Sims4_DLC_FP01_Holiday_Celebration_Pack.zip
- SHA256 b90d727d09402ef99b0d32aaad735135fe448d9382f6e6d1c862f491ae911f36
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
__Installer/DLC/FP01/__Installer/Cleanup.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
__Installer/DLC/FP01/__Installer/Cleanup.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
__Installer/DLC/FP01/__Installer/Touchup.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
__Installer/DLC/FP01/__Installer/Touchup.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
General
- Target Sims4_DLC_FP01_Holiday_Celebration_Pack.zip
- Size 28.7MB
- Sample260809-ph3zws1sb1
- SHA256 b90d727d09402ef99b0d32aaad735135fe448d9382f6e6d1c862f491ae911f36
- MD5 8c7bcb73ce3d656325c3907b0866ec70
- SHA1 fa98c28bac7db4272c54fb8617868798982142b6
- SHA512 18d22df9b76f642096ec1ae3ec94c22ff3c4148941e9f31f3f11cf41a6808a6ba8081186862b2b2d88ed098e7cf23af0cac1eec170f3f0c128578a70c91bfbf6
- SSDEEP 786432:r8Xgjm6JqApnvdZ1qLzn/qN6nL0fKzCX2ihhtk8KqF6AZa:6omTApvdZ1qnnysWGiftkAy
- TLSH T18367330896B24FEFAE8C70593AD09A20FB24907A50EA7DEB3F5D4346D716F0694C6F14
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Untrusted Codesign Signers 2 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/__Installer/DLC/FP01/__Installer/Cleanup.exe unpack001/__Installer/DLC/FP01/__Installer/Touchup.exe
File Explorer
-
Sims4_DLC_FP01_Holiday_Celebration_Pack.zip.zip 28.7MB
-
FP01/ClientFullBuild0.package27.2MB
-
FP01/ResourceClient.cfg178B
-
FP01/ResourceSimulation.cfg97B
-
FP01/SimulationFullBuild0.package36KB
-
FP01/Version.ini533B
-
FP01/thumbnails.package1.1MB
-
__Installer/DLC/FP01/Support/mnfst.txt451B
-
__Installer/DLC/FP01/__Installer/Cleanup.dat81KB
-
__Installer/DLC/FP01/__Installer/Cleanup.exe.exe 834KB
-
__Installer/DLC/FP01/__Installer/Touchup.dat80KB
-
__Installer/DLC/FP01/__Installer/Touchup.exe.exe 835KB
-
__Installer/DLC/FP01/__Installer/installerdata.xml.xml 4KB
FP01/ClientFullBuild0.package
- SHA256 f211a6de3e1f9b91bc5e48c9f7b6aa1ba273100d4a427b53e7f9930d7cb2599e
- MD5 eb6b6c89b42fe76ed4b53c425747d314
- SHA1 5e9e0d2c83f63a50227c8a6203a0ac2d30e6b009
- SHA512 dbe8eda62f2c3cfc56796da02f5554abbedff658e5f373e6acefd7124cfce1c05224f1152953190095908b8225cdce9a2a5008f0fc76ad7bfd1e832b2fb85a52
- SSDEEP 786432:jW25CrSRSATAWH997XvCXDvnQr+/acE5a6NuWR1IotJhFlmw:jmWS/WHz7XvCzvQiC86zR13PF
- TLSH T1AB573300A5728FEFE985F17997C00D11FB34A479E1BABBE73D9500C3BA5866888D5F60
- MD5 SHA1 SHA512 SSDEEP TLSH
FP01/ResourceClient.cfg
- SHA256 9db4e6e8f2e5f96a6ab51503aba8bb6f0cdb034f82686f8ff3dcdb22f8b17731
- MD5 6496b6e257e6836b974c9957a3e1f358
- SHA1 a98a28c92fbc5048d3ae8a886dfe443a85f3fa59
- SHA512 2d3703c604da58984787e34ef1dfd470be287ce015b964451f5b12728a7babbdf8f85e1c114bf551cb0883b5866d9a825aa1216161fd65367866fb556be3f0a0
- TLSH T1E9C002969789A38ACA7C5928E2304A56619FB174709582EC605BC55C3211A83C1E38B0
- MD5 SHA1 SHA512 TLSH
FP01/ResourceSimulation.cfg
- SHA256 17ef5496ed32a04e7485a02ad63fc0d0a1d2848fa6e31548e35d2ee22e1fd936
- MD5 e8c8d6da90046dbae6bfde67d90c705b
- SHA1 cf36cdad7fc5f6d32a589243807c7226a6e1cef4
- SHA512 0fba8f5353ba3287bd6b86c3faa77354ba2d59b4039c57b56c471e2d66873d359c3a875480b7a504ceb5b9a579ae0a4f23120e8f9458115695f006c9d1376ca9
- TLSH T190B012550B6C8346467C9669E370891530EF70243041038C208AC15C3310B8140F3460
- MD5 SHA1 SHA512 TLSH
FP01/SimulationFullBuild0.package
- SHA256 5045690ad18d306e07a5b7c8d08dab7c4913e27058d757e9384e46809ce486ac
- MD5 c3f87797155ee61ea75d6af6eb0b1296
- SHA1 83a71c16bbf00bcdef8131c42bad55fb8813dae4
- SHA512 f6e8787a9350deaa5bf73817b8790359aa08c1f97018bd5945c2adb0e44026c63eeb59ebd4ab383c2d1cc9dbc8b17a282570f3dc211afddec4bed66b5193a92e
- SSDEEP 768:M5SU33bgWUaeaGs0CZLclmZlaaaba/sw/uqFbZ9jd:MF3bgWUaeaMCZLImfaaaa/ssuqpjd
- TLSH T160038D50FCA5E4E0F9C08474C1CD7CA1981C7B7E1F9393BD2E890A4E2E796628D56A36
- MD5 SHA1 SHA512 SSDEEP TLSH
FP01/Version.ini
- SHA256 f4ef2408d38186519a3719c9dca20d5bb1309d38d4316e961be6c0be847a4a48
- MD5 e38c8a48941c7dfb8da566e6ec499028
- SHA1 6f76d21f66e16532c960a94f87e1d83d67d69a23
- SHA512 64eb605d6f87a1e8577e051c2008e0cfc0da2c0fec7cec6b3577f19c3aa78dece0da855ed10ec4edf52088f8c7174517ba2b23fd7e3610655ce06c05265901f3
- TLSH T153F050EC167294B7C9482BD5918975D45FFCB38CAE00904C33A6C685B644D9BF62D0B9
- MD5 SHA1 SHA512 TLSH
FP01/thumbnails.package
- SHA256 b11b3bcc8e93f70cc6724a1078fe84451a1c941517efbf6ccc569a6dcdefbe88
- MD5 28dab368c5392e34efe8610022fec699
- SHA1 d461c9c224acb466621ee9fb3f2364ba290d70d8
- SHA512 560997de5c5ef2bf52f5e542866b4dc023bb371d83a80feac2b115fc667cf63597b166046c5dcf12e062da30b14ae26421804ed273dfd3b01a1e5a9ebef4eb95
- SSDEEP 24576:nh9of9gkHDqxEHzOCEiBl3uevT/bqk9VvYEmb9Xd1mCffc285N:nh9oVtnO5iBleevTpVShfi5N
- TLSH T16645E1AB6B8247E0FC3B8AF785155DA2F2EEDE4139E0260F2DE545E1C650FC8954CA4C
- MD5 SHA1 SHA512 SSDEEP TLSH
__Installer/DLC/FP01/Support/mnfst.txt
- SHA256 a25a12b79519388773cddf6fb13a8a9b0fd3b66bf061036b2fca723f58165cd6
- MD5 19c876851087427db790c1c25e845c47
- SHA1 fe0c6b4dc65a035e90117976e595bf23cfc49813
- SHA512 52e19d430a95c1506e74741bcb52bc5437c3922403b64b61aeac3e26d42d49526ee90f595e32302f0557c28d5a3608288175b1152d0243554135463d74c02733
- TLSH T102F065A64FD092B23348C75F63EF2C3B1A2BF420E015F3B86AC3108657D6508262A833
- MD5 SHA1 SHA512 TLSH
__Installer/DLC/FP01/__Installer/Cleanup.dat
- SHA256 2a4bc9c3f37ea365fcb3d5179078cd71d314d070f40e4b314691ae158992671a
- MD5 2963cee25c33522b9b91ce947f8e7749
- SHA1 c5d48c694228519f20c07a97a73741b1bff488fa
- SHA512 7421c6e57a82096345e2d152904483f08d72ec3a6e3e7c81989b07dd52f9be28d0bbe7bf592ecb69665f724bbc45666ae1f8d64d83702b2cf710fe1aef1dae23
- SSDEEP 768:ZZBbWEscOyPf2c/m5YAoEqZT8CfzxSmBhT7g8xmVVPAeT1usgR8EU1uX3TKtx1xI:ZWj423lqZdHZO6e5urM1Nrx4/
- TLSH T13283F8851AB38EA03FFACE60AD6377F186C9324FA09CCC0B76CD9751E42855D21315AB
- MD5 SHA1 SHA512 SSDEEP TLSH
__Installer/DLC/FP01/__Installer/Cleanup.exe
- IMPHASH 15eec734a48fbcef510eac48573d9891
- SHA256 6f3b0bf85aab1ef1b26f8b711ee770ff14e987c84e5bd66e4379f6078196743f
- MD5 0e8ddf1e69e3a75b0615c6821d7a61ac
- SHA1 24a270f5440c1dd2de498d1fd200c5ef59b319bf
- SHA512 ae2ddb030eb4abc0d5f5aa6db83e75648b5c32471d76d8070ef5dd33690728dda4879e05ceb16d5d05210f715a3876acd442db1cf09f9790bd66f27b29e9b77b
- SSDEEP 12288:YOROqqDpik9geOjQDTpk8fP88/jvStPee+5JOHtIZi5biv4K4prv4c+L83aP8Ogx:po7TIGpOHFEZ45viYa4
- TLSH T1BE054A457BA1E879F5B204B5DFAD5051087E3EE44B3FA4DB97D03B588A34AC1AC30B26
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
42:b5:22:83:d1:2b:4c:71:c0:2d:27:78:da:12:66:2c:29:30:9a:12
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Electronic Arts,O=Electronic Arts,L=Burnaby,ST=British Columbia,C=CA
Chains
Aug 28, 2014
CN=Electronic Arts,O=Electronic Arts,L=Burnaby,ST=British Columbia,C=CA
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Electronic Arts,O=Electronic Arts,L=Burnaby,ST=British Columbia,C=CA
Serial Number
5d:61:02:92:38:ae:c8:07:6f:7f:c2:2e:41:8b:e4:49
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Aug 11, 2014 - Oct 30, 2017
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
1
Major OS version
5
Entry point
228233
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
PDB paths
kernel32
MoveFileA
DuplicateHandle
CreateProcessA
GetCurrentThreadId
GetFileSize
FindFirstFileW
FindResourceExW
LoadResource
InterlockedDecrement
GetCurrentProcess
WriteFile
GetUserDefaultLangID
OpenProcess
WideCharToMultiByte
Sleep
GetVersionExW
GetFileAttributesW
ReadFile
GetModuleFileNameW
CreateFileW
MultiByteToWideChar
lstrlenW
GetLastError
GetCurrentDirectoryW
GetLongPathNameW
GetProcAddress
FindClose
Process32FirstW
RemoveDirectoryW
QueryDosDeviceW
Module32FirstW
GetSystemInfo
Process32NextW
FindNextFileW
CreateToolhelp32Snapshot
Module32NextW
CloseHandle
SetFileAttributesW
CreateMutexW
WaitForSingleObject
ReleaseMutex
CreateThread
SetFilePointer
GetDriveTypeW
CreateDirectoryW
LoadLibraryW
FlushFileBuffers
CreateProcessW
CopyFileW
GetExitCodeProcess
DecodePointer
EncodePointer
GetCommandLineW
HeapSetInformation
GetStartupInfoW
GetSystemTimeAsFileTime
RaiseException
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteFileA
HeapFree
IsProcessorFeaturePresent
GetStdHandle
GetLocaleInfoW
ExitProcess
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
FreeLibrary
LCMapStringW
GetStringTypeW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
HeapReAlloc
SetStdHandle
WriteConsoleW
CompareStringW
SetEnvironmentVariableA
LocalFree
GetModuleFileNameA
LoadLibraryA
FormatMessageA
FindResourceW
LockResource
SizeofResource
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetFullPathNameW
GetTimeFormatA
GetDateFormatA
GetFileAttributesA
CreateFileA
CreatePipe
SetEndOfFile
GetProcessHeap
DeleteFileW
GetSystemDirectoryW
GetModuleHandleW
HeapAlloc
GetEnvironmentVariableW
user32
LoadIconW
CreateDialogParamW
ShowWindow
IsDialogMessageW
TranslateMessage
PostMessageW
GetMessageW
IsWindow
SetWindowTextW
DispatchMessageW
GetSystemMetrics
CallNextHookEx
GetDlgItem
SetWindowsHookExW
UnhookWindowsHookEx
MessageBoxW
SetDlgItemTextW
SendMessageW
DestroyWindow
shell32
SHGetFolderPathW
SHFileOperationW
SHCreateDirectoryExW
ShellExecuteW
ord165
shlwapi
SHDeleteKeyW
PathRemoveFileSpecW
msi
ord113
advapi32
RegEnumKeyExW
RegOpenKeyExW
FreeSid
AllocateAndInitializeSid
RegDeleteKeyW
RegEnumKeyW
RegCloseKey
RegCreateKeyExW
RegQueryValueExW
RegQueryInfoKeyW
RegDeleteValueW
RegSetValueExW
CheckTokenMembership
ole32
CoInitializeEx
CoInitialize
CoUninitialize
CoSetProxyBlanket
CoCreateInstance
CoCreateGuid
StringFromGUID2
CreateStreamOnHGlobal
oleaut32
SysFreeString
SysAllocString
VariantClear
Name
.text
Size
382KB
Virtual Size
381KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
106KB
Virtual Size
106KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
6KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
311KB
Virtual Size
311KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
21KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=5, id=171, productName=VS2010 build 30319, version=30319,
count=65, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=200, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=67, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=7, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=19, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=195, id=1, productName=Unmarked objects,
count=37, id=175, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
__Installer/DLC/FP01/__Installer/Touchup.dat
- SHA256 1a5060bf7210fd47c325c0fecc701b0e9627669e8c554f02a4fc93c83978a747
- MD5 b97b40bb78fbd574087b87a102d2ad03
- SHA1 ec355dea1a9640b77fae1e4d06608f35948f9020
- SHA512 1d50cc4633db4d618c11c123be8f623073bc9fb70ede472dc643317e555d6950b8afa0ade2106774fc213eff55c5291079ec5f2319a9a96ce42288fd52d944a4
- SSDEEP 768:ZZBbWEscOyPf2c/m5YAoEqZT8CfzxSmBhT7g8xmVVPAeT1usgR8EU1uX3TKtx1xd:ZWj423lqZdHZO6e5urM1QrxqP
- TLSH T11983F9851AB38EA03FFACF60AD6377F186C9324FA09C8C0B76CD9751E42855D61315AB
- MD5 SHA1 SHA512 SSDEEP TLSH
__Installer/DLC/FP01/__Installer/Touchup.exe
- IMPHASH ddfb1bc9463afff90d6c8c7f116d4e13
- SHA256 cace3d45b39e74e822c01e2c08de1862ae20d14926282782ad4f206741eb4e6e
- MD5 5e92ba7ef62cd62fb18e84401a59def3
- SHA1 5d0938fbd17d4c6b1c896dbe706092e709d1b23f
- SHA512 b2311f2b6af67a543c4e0f81dca911fcd6634265a192bc873962adf4bec3828c1e92be96ccf8efc39ecdaaad86d6ea759d442f2ca7d41b2823fc71de8356d64f
- SSDEEP 12288:TXUTHEm5TGcZiu4tZUmxBZ+K7fy2tvhDov6cS/Hut5icV+RlBEZU8bqmYsZ0:T67h+xhD7/MOBcDqmYsZ0
- TLSH T1A4054B09BB91D879F6B208B5DFBD5062087E3EE44B3F54DBA7D037588A34AC4AD31612
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
f5:76:ea:96:1e:3b:9c:f6:1b:63:40:67:0c:ff:37:d6:3b:7d:af:43
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Electronic Arts,O=Electronic Arts,L=Burnaby,ST=British Columbia,C=CA
Chains
Aug 28, 2014
CN=Electronic Arts,O=Electronic Arts,L=Burnaby,ST=British Columbia,C=CA
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Electronic Arts,O=Electronic Arts,L=Burnaby,ST=British Columbia,C=CA
Serial Number
5d:61:02:92:38:ae:c8:07:6f:7f:c2:2e:41:8b:e4:49
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Aug 11, 2014 - Oct 30, 2017
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
1
Major OS version
5
Entry point
231722
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
PDB paths
kernel32
FindFirstFileW
FindResourceExW
LoadResource
InterlockedDecrement
GetCurrentProcess
WriteFile
GetUserDefaultLangID
OpenProcess
WideCharToMultiByte
Sleep
GetVersionExW
GetFileAttributesW
ReadFile
GetModuleFileNameW
CreateFileW
MultiByteToWideChar
lstrlenW
GetLastError
GetCurrentDirectoryW
GetLongPathNameW
GetProcAddress
FindClose
Process32FirstW
RemoveDirectoryW
QueryDosDeviceW
Module32FirstW
GetSystemInfo
Process32NextW
FindNextFileW
CreateToolhelp32Snapshot
Module32NextW
CloseHandle
DeleteFileW
SetFileAttributesW
SetFilePointer
GetDriveTypeW
CreateDirectoryW
LoadLibraryW
FlushFileBuffers
CreateProcessW
WaitForSingleObject
CopyFileW
GetExitCodeProcess
DecodePointer
EncodePointer
GetCommandLineW
HeapSetInformation
GetStartupInfoW
GetSystemTimeAsFileTime
RaiseException
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
HeapFree
IsProcessorFeaturePresent
GetFileSize
GetStdHandle
GetLocaleInfoW
ExitProcess
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
GetTimeZoneInformation
CreateProcessA
LeaveCriticalSection
EnterCriticalSection
RtlUnwind
FreeLibrary
LCMapStringW
GetStringTypeW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
HeapReAlloc
GetConsoleCP
GetConsoleMode
CompareStringW
SetEnvironmentVariableA
SetStdHandle
WriteConsoleW
lstrlenA
LocalFree
CreateThread
ReleaseMutex
CreateMutexW
GetModuleFileNameA
LoadLibraryA
FormatMessageA
FindResourceW
LockResource
GetCurrentThreadId
DuplicateHandle
MoveFileA
DeleteFileA
GetTimeFormatA
GetDateFormatA
CreateFileA
CreatePipe
SetEndOfFile
GetProcessHeap
GetFileAttributesA
GetModuleHandleW
SizeofResource
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetFullPathNameW
user32
GetMessageW
DestroyWindow
LoadIconW
GetSystemMetrics
CallNextHookEx
GetDlgItem
SetWindowsHookExW
TranslateMessage
MessageBoxW
IsDialogMessageW
SendMessageW
ShowWindow
CreateDialogParamW
IsWindow
SetWindowTextW
DispatchMessageW
UnhookWindowsHookEx
PostMessageW
SetDlgItemTextW
shlwapi
PathRemoveFileSpecW
SHDeleteKeyW
msi
ord113
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
advapi32
RegDeleteValueW
RegEnumKeyW
RegQueryInfoKeyW
RegQueryValueExW
RegCreateKeyExW
RegCloseKey
RegEnumKeyExW
RegOpenKeyExW
RegDeleteKeyW
RegSetValueExW
shell32
SHGetFolderPathW
SHCreateDirectoryExW
SHFileOperationW
ord165
ole32
CoSetProxyBlanket
CoInitializeEx
CoInitialize
CoUninitialize
CoCreateInstance
CoCreateGuid
StringFromGUID2
CreateStreamOnHGlobal
oleaut32
VariantInit
SysAllocString
VariantClear
SysFreeString
Name
.text
Size
386KB
Virtual Size
385KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
105KB
Virtual Size
104KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
6KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
310KB
Virtual Size
309KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
21KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=5, id=171, productName=VS2010 build 30319, version=30319,
count=65, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=200, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=67, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=7, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=19, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=192, id=1, productName=Unmarked objects,
count=37, id=175, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
__Installer/DLC/FP01/__Installer/installerdata.xml
- SHA256 743b85f76d22b8d1de729ca94a89ee4f1d2ec7471e2f4251c4c8c9f3009bb27a
- MD5 761a61993b5fd75529820922124d1f5a
- SHA1 5e3cbad020b3533da71ee010fbea71dc08389a41
- SHA512 60e4619eb115ad3ce20c0f4d5f9dafadd1919ba545d6490b388273e2313a07863332b1958cb263dedbf291df28ab833c49781581b7d2c21ad30fcc2d7a8b50ab
- SSDEEP 96:+juNlc2kXw1PYCMPJMTM5lN2IUIZSsXi4sXi5sXi/sXi9sXiLsXi1sXiGasXiFoC:cuNlc2kXwRYhPJM45lN2IPSf4f5f/f91
- TLSH T187A1F433E6ED2E5320B503A95D189A41EF5C7033A20B9A453D6F21EBBF3169D51EB221
- MD5 SHA1 SHA512 SSDEEP TLSH