetDlgItemTextW SendDlgItemMessageW SetTimer PeekMessageW TranslateMessage DispatchMessageW CreateIconIndirect GetSystemMetrics InflateRect GetClassLongW ReleaseDC GetSysColorBrush CallWindowProcW DefWindowProcW SetParent GetKeyState PostMessageW UnregisterClassA

gdi32

Polygon RestoreDC SaveDC SetWindowOrgEx ExtTextOutW DeleteObject SetViewportOrgEx GetTextMetricsW SetBrushOrgEx GetCurrentObject GetClipBox GetTextColor GetBkColor LineTo MoveToEx PtInRegion CreateBitmap CreatePatternBrush PatBlt GetDIBits OffsetRgn CreateRectRgn SelectClipRgn RoundRect CreatePen GetStockObject SetBkColor SetTextColor SetStretchBltMode StretchBlt CreateCompatibleBitmap GetTextExtentPoint32W CreateSolidBrush BitBlt CreateDIBSection CombineRgn CreateRectRgnIndirect ExcludeClipRect GetObjectW CreateFontIndirectW GetDeviceCaps CreateCompatibleDC DeleteDC SelectObject SetBkMode IntersectClipRect Rectangle GetClipRgn LPtoDP DPtoLP Polyline

comdlg32

CommDlgExtendedError GetOpenFileNameW GetSaveFileNameW

advapi32

CryptEnumProvidersW DeregisterEventSource CryptDecrypt CryptCreateHash CryptSetHashParam CryptSignHashW CryptDestroyHash CryptExportKey CryptGenRandom RegisterEventSourceW RegCloseKey RegOpenKeyExW RegEnumValueW RegQueryValueExW RegDeleteKeyW RegDeleteValueW RegCreateKeyExW RegSetValueExW RegQueryInfoKeyW RegEnumKeyExW SetSecurityDescriptorDacl InitializeSecurityDescriptor ReportEventW CryptReleaseContext CryptDestroyKey CryptGetProvParam CryptGetUserKey CryptAcquireContextW

shell32

ShellExecuteExW SHGetSpecialFolderPathW ShellExecuteW ord155 SHOpenFolderAndSelectItems ord190 DragQueryFileW Shell_NotifyIconW SHFileOperationW

ole32

RevokeDragDrop RegisterDragDrop ReleaseStgMedium PropVariantClear OleUninitialize OleInitialize CLSIDFromString CLSIDFromProgID CoGetClassObject OleLockRunning StringFromGUID2 CoTaskMemRealloc CoTaskMemAlloc CoSetProxyBlanket CreateStreamOnHGlobal CoTaskMemFree CoCreateInstance CoInitializeEx CoInitializeSecurity CoUninitialize CoCreateGuid

oleaut32

VariantCopyInd VariantChangeType CreateDispTypeInfo DispCallFunc SysStringByteLen SysAllocStringByteLen LoadTypeLi LoadRegTypeLi OleCreateFontIndirect VarUI4FromStr SysStringLen SysAllocStringLen VariantClear SysReAllocString SysFreeString SysAllocString VariantInit

shlwapi

PathStripToRootW

comctl32

ImageList_Create ImageList_Remove PropertySheetW ImageList_Draw ImageList_GetIconSize DestroyPropertySheetPage CreatePropertySheetPageW CreateStatusWindowW ImageList_GetImageCount InitCommonControlsEx ImageList_ReplaceIcon _TrackMouseEvent ImageList_Destroy ImageList_GetIcon ImageList_Add ImageList_AddMasked ImageList_DrawIndirect

msimg32

AlphaBlend TransparentBlt

setupapi

CM_Get_Parent SetupDiDestroyDeviceInfoList SetupDiGetDeviceRegistryPropertyW SetupDiGetDeviceInterfaceDetailW SetupDiEnumDeviceInterfaces SetupDiClassGuidsFromNameW SetupDiGetClassDevsW SetupDiEnumDeviceInfo SetupDiOpenDevRegKey

Sharing

General

Malware Config

Signatures

File Explorer

ZelloSetup (5).exe

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

generic

$PLUGINSDIR/InstallOptions.dll

kernel32

user32

gdi32

shell32

comdlg32

ole32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

$PLUGINSDIR/ioSpecial.ini

$PLUGINSDIR/ltnsis.dll

kernel32

user32

gdi32

advapi32

shell32

shlwapi

generic

$PLUGINSDIR/modern-header.bmp

$PLUGINSDIR/modern-wizard.bmp

$TEMP/Zello.exe

crypt32

ws2_32

version

winmm

iphlpapi

rpcrt4

psapi

oleacc

msacm32

wininet

hid

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

msimg32

setupapi

generic

Lng/ar

Lng/bg

Lng/cs

Lng/de

Lng/el

Lng/en

Lng/es

Lng/fi

Lng/fr

Lng/fr-CA

Lng/gl

Lng/he

Lng/hr

Lng/hu

Lng/id

Lng/it

Lng/ja