Buff Achievement Tracker - Installer[.]exe

resource	yara_rule
static1/unpack001/$PLUGINSDIR/nsis7z.dll	acprotect

resource	yara_rule
static1/unpack001/$PLUGINSDIR/nsis7z.dll	upx

resource
unpack001/$PLUGINSDIR/Microsoft.Win32.TaskScheduler.dll

Buff Achievement Tracker - Installer.exe

IMPHASH 56a78d55f3f7af51443e58e0ce2fb5f6
SHA256 7ca7cce436ffb6d06b4abc26014f03a56f77c29d28c3b28dde7a97bd6847bc2e
MD5 2034304df96b2a84252120a634351ee2
SHA1 94c9ecd435c4d9bfbb88c2e49c3634288cb5a9c2
SHA512 cd2b8086fc74988447d46c9832378aed3894db8840f4c67730d9a4964f2191cfd73403388863ce7511dbaec8eb9505ecfafbd692d01054192cfd27794825d4a4
SSDEEP 49152:R3tmlOCxE87vxpsrFpIvQV0aiF4hkssJYxXuGIw3UhsooAFhR8MbYHzcYxk0:RdmlOkPN+TIv6a4hTzxuGrkhsbc8MbYp
TLSH
T135D53371837CA177EB1295B1B9B486ABE157CC07932B4E6AFB84AC503405AD3734F839
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Password

infected

Digest

e0:31:4e:04:58:db:4a:69:f7:a4:cc:23:f0:8b:54:b4:88:93:80:d2:ae:61:d3:69:95:5f:a6:58:3b:f0:30:a0

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=514330331,CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302494c

Chains

Sep 3, 2026

SERIALNUMBER=514330331,CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302494c

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=514330331,CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302494c

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2013 - Jan 15, 2038

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

SERIALNUMBER=514330331,CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302494c

Serial Number

0e:1a:ed:a4:6f:ce:b4:43:ec:ff:d1:b5:46:ed:28:fa

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 19, 2026 - May 10, 2029

Subject

CN=Dummy certificate

Serial Number

01

Issuer

CN=Unknown issuer

Key Usages

KeyUsageCertSign

Ext Key Usages

Timespan

Jan 1, 2013 - Apr 1, 2013

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

13613

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCreateKeyExW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken SetFileSecurityW RegOpenKeyExW RegEnumValueW

shell32

SHGetSpecialFolderLocation SHFileOperationW SHBrowseForFolderW SHGetPathFromIDListW ShellExecuteExW SHGetFileInfoW

ole32

OleInitialize OleUninitialize CoCreateInstance IIDFromString CoTaskMemFree

comctl32

ord17 ImageList_Create ImageList_Destroy ImageList_AddMasked

user32

GetClientRect EndPaint DrawTextW IsWindowEnabled DispatchMessageW wsprintfA CharNextA CharPrevW MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW GetSystemMetrics FillRect AppendMenuW TrackPopupMenu OpenClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetSysColor SetWindowPos GetWindowLongW PeekMessageW SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint EmptyClipboard CreatePopupMenu

gdi32

SetBkMode SetBkColor GetDeviceCaps CreateFontIndirectW CreateBrushIndirect DeleteObject SetTextColor SelectObject

kernel32

GetExitCodeProcess WaitForSingleObject GetModuleHandleA GetProcAddress GetSystemDirectoryW lstrcatW Sleep lstrcpyA WriteFile GetTempFileNameW CreateFileW lstrcmpiA RemoveDirectoryW CreateProcessW CreateDirectoryW GetLastError CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersionExW GetCommandLineW GetTempPathW GetWindowsDirectoryW SetEnvironmentVariableW CopyFileW ExitProcess GetCurrentProcess GetModuleFileNameW GetFileSize GetTickCount MulDiv SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW MoveFileExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW

$PLUGINSDIR/CommandLine.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 569307401b949368527b128155b4e16b349803ec7d65c1052cc23c7b7a1336d8
MD5 210472e9e333d3329072c9ea3ef06326
SHA1 298c5473a79ab2c34d1ef05a75cbdd04905c822a
SHA512 c0f41486e8e7a8178322bd1fcd37fe645e4a23041e0aa84d3571b8031e2d1881029aeac1b4a554aa2f6a4f1b57d23a063872fcc72a04984fbaec2bfd12fd4b01
SSDEEP 1536:/Zj9JT17qpL/6ePMqBNzrstoJSkrjbgbwziM3hwW:/x9JT17WPMqBNWAkbwzibW
TLSH
T1C953292193EC472BD6FF0BB9B47462610BB5FF86B523E36E8D49A09A1853F4144613B3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Password

infected

Digest

c4:bf:69:a7:49:b7:36:1a:42:33:23:37:55:f1:07:a4:20:71:2e:f4:5c:b0:07:6b:66:62:b2:98:fd:b4:db:a8

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Chains

Sep 6, 2022

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Serial Number

0e:e0:0d:4b:1a:48:0c:a8:70:01:b5:40:80:63:da:71

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 27, 2020 - Mar 3, 2023

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

4

Entry point

60874

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

G:\src\commandline\src\libcmdline\obj\Release\CommandLine.pdb

$PLUGINSDIR/DotNetZip.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 6c512d9943a225d686b26fc832589e4c8bef7c4dd0a8bdfd557d5d27fe5bba0f
MD5 190e712f2e3b065ba3d5f63cb9b7725e
SHA1 75c1c8dd93c7c8a4b3719bb77c6e1d1a1620ae12
SHA512 2b4898d2d6982917612d04442807bd58c37739b2e4b302c94f41e03e685e24b9183b12de2057b3b303483698ad95e3a37795e6eb6d2d3b71e332b59deeca7d02
SSDEEP 6144:GuCInHLhJI4FY/ixjci6ychf8xalGQGtSV41kJDsTDDpBnse6OVxLV/Wo0k:UQL32ikCaUS4csRBse6sfWNk
TLSH
T10FA4AE0427EC4B57E1EF5BB5E0B295A2C3B1B462693EEB8F5C4024EE2D17350D911BA3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Password

infected

Digest

13:8b:f6:d8:5e:11:a7:7d:99:23:3f:a2:cf:77:74:08:78:12:2e:73:c4:3d:bf:8e:a7:85:e5:13:b1:43:8d:6a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Chains

Nov 30, 2021

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Serial Number

0e:e0:0d:4b:1a:48:0c:a8:70:01:b5:40:80:63:da:71

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 27, 2020 - Mar 3, 2023

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

4

Entry point

465934

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\projects\dotnetzip-semverd\src\Zip\obj\Release\DotNetZip.pdb

$PLUGINSDIR/INetC.dll

IMPHASH 735e27ae3d7df8c0487e4353d04f6f28
SHA256 0ecf8b76a413726d2a9c10213ad6e406211330e9e79cfde5024968eedc64a750
MD5 87050902acf23fa5aa6d6aa61703db97
SHA1 d5555e17151540095a8681cd892b79bce8246832
SHA512 d75d3fc84a61887ee63bad3e5e38f6df32446fd5c17bedce3edca785030b723b13134b09a9bbbbaca86d5ea07405b8c4afd524cc156a8c1d78f044a22dee9eab
SSDEEP 384:5v1j9e9dEs+rN+qFLAjNXT37vYnOrvFhSL+ZwcSyekzANZBJbIYiPWMirgAM+o/o:51AvEs3HBLzYn29vYhkYiPoEAMxkE1e
TLSH
T1E6F22A9247E51A4AEBB29F3075B4EB3649BBBC525C61C8CF5237528D0672342EA34337
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Password

infected

Digest

c5:27:e8:0b:91:0a:23:9e:ef:1d:b7:48:fd:9e:2e:d8:27:6d:4f:96:c3:f7:ca:e9:b2:1d:0b:71:a4:59:12:b3

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Chains

Aug 27, 2024

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Serial Number

0d:ac:c0:f7:43:c7:9d:8a:64:64:dc:96:7a:f3:b0:39

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jan 27, 2023 - Mar 3, 2026

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

17741

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

GetProcAddress LocalFree WideCharToMultiByte TerminateThread lstrcpyW LoadLibraryA CreateThread WaitForSingleObject LocalAlloc lstrcpynW SleepEx MulDiv GetModuleHandleW ReadFile GetLastError CreateFileW lstrcmpiW CreateFileA lstrcatW GetFileSize SetFilePointer lstrcmpW MultiByteToWideChar lstrlenA WriteFile lstrlenW CloseHandle GlobalAlloc GlobalFree GetTickCount DeleteFileW

user32

GetDlgItem DestroyWindow GetClientRect MessageBoxW wsprintfA SystemParametersInfoW GetWindowTextW GetWindowLongW FindWindowExW IsWindow CreateDialogParamW GetParent ShowWindow KillTimer DispatchMessageW LoadIconW PostMessageW IsDialogMessageW GetMessageW SetWindowPos SendDlgItemMessageW SetWindowTextW TranslateMessage GetWindowRect RedrawWindow SetTimer EnableWindow UpdateWindow SetWindowLongW wsprintfW SendMessageW SetDlgItemTextW IsWindowVisible

comctl32

ord17

wininet

InternetConnectW HttpOpenRequestW InternetQueryOptionW InternetErrorDlg HttpSendRequestExW InternetWriteFile HttpSendRequestW InternetSetFilePointer HttpAddRequestHeadersA FtpCreateDirectoryW InternetCrackUrlW FtpOpenFileW InternetSetOptionW InternetOpenW InternetGetLastResponseInfoW HttpEndRequestW InternetReadFile HttpAddRequestHeadersW InternetCloseHandle HttpQueryInfoW

$PLUGINSDIR/Microsoft.Web.WebView2.Core.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 11e88b2ca921e5c88f64567f11bd83cbc396c10365d40972f3359fcc7965d197
MD5 b037ca44fd19b8eedb6d5b9de3e48469
SHA1 1f328389c62cf673b3de97e1869c139d2543494e
SHA512 fa89ab3347fd57486cf3064ad164574f70e2c2b77c382785479bfd5ab50caa0881de3c2763a0932feac2faaf09479ef699a04ba202866dc7e92640246ba9598b
SSDEEP 12288:6CxswUBor35JrpQ322zy+uFKcDoRFNCMmeA+imQ269pRFZNIEJdIEY0lxEIPrEIE:6Cbmv
TLSH
T15BC4402123FD8A1AE6F63BB5A57407709BFAFC967979D39D0598251C0D72B408AE0333
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Password

infected

Digest

82:16:92:aa:f3:86:85:a1:7b:d7:76:7c:40:f5:23:05:fa:60:5b:ab:ec:81:76:94:51:f3:c2:32:7f:d4:70:40

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 11, 2024

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:a4:cb:e3:56:b8:cb:7f:e4:27:00:00:00:00:03:a4

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Oct 19, 2023 - Oct 16, 2024

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:86DF-4BBC-9335,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:dd:5d:57:1d:95:d4:ad:aa:1b:00:01:00:00:01:dd

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 12, 2023 - Jan 10, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

566578

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\third_party\edge_webview2\win\webview2_api_writer\dotNetAPIWrapper\Microsoft.Web.WebView2.Core\bin\ReleasePackage\Microsoft.Web.WebView2.Core.pdb

$PLUGINSDIR/Microsoft.Web.WebView2.WinForms.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 e4f695b72f99024e3ee5d5f26a367e664f4e120bd5d90aa87a8bc0509c365ec8
MD5 c7000faa6c6040188c8cd8ef28b6deda
SHA1 07a23c50092e5c1fd9c9df87e26b65df25d37b24
SHA512 eaee01031477454823974546055965df8d75c5115b25ab07b15ca608a20e8c21154ebb8c707a74213ebad04c2bf34a5f5563306e6da502235372c60672144022
SSDEEP 768:sijOv/1uokD/iyUdcIJtYZDgcEST3p4Jjrjh2jJFSUyauTv1JKia5/Zi/WGQK4uC:jOvZyUjJtYZDgcEST3p4JjrjaJFSUyaf
TLSH
T170036C0083AC8527E6EFAF78B5B481610A7A7E837A61D75D1C85F0EA0DB37E05914377
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Password

infected

Digest

4f:1a:5b:3d:05:19:5a:d1:b6:47:ef:88:70:0a:42:6a:2d:a6:49:b9:08:e1:a3:f1:14:cf:cb:e8:1d:4e:59:e2

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 11, 2024

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:a4:cb:e3:56:b8:cb:7f:e4:27:00:00:00:00:03:a4

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Oct 19, 2023 - Oct 16, 2024

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:FC41-4BD4-D220,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:e2:99:99:95:f1:dc:e3:20:eb:00:01:00:00:01:e2

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 12, 2023 - Jan 10, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

33354

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\third_party\edge_webview2\win\winforms_control\Microsoft.Web.WebView2.WinForms\obj\Release Stable APIs\net462\Microsoft.Web.WebView2.WinForms.pdb

$PLUGINSDIR/Microsoft.Win32.TaskScheduler.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 0bdad6deb1b651e0a52bab4db2c7883c9332884aa37300b3439c69d85b054c7c
MD5 198949a4c3e67b9eb916140dff75c114
SHA1 a05d674e3ca569c68b5810c9ed1b7111992c4f00
SHA512 0dba2df28ca76a7b8a2ae8996aafdcea47e3f652b7441caefa3860cb74e9e659ac61b9c4670f1e8919173eb43c9672dfdf4d4ea827de345bbb18502cc695667d
SSDEEP 3072:tBCeNh/pcfnLq3wyXYsKRNRwxz+gT37teucRpH0:tB/w4xQWO
TLSH
T1D2C3191237EC493AEBEF5B79E539162057F0F1462622E70A8C4CB0D98D173C69E616B3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

0

Major OS version

4

Entry point

125134

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\Users\dahall\Documents\Visual Studio 2010\Projects\TaskService\obj\Release\Microsoft.Win32.TaskScheduler.pdb

$PLUGINSDIR/Newtonsoft.Json.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 7b44639cbfbc8ddac8c7a3de8ffa97a7460bebb0d54e9ff2e1ccdc3a742c2b13
MD5 98cbb64f074dc600b23a2ee1a0f46448
SHA1 c5e5ec666eeb51ec15d69d27685fe50148893e34
SHA512 eb9eabee5494f5eb1062a33cc605b66d051da6c6990860fe4fd20e5b137458277a636cf27c4f133012d7e0efaa5feb6f48f1e2f342008482c951a6d61feec147
SSDEEP 12288:p9BzaPm657wqehcZBLX+HK+kPJUQEKx07N0TCBGiBCjC0PDgM5j9FKjc3SH:p8m657w6ZBLmkitKqBCjC0PDgM5CH
TLSH
T1CEE44A0623F88F66D1AF2735B8305A1997F6F407A2B6EBCF6904D5B81D677608E00367
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Password

infected

Digest

2e:83:93:14:a9:06:f5:64:04:02:a1:dc:eb:a3:1a:a7:e9:21:c8:88:2c:dd:c2:3c:e4:c0:45:50:4c:ee:75:10

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Chains

Nov 23, 2021

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Digest

2e:83:93:14:a9:06:f5:64:04:02:a1:dc:eb:a3:1a:a7:e9:21:c8:88:2c:dd:c2:3c:e4:c0:45:50:4c:ee:75:10

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

Chains

Mar 17, 2021

SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Nov 10, 2006 - Nov 10, 2031

Subject

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Serial Number

07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 27, 2018 - Apr 27, 2028

Subject

SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

Serial Number

0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e

Issuer

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Oct 25, 2018 - Oct 29, 2021

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Serial Number

0e:e0:0d:4b:1a:48:0c:a8:70:01:b5:40:80:63:da:71

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 27, 2020 - Mar 3, 2023

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

4

Entry point

698886

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb

$PLUGINSDIR/OWInstaller.exe

SHA256 b901583b47dc312b0bd034472576fcefa8a04d5f89c901541f917754c6a6f33f
MD5 250d98eaa8703a87297391316e261a78
SHA1 a27bce319147b97608bf66bc2687b5031a6d5fe1
SHA512 10aae07471c4d2e95bb3d4e7f2884f3412621e1f1f4718dbbf4ba464b87d26f0cd9133dac19e4aed528a6c7f0af240fb479372b1ce572e63acf31420b0a766bd
SSDEEP 6144:14IsWFbv6O0IOZ2/EvhJK4oTzs9bRKYoSYm9qkb5PBEcTXVYbq2EZkpli8cm:1iWFbTeTK4ovdYoS6kb5PBEcTXxzm
TLSH
T13D745A5523F98618F9BF4B39B9B259118FF6BA4768B7E78C0D80689D1A73740C890373
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Password

infected

Digest

48:9e:cf:c5:03:fd:33:83:45:41:09:ae:b1:49:20:d0:8d:12:05:4e:09:0b:d2:5c:27:4f:21:93:51:b3:2a:a5

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Chains

Sep 3, 2026

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Serial Number

09:87:88:89:88:36:53:78:54:3e:81:be:d4:39:bb:a8

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 27, 2026 - May 31, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

E:\Jenkins\workspace\OWInstaller-NET4.8\OWInstaller\OWInstaller\obj\x64\OWInstaller\OWInstaller.pdb

$PLUGINSDIR/OWInstaller.exe.config

SHA256 272e4c5364193e73633caa3793e07509a349b79314ea01808b24fdb12c51b827
MD5 82d22e4e19e27e306317513b9bfa70ff
SHA1 ff3c7dd06b7fff9c12b1beaf0ca32517710ac161
SHA512 b0fb708f6bcab923f5b381b7f03b3220793eff69559e895d7cf0e33781358ec2159f9c8276bf8ba81302feda8721327d43607868de5caaa9015d7bb82060a0b9
TLSH
T1F9F0E11048C4FF268F3185A33B774814EF3883B7108C091C705E39AB0B271964317233
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/OverWolf.Client.CommonUtils.dll

SHA256 936cef3f1fd444e4cdf934e04ec86b6877156cab6d5861c549b25f107f26d84d
MD5 31ffc5b8b56bd4889e20a4ad7d6fc973
SHA1 1692b55a11d7533697514c66d38af65e8ef38067
SHA512 15b5a9b8fe24265b13c5e5d0e629da81f33bf03909743eab840fe9b8a62dfd1b8a9b3da025747f369f6cbfc7a04ff4bbc8f231bfd831adbf5f45f8d4c70c9686
SSDEEP 12288:vIsx5RnuqfMcgYkB6b+tkeblqUOFgRhTZEc8Qt26Dj:nxXoh33TZiQ7Dj
TLSH
T15DE44A0233F88626E0BE5B39F8B01224577AF542A966DB4FB95C904C1FB37498D51BB3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Digest

3c:d0:e1:fa:7e:50:31:b9:f9:61:af:75:6c:de:43:6e:08:5e:50:d6:50:18:de:24:4e:1b:7f:7d:fe:a3:4f:06

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Chains

Sep 2, 2026

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Serial Number

09:87:88:89:88:36:53:78:54:3e:81:be:d4:39:bb:a8

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 27, 2026 - May 31, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

E:\Jenkins\workspace\OWInstaller-NET4.8\OverWolf.Client.CommonUtils\obj\x64\OWInstaller\OverWolf.Client.CommonUtils.pdb

$PLUGINSDIR/SharpRaven.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 776c6b0642f7a3f3f3ad3cc6bb5f1d528e90c6029b671d8f82b0320b185b92a7
MD5 271251960bf1d6a491803e15bd562e45
SHA1 1a305315dec8b44b4d80ef8c23452880b7e90380
SHA512 d5fe5c76f2074a05d32785945ee9f088fb4293786968a1c84389233d83e9bf0480d04d5fa9676c70fd0fed47213f434ec0e0cb2e38379f720919d680336aed4c
SSDEEP 1536:aa9qjviI1YjOrfRK9bvyyfpHbnzDwky7PndZ:aEuqI1lRKbvyyB7nly/
TLSH
T13C832B3123988728CF9D6734B078225A63B8625E3B31E6D6DB1C615E6F973C347212B7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

29:d0:9c:eb:5a:81:f2:af:42:7d:8b:61:a8:eb:de:5f:10:60:8f:fd:1e:fb:3c:28:61:47:e3:b0:8d:21:5a:01

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Chains

Dec 9, 2024

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Serial Number

0d:ac:c0:f7:43:c7:9d:8a:64:64:dc:96:7a:f3:b0:39

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jan 27, 2023 - Mar 3, 2026

Subject

CN=DigiCert Timestamp 2024,O=DigiCert,C=US

Serial Number

0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 26, 2024 - Nov 25, 2035

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

79586

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\projects\raven-csharp\build\obj\Release\net35\SharpRaven.pdb

$PLUGINSDIR/System.dll

IMPHASH fc0224e99e736751432961db63a41b76
SHA256 4dbc79d2b1c7987cc64bb5d014db81bb5108bdd6d8bf3a5f820fac1ded62be33
MD5 51bd16a2ea23ae1e7a92cedc6785c82e
SHA1 a9fbaeb9a695b9f2ba8a3ed8f0d95d2bf6a3d36c
SHA512 66ffc18b2daf6c4cba01aef0e4af2f006a51aa218eab0f21dc66e47eea0389d2b1748ef0e30d2ec9f0123fd7f38ed3aee964dd6bde5779aaee19ebf55369af79
SSDEEP 384:ASUmlw9T7DmnI5+N273FPlIYiPWfPJsaAM+o/8E9VF0NySk/bF:ASYTrINE3cYiPmvAMxkEt/Z
TLSH
T197A28DA246509CB1EC468D7074C8AB3B5B3866476AD0CAD3A3A7C0419F543C77FBC2B6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

cb:06:37:18:70:f1:4e:cb:fe:61:13:58:0e:8d:bc:91:c0:03:7c:4d:6b:f7:8a:94:46:4b:8e:d9:89:35:56:db

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Chains

Aug 27, 2024

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Serial Number

0d:ac:c0:f7:43:c7:9d:8a:64:64:dc:96:7a:f3:b0:39

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jan 27, 2023 - Mar 3, 2026

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

10134

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/UserInfo.dll

IMPHASH e1c0bd3d5b9f3f5cec7ea773ff66ac6e
SHA256 a27dc3069793535cb64123c27dca8748983d133c8fa5aaddee8cdbc83f16986d
MD5 1dd4ca0f4a94155f8d46ec95a20ada4a
SHA1 5869f0d89e5422c5c4ad411e0a6a8d5b2321ff81
SHA512 f4914edc0357af44ed2855d5807c99c8168b305e6b7904dc865771ad0ee90756038612fe69c67b459c468396d1d39875395b1c8ec69e6da559fb92859204763e
SSDEEP 192:9xvcecVMIYiYF8tO7zhjjWvp9A5K+o/y2sE9jBF0Ny+aiQE7:kruIYiPWhjjWvHAM+o/8E9VF0Nyp6
TLSH
T1C2624BB386A45C15DC0B8E7135C8997B9EB0FB922AD081D7621BC1814B84787BFED2B5
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

b0:a6:fb:d2:0e:65:07:16:7f:67:a5:4c:17:a6:bb:87:e4:12:dd:86:01:11:a7:44:db:ed:08:c9:5d:7d:8e:57

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Chains

Aug 27, 2024

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Serial Number

0d:ac:c0:f7:43:c7:9d:8a:64:64:dc:96:7a:f3:b0:39

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jan 27, 2023 - Mar 3, 2026

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

4714

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/WebView2Loader.dll

IMPHASH f6946d311bccc86e2042a388e375de41
SHA256 465a7ddfb3a0da4c3965daf2ad6ac7548513f42329b58aebc337311c10ea0a6f
MD5 c5f0c46e91f354c58ecec864614157d7
SHA1 cb6f85c0b716b4fc3810deb3eb9053beb07e803c
SHA512 287756078aa08130907bd8601b957e9e006cef9f5c6765df25cfaa64ddd0fff7d92ffa11f10a00a4028687f3220efda8c64008dbcf205bedae5da296e3896e91
SSDEEP 3072:7evoTTlTRTyiuPThTNTKm81SbbMYSPLNsknZiZ2HZ5AaliiT88FEtJ57dXSvlCW:HTlTRTyiuPThTNTKmFQdhsknZiMHfEti
TLSH
T120F36C5B72E4407BE16B8274C9A34A11E77778110B60ABEF03A447791F237D4AE3EB61
MD5 SHA1 SHA512 SSDEEP TLSH

windows:10 windows x64 arch:x64

Digest

ec:e2:b2:2b:4d:3a:f7:48:e3:4a:dc:c8:f4:e8:16:76:c8:33:53:c1:bb:00:4c:79:59:38:e6:c5:9a:1a:8f:6a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 11, 2024

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Oct 19, 2023 - Oct 16, 2024

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:0842-4BE6-C29A,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:da:8e:d5:c9:5a:00:d1:11:b1:00:01:00:00:01:da

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 12, 2023 - Jan 10, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

10

Entry point

17984

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\_work\e\src\out\Release_x64\WebView2Loader.dll.pdb

kernel32

AcquireSRWLockExclusive CloseHandle CreateFileW DeleteCriticalSection EncodePointer EnterCriticalSection ExitProcess FindClose FindFirstFileExW FindNextFileW FlsAlloc FlsFree FlsGetValue FlsSetValue FlushFileBuffers FreeEnvironmentStringsW FreeLibrary GetACP GetCPInfo GetCommandLineA GetCommandLineW GetConsoleMode GetConsoleOutputCP GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetEnvironmentStringsW GetEnvironmentVariableW GetFileAttributesW GetFileType GetLastError GetModuleFileNameW GetModuleHandleExW GetModuleHandleW GetOEMCP GetProcAddress GetProcessHeap GetStartupInfoW GetStdHandle GetStringTypeW GetSystemInfo GetSystemTimeAsFileTime HeapAlloc HeapFree HeapReAlloc HeapSize InitializeCriticalSectionAndSpinCount InitializeSListHead InterlockedFlushSList IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage LCMapStringW LeaveCriticalSection LoadLibraryExA LoadLibraryExW LoadLibraryW MultiByteToWideChar OutputDebugStringA OutputDebugStringW QueryPerformanceCounter RaiseException ReleaseSRWLockExclusive RtlCaptureContext RtlLookupFunctionEntry RtlPcToFileHeader RtlUnwindEx RtlVirtualUnwind SetFilePointerEx SetLastError SetStdHandle SetUnhandledExceptionFilter SleepConditionVariableSRW TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue UnhandledExceptionFilter VirtualProtect VirtualQuery WakeAllConditionVariable WideCharToMultiByte WriteConsoleW WriteFile

Name

.text

Size

87KB

Virtual Size

86KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

45KB

Virtual Size

45KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gxfg

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.retplne

Size

512B

Virtual Size

140B

Characteristics

Name

.tls

Size

512B

Virtual Size

9B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

512B

Virtual Size

500B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

$PLUGINSDIR/app/_locales/de/messages.json

SHA256 2fadb00ad366f03c039e9b4f3943a268aa08b52da301817d977cae9a3b1db337
MD5 01d6d6ffec6df04d9aa20db38f8fff37
SHA1 bbcc61624b83278fd51dfd1efe2dab4848cc5c4a
SHA512 41bd55e34c95b00a762a60c5931c3cfbfd462a9082fced376327cbfc0a7182290a10b33b158732a9a4a3db28dd20a9af9a834fe8aa8112b2f5efedf094169c8b
SSDEEP 192:RAJZco4VLBeZo9NizhochYRl173tFUWIh239gdzu:bRSYd7V6a
TLSH
T13B427D01DCF1AE3B01BA43293C67A605B362576F1060681F7AF9504D0B62DF3D9EBB99
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/_locales/en/messages.json

SHA256 5c2fba2311105df5c8509ce61968e5f8fd8de607f52221e45c291d2de8411b3d
MD5 51a8fce92482f5024a70822d00ccda1c
SHA1 60d0e57bec8dd7c2778cb9ea0738aac7cf0f3452
SHA512 99890d40e615239029dd461bea44db583bcf8bfc7597de70fedb46bec6762ad166bc96e415183041dc3867a085588b282a22fdb752b72387cddbcd872436ba18
SSDEEP 192:+ANFsiqgFAy3IpCGtkb9yBj6j/pPPaqpMPy:2gFACIpCY29U0PSPy
TLSH
T17D424A09DDA1AE3B06B643293CA77615B362176F11505C1F3AF9104C0BA2EB3D9F7B89
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/_locales/es/messages.json

SHA256 4af1ad22fdb9c4ca3b2e5d7ad0152fe1133501408b75a22e4540de91b8c8066c
MD5 b8e35320edf365e901070e7f128f3846
SHA1 a91976704b4cc6d699a2e3019ce9aa63f6080290
SHA512 5556069bc1a9aaaef6720299b1146f9ea0068ae888e290248a1485768912864f4e36816eb6a37249f502e5d5a3250dcc0835625e03c7c2d1d6ee8cb23c616e16
SSDEEP 96:TSmHNbp4V9NzWuWGswh6VJJt9AS2xzwO/enB80IKsw8Ao6bdgOMC+lSzJZreOz2:dHN25z9u/d2T/eBAKsibP+8zJZFz2
TLSH
T1E9426901CDE56E2B16B743693CA7A216F3A1075F2010980F7AF9154C0BA2DE7D8F7B99
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/_locales/fr/messages.json

SHA256 cda2fdf66408fcc0572086dbd1d4ad849a0f1fc8d106b7dd321f4e0ffeb715d5
MD5 ae00b07fb78dd6c0a0288dee9889c51b
SHA1 7e7ae729c2695cdc0cbebed7961fd8b572e846ee
SHA512 eeb78c7d3c8a497bb4812fd4f6410bf71820fc5d997ce635fad31dab557935f8141e804c6980ee892f704f43ff72db1bfd2e4c59f1793531f8c113836b36ed5e
SSDEEP 192:9euPfuQtnqnfmdIkT3KpGvzjjX6+R/QBOOWmW:yYufmdIkT3qGvzjPQBOOQ
TLSH
T13E42BC4BFDE1AA9F06CB43273E33F26A5571439CE104983D7E99280C02C9DF6A997791
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/_locales/it/messages.json

SHA256 43b4dbf9eadbfd67f15a4274eb879263fc0ee33b2373c0e494cc51f5f535e15e
MD5 fb7fb01a3394f202856ee3bfb517cb85
SHA1 dbbf1c3154c05c6b621141974f80406724c0961c
SHA512 f67d4271c5a4678c064dec4433259dfa55e7aa55f58b3c60a75da549a7c1a4e89112ee72e1fceb14eb64505f6c476efda6dad0d343e9934c0d937fe784bc361f
SSDEEP 192:jp7a5KqWPVRImAOoaODwcambEbpuFOratb3KJ:5qWPVVSDuMEV4Oob6J
TLSH
T162424915DCF16D3B15B643693C677609F3721B6F2010681B3AFA114C1BA2DA3E8E7B89
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/_locales/ja/messages.json

SHA256 6eef2f8eeb3162fa9c84aad624f84fb49560a03831beb2a452351e43f09290f4
MD5 e67d80fd6575f9baa639f30b02c5e381
SHA1 05b5362e86c278050b4e3f71e129b4bd501fed85
SHA512 1d87edfa2462faf28ec539e16c3df3cd0cd7b5e4d07ae8a0b6309452bb1914a457e58790fc528673bed51d47727eac94bd547bbd98d01490f8c8b1c450a4cac1
SSDEEP 96:vbt9L0Fvmq0cn9alw2Vx5AkA0h31GYzPxs0q0yVeMyHIf3X24fvcWd7GxQpLCZNZ:bqElwOuEQq/Dc124f0GjIlITc
TLSH
T13752790CDDE16D2B05B642363C5A7345B2624F5FE460282B36BD904C1B61DEFD8E6BB8
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/_locales/ko/messages.json

SHA256 1c3d772dffd9f5aee2caf1f4cc41eaa047718a1e3b1a001eea682c6b2d671f62
MD5 1d0c0d1d0e0db8d11d9638fcadf40eda
SHA1 1cfb61812066014a667f93adad4da97753fa6cf9
SHA512 2f76efdd17ed44e99dbfe7c848c383629466f6135fc707440be72adc902c5d9211129364f72863ea04adbef22930ee2042854ecc17c7d4dc04b879ec55454b6b
SSDEEP 96:20Lnmlou+29abFqYDrhg8Ude48y4gVHWS9wLBKgi2ikhoglwQxDj/b5d:206aPz34fwI2ikhnjTb5d
TLSH
T14842AE41DCE26E6B02B682153DF6B204B3A1576F2211181F7EF9594C0B619F3CCE6FA9
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/_locales/pl/messages.json

SHA256 5a72ea2093b78802d0086606174afa66ed574ac6c8ea888f851a0797a5c1179d
MD5 727f8ef308ab15eb134a50f12796bebc
SHA1 fd51735305ace46fec9b2f2b13e46f63735af7bc
SHA512 77063242f996d4171be1cea00a256031e2bbfad1f2b0da45e750a931cfe3f2e9dee3469e307da64deb6586c3b60f2e59eb623eadb0be8ebfd830e16bf6f39149
SSDEEP 192:JkokRd0l5MtqydKTFabPUhyj9194AI/5x+KunXuU1X:OzdKpaLUhyFtI/5AKmuUZ
TLSH
T112424B05DCE16D2B06BA82293CA77605F3A6076F50505C1F3AFA154C0BA29F3DDF6B89
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/_locales/pt/messages.json

SHA256 5091f122e60714f35dbcbb37f983af2fafbd52fe404c77aa78e69abdce1a0c45
MD5 00df432fac4927e42d6d094d7cfb8ae0
SHA1 a9fbc71223134270033bb24d3454229af9b497b1
SHA512 4e17f63d6d5a416eda8a53c5e90e45b657edf5ebc8d4aed37e3b3ffcf4beb26568ad6a45af703fb56229afc5918785e301196be55a54cdf8e2e9738e5a4b6039
SSDEEP 192:PdZpgbn/T9l7vEd1ltT0j8fbt+DBFIdfY:Pdc/T9lLwXtT0QZ+NFI2
TLSH
T10A425815DCE16E2B167A43693DA76706F361075F20109C1F3AFA164C0BA2DE3D8E7B89
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/_locales/ru/messages.json

SHA256 fd4545ae7c47a6e807bc74bf0e3579811ddf9b14fab4e4743205afa2eaa1682e
MD5 d4915408dd2f7596a51cfe8b42f28735
SHA1 c2fed4ca228073de14acc028f4c59730f67870b9
SHA512 7ef043ef009d836f237f00804d80125a622cf9a0ad2c514ca04abb2e2476ddd5a8c64c2db9a15eae79130d521c03a8697fffec82e3e0fd3e2fa1cde59b55ddfa
SSDEEP 192:hxopOFKQb8f0mv5sNwLToezIF97/Yz6eOicV7FKe:hMQb81v5O8tzdJ64e
TLSH
T14A62BE11CCE56C7F0176922AEC15BB0976E607BF36205A1B39B03C5D27F29B2C5B6B48
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/_locales/tr/messages.json

SHA256 557ad0a237f2a0e65468a00259bdf185540909dd6c21caf4ec01e61679e48e84
MD5 bf0b3290d7b2589d9c508a17c5244a9b
SHA1 31f6aac4ac49dcba742621d7111e621004d46ba0
SHA512 555db28e912f7a1eb0bdc77f2ec120012fde3775c9811cc4be22af0909d25c1f61c9338062f3a84fa208989a7aa108866c92a06962c7a36d42ae1caae857fd47
SSDEEP 96:/o9oJmTNCu69YKLtuQb34bJthPjSDID6v+iVcMgJVvBP4E0sauEWaxpX5A3XKC:YT5KAQr49SDIuHgJV1KHFXgXKC
TLSH
T1B3425E01DCF56D3F02BA43667DA66605F2A21B5F1120AC0F3EF5155D0BA2AF3D8E6B48
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/_locales/vi/messages.json

SHA256 b01e8e59c4590ccaeadfbffcf5b042fa857eff1f8bbdf9858091523122b06638
MD5 a794a3b13aca25db94a6f53843adb370
SHA1 bd439ca29d0b3255f00757d4406056c0b40ec3bb
SHA512 778ddf3a750bf7dae8dc1b371c39a9a73b8536f86b237505556cc52f22941c6138f285e110a5e9050ddb73f7c756f23158e38d0f7a9bb2a4b63c6282b77bc4af
SSDEEP 192:vDA6IMxCb6kSKrk03+4Q8W8pQfZlraoBMJ2sf55qlQ:vLxCb6kSKrk03c8W8pYLaoxCnuQ
TLSH
T18B528B018CE47D3B01BE43397C6A6609B3E55B5F6190AC1F3AF8155C0BA1DA2DDE2F89
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/_locales/zh-tw/messages.json

SHA256 477f0b1b154f4bd07cea22b4285167ee5985b3dcc7285341f738c8eae5662138
MD5 348051345b75fa1f8d49015ca5b5302f
SHA1 5854388eca2bc878218c8c7e62045c3e19cc9487
SHA512 facf58a22085ea6cce5fc98d1c2501dc97db52f3d76d610737bba0ddcbdee35ac31bc4d8011f6457bf1d07b55109494e8d25e0b936b6b25a38eaea3597bf8ef4
SSDEEP 96:IDHmAvreV9Hi0Q/fg1ePhnmU2KckmRbbDHukFDRnk0gsmZ5B2:PAaji0Q4M2Kc1RvbvFNk0gJH2
TLSH
T1D4324805DCB16E3F02BA42693D666205B2711B5F1060AC5F3EF5654C0B62EF3E9E2B89
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/_locales/zh/messages.json

SHA256 882d4b1976dd5da8cf82700f0eaabe8a7197358bff20ce5b8f78e6c8454f7d05
MD5 ada2db2ff9691b5cea7072f674417a8e
SHA1 32a579feeff4948dd90a79763c9ef22210953200
SHA512 28bdfb16f22cac5ca226a1d80f9582b3bb6ccd39798fb168613538e3fd0a3543bef2becdf136125b229ca06d73a912bacf08ce2ce2601de9a7b24ece5c6481b5
SSDEEP 96:Z3mAoD6V9yJxLljPmghdDPfcIfb39bC4toTbYFbLxPf1R0:EAv23JL/fcGTM4toMPb0
TLSH
T145324605DCF1AE3B02BA42293D6A7209B271175F2150AC5F3AB5154C1BA1DF3D9E2B8D
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/assets/fonts/lato/LatoLatin-Regular.eot

SHA256 c6c970b103b3c3aa83f7a45172619a4451ea5f015f9f3ef4fd08c9a4aa895cbc
MD5 6cfad5881181ae658a6efdd68889a690
SHA1 5b54f6ccc20ed3a078fbdf94d7a68ac80002624d
SHA512 ddd3d43540eb3d4eef48d0834136de1e7bf23a52f286d0a666cf57c7d685aadf1cea6d37c88f9d7ce5ad6143d7c3213f54b16a11f616b7dce154bba50997bbe7
SSDEEP 1536:Y3UqIyK9PLLUbTiyEl4u9Iau0j6aEPmFm/MsE+Eas7AdCtkUq:EUqIyK9T4bTiF99f2PmFm/PpEL7A8tkr
TLSH
T12263F2C483FAE84D52672BBE88055620D51B34557333E8F9FD76892B8C6AF8066E1337
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/assets/fonts/lato/LatoLatin-Regular.woff

SHA256 9c46f7929b08c87518aa7efbbf1601e485eeed829f149e3f01beb50120cdb3be
MD5 586ec8dc57c264cffafa044f8603e7bb
SHA1 1437242617ce9257b6de45315c11d10f8847b78d
SHA512 0d89a93b0fff118023b422ef25b54dc945e7f9324fbf8df4a1a867eac1cf1b47de09f118662cc429f0ae1d0b3d5a3abd7dfc81c817be80f1d01db3f0a6494d83
SSDEEP 768:4/h9yknndta1jUYKVkQn16+qb37ErIxaSwJxBSJu3UF5REHaMgVQQQQQQQ35SAED:4CGndtyjOkQn1lTrIx73yHaNCS4K
TLSH
T1DB63D0E17273768FA137D0B73212B279AD77561299D063038062F87D379F8632E8561B
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/assets/fonts/montserrat/Montserrat-Black.woff

SHA256 ddfea34e191867f7b9e0fa19d35dbabb4951bb0de75ff20b3cff43f9f961fcf0
MD5 2225a642b9340e250cee8676dcbbb033
SHA1 8cc27779e10bb71829f2472a20658d1d63e0b58c
SHA512 1d0a89ef7db05d063c88e5c4402245c385c639192deb101f1635efa7ea46d49147d4fdeaadd7043012fe09a15731701fadce1b4c2f18cf2c9f7f5e97f1544e11
SSDEEP 3072:BqaBGfyhKJfXre1V+sal0NiaV0FaixuH1aG:WyhKdre1K0rV0huHgG
TLSH
T10FB312090DB85D19C01A3F796152A72650B4740E4BA7F4F6F37BB97CBA041EE2AC06DE
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/assets/fonts/montserrat/Montserrat-Bold.woff

SHA256 df4e049d933a5be9949549581b205ec296b105589fa853cc51292adddff076d8
MD5 f20f5fc1c9c94e6017b42093b8e5ee58
SHA1 d875fdc36df142dc70d765c7f945a00b93bfd736
SHA512 4d340665668cf21853cd8b705c8fb97cf2f36ac0f51d0e565f2fe1cc48ea555c71a79a97b996fadf58436378f2cee3835ff85c0033a5de37ab99aeec08f4b090
SSDEEP 3072:V6fa1hptdfAnYiGjuUPPVgIt1gszRe+m+uKwRvG:Sa1hDhADIzP+It1gwRe+OhG
TLSH
T1A1B3121122B2C213875C78FC2AE9975373E2E55A80A8EDBBF356CFF542141ACCB57066
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/assets/fonts/montserrat/Montserrat-Medium.woff

SHA256 ad8f52c4309164c9d7f32ce948eab5f447985a7143cd7dc7688861eea757108f
MD5 d84781735e74acd4f580568ae76c7912
SHA1 7e994ced9eefcb166f4a3d96f2a6119012d06d97
SHA512 306a2c8805d14761efb085fc47cb177146230b4704841088950c866445b43a91ed1f0e84f5bd4e2dd17652fc5455da5b202461fb40acf14e3ca00aaa036c25b9
SSDEEP 3072:K8CUHjSfEoasuqtXOa9j16/5PbiRVMD1PTG:dCUDAWqDooRVeG
TLSH
T139B312141DE63D1BC86DBA799BAAB3A093BE16D847B1D118F6F4D685413302D2CCB3D4
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/assets/fonts/montserrat/Montserrat-Regular.woff

SHA256 7380f7e1292ea1cc94812ce0d810a6701fd7ff7db6d55be737ed150c9fd5bea7
MD5 f845731f0912cd89d37099b5f3cf8f40
SHA1 bcb2d69aa1445166812eb40bd10a35f199a4edc3
SHA512 34d76fe7f37f181259eec92b204b417014481ca750f0e57bf5612c38973c9a77a6916eba41215192ef46030cb5dce95b5818bb6fc55fc69039d339a9eca1743b
SSDEEP 3072:9gVvuZ8+0pJGcfJ+bTma83kDwOCaPHCAVg03+XIG:skrR2J+ba38wwPiAVgaG
TLSH
T125B312969CF85BA3CBA86AFDA710420891C4BB9A473091F2FF47D6C6175C2D90D01B7E
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/assets/fonts/montserrat/Montserrat-SemiBold.woff

SHA256 283c759c223b45a6273f4f4c34ce55a0ac606978d54d4fac5d8a3ad16216f2ac
MD5 13be84bdcabf4d49a7e005e1ee33e8d9
SHA1 7b04eaba391b93a8c7b0f5f7ee51f23fed8419c1
SHA512 e7d96cdece6483a5afb9aeb4ae311ed20848cac07c80123b96b4751741ffb68130af6264d85cfd15999d84f7873ad196aa0010acaaf044b507dfa19dec6145ed
SSDEEP 3072:ixTaqcfgqiLLbyGJxbSj3IQ0/urefg3ezRuw7zG:i5n2ULOIx2j4Safg3dw3G
TLSH
T107B3120B4CA15A46E56E3EA4F86C6708833D72DD4CFA4023EB22B4CDD6585FCA8961DD
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/cmp.html

SHA256 5966979a422c2526dd77897fb643639d82b16bdb89d8fa6e8615d3b32169af3c
MD5 17241946e51074e6877c43737b94ad71
SHA1 16918c53471fe3f35fcae1e9902870d91c50d957
SHA512 b4b6e030fd1abe19fa308b32f04571a7c1c1f78a7cb789f169b37b54f281ec66d16e4cf0bbbdad81642bf28e266a6b2af7c19cf5106c683fb7f443bfa3110e05
SSDEEP 48:tZrc0/GdshWpo1rckthAoShbEHaLKNGiNQtvmolOGR36tgtr/GTvJP8AscaV4Li1:4V+8v4jHa2NGiivmmpWsBVuQFwlE5vSG
TLSH
T15DB1DB1A2D5914A80077E3385B6B6208F72AA1B72105CA067EACDE513FB152BD58FFCD
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

$PLUGINSDIR/app/css/styles.min.css

SHA256 ed15b27d1e133fcaedb389d5a007a012f46af5d4652a376bee51d698e7437c6c
MD5 35ddaea7f665b65fecb23a72fb49d358
SHA1 c060e01aa084e4a529586735f3857fe250d2bdde
SHA512 dfd60352946fdc43e14e0109a10255acc91a54ece304b8e352fc7dfde5b92b2ae6cf4d13059ce2baaec518983f9b6fd676e2610a39226ac1f98a5d5ac6bfe79f
SSDEEP 384:73JlhPshoRJ/seq06ItLglbyPasN1vnYogfZZ6:7OhoX/seq06ItLglbyPa65nx3
TLSH
T13192A921D236202DF63B862AB5D1BA5E3035C123D6634A7EFA159674C6CB0C72F2378C
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/game_detection_database.json

SHA256 f1c9a0867ee544f27d4fef2660a180dca0cdd355eadcb8a160dde64e711a4bf8
MD5 4fa59435796a04c511f7ef19538c99d6
SHA1 c8fdb37dd7fe3660a90c3bceedb9e0a085c757b7
SHA512 68dd49c5bf20417a4852d71056dba312a2852eece7ceaa3bdcfd2b8671895e86868e46a4602e5456f0ab74bebfaed68f7194e21df141977c17b3e1ddac00afe6
SSDEEP 192:1npXvXj1ZAWj802H5Nxji2FDF83mXqdEzzohblboUWIsv7a7svfxF3L3xjQ1uwN1:H/O02ZNxmxlQXs
TLSH
T111E27156F671882FA4F66364DE594B5AFBA4436F10C30E0739BC904CDF3698B5006BAE
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/images/big-icon-fallback.png

SHA256 46b318ffab431aa7f0559560632c0eca28a0527fe9ec766e947d3b49708e3de5
MD5 435663128120e807ec9c33d5b277198a
SHA1 6de278d5f8850da54405fc3a444cfdf8054f6a05
SHA512 97cd952ab6833cea217ea6b5f5a83624f4ae1311ac0c4d66f2bb7d61a6c224b7cfb6205074e008ea33aaa7b82474fed4230ec3f4f8f085e884b716ee992624e1
TLSH
T165E0F1E6C780062F895A682F6493B98825370AE7CC30387FBE94E0245185395D2BB551
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/images/bottom-arrow-hover.png

SHA256 26cdda24dbd4efae0868bb7bf71286bf999d506470f766a8ca0f31e2a3904a2c
MD5 5286c95f01f9ea6cc91674f88bbf49ca
SHA1 5e8142a6d698a186c47755afefa76391e0a7ac15
SHA512 2e540ba32db8bd5412200c171698fbcfbad536673512c395fb4be54d115c5ff8db5284190b6529aa00872e4064a061bb2f2613cc1c6e93a0827dc9238e7d3183
TLSH
T156D0EBF776275C3B0E1C0847507986A3943B88F70111AA281C00D490C2998C5B1833E4
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/images/bottom-arrow.png

SHA256 4488cc42802621e09102a90b83180196976b14ccb4f7f4270596be8001749c87
MD5 cd25d5daee303f8bf23a3079a1a0a5fb
SHA1 6f3747b276800c298a3b0341d540faeb728104c5
SHA512 e6e0eb37d488ef42068195d0b643b6fef8d44210ba1aec533d0bc3e9ce5c69cec8d467b5f2f7b1d83ff40f26442eb9bea60c7bcb8f390c060f4b1dd1afb4bee8
TLSH
T109E0EBF6E7600C3BF00F0A76817FC532F16B9ABB11D210069CA0F8600309F148ABB286
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/images/bundled-cri-bg-fallback.png

SHA256 453e759fb9af22ced7a824838e0ff9b9f7e757978483e460ac57a7b98d51bf9c
MD5 c05aff8fbae3345d5639b8a6c17b22a4
SHA1 c851a6d694b8567f865c4148606441ab5aa3407c
SHA512 9ec7f6f21c1c2ab5e5a66f3115fb7466a7a1ff15fa7fb6ad91aa1cbd12f397694df60a4865c3ea9cdc926146f7913eb3ca211515374579dba8dfb8f619bf5325
TLSH
T172E07DD652E2CCD5C1A81BE223600751FC672918563405921B0D724DB8FD13B6B0B051
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/images/checkbox-checked.png

SHA256 fc67178d51fecb20e8827e1204100f65897e39818a38dbedfe6e9cf9ea8db12b
MD5 f3c865c9fe47e701a38d6a4b29a50aeb
SHA1 d3ddca12bd7fca2bf3a3f06b6c797ea6416acbd3
SHA512 1c2df3a43bbc1dc90e7d5a2b6a3ccdf295c7ecf9199b0189bc6a34dcfd37fdcb3a9a2c273bc00cb579f655511bc7597c3f114f9d9c2a1b628e1e8f3de7b2d327
TLSH
T1C0D097C5024A0D3A520C1263A7BA2002ACAEA91C2B03921CAC326428010644042912A2
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/images/close-hover.png

SHA256 83fff6ded423944d0d6d044437f82b5509a24ff16c034ecc5d6169ca3c61c383
MD5 0ca9c12a07f04842507753c785151283
SHA1 a476853326ea9ab6155f5a1fc86533cfd24f60ce
SHA512 8d310c96af1e2c5ecdc571d8f25cfed9e5e292cee35746107a28830e78a1cf68b65bb35bbfba66537cf5c38d0ed0b358bd6c9bbd4676cf42623d00c0d4b5cfe1
TLSH
T1D3D023DDC75D445BD61CD4BF82670112B55F1D9F053C600CE9146430147544D3D47391
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/images/close-normal.png

SHA256 ced445f13824aa3e0e130446dd04865e27c2beb85d16179a9cf05f76708ecb84
MD5 c6503858e81b5c797ef63e551b9e244a
SHA1 1d0b949e6cd21933bf224ea1e1b46436c021735e
SHA512 1f57824aa23cb02ec46d5f03ee0db70a7938e9bc0f6fbfada2fb75fe35bf804cca4d553818aac5bcdb0f89a6d001238b35475fd0520288e7cacc9be6516106fd
TLSH
T1F8D095C3374E586ACC6CA13E239E31C4596F2C5CC0F552057D442032DA383801395FA6
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/images/header-logo.png

SHA256 1e1a02ead151269cf7bede5b5b7adc45b05e983bf16e7b4ab2d1173c16bf5f0b
MD5 815f85c50c912f92b38526fa92307058
SHA1 f832b2d04af017c7b745e6ed253c75794113a960
SHA512 76572ebf6edbcb71392d25e689ca96d5f90e6bfb8682e4b438a089903439b88d39ffab95443d411d45645ecf02844cc6bb5efa3b3e23b5907ef1f2a41e410943
TLSH
T1141161F62CB2DA3E0D6E07B8421604A42727DA7616514688ABB37C144020EA1B541755
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/images/icon-fallback.png

SHA256 772fe7450824cb84dbcbc9cdb401278dec1a511ca3ae2cceb073e8bf4dc8fa61
MD5 3880ad80fd07870118b0aeb8fff308d4
SHA1 37b30e87d89d3bc56eb5ca3f8ec6c7f22e5ee6a1
SHA512 3917e7b6623f284a0378702e489a5131c3ad328827a87e1332d24a89d6e54d68e7dca3e5bfeb0bb22fe54da1572d2d8a9107eec8f36b9ba7db1f50c0a5205d8f
TLSH
T18ED023C63B5C08BB4B0C087F46FB05112057393B40704C084D20C03301B0A60A90B3C0
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/images/icon.ico

SHA256 2d57121ff4e34cf983bc91b41fdb974883b41efe213bb149e3e81d7d4d10d41e
MD5 51e75bda8d67975d112b9e3676cfee94
SHA1 681691af738cd40573219a5cb53f0e898f8f81a9
SHA512 405a4d29e081ff0bffa081ae4f527ebf9c850fcebca9f1a75af05077289bbdb0dd34d1636734b456767df71e06c7d23ac5d5dd364d2f57e970f72aa476088195
SSDEEP 384:Qjk0rnJA4rnGC+wd6rhbDPYwAzi7oMme12Z:Qj1rnJA4rn0wd6dww9Cb
TLSH
T12CA27F510BAEFC97E2833439F636EE69E8878693D7D78931896DB03AB8441D0340717E
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/images/large-logo.png

SHA256 465a29a9e00705aa31500ed1dc9cea4d2d9d62781f81b9d531e1f65260f6c69b
MD5 8122a52a914c6fe1a1c536c43378db1a
SHA1 6377e01ba87e6e4177d261bf4f63b8123169e554
SHA512 a0a9498e529607864a2557d6bff3b9497dc203898d711dc20d397f3f0f962f9d88d54e247e3d1c0b4a2ef0e2dab2bf60a18e94be02df49a2025380a29dbc0067
TLSH
T15DF0DCC32B028648F6179C61E7A057E032399EFF11118A0F1889F521DA336F92588006
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/images/minimize-hover.png

SHA256 6e66b6818e37e154fdb40bd3d3ec6d4ebee5a0766076d5ff05fd77b9d72e357e
MD5 a705b18c8e3ca9e4449893859dd42881
SHA1 25f338ec389411a7ac2708f0adbfb2f3857f5a98
SHA512 9203d472727a8ffa055059b1f5c7690ebc5474c0639622cc034874d2a1c28acc9f4fb339558bd08f375774ee7beb478362264381376edfe9cff3103ac6bb59a6
TLSH
T1AFC080C557551879D0185576125B064558775D85181111093D11F85116198845649361
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/images/minimize-normal.png

SHA256 2bb07ea586a9375205256a96a4ba0118de0547fa4a935d293f2be3965e701576
MD5 c5d6fd1e224a5a5f2fab29cde44f90f1
SHA1 2ae4c72421c19de84bd7d37adb6fd93b0037b4d2
SHA512 c2fa4f08ceb1e469397871d134a9abbc6b64d32f82d979e5a8dc94c5d75421084285fa11b16fa8ad90b0ab961293c8e6d11afb58ec86d65616641cc341e77990
TLSH
T163C08CCFAE5048BD842C862A229F05E064B72DA90022314CBA22A851242884023C6361
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/images/more-info-hover.png

SHA256 7450ef57e4b8e5a0249156b6da90667fa9fa99fb569a303ec38cba57a1c093b5
MD5 ae19fda52575d20f152a6643ffe8014e
SHA1 150ad6853a7199908c530a9036d08f3493462835
SHA512 8c4dfc3ae87d7d55871f6f7164bb080a779b5f8be499459f98eeee361db60b595e1c80b89d3bde0c98882940a561b9b2ac09d0028f4bc169068d27ccbb31d14a
TLSH
T1D1F005DBB15C3C2ED575107BED098078C43B0F6E074B625D971845A6E5058B8A327379
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/images/more-info.png

SHA256 c0ae0cc0cbebcf666a21229897b9c766e34f911745081596000333d2041f66ea
MD5 fdf8010f70f01931edfda9da35ff37eb
SHA1 f12838afd69f5b1290f098990c5f860771f3b05b
SHA512 4f8a7c7d6d1832bc2a862815d53865c92244e6a7000d8b11fd92b8eaa2fae756c4a2fc9ebb50054a722bfb93675e26f957b29365608351b99184ad8797ce3a34
TLSH
T192F0C0EAA77955F1860CD97061AB4229CC0B1E25D303030959D4653338634C95A0B5D6
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/images/ow-md-logo.png

SHA256 8de2c2bcb72caeda6eb93c3a8e55fdbb835f8c4a39f6277c71fc44f22fa969c5
MD5 07b13528d8fe6927ca4ba53556efd8a0
SHA1 92e900109495608754dc84bfd599c8865c7be502
SHA512 66886f6a535cc963a6133d4962948a32ad53128339d3f22cb16d5c55260f6316f2b5e9205d1d45620828aa227c10ec7d5a6ecb056a2ff078c87bd664e691a0fa
TLSH
T1BCF0D49FB735B6DE824ECB2B19674194E177452301090119FCBEB01D0125D1C5757293
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/images/plus.png

SHA256 7f2a42d5477cfff7e267452939a994483d7dea694045fa1f770afd7133b480f1
MD5 761c06890a85cfd65b4c17ed26f3db7d
SHA1 2bc23e317da5f136c1fe9b431d8c1d2705a540af
SHA512 083e177cd1ca4e5dab114c4811e365df1884e541504efee386f6a4534fa75136736ce4de0536bc90180ff78ed6d0d6a6544286686426c5735ca93bb0220fa910
TLSH
T1B7C08CCEBB09ECBE852DCA76866652609427296E41C12804BDA5A42C281DAC4855AB92
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/images/progress-01-overwolf.png

SHA256 4da28ba55f43cc1d03d5cf1eeb040985d3bb5fd2a7230667c871254f006c512e
MD5 3d98876bb3f09090568aa3ef90a84dc0
SHA1 5f98121ef031920b8c8ecab21435cc64bd531c19
SHA512 2bfb612a6aa0061f123e8d342ab4d049e2f38b2c111f2662d4da8c8a22a73893c5d9743a337766ff2e6346cb04ef2b4c63ea72e5e749b34593fd372889033d6e
SSDEEP 384:aOTXx6gYKAzHwRSRJLrw5NsgRCc7xXWMvgu8kz82H:a8Afrw4gj2vP2H
TLSH
T13242C0FED2D47460C4E7BE7E68A62A53BFFEC82308A13795E61CAC281DDB1255444891
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/images/progress-02.png

SHA256 130eafc5dc7ef993134d0bcff40bfbf11b99d41c63a5c6ad1d70c7ad4db2a5e7
MD5 3781b597e18900a6b779ab588d8a8e21
SHA1 0fd2084a62f507ec802646f7423c9714ba547d7f
SHA512 22f2cdc6cdd81503d48f8f23c84abbd23c6c9e3a137b7e4e91846823d957abeee348f4e3cff88667a263503ca310d80253187d699f733975133d08b5729e647d
SSDEEP 192:5H+KSySpZ21z6dIPH/tRtif8AqGnKWAiGufSzjmhgRjvvEOmbukJc:ZLSJZgz6cztmlqmdAJuazjZvVSRJc
TLSH
T17E22C0B761160EF5C158613BED44306C58F04D2CC21DE5DA393EF178BA4C1693BEA48A
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/images/progress-app-image-01.png

SHA256 032335dca37195df73cef1fc5f019bc8705284c3226dbdd54f81d61b714c4915
MD5 6276c4f73df3a91718a12878c63dcf24
SHA1 a86fe5338c78dc396f680e489766f8186e6cbe81
SHA512 11a4e465614e65a04e72b5d6b80f0c5643d51757a06595168894d3e0a419bd68ad31152221a22ec1fd6db03c5c159d31aa5054f1f4d8c633099477afd6f92607
TLSH
T106511D381149BD39A3FC7A554B7B867604F7D3D4141C240C2C5E4989A91B3BD90DF4F5
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/images/progress-app-image-02.png

SHA256 9363bf7bf35a32278d95b8410bda989c63d9cd09fa17fdcb04d93aef1d433b3c
MD5 9626ec7a1330f4fa65abb37f08ff6421
SHA1 914801589106fec21ff3d7f5673aa035bb5bf129
SHA512 f43caa916f385158cb3a3fb20193a80ce8ee84f1063e6497fa0a9265dd28b8983750d0c44006936aefb9d6b16230d92105bd344707bda8d55e3283b344ec792f
TLSH
T196412B3657947F783999C79A74FC4632C4C8C8969400A0941C9F1BB5BB11774F2E9CD9
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/images/progress-app-image-03.png

SHA256 827f9bd53d624da1397e0f8d3a68fa96bbe7146b74f6ea8af5cd6acfc3839cd5
MD5 38ead88ccac4d4f8077e265aafc186bc
SHA1 eb3c2de5065ab597c8e9799a3c31487545ce4828
SHA512 a473af7f5d1dd87a670b1d7f1c9e34d66d7bbc77647dc72d540acf97e1d296bbaa59469663354ae4223423688142d6d828e35f571d37bd7ae813274ccfcec519
TLSH
T1E73128BA0029BA291535FF9D983704E6A8A46F445337C15F2E0AC834D0C3B396ABE582
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/images/small-logo.png

SHA256 0ee19b8f79232886f6234cc6dc21c0327e90df94a189c5effe1d8a6444543726
MD5 ef0803e881fe7bba90e5e9ec1678d950
SHA1 43e9ac35b2f4bc22e404bb2362eaa7bfef24f9bf
SHA512 11c6126429f4fc3ea32edf6132dbad840a1df35f58237c8730f5171c491588425190897f4370545bcc4ed4d42838dd95a2789a3b6ca20cf8cbc7bef78472f253
TLSH
T12CF005DA3358D13A475B536CF61B94489C770278EB11915C2B11E532D342B9C1186AE7
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/images/tile-fallback.png

SHA256 d173d88df0d31e3d4f83b299cba4ec031dd286dff2f963e58d747617649108a2
MD5 0148cc4040f730247ce079e723fc030b
SHA1 ee316fdbaa54a7cb5cd350adc4919787e7edb63c
SHA512 a441046265ccbc2e8e25bba5e10a46d65f28d2a9100ee12742e0ef5da943461996cc036f57031ef6c21fb0929ebb941e27874a08e53677e46ea28c097136cc75
TLSH
T1DE11DDD96F0C7EBE89BB6EDF006EF11C67245E34304B2A176142180616768CC0650BE6
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/images/v-check.png

SHA256 af10225db6ff7d4b67d00b12f37b211c1f368bb99ae900856b023ce5999dc9ae
MD5 cdd7415f59e5c003dd5956b971a3cde1
SHA1 89a3cd6591cd66fde5fe389a216272cf11d7696f
SHA512 bf36f6ed5f9a5bd9da0bdcb0baa03ad73e12e4d30ef64752e14c307280825e994deee50c5436f683048711104634f0410684188d47f5698dfe5309ae4f55b2a9
TLSH
T18411B3D9CC2822ACE0DC4E0ED8E3E46430A67F2B4BA273326E582C9A808488485C7770
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/images/welcome-logo.png

SHA256 e18add518b697e4c6fa897bbe528e6e142fd0f350c31e39bf71894fcc833c3ed
MD5 d477c702a6d114e9b251a8d5a754885e
SHA1 49ab31614def0a24869e9e61deefd5c0b8e72749
SHA512 bef5296cff23dbea67dc21914c2f353e6d74da630324ae277faab1cccc375805b3ceeeaf557e37647dec8ed6c8f1a7802f442b448b8d4e19320cb30df8728b8b
TLSH
T1FA0165CA27E189DB859E42BE43DE20060C1E57187541909418640124F2F4BE42F45780
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/index.html

SHA256 452154a082fd36b9ec8b5230bf4b6708c4715153e78fad120eb25828fa89381b
MD5 14c405b7892f466f89d16bb5b3ec68ca
SHA1 d7ba5ce2b5efd4bedc78c3c78eec5274df5b6898
SHA512 6795fe8c7072adf44ef990a12f9a840421622b2c0836a3590a7905e135d42be922f9db1070e09c1fd2f82f1c5d2ee09b4526e27e2454b04923e84d52afa49b68
SSDEEP 384:23JlhPshoRJ/seq06ItLglbyPasN1vnYogfZZ51Px+mppiq:2OhoX/seq06ItLglbyPa65nxq5xtoq
TLSH
T1D9C2D811DA36102CB237462AB5E2BA4E7024C117E6538A7FFA5C5635CBDB08B1E13BCC
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

$PLUGINSDIR/app/js/app.js

SHA256 3261bdfdb5a5cb527491b2e5c23c04d4c1f4618abdb125d9c8cb197e6e4f0525
MD5 c55710210d80a89867b7c2e8f6b0051b
SHA1 53929d1bd6e81127b5fe7eb9f7f7db1d26e10b33
SHA512 a6b3b1da48bc845daa567d9fcb08c0ea5799b476aec9113153ae0da8e93cc60f0fd291279c890715f35f055c10b0dcf1bb21c537bff0d8ee4b69ebfc01cf6599
SSDEEP 768:0+ycDQYITdIb+eH3A4nzaYHhGifG3yRrH+K8T:0+yUQYcqbe1K8T
TLSH
T1A4B2858E967912789573633EAF1F4618FB32122F110596273AFD85814F7141282A7FFE
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/js/block_inputs.js

SHA256 f8dbd6793b35f7a26806f4dabad157aaafdf6d66fad094b50c77d60f223fd544
MD5 b5b52c92b90f4283a761cb8a40860c75
SHA1 7212e7e566795017e179e7b9c9bf223b0cdb9ec2
SHA512 16ad53ede5424ca1384e3caea25225589e9eec9e80e2d845948802db90fad222f709a7b651cd7601a34ba67a0627433f25764638fd542cbd4612871308e7b353
TLSH
T14301D2D864D3A87A597DA328536BE748F7391964905A1054F0DC8C64BAF003BC16EDFD
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/js/libs/cmp.bundle.js

SHA256 039d5d4e442cc360b6f54923c53cba5432d80727b8d614a3ee99f7c70307bcae
MD5 48ccfc31db67a9e9d6decd5b18df96f3
SHA1 2086877b894bd0ddec2ae80dd853e47fcbdc638d
SHA512 e369682bbba708ea66797024bc2885e85a4e2b4ac6a4005cc648a7a81d8a4b1c3691c5484408bbd847c40ee80d12e72c5d9722950da020b284843c10d05d0963
SSDEEP 3072:iyUYM9z8F+GxPMqbOISP88WEAtvgnnhLCVJkNO7Z6BEFltnxKg8rq0gU:LrF+GxPQWEDLmkNO7Z6BAly
TLSH
T13D842B8D7991B0E617D722F1802F900BF33A6458784CC490B660D8F1ADF96AD927BF6D
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/js/libs/jquery-1.10.2.min.js

SHA256 bc44d3631ffef1df7960e359f02002d3ada45ee05205c2cf1edd85da2f518144
MD5 44e3f0db3e4ab6fedc5758c05cf27591
SHA1 2d408aa1d35661019c95adcc60b78c0727ed25b4
SHA512 4d4844e53e686fc59a52e86588f328dca3ed6fdad7195c58942a98c51755a24981b903ee7c7b27785375eaad5a7d9501cf74b999674b79f214e66103bad9efdc
SSDEEP 1536:O4mCgi8DyCuXXFiJ+L0kJQsJVPEKuQRZdC/RAfDknv+p0WzH/Io9Z7qABZnu0JFV:OGsKYAI2p0WP9bDrJ7fak
TLSH
T1D493F8DDB2D1B06257BB21BD006F540FF236195D280D8850F129E8EABC74A499277FAD
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/js/models/notifications.js

SHA256 c32495d55eed52f47dc7268eeccb90fb6bdc5686135ed089416c6bb8f703a578
MD5 911451f65b2503d23bc27c6a6aa6af72
SHA1 01d3654b23ef7f5adeb4097bd851e8c100a7b2ab
SHA512 06edaebb0bb2980a7b6d6baa31a9c0894a9bb5f14a91468ffb8f182d98f04bb811df2a4c37f0b56d612603528aa21f390eaa7cf885874ae770a24dce2f9b249c
SSDEEP 96:sOr8u1s9FHYYdfHsW/GZwzpJGf8mui+U8QrGjqTxoOxoYsdfHsW/GZwvpZGNjINU:sGu9GYl3rNQ8K+JQC+N5Rsl3rxeEYIo
TLSH
T1F5C1AB5F90BA00A7057293A819370342FA5753AF49408CAF737C5EB40F311A6B4E5EDE
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/js/utils/analytics.js

SHA256 0a3b80a0263691f71e85ec681be87229e6325a7d173ff430bbf4eb7fa355476c
MD5 52b20797b4568fd9eaa065d676b7a344
SHA1 a14cb0b575f2a7d274a78093d74906351b603dfa
SHA512 f99786edcfc0220f1563617f40441f9b0ff02083be2c1847677b6533f7d1de16911227e349fe41e328800230bc2994b70db3ab79e4acef5fe07631e87aad0c5f
SSDEEP 96:LlYkmHqqVHlnZrJGvt+QP2EZc8kukLQsO2LT+gObNSPgPgzauV:AHqSGV+kC9zNObNSPvzaA
TLSH
T1A9C199292469719068B373B68F5B1518EBB116233144E9223BBE87415FF6D02C693FCC
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/js/utils/commands.js

SHA256 160ca35f80aeae58f6723c37cdd3e52cbb4ef56e659fbe105a8edab1f0f35ace
MD5 ccfc18e42871f7eb701c54bc1833dcfc
SHA1 7da62247f4383148109c198aee1e26c21484104c
SHA512 f6a08520790106482faf6345ab534210f14e8b5629880f875af8f4210a3d1b7efb24e05dbeed895e2044034a6d535a4b4cc2dae34f5b15e7c4960806c2d0340a
SSDEEP 384:2Ur5Hs8cD+1uUPULQq06WCHp7GvvoWqEWOnvsUmd:2MwGUd
TLSH
T1C872EBAA68A721651933B73DDB9B0215FB33083B11465C147EED46917FF6402C2A6FDC
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/js/utils/cookies.js

SHA256 9d3cb3822e20d6f5157faa02dc69bdaef44576c3fb5523e00aa152107ce30287
MD5 6c60e675f8c8c68c0174b644d3a63a2a
SHA1 3635a3fe07ccc4a6f33a986ddb690522d0611abb
SHA512 1dc9ec7b139bcf37107ecd673c01e4fcc606332ea1645a4a1b4e5d95f817d4c99d5964cd3d941a6a526689341d9623b17b4efc002cdf4c73404299d52b1be452
TLSH
T17721E0087580D81EC5725739AE286778FD30992611C6D54DB88CA4F02F30C169DBE9FF
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/js/utils/modal-events-delegate.js

SHA256 267661f932a2ea78d8c7a98cc03d1b18d7cb8132deb84636772ecd1fcfbe4857
MD5 117e4fdbdb0ecf211c8bd909efd337d1
SHA1 9f8684d856b7c95bdffb139217dfd89f41373187
SHA512 f474ee20b59d3d0c11f9f6aee6b6e2b66f7025beaec9841f88455e60533dc96cb4e27910be0dae92b0028c5578932b7f459fdb91d594ad010f72a3b3af6addb1
TLSH
T13C31D54D36FD173AE5B7172B5B2F5F8CAB72120B09054A26B2E69A804F354241196CFF
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/js/utils/strings-loader.js

SHA256 9b833f9e058ddb31ada44764449fe030f05e241dcefdef46886a74e30cd04ba5
MD5 8ac781fa72423fc5c4c21a8c4138b709
SHA1 50ad1d7f383d6801c57f916e46c1c17f79222725
SHA512 f78558488968b1151b189545294a0bb97131c0a4d5dc0fa61ef168d999151e0f12af271389aae985d129adacfc6bf610b0191fb912ffdf8e97283829e2802604
SSDEEP 96:FXS/WSBWlbBtDhWFTnTeWsNkEj1I/6Wfwk0lx416moPdXDKP8j8yZrME6:FXSuQwBBh0nTevNkEj1O6WGe0muXDK0W
TLSH
T132B1ED58289354118C32B764CD935264ED6A4917023996F3FDEEC2686FB149E82F8FEC
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/js/utils/utils.js

SHA256 b4f0c48cbfeaf8141fd44b12031e3f0410cb0cdc313888ffdb14fdf1d2341246
MD5 a0952ebeab701c05c75710c33d725e7e
SHA1 1da8a2e889f1213d481ae3cd5571670c01e64adc
SHA512 5e5ae616d3fded7d2bf47a326242c4477ca3119fb52897bfb41de0be230ccbd6c3da2c00268b3973e9bf7b4f2886aba64fd9719b448662e4130ee66d87913389
TLSH
T1ADB01274B7AC73A2D315377AACBF6C1DF0375C368414B099B19034E19572D04519DCD4
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/js/windows/cri/cri-controller.js

SHA256 8c8c3097f0b587d715e051f55894d73a0fb7b441024f47512fa340eb3f692152
MD5 344b079e423000460dbcc623d3dea42f
SHA1 6f7a6db5cdf0e4c511ae1ec8aa1f08dd9e79190c
SHA512 15358d30f96ba6ec330417896ccd5c837e71b1712357185d7d84e60e8e6c21af52eadc1fcf61f6ce9a79165fab94813370a5ef0b632742043355ae3eb7eb6856
SSDEEP 96:u6CeVFfOhETv5T6ToY/aq4bCWCtoQNxcGyUkeErscwn:u6jVtOyl2EY/aLmWCyQNxaUkrscwn
TLSH
T1BAC1DC9C7CF9866058B7277BCF160518E732420722426A2B7AFE83404FF5E404A16FAD
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/js/windows/cri/template.js

SHA256 016ef6ba4ccb64f2cbdf63357d180f0d3a5f74857633556b311eff57be8d023b
MD5 2f82acef2d339db31fab5c73edf8af19
SHA1 d9138de6fe1320cd232fd6e1971fbbfdb9225bd6
SHA512 90311035970edf2c1d0175c9b718c731fad4f58ad5a0b43a2588e2e6132cc09deff1d49328174408c51fe3082d62612f7a2a6c25179ac474101468ab68c2abcd
TLSH
T188212E24441C90331B7B979BDA13276CE9519301D80B7D3871AE43A82BF3B828E62359
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/js/windows/cris/cris-controller.js

SHA256 89924de5dece339a344ab2cda8e0dd4448719d3b9233d728921c553166765c7d
MD5 23602b0707b37ed7c1b5e3a14e17e0a3
SHA1 cd1859cabca965afb34cf44f9b69a5e76f782197
SHA512 0df7ba4063389dfd592495618600e99d5184179e4a9a79e678d0727a186ba3d921f314df861ae77038d5d8531cf5ac32f9bfcff87363d0b242f77157f3f8cd3f
SSDEEP 192:nCoyl2vxrZn2C7s+vK/H0mIvo99iXKapiaTkelwPMM0R9W:9yl2JV2C8/HOjgOkelGMRO
TLSH
T10422201998AD2A299A7773B5CF6A0508FB3142272944DB1A7CEDD3940FB940181B7FEC
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/js/windows/cris/template.js

SHA256 c6c0799e027b5554e44e1c31262ef62b2879bdf1b862fae56615426f07f471d9
MD5 408961db547931d2427d96035dc7245c
SHA1 8a0330bf52f53cb1e82e36cd67723ebb29d7a6bf
SHA512 08d79c8f54cc9898956df5b4de8360a38d482ad19ce155e84a33843221a0242240c59c49ce0ef980e150fddce716557bee7071a6525ef438fdcde9bdacee95aa
TLSH
T1B5F02E114135CE20373F17BE93631B28F631D0024A82E634D5DB5790333B4E78A96769
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/js/windows/finish-with-recommended-app/finish-with-recommended-app-controller.js

SHA256 ec775a786d8f0170c33e7d28df1f724aa1de26ff0aafbbf41c26dab864fda48e
MD5 8f0cff982886d07a530a1ceedba4bf2c
SHA1 6348b32708fb6f70225a3fdecdd616475a4bf8a3
SHA512 cc688485cfa0d3787496f8a65e222a38a5b46c0b3b41812b9e1246f0195bc6dfcdae1cd2c82a6f80620db91cd826a17fea5f31879c6ec7e3efb580ec71a4aca1
SSDEEP 192:otBaiFc1rnGDtjUnuYu7t7jt/Pv0+bnZ7uc:otBaiLZ++tHt/5nZ7t
TLSH
T1BBE1004C9E9E5168E53B733ACFAB4188F73502271540A617BCDDA7986FF0245026AFEC
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/js/windows/finish-with-recommended-app/template.js

SHA256 f2f955faf5dc90e9ad50815566aa42a693128f97f07d02c5c3a1dbac27f570c4
MD5 e3f895c48a2c99c3e8656c9093075286
SHA1 4d1c13a0f03ba903787b23f5f27563966cc08a31
SHA512 7c71787b7bc49e77923e178fbc38e2fe7e45283f257766020a21e25535ff095b7896406e612e254c46fef5af4a0fd2a4a9f5ecb0b33fab91261f01a3bad9a54a
TLSH
T1D1315859425F9A73173A468E9B670EAD3960DF02C8B00F11B5DF4784E3735888EA7318
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/js/windows/finish/finish-controller.js

SHA256 c57d168e804e06f26709322e340076e576d405a72cee0b663176c6167785c3b3
MD5 b4e14fe186c7843fe1365b630a4a17b3
SHA1 86619b54889f3da9057a4937584df4acebf492fd
SHA512 bd0e5a72f6a6145c6177248351bb2ab2bbe7ff66d36dc7d022ab81d614eb39f2a0a3f4c267c3018202d17e175cfac5755138b6a05bd7f3c7b358dddb20635640
TLSH
T1C841AB4879FA43B66B753B3EDE290655F732422B0A0A867A3DDC92808FB1014039DFE4
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/js/windows/finish/template.js

SHA256 cedc900131ac48e92bd931926946dc342a99de1b16757969b7416f8ba037fad7
MD5 6410e00eec2197f48a0d2ff66d0c07d2
SHA1 480c640d3849cc90fc881306322ea96e31c1207b
SHA512 302f2fa32afdc0d2e8729a91ce20d16427f2a6d56f97a84aa1785c3babaaeb080ff8d1ba400a0d1c3917646b1597e1800a36622f3ebdcf14979da6e3a76879f4
TLSH
T13221289D426B5B37073A469C52675E6D3C60DE00C9710E29B4D74780E37789D8EA630D
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/js/windows/main/main-controller.js

SHA256 2cc465c2bb45f3fcee61baf732b4c87cb50b4baa64864bf832475f45e2846113
MD5 3d497dfdfa6f36a812b4988a79bfa641
SHA1 d5c951daf21080e9ba18b05619252d5b3624d20e
SHA512 f500817f58c407c0fac8290d77b0a7e9c6d8198bd6bb126eaead92a892f0a1efa9a09ea953349c21d62a3067cb1bff00257bcee67c6bab49b782e9688b1241a8
SSDEEP 384:2Rp8ChTvzkzPZPb5yPQZ688wqUaftN23n:2RprTvzkzPJ5eQZ688wqJftK
TLSH
T171721C0879A8167895B7333FDF6B0649FB71102B45068A2A3DDDC2C40FB1811466AFFE
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/js/windows/main/template.js

SHA256 d827fab7a8ec31dd68bcd7e6725c01b7d72d1224fc0c1a136dac513cc7884d0d
MD5 694ea1756f2dace45053080494afbb70
SHA1 f503248779de58075f5a3ea9ba97a4838b95d1a7
SHA512 aae8397bbea463cbcff7a26efbc8be6e9697a65073fb566fbe0d32a68dd4e656f9ca70268a1faacd2b137cd7fdeee1a380f4b4126cb1ee2a6d2bcf07bf076029
TLSH
T1956131221065157267BA42DA56266E7AFE61E303C58B9F25B6EE13C007F3C42CDB760B
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/js/windows/modal/modal-controller.js

SHA256 babc84f3a2bffe48bd239ead431bffaca0b572df7695a82fb1d0c4fa9040b722
MD5 4d83a2e0841cf28eb4ba69a11ec7bdab
SHA1 13536ee9fc29b3c53941b3157df53bb0ddac557e
SHA512 ecdf6f0a02415a9ebb7318cf486a2220e170871cc20c230fc12a8ae103f3740c90144d57bda00202a300a872d74a0b8700bb38ac1c423097992f30a3b3f72295
TLSH
T1FF51278A181A116595B7637FCF87019AFB73509B4A45421A3FCE8B011FB085093DFEE9
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/js/windows/privacy/privacy-controller.js

SHA256 06b2a07911bf80d3ef9979980a67010a2b20023ac9a38cae22fe70b739abde11
MD5 71f27207dcfd9aee4fbce9919e4bc924
SHA1 9e301b1670e82cbccd85df073d287f52d6d569d0
SHA512 1348c66bb4d2b2066d659305df0909f63862ee9b00e3eafc94d6df1893c55aa530a912b0e8a27b17a581b274dda1a78aa5f20dfb8c2e2d8106dc0776676b4ea3
TLSH
T14C5130AE607842701937773ADF2BA788FAB2412B9445CD163EBC9B411FB28154249FD9
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/js/windows/privacy/template.js

SHA256 95c459eae0edccdb94702aea603a097e461daa0e5f37dcd0e30de7df665433a8
MD5 cf8d2c26520d7c84e560dfa79e31dcd3
SHA1 716f2ec17480d5cc9c145bc147833fbfc39d36f0
SHA512 d466dcf7e86a4295857020feea281fc89f519f6bf1e79c3b5e1046d0745c9c9010377b1941e06c9a9b2c78a4173ed9909332d5d6c39b05f460e8a863086c895b
TLSH
T105F0C83C85A881211976C708CF12D625BE90C35B4D3F7C7671CF078357E7C01C921645
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/js/windows/progress/progress-1-controller.js

SHA256 88059a936f49f1c4376bd047256b965540c4edd4e60331405c4f92986f6828de
MD5 78f88c896dad595ef062a00a3dccf3a5
SHA1 0a321088d119c7bf977a6ad2caca9f84cdbc4058
SHA512 169fbd73dd73dc09428ebceefec5b079651fdc88306377a988ad3f2b96c0ff356532cb408ac26c627f77783c811f309794e2f93eb4a2e6cfb04fdf7cbddab732
TLSH
T1A941EA4E282942792DB3AB799A7E2909FB32411B500AC5203CFDA1404F7092A449BFED
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/js/windows/progress/template.js

SHA256 a7128a08bca53dd919cab3e5cb4dab31ded7ae2dafc957209b9fdd23f3b944ab
MD5 92b145e6649ba0add3dee9a69d3fa91e
SHA1 4db1a45392ec973cc8a7eecf3a30a9a7ecc7a64d
SHA512 747a087dffdba5c92d9f4c8923615d388b9c4c79d3b71d3cb90487aa37c132290a4f5107eef3055c03eadcb9614e20d4655393dc9251fab7e0ee2438f0d95751
TLSH
T1DDD09742C2A082312B3A1F6EA3F32320BE2040040B2A7630E6FF1081232B003860DBC6
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/js/windows/settings/settings-controller.js

SHA256 846b7dfdfac4c748589b33df2ae9a392b49b8010637b49cb880b9e000f0253a6
MD5 701c1f21f9969c50bcdd3211176a174f
SHA1 b213e1179a2a83d911a14677f10a0629170c35dc
SHA512 27d9dd9647fc1d692e8c935fc67f0ec1a6c34578c0b7848345bdb97b3e6458b96b7c72d894e3e3c7e753dfa8be48c7d2355225a0c2bee9b71f567a6e25ba621d
SSDEEP 192:5RFBjugWX8x2zLjiaPX/iXv1ijiJRWzHSQ9whrMk4Vo0MEKAmNN:5RFB6gWX8AiQPiOiJvsmD
TLSH
T1D3121C4EA96440364977577FCB678789FB72049B2402C92A7DECC9882FF08940396EE9
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/js/windows/settings/template.js

SHA256 8014a7c919da249ba2f2196d9c9b62639d20851be426f3ffaef161cbe477c45f
MD5 28513de0830383a516028e4a6e7585a0
SHA1 d31fc3a6f4a3ce6c4afb82ff2342a1ed718809e5
SHA512 0f7321c2ae13145bb694368dae1b74e6fe20e6b09712da2178bc46e6aa65223ab84c38abbf0ed074c85b42dba1a238a5f3f8d1ae060a0af6df748c5befe11b61
SSDEEP 48:Zx8LQmDdbaoFRpm4+0A2AEeQmDdbaoFCpm4+0A2AW:wpm4+5nHym4+5nW
TLSH
T18891086384219412477680DA5B369F1EFB65CF0241E65E34B2FF6BCC978BC8156ABB0C
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/app/js/windows/welcome/template.js

SHA256 42c546e9da748ef76fdab56b96fd511eb607617a9ba37b3dc420148b769d8acb
MD5 17f54fca6723b983875d940d931e0afb
SHA1 01774cd5cea36bd74c80a708d6f77567e8091024
SHA512 401df9a54cd14c19227d91bd08b4775a7b437644b4ca0d1d636d3e07b04591f9c5516e80040ae6a79ba400457d15e3d80aa148a63de870a64664fc5a02f7a038
TLSH
T12D31FF0AC55D81361533C3FAE28B5A5C7860AE40C9BDBC3439AF075967ABC00B933B70
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/js/windows/welcome/welcome-controller.js

SHA256 50a9faf985750a344344657dffb6880dbad95d2f0a060d911224f2addc6995a9
MD5 163f58f27116d6fa6f82aa9512259fa5
SHA1 8ae067638d5c3889d12ff18d3725982bbb76dd91
SHA512 a8d14643dce70da2fa5b9d519bdb012a2d1567f857d24c4cdad0bd4b42eec65b04e76a2e876cba0e7a6c433ef316428b2dfea42edcbaae15d874ad38d7eaf6ad
TLSH
T14F41DD9DA9B583742A357B3EDF2A0748FB32922F0A19866D79CC52410F71014425AFF4
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/manifest.json

SHA256 042f19540813a6af8a350d675a48feae549589fe8320e6f33ea8779bbec42a5e
MD5 5c8ea8f54317276d482ff5739b3f0eea
SHA1 803b03cc46c9dae0b5fcc78f8241c3e92b163b2e
SHA512 44bb2193a6cb2bd529d80bd199975fef23a0b53af89fb245cbd892d59b7b3ccbf3f62579da2faa7a157b5836905756ea23968d141ca38a746ed74d364872aa57
TLSH
T13C012819E8906DBB15393617A8F50700FB86433F02020F4B37BC500C4FB21591457E74
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/app/progress.html

SHA256 406af453b2c11dc68552167f9bceb2e4e8efbe530428cfd1cb7254f015c10d6c
MD5 9e1b3f15733aa51125caefc8d79a8996
SHA1 41f7c4b78230f67f64bde33a90d5200bb672488a
SHA512 b0859bfa8a187f5f7b10b8605d4796086bb96c3c6e1933dbb1c0166349264f25283d77f269cf412edb1adf724a9a01eb8411c5c5187e4ef5a8557df22a2436a1
SSDEEP 384:d53JlhPshoRJ/seq06ItLglbyPasN1vnYogfZZdu1U9n36+:vOhoX/seq06ItLglbyPa65nxG1K+
TLSH
T1CBC2B620D63B202EB137466BB1E2765D3125C913D657863EFA689272C7C75872F1378C
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

$PLUGINSDIR/log4net.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ae9c8073c3357c490f5d1c64101362918357c568f6b9380a60b09a4a4c1ff309
MD5 f15c8a9e2876568b3910189b2d493706
SHA1 32634db97e7c1705286cb1ac5ce20bc4e0ec17af
SHA512 805cd0a70aba2f1cf66e557d51ad30d42b32fbafcfbc6685ec204bc69847619479f653f4f33a4e466055707880d982eb1574ddab8edfa3c641e51cda950e2a0e
SSDEEP 3072:F+8gmdoxSO7ZbQFroo7RVir/dtnK0sgdnogtHcU5qFG1RSGCkE9kKn7GCcaLoWnS:I1N8LLI/PK0scnodG1RS1T93caLQD
TLSH
T15044065477F84A19F2FF6BB8A475411587B6F946B87ED39E0A80A4FC2C33B1089117A3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

21:19:ce:02:3c:42:51:72:0c:88:f7:ad:2c:58:50:e2:68:0d:4d:30:91:26:84:c2:91:ea:0d:c8:21:6e:f8:1e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Chains

Dec 25, 2022

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Serial Number

0e:e0:0d:4b:1a:48:0c:a8:70:01:b5:40:80:63:da:71

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 27, 2020 - Mar 3, 2023

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

4

Entry point

264682

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/nsProcess.dll

IMPHASH 439074d1c01f7b16781bdf060930814a
SHA256 d530589a90918334b8e08d7355630892dd62f41333d948a860735d5becfcb391
MD5 10e47e822b85d2a12fa4727001612182
SHA1 12826a0cc7103e13f9be20a00ecc2c0fc995d2d5
SHA512 1ca0fa5d3727c23bdf5cf3123bc784070a93982e11e3fd1a875712ee3422730c0fba54a121aa814585466ba837f8122bc72b39c08de07d8ad369ced5155955f7
SSDEEP 192:jUl64IGsjBIYiYF8tO7zBNUjgA5K+o/y2sE9jBF0NyAa53Ug:QZwIYiPWBNUkAM+o/8E9VF0NyD9Ug
TLSH
T157625AB38A985C62DD4B4C3172C4493BAEB4A6971AD0C1D7B31BC1814F90786BBF82F1
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Digest

6a:40:64:7e:cf:b4:15:9e:4c:19:dc:39:a4:ad:7a:28:7b:d7:0a:e8:a0:1f:bb:06:2e:9c:29:ef:12:55:89:2d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Chains

Aug 27, 2024

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Serial Number

0d:ac:c0:f7:43:c7:9d:8a:64:64:dc:96:7a:f3:b0:39

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jan 27, 2023 - Mar 3, 2026

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

5

Entry point

4097

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/nsis7z.dll

SHA256 61f009e96416288318168f2d25e372a1f14fcc762e135922e9acc98b376f67b7
MD5 1f8569dcd0225c5e956a2dba2a24b861
SHA1 c52e48c0e26740f8a46a48fb8751485e1b5b50da
SHA512 8a869e897ffbed47052e8604eb5c2d54170de9df0f64f2eec8800f12a0f2ca0689b9005f80148f62bd9f11ef39a6fcdc251f7b0fca34b10183d6d5d2d5446be8
SSDEEP 1536:u4Xm0KD49p7B8vri9UX0X8oX03ZY5LUDuXfAw3RlePlEDyWHci+nouy8QK70Y:u4W0KMrKri9UX0X8Z365LUqXYwBleqlo
TLSH
T1B683022789A0284FC5A72534B9DA893FB1B0F5496AA0C0F73674417D87423B77AEC6D3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

ACProtect 1.3x - 1.4x DLL software

Detects file using ACProtect software.
UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx

Digest

93:8d:9c:78:89:31:8a:93:f5:79:cf:86:24:d1:b7:bc:b8:ad:61:80:fe:26:d8:67:50:7c:39:ac:0e:87:82:1b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Chains

Sep 3, 2026

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Serial Number

09:87:88:89:88:36:53:78:54:3e:81:be:d4:39:bb:a8

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 27, 2026 - May 31, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

5

Entry point

210848

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/nsis7z64.dll

IMPHASH dd7cd06a0b2436c11533a6ea17d01100
SHA256 2368be6d8b21e0047146d3f61f90966a71d0737eed0146bc692b59f3cac97793
MD5 284c46af1fd2ec3a60ee0c28f276f2a4
SHA1 4d4d41c0af12d928e4e553ab6b80e6b4ab8007bc
SHA512 ca9e4ef79c9c7c5f2282ddeee34ec39a51cddf26dcad4e9f2e42230499b0b898ac2dfd33f25438aa995741d23037fa01a0269823c283b234ecec0f155d3c05ec
SSDEEP 6144:C5IQHIy4gGVccVSVwp78nPfRvFbVWHWWDwkUzF2C/GJAiLwQ9r1uykJE6KizMSZJ:eIQHIXVL8g7EW2z4oGJ4gr8FzvJ
TLSH
T198B45A1AFB648672D467D174C9638686F3B2B48A4A30C70F12E5A37E7F277A05D2D321
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Digest

ba:a8:88:23:4f:59:31:f3:22:e5:c5:1f:ba:f4:19:0b:c8:81:65:f8:c9:2a:cf:65:b3:b9:10:e7:96:be:d5:e9

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Chains

Mar 4, 2020

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Serial Number

0e:e0:0d:4b:1a:48:0c:a8:70:01:b5:40:80:63:da:71

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 27, 2020 - Mar 3, 2023

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

6

Entry point

287264

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

kernel32

GetFileInformationByHandle SetLastError DeviceIoControl GetModuleHandleW GetProcAddress HeapAlloc HeapFree GetProcessHeap GetSystemTimeAsFileTime GetStdHandle WaitForMultipleObjects GetTickCount SetFileApisToOEM SetFileApisToANSI AreFileApisANSI GlobalAlloc GlobalFree lstrcpynW lstrcpyW MultiByteToWideChar WideCharToMultiByte FreeLibrary GetModuleFileNameW LoadLibraryExW GetCurrentDirectoryW CreateDirectoryW DeleteFileW RemoveDirectoryW FormatMessageW SetFileTime GetTempPathW GetCurrentProcessId GetCurrentThreadId MoveFileW FindClose FindFirstFileW GetFileAttributesW GetModuleHandleA SetEndOfFile GetCurrentProcess GetSystemInfo HeapSize WriteConsoleW SetFilePointerEx SetStdHandle GetStringTypeW GetCommandLineW CreateSemaphoreW LocalFree CreateEventW WaitForSingleObject ReleaseSemaphore ResetEvent SetEvent InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc GetLastError CloseHandle WriteFile SetFilePointer ReadFile GetFileSize CreateFileW SetFileAttributesW GetCommandLineA FreeEnvironmentStringsW GetEnvironmentStringsW GetCPInfo GetOEMCP GetACP IsValidCodePage GetConsoleMode GetConsoleCP FlushFileBuffers GetFileType HeapReAlloc RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter InitializeSListHead RtlUnwindEx RtlPcToFileHeader EncodePointer RaiseException InterlockedFlushSList InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree CreateThread ExitThread FreeLibraryAndExitThread GetModuleHandleExW ExitProcess LCMapStringW

user32

CharUpperW SendMessageW FindWindowExW SetWindowTextW GetDlgItem wsprintfW

advapi32

SystemFunction036 SetFileSecurityW LookupPrivilegeValueW AdjustTokenPrivileges OpenProcessToken

oleaut32

VariantCopy VariantClear SysAllocStringLen SysStringLen SysFreeString

Name

.text

Size

334KB

Virtual Size

334KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

137KB

Virtual Size

136KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

10KB

Virtual Size

39KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

19KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gfids

Size

512B

Virtual Size

184B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

912B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

$PLUGINSDIR/uac.dll

IMPHASH 0ef725341a4aecf8398c0e2132f38049
SHA256 10a0e8cf46038ab3b2c3cf5dce407b9a043a631cbde9a5c8bcf0a54b2566c010
MD5 861f7e800bb28f68927e65719869409c
SHA1 a12bfcd2b9950e758ead281a9afbf1895bf10539
SHA512 f2bf24a0da69bbe4b4a0f0b1bfc5af175a66b8bcc4f5cc379ed0b89166fa9ffe1e16206b41fca7260ac7f8b86f8695b76f016bb371d7642aa71e61e29a3976eb
SSDEEP 384:5GVY6ClGoWxXH75T1WVl83lLsFIYiPWc+6AM+o/8E9VF0NyOk:tBWxXH9TYqlAyYiPjAMxkEH
TLSH
T14BB27DE682980E6AEA235D3175D563335FF8B6502DE0C1DF161786448B607D3BB3C27A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

79:04:2e:67:54:30:2a:4f:b2:2c:9d:24:87:82:cd:a0:27:ef:29:53:e1:c6:e4:73:2e:65:5a:4f:04:36:1f:b3

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Chains

Aug 27, 2024

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Serial Number

0d:ac:c0:f7:43:c7:9d:8a:64:64:dc:96:7a:f3:b0:39

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jan 27, 2023 - Mar 3, 2026

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

10632

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

SetLastError GetCurrentProcessId GetCommandLineW GetProcAddress CreateThread GlobalFree LoadLibraryA OpenProcess GlobalAlloc CreateFileMappingW Sleep MapViewOfFile GetModuleHandleW UnmapViewOfFile CreateEventW SetCurrentDirectoryW GetVersionExW GetExitCodeProcess lstrcatW LocalFree GetPrivateProfileStringW FormatMessageW GetPrivateProfileIntW CreateProcessW CloseHandle GetLastError DuplicateHandle GetCurrentThreadId lstrlenW SetEvent WaitForSingleObject lstrcmpiW GetExitCodeThread GetModuleFileNameW

user32

SetWindowPos GetClientRect GetWindowThreadProcessId SetWindowLongW DefWindowProcW GetDlgItem CallWindowProcW CallNextHookEx GetClassNameW PeekMessageW DestroyWindow SendMessageW SetForegroundWindow IsWindowVisible MsgWaitForMultipleObjects LoadStringW EndDialog EnableWindow DialogBoxParamW LoadImageW MessageBoxW GetWindowLongW DispatchMessageW ShowWindow wsprintfW CreateDialogParamW GetWindowRect IsDialogMessageW FindWindowExW CharNextW CreateWindowExW LoadIconW PostMessageW SetWindowsHookExW UnhookWindowsHookEx TranslateMessage

shell32

ShellExecuteExW

advapi32

OpenServiceW QueryServiceStatus CloseServiceHandle OpenProcessToken OpenSCManagerW GetUserNameW AdjustTokenPrivileges LookupPrivilegeValueW GetTokenInformation EqualSid

ole32

CoInitialize

$PLUGINSDIR/utils.dll

IMPHASH d1df4ecc5e6dee090f109d6f03e8eed9
SHA256 251ab3e2690562dcfcd510642607f206e6dcf626d06d94b74e1fa8297b1050a0
MD5 c6b46a5fcdccbf3aeff930b1e5b383d4
SHA1 6d5a8e08de862b283610bad2f6ce44936f439821
SHA512 97616475ef425421959489b650810b185488fcb02a1e90406b3014e948e66e5101df583815fd2be26d9c4d293a46b02ba4025426f743e682ed15d228f027f55c
SSDEEP 768:cmLFb5dc9LS+8dayUhaPxYkkLE53UEDNnxqWLb1pA26MbwYiPbAMxkEu:cmLFtd9+O0fkV7xpD6ww7Pbxy
TLSH
T1AD434B1172A0C433D5665A3069E8D6629E7E7C422BF480CB7FA9027E5FB13C16B78367
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Digest

83:1d:c8:ec:d8:0f:cb:ab:13:f6:1f:a6:8f:1a:5a:6e:25:7a:10:2a:ff:5c:72:d7:28:46:7a:55:81:da:e9:f6

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Chains

Aug 26, 2024

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Serial Number

0d:ac:c0:f7:43:c7:9d:8a:64:64:dc:96:7a:f3:b0:39

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jan 27, 2023 - Mar 3, 2026

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

1

Major OS version

5

Entry point

7935

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\development\tfs\Overwolf\InDev\MainDev\Source\Client\Branches\Iter108.1\OWInstaller\Tagger\Release\utils.pdb

$PLUGINSDIR/websocket-sharp.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 b152284fd1ef5cebee56802f13b46def7c136f0c50fb173ae29cf0648bb4cb1f
MD5 1b4fcde3554ed9ca14e8e7c3a1706fb3
SHA1 78070a29fc2943f49e896fb16e681431596bc613
SHA512 091940363d0f4873bf169721082ac63e1f6208fa79c42da6255aac8b43aa7e01879e8ae9f1475df68e77a50fb157d298a5a480ea94d6c0a57b03b47d69a1bfe3
SSDEEP 6144:2QNVC/FesewE4JVcmOBj6ssqq70ZOAs3PPJPsgUrf:0/MsaiVxOBnq7PM
TLSH
T1B844075827F8164AE9BF6BBDC4B050208779F906BD2BE71E0A9452FA1C73790CC25327
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

09:4f:1b:38:76:64:6c:7c:cb:f5:98:ee:e8:1f:86:35:8e:56:15:7b:93:22:7f:f7:fa:3a:4c:9c:f1:11:51:77

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Chains

Mar 4, 2020

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL

Serial Number

0e:e0:0d:4b:1a:48:0c:a8:70:01:b5:40:80:63:da:71

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 27, 2020 - Mar 3, 2023

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

4

Entry point

264830

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Sharing

General

Malware Config

Signatures

File Explorer

Buff Achievement Tracker - Installer.exe

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

generic

$PLUGINSDIR/CommandLine.dll

mscoree

dotnet

$PLUGINSDIR/DotNetZip.dll

mscoree

dotnet

$PLUGINSDIR/INetC.dll

kernel32

user32

comctl32

wininet

generic

$PLUGINSDIR/Microsoft.Web.WebView2.Core.dll

mscoree

dotnet

$PLUGINSDIR/Microsoft.Web.WebView2.WinForms.dll

mscoree

dotnet

$PLUGINSDIR/Microsoft.Win32.TaskScheduler.dll

mscoree

dotnet

$PLUGINSDIR/Newtonsoft.Json.dll

mscoree

dotnet

$PLUGINSDIR/OWInstaller.exe

generic

$PLUGINSDIR/OWInstaller.exe.config

$PLUGINSDIR/OverWolf.Client.CommonUtils.dll

generic

$PLUGINSDIR/SharpRaven.dll

mscoree

dotnet

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

$PLUGINSDIR/UserInfo.dll

kernel32

advapi32

generic

$PLUGINSDIR/WebView2Loader.dll

kernel32

generic

$PLUGINSDIR/app/_locales/de/messages.json

$PLUGINSDIR/app/_locales/en/messages.json

$PLUGINSDIR/app/_locales/es/messages.json

$PLUGINSDIR/app/_locales/fr/messages.json

$PLUGINSDIR/app/_locales/it/messages.json

$PLUGINSDIR/app/_locales/ja/messages.json

$PLUGINSDIR/app/_locales/ko/messages.json

$PLUGINSDIR/app/_locales/pl/messages.json

$PLUGINSDIR/app/_locales/pt/messages.json

$PLUGINSDIR/app/_locales/ru/messages.json

$PLUGINSDIR/app/_locales/tr/messages.json

$PLUGINSDIR/app/_locales/vi/messages.json

$PLUGINSDIR/app/_locales/zh-tw/messages.json

$PLUGINSDIR/app/_locales/zh/messages.json

$PLUGINSDIR/app/assets/fonts/lato/LatoLatin-Regular.eot

$PLUGINSDIR/app/assets/fonts/lato/LatoLatin-Regular.woff

$PLUGINSDIR/app/assets/fonts/montserrat/Montserrat-Black.woff

$PLUGINSDIR/app/assets/fonts/montserrat/Montserrat-Bold.woff

$PLUGINSDIR/app/assets/fonts/montserrat/Montserrat-Medium.woff

$PLUGINSDIR/app/assets/fonts/montserrat/Montserrat-Regular.woff

$PLUGINSDIR/app/assets/fonts/montserrat/Montserrat-SemiBold.woff

$PLUGINSDIR/app/cmp.html