helium_0[.]15[.]5[.]1_x64-installer[.]exe

resource
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/nsDialogs.dll
unpack001/$PLUGINSDIR/nsExec.dll

helium_0.15.5.1_x64-installer.exe

IMPHASH 573bb7b41bc641bd95c0f5eec13c233b
SHA256 7fb9c527c10866b427e4b61fb414aecfb3ae83c43704ac9ddb8f00805679aa74
MD5 99933476a9e151c0b9cc136530ce7a46
SHA1 485c7795a918f68e6e98273a9e67c259f1fb96ff
SHA512 c90acdec157c6b58e303b051596f474ca478387e58c23be9002ef7291ab1a6ed12589be5231d4ded722ded7fe0d04567125dbf14353999fe63da5cd9322d0c9c
SSDEEP 3145728:ia5tSCklX2VjC/oYj2VMKl7jYkuFwQxxyO4dEpf:Yh2VsK9l7jduFwcaq1
TLSH
T16C583353F3A600A8D46EC978CF7D91225A357C4A47B493EF26D432E61A71EC47B38B21
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

1d:bb:4e:5f:43:81:11:0b:6f:6b:b9:68:71:c9:7c:cc:11:e0:4d:bf:9d:e1:9f:f6:48:83:3d:c1:67:70:c9:cf

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=imput LLC,O=imput LLC,L=Sheridan,ST=Wyoming,C=US

Chains

Aug 15, 2026

CN=imput LLC,O=imput LLC,L=Sheridan,ST=Wyoming,C=US

CN=Microsoft ID Verified CS EOC CA 04,O=Microsoft Corporation,C=US

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Subject

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Serial Number

54:98:d2:d1:d4:5b:19:95:48:13:79:c8:11:c0:87:99

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 16, 2020 - Apr 16, 2045

Subject

CN=imput LLC,O=imput LLC,L=Sheridan,ST=Wyoming,C=US

Serial Number

33:00:04:52:5a:0d:fb:3f:01:c3:02:5d:b8:00:00:00:04:52:5a

Issuer

CN=Microsoft ID Verified CS EOC CA 04,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 14, 2026 - Aug 17, 2026

Subject

CN=Microsoft ID Verified CS EOC CA 04,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:17:27:45:09:0b:8b:87:af:c6:00:00:00:00:00:17

Issuer

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Mar 26, 2026 - Mar 26, 2031

Subject

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:07:87:a3:34:a3:7b:a5:8e:1c:00:00:00:00:00:07

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Apr 1, 2021 - Apr 1, 2036

Subject

CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 19, 2020 - Nov 19, 2035

Subject

CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft America Operations+OU=nShield TSS ESN:A500-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:56:7e:8f:9d:58:08:8e:e9:60:00:00:00:00:00:56

Issuer

CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 23, 2025 - Oct 22, 2026

Minor OS version

0

Major OS version

4

Entry point

13709

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegEnumValueW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegOpenKeyExW RegCreateKeyExW

shell32

SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW ShellExecuteExW

ole32

CoCreateInstance OleUninitialize OleInitialize IIDFromString CoTaskMemFree

comctl32

ImageList_Destroy ord17 ImageList_AddMasked ImageList_Create

user32

MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW CreatePopupMenu AppendMenuW TrackPopupMenu OpenClipboard EmptyClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetSysColor SetWindowPos GetWindowLongW IsWindowEnabled SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CharPrevW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint CharNextA wsprintfA DispatchMessageW CreateWindowExW PeekMessageW GetSystemMetrics

gdi32

GetDeviceCaps SetBkColor SelectObject DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor

kernel32

lstrcmpiA CreateFileW GetTempFileNameW RemoveDirectoryW CreateProcessW CreateDirectoryW CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersionExW GetCommandLineW GetTempPathW GetWindowsDirectoryW SetEnvironmentVariableW WriteFile ExitProcess GetCurrentProcess GetModuleFileNameW GetLastError GetFileSize GetTickCount Sleep SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW MulDiv lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject CopyFileW

$PLUGINSDIR/System.dll

IMPHASH 509a34b3a68a773e0afb4259e68f9f82
SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
MD5 9b38a1b07a0ebc5c7e59e63346ecc2db
SHA1 97332a2ffcf12a3e3f27e7c05213b5d7faa13735
SHA512 26e77f8e10f6d8693c92bd036b53a3f6e0c523090ef8dfe479815f556ecd2b57fc90ce9f7cceebe70460d464decb27ad1fe240819fd56997764e96506b6a439c
SSDEEP 192:kjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZ40QPi:U/Qlt7wiij/lMRv/9V4b4r
TLSH
T1E8427C1297B089F2F151093419667F2A6FBEAC5D17F405A3CFE304C63D212CB9839243
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10879

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/modern-wizard.bmp

SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
MD5 cbe40fd2b1ec96daedc65da172d90022
SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
TLSH
T139C29757DE6B6EA4BE0804EF1A0694931C71FE211AB0CD0561D2B767B4FC93B19A0B3C
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/nsDialogs.dll

IMPHASH 3b477381217c97b22146297f93df2a92
SHA256 b1350f487692057c8ffde75dcc55287a52a3272240d4d4912f24464b27551fc0
MD5 8f0e7415f33843431df308bb8e06af81
SHA1 1314272e6ad3be1985d4a1607b890a34b0bde8b5
SHA512 5450b2070c40b257c28ba9a472d762f91b78928d1e8d4d88e0576992065a61fb9a6513006e6b5947c415c9e02ae80a90a85b58da7e016a424331c8cd596ed684
SSDEEP 96:obEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YHNqkzfFc:obEvCu5e81785qHFcU0PuAw0uytIFc
TLSH
T19D12F892E2A454B3C5D6523B36AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

7527

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/nsExec.dll

IMPHASH 68b7023f8923dd087549802f8fa631c3
SHA256 b121689861b506dbc9c3797b49bc8a90d555cb7db58cb959165cc758391c00bb
MD5 8fe362ffdfa66269b8a64e3a87f68e52
SHA1 b5daaa60a6b8591a670da9fc3a2d6f896d55f568
SHA512 8f2904e01b0835683a0f11114a09da291ba527d867e73db2765185f780f2278debd9c5fc4281a42a6065c5ef5947bdc6239ae4c5835df62c71e1fce80d8bf942
SSDEEP 96:JXzdzBzMDhOZZDbXf5GsWvSv1ckne94SDbYkvML1HT1fUNQaSGYuHnDQ:JgQHDb2vSuOc41ZfUNQZGdHD
TLSH
T1F8E1193571C02DF7E08D89707816BD2F83F4D43627BA05A04A771AD579D0AF6EE28B42
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4231

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$TEMP/helium_install/helium.7z

SHA256 7619e28f1a544aa3a12c92906585bf4cf08083f94d2248be98b2018596e237d5
MD5 02cf8ca105f6dd177342c2b490d2553f
SHA1 197e73eb1fc939a53de917abce1ff491595c1183
SHA512 e598394010a07b9eb693315b87c93dc961ba1eeb70b3bfa11186a01ff461ae27d003e381976904203f07b90d224b69363ae54942800217146cff38740f573129
SSDEEP 3145728:E5tSCklX2VjC/oYj2VMKl7jYkuFwQxxyO4dEpu:1h2VsK9l7jduFwcaqc
TLSH
T16B483350D2689D37B302105E07EAFA134DF59545E53C5A09FFABA04FE0E520BBDD2ACA
MD5 SHA1 SHA512 SSDEEP TLSH

helium.7z

SHA256 70b27226cf27e1597acf0d8b8745bd0fb3b6395117e1a87f0c7336e02791944f
MD5 5d1661cf151a906c9d6e7341f6160379
SHA1 f59b31b1206583c075d81713ed5ddcf466f0babf
SHA512 893a84a85567ab3faa3fd76481ee7315ca111a824124fa5db81368ff253ce232814e823bf9ec31af5a49211ef5cbd1639f1462350b33ffac9533f23e4760d5f7
SSDEEP 3145728:fpwxNRiUeZDCyecTsxFxfyMhSxm/PIkQMl/TntmE/dlZ8:fpwxNRiUenTsPxfXPIkQMl/TntmUZ8
TLSH
T1BC299C03F29A80D8C059C179979A9633FA75BC484B25B3DF0A5067522EB6FF81B3D724
MD5 SHA1 SHA512 SSDEEP TLSH

Helium-bin/0.15.5.1/0.15.5.1.manifest

SHA256 4c408403a9536541fa1e86fe46a2a536a6b344b3b1a36539787e1392439d4352
MD5 0ad7c07f802cc826a0dd43a6dd0b82ef
SHA1 fcb58a105001ecbad6b56927efc087680c3b766e
SHA512 01a255e15b437622700803a2ec33f2a90427d6c4528c73f51133d27811cdad0a8bfdbbf8aa8bc0951f38f4f542d0122a67a7f9f4d527ce108e78183839c100f8
TLSH
T1E5D0228141823E8E7B3140113CAA20064508973B08CC102C30FC7C2FAF23928908AAF4
MD5 SHA1 SHA512 TLSH

Helium-bin/0.15.5.1/Extensions/external_extensions.json

SHA256 a68cafd7d78d5c671c2560656653f2a4d83ab66d87a8728356a88fb1f477b3e6
MD5 280a9277b0e605e905d7f18b6148eeb7
SHA1 fcaf575897048f55b422a6dbeba943b5d550a908
SHA512 f31635bc74f9a4b0cf07be2aabab4ec883a6b8e9ac3701b27ebad6b0ca7a88c77699e69118db0ff55b37f73fb759b8f4271e6a5defbe44aab1f6981fb1179b07
TLSH
T1B8B012054DAD01600D5E50FAB0CDA2ACB304F81C6334003439CB2065A203E5A54274C7
MD5 SHA1 SHA512 TLSH

Helium-bin/0.15.5.1/IwaKeyDistribution/iwa-key-distribution.pb

SHA256 23b9c5c5f1aff41e7cf105f6c4eddf643cb019ebcc67cd8e3458dff61c17e0ed
MD5 36ed7bf0b05d1ec15b946904ed165b52
SHA1 b995bf49432eae4835a428660f4cb535a5dae0cf
SHA512 29bc2676a96038284814136e5705eb0c272cf34695b206938aab85a0ecd2edf54e2286cb3c2474235b26f8527f2c4d2201774d33487050e18902452a9f6c1e26
TLSH
T1AC6182028722EC0DDF1E0B979B414914F05538136C7894A797DE0B73EBC137616B38AA
MD5 SHA1 SHA512 TLSH

Helium-bin/0.15.5.1/IwaKeyDistribution/manifest.json

SHA256 e7fe0fb6d9dd649d6287a4b6aff979b7dfce14b1f337cd185664fecc0169fb96
MD5 037315cc98f474db174b2a81b820d6d3
SHA1 c6c635afef2f78121d1432f7d2a04e185acba314
SHA512 523da7abe503c3c7e11863a2ab66e7493baa76e383e893879f50f4575a9e564fd7dcdf4397934a164e6dfaaf6b87ca6a77c5d9fe424e3a2457a1812e72c103c0
TLSH
T1A4B01231BC819D3324D00B286171439367F17D07282178299A97240BBECC237A27333F
MD5 SHA1 SHA512 TLSH

Helium-bin/0.15.5.1/Locales/af.pak

SHA256 a4c18d8a3664b952ba1c4a6ab525e0a7e9e96358f89de79f082c2f9c19651a09
MD5 d4e50e779452afeaf2ff7adf0f4dc024
SHA1 641be9b8e16e6cff32cdb482fc28811047ecc08e
SHA512 4b98938b2c56022aa6922d10af631acf41f9211cfb998dfdb636c95644470bbda3e5c325cd500fc7a3ef908c5db6407518aa57f41c2fa43d2f577877bb072a7c
SSDEEP 12288:EbquRYsJxczaw9LzzgNhCEJ+5AoaubcQH2JynwXNjIbFwL8lmmDozvlqx2NAm+dA:OXYixczaw9LzzgNhCEJ+5LbcQH2Jynit
TLSH
T120C4FA0BEA90173D05E0629BFA0945B7F75DA26CC770B2BADDAD82310562DFC11BE0D9
MD5 SHA1 SHA512 SSDEEP TLSH

Helium-bin/0.15.5.1/Locales/af_FEMININE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/af_MASCULINE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/af_NEUTER.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/am.pak

SHA256 03bc1db5748a1d595cb6c9d5752e063dfbe609763ccde85c57313fce321dd335
MD5 e00abe03d7b115e71333ff6c261f808e
SHA1 356c160269ae2d6ecce17d5954ad72adddc0751d
SHA512 df0818e13ed35db7639b4b368b03f083b7ae7e7a61d0723a318d32d950e2fb1ddd9c0ef942be806519c6bac47b0f62f70fb9f578d2caa35ceaefaa235006128b
SSDEEP 24576:cDE+So9Jxq7oEcXTCKzyzuVx49x+7GXazqUJxXVOUkq4mAfFYTj3e:cHpSd
TLSH
T19415CC197EF9F7570F8E8A1990360E4E9594AD4692802C38C35AE3FC2B2DF1B4DDE215
MD5 SHA1 SHA512 SSDEEP TLSH

Helium-bin/0.15.5.1/Locales/am_FEMININE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/am_MASCULINE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/am_NEUTER.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/ar.pak

SHA256 4308c4c471a83d365b18175eb6529c33fd7759966da0acad510b2e599593ec8d
MD5 5a0432740be50f360f4b7b8bc7d8d54e
SHA1 87561f5d1cd8420b5a64cf4260898f56864de02c
SHA512 e718b6237bb52899e205dd9bdc94fc2367055e55179fe3b0cdcc164a3eb62b6636762c775ab5533b46eeaedf83955a70653a38aaa394196ce0bc1c036642b83b
SSDEEP 12288:qLW6GzVweXTDC/G+65Owj3qTccQjqkXuS0lOEvFXlJ:/Vm
TLSH
T14A2579E21F2984720B56DE0FD1E23668E872BD23DB4BFC3124934A2156D7513E78E639
MD5 SHA1 SHA512 SSDEEP TLSH

Helium-bin/0.15.5.1/Locales/ar_FEMININE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/ar_MASCULINE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/ar_NEUTER.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/bg.pak

SHA256 20ef325ef858b02113de62b6ed5c180401522a46f24419eaef63e9cd41c6308e
MD5 834173a8e70721e84c80c464caffe213
SHA1 4fdd7b3b8d67104ce058b529fed75dd239c81543
SHA512 8848c12477bfcf5fb0944f43e42e5eca8bb9480edfeadd345b0f333742ccf259c268af835e9c9ed8217ad758e6ddc9528190d4a5bc1a263e51454ebabbd7f014
SSDEEP 24576:Tc8r1GDOWobugkzQkECiUPVb6nxLTHmu+3p1KDUZVDetMrDou2Vfar1sZrld/vId:g8r1GDOWobucDUPVb6nxLTHmH3pkUZV3
TLSH
T1E72525A15B9A68DF0101F41F98087E093CEB94FE3FE7879241652DBD39E10B487BA64D
MD5 SHA1 SHA512 SSDEEP TLSH

Helium-bin/0.15.5.1/Locales/bg_FEMININE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/bg_MASCULINE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/bg_NEUTER.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/bn.pak

SHA256 7c0ec45ffd224142a73386c0b96dcd0834901b2996974b85c85a4af8bc0bdb01
MD5 7aa9058dda27b6ebc845cfe03b64ab49
SHA1 2e34df66343d23226a574ca5813bac9977aec796
SHA512 19d99fe336290a1980a1d618cdd91917a3064cd833ba50bafb6b565792b805d3028c9da8bc88c0c8bf10cce7de131c641a4e4935e40db8f9883e001655d3f394
SSDEEP 3072:SnE0UebND7OuYQAnTIs4wAM5Jil+n8u3TyQCYFnU82qqJvj3mxKIGTJyx0O+4Bbk:K3bNDaWSIdwAKJil+nuBTJ2t+4Bb+6a
TLSH
T1F355EF209C6E81B2A8C5CDC9434C6370C123AE979B65F74DDC17A25938ADC3C8DADDB9
MD5 SHA1 SHA512 SSDEEP TLSH

Helium-bin/0.15.5.1/Locales/bn_FEMININE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/bn_MASCULINE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/bn_NEUTER.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/ca.pak

SHA256 7645b3cfe6a63a8c1b9de49e7bfcf7e98a3efa63c1e794f492aa8f15aa5677e5
MD5 c36e0ab5fa14129abc7ee1076d0117c7
SHA1 1a62001b2ecbd547f2a7ebf9c4401af489ec7687
SHA512 625c74d2531f77f85d1116995e6737e169294b53c61d22c5a62420b55e4a0ed592374cb9b4bf79fa9ad916b16079c6a488567f79eefe34e724aac0ab0d8671de
SSDEEP 12288:4WUgL6jt0K7Xl/yEewCpUObWMKbVrmj1YC0b8SSp3pZAnEWfNnw8KYk+RrEejwNY:r2jq/9NebDbMP6v5/Vfj
TLSH
T1C4D4D9238BC83B7744D2330FFB46C267A09CA9847A16D254F4AE1B1622CCADCD777695
MD5 SHA1 SHA512 SSDEEP TLSH

Helium-bin/0.15.5.1/Locales/ca_FEMININE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/ca_MASCULINE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/ca_NEUTER.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/cs.pak

SHA256 d460be5ac4477c9232432560f4fa668b6a943fbb1fd578318a38f7b20a668ac3
MD5 b0e7d88d5284c5aed7695281fba56301
SHA1 fd62f4a74bab3f2c66464761fe17800b0894f89f
SHA512 f25e3b7b98ca317f20dd419896df5849e8a4a90ed7279c4c6396da5a0f0fca674f328d6e8e7f8b76a524e505df74d99a882215aa411834ffdc3ab458496dc709
SSDEEP 6144:8NbtE05t6zU+P2TafWRIRuRTzZ4jlAjJgr+h8gXJSBLG8QRs0:8N5CU+P2TaxQdzCXr+h8gXJSG
TLSH
T129D4391FEFA26422584001497FBE4128BD5E87140B6EE5AB3C9E9C91267277ECFF8D14
MD5 SHA1 SHA512 SSDEEP TLSH

Helium-bin/0.15.5.1/Locales/cs_FEMININE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/cs_MASCULINE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/cs_NEUTER.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/da.pak

SHA256 fa20c21d332a4cb481c8431a395e2637cb7f5be2a91b3606e279aac5c3dd7bd8
MD5 e086212b7c434829d46d90dd328edb4d
SHA1 a68e004ba138cf8e60cd8282b090ff825501f71b
SHA512 0bd4a17edb7af92a9fff22c0489c82b295155e098bfceb24e1841dea98ba1b609fce06a5a78dbce8e8b260fbba17e377797a3540fd4fdfebe910c444933d8099
SSDEEP 6144:MfOgFMMcGzViIY9IK7anxtSGOViGyA2Ed9TtfAwDqJwmpV0RmFN0SABtKthFDQfv:Mf3MMc80ysSAzDXn
TLSH
T1EAC44A4BDC9C732FD9A90669F2128DA7D76D483CC688260F64DC953A09CBD6093BE1C7
MD5 SHA1 SHA512 SSDEEP TLSH

Helium-bin/0.15.5.1/Locales/da_FEMININE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/da_MASCULINE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/da_NEUTER.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/de.pak

SHA256 c815c32b54cfab55a53b9931b1f5226501ccd8a7504fc3243c5f774f8b4ebd00
MD5 dac7793dc6f6462ca954f44d35840388
SHA1 f2cdbbcb913cc5d17a0c2f565374b8c94a08628e
SHA512 accaa23f47984cfe6bfeb0e3d65146c0b88de3c4d9ba6ac5be964b332b90bb925516fa190b328793f17708e8b6062ebec31ccb805548275372022714d2fc7114
SSDEEP 6144:nE2NnpNEStz8imcHw92d8Hizh/NmmgH2upLASJklof79sTrNcNpqS+m7NTM/fC+:n7b9E2d8Hizh/zgH2yD9sTCZMfC+
TLSH
T17AD40707ADDB621FC68273657706CCB77729E26FC346322784E8D12B614B5B283AD436
MD5 SHA1 SHA512 SSDEEP TLSH

Helium-bin/0.15.5.1/Locales/de_FEMININE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/de_MASCULINE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/de_NEUTER.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/el.pak

SHA256 411c8c15d08bcd1732b8a05290cd6abe4c1e1d7013cbabc79109ff0dc41a76ac
MD5 5e41ea78374c0339c8e2bf16d5dd6512
SHA1 58290ac4aadd92e8b6eb05d2f7ab9e4afd1bf015
SHA512 d5148deefc7bb50225f164de70c6bf7989652211545e4b8eed53a88a0d60c57b62f2993f17535cfb65d40b9bbfce6491da412edab49b71b2f1bad2991d5bbfd6
SSDEEP 24576:ppLbcrhWgx5DgZMZpTw/LUlh/h9akg9gOaz2mSLgLn0CheCxKezjRHvRdIVoC2Jb:pZ4rhWgx5DgZMZpTw/LUlh/h9akg99aD
TLSH
T1A735D0EFB4542DEE8085950785D8F07C27C66D6CE749CBD86229CB60BDF80719A22D1F
MD5 SHA1 SHA512 SSDEEP TLSH

Helium-bin/0.15.5.1/Locales/el_FEMININE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/el_MASCULINE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/el_NEUTER.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/en-GB.pak

SHA256 f4d1159e136f1009799bc1be2a97a5ddaf96353db833ba4538601964ee27b94b
MD5 5a4d82f17c5b2ee59cb8b494a2886113
SHA1 02ed28ae2d0a3286a034601477490ce73696e207
SHA512 a4e330f76d48498c3c1b710833f8a1719db8b69fef9ebb7df6f57a75d976e388255d0f7079c71d410e31d519ed6e94cb9f836630bd2430931b23b82d3b3f755d
SSDEEP 6144:bhEZRhiu4oY80Y6JGbH3Xbr74EsGfREk8Qwn1Mf9YWTZGfaYvxJ5m9YRd0:F6T4lHZAD3Xbr7qMmWTZc0h
TLSH
T1E9B41B1FF7841266059311A3BB0EA6A2FB26D06CA35116663CBC801C33B6765D37F6E7
MD5 SHA1 SHA512 SSDEEP TLSH

Helium-bin/0.15.5.1/Locales/en-GB_FEMININE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/en-GB_MASCULINE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/en-GB_NEUTER.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/en-US.pak

SHA256 e8168271810168396775d0730cf02f795b6b094c290b1f8ec2d02badce1832d5
MD5 4471bff7cbda6273ef6333650a680e3e
SHA1 f51c83fde1c5ab12a957e9e964c01d6d59a8b6f9
SHA512 f94883a6624b9860d0ec919a9a9ef0d01f23836cbd9f5ea362a7baca1c18127c986b5e6313884cd7f73dd83713757a0c46c7800536e4bdf19b4e983cd9d00872
SSDEEP 6144:7R6pbVzmmxuqgcQ9F/GOS1HjtRKStMf92WXj5faYL/6kuw8TN/hYw/:7ibVbAVcQ9F/8MMWXjfJJw/
TLSH
T1A1B41A1FF7441226059312637F0E95A2FB36D06DA39112563CAC812C33B7B6AD37B6E6
MD5 SHA1 SHA512 SSDEEP TLSH

Helium-bin/0.15.5.1/Locales/en-US_FEMININE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/en-US_MASCULINE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/en-US_NEUTER.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/es-419.pak

SHA256 1c9ea6b71a3e3c4b8c652912d0ff37f05565c7ed02314972fb248139f86b40ed
MD5 3311f5ee5a3898877bf44b3105fec9a4
SHA1 3950d4f3fd67a7d7ade8d9ccd3153f5f8d36d991
SHA512 2d3250659e4ff0a5e274b4be9887189d245c63aab774c17429404db16cf3ac423b456f0d9fefde5f41bbc3387085cb3cbd9f3cd145c56880f46dda1debc59910
SSDEEP 6144:4RQRdzn+AMoZ5YAuoZjVKwAJPYgPPG9m6d:p7V/AJLqd
TLSH
T1D9D40A27AAC81F5310E3A349B743C757E4A49545B408C29BE8EE876522CCF8CD97BED1
MD5 SHA1 SHA512 SSDEEP TLSH

Helium-bin/0.15.5.1/Locales/es-419_FEMININE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/es-419_MASCULINE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/es-419_NEUTER.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/es.pak

SHA256 2bf2acef14d241de3d38c6f3aed0f65d2358506531af0b8223faa07371142788
MD5 f410e7d04d547d124e692ca58dd7c5b1
SHA1 8fd727c0838ec0a975d704f12b23dc31c5502781
SHA512 3c3484d3b797e9072400411125cb97efa23b92260c01c71564dc17983559eda9819eab58304483c07a899e782b3872fb56690c8f4f8138b81863da2bbc3de75f
SSDEEP 6144:7ajGScrTEUtRyRyeL5u4gc7+dqjhLyhrc8jum4TDsPgQa705k8+6PZP/R:78GS+1Tguu1LyVc8ju3QYQLZ
TLSH
T17AD4F726AACC0B6350E39349F747C753E4A49949B408C25BE8EFC66611C8F8CD97BED1
MD5 SHA1 SHA512 SSDEEP TLSH

Helium-bin/0.15.5.1/Locales/es_FEMININE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/es_MASCULINE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/es_NEUTER.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/et.pak

SHA256 f998fa7dc9d38be5502113024936d9a34b7982aab732249bf260b5b2b58bafb5
MD5 ecb50c1d5a1d3a947523fd7ef35f6c49
SHA1 e2ec0fd54973acd877751c783634f60b63d44c0c
SHA512 3c81c45c5197e755813f1e3debf946e5234ffd1de9ff2efdd944eb040123dd894c96340d51f1c0a13c1c916a170884e95c4797cfdbf89ae52cdc69860858a1c0
SSDEEP 6144:sjIrLp3IgamG3tPtz9FRed+RpvyO0qnFac/ntgyALmvKMCyYaLEsrvSegY3aCQV3:LXp4fmGnz9FRjplnFacCKvFe
TLSH
T10DC44C07A27D7317142012FAE637A923DC9ED7D8B0000D967C9A4A1971FEF8C39B6B65
MD5 SHA1 SHA512 SSDEEP TLSH

Helium-bin/0.15.5.1/Locales/et_FEMININE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/et_MASCULINE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/et_NEUTER.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/fa.pak

SHA256 2144a1014c8a479b0cbac5eee57274da3c884dc696ebbfcaa42929bc8d011023
MD5 6baf64abd37f2420c97240f692df7388
SHA1 acb006dfd859ef901da6d9d18868d2b54b8418ba
SHA512 456027b0f0d509df250b2edd4af430f5ad1d051055f16cd4eb75df09b40bc76f349c5760c46df28ad292b90a30b7d145c3ea64a2f7aa5777f37b8f8a2f4364ca
SSDEEP 24576:OLoX8q35TuyqoX+ssmarzmZJLgVRFXcRwa62oP4uorJVEOIKmVWTREkEgiU91uBb:Ooy
TLSH
T19315B1956AAC9AB26746C90341E33834C773EF12D34DFD40ACB1076609A5B139B5FA3B
MD5 SHA1 SHA512 SSDEEP TLSH

Helium-bin/0.15.5.1/Locales/fa_FEMININE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/fa_MASCULINE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/fa_NEUTER.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/fi.pak

SHA256 e895b06bf718c885c57b0672fb00200b40c1fd3e5bb86af21dd60a330eb35b2d
MD5 563d4ec81ff913b6c0a2994113d3a039
SHA1 b7dd57e0aab567e8aef7d5a841941e5b3843f666
SHA512 5a44c6ed3dd61aa950c34df4875e591fb4604afaf8bcd274dc83368a0ebf956737edac552abf3029d0b4bbe71898dd8a29cc01606ccd81268e23c502c1e023cf
SSDEEP 6144:RhtBZj4R204190e+Fyv8S/wOHmSDpYg+UcCYRdOEmH+lLT73KmAHB2wDaE2w5nwS:RnX0R20419IFW8SfeLKmA4wS98
TLSH
T1D8C46E525215C32237C4829F79B0903AF2E5E79CCC284D96F847C7D946EA9887E7236F
MD5 SHA1 SHA512 SSDEEP TLSH

Helium-bin/0.15.5.1/Locales/fi_FEMININE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/fi_MASCULINE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/fi_NEUTER.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/fil.pak

SHA256 d0845744d2f6230789d3d2433461c743bae9fd7e397241d7386faa4f5cb2325c
MD5 f1cb1fc6a317925742d38a64a18119a3
SHA1 4b2f0e43b9ccf86d75bc4d3726829a406c24cfc0
SHA512 53fb9504db6bd7b676b877e359f7d109dfeb0eb4a6e89ef8d874c69870aa58dd6585ea67a882ae41661492bf116694d6fdaf6f7ede1e1e6b3c437e8fa0f12886
SSDEEP 6144:CwI5NbSdR3/nCJnILhDQPW3kIVY9HUp3MHw51oULAA5O+M:CP38Tk
TLSH
T1ACD4D71667402749DBC352EA5365A82FA6E564B83F816C6E0FFF26973BE3CD4D230142
MD5 SHA1 SHA512 SSDEEP TLSH

Helium-bin/0.15.5.1/Locales/fil_FEMININE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/fil_MASCULINE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/fil_NEUTER.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/fr.pak

SHA256 b007c435190bd384ae4cf7f7f5d0d787fced25f809db4f9430e3ef13d208817a
MD5 ea66fad52a02922429d475a5f622ef84
SHA1 841f83518358b212152f9e8aa1386330e907d208
SHA512 c393ba38c3f0d4ea6e12cbb6b7ecc242081984b1438c0df4d65aa37e46ea0fcb525ae139ff7cf37203e3374c6b4959360ea5cbe1b03845460c623e214da5f889
SSDEEP 12288:WaiG6lZLpnBfo4+mdXrnxgQn6Qua6gVG81mXNc1Q/LNaTJYnYt8jwywy+L7hCXtn:Wao5VBzKn
TLSH
T124E4F76FAED431C719C21277FB17C6A3D934824CF215D340D89E4296129A8ECD3AF6E9
MD5 SHA1 SHA512 SSDEEP TLSH

Helium-bin/0.15.5.1/Locales/fr_FEMININE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/fr_MASCULINE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/fr_NEUTER.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/gu.pak

SHA256 b4cac3679c60577158ab1e59067dbb5229c04d323d40c8940f12c6cbb0b2d5a5
MD5 10e7a6d1391cffd0c74d74d842f2f9c8
SHA1 cf0cdf475283a58eff40d5e9120fcca9355760d8
SHA512 8fe7774a2d4e40c2e2d41a277780a1b556bab05123f357607a75d079dec71b70471466d13f57b92e71d4bb405e9ba760eb729b594c53251c0bd78f2c61a5e395
SSDEEP 6144:iPTywRZgHfrIqacT/Gcq5G9FyfusX9t10sLY:iPTjCfkqac6H5G9FyWst4sLY
TLSH
T1824528D1D3B9F07119DA9F7E819E512086695303D67E230051CEEE898801DDF3EEEA9B
MD5 SHA1 SHA512 SSDEEP TLSH

Helium-bin/0.15.5.1/Locales/gu_FEMININE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/gu_MASCULINE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/gu_NEUTER.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/he.pak

SHA256 5a99527d490f7d5b1dfa7fd07d20b041e804437034a42b49959cde6a3c3ffdf2
MD5 d156edea8148ab5d193aa512d0d23ca9
SHA1 6de25a39f5a69e8197d2ac528043bc97f059bd3b
SHA512 724f598878121bc1ccedc9a49fac6d05652bbff58515ea2c069a49f06b8aacf79e5de3219ce6d0b48bcb877093f2ec29256f6627fbb37636e6190f5e81212e27
SSDEEP 12288:FbTgHh+BYgVTfqYYHu8rMdXpJWkrC+6irWBXRI6Ta5pO05XumPfKY82DYU7jZ4gt:Fvg3C
TLSH
T1A105BBC4B2E59225513169C39FA9FA285FF3CAF52CA23512CB18526CAC774F0BE530B5
MD5 SHA1 SHA512 SSDEEP TLSH

Helium-bin/0.15.5.1/Locales/he_FEMININE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/he_MASCULINE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/he_NEUTER.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/hi.pak

SHA256 2b5698b93edb58448556e809b9e21758bd397f70fbc266205df92e924841b05c
MD5 2579f75f3b6fadb2317978774d54053f
SHA1 7d9996499e503714983cf86f102820d3ec51fbac
SHA512 339b97bb74eddb424b9870d44063576aecb8ccc1c7def74b3e43691c14940301eceb05f9e467693a37c852ff0e52f1f67db23c778954b05526e8c03eacc44722
SSDEEP 3072:rB+OsmgdN2EKfzXHZuflR3H5C3TL5/Zl8tZ1dlKYp6/N6sJtDqEpZ5HAduK1qHwf:rB+OsrzKfzXcflR3H5IekLsZrH
TLSH
T14755050CEBBEF3B55DEC3C9A32890D37C59D3674A3E5521348D5B3DB9844CB8146A2A2
MD5 SHA1 SHA512 SSDEEP TLSH

Helium-bin/0.15.5.1/Locales/hi_FEMININE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/hi_MASCULINE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/hi_NEUTER.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/hr.pak

SHA256 d1037525316fac6e670e865ac228e0b7bc49111706810fe4fa6782bec5f134bf
MD5 7bf8efed5a2f28a3e49837ca44ef2574
SHA1 af9afe1f250749ec13472dd24d8e22689bc24f10
SHA512 bad2916fcc05d7e240263cef439c27be9a46bec0e66ca1f13e768bb15bda216a3202e9f8693cccb3634e4253c4d11c375f22e7f1569acc6af2311de245a86e61
SSDEEP 6144:PmGBcuihwlPmIdVib9FAQ7zgQ6IDPX5iWFcgor:PDqulP9ib9FAALvFUr
TLSH
T10DD42B7EBDF257060897A24BEFAB435479BE08DCE16587B7784E522E0003F4C6BB8159
MD5 SHA1 SHA512 SSDEEP TLSH

Helium-bin/0.15.5.1/Locales/hr_FEMININE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/hr_MASCULINE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/hr_NEUTER.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/hu.pak

SHA256 d4666ffc53a428fa18b326435224938fd802c7b04f0d34a09f620a1de30430ae
MD5 953eabc5d1624b12be2be1825c9af34e
SHA1 bbb1f4b21297f0fc81482c082452685ebd4b9d63
SHA512 593de0d4ffe3ace88ebef2324a066256d19d12e9123d6f78f937879b7f89b2da09e254256643dad06bee13d3b235b927c96a8a79b7e473ac6da75f3616fc9fd5
SSDEEP 6144:zxo5TOaNUgk6y7EpR2uzcCnTNBrxGXlH2W+9hhAzypjuEe85qKZVZ49x85Js7o1I:2gaNUsW0Aye85qE2CqNPvh
TLSH
T1B3E45C7B93769046BCA8179B78643F65952E481B9B3B21FB3883846D30A178D0DD3C9F
MD5 SHA1 SHA512 SSDEEP TLSH

Helium-bin/0.15.5.1/Locales/hu_FEMININE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/hu_MASCULINE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/hu_NEUTER.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/id.pak

SHA256 da47e9811ab309e2938021b208f2e644abe634fe561ae97ff25f2dbc1ec0275e
MD5 f0d75466a01aac6dc33eb746fe195b86
SHA1 8e26b39bc4db04958dae7a49909de030cd2cc8ac
SHA512 94791778e9a64c00a0668e6c86e4c421a1c6c7410739f927cb3bb951bb4b33d97e1f80f1c1f3b332fa031c842d279273938882d4b81a62e311b150d585e30a67
SSDEEP 6144:y1809cJpvRnk109T5mR7bGCgzEfftTFjlFTm4SaM2gDEthBULfmmHTVyHT:y1809qZnUpRPQuTFjlFTmZaQ54T
TLSH
T1B5C40A572ECD300D494402DAF2DEA91F7CCE233BAF05676E4E348F7015A6768672AB94
MD5 SHA1 SHA512 SSDEEP TLSH

Helium-bin/0.15.5.1/Locales/id_FEMININE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/id_MASCULINE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/id_NEUTER.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/it.pak

SHA256 97b8981cb713883d2b610fb1bea8c2e40ad4436f28f64cf14006b3dd492ae42c
MD5 d745f2c6e64632379488d7c4536eabd7
SHA1 69d4f32dd5b7f1f3206fbf6aff925856801ec97a
SHA512 2c146eb526ba05762cd6260acc823117211723d310241715c1c1d8800591503222a8bd12fd5e0fd04936936f6243b6306c6d5e426bf627c923002bb2894b86ae
SSDEEP 6144:GeNMpO+S+w+WMjuzJqYDpo4enSbmCfEs61atoBf5jhOf6KQcrxqpzJUj9f3wOKR9:G1pA+w+Fz8bmRdeR8Gw
TLSH
T19AD42C3B95D621121987635AE512F095F6BEFCCCFA41721C899A431C22CFE84F2BDA47
MD5 SHA1 SHA512 SSDEEP TLSH

Helium-bin/0.15.5.1/Locales/it_FEMININE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/it_MASCULINE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/it_NEUTER.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/ja.pak

SHA256 4992a0bdc09794238853c3f4522d9276b13b6f1c3a9dbe229f39ffd864b7f09b
MD5 4202587399221d0d99e6ec5240384fdd
SHA1 696d5e2eb354aec9a08e6506fb286b2096f24274
SHA512 f4e7741fd3c6bb70f7c5e0cac710243fab6bfe2372e1553dc75cb15ed8f02faa8bcb970d46e9236fd0f03d5f05a34c3437ece4a0a3bdd8b10b9b9eb1bee82e92
SSDEEP 6144:dV6SWzoGzg0dIyHKNOLLZH6ATbr2ztOEHyNVT:dVezoGprHK0LZaA6zt9HyP
TLSH
T171F4507CE3C969369D6152A32C4E36E17106AC9BFCA23A3A043DD074BD707CEE515AB4
MD5 SHA1 SHA512 SSDEEP TLSH

Helium-bin/0.15.5.1/Locales/ja_FEMININE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/ja_MASCULINE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/ja_NEUTER.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/kn.pak

SHA256 e74d25a5c726ed5a1acc0ea9dc0724df3d198e533e9792e551a81632c0355f11
MD5 91d1dad512c6be0a029aa61789dd76e4
SHA1 45592280d1fea57ffec9999c0936bf657c16c561
SHA512 3259a21bb2f774f754349bd3b40e55eb808115a76fa3184499f60b94f8813449da277d8989e921abdeced1251625217beee66522920a66f1594220e0ce3bb0d2
SSDEEP 12288:Xi20zI6EXudSIrFAUm31ost723g4O1R0dCq:wzw0
TLSH
T10165BC18ADBA7D311BD5006B24EC643ECFF16BE28CA907C2F4DDD7802C66C6A91865DD
MD5 SHA1 SHA512 SSDEEP TLSH

Helium-bin/0.15.5.1/Locales/kn_FEMININE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/kn_MASCULINE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/kn_NEUTER.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/ko.pak

SHA256 dd962fbc929e8369246a21ca0a104601e6a1a6c84812f872c02f4d861e9fe57e
MD5 9fbf986c39956bab4c45ea0d2389ed5e
SHA1 a5e6e45ee134118c522d0df370161eff64075175
SHA512 aee5a370a3518bd9310c7283784e1aa9066a184f34471faf2ffdd48f3d292ee65ce637fcd632b670ee6d96e1265c43f391870942f316db413cb01a19cf59efaf
SSDEEP 12288:/Ooe4zjNrCLj/qkWM1WNiPszcbifYj4ZGRyrDKSIF16hdEvI/KtpSqGBy2LhwCoD:GoelL7+Ibg/r2fv3
TLSH
T19ED4F8F73CDB23C911938986AEF5FA198382D976F7530294EC44CE449E205C7458AABF
MD5 SHA1 SHA512 SSDEEP TLSH

Helium-bin/0.15.5.1/Locales/ko_FEMININE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/ko_MASCULINE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/ko_NEUTER.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/lt.pak

SHA256 39fabef9e02ee5e99774d1a874e60d4daaa2954768b0e5d972f1f4c8e960a1bf
MD5 685b70658077e02d07787ab9ac20c921
SHA1 dff28d70f3a83253a04d14178e6baaa26158b432
SHA512 8224b1cc2b52e923023d9fa51d7b27fc3c1d37703442da81f31d2cb33c209eb66a4b8bbff35b5e24972bdaa50409ff0c9b2b1fb10d0396caeea615a5c4e78faf
SSDEEP 6144:speIMn8e6kZgup6nxyeO8LSCgH2cRkBoBOKexOc8cdXfEB8jaL6ST2IM1:speIMV6kmupoxyeZAJmBSze/fe/6SY1
TLSH
T1A3E44C0465E3BEFB9A4067CD41A98EB4DABD50009767AC60EC7AC34BC437F4626B4E35
MD5 SHA1 SHA512 SSDEEP TLSH

Helium-bin/0.15.5.1/Locales/lt_FEMININE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/lt_MASCULINE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/lt_NEUTER.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/lv.pak

SHA256 0e3d599aff082b091c49797a528f5e66a0d1f12cf2582da8a40bf66b37b74783
MD5 8180c42c4adce66800999b5534c12ca4
SHA1 719670a947d7dc54bf41cbbde1d1fed7722c103d
SHA512 c089025f22d4826aee158df552aaf3ef493250159869bf1e1380e94a86072de3878cad5e317ce5d3cf6f79904712da9f081bf127e1a498b0801abc37fae86296
SSDEEP 12288:wccBB5Q4i+msBEJcl0R7LYnoSkCm8wdBc11X:eBBc+msBEJcl0R7LYnoXCm82B01X
TLSH
T196E43C599EC68FA64D914DCB733BD132A9CCCB40EE07E112ED7C8B35650B52422B9DE2
MD5 SHA1 SHA512 SSDEEP TLSH

Helium-bin/0.15.5.1/Locales/lv_FEMININE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/lv_MASCULINE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/lv_NEUTER.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/ml.pak

SHA256 01847b40b9374decd18dd36b1228b6c0dbf85788a05ad19fa916fb9f51972a02
MD5 5c1604dacd00d6b55705dd4bb38a9db0
SHA1 10e69d5e3d74291bc674eabfdc717037c26a2ad7
SHA512 e26f40a197119ece525a6360f09728ef426c381d45539aefabe7891c54a6e6c6ec336aeafd77e1961b6d32ec0f9e05bc9b4f158f31f30d590f92d425aa30fea1
SSDEEP 24576:yIoEvg/oZAuuxyYl+9y9XBkx/etAqYK3GjHPB2zXiF+v2Qit83GCUt3I:i
TLSH
T17D75AE5BA436CD3B0FD002167B4E2FABCD5B9F9140AF668B5869F2628C59F7D0C99031
MD5 SHA1 SHA512 SSDEEP TLSH

Helium-bin/0.15.5.1/Locales/ml_FEMININE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/ml_MASCULINE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/ml_NEUTER.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/mr.pak

SHA256 26340ebb53f2ed547490194651b50d6dba29fea88d88a3ae4f3b73a009577ae2
MD5 3d24aaa63272d2244cf388d7d9595eea
SHA1 fab4e31be1bdb48a1c21aa82eae948224dcc3fe9
SHA512 164ace4bf72e0a7b5bb2354894202a71237642826f269d5d89607720f474b37b7773a361a94c628711f0db56d375f4aab7f7d941faf995c16cb071c5a4db6b02
SSDEEP 6144:PzbQXbuxbqXBbL6B8miWUE4TQC6VEINPfZ:x2BbL3jUEINPfZ
TLSH
T1BA55C14DF77AF3685DACBC8E36540D3BD8FD21B1C3E9925648E1B3E74884CB401996A2
MD5 SHA1 SHA512 SSDEEP TLSH

Helium-bin/0.15.5.1/Locales/mr_FEMININE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/mr_MASCULINE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/mr_NEUTER.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/ms.pak

SHA256 e7f40d04be73cd2efff02807acc1d379c83bd1ea21c8b0005a2dd7d18c180ae0
MD5 7645807d8f03536acfe4f75547c61f6c
SHA1 a8fc2d9764f35fec174b1db4d56154d9809bfec9
SHA512 67edf99d993c29bf43b611719fbadb33350c8d2f49f20ceb995004fb41f43d7d521664373d7be9a64af831fc50b80175479ee7ad1eca8a04f4677b66e4453d1e
SSDEEP 6144:8n8Qeo3mb1n5doeUbmMfS80vHuqw9OO2XnqFduRFqVT:8nvpWb9oWM8Huqw9w70
TLSH
T1D2C4D8179EDD3119085443DAD2DEAA2B78DD3332B7056B2B4DB08FB0026E7E53315B9A
MD5 SHA1 SHA512 SSDEEP TLSH

Helium-bin/0.15.5.1/Locales/ms_FEMININE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/ms_MASCULINE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/ms_NEUTER.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/nb.pak

SHA256 0188eee2514deb0cf2a4c3d1beec4a2c1d4d78f220236dbde95c82e22bf7adc7
MD5 a33ae4c31b6102f52c651ab9ef536028
SHA1 6156849a1effa8bd7d72041b8cc6f01087e625ce
SHA512 05b39319803bb18f45de84dc1da9d3a7daf0503963f0e6074abdcde8056d6f941fe3e9d0f4fbbc8e2979104687787918ac3da735b885dc677d6ec9cfdeaf9f13
SSDEEP 12288:hPc//0DmQN2S/Op7fLFRyTkx77wlA+XRt:Nn2hzyTkxPyn
TLSH
T1AEC40883ED46B72AF69002A9F4198557977D982CCE98099B54CCD63F0DC7EF092BE1C2
MD5 SHA1 SHA512 SSDEEP TLSH

Helium-bin/0.15.5.1/Locales/nb_FEMININE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/nb_MASCULINE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/nb_NEUTER.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/nl.pak

SHA256 8b1b4cb6871a1cd7563944908dcae22da4f7c13e1e3e4b8e5d99dbdff5a4f78a
MD5 4cf6d2ecacc578af91b09b585f113b36
SHA1 518d1cf0ff1e4e7ca137d5117209bc0a50d132a2
SHA512 dfbbc116c6481be392a017ec979b63298095ff801c7e6800783c494a7ff284a3a620c525c844fbff7e40a95b3d599deceaceae6686ad7872dbef5c6d41e0e93c
SSDEEP 12288:7Q1q22nvFnrlfg2ISgsozaXgOBb8ZJTQzx/dlDq:1bBrlfg2ISgslxBb8ZJTQzx/dl2
TLSH
T141C4FA17AC5D153E58C0B349FA098BBBBB2ED32CC26CE67D94DDD1340443F6892AD58A
MD5 SHA1 SHA512 SSDEEP TLSH

Helium-bin/0.15.5.1/Locales/nl_FEMININE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/nl_MASCULINE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/nl_NEUTER.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/pl.pak

SHA256 109840d2be76c0dd3618f188643adf878422d95f7d3e2012e7491f182f46611f
MD5 3eadac9a9e7c4759b651e38287c9c689
SHA1 f304bc6dff0337ad1f9ad7141a53b2201bb961e0
SHA512 532b69067d81ea789c5ee50f8753ef9f371fdeb569ad7cc388883c6fcbb390d58a5d82f16769e4e1dad12f5e6115ba02c34a6edf6a877946f3a0abe97b884901
SSDEEP 12288:qCjo3sDlc8wAagfQfuzSJQbZliBbqhPfe3mnUuSMjmR5REgboH+:bjocYAFJSMsH
TLSH
T15BD46C0E4AE59A4F4CA008EAF6E70B7CBCDDCC08E508C35FA46F8526715719ECABD585
MD5 SHA1 SHA512 SSDEEP TLSH

Helium-bin/0.15.5.1/Locales/pl_FEMININE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/pl_MASCULINE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/pl_NEUTER.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/pt-BR.pak

SHA256 6589f04bc246e3cbeeb40b9611ae2a9555831c7e91f501d5af7ba7887c6435af
MD5 a7072230a06e7f06d0dc9a2e24533a4a
SHA1 88c232018f79c4f4c01815ee6befefd97441097a
SHA512 d4d5a236787fccc502a64edc4969017e0fb06acac9a8fb0869dbbb6b13f02a6286ccb3b79bc6b6ba2f153c63b2a8b55748e917d01f7a74f10032bf60018b702f
SSDEEP 6144:v3VdZqmO0gX/MpJajNBXBL/MRvBoaaCJ0yyzDrfhD:TiWvKzfB
TLSH
T1F6D41B2E6DCA136704225345B75FDB03E6C90A45FD0ACA87DCEF4B05A3C9E40DA37A66
MD5 SHA1 SHA512 SSDEEP TLSH

Helium-bin/0.15.5.1/Locales/pt-BR_FEMININE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/pt-BR_MASCULINE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/pt-BR_NEUTER.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/pt-PT.pak

SHA256 0e234dd71e6442163992dafebada1572ccef0edefc39cb89d65b13423c5f5439
MD5 76b5d7898c718c18b222c3da002cb15b
SHA1 3d89c27d2b0daf07c814c50992adb8f76362cf72
SHA512 977379e1586ceaab889a5ac1921564c1a993b090049866de533b2d72212d16bc2bb29059b3ffee0d34315153d3c1f4d7aa28791e818e7d7600511fa203e8afce
SSDEEP 6144:zJTK+7LMTFM0zuEnieJVJJxhnv6DpKhcf8bI0GKDN:zJTK+7aTCEvIEp
TLSH
T1AED4082D6EDA132305131346B70ADB03E6C85A55F809CA87D9EF4B4272CDF94D27BB62
MD5 SHA1 SHA512 SSDEEP TLSH

Helium-bin/0.15.5.1/Locales/pt-PT_FEMININE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/pt-PT_MASCULINE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/pt-PT_NEUTER.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/ro.pak

SHA256 0ab90618874d85a9feb7f755903333e911a873618f4804df06f530d71957a924
MD5 38adfbb73c867c8a6554960b757c7d6f
SHA1 e4db1188ac719893889144bbcccaff9dcf6068d1
SHA512 7b57c703dc965b79f3b97c16111e39c32618e4f81b3187dfded75ab525b1283fc23479961807af47fbc3974e3fd95e94057f8c740c8fb6774208f534d42ef0a5
SSDEEP 6144:mgSoGeFBM2L5uv/0TwMocxBeKVgC/lX3WAoGu1Onh+3to2lG0EQI4:7SoG52rZocxBxJ/NGK+7I4
TLSH
T160D43C2391C82A932E9112B6B73B24E3E48E545DF640D28D64DDC97910C9DDF863EECB
MD5 SHA1 SHA512 SSDEEP TLSH

Helium-bin/0.15.5.1/Locales/ro_FEMININE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/ro_MASCULINE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/ro_NEUTER.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/ru.pak

SHA256 a0226582293be7919aaf5d738c73f7c2257a6c14f2a7558332aee96e35f4265b
MD5 0b6d8cd4e3a5991d547c777b11a17bad
SHA1 fc0b6ec9dddca1b0921fe1657f34bfa11f309371
SHA512 6403d464d28ad7093f7f940383c33fffb5226c60a9dbe16c5e7295e70785a55f51c97e79d73e6f1dc8cb689067445e7f7db2bae5f4c4f781894a62f0ce56ac03
SSDEEP 12288:rT2l2ZyELfQL1M4YKNu1tBJ9OPeaEyEAzftEgN2PPkihEfTLD0VZsw/YHzO3j/dV:rRZyE9p5gXI9
TLSH
T193257661669E64DE1101F01BDD08BE0D7CEB45FE3FAAA31219A42D7F35F2024C67E61A
MD5 SHA1 SHA512 SSDEEP TLSH

Helium-bin/0.15.5.1/Locales/ru_FEMININE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/ru_MASCULINE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/ru_NEUTER.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/sk.pak

SHA256 a07615b5fb7277726a5d46bcee43f54d6a12a6f86692d06a9ef5db867f51b245
MD5 eae918260ca929588644a54dbd082246
SHA1 ff45d1ed37fa3adeb8193725bd1464137b529aae
SHA512 1a413800a0aa57c805604e935df814558f0978f00c30e989156c25d04cb813c44dc0521fdf67850743f8f190d371a4d65a7caa1f79b5aaeac8b8c021fe070bfa
SSDEEP 12288:Y0RrumHr8lR985cILLipfKKfnbcBnkTjsxt9su:Y0EUYRULEE/tGu
TLSH
T18BE45D3FDFE6181F8EC9010DEFAB7110F96E8A50864DB0A6940E364714E26EDCABCD55
MD5 SHA1 SHA512 SSDEEP TLSH

Helium-bin/0.15.5.1/Locales/sk_FEMININE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/sk_MASCULINE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/sk_NEUTER.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/sl.pak

SHA256 08ab44ee18573d86401159f240f338f09ffa0b814189ade5e7a3d04854a7dda3
MD5 2c1422f7f00a4d33655a99976651bcbe
SHA1 de5c284da7cea2036db9007e250a30f21a84a432
SHA512 cf3a9e1688ed2f620ab31dc39a0ae7cf9b5234f6fc779edc72578ee1ff4ff3061497e2a0ce1fdc31bb20b85b75fe09c3b7fb8a97b2188225e4e3cc9de5410d16
SSDEEP 12288:QLb/khXnc+9FZ1bkHjicB2+Epfx2/Ji/fzSUY:G/khM+9FZ1bijOfUi/fzSUY
TLSH
T1D6D42C3E7EA74A0F0C97B2CFFEA606107BDC084CD25596A2FC8E33695411A3827BD595
MD5 SHA1 SHA512 SSDEEP TLSH

Helium-bin/0.15.5.1/Locales/sl_FEMININE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/sl_MASCULINE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/sl_NEUTER.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/sr.pak

SHA256 c9e4e5bb554534d16557a6a58e225d3e03806836d5f6d9f840fd8e84511a40f9
MD5 891da581ab69c425722952fe43187e41
SHA1 51c32e2a5840f1fb2743faed5a32c5f12a16b176
SHA512 9e9861d33637dfe69cf6beed2052e8fb43823c4294fd8f2b55b0040f309950ca292155e8a4d4dde6476486f20fb49bbeac024ec46da9b87b060b2586ee4171c0
SSDEEP 12288:HTzA8Zc57zbFHmIMEdubCmi4AJtACxxdxc37PXZJ/k/G:HTz36A
TLSH
T1302536A19B9E64DB0901F41BD808BE493DAF41FE3FAB975211601DBD34E10B847BE25E
MD5 SHA1 SHA512 SSDEEP TLSH

Helium-bin/0.15.5.1/Locales/sr_FEMININE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/sr_MASCULINE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/sr_NEUTER.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/sv.pak

SHA256 9618ccd7a65f5c93c52c732a06fd88bbc556fe48b4d380be5ecebe43c60dad7c
MD5 12025126a776444dee27e0894f8323ec
SHA1 4813a1db39fe4bea4d36bc5346544d99c489f260
SHA512 38567b2e8245c0a458ea752c1b52b1fc69e604577325ad1147066729ee4cdb32ad0b481ddff1f388cd200ed7250e0a04ebf8c41d9143423b3186f77a0109ec6d
SSDEEP 6144:q/k3z2CqcFtDJcv8y3Gn1PRaE/elg0UvR5RtGGVsTmSO6y3gOZy2vb98:qUZqQbg+KL
TLSH
T1DDC41B078A20F526FAB2130EB509015B46EDD25CE3F2958D78DD883DAE8BD6845FF247
MD5 SHA1 SHA512 SSDEEP TLSH

Helium-bin/0.15.5.1/Locales/sv_FEMININE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/sv_MASCULINE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/sv_NEUTER.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/sw.pak

SHA256 13625b415f7f259c4fa2ecffedc4ed5ea99d4e616d303db801f31cf951897373
MD5 8078990d6d5f0be945699c66cdb9bb0f
SHA1 205fdaa58fb7d61c3a3c6b1128f6b9ceec4cf3eb
SHA512 aa3492f7b80fd484d50b47745354b15f586aafc41366266f84ff195c96e7df8e8d4cad317d82a7b183a4617168675d3f6723272160169eef3157b4657d77e6b6
SSDEEP 12288:EFMpm4ddkncqwclVd9WGI35dqUxHV5sduw8h42wQFSlKl/FG8fBuzid6Si8AgPj4:WUrdF+iCr
TLSH
T166D4C5638C71D01A5232618A03DDEF3317ECED5C692B1D936A46BF0B218F58C57ABE49
MD5 SHA1 SHA512 SSDEEP TLSH

Helium-bin/0.15.5.1/Locales/sw_FEMININE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/sw_MASCULINE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/sw_NEUTER.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/ta.pak

SHA256 4d12bcc6a575fc5b7403ea9f73956935baa3c1dee90d565bb33a3c322cf1e6dc
MD5 2b4fad08e44021cafa00ec88dfe19ced
SHA1 45791c54453a2678db548bd9067d3b54254f9be4
SHA512 50811553888efb917d657d9829fe29cfa9d99945433ef648d9eb3b0c1ed954690d2f8ee038eafb781b2db5253292c1dff4ed1cae7befb2e16cd1d7198392f4f6
SSDEEP 6144:qD9fgD9xsuyEj/n1O77lkoLgG9GjtR0tm1vYpiMylpO:ifgDUEj9mjgG5tm1vYpiMyi
TLSH
T10B652DCE923EEE890F93288F0319536912986555C07BE3A67C756E1298ECC5DCF3427E
MD5 SHA1 SHA512 SSDEEP TLSH

Helium-bin/0.15.5.1/Locales/ta_FEMININE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/ta_MASCULINE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/ta_NEUTER.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/te.pak

SHA256 6b8d15f1e568d09a1aea3c92f09f6f7d5a5fe859d716012d69c20e8478cf21c4
MD5 f6ccfadd069294dadeca29927ddfb5ee
SHA1 9777a19233034aa54c21ae795149d8da507bfbc4
SHA512 154875e314ecd58b73ff1dfea862d602d55b5249fcda3f7f1e86c0eb81728dacf610ddb8f6c18bc7bda6f622fe0b524f5dfc8207bcee652bfa5fbe86af8fe7c4
SSDEEP 12288:gSftDOR5/AjVhHgz6022p/Qu/Hx7sLIIkKO3p1FqAhqnvJMntljeRg5bxJDw3Pin:taNT
TLSH
T1FF55B2023A6AD310DAE70277752CF66C49781B8161D6732C1EAFA357EB87D7E0843636
MD5 SHA1 SHA512 SSDEEP TLSH

Helium-bin/0.15.5.1/Locales/te_FEMININE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/te_MASCULINE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/te_NEUTER.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/th.pak

SHA256 2c685dc8e170d599278c350a555b0463b7be3e49fbc5636860285a196aedea6b
MD5 cc19f15f814408e7a4481adeb6dd62e2
SHA1 5774592bb5f17c20c01fd7716c90a77649df12d7
SHA512 63d2fc96cad8e7a7b92981f31e012f24959f1d5360cc3b5f6343bc3c3d47c03b0d49213b3cec88f81502dbf17df45795d9d579a3500e3ad40220ab61dd15b3ad
SSDEEP 12288:CN0jldJYNN7aZYADz4769pqomCQskJUsXws5eXxpbDFzS6Sud2mKHDO3Yt4hiKcJ:co4j
TLSH
T1494559B37247DD9479441B5B262A7789672DAE693F73F8E00089215A73F071A8432EF3
MD5 SHA1 SHA512 SSDEEP TLSH

Helium-bin/0.15.5.1/Locales/th_FEMININE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/th_MASCULINE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/th_NEUTER.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/tr.pak

SHA256 50cf3e02b8b9d0059dcec89c2004a60dfe0b774361ddbdc6cc53d61f484fdc90
MD5 e0114c72b4ef16cd6225833e6b9cabc6
SHA1 88568e9098fa6e3861c0358f143babe0ec9c1df3
SHA512 8a2e196754adcde2f20e95034dc8412b4c36551e7e7c64d50b3c976a23300637ebafa11504487bfe57a13a061b2c5e16378fa3b68b874b76f5233cccff0457de
SSDEEP 6144:XsW2ZqhzIKBwiwOVQKpRkZxwDIxjB5eDHz6sgwhqlZF0oPBz5ajg6fgY4rKKT+ne:p5wiwQbDiDMHz6sgwhqlZF8f4JT+sb
TLSH
T1BDD4E9827CEF281C8BB9278FD6EA0666F49F0666F331E4469B198636674535303F760C
MD5 SHA1 SHA512 SSDEEP TLSH

Helium-bin/0.15.5.1/Locales/tr_FEMININE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/tr_MASCULINE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/tr_NEUTER.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/uk.pak

SHA256 61e782d582150d5f3466df1dcbba21ffaaf6332a6e23e32a1d0df4405323a9fe
MD5 587515093f3f412c45c53b4c7ab6981a
SHA1 52d86d3b61ee546c5d355cbdfeb810f4147fd900
SHA512 675e022eac21e7b01bd36446c1a018036597b241f9b8b547cb7b15ff6b190a50c1a5fdf31cbce56baa6b6b576fee36c2c6bb13d5ffcb9460b2f272cb35198032
SSDEEP 12288:+80P7ZpYyMiohJTe4wkeIZRel3VsSr+psnDYLdEuESDfS7tMWA6Qnt9GU6XLNiXa:+80P7ZaugU7
TLSH
T1313599A59BAD58DF0106F05BE84C7A0D7DA741FE7FA6471625A43DBF28F2024863C31A
MD5 SHA1 SHA512 SSDEEP TLSH

Helium-bin/0.15.5.1/Locales/uk_FEMININE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/uk_MASCULINE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/uk_NEUTER.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/ur.pak

SHA256 da6941140e00cac2a50197200ca9a1c88dad425e50b5581eaaed06e9e0988dd5
MD5 3643c44b715e2ab0870353b6c3e35a1d
SHA1 4549595f56b8d00a99412541bd019bb8714fff18
SHA512 4ea9bc67ffd7a08ba76d632d363194945529d44d98442d7ee429999048967c4be588c6b2847eeb6c75604e18db7a2b49735fedfd18ce1cc292e7fd259144bbe2
SSDEEP 12288:jMtGEAbr6Xm8PL8Pputdgytr68ythemfsF/+GKQYr5NjwadcJKwUreyco/9NjjFm:It7yfp4
TLSH
T18B15F0D2A6B896B35A21D92780E33C34CB335F13D34AF285E57146C54E9A0139F6DE3A
MD5 SHA1 SHA512 SSDEEP TLSH

Helium-bin/0.15.5.1/Locales/ur_FEMININE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/ur_MASCULINE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/ur_NEUTER.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/vi.pak

SHA256 2fd856e492301d6deb1b4fce85ca72356c77dd80965eaca6062de6cf1efc678a
MD5 eaee96c0fa647939573cbf245ee785f1
SHA1 aac057289e540cf7b6e1721cc72d63bf7d9e04fc
SHA512 564a652bed26fad7dea1993dff8fe6210e24b261ba951100768187324df9b81fd32a89eea40dfcbb014747cd498b5e6418fb7a8af33939a0b225f90357690af5
SSDEEP 12288:LJb+cK9ZEE9iXFpIfiV05VMC34Wu0o4mx1aroINqu3kegViWmOlqRRXN6sP:d+cKyXUdMK4hiK4gViDOlqRRXN6sP
TLSH
T177F4741616E1702280AD153EC5CE540D6FCAE42FF7C08FE56FE42974BA221A45F35AAF
MD5 SHA1 SHA512 SSDEEP TLSH

Helium-bin/0.15.5.1/Locales/vi_FEMININE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/vi_MASCULINE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/vi_NEUTER.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/zh-CN.pak

SHA256 22057e084c94e1a153fcb2b75ba714026745af9aa41eaf50902c02812667de2a
MD5 d9d83ef509672f32995770a0052a1cee
SHA1 7683a2995e0e13efe259a994dfefd3c2ba646d9b
SHA512 3022a0c47b94292612a6bb3890a63dbb315433e64c0c29342c4ccee3743797c203d82b358829a7618052cf663aa481a30b69c110649f662f3dfd669ac2c96213
SSDEEP 6144:sGnjt6FjFKpS6JYhnqW7j9brewXFDWUdZJHlv5UQ7w72KTtvfO55lY:7t4TRhqq9mwXFDnLHn57wlTpeo
TLSH
T197B48EAE10FDBDED008210EA272E613D78407A4BF6679F256E9148DC1F91F9D076BA07
MD5 SHA1 SHA512 SSDEEP TLSH

Helium-bin/0.15.5.1/Locales/zh-CN_FEMININE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/zh-CN_MASCULINE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/zh-CN_NEUTER.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/zh-TW.pak

SHA256 00b425d51c296c034ae39f660f35766eceae1334965a3535ead15d36caf3a224
MD5 44728c364f623cecc2509aaeab6878ec
SHA1 6ec52bd4e5bfb609b652b9f8840fd72928753749
SHA512 8dfececde23d429ac86eff0940681aa14728447a233f6fc4ef5f08de7976a7c96d5bf52647fbb2c9ffcea14a4644b9e17cf8cf72e672780e99b56fa7a7b7fdf0
SSDEEP 6144:378eM8m2UqIDKwVa2JzWcOWu8cvKzZ7DYlDn7Ky2mm1O7tVmTr:F1m2ZUWJAcvKVumYQ
TLSH
T1CBB46CBB0CFBDBEF0901A489B7CE523AB88B7C6DCD772631FC4818981D65A545A72047
MD5 SHA1 SHA512 SSDEEP TLSH

Helium-bin/0.15.5.1/Locales/zh-TW_FEMININE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/zh-TW_MASCULINE.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/Locales/zh-TW_NEUTER.pak

SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Helium-bin/0.15.5.1/VisualElements/Logo.png

SHA256 6783262d7a61d1fde8ba2aee4499b567c2b1daabe644114a0eed5269585b2b49
MD5 4a3736fab4a99ee930a417b2b2bba896
SHA1 829acefa0a669c941b571f4d04fc749953a3832a
SHA512 2acf3d1db1cbf5172a8558ed21d5d6a19d6102056d9fae79287555483727f8a048f935382e677419158f111faa5c7676eccad9e2d1bb4fffc7a530e2fa35081a
SSDEEP 384:iFyom4U7jfE/EvJmynkZZmys6Nf3IslJ9eqbIe+5QvCSUD1f+5EDU3PxLn6y:iF3v/6jvys6V3Is0qEe+5gCS61qLxLnV
TLSH
T169C2D04A9128C77AE4EE8CF10C4D7120E9BE343DA8F104E86E9D5C61DA6F11E5F8572B
MD5 SHA1 SHA512 SSDEEP TLSH

Helium-bin/0.15.5.1/VisualElements/SmallLogo.png

SHA256 2a0729eadf2d91a4a13b8ee3f5326663cb6b4254a3449f852fc8f0742f67b7e8
MD5 d679ea047e27c00ec642fbf76a103857
SHA1 2adafa094d674f1a06aaae1db39c3a26cb7ec7c1
SHA512 eb5a0bfd0435597287a5d61bdd13cb43ee10857f832531f9f9e9432af1b66df03c57f625a1b94c7642e684cdbc2852b16a8b679cf5f28ed4a09381172d0b5175
SSDEEP 192:YqiMJLGY3XVcO8JlVKvBw+ocvC9IkMpo4pRkFgWDT7IilGXJLrO:Yqhn3alVKZwB9HMpo43kJDT7flWy
TLSH
T1B312CF1EE60D0632E8119FBB3A407454BF32B5E5396E0C699D19583A23E5FB200D0BFB
MD5 SHA1 SHA512 SSDEEP TLSH

Helium-bin/0.15.5.1/WinSparkle.dll

IMPHASH f89598089f5cb46708055d2f2020e78f
SHA256 adb1dac4dd8fb3891e6ee04b7fc938b28f3c27acdf31837afc590830dd5dfa95
MD5 5f41cdcda500f027dab33fc9766d6085
SHA1 83585125461edc371d1b07090c975ddf53cd7c43
SHA512 d02ab4a13e27211fd02e14790e6a05f766752377916cc8d1be5565fe5db366f0e6699cbf4dadba1716d8e1d0c72a9bfc2ba64292359fbd09e2a20537db1586ee
SSDEEP 12288:b8RmnDXtBZTAvv/IImyRhlCJLtXhRZrCb6ecUBOSkHc9wOaanQ1xh+s70Wc9eP9u:b8KBZcvfLqLxjZrCb6bZYaaGCe4eT8+e
TLSH
T113258E06B6D542EDC06AC43487578173EB61BC9B1B25B5EF02D0F2692F77BE05A7A320
MD5 SHA1 SHA512 SSDEEP TLSH

windows:10 windows x64 arch:x64

Digest

23:fd:19:79:0b:e8:4b:c7:a3:c8:0e:fc:11:d7:5a:dd:70:af:ab:17:c0:ec:00:f6:4e:bd:fb:98:d1:b8:ca:67

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=imput LLC,O=imput LLC,L=Sheridan,ST=Wyoming,C=US

Chains

Aug 15, 2026

CN=imput LLC,O=imput LLC,L=Sheridan,ST=Wyoming,C=US

CN=Microsoft ID Verified CS EOC CA 04,O=Microsoft Corporation,C=US

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Subject

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Serial Number

54:98:d2:d1:d4:5b:19:95:48:13:79:c8:11:c0:87:99

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 16, 2020 - Apr 16, 2045

Subject

CN=imput LLC,O=imput LLC,L=Sheridan,ST=Wyoming,C=US

Serial Number

33:00:04:52:5a:0d:fb:3f:01:c3:02:5d:b8:00:00:00:04:52:5a

Issuer

CN=Microsoft ID Verified CS EOC CA 04,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 14, 2026 - Aug 17, 2026

Subject

CN=Microsoft ID Verified CS EOC CA 04,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:17:27:45:09:0b:8b:87:af:c6:00:00:00:00:00:17

Issuer

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Mar 26, 2026 - Mar 26, 2031

Subject

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:07:87:a3:34:a3:7b:a5:8e:1c:00:00:00:00:00:07

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Apr 1, 2021 - Apr 1, 2036

Subject

CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 19, 2020 - Nov 19, 2035

Subject

CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft America Operations+OU=nShield TSS ESN:7800-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:57:24:d3:95:e0:a2:e9:c9:31:00:00:00:00:00:57

Issuer

CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 23, 2025 - Oct 22, 2026

Minor OS version

0

Major OS version

10

Entry point

337264

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

WinSparkle.dll.pdb

kernel32

AcquireSRWLockExclusive CloseHandle CompareStringW CreateDirectoryW CreateEventW CreateFileW CreateThread DeleteCriticalSection EncodePointer EnterCriticalSection EnumSystemLocalesW ExitProcess ExitThread FindClose FindFirstFileExW FindNextFileW FindResourceA FlsAlloc FlsFree FlsGetValue FlsSetValue FlushFileBuffers FormatMessageA FreeEnvironmentStringsW FreeLibrary FreeLibraryAndExitThread GetACP GetCPInfo GetCommandLineA GetCommandLineW GetConsoleMode GetConsoleOutputCP GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetDateFormatW GetEnvironmentStringsW GetFileSizeEx GetFileType GetLastError GetLocaleInfoW GetModuleFileNameW GetModuleHandleA GetModuleHandleExW GetModuleHandleW GetOEMCP GetProcAddress GetProcessHeap GetStartupInfoW GetStdHandle GetStringTypeW GetSystemInfo GetSystemTimeAsFileTime GetTempPathW GetThreadLocale GetTimeFormatW GetTimeZoneInformation GetUserDefaultLCID HeapAlloc HeapFree HeapQueryInformation HeapReAlloc HeapSize InitOnceExecuteOnce InitializeCriticalSection InitializeCriticalSectionAndSpinCount InitializeCriticalSectionEx InitializeSListHead InterlockedFlushSList IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage IsValidLocale LCMapStringW LeaveCriticalSection LoadLibraryExA LoadLibraryExW LoadResource LocalFree LockResource MultiByteToWideChar OutputDebugStringA QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReadConsoleW ReadFile ReleaseSRWLockExclusive ResumeThread RtlCaptureContext RtlLookupFunctionEntry RtlPcToFileHeader RtlUnwind RtlUnwindEx RtlVirtualUnwind SetEndOfFile SetEnvironmentVariableW SetEvent SetFilePointerEx SetLastError SetStdHandle SetUnhandledExceptionFilter SizeofResource Sleep SleepConditionVariableSRW TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue UnhandledExceptionFilter VerSetConditionMask VerifyVersionInfoW VirtualProtect VirtualQuery WaitForSingleObject WakeAllConditionVariable WideCharToMultiByte WriteConsoleW WriteFile

wininet

HttpQueryInfoA InternetCloseHandle InternetCrackUrlA InternetOpenUrlA InternetOpenW InternetQueryOptionA InternetReadFileExW InternetSetOptionW InternetSetStatusCallbackW

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

advapi32

RegCloseKey RegCreateKeyExA RegDeleteValueA RegOpenKeyExA RegQueryValueExW RegSetValueExW

crypt32

CryptStringToBinaryA

shell32

SHFileOperationW ShellExecuteExW

rpcrt4

RpcStringFreeW UuidCreate UuidToStringW

Name

.text

Size

744KB

Virtual Size

743KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

147KB

Virtual Size

147KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

8KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

24KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

9B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

512B

Virtual Size

500B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

26KB

Virtual Size

26KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Helium-bin/0.15.5.1/chrome.dll

IMPHASH 516f37a311d919c5cf036aed4767159d
SHA256 078cfed9f456f9fc94321fabd159bc24b0b2b847440f38d33d9c8c27842ed4e4
MD5 0a4bbb5e53c7cbb27eea628d1633910e
SHA1 f152880e3af19b53df8afb48cbd216a23aa6c1a1
SHA512 0e622e5add171c11780c9da950f65bed5af3deb2148ddb67b2c36de8a868a00cdee6a8e1f170a04301a13eae703a89413c5f2eaba58a672df5e7b9e3aeaf6c56
SSDEEP 1572864:k0iLGdxIQX2uzSGtvfpwF8MNRbul/e+3PyIC4DBhnr31kW+eb2TpOgyUSB4LVbJW:LpwxNRiUeZDCyecTsxFxf8
TLSH
T162D87B03E29A41D9C05DD1799B5A9633FEB1BC484B24A2DF0B5057922FB6FE42B3D720
MD5 SHA1 SHA512 SSDEEP TLSH

windows:10 windows x64 arch:x64

Digest

1b:15:1e:fd:51:77:81:21:54:d6:17:78:98:c5:0d:e3:a9:9e:83:ea:bf:a1:c6:29:35:f6:32:1d:f1:47:6a:90

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=imput LLC,O=imput LLC,L=Sheridan,ST=Wyoming,C=US

Chains

Aug 15, 2026

CN=imput LLC,O=imput LLC,L=Sheridan,ST=Wyoming,C=US

CN=Microsoft ID Verified CS EOC CA 04,O=Microsoft Corporation,C=US

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Subject

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Serial Number

54:98:d2:d1:d4:5b:19:95:48:13:79:c8:11:c0:87:99

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 16, 2020 - Apr 16, 2045

Subject

CN=imput LLC,O=imput LLC,L=Sheridan,ST=Wyoming,C=US

Serial Number

33:00:04:52:5a:0d:fb:3f:01:c3:02:5d:b8:00:00:00:04:52:5a

Issuer

CN=Microsoft ID Verified CS EOC CA 04,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 14, 2026 - Aug 17, 2026

Subject

CN=Microsoft ID Verified CS EOC CA 04,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:17:27:45:09:0b:8b:87:af:c6:00:00:00:00:00:17

Issuer

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Mar 26, 2026 - Mar 26, 2031

Subject

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:07:87:a3:34:a3:7b:a5:8e:1c:00:00:00:00:00:07

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Apr 1, 2021 - Apr 1, 2036

Subject

CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 19, 2020 - Nov 19, 2035

Subject

CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft America Operations+OU=nShield TSS ESN:7800-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:57:24:d3:95:e0:a2:e9:c9:31:00:00:00:00:00:57

Issuer

CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 23, 2025 - Oct 22, 2026

Minor OS version

0

Major OS version

10

Entry point

90929856

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

chrome.dll.pdb

winmm

midiInAddBuffer midiInClose midiInGetDevCapsW midiInGetNumDevs midiInOpen midiInPrepareHeader midiInReset midiInStart midiInUnprepareHeader midiOutClose midiOutGetDevCapsW midiOutGetNumDevs midiOutLongMsg midiOutOpen midiOutPrepareHeader midiOutReset midiOutShortMsg midiOutUnprepareHeader timeBeginPeriod timeEndPeriod timeGetTime waveInGetNumDevs waveOutClose waveOutGetNumDevs waveOutOpen waveOutPause waveOutPrepareHeader waveOutReset waveOutRestart waveOutUnprepareHeader waveOutWrite

kernel32

AcquireSRWLockExclusive AcquireSRWLockShared AddVectoredExceptionHandler AllocConsole AreFileApisANSI AssignProcessToJobObject AttachConsole CancelIo CancelIoEx CheckRemoteDebuggerPresent ClearCommError CloseHandle CompareStringOrdinal CompareStringW ConnectNamedPipe CopyFileW CreateDirectoryW CreateEventA CreateEventW CreateFileA CreateFileMappingA CreateFileMappingW CreateFileW CreateHardLinkW CreateIoCompletionPort CreateJobObjectW CreateMutexW CreateNamedPipeW CreateProcessW CreateRemoteThread CreateSemaphoreA CreateSemaphoreW CreateThread CreateToolhelp32Snapshot CreateWaitableTimerExW DebugBreak DecodePointer DeleteCriticalSection DeleteFileA DeleteFileW DeleteProcThreadAttributeList DeviceIoControl DiscardVirtualMemory DuplicateHandle EncodePointer EnterCriticalSection EnumResourceNamesW EnumSystemLocalesEx EnumSystemLocalesW EscapeCommFunction ExitProcess ExitThread ExpandEnvironmentStringsW FileTimeToSystemTime FindClose FindFirstFileExA FindFirstFileExW FindFirstFileW FindFirstVolumeW FindNextFileA FindNextFileW FindNextVolumeW FindResourceW FindVolumeClose FlsAlloc FlsFree FlsGetValue FlsSetValue FlushFileBuffers FlushViewOfFile FormatMessageA FormatMessageW FreeConsole FreeEnvironmentStringsW FreeLibrary FreeLibraryAndExitThread GetACP GetActiveProcessorCount GetCPInfo GetCommModemStatus GetCommState GetCommandLineA GetCommandLineW GetComputerNameExW GetComputerNameW GetConsoleDisplayMode GetConsoleMode GetConsoleOutputCP GetCurrencyFormatEx GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentProcessorNumber GetCurrentThread GetCurrentThreadId GetDateFormatEx GetDateFormatW GetDiskFreeSpaceA GetDiskFreeSpaceExW GetDiskFreeSpaceW GetDriveTypeW GetDynamicTimeZoneInformation GetEnvironmentStringsW GetEnvironmentVariableA GetEnvironmentVariableW GetExitCodeProcess GetFileAttributesA GetFileAttributesExW GetFileAttributesW GetFileInformationByHandle GetFileInformationByHandleEx GetFileSize GetFileSizeEx GetFileTime GetFileType GetFinalPathNameByHandleW GetFirmwareType GetFullPathNameA GetFullPathNameW GetGeoInfoW GetHandleInformation GetLastError GetLocalTime GetLocaleInfoEx GetLocaleInfoW GetLogicalProcessorInformation GetLogicalProcessorInformationEx GetLongPathNameW GetMaximumProcessorCount GetMaximumProcessorGroupCount GetModuleFileNameA GetModuleFileNameW GetModuleHandleA GetModuleHandleExA GetModuleHandleExW GetModuleHandleW GetNamedPipeClientProcessId GetNamedPipeServerProcessId GetNativeSystemInfo GetNumberFormatEx GetOEMCP GetOverlappedResult GetPackagePathByFullName GetPackagesByPackageFamily GetPriorityClass GetPrivateProfileStringW GetProcAddress GetProcessAffinityMask GetProcessHandleCount GetProcessHeap GetProcessHeaps GetProcessId GetProcessInformation GetProcessMitigationPolicy GetProcessTimes GetProductInfo GetQueuedCompletionStatus GetStartupInfoW GetStdHandle GetStringTypeW GetSystemDirectoryA GetSystemDirectoryW GetSystemInfo GetSystemPowerStatus GetSystemTime GetSystemTimeAsFileTime GetSystemTimePreciseAsFileTime GetTempFileNameA GetTempPathA GetTempPathW GetThreadContext GetThreadGroupAffinity GetThreadId GetThreadPreferredUILanguages GetThreadPriority GetThreadPriorityBoost GetThreadTimes GetTickCount GetTimeFormatEx GetTimeFormatW GetTimeZoneInformation GetUserDefaultLCID GetUserDefaultLangID GetUserDefaultLocaleName GetUserDefaultUILanguage GetUserGeoID GetVersionExW GetVolumeInformationW GetVolumeNameForVolumeMountPointW GetVolumePathNameW GetVolumePathNamesForVolumeNameW GetWindowsDirectoryA GetWindowsDirectoryW GlobalAlloc GlobalFree GlobalLock GlobalMemoryStatusEx GlobalSize GlobalUnlock HeapAlloc HeapCompact HeapCreate HeapDestroy HeapFree HeapLock HeapReAlloc HeapSetInformation HeapSize HeapUnlock HeapValidate HeapWalk InitOnceBeginInitialize InitOnceComplete InitOnceExecuteOnce InitializeConditionVariable InitializeCriticalSection InitializeCriticalSectionAndSpinCount InitializeCriticalSectionEx InitializeProcThreadAttributeList InitializeSListHead InitializeSRWLock InterlockedFlushSList InterlockedPushEntrySList IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage IsValidLocale IsWow64Process K32EnumProcessModules K32GetMappedFileNameW K32GetModuleFileNameExW K32GetModuleInformation K32GetPerformanceInfo K32GetProcessMemoryInfo K32QueryWorkingSetEx LCIDToLocaleName LCMapStringW LeaveCriticalSection LoadLibraryA LoadLibraryExA LoadLibraryExW LoadLibraryW LoadResource LocalAlloc LocalFree LocaleNameToLCID LockFile LockFileEx LockResource MapViewOfFile MapViewOfFileEx Module32FirstW Module32NextW MoveFileExW MoveFileW MultiByteToWideChar OpenProcess OpenThread OutputDebugStringA OutputDebugStringW PeekNamedPipe PostQueuedCompletionStatus PowerClearRequest PowerCreateRequest PowerSetRequest PrefetchVirtualMemory Process32FirstW Process32NextW ProcessIdToSessionId PurgeComm QueryDosDeviceW QueryFullProcessImageNameA QueryFullProcessImageNameW QueryInformationJobObject QueryPerformanceCounter QueryPerformanceFrequency QueryProcessCycleTime QueryThreadCycleTime RaiseException ReadConsoleW ReadDirectoryChangesW ReadFile ReadProcessMemory RegisterWaitForSingleObject ReleaseMutex ReleaseSRWLockExclusive ReleaseSRWLockShared ReleaseSemaphore RemoveDirectoryW ReplaceFileW ResetEvent ResolveLocaleName ResumeThread RtlAddFunctionTable RtlCaptureContext RtlCaptureStackBackTrace RtlDeleteFunctionTable RtlLookupFunctionEntry RtlPcToFileHeader RtlUnwind RtlUnwindEx RtlVirtualUnwind SetCommState SetCommTimeouts SetConsoleCtrlHandler SetConsoleTextAttribute SetCurrentDirectoryW SetDefaultDllDirectories SetDllDirectoryW SetEndOfFile SetEnvironmentVariableA SetEnvironmentVariableW SetErrorMode SetEvent SetFileAttributesW SetFileCompletionNotificationModes SetFileInformationByHandle SetFilePointer SetFilePointerEx SetFileTime SetHandleInformation SetInformationJobObject SetLastError SetPriorityClass SetProcessInformation SetProcessMitigationPolicy SetStdHandle SetThreadAffinityMask SetThreadInformation SetThreadPriority SetThreadPriorityBoost SetUnhandledExceptionFilter SetWaitableTimer SizeofResource Sleep SleepConditionVariableSRW SuspendThread SwitchToThread SystemTimeToFileTime SystemTimeToTzSpecificLocalTime TerminateJobObject TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue TryAcquireSRWLockExclusive TryEnterCriticalSection TzSpecificLocalTimeToSystemTime UnhandledExceptionFilter UnlockFile UnlockFileEx UnmapViewOfFile UnregisterWait UnregisterWaitEx UpdateProcThreadAttribute VerSetConditionMask VerifyVersionInfoW VirtualAlloc VirtualAllocEx VirtualFree VirtualFreeEx VirtualLock VirtualProtect VirtualProtectEx VirtualQuery VirtualUnlock WTSGetActiveConsoleSessionId WaitForMultipleObjects WaitForSingleObject WaitForSingleObjectEx WaitNamedPipeW WakeAllConditionVariable WakeConditionVariable WideCharToMultiByte WriteConsoleW WriteFile WriteProcessMemory lstrcmpW lstrcmpiA

ws2_32

FreeAddrInfoExW GetAddrInfoExCancel GetAddrInfoExW WSACloseEvent WSACreateEvent WSADuplicateSocketW WSAEnumNameSpaceProvidersW WSAEnumNetworkEvents WSAEnumProtocolsW WSAEventSelect WSAGetLastError WSAGetOverlappedResult WSAIoctl WSALookupServiceBeginW WSALookupServiceEnd WSALookupServiceNextW WSARecv WSARecvFrom WSAResetEvent WSASend WSASendTo WSASetEvent WSASetServiceW WSASocketW WSAStartup WSAWaitForMultipleEvents WSCEnumProtocols WSCGetProviderPath accept bind closesocket connect freeaddrinfo getaddrinfo gethostname getpeername getsockname getsockopt htonl htons inet_ntop ioctlsocket listen ntohl ntohs recv recvfrom send sendto setsockopt shutdown socket

crypt32

CertAddCertificateContextToStore CertAddEncodedCertificateToStore CertAddStoreToCollection CertCloseStore CertCompareCertificateName CertControlStore CertEnumCertificatesInStore CertFindCertificateInStore CertFindChainInStore CertFreeCertificateContext CertGetCertificateContextProperty CertGetEnhancedKeyUsage CertGetIntendedKeyUsage CertGetNameStringW CertOpenStore CertOpenSystemStoreW CertVerifyTimeValidity CryptAcquireCertificatePrivateKey CryptMsgClose CryptMsgGetParam CryptProtectData CryptProtectMemory CryptQueryObject CryptUnprotectData CryptUnprotectMemory CryptVerifyCertificateSignatureEx

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

ntdll

LdrLockLoaderLock LdrUnlockLoaderLock NtClose NtCreateKey NtDeleteKey NtQueryInformationProcess NtQueryInformationThread NtQueryObject NtQuerySystemInformation NtSetValueKey RtlFormatCurrentUserKeyPath RtlFreeUnicodeString RtlGetLastNtStatus RtlInitUnicodeString

chrome_elf

ClearReportsBetween_ExportThunk CrashForException_ExportThunk DeleteCrashReport_ExportThunk DumpProcessWithoutCrash GetCrashReports_ExportThunk GetInstallDetailsPayload GetProductInfo_ExportThunk GetUploadConsent_ExportThunk GetUserDataDirectoryThunk InjectDumpForHungInput_ExportThunk IsExtensionPointDisableSet IsTemporaryUserDataDirectoryCreatedForHeadless IsThirdPartyInitialized RequestSingleCrashUpload_ExportThunk SetUploadConsentFromUser_ExportThunk SetUploadConsent_ExportThunk

dwrite

DWriteCreateFactory

Name

.text

Size

236.8MB

Virtual Size

236.8MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

30.6MB

Virtual Size

30.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1.7MB

Virtual Size

4.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

6.7MB

Virtual Size

6.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.eh_fram

Size

512B

Virtual Size

120B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rodata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.tls

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

CPADinfo

Size

512B

Virtual Size

56B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

LZMADEC

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

500B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

malloc_h

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

prot

Size

512B

Virtual Size

179B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

126KB

Virtual Size

125KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1.8MB

Virtual Size

1.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Helium-bin/0.15.5.1/chrome_100_percent.pak

SHA256 470b47baf3af33a305cb3addec2285d11051a3b8612a671c39e7e70b98516e90
MD5 404daa6570fb6d6652000e2d222b4f47
SHA1 3a4455708b47444cbdf6849036a346ae9e8e2f8c
SHA512 b16fcae0797595d976fd1f459627116ac6340daf74ca20a305133dd20da69ee6dd0f46756e53bd2f7351f48e8e19fdfcc2086762d7a8ff1451f864cfe0dfce31
SSDEEP 12288:ojI3H1fJS0ujzgsz5B0GDJQrnKs8SNP+QSsEHeilSTe+gnWzmxWYJblIfCrsFS:T3VBlu7zEEmPLVbTe+gnWzmxJb4xS
TLSH
T184E412E77374AC7DEE5B1377826614B0FC371A280A91160A1BDBF8796913B4898D93C3
MD5 SHA1 SHA512 SSDEEP TLSH

Helium-bin/0.15.5.1/chrome_200_percent.pak

SHA256 8379aca9b34dec81886d7d56746ebcba4946e879cfcb352e4b952a7e1257dc49
MD5 7d4261f5369f4b35516fe433ab9d043f
SHA1 cc11bd5e228565f95e4e095f71715724b6c60cfb
SHA512 92e091de8bf7e7a23571203a0de74e6a2c651a1050de9c6304d3e9dc498e07239ffb60146a710e7db27884dfed52415f77ccec2fa8ed2d925c29cdc72a6cfbe3
SSDEEP 24576:u3zBD9WIOzLmmibkFR8+mZiqr8BWhQumecRvQt9wb2IQwuSXAPC7n4:u3GIO3mNbkFRJmQ+8khQRl1QPf8uSXAz
TLSH
T11C4512D3D3B0AC7EDD520BB7939B10F4FD7500271A72190F0B26AD7A39166C4EA95A83
MD5 SHA1 SHA512 SSDEEP TLSH

Helium-bin/0.15.5.1/chrome_elf.dll

IMPHASH 234068d241d6ddd16bae12501ab54990
SHA256 a2170eada4b7bd1fa314b7bb9c11749afe73f16d290a0d38357b9e5ed0fa09d4
MD5 d7c9cc03d45fdf270c56b45fba8821b0
SHA1 ae648a47db6fe1a01c6c82a850432687a7b7fa42
SHA512 f7e4d2ffbed4a9a88d221c7d69b2da14068dcc0bd03b3603bd411d7c4f0c5f806011cd9b565285f4e7bf65be7804628a8bfbd90211ba10ed1771ffd5a7ca8881
SSDEEP 49152:z8HYbj1CTM10qg/AiCg6sZYnbjJDyNvJSKwx7Gi5WIAyYp:l31CTFqOWbT5p5rHs
TLSH
T1E1C57C13F2DA01E8C05DD1788B5B9232EA61BC854B35B6DF0A90B6561F7AFE4673E310
MD5 SHA1 SHA512 SSDEEP TLSH

windows:10 windows x64 arch:x64

Digest

5f:5c:44:0f:29:34:33:e5:33:0a:27:c1:a8:35:39:a4:37:53:6e:4a:c3:2b:a4:fb:cb:73:4b:27:7a:25:0b:3b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=imput LLC,O=imput LLC,L=Sheridan,ST=Wyoming,C=US

Chains

Aug 15, 2026

CN=imput LLC,O=imput LLC,L=Sheridan,ST=Wyoming,C=US

CN=Microsoft ID Verified CS EOC CA 04,O=Microsoft Corporation,C=US

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Subject

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Serial Number

54:98:d2:d1:d4:5b:19:95:48:13:79:c8:11:c0:87:99

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 16, 2020 - Apr 16, 2045

Subject

CN=imput LLC,O=imput LLC,L=Sheridan,ST=Wyoming,C=US

Serial Number

33:00:04:52:5a:0d:fb:3f:01:c3:02:5d:b8:00:00:00:04:52:5a

Issuer

CN=Microsoft ID Verified CS EOC CA 04,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 14, 2026 - Aug 17, 2026

Subject

CN=Microsoft ID Verified CS EOC CA 04,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:17:27:45:09:0b:8b:87:af:c6:00:00:00:00:00:17

Issuer

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Mar 26, 2026 - Mar 26, 2031

Subject

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:07:87:a3:34:a3:7b:a5:8e:1c:00:00:00:00:00:07

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Apr 1, 2021 - Apr 1, 2036

Subject

CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 19, 2020 - Nov 19, 2035

Subject

CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft America Operations+OU=nShield TSS ESN:7800-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:57:24:d3:95:e0:a2:e9:c9:31:00:00:00:00:00:57

Issuer

CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 23, 2025 - Oct 22, 2026

Minor OS version

0

Major OS version

10

Entry point

1356720

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

chrome_elf.dll.pdb

kernel32

AcquireSRWLockExclusive AddVectoredExceptionHandler CloseHandle CompareStringW CreateDirectoryW CreateEventW CreateFileW CreateIoCompletionPort CreateMutexW CreateNamedPipeW CreateProcessW CreateRemoteThread CreateThread DeleteCriticalSection DeleteFileW DuplicateHandle EncodePointer EnterCriticalSection EnumSystemLocalesW ExitProcess ExpandEnvironmentStringsW FileTimeToSystemTime FindClose FindFirstFileExW FindNextFileW FlsAlloc FlsFree FlsGetValue FlsSetValue FlushFileBuffers FormatMessageA FormatMessageW FreeEnvironmentStringsW FreeLibrary GetACP GetCPInfo GetCommandLineA GetCommandLineW GetComputerNameExW GetConsoleMode GetConsoleOutputCP GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetDateFormatW GetDriveTypeW GetEnvironmentStringsW GetEnvironmentVariableW GetFileAttributesW GetFileInformationByHandle GetFileSizeEx GetFileTime GetFileType GetFullPathNameW GetLastError GetLocalTime GetLocaleInfoW GetLogicalProcessorInformation GetLongPathNameW GetModuleFileNameW GetModuleHandleA GetModuleHandleExW GetModuleHandleW GetNativeSystemInfo GetOEMCP GetProcAddress GetProcessHeap GetProcessId GetProductInfo GetQueuedCompletionStatus GetStartupInfoW GetStdHandle GetStringTypeW GetSystemDirectoryW GetSystemInfo GetSystemTimeAsFileTime GetTempPathW GetThreadContext GetThreadId GetThreadPriority GetThreadPriorityBoost GetTickCount GetTimeFormatW GetTimeZoneInformation GetUserDefaultLCID GetUserDefaultLangID GetVersionExW GetWindowsDirectoryW GlobalMemoryStatusEx InitOnceExecuteOnce InitializeConditionVariable InitializeCriticalSection InitializeCriticalSectionAndSpinCount InitializeCriticalSectionEx InitializeSListHead InitializeSRWLock InterlockedFlushSList IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage IsValidLocale IsWow64Process K32GetMappedFileNameW K32GetModuleInformation LCMapStringW LeaveCriticalSection LoadLibraryExA LoadLibraryExW LoadLibraryW LocalFree LockFileEx MultiByteToWideChar OpenProcess OutputDebugStringA OutputDebugStringW PeekNamedPipe PostQueuedCompletionStatus QueryPerformanceCounter QueryPerformanceFrequency QueryThreadCycleTime RaiseException ReadConsoleW ReadFile ReadProcessMemory ReleaseMutex ReleaseSRWLockExclusive RemoveDirectoryW RemoveVectoredExceptionHandler ResetEvent ResumeThread RtlCaptureContext RtlCaptureStackBackTrace RtlLookupFunctionEntry RtlPcToFileHeader RtlUnwind RtlUnwindEx RtlVirtualUnwind SetConsoleCtrlHandler SetEndOfFile SetEnvironmentVariableW SetEvent SetFilePointerEx SetInformationJobObject SetLastError SetNamedPipeHandleState SetProcessMitigationPolicy SetStdHandle SetThreadInformation SetThreadPriority SetThreadPriorityBoost SetUnhandledExceptionFilter Sleep SleepConditionVariableSRW SleepEx SuspendThread SwitchToThread SystemTimeToTzSpecificLocalTime TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue TransactNamedPipe TryAcquireSRWLockExclusive UnhandledExceptionFilter UnlockFileEx UnmapViewOfFile UnregisterWaitEx VerSetConditionMask VerifyVersionInfoW VirtualAlloc VirtualFree VirtualProtect VirtualProtectEx VirtualQuery WaitForMultipleObjects WaitForSingleObject WaitNamedPipeW WakeAllConditionVariable WakeConditionVariable WerRegisterRuntimeExceptionModule WideCharToMultiByte WriteConsoleW WriteFile WriteProcessMemory lstrcmpiA

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

ntdll

NtClose NtCreateKey NtDeleteKey NtOpenKeyEx NtQueryValueKey NtSetValueKey RtlFormatCurrentUserKeyPath RtlFreeUnicodeString RtlInitUnicodeString

Name

.text

Size

2.1MB

Virtual Size

2.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

298KB

Virtual Size

298KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

72KB

Virtual Size

204KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

67KB

Virtual Size

66KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.crthunk

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

1024B

Virtual Size

705B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

CPADinfo

Size

512B

Virtual Size

56B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

512B

Virtual Size

500B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

malloc_h

Size

512B

Virtual Size

265B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Helium-bin/0.15.5.1/chrome_pwa_launcher.exe

IMPHASH b9dcc26c154bb9b9deaed2bdab5ad489
SHA256 3c0a7301c6a9b0e09cad482aa92fa49bb357d5b6066ba3a6d146a956dc58cde8
MD5 504babf781b39a00354ee204eebcbc6c
SHA1 b3e8885986a1de88318b8c944f5b47c379e95351
SHA512 5b9290f71cff9cbf923b966e969a52428d68657ef50c61c8d7daccbb2fcb1f3571acd5469af0dd49ac65a2bbd743bd12ebef24c7abb4e866e6f12a9406ac4f5f
SSDEEP 49152:OB4v3eujRTKeUcQCBWIQvFDh0OwbSIzJEgcdWqe/:73LdxJPcmEel/
TLSH
T137D52923B196D0D4C00DD074CF165BB2A6607C69CBE5A7DF06D87E217B36AD07ABA318
MD5 SHA1 SHA512 SSDEEP TLSH

windows:10 windows x64 arch:x64

Digest

c9:93:14:e4:86:d3:0e:46:76:45:cc:40:f9:d2:70:d6:37:57:65:b4:43:78:7c:c9:17:a4:69:80:50:ff:9c:4c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=imput LLC,O=imput LLC,L=Sheridan,ST=Wyoming,C=US

Chains

Aug 15, 2026

CN=imput LLC,O=imput LLC,L=Sheridan,ST=Wyoming,C=US

CN=Microsoft ID Verified CS EOC CA 04,O=Microsoft Corporation,C=US

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Subject

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Serial Number

54:98:d2:d1:d4:5b:19:95:48:13:79:c8:11:c0:87:99

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 16, 2020 - Apr 16, 2045

Subject

CN=imput LLC,O=imput LLC,L=Sheridan,ST=Wyoming,C=US

Serial Number

33:00:04:52:5a:0d:fb:3f:01:c3:02:5d:b8:00:00:00:04:52:5a

Issuer

CN=Microsoft ID Verified CS EOC CA 04,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 14, 2026 - Aug 17, 2026

Subject

CN=Microsoft ID Verified CS EOC CA 04,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:17:27:45:09:0b:8b:87:af:c6:00:00:00:00:00:17

Issuer

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Mar 26, 2026 - Mar 26, 2031

Subject

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:07:87:a3:34:a3:7b:a5:8e:1c:00:00:00:00:00:07

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Apr 1, 2021 - Apr 1, 2036

Subject

CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 19, 2020 - Nov 19, 2035

Subject

CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft America Operations+OU=nShield TSS ESN:A500-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:56:7e:8f:9d:58:08:8e:e9:60:00:00:00:00:00:56

Issuer

CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 23, 2025 - Oct 22, 2026

Minor OS version

0

Major OS version

10

Entry point

1263840

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

chrome_pwa_launcher.exe.pdb

advapi32

CreateProcessAsUserW RegCloseKey RegOpenKeyExW RegQueryValueExW

dbghelp

SymCleanup SymFromAddr SymGetLineFromAddr64 SymGetModuleInfo64 SymGetSearchPathW SymInitialize SymSetOptions SymSetSearchPathW

kernel32

AcquireSRWLockExclusive AssignProcessToJobObject CloseHandle CompareStringW CreateEventW CreateFileW CreateIoCompletionPort CreateProcessW CreateThread DeleteCriticalSection DeleteFileW DeleteProcThreadAttributeList DuplicateHandle EncodePointer EnterCriticalSection EnumSystemLocalesW ExitProcess ExpandEnvironmentStringsW FindClose FindFirstFileExW FindNextFileW FlsAlloc FlsFree FlsGetValue FlsSetValue FlushFileBuffers FormatMessageW FreeEnvironmentStringsW FreeLibrary GetACP GetCPInfo GetCommandLineA GetCommandLineW GetConsoleMode GetConsoleOutputCP GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetDateFormatW GetDriveTypeW GetEnvironmentStringsW GetEnvironmentVariableW GetExitCodeProcess GetFileAttributesW GetFileInformationByHandle GetFileSizeEx GetFileType GetFullPathNameW GetLastError GetLocalTime GetLocaleInfoW GetLogicalProcessorInformation GetModuleFileNameW GetModuleHandleA GetModuleHandleExW GetModuleHandleW GetNativeSystemInfo GetOEMCP GetProcAddress GetProcessHeap GetProcessId GetProductInfo GetQueuedCompletionStatus GetStartupInfoW GetStdHandle GetStringTypeW GetSystemDirectoryW GetSystemInfo GetSystemTimeAsFileTime GetTempPathW GetThreadContext GetThreadId GetThreadPriority GetThreadPriorityBoost GetTickCount GetTimeFormatW GetTimeZoneInformation GetUserDefaultLCID GetVersionExW GetWindowsDirectoryW GlobalMemoryStatusEx InitOnceExecuteOnce InitializeConditionVariable InitializeCriticalSection InitializeCriticalSectionAndSpinCount InitializeCriticalSectionEx InitializeProcThreadAttributeList InitializeSListHead InitializeSRWLock IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage IsValidLocale IsWow64Process K32GetModuleInformation LCMapStringW LeaveCriticalSection LoadLibraryExA LoadLibraryExW LoadLibraryW LocalFree MultiByteToWideChar OutputDebugStringA PostQueuedCompletionStatus QueryPerformanceCounter QueryPerformanceFrequency QueryThreadCycleTime RaiseException ReadConsoleW ReadFile ReleaseSRWLockExclusive ResetEvent ResumeThread RtlCaptureContext RtlCaptureStackBackTrace RtlLookupFunctionEntry RtlPcToFileHeader RtlUnwind RtlUnwindEx RtlVirtualUnwind SetEndOfFile SetEnvironmentVariableW SetEvent SetFilePointerEx SetHandleInformation SetInformationJobObject SetLastError SetStdHandle SetThreadInformation SetThreadPriority SetThreadPriorityBoost SetUnhandledExceptionFilter Sleep SleepConditionVariableSRW SuspendThread SwitchToThread TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue TryAcquireSRWLockExclusive UnhandledExceptionFilter UnmapViewOfFile UnregisterWaitEx UpdateProcThreadAttribute VirtualAlloc VirtualFree VirtualProtect VirtualQuery WaitForMultipleObjects WaitForSingleObject WakeAllConditionVariable WakeConditionVariable WideCharToMultiByte WriteConsoleW WriteFile

winmm

timeBeginPeriod timeEndPeriod timeGetTime

userenv

CreateEnvironmentBlock DestroyEnvironmentBlock

user32

AllowSetForegroundWindow CreateWindowExW DefWindowProcW DestroyWindow DispatchMessageW GetActiveWindow GetQueueStatus KillTimer MsgWaitForMultipleObjectsEx PeekMessageW PostMessageW PostQuitMessage RegisterClassExW SetTimer TranslateMessage UnregisterClassW

shell32

CommandLineToArgvW SHGetFolderPathW SHGetKnownFolderPath ShellExecuteExW

ole32

CoInitializeEx CoRegisterInitializeSpy CoRevokeInitializeSpy CoTaskMemFree CoUninitialize

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

api-ms-win-core-winrt-l1-1-0

RoInitialize RoUninitialize

Name

.text

Size

2.0MB

Virtual Size

2.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

279KB

Virtual Size

278KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

70KB

Virtual Size

197KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

62KB

Virtual Size

62KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

1024B

Virtual Size

705B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

LZMADEC

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

500B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

malloc_h

Size

512B

Virtual Size

265B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

266KB

Virtual Size

265KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Helium-bin/0.15.5.1/chrome_wer.dll

IMPHASH d90bc621eec78fa4d92169aa894c78cc
SHA256 ed97d0ab059d8e9ca8351fbb06a9fa15d6ff2d26cdcaa08fe72943e6f552ce85
MD5 00a343d9ceb2ce8240ae121950103c98
SHA1 1e65bd36f35f21baf933cbb51d8460f05d12daa7
SHA512 8e00e12e936a0911a20285118743051a7d69914dc0713a80b9ffccf027e6cfc090540e90fd8ae75a36dd98258b4e1913b844b94ae433f0cead397a7cd61336b3
SSDEEP 3072:KU10EZFpjpYbkOzrMeDEYNvhgeYnTVvC/8wZkSk0CzXh:F0EZDq7rMeDEsvuSU
TLSH
T10BC35A6B57A500BBE1B7863484A34E46F776B8520720AFFF03A4465A1F237D19E3DB21
MD5 SHA1 SHA512 SSDEEP TLSH

windows:10 windows x64 arch:x64

Digest

1d:8c:8c:68:e4:32:67:30:06:63:4b:74:8f:42:7f:8b:0a:4b:e3:4a:16:86:66:69:ae:b7:fc:1a:29:ba:5f:59

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=imput LLC,O=imput LLC,L=Sheridan,ST=Wyoming,C=US

Chains

Aug 15, 2026

CN=imput LLC,O=imput LLC,L=Sheridan,ST=Wyoming,C=US

CN=Microsoft ID Verified CS EOC CA 04,O=Microsoft Corporation,C=US

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Subject

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Serial Number

54:98:d2:d1:d4:5b:19:95:48:13:79:c8:11:c0:87:99

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 16, 2020 - Apr 16, 2045

Subject

CN=imput LLC,O=imput LLC,L=Sheridan,ST=Wyoming,C=US

Serial Number

33:00:04:52:5a:0d:fb:3f:01:c3:02:5d:b8:00:00:00:04:52:5a

Issuer

CN=Microsoft ID Verified CS EOC CA 04,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 14, 2026 - Aug 17, 2026

Subject

CN=Microsoft ID Verified CS EOC CA 04,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:17:27:45:09:0b:8b:87:af:c6:00:00:00:00:00:17

Issuer

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Mar 26, 2026 - Mar 26, 2031

Subject

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:07:87:a3:34:a3:7b:a5:8e:1c:00:00:00:00:00:07

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Apr 1, 2021 - Apr 1, 2036

Subject

CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 19, 2020 - Nov 19, 2035

Subject

CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft America Operations+OU=nShield TSS ESN:A500-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:56:7e:8f:9d:58:08:8e:e9:60:00:00:00:00:00:56

Issuer

CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 23, 2025 - Oct 22, 2026

Minor OS version

0

Major OS version

10

Entry point

5712

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

chrome_wer.dll.pdb

kernel32

CloseHandle CreateFileW DeleteCriticalSection DuplicateHandle EncodePointer EnterCriticalSection ExitProcess FindClose FindFirstFileExW FindNextFileW FlsAlloc FlsFree FlsGetValue FlsSetValue FlushFileBuffers FreeEnvironmentStringsW FreeLibrary GetACP GetCPInfo GetCommandLineA GetCommandLineW GetConsoleMode GetConsoleOutputCP GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetEnvironmentStringsW GetFileType GetLastError GetModuleFileNameW GetModuleHandleExW GetModuleHandleW GetOEMCP GetProcAddress GetProcessHeap GetStartupInfoW GetStdHandle GetStringTypeW GetSystemTimeAsFileTime GetThreadId HeapAlloc HeapFree HeapReAlloc HeapSize InitializeCriticalSectionAndSpinCount InitializeCriticalSectionEx InitializeSListHead InterlockedFlushSList IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage LCMapStringW LeaveCriticalSection LoadLibraryExW MultiByteToWideChar QueryPerformanceCounter RaiseException ReadProcessMemory RtlCaptureContext RtlLookupFunctionEntry RtlPcToFileHeader RtlUnwindEx RtlVirtualUnwind SetEvent SetFilePointerEx SetLastError SetStdHandle SetUnhandledExceptionFilter TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue UnhandledExceptionFilter VirtualProtect WaitForSingleObject WideCharToMultiByte WriteConsoleW WriteFile WriteProcessMemory

Name

.text

Size

56KB

Virtual Size

56KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

38KB

Virtual Size

37KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

512B

Virtual Size

500B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Helium-bin/0.15.5.1/d3dcompiler_47.dll

IMPHASH 743865990ba9629a654f1d23f6ee14f7
SHA256 82981312525533c44822d54de548c1001071c78ab57a542f67472312612953b3
MD5 d39d758f8705fe7a58dda3897e8ad8ba
SHA1 ce22e2438f07b1b15039251b9f4b2fc23846e22c
SHA512 d1f6a2293c52d2c09ba42dde2377db73551abed13a84587ac8a4a6ba9bdbeb646395704ecd3c255aa48217ae9562b799b3ad62551feaca6dd836ecf5e76f2a7b
SSDEEP 49152:P6ntbdeqBH287v7cavvL4e0OgcmeNHyxsBSoYHXahOO5uBcLr7mbpJ3E/t:PUdeqt737jFm5wl
TLSH
T129268D56A7E840E9D1BBD138DA87821BEBF1B80413349BDF015086599F73BD26A3E734
MD5 SHA1 SHA512 SSDEEP TLSH

windows:10 windows x64 arch:x64

Digest

70:22:96:6a:50:48:c5:aa:70:a0:c4:10:4c:38:4b:fc:0a:0d:7f:3c:bb:a6:e9:7c:00:9c:f9:06:fe:d2:1e:58

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=imput LLC,O=imput LLC,L=Sheridan,ST=Wyoming,C=US

Chains

Aug 15, 2026

CN=imput LLC,O=imput LLC,L=Sheridan,ST=Wyoming,C=US

CN=Microsoft ID Verified CS EOC CA 04,O=Microsoft Corporation,C=US

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Subject

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Serial Number

54:98:d2:d1:d4:5b:19:95:48:13:79:c8:11:c0:87:99

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 16, 2020 - Apr 16, 2045

Subject

CN=imput LLC,O=imput LLC,L=Sheridan,ST=Wyoming,C=US

Serial Number

33:00:04:52:5a:0d:fb:3f:01:c3:02:5d:b8:00:00:00:04:52:5a

Issuer

CN=Microsoft ID Verified CS EOC CA 04,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 14, 2026 - Aug 17, 2026

Subject

CN=Microsoft ID Verified CS EOC CA 04,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:17:27:45:09:0b:8b:87:af:c6:00:00:00:00:00:17

Issuer

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Mar 26, 2026 - Mar 26, 2031

Subject

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:07:87:a3:34:a3:7b:a5:8e:1c:00:00:00:00:00:07

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Apr 1, 2021 - Apr 1, 2036

Subject

CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 19, 2020 - Nov 19, 2035

Subject

CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft America Operations+OU=nShield TSS ESN:A500-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:56:7e:8f:9d:58:08:8e:e9:60:00:00:00:00:00:56

Issuer

CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 23, 2025 - Oct 22, 2026

Minor OS version

0

Major OS version

10

Entry point

1493760

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D3DCompiler_47.pdb

kernel32

WriteFile FreeLibrary Sleep TlsAlloc TlsSetValue HeapDestroy TlsGetValue TlsFree GetFullPathNameW GetFullPathNameA GetEnvironmentVariableA VirtualFree VirtualAlloc GetSystemInfo GetProcAddress LoadLibraryExW SetLastError RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent GetCurrentThreadId GetStdHandle GetFileType GetStartupInfoW FlsAlloc FlsGetValue FlsSetValue FlsFree InitializeCriticalSectionEx GetSystemTimeAsFileTime VirtualProtect CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW ExitProcess GetModuleHandleW GetModuleHandleExW IsValidCodePage GetACP GetOEMCP GetCPInfo SetFilePointerEx ReadFile SetStdHandle GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW RaiseException FlushFileBuffers GetConsoleOutputCP GetConsoleMode GetModuleFileNameW ReadConsoleW HeapSize HeapReAlloc WriteConsoleW QueryPerformanceCounter GetCurrentProcessId InitializeSListHead RtlUnwindEx InterlockedFlushSList RtlPcToFileHeader EncodePointer LocalAlloc LocalFree GetFileSizeEx GetLastError CreateFileW HeapFree GetProcessHeap UnmapViewOfFile GetFileSize CreateFileMappingW MapViewOfFile GetFileAttributesW SetFileAttributesW DeleteFileW SetEndOfFile DeviceIoControl InitializeCriticalSectionAndSpinCount MapViewOfFileEx CreateFileMappingA ExpandEnvironmentStringsW HeapAlloc OutputDebugStringA CloseHandle LeaveCriticalSection EnterCriticalSection lstrcmpiA HeapCreate GetModuleFileNameA CreateFileA DeleteCriticalSection InitializeCriticalSection WideCharToMultiByte FindClose FindFirstFileExW FindNextFileW GetCommandLineA GetCommandLineW GetDriveTypeW GetCurrentDirectoryW SetEvent ResetEvent WaitForSingleObjectEx CreateEventW MultiByteToWideChar GetStringTypeW DisableThreadLibraryCalls

advapi32

CryptDestroyHash CryptAcquireContextW RegQueryValueExA RegEnumKeyExA RegOpenKeyExA CryptGetHashParam CryptCreateHash CryptHashData RegQueryValueExW RegOpenKeyExW RegCloseKey CryptReleaseContext

rpcrt4

UuidCreate

Name

.text

Size

3.4MB

Virtual Size

3.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

fothk

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

916KB

Virtual Size

913KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

64KB

Virtual Size

100KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

124KB

Virtual Size

123KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

4KB

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

36KB

Virtual Size

34KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Helium-bin/0.15.5.1/dxcompiler.dll

IMPHASH 7897513c98fe8dd29afe6bba3c1e9ba1
SHA256 6a6656b26ed69c1c4fc7c712a3349f4ca41645fe68ab589dca765bbc7d608228
MD5 ff4cf904aefa8c48def0f3bbe606d40e
SHA1 4706c07a066adc044caa0da18561bf915772cf81
SHA512 1d95a755bd3cc99f44e9d2675eb4ef9f08e0fcd3c712cd5e2a3291551f960cc65ad0368ef207adf2bde50c318f26d1b97dc6dfb3d5f248dd60933d2c1177b3c8
SSDEEP 393216:lcDP4Rf8ThRFY8Pgy/GRAJdutUrhvu4fb5iq:fZ+Pg4JdCUrhpzQq
TLSH
T101472A122646D49CC099C879C7678B26CA6C30E73FA7B9EFC0F451212B79DAC5B39235
MD5 SHA1 SHA512 SSDEEP TLSH

windows:10 windows x64 arch:x64

Digest

af:49:fa:35:82:c7:91:ee:7e:aa:f7:ad:4a:7f:3f:cf:22:0e:c2:cc:63:1a:0f:c1:77:93:96:c5:79:b9:83:07

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=imput LLC,O=imput LLC,L=Sheridan,ST=Wyoming,C=US

Chains

Aug 15, 2026

CN=imput LLC,O=imput LLC,L=Sheridan,ST=Wyoming,C=US

CN=Microsoft ID Verified CS EOC CA 04,O=Microsoft Corporation,C=US

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Subject

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Serial Number

54:98:d2:d1:d4:5b:19:95:48:13:79:c8:11:c0:87:99

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 16, 2020 - Apr 16, 2045

Subject

CN=imput LLC,O=imput LLC,L=Sheridan,ST=Wyoming,C=US

Serial Number

33:00:04:52:5a:0d:fb:3f:01:c3:02:5d:b8:00:00:00:04:52:5a

Issuer

CN=Microsoft ID Verified CS EOC CA 04,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 14, 2026 - Aug 17, 2026

Subject

CN=Microsoft ID Verified CS EOC CA 04,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:17:27:45:09:0b:8b:87:af:c6:00:00:00:00:00:17

Issuer

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Mar 26, 2026 - Mar 26, 2031

Subject

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:07:87:a3:34:a3:7b:a5:8e:1c:00:00:00:00:00:07

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Apr 1, 2021 - Apr 1, 2036

Subject

CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 19, 2020 - Nov 19, 2035

Subject

CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft America Operations+OU=nShield TSS ESN:7800-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:57:24:d3:95:e0:a2:e9:c9:31:00:00:00:00:00:57

Issuer

CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 23, 2025 - Oct 22, 2026

Minor OS version

0

Major OS version

10

Entry point

20613040

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

dxcompiler.dll.pdb

kernel32

AcquireSRWLockExclusive CloseHandle CompareStringOrdinal CompareStringW CreateDirectoryW CreateFileMappingW CreateFileW CreateHardLinkW CreateThread DecodePointer DeleteCriticalSection DeleteFileW EncodePointer EnterCriticalSection EnumSystemLocalesW ExitProcess ExitThread FindClose FindFirstFileExW FindFirstFileW FindNextFileW FlsAlloc FlsFree FlsGetValue FlsSetValue FlushFileBuffers FormatMessageA FreeEnvironmentStringsW FreeLibrary FreeLibraryAndExitThread GetACP GetCPInfo GetCommandLineA GetCommandLineW GetConsoleMode GetConsoleOutputCP GetConsoleScreenBufferInfo GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetDateFormatW GetEnvironmentStringsW GetFileAttributesW GetFileInformationByHandle GetFileSizeEx GetFileType GetLastError GetLocaleInfoW GetModuleFileNameW GetModuleHandleExW GetModuleHandleW GetNativeSystemInfo GetOEMCP GetProcAddress GetProcessHeap GetProcessTimes GetStartupInfoW GetStdHandle GetStringTypeW GetSystemInfo GetSystemTimeAsFileTime GetTempPathW GetTimeFormatW GetTimeZoneInformation GetUserDefaultLCID HeapAlloc HeapFree HeapQueryInformation HeapReAlloc HeapSize HeapValidate HeapWalk InitializeCriticalSection InitializeCriticalSectionAndSpinCount InitializeCriticalSectionEx InitializeSListHead InterlockedFlushSList IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage IsValidLocale LCMapStringW LeaveCriticalSection LoadLibraryExW LocalFree MapViewOfFile MoveFileExW MultiByteToWideChar OutputDebugStringA OutputDebugStringW QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReadConsoleW ReadFile ReleaseSRWLockExclusive RemoveDirectoryW RtlCaptureContext RtlLookupFunctionEntry RtlPcToFileHeader RtlUnwind RtlUnwindEx RtlVirtualUnwind SetConsoleTextAttribute SetEndOfFile SetEnvironmentVariableW SetFilePointerEx SetFileTime SetLastError SetStdHandle SetUnhandledExceptionFilter Sleep SleepConditionVariableSRW TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue TryEnterCriticalSection UnhandledExceptionFilter UnmapViewOfFile VirtualAlloc VirtualProtect VirtualQuery WaitForSingleObject WakeAllConditionVariable WideCharToMultiByte WriteConsoleW WriteFile

user32

UnregisterClassA

advapi32

EventRegister EventUnregister EventWriteTransfer

ole32

CoTaskMemAlloc CoTaskMemFree

oleaut32

SysAllocString SysAllocStringByteLen SysAllocStringLen SysFreeString SysStringByteLen SysStringLen VarBstrCat VariantClear VariantCopy VariantInit

Name

.text

Size

20.0MB

Virtual Size

20.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

3.8MB

Virtual Size

3.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

31KB

Virtual Size

47KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

622KB

Virtual Size

622KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

25B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

512B

Virtual Size

500B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

1016B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

71KB

Virtual Size

71KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Helium-bin/0.15.5.1/dxil.dll

IMPHASH d491d5c5bf90bc0c2622735f43de4080
SHA256 5b2923af6f4f075386b14696ade811db009b2927c2ce27ba99f51a770e18b0b2
MD5 afa5667c953ab3aad3e93b4e269eb4a2
SHA1 59ad99101539a258f9571c5882d3c7e2d7ed4570
SHA512 f633df92453b3057d92b02d0905fa528887e3b273646010ace089f6b170d177bac762e5bfac4528431eef652867537029018a48753f1c808672f7bf6c861141d
SSDEEP 24576:QcuJxAR7BBPp6UMPzbOXh9/duHdFnXIqpfya8PNCdbyKE5vl5eZiE1/0Wy4r8H/w:QsHMPzbOxBduHdSCde8ZF1/0Wy4oV6bt
TLSH
T1B5656D6B66A800B9D4BFD174CA438E1BE7B2B45503B0EB8F16F402A61F577B15A3E311
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Digest

af:ea:7c:16:de:21:8c:35:55:07:34:fb:89:38:8c:65:19:01:2b:95:5d:37:f0:a4:17:bb:12:5b:59:02:7c:1f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=imput LLC,O=imput LLC,L=Sheridan,ST=Wyoming,C=US

Chains

Aug 15, 2026

CN=imput LLC,O=imput LLC,L=Sheridan,ST=Wyoming,C=US

CN=Microsoft ID Verified CS EOC CA 04,O=Microsoft Corporation,C=US

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Subject

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Serial Number

54:98:d2:d1:d4:5b:19:95:48:13:79:c8:11:c0:87:99

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 16, 2020 - Apr 16, 2045

Subject

CN=imput LLC,O=imput LLC,L=Sheridan,ST=Wyoming,C=US

Serial Number

33:00:04:52:5a:0d:fb:3f:01:c3:02:5d:b8:00:00:00:04:52:5a

Issuer

CN=Microsoft ID Verified CS EOC CA 04,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 14, 2026 - Aug 17, 2026

Subject

CN=Microsoft ID Verified CS EOC CA 04,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:17:27:45:09:0b:8b:87:af:c6:00:00:00:00:00:17

Issuer

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Mar 26, 2026 - Mar 26, 2031

Subject

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:07:87:a3:34:a3:7b:a5:8e:1c:00:00:00:00:00:07

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Apr 1, 2021 - Apr 1, 2036

Subject

CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 19, 2020 - Nov 19, 2035

Subject

CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft America Operations+OU=nShield TSS ESN:7800-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:57:24:d3:95:e0:a2:e9:c9:31:00:00:00:00:00:57

Issuer

CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 23, 2025 - Oct 22, 2026

Minor OS version

0

Major OS version

6

Entry point

450288

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\__w\1\b\build\x64\DXC\Release\bin\Symbols.pri\dxil.pdb

kernel32

DeleteCriticalSection MoveFileExW InitializeCriticalSectionEx GetLastError CreateHardLinkW InitializeCriticalSection GetModuleFileNameW UnmapViewOfFile MapViewOfFile CreateFileMappingW SetFileTime RemoveDirectoryW GetFileType GetFileInformationByHandle GetFileAttributesW FindNextFileW FindFirstFileW FindClose DeleteFileW CreateDirectoryW GetProcessHeap HeapSize HeapFree HeapReAlloc HeapAlloc ReadFile LoadLibraryExW FreeLibrary InitializeCriticalSectionAndSpinCount EncodePointer InterlockedFlushSList RtlUnwindEx RtlPcToFileHeader InitializeSListHead GetCurrentProcessId IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext IsDebuggerPresent OutputDebugStringW RaiseException EnterCriticalSection LeaveCriticalSection GetCurrentDirectoryW SetLastError TlsAlloc TlsGetValue TlsSetValue TlsFree MultiByteToWideChar WideCharToMultiByte GetStdHandle GetProcessTimes GetCurrentProcess GetConsoleMode GetConsoleScreenBufferInfo SetConsoleTextAttribute GetSystemTimeAsFileTime CloseHandle CreateFileW TerminateProcess LocalFree FormatMessageA GetLocaleInfoEx ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive GetCurrentThreadId QueryPerformanceCounter QueryPerformanceFrequency GetTempPathW GetModuleHandleW GetProcAddress WakeAllConditionVariable SleepConditionVariableSRW

ole32

CoTaskMemFree CoTaskMemAlloc CoGetMalloc

advapi32

EventUnregister EventRegister EventWriteTransfer

api-ms-win-crt-heap-l1-1-0

free calloc malloc

api-ms-win-crt-runtime-l1-1-0

_seh_filter_dll _configure_narrow_argv _initialize_narrow_environment _initialize_onexit_table _register_onexit_function _initterm_e _execute_onexit_table _errno _crt_atexit _invalid_parameter_noinfo_noreturn _cexit _initterm abort terminate

api-ms-win-crt-string-l1-1-0

isdigit isprint strcpy_s toupper isalpha wcsncmp isalnum

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf __stdio_common_vsprintf_s __acrt_iob_func _write _read _open_osfhandle _lseek _close fwrite _setmode _get_osfhandle __stdio_common_vsnprintf_s _chsize _wsopen_dispatch _fileno

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-math-l1-1-0

_fpclass ceilf

api-ms-win-crt-convert-l1-1-0

atoi

Helium-bin/0.15.5.1/elevation_service.exe

IMPHASH 6091e8bee2fc771cf651d3fd9d752fd7
SHA256 bff9f5f4e0ff360053225d84a49fc1901a4a218925ee85a06096f53dd624788f
MD5 f1fe76f1d88ac04efbd50439fd24cdc2
SHA1 d3ad508485c7e0a7fbe99a84cd966ace890674c9
SHA512 afdcbf936ce56680d10cf3002fc5a5b663461a7cc42829cdb69dfd48f45a85f68f58cf59cfaec9dbeb1ab45c9bdf6bc2a4090ab723d6d0599ce225b74589c4f7
SSDEEP 49152:J1lNQ9vhGYq6SFMMKJC0iuJqPnxOAP/pJLBNhY5tCw4DDSHYL0Irefb/fS1W41wd:jXYqy3kbrp5rUiwd
TLSH
T183067C13F2DA01D8C059D1B88B4A9233EA61BC455B35B6DF0B9077122E7AEE49F3E714
MD5 SHA1 SHA512 SSDEEP TLSH

windows:10 windows x64 arch:x64

Digest

98:49:c1:d6:16:de:ab:d7:70:bf:de:d0:41:f0:9c:44:b0:3c:ee:b5:fd:ba:b3:55:38:df:4a:0c:7e:68:23:07

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=imput LLC,O=imput LLC,L=Sheridan,ST=Wyoming,C=US

Chains

Aug 15, 2026

CN=imput LLC,O=imput LLC,L=Sheridan,ST=Wyoming,C=US

CN=Microsoft ID Verified CS EOC CA 04,O=Microsoft Corporation,C=US

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Subject

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Serial Number

54:98:d2:d1:d4:5b:19:95:48:13:79:c8:11:c0:87:99

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 16, 2020 - Apr 16, 2045

Subject

CN=imput LLC,O=imput LLC,L=Sheridan,ST=Wyoming,C=US

Serial Number

33:00:04:52:5a:0d:fb:3f:01:c3:02:5d:b8:00:00:00:04:52:5a

Issuer

CN=Microsoft ID Verified CS EOC CA 04,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 14, 2026 - Aug 17, 2026

Subject

CN=Microsoft ID Verified CS EOC CA 04,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:17:27:45:09:0b:8b:87:af:c6:00:00:00:00:00:17

Issuer

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Mar 26, 2026 - Mar 26, 2031

Subject

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:07:87:a3:34:a3:7b:a5:8e:1c:00:00:00:00:00:07

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Apr 1, 2021 - Apr 1, 2036

Subject

CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 19, 2020 - Nov 19, 2035

Subject

CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft America Operations+OU=nShield TSS ESN:7800-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:57:24:d3:95:e0:a2:e9:c9:31:00:00:00:00:00:57

Issuer

CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 23, 2025 - Oct 22, 2026

Minor OS version

0

Major OS version

10

Entry point

1674624

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

elevation_service.exe.pdb

advapi32

AddAce BuildTrusteeWithSidW CheckTokenMembership CloseServiceHandle ConvertSidToStringSidW ConvertStringSidToSidW CopySid CreateProcessAsUserW DeregisterEventSource DuplicateTokenEx GetAclInformation GetLengthSid GetNamedSecurityInfoW GetSecurityDescriptorControl GetSecurityDescriptorDacl GetSecurityDescriptorGroup GetSecurityDescriptorOwner GetSecurityDescriptorSacl GetSidLengthRequired GetSidSubAuthority GetTokenInformation InitializeAcl InitializeSecurityDescriptor InitializeSid IsValidAcl IsValidSecurityDescriptor IsValidSid MakeAbsoluteSD OpenProcessToken OpenSCManagerW OpenServiceW OpenThreadToken QueryServiceStatusEx RegCloseKey RegCreateKeyExW RegOpenKeyExW RegQueryValueExW RegisterEventSourceA RegisterServiceCtrlHandlerW ReportEventA SetEntriesInAclW SetNamedSecurityInfoW SetSecurityDescriptorDacl SetSecurityDescriptorGroup SetSecurityDescriptorOwner SetSecurityInfo SetServiceStatus StartServiceCtrlDispatcherW

dbghelp

SymCleanup SymFromAddr SymGetLineFromAddr64 SymGetModuleInfo64 SymGetSearchPathW SymInitialize SymSetOptions SymSetSearchPathW

oleaut32

SysAllocStringByteLen SysStringByteLen

user32

AllowSetForegroundWindow CreateWindowExW DefWindowProcW DestroyWindow DispatchMessageW GetActiveWindow GetQueueStatus KillTimer MsgWaitForMultipleObjectsEx PeekMessageW PostMessageW PostQuitMessage RegisterClassExW SetTimer TranslateMessage UnregisterClassW

kernel32

AcquireSRWLockExclusive AcquireSRWLockShared AssignProcessToJobObject CloseHandle CompareStringW CreateDirectoryW CreateEventW CreateFileA CreateFileMappingW CreateFileW CreateIoCompletionPort CreateProcessW CreateThread DecodePointer DeleteCriticalSection DeleteFileW DeleteProcThreadAttributeList DuplicateHandle EncodePointer EnterCriticalSection EnumSystemLocalesW ExitProcess ExpandEnvironmentStringsW FindClose FindFirstFileExW FindFirstFileW FindNextFileW FlsAlloc FlsFree FlsGetValue FlsSetValue FlushFileBuffers FormatMessageW FreeEnvironmentStringsW FreeLibrary GetACP GetCPInfo GetCommandLineA GetCommandLineW GetConsoleMode GetConsoleOutputCP GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetDateFormatW GetDriveTypeW GetEnvironmentStringsW GetEnvironmentVariableW GetExitCodeProcess GetFileAttributesW GetFileInformationByHandle GetFileInformationByHandleEx GetFileSize GetFileSizeEx GetFileType GetFullPathNameW GetLastError GetLocalTime GetLocaleInfoW GetLogicalProcessorInformation GetLongPathNameW GetModuleFileNameW GetModuleHandleA GetModuleHandleExW GetModuleHandleW GetNativeSystemInfo GetOEMCP GetProcAddress GetProcessHeap GetProcessId GetProductInfo GetQueuedCompletionStatus GetStartupInfoW GetStdHandle GetStringTypeW GetSystemDirectoryW GetSystemInfo GetSystemTimeAsFileTime GetSystemTimePreciseAsFileTime GetTempPathW GetThreadContext GetThreadId GetThreadPriority GetThreadPriorityBoost GetTickCount GetTimeFormatW GetTimeZoneInformation GetUserDefaultLCID GetVersionExW GetWindowsDirectoryW GlobalMemoryStatusEx HeapAlloc HeapDestroy HeapFree HeapReAlloc HeapSetInformation HeapSize InitOnceExecuteOnce InitializeConditionVariable InitializeCriticalSection InitializeCriticalSectionAndSpinCount InitializeCriticalSectionEx InitializeProcThreadAttributeList InitializeSListHead InitializeSRWLock IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage IsValidLocale IsWow64Process K32GetModuleInformation LCMapStringW LeaveCriticalSection LoadLibraryExA LoadLibraryExW LoadLibraryW LocalFree MapViewOfFile MoveFileExW MultiByteToWideChar OpenProcess OutputDebugStringA OutputDebugStringW PostQueuedCompletionStatus QueryFullProcessImageNameW QueryPerformanceCounter QueryPerformanceFrequency QueryThreadCycleTime RaiseException ReadConsoleW ReadFile ReleaseSRWLockExclusive ReleaseSRWLockShared RemoveDirectoryW ResetEvent ResumeThread RtlCaptureContext RtlCaptureStackBackTrace RtlLookupFunctionEntry RtlPcToFileHeader RtlUnwind RtlUnwindEx RtlVirtualUnwind SetEndOfFile SetEnvironmentVariableW SetEvent SetFileAttributesW SetFilePointer SetFilePointerEx SetFileTime SetHandleInformation SetInformationJobObject SetLastError SetStdHandle SetThreadInformation SetThreadPriority SetThreadPriorityBoost SetUnhandledExceptionFilter Sleep SleepConditionVariableSRW SuspendThread SwitchToThread SystemTimeToFileTime TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue TryAcquireSRWLockExclusive TzSpecificLocalTimeToSystemTime UnhandledExceptionFilter UnmapViewOfFile UnregisterWaitEx UpdateProcThreadAttribute VirtualAlloc VirtualFree VirtualProtect VirtualQuery WaitForMultipleObjects WaitForSingleObject WakeAllConditionVariable WakeConditionVariable WideCharToMultiByte WriteConsoleW WriteFile

ole32

CoAddRefServerProcess CoCreateInstance CoGetCallContext CoInitializeEx CoInitializeSecurity CoRegisterClassObject CoRegisterInitializeSpy CoReleaseServerProcess CoResumeClassObjects CoRevokeClassObject CoRevokeInitializeSpy CoTaskMemFree CoUninitialize IIDFromString

crypt32

CryptProtectData CryptUnprotectData

rpcrt4

I_RpcOpenClientProcess

userenv

CreateEnvironmentBlock DestroyEnvironmentBlock

shell32

CommandLineToArgvW SHGetFolderPathW SHGetKnownFolderPath ShellExecuteExW

shlwapi

PathMatchSpecW

winmm

timeBeginPeriod timeEndPeriod timeGetTime

ntdll

NtClose NtOpenKeyEx NtQueryValueKey RtlFormatCurrentUserKeyPath RtlFreeUnicodeString RtlInitUnicodeString

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

api-ms-win-core-winrt-l1-1-0

RoInitialize RoUninitialize

Name

.text

Size

3.0MB

Virtual Size

3.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

409KB

Virtual Size

409KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

70KB

Virtual Size

204KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

85KB

Virtual Size

84KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

1024B

Virtual Size

737B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

512B

Virtual Size

500B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

malloc_h

Size

512B

Virtual Size

265B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Helium-bin/0.15.5.1/helium_update_helper.exe

IMPHASH c9ff6b0e35eb755cea24692e8126b682
SHA256 113c7f3f0ebbc520ae62d73e523f987ed53c4c99ea50ee6d8573bb5c6ba87d5b
MD5 cce29a40bbc1acd9f7321f6585696eb7
SHA1 e439662f337602a4e5e02b167a74c59dba16fa8c
SHA512 a9ce468fefd03a1e737c9233b297fc467b6ecad185341d3b4c0c75e8b4c463f54953ab894f41b62c3d6617d3cd773debf875807d0ac040f3ccd173ccc426c960
SSDEEP 49152:PdiYFr5OXjn94+kLXyilzyywfWbCfaiMMgKTW:5HOXJuZdCTM17
TLSH
T172D57D13F2E901D8E0BAD6789B6A9233EE62BC454B35B2DF065072151E75EE09F3D720
MD5 SHA1 SHA512 SSDEEP TLSH

windows:10 windows x64 arch:x64

Digest

d3:13:08:93:3c:57:f3:b3:5e:9d:26:cb:93:2c:9e:6d:3c:91:0b:12:86:3a:80:5f:67:ab:c7:a3:22:21:78:01

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=imput LLC,O=imput LLC,L=Sheridan,ST=Wyoming,C=US

Chains

Aug 15, 2026

CN=imput LLC,O=imput LLC,L=Sheridan,ST=Wyoming,C=US

CN=Microsoft ID Verified CS EOC CA 04,O=Microsoft Corporation,C=US

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Subject

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Serial Number

54:98:d2:d1:d4:5b:19:95:48:13:79:c8:11:c0:87:99

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 16, 2020 - Apr 16, 2045

Subject

CN=imput LLC,O=imput LLC,L=Sheridan,ST=Wyoming,C=US

Serial Number

33:00:04:52:5a:0d:fb:3f:01:c3:02:5d:b8:00:00:00:04:52:5a

Issuer

CN=Microsoft ID Verified CS EOC CA 04,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 14, 2026 - Aug 17, 2026

Subject

CN=Microsoft ID Verified CS EOC CA 04,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:17:27:45:09:0b:8b:87:af:c6:00:00:00:00:00:17

Issuer

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Mar 26, 2026 - Mar 26, 2031

Subject

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:07:87:a3:34:a3:7b:a5:8e:1c:00:00:00:00:00:07

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Apr 1, 2021 - Apr 1, 2036

Subject

CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 19, 2020 - Nov 19, 2035

Subject

CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft America Operations+OU=nShield TSS ESN:7A00-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:58:65:cd:eb:3f:a1:d7:fc:d2:00:00:00:00:00:58

Issuer

CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 23, 2025 - Oct 22, 2026

Minor OS version

0

Major OS version

10

Entry point

1351680

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

helium_update_helper.exe.pdb

advapi32

BuildTrusteeWithSidW CheckTokenMembership ConvertStringSidToSidW CreateProcessAsUserW DeregisterEventSource GetLengthSid GetNamedSecurityInfoW GetSecurityDescriptorControl GetSecurityDescriptorDacl GetSecurityDescriptorGroup GetSecurityDescriptorOwner GetSecurityDescriptorSacl GetTokenInformation IsValidAcl IsValidSecurityDescriptor IsValidSid RegCloseKey RegOpenKeyExW RegQueryValueExW RegisterEventSourceW ReportEventW SetEntriesInAclW SetNamedSecurityInfoW SetSecurityInfo

comctl32

ord345

crypt32

CertGetNameStringW

wintrust

WTHelperGetProvCertFromChain WTHelperGetProvSignerFromChain WTHelperProvDataFromStateData WinVerifyTrust

dbghelp

SymCleanup SymFromAddr SymGetLineFromAddr64 SymGetModuleInfo64 SymGetSearchPathW SymInitialize SymSetOptions SymSetSearchPathW

user32

AllowSetForegroundWindow CreateWindowExW DefWindowProcW DestroyWindow DispatchMessageW GetActiveWindow GetQueueStatus GetWindowThreadProcessId KillTimer MsgWaitForMultipleObjectsEx PeekMessageW PostMessageW PostQuitMessage RegisterClassExW SendMessageW SetTimer TranslateMessage UnregisterClassW

kernel32

AcquireSRWLockExclusive AssignProcessToJobObject CloseHandle CompareStringW CreateEventW CreateFileW CreateIoCompletionPort CreateProcessW CreateThread DeleteCriticalSection DeleteProcThreadAttributeList DuplicateHandle EncodePointer EnterCriticalSection EnumSystemLocalesW ExitProcess ExpandEnvironmentStringsW FindClose FindFirstFileExW FindNextFileW FindResourceW FlsAlloc FlsFree FlsGetValue FlsSetValue FlushFileBuffers FormatMessageW FreeEnvironmentStringsW FreeLibrary GetACP GetCPInfo GetCommandLineA GetCommandLineW GetConsoleMode GetConsoleOutputCP GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetDateFormatW GetDriveTypeW GetEnvironmentStringsW GetEnvironmentVariableW GetExitCodeProcess GetFileAttributesW GetFileSizeEx GetFileType GetFullPathNameW GetLastError GetLocalTime GetLocaleInfoW GetLogicalProcessorInformation GetLongPathNameW GetModuleFileNameW GetModuleHandleA GetModuleHandleExW GetModuleHandleW GetNativeSystemInfo GetOEMCP GetProcAddress GetProcessHeap GetProcessId GetProductInfo GetQueuedCompletionStatus GetStartupInfoW GetStdHandle GetStringTypeW GetSystemDirectoryW GetSystemInfo GetSystemTimeAsFileTime GetTempPathW GetThreadContext GetThreadId GetThreadPreferredUILanguages GetThreadPriority GetThreadPriorityBoost GetTickCount GetTimeFormatW GetTimeZoneInformation GetUserDefaultLCID GetVersionExW GetWindowsDirectoryW GlobalMemoryStatusEx InitOnceExecuteOnce InitializeConditionVariable InitializeCriticalSection InitializeCriticalSectionAndSpinCount InitializeCriticalSectionEx InitializeProcThreadAttributeList InitializeSListHead InitializeSRWLock IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage IsValidLocale IsWow64Process K32GetModuleInformation LCMapStringW LeaveCriticalSection LoadLibraryExA LoadLibraryExW LoadLibraryW LoadResource LocalFree LockResource MultiByteToWideChar OpenProcess OutputDebugStringA PostQueuedCompletionStatus QueryPerformanceCounter QueryPerformanceFrequency QueryThreadCycleTime RaiseException ReadConsoleW ReadFile ReleaseSRWLockExclusive ResetEvent ResumeThread RtlCaptureContext RtlCaptureStackBackTrace RtlLookupFunctionEntry RtlPcToFileHeader RtlUnwind RtlUnwindEx RtlVirtualUnwind SetDefaultDllDirectories SetEndOfFile SetEnvironmentVariableW SetEvent SetFilePointer SetFilePointerEx SetHandleInformation SetInformationJobObject SetLastError SetStdHandle SetThreadInformation SetThreadPriority SetThreadPriorityBoost SetUnhandledExceptionFilter SizeofResource Sleep SleepConditionVariableSRW SuspendThread SwitchToThread TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue TryAcquireSRWLockExclusive UnhandledExceptionFilter UnmapViewOfFile UnregisterWaitEx UpdateProcThreadAttribute VirtualAlloc VirtualFree VirtualProtect VirtualQuery WaitForMultipleObjects WaitForSingleObject WakeAllConditionVariable WakeConditionVariable WideCharToMultiByte WriteConsoleW WriteFile

ole32

CoCreateInstance CoInitializeEx CoRegisterInitializeSpy CoRevokeInitializeSpy CoTaskMemFree CoUninitialize

userenv

CreateEnvironmentBlock DestroyEnvironmentBlock

shell32

CommandLineToArgvW SHGetFolderPathW SHGetKnownFolderPath ShellExecuteExW

winmm

timeBeginPeriod timeEndPeriod timeGetTime

oleaut32

SysAllocString SysAllocStringLen SysFreeString VariantClear

api-ms-win-core-winrt-l1-1-0

RoInitialize RoUninitialize

Name

.text

Size

2.1MB

Virtual Size

2.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

288KB

Virtual Size

288KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

70KB

Virtual Size

198KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

63KB

Virtual Size

63KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

1024B

Virtual Size

705B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

512B

Virtual Size

500B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

malloc_h

Size

512B

Virtual Size

265B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

308KB

Virtual Size

308KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Helium-bin/0.15.5.1/icudtl.dat

SHA256 9f48c7f9c7c94d516a14870707e910ab94d75ae640ff6842c4af53276cd26ebe
MD5 c9d17441b2314fe514cd8cb951577c1c
SHA1 15cae4dee805f3e04171e00781da13fe40036439
SHA512 836d4f4fa591ee059dbfb943c2f13ded58a0f5048b5505214ec7105d0963106e0078aa262090d0dac9cca80995c7961a900ffa7a2af8ff315aabad1313bd37a4
SSDEEP 98304:1/cBQYOo+ddly1/rQqQC1HiXUxO/RJk3IWhlYntjndPj89j:1/cBhORok2HiXUxO/RJk3IWhlYntjdOj
TLSH
T1A9B62903A2FB4EC2F9FB9FB098F552779567BD49AE32805951042F3B1C333908665B62
MD5 SHA1 SHA512 SSDEEP TLSH

Helium-bin/0.15.5.1/notification_helper.exe

IMPHASH 5326a9cc3cdb3f9713801af30026ac20
SHA256 bd8ec8f34530bcce902e66b8240a34543f3ccdad7ccf9034a861dc12b88c3266
MD5 58d2778fbbd1c90162e678cee9550213
SHA1 b016a7642a0403dbc17556e3284552c71277555d
SHA512 df190f612d5a06e0b133cbb777864c597543e1c7b3487a66244011e3d709e93a1985d1b6f8236ba97813de2c14b4333cf44d5d03339590d44a78e0d69431b325
SSDEEP 49152:LMLCDzqTOjQ4B0OHEU589cnoE/ewaTLgmRrVlHg5l0ay/j:hVQu2JM5BulSPyr
TLSH
T19CD57C13F2D901D8C05DD1788B5A9233FAA2BC490B35B6DF0A90B6561F7AEE45B3E710
MD5 SHA1 SHA512 SSDEEP TLSH

windows:10 windows x64 arch:x64

Digest

e5:85:f1:8d:c0:64:cf:cd:01:f7:23:78:e5:d1:4e:fa:2e:2f:9a:93:07:3a:f9:18:e3:ed:b2:ed:cd:aa:a4:5c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=imput LLC,O=imput LLC,L=Sheridan,ST=Wyoming,C=US

Chains

Aug 15, 2026

CN=imput LLC,O=imput LLC,L=Sheridan,ST=Wyoming,C=US

CN=Microsoft ID Verified CS EOC CA 04,O=Microsoft Corporation,C=US

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Subject

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Serial Number

54:98:d2:d1:d4:5b:19:95:48:13:79:c8:11:c0:87:99

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 16, 2020 - Apr 16, 2045

Subject

CN=imput LLC,O=imput LLC,L=Sheridan,ST=Wyoming,C=US

Serial Number

33:00:04:52:5a:0d:fb:3f:01:c3:02:5d:b8:00:00:00:04:52:5a

Issuer

CN=Microsoft ID Verified CS EOC CA 04,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 14, 2026 - Aug 17, 2026

Subject

CN=Microsoft ID Verified CS EOC CA 04,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:17:27:45:09:0b:8b:87:af:c6:00:00:00:00:00:17

Issuer

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Mar 26, 2026 - Mar 26, 2031

Subject

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:07:87:a3:34:a3:7b:a5:8e:1c:00:00:00:00:00:07

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Apr 1, 2021 - Apr 1, 2036

Subject

CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 19, 2020 - Nov 19, 2035

Subject

CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft America Operations+OU=nShield TSS ESN:A500-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:56:7e:8f:9d:58:08:8e:e9:60:00:00:00:00:00:56

Issuer

CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 23, 2025 - Oct 22, 2026

Minor OS version

0

Major OS version

10

Entry point

1403120

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

notification_helper.exe.pdb

api-ms-win-core-winrt-error-l1-1-0

RoOriginateError

advapi32

BuildExplicitAccessWithNameW BuildSecurityDescriptorW BuildTrusteeWithSidW CheckTokenMembership ConvertStringSecurityDescriptorToSecurityDescriptorW ConvertStringSidToSidW GetLengthSid GetNamedSecurityInfoW GetSecurityDescriptorControl GetSecurityDescriptorDacl GetSecurityDescriptorGroup GetSecurityDescriptorOwner GetSecurityDescriptorSacl GetTokenInformation IsValidAcl IsValidSecurityDescriptor IsValidSid RegCloseKey RegOpenKeyExW RegQueryValueExW SetEntriesInAclW SetNamedSecurityInfoW SetSecurityInfo

dbghelp

SymCleanup SymFromAddr SymGetLineFromAddr64 SymGetModuleInfo64 SymGetSearchPathW SymInitialize SymSetOptions SymSetSearchPathW

shell32

CommandLineToArgvW SHGetFolderPathW SHGetKnownFolderPath ShellExecuteExW

user32

AllowSetForegroundWindow CreateWindowExW DefWindowProcW DestroyWindow DispatchMessageW GetQueueStatus KillTimer MsgWaitForMultipleObjectsEx PeekMessageW PostMessageW PostQuitMessage RegisterClassExW SendInput SetTimer TranslateMessage UnregisterClassW

kernel32

AcquireSRWLockExclusive AddVectoredExceptionHandler CloseHandle CompareStringW CreateDirectoryW CreateEventW CreateFileW CreateIoCompletionPort CreateNamedPipeW CreateProcessW CreateThread DecodePointer DeleteCriticalSection DeleteFileW DiscardVirtualMemory DuplicateHandle EncodePointer EnterCriticalSection EnumSystemLocalesW ExitProcess ExpandEnvironmentStringsW FileTimeToSystemTime FindClose FindFirstFileExW FindFirstFileW FindNextFileW FlsAlloc FlsFree FlsGetValue FlsSetValue FlushFileBuffers FlushViewOfFile FormatMessageA FormatMessageW FreeEnvironmentStringsW FreeLibrary GetACP GetCPInfo GetCommandLineA GetCommandLineW GetComputerNameExW GetConsoleMode GetConsoleOutputCP GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetDateFormatW GetDriveTypeW GetEnvironmentStringsW GetEnvironmentVariableW GetFileAttributesW GetFileInformationByHandle GetFileInformationByHandleEx GetFileSizeEx GetFileTime GetFileType GetFullPathNameW GetLastError GetLocalTime GetLocaleInfoW GetLogicalProcessorInformation GetLongPathNameW GetModuleFileNameW GetModuleHandleA GetModuleHandleExW GetModuleHandleW GetNativeSystemInfo GetOEMCP GetProcAddress GetProcessHeap GetProcessId GetProcessTimes GetProductInfo GetQueuedCompletionStatus GetStartupInfoW GetStdHandle GetStringTypeW GetSystemDirectoryW GetSystemInfo GetSystemTimeAsFileTime GetSystemTimePreciseAsFileTime GetTempPathW GetThreadContext GetThreadId GetThreadPriority GetThreadPriorityBoost GetTickCount GetTimeFormatW GetTimeZoneInformation GetUserDefaultLCID GetUserDefaultLangID GetVersionExW GetWindowsDirectoryW GlobalMemoryStatusEx HeapLock HeapSetInformation HeapUnlock HeapWalk InitOnceExecuteOnce InitializeConditionVariable InitializeCriticalSection InitializeCriticalSectionAndSpinCount InitializeCriticalSectionEx InitializeSListHead InitializeSRWLock IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage IsValidLocale IsWow64Process K32GetModuleInformation K32QueryWorkingSetEx LCMapStringW LeaveCriticalSection LoadLibraryExA LoadLibraryExW LoadLibraryW LocalFree LockFileEx MapViewOfFile MoveFileW MultiByteToWideChar OpenProcess OutputDebugStringA OutputDebugStringW PeekNamedPipe PostQueuedCompletionStatus QueryPerformanceCounter QueryPerformanceFrequency QueryThreadCycleTime RaiseException ReadConsoleW ReadFile ReleaseSRWLockExclusive RemoveDirectoryW RemoveVectoredExceptionHandler ReplaceFileW ResetEvent ResumeThread RtlCaptureContext RtlCaptureStackBackTrace RtlLookupFunctionEntry RtlPcToFileHeader RtlUnwind RtlUnwindEx RtlVirtualUnwind SetConsoleCtrlHandler SetEndOfFile SetEnvironmentVariableW SetEvent SetFileAttributesW SetFileInformationByHandle SetFilePointerEx SetInformationJobObject SetLastError SetNamedPipeHandleState SetStdHandle SetThreadInformation SetThreadPriority SetThreadPriorityBoost SetUnhandledExceptionFilter Sleep SleepConditionVariableSRW SleepEx SuspendThread SwitchToThread SystemTimeToTzSpecificLocalTime TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue TransactNamedPipe TryAcquireSRWLockExclusive UnhandledExceptionFilter UnlockFileEx UnmapViewOfFile UnregisterWaitEx VerSetConditionMask VerifyVersionInfoW VirtualAlloc VirtualFree VirtualProtect VirtualQuery WaitForMultipleObjects WaitForSingleObject WaitNamedPipeW WakeAllConditionVariable WakeConditionVariable WerRegisterRuntimeExceptionModule WideCharToMultiByte WriteConsoleW WriteFile lstrcmpW

ole32

CoAddRefServerProcess CoInitializeEx CoRegisterClassObject CoRegisterInitializeSpy CoReleaseServerProcess CoResumeClassObjects CoRevokeClassObject CoRevokeInitializeSpy CoTaskMemFree CoUninitialize

api-ms-win-core-winrt-l1-1-0

RoInitialize RoUninitialize

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

winmm

timeBeginPeriod timeEndPeriod timeGetTime

shlwapi

PathMatchSpecW

ntdll

NtClose NtOpenKeyEx NtQueryValueKey RtlFormatCurrentUserKeyPath RtlFreeUnicodeString RtlInitUnicodeString

Name

.text

Size

2.1MB

Virtual Size

2.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

315KB

Virtual Size

315KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

72KB

Virtual Size

218KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

68KB

Virtual Size

67KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

1024B

Virtual Size

705B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

CPADinfo

Size

512B

Virtual Size

56B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

512B

Virtual Size

500B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

malloc_h

Size

512B

Virtual Size

265B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Helium-bin/0.15.5.1/resources.pak

SHA256 dc3329ee435bbd07383f7c0c80c481a638c46af17081056976bf29d58e872328
MD5 7960db9898a7355ea1bb8a3a007f3f5e
SHA1 c2112a8defa29e9bc4b353b1fd6ac1125a7ed91f
SHA512 4857f11c13656f037d07819656940c873f43b551876271cd77328b04b900ac50c7b6403b3427b82d116ef8debe894515c1f6711bffceadaa61da57d8c398ebde
SSDEEP 786432:AIggwIkQMl/TntmeUti1oQgr4zaW2ZkBuwe4UkEqZe6:QIkQMl/TntmeWWZWW2m3lZ1
TLSH
T1E567E117AF00063ACAF2037C24EAB21AE33153B95243FDD765BA821CDE457DA267716D
MD5 SHA1 SHA512 SSDEEP TLSH

Helium-bin/0.15.5.1/v8_context_snapshot.bin

SHA256 4aa06b1a739760bbbf3d246c07c69315ae4ae90c681beb4d7334c92271666208
MD5 1ae8c0af8eea8c37615f9a5e81955f2c
SHA1 1dd9c0209c403bad20f6c2ddf0a6fbf28228dd8c
SHA512 4180dc199b19493e348eb2dee7936cb8b8a8af9af0c0f584261c468c9ce04b77cb0be20a47f833de4fca002e99dd492bbde433272af84f59583f3e722b5ecdc3
SSDEEP 12288:gbpe8jl246rucdLsWqqUNpkG+VOqJh2ww:gbpeG+pdWqQpkKqJU
TLSH
T16DF494B6F56A8A26CE5127BDCDB6CA063634F19DCF86C65B704217BC78A8FB44E1140C
MD5 SHA1 SHA512 SSDEEP TLSH

Helium-bin/0.15.5.1/vk_swiftshader.dll

IMPHASH 044fe78a0bf0936739485626c9260122
SHA256 1430f7d64632e20bb5a6a79d535599e94bcf5a8458316cf373751a693a5fb70e
MD5 b1234a8397737068c7215bc1b514361a
SHA1 63803f2ba2676d92d46bcc044f5832217a7f3a64
SHA512 a54d1655d34fb79c7ebb80fd91c0cf2a7018882151d20fe3cf4a70a6b46064ccc9ea6ef8545d7543a1a1021180e26f193baf4cb6458140533fec16b7bdb64408
SSDEEP 49152:OEjlXpakvNfUxoZZa/Rxhq0nbc4e2oNxzrwB2vF0aTkgkF3pilUo+uceQW+d+OYx:OEjlXMpbcZ3U64nqX/fYH+p
TLSH
T19E463803F28680E9C06DE579875EA623B231F8840B7676DF66A01F192E79FE0673D714
MD5 SHA1 SHA512 SSDEEP TLSH

windows:10 windows x64 arch:x64

Digest

a3:c2:94:94:e1:de:9d:e5:ee:8f:b8:ac:40:c6:f2:1a:fa:d8:0a:e8:d9:a5:d0:35:a5:57:a3:30:cf:ed:b0:a1

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=imput LLC,O=imput LLC,L=Sheridan,ST=Wyoming,C=US

Chains

Aug 15, 2026

CN=imput LLC,O=imput LLC,L=Sheridan,ST=Wyoming,C=US

CN=Microsoft ID Verified CS EOC CA 04,O=Microsoft Corporation,C=US

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Subject

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Serial Number

54:98:d2:d1:d4:5b:19:95:48:13:79:c8:11:c0:87:99

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 16, 2020 - Apr 16, 2045

Subject

CN=imput LLC,O=imput LLC,L=Sheridan,ST=Wyoming,C=US

Serial Number

33:00:04:52:5a:0d:fb:3f:01:c3:02:5d:b8:00:00:00:04:52:5a

Issuer

CN=Microsoft ID Verified CS EOC CA 04,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 14, 2026 - Aug 17, 2026

Subject

CN=Microsoft ID Verified CS EOC CA 04,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:17:27:45:09:0b:8b:87:af:c6:00:00:00:00:00:17

Issuer

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Mar 26, 2026 - Mar 26, 2031

Subject

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:07:87:a3:34:a3:7b:a5:8e:1c:00:00:00:00:00:07

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Apr 1, 2021 - Apr 1, 2036

Subject

CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 19, 2020 - Nov 19, 2035

Subject

CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft America Operations+OU=nShield TSS ESN:A500-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:56:7e:8f:9d:58:08:8e:e9:60:00:00:00:00:00:56

Issuer

CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 23, 2025 - Oct 22, 2026

Minor OS version

0

Major OS version

10

Entry point

3927936

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

vk_swiftshader.dll.pdb

kernel32

AcquireSRWLockExclusive CloseHandle CompareStringW ConvertFiberToThread ConvertThreadToFiberEx CreateFiberEx CreateFileW CreateRemoteThreadEx CreateThread DeleteCriticalSection DeleteFiber DeleteFileW DeleteProcThreadAttributeList EncodePointer EnterCriticalSection EnumSystemLocalesW ExitProcess ExitThread FindClose FindFirstFileExW FindNextFileW FlsAlloc FlsFree FlsGetValue FlsSetValue FlushFileBuffers FlushInstructionCache FormatMessageA FreeEnvironmentStringsW FreeLibrary FreeLibraryAndExitThread GetACP GetCPInfo GetCommandLineA GetCommandLineW GetConsoleMode GetConsoleOutputCP GetConsoleScreenBufferInfo GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetDateFormatW GetEnvironmentStringsW GetFileAttributesW GetFileInformationByHandle GetFileSizeEx GetFileType GetLastError GetLocaleInfoW GetLogicalProcessorInformationEx GetModuleFileNameW GetModuleHandleA GetModuleHandleExW GetModuleHandleW GetOEMCP GetProcAddress GetProcessHeap GetStartupInfoW GetStdHandle GetStringTypeW GetSystemInfo GetSystemTimeAsFileTime GetTimeFormatW GetTimeZoneInformation GetUserDefaultLCID HeapAlloc HeapFree HeapQueryInformation HeapReAlloc HeapSize HeapValidate HeapWalk InitializeCriticalSection InitializeCriticalSectionAndSpinCount InitializeCriticalSectionEx InitializeProcThreadAttributeList InitializeSListHead InterlockedFlushSList IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage IsValidLocale LCMapStringW LeaveCriticalSection LoadLibraryExW LocalFree MultiByteToWideChar OutputDebugStringA QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReadConsoleW ReadFile ReleaseSRWLockExclusive RemoveDirectoryW RtlCaptureContext RtlLookupFunctionEntry RtlPcToFileHeader RtlUnwind RtlUnwindEx RtlVirtualUnwind SetConsoleTextAttribute SetEndOfFile SetEnvironmentVariableW SetFilePointerEx SetLastError SetStdHandle SetUnhandledExceptionFilter SleepConditionVariableSRW SwitchToFiber SwitchToThread TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue TryAcquireSRWLockExclusive UnhandledExceptionFilter UpdateProcThreadAttribute VerSetConditionMask VerifyVersionInfoW VirtualAlloc VirtualFree VirtualProtect WaitForSingleObject WaitForSingleObjectEx WakeAllConditionVariable WakeConditionVariable WideCharToMultiByte WriteConsoleW WriteFile

user32

GetClientRect GetDC IsWindow ReleaseDC

gdi32

StretchDIBits

vkAcquireNextImage2KHR vkAcquireNextImageKHR vkAllocateCommandBuffers vkAllocateDescriptorSets vkAllocateMemory vkBeginCommandBuffer vkBindBufferMemory vkBindBufferMemory2 vkBindImageMemory vkBindImageMemory2 vkCmdBeginQuery vkCmdBeginRenderPass vkCmdBeginRenderPass2 vkCmdBeginRendering vkCmdBindDescriptorSets vkCmdBindIndexBuffer vkCmdBindPipeline vkCmdBindVertexBuffers vkCmdBindVertexBuffers2 vkCmdBlitImage vkCmdBlitImage2 vkCmdClearAttachments vkCmdClearColorImage vkCmdClearDepthStencilImage vkCmdCopyBuffer vkCmdCopyBuffer2 vkCmdCopyBufferToImage vkCmdCopyBufferToImage2 vkCmdCopyImage vkCmdCopyImage2 vkCmdCopyImageToBuffer vkCmdCopyImageToBuffer2 vkCmdCopyQueryPoolResults vkCmdDispatch vkCmdDispatchBase vkCmdDispatchIndirect vkCmdDraw vkCmdDrawIndexed vkCmdDrawIndexedIndirect vkCmdDrawIndexedIndirectCount vkCmdDrawIndirect vkCmdDrawIndirectCount vkCmdEndQuery vkCmdEndRenderPass vkCmdEndRenderPass2 vkCmdEndRendering vkCmdExecuteCommands vkCmdFillBuffer vkCmdNextSubpass vkCmdNextSubpass2 vkCmdPipelineBarrier vkCmdPipelineBarrier2 vkCmdPushConstants vkCmdResetEvent vkCmdResetEvent2 vkCmdResetQueryPool vkCmdResolveImage vkCmdResolveImage2 vkCmdSetBlendConstants vkCmdSetCullMode vkCmdSetDepthBias vkCmdSetDepthBiasEnable vkCmdSetDepthBounds vkCmdSetDepthBoundsTestEnable vkCmdSetDepthCompareOp vkCmdSetDepthTestEnable vkCmdSetDepthWriteEnable vkCmdSetDeviceMask vkCmdSetEvent vkCmdSetEvent2 vkCmdSetFrontFace vkCmdSetLineWidth vkCmdSetPrimitiveRestartEnable vkCmdSetPrimitiveTopology vkCmdSetRasterizerDiscardEnable vkCmdSetScissor vkCmdSetScissorWithCount vkCmdSetStencilCompareMask vkCmdSetStencilOp vkCmdSetStencilReference vkCmdSetStencilTestEnable vkCmdSetStencilWriteMask vkCmdSetViewport vkCmdSetViewportWithCount vkCmdUpdateBuffer vkCmdWaitEvents vkCmdWaitEvents2 vkCmdWriteTimestamp vkCmdWriteTimestamp2 vkCreateBuffer vkCreateBufferView vkCreateCommandPool vkCreateComputePipelines vkCreateDescriptorPool vkCreateDescriptorSetLayout vkCreateDescriptorUpdateTemplate vkCreateDevice vkCreateEvent vkCreateFence vkCreateFramebuffer vkCreateGraphicsPipelines vkCreateImage vkCreateImageView vkCreateInstance vkCreatePipelineCache vkCreatePipelineLayout vkCreatePrivateDataSlot vkCreateQueryPool vkCreateRenderPass vkCreateRenderPass2 vkCreateSampler vkCreateSamplerYcbcrConversion vkCreateSemaphore vkCreateShaderModule vkCreateSwapchainKHR vkCreateWin32SurfaceKHR vkDestroyBuffer vkDestroyBufferView vkDestroyCommandPool vkDestroyDescriptorPool vkDestroyDescriptorSetLayout vkDestroyDescriptorUpdateTemplate vkDestroyDevice vkDestroyEvent vkDestroyFence vkDestroyFramebuffer vkDestroyImage vkDestroyImageView vkDestroyInstance vkDestroyPipeline vkDestroyPipelineCache vkDestroyPipelineLayout vkDestroyPrivateDataSlot vkDestroyQueryPool vkDestroyRenderPass vkDestroySampler vkDestroySamplerYcbcrConversion vkDestroySemaphore vkDestroyShaderModule vkDestroySurfaceKHR vkDestroySwapchainKHR vkDeviceWaitIdle vkEndCommandBuffer vkEnumerateDeviceExtensionProperties vkEnumerateDeviceLayerProperties vkEnumerateInstanceExtensionProperties vkEnumerateInstanceLayerProperties vkEnumerateInstanceVersion vkEnumeratePhysicalDeviceGroups vkEnumeratePhysicalDevices vkFlushMappedMemoryRanges vkFreeCommandBuffers vkFreeDescriptorSets vkFreeMemory vkGetBufferDeviceAddress vkGetBufferMemoryRequirements vkGetBufferMemoryRequirements2 vkGetBufferOpaqueCaptureAddress vkGetDescriptorSetLayoutSupport vkGetDeviceBufferMemoryRequirements vkGetDeviceGroupPeerMemoryFeatures vkGetDeviceGroupPresentCapabilitiesKHR vkGetDeviceGroupSurfacePresentModesKHR vkGetDeviceImageMemoryRequirements vkGetDeviceImageSparseMemoryRequirements vkGetDeviceMemoryCommitment vkGetDeviceMemoryOpaqueCaptureAddress vkGetDeviceProcAddr vkGetDeviceQueue vkGetDeviceQueue2 vkGetEventStatus vkGetFenceStatus vkGetImageMemoryRequirements vkGetImageMemoryRequirements2 vkGetImageSparseMemoryRequirements vkGetImageSparseMemoryRequirements2 vkGetImageSubresourceLayout vkGetInstanceProcAddr vkGetPhysicalDeviceExternalBufferProperties vkGetPhysicalDeviceExternalFenceProperties vkGetPhysicalDeviceExternalSemaphoreProperties vkGetPhysicalDeviceFeatures vkGetPhysicalDeviceFeatures2 vkGetPhysicalDeviceFormatProperties vkGetPhysicalDeviceFormatProperties2 vkGetPhysicalDeviceImageFormatProperties vkGetPhysicalDeviceImageFormatProperties2 vkGetPhysicalDeviceMemoryProperties vkGetPhysicalDeviceMemoryProperties2 vkGetPhysicalDevicePresentRectanglesKHR vkGetPhysicalDeviceProperties vkGetPhysicalDeviceProperties2 vkGetPhysicalDeviceQueueFamilyProperties vkGetPhysicalDeviceQueueFamilyProperties2 vkGetPhysicalDeviceSparseImageFormatProperties vkGetPhysicalDeviceSparseImageFormatProperties2 vkGetPhysicalDeviceSurfaceCapabilities2KHR vkGetPhysicalDeviceSurfaceCapabilitiesKHR vkGetPhysicalDeviceSurfaceFormats2KHR vkGetPhysicalDeviceSurfaceFormatsKHR vkGetPhysicalDeviceSurfacePresentModesKHR vkGetPhysicalDeviceSurfaceSupportKHR vkGetPhysicalDeviceToolProperties vkGetPhysicalDeviceWin32PresentationSupportKHR vkGetPipelineCacheData vkGetPrivateData vkGetQueryPoolResults vkGetRenderAreaGranularity vkGetSemaphoreCounterValue vkGetSwapchainImagesKHR vkInvalidateMappedMemoryRanges vkMapMemory vkMergePipelineCaches vkQueueBindSparse vkQueuePresentKHR vkQueueSubmit vkQueueSubmit2 vkQueueWaitIdle vkReleaseSwapchainImagesEXT vkReleaseSwapchainImagesKHR vkResetCommandBuffer vkResetCommandPool vkResetDescriptorPool vkResetEvent vkResetFences vkResetQueryPool vkSetEvent vkSetPrivateData vkSignalSemaphore vkTrimCommandPool vkUnmapMemory vkUpdateDescriptorSetWithTemplate vkUpdateDescriptorSets vkWaitForFences vkWaitSemaphores vk_icdEnumerateAdapterPhysicalDevices vk_icdGetInstanceProcAddr vk_icdGetPhysicalDeviceProcAddr vk_icdNegotiateLoaderICDInterfaceVersion

Name

.text

Size

4.3MB

Virtual Size

4.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

730KB

Virtual Size

729KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

104KB

Virtual Size

179KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

77KB

Virtual Size

76KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

89B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

512B

Virtual Size

500B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

19KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Helium-bin/0.15.5.1/vk_swiftshader_icd.json

SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
MD5 8642dd3a87e2de6e991fae08458e302b
SHA1 9c06735c31cec00600fd763a92f8112d085bd12a
SHA512 f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f
TLSH
T1A6B01211430088B36062AF3C41811F468765411C36020D491040540E83BBDB6A102394
MD5 SHA1 SHA512 TLSH

Helium-bin/0.15.5.1/vulkan-1.dll

IMPHASH 6de2c6d734ad6ff8f08ba2a832ee52f3
SHA256 a9db241b67eea08c039282888a7dc4f59b36e5533dbfd04e52dac17c338c88c3
MD5 117d70480ed7959fff2d527ab8c79d45
SHA1 bb8570e1dfd64fc656582bf3cac0ca4d0128e09d
SHA512 009f1545c65b8d2169604713e323ee79d08609d7e55e37b20980f0e2608ade3a317d15192d4d2358b6e0b0b3eabb5bbbe4bc5e7f03d1a63bbb81e0eb61908bbe
SSDEEP 24576:4N/KQywiXpm8mFpCbdEbJZ+gkkKNlC1EoDkw7+DV6g3v0TAE7yoeHXVof:8W9Xpm5PCicgkkKNlC1EoDkw7+DV6g3g
TLSH
T1AC257D639A948AA9D676C034D9D18A03D9F074811332B6CF06B417186F6FEF07B7DB29
MD5 SHA1 SHA512 SSDEEP TLSH

windows:10 windows x64 arch:x64

Digest

a7:1c:f7:e7:b5:7a:0e:ec:7f:a3:27:ad:cc:9f:9b:21:f1:ef:bd:09:31:ac:e7:50:39:bd:b6:98:ea:51:17:6a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=imput LLC,O=imput LLC,L=Sheridan,ST=Wyoming,C=US

Chains

Aug 15, 2026

CN=imput LLC,O=imput LLC,L=Sheridan,ST=Wyoming,C=US

CN=Microsoft ID Verified CS EOC CA 04,O=Microsoft Corporation,C=US

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Subject

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Serial Number

54:98:d2:d1:d4:5b:19:95:48:13:79:c8:11:c0:87:99

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 16, 2020 - Apr 16, 2045

Subject

CN=imput LLC,O=imput LLC,L=Sheridan,ST=Wyoming,C=US

Serial Number

33:00:04:52:5a:0d:fb:3f:01:c3:02:5d:b8:00:00:00:04:52:5a

Issuer

CN=Microsoft ID Verified CS EOC CA 04,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 14, 2026 - Aug 17, 2026

Subject

CN=Microsoft ID Verified CS EOC CA 04,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:17:27:45:09:0b:8b:87:af:c6:00:00:00:00:00:17

Issuer

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Mar 26, 2026 - Mar 26, 2031

Subject

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:07:87:a3:34:a3:7b:a5:8e:1c:00:00:00:00:00:07

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Apr 1, 2021 - Apr 1, 2036

Subject

CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 19, 2020 - Nov 19, 2035

Subject

CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft America Operations+OU=nShield TSS ESN:A500-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:56:7e:8f:9d:58:08:8e:e9:60:00:00:00:00:00:56

Issuer

CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 23, 2025 - Oct 22, 2026

Minor OS version

0

Major OS version

10

Entry point

338832

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

vulkan-1.dll.pdb

kernel32

AcquireSRWLockExclusive CloseHandle CompareStringW CreateFileW DeleteCriticalSection EncodePointer EnterCriticalSection EnumSystemLocalesW ExitProcess FileTimeToSystemTime FindClose FindFirstFileExW FindNextFileW FlsAlloc FlsFree FlsGetValue FlsSetValue FlushFileBuffers FreeEnvironmentStringsW FreeLibrary GetACP GetCPInfo GetCommandLineA GetCommandLineW GetConsoleMode GetConsoleOutputCP GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetDateFormatW GetEnvironmentStringsW GetEnvironmentVariableW GetFileAttributesExW GetFileSize GetFileSizeEx GetFileType GetFullPathNameA GetLastError GetLocaleInfoW GetModuleFileNameA GetModuleFileNameW GetModuleHandleA GetModuleHandleExA GetModuleHandleExW GetModuleHandleW GetOEMCP GetProcAddress GetProcessHeap GetStartupInfoW GetStdHandle GetStringTypeW GetSystemDirectoryW GetSystemTimeAsFileTime GetTimeFormatW GetTimeZoneInformation GetUserDefaultLCID HeapAlloc HeapFree HeapQueryInformation HeapReAlloc HeapSize InitOnceExecuteOnce InitializeCriticalSection InitializeCriticalSectionAndSpinCount InitializeCriticalSectionEx InitializeSListHead InterlockedFlushSList IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage IsValidLocale IsWow64Process LCMapStringW LeaveCriticalSection LoadLibraryExA LoadLibraryExW LoadLibraryW MultiByteToWideChar OutputDebugStringA QueryPerformanceCounter RaiseException ReadConsoleW ReadFile ReleaseSRWLockExclusive RtlCaptureContext RtlLookupFunctionEntry RtlPcToFileHeader RtlUnwind RtlUnwindEx RtlVirtualUnwind SetEnvironmentVariableW SetFilePointerEx SetLastError SetStdHandle SetUnhandledExceptionFilter SleepConditionVariableSRW SystemTimeToTzSpecificLocalTime TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue UnhandledExceptionFilter VirtualProtect WakeAllConditionVariable WideCharToMultiByte WriteConsoleW WriteFile

advapi32

GetSidSubAuthority GetSidSubAuthorityCount GetTokenInformation OpenProcessToken RegCloseKey RegEnumValueA RegOpenKeyExA RegQueryValueExA

cfgmgr32

CM_Get_Child CM_Get_DevNode_Registry_PropertyW CM_Get_DevNode_Status CM_Get_Device_IDW CM_Get_Device_ID_ListW CM_Get_Device_ID_List_SizeW CM_Get_Sibling CM_Locate_DevNodeW CM_Open_DevNode_Key

vkAcquireNextImage2KHR vkAcquireNextImageKHR vkAllocateCommandBuffers vkAllocateDescriptorSets vkAllocateMemory vkBeginCommandBuffer vkBindBufferMemory vkBindBufferMemory2 vkBindImageMemory vkBindImageMemory2 vkCmdBeginQuery vkCmdBeginRenderPass vkCmdBeginRenderPass2 vkCmdBeginRendering vkCmdBindDescriptorSets vkCmdBindDescriptorSets2 vkCmdBindIndexBuffer vkCmdBindIndexBuffer2 vkCmdBindPipeline vkCmdBindVertexBuffers vkCmdBindVertexBuffers2 vkCmdBlitImage vkCmdBlitImage2 vkCmdClearAttachments vkCmdClearColorImage vkCmdClearDepthStencilImage vkCmdCopyBuffer vkCmdCopyBuffer2 vkCmdCopyBufferToImage vkCmdCopyBufferToImage2 vkCmdCopyImage vkCmdCopyImage2 vkCmdCopyImageToBuffer vkCmdCopyImageToBuffer2 vkCmdCopyQueryPoolResults vkCmdDispatch vkCmdDispatchBase vkCmdDispatchIndirect vkCmdDraw vkCmdDrawIndexed vkCmdDrawIndexedIndirect vkCmdDrawIndexedIndirectCount vkCmdDrawIndirect vkCmdDrawIndirectCount vkCmdEndQuery vkCmdEndRenderPass vkCmdEndRenderPass2 vkCmdEndRendering vkCmdExecuteCommands vkCmdFillBuffer vkCmdNextSubpass vkCmdNextSubpass2 vkCmdPipelineBarrier vkCmdPipelineBarrier2 vkCmdPushConstants vkCmdPushConstants2 vkCmdPushDescriptorSet vkCmdPushDescriptorSet2 vkCmdPushDescriptorSetWithTemplate vkCmdPushDescriptorSetWithTemplate2 vkCmdResetEvent vkCmdResetEvent2 vkCmdResetQueryPool vkCmdResolveImage vkCmdResolveImage2 vkCmdSetBlendConstants vkCmdSetCullMode vkCmdSetDepthBias vkCmdSetDepthBiasEnable vkCmdSetDepthBounds vkCmdSetDepthBoundsTestEnable vkCmdSetDepthCompareOp vkCmdSetDepthTestEnable vkCmdSetDepthWriteEnable vkCmdSetDeviceMask vkCmdSetEvent vkCmdSetEvent2 vkCmdSetFrontFace vkCmdSetLineStipple vkCmdSetLineWidth vkCmdSetPrimitiveRestartEnable vkCmdSetPrimitiveTopology vkCmdSetRasterizerDiscardEnable vkCmdSetRenderingAttachmentLocations vkCmdSetRenderingInputAttachmentIndices vkCmdSetScissor vkCmdSetScissorWithCount vkCmdSetStencilCompareMask vkCmdSetStencilOp vkCmdSetStencilReference vkCmdSetStencilTestEnable vkCmdSetStencilWriteMask vkCmdSetViewport vkCmdSetViewportWithCount vkCmdUpdateBuffer vkCmdWaitEvents vkCmdWaitEvents2 vkCmdWriteTimestamp vkCmdWriteTimestamp2 vkCopyImageToImage vkCopyImageToMemory vkCopyMemoryToImage vkCreateBuffer vkCreateBufferView vkCreateCommandPool vkCreateComputePipelines vkCreateDescriptorPool vkCreateDescriptorSetLayout vkCreateDescriptorUpdateTemplate vkCreateDevice vkCreateDisplayModeKHR vkCreateDisplayPlaneSurfaceKHR vkCreateEvent vkCreateFence vkCreateFramebuffer vkCreateGraphicsPipelines vkCreateHeadlessSurfaceEXT vkCreateImage vkCreateImageView vkCreateInstance vkCreatePipelineCache vkCreatePipelineLayout vkCreatePrivateDataSlot vkCreateQueryPool vkCreateRenderPass vkCreateRenderPass2 vkCreateSampler vkCreateSamplerYcbcrConversion vkCreateSemaphore vkCreateShaderModule vkCreateSharedSwapchainsKHR vkCreateSwapchainKHR vkCreateWin32SurfaceKHR vkDestroyBuffer vkDestroyBufferView vkDestroyCommandPool vkDestroyDescriptorPool vkDestroyDescriptorSetLayout vkDestroyDescriptorUpdateTemplate vkDestroyDevice vkDestroyEvent vkDestroyFence vkDestroyFramebuffer vkDestroyImage vkDestroyImageView vkDestroyInstance vkDestroyPipeline vkDestroyPipelineCache vkDestroyPipelineLayout vkDestroyPrivateDataSlot vkDestroyQueryPool vkDestroyRenderPass vkDestroySampler vkDestroySamplerYcbcrConversion vkDestroySemaphore vkDestroyShaderModule vkDestroySurfaceKHR vkDestroySwapchainKHR vkDeviceWaitIdle vkEndCommandBuffer vkEnumerateDeviceExtensionProperties vkEnumerateDeviceLayerProperties vkEnumerateInstanceExtensionProperties vkEnumerateInstanceLayerProperties vkEnumerateInstanceVersion vkEnumeratePhysicalDeviceGroups vkEnumeratePhysicalDevices vkFlushMappedMemoryRanges vkFreeCommandBuffers vkFreeDescriptorSets vkFreeMemory vkGetBufferDeviceAddress vkGetBufferMemoryRequirements vkGetBufferMemoryRequirements2 vkGetBufferOpaqueCaptureAddress vkGetDescriptorSetLayoutSupport vkGetDeviceBufferMemoryRequirements vkGetDeviceGroupPeerMemoryFeatures vkGetDeviceGroupPresentCapabilitiesKHR vkGetDeviceGroupSurfacePresentModesKHR vkGetDeviceImageMemoryRequirements vkGetDeviceImageSparseMemoryRequirements vkGetDeviceImageSubresourceLayout vkGetDeviceMemoryCommitment vkGetDeviceMemoryOpaqueCaptureAddress vkGetDeviceProcAddr vkGetDeviceQueue vkGetDeviceQueue2 vkGetDisplayModeProperties2KHR vkGetDisplayModePropertiesKHR vkGetDisplayPlaneCapabilities2KHR vkGetDisplayPlaneCapabilitiesKHR vkGetDisplayPlaneSupportedDisplaysKHR vkGetEventStatus vkGetFenceStatus vkGetImageMemoryRequirements vkGetImageMemoryRequirements2 vkGetImageSparseMemoryRequirements vkGetImageSparseMemoryRequirements2 vkGetImageSubresourceLayout vkGetImageSubresourceLayout2 vkGetInstanceProcAddr vkGetPhysicalDeviceDisplayPlaneProperties2KHR vkGetPhysicalDeviceDisplayPlanePropertiesKHR vkGetPhysicalDeviceDisplayProperties2KHR vkGetPhysicalDeviceDisplayPropertiesKHR vkGetPhysicalDeviceExternalBufferProperties vkGetPhysicalDeviceExternalFenceProperties vkGetPhysicalDeviceExternalSemaphoreProperties vkGetPhysicalDeviceFeatures vkGetPhysicalDeviceFeatures2 vkGetPhysicalDeviceFormatProperties vkGetPhysicalDeviceFormatProperties2 vkGetPhysicalDeviceImageFormatProperties vkGetPhysicalDeviceImageFormatProperties2 vkGetPhysicalDeviceMemoryProperties vkGetPhysicalDeviceMemoryProperties2 vkGetPhysicalDevicePresentRectanglesKHR vkGetPhysicalDeviceProperties vkGetPhysicalDeviceProperties2 vkGetPhysicalDeviceQueueFamilyProperties vkGetPhysicalDeviceQueueFamilyProperties2 vkGetPhysicalDeviceSparseImageFormatProperties vkGetPhysicalDeviceSparseImageFormatProperties2 vkGetPhysicalDeviceSurfaceCapabilities2KHR vkGetPhysicalDeviceSurfaceCapabilitiesKHR vkGetPhysicalDeviceSurfaceFormats2KHR vkGetPhysicalDeviceSurfaceFormatsKHR vkGetPhysicalDeviceSurfacePresentModesKHR vkGetPhysicalDeviceSurfaceSupportKHR vkGetPhysicalDeviceToolProperties vkGetPhysicalDeviceWin32PresentationSupportKHR vkGetPipelineCacheData vkGetPrivateData vkGetQueryPoolResults vkGetRenderAreaGranularity vkGetRenderingAreaGranularity vkGetSemaphoreCounterValue vkGetSwapchainImagesKHR vkInvalidateMappedMemoryRanges vkMapMemory vkMapMemory2 vkMergePipelineCaches vkQueueBindSparse vkQueuePresentKHR vkQueueSubmit vkQueueSubmit2 vkQueueWaitIdle vkResetCommandBuffer vkResetCommandPool vkResetDescriptorPool vkResetEvent vkResetFences vkResetQueryPool vkSetEvent vkSetPrivateData vkSignalSemaphore vkTransitionImageLayout vkTrimCommandPool vkUnmapMemory vkUnmapMemory2 vkUpdateDescriptorSetWithTemplate vkUpdateDescriptorSets vkWaitForFences vkWaitSemaphores

Name

.text

Size

613KB

Virtual Size

613KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

288KB

Virtual Size

288KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

8KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

27KB

Virtual Size

26KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

9B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

512B

Virtual Size

500B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

648B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Helium-bin/chrome.exe

IMPHASH d1eb1151d388cea5aa922e63bb323753
SHA256 3e43e3fed800023c2aab5c51978996eff007467cdaeaca3484d4a4e946db6d0a
MD5 3d1eb6f388b8b168939f3a40d2ecbf81
SHA1 be7b9f07c2fb3275db25a17500a63aeaa469d8ef
SHA512 7070a98a4d9c7aa8d9bda15f60bbe64a0d406c0ab8ed8cb12ffd133689083e120968425ea2d39d06e5cca56bacfc629d713be4b349fcd67013d4c90e16e96819
SSDEEP 49152:OCcE9Y4jIMbZkVRknUgLiQXfXPJMLHh+mKw4qJBwp79J/IWcWAIeOjswHhn:OcY+1nUgOQXffJM/Pg0u
TLSH
T1F1068C13F2D910D9C01DD579875A9233EA62BC454B31B6DF0A90B7122FBAEE06B3D724
MD5 SHA1 SHA512 SSDEEP TLSH

windows:10 windows x64 arch:x64

Digest

ae:59:cb:b2:03:ae:ae:4c:8c:e9:e9:78:37:4d:7a:4a:b2:8a:88:90:a3:40:ef:5c:4e:2e:3a:e1:4f:1f:13:a4

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=imput LLC,O=imput LLC,L=Sheridan,ST=Wyoming,C=US

Chains

Aug 15, 2026

CN=imput LLC,O=imput LLC,L=Sheridan,ST=Wyoming,C=US

CN=Microsoft ID Verified CS EOC CA 04,O=Microsoft Corporation,C=US

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Subject

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Serial Number

54:98:d2:d1:d4:5b:19:95:48:13:79:c8:11:c0:87:99

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 16, 2020 - Apr 16, 2045

Subject

CN=imput LLC,O=imput LLC,L=Sheridan,ST=Wyoming,C=US

Serial Number

33:00:04:52:5a:0d:fb:3f:01:c3:02:5d:b8:00:00:00:04:52:5a

Issuer

CN=Microsoft ID Verified CS EOC CA 04,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 14, 2026 - Aug 17, 2026

Subject

CN=Microsoft ID Verified CS EOC CA 04,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:17:27:45:09:0b:8b:87:af:c6:00:00:00:00:00:17

Issuer

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Mar 26, 2026 - Mar 26, 2031

Subject

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:07:87:a3:34:a3:7b:a5:8e:1c:00:00:00:00:00:07

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Apr 1, 2021 - Apr 1, 2036

Subject

CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 19, 2020 - Nov 19, 2035

Subject

CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft America Operations+OU=nShield TSS ESN:A500-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:56:7e:8f:9d:58:08:8e:e9:60:00:00:00:00:00:56

Issuer

CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 23, 2025 - Oct 22, 2026

Minor OS version

0

Major OS version

10

Entry point

1871424

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

chrome.exe.pdb

chrome_elf

GetInstallDetailsPayload IsBrowserProcess IsExtensionPointDisableSet SignalChromeElf SignalInitializeCrashReporting

kernel32

AcquireSRWLockExclusive AddVectoredExceptionHandler CloseHandle CompareStringW ConnectNamedPipe CreateDirectoryW CreateEventW CreateFileMappingW CreateFileW CreateIoCompletionPort CreateJobObjectW CreateMutexW CreateNamedPipeW CreateProcessW CreateRemoteThread CreateSemaphoreW CreateThread DebugBreak DeleteCriticalSection DeleteFileW DeleteProcThreadAttributeList DisconnectNamedPipe DuplicateHandle EncodePointer EnterCriticalSection EnumSystemLocalesEx EnumSystemLocalesW ExitProcess ExpandEnvironmentStringsW FileTimeToSystemTime FindClose FindFirstFileExW FindFirstFileW FindNextFileW FlsAlloc FlsFree FlsGetValue FlsSetValue FlushFileBuffers FlushViewOfFile FormatMessageA FormatMessageW FreeEnvironmentStringsW FreeLibrary GetACP GetCPInfo GetCommandLineA GetCommandLineW GetComputerNameExW GetConsoleMode GetConsoleOutputCP GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentProcessorNumber GetCurrentThread GetCurrentThreadId GetDateFormatW GetDriveTypeW GetEnvironmentStringsW GetEnvironmentVariableW GetExitCodeProcess GetFileAttributesW GetFileInformationByHandle GetFileInformationByHandleEx GetFileSizeEx GetFileTime GetFileType GetFullPathNameW GetLastError GetLocalTime GetLocaleInfoW GetLogicalProcessorInformation GetLongPathNameW GetModuleFileNameW GetModuleHandleA GetModuleHandleExW GetModuleHandleW GetNativeSystemInfo GetOEMCP GetProcAddress GetProcessHandleCount GetProcessHeap GetProcessHeaps GetProcessId GetProcessMitigationPolicy GetProcessTimes GetProductInfo GetQueuedCompletionStatus GetStartupInfoW GetStdHandle GetStringTypeW GetSystemDefaultLCID GetSystemDirectoryW GetSystemInfo GetSystemTimeAsFileTime GetTempPathW GetThreadContext GetThreadId GetThreadLocale GetThreadPriority GetThreadPriorityBoost GetTickCount GetTimeFormatW GetTimeZoneInformation GetUserDefaultLCID GetUserDefaultLangID GetUserDefaultLocaleName GetVersionExW GetWindowsDirectoryW GlobalMemoryStatusEx HeapDestroy HeapLock HeapSetInformation HeapUnlock HeapWalk InitOnceExecuteOnce InitializeConditionVariable InitializeCriticalSection InitializeCriticalSectionAndSpinCount InitializeCriticalSectionEx InitializeProcThreadAttributeList InitializeSListHead InitializeSRWLock IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage IsValidLocale IsWow64Process K32GetModuleInformation K32GetPerformanceInfo K32GetProcessMemoryInfo K32QueryWorkingSetEx LCMapStringW LeaveCriticalSection LoadLibraryExA LoadLibraryExW LoadLibraryW LocalFree LockFileEx MapViewOfFile MoveFileW MultiByteToWideChar OpenProcess OutputDebugStringA PeekNamedPipe PostQueuedCompletionStatus PrefetchVirtualMemory QueryInformationJobObject QueryPerformanceCounter QueryPerformanceFrequency QueryThreadCycleTime RaiseException ReadConsoleW ReadFile ReadProcessMemory RegisterWaitForSingleObject ReleaseMutex ReleaseSRWLockExclusive ReleaseSemaphore RemoveDirectoryW RemoveVectoredExceptionHandler ReplaceFileW ResetEvent ResumeThread RtlCaptureContext RtlCaptureStackBackTrace RtlLookupFunctionEntry RtlPcToFileHeader RtlUnwind RtlUnwindEx RtlVirtualUnwind SetConsoleCtrlHandler SetCurrentDirectoryW SetDefaultDllDirectories SetEndOfFile SetEnvironmentVariableW SetEvent SetFileAttributesW SetFileInformationByHandle SetFilePointerEx SetHandleInformation SetInformationJobObject SetLastError SetNamedPipeHandleState SetProcessMitigationPolicy SetProcessShutdownParameters SetStdHandle SetThreadAffinityMask SetThreadInformation SetThreadPriority SetThreadPriorityBoost SetUnhandledExceptionFilter Sleep SleepConditionVariableSRW SleepEx SuspendThread SwitchToThread SystemTimeToTzSpecificLocalTime TerminateJobObject TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue TransactNamedPipe TryAcquireSRWLockExclusive UnhandledExceptionFilter UnlockFileEx UnmapViewOfFile UnregisterWaitEx UpdateProcThreadAttribute VerSetConditionMask VerifyVersionInfoW VirtualAlloc VirtualAllocEx VirtualFree VirtualFreeEx VirtualProtect VirtualProtectEx VirtualQuery VirtualQueryEx WaitForMultipleObjects WaitForSingleObject WaitNamedPipeW WakeAllConditionVariable WakeConditionVariable WideCharToMultiByte Wow64GetThreadContext WriteConsoleW WriteFile WriteProcessMemory

ntdll

NtQueryInformationProcess RtlInitUnicodeString

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

Name

.text

Size

3.0MB

Virtual Size

3.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

350KB

Virtual Size

349KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

73KB

Virtual Size

144KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

78KB

Virtual Size

77KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

1024B

Virtual Size

721B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

CPADinfo

Size

512B

Virtual Size

56B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

512B

Virtual Size

500B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

malloc_h

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

165KB

Virtual Size

165KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Helium-bin/chrome_proxy.exe

IMPHASH e1eedbc7baeca41e629b63827e6e2466
SHA256 268793a792e363413c958eaae932044f920f4277f489c737fc6d2ff922d22c11
MD5 0b2a71abbd8ded16f58bc0a77212db6c
SHA1 5f46c60c9d5e95b6cffa2ade9c9f12baeb68dff8
SHA512 c9f46c7ab56294e5609278dee43bf7b96668c3dcefed9ae697a658a0532acc2412961be75ff9077c6f26c013de348b2d7967ff3c20258bfde5b148b8e564dee2
SSDEEP 49152:66OJP5k/zclabUTdBRstU9sZ1wPb36g9DTzqB9:sP5k/olTlB3hfqB9
TLSH
T117C57C13F2D911D8C01ED1788B4A9632FB61BC454B35B6EF0A90B6561F7AEE45B3E320
MD5 SHA1 SHA512 SSDEEP TLSH

windows:10 windows x64 arch:x64

Digest

46:64:73:a3:c1:2d:60:36:b7:37:f2:2d:74:28:68:f7:e5:aa:c2:fc:9b:5d:15:22:5e:0d:83:27:43:bf:67:f1

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=imput LLC,O=imput LLC,L=Sheridan,ST=Wyoming,C=US

Chains

Aug 15, 2026

CN=imput LLC,O=imput LLC,L=Sheridan,ST=Wyoming,C=US

CN=Microsoft ID Verified CS EOC CA 04,O=Microsoft Corporation,C=US

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Subject

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Serial Number

54:98:d2:d1:d4:5b:19:95:48:13:79:c8:11:c0:87:99

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 16, 2020 - Apr 16, 2045

Subject

CN=imput LLC,O=imput LLC,L=Sheridan,ST=Wyoming,C=US

Serial Number

33:00:04:52:5a:0d:fb:3f:01:c3:02:5d:b8:00:00:00:04:52:5a

Issuer

CN=Microsoft ID Verified CS EOC CA 04,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 14, 2026 - Aug 17, 2026

Subject

CN=Microsoft ID Verified CS EOC CA 04,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:17:27:45:09:0b:8b:87:af:c6:00:00:00:00:00:17

Issuer

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Mar 26, 2026 - Mar 26, 2031

Subject

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:07:87:a3:34:a3:7b:a5:8e:1c:00:00:00:00:00:07

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Apr 1, 2021 - Apr 1, 2036

Subject

CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 19, 2020 - Nov 19, 2035

Subject

CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft America Operations+OU=nShield TSS ESN:7800-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:57:24:d3:95:e0:a2:e9:c9:31:00:00:00:00:00:57

Issuer

CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 23, 2025 - Oct 22, 2026

Minor OS version

0

Major OS version

10

Entry point

1262128

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

chrome_proxy.exe.pdb

advapi32

CreateProcessAsUserW RegCloseKey RegOpenKeyExW RegQueryValueExW

dbghelp

SymCleanup SymFromAddr SymGetLineFromAddr64 SymGetModuleInfo64 SymGetSearchPathW SymInitialize SymSetOptions SymSetSearchPathW

kernel32

AcquireSRWLockExclusive AssignProcessToJobObject CloseHandle CompareStringW CreateEventW CreateFileW CreateIoCompletionPort CreateProcessW CreateThread DeleteCriticalSection DeleteFileW DeleteProcThreadAttributeList DuplicateHandle EncodePointer EnterCriticalSection EnumSystemLocalesW ExitProcess ExpandEnvironmentStringsW FindClose FindFirstFileExW FindNextFileW FlsAlloc FlsFree FlsGetValue FlsSetValue FlushFileBuffers FormatMessageW FreeEnvironmentStringsW FreeLibrary GetACP GetCPInfo GetCommandLineA GetCommandLineW GetConsoleMode GetConsoleOutputCP GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetDateFormatW GetDriveTypeW GetEnvironmentStringsW GetEnvironmentVariableW GetExitCodeProcess GetFileAttributesW GetFileSizeEx GetFileType GetFullPathNameW GetLastError GetLocalTime GetLocaleInfoW GetLogicalProcessorInformation GetModuleFileNameW GetModuleHandleA GetModuleHandleExW GetModuleHandleW GetNativeSystemInfo GetOEMCP GetProcAddress GetProcessHeap GetProcessId GetProductInfo GetQueuedCompletionStatus GetStartupInfoW GetStdHandle GetStringTypeW GetSystemDirectoryW GetSystemInfo GetSystemTimeAsFileTime GetTempPathW GetThreadContext GetThreadId GetThreadPriority GetThreadPriorityBoost GetTickCount GetTimeFormatW GetTimeZoneInformation GetUserDefaultLCID GetVersionExW GetWindowsDirectoryW GlobalMemoryStatusEx InitOnceExecuteOnce InitializeConditionVariable InitializeCriticalSection InitializeCriticalSectionAndSpinCount InitializeCriticalSectionEx InitializeProcThreadAttributeList InitializeSListHead InitializeSRWLock IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage IsValidLocale IsWow64Process K32GetModuleInformation LCMapStringW LeaveCriticalSection LoadLibraryExA LoadLibraryExW LoadLibraryW LocalFree MultiByteToWideChar OutputDebugStringA PostQueuedCompletionStatus QueryPerformanceCounter QueryPerformanceFrequency QueryThreadCycleTime RaiseException ReadConsoleW ReadFile ReleaseSRWLockExclusive ResetEvent ResumeThread RtlCaptureContext RtlCaptureStackBackTrace RtlLookupFunctionEntry RtlPcToFileHeader RtlUnwind RtlUnwindEx RtlVirtualUnwind SetEndOfFile SetEnvironmentVariableW SetEvent SetFilePointerEx SetHandleInformation SetInformationJobObject SetLastError SetStdHandle SetThreadInformation SetThreadPriority SetThreadPriorityBoost SetUnhandledExceptionFilter Sleep SleepConditionVariableSRW SuspendThread SwitchToThread TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue TryAcquireSRWLockExclusive UnhandledExceptionFilter UnmapViewOfFile UnregisterWaitEx UpdateProcThreadAttribute VirtualAlloc VirtualFree VirtualProtect VirtualQuery WaitForMultipleObjects WaitForSingleObject WakeAllConditionVariable WakeConditionVariable WideCharToMultiByte WriteConsoleW WriteFile

userenv

CreateEnvironmentBlock DestroyEnvironmentBlock

user32

AllowSetForegroundWindow CreateWindowExW DefWindowProcW DestroyWindow DispatchMessageW GetActiveWindow GetQueueStatus KillTimer MsgWaitForMultipleObjectsEx PeekMessageW PostMessageW PostQuitMessage RegisterClassExW SetTimer TranslateMessage UnregisterClassW

shell32

CommandLineToArgvW SHGetFolderPathW SHGetKnownFolderPath ShellExecuteExW

winmm

timeBeginPeriod timeEndPeriod timeGetTime

ole32

CoInitializeEx CoRegisterInitializeSpy CoRevokeInitializeSpy CoTaskMemFree CoUninitialize

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

api-ms-win-core-winrt-l1-1-0

RoInitialize RoUninitialize

Name

.text

Size

2.0MB

Virtual Size

2.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

276KB

Virtual Size

275KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

70KB

Virtual Size

197KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

62KB

Virtual Size

61KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

1024B

Virtual Size

705B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

512B

Virtual Size

500B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

malloc_h

Size

512B

Virtual Size

265B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

$TEMP/helium_install/setup.exe

IMPHASH 1b13ab42ed4248159baec28e2c3b9693
SHA256 c69edb34a72da0d3854a953161f6e6334621ad91778760134a6a90e0baab51b4
MD5 9bfe135fb72520a69105e7602a729d9b
SHA1 50a2f9348e1029f0791dcb352f6ec6390f274ed4
SHA512 32f386b811892a157cad50b87c8f5979a6f3dc709b5a6e4eb73c064a6698d43b393cccdd3e4ffc224171db783a4a967a3a83ae182e5c9f673e123309ee4098a5
SSDEEP 49152:4CgiEe6qSSzGB6zR7x0nsToAi0dY534vQga10pWyY8u9v6yFcA2M28AR4fidjtP4:OPGUnX4EIXpIyey5LG6w9
TLSH
T19B465B53F2A511E8D06EC974CF6D91229A257C8A47F1A3EF29D436E11A31ED47B3CB20
MD5 SHA1 SHA512 SSDEEP TLSH

windows:10 windows x64 arch:x64

Digest

50:32:15:c7:2c:72:99:59:c2:66:5d:cb:3f:e8:14:de:21:8f:ee:bc:c3:35:06:96:e0:82:e5:10:aa:db:e2:3d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=imput LLC,O=imput LLC,L=Sheridan,ST=Wyoming,C=US

Chains

Aug 15, 2026

CN=imput LLC,O=imput LLC,L=Sheridan,ST=Wyoming,C=US

CN=Microsoft ID Verified CS EOC CA 04,O=Microsoft Corporation,C=US

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Subject

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Serial Number

54:98:d2:d1:d4:5b:19:95:48:13:79:c8:11:c0:87:99

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 16, 2020 - Apr 16, 2045

Subject

CN=imput LLC,O=imput LLC,L=Sheridan,ST=Wyoming,C=US

Serial Number

33:00:04:52:5a:0d:fb:3f:01:c3:02:5d:b8:00:00:00:04:52:5a

Issuer

CN=Microsoft ID Verified CS EOC CA 04,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 14, 2026 - Aug 17, 2026

Subject

CN=Microsoft ID Verified CS EOC CA 04,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:17:27:45:09:0b:8b:87:af:c6:00:00:00:00:00:17

Issuer

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Mar 26, 2026 - Mar 26, 2031

Subject

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:07:87:a3:34:a3:7b:a5:8e:1c:00:00:00:00:00:07

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Apr 1, 2021 - Apr 1, 2036

Subject

CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 19, 2020 - Nov 19, 2035

Subject

CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft America Operations+OU=nShield TSS ESN:A500-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:56:7e:8f:9d:58:08:8e:e9:60:00:00:00:00:00:56

Issuer

CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 23, 2025 - Oct 22, 2026

Minor OS version

0

Major OS version

10

Entry point

3063952

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

setup.exe.pdb

advapi32

AdjustTokenPrivileges BuildExplicitAccessWithNameW BuildSecurityDescriptorW BuildTrusteeWithSidW ChangeServiceConfig2W ChangeServiceConfigW CheckTokenMembership CloseServiceHandle ConvertSidToStringSidW ConvertStringSecurityDescriptorToSecurityDescriptorW ConvertStringSidToSidW CreateProcessAsUserW CreateProcessWithTokenW CreateServiceW CreateWellKnownSid DeleteService DuplicateTokenEx GetLengthSid GetNamedSecurityInfoW GetSecurityDescriptorControl GetSecurityDescriptorDacl GetSecurityDescriptorGroup GetSecurityDescriptorOwner GetSecurityDescriptorSacl GetSidSubAuthority GetSidSubAuthorityCount GetTokenInformation GetTraceEnableFlags GetTraceEnableLevel GetTraceLoggerHandle GetUserNameW ImpersonateNamedPipeClient IsValidAcl IsValidSecurityDescriptor IsValidSid LookupPrivilegeValueW OpenProcessToken OpenSCManagerW OpenServiceW QueryServiceConfigW RegCloseKey RegCreateKeyExW RegDeleteKeyExW RegDeleteValueW RegEnumKeyExW RegEnumValueW RegLoadKeyW RegOpenKeyExW RegQueryInfoKeyW RegQueryValueExA RegQueryValueExW RegSetValueExW RegUnLoadKeyW RegisterTraceGuidsW RevertToSelf SetEntriesInAclW SetNamedSecurityInfoW SetSecurityInfo TraceEvent UnregisterTraceGuids

dbghelp

SymCleanup SymFromAddr SymGetLineFromAddr64 SymGetModuleInfo64 SymGetSearchPathW SymInitialize SymSetOptions SymSetSearchPathW

oleaut32

SysAllocString SysAllocStringLen SysFreeString SysStringLen VariantClear VariantInit

shell32

CommandLineToArgvW ord190 ord155 ord680 SHChangeNotify SHCreateAssociationRegistration SHGetFolderPathW SHGetKnownFolderPath ShellExecuteExW ShellExecuteW

user32

AllowSetForegroundWindow CallNextHookEx CharUpperW CreateWindowExW DefWindowProcW DestroyWindow DispatchMessageW GetActiveWindow GetMessageW GetMonitorInfoW GetQueueStatus GetShellWindow GetWindowLongPtrW GetWindowThreadProcessId KillTimer LoadIconW MessageBoxW MonitorFromWindow MoveWindow MsgWaitForMultipleObjectsEx PeekMessageW PostMessageW PostQuitMessage RegisterClassExW RegisterClassW SendMessageW SetForegroundWindow SetTimer SetWindowLongPtrW SetWindowsHookExW TranslateMessage UnhookWindowsHookEx UnregisterClassW

kernel32

AcquireSRWLockExclusive AddVectoredExceptionHandler AssignProcessToJobObject CloseHandle CompareStringW ConnectNamedPipe CopyFileW CreateDirectoryW CreateEventW CreateFileMappingW CreateFileW CreateIoCompletionPort CreateMutexW CreateNamedPipeW CreateProcessW CreateSemaphoreW CreateThread CreateToolhelp32Snapshot DeleteCriticalSection DeleteFileW DeleteProcThreadAttributeList DeviceIoControl DiscardVirtualMemory DisconnectNamedPipe DuplicateHandle EncodePointer EnterCriticalSection EnumSystemLocalesW ExitProcess ExpandEnvironmentStringsW FileTimeToSystemTime FindClose FindFirstFileExW FindFirstFileW FindNextFileW FindResourceW FlsAlloc FlsFree FlsGetValue FlsSetValue FlushFileBuffers FlushViewOfFile FormatMessageA FormatMessageW FreeEnvironmentStringsW FreeLibrary GetACP GetCPInfo GetCommandLineA GetCommandLineW GetConsoleMode GetConsoleOutputCP GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetDateFormatW GetDriveTypeW GetEnvironmentStringsW GetEnvironmentVariableW GetExitCodeProcess GetFileAttributesExW GetFileAttributesW GetFileInformationByHandle GetFileInformationByHandleEx GetFileSizeEx GetFileTime GetFileType GetFullPathNameW GetLastError GetLocalTime GetLocaleInfoW GetLogicalProcessorInformation GetLongPathNameW GetModuleFileNameW GetModuleHandleA GetModuleHandleExW GetModuleHandleW GetNativeSystemInfo GetOEMCP GetPriorityClass GetProcAddress GetProcessHandleCount GetProcessHeap GetProcessId GetProcessMitigationPolicy GetProcessTimes GetProductInfo GetQueuedCompletionStatus GetShortPathNameW GetStartupInfoW GetStdHandle GetStringTypeW GetSystemDefaultLCID GetSystemDirectoryW GetSystemInfo GetSystemTimeAsFileTime GetSystemTimePreciseAsFileTime GetTempPathW GetThreadContext GetThreadId GetThreadLocale GetThreadPreferredUILanguages GetThreadPriority GetThreadPriorityBoost GetTickCount GetTimeFormatW GetTimeZoneInformation GetUserDefaultLCID GetUserDefaultLangID GetVersionExW GetWindowsDirectoryW GlobalMemoryStatusEx HeapFree HeapLock HeapSetInformation HeapUnlock HeapWalk InitOnceExecuteOnce InitializeConditionVariable InitializeCriticalSection InitializeCriticalSectionAndSpinCount InitializeCriticalSectionEx InitializeProcThreadAttributeList InitializeSListHead InitializeSRWLock IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage IsValidLocale IsWow64Process K32GetModuleInformation K32GetPerformanceInfo K32GetProcessMemoryInfo K32QueryWorkingSetEx LCMapStringW LeaveCriticalSection LoadLibraryExA LoadLibraryExW LoadLibraryW LoadResource LocalFree LockFileEx LockResource MapViewOfFile MoveFileExW MoveFileW MultiByteToWideChar OpenMutexW OpenProcess OutputDebugStringA PeekNamedPipe PostQueuedCompletionStatus Process32FirstW Process32NextW QueryFullProcessImageNameW QueryPerformanceCounter QueryPerformanceFrequency QueryThreadCycleTime QueueUserAPC RaiseException ReadConsoleW ReadDirectoryChangesW ReadFile ReadProcessMemory RegisterWaitForSingleObject ReleaseMutex ReleaseSRWLockExclusive ReleaseSemaphore RemoveDirectoryW RemoveVectoredExceptionHandler ReplaceFileW ResetEvent ResumeThread RtlCaptureContext RtlCaptureStackBackTrace RtlLookupFunctionEntry RtlPcToFileHeader RtlUnwind RtlUnwindEx RtlVirtualUnwind SetConsoleCtrlHandler SetCurrentDirectoryW SetEndOfFile SetEnvironmentVariableW SetEvent SetFileAttributesW SetFileInformationByHandle SetFilePointerEx SetFileTime SetHandleInformation SetInformationJobObject SetLastError SetNamedPipeHandleState SetPriorityClass SetProcessShutdownParameters SetStdHandle SetThreadInformation SetThreadPriority SetThreadPriorityBoost SetUnhandledExceptionFilter SizeofResource Sleep SleepConditionVariableSRW SleepEx SuspendThread SwitchToThread SystemTimeToTzSpecificLocalTime TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue TransactNamedPipe TryAcquireSRWLockExclusive UnhandledExceptionFilter UnlockFileEx UnmapViewOfFile UnregisterWaitEx UpdateProcThreadAttribute VerSetConditionMask VerifyVersionInfoW VirtualAlloc VirtualAllocEx VirtualFree VirtualProtect VirtualQuery VirtualQueryEx WaitForMultipleObjects WaitForSingleObject WaitNamedPipeW WakeAllConditionVariable WakeConditionVariable WerRegisterRuntimeExceptionModule WideCharToMultiByte Wow64GetThreadContext WriteConsoleW WriteFile WriteProcessMemory

winhttp

WinHttpAddRequestHeaders WinHttpCloseHandle WinHttpConnect WinHttpCrackUrl WinHttpOpen WinHttpOpenRequest WinHttpQueryHeaders WinHttpReadData WinHttpReceiveResponse WinHttpSendRequest WinHttpSetTimeouts WinHttpWriteData

ole32

CoCreateInstance CoInitializeEx CoRegisterInitializeSpy CoRevokeInitializeSpy CoTaskMemAlloc CoTaskMemFree CoUninitialize PropVariantClear

propsys

InitPropVariantFromCLSID

shlwapi

ord437 PathMatchSpecW UrlCanonicalizeW

ntdll

NtDeleteKey

winmm

timeBeginPeriod timeEndPeriod timeGetTime

userenv

CreateEnvironmentBlock DestroyEnvironmentBlock

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

urlmon

CreateURLMonikerEx

api-ms-win-core-winrt-l1-1-0

RoActivateInstance RoInitialize RoUninitialize

api-ms-win-core-winrt-string-l1-1-0

WindowsCreateStringReference WindowsDeleteString WindowsGetStringRawBuffer

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

Name

.text

Size

4.4MB

Virtual Size

4.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

574KB

Virtual Size

574KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

76KB

Virtual Size

233KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

107KB

Virtual Size

106KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rodata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.tls

Size

1024B

Virtual Size

753B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

CPADinfo

Size

512B

Virtual Size

56B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

LZMADEC

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

500B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

malloc_h

Size

512B

Virtual Size

265B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

332KB

Virtual Size

332KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

13KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

Errors

General

Malware Config

Signatures

File Explorer