Practical-Basketball_368934[.]exe

resource
Practical-Basketball_368934.exe
unpack001/$PLUGINSDIR/INetC.dll
unpack001/$PLUGINSDIR/Nsis7z.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/nsDialogs.dll
unpack002/LuluNotes.exe
unpack002/lnencrypt.exe
unpack002/lng/af-ZA/lnlng.dll.mui
unpack002/lng/af-ZA/mplng.dll.mui
unpack002/lng/be-BY/lnlng.dll.mui
unpack002/lng/be-BY/mplng.dll.mui
unpack002/lng/de-DE/lnlng.dll.mui
unpack002/lng/de-DE/mplng.dll.mui
unpack002/lng/el-GR/lnlng.dll.mui
unpack002/lng/el-GR/mplng.dll.mui
unpack002/lng/en-GB/lnlng.dll.mui
unpack002/lng/en-GB/mplng.dll.mui
unpack002/lng/es-ES/lnlng.dll.mui
unpack002/lng/es-ES/mplng.dll.mui
unpack002/lng/fi-FI/lnlng.dll.mui
unpack002/lng/fi-FI/mplng.dll.mui
unpack002/lng/fr-FR/lnlng.dll.mui
unpack002/lng/fr-FR/mplng.dll.mui
unpack002/lng/hi-IN/lnlng.dll.mui
unpack002/lng/hi-IN/mplng.dll.mui
unpack002/lng/hu-HU/lnlng.dll.mui
unpack002/lng/hu-HU/mplng.dll.mui
unpack002/lng/id-ID/lnlng.dll.mui
unpack002/lng/id-ID/mplng.dll.mui
unpack002/lng/it-IT/lnlng.dll.mui
unpack002/lng/it-IT/mplng.dll.mui
unpack002/lng/ja-JP/lnlng.dll.mui
unpack002/lng/ja-JP/mplng.dll.mui
unpack002/lng/ko-KR/lnlng.dll.mui
unpack002/lng/ko-KR/mplng.dll.mui
unpack002/lng/lnlng.dll
unpack002/lng/mplng.dll
unpack002/lng/nl-NL/lnlng.dll.mui
unpack002/lng/nl-NL/mplng.dll.mui
unpack002/lng/pl-PL/lnlng.dll.mui
unpack002/lng/pl-PL/mplng.dll.mui
unpack002/lng/pt-BR/lnlng.dll.mui
unpack002/lng/pt-BR/mplng.dll.mui
unpack002/lng/pt-PT/lnlng.dll.mui
unpack002/lng/pt-PT/mplng.dll.mui
unpack002/lng/ru-RU/lnlng.dll.mui
unpack002/lng/ru-RU/mplng.dll.mui
unpack002/lng/sk-SK/lnlng.dll.mui
unpack002/lng/sk-SK/mplng.dll.mui
unpack002/lng/sv-SE/lnlng.dll.mui
unpack002/lng/sv-SE/mplng.dll.mui
unpack002/lng/tr-TR/lnlng.dll.mui
unpack002/lng/tr-TR/mplng.dll.mui
unpack002/lng/vi-VN/lnlng.dll.mui
unpack002/lng/vi-VN/mplng.dll.mui
unpack002/lng/zh-CN/lnlng.dll.mui
unpack002/lng/zh-CN/mplng.dll.mui
unpack002/lng/zh-TW/lnlng.dll.mui
unpack002/lng/zh-TW/mplng.dll.mui
unpack002/minipath.exe

Practical-Basketball_368934.exe

IMPHASH 573bb7b41bc641bd95c0f5eec13c233b
SHA256 7974a0dfe74495e6aa37253d9ca8cd846210d5bf742e664f2b05c71d06b17fe6
MD5 f1b692f48de3827074d944b24803e896
SHA1 48f797bf5717098cd3952e0ed8b76280938464e5
SHA512 7a05d523900d965bbc5fc944fe7f76fe56b94f07c8a41d724c7ff63af72b5e8784d54057abd4588072651a36bbac8da9da16889030c5c06fd21fa27e56972516
SSDEEP 49152:2v/OmYN6itD+37wIeSehRgnshF7S6Il7UZwm4KaxLD:2v/OmUltUkJhrEbRUZwzKapD
TLSH
T1A1C51281E056E003C644653CC59BF2F42CA86EE2D29F520F6C727D6EFDB08E9562A15F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

13655

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegEnumValueW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegOpenKeyExW RegCreateKeyExW

shell32

SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW ShellExecuteExW

ole32

CoCreateInstance OleUninitialize OleInitialize IIDFromString CoTaskMemFree

comctl32

ImageList_Destroy ord17 ImageList_AddMasked ImageList_Create

user32

MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW CreatePopupMenu AppendMenuW TrackPopupMenu OpenClipboard EmptyClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetSysColor SetWindowPos GetWindowLongW IsWindowEnabled SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CharPrevW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint CharNextA wsprintfA DispatchMessageW CreateWindowExW PeekMessageW GetSystemMetrics

gdi32

GetDeviceCaps SetBkColor SelectObject DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor

kernel32

lstrcmpiA CreateFileW GetTempFileNameW RemoveDirectoryW CreateProcessW CreateDirectoryW CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersionExW GetCommandLineW GetTempPathW GetWindowsDirectoryW SetEnvironmentVariableW WriteFile ExitProcess GetCurrentProcess GetModuleFileNameW GetLastError GetFileSize GetTickCount Sleep SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW MulDiv lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject CopyFileW

$PLUGINSDIR/INetC.dll

IMPHASH 265ca43c4d307d4832d2b075aaf079f0
SHA256 5b55469966e2cc0ab9c341c33bcccaed26c2bf061ec17a070779c9aeb96e465b
MD5 101f9f259b59cc62e14dd9e98dd3fb5d
SHA1 3352ea7fad1fbd5f8852255406898cbbf1c8ca04
SHA512 162150f3b4d8d8524db21f4af16d77b46be611892ec14fadfc7c33bf444646ed5ec728d92f93df809787756088b158e61edc44995e62caca83ef5bcd2d699a7f
SSDEEP 768:Nn9Whk09GSrZxdLl8Q/IMbtMhcBO/ELzUBhFG2+YXDuDcElh:N9WhpGSrllzIMbocE/ELzaUYTuAEl
TLSH
T1E133281257E0067EFBB6063978B78593167EA831632695CFC6230F9D2DA13D2E974313
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4191

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\tests\rebranding\LuLuNote\lulunotes\Installer\inetc\Unicode\Plugins\inetc.pdb

wininet

FtpOpenFileW InternetErrorDlg HttpQueryInfoW HttpEndRequestW HttpSendRequestExW HttpSendRequestW HttpAddRequestHeadersW HttpAddRequestHeadersA HttpOpenRequestW FtpCreateDirectoryW InternetCrackUrlW InternetGetLastResponseInfoW InternetSetOptionW InternetQueryOptionW InternetWriteFile InternetSetFilePointer InternetReadFile InternetConnectW InternetCloseHandle InternetOpenW

comctl32

ord17

kernel32

GlobalAlloc WideCharToMultiByte MultiByteToWideChar lstrlenW lstrlenA lstrcatW lstrcpyW lstrcmpiW lstrcmpW GlobalFree LocalFree LocalAlloc LoadLibraryA GetProcAddress GetModuleHandleW GetTickCount TerminateThread CreateThread Sleep MulDiv lstrcpynW CreateFileA CreateFileW DeleteFileW GetFileSize ReadFile SetFilePointer WriteFile CloseHandle GetLastError WaitForSingleObject SleepEx

user32

SendDlgItemMessageW SetTimer KillTimer EnableWindow UpdateWindow SetForegroundWindow RedrawWindow SetWindowTextW GetWindowTextW GetClientRect GetWindowRect CreateDialogParamW MessageBoxW GetWindowLongW SetWindowLongW GetParent FindWindowExW LoadIconW IsDialogMessageW SystemParametersInfoW SetDlgItemTextW wsprintfA wsprintfW GetMessageW TranslateMessage DispatchMessageW PeekMessageW SendMessageW PostMessageW IsWindow DestroyWindow ShowWindow SetWindowPos IsWindowVisible GetDlgItem

$PLUGINSDIR/Nsis7z.dll

IMPHASH 03807dfe91c4c13042baf561413ccc7f
SHA256 116521906678f205f437ec5dff78fe17d7f31f1ca4193f9bcf882be21e53a79f
MD5 9ceebea3ed27d423e0cc874f91b85d82
SHA1 9268eb7ed6147dcef78d1655167c6606b47105dd
SHA512 9f4946778f80664727b148c20eb386ce59c28d76f21a6035258f6e6eadbb07457f9f1a2027a6f9c69221853d7a93f64a3b23d2d578472785a2e5dc986f9fd32d
SSDEEP 12288:+13M3R+bIYp/B5ymLhjhyXUOS5loXb0K08D9eqD0eJGtgC:H3AbB9plor0K0y9fd8t
TLSH
T1A5B4AE21B981C175C52E42304A5AFB6A59BEB7704B24E5CB7398977E1FF48D0A728F03
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

314336

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

advapi32

OpenProcessToken AdjustTokenPrivileges LookupPrivilegeValueW SetFileSecurityW

kernel32

GetFileSize ReadFile SetFilePointer WriteFile CloseHandle GetLastError VirtualAlloc VirtualFree GetVersionExW EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSection SetEvent ResetEvent ReleaseSemaphore WaitForSingleObject CreateEventW CreateSemaphoreW LocalFree FormatMessageW GetFileInformationByHandle SetLastError DeviceIoControl GetModuleHandleW GetProcAddress lstrlenW HeapAlloc HeapFree GetProcessHeap GetSystemTimeAsFileTime GetStdHandle WaitForMultipleObjects GetTickCount GetConsoleMode SetConsoleMode AreFileApisANSI SetFileApisToOEM SetFileApisToANSI CreateDirectoryW GetTempPathW TerminateProcess CreateFileW OpenProcess GetModuleHandleA LocalAlloc lstrcpynA lstrlenA WideCharToMultiByte GetFileSizeEx SetFilePointerEx lstrcmpW lstrcpynW lstrcpyW DeleteFileW Sleep OutputDebugStringW HeapReAlloc GetCurrentProcessId GetNativeSystemInfo VirtualProtect FreeLibrary LoadLibraryA IsBadReadPtr GlobalAlloc GlobalFree MultiByteToWideChar GetModuleFileNameW LoadLibraryExW GetCurrentDirectoryW RemoveDirectoryW SetFileAttributesW SetFileTime GetCurrentThreadId MoveFileW FindClose FindFirstFileW FindNextFileW GetFileAttributesW SetEndOfFile GetCurrentProcess GetSystemInfo GlobalMemoryStatus GetProcessAffinityMask IsProcessorFeaturePresent WriteConsoleW HeapSize ReadConsoleW SetStdHandle GetStringTypeW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetCPInfo GetOEMCP CreateThread GetACP IsValidCodePage FindFirstFileExW GetConsoleOutputCP FlushFileBuffers GetFileType LCMapStringW SetUnhandledExceptionFilter GetStartupInfoW QueryPerformanceCounter InitializeSListHead RtlUnwind RaiseException InterlockedFlushSList FlsAlloc FlsGetValue FlsSetValue FlsFree EncodePointer InitializeCriticalSectionEx ExitThread FreeLibraryAndExitThread GetModuleHandleExW ExitProcess IsDebuggerPresent UnhandledExceptionFilter DecodePointer

user32

SendMessageW FindWindowExW SetWindowTextW GetDlgItem wsprintfW CharUpperW

oleaut32

SysAllocStringLen SysStringLen SysAllocString SysFreeString VariantClear VariantCopy

Name

.text

Size

386KB

Virtual Size

386KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

82KB

Virtual Size

81KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

15KB

Virtual Size

51KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

976B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

19KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

$PLUGINSDIR/System.dll

IMPHASH 509a34b3a68a773e0afb4259e68f9f82
SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
MD5 9b38a1b07a0ebc5c7e59e63346ecc2db
SHA1 97332a2ffcf12a3e3f27e7c05213b5d7faa13735
SHA512 26e77f8e10f6d8693c92bd036b53a3f6e0c523090ef8dfe479815f556ecd2b57fc90ce9f7cceebe70460d464decb27ad1fe240819fd56997764e96506b6a439c
SSDEEP 192:kjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZ40QPi:U/Qlt7wiij/lMRv/9V4b4r
TLSH
T1E8427C1297B089F2F151093419667F2A6FBEAC5D17F405A3CFE304C63D212CB9839243
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10879

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/modern-wizard.bmp

SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
MD5 cbe40fd2b1ec96daedc65da172d90022
SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
TLSH
T139C29757DE6B6EA4BE0804EF1A0694931C71FE211AB0CD0561D2B767B4FC93B19A0B3C
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/nsDialogs.dll

IMPHASH 3b477381217c97b22146297f93df2a92
SHA256 b1350f487692057c8ffde75dcc55287a52a3272240d4d4912f24464b27551fc0
MD5 8f0e7415f33843431df308bb8e06af81
SHA1 1314272e6ad3be1985d4a1607b890a34b0bde8b5
SHA512 5450b2070c40b257c28ba9a472d762f91b78928d1e8d4d88e0576992065a61fb9a6513006e6b5947c415c9e02ae80a90a85b58da7e016a424331c8cd596ed684
SSDEEP 96:obEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YHNqkzfFc:obEvCu5e81785qHFcU0PuAw0uytIFc
TLSH
T19D12F892E2A454B3C5D6523B36AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

7527

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

LuluNotes_core.7z

SHA256 253871bae855f9313d93b3dd38020704def09072cea8445bc75e24fb7bcba4a2
MD5 ada5ecc62300fee4c0a19dc95d93a136
SHA1 aa64cdeb271c1a0fe21da29da049a29952c066ad
SHA512 63a8d73bd6365f8de4906dd3b39642cb33fc2241337be8c9de030fb60febaba7e611ef7f98d90e3b5ee6b53644d0177647592682849de3030e794e2c63256eed
SSDEEP 49152:cD+37wIeSehRgnshF7S6Il7UZwm4KaxLDg:cUkJhrEbRUZwzKapDg
TLSH
T15295335374EB01C6AE99FA92890301CD38DCBB6D16BAC3827463A76BDF9001DB63F155
MD5 SHA1 SHA512 SSDEEP TLSH

Docs/Changes.txt

SHA256 f4aab20397a14df0c6d7bd5b51ce49c0aeb1a4847380ed67bc58da2b1ea22a77
MD5 3ba402d01e3e7945f39dc9ebfc4d17f4
SHA1 23e19ba247daca26cc2b9564e21d7c574f4693e6
SHA512 67701b0b6c50866ca62edeb0502e4ca3b1aa354e01c95935ef2240e50665ffd3f8a4e2c39fe4d318590cddbabdf7f6bdffc723f4a53c35acc465103abe20b575
SSDEEP 3072:avgcDhE3kWuyu8Wz71xyhudZFFDu1WgH/D/aK2F8JPO4BlF/V7Nn4jDOQenenSjA:avlDhE3/uiWz71xygLFDoBHrCK2FabV4
TLSH
T108F3F7097E00E27355B2C517A2C22191F336136DDF166A4C6CAE81C82F59F5CA3BF66E
MD5 SHA1 SHA512 SSDEEP TLSH

Docs/KeyboardShortcuts.txt

SHA256 bcfbb336c316fb3cb762e1eb14ce68d122906b312a9b211c6cc22fc1ffc4ff9d
MD5 b80b7903e21bb68d6137d3c9156f427f
SHA1 846417bf090694aa16a6c3d5f2517691c83ebc69
SHA512 95efda5d1d41bceb895839ab31ee4e3906e5e88f1999e9e6e0850c27416e20312c3fbfbb42160afffbaf6ae111d5bcb3e9dc2a506f5d66894fd1b47b41084b12
SSDEEP 192:DOYkPqVVgnHpiYUVWXMEdJt8m2Lc0IlEDBgPKimfjoS070/eo5QJB5GYkUOrX/:6qsLe6IT5MhOsBMYkUOT
TLSH
T15B92FE522C4143611AB2DD925EF2ED42FA234F3F8D07224635BC691C9F3637672DE1A9
MD5 SHA1 SHA512 SSDEEP TLSH

Docs/License.txt

SHA256 5fa15839434f4856888193a6922b6bced87f61d5eddb3376d4fff1bada50f590
MD5 de89afceb0b9e9b350404231a92126a0
SHA1 97734730cf69163e63832e1241d29acf27fb8c0e
SHA512 d1b67eaaa67bc49657c326d3d9ee0778e0705b63bcda10722b34468c8748e7f6708056dbaf920fb3a8dd73b47002e529a593b12f7828c0195aa0946dbebd0a1b
TLSH
T1FA61A74712815BE649E10BC139A6B9C8B04DE03E7B5B5D31289DE388C72B77ED5FB094
MD5 SHA1 SHA512 TLSH

Docs/LuluNotes.txt

SHA256 3ad47afbb921851cf11720b4c120ba5c8d0c021812d995485c8535a4d6ec2283
MD5 2cc374e177e385ff3cc95dc0080c21da
SHA1 6bbfa59a6a68821be407d7e9e8692eb736315f56
SHA512 e3581569055f19d6e8da284a79466a980b2ee204603b16192205cb3d22eca8e88cd73b710a082d9f63a9d5769efbf67f3217619b468d4fda73fc1d3ec9b1e854
SSDEEP 768:o5BK4qfEaV6zY2rX5mb9kdwADWnjUNBRr2OYJZ9dw:cE4qf/V6c8pmb9IwzngRr2OYg
TLSH
T13513D8672E8943B30AB219C26F19A155E722867FA753235238FC850C7B3637163B79DC
MD5 SHA1 SHA512 SSDEEP TLSH

Docs/Readme.txt

SHA256 24a851b487612c60a2fa4b2d885f72bfbe7c7c15f478da7a8134deaecc31e347
MD5 7f8f65547a4e58b8e16cc58e2c94e535
SHA1 26d0c3ce82aee6069a3da2b2e462008d12a219ae
SHA512 1d2289afe2579cca1ca399b3fcd40dc33e6233bfa6571225c8728625048cfaa5d99d35bf6b84293ea5263d58e6ef6b27a2c41414af03efaa64c5c5380d1ea893
SSDEEP 192:G0r2W2fQ/ZdKNytVKxp1YzEtYc/1gmr8NZrs7rsVNo3x3YgHS:pr2W7ZdKNyyJYKgDrs7rs7ihYgy
TLSH
T18C223FE71D08D2AA4F66EBC29D98700CF32B505DFDD38888B06F5015E72237A92EF914
MD5 SHA1 SHA512 SSDEEP TLSH

LuluNotes.exe

IMPHASH ffd833ed3f4945d8e70b10db0e565e88
SHA256 1fe75a96618cc24ae7d17e8d5ad0c8e3983f3e6d1c26264cc6f3ef8037d7e376
MD5 c63d6692474002f9c16f95828b4e0fdf
SHA1 57adba19e8e189ac010314a2b3426cc697f36a7e
SHA512 f5e2809aae2bae581fedc1c9f27ae6f0a3f4b12f6ccb99f5d1947a72a64c3ff95d3ea00ff97794fa22bd94e7ecd10bd7a8ca6fcb10bf668fa8f9daa04b0ffc0c
SSDEEP 49152:vOqLtQC7k23mVyIW1V8oNPOe7n+7QtEcKl3Rw305y1P8sDNcCLfjKZxP4DY:vdg23ssZcOEXCkyJ8cNc9xwD
TLSH
T10D365B02E5A3D063D8952130D4B7E2F68D687FA0D327A8FF51B47E69B4315C09A3A35B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

2811001

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\tests\rebranding\LuLuNote\lulunotes\Notepad3\Bin\Release_x86_v145\LuluNotes.pdb

kernel32

FindCloseChangeNotification GetSystemInfo FindResourceExW FindNextChangeNotification SetCurrentDirectoryW GetCurrentProcessId CreateProcessW CopyFileW GetExitCodeProcess GetTimeFormatW GetDateFormatW SetLastError OutputDebugStringW GetLocaleInfoA OutputDebugStringA GetTickCount GlobalSize VirtualAlloc VirtualFree SetFilePointerEx FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA FindFirstFileExW GetTimeZoneInformation DecodePointer GetStringTypeW GetConsoleMode GetConsoleOutputCP GetFileType SetStdHandle EnumSystemLocalesW GetUserDefaultLCID IsValidLocale CompareStringW GetStdHandle ExitProcess FreeLibraryAndExitThread ExitThread CreateThread TerminateProcess UnhandledExceptionFilter IsDebuggerPresent GetUserPreferredUILanguages FlsFree FlsSetValue FlsGetValue FlsAlloc FindFirstChangeNotificationW RtlUnwind DeleteCriticalSection InitializeCriticalSectionEx LeaveCriticalSection EnterCriticalSection GetLogicalProcessorInformationEx GetModuleHandleExW CloseThreadpoolWork SubmitThreadpoolWork CreateThreadpoolWork FreeLibraryWhenCallbackReturns TryAcquireSRWLockExclusive GetSystemTimePreciseAsFileTime InitOnceComplete InitOnceBeginInitialize InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId SetUnhandledExceptionFilter IsProcessorFeaturePresent SleepConditionVariableSRW WakeAllConditionVariable AcquireSRWLockExclusive ReleaseSRWLockExclusive GetLocaleInfoW GetVersionExW UnmapViewOfFile LocaleNameToLCID CreateFileMappingW MapViewOfFile GetSystemDefaultUILanguage GetUserDefaultUILanguage LCIDToLocaleName LoadLibraryExA VirtualQuery RaiseException SetThreadUILanguage VerifyVersionInfoW VerSetConditionMask ResetEvent SetEvent CreateEventW GetACP GetCPInfoExW IsValidCodePage GetCPInfo GetOEMCP GetFileTime QueryPerformanceCounter OpenProcess FindClose GetTempPathW SetErrorMode FindNextFileW GetCommandLineW GetStartupInfoW IsValidLocaleName SetProcessPreferredUILanguages lstrcmpiA LCMapStringW GetLocalTime QueryPerformanceFrequency GetTickCount64 lstrcmpA GetDateFormatEx SetFileTime GetTimeFormatEx GetFileSizeEx FindResourceW LoadResource GlobalFree GlobalAlloc LockResource FormatMessageW Sleep FreeResource lstrlenW SizeofResource ResolveLocaleName LoadLibraryExW FreeLibrary VirtualProtect FlushFileBuffers MulDiv GetFileSize LockFileEx LocalFree GetLastError ReleaseMutex WaitForSingleObject CreateMutexW UnlockFileEx SetEndOfFile GetLocaleInfoEx SetEnvironmentVariableW GetCurrentProcess ReadFile GetTempFileNameW GetModuleHandleW ReplaceFileW MoveFileExW GetProcAddress GetCurrentDirectoryW CloseHandle DeleteFileW GetFileAttributesExW SetFileAttributesW GetFileAttributesW CreateFileW GetEnvironmentVariableW CompareStringOrdinal GetModuleFileNameW GetFinalPathNameByHandleW ExpandEnvironmentStringsW GetLongPathNameW SearchPathW FindFirstFileW WideCharToMultiByte HeapReAlloc MultiByteToWideChar HeapSize WriteConsoleW GlobalUnlock GetProcessHeap GlobalLock HeapAlloc SetFilePointer WriteFile EncodePointer HeapFree

user32

UpdateWindow IsIconic LoadMenuW GetMenuItemCount LoadStringA LoadStringW GetMenuState MsgWaitForMultipleObjects PeekMessageW SystemParametersInfoA IsCharAlphaNumericA CharLowerA RegisterClipboardFormatW IsCharLowerW GetKeyState CharUpperW CharLowerW GetMenu DestroyWindow GetActiveWindow IsWindow OpenClipboard GetCapture SetTimer CloseClipboard RegisterWindowMessageW PostQuitMessage AddClipboardFormatListener TrackPopupMenuEx GetWindowDC GetClipboardSequenceNumber GetClassNameW RemoveClipboardFormatListener TranslateMessage TranslateAcceleratorW EnumWindows GetForegroundWindow SetMenuDefaultItem FrameRect CountClipboardFormats IsChild DestroyIcon IsDialogMessageW DispatchMessageW GetAsyncKeyState GetSubMenu InvalidateRect GetParent CheckDlgButton GetDlgItem IsDlgButtonChecked SendDlgItemMessageW GetDlgItemTextW SetDlgItemTextW RedrawWindow ShowWindow EndDialog SendMessageW PostMessageW CharUpperBuffW GetCursorPos SetCursorPos LoadAcceleratorsW GetMenuBarInfo RegisterClassExW EmptyClipboard GetDoubleClickTime CharNextW GetClipboardData SetClipboardData GetComboBoxInfo CheckMenuItem IsClipboardFormatAvailable KillTimer GetSysColorBrush UnregisterClassW ScreenToClient ShowOwnedPopups CreateWindowExW FillRect IsWindowVisible SendMessageTimeoutW GetMenuItemID CheckMenuRadioItem MonitorFromPoint ShowWindowAsync ModifyMenuW DefWindowProcW GetMenuItemInfoW GetMessageW GetCaretBlinkTime DestroyCursor GetKeyboardLayout AdjustWindowRectEx TrackMouseEvent GetMessageTime AppendMenuA GetUpdateRgn CallWindowProcW CreateIconIndirect GetAncestor NotifyWinEvent GetScrollInfo SetScrollInfo PtInRect SetCaretPos ShowCaret HideCaret DestroyCaret CreateCaret ValidateRect GetSystemMetrics SystemParametersInfoW EnableMenuItem ReleaseCapture ChildWindowFromPoint IsCharUpperW GetWindowLongW GetWindowTextLengthW DrawAnimatedRects DeferWindowPos GetSystemMenu FindWindowExW GetWindowRect GetFocus InflateRect SetWindowCompositionAttribute SetPropW GetWindowTextW GetDC SetWindowPos CheckRadioButton GetPropW CopyImage MonitorFromRect MonitorFromWindow SetActiveWindow LockSetForegroundWindow GetIconInfo RemovePropW SetWindowTextW MessageBeep CreatePopupMenu GetWindowPlacement TrackPopupMenu BeginDeferWindowPos OffsetRect GetDlgItemTextA GetMonitorInfoW GetDlgCtrlID ClientToScreen SetMenuItemInfoW CharPrevW MapWindowPoints SetWindowPlacement GetSysColor DialogBoxIndirectParamW IsWindowEnabled SetMenu DestroyMenu SetLayeredWindowAttributes SetFocus GetMenuStringW IsCharAlphaNumericW LoadCursorW DrawMenuBar EndDeferWindowPos InsertMenuW SetCursor GetDlgItemInt SetWindowLongW GetClientRect IsZoomed AppendMenuW DrawTextW SetRect DrawIconEx GetDesktopWindow CreateDialogIndirectParamW SystemParametersInfoForDpi SetDlgItemInt SetForegroundWindow LoadImageW ReleaseDC BeginPaint EndPaint EnableWindow SetCapture

gdi32

CreateDIBSection ExtCreatePen Polygon BitBlt StretchBlt CreatePatternBrush Ellipse GetTextExtentPoint32A CreateRectRgnIndirect GetTextExtentExPointW IntersectClipRect RestoreDC RoundRect SaveDC GdiAlphaBlend ExtTextOutA Polyline CreateRectRgn CreateBitmap CombineRgn SetDIBits GetDIBits StartPage EndDoc CreateFontW GetTextMetricsW LineTo CreatePen MoveToEx SetTextAlign StartDocW DPtoLP EndPage GetTextExtentPoint32W ExtTextOutW EnumFontFamiliesExW SetBkMode CreateCompatibleBitmap SelectObject CreateCompatibleDC GetDeviceCaps DeleteDC GetObjectW SetMapMode CreateFontIndirectW DeleteObject CreateSolidBrush GetTextExtentExPointA SetBkColor SetTextColor

comdlg32

PageSetupDlgW PrintDlgExW ChooseColorW ChooseFontW

advapi32

RegQueryValueExW DuplicateToken GetFileSecurityW OpenProcessToken AccessCheck IsTextUnicode GetTokenInformation CheckTokenMembership FreeSid CreateWellKnownSid AllocateAndInitializeSid RegCloseKey RegOpenKeyExW MapGenericMask

shell32

ShellExecuteW SHAppBarMessage SHGetFileInfoW ShellExecuteExW SHGetDataFromIDListW SHGetDesktopFolder SetCurrentProcessExplicitAppUserModelID SHAddToRecentDocs DragQueryFileW Shell_NotifyIconW SHGetKnownFolderPath DragAcceptFiles DragFinish SHOpenFolderAndSelectItems ord155 SHParseDisplayName SHCreateItemFromParsingName SHGetPropertyStoreForWindow ord180 SHCreateDirectoryExW

ole32

DoDragDrop RevokeDragDrop RegisterDragDrop OleInitialize ReleaseStgMedium CLSIDFromProgID CoCreateGuid StringFromGUID2 PropVariantClear CoTaskMemAlloc CoInitializeEx CoUninitialize CoTaskMemFree CoCreateInstance OleUninitialize

oleaut32

SysAllocStringLen SysFreeString

imm32

ImmReleaseContext ImmGetCompositionStringW ImmSetCompositionStringW ImmSetCompositionFontW ImmEscapeW ImmNotifyIME ImmSetCompositionWindow ImmSetCandidateWindow ImmGetContext

shlwapi

StrRetToBufW PathMatchSpecW StrToIntExW SHAutoComplete StrStrIW UrlCreateFromPathW StrTrimW StrDupW StrCmpW StrCmpIW PathIsRelativeW StrChrW StrCmpLogicalW StrStrIA StrChrA StrChrIA StrStrA PathCreateFromUrlW StrTrimA StrFormatByteSizeEx StrCSpnA ord157 StrCmpNIW UrlUnescapeW SHStrDupW StrRChrW StrChrIW UrlEscapeW StrCmpNW UrlIsW StrSpnW PathFindFileNameW StrCmpNA StrCmpNIA StrStrW

ntdll

RtlGetNtVersionNumbers

comctl32

ord413 ord410 ImageList_AddMasked ord8 ImageList_Create ImageList_Destroy InitMUILanguage InitCommonControlsEx ord381 ord412 ImageList_ReplaceIcon ImageList_GetIcon

api-ms-win-core-path-l1-1-0

PathCchRemoveExtension

Name

.text

Size

2.9MB

Virtual Size

2.9MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

572KB

Virtual Size

657KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

14KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1.4MB

Virtual Size

1.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

100KB

Virtual Size

100KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

LuluNotes.ini

SHA256 cfac1cf760e917ba59b02c9706bd43511684417c24fc3ad996b9bc38bdebedb1
MD5 f1a4f161ad88749dab616e0b567e7db1
SHA1 ca5f9a650c7c4ae4ac5bd60ef28b727cc92be5b7
SHA512 4d679768064335bdeae0ec23c37dc8b07ecc77d0d0a809000aad1f97926e3ae89c4a9036eedbc26c3153bca1053b95097c38a9ae18120249785246e5cb4a2978
SSDEEP 192:3Uy/rAplf8rySg2bITlBUWw/hRkpE57nHf:3JryD/BMlN/
TLSH
T172F10A035899B6AFC1FA70D213BF89DD4D19126E4293B159316E0E051FEE00ED96DBF2
MD5 SHA1 SHA512 SSDEEP TLSH

Themes/Dark.ini

SHA256 721cbf63b957002bb205641182d68d3163fad86c74cc051d3f5b46c6ec8ae483
MD5 f22ca63de450337cd17fedca7d642456
SHA1 ea77947af2800035f1d487c041335d74918d5f1f
SHA512 9e0e3ee0009cb3a84dfaa2cf5220c3029fdb4ee989500b54c7524243cd2047b6ef8ba724797f1a3d92af41c188475ade296100a68f5b6ac2513a3ff2c79b4cca
SSDEEP 768:30ha/Z1OrMzQ6rb15FTqifoWTm/eQbvhbSzyUjPj4RfA0XjoSF50i36hu1QSukmj:300/ZnrEN+
TLSH
T18FB23213198C0AC1C496A39074AFA231DFED769F52D8EC5EBDEB164EE70EF0154A9708
MD5 SHA1 SHA512 SSDEEP TLSH

Themes/Obsidian.ini

SHA256 d2dbd1e884283370df826591d9b84d2aa2c148176547fe9077b4bdd58b4ea3cf
MD5 036dff796684b3f70214411e4a5b5a7c
SHA1 086d4bdc84f2dffcaecba03900164cc6464ccd4c
SHA512 fb9e26702f07f080f66ab9a6397cfd36d03fc05dd68cd15b1498b885955729f2a156ac7b12036d3231b9cfa9199665541512e2471f8e5838ff3a99bf6361d217
SSDEEP 384:wmDFjCOdS9Q6rbAYX5ehDYXfoWTm+6eFKUUmCFzuKST9xDjPjUqCRfA07jNxHSvj:wYFjCOdS9Q6rb15eh+foWTm/eQbmChb+
TLSH
T1B3B274131A8C4AC1C492A39174BFA231DFED766F42D8EC5EBDEB168EA70DF015469708
MD5 SHA1 SHA512 SSDEEP TLSH

Themes/Sombra.ini

SHA256 8538859db109fbabc87f673ef8992daee65141f56215ba40ce631be1091968ee
MD5 887850a928266c098988dfe78eaa7c9b
SHA1 b3dd09de4cd86066a96575f7c987666916c6a1ed
SHA512 6eae3ea60b7c7cd9acd020df24b515089c8d5672cdcf0996319145aa23a77c0124aaa27bd0c928c66950015645a5a89feae1c647768f2515d514ec8a19927dd7
SSDEEP 384:TLRO1SuljY5XUyR/qy/JhATu5tbnryvCnSm/s5i4VwGYhAAIrw/gUD4L6o6qIisy:3RTulM5XUyR/qy/JhB5VrICnSmZ42Ba3
TLSH
T141B243420ACC06E2084AB35074FFA671EFED666F46D9FC9DADAB124DA70CF15506D3A0
MD5 SHA1 SHA512 SSDEEP TLSH

lnencrypt.exe

IMPHASH 2f17932607a39dad4a22fa0d3c58ec87
SHA256 cc636c9fad1426dce21130b9ec20ec12993791725e88f73dcda05a2a0c3f808e
MD5 b42eb3aa86ada729f4225e7ccb4bac30
SHA1 276a2ea9d8ae4cbb265a6199cd4c661838528435
SHA512 bfb65e9d656f1e1a227056f90cab685d51a7f1ed297ef04e48c4d962c28d3f1dbcbbe00d78b397c517fe870ace49076dd798a7d54eed9f472a8644f3ee6aefe7
SSDEEP 3072:FZzLaEotucfjMnyfPUSg8CXhmbXY7kF+XYiOuUMPFkggjKfVVerr979qAJ:FtLa9IcbMyXUCUhvkFIVf52bKVeN9qAJ
TLSH
T1E4F39E5475D0C871D83A24351A75CA796E7CF9300F24C9EBA7881EB75F342C0AA3AD6B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

24042

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\tests\rebranding\LuLuNote\lulunotes\Notepad3\Bin\Release_x86_v145\lnencrypt.pdb

Name

.text

Size

108KB

Virtual Size

107KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

38KB

Virtual Size

37KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

lng/af-ZA/lnlng.dll.mui

SHA256 2a9726feb71fe46808813d973ed347406127d6442d9b7b864df2d10de918a515
MD5 df5aeee20a24728d7ce972287b373905
SHA1 a002261902162c7f1c9a61fcd8d14c3bd6e5913e
SHA512 62627a0ae433af919fb1738015952cc3bfe10992bbd320bdddafc0106e93bdc2b8f12247a468bacf8f5a0cbe7de768366d59b29de85e0babaa4d6fc0c771fde8
SSDEEP 3072:NQgwJ41ZvGp1pBqWJJJJJJYcRJ54rak16Q1qrGM25r3C1r2Tk3dqkCzd:fZvGp1pBqWJJJJJJYcRj4WBrM
TLSH
T107E48940E2B5D107E0A13634DDB6C1F38D687DB1D62AE93B0AB23E89F470994CB5D61B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

lng/af-ZA/mplng.dll.mui

SHA256 cf5f584c5f341b9ca32d12c6cffe56580a86753a99c359c30789a46f1d67b6ff
MD5 8b1a085c986d72a6257ad766e8d6ee2c
SHA1 67ab4ff7bcd09d3f6886f7206424536ca00bb45f
SHA512 53a6e99ac760e7d72a0cf0ae24a87c401a3d6caf431c478899a3d45d3ef8b2089a03db37bdf1845c917faaf647c03f39b26889d8e868dca459f9cc0476a6c1d3
SSDEEP 1536:xlBFckMLfcPnc4iRHSs43JN+2rdenEGBG9x92QD4RFJjWxf6jEb:xlo3YcDaZdennmx9nkJCxiwb
TLSH
T1D1D3E6D2F3E4D59DF8F55FB4287A4E500A73BC5699B2464E3294720F08B3243A53AB27
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

lng/be-BY/lnlng.dll.mui

SHA256 eedce0f8f1c880c1f5b832e3316331061bebc2e1f6bc5f068d00830aac52b7a4
MD5 cd5c5c4480ed96348fdb29b03f0a8e9d
SHA1 46d35b1f0ae3605577adc8fc7005a376c58f24ee
SHA512 1231e8e65ffb644d09e063b3ae8805df069c7d735731e698995efa79b3bfb736fb491a94c563484c8ccd27cca909498615d90637bd38689bb17174389c88f118
SSDEEP 3072:8D1gwJ41ZvGp1pBqWJJJJJJYcRJ54rak16Q1qkqi032JH:8DgZvGp1pBqWJJJJJJYcRj4WBS
TLSH
T1F7E4B946E671E203D0906238CD96C1F38C686EB1D319E97B5EB73E49F4748A8DB0D64B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

lng/be-BY/mplng.dll.mui

SHA256 f69f67d6a1ac622bd60bc59d49ca3039fa0548132fe404b166d2372ca516d3de
MD5 80848672b6d67be9cfd5dd1db24ea5db
SHA1 486450544cee0aa745e868e1d9265f47d936c679
SHA512 23c3a0853dd2a7c04bf1731eec8920a3ca6b4e9399e6a7e551d7c1f7dc516754cf322075254c289f5da3fc8c2c0a0a9f6866a56bf66a23270da33d70120d27f1
SSDEEP 1536:YBFckMLfcPnc4iRHSs43JN+2rdenEGBG9x92QD4RFJjWxf6RR:Yo3YcDaZdennmx9nkJCxiX
TLSH
T10AD35CDBF674C29AE8A849B008674FA106B3BD059785058F7657720F14B7233363BB9B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

lng/de-DE/lnlng.dll.mui

SHA256 1ae2b91ab5f87fad3aa434aea3139f4179d1afc0c3990e23b824011934ad85f6
MD5 0825944f10b9b70a35ec7eac00cdb407
SHA1 f5e2e9efff844331aae360f4a04b4c65025a2847
SHA512 b0fe288997caea233b24e1312d9c2d648aab0a9743010a0d3aa181d1e88ac28f42fc61f3fe534e8b9530cd649e904fb3cc3a2c9583bdd77e68fc1d0c02264cf1
SSDEEP 3072:sgwJ41ZvGp1pBqWJJJJJJYcRJ54rak16Q1qtp1G4+ReoqRTyRe+ne1PDP1BXJ4o3:NZvGp1pBqWJJJJJJYcRj4WBADW
TLSH
T197F4CB40E2B5D103E1A13638DDB6C1F38D697DB1D629E93B0A723E89F470994CB1D62B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

lng/de-DE/mplng.dll.mui

SHA256 f010f112f2a47db5703e5c4caec36deb0f0a4a45f38f68c5cf6d3f42f9258999
MD5 db94fc03018d2ff8b323c94a6f82e45d
SHA1 2d2c730422e6fab62865d641a88b3d2453209b61
SHA512 3c42062d4a3295c66da95df5db8c2137e9155cb293a559270799ff5ec5c8428dd78a54d2b70dad6ee10346fe93da00d9516b7a5faa741f80700cfcdc1d775b56
SSDEEP 1536:QBFckMLfcPnc4iRHSs43JN+2rdenEGBG9x92QD4RFJjWxf6a6Pxb2X4Z:Qo3YcDaZdennmx9nkJCxia6Pxb2X4Z
TLSH
T125E307D2F7C8C559F4F55FB4287B4E501A73BC66A9A1864E3294720F18B3203A53AB37
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

lng/el-GR/lnlng.dll.mui

SHA256 7cafd9fe62233ee87a24db095ec2eb2fa884a09fd52d174d14e60312bf6f7ddc
MD5 b3cf5992d0260229cf19c6b2a1dbe265
SHA1 85a8a12a405eb2c3f610d7f9bc9c9dad551bc829
SHA512 8a70a126d764d9d9f3d4eaf94f4c72bcacd8d33c7f81bedeecbcbd30520e45bf7ce126db5f524e787617a80423592df2fdfe9ead854b3a990b15b46069e2bda1
SSDEEP 3072:negwJ41ZvGp1pBqWJJJJJJYcRJ54rak16Q1q2FXnk+dEriRwU3ZkmiW8r:nvZvGp1pBqWJJJJJJYcRj4WBtaRHw
TLSH
T189F4C944E5B7E103D5902274CDA7C0F38D69ADB2D219E93B1AB33E89F479854CB8D60B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

lng/el-GR/mplng.dll.mui

SHA256 cde5c362ef75e9d6565c023e21570bc1dddf61baa4dcfb68d43100fe175d5ae4
MD5 e6619260375f31248dca40d8af0cea5e
SHA1 4bbc76f3656d82a227b32bb21b64ab3b797c2c31
SHA512 ab34324d2ca39460b22e810a34bffa6b8b4e96b6edabad73953e167328a26e30355c332478c0f332efb2d4f16a6448998815193b341c744013a75f9142d65398
SSDEEP 1536:TBFckMLfcPnc4iRHSs43JN+2rdenEGBG9x92QD4RFJjWxf6KJB4vLmIjyMwXr:To3YcDaZdennmx9nkJCxiKCwr
TLSH
T196E307CAAA5BC599DCE40DF5182B4E210ABBFC568551D94F32E4720F18BF20358E7E1B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

lng/en-GB/lnlng.dll.mui

SHA256 fdbe2c673e2ed4dc771b21aa8ba0c383a9ee38b2469e4cfe9ff44290fd7fac87
MD5 819c42530232fdb1a7777184a07749b1
SHA1 abd438572029390b8b36abb99c506e90f4fe02d5
SHA512 320a5ddfab77c4a59ac89b50f86ff8f97695d0cbabc23954e2750c538a36ef611c69408a53f43ba7db9cf90b7e772536b5bba5d1503ef34a5eb0f6fc772d0fe0
SSDEEP 3072:HgwJ41ZvGp1pBqWJJJJJJYcRJ54rak16Q1qrGI4fhEs2QQjsQiwXjZYgW9sGVjnG:iZvGp1pBqWJJJJJJYcRj4WBd45PQ5/Nb
TLSH
T13FE4CC40E2B5D107E0A13638DDA6C1F3CD686DB1D629E93B0AB33E89F470994CB5D61B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

lng/en-GB/mplng.dll.mui

SHA256 fb96e580b7d703ae85d848896da77736bb74ff554635922074f4b14eb03355d8
MD5 51ffe8a16273d2f00eef97e84e82fdd3
SHA1 13dfefce9d4bb27e8e12cf56aef5f753a791c1e1
SHA512 33d6edcd31f1d004c9619f8684ff8055278d5e94b7250ef64a8207d01c6c6d6733062d9ae33f6def7679e7e0f849c68b7879d87f807cc255e1e2669833de6e31
SSDEEP 1536:4BFckMLfcPnc4iRHSs43JN+2rdenEGBG9x92QD4RFJjWxf6IQZq4Oz:4o3YcDaZdennmx9nkJCxiXZq4Oz
TLSH
T130D308D2F7E8C589F4F55EB5187B4F600A73BC1A99B5864E3294720F08B3353582AB27
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

lng/es-ES/lnlng.dll.mui

SHA256 8a11089686348a5692c9b2b7c7ef4420e3149247529113a95e78ece5c7a30be2
MD5 30363b838e7904c8c46153af8a491c84
SHA1 7757b4f611c63d6b0153d2ef308f73cf72eb5c0c
SHA512 b8a23e921e2fd8520add2b7ff50c7bc45f09c638dd4b82fcfb090889c580dd17d2eb5139d809240e6a04ebc40ec2a09a03f5a32abf5a5eadca3fc0156552a63a
SSDEEP 3072:7gwJ41ZvGp1pBqWJJJJJJYcRJ54rak16Q1qAqvBqv/k4G7wFgd3Wq2KgH:mZvGp1pBqWJJJJJJYcRj4WBSgQ
TLSH
T1BFF48A40E2B5D103E1A23638DDA6C1F38D696DB1D629E93B0A733E49F870D94CB1D61B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

lng/es-ES/mplng.dll.mui

SHA256 1fd35344d504548ea4131cfc4002ccc5d139f30630b663f7a3aae80217077a54
MD5 804af0cf3fabf6a1ff3f6e600d214021
SHA1 7df432450ef5b91cf779b90a85816fd9f328e047
SHA512 18a4ee762f4e74da48fdc59c6089f50d10a6a1e175bff0dbe1fa59a2a176af1917c20a40f409ec0e4a97f20ee0d35e04612b41f8ab1c233e21b515a7822ac40c
SSDEEP 1536:PBFckMLfcPnc4iRHSs43JN+2rdenEGBG9x92QD4RFJjWxf68CGOQEv:Po3YcDaZdennmx9nkJCxiVDQEv
TLSH
T157E3F7D2F7E8C58AF8F65EB4587B4E600E73BC559975810E3294720F08B3643993AB27
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

lng/fi-FI/lnlng.dll.mui

SHA256 fd21fc934580b41be85ea2acf2699a4701d112dec235c1566c7eec53274d6e74
MD5 0de7e02e006ccadd0e6e1cdb01033fbe
SHA1 bd653c79aa07d7fd9edd78d834d6d30675242a9c
SHA512 72217e6e6dc0151583a5f2f48c210d8ac928be7988f9fe8f2e7b846da25075024f392bbead5c6bec18eb51da11883005f3beaa740e3151dd1f92d3ea461fb3ce
SSDEEP 3072:NgwJ41ZvGp1pBqWJJJJJJYcRJ54rak16Q1qKyMEBSM4peNnHRuUqtT63bhMMKDrP:YZvGp1pBqWJJJJJJYcRj4WBRArBh
TLSH
T100E4CB40E2B4E113E1A23634DDA6C1F38D696DB2D669E93B0E733E49F470894CB5C61B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

lng/fi-FI/mplng.dll.mui

SHA256 f7f6274e81514e933bfe77b1a1ab907c99822bce45a7b933d343c19a1779af5f
MD5 bfcf5854381cc56f8274ff40dcfbe21c
SHA1 8cd83f1c0926651c4b05e4fc6432355bb5d4ac4f
SHA512 101a7c1a3ea058bbb5698f81c20f23acb547f0424310861f3abd4695294816fd48bc461f5357e6a4809e4a38031a9488080a4f03dc634084d7436a37372e0345
SSDEEP 3072:To3YcDaZdennmx9nkJCxiy6YCh3Ya0AQtBrO6vA:T+DaZdl7w
TLSH
T101D319D2F7E8C599E5F64EB42C7B4E500A737C5A99A5C24E3654720F08B3283A436B27
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

lng/fr-FR/lnlng.dll.mui

SHA256 1a6d5e038574b85b86f9c12730bb84c568d58f49f3258dd306dfe16b372f6a83
MD5 2825607cc975265cb5dcd4cf6c6ba1a5
SHA1 0238342752cd2c43f2327e4766e606d45822ef4f
SHA512 18210bfe1fae983cf5ce34eaa60770580d6c6c09bb0d899e46346665012b2323ac387352dde3e4c85cd8adc086150e9148407b3afba6721bf1e6f29c81cc8d62
SSDEEP 3072:pgwJ41ZvGp1pBqWJJJJJJYcRJ54rak16Q1qHQWDbl37pX:UZvGp1pBqWJJJJJJYcRj4WBHn
TLSH
T140F49940E2B5D103E1A13634DDBAC1F28D697DB2D629E93B0A733E89F870954CB1D61B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

lng/fr-FR/mplng.dll.mui

SHA256 80788f9418a7b983d63e010f8734016db6ae3799ca941ffe239bef5073ea6bb0
MD5 fc6a4a58125a1a183876920e0d2a2deb
SHA1 82ff38e9800ba8f32b1463b17b9c59f52fdd43ef
SHA512 f76751e501f0993af6ba391afef61f43000253fb46adfe93a5dae54984b444fd500bd474502df1e7ea7058ce66fd54863fa922a4aa1e02bf7fd2e7b62cbd6b2e
SSDEEP 1536:FBFckMLfcPnc4iRHSs43JN+2rdenEGBG9x92QD4RFJjWxf6lPO:Fo3YcDaZdennmx9nkJCxilPO
TLSH
T1DDE3F7D2F7D8C54AF9F56EB4687B4E100E737C5A99B5810E3294724F18B3213983AB27
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

lng/hi-IN/lnlng.dll.mui

SHA256 ddd3bff7514f0f6ddfcbe74d6736ae82c8a978101bdbc980df45257634c916cf
MD5 910d244f9b4f55df20607e823b879f9b
SHA1 8876e3317e726930a71c28a2e6c80e153b83a58e
SHA512 ec29448cfc77fd6400a252470d21bd1995b03580088ba965a4539e6440e0ac398de0e531153192c6f7f11b332b39de817a4e41f78eff705441cf76ce03e0f55b
SSDEEP 6144:LZvGp1pBqWJJJJJJYcRj4WByyKbE/0/3XQ:ynByy1/0/XQ
TLSH
T114E4DD40E5A1D113E0983578DDA6C1F38C996DB1D259EA3B0EB73F89F4B0968CB0D64B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

lng/hi-IN/mplng.dll.mui

SHA256 14e8d8ff6d90237222049013a5c929e7da8eac5a388c5ba862b1a8aec0bb16f8
MD5 8c3413af90e7aa0d704486a1f9444fec
SHA1 63329d8413f7f939ff7fc5e8f54160f35942a0ca
SHA512 80f317984d3a46480df4203b2685fe724832245d99ca492d7793d495bb8046fcef8c0d117b0ec7f27be4635fae5932f0b43c6c5f8378fc5f0fce81059d2f0fb2
SSDEEP 1536:NBFckMLfcPnc4iRHSs43JN+2rdenEGBG9x92QD4RFJjWxf6uB3q82:No3YcDaZdennmx9nkJCxiuBa82
TLSH
T100D318C2EA44C559E89C4DF4A82B4F630AE3BC29A5CD124E76D4725F18F7237102AF57
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

lng/hu-HU/lnlng.dll.mui

SHA256 31816d7b541fa11404597f1bc9bc289565e528cb45534aad6a4c30c6600978e9
MD5 7097dbe1bf25e88598d4a535f25a0aab
SHA1 87f807d5018b592dd903fedafdc412a0e3db2f20
SHA512 ee318518a3be463f6e0f952ef528f1eed258506e101eb5de71623e6ed5ebf94d10dbcd57038250fb381a6f2aaa35271fff18a66bbb84b9d2cf418c975c3a3442
SSDEEP 3072:+gwJ41ZvGp1pBqWJJJJJJYcRJ54rak16Q1qSJ5RzGsumVk97aJjaD1XdQPGHVYFr:PZvGp1pBqWJJJJJJYcRj4WBSVB
TLSH
T145E4CE40E2B4E103E0A56634DDA6C1F38D686DB1D629E93B4EB33F89F470894CB5D61B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

lng/hu-HU/mplng.dll.mui

SHA256 3358a4acb11e4a1370c0355c552fdfb95caaf45639ba324d9db7f930ecc89beb
MD5 8330289c386ae261cd74458acd1663a8
SHA1 27352a5b9a178cc83cc922507889975b306b5db7
SHA512 00f7d60176b2ae63c58435bdfe393189cba5eb010b61e7e9b2114d602f93224d0914ec2e7bf950f500b8b5672acd641aad352335c7ca41a5e604c27efc71b485
SSDEEP 3072:co3YcDaZdennmx9nkJCxiW+dT4Xny23q/P:c+DaZdlG
TLSH
T153D32AC2F39CD58AE4BA4EF56C774F600A73BC55A9B5814E7294720F18B3243943AB17
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

lng/id-ID/lnlng.dll.mui

SHA256 607df60d37d73473dfb99be1097e6858e3876550ea6580af97e8e08e93b280a3
MD5 836fa928235f17f0e25e441a565e8d11
SHA1 7581d934db0ca37e8bcf32b08ff140bd0e7e41d0
SHA512 14d87c1dcd9d6b3b05c7b06fbb7b333dcdba0efc8958767ac486948e62512828084822d1a5eb66d44063af185219c774b846a3de5315dd3307ea85a3acc0dcc9
SSDEEP 3072:ZngwJ41ZvGp1pBqWJJJJJJYcRJ54rak16Q1qnOFvTSj35uBy:UZvGp1pBqWJJJJJJYcRj4WBTUy
TLSH
T156E4CC40E2B5D103E5A23634CDA6C1F38D696DB2D629E93B0A733F49F870994CB1D61B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

lng/id-ID/mplng.dll.mui

SHA256 eac72f45e5700eaa4995529e1805ccd420becf61081866c039c421f44d2bf9aa
MD5 56200922a5447f5ce3730e6add3e58df
SHA1 ba25fe2bb126fffe06e81d576c8140375251be42
SHA512 9d2ee8903bd79780fd2f6b6c91db4f21a7d7888bca5dc5080978bed5d9d7206d910a302654d42513004e8af77cc95ffe7cec83e683ce5296c07ba0fa4cbdddb0
SSDEEP 1536:MBFckMLfcPnc4iRHSs43JN+2rdenEGBG9x92QD4RFJjWxf6ZU:Mo3YcDaZdennmx9nkJCxi6
TLSH
T1CDD309D2F798D589F9F70FB458BA4E500AB3BC56A9B1814E3294720F18B33935436B27
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

lng/it-IT/lnlng.dll.mui

SHA256 8d282b78527a40efe02b7398b3c8acc0ac139c4830155842a2cd64abeb14f4b9
MD5 24c1afb60b99d2fa69dbe5f5894547c8
SHA1 f60815f13cdf0956ac2cea077189d901e5b2bb04
SHA512 6264a6b00fcc4d6dff12a3e09e8c865f8a8ebea23617f8ce52ac51a919b99fc27cbfc64792a3fa57bb78aedc1a6c318f2febe553f53743952007948bdd7c3a20
SSDEEP 3072:y9gwJ41ZvGp1pBqWJJJJJJYcRJ54rak16Q1q09sMdPeIZNTuLc3Sta0lqw:1ZvGp1pBqWJJJJJJYcRj4WB09ILF
TLSH
T15BF4BA40E2B5D103E1A23634DDA6C1F38D696DB2D629E93B0A733E89F470994CB5C71B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

lng/it-IT/mplng.dll.mui

SHA256 b0ed853d356a84db5c85684a777e43da410d651def420605a8e40a75d8703d5d
MD5 54b5ea39474779ff333d16b8bec1f298
SHA1 59b422e97dacd1c91cf3be2707090ee3044c158b
SHA512 efa8e07ff8f9b281d770833f1af50ace25094a1c79f1ee0b29f738d2c0662d66ea518941695aad75d8c737ffe532aba8aab30b11aae7825bfe35b207378b3d1c
SSDEEP 1536:LBFckMLfcPnc4iRHSs43JN+2rdenEGBG9x92QD4RFJjWxf6+:Lo3YcDaZdennmx9nkJCxi+
TLSH
T1E4D3E6D2F7E8D589F8F61EB46C3B4F600A737C1699A5854E3295720F08B32536836B27
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

lng/ja-JP/lnlng.dll.mui

SHA256 e6c9a52c4fb202bd993fe6aa607610278107670ad6e16aba199a98935f2f5c40
MD5 b42fa50c51c3a76efe110e2400125110
SHA1 028863883af98b670c14dc31740773051414ea3a
SHA512 740efa05ee30121a55237aa16e0a77fd16f270d833d6705482df74f47e8e4fd7e90fa96a7150057696f8f1707d6456e48019e2f2478b0cffed221743d2fd3f5c
SSDEEP 3072:5zgwJ41ZvGp1pBqWJJJJJJYcRJ54rak16Q1qORV5d36Ejg5:5+ZvGp1pBqWJJJJJJYcRj4WBO3c5
TLSH
T1AAE48640E565E107D1943238CD96D1F38D686EB2D25AE93B0EB73E8AF470898CB4D61F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

lng/ja-JP/mplng.dll.mui

SHA256 33fbf972145cffb6dc8ea516c4a23109108caf0dbbc29b3aa2a1b2102783a3e9
MD5 f0e5418c4c57332e262a6c0e7df252d3
SHA1 9c00d940e7bff8243a48cd9a9956a24a11c4a670
SHA512 4708a01501b3d6d66f2af2bc7bdb200a1b108c7d2cf5a6a0b066bda1d39468bb6f1bdde13cd4caf5616c27c8a6fe444931d74d5a9a9cb45abb5e1dc6bc8a33d8
SSDEEP 1536:NBFckMLfcPnc4iRHSs43JN+2rdenEGBG9x92QD4RFJjWxf67:No3YcDaZdennmx9nkJCxi7
TLSH
T16ED34AD2F754C68EE8A84EF5186B4F200BB3BC198691464E3294B30F18F7253653BB1B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

lng/ko-KR/lnlng.dll.mui

SHA256 30f83202ca987e9a6d7a28b3f06fd23c43b7e515d0d1a138c10e903c2da77639
MD5 db15d3e8dc45bbcd04786c281f461de0
SHA1 75bd288d487c390dc47d874218f969918316c78e
SHA512 fa20bfd22bb2b4f19b11aad2c91788246436bf3a6f5973c32a2929b00d47a4fa160dd1893343d52d23da896a3e4f27d2c5b54cf58a7440c1cbd02b6baae784d1
SSDEEP 3072:6gwJ41ZvGp1pBqWJJJJJJYcRJ54rak16Q1qOIbDXO3IfR:bZvGp1pBqWJJJJJJYcRj4WBfR
TLSH
T1D2E47640E165E103D1943238DD96C1F7CD686EB2D25AE93B4AB73E89F4B0898CB4D64F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

lng/ko-KR/mplng.dll.mui

SHA256 a80a8170b2d2d977d871a18df840eab26a92a85564da615de12ec2f328233d34
MD5 4b798ac7535748fc3fbc9233a200ea49
SHA1 b5b7f292961b97a89b3506ee719e2b66e338490e
SHA512 23570191d79db4043ccf161b992cc099054efb6f04e6e8ac4dc98b548b83b17f77b6e271c7fa2e52c60ba5b88511a2517d9efab440712394e38626c17863b947
SSDEEP 1536:+BFckMLfcPnc4iRHSs43JN+2rdenEGBG9x92QD4RFJjWxf6y:+o3YcDaZdennmx9nkJCxiy
TLSH
T161D35BD2F648C59AD8A80EF4586B8F6106B3BC1AD682460F7294730F18F3353643BB5B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

lng/lnlng.dll

IMPHASH 8d2211316a4559819c194466b242ec49
SHA256 ec6f3eac3842be8c4d49d3f8a97f75bb6f80863c26f672daae23ab04baed88e2
MD5 f854595e998cb34638f826c627eb084f
SHA1 083fd94817537093e002a84de440416402547858
SHA512 a187f8d55c3d1c48eceff5c3d5666f0d355e53e529f4578894968621c1bc54eca52c83cc845ba5fe5d58a9219c7d4f87b40a08fa00b1c8cc199d19540e9479e5
SSDEEP 192:zUdfx7GwSzNNwxt2xk4TcjOW69VsnfcAVP:cKNwxok4Aat
TLSH
T1CFF1FA7AFD838BF7DA0C033496A38B9286BCBD022FE111237B82D91D18446D5FD21679
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4961

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\tests\rebranding\LuLuNote\lulunotes\Notepad3\Bin\Release_x86_v145\lng\obj\ln_en_us.pdb

lng/mplng.dll

IMPHASH 8d2211316a4559819c194466b242ec49
SHA256 e63831d8ea56876b4fd8fe8922ccd0668392f2ef76cd0463e3e8566622245c1b
MD5 e57bd631ae38d012f3e9882e56f6196b
SHA1 fe589948b91b02e5bc03efc09d916081004d7759
SHA512 650c2a573f922b66eeb676eb8d6e6b4d4a669aa03b9a7002a1a89abd7ff1e9f690f013e70f38d084889ee80e64d779483b38533249f593c36088eef07a8f8d80
SSDEEP 96:19uVcdfx11GwSzJzNCBOrEt5Uxk4v/gLecjwNEnfwIbBgFqwLEcoP:4cdfx7GwSzNNwxt2xk4TcjOWdgkwIP
TLSH
T14BF1F97AFD838AF3DA0C033496638B8281BCBD023FE121237B82D91D18446D9FD21979
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4961

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\tests\rebranding\LuLuNote\lulunotes\Notepad3\Bin\Release_x86_v145\lng\obj\mp_en_us.pdb

lng/nl-NL/lnlng.dll.mui

SHA256 aef1d7afc0d9cf045286bedb943bca02b9674475ce6db85cacaf89ecaf9c4a85
MD5 1bf36a64427b4e4de00514346d9b9ec6
SHA1 67a34365cd50675dfa6c07ffaee99a794a208559
SHA512 27c3878d09478987f8063bec32f7663488998f1d92d82c2ea9022f0020ce5c9a3b1a3b56a106284159d1289556a3b793795e9a73b9391c2429c0cf90c8264d1d
SSDEEP 3072:QygwJ41ZvGp1pBqWJJJJJJYcRJ54rak16Q1qkD830kzixlclefrZlGFPoMXN+sdu:2ZvGp1pBqWJJJJJJYcRj4WBWr
TLSH
T1A3E49940E2B5D107E0A13634DDB6C1F38D687DB1D629E93B0AB23E89F470994CB5D62B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

lng/nl-NL/mplng.dll.mui

SHA256 82535e3bd81fdde71ced5783fd78a009d1d020df6376ee857abc3369ce872b70
MD5 f862c2bb41eaec3e54d9391b77f60417
SHA1 651a7f812270ef9790bd00db3eab2cab46304fe7
SHA512 d5574c71b8718481e88a36bec631a43489e93504102265c0eca39be45ce9eeb32475ba51ee357f3934539bd461af74f25ba54f7b7d08e13af3d9d96ccf582c4d
SSDEEP 1536:eBFckMLfcPnc4iRHSs43JN+2rdenEGBG9x92QD4RFJjWxf6aQ232+/:eo3YcDaZdennmx9nkJCxiaQ232+/
TLSH
T16AD3F7D2F7D4D55DF8F60FB4187A4E500AB2BC56A9B1864E3294720F18B3353683AB27
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

lng/pl-PL/lnlng.dll.mui

SHA256 1929848b94347bc56099055bb886faffa3c90865132b6b073332978a79e2fb48
MD5 f4ad7932fb65c35b8779aac3b5a1a246
SHA1 bee72bb2af41daa90e254bffddc80a00602fca47
SHA512 a26c3b264a685824819064821f67cb6a94ea4d2bb09e949bff40bdf8ec5efdd1bac6c1044b6f3deddde0695508167de93ca35cab7c55303c4b1454c5abe6c15c
SSDEEP 3072:ngwJ41ZvGp1pBqWJJJJJJYcRJ54rak16Q1qZDvLI2P2Mz3STpWQd:CZvGp1pBqWJJJJJJYcRj4WBX7M
TLSH
T1B9E4CD40E2B5D103E1A23638CDA6D1F3CD696D72D629E93B1AB33E49F470894CB1D61B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

lng/pl-PL/mplng.dll.mui

SHA256 153c1fba5bf2da6a1caef10b35f77a066de92ee37de1c95ff737a9e89c1c0443
MD5 9a2a6d9f7d27878ce7537707a4c0a4a5
SHA1 ba04275bcfbbf5c0d553ee0c82cfe26656b48a94
SHA512 c69650dce10052a9cd7e5ece219df625d6df3c7019fb631d154a944524479e0b5f75fb75b035737023bf89de28ab0a77386542e17e29e44a6a99f1316b57b6f0
SSDEEP 1536:LBFckMLfcPnc4iRHSs43JN+2rdenEGBG9x92QD4RFJjWxf6h:Lo3YcDaZdennmx9nkJCxih
TLSH
T1C5D31AD2F7A4C599E9F60EB46C7B4F600AB3BC16A5A1424F7194720F18F32936427B27
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

lng/pt-BR/lnlng.dll.mui

SHA256 0b48c928c7309a14c08dab03a786005e26e9456b73adc4ff7f07aa912917470e
MD5 92ac6aaf0aa16ace6095ce76fca02491
SHA1 2c9ed09504e526542d35ac39343b9051493e295e
SHA512 eae82673998aff7bbeb7c002a9fa5034b01ad17241cd5cff29a51d8246df57c968f12610a7d1c347feeb1ad6aeffbddbcf5b001ac85830325669908c34468d72
SSDEEP 3072:egwJ41ZvGp1pBqWJJJJJJYcRJ54rak16Q1q4OE03B/W9irCWcQgkVXkthEl3gLCu:vZvGp1pBqWJJJJJJYcRj4WBd8
TLSH
T1FDF4A940E2B5E103E5A23638CDA6C1F38D696DB1D629E93B0A733E49F870954CB1D71B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

lng/pt-BR/mplng.dll.mui

SHA256 291a0f4e4f0b7cc0c4b7c4e7b17b9e0caff4ac74efc1366345d11f04cb5e515a
MD5 f30e89429a535b51fc070f364f685d72
SHA1 8916186b2e08f44069ae2a231c7cfc31345b7fac
SHA512 c552abe91696c1798471315664da567f5a8cef7546ce10e5854a4f7d8ba9337ad0ce3aaba995374923ce194258513cf5cb2253dd5edccc42ad5f8fe25591dc6e
SSDEEP 1536:cBFckMLfcPnc4iRHSs43JN+2rdenEGBG9x92QD4RFJjWxf6HHP:co3YcDaZdennmx9nkJCxiP
TLSH
T14CD3F7D2F7E8D589F8F75EB5583A4F210A737C5699B9810E3194720F18B3243983AB27
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

lng/pt-PT/lnlng.dll.mui

SHA256 96718b129959bacbebe4b1aa4f74ed52dbd49cc28ab2aab9eb547e9154d2b0d9
MD5 f8db21dbfd7d45a40d8d6168438ca311
SHA1 83e92a74ae8297e1f831fa90edd19c9b6e67af0a
SHA512 649393e908855010344db6f10656983e60f9b3a24960142319c847fff9c99e530a3f54c00b772d4758ddc2a1785d4b91c2ab36c7c09a69edb7f3bc47ed67a9b1
SSDEEP 3072:cugwJ41ZvGp1pBqWJJJJJJYcRJ54rak16Q1qCM27NNdk+3y3e21:cfZvGp1pBqWJJJJJJYcRj4WBCg1
TLSH
T1E2F49840E2B5E103E4A23638DDA6C1F38D696DB1D629E93B0A723E49F870D54CB1D71B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

lng/pt-PT/mplng.dll.mui

SHA256 85601b3993f6ff16d385bb6214168bc1ac59ea7f4f6cb266ed0e2181509f0dab
MD5 856f32c0ad0dfd65e15193c03a14a497
SHA1 6d4fe2cc9d42d3de79857643c59eb243197ea4ad
SHA512 87c24fbd2a0468a03723eba3dd42af545986964a7684bc58054faa3e7cd6078e7053a2cd9d14452b2658ad55be92e9ddf4101f9d1d9f3cbcbd49bbcc0dc8b611
SSDEEP 1536:bBFckMLfcPnc4iRHSs43JN+2rdenEGBG9x92QD4RFJjWxf6AF6Hb:bo3YcDaZdennmx9nkJCxiAoHb
TLSH
T18AD307D2F7E8D589F8F71EB5583A4F200A73BC5599B9420E3190720F18B3253993AB27
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

lng/ru-RU/lnlng.dll.mui

SHA256 f28f45e0c046f87dc55ab992acc6f3750521ae3ff1d06846dd4900c2440513ac
MD5 cb5ff472fe0cfd31fe18636ab4da08f0
SHA1 a22d36d8b58bd283084f0fe9930b1153ddc8437a
SHA512 eb63162055d98726318db88b64e5a48d279a67e76eb40573111dbe387937f2deb085d4c8b6db31cc8660530203aada50a18a59723f8d3718b9fa9a3a3e76b9c5
SSDEEP 3072:tugwJ41ZvGp1pBqWJJJJJJYcRJ54rak16Q1q9xNG3XGZ:tfZvGp1pBqWJJJJJJYcRj4WB/
TLSH
T15BE4BA46E274E103D0906234CEA6C5F38C686EB1D319E97B4ABB3E99F470868DB1D54F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

lng/ru-RU/mplng.dll.mui

SHA256 2bce67d484147949d861f8d1e7d1e1c6f90478c5bb380d6e5ea03429989405e8
MD5 4da762571658c20603eb6ff29950000f
SHA1 e6cf18e04666b52898765c0407d300d3bf14631b
SHA512 8180ea9b50a52caf1346e2e6c66fd286ef3bf285404ffdb78766ce507894394f792ccb545690bbb8c733bbd8a3b5a7db6cafcd19fbdd091c0944a171c8dd7d1b
SSDEEP 1536:3BFckMLfcPnc4iRHSs43JN+2rdenEGBG9x92QD4RFJjWxf6n:3o3YcDaZdennmx9nkJCxin
TLSH
T166D34CCBF628C18AE4A84AB41D2B4EE116B3BD059745058F719F761F14B7233323BA5B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

lng/sk-SK/lnlng.dll.mui

SHA256 d6d65d3f22c021687a2d421156e5400aa3eadc743f7bb834601227c84d9e0a01
MD5 21509698e2e545353274072712e21935
SHA1 2bb1bcbe49bbf86265005589d21cc2a57d033a49
SHA512 6358b5f939517dd527e7c7f07a4e6c119a1e0ac564def0185a00e8a1610bdf286cc46386f11f56764a62040eb77ebb50b86585e9e174f37d6b80417bab657a6c
SSDEEP 3072:R6gwJ41ZvGp1pBqWJJJJJJYcRJ54rak16Q1qSQRZbMFRgqQtMOHUBbD9ehH5VZI0:hZvGp1pBqWJJJJJJYcRj4WB+i7
TLSH
T135E4BA40E2B5D103E0A63638DDA6C1F38D696DB1D629E93B0AB33F49F470994CB4D61B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

lng/sk-SK/mplng.dll.mui

SHA256 5391d955ece6cb3f7faaed4d5d5d18f86c10e4bcc602d8a63deafec755613952
MD5 a53d585bb1c5210e9eb8b9e4a2b4d62e
SHA1 e52283bfca066b0bb14f79f21a077a15db589fc6
SHA512 d811e7f5967a6e3189e75d44d09130817e72276a0cfa10a77abdb758859000210859bbe39258cc3582c2a366fcc7297d05e3db9b6583d60cb37eadf7aee2065b
SSDEEP 1536:iBFckMLfcPnc4iRHSs43JN+2rdenEGBG9x92QD4RFJjWxf6ViiUMFoxHy:io3YcDaZdennmx9nkJCxiViiUMSxHy
TLSH
T176D309D2F7E8C58AF4F91EB5687B4E600A737C5AAA65410F7294730F08B32436536B27
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

lng/sv-SE/lnlng.dll.mui

SHA256 1026969d46e173def1582be49e984bbf4542e18dda850d66fe8b2542d52098ca
MD5 3c315d2680dcdd101d6c18317d735922
SHA1 dcd4c448e27cde39745b492521c1ddcbf1a8e6cf
SHA512 3ab2803bae3fde7540b1d566b3ab9101614ee5aaa81cb5aaca3a5cf5d3fb9ac4ad22134025283bde2d436e98a8cc3531d5fc5bcd818f227a0c2c288d8ef1d46f
SSDEEP 3072:23gwJ41ZvGp1pBqWJJJJJJYcRJ54rak16Q1qHsMq2IKXxyD/Y96pjMflWKDVY63x:2yZvGp1pBqWJJJJJJYcRj4WBV
TLSH
T179E4CE40E2B5E107E1A23638DDA6C1F38C686DB1D629E93B0A733E49F470994CB5D61F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

lng/sv-SE/mplng.dll.mui

SHA256 a7015959ca6f65898316cea39e5943775ff7ba751ad8467a547f7af6a6d3ef04
MD5 cfad6fdb37427505a12a2e799c9ac6aa
SHA1 1b3e5448c8349907650dc7724ca5fa2e162e1f50
SHA512 43555ee04184dd5d2844bafc1fc95c1168ce7447c4c13bb1dfff2468a02b09da4535a681ff0ab2a48fa2bf0dd1d966042003cfe94dced4b320564ff65362c4bf
SSDEEP 1536:eBFckMLfcPnc4iRHSs43JN+2rdenEGBG9x92QD4RFJjWxf6TOAgPc8hX/KL5dN:eo3YcDaZdennmx9nkJCxiCxK5dN
TLSH
T1ABD31AD2F798D59DF8F64EB42C7B4E500AB3BC5599A5860E3294720F08B3253543BB2B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

lng/tr-TR/lnlng.dll.mui

SHA256 2a9b5e7c1bde893b0cf1fcecdb6c0a9c7db5f05a82e475928f45034e78c15969
MD5 7a3acaf732b572035c9457bc171aacfd
SHA1 8695a56add601a6f4c10d91e27576e37cf08571a
SHA512 d8cfe6737e940ac7fad33879de00b60b62d9891abb4e1c4a78d762dc8f2fb4113cdefdbb68efb6c380de2dcc6e741307b5a778d69241e5b36ac9618b1b051931
SSDEEP 3072:9gwJ41ZvGp1pBqWJJJJJJYcRJ54rak16Q1quIe2RoFN7uEZfeTMjfueo6odiQrum:oZvGp1pBqWJJJJJJYcRj4WBO0d2J0
TLSH
T1D2E4BF40E2B5D103E5A23634DDA6C1F38D696DB1E729E93B0A733E89F470994CB0D61B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

lng/tr-TR/mplng.dll.mui

SHA256 ba86e77ef31d1c5078361d4e499788499faf3a02737a699e667128f791a8eb9a
MD5 336ffc1a8024dd499dadeda8b9105ee9
SHA1 4dbaf0827644391f74bd5dc62a585e970ef8ff32
SHA512 b667bc761856b6bbddb86181ccdf2b53734835b2c4fbb9739ae8b32b143a3679503b439addd2a22da35f7ee69e135b06b981ec80cdff7bd99a2b40a8c4b88429
SSDEEP 3072:4o3YcDaZdennmx9nkJCxiawGj2igvKQ9T:4+DaZdlS
TLSH
T1CDD309D1F788C59AE8F60FB52C7B4E510AB37C65A9A5424F3294720F08B3293543AF67
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

lng/vi-VN/lnlng.dll.mui

SHA256 8f7431cf66fd520c0f268e09246741a6a01cb5d96602709d8ac7ebf3433ff01b
MD5 aa26069b2b3223c42fddf55c07cb3449
SHA1 1129026016cb93aa4e591e04fb32fe777ce02c8f
SHA512 51c19316d9178685c826680c01295137ddd7b37c94187b75ed43772e5552a255eaa3f43b75604f6ccb1a0ce146dacb8f590c6e32fe8ee47e073d784b9cbb46f9
SSDEEP 6144:QZvGp1pBqWJJJJJJYcRj4WBnRNWqlBDnMHs:PnBnZ
TLSH
T144E4AC40E166E103E1A13238CD96C1F39D586EB1D22AFA374A773F89F570898DB4D61B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

lng/vi-VN/mplng.dll.mui

SHA256 8f410599e231e445d17c7e0bca7f3dfd951ddac59e90569084c7fa63226e9d7e
MD5 e825e5dea029fa2f30e022539907f589
SHA1 f4953804d226b187fcdbcd8d9d5a1ecdb1681bba
SHA512 d3bef1a65c75f69a2e7f47fd1daf084ece3a527cdd2f5ed0133189496ac3ae610e052dcdb13e6e1f709bdac5467395f12dcdef99a8d4fd470718feeac9eaba04
SSDEEP 1536:MBFckMLfcPnc4iRHSs43JN+2rdenEGBG9x92QD4RFJjWxf6J/d:Mo3YcDaZdennmx9nkJCxiJ/d
TLSH
T177D32AD1F60BD18AE4B51BB5186B4E610AB3BC1A95B7960FB395730F04B72432C2BB17
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

lng/zh-CN/lnlng.dll.mui

SHA256 19dc13faa487313ed54944e545aef10d20cf6764a4082b924e934b659dee9353
MD5 234a8a9cfd737e00aef11de98d89fa93
SHA1 7d168f8f701fae195136637618b8f25b6bee9e4f
SHA512 549756f30ecdb35dc6d9a874e289876c8757efae7a76bae670113f43c03b40e1718afeedb2aeff388564f490fb030d1e4bd3b8a74be62f91d6393fcbe3a24549
SSDEEP 3072:1gwJ41ZvGp1pBqWJJJJJJYcRJ54rak16Q1qhtChb0SW28ww3dose:gZvGp1pBqWJJJJJJYcRj4WBhde
TLSH
T1F8E47540E165E113D1943238CD96C1F38D686DB2D21AE93B5EB73E8AF4B0898DB4D61F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

lng/zh-CN/mplng.dll.mui

SHA256 4bfadf66ad24e7601de62221a54a9003957e393c8d7309d336b24a4653b5e5cc
MD5 eb396293e320474ec7b64cf336513970
SHA1 9629ed203c317cbbda822629ba01cac62514459a
SHA512 5e888190607a5acdb986e95679f6cb56335095c7491578fffc2a39614ff7c1bff6ce66fae07a75bc45e2ae4798a805539ff28f2ffbd466b5c167afb63092474b
SSDEEP 1536:fBFckMLfcPnc4iRHSs43JN+2rdenEGBG9x92QD4RFJjWxf6ob:fo3YcDaZdennmx9nkJCxiob
TLSH
T1F5D349D2F748C59AD8A84EF4586B8F6106B3BC1995824A4F7294730F18F7213643BF6B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

lng/zh-TW/lnlng.dll.mui

SHA256 882c7c0f0bb3920bc98e72e5423cc81274630c08fe8277fe521b5af91082ab17
MD5 0cade5f7309523b642e64ab1fdc39072
SHA1 1bf17ba1960d6e0842330317f34eb5657d407f21
SHA512 a4b73eea5aa099d25134820b014e7ffbd1700ddfa36b1964ae2b78a2ca0473f7420fd1ea59be016aa3402bb6539a4e7b3991d06613ef31504d92c5d7d498693b
SSDEEP 3072:kPgwJ41ZvGp1pBqWJJJJJJYcRJ54rak16Q1qWOSZ37V:7ZvGp1pBqWJJJJJJYcRj4WBo/
TLSH
T187E47540E165E103D1943238CD96C1F39D686DB2D21AE93B5EB73E8AF4B0898DB4D61F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

lng/zh-TW/mplng.dll.mui

SHA256 2680b6cb91b15675b208c31aaa919f26f3bc62e224a9f7d904644675c7c24f69
MD5 d0de1489ba4cf04d1afde20ae559978a
SHA1 78515c4f5c4751449b68aefdad553c299cfd1980
SHA512 520b2dae16e14c638651c3d059712c771e3f9fd5a66c5b996a7752be7e5ae3ac2eb1269315eac21ce32aba390cb54b6a8723b9ecc4c6ea04de844281795edfe4
SSDEEP 1536:ZBFckMLfcPnc4iRHSs43JN+2rdenEGBG9x92QD4RFJjWxf6Gn:Zo3YcDaZdennmx9nkJCxis
TLSH
T1AFD349D2F648C59AD8A80EF5586B8F6117B3BC1A9681464F3294730F18F3253643BF6B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

minipath.exe

IMPHASH 5d93b0d3aed6b1be7f42b39f354c4d34
SHA256 8cf77e66618ba091364c5ad7d09c7669a1db1d21b5bcfd4d177f22d0468bdeb1
MD5 61aaf46581f896fbe53b6cecad406fde
SHA1 196cd6ebf7020ae990a7211f0b01ff56622df8a9
SHA512 5939775625cdf04a8d7a434d96217acfd4a28283e2851d3f07594333038b6a690a056b531eba07999322b9fe262b05db3836284a63c3d4b0bd7786d3f15cf8b9
SSDEEP 12288:cgdRVGRZjP1IRKlheo3hIsp7Fu9q4caZd/cocaZdlucS:FdRVGTL15heihldFu8hod/Wodluc
TLSH
T119D49E81FA90D065E8A50AB1582A9FB5463EBC21DF2459CF73807E6FB4331C29539F17
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

110336

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\tests\rebranding\LuLuNote\lulunotes\Notepad3\Bin\Release_x86_v145\minipath.pdb

kernel32

GetLastError GetCurrentDirectoryW LocalFree WaitForSingleObject CreateEventW SetEvent GlobalAlloc GlobalFree ResetEvent lstrcpyW SizeofResource SearchPathW GetLocaleInfoEx FreeResource OpenProcess LockResource LoadResource FindResourceW GetWindowsDirectoryW GlobalLock GlobalUnlock MulDiv CreateDirectoryW FindFirstFileW GetCommandLineW lstrcpynW SetThreadUILanguage SetErrorMode FindClose GetUserPreferredUILanguages FindFirstChangeNotificationW GetVersion ResolveLocaleName GlobalSize FileTimeToSystemTime FindCloseChangeNotification lstrcatW FileTimeToLocalFileTime FindNextChangeNotification SetCurrentDirectoryW GetTimeFormatW CopyFileW SetThreadPreferredUILanguages IsValidLocaleName GetDateFormatW SetFileAttributesW GetFileAttributesW LocalAlloc WriteConsoleW DecodePointer GetConsoleMode GetConsoleOutputCP HeapReAlloc HeapSize SetFilePointerEx GetStringTypeW SetStdHandle GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW GetShortPathNameW GetCPInfo GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW LCMapStringW GetFileType HeapAlloc HeapFree UnhandledExceptionFilter IsDebuggerPresent GetStdHandle TerminateProcess ExitProcess GetCurrentProcess GetModuleHandleExW FreeLibraryAndExitThread ResumeThread ExitThread CreateThread DeleteCriticalSection InitializeCriticalSectionEx LeaveCriticalSection EnterCriticalSection EncodePointer FlsFree FlsSetValue FlsGetValue FlsAlloc RtlUnwind SetLastError GetSystemDefaultUILanguage GetUserDefaultUILanguage GetLocaleInfoW GetVersionExW UnmapViewOfFile LCIDToLocaleName FindResourceExW LocaleNameToLCID CreateFileMappingW MapViewOfFile InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter GetStartupInfoW SetUnhandledExceptionFilter IsProcessorFeaturePresent LoadLibraryExA GetProcAddress GetModuleHandleW VirtualQuery GetSystemInfo RaiseException FlushFileBuffers lstrcmpW lstrcmpiW WideCharToMultiByte GetFileSize LockFileEx CloseHandle MultiByteToWideChar GetSystemDirectoryW CreateFileW UnlockFileEx SetEndOfFile FormatMessageW SetFilePointer GetModuleFileNameW ExpandEnvironmentStringsW WriteFile lstrlenW ReadFile LoadLibraryExW FreeLibrary CompareStringOrdinal GetCommandLineA VirtualProtect

user32

CheckMenuItem SetClipboardData EndDeferWindowPos GetWindowDC TranslateAcceleratorW SystemParametersInfoW SetPropW RedrawWindow BringWindowToTop wsprintfW GetSysColor CharPrevW GetWindowPlacement GetSystemMetrics GetWindowTextW EnableWindow KillTimer PostQuitMessage GetSysColorBrush EnableMenuItem RegisterWindowMessageW UpdateWindow IsIconic GetWindowThreadProcessId DrawAnimatedRects FindWindowExW SetWindowCompositionAttribute GetCursorPos ChildWindowFromPoint InvalidateRect ReleaseCapture GetParent CheckDlgButton AppendMenuW GetDlgItem SetFocus IntersectRect GetMessageTime EnumWindows SetMenuDefaultItem FrameRect GetMessageW DeferWindowPos GetMenuItemInfoW DefWindowProcW GetKeyState CharUpperW LoadMenuW GetMessagePos ShowWindowAsync IsWindowVisible EqualRect MessageBoxW RegisterClassW SetWindowPlacement ShowOwnedPopups DeleteMenu LoadAcceleratorsW TrackPopupMenu GetSubMenu BeginDeferWindowPos OpenClipboard OffsetRect SetTimer CloseClipboard IsZoomed SetMenuItemInfoW EmptyClipboard SendMessageW GetDC MonitorFromRect SetActiveWindow SetWindowTextW LoadStringW DdeCreateStringHandleW DdeConnect GetMonitorInfoW DdeInitializeW DdeUninitialize DialogBoxIndirectParamW DdeClientTransaction SetLayeredWindowAttributes CharUpperBuffW SetRect DdeDisconnect SystemParametersInfoForDpi DdeFreeStringHandle SetForegroundWindow LoadImageW GetDpiForSystem ReleaseDC GetPropW RemovePropW DispatchMessageW PeekMessageW TranslateMessage GetWindowLongW GetWindowTextLengthW GetSystemMenu PostMessageW CheckMenuRadioItem GetWindowRect GetFocus DestroyWindow SetWindowPos GetDpiForWindow CheckRadioButton MessageBoxExW AdjustWindowRectExForDpi CreateWindowExW EndDialog MessageBeep CreatePopupMenu WindowFromPoint DestroyCursor ShowWindow DestroyIcon GetDlgCtrlID SetDlgItemTextW MapWindowPoints GetDlgItemTextW SendDlgItemMessageW IsWindowEnabled IsDlgButtonChecked DestroyMenu GetMenuStringW CharNextW LoadIconW LoadCursorW GetClassNameW SetCapture InsertMenuW SetCursor SetWindowLongW GetSystemMetricsForDpi TrackPopupMenuEx GetComboBoxInfo GetClientRect CopyImage

gdi32

SetBkColor ExtTextOutW EnumFontsW GetDeviceCaps GetStockObject DeleteObject SetTextColor CreateSolidBrush CreateFontIndirectW GetObjectW

comdlg32

ChooseColorW

shell32

ord180 SHGetPathFromIDListW SHGetSpecialFolderLocation SHGetDataFromIDListW ShellExecuteExW SHFileOperationW SHGetFileInfoW SHCreateItemFromParsingName ShellExecuteW SHGetKnownFolderPath SHCreateDirectoryExW SHAppBarMessage DragQueryFileW Shell_NotifyIconW DragAcceptFiles DragFinish SHGetDesktopFolder

ole32

CoInitializeEx DoDragDrop OleInitialize CoTaskMemAlloc CoCreateInstance CoTaskMemFree CoUninitialize OleUninitialize

ntdll

RtlGetNtVersionNumbers

comctl32

ImageList_AddMasked InitMUILanguage ord381 InitCommonControlsEx ImageList_Destroy ImageList_Create ord410 PropertySheetW ord413

api-ms-win-core-path-l1-1-0

PathCchRemoveBackslash PathCchRemoveExtension PathCchAppend PathCchRenameExtension PathCchAddBackslash PathCchRemoveFileSpec PathCchCanonicalize

shlwapi

StrChrW StrTrimW SHAutoComplete StrCpyNW PathStripPathW StrCatBuffW PathIsDirectoryW StrRChrW PathIsRelativeW PathFileExistsW PathFindFileNameW StrDupW PathUnquoteSpacesW PathMatchSpecW StrRetToBufW PathIsSameRootW PathGetDriveNumberW StrCmpNIW PathRemoveFileSpecW PathRelativePathToW PathIsPrefixW PathUnExpandEnvStringsW PathIsRootW PathFindExtensionW PathCommonPrefixW PathCompactPathExW StrStrIW PathQuoteSpacesW StrFormatByteSizeW

psapi

EnumProcessModules GetModuleFileNameExW

advapi32

RegOpenKeyExW RegCloseKey RegQueryValueExW

Name

.text

Size

213KB

Virtual Size

213KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

46KB

Virtual Size

45KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

320KB

Virtual Size

319KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

minipath.ini

SHA256 693d0bef95a0be5bb5d6d9d591645c464d248d3f063d7eaed9b182a6049b9e4f
MD5 f4bc8ab75123ae099014f8eb850ed9b3
SHA1 5b507bf93e29f55f5ef28274392bdef6da6df051
SHA512 f10276d0d43fd6d73ff3d5aa37f812e3a53e1e82ad7bdaca40369cd110424ad7a702fbd466e1d6cc9d4d1fd4f7bffd6ddc07a256ef0d91707fe92ee5c9f1ddfb
SSDEEP 96:PFjU2VuYQXQ/xL2aaH2yK1e43tBAvrsfgESEvD5mlp212iWl57Ql48GV9:PK2VuYVpL2aaWyK1e0zqoYEvNmlpPTkI
TLSH
T152A1C7CE0B54D6CF26C539A68675E18927B5713E4101B25A29B80C15ECBED9F4C55F03
MD5 SHA1 SHA512 SSDEEP TLSH

Sharing

General

Malware Config

Signatures

File Explorer