Adobe.Audition.CC.2017.u2.Multilingual.iso
- SHA256 6501f4b95651e742d2bf41587625b2474455087b238d31eefcabb832922a69c9
Overview
overview
8Static
static
5Adobe CC 2...up.exe
windows10-2004-x64
7assets/EUL...e.html
windows10-2004-x64
3assets/EUL...e.html
windows10-2004-x64
3assets/EUL...e.html
windows10-2004-x64
3assets/EUL...e.html
windows10-2004-x64
3assets/EUL...e.html
windows10-2004-x64
3assets/EUL...e.html
windows10-2004-x64
3assets/EUL...e.html
windows10-2004-x64
3assets/EUL...e.html
windows10-2004-x64
3assets/EUL...e.html
windows10-2004-x64
3P6Native.dll
windows10-2004-x64
3Adobe CC 2...up.exe
windows10-2004-x64
7Adobe CC 2...64.exe
windows10-2004-x64
7Adobe CC 2...86.exe
windows10-2004-x64
7Adobe CC 2...64.exe
windows10-2004-x64
7Adobe CC 2...86.exe
windows10-2004-x64
Adobe CC 2...64.exe
windows10-2004-x64
7Adobe CC 2...86.exe
windows10-2004-x64
7Adobe CC 2...64.exe
windows10-2004-x64
4Adobe CC 2...86.exe
windows10-2004-x64
4Adobe CC 2...64.exe
windows10-2004-x64
4Adobe CC 2...86.exe
windows10-2004-x64
4Adobe CC 2...64.exe
windows10-2004-x64
7Adobe CC 2...86.exe
windows10-2004-x64
7Adobe CC 2...IM.dll
windows10-2004-x64
4Adobe CC 2...ry.dll
windows10-2004-x64
3Crack/Emul...er.exe
windows10-2004-x64
7Crack/Keyg...en.exe
windows10-2004-x64
5Crack/Keyg...le.cmd
windows10-2004-x64
8Crack/Patc...er.exe
windows10-2004-x64
7autoplay.exe
windows10-2004-x64
7unicows.dll
windows10-2004-x64
3Behavioral task
behavioral1
Sample
Adobe CC 2017/Set-up.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
assets/EULA/cs_CZ/license.html
Resource
win10v2004-20260513-en
windows10-2004-x64
11 signatures
150 seconds
Behavioral task
behavioral3
Sample
assets/EULA/da_DK/license.html
Resource
win10v2004-20260513-en
windows10-2004-x64
11 signatures
150 seconds
Behavioral task
behavioral4
Sample
assets/EULA/de_DE/license.html
Resource
win10v2004-20260513-en
windows10-2004-x64
11 signatures
150 seconds
Behavioral task
behavioral5
Sample
assets/EULA/en_AE/license.html
Resource
win10v2004-20260513-en
windows10-2004-x64
11 signatures
150 seconds
Behavioral task
behavioral6
Sample
assets/EULA/en_GB/license.html
Resource
win10v2004-20260513-en
windows10-2004-x64
11 signatures
150 seconds
Behavioral task
behavioral7
Sample
assets/EULA/en_IL/license.html
Resource
win10v2004-20260513-en
windows10-2004-x64
11 signatures
150 seconds
Behavioral task
behavioral8
Sample
assets/EULA/en_US/license.html
Resource
win10v2004-20260513-en
windows10-2004-x64
11 signatures
150 seconds
Behavioral task
behavioral9
Sample
assets/EULA/es_ES/license.html
Resource
win10v2004-20260513-en
windows10-2004-x64
11 signatures
150 seconds
Behavioral task
behavioral10
Sample
assets/EULA/es_MX/license.html
Resource
win10v2004-20260513-en
windows10-2004-x64
11 signatures
150 seconds
Behavioral task
behavioral11
Sample
P6Native.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral12
Sample
Adobe CC 2017/packages/setup.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
10 signatures
150 seconds
Behavioral task
behavioral13
Sample
Adobe CC 2017/payloads/Microsoft VC 2005 Redist (x64)/vcredist_x64.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
15 signatures
150 seconds
Behavioral task
behavioral14
Sample
Adobe CC 2017/payloads/Microsoft VC 2005 Redist (x86)/vcredist_x86.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
15 signatures
150 seconds
Behavioral task
behavioral15
Sample
Adobe CC 2017/payloads/Microsoft VC 2008 Redist (x64)/vcredist_x64.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral16
Sample
Adobe CC 2017/payloads/Microsoft VC 2008 Redist (x86)/vcredist_x86.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
11 signatures
150 seconds
Behavioral task
behavioral17
Sample
Adobe CC 2017/payloads/Microsoft VC 2010 Redist (x64)/vcredist_x64.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
10 signatures
150 seconds
Behavioral task
behavioral18
Sample
Adobe CC 2017/payloads/Microsoft VC 2010 Redist (x86)/vcredist_x86.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
10 signatures
150 seconds
Behavioral task
behavioral19
Sample
Adobe CC 2017/payloads/Microsoft VC 2012 Redist (x64)/vcredist_x64.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral20
Sample
Adobe CC 2017/payloads/Microsoft VC 2012 Redist (x86)/vcredist_x86.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral21
Sample
Adobe CC 2017/payloads/Microsoft VC 2013 Redist (x64)/vcredist_x64.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral22
Sample
Adobe CC 2017/payloads/Microsoft VC 2013 Redist (x86)/vcredist_x86.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral23
Sample
Adobe CC 2017/payloads/Microsoft VC 2015 Redist (x64)/vcredist_x64.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
7 signatures
150 seconds
Behavioral task
behavioral24
Sample
Adobe CC 2017/payloads/Microsoft VC 2015 Redist (x86)/vcredist_x86.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
7 signatures
150 seconds
Behavioral task
behavioral25
Sample
Adobe CC 2017/resources/AdobePIM.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral26
Sample
Adobe CC 2017/resources/updaterinventory.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral27
Sample
Crack/Emul/amtemu.v0.9.2-painter.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
6 signatures
150 seconds
Behavioral task
behavioral28
Sample
Crack/Keygen/Activation_Keygen.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral29
Sample
Crack/Keygen/Check_Disable.cmd
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral30
Sample
Crack/Patch/adobe.snr.patch.v2.0-painter.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral31
Sample
autoplay.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
10 signatures
150 seconds
Behavioral task
behavioral32
Sample
unicows.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
General
- Target Adobe.Audition.CC.2017.u2.Multilingual.iso
- Size 398.5MB
- Sample260910-txhpqadr7z
- SHA256 6501f4b95651e742d2bf41587625b2474455087b238d31eefcabb832922a69c9
- MD5 f577865d1a1c24cf7b619d6044812b82
- SHA1 34b78b342ad64f0cc0182c0889ccbf7f8e9c654a
- SHA512 f2128feb68cd0cbdee4f451a49a37d1730f1026a02d0b3aa096b5e32e5afecdf642a325f158f583ae1d3a3edfb6253ebcdb60f001a403df8b1922a8f048d6d77
- SSDEEP 12582912:cyaedlXCkcUXrwY5ZdsHFkFLD644WqP9v5/0W6y/0Wn:cRedYkREGZyHSPp4Wq15/0W6y/0W
- TLSH T1E119332F669055E2E173FFF1AD145A15AA2DAC38673110E372FC4F2A17B31C6563B222
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
-
resource yara_rule static1/unpack002/Crack/Keygen/Activation_Keygen.exe upx - Insecure Codesign Algorithm 1 IoCs
File was codesigned using an insecure algorithm.
resource unpack007/AdobeIPCBroker.exe - Unsigned PE 8 IoCs
Checks for missing Authenticode signature.
resource unpack005/DE6/Setup.dll unpack002/Adobe CC 2017/packages/setup.exe unpack002/Adobe CC 2017/payloads/Microsoft VC 2015 Redist (x64)/vcredist_x64.exe unpack002/Adobe CC 2017/payloads/Microsoft VC 2015 Redist (x86)/vcredist_x86.exe unpack002/Adobe CC 2017/resources/AdobePIM.dll unpack002/Crack/Emul/amtemu.v0.9.2-painter.exe unpack002/Crack/Keygen/Activation_Keygen.exe unpack002/Crack/Patch/adobe.snr.patch.v2.0-painter.exe - Untrusted Codesign Signers 71 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack002/Adobe CC 2017/Set-up.exe unpack003/CCMNative.dll unpack003/Utilities/AAMHelper.exe unpack003/Utilities/AdobeApplicationManager(URIHandler).exe unpack003/Utilities/AdobeApplicationManager.exe unpack003/Utilities/npAdobeAAMDetect32.dll unpack003/Utilities/npAdobeAAMDetect64.dll unpack003/tools/7za.exe unpack004/D6Native.dll unpack004/Setup.exe unpack004/TokenGenerator64.exe unpack005/ARKSelector.dll unpack005/DE5/Setup.dll unpack005/DE5/resources/libraries/ARKCmdCaps.dll unpack005/DE5/resources/libraries/ARKCmdDefrag.dll unpack005/DE5/resources/libraries/ARKCmdFS.dll unpack005/DE5/resources/libraries/ARKEngine.dll unpack005/DE5/resources/libraries/AdobePIM.dll unpack005/DE5/resources/libraries/Adobe_Helperx32.exe unpack005/DE5/resources/libraries/Adobe_Helperx64.exe unpack005/DE5/resources/libraries/CustomHook_Helperx64.exe unpack005/DE5/resources/libraries/EventMessages.dll unpack005/DE5/resources/libraries/TokenResolverx64.exe unpack005/DE5/resources/libraries/adobeFileVersioner.dll unpack005/DE5/resources/libraries/patchw32.dll unpack005/DE5/resources/libraries/updaterinventory.dll unpack005/DE6/resources/libraries/ARKCmdCaps.dll unpack005/DE6/resources/libraries/ARKCmdDefrag.dll unpack005/DE6/resources/libraries/ARKCmdFS.dll unpack005/DE6/resources/libraries/ARKEngine.dll unpack005/DE6/resources/libraries/AdobePIM.dll unpack005/DE6/resources/libraries/Adobe_Helperx32.exe unpack005/DE6/resources/libraries/Adobe_Helperx64.exe unpack005/DE6/resources/libraries/CustomHook_Helperx64.exe unpack005/DE6/resources/libraries/EventMessages.dll unpack005/DE6/resources/libraries/TokenResolverx64.exe unpack005/DE6/resources/libraries/adobeFileVersioner.dll unpack005/DE6/resources/libraries/patchw32.dll unpack005/DE6/resources/libraries/updaterinventory.dll unpack005/PlatformUtil.exe unpack005/Setup.exe unpack006/DWANative.dll unpack006/Setup.exe unpack006/TokenGenerator64.exe unpack007/customhook/AdobeIPCBrokerCustomHook.exe unpack008/AAM Registration Notifier.exe unpack008/PWANative.dll unpack008/adobe_caps.dll unpack008/adobe_licutil.exe unpack008/adobe_oobelib.dll unpack008/adobe_upgrade.dll unpack008/amtservices.dll unpack008/asneu.dll unpack009/AAM Registration Notifier.exe unpack009/IMSLib.dll unpack009/P6Native.dll unpack009/VulcanBridge.dll unpack009/VulcanMessage.dll unpack009/adobe_licutil.exe unpack009/adobe_oobelib.dll unpack009/adobe_upgrade.dll unpack009/axlib.dll unpack002/Adobe CC 2017/payloads/Microsoft VC 2005 Redist (x64)/vcredist_x64.EXE unpack002/Adobe CC 2017/payloads/Microsoft VC 2005 Redist (x86)/vcredist_x86.exe unpack002/Adobe CC 2017/payloads/Microsoft VC 2008 Redist (x64)/vcredist_x64.exe unpack002/Adobe CC 2017/payloads/Microsoft VC 2008 Redist (x86)/vcredist_x86.exe unpack002/Adobe CC 2017/payloads/Microsoft VC 2010 Redist (x64)/vcredist_x64.exe unpack002/Adobe CC 2017/payloads/Microsoft VC 2010 Redist (x86)/vcredist_x86.exe unpack002/Adobe CC 2017/resources/updaterinventory.dll unpack002/autoplay.exe unpack002/unicows.dll
File Explorer
-
Adobe.Audition.CC.2017.u2.Multilingual.iso.iso 398.5MB
-
out.iso.iso 398.5MB
-
Adobe CC 2017/Set-up.exe.exe 2.4MB
-
Adobe CC 2017/packages/CCM/CCM.pima.zip 5.4MB
-
CCMFlex.swf1.4MB
-
CCMNative.dll.dll 1.7MB
-
Utilities/AAMHelper.exe.exe 400KB
-
Utilities/AdobeApplicationManager(URIHandler).exe.exe 584KB
-
Utilities/AdobeApplicationManager.exe.exe 2.2MB
-
Utilities/npAdobeAAMDetect32.dll.dll 1.1MB
-
Utilities/npAdobeAAMDetect64.dll.dll 1.4MB
-
ZStringResources/FontCustomization.xml.xml 1KB
-
ZStringResources/cs_CZ/stringtable.xml.vbs .xml 34KB
-
ZStringResources/da_DK/stringtable.xml.vbs .xml 33KB
-
ZStringResources/de_DE/stringtable.xml.vbs .xml 35KB
-
ZStringResources/en_AE/stringtable.xml.vbs .xml 29KB
-
ZStringResources/en_GB/stringtable.xml.vbs .xml 29KB
-
ZStringResources/en_IL/stringtable.xml.vbs .xml 29KB
-
ZStringResources/en_US/stringtable.xml.vbs .xml 29KB
-
ZStringResources/en_XM/stringtable.xml.vbs .xml 29KB
-
ZStringResources/es_ES/stringtable.xml.vbs .xml 34KB
-
ZStringResources/es_LA/stringtable.xml.vbs .xml 34KB
-
ZStringResources/es_MX/stringtable.xml.vbs .xml 34KB
-
ZStringResources/es_NA/stringtable.xml.vbs .xml 34KB
-
ZStringResources/fi_FI/stringtable.xml.vbs .xml 33KB
-
ZStringResources/fr_CA/stringtable.xml.vbs .xml 35KB
-
ZStringResources/fr_FR/stringtable.xml.vbs .xml 35KB
-
ZStringResources/fr_MA/stringtable.xml.vbs .xml 29KB
-
ZStringResources/fr_XM/stringtable.xml.vbs .xml 35KB
-
ZStringResources/hu_HU/stringtable.xml.vbs .xml 29KB
-
ZStringResources/it_IT/stringtable.xml.vbs .xml 34KB
-
ZStringResources/ja_JP/stringtable.xml.vbs .xml 38KB
-
ZStringResources/ko_KR/stringtable.xml.vbs .xml 35KB
-
ZStringResources/nb_NO/stringtable.xml.vbs .xml 33KB
-
ZStringResources/nl_NL/stringtable.xml.vbs .xml 34KB
-
ZStringResources/pl_PL/stringtable.xml.vbs .xml 35KB
-
ZStringResources/pt_BR/stringtable.xml.vbs .xml 34KB
-
ZStringResources/ru_RU/stringtable.xml.vbs .xml 41KB
-
ZStringResources/sv_SE/stringtable.xml.vbs .xml 33KB
-
ZStringResources/tr_TR/stringtable.xml.vbs .xml 34KB
-
ZStringResources/uk_UA/stringtable.xml.vbs .xml 29KB
-
ZStringResources/zh_CN/stringtable.xml.vbs .xml 32KB
-
ZStringResources/zh_TW/stringtable.xml.vbs .xml 32KB
-
assets/EULA/EULAVersion.xml56B
-
assets/EULA/cs_CZ/license.html84KB
-
assets/EULA/da_DK/license.html79KB
-
assets/EULA/de_DE/license.html88KB
-
assets/EULA/en_AE/license.html75KB
-
assets/EULA/en_GB/license.html75KB
-
assets/EULA/en_IL/license.html75KB
-
assets/EULA/en_US/license.html75KB
-
assets/EULA/es_ES/license.html83KB
-
assets/EULA/es_MX/license.html83KB
-
assets/EULA/fi_FI/license.html83KB
-
assets/EULA/fr_CA/license.html90KB
-
assets/EULA/fr_FR/license.html90KB
-
assets/EULA/fr_MA/license.html90KB
-
assets/EULA/hu_HU/license.html92KB
-
assets/EULA/it_IT/license.html85KB
-
assets/EULA/ja_JP/license.html98KB
-
assets/EULA/ko_KR/license.html84KB
-
assets/EULA/nb_NO/license.html77KB
-
assets/EULA/nl_NL/license.html86KB
-
assets/EULA/pl_PL/license.html91KB
-
assets/EULA/pt_BR/license.html.bat 83KB
-
assets/EULA/ru_RU/license.html159KB
-
assets/EULA/sv_SE/license.html81KB
-
assets/EULA/tr_TR/license.html87KB
-
assets/EULA/uk_UA/license.html148KB
-
assets/EULA/zh_CN/license.html62KB
-
assets/EULA/zh_TW/license.html62KB
-
assets/logo.png.png 2KB
-
tools/7za.exe.exe 581KB
-
Adobe CC 2017/packages/CCM/CCM.pimx75KB
-
Adobe CC 2017/packages/CCM/CCM.sig.xml 1KB
-
Adobe CC 2017/packages/D6/D6.pima.zip 2.3MB
-
D6Flex.swf1.5MB
-
D6Native.dll.dll 854KB
-
Setup.exe.exe 137KB
-
TokenGenerator64.exe.exe 266KB
-
ZStringResources/FontCustomization.xml.xml 1KB
-
ZStringResources/cs_CZ/stringtable.xml.vbs .xml 34KB
-
ZStringResources/da_DK/stringtable.xml.vbs .xml 32KB
-
ZStringResources/de_DE/stringtable.xml.vbs .xml 34KB
-
ZStringResources/en_AE/stringtable.xml.vbs .xml 29KB
-
ZStringResources/en_GB/stringtable.xml.vbs .xml 28KB
-
ZStringResources/en_IL/stringtable.xml.vbs .xml 29KB
-
ZStringResources/en_US/stringtable.xml.vbs .xml 28KB
-
ZStringResources/en_XM/stringtable.xml.vbs .xml 28KB
-
ZStringResources/es_ES/stringtable.xml.vbs .xml 33KB
-
ZStringResources/es_LA/stringtable.xml.vbs .xml 33KB
-
ZStringResources/es_MX/stringtable.xml.vbs .xml 33KB
-
ZStringResources/es_NA/stringtable.xml.vbs .xml 33KB
-
ZStringResources/fi_FI/stringtable.xml.vbs .xml 33KB
-
ZStringResources/fr_CA/stringtable.xml.vbs .xml 34KB
-
ZStringResources/fr_FR/stringtable.xml.vbs .xml 34KB
-
ZStringResources/fr_MA/stringtable.xml.vbs .xml 34KB
-
ZStringResources/fr_XM/stringtable.xml.vbs .xml 34KB
-
ZStringResources/hu_HU/stringtable.xml.vbs .xml 34KB
-
ZStringResources/it_IT/stringtable.xml.vbs .xml 33KB
-
ZStringResources/ja_JP/stringtable.xml.vbs .xml 37KB
-
ZStringResources/ko_KR/stringtable.xml.vbs .xml 34KB
-
ZStringResources/nb_NO/stringtable.xml.vbs .xml 32KB
-
ZStringResources/nl_NL/stringtable.xml.vbs .xml 33KB
-
ZStringResources/pl_PL/stringtable.xml.vbs .xml 34KB
-
ZStringResources/pt_BR/stringtable.xml.vbs .xml 33KB
-
ZStringResources/ru_RU/stringtable.xml.vbs .xml 40KB
-
ZStringResources/sv_SE/stringtable.xml.vbs .xml 32KB
-
ZStringResources/tr_TR/stringtable.xml.vbs .xml 33KB
-
ZStringResources/uk_UA/stringtable.xml.vbs .xml 40KB
-
ZStringResources/zh_CN/stringtable.xml.vbs .xml 31KB
-
ZStringResources/zh_TW/stringtable.xml.vbs .xml 31KB
-
Adobe CC 2017/packages/D6/D6.pimx94KB
-
Adobe CC 2017/packages/D6/D6.sig.xml 1KB
-
Adobe CC 2017/packages/DECore/DECore.pima.zip 12.4MB
-
ARKSelector.dll.dll 39KB
-
DE5/Setup.dll.dll 2.6MB
-
DE5/resources/libraries/ARKCmdCaps.dll.dll 331KB
-
DE5/resources/libraries/ARKCmdDefrag.dll.dll 75KB
-
DE5/resources/libraries/ARKCmdFS.dll.dll 432KB
-
DE5/resources/libraries/ARKEngine.dll.dll 517KB
-
DE5/resources/libraries/AdobePIM.dll.dll 810KB
-
DE5/resources/libraries/Adobe_Helperx32.exe.exe 2.0MB
-
DE5/resources/libraries/Adobe_Helperx64.exe.exe 2.5MB
-
DE5/resources/libraries/CustomHook_Helperx64.exe.exe 347KB
-
DE5/resources/libraries/EventMessages.dll.dll 7KB
-
DE5/resources/libraries/TokenResolverx64.exe.exe 78KB
-
DE5/resources/libraries/adobeFileVersioner.dll.dll 271KB
-
DE5/resources/libraries/patchw32.dll.dll 226KB
-
DE5/resources/libraries/updaterinventory.dll.dll 457KB
-
DE5/resources/uninstall/Uninstall.db71KB
-
DE6/Setup.dll.dll 3.2MB
-
DE6/resources/libraries/ARKCmdCaps.dll.dll 332KB
-
DE6/resources/libraries/ARKCmdDefrag.dll.dll 75KB
-
DE6/resources/libraries/ARKCmdFS.dll.dll 452KB
-
DE6/resources/libraries/ARKEngine.dll.dll 538KB
-
DE6/resources/libraries/AdobePIM.dll.dll 1.3MB
-
DE6/resources/libraries/Adobe_Helperx32.exe.exe 2.0MB
-
DE6/resources/libraries/Adobe_Helperx64.exe.exe 2.5MB
-
DE6/resources/libraries/CustomHook_Helperx64.exe.exe 372KB
-
DE6/resources/libraries/EventMessages.dll.dll 7KB
-
DE6/resources/libraries/TokenResolverx64.exe.exe 106KB
-
DE6/resources/libraries/adobeFileVersioner.dll.dll 271KB
-
DE6/resources/libraries/patchw32.dll.dll 226KB
-
DE6/resources/libraries/updaterinventory.dll.dll 457KB
-
DE6/resources/uninstall/Uninstall.db71KB
-
PlatformUtil.exe.exe 29KB
-
Setup.exe.exe 606KB
-
atl110.dll.dll 160KB
-
mfc110u.dll.dll 4.3MB
-
msvcp110.dll.dll 522KB
-
msvcr110.dll.dll 854KB
-
vccorlib110.dll.dll 246KB
-
Adobe CC 2017/packages/DECore/DECore.pimx89KB
-
Adobe CC 2017/packages/DECore/DECore.sig.xml 1KB
-
Adobe CC 2017/packages/DWA/DWA.pima.zip 2.8MB
-
AdobeIDFlex.swf628KB
-
DWAFlex.swf626KB
-
DWANative.dll.dll 708KB
-
Setup.exe.exe 394KB
-
TokenGenerator64.exe.exe 116KB
-
ZStringResources/cs_CZ/stringtable.xml.vbs .xml 45KB
-
ZStringResources/da_DK/stringtable.xml.vbs .xml 44KB
-
ZStringResources/de_DE/stringtable.xml.vbs .xml 46KB
-
ZStringResources/en_GB/stringtable.xml.vbs .xml 38KB
-
ZStringResources/en_US/stringtable.xml.vbs .xml 38KB
-
ZStringResources/en_XM/stringtable.xml.vbs .xml 38KB
-
ZStringResources/es_ES/stringtable.xml.vbs .xml 46KB
-
ZStringResources/es_LA/stringtable.xml.vbs .xml 46KB
-
ZStringResources/es_MX/stringtable.xml.vbs .xml 46KB
-
ZStringResources/es_NA/stringtable.xml.vbs .xml 46KB
-
ZStringResources/fi_FI/stringtable.xml.vbs .xml 44KB
-
ZStringResources/fr_CA/stringtable.xml.vbs .xml 47KB
-
ZStringResources/fr_FR/stringtable.xml.vbs .xml 47KB
-
ZStringResources/fr_XM/stringtable.xml.vbs .xml 47KB
-
ZStringResources/hu_HU/stringtable.xml.vbs .xml 47KB
-
ZStringResources/it_IT/stringtable.xml.vbs .xml 46KB
-
ZStringResources/ja_JP/stringtable.xml.vbs .xml 52KB
-
ZStringResources/ko_KR/stringtable.xml.vbs .xml 46KB
-
ZStringResources/nb_NO/stringtable.xml.vbs .xml 44KB
-
ZStringResources/nl_NL/stringtable.xml.vbs .xml 45KB
-
ZStringResources/pl_PL/stringtable.xml.vbs .xml 46KB
-
ZStringResources/pt_BR/stringtable.xml.vbs .xml 45KB
-
ZStringResources/ru_RU/stringtable.xml.vbs .xml 57KB
-
ZStringResources/sv_SE/stringtable.xml.vbs .xml 44KB
-
ZStringResources/tr_TR/stringtable.xml.vbs .xml 45KB
-
ZStringResources/uk_UA/stringtable.xml.vbs .xml 57KB
-
ZStringResources/zh_CN/stringtable.xml.vbs .xml 41KB
-
ZStringResources/zh_TW/stringtable.xml.vbs .xml 42KB
-
adobeIdManifest.xml.xml 167B
-
assets/fonts_clean.swf652KB
-
assets/fonts_system.swf197KB
-
Adobe CC 2017/packages/DWA/DWA.pimx47KB
-
Adobe CC 2017/packages/DWA/DWA.sig.xml 1KB
-
Adobe CC 2017/packages/IPC/IPC.pima.zip 570KB
-
AdobeIPCBroker.exe.exe 1.0MB
-
StartupOptions.xml.xml 973B
-
customhook/AdobeIPCBrokerCustomHook.exe.exe 120KB
-
Adobe CC 2017/packages/IPC/IPC.pimx4KB
-
Adobe CC 2017/packages/IPC/IPC.sig.xml 1KB
-
Adobe CC 2017/packages/LWA/LWA.pima.zip 5.4MB
-
AAM Registration Notifier.exe.exe 261KB
-
AMT/AdobeConfig.xml.xml 70KB
-
AMT/application.sif220B
-
AdobeIDFlex.swf628KB
-
OBLRes/ar_AE/ConnectionFAQ.html.html 11KB
-
OBLRes/ar_AE/LicenseFAQ.html.html 17KB
-
OBLRes/ar_AE/Main.zdct2KB
-
OBLRes/bg_BG/ConnectionFAQ.html.html 11KB
-
OBLRes/bg_BG/LicenseFAQ.html.html 18KB
-
OBLRes/bg_BG/Main.zdct2KB
-
OBLRes/bg_BG/oobe_launcher.zdct459B
-
OBLRes/cs_CZ/ConnectionFAQ.html.html 11KB
-
OBLRes/cs_CZ/LicenseFAQ.html.html 17KB
-
OBLRes/cs_CZ/Main.zdct2KB
-
OBLRes/cs_CZ/oobe_launcher.zdct4KB
-
OBLRes/da_DK/ConnectionFAQ.html.html 11KB
-
OBLRes/da_DK/LicenseFAQ.html.html 17KB
-
OBLRes/da_DK/Main.zdct2KB
-
OBLRes/da_DK/oobe_launcher.zdct4KB
-
OBLRes/de_DE/ConnectionFAQ.html.html 11KB
-
OBLRes/de_DE/LicenseFAQ.html.html 18KB
-
OBLRes/de_DE/Main.zdct2KB
-
OBLRes/de_DE/oobe_launcher.zdct5KB
-
OBLRes/el_GR/ConnectionFAQ.html.html 12KB
-
OBLRes/el_GR/LicenseFAQ.html.html 18KB
-
OBLRes/el_GR/Main.zdct2KB
-
OBLRes/en_GB/ConnectionFAQ.html.html 12KB
-
OBLRes/en_GB/LicenseFAQ.html.html 18KB
-
OBLRes/en_GB/Main.zdct2KB
-
OBLRes/en_GB/oobe_launcher.zdct4KB
-
OBLRes/en_MX/ConnectionFAQ.html.html 12KB
-
OBLRes/en_MX/LicenseFAQ.html.html 18KB
-
OBLRes/en_MX/Main.zdct2KB
-
OBLRes/en_MX/oobe_launcher.zdct459B
-
OBLRes/en_US/ConnectionFAQ.html.html 12KB
-
OBLRes/en_US/LicenseFAQ.html.html 18KB
-
OBLRes/en_US/Main.zdct2KB
-
OBLRes/en_US/oobe_launcher.zdct4KB
-
OBLRes/en_XM/ConnectionFAQ.html.html 12KB
-
OBLRes/en_XM/LicenseFAQ.html.html 18KB
-
OBLRes/en_XM/Main.zdct2KB
-
OBLRes/en_XM/oobe_launcher.zdct4KB
-
OBLRes/es_ES/ConnectionFAQ.html.html 18KB
-
OBLRes/es_ES/LicenseFAQ.html.html 23KB
-
OBLRes/es_ES/Main.zdct2KB
-
OBLRes/es_ES/oobe_launcher.zdct4KB
-
OBLRes/es_LA/oobe_launcher.zdct4KB
-
OBLRes/es_MX/ConnectionFAQ.html.html 18KB
-
OBLRes/es_MX/LicenseFAQ.html.html 23KB
-
OBLRes/es_MX/Main.zdct2KB
-
OBLRes/es_MX/oobe_launcher.zdct4KB
-
OBLRes/es_NA/oobe_launcher.zdct4KB
-
OBLRes/et_EE/ConnectionFAQ.html.html 11KB
-
OBLRes/et_EE/LicenseFAQ.html.html 17KB
-
OBLRes/et_EE/Main.zdct2KB
-
OBLRes/et_EE/oobe_launcher.zdct459B
-
OBLRes/fi_FI/ConnectionFAQ.html.html 18KB
-
OBLRes/fi_FI/LicenseFAQ.html.html 22KB
-
OBLRes/fi_FI/Main.zdct2KB
-
OBLRes/fi_FI/oobe_launcher.zdct4KB
-
OBLRes/fr_CA/ConnectionFAQ.html.html 12KB
-
OBLRes/fr_CA/LicenseFAQ.html.html 18KB
-
OBLRes/fr_CA/Main.zdct2KB
-
OBLRes/fr_CA/oobe_launcher.zdct5KB
-
OBLRes/fr_FR/ConnectionFAQ.html.html 12KB
-
OBLRes/fr_FR/LicenseFAQ.html.html 18KB
-
OBLRes/fr_FR/Main.zdct2KB
-
OBLRes/fr_FR/oobe_launcher.zdct4KB
-
OBLRes/fr_MX/ConnectionFAQ.html.html 12KB
-
OBLRes/fr_MX/LicenseFAQ.html.html 18KB
-
OBLRes/fr_MX/Main.zdct2KB
-
OBLRes/fr_MX/oobe_launcher.zdct5KB
-
OBLRes/fr_XM/ConnectionFAQ.html.html 12KB
-
OBLRes/fr_XM/LicenseFAQ.html.html 18KB
-
OBLRes/fr_XM/Main.zdct2KB
-
OBLRes/fr_XM/oobe_launcher.zdct4KB
-
OBLRes/he_IL/ConnectionFAQ.html.html 11KB
-
OBLRes/he_IL/LicenseFAQ.html.html 17KB
-
OBLRes/he_IL/Main.zdct1KB
-
OBLRes/hr_HR/ConnectionFAQ.html.html 11KB
-
OBLRes/hr_HR/LicenseFAQ.html.html 17KB
-
OBLRes/hr_HR/Main.zdct2KB
-
OBLRes/hr_HR/oobe_launcher.zdct4KB
-
OBLRes/hu_HU/ConnectionFAQ.html.html 11KB
-
OBLRes/hu_HU/LicenseFAQ.html.html 18KB
-
OBLRes/hu_HU/Main.zdct2KB
-
OBLRes/hu_HU/oobe_launcher.zdct4KB
-
OBLRes/it_IT/ConnectionFAQ.html.html 11KB
-
OBLRes/it_IT/LicenseFAQ.html.html 18KB
-
OBLRes/it_IT/Main.zdct2KB
-
OBLRes/it_IT/oobe_launcher.zdct4KB
-
OBLRes/ja_JP/ConnectionFAQ.html.html 11KB
-
OBLRes/ja_JP/LicenseFAQ.html.html 18KB
-
OBLRes/ja_JP/Main.zdct1KB
-
OBLRes/ja_JP/oobe_launcher.zdct3KB
-
OBLRes/ko_KR/ConnectionFAQ.html.html 11KB
-
OBLRes/ko_KR/LicenseFAQ.html.html 17KB
-
OBLRes/ko_KR/Main.zdct1KB
-
OBLRes/ko_KR/oobe_launcher.zdct3KB
-
OBLRes/lt_LT/ConnectionFAQ.html.html 11KB
-
OBLRes/lt_LT/LicenseFAQ.html.html 18KB
-
OBLRes/lt_LT/Main.zdct2KB
-
OBLRes/lt_LT/oobe_launcher.zdct459B
-
OBLRes/lv_LV/ConnectionFAQ.html.html 11KB
-
OBLRes/lv_LV/LicenseFAQ.html.html 17KB
-
OBLRes/lv_LV/Main.zdct2KB
-
OBLRes/lv_LV/oobe_launcher.zdct459B
-
OBLRes/nb_NO/ConnectionFAQ.html.html 11KB
-
OBLRes/nb_NO/LicenseFAQ.html.html 18KB
-
OBLRes/nb_NO/Main.zdct2KB
-
OBLRes/nb_NO/oobe_launcher.zdct4KB
-
OBLRes/nl_NL/ConnectionFAQ.html.html 11KB
-
OBLRes/nl_NL/LicenseFAQ.html.html 18KB
-
OBLRes/nl_NL/Main.zdct2KB
-
OBLRes/nl_NL/oobe_launcher.zdct4KB
-
OBLRes/pl_PL/ConnectionFAQ.html.html 11KB
-
OBLRes/pl_PL/LicenseFAQ.html.html 18KB
-
OBLRes/pl_PL/Main.zdct2KB
-
OBLRes/pl_PL/oobe_launcher.zdct4KB
-
OBLRes/pt_BR/ConnectionFAQ.html.html 11KB
-
OBLRes/pt_BR/LicenseFAQ.html.html 18KB
-
OBLRes/pt_BR/Main.zdct2KB
-
OBLRes/pt_BR/oobe_launcher.zdct4KB
-
OBLRes/ro_RO/ConnectionFAQ.html.html 11KB
-
OBLRes/ro_RO/LicenseFAQ.html.html 18KB
-
OBLRes/ro_RO/Main.zdct2KB
-
OBLRes/ro_RO/oobe_launcher.zdct4KB
-
OBLRes/ru_RU/ConnectionFAQ.html.html 11KB
-
OBLRes/ru_RU/LicenseFAQ.html.html 18KB
-
OBLRes/ru_RU/Main.zdct2KB
-
OBLRes/ru_RU/oobe_launcher.zdct4KB
-
OBLRes/sk_SK/ConnectionFAQ.html.html 11KB
-
OBLRes/sk_SK/LicenseFAQ.html.html 18KB
-
OBLRes/sk_SK/Main.zdct2KB
-
OBLRes/sk_SK/oobe_launcher.zdct5KB
-
OBLRes/sl_SI/ConnectionFAQ.html.html 11KB
-
OBLRes/sl_SI/LicenseFAQ.html.html 18KB
-
OBLRes/sl_SI/Main.zdct2KB
-
OBLRes/sl_SI/oobe_launcher.zdct5KB
-
OBLRes/sv_SE/ConnectionFAQ.html.html 11KB
-
OBLRes/sv_SE/LicenseFAQ.html.html 17KB
-
OBLRes/sv_SE/Main.zdct2KB
-
OBLRes/sv_SE/oobe_launcher.zdct4KB
-
OBLRes/tr_TR/ConnectionFAQ.html.html 11KB
-
OBLRes/tr_TR/LicenseFAQ.html.html 18KB
-
OBLRes/tr_TR/Main.zdct2KB
-
OBLRes/tr_TR/oobe_launcher.zdct4KB
-
OBLRes/uk_UA/ConnectionFAQ.html.html 12KB
-
OBLRes/uk_UA/LicenseFAQ.html.html 18KB
-
OBLRes/uk_UA/Main.zdct2KB
-
OBLRes/uk_UA/oobe_launcher.zdct4KB
-
OBLRes/zh_CN/ConnectionFAQ.html.html 10KB
-
OBLRes/zh_CN/LicenseFAQ.html.html 16KB
-
OBLRes/zh_CN/Main.zdct1KB
-
OBLRes/zh_CN/oobe_launcher.zdct3KB
-
OBLRes/zh_TW/ConnectionFAQ.html.html 10KB
-
OBLRes/zh_TW/LicenseFAQ.html.html 16KB
-
OBLRes/zh_TW/Main.zdct1KB
-
OBLRes/zh_TW/oobe_launcher.zdct3KB
-
PWAFlex.swf1010KB
-
PWANative.dll.dll 724KB
-
RNResources/Dictionary/cs_CZ/stringTable.zdct440B
-
RNResources/Dictionary/da_DK/stringTable.zdct364B
-
RNResources/Dictionary/de_DE/stringTable.zdct418B
-
RNResources/Dictionary/en_GB/stringTable.zdct390B
-
RNResources/Dictionary/en_US/stringTable.zdct390B
-
RNResources/Dictionary/es_ES/stringTable.zdct420B
-
RNResources/Dictionary/es_LA/stringTable.zdct420B
-
RNResources/Dictionary/es_MX/stringTable.zdct420B
-
RNResources/Dictionary/es_NA/stringTable.zdct420B
-
RNResources/Dictionary/fi_FI/stringTable.zdct434B
-
RNResources/Dictionary/fr_CA/stringTable.zdct466B
-
RNResources/Dictionary/fr_FR/stringTable.zdct466B
-
RNResources/Dictionary/fr_XM/stringTable.zdct466B
-
RNResources/Dictionary/hr_HR/stringTable.zdct448B
-
RNResources/Dictionary/hu_HU/stringTable.zdct422B
-
RNResources/Dictionary/it_IT/stringTable.zdct444B
-
RNResources/Dictionary/ja_JP/stringTable.zdct308B
-
RNResources/Dictionary/ko_KR/stringTable.zdct330B
-
RNResources/Dictionary/nb_NO/stringTable.zdct388B
-
RNResources/Dictionary/nl_NL/stringTable.zdct416B
-
RNResources/Dictionary/pl_PL/stringTable.zdct440B
-
RNResources/Dictionary/pt_BR/stringTable.zdct432B
-
RNResources/Dictionary/ro_RO/stringTable.zdct436B
-
RNResources/Dictionary/ru_RU/stringTable.zdct428B
-
RNResources/Dictionary/sk_SK/stringTable.zdct418B
-
RNResources/Dictionary/sl_SI/stringTable.zdct458B
-
RNResources/Dictionary/sv_SE/stringTable.zdct416B
-
RNResources/Dictionary/tr_TR/stringTable.zdct418B
-
RNResources/Dictionary/uk_UA/stringTable.zdct426B
-
RNResources/Dictionary/zh_CN/stringTable.zdct280B
-
RNResources/Dictionary/zh_TW/stringTable.zdct290B
-
ZStringResources/cs_CZ/stringtable.xml.vbs .xml 63KB
-
ZStringResources/da_DK/stringtable.xml.vbs .xml 61KB
-
ZStringResources/de_DE/stringtable.xml.vbs .xml 64KB
-
ZStringResources/en_GB/stringtable.xml.vbs .xml 55KB
-
ZStringResources/en_US/stringtable.xml.vbs .xml 55KB
-
ZStringResources/en_XM/stringtable.xml.vbs .xml 55KB
-
ZStringResources/es_ES/stringtable.xml.vbs .xml 64KB
-
ZStringResources/es_LA/stringtable.xml.vbs .xml 64KB
-
ZStringResources/es_MX/stringtable.xml.vbs .xml 64KB
-
ZStringResources/es_NA/stringtable.xml.vbs .xml 64KB
-
ZStringResources/fi_FI/stringtable.xml.vbs .xml 62KB
-
ZStringResources/fr_CA/stringtable.xml.vbs .xml 65KB
-
ZStringResources/fr_FR/stringtable.xml.vbs .xml 64KB
-
ZStringResources/fr_XM/stringtable.xml.vbs .xml 64KB
-
ZStringResources/hr_HR/stringtable.xml.vbs .xml 62KB
-
ZStringResources/hu_HU/stringtable.xml.vbs .xml 64KB
-
ZStringResources/it_IT/stringtable.xml.vbs .xml 62KB
-
ZStringResources/ja_JP/stringtable.xml.vbs .xml 71KB
-
ZStringResources/ko_KR/stringtable.xml.vbs .xml 64KB
-
ZStringResources/nb_NO/stringtable.xml.vbs .xml 61KB
-
ZStringResources/nl_NL/stringtable.xml.vbs .xml 62KB
-
ZStringResources/pl_PL/stringtable.xml.vbs .xml 64KB
-
ZStringResources/pt_BR/stringtable.xml.vbs .xml 63KB
-
ZStringResources/ro_RO/stringtable.xml.vbs .xml 64KB
-
ZStringResources/ru_RU/stringtable.xml.vbs .xml 78KB
-
ZStringResources/sk_SK/stringtable.xml.vbs .xml 63KB
-
ZStringResources/sl_SI/stringtable.xml.vbs .xml 63KB
-
ZStringResources/sv_SE/stringtable.xml.vbs .xml 61KB
-
ZStringResources/tr_TR/stringtable.xml.vbs .xml 63KB
-
ZStringResources/uk_UA/stringtable.xml.vbs .xml 77KB
-
ZStringResources/zh_CN/stringtable.xml.vbs .xml 58KB
-
ZStringResources/zh_TW/stringtable.xml.vbs .xml 59KB
-
adobeIdManifest.xml.xml 167B
-
adobe_caps.dll.dll 415KB
-
adobe_licutil.exe.exe 348KB
-
adobe_oobelib.dll.dll 924KB
-
adobe_upgrade.dll.dll 625KB
-
amtservices.dll.dll 1.1MB
-
asneu.dll.dll 146KB
-
assets/fonts_clean.swf652KB
-
assets/fonts_system.swf308KB
-
Adobe CC 2017/packages/LWA/LWA.pimx47KB
-
Adobe CC 2017/packages/LWA/LWA.sig.xml 1KB
-
Adobe CC 2017/packages/P6/P6.pima.zip 6.6MB
-
AAM Registration Notifier.exe.exe 290KB
-
AXFB/AX_SLConfig.xml.xml 15KB
-
AXFB/AX_application.sif3KB
-
AXFB/FB_SLConfig.xml.xml 46KB
-
AXFB/FB_application.sif5KB
-
IMSLib.dll.dll 1.2MB
-
OBLRes/ar_AE/ConnectionFAQ.html.html 11KB
-
OBLRes/ar_AE/LicenseFAQ.html.html 17KB
-
OBLRes/ar_AE/Main.zdct2KB
-
OBLRes/bg_BG/ConnectionFAQ.html.html 11KB
-
OBLRes/bg_BG/LicenseFAQ.html.html 18KB
-
OBLRes/bg_BG/Main.zdct2KB
-
OBLRes/bg_BG/oobe_launcher.zdct459B
-
OBLRes/cs_CZ/ConnectionFAQ.html.html 11KB
-
OBLRes/cs_CZ/LicenseFAQ.html.html 17KB
-
OBLRes/cs_CZ/Main.zdct2KB
-
OBLRes/cs_CZ/oobe_launcher.zdct4KB
-
OBLRes/da_DK/ConnectionFAQ.html.html 11KB
-
OBLRes/da_DK/LicenseFAQ.html.html 17KB
-
OBLRes/da_DK/Main.zdct2KB
-
OBLRes/da_DK/oobe_launcher.zdct4KB
-
OBLRes/de_DE/ConnectionFAQ.html.html 11KB
-
OBLRes/de_DE/LicenseFAQ.html.html 18KB
-
OBLRes/de_DE/Main.zdct2KB
-
OBLRes/de_DE/oobe_launcher.zdct5KB
-
OBLRes/el_GR/ConnectionFAQ.html.html 12KB
-
OBLRes/el_GR/LicenseFAQ.html.html 18KB
-
OBLRes/el_GR/Main.zdct2KB
-
OBLRes/en_AE/ConnectionFAQ.html.html 12KB
-
OBLRes/en_AE/LicenseFAQ.html.html 18KB
-
OBLRes/en_AE/Main.zdct2KB
-
OBLRes/en_AE/oobe_launcher.zdct4KB
-
OBLRes/en_GB/ConnectionFAQ.html.html 12KB
-
OBLRes/en_GB/LicenseFAQ.html.html 18KB
-
OBLRes/en_GB/Main.zdct2KB
-
OBLRes/en_GB/oobe_launcher.zdct4KB
-
OBLRes/en_IL/ConnectionFAQ.html.html 12KB
-
OBLRes/en_IL/LicenseFAQ.html.html 18KB
-
OBLRes/en_IL/Main.zdct2KB
-
OBLRes/en_IL/oobe_launcher.zdct4KB
-
OBLRes/en_MX/ConnectionFAQ.html.html 12KB
-
OBLRes/en_MX/LicenseFAQ.html.html 18KB
-
OBLRes/en_MX/Main.zdct2KB
-
OBLRes/en_MX/oobe_launcher.zdct459B
-
OBLRes/en_US/ConnectionFAQ.html.html 12KB
-
OBLRes/en_US/LicenseFAQ.html.html 18KB
-
OBLRes/en_US/Main.zdct2KB
-
OBLRes/en_US/oobe_launcher.zdct4KB
-
OBLRes/en_XM/ConnectionFAQ.html.html 12KB
-
OBLRes/en_XM/LicenseFAQ.html.html 18KB
-
OBLRes/en_XM/Main.zdct2KB
-
OBLRes/en_XM/oobe_launcher.zdct4KB
-
OBLRes/es_ES/ConnectionFAQ.html.html 18KB
-
OBLRes/es_ES/LicenseFAQ.html.html 23KB
-
OBLRes/es_ES/Main.zdct2KB
-
OBLRes/es_ES/oobe_launcher.zdct4KB
-
OBLRes/es_LA/oobe_launcher.zdct4KB
-
OBLRes/es_MX/ConnectionFAQ.html.html 18KB
-
OBLRes/es_MX/LicenseFAQ.html.html 23KB
-
OBLRes/es_MX/Main.zdct2KB
-
OBLRes/es_MX/oobe_launcher.zdct4KB
-
OBLRes/es_NA/oobe_launcher.zdct4KB
-
OBLRes/et_EE/ConnectionFAQ.html.html 11KB
-
OBLRes/et_EE/LicenseFAQ.html.html 17KB
-
OBLRes/et_EE/Main.zdct2KB
-
OBLRes/et_EE/oobe_launcher.zdct459B
-
OBLRes/fi_FI/ConnectionFAQ.html.html 18KB
-
OBLRes/fi_FI/LicenseFAQ.html.html 22KB
-
OBLRes/fi_FI/Main.zdct2KB
-
OBLRes/fi_FI/oobe_launcher.zdct4KB
-
OBLRes/fr_CA/ConnectionFAQ.html.html 12KB
-
OBLRes/fr_CA/LicenseFAQ.html.html 18KB
-
OBLRes/fr_CA/Main.zdct2KB
-
OBLRes/fr_CA/oobe_launcher.zdct5KB
-
OBLRes/fr_FR/ConnectionFAQ.html.html 12KB
-
OBLRes/fr_FR/LicenseFAQ.html.html 18KB
-
OBLRes/fr_FR/Main.zdct2KB
-
OBLRes/fr_FR/oobe_launcher.zdct5KB
-
OBLRes/fr_MA/ConnectionFAQ.html.html 12KB
-
OBLRes/fr_MA/LicenseFAQ.html.html 18KB
-
OBLRes/fr_MA/Main.zdct2KB
-
OBLRes/fr_MA/oobe_launcher.zdct5KB
-
OBLRes/fr_MX/ConnectionFAQ.html.html 12KB
-
OBLRes/fr_MX/LicenseFAQ.html.html 18KB
-
OBLRes/fr_MX/Main.zdct2KB
-
OBLRes/fr_MX/oobe_launcher.zdct5KB
-
OBLRes/fr_XM/ConnectionFAQ.html.html 12KB
-
OBLRes/fr_XM/LicenseFAQ.html.html 18KB
-
OBLRes/fr_XM/Main.zdct2KB
-
OBLRes/fr_XM/oobe_launcher.zdct5KB
-
OBLRes/he_IL/ConnectionFAQ.html.html 11KB
-
OBLRes/he_IL/LicenseFAQ.html.html 17KB
-
OBLRes/he_IL/Main.zdct2KB
-
OBLRes/hr_HR/ConnectionFAQ.html.html 11KB
-
OBLRes/hr_HR/LicenseFAQ.html.html 17KB
-
OBLRes/hr_HR/Main.zdct2KB
-
OBLRes/hr_HR/oobe_launcher.zdct4KB
-
OBLRes/hu_HU/ConnectionFAQ.html.html 11KB
-
OBLRes/hu_HU/LicenseFAQ.html.html 18KB
-
OBLRes/hu_HU/Main.zdct2KB
-
OBLRes/hu_HU/oobe_launcher.zdct4KB
-
OBLRes/it_IT/ConnectionFAQ.html.html 11KB
-
OBLRes/it_IT/LicenseFAQ.html.html 18KB
-
OBLRes/it_IT/Main.zdct2KB
-
OBLRes/it_IT/oobe_launcher.zdct4KB
-
OBLRes/ja_JP/ConnectionFAQ.html.html 11KB
-
OBLRes/ja_JP/LicenseFAQ.html.html 18KB
-
OBLRes/ja_JP/Main.zdct1KB
-
OBLRes/ja_JP/oobe_launcher.zdct3KB
-
OBLRes/ko_KR/ConnectionFAQ.html.html 11KB
-
OBLRes/ko_KR/LicenseFAQ.html.html 17KB
-
OBLRes/ko_KR/Main.zdct1KB
-
OBLRes/ko_KR/oobe_launcher.zdct3KB
-
OBLRes/lt_LT/ConnectionFAQ.html.html 11KB
-
OBLRes/lt_LT/LicenseFAQ.html.html 18KB
-
OBLRes/lt_LT/Main.zdct2KB
-
OBLRes/lt_LT/oobe_launcher.zdct459B
-
OBLRes/lv_LV/ConnectionFAQ.html.html 11KB
-
OBLRes/lv_LV/LicenseFAQ.html.html 17KB
-
OBLRes/lv_LV/Main.zdct2KB
-
OBLRes/lv_LV/oobe_launcher.zdct459B
-
OBLRes/nb_NO/ConnectionFAQ.html.html 11KB
-
OBLRes/nb_NO/LicenseFAQ.html.html 18KB
-
OBLRes/nb_NO/Main.zdct2KB
-
OBLRes/nb_NO/oobe_launcher.zdct4KB
-
OBLRes/nl_NL/ConnectionFAQ.html.html 11KB
-
OBLRes/nl_NL/LicenseFAQ.html.html 18KB
-
OBLRes/nl_NL/Main.zdct2KB
-
OBLRes/nl_NL/oobe_launcher.zdct4KB
-
OBLRes/pl_PL/ConnectionFAQ.html.html 11KB
-
OBLRes/pl_PL/LicenseFAQ.html.html 18KB
-
OBLRes/pl_PL/Main.zdct2KB
-
OBLRes/pl_PL/oobe_launcher.zdct5KB
-
OBLRes/pt_BR/ConnectionFAQ.html.html 11KB
-
OBLRes/pt_BR/LicenseFAQ.html.html 18KB
-
OBLRes/pt_BR/Main.zdct2KB
-
OBLRes/pt_BR/oobe_launcher.zdct4KB
-
OBLRes/ro_RO/ConnectionFAQ.html.html 11KB
-
OBLRes/ro_RO/LicenseFAQ.html.html 18KB
-
OBLRes/ro_RO/Main.zdct2KB
-
OBLRes/ro_RO/oobe_launcher.zdct4KB
-
OBLRes/ru_RU/ConnectionFAQ.html.html 11KB
-
OBLRes/ru_RU/LicenseFAQ.html.html 18KB
-
OBLRes/ru_RU/Main.zdct2KB
-
OBLRes/ru_RU/oobe_launcher.zdct4KB
-
OBLRes/sk_SK/ConnectionFAQ.html.html 11KB
-
OBLRes/sk_SK/LicenseFAQ.html.html 18KB
-
OBLRes/sk_SK/Main.zdct2KB
-
OBLRes/sk_SK/oobe_launcher.zdct5KB
-
OBLRes/sl_SI/ConnectionFAQ.html.html 11KB
-
OBLRes/sl_SI/LicenseFAQ.html.html 18KB
-
OBLRes/sl_SI/Main.zdct2KB
-
OBLRes/sl_SI/oobe_launcher.zdct5KB
-
OBLRes/sv_SE/ConnectionFAQ.html.html 11KB
-
OBLRes/sv_SE/LicenseFAQ.html.html 17KB
-
OBLRes/sv_SE/Main.zdct2KB
-
OBLRes/sv_SE/oobe_launcher.zdct4KB
-
OBLRes/tr_TR/ConnectionFAQ.html.html 11KB
-
OBLRes/tr_TR/LicenseFAQ.html.html 18KB
-
OBLRes/tr_TR/Main.zdct2KB
-
OBLRes/tr_TR/oobe_launcher.zdct4KB
-
OBLRes/uk_UA/ConnectionFAQ.html.html 12KB
-
OBLRes/uk_UA/LicenseFAQ.html.html 18KB
-
OBLRes/uk_UA/Main.zdct2KB
-
OBLRes/uk_UA/oobe_launcher.zdct4KB
-
OBLRes/zh_CN/ConnectionFAQ.html.html 10KB
-
OBLRes/zh_CN/LicenseFAQ.html.html 16KB
-
OBLRes/zh_CN/Main.zdct1KB
-
OBLRes/zh_CN/oobe_launcher.zdct3KB
-
OBLRes/zh_TW/ConnectionFAQ.html.html 10KB
-
OBLRes/zh_TW/LicenseFAQ.html.html 16KB
-
OBLRes/zh_TW/Main.zdct1KB
-
OBLRes/zh_TW/oobe_launcher.zdct3KB
-
P6Flex.swf1.6MB
-
P6Native.dll.dll 1.1MB
-
RNResources/Dictionary/cs_CZ/stringTable.zdct328B
-
RNResources/Dictionary/da_DK/stringTable.zdct318B
-
RNResources/Dictionary/de_DE/stringTable.zdct370B
-
RNResources/Dictionary/en_AE/stringTable.zdct328B
-
RNResources/Dictionary/en_GB/stringTable.zdct328B
-
RNResources/Dictionary/en_IL/stringTable.zdct328B
-
RNResources/Dictionary/en_US/stringTable.zdct328B
-
RNResources/Dictionary/es_ES/stringTable.zdct332B
-
RNResources/Dictionary/es_LA/stringTable.zdct332B
-
RNResources/Dictionary/es_MX/stringTable.zdct332B
-
RNResources/Dictionary/es_NA/stringTable.zdct332B
-
RNResources/Dictionary/fi_FI/stringTable.zdct340B
-
RNResources/Dictionary/fr_CA/stringTable.zdct346B
-
RNResources/Dictionary/fr_FR/stringTable.zdct346B
-
RNResources/Dictionary/fr_MA/stringTable.zdct346B
-
RNResources/Dictionary/fr_XM/stringTable.zdct346B
-
RNResources/Dictionary/hr_HR/stringTable.zdct346B
-
RNResources/Dictionary/hu_HU/stringTable.zdct380B
-
RNResources/Dictionary/it_IT/stringTable.zdct350B
-
RNResources/Dictionary/ja_JP/stringTable.zdct250B
-
RNResources/Dictionary/ko_KR/stringTable.zdct254B
-
RNResources/Dictionary/nb_NO/stringTable.zdct314B
-
RNResources/Dictionary/nl_NL/stringTable.zdct338B
-
RNResources/Dictionary/pl_PL/stringTable.zdct334B
-
RNResources/Dictionary/pt_BR/stringTable.zdct338B
-
RNResources/Dictionary/ro_RO/stringTable.zdct364B
-
RNResources/Dictionary/ru_RU/stringTable.zdct332B
-
RNResources/Dictionary/sk_SK/stringTable.zdct330B
-
RNResources/Dictionary/sl_SI/stringTable.zdct324B
-
RNResources/Dictionary/sv_SE/stringTable.zdct340B
-
RNResources/Dictionary/tr_TR/stringTable.zdct336B
-
RNResources/Dictionary/uk_UA/stringTable.zdct326B
-
RNResources/Dictionary/zh_CN/stringTable.zdct240B
-
RNResources/Dictionary/zh_TW/stringTable.zdct232B
-
VulcanBridge.dll.dll 170KB
-
VulcanMessage.dll.dll 158KB
-
ZStringResources/FontCustomization.xml.xml 1KB
-
ZStringResources/cs_CZ/stringtable.xml.vbs .xml 51KB
-
ZStringResources/da_DK/stringtable.xml.vbs .xml 48KB
-
ZStringResources/de_DE/stringtable.xml.vbs .xml 52KB
-
ZStringResources/en_AE/stringtable.xml.vbs .xml 42KB
-
ZStringResources/en_GB/stringtable.xml.vbs .xml 42KB
-
ZStringResources/en_IL/stringtable.xml.vbs .xml 42KB
-
ZStringResources/en_US/stringtable.xml.vbs .xml 42KB
-
ZStringResources/en_XM/stringtable.xml.vbs .xml 42KB
-
ZStringResources/es_ES/stringtable.xml.vbs .xml 50KB
-
ZStringResources/es_LA/stringtable.xml.vbs .xml 50KB
-
ZStringResources/es_MX/stringtable.xml.vbs .xml 50KB
-
ZStringResources/es_NA/stringtable.xml.vbs .xml 50KB
-
ZStringResources/fi_FI/stringtable.xml.vbs .xml 50KB
-
ZStringResources/fr_CA/stringtable.xml.vbs .xml 52KB
-
ZStringResources/fr_FR/stringtable.xml.vbs .xml 52KB
-
ZStringResources/fr_MA/stringtable.xml.vbs .xml 52KB
-
ZStringResources/fr_XM/stringtable.xml.vbs .xml 52KB
-
ZStringResources/hr_HR/stringtable.xml.vbs .xml 48KB
-
ZStringResources/hu_HU/stringtable.xml.vbs .xml 52KB
-
ZStringResources/it_IT/stringtable.xml.vbs .xml 49KB
-
ZStringResources/ja_JP/stringtable.xml.vbs .xml 57KB
-
ZStringResources/ko_KR/stringtable.xml.vbs .xml 51KB
-
ZStringResources/nb_NO/stringtable.xml.vbs .xml 49KB
-
ZStringResources/nl_NL/stringtable.xml.vbs .xml 50KB
-
ZStringResources/pl_PL/stringtable.xml.vbs .xml 52KB
-
ZStringResources/pt_BR/stringtable.xml.vbs .xml 49KB
-
ZStringResources/ro_RO/stringtable.xml.vbs .xml 49KB
-
ZStringResources/ru_RU/stringtable.xml.vbs .xml 63KB
-
ZStringResources/sk_SK/stringtable.xml.vbs .xml 51KB
-
ZStringResources/sl_SI/stringtable.xml.vbs .xml 50KB
-
ZStringResources/sv_SE/stringtable.xml.vbs .xml 48KB
-
ZStringResources/tr_TR/stringtable.xml.vbs .xml 51KB
-
ZStringResources/uk_UA/stringtable.xml.vbs .xml 62KB
-
ZStringResources/zh_CN/stringtable.xml.vbs .xml 46KB
-
ZStringResources/zh_TW/stringtable.xml.vbs .xml 46KB
-
adobe_licutil.exe.exe 1.7MB
-
adobe_oobelib.dll.dll 2.3MB
-
adobe_upgrade.dll.dll 1.1MB
-
axlib.dll.dll 997KB
-
dispatchtable.xml.xml 2KB
-
Adobe CC 2017/packages/P6/P6.pimx71KB
-
Adobe CC 2017/packages/P6/P6.sig.xml 1KB
-
Adobe CC 2017/packages/P7/P7.pima.zip 8.0MB
-
Adobe CC 2017/packages/P7/P7.pimx57KB
-
Adobe CC 2017/packages/P7/P7.sig.xml 1KB
-
Adobe CC 2017/packages/UWA/UWA.pima.zip 5.7MB
-
Adobe CC 2017/packages/UWA/UWA.pimx116KB
-
Adobe CC 2017/packages/UWA/UWA.sig.xml 1KB
-
Adobe CC 2017/packages/core/PDApp.pima.zip 12.4MB
-
Adobe CC 2017/packages/core/PDApp.pimx.xml 169KB
-
Adobe CC 2017/packages/core/PDApp.sig.xml 1KB
-
Adobe CC 2017/packages/install.sig.xml 8KB
-
Adobe CC 2017/packages/setup.exe.exe 128KB
-
Adobe CC 2017/packages/setup.xml.xml 1KB
-
Adobe CC 2017/payloads/AdobeAudition10-mul/Assets1_1.sig.xml 1KB
-
Adobe CC 2017/payloads/AdobeAudition10-mul/Assets1_1.zip.zip 235.5MB
-
Adobe CC 2017/payloads/AdobeAudition10-mul/Assets2_1.sig.xml 1KB
-
Adobe CC 2017/payloads/AdobeAudition10-mul/Assets2_1.zip.zip 42KB
-
Adobe CC 2017/payloads/AdobeAudition10-mul/Install.db272KB
-
Adobe CC 2017/payloads/AdobeAudition10-mul/Install.sig.xml 1KB
-
Adobe CC 2017/payloads/AdobeAudition10-mul/Media_db.db2.3MB
-
Adobe CC 2017/payloads/AdobeInstalledCodecs/Assets1_1.sig.xml 1KB
-
Adobe CC 2017/payloads/AdobeInstalledCodecs/Assets1_1.zip.zip 108B
-
Adobe CC 2017/payloads/AdobeInstalledCodecs/Install.db71KB
-
Adobe CC 2017/payloads/AdobeInstalledCodecs/Install.sig.xml 1KB
-
Adobe CC 2017/payloads/AdobeInstalledCodecs/Media_db.db41KB
-
Adobe CC 2017/payloads/Media_db.db139KB
-
Adobe CC 2017/payloads/Media_db.sig.xml 1KB
-
Adobe CC 2017/payloads/Microsoft VC 2005 Redist (x64)/Media_db.db27KB
-
Adobe CC 2017/payloads/Microsoft VC 2005 Redist (x64)/vcredist_x64.EXE.exe 3.0MB
-
Adobe CC 2017/payloads/Microsoft VC 2005 Redist (x86)/Media_db.db27KB
-
Adobe CC 2017/payloads/Microsoft VC 2005 Redist (x86)/vcredist_x86.exe.exe 2.6MB
-
Adobe CC 2017/payloads/Microsoft VC 2008 Redist (x64)/Media_db.db27KB
-
Adobe CC 2017/payloads/Microsoft VC 2008 Redist (x64)/vcredist_x64.exe.exe 5.0MB
-
Adobe CC 2017/payloads/Microsoft VC 2008 Redist (x86)/Media_db.db27KB
-
Adobe CC 2017/payloads/Microsoft VC 2008 Redist (x86)/vcredist_x86.exe.exe 4.3MB
-
Adobe CC 2017/payloads/Microsoft VC 2010 Redist (x64)/Media_db.db27KB
-
Adobe CC 2017/payloads/Microsoft VC 2010 Redist (x64)/vcredist_x64.exe.exe 9.8MB
-
Adobe CC 2017/payloads/Microsoft VC 2010 Redist (x86)/Media_db.db27KB
-
Adobe CC 2017/payloads/Microsoft VC 2010 Redist (x86)/vcredist_x86.exe.exe 8.6MB
-
Adobe CC 2017/payloads/Microsoft VC 2012 Redist (x64)/Media_db.db28KB
-
Adobe CC 2017/payloads/Microsoft VC 2012 Redist (x64)/vcredist_x64.exe.exe 6.9MB
-
Adobe CC 2017/payloads/Microsoft VC 2012 Redist (x86)/Media_db.db28KB
-
Adobe CC 2017/payloads/Microsoft VC 2012 Redist (x86)/vcredist_x86.exe.exe 6.3MB
-
Adobe CC 2017/payloads/Microsoft VC 2013 Redist (x64)/Media_db.db28KB
-
Adobe CC 2017/payloads/Microsoft VC 2013 Redist (x64)/vcredist_x64.exe.exe 6.9MB
-
Adobe CC 2017/payloads/Microsoft VC 2013 Redist (x86)/Media_db.db28KB
-
Adobe CC 2017/payloads/Microsoft VC 2013 Redist (x86)/vcredist_x86.exe.exe 6.2MB
-
Adobe CC 2017/payloads/Microsoft VC 2015 Redist (x64)/Media_db.db38KB
-
Adobe CC 2017/payloads/Microsoft VC 2015 Redist (x64)/vcredist_x64.exe.exe 14.7MB
-
Adobe CC 2017/payloads/Microsoft VC 2015 Redist (x86)/Media_db.db38KB
-
Adobe CC 2017/payloads/Microsoft VC 2015 Redist (x86)/vcredist_x86.exe.exe 13.9MB
-
Adobe CC 2017/payloads/Setup.xml.xml 1KB
-
Adobe CC 2017/resources/AdobePIM.dll.dll 1.3MB
-
Adobe CC 2017/resources/Dictionary/cs_CZ/stringTable.zdct5KB
-
Adobe CC 2017/resources/Dictionary/da_DK/stringTable.zdct5KB
-
Adobe CC 2017/resources/Dictionary/de_DE/stringTable.zdct6KB
-
Adobe CC 2017/resources/Dictionary/en_AE/stringTable.zdct5KB
-
Adobe CC 2017/resources/Dictionary/en_GB/stringTable.zdct5KB
-
Adobe CC 2017/resources/Dictionary/en_IL/stringTable.zdct5KB
-
Adobe CC 2017/resources/Dictionary/en_US/stringTable.zdct5KB
-
Adobe CC 2017/resources/Dictionary/en_XM/stringTable.zdct5KB
-
Adobe CC 2017/resources/Dictionary/es_ES/stringTable.zdct5KB
-
Adobe CC 2017/resources/Dictionary/es_LA/stringTable.zdct5KB
-
Adobe CC 2017/resources/Dictionary/es_MX/stringTable.zdct5KB
-
Adobe CC 2017/resources/Dictionary/es_NA/stringTable.zdct5KB
-
Adobe CC 2017/resources/Dictionary/fi_FI/stringTable.zdct5KB
-
Adobe CC 2017/resources/Dictionary/fr_CA/stringTable.zdct6KB
-
Adobe CC 2017/resources/Dictionary/fr_FR/stringTable.zdct6KB
-
Adobe CC 2017/resources/Dictionary/fr_MA/stringTable.zdct6KB
-
Adobe CC 2017/resources/Dictionary/fr_XM/stringTable.zdct6KB
-
Adobe CC 2017/resources/Dictionary/hu_HU/stringTable.zdct5KB
-
Adobe CC 2017/resources/Dictionary/it_IT/stringTable.zdct5KB
-
Adobe CC 2017/resources/Dictionary/ja_JP/stringTable.zdct3KB
-
Adobe CC 2017/resources/Dictionary/ko_KR/stringTable.zdct3KB
-
Adobe CC 2017/resources/Dictionary/nb_NO/stringTable.zdct5KB
-
Adobe CC 2017/resources/Dictionary/nl_NL/stringTable.zdct5KB
-
Adobe CC 2017/resources/Dictionary/pl_PL/stringTable.zdct5KB
-
Adobe CC 2017/resources/Dictionary/pt_BR/stringTable.zdct5KB
-
Adobe CC 2017/resources/Dictionary/ru_RU/stringTable.zdct5KB
-
Adobe CC 2017/resources/Dictionary/sv_SE/stringTable.zdct5KB
-
Adobe CC 2017/resources/Dictionary/tr_TR/stringTable.zdct5KB
-
Adobe CC 2017/resources/Dictionary/uk_UA/stringTable.zdct5KB
-
Adobe CC 2017/resources/Dictionary/zh_CN/stringTable.zdct3KB
-
Adobe CC 2017/resources/Dictionary/zh_TW/stringTable.zdct3KB
-
Adobe CC 2017/resources/setup.xml.xml 1KB
-
Adobe CC 2017/resources/updaterinventory.dll.dll 457KB
-
Adobe CC 2017/resources/version.txt12B
-
Autoplay/langdata/en_US/lang.dat9KB
-
Autoplay/langdata/ru_RU/lang.dat9KB
-
Autoplay/main.ini4KB
-
Autoplay/resdata/AU_autoplay_bg.bmp737KB
-
Autoplay/resdata/Autoplay.ico344KB
-
Autoplay/resdata/autoplay_blank_N.bmp70KB
-
Autoplay/resdata/autoplay_blank_R.bmp70KB
-
Autoplay/resdata/autoplay_blank_S.bmp70KB
-
Autoplay/resdata/autoplay_disc_N.ico1KB
-
Autoplay/resdata/autoplay_disc_R.ico1KB
-
Autoplay/resdata/autoplay_disc_S.ico1KB
-
Autoplay/resdata/autoplay_generic_extras_N.ico1KB
-
Autoplay/resdata/autoplay_generic_extras_R.ico1KB
-
Autoplay/resdata/autoplay_generic_extras_S.ico1KB
-
Autoplay/resdata/autoplay_readme_N.ico1KB
-
Autoplay/resdata/autoplay_readme_R.ico1KB
-
Autoplay/resdata/autoplay_readme_S.ico1KB
-
Autoplay/resdata/autoplay_secondary-content_N.ico1KB
-
Autoplay/resdata/autoplay_secondary-content_R.ico1KB
-
Autoplay/resdata/autoplay_secondary-content_S.ico1KB
-
Autoplay/resdata/autoplay_secondarylink_rollover_LG_N.bmp18KB
-
Autoplay/resdata/autoplay_secondarylink_rollover_LG_R.bmp18KB
-
Autoplay/resdata/autoplay_secondarylink_rollover_LG_S.bmp18KB
-
Autoplay/resdata/autoplay_secondarylink_rollover_N.bmp13KB
-
Autoplay/resdata/autoplay_secondarylink_rollover_R.bmp13KB
-
Autoplay/resdata/autoplay_secondarylink_rollover_S.bmp13KB
-
Autoplay/resdata/button_M_N.bmp13KB
-
Autoplay/resdata/button_M_R.bmp13KB
-
Autoplay/resdata/button_M_S.bmp13KB
-
Crack/Emul/amtemu.v0.9.2-painter.exe.exe 2.4MB
-
Crack/Emul/painter.nfo46KB
-
Crack/Keygen/Activation_Keygen.exe.exe 109KB
-
Crack/Keygen/Check_Disable.cmd2KB
-
Crack/Keygen/x-force.nfo5KB
-
Crack/Patch/adobe.snr.patch.v2.0-painter.exe.exe 587KB
-
Crack/Patch/painter.nfo59KB
-
Crack/readme.txt8KB
-
autoplay.exe.exe 185KB
-
autorun.inf70B
-
m0nkrus.nfo1KB
-
unicows.dll.dll 239KB
out.iso
- SHA256 6501f4b95651e742d2bf41587625b2474455087b238d31eefcabb832922a69c9
- MD5 f577865d1a1c24cf7b619d6044812b82
- SHA1 34b78b342ad64f0cc0182c0889ccbf7f8e9c654a
- SHA512 f2128feb68cd0cbdee4f451a49a37d1730f1026a02d0b3aa096b5e32e5afecdf642a325f158f583ae1d3a3edfb6253ebcdb60f001a403df8b1922a8f048d6d77
- SSDEEP 12582912:cyaedlXCkcUXrwY5ZdsHFkFLD644WqP9v5/0W6y/0Wn:cRedYkREGZyHSPp4Wq15/0W6y/0W
- TLSH T1E119332F669055E2E173FFF1AD145A15AA2DAC38673110E372FC4F2A17B31C6563B222
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe CC 2017/Set-up.exe
- IMPHASH 4e688fb97df93999c8a802e65f41d0b1
- SHA256 0f8ccdf2162915f2d056702e9df32c65e4ed2e0c0d5d5ea606aa8803b4ef5d9b
- MD5 a810f9c99d82cb8d15667e2494020ebe
- SHA1 e816848423a57939181651be0074de942b700f32
- SHA512 2731e617800a326d01ffd0a764765bb96675e8ad50285cad77e86f4e8749a5e6a00c21a3173f560a62c3c9d55b9ebfc5cf1d2cf42fc0896f476f74e0b56b3721
- SSDEEP 49152:H2RUvjn/TCGDQiMDpU/Sb8HDWSrbmnidPtrDEKhPlGRr4909Q7Kitj:Wyn/+GDhOcSb8HDhrK8rwGlGRr4d
- TLSH T10BB5AF217BA19272D57306706E1CB31DA0BDB5B00B3546DB63DC1E6D2D704C2AA3E7A7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
7d:56:49:9a:1a:0a:d7:c6:c5:27:cc:ba:ae:34:e6:72:43:e3:42:02
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=2748129,CN=Adobe Systems Incorporated,OU=AAM 256,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Apr 29, 2015
SERIALNUMBER=2748129,CN=Adobe Systems Incorporated,OU=AAM 256,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Symantec Class 3 Extended Validation Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Symantec Class 3 Extended Validation Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
6c:59:ef:a9:e1:00:e1:0e:e3:06:ba:8f:e0:29:25:59
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jun 7, 2012 - Jun 6, 2022
Subject
SERIALNUMBER=2748129,CN=Adobe Systems Incorporated,OU=AAM 256,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
58:a0:b9:25:d5:bd:9e:14:2f:9e:9b:39:4e:ce:62:70
Issuer
CN=Symantec Class 3 Extended Validation Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 14, 2014 - Jan 7, 2016
Minor OS version
1
Major OS version
5
Entry point
1527558
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
none
comctl32
InitCommonControlsEx
_TrackMouseEvent
ord17
user32
DrawIcon
GetClientRect
wsprintfW
EnableWindow
SendMessageW
GetWindow
LoadIconW
GetWindowLongW
EnableMenuItem
KillTimer
PostMessageW
LoadImageW
IsIconic
GetWindowRect
SetTimer
GetSystemMenu
GetDesktopWindow
ReleaseDC
GetDC
IsRectEmpty
DestroyIcon
IsWindowVisible
IsWindow
InvalidateRect
InflateRect
GetIconInfo
SetRectEmpty
LoadCursorW
GetParent
GetFocus
DrawIconEx
FillRect
SetCursor
CheckMenuItem
SetMenuItemBitmaps
SetWindowLongW
UnregisterClassW
GetSystemMetrics
GetMenuCheckMarkDimensions
SetMenuItemInfoW
LoadBitmapW
IsWindowEnabled
MessageBoxW
GetWindowThreadProcessId
GetLastActivePopup
DestroyWindow
CreateDialogIndirectParamW
EndDialog
GetDlgItem
GetWindowRgn
DestroyCursor
CreateMenu
SubtractRect
GetUpdateRect
IsClipboardFormatAvailable
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
FrameRect
CharUpperBuffW
ModifyMenuW
SetMenuDefaultItem
CopyIcon
GetDoubleClickTime
SetClassLongW
SetCursorPos
DestroyAcceleratorTable
CreateAcceleratorTableW
GetKeyboardState
ToUnicodeEx
LockWindowUpdate
MapVirtualKeyExW
IsCharLowerW
GetKeyboardLayout
IsZoomed
GetComboBoxInfo
TrackMouseEvent
MonitorFromPoint
UpdateLayeredWindow
IsMenu
SetWindowRgn
DrawFrameControl
DrawEdge
DrawStateW
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
EnumDisplayMonitors
SetLayeredWindowAttributes
SetParent
UnionRect
GetKeyNameTextW
MapVirtualKeyW
NotifyWinEvent
InvertRect
HideCaret
EnableScrollBar
GetAsyncKeyState
DrawFocusRect
ReuseDDElParam
UnpackDDElParam
InsertMenuItemW
TranslateAcceleratorW
LoadAcceleratorsW
BringWindowToTop
GetMenuDefaultItem
CreatePopupMenu
PostThreadMessageW
MessageBeep
GetNextDlgGroupItem
SetRect
InvalidateRgn
CopyAcceleratorTableW
OffsetRect
CharNextW
CharUpperW
WindowFromPoint
ReleaseCapture
SetCapture
WaitMessage
DeleteMenu
CopyImage
IntersectRect
GetSysColorBrush
RealChildWindowFromPoint
LoadMenuW
SystemParametersInfoW
GetMenuItemInfoW
DestroyMenu
SendDlgItemMessageA
RegisterClipboardFormatW
GetCursorPos
TranslateMessage
GetMessageW
MapDialogRect
SetWindowContextHelpId
ShowOwnedPopups
PostQuitMessage
IsDialogMessageW
SetWindowTextW
CheckDlgButton
MoveWindow
ShowWindow
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetTopWindow
GetClassNameW
GetClassLongW
PtInRect
EqualRect
CopyRect
MapWindowPoints
AdjustWindowRectEx
GetWindowTextLengthW
GetWindowTextW
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
ValidateRect
SetForegroundWindow
GetForegroundWindow
UpdateWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetKeyState
SetFocus
GetDlgCtrlID
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
IsChild
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
GetMessageTime
GetMessagePos
PeekMessageW
DispatchMessageW
RegisterWindowMessageW
RemoveMenu
AppendMenuW
InsertMenuW
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringW
GetSysColor
ScreenToClient
ClientToScreen
EndPaint
BeginPaint
GetWindowDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
SetActiveWindow
GetActiveWindow
GetNextDlgTabItem
ole32
CLSIDFromString
ReleaseStgMedium
OleDuplicateData
StgOpenStorageOnILockBytes
CoFreeUnusedLibraries
CoGetClassObject
CoDisconnectObject
OleRun
CoUninitialize
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning
DoDragDrop
CreateStreamOnHGlobal
CoRegisterMessageFilter
OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
StgCreateDocfileOnILockBytes
OleUninitialize
CreateILockBytesOnHGlobal
OleInitialize
CoTaskMemFree
CoTaskMemAlloc
CoCreateGuid
StringFromGUID2
CoInitialize
CoInitializeEx
CLSIDFromProgID
CoCreateInstance
oleaut32
SysAllocString
SysStringLen
VariantClear
VariantCopy
VariantInit
SysFreeString
SysAllocStringLen
VariantChangeType
SystemTimeToVariantTime
VariantTimeToSystemTime
GetErrorInfo
OleCreateFontIndirect
LoadTypeLi
VarBstrFromDate
SafeArrayDestroy
shlwapi
PathIsFileSpecW
PathAppendW
PathRenameExtensionW
StrFormatKBSizeW
PathStripToRootW
PathIsUNCW
PathRemoveExtensionW
PathFindExtensionW
PathFindFileNameW
PathRemoveFileSpecW
StrRChrW
PathFileExistsW
PathRemoveBackslashW
PathIsNetworkPathW
PathGetDriveNumberW
PathIsRootW
PathIsDirectoryW
PathAddExtensionW
kernel32
WaitForMultipleObjects
lstrlenA
IsDBCSLeadByteEx
TerminateThread
OpenMutexW
GetLocalTime
SetEnvironmentVariableA
WriteConsoleW
EnumSystemLocalesW
IsValidLocale
LCMapStringW
GetTimeFormatW
GetDateFormatW
OutputDebugStringW
ReadConsoleW
GetStringTypeW
GetTimeZoneInformation
GetConsoleMode
GetConsoleCP
SetFilePointerEx
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetStartupInfoW
VirtualQuery
VirtualAlloc
GetSystemInfo
IsProcessorFeaturePresent
IsDebuggerPresent
HeapQueryInformation
ExitThread
GetModuleHandleExW
ExitProcess
RtlUnwind
GetSystemTimeAsFileTime
GetFileType
SetStdHandle
FindResourceExW
GetUserDefaultLCID
VirtualProtect
SearchPathW
GetProfileIntW
GetTempFileNameW
VerifyVersionInfoW
VerSetConditionMask
lstrcpyW
GetFileTime
GetFileAttributesExW
SetErrorMode
GetWindowsDirectoryW
DuplicateHandle
UnlockFile
SetFilePointer
SetEndOfFile
LockFile
GetVolumeInformationW
GetFullPathNameW
GetCurrentDirectoryW
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
LocalReAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetThreadLocale
GlobalGetAtomNameW
InitializeCriticalSection
GlobalFlags
GetTickCount
ResumeThread
SetThreadPriority
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
lstrcmpA
GetCurrentThread
FileTimeToSystemTime
FileTimeToLocalFileTime
GlobalFindAtomW
GlobalAddAtomW
LoadLibraryA
GlobalDeleteAtom
LoadLibraryExW
GetSystemDirectoryW
GetCurrentThreadId
LeaveCriticalSection
EnterCriticalSection
EncodePointer
FormatMessageW
GlobalSize
GlobalAlloc
MulDiv
GlobalFree
GlobalUnlock
GlobalLock
GetModuleHandleA
FreeResource
OutputDebugStringA
GetFileSizeEx
CreateToolhelp32Snapshot
FindNextFileW
lstrcmpiW
Process32NextW
Process32FirstW
FindClose
SetLastError
FlushFileBuffers
lstrcmpW
CreateFileW
ReadFile
TerminateProcess
GetFileAttributesW
GetVersionExW
OpenProcess
WriteFile
GetCurrentProcess
MoveFileExW
FindFirstFileW
GetFileSize
CreateDirectoryW
GetUserDefaultUILanguage
GetTempPathW
GetExitCodeProcess
CopyFileW
GetUserDefaultLangID
CreateProcessW
GetDriveTypeW
LockResource
SizeofResource
LoadResource
FindResourceW
CreateThread
SetFileAttributesW
DeleteFileW
RemoveDirectoryW
SetCurrentDirectoryW
CreateEventW
ResetEvent
GetProcAddress
GetStdHandle
GetModuleFileNameW
FreeConsole
LoadLibraryW
GetModuleHandleW
SetEvent
FreeLibrary
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
LocalFree
GetCurrentProcessId
CloseHandle
ReleaseMutex
OpenSemaphoreW
LocalAlloc
CreateSemaphoreW
ReleaseSemaphore
Sleep
WaitForSingleObject
CreateMutexW
DeleteCriticalSection
DecodePointer
HeapSize
GetLastError
RaiseException
GetProcessHeap
HeapFree
HeapAlloc
HeapReAlloc
InitializeCriticalSectionAndSpinCount
gdi32
GetDeviceCaps
GetObjectW
Rectangle
CreateCompatibleBitmap
CreateCompatibleDC
CreateSolidBrush
CreateRoundRectRgn
GetTextFaceW
GetViewportOrgEx
LPtoDP
GetWindowOrgEx
GetBoundsRect
FillRgn
SetPaletteEntries
ExtFloodFill
SetPixelV
PtInRegion
FrameRgn
RoundRect
OffsetRgn
EnumFontFamiliesExW
Polyline
Polygon
CreatePolygonRgn
Ellipse
CreateEllipticRgn
SetDIBColorTable
CreateDIBSection
StretchBlt
SetPixel
GetTextCharsetInfo
EnumFontFamiliesW
CreateDIBitmap
RealizePalette
GetSystemPaletteEntries
GetPaletteEntries
GetNearestPaletteIndex
CreatePalette
GetRgnBox
GetTextColor
GetBkColor
DPtoLP
SetRectRgn
PatBlt
GetMapMode
CreateRectRgnIndirect
CombineRgn
GetTextMetricsW
GetTextExtentPoint32W
CreateDCW
CopyMetaFileW
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
ExtTextOutW
TextOutW
MoveToEx
SetTextAlign
SetTextColor
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetBkMode
SetBkColor
SelectPalette
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetPixel
GetObjectType
GetClipBox
ExcludeClipRect
Escape
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
BitBlt
DeleteDC
CreateFontIndirectW
CreateBitmap
DeleteObject
SelectObject
GetStockObject
msimg32
TransparentBlt
AlphaBlend
winspool.drv
DocumentPropertiesW
ClosePrinter
OpenPrinterW
advapi32
RegEnumKeyW
SetSecurityDescriptorDacl
AllocateAndInitializeSid
SetEntriesInAclW
FreeSid
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegEnumKeyExW
RegEnumValueW
RegQueryValueW
InitializeSecurityDescriptor
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
shell32
SHCreateDirectoryExW
SHAppBarMessage
SHBrowseForFolderW
DragFinish
DragQueryFileW
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetFileInfoW
SHGetSpecialFolderPathW
CommandLineToArgvW
ord680
ShellExecuteW
uxtheme
GetThemePartSize
DrawThemeBackground
IsThemeBackgroundPartiallyTransparent
DrawThemeParentBackground
OpenThemeData
CloseThemeData
GetThemeColor
GetCurrentThemeName
IsAppThemed
GetThemeSysColor
GetWindowTheme
DrawThemeText
oledlg
OleUIBusyW
oleacc
CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject
gdiplus
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipDrawImageI
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipGetImagePalette
imm32
ImmGetOpenStatus
ImmReleaseContext
ImmGetContext
winmm
PlaySoundW
winhttp
WinHttpGetIEProxyConfigForCurrentUser
WinHttpSendRequest
WinHttpConnect
WinHttpCloseHandle
WinHttpQueryHeaders
WinHttpSetStatusCallback
WinHttpQueryDataAvailable
WinHttpOpen
WinHttpOpenRequest
WinHttpGetProxyForUrl
WinHttpReadData
WinHttpSetCredentials
WinHttpAddRequestHeaders
WinHttpReceiveResponse
Name
.text
Size
1.7MB
Virtual Size
1.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
420KB
Virtual Size
419KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
37KB
Virtual Size
71KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
54KB
Virtual Size
53KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
142KB
Virtual Size
142KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=208, version=65501,
count=1, id=207, version=65501,
count=21, id=225, productName=VS2013 UPD2 build 30501, version=30501,
count=14, id=206, version=65501,
count=2, id=199, version=41118,
count=83, id=225, productName=VS2013 build 21005, version=21005,
count=46, id=223, productName=VS2013 build 21005, version=21005,
count=264, id=224, productName=VS2013 build 21005, version=21005,
count=327, id=225, version=20806,
count=41, id=203, version=65501,
count=849, id=1, productName=Unmarked objects,
count=73, id=229, version=31101,
count=1, id=219, productName=VS2013 build 21005, version=21005,
count=1, id=151,
count=1, id=222, productName=VS2013 UPD4 build 31101, version=31101,
Adobe CC 2017/packages/CCM/CCM.pima
- SHA256 f767fdebd9493e5f1df685fe9bcf2549f1ee64c1ed2ccd1491bdf5ee45a11124
- MD5 900dbebbde56a81da17442e0e14dc5d5
- SHA1 108ac8a6ab091d96a6d496739f9bdfa5ee4260ef
- SHA512 0734f8d95932893ad6c8d0dfc1930ab44abafdcca88ff002aa95ebf8ed5337f94a32be054f5582d8cff5b4907e358f12e8b36abf16bc867042ae76ecbb7af579
- SSDEEP 98304:oWDmX3t3+erIGTkvVXKZ9dx4eCic99B+j94zxsaEhYpEMofH4:T63t3bICWA9knZzmaEhEEvfY
- TLSH T1D84633A2B71B8AA7C521D9F0A6CE5588D42C800BB1343AF3E87D1463C5973F64AD7F25
- MD5 SHA1 SHA512 SSDEEP TLSH
CCMFlex.swf
- SHA256 1cf7a79d196775dd4e29c9f8adb3b8be8a554fdc00e932ca71cd4649c423d878
- MD5 90782433e189075f3ad59b7c3c7e8ea5
- SHA1 21afc4e756cb14cbf24de88196a89d1b298e633d
- SHA512 4468f945f11ba227d401ec49e5c4bcf476ce59cd38bd57873570ce64bfee0d1fb89cf4a68f731c198c3b0549d325f2075d6c9a2f41ce4e6666b2523553b35a22
- SSDEEP 24576:WDErjzG70LZ8zsTtoo0HG63qJCCEIujuSq/WVlAdISlmZEpNISowVUC+Hg6+Z2no:WD/ILEoobqX3ujOSmvQZIXU6
- TLSH T1436533D995CFCAA89D048CD6F302F4A8870C1C3E79E994552BFA6D5E81090B72DC2B77
- MD5 SHA1 SHA512 SSDEEP TLSH
CCMNative.dll
- IMPHASH b2032d9d67d8e0c989d39a9c1e80a194
- SHA256 f2c68963f57bb5389f729fcfd8db22dd57d81063bc7de8743e0de7f6b3730db4
- MD5 1b66b059ddd6fd5715f363c72ef0dcbc
- SHA1 b89cf84516f1dc15a670ffda9e4b5ce012f2af56
- SHA512 1c57167945848af07645576198b40e5a40c26e0b00812bd39a2e608f112d70df9f3b77a720eb6b19974a906d82c61e1d07be1753faa2d64f289d2b9b6302852b
- SSDEEP 24576:NvUH0ztIYpAC0kLofcWzPcyQRrqtIrmHrvYQWxcrzvwDM/rOw:gSyQL0NJ8nxcrTwDM/rOw
- TLSH T1E8857B11B7D3C135F8FB12B059386B5A683DB9550B3489EFA3C81D9E29306C2AB36357
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
8d:5b:2f:e8:3f:e3:89:28:2e:e8:39:82:ca:d2:62:f4:19:60:7f:77
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Chains
Apr 28, 2014
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Serial Number
1d:37:83:b3:de:cd:5d:bb:16:e3:3c:d3:a6:b3:bf:db
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 20, 2014 - Feb 21, 2015
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
1
Major OS version
5
Entry point
1026529
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\builds\AAM\8.0\source\dev\aamcore\target\win\Release\CCMNative.pdb
shell32
SHGetMalloc
SHGetSpecialFolderLocation
SHBrowseForFolderW
ord680
ShellExecuteExW
SHGetSpecialFolderPathW
SHGetFolderLocation
SHGetPathFromIDListW
SHGetFolderPathW
SHCreateDirectoryExW
shlwapi
PathIsFileSpecW
PathRenameExtensionW
PathAddExtensionW
PathFindFileNameW
PathFileExistsW
PathAppendW
PathRemoveBackslashW
PathStripPathW
PathIsDirectoryW
PathRemoveFileSpecW
PathIsNetworkPathW
PathRemoveExtensionW
winhttp
WinHttpGetIEProxyConfigForCurrentUser
WinHttpOpenRequest
WinHttpQueryDataAvailable
WinHttpSetCredentials
WinHttpSendRequest
WinHttpCloseHandle
WinHttpConnect
WinHttpSetTimeouts
WinHttpSetOption
WinHttpOpen
WinHttpQueryAuthSchemes
WinHttpGetProxyForUrl
WinHttpQueryHeaders
WinHttpReceiveResponse
WinHttpReadData
setupapi
SetupDiGetDeviceRegistryPropertyW
SetupDiGetClassDevsW
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
CM_Get_DevNode_Status
SetupDiGetDeviceInstanceIdW
msi
ord113
ord70
advapi32
SetNamedSecurityInfoW
GetUserNameW
GetFileSecurityW
DuplicateToken
AccessCheck
MapGenericMask
CryptHashData
CryptDestroyHash
CryptCreateHash
CryptReleaseContext
CryptAcquireContextW
CryptGetHashParam
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
RegQueryValueExA
FreeSid
SetEntriesInAclW
AllocateAndInitializeSid
GetNamedSecurityInfoW
OpenProcessToken
user32
GetSystemMetrics
SendMessageW
GetActiveWindow
wsprintfW
ole32
CoTaskMemFree
StringFromGUID2
CoCreateGuid
CoCreateInstance
CLSIDFromProgID
CLSIDFromString
OleRun
CoUninitialize
CoInitialize
CoSetProxyBlanket
CoInitializeSecurity
CoInitializeEx
oleaut32
SysAllocStringByteLen
GetErrorInfo
SysFreeString
VariantChangeType
VariantInit
VariantCopy
VariantClear
SysStringLen
SysAllocString
kernel32
HeapSize
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
CreateNamedPipeW
ConnectNamedPipe
GetStdHandle
GlobalFree
SetFilePointerEx
SetEndOfFile
OpenMutexW
GetProcessHeap
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCPInfo
HeapReAlloc
IsDebuggerPresent
RtlUnwind
RaiseException
GetTimeZoneInformation
GetConsoleMode
ReadConsoleW
GetFileType
IsValidCodePage
GetOEMCP
LoadLibraryExW
FormatMessageA
GetConsoleCP
GetModuleFileNameA
GetFullPathNameW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetFullPathNameA
CreateFileA
QueryPerformanceCounter
OutputDebugStringW
UnlockFile
LockFile
GetTickCount
SetStdHandle
WriteConsoleW
SetEnvironmentVariableA
GetSystemTimeAsFileTime
GetFileAttributesA
LockFileEx
GetModuleHandleW
GetCommandLineA
GetModuleHandleExW
ExitProcess
HeapAlloc
HeapFree
DecodePointer
EncodePointer
GetStringTypeW
DeleteFileA
AreFileApisANSI
GetTempPathA
GetDiskFreeSpaceA
LoadLibraryA
GetLocalTime
GetFileSizeEx
GetTimeFormatW
GetDateFormatW
GetDiskFreeSpaceW
GetCurrentThreadId
SetFilePointer
CreateSemaphoreW
ReleaseSemaphore
ReleaseMutex
GetCurrentProcess
CopyFileW
GetFileAttributesW
CreateFileW
lstrlenW
FlushFileBuffers
GetLastError
CloseHandle
LocalFree
SetFileAttributesW
WideCharToMultiByte
GetACP
MultiByteToWideChar
CreateDirectoryW
InitializeCriticalSectionAndSpinCount
GetTempPathW
GetLocaleInfoA
EnumSystemLocalesW
GetProcAddress
GetUserDefaultUILanguage
FindFirstFileW
FreeLibrary
CreateProcessW
WaitForSingleObject
LoadLibraryW
GetExitCodeProcess
GetModuleFileNameW
FindClose
RemoveDirectoryW
FindNextFileW
DeleteFileW
lstrlenA
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
CreateThread
OpenFile
GetDriveTypeW
SetEvent
FormatMessageW
GetVersionExW
IsProcessorFeaturePresent
GlobalMemoryStatusEx
GetSystemInfo
OpenEventW
GetDiskFreeSpaceExW
GetCurrentProcessId
GetSystemTime
Sleep
TerminateProcess
GetStartupInfoW
GetLongPathNameW
TerminateThread
ResumeThread
GetFileSize
CreateMutexW
MoveFileExW
WriteFile
ReadFile
SetLastError
finalizeApplet
freeMemory
initializeApplet
processMessage
Name
.text
Size
1.2MB
Virtual Size
1.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
323KB
Virtual Size
322KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
23KB
Virtual Size
50KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
140KB
Virtual Size
139KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=199, version=41118,
count=40, id=205, version=50929,
count=86, id=207, version=50929,
count=234, id=206, version=50929,
count=2, id=188, version=30716,
count=1, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=206, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=190, version=30716,
count=23, id=185, version=30716,
count=274, id=1, productName=Unmarked objects,
count=34, id=207, productName=VS2012 UPD4 build 61030, version=61030,
count=116, id=211, version=61030,
count=1, id=202, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=201, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=151,
count=1, id=204, productName=VS2012 UPD4 build 61030, version=61030,
Utilities/AAMHelper.exe
- IMPHASH 34c799c8d0bec4da49b6ba81b5f826a8
- SHA256 8d33edaeb18e91203df05a8c5edfce8560388843dd15569121ba5c7ec81ab8a5
- MD5 17ed7967f7d2cb901838e7998c414839
- SHA1 b340641b17c8b8de4f06d28a909c3603570b8f36
- SHA512 a13d15254adb39fb7b4641b91880b23524ccc9f39c3d39956c3003278adce5bb3203b6501e6e5566d164b2ac80c9723534046a5d0d49259100a1b61bdf610858
- SSDEEP 6144:jKdHzYj8dFGMrAaai6F9G8aC+OsAOn0AO+uCuv:jKdHzYjdAai6znh+OsB0tv
- TLSH T1E4948D1073D2C136DAB203710B7DAB5A953EBD104F6555EBE3E80D1E8E706C1AB36B62
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
49:8a:07:f5:25:26:0b:42:d8:f9:82:72:11:f8:60:a0:dc:ad:2f:e8
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Chains
Apr 28, 2014
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Serial Number
1d:37:83:b3:de:cd:5d:bb:16:e3:3c:d3:a6:b3:bf:db
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 20, 2014 - Feb 21, 2015
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
1
Major OS version
5
Entry point
94848
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\builds\AAM\8.0\source\dev\aamcore\target\win\Release\AAMHelper.pdb
psapi
GetModuleFileNameExW
kernel32
GetTempPathW
GetLastError
GetProcAddress
CloseHandle
lstrlenA
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSectionAndSpinCount
GetSystemTimeAsFileTime
GetVersionExW
FileTimeToSystemTime
SetDllDirectoryW
Sleep
GetCurrentProcessId
WriteFile
InitializeCriticalSection
LeaveCriticalSection
ReadFile
CreateFileW
EnterCriticalSection
DeleteCriticalSection
CreateThread
SetFilePointer
GetCurrentThreadId
GetDateFormatW
GetTimeFormatW
GetFileSizeEx
GetLocalTime
CreateMutexW
OpenMutexW
ReleaseMutex
LocalAlloc
MultiByteToWideChar
QueryPerformanceCounter
GetModuleHandleW
GetModuleFileNameW
GetExitCodeProcess
LoadLibraryW
WideCharToMultiByte
OpenProcess
WaitForSingleObject
GetCurrentProcess
CreateProcessW
FreeLibrary
CompareStringW
SetEnvironmentVariableA
SetEndOfFile
WriteConsoleW
SetStdHandle
OutputDebugStringW
HeapReAlloc
GetConsoleCP
FlushFileBuffers
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetOEMCP
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
SetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCPInfo
GetACP
IsValidCodePage
LoadLibraryExW
HeapSize
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetFileType
GetProcessHeap
GetStdHandle
LocalFree
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
GetStringTypeW
EncodePointer
DecodePointer
GetCommandLineW
HeapFree
HeapAlloc
ExitProcess
GetModuleHandleExW
MoveFileExW
GetTimeZoneInformation
IsDebuggerPresent
IsProcessorFeaturePresent
RaiseException
RtlUnwind
user32
wsprintfW
advapi32
LookupPrivilegeValueW
CryptHashData
CryptDestroyHash
CryptCreateHash
CryptReleaseContext
CryptAcquireContextW
CryptGetHashParam
AdjustTokenPrivileges
OpenProcessToken
shell32
SHCreateDirectoryExW
ord680
ole32
CoCreateInstance
CLSIDFromProgID
CLSIDFromString
OleRun
CoUninitialize
CoInitialize
oleaut32
SysFreeString
VariantInit
VariantCopy
VariantClear
SysAllocString
GetErrorInfo
shlwapi
PathRenameExtensionW
PathAppendW
PathAddExtensionW
PathFindFileNameW
PathIsFileSpecW
PathFileExistsW
PathRemoveFileSpecW
PathIsDirectoryW
PathRemoveExtensionW
crypt32
CertGetNameStringW
wintrust
WTHelperGetProvSignerFromChain
WTHelperGetProvCertFromChain
WTHelperProvDataFromStateData
WinVerifyTrust
Name
.text
Size
211KB
Virtual Size
210KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
85KB
Virtual Size
85KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
7KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
88KB
Virtual Size
87KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=199, version=41118,
count=36, id=205, version=50929,
count=78, id=207, version=50929,
count=219, id=206, version=50929,
count=166, id=1, productName=Unmarked objects,
count=21, id=185, version=30716,
count=63, id=211, version=61030,
count=1, id=201, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=151,
count=1, id=204, productName=VS2012 UPD4 build 61030, version=61030,
Utilities/AdobeApplicationManager(URIHandler).exe
- IMPHASH dff89fea4a428b93343f0cbda1e7482f
- SHA256 4298254c6335720c53944b0bbbf3c34368d24c78e1bddd30d42a290dc2d98235
- MD5 a53e0ea599581786cc9e9bc0739f3818
- SHA1 2f7f09a7fdfe70d0911ee70ee579adba06fa1ac8
- SHA512 455dbb27fef606994ae1022977ed970763ed430b4e1fd117b9a30e22c60a8604b83326c7bb594d694320cef80f82b11d2eec45b65066ec0b7bb0c7c8c96d274a
- SSDEEP 12288:RrMVtb5V0p5SVRRBvdxxo/5RJ2OfQqwsBOIj8h5:RQhsgxoRRoOl765
- TLSH T169D46C90B7A3E1B1D9A241F40D6DEB0A742DAC180B664EFBF3D80A1D1D719C11B36BB5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
43:02:5b:7f:bc:f9:0c:5c:e9:0d:7b:92:25:6a:93:67:eb:ee:0f:44
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Chains
Apr 28, 2014
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Serial Number
1d:37:83:b3:de:cd:5d:bb:16:e3:3c:d3:a6:b3:bf:db
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 20, 2014 - Feb 21, 2015
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
1
Major OS version
5
Entry point
225960
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\builds\AAM\8.0\source\dev\aamcore\target\win\Release\AdobeApplicationManager(URIHandler).pdb
advapi32
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
RegCreateKeyExW
RegDeleteKeyW
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
RegSetValueExW
shlwapi
PathRenameExtensionW
PathAppendW
PathAddExtensionW
PathRemoveFileSpecW
PathIsFileSpecW
PathRemoveExtensionW
PathFileExistsW
PathIsDirectoryW
PathFindFileNameW
shell32
SHGetSpecialFolderPathW
SHCreateDirectoryExW
wininet
InternetCanonicalizeUrlW
kernel32
SetEnvironmentVariableA
SetEndOfFile
WriteConsoleW
FreeLibrary
CreateProcessW
GetCurrentProcess
WaitForSingleObject
OpenProcess
WideCharToMultiByte
LoadLibraryW
GetExitCodeProcess
GetModuleFileNameW
MultiByteToWideChar
GetTempPathW
GetLastError
GetProcAddress
CloseHandle
DeleteFileW
SetFileAttributesW
lstrlenA
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSectionAndSpinCount
GetModuleHandleW
GetEnvironmentVariableW
SetDllDirectoryW
GetCurrentProcessId
lstrlenW
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
SetFilePointer
WriteFile
CreateFileW
GetCurrentThreadId
GetDateFormatW
GetTimeFormatW
ReadFile
GetFileSizeEx
GetLocalTime
CreateMutexW
OpenMutexW
ReleaseMutex
LocalFree
QueryPerformanceCounter
GetStringTypeW
Sleep
EncodePointer
DecodePointer
GetCommandLineW
HeapFree
HeapAlloc
GetFileAttributesExW
GetSystemTimeAsFileTime
MoveFileExW
GetTimeZoneInformation
IsDebuggerPresent
IsProcessorFeaturePresent
RaiseException
RtlUnwind
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
ExitProcess
GetModuleHandleExW
GetStdHandle
GetProcessHeap
GetFileType
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapSize
IsValidCodePage
GetACP
GetOEMCP
GetConsoleMode
ReadConsoleW
SetFilePointerEx
FlushFileBuffers
GetConsoleCP
HeapReAlloc
LoadLibraryExW
OutputDebugStringW
SetStdHandle
ole32
StringFromGUID2
CoCreateGuid
CoCreateInstance
CLSIDFromProgID
CLSIDFromString
OleRun
CoUninitialize
CoInitialize
oleaut32
GetErrorInfo
SysFreeString
VariantInit
VariantCopy
VariantClear
SysAllocString
Name
.text
Size
365KB
Virtual Size
365KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
108KB
Virtual Size
107KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
14KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
87KB
Virtual Size
87KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=199, version=41118,
count=36, id=205, version=50929,
count=2, id=188, version=30716,
count=78, id=207, version=50929,
count=220, id=206, version=50929,
count=1, id=190, version=30716,
count=162, id=1, productName=Unmarked objects,
count=21, id=185, version=30716,
count=57, id=211, version=61030,
count=1, id=201, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=151,
count=1, id=204, productName=VS2012 UPD4 build 61030, version=61030,
Utilities/AdobeApplicationManager.exe
- IMPHASH 0a17acb79fb7635b17907014a833bbce
- SHA256 f24ce3b6125d085fb7700be445ccd58e4fcd13baf797c74ed516fe1efb820b1b
- MD5 7d18772c8b6bfc67c73b71c3a0c1df22
- SHA1 0c7b41a958257fa296acfce05c7bac7dcc88ec95
- SHA512 25a5b0b537cf83913629e62bbac052d26d1fcf453124e050c15e58ac17ee41d820e94a821cc0f3af022ed3d009d9f37700cddeccd232bb7619756033f624bc45
- SSDEEP 24576:HYP7P/G0jd3cvEDmjacOM5GG6eXh5bQ0jNcNOF8h73tsDT86nKd8jdtN482HXshg:4L3okPcOm5xG73aDTJhR48nTldQ
- TLSH T167B52751A3E59129F6F32770AABD5A664A7EBC115B35C0DFA3900C0D09F0AC09E367B7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
5e:7a:22:78:78:de:68:f7:3d:2a:cd:d5:f3:3d:59:83:3f:9f:68:f8
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Chains
Feb 27, 2014
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Serial Number
1d:37:83:b3:de:cd:5d:bb:16:e3:3c:d3:a6:b3:bf:db
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 20, 2014 - Feb 21, 2015
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
1
Major OS version
5
Entry point
822605
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\builds\AAM\8.0\source\dev\aamcore\target\win\Release\LBS\AdobeApplicationManager.pdb
shell32
ShellExecuteExW
SHGetSpecialFolderPathW
ShellExecuteW
CommandLineToArgvW
ord680
SHCreateDirectoryExW
shlwapi
PathFindFileNameW
PathRemoveFileSpecW
PathRemoveExtensionW
PathIsDirectoryW
PathStripPathW
PathIsNetworkPathW
PathRenameExtensionW
PathAppendW
PathAddExtensionW
PathIsFileSpecW
PathFileExistsW
winhttp
WinHttpAddRequestHeaders
WinHttpSetStatusCallback
WinHttpReceiveResponse
WinHttpQueryHeaders
WinHttpGetProxyForUrl
WinHttpOpen
WinHttpSetOption
WinHttpQueryAuthSchemes
WinHttpSetCredentials
WinHttpSendRequest
WinHttpOpenRequest
WinHttpQueryDataAvailable
WinHttpReadData
WinHttpConnect
WinHttpCloseHandle
WinHttpSetTimeouts
WinHttpGetIEProxyConfigForCurrentUser
comctl32
ord17
setupapi
SetupDiGetDeviceInstanceIdW
CM_Get_DevNode_Status
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceRegistryPropertyW
SetupDiGetClassDevsW
kernel32
SetEnvironmentVariableA
IsDBCSLeadByteEx
WriteConsoleW
SetStdHandle
WaitForMultipleObjects
OutputDebugStringW
GetConsoleCP
ReadConsoleW
GetConsoleMode
GetLocaleInfoA
EnumSystemLocalesW
GetModuleHandleW
GetACP
GetProcAddress
GetUserDefaultUILanguage
MultiByteToWideChar
SetFilePointer
WriteFile
ReadFile
CreateFileW
GetLastError
CloseHandle
DosDateTimeToFileTime
CreateFileA
SetFileTime
GetFileAttributesA
FlushFileBuffers
GetFileTime
LocalFileTimeToFileTime
FindFirstFileW
FreeLibrary
CreateProcessW
GetCurrentProcess
WaitForSingleObject
WideCharToMultiByte
LoadLibraryW
GetExitCodeProcess
GetModuleFileNameW
GetTempPathW
FindClose
RemoveDirectoryW
FindNextFileW
DeleteFileW
SetFileAttributesW
lstrlenA
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSectionAndSpinCount
CreateMutexW
Sleep
ReleaseSemaphore
CreateSemaphoreW
LocalAlloc
OpenSemaphoreW
ReleaseMutex
GetCurrentProcessId
LocalFree
GetVersionExW
GetSystemTime
SetDllDirectoryW
FindResourceW
LoadResource
SizeofResource
LockResource
TerminateThread
ResumeThread
CreateThread
GetFileAttributesW
SetEndOfFile
SetFilePointerEx
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetFileSizeEx
GlobalFree
GetCurrentThreadId
GetDateFormatW
GetTimeFormatW
GetLocalTime
OpenMutexW
GetFileSize
MoveFileExW
SetEvent
SetLastError
CreateEventW
CreateDirectoryW
GetFullPathNameW
GetFullPathNameA
QueryPerformanceCounter
UnlockFile
LockFile
GetTickCount
GetSystemTimeAsFileTime
FormatMessageA
LockFileEx
GetDiskFreeSpaceW
LoadLibraryA
GetDiskFreeSpaceA
GetTempPathA
AreFileApisANSI
ConnectNamedPipe
CreateNamedPipeW
GetTimeZoneInformation
GetStringTypeW
EncodePointer
DecodePointer
GetCommandLineW
ExitProcess
GetModuleHandleExW
HeapFree
HeapAlloc
IsDebuggerPresent
IsProcessorFeaturePresent
RaiseException
RtlUnwind
HeapReAlloc
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
GetStdHandle
GetProcessHeap
GetFileType
GetEnvironmentStringsW
FreeEnvironmentStringsW
IsValidCodePage
GetOEMCP
HeapSize
LoadLibraryExW
DeleteFileA
user32
SendMessageW
EnableWindow
SetWindowTextW
TranslateAcceleratorW
GetMessageW
GetDlgItemTextW
LoadAcceleratorsW
DispatchMessageW
wsprintfW
MessageBoxW
ShowWindow
SendDlgItemMessageW
EndDialog
PostMessageW
GetDlgItem
EnableMenuItem
DialogBoxParamW
GetWindowTextLengthW
GetSystemMenu
LoadImageW
TranslateMessage
advapi32
RegQueryValueExA
RegOpenKeyExW
RegCloseKey
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
AllocateAndInitializeSid
SetEntriesInAclW
FreeSid
CryptGetHashParam
CryptAcquireContextW
CryptReleaseContext
CryptCreateHash
CryptDestroyHash
CryptHashData
GetUserNameW
ole32
CoInitializeEx
CoInitializeSecurity
CoSetProxyBlanket
CoUninitialize
CoInitialize
OleRun
CLSIDFromString
CLSIDFromProgID
CoCreateGuid
StringFromGUID2
CoCreateInstance
oleaut32
GetErrorInfo
SysFreeString
SysAllocString
SysStringLen
VariantClear
VariantCopy
SysAllocStringByteLen
VariantInit
Name
.text
Size
1011KB
Virtual Size
1011KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
258KB
Virtual Size
257KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
19KB
Virtual Size
47KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
834KB
Virtual Size
834KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
105KB
Virtual Size
105KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=3, id=199, version=41118,
count=32, id=205, version=50929,
count=87, id=207, version=50929,
count=239, id=206, version=50929,
count=1, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=206, productName=VS2012 UPD4 build 61030, version=61030,
count=19, id=185, version=30716,
count=271, id=1, productName=Unmarked objects,
count=52, id=207, productName=VS2012 UPD4 build 61030, version=61030,
count=109, id=211, version=61030,
count=1, id=201, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=204, productName=VS2012 UPD4 build 61030, version=61030,
Utilities/npAdobeAAMDetect32.dll
- IMPHASH c30471c98f9d7fb90393d68e884a73a2
- SHA256 067f220fa2e61b6871b42c62d396abfdd0b3f1831cdb98327db8dbd29022c652
- MD5 637839ac6ed995510a411327c5c2da61
- SHA1 3461b894701c142303d2ea9dd4ee896bf4691072
- SHA512 ab0d4498f16b4fa610bed6b5838fa4fffec4050d1db1a5568775b92836a20c303b0b39418589c4ad7eb8415401b1e640ae951122ad62eaacad12e023dd75c3c8
- SSDEEP 24576:nPD4yfIhjm5TuSw7shpU9U9e9PeRtt5gD+BTu:pInIhi9H+tt5MATu
- TLSH T162355C61B756C23AD9DD12B29D3DE7CE852EB9A30B2045C7B38C6B4E6E705C36532603
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
a5:f6:56:77:26:4f:e6:60:56:8c:0c:9a:bd:c7:e1:a2:18:14:67:b1
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Chains
Dec 15, 2012
CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
02:3a:64
Issuer
CN=GeoTrust Global CA,O=GeoTrust Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - May 20, 2022
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
7e:1f:df:72:99:e8:d2:45:a1:5d:0b:a8:e5:b1:59:ba
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - May 19, 2022
Subject
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Serial Number
25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageNetscapeServerGatedCrypto
Timespan
Nov 8, 2006 - Nov 7, 2021
Subject
CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Serial Number
68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 19, 2012 - Sep 19, 2013
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
1
Major OS version
5
Entry point
487606
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
TlsFree
GetSystemTimeAsFileTime
ReleaseSemaphore
lstrlenW
MultiByteToWideChar
lstrlenA
FreeLibrary
GetProcAddress
GetModuleHandleW
lstrcmpiW
RaiseException
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
GetModuleFileNameW
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
MulDiv
FlushInstructionCache
SetLastError
DuplicateHandle
CreateSemaphoreA
GetTickCount
GetProcessHeap
HeapFree
WaitForMultipleObjects
SetWaitableTimer
TlsGetValue
SystemTimeToFileTime
TlsSetValue
OpenEventA
HeapAlloc
ResetEvent
GetCurrentProcessId
Sleep
CreateWaitableTimerW
FormatMessageA
TlsAlloc
WideCharToMultiByte
InterlockedCompareExchange
GetStringTypeW
InitializeCriticalSection
EncodePointer
DecodePointer
GetCommandLineA
RtlUnwind
LCMapStringW
GetCPInfo
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
HeapSize
ExitProcess
WriteFile
GetStdHandle
GetLocaleInfoW
SetHandleCount
GetFileType
GetStartupInfoW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
LoadLibraryW
SetFilePointer
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleW
FlushFileBuffers
CreateFileW
InterlockedPushEntrySList
VirtualFree
VirtualAlloc
InterlockedPopEntrySList
GetLastError
InterlockedExchange
InterlockedDecrement
InterlockedIncrement
GlobalFree
GlobalAlloc
lstrcpyA
GetThreadLocale
SetThreadLocale
SetEvent
WaitForSingleObject
CloseHandle
CreateEventA
LocalFree
GetCurrentThreadId
ws2_32
WSAStartup
WSACleanup
user32
EndPaint
BeginPaint
ReleaseDC
UnionRect
IntersectRect
OffsetRect
RegisterClassExW
GetDC
GetClassInfoExW
PtInRect
GetClientRect
SetCursor
LoadCursorW
DefWindowProcW
InvalidateRect
GetWindowRect
CharNextW
CallWindowProcW
EqualRect
CreateWindowExW
IsWindow
ShowWindow
SetFocus
GetKeyState
GetWindowLongW
SetWindowLongW
GetFocus
IsChild
SetWindowRgn
SetWindowPos
DestroyWindow
PostMessageW
UnregisterClassA
gdi32
SetViewportOrgEx
LPtoDP
DeleteDC
GetDeviceCaps
CreateDCW
CreateRectRgnIndirect
SetMapMode
SaveDC
RestoreDC
SetWindowOrgEx
SetTextAlign
TextOutW
ole32
CoTaskMemFree
CoCreateInstance
OleRegGetMiscStatus
OleRegEnumVerbs
OleRegGetUserType
CreateOleAdviseHolder
CoTaskMemAlloc
StringFromGUID2
CoTaskMemRealloc
oleaut32
LoadTypeLi
VarUI4FromStr
UnRegisterTypeLi
RegisterTypeLi
SysStringByteLen
SysAllocStringByteLen
SafeArrayCreate
SafeArrayRedim
SafeArrayDestroy
SafeArrayLock
VariantCopyInd
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayCopy
SafeArrayGetVartype
SafeArrayUnlock
VariantCopy
VariantChangeType
OleCreatePropertyFrame
VariantInit
SysAllocStringLen
VariantClear
SysAllocString
SysStringLen
LoadRegTypeLi
SysFreeString
advapi32
RegEnumKeyExW
RegCloseKey
RegDeleteKeyW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
RegQueryInfoKeyW
wininet
InternetQueryOptionW
urlmon
IsValidURL
CreateAsyncBindCtx
CreateURLMonikerEx
DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
NP_GetEntryPoints
NP_Initialize
NP_Shutdown
Name
.text
Size
816KB
Virtual Size
815KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
163KB
Virtual Size
163KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
66KB
Virtual Size
75KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
2B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
70KB
Virtual Size
70KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=27, id=158, productName=VS2010 build 30319, version=30319,
count=61, id=171, productName=VS2010 build 30319, version=30319,
count=146, id=170, productName=VS2010 build 30319, version=30319,
count=9, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=21, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=222, id=1, productName=Unmarked objects,
count=64, id=175, version=30319,
count=1, id=155, productName=VS2010 build 30319, version=30319,
count=1, id=154, productName=VS2010 build 30319, version=30319,
count=1, id=157, productName=VS2010 build 30319, version=30319,
Utilities/npAdobeAAMDetect64.dll
- IMPHASH dff1d4639dbc794c8ab111e79e052f0e
- SHA256 83868c4bdd2e3dabf5ab803517e6ea0f6ab3d5f66e4b6600049936670a646510
- MD5 4e31de484ad120894d0d3e7740979108
- SHA1 f8c1e3ad231ebb5847abcf70cc120d881dc82f99
- SHA512 eb619941261194cd41908b33691d71367e67e48b2090d5c00ceff031b2a67e55c2900a65d3f1916e8552ff29cd26777038dde18d8b0fee7c0b0292d8fa5cde25
- SSDEEP 24576:o2VgiKfFwtFg0eC6lfD9HLlzTKkoBd42FFt3yxhApqvkO4xbl9b1McZEy1J9NE/y:o2VnKfFwtFgBC6lfD9HLlzukoBd42FF7
- TLSH T10A65291A766C80A1D079C27CCDE6868AE2F238814F21DBDB2165935F1F7BFE4593D620
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
27:2f:73:09:55:51:de:e0:68:d3:52:a9:d3:8e:bd:a4:f0:ba:54:40
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Chains
Dec 15, 2012
CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
02:3a:64
Issuer
CN=GeoTrust Global CA,O=GeoTrust Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - May 20, 2022
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
7e:1f:df:72:99:e8:d2:45:a1:5d:0b:a8:e5:b1:59:ba
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - May 19, 2022
Subject
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Serial Number
25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageNetscapeServerGatedCrypto
Timespan
Nov 8, 2006 - Nov 7, 2021
Subject
CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Serial Number
68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 19, 2012 - Sep 19, 2013
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
2
Major OS version
5
Entry point
536996
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kernel32
MultiByteToWideChar
lstrlenA
FreeLibrary
GetProcAddress
GetModuleHandleW
lstrcmpiW
RaiseException
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
GetModuleFileNameW
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
MulDiv
FlushInstructionCache
SetLastError
DuplicateHandle
CreateSemaphoreA
GetTickCount
GetProcessHeap
HeapFree
WaitForMultipleObjects
SetWaitableTimer
TlsGetValue
SystemTimeToFileTime
TlsSetValue
OpenEventA
HeapAlloc
ResetEvent
GetCurrentProcessId
Sleep
CreateWaitableTimerW
FormatMessageA
LocalFree
WideCharToMultiByte
GetStringTypeW
InitializeCriticalSection
EncodePointer
DecodePointer
lstrlenW
GetCommandLineA
RtlPcToFileHeader
RtlLookupFunctionEntry
RtlUnwindEx
LCMapStringW
GetCPInfo
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
HeapSize
ExitProcess
WriteFile
GetStdHandle
GetLocaleInfoW
FlsGetValue
FlsFree
FlsAlloc
SetHandleCount
GetFileType
GetStartupInfoW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
LoadLibraryW
SetFilePointer
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleW
FlushFileBuffers
CreateFileW
InterlockedPushEntrySList
VirtualFree
VirtualAlloc
InterlockedPopEntrySList
ReleaseSemaphore
GetSystemTimeAsFileTime
TlsFree
TlsAlloc
GetLastError
GlobalFree
GlobalAlloc
lstrcpyA
GetThreadLocale
SetThreadLocale
SetEvent
WaitForSingleObject
CloseHandle
CreateEventA
FlsSetValue
GetCurrentThreadId
ws2_32
WSAStartup
WSACleanup
user32
EndPaint
BeginPaint
ReleaseDC
UnionRect
IntersectRect
OffsetRect
RegisterClassExW
GetDC
GetClassInfoExW
PtInRect
GetClientRect
SetCursor
LoadCursorW
DefWindowProcW
InvalidateRect
GetWindowRect
CharNextW
CallWindowProcW
EqualRect
CreateWindowExW
IsWindow
ShowWindow
SetFocus
GetKeyState
GetWindowLongPtrW
SetWindowLongPtrW
GetFocus
IsChild
SetWindowRgn
SetWindowPos
DestroyWindow
PostMessageW
UnregisterClassA
gdi32
SetViewportOrgEx
LPtoDP
DeleteDC
GetDeviceCaps
CreateDCW
CreateRectRgnIndirect
SetMapMode
SaveDC
RestoreDC
SetWindowOrgEx
SetTextAlign
TextOutW
ole32
CoTaskMemFree
CoCreateInstance
OleRegGetMiscStatus
OleRegEnumVerbs
OleRegGetUserType
CreateOleAdviseHolder
CoTaskMemAlloc
StringFromGUID2
CoTaskMemRealloc
oleaut32
LoadTypeLi
VarUI4FromStr
UnRegisterTypeLi
RegisterTypeLi
SysStringByteLen
SysAllocStringByteLen
SafeArrayCreate
SafeArrayRedim
SafeArrayDestroy
SafeArrayLock
VariantCopyInd
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayCopy
SafeArrayGetVartype
SafeArrayUnlock
VariantCopy
VariantChangeType
OleCreatePropertyFrame
VariantInit
SysAllocStringLen
VariantClear
SysAllocString
SysStringLen
LoadRegTypeLi
SysFreeString
advapi32
RegEnumKeyExW
RegCloseKey
RegDeleteKeyW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
RegQueryInfoKeyW
wininet
InternetQueryOptionW
urlmon
IsValidURL
CreateAsyncBindCtx
CreateURLMonikerEx
DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
NP_GetEntryPoints
NP_Initialize
NP_Shutdown
Name
.text
Size
938KB
Virtual Size
937KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
364KB
Virtual Size
363KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
74KB
Virtual Size
85KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
50KB
Virtual Size
49KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
2B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=158, productName=VS2010 build 30319, version=30319,
count=62, id=171, productName=VS2010 build 30319, version=30319,
count=141, id=170, productName=VS2010 build 30319, version=30319,
count=9, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=21, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=226, id=1, productName=Unmarked objects,
count=64, id=175, version=30319,
count=1, id=155, productName=VS2010 build 30319, version=30319,
count=1, id=154, productName=VS2010 build 30319, version=30319,
count=1, id=157, productName=VS2010 build 30319, version=30319,
ZStringResources/FontCustomization.xml
- SHA256 6a01cfc74ac88b1e1678b5ed70ac9dfe5ea74a3b0ed56c18044b5043bc0ec661
- MD5 bd6e64e1344f15b96b6540f33ad7df90
- SHA1 c1f0b0bc41ebeb6b894c9e5858afbf696449cac3
- SHA512 b8c1737f5f34beda7290a04bcf7d0b4bd30c7f4421bca37517de0504541e4aaedaa9e9a13967074408974e2c6a94a3d8ef4f9e00a60c6f51e70fc0ca40db0314
- TLSH T13E316C9D3673176667D316EB23B958C03A2F691956574D2280622E3F05C307D7FE2906
- MD5 SHA1 SHA512 TLSH
ZStringResources/cs_CZ/stringtable.xml
- SHA256 34df062a3751f9e4d4c66ea57245fc45605852c5765026ae7d3baccb04777b9e
- MD5 4e23218136079250c549489e58e894ad
- SHA1 6aae2cb2f4a37e7d28e4636a6bd17010781ea1ca
- SHA512 a8fb9d6c377f27a897bad9016ae5a628fa374186ed095cbd197abdeba7078b3e994c4dbfab989e7718d52fbdd61ea0a8519e384874d82749e3c3856454b08a59
- SSDEEP 768:7oPKuJ2YiOwknYwB93/WnKwbNYqbGEj5PFnHvKxjvdic0MtTinV:7oPKu4YtwknYwB5W/J96ug5VUV
- TLSH T183F2255272A87F1C6886956F8A7620C4004FDCFC25B8646372AF757B3F61D880AFBD64
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/da_DK/stringtable.xml
- SHA256 7dda7cd2a70e7b90f8174ba1d94ae9160ea25bbbef9bf1e5eb6e8d0f802d8d4e
- MD5 6d7a85c4666c3c41f9f4965090d240e8
- SHA1 51774dbee472ecc963ef72b98e690d65eab3cd22
- SHA512 2d51c7166ad763b4aa1723611625b9e50cd005f300d41688ac17f210d52dac7db71f4dac679065b619358078a38485ad7ebba607476ec8d4f08b5d007f687291
- SSDEEP 384:FHd8Yg+1ILj7ErlrMoYZx87v7pcDrV1nHq8BH7zeW:FHdvs6rMoYAb7+DrHnHqweW
- TLSH T1E1F2468272B8BF2C6846957F8AB220C8011F9CBC25B46467729E757B3F51D480BFF964
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/de_DE/stringtable.xml
- SHA256 9fd4094b27f47d88a71888302d5e95b99fe81230a9a0df9195de16653d4b1f6e
- MD5 71c9e48a0dd05c3df68c67dafe345223
- SHA1 e029979b0bae97b4bd87f94fccfbf0be8c016542
- SHA512 fa61ed9ac245a40b8e14e08d06c740c108410e0bbf4176f0a67b53ad5a705240ce4118c690d9a714c9acf3d01b8975047cb00217f02746c8485eb003ff8e2416
- SSDEEP 192:kscB1ojoqAv0vxjS7D5ki1zwbLCZBOotvtt65St6QAitgtUttOskEEdHusTQFXd9:ksK0MkiJwyvTt653dMnHmmXMHJXls
- TLSH T1CEF2575272B8BF2C6446A67F8A7220C5110FDCBC21786862729EB57B3F61D440BFF964
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/en_AE/stringtable.xml
- SHA256 39e299be33e079f7016c1ebc8f7740c3e1d72a85c432b76ac43c0d34f8845db6
- MD5 abc8b64ac0ef8cdf7982919c93c272c1
- SHA1 fe92c90b8e730d70a6241185ccd17770b8026978
- SHA512 0ac2158c4499269af0d97035b7050c3ed408a488b793334c9d87822464435359316262cd68dc12ce9085117a9fa24288023ab862f8d3ffade03922c0ef072ca4
- SSDEEP 384:GmUTcoudN4PzEmvU+9Vd3TiOzd5nHPhdiIJUKj:GmUTconzjvhh3TiY5nHPmA
- TLSH T1F6D237927264BF2C2896817F8A7531D4051F9CFC76A8642331AEB53F3B11E8406F7DA9
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/en_GB/stringtable.xml
- SHA256 28e259a3aac78bb3aa9cfb16f8d1859f68b7f7b0e3a85db16b0fc88016ae71fb
- MD5 5db5547923cca763f3dbecf963d80f88
- SHA1 0290132db7dd7f0578d2911ff6015a88c8755bce
- SHA512 eb303e6fe855cd8c82d8cb785a0beddce8bbd645aa6a713312bb98336f6602671da3c109cc9a75481e0dc5b4a7a6006ad74694442eb8d87acfb21934d40c1b48
- SSDEEP 384:GCMUTcoudN4PzEmvU+9Vd3TiOzdvnHPhdiIJUUj:GCMUTconzjvhh3TiYvnHPmK
- TLSH T1B0D237927264BF2C2896817F8A7531D4051F9CFC36A8642331AE753F3B11E8406F7DA9
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/en_IL/stringtable.xml
- SHA256 39e299be33e079f7016c1ebc8f7740c3e1d72a85c432b76ac43c0d34f8845db6
- MD5 abc8b64ac0ef8cdf7982919c93c272c1
- SHA1 fe92c90b8e730d70a6241185ccd17770b8026978
- SHA512 0ac2158c4499269af0d97035b7050c3ed408a488b793334c9d87822464435359316262cd68dc12ce9085117a9fa24288023ab862f8d3ffade03922c0ef072ca4
- SSDEEP 384:GmUTcoudN4PzEmvU+9Vd3TiOzd5nHPhdiIJUKj:GmUTconzjvhh3TiY5nHPmA
- TLSH T1F6D237927264BF2C2896817F8A7531D4051F9CFC76A8642331AEB53F3B11E8406F7DA9
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/en_US/stringtable.xml
- SHA256 39e299be33e079f7016c1ebc8f7740c3e1d72a85c432b76ac43c0d34f8845db6
- MD5 abc8b64ac0ef8cdf7982919c93c272c1
- SHA1 fe92c90b8e730d70a6241185ccd17770b8026978
- SHA512 0ac2158c4499269af0d97035b7050c3ed408a488b793334c9d87822464435359316262cd68dc12ce9085117a9fa24288023ab862f8d3ffade03922c0ef072ca4
- SSDEEP 384:GmUTcoudN4PzEmvU+9Vd3TiOzd5nHPhdiIJUKj:GmUTconzjvhh3TiY5nHPmA
- TLSH T1F6D237927264BF2C2896817F8A7531D4051F9CFC76A8642331AEB53F3B11E8406F7DA9
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/en_XM/stringtable.xml
- SHA256 6974b02da40a99bb20441c53e9c90bd93afae8d684481e79d1b7f02b46cf92da
- MD5 5ef9ac72b091db1f3e42f6a4b84ea9a7
- SHA1 dd59bae596e92937312c39e84541497bf75def91
- SHA512 50f877327d7a97f75ce8a04c2c742cc5f86cf92fdf41ae611668a5949f908d3320eeb08f9b90606466bd7ae3a460b997e480e6ee09bbd2c251aac9ff7cbc7eca
- SSDEEP 384:GFUTcoudN4PzEmvU+9Vd3TiOzdvnHPhdiIJUEj:GFUTconzjvhh3TiYvnHPm6
- TLSH T18BD247927264BF2C2896817F8A7531D4041F9CFC76A8642331AEB53F3B51E8406F7DA9
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/es_ES/stringtable.xml
- SHA256 55e50c6a5b6c54f6b11a9b14133776ac599c7587356ecd59e97e036afb3e63a5
- MD5 ac71aeae967b535e0ce69bb995d454aa
- SHA1 617a52c88d5b648963752eeecb8dfe3e87a2c848
- SHA512 eb0767d7723c5d2a78076c541eea23888748c9976037340567cbe1c475d4fff395291d1227a8d37209fd948dc82bafcab72cd104c5bceb1bf98a05fbaf6caffd
- SSDEEP 192:RqOzNs4Ws7pOL0LzE+GbMxRbq4i8LxLKFddUm3XFzcst1sTz0NNWzqdtVHQi+qea:cOks7ayybMbbqNnH46W4tVwi+qea
- TLSH T102F2799272B86F1C6446956F8AB270C5004F9CBC34B85462B29E757B3FA0D884BFFD64
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/es_LA/stringtable.xml
- SHA256 bff9c4319297498c94f03961460a7b8ed7a6c1b1ff9a569a245a530e1ca97e14
- MD5 aab6211eb9559b8c5518c70bfb56fff0
- SHA1 30d4d241255dab5e7800a09b685d83d2f56110bd
- SHA512 4fb55d935216ea0294db45569e7ee768096170c6dbe480df981757e8c801fc4b7cf96f65587b8127684a06d76dcfa9f7e0bbeee6a6870f43abfe6178c237f151
- SSDEEP 192:RqOzNs4Ws7pOL0LzE+GbMxRbq4i8LxLOFddUm3XFzcst1sTz0NNWzqdLVHQivqea:cOks7ayybMbbq5nH46W4LVwivqea
- TLSH T149F2799272B87F1C6446956F8AB270C5004F9CBC34B85462B29E757B3FA0D884BBFD64
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/es_MX/stringtable.xml
- SHA256 bff9c4319297498c94f03961460a7b8ed7a6c1b1ff9a569a245a530e1ca97e14
- MD5 aab6211eb9559b8c5518c70bfb56fff0
- SHA1 30d4d241255dab5e7800a09b685d83d2f56110bd
- SHA512 4fb55d935216ea0294db45569e7ee768096170c6dbe480df981757e8c801fc4b7cf96f65587b8127684a06d76dcfa9f7e0bbeee6a6870f43abfe6178c237f151
- SSDEEP 192:RqOzNs4Ws7pOL0LzE+GbMxRbq4i8LxLOFddUm3XFzcst1sTz0NNWzqdLVHQivqea:cOks7ayybMbbq5nH46W4LVwivqea
- TLSH T149F2799272B87F1C6446956F8AB270C5004F9CBC34B85462B29E757B3FA0D884BBFD64
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/es_NA/stringtable.xml
- SHA256 bff9c4319297498c94f03961460a7b8ed7a6c1b1ff9a569a245a530e1ca97e14
- MD5 aab6211eb9559b8c5518c70bfb56fff0
- SHA1 30d4d241255dab5e7800a09b685d83d2f56110bd
- SHA512 4fb55d935216ea0294db45569e7ee768096170c6dbe480df981757e8c801fc4b7cf96f65587b8127684a06d76dcfa9f7e0bbeee6a6870f43abfe6178c237f151
- SSDEEP 192:RqOzNs4Ws7pOL0LzE+GbMxRbq4i8LxLOFddUm3XFzcst1sTz0NNWzqdLVHQivqea:cOks7ayybMbbq5nH46W4LVwivqea
- TLSH T149F2799272B87F1C6446956F8AB270C5004F9CBC34B85462B29E757B3FA0D884BBFD64
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/fi_FI/stringtable.xml
- SHA256 31eb9e617f9029dd4f569d5f5521df18bbbfa310b89a7ddb8662674988ad2d9d
- MD5 4a4e7cca9ae8a46e868abe4a936e654d
- SHA1 7716446f24708ec5a41bb13913a0c17e741fbaf0
- SHA512 06679fcea3988a814cfff51f87094c668b092a2c4731a44b66471c3d2680b2cad12653e6bc5cd0b4cd8560d5b35326e165d3dc45631a6ba6a5fb57b36c34f136
- SSDEEP 192:21Kep1TIZWSyBrdbJznpSJGZrFGfaR78eB1BCshwHvvdUm3XFzcsaLs4z0NN+eFA:M31cYDBJb7r6CR782w9nHV7Tek9zNiR
- TLSH T10FF2499232B8AF1C644A997F8AB120C9004FDCFC25785863729E75BB3F61D441AFBD64
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/fr_CA/stringtable.xml
- SHA256 c573c7f8cf9572091ae50c8592dfe1849e8e6b7bd95c3a8b398b4a4595bee81f
- MD5 4b613a84d7a485241702fdcef9bb5e99
- SHA1 e531aff5497cc3507bc9457a12b6bd25ce349150
- SHA512 5de49be9bff157ed77b7fdb6ab48909b919d968ea6c6021487bad2240810bf7908bf815d8ac8545fdea8f1a70c85145561bfa3e9592e010828d12593d2984876
- SSDEEP 384:dDOp+jRM35sh1xsJfq2YUlo+Pt2ZyYLHa+nHO0zSnV2Q/:dSpMRL1GJfq2YUlo+PIbHa+nHOH2W
- TLSH T195F2344272B87F2C6886956F8A7231C5001FDCBC3168646272AF657B3F61D8847FF9A4
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/fr_FR/stringtable.xml
- SHA256 7e70ed470b8619a416428ff8dfb1ca6100616102ef4b13c5f120409a422bce33
- MD5 fcf064ad5dd4e9f51f78f425719e6556
- SHA1 1f07bd61bb1fdfedbeb6851992d50a16f7e0d7e6
- SHA512 5c68cf43c54ecf0c0674afb3d18368e5334e50eb84de39acd9d0fee5b09ca9db6513d6288d599d110692c878ac9cec8f56b1c67db76fc748bdc090a313b4d59f
- SSDEEP 384:JDOp+jRM35sh1xsJfq2YUlo+Pt2ZyYLHY+nHO0zSn/HQ/:JSpMRL1GJfq2YUlo+PIbHY+nHOhHW
- TLSH T112F2344272B87F2C6886956F8A7231C5001FDCBC3168646272AF657B3F61D8847FF9A4
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/fr_MA/stringtable.xml
- SHA256 39e299be33e079f7016c1ebc8f7740c3e1d72a85c432b76ac43c0d34f8845db6
- MD5 abc8b64ac0ef8cdf7982919c93c272c1
- SHA1 fe92c90b8e730d70a6241185ccd17770b8026978
- SHA512 0ac2158c4499269af0d97035b7050c3ed408a488b793334c9d87822464435359316262cd68dc12ce9085117a9fa24288023ab862f8d3ffade03922c0ef072ca4
- SSDEEP 384:GmUTcoudN4PzEmvU+9Vd3TiOzd5nHPhdiIJUKj:GmUTconzjvhh3TiY5nHPmA
- TLSH T1F6D237927264BF2C2896817F8A7531D4051F9CFC76A8642331AEB53F3B11E8406F7DA9
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/fr_XM/stringtable.xml
- SHA256 7e70ed470b8619a416428ff8dfb1ca6100616102ef4b13c5f120409a422bce33
- MD5 fcf064ad5dd4e9f51f78f425719e6556
- SHA1 1f07bd61bb1fdfedbeb6851992d50a16f7e0d7e6
- SHA512 5c68cf43c54ecf0c0674afb3d18368e5334e50eb84de39acd9d0fee5b09ca9db6513d6288d599d110692c878ac9cec8f56b1c67db76fc748bdc090a313b4d59f
- SSDEEP 384:JDOp+jRM35sh1xsJfq2YUlo+Pt2ZyYLHY+nHO0zSn/HQ/:JSpMRL1GJfq2YUlo+PIbHY+nHOhHW
- TLSH T112F2344272B87F2C6886956F8A7231C5001FDCBC3168646272AF657B3F61D8847FF9A4
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/hu_HU/stringtable.xml
- SHA256 39e299be33e079f7016c1ebc8f7740c3e1d72a85c432b76ac43c0d34f8845db6
- MD5 abc8b64ac0ef8cdf7982919c93c272c1
- SHA1 fe92c90b8e730d70a6241185ccd17770b8026978
- SHA512 0ac2158c4499269af0d97035b7050c3ed408a488b793334c9d87822464435359316262cd68dc12ce9085117a9fa24288023ab862f8d3ffade03922c0ef072ca4
- SSDEEP 384:GmUTcoudN4PzEmvU+9Vd3TiOzd5nHPhdiIJUKj:GmUTconzjvhh3TiY5nHPmA
- TLSH T1F6D237927264BF2C2896817F8A7531D4051F9CFC76A8642331AEB53F3B11E8406F7DA9
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/it_IT/stringtable.xml
- SHA256 b08b51636bf39b89e05837671240851dde5466cff7ba9d5a5e7f1d17d066dc03
- MD5 3e1747727711a802216abb0937a821e6
- SHA1 8b6906000cba9afefe282a4c6db76a7d48070f01
- SHA512 f62d7b383352c8ea3479d52af89cd11c5f366c89b6f7a05c546336d494c06368175af10cb508772be8d30af516d6a266eb797dfb556fce1f898e7a73dc27e176
- SSDEEP 384:0nq7oVHDjMS+PPAUSWdRwV/+e/jDqm55Q9ZBWnHic+Blxrlut:xQ/y+0m11nHiXBHJa
- TLSH T1DAF2476272B87F1C6846956F8AB231C8010FDCFC25686462729F667B3F91D480AFFD64
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/ja_JP/stringtable.xml
- SHA256 e1b011a960d3721f8c055dca0d61c29f2f3758ac4c97cc13378a907c17526e69
- MD5 df544025829ab814d4196b21c1fdacd8
- SHA1 d91466176e9d720b9bf6b2e5643043a26f5d2591
- SHA512 256ba000abebb5ee403ed3c04009613f6b819392ed15573e548d8e379ca17a287dc9d9fda1dd74ba086f7290daa901a7ae3f4c8e55b7c9eade6d196ab235b02c
- SSDEEP 192:EAVFMKdY5dN286IZe65nWDWxWiWLJSFQdUm3XFzcsaTswz0NNzWmMdtf3eGkU6:RdYN2+8xnH9DzN6gU6
- TLSH T1C803785D72A87F1D9845947F4AB631C4000F9CBCA9B46472616EE47B3F60E8CCABB874
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/ko_KR/stringtable.xml
- SHA256 6773cde2fcb6a9707f51c70df8bd9271bfe6c72d75b35eaab445967e988ebc7a
- MD5 c07c2cc05cc18df76f7a08ad315659d4
- SHA1 e2aa693f1c3c6864a0376d65a6c7f50ed25224b4
- SHA512 cb6ea4f38f074299df8bb834ba76d04f0f538c61025a5f8114a341accbf998fd5ca329194dd54d6d865052f95b2262891f5503240194c552ba2caf4017a3f3df
- SSDEEP 384:weZZvOa80cmH4m0pFH3jQXMjIfem57ZQNleghnHay8OU+y5VK:EaFcmH4m0pFXUXMjIfem57ZQNAanHaQ/
- TLSH T112F2689232B97F1C5486956F8AB271C4014F9CFC72645462729EA97B3F60D880AFFC78
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/nb_NO/stringtable.xml
- SHA256 1bc5d5c53f9c416bee633551e985c376126f2bacfadf3acd46a4f79e7bc64333
- MD5 957af6ff82670a98b00a7d735e5c2f32
- SHA1 9736b791090f82883d98c8f92ef82ac20820c906
- SHA512 341529a070ba3479785bc03211bf507c6bab39cf7659f53458b76f67c1b032de4996ed6ac56b9855f6fad27b49bd66c47ffa95da40c38bf0a71e55495597ef33
- SSDEEP 384:YwVtLQXoybvl4fT3jWB/GeOyPfCcePEsdvzZnHq8oPJ+c2F6:YwVtLrRSB/GeOyPfCFPdvlnHqrY6
- TLSH T1FCE2394272B87F1C6856957F8AB230C8010F9CBC65B46862729E757B3F61D880BFF964
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/nl_NL/stringtable.xml
- SHA256 87c489a4eacc2743129ad90c0d71770e7dd602d925762043f4a78e6839250c24
- MD5 ae62d922406ce49a3801aabdbde0fc27
- SHA1 95a1f4ad0d4f05fb00e4f0d23b9fc4b92d8a4b1e
- SHA512 091743bba6a8e0909687ea7e19b77827e9bcdbfbd38d93b91c48f727ddec88de61162f56ceeb35d41dbdc05a74a40666668adda4ca96b594fc242c8b3bbb7735
- SSDEEP 384:jZPxxzDDQMOSw5MMQ3qzn7vnFJSkZNVv/I7p9Lik+A65I5XLZxnHvFepvaP/bP:KMARVndk+AFnHv8IL
- TLSH T15BF2584271B87F2C6886957F8AB220C9010FDCFC61B85466729EB57B3F51E480AFF964
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/pl_PL/stringtable.xml
- SHA256 19ec87851405ab9adeecb662754b5246e0bd68c32eabff608d153741d3c8eed3
- MD5 1e273cbe5d4f7c88d94bf311ca9081ff
- SHA1 beaf74fd03200c215b2bcfc3620acf0842be2c22
- SHA512 54e485a9348119b838800c0d62b5a49ae12ddcf191e009c23b0e31b4e0bd2c4936ccef8379e84fa157b363a88154fcee29a7ab40df859a83031eea38b91e4991
- SSDEEP 768:FzoxDtvAGqj+O6f2RrFSZjlB0nHyVpUmde1:JYI
- TLSH T105F2264272B86F1C6895946F8AB221C8044F8CFC25785466729F757B3F61E880BFFD68
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/pt_BR/stringtable.xml
- SHA256 cb97ee5f6583c81ed2f455bcd2e7ba73fa0e08aa3e358a3ae17cca0088e2458d
- MD5 47fc4ffeb557d3c7208d2ce119b197a8
- SHA1 8c9c17c3065de97a207c294e17fe177c8a962e09
- SHA512 59d43e3f153b698bf62c4e28f9ef5ee98af2dc8b7a13355bbd510ced363dbc80999764dc062f5eec5d1ed860f8761353f685741de8ac4d6c86b4cb41e650a148
- SSDEEP 192:3oQ8tQ0zoObrxwq9rPVc7HM5trCWl7WSjIqKQFbdUm3XFzcsWbsAz0NNR4PtobdW:UtQSxJZVcCr7ljmOnHNTR4PmBxcHokN
- TLSH T1B7F2795232A87F2C6846966F8AB231C5004F9CBC2578546272AF767B3F91D840BFFD64
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/ru_RU/stringtable.xml
- SHA256 040f6410ac229e08fce3e2a8c0da7007ed0224aaf53369f44f1d7a481c0fe810
- MD5 6d55238f675e9def9999f4f77a0f973a
- SHA1 9472a8a8791d7da610fa95948f339675fc4e765d
- SHA512 3bbaa2ad17e8b3224e27b729b8a93be21ca5c96688fb5eb5ae86f1c9769f517a39225fff6768745f4fb52f07bc778d28df8ba268fab98666aa30ece851b5a6db
- SSDEEP 192:+FXwv6eXslEN3Sp4pp4+4pCAGHZ2g9LQrzKcZB5ivvdUm3XFzcscTsyz0NNXCJdz:+O9N3SW2GHZ2glQrucZOFnHnZGmNG
- TLSH T17613895231A87F5C1449A43FCA31B588144F8CFC3A79666332AD397B3EA1C444BBF968
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/sv_SE/stringtable.xml
- SHA256 d739609b411599d6d42f7abe17ad9eda046104fd940aca62fb020cb80bd11d7d
- MD5 a056b4784011b7dcddf2bb1e8d5584e7
- SHA1 47efa1abfbd1984033cc560a34dce061b6850483
- SHA512 0b0fd6d9b9a64621e0d0c144930ab640e58672c2256bfdd6687d11d5ec6f22bc49c6e1b5a4bed14f55a4127c7e970e672f80ef011dd6136a1c37b66db9451c75
- SSDEEP 384:lOx5vgqLGhpcmEi5NECvebnHj9ahCYAInki:lOxhZafEi5NEbnHjfYAIki
- TLSH T160E2264272B8BF2C6856957F8AB230C5004FDCBC21B46866729E657B3F51D880BFF964
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/tr_TR/stringtable.xml
- SHA256 2b712ffa00281b764232d993cbcf2cf13142bbafc6ebabdef33a0d19a039eac4
- MD5 a03f1a66028eba4dfa60a89e4b5cea14
- SHA1 bf334cbf06007ad3cbd6a8c5fddc3c60502cf1f2
- SHA512 4ab8c2d7cb1d617240bc472c6111114c9e97d2138ed178d4e7c07883e39f469d9f2ca310eff8ee70d2f8dc0e297a8ace30480f15e9897a4e3f440236f4ef57cc
- SSDEEP 384:kWalCaMwjzO7TOBANxIx5FWhxHxMnHQgDpJxp5:kWWC667TOBANxUrIRMnHQy
- TLSH T170F2689231B87F1C5856A56F8AB221C9404FDCFC22746863726EA57B3F60D840BFBD64
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/uk_UA/stringtable.xml
- SHA256 39e299be33e079f7016c1ebc8f7740c3e1d72a85c432b76ac43c0d34f8845db6
- MD5 abc8b64ac0ef8cdf7982919c93c272c1
- SHA1 fe92c90b8e730d70a6241185ccd17770b8026978
- SHA512 0ac2158c4499269af0d97035b7050c3ed408a488b793334c9d87822464435359316262cd68dc12ce9085117a9fa24288023ab862f8d3ffade03922c0ef072ca4
- SSDEEP 384:GmUTcoudN4PzEmvU+9Vd3TiOzd5nHPhdiIJUKj:GmUTconzjvhh3TiY5nHPmA
- TLSH T1F6D237927264BF2C2896817F8A7531D4051F9CFC76A8642331AEB53F3B11E8406F7DA9
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/zh_CN/stringtable.xml
- SHA256 1c3bb71c035efa4ce4cf0e4b12e4af47a0e3cf760c73cfe48480bec568778830
- MD5 6bc4dd886824f8ba1e220e3fff156072
- SHA1 dfe6bc8ee0bcae4f1abbf2519caccbe73620fc29
- SHA512 fe57a1472282a81565013f097a70a748287a6bcf6aa463fc8cca8a73cb265e3c303bf6d4baf3bd58b2a3257b57302388a1d674dfdfea2b16b3a9f52508f2d6f4
- SSDEEP 192:nUzomYc1/23UU8n5sC3142ElKdwe65kYFufdUm3XFzcs+nsoz0NNU42HdymCuEn:5gR23UUU5s242ElKdN66nH1rIuuEn
- TLSH T1D5E2F69232B87F1C5446957F8AB670C8000F9CBC25B468A2729E757B3F61D480BFBD69
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/zh_TW/stringtable.xml
- SHA256 ce0bd8d82d41193b2f672393aa190bed587ac618d034e36c1f08e2bedbb95605
- MD5 e51e64c712b6c438b0aa21fa8cedea2e
- SHA1 2fd119e7bf89d21c2b81d3cffb3869abb9ed3354
- SHA512 4d04b31eda99b4f87fbeb0cfa2c2170f5a6362565ff80406e058512e7329f3a6b4dd8d72659532ac38947e53f35b16d9ace5c9d90c98a56bdf26b1ec156bcfa4
- SSDEEP 384:5VwDwQOEvrLucvS7AHCL62FbXEQ/ag+T6sImdnHkJmfKG/W0:rw2EecvS7lXV/aFT6sddnHk8SGF
- TLSH T152E2379231B87F1C5846987F8AB630C8005F9CBC25B46863726E757B3F61D480BBBD69
- MD5 SHA1 SHA512 SSDEEP TLSH
assets/EULA/EULAVersion.xml
- SHA256 4e0489fc1289694613293755162e6e244fd30703f08b87619ae41205128ee308
- MD5 0f236e7e159f8d4f37d4ad32bd6924b7
- SHA1 119556347020eadb45e49fc4799f120f9c17d46d
- SHA512 180a5afc1e16b9a0d5b73e148886c7ac80f0e99e252910c79ed31ce18d17a7337caeb8e8fbe882da2cd5844dd12fdc39479303bb80cbef4f6f93d9e2cfe854a1
- TLSH T11890024CA0808B33E139133E52023091E32C870C0A08C44694E9024BD288C1D84C2460
- MD5 SHA1 SHA512 TLSH
assets/EULA/cs_CZ/license.html
- SHA256 ef2332be8b0c47c1757e4e7b8a6e043fc4bbc2c8fc77041e4e335ed13274c062
- MD5 b2de89458410868ffeafd6ff653e5f4a
- SHA1 1acd32ea01957eb03c45b6bc3a651e0d48cb5f68
- SHA512 f3e3ac320dc446bf2a8b716f0c58d1617627e80635d7161005f683e8cbf48bd08260e9564ada658f1ed9a45242d4c1019b3869ce96eadfe9c938befde3331965
- SSDEEP 1536:0l5BhA/ZepV/AZlyAVElbet36tdSxuDHsk4iniZ981B9bZYQDpg60:0HdpV/AZlyAVEktKtdAaMais1B8kpg3
- TLSH T16283F92F8942BC1BFB9B43DC67A99718AD5E8638013D94653E8B564F4072F789EF8C40
- MD5 SHA1 SHA512 SSDEEP TLSH
assets/EULA/da_DK/license.html
- SHA256 e436c4684b67a0c6a58d5b0269adbd1d05fccefacaa3bdbaa5ffac42794c69e8
- MD5 e45e8f78cf8fd0d55103ea62d918ac61
- SHA1 79db613f7ec531cff01dff9e7111bf9c89718215
- SHA512 3c84aa262e8dc8bdf158ad9b8bfe47c629b5104e19bfa457710e172d520382e06b212597fa41bc51c24b76311a3b07ae287d5c3c47f68af09261ead4ac849b7d
- SSDEEP 768:0lHPs9VJJVBlYoOqXUOqQHcEDHDk8T6KKeyY9v6rq11tketGWl9x+ahvkIfE0czx:0VfQI8T6KKevqJet1lUvrB
- TLSH T16583E581B4183B3EEA6F4376E5110A6FEBBFA62CC0655195B1C4C1EBA0D3CA4537E1C6
- MD5 SHA1 SHA512 SSDEEP TLSH
assets/EULA/de_DE/license.html
- SHA256 e5897b8e01ddae06bf10ae8951ee5279a7b64fbe7ac5bee07e030be8565b78b3
- MD5 9a255533cfa70804ef7e9e0110ed95e2
- SHA1 31b9dc3e278242bf46273d91fb9dc3cfdae7780d
- SHA512 93de20fe65c741a61ec7e8fe45a83a14fe59d5afa4f48a5f80de1e9dd9266a454354fc930cb30810099cf02d966d6d4358fc59d122a7efc8adbf78ca694581e0
- SSDEEP 1536:0Ay5LWMwA14tUa2jKcsYmVn7gfPyBzADuvOKphs8A3pGKVsJu76xuObh3:07dKcjUWa8C2AoRK
- TLSH T154932A91BCC91B2E928B73B6B301DEAA776CA379C3827055F29CD1B363864F0417D469
- MD5 SHA1 SHA512 SSDEEP TLSH
assets/EULA/en_AE/license.html
- SHA256 a807551a6e095e1941670d0bfc0c4e95eb9747f7d39cf97f56ce033deeda80ec
- MD5 494ee75e9f5c594619a6acd3f62c5656
- SHA1 1c4b3c213815712b2abb650e5169960b08680c3d
- SHA512 0fe3bf2bcf82bec4293f9ea0aa00a5c0be333f239aaf3d0fe42344bb9536a2d9bf311d424ea0f3b474660089df1496297ddefc6cae64dac59ad075974bcd512a
- SSDEEP 1536:0Zi96qlGqKsaYOV0hugs2HWTtamTimwhWnFqo6kwpGYxvgK:0et6stOV00OWUmwhWnFN6kwpdmK
- TLSH T1B673C55673252BB71AC303B26A8F9ED4FB3B807863B15684719D809B23C3C64537B6D5
- MD5 SHA1 SHA512 SSDEEP TLSH
assets/EULA/en_GB/license.html
- SHA256 1234e7564644aee675f1e12cbef89c4a2588f6e8c4418328cf474efaa403626f
- MD5 b3c77cbbe94b6d4f26c9eb6be887ed44
- SHA1 e91a5e56cc76ca2ae246cb0400a99aca36becfd4
- SHA512 1012a5676a132529f582bc1e5aca21497536c7aeef59daaccb7a876c70bd5c42e843cfc960ebaa297d3ecbde79b8d338896f8c214629870743d9c083fb3aafef
- SSDEEP 1536:0FU96qlGqKsaYsVEhugO2HWTtamTimwZE1Bqo6kwpGIxvgt:0Yt6stsVE0YWUmwZE1BN6kwppmt
- TLSH T1E673D55773252BB719C303B26A8F9ED4FB3B807862B25684719D809B23C3C64537BAD5
- MD5 SHA1 SHA512 SSDEEP TLSH
assets/EULA/en_IL/license.html
- SHA256 009f17827534e89044f89a3c99251694e5f8a73f408059832e438e8a86f3020f
- MD5 9a47f0ad8b02130373c9f6a086f99c62
- SHA1 dec280d13a6694e4aa34f00034a40e77feffd4c3
- SHA512 2652885c2f705744c0016f44bb8e427a0d8c206b401995e0a4644e938833999a4142a26460eb19671471e534618a56bed2764833ac79ce168fbaa7cb29cbe743
- SSDEEP 1536:0Y896qlGqKuaYQVOhugI2HWTtamTimwDSfXqo6kwpGyxvgh:0Tt6utQVO0aWUmwDSfXN6kwpzmh
- TLSH T17873C55A73252BB719C303B26A8F9ED4FB3B807862B29684719D805B23C3C64537B6D5
- MD5 SHA1 SHA512 SSDEEP TLSH
assets/EULA/en_US/license.html
- SHA256 65d6e88abe954be714af5c2528e148bf6fba3d39cb2873b801c1e1ca81d87cf9
- MD5 32a00190cb8676f849b5af53ccdcf3ad
- SHA1 9124c52c0f872bb8695e6445956b26c92c868983
- SHA512 de99484bea7b262f0ff8c34c9aeae5bd820ff6224a82cd81d727004525f9595aef19d656d9622313be56c039245c07bb859e978c7f8dfd27edad73aab25c7e80
- SSDEEP 1536:0FU96qlGqKsaYsVEhugO2HWTtamTimwZE1Bqo6kwpGIxvgS:0Yt6stsVE0YWUmwZE1BN6kwppmS
- TLSH T1AB73D55773252BB719C303B26A8F9ED4FB3B807862B25684719D809B23C3C64537BAD5
- MD5 SHA1 SHA512 SSDEEP TLSH
assets/EULA/es_ES/license.html
- SHA256 b6c1c20dc962670aa4d2faf2af43d674f7bd26e1dc8a9b2111861eea345550b7
- MD5 7d6ad948a3b82f8f5d92aaf194fa378a
- SHA1 8a846ab87fcc0d9f1926a70369cf03fce2480f2c
- SHA512 0f6d72161f1c4cfa00a6e8dfe199f3d72fbcb152aa07c03dc06a226cf20fa0f80d74e4230e47305d8134df8ac75e217b3000bc9a3b90de037adcd7692eac8830
- SSDEEP 1536:0dd6CmwDl1fk4m5WrFpIYus44Urz1pBxKt+w/t393Mz1wuTm0H+bxewGW3igHblo:0lDApLU+wlN3MZwuTdGxjdRDmd
- TLSH T18D83B63579C82F679583439DF282C667F9E89194B84DD082E29953AF11CDACCC33EA94
- MD5 SHA1 SHA512 SSDEEP TLSH
assets/EULA/es_MX/license.html
- SHA256 443f76b84f65ba27102a268bbfb573cb9c023421242501ef2dd3f1e11caff616
- MD5 c596e3c46a175de6592d27a2a14926ba
- SHA1 41b80cbbc207d58f486c3765c087f4ad69bd4089
- SHA512 360175c23f403ef1bc75b861d9adf9ecddf5d8c01f945bc78ac3d04a8a5195c8907e79e16b40b42179e920299562358a51308ffdb95229e4b294283c01304eca
- SSDEEP 1536:0dd6CmwDl1fk4m5WrFpIYus44Urz1pBxKt+w/t393Mz1wuTm0H+bxewGW3igHblD:0lDApLU+wlN3MZwuTdGxjdRDmO
- TLSH T1FB83B63579C82F679583439DF2C2C667F9E89194B84DD082E29953AF11CDACCC33EA94
- MD5 SHA1 SHA512 SSDEEP TLSH
assets/EULA/fi_FI/license.html
- SHA256 febe6cd1d0da4e456982b305c54b43c493420de863fc833a256c2ef772187b28
- MD5 4276816e869909900e54a9155b27e926
- SHA1 28fe3b382e2abeeb8dc94dfed5d49c6198bba3dd
- SHA512 0aa1eb2db97d3cda0aefff0e1d9db53da529d631a85fd249030b72ea26dd0f54115b866661384296afd3cd37f4bfe3d63d258aedd19c1ad01e3fbfbc9f0c88e2
- SSDEEP 1536:0c3+yfPX/IyApRerguXv0lnzPl3l7m3YQVzUjGHE:0cOy3X/IyAverguX8xVl73aDHE
- TLSH T1BC83F7E61144E477B1C9C2FDECA09229B7D0D22A8D35D588F1D3D3FB12DA948276326E
- MD5 SHA1 SHA512 SSDEEP TLSH
assets/EULA/fr_CA/license.html
- SHA256 ac57e25ac91a217f988ff79f822ef862214b2ea5da1d000a893921490ca70062
- MD5 646ba844fc058607808fb7da81c7c4ae
- SHA1 7d2e796251b193c931bf89eea2004dfb5b3b4d13
- SHA512 95485b3addde9c565b089133e09d16362d743495ef78ade7164bafb40b3970f1b2bae640af07919b67f738bba41dd062d9ed4ce83abd6701703e2676e35ce5ce
- SSDEEP 1536:0mH6l6tZvo0Vc2dLTPtZURR0YBIrXGpSYzwFt23TfqcbIj+TAzPEb1vzf8/tuLON:0flQoYlZQKYBIbkrSYk
- TLSH T16693E76AE5C439AB6EC75273FB42E796E738C0086166E214D5E7819B03C28DCD34F1E5
- MD5 SHA1 SHA512 SSDEEP TLSH
assets/EULA/fr_FR/license.html
- SHA256 494dcdb948a4f56e3af6d6b6e8e15f19c96907b60709d08a7ae908d79cd83728
- MD5 6e77c6905e05aa7248d8f092ea8e4460
- SHA1 4ae5032c22cf8589ce80919a60ddb05ae8f10385
- SHA512 6f173fa032883e367d48877e3ac61d06d687619ebaa1e296ccd43c53c2931276b650176a6638088e30ce4cdd99d4ebd06739fcb4929a397fec64da782eed2fef
- SSDEEP 1536:0mH6l6tZvo0Vc2dLTPtZURR0YBIrXGpSYzwFt23TfqcbIj+TAzPEb1vzf8/tuLOJ:0flQoYlZQKYBIbkrSYU
- TLSH T14593E76AE5C439AB6EC75273FB42E796EB38C0086166E214D5E7819B03C28DCD34F1E5
- MD5 SHA1 SHA512 SSDEEP TLSH
assets/EULA/fr_MA/license.html
- SHA256 a371048ad3701756c0360012441710defb04056032dd542f927f135e3638b640
- MD5 6677438780b3d2674d1cbccf50f705c1
- SHA1 7dbe1d8c448442e83c7f8ddba531dde74f643d2c
- SHA512 f692081733ed50d38d8e2765d871e2d66a8649416d7a64dfc268be7f4c6bb343c87dc36d78c3391a5fc76c5f6a11348322d1610482f70083d185c45164a2cd4f
- SSDEEP 1536:0kVH6l6tZvo0Vc2dLTPtZURR0YBIrXGpSYzwFt23TfqcbIj+TAzPEb1vzf8/tuLo:0tlQoYlZQKYBIbkrSYC
- TLSH T12D93E76AE5C439AB6EC75273FB42E796EB38C0086166E214D5E7819B03C28DCD34F1E5
- MD5 SHA1 SHA512 SSDEEP TLSH
assets/EULA/hu_HU/license.html
- SHA256 b4e64bc03ca59808a1ea9f28bc0ba5ad73cc0bdd1e661c31457edf1b105a18be
- MD5 eb7be29bffee68097696f548838dce95
- SHA1 e0eb92e23ab631fb14197e6da5443185434bc603
- SHA512 a41cc9f0b645470005beae062cf29dfed454f64587d663fade04334dc8745ddd67d82ef236c38969e441386f5722e4a535c2c5a77f3e8630f8fa992c201473bc
- SSDEEP 1536:0lmXjQ3QZ1fv/KPV8lGLLmzVYPBOUWZMjhsAZE0mDE5IwyYKt7ObacXFbH2RqFa2:0cjQ3QZ1fv/KPOsLmhYZZWGeAZErwRow
- TLSH T1AD933C7A1B209D9FB71F0AB7A250BF0C26D5412DAA3F747965C7C45B309068B6CCB8C6
- MD5 SHA1 SHA512 SSDEEP TLSH
assets/EULA/it_IT/license.html
- SHA256 7967ed34c61a5c4b60af4886ac35275ca8681e20e42a246610ec3124edd7c0ff
- MD5 d889a92c134266306f98ff062bb7a7de
- SHA1 48d9f4e0a6da9b7cc2e4aceb52e952d998cc87bd
- SHA512 f51adfaa2aef4fc14aea60d39c642ea803175b71bcfe971c5e3cd79b325430df1b687839cbc9d424147d13eb538d4f4eef1709a2683a48349eb44d7261aa04e1
- SSDEEP 1536:0Rw+uNFK75Y8ynyGcCmDp5Z8kG99bf+ELf6ONzsvncH:0RnYPyKaEL/NzsvM
- TLSH T11483D93575C53637A68743D99663E244FB3ED4D8EC4E7011A6DE025F21CEA80F32EA86
- MD5 SHA1 SHA512 SSDEEP TLSH
assets/EULA/ja_JP/license.html
- SHA256 f73a9b4c6fef4e09552e7256f9d323f79ec80debbfdbfdac5b51dd428f787b3a
- MD5 fb1078b3f9e35096b6186e79db0affa2
- SHA1 4079e8da296bf4ef75acdaf2595fa0f7104ea72c
- SHA512 97503b50eec3daf5b003cd4dc494c401f7dcbfe9a80def937622cecdac1b79a8ca1a325f66965f9014582936949ed4d643273c284f5889010447f24b1c814a61
- SSDEEP 3072:0eztOhHfF4kJlllZfmsNnNnXr27sccUR4f7dOEb:0+tOckDlHf5jnXi7sc9R4fxO6
- TLSH T1A2A332BDE3C1A83AA91192A26C4E73A47558DC6FDD93B736407ED03B6664ECDD400BB0
- MD5 SHA1 SHA512 SSDEEP TLSH
assets/EULA/ko_KR/license.html
- SHA256 98f79348729b4cccef635ce753a4974d9b71dcc6960e0ec619dafbbb5979220e
- MD5 382c5060a33da634d444894099e086b1
- SHA1 ded116f43238c98003c5a4b0791a9aa6f1ed4f02
- SHA512 c7ce18c895a6d774da0d8675ddc8df646fb0e04ecc7004cc7d3f464256c04d4ee21bda288392441c5b0e1e91c4ae50cd5c8d807b14e047d19f5cc92df0090753
- SSDEEP 1536:0Z323ZiCpDIsE0nOkPJqFC+2AcAoAu75Nx9B9aJOx9Z//mYVNe9yKvBmIzULXm2C:0ZwiCpDIsZdPJdyc7Au192gL1TVNe93f
- TLSH T1D18348B03EA775DA5593CEC6FED2F760D28284739F9305B4AD40CE47A844687048E6FA
- MD5 SHA1 SHA512 SSDEEP TLSH
assets/EULA/nb_NO/license.html
- SHA256 fca29607a6ae0d0b6de8846d62ab2642347c08692f8e0692ed21ccf0d67b12d9
- MD5 a42daa034f873e76e854255c5602acf9
- SHA1 4a7ef413cec5ed552cad50e2418f05e58bb99ee3
- SHA512 ac7eba4f192f132845a4f1be2a315104decdb67e82df3f1baa30ad53a0aab0df7eadaa36be6f4b4d022618006bbefd3fa3700f72c7bf8c126decb5cf24fdb079
- SSDEEP 1536:03ebXFYLrlvu2rGDDoosbo1VtuZzBfqYcnp9MZb:03eRL2rGDGo/tuJBfqYowF
- TLSH T17E73F742E8113B3FEB2B8775E4044B6ACBAED11CD4B85A5059CDD19F80E3EB453BE186
- MD5 SHA1 SHA512 SSDEEP TLSH
assets/EULA/nl_NL/license.html
- SHA256 b3af4b2567f4ddd3049ac1b293c0476f5d2e28f9f3db00211deda886c5304f58
- MD5 c5c1c3fdc57731d6b4b7c312b5c3c5aa
- SHA1 0c84fde6ed5b859f61fa2e4a39e89b16292c7439
- SHA512 32003cfe87e21d8918f02914ce8722493ea155d9f35628e67dd2930e917ec034f15b1715a3b3ad0a5e09836f7eb0dead12c0aacbb06d7b5eb5ba3ad98a22b02e
- SSDEEP 1536:03bPyBJN/LK53r5idzW6WotOBMxJ+e1UF0VVv4lV2p0a+DZ:03bPAJN/LK53r5idzW6WiOBOJNC0VVvY
- TLSH T13D93A6563CC91A3E64C26B59E90A1AB7FB56C17CC22CF0E9B9DCC6B77052DA9013C5C1
- MD5 SHA1 SHA512 SSDEEP TLSH
assets/EULA/pl_PL/license.html
- SHA256 655d8f6d401986d12a1cf1488b322f539c2c987b21044dd0f043f81005952289
- MD5 24539afe4f03d6f7e3dde6349087a226
- SHA1 490cfd7c714ed8ebab22c6164b7dd0b0e46083f8
- SHA512 dc5aed11510369a9b435a5e41a840eecdef064ae468ddfb2aae45d79f8ec086ca852ec6cd09bd972115405beb6edebf7d4a516d6e3cce467a2a6f84a03597baa
- SSDEEP 1536:0YpCSYrD/EZjZWTtXHYoMIM5SprieK1lllVtDRMvHOBFhWRZ4rMKk+6qRCCphv4q:0YpCSKTEZjKt3YrIzBie45tNlFhWRCz7
- TLSH T17893194948D0652FCBB247DDE3E39F28AAECC8C8E065C64DA98F486F8157F84177D1A4
- MD5 SHA1 SHA512 SSDEEP TLSH
assets/EULA/pt_BR/license.html
- SHA256 80e08cace6c22872841bf3e8d8592578ef649dd794a266c1e36a0b2439567d52
- MD5 8cc0a5df19773bdfd6b7910b9967354c
- SHA1 8b05bfa1bcd3a3251aeef735b8db7ab4953b9c10
- SHA512 bc5adfd7f791b876e6e4bb17c0e3bd84c4f4937da85098be5373965f4f05772d7ed16e68fa32d4bbd3dd6c02c73fa87d456308a9d2b4c1a244563027f3b922b7
- SSDEEP 1536:0wIZzM48/082oeQAzVRr2Xu84zJKiNw/hOAuS6E56Ws0ePBW:0jZK32jQABRr2Xu84zJKSw/hOAH6E5h9
- TLSH T11C83C73C35C9273B410283526783DB16F689A2C4EA56D582E7EA47CFB3C6D84D73EA41
- MD5 SHA1 SHA512 SSDEEP TLSH
assets/EULA/ru_RU/license.html
- SHA256 7a14fd1f1745f435fcd248775047215d255693f26750ee2cd8590d7d72ad6848
- MD5 0af237e265cd3950496e6fa83799d6e5
- SHA1 45de7f7c5ce6597b592b9aff512e34cc9b587712
- SHA512 fa863d61c54fb6e797f5f9c9a0c4c31242d07057d2f0e47458d81a146fa512409b83d3814c655acccb7fff766ef671e1b7ddb2c6a0a6b2292420025612886199
- SSDEEP 3072:0kmcUz1ocUNsQuhIFRwp8qk25+m2qRNqxj3nibrscGU+21CZe7DEuXk+zt94zeMv:0QBMcwj7IxDjGE4zgxdaJ7UrD27Y2QQu
- TLSH T15EF3A861959A28DF1201B81BDC04BF087DEB55FE7FA7932715A02D7B31F2038CA7961A
- MD5 SHA1 SHA512 SSDEEP TLSH
assets/EULA/sv_SE/license.html
- SHA256 9977c4441c3f555b499d99604baf140ecc9c49ece449d8280b2617b28c24da0f
- MD5 553d1eee6efc59c5e65cdec5f3a98507
- SHA1 b0c6aab786fb1ddb3a445103a7dc7b04d626982a
- SHA512 4b600ab55e513bfbc456620bbca8b6e668d61ef50f9ef6ea0eed012306ee9a09fec18fab4c42b1cfccab498d14f7b8e718034aedb66985902af2fe9e7de16333
- SSDEEP 1536:05VYwa1RLqbff9s+mVVAb5RnxUrCCBj/AAQ8KWuTmHyOmFLntwGkUnskO+2mDkxi:0mqLbpRnxUrCCBj/AAaKyZtmGkUnu2o4
- TLSH T15D83D64399106D7BF7BB437AC584026E57ECD01CE6E2580078DA8DEF9953DAC12BE24B
- MD5 SHA1 SHA512 SSDEEP TLSH
assets/EULA/tr_TR/license.html
- SHA256 939ddc991ed0ee415fefa11bcb34099ee9b667bc27f6dfa6f25c8a1cf3582529
- MD5 dafbb732d3209ea151b91df37868d265
- SHA1 e9655241fef60eb0e1ea00db98fa5fb8e523eddc
- SHA512 a12eecc0b9d5720a1f25734343b510d7eeb727d17e778c260757b2093ab8b0d7372d06b447dda449802c66e76b5de5427e931d11a11515e86305024054089ce3
- SSDEEP 1536:0wgFP360iLciBG79jVtSJ3MJyP/90/sXIknItEhiu5ffJCko+30fv3k9Bfv:0w2360iLciBG79RtSJ8JyP/90/sXIqjP
- TLSH T10E93D5C1ACCA3C1FDB6A07DFE2D14292F9EF53436670E1459516AA173E0A79643CEA0C
- MD5 SHA1 SHA512 SSDEEP TLSH
assets/EULA/uk_UA/license.html
- SHA256 1c5c135f139815d3e3b10575e0ac6422ad0a374dbc40e515bef83b89a945bd4f
- MD5 e1879f32195ccc6c2b7e0868212180e2
- SHA1 b8fdf1b3e2d9b6a686a613a24426d831e0a2b746
- SHA512 caeb6cdf017af5653f8aa080e6b1634119c26a0cb4ad612a61d5adb16820660f6a6b9c79ad271579c437be8ce7ddfc5c0a03900af64d45aaee1236e8cc4f61f8
- SSDEEP 3072:0rtHYtYwnn7iKTyjB9UAIu5x6tucf+o9g9FzRxK+anS4jQoHYpIiDgN:0rtHYtPQUAIu50ucfh9g9FzC+anSBFUN
- TLSH T12AE39AA195AD18EF0506F06BE8447E497DEB85BE77A3971331643DBF35E20208A3C729
- MD5 SHA1 SHA512 SSDEEP TLSH
assets/EULA/zh_CN/license.html
- SHA256 5c34819e8525b5fa27682a11ad997f30718ca20d0a3a3e6ad157296c77e36129
- MD5 ac3fa00684a97207dbbc420452372fdb
- SHA1 f4cd54d16d26a978002ab1ffa50232bbd623e598
- SHA512 9f4cb070277b0ba4a4c6e43c7b9c9267f090bc8955d84691c64d8e1910cc7ba94205efe732cb20fefb9a6738110929980abd8beefc5c78b5bdfc1e5b3cd73a25
- SSDEEP 1536:0xybyrF5mK6F2dTrvkuJl+oKb9byLGKu+FL/71cnYOTjI:0xybQFQForvku7+oKbFyLGKuU/71cjU
- TLSH T1F653E99F151BEEEF00CF12F4675C631872D4AA1381779AE4EBF350976B98C620224D9B
- MD5 SHA1 SHA512 SSDEEP TLSH
assets/EULA/zh_TW/license.html
- SHA256 ac81c7da3275e8e3330d29adcd223ebdcce733bc5851f26b026fcad941eff0e7
- MD5 6f4abd22819625892f592a08daf6cff4
- SHA1 b16194c144fdb3c73b61703476beb9428b54250a
- SHA512 c52292ffe9190574d1b5870eddc5dfd13fac0cc8e9c1e4737e46c58c7def88a3b599f1d50178bb511b3839d6faa8a68a8f303ec29840aac76bc4e4ffd08c3728
- SSDEEP 1536:0ik4Gv1a5UVjH/pDBrHA7BSIRkGn8opn2D7G+04uo8vekmLvcr39T8yWVVW:0DnA7BSi6l8ve1jW
- TLSH T1EF530ADD35735EFF410DB771B3881325B69DA9B14372BDA8E6DA209F3E81F61812048A
- MD5 SHA1 SHA512 SSDEEP TLSH
assets/logo.png
- SHA256 b6e1be42e80624a757b316ad2347740f312f2f87f336e7297641eee5c88b0a50
- MD5 53f688c35f49c4b963ecce557252c600
- SHA1 a2a4acaf7890853dba5ffd95bef0ebdcff39089e
- SHA512 50485e7bfb2b24358fd4122156566e6e37392dbc973ddd6f25d884e480fb1376c5315013cce8bd3d2f070b4175054f83a6732e6511eff2c63584f490f8d3514e
- TLSH T12D41E6457CF299D1BB92AE1502F6B145CC73224355C0A959313FC8731F21B922B2F1DB
- MD5 SHA1 SHA512 TLSH
tools/7za.exe
- IMPHASH 15847eb10d7d06dcd5980e8a9b786fd6
- SHA256 38242f4c6260f6dadb0be0149249c4df1029b78a36a04acccfa6614e4ab78d84
- MD5 e13f5fc1132237f5dc57753086eb6eb7
- SHA1 43d6f69fc3294d9b6fb3a4dd876f509ce2592c3f
- SHA512 84563d7a3b188527bf76676d91088c3e05400f4cae295122d91650478241b08222c5baa80098a42cfe7adf2d904c09fd93654159fee9dd9f7d56442cf2c356e0
- SSDEEP 12288:gyyKdVnyNhXCV4EkP7AIfzNXZ0b5NrnkcAqIV0A1caRIr:gKvyNhXCV4E8BXAfrnkcAqU0Aq
- TLSH T190C47C263AE5C079D6521530CB6E5BF6D0F693680F2308C727949F2C1E359D6CA3AE39
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
e4:c7:20:be:41:df:b9:34:cb:44:28:a2:b2:e6:c2:4c:2b:40:59:4c
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Chains
Jul 26, 2013
CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Serial Number
25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageNetscapeServerGatedCrypto
Timespan
Nov 8, 2006 - Nov 7, 2021
Subject
CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Serial Number
68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 19, 2012 - Sep 19, 2013
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
0
Major OS version
4
Entry point
446284
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
oleaut32
SysAllocString
SysAllocStringByteLen
VariantClear
VariantCopy
SysFreeString
user32
CharLowerA
CharUpperA
CharLowerW
CharPrevExA
CharNextA
CharUpperW
kernel32
SetEndOfFile
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
SetConsoleCtrlHandler
FileTimeToLocalFileTime
GetCommandLineW
SetFileApisToOEM
GetVersionExA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetConsoleMode
SetConsoleMode
GetStdHandle
MultiByteToWideChar
WideCharToMultiByte
GetLastError
FreeLibrary
LoadLibraryA
AreFileApisANSI
GetModuleFileNameA
LocalFree
FormatMessageA
FormatMessageW
GetWindowsDirectoryA
GetWindowsDirectoryW
CloseHandle
SetFileTime
CreateFileW
SetLastError
SetFileAttributesA
RemoveDirectoryA
MoveFileA
SetFileAttributesW
RemoveDirectoryW
MoveFileW
CreateDirectoryA
CreateDirectoryW
DeleteFileA
DeleteFileW
lstrlenA
GetFullPathNameA
GetFullPathNameW
GetCurrentDirectoryA
SetCurrentDirectoryA
SetCurrentDirectoryW
GetCurrentDirectoryW
SearchPathA
SearchPathW
GetTempPathA
GetTempPathW
GetTempFileNameA
GetTempFileNameW
FindClose
FindFirstFileA
FindFirstFileW
FindNextFileA
FindNextFileW
CreateFileA
GetFileSize
SetFilePointer
DeviceIoControl
ReadFile
WriteFile
GetCurrentProcess
GetProcAddress
CompareFileTime
FileTimeToSystemTime
GetSystemInfo
GlobalMemoryStatus
GetModuleHandleA
DosDateTimeToFileTime
FileTimeToDosDateTime
SystemTimeToFileTime
GetSystemTime
WaitForMultipleObjects
OpenEventA
UnmapViewOfFile
MapViewOfFile
OpenFileMappingA
GetTickCount
GetProcessTimes
LocalFileTimeToFileTime
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
VirtualAlloc
VirtualFree
WaitForSingleObject
CreateEventA
SetEvent
ResetEvent
CreateSemaphoreA
ReleaseSemaphore
InitializeCriticalSection
RtlUnwind
RaiseException
HeapAlloc
HeapFree
HeapReAlloc
CreateThread
TlsSetValue
TlsGetValue
ExitThread
GetCommandLineA
GetVersion
ExitProcess
TlsAlloc
SetUnhandledExceptionFilter
TerminateProcess
HeapSize
GetEnvironmentVariableA
HeapDestroy
HeapCreate
IsBadWritePtr
SetHandleCount
GetFileType
GetStartupInfoA
FlushFileBuffers
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
InterlockedDecrement
InterlockedIncrement
IsBadReadPtr
IsBadCodePtr
SetStdHandle
GetCPInfo
GetACP
GetOEMCP
Name
.text
Size
483KB
Virtual Size
483KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
61KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
27KB
Virtual Size
53KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.sxdata
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
808B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=2, id=12, version=7291,
count=25, id=14, version=7299,
count=98, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=95, version=2190,
count=175, id=1, productName=Unmarked objects,
count=7, id=93, version=2179,
count=189, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=32, id=170, productName=VS2010 build 30319, version=30319,
count=2, id=158, productName=VS2010 build 30319, version=30319,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
Adobe CC 2017/packages/CCM/CCM.pimx
- SHA256 feabf69597d432bd024ebece79147b18e69cb8c45d33cc03fa5c70e8c0d33f82
- MD5 523c06ed598205f06b46f357338aca59
- SHA1 50f911b431c2577c37c7824901ece26249f7f59d
- SHA512 3b18f9656b66c99cd4d0164f8973c22cd09cdf7ecba56357c0aa29e6e45e242405362d5316368f2728eadc487e139128806fc8ff1d29f0dc2fd19653b26aa18d
- SSDEEP 1536:RJNwEsUjONslsoOZfSS4tCRFxmfm8PdkbladT:WqmSf+m/dkMT
- TLSH T15E73D2A811695BE27407DF603D245E4B2A0FB17DF6B032F8B2984E7686C598F4D8B533
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe CC 2017/packages/CCM/CCM.sig
- SHA256 465bfa2bee553f15d9431bbfce27f8a5f8db9cd290cc915115d5daa80e8f59ba
- MD5 cb34f68b60f32e7b571d7d765b06249f
- SHA1 3bec7cfd3dc5f3b1f6f09ca172ca836464147204
- SHA512 174d3b0930a6559ab183d7f3ecddeccd1d7ca8277d4447b3c58eaad06cb11e5d4998e2a86e3c5fc40ce49b66ac6232686f01c3b1ec5dbd234d51239c53c3a2bb
- TLSH T1BC31F74881DC6754D8370BF2EB001D006E88A3DBADA9840D34D5424E7F170219B575FD
- MD5 SHA1 SHA512 TLSH
Adobe CC 2017/packages/D6/D6.pima
- SHA256 3c1d986c1a94d2b9101d45885f849baa62d96ed4c653ef7c274224a4f415634e
- MD5 72a01d3c360d18c43324f383d9918841
- SHA1 ca091b55fdc244a9c56b61805b5d9b4290c1424b
- SHA512 aec32e31f696c287d4fa26afdf9cdb51038135152b81a9bb7fed030416224c2c05b2904fc2436c4ee711c24935ea5e930ae91d9be900e5efacd10041d7470d85
- SSDEEP 49152:NuazEtXJiU7uH3eUrdcz6Rsh5XVtVvp1GvaAr+EntecaoJJ6SXiCa:N+tXN72NrdcziCRzVtAKEteJoJJ1yd
- TLSH T1C5B533E6C7584200D93AABF13AECFC03F71B095658B7AD776E03211395345E492F2B66
- MD5 SHA1 SHA512 SSDEEP TLSH
D6Flex.swf
- SHA256 7fb9a37944e49693433b0b8ea621d66bac8038ebfab314cb1da34c0955f95a19
- MD5 3a1f81c8adc62c8886ef26645ecc6645
- SHA1 9661d90cf57964fcaf91d835ad05495780aba5c3
- SHA512 3022c472f6b96b6e7f97c8245de2caa7dc601844e60cc666b618a9793e6ea7e6c096b7c133016b86fc9380696f6cff0b9a57ae62dd0c700d325a17399ebc2852
- SSDEEP 24576:RMUaB6IgTE8oxpemMym2suHOMEikuuPpuYuhM4cBVPENUzcDEHctG7Od8nPJh9:Rs8PPDymFuHOikuuPp7uhM4cBVPuG08d
- TLSH T1CA753348D6353343AE0611A0B2B43497DB0F6B3017A3AF67D90AEA6FB560DC9C34A537
- MD5 SHA1 SHA512 SSDEEP TLSH
D6Native.dll
- IMPHASH 3a454276ecf85548a0cbddeb545d6cfa
- SHA256 b6440fd67c25e94a495b747ae31503631d97d35341e31dd41514588036de0083
- MD5 1b9cbc830075ffcdac53f88953d67bf6
- SHA1 90f96a63a6cc204abf1f8763c02de65d6b6f4982
- SHA512 8d402856f5c220a81b46cc63d9afedd066784d491757986d84c411892d48ef30b64943cb3d1f44b2c0a8537161111c20b620757f99e5c8b50cfa8f7a1d2da35e
- SSDEEP 12288:sXcc++4s98x9w3yoalNAJtjPZTorcEvvH36WxgdwkWti:sXcc++4U2NlADjPZy3KOUWo
- TLSH T1F9157CA2EBD3C135E8EB117056BD6BAB483DBA058734C4CBA3C4189959305E3B73E716
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
ee:d5:1c:c6:53:68:a6:aa:20:da:4e:5e:0b:02:ee:7f:c7:71:d0:b3
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Chains
Apr 28, 2014
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Serial Number
1d:37:83:b3:de:cd:5d:bb:16:e3:3c:d3:a6:b3:bf:db
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 20, 2014 - Feb 21, 2015
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
1
Major OS version
5
Entry point
544717
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\builds\AAM\8.0\source\dev\aamcore\target\win\Release\D6Native.pdb
shlwapi
PathAppendW
PathRemoveExtensionW
PathIsFileSpecW
PathFileExistsW
PathRenameExtensionW
PathIsNetworkPathW
PathRemoveBackslashW
PathStripPathW
PathRemoveFileSpecW
PathFindFileNameW
PathIsDirectoryW
PathAddExtensionW
kernel32
CloseHandle
GetCurrentProcessId
LocalFree
InitializeCriticalSectionAndSpinCount
CreateDirectoryW
MultiByteToWideChar
GetTempPathW
GetFileSize
FindFirstFileW
CreateProcessW
MoveFileExW
GetCurrentProcess
SetEvent
GetModuleHandleW
WriteFile
WideCharToMultiByte
CopyFileW
GetVersionExW
GetExitCodeProcess
GetFileAttributesW
ReadFile
GetModuleFileNameW
CreateFileW
FlushFileBuffers
SetLastError
GetProcAddress
FindClose
RemoveDirectoryW
FindNextFileW
DeleteFileW
GetSystemTime
SetFileAttributesW
lstrlenA
InterlockedIncrement
InterlockedDecrement
lstrcpyW
OpenFile
GetDriveTypeW
FormatMessageW
IsProcessorFeaturePresent
GlobalMemoryStatusEx
GetSystemInfo
ReleaseMutex
GetDiskFreeSpaceExW
CreateThread
ExitProcess
GetFullPathNameW
GetFullPathNameA
CreateFileA
SetFilePointer
SetEndOfFile
FreeLibrary
QueryPerformanceCounter
UnlockFile
LockFile
GetTickCount
GetSystemTimeAsFileTime
FormatMessageA
InitializeCriticalSection
LoadLibraryW
GetFileAttributesA
LeaveCriticalSection
LockFileEx
EnterCriticalSection
GetDiskFreeSpaceW
LoadLibraryA
GetDiskFreeSpaceA
DeleteCriticalSection
GetCurrentThreadId
GetTempPathA
AreFileApisANSI
DeleteFileA
ConnectNamedPipe
CreateNamedPipeW
lstrlenW
GetACP
FreeEnvironmentStringsW
GetTimeFormatW
GetFileSizeEx
GetLocalTime
OpenMutexW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
SetEnvironmentVariableA
WriteConsoleW
SetStdHandle
CreateSemaphoreW
GetLastError
ReleaseSemaphore
Sleep
WaitForSingleObject
CreateMutexW
GetModuleHandleExW
HeapSize
GetStdHandle
GetProcessHeap
GetFileType
GetModuleFileNameA
GetEnvironmentStringsW
OpenEventW
GetDateFormatW
GetLocaleInfoW
LCMapStringW
CompareStringW
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCPInfo
GetConsoleCP
OutputDebugStringW
LoadLibraryExW
GetOEMCP
IsValidCodePage
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetTimeZoneInformation
RtlUnwind
RaiseException
GetCommandLineA
HeapReAlloc
IsDebuggerPresent
HeapFree
HeapAlloc
DecodePointer
EncodePointer
GetStringTypeW
user32
GetActiveWindow
SendMessageW
GetSystemMetrics
wsprintfW
advapi32
RegOpenKeyExW
RegQueryValueExW
GetNamedSecurityInfoW
SetNamedSecurityInfoW
FreeSid
SetEntriesInAclW
AllocateAndInitializeSid
shell32
SHCreateDirectoryExW
SHGetFolderLocation
SHGetFolderPathW
SHGetPathFromIDListW
SHGetMalloc
SHGetSpecialFolderLocation
ShellExecuteExW
SHBrowseForFolderW
SHGetSpecialFolderPathW
ord680
ole32
CLSIDFromProgID
StringFromGUID2
CLSIDFromString
OleRun
CoInitialize
CoTaskMemFree
CoCreateGuid
CoCreateInstance
oleaut32
GetErrorInfo
VariantClear
SysFreeString
VariantInit
VariantCopy
SysAllocString
finalizeApplet
freeMemory
initializeApplet
processMessage
Name
.text
Size
653KB
Virtual Size
653KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
123KB
Virtual Size
123KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
10KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
58KB
Virtual Size
58KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=3, id=199, version=41118,
count=33, id=205, version=50929,
count=74, id=207, version=50929,
count=210, id=206, version=50929,
count=2, id=188, version=30716,
count=1, id=190, version=30716,
count=9, id=207, productName=VS2012 UPD4 build 61030, version=61030,
count=214, id=1, productName=Unmarked objects,
count=15, id=185, version=30716,
count=21, id=211, version=61030,
count=1, id=202, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=201, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=151,
count=1, id=204, productName=VS2012 UPD4 build 61030, version=61030,
Setup.exe
- IMPHASH f652d84b17a7eff1d76c16cd13b8e089
- SHA256 a5197c085aad2441e6b863de443a9ec8eb5e6ec7a03bc4c7abde3c753070f08c
- MD5 2a886a84f20318ccc4ca841ab8603370
- SHA1 2bfc5e400aae12a78fbd25b461eb40fec3524678
- SHA512 e6295e000cfc6e755a973f19bc765a275111f82ae81f941f45e01f43b29854f7bbd365a986fb221c066f305a6cd8008f7ca6b3b52be841f1690f713d6034af1c
- SSDEEP 1536:B0Khuz0qx0vrvCDA8L0i+UcZE7Cs8jcdNl+963+gO6Y0KnLe7u/IcA5LPhjr+EO:B3rnYN+nE7nN263y6MyC/IcA5T5rdO
- TLSH T114D35C0373E28472E0B21B3108B09B51567BBC275B7B8A5F3784768F7D716909E66B23
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
43:95:19:5c:41:59:c3:5a:18:de:68:62:93:2a:3b:13:b9:77:4e:df
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Chains
Apr 22, 2014
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Serial Number
1d:37:83:b3:de:cd:5d:bb:16:e3:3c:d3:a6:b3:bf:db
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 20, 2014 - Feb 21, 2015
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
1
Major OS version
5
Entry point
16756
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\builds\RIBS\8.0\source\build\Redirector\vc\Release\Setup.pdb
shlwapi
PathRemoveFileSpecW
kernel32
WriteConsoleW
GetStdHandle
CloseHandle
WaitForSingleObject
GetExitCodeProcess
CreateProcessW
GetModuleFileNameW
FreeConsole
AttachConsole
GetConsoleWindow
SetFilePointerEx
GetStringTypeW
GetConsoleMode
GetConsoleCP
EncodePointer
DecodePointer
EnterCriticalSection
LeaveCriticalSection
SetStdHandle
GetFileType
GetLastError
InitializeCriticalSectionAndSpinCount
RaiseException
RtlUnwind
GetCommandLineW
WriteFile
IsProcessorFeaturePresent
HeapAlloc
HeapFree
InterlockedDecrement
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
HeapSize
Sleep
DeleteCriticalSection
IsDebuggerPresent
GetStartupInfoW
SetLastError
InterlockedIncrement
CreateFileW
GetCurrentThreadId
GetProcessHeap
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
OutputDebugStringW
LoadLibraryExW
LoadLibraryW
WideCharToMultiByte
LCMapStringW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
HeapReAlloc
FlushFileBuffers
user32
SendMessageW
shell32
CommandLineToArgvW
Name
.text
Size
42KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
26KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
49KB
Virtual Size
49KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=13, id=205, version=50929,
count=98, id=206, version=50929,
count=37, id=207, version=50929,
count=86, id=1, productName=Unmarked objects,
count=9, id=185, version=30716,
count=2, id=207, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=201, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=204, productName=VS2012 UPD4 build 61030, version=61030,
TokenGenerator64.exe
- IMPHASH ca81f65a54a0ce33f7aae819df8057a5
- SHA256 3fff3645d6003b77fb09b69ec8e0ef49186b09f12debd4abbda77d7c69fedb7d
- MD5 aa07f93437e30b8cc4825ba23e3e29ef
- SHA1 07d30468cdc6e5428767458b2cce3af08a648d2a
- SHA512 f082ee3b547e16f1554e3858174a6755405345cff579d45ef7cb56ef0b3add551d1cac6a5129ccfd0ec4fd4e2404f3f0ba3a42ed8c9f1a0337b725ef92db5199
- SSDEEP 3072:/mCUPWtAOg8YGLI6gp9mnhqjjjLTSXtEkx5P5U2Vr7a4b+oZiVIMPLwz5Zg1bA69:/mCUPWt08PLI64IQbTAvhU24ANScfIbJ
- TLSH T19B444A4973A40DF4E8B7C23D89A28645E6B27C560B70D7CF17A4425A5F336E09E3E722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
8a:6a:d6:a0:2d:31:84:bb:00:4d:b2:3e:7e:06:98:4e:71:02:be:bd
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Chains
Apr 28, 2014
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Serial Number
1d:37:83:b3:de:cd:5d:bb:16:e3:3c:d3:a6:b3:bf:db
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 20, 2014 - Feb 21, 2015
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
0
Major OS version
6
Entry point
68412
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\builds\AAM\8.0\source\dev\aamcore\target\win\Release\TokenGenerator64.pdb
kernel32
MultiByteToWideChar
GetTempPathW
GetCommandLineW
MoveFileExW
GetCurrentProcess
GetModuleHandleW
WriteFile
WideCharToMultiByte
ReadFile
GetModuleFileNameW
CreateFileW
FlushFileBuffers
SetLastError
GetProcAddress
InitializeCriticalSectionAndSpinCount
lstrlenA
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
SetFilePointer
GetCurrentThreadId
GetDateFormatW
GetTimeFormatW
GetFileSizeEx
GetLocalTime
OpenMutexW
GetModuleHandleExW
ExitProcess
CreateDirectoryW
LocalFree
GetCurrentProcessId
CloseHandle
ReleaseMutex
CreateSemaphoreW
GetLastError
ReleaseSemaphore
Sleep
CreateMutexW
WaitForSingleObject
SetEnvironmentVariableA
SetEndOfFile
WriteConsoleW
SetStdHandle
SetFilePointerEx
GetConsoleCP
LoadLibraryW
OutputDebugStringW
LoadLibraryExW
IsDebuggerPresent
HeapReAlloc
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
IsProcessorFeaturePresent
GetStartupInfoW
TlsFree
TlsSetValue
GetOEMCP
GetACP
IsValidCodePage
ReadConsoleW
GetConsoleMode
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetFileType
GetProcessHeap
GetStdHandle
GetStringTypeW
EncodePointer
DecodePointer
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
GetTimeZoneInformation
RtlPcToFileHeader
RaiseException
RtlLookupFunctionEntry
RtlUnwindEx
GetCPInfo
RtlCaptureContext
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsGetValue
HeapSize
user32
wsprintfW
shell32
SHCreateDirectoryExW
CommandLineToArgvW
SHGetSpecialFolderPathW
ole32
CoCreateInstance
CLSIDFromProgID
OleRun
CoInitialize
CLSIDFromString
oleaut32
SysFreeString
VariantInit
VariantCopy
VariantClear
SysAllocString
GetErrorInfo
shlwapi
PathRemoveExtensionW
PathFindFileNameW
PathIsDirectoryW
PathFileExistsW
PathIsFileSpecW
PathAddExtensionW
PathAppendW
PathRenameExtensionW
PathRemoveFileSpecW
Name
.text
Size
166KB
Virtual Size
166KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
65KB
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
9KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=199, version=41118,
count=10, id=205, version=50929,
count=74, id=207, version=50929,
count=207, id=206, version=50929,
count=169, id=1, productName=Unmarked objects,
count=15, id=185, version=30716,
count=13, id=211, version=61030,
count=1, id=201, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=151,
count=1, id=204, productName=VS2012 UPD4 build 61030, version=61030,
ZStringResources/FontCustomization.xml
- SHA256 6a01cfc74ac88b1e1678b5ed70ac9dfe5ea74a3b0ed56c18044b5043bc0ec661
- MD5 bd6e64e1344f15b96b6540f33ad7df90
- SHA1 c1f0b0bc41ebeb6b894c9e5858afbf696449cac3
- SHA512 b8c1737f5f34beda7290a04bcf7d0b4bd30c7f4421bca37517de0504541e4aaedaa9e9a13967074408974e2c6a94a3d8ef4f9e00a60c6f51e70fc0ca40db0314
- TLSH T13E316C9D3673176667D316EB23B958C03A2F691956574D2280622E3F05C307D7FE2906
- MD5 SHA1 SHA512 TLSH
ZStringResources/cs_CZ/stringtable.xml
- SHA256 88cb35f34baf8cab1e8b6593f0e2102ab0681b56ca1d2ff3fe53486cabdb9a04
- MD5 38c1a4fbc69ec5dc76115947d182341e
- SHA1 38de2b288cf185460e7d792af33c06fdcc7b2411
- SHA512 5479dd539e2bdef429606e6da5991224c3fcd832c0514aceb24cb99f687a4e87e837431e041530369714f0c6e523e3e7f74abe5bf739981117acfc68fd6984fb
- SSDEEP 768:K9Y8zjoijhxWx4naZGQ6NazfUcCnGqS0wGTatkDwPYMqBtsZKxq4IxACYYjbB81H:K9YsfuHsW6S0wGTatkDcYMqBJxq4j6bI
- TLSH T1CDF2765272BCAF1C6856956F8A7230C8441FCCBD1178A4A271AF75773F61E880BFB864
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/da_DK/stringtable.xml
- SHA256 a3c6efa0881cf59685e445024e91dc4cfe7af75d0b2a517ecb9da4627cd61176
- MD5 c7abb8a77784d684f1d2aff530e78cf5
- SHA1 e8c45cd0c452bac16c75e7fa89934725fbbc015f
- SHA512 d3b94e653c80b95bfb1648698256b3b5ac9fe26defd47288405f8df00977e4b4a9d4f3dc3ba8dcacb1962df0e836fa20340ed3e4e6c2e32947f228a07e15bd0d
- SSDEEP 384:wBrnMgqkk0dAFpWdeeewySccG7GTY80rY6lxB4bpOipjEM6WdCmqCrTS9q:wcLZ+c4bpOipjEM6WdCmqGTS9q
- TLSH T1B1E2998272BCAF2C6856967F8A7220C8406FDCBD1174586271AE717B3F61D840BFF864
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/de_DE/stringtable.xml
- SHA256 7bf5daea310022d46446409f7a12f2318f13f827a28059fa4a4c7d5da908aa35
- MD5 ebf52d01f1627732a7cdc34f1e7120c0
- SHA1 859e9bb05eb573ddbd9afd2a094937957f973ab2
- SHA512 75e16f43bae5b08a8dee6b9553e32319db81c327f71194a08929ffd76f34d022996e9bc702d7083dc997560f0bbbe5e729a2de0642df914f80191ca3b4c79e6a
- SSDEEP 768:/bWFyxzqXy/a7lXTSm5thzL+XeYf5V1DZS9q:/bIMgJX+m5thzLUeYf5V1L
- TLSH T101F2A84272FCBF2C6456966F8A3124C5251FECBE1174686672AEA1773F21D840BBF870
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/en_AE/stringtable.xml
- SHA256 bb28ff58c6d6ca627149a4955b21b03f7e1895d7e0f3115b579243dd80b687fa
- MD5 e89b411038c828fe85f818844266d2c6
- SHA1 c9f542d4846b270fd082e9c50c0e050cdf49faf6
- SHA512 3fac47cfb575b6f815018450644149fc2f588ccd15ca25747d7a6e1e0172f499214f1b644e99795585b230ccf38194d5b6983dbac71a8ce41634326ced9cd0ab
- SSDEEP 768:B32kIZf3NlzXWoUGAw+3JYqPYlc1gafpO4mS9q:B32kWDzXqZZY0YwgaO
- TLSH T14AD23792B398BF2C2896427F4A3130C1556FDCB916B8641730AF753B3B51E844AF7DA8
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/en_GB/stringtable.xml
- SHA256 36a0d1419e631c817040ecec6a686e19fba3ca17cd7515054d061448cb0c0c47
- MD5 1f28022e5bcd7090aa98b92d4f45f342
- SHA1 6998717f53b5014b5b9e1d47e5bf6b4cbaf528b3
- SHA512 65b9d2a97757921f067921c01725a4672d1da0955da39ac8b9526dd86c7261d4477caa72356739713349408a552bb6052a33434c04ccdeba7e3abf8dfb7e46b1
- SSDEEP 768:BCj2kOZf3NlzXWoUGUw+3JiqPYlc1gaDpO2CS9q:B82kYDzXGZZi0Ywg0a
- TLSH T190D23792B3A8AF2C2896417F4A3130C1556FDCBD16B8641730AF753B3B51E844AF7DA8
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/en_IL/stringtable.xml
- SHA256 8dec4cbb01f63e2ab7978a2a5911afb3cf866598f4c5bb8966a38cd00ba50aa4
- MD5 5d90955683e4f7d8a79019ffe1cd7121
- SHA1 e742aa095c588a704c1d4abd73f04eb9d857f412
- SHA512 e42349e5ec5a583ee6c5f8602521b4564d8cf5060136ea5479b7d4c6c665c154876f04ad8aa671e26f74e093fc8a5f52fce1b83bb2680b89588b2127d2134b51
- SSDEEP 768:BA2kvZf3NlzXWoUGTw+3JXqPYlc1gaIpOZsS9q:BA2kxDzXlZZX0YwgBN
- TLSH T195D24892B398AF2C2896417F4A3130C1556FDCBD16B8641730AF753B3B61E844AF7DA8
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/en_US/stringtable.xml
- SHA256 a5f6ddf66f67c041a5976e3f4280a6d354eaf179f1bfb6acd3b829ed2060f3d8
- MD5 75de6c7a1fc473ea762d79b2fa276067
- SHA1 38f91eced88cb39bd4ccb14f2e34cff957309156
- SHA512 9f3cacff8e95a899e8c586d658cc5e80f7e63d9c00ea477ab6cad97ba170919e8dae40e2ace284176a9760c2cece954a2a0cad14d20cdbea7628e1509fb6dad7
- SSDEEP 768:BF2kRZf3NlzXWoUGMw+3JaqPYlc1gadpOF3S9q:BF2kvDzXeZZa0Ywguk
- TLSH T11DD23792B398AF2C2896417F4A3130C1556FDCBD16B8641730AF753B3B51E844AF7DA8
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/en_XM/stringtable.xml
- SHA256 f9864d4a4ac4822f086cd2d74ab3ab855d6c730b213d8e426901a7b985021371
- MD5 82e50d56c00d778979e2d68b7729ca69
- SHA1 0db57bbd703134aaece12ec66a2edd4a8a2be87e
- SHA512 60ac7d13316030f217959c7a83538ec9441dfda13fbcb7045db1794d7bf579f842dab5685f5f217c2dec6776d075a6ff1e021d8698401b96f6a769e2b5b4a207
- SSDEEP 768:Bq2kRZf3NlzXWoUGXw+3JfqPYlc1gaspORjgS9q:Bq2kvDzXhZZf0YwgX4C
- TLSH T1AFD24792B398AF2C2896427F4A3130C1552FDCBD56B8641730AF753B3B51E844AF7DA8
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/es_ES/stringtable.xml
- SHA256 63ea7d7aaa6677c5475aca6b6662cafd41e218d562d4949d9236159899c9c6bd
- MD5 7c2bc88ebc55ad98e2f08dc4460ee7e1
- SHA1 8b74fdf9c636af63280405a338c74dd924a14507
- SHA512 e09c8836b8b40396ba598d12c61499dbf3c5b451628557252c8b489eba6d42bb5d53897f325306428e6fff7d61781d5b24ab971057ea3d115c376e66a44a57a1
- SSDEEP 384:5OygNowfXif7viwlYVxQBAZX0oXt687HjgtNaXKPu3160gp0SHS9q:5LgNojEVENa6P860sJHS9q
- TLSH T1B6F2B94172EC6F1C6452952F8A7260C5905FDCBD257894A2B1AE71B73FA0D884BFFC60
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/es_LA/stringtable.xml
- SHA256 21f9e70c7a024f0e42c6a9e1de5b519444f8768542a0a3a2653762d199490194
- MD5 2595d8a8510ff9bdac175bba4a3d780b
- SHA1 7524b0f62120bdc0e8abb03ad29fe66cbc4b7ca2
- SHA512 2eed27a40493f968393d05903e3d990292d92372e3e7747509e756a7184e4179a33a5b5170f584cdc44b7bc0e7e98854f66a1c30e49a58081816c55308c6c7b0
- SSDEEP 384:mOygNowfXif7viwlYVxQBAZX0oXt687HjgONaQKPu316zgp015S9q:mLgNojEVjNaTP86zsy5S9q
- TLSH T1A6F2BA4272EC6F1C6452952F8A7270C5905FDCBD247894A2B1AE61B73FA0D884BFFC64
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/es_MX/stringtable.xml
- SHA256 21f9e70c7a024f0e42c6a9e1de5b519444f8768542a0a3a2653762d199490194
- MD5 2595d8a8510ff9bdac175bba4a3d780b
- SHA1 7524b0f62120bdc0e8abb03ad29fe66cbc4b7ca2
- SHA512 2eed27a40493f968393d05903e3d990292d92372e3e7747509e756a7184e4179a33a5b5170f584cdc44b7bc0e7e98854f66a1c30e49a58081816c55308c6c7b0
- SSDEEP 384:mOygNowfXif7viwlYVxQBAZX0oXt687HjgONaQKPu316zgp015S9q:mLgNojEVjNaTP86zsy5S9q
- TLSH T1A6F2BA4272EC6F1C6452952F8A7270C5905FDCBD247894A2B1AE61B73FA0D884BFFC64
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/es_NA/stringtable.xml
- SHA256 21f9e70c7a024f0e42c6a9e1de5b519444f8768542a0a3a2653762d199490194
- MD5 2595d8a8510ff9bdac175bba4a3d780b
- SHA1 7524b0f62120bdc0e8abb03ad29fe66cbc4b7ca2
- SHA512 2eed27a40493f968393d05903e3d990292d92372e3e7747509e756a7184e4179a33a5b5170f584cdc44b7bc0e7e98854f66a1c30e49a58081816c55308c6c7b0
- SSDEEP 384:mOygNowfXif7viwlYVxQBAZX0oXt687HjgONaQKPu316zgp015S9q:mLgNojEVjNaTP86zsy5S9q
- TLSH T1A6F2BA4272EC6F1C6452952F8A7270C5905FDCBD247894A2B1AE61B73FA0D884BFFC64
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/fi_FI/stringtable.xml
- SHA256 f745a09518d78da6e1685a57a9076e54b225dd9294406c2c8dc70e92cc5a037b
- MD5 e58d0e8aca8b4c75ac14f126ea4ef906
- SHA1 7d6d074b03675e2452100bfa2b4cbfa326578410
- SHA512 104b172989b436416c74ec416bf4ce4439b695993be69dbf17fb2dfc7cbc88585a1882f2fdb4ba4286d1d740945efa0fba2c52bd7e3fb448e59f852cf6e52f38
- SSDEEP 384:vrp2C/fYZf8mtD2KSiVsXXJ4ZJmflSsYlwUKk4t7lEDxvRNJiXrOgp8dwMlS9q:vrh/fkz7+Zt7lEDxvRNJiXCgp8d3lS9q
- TLSH T196E28B5272ACAF1C6496952F8A7130C9405FDCBE11785862B1AE71BB3F60D840AFBD78
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/fr_CA/stringtable.xml
- SHA256 e984d0cd536bdad04571aab896d4991cbcf9f801a2c2eef9ee70f82626d5c048
- MD5 6136a80e652eb146794e7091f0007226
- SHA1 d2e9007a375c2ac91a03467342218294a571d791
- SHA512 c7e48b065dd0a68a0e11f958b03b371c9dfaeb3d4cbd052a23d85c13e9f4b6b2cd24862db04041583d3353c1c6b2a233023794611be5fe172675de3966e4d9ff
- SSDEEP 768:s1epuJUwptiYOjpO3AFdRPMJFIy+zqnEcXMMMCwfgVFB4S9q:NpupGjGaRPMJFIy++nN7SfX
- TLSH T1CDF2B98272BC6F6C6486952F8A7270C5402FDCBD2178646271AF71773F61D884BFB8A4
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/fr_FR/stringtable.xml
- SHA256 852c6273fa86156b53836bfc3e080d62f93c2f845d80b9f5406d92161ae3ae98
- MD5 12a255c794cfe542d7a23ddc250c69eb
- SHA1 85625c9a130015eadf573dd74de8880287188809
- SHA512 c35336b4f4abdc350966adc3d52c016bcde323cd1986c6241742161058991ff72bfe817cb548466b757f1ab9727eeca48ce00c66024127d0d12539504686be07
- SSDEEP 768:Y1e+uJUwptiYOjpO3AFdR8MJFI5+zqnEcXMMMpwfgVFKqS9q:Z+upGjGaR8MJFI5++nN7RfO
- TLSH T12CF2BA8272BC6F6C6486952F8A7270C5402FDCBD2178646271AF71773F61D884BFB8A4
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/fr_MA/stringtable.xml
- SHA256 4acd06c49b2b86ccc2211889d248710b307af99ee0966389da39f94212d4d45a
- MD5 40c19622f789d89aaba7d57894bb6d30
- SHA1 3246fbd2dd13b2f7f7c189491f8043df7a022f1f
- SHA512 6d072adc377e0e86523b81d31efe83530bd83425a688a083d6454548f468f7740bfae9608a5f30529e57fc2da0ebe029599fba94e26ce0b98af2d21cb0926b5d
- SSDEEP 768:q1enuJUwptiYOjpO3AFdRNMJFIM+zqnEcXMMMYwfgVF3US9q:rnupGjGaRNMJFIM++nN7Yft
- TLSH T19DF2BA8272BC6F6C6486952F8A7270C5402FDCBD2178646271AF71773F61D884BFB8A4
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/fr_XM/stringtable.xml
- SHA256 852c6273fa86156b53836bfc3e080d62f93c2f845d80b9f5406d92161ae3ae98
- MD5 12a255c794cfe542d7a23ddc250c69eb
- SHA1 85625c9a130015eadf573dd74de8880287188809
- SHA512 c35336b4f4abdc350966adc3d52c016bcde323cd1986c6241742161058991ff72bfe817cb548466b757f1ab9727eeca48ce00c66024127d0d12539504686be07
- SSDEEP 768:Y1e+uJUwptiYOjpO3AFdR8MJFI5+zqnEcXMMMpwfgVFKqS9q:Z+upGjGaR8MJFI5++nN7RfO
- TLSH T12CF2BA8272BC6F6C6486952F8A7270C5402FDCBD2178646271AF71773F61D884BFB8A4
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/hu_HU/stringtable.xml
- SHA256 eb121ee37044c4586ba0657a749847433ca78994d71bbe2458d4165e26cd4ebd
- MD5 21baf4a54f928caeb9f6733bb8441ed2
- SHA1 274a2ae363e49ada4508d1905a6d9e0e7f7fd63b
- SHA512 829898d3f78228d7b89497e2db361f21720cab64c94196bce1f26c34b09355f3a8553ea1f3b7b1556b35a3c97050e3b951e3290e4f6d135cecadef5dd17c3db8
- SSDEEP 768:ybwcqkc0CL4uxKZXUtS5EoZE2yVcLt3favJTGRS9q:G4mB5t2ZcLt3favJTM
- TLSH T161F26BA232BC6F1C6456956F8A7220C8405FDCBD1575687372AE617B3F60D480EFBCA8
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/it_IT/stringtable.xml
- SHA256 5e8083147af1e3d0870bc651a516f9d14a13523d4731a3da56160d96b868008b
- MD5 abea8dd819b6b3446a43d66b6dfe85c2
- SHA1 5f54503e4fa0e2d7cd371b891b489649d52a9c6d
- SHA512 3516098f33f90a1f764270a804136b16544f9d0dda6dc084ce0bbe12e2878e91977f59b2379de23037e460987347dd1fa1c809634e8e2dbb0b7b1cffeb753345
- SSDEEP 384:az9sjtec78TlEflf4X5LdgWm2+Osuw6tjspbe+mJrA7GXudA0oVu8MQg1ThB2BgS:Sxc4cAhaMVu8MQg1ThB2BgeVf5S9q
- TLSH T159E2865272BC6F2C6846952F8A7230C4511FECFD2578646271AF217B3FA1D844AFF8A4
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/ja_JP/stringtable.xml
- SHA256 397a4ee06f8e0a49debc30155d485043bf4f2340da966e6248fcabfd734be6c9
- MD5 46c098ea511e9da0f50ffd3267fec537
- SHA1 ddc4e5426c1744103a09614e08f6d54f8033159b
- SHA512 dc5cc23cc8c565d32513a046cc7b19ee882b405ba9ebe427fd53528f19591ebacbfc242d5e56504c4f228cf533e62a2beec8abb16cbc6493cbbf2723cad656d2
- SSDEEP 384:eV7B0wD9Gi7aai9i999fz9z9R9Sp5UU8w7CLODbuW2gpLtS9q:eVl0yVVxODbuW2gpLtS9q
- TLSH T14203845DB3E86F1DA821943B4A7630C4401EDCBED9796462317EA0773F60D8C8ABB974
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/ko_KR/stringtable.xml
- SHA256 d68487faa773dc661ba3c6d8e705f5e475005b5aa7e39e256a9cce1048c27d47
- MD5 072d2ecb1c1dd3a67505dcbdfe458db7
- SHA1 249d84427a9d8f8aa6076d3b0de65c467da19e7a
- SHA512 0985154909a378948b91e18fdc46d133909209e19aed11d606bfc5f0bee2e37d9b5ea23e8deb36d2be5cfae1a8ef61eaa64222b6ba0c4371a7670bbfd0b47d50
- SSDEEP 768:+uX84IfuhyO690LhR3fAZSBUX9lNJTS9q:+wIH0LhR3fA7V
- TLSH T19DF2AE9232FD6F1C2452996B8AB270C4425FCCBE22755462B16E69773F60D840AFFCB4
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/nb_NO/stringtable.xml
- SHA256 b1327e4573e2d9516b57fca8de56e6e9729b5ddc6cd11a056717f81c6477b70d
- MD5 eade0d69126dda8950b8d3476415a251
- SHA1 6df422ed03d7c3afe4e717853743e197650adf5a
- SHA512 bed23bc9353ac5423074c88268fbcd419a4eb90beeb7719e5ef8b0825c92a8e61dd7f81cd787202ba3997aa6cbc3be0f410b3feffb1e53c8c73d1d5de6cb8801
- SSDEEP 768:g+DZeoHG4745JjeDResmsAilRuYzZRS9q:3eQGL7e9esgARLt
- TLSH T10BE28942B2BC7F2C6856952F8A7220C9415FDCBD11B858A271AE717B3F61D840BFF864
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/nl_NL/stringtable.xml
- SHA256 2d5fd346720cb7f547940e1492d3f99f066e908a5db261104628d9f51588f8ab
- MD5 6eb591194c0c3c8b6c8dd8b1aef71b3b
- SHA1 ae75a0d0e41b06925fc1f7ff3957beee8ed3ee41
- SHA512 a371978ac2c684dd57bffcb53f392226f7e27532d0473606b43c61afe9eaa4d4f7b376a75e5acdd7ba08a2d7b4638f8ec24b2c47d0fed3be686dbfaf240d793c
- SSDEEP 384:7DSl8XGPonCMKxPeZofXS44jELeTLeZLeVLeILeOLe8g05EcgLcL07/eL8Pdcvwo:7DSl8XXR2i4rTK8P0w1BMbbBS9q
- TLSH T15BF2CC4272BC6F2C6496966F8A3230C9511FDCBD11B854A2B1AFB17B3F61D440AFF864
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/pl_PL/stringtable.xml
- SHA256 3f1e10feee69d7709d6a8e0a00b5f8180fb010822d20e6d1adacf6530301161e
- MD5 b53069dd20f23349edf356e2e3996fb0
- SHA1 400623b27f8cdd27eb875daf52053cab80c0992d
- SHA512 3a68a4a5ab104a8d9b9277bd533087a36c8d79c74afe7a10e7c15dd0732633a3a837903b324afaacec5805ab03cc7faa123e7337afd68842eaa5b4181618c969
- SSDEEP 768:iz7RXCLquCsQbp3RSFByeU8+/jyb4r/RedHhL/6tGe2vyZ9OX15LS9q:csQ1RpybS/Shcy
- TLSH T176F2865172BCAF1C6856986F8AB220C8045FDCFD11785462B1AF717B3F61E480BFB8A4
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/pt_BR/stringtable.xml
- SHA256 6915ea7100ff01c801319763cad68b70eeb28565c5550edf1bececec90ea9ec4
- MD5 f7e48e191208b65e30bc80fb8c4231aa
- SHA1 228ff57c85edff605a3ac03ce638f40a661e4ad5
- SHA512 dac2e26fca4f53767e0669e189e9d8b2913e1547358d227888c506e9b4d4af72879fc52f606001db3c64e0857164609107ecfed16d6b19eea0eb9a58b80425cb
- SSDEEP 768:KDzgmp0B3MuSUB4H+9T1JCzRmvlCtraMJbS9q:zMi8zRgCtraMf
- TLSH T1A6E2A84172EC6F1C6446966F8A7230C5404FDCBD257498A2B1AF26773FA1D884BFBC64
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/ru_RU/stringtable.xml
- SHA256 7700d29990a4a71043b4ee4a739abd72f9274ec375f4a137dd859eab950f42a0
- MD5 92fd938ca3d6801b2e4920f214046032
- SHA1 9df79edcf7272dd348cf115cb5eab000c5c094c5
- SHA512 edc33b05e1bf8a0d54da7b3ff27311b78c2cc0b9a13c904dc6be544147fe8b0030b6cf5f1cc88d3538a42c37411a3f61485f3b0c0d212a7b2bd68d2de34f59f2
- SSDEEP 384:xB8AIu6VQ62ZfzOnRIes5M9zu40P5E9nBdnBnb783zVeE859/7dSIAiecFyS9q:x2AIudJyRr4VeL59/7dSIAf+yS9q
- TLSH T110137A5172EC6F5C1505A42BCA30B88824AFCCFE2B795662316D397B3FB1C444ABF964
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/sv_SE/stringtable.xml
- SHA256 3c53a1e043da1632164700b98011f7b4acad128584558e134831df27129e46a8
- MD5 f7ade9ad801b3c67e90501c7b6569a96
- SHA1 1cfe9973f0944b3786529d5928594f6656dbe04d
- SHA512 12135f6b421851f32a94202e3f3446780814285a586567b033401cb0750a26df0e6e22d23aac8486afd702ba8e0495883353cb2b2fb3feee9a79cc7c8dfbde9e
- SSDEEP 768:gk95OHl7cxwB1y07u/gtQGl5cIDEXaNXwrm+98n5/PfS9q:395OHl7cSB1y0VDEXaNXwrm+98n5/p
- TLSH T10BE2984272BCBF1C7456962F8A7220C9005FECBD11B4686271AE657B3F61D880BFF964
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/tr_TR/stringtable.xml
- SHA256 76b0d06e19fc7736fc9653e9bc8d051e11e561ee978c224f7e5522f4b54f99d0
- MD5 f21a7620a6149003fc9264202c6bdaae
- SHA1 629e2c3136182ec9e2252fe7be4703b861b88604
- SHA512 9502b93e95aa56a264bc9932552d370e8c48ae57668d95239beabf677a15fa9897a879402a9d0e66e2deca38738d37ce98b8cee54760697d04802f75bf368a48
- SSDEEP 384:EYU7n/pZJXVMVCMRRPbmHHypA3iUzfeSnfqhyCz2JO0YeoiplPS9q:EYMhXaVziTCzqO3eoWlPS9q
- TLSH T1C0E2AA8172FC7F1C6856956F8AB120C8845FDCB91274A86372AE757B3F60D840BFB864
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/uk_UA/stringtable.xml
- SHA256 64a8e5ff7d8abce54a49586375e12c81d81e39ffba519927a6c4b44aea7b5ba4
- MD5 ead7884ecfa90cbc995dec77d9f41f0b
- SHA1 2686f4925ef68f935268688954760add9b3f14df
- SHA512 9756eb8f7e556daf85dfd998799a32bfaf08a3a1b9d815e14ee3ca7bf27d5c035e911d7c453fc19655b08a3ff43ce8a003b44faa25a72a2d330804b983fed9f3
- SSDEEP 384:245znryzBokyJrfEYCZYhQOmGs9FNPmkrTljmUX5Jw6TAMHE7ByzEHZyUfABwNmo:bXOBfV1TAyE0EHlulVOS9q
- TLSH T1AF13465172EC6F9D1406A46BCA70B488289F8CFE2675561331AD397B3FE0C444BBFA64
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/zh_CN/stringtable.xml
- SHA256 44df7f51b607a6b93f2e8712232d9aeff218763a78a93598caf39b3718f3f286
- MD5 66ae7a66a1b244699b0b91952fd8916a
- SHA1 85990a4adf725e47610e476412a0422ec7a0859f
- SHA512 18835fe17b8e8e9100e0ce40a02835ea8fc77cd7a56f18b9ad4f3978c7a9fd9d0c58d74ecb722ababd781d00a703fe4fccbbeef8dbe8fb572a8ac8a04e718dc9
- SSDEEP 384:p4NMgJfBA2lThRy9Jf1OVEE7wULK8II22hqMy6NpwcDUDT+zVXBrfmV4TgDS9q:p4NMgJJA7xCqMy6jvw3+zJ0V4sDS9q
- TLSH T199E2788232AC7F5C6456996F8A7230C4405FDCBD11B568A271AE717B3F60D880BFBC69
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/zh_TW/stringtable.xml
- SHA256 fd1c29a668681aae57f57feae5917798ea99f6dcae7c78eb528dc4b0f36f9877
- MD5 3b69cfce0f27f602dd0b8a9b2fb841f0
- SHA1 01f975e1424c466e8d987d8f1e40904063461803
- SHA512 3316f329c1f3e9445df003cbc76d553ab9d504072522b0f1a91dd75e6c02ae773a587f4140619c73376327ba42df5de45b1e2e994f02d395d942a0990df4853c
- SSDEEP 384:yxd965IT+ztecqwwSJ0IAsDNoMWmPkI5f7TcEm4/oVz0jjwGUS9q:Mf65/tt3kI5zAbcoVWjwGUS9q
- TLSH T14AE2579272BC6F1C6456996B8B7120C4405FDCBD15B468A271AE31BB3F60D880FFBC69
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe CC 2017/packages/D6/D6.pimx
- SHA256 7908f8318fc0ee65893c4984bdfdf6017ea4423328a4c345edd8c8568769d825
- MD5 e172038d9de5ea6259e41b0398bee872
- SHA1 98e803acd7e437a2641fb422c2c8cf0f280d295b
- SHA512 b77893e1a7a7aab04fbfbf0ed1782d5379fcad9248bc50f06f1824ee3ca8361f57e0b010ba4063d601944d74ac8079a6d494bd2ef887ab053574b7bb4aeb0e3e
- SSDEEP 1536:McmPHJFsf0Gnx8dVILTry24eNFXYw4FQ6SJ:aJGadgvoeNV4Qn
- TLSH T19A93C1A911695BE17407CE653C205E472A0FF17DF67031F8B2984D7A86DA98F4E8B233
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe CC 2017/packages/D6/D6.sig
- SHA256 660bdf0a1184b79fc300d3ee0bff7fe8886043747144f61434e8dc12bbc70054
- MD5 cf05fc34c1cd8f82058561db9b643909
- SHA1 e7fac39564ab7ae4e36d1d4461701c1ffb7e3434
- SHA512 bf6b543458a35893c2da9ff3964783ee3a889162b86f13cd48dd61a0753038dda68b2fa830e544565c8d9c14f9b6ab7c44e2ea478e25ea73838ac70cbc16a484
- TLSH T1EB31F96A75D05DD4453319B07646994D771167DB2BDED80DA8C00D8BBFEB42041430FA
- MD5 SHA1 SHA512 TLSH
Adobe CC 2017/packages/DECore/DECore.pima
- SHA256 c31d1e57c6ec92c5fa6ce67dd4cc68a4483819ed7cba9a2a4c54ea8aac6456f9
- MD5 b4707243474b8a831b5061fa2b7d0626
- SHA1 3412a2efd20cd608ccefaf61f78a7a28100194a2
- SHA512 759613cff54fab0694deca52275890d2722746275c74273a1b6686d10f51a14726acc9928f81123dfc5fe206761becef53b28d366cdaf95dbb792acb7d63a7b6
- SSDEEP 196608:eJpzz18fGtGndQ0feYY6Sh+bcDwbZhyDE46hpa+o6WeVjFwCeQMEHMIzY8c5/FP7:AKG0QRh+Xqw4czVJwkZzlchFP7
- TLSH T1EFD633458FC7CE0288BD3237725FC14A72425C1E327A63E780F5CAA9652A3B55B3D9C6
- MD5 SHA1 SHA512 SSDEEP TLSH
ARKSelector.dll
- IMPHASH 1fa3470fcfcd91e36344e0c4074157a7
- SHA256 f148e41ddc55430aa5dfcea0d199823d0516b31c63e6be1c8cf94517277a9941
- MD5 4510af14cd121973fc6dc5c16b3046d8
- SHA1 4433b8510b98117ae1c8b7e4f188b90755d7cdac
- SHA512 03a53004127c255f553dae2feb9a55e23897e5cae246d9224a43b2a15e46a0fb4789785681910cffb0dd94a1ea69c7169dc53cad664e60c3d1d2264a50c5a1a6
- SSDEEP 384:lcqQYlrIBqQJav8ikpn/JkCQaZ3anMVJtUIVntnUJhaMflIInkl2wKSd46WYvi8M:l/Sc1hqtUI/EKF+RfqhHQjHJh
- TLSH T103037D06670591B2DDDE0A74BAA96F0F943866600FE949DBE36503CE4D72BE12F3710B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
5e:bd:11:28:29:cf:af:b6:bf:25:d4:92:a3:74:9b:89:ff:2c:1c:d0
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Chains
Apr 22, 2014
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Serial Number
1d:37:83:b3:de:cd:5d:bb:16:e3:3c:d3:a6:b3:bf:db
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 20, 2014 - Feb 21, 2015
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
1
Major OS version
5
Entry point
17119
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\builds\RIBS\8.0\source\build\ARKSelector\vc\Release\ARKSelector.pdb
kernel32
GetLastError
GetCurrentDirectoryW
LocalAlloc
LocalFree
MultiByteToWideChar
GetModuleFileNameW
DecodePointer
IsDebuggerPresent
EncodePointer
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
advapi32
GetNamedSecurityInfoW
SetNamedSecurityInfoW
CreateWellKnownSid
SetEntriesInAclW
msvcp110
?_Winerror_map@std@@YAPBDH@Z
?_Syserror_map@std@@YAPBDH@Z
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
msvcr110
memmove
_purecall
??3@YAXPAX@Z
??2@YAPAXI@Z
wcscpy_s
free
_CxxThrowException
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__CppXcptFilter
_amsg_exit
_malloc_crt
_initterm
_initterm_e
_except_handler4_common
__clean_type_info_names_internal
__CxxFrameHandler3
memcpy
memset
shlwapi
PathRemoveBackslashW
PathStripPathW
PathFileExistsW
ARKSelectorGetResourcePath
Name
.text
Size
20KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=199, version=41118,
count=1, id=205, version=50929,
count=11, id=206, version=50929,
count=4, id=203, version=50929,
count=6, id=207, version=50929,
count=136, id=1, productName=Unmarked objects,
count=13, id=185, version=30716,
count=8, id=211, version=61030,
count=1, id=202, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=201, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=151,
count=1, id=204, productName=VS2012 UPD4 build 61030, version=61030,
DE5/Setup.dll
- IMPHASH 64daf01cfa4999e6af3e6dc3052e55e1
- SHA256 d080d7247be29e8defbc39074024c4f9daecfe075865e663a6be36a72f3d6750
- MD5 d3356eabe5721d0ecb78c79fc3123f33
- SHA1 649264a13045b47941668fe1f75ed6b4a596ae6c
- SHA512 b0fe06a4132c77729722e0e5591478c4f85c37051207c88c44b7a0767152fb41de439cb3144209f366378f628c8e828f6081e62bcce78ab2a35eec4b405f761e
- SSDEEP 49152:URwNVSRaT7Md9045KR6v4q5ijFVe+nSRqeXIpsl73B7XolAGhZvUcY8uTyuI96bO:URwNVSkUIMKR00
- TLSH T11DD53A807982D129E8AD05B4A9747AF5B028FCA5473BCCDF6ACCBA5D0471DCB2637319
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
9b:31:9f:98:87:28:69:61:6f:70:d6:37:f5:a7:fb:46:b4:1d:74:df
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Chains
Feb 19, 2014
CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Serial Number
11:c9:54:ae:24:12:01:1c:f5:4a:7c:3c:b1:8d:75:1e
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 19, 2013 - Feb 20, 2014
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
1
Major OS version
5
Entry point
1059851
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\1\releases\build\Ahmbed\vc10\obj\Release\bin\Setup.pdb
mpr
WNetAddConnection2W
WNetCancelConnection2W
kernel32
FormatMessageW
GetFileAttributesW
ReadFile
GetModuleFileNameW
lstrcmpW
lstrlenW
GetTempPathW
GetCurrentDirectoryW
FindClose
LocalAlloc
SetCurrentDirectoryW
RemoveDirectoryW
FindNextFileW
GetDiskFreeSpaceExW
DeleteFileW
LocalFree
SetFileAttributesW
lstrcpyW
GetVolumeInformationW
FindResourceExW
LoadResource
LockResource
GetUserDefaultUILanguage
ReleaseMutex
CreateProcessW
GetCurrentProcess
GetUserDefaultLangID
OpenProcess
Thread32First
GetExitCodeProcess
Thread32Next
Process32FirstW
QueryDosDeviceW
Module32FirstW
Process32NextW
CreateToolhelp32Snapshot
Module32NextW
GetTempFileNameW
GetThreadLocale
IsProcessorFeaturePresent
GlobalMemoryStatusEx
GetCurrentThread
GetTickCount
Sleep
InterlockedDecrement
lstrcatW
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
QueryPerformanceCounter
QueryPerformanceFrequency
GetProcessHeap
HeapAlloc
HeapFree
ReleaseSemaphore
GetSystemTimeAsFileTime
DuplicateHandle
CreateSemaphoreA
CreateFileA
InterlockedCompareExchange
GetUserDefaultLCID
GetStringTypeExA
LCMapStringA
LoadLibraryA
SetFilePointer
SetFilePointerEx
GetCurrentThreadId
SystemTimeToFileTime
DeleteFileA
GetDiskFreeSpaceA
GetDiskFreeSpaceW
GetFileAttributesA
GetFullPathNameA
GetFullPathNameW
LockFile
LockFileEx
SetEndOfFile
UnlockFile
InterlockedIncrement
GetCurrentProcessId
GetVersionExA
FormatMessageA
GetTempPathA
AreFileApisANSI
ConnectNamedPipe
CreateNamedPipeW
GetModuleHandleA
HeapReAlloc
GlobalLock
GlobalAlloc
GlobalFree
GlobalUnlock
IsDebuggerPresent
DecodePointer
EncodePointer
CreateWaitableTimerA
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
ResumeThread
SetWaitableTimer
ResetEvent
WaitForMultipleObjects
OpenEventA
SetErrorMode
GetDriveTypeW
FindFirstFileW
GetFileSize
MultiByteToWideChar
GetACP
WideCharToMultiByte
GetVersionExW
GetSystemTime
GetLastError
WaitForSingleObject
CreateMutexW
FlushFileBuffers
CreateFileW
CopyFileW
WriteFile
CloseHandle
DeleteCriticalSection
GetProcAddress
SetLastError
GetStdHandle
RaiseException
SetEvent
CreateEventA
GetConsoleWindow
FreeConsole
LoadLibraryW
GetModuleHandleW
FreeLibrary
InterlockedExchange
LoadLibraryExA
user32
GetSystemMetrics
SendMessageW
EnumThreadWindows
GetWindowTextW
GetWindowTextLengthW
PostMessageW
LoadStringA
advapi32
GetLengthSid
IsValidSecurityDescriptor
FreeSid
SetSecurityDescriptorOwner
AllocateAndInitializeSid
InitializeAcl
ImpersonateSelf
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegQueryValueExW
AccessCheck
SetSecurityDescriptorGroup
OpenThreadToken
SetEntriesInAclW
GetNamedSecurityInfoW
SetNamedSecurityInfoW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
CreateWellKnownSid
RegOpenKeyExW
RegDeleteKeyW
RegSetValueExW
RegCloseKey
ReportEventW
DeregisterEventSource
RegCreateKeyExW
RegisterEventSourceW
RevertToSelf
AddAccessAllowedAce
shell32
SHCreateDirectoryExW
SHGetFolderPathW
SHGetPathFromIDListW
SHGetFolderLocation
ord75
ord165
ole32
OleInitialize
CoTaskMemFree
CoInitializeEx
CLSIDFromProgID
CoUninitialize
CoCreateInstance
OleUninitialize
CoInitialize
oleaut32
SysAllocString
SysFreeString
VariantInit
VariantCopy
VariantClear
SysStringLen
atl110
ord31
shlwapi
PathStripPathW
PathRemoveFileSpecW
PathAppendW
PathIsFileSpecW
PathFindFileNameW
PathRemoveBackslashW
PathIsRootW
PathFileExistsW
PathAddBackslashW
PathIsUNCW
PathMakePrettyW
PathStripToRootW
PathGetCharTypeW
PathIsRelativeW
msvcp110
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
?_Add_vtordisp1@?$basic_istream@DU?$char_traits@D@std@@@std@@UAEXXZ
_Mbrtowc
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?_Swap_all@_Container_base0@std@@QAEXAAU12@@Z
?is@?$ctype@_W@std@@QBE_NF_W@Z
?widen@?$ctype@_W@std@@QBE_WD@Z
?narrow@?$ctype@_W@std@@QBED_WD@Z
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?exceptions@ios_base@std@@QAEXH@Z
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?clear@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBE_WD@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@G@Z
?imbue@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAE?AVlocale@2@ABV32@@Z
?id@?$ctype@_W@std@@2V0locale@2@A
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?id@?$numpunct@D@std@@2V0locale@2@A
??0_Locinfo@std@@QAE@PBD@Z
??1_Locinfo@std@@QAE@XZ
?_Getcvt@_Locinfo@std@@QBE?AU_Cvtvec@@XZ
?_Getlconv@_Locinfo@std@@QBEPBUlconv@@XZ
?_Getfalse@_Locinfo@std@@QBEPBDXZ
?_Gettrue@_Locinfo@std@@QBEPBDXZ
??Bid@locale@std@@QAEIXZ
?_Incref@facet@locale@std@@UAEXXZ
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
??0facet@locale@std@@IAE@I@Z
?_Winerror_map@std@@YAPBDH@Z
?_Syserror_map@std@@YAPBDH@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?uncaught_exception@std@@YA_NXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?_Orphan_all@_Container_base0@std@@QAEXXZ
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
?id@?$numpunct@_W@std@@2V0locale@2@A
?_BADOFF@std@@3_JB
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?classic@locale@std@@SAABV12@XZ
??_7facet@locale@std@@6B@
??1facet@locale@std@@MAE@XZ
??_7?$basic_ostream@_WU?$char_traits@_W@std@@@std@@6B@
??_7_Facet_base@std@@6B@
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD0@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
?_Add_vtordisp2@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAEXXZ
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?_Add_vtordisp2@?$basic_ostream@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?_Add_vtordisp1@?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAEXXZ
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?_Add_vtordisp1@?$basic_ios@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
ws2_32
WSACleanup
WSAStartup
msvcr110
__clean_type_info_names_internal
_except_handler4_common
_initterm_e
_initterm
_malloc_crt
_amsg_exit
__CppXcptFilter
_vsnprintf_s
??1type_info@@UAE@XZ
__crtTerminateProcess
__crtUnhandledException
_crt_debugger_hook
_onexit
__dllonexit
_calloc_crt
_unlock
_lock
?terminate@@YAXXZ
_beginthreadex
wcschr
wcsncat_s
_waccess_s
_wfullpath
_wgetcwd
sscanf_s
_snprintf_s
strncpy_s
strncmp
realloc
wcslen
memset
memcmp
strcmp
strcpy
__CxxFrameHandler3
_CxxThrowException
strlen
memcpy
ftell
fwrite
ferror
fprintf
fread
??3@YAXPAX@Z
wcsncpy_s
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABQBDH@Z
??0exception@std@@QAE@ABV01@@Z
memmove
free
__iob_func
setvbuf
??_V@YAXPAX@Z
strcpy_s
_purecall
_open_osfhandle
??2@YAPAXI@Z
_fdopen
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@PBD@Z
??0bad_cast@std@@QAE@ABV01@@Z
??8type_info@@QBE_NABV0@@Z
_vsnwprintf_s
??0exception@std@@QAE@XZ
swprintf_s
_wsplitpath_s
_wstat64i32
_snwprintf_s
rand
srand
_time64
calloc
_wcsicmp
malloc
wcscpy_s
_wcsnicmp
printf
memchr
atoi
strstr
sprintf_s
_wfopen_s
fwprintf
fclose
_stricmp
_localtime64_s
strftime
toupper
_gmtime64
fopen
tolower
asctime_s
_close
fputc
sprintf
strerror
_errno
psapi
GetModuleBaseNameW
EnumProcessModules
DeploymentEngineMain
Name
.text
Size
1.7MB
Virtual Size
1.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
254KB
Virtual Size
253KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
129KB
Virtual Size
145KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
2B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
382KB
Virtual Size
382KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
207KB
Virtual Size
207KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=3, id=199, version=41118,
count=14, id=205, version=50929,
count=14, id=206, version=50929,
count=6, id=203, version=50929,
count=14, id=207, version=50929,
count=3, id=188, version=30716,
count=1, id=190, version=30716,
count=26, id=109, productName=VS2005 build 50727, version=50727,
count=1, id=206, productName=VS2012 UPD4 build 61030, version=61030,
count=13, id=207, productName=VS2012 UPD4 build 61030, version=61030,
count=629, id=1, productName=Unmarked objects,
count=27, id=185, version=30716,
count=117, id=211, version=61030,
count=1, id=202, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=201, productName=VS2012 UPD4 build 61030, version=61030,
count=24, id=151,
count=1, id=204, productName=VS2012 UPD4 build 61030, version=61030,
DE5/resources/libraries/ARKCmdCaps.dll
- IMPHASH 752e2505af20869b900629fad87d1842
- SHA256 4a71e4b876b2166a8c7567e5b3baee43b9ff8e4738b7d5d9c9bdca19ec42ae81
- MD5 c9f141c24d03a9f4edbee91bca5fa535
- SHA1 8c8268d4b11a64ff0e56cfa663e6ac7bcde3dd68
- SHA512 cc64bbe40632a42af6803cd4bd61c51e0c1ad7120a69a43de3486fd67480cd113383570fa2af6f687c78a44bf02eacd6419205b0ff9122d1fae1d76377c72569
- SSDEEP 6144:zugQxLskkdIN/mF8eGc5JlgTixO+SnttFMtGiahI9ycDSnI8MabdwExe8uX:zugQxLskoINI8eGmJ2ixO+6FMtWSyfI7
- TLSH T10974AE43B5A39031D88911B061685FA26DFDFC312BA684D7CFD81899CE349D2E72E35B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
43:0e:72:c3:26:bc:2e:ef:61:8e:af:4a:ba:48:4d:43:c2:a1:1a:78
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Chains
Feb 19, 2014
CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Serial Number
11:c9:54:ae:24:12:01:1c:f5:4a:7c:3c:b1:8d:75:1e
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 19, 2013 - Feb 20, 2014
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
1
Major OS version
5
Entry point
254893
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\1\releases\build\ARKCmdCaps\vc10\Release\ARKCmdCaps.pdb
ole32
CoTaskMemFree
advapi32
FreeSid
SetNamedSecurityInfoW
AllocateAndInitializeSid
SetEntriesInAclW
GetNamedSecurityInfoW
shlwapi
PathRemoveBackslashW
PathFileExistsW
PathAppendW
PathStripPathW
shell32
SHCreateDirectoryExW
SHGetFolderPathW
SHGetFolderLocation
SHGetPathFromIDListW
kernel32
EncodePointer
DecodePointer
WideCharToMultiByte
MultiByteToWideChar
CreateFileW
FlushFileBuffers
GetFileAttributesW
CloseHandle
GetLastError
LocalFree
lstrlenW
CreateFileA
IsDebuggerPresent
DeleteFileW
GetDiskFreeSpaceA
GetDiskFreeSpaceW
GetFileAttributesA
GetFileSize
GetFullPathNameA
GetFullPathNameW
LockFile
LockFileEx
ReadFile
SetEndOfFile
SetFilePointer
UnlockFile
WriteFile
GetTempPathW
QueryPerformanceCounter
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
Sleep
InterlockedIncrement
GetCurrentProcessId
GetCurrentThreadId
GetSystemTime
GetSystemTimeAsFileTime
GetTickCount
GetVersionExA
FreeLibrary
GetProcAddress
FormatMessageA
LoadLibraryA
LoadLibraryW
GetTempPathA
DisableThreadLibraryCalls
IsProcessorFeaturePresent
DeleteFileA
AreFileApisANSI
arkengine
?GetUnistallDBQueryString@ARKCommand@@UAE_NAAV?$list@UUninstallDBQuery@@V?$allocator@UUninstallDBQuery@@@std@@@std@@@Z
?GetDBQueryString@ARKCommand@@UAE_NAAV?$list@UUninstallDBQuery@@V?$allocator@UUninstallDBQuery@@@std@@@std@@@Z
?GetUnistallDBQueryString@ARKCommand@@UAE_NAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
??1ARKCommand@@UAE@XZ
??0ARKCommand@@QAE@AAVLogAppender@@@Z
?SetInstallSequenceNumber@ARKCommand@@UAEXI@Z
?GetInstallSequenceNumber@ARKCommand@@UBEIXZ
?GetTargetFileName@ARKCommand@@UBE_NAAVFileSystemPath@@@Z
?GetLogger@ARKCommand@@UBEAAVLogAppender@@XZ
msvcp110
?_Winerror_map@std@@YAPBDH@Z
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Syserror_map@std@@YAPBDH@Z
msvcr110
__clean_type_info_names_internal
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
strstr
?terminate@@YAXXZ
memmove
_purecall
??3@YAXPAX@Z
??2@YAPAXI@Z
_time64
memcpy
strcmp
strlen
_CxxThrowException
__CxxFrameHandler3
atoi
strcpy
free
malloc
_initterm_e
memset
wcscpy_s
wcslen
realloc
memcmp
strncmp
_localtime64_s
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
??1type_info@@UAE@XZ
__CppXcptFilter
_amsg_exit
_malloc_crt
_initterm
_except_handler4_common
GetCommandObject
Name
.text
Size
251KB
Virtual Size
250KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
52KB
Virtual Size
51KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
17KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=199, version=41118,
count=13, id=205, version=50929,
count=14, id=206, version=50929,
count=4, id=207, version=50929,
count=4, id=203, version=50929,
count=2, id=203, productName=VS2012 UPD4 build 61030, version=61030,
count=138, id=1, productName=Unmarked objects,
count=11, id=185, version=30716,
count=1, id=206, productName=VS2012 UPD4 build 61030, version=61030,
count=6, id=207, productName=VS2012 UPD4 build 61030, version=61030,
count=10, id=211, version=61030,
count=1, id=202, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=201, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=204, productName=VS2012 UPD4 build 61030, version=61030,
DE5/resources/libraries/ARKCmdDefrag.dll
- IMPHASH 21f037090b030313eec16b9519710302
- SHA256 4bfdf2f464581e4d6b68af6f6b7e7e46cb809945ad7a1b17f5de0b0d79c6dd4d
- MD5 a4fdd057b6ce1709d9244cb731daae16
- SHA1 0d8926c599cbfb847e0d30081b04cf2f5a2da472
- SHA512 406c93cf4487dc9d4f1833940dc200040d06e2a05a0cb9bc17b16838256c4fd71124e47c328c1ed0255488b923cba2f2dc8c24804645054a64459478afa7ce6f
- SSDEEP 768:PgedSLOx/naf9/wBRxA2ddx0Zl5y87J2sj5kLF2HJ0jdS891eXUEJ+Lb4r5Lnx:9S/V2ddxKl5yA2UkLFCz8yXUEJ+LWV
- TLSH T1B473291233958174E9DA53B1B979971E8478FE410BE045C7EB9A5BAE0D34BC32E32B43
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
01:5c:ad:bc:22:2a:6d:27:65:98:11:ef:bd:75:10:f5:ba:7b:f0:ac
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Chains
Feb 19, 2014
CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Serial Number
11:c9:54:ae:24:12:01:1c:f5:4a:7c:3c:b1:8d:75:1e
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 19, 2013 - Feb 20, 2014
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
1
Major OS version
5
Entry point
38143
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\1\releases\build\ARKCmdDefrag\vc10\Release\ARKCmdDefrag.pdb
kernel32
GetTickCount
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
IsDebuggerPresent
DecodePointer
GetVersionExW
CloseHandle
DeviceIoControl
GetLastError
CreateFileW
MultiByteToWideChar
WideCharToMultiByte
GetCurrentThreadId
EncodePointer
DisableThreadLibraryCalls
ole32
CoUninitialize
CoInitialize
arkengine
?GetInstallSequenceNumber@ARKCommand@@UBEIXZ
?GetTargetFileName@ARKCommand@@UBE_NAAVFileSystemPath@@@Z
?GetLogger@ARKCommand@@UBEAAVLogAppender@@XZ
??0ARKCommand@@QAE@AAVLogAppender@@@Z
??1ARKCommand@@UAE@XZ
?GetUnistallDBQueryString@ARKCommand@@UAE_NAAV?$list@UUninstallDBQuery@@V?$allocator@UUninstallDBQuery@@@std@@@std@@@Z
?GetUnistallDBQueryString@ARKCommand@@UAE_NAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?GetDBQueryString@ARKCommand@@UAE_NAAV?$list@UUninstallDBQuery@@V?$allocator@UUninstallDBQuery@@@std@@@std@@@Z
?SetInstallSequenceNumber@ARKCommand@@UAEXI@Z
msvcp110
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?_BADOFF@std@@3_JB
?uncaught_exception@std@@YA_NXZ
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?_Add_vtordisp2@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAEXXZ
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?_Add_vtordisp1@?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAEXXZ
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Syserror_map@std@@YAPBDH@Z
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?ends@std@@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@1@AAV21@@Z
?endl@std@@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@1@AAV21@@Z
??_7ios_base@std@@6B@
??_7?$basic_ios@_WU?$char_traits@_W@std@@@std@@6B@
?seekp@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z
?tellp@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE?AV?$fpos@H@2@XZ
?_Winerror_map@std@@YAPBDH@Z
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
msvcr110
??3@YAXPAX@Z
??2@YAPAXI@Z
_CxxThrowException
__CxxFrameHandler3
memcpy
memset
_wsplitpath
_wstat64i32
??_V@YAXPAX@Z
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
??1type_info@@UAE@XZ
__CppXcptFilter
_amsg_exit
free
_malloc_crt
_initterm
_initterm_e
?terminate@@YAXXZ
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
_except_handler4_common
__clean_type_info_names_internal
memmove
_purecall
GetCommandObject
Name
.text
Size
39KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=199, version=41118,
count=2, id=205, version=50929,
count=13, id=206, version=50929,
count=4, id=203, version=50929,
count=7, id=207, version=50929,
count=2, id=203, productName=VS2012 UPD4 build 61030, version=61030,
count=148, id=1, productName=Unmarked objects,
count=7, id=185, version=30716,
count=10, id=207, productName=VS2012 UPD4 build 61030, version=61030,
count=8, id=211, version=61030,
count=1, id=202, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=201, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=204, productName=VS2012 UPD4 build 61030, version=61030,
DE5/resources/libraries/ARKCmdFS.dll
- IMPHASH 8122ea0fe0f3b2d0505c2d11e6c89cd1
- SHA256 5ca0f58c6ae1928587e804cc5a8f5dc61bc082f4f8fca395bb47c09910839e13
- MD5 beca11f625796d6a6c4093514c8b2530
- SHA1 8147263c9f0b20ea10993a00081619a979f6f8a8
- SHA512 4b52e21762432bbd60dccc003a7f0663f13fbeb04003cd0bd5815ef663fb510af5e93303aba4c8682f7fd6717b4e6b124e8f422c8c347fd101e396d3f10b1b13
- SSDEEP 6144:jwn8VzVpz9Cu/auxkCwcevWYrs7f/4J3zWzhoJRnCxcg0JlCq11IR2rE:jHVJpRC1CgWnf/O3zWzWJRnWu8R2rE
- TLSH T123943A20F7978236ECDF13B0797B7B8940296E945B3909DBD3885E5E2970AC35A32713
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
02:3e:8c:32:8b:af:55:45:1c:1d:bc:92:c5:fd:ab:01:c5:d2:96:22
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Chains
Feb 19, 2014
CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Serial Number
11:c9:54:ae:24:12:01:1c:f5:4a:7c:3c:b1:8d:75:1e
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 19, 2013 - Feb 20, 2014
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
1
Major OS version
5
Entry point
289685
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\1\releases\build\ARKCmdFS\vc10\Release\ARKCmdFS.pdb
ole32
CoTaskMemFree
CoInitialize
CoUninitialize
CoCreateInstance
advapi32
GetServiceKeyNameW
FreeSid
OpenProcessToken
CreateRestrictedToken
CreateProcessAsUserW
LookupPrivilegeValueW
AdjustTokenPrivileges
CreateWellKnownSid
SetNamedSecurityInfoW
GetNamedSecurityInfoW
RegCreateKeyExW
RegQueryValueExW
RegQueryInfoKeyW
InitializeSecurityDescriptor
RegDeleteKeyW
SetSecurityDescriptorDacl
RegGetKeySecurity
RegDeleteValueW
SetEntriesInAclW
RegEnumValueW
RegSetKeySecurity
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
RegSetValueExW
GetSecurityDescriptorDacl
AllocateAndInitializeSid
CreateServiceW
CloseServiceHandle
DeleteService
OpenSCManagerW
QueryServiceConfigW
OpenServiceW
QueryServiceConfig2W
ChangeServiceConfig2W
StartServiceW
ChangeServiceConfigW
QueryServiceStatusEx
GetServiceDisplayNameW
ControlService
shlwapi
PathIsUNCW
PathRemoveFileSpecW
PathUnmakeSystemFolderW
PathMakeSystemFolderW
PathIsRelativeW
PathAppendW
PathMakePrettyW
PathCombineW
PathIsDirectoryW
PathStripPathW
PathRemoveBackslashW
PathRenameExtensionW
PathIsRootW
PathFileExistsW
PathAddBackslashW
PathFindFileNameW
PathFindExtensionW
PathStripToRootW
shell32
SHSetLocalizedName
SHChangeNotify
ord75
SHCreateDirectoryExW
ord709
SHGetFolderPathW
SHGetPathFromIDListW
SHGetFolderLocation
mscms
InstallColorProfileW
UninstallColorProfileW
psapi
EnumProcessModules
EnumProcesses
GetModuleFileNameExW
kernel32
DecodePointer
IsDebuggerPresent
IsProcessorFeaturePresent
RaiseException
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
LoadLibraryExA
QueryPerformanceCounter
EncodePointer
LCMapStringW
LoadLibraryA
GetStringTypeExW
GetUserDefaultLCID
FreeLibrary
InterlockedExchange
InterlockedCompareExchange
GetModuleHandleW
lstrcatW
MoveFileW
lstrcmpiW
lstrlenW
GetLastError
CreateProcessW
GetCurrentProcess
WaitForSingleObject
OpenProcess
GetExitCodeProcess
TerminateProcess
LocalAlloc
CloseHandle
LocalFree
Sleep
WideCharToMultiByte
CopyFileW
HeapAlloc
HeapFree
GetProcessHeap
LoadLibraryW
GetProcAddress
GetTickCount
SystemTimeToFileTime
SetFileTime
CreateFileW
GetSystemTime
GetFileSize
ReadFile
SetDllDirectoryW
GetModuleFileNameW
MultiByteToWideChar
FindFirstFileW
MoveFileExW
FormatMessageW
GetFileAttributesW
lstrcmpW
GetTempPathW
GetCurrentDirectoryW
SetLastError
FindClose
SetCurrentDirectoryW
RemoveDirectoryW
FindNextFileW
DeleteFileW
SetFileAttributesW
lstrcpyW
CreateDirectoryW
user32
LoadStringW
gdi32
AddFontResourceW
RemoveFontResourceW
oleaut32
VariantClear
SysAllocString
SysFreeString
arkengine
?SetInstallSequenceNumber@ARKCommand@@UAEXI@Z
?GetUnistallDBQueryString@ARKCommand@@UAE_NAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?GetDBQueryString@ARKCommand@@UAE_NAAV?$list@UUninstallDBQuery@@V?$allocator@UUninstallDBQuery@@@std@@@std@@@Z
?Perform@ARKCommand@@QAE_NXZ
?GetUnistallDBQueryString@ARKCommand@@UAE_NAAV?$list@UUninstallDBQuery@@V?$allocator@UUninstallDBQuery@@@std@@@std@@@Z
??1ARKCommand@@UAE@XZ
??0ARKCommand@@QAE@AAVLogAppender@@@Z
?GetLogger@ARKCommand@@UBEAAVLogAppender@@XZ
?GetTargetFileName@ARKCommand@@UBE_NAAVFileSystemPath@@@Z
?GetInstallSequenceNumber@ARKCommand@@UBEIXZ
msvcp110
??0_Lockit@std@@QAE@H@Z
??Bid@locale@std@@QAEIXZ
?always_noconv@codecvt_base@std@@QBE_NXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Add_vtordisp1@?$basic_ios@DU?$char_traits@D@std@@@std@@UAEXXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Add_vtordisp2@?$basic_ostream@DU?$char_traits@D@std@@@std@@UAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?_Winerror_map@std@@YAPBDH@Z
?_Syserror_map@std@@YAPBDH@Z
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?_Orphan_all@_Container_base0@std@@QAEXXZ
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
?_BADOFF@std@@3_JB
??1_Lockit@std@@QAE@XZ
?uncaught_exception@std@@YA_NXZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
?id@?$codecvt@DDH@std@@2V0locale@2@A
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
msvcr110
memcpy
__CxxFrameHandler3
memset
_CxxThrowException
__clean_type_info_names_internal
_except_handler4_common
_initterm_e
_initterm
_malloc_crt
_amsg_exit
__CppXcptFilter
__crtTerminateProcess
??8type_info@@QBE_NABV0@@Z
__crtUnhandledException
_crt_debugger_hook
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_onexit
__dllonexit
_calloc_crt
_unlock
_lock
memmove
_wtoi
_purecall
??3@YAXPAX@Z
??2@YAPAXI@Z
??_V@YAXPAX@Z
free
malloc
strcat_s
wcstoul
toupper
wcscpy_s
sprintf_s
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABV01@@Z
_vsnwprintf_s
fputc
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@PBD@Z
??0bad_cast@std@@QAE@ABV01@@Z
_unlock_file
ungetc
fgetpos
_fseeki64
fflush
fgetc
fsetpos
setvbuf
_lock_file
memcpy_s
fwrite
fclose
memchr
swprintf_s
_wstat64i32
_snwprintf_s
rand
srand
_time64
vswprintf_s
wprintf
GetCommandObject
SetARKController
SetLogger
Name
.text
Size
313KB
Virtual Size
312KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
72KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
984B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
33KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=199, version=41118,
count=2, id=205, version=50929,
count=11, id=206, version=50929,
count=4, id=203, version=50929,
count=2, id=203, productName=VS2012 UPD4 build 61030, version=61030,
count=10, id=207, version=50929,
count=2, id=188, version=30716,
count=1, productName=Unmarked objects (old),
count=1, id=190, version=30716,
count=346, id=1, productName=Unmarked objects,
count=21, id=185, version=30716,
count=66, id=211, version=61030,
count=1, id=202, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=201, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=204, productName=VS2012 UPD4 build 61030, version=61030,
DE5/resources/libraries/ARKEngine.dll
- IMPHASH b37f8be8f74e22e52576e3d3be4624a4
- SHA256 5b0bfe799d19facd17f82b44604b6fe488990efc8a0cf7518bb10b4249595b4e
- MD5 7423ee695b15504e1d93f23dfab5bfff
- SHA1 e14a9ae7c7a006bb9d144a9e236b3d609033b4b9
- SHA512 35c442070a4026383ecd140fc6146907df790d5302ad741ce67ec190fe1dfa1ea5f603697e6178e5787c9fec6a8b84b1b25014c566a336ed2c83aeb5d54e8fc2
- SSDEEP 12288:ZUibDzvBThcwIYUcf4pcUWL4/485oSIgUUdwoWTUrtlZ:ZUSBWwIofMcUWEA85oSIgUsWTslZ
- TLSH T15AB49E11B292C236D8EE02B066EC6B4D59BDFE30073698D7C7C81DA91D709D19B3639B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
16:eb:6c:b6:8e:e9:75:f8:48:22:aa:fc:b9:3b:d2:2d:ef:f0:d5:45
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Chains
Feb 19, 2014
CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Serial Number
11:c9:54:ae:24:12:01:1c:f5:4a:7c:3c:b1:8d:75:1e
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 19, 2013 - Feb 20, 2014
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
1
Major OS version
5
Entry point
392259
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\1\releases\build\ARKEngine\vc10\Release\ARKEngine.pdb
kernel32
MultiByteToWideChar
GetFileSize
FindFirstFileW
CopyFileW
FormatMessageW
GetFileAttributesW
ReadFile
GetModuleFileNameW
CreateFileW
lstrcmpW
lstrlenW
GetTempPathW
GetCurrentDirectoryW
FindClose
RemoveDirectoryW
FindNextFileW
DeleteFileW
SetFileAttributesW
lstrcpyW
CreateProcessW
WaitForSingleObject
GetModuleHandleW
GetExitCodeProcess
GetProcAddress
SetFilePointer
WriteFile
DosDateTimeToFileTime
CreateDirectoryW
SetFileTime
GetFileTime
LocalFileTimeToFileTime
CreateFileA
DeleteFileA
FlushFileBuffers
GetDiskFreeSpaceA
GetDiskFreeSpaceW
GetFileAttributesA
GetFullPathNameA
GetFullPathNameW
LockFile
LockFileEx
SetEndOfFile
UnlockFile
QueryPerformanceCounter
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
Sleep
InterlockedIncrement
GetCurrentProcessId
GetCurrentThreadId
GetSystemTime
GetSystemTimeAsFileTime
GetTickCount
GetVersionExA
FreeLibrary
FormatMessageA
LoadLibraryA
LoadLibraryW
GetTempPathA
AreFileApisANSI
WideCharToMultiByte
lstrcmpiW
LocalFree
CloseHandle
LocalAlloc
GetCurrentProcess
SetLastError
lstrcatW
GetLastError
IsProcessorFeaturePresent
IsDebuggerPresent
DecodePointer
EncodePointer
advapi32
SetEntriesInAclW
GetNamedSecurityInfoW
SetNamedSecurityInfoW
CreateWellKnownSid
shell32
SHGetFolderLocation
SHGetPathFromIDListW
SHCreateDirectoryExW
SHGetFolderPathW
ole32
CoTaskMemFree
msvcp110
?_Winerror_map@std@@YAPBDH@Z
?_Syserror_map@std@@YAPBDH@Z
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?_Orphan_all@_Container_base0@std@@QAEXXZ
?_BADOFF@std@@3_JB
?uncaught_exception@std@@YA_NXZ
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Add_vtordisp1@?$basic_istream@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Add_vtordisp1@?$basic_istream@DU?$char_traits@D@std@@@std@@UAEXXZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@K@Z
?_Add_vtordisp2@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
?_Add_vtordisp2@?$basic_ostream@DU?$char_traits@D@std@@@std@@UAEXXZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
msvcr110
realloc
_CxxThrowException
__clean_type_info_names_internal
_except_handler4_common
memmove
_wtoi
_purecall
??3@YAXPAX@Z
??2@YAPAXI@Z
isalpha
??_V@YAXPAX@Z
isdigit
_stricmp
memchr
atoi
_wtoi64
strstr
_vsnwprintf_s
swprintf_s
sprintf_s
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABV01@@Z
_wsplitpath_s
_wstat64i32
_snwprintf_s
free
malloc
fopen
fread
ferror
fwrite
ftell
fseek
fclose
_wfopen_s
wcsrchr
wcscat_s
wcscpy_s
_wcsdup
__CxxFrameHandler3
memcmp
memcpy
memset
strcmp
strncmp
_localtime64_s
_wgetcwd
calloc
_wfullpath
_waccess_s
wcsncpy_s
wcsncat_s
strncpy_s
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_vsnprintf_s
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__CppXcptFilter
_amsg_exit
_malloc_crt
_initterm
_initterm_e
shlwapi
PathIsRelativeW
PathFindFileNameW
PathIsSameRootW
PathFileExistsW
PathIsRootW
PathRemoveBackslashW
PathStripPathW
PathStripToRootW
PathMakePrettyW
PathIsUNCW
PathAddBackslashW
??0ARKCommand@@QAE@AAVLogAppender@@@Z
??0ARKCommand@@QAE@ABV0@@Z
??1ARKCommand@@UAE@XZ
??_7ARKCommand@@6B@
?Commit@ARKCommand@@QAE_NXZ
?GetDBQueryString@ARKCommand@@UAE_NAAV?$list@UUninstallDBQuery@@V?$allocator@UUninstallDBQuery@@@std@@@std@@@Z
?GetInstallSequenceNumber@ARKCommand@@UBEIXZ
?GetLogger@ARKCommand@@UBEAAVLogAppender@@XZ
?GetTargetFileName@ARKCommand@@UBE_NAAVFileSystemPath@@@Z
?GetUnistallDBQueryString@ARKCommand@@UAE_NAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?GetUnistallDBQueryString@ARKCommand@@UAE_NAAV?$list@UUninstallDBQuery@@V?$allocator@UUninstallDBQuery@@@std@@@std@@@Z
?Perform@ARKCommand@@QAE_NXZ
?Rollback@ARKCommand@@QAE_NXZ
?SetInstallSequenceNumber@ARKCommand@@UAEXI@Z
ARKEngineDoPayloadOperation
ARKEngineDoPayloadOperation2
Name
.text
Size
401KB
Virtual Size
400KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
81KB
Virtual Size
80KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
992B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
23KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=199, version=41118,
count=12, id=205, version=50929,
count=12, id=206, version=50929,
count=4, id=203, version=50929,
count=6, id=207, version=50929,
count=315, id=1, productName=Unmarked objects,
count=13, id=185, version=30716,
count=1, id=206, productName=VS2012 UPD4 build 61030, version=61030,
count=39, id=211, version=61030,
count=1, id=202, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=201, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=204, productName=VS2012 UPD4 build 61030, version=61030,
DE5/resources/libraries/AdobePIM.dll
- IMPHASH d6d600f3ff306b01fa866de68d697719
- SHA256 9a42c1cd46414610d2c2989afe2fb8c5a3cd051995dba84ccefa96433121be75
- MD5 db9c6ebfed9002eb71872d98195e7cec
- SHA1 54d73a7fe1a47a1c7ac44c37b19d1a0fb364d13c
- SHA512 5e0ba84faae83b97de01797750b41e96b491d53eac4bb6e24637d1c61c2c1fcefb27c3d0d88e89806bd0d30f6f5f8d5f740a5abc63ddb91f6d46b71e532033e9
- SSDEEP 24576:VyfQPbtnR5UVMxwoPzDG2Mtj7uEgIwThj:VyfQPbb51Mtj7QfThj
- TLSH T19205AD61E681C131F4EB11B2A2B95B7A0C3EA915673045C7F3C46D98AE305E2B77E31B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
cb:d4:7a:5c:a6:91:13:0b:40:4d:5a:ad:a9:eb:c4:87:17:42:10:c2
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Adobe Systems Incorporated,OU=Information Systems+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Chains
Mar 27, 2012
CN=Adobe Systems Incorporated,OU=Information Systems+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=Adobe Systems Incorporated,OU=Information Systems+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Serial Number
15:e5:ac:0a:48:70:63:71:8e:39:da:52:30:1a:04:88
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 15, 2010 - Dec 14, 2012
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
1
Major OS version
5
Entry point
576614
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\oobe\3.0\c3p0\dev5\target\win\Release\resources\AdobePIM.pdb
msi
ord74
ord147
ord145
kernel32
ReleaseMutex
CloseHandle
GetCurrentProcessId
LocalFree
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
MultiByteToWideChar
GetDateFormatW
SetFilePointer
CreateDirectoryW
WriteFile
GetTimeFormatW
CreateFileW
GetTempPathW
GetLocalTime
FreeLibrary
LoadLibraryW
GetProcAddress
FindFirstFileW
CreateProcessW
MoveFileExW
SetEvent
Sleep
CopyFileW
GetVersionExW
GetModuleFileNameW
FindClose
ResetEvent
CreateEventW
RemoveDirectoryW
FindNextFileW
GetDiskFreeSpaceExW
DeleteFileW
SetFileAttributesW
GetFileSize
ReadFile
FlushFileBuffers
OpenSemaphoreW
lstrlenA
DosDateTimeToFileTime
CreateFileA
SetFileTime
GetFileAttributesA
GetFileTime
LocalFileTimeToFileTime
GetFullPathNameW
GetFullPathNameA
SetEndOfFile
QueryPerformanceCounter
UnlockFile
LockFile
GetTickCount
GetSystemTimeAsFileTime
FormatMessageA
InitializeCriticalSection
LeaveCriticalSection
GetFileAttributesW
LockFileEx
EnterCriticalSection
GetDiskFreeSpaceW
LoadLibraryA
GetDiskFreeSpaceA
DeleteCriticalSection
GetCurrentThreadId
GetTempPathA
GetSystemTime
AreFileApisANSI
DeleteFileA
GetACP
GetCurrentProcess
lstrlenW
lstrcpyW
CompareStringW
GetProcessHeap
LocalAlloc
CreateSemaphoreW
GetLastError
ReleaseSemaphore
IsValidCodePage
WaitForSingleObject
CreateMutexW
SetEnvironmentVariableA
TlsAlloc
TlsGetValue
WriteConsoleW
SetStdHandle
GetStringTypeW
LCMapStringW
HeapSize
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetTimeZoneInformation
GetStartupInfoW
GetOEMCP
GetCPInfo
HeapDestroy
HeapCreate
ExitProcess
GetModuleHandleW
GetStdHandle
IsProcessorFeaturePresent
IsDebuggerPresent
GetFileType
SetHandleCount
GetConsoleMode
GetConsoleCP
InitializeCriticalSectionAndSpinCount
SetLastError
TlsFree
DecodePointer
EncodePointer
HeapAlloc
HeapFree
MoveFileW
MoveFileA
HeapReAlloc
GetCommandLineA
RaiseException
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TlsSetValue
user32
wsprintfW
advapi32
FreeSid
GetNamedSecurityInfoW
SetNamedSecurityInfoW
SetEntriesInAclW
AllocateAndInitializeSid
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
shell32
SHGetSpecialFolderPathW
SHCreateDirectoryExW
SHGetFolderLocation
SHGetPathFromIDListW
SHGetFolderPathW
ole32
StringFromGUID2
CoCreateGuid
CLSIDFromProgID
CLSIDFromString
CoTaskMemFree
CoCreateInstance
OleRun
oleaut32
SysFreeString
VariantInit
VariantCopy
VariantClear
SysStringLen
SysAllocString
GetErrorInfo
shlwapi
PathIsDirectoryW
PathRemoveFileSpecW
PathStripPathW
PathAppendW
PathRemoveBackslashW
PathFileExistsW
AAMIU_Uninstall
AAMIU_getDeploymentValidationStatus
AAMIU_preInstallPropertySet
pim_copyPkgsFromACFToCFPath
pim_createLibraryRef
pim_createLibraryRefWithType
pim_createOrUpdateAAMInventory
pim_freeLiraryRef
pim_getAppletRegistrationInfo
pim_getCurrentPIMCFPath
pim_getCurrentPackagesVersion
pim_getCurrentPathType
pim_getPathOfType
pim_getStandardACFPath
pim_getStandardUSFPath
pim_getStandardUSFTempPath
pim_getUpdateStatusAtPath
pim_haveEnoughDiskSpaceIfACFLatest
pim_haveEnoughDiskSpaceToInstallPackages
pim_installPackage
pim_postInstallPackages
pim_registerProgressTicksCallback
pim_syncFromPathToACF
pim_syncFromPathToPath
pim_syncUSFToACF
pim_uninstallAAMFromAAMCleanerTool
pim_uninstallAAMUsingAAMCleanerTool
Name
.text
Size
638KB
Virtual Size
637KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
128KB
Virtual Size
128KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
27KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=152, version=20115,
count=46, id=171, version=31118,
count=28, id=158, version=31118,
count=155, id=170, version=31118,
count=7, id=171, productName=VS2010 build 30319, version=30319,
count=17, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=187, id=1, productName=Unmarked objects,
count=46, id=175, version=31118,
count=1, id=155, version=31118,
count=1, id=154, version=31118,
count=1, id=157, version=31118,
DE5/resources/libraries/Adobe_Helperx32.exe
- IMPHASH 37a5b396eaf7dce14108843d756d9939
- SHA256 789caa3d22e1710dca208b92f1edd225c85c833b15d7a0b243271978bf583ac7
- MD5 27350561257a62b239c327ff7ea79a0a
- SHA1 9f60ef3659ee31ac805bf0b98b122930c477210b
- SHA512 c20fea514ed4aa7ddd114ac6b77d184637610485fdc9cf93a4e9940d77ceff59409aa91a2472b98c89905eb3f356257b83adf5760cb93906f16a3d075be46127
- SSDEEP 49152:BBFoot7YSrwwLTpZDt9EXD866Aeja7wSjEX8FYDxAr:Joot7frwwhBt9mD867Qa5jEX8FYc
- TLSH T1CD958D32F981D07EC5730331DA4CB368B2FDB6719A39128B66911E2D2AB1493953CB77
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
3d:62:4e:8d:7d:a3:8a:09:1b:96:7c:c5:d9:94:84:35:da:a8:c2:11
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Chains
Feb 19, 2014
CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Serial Number
11:c9:54:ae:24:12:01:1c:f5:4a:7c:3c:b1:8d:75:1e
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 19, 2013 - Feb 20, 2014
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
1
Major OS version
5
Entry point
1140097
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\1\releases\build\Adobe_Helperx64\bin\windows\Release\Adobe_Helperx64.pdb
kernel32
ResumeThread
InterlockedIncrement
lstrcmpA
GlobalGetAtomNameW
FileTimeToSystemTime
EncodePointer
DecodePointer
GetSystemDirectoryW
FreeResource
LoadLibraryExW
LoadLibraryA
GlobalAddAtomW
GlobalFindAtomW
FlushFileBuffers
GetFullPathNameW
LockFile
SetEndOfFile
SetFilePointer
UnlockFile
WriteFile
DuplicateHandle
lstrcmpiW
CompareStringW
GetUserDefaultUILanguage
GlobalFlags
InterlockedExchange
GetVersionExW
FileTimeToLocalFileTime
GetFileAttributesExW
GetFileSizeEx
GetFileTime
GetWindowsDirectoryW
VerSetConditionMask
VerifyVersionInfoW
GetTempFileNameW
Sleep
GetTickCount
GetProfileIntW
SearchPathW
VirtualProtect
FindResourceExW
IsDebuggerPresent
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
GetCommandLineW
RaiseException
RtlUnwind
CreateThread
ExitThread
HeapSize
HeapQueryInformation
ExitProcess
GetModuleHandleExW
GetSystemInfo
VirtualAlloc
VirtualQuery
SetStdHandle
GetFileType
GetStdHandle
GetConsoleCP
GetConsoleMode
GetStartupInfoW
IsValidCodePage
GetOEMCP
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
GetTimeZoneInformation
GetProcessHeap
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStringTypeW
ReadConsoleW
SetFilePointerEx
OutputDebugStringW
GetDateFormatW
GetTimeFormatW
LCMapStringW
WriteConsoleW
SetEnvironmentVariableA
FormatMessageA
GetModuleHandleA
GetVersion
OutputDebugStringA
MulDiv
GlobalSize
FindResourceW
SizeofResource
LockResource
LoadResource
GetCurrentProcessId
InterlockedDecrement
LocalReAlloc
GlobalFree
GlobalUnlock
GlobalHandle
GlobalLock
GlobalReAlloc
GlobalAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
SetThreadPriority
GetCurrentThreadId
HeapReAlloc
GetVolumeInformationW
lstrcpyW
SetCurrentDirectoryW
FindClose
GetCurrentDirectoryW
lstrcmpW
GetModuleFileNameW
GetFileAttributesW
FormatMessageW
CopyFileW
FindFirstFileW
GetFileSize
SetLastError
GetLastError
CreateFileW
ReadFile
WaitForSingleObject
GetModuleHandleW
LocalFree
CloseHandle
LocalAlloc
GetCurrentProcess
GetTempPathW
MultiByteToWideChar
GetACP
WideCharToMultiByte
GetProcAddress
InitializeCriticalSectionAndSpinCount
LoadLibraryW
GlobalDeleteAtom
FreeLibrary
advapi32
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegOpenKeyExW
RegDeleteValueW
RegEnumKeyExW
RegSetValueExW
RegQueryValueExW
CreateWellKnownSid
SetEntriesInAclW
GetNamedSecurityInfoW
SetNamedSecurityInfoW
shell32
ShellExecuteW
SHGetSpecialFolderLocation
SHGetDesktopFolder
DragQueryFileW
DragFinish
SHBrowseForFolderW
SHAppBarMessage
SHGetPathFromIDListW
SHGetFileInfoW
ole32
IsAccelerator
OleGetClipboard
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
OleCreateMenuDescriptor
OleTranslateAccelerator
CoTaskMemAlloc
OleLockRunning
DoDragDrop
OleDestroyMenuDescriptor
CreateStreamOnHGlobal
CoInitializeEx
CoInitialize
CoUninitialize
CoCreateInstance
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
oleaut32
SysAllocStringLen
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
VariantClear
SysFreeString
VariantChangeType
SysAllocString
VarBstrFromDate
VariantInit
msimg32
TransparentBlt
AlphaBlend
shlwapi
PathRemoveFileSpecW
PathStripPathW
PathRemoveBackslashW
PathFindFileNameW
PathIsRelativeW
PathFindExtensionW
PathStripToRootW
PathIsUNCW
PathFileExistsW
StrFormatKBSizeW
uxtheme
GetThemePartSize
DrawThemeText
DrawThemeParentBackground
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
GetCurrentThemeName
IsAppThemed
IsThemeBackgroundPartiallyTransparent
GetThemeSysColor
GetWindowTheme
oleacc
LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject
gdiplus
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipDrawImageI
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipSetInterpolationMode
GdipGetImagePixelFormat
GdipAlloc
GdipFree
GdiplusStartup
GdiplusShutdown
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipDrawImageRectI
imm32
ImmGetContext
ImmGetOpenStatus
ImmReleaseContext
winmm
PlaySoundW
user32
GetAsyncKeyState
EnableScrollBar
HideCaret
InvertRect
NotifyWinEvent
CreatePopupMenu
GetMenuDefaultItem
MapVirtualKeyW
LoadMenuW
SetLayeredWindowAttributes
EnumDisplayMonitors
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
DrawStateW
DrawEdge
DrawFrameControl
SetWindowRgn
UnionRect
IsMenu
UpdateLayeredWindow
MonitorFromPoint
BringWindowToTop
LoadAcceleratorsW
TranslateAcceleratorW
InsertMenuItemW
UnpackDDElParam
ReuseDDElParam
GetKeyNameTextW
TrackMouseEvent
GetComboBoxInfo
IsZoomed
GetSystemMenu
PostThreadMessageW
WaitMessage
GetKeyboardLayout
IsCharLowerW
MapVirtualKeyExW
ToUnicodeEx
GetKeyboardState
CreateAcceleratorTableW
DestroyAcceleratorTable
CopyAcceleratorTableW
SetCursorPos
SetRect
SetParent
LockWindowUpdate
SetClassLongW
GetDoubleClickTime
CopyIcon
SetMenuDefaultItem
ModifyMenuW
RegisterClipboardFormatW
CharUpperBuffW
FrameRect
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
IsClipboardFormatAvailable
GetUpdateRect
SubtractRect
CreateMenu
MapDialogRect
DestroyCursor
GetWindowRgn
DrawIcon
DrawTextExW
DrawTextW
RealChildWindowFromPoint
GetDesktopWindow
ClientToScreen
DestroyIcon
IsDialogMessageW
SetWindowTextW
CheckDlgButton
MoveWindow
ShowWindow
GetMonitorInfoW
MonitorFromWindow
WinHelpW
DeleteMenu
SetScrollInfo
LoadIconW
MessageBeep
GetTopWindow
GetClassNameW
GetClassLongW
SetWindowLongW
PtInRect
EqualRect
CopyRect
MapWindowPoints
ScreenToClient
AdjustWindowRectEx
GetWindowRect
GetClientRect
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
UpdateWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
SetFocus
GetDlgCtrlID
GetDlgItem
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
DestroyWindow
IsChild
IsWindow
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
PostMessageW
GetMessageTime
GetMessagePos
RegisterWindowMessageW
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetFocus
GetWindowTextLengthW
GetWindowTextW
LoadCursorW
GetSysColorBrush
GetSysColor
ReleaseDC
GetDC
GetSystemMetrics
CallNextHookEx
SetWindowsHookExW
GetCursorPos
ValidateRect
GetKeyState
GetActiveWindow
IsWindowVisible
PeekMessageW
DispatchMessageW
TranslateMessage
GetMessageW
RemoveMenu
AppendMenuW
InsertMenuW
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringW
GetLastActivePopup
GetWindowThreadProcessId
GetParent
GetWindowLongW
MessageBoxW
IsWindowEnabled
EnableWindow
SendMessageW
UnhookWindowsHookEx
SetCursor
ShowOwnedPopups
IntersectRect
IsIconic
PostQuitMessage
SendDlgItemMessageA
GetIconInfo
DrawIconEx
LoadImageW
IsRectEmpty
OffsetRect
SetRectEmpty
DrawFocusRect
WindowFromPoint
ReleaseCapture
SetCapture
GetNextDlgGroupItem
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
InvalidateRect
KillTimer
GetWindow
SetTimer
CopyImage
SystemParametersInfoW
InflateRect
GetMenuItemInfoW
DestroyMenu
FillRect
EndPaint
BeginPaint
GetWindowDC
TabbedTextOutW
GetScrollInfo
GrayStringW
CharUpperW
gdi32
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateFontIndirectW
GetTextExtentPoint32W
CombineRgn
CreateRectRgnIndirect
PatBlt
SetRectRgn
DPtoLP
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
GetBkColor
GetTextMetricsW
CreateCompatibleBitmap
CreateDIBitmap
EnumFontFamiliesW
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
ExtTextOutW
TextOutW
CreateDCW
GetDeviceCaps
CreateBitmap
SetBkColor
MoveToEx
GetObjectW
DeleteObject
BitBlt
CreateCompatibleDC
CreateHatchBrush
CreatePen
CreatePatternBrush
CreateRectRgn
CreateSolidBrush
DeleteDC
Escape
ExcludeClipRect
GetClipBox
GetObjectType
GetPixel
GetStockObject
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectObject
SelectPalette
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextColor
CopyMetaFileW
GetTextFaceW
GetTextCharsetInfo
SetPixel
StretchBlt
GetViewportOrgEx
LPtoDP
CreateDIBSection
SetDIBColorTable
CreateEllipticRgn
Ellipse
GetTextColor
CreatePolygonRgn
Polygon
Polyline
Rectangle
EnumFontFamiliesExW
GetRgnBox
OffsetRgn
CreateRoundRectRgn
RoundRect
FrameRgn
PtInRegion
SetPixelV
ExtFloodFill
SetPaletteEntries
FillRgn
GetBoundsRect
GetWindowOrgEx
SetTextAlign
winspool.drv
ClosePrinter
DocumentPropertiesW
OpenPrinterW
Name
.text
Size
1.2MB
Virtual Size
1.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
308KB
Virtual Size
307KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
23KB
Virtual Size
53KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
384KB
Virtual Size
383KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=207, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=199, version=41118,
count=1, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=42, id=205, version=50929,
count=214, id=206, version=50929,
count=380, id=207, version=50929,
count=12, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=35, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=796, id=1, productName=Unmarked objects,
count=8, id=211, version=61030,
count=1, id=201, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=151,
count=1, id=204, productName=VS2012 UPD4 build 61030, version=61030,
DE5/resources/libraries/Adobe_Helperx64.exe
- IMPHASH a198f1b9f1b22c7f3895f045bff16047
- SHA256 40360fa6b51a1b37cf43c69c551d451fe6ca6df705b1d6947e77fd2b008e0df1
- MD5 f946fe7c5d960366bcccbb47d3baf85a
- SHA1 11479869fda504f7b2b112ee3278d5092cac0a7c
- SHA512 67fd549f6df96f17eee69d533dc1b391b710064a65c528d3d403354e9462747363a5c50ec08c78e914c6567c310ab1ba8d065d92d8a99c1049edded47061061b
- SSDEEP 49152:+FToLFFwf4fB/Kx8dNaXitvzZCanNqEBWuccsdKAJ5R4hejOcg7S/O:uY/t3sdKAbR40CcESm
- TLSH T14AC56BAB67E850EAD467C1B8C906C50FDBB2B4651931C39F80A507AE5F632734E9D323
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
2a:d9:1a:67:16:28:5d:f0:9f:7a:fb:ce:16:8b:96:9f:08:58:e7:25
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Chains
Feb 19, 2014
CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Serial Number
11:c9:54:ae:24:12:01:1c:f5:4a:7c:3c:b1:8d:75:1e
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 19, 2013 - Feb 20, 2014
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
0
Major OS version
6
Entry point
1515928
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\1\releases\build\Adobe_Helperx64\bin\windows_x64\Release\Adobe_Helperx64.pdb
kernel32
GetCurrentThreadId
SetThreadPriority
ResumeThread
lstrcmpA
GlobalGetAtomNameW
FileTimeToSystemTime
EncodePointer
DecodePointer
GetSystemDirectoryW
FreeResource
DeactivateActCtx
GlobalDeleteAtom
GlobalAddAtomW
GlobalFindAtomW
FlushFileBuffers
GetFullPathNameW
LockFile
SetEndOfFile
SetFilePointer
UnlockFile
WriteFile
DuplicateHandle
lstrcmpiW
CompareStringW
GetUserDefaultUILanguage
GlobalFlags
GetVersionExW
FileTimeToLocalFileTime
GetFileAttributesExW
GetFileSizeEx
GetFileTime
GetWindowsDirectoryW
VerSetConditionMask
VerifyVersionInfoW
GetTempFileNameW
Sleep
GetTickCount
GetProfileIntW
SearchPathW
VirtualProtect
FindResourceExW
IsDebuggerPresent
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
GetCommandLineW
RtlPcToFileHeader
RaiseException
RtlLookupFunctionEntry
RtlUnwindEx
CreateThread
ExitThread
HeapSize
HeapQueryInformation
ExitProcess
GetSystemInfo
VirtualAlloc
VirtualQuery
SetStdHandle
GetFileType
GetStdHandle
GetConsoleCP
GetConsoleMode
GetStartupInfoW
IsValidCodePage
GetOEMCP
GetCPInfo
RtlCaptureContext
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
GetTimeZoneInformation
GetProcessHeap
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStringTypeW
ReadConsoleW
SetFilePointerEx
OutputDebugStringW
GetDateFormatW
GetTimeFormatW
LCMapStringW
WriteConsoleW
SetEnvironmentVariableA
FormatMessageA
ActivateActCtx
CreateActCtxW
GetModuleHandleExW
OutputDebugStringA
MulDiv
GlobalSize
FindResourceW
SizeofResource
LockResource
LoadResource
GetCurrentProcessId
LocalReAlloc
GlobalFree
GlobalUnlock
GlobalHandle
GlobalLock
GlobalReAlloc
GlobalAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
QueryActCtxW
HeapReAlloc
FindActCtxSectionStringW
GetVolumeInformationW
lstrcpyW
SetCurrentDirectoryW
FindClose
GetCurrentDirectoryW
lstrcmpW
GetModuleFileNameW
GetFileAttributesW
FormatMessageW
CopyFileW
FindFirstFileW
GetFileSize
SetLastError
GetLastError
CreateFileW
ReadFile
WaitForSingleObject
GetModuleHandleW
LocalFree
CloseHandle
LocalAlloc
GetCurrentProcess
GetTempPathW
MultiByteToWideChar
GetACP
WideCharToMultiByte
GetProcAddress
InitializeCriticalSectionAndSpinCount
LoadLibraryW
LoadLibraryExW
FreeLibrary
advapi32
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegOpenKeyExW
RegDeleteValueW
RegEnumKeyExW
RegSetValueExW
RegQueryValueExW
CreateWellKnownSid
SetEntriesInAclW
GetNamedSecurityInfoW
SetNamedSecurityInfoW
shell32
ShellExecuteW
SHGetSpecialFolderLocation
SHGetDesktopFolder
DragQueryFileW
DragFinish
SHBrowseForFolderW
SHAppBarMessage
SHGetPathFromIDListW
SHGetFileInfoW
ole32
IsAccelerator
OleGetClipboard
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
OleCreateMenuDescriptor
OleTranslateAccelerator
CoTaskMemAlloc
OleLockRunning
DoDragDrop
OleDestroyMenuDescriptor
CreateStreamOnHGlobal
CoInitializeEx
CoInitialize
CoUninitialize
CoCreateInstance
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
oleaut32
SysAllocStringLen
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
VariantClear
SysFreeString
VariantChangeType
SysAllocString
VarBstrFromDate
VariantInit
msimg32
TransparentBlt
AlphaBlend
shlwapi
PathRemoveFileSpecW
PathStripPathW
PathRemoveBackslashW
PathFindFileNameW
PathIsRelativeW
PathFindExtensionW
PathStripToRootW
PathIsUNCW
PathFileExistsW
StrFormatKBSizeW
uxtheme
GetThemePartSize
DrawThemeText
DrawThemeParentBackground
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
GetCurrentThemeName
IsAppThemed
IsThemeBackgroundPartiallyTransparent
GetThemeSysColor
GetWindowTheme
oleacc
LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject
gdiplus
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipDrawImageI
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipSetInterpolationMode
GdipGetImagePixelFormat
GdipAlloc
GdipFree
GdiplusStartup
GdiplusShutdown
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipDrawImageRectI
imm32
ImmGetContext
ImmGetOpenStatus
ImmReleaseContext
winmm
PlaySoundW
user32
GetIconInfo
MessageBeep
GetAsyncKeyState
EnableScrollBar
HideCaret
InvertRect
NotifyWinEvent
CreatePopupMenu
GetMenuDefaultItem
MapVirtualKeyW
LoadMenuW
SetLayeredWindowAttributes
EnumDisplayMonitors
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
DrawStateW
DrawEdge
DrawFrameControl
SetWindowRgn
UnionRect
IsMenu
UpdateLayeredWindow
MonitorFromPoint
BringWindowToTop
LoadAcceleratorsW
TranslateAcceleratorW
InsertMenuItemW
UnpackDDElParam
ReuseDDElParam
GetKeyNameTextW
TrackMouseEvent
GetComboBoxInfo
IsZoomed
GetSystemMenu
PostThreadMessageW
WaitMessage
GetKeyboardLayout
IsCharLowerW
MapVirtualKeyExW
ToUnicodeEx
GetKeyboardState
CreateAcceleratorTableW
DestroyAcceleratorTable
CopyAcceleratorTableW
SetCursorPos
SetRect
SetParent
LockWindowUpdate
SetClassLongPtrW
GetDoubleClickTime
CopyIcon
SetMenuDefaultItem
ModifyMenuW
RegisterClipboardFormatW
CharUpperBuffW
FrameRect
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
IsClipboardFormatAvailable
GetUpdateRect
SubtractRect
CreateMenu
MapDialogRect
DestroyCursor
GetWindowRgn
DrawIcon
RealChildWindowFromPoint
GetDesktopWindow
ClientToScreen
CharUpperW
DestroyIcon
SetWindowTextW
CheckDlgButton
MoveWindow
ShowWindow
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
ShowOwnedPopups
LoadIconW
GetWindow
DrawIconEx
GetClassNameW
GetClassLongPtrW
SetWindowLongPtrW
GetWindowLongPtrW
SetWindowLongW
PtInRect
EqualRect
CopyRect
MapWindowPoints
ScreenToClient
AdjustWindowRectEx
GetWindowRect
GetClientRect
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
UpdateWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
SetFocus
GetDlgCtrlID
GetDlgItem
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
DestroyWindow
IsChild
IsWindow
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
PostMessageW
GetMessageTime
GetMessagePos
RegisterWindowMessageW
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetFocus
GetWindowTextLengthW
GetWindowTextW
LoadCursorW
GetSysColorBrush
GetSysColor
ReleaseDC
GetDC
GetSystemMetrics
CallNextHookEx
SetWindowsHookExW
GetCursorPos
ValidateRect
GetKeyState
GetActiveWindow
IsWindowVisible
PeekMessageW
DispatchMessageW
TranslateMessage
GetMessageW
RemoveMenu
AppendMenuW
InsertMenuW
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringW
GetLastActivePopup
GetWindowThreadProcessId
GetParent
GetWindowLongW
MessageBoxW
IsWindowEnabled
EnableWindow
SendMessageW
UnhookWindowsHookEx
IntersectRect
IsIconic
PostQuitMessage
SendDlgItemMessageA
CopyImage
SystemParametersInfoW
LoadImageW
IsRectEmpty
OffsetRect
SetRectEmpty
DrawFocusRect
WindowFromPoint
ReleaseCapture
SetCapture
GetNextDlgGroupItem
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
InvalidateRect
KillTimer
SetTimer
DeleteMenu
GetTopWindow
SetCursor
InflateRect
GetMenuItemInfoW
DestroyMenu
FillRect
EndPaint
BeginPaint
GetWindowDC
TabbedTextOutW
GrayStringW
DrawTextExW
SetScrollInfo
DrawTextW
IsDialogMessageW
gdi32
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateFontIndirectW
GetTextExtentPoint32W
CombineRgn
CreateRectRgnIndirect
PatBlt
SetRectRgn
DPtoLP
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
GetBkColor
GetTextMetricsW
CreateCompatibleBitmap
CreateDIBitmap
EnumFontFamiliesW
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
ExtTextOutW
TextOutW
CreateDCW
GetDeviceCaps
CreateBitmap
SetBkColor
MoveToEx
GetObjectW
DeleteObject
BitBlt
CreateCompatibleDC
CreateHatchBrush
CreatePen
CreatePatternBrush
CreateRectRgn
CreateSolidBrush
DeleteDC
Escape
ExcludeClipRect
GetClipBox
GetObjectType
GetPixel
GetStockObject
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectObject
SelectPalette
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextColor
CopyMetaFileW
GetTextFaceW
GetTextCharsetInfo
SetPixel
StretchBlt
GetViewportOrgEx
LPtoDP
CreateDIBSection
SetDIBColorTable
CreateEllipticRgn
Ellipse
GetTextColor
CreatePolygonRgn
Polygon
Polyline
Rectangle
EnumFontFamiliesExW
GetRgnBox
OffsetRgn
CreateRoundRectRgn
RoundRect
FrameRgn
PtInRegion
SetPixelV
ExtFloodFill
SetPaletteEntries
FillRgn
GetBoundsRect
GetWindowOrgEx
SetTextAlign
winspool.drv
ClosePrinter
DocumentPropertiesW
OpenPrinterW
Name
.text
Size
1.6MB
Virtual Size
1.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
600KB
Virtual Size
600KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
32KB
Virtual Size
82KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
78KB
Virtual Size
77KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
170KB
Virtual Size
170KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=207, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=199, version=41118,
count=1, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=212, id=206, version=50929,
count=18, id=205, version=50929,
count=380, id=207, version=50929,
count=10, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=135, version=30729,
count=35, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=801, id=1, productName=Unmarked objects,
count=8, id=211, version=61030,
count=1, id=201, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=151,
count=1, id=204, productName=VS2012 UPD4 build 61030, version=61030,
DE5/resources/libraries/CustomHook_Helperx64.exe
- IMPHASH 6edfc990001b49c57ad9561505516a2d
- SHA256 1f433ec84aaf817c7ba8bc58e637ed16ddca3c53e2a9322ba7bf4183dec8615d
- MD5 1028c11ebc45cfad75a54e1913da20c6
- SHA1 d9451933bb0f0190af1f3487c16f33367f9b2ae3
- SHA512 6ca0e06748acaf9245fd316442c77a6f1c2fc2b57797cb7f0731020606277ba31842f902ab9ca09257a43e11a3eb45d5d839a8bd0d280f5b4af0c01b0510b5c4
- SSDEEP 6144:/z80pQMqXNlpHRCncJNeT3FXXeItqc78kpuray:/JbqXNbxYzEc78Sq
- TLSH T1BC744909B7A858F5D967C27C89914646E3B278564B71DBCF13A0421E3F33AE09E3E721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
9d:60:63:b7:05:06:c1:ef:7e:55:56:da:95:58:81:a8:12:d0:d3:7b
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Chains
Feb 19, 2014
CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Serial Number
11:c9:54:ae:24:12:01:1c:f5:4a:7c:3c:b1:8d:75:1e
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 19, 2013 - Feb 20, 2014
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
0
Major OS version
6
Entry point
106404
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\1\releases\build\CustomHook_Helperx64\vc10\x64\Release\CustomHook_Helperx64.pdb
shlwapi
PathStripToRootW
PathRemoveFileSpecW
PathIsFileSpecW
PathStripPathW
PathRemoveBackslashW
PathIsUNCW
PathFileExistsW
PathFindFileNameW
PathIsRelativeW
kernel32
HeapReAlloc
ReadConsoleW
GetConsoleMode
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
WideCharToMultiByte
GetACP
MultiByteToWideChar
GetDriveTypeW
FormatMessageW
ReadFile
GetModuleFileNameW
CreateFileW
lstrcmpW
lstrlenW
GetTempPathW
GetLastError
GetCurrentDirectoryW
SetLastError
RemoveDirectoryW
CloseHandle
DeleteFileW
LocalFree
GetCurrentProcess
FreeLibrary
CreateProcessW
GetModuleHandleW
LoadLibraryW
WaitForSingleObject
GetExitCodeProcess
GetProcAddress
SetFilePointerEx
OutputDebugStringW
WriteFile
CreateEventA
SetEvent
FlushFileBuffers
GetCurrentThreadId
GetCommandLineW
QueryPerformanceCounter
LoadLibraryExW
GetConsoleCP
SetStdHandle
FormatMessageA
SetEndOfFile
WriteConsoleW
SetEnvironmentVariableA
LocalAlloc
GetFileType
GetStdHandle
HeapSize
GetModuleHandleExW
GetTimeZoneInformation
GetOEMCP
IsValidCodePage
EncodePointer
DecodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
Sleep
GetStringTypeW
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
IsDebuggerPresent
IsProcessorFeaturePresent
GetFullPathNameW
GetFileAttributesExW
RtlPcToFileHeader
RaiseException
RtlLookupFunctionEntry
RtlUnwindEx
GetCPInfo
InitializeCriticalSectionAndSpinCount
RtlCaptureContext
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
ExitProcess
GetProcessHeap
advapi32
SetEntriesInAclW
GetNamedSecurityInfoW
SetNamedSecurityInfoW
CreateWellKnownSid
shell32
CommandLineToArgvW
ord165
SHGetFolderLocation
SHGetPathFromIDListW
SHGetFolderPathW
ole32
CoTaskMemFree
Name
.text
Size
217KB
Virtual Size
216KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
87KB
Virtual Size
86KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
11KB
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=207, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=199, version=41118,
count=10, id=205, version=50929,
count=73, id=207, version=50929,
count=240, id=206, version=50929,
count=13, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=163, id=1, productName=Unmarked objects,
count=14, id=211, version=61030,
count=1, id=201, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=151,
count=1, id=204, productName=VS2012 UPD4 build 61030, version=61030,
DE5/resources/libraries/EventMessages.dll
- SHA256 78a29f0a6049623a1c3688b3b30d8d7c3260fc5b2b2e4a46da93ff08d303b53b
- MD5 de8f5e537b8344b638d413389023a0db
- SHA1 47f4233c65aa6b36200a6a8be6abae03d3ab25fa
- SHA512 0f597f4fc94886db647e0894b107117856875800604281ce2966057464dff987b7b8da4afa1aaebeb1b59e35a4a90c21cf5156ceec8b788d37bd4d8d89f7478f
- SSDEEP 192:NlnYe+PjPqrTBCpvynJr9ZCspE+TMorgFJyjXs:PnYPLCBLn8eM0s
- TLSH T1F9F108CB1B2560A2DECA8FB0C2D6D56BAD31B3D02EC5A05A54B980D17EC5F703B5A40E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
fc:9a:a6:1c:d0:93:88:21:2f:b6:8e:da:87:da:58:32:cc:dd:c1:3b
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Chains
Feb 19, 2014
CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Serial Number
11:c9:54:ae:24:12:01:1c:f5:4a:7c:3c:b1:8d:75:1e
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 19, 2013 - Feb 20, 2014
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
0
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
512B
Virtual Size
128B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=201, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=204, productName=VS2012 UPD4 build 61030, version=61030,
DE5/resources/libraries/TokenResolverx64.exe
- IMPHASH d7599ce64fbe14ef79f16fa0e0bef1c0
- SHA256 6ad54bcd81d1ed90ae40505c0d059e5c8f7985efa7675ba913ee27de9e9aee81
- MD5 09d7a655b4b9a60c6e9650ee389aee0b
- SHA1 7e0fd582e8823ac5296af6a3942f132efdd33ec8
- SHA512 7ad73f690693670c7dd4e0738dd66ee0039dd03c05414ec3b36d595ebd08c2119505acfa2b35b628a2a654eafa8dcd966ee0be7903398547ad52464fe8c5030a
- SSDEEP 1536:X3Rd/Ci4ruPTmT4ybYSIbFjmawIcZpqJyWYf:nRddsuPTmsbSIFSNZpqEWy
- TLSH T1A8835C4A33F404F5E5A79678C9F28A05EBB2F8425779D38F526443962F637C05E3A322
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
55:6d:35:99:07:06:d7:c6:67:87:27:20:c8:37:e6:9d:38:fd:16:66
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Chains
Feb 19, 2014
CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Serial Number
11:c9:54:ae:24:12:01:1c:f5:4a:7c:3c:b1:8d:75:1e
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 19, 2013 - Feb 20, 2014
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
2
Major OS version
5
Entry point
9852
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
E:\York1820\oobe\3.0\installertech\5.0\dev5\build\TokenResolver\vc10\x64\Release\TokenResolver.pdb
kernel32
WriteFile
CreateFileW
GetLastError
CloseHandle
WideCharToMultiByte
GetACP
MultiByteToWideChar
FlushFileBuffers
HeapReAlloc
GetStringTypeW
LCMapStringW
WriteConsoleW
SetStdHandle
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
GetCommandLineW
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
HeapAlloc
HeapFree
EncodePointer
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
FlsGetValue
FlsSetValue
FlsFree
SetLastError
GetCurrentThreadId
FlsAlloc
RtlUnwindEx
GetStdHandle
GetModuleFileNameW
RaiseException
RtlPcToFileHeader
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapSetInformation
GetVersion
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetOEMCP
IsValidCodePage
Sleep
HeapSize
shell32
SHGetFolderPathW
SHGetPathFromIDListW
SHGetFolderLocation
ole32
CoTaskMemFree
Name
.text
Size
42KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=38, id=171, productName=VS2010 build 30319, version=30319,
count=87, id=170, productName=VS2010 build 30319, version=30319,
count=10, id=158, productName=VS2010 build 30319, version=30319,
count=9, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=81, id=1, productName=Unmarked objects,
count=3, id=175, version=30319,
count=1, id=154, productName=VS2010 build 30319, version=30319,
count=1, id=157, productName=VS2010 build 30319, version=30319,
DE5/resources/libraries/adobeFileVersioner.dll
- IMPHASH c31e39c26cb35baa1c1d95d9983dcdea
- SHA256 9ca19b6ca742852e5e9cfe30d625d64879632fd142562d0cfb249d546786bb08
- MD5 92f95053e44a3d784112e74cfcc30e66
- SHA1 54532686cf92ca7e2e512a0544467b3a124af170
- SHA512 4840468460cad4688773b9a6e45b3c0b582a1719eb570ba8f688b5828d17141cf90783acca737ff98fc6f537ea2ad9e94fdb4ac53a692df2c4c5123cec1fffc0
- SSDEEP 6144:ETJ9A4mJKteONUOf7fDkIyq1E7URqkDjrOP:ET3tzNU6XP1E7UgkrOP
- TLSH T13D447CA03680C53AEDDE03B1997CAA5D40EDAEA24BB4C4C7E3D81E4D5D725C21B32767
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
39:4a:e8:44:7d:1a:4d:28:9d:76:3c:5d:f7:42:1f:fa:28:af:19:ef
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Chains
Feb 19, 2014
CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Serial Number
11:c9:54:ae:24:12:01:1c:f5:4a:7c:3c:b1:8d:75:1e
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 19, 2013 - Feb 20, 2014
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
1
Major OS version
5
Entry point
141743
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
CreateFileW
GetFileSize
ReadFile
CloseHandle
MultiByteToWideChar
WideCharToMultiByte
GetACP
Sleep
InterlockedExchange
InterlockedCompareExchange
FreeLibrary
LoadLibraryA
LCMapStringW
LCMapStringA
GetUserDefaultLCID
GetStringTypeExA
WriteConsoleW
SetStdHandle
SetFilePointerEx
GetConsoleMode
GetConsoleCP
HeapReAlloc
EncodePointer
DecodePointer
RaiseException
RtlUnwind
GetCommandLineA
GetCurrentThreadId
GetStdHandle
WriteFile
GetModuleFileNameW
IsProcessorFeaturePresent
GetLastError
HeapAlloc
HeapFree
InterlockedDecrement
ExitProcess
GetModuleHandleExW
GetProcAddress
HeapSize
IsDebuggerPresent
SetLastError
InterlockedIncrement
IsValidCodePage
GetOEMCP
GetCPInfo
GetStringTypeW
GetProcessHeap
GetFileType
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
OutputDebugStringW
LoadLibraryExW
LoadLibraryW
EnterCriticalSection
LeaveCriticalSection
FlushFileBuffers
user32
LoadStringA
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
AFV_CompareFiles
AFV_CompareVersions
AFV_GetFileVersion
Name
.text
Size
181KB
Virtual Size
181KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
46KB
Virtual Size
45KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
27KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=17, id=205, version=50929,
count=115, id=206, version=50929,
count=50, id=207, version=50929,
count=97, id=1, productName=Unmarked objects,
count=7, id=185, version=30716,
count=27, id=207, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=202, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=201, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=151,
count=1, id=204, productName=VS2012 UPD4 build 61030, version=61030,
DE5/resources/libraries/patchw32.dll
- IMPHASH 8f296cd7497fd33e575100bd64339788
- SHA256 c727b828ecc4d7a10d6eef4bb49b14fdbe8991cfc2122edecb1c0d787934574f
- MD5 d9897cad1123a4324527434520f75ab0
- SHA1 b3148e7a1315fa488ee394f2430a12358c771869
- SHA512 c6e1282e62f287241e8390e1ec1d8aa98fbe888748d008584da6b11571c1dbf37610e74ba59182f68e990021859ec989c9ece97c8d604445217c7726698950a4
- SSDEEP 6144:pB+qvXHzno7F9/wLssXxWYlrAOYg+s9k8LaVkr35VnEBUrg:pw0To7FFnsXxVlrA4JLaVkr35ZoCg
- TLSH T17B347D82F9D881F0D4D82AF434362B766E77F90432B9C696DBC01C395CB7B119918B6E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
88:9b:f5:c9:cc:56:3e:e8:f5:54:f4:81:84:ac:59:0a:08:e8:75:8f
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Chains
Feb 19, 2014
CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Serial Number
11:c9:54:ae:24:12:01:1c:f5:4a:7c:3c:b1:8d:75:1e
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 19, 2013 - Feb 20, 2014
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
0
Major OS version
1
Entry point
142432
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
user32
wsprintfA
DdeInitializeA
DispatchMessageA
OemToCharA
PeekMessageA
DdeUninitialize
TranslateMessage
CharToOemA
DdeCreateDataHandle
DdeDisconnect
DdeClientTransaction
DdeCreateStringHandleA
DdeFreeStringHandle
DdeConnect
LoadStringA
wvsprintfA
advapi32
RegCloseKey
RegQueryInfoKeyA
RegEnumValueA
RegEnumKeyA
RegEnumValueW
RegSetValueExW
RegEnumKeyW
RegDeleteValueA
RegDeleteValueW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegDeleteKeyA
RegDeleteKeyW
RegEnumKeyExA
SetFileSecurityW
GetFileSecurityW
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
FreeSid
AccessCheck
IsValidSecurityDescriptor
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
AddAccessAllowedAce
InitializeAcl
GetLengthSid
InitializeSecurityDescriptor
AllocateAndInitializeSid
DuplicateToken
OpenProcessToken
OpenThreadToken
ole32
CoUninitialize
CoInitialize
version
GetFileVersionInfoSizeW
GetFileVersionInfoA
GetFileVersionInfoW
GetFileVersionInfoSizeA
VerQueryValueA
kernel32
ReleaseMutex
GetPrivateProfileSectionA
GetProfileStringA
GetDiskFreeSpaceA
VirtualAlloc
GetSystemDirectoryA
FlushFileBuffers
CreateDirectoryA
VirtualFree
DeleteFileW
GetFileType
MoveFileW
GetDriveTypeW
GetCommandLineA
SetStdHandle
ExitProcess
GetCurrentProcessId
GetCPInfo
GetOEMCP
GetACP
GetTimeZoneInformation
GetStartupInfoA
GlobalFree
GlobalAlloc
MulDiv
GetVersion
FreeLibrary
GetDriveTypeA
GetProcAddress
LoadLibraryA
SetEndOfFile
SetFilePointer
CloseHandle
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetFileSize
CreateFileA
GetWindowsDirectoryA
GetShortPathNameA
GetFullPathNameA
MoveFileExW
MoveFileExA
CopyFileA
GetFileAttributesA
GetModuleFileNameA
MoveFileA
SetEnvironmentVariableA
GetTempPathA
SetErrorMode
CreateMutexA
SetFileApisToANSI
CreateFileW
AreFileApisANSI
WaitForSingleObject
LocalFree
LocalAlloc
GetCurrentProcess
GetLastError
GetCurrentThread
WriteFile
lstrlenA
ReadFile
SetNamedPipeHandleState
WaitNamedPipeA
GetLocalTime
SetCurrentDirectoryW
GetEnvironmentStrings
WideCharToMultiByte
GetProfileSectionA
FindNextFileW
FindClose
GetPrivateProfileStringA
GetSystemTime
DeleteFileA
SetFileAttributesA
WriteProfileStringA
WriteProfileSectionA
WritePrivateProfileStringA
WritePrivateProfileSectionA
WriteProfileStringW
WritePrivateProfileStringW
CopyFileW
GetExitCodeProcess
CreateProcessA
lstrcmpiA
SystemTimeToFileTime
GetSystemInfo
LockResource
LoadResource
FindResourceA
SetFileApisToOEM
MultiByteToWideChar
GetVolumeInformationA
SetEnvironmentVariableW
GetCurrentDirectoryW
FindFirstFileW
FindFirstFileA
FindNextFileA
FileTimeToSystemTime
FileTimeToLocalFileTime
LocalFileTimeToFileTime
GetModuleHandleA
SetFileAttributesW
SetFileTime
GetFileAttributesW
GetShortPathNameW
GetFullPathNameW
GetStdHandle
RaiseException
RemoveDirectoryW
RemoveDirectoryA
GetCurrentDirectoryA
SetCurrentDirectoryA
RtlUnwind
CreateDirectoryW
GetLogicalDrives
RTPBatSvr
RTPRegSvr
RTPRenSvr
RTPatchApply32@12
RTPatchApply32NoCall
RTPatchEnumPatches@12
RTPatchGetCost@24
RTPatchSetAttribGet@8
RTPatchSetAttribSet@8
RTPatchSetCreate@8
RTPatchSetDelete@8
RTPatchSetDirWalk@8
RTPatchSetOpen@8
RTPatchSetRename@8
Name
.text
Size
173KB
Virtual Size
173KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
35KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
296B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
440B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
13KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
DE5/resources/libraries/updaterinventory.dll
- IMPHASH bad3015008dc3e428fc873c464835fbd
- SHA256 6ba99f378a9e0a95dedbabee6bf9f9dc94913a684f7bbb36055d7863bbb31313
- MD5 87c79e5b308f347a2360ae5da407a479
- SHA1 3adf9ba5e45d25986a1af1c68d74f17e6022fd37
- SHA512 916e629c847e5c740d8d6258e8b426f54db94bee1bc01684cd961d5c004e3df7de119c3d214149e4022bf61e7aff61b0c8e83be2a92e22c4a274fe672f6c1b10
- SSDEEP 6144:zO1SJIndl6FIJ+Ki+vBRcOS6yWjzOR2IKLA4ZxA/4HR21AwU7L:zO1SJWQsc16njzOgn84ZxAig1xU7L
- TLSH T127A4AC11B9C1C071E86E02B0722D9B2605BDBDB14B698AD7E3D8AD4F1F726C15B32B17
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
bd:68:cb:48:b8:25:1d:f3:46:e4:b7:a3:86:fd:7d:63:d5:e8:d2:b9
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Chains
Feb 19, 2014
CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Serial Number
11:c9:54:ae:24:12:01:1c:f5:4a:7c:3c:b1:8d:75:1e
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 19, 2013 - Feb 20, 2014
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
1
Major OS version
5
Entry point
109034
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\P4\garuda_1970\oobe\8.0\dev\updater\build\updaterinventory\vc\outdir-Release\updaterinventory.pdb
kernel32
EncodePointer
DecodePointer
GetSystemTimeAsFileTime
GetCommandLineA
GetCurrentThreadId
IsDebuggerPresent
IsProcessorFeaturePresent
ExitProcess
GetModuleHandleExW
GetProcAddress
HeapSize
Sleep
GetStdHandle
WriteFile
GetModuleFileNameW
RaiseException
InterlockedIncrement
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetLastError
GetTimeZoneInformation
WideCharToMultiByte
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
EnterCriticalSection
LeaveCriticalSection
LoadLibraryExW
MultiByteToWideChar
HeapReAlloc
RtlUnwind
OutputDebugStringW
LoadLibraryW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetStringTypeW
GetConsoleCP
GetConsoleMode
SetFilePointerEx
SetStdHandle
WriteConsoleW
FlushFileBuffers
CreateFileW
SetEnvironmentVariableA
GetLongPathNameW
GetTempPathW
LocalFree
CreateDirectoryW
RemoveDirectoryW
SetFileAttributesW
DeleteFileW
CopyFileW
MoveFileW
GetVersionExW
SetFilePointer
SetEndOfFile
ReadConsoleW
LocalAlloc
GetLastError
GetProcessHeap
HeapFree
HeapAlloc
CreateThread
GetExitCodeThread
InitializeCriticalSectionAndSpinCount
TerminateThread
WaitForSingleObject
InterlockedDecrement
CloseHandle
FindNextFileW
FindClose
GetCurrentProcess
FindFirstFileW
ReadFile
advapi32
SetNamedSecurityInfoW
CreateWellKnownSid
GetSecurityDescriptorDacl
RegOpenKeyExW
RegSetKeySecurity
SetEntriesInAclW
RegDeleteValueW
RegGetKeySecurity
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegQueryValueExW
RegSetValueExW
RegCloseKey
RegCreateKeyExW
shell32
SHFileOperationW
SHGetSpecialFolderLocation
SHGetMalloc
SHGetPathFromIDListW
ole32
CoInitializeSecurity
CoTaskMemFree
CoInitializeEx
CoUninitialize
CoCreateInstance
CoInitialize
oleaut32
VariantInit
VariantClear
SysAllocString
SysFreeString
shlwapi
PathIsFileSpecW
PathFileExistsW
PathIsDirectoryW
PathRemoveFileSpecW
UpdaterInventoryAddToMCL
UpdaterInventoryAddToMCLWithIcon
UpdaterInventoryGetLibVersion
UpdaterInventoryIsHigherUpdatePresent
UpdaterInventoryRelease
UpdaterInventoryRemoveFromMCL
UpdaterInventorySuppressUpdates
Name
.text
Size
300KB
Virtual Size
299KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
65KB
Virtual Size
65KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
9KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
73KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=19, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=186, id=1, productName=Unmarked objects,
count=3, id=206, productName=VS2012 UPD4 build 61030, version=61030,
count=11, id=207, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=199, version=41118,
count=75, id=207, version=50929,
count=29, id=205, version=50929,
count=214, id=206, version=50929,
count=15, id=211, version=61030,
count=1, id=202, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=201, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=151,
count=1, id=204, productName=VS2012 UPD4 build 61030, version=61030,
DE5/resources/uninstall/Uninstall.db
- SHA256 26915426641b265d5e77f93b0b35ed6ca95dbb144d2917f85db11025bfc6e889
- MD5 45e2bbb50c3dce90beabc845b63362d9
- SHA1 75c29a86b1ea37ee07f5c4770adc4cfd7f5f4dae
- SHA512 f806da7b24bfccce909ca4ca12cf1c0554516bce1886544188fbec715ac093f885708bef1b89bd394c782d1a340bfde5e4a0d97c6647c6f7bcbdc02fd857c9c2
- SSDEEP 768:TOUTP61NQUQRGVUZOEWGpg6hRRU8Qd4qRPAnbszKPTvG5MzFV1ASj:2JWh
- TLSH T130638CCF5F1A3312C5E14131DAD203E36C3C565EA77A66D03AA211F2BEA20B769715F8
- MD5 SHA1 SHA512 SSDEEP TLSH
DE6/Setup.dll
- IMPHASH eeb4787dc3697b9a7d205b62a703f08c
- SHA256 f1edd755ec500d029c03c6c86715707eabe8d0c279564e0d50f0ae96c158330b
- MD5 061688144d5ac5dcdc450bb154114fd7
- SHA1 6769ddbfd431dafcaec3f5cadc4dfc6527a6f162
- SHA512 0c1640c4f12e3b1c9cc4c3d673cb9416dec03ef92e7e872e20f2925f1d83043ef3260777b77b2e94a1192c3cc180a8c3d037d9568061df61b65e57189c954ade
- SSDEEP 49152:LHM7j/her0vpX6jyy2p9JOwVmSDperTTmqDdtsT+RFaL:LH2ucpep2DJ9geT
- TLSH T1CAF51748BE82C15DE9CD04FAAD797AF93428FCA4073BCDCF56987D4A04725CA6936306
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Minor OS version
1
Major OS version
5
Entry point
1472427
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\builds\RIBS\8.0\source\build\Ahmbed\vc\obj\Release\bin\Setup.pdb
mpr
WNetCancelConnection2W
WNetAddConnection2W
setupapi
SetupDiGetClassDevsW
SetupDiGetDeviceRegistryPropertyW
SetupDiGetDeviceInstanceIdW
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
CM_Get_DevNode_Status
kernel32
MoveFileExW
FormatMessageW
GetFileAttributesW
ReadFile
GetModuleFileNameW
lstrcmpW
lstrlenW
GetTempPathW
GetCurrentDirectoryW
FindClose
LocalAlloc
SetCurrentDirectoryW
RemoveDirectoryW
lstrcmpiW
FindNextFileW
GetDiskFreeSpaceExW
DeleteFileW
LocalFree
SetFileAttributesW
lstrcpyW
GetVolumeInformationW
FindResourceExW
LoadResource
LockResource
GetUserDefaultUILanguage
ReleaseMutex
CreateProcessW
GetCurrentProcess
GetUserDefaultLangID
OpenProcess
Thread32First
GetExitCodeProcess
Thread32Next
Process32FirstW
QueryDosDeviceW
Module32FirstW
Process32NextW
CreateToolhelp32Snapshot
Module32NextW
GetTempFileNameW
GetThreadLocale
IsProcessorFeaturePresent
GlobalMemoryStatusEx
GetCurrentThread
GetTickCount
Sleep
InterlockedDecrement
lstrcatW
CreateDirectoryW
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
QueryPerformanceCounter
QueryPerformanceFrequency
GetProcessHeap
HeapAlloc
HeapFree
ReleaseSemaphore
GetSystemTimeAsFileTime
DuplicateHandle
CreateSemaphoreA
CreateFileA
MultiByteToWideChar
InterlockedCompareExchange
InterlockedExchange
GetUserDefaultLCID
GetStringTypeExA
LCMapStringA
LoadLibraryA
CopyFileExW
SystemTimeToFileTime
DeleteFileA
GetDiskFreeSpaceA
GetDiskFreeSpaceW
GetFileAttributesA
SetErrorMode
GetFullPathNameW
LockFile
LockFileEx
SetEndOfFile
SetFilePointer
UnlockFile
InterlockedIncrement
GetCurrentProcessId
GetCurrentThreadId
GetVersionExA
FormatMessageA
GetTempPathA
AreFileApisANSI
ConnectNamedPipe
CreateNamedPipeW
GetModuleHandleA
HeapReAlloc
GlobalLock
GlobalAlloc
GlobalFree
GlobalUnlock
GetLocalTime
GetTimeFormatW
GetDateFormatW
UnlockFileEx
lstrlenA
OpenMutexW
TlsGetValue
TlsAlloc
ResumeThread
SetWaitableTimer
ResetEvent
WaitForMultipleObjects
OpenEventA
GetDriveTypeW
FindFirstFileW
GetACP
WideCharToMultiByte
GetVersionExW
GetSystemTime
GetLastError
WaitForSingleObject
CreateMutexW
GetFileSizeEx
FlushFileBuffers
CreateFileW
CopyFileW
WriteFile
CloseHandle
DeleteCriticalSection
GetProcAddress
SetLastError
GetStdHandle
RaiseException
SetEvent
CreateEventA
GetConsoleWindow
FreeConsole
LoadLibraryW
GetModuleHandleW
FreeLibrary
GetFullPathNameA
TlsSetValue
TlsFree
CreateWaitableTimerA
EncodePointer
DecodePointer
GetFileSize
IsDebuggerPresent
LoadLibraryExA
user32
FindWindowW
GetWindowTextW
GetWindowTextLengthW
GetWindowThreadProcessId
EnumThreadWindows
SendMessageW
LoadStringA
PostMessageW
GetSystemMetrics
advapi32
InitializeSecurityDescriptor
RegQueryValueExW
AccessCheck
SetSecurityDescriptorGroup
OpenThreadToken
SetEntriesInAclW
GetNamedSecurityInfoW
SetNamedSecurityInfoW
AdjustTokenPrivileges
CheckTokenMembership
FreeSid
AllocateAndInitializeSid
DuplicateTokenEx
LookupPrivilegeValueW
OpenProcessToken
CreateWellKnownSid
RegOpenKeyExW
RegDeleteKeyW
RegSetValueExW
RegCloseKey
ReportEventW
DeregisterEventSource
RegCreateKeyExW
RegisterEventSourceW
ImpersonateSelf
InitializeAcl
SetSecurityDescriptorOwner
AddAccessAllowedAce
RevertToSelf
IsValidSecurityDescriptor
GetLengthSid
SetSecurityInfo
SetSecurityDescriptorDacl
shell32
ord75
SHGetFolderPathW
SHGetPathFromIDListW
SHGetFolderLocation
ord165
SHCreateDirectoryExW
ole32
CoSetProxyBlanket
CoInitializeEx
OleUninitialize
OleInitialize
CoTaskMemFree
CLSIDFromProgID
CoInitialize
CoUninitialize
CoCreateInstance
CoInitializeSecurity
oleaut32
VariantClear
SysAllocStringByteLen
VariantInit
VariantCopy
SysAllocString
SysFreeString
SysStringLen
atl110
ord31
shlwapi
PathIsRelativeW
PathStripPathW
PathRemoveFileSpecW
PathAppendW
PathAddBackslashW
PathAddExtensionW
PathRenameExtensionW
PathIsFileSpecW
PathIsDirectoryW
PathRemoveBackslashW
PathRemoveExtensionW
PathFileExistsW
PathIsRootW
PathFindExtensionW
PathGetCharTypeW
PathStripToRootW
PathMakePrettyW
PathIsUNCW
PathFindFileNameW
msvcp110
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@K@Z
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
?set_new_handler@std@@YAP6AXXZP6AXXZ@Z
?_Add_vtordisp2@?$basic_ios@DU?$char_traits@D@std@@@std@@UAEXXZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z
?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?id@?$codecvt@DDH@std@@2V0locale@2@A
?always_noconv@codecvt_base@std@@QBE_NXZ
?in@?$codecvt@_WDH@std@@QBEHAAHPBD1AAPBDPA_W3AAPA_W@Z
?out@?$codecvt@_WDH@std@@QBEHAAHPB_W1AAPB_WPAD3AAPAD@Z
?unshift@?$codecvt@_WDH@std@@QBEHAAHPAD1AAPAD@Z
?_Getcat@?$codecvt@_WDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Add_vtordisp2@?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAEXXZ
??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?_Add_vtordisp1@?$basic_istream@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?getline@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@PA_W_J@Z
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
?getloc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QBE?AVlocale@2@XZ
?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXXZ
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
?id@?$codecvt@_WDH@std@@2V0locale@2@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Add_vtordisp1@?$basic_istream@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?_Swap_all@_Container_base0@std@@QAEXAAU12@@Z
?is@?$ctype@_W@std@@QBE_NF_W@Z
?_Winerror_map@std@@YAPBDH@Z
?_Syserror_map@std@@YAPBDH@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?uncaught_exception@std@@YA_NXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?_Orphan_all@_Container_base0@std@@QAEXXZ
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
?id@?$numpunct@_W@std@@2V0locale@2@A
?_BADOFF@std@@3_JB
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?classic@locale@std@@SAABV12@XZ
??_7facet@locale@std@@6B@
_Mbrtowc
??_7?$basic_ostream@_WU?$char_traits@_W@std@@@std@@6B@
??_7_Facet_base@std@@6B@
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W00@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD0@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
?_Add_vtordisp2@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAEXXZ
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?_Add_vtordisp2@?$basic_ostream@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?_Add_vtordisp1@?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAEXXZ
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?_Add_vtordisp1@?$basic_ios@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1facet@locale@std@@MAE@XZ
??0facet@locale@std@@IAE@I@Z
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UAEXXZ
??Bid@locale@std@@QAEIXZ
?_Gettrue@_Locinfo@std@@QBEPBDXZ
?_Getfalse@_Locinfo@std@@QBEPBDXZ
?_Getlconv@_Locinfo@std@@QBEPBUlconv@@XZ
?_Getcvt@_Locinfo@std@@QBE?AU_Cvtvec@@XZ
??1_Locinfo@std@@QAE@XZ
??0_Locinfo@std@@QAE@PBD@Z
?id@?$numpunct@D@std@@2V0locale@2@A
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?id@?$ctype@_W@std@@2V0locale@2@A
?imbue@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAE?AVlocale@2@ABV32@@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@G@Z
?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBE_WD@Z
?clear@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?exceptions@ios_base@std@@QAEXH@Z
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?narrow@?$ctype@_W@std@@QBED_WD@Z
?widen@?$ctype@_W@std@@QBE_WD@Z
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
ws2_32
WSACleanup
WSAStartup
msvcr110
fgetwc
_open
_write
__clean_type_info_names_internal
_except_handler4_common
_initterm_e
_initterm
_malloc_crt
_amsg_exit
__CppXcptFilter
??1type_info@@UAE@XZ
__crtTerminateProcess
__crtUnhandledException
_crt_debugger_hook
_onexit
__dllonexit
_calloc_crt
_unlock
_lock
?terminate@@YAXXZ
_beginthreadex
_ftime64_s
_wrename
wcsftime
_wopen
_lseeki64
sprintf
strerror
_close
wcstombs
_aligned_free
_aligned_malloc
??9type_info@@QBE_NABV0@@Z
?name@type_info@@QBEPBDPAU__type_info_node@@@Z
wcsncmp
sscanf
_errno
isalnum
fputc
fprintf
_vsnprintf_s
wcschr
strchr
wcsncat_s
strncat_s
_waccess_s
_wfullpath
_set_errno
_wunlink
_wfsopen
_wmkdir
_wgetcwd
sscanf_s
_snprintf_s
strncpy_s
strncmp
realloc
??3@YAXPAX@Z
wcsncpy_s
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABQBDH@Z
??0exception@std@@QAE@ABV01@@Z
memmove
free
__iob_func
setvbuf
??_V@YAXPAX@Z
strcpy_s
_purecall
_open_osfhandle
??2@YAPAXI@Z
_fdopen
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@PBD@Z
??0bad_cast@std@@QAE@ABV01@@Z
??8type_info@@QBE_NABV0@@Z
_vsnwprintf_s
??0exception@std@@QAE@XZ
memchr
atoi
swprintf_s
_wsplitpath_s
_wstat64i32
_snwprintf_s
rand
srand
_time64
calloc
memcpy_s
_wcsicmp
wcscpy_s
_wcsnicmp
malloc
fgetws
printf
strstr
_wfopen_s
fclose
sprintf_s
fwprintf
_stricmp
tolower
_localtime64_s
strftime
toupper
_gmtime64
fputwc
_unlock_file
ungetwc
ungetc
fgetpos
_fseeki64
fflush
fgetc
fsetpos
_lock_file
fwrite
isspace
isalpha
isxdigit
memcpy
strcpy
strcmp
strlen
_CxxThrowException
__CxxFrameHandler3
wcslen
memcmp
memset
fread
psapi
EnumProcessModules
GetModuleBaseNameW
DeploymentEngineMain
Name
.text
Size
2.1MB
Virtual Size
2.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
311KB
Virtual Size
310KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
158KB
Virtual Size
191KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
2B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
382KB
Virtual Size
382KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
286KB
Virtual Size
285KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=8, id=199, version=41118,
count=15, id=205, version=50929,
count=14, id=206, version=50929,
count=6, id=203, version=50929,
count=3, id=188, version=30716,
count=17, id=125, productName=VS2005 build 50727, version=50727,
count=2, id=190, version=30716,
count=15, id=207, version=50929,
count=117, id=109, productName=VS2005 build 50727, version=50727,
count=2, id=206, productName=VS2012 UPD4 build 61030, version=61030,
count=26, id=207, productName=VS2012 UPD4 build 61030, version=61030,
count=748, id=1, productName=Unmarked objects,
count=35, id=185, version=30716,
count=187, id=211, version=61030,
count=1, id=202, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=201, productName=VS2012 UPD4 build 61030, version=61030,
count=24, id=151,
count=1, id=204, productName=VS2012 UPD4 build 61030, version=61030,
DE6/resources/libraries/ARKCmdCaps.dll
- IMPHASH dabce6fe60b773f20cc76586a6e0bcc2
- SHA256 2b296d41ff81af0c972c941032cea0d445eda0577b021e6f6a70b06093d8b05c
- MD5 2c07b8c6703c6fd8358bd3201d6b2933
- SHA1 acb700df8fbf80e6c0eb4d6e166cd80b264fc610
- SHA512 7d6f2360ef84d68aded2b9ed43e4dc412da65c99c745c760acb99c9e3950fe27f99917f12c4a69a80b9d50f5324826ac343eb76f2bf9b39259b08098beb8fe25
- SSDEEP 6144:WbIgwXTRQRSs1IJFsPkkeK7mBFB/v0bpxYH8REfBwI15ELWl5L0zFEk6bdwbmeBt:WbIgwXTRQRS0IbpLKaBF90FebfBtn+ZH
- TLSH T13C74AE43B5A39031D89911B062689F626DFDBC313BA694D3CFD81895CE309D2E72E35B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
3c:29:4c:bd:22:b0:25:18:31:84:68:7c:5c:01:18:72:fd:5e:64:94
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Chains
Apr 22, 2014
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Serial Number
1d:37:83:b3:de:cd:5d:bb:16:e3:3c:d3:a6:b3:bf:db
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 20, 2014 - Feb 21, 2015
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
1
Major OS version
5
Entry point
254919
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\builds\RIBS\8.0\source\build\ARKCmdCaps\vc\Release\ARKCmdCaps.pdb
ole32
CoTaskMemFree
advapi32
FreeSid
SetNamedSecurityInfoW
AllocateAndInitializeSid
SetEntriesInAclW
GetNamedSecurityInfoW
shlwapi
PathRemoveBackslashW
PathFileExistsW
PathAppendW
PathStripPathW
shell32
SHCreateDirectoryExW
SHGetFolderPathW
SHGetFolderLocation
SHGetPathFromIDListW
kernel32
EncodePointer
DecodePointer
WideCharToMultiByte
MultiByteToWideChar
CreateFileW
FlushFileBuffers
GetFileAttributesW
CloseHandle
GetLastError
LocalFree
lstrlenW
CreateFileA
IsDebuggerPresent
DeleteFileW
GetDiskFreeSpaceA
GetDiskFreeSpaceW
GetFileAttributesA
GetFileSize
GetFullPathNameA
GetFullPathNameW
LockFile
LockFileEx
ReadFile
SetEndOfFile
SetFilePointer
UnlockFile
WriteFile
GetTempPathW
QueryPerformanceCounter
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
Sleep
InterlockedIncrement
GetCurrentProcessId
GetCurrentThreadId
GetSystemTime
GetSystemTimeAsFileTime
GetTickCount
GetVersionExA
FreeLibrary
GetProcAddress
FormatMessageA
LoadLibraryA
LoadLibraryW
DisableThreadLibraryCalls
AreFileApisANSI
IsProcessorFeaturePresent
DeleteFileA
GetTempPathA
arkengine
?GetUnistallDBQueryString@ARKCommand@@UAE_NAAV?$list@UUninstallDBQuery@@V?$allocator@UUninstallDBQuery@@@std@@@std@@@Z
?GetDBQueryString@ARKCommand@@UAE_NAAV?$list@UUninstallDBQuery@@V?$allocator@UUninstallDBQuery@@@std@@@std@@@Z
?GetUnistallDBQueryString@ARKCommand@@UAE_NAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
??1ARKCommand@@UAE@XZ
??0ARKCommand@@QAE@AAVLogAppender@@@Z
?SetInstallSequenceNumber@ARKCommand@@UAEXI@Z
?GetInstallSequenceNumber@ARKCommand@@UBEIXZ
?GetTargetFileName@ARKCommand@@UBE_NAAVFileSystemPath@@@Z
?GetLogger@ARKCommand@@UBEAAVLogAppender@@XZ
msvcp110
?_Winerror_map@std@@YAPBDH@Z
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Syserror_map@std@@YAPBDH@Z
msvcr110
__clean_type_info_names_internal
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
strstr
?terminate@@YAXXZ
memmove
_purecall
??3@YAXPAX@Z
??2@YAPAXI@Z
_time64
memcpy
strcmp
strlen
_CxxThrowException
__CxxFrameHandler3
atoi
strcpy
free
malloc
_initterm_e
memset
wcscpy_s
wcslen
realloc
memcmp
strncmp
_localtime64_s
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
??1type_info@@UAE@XZ
__CppXcptFilter
_amsg_exit
_malloc_crt
_initterm
_except_handler4_common
GetCommandObject
Name
.text
Size
251KB
Virtual Size
250KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
53KB
Virtual Size
52KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
17KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=199, version=41118,
count=13, id=205, version=50929,
count=14, id=206, version=50929,
count=4, id=207, version=50929,
count=4, id=203, version=50929,
count=2, id=203, productName=VS2012 UPD4 build 61030, version=61030,
count=139, id=1, productName=Unmarked objects,
count=11, id=185, version=30716,
count=1, id=206, productName=VS2012 UPD4 build 61030, version=61030,
count=6, id=207, productName=VS2012 UPD4 build 61030, version=61030,
count=10, id=211, version=61030,
count=1, id=202, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=201, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=204, productName=VS2012 UPD4 build 61030, version=61030,
DE6/resources/libraries/ARKCmdDefrag.dll
- IMPHASH 21f037090b030313eec16b9519710302
- SHA256 7b4811a187b66d8ecd5dac8f4d6aff4e8daa025146582a5fbd74b42ffba34e2a
- MD5 03c288f686b8133bf84bf6c341ac30da
- SHA1 2d7f4e3f20047162844121e2fae2eb854a783116
- SHA512 d0c539c0f81e57b8c3105f2c6d56189207b3cd91d69f9fcf11444fc0378d74a2fcd489a490640f9ded6f49551e58ee1deed40f184c242fe0e3c361eee991e06d
- SSDEEP 1536:oMKJ8xmBplFyxlbkrCW/tdhUEJ+4LJMJtQ:jIIulGlbKCW/tdPJ3LOJy
- TLSH T182734B1233948174E9DE53B1B979972A8478FE410BE045C7EB991B6E1E35BC32E32B43
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
68:a0:4d:3e:71:d6:36:ee:7c:7e:05:fc:d3:8e:a0:15:d5:ad:57:24
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Chains
Apr 22, 2014
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Serial Number
1d:37:83:b3:de:cd:5d:bb:16:e3:3c:d3:a6:b3:bf:db
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 20, 2014 - Feb 21, 2015
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
1
Major OS version
5
Entry point
38239
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\builds\RIBS\8.0\source\build\ARKCmdDefrag\vc\Release\ARKCmdDefrag.pdb
kernel32
GetTickCount
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
IsDebuggerPresent
DecodePointer
GetVersionExW
CloseHandle
DeviceIoControl
GetLastError
CreateFileW
MultiByteToWideChar
WideCharToMultiByte
GetCurrentThreadId
EncodePointer
DisableThreadLibraryCalls
ole32
CoUninitialize
CoInitialize
arkengine
?GetInstallSequenceNumber@ARKCommand@@UBEIXZ
?GetTargetFileName@ARKCommand@@UBE_NAAVFileSystemPath@@@Z
?GetLogger@ARKCommand@@UBEAAVLogAppender@@XZ
??0ARKCommand@@QAE@AAVLogAppender@@@Z
??1ARKCommand@@UAE@XZ
?GetUnistallDBQueryString@ARKCommand@@UAE_NAAV?$list@UUninstallDBQuery@@V?$allocator@UUninstallDBQuery@@@std@@@std@@@Z
?GetUnistallDBQueryString@ARKCommand@@UAE_NAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?GetDBQueryString@ARKCommand@@UAE_NAAV?$list@UUninstallDBQuery@@V?$allocator@UUninstallDBQuery@@@std@@@std@@@Z
?SetInstallSequenceNumber@ARKCommand@@UAEXI@Z
msvcp110
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?_BADOFF@std@@3_JB
?uncaught_exception@std@@YA_NXZ
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?_Add_vtordisp2@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAEXXZ
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?_Add_vtordisp1@?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAEXXZ
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Syserror_map@std@@YAPBDH@Z
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?ends@std@@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@1@AAV21@@Z
?endl@std@@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@1@AAV21@@Z
??_7ios_base@std@@6B@
??_7?$basic_ios@_WU?$char_traits@_W@std@@@std@@6B@
?seekp@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z
?tellp@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE?AV?$fpos@H@2@XZ
?_Winerror_map@std@@YAPBDH@Z
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
msvcr110
??3@YAXPAX@Z
??2@YAPAXI@Z
_CxxThrowException
__CxxFrameHandler3
memcpy
memset
_wsplitpath
_wstat64i32
??_V@YAXPAX@Z
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
??1type_info@@UAE@XZ
__CppXcptFilter
_amsg_exit
free
_malloc_crt
_initterm
_initterm_e
?terminate@@YAXXZ
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
_except_handler4_common
__clean_type_info_names_internal
memmove
_purecall
GetCommandObject
Name
.text
Size
39KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=199, version=41118,
count=2, id=205, version=50929,
count=13, id=206, version=50929,
count=4, id=203, version=50929,
count=7, id=207, version=50929,
count=2, id=203, productName=VS2012 UPD4 build 61030, version=61030,
count=148, id=1, productName=Unmarked objects,
count=7, id=185, version=30716,
count=10, id=207, productName=VS2012 UPD4 build 61030, version=61030,
count=8, id=211, version=61030,
count=1, id=202, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=201, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=204, productName=VS2012 UPD4 build 61030, version=61030,
DE6/resources/libraries/ARKCmdFS.dll
- IMPHASH 782f22ba7b78bb2b0a467252181c7dc4
- SHA256 8570b698ecbe08cb980df28429e0efad2ddb183a83ed6512f63a6c7c017d0dab
- MD5 c27ab5a50a24e1c04e5a9aa16d4ec0e9
- SHA1 21ec39e53e28e11673bd82def85ac03dda945412
- SHA512 60f5c35d979abc4b5b846b168e660c08cf8132f3a8e4ab4e7dc1a347a468be189e8eeed8016ca68e4c7761c777b8e4aac8c0b98991ce4b1d74335f81c8fc6648
- SSDEEP 6144:TlEayL6fZH36zVP7CW02s6yJ5WBu03Lha4R+1J4is0JlCq9mPWO5Vu:TldwoWVyJ5Wo07hBR+1cu8+O5Vu
- TLSH T135A43A10E79B8235EDEF07B0797A7B49406969984B3A06C7D7895E2E2D70EC35E32703
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
46:57:57:0b:78:b0:82:6c:1b:fa:f2:bb:b7:b2:6a:0e:39:80:dc:0f
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Chains
Apr 22, 2014
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Serial Number
1d:37:83:b3:de:cd:5d:bb:16:e3:3c:d3:a6:b3:bf:db
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 20, 2014 - Feb 21, 2015
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
1
Major OS version
5
Entry point
293829
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\builds\RIBS\8.0\source\build\ARKCmdFS\vc\Release\ARKCmdFS.pdb
ole32
CoTaskMemFree
CoInitialize
CoUninitialize
CoCreateInstance
advapi32
GetServiceKeyNameW
FreeSid
OpenProcessToken
CreateRestrictedToken
CreateProcessAsUserW
LookupPrivilegeValueW
AdjustTokenPrivileges
CreateWellKnownSid
SetNamedSecurityInfoW
GetNamedSecurityInfoW
RegCreateKeyExW
RegQueryValueExW
RegQueryInfoKeyW
InitializeSecurityDescriptor
RegDeleteKeyW
SetSecurityDescriptorDacl
RegGetKeySecurity
RegDeleteValueW
SetEntriesInAclW
RegEnumValueW
RegSetKeySecurity
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
RegSetValueExW
GetSecurityDescriptorDacl
AllocateAndInitializeSid
CreateServiceW
CloseServiceHandle
DeleteService
OpenSCManagerW
QueryServiceConfigW
OpenServiceW
QueryServiceConfig2W
ChangeServiceConfig2W
StartServiceW
ChangeServiceConfigW
QueryServiceStatusEx
GetServiceDisplayNameW
ControlService
shlwapi
PathIsUNCW
PathRemoveFileSpecW
PathUnmakeSystemFolderW
PathMakeSystemFolderW
PathIsRelativeW
PathAppendW
PathMakePrettyW
PathCombineW
PathIsDirectoryW
PathStripPathW
PathRemoveBackslashW
PathRenameExtensionW
PathIsRootW
PathFileExistsW
PathAddBackslashW
PathFindFileNameW
PathFindExtensionW
PathStripToRootW
shell32
SHSetLocalizedName
SHChangeNotify
ord75
SHCreateDirectoryExW
ord709
SHGetFolderPathW
SHGetPathFromIDListW
SHGetFolderLocation
mscms
InstallColorProfileW
UninstallColorProfileW
psapi
EnumProcessModules
EnumProcesses
GetModuleFileNameExW
kernel32
DecodePointer
IsDebuggerPresent
IsProcessorFeaturePresent
RaiseException
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
LoadLibraryExA
QueryPerformanceCounter
EncodePointer
LCMapStringW
LoadLibraryA
GetStringTypeExW
GetUserDefaultLCID
FreeLibrary
InterlockedExchange
InterlockedCompareExchange
GetModuleHandleW
lstrcatW
MoveFileW
lstrcmpiW
lstrlenW
GetLastError
CreateProcessW
GetCurrentProcess
WaitForSingleObject
OpenProcess
GetExitCodeProcess
TerminateProcess
LocalAlloc
CloseHandle
LocalFree
Sleep
WideCharToMultiByte
CopyFileW
HeapAlloc
HeapFree
GetProcessHeap
LoadLibraryW
GetProcAddress
GetTickCount
SystemTimeToFileTime
SetFileTime
CreateFileW
GetSystemTime
GetFileSize
ReadFile
SetDllDirectoryW
GetModuleFileNameW
MultiByteToWideChar
FindFirstFileW
MoveFileExW
FormatMessageW
GetFileAttributesW
lstrcmpW
GetTempPathW
GetCurrentDirectoryW
SetLastError
FindClose
SetCurrentDirectoryW
RemoveDirectoryW
FindNextFileW
DeleteFileW
SetFileAttributesW
lstrcpyW
CreateDirectoryW
user32
LoadStringW
gdi32
AddFontResourceW
RemoveFontResourceW
oleaut32
VariantClear
SysAllocString
SysFreeString
arkengine
?SetInstallSequenceNumber@ARKCommand@@UAEXI@Z
?Perform@ARKCommand@@QAE_NXZ
?GetDBQueryString@ARKCommand@@UAE_NAAV?$list@UUninstallDBQuery@@V?$allocator@UUninstallDBQuery@@@std@@@std@@@Z
?GetUnistallDBQueryString@ARKCommand@@UAE_NAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?GetUnistallDBQueryString@ARKCommand@@UAE_NAAV?$list@UUninstallDBQuery@@V?$allocator@UUninstallDBQuery@@@std@@@std@@@Z
??1ARKCommand@@UAE@XZ
??0ARKCommand@@QAE@AAVLogAppender@@@Z
?GetLogger@ARKCommand@@UBEAAVLogAppender@@XZ
?GetTargetFileName@ARKCommand@@UBE_NAAVFileSystemPath@@@Z
?GetInstallSequenceNumber@ARKCommand@@UBEIXZ
msvcp110
??0_Lockit@std@@QAE@H@Z
??Bid@locale@std@@QAEIXZ
?always_noconv@codecvt_base@std@@QBE_NXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Add_vtordisp1@?$basic_ios@DU?$char_traits@D@std@@@std@@UAEXXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Add_vtordisp2@?$basic_ostream@DU?$char_traits@D@std@@@std@@UAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?_Winerror_map@std@@YAPBDH@Z
?_Syserror_map@std@@YAPBDH@Z
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?_Orphan_all@_Container_base0@std@@QAEXXZ
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
?_BADOFF@std@@3_JB
??1_Lockit@std@@QAE@XZ
?uncaught_exception@std@@YA_NXZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
?id@?$codecvt@DDH@std@@2V0locale@2@A
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
msvcr110
memcpy
memset
__CxxFrameHandler3
_CxxThrowException
__clean_type_info_names_internal
_except_handler4_common
_initterm_e
_initterm
_malloc_crt
_amsg_exit
__CppXcptFilter
__crtTerminateProcess
??8type_info@@QBE_NABV0@@Z
__crtUnhandledException
_crt_debugger_hook
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_onexit
__dllonexit
_calloc_crt
_unlock
_lock
memmove
_wtoi
_purecall
??3@YAXPAX@Z
??2@YAPAXI@Z
??_V@YAXPAX@Z
free
malloc
strcat_s
wcstoul
toupper
wcscpy_s
sprintf_s
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABV01@@Z
_vsnwprintf_s
fputc
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@PBD@Z
??0bad_cast@std@@QAE@ABV01@@Z
_unlock_file
ungetc
fgetpos
_fseeki64
fflush
fgetc
fsetpos
setvbuf
_lock_file
memcpy_s
fwrite
fclose
memchr
swprintf_s
_wstat64i32
_snwprintf_s
rand
srand
_time64
vswprintf_s
wprintf
GetCommandObject
SetARKController
SetLogger
Name
.text
Size
317KB
Virtual Size
317KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
87KB
Virtual Size
87KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
984B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
33KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=199, version=41118,
count=2, id=205, version=50929,
count=11, id=206, version=50929,
count=4, id=203, version=50929,
count=2, id=203, productName=VS2012 UPD4 build 61030, version=61030,
count=10, id=207, version=50929,
count=2, id=188, version=30716,
count=1, productName=Unmarked objects (old),
count=1, id=190, version=30716,
count=347, id=1, productName=Unmarked objects,
count=21, id=185, version=30716,
count=66, id=211, version=61030,
count=1, id=202, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=201, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=204, productName=VS2012 UPD4 build 61030, version=61030,
DE6/resources/libraries/ARKEngine.dll
- IMPHASH 69048ad2f2cb7114ee79410e3853e1c7
- SHA256 2963f472c53983eb6fa76921c332af89a89882642020e8044f0df97fce8ba4d2
- MD5 cf551cfffbeea969701e20e14c5d5ea3
- SHA1 02dabb0fa00f9b24cc85175d3d6c613da29af354
- SHA512 365c6a5212e37482f2cff97e57e8833f53621fdb7080aec02560a2ea8717c9464c4c884ffa09f3f1de7d99c0a7483a4736f8552eddb336b26f8972ca8d6f85d3
- SSDEEP 12288:19pjKADjORgJ4I1wIFrcpQVe0GLe1biN4uV9f6NVCdwwgTsMkBhb:1aR64ImIrYQVe0A2b84uVZ6NcgTNob
- TLSH T1F9C4AE12F242C132D8E903B162EC6B5A9DBDBD300B3A95E7D7C85D681D709D1AB3A347
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
8a:7f:44:c8:21:dd:c0:bc:77:b3:ed:b2:cd:02:55:0c:17:8e:0a:5c
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Chains
Apr 22, 2014
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Serial Number
1d:37:83:b3:de:cd:5d:bb:16:e3:3c:d3:a6:b3:bf:db
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 20, 2014 - Feb 21, 2015
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
1
Major OS version
5
Entry point
411217
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\builds\RIBS\8.0\source\build\ARKEngine\vc\Release\ARKEngine.pdb
kernel32
MultiByteToWideChar
GetFileSize
FindFirstFileW
CopyFileW
FormatMessageW
GetFileAttributesW
ReadFile
GetModuleFileNameW
CreateFileW
lstrcmpW
lstrlenW
GetTempPathW
GetCurrentDirectoryW
FindClose
RemoveDirectoryW
FindNextFileW
DeleteFileW
SetFileAttributesW
lstrcpyW
CreateProcessW
WaitForSingleObject
GetModuleHandleW
GetExitCodeProcess
GetProcAddress
CreateFileA
DeleteFileA
FlushFileBuffers
GetDiskFreeSpaceA
GetDiskFreeSpaceW
GetFileAttributesA
GetFullPathNameA
LockFile
LockFileEx
SetEndOfFile
SetFilePointer
UnlockFile
WriteFile
QueryPerformanceCounter
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
Sleep
InterlockedIncrement
GetCurrentProcessId
GetCurrentThreadId
GetSystemTime
GetSystemTimeAsFileTime
GetTickCount
GetVersionExA
FreeLibrary
FormatMessageA
LoadLibraryA
LoadLibraryW
GetTempPathA
AreFileApisANSI
DosDateTimeToFileTime
CreateDirectoryW
SetFileTime
lstrcatW
GetFileTime
LocalFileTimeToFileTime
FileTimeToSystemTime
FileTimeToLocalFileTime
IsProcessorFeaturePresent
IsDebuggerPresent
WideCharToMultiByte
lstrcmpiW
SetLastError
GetLastError
LocalFree
CloseHandle
LocalAlloc
GetFullPathNameW
GetCurrentProcess
DecodePointer
EncodePointer
advapi32
SetEntriesInAclW
GetNamedSecurityInfoW
SetNamedSecurityInfoW
CreateWellKnownSid
shell32
SHGetFolderPathW
SHGetPathFromIDListW
SHGetFolderLocation
SHCreateDirectoryExW
ole32
CoTaskMemFree
msvcp110
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?_Winerror_map@std@@YAPBDH@Z
?_Syserror_map@std@@YAPBDH@Z
?_BADOFF@std@@3_JB
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?uncaught_exception@std@@YA_NXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Add_vtordisp2@?$basic_ostream@DU?$char_traits@D@std@@@std@@UAEXXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Orphan_all@_Container_base0@std@@QAEXXZ
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Add_vtordisp1@?$basic_istream@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Add_vtordisp1@?$basic_istream@DU?$char_traits@D@std@@@std@@UAEXXZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@K@Z
?_Add_vtordisp2@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAEXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
msvcr110
strncpy_s
_CxxThrowException
__clean_type_info_names_internal
_except_handler4_common
memmove
_purecall
??3@YAXPAX@Z
??2@YAPAXI@Z
_wtoi
??_V@YAXPAX@Z
_stricmp
memchr
atoi
isalpha
_wtoi64
isdigit
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABV01@@Z
strstr
_wfopen_s
fclose
_vsnwprintf_s
swprintf_s
sprintf_s
_wsplitpath_s
_wstat64i32
_snwprintf_s
free
_wcsnicmp
malloc
realloc
memcmp
memcpy
memset
strcmp
strncmp
_localtime64_s
_wgetcwd
calloc
_wfullpath
_waccess_s
fread
fseek
wcsncpy_s
wcsncat_s
__CxxFrameHandler3
wcsrchr
wcscat_s
wcscpy_s
_wcsdup
wcschr
_wmakepath_s
wcsstr
fopen
ferror
fwrite
ftell
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_vsnprintf_s
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__CppXcptFilter
_amsg_exit
_malloc_crt
_initterm
_initterm_e
shlwapi
PathFindExtensionW
PathIsRelativeW
PathFindFileNameW
PathStripToRootW
PathAddBackslashW
PathFileExistsW
PathIsRootW
PathRenameExtensionW
PathRemoveBackslashW
PathStripPathW
PathMakePrettyW
PathIsUNCW
PathIsSameRootW
??0ARKCommand@@QAE@AAVLogAppender@@@Z
??0ARKCommand@@QAE@ABV0@@Z
??1ARKCommand@@UAE@XZ
??_7ARKCommand@@6B@
?Commit@ARKCommand@@QAE_NXZ
?GetDBQueryString@ARKCommand@@UAE_NAAV?$list@UUninstallDBQuery@@V?$allocator@UUninstallDBQuery@@@std@@@std@@@Z
?GetInstallSequenceNumber@ARKCommand@@UBEIXZ
?GetLogger@ARKCommand@@UBEAAVLogAppender@@XZ
?GetTargetFileName@ARKCommand@@UBE_NAAVFileSystemPath@@@Z
?GetUnistallDBQueryString@ARKCommand@@UAE_NAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?GetUnistallDBQueryString@ARKCommand@@UAE_NAAV?$list@UUninstallDBQuery@@V?$allocator@UUninstallDBQuery@@@std@@@std@@@Z
?Perform@ARKCommand@@QAE_NXZ
?Rollback@ARKCommand@@QAE_NXZ
?SetInstallSequenceNumber@ARKCommand@@UAEXI@Z
ARKEngineDoPayloadOperation
ARKEngineDoPayloadOperation2
Name
.text
Size
420KB
Virtual Size
419KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
82KB
Virtual Size
81KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
992B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
24KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, id=199, version=41118,
count=12, id=205, version=50929,
count=12, id=206, version=50929,
count=4, id=203, version=50929,
count=6, id=207, version=50929,
count=328, id=1, productName=Unmarked objects,
count=15, id=185, version=30716,
count=1, id=206, productName=VS2012 UPD4 build 61030, version=61030,
count=40, id=211, version=61030,
count=1, id=202, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=201, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=204, productName=VS2012 UPD4 build 61030, version=61030,
DE6/resources/libraries/AdobePIM.dll
- IMPHASH eb85531a0232873d71bb8c18b90e2c2e
- SHA256 19220dd05f6aca5f103a1fad59cae3681fac676c6fb7f03b1cee8529a742cbba
- MD5 80070baba696da53a85f4c9484d11c8d
- SHA1 e8e9b7fcce389723f33fc1fd0673e2bb198f5e01
- SHA512 fa161004976f118e788513e767d806891f487b549ec18d08e9df2be44ccc46c2af46e73f30e00950723fb9f60be3e629ddf88e8ea378c33cdc6b82bb3fe31812
- SSDEEP 24576:eUNDHrN8P/R588WVBdysOFWO+5rLhRT7Y/KTojNJi:THrGMVG0JbY/KToNJi
- TLSH T185558D11B392C171E8EB11F01A7D7F9E193C6915072489DBE3D82C996D301D2BB3BBA6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
af:fa:ee:3b:ec:13:03:da:e2:64:75:bb:aa:24:f8:dd:71:76:5e:66
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Chains
Apr 28, 2014
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Serial Number
1d:37:83:b3:de:cd:5d:bb:16:e3:3c:d3:a6:b3:bf:db
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 20, 2014 - Feb 21, 2015
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
1
Major OS version
5
Entry point
790781
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\builds\AAM\8.0\source\dev\aamcore\target\win\Release\resources\AdobePIM.pdb
msi
ord147
ord74
ord145
kernel32
CreateDirectoryW
GetTempPathW
GetDateFormatW
GetTimeFormatW
GetLocalTime
OpenProcess
Process32FirstW
Process32NextW
CreateToolhelp32Snapshot
FindFirstFileW
CreateProcessW
MoveFileExW
SetEvent
CopyFileW
GetVersionExW
GetModuleFileNameW
FindClose
ResetEvent
CreateEventW
FindNextFileW
GetDiskFreeSpaceExW
SetFileAttributesW
GetFileSize
GetCurrentProcess
GetModuleHandleW
WriteFile
GetExitCodeProcess
GetFileAttributesW
ReadFile
CreateFileW
FlushFileBuffers
SetLastError
GetProcAddress
RemoveDirectoryW
lstrcmpiW
DeleteFileW
GetSystemTime
GetFullPathNameW
GetFullPathNameA
CreateFileA
SetFilePointer
SetEndOfFile
FreeLibrary
QueryPerformanceCounter
UnlockFile
LockFile
GetTickCount
GetSystemTimeAsFileTime
FormatMessageA
InitializeCriticalSection
LoadLibraryW
GetFileAttributesA
LeaveCriticalSection
LockFileEx
EnterCriticalSection
GetDiskFreeSpaceW
LoadLibraryA
GetDiskFreeSpaceA
DeleteCriticalSection
GetCurrentThreadId
MultiByteToWideChar
AreFileApisANSI
DeleteFileA
lstrlenW
GetACP
GetFileSizeEx
lstrlenA
DosDateTimeToFileTime
SetFileTime
lstrcatW
GetFileTime
LocalFileTimeToFileTime
OpenMutexW
WriteConsoleW
SetStdHandle
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
LocalFree
GetCurrentProcessId
CloseHandle
ReleaseMutex
HeapReAlloc
OpenSemaphoreW
LocalAlloc
CreateSemaphoreW
GetLastError
ReleaseSemaphore
Sleep
WaitForSingleObject
CreateMutexW
InitializeCriticalSectionAndSpinCount
SetEnvironmentVariableA
GetCommandLineA
OutputDebugStringW
LoadLibraryExW
GetConsoleCP
SetFilePointerEx
ReadConsoleW
GetConsoleMode
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetModuleFileNameA
GetFileType
GetOEMCP
IsValidCodePage
GetProcessHeap
GetStdHandle
HeapSize
GetModuleHandleExW
IsProcessorFeaturePresent
IsDebuggerPresent
HeapFree
HeapAlloc
DecodePointer
EncodePointer
GetStringTypeW
GetTimeZoneInformation
ExitProcess
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
RaiseException
GetTempPathA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCPInfo
RtlUnwind
user32
wsprintfW
advapi32
SetSecurityDescriptorDacl
CreateWellKnownSid
GetNamedSecurityInfoW
SetNamedSecurityInfoW
FreeSid
SetEntriesInAclW
AllocateAndInitializeSid
InitializeSecurityDescriptor
shell32
SHGetPathFromIDListW
SHGetFolderPathW
SHGetFolderLocation
SHGetSpecialFolderPathW
SHCreateDirectoryExW
ole32
CoCreateInstance
OleRun
CoUninitialize
CoInitialize
StringFromGUID2
CoCreateGuid
CLSIDFromProgID
CLSIDFromString
CoTaskMemFree
oleaut32
SysFreeString
VariantInit
VariantCopy
VariantClear
SysStringLen
SysAllocString
GetErrorInfo
shlwapi
PathRemoveExtensionW
PathRemoveBackslashW
PathIsFileSpecW
PathFindFileNameW
PathStripPathW
PathRenameExtensionW
PathRemoveFileSpecW
PathIsDirectoryW
PathFileExistsW
PathAddExtensionW
PathAppendW
AAMIU_Uninstall
AAMIU_getDeploymentValidationStatus
AAMIU_preInstallPropertySet
pim_copyPkgsFromACFToCFPath
pim_createLibraryRef
pim_createLibraryRefWithType
pim_createOrUpdateAAMInventory
pim_executeInstallModifersForInstalledPackages
pim_freeLiraryRef
pim_getAppletRegistrationInfo
pim_getCurrentPIMCFPath
pim_getCurrentPackagesVersion
pim_getCurrentPathType
pim_getInstalledPackagesInfo
pim_getPathOfType
pim_getStandardACFPath
pim_getStandardUSFPath
pim_getStandardUSFTempPath
pim_getUpdateStatusAtPath
pim_getUpdateStatusAtPathCInterface
pim_haveEnoughDiskSpaceIfACFLatest
pim_haveEnoughDiskSpaceToInstallPackages
pim_haveEnoughDiskSpaceToInstallPackagesCInterface
pim_installAdobeApplicationManager
pim_installPackage
pim_postInstallPackages
pim_registerProgressTicksCallback
pim_syncFromPathToACF
pim_syncFromPathToPath
pim_syncUSFToACF
pim_uninstallAAMFromAAMCleanerTool
pim_uninstallAAMUsingAAMCleanerTool
Name
.text
Size
936KB
Virtual Size
936KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
227KB
Virtual Size
226KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
18KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
115KB
Virtual Size
114KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=199, version=41118,
count=40, id=205, version=50929,
count=79, id=207, version=50929,
count=229, id=206, version=50929,
count=6, id=207, productName=VS2012 UPD4 build 61030, version=61030,
count=217, id=1, productName=Unmarked objects,
count=21, id=185, version=30716,
count=74, id=211, version=61030,
count=1, id=202, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=201, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=151,
count=1, id=204, productName=VS2012 UPD4 build 61030, version=61030,
DE6/resources/libraries/Adobe_Helperx32.exe
- IMPHASH 439fbf994f6b0ba56021952f270747d0
- SHA256 f97bce556ba68b72acaa939d1e0790bb270b10ebef7bfc21cbdc0919f0a89870
- MD5 16cf579be82e6ef9c6a5411059c2c0af
- SHA1 9cda20ee0903527d51e7729e3d4a2693b2250181
- SHA512 09e79789e7d2d3ffe7803f0c32331b5dcbefdf1f8fe43babf7cb92afbe8695a374c770c6da91a35c60cc3c8f3e3494835daa2049b503414a484b0005696234da
- SSDEEP 49152:2MjvqdovHpY0aw5QCzbVD59YCye8kF00wNp76VKT7:Tvq2vJY0a5CzxD5mde8kF00wNAk
- TLSH T122959C32F582D07EC5330331DA4CB369A2FDB7715A3A129762E11E2D2AB14939538B77
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
78:5f:ed:24:91:4f:66:b4:66:80:39:50:42:09:04:6c:af:7d:31:5b
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Chains
Apr 22, 2014
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Serial Number
1d:37:83:b3:de:cd:5d:bb:16:e3:3c:d3:a6:b3:bf:db
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 20, 2014 - Feb 21, 2015
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
1
Major OS version
5
Entry point
1140049
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\builds\RIBS\8.0\source\build\Adobe_Helperx64\bin\windows\Release\Adobe_Helperx64.pdb
kernel32
ResumeThread
InterlockedIncrement
lstrcmpA
GlobalGetAtomNameW
FileTimeToSystemTime
EncodePointer
DecodePointer
GetSystemDirectoryW
FreeResource
GetModuleHandleA
GlobalDeleteAtom
LoadLibraryA
GlobalAddAtomW
GlobalFindAtomW
FlushFileBuffers
GetFullPathNameW
LockFile
SetEndOfFile
SetFilePointer
UnlockFile
WriteFile
DuplicateHandle
CompareStringW
GetUserDefaultUILanguage
GlobalFlags
InterlockedExchange
GetVersionExW
FileTimeToLocalFileTime
GetFileAttributesExW
GetFileSizeEx
GetFileTime
GetWindowsDirectoryW
VerSetConditionMask
VerifyVersionInfoW
GetTempFileNameW
Sleep
GetTickCount
GetProfileIntW
SearchPathW
VirtualProtect
FindResourceExW
IsDebuggerPresent
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
GetCommandLineW
RaiseException
RtlUnwind
SetThreadPriority
CreateThread
ExitThread
HeapSize
HeapQueryInformation
ExitProcess
GetModuleHandleExW
GetSystemInfo
VirtualAlloc
VirtualQuery
SetStdHandle
GetFileType
GetStdHandle
GetConsoleCP
GetConsoleMode
GetStartupInfoW
IsValidCodePage
GetOEMCP
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
GetTimeZoneInformation
GetProcessHeap
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStringTypeW
ReadConsoleW
SetFilePointerEx
OutputDebugStringW
GetDateFormatW
GetTimeFormatW
LCMapStringW
WriteConsoleW
SetEnvironmentVariableA
FormatMessageA
GetVersion
OutputDebugStringA
MulDiv
GlobalSize
FindResourceW
SizeofResource
LockResource
LoadResource
GetCurrentProcessId
InterlockedDecrement
LocalReAlloc
GlobalFree
GlobalUnlock
GlobalHandle
GlobalLock
GlobalReAlloc
GlobalAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetCurrentThreadId
HeapReAlloc
GetVolumeInformationW
lstrcpyW
lstrcmpiW
SetCurrentDirectoryW
FindClose
GetCurrentDirectoryW
lstrcmpW
GetModuleFileNameW
GetFileAttributesW
FormatMessageW
CopyFileW
FindFirstFileW
GetFileSize
SetLastError
GetLastError
CreateFileW
ReadFile
WaitForSingleObject
GetModuleHandleW
LocalFree
CloseHandle
LocalAlloc
GetCurrentProcess
GetTempPathW
MultiByteToWideChar
GetACP
WideCharToMultiByte
GetProcAddress
InitializeCriticalSectionAndSpinCount
LoadLibraryW
LoadLibraryExW
FreeLibrary
advapi32
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegOpenKeyExW
RegDeleteValueW
RegEnumKeyExW
RegSetValueExW
RegQueryValueExW
CreateWellKnownSid
SetEntriesInAclW
GetNamedSecurityInfoW
SetNamedSecurityInfoW
shell32
ShellExecuteW
SHGetSpecialFolderLocation
SHGetDesktopFolder
DragQueryFileW
DragFinish
SHBrowseForFolderW
SHAppBarMessage
SHGetPathFromIDListW
SHGetFileInfoW
ole32
IsAccelerator
OleGetClipboard
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
OleCreateMenuDescriptor
OleTranslateAccelerator
CoTaskMemAlloc
OleLockRunning
DoDragDrop
OleDestroyMenuDescriptor
CreateStreamOnHGlobal
CoInitializeEx
CoInitialize
CoUninitialize
CoCreateInstance
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
oleaut32
SysAllocStringLen
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
VariantClear
SysFreeString
VariantChangeType
SysAllocString
VarBstrFromDate
VariantInit
msimg32
TransparentBlt
AlphaBlend
shlwapi
PathRemoveFileSpecW
PathStripPathW
PathRemoveBackslashW
PathFindFileNameW
PathIsRelativeW
PathFindExtensionW
PathStripToRootW
PathIsUNCW
PathFileExistsW
StrFormatKBSizeW
uxtheme
GetThemePartSize
DrawThemeText
DrawThemeParentBackground
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
GetCurrentThemeName
IsAppThemed
IsThemeBackgroundPartiallyTransparent
GetThemeSysColor
GetWindowTheme
oleacc
LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject
gdiplus
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipDrawImageI
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipSetInterpolationMode
GdipGetImagePixelFormat
GdipAlloc
GdipFree
GdiplusStartup
GdiplusShutdown
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipDrawImageRectI
imm32
ImmGetContext
ImmGetOpenStatus
ImmReleaseContext
winmm
PlaySoundW
user32
GetAsyncKeyState
EnableScrollBar
HideCaret
InvertRect
NotifyWinEvent
CreatePopupMenu
GetMenuDefaultItem
MapVirtualKeyW
LoadMenuW
SetLayeredWindowAttributes
EnumDisplayMonitors
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
DrawStateW
DrawEdge
DrawFrameControl
SetWindowRgn
UnionRect
IsMenu
UpdateLayeredWindow
MonitorFromPoint
BringWindowToTop
LoadAcceleratorsW
TranslateAcceleratorW
InsertMenuItemW
UnpackDDElParam
ReuseDDElParam
GetKeyNameTextW
TrackMouseEvent
GetComboBoxInfo
IsZoomed
GetSystemMenu
PostThreadMessageW
WaitMessage
GetKeyboardLayout
IsCharLowerW
MapVirtualKeyExW
ToUnicodeEx
GetKeyboardState
CreateAcceleratorTableW
DestroyAcceleratorTable
CopyAcceleratorTableW
SetCursorPos
SetRect
SetParent
LockWindowUpdate
SetClassLongW
GetDoubleClickTime
CopyIcon
SetMenuDefaultItem
ModifyMenuW
RegisterClipboardFormatW
CharUpperBuffW
FrameRect
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
IsClipboardFormatAvailable
GetUpdateRect
SubtractRect
CreateMenu
MapDialogRect
DestroyCursor
GetWindowRgn
DrawIcon
DrawTextExW
DrawTextW
RealChildWindowFromPoint
GetDesktopWindow
ClientToScreen
DestroyIcon
IsDialogMessageW
SetWindowTextW
CheckDlgButton
MoveWindow
ShowWindow
GetMonitorInfoW
MonitorFromWindow
WinHelpW
DeleteMenu
SetScrollInfo
LoadIconW
MessageBeep
GetTopWindow
GetClassNameW
GetClassLongW
SetWindowLongW
PtInRect
EqualRect
CopyRect
MapWindowPoints
ScreenToClient
AdjustWindowRectEx
GetWindowRect
GetClientRect
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
UpdateWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
SetFocus
GetDlgCtrlID
GetDlgItem
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
DestroyWindow
IsChild
IsWindow
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
PostMessageW
GetMessageTime
GetMessagePos
RegisterWindowMessageW
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetFocus
GetWindowTextLengthW
GetWindowTextW
LoadCursorW
GetSysColorBrush
GetSysColor
ReleaseDC
GetDC
GetSystemMetrics
CallNextHookEx
SetWindowsHookExW
GetCursorPos
ValidateRect
GetKeyState
GetActiveWindow
IsWindowVisible
PeekMessageW
DispatchMessageW
TranslateMessage
GetMessageW
RemoveMenu
AppendMenuW
InsertMenuW
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringW
GetLastActivePopup
GetWindowThreadProcessId
GetParent
GetWindowLongW
MessageBoxW
IsWindowEnabled
EnableWindow
SendMessageW
UnhookWindowsHookEx
SetCursor
ShowOwnedPopups
IntersectRect
IsIconic
PostQuitMessage
SendDlgItemMessageA
GetIconInfo
DrawIconEx
LoadImageW
IsRectEmpty
OffsetRect
SetRectEmpty
DrawFocusRect
WindowFromPoint
ReleaseCapture
SetCapture
GetNextDlgGroupItem
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
InvalidateRect
KillTimer
GetWindow
SetTimer
CopyImage
SystemParametersInfoW
InflateRect
GetMenuItemInfoW
DestroyMenu
FillRect
EndPaint
BeginPaint
GetWindowDC
TabbedTextOutW
GetScrollInfo
GrayStringW
CharUpperW
gdi32
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateFontIndirectW
GetTextExtentPoint32W
CombineRgn
CreateRectRgnIndirect
PatBlt
SetRectRgn
DPtoLP
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
GetBkColor
GetTextMetricsW
CreateCompatibleBitmap
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
ExtTextOutW
TextOutW
CreateDCW
GetDeviceCaps
CreateBitmap
MoveToEx
SetTextColor
GetObjectW
DeleteObject
BitBlt
CreateCompatibleDC
CreateHatchBrush
CreatePen
CreatePatternBrush
CreateRectRgn
CreateSolidBrush
DeleteDC
Escape
ExcludeClipRect
GetClipBox
GetObjectType
GetPixel
GetStockObject
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectObject
SelectPalette
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetBkColor
CopyMetaFileW
GetTextFaceW
SetPixel
StretchBlt
CreateDIBSection
GetViewportOrgEx
LPtoDP
SetDIBColorTable
CreateEllipticRgn
Ellipse
GetTextColor
CreatePolygonRgn
Polygon
Polyline
Rectangle
EnumFontFamiliesExW
GetRgnBox
OffsetRgn
CreateRoundRectRgn
RoundRect
FrameRgn
PtInRegion
SetPixelV
ExtFloodFill
SetPaletteEntries
FillRgn
GetBoundsRect
GetWindowOrgEx
SetTextAlign
winspool.drv
ClosePrinter
DocumentPropertiesW
OpenPrinterW
Name
.text
Size
1.2MB
Virtual Size
1.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
308KB
Virtual Size
307KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
23KB
Virtual Size
53KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
384KB
Virtual Size
383KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=207, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=199, version=41118,
count=42, id=205, version=50929,
count=215, id=206, version=50929,
count=380, id=207, version=50929,
count=12, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=35, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=796, id=1, productName=Unmarked objects,
count=8, id=211, version=61030,
count=1, id=201, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=151,
count=1, id=204, productName=VS2012 UPD4 build 61030, version=61030,
DE6/resources/libraries/Adobe_Helperx64.exe
- IMPHASH f67ddcb58feec6ca98a664808b9fe161
- SHA256 d59b1947a812bf9b27ae9b975bc89b50df4cf99d5bed8b8f1b1278791a203bb8
- MD5 3907d997503b5321ed1f4095d673e947
- SHA1 b564ddceac1fb6284705dac6021af741b98eb0be
- SHA512 b12a31d11f51670ebe984fb4cbe002efa98d3e7948a473c78e2a8e9368911ac2d1a14e6859ddf38e1db6f4b882b0248e28c91ede6f65778e40de78d22df676cb
- SSDEEP 49152:Jx/R1da25e9k1Lic/4FQIFRgG/+Vbfs+OGrcVb3FfAS4GirajIDMzk:7MgfVzcVby5haIMY
- TLSH T1EDC57D5B6BA885E4D053D1BDC517960FDBF3B4660D30C3AF80A6069E5FB32625D2E322
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
0b:c3:f4:84:f2:94:9d:2f:ae:2a:6d:7c:e7:de:31:30:44:c7:a6:4a
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Chains
Apr 22, 2014
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Serial Number
1d:37:83:b3:de:cd:5d:bb:16:e3:3c:d3:a6:b3:bf:db
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 20, 2014 - Feb 21, 2015
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
0
Major OS version
6
Entry point
1515896
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\builds\RIBS\8.0\source\build\Adobe_Helperx64\bin\windows_x64\Release\Adobe_Helperx64.pdb
kernel32
GetCurrentThreadId
SetThreadPriority
ResumeThread
lstrcmpA
GlobalGetAtomNameW
FileTimeToSystemTime
EncodePointer
DecodePointer
GetSystemDirectoryW
ActivateActCtx
LoadLibraryExW
GlobalDeleteAtom
GlobalAddAtomW
GlobalFindAtomW
FlushFileBuffers
GetFullPathNameW
LockFile
SetEndOfFile
SetFilePointer
UnlockFile
WriteFile
DuplicateHandle
CompareStringW
GetUserDefaultUILanguage
GlobalFlags
GetVersionExW
FileTimeToLocalFileTime
GetFileAttributesExW
GetFileSizeEx
GetFileTime
GetWindowsDirectoryW
VerSetConditionMask
VerifyVersionInfoW
GetTempFileNameW
Sleep
GetTickCount
GetProfileIntW
SearchPathW
VirtualProtect
FindResourceExW
IsDebuggerPresent
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
GetCommandLineW
RtlPcToFileHeader
RaiseException
RtlLookupFunctionEntry
HeapReAlloc
CreateThread
ExitThread
HeapSize
HeapQueryInformation
ExitProcess
GetSystemInfo
VirtualAlloc
VirtualQuery
SetStdHandle
GetFileType
GetStdHandle
GetConsoleCP
GetConsoleMode
GetStartupInfoW
IsValidCodePage
GetOEMCP
GetCPInfo
RtlCaptureContext
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
GetTimeZoneInformation
GetProcessHeap
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStringTypeW
ReadConsoleW
SetFilePointerEx
OutputDebugStringW
GetDateFormatW
GetTimeFormatW
LCMapStringW
WriteConsoleW
SetEnvironmentVariableA
FormatMessageA
CreateActCtxW
GetModuleHandleExW
OutputDebugStringA
MulDiv
GlobalSize
FindResourceW
SizeofResource
LockResource
LoadResource
GetCurrentProcessId
LocalReAlloc
GlobalFree
GlobalUnlock
GlobalHandle
GlobalLock
GlobalReAlloc
GlobalAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
QueryActCtxW
FindActCtxSectionStringW
RtlUnwindEx
DeactivateActCtx
GetVolumeInformationW
lstrcpyW
lstrcmpiW
SetCurrentDirectoryW
FindClose
GetCurrentDirectoryW
lstrcmpW
GetModuleFileNameW
GetFileAttributesW
FormatMessageW
CopyFileW
FindFirstFileW
GetFileSize
SetLastError
GetLastError
CreateFileW
ReadFile
WaitForSingleObject
GetModuleHandleW
LocalFree
CloseHandle
LocalAlloc
GetCurrentProcess
GetTempPathW
MultiByteToWideChar
GetACP
WideCharToMultiByte
GetProcAddress
InitializeCriticalSectionAndSpinCount
LoadLibraryW
FreeResource
FreeLibrary
advapi32
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegOpenKeyExW
RegDeleteValueW
RegEnumKeyExW
RegSetValueExW
RegQueryValueExW
CreateWellKnownSid
SetEntriesInAclW
GetNamedSecurityInfoW
SetNamedSecurityInfoW
shell32
ShellExecuteW
SHGetSpecialFolderLocation
SHGetDesktopFolder
DragQueryFileW
DragFinish
SHBrowseForFolderW
SHAppBarMessage
SHGetPathFromIDListW
SHGetFileInfoW
ole32
IsAccelerator
OleGetClipboard
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
OleCreateMenuDescriptor
OleTranslateAccelerator
CoTaskMemAlloc
OleLockRunning
DoDragDrop
OleDestroyMenuDescriptor
CreateStreamOnHGlobal
CoInitializeEx
CoInitialize
CoUninitialize
CoCreateInstance
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
oleaut32
SysAllocStringLen
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
VariantClear
SysFreeString
VariantChangeType
SysAllocString
VarBstrFromDate
VariantInit
msimg32
TransparentBlt
AlphaBlend
shlwapi
PathRemoveFileSpecW
PathStripPathW
PathRemoveBackslashW
PathFindFileNameW
PathIsRelativeW
PathFindExtensionW
PathStripToRootW
PathIsUNCW
PathFileExistsW
StrFormatKBSizeW
uxtheme
GetThemePartSize
DrawThemeText
DrawThemeParentBackground
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
GetCurrentThemeName
IsAppThemed
IsThemeBackgroundPartiallyTransparent
GetThemeSysColor
GetWindowTheme
oleacc
LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject
gdiplus
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipDrawImageI
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipSetInterpolationMode
GdipGetImagePixelFormat
GdipAlloc
GdipFree
GdiplusStartup
GdiplusShutdown
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipDrawImageRectI
imm32
ImmGetContext
ImmGetOpenStatus
ImmReleaseContext
winmm
PlaySoundW
user32
GetIconInfo
MessageBeep
GetAsyncKeyState
EnableScrollBar
HideCaret
InvertRect
NotifyWinEvent
CreatePopupMenu
GetMenuDefaultItem
MapVirtualKeyW
LoadMenuW
SetLayeredWindowAttributes
EnumDisplayMonitors
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
DrawStateW
DrawEdge
DrawFrameControl
SetWindowRgn
UnionRect
IsMenu
UpdateLayeredWindow
MonitorFromPoint
BringWindowToTop
LoadAcceleratorsW
TranslateAcceleratorW
InsertMenuItemW
UnpackDDElParam
ReuseDDElParam
GetKeyNameTextW
TrackMouseEvent
GetComboBoxInfo
IsZoomed
GetSystemMenu
PostThreadMessageW
WaitMessage
GetKeyboardLayout
IsCharLowerW
MapVirtualKeyExW
ToUnicodeEx
GetKeyboardState
CreateAcceleratorTableW
DestroyAcceleratorTable
CopyAcceleratorTableW
SetCursorPos
SetRect
SetParent
LockWindowUpdate
SetClassLongPtrW
GetDoubleClickTime
CopyIcon
SetMenuDefaultItem
ModifyMenuW
RegisterClipboardFormatW
CharUpperBuffW
FrameRect
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
IsClipboardFormatAvailable
GetUpdateRect
SubtractRect
CreateMenu
MapDialogRect
DestroyCursor
GetWindowRgn
DrawIcon
RealChildWindowFromPoint
GetDesktopWindow
ClientToScreen
CharUpperW
DestroyIcon
SetWindowTextW
CheckDlgButton
MoveWindow
ShowWindow
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
ShowOwnedPopups
LoadIconW
GetWindow
DrawIconEx
GetClassNameW
GetClassLongPtrW
SetWindowLongPtrW
GetWindowLongPtrW
SetWindowLongW
PtInRect
EqualRect
CopyRect
MapWindowPoints
ScreenToClient
AdjustWindowRectEx
GetWindowRect
GetClientRect
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
UpdateWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
SetFocus
GetDlgCtrlID
GetDlgItem
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
DestroyWindow
IsChild
IsWindow
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
PostMessageW
GetMessageTime
GetMessagePos
RegisterWindowMessageW
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetFocus
GetWindowTextLengthW
GetWindowTextW
LoadCursorW
GetSysColorBrush
GetSysColor
ReleaseDC
GetDC
GetSystemMetrics
CallNextHookEx
SetWindowsHookExW
GetCursorPos
ValidateRect
GetKeyState
GetActiveWindow
IsWindowVisible
PeekMessageW
DispatchMessageW
TranslateMessage
GetMessageW
RemoveMenu
AppendMenuW
InsertMenuW
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringW
GetLastActivePopup
GetWindowThreadProcessId
GetParent
GetWindowLongW
MessageBoxW
IsWindowEnabled
EnableWindow
SendMessageW
UnhookWindowsHookEx
IntersectRect
IsIconic
PostQuitMessage
SendDlgItemMessageA
CopyImage
SystemParametersInfoW
LoadImageW
IsRectEmpty
OffsetRect
SetRectEmpty
DrawFocusRect
WindowFromPoint
ReleaseCapture
SetCapture
GetNextDlgGroupItem
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
InvalidateRect
KillTimer
SetTimer
DeleteMenu
GetTopWindow
SetCursor
InflateRect
GetMenuItemInfoW
DestroyMenu
FillRect
EndPaint
BeginPaint
GetWindowDC
TabbedTextOutW
GrayStringW
DrawTextExW
SetScrollInfo
DrawTextW
IsDialogMessageW
gdi32
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateFontIndirectW
GetTextExtentPoint32W
CombineRgn
CreateRectRgnIndirect
PatBlt
SetRectRgn
DPtoLP
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
GetBkColor
GetTextMetricsW
CreateCompatibleBitmap
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
ExtTextOutW
TextOutW
CreateDCW
GetDeviceCaps
CreateBitmap
MoveToEx
SetTextColor
GetObjectW
DeleteObject
BitBlt
CreateCompatibleDC
CreateHatchBrush
CreatePen
CreatePatternBrush
CreateRectRgn
CreateSolidBrush
DeleteDC
Escape
ExcludeClipRect
GetClipBox
GetObjectType
GetPixel
GetStockObject
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectObject
SelectPalette
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetBkColor
CopyMetaFileW
GetTextFaceW
SetPixel
StretchBlt
CreateDIBSection
GetViewportOrgEx
LPtoDP
SetDIBColorTable
CreateEllipticRgn
Ellipse
GetTextColor
CreatePolygonRgn
Polygon
Polyline
Rectangle
EnumFontFamiliesExW
GetRgnBox
OffsetRgn
CreateRoundRectRgn
RoundRect
FrameRgn
PtInRegion
SetPixelV
ExtFloodFill
SetPaletteEntries
FillRgn
GetBoundsRect
GetWindowOrgEx
SetTextAlign
winspool.drv
ClosePrinter
DocumentPropertiesW
OpenPrinterW
Name
.text
Size
1.6MB
Virtual Size
1.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
600KB
Virtual Size
600KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
32KB
Virtual Size
82KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
78KB
Virtual Size
77KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
170KB
Virtual Size
170KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=207, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=199, version=41118,
count=213, id=206, version=50929,
count=18, id=205, version=50929,
count=380, id=207, version=50929,
count=10, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=135, version=30729,
count=35, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=801, id=1, productName=Unmarked objects,
count=8, id=211, version=61030,
count=1, id=201, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=151,
count=1, id=204, productName=VS2012 UPD4 build 61030, version=61030,
DE6/resources/libraries/CustomHook_Helperx64.exe
- IMPHASH e1f7574f343d2db22de69a871d03bacf
- SHA256 9959e8db57915e2f4be2d0548359fca24b5971c105910d59b3329a8d3de8342d
- MD5 a2a82f33f4fcf503c3c21405413b087d
- SHA1 c9e9eaf5cf167ebd1e3105ee81d78da5ac0f5695
- SHA512 a79e7e15149471ef4a0cdf0ec93b1d477e46793ae414d78135b271131149df84ffed3d94fc83fd95e15c7337040afd5a5edb1c5c6f0c931e23e323a743b5bae0
- SSDEEP 6144:CftbNLDBUThc8LZ8MgxWT/OsNAUg0KopaN24vovRbdbegIE:CbLDBUiSB+0Ko3f
- TLSH T1AC843A09F76448E5D467C27C89668645E3B27C6A4B70AFCF22A4431E2F33AE05D3E721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
67:59:9f:ce:6f:f0:63:42:aa:d2:1b:1d:fa:bb:ba:d4:dd:e1:cc:e2
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Chains
Apr 22, 2014
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Serial Number
1d:37:83:b3:de:cd:5d:bb:16:e3:3c:d3:a6:b3:bf:db
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 20, 2014 - Feb 21, 2015
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
0
Major OS version
6
Entry point
121180
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\builds\RIBS\8.0\source\build\CustomHook_Helperx64\vc\x64\Release\CustomHook_Helperx64.pdb
shlwapi
PathStripToRootW
PathRemoveExtensionW
PathIsDirectoryW
PathIsFileSpecW
PathRemoveFileSpecW
PathAddExtensionW
PathAppendW
PathIsUNCW
PathIsRelativeW
PathStripPathW
PathRemoveBackslashW
PathRenameExtensionW
PathFileExistsW
PathFindFileNameW
kernel32
OutputDebugStringW
LoadLibraryExW
HeapReAlloc
ReadConsoleW
GetConsoleMode
WideCharToMultiByte
GetACP
MultiByteToWideChar
GetDriveTypeW
MoveFileExW
FormatMessageW
ReadFile
GetModuleFileNameW
CreateFileW
lstrcmpW
lstrlenW
GetTempPathW
GetLastError
GetCurrentDirectoryW
SetLastError
LocalAlloc
CloseHandle
DeleteFileW
GetConsoleCP
GetCurrentProcess
FreeLibrary
CreateProcessW
GetModuleHandleW
LoadLibraryW
WaitForSingleObject
GetExitCodeProcess
GetProcAddress
IsProcessorFeaturePresent
CreateEventA
SetEvent
GetCommandLineW
QueryPerformanceCounter
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
SetFilePointer
WriteFile
GetFileSizeEx
GetCurrentThreadId
GetDateFormatW
GetTimeFormatW
GetLocalTime
CreateMutexW
OpenMutexW
ReleaseMutex
FreeEnvironmentStringsW
SetFilePointerEx
SetStdHandle
SetEndOfFile
FlushFileBuffers
WriteConsoleW
SetEnvironmentVariableA
FormatMessageA
LocalFree
GetEnvironmentStringsW
GetCurrentProcessId
GetOEMCP
IsValidCodePage
GetProcessHeap
GetFileType
GetStdHandle
HeapSize
GetModuleHandleExW
ExitProcess
EnumSystemLocalesW
GetUserDefaultLCID
GetStringTypeW
EncodePointer
DecodePointer
Sleep
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
IsDebuggerPresent
GetFullPathNameW
GetFileAttributesExW
GetTimeZoneInformation
RtlPcToFileHeader
RaiseException
RtlLookupFunctionEntry
RtlUnwindEx
GetCPInfo
InitializeCriticalSectionAndSpinCount
RtlCaptureContext
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
advapi32
SetEntriesInAclW
GetNamedSecurityInfoW
SetNamedSecurityInfoW
CreateWellKnownSid
shell32
SHGetFolderPathW
SHGetPathFromIDListW
SHGetFolderLocation
CommandLineToArgvW
SHCreateDirectoryExW
ole32
CoTaskMemFree
Name
.text
Size
237KB
Virtual Size
236KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
91KB
Virtual Size
90KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
11KB
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=207, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=199, version=41118,
count=10, id=205, version=50929,
count=72, id=207, version=50929,
count=242, id=206, version=50929,
count=15, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=176, id=1, productName=Unmarked objects,
count=20, id=211, version=61030,
count=1, id=201, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=151,
count=1, id=204, productName=VS2012 UPD4 build 61030, version=61030,
DE6/resources/libraries/EventMessages.dll
- SHA256 381b6530ee2e60255e40b46b235ab4ca416dc5a517524a565ee6b242b83c8a17
- MD5 ebd9f5c88089e0b3394de8bd11313164
- SHA1 aeb4a3a06a78e1a107fc0ec99efba3189d430214
- SHA512 af55774cfd4009afc6852596282c6b0fcc8e8625b7803c4e6f6f39cc3be5a5af5be809ec0923e5d127744b27bcb4b77c3dc1b86f6c25bd2a483095093735a0be
- SSDEEP 192:mnYe+PjPrrAOP3BK/Vzr9ZCspE+TMorig74ze:mnYPLo9deeM2ye
- TLSH T1CCF1E9C71B346862DDCA8E70D2D7D93BAD31B3916FC4A4A650B980D02EC6FB03B5540E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
fc:9a:a6:1c:d0:93:88:21:2f:b6:8e:da:87:da:58:32:cc:dd:c1:3b
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Chains
Apr 22, 2014
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Serial Number
1d:37:83:b3:de:cd:5d:bb:16:e3:3c:d3:a6:b3:bf:db
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 20, 2014 - Feb 21, 2015
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
0
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
512B
Virtual Size
128B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=201, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=204, productName=VS2012 UPD4 build 61030, version=61030,
DE6/resources/libraries/TokenResolverx64.exe
- IMPHASH 8e199d0ba77d88fec5d971be6478a5c2
- SHA256 2949826944d7d70c06fb5893d836f7e319670c7a5def130302a9b1193781d094
- MD5 5ab433b5d097437d9a424dad62a84198
- SHA1 4a6342573b4f3ab0e3207c65438ddddc28aba9a1
- SHA512 4c19829e451e723e077f0602401ec6c3dd002176618eb6a7a40ac133ef3998e9409cb715c74e51cc534dabe8f0082f0f2d3b9a0ac7c92d0f9a48fddb7a5b3af5
- SSDEEP 1536:Oy93MbZFTTwnFA2kZ7mcNmEt8sQsWtedPV+ViNS15GZ/p:OyZIFTEnFA2kZ7Pdz9+VySyZ/p
- TLSH T14EB34B9B33E530F9E0B7C678C9A24945D772F87546719B8F5364028A1F632D09E3AB32
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
9a:8f:c6:19:08:20:07:66:d7:ed:63:4d:4a:93:47:4e:1e:c6:f6:de
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Chains
Apr 22, 2014
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Serial Number
1d:37:83:b3:de:cd:5d:bb:16:e3:3c:d3:a6:b3:bf:db
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 20, 2014 - Feb 21, 2015
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
2
Major OS version
5
Entry point
11812
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\builds\RIBS\8.0\source\build\TokenResolver\vc\x64\Release\TokenResolver.pdb
kernel32
WriteFile
CreateFileW
GetLastError
CloseHandle
WideCharToMultiByte
GetACP
MultiByteToWideChar
WriteConsoleW
SetStdHandle
GetStringTypeW
LCMapStringW
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
GetProcAddress
GetCommandLineW
IsDebuggerPresent
IsProcessorFeaturePresent
HeapSize
Sleep
RtlUnwindEx
GetStdHandle
GetModuleFileNameW
HeapFree
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
LoadLibraryExW
IsValidCodePage
GetOEMCP
GetCPInfo
HeapAlloc
RtlPcToFileHeader
RaiseException
GetCurrentThreadId
GetProcessHeap
GetFileType
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapReAlloc
GetConsoleCP
GetConsoleMode
SetFilePointerEx
OutputDebugStringW
LoadLibraryW
FlushFileBuffers
shell32
SHGetFolderPathW
SHGetPathFromIDListW
SHGetFolderLocation
ole32
CoTaskMemFree
Name
.text
Size
46KB
Virtual Size
46KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
37KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=41, id=207, version=50929,
count=95, id=206, version=50929,
count=9, id=205, version=50929,
count=9, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=84, id=1, productName=Unmarked objects,
count=3, id=211, version=61030,
count=1, id=201, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=151,
count=1, id=204, productName=VS2012 UPD4 build 61030, version=61030,
DE6/resources/libraries/adobeFileVersioner.dll
- IMPHASH c31e39c26cb35baa1c1d95d9983dcdea
- SHA256 ceaa749128156b5d138873a5f005a03ecf89330eb135674d8a06d6ceec99518a
- MD5 3fc1baafcbffcecb741cadb04e112f8a
- SHA1 7482ad8649c4a4bf18f15395450838124f09bb62
- SHA512 b46ce03b3ceb8cc27f25d83d887903375058ffdef2c4516dccf9a6f0a0c8c5a078cd29fc1dd460463874afe696b452c915cdf4d9c08a63167a9a2d987c2b6829
- SSDEEP 6144:fTJ9A4mJKteONUOf7fDkIyq1E7URqkH8rOA:fT3tzNU6XP1E7Ug/rOA
- TLSH T16A447BA03680C539EDDE02B1997CAA5E40EDAEA24FB4C4C7E3D81E4D5D725C21B31767
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
b4:32:84:eb:5b:4b:05:e3:f5:f2:6a:4f:5c:5f:45:32:a3:5c:86:22
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Chains
Apr 22, 2014
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Serial Number
1d:37:83:b3:de:cd:5d:bb:16:e3:3c:d3:a6:b3:bf:db
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 20, 2014 - Feb 21, 2015
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
1
Major OS version
5
Entry point
141743
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
CreateFileW
GetFileSize
ReadFile
CloseHandle
MultiByteToWideChar
WideCharToMultiByte
GetACP
Sleep
InterlockedExchange
InterlockedCompareExchange
FreeLibrary
LoadLibraryA
LCMapStringW
LCMapStringA
GetUserDefaultLCID
GetStringTypeExA
WriteConsoleW
SetStdHandle
SetFilePointerEx
GetConsoleMode
GetConsoleCP
HeapReAlloc
EncodePointer
DecodePointer
RaiseException
RtlUnwind
GetCommandLineA
GetCurrentThreadId
GetStdHandle
WriteFile
GetModuleFileNameW
IsProcessorFeaturePresent
GetLastError
HeapAlloc
HeapFree
InterlockedDecrement
ExitProcess
GetModuleHandleExW
GetProcAddress
HeapSize
IsDebuggerPresent
SetLastError
InterlockedIncrement
IsValidCodePage
GetOEMCP
GetCPInfo
GetStringTypeW
GetProcessHeap
GetFileType
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
OutputDebugStringW
LoadLibraryExW
LoadLibraryW
EnterCriticalSection
LeaveCriticalSection
FlushFileBuffers
user32
LoadStringA
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
AFV_CompareFiles
AFV_CompareVersions
AFV_GetFileVersion
Name
.text
Size
181KB
Virtual Size
181KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
46KB
Virtual Size
45KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
27KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=17, id=205, version=50929,
count=115, id=206, version=50929,
count=50, id=207, version=50929,
count=97, id=1, productName=Unmarked objects,
count=7, id=185, version=30716,
count=27, id=207, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=202, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=201, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=151,
count=1, id=204, productName=VS2012 UPD4 build 61030, version=61030,
DE6/resources/libraries/patchw32.dll
- IMPHASH 8f296cd7497fd33e575100bd64339788
- SHA256 d8f7aa32b779ed7d8023fec951e7250f94f119a0ea4104f03285b7348c2312a7
- MD5 bece436a1cad7464258d3a3d81ca27a3
- SHA1 7504ecae3f9ba7d96c91bc102c2fd98b8d6f8475
- SHA512 70c0db78cec2428f7fedb13a2b3b96af260f9eb3cfd0f2444b41f0b49906f65cf4a17abdef32b246e5e71d8592b88daf3b2e6b4606a55ba9e9d055e037889575
- SSDEEP 6144:1B+qvXHzno7F9/wLssXxWYlrAOYg+s9k8LaVkr35VnEBUrj:1w0To7FFnsXxVlrA4JLaVkr35ZoCj
- TLSH T137347D82F9D481F0D4D82AF430362B766E77F90472B9C696DBC01C395CB7B119918B6E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
88:9b:f5:c9:cc:56:3e:e8:f5:54:f4:81:84:ac:59:0a:08:e8:75:8f
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Chains
Apr 22, 2014
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Serial Number
1d:37:83:b3:de:cd:5d:bb:16:e3:3c:d3:a6:b3:bf:db
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 20, 2014 - Feb 21, 2015
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
0
Major OS version
1
Entry point
142432
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
user32
wsprintfA
DdeInitializeA
DispatchMessageA
OemToCharA
PeekMessageA
DdeUninitialize
TranslateMessage
CharToOemA
DdeCreateDataHandle
DdeDisconnect
DdeClientTransaction
DdeCreateStringHandleA
DdeFreeStringHandle
DdeConnect
LoadStringA
wvsprintfA
advapi32
RegCloseKey
RegQueryInfoKeyA
RegEnumValueA
RegEnumKeyA
RegEnumValueW
RegSetValueExW
RegEnumKeyW
RegDeleteValueA
RegDeleteValueW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegDeleteKeyA
RegDeleteKeyW
RegEnumKeyExA
SetFileSecurityW
GetFileSecurityW
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
FreeSid
AccessCheck
IsValidSecurityDescriptor
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
AddAccessAllowedAce
InitializeAcl
GetLengthSid
InitializeSecurityDescriptor
AllocateAndInitializeSid
DuplicateToken
OpenProcessToken
OpenThreadToken
ole32
CoUninitialize
CoInitialize
version
GetFileVersionInfoSizeW
GetFileVersionInfoA
GetFileVersionInfoW
GetFileVersionInfoSizeA
VerQueryValueA
kernel32
ReleaseMutex
GetPrivateProfileSectionA
GetProfileStringA
GetDiskFreeSpaceA
VirtualAlloc
GetSystemDirectoryA
FlushFileBuffers
CreateDirectoryA
VirtualFree
DeleteFileW
GetFileType
MoveFileW
GetDriveTypeW
GetCommandLineA
SetStdHandle
ExitProcess
GetCurrentProcessId
GetCPInfo
GetOEMCP
GetACP
GetTimeZoneInformation
GetStartupInfoA
GlobalFree
GlobalAlloc
MulDiv
GetVersion
FreeLibrary
GetDriveTypeA
GetProcAddress
LoadLibraryA
SetEndOfFile
SetFilePointer
CloseHandle
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetFileSize
CreateFileA
GetWindowsDirectoryA
GetShortPathNameA
GetFullPathNameA
MoveFileExW
MoveFileExA
CopyFileA
GetFileAttributesA
GetModuleFileNameA
MoveFileA
SetEnvironmentVariableA
GetTempPathA
SetErrorMode
CreateMutexA
SetFileApisToANSI
CreateFileW
AreFileApisANSI
WaitForSingleObject
LocalFree
LocalAlloc
GetCurrentProcess
GetLastError
GetCurrentThread
WriteFile
lstrlenA
ReadFile
SetNamedPipeHandleState
WaitNamedPipeA
GetLocalTime
SetCurrentDirectoryW
GetEnvironmentStrings
WideCharToMultiByte
GetProfileSectionA
FindNextFileW
FindClose
GetPrivateProfileStringA
GetSystemTime
DeleteFileA
SetFileAttributesA
WriteProfileStringA
WriteProfileSectionA
WritePrivateProfileStringA
WritePrivateProfileSectionA
WriteProfileStringW
WritePrivateProfileStringW
CopyFileW
GetExitCodeProcess
CreateProcessA
lstrcmpiA
SystemTimeToFileTime
GetSystemInfo
LockResource
LoadResource
FindResourceA
SetFileApisToOEM
MultiByteToWideChar
GetVolumeInformationA
SetEnvironmentVariableW
GetCurrentDirectoryW
FindFirstFileW
FindFirstFileA
FindNextFileA
FileTimeToSystemTime
FileTimeToLocalFileTime
LocalFileTimeToFileTime
GetModuleHandleA
SetFileAttributesW
SetFileTime
GetFileAttributesW
GetShortPathNameW
GetFullPathNameW
GetStdHandle
RaiseException
RemoveDirectoryW
RemoveDirectoryA
GetCurrentDirectoryA
SetCurrentDirectoryA
RtlUnwind
CreateDirectoryW
GetLogicalDrives
RTPBatSvr
RTPRegSvr
RTPRenSvr
RTPatchApply32@12
RTPatchApply32NoCall
RTPatchEnumPatches@12
RTPatchGetCost@24
RTPatchSetAttribGet@8
RTPatchSetAttribSet@8
RTPatchSetCreate@8
RTPatchSetDelete@8
RTPatchSetDirWalk@8
RTPatchSetOpen@8
RTPatchSetRename@8
Name
.text
Size
173KB
Virtual Size
173KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
35KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
296B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
440B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
13KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
DE6/resources/libraries/updaterinventory.dll
- IMPHASH bad3015008dc3e428fc873c464835fbd
- SHA256 5c39b46809e5d7a3eed9102d6863dff7f6fe9e26010f9f84e94a9838c0826b96
- MD5 43b9b277bfbd5f5159bf9d033abccc69
- SHA1 17301a2eb7f99ed7bd5455276a7c8a9a76295bba
- SHA512 b8414e8084cbe202909ada8626d9ee883b97dd21b0cb4e0de26f1571c2fb69e3444a362884a54148a874eff52100342e890b89924666335fbf75af2cb32d0e86
- SSDEEP 6144:oO1SJIndl6FIJ+Ki+vBRcOS6yWjzOR2IKLA4ZxA/4HR21AwUt:oO1SJWQsc16njzOgn84ZxAig1xUt
- TLSH T175A4AD11B9C1C071E86E02B0722DAB2605BDBDB14B698AD7E3D8AD4F1F726C15B31B17
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
bd:68:cb:48:b8:25:1d:f3:46:e4:b7:a3:86:fd:7d:63:d5:e8:d2:b9
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Chains
Apr 22, 2014
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Serial Number
1d:37:83:b3:de:cd:5d:bb:16:e3:3c:d3:a6:b3:bf:db
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 20, 2014 - Feb 21, 2015
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
1
Major OS version
5
Entry point
109034
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\P4\garuda_1970\oobe\8.0\dev\updater\build\updaterinventory\vc\outdir-Release\updaterinventory.pdb
kernel32
EncodePointer
DecodePointer
GetSystemTimeAsFileTime
GetCommandLineA
GetCurrentThreadId
IsDebuggerPresent
IsProcessorFeaturePresent
ExitProcess
GetModuleHandleExW
GetProcAddress
HeapSize
Sleep
GetStdHandle
WriteFile
GetModuleFileNameW
RaiseException
InterlockedIncrement
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetLastError
GetTimeZoneInformation
WideCharToMultiByte
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
EnterCriticalSection
LeaveCriticalSection
LoadLibraryExW
MultiByteToWideChar
HeapReAlloc
RtlUnwind
OutputDebugStringW
LoadLibraryW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetStringTypeW
GetConsoleCP
GetConsoleMode
SetFilePointerEx
SetStdHandle
WriteConsoleW
FlushFileBuffers
CreateFileW
SetEnvironmentVariableA
GetLongPathNameW
GetTempPathW
LocalFree
CreateDirectoryW
RemoveDirectoryW
SetFileAttributesW
DeleteFileW
CopyFileW
MoveFileW
GetVersionExW
SetFilePointer
SetEndOfFile
ReadConsoleW
LocalAlloc
GetLastError
GetProcessHeap
HeapFree
HeapAlloc
CreateThread
GetExitCodeThread
InitializeCriticalSectionAndSpinCount
TerminateThread
WaitForSingleObject
InterlockedDecrement
CloseHandle
FindNextFileW
FindClose
GetCurrentProcess
FindFirstFileW
ReadFile
advapi32
SetNamedSecurityInfoW
CreateWellKnownSid
GetSecurityDescriptorDacl
RegOpenKeyExW
RegSetKeySecurity
SetEntriesInAclW
RegDeleteValueW
RegGetKeySecurity
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegQueryValueExW
RegSetValueExW
RegCloseKey
RegCreateKeyExW
shell32
SHFileOperationW
SHGetSpecialFolderLocation
SHGetMalloc
SHGetPathFromIDListW
ole32
CoInitializeSecurity
CoTaskMemFree
CoInitializeEx
CoUninitialize
CoCreateInstance
CoInitialize
oleaut32
VariantInit
VariantClear
SysAllocString
SysFreeString
shlwapi
PathIsFileSpecW
PathFileExistsW
PathIsDirectoryW
PathRemoveFileSpecW
UpdaterInventoryAddToMCL
UpdaterInventoryAddToMCLWithIcon
UpdaterInventoryGetLibVersion
UpdaterInventoryIsHigherUpdatePresent
UpdaterInventoryRelease
UpdaterInventoryRemoveFromMCL
UpdaterInventorySuppressUpdates
Name
.text
Size
300KB
Virtual Size
299KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
65KB
Virtual Size
65KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
9KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
73KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=19, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=186, id=1, productName=Unmarked objects,
count=3, id=206, productName=VS2012 UPD4 build 61030, version=61030,
count=11, id=207, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=199, version=41118,
count=75, id=207, version=50929,
count=29, id=205, version=50929,
count=214, id=206, version=50929,
count=15, id=211, version=61030,
count=1, id=202, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=201, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=151,
count=1, id=204, productName=VS2012 UPD4 build 61030, version=61030,
DE6/resources/uninstall/Uninstall.db
- SHA256 f40f0c31f4c9c46e73154b4a53e52259874270c1bf99a672bb3103be1baf09e8
- MD5 fb12635a53615a05ad7d96fc663b6bdd
- SHA1 780a92361b39546b03cf98ae9e5e4ed15523b5f3
- SHA512 5fe3ffc32a5fc133c713f9b6206a70316c3e068a2405f2cd4fdf0b34654be70041b80dbeaa9f454ea28f4bf04cda2d2a598d82a821552acb8200971a561be7db
- SSDEEP 768:TOUTP61NQUQRGVUZOEWGpg6hRRU8Qd4qRPAnBeKPTvG5MzFV1ASj:2JMz
- TLSH T16D638CCF5F1A3212C5E14131DAD203E36C3C565EA77A66D03AA211F2BEA20B775715F8
- MD5 SHA1 SHA512 SSDEEP TLSH
PlatformUtil.exe
- IMPHASH 7fb64253751cf3b9f4074f344eb13385
- SHA256 0bb74165565a1364397c5faa880fc2fcde118317d4f99de8b3533e5ed452bf4b
- MD5 0f89e635468c55c171914a4f10d487f1
- SHA1 b200c875f5e9e3d172c38db061d658ca33ae1c7d
- SHA512 171bb4d90592a353b1de5e98e523bd52cc5bbaba1d78c766d7ee76d1e34cf8238f555d8c412ff49883f8f007aee5496038ef228e907bb9481e5676f7acea08b8
- SSDEEP 384:Pe9XXlYs1ro22NjuqQmaCimaP9E4owMpvG/h5acnYPLo9deeMCJiy:olnrozNjuIaCjaPN+pvG/jnJLJn
- TLSH T110D25D137A9A4672E886D6B019B1D32A54F7FD722F2461DBE291426D1FA4BD01F3320F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
18:22:ac:aa:28:6b:eb:78:d5:79:21:7f:9e:d8:00:73:97:f3:31:47
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Chains
Apr 22, 2014
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Serial Number
1d:37:83:b3:de:cd:5d:bb:16:e3:3c:d3:a6:b3:bf:db
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 20, 2014 - Feb 21, 2015
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
1
Major OS version
5
Entry point
12820
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\builds\RIBS\8.0\source\build\PlatformUtil\vc\Release\PlatformUtil.pdb
kernel32
GetCommandLineW
FreeConsole
GetConsoleWindow
GetStdHandle
AttachConsole
LocalFree
lstrlenW
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
IsDebuggerPresent
DecodePointer
EncodePointer
GetCurrentThreadId
user32
SendMessageW
shell32
CommandLineToArgvW
msvcp110
?_BADOFF@std@@3_JB
?id@?$codecvt@_WDH@std@@2V0locale@2@A
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
??_7?$basic_ostream@_WU?$char_traits@_W@std@@@std@@6B@
?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXXZ
?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W00@Z
?getloc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QBE?AVlocale@2@XZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
?clear@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?write@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@PB_W_J@Z
?_Add_vtordisp2@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAEXXZ
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?_Add_vtordisp1@?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAEXXZ
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?_Getcat@?$codecvt@_WDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?unshift@?$codecvt@_WDH@std@@QBEHAAHPAD1AAPAD@Z
?out@?$codecvt@_WDH@std@@QBEHAAHPB_W1AAPB_WPAD3AAPAD@Z
?in@?$codecvt@_WDH@std@@QBEHAAHPBD1AAPBDPA_W3AAPA_W@Z
?always_noconv@codecvt_base@std@@QBE_NXZ
??Bid@locale@std@@QAEIXZ
?_Xlength_error@std@@YAXPBD@Z
?_Syserror_map@std@@YAPBDH@Z
?_Xbad_alloc@std@@YAXXZ
?_Winerror_map@std@@YAPBDH@Z
?_Xout_of_range@std@@YAXPBD@Z
mpr
WNetGetUniversalNameW
msvcr110
_purecall
??3@YAXPAX@Z
_open_osfhandle
??2@YAPAXI@Z
_fdopen
wprintf
??0bad_cast@std@@QAE@PBD@Z
??0bad_cast@std@@QAE@ABV01@@Z
??0exception@std@@QAE@ABV01@@Z
fputwc
_unlock_file
ungetwc
ungetc
fgetpos
_fseeki64
fflush
fgetc
fsetpos
wcsstr
_lock_file
fgetwc
memcpy_s
fwrite
wcsncmp
_vsnwprintf_s
fclose
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
??1type_info@@UAE@XZ
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
_XcptFilter
__crtGetShowWindowMode
_amsg_exit
__wgetmainargs
__set_app_type
exit
_exit
_cexit
_configthreadlocale
__setusermatherr
_initterm_e
_initterm
_wcmdln
_fmode
_commode
_except_handler4_common
?terminate@@YAXXZ
__crtSetUnhandledExceptionFilter
_invoke_watson
_controlfp_s
__iob_func
memmove
??1bad_cast@std@@UAE@XZ
_CxxThrowException
__CxxFrameHandler3
memcpy
setvbuf
Name
.text
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=205, version=50929,
count=19, id=206, version=50929,
count=4, id=203, version=50929,
count=5, id=207, version=50929,
count=127, id=1, productName=Unmarked objects,
count=9, id=185, version=30716,
count=4, id=211, version=61030,
count=1, id=201, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=151,
count=1, id=204, productName=VS2012 UPD4 build 61030, version=61030,
Setup.exe
- IMPHASH 5a555336dc1b94aec42bf4abff26a676
- SHA256 8eb222feece9667f82a7c8f460c6209fd171ca9b76051170a563f54d0e3235cd
- MD5 6a602860a7ce108190e42d6808fe2b63
- SHA1 f9fec936e4adb6f9befe15c1bd7e83adeca2375c
- SHA512 0bcb029823714565c003f3bc8e6f1c55336de4857a90dc93ad60509d443450a8eacaafefccc6b58482e65beb578c3d1ac3f0ba0f82d4109645c1f0d6591727ee
- SSDEEP 12288:IOAsUYLs2TUNI3IyeQsgLDdYpWorwOW9xFTxfdwIsTMGeIdi4/+:/jUNILeQsgLxYQorwOuvsTMad9/+
- TLSH T173D4BE127613E036C8A191F05ABC9F52987DBC350B2B44DBA3C46E995D708D17F3A3AB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
ba:3f:20:87:0c:05:d2:e0:ad:95:d2:03:3b:dc:da:61:13:ae:b5:06
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Chains
Apr 22, 2014
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Serial Number
1d:37:83:b3:de:cd:5d:bb:16:e3:3c:d3:a6:b3:bf:db
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 20, 2014 - Feb 21, 2015
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
1
Major OS version
5
Entry point
385042
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\builds\RIBS\8.0\source\build\Setup\vc\Release\Setup.pdb
mpr
WNetAddConnection2W
WNetCancelConnection2W
msvcp110
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
?_Add_vtordisp2@?$basic_ostream@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Add_vtordisp1@?$basic_ios@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Orphan_all@_Container_base0@std@@QAEXXZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W00@Z
?_Add_vtordisp2@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?id@?$codecvt@_WDH@std@@2V0locale@2@A
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXXZ
?getloc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QBE?AVlocale@2@XZ
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
?getline@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@PA_W_J@Z
?_Add_vtordisp1@?$basic_istream@_WU?$char_traits@_W@std@@@std@@UAEXXZ
??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?_Add_vtordisp2@?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Getcat@?$codecvt@_WDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?unshift@?$codecvt@_WDH@std@@QBEHAAHPAD1AAPAD@Z
?out@?$codecvt@_WDH@std@@QBEHAAHPB_W1AAPB_WPAD3AAPAD@Z
?in@?$codecvt@_WDH@std@@QBEHAAHPBD1AAPBDPA_W3AAPA_W@Z
?always_noconv@codecvt_base@std@@QBE_NXZ
??Bid@locale@std@@QAEIXZ
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@K@Z
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
?_Winerror_map@std@@YAPBDH@Z
?_Syserror_map@std@@YAPBDH@Z
?_BADOFF@std@@3_JB
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?uncaught_exception@std@@YA_NXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
msvcr110
wcscpy_s
_open
_time64
srand
rand
memchr
_wsplitpath_s
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
swprintf_s
??_V@YAXPAX@Z
free
wcsncpy_s
??2@YAPAXI@Z
??3@YAXPAX@Z
_purecall
memmove
_write
_controlfp_s
_invoke_watson
__crtSetUnhandledExceptionFilter
_except_handler4_common
_vsnprintf_s
__crtTerminateProcess
__crtUnhandledException
_crt_debugger_hook
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_onexit
__dllonexit
_calloc_crt
_unlock
_lock
_commode
_fmode
_wcmdln
_initterm
_initterm_e
__setusermatherr
_configthreadlocale
_cexit
_exit
exit
__set_app_type
__wgetmainargs
_amsg_exit
__crtGetShowWindowMode
_XcptFilter
_ftime64_s
_wrename
wcsftime
wcstombs
_wopen
_lseeki64
sprintf
_errno
strerror
_close
strncpy_s
wcsncat_s
_waccess_s
_wfullpath
calloc
_wgetcwd
strncmp
realloc
wcslen
strstr
__CxxFrameHandler3
_CxxThrowException
fread
strlen
strcmp
strcpy
memset
memcmp
memcpy
fwrite
memcpy_s
fgetwc
_lock_file
fsetpos
fgetc
fflush
_fseeki64
fgetpos
ungetc
ungetwc
_unlock_file
fputwc
??0bad_cast@std@@QAE@ABV01@@Z
??0bad_cast@std@@QAE@PBD@Z
??1bad_cast@std@@UAE@XZ
_fdopen
_open_osfhandle
setvbuf
__iob_func
_vsnwprintf_s
_localtime64_s
fclose
atoi
_wfopen_s
fgetws
malloc
mfc110u
ord12760
ord10278
ord12085
ord8230
ord989
ord6723
ord2154
ord3794
ord5789
ord12077
ord10224
ord7505
ord2432
ord12374
ord12375
ord12697
ord7770
ord14415
ord9248
ord4093
ord4031
ord12779
ord7789
ord1985
ord11820
ord11821
ord14287
ord12364
ord7847
ord14487
ord6218
ord14489
ord6220
ord4528
ord7844
ord8169
ord14409
ord5233
ord2194
ord8314
ord9059
ord10095
ord8062
ord12089
ord12057
ord2254
ord8064
ord5285
ord7563
ord7572
ord5109
ord5287
ord5131
ord5638
ord5401
ord9200
ord5635
ord5425
ord5128
ord14488
ord6219
ord1463
ord13732
ord2335
ord2331
ord7573
ord2355
kernel32
FlushFileBuffers
AttachConsole
GetStdHandle
FreeConsole
SetDllDirectoryW
GetCommandLineW
SetEvent
CreateEventA
InterlockedDecrement
GetFileSizeEx
GetVersionExW
GetCurrentThread
IsProcessorFeaturePresent
GetExitCodeProcess
LoadLibraryW
OpenProcess
WaitForSingleObject
GetCurrentProcess
CreateProcessW
FreeLibrary
lstrcpyW
SetFileAttributesW
LocalFree
DeleteFileW
CloseHandle
lstrcmpiW
LocalAlloc
SetLastError
GetCurrentDirectoryW
GetLastError
GetTempPathW
lstrlenW
CreateFileW
GetModuleFileNameW
ReadFile
GetFileAttributesW
GetFileSize
DeleteCriticalSection
GetProcAddress
MultiByteToWideChar
GetACP
WideCharToMultiByte
GetModuleHandleW
AreFileApisANSI
GetDateFormatW
GetTimeFormatW
GetLocalTime
CreateMutexW
OpenMutexW
ReleaseMutex
EncodePointer
DecodePointer
IsDebuggerPresent
CreateFileA
DeleteFileA
GetDiskFreeSpaceA
GetDiskFreeSpaceW
GetFileAttributesA
GetFullPathNameA
GetFullPathNameW
LockFile
LockFileEx
SetEndOfFile
SetFilePointer
UnlockFile
WriteFile
QueryPerformanceCounter
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
Sleep
InterlockedIncrement
GetCurrentProcessId
GetCurrentThreadId
GetSystemTime
GetSystemTimeAsFileTime
GetTickCount
GetVersionExA
FormatMessageA
LoadLibraryA
GetTempPathA
user32
FindWindowW
GetWindowThreadProcessId
advapi32
OpenProcessToken
GetLengthSid
IsValidSecurityDescriptor
RevertToSelf
AddAccessAllowedAce
SetSecurityDescriptorOwner
InitializeAcl
ImpersonateSelf
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
AccessCheck
SetSecurityDescriptorGroup
OpenThreadToken
SetEntriesInAclW
GetNamedSecurityInfoW
SetNamedSecurityInfoW
CheckTokenMembership
FreeSid
AllocateAndInitializeSid
DuplicateTokenEx
CreateWellKnownSid
shell32
SHGetFolderLocation
CommandLineToArgvW
SHGetPathFromIDListW
SHGetFolderPathW
SHCreateDirectoryExW
ord75
comctl32
InitCommonControlsEx
shlwapi
PathRemoveExtensionW
PathMakePrettyW
PathStripToRootW
PathIsRelativeW
PathFindFileNameW
PathFileExistsW
PathRenameExtensionW
PathRemoveBackslashW
PathAddExtensionW
PathIsFileSpecW
PathIsDirectoryW
PathIsUNCW
PathAppendW
PathRemoveFileSpecW
PathStripPathW
atl110
ord31
ole32
OleInitialize
CLSIDFromProgID
CoCreateInstance
CoTaskMemFree
OleUninitialize
oleaut32
SysFreeString
SysAllocString
VariantClear
VariantInit
SysStringLen
Name
.text
Size
421KB
Virtual Size
421KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
98KB
Virtual Size
97KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
10KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
34KB
Virtual Size
34KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
35KB
Virtual Size
34KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, id=199, version=41118,
count=14, id=205, version=50929,
count=21, id=206, version=50929,
count=8, id=203, version=50929,
count=548, id=1, productName=Unmarked objects,
count=27, id=185, version=30716,
count=14, id=207, version=50929,
count=1, id=206, productName=VS2012 UPD4 build 61030, version=61030,
count=6, id=207, productName=VS2012 UPD4 build 61030, version=61030,
count=44, id=211, version=61030,
count=1, id=201, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=204, productName=VS2012 UPD4 build 61030, version=61030,
atl110.dll
- IMPHASH e4a6b094cdcc4132831ddfe978d2211d
- SHA256 c7e81fce9d5f071361774f3755690a8cfefdcff714bc1debdb35066f64bccce0
- MD5 315d47153122903c52051b7027988f85
- SHA1 7e6d2d68dabf9d08ca347adb4b811abc43661e6f
- SHA512 1f1f0cd46e0be455900f5a57d85cd698b5e7eaf4092ae115b12688566516f7dd1834db008ebd44beef2abcdf6b46ac727539666ff192bfcf6b7295335cfedbb6
- SSDEEP 3072:GlZdGcL1pRgH9DQ7hFa6OMlk2AhuchQd040wKDjpSQVeu+8Kj:GlvLnRgdEhFv4ACQV0wKD7cj
- TLSH T1F2F37D01F3D4D071D16B02315B67B75267BD7E724EF8DE4A2B982E4E1DB02C0A629B63
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
97:54:2e:d7:a6:5f:6f:74:17:2b:38:4c:9c:dd:e3:f6:1f:61:2a:fe:31:ba:cd:a0:bd:f7:34:4c:ab:c9:73:ff
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 10, 2013
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
7a:69:2f:70:d3:1f:9a:64:12:1b:ca:7b:5a:89:c2:0b:56:ae:e5:39
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 10, 2013
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:B8EC-30A4-7144,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:34:24:31:40:c9:a0:c1:79:8d:00:00:00:00:00:34
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 27, 2013 - Jun 27, 2014
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:b0:11:af:0a:8b:d0:3b:9f:dd:00:01:00:00:00:b0
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jan 24, 2013 - Apr 24, 2014
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:08:e2:79:fa:0d:25:58:45:ea:00:00:00:00:00:08
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 7, 2012 - Oct 7, 2013
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:C0F4-3086-DEF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:28:90:67:b9:04:b0:3c:6e:66:00:00:00:00:00:28
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 27, 2013 - Jun 27, 2014
Minor OS version
0
Major OS version
6
Entry point
77054
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
atl110.i386.pdb
kernel32
CreateFileW
GetFileSize
ReadFile
CloseHandle
RaiseException
GetLastError
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
DisableThreadLibraryCalls
FreeLibrary
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
LoadLibraryExW
LoadResource
SizeofResource
lstrcmpiW
FindResourceW
MultiByteToWideChar
EncodePointer
DecodePointer
SetLastError
WaitForSingleObject
GetCurrentProcess
GetCurrentThreadId
FlushInstructionCache
LockResource
GlobalAlloc
GlobalLock
GlobalHandle
GlobalUnlock
GlobalFree
MulDiv
lstrcmpW
FindResourceA
WideCharToMultiByte
InterlockedExchange
LoadLibraryExA
IsDebuggerPresent
IsProcessorFeaturePresent
HeapFree
HeapAlloc
GetCommandLineA
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleExW
HeapSize
Sleep
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetProcessHeap
HeapReAlloc
RtlUnwind
GetFileType
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
OutputDebugStringW
LoadLibraryW
LCMapStringW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetConsoleCP
GetConsoleMode
SetFilePointerEx
GetStringTypeW
SetStdHandle
WriteConsoleW
FlushFileBuffers
InterlockedCompareExchange
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
VirtualAlloc
VirtualFree
AtlAdvise
AtlAxAttachControl
AtlAxCreateControl
AtlAxCreateControlEx
AtlAxCreateControlLic
AtlAxCreateControlLicEx
AtlAxCreateDialogA
AtlAxCreateDialogW
AtlAxDialogBoxA
AtlAxDialogBoxW
AtlAxGetControl
AtlAxGetHost
AtlAxWinInit
AtlCallTermFunc
AtlComModuleGetClassObject
AtlComModuleRegisterClassObjects
AtlComModuleRevokeClassObjects
AtlComModuleUnregisterServer
AtlComPtrAssign
AtlComQIPtrAssign
AtlCreateRegistrar
AtlCreateTargetDC
AtlDevModeW2A
AtlFreeMarshalStream
AtlGetObjectSourceInterface
AtlGetPerUserRegistration
AtlGetVersion
AtlHiMetricToPixel
AtlIPersistPropertyBag_Load
AtlIPersistPropertyBag_Save
AtlIPersistStreamInit_Load
AtlIPersistStreamInit_Save
AtlInternalQueryInterface
AtlLoadTypeLib
AtlMarshalPtrInProc
AtlModuleAddTermFunc
AtlPixelToHiMetric
AtlRegisterClassCategoriesHelper
AtlSetErrorInfo
AtlSetPerUserRegistration
AtlUnadvise
AtlUnmarshalPtr
AtlUpdateRegistryFromResourceD
AtlWaitWithMessageLoop
AtlWinModuleAddCreateWndData
AtlWinModuleExtractCreateWndData
AtlWinModuleInit
AtlWinModuleRegisterClassExA
AtlWinModuleRegisterClassExW
AtlWinModuleRegisterWndClassInfoA
AtlWinModuleRegisterWndClassInfoW
AtlWinModuleTerm
Name
.text
Size
118KB
Virtual Size
117KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=190, version=30716,
count=1, id=188, version=30716,
count=13, id=205, version=50929,
count=104, id=206, version=50929,
count=3, id=185, version=30716,
count=219, id=1, productName=Unmarked objects,
count=53, id=207, version=50929,
count=1, id=202, version=50929,
count=1, id=201, version=50929,
count=1, id=204, version=50929,
mfc110u.dll
- IMPHASH dbc5fd773616e397fab9dcb66b2c8884
- SHA256 33f631c0b561199b5feb9020faa99e50efa9f421d7484ffa640c5561494726da
- MD5 b8de851298e99a005bfd34aa906b3fe8
- SHA1 1f07fa8fac4c81c3fccb98363f1f5ae4424b91f8
- SHA512 3b6f2a406a7d3bb496d48545af10f57530dae4157fc5128416fea61151c197d0c059de47f360b538696b59b36f17e5dd650fd24af86a8f654a4953e15a191b1d
- SSDEEP 98304:tra1QTpsfQ//4/IzLPQ6EOmh0U+0d7fFLOAkGkzdnEVomFHKnPQg+n:t50j+0hFLOyomFHKnPQg+n
- TLSH T16426BF027EDC40EAD96F12314E69B73C96AFBDA0E531471719743B2BBE72301692D227
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
18:4f:f4:25:b1:ee:cc:72:5e:a8:ba:2b:3f:89:b5:75:5e:23:c9:9d:f2:0e:74:74:42:5b:ca:b4:a4:c2:91:1d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 10, 2013
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
3e:95:7a:ae:ff:3a:e3:9a:16:d4:37:7f:55:0e:b6:5b:12:0e:d7:db
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 10, 2013
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:F528-3777-8A76,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:33:e5:27:86:a3:0e:4a:2a:80:00:00:00:00:00:33
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 27, 2013 - Jun 27, 2014
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:b0:11:af:0a:8b:d0:3b:9f:dd:00:01:00:00:00:b0
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jan 24, 2013 - Apr 24, 2014
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:08:e2:79:fa:0d:25:58:45:ea:00:00:00:00:00:08
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 7, 2012 - Oct 7, 2013
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:F528-3777-8A76,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:29:97:4e:7c:82:cb:20:16:41:00:00:00:00:00:29
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 27, 2013 - Jun 27, 2014
Minor OS version
0
Major OS version
6
Entry point
4672
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
f:\binaries.x86ret\bin\i386\mfc110u.i386.pdb
advapi32
RegCloseKey
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegEnumValueW
RegQueryValueExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegEnumKeyW
RegQueryValueW
RegSetValueW
GetFileSecurityW
SetFileSecurityW
IsTextUnicode
RegOpenKeyExA
RegQueryValueExA
kernel32
SizeofResource
LoadResource
FindResourceW
InitializeCriticalSectionAndSpinCount
GetLastError
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetLastError
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetVersion
GetFileAttributesW
LoadLibraryA
LoadLibraryW
GetModuleFileNameW
OutputDebugStringA
MultiByteToWideChar
lstrcpyW
GlobalAlloc
GlobalLock
GlobalUnlock
GetCurrentThreadId
InitializeCriticalSection
DeleteFileW
MulDiv
InterlockedIncrement
InterlockedDecrement
VerSetConditionMask
VerifyVersionInfoW
FreeLibrary
InterlockedExchange
CloseHandle
GetTempPathW
GetTempFileNameW
CreateFileW
SetFilePointer
Sleep
GetCurrentDirectoryW
lstrcmpW
GetSystemDirectoryW
LoadLibraryExW
DecodePointer
EncodePointer
GlobalFree
GetTickCount
GetWindowsDirectoryW
lstrcmpiW
SetThreadPriority
LocalAlloc
LocalFree
TlsAlloc
TlsFree
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalReAlloc
TlsSetValue
GetFileSize
GlobalSize
SearchPathW
GetLocaleInfoW
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
CompareStringW
GetCurrentThread
GetVersionExW
WideCharToMultiByte
lstrcmpA
CompareStringA
GlobalDeleteAtom
SetErrorMode
GetCurrentProcessId
GlobalAddAtomW
GetPrivateProfileIntW
GetPrivateProfileStringW
WritePrivateProfileStringW
FindResourceExW
GetUserDefaultLCID
IsDBCSLeadByte
lstrcpyA
RaiseException
VirtualProtect
GetDiskFreeSpaceW
GetFullPathNameW
GetFileTime
SetFileTime
ReplaceFileW
SystemTimeToFileTime
GetProfileIntW
DuplicateHandle
GetCurrentProcess
ReadFile
WriteFile
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
MoveFileW
GetVolumeInformationW
FindFirstFileW
FindClose
GetThreadLocale
GetStringTypeExW
GetShortPathNameW
FileTimeToSystemTime
FileTimeToLocalFileTime
FindNextFileW
GetFileSizeEx
GetFileAttributesExW
LocalFileTimeToFileTime
SetFileAttributesW
FormatMessageW
WaitForSingleObject
CreateSemaphoreW
ReleaseSemaphore
CreateMutexW
ReleaseMutex
CreateEventW
WaitForMultipleObjects
CopyFileW
SetEvent
ResumeThread
SuspendThread
GetAtomNameW
GlobalGetAtomNameW
LocalLock
LocalUnlock
ExpandEnvironmentStringsA
LoadLibraryExA
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsProcessorFeaturePresent
IsDebuggerPresent
GetSystemTime
GlobalFindAtomW
GlobalFlags
GetEnvironmentVariableW
FormatMessageA
GetEnvironmentVariableA
LockResource
msvcr110
memmove_s
memcpy_s
abort
wcslen
_purecall
wmemcpy_s
wcscspn
wcsspn
_wcslwr_s
toupper
_CxxThrowException
__clean_type_info_names_internal
_except_handler4_common
_initterm_e
_initterm
_malloc_crt
_amsg_exit
__CppXcptFilter
__crtTerminateProcess
__crtUnhandledException
_crt_debugger_hook
?terminate@@YAXXZ
_onexit
__dllonexit
_calloc_crt
_unlock
_lock
??1type_info@@UAE@XZ
_mbscspn
_vscprintf
_mbsinc
_mbsupr_s
_wcsrev
_mbsspn
_mbscoll
_mbsrchr
_mbschr
vsprintf_s
_ismbcspace
_mbsstr
_mbsicoll
_mbsrev
memmove
_mbsicmp
_mbslwr_s
_mbspbrk
_expand
_msize
_beginthreadex
_endthreadex
strcpy_s
_ultow_s
fclose
fflush
ftell
fseek
fgetws
fputws
fwrite
clearerr_s
ferror
feof
fread
__doserrno
_fdopen
_open_osfhandle
_fileno
_get_osfhandle
_wfullpath
realloc
wcstoul
wcstol
_vsnwprintf_s
_snwscanf_s
_mbscmp
_mktime64
strnlen
wcsnlen
_ltow_s
_itow_s
swprintf_s
wcsncpy_s
_strnicmp
__wargv
__argc
_snwprintf_s
_errno
_recalloc
_resetstkoflw
wcstod
_time64
_wmakepath_s
strlen
_wcsdup
_beginthread
_endthread
_localtime64_s
wcscat_s
swscanf_s
memcmp
_wtol
towlower
towupper
iswprint
iswalnum
iswalpha
iswdigit
wcscpy_s
wcsncmp
_wcsicoll
wcscoll
_wsplitpath_s
exp
ceil
fabs
floor
__CxxFrameHandler3
sin
cos
abs
memcpy
clock
wcsrchr
wcspbrk
atan2
sqrt
calloc
_wcsupr_s
_wtoi
ldiv
labs
malloc
free
wcsstr
iswspace
wcschr
_vscwprintf
vswprintf_s
wcscmp
memset
_wcsicmp
_wcsnicmp
user32
SendDlgItemMessageA
UnpackDDElParam
ReuseDDElParam
InsertMenuItemW
GetMenuBarInfo
GetWindowDC
BeginPaint
EndPaint
DefFrameProcW
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcW
CheckDlgButton
CheckRadioButton
GetDlgItemInt
GetDlgItemTextW
SendDlgItemMessageW
SetDlgItemInt
SetDlgItemTextW
IsDlgButtonChecked
ScrollWindowEx
RealChildWindowFromPoint
OemToCharBuffA
CharToOemBuffA
GetActiveWindow
InsertMenuW
IsWindowEnabled
ShowScrollBar
FrameRect
GetWindowRgn
ReleaseDC
GetDC
GetDoubleClickTime
GetWindowTextW
EnumChildWindows
InvertRect
HideCaret
SetMenuDefaultItem
GetMenuDefaultItem
GetScrollPos
EnableScrollBar
UpdateLayeredWindow
GetMessageW
GetLastActivePopup
SubtractRect
DrawFrameControl
GetMenuItemInfoW
SetFocus
CheckMenuItem
SetWindowTextW
CharUpperW
MapVirtualKeyW
ToUnicodeEx
GetKeyboardState
CopyAcceleratorTableW
CreateAcceleratorTableW
DestroyCursor
IsClipboardFormatAvailable
GetClassLongW
GetSysColor
EnumDisplayMonitors
DestroyWindow
GetTopWindow
DestroyAcceleratorTable
NotifyWinEvent
SetWindowRgn
DeleteMenu
ModifyMenuW
IsZoomed
IsMenu
GetSystemMenu
GetNextDlgTabItem
EnableMenuItem
SetScrollPos
IntersectRect
CreatePopupMenu
AppendMenuW
EndDeferWindowPos
BeginDeferWindowPos
GetKeyState
LockWindowUpdate
SetWindowPos
UnionRect
GetUpdateRect
UnhookWindowsHookEx
SetWindowsHookExW
CallNextHookEx
SetLayeredWindowAttributes
ValidateRect
SystemParametersInfoW
MonitorFromWindow
GetMonitorInfoW
DrawIcon
GetForegroundWindow
IsIconic
GetMenuItemID
GetMenuItemCount
GetWindow
DefWindowProcW
GetClassInfoW
PostThreadMessageW
GetSubMenu
LoadMenuW
DestroyMenu
GetSystemMetrics
TranslateAcceleratorW
LoadAcceleratorsW
GetCapture
DrawStateW
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
GetAsyncKeyState
GetDesktopWindow
WaitMessage
DispatchMessageW
TranslateMessage
PeekMessageW
SetForegroundWindow
LoadCursorW
GetFocus
IsChild
TrackPopupMenu
LoadIconW
GetNextDlgGroupItem
DrawFocusRect
SetCursor
GetWindowLongW
CopyImage
GetIconInfo
FillRect
LoadImageW
CopyRect
LoadBitmapW
MapWindowPoints
MessageBeep
SetCursorPos
WindowFromPoint
ClientToScreen
SetCapture
ReleaseCapture
CopyIcon
BringWindowToTop
RegisterWindowMessageW
DestroyIcon
GetClassNameW
SetParent
ShowWindow
GetWindowPlacement
IsRectEmpty
GetDlgCtrlID
PostMessageW
DeferWindowPos
EqualRect
GetSysColorBrush
SetClassLongW
GetParent
DrawIconEx
InflateRect
OffsetRect
PtInRect
UpdateWindow
SetTimer
TrackMouseEvent
ScreenToClient
GetCursorPos
IsWindowVisible
MapVirtualKeyExW
GetKeyboardLayout
GetKeyNameTextW
IsCharLowerW
EnableWindow
SetRect
IsWindow
RedrawWindow
InvalidateRect
SendMessageW
GetWindowRect
SetRectEmpty
KillTimer
GetClientRect
ScrollWindow
GetScrollInfo
SetScrollInfo
GetScrollRange
WinHelpW
RegisterClassW
TrackPopupMenuEx
SetWindowPlacement
GetClassInfoExW
CreateWindowExW
SetMenu
GetMenu
CountClipboardFormats
AdjustWindowRectEx
SetScrollRange
WindowFromDC
GetMenuStringW
InSendMessage
SendNotifyMessageW
ClipCursor
IsDialogMessageW
SetWindowContextHelpId
CharNextW
MsgWaitForMultipleObjectsEx
RemoveMenu
GetDCEx
GetDialogBaseUnits
GetMessagePos
GetMessageTime
MapDialogRect
SetPropW
RemovePropW
GetPropW
EndDialog
CreateDialogIndirectParamW
GetDlgItem
GetTabbedTextExtentW
GetWindowTextLengthW
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
InvalidateRgn
MoveWindow
CreateMenu
SetActiveWindow
CallWindowProcW
GetMenuCheckMarkDimensions
SetMenuItemInfoW
SetMenuItemBitmaps
SetWindowLongW
MessageBoxW
GetWindowThreadProcessId
ShowOwnedPopups
UnregisterClassW
PostQuitMessage
DrawEdge
CharUpperBuffW
GetComboBoxInfo
MonitorFromPoint
RegisterClipboardFormatW
GetMenuState
gdi32
CreateSolidBrush
CreateCompatibleDC
DeleteObject
SelectObject
GetObjectType
GetTextColor
Polygon
Rectangle
GetStockObject
GetPaletteEntries
CreatePalette
RealizePalette
GetNearestPaletteIndex
GetSystemPaletteEntries
GetPixel
CreatePolygonRgn
PtInRegion
FrameRgn
CreateCompatibleBitmap
SetPixelV
BitBlt
GetRgnBox
CreateRectRgnIndirect
OffsetRgn
CreateDIBSection
SetPixel
Ellipse
GetBkColor
CreateFontIndirectW
GetDeviceCaps
GetTextCharsetInfo
EnumFontFamiliesW
CreatePen
CreatePatternBrush
CreateDIBitmap
SetPaletteEntries
ExtFloodFill
StartPage
EndPage
EndDoc
DeleteDC
GetCurrentObject
PatBlt
CreateRectRgn
CombineRgn
GetBoundsRect
FillRgn
SetRectRgn
CreateRoundRectRgn
EnumFontFamiliesExW
StretchBlt
SetDIBColorTable
CreateBitmap
SetBkColor
SelectPalette
GetDIBits
Polyline
ExtTextOutW
CreateHatchBrush
CreateEllipticRgn
RoundRect
StretchDIBits
GetObjectW
GetCharWidthW
LPtoDP
CreateMetaFileW
CloseMetaFile
DeleteMetaFile
GetViewportOrgEx
PtVisible
RectVisible
TextOutW
Escape
GetClipBox
GetTextAlign
GetCurrentPositionEx
MoveToEx
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SaveDC
RestoreDC
GetROP2
GetBkMode
GetPolyFillMode
GetStretchBltMode
GetNearestColor
GetTextFaceW
GetWindowExtEx
GetViewportExtEx
SetTextColor
SetMapMode
SetWindowExtEx
ScaleWindowExtEx
GetWindowOrgEx
SetWindowOrgEx
IntersectClipRect
CreateDCW
SetBrushOrgEx
SetAbortProc
StartDocW
DPtoLP
AbortDoc
CopyMetaFileW
UnrealizeObject
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetGraphicsMode
SetWorldTransform
ModifyWorldTransform
OffsetWindowOrgEx
SelectClipRgn
ExcludeClipRect
OffsetClipRgn
LineTo
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
GetLayout
SetLayout
ArcTo
SetArcDirection
PolyDraw
PolylineTo
SetColorAdjustment
PolyBezierTo
SelectClipPath
GetClipRgn
ExtSelectClipRgn
PlayMetaFileRecord
PlayMetaFile
EnumMetaFile
ExtCreatePen
CreateDIBPatternBrushPt
GetMapMode
GetTextExtentPoint32W
CreateFontW
GetTextMetricsW
ole32
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
CoRegisterClassObject
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
DoDragDrop
CoGetMalloc
StgOpenStorage
StgIsStorageFile
StgCreateDocfile
OleIsCurrentClipboard
OleFlushClipboard
OleSetClipboard
OleGetClipboard
OleRegGetUserType
GetClassFile
CreateBindCtx
CreateFileMoniker
OleRun
OleIsRunning
OleQueryLinkFromData
OleQueryCreateFromData
OleSetMenuDescriptor
CreateGenericComposite
CreateItemMoniker
WriteClassStm
IsAccelerator
GetHGlobalFromILockBytes
ReadClassStg
OleLoad
OleSave
OleCreate
OleCreateLinkToFile
OleCreateFromFile
OleCreateStaticFromData
OleCreateLinkFromData
OleCreateFromData
OleSetContainedObject
StringFromCLSID
OleLockRunning
StgOpenStorageOnILockBytes
CLSIDFromString
CLSIDFromProgID
PropVariantCopy
CoInitializeEx
CoGetClassObject
StringFromGUID2
ReadFmtUserTypeStg
OleLoadFromStream
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
ReadClassStm
OleSaveToStream
CreateOleAdviseHolder
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
ReleaseStgMedium
OleTranslateAccelerator
GetRunningObjectTable
WriteClassStg
OleDuplicateData
OleDraw
OleRegGetMiscStatus
OleRegEnumVerbs
CoDisconnectObject
CoRegisterMessageFilter
CoTreatAsClass
SetConvertStg
OleGetIconOfClass
CreateDataAdviseHolder
CoTaskMemAlloc
CreateDataCache
CreateStreamOnHGlobal
CoUninitialize
CoInitialize
PropVariantClear
CoCreateGuid
CoTaskMemFree
CoCreateInstance
WriteFmtUserTypeStg
oleaut32
SysAllocStringLen
SysStringLen
SysFreeString
VariantChangeType
VariantClear
VariantTimeToSystemTime
SystemTimeToVariantTime
VarBstrFromDate
OleCreatePropertyFrame
OleTranslateColor
OleCreateFontIndirect
OleCreatePictureIndirect
OleLoadPicture
LoadTypeLi
RegisterTypeLi
LoadRegTypeLi
VariantInit
DispCallFunc
VarBstrCmp
VariantCopy
SafeArrayDestroy
SysStringByteLen
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayCreate
SafeArrayRedim
SysAllocStringByteLen
SysReAllocStringLen
VarCyFromStr
VarBstrFromCy
SafeArrayCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroyData
SafeArrayDestroyDescriptor
VarDateFromStr
VarDecFromStr
VarBstrFromDec
SafeArrayCreateVector
VarParseNumFromStr
SysAllocString
shlwapi
SHStrDupW
PathFindExtensionW
PathFindFileNameW
PathRemoveExtensionW
PathRemoveFileSpecW
PathIsUNCW
PathStripToRootW
UrlUnescapeW
StrFormatKBSizeW
imm32
ImmGetContext
ImmGetOpenStatus
ImmReleaseContext
uxtheme
GetThemePartSize
IsThemeBackgroundPartiallyTransparent
DrawThemeText
GetThemeSysColor
GetWindowTheme
GetCurrentThemeName
CloseThemeData
OpenThemeData
GetThemeColor
DrawThemeBackground
DrawThemeParentBackground
IsAppThemed
Name
.text
Size
2.6MB
Virtual Size
2.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
55KB
Virtual Size
56KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
20KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1.3MB
Virtual Size
1.3MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
194KB
Virtual Size
193KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=189, version=30716,
count=2, id=191, version=30716,
count=8, id=190, version=30716,
count=13, id=188, version=30716,
count=2, id=203, version=50929,
count=10, id=205, version=50929,
count=13, id=206, version=50929,
count=14, id=207, version=50929,
count=1006, id=1, productName=Unmarked objects,
count=19, id=185, version=30716,
count=409, id=211, version=50929,
count=1, id=202, version=50929,
count=1, id=201, version=50929,
count=1, id=204, version=50929,
msvcp110.dll
- IMPHASH 098e9eddf1a24b3fd9465ee992148a02
- SHA256 c8d5572ca8d7624871188f0acabc3ae60d4c5a4f6782d952b9038de3bc28b39a
- MD5 3e29914113ec4b968ba5eb1f6d194a0a
- SHA1 557b67e372e85eb39989cb53cffd3ef1adabb9fe
- SHA512 75078c9eaa5a7ae39408e5db1ce7dbce5a3180d1c644bcb5e481b0810b07cb7d001d68d1b4f462cd5355e98951716f041ef570fcc866d289a68ea19b3f500c43
- SSDEEP 12288:FqULIc5nb9rywgfyhUgiW6QR7t5sA3Ooc8sHkC2eRxUH:PLHnhryLfBA3Ooc8sHkC2eRxUH
- TLSH T187B44A237B824CF5D19E53B231C5431587FAFC6181A1F353ABDEF1692FA6286E123A11
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
bd:da:49:3e:e0:d0:cf:a8:1e:ba:49:76:d1:38:5e:50:ea:b9:84:2f:8b:f8:ee:1c:ee:b6:de:b5:98:7f:ae:bf
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 6, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
bf:fa:d4:6b:19:62:38:e3:7a:c8:07:80:df:f1:d6:ab:5d:65:be:e9
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 6, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:9d:1e:8d:27:ae:b8:f3:d8:38:00:01:00:00:00:9d
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 4, 2012 - Mar 4, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:C0F4-3086-DEF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:2b:39:32:48:c1:b2:c9:48:f3:00:00:00:00:00:2b
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 4, 2012 - Dec 4, 2013
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:08:e2:79:fa:0d:25:58:45:ea:00:00:00:00:00:08
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 7, 2012 - Oct 7, 2013
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:F528-3777-8A76,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:c8:30:00:00:00:00:00:0d
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 9, 2012 - Apr 9, 2013
Minor OS version
0
Major OS version
6
Entry point
239889
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
msvcp110.i386.pdb
msvcr110
fgetpos
fsetpos
_fseeki64
fwrite
setvbuf
ungetc
_lock_file
_unlock_file
memcpy_s
memset
_fsopen
fseek
_wfsopen
?__ExceptionPtrDestroy@@YAXPAX@Z
?__ExceptionPtrCopy@@YAXPAXPBX@Z
?__ExceptionPtrRethrow@@YAXPBX@Z
?_ScheduleTask@_CurrentScheduler@details@Concurrency@@SAXP6AXPAX@Z0@Z
?set@event@Concurrency@@QAEXXZ
ldexp
sprintf_s
strcspn
wcslen
_Strftime
_Wcsftime
strcmp
setlocale
_malloc_crt
_realloc_crt
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
fgetwc
fputwc
ungetwc
__uncaught_exception
towupper
towlower
_errno
memcmp
_wcsdup
___lc_locale_name_func
___lc_collate_cp_func
__crtCompareStringA
__crtLCMapStringA
___lc_codepage_func
_ismbblead
remove
rename
_wremove
_wgetcwd
_wchdir
_wmkdir
_wrmdir
_wrename
_getcwd
_chdir
_mkdir
_rmdir
__crtIsPackagedApp
__crtCreateSymbolicLinkW
calloc
??0_Condition_variable@details@Concurrency@@QAE@XZ
fgetc
?wait@_Condition_variable@details@Concurrency@@QAEXAAVcritical_section@3@@Z
?wait_for@_Condition_variable@details@Concurrency@@QAE_NAAVcritical_section@3@I@Z
?notify_one@_Condition_variable@details@Concurrency@@QAEXXZ
?notify_all@_Condition_variable@details@Concurrency@@QAEXXZ
_beginthreadex
_endthreadex
??0critical_section@Concurrency@@QAE@XZ
??1critical_section@Concurrency@@QAE@XZ
?lock@critical_section@Concurrency@@QAEXXZ
?try_lock@critical_section@Concurrency@@QAE_NXZ
?try_lock_for@critical_section@Concurrency@@QAE_NI@Z
?unlock@critical_section@Concurrency@@QAEXXZ
?terminate@@YAXXZ
__crtFlsAlloc
__crtFlsFree
__crtFlsGetValue
__crtFlsSetValue
??0operation_timed_out@Concurrency@@QAE@XZ
?Alloc@Concurrency@@YAPAXI@Z
?ScheduleTask@CurrentScheduler@Concurrency@@SAXP6AXPAX@Z0@Z
??0invalid_link_target@Concurrency@@QAE@PBD@Z
??0message_not_found@Concurrency@@QAE@XZ
?_Trace_agents@Concurrency@@YAXW4Agents_EventType@1@_JZZ
??0bad_target@Concurrency@@QAE@XZ
??0invalid_operation@Concurrency@@QAE@PBD@Z
?wait@event@Concurrency@@QAEII@Z
??1event@Concurrency@@QAE@XZ
??0event@Concurrency@@QAE@XZ
?Free@Concurrency@@YAXPAX@Z
??1_Scoped_lock@_ReentrantPPLLock@details@Concurrency@@QAE@XZ
??0_Scoped_lock@_ReentrantPPLLock@details@Concurrency@@QAE@AAV123@@Z
??0_ReentrantPPLLock@details@Concurrency@@QAE@XZ
??1_Scoped_lock@_NonReentrantPPLLock@details@Concurrency@@QAE@XZ
??0_Scoped_lock@_NonReentrantPPLLock@details@Concurrency@@QAE@AAV123@@Z
??0_NonReentrantPPLLock@details@Concurrency@@QAE@XZ
?_Yield@_Context@details@Concurrency@@SAXXZ
?_UnderlyingYield@details@Concurrency@@YAXXZ
?_SpinOnce@?$_SpinWait@$00@details@Concurrency@@QAE_NXZ
?GetNumberOfVirtualProcessors@CurrentScheduler@Concurrency@@SAIXZ
?IsCurrentTaskCollectionCanceling@Context@Concurrency@@SA_NXZ
??0task_canceled@Concurrency@@QAE@XZ
??1_SpinLock@details@Concurrency@@QAE@XZ
??0_SpinLock@details@Concurrency@@QAE@ACJ@Z
?Log2@details@Concurrency@@YAKI@Z
_lock
_unlock
__pctype_func
isupper
_calloc_crt
__crtGetLocaleInfoEx
islower
__crtLCMapStringW
isspace
tolower
memchr
sqrt
isdigit
isalnum
__crtCompareStringW
__dllonexit
_onexit
??1type_info@@UAE@XZ
__CppXcptFilter
_amsg_exit
_initterm
_initterm_e
_except_handler4_common
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__clean_type_info_names_internal
fflush
fclose
__CxxFrameHandler3
_CxxThrowException
?what@exception@std@@UBEPBDXZ
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@ABV01@@Z
_W_Gettnames
_W_Getmonths
_W_Getdays
_Gettnames
_Getmonths
_Getdays
localeconv
??0bad_cast@std@@QAE@PBD@Z
??_V@YAXPAX@Z
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@ABQBDH@Z
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@XZ
memmove
strlen
memcpy
malloc
free
___mb_cur_max_func
_purecall
rand_s
fputs
fputc
__iob_func
abort
log
__crtInitializeCriticalSectionEx
??3@YAXPAX@Z
??1_Condition_variable@details@Concurrency@@QAE@XZ
??2@YAPAXI@Z
kernel32
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
GetStringTypeW
InterlockedDecrement
InterlockedIncrement
GetSystemTimeAsFileTime
InterlockedExchange
GetExitCodeThread
GetCurrentThreadId
GetCurrentThread
GetCurrentProcess
Sleep
WaitForSingleObject
DuplicateHandle
AreFileApisANSI
CreateHardLinkW
CopyFileW
GetLastError
CloseHandle
SetFileTime
GetFileInformationByHandle
GetFileAttributesExW
GetDiskFreeSpaceExW
FindNextFileW
FindFirstFileExW
FindClose
CreateFileW
WideCharToMultiByte
MultiByteToWideChar
DecodePointer
EncodePointer
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
DisableThreadLibraryCalls
??$_Getvals@_W@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@IAEX_WABV_Locinfo@1@@Z
??$_Getvals@_W@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@IAEX_WABV_Locinfo@1@@Z
??$_Getvals@_W@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@IAEX_WABV_Locinfo@1@@Z
??0?$_Yarn@D@std@@QAE@ABV01@@Z
??0?$_Yarn@D@std@@QAE@PBD@Z
??0?$_Yarn@D@std@@QAE@XZ
??0?$_Yarn@_W@std@@QAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_ios@GU?$char_traits@G@std@@@std@@IAE@XZ
??0?$basic_ios@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@IAE@$$QAV01@@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_iostream@GU?$char_traits@G@std@@@std@@IAE@$$QAV01@@Z
??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@IAE@$$QAV01@@Z
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@IAE@$$QAV01@@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N1@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_istream@GU?$char_traits@G@std@@@std@@IAE@$$QAV01@@Z
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N1@Z
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@IAE@$$QAV01@@Z
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N1@Z
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@IAE@$$QAV01@@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@W4_Uninitialized@1@_N@Z
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@IAE@$$QAV01@@Z
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE@W4_Uninitialized@1@_N@Z
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@IAE@$$QAV01@@Z
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@W4_Uninitialized@1@_N@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@ABV01@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@W4_Uninitialized@1@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@ABV01@@Z
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@W4_Uninitialized@1@@Z
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@XZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@ABV01@@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@W4_Uninitialized@1@@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$codecvt@DDH@std@@QAE@ABV_Locinfo@1@I@Z
??0?$codecvt@DDH@std@@QAE@I@Z
??0?$codecvt@GDH@std@@QAE@ABV_Locinfo@1@I@Z
??0?$codecvt@GDH@std@@QAE@I@Z
??0?$codecvt@_WDH@std@@QAE@ABV_Locinfo@1@I@Z
??0?$codecvt@_WDH@std@@QAE@I@Z
??0?$ctype@D@std@@QAE@ABV_Locinfo@1@I@Z
??0?$ctype@D@std@@QAE@PBF_NI@Z
??0?$ctype@G@std@@QAE@ABV_Locinfo@1@I@Z
??0?$ctype@G@std@@QAE@I@Z
??0?$ctype@_W@std@@QAE@ABV_Locinfo@1@I@Z
??0?$ctype@_W@std@@QAE@I@Z
??0?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@I@Z
??0?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@I@Z
??0?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@IAE@PBDI@Z
??0?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@IAE@PBDI@Z
??0?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@IAE@PBDI@Z
??0?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@I@Z
??0?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@IAE@PBDI@Z
??0?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@IAE@PBDI@Z
??0?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@I@Z
??0Init@ios_base@std@@QAE@XZ
??0_Concurrent_queue_base_v4@details@Concurrency@@IAE@I@Z
??0_Concurrent_queue_iterator_base_v4@details@Concurrency@@IAE@ABV_Concurrent_queue_base_v4@12@@Z
??0_Container_base12@std@@QAE@ABU01@@Z
??0_Container_base12@std@@QAE@XZ
??0_Facet_base@std@@QAE@ABV01@@Z
??0_Facet_base@std@@QAE@XZ
??0_Init_locks@std@@QAE@XZ
??0_Locimp@locale@std@@AAE@ABV012@@Z
??0_Locimp@locale@std@@AAE@_N@Z
??0_Locinfo@std@@QAE@HPBD@Z
??0_Locinfo@std@@QAE@PBD@Z
??0_Lockit@std@@QAE@H@Z
??0_Lockit@std@@QAE@XZ
??0_Pad@std@@QAE@ABV01@@Z
??0_Pad@std@@QAE@XZ
??0_Runtime_object@details@Concurrency@@QAE@H@Z
??0_Runtime_object@details@Concurrency@@QAE@XZ
??0_Timevec@std@@QAE@ABV01@@Z
??0_Timevec@std@@QAE@PAX@Z
??0_UShinit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??0agent@Concurrency@@QAE@AAVScheduleGroup@1@@Z
??0agent@Concurrency@@QAE@AAVScheduler@1@@Z
??0agent@Concurrency@@QAE@XZ
??0codecvt_base@std@@QAE@I@Z
??0ctype_base@std@@QAE@I@Z
??0facet@locale@std@@IAE@I@Z
??0id@locale@std@@QAE@I@Z
??0ios_base@std@@IAE@XZ
??0time_base@std@@QAE@I@Z
??1?$_Yarn@D@std@@QAE@XZ
??1?$_Yarn@_W@std@@QAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_istream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ostream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$codecvt@DDH@std@@MAE@XZ
??1?$codecvt@GDH@std@@MAE@XZ
??1?$codecvt@_WDH@std@@MAE@XZ
??1?$ctype@D@std@@MAE@XZ
??1?$ctype@G@std@@MAE@XZ
??1?$ctype@_W@std@@MAE@XZ
??1?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MAE@XZ
??1?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MAE@XZ
??1?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MAE@XZ
??1?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MAE@XZ
??1?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MAE@XZ
??1?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MAE@XZ
??1?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MAE@XZ
??1?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MAE@XZ
??1?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MAE@XZ
??1?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MAE@XZ
??1?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MAE@XZ
??1?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MAE@XZ
??1Init@ios_base@std@@QAE@XZ
??1_Concurrent_queue_base_v4@details@Concurrency@@MAE@XZ
??1_Concurrent_queue_iterator_base_v4@details@Concurrency@@IAE@XZ
??1_Concurrent_vector_base_v4@details@Concurrency@@IAE@XZ
??1_Container_base12@std@@QAE@XZ
??1_Facet_base@std@@UAE@XZ
??1_Init_locks@std@@QAE@XZ
??1_Locimp@locale@std@@MAE@XZ
??1_Locinfo@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
??1_Pad@std@@QAE@XZ
??1_Timevec@std@@QAE@XZ
??1_UShinit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??1agent@Concurrency@@UAE@XZ
??1codecvt_base@std@@UAE@XZ
??1ctype_base@std@@UAE@XZ
??1facet@locale@std@@MAE@XZ
??1ios_base@std@@UAE@XZ
??1time_base@std@@UAE@XZ
??4?$_Iosb@H@std@@QAEAAV01@ABV01@@Z
??4?$_Yarn@D@std@@QAEAAV01@ABV01@@Z
??4?$_Yarn@D@std@@QAEAAV01@PBD@Z
??4?$_Yarn@_W@std@@QAEAAV01@PB_W@Z
??4?$basic_iostream@DU?$char_traits@D@std@@@std@@IAEAAV01@$$QAV01@@Z
??4?$basic_iostream@GU?$char_traits@G@std@@@std@@IAEAAV01@$$QAV01@@Z
??4?$basic_iostream@_WU?$char_traits@_W@std@@@std@@IAEAAV01@$$QAV01@@Z
??4?$basic_istream@DU?$char_traits@D@std@@@std@@IAEAAV01@$$QAV01@@Z
??4?$basic_istream@GU?$char_traits@G@std@@@std@@IAEAAV01@$$QAV01@@Z
??4?$basic_istream@_WU?$char_traits@_W@std@@@std@@IAEAAV01@$$QAV01@@Z
??4?$basic_ostream@DU?$char_traits@D@std@@@std@@IAEAAV01@$$QAV01@@Z
??4?$basic_ostream@GU?$char_traits@G@std@@@std@@IAEAAV01@$$QAV01@@Z
??4?$basic_ostream@_WU?$char_traits@_W@std@@@std@@IAEAAV01@$$QAV01@@Z
??4?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEAAV01@ABV01@@Z
??4?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEAAV01@ABV01@@Z
??4?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEAAV01@ABV01@@Z
??4Init@ios_base@std@@QAEAAV012@ABV012@@Z
??4_Container_base0@std@@QAEAAU01@ABU01@@Z
??4_Container_base12@std@@QAEAAU01@ABU01@@Z
??4_Facet_base@std@@QAEAAV01@ABV01@@Z
??4_Init_locks@std@@QAEAAV01@ABV01@@Z
??4_Pad@std@@QAEAAV01@ABV01@@Z
??4_Timevec@std@@QAEAAV01@ABV01@@Z
??4_UShinit@std@@QAEAAV01@ABV01@@Z
??4_Winit@std@@QAEAAV01@ABV01@@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAF@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAG@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAI@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAJ@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAK@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAM@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAN@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAO@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAPAX@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_J@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_K@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_N@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@DU?$char_traits@D@std@@@1@AAV21@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAF@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAG@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAH@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAI@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAJ@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAK@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAM@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAN@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAO@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAPAX@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AA_J@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AA_K@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AA_N@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@GU?$char_traits@G@std@@@1@AAV21@@Z@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAF@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAG@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAH@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAI@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAJ@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAK@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAM@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAN@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAO@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAPAX@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AA_J@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AA_K@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AA_N@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@_WU?$char_traits@_W@std@@@1@AAV21@@Z@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@F@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@M@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@O@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@DU?$char_traits@D@std@@@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_N@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@F@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@M@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@O@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@GU?$char_traits@G@std@@@1@AAV21@@Z@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@PBX@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@_J@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@_K@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@_N@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@F@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@M@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@O@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@_WU?$char_traits@_W@std@@@1@AAV21@@Z@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@PBX@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@_J@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@_K@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@_N@Z
??7ios_base@std@@QBE_NXZ
??Bid@locale@std@@QAEIXZ
??Bios_base@std@@QBEPAXXZ
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_ios@GU?$char_traits@G@std@@@std@@6B@
??_7?$basic_ios@_WU?$char_traits@_W@std@@@std@@6B@
??_7?$basic_iostream@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_iostream@GU?$char_traits@G@std@@@std@@6B@
??_7?$basic_iostream@_WU?$char_traits@_W@std@@@std@@6B@
??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_istream@GU?$char_traits@G@std@@@std@@6B@
??_7?$basic_istream@_WU?$char_traits@_W@std@@@std@@6B@
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_ostream@GU?$char_traits@G@std@@@std@@6B@
??_7?$basic_ostream@_WU?$char_traits@_W@std@@@std@@6B@
??_7?$basic_streambuf@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_streambuf@GU?$char_traits@G@std@@@std@@6B@
??_7?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@6B@
??_7?$codecvt@DDH@std@@6B@
??_7?$codecvt@GDH@std@@6B@
??_7?$codecvt@_WDH@std@@6B@
??_7?$ctype@D@std@@6B@
??_7?$ctype@G@std@@6B@
??_7?$ctype@_W@std@@6B@
??_7?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@6B@
??_7?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@6B@
??_7?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@6B@
??_7?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@6B@
??_7?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@6B@
??_7?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@6B@
??_7?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@6B@
??_7?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@6B@
??_7?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@6B@
??_7?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@6B@
??_7?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@6B@
??_7?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@6B@
??_7_Facet_base@std@@6B@
??_7_Locimp@locale@std@@6B@
??_7_Pad@std@@6B@
??_7codecvt_base@std@@6B@
??_7ctype_base@std@@6B@
??_7facet@locale@std@@6B@
??_7ios_base@std@@6B@
??_7time_base@std@@6B@
??_8?$basic_iostream@DU?$char_traits@D@std@@@std@@7B?$basic_istream@DU?$char_traits@D@std@@@1@@
??_8?$basic_iostream@DU?$char_traits@D@std@@@std@@7B?$basic_ostream@DU?$char_traits@D@std@@@1@@
??_8?$basic_iostream@GU?$char_traits@G@std@@@std@@7B?$basic_istream@GU?$char_traits@G@std@@@1@@
??_8?$basic_iostream@GU?$char_traits@G@std@@@std@@7B?$basic_ostream@GU?$char_traits@G@std@@@1@@
??_8?$basic_iostream@_WU?$char_traits@_W@std@@@std@@7B?$basic_istream@_WU?$char_traits@_W@std@@@1@@
??_8?$basic_iostream@_WU?$char_traits@_W@std@@@std@@7B?$basic_ostream@_WU?$char_traits@_W@std@@@1@@
??_8?$basic_istream@DU?$char_traits@D@std@@@std@@7B@
??_8?$basic_istream@GU?$char_traits@G@std@@@std@@7B@
??_8?$basic_istream@_WU?$char_traits@_W@std@@@std@@7B@
??_8?$basic_ostream@DU?$char_traits@D@std@@@std@@7B@
??_8?$basic_ostream@GU?$char_traits@G@std@@@std@@7B@
??_8?$basic_ostream@_WU?$char_traits@_W@std@@@std@@7B@
??_D?$basic_iostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_iostream@GU?$char_traits@G@std@@@std@@QAEXXZ
??_D?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??_D?$basic_istream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_istream@GU?$char_traits@G@std@@@std@@QAEXXZ
??_D?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??_D?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEXXZ
??_D?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??_F?$codecvt@DDH@std@@QAEXXZ
??_F?$codecvt@GDH@std@@QAEXXZ
??_F?$codecvt@_WDH@std@@QAEXXZ
??_F?$ctype@D@std@@QAEXXZ
??_F?$ctype@G@std@@QAEXXZ
??_F?$ctype@_W@std@@QAEXXZ
??_F?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAEXXZ
??_F?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAEXXZ
??_F?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAEXXZ
??_F?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAEXXZ
??_F?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAEXXZ
??_F?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAEXXZ
??_F?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAEXXZ
??_F?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAEXXZ
??_F?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAEXXZ
??_F?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAEXXZ
??_F?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAEXXZ
??_F?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAEXXZ
??_F_Locinfo@std@@QAEXXZ
??_F_Timevec@std@@QAEXXZ
??_Fcodecvt_base@std@@QAEXXZ
??_Fctype_base@std@@QAEXXZ
??_Ffacet@locale@std@@QAEXXZ
??_Fid@locale@std@@QAEXXZ
??_Ftime_base@std@@QAEXXZ
?NFS_Allocate@details@Concurrency@@YAPAXIIPAX@Z
?NFS_Free@details@Concurrency@@YAXPAX@Z
?NFS_GetLineSize@details@Concurrency@@YAIXZ
?_10@placeholders@std@@3V?$_Ph@$09@2@A
?_11@placeholders@std@@3V?$_Ph@$0L@@2@A
?_12@placeholders@std@@3V?$_Ph@$0M@@2@A
?_13@placeholders@std@@3V?$_Ph@$0N@@2@A
?_14@placeholders@std@@3V?$_Ph@$0O@@2@A
?_15@placeholders@std@@3V?$_Ph@$0P@@2@A
?_16@placeholders@std@@3V?$_Ph@$0BA@@2@A
?_17@placeholders@std@@3V?$_Ph@$0BB@@2@A
?_18@placeholders@std@@3V?$_Ph@$0BC@@2@A
?_19@placeholders@std@@3V?$_Ph@$0BD@@2@A
?_1@placeholders@std@@3V?$_Ph@$00@2@A
?_20@placeholders@std@@3V?$_Ph@$0BE@@2@A
?_2@placeholders@std@@3V?$_Ph@$01@2@A
?_3@placeholders@std@@3V?$_Ph@$02@2@A
?_4@placeholders@std@@3V?$_Ph@$03@2@A
?_5@placeholders@std@@3V?$_Ph@$04@2@A
?_6@placeholders@std@@3V?$_Ph@$05@2@A
?_7@placeholders@std@@3V?$_Ph@$06@2@A
?_8@placeholders@std@@3V?$_Ph@$07@2@A
?_9@placeholders@std@@3V?$_Ph@$08@2@A
?_Add_vtordisp1@?$basic_ios@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Add_vtordisp1@?$basic_ios@GU?$char_traits@G@std@@@std@@UAEXXZ
?_Add_vtordisp1@?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Add_vtordisp1@?$basic_istream@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Add_vtordisp1@?$basic_istream@GU?$char_traits@G@std@@@std@@UAEXXZ
?_Add_vtordisp1@?$basic_istream@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Add_vtordisp2@?$basic_ios@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Add_vtordisp2@?$basic_ios@GU?$char_traits@G@std@@@std@@UAEXXZ
?_Add_vtordisp2@?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Add_vtordisp2@?$basic_ostream@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Add_vtordisp2@?$basic_ostream@GU?$char_traits@G@std@@@std@@UAEXXZ
?_Add_vtordisp2@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Addcats@_Locinfo@std@@QAEAAV12@HPBD@Z
?_Addfac@_Locimp@locale@std@@AAEXPAVfacet@23@I@Z
?_Addstd@ios_base@std@@SAXPAV12@@Z
?_Advance@_Concurrent_queue_iterator_base_v4@details@Concurrency@@IAEXXZ
?_Assign@_Concurrent_queue_iterator_base_v4@details@Concurrency@@IAEXABV123@@Z
?_Atexit@@YAXP6AXXZ@Z
?_BADOFF@std@@3_JB
?_Byte_reverse_table@details@Concurrency@@3QBEB
?_C_str@?$_Yarn@D@std@@QBEPBDXZ
?_C_str@?$_Yarn@_W@std@@QBEPB_WXZ
?_Callfns@ios_base@std@@AAEXW4event@12@@Z
?_Clocptr@_Locimp@locale@std@@0PAV123@A
?_Close_dir@sys@tr2@std@@YAXPAX@Z
?_Copy_file@sys@tr2@std@@YAHPBD0_N@Z
?_Copy_file@sys@tr2@std@@YAHPB_W0_N@Z
?_Current_get@sys@tr2@std@@YAPADPAD@Z
?_Current_get@sys@tr2@std@@YAPA_WPA_W@Z
?_Current_set@sys@tr2@std@@YA_NPBD@Z
?_Current_set@sys@tr2@std@@YA_NPB_W@Z
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
?_Donarrow@?$ctype@G@std@@IBEDGD@Z
?_Donarrow@?$ctype@_W@std@@IBED_WD@Z
?_Dowiden@?$ctype@G@std@@IBEGD@Z
?_Dowiden@?$ctype@_W@std@@IBE_WD@Z
?_Empty@?$_Yarn@D@std@@QBE_NXZ
?_Empty@?$_Yarn@_W@std@@QBE_NXZ
?_Equivalent@sys@tr2@std@@YAHPBD0@Z
?_Equivalent@sys@tr2@std@@YAHPB_W0@Z
?_Ffmt@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABAPADPADDH@Z
?_Ffmt@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABAPADPADDH@Z
?_Ffmt@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABAPADPADDH@Z
?_File_size@sys@tr2@std@@YA_KPBD@Z
?_File_size@sys@tr2@std@@YA_KPB_W@Z
?_Findarr@ios_base@std@@AAEAAU_Iosarray@12@H@Z
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?_Fiopen@std@@YAPAU_iobuf@@PBGHH@Z
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
?_Fput@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@DPBDIIII@Z
?_Fput@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABA?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@GPBDIIII@Z
?_Fput@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABA?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_WPBDIIII@Z
?_Future_error_map@std@@YAPBDH@Z
?_GetCombinableSize@details@Concurrency@@YAIXZ
?_GetCurrentThreadId@details@Concurrency@@YAKXZ
?_GetNextAsyncId@details@Concurrency@@YAIXZ
?_Get_future_error_what@std@@YAPBDH@Z
?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$codecvt@GDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$codecvt@_WDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$ctype@G@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@facet@locale@std@@SAIPAPBV123@PBV23@@Z
?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ
?_Getctype@_Locinfo@std@@QBE?AU_Ctypevec@@XZ
?_Getcvt@_Locinfo@std@@QBE?AU_Cvtvec@@XZ
?_Getdateorder@_Locinfo@std@@QBEHXZ
?_Getdays@_Locinfo@std@@QBEPBDXZ
?_Getfalse@_Locinfo@std@@QBEPBDXZ
?_Getffld@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@1AAVios_base@2@PAH@Z
?_Getffld@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@1AAVios_base@2@PAH@Z
?_Getffld@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@1AAVios_base@2@PAH@Z
?_Getffldx@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@1AAVios_base@2@PAH@Z
?_Getffldx@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@1AAVios_base@2@PAH@Z
?_Getffldx@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@1AAVios_base@2@PAH@Z
?_Getfmt@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@IBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@PBD@Z
?_Getfmt@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@IBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@PBD@Z
?_Getfmt@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@IBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@PBD@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Getifld@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@1HABVlocale@2@@Z
?_Getifld@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@1HABVlocale@2@@Z
?_Getifld@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@1HABVlocale@2@@Z
?_Getint@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABAHAAV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@0HHAAHABV?$ctype@D@2@@Z
?_Getint@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABAHAAV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@0HHAAHABV?$ctype@G@2@@Z
?_Getint@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABAHAAV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@0HHAAHABV?$ctype@_W@2@@Z
?_Getlconv@_Locinfo@std@@QBEPBUlconv@@XZ
?_Getmonths@_Locinfo@std@@QBEPBDXZ
?_Getname@_Locinfo@std@@QBEPBDXZ
?_Getpfirst@_Container_base12@std@@QBEPAPAU_Iterator_base12@2@XZ
?_Getptr@_Timevec@std@@QBEPAXXZ
?_Gettnames@_Locinfo@std@@QBE?AV_Timevec@2@XZ
?_Gettrue@_Locinfo@std@@QBEPBDXZ
?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBE_JXZ
?_Gnavail@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBE_JXZ
?_Gnavail@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBE_JXZ
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Gndec@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEPAGXZ
?_Gndec@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Gninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEPAGXZ
?_Gninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?_Gnpreinc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Gnpreinc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEPAGXZ
?_Gnpreinc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?_Id_cnt@id@locale@std@@0HA
?_Ifmt@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABAPADPADPBDH@Z
?_Ifmt@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABAPADPADPBDH@Z
?_Ifmt@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABAPADPADPBDH@Z
?_Incref@facet@locale@std@@UAEXXZ
?_Index@ios_base@std@@0HA
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAPAD0PAH001@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?_Init@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXPAPAG0PAH001@Z
?_Init@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXXZ
?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPAPA_W0PAH001@Z
?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXXZ
?_Init@?$codecvt@DDH@std@@IAEXABV_Locinfo@2@@Z
?_Init@?$codecvt@GDH@std@@IAEXABV_Locinfo@2@@Z
?_Init@?$codecvt@_WDH@std@@IAEXABV_Locinfo@2@@Z
?_Init@?$ctype@D@std@@IAEXABV_Locinfo@2@@Z
?_Init@?$ctype@G@std@@IAEXABV_Locinfo@2@@Z
?_Init@?$ctype@_W@std@@IAEXABV_Locinfo@2@@Z
?_Init@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@IAEXABV_Locinfo@2@@Z
?_Init@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@IAEXABV_Locinfo@2@@Z
?_Init@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@IAEXABV_Locinfo@2@@Z
?_Init@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@IAEXABV_Locinfo@2@@Z
?_Init@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@IAEXABV_Locinfo@2@@Z
?_Init@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@IAEXABV_Locinfo@2@@Z
?_Init@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@IAEXABV_Locinfo@2@@Z
?_Init@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@IAEXABV_Locinfo@2@@Z
?_Init@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@IAEXABV_Locinfo@2@@Z
?_Init@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@IAEXABV_Locinfo@2@@Z
?_Init@?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@IAEXABV_Locinfo@2@@Z
?_Init@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@IAEXABV_Locinfo@2@@Z
?_Init@ios_base@std@@IAEXXZ
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?_Init_cnt@Init@ios_base@std@@0HA
?_Init_cnt@_UShinit@std@@0HA
?_Init_cnt@_Winit@std@@0HA
?_Init_cnt_func@Init@ios_base@std@@CAAAHXZ
?_Init_ctor@Init@ios_base@std@@CAXPAV123@@Z
?_Init_dtor@Init@ios_base@std@@CAXPAV123@@Z
?_Init_locks_ctor@_Init_locks@std@@CAXPAV12@@Z
?_Init_locks_dtor@_Init_locks@std@@CAXPAV12@@Z
?_Internal_assign@_Concurrent_vector_base_v4@details@Concurrency@@IAEXABV123@IP6AXPAXI@ZP6AX1PBXI@Z4@Z
?_Internal_capacity@_Concurrent_vector_base_v4@details@Concurrency@@IBEIXZ
?_Internal_clear@_Concurrent_vector_base_v4@details@Concurrency@@IAEIP6AXPAXI@Z@Z
?_Internal_compact@_Concurrent_vector_base_v4@details@Concurrency@@IAEPAXIPAXP6AX0I@ZP6AX0PBXI@Z@Z
?_Internal_copy@_Concurrent_vector_base_v4@details@Concurrency@@IAEXABV123@IP6AXPAXPBXI@Z@Z
?_Internal_empty@_Concurrent_queue_base_v4@details@Concurrency@@IBE_NXZ
?_Internal_finish_clear@_Concurrent_queue_base_v4@details@Concurrency@@IAEXXZ
?_Internal_grow_by@_Concurrent_vector_base_v4@details@Concurrency@@IAEIIIP6AXPAXPBXI@Z1@Z
?_Internal_grow_to_at_least_with_result@_Concurrent_vector_base_v4@details@Concurrency@@IAEIIIP6AXPAXPBXI@Z1@Z
?_Internal_move_push@_Concurrent_queue_base_v4@details@Concurrency@@IAEXPAX@Z
?_Internal_pop_if_present@_Concurrent_queue_base_v4@details@Concurrency@@IAE_NPAX@Z
?_Internal_push@_Concurrent_queue_base_v4@details@Concurrency@@IAEXPBX@Z
?_Internal_push_back@_Concurrent_vector_base_v4@details@Concurrency@@IAEPAXIAAI@Z
?_Internal_reserve@_Concurrent_vector_base_v4@details@Concurrency@@IAEXIII@Z
?_Internal_resize@_Concurrent_vector_base_v4@details@Concurrency@@IAEXIIIP6AXPAXI@ZP6AX0PBXI@Z2@Z
?_Internal_size@_Concurrent_queue_base_v4@details@Concurrency@@IBEIXZ
?_Internal_swap@_Concurrent_queue_base_v4@details@Concurrency@@IAEXAAV123@@Z
?_Internal_swap@_Concurrent_vector_base_v4@details@Concurrency@@IAEXAAV123@@Z
?_Internal_throw_exception@_Concurrent_queue_base_v4@details@Concurrency@@IBEXXZ
?_Internal_throw_exception@_Concurrent_vector_base_v4@details@Concurrency@@IBEXI@Z
?_Ios_base_dtor@ios_base@std@@CAXPAV12@@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
?_Ipfx@?$basic_istream@GU?$char_traits@G@std@@@std@@QAE_N_N@Z
?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE_N_N@Z
?_Iput@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@DPADI@Z
?_Iput@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABA?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@GPADI@Z
?_Iput@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABA?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_WPADI@Z
?_Last_write_time@sys@tr2@std@@YAXPBD_J@Z
?_Last_write_time@sys@tr2@std@@YAXPB_W_J@Z
?_Last_write_time@sys@tr2@std@@YA_JPBD@Z
?_Last_write_time@sys@tr2@std@@YA_JPB_W@Z
?_Launch@_Pad@std@@QAEXPAU_Thrd_imp_t@@@Z
?_Link@sys@tr2@std@@YAHPBD0@Z
?_Link@sys@tr2@std@@YAHPB_W0@Z
?_Locimp_Addfac@_Locimp@locale@std@@CAXPAV123@PAVfacet@23@I@Z
?_Locimp_ctor@_Locimp@locale@std@@CAXPAV123@ABV123@@Z
?_Locimp_dtor@_Locimp@locale@std@@CAXPAV123@@Z
?_Locinfo_Addcats@_Locinfo@std@@SAAAV12@PAV12@HPBD@Z
?_Locinfo_ctor@_Locinfo@std@@SAXPAV12@HPBD@Z
?_Locinfo_ctor@_Locinfo@std@@SAXPAV12@PBD@Z
?_Locinfo_dtor@_Locinfo@std@@SAXPAV12@@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Lockit_ctor@_Lockit@std@@CAXPAV12@@Z
?_Lockit_ctor@_Lockit@std@@CAXPAV12@H@Z
?_Lockit_ctor@_Lockit@std@@SAXH@Z
?_Lockit_dtor@_Lockit@std@@CAXPAV12@@Z
?_Lockit_dtor@_Lockit@std@@SAXH@Z
?_Lstat@sys@tr2@std@@YA?AW4file_type@123@PBDAAH@Z
?_Lstat@sys@tr2@std@@YA?AW4file_type@123@PB_WAAH@Z
?_MP_Add@std@@YAXQA_K_K@Z
?_MP_Get@std@@YA_KQA_K@Z
?_MP_Mul@std@@YAXQA_K_K1@Z
?_MP_Rem@std@@YAXQA_K_K@Z
?_Make_dir@sys@tr2@std@@YAHPBD@Z
?_Make_dir@sys@tr2@std@@YAHPB_W@Z
?_Makeloc@_Locimp@locale@std@@CAPAV123@ABV_Locinfo@3@HPAV123@PBV23@@Z
?_Makeushloc@_Locimp@locale@std@@CAXABV_Locinfo@3@HPAV123@PBV23@@Z
?_Makewloc@_Locimp@locale@std@@CAXABV_Locinfo@3@HPAV123@PBV23@@Z
?_Makexloc@_Locimp@locale@std@@CAXABV_Locinfo@3@HPAV123@PBV23@@Z
?_Mtx_delete@threads@stdext@@YAXPAX@Z
?_Mtx_lock@threads@stdext@@YAXPAX@Z
?_Mtx_new@threads@stdext@@YAXAAPAX@Z
?_Mtx_unlock@threads@stdext@@YAXPAX@Z
?_New_Locimp@_Locimp@locale@std@@CAPAV123@ABV123@@Z
?_New_Locimp@_Locimp@locale@std@@CAPAV123@_N@Z
?_Open_dir@sys@tr2@std@@YAPAXPADPBDAAHAAW4file_type@123@@Z
?_Open_dir@sys@tr2@std@@YAPAXPA_WPB_WAAHAAW4file_type@123@@Z
?_Orphan_all@_Container_base0@std@@QAEXXZ
?_Orphan_all@_Container_base12@std@@QAEXXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEXXZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBE_JXZ
?_Pnavail@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBE_JXZ
?_Pnavail@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBE_JXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEPAGXZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?_Ptr_cerr@std@@3PAV?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Ptr_cin@std@@3PAV?$basic_istream@DU?$char_traits@D@std@@@1@A
?_Ptr_clog@std@@3PAV?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Ptr_cout@std@@3PAV?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Ptr_wcerr@std@@3PAV?$basic_ostream@GU?$char_traits@G@std@@@1@A
?_Ptr_wcerr@std@@3PAV?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
?_Ptr_wcin@std@@3PAV?$basic_istream@GU?$char_traits@G@std@@@1@A
?_Ptr_wcin@std@@3PAV?$basic_istream@_WU?$char_traits@_W@std@@@1@A
?_Ptr_wclog@std@@3PAV?$basic_ostream@GU?$char_traits@G@std@@@1@A
?_Ptr_wclog@std@@3PAV?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
?_Ptr_wcout@std@@3PAV?$basic_ostream@GU?$char_traits@G@std@@@1@A
?_Ptr_wcout@std@@3PAV?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
?_Put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@PBDI@Z
?_Put@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABA?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@PBGI@Z
?_Put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABA?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@PB_WI@Z
?_Raise_handler@std@@3P6AXABVexception@stdext@@@ZA
?_Random_device@std@@YAIXZ
?_Read_dir@sys@tr2@std@@YAPADPADPAXAAW4file_type@123@@Z
?_Read_dir@sys@tr2@std@@YAPA_WPA_WPAXAAW4file_type@123@@Z
?_Release@_Pad@std@@QAEXXZ
?_Remove_dir@sys@tr2@std@@YA_NPBD@Z
?_Remove_dir@sys@tr2@std@@YA_NPB_W@Z
?_Rename@sys@tr2@std@@YAHPBD0@Z
?_Rename@sys@tr2@std@@YAHPB_W0@Z
?_Rep@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@DI@Z
?_Rep@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABA?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@GI@Z
?_Rep@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABA?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@_WI@Z
?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z
?_Rng_abort@std@@YAXPBD@Z
?_Segment_index_of@_Concurrent_vector_base_v4@details@Concurrency@@KAII@Z
?_Setgloballocale@locale@std@@CAXPAX@Z
?_Src@?1??_Getffldx@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@DU?$char_traits@D@std@@@3@1AAVios_base@3@PAH@Z@4QBDB
?_Src@?1??_Getffldx@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@GU?$char_traits@G@std@@@3@1AAVios_base@3@PAH@Z@4QBDB
?_Src@?1??_Getffldx@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@3@1AAVios_base@3@PAH@Z@4QBDB
?_Src@?1??_Getifld@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@DU?$char_traits@D@std@@@3@1HABVlocale@3@@Z@4QBDB
?_Src@?1??_Getifld@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@GU?$char_traits@G@std@@@3@1HABVlocale@3@@Z@4QBDB
?_Src@?1??_Getifld@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@3@1HABVlocale@3@@Z@4QBDB
?_Src@?3??_Getffld@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@DU?$char_traits@D@std@@@3@1AAVios_base@3@PAH@Z@4QBDB
?_Src@?3??_Getffld@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@GU?$char_traits@G@std@@@3@1AAVios_base@3@PAH@Z@4QBDB
?_Src@?3??_Getffld@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@3@1AAVios_base@3@PAH@Z@4QBDB
?_Stat@sys@tr2@std@@YA?AW4file_type@123@PBDAAH@Z
?_Stat@sys@tr2@std@@YA?AW4file_type@123@PB_WAAH@Z
?_Statvfs@sys@tr2@std@@YA?AUspace_info@123@PBD@Z
?_Statvfs@sys@tr2@std@@YA?AUspace_info@123@PB_W@Z
?_Swap_all@_Container_base0@std@@QAEXAAU12@@Z
?_Swap_all@_Container_base12@std@@QAEXAAU12@@Z
?_Symlink@sys@tr2@std@@YAHPBD0@Z
?_Symlink@sys@tr2@std@@YAHPB_W0@Z
?_Sync@ios_base@std@@0_NA
?_Syserror_map@std@@YAPBDH@Z
?_Throw_C_error@std@@YAXH@Z
?_Throw_Cpp_error@std@@YAXH@Z
?_Throw_future_error@std@@YAXABVerror_code@1@@Z
?_Throw_lock_error@threads@stdext@@YAXXZ
?_Throw_resource_error@threads@stdext@@YAXXZ
?_Tidy@?$_Yarn@D@std@@AAEXXZ
?_Tidy@?$_Yarn@_W@std@@AAEXXZ
?_Tidy@?$ctype@D@std@@IAEXXZ
?_Tidy@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@AAEXXZ
?_Tidy@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@AAEXXZ
?_Tidy@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@AAEXXZ
?_Tidy@ios_base@std@@AAEXXZ
?_Unlink@sys@tr2@std@@YAHPBD@Z
?_Unlink@sys@tr2@std@@YAHPB_W@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_W_Getdays@_Locinfo@std@@QBEPBGXZ
?_W_Getmonths@_Locinfo@std@@QBEPBGXZ
?_W_Gettnames@_Locinfo@std@@QBE?AV_Timevec@2@XZ
?_Winerror_map@std@@YAPBDH@Z
?_XLgamma@std@@YAMM@Z
?_XLgamma@std@@YANN@Z
?_XLgamma@std@@YAOO@Z
?_Xbad_alloc@std@@YAXXZ
?_Xbad_function_call@std@@YAXXZ
?_Xinvalid_argument@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xoverflow_error@std@@YAXPBD@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Xruntime_error@std@@YAXPBD@Z
?adopt_lock@std@@3Uadopt_lock_t@1@B
?always_noconv@codecvt_base@std@@QBE_NXZ
?bad@ios_base@std@@QBE_NXZ
?c_str@?$_Yarn@D@std@@QBEPBDXZ
?cancel@agent@Concurrency@@QAE_NXZ
?cancel_current_task@Concurrency@@YAXXZ
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A
?classic@locale@std@@SAABV12@XZ
?classic_table@?$ctype@D@std@@SAPBFXZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXI@Z
?clear@?$basic_ios@GU?$char_traits@G@std@@@std@@QAEXH_N@Z
?clear@?$basic_ios@GU?$char_traits@G@std@@@std@@QAEXI@Z
?clear@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?clear@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXI@Z
?clear@ios_base@std@@QAEXH@Z
?clear@ios_base@std@@QAEXH_N@Z
?clear@ios_base@std@@QAEXI@Z
?clog@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?copyfmt@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEAAV12@ABV12@@Z
?copyfmt@?$basic_ios@GU?$char_traits@G@std@@@std@@QAEAAV12@ABV12@@Z
?copyfmt@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEAAV12@ABV12@@Z
?copyfmt@ios_base@std@@QAEAAV12@ABV12@@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?date_order@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AW4dateorder@time_base@2@XZ
?date_order@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AW4dateorder@time_base@2@XZ
?date_order@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AW4dateorder@time_base@2@XZ
?defer_lock@std@@3Udefer_lock_t@1@B
?do_always_noconv@?$codecvt@DDH@std@@MBE_NXZ
?do_always_noconv@?$codecvt@GDH@std@@MBE_NXZ
?do_always_noconv@?$codecvt@_WDH@std@@MBE_NXZ
?do_always_noconv@codecvt_base@std@@MBE_NXZ
?do_date_order@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AW4dateorder@time_base@2@XZ
?do_date_order@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AW4dateorder@time_base@2@XZ
?do_date_order@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AW4dateorder@time_base@2@XZ
?do_encoding@?$codecvt@GDH@std@@MBEHXZ
?do_encoding@?$codecvt@_WDH@std@@MBEHXZ
?do_encoding@codecvt_base@std@@MBEHXZ
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAAG@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAAI@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAAJ@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAAK@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAAM@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAAN@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAAO@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAAPAX@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAA_J@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAA_K@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAA_N@Z
?do_get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHAAG@Z
?do_get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHAAI@Z
?do_get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHAAJ@Z
?do_get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHAAK@Z
?do_get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHAAM@Z
?do_get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHAAN@Z
?do_get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHAAO@Z
?do_get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHAAPAX@Z
?do_get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHAA_J@Z
?do_get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHAA_K@Z
?do_get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHAA_N@Z
?do_get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAAG@Z
?do_get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAAI@Z
?do_get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAAJ@Z
?do_get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAAK@Z
?do_get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAAM@Z
?do_get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAAN@Z
?do_get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAAO@Z
?do_get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAAPAX@Z
?do_get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAA_J@Z
?do_get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAA_K@Z
?do_get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAA_N@Z
?do_get@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@DD@Z
?do_get@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@DD@Z
?do_get@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@DD@Z
?do_get_date@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z
?do_get_date@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z
?do_get_date@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z
?do_get_monthname@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z
?do_get_monthname@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z
?do_get_monthname@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z
?do_get_time@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z
?do_get_time@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z
?do_get_time@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z
?do_get_weekday@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z
?do_get_weekday@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z
?do_get_weekday@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z
?do_get_year@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z
?do_get_year@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z
?do_get_year@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z
?do_in@?$codecvt@DDH@std@@MBEHAAHPBD1AAPBDPAD3AAPAD@Z
?do_in@?$codecvt@GDH@std@@MBEHAAHPBD1AAPBDPAG3AAPAG@Z
?do_in@?$codecvt@_WDH@std@@MBEHAAHPBD1AAPBDPA_W3AAPA_W@Z
?do_is@?$ctype@G@std@@MBEPBGPBG0PAF@Z
?do_is@?$ctype@G@std@@MBE_NFG@Z
?do_is@?$ctype@_W@std@@MBEPB_WPB_W0PAF@Z
?do_is@?$ctype@_W@std@@MBE_NF_W@Z
?do_length@?$codecvt@DDH@std@@MBEHAAHPBD1I@Z
?do_length@?$codecvt@GDH@std@@MBEHAAHPBD1I@Z
?do_length@?$codecvt@_WDH@std@@MBEHAAHPBD1I@Z
?do_max_length@?$codecvt@GDH@std@@MBEHXZ
?do_max_length@?$codecvt@_WDH@std@@MBEHXZ
?do_max_length@codecvt_base@std@@MBEHXZ
?do_narrow@?$ctype@D@std@@MBEDDD@Z
?do_narrow@?$ctype@D@std@@MBEPBDPBD0DPAD@Z
?do_narrow@?$ctype@G@std@@MBEDGD@Z
?do_narrow@?$ctype@G@std@@MBEPBGPBG0DPAD@Z
?do_narrow@?$ctype@_W@std@@MBED_WD@Z
?do_narrow@?$ctype@_W@std@@MBEPB_WPB_W0DPAD@Z
?do_out@?$codecvt@DDH@std@@MBEHAAHPBD1AAPBDPAD3AAPAD@Z
?do_out@?$codecvt@GDH@std@@MBEHAAHPBG1AAPBGPAD3AAPAD@Z
?do_out@?$codecvt@_WDH@std@@MBEHAAHPB_W1AAPB_WPAD3AAPAD@Z
?do_put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@DJ@Z
?do_put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@DK@Z
?do_put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@DN@Z
?do_put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@DO@Z
?do_put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@DPBX@Z
?do_put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@D_J@Z
?do_put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@D_K@Z
?do_put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@D_N@Z
?do_put@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@GJ@Z
?do_put@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@GK@Z
?do_put@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@GN@Z
?do_put@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@GO@Z
?do_put@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@GPBX@Z
?do_put@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@G_J@Z
?do_put@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@G_K@Z
?do_put@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@G_N@Z
?do_put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_WJ@Z
?do_put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_WK@Z
?do_put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_WN@Z
?do_put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_WO@Z
?do_put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_WPBX@Z
?do_put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_W_J@Z
?do_put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_W_K@Z
?do_put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_W_N@Z
?do_put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@DPBUtm@@DD@Z
?do_put@?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@GPBUtm@@DD@Z
?do_put@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_WPBUtm@@DD@Z
?do_scan_is@?$ctype@G@std@@MBEPBGFPBG0@Z
?do_scan_is@?$ctype@_W@std@@MBEPB_WFPB_W0@Z
?do_scan_not@?$ctype@G@std@@MBEPBGFPBG0@Z
?do_scan_not@?$ctype@_W@std@@MBEPB_WFPB_W0@Z
?do_tolower@?$ctype@D@std@@MBEDD@Z
?do_tolower@?$ctype@D@std@@MBEPBDPADPBD@Z
?do_tolower@?$ctype@G@std@@MBEGG@Z
?do_tolower@?$ctype@G@std@@MBEPBGPAGPBG@Z
?do_tolower@?$ctype@_W@std@@MBEPB_WPA_WPB_W@Z
?do_tolower@?$ctype@_W@std@@MBE_W_W@Z
?do_toupper@?$ctype@D@std@@MBEDD@Z
?do_toupper@?$ctype@D@std@@MBEPBDPADPBD@Z
?do_toupper@?$ctype@G@std@@MBEGG@Z
?do_toupper@?$ctype@G@std@@MBEPBGPAGPBG@Z
?do_toupper@?$ctype@_W@std@@MBEPB_WPA_WPB_W@Z
?do_toupper@?$ctype@_W@std@@MBE_W_W@Z
?do_unshift@?$codecvt@DDH@std@@MBEHAAHPAD1AAPAD@Z
?do_unshift@?$codecvt@GDH@std@@MBEHAAHPAD1AAPAD@Z
?do_unshift@?$codecvt@_WDH@std@@MBEHAAHPAD1AAPAD@Z
?do_widen@?$ctype@D@std@@MBEDD@Z
?do_widen@?$ctype@D@std@@MBEPBDPBD0PAD@Z
?do_widen@?$ctype@G@std@@MBEGD@Z
?do_widen@?$ctype@G@std@@MBEPBDPBD0PAG@Z
?do_widen@?$ctype@_W@std@@MBEPBDPBD0PA_W@Z
?do_widen@?$ctype@_W@std@@MBE_WD@Z
?done@agent@Concurrency@@IAE_NXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?eback@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ
?eback@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?egptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ
?egptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
?empty@?$_Yarn@D@std@@QBE_NXZ
?empty@locale@std@@SA?AV12@XZ
?encoding@codecvt_base@std@@QBEHXZ
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?endl@std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@1@AAV21@@Z
?endl@std@@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@1@AAV21@@Z
?ends@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?ends@std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@1@AAV21@@Z
?ends@std@@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@1@AAV21@@Z
?eof@ios_base@std@@QBE_NXZ
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?epptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ
?epptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
?exceptions@ios_base@std@@QAEXH@Z
?exceptions@ios_base@std@@QAEXI@Z
?exceptions@ios_base@std@@QBEHXZ
?fail@ios_base@std@@QBE_NXZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEDD@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
?fill@?$basic_ios@GU?$char_traits@G@std@@@std@@QAEGG@Z
?fill@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEGXZ
?fill@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAE_W_W@Z
?fill@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBE_WXZ
?flags@ios_base@std@@QAEHH@Z
?flags@ios_base@std@@QBEHXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV12@XZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
?flush@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?flush@std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@1@AAV21@@Z
?flush@std@@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@1@AAV21@@Z
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXH@Z
?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXH@Z
?gcount@?$basic_istream@DU?$char_traits@D@std@@@std@@QBE_JXZ
?gcount@?$basic_istream@GU?$char_traits@G@std@@@std@@QBE_JXZ
?gcount@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QBE_JXZ
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@AAD@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@AAV?$basic_streambuf@DU?$char_traits@D@std@@@2@@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@AAV?$basic_streambuf@DU?$char_traits@D@std@@@2@D@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_JD@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?get@?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV12@AAG@Z
?get@?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV12@AAV?$basic_streambuf@GU?$char_traits@G@std@@@2@@Z
?get@?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV12@AAV?$basic_streambuf@GU?$char_traits@G@std@@@2@G@Z
?get@?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV12@PAG_J@Z
?get@?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV12@PAG_JG@Z
?get@?$basic_istream@GU?$char_traits@G@std@@@std@@QAEGXZ
?get@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@AAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@@Z
?get@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@AAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@_W@Z
?get@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@AA_W@Z
?get@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@PA_W_J@Z
?get@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@PA_W_J_W@Z
?get@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEGXZ
?get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAAG@Z
?get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAAI@Z
?get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAAJ@Z
?get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAAK@Z
?get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAAM@Z
?get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAAN@Z
?get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAAO@Z
?get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAAPAX@Z
?get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAA_J@Z
?get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAA_K@Z
?get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAA_N@Z
?get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHAAG@Z
?get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHAAI@Z
?get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHAAJ@Z
?get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHAAK@Z
?get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHAAM@Z
?get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHAAN@Z
?get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHAAO@Z
?get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHAAPAX@Z
?get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHAA_J@Z
?get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHAA_K@Z
?get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHAA_N@Z
?get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAAG@Z
?get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAAI@Z
?get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAAJ@Z
?get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAAK@Z
?get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAAM@Z
?get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAAN@Z
?get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAAO@Z
?get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAAPAX@Z
?get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAA_J@Z
?get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAA_K@Z
?get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAA_N@Z
?get@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@DD@Z
?get@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@PBD4@Z
?get@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@DD@Z
?get@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@PBG4@Z
?get@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@DD@Z
?get@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@PB_W4@Z
?get_date@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z
?get_date@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z
?get_date@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z
?get_monthname@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z
?get_monthname@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z
?get_monthname@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z
?get_new_handler@std@@YAP6AXXZXZ
?get_time@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z
?get_time@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z
?get_time@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z
?get_weekday@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z
?get_weekday@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z
?get_weekday@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z
?get_year@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z
?get_year@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z
?get_year@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z
?getline@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
?getline@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_JD@Z
?getline@?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV12@PAG_J@Z
?getline@?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV12@PAG_JG@Z
?getline@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@PA_W_J@Z
?getline@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@PA_W_J_W@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?getloc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QBE?AVlocale@2@XZ
?getloc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QBE?AVlocale@2@XZ
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?global@locale@std@@SA?AV12@ABV12@@Z
?good@ios_base@std@@QBE_NXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?gptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ
?gptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
?id@?$codecvt@DDH@std@@2V0locale@2@A
?id@?$codecvt@GDH@std@@2V0locale@2@A
?id@?$codecvt@_WDH@std@@2V0locale@2@A
?id@?$collate@D@std@@2V0locale@2@A
?id@?$collate@G@std@@2V0locale@2@A
?id@?$collate@_W@std@@2V0locale@2@A
?id@?$ctype@D@std@@2V0locale@2@A
?id@?$ctype@G@std@@2V0locale@2@A
?id@?$ctype@_W@std@@2V0locale@2@A
?id@?$messages@D@std@@2V0locale@2@A
?id@?$messages@G@std@@2V0locale@2@A
?id@?$messages@_W@std@@2V0locale@2@A
?id@?$money_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
?id@?$money_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@2V0locale@2@A
?id@?$money_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@2V0locale@2@A
?id@?$money_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
?id@?$money_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@2V0locale@2@A
?id@?$money_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@2V0locale@2@A
?id@?$moneypunct@D$00@std@@2V0locale@2@A
?id@?$moneypunct@D$0A@@std@@2V0locale@2@A
?id@?$moneypunct@G$00@std@@2V0locale@2@A
?id@?$moneypunct@G$0A@@std@@2V0locale@2@A
?id@?$moneypunct@_W$00@std@@2V0locale@2@A
?id@?$moneypunct@_W$0A@@std@@2V0locale@2@A
?id@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
?id@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@2V0locale@2@A
?id@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@2V0locale@2@A
?id@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
?id@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@2V0locale@2@A
?id@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@2V0locale@2@A
?id@?$numpunct@D@std@@2V0locale@2@A
?id@?$numpunct@G@std@@2V0locale@2@A
?id@?$numpunct@_W@std@@2V0locale@2@A
?id@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
?id@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@2V0locale@2@A
?id@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@2V0locale@2@A
?id@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
?id@?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@2V0locale@2@A
?id@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@2V0locale@2@A
?ignore@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z
?ignore@?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV12@_JG@Z
?ignore@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@_JG@Z
?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QAE?AVlocale@2@ABV32@@Z
?imbue@?$basic_ios@GU?$char_traits@G@std@@@std@@QAE?AVlocale@2@ABV32@@Z
?imbue@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAE?AVlocale@2@ABV32@@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEXABVlocale@2@@Z
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
?imbue@ios_base@std@@QAE?AVlocale@2@ABV32@@Z
?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?in@?$codecvt@GDH@std@@QBEHAAHPBD1AAPBDPAG3AAPAG@Z
?in@?$codecvt@_WDH@std@@QBEHAAHPBD1AAPBDPA_W3AAPA_W@Z
?in_avail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JXZ
?in_avail@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAE_JXZ
?in_avail@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JXZ
?init@?$basic_ios@DU?$char_traits@D@std@@@std@@IAEXPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@_N@Z
?init@?$basic_ios@GU?$char_traits@G@std@@@std@@IAEXPAV?$basic_streambuf@GU?$char_traits@G@std@@@2@_N@Z
?init@?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAEXPAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@_N@Z
?intl@?$moneypunct@D$00@std@@2_NB
?intl@?$moneypunct@D$0A@@std@@2_NB
?intl@?$moneypunct@G$00@std@@2_NB
?intl@?$moneypunct@G$0A@@std@@2_NB
?intl@?$moneypunct@_W$00@std@@2_NB
?intl@?$moneypunct@_W$0A@@std@@2_NB
?ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
?ipfx@?$basic_istream@GU?$char_traits@G@std@@@std@@QAE_N_N@Z
?ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE_N_N@Z
?is@?$ctype@D@std@@QBEPBDPBD0PAF@Z
?is@?$ctype@D@std@@QBE_NFD@Z
?is@?$ctype@G@std@@QBEPBGPBG0PAF@Z
?is@?$ctype@G@std@@QBE_NFG@Z
?is@?$ctype@_W@std@@QBEPB_WPB_W0PAF@Z
?is@?$ctype@_W@std@@QBE_NF_W@Z
?is_current_task_group_canceling@Concurrency@@YA_NXZ
?is_task_cancellation_requested@Concurrency@@YA_NXZ
?isfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEXXZ
?isfx@?$basic_istream@GU?$char_traits@G@std@@@std@@QAEXXZ
?isfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?iword@ios_base@std@@QAEAAJH@Z
?length@?$codecvt@DDH@std@@QBEHAAHPBD1I@Z
?length@?$codecvt@GDH@std@@QBEHAAHPBD1I@Z
?length@?$codecvt@_WDH@std@@QBEHAAHPBD1I@Z
?max_length@codecvt_base@std@@QBEHXZ
?move@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEX$$QAV12@@Z
?move@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXAAV12@@Z
?move@?$basic_ios@GU?$char_traits@G@std@@@std@@QAEX$$QAV12@@Z
?move@?$basic_ios@GU?$char_traits@G@std@@@std@@QAEXAAV12@@Z
?move@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEX$$QAV12@@Z
?move@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXAAV12@@Z
?narrow@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDDD@Z
?narrow@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEDGD@Z
?narrow@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBED_WD@Z
?narrow@?$ctype@D@std@@QBEDDD@Z
?narrow@?$ctype@D@std@@QBEPBDPBD0DPAD@Z
?narrow@?$ctype@G@std@@QBEDGD@Z
?narrow@?$ctype@G@std@@QBEPBGPBG0DPAD@Z
?narrow@?$ctype@_W@std@@QBED_WD@Z
?narrow@?$ctype@_W@std@@QBEPB_WPB_W0DPAD@Z
?opfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE_NXZ
?opfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE_NXZ
?opfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE_NXZ
?osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEXXZ
?osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?out@?$codecvt@GDH@std@@QBEHAAHPBG1AAPBGPAD3AAPAD@Z
?out@?$codecvt@_WDH@std@@QBEHAAHPB_W1AAPB_WPAD3AAPAD@Z
?overflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z
?overflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEGG@Z
?overflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGG@Z
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z
?pbackfail@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEGG@Z
?pbackfail@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGG@Z
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pbase@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ
?pbase@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?pbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXH@Z
?pbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXH@Z
?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?peek@?$basic_istream@GU?$char_traits@G@std@@@std@@QAEGXZ
?peek@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEGXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ
?pptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
?precision@ios_base@std@@QAE_J_J@Z
?precision@ios_base@std@@QBE_JXZ
?pubimbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE?AVlocale@2@ABV32@@Z
?pubimbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAE?AVlocale@2@ABV32@@Z
?pubimbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE?AVlocale@2@ABV32@@Z
?pubseekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@_JHH@Z
?pubseekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@_JII@Z
?pubseekoff@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAE?AV?$fpos@H@2@_JHH@Z
?pubseekoff@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAE?AV?$fpos@H@2@_JII@Z
?pubseekoff@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE?AV?$fpos@H@2@_JHH@Z
?pubseekoff@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE?AV?$fpos@H@2@_JII@Z
?pubseekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@V32@H@Z
?pubseekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@V32@I@Z
?pubseekpos@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAE?AV?$fpos@H@2@V32@H@Z
?pubseekpos@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAE?AV?$fpos@H@2@V32@I@Z
?pubseekpos@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE?AV?$fpos@H@2@V32@H@Z
?pubseekpos@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE?AV?$fpos@H@2@V32@I@Z
?pubsetbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEPAV12@PAD_J@Z
?pubsetbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEPAV12@PAG_J@Z
?pubsetbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEPAV12@PA_W_J@Z
?pubsync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?pubsync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEHXZ
?pubsync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEHXZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?put@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV12@G@Z
?put@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@_W@Z
?put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@DJ@Z
?put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@DK@Z
?put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@DN@Z
?put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@DO@Z
?put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@DPBX@Z
?put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@D_J@Z
?put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@D_K@Z
?put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@D_N@Z
?put@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@GJ@Z
?put@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@GK@Z
?put@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@GN@Z
?put@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@GO@Z
?put@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@GPBX@Z
?put@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@G_J@Z
?put@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@G_K@Z
?put@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@G_N@Z
?put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_WJ@Z
?put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_WK@Z
?put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_WN@Z
?put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_WO@Z
?put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_WPBX@Z
?put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_W_J@Z
?put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_W_K@Z
?put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_W_N@Z
?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@DPBUtm@@DD@Z
?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@DPBUtm@@PBD3@Z
?put@?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@GPBUtm@@DD@Z
?put@?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@GPBUtm@@PBG3@Z
?put@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_WPBUtm@@DD@Z
?put@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_WPBUtm@@PB_W4@Z
?putback@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?putback@?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV12@G@Z
?putback@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@_W@Z
?pword@ios_base@std@@QAEAAPAXH@Z
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@PAV32@@Z
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?rdbuf@?$basic_ios@GU?$char_traits@G@std@@@std@@QAEPAV?$basic_streambuf@GU?$char_traits@G@std@@@2@PAV32@@Z
?rdbuf@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEPAV?$basic_streambuf@GU?$char_traits@G@std@@@2@XZ
?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEPAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@PAV32@@Z
?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBEPAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@XZ
?rdstate@ios_base@std@@QBEHXZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
?read@?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV12@PAG_J@Z
?read@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@PA_W_J@Z
?readsome@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_JPAD_J@Z
?readsome@?$basic_istream@GU?$char_traits@G@std@@@std@@QAE_JPAG_J@Z
?readsome@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE_JPA_W_J@Z
?register_callback@ios_base@std@@QAEXP6AXW4event@12@AAV12@H@ZH@Z
?resetiosflags@std@@YA?AU?$_Smanip@H@1@H@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sbumpc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ
?sbumpc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ
?scan_is@?$ctype@D@std@@QBEPBDFPBD0@Z
?scan_is@?$ctype@G@std@@QBEPBGFPBG0@Z
?scan_is@?$ctype@_W@std@@QBEPB_WFPB_W0@Z
?scan_not@?$ctype@D@std@@QBEPBDFPBD0@Z
?scan_not@?$ctype@G@std@@QBEPBGFPBG0@Z
?scan_not@?$ctype@_W@std@@QBEPB_WFPB_W0@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z
?seekg@?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z
?seekg@?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV12@_JH@Z
?seekg@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z
?seekg@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@_JH@Z
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@H@2@_JHH@Z
?seekoff@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE?AV?$fpos@H@2@_JHH@Z
?seekoff@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE?AV?$fpos@H@2@_JHH@Z
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z
?seekp@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z
?seekp@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV12@_JH@Z
?seekp@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z
?seekp@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@_JH@Z
?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@H@2@V32@H@Z
?seekpos@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE?AV?$fpos@H@2@V32@H@Z
?seekpos@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE?AV?$fpos@H@2@V32@H@Z
?set_new_handler@std@@YAP6AXXZP6AXXZ@Z
?set_rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@@Z
?set_rdbuf@?$basic_ios@GU?$char_traits@G@std@@@std@@QAEXPAV?$basic_streambuf@GU?$char_traits@G@std@@@2@@Z
?set_rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXPAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@@Z
?setbase@std@@YA?AU?$_Smanip@H@1@H@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEPAV12@PAG_J@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z
?setf@ios_base@std@@QAEHH@Z
?setf@ios_base@std@@QAEHHH@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?setg@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXPAG00@Z
?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W00@Z
?setiosflags@std@@YA?AU?$_Smanip@H@1@H@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD0@Z
?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXPAG00@Z
?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXPAG0@Z
?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W00@Z
?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W0@Z
?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXI@Z
?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QAEXH_N@Z
?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QAEXI@Z
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXI@Z
?setstate@ios_base@std@@QAEXH@Z
?setstate@ios_base@std@@QAEXH_N@Z
?setstate@ios_base@std@@QAEXI@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sgetc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ
?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ
?sgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPAD_J@Z
?sgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAE_JPAG_J@Z
?sgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPA_W_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?snextc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ
?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ
?sputbackc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sputbackc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGG@Z
?sputbackc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGG@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?sputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAE_JPBG_J@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z
?start@agent@Concurrency@@QAE_NXZ
?status@agent@Concurrency@@QAE?AW4agent_status@2@XZ
?status_port@agent@Concurrency@@QAEPAV?$ISource@W4agent_status@Concurrency@@@2@XZ
?stossc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?stossc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEXXZ
?stossc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?sungetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sungetc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ
?sungetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ
?swap@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXAAV12@@Z
?swap@?$basic_ios@GU?$char_traits@G@std@@@std@@QAEXAAV12@@Z
?swap@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXAAV12@@Z
?swap@?$basic_iostream@DU?$char_traits@D@std@@@std@@IAEXAAV12@@Z
?swap@?$basic_iostream@GU?$char_traits@G@std@@@std@@IAEXAAV12@@Z
?swap@?$basic_iostream@_WU?$char_traits@_W@std@@@std@@IAEXAAV12@@Z
?swap@?$basic_istream@DU?$char_traits@D@std@@@std@@IAEXAAV12@@Z
?swap@?$basic_istream@GU?$char_traits@G@std@@@std@@IAEXAAV12@@Z
?swap@?$basic_istream@_WU?$char_traits@_W@std@@@std@@IAEXAAV12@@Z
?swap@?$basic_ostream@DU?$char_traits@D@std@@@std@@IAEXAAV12@@Z
?swap@?$basic_ostream@GU?$char_traits@G@std@@@std@@IAEXAAV12@@Z
?swap@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@IAEXAAV12@@Z
?swap@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXAAV12@@Z
?swap@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXAAV12@@Z
?swap@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXAAV12@@Z
?swap@ios_base@std@@QAEXAAV12@@Z
?sync@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?sync@?$basic_istream@GU?$char_traits@G@std@@@std@@QAEHXZ
?sync@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEHXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEHXZ
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?sync_with_stdio@ios_base@std@@SA_N_N@Z
?table@?$ctype@D@std@@QBEPBFXZ
?table_size@?$ctype@D@std@@2IB
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ
?tellg@?$basic_istream@GU?$char_traits@G@std@@@std@@QAE?AV?$fpos@H@2@XZ
?tellg@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE?AV?$fpos@H@2@XZ
?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ
?tellp@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE?AV?$fpos@H@2@XZ
?tellp@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE?AV?$fpos@H@2@XZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@PAV32@@Z
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?tie@?$basic_ios@GU?$char_traits@G@std@@@std@@QAEPAV?$basic_ostream@GU?$char_traits@G@std@@@2@PAV32@@Z
?tie@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEPAV?$basic_ostream@GU?$char_traits@G@std@@@2@XZ
?tie@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEPAV?$basic_ostream@_WU?$char_traits@_W@std@@@2@PAV32@@Z
?tie@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBEPAV?$basic_ostream@_WU?$char_traits@_W@std@@@2@XZ
?tolower@?$ctype@D@std@@QBEDD@Z
?tolower@?$ctype@D@std@@QBEPBDPADPBD@Z
?tolower@?$ctype@G@std@@QBEGG@Z
?tolower@?$ctype@G@std@@QBEPBGPAGPBG@Z
?tolower@?$ctype@_W@std@@QBEPB_WPA_WPB_W@Z
?tolower@?$ctype@_W@std@@QBE_W_W@Z
?toupper@?$ctype@D@std@@QBEDD@Z
?toupper@?$ctype@D@std@@QBEPBDPADPBD@Z
?toupper@?$ctype@G@std@@QBEGG@Z
?toupper@?$ctype@G@std@@QBEPBGPAGPBG@Z
?toupper@?$ctype@_W@std@@QBEPB_WPA_WPB_W@Z
?toupper@?$ctype@_W@std@@QBE_W_W@Z
?try_to_lock@std@@3Utry_to_lock_t@1@B
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEGXZ
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?uncaught_exception@std@@YA_NXZ
?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?underflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEGXZ
?underflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?unget@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?unget@?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV12@XZ
?unget@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
?unsetf@ios_base@std@@QAEXH@Z
?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z
?unshift@?$codecvt@GDH@std@@QBEHAAHPAD1AAPAD@Z
?unshift@?$codecvt@_WDH@std@@QBEHAAHPAD1AAPAD@Z
?wait@agent@Concurrency@@SA?AW4agent_status@2@PAV12@I@Z
?wait_for_all@agent@Concurrency@@SAXIPAPAV12@PAW4agent_status@2@I@Z
?wait_for_one@agent@Concurrency@@SAXIPAPAV12@AAW4agent_status@2@AAII@Z
?wcerr@std@@3V?$basic_ostream@GU?$char_traits@G@std@@@1@A
?wcerr@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
?wcin@std@@3V?$basic_istream@GU?$char_traits@G@std@@@1@A
?wcin@std@@3V?$basic_istream@_WU?$char_traits@_W@std@@@1@A
?wclog@std@@3V?$basic_ostream@GU?$char_traits@G@std@@@1@A
?wclog@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
?wcout@std@@3V?$basic_ostream@GU?$char_traits@G@std@@@1@A
?wcout@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?widen@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEGD@Z
?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBE_WD@Z
?widen@?$ctype@D@std@@QBEDD@Z
?widen@?$ctype@D@std@@QBEPBDPBD0PAD@Z
?widen@?$ctype@G@std@@QBEGD@Z
?widen@?$ctype@G@std@@QBEPBDPBD0PAG@Z
?widen@?$ctype@_W@std@@QBEPBDPBD0PA_W@Z
?widen@?$ctype@_W@std@@QBE_WD@Z
?width@ios_base@std@@QAE_J_J@Z
?width@ios_base@std@@QBE_JXZ
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
?write@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV12@PBG_J@Z
?write@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@PB_W_J@Z
?ws@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@1@AAV21@@Z
?ws@std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@1@AAV21@@Z
?ws@std@@YAAAV?$basic_istream@_WU?$char_traits@_W@std@@@1@AAV21@@Z
?xalloc@ios_base@std@@SAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JPAG_J@Z
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JPBG_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
_Call_once
_Call_onceEx
_Cnd_broadcast
_Cnd_destroy
_Cnd_do_broadcast_at_thread_exit
_Cnd_init
_Cnd_register_at_thread_exit
_Cnd_signal
_Cnd_timedwait
_Cnd_unregister_at_thread_exit
_Cnd_wait
_Cosh
_Denorm
_Dint
_Dnorm
_Do_call
_Dscale
_Dtento
_Dtest
_Dunscale
_Eps
_Exp
_FCosh
_FDenorm
_FDint
_FDnorm
_FDscale
_FDtento
_FDtest
_FDunscale
_FEps
_FExp
_FInf
_FNan
_FRteps
_FSinh
_FSnan
_FXbig
_FXp_addh
_FXp_addx
_FXp_getw
_FXp_invx
_FXp_ldexpx
_FXp_movx
_FXp_mulh
_FXp_mulx
_FXp_setn
_FXp_setw
_FXp_sqrtx
_FXp_subx
_FZero
_Getcoll
_Getctype
_Getcvt
_Getdateorder
_Getwctype
_Getwctypes
_Hugeval
_Inf
_LCosh
_LDenorm
_LDint
_LDscale
_LDtento
_LDtest
_LDunscale
_LEps
_LExp
_LInf
_LNan
_LPoly
_LRteps
_LSinh
_LSnan
_LXbig
_LXp_addh
_LXp_addx
_LXp_getw
_LXp_invx
_LXp_ldexpx
_LXp_movx
_LXp_mulh
_LXp_mulx
_LXp_setn
_LXp_setw
_LXp_sqrtx
_LXp_subx
_LZero
_Lock_shared_ptr_spin_lock
_Mbrtowc
_Mtx_clear_owner
_Mtx_current_owns
_Mtx_destroy
_Mtx_getconcrtcs
_Mtx_init
_Mtx_lock
_Mtx_reset_owner
_Mtx_timedlock
_Mtx_trylock
_Mtx_unlock
_Mtxdst
_Mtxinit
_Mtxlock
_Mtxunlock
_Nan
_Once
_Poly
_Rteps
_Sinh
_Snan
_Stod
_Stodx
_Stof
_Stoflt
_Stofx
_Stold
_Stoldx
_Stoll
_Stollx
_Stolx
_Stopfx
_Stoul
_Stoull
_Stoullx
_Stoulx
_Stoxflt
_Strcoll
_Strxfrm
_Thrd_abort
_Thrd_create
_Thrd_current
_Thrd_detach
_Thrd_equal
_Thrd_exit
_Thrd_join
_Thrd_lt
_Thrd_sleep
_Thrd_start
_Thrd_yield
_Tolower
_Toupper
_Towlower
_Towupper
_Tss_create
_Tss_delete
_Tss_get
_Tss_set
_Unlock_shared_ptr_spin_lock
_Wcrtomb
_Wcscoll
_Wcsxfrm
_Xbig
_Xp_addh
_Xp_addx
_Xp_getw
_Xp_invx
_Xp_ldexpx
_Xp_movx
_Xp_mulh
_Xp_mulx
_Xp_setn
_Xp_setw
_Xp_sqrtx
_Xp_subx
_Xtime_diff_to_millis
_Xtime_diff_to_millis2
_Xtime_get_ticks
_Zero
__Wcrtomb_lk
towctrans
wctrans
wctype
xtime_get
Name
.text
Size
390KB
Virtual Size
389KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
95KB
Virtual Size
95KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=185, version=30716,
count=220, id=1, productName=Unmarked objects,
count=3, id=203, version=50929,
count=8, id=205, version=50929,
count=51, id=207, version=50929,
count=80, id=206, version=50929,
count=6, id=211, version=50929,
count=1, id=202, version=50929,
count=1, id=201, version=50929,
count=1, id=204, version=50929,
msvcr110.dll
- IMPHASH e057a95f8936f77238b048f253956b3b
- SHA256 b30160e759115e24425b9bcdf606ef6ebce4657487525ede7f1ac40b90ff7e49
- MD5 4ba25d2cbe1587a841dcfb8c8c4a6ea6
- SHA1 52693d4b5e0b55a929099b680348c3932f2c3c62
- SHA512 82e86ec67a5c6cddf2230872f66560f4b0c3e4c1bb672507bbb8446a8d6f62512cbd0475fe23b619db3a67bb870f4f742761cf1f87d50db7f14076f54006f6c6
- SSDEEP 12288:TmCyHcMpK7QdgD+9Tr8r3FmJciMgLFWkA8qTWu+FVlofpJCjNdr12iqwZeq:TmCyHNIQdTryVmCipIkqTWu+Fr
- TLSH T19A15BE12B6D2C0B2C57200701628E772597FBA72547999BBAFD98E0E1DB06C0F71B772
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
d2:28:17:88:08:cf:56:44:da:80:3e:bc:8d:b4:d0:f7:6f:2b:96:48:b2:24:6c:ee:31:43:70:6e:3a:90:25:9d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 6, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
7f:48:28:6b:9a:08:17:2f:0b:a1:53:12:4c:43:44:c3:d6:a4:27:be
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 6, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:9d:1e:8d:27:ae:b8:f3:d8:38:00:01:00:00:00:9d
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 4, 2012 - Mar 4, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:B8EC-30A4-7144,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:02:92:4a:00:00:00:00:00:20
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 9, 2012 - Apr 9, 2013
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:08:e2:79:fa:0d:25:58:45:ea:00:00:00:00:00:08
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 7, 2012 - Oct 7, 2013
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:B8EC-30A4-7144,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:d4:55:00:00:00:00:00:0e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 9, 2012 - Apr 9, 2013
Minor OS version
0
Major OS version
6
Entry point
65852
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
msvcr110.i386.pdb
kernel32
EncodePointer
DecodePointer
RaiseException
GetModuleFileNameA
GetModuleFileNameW
GetLastError
InterlockedDecrement
ExitProcess
GetModuleHandleW
GetModuleHandleExW
GetProcAddress
AreFileApisANSI
MultiByteToWideChar
GetStdHandle
WriteFile
GetCommandLineA
GetCommandLineW
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
CloseHandle
CreateThread
ExitThread
ResumeThread
LoadLibraryExW
SetLastError
InterlockedIncrement
GetCurrentThread
FindClose
FindFirstFileExA
FindNextFileA
FindFirstFileExW
FindNextFileW
IsProcessorFeaturePresent
GetLogicalDrives
GetDiskFreeSpaceA
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
SetErrorMode
Beep
Sleep
SetEnvironmentVariableA
SetCurrentDirectoryA
GetCurrentDirectoryA
SetCurrentDirectoryW
GetCurrentDirectoryW
GetFullPathNameA
GetDriveTypeW
GetCurrentProcessId
GetFileAttributesExW
SetEnvironmentVariableW
SetFileAttributesW
GetFullPathNameW
CreateDirectoryW
MoveFileExW
RemoveDirectoryW
FileTimeToLocalFileTime
DeleteFileW
WaitForSingleObject
GetExitCodeProcess
CreateProcessA
FreeLibrary
LoadLibraryExA
CreateProcessW
ReadFile
DuplicateHandle
GetCurrentProcess
GetTempPathA
GetTempPathW
GetSystemTimeAsFileTime
GetTimeZoneInformation
GetLocalTime
WideCharToMultiByte
LocalFileTimeToFileTime
SetFileTime
SystemTimeToFileTime
SetLocalTime
TlsGetValue
TlsSetValue
InterlockedPopEntrySList
InterlockedFlushSList
QueryDepthSList
InterlockedPushEntrySList
CreateTimerQueue
CreateTimerQueueTimer
UnregisterWait
SetEvent
RegisterWaitForSingleObject
CreateEventW
SwitchToThread
SignalObjectAndWait
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
DeleteTimerQueueTimer
TryEnterCriticalSection
SetProcessAffinityMask
GetTickCount
VirtualFree
GetVersionExW
SetThreadPriority
VirtualAlloc
VirtualProtect
InitializeSListHead
ReleaseSemaphore
ChangeTimerQueueTimer
TlsAlloc
UnregisterWaitEx
TlsFree
GetThreadPriority
LoadLibraryW
OutputDebugStringW
FreeLibraryAndExitThread
GetModuleHandleA
GetThreadTimes
DebugBreak
GetStringTypeW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
RtlUnwind
HeapFree
HeapAlloc
GetProcessHeap
HeapReAlloc
HeapSize
HeapQueryInformation
HeapValidate
HeapCompact
HeapWalk
GetSystemInfo
VirtualQuery
GetFileType
GetStartupInfoW
GetFileInformationByHandle
PeekNamedPipe
CreateFileW
GetConsoleMode
ReadConsoleW
GetConsoleCP
SetFilePointerEx
FlushFileBuffers
SetFilePointer
CreatePipe
SetStdHandle
GetNumberOfConsoleInputEvents
PeekConsoleInputA
ReadConsoleInputA
SetConsoleMode
ReadConsoleInputW
WriteConsoleW
SetEndOfFile
InterlockedExchange
LockFileEx
UnlockFileEx
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
CreateSemaphoreW
SetConsoleCtrlHandler
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
OutputDebugStringA
$I10_OUTPUT
??0?$_SpinWait@$00@details@Concurrency@@QAE@P6AXXZ@Z
??0?$_SpinWait@$0A@@details@Concurrency@@QAE@P6AXXZ@Z
??0SchedulerPolicy@Concurrency@@QAA@IZZ
??0SchedulerPolicy@Concurrency@@QAE@ABV01@@Z
??0SchedulerPolicy@Concurrency@@QAE@XZ
??0_CancellationTokenState@details@Concurrency@@AAE@XZ
??0_Cancellation_beacon@details@Concurrency@@QAE@XZ
??0_Condition_variable@details@Concurrency@@QAE@XZ
??0_Context@details@Concurrency@@QAE@PAVContext@2@@Z
??0_Interruption_exception@details@Concurrency@@QAE@PBD@Z
??0_Interruption_exception@details@Concurrency@@QAE@XZ
??0_NonReentrantBlockingLock@details@Concurrency@@QAE@XZ
??0_NonReentrantPPLLock@details@Concurrency@@QAE@XZ
??0_ReaderWriterLock@details@Concurrency@@QAE@XZ
??0_ReentrantBlockingLock@details@Concurrency@@QAE@XZ
??0_ReentrantLock@details@Concurrency@@QAE@XZ
??0_ReentrantPPLLock@details@Concurrency@@QAE@XZ
??0_Scheduler@details@Concurrency@@QAE@PAVScheduler@2@@Z
??0_Scoped_lock@_NonReentrantPPLLock@details@Concurrency@@QAE@AAV123@@Z
??0_Scoped_lock@_ReentrantPPLLock@details@Concurrency@@QAE@AAV123@@Z
??0_SpinLock@details@Concurrency@@QAE@ACJ@Z
??0_StructuredTaskCollection@details@Concurrency@@QAE@PAV_CancellationTokenState@12@@Z
??0_TaskCollection@details@Concurrency@@QAE@PAV_CancellationTokenState@12@@Z
??0_TaskCollection@details@Concurrency@@QAE@XZ
??0_Timer@details@Concurrency@@IAE@I_N@Z
??0__non_rtti_object@std@@QAE@ABV01@@Z
??0__non_rtti_object@std@@QAE@PBD@Z
??0bad_cast@std@@AAE@PBQBD@Z
??0bad_cast@std@@QAE@ABV01@@Z
??0bad_cast@std@@QAE@PBD@Z
??0bad_target@Concurrency@@QAE@PBD@Z
??0bad_target@Concurrency@@QAE@XZ
??0bad_typeid@std@@QAE@ABV01@@Z
??0bad_typeid@std@@QAE@PBD@Z
??0context_self_unblock@Concurrency@@QAE@PBD@Z
??0context_self_unblock@Concurrency@@QAE@XZ
??0context_unblock_unbalanced@Concurrency@@QAE@PBD@Z
??0context_unblock_unbalanced@Concurrency@@QAE@XZ
??0critical_section@Concurrency@@QAE@XZ
??0default_scheduler_exists@Concurrency@@QAE@PBD@Z
??0default_scheduler_exists@Concurrency@@QAE@XZ
??0event@Concurrency@@QAE@XZ
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABQBDH@Z
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@XZ
??0improper_lock@Concurrency@@QAE@PBD@Z
??0improper_lock@Concurrency@@QAE@XZ
??0improper_scheduler_attach@Concurrency@@QAE@PBD@Z
??0improper_scheduler_attach@Concurrency@@QAE@XZ
??0improper_scheduler_detach@Concurrency@@QAE@PBD@Z
??0improper_scheduler_detach@Concurrency@@QAE@XZ
??0improper_scheduler_reference@Concurrency@@QAE@PBD@Z
??0improper_scheduler_reference@Concurrency@@QAE@XZ
??0invalid_link_target@Concurrency@@QAE@PBD@Z
??0invalid_link_target@Concurrency@@QAE@XZ
??0invalid_multiple_scheduling@Concurrency@@QAE@PBD@Z
??0invalid_multiple_scheduling@Concurrency@@QAE@XZ
??0invalid_operation@Concurrency@@QAE@PBD@Z
??0invalid_operation@Concurrency@@QAE@XZ
??0invalid_oversubscribe_operation@Concurrency@@QAE@PBD@Z
??0invalid_oversubscribe_operation@Concurrency@@QAE@XZ
??0invalid_scheduler_policy_key@Concurrency@@QAE@PBD@Z
??0invalid_scheduler_policy_key@Concurrency@@QAE@XZ
??0invalid_scheduler_policy_thread_specification@Concurrency@@QAE@PBD@Z
??0invalid_scheduler_policy_thread_specification@Concurrency@@QAE@XZ
??0invalid_scheduler_policy_value@Concurrency@@QAE@PBD@Z
??0invalid_scheduler_policy_value@Concurrency@@QAE@XZ
??0message_not_found@Concurrency@@QAE@PBD@Z
??0message_not_found@Concurrency@@QAE@XZ
??0missing_wait@Concurrency@@QAE@PBD@Z
??0missing_wait@Concurrency@@QAE@XZ
??0nested_scheduler_missing_detach@Concurrency@@QAE@PBD@Z
??0nested_scheduler_missing_detach@Concurrency@@QAE@XZ
??0operation_timed_out@Concurrency@@QAE@PBD@Z
??0operation_timed_out@Concurrency@@QAE@XZ
??0reader_writer_lock@Concurrency@@QAE@XZ
??0scheduler_not_attached@Concurrency@@QAE@PBD@Z
??0scheduler_not_attached@Concurrency@@QAE@XZ
??0scheduler_resource_allocation_error@Concurrency@@QAE@J@Z
??0scheduler_resource_allocation_error@Concurrency@@QAE@PBDJ@Z
??0scheduler_worker_creation_error@Concurrency@@QAE@J@Z
??0scheduler_worker_creation_error@Concurrency@@QAE@PBDJ@Z
??0scoped_lock@critical_section@Concurrency@@QAE@AAV12@@Z
??0scoped_lock@reader_writer_lock@Concurrency@@QAE@AAV12@@Z
??0scoped_lock_read@reader_writer_lock@Concurrency@@QAE@AAV12@@Z
??0task_canceled@Concurrency@@QAE@PBD@Z
??0task_canceled@Concurrency@@QAE@XZ
??0unsupported_os@Concurrency@@QAE@PBD@Z
??0unsupported_os@Concurrency@@QAE@XZ
??1SchedulerPolicy@Concurrency@@QAE@XZ
??1_CancellationTokenState@details@Concurrency@@UAE@XZ
??1_Cancellation_beacon@details@Concurrency@@QAE@XZ
??1_Condition_variable@details@Concurrency@@QAE@XZ
??1_NonReentrantBlockingLock@details@Concurrency@@QAE@XZ
??1_ReentrantBlockingLock@details@Concurrency@@QAE@XZ
??1_Scoped_lock@_NonReentrantPPLLock@details@Concurrency@@QAE@XZ
??1_Scoped_lock@_ReentrantPPLLock@details@Concurrency@@QAE@XZ
??1_SpinLock@details@Concurrency@@QAE@XZ
??1_TaskCollection@details@Concurrency@@QAE@XZ
??1_Timer@details@Concurrency@@MAE@XZ
??1__non_rtti_object@std@@UAE@XZ
??1bad_cast@std@@UAE@XZ
??1bad_typeid@std@@UAE@XZ
??1critical_section@Concurrency@@QAE@XZ
??1event@Concurrency@@QAE@XZ
??1exception@std@@UAE@XZ
??1reader_writer_lock@Concurrency@@QAE@XZ
??1scoped_lock@critical_section@Concurrency@@QAE@XZ
??1scoped_lock@reader_writer_lock@Concurrency@@QAE@XZ
??1scoped_lock_read@reader_writer_lock@Concurrency@@QAE@XZ
??1type_info@@UAE@XZ
??2@YAPAXI@Z
??2@YAPAXIHPBDH@Z
??3@YAXPAX@Z
??3@YAXPAXHPBDH@Z
??4?$_SpinWait@$00@details@Concurrency@@QAEAAV012@ABV012@@Z
??4?$_SpinWait@$0A@@details@Concurrency@@QAEAAV012@ABV012@@Z
??4SchedulerPolicy@Concurrency@@QAEAAV01@ABV01@@Z
??4__non_rtti_object@std@@QAEAAV01@ABV01@@Z
??4bad_cast@std@@QAEAAV01@ABV01@@Z
??4bad_typeid@std@@QAEAAV01@ABV01@@Z
??4exception@std@@QAEAAV01@ABV01@@Z
??8type_info@@QBE_NABV0@@Z
??9type_info@@QBE_NABV0@@Z
??_7__non_rtti_object@std@@6B@
??_7bad_cast@std@@6B@
??_7bad_typeid@std@@6B@
??_7exception@std@@6B@
??_F?$_SpinWait@$00@details@Concurrency@@QAEXXZ
??_F?$_SpinWait@$0A@@details@Concurrency@@QAEXXZ
??_F_Context@details@Concurrency@@QAEXXZ
??_F_Scheduler@details@Concurrency@@QAEXXZ
??_Fbad_cast@std@@QAEXXZ
??_Fbad_typeid@std@@QAEXXZ
??_U@YAPAXI@Z
??_U@YAPAXIHPBDH@Z
??_V@YAXPAX@Z
??_V@YAXPAXHPBDH@Z
?Alloc@Concurrency@@YAPAXI@Z
?Block@Context@Concurrency@@SAXXZ
?Create@CurrentScheduler@Concurrency@@SAXABVSchedulerPolicy@2@@Z
?Create@Scheduler@Concurrency@@SAPAV12@ABVSchedulerPolicy@2@@Z
?CreateResourceManager@Concurrency@@YAPAUIResourceManager@1@XZ
?CreateScheduleGroup@CurrentScheduler@Concurrency@@SAPAVScheduleGroup@2@AAVlocation@2@@Z
?CreateScheduleGroup@CurrentScheduler@Concurrency@@SAPAVScheduleGroup@2@XZ
?CurrentContext@Context@Concurrency@@SAPAV12@XZ
?Detach@CurrentScheduler@Concurrency@@SAXXZ
?DisableTracing@Concurrency@@YAJXZ
?EnableTracing@Concurrency@@YAJXZ
?Free@Concurrency@@YAXPAX@Z
?Get@CurrentScheduler@Concurrency@@SAPAVScheduler@2@XZ
?GetExecutionContextId@Concurrency@@YAIXZ
?GetNumberOfVirtualProcessors@CurrentScheduler@Concurrency@@SAIXZ
?GetOSVersion@Concurrency@@YA?AW4OSVersion@IResourceManager@1@XZ
?GetPolicy@CurrentScheduler@Concurrency@@SA?AVSchedulerPolicy@2@XZ
?GetPolicyValue@SchedulerPolicy@Concurrency@@QBEIW4PolicyElementKey@2@@Z
?GetProcessorCount@Concurrency@@YAIXZ
?GetProcessorNodeCount@Concurrency@@YAIXZ
?GetSchedulerId@Concurrency@@YAIXZ
?GetSharedTimerQueue@details@Concurrency@@YAPAXXZ
?Id@Context@Concurrency@@SAIXZ
?Id@CurrentScheduler@Concurrency@@SAIXZ
?IsAvailableLocation@CurrentScheduler@Concurrency@@SA_NABVlocation@2@@Z
?IsCurrentTaskCollectionCanceling@Context@Concurrency@@SA_NXZ
?Log2@details@Concurrency@@YAKI@Z
?Oversubscribe@Context@Concurrency@@SAX_N@Z
?RegisterShutdownEvent@CurrentScheduler@Concurrency@@SAXPAX@Z
?ResetDefaultSchedulerPolicy@Scheduler@Concurrency@@SAXXZ
?ScheduleGroupId@Context@Concurrency@@SAIXZ
?ScheduleTask@CurrentScheduler@Concurrency@@SAXP6AXPAX@Z0@Z
?ScheduleTask@CurrentScheduler@Concurrency@@SAXP6AXPAX@Z0AAVlocation@2@@Z
?SetConcurrencyLimits@SchedulerPolicy@Concurrency@@QAEXII@Z
?SetDefaultSchedulerPolicy@Scheduler@Concurrency@@SAXABVSchedulerPolicy@2@@Z
?SetPolicyValue@SchedulerPolicy@Concurrency@@QAEIW4PolicyElementKey@2@I@Z
?VirtualProcessorId@Context@Concurrency@@SAIXZ
?Yield@Context@Concurrency@@SAXXZ
?_Abort@_StructuredTaskCollection@details@Concurrency@@AAEXXZ
?_Acquire@_NonReentrantBlockingLock@details@Concurrency@@QAEXXZ
?_Acquire@_NonReentrantPPLLock@details@Concurrency@@QAEXPAX@Z
?_Acquire@_ReentrantBlockingLock@details@Concurrency@@QAEXXZ
?_Acquire@_ReentrantLock@details@Concurrency@@QAEXXZ
?_Acquire@_ReentrantPPLLock@details@Concurrency@@QAEXPAX@Z
?_AcquireRead@_ReaderWriterLock@details@Concurrency@@QAEXXZ
?_AcquireWrite@_ReaderWriterLock@details@Concurrency@@QAEXXZ
?_Cancel@_CancellationTokenState@details@Concurrency@@QAEXXZ
?_Cancel@_StructuredTaskCollection@details@Concurrency@@QAEXXZ
?_Cancel@_TaskCollection@details@Concurrency@@QAEXXZ
?_CheckTaskCollection@_UnrealizedChore@details@Concurrency@@IAEXXZ
?_CleanupToken@_StructuredTaskCollection@details@Concurrency@@AAEXXZ
?_ConcRT_CoreAssert@details@Concurrency@@YAXPBD0H@Z
?_ConcRT_Trace@details@Concurrency@@YAXHPB_WZZ
?_Confirm_cancel@_Cancellation_beacon@details@Concurrency@@QAE_NXZ
?_Copy_str@exception@std@@AAEXPBD@Z
?_CurrentContext@_Context@details@Concurrency@@SA?AV123@XZ
?_Current_node@location@Concurrency@@SA?AV12@XZ
?_DeregisterCallback@_CancellationTokenState@details@Concurrency@@QAEXPAV_CancellationTokenRegistration@23@@Z
?_Destroy@_AsyncTaskCollection@details@Concurrency@@EAEXXZ
?_Destroy@_CancellationTokenState@details@Concurrency@@EAEXXZ
?_DoYield@?$_SpinWait@$00@details@Concurrency@@IAEXXZ
?_DoYield@?$_SpinWait@$0A@@details@Concurrency@@IAEXXZ
?_Get@_CurrentScheduler@details@Concurrency@@SA?AV_Scheduler@23@XZ
?_GetConcRTTraceInfo@Concurrency@@YAPBU_CONCRT_TRACE_INFO@details@1@XZ
?_GetConcurrency@details@Concurrency@@YAIXZ
?_GetCurrentInlineDepth@_StackGuard@details@Concurrency@@CAAAIXZ
?_GetNumberOfVirtualProcessors@_CurrentScheduler@details@Concurrency@@SAIXZ
?_GetScheduler@_Scheduler@details@Concurrency@@QAEPAVScheduler@3@XZ
?_Id@_CurrentScheduler@details@Concurrency@@SAIXZ
?_Invoke@_CancellationTokenRegistration@details@Concurrency@@AAEXXZ
?_IsCanceling@_StructuredTaskCollection@details@Concurrency@@QAE_NXZ
?_IsCanceling@_TaskCollection@details@Concurrency@@QAE_NXZ
?_IsSynchronouslyBlocked@_Context@details@Concurrency@@QBE_NXZ
?_Name_base@type_info@@CAPBDPBV1@PAU__type_info_node@@@Z
?_Name_base_internal@type_info@@CAPBDPBV1@PAU__type_info_node@@@Z
?_NewCollection@_AsyncTaskCollection@details@Concurrency@@SAPAV123@PAV_CancellationTokenState@23@@Z
?_NewTokenState@_CancellationTokenState@details@Concurrency@@SAPAV123@XZ
?_NumberOfSpins@?$_SpinWait@$00@details@Concurrency@@IAEKXZ
?_NumberOfSpins@?$_SpinWait@$0A@@details@Concurrency@@IAEKXZ
?_Oversubscribe@_Context@details@Concurrency@@SAX_N@Z
?_Reference@_Scheduler@details@Concurrency@@QAEIXZ
?_RegisterCallback@_CancellationTokenState@details@Concurrency@@QAEPAV_CancellationTokenRegistration@23@P6AXPAX@Z0H@Z
?_RegisterCallback@_CancellationTokenState@details@Concurrency@@QAEXPAV_CancellationTokenRegistration@23@@Z
?_Release@_NonReentrantBlockingLock@details@Concurrency@@QAEXXZ
?_Release@_NonReentrantPPLLock@details@Concurrency@@QAEXXZ
?_Release@_ReentrantBlockingLock@details@Concurrency@@QAEXXZ
?_Release@_ReentrantLock@details@Concurrency@@QAEXXZ
?_Release@_ReentrantPPLLock@details@Concurrency@@QAEXXZ
?_Release@_Scheduler@details@Concurrency@@QAEIXZ
?_ReleaseRead@_ReaderWriterLock@details@Concurrency@@QAEXXZ
?_ReleaseWrite@_ReaderWriterLock@details@Concurrency@@QAEXXZ
?_ReportUnobservedException@details@Concurrency@@YAXXZ
?_Reset@?$_SpinWait@$00@details@Concurrency@@IAEXXZ
?_Reset@?$_SpinWait@$0A@@details@Concurrency@@IAEXXZ
?_RunAndWait@_StructuredTaskCollection@details@Concurrency@@QAG?AW4_TaskCollectionStatus@23@PAV_UnrealizedChore@23@@Z
?_RunAndWait@_TaskCollection@details@Concurrency@@QAG?AW4_TaskCollectionStatus@23@PAV_UnrealizedChore@23@@Z
?_Schedule@_StructuredTaskCollection@details@Concurrency@@QAEXPAV_UnrealizedChore@23@@Z
?_Schedule@_StructuredTaskCollection@details@Concurrency@@QAEXPAV_UnrealizedChore@23@PAVlocation@3@@Z
?_Schedule@_TaskCollection@details@Concurrency@@QAEXPAV_UnrealizedChore@23@@Z
?_Schedule@_TaskCollection@details@Concurrency@@QAEXPAV_UnrealizedChore@23@PAVlocation@3@@Z
?_ScheduleTask@_CurrentScheduler@details@Concurrency@@SAXP6AXPAX@Z0@Z
?_SetSpinCount@?$_SpinWait@$00@details@Concurrency@@QAEXI@Z
?_SetSpinCount@?$_SpinWait@$0A@@details@Concurrency@@QAEXI@Z
?_SetUnobservedExceptionHandler@details@Concurrency@@YAXP6AXXZ@Z
?_ShouldSpinAgain@?$_SpinWait@$00@details@Concurrency@@IAE_NXZ
?_ShouldSpinAgain@?$_SpinWait@$0A@@details@Concurrency@@IAE_NXZ
?_SpinOnce@?$_SpinWait@$00@details@Concurrency@@QAE_NXZ
?_SpinOnce@?$_SpinWait@$0A@@details@Concurrency@@QAE_NXZ
?_SpinYield@Context@Concurrency@@SAXXZ
?_Start@_Timer@details@Concurrency@@IAEXXZ
?_Stop@_Timer@details@Concurrency@@IAEXXZ
?_Tidy@exception@std@@AAEXXZ
?_Trace_agents@Concurrency@@YAXW4Agents_EventType@1@_JZZ
?_Trace_ppl_function@Concurrency@@YAXABU_GUID@@EW4ConcRT_EventType@1@@Z
?_TryAcquire@_NonReentrantBlockingLock@details@Concurrency@@QAE_NXZ
?_TryAcquire@_ReentrantBlockingLock@details@Concurrency@@QAE_NXZ
?_TryAcquire@_ReentrantLock@details@Concurrency@@QAE_NXZ
?_TryAcquireWrite@_ReaderWriterLock@details@Concurrency@@QAE_NXZ
?_Type_info_dtor@type_info@@CAXPAV1@@Z
?_Type_info_dtor_internal@type_info@@CAXPAV1@@Z
?_UnderlyingYield@details@Concurrency@@YAXXZ
?_ValidateExecute@@YAHP6GHXZ@Z
?_ValidateRead@@YAHPBXI@Z
?_ValidateWrite@@YAHPAXI@Z
?_Value@_SpinCount@details@Concurrency@@SAIXZ
?_Yield@_Context@details@Concurrency@@SAXXZ
?__ExceptionPtrAssign@@YAXPAXPBX@Z
?__ExceptionPtrCompare@@YA_NPBX0@Z
?__ExceptionPtrCopy@@YAXPAXPBX@Z
?__ExceptionPtrCopyException@@YAXPAXPBX1@Z
?__ExceptionPtrCreate@@YAXPAX@Z
?__ExceptionPtrCurrentException@@YAXPAX@Z
?__ExceptionPtrDestroy@@YAXPAX@Z
?__ExceptionPtrRethrow@@YAXPBX@Z
?__ExceptionPtrSwap@@YAXPAX0@Z
?__ExceptionPtrToBool@@YA_NPBX@Z
?_inconsistency@@YAXXZ
?_invalid_parameter@@YAXPBG00II@Z
?_is_exception_typeof@@YAHABVtype_info@@PAU_EXCEPTION_POINTERS@@@Z
?_name_internal_method@type_info@@QBEPBDPAU__type_info_node@@@Z
?_open@@YAHPBDHH@Z
?_query_new_handler@@YAP6AHI@ZXZ
?_query_new_mode@@YAHXZ
?_set_new_handler@@YAP6AHI@ZH@Z
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
?_set_new_mode@@YAHH@Z
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZH@Z
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
?_sopen@@YAHPBDHHH@Z
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?_wopen@@YAHPB_WHH@Z
?_wsopen@@YAHPB_WHHH@Z
?before@type_info@@QBE_NABV1@@Z
?current@location@Concurrency@@SA?AV12@XZ
?from_numa_node@location@Concurrency@@SA?AV12@G@Z
?get_error_code@scheduler_resource_allocation_error@Concurrency@@QBEJXZ
?lock@critical_section@Concurrency@@QAEXXZ
?lock@reader_writer_lock@Concurrency@@QAEXXZ
?lock_read@reader_writer_lock@Concurrency@@QAEXXZ
?name@type_info@@QBEPBDPAU__type_info_node@@@Z
?native_handle@critical_section@Concurrency@@QAEAAV12@XZ
?notify_all@_Condition_variable@details@Concurrency@@QAEXXZ
?notify_one@_Condition_variable@details@Concurrency@@QAEXXZ
?raw_name@type_info@@QBEPBDXZ
?reset@event@Concurrency@@QAEXXZ
?set@event@Concurrency@@QAEXXZ
?set_new_handler@@YAP6AXXZP6AXXZ@Z
?set_task_execution_resources@Concurrency@@YAXGPAU_GROUP_AFFINITY@@@Z
?set_task_execution_resources@Concurrency@@YAXK@Z
?set_terminate@@YAP6AXXZH@Z
?set_terminate@@YAP6AXXZP6AXXZ@Z
?set_unexpected@@YAP6AXXZH@Z
?set_unexpected@@YAP6AXXZP6AXXZ@Z
?swprintf@@YAHPAGIPBGZZ
?swprintf@@YAHPA_WIPB_WZZ
?terminate@@YAXXZ
?try_lock@critical_section@Concurrency@@QAE_NXZ
?try_lock@reader_writer_lock@Concurrency@@QAE_NXZ
?try_lock_for@critical_section@Concurrency@@QAE_NI@Z
?try_lock_read@reader_writer_lock@Concurrency@@QAE_NXZ
?unexpected@@YAXXZ
?unlock@critical_section@Concurrency@@QAEXXZ
?unlock@reader_writer_lock@Concurrency@@QAEXXZ
?vswprintf@@YAHPA_WIPB_WPAD@Z
?wait@Concurrency@@YAXI@Z
?wait@_Condition_variable@details@Concurrency@@QAEXAAVcritical_section@3@@Z
?wait@event@Concurrency@@QAEII@Z
?wait_for@_Condition_variable@details@Concurrency@@QAE_NAAVcritical_section@3@I@Z
?wait_for_multiple@event@Concurrency@@SAIPAPAV12@I_NI@Z
?what@exception@std@@UBEPBDXZ
_CIacos
_CIasin
_CIatan
_CIatan2
_CIcos
_CIcosh
_CIexp
_CIfmod
_CIlog
_CIlog10
_CIpow
_CIsin
_CIsinh
_CIsqrt
_CItan
_CItanh
_CRT_RTC_INIT
_CRT_RTC_INITW
_CreateFrameInfo
_CxxThrowException
_EH_prolog
_FindAndUnlinkFrame
_Getdays
_Getmonths
_Gettnames
_HUGE
_IsExceptionObjectToBeDestroyed
_Lock_shared_ptr_spin_lock
_NLG_Dispatch2
_NLG_Return
_NLG_Return2
_Strftime
_Unlock_shared_ptr_spin_lock
_W_Getdays
_W_Getmonths
_W_Gettnames
_Wcsftime
_XcptFilter
__AdjustPointer
__BuildCatchObject
__BuildCatchObjectHelper
__CppXcptFilter
__CxxDetectRethrow
__CxxExceptionFilter
__CxxFrameHandler
__CxxFrameHandler2
__CxxFrameHandler3
__CxxLongjmpUnwind
__CxxQueryExceptionSize
__CxxRegisterExceptionObject
__CxxUnregisterExceptionObject
__DestructExceptionObject
__FrameUnwindFilter
__RTCastToVoid
__RTDynamicCast
__RTtypeid
__STRINGTOLD
__STRINGTOLD_L
__TypeMatch
___crtCreateSemaphoreExW@24
___lc_codepage_func
___lc_collate_cp_func
___lc_locale_name_func
___mb_cur_max_func
___mb_cur_max_l_func
___setlc_active_func
___unguarded_readlc_active_add_func
__argc
__argv
__badioinfo
__clean_type_info_names_internal
__control87_2
__create_locale
__crtCompareStringA
__crtCompareStringEx
__crtCompareStringW
__crtCreateSymbolicLinkW
__crtEnumSystemLocalesEx
__crtFlsAlloc
__crtFlsFree
__crtFlsGetValue
__crtFlsSetValue
__crtGetDateFormatEx
__crtGetLocaleInfoEx
__crtGetShowWindowMode
__crtGetTimeFormatEx
__crtGetUserDefaultLocaleName
__crtInitializeCriticalSectionEx
__crtIsPackagedApp
__crtIsValidLocaleName
__crtLCMapStringA
__crtLCMapStringEx
__crtLCMapStringW
__crtSetThreadStackGuarantee
__crtSetUnhandledExceptionFilter
__crtTerminateProcess
__crtUnhandledException
__daylight
__dllonexit
__doserrno
__dstbias
__fpecode
__free_locale
__get_current_locale
__get_flsindex
__get_tlsindex
__getmainargs
__initenv
__iob_func
__isascii
__iscsym
__iscsymf
__iswcsym
__iswcsymf
__lconv
__lconv_init
__libm_sse2_acos
__libm_sse2_acosf
__libm_sse2_asin
__libm_sse2_asinf
__libm_sse2_atan
__libm_sse2_atan2
__libm_sse2_atanf
__libm_sse2_cos
__libm_sse2_cosf
__libm_sse2_exp
__libm_sse2_expf
__libm_sse2_log
__libm_sse2_log10
__libm_sse2_log10f
__libm_sse2_logf
__libm_sse2_pow
__libm_sse2_powf
__libm_sse2_sin
__libm_sse2_sinf
__libm_sse2_tan
__libm_sse2_tanf
__mb_cur_max
__p___argc
__p___argv
__p___initenv
__p___mb_cur_max
__p___wargv
__p___winitenv
__p__acmdln
__p__commode
__p__daylight
__p__dstbias
__p__environ
__p__fmode
__p__iob
__p__mbcasemap
__p__mbctype
__p__pctype
__p__pgmptr
__p__pwctype
__p__timezone
__p__tzname
__p__wcmdln
__p__wenviron
__p__wpgmptr
__pctype_func
__pioinfo
__pwctype_func
__pxcptinfoptrs
__report_gsfailure
__set_app_type
__setlc_active
__setusermatherr
__strncnt
__swprintf_l
__sys_errlist
__sys_nerr
__threadhandle
__threadid
__timezone
__toascii
__tzname
__unDName
__unDNameEx
__unDNameHelper
__uncaught_exception
__unguarded_readlc_active
__vswprintf_l
__wargv
__wcserror
__wcserror_s
__wcsncnt
__wgetmainargs
__winitenv
_abnormal_termination
_abs64
_access
_access_s
_acmdln
_aligned_free
_aligned_malloc
_aligned_msize
_aligned_offset_malloc
_aligned_offset_realloc
_aligned_offset_recalloc
_aligned_realloc
_aligned_recalloc
_amsg_exit
_assert
_atodbl
_atodbl_l
_atof_l
_atoflt
_atoflt_l
_atoi64
_atoi64_l
_atoi_l
_atol_l
_atoldbl
_atoldbl_l
_beep
_beginthread
_beginthreadex
_byteswap_uint64
_byteswap_ulong
_byteswap_ushort
_c_exit
_cabs
_callnewh
_calloc_crt
_cexit
_cgets
_cgets_s
_cgetws
_cgetws_s
_chdir
_chdrive
_chgsign
_chkesp
_chmod
_chsize
_chsize_s
_clearfp
_close
_commit
_commode
_configthreadlocale
_control87
_controlfp
_controlfp_s
_copysign
_cprintf
_cprintf_l
_cprintf_p
_cprintf_p_l
_cprintf_s
_cprintf_s_l
_cputs
_cputws
_creat
_create_locale
_crt_debugger_hook
_cscanf
_cscanf_l
_cscanf_s
_cscanf_s_l
_ctime32
_ctime32_s
_ctime64
_ctime64_s
_cwait
_cwprintf
_cwprintf_l
_cwprintf_p
_cwprintf_p_l
_cwprintf_s
_cwprintf_s_l
_cwscanf
_cwscanf_l
_cwscanf_s
_cwscanf_s_l
_daylight
_difftime32
_difftime64
_dosmaperr
_dstbias
_dup
_dup2
_dupenv_s
_ecvt
_ecvt_s
_endthread
_endthreadex
_environ
_eof
_errno
_except_handler2
_except_handler3
_except_handler4_common
_execl
_execle
_execlp
_execlpe
_execv
_execve
_execvp
_execvpe
_exit
_expand
_fclose_nolock
_fcloseall
_fcvt
_fcvt_s
_fdopen
_fflush_nolock
_fgetchar
_fgetwc_nolock
_fgetwchar
_filbuf
_filelength
_filelengthi64
_fileno
_findclose
_findfirst32
_findfirst32i64
_findfirst64
_findfirst64i32
_findnext32
_findnext32i64
_findnext64
_findnext64i32
_finite
_flsbuf
_flushall
_fmode
_fpclass
_fpieee_flt
_fpreset
_fprintf_l
_fprintf_p
_fprintf_p_l
_fprintf_s_l
_fputchar
_fputwc_nolock
_fputwchar
_fread_nolock
_fread_nolock_s
_free_locale
_freea
_freea_s
_freefls
_fscanf_l
_fscanf_s_l
_fseek_nolock
_fseeki64
_fseeki64_nolock
_fsopen
_fstat32
_fstat32i64
_fstat64
_fstat64i32
_ftell_nolock
_ftelli64
_ftelli64_nolock
_ftime32
_ftime32_s
_ftime64
_ftime64_s
_ftol
_fullpath
_futime32
_futime64
_fwprintf_l
_fwprintf_p
_fwprintf_p_l
_fwprintf_s_l
_fwrite_nolock
_fwscanf_l
_fwscanf_s_l
_gcvt
_gcvt_s
_get_current_locale
_get_daylight
_get_doserrno
_get_dstbias
_get_errno
_get_fmode
_get_heap_handle
_get_invalid_parameter_handler
_get_osfhandle
_get_output_format
_get_pgmptr
_get_printf_count_output
_get_purecall_handler
_get_terminate
_get_timezone
_get_tzname
_get_unexpected
_get_wpgmptr
_getc_nolock
_getch
_getch_nolock
_getche
_getche_nolock
_getcwd
_getdcwd
_getdiskfree
_getdllprocaddr
_getdrive
_getdrives
_getmaxstdio
_getmbcp
_getpid
_getptd
_getsystime
_getw
_getwch
_getwch_nolock
_getwche
_getwche_nolock
_getws
_getws_s
_global_unwind2
_gmtime32
_gmtime32_s
_gmtime64
_gmtime64_s
_heapadd
_heapchk
_heapmin
_heapset
_heapused
_heapwalk
_hypot
_hypotf
_i64toa
_i64toa_s
_i64tow
_i64tow_s
_initptd
_initterm
_initterm_e
_inp
_inpd
_inpw
_invalid_parameter
_invalid_parameter_noinfo
_invalid_parameter_noinfo_noreturn
_invoke_watson
_iob
_isalnum_l
_isalpha_l
_isatty
_iscntrl_l
_isctype
_isctype_l
_isdigit_l
_isgraph_l
_isleadbyte_l
_islower_l
_ismbbalnum
_ismbbalnum_l
_ismbbalpha
_ismbbalpha_l
_ismbbgraph
_ismbbgraph_l
_ismbbkalnum
_ismbbkalnum_l
_ismbbkana
_ismbbkana_l
_ismbbkprint
_ismbbkprint_l
_ismbbkpunct
_ismbbkpunct_l
_ismbblead
_ismbblead_l
_ismbbprint
_ismbbprint_l
_ismbbpunct
_ismbbpunct_l
_ismbbtrail
_ismbbtrail_l
_ismbcalnum
_ismbcalnum_l
_ismbcalpha
_ismbcalpha_l
_ismbcdigit
_ismbcdigit_l
_ismbcgraph
_ismbcgraph_l
_ismbchira
_ismbchira_l
_ismbckata
_ismbckata_l
_ismbcl0
_ismbcl0_l
_ismbcl1
_ismbcl1_l
_ismbcl2
_ismbcl2_l
_ismbclegal
_ismbclegal_l
_ismbclower
_ismbclower_l
_ismbcprint
_ismbcprint_l
_ismbcpunct
_ismbcpunct_l
_ismbcspace
_ismbcspace_l
_ismbcsymbol
_ismbcsymbol_l
_ismbcupper
_ismbcupper_l
_ismbslead
_ismbslead_l
_ismbstrail
_ismbstrail_l
_isnan
_isprint_l
_ispunct_l
_isspace_l
_isupper_l
_iswalnum_l
_iswalpha_l
_iswcntrl_l
_iswcsym_l
_iswcsymf_l
_iswctype_l
_iswdigit_l
_iswgraph_l
_iswlower_l
_iswprint_l
_iswpunct_l
_iswspace_l
_iswupper_l
_iswxdigit_l
_isxdigit_l
_itoa
_itoa_s
_itow
_itow_s
_j0
_j1
_jn
_kbhit
_lfind
_lfind_s
_libm_sse2_acos_precise
_libm_sse2_asin_precise
_libm_sse2_atan_precise
_libm_sse2_cos_precise
_libm_sse2_exp_precise
_libm_sse2_log10_precise
_libm_sse2_log_precise
_libm_sse2_pow_precise
_libm_sse2_sin_precise
_libm_sse2_sqrt_precise
_libm_sse2_tan_precise
_loaddll
_local_unwind2
_local_unwind4
_localtime32
_localtime32_s
_localtime64
_localtime64_s
_lock
_lock_file
_locking
_logb
_longjmpex
_lrotl
_lrotr
_lsearch
_lsearch_s
_lseek
_lseeki64
_ltoa
_ltoa_s
_ltow
_ltow_s
_makepath
_makepath_s
_malloc_crt
_mbbtombc
_mbbtombc_l
_mbbtype
_mbbtype_l
_mbcasemap
_mbccpy
_mbccpy_l
_mbccpy_s
_mbccpy_s_l
_mbcjistojms
_mbcjistojms_l
_mbcjmstojis
_mbcjmstojis_l
_mbclen
_mbclen_l
_mbctohira
_mbctohira_l
_mbctokata
_mbctokata_l
_mbctolower
_mbctolower_l
_mbctombb
_mbctombb_l
_mbctoupper
_mbctoupper_l
_mbctype
_mblen_l
_mbsbtype
_mbsbtype_l
_mbscat_s
_mbscat_s_l
_mbschr
_mbschr_l
_mbscmp
_mbscmp_l
_mbscoll
_mbscoll_l
_mbscpy_s
_mbscpy_s_l
_mbscspn
_mbscspn_l
_mbsdec
_mbsdec_l
_mbsicmp
_mbsicmp_l
_mbsicoll
_mbsicoll_l
_mbsinc
_mbsinc_l
_mbslen
_mbslen_l
_mbslwr
_mbslwr_l
_mbslwr_s
_mbslwr_s_l
_mbsnbcat
_mbsnbcat_l
_mbsnbcat_s
_mbsnbcat_s_l
_mbsnbcmp
_mbsnbcmp_l
_mbsnbcnt
_mbsnbcnt_l
_mbsnbcoll
_mbsnbcoll_l
_mbsnbcpy
_mbsnbcpy_l
_mbsnbcpy_s
_mbsnbcpy_s_l
_mbsnbicmp
_mbsnbicmp_l
_mbsnbicoll
_mbsnbicoll_l
_mbsnbset
_mbsnbset_l
_mbsnbset_s
_mbsnbset_s_l
_mbsncat
_mbsncat_l
_mbsncat_s
_mbsncat_s_l
_mbsnccnt
_mbsnccnt_l
_mbsncmp
_mbsncmp_l
_mbsncoll
_mbsncoll_l
_mbsncpy
_mbsncpy_l
_mbsncpy_s
_mbsncpy_s_l
_mbsnextc
_mbsnextc_l
_mbsnicmp
_mbsnicmp_l
_mbsnicoll
_mbsnicoll_l
_mbsninc
_mbsninc_l
_mbsnlen
_mbsnlen_l
_mbsnset
_mbsnset_l
_mbsnset_s
_mbsnset_s_l
_mbspbrk
_mbspbrk_l
_mbsrchr
_mbsrchr_l
_mbsrev
_mbsrev_l
_mbsset
_mbsset_l
_mbsset_s
_mbsset_s_l
_mbsspn
_mbsspn_l
_mbsspnp
_mbsspnp_l
_mbsstr
_mbsstr_l
_mbstok
_mbstok_l
_mbstok_s
_mbstok_s_l
_mbstowcs_l
_mbstowcs_s_l
_mbstrlen
_mbstrlen_l
_mbstrnlen
_mbstrnlen_l
_mbsupr
_mbsupr_l
_mbsupr_s
_mbsupr_s_l
_mbtowc_l
_memccpy
_memicmp
_memicmp_l
_mkdir
_mkgmtime32
_mkgmtime64
_mktemp
_mktemp_s
_mktime32
_mktime64
_msize
_nextafter
_onexit
_open
_open_osfhandle
_outp
_outpd
_outpw
_pclose
_pctype
_pgmptr
_pipe
_popen
_printf_l
_printf_p
_printf_p_l
_printf_s_l
_purecall
_putch
_putch_nolock
_putenv
_putenv_s
_putw
_putwch
_putwch_nolock
_putws
_pwctype
_read
_realloc_crt
_recalloc
_recalloc_crt
_resetstkoflw
_rmdir
_rmtmp
_rotl
_rotl64
_rotr
_rotr64
_scalb
_scanf_l
_scanf_s_l
_scprintf
_scprintf_l
_scprintf_p
_scprintf_p_l
_scwprintf
_scwprintf_l
_scwprintf_p
_scwprintf_p_l
_searchenv
_searchenv_s
_seh_longjmp_unwind
_seh_longjmp_unwind4
_set_SSE2_enable
_set_abort_behavior
_set_controlfp
_set_doserrno
_set_errno
_set_error_mode
_set_fmode
_set_invalid_parameter_handler
_set_malloc_crt_max_wait
_set_output_format
_set_printf_count_output
_set_purecall_handler
_seterrormode
_setjmp
_setjmp3
_setmaxstdio
_setmbcp
_setmode
_setsystime
_sleep
_snprintf
_snprintf_c
_snprintf_c_l
_snprintf_l
_snprintf_s
_snprintf_s_l
_snscanf
_snscanf_l
_snscanf_s
_snscanf_s_l
_snwprintf
_snwprintf_l
_snwprintf_s
_snwprintf_s_l
_snwscanf
_snwscanf_l
_snwscanf_s
_snwscanf_s_l
_sopen
_sopen_s
_spawnl
_spawnle
_spawnlp
_spawnlpe
_spawnv
_spawnve
_spawnvp
_spawnvpe
_splitpath
_splitpath_s
_sprintf_l
_sprintf_p
_sprintf_p_l
_sprintf_s_l
_sscanf_l
_sscanf_s_l
_stat32
_stat32i64
_stat64
_stat64i32
_statusfp
_statusfp2
_strcoll_l
_strdate
_strdate_s
_strdup
_strerror
_strerror_s
_strftime_l
_stricmp
_stricmp_l
_stricoll
_stricoll_l
_strlwr
_strlwr_l
_strlwr_s
_strlwr_s_l
_strncoll
_strncoll_l
_strnicmp
_strnicmp_l
_strnicoll
_strnicoll_l
_strnset
_strnset_s
_strrev
_strset
_strset_s
_strtime
_strtime_s
_strtod_l
_strtoi64
_strtoi64_l
_strtol_l
_strtoui64
_strtoui64_l
_strtoul_l
_strupr
_strupr_l
_strupr_s
_strupr_s_l
_strxfrm_l
_swab
_swprintf
_swprintf_c
_swprintf_c_l
_swprintf_p
_swprintf_p_l
_swprintf_s_l
_swscanf_l
_swscanf_s_l
_sys_errlist
_sys_nerr
_tell
_telli64
_tempnam
_time32
_time64
_timezone
_tolower
_tolower_l
_toupper
_toupper_l
_towlower_l
_towupper_l
_tzname
_tzset
_ui64toa
_ui64toa_s
_ui64tow
_ui64tow_s
_ultoa
_ultoa_s
_ultow
_ultow_s
_umask
_umask_s
_ungetc_nolock
_ungetch
_ungetch_nolock
_ungetwc_nolock
_ungetwch
_ungetwch_nolock
_unlink
_unloaddll
_unlock
_unlock_file
_utime32
_utime64
_vcprintf
_vcprintf_l
_vcprintf_p
_vcprintf_p_l
_vcprintf_s
_vcprintf_s_l
_vcwprintf
_vcwprintf_l
_vcwprintf_p
_vcwprintf_p_l
_vcwprintf_s
_vcwprintf_s_l
_vfprintf_l
_vfprintf_p
_vfprintf_p_l
_vfprintf_s_l
_vfwprintf_l
_vfwprintf_p
_vfwprintf_p_l
_vfwprintf_s_l
_vprintf_l
_vprintf_p
_vprintf_p_l
_vprintf_s_l
_vscprintf
_vscprintf_l
_vscprintf_p
_vscprintf_p_l
_vscwprintf
_vscwprintf_l
_vscwprintf_p
_vscwprintf_p_l
_vsnprintf
_vsnprintf_c
_vsnprintf_c_l
_vsnprintf_l
_vsnprintf_s
_vsnprintf_s_l
_vsnwprintf
_vsnwprintf_l
_vsnwprintf_s
_vsnwprintf_s_l
_vsprintf_l
_vsprintf_p
_vsprintf_p_l
_vsprintf_s_l
_vswprintf
_vswprintf_c
_vswprintf_c_l
_vswprintf_l
_vswprintf_p
_vswprintf_p_l
_vswprintf_s_l
_vwprintf_l
_vwprintf_p
_vwprintf_p_l
_vwprintf_s_l
_waccess
_waccess_s
_wasctime
_wasctime_s
_wassert
_wchdir
_wchmod
_wcmdln
_wcreat
_wcreate_locale
_wcscoll_l
_wcsdup
_wcserror
_wcserror_s
_wcsftime_l
_wcsicmp
_wcsicmp_l
_wcsicoll
_wcsicoll_l
_wcslwr
_wcslwr_l
_wcslwr_s
_wcslwr_s_l
_wcsncoll
_wcsncoll_l
_wcsnicmp
_wcsnicmp_l
_wcsnicoll
_wcsnicoll_l
_wcsnset
_wcsnset_s
_wcsrev
_wcsset
_wcsset_s
_wcstod_l
_wcstoi64
_wcstoi64_l
_wcstol_l
_wcstombs_l
_wcstombs_s_l
_wcstoui64
_wcstoui64_l
_wcstoul_l
_wcsupr
_wcsupr_l
_wcsupr_s
_wcsupr_s_l
_wcsxfrm_l
_wctime32
_wctime32_s
_wctime64
_wctime64_s
_wctomb_l
_wctomb_s_l
_wctype
_wdupenv_s
_wenviron
_wexecl
_wexecle
_wexeclp
_wexeclpe
_wexecv
_wexecve
_wexecvp
_wexecvpe
_wfdopen
_wfindfirst32
_wfindfirst32i64
_wfindfirst64
_wfindfirst64i32
_wfindnext32
_wfindnext32i64
_wfindnext64
_wfindnext64i32
_wfopen
_wfopen_s
_wfreopen
_wfreopen_s
_wfsopen
_wfullpath
_wgetcwd
_wgetdcwd
_wgetenv
_wgetenv_s
_wmakepath
_wmakepath_s
_wmkdir
_wmktemp
_wmktemp_s
_wopen
_wperror
_wpgmptr
_wpopen
_wprintf_l
_wprintf_p
_wprintf_p_l
_wprintf_s_l
_wputenv
_wputenv_s
_wremove
_wrename
_write
_wrmdir
_wscanf_l
_wscanf_s_l
_wsearchenv
_wsearchenv_s
_wsetlocale
_wsopen
_wsopen_s
_wspawnl
_wspawnle
_wspawnlp
_wspawnlpe
_wspawnv
_wspawnve
_wspawnvp
_wspawnvpe
_wsplitpath
_wsplitpath_s
_wstat32
_wstat32i64
_wstat64
_wstat64i32
_wstrdate
_wstrdate_s
_wstrtime
_wstrtime_s
_wsystem
_wtempnam
_wtmpnam
_wtmpnam_s
_wtof
_wtof_l
_wtoi
_wtoi64
_wtoi64_l
_wtoi_l
_wtol
_wtol_l
_wunlink
_wutime32
_wutime64
_y0
_y1
_yn
abort
abs
acos
asctime
asctime_s
asin
atan
atan2
atexit
atof
atoi
atol
bsearch
bsearch_s
btowc
calloc
ceil
clearerr
clearerr_s
clock
cos
cosh
div
exit
exp
fabs
fclose
feof
ferror
fflush
fgetc
fgetpos
fgets
fgetwc
fgetws
floor
fmod
fopen
fopen_s
fprintf
fprintf_s
fputc
fputs
fputwc
fputws
fread
fread_s
free
freopen
freopen_s
frexp
fscanf
fscanf_s
fseek
fsetpos
ftell
fwprintf
fwprintf_s
fwrite
fwscanf
fwscanf_s
getc
getchar
getenv
getenv_s
gets
gets_s
getwc
getwchar
is_wctype
isalnum
isalpha
iscntrl
isdigit
isgraph
isleadbyte
islower
isprint
ispunct
isspace
isupper
iswalnum
iswalpha
iswascii
iswcntrl
iswctype
iswdigit
iswgraph
iswlower
iswprint
iswpunct
iswspace
iswupper
iswxdigit
isxdigit
labs
ldexp
ldiv
llabs
lldiv
localeconv
log
log10
longjmp
malloc
mblen
mbrlen
mbrtowc
mbsrtowcs
mbsrtowcs_s
mbstowcs
mbstowcs_s
mbtowc
memchr
memcmp
memcpy
memcpy_s
memmove
memmove_s
memset
modf
perror
pow
printf
printf_s
putc
putchar
puts
putwc
putwchar
qsort
qsort_s
raise
rand
rand_s
realloc
remove
rename
rewind
scanf
scanf_s
setbuf
setlocale
setvbuf
signal
sin
sinh
sprintf
sprintf_s
sqrt
srand
sscanf
sscanf_s
strcat
strcat_s
strchr
strcmp
strcoll
strcpy
strcpy_s
strcspn
strerror
strerror_s
strftime
strlen
strncat
strncat_s
strncmp
strncpy
strncpy_s
strnlen
strpbrk
strrchr
strspn
strstr
strtod
strtok
strtok_s
strtol
strtoul
strxfrm
swprintf_s
swscanf
swscanf_s
system
tan
tanh
tmpfile
tmpfile_s
tmpnam
tmpnam_s
tolower
toupper
towlower
towupper
ungetc
ungetwc
vfprintf
vfprintf_s
vfwprintf
vfwprintf_s
vprintf
vprintf_s
vsprintf
vsprintf_s
vswprintf_s
vwprintf
vwprintf_s
wcrtomb
wcrtomb_s
wcscat
wcscat_s
wcschr
wcscmp
wcscoll
wcscpy
wcscpy_s
wcscspn
wcsftime
wcslen
wcsncat
wcsncat_s
wcsncmp
wcsncpy
wcsncpy_s
wcsnlen
wcspbrk
wcsrchr
wcsrtombs
wcsrtombs_s
wcsspn
wcsstr
wcstod
wcstok
wcstok_s
wcstol
wcstombs
wcstombs_s
wcstoul
wcsxfrm
wctob
wctomb
wctomb_s
wmemcpy_s
wmemmove_s
wprintf
wprintf_s
wscanf
wscanf_s
Name
.text
Size
792KB
Virtual Size
791KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
19KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
21KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=178, id=1, productName=Unmarked objects,
count=3, id=185, version=30716,
count=491, id=206, version=50929,
count=97, id=205, version=50929,
count=55, id=211, version=50929,
count=184, id=207, version=50929,
count=1, id=202, version=50929,
count=1, id=201, version=50929,
count=1, id=204, version=50929,
vccorlib110.dll
- IMPHASH b942c533d7091ee15c10dddd2e641592
- SHA256 0f4a9f6976c0b7fb34e362cc5220b70da32d3420771fbfcac70981da3b505d08
- MD5 c5c2295981eedeff9924889a7f084cc2
- SHA1 6a77860e26b7a14f60da2957ebcd2848c5caa00c
- SHA512 ace879be15bf129c286b8f984a96368a0321e6689a4ec743476b58c6dfaa34aa7595f34085f327992a5a24ac424dcb492fbf9a51251ffb5e84353fb426f351dc
- SSDEEP 6144:/LNmQfmriZ5UUvs5UdeTC2tmku/iCikka/+MMB6V1aFW9+ex/DnI:/LhmTC2tmku/iCikka/+MMB6P9+oT
- TLSH T1B0342A127691C4B9E97F1A318B94A364609FB5058EE2D63F3D949F1E1EB07C02D24A3F
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
86:9e:d1:f1:83:ef:af:11:a2:30:34:06:7c:6c:13:e4:36:a9:c7:d9:ae:0e:2d:71:34:87:98:da:ed:94:cc:7b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 6, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
a2:8a:24:6f:7b:b3:16:3f:58:17:00:1d:7c:74:3d:80:c2:ea:62:b4
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 6, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:9d:1e:8d:27:ae:b8:f3:d8:38:00:01:00:00:00:9d
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 4, 2012 - Mar 4, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:C0F4-3086-DEF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:2b:39:32:48:c1:b2:c9:48:f3:00:00:00:00:00:2b
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 4, 2012 - Dec 4, 2013
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:08:e2:79:fa:0d:25:58:45:ea:00:00:00:00:00:08
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 7, 2012 - Oct 7, 2013
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:31C5-30BA-7C91,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:dd:6d:00:00:00:00:00:0f
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 9, 2012 - Apr 9, 2013
Minor OS version
0
Major OS version
6
Entry point
142807
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
vccorlib110.i386.pdb
kernel32
RaiseException
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockShared
FormatMessageW
IsDebuggerPresent
HeapAlloc
InterlockedIncrement
InterlockedDecrement
HeapFree
InterlockedCompareExchange
OutputDebugStringW
InitializeCriticalSection
HeapDestroy
LeaveCriticalSection
HeapCreate
EnterCriticalSection
DeleteCriticalSection
EncodePointer
SetEvent
WaitForMultipleObjectsEx
GetLastError
DecodePointer
CreateEventExW
CloseHandle
InitializeCriticalSectionEx
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
IsProcessorFeaturePresent
msvcr110
__CxxFrameHandler3
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
__CppXcptFilter
_amsg_exit
?terminate@@YAXXZ
_malloc_crt
_initterm
_initterm_e
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
_except_handler4_common
__clean_type_info_names_internal
??1type_info@@UAE@XZ
memmove
??2@YAPAXI@Z
?what@exception@std@@UBEPBDXZ
__wgetmainargs
_invoke_watson
wcscpy_s
_aligned_free
free
_aligned_offset_malloc
memcpy
_CxxThrowException
??3@YAXPAX@Z
??_V@YAXPAX@Z
printf
vswprintf_s
_purecall
??1exception@std@@UAE@XZ
memset
msvcp110
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Syserror_map@std@@YAPBDH@Z
?_Winerror_map@std@@YAPBDH@Z
_Inf
_FInf
api-ms-win-core-winrt-string-l1-1-0
WindowsGetStringLen
WindowsDuplicateString
WindowsDeleteString
WindowsCompareStringOrdinal
WindowsCreateString
WindowsGetStringRawBuffer
WindowsStringHasEmbeddedNull
WindowsCreateStringReference
WindowsIsStringEmpty
api-ms-win-core-winrt-error-l1-1-0
RoCaptureErrorContext
GetRestrictedErrorInfo
RoTransformError
RoOriginateErrorW
SetRestrictedErrorInfo
api-ms-win-core-winrt-l1-1-0
RoGetActivationFactory
RoRegisterActivationFactories
RoRevokeActivationFactories
RoUninitialize
RoInitialize
ole32
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoRevokeInitializeSpy
CoGetApartmentType
CoRegisterInitializeSpy
CoAddRefServerProcess
CoGetContextToken
CoTaskMemAlloc
CoTaskMemFree
CoCreateFreeThreadedMarshaler
CoGetObjectContext
CoReleaseServerProcess
oleaut32
SysAllocStringLen
SysFreeString
SysStringLen
?<Dispose>@Exception@Platform@@U$AAAXXZ
?<Dispose>@String@Platform@@U$AAAXXZ
?<Dispose>@Type@Platform@@U$AAAXXZ
??0AccessDeniedException@Platform@@Q$AAA@P$AAVString@1@@Z
??0AccessDeniedException@Platform@@Q$AAA@XZ
??0Attribute@Metadata@Platform@@Q$AAA@XZ
??0Boolean@Platform@@QAA@_N@Z
??0COMException@Platform@@Q$AAA@H@Z
??0COMException@Platform@@Q$AAA@HP$AAVString@1@@Z
??0ChangedStateException@Platform@@Q$AAA@P$AAVString@1@@Z
??0ChangedStateException@Platform@@Q$AAA@XZ
??0ClassNotRegisteredException@Platform@@Q$AAA@P$AAVString@1@@Z
??0ClassNotRegisteredException@Platform@@Q$AAA@XZ
??0Delegate@Platform@@Q$AAA@XZ
??0DisconnectedException@Platform@@Q$AAA@P$AAVString@1@@Z
??0DisconnectedException@Platform@@Q$AAA@XZ
??0Enum@Platform@@Q$AAA@XZ
??0Exception@Platform@@Q$AAA@H@Z
??0Exception@Platform@@Q$AAA@HP$AAVString@1@@Z
??0FailureException@Platform@@Q$AAA@P$AAVString@1@@Z
??0FailureException@Platform@@Q$AAA@XZ
??0GridLength@Xaml@UI@Windows@@QAA@NW4GridUnitType@123@@Z
??0IntPtr@Platform@@QAA@H@Z
??0IntPtr@Platform@@QAA@PAX@Z
??0InvalidArgumentException@Platform@@Q$AAA@P$AAVString@1@@Z
??0InvalidArgumentException@Platform@@Q$AAA@XZ
??0InvalidCastException@Platform@@Q$AAA@P$AAVString@1@@Z
??0InvalidCastException@Platform@@Q$AAA@XZ
??0MTAThreadAttribute@Platform@@Q$AAA@XZ
??0NotImplementedException@Platform@@Q$AAA@P$AAVString@1@@Z
??0NotImplementedException@Platform@@Q$AAA@XZ
??0NullReferenceException@Platform@@Q$AAA@P$AAVString@1@@Z
??0NullReferenceException@Platform@@Q$AAA@XZ
??0Object@Platform@@Q$AAA@XZ
??0ObjectDisposedException@Platform@@Q$AAA@P$AAVString@1@@Z
??0ObjectDisposedException@Platform@@Q$AAA@XZ
??0OnePhaseConstructedAttribute@CompilerServices@Runtime@Platform@@Q$AAA@XZ
??0OperationCanceledException@Platform@@Q$AAA@P$AAVString@1@@Z
??0OperationCanceledException@Platform@@Q$AAA@XZ
??0OutOfBoundsException@Platform@@Q$AAA@P$AAVString@1@@Z
??0OutOfBoundsException@Platform@@Q$AAA@XZ
??0OutOfMemoryException@Platform@@Q$AAA@P$AAVString@1@@Z
??0OutOfMemoryException@Platform@@Q$AAA@XZ
??0Rect@Foundation@Windows@@QAA@VPoint@12@0@Z
??0Rect@Foundation@Windows@@QAA@VPoint@12@VSize@12@@Z
??0RepeatBehavior@Animation@Media@Xaml@UI@Windows@@QAA@N@Z
??0STAThreadAttribute@Platform@@Q$AAA@XZ
??0SizeT@Platform@@QAA@H@Z
??0SizeT@Platform@@QAA@PAX@Z
??0Type@Platform@@Q$AAA@P$AAVObject@1@@Z
??0Type@Platform@@Q$AAA@VIntPtr@1@@Z
??0Type@Platform@@Q$AAA@VTypeName@Interop@Xaml@UI@Windows@@@Z
??0ValueType@Platform@@Q$AAA@XZ
??0WrongThreadException@Platform@@Q$AAA@P$AAVString@1@@Z
??0WrongThreadException@Platform@@Q$AAA@XZ
??0char16@default@@QAA@_W@Z
??0float32@default@@QAA@M@Z
??0float64@default@@QAA@N@Z
??0int16@default@@QAA@F@Z
??0int32@default@@QAA@H@Z
??0int64@default@@QAA@_J@Z
??0int8@default@@QAA@C@Z
??0uint16@default@@QAA@G@Z
??0uint32@default@@QAA@I@Z
??0uint64@default@@QAA@_K@Z
??0uint8@default@@QAA@E@Z
??BIntPtr@Platform@@SA?AV01@H@Z
??BIntPtr@Platform@@SA?AV01@PAX@Z
??BIntPtr@Platform@@SAPAXV01@@Z
??BType@Platform@@SA?AVTypeName@Interop@Xaml@UI@Windows@@P$AAV01@@Z
??BType@Platform@@SAP$AAV01@VTypeName@Interop@Xaml@UI@Windows@@@Z
??DMatrix3D@Media3D@Media@Xaml@UI@Windows@@SA?AV012345@V012345@0@Z
??GDuration@Xaml@UI@Windows@@SA?AV0123@V0123@0@Z
??HDuration@Xaml@UI@Windows@@SA?AV0123@V0123@0@Z
??MDuration@Xaml@UI@Windows@@SA_NV0123@0@Z
??NDuration@Xaml@UI@Windows@@SA_NV0123@0@Z
??ODuration@Xaml@UI@Windows@@SA_NV0123@0@Z
??PDuration@Xaml@UI@Windows@@SA_NV0123@0@Z
?AlignedAllocate@Heap@Details@Platform@@SAPAXII@Z
?AlignedAllocateException@Heap@Details@Platform@@SAPAXII@Z
?AlignedFree@Heap@Details@Platform@@SAXPAX@Z
?AlignedFreeException@Heap@Details@Platform@@SAXPAX@Z
?Allocate@Heap@Details@Platform@@SAPAXI@Z
?AllocateException@Heap@Details@Platform@@SAPAXI@Z
?Compare@Duration@Xaml@UI@Windows@@SAHV1234@0@Z
?Contains@Rect@Foundation@Windows@@QAA_NVPoint@23@@Z
?CreateException@Exception@Platform@@SAP$AAV12@H@Z
?CreateException@Exception@Platform@@SAP$AAV12@HP$AAVString@2@@Z
?CreateValue@Details@Platform@@YGP$AAVObject@2@P$AAVType@2@PBX@Z
?EnableFactoryCache@@YAXXZ
?EnumerateAllocatedObjects@Heap@Details@Platform@@SAXP$AAVHeapEntryHandler@23@@Z
?Equals@Attribute@Metadata@Platform@@Q$AAA_NP$AAVObject@3@@Z
?Equals@Boolean@Platform@@QAA_NP$AAVObject@2@@Z
?Equals@Delegate@Platform@@Q$AAA_NP$AAVObject@2@@Z
?Equals@Enum@Platform@@Q$AAA_NP$AAVObject@2@@Z
?Equals@Exception@Platform@@U$AAA_NP$AAVObject@2@@Z
?Equals@MTAThreadAttribute@Platform@@Q$AAA_NP$AAVObject@2@@Z
?Equals@Object@Platform@@Q$AAA_NP$AAV12@@Z
?Equals@OnePhaseConstructedAttribute@CompilerServices@Runtime@Platform@@Q$AAA_NP$AAVObject@4@@Z
?Equals@STAThreadAttribute@Platform@@Q$AAA_NP$AAVObject@2@@Z
?Equals@Type@Platform@@U$AAA_NP$AAVObject@2@@Z
?Equals@ValueType@Platform@@Q$AAA_NP$AAVObject@2@@Z
?Equals@char16@default@@QAA_NP$AAVObject@Platform@@@Z
?Equals@float32@default@@QAA_NP$AAVObject@Platform@@@Z
?Equals@float64@default@@QAA_NP$AAVObject@Platform@@@Z
?Equals@int16@default@@QAA_NP$AAVObject@Platform@@@Z
?Equals@int32@default@@QAA_NP$AAVObject@Platform@@@Z
?Equals@int64@default@@QAA_NP$AAVObject@Platform@@@Z
?Equals@int8@default@@QAA_NP$AAVObject@Platform@@@Z
?Equals@uint16@default@@QAA_NP$AAVObject@Platform@@@Z
?Equals@uint32@default@@QAA_NP$AAVObject@Platform@@@Z
?Equals@uint64@default@@QAA_NP$AAVObject@Platform@@@Z
?Equals@uint8@default@@QAA_NP$AAVObject@Platform@@@Z
?EventSourceAdd@Details@Platform@@YG?AVEventRegistrationToken@Foundation@Windows@@PAPAXPAUEventLock@12@P$AAVDelegate@2@@Z
?EventSourceGetTargetArray@Details@Platform@@YGPAXPAXPAUEventLock@12@@Z
?EventSourceGetTargetArrayEvent@Details@Platform@@YGPAXPAXI@Z
?EventSourceGetTargetArraySize@Details@Platform@@YGIPAX@Z
?EventSourceInitialize@Details@Platform@@YGXPAPAX@Z
?EventSourceRemove@Details@Platform@@YGXPAPAXPAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z
?EventSourceUninitialize@Details@Platform@@YGXPAPAX@Z
?FlushFactoryCache@@YGXXZ
?Free@Heap@Details@Platform@@SAXPAX@Z
?FreeException@Heap@Details@Platform@@SAXPAX@Z
?GetActivationFactory@Details@Platform@@YGJPAVModuleBase@1WRL@Microsoft@@PAUHSTRING__@@PAPAUIActivationFactory@@@Z
?GetActivationFactoryByPCWSTR@@YGJPAXAAVGuid@Platform@@PAPAX@Z
?GetCmdArguments@Details@Platform@@YAPAPA_WPAH@Z
?GetHashCode@Attribute@Metadata@Platform@@Q$AAAHXZ
?GetHashCode@Boolean@Platform@@QAAHXZ
?GetHashCode@Delegate@Platform@@Q$AAAHXZ
?GetHashCode@Enum@Platform@@Q$AAAHXZ
?GetHashCode@Exception@Platform@@U$AAAHXZ
?GetHashCode@Guid@Platform@@QAAHXZ
?GetHashCode@MTAThreadAttribute@Platform@@Q$AAAHXZ
?GetHashCode@Object@Platform@@Q$AAAHXZ
?GetHashCode@OnePhaseConstructedAttribute@CompilerServices@Runtime@Platform@@Q$AAAHXZ
?GetHashCode@STAThreadAttribute@Platform@@Q$AAAHXZ
?GetHashCode@Type@Platform@@U$AAAHXZ
?GetHashCode@ValueType@Platform@@Q$AAAHXZ
?GetHashCode@char16@default@@QAAHXZ
?GetHashCode@float32@default@@QAAHXZ
?GetHashCode@float64@default@@QAAHXZ
?GetHashCode@int16@default@@QAAHXZ
?GetHashCode@int32@default@@QAAHXZ
?GetHashCode@int64@default@@QAAHXZ
?GetHashCode@int8@default@@QAAHXZ
?GetHashCode@uint16@default@@QAAHXZ
?GetHashCode@uint32@default@@QAAHXZ
?GetHashCode@uint64@default@@QAAHXZ
?GetHashCode@uint8@default@@QAAHXZ
?GetIBoxArrayVtable@Details@Platform@@YGPAXPAX@Z
?GetIBoxVtable@Details@Platform@@YGPAXPAX@Z
?GetIidsFn@@YGJHPAKPBU__s_GUID@@PAPAVGuid@Platform@@@Z
?GetObjectContext@Details@Platform@@YGPAUIUnknown@@XZ
?GetProxyImpl@Details@Platform@@YGJPAUIUnknown@@ABU_GUID@@0PAPAU3@@Z
?GetType@Boolean@Platform@@QAAP$AAVType@2@XZ
?GetType@Guid@Platform@@QAAP$AAVType@2@XZ
?GetType@Object@Platform@@Q$AAAP$AAVType@2@XZ
?GetType@char16@default@@QAAP$AAVType@Platform@@XZ
?GetType@float32@default@@QAAP$AAVType@Platform@@XZ
?GetType@float64@default@@QAAP$AAVType@Platform@@XZ
?GetType@int16@default@@QAAP$AAVType@Platform@@XZ
?GetType@int32@default@@QAAP$AAVType@Platform@@XZ
?GetType@int64@default@@QAAP$AAVType@Platform@@XZ
?GetType@int8@default@@QAAP$AAVType@Platform@@XZ
?GetType@uint16@default@@QAAP$AAVType@Platform@@XZ
?GetType@uint32@default@@QAAP$AAVType@Platform@@XZ
?GetType@uint64@default@@QAAP$AAVType@Platform@@XZ
?GetType@uint8@default@@QAAP$AAVType@Platform@@XZ
?GetTypeCode@Type@Platform@@SA?AW4TypeCode@2@P$AAV12@@Z
?GetWeakReference@Details@Platform@@YGPAU__abi_IUnknown@@Q$ADVObject@2@@Z
?InitializeData@Details@Platform@@YAJH@Z
?Intersect@Rect@Foundation@Windows@@QAAXV123@@Z
?IntersectsWith@Rect@Foundation@Windows@@QAA_NV123@@Z
?Invert@Matrix3D@Media3D@Media@Xaml@UI@Windows@@QAAXXZ
?ReCreateException@Exception@Platform@@SAP$AAV12@H@Z
?ReCreateFromException@Details@Platform@@YGJP$AAVException@2@@Z
?ReferenceEquals@Object@Platform@@SA_NP$AAV12@0@Z
?ReferenceEquals@Object@Platform@@SA_NP$AAVString@2@0@Z
?RegisterFactories@Details@Platform@@YGP$AAVObject@2@PAPAVModuleBase@1WRL@Microsoft@@PAPAU__abi_Module@@P6GXXZ@Z
?ReleaseInContextImpl@Details@Platform@@YGJPAUIUnknown@@0@Z
?ResolveWeakReference@Details@Platform@@YGP$AAVObject@2@ABU_GUID@@PAPAU__abi_IUnknown@@@Z
?RunApplicationServer@Details@Platform@@YGXPAPAVModuleBase@1WRL@Microsoft@@PAPAU__abi_Module@@PB_W@Z
?RunServer@Details@Platform@@YGXPAPAVModuleBase@1WRL@Microsoft@@PAPAU__abi_Module@@PB_W@Z
?TerminateModule@Details@Platform@@YG_NPAVModuleBase@1WRL@Microsoft@@@Z
?ToInt32@IntPtr@Platform@@QAAHXZ
?ToString@Attribute@Metadata@Platform@@Q$AAAP$AAVString@3@XZ
?ToString@Boolean@Platform@@QAAP$AAVString@2@XZ
?ToString@Delegate@Platform@@Q$AAAP$AAVString@2@XZ
?ToString@Enum@Platform@@Q$AAAP$AAVString@2@XZ
?ToString@Exception@Platform@@U$AAAP$AAVString@2@XZ
?ToString@Guid@Platform@@QAAP$AAVString@2@XZ
?ToString@MTAThreadAttribute@Platform@@Q$AAAP$AAVString@2@XZ
?ToString@OnePhaseConstructedAttribute@CompilerServices@Runtime@Platform@@Q$AAAP$AAVString@4@XZ
?ToString@STAThreadAttribute@Platform@@Q$AAAP$AAVString@2@XZ
?ToString@Type@Platform@@U$AAAP$AAVString@2@XZ
?ToString@ValueType@Platform@@Q$AAAP$AAVString@2@XZ
?ToString@char16@default@@QAAP$AAVString@Platform@@XZ
?ToString@float32@default@@QAAP$AAVString@Platform@@XZ
?ToString@float64@default@@QAAP$AAVString@Platform@@XZ
?ToString@int16@default@@QAAP$AAVString@Platform@@XZ
?ToString@int32@default@@QAAP$AAVString@Platform@@XZ
?ToString@int64@default@@QAAP$AAVString@Platform@@XZ
?ToString@int8@default@@QAAP$AAVString@Platform@@XZ
?ToString@uint16@default@@QAAP$AAVString@Platform@@XZ
?ToString@uint32@default@@QAAP$AAVString@Platform@@XZ
?ToString@uint64@default@@QAAP$AAVString@Platform@@XZ
?ToString@uint8@default@@QAAP$AAVString@Platform@@XZ
?UninitializeData@Details@Platform@@YAXH@Z
?Union@Rect@Foundation@Windows@@QAAXV123@@Z
?Union@Rect@Foundation@Windows@@QAAXVPoint@23@@Z
?WriteLine@Console@Details@Platform@@SAXP$AAVObject@3@@Z
?WriteLine@Console@Details@Platform@@SAXP$AAVString@3@@Z
?WriteLine@Console@Details@Platform@@SAXXZ
?__abi_FailFast@@YGXXZ
?__abi_ObjectToString@__abi_details@@YGP$AAVString@Platform@@P$AAVObject@3@_N@Z
?__abi_WinRTraiseAccessDeniedException@@YGXXZ
?__abi_WinRTraiseCOMException@@YGXJ@Z
?__abi_WinRTraiseChangedStateException@@YGXXZ
?__abi_WinRTraiseClassNotRegisteredException@@YGXXZ
?__abi_WinRTraiseDisconnectedException@@YGXXZ
?__abi_WinRTraiseFailureException@@YGXXZ
?__abi_WinRTraiseInvalidArgumentException@@YGXXZ
?__abi_WinRTraiseInvalidCastException@@YGXXZ
?__abi_WinRTraiseNotImplementedException@@YGXXZ
?__abi_WinRTraiseNullReferenceException@@YGXXZ
?__abi_WinRTraiseObjectDisposedException@@YGXXZ
?__abi_WinRTraiseOperationCanceledException@@YGXXZ
?__abi_WinRTraiseOutOfBoundsException@@YGXXZ
?__abi_WinRTraiseOutOfMemoryException@@YGXXZ
?__abi_WinRTraiseWrongThreadException@@YGXXZ
?__abi_cast_Object_to_String@__abi_details@@YGP$AAVString@Platform@@_NP$AAVObject@3@@Z
?__abi_cast_String_to_Object@__abi_details@@YGP$AAVObject@Platform@@P$AAVString@3@@Z
?__abi_make_type_id@@YGP$AAVType@Platform@@ABU__abi_type_descriptor@@@Z
?__getActivationFactoryByHSTRING@@YGJPAUHSTRING__@@AAVGuid@Platform@@PAPAX@Z
?get@Bottom@Rect@Foundation@Windows@@QAAMXZ
?get@BreakOnAllocationId@Heap@Details@Platform@@SAHXZ
?get@BreakOnFreeId@Heap@Details@Platform@@SAHXZ
?get@CurrentAllocationId@Heap@Details@Platform@@SAHXZ
?get@Empty@Rect@Foundation@Windows@@SA?AV234@XZ
?get@Empty@Size@Foundation@Windows@@SA?AV234@XZ
?get@FullName@Type@Platform@@Q$AAAP$AAVString@3@XZ
?get@HasInverse@Matrix3D@Media3D@Media@Xaml@UI@Windows@@QAA_NXZ
?get@Message@Exception@Platform@@Q$AAAP$AAVString@3@XZ
?get@ObjectCount@Heap@Details@Platform@@SAHXZ
?get@Right@Rect@Foundation@Windows@@QAAMXZ
?get@TrackingLevel@Heap@Details@Platform@@SA?AW4HeapAllocationTrackingLevel@34@XZ
?set@BreakOnAllocationId@Heap@Details@Platform@@SAXH@Z
?set@BreakOnFreeId@Heap@Details@Platform@@SAXH@Z
?set@TrackingLevel@Heap@Details@Platform@@SAXW4HeapAllocationTrackingLevel@34@@Z
Name
.text
Size
170KB
Virtual Size
169KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
27KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
minATL
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1016B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
27KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=203, version=50929,
count=5, id=205, version=50929,
count=13, id=206, version=50929,
count=8, id=207, version=50929,
count=113, id=1, productName=Unmarked objects,
count=7, id=185, version=30716,
count=17, id=211, version=50929,
count=1, id=202, version=50929,
count=1, id=201, version=50929,
count=1, id=204, version=50929,
Adobe CC 2017/packages/DECore/DECore.pimx
- SHA256 a756a2e44e956f36f9e546ae199713b31d2c3f76d557a673adcd8bd64f2f21b4
- MD5 ee17e6f863d0da59fa1beb1725aafa8f
- SHA1 b54f38bec97d7760d073e4a40cdc5d6f01d6fb12
- SHA512 34e1ec12633570c7643cd2c333ab85de6b50e9678e2aff2d0dddc8d2b25ce7f1d0e887dc0d62deec74f4f44d29e2e4039b165bd708ee0d8ab45bed1b94ba50ac
- SSDEEP 1536:Qg6JHHIp9VCYYplBvjj1iC8ga7V9gR+86BRfY46h:RaocplBvtimlMRfY/
- TLSH T15E93D2AC21695BE17407DE243C645E472A0FB07DF6B431F8B2980E7A86D599F4E8B133
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe CC 2017/packages/DECore/DECore.sig
- SHA256 f195ae430b9ae475103eb5446cb47d434ecd837665d483116e6d2797e4fcecda
- MD5 12eed35d730d8da3e3d06cdfeb871627
- SHA1 7dd06aa6dda693e951e7f7f27653f293aaffd3c4
- SHA512 647feea136983d1e30a81e83e9371fa64bf2e78654c98af1a2eafe207c847e3c110dad14e06950039934bd7101e70e2aab85c7578fc1c1c518733d3b70c35fbd
- TLSH T1E031FB9D4BD93BB456334FF2AE228C11BD405B5D1B28C044718185A2EF1ED10260F266
- MD5 SHA1 SHA512 TLSH
Adobe CC 2017/packages/DWA/DWA.pima
- SHA256 fce72dbe443e80ced4b51b9077006214e80e284bfea54a897a71bea19a73853a
- MD5 c10d95cae4685c149db31f4a7a6f5aa2
- SHA1 2a5ae17709833debf2a2d6e92d6d3585440abc68
- SHA512 7557d14c894a081a7efa41d79bbe08dc4ea44f21fd58e1714e90de261cca29b1bc364ee724227f5f360d76746f4cf34861d99461132de76ad6954228bc0b815d
- SSDEEP 49152:/iyf/M+buLPwd75pD7NAVV9OXDmYtlEyKXy+vtTUdYrzXl+TP1Qji0GbR3Cnx3:/ix+buyP7NAVf4JlRKiSMYlqhtbR3Cd
- TLSH T1C6D533787A93432AE3A5217DDFA00B179B93098CB3B63937C99660D8F9338E4552748D
- MD5 SHA1 SHA512 SSDEEP TLSH
AdobeIDFlex.swf
- SHA256 1007e0e7743aad8de60622d374498167dfe670802f26b59726cdba86f6e31048
- MD5 4520c94a8c76b788fd8a46df11b87fef
- SHA1 0b4da7fe5ae074b0f1315fa80410880321cd618a
- SHA512 891abe71abee9f4ab11d8b1c6f1d69eaa495fec03b8f0a5f877a89c271449389c2ef7259bdc5ddd7943dd6e8793211a8e6153f8c0e120001becdf92c8d898a32
- SSDEEP 12288:lXXDoyIozKVFlnEIWfg9YiskjEyU2Oj1mT/FqZDCbZm9XKV14sQdnnrILyjeO0Np:xToy3zKFlqgDs3yUkT/08bSXa4sYnnMl
- TLSH T108D4337689C31F0BD1CE162D229104B58D6F4F8F65B4C867B9A1387C99FF678840AE27
- MD5 SHA1 SHA512 SSDEEP TLSH
DWAFlex.swf
- SHA256 2f0b8b2b118503e254732a21fac9f196fc3a2ada87f3e91bd10896a95cddefc6
- MD5 7ae4f9f1c1b12664c81717adf65cf182
- SHA1 83ffa4f82c62dbf06e305cc5c328df3d273a6941
- SHA512 909528a6ebd527591ed281eb598fbc9b90918d321dfffb1b1f6b8b7dacdaa2b51631c38aa3aaceee3ace386ab81a86bbc033e8be61b9e47e46726e23d6cf86c5
- SSDEEP 12288:zNhYzR5kXWlEFpIqFE329ApRj0kuAxvgN8ST7nF0vvmyyl4PIaBPOkBhf/O:AGXiEbIIj9AgeGZ/unS2BPlf/O
- TLSH T119D423BD53605049429279244CE348178AE34E14881EFD36B70DBBF5FC83994AFEFA96
- MD5 SHA1 SHA512 SSDEEP TLSH
DWANative.dll
- IMPHASH cab3415d2f5fc9d0d08fbf16020c8b50
- SHA256 e689272719240aa59108254dc72cfb669db92bfc5dd1a984a75f7d84fbdbdbec
- MD5 6ff854d599f070fcf890ea5d5c987b03
- SHA1 c0b8c5001cb1195ac689b2145216e454a617b311
- SHA512 59716e8a6dd9e3c56000290809c9091dc6239bd3eaa3e01ea384a61e4aaf452f8787d9d10af2519712747303b8395115d1abad4753f2f2ede38486b5df4148d5
- SSDEEP 12288:sZVUXWd1L20BEpTnDHWdtvit9uVWEZp2A1RhRe6v1Tkhj94d2dwBSP:eCXWXS0B2TzetvM9oNZZ7Re69T+94d6
- TLSH T1A9F47D52A6D2C13EF4EB25B0967D2B3B1C39B826133485C7B7C419998E705E2BA3D317
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
b5:7e:72:d4:10:41:48:f8:dc:8a:24:2a:6f:50:45:40:c6:1c:fa:50
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Chains
Sep 20, 2012
CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Subject
CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US
Serial Number
79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 1, 2012 - Dec 31, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Serial Number
68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 19, 2012 - Sep 19, 2013
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
1
Major OS version
5
Entry point
504518
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\oobe\3.0\c3p0\dev5\target\win\Release\DWANative.pdb
shlwapi
PathFileExistsW
PathStripPathW
PathIsNetworkPathW
PathRemoveBackslashW
PathRemoveFileSpecW
PathIsDirectoryW
PathAppendW
kernel32
CloseHandle
GetCurrentProcessId
LocalFree
GetDateFormatW
SetFilePointer
CreateDirectoryW
WriteFile
GetTimeFormatW
CreateFileW
MultiByteToWideChar
GetTempPathW
GetLocalTime
GetFileSize
FindFirstFileW
CreateProcessW
SetEvent
WideCharToMultiByte
Sleep
GetExitCodeProcess
ReadFile
GetModuleFileNameW
FlushFileBuffers
FindClose
RemoveDirectoryW
FindNextFileW
DeleteFileW
lstrlenA
InterlockedIncrement
InterlockedDecrement
GetShortPathNameW
OpenFile
GetDriveTypeW
GetCurrentProcess
GetModuleHandleW
FormatMessageW
GetVersionExW
IsProcessorFeaturePresent
GetProcAddress
GlobalMemoryStatusEx
OpenEventW
GetDiskFreeSpaceExW
CreateThread
ExitProcess
GetFullPathNameW
GetFullPathNameA
CreateFileA
SetEndOfFile
FreeLibrary
QueryPerformanceCounter
UnlockFile
LockFile
GetTickCount
GetSystemTimeAsFileTime
FormatMessageA
InitializeCriticalSection
LoadLibraryW
LeaveCriticalSection
GetFileAttributesA
GetFileAttributesW
LockFileEx
EnterCriticalSection
GetDiskFreeSpaceW
LoadLibraryA
GetDiskFreeSpaceA
DeleteCriticalSection
GetCurrentThreadId
GetTempPathA
GetSystemTime
AreFileApisANSI
DeleteFileA
ConnectNamedPipe
CreateNamedPipeW
GetCPInfo
SetFileAttributesW
CopyFileW
lstrlenW
GetACP
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
SetEnvironmentVariableA
CompareStringW
CreateSemaphoreW
GetLastError
ReleaseSemaphore
WaitForSingleObject
HeapSize
GetConsoleCP
GetConsoleMode
GetSystemInfo
GetStartupInfoW
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetTimeZoneInformation
SetLastError
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
HeapDestroy
GetStringTypeW
LCMapStringW
WriteConsoleW
SetStdHandle
IsValidCodePage
GetOEMCP
HeapCreate
GetStdHandle
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RaiseException
RtlUnwind
GetCommandLineA
HeapReAlloc
HeapFree
DecodePointer
EncodePointer
HeapAlloc
user32
SendMessageW
GetActiveWindow
GetSystemMetrics
wsprintfW
advapi32
SetNamedSecurityInfoW
RegOpenKeyExW
RegQueryValueExW
FreeSid
SetEntriesInAclW
AllocateAndInitializeSid
GetNamedSecurityInfoW
shell32
SHGetFolderLocation
SHGetFolderPathW
SHGetPathFromIDListW
SHGetMalloc
SHGetSpecialFolderLocation
ShellExecuteExW
SHBrowseForFolderW
SHGetSpecialFolderPathW
ord680
SHCreateDirectoryExW
ole32
CLSIDFromProgID
StringFromGUID2
CLSIDFromString
OleRun
CoInitialize
CoTaskMemFree
CoCreateGuid
CoCreateInstance
oleaut32
SysFreeString
VariantInit
VariantCopy
VariantClear
SysAllocString
GetErrorInfo
finalizeApplet
freeMemory
initializeApplet
processMessage
Name
.text
Size
567KB
Virtual Size
566KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
101KB
Virtual Size
100KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
24KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=152, version=20115,
count=29, id=158, version=31118,
count=147, id=170, version=31118,
count=6, id=171, productName=VS2010 build 30319, version=30319,
count=3, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=59, id=171, version=31118,
count=15, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=199, id=1, productName=Unmarked objects,
count=13, id=175, version=31118,
count=1, id=155, version=31118,
count=1, id=154, version=31118,
count=1, id=157, version=31118,
Setup.exe
- IMPHASH f652d84b17a7eff1d76c16cd13b8e089
- SHA256 3b58e8202d8d75e27c54682c397eafe86a4fdcbbf7215f7be23c2e7715d453ad
- MD5 440a11781132aa88ba18717d9a0c75f8
- SHA1 8d0754e9f0f24ba3f57b417f22ba1ca47b0b88d6
- SHA512 51a71476b2394764f8907f2f1cf607fedd7938e952cd58d8fdc5d5c6c16a4a5f4367cc563b891dde5de7edc8017aae2cf2aa0c03b533763302af365942571588
- SSDEEP 1536:P0Khuz0qx0vrvCDA8L+i+ccZE7Cs8jcdNd+963bvqxTw5GYA5NGPd7LPhjrEA:P3rnYX+/E7nN+63uxTr5NGd7T5rF
- TLSH T1C384468171D0C48AE86B09725A3AB93030E2FD9E51BBCD0D679D7F2906B2351549FF2E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
86:1c:d3:a2:5e:64:43:1d:2d:00:06:8c:cb:d7:b7:44:12:d3:02:d3
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Chains
Feb 19, 2014
CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Serial Number
11:c9:54:ae:24:12:01:1c:f5:4a:7c:3c:b1:8d:75:1e
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 19, 2013 - Feb 20, 2014
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
1
Major OS version
5
Entry point
16756
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\1\releases\build\Redirector\vc10\Release\Setup.pdb
shlwapi
PathRemoveFileSpecW
kernel32
WriteConsoleW
GetStdHandle
CloseHandle
WaitForSingleObject
GetExitCodeProcess
CreateProcessW
GetModuleFileNameW
FreeConsole
AttachConsole
GetConsoleWindow
SetFilePointerEx
GetStringTypeW
GetConsoleMode
GetConsoleCP
EncodePointer
DecodePointer
EnterCriticalSection
LeaveCriticalSection
SetStdHandle
GetFileType
GetLastError
InitializeCriticalSectionAndSpinCount
RaiseException
RtlUnwind
GetCommandLineW
WriteFile
IsProcessorFeaturePresent
HeapAlloc
HeapFree
InterlockedDecrement
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
HeapSize
Sleep
DeleteCriticalSection
IsDebuggerPresent
GetStartupInfoW
SetLastError
InterlockedIncrement
CreateFileW
GetCurrentThreadId
GetProcessHeap
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
OutputDebugStringW
LoadLibraryExW
LoadLibraryW
WideCharToMultiByte
LCMapStringW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
HeapReAlloc
FlushFileBuffers
user32
SendMessageW
shell32
CommandLineToArgvW
Name
.text
Size
42KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
26KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
306KB
Virtual Size
306KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=13, id=205, version=50929,
count=98, id=206, version=50929,
count=37, id=207, version=50929,
count=86, id=1, productName=Unmarked objects,
count=9, id=185, version=30716,
count=2, id=207, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=201, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=204, productName=VS2012 UPD4 build 61030, version=61030,
TokenGenerator64.exe
- IMPHASH 8266186537c9574129823c009a79f97f
- SHA256 98595ffa4a6319cbdae4efe7a9df84c7f5d477f93e6ee008e021e81cc6c363ff
- MD5 f601c0e160672b9cd1f2955dce182b1c
- SHA1 b814342186394eea4303139e689448c652935524
- SHA512 33de0fd511dbb6ca781d794e660928ab952485c972ea9f96eb2c9999b6abb7984add50b4c8e3658e1756a097833600262e671a975fa44b2fd4fa75555b2c0aa8
- SSDEEP 3072:KEWnqDRPbvPTiE2O730cwt9WVgPIqWsEbOD3:VWnqDlbXTn730cwt2Tqlr7
- TLSH T1C9C36C4733F810F5E4A7D278C9F64646D7B2B8664775838F1260425A6F237E0AE3A723
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
04:7e:49:d2:23:88:d7:c3:55:98:b1:ef:66:9d:78:29:04:81:5e:70
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Chains
Sep 20, 2012
CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Subject
CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US
Serial Number
79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 1, 2012 - Dec 31, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Serial Number
68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 19, 2012 - Sep 19, 2013
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
2
Major OS version
5
Entry point
19172
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\oobe\3.0\c3p0\dev5\target\win\Release\TokenGenerator64.pdb
kernel32
CloseHandle
GetCurrentProcessId
LocalFree
GetDateFormatW
SetFilePointer
CreateDirectoryW
WriteFile
GetTimeFormatW
CreateFileW
MultiByteToWideChar
GetTempPathW
GetLocalTime
GetCommandLineW
WideCharToMultiByte
Sleep
GetModuleFileNameW
FlushFileBuffers
lstrlenA
HeapSize
EnterCriticalSection
CreateSemaphoreW
GetLastError
ReleaseSemaphore
WaitForSingleObject
GetStringTypeW
LCMapStringW
WriteConsoleW
SetStdHandle
HeapReAlloc
IsValidCodePage
GetOEMCP
LeaveCriticalSection
LoadLibraryW
GetTickCount
QueryPerformanceCounter
DeleteCriticalSection
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetACP
GetCPInfo
GetConsoleMode
GetConsoleCP
DecodePointer
EncodePointer
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
GetStartupInfoW
RaiseException
RtlPcToFileHeader
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetStdHandle
HeapSetInformation
GetVersion
HeapCreate
GetProcAddress
GetModuleHandleW
ExitProcess
FlsGetValue
FlsSetValue
FlsFree
SetLastError
GetCurrentThreadId
FlsAlloc
RtlUnwindEx
FreeEnvironmentStringsW
GetEnvironmentStringsW
user32
wsprintfW
shell32
SHGetSpecialFolderPathW
CommandLineToArgvW
ole32
CLSIDFromProgID
CLSIDFromString
OleRun
CoCreateInstance
CoInitialize
oleaut32
SysFreeString
VariantInit
VariantCopy
VariantClear
GetErrorInfo
SysAllocString
shlwapi
PathFileExistsW
Name
.text
Size
72KB
Virtual Size
71KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
24KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
6KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=152, version=20115,
count=42, id=171, version=31118,
count=118, id=170, version=31118,
count=10, id=158, version=31118,
count=6, id=171, productName=VS2010 build 30319, version=30319,
count=15, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=142, id=1, productName=Unmarked objects,
count=5, id=175, version=31118,
count=1, id=154, version=31118,
count=1, id=157, version=31118,
ZStringResources/cs_CZ/stringtable.xml
- SHA256 9e9d55573d8ac448235d15723510be68f6c52ffe73dba19282f82747bb9a9ceb
- MD5 95ec71855116e500a8aa1d1e16a5a654
- SHA1 d2874d9ac0599f76fb644a5a5db86358777873c8
- SHA512 36db96c992840c64695b8586299efb6ba970066e32c2cd450a1f53151888538a86f865b960d6696923779cbff4250b3248b6c49b35dcc581a9516e84ec79e60b
- SSDEEP 768:ZpvB03izrwR1v+CeDGdPh9J0nVjNZu1y32hAXpm8QcWGYhjC4e4qvdZnHy:ZP0OwR1vR1J0nt3nscWGF9dQ
- TLSH T1DB23BD5232B87F1C6845956F5AB230C4440FDCFC25A85863769EB67B3FA0E480AFB974
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/da_DK/stringtable.xml
- SHA256 5969d80337bc677ba5bde577b5c265e8a8dfe306c6d769c06825092807e647e9
- MD5 4f8ddb9ab32210576b49b93ea30d411c
- SHA1 65e719344c5ca904fe113a36dd4fcc6262ca57c6
- SHA512 d60b2dc0e87b6ad31eeb3b0b68a636e4dcf1c11bca2b0c9cf9cd62ebf0a2a4348ccd9de664ce211ed3a186e572e81370bfce9df8004b44ab4d7eac91429fd901
- SSDEEP 384:UPji6bmCKKI6nR9VzDJZPUdissZFtdqBgX51E6DYuEEqsgiEgFZqyaebnHy:U2wmtKRnR99zPj7qBI51tDYzaqhebnHy
- TLSH T19513CC9232B87F2CA846D57F9A7224C9401FECBC25A42463729DA17B3F91D440BFF964
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/de_DE/stringtable.xml
- SHA256 c6589dbba525dd0e623c31121245e82c0cd3dc60af9a4d43d6c822491e31b11f
- MD5 d0bb8a13805aa21c1a4c7c6c63fd0227
- SHA1 e1f5c9593ddc2c6241e75f28203cbf71c71cbb37
- SHA512 d793d256293c1d1828ab90c5656ec53dedf9ba13fd8e33691fdbc1cbd7a4e21960d2ddac67dddda7aa6f67a680436141b7fb309310274b7c354c9eda65a984b9
- SSDEEP 384:StjRRmFkld3N25LwY53VKbRLchhHQ7+GlDN161qfMilzVxQAqyXnHy:Stf/iLwI30NLchh7GpN1HkilxxQsnHy
- TLSH T1B0238D5235F8BF2CA846D66F4A7224C5211FECF821A46462B29EA1773F50E440BFF974
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/en_GB/stringtable.xml
- SHA256 eeec5a09723ff911a302020f50e06f4609cddb267ab152280e282bfa1fda7d25
- MD5 a3e2c9ee5b79145180708f5868a5377b
- SHA1 e70e50940aaf24828fee332d89ccae404529d8fb
- SHA512 bc8a86b2104a67285e7aaa4a6b90413ded5e8c8b9c175ace8cea9b8dbea23efd81bb12a69b251ac3db81ddb34bec0c416d236c81d64982536b5cc97d3cd8d007
- SSDEEP 768:B4ak/lZB4vfsAzv/s3CRSslCIqJRdFE7tpWlYwcKxGMAH9aRnHy:B4ak/DB43M3CIslCv2W2w1sEo
- TLSH T13903AB9677987F2C2C8681BF5D7534D5541FACB836A8601321EEB53B3B40E840AF7DA8
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/en_US/stringtable.xml
- SHA256 19da5ccdc2b78729a4e77fade850ecddf40269ffa2fab090a5551078aad73d7a
- MD5 110c0063979dccfcbe92cd2696c513a5
- SHA1 4e3cedc9912a6f34c902209d111a66e011b9928b
- SHA512 bb2453603a39fb7b126b6e92dd3d345b2afbef057ca789218c3de6998c5db74c4013acd93640cbc697dc68c3866a8f1d081ad8514e27a93d9690633a0629752a
- SSDEEP 768:B4ak/lZB4visAzv/E3CRSslCIqJRd/EWupWlYwcE7GMAH9aRnHy:B4ak/DB4Kk3CIslCvSW2wBsEo
- TLSH T1DA03AB9677987F2C2C8A81BF5D7534C5541FACF836A86013219EB13B3B41E844AF7DA8
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/en_XM/stringtable.xml
- SHA256 7c88ca1eb907eb50d5d7fa6456fcd116fd4a1fa111537bde8e810fce1a7d6daf
- MD5 abe469decf6bfb68d0356cf8e425f980
- SHA1 e0821ef0769e68491cc2b143d8e820460c20acb4
- SHA512 9c4527c07f229f14a2f897ef4806f104dce1a622871419291d7f67afbe81940481bc0efde3e5746fbb0d9f90b5a70cb092041aab590b3234c2228a75b5fffcc8
- SSDEEP 768:B4ak/lZB4vYsAzv/83CRSslCIqJRdxEAspWlYwcI3GMAH9aRnHy:B4ak/DB4gc3CIslCvWW2w1sEo
- TLSH T10003BC9677987F2C2C8681BF5D7534D5541FACF836A8601321AEB13B3B41E840AF7DA8
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/es_ES/stringtable.xml
- SHA256 43e13957bfceddec1d513be759227038e279857f193e4eb03cf90ce22a0b7bf9
- MD5 691fc271e46577a6e30d745ccb399fe4
- SHA1 c16e5f54ac8e3a381b0ae59a79be3be9578dff28
- SHA512 cf1841ed517e983b2a796b84afc6d616de1a771a2119a48215c1846f5124fa5d289c5bfdbb467cc3e9ef84d036b95a943d011c4e02772102f5fde2bb51325d17
- SSDEEP 384:47U6NgSDA3TowJz+Zx0A4FGRx4OWAb3p2G19FmhI9xQqSBQpywPnHy:4NGSDwUkzkgG1PmW1IwPnHy
- TLSH T18D23CE5132F87F1C5886946F9AB120D5900FDCF834A85462B29E657B3F90E884BFFD64
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/es_LA/stringtable.xml
- SHA256 b22a96ad222c79ba7c7a3e747a89d5c3f438e451a0d54310bb008ad7370d0378
- MD5 f31949626eccfe037a99629f3f6590ae
- SHA1 3e73bbf56559e5775247d5cd2e3186391ea36205
- SHA512 54deb74398c4f176c821fd585448085f3dd5479197a93e9133422ad4122cf0db5b7706b6933d5a5e66ca67d23e4918072ad9a8f3acc16bb8bc9a53135e9b5752
- SSDEEP 384:47U6NgVDAHTowJz+Zx0A4FGRx4O5AbUy2G19FmhI9ulqS/QpywPnHy:4NGVD4UkzaRG1PmWFGwPnHy
- TLSH T17B23CE5132F87F1C5886946F9AB120D5900FDCF834A85462B29E65BB3F90E884BFFD64
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/es_MX/stringtable.xml
- SHA256 b22a96ad222c79ba7c7a3e747a89d5c3f438e451a0d54310bb008ad7370d0378
- MD5 f31949626eccfe037a99629f3f6590ae
- SHA1 3e73bbf56559e5775247d5cd2e3186391ea36205
- SHA512 54deb74398c4f176c821fd585448085f3dd5479197a93e9133422ad4122cf0db5b7706b6933d5a5e66ca67d23e4918072ad9a8f3acc16bb8bc9a53135e9b5752
- SSDEEP 384:47U6NgVDAHTowJz+Zx0A4FGRx4O5AbUy2G19FmhI9ulqS/QpywPnHy:4NGVD4UkzaRG1PmWFGwPnHy
- TLSH T17B23CE5132F87F1C5886946F9AB120D5900FDCF834A85462B29E65BB3F90E884BFFD64
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/es_NA/stringtable.xml
- SHA256 b22a96ad222c79ba7c7a3e747a89d5c3f438e451a0d54310bb008ad7370d0378
- MD5 f31949626eccfe037a99629f3f6590ae
- SHA1 3e73bbf56559e5775247d5cd2e3186391ea36205
- SHA512 54deb74398c4f176c821fd585448085f3dd5479197a93e9133422ad4122cf0db5b7706b6933d5a5e66ca67d23e4918072ad9a8f3acc16bb8bc9a53135e9b5752
- SSDEEP 384:47U6NgVDAHTowJz+Zx0A4FGRx4O5AbUy2G19FmhI9ulqS/QpywPnHy:4NGVD4UkzaRG1PmWFGwPnHy
- TLSH T17B23CE5132F87F1C5886946F9AB120D5900FDCF834A85462B29E65BB3F90E884BFFD64
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/fi_FI/stringtable.xml
- SHA256 69a0a8fca1e03af03b59c272273a283a9a465f7a1dd64184990c862d2320ab1a
- MD5 7d70cb2849b487d648c7792a271b3f73
- SHA1 0017130790906e5379dadb2fc1d3f8961d11482b
- SHA512 5e258a4ee17073b43f7d5c24350c775cf9a777e09b513023ae587469cfede9097ccc88763e41bd59774367be22c974cc3cc050a60b59ef582a699f5e093e1e2d
- SSDEEP 384:CUyHWaMHn9vF2h6qBFvtzYBxjdeRIRMLt9e1PkKkhBqqFAaYRwJ2dZnHy:C2n9vch6qDIKrje18enaYRR7nHy
- TLSH T17D237F5232E8AF1CA445D47F4AB170D9404FDCFC25A85862B25EA2BB3F60D441AFBD78
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/fr_CA/stringtable.xml
- SHA256 cb624126cc696d9168478adce33376f991525a5bcc03c5adc4e839b5a0834e6a
- MD5 9a0ed0a1a50b849454413e9663635414
- SHA1 423ad5fac44a470c599fc536e06f4f79a490c8ec
- SHA512 dd9534b5d271b210cbde2ad91be26d2b4e9bfb86f1ca0d0cbb307bc1397fecfe9b03871f90a12cff8e97f4b3b209efc39e37e7df12a352558443341924c318e5
- SSDEEP 768:kriFAB/DFnl3TSyyo2oLl+ss8E08hQ1zwR4XlMtX4FqnHy:krlBTSGeyN
- TLSH T1E423BC5232F87F2C6886956F5A7220C9501FDCF831A46462B29E61773F91D8807FF9B8
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/fr_FR/stringtable.xml
- SHA256 6cc5d6b13c4d5c3b8a52eb31839b033e0e8ab57812c59ad4589e105f8e2c222e
- MD5 3304cea5e46f7780fbd438ecbd5102b5
- SHA1 eb0e2e440bcca9081d7ffe61a44d251db602aa11
- SHA512 e7ee6c75927a18a447ff5886f582c2f6f185c66869de918a32f4bf1ff1d786231f71a03e3600aff91722fae14bfc234d95cec9782587aaeae9a0ccc2ac328f79
- SSDEEP 768:kriFAB/DFnw3jSyyo2WLl+ss8E0nkQ1zwRCplMtX4FqnHy:krlyjSG4iN
- TLSH T15F23BC5232F87F2C6886956F5A7220C9501FDCF831A46462B29E61773F91D8807FF9B8
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/fr_XM/stringtable.xml
- SHA256 6cc5d6b13c4d5c3b8a52eb31839b033e0e8ab57812c59ad4589e105f8e2c222e
- MD5 3304cea5e46f7780fbd438ecbd5102b5
- SHA1 eb0e2e440bcca9081d7ffe61a44d251db602aa11
- SHA512 e7ee6c75927a18a447ff5886f582c2f6f185c66869de918a32f4bf1ff1d786231f71a03e3600aff91722fae14bfc234d95cec9782587aaeae9a0ccc2ac328f79
- SSDEEP 768:kriFAB/DFnw3jSyyo2WLl+ss8E0nkQ1zwRCplMtX4FqnHy:krlyjSG4iN
- TLSH T15F23BC5232F87F2C6886956F5A7220C9501FDCF831A46462B29E61773F91D8807FF9B8
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/hu_HU/stringtable.xml
- SHA256 95ab8153668353ef7074b1ffc4db54d3e38fdf84bd0335991fa1bb973244065c
- MD5 f804acb71045628cd8237f32cb5e5c5a
- SHA1 4c67013ade1c269c40b3628f4569e0f2103ced6c
- SHA512 e27740bbd8de04c726c6eb31072b4402b6e72eaaa02f782ac31bd0aa996bb18f397a60e90d667a82cc1debcd3b1f7c0ce19b87569a5e5ef91c0355ed1c4da242
- SSDEEP 384:KUuiNWipJ8DyovGRdSrhb1GGyNPNHjNkJbblPpc+J4n1d7rwqMQmqZrWjRxRxDoM:KwXj0vGRdSDx9pc+Wn1nMi9WfC6GvnHy
- TLSH T100237DB232A87F1CA846946F5AB231C5401FDCFC25B41463729E657B3F90E480EFB969
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/it_IT/stringtable.xml
- SHA256 07ca7a40c94abc46f3dc72cb520eef3fd7aff427ddca2976eb5a92c5a158c409
- MD5 4796cf6e27ae9943943e2c545c917c44
- SHA1 85329c569007f9d291e52430e3f7cbb4d1fe5d71
- SHA512 463bbac78bac25acf5b87c7b1f8649ea247f9b3633a0d6371acf646a2b40292d7ad4510ea5a11752d0823598a066eb6f6de335905253e92416a619929161dd44
- SSDEEP 384:+5XMrFoeaVdtSZ4YWpoj0HBDFA1xbvRFJo+aqqMVZ155W9tTWenOFjCcbq+YnHy:+6FCVlNfA1xbvRFiW++YnHy
- TLSH T14323AD6171B87F1C6846956F8AB230C8511FECFC39A42462729E627B3F91D440AFFD68
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/ja_JP/stringtable.xml
- SHA256 bfcef4c373296eb04eb9faa465444f41b58e210ee3f264df225b13c7206c14a4
- MD5 3060b0f3e03a3179c1622845295d8735
- SHA1 6a1c389418bfa773b6d5d3844da4359ddf47da8b
- SHA512 3aad08a3c08e74d7e3537bc3418a9d7f1631db2a73860c17abf1c786c2cf5fcab313d5341ab7548c3fa320a80e7353841eed75075b41fa972324d7c1f1ddfe49
- SSDEEP 768:HvcjURbJliahmreNatki1RaZ6Q18UmsqDiqnHy:HwURbJliahmreNatliN
- TLSH T10E33A95E73A93F2D9851943B49B631C4400F9CBDE8A42472616EE1773F60E8CCABB974
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/ko_KR/stringtable.xml
- SHA256 08589b894bc27b5775aa36d58b728ddd88db9e8c78ac762956e32b9a412d64f9
- MD5 931e1c85077d4039e9d24db86afc8f2c
- SHA1 7dd4d837aca0e24a72c606ab25621b6c9466c3b2
- SHA512 4cccef0921d9ea1bf9537103e36f14ce57e6306a5752ae69fb2d6521d7262ddb6e29b694dbec06e14704560583a1addc6612c0cd8e05045ceda716ea811cd319
- SSDEEP 384:Fo3WmmXc5ILdv0ppXbXG5OKTUQr18hv4qgQB6Kc2InHy:Fnk5ILdv0TbXrKT9r18h9g+6Kc2InHy
- TLSH T11823BD9232F96F1C5842946B4AF271C4420FDCF936651462B64DA97B3FA0D840AFFDB8
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/nb_NO/stringtable.xml
- SHA256 8b6c08b73682c6471333aebda71b10d337da8a58dae33e535444485d6da530cd
- MD5 c8dd76bbbca7f0232b9a6761fba81e90
- SHA1 0f63b240e016d7ea81ebc0ac96434d3a4c33be29
- SHA512 a9bf6917fae12bb61da334208cceac3ec0c782d9fc951523ce8dcf7025a3d085881df88fb9c60e71ff382f964995dac28f96f6e81984b70a4b1afa6b78e1e755
- SSDEEP 768:FHJHk7YImnt8IHfr+IgEow81TdbyCyMsY+dmhvIO0feVEnHy:FpTXHfWsRdmhvIO08
- TLSH T1A9139C5132B87F1CA855957F9A7220C9410FECBC25A41463729EB17B3FA1E880BFF964
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/nl_NL/stringtable.xml
- SHA256 b82754ecd7884cafff2b6a1871ea644ef166a60e65a22cf7b1ba9f3355fb64e1
- MD5 11979734653ef11531b82d1ca1cacffe
- SHA1 6a7db8b5a88a1525ed76fd258404c2e1d6191fd3
- SHA512 e1ce715f7b2a5ce2b10122041a72ab97b97d83f435fcee0d1a3e9caf069ae906aa4ece5b5d2cf13fbd943c176a8c40822ac34105c353d62745a876d9091ba355
- SSDEEP 384:QOJrXyoLkSEVzMZ2K0zYgOUfG7n1VL9LxL2LjLwfOBaq8MiZiIidiRtHieiy8bJO:QlyZ0ORn1w8Htj8bJDnHy
- TLSH T19123CF5231B87F2C6845D56F9A7230D9510FECFC25A82462B29EA17B3F50D480AFF9B4
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/pl_PL/stringtable.xml
- SHA256 f4074ff79d3240576012a8879964c37140f928c62af4d5123b146756838f35dd
- MD5 22f2472f55ef28a549f7ff9232921233
- SHA1 8d4cb39c8b8c97a0d9dead9750f5e789fb1e4aa4
- SHA512 f510f641cfca1b1660654082dddd54eb14034b38b847d3a9e5b11da111e020a395d945e8a1f772c0968a1d026cba9a659cd3b6f461201799cca0506eb58445c0
- SSDEEP 768:IYNNM9xLfM4MNCPZQnqMWURYZZmQT+jz2bBN1PVmJhNKCbX+8eGnHy:IJM9s
- TLSH T18023885132B86F1C6945946F8AB230C9404FDCF834A86463729E657B3F91E480BFFDA9
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/pt_BR/stringtable.xml
- SHA256 4806e7487c1f340143f4283e34b494dd590f2146cee5a90184de01665fd65e30
- MD5 a985f92dec454b3dd3b9473889b0182d
- SHA1 daa2bea98562d74e7fa3dcfe0f3c4a9350c4baff
- SHA512 0de78bbe43fbb870c597d8526a319633ff48b6cacc443d9eb45f69aae77db2370cc2f994b951e5ec8ecbd2bf6abe8bd623ab92037c3e9d747a9dc9bce75e11e7
- SSDEEP 768:kCXtcPTExKApO2z6KX9lM0uWkG1gkYIjMWVff/7MPyB/TYP2bQyoLnHy:kvT6EkSW
- TLSH T1BA23BB5232E83F2C6846957F9A7230C5400F9CB835645463B6AE667B3FD0E884BBFD64
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/ru_RU/stringtable.xml
- SHA256 1ae1d0dff3e91e17f42721b9b1fb94ea4be7f227fe3be8fc11b47008068a7166
- MD5 d0e399eba4100ddd4fe241da66b81e88
- SHA1 581c470c90a8fc87050870bf9e134e240dfb9bb7
- SHA512 696442a64e83fea338b2163ce19dbbc4e4087b21f8411357eaaf4eac15ffb029a803ca96cf62b08d05b0864cd0f69622aa34d3e0bad678e1e1b57b56a3766159
- SSDEEP 384:ajyZYu5SvvoP4oNekqnBhZ243h7ng1m11oRnqdthvPfjGnnFkZuH/E6mBCfCnHy:ajzqV4oNekqnpg1Ed4/68fCnHy
- TLSH T1C843986131E93F9C1505A42FCA31B988249F9CFD3B695663215C397B3EE0C144BBFA68
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/sv_SE/stringtable.xml
- SHA256 1a59d43bdb8359176c3d67d72f0ef5650d4021f9145635dfd842263cd1df182e
- MD5 37c6475958a87b627eccc27eade88a14
- SHA1 2c9edb90e3311f30b6236df2661d987bbdbf7a8d
- SHA512 1e365a3ecfef162ca4a0bcff1afd9c4aaa9f9541356e6b1feddad1cd8fd18bbd172389395c77c1db6c7d2ab8e5c1930877732ebff4a899466961b196e2b08618
- SSDEEP 384:9WCUjtASTKG+sHXJnOBB7qJrS1/Q+wjqqU+28c5+WNnHy:9ZytDTKGvHXJo7qRS14+/qUOc5+WNnHy
- TLSH T178239E5232B8BF1CA852956F8AB220D9001FECF835F46462729E657B3F90D440AFF975
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/tr_TR/stringtable.xml
- SHA256 82ff8f2b20b3d58e52366b84b1cbdbe68a25cb36cce753d3e2504154da7edbfe
- MD5 605c46f5130e6f3b1dc4ce17f0309895
- SHA1 a253d894d84811d6a42310954a32355617e15ba4
- SHA512 a1a051e3b7ea40339da3290e076146e8c2a5a0ef00e6c6140c4d72e9fd30770dc4f67173208f592680656758b4d995e557bd9da9e33f945b9cb91ef12f903dad
- SSDEEP 384:0gqxaBbVRncJNZnb7wpFW0ze11jkX5iq1IN/MZaOMnHy:0qbvcJNtz0C11jkpn1RZaOMnHy
- TLSH T12C23FD9135F87F1CA946956F8AB221C4800F9CF836B4B463725EA67B3F50E440AFB974
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/uk_UA/stringtable.xml
- SHA256 de1da670406c0eb16494f988f81dc8c69d7e0c9439f66727ee66b0e006c7ac6d
- MD5 86557c2033ff362da0b30753d5c84867
- SHA1 b0460737831904629f4c439bbcc0197b35dc60e2
- SHA512 90b4d827169059b1b223ae2c13b76459a207862b46dd8a2eb1ad1f9888267043ded138b21871353b4314884b75a37663b2b174f154d99942f2ef6f77943ef890
- SSDEEP 384:+APfihWHdFY5+LeZkhLXkJAMN4Kri5PEOvSfQ4fXVH4U2BeSnG1DpX71NEOTqbqP:+3iPKZaI/zoJG1DLgEo0Sp5nHy
- TLSH T15743995131E86F9D140AE06BD974B5C8249F8CFD3AA5561332AD397B3EE0C044EBFA64
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/zh_CN/stringtable.xml
- SHA256 050b2600a2e0465073c86c6aa478e945d9a1dd38b612288fd24cfa9931da7b92
- MD5 aff79b8a2807e77a1cfc1c8a2ddf7f5a
- SHA1 2dbd414f4b0402e647f2d54e0964bd90c5e0caed
- SHA512 6f547db8165a0df9dc980ae53142fc3b3f2d12cc1a92141bdf872d2dfb0f9396def0d1234589b373cce249349d42eceea8c180ef40bf172a8331115ea9c2078f
- SSDEEP 384:VpgXB7yj11fuKd8an3M+1y36TRqlabR/1E69UzuOttnHy:Vj1Kanc+146IlabR/1E69UzuitnHy
- TLSH T1C3135A9232A87F1C5846987B5AB221D8400FECFC35A468A3725E657B3F50D480BFFD69
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/zh_TW/stringtable.xml
- SHA256 0c72e35fc21f06045790a04bdc46eab88c3ffa142cf2054405b9da8ddfd68807
- MD5 c90bc5bf20e92e9d544e8759efaef496
- SHA1 7114c5f824f57dec68c4ed4cb40005e5fa8295f3
- SHA512 4134d66fe5e5a44692823d428966bce0c3be79cec3e4b27150cb24914ad888adcc7d44aad5f68bd2ca28d38ffb7662386c74afe19d845570526b1094b88b77f3
- SSDEEP 384:tRP6YMO1q+pJ55i4y9XWpPi29qX1kSHqfnJoHFqnHy:t71qixP1YX1kPBoHFqnHy
- TLSH T17313889231A87F5C5846D87B5BB221D8401FECFC25A42863B29D627B3F50D480BFB969
- MD5 SHA1 SHA512 SSDEEP TLSH
adobeIdManifest.xml
- SHA256 b8454875d59517fdfb8248abacda20bf34ee003255c81ad5e444d945f53b2de9
- MD5 161a971d515998f21aa0f978e330ecc2
- SHA1 8981e70a7dddcf51cb91fe065605f1295bd443d3
- SHA512 094feb3572ed49a7e2dc59acbde38dbfa00658684188c8f27182eb5c57e55f89cce07a49c93c1e3c8ae69610f2a88034b8757f7c4cf5fe44e52c3ea11630a1c1
- TLSH T1BEC080D271DDD91345509A254977C1047315964C0BB0888CD0D506F7564613C3E47006
- MD5 SHA1 SHA512 TLSH
assets/fonts_clean.swf
- SHA256 6726074bc11d56a179f844c321fa648f4d3ce38d0257f5a51f79431825eea82b
- MD5 ed67bfa23913387c9f3fb4a619ac7159
- SHA1 775812cf6f302a4e0876a5e730a71a544cba82b4
- SHA512 9cd234ada8d8fd52ca6905f749fb86fbe00248a6e4cbda06867373b6af62dfaa0097807c70623f7df19cfcc238104f1d7732b34f6348b0cd92cb1418465f630b
- SSDEEP 12288:9VFtlI2ydhmdlLydn74Dvvu26r5D9f+MvNN4E/iVNp3UVi1RjfvTMJEF:9VFtlLyPUL47F5pf+MvNN4bVPsicJC
- TLSH T10CE423DF62FE10F709E5132FA6412E1E7617B1C957FF1D61012E58AE293259C8C22AEC
- MD5 SHA1 SHA512 SSDEEP TLSH
assets/fonts_system.swf
- SHA256 ab65a0454d8833b84c98c91994a3187410df4cafc2a07479180d09bce742a483
- MD5 4c028eb89e513122692461adc1fa743a
- SHA1 1df8c3f83bc97968e93fd84e49e58da6a8ff93be
- SHA512 aea09edd67d07ae8c962507f5740cf00f0bceb280f42bc1d0184d6b762711d67b3dabc7c2d0bede2ae3c81ecdd065b76879b8518012ab579836c79e75479de1c
- SSDEEP 6144:h0ANFuhD57w50bAWRizgx7J7RFzFBN+V62:GANFuhl3A9gzfFBEV62
- TLSH T10D1412E69405CAAE273C3AE7F02D9E5111C08429BF18E92A70C57557F528CE2AAC9273
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe CC 2017/packages/DWA/DWA.pimx
- SHA256 fb4bb515c175b1f63a5132db1a1cd89dc6045c48274dc17bddeade9a70d61884
- MD5 8d845bc95c61927bd99ff94388bbec2d
- SHA1 c8fc28efed4b87ff79e590cbafde12cac0c4595b
- SHA512 1f281c6c0395043f00751f5b31b488cfb49db53b378619547b8ff597b4e806c0f7af969e8c2a44c7d809f2ab3eee6c42b0f4b75d7096742a739b34918f1caf4f
- SSDEEP 768:eZ4CSmXxzOsOTLoky8pLbNlC7ysU09bsrob48zYQ:S4CSmhtO3Ly8xNNsU0arob4AYQ
- TLSH T1DD23046C50691BE1B40BCE653D245E471A1FB07DF6B030F472984EB68AD998F4E8B237
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe CC 2017/packages/DWA/DWA.sig
- SHA256 78ba6a2452cb6c313d82379ec0539cfba74adb43165843f2ce06c41380b9de64
- MD5 aa8b413e38856788c2d21a1579e78870
- SHA1 c2febbc349f07b9e6cc1b030a84b419710b399f4
- SHA512 23e006f74359447e24e89e68d14648be9838de6555b7e05d5af6fc18c2a0bfd2e25e36e92bef13a17d16ce5bc4589d0e7be25730c2aa9b60605b151468e4c12c
- TLSH T10731E97CE0E152950A300EE3DA378A46481061E6BFE5101A76918BBFAF95CB45133FFC
- MD5 SHA1 SHA512 TLSH
Adobe CC 2017/packages/IPC/IPC.pima
- SHA256 c5eeb0dbae876ee788bdebdb29f11b373476df85c6e85eb342526d27f62c426f
- MD5 f84f43ef46f0d7d88734ce779bb7ecc0
- SHA1 1eee233ffd333a5ffb477ff2909b9c2a79be135a
- SHA512 ffea9c6e23566f3b013e930eb72d127d0cbd228dc6b2fcdb2e62d9ab66590845338b88a14bdb067261f34b018f7b0dfc0f96fdca3515bf82249cbd4e9e3d21fb
- SSDEEP 12288:t1rjnof/Va8v8wUiehk//evjUhfBuMuupwGv8wYnwpO7s+/:bc/nvz//evj2WNG+n573/
- TLSH T11BC423E38E2BC1DE404AAC9D1C53BCD795E3D9FB581AFB58AB65405B01BE0787E01938
- MD5 SHA1 SHA512 SSDEEP TLSH
AdobeIPCBroker.exe
- IMPHASH 6978cea612f11e72b2ac52f0bebecea1
- SHA256 67bbd3b74b8590af34a06a31d87f36524798600b75ee4af0e127adb3b5e691cc
- MD5 7f51b8bc2b98f5709bf2afa8ba14dec6
- SHA1 6c7de4b0b838b6f9890f44ea0ed94f7771e2521a
- SHA512 85db0bd35ccae6be6b058e6b0a2f22d73c2600e192d845be2425d1120e34e1a04a861e92d4ae0820005b1fed479b16102213fba5cc8fcab2374e91d8e932da88
- SSDEEP 24576:9FvUWFHkqfDmG9ZMqetFrzI3vZpUU65MH1x/lfJwuaivfXEcfH:v8E1mGfCzI3v0U6OHb/lfLH
- TLSH T15C35CF207A42C0B9D6928171197DE77A483E9A608B3956DFE3D41D2CCE301E1AB7B35F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
49:76:68:8e:62:49:67:cf:71:9f:96:d7:f0:eb:b7:4c:0b:88:83:d2
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=2748129,CN=Adobe Systems Incorporated,OU=CoreTech,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Feb 14, 2017
SERIALNUMBER=2748129,CN=Adobe Systems Incorporated,OU=CoreTech,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Symantec Class 3 Extended Validation Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Subject
CN=Symantec Class 3 Extended Validation Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
19:1a:32:cb:75:9c:97:b8:cf:ac:11:8d:d5:12:7f:49
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 4, 2014 - Mar 3, 2024
Subject
SERIALNUMBER=2748129,CN=Adobe Systems Incorporated,OU=CoreTech,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
48:b5:e1:f2:1e:14:96:73:33:be:d2:8f:9e:33:b1:19
Issuer
CN=Symantec Class 3 Extended Validation Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 6, 2015 - Oct 28, 2017
Subject
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Issuer
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 12, 2016 - Jan 11, 2031
Subject
CN=Symantec SHA256 TimeStamping Signer - G1,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
54:f3:7d:a1:71:67:51:bc:6a:8d:0a:d2:74:b2:8b:13
Issuer
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 12, 2016 - Apr 11, 2027
Minor OS version
0
Major OS version
6
Entry point
552207
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB paths
AdobeIPCBroker.pdb
ws2_32
htonl
getsockopt
ioctlsocket
connect
closesocket
listen
getsockname
bind
WSAGetLastError
WSASetLastError
WSAStartup
getservbyname
getservbyport
gethostbyname
gethostbyaddr
socket
send
select
recv
ntohs
inet_ntoa
inet_addr
htons
__WSAFDIsSet
kernel32
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetLastError
WaitForSingleObject
CreateSemaphoreW
FindFirstFileW
FindNextFileW
InitializeCriticalSectionEx
FindClose
RaiseException
DecodePointer
ReleaseMutex
CreateMutexA
Sleep
GetCurrentThreadId
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetVersionExA
GetModuleHandleA
GetModuleFileNameA
GetSystemDirectoryA
CreateMutexW
FreeLibrary
CreateProcessW
GetProcAddress
CloseHandle
LoadLibraryA
MultiByteToWideChar
GetStdHandle
FindFirstFileExA
FindNextFileA
EnumSystemLocalesW
GetUserDefaultLCID
IsValidCodePage
ReleaseSemaphore
GetModuleFileNameW
HeapSize
WriteConsoleW
GetProcessHeap
SetEnvironmentVariableA
SwitchToThread
FreeEnvironmentStringsW
GetCommandLineW
GetEnvironmentVariableW
GetCurrentProcessId
GetLocalTime
ReadFile
WriteFile
ConnectNamedPipe
GetOverlappedResult
GetCurrentThread
GetTickCount
GetEnvironmentStringsW
SetStdHandle
SetEnvironmentVariableW
SetCurrentDirectoryW
GetCurrentDirectoryW
CreateFileW
FlushFileBuffers
GetFileAttributesExW
GetFileSizeEx
GetFullPathNameW
LockFileEx
SetEndOfFile
SetFilePointerEx
UnlockFile
GetTempPathW
DuplicateHandle
PeekNamedPipe
CreateNamedPipeW
SetEvent
ResetEvent
CreateEventW
GetCurrentProcess
SetThreadPriority
GetThreadPriority
VirtualAlloc
VirtualFree
IsValidLocale
GetModuleHandleExW
LoadLibraryExW
WaitForMultipleObjects
GetNamedPipeInfo
LocalAlloc
LocalReAlloc
LocalFree
FormatMessageW
LCMapStringW
RtlCaptureStackBackTrace
SetFilePointer
GetSystemTimeAsFileTime
TerminateProcess
OpenProcess
GlobalAlloc
GlobalFree
WaitForSingleObjectEx
GetModuleHandleW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
InitializeSListHead
QueryPerformanceCounter
IsDebuggerPresent
GetStartupInfoW
WideCharToMultiByte
EncodePointer
SetLastError
InitializeCriticalSectionAndSpinCount
CompareStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
OutputDebugStringW
RtlUnwind
InterlockedPushEntrySList
CreateThread
ExitThread
FreeLibraryAndExitThread
GetTimeZoneInformation
ExitProcess
GetDriveTypeW
GetFileType
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetCommandLineA
GetACP
GetConsoleMode
ReadConsoleW
GetConsoleCP
GetFullPathNameA
HeapAlloc
HeapReAlloc
HeapFree
GetOEMCP
user32
KillTimer
TranslateMessage
DispatchMessageW
PeekMessageW
PostMessageW
PostQuitMessage
DestroyWindow
SetTimer
GetWindowLongW
GetShellWindow
EnumWindows
GetWindowThreadProcessId
SetWindowLongW
RegisterClassW
CreateWindowExW
DefWindowProcW
MsgWaitForMultipleObjectsEx
ole32
CoCreateInstance
CoSetProxyBlanket
CoInitializeSecurity
CoInitializeEx
OleRun
CoUninitialize
oleaut32
SysFreeString
SysAllocString
VariantInit
VariantClear
advapi32
GetUserNameW
SystemFunction036
CreateProcessWithTokenW
LookupPrivilegeValueW
GetTokenInformation
FreeSid
EqualSid
DuplicateTokenEx
AllocateAndInitializeSid
AdjustTokenPrivileges
OpenProcessToken
shell32
ShellExecuteExW
SHCreateDirectoryExW
CommandLineToArgvW
Name
.text
Size
740KB
Virtual Size
740KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
195KB
Virtual Size
194KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
17KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.gfids
Size
1024B
Virtual Size
724B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
46KB
Virtual Size
46KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
44KB
Virtual Size
43KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=20, id=241, version=40116,
count=171, id=243, version=40116,
count=31, id=242, version=40116,
count=2, id=261, version=23013,
count=5, id=199, version=41118,
count=25, id=259, version=23907,
count=65, id=261, version=23907,
count=35, id=260, version=23907,
count=87, id=261, productName=VS2015 UPD2 build 23918, version=23918,
count=2, id=208, version=65501,
count=15, id=203, version=65501,
count=277, id=1, productName=Unmarked objects,
count=37, id=260, productName=VS2015 UPD1 build 23506, version=23506,
count=43, id=264, version=23918,
count=1, id=255, productName=VS2015 UPD2 build 23918, version=23918,
count=2, id=151,
count=1, id=258, productName=VS2015 UPD2 build 23918, version=23918,
StartupOptions.xml
- SHA256 815f61621d9210a57f1aa2967cd337f466f08dbc3d2f12346b4addf9edbae2a6
- MD5 ee4877cf55d6ca5321cf313d8bedaf2a
- SHA1 edca2254b3fb5db4766df23faa168bcbeb654f2e
- SHA512 9734cfe174e51d3c3bd2e80765e749ed1cb92fd4783ceb630ee3359fc926f082eb253fb758ec0e12cbff9e727e7e45460155814a093cebd5e49331ea06a54dca
- TLSH T1E011A1E1F7E8A2962574825F2A7140ECDA3ADD4A106A042C758E73773F1361641EB364
- MD5 SHA1 SHA512 TLSH
customhook/AdobeIPCBrokerCustomHook.exe
- IMPHASH 72557946c0092eeadcd852a40f6079f3
- SHA256 e5d2f86258522add4f4107714a3a13d46b68df85fe7ba57bb7c582541a7cb6f3
- MD5 4ed6289ccba757256f5aac18432c4885
- SHA1 4ae4210cdf95064857bb84a17eee536dde75dcba
- SHA512 15bf00364ffdd7551f50b2dd8b4f1aac5c1c9f0d9250b1da9fa3fac4813b1c84e54429f57ca39a71f073de1dc9cebba0b61e31c98d33156ecad640b65514bf64
- SSDEEP 1536:+XPaqUt/XTBX2V/PATcQEPDpJqTC8SWzOUgpiGzh1RTba0G2Nkwlua+:+fFA/DBX2V3lrjIDSC0fRq0G2NkJ
- TLSH T121C38C2135C5C073E15312348EA9D7B28A3AF8B14F7168CBBBD906BA5F286C1973531B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
e0:87:70:ed:81:5a:55:a6:2b:f2:ab:44:30:99:53:07:3e:1d:18:b0
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Adobe Systems Incorporated,OU=CoreTech+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Chains
Feb 19, 2014
CN=Adobe Systems Incorporated,OU=CoreTech+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Adobe Systems Incorporated,OU=CoreTech+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Serial Number
62:f7:ce:7b:39:4a:c6:00:36:61:5d:f8:32:69:f4:6b
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 28, 2013 - Mar 1, 2014
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
1
Major OS version
5
Entry point
28373
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
AdobeIPCBrokerCustomHook.pdb
shlwapi
PathAppendW
kernel32
SetEndOfFile
OpenProcess
Sleep
TerminateProcess
Process32FirstW
Process32NextW
CreateToolhelp32Snapshot
CloseHandle
CreateFileW
CreateFileA
WriteConsoleW
SetStdHandle
LoadLibraryW
InterlockedIncrement
InterlockedDecrement
EncodePointer
DecodePointer
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
HeapFree
WideCharToMultiByte
GetCommandLineA
HeapSetInformation
RaiseException
RtlUnwind
HeapAlloc
LCMapStringW
MultiByteToWideChar
GetCPInfo
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
IsProcessorFeaturePresent
HeapCreate
GetProcessHeap
GetProcAddress
GetModuleHandleW
ExitProcess
ReadFile
SetFilePointer
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetLocaleInfoW
HeapSize
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeW
HeapReAlloc
user32
FindWindowExW
PostMessageW
shell32
SHGetFolderPathW
Name
.text
Size
78KB
Virtual Size
78KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
20KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=16, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=47, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=116, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=9, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=88, id=1, productName=Unmarked objects,
count=1, id=175, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
Adobe CC 2017/packages/IPC/IPC.pimx
- SHA256 6192cfce0da35d776994d30538dbbc1908e2fe35f3793030aca78a622e05f3a3
- MD5 e84eb3edc819f6e17045c78fbdf83503
- SHA1 d9bd5350ea85851dec8a50773d4ad9569004f975
- SHA512 76975ebcbd6ad9375aeb724c73a5e8403ac178c2b047b090df6c278a96b50d18a0f9bfd66b0759e30c412bac68042635e442e7aac042e8bdbc64e70f5a27992d
- SSDEEP 48:gB5UeLGPPZza9Gppa5woAoQiqc08HjP0iysmuv4VvfzUHzNO:PeLGHwGK5JAu0YP0iysdvYOI
- TLSH T139811AA824A94BE17843CF627C729E07695FB63DB23034F07AA94E7646C182F1C4B533
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe CC 2017/packages/IPC/IPC.sig
- SHA256 828ab15b6e2a3f13cb9fff1c25db89082d3de2f29ea27d76bbe787d829aced3b
- MD5 0503a96f391b7b147c512cd84ceb1113
- SHA1 3aaae9ba9a2a845b18c921ef5a44672c39f61cda
- SHA512 81a155206f7d873652840b1200757e9eb3155ecba8216aaf06e0353f2b21ba9e17ab8914e2493c08058308eaae8899403863a7835bbc62f246d686feb1f43f35
- TLSH T1BD31193662B02A5A0271AFF3DE0A5515C05B40C71B3A280871E3C3177F33538B9430AA
- MD5 SHA1 SHA512 TLSH
Adobe CC 2017/packages/LWA/LWA.pima
- SHA256 534db32142926de449ad55d4c6c9e0ac727eadbdb60267e8552f09619063fe4e
- MD5 b92a6be4904bc8a7310727c8de6010dc
- SHA1 413ab4815aada13936936a121e1b533b3dcda276
- SHA512 d4193bf5ddbd98210904a9d9fabb762288af85682d2492b0dd31ba75776c78f848f502e962dd6e92da3b95744462c283a4b3d978d2e3f87eea01ccf9ceb117aa
- SSDEEP 98304:aEi9G6WTvzkfSVFnBtf1KB+HrpAVTPZ0CcZRDcU9v6tvMuegxLfXubi:aB9DWjof4FBtf1KBceTx0CGRDcUktjzp
- TLSH T12C463364CA2CD03DD667A37765C44923341CC11675A430B66D8D04FEBCBFAA58AA3CBB
- MD5 SHA1 SHA512 SSDEEP TLSH
AAM Registration Notifier.exe
- IMPHASH 67fea5fef213e1a0a746934b53e82d2b
- SHA256 fec7ed7adf479a3e9776f641a1b1805dc741c55813d39894ab0db28bcabd5fe6
- MD5 d464e4223c903840d34576502fd3bb45
- SHA1 1e771b08a3cfb566f95e4e5b597196fcf03ee1c0
- SHA512 be94c69cc15c57cd5d0beabdf589a422f26678e4af7e82e044f139809fe2a5babd70edf5e4e8d8c49173e440536e357495ffdf70e7fb4d8e7f11298da3cf4381
- SSDEEP 3072:yAiblH8gK/Gi+KSqWUgwnySSYGXvNdy+6M8vbwNPZJtznrlV+rMj5NPweaoOp:yAiblHPs8wn2YGXvahvmPlZVo8NPwMg
- TLSH T11F446C2077D18D36E5A316318DB9977A467ABC650B3191CBA3B43A6DDD303D29E3032B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
49:9d:8e:fc:23:61:51:92:8d:63:45:13:38:12:53:79:61:8d:5a:a7
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Chains
Sep 20, 2012
CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Subject
CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US
Serial Number
79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 1, 2012 - Dec 31, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Serial Number
68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 19, 2012 - Sep 19, 2013
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
1
Major OS version
5
Entry point
73799
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\oobe\3.0\c3p0\dev5\target\win\Release\AAMRegistrationNotifier.pdb
user32
DefWindowProcW
UpdateWindow
SendMessageW
CreateWindowExW
ShowWindow
LoadIconW
RegisterClassExW
LoadAcceleratorsW
wsprintfW
EndPaint
DestroyWindow
TranslateAcceleratorW
GetMessageW
PostQuitMessage
PostMessageW
LoadCursorW
BeginPaint
TranslateMessage
DispatchMessageW
ole32
CoCreateInstance
OleRun
CoInitialize
oleaut32
GetErrorInfo
SysFreeString
VariantClear
SysAllocString
shlwapi
PathRemoveFileSpecW
PathIsDirectoryW
PathFileExistsW
kernel32
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
HeapSize
TerminateProcess
GetCurrentProcess
CreateEventW
GetProcessHeap
SetEndOfFile
WriteConsoleW
SetStdHandle
HeapReAlloc
GetStringTypeW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
GetTickCount
QueryPerformanceCounter
HeapCreate
SetLastError
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetOEMCP
GetACP
GetLocaleInfoW
GetConsoleMode
GetConsoleCP
GetCommandLineW
WaitForSingleObject
SetEvent
GetCurrentThreadId
CloseHandle
CreateThread
ReleaseSemaphore
GetLastError
CreateSemaphoreW
LocalAlloc
OpenSemaphoreW
GetCurrentProcessId
LocalFree
GetDateFormatW
SetFilePointer
CreateDirectoryW
WriteFile
GetTimeFormatW
CreateFileW
MultiByteToWideChar
GetTempPathW
GetLocalTime
FreeLibrary
LoadLibraryW
GetProcAddress
GetSystemDefaultLangID
GetUserDefaultLCID
WideCharToMultiByte
Sleep
ReadFile
GetModuleFileNameW
FlushFileBuffers
GetEnvironmentStringsW
GetUserDefaultUILanguage
DeleteFileW
InterlockedIncrement
InterlockedDecrement
IsDBCSLeadByteEx
EncodePointer
DecodePointer
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapSetInformation
GetStartupInfoW
HeapFree
GetSystemTimeAsFileTime
HeapAlloc
RtlUnwind
RaiseException
LCMapStringW
GetCPInfo
SetUnhandledExceptionFilter
GetModuleHandleW
ExitProcess
GetStdHandle
FreeEnvironmentStringsW
advapi32
InitializeSecurityDescriptor
AllocateAndInitializeSid
SetEntriesInAclW
FreeSid
SetSecurityDescriptorDacl
shell32
CommandLineToArgvW
ShellExecuteW
Shell_NotifyIconW
Name
.text
Size
157KB
Virtual Size
156KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
42KB
Virtual Size
41KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
7KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
35KB
Virtual Size
34KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
13KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=152, version=20115,
count=23, id=158, version=31118,
count=149, id=170, version=31118,
count=15, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=165, id=1, productName=Unmarked objects,
count=14, id=171, productName=VS2010 build 30319, version=30319,
count=3, id=170, productName=VS2010 build 30319, version=30319,
count=68, id=171, version=31118,
count=9, id=175, version=31118,
count=1, id=154, version=31118,
count=1, id=157, version=31118,
AMT/AdobeConfig.xml
- SHA256 efb6f8982f6b094016aa6e80b5a5f152a5ed0cce1ed190b7ca67264ea9fe6b7a
- MD5 b3318b5ce540e6beee0be93f2da58418
- SHA1 aed27a2e975e7cebb7dec1a0862ae686f64dc617
- SHA512 fa9a709d4830ccb93741931fa73bf841ec600c609b26273f89977fdd3556cac3f6805fdf30e48c7061ed55839a4de545ae674911d853c57ddea6a6f8dc3eaca4
- SSDEEP 768:goNRc/Hz1H1j1EVW7J1I1q15NR1aGToqjSxVjZ4ErWWMZz3BooRulhaUYHZK1XaD:gkc/HKw7l9TFlBl0caoP4rVdxhI
- TLSH T17263091399F53626993C0EF1CE307543BE02E6BA11B6429BF6FFC6544CE47821AF6216
- MD5 SHA1 SHA512 SSDEEP TLSH
AMT/application.sif
- SHA256 bb446002a62e0313967199998ab6a2e1026e3bcb4eb77ed6d216683c60471fb1
- MD5 c97e783c3ed6cbc12897426bd36560d7
- SHA1 1e2d162b23cb58689cfe59bde4372001effe24d9
- SHA512 097dd121bb52189c8ed92a7c171f89b45b6907aed41e74352fbf4655640deb2794da0dfccbc8c648496a21fd3ebba0a2bff7682f118529b62e0794493ee5c41f
- TLSH T1A3D09282BB40F401C51222FC1CCE0F60E730F0362E1E0B43020D17AC0C222EA0C62A58
- MD5 SHA1 SHA512 TLSH
AdobeIDFlex.swf
- SHA256 367725fe2df951f8b458979aa42fa02b9607011dbfc96f777f857c343ebc1167
- MD5 c83662810c896527f795ec8896cb156a
- SHA1 ba2537ed8cceac60a7e899d75655af26ccbebf6e
- SHA512 66dbd3675307da002b1052db9ab538adfdc2ff4ef895edc945e407b6ce018e917829675f7ba890dafca83f0febf7202584b599f38fba673edb27d9f76f772a7f
- SSDEEP 12288:mpTBux0plVNkiPBd+WZyjP+El0Z4k4qs0o+8AMkqYxUS7ZVSnH0F:eBp7NhYjP+ElVZqsiVxUS7vSna
- TLSH T1C8D42393ABFED40E9D8AB226D3AE20F1493FD510434C6163B519268479F49AC2DBCC96
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/ar_AE/ConnectionFAQ.html
- SHA256 d8b820365e17237d8e08b478c2637451097c8e84408d0dbd14ccfe3508086d3a
- MD5 e8d6ed9dfd168040856585c3e491920c
- SHA1 7267961d3e2906cf98a171c985373655dc77a6a1
- SHA512 39a6490ce66df765af731ca31bfaeb11590616b551efe79c320655171a1e69b9b316fef7505555781ac4f9a5c57e031f084db047c100607e9f3663416c3711a9
- SSDEEP 96:VJinKsPCBD0hdtHvFKR8n+x9LEZ6l9ucio5t2Tf4meO/jgRzeWjgRLYTWjgRLqSO:tBcE8n2l8o5CfzIKYdqSp82KzqEXEw
- TLSH T15B322F32EB18050AF0E655D971B222957458DB49A30354B6F077BE2ABCCB9F733C126A
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/ar_AE/LicenseFAQ.html
- SHA256 9409ea79c89cfc5c93896a0eff9214d12d4852330c5c07ad8384ba34876bab25
- MD5 c0e7bde62780c17aacc2dd7a364725e9
- SHA1 3452000e41b83b4a194f2e7e68fba36db8e6fb1e
- SHA512 8bd625c44518ff10b395e4f64e252dd315f7ac59eb99e1141c2c22366fe29844f39004924fca1f81d80b26a4bd592fbb4343111cd98547b1d53f1e63a5dc2125
- SSDEEP 192:tCcYB8n2l8o5UrPKpp828ZuU6/jxUoQgp5ojiebm:tCb8n2l8o5UrPKnVfjxNJJ+m
- TLSH T1BF82FF21EB281406B0F648D9B166129464A4EA4CA3165875F1777D7EBCCF8FB33D036E
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/ar_AE/Main.zdct
- SHA256 5eb6542300631d67bda80f2bef70ef634cf136f041ea8d0c2dd37719331dd378
- MD5 045490ac8f0c33379dd442fb66ffbb3f
- SHA1 de6475a3c017cb4f070cd074e4c70e6320fb0f72
- SHA512 3ed48bcd3f1137d4d1bef64b66d5389c730189d1e30b6bce383715a0aa734df0e2bf985687bc4d039eab9e5f8058fecf76c3ad7235e7015115de915ddaf2d7bd
- TLSH T18C41BC013AACDB39EA4B5335D42AC717C3699447ACCE0B3F02A08E110B5E5703A4FAD1
- MD5 SHA1 SHA512 TLSH
OBLRes/bg_BG/ConnectionFAQ.html
- SHA256 6e067e7b49cfc00cbc022b224b66645c1e766d0f0030308a09ce7d38769bcf81
- MD5 c7a1c7ad22f55945883f6088598ddad2
- SHA1 03fdbe3f8a7b35f22647992e92cfd9dbfb040266
- SHA512 f4522246fea0ffce242be2ec4f415465d36741f7599a55f20a2cc8ec8d941c21d9c44212788bc628a784105929864a3040ec31f9e915ba2c501295d3509ae456
- SSDEEP 192:W9wq8Tll8o5CfzIKYdqVgWiaqTRFqGr9Fxt9cD+:WF8Tll8o5CfzIKYdagWnqtFqGrbxtCC
- TLSH T1AC424022E7181989F0F25AD5B0B216516474DB49E30364F6F0377E6BB8CB8B737C2266
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/bg_BG/LicenseFAQ.html
- SHA256 e1cc56aa044e6a17fed1b468bba2abbbd4be0be1e9757f1db3f1bb7d25443255
- MD5 015be0e6ecb2135ba75e4904b9dc15da
- SHA1 d015b1f200355d58f21d4a309236c7d19756c319
- SHA512 6702d60fc1a2e8d2d848674006a3a8ec9b2d65cfa9f23b7175f69324a5f0d15883882a6aee90c4ddff044eb4de9ec112220b15d63bab90f8038a31e66bd8b828
- SSDEEP 384:WN8Tll8o5UrPKygW7ombH4ocO05FgyL5APYX:WN8Rd5NiombH4o+XAI
- TLSH T1EB822022F7291489A0B54ED8B1A713546464DB48A306A8B4F03B7C7ABCCF4FB37D1369
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/bg_BG/Main.zdct
- SHA256 5bdac9b8b2ee3ab3a48ce6b6b39853f74bea0d85f56eb73a48f9d2a6f7bd47fc
- MD5 c193a187b9f3fd1838a346f72cd78ca0
- SHA1 b6dd938fee2b3fb518699e694d47e2bae3a83608
- SHA512 1d2cf10f581f077c247d751f2bea6caeeac5fea14c4f8b3c98ef83fda3770bc5e046ad63d94ba733369d9f14f19e7b3b9bf630ab844471570d309e8bd02f5551
- TLSH T11451994FE6FCA10172B6920C2F7A48E615EE7B052B1D898D556F7C9C50ECA3163263CB
- MD5 SHA1 SHA512 TLSH
OBLRes/bg_BG/oobe_launcher.zdct
- SHA256 b92878d7ea406dd54c8ebce2235520787e7d8439e470e86b4a3e7514beec2e05
- MD5 09b4e586f1641ad6eb6f34665ef1f8f1
- SHA1 3932bf40beadef80c74f0816e3e9233860f1ecee
- SHA512 21e08e756aa1ee306257b9bc5cb9c46b7e4efba2219c44fda97be3d7ada1d5d13236201ee366c2afbbdba347eaa71c29eedac44bd52edec66d8b9df41946f1a6
- TLSH T12CF0A7B9DA42A366578CA1FB70CEC4C6FDFCA2AC82F43C1502021285B59363921778A2
- MD5 SHA1 SHA512 TLSH
OBLRes/cs_CZ/ConnectionFAQ.html
- SHA256 706cea3ac5229ba42974a5dc2d98e1fcaf5984be605d3e52b26a1b5bad382d34
- MD5 bc21a0d2dd6bf447543cf973992774c5
- SHA1 9314e664da60951cd1f4ab4f81ceecb2f37d6ead
- SHA512 7b25620a07812100353d02ae481fbb942cb0ac83fbde39a2fe949e54e3e657da46f4baa66fffd0f0c96abb6e461999a578962da63a3b6aca144434ddcc186f02
- SSDEEP 96:VJinosPCvu6hatUvmFDn8T3I95Nh6l9ucio5t2Tf4meO/jgRzeWjgRLYTWjgRLqg:Xjq8Tll8o5CfzIKYdqVgW4dACQg6oJ
- TLSH T151324232E7090549F0F645D9B0B312517868D749934794B6F0777E6ABCCB8B723C22AA
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/cs_CZ/LicenseFAQ.html
- SHA256 441b86951a7169c29e02372bc48cf7c39dae7f8e43339ebb64e6bb0dc0fbac8c
- MD5 874e53d2bd349b1f98b08367b6dc8c3b
- SHA1 f2febec8fc4153c6335362ff93c2da30ec3c02af
- SHA512 c9819d64a1d2490db7b69eb0e6e29ce12f6b16a794ddafca8f3c681cd6615fed1da6b86c4f85e7c5023d7fbb7b4608d683b4ce054263e4b03348d864ae1e767b
- SSDEEP 192:XKUO8Tll8o5UrPKygW9B+CFzp5somVKBhNNntL:Xu8Tll8o5UrPKygW9B+CF7sotZlF
- TLSH T167824322FB280415B0F649C9B0A713946464EB4CA3569475F07B7D7ABCCA8BB33E1379
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/cs_CZ/Main.zdct
- SHA256 4b1a4a381219d82862cb0397c52f7a28e04855784163fd435155f767ca117721
- MD5 919352a5292500ebb6e499b48380dc1c
- SHA1 f7850573e76b8b9030dfda4150bae7d9b9ebe7cf
- SHA512 50f0d944676da09c8841dc1336e9bcaf4728cbd0a98c1c56a7ffd34497cf53c3c8cd7d945bde6f03580a703cef4580bd9f0ea632d1d61dbb62c89d81815d9da4
- TLSH T1C641251176FC0642F7BB7F3169B013664D7BBC96A939C74E4140079D0A369C0B8E0BA3
- MD5 SHA1 SHA512 TLSH
OBLRes/cs_CZ/oobe_launcher.zdct
- SHA256 12b0fb5a8e53fcc7df11c15b0d7b48dba7b0bbfde11f9f5d5d50b2efa656a327
- MD5 1e2256820e1795baf698ae77924bc733
- SHA1 e3ce0d138b8b5495a48e454ae38d6abe956a584b
- SHA512 7368c8b70fe956be5159b384bb91cfdf6bf13cb6de20a9bccdb69a33fadcb9bf1e7f376001add4dfc634b3dca35fef37183df2a36c796b6f38fdf475a31933f5
- SSDEEP 96:YLAUy7CEsWq7CEsWq7CEtv7CEj7CEz7C7C7CER7CE+7CExzC:YyKWEKWEbhFDXGX
- TLSH T149A16D02B2F91744F5F3BB1AABB735956E3F7EA5B830C15D6124010C1976B859890B33
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/da_DK/ConnectionFAQ.html
- SHA256 74542227a4d048728bacaa55f40ecf75a9f2bae2c1ece220e880173ad8d34e0d
- MD5 e5385a09f8b439becbeb8c4fe5b04092
- SHA1 9cd97ac38f39646e972d5835f6f57e469f24cc76
- SHA512 8bf27adbdc608497ac7aacc1ac6d1529fd3192c242d3cc4aa07b6c62f888862f551464a4843591697ee0353ac8f5e9a948e5ebb31324dc36341b95cad43baa18
- SSDEEP 96:VJin+sPCD6hatUvmFDn8T3I95Nh6l9ucio5t2Tf4meO/jgRzeWjgRLYTWjgRLqbE:dEq8Tll8o5CfzIKYdqVgW9oow
- TLSH T125424032E7190619F0F649D5B0B222956468D749D31354B6F0767E3BBCCB8B733C22AA
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/da_DK/LicenseFAQ.html
- SHA256 3fb08a864591f2b78ce205f340ee580f6a7c72725847870123413c7c13ccc5bb
- MD5 2470698e1ebe7b8966f420bdd23bad1b
- SHA1 f90f662a23c9f194d8ebf17472bc76b095d9fd0e
- SHA512 87223f5464a36d3e6cfbbd92bf68c66dd47f9ec6bd26a21b8df7001eade8dd1459d2e5c2643dc1960399b78cdeddafd507bfdc308c5e54b3e79cc537fa499119
- SSDEEP 192:d9UO8Tll8o5UrPKygWmlzBSkeHt9sUf49ZCEiY0MXHL:dL8Tll8o5UrPKygWml1yNfnYn
- TLSH T1A3823322EB280415B0F64AD5B16213A56498DB4CD31658B5F07ABC7AFCCF8BB33D1369
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/da_DK/Main.zdct
- SHA256 2556c4942ee8802922644b0f35cb488961b02a5d8996d59acbdc4a4ff5155e7e
- MD5 5e330c054b630127be01e42d6294a814
- SHA1 3ae4e0b3d386edbb8f76fa964bec2b7957bca6d7
- SHA512 afc169d0891e2b6821c0e7ae4b42dbff8a1d3ed4ca58c7362ba054478e26505e1c573e1e27cff8cdac41ae7cbbac29bff8da6f34635db4182dd536e8ab2525ba
- TLSH T13A41D110B7E94B1EFAFB2B317DB542425A70FCC2BD7ADA0D1244564C0D7A5C0A5A0B73
- MD5 SHA1 SHA512 TLSH
OBLRes/da_DK/oobe_launcher.zdct
- SHA256 c0f0accab5843168cd665f6625dc1f3aa4c29b3773746518d6f7c6330a757001
- MD5 c3d00e99370be1d39143ef7515f30338
- SHA1 4a0d481e21f473ae26c7c2894512490d1661c447
- SHA512 42e0796f7967fbc661225ef3f9532076b9c5ff673edfa857425b7a7d57b849772ed02f2796f9674f6ea87da3406e015bc18be9d30633511e50788e62de37566a
- SSDEEP 96:XVqC7UFC1IiFC1IiFC1+lFC1WFC1OFC1OdC1LFC1gFC1f6dC:XAl++nrzjMdH
- TLSH T12691F612B3F95609F9F7372AAEB771842F3EBD95A53DC25D2260450C1CB6B858980B33
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/de_DE/ConnectionFAQ.html
- SHA256 416d9d4c1cd083aaddc82060092a11a6545fa2f5cb9b70f7966c8b6ec623f4f6
- MD5 f5f4a59c696e5a77349fef6bb0400bbb
- SHA1 250fdb37f3ae90ef76159edd31da485f3c490c07
- SHA512 c7e5faaf781df7dc6106915ff5b0477745b3f6d1af24df94130c58603daf34e0135e65bcdd88a849415ed415e2aef295072bbebc2e4143673e14d6c79a08ceda
- SSDEEP 192:dF9q8Tll8o5CfzIKYdqVgWtL0QRp3oz7FljvKLvAoaZP:de8Tll8o5CfzIKYdagW5CnFsLm
- TLSH T11D427332E7090509B0F256D5B1B212A17468D759D31364B5F077AE3BFCCB8B727C226A
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/de_DE/LicenseFAQ.html
- SHA256 c430aacb3dce799d6df06e3ecaa471edae33c9826c8f1a7f7f65e1731b7d1fd5
- MD5 1eba6aeaec0e67abc3c9e6949a53c3ba
- SHA1 0f561fc5398f6dff6bdab69419ad29411d1df1f4
- SHA512 bf32936c27615caedccc66fd2161a0dbdb42f18c81ae32b3a2f89d84db9cac78ac060af7109fd3afc72c4e3623ea13da4891bc14792f4eb6638faf70f45df39f
- SSDEEP 192:dK9UO8Tll8o5UrPKygWw74ubGMC35mD1dPBz64+to5u6EXbErvO/vafufVFVVuUC:du8Tll8o5UrPKygWSbGMJQQjO3dfrxy
- TLSH T1ED824322EB190409B0F64AC5B16213A534A4D75DA3129874F07BBD7ABCCF4BB33D127A
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/de_DE/Main.zdct
- SHA256 223ed42a3ca21279b9460556351d1150638f5a0308c4f5a1fc0df75b54c1446f
- MD5 070b22d458a0c4ba4b30dabe97c859b5
- SHA1 3430ea734b00b2c3c8ce7cd4e66c424ff7a2f293
- SHA512 4ba96b72c8b7b16b0ca3a5573741e3c2e0122b50b462f80d0683e137591edfeb0f1f3fa4dcf26189d1473c6070e170eee5299e87343d4f4d5c9011f241949cac
- TLSH T18C51901067E4870EF7F73B35AE7853995E72FCC6B875A64E034055184D36A40A9A0F73
- MD5 SHA1 SHA512 TLSH
OBLRes/de_DE/oobe_launcher.zdct
- SHA256 a092765949c1bd9e8f56c441d41a1e7278d1f055f1d02c2bfbcf25039e38f464
- MD5 d36d1ae2ac18c1bef2f19064e2724b27
- SHA1 5f0ca0d785b83593d5aa9a62b7bf4a1ffef19139
- SHA512 cf94a583e2bc7fd1a26fc4ace690c639a2023dfc4129c521daa607a50a3185f5f5cf6e0f6ead96b50670048062d47ecae5af292639596c5e24053148861edc96
- SSDEEP 96:StE1EWCQu1EWCQu1E2CQUC1EWCQJ1EWCQfE1EWCEcXWCQE1EWCQDE1EWCQ41EWC:xBeBeZ7B5BMB1UBwBoB
- TLSH T114B11911A3FA9708F2F337166EB672946F7E7DD6A834E65C2360055C0CB6B0488A4B33
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/el_GR/ConnectionFAQ.html
- SHA256 5e853e130754976496ceb56b465cb8e908c0fcd7888da848f9fc1369f38430fb
- MD5 4c13864f285824753e0613422191d29b
- SHA1 37b50776bffbef13edbc64fbdadbf98621af4156
- SHA512 8aacf5494654d86dcf846085a733dbec5347378a36993edea33a6fb84bbacb2b3355921fb2e59991ed85117149c14f66804ad2ef975f3edf3cb74a6b38604a51
- SSDEEP 192:k8Aq8Tll8o5CfzIKYdqVgWT4ZBz/e/REKuX:kY8Tll8o5CfzIKYdagWKd/sk
- TLSH T1D7427531E7190509B0F25AD5B0B212517868C759D30395B5F07ABE6BBCCB8B737C22AB
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/el_GR/LicenseFAQ.html
- SHA256 f832c7f6360ca7498554f9dbc79354b491a1211cc7c388f65207929cccdffaef
- MD5 79c0e8623022b5f788df9d7d741c61e0
- SHA1 a46966a0a3a94d4f153f76ef3c9f7c3f37dbfed8
- SHA512 4068384c9b1911be337095a9fedb0783e43278d8b69541dc3d0d91d0e96e942dd7d47ca4c9d6528494f8b94a1b7d2a65f9d806566e0597dd915004785dff801a
- SSDEEP 192:kNAUO8Tll8o5UrPKygWukKjIiTZwAG4Akeeu2hunHgBhuMh2LeCCU:k+8Tll8o5UrPKygWu4cJe9p00
- TLSH T18B824312E7240409B0B64ED9B06612956454DB1CE3569875F07BBDABBCCFCBB33C13AA
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/el_GR/Main.zdct
- SHA256 683b89efd61a76e30e0ece6716b7dd9691d5ed616e3be248f200e0e6be85ff65
- MD5 a204af0412729afe95c5067ac120aea7
- SHA1 8cd19c0d53310113e0ec3b6cd8995b768b7316b6
- SHA512 a8dd06f85fc245446620a6ddc8e03fd2c405d656435b11479a97c397baeba80a87a600223226efc51276205c567bff5872e49c40ea05fd4a36299cb8824a332d
- TLSH T15051274D2DEF4B12EFABAAF155339296866FF8425814DE2B31F07118ED0E90019C6E46
- MD5 SHA1 SHA512 TLSH
OBLRes/en_GB/ConnectionFAQ.html
- SHA256 8ba72a16729211dae68bb3e093d43e54a29f99019cf9c612c5734d1e728503ef
- MD5 5ebcacb7f0e1422f0c3fa20bfaa29c3c
- SHA1 7fc7064e6e0bd5563078be36e1c3754991f9a865
- SHA512 7a2e015d8af095f04a2c7460e652a9ff15babd699bcd27f22b44b8f16225d9630d2ef51cff47824cb4cf1e9ab37219ef5da5ee814ddfb00f0f0c53789c12a9c4
- SSDEEP 192:BHe1a8XUVbQk10gVpfTY2di/nSWnG4obEz7qW:BT8X4bQk10gVpfTY2dsnZhoYn9
- TLSH T1F4426232E72A010591F746E5B1B21252F438E749931754B5F137BA7AACCB8F623C22B2
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/en_GB/LicenseFAQ.html
- SHA256 50ffa995427d576ac7a4c1d564788a6a552a8bcb4b7cf393c7d132a443f48cbf
- MD5 665e1985893f9e0701f79dfb1f99a4d7
- SHA1 b695b2c8f15852dd204edaad62254447606fa4f3
- SHA512 00a4fdb70d80d0881d1498139b177821c6be70e910d93eb5b32a9cdc57f9eed121656e975f8e86bbecf6039943e0c7ec2579e5d8e23f1553d92d0fe6ece3aa81
- SSDEEP 384:BE8X4bQkY3TYUnZwSrLGOJZn86JaichcJ:BE8iQkM0UnmSr0iJ
- TLSH T15C826522E7260014A1F60AE571A613D6A478E64DA3165470F13BBD7DACCF8FB33D22B5
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/en_GB/Main.zdct
- SHA256 4509f0d68b32a8c71c60d44e35cd5c9a6b2c76848d3fad6d0e9d985fcdc8ca90
- MD5 4390c02fc1846ea13f1119307845e7ab
- SHA1 07b23fd227c2219d92f8147ee7005fb4729ae0f9
- SHA512 0722643c8bd51c942cf168c44c8ce50e7b1dfde7e37f163f85eb9994fc82847b0e8a0b04d7fdfede00d03d4b45dd3940111e8cfea642c2438cccf693e65447f9
- TLSH T18D410D00B7E80315FAFB3B35A8B462564E76BC96BC79DA1D4244015D4E3AA80ACE0B73
- MD5 SHA1 SHA512 TLSH
OBLRes/en_GB/oobe_launcher.zdct
- SHA256 da39bf60ceaa93ec0eb314a0bfc0f14dbb269df5f64fe851f941f0ca011460f6
- MD5 0020055b059af61bf62115728d0a893c
- SHA1 14ed32a55e5b27ddb644ba284ee7bfbd8feb8ae8
- SHA512 e68bd3aec9458ae7a7fee30a5bc68394a68888151c3ba3ffcc998e4ed392144f507487bee63159d1bb137c124967530e84bbb3275b84936e873db37ff26fa8e6
- SSDEEP 96:VE7J1ECs71ECs71ECsGO1ECs51ECsB1ECscy1ECsY1ECsY1ECsf1EC:Oqdqdqfq/qXqPqequqpq
- TLSH T14B911C45B3F95608F6F33B296AB670952F3FBE95A978C29C2150554D0C77B418CA0B33
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/en_MX/ConnectionFAQ.html
- SHA256 8ba72a16729211dae68bb3e093d43e54a29f99019cf9c612c5734d1e728503ef
- MD5 5ebcacb7f0e1422f0c3fa20bfaa29c3c
- SHA1 7fc7064e6e0bd5563078be36e1c3754991f9a865
- SHA512 7a2e015d8af095f04a2c7460e652a9ff15babd699bcd27f22b44b8f16225d9630d2ef51cff47824cb4cf1e9ab37219ef5da5ee814ddfb00f0f0c53789c12a9c4
- SSDEEP 192:BHe1a8XUVbQk10gVpfTY2di/nSWnG4obEz7qW:BT8X4bQk10gVpfTY2dsnZhoYn9
- TLSH T1F4426232E72A010591F746E5B1B21252F438E749931754B5F137BA7AACCB8F623C22B2
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/en_MX/LicenseFAQ.html
- SHA256 50ffa995427d576ac7a4c1d564788a6a552a8bcb4b7cf393c7d132a443f48cbf
- MD5 665e1985893f9e0701f79dfb1f99a4d7
- SHA1 b695b2c8f15852dd204edaad62254447606fa4f3
- SHA512 00a4fdb70d80d0881d1498139b177821c6be70e910d93eb5b32a9cdc57f9eed121656e975f8e86bbecf6039943e0c7ec2579e5d8e23f1553d92d0fe6ece3aa81
- SSDEEP 384:BE8X4bQkY3TYUnZwSrLGOJZn86JaichcJ:BE8iQkM0UnmSr0iJ
- TLSH T15C826522E7260014A1F60AE571A613D6A478E64DA3165470F13BBD7DACCF8FB33D22B5
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/en_MX/Main.zdct
- SHA256 2bec0455e8c5906a4011cce5867c087f1be050120020e2d0d32bd0d00cccba2b
- MD5 5188a59973439763252c90d9973fcd78
- SHA1 bc26bdfc98e9e32ff07a2fd7bc7f8bed67997beb
- SHA512 0ea7703bcbb652153d5c44bcb41c90335b25e83caf39cc6170419978ba69d2bdfd7a04264a027bdb572a45e573f8cd6866bc0a4551da8d6e5cb07a289c2927d5
- TLSH T127516991A7EC6614B6F32F0CBD7915500EFEBD9AAE3DCA1C1160045E08F5A40C8A2B73
- MD5 SHA1 SHA512 TLSH
OBLRes/en_MX/oobe_launcher.zdct
- SHA256 b92878d7ea406dd54c8ebce2235520787e7d8439e470e86b4a3e7514beec2e05
- MD5 09b4e586f1641ad6eb6f34665ef1f8f1
- SHA1 3932bf40beadef80c74f0816e3e9233860f1ecee
- SHA512 21e08e756aa1ee306257b9bc5cb9c46b7e4efba2219c44fda97be3d7ada1d5d13236201ee366c2afbbdba347eaa71c29eedac44bd52edec66d8b9df41946f1a6
- TLSH T12CF0A7B9DA42A366578CA1FB70CEC4C6FDFCA2AC82F43C1502021285B59363921778A2
- MD5 SHA1 SHA512 TLSH
OBLRes/en_US/ConnectionFAQ.html
- SHA256 8ba72a16729211dae68bb3e093d43e54a29f99019cf9c612c5734d1e728503ef
- MD5 5ebcacb7f0e1422f0c3fa20bfaa29c3c
- SHA1 7fc7064e6e0bd5563078be36e1c3754991f9a865
- SHA512 7a2e015d8af095f04a2c7460e652a9ff15babd699bcd27f22b44b8f16225d9630d2ef51cff47824cb4cf1e9ab37219ef5da5ee814ddfb00f0f0c53789c12a9c4
- SSDEEP 192:BHe1a8XUVbQk10gVpfTY2di/nSWnG4obEz7qW:BT8X4bQk10gVpfTY2dsnZhoYn9
- TLSH T1F4426232E72A010591F746E5B1B21252F438E749931754B5F137BA7AACCB8F623C22B2
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/en_US/LicenseFAQ.html
- SHA256 50ffa995427d576ac7a4c1d564788a6a552a8bcb4b7cf393c7d132a443f48cbf
- MD5 665e1985893f9e0701f79dfb1f99a4d7
- SHA1 b695b2c8f15852dd204edaad62254447606fa4f3
- SHA512 00a4fdb70d80d0881d1498139b177821c6be70e910d93eb5b32a9cdc57f9eed121656e975f8e86bbecf6039943e0c7ec2579e5d8e23f1553d92d0fe6ece3aa81
- SSDEEP 384:BE8X4bQkY3TYUnZwSrLGOJZn86JaichcJ:BE8iQkM0UnmSr0iJ
- TLSH T15C826522E7260014A1F60AE571A613D6A478E64DA3165470F13BBD7DACCF8FB33D22B5
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/en_US/Main.zdct
- SHA256 4509f0d68b32a8c71c60d44e35cd5c9a6b2c76848d3fad6d0e9d985fcdc8ca90
- MD5 4390c02fc1846ea13f1119307845e7ab
- SHA1 07b23fd227c2219d92f8147ee7005fb4729ae0f9
- SHA512 0722643c8bd51c942cf168c44c8ce50e7b1dfde7e37f163f85eb9994fc82847b0e8a0b04d7fdfede00d03d4b45dd3940111e8cfea642c2438cccf693e65447f9
- TLSH T18D410D00B7E80315FAFB3B35A8B462564E76BC96BC79DA1D4244015D4E3AA80ACE0B73
- MD5 SHA1 SHA512 TLSH
OBLRes/en_US/oobe_launcher.zdct
- SHA256 c3a3c6a2b6d43a16cdb5cf88543ebca6393e76c7f704ee6406028d4ac7b4456a
- MD5 fbbffcf43f2c4304a96567ed94f7680d
- SHA1 07adf3761a23bf528b9b480b434947c4fc996c3a
- SHA512 e952e9b21386aaa103d8cd39442056a5cdd8136dbac95a876a6fefca059c2d820befbcd98cc7574edf22fbd2f9081ea1920c28e4ac99396ca32c8aeb3a836fcd
- SSDEEP 96:97J1EC171EC171EC1GO1EC151EC1B1EC1cy1EC1Y1EC1Y1EC1f1EC:PqUqUqWqmq2quqHqPqIq
- TLSH T14E912945B3F9960CF5F33B296AB674952F3EBE55A978C29C2160514D0CB7B418CA0B33
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/en_XM/ConnectionFAQ.html
- SHA256 8ba72a16729211dae68bb3e093d43e54a29f99019cf9c612c5734d1e728503ef
- MD5 5ebcacb7f0e1422f0c3fa20bfaa29c3c
- SHA1 7fc7064e6e0bd5563078be36e1c3754991f9a865
- SHA512 7a2e015d8af095f04a2c7460e652a9ff15babd699bcd27f22b44b8f16225d9630d2ef51cff47824cb4cf1e9ab37219ef5da5ee814ddfb00f0f0c53789c12a9c4
- SSDEEP 192:BHe1a8XUVbQk10gVpfTY2di/nSWnG4obEz7qW:BT8X4bQk10gVpfTY2dsnZhoYn9
- TLSH T1F4426232E72A010591F746E5B1B21252F438E749931754B5F137BA7AACCB8F623C22B2
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/en_XM/LicenseFAQ.html
- SHA256 50ffa995427d576ac7a4c1d564788a6a552a8bcb4b7cf393c7d132a443f48cbf
- MD5 665e1985893f9e0701f79dfb1f99a4d7
- SHA1 b695b2c8f15852dd204edaad62254447606fa4f3
- SHA512 00a4fdb70d80d0881d1498139b177821c6be70e910d93eb5b32a9cdc57f9eed121656e975f8e86bbecf6039943e0c7ec2579e5d8e23f1553d92d0fe6ece3aa81
- SSDEEP 384:BE8X4bQkY3TYUnZwSrLGOJZn86JaichcJ:BE8iQkM0UnmSr0iJ
- TLSH T15C826522E7260014A1F60AE571A613D6A478E64DA3165470F13BBD7DACCF8FB33D22B5
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/en_XM/Main.zdct
- SHA256 4509f0d68b32a8c71c60d44e35cd5c9a6b2c76848d3fad6d0e9d985fcdc8ca90
- MD5 4390c02fc1846ea13f1119307845e7ab
- SHA1 07b23fd227c2219d92f8147ee7005fb4729ae0f9
- SHA512 0722643c8bd51c942cf168c44c8ce50e7b1dfde7e37f163f85eb9994fc82847b0e8a0b04d7fdfede00d03d4b45dd3940111e8cfea642c2438cccf693e65447f9
- TLSH T18D410D00B7E80315FAFB3B35A8B462564E76BC96BC79DA1D4244015D4E3AA80ACE0B73
- MD5 SHA1 SHA512 TLSH
OBLRes/en_XM/oobe_launcher.zdct
- SHA256 dbd6ca8249ba14865a1c4fc9becc9a0bf6b7984f35cdeab3b6f16e47b00a32c2
- MD5 b4dc3c085d943be1fd435383379a3807
- SHA1 81cdb2d589d580f07b7a00a113b66e8590a75db4
- SHA512 71885ab521e1de415ba83a19e946b27af4ce376b4d852860e5096cb143f0fee8de627b7ab5af2113461385c9823feb090168dbfefb95945411ca268d17045854
- SSDEEP 96:v6t7J1EC171EC171EC1GO1EC151EC1B1EC1cy1EC1Y1EC1Y1EC1f1EC:C/qsqsqequqOqWq/qXqgq
- TLSH T1BA911945B3F9960CF5F33B296AB671952F7EBE95A978C29C2160514C0CB7B418CA0B33
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/es_ES/ConnectionFAQ.html
- SHA256 89ba48259ba1592389266c0c083d4a9410bfb33d5a1bb42cd7db9130cfc597bb
- MD5 28353436fc2a08ffd172e8e001c34dbc
- SHA1 0056e197d3eacd5f87e1e09e72272da52e9ab279
- SHA512 80efcf97e82863dad32af717516a9b4347720530d9689429b669dd9c368b7065a2ec13e6d34a1c68c571caf01d66a0a74bd956e44b0e34eda37f215253979050
- SSDEEP 384:+g8T3Qo/nfz5Dx63w9v7itRLYzWRglRTRE31oROJ8E1u2QEjE3Ct0EGhexH3sdr2:Z8H/n7596AVubk1lRTRE31oROJ8E1u29
- TLSH T171823122F10C0041B2F645D5B4BB39616014C78DE78B94F8B0777A1A78DF6BA2BC66B7
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/es_ES/LicenseFAQ.html
- SHA256 084ca6786e8da6e50df896f9a94738d7292371b385b08cf750252751c79e8262
- MD5 cd2ee54ef1b354ebb594683dac1df721
- SHA1 6630e2953186846971358a2c7fa41f4959a94149
- SHA512 68c4419bc6594529650cb33b1bb323c3070697ed49a9dadaf47832bb031d967a0b7707f2e365b5fb2d7da284380d08e7b0646ab008b5decbcf615713f6805d42
- SSDEEP 384:eg8T3Qo/sDxp3f9v7XtmLzzJDglR7EE3qTE1MzE9E32fbE3XVWE3GYE35ERE31TV:58H/s9pPVzIvClR7EE3qTE1MzE9E32fN
- TLSH T1B1B22222F00C0046A2F605C5B4A635716014E74ED78B94F8B06B7D5B7CDEABE2BC52BB
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/es_ES/Main.zdct
- SHA256 bfb70eacfef972924c5d0348836d80169b2efaa1d39a9dcdd90aa2f79924130f
- MD5 87bbcf0ea575f31bc4c026b445c52dd5
- SHA1 f6e0a518b4fdd8a12def2b84b05ea39e2200ad02
- SHA512 a5bac5a81be6a7dd6bfb1d211835ec3b83cea1915051edfb6c415683bb47601ebf37ccc795602ae206d2858cc944e1b604f87d77fc10d2a196db3f8040dca782
- TLSH T1EB41FF0067F8178AF7F73B36693526568D33BCD6EC389A0E025046594E35E84ADE4B73
- MD5 SHA1 SHA512 TLSH
OBLRes/es_ES/oobe_launcher.zdct
- SHA256 b62759d922a4c3081ef196c1d38fc2d681f18eba4392d669933f9780c6572e16
- MD5 60162cbc1645ff054f430ccd17625736
- SHA1 ada81c8ebb8722087fd63cfc7b43594404e1cf1a
- SHA512 c64446b34737b9e80f366abe40685b9feab8da30262e1ee7437ece860eeddaca9228d2457b52f89eed255258d7b075a2c8cbb6b5e25e937b51bd78c99d2ad173
- SSDEEP 96:H7XnCE2nCE2nCE/BnCECQnCEOnCE/nCECuBnCEInCEJnC:zmmhhVOxNhU3
- TLSH T13D91DE15F3F86749F6F33719AABA70546F3EBDA69838866D226055081CB6B048DD0B33
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/es_LA/oobe_launcher.zdct
- SHA256 60c7326131022048ff6493945cd4271fc6131d406d0182031e71e4c0b0ff9bde
- MD5 371c630f733984df345df29b498bbebb
- SHA1 8b791b91095d99019507a59a02a5352347864d91
- SHA512 417b57e580a3b0cc0c43c64276cab3375cab2281fe6e4f221c5f987d09522c107d33e6a724a44bd4ddaab59d773f688c0186ba8f9f9d7411e41f1b40685a649f
- SSDEEP 96:YK/xHC7CuxHC1CAHC14HCT+HCgmHCYHHCp1mHChOZHCrPHCp:fhIhyvn69HCuE0
- TLSH T159919616A3F86748F6F3371DAA7A74A49F7EBD959838816D2230450C4CBAE448DD0B33
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/es_MX/ConnectionFAQ.html
- SHA256 89ba48259ba1592389266c0c083d4a9410bfb33d5a1bb42cd7db9130cfc597bb
- MD5 28353436fc2a08ffd172e8e001c34dbc
- SHA1 0056e197d3eacd5f87e1e09e72272da52e9ab279
- SHA512 80efcf97e82863dad32af717516a9b4347720530d9689429b669dd9c368b7065a2ec13e6d34a1c68c571caf01d66a0a74bd956e44b0e34eda37f215253979050
- SSDEEP 384:+g8T3Qo/nfz5Dx63w9v7itRLYzWRglRTRE31oROJ8E1u2QEjE3Ct0EGhexH3sdr2:Z8H/n7596AVubk1lRTRE31oROJ8E1u29
- TLSH T171823122F10C0041B2F645D5B4BB39616014C78DE78B94F8B0777A1A78DF6BA2BC66B7
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/es_MX/LicenseFAQ.html
- SHA256 084ca6786e8da6e50df896f9a94738d7292371b385b08cf750252751c79e8262
- MD5 cd2ee54ef1b354ebb594683dac1df721
- SHA1 6630e2953186846971358a2c7fa41f4959a94149
- SHA512 68c4419bc6594529650cb33b1bb323c3070697ed49a9dadaf47832bb031d967a0b7707f2e365b5fb2d7da284380d08e7b0646ab008b5decbcf615713f6805d42
- SSDEEP 384:eg8T3Qo/sDxp3f9v7XtmLzzJDglR7EE3qTE1MzE9E32fbE3XVWE3GYE35ERE31TV:58H/s9pPVzIvClR7EE3qTE1MzE9E32fN
- TLSH T1B1B22222F00C0046A2F605C5B4A635716014E74ED78B94F8B06B7D5B7CDEABE2BC52BB
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/es_MX/Main.zdct
- SHA256 664ab9794c7739917c1460964b9dd1875ffae05ea88c9cb379cad33359c08f06
- MD5 2da81646d1fd6d0d480f1e37fb6cd708
- SHA1 a27668aa7eca7062fe3b64fd0d4ba79c10794f40
- SHA512 9afcf0a0cf9542fb71b34bea1957a35236d3526776f8a5eeb75e71631b05ac3804ed4899948906a546486320719052a2dc7b36a754865be8fdb18ae456ee474d
- TLSH T1CF51779197EC264AB2F33B0C7E3918554EBFBE96EE38DA0C1170581D09F4E4499A1B73
- MD5 SHA1 SHA512 TLSH
OBLRes/es_MX/oobe_launcher.zdct
- SHA256 60c7326131022048ff6493945cd4271fc6131d406d0182031e71e4c0b0ff9bde
- MD5 371c630f733984df345df29b498bbebb
- SHA1 8b791b91095d99019507a59a02a5352347864d91
- SHA512 417b57e580a3b0cc0c43c64276cab3375cab2281fe6e4f221c5f987d09522c107d33e6a724a44bd4ddaab59d773f688c0186ba8f9f9d7411e41f1b40685a649f
- SSDEEP 96:YK/xHC7CuxHC1CAHC14HCT+HCgmHCYHHCp1mHChOZHCrPHCp:fhIhyvn69HCuE0
- TLSH T159919616A3F86748F6F3371DAA7A74A49F7EBD959838816D2230450C4CBAE448DD0B33
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/es_NA/oobe_launcher.zdct
- SHA256 60c7326131022048ff6493945cd4271fc6131d406d0182031e71e4c0b0ff9bde
- MD5 371c630f733984df345df29b498bbebb
- SHA1 8b791b91095d99019507a59a02a5352347864d91
- SHA512 417b57e580a3b0cc0c43c64276cab3375cab2281fe6e4f221c5f987d09522c107d33e6a724a44bd4ddaab59d773f688c0186ba8f9f9d7411e41f1b40685a649f
- SSDEEP 96:YK/xHC7CuxHC1CAHC14HCT+HCgmHCYHHCp1mHChOZHCrPHCp:fhIhyvn69HCuE0
- TLSH T159919616A3F86748F6F3371DAA7A74A49F7EBD959838816D2230450C4CBAE448DD0B33
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/et_EE/ConnectionFAQ.html
- SHA256 2e28693c0bc432f53bae1fabaca11081f35d370347f010873e17b326e7d8f680
- MD5 90444962c73a0957c0b714160a68ef0c
- SHA1 9fd352601e4abe3b00033fc9f02d02bdc9203b11
- SHA512 79ad55a7b2007729f467107d8e1e98bd49df4adf49c709f03f3eb656ffa5bc36dd245831ca190237424af0149039b6f2479028d09a6db7c96ad9259efe7901b3
- SSDEEP 96:VJin7sPCay6hatUvmFDn8T3I95Nh6l9ucio5t2Tf4meO/jgRzeWjgRLYTWjgRLqe:4iq8Tll8o5CfzIKYdqVgWbUk8yAt
- TLSH T189326232E7190619B0B255D5B1B322917468D749930394B6F0767E2BFCCF9B733C22AA
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/et_EE/LicenseFAQ.html
- SHA256 34edeb82980cbf4993969a2c02d1dc46fa43814a4b74fda3bca50f8140f0155f
- MD5 d6ca6183cb0582c86169bd84d40bbeaf
- SHA1 31286e56421805875243035ceaea0f04bef6124d
- SHA512 c1c7eb94576fd9cd0bfc9c32a0b7eeac1795b5dc03ca1441b2894f60bc34f41507633b4d40ece3e947c5035c388ab985be3821536abf2e34aab839cf1463319b
- SSDEEP 192:4hUO8Tll8o5UrPKygWIOczHOnSSaCmj7S4jL:4H8Tll8o5UrPKygWIOcKHmXS4H
- TLSH T192823312E7281405B0B54AD9B1A313A164A4DB4DA31298B5F07B7C7ABCCF9FB33D1369
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/et_EE/Main.zdct
- SHA256 85d080c7fcab939843b5588b2bad44539cce7bbade40f1a40fef86ccb844a62d
- MD5 06a966b5be8c3d2858f9053d47ee5241
- SHA1 498261d1951deb81acb617b6ed15192e9181d962
- SHA512 f443a4447faf80eccf546260e96460047e1c8ebf81c0459e9a5a1f77145216f63b4f38809df1f25fbdfe73015f22cb974cee778d1006101331663d2566529fe9
- TLSH T124517A9187ECA605F3F33F0C7D7815510AEBBE8BAE3ACA4C1560585D08F9A90D572B63
- MD5 SHA1 SHA512 TLSH
OBLRes/et_EE/oobe_launcher.zdct
- SHA256 b92878d7ea406dd54c8ebce2235520787e7d8439e470e86b4a3e7514beec2e05
- MD5 09b4e586f1641ad6eb6f34665ef1f8f1
- SHA1 3932bf40beadef80c74f0816e3e9233860f1ecee
- SHA512 21e08e756aa1ee306257b9bc5cb9c46b7e4efba2219c44fda97be3d7ada1d5d13236201ee366c2afbbdba347eaa71c29eedac44bd52edec66d8b9df41946f1a6
- TLSH T12CF0A7B9DA42A366578CA1FB70CEC4C6FDFCA2AC82F43C1502021285B59363921778A2
- MD5 SHA1 SHA512 TLSH
OBLRes/fi_FI/ConnectionFAQ.html
- SHA256 6d7db75bda97b780aec89bbf5d57544c7a104f7e9497892e84e09aaa14f0a69d
- MD5 b667e13a527a46da3610a05d39950a7a
- SHA1 ec8c5480fa896ed6459b346095ab76a7d0b1f299
- SHA512 24a0a6448495fd96f6fe7c57b19ae5399d02d619c3208456e169c705059b6b3267688309923ab9a87877f499445e92716ecaa0aaf3e630ac25c3b793d940f579
- SSDEEP 384:fZzQohtfzsIwfDx63w9v7itRLYzWVggaaWa58XL1qLatEeHGe5SOLs5j+j582I/O:hht7sIwf96AVubkvgaaWa58XL0LatEe3
- TLSH T113822322E20D0052B1F785D6B4F625307010C749A78764B9F1A77A1AB8DB9FB2FC167B
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/fi_FI/LicenseFAQ.html
- SHA256 301303410b96d8da7be155f9bf5a34f9b819fe17e0b9de52734e1ef79033d47b
- MD5 a16d794dbcbc7fab6c3bce124d1aecf0
- SHA1 67463c51684f21e998b1d6068d8609037b32239d
- SHA512 6f851a16b04622b68d90ab8b0a528bf35b18c66188330012f3472bb602f01d423f531261c088fa57c57648c476cf7aaabac644d25eba6a103b4217fe566f0b49
- SSDEEP 384:4Zw5ohOIwfDx63w9v7itRLYzWpggacW55SvGiVq5RjFsuW7q5SP13q5SOIhq5SEU:ShOIwf96AVubkNgacW55SvG0q5RjFsu8
- TLSH T182A22223F1090452A1F644D5B8A926746000874DA746A8B8F2EB756BB8CA5FF3FC177B
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/fi_FI/Main.zdct
- SHA256 fdcb19ad8316e58f2223326f4bff8b40177cc0e83c1c07d9e20096ca92463d54
- MD5 9a5451f67aa40dc53ebf6ba0e748c8cf
- SHA1 e31857ffd65892bf4bd23e40b7b8837b5f31e15f
- SHA512 1b2fd7b93b792f6f2dd491088a34ff1ee80211610fb6cfe7a2ba2639a05989e40ac2067f546a0818f9f1578620739fa0e0624a7d58f55e54da0865fb4361b2aa
- TLSH T16E41E80563F98729F7F76F316EB053164632BDD3ADB9E60E0A00561C4A351C0A8B0BB7
- MD5 SHA1 SHA512 TLSH
OBLRes/fi_FI/oobe_launcher.zdct
- SHA256 4787d1f0045a75f71132bc5a039205be4c8c352548bdcdedd2ff77d4b0b3d47a
- MD5 b28329399edb73d8db7fe37eef085ca3
- SHA1 e278a6e122efbf67b043850226dc89a7cbc69f0c
- SHA512 fb95be26045541dcc642f79b5a4bde50b3cad0486e7085db7740d19fbf37e30e9a5081f3f8bbb42ab735a4d1d470117ebee8f3d83fa3f010b33e009cefe123c7
- SSDEEP 96:u7cj9CFsj9CFsj9CFNj9CFQj9CFfj9Cv3c7CF4j9CFF6j9Cy73Gj7C:HvvizMtLyoHa
- TLSH T180A13D26B6F99609F7F36B199AB670402B3FBED76838D65C1224152C1C776018CE0B37
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/fr_CA/ConnectionFAQ.html
- SHA256 f033815a71c5b79dce7c4e5abaa03979549d05ebfe345b937510e8543ce442df
- MD5 126b927df1ddfc80574fe0eb1f64fb32
- SHA1 6cd7ba40c7c5bdac94bdc44b92c1eca8e33dac9a
- SHA512 02ff7f706d28264d3fea97151d23a8be88b3b22ba560b6585e6e2f158729303177b8659d97fd494fe23b79661b1d01f11bc7d0019924ddbbd47bd88868bbed5d
- SSDEEP 192:dyq8Tll8o5CfzIKYdqVgWEDmyjCXL/qnv:dh8Tll8o5CfzIKYdagWEDmyjCb/qnv
- TLSH T1CB423332E7190509F0F345E5B1B212516468DB49930394B5F07B7E7AF8CB8BB73C22AA
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/fr_CA/LicenseFAQ.html
- SHA256 1e5298bd3360af691a824f02b8cc00075d1cb5b82e5d7f182c297241286f8c57
- MD5 fe2b2e1beb6dcc9bafafe08e09402dba
- SHA1 8826b3701c770ffaf1a5c57a9b238248e0682327
- SHA512 774c089a01a8007cdd586b9a2c7583673ae09f87ceabd7c4f14d18640bada7175bc4cd0fe436bb08514c6f76a1320f6ac016d27e7b7ebce9374d937596a164f3
- SSDEEP 384:dX8Tll8o5UrPKygWrms7Os/p9xQagEO8hS:dX8Rd5NSms7O6p9xQag44
- TLSH T134823122E7281419B0F649D9B15213956468DB48A3469474F07BBD7ABCCF8FF33C13AA
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/fr_CA/Main.zdct
- SHA256 224514c655c81e0f8bb9554aed004ca8ae62f408eb4a073a104264f207d98dd9
- MD5 1a890b8bb04ef19681d7540dc273c0c6
- SHA1 ca3ff1fbaecc41186705d385295ff24c3de4ab37
- SHA512 3041c0ab921f64c999bb69fad7ed1082b71cadaf20a9702e7adf598e96c3e26c6f9876468597d72d6b82c520b0c11f10dde7a24a158d97d29e7ee95c678fd89e
- TLSH T1C8514A91A7EC6A06F2F33B0E7D7D04410EAF3D9AAE39C90C14A0594D0DF5A44D9B2763
- MD5 SHA1 SHA512 TLSH
OBLRes/fr_CA/oobe_launcher.zdct
- SHA256 2719b20206908f6b1554b84496108f369e626507da9121a2cdb2f281bbad4536
- MD5 5af3df6f86fd14be1efdfb7e887fd3d6
- SHA1 a0a53e4ea81887ffe79ed2198f630401e27a19d6
- SHA512 a31440ac12d5e277c893cee2fa1b6170a780c58f618dc022825c6b026b42165e2dbdbf2b50a307fd8e0dbf0ab831f0aefaad4e544b0d93d62f9bbcb3504de866
- SSDEEP 96:YKBiSnaCC54iSnaCE53SnaCU+5SnaCKdSnaCpfSnaCR4SnaCQ1fSnaC2O2BiaCqn:hauaKaTaoaxaGaya9Owxea9
- TLSH T163B13916B3F85209F7F33B0AAA7A70551F3F7D9AE835C5AD2524414C0CAAE8489D0B33
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/fr_FR/ConnectionFAQ.html
- SHA256 f033815a71c5b79dce7c4e5abaa03979549d05ebfe345b937510e8543ce442df
- MD5 126b927df1ddfc80574fe0eb1f64fb32
- SHA1 6cd7ba40c7c5bdac94bdc44b92c1eca8e33dac9a
- SHA512 02ff7f706d28264d3fea97151d23a8be88b3b22ba560b6585e6e2f158729303177b8659d97fd494fe23b79661b1d01f11bc7d0019924ddbbd47bd88868bbed5d
- SSDEEP 192:dyq8Tll8o5CfzIKYdqVgWEDmyjCXL/qnv:dh8Tll8o5CfzIKYdagWEDmyjCb/qnv
- TLSH T1CB423332E7190509F0F345E5B1B212516468DB49930394B5F07B7E7AF8CB8BB73C22AA
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/fr_FR/LicenseFAQ.html
- SHA256 1e5298bd3360af691a824f02b8cc00075d1cb5b82e5d7f182c297241286f8c57
- MD5 fe2b2e1beb6dcc9bafafe08e09402dba
- SHA1 8826b3701c770ffaf1a5c57a9b238248e0682327
- SHA512 774c089a01a8007cdd586b9a2c7583673ae09f87ceabd7c4f14d18640bada7175bc4cd0fe436bb08514c6f76a1320f6ac016d27e7b7ebce9374d937596a164f3
- SSDEEP 384:dX8Tll8o5UrPKygWrms7Os/p9xQagEO8hS:dX8Rd5NSms7O6p9xQag44
- TLSH T134823122E7281419B0F649D9B15213956468DB48A3469474F07BBD7ABCCF8FF33C13AA
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/fr_FR/Main.zdct
- SHA256 c2dcc6451605d2d77fbcc2ca0b4a3dd7b1f70955198d7d2869970a591e6d4237
- MD5 6d81ce932d60e9d10cf21be986fdd78a
- SHA1 6012da55f0aaf44b9d3cc7508e858a1c78db3be4
- SHA512 36d77a6e3006168c3b00ea389af0d845097c93968b853ba9972b7f252d574ce3cab3cf19c51bc95f134c17255412455594450f3ccd4d7a2b7da1f355d5d26f2e
- TLSH T1F541C00177E8171BF6F73B36ACB912464A767C9AED36C90E0084564C0E3AB44A8E0B63
- MD5 SHA1 SHA512 TLSH
OBLRes/fr_FR/oobe_launcher.zdct
- SHA256 01191ef5e9cb13ca616b0a36865202104771072625a6c9370d2b336854293db0
- MD5 49837a17e029107506dd0d3bff18571d
- SHA1 bedb64ee1479b33c383889cfe8a84d91af1ae479
- SHA512 05c2a19cfb1b3fe59a2af7431fa4def1b97e46f383d7973b15cb1c0b186cc9f2daece83d3cd52d6f5ce8826f2de0175a71e00c6d08c86fb684e66acf9e65863d
- SSDEEP 96:Se74S3yCufS3yCufS3yCuBiS3yCu53S3yCudS3yCuDS3yCu54iS3yCu+5S3yCHBk:NCeCeC1CoCcCCCCCRCsx
- TLSH T117A16915B3F85609FAF73B16AEB670452F3F7DA6E838C59C2660515C0CA7B858890B33
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/fr_MX/ConnectionFAQ.html
- SHA256 f033815a71c5b79dce7c4e5abaa03979549d05ebfe345b937510e8543ce442df
- MD5 126b927df1ddfc80574fe0eb1f64fb32
- SHA1 6cd7ba40c7c5bdac94bdc44b92c1eca8e33dac9a
- SHA512 02ff7f706d28264d3fea97151d23a8be88b3b22ba560b6585e6e2f158729303177b8659d97fd494fe23b79661b1d01f11bc7d0019924ddbbd47bd88868bbed5d
- SSDEEP 192:dyq8Tll8o5CfzIKYdqVgWEDmyjCXL/qnv:dh8Tll8o5CfzIKYdagWEDmyjCb/qnv
- TLSH T1CB423332E7190509F0F345E5B1B212516468DB49930394B5F07B7E7AF8CB8BB73C22AA
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/fr_MX/LicenseFAQ.html
- SHA256 1e5298bd3360af691a824f02b8cc00075d1cb5b82e5d7f182c297241286f8c57
- MD5 fe2b2e1beb6dcc9bafafe08e09402dba
- SHA1 8826b3701c770ffaf1a5c57a9b238248e0682327
- SHA512 774c089a01a8007cdd586b9a2c7583673ae09f87ceabd7c4f14d18640bada7175bc4cd0fe436bb08514c6f76a1320f6ac016d27e7b7ebce9374d937596a164f3
- SSDEEP 384:dX8Tll8o5UrPKygWrms7Os/p9xQagEO8hS:dX8Rd5NSms7O6p9xQag44
- TLSH T134823122E7281419B0F649D9B15213956468DB48A3469474F07BBD7ABCCF8FF33C13AA
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/fr_MX/Main.zdct
- SHA256 224514c655c81e0f8bb9554aed004ca8ae62f408eb4a073a104264f207d98dd9
- MD5 1a890b8bb04ef19681d7540dc273c0c6
- SHA1 ca3ff1fbaecc41186705d385295ff24c3de4ab37
- SHA512 3041c0ab921f64c999bb69fad7ed1082b71cadaf20a9702e7adf598e96c3e26c6f9876468597d72d6b82c520b0c11f10dde7a24a158d97d29e7ee95c678fd89e
- TLSH T1C8514A91A7EC6A06F2F33B0E7D7D04410EAF3D9AAE39C90C14A0594D0DF5A44D9B2763
- MD5 SHA1 SHA512 TLSH
OBLRes/fr_MX/oobe_launcher.zdct
- SHA256 2719b20206908f6b1554b84496108f369e626507da9121a2cdb2f281bbad4536
- MD5 5af3df6f86fd14be1efdfb7e887fd3d6
- SHA1 a0a53e4ea81887ffe79ed2198f630401e27a19d6
- SHA512 a31440ac12d5e277c893cee2fa1b6170a780c58f618dc022825c6b026b42165e2dbdbf2b50a307fd8e0dbf0ab831f0aefaad4e544b0d93d62f9bbcb3504de866
- SSDEEP 96:YKBiSnaCC54iSnaCE53SnaCU+5SnaCKdSnaCpfSnaCR4SnaCQ1fSnaC2O2BiaCqn:hauaKaTaoaxaGaya9Owxea9
- TLSH T163B13916B3F85209F7F33B0AAA7A70551F3F7D9AE835C5AD2524414C0CAAE8489D0B33
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/fr_XM/ConnectionFAQ.html
- SHA256 f033815a71c5b79dce7c4e5abaa03979549d05ebfe345b937510e8543ce442df
- MD5 126b927df1ddfc80574fe0eb1f64fb32
- SHA1 6cd7ba40c7c5bdac94bdc44b92c1eca8e33dac9a
- SHA512 02ff7f706d28264d3fea97151d23a8be88b3b22ba560b6585e6e2f158729303177b8659d97fd494fe23b79661b1d01f11bc7d0019924ddbbd47bd88868bbed5d
- SSDEEP 192:dyq8Tll8o5CfzIKYdqVgWEDmyjCXL/qnv:dh8Tll8o5CfzIKYdagWEDmyjCb/qnv
- TLSH T1CB423332E7190509F0F345E5B1B212516468DB49930394B5F07B7E7AF8CB8BB73C22AA
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/fr_XM/LicenseFAQ.html
- SHA256 1e5298bd3360af691a824f02b8cc00075d1cb5b82e5d7f182c297241286f8c57
- MD5 fe2b2e1beb6dcc9bafafe08e09402dba
- SHA1 8826b3701c770ffaf1a5c57a9b238248e0682327
- SHA512 774c089a01a8007cdd586b9a2c7583673ae09f87ceabd7c4f14d18640bada7175bc4cd0fe436bb08514c6f76a1320f6ac016d27e7b7ebce9374d937596a164f3
- SSDEEP 384:dX8Tll8o5UrPKygWrms7Os/p9xQagEO8hS:dX8Rd5NSms7O6p9xQag44
- TLSH T134823122E7281419B0F649D9B15213956468DB48A3469474F07BBD7ABCCF8FF33C13AA
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/fr_XM/Main.zdct
- SHA256 c2dcc6451605d2d77fbcc2ca0b4a3dd7b1f70955198d7d2869970a591e6d4237
- MD5 6d81ce932d60e9d10cf21be986fdd78a
- SHA1 6012da55f0aaf44b9d3cc7508e858a1c78db3be4
- SHA512 36d77a6e3006168c3b00ea389af0d845097c93968b853ba9972b7f252d574ce3cab3cf19c51bc95f134c17255412455594450f3ccd4d7a2b7da1f355d5d26f2e
- TLSH T1F541C00177E8171BF6F73B36ACB912464A767C9AED36C90E0084564C0E3AB44A8E0B63
- MD5 SHA1 SHA512 TLSH
OBLRes/fr_XM/oobe_launcher.zdct
- SHA256 01191ef5e9cb13ca616b0a36865202104771072625a6c9370d2b336854293db0
- MD5 49837a17e029107506dd0d3bff18571d
- SHA1 bedb64ee1479b33c383889cfe8a84d91af1ae479
- SHA512 05c2a19cfb1b3fe59a2af7431fa4def1b97e46f383d7973b15cb1c0b186cc9f2daece83d3cd52d6f5ce8826f2de0175a71e00c6d08c86fb684e66acf9e65863d
- SSDEEP 96:Se74S3yCufS3yCufS3yCuBiS3yCu53S3yCudS3yCuDS3yCu54iS3yCu+5S3yCHBk:NCeCeC1CoCcCCCCCRCsx
- TLSH T117A16915B3F85609FAF73B16AEB670452F3F7DA6E838C59C2660515C0CA7B858890B33
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/he_IL/ConnectionFAQ.html
- SHA256 4cba97114d3f129a24387e42437064a4cacb520559f5d192d5eaab47b798ad48
- MD5 3c07f4f478b0e8e0d2904b8eb9514d4e
- SHA1 bdc1a2cc919902fdec0a247f99cf7040beb9df7d
- SHA512 58f83c472fac8158fa978fe91fa1f2bdeeea1fbe364d4f6a6b7d4ebbf2142413da85887a04283bb65b0254e6cfc9cf76c4e6eb54f99410d60cad0a9e28d4b5be
- SSDEEP 192:myq8Tll8o5CfzIKYdqVgWOiJx9Dj8R2PKwL:mh8Tll8o5CfzIKYdagWOi3lc2rL
- TLSH T1F0321132E7080549B0F655E5B0B722617464CB59930364B6F0767E7BBCCA8B737C23AA
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/he_IL/LicenseFAQ.html
- SHA256 c3cac01f4efbd6ac73f3cf4118af6c3ed20f170953aea31a4a000d65f5545b01
- MD5 6f3ca96ac9753ca20a517dac144b7fcc
- SHA1 5296471337e2cc6e954fab10ef17c21dd05bebf8
- SHA512 f2e3517a5febd290c0bd5b23d61304ae45ff8de0abc99b94218f0813cd9fb984da3c9a92d15726f23f5a6c8acf80fc8cec11f92561235abd922ab400c60c122f
- SSDEEP 192:mnUO8Tll8o5UrPKygW2nawrpcOuf7U6pRBxNFEX2VNasNqPBWiMU:mR8Tll8o5UrPKygWQvujUYvNF0Zk6
- TLSH T179721112EB180805B0F64DD9B0A622A56464DA5CA3429475F03B7D7ABCDF8FB37C13AD
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/he_IL/Main.zdct
- SHA256 d8e492a16831fe717adf418889d7a78fc9c1bb0f841728ca75ac81f3e5b845a2
- MD5 de68f40b7f6a0d3b1b6cfa25a3c8341d
- SHA1 5be488be0bab9137a7f77c2e01bd0619ec872160
- SHA512 747df9ac4aa03a4cebaf2d2b7c653ccac39bfc91630a2f09be93a67791b4bf86fa991d4ade2e63f3d12aa78ca1c4ab655dfa2974761a1ebe115e5f59dbafd9b1
- TLSH T10941374032E0D7D9EF5BEF33A2AD552E9324EA40507E3F07508C52600D2EA91A6AC7AC
- MD5 SHA1 SHA512 TLSH
OBLRes/hr_HR/ConnectionFAQ.html
- SHA256 b8762e8fd6bac93775a7df71e8c09117004214e3adca7169be4ec0fa047a2135
- MD5 940dded14d40ee63d9884eb75ce9aaa8
- SHA1 986ead007cbc5cefcb120fee75665021d5df4a7a
- SHA512 69df4d2517f418e1c577a921c558e5abb02d8d693ea530171287600da5ba4b71206f5a763224c249e4e15d6f145b1a1619886b8ca91dabe6de4a0cd3fe3f846a
- SSDEEP 192:XV0q8Tll8o5CfzIKYdqVgWqbv8di0zq7x:Xl8Tll8o5CfzIKYdagWgD0Y
- TLSH T1B7324F32E7090905F1F655D5B1B312507468DB49930794B6F07B6E3ABCCB8B727C22AA
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/hr_HR/LicenseFAQ.html
- SHA256 0fbc0ce8d25ab52aaaa696af2f2163c3b75361f9eac305fbdb7151e0797fdced
- MD5 22ce1ef18129918d464ea8847dda1343
- SHA1 dd04e112c8dddba41eaf1a9aebfc6e694590ef9d
- SHA512 c2b4f0973efab4e52880f698878406f22e4a2db47cf7ae182bfa3075bed3fea797ceb92d92b64380ae022a6eb7b5da1a89de35790581d7dea610a2e579c364f4
- SSDEEP 384:Xt8Tll8o5UrPKygWq/ah8BfEa3rNsHcJrR:Xt8Rd5NNP51lR
- TLSH T10C822321EB250405B1F689D9B1A2135424A8DB4CE3169475F07BBD7ABCCB8BB33D1379
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/hr_HR/Main.zdct
- SHA256 ad4e438ec9660acf10c83f2d5d6ff971082236f69678823e71daf983ec557900
- MD5 c9ddac21047484d4f04e8f9b1065bb3e
- SHA1 2a96e3b589a4705f471e37f916dd4584e0f55e7c
- SHA512 c70507c56d793b7c85efd2469678097cb71695baeeefe9f4a9dc02ae85eaa53d2e87f82d2b14758bd89f9649d6aa36ea3201f6d96a3559aac7472f2abf37fa18
- TLSH T1C1517F82A7EC2645F2F33F0CBA7806210EBF7E66BE39C64D1460594C05F5A80D5B2B63
- MD5 SHA1 SHA512 TLSH
OBLRes/hr_HR/oobe_launcher.zdct
- SHA256 dcd84473a298c2d1574aba9632a164ecfa86dbdf7596a566339f99d4376e05f4
- MD5 9938acdc349c772e0f424485f5e44a05
- SHA1 3e0b904410362a520ac326aa6966d3d16ede8178
- SHA512 891b42324e24ba5f0315b2c513a2ae0486da020881ab2abf794ee0bc99da92afd8683dbfd58d3543e3a592aa86eefe4b84417e41406b0ad94944256efa032261
- SSDEEP 96:YKrh0Z5Ccrh0Z5Cqrq0Z5CK10Z5C0Cq0Z5Cnoxj0Z5C/R0Z5Cu1oxj0Z5CUOj0ZT:La59a5DX5m58X5lk5J5sk5Dn59oW5T
- TLSH T1C2A11B2673F86618F9F377099A7A25A42F3FBDB5A438C16D2160454C087BE848DD1B33
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/hu_HU/ConnectionFAQ.html
- SHA256 db5e912f1dededf447b03544b157cac5cc006133a67fe1376b481bbdd5e44ce8
- MD5 8bb00c0444b907575fc0f951e703fa9f
- SHA1 7bda6adbe2e72f6440ef82eaa8ee4837b1e06b5e
- SHA512 6fbf51863bdb2605b9c109f2fd0678e91bf73913b6a85009bdc776e47b4308d420078a81baa74697b456c5a46fab0efd527aaeb7edb6951000ce88eca88d8e75
- SSDEEP 96:VJinosPCR6hatUvmFDn8T3I95Nh6l9ucio5t2Tf4meO/jgRzeWjgRLYTWjgRLqb4:XSq8Tll8o5CfzIKYdqVgW+/r3IHUCiaq
- TLSH T152425332E719091AF0F655D5B0B222512468D749A31394B6F07B6E3AF8CB8F737C126A
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/hu_HU/LicenseFAQ.html
- SHA256 67992b3a84054890ef76af319702e0cec112255b09e8480cf0bd0c94624b66ef
- MD5 1d12fdc7aeb40e6f9b1478a645f7d791
- SHA1 bcee76b19d72d03d57e281c5cce5dae9cf6690e2
- SHA512 97da9b8d6ccf23b226a8a76998c57d499ee902370c73766e680f32b37d1642dcb35bc3a46f5a3d00112477c9ad1cb51d90b3ec104c54c4d80810b4465320a50a
- SSDEEP 192:XDUO8Tll8o5UrPKygWXLJ9C7LeTsXeetEy8puBp90VaqL:XV8Tll8o5UrPKygW7JIHeT2eIEb4c
- TLSH T1E5822322E7240409B0FA4DD9B06212956458DB4CA35295B5F17B7C7EBCCB8FB37C12B9
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/hu_HU/Main.zdct
- SHA256 31d66b94f41a56bb89e8ab936ce46fd1b5cd1fcd0959d094d74fb4950f3082d0
- MD5 9729ff5053afc02ad7647dc8649500a9
- SHA1 541ade3f46067809efb4d0b2d25f0ea546fbc626
- SHA512 0064e682c6c96d5d1626be6aa74194bc713091cf339a96e87ed1fa375a232afdb528d3f935b55557a06c3af10315ce353fa9e81102d422c2b6b06b75725ed2f2
- TLSH T15E41B40572FD4B06F6FB6F327D7097964931BC69AD7DC60E8184528C0D3A680E8B0F92
- MD5 SHA1 SHA512 TLSH
OBLRes/hu_HU/oobe_launcher.zdct
- SHA256 32500292134a7679fe7efafd12d9b6792665ba7cbae5986d24d0de53fb4be93f
- MD5 aa33c6fde44d8f4fb2a2d8cf8f3c1cdd
- SHA1 4b990b30b77afa56db6a9401127f8609c690820b
- SHA512 cab003abeae644cf5bf809affb587c04b0721f2e2fc5ebff2c9c28b0ca0cdc02f25fec959d2d999b54d2c6f1b57fd4c9d0449b14f7f424d64e2713c95d46b752
- SSDEEP 96:mG9snOCJsSuaOCJsSuaOCJsFOCJsrOCJsqOCM0BZOCJsdOCJsBOCJsvoOC:mHOhSu9hSu9hYhShNSBshAhEhv3
- TLSH T1A0A16105B2EC2609F1F77B167EF3B1403B3EBD99E83CD29D6590A14C0C666448864B37
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/it_IT/ConnectionFAQ.html
- SHA256 0d2624bcb23b8edcdbfdb6a3aad80598520b223de0873b8d354568361630a44e
- MD5 fc1836d3933acc4b6e9100a2d109d229
- SHA1 876f2188235eb03e80ef3add7d25e085bca3318d
- SHA512 3e3b4d33c69d512d3e2deb23b7e392a0b0d9f1789d7090bddc1fd8eef3c0bd2909dcd229e4f826ffcc5b9a7daee47f754d365270e97323e0b90eb26a79df53a0
- SSDEEP 192:df6q8Tll8o5CfzIKYdqVgWl68gEx918zY:dfp8Tll8o5CfzIKYdagW4gD8zY
- TLSH T1D9424332E7090509F0F245D5B0B222507468DB89E30364B5F1776E7BB8CB8B777D22AA
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/it_IT/LicenseFAQ.html
- SHA256 ee5c89d5fb87e27a46fc2ddf3a6139baf41e26b75b69d12abe8d5ba24a9da4b8
- MD5 e42d92bc44e149f957737a12f4eddbd4
- SHA1 965512ffeca6d89fd333219af8e4228453eb711f
- SHA512 a47cb64af1d1bea9c7e9ad72f1b3d278ec6c77fdaa0b0732f180fa587a5f6832cab9407d5f2e0319db6fa26d591d2deef0b7100d29bb9084587d9aab5086af7c
- SSDEEP 384:dge8Tll8o5UrPKygWy7fg2srbeRgzEhDt/hi:dh8Rd5NH7qeRgYhC
- TLSH T120822221E7140415B0F64AC9B1A322946468DB8CE3466475F17B7D7ABCCF8BB33E136A
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/it_IT/Main.zdct
- SHA256 755985113b60b1cf0e83e9860dd2a664ccb09d68a4b755fba4f41baceb3041fe
- MD5 7cbfa7e7bbf741b67816193f59b22dc9
- SHA1 6b4f805b13a489b9b785909ea549e07cd8d71ece
- SHA512 ae491cc21f5f69414a17b41b216b763af5fe060d1a041c8f6988f75140a551530857de8fdf8a1dddba502f39b146cfd04d0f02261b488e4d1df7596087d2895f
- TLSH T15E41F302B7F84719F7F73B357A3852564977BCA6EC32DA0E0240165C4A36A90A8F0B63
- MD5 SHA1 SHA512 TLSH
OBLRes/it_IT/oobe_launcher.zdct
- SHA256 b77e30db62ecd43e402767b1c219a323a1920d73e34eacc6be61234e95ba49e9
- MD5 0705f63c075f1d68d20615effadac13a
- SHA1 a632987b8602186ddf7ec199c7494970f4b3fcab
- SHA512 60f3fd77b44219e934dcb8e35d327db61355c9899b246104784f62329ea672ee40c10d184acd4ed7db53be0f9503f6f1d1be0aaf4fa0a6c14a62abbf2ba64a89
- SSDEEP 96:C799CfX9CfX9CfIP9Cfg9CfS9Cf09DKCfr9CfJ9CflDKC:SmmHl39qak/
- TLSH T151911712B3FD5748F9F377199ABA75856F3EBEA5A43CC29C2260511C4C62A054C90B33
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/ja_JP/ConnectionFAQ.html
- SHA256 955324169eb9af6f2c11496b0b8bbbd9400ca201f7a4160a6a91b9ea12a49883
- MD5 915889fb05c189e9322ab6b1912c2efe
- SHA1 1d6c585a606a09cfd8e5d3da45e88c23f45ad8f1
- SHA512 ea3e2c4f6dbc2bd1ff46ba94ed0e69be4f57f9ebdd2abe1550df1699a383cb32f784d66f21d9fa28e576d2ce10d2d842a7727c8956bf02d74777dd5a74f86ec4
- SSDEEP 96:VJinPsPC36hatUvmFDn8T3I95Nh6l9ucio5t2Tf4meO/jgRzeWjgRLYTWjgRLqbQ:2Iq8Tll8o5CfzIKYdqVgWGvzdkzAh
- TLSH T10E424231E7190506B0B685D671B322917468CB4A931364B6F077AE37FCCB9B737C229A
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/ja_JP/LicenseFAQ.html
- SHA256 309c380b73594871af579a27208b653dd524474064751d145f067da65acaf4df
- MD5 5672ca4f20b403ee1845a2511f946a84
- SHA1 36d1067390745ff2eba00d74a0fd1cf17d962a2a
- SHA512 64a36c6504da4b102067acaeff39902b30032d8d3e2ec684e5741d2d2f1331681c4481222c7561fe62ae6d8c3d1de34e900f4cd23af7dedb9f78de505fbc5d09
- SSDEEP 192:2VUO8Tll8o5UrPKygWG13vWwFg0cSROypsUU7wBJynWu4BJJhtuW:2z8Tll8o5UrPKygWG13pRzpsFBWV
- TLSH T134821031E7280405A0B68AD5B17623A06068DB5DA3129575F13B7D7ABCCF9FB37C02AD
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/ja_JP/Main.zdct
- SHA256 e5ab79acc3dce1ca76a43e6652a63b524eabda7b955df30cc32535e2a79cd00b
- MD5 5bf1568b5cc1a75fa8e2207a85ad4cdb
- SHA1 066a8bb3cd48a47859cb0134e4ee5d2935f5e057
- SHA512 c4a822ba69851392e61c0c1d102c93b94e5dc016a0f6f9ffd42a6f04acbd0b2ed85baf1a6f166ce6c5c73cb2b015fab4a368345a4fdc51591ef5b1351ff3c97f
- TLSH T13F31004832E54F1FE6E7727A41A2E35686B4FD14B2C64C8300C4D20A0A4D2C17697FBB
- MD5 SHA1 SHA512 TLSH
OBLRes/ja_JP/oobe_launcher.zdct
- SHA256 dd7b4b47c6213483ad7a794766cb132def8a0c3fde10caf36a59fd1c0ceb72e1
- MD5 dd4f983ca1eaa9e1e2f9495b64de6b9d
- SHA1 80c0ff14a14b55f1850104d1f960d433197995a6
- SHA512 ab90f3e8ac78553768f57ead3d11bd7bd5d880da273b2b1276375fd6d69af37584c213cdf189e679db2ef69057057b24572427292c290a95a0d24f29548f1e34
- TLSH T11271F549B6F96608F4F3337D5EF770823F7FBE909464E19862204648482BB454D88B77
- MD5 SHA1 SHA512 TLSH
OBLRes/ko_KR/ConnectionFAQ.html
- SHA256 b1e1d990e2d77d438e758efe986478587c7bcd3ad43ec5fe7062be6a371705ac
- MD5 93a79c3cc6d0442edb81c3fe8d0053b3
- SHA1 a1426f047250ca2e0fe2b56cb6b561106e585fba
- SHA512 a0ac3294e7d03ff8d3d4817e82027ae3e5ddc08c3fe13451dbd49262411e6deeeb5197ce80cd41c5e6c7ab83774629acf9102822129e30c028daa5d4d5ee7f98
- SSDEEP 192:YMq8Tll8o5CfzIKYdqVgW6XDnrzkYN4VQ9U2:YD8Tll8o5CfzIKYdagWYvXx
- TLSH T16E322131E7180505F0A659D6B4B212517468DB49D34364BAF07B6E2BFCCB8B737C226A
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/ko_KR/LicenseFAQ.html
- SHA256 2475118bcf0b4e115484cebf7350d7261439a0825516bf74f7750c3a22ef0b4c
- MD5 399f2d999cc5589b18d6546801701e1b
- SHA1 2e4ac3cc7a04e32bbec094a69316e1c369f201b6
- SHA512 7d24280a8d40ac1fcf4ba63f6e380962dbe844bf57b154b38c54f201d21da492c6d0cbce57971a9cf1dcd0512c10b4ef2126a697b1136c6aec339e4ca1b908be
- SSDEEP 192:YvUO8Tll8o5UrPKygWY5DD1wvfF4Wr3ErM0en0DNt+L:YJ8Tll8o5UrPKygWKvSwda
- TLSH T14D821222EB280405B0BA49DAB06613946464DB4DB3526475F07B7D7AFCCE8BB33D13A9
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/ko_KR/Main.zdct
- SHA256 a49e2884c1f0ad8e554d2f86c924a7253995f842b80e61393a8ef11955bdecf2
- MD5 6eb72e5174632f6fb76515e5658a50c7
- SHA1 2dd533faccfd679fd83ba93bc67b75c19801265a
- SHA512 40fddb666e0c800ca89d396c402b50daef8cd4648c4044f24a11aa7f237e3502483f04db28d0c47e0779c0b805e0a6c3fc09ef02590ae84cd69842719fae0053
- TLSH T11D31DF0236E56B17DE8BB3B7569183E78265F981F8530C0B624096148E1F7D2B2B17C5
- MD5 SHA1 SHA512 TLSH
OBLRes/ko_KR/oobe_launcher.zdct
- SHA256 3e7ab9d076d592b4a204eadbaa0518f53d45555fa066156f107dbfd56a19a260
- MD5 8f9e2cea189fb4ef730bf11c448c88ca
- SHA1 afa30cf5892dafcc10cb658218812d8a70779ebb
- SHA512 9701d2557ef533c5c6690120c644be5a8b6163b9643fbf1969fc7c1c309129fc0ae0feb812faacb4ec89041d6184b81819fd3c45f7ba705a4b2856179bfc9da8
- TLSH T10D71B109B3F96605F9F3A32D9FFBB1512B3EBEA58062D19D6230014C0CA77858990B77
- MD5 SHA1 SHA512 TLSH
OBLRes/lt_LT/ConnectionFAQ.html
- SHA256 a2658f022c2eef1ad6d7d1834341b0d6327dfbc9042848285c46249d4c8a716d
- MD5 cdd3a8fabecf187f7946d128755bcffd
- SHA1 565963833fbd1310efc6579ea5244d9b0b85fcb3
- SHA512 0093532ab99b5ea1329d69f10f9ccffbd5126a8458866b5bd29c0e3def3756270d84e663227a94807f2891ab85d30cbe89316ad3e407a1144da88a791b0b28bf
- SSDEEP 96:VJin7sPCK6hatUvmFDn8T3I95Nh6l9ucio5t2Tf4meO/jgRzeWjgRLYTWjgRLqbT:43q8Tll8o5CfzIKYdqVgWO36y3izTZ
- TLSH T1D1424132E7180946B1F655D9B0B212506468D759A30354B6F077AE3BFCCB8BB37C13AA
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/lt_LT/LicenseFAQ.html
- SHA256 62618d9fcfe523b823f60bb193567cf29c1906551aedb9d7578c52c3407fd78b
- MD5 4d43c9b8381d4ad96d3d01c7055bf819
- SHA1 d52e9ea884559fb57c59379375f9226e658fdbb5
- SHA512 5aa487c1dda8ad320ff41bf9648ff41c8b9f46d82097aef1dc4bb358bf25850d2a406ce50152dae09a3f221e58a836329be5780c46aa0dc61d94920368529557
- SSDEEP 192:4KUO8Tll8o5UrPKygWZRdikEEO2eXLkhK3+L:4u8Tll8o5UrPKygWbI2eXOKK
- TLSH T1B5820022E729044571FA49D9B1A612A42458EA4CA3029875F07B7D7BFCCB5BB33D03BD
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/lt_LT/Main.zdct
- SHA256 b9a4121249ff28523fbbb5e3cb731ca26017e11d60bacda1f996e7a24fa88c79
- MD5 854aad3eabc37c906f839a08af885222
- SHA1 fef41049d986b8dbfcd5f0a6be47273e1b3e745f
- SHA512 8af302a9666e2081c7c324fd10449a9f8cef692bca75172006e90cc8f5071cd88d19e10478643c54280872f33d9d5da6f07352a6f2f43c7bc31f3261fa6b0581
- TLSH T1C751C0A0A7EC2609F2F31B1C69BD45160FEFBE66AE3DD60E1470548D05F0A81D4B2763
- MD5 SHA1 SHA512 TLSH
OBLRes/lt_LT/oobe_launcher.zdct
- SHA256 b92878d7ea406dd54c8ebce2235520787e7d8439e470e86b4a3e7514beec2e05
- MD5 09b4e586f1641ad6eb6f34665ef1f8f1
- SHA1 3932bf40beadef80c74f0816e3e9233860f1ecee
- SHA512 21e08e756aa1ee306257b9bc5cb9c46b7e4efba2219c44fda97be3d7ada1d5d13236201ee366c2afbbdba347eaa71c29eedac44bd52edec66d8b9df41946f1a6
- TLSH T12CF0A7B9DA42A366578CA1FB70CEC4C6FDFCA2AC82F43C1502021285B59363921778A2
- MD5 SHA1 SHA512 TLSH
OBLRes/lv_LV/ConnectionFAQ.html
- SHA256 b8b2be1ac57fd9dc11ca9a3563dcf3046351989be75697a0a03e32544f9380f9
- MD5 8c6123b5fdb96e1102c435809b80de93
- SHA1 595358eff9f1a2fe08260e2a70dbc9fa549eb952
- SHA512 2f1298c962d762b0d145453ebc126010e558e294e2f83f650a7bfa67bc11aaf5c0084596cbbb179d558d8049fb4002e1fdfef1ed6b415f7eb74786ccba9c4737
- SSDEEP 96:VJin7sPCXpLhatUvmFDn8T3I95Nh6l9ucio5t2Tf4meO/jgRzeWjgRLYTWjgRLqj:4pq8Tll8o5CfzIKYdqVgWrfaVx+6m
- TLSH T15B324032E7090A49F0F249D5B1B216516458DB49A31354B6F0777E7BB8CB8B733C23AA
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/lv_LV/LicenseFAQ.html
- SHA256 a6fbc003cc1c859b5cb10bd27d275e435ae53ac0f6d2c528cceff388a0e3f0bf
- MD5 eced45b77f778dab40b0b5f4a4e871e1
- SHA1 1a687385a1dcec1562f8a061a369b7c928afbc95
- SHA512 2e3c6ff70f9fdac8a3757259663628938d250c2a389f62e4e03e944377c876712632bb96a31a7f552beb404666cdb742876a8a142ec2d8acb3aaf39149b8b3e8
- SSDEEP 192:4MUO8Tll8o5UrPKygWBBlLniyXjynsqoL:4M8Tll8o5UrPKygWnlGyzys
- TLSH T1EF822221EB280415A0F649D8B1A213946498DB4CA31698B1F07B7D7BBCDE8BB33D1379
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/lv_LV/Main.zdct
- SHA256 02f837092168c13a95be9c0948305f7a9e609d413bfb20b664af136076b1f7c9
- MD5 9ff89ed016e263d3184d594c723c0801
- SHA1 7f5c5b46e5a88620117af6188addb431106f7027
- SHA512 c86f8c8b9ef23d2518e3f283c54f904d2d0d922c5ca8e438f6ea295feea360f8a957643e75209fd61f370a4441292f05eb321213d7db10d4b4963dfd4967d3cf
- TLSH T1FD51589193EC2619F3F31F0C7E7849561EBF7D97AE38D60E047058AD08F5A4098A2B63
- MD5 SHA1 SHA512 TLSH
OBLRes/lv_LV/oobe_launcher.zdct
- SHA256 b92878d7ea406dd54c8ebce2235520787e7d8439e470e86b4a3e7514beec2e05
- MD5 09b4e586f1641ad6eb6f34665ef1f8f1
- SHA1 3932bf40beadef80c74f0816e3e9233860f1ecee
- SHA512 21e08e756aa1ee306257b9bc5cb9c46b7e4efba2219c44fda97be3d7ada1d5d13236201ee366c2afbbdba347eaa71c29eedac44bd52edec66d8b9df41946f1a6
- TLSH T12CF0A7B9DA42A366578CA1FB70CEC4C6FDFCA2AC82F43C1502021285B59363921778A2
- MD5 SHA1 SHA512 TLSH
OBLRes/nb_NO/ConnectionFAQ.html
- SHA256 830e018d16105021f3cd102d0beb17113f4f96dc702c1437e214f0c85d8df8b9
- MD5 ef145fcb367ca77f1c7022881de8939b
- SHA1 bfe71b256c3b4ca808019b7588e9d184e7a700fb
- SHA512 acbada4581afc1164b6ae682b755901e0ecf728d6a652074e16fb06c6eff41f841e51e05c8ffa1f2a94a4aa0eff4e5054fd36b246f51a27c224e6bd3b9c6d698
- SSDEEP 192:dJq8Tll8o5CfzIKYdqVgWD+dUJYE9gMNekS:dk8Tll8o5CfzIKYdagWD+dUJYE9gMO
- TLSH T19D424332EB09055AB0F645D6B0B212556468CB49931354B6F0777E3BFCCB8B733C22AA
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/nb_NO/LicenseFAQ.html
- SHA256 40ba6635ac0cf8c8e1d6f408218a3931e4bac00c209783ffb6e17211e80b8b67
- MD5 5a4e7bf980fecdcf08ae666ea220022a
- SHA1 bce35add9edb60b74554e0636b96780333a4e932
- SHA512 b24a6b6064846fa661b0661152b74b7a5a7e996ee5efb92470ca5bfce86c7d88ec34ccd5e57d504d7749ac181439f4e0c518c39730c327f81d7078bcd659fedd
- SSDEEP 192:d+UO8Tll8o5UrPKygWu6FDnkGkmPoAldPD2TsyM3KUvL:da8Tll8o5UrPKygWu6BkGDoAnyTKr
- TLSH T1C0824412EB24041970FA49D5B06613952068EB4CE3269875F07ABC7AFCDF8BB33D1369
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/nb_NO/Main.zdct
- SHA256 352456bab15d03d77386247965eb11a9f7fbf1cddf9a40618324fa6fe1607ea4
- MD5 498b4c5bda85803e913e5336701362a9
- SHA1 d61c36d6d820248c40d7fc977bc5ce9c8a1f9aab
- SHA512 0787d9a6923bb0c2144fba4552de12592488bf696b3196f6f2d58b319f6bc9e59fb3ddfd7d34d767d9f74c29a914a4c7d6768124a422106edd92e7f71c17253e
- TLSH T12D41E150B7F91B1EF6FB2B317EB542525A79FCC2BD79C60E0144125C0D3A6D0A4E0B62
- MD5 SHA1 SHA512 TLSH
OBLRes/nb_NO/oobe_launcher.zdct
- SHA256 8218767951a3cde6e16955b95ecf03291de866508a85de2ae344d84ce0e5e4e1
- MD5 287d43e5828797c5c26c334c8963b41c
- SHA1 22fc66aa36b66529107b0435aef4b1129e051270
- SHA512 7fbeb623b5d5561994005a443a37d83ba21fcdd374c50d3251f4874025635360b987bfe3dc216a654ced91a6d9cbbf52627083dc3e5aad3c0feef55bdd968ff8
- SSDEEP 96:u7nHIYOdC7nHpiYOdC7nHpiYOdC7nHEAMYOdC7nHgYOdC7nHmYOdC7nHqOVC7nHF:+qcqcqiqcqiqlqHqAqHq
- TLSH T135A10825B3F95709F5F76B2A6EB670846B3EBD919938D29C2660110C0C73A8588E0F37
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/nl_NL/ConnectionFAQ.html
- SHA256 316fd3a0adc8a9d9be36a70beb68dfcbb4c941082f69048c0105be354d66849d
- MD5 d3d443d5bc31b393c7783d0d6ec339d0
- SHA1 ff2364533fd81662027136cf4d4b9f3180412cde
- SHA512 951a00791712d7bf8403e95706d6980ed8aed616e96b0822e0e1c3f482708cc210e8df812cb4b230930d4e232bb8edc920aa39bb911a2a9303129baa871fd409
- SSDEEP 192:d6q8Tll8o5CfzIKYdqVgW5+T9dQZ5mKcXXXb:dp8Tll8o5CfzIKYdagW5+T9WrmKcXXXb
- TLSH T15D424132E7080519F0E245D5B1B222917558D749D34794F9F07AAE7AFCCB8B733C229A
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/nl_NL/LicenseFAQ.html
- SHA256 30fe7d08283d17153d4170bbef100f24c7105a691d5a0826fc64fa908c20449f
- MD5 7bce0fbfbc1f2f0b6bfe6102872b666b
- SHA1 20b0df5aa8dcb332c6f61e5d5481dc0633571fb6
- SHA512 36d4918a88330d054cb0387772632f7e3a180f1317bfe3d770a4ffc448d7b6fab7edacfab080169092ed25beb450057d2dea0a8ac262c379e7aab3ead6138824
- SSDEEP 192:dJUO8Tll8o5UrPKygWwf01djKQm8ost4iKM4SY1bL:df8Tll8o5UrPKygWwf0XjttfjC
- TLSH T1A3825412FB280419B0F64AC9B05212A57454D74DA35698B4F07EBD7AFCCB8FB33D12A9
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/nl_NL/Main.zdct
- SHA256 df50eac9bcaac16e25a9077473b6f9a78aa3ad1e4550934c178d9bd7529d3da2
- MD5 30321b8b7e9c807e53d4f13d43a51265
- SHA1 ad984b2ea4de74bd6aea545c3f11718ea42f6ac8
- SHA512 eec45093ce428ad78c730396d52cb4c75e8c7d34deb900585592c82f39f23bc8027551fcfd1316bd54447405fe1e35486b2270582bd151ac38b68bb2ce13cffa
- TLSH T1F051DF0137F8861DF6FB3B366D7992568E35FCC6E831964E0350066C4D36A80A9A5B73
- MD5 SHA1 SHA512 TLSH
OBLRes/nl_NL/oobe_launcher.zdct
- SHA256 3a9277e8003869ea17da8c019ca2dfaa9e2b43413b0bf3039fe813c990d69ac1
- MD5 9843568a2ed878441135c2624f184744
- SHA1 b4cadf3de0026982d85d3b8875281e5c99adc1db
- SHA512 8607074a8590f7384ec343ec8f8abc6ae688bc2b301dba7fee616d00063e6e2acdd6b815759e7df0ac94af32696b84ad6716db65adffea1804583529b07d4891
- SSDEEP 96:tt7qm11NCIvenm11NCIvenm11NCIBRm11NCIKom11NCI1m11NCI6m1pCISom11N2:tbVVVVV0VyV+VfTaVjVhT
- TLSH T1F7912956B3F89608F5F33B29AEB770842F3EBDA5A874D29C1664151C0C77B1489A4B33
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/pl_PL/ConnectionFAQ.html
- SHA256 7035bdeec896dec02942fbb7724c5faddb06d0984e6c55911da3990df970158c
- MD5 da41e06fe286cc372dfa139d33dbe312
- SHA1 fdb27d4fa5d79ef23e2a0ce29612cb474dc7e12b
- SHA512 3e38444dbca2c3bb4e738404eb6bb54ab08475160fe612b313f18ea4c7138c32fe22cea2b60716f0c0a846976a3f2e9db182f0a2dacd522f36b21c36fd16df3e
- SSDEEP 192:Xqq0q8Tll8o5CfzIKYdqVgWvfSQTxGDb/:Xqo8Tll8o5CfzIKYdagWvfSaxGf
- TLSH T1EA422022E7180545F0F645E5B0B3165174A8DB49930354B6F07A6E3BFCCB8BB77C22AA
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/pl_PL/LicenseFAQ.html
- SHA256 4bf0f3d79ddfc288247c15477c75fe4d3e00cdae5d911ca5402f9af7e34c6af0
- MD5 38839b4b6a55f9afb0016b6d7a77c65e
- SHA1 2af2f178da04954d3e2603db84abebbd1a1fc70c
- SHA512 e23ef3079a865d627e308b474528a44fa8c6e206da32db23b7a77fe4bf019c6d30cab51992b2b71dc4049f4d9d738751df694865f64e0ca648631dd8101a1856
- SSDEEP 384:Xxz8Tll8o5UrPKygWk+15UqRUo0cAw1DkRl:Xxz8Rd5NN+fFUUwRl
- TLSH T109820F22E7280445A0F649D9B1A3139464A8DA48A3125875F17FBD7BFCCB8BB33D1379
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/pl_PL/Main.zdct
- SHA256 412662f89dd8407c8873e11ed025050d59d9fcaf917a4c00e1ffc780d8fc2e2a
- MD5 b3c780d6a06d71afc4367187b951c822
- SHA1 ffb469403cf5c6357a37d2be549a1f0244d53516
- SHA512 60ac9664cda13e7979428955de087bc60d7617dca7bde30ce0bd47dd97d8064ad0f5961e2bd84a057d4ff93288b4eb3b7008cc53572179c0159aa2b6eff09e0c
- TLSH T12341294077F40B15F6FF6F3095756296C936BC12FE3A458F294162880E39990E5B1B73
- MD5 SHA1 SHA512 TLSH
OBLRes/pl_PL/oobe_launcher.zdct
- SHA256 6d29628e19aee6bd969122c915903ce52a4f28382653c83fac138cdf4bb236a5
- MD5 b3a24d3b73071ce2b4ed037a4802d2ca
- SHA1 cfa043f20a1a413b830fc7ad693c1e3109a55ab2
- SHA512 c72397e72be0916e213d24dec66078fb1c5e24f0839b8ad8ba08a892880b3c863da3e143f2a1b51d7379cf3bc484148f8bd4b3f1a7a41b9641ec31a1ad0398a4
- SSDEEP 96:g/EiACSKiACSKiACSREiACSkiACSGiACEx1jxUTiACSQiACS+U3iACSPiiAC:FUUpiK4JRQuWM3k
- TLSH T114A19405B3F94649F2F33719AABB75946F3FBD66A934C29D2610024C2CB67908990B33
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/pt_BR/ConnectionFAQ.html
- SHA256 c994c9521dc2f4386267dc95d3ded8488c2a263f9e894d710c7c0b038ecb73ea
- MD5 673c26ad693378ddad7bb28c589e4346
- SHA1 2c1d9f36956921ba5bb44d03a61a4b4021be35eb
- SHA512 0658491a5edc51975d7ec77d0351a2eb2c93fd6196f4fd3809aa4dce22b1c301e0b7799323439cd126cc14e3ec8c51865106704c0f78805a9c1f010c7247246e
- SSDEEP 96:VJin+sPCB6hatUvmFDn8T3I95Nh6l9ucio5t2Tf4meO/jgRzeWjgRLYTWjgRLqbR:diq8Tll8o5CfzIKYdqVgWtARQPwa
- TLSH T1A5423232E7090505F0F245D5B0B722527468D749930394B6F07B6E7AF8CB8B777C22AA
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/pt_BR/LicenseFAQ.html
- SHA256 3d731867d17d0b3b2052316e13db88b550a4898a3324b749d2dd457994f58a2c
- MD5 ca26d9580cdd693b678073ec6ceaa805
- SHA1 8cd5e2d874b1c560ca3137adf71f953d1156a153
- SHA512 f9f94f88b93aecd8e088f16c37228a99f3fad4e954bd08276b44bdf17bbcd86dea5f8a441d0b2a76d1cdaad925925000c74c586b17649c702dd05df4140968ed
- SSDEEP 96:VJin+sPCs6hatUGirFSLK8T3I95Nh6l9ucio5tkPlWjgRLPeWjgRL0RgN5+NNkT5:d5UO8Tll8o5UrPKygWqx3al/5kT2OnL
- TLSH T1E9825521EB180405B0F689C5B1A7139564A8DB48A3029875F07B7D7ABCCF8BB73D177A
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/pt_BR/Main.zdct
- SHA256 40ee76185d2e2709c3565790fca747a027b217fb69d926d8281ccb8092d3ba61
- MD5 ae3699e79f2868fc6501bfbf94b4256a
- SHA1 484265f9df0eb06aff24b8070cd4736a2d2aaf5c
- SHA512 1c55a67a1e8f0255e93c9940bc6b2511926dd624b1352236f8fc69d2f1b8e15a0f37eab943aada7f8479b5cffa2840dd91258508f11264563fed9a945942e0df
- TLSH T1A541010177F8171AFAF73B362A3552918D37BC96F831DA4E015002490E3AF80A8E4BB3
- MD5 SHA1 SHA512 TLSH
OBLRes/pt_BR/oobe_launcher.zdct
- SHA256 ca3d8da86da34fb8ea00f509f244e7b952ef7413a97a896838eefd5b776fc6a3
- MD5 c4007e3a2e0f954636cfc17cf977f2ee
- SHA1 17b4b9b7993af45b7af514af62149f8685402967
- SHA512 04bda8bc27732937b361835e0eeeccaadea628fa08e35b4f333730ce4ead9d51adebbce73e20fab3fc443d127a16cbb1deb2346606cc6426fa919df59ed6d647
- SSDEEP 96:CfUHt0GCH1HJGCH1HJGCH1HrGCH1HyG0GCH1Hn0GCH1D2CH1HyeGCH1Hp0GCHq4d:BRY0Y0YKYHYLTY4YFH
- TLSH T196A16C05B2FC1B04FAF3772A6ABB74956F3FBDA5A438D29D126046480CB6B414D90B33
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/ro_RO/ConnectionFAQ.html
- SHA256 8ee9d3adbcdf5bba14459c9f2193ea7d59a6b1577850bde26518d69adab71838
- MD5 26235f873952010dc67e9859e0ce8e61
- SHA1 da3af8dd0bd038ca6f1f663736edb10b235cc4aa
- SHA512 6a038d99e785859416443b4be7abf47343f32d18504dfa6766b65048856072c93c54bca6cc15b40f0160e0f12bba7f29ec0efacaca283084d76c228808f0722f
- SSDEEP 192:X4q8Tll8o5CfzIKYdqVgWj1EfQc0+ZggY:Xn8Tll8o5CfzIKYdagWZluBY
- TLSH T1E1423232E71C0505F1F245D9B0B222927464D789930394B5F17B6E7ABCCB8B733D269A
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/ro_RO/LicenseFAQ.html
- SHA256 85848b3e246036d098ed35008b8c04c6f3faeadcdd1edd2719d988b918ed4d92
- MD5 7c33746b871d8d8b435d72c5d357cc6e
- SHA1 de4a2af5eb7fc33b358c7da57ac99d9c3f887a11
- SHA512 bb0d438039d73b6188be11ffe8117db8dc5319d05751d94ce3ed045667debb9970df1a042102f4b097f88235441e5e4f55357364a96c8a50d858ea43a4548a9d
- SSDEEP 384:Xr8Tll8o5UrPKygWXIMfVvi9J3FIHxIfVr:Xr8Rd5NzMf1QJqKfVr
- TLSH T1F2825322F7281405B0F649D5B1561296A494EB4CA30298B5F07E7C7ABCCF4FB33E07A9
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/ro_RO/Main.zdct
- SHA256 40eb3636f3529077b251638362e053e67dbad9773f41f841096726383cd415dc
- MD5 011bcecd4c28702fb40bd149025cf0fa
- SHA1 db06197bed7e91aa7da05ee5a59046e63d9ae0af
- SHA512 28aef0fd084e5c170176a72a2c95cf28404174b480710e0c49fcf1d4bc812493c7eb9721ca5096a6b5a2bf7fe42892d5713e15043775f39e3ce4a7866504fda2
- TLSH T11441E10027F8171AF7F73B35393912564D377D66AE79DA4F1200525D0D36E80ADA4B63
- MD5 SHA1 SHA512 TLSH
OBLRes/ro_RO/oobe_launcher.zdct
- SHA256 ab9dc4c24ba642ce13c54b1b515f0f424cf08b2657ca6725038584c220e120c6
- MD5 c69987355a4684290d6519c51ba5ae54
- SHA1 ff673fe512b5c8337aa152d8a34f78d6e78267db
- SHA512 8c2ac802faa0e994498048e2c060066ad97cd5cffb8470fb081b50598277f8be19a963b4a91c4f4e6d43f954905fd71787cb7a0f99b902cbc3ef460f6596cf8d
- SSDEEP 96:U7NSC3KiSC3KiSC3wSC3iSC3ESC3uVSC3oSC3DSC3vSC:H3p3pMqAU8Vl
- TLSH T1D9914D42B3F92705F2F33B29AEB675446F3F7E66A839C25D226045590C76A848C90B33
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/ru_RU/ConnectionFAQ.html
- SHA256 534ebb0da5742e8f3d4d6ac63e3a592a16b0be5cb9e176a76fef55390e497cdc
- MD5 cd1fc2b93dcacce724364856642f5dbd
- SHA1 45fa0751ca92997fbcb6c8756a5929765eaaf537
- SHA512 0fdc7398cf8bf03590e644f813dc6f89f235461a81ae8bcbc8f04e94323d942b5774fe8e286b137b23cdd49fe377ea8ab59fd05cff339c9f2905408dff383def
- SSDEEP 192:WUq8Tll8o5CfzIKYdqVgWT5OAUiqYQygUp:WL8Tll8o5CfzIKYdagWT5OA3qYQyg+
- TLSH T16F423332E7080949B0F649E5B0B716506464CB49D30754B5F07BAE7BBCCB8B737C22AA
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/ru_RU/LicenseFAQ.html
- SHA256 32f00c8bec1f23633257b4392005ba90a7e42b834a4df60fba608d9204bc3998
- MD5 18f37b95232087ef8c493db890833741
- SHA1 02af82aa9c96491031bb8cba98fa43ad1e333b31
- SHA512 949d5766da99b06eb36f2dc2362517761d1dec2fe073d16bf654cd8691d9d5dc8d45c1c93e497bed65cf37203fe6c6b52823a662fbcc8e2b06f345a50b9b0781
- SSDEEP 192:WvUO8Tll8o5UrPKygW2sQWld2IfaFuGGl3oUO0EiY4L:WJ8Tll8o5UrPKygW2sQWOIfaFuGGlXX
- TLSH T10E825122E7180459A0B54DE9B0A7139464A4DF4DA356A474F03BBC7ABCCF4BB37C13A9
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/ru_RU/Main.zdct
- SHA256 8d81b9119d8ef2d110814e1868b0aa309660aaad189688b672623c5d90e67c9e
- MD5 2ac8175f25b6c25d8ceb9024c5446d87
- SHA1 b92ea520a9069ada8f464dffd1cd27d613104488
- SHA512 6cb6b3ad75d52af0988a645634a10c8013d604e3dd24931862643739fda3c92315ce2836820aeb53a94f318d8c4410a367f38620c1f844b1e94fcbbd7c22c6ba
- TLSH T116419D0FBABC8601FA4AF3751F628AD72129BB00771945C7428F7E95652D63133563C7
- MD5 SHA1 SHA512 TLSH
OBLRes/ru_RU/oobe_launcher.zdct
- SHA256 84719a9537b8be5b56b0479bca0719ed62ff84483c26a25d19fb490a7591d2c9
- MD5 2fa238214a9ea42e98a7fa510b1fbce7
- SHA1 9bd972b80191c888fded18690059a19bbc5e3ad7
- SHA512 a5262224d833c63bf66940cc6b7d46c57445d3b0aa37b632876382eeeeadd6a8a90ed88fdd418110c0bd65d1ec72b9272b7926248b71440a65b2223d53bea4b9
- SSDEEP 96:6CRdkCMgkCMgkCMc/kCMudkCMydkCtQ0CMmkCMvdkCbkH0C:u33acV5MJo8
- TLSH T171A1000FF6FC8A04F5B363590FB375C1267EBF48A3208589225F9E0D142A7312A68767
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/sk_SK/ConnectionFAQ.html
- SHA256 0b5997f50eb51c01088fc72d449d6c60951c2942d718402aa22f9850512a260b
- MD5 431690d1164c2933eab308c28f2d59d0
- SHA1 53995f6f5b235efd6a46dd4999527e6b504c922d
- SHA512 d781ac45b1af3d76d1a3c03c0a79e9d671cc051c1f75f15506dbc9612a546ac7954a00a4f6ea91013ab2edb538efe43e097c48bc8a931b33aa7821fc30b527d0
- SSDEEP 96:VJinosPCRu6hatUvmFDn8T3I95Nh6l9ucio5t2Tf4meO/jgRzeWjgRLYTWjgRLq3:XNq8Tll8o5CfzIKYdqVgWRUR5jx4X
- TLSH T1D7424132E7180909F0F745D9B0B212917568DB49934364B5F07BAE6BFCCB8B723C129A
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/sk_SK/LicenseFAQ.html
- SHA256 8bdbdfb093c0d54f4b036a52da581e65ad1ede4c6127ccee9cb32eb8d248b8b3
- MD5 f60036a731b0787cbc2ca1d57e0fd9e3
- SHA1 b50fc083f4c11968d9771775637d510853349e8c
- SHA512 5719e06e2a9e874c58df1c1b83e5990c433e519ebffbfa9d18ce7229b0e71667c67c643d3bf4d900c42fb7658e991db21f6e9054ce04b94c875fab111ee975cc
- SSDEEP 192:XQUO8Tll8o5UrPKygWOgn8R0OsIof9Yq1L:XY8Tll8o5UrPKygWJpOs119
- TLSH T135824422EB240815B0F649C9B1A312A56468EB4CA3429474F07B7D7ABCDB4FB33D176D
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/sk_SK/Main.zdct
- SHA256 f77c65c1f23d98d4abf2310ece993554acbc7f86ac4752306a1933f89fe8685e
- MD5 c154ee9bace9e39879001491b1d0b4a6
- SHA1 f3a9895e1777e346c79c2f2e7f7de568286a77d9
- SHA512 ab3558ba30e27f4333927b9d728339d370f170369afe3b487453941855a70a208323502f0a46fbe728973cb3870bf2aa0af280fb2090b7ea585d629114dda269
- TLSH T10951D492A3FC2542F6F36F0C7D7805660DFF799A6F3DC64E5960058C08F5A8099A27A3
- MD5 SHA1 SHA512 TLSH
OBLRes/sk_SK/oobe_launcher.zdct
- SHA256 f467f7a4654e6393fe99a22e8738ff331e9ffdba5d2b5823609cc4f15a5b01ab
- MD5 d6f8d145d6bf7487e53e4a1ecd5370b9
- SHA1 ec9277d30ab9d1fa29ab5e9e52db71c8a60f17f2
- SHA512 d0b61db1700fa0d3bb7fe204f71cdfe861def87c2a87e85e0db9a4c5420b2f982250b0800c9e16d90876169bc5011ac9447a22901e361a8c1f94de45de3db524
- SSDEEP 96:YU21sw4Co21sw4Cu21Rw4C+21Zw4Cg214w4CT21ldw4Cr211w4CE721ldw4CSQ2R:JPNVPNbiNbaN9LNeedNG2N1edNBQJFFK
- TLSH T1A8B1195272FC6649F6F3370DAAB665A49F7F7D98B938C25D6020425C096BE808CD0B33
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/sl_SI/ConnectionFAQ.html
- SHA256 b6f7d4c1abdb4a30802b411778013fca5221d9ad4342c9c8f02aec0fd8636d10
- MD5 c40b83453a22bb28bcfd50f02af5707a
- SHA1 2a290991c02a7d9498f08792c9962c1f77d5f2e8
- SHA512 92b7dd6345f2bf0204c857933e1064a02e0ec53cd9092bea99af91db8e4c817dd3bff3e3e314f645c1226f1a09417570496cb9baec4dc1288aa52307905410dd
- SSDEEP 192:X60q8Tll8o5CfzIKYdqVgWlGXsk6b/qEjn:X48Tll8o5CfzIKYdagWlGXQb/Rjn
- TLSH T107424032E7090919B0F655D5B0B212507468DB49D30394B6F07A7E7BF8CB8BB77C12AA
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/sl_SI/LicenseFAQ.html
- SHA256 42d47d385651598302ec514164468dd3d1310077e3d12918ad51328cd17ef9c0
- MD5 c4ee287898074a6ef01003bdc4a83480
- SHA1 d6fd25b8d134f6fc9e938641d52fa8b7e7f6f05a
- SHA512 b028165388a88347551baf48756ef4c30d82586080551266f26c743565cbc0538d827e9c999d1957229ea373dcf501399384b12413125ec2fcc57115972471f5
- SSDEEP 192:XF0UO8Tll8o5UrPKygWE8i0iggILrmbCfKxYjJTEL:Xq8Tll8o5UrPKygWEFgUbsuYjJTk
- TLSH T18B822222E7190809B0F689D9B0A213546468DB4CA316D875F07B7D7BBCDE9BB33D0369
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/sl_SI/Main.zdct
- SHA256 eb40a4637d9ff2276441a95e6a2a7783a7e7d0348ccc5603f189f31d8bb55ba7
- MD5 000e66b480a0aa25182676db197c7533
- SHA1 ed9276e3072bb6d15c74fdccd0cd4ca5db1905d8
- SHA512 2cea0893c4f22ff104c3c3deb5ecd88886bda61c9b3aaaac7a683e2ec746ee3403fb243a24aff5d62ae87f72d60dba1ee0e9eac4c984ffe6e761a5cda5d408c2
- TLSH T1EC515C91A3FC6A09F2F33B0C7DB815610ABF7DA5BA38C60D1574159C08F698195A2BB3
- MD5 SHA1 SHA512 TLSH
OBLRes/sl_SI/oobe_launcher.zdct
- SHA256 c36aa7d8d6d6f84488f7325f783d43899b166e155be99d5ec3e1d7a318c19dbf
- MD5 894e301a1123dd237f2e25c26d04827a
- SHA1 54c1326ee6ce7efb7e3db58830232f85bb3dda9c
- SHA512 487b835e85473feaa8e7c0299d2f89583ea2b010d3c45020c4de5852e0168b9215ed6fc11f7b2d320d2f787f22e7257c5e5c7c6005a5950fdaef2a406c2c1cf9
- SSDEEP 96:YKnCJJgJCJ3gACJXNCJBtCJSRCJKnCJb15CJrOtCJJseCJb:HXJxAU6jlmeWze4
- TLSH T1C1B11F55B3FC2609F9F73B0996BA71981E7FBDA4E934C15D2225419C08B7E8189D0B33
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/sv_SE/ConnectionFAQ.html
- SHA256 4d85b35a88d1c89e55bca62ed63f50321ffa3aa662dd64e1beaa4fcf54df81d0
- MD5 a25744a45c839944f15cde6b5a78eb27
- SHA1 cc8a0ee2db6234d6d116ecf9bd70efda578941d6
- SHA512 1d2ecf0a0fc842e39b5b8855d9eba81d19735d9414ac29da10cee16a0294e1035fb9540874bd36848b831fd618fcdc6013d69544fa7f2bbdc208506c50eff3d0
- SSDEEP 96:VJin+sPCb6hatUvmFDn8T3I95Nh6l9ucio5t2Tf4meO/jgRzeWjgRLYTWjgRLqbE:dsq8Tll8o5CfzIKYdqVgWYW3O3
- TLSH T160325132E7180959B0F245D9B1B212917868D749A31354B5F0766E3AFCCB8B733D22AB
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/sv_SE/LicenseFAQ.html
- SHA256 f6b4e30b83efb069d8f3521cf2aa418386b34d21baafe4d5909c571e07cd4bf9
- MD5 2a35f75ba35605e5e7498beed3f522c1
- SHA1 c793d9eee87d6cb146cc5992ef6732de87a213d3
- SHA512 4c70d75bf8387af5059f632dd9f5a75031aca393030940f4928b7d58ae8838b0786ce5ea61dd9cb63f4d8ec26e83ebc3dc035f284df77981fea7fe9443644136
- SSDEEP 192:dTUO8Tll8o5UrPKygW6pPz75H1QmnYLaFPtsCiKq6kSL:dl8Tll8o5UrPKygW6pPz7tCaPsC/
- TLSH T11B825612EB140855B0F649D9B16213D46498EB4CA3529874F07ABC7AFCDF8BB33D136A
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/sv_SE/Main.zdct
- SHA256 5e957ceb39268884a84159c8715c62a868eebc67ffd0850f716a35f1393fb270
- MD5 ae0e97099d5cece119ec741bad2b3728
- SHA1 3d10bb21e7e4c3f3a58e095b86b3953c03098858
- SHA512 3258a2383f413a278b4901eaf6340fe17344e8e44a939ff1bb464ba216f9743b9e030da31b57b085b0a410b35fd2c12f96fb879480f0005247cb5386eac4100f
- TLSH T121411340B7EC1B2EFAFB2B357DB543615DB5FC85BC79E60E01001A5C093A984A8B4B66
- MD5 SHA1 SHA512 TLSH
OBLRes/sv_SE/oobe_launcher.zdct
- SHA256 ea735c41e0ebf8288ef6e1dcb7fd9e00c2cf0270eab05506bfb6028e55d0d0f2
- MD5 07fb47412c0939ac2ad1dd02b3df68fb
- SHA1 03251c7e1aabc89bc5ca43f7d9028b4e28b6d90a
- SHA512 4cb871b7e4917be69bb2fe00d3f46b3aa5e62ed49ba086021298929b95115ce09f8f81567662074f1510f41a5c090f617ba004264f1ef9ff83ee969f6247e359
- SSDEEP 96:37TOFCLgrOFCLgrOFCLgd9OFCLgnOFCLgjOFCLBUOfCLgWOFCLgROFCLg1OfCL:Xys6ys6ys+ysuysqys+MsfysUysAMs
- TLSH T128913E16B3FD5609F8F32B19AAFA71802F3E7DD19979D29D2650150C0C72A8589E0B37
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/tr_TR/ConnectionFAQ.html
- SHA256 7feb4693d6e87e3debcea47c2a1cdb9c8997c4aefdda73704985f4e3e2b3ef56
- MD5 6ce2480836f738d53762df31b44656a6
- SHA1 1d83ade7b0a3910a5b9c5525a287362a7b910854
- SHA512 e3a0f75ded0e3d8ba8b87af53cd7e85f9f62f903b33e54f3162e24eeb43abc386d321aaffa428fcbed7ab44cea74d3be16b8a54884a9cf5a64cd009020819987
- SSDEEP 96:VJinMsPCH6hatUvmFDn8T3I95Nh6l9ucio5t2Tf4meO/jgRzeWjgRLYTWjgRLqbF:L4q8Tll8o5CfzIKYdqVgWbGx+3TOC
- TLSH T133323121E7190509F0B645DAB5F612617468CB49A30394B6F0767E3BFCCB8B733C226A
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/tr_TR/LicenseFAQ.html
- SHA256 fb323e39ea7472a648d00c1a7404a3afeb025411a14067b035ad8951ff349125
- MD5 83286e3c30b67bc883669f59541dbbc8
- SHA1 17c923ffa9061b7cb3b4da6b01f580c7a05b2474
- SHA512 7252eab032f5fa2d6a08c76443a9cc2938ce4ce1864345c4adc029a4ec29f7cc9d416edaea008f3bcb0ad64f56a6070b96af7e841ae6c1d922617b5db385dcd0
- SSDEEP 192:LTUO8Tll8o5UrPKygWNQYOug6icHFMz4/BBbtgQZeL:Ll8Tll8o5UrPKygWORuDicHGEBltgS6
- TLSH T188822111E7290409B0F64AD9B0A313A164A8DB59B3129475F03A7D7ABCCE4FB33C176D
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/tr_TR/Main.zdct
- SHA256 c3731ed627fa35a385afa56c55e185334616be48f0514e63ab0d6a943ccbe067
- MD5 ea8d9e6d19b15cd3bcdfd7193fa74173
- SHA1 68037a4e727f46e1d46d8386e2b412c1d1ac1917
- SHA512 39c43a30928c352da6914adadf0f1fe3468c3219291f41b0577c5e01275e9326882fc18f51e44eb461ad546507b25a0ccf73359df4c5d407b57179413794b8e5
- TLSH T12A41070467DD5B47FBF72F3128B563934BA1BCF1F834960F125162244D366C068A5BB2
- MD5 SHA1 SHA512 TLSH
OBLRes/tr_TR/oobe_launcher.zdct
- SHA256 185005fba4e1058b308ace7e00efb8468d389790378bb9b49e28b13cd4fbff57
- MD5 37804521abeb16fb891340878ca4a545
- SHA1 53f34f4dccbbc9cec1d398e76634f45d9d3ade03
- SHA512 d435593938d66891cf412f20048ecca5954b3c772e5b4a144b729c874620bb3fdee6d3711f76dad7dbeb10ff04921f3d808c80480cc21f61ac56d8a45065c734
- SSDEEP 96:Yn0GC7w0GC7w0GC7A0GC7qX0GC7e0GC7ihU0oCh7VX0GC7WD0GC7d0oCh7:HGCGCGWGFEGAGdFoQVEG9oG5oQ
- TLSH T15E918105B3F96609F5F32B1D9AF770552F7EBDE6E83586AE226012580837B8448D0B73
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/uk_UA/ConnectionFAQ.html
- SHA256 03384fe14b474dca02cf473c356df433de5dbb895ec9f9b674c1cec2d6f802bc
- MD5 ce5f0c53eb33f88713b247e8177a2cca
- SHA1 7ff972f3f584e3efcdbe0f17d7e491b4b965aee1
- SHA512 e628681ce033901ecd2f5719aca90391accdbf2d1cb7652c60f087f824bf102676d283519f2ef2d5d895e572910ddc7bd4b06d3a514145e1575ba0788affeb39
- SSDEEP 384:Wh8Tll8o5CfzIKYdagW8kDHlH5RvvCJtc:Wh8Rd5C7EeDFLktc
- TLSH T199424332E7180949B0F649D570B612616464DB4A930364B5F037AE3BFCDF8B737C16AA
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/uk_UA/LicenseFAQ.html
- SHA256 6941ca5904160347834095432c7c54bcdf597fd10ed7a155d04a17a6871aa146
- MD5 36f5371c7c4380aaaa0f0d855269fe9d
- SHA1 f08e6f2b69b34d6f044292b7f703efd434faab9a
- SHA512 d270080aae9f9938ce0c8c271397f746765d10b4c12dd58fc8951065601cd3c37b889edb11aaef317133d0b1d0aae0afe66aacf590819ad5a9528245f6b4963e
- SSDEEP 192:W7UO8Tll8o5UrPKygWBvJPhVdeP9evFpiPfXRwzJra13eL:W98Tll8o5UrPKygW7hPQ9upiHWEA
- TLSH T1A6821322E7280449B0B54DD9B09613642494DF4DA35698B5F03BBD7AFCDE8BB33C06B9
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/uk_UA/Main.zdct
- SHA256 264d1b8d05eb495681646f6f4aae1e845ebfc81ced2acbab215e1baf9f45b2c0
- MD5 632a670978290313d55f2985ea0baf44
- SHA1 60aae2905936b7ef343eca1fef82af4f4237b9cf
- SHA512 1e9b1e2d0ce819d5cac40141addcb3cb0e4ed37dcf8a3cfc7518ba3dbf62100eb80253517302134798cc5e39c5cb5f744f1942ae273d6fc2d9777fd0870a791a
- TLSH T11D51BB0FBAB8E604EB9EE3754E52CADB1074BB0023A946CA624F7E30543E67133516C7
- MD5 SHA1 SHA512 TLSH
OBLRes/uk_UA/oobe_launcher.zdct
- SHA256 97d7cfc3d089af050f2d39473c45b04ca5a980445cd55e926d995efb6a30f5b9
- MD5 f7bf7d15ea282fbccf3061f45bb748a3
- SHA1 167a77f68d551a4f7ad7c82f95b81dc99379fbf5
- SHA512 e0eea6efcfec0425b47e32b9b3ca85e0ddf059a72115cbadece46783df9f62a2344d3a89c48ba6f7665a4598ba3817f45d48e83e4b954b343114da7e746c8264
- SSDEEP 96:WfND19CI4019CI4019CIu8Y19CIt19CI019CmH9CIJY19CIG19CIvtr9C:SB2K2KcrPUpyqlT
- TLSH T1D0A1040BF6F8A604F6B3B3195AB370C52B3EBF544764C2C8311F65181426B346BA8B67
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/zh_CN/ConnectionFAQ.html
- SHA256 0ad1c9866ce567352444b5afdcd8048ced98ef1384d3d30015dc167c63c3aa3a
- MD5 5c2740d52ee7cdc266065daa1ef0cf97
- SHA1 c590279852c23eb504c840c15717c3b9fe796b61
- SHA512 20cd4d1d0d5be53a14ad01feee69a89bc36e328b6787413357b00410a9ef936ffa30921b7ebe1c82fd6ee7b60e856753fe51a406d3d092c16523bed1daa73876
- SSDEEP 192:p5q8Tll8o5CfzIKYdqVgWe/D90td8hRLu:pU8Tll8o5CfzIKYdagWFD
- TLSH T1F9320032E7190519B0F695D5B0B312507458CB49A30364B6F077BE6BFCCB8B767C229A
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/zh_CN/LicenseFAQ.html
- SHA256 cbabc7c287a76be346a904c1cdb6612b80ecbd458df6bf183a1f8c4801b764ee
- MD5 8f843d8ee8bf8d6bc72fef59ac2c5783
- SHA1 73e7a5b8524d292d82fa52f3efa2c30fb76e4333
- SHA512 7d3ea32923c61f2d62eabfe7cc4a38da5d18d960ff451f6c8e3fbccf99e6a9fbda2ae11d9e94c3a62dc908f46af8f5e480aee4c9fbf61df562f20eb29a54025b
- SSDEEP 192:puUO8Tll8o5UrPKygWet0LHUWU7r/QX7tQv3uW:pK8Tll8o5UrPKygWe2LRLtc
- TLSH T198720F22EB290405B0FA49D9B0A612946454DB4CA3069475F13BBD7AFCCE8FB33D13AD
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/zh_CN/Main.zdct
- SHA256 dea6a42f75ec633be2bd1515e1515f55d89104d8c1fac295a49d76c7f7c5bb83
- MD5 658bcc1f0bb9e615bf83c2358f3bd71b
- SHA1 e64d35e5f8a5a8474a08a40f56edf06a106871ed
- SHA512 eb372363582dc41fc39708e7e44e10fe2f99513d3fcb1c8274b5ebeec5e8448a012b72fcfe988b0e898d2f80592c057309e60fedd4d9b88aaba3fd404b6bf333
- TLSH T19B21DC2133E15B12D7973332E56A938BE376F811B959080BA588DB905F0FA8272527CB
- MD5 SHA1 SHA512 TLSH
OBLRes/zh_CN/oobe_launcher.zdct
- SHA256 98cabb3267cac0ab1c594e5fb339ab9e9666214d897bde1a8fc6ede6c0218d76
- MD5 90f64ecdb0f096f65e61013f4069903c
- SHA1 5b4af1a31e79a8f68d384631ab78145b72598c0d
- SHA512 79e76401423713b04d45da95998a5316dbaf0838746b2f15fafaaf68f290ed923bb4aba53ebd901b4590d05462a50ab3b4f33151ddb51d94fa15d6cd8541ec91
- TLSH T158515D06B6F86609F5F3732F6BB7B4846F3EFE55506482AA2A30490C1927B454C85B37
- MD5 SHA1 SHA512 TLSH
OBLRes/zh_TW/ConnectionFAQ.html
- SHA256 93f8aa1c3d53257ab6eddeb543fba8b024f0a99078629905fda55f5e63b2dd1a
- MD5 988f358398bc118540499638ba979d62
- SHA1 2ac7f13cb613e715b8030f0b86257b03af86f55b
- SHA512 5408c53bfc985666373603e396d156d9b4807281c9712b132390b19494a02fc1fd1fa6043a85494301ea61dd98d9e36ee9c5423e12a00ceb84ed162031cce337
- SSDEEP 96:VJinpsPCP0hdtHvFKR8n+x9LEZ6l9ucio5t2Tf4meO/jgRzeWjgRLYTWjgRLqSBP:mAE8n2l8o5CfzIKYdqSp82eV/RJaF
- TLSH T1A7322031EB19050AF0E359D5B0B212616468D789930394BAF0777E7AFCCB9B733C126A
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/zh_TW/LicenseFAQ.html
- SHA256 83f30bb1a993fb070736b390c85f355af4f7d12e73ba489274bd6199f5a9fd8a
- MD5 522a9bd77691d5677fc3d41959404641
- SHA1 252f51c6ec3154cf62755c813741ecff54e8031c
- SHA512 18cd6b9f1bd4310cbbee20f600b62255a9ea33c15a63f2276130f48f0a9e0b211c16d1b81adfbafcf526e389f909a426f478aca7181c4a1f45b6ae6746e0f6bc
- SSDEEP 96:VJinpsPC+0hdtHcdFjjF8n+x9LEZ6l9ucio5tkPlWjgRLPeWjgRLpBv8Mr6RTNwm:mNYB8n2l8o5UrPKpp82cqGt/9oK
- TLSH T15672E122EB290405B0F649D9B1A212A46464EB4DE35254B5F07B7D7AFCDE8BB33C0269
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/zh_TW/Main.zdct
- SHA256 7094649957148bfcaf4a700c30d1ca54f04d931cc79792828b0e0fd5a335a863
- MD5 f601e048fb8bf6dea6e2402c05bb5f60
- SHA1 113150994bfb97dd83f944d29a241fdbe4118605
- SHA512 ced6807c1ac20861b06ffc65a6471f11c01a3e7c552266b910974d89cce8bdff325affa47044488d0ecfc417b54475859034b56ea323c44b3e94cd14a88f36c0
- TLSH T11E21AF0433E80F56EFA7733A61A693ABC571FC01BADA0A0B6184C754CF5F98134907DA
- MD5 SHA1 SHA512 TLSH
OBLRes/zh_TW/oobe_launcher.zdct
- SHA256 b9067b2e2a01746b4a8e9952ae095889d621ff15ba5e35e50402132916f79a17
- MD5 f044d0241f854d4a078dc0ebae71e34c
- SHA1 80b4e93dcb61f7c19ed824c4f5607d37aff8341b
- SHA512 368072115ab778aa4060345469bceefd3af072c8271af4953f1ad0b4bc28c4e50442a402b2537d675e27e4d5eea5801f2e615c974c042b5bda67f299ca3c382d
- TLSH T1D461510AB2FDA649F5F3732A5AFBB0913F3DBEA95464C2ED2234460C1817B150990B37
- MD5 SHA1 SHA512 TLSH
PWAFlex.swf
- SHA256 6622b80883566082551c280cafa6e9b32ff6d70237cb8ffeba29257777ed0f9a
- MD5 c9b2eb3798b4227bf3323f4616c832be
- SHA1 e07cdeb705c09136b66487f2b33f21813d0ee5d9
- SHA512 b70299211d0012eacf13f60088c3a9bc57f18a85c21576f2aa465fdb87a3c71e54859e1ea27a195abb5fa5346ae6b63b817082c02adb9305aa97b3fd68c4d6a7
- SSDEEP 24576:bngUIU4D9TjvP17hT+Ph4RjOcgKCKFzSZCv9cHWfiZnVi:bngUI/9HNVSPh4dOSCqSZa9cBnU
- TLSH T16A2533A9CE361B59A0C77395A24B6CC58B80D2FB09423902F05456AD2D8507FCDFFA9F
- MD5 SHA1 SHA512 SSDEEP TLSH
PWANative.dll
- IMPHASH 5e8f605ed2c42b8108626c6a95e590e5
- SHA256 05ab097d5a51329ff32d320311e7f36c401d0541361325df379246b948df86b9
- MD5 d64acc955bd5b639719d20b79bc5860b
- SHA1 93d01b1ebd1201afc6d8533134ad71e76ba0a55f
- SHA512 d2f44a557c27a8f6160b5747768cdb0a88aa7770b0002822847075970b460756b1450df1dc30138458f289818a7f83e0edfb55258840e67ba7fc70f3dd9947da
- SSDEEP 12288:IB6be0jzZZeZs7ili7egGu7msoSCZQZcFR7lYnz6R+LpG3/9yj8:7bVZZ0s7iYGuYSDcFJlYn7Lp6k8
- TLSH T1AEF47E52AAA1C139F0EB12B1967C1FB74C39FD32173584C772C459589E70AE2AA3D327
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
8d:67:8e:b8:49:a3:8c:0e:09:fa:64:bd:71:32:ed:ab:da:d1:02:7c
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Chains
Sep 20, 2012
CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Subject
CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US
Serial Number
79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 1, 2012 - Dec 31, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Serial Number
68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 19, 2012 - Sep 19, 2013
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
1
Major OS version
5
Entry point
504379
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\oobe\3.0\c3p0\dev5\target\win\Release\PWANative.pdb
kernel32
WriteFile
MultiByteToWideChar
ReadFile
GetFileSize
WideCharToMultiByte
WaitForSingleObject
CreateProcessW
GetModuleFileNameW
Sleep
GetTempPathW
RemoveDirectoryW
InterlockedIncrement
InterlockedDecrement
lstrlenA
CreateSemaphoreW
ReleaseSemaphore
GetCurrentProcessId
CreateDirectoryW
SetFilePointer
GetDateFormatW
GetTimeFormatW
GetLocalTime
FreeLibrary
GetProcAddress
LoadLibraryW
LeaveCriticalSection
DeleteFileW
DeleteCriticalSection
InitializeCriticalSection
GetCurrentThreadId
GetVersionExW
AreFileApisANSI
SetEndOfFile
UnlockFile
LockFile
GetFileAttributesA
DeleteFileA
GetFileAttributesW
LoadLibraryA
QueryPerformanceCounter
GetTickCount
GetSystemTime
GetSystemTimeAsFileTime
LockFileEx
GetTempPathA
FormatMessageA
GetFullPathNameA
GetFullPathNameW
GetDiskFreeSpaceA
GetDiskFreeSpaceW
CreateFileA
GetCurrentProcess
SetFileAttributesW
CopyFileW
lstrlenW
GetACP
GetFileInformationByHandle
GetTimeZoneInformation
CreateFileW
GetLastError
FlushFileBuffers
CloseHandle
LocalFree
FindFirstFileW
FindNextFileW
FindClose
EnterCriticalSection
SetEnvironmentVariableA
WriteConsoleW
SetEnvironmentVariableW
CompareStringW
IsValidCodePage
GetProcessHeap
SetStdHandle
GetStringTypeW
LCMapStringW
GetConsoleMode
GetConsoleCP
HeapSize
GetOEMCP
GetCPInfo
GetStdHandle
ExitProcess
HeapDestroy
HeapCreate
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetModuleFileNameA
GetStartupInfoW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetCurrentDirectoryW
GetFileType
RaiseException
RtlUnwind
HeapFree
HeapAlloc
DecodePointer
EncodePointer
HeapReAlloc
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeW
FindFirstFileExW
GetCommandLineA
IsProcessorFeaturePresent
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
TerminateProcess
PeekNamedPipe
user32
wsprintfW
advapi32
GetNamedSecurityInfoW
SetNamedSecurityInfoW
AllocateAndInitializeSid
SetEntriesInAclW
FreeSid
shell32
SHGetFolderPathW
SHGetFolderLocation
SHGetPathFromIDListW
SHGetSpecialFolderPathW
SHCreateDirectoryExW
ole32
OleRun
StringFromGUID2
CLSIDFromString
CoTaskMemFree
CLSIDFromProgID
CoCreateGuid
CoInitialize
CoCreateInstance
oleaut32
VariantClear
VariantCopy
VariantInit
SysFreeString
SysAllocString
GetErrorInfo
shlwapi
PathFileExistsW
PathIsDirectoryW
PathRemoveFileSpecW
PathStripPathW
PathRemoveBackslashW
PathAppendW
StrToIntExA
finalizeApplet
freeMemory
initializeApplet
processMessage
Name
.text
Size
566KB
Virtual Size
566KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
114KB
Virtual Size
114KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
27KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=5, id=171, productName=VS2010 build 30319, version=30319,
count=2, id=152, version=20115,
count=30, id=158, version=31118,
count=15, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=188, id=1, productName=Unmarked objects,
count=160, id=170, version=31118,
count=70, id=171, version=31118,
count=1, id=155, version=31118,
count=1, id=154, version=31118,
count=1, id=157, version=31118,
RNResources/Dictionary/cs_CZ/stringTable.zdct
- SHA256 9c623dcbf491bbb77bde3eda26fe83501988006b0e4e43b48e1607934e5d166b
- MD5 1343403c9fe3628f008daf3d2a96ce00
- SHA1 0c2c442139ba236b0c348c3a5e564626eb26e1c7
- SHA512 e3836e403d44e961cc579a5bfce34c3e2e1a9547d7c1d26935a3fe3b0b6ea146fa80f525d8fc99274e6cf34535cc0fc88715fe1a981991ed2b26aa819a4ce0c0
- TLSH T1F0F06D022BF5069AF3FA2B247ABD1CA816BF3C655A38C68E1455424E48F4B90D290767
- MD5 SHA1 SHA512 TLSH
RNResources/Dictionary/da_DK/stringTable.zdct
- SHA256 3be23cc20941eecaa5f7d3d98a9f7288ca615cd898a65254a3f2120fdbd61956
- MD5 cfeca6867f2558774c796940d25241d8
- SHA1 8ff2751522ab0923b1e50cb3191df1fc8859bf07
- SHA512 bb890d8cbc7d7433908ce9bf9a878bafba20cd0866ffb6eb79f16d168baa7ea2669497ec9181a7f09680970376e735729b5c25d47adf06a476246cfd7b56c94b
- TLSH T1A0E0860217F5864DF3F21720267D6C5917BF7C9A6634D45D1194150D4CB8B81D690BAB
- MD5 SHA1 SHA512 TLSH
RNResources/Dictionary/de_DE/stringTable.zdct
- SHA256 10934bcff7f14aab6da5cb9c6abaa3d690a5b7cebc4bb305cb739a145b7976da
- MD5 55657430710168bbc0583014e1e86233
- SHA1 0816361f34f7b1fbc43bb67508e86206a0428974
- SHA512 5c0a1d7c0c3a9f4720b69ef2d6f6bac4ff19542de62df5772f1f5e929998685ffb350bd55b667efd1f49e8fe4bd542d0fd4d12d581fc1edad85acf22bf184ca3
- TLSH T1D0E0DF024BF60559F3F227247FBE5C690B7F7CAA2938CA5D0448090D44F4A80C990B7B
- MD5 SHA1 SHA512 TLSH
RNResources/Dictionary/en_GB/stringTable.zdct
- SHA256 f530b3336e21d1a0f60f2ce1c8b1f2f42820225e9bd0937961a4784a8615cb19
- MD5 ae8aaffb4e2667774abee147715adcd3
- SHA1 0b6a6cdc70e979cc35efde075d2294d652dadcc4
- SHA512 647c28fb722070f53c9881672710379f2271adec0c80d111de00c4b1ae362aed54a91bec451b684e216b309e46b933058cf6f2edd4c985f01a5fd3248ac66502
- TLSH T154E04F0267F94149F3F33A107B3D6C791BBF38965A38D18D0055054E48F4E80C950B67
- MD5 SHA1 SHA512 TLSH
RNResources/Dictionary/en_US/stringTable.zdct
- SHA256 f530b3336e21d1a0f60f2ce1c8b1f2f42820225e9bd0937961a4784a8615cb19
- MD5 ae8aaffb4e2667774abee147715adcd3
- SHA1 0b6a6cdc70e979cc35efde075d2294d652dadcc4
- SHA512 647c28fb722070f53c9881672710379f2271adec0c80d111de00c4b1ae362aed54a91bec451b684e216b309e46b933058cf6f2edd4c985f01a5fd3248ac66502
- TLSH T154E04F0267F94149F3F33A107B3D6C791BBF38965A38D18D0055054E48F4E80C950B67
- MD5 SHA1 SHA512 TLSH
RNResources/Dictionary/es_ES/stringTable.zdct
- SHA256 f81f26127ff33cfc740d0ff5af7538c754ba896d7c68b6c5762cb25da1e35df4
- MD5 3f3bedf19ef2ab8669b6d64168664875
- SHA1 904d19a3f4427e074b2c1955b7989e78918f5f6a
- SHA512 7727943ac9c1845828a4c61fc4893b453663ef48c3ea74fb499b2c4200b14d0843eb6162fe534d5474a7b13257d7b1551c17bfe14a2813292a4fbed760472057
- TLSH T1E3E065021BF91245F3F33B10AA7E1C688E7F38969D38D04D1084040E98F4E80CAA0B67
- MD5 SHA1 SHA512 TLSH
RNResources/Dictionary/es_LA/stringTable.zdct
- SHA256 f81f26127ff33cfc740d0ff5af7538c754ba896d7c68b6c5762cb25da1e35df4
- MD5 3f3bedf19ef2ab8669b6d64168664875
- SHA1 904d19a3f4427e074b2c1955b7989e78918f5f6a
- SHA512 7727943ac9c1845828a4c61fc4893b453663ef48c3ea74fb499b2c4200b14d0843eb6162fe534d5474a7b13257d7b1551c17bfe14a2813292a4fbed760472057
- TLSH T1E3E065021BF91245F3F33B10AA7E1C688E7F38969D38D04D1084040E98F4E80CAA0B67
- MD5 SHA1 SHA512 TLSH
RNResources/Dictionary/es_MX/stringTable.zdct
- SHA256 f81f26127ff33cfc740d0ff5af7538c754ba896d7c68b6c5762cb25da1e35df4
- MD5 3f3bedf19ef2ab8669b6d64168664875
- SHA1 904d19a3f4427e074b2c1955b7989e78918f5f6a
- SHA512 7727943ac9c1845828a4c61fc4893b453663ef48c3ea74fb499b2c4200b14d0843eb6162fe534d5474a7b13257d7b1551c17bfe14a2813292a4fbed760472057
- TLSH T1E3E065021BF91245F3F33B10AA7E1C688E7F38969D38D04D1084040E98F4E80CAA0B67
- MD5 SHA1 SHA512 TLSH
RNResources/Dictionary/es_NA/stringTable.zdct
- SHA256 f81f26127ff33cfc740d0ff5af7538c754ba896d7c68b6c5762cb25da1e35df4
- MD5 3f3bedf19ef2ab8669b6d64168664875
- SHA1 904d19a3f4427e074b2c1955b7989e78918f5f6a
- SHA512 7727943ac9c1845828a4c61fc4893b453663ef48c3ea74fb499b2c4200b14d0843eb6162fe534d5474a7b13257d7b1551c17bfe14a2813292a4fbed760472057
- TLSH T1E3E065021BF91245F3F33B10AA7E1C688E7F38969D38D04D1084040E98F4E80CAA0B67
- MD5 SHA1 SHA512 TLSH
RNResources/Dictionary/fi_FI/stringTable.zdct
- SHA256 9f44ab523bad0a4b47209df507b07e24511f2d3ec07a30401ecc9c556fe3b7f6
- MD5 e0746c79d5d567b0d15b3775d8b9e707
- SHA1 e9c4a9399cdc5679912e95bbba0afa6215acc198
- SHA512 94a96dd1a6f6c1f077aed918f15f969e881eb3cf3fd0daa3f81526897ee1026d5103ddca798cff36bb06bd4cf7bd4f41458628da796fffa8451041bdebdb1218
- TLSH T105E0920303F94769F3F26B147B7D9C680A7B3C561FB9D55D0944144C84A4990D560B7B
- MD5 SHA1 SHA512 TLSH
RNResources/Dictionary/fr_CA/stringTable.zdct
- SHA256 6110946cf7543309536a57f869f64846e246d491303c0b9a987b3fc27e47ee6d
- MD5 004e692331094347dcaa8f956ac33fb6
- SHA1 4368830a382b98ef1a18bc45f06dbb3fd0376b31
- SHA512 2657e6df87a3e4a554ffb91de298bf609722edb228f12352a44f8e36559bfa2fe97f2957d7c1530976b73231ed42593db35b3ac73f9720c4f17933d3aac6a71c
- TLSH T1DFF06D02A7FC1645F7F32B106BBD6C284B7F389B8E38C09D1469658D58B5E50CAA0767
- MD5 SHA1 SHA512 TLSH
RNResources/Dictionary/fr_FR/stringTable.zdct
- SHA256 6110946cf7543309536a57f869f64846e246d491303c0b9a987b3fc27e47ee6d
- MD5 004e692331094347dcaa8f956ac33fb6
- SHA1 4368830a382b98ef1a18bc45f06dbb3fd0376b31
- SHA512 2657e6df87a3e4a554ffb91de298bf609722edb228f12352a44f8e36559bfa2fe97f2957d7c1530976b73231ed42593db35b3ac73f9720c4f17933d3aac6a71c
- TLSH T1DFF06D02A7FC1645F7F32B106BBD6C284B7F389B8E38C09D1469658D58B5E50CAA0767
- MD5 SHA1 SHA512 TLSH
RNResources/Dictionary/fr_XM/stringTable.zdct
- SHA256 6110946cf7543309536a57f869f64846e246d491303c0b9a987b3fc27e47ee6d
- MD5 004e692331094347dcaa8f956ac33fb6
- SHA1 4368830a382b98ef1a18bc45f06dbb3fd0376b31
- SHA512 2657e6df87a3e4a554ffb91de298bf609722edb228f12352a44f8e36559bfa2fe97f2957d7c1530976b73231ed42593db35b3ac73f9720c4f17933d3aac6a71c
- TLSH T1DFF06D02A7FC1645F7F32B106BBD6C284B7F389B8E38C09D1469658D58B5E50CAA0767
- MD5 SHA1 SHA512 TLSH
RNResources/Dictionary/hr_HR/stringTable.zdct
- SHA256 c85427f9079de1967eedadeba99dba4085b0744d9f0bc2a8ffbdfa9d1c8c6dbb
- MD5 e3bfdbf13a50074ed9f8390b5602a334
- SHA1 fafc5beead9431537cb2caf8d33b42a1b6c3aedd
- SHA512 b6b3622d9885e52bb809883077d774dac175adc898191b0736fb5aef8b1ee25bb5634451afc730effbe8f9c77a709431241b48e63a51936cd95b0d559515a2d0
- TLSH T187F0ED0257FD4584F2F67F14A7B95C69067F7C69AA38C14D4190054D88B4ED0D5A07AB
- MD5 SHA1 SHA512 TLSH
RNResources/Dictionary/hu_HU/stringTable.zdct
- SHA256 e677cfcc503f40e442d5243e7b0e58bd5266767aab4272197f335855628ee785
- MD5 99254b07bcf7132269b92554f748d108
- SHA1 11154d4cd89ff2fa4a05f5bc9d6ac17da9624fa2
- SHA512 5cb5e62b6d17ec33736d418e8c4a66639ad9e9c15b36d6da6392fe519a84e43cbd6733bab7798ea382fe78ff9f487adb333b1f808c669de6e958ff2602169323
- TLSH T192E0924243FC064AF2F76B21AABDAE59023FB824863CC14D5144160D4CB0AC4C550B67
- MD5 SHA1 SHA512 TLSH
RNResources/Dictionary/it_IT/stringTable.zdct
- SHA256 f1cecfb9cd48f9494fa0db6a253278a2884fe73e28d1780ff2b492bce1223580
- MD5 329aec272e7da41553b7d027e0ed839f
- SHA1 2df033007a9935587b4ceb41638bd81034ae32c2
- SHA512 c8a11e0dcf7e5e6f615213e760ce060245585088f9bf3d4f0c6248268ff8781c641dfff961c26ea8f761090f4079eba888d07850d67c5a55a5704b1b2ca14ff6
- TLSH T1E8F0D80117F81149F3F67B146B3E5C684B7F7D6A5E3CC04D0454044E54F4D50D9A0767
- MD5 SHA1 SHA512 TLSH
RNResources/Dictionary/ja_JP/stringTable.zdct
- SHA256 d5c0bb11c4c5bd9852a036eebee5288ce93f79c7dd43ca7d6d7af37b454a3181
- MD5 7e1846494b51ac2f9ac4626149176086
- SHA1 d5b39b454c66d2a2c84d09c4ce1828f9a5bbb892
- SHA512 594374a13fc68671d017fde8d99f032eeedbfcdfa493e395cd7bfefa6934e07603f8784e1ecd4b3432ea08f4f456dc007bd6ba46494417aee033ebe4007b5e76
- TLSH T13CE02E0207E8048DF3E0662A13BEACBE0BFFB4460A3CC4A910D5010D44E8A80C2A07AF
- MD5 SHA1 SHA512 TLSH
RNResources/Dictionary/ko_KR/stringTable.zdct
- SHA256 d43a249da31c47770a71138cf924d2785cdd5d7dd6b65c87d24833ec70b1d3ee
- MD5 8425f3ce7b93deee9b82823286d8d43c
- SHA1 e4dc3387e6661c841dac4e3019254c9b81fae0b6
- SHA512 d61da55a3f75779a2bbbdf5bc5bb2dc969e34fc127f0b8c5fec6367848395f864cce13cd6d6211d2cc63324f7e59af011dc7aa101de3e6746bf9252513a194eb
- TLSH T18AE0CD6257F54845F3E1D717137F9CA907BF34180729D05F94401A0E40F0AC0D1503DB
- MD5 SHA1 SHA512 TLSH
RNResources/Dictionary/nb_NO/stringTable.zdct
- SHA256 b8d6b814dde112411c3d021026fecc1109d753f902b9ecd6f35d38b40291ccc1
- MD5 457c42a2411b7d61e79d9bbebc250fbc
- SHA1 9284a763da71c28fc71e5e0061135a7bff2e354b
- SHA512 364449c1aefd8be89f54b1222523afef4622dea7f8081dc523aea3cc50b7adece04727fb61f371b7b78819c8db12bae0ad44066bb1a551eb2cc37ff5a273f579
- TLSH T1F9E04F0243F5414AF3F326243EBE6C6C067F7C999A38A55D0190050D18B4AC5D2E0B77
- MD5 SHA1 SHA512 TLSH
RNResources/Dictionary/nl_NL/stringTable.zdct
- SHA256 0ff938e7c28e8e55e4fcfe6e765f47f042112855f0f144dba6bb5cd5a8ca5896
- MD5 8e7721f3895e76c322983a6913130279
- SHA1 958145ae60280babecfaf81bb4679fbe26b29b63
- SHA512 308ab2bee089a48ab7946e5afce8502c0b6702a8271a1d8a54334e428cb940e07c5dd1c3c4448680d9d84d8bd2641571a42a920c5d93f37f506b8d230189a91b
- TLSH T1DAE01A4207F94649F3F257256FBA2C68073FBCDA6634D49D0590154D48B5E80C6807AB
- MD5 SHA1 SHA512 TLSH
RNResources/Dictionary/pl_PL/stringTable.zdct
- SHA256 a36873918825cb5ff6c25fdbfd0d416e254bdb7465f78cb27969321cbaf67533
- MD5 4034159898cd7fbe289f00dced1576c3
- SHA1 49918bdc2f974261625b5b23f06a869aa17ac115
- SHA512 ef82165c3946c7fe20ef4b9efd20c2be5d5cc9d4a46d681947b2b6d0de734f04e8207fce3711199e7922cc880ae7d2c370056c65b068de4c3977204fb66644cf
- TLSH T1E9F09B1303F41685F3E61F14E67AAC5C473F78296738C08F6461600D48B4ED4C550B67
- MD5 SHA1 SHA512 TLSH
RNResources/Dictionary/pt_BR/stringTable.zdct
- SHA256 9ff9393941e7d0b140c0a593c8f8b1d96ab39117f1af347384905fda6577b212
- MD5 a9f275eef37122af44f2423b292bee81
- SHA1 2d66eabb6ef5bb3f495d0727e647d9b3dfbf555e
- SHA512 554d45cfbb9ade2d3819ecee9a66ebf60f9b5c5737297e650f1ece9940bb1aee4b068b7de5cfc2d491172a05946c9ec9e16c297c85f1045880cdf9a0b2c07408
- TLSH T1CFE065026BFE1286F3F32B10AA7D5CA88FBF38566938D05D0484050E88F4E80C960767
- MD5 SHA1 SHA512 TLSH
RNResources/Dictionary/ro_RO/stringTable.zdct
- SHA256 ff8e1e8e4e7f89b71d7d859256795dc99a0a83be2d8b294951620b1836154c24
- MD5 0ae67189920986f0839f459bbcbf465c
- SHA1 768c4878e020ab6bd7a3d822d05ac53c8b836c6a
- SHA512 8719f41ad78030f7630ef529d7d45cf5e1475054801c72a6dec3c4551d38f849ae2eec3101d7265d330af2e74c9c4c8fc4c8ae8c8c7dbd8ed6f6a13e3b09a1e7
- TLSH T19AE06D435BFD2606F3F32B247BBD6C680ABF39165A3CC15E1050050E48B4E84CA90B6B
- MD5 SHA1 SHA512 TLSH
RNResources/Dictionary/ru_RU/stringTable.zdct
- SHA256 6e808d1b4f74f07df14d0afda70da0999fabb439f095a04bec633877a99c13ab
- MD5 49c6ac10605762bd03e842300816b668
- SHA1 a20601f4b929f2a1877a7464067dc93c0a6beff1
- SHA512 3342b468d763de9e158b3e1f971103cf6967730e06babf7c2a227b07edb2e71530ab49e33592cab15d0fae8d52af1fa8779dd01e5cfa3b8154f3cd34edc29b25
- TLSH T1F3E0E5079BE88144F3E52304577A5C9A02BE7B180338C0CB808F4A1E00BC970E2017A7
- MD5 SHA1 SHA512 TLSH
RNResources/Dictionary/sk_SK/stringTable.zdct
- SHA256 0107bcb0ee90e2ad794dc0318744081b024378ac47a734e34d2d0f4c9b54019e
- MD5 703b48235ba6170151f4f03c7a12ae80
- SHA1 01f618dc3df277a4c6bc0d1c91e2cbfd475f35c4
- SHA512 0463f60dbe0ad626c2dc7bef4d238a05df2a1a5ff85ff27f772176c8f306088e76958cd21fb17876695d2919e378a52877b81cc3f93982c5f5cc04fa5d0a7b29
- TLSH T1BEE09A2307F80586F3FA3B18A7BD1C280ABF38658638C04E6484018E48F4B90D6907AB
- MD5 SHA1 SHA512 TLSH
RNResources/Dictionary/sl_SI/stringTable.zdct
- SHA256 60f95a8f1ebad7d739a539a820b0cf3196c39a219a1cefa2ffa20c4ad4178bbd
- MD5 8776b9dc8ef57f3656477589fa2c2065
- SHA1 0eba24f46f006873e3e1685ac3c7ebd43b464f9c
- SHA512 5fea1b79c50881979e0232adb3cdcaa60a8273eafe1a71ff7216c795acc655418fbb41bac783e6cd8e4e71271376762f7eb2ae6e3787d3bafdf099f58faf70bd
- TLSH T1BAF06D0227F90159F2F37B14ABB91CA807BF78759B38C14E00A5024D49B5EC1C2A07A7
- MD5 SHA1 SHA512 TLSH
RNResources/Dictionary/sv_SE/stringTable.zdct
- SHA256 502d67dabd12547e40aeae7d24fec0e08d517f577d033188001453eedb178d14
- MD5 74c3611069197058fd66b87d49618096
- SHA1 2febcd87500194c15b86fac5506511f436bd440d
- SHA512 e13d24b94fe690a708f068ea6736911a78a30d44c0c7b6bc84661867d0d79562c2f42ad7bbb79b2c41a0230ee4b480c92e481aec96e5d157eed29ba5a4ec4723
- TLSH T1D9E0D8124BE9854DF7F357246B7E6C29067F7CC52A79E55D0144094C0CB4B90C690B77
- MD5 SHA1 SHA512 TLSH
RNResources/Dictionary/tr_TR/stringTable.zdct
- SHA256 30a2fdf5ac0f590f4158f50f541ef647237d2ee2cae2cb9c67bdb5f238656e66
- MD5 897ac3c3435eb0aaa3dd47e27a41ba44
- SHA1 1914d2185f2097eb8740752f82a651808b1cb28e
- SHA512 04c97b5c3fce1096ef1d992ee341d2e2aa43324e87bca940ff65d461ff3ce26040d1257d4f52923505971ec326e07b8267fcbf2b0a1685f76308b8d360f773dd
- TLSH T1D5E0920207E91549F3F31B107F7C5C660ABF3C746938D01A2191040D48F0AA0CA60B67
- MD5 SHA1 SHA512 TLSH
RNResources/Dictionary/uk_UA/stringTable.zdct
- SHA256 3a51428ddbca7c718cc11c008e9f0eb038674b61f692d93c665f24c5c369df8b
- MD5 dcf86e756dda43f734ff39d37d7964c9
- SHA1 5253e8bb4545136457a28030b1a7b2bcced36497
- SHA512 61f1e309a26b4e7c32dc7ee9e92b133397380d20d5ba5fd9b79fbe9736e996cccf48a787d3cb56360e9e949ffd84f5bb363c628b0caf6ad3064dee7003a339db
- TLSH T148E02B034FF84148F2E16214977A5CD941BF37540324C089214F1A1D14FCEB0B340797
- MD5 SHA1 SHA512 TLSH
RNResources/Dictionary/zh_CN/stringTable.zdct
- SHA256 dd61bc01ba38b512d479581062b1d417b2ff3300a8e6c2b784a50c87ff6dbc37
- MD5 7c12a63cd5473616330f254a4ddb87e5
- SHA1 f70ea5b39732f8d739c35f170fca4a920b26b9bf
- SHA512 26ddb5dde69961214f856f13b0524d7848b517fbd549da8869298bd69434ac4841359e07f1832e072e5f6bacf0c9502dfdd8adf6568c4be695923f7e60f05a69
- TLSH T1C1D02E0187FA808AF3E23A0013BE5C6C07BF74050A2CE0EE2491020E89F4990DA203AB
- MD5 SHA1 SHA512 TLSH
RNResources/Dictionary/zh_TW/stringTable.zdct
- SHA256 b15415c8dfb47afb2eb0c327f5fc5a96f5a42bf53b9bcd3305167ff8d0fdcf70
- MD5 65181268855559cad547489d01427fba
- SHA1 cda7cb06315e0904807fe91904cd8324abe9e596
- SHA512 b6a096fd4e5d081ec7f33b762ed285b33b78eda1ebcb4add95f0deeaae6a73c24c5a61c4fa2708549cc5209bb7c0573cd7517ff7c4560e90e36343a9cbcf6a27
- TLSH T159D02E0283F9008EF3E236081B3D2CBE47BFB9080A38C0AD1091000D96F8A81D2223AB
- MD5 SHA1 SHA512 TLSH
ZStringResources/cs_CZ/stringtable.xml
- SHA256 f93ecd1f46bc329e70244399b6e7e54cf4c139c12b4553de3a125a17a0644021
- MD5 f4cd1683e8d2c43ce72544642a77791f
- SHA1 f8b31ddc62d91bb9d7c3c7f6fc7d77fa9fa6e77f
- SHA512 58249967f325fd1228f5cf3e164db895d4f52d17d03b5ac73279f8d19dc44284fdad9c20486145a315ecbcbfed6704f2e567162c4b33d55c306bbc3431916714
- SSDEEP 768:47w/nLfPbfVCPi08YHs4cGlUN6y6y+NioAOzDOKPhgLnjC:gw/LfPx308YjcGlUf8NigOKP6y
- TLSH T1B453BB5231E87F2C5486957B4AB230C8440FDCFC25B85453B69EB67B3FA0E480AFB964
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/da_DK/stringtable.xml
- SHA256 fd56a68b6ef959372f53d66ab4e41c258b2656fee242a228171ef2d15e190157
- MD5 4b68a86136254baff05b62eba5a51e06
- SHA1 ce4d6cfc978102138c2f0daa164e228c87f136a5
- SHA512 c8a24e46e57bd4cda3896ef4612515bb3bc00cf6d03bb3415983d972db91ff522bf223ff510169839110dcdde6b81460222240e2f61d5d5d84239e0ce0951fe8
- SSDEEP 768:3om6SY98Y/dYHWTQyNP+NioAOcQMn/nV6N2Y5jnjC:3jsuNi8lK
- TLSH T1BC53B99275A87F1C9846857F9AB120C9401FECBC25B46453B29DB1773FA0D880BFF9A4
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/de_DE/stringtable.xml
- SHA256 e5edbbe8760c061379b1dc7ffb9162ff4691a56f30a93928e311f63f250500a0
- MD5 9c96b780cf960071c9c16be10ccce2a0
- SHA1 1955be113b453d84f186c757b89eff05038c709f
- SHA512 db597db02a64fe95015bcf0752db06536567eb621f22841bc98601829b2a174e2c97691f7db4594380e415a22416ac007de57936e2db94a6f1577c8525abda10
- SSDEEP 768:JWX+sWQaG/EzBeAstIn+NioAOq9oPCCkAnjC:QXXWQ5EqI+NirCkV
- TLSH T19C53AC5235E87F1C5486957F4AB224C9201FECFC21A46452B29DA1773FA0E884BFF9B4
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/en_GB/stringtable.xml
- SHA256 195e09f581e2c426f14f5661afa702d4e363f1bd0b028ef534dae72635a1bb85
- MD5 9471b419acb06f81f114e51aebaeba66
- SHA1 712c695639560141e8995188473331a1d08b9581
- SHA512 44ded5f414cfba79be7b04f43ad0da50ca421b0b17141587a245155222c95870217f5abdbcbd1d8d4018896d2703f7816d1d9d32ed2e965fa9932d9f9b27db79
- SSDEEP 768:BGKeKHhScMD3AbmBbmRio/+NioAOwUabh9Uub5ZcbjJnjC:BG9cpmMUNivbMub5KbjU
- TLSH T15743FE9676987F2C188741BF1DB530D5541FACF836A86013319EB13B3B90E845AFBDA8
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/en_US/stringtable.xml
- SHA256 89b51e43cead73e8855334790ef9179fc15b7ca6f60f45fb96db612bf498abd1
- MD5 c3823f3a88b77fff1ca0f410fd80dd04
- SHA1 55bfc74f495c35b0685bd13f716b122ee401f4cb
- SHA512 4b6b7e726462de0beca26b633e86047b5aaf22ab7282f892f3eb146b187cbf3ba86cddb3e3a8b750de5d12e193059be1efcf703ac0d15365b0fc2ce3fb3c0667
- SSDEEP 768:BGKeuHhscMN3AVmBuYrZoE+NioAOwUfbh9zYbNZ+LjJnjC:BGzcJmxsNikb7YbNkLjU
- TLSH T18C43DE9677987F2C188641BF5DB530C5541FACF836A86013319EB13B3B90E845AFBDA8
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/en_XM/stringtable.xml
- SHA256 30a901f4ca89f18a96767e8729355ae08b8e6f7152a5cb75f1655e6057e8cb32
- MD5 3c450fa3b7641f6260a6e93517c9087a
- SHA1 121172fb9a5855fa31018ee43f5b224d65d90451
- SHA512 688ed8c50ef7e0cf1e0fe564729d5322db08817bb3e9e9ff532604149bede317654228f4acadc5c10a20d883b6a1a7855582fc478f0ecf0c89531876ade87fd9
- SSDEEP 768:BGKe+HhMcMH3AvmByoVDoo+NioAOwUxbh9LAbJZ81jJnjC:BGHcBmxaNikbzAbJy1jU
- TLSH T17143EE9676947F2C188781BF1DB530D5541FACF836A86013319EB13B3B90E845AFBDA8
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/es_ES/stringtable.xml
- SHA256 ba3c7167bd5e8c45aad86c7552b1871b9d2ec6538cc7115c54f0dcf8fbcc7262
- MD5 48ca575c4d685a34eb272fd378767e82
- SHA1 ad51c7cd8325c19c6f689fcf612ff3268eda1fd7
- SHA512 ebf5ce7075defbfeb982275cf80b5426ace567b06b2d2016f7bce8004eb05d5a9713e37834e52c3f344234fa4db426903f850491e039bcb1321acab731c8cf39
- SSDEEP 384:I7E10JOQYcDCSLxdG2xE5qF6D3Pb8Fa+fURolEGGn34BG9APDrgPWixBdMLAv9fL:I70KzHGe67wk+NioAOAVfdc8OvnjC
- TLSH T1BE53ED5176E83F1C5486956F4AB160D9500FECF834A8A452B28DB27B3F90E884BFFD64
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/es_LA/stringtable.xml
- SHA256 4f86bd276149c22c034eb4142bee001a5144062a150f0b6851d73891211bfa6b
- MD5 fb59217173f21916e3b30a575356cd8f
- SHA1 2b7d89237e9fec237e18c42fbcd4d2e467d56de0
- SHA512 76b556024b8e241e739d18a654e57c15508671701dd0d31009cb519fd2b3c657a292c806d5813037b01a250de691eab07ded2e1a50fc9eaa14d02f44f9fd11b0
- SSDEEP 384:IZE1vJRQYFDCSLxGZ2xE5GF6DF1b88q+fURolEGGn34BG9APDrgPWixBdMLAv9fv:IZ0BqvZ66paZ+NioAOAVfrUuOvnjC
- TLSH T13F53DD5136F87F1C5486856F4AB160D9500FECF834A8A452B29DA27B3F90E884BFFD64
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/es_MX/stringtable.xml
- SHA256 4f86bd276149c22c034eb4142bee001a5144062a150f0b6851d73891211bfa6b
- MD5 fb59217173f21916e3b30a575356cd8f
- SHA1 2b7d89237e9fec237e18c42fbcd4d2e467d56de0
- SHA512 76b556024b8e241e739d18a654e57c15508671701dd0d31009cb519fd2b3c657a292c806d5813037b01a250de691eab07ded2e1a50fc9eaa14d02f44f9fd11b0
- SSDEEP 384:IZE1vJRQYFDCSLxGZ2xE5GF6DF1b88q+fURolEGGn34BG9APDrgPWixBdMLAv9fv:IZ0BqvZ66paZ+NioAOAVfrUuOvnjC
- TLSH T13F53DD5136F87F1C5486856F4AB160D9500FECF834A8A452B29DA27B3F90E884BFFD64
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/es_NA/stringtable.xml
- SHA256 4f86bd276149c22c034eb4142bee001a5144062a150f0b6851d73891211bfa6b
- MD5 fb59217173f21916e3b30a575356cd8f
- SHA1 2b7d89237e9fec237e18c42fbcd4d2e467d56de0
- SHA512 76b556024b8e241e739d18a654e57c15508671701dd0d31009cb519fd2b3c657a292c806d5813037b01a250de691eab07ded2e1a50fc9eaa14d02f44f9fd11b0
- SSDEEP 384:IZE1vJRQYFDCSLxGZ2xE5GF6DF1b88q+fURolEGGn34BG9APDrgPWixBdMLAv9fv:IZ0BqvZ66paZ+NioAOAVfrUuOvnjC
- TLSH T13F53DD5136F87F1C5486856F4AB160D9500FECF834A8A452B29DA27B3F90E884BFFD64
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/fi_FI/stringtable.xml
- SHA256 ae01dbabef963130e7a99613d5ef349c45a95fff59ed0c025ec483376edaddad
- MD5 f8b6c8ec87f24489a1c5b3b8c52fc160
- SHA1 d7d136a0ea8472922feb24444fd8eeb9e92dff6d
- SHA512 178cc20139e7a42d9720e2bc8eb6b6d266f9ec16618d65d14c94bf09d7b21dcd687664c6c919c05e30cca3cfe738ddf313ff02ab1b3fdbfd59ab6d65f00b5680
- SSDEEP 768:ySVP31DlISUuCN+i+NioAOLPdlyUsd7njC:ySR9eSUuCN+ZNiqdleC
- TLSH T196539D9132A8BF1C5445957F4AB120D8504FECFC25B85853B29EB2BB3FA0D441AFB978
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/fr_CA/stringtable.xml
- SHA256 142b39fefb1d6204dbbfdae867bb4b9287ce8d0ab2b2158681a07578139bfd1c
- MD5 9a7050d3970a9fab4fae0d06841b0da3
- SHA1 044d4317295bedea7ab699fe8a39cf3e2eaed292
- SHA512 1c7d9bc0022d7436f71a374614345f7f7df2b6037e413495dec80e18cc673688e502da90dd8a3030aab60149c84aea464f07a58ee686ca52f1dd22cf26eff16e
- SSDEEP 768:moUsvSUzz36VEEbHbaz0FwP1mCKBm1Ll+s5810ugkbA0IyPs1/mY++NioAOaGqIg:m7/EEY019s1/hNiv5mgXT9
- TLSH T16153DD5272E87F2C5886857B5AB230C9501FDCF821746452B29E717B3FA0D884BFF9A4
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/fr_FR/stringtable.xml
- SHA256 0a63b87aba8aaf837fc68dcf6ba5f618e0057f3affa7991654c384dda782a3c8
- MD5 d8637412ca5a7d5a34e9e4f1f529150c
- SHA1 337176b4522f130a125e2f5126e9b97383dc2575
- SHA512 4c67ef3f878396740e120a7e96cd35023eb4e1e1d26556726983315cf125e6b0d1b6796548b4827b6e9f53d396dd77bf13d1d16ae0cf0734619976b7fd1f5f12
- SSDEEP 768:moUsvSUzzz6VEEbHydz0FwPUmbKBm1Ll+s5810s1kbu0IyPsf/mXB+NioAOLGqI9:m7DEEgp23tf/LNiGwb7XN9
- TLSH T19453BC5272E87F1C5886857B5AB230C9501FDCF821746462B29E717B3FA0D884BFF9A4
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/fr_XM/stringtable.xml
- SHA256 0a63b87aba8aaf837fc68dcf6ba5f618e0057f3affa7991654c384dda782a3c8
- MD5 d8637412ca5a7d5a34e9e4f1f529150c
- SHA1 337176b4522f130a125e2f5126e9b97383dc2575
- SHA512 4c67ef3f878396740e120a7e96cd35023eb4e1e1d26556726983315cf125e6b0d1b6796548b4827b6e9f53d396dd77bf13d1d16ae0cf0734619976b7fd1f5f12
- SSDEEP 768:moUsvSUzzz6VEEbHydz0FwPUmbKBm1Ll+s5810s1kbu0IyPsf/mXB+NioAOLGqI9:m7DEEgp23tf/LNiGwb7XN9
- TLSH T19453BC5272E87F1C5886857B5AB230C9501FDCF821746462B29E717B3FA0D884BFF9A4
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/hr_HR/stringtable.xml
- SHA256 0620b2167e20401b56ac24cbce1f36dc82ed37dd67858280cb73a4c8cb1b2e86
- MD5 a06d007a26c94e34bf5c1fb71419b002
- SHA1 91be7816dc778d18e4eafcac41c6687bba7754fc
- SHA512 0f4116d18575f55b44513be19af86b3d6ada3a1e629dfc9bdcae94475fa8ee6f54cc0e2e254382f3197ccc7436b9978dfd58d4e73b56188ac29a55f640200d01
- SSDEEP 1536:wNDz2smpHNzX8N1pw/GaNia+3qhDbSbYNg:KK/NpY
- TLSH T1B853AA9272F87F1C5886D57B4AB260C4101FDCFC25645462B29EA67B3F90E480AFFE64
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/hu_HU/stringtable.xml
- SHA256 ab04c8d630cada6336c5654ca3b1b5b39e36c4eaa02c7e0cee81ee5293a0389b
- MD5 e2a941b2492faf9578fc5cad6086f7e9
- SHA1 9395c7c433d8b2c1264aebd6626d17f53e473234
- SHA512 eaf6b3eb67323cf44ea95c9bfc43211675415dddf4605412f4032cfa2d1db5df6e4b5645569b8c26eb2c9d7af0590543bc6381d4e2ce7a7d09329625fc7e2f4a
- SSDEEP 768:NXEp4YY7pC3K/xyb0q+NioAOuPUJJW7MMLeNXMnjC:FEp820hNiog1LeNXB
- TLSH T1EA53BE6232A87F1C9846957B5AB230C9101FDCFC25781463729EA5773FA0E480EFBDA5
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/it_IT/stringtable.xml
- SHA256 32394bbd322208ffc03c614b01eddd65a4c49f08fae065543699d5a2a03a9831
- MD5 4e75d6df1635310f7ccdad3fcd54c802
- SHA1 c355c773a2df686aae8e94ef8cc0ce458b87722b
- SHA512 8d88963d3492eed1967c4956297df2b23dec78a20b718ea79488db8f0148a14038a87a9ba2a4fdf676cfe25a10369e15906cd83f0fca3d91da37e36771f45abb
- SSDEEP 384:Ro5qTCjqV6iTnU4enr5uukPugqTU5tbqpbVZ155W9tTeGXOUzgZlo0g0NOvS+Q1L:e58kZYEpTl+NioAOeqe71xR8Dr++njC
- TLSH T1C953DE6272E87F1C5886957F4AB270C8501FECF835642462B29E627B3F90D484AFFD64
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/ja_JP/stringtable.xml
- SHA256 018c104a0e167e312151c973acc56953168da0ff08037690529d6251f487c4b8
- MD5 9d9b6e6493eecd9fe64d210153a17477
- SHA1 d6552be21ef6229a13c2c3b9614e6c04c70073e6
- SHA512 4ab9ab6028e673c7404dc309feb792f1444050b12b0d930d7ebe18b8d7dee5845abb5812c22f09925df0bd31bf0850a17043d0f0d3eb8f3eabd5a354577fc6d9
- SSDEEP 1536:jQwI3hA9NTQuTpKnaVZG/ryj8PPxhlprl5O2lFuBEJ0pY9o1UfBbpQggjOhd/NiS:9wFtN/
- TLSH T10E63DA6E32A93F2C5452957B09B230C8501FECBDF5647462616EA0773F50E8CCABB9B4
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/ko_KR/stringtable.xml
- SHA256 401585b2225bb165278002988fcfa2a80edec2acfa30be590231c6fbddd0d4bb
- MD5 8377d011d7b8375ee5fa2a16ffbdc132
- SHA1 6be48772da0d3ac463faf1f088918cd8cab4057d
- SHA512 409eac1e147f54e335299f53acea62cd8bd6e66e044d503eed9e6a6e5f591b604526e155454167114c14872a962917b6ef8e86fef42827cf80eec5c157427170
- SSDEEP 768:yWo9/AVq7kfoZT+NioAOF/4WmLEPOQnjC:yD/Av7Nis4oOF
- TLSH T14453DC9231F96F1C5846996B9EF230C4410FDCF932651462B64DA97B3FA0D840ABFDB8
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/nb_NO/stringtable.xml
- SHA256 d8f14b02a8cc38ba5da86b29cbfb1b906a01f635a854400eb9fb398b86fd1158
- MD5 d1e55639abbe63e715a5aae18392fe33
- SHA1 c91e73e3d05cafedd2c272d943bd31733cda5f1d
- SHA512 94452ca8b8837f57eade86a6e55108d58d2d09e4e98bd4d1650d1c93a5705b1fd2c347b191e2fbb96e366ad96239e5dd99bb7ac0544ccb5ff22d019560ad9638
- SSDEEP 768:icWPC+oQDez+wVAvBZNkKGw1Gw+NioAOANm9yU7jMNyCyG20njC:ieqB8KGw1+Nif2A92J
- TLSH T1D7538B5176E87F1C6846947F59B120C9801FECBC25B46452B29DB17B3FA0E880BFF9A4
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/nl_NL/stringtable.xml
- SHA256 bbb52dd66280241696acb072b43a4448a1a1dc729e641433b45fbffe5c6808e8
- MD5 d682cac90f5b8591a7d03479e883c0df
- SHA1 345b6a7aee9ff2cad4511eeeeebfcf5e5634dd13
- SHA512 83a086e1f505fc17f07f62ca83ec524a437276d2c17d121249ffd7f4c79d07d8f46e820f9482682f26a7596871e197a2cccd2540514e488bd22303d9cad6cc82
- SSDEEP 768:h5ITUrHjO9NkosyWrCQLIqPH+2K35+NioAOOnnmcGwrG6njC:hXHuPsyWrZ+JgNiRnSD
- TLSH T19353BE5275A87F2C6485D47F5AB130C9510FECFC21B42462B29DA2773FA0D880AFF9A4
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/pl_PL/stringtable.xml
- SHA256 017a8018de8ab94b83cd93123017da1735c76a6d30a6bc014218a91627de24b0
- MD5 5a246706fab9c47d03ac5913c56f8e3d
- SHA1 da96a696fd9a9c2cb0cc5874d661abed0009bfca
- SHA512 68068c87f0554d8869c0d7d4567ebf3d593bcc8313e93d80031e766e1e8917b504512ba547541ef265c229e315ca44c6a785f1dc74c398b984e729a03240edbc
- SSDEEP 384:6KLFlOLOh88+gaX5yO2wo0ZNuNyTOgC/ahzOPziFxF3KYLZQQwQmcxNH+fURolE3:6YJOdyO2Wx1KYlb+NioAOODx81njC
- TLSH T12D53999131F87F1C5985946B4AB230C8505FDCF825B86453B29E657B3FA0E480BFF9A8
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/pt_BR/stringtable.xml
- SHA256 f8434fea34a215045fed067968dba8bb484eb40ea269a7e4b97c0c45987735de
- MD5 e077abb22cd29e7f57a8d730907f4375
- SHA1 20fcf889228b3bfc8a3a2bd45f043275c939ba8a
- SHA512 a5da4a2a7e0306b2ef5b04f83ecc1461520e58bab6679b55c5573589e42e2089f93aee00af9535cd484090c5ca5186175a51fa93e5cb1b92421bf5d44759b609
- SSDEEP 768:Khrv2UzdiQBj1DIDdXsjWkvLW/jp+NioAOzYDVCnjC:KoHTk5NitVL
- TLSH T1D953CB5136E83F2C5446967B8AB130C5404F9CF835A85452B29EA67B3FE0E884BFFD64
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/ro_RO/stringtable.xml
- SHA256 981e32b0903729b98e09f23e3e56827bf4a63acfef31e680ceec07a7600fd11b
- MD5 c7d553d6c537dff8931d144e6c6889d6
- SHA1 ecfe84e0676539b57d69732ed7f791ad3277d34c
- SHA512 5ea1d4e5cb9576eb79a5ab9aedcac6863f9c83f1a5ed955adbbbd091869c55066cefec1b1069ea8002b04be28bc6c6f2f1950aacf65b8cc3cb73d186b0f28395
- SSDEEP 768:0tZ2O0GB0c8Dffr4uy7vef341W++NioAOnh2RnjC:02uYX34QNi2h28
- TLSH T1F653AD52B1E87F2C5846956B4AB130D6404F9CFC21646496B29EA1BB3FD0D880BFFDE4
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/ru_RU/stringtable.xml
- SHA256 8c27b7dee01aae207aea521721953315f3ff03828b32e99f1cc28a6a1873602e
- MD5 5d807293320ad6af02f0e0314bd89940
- SHA1 5d073fc564659fe9ab4ff5f3adf544eeb8c1a8f0
- SHA512 fe676c3227a084c519fff8f0c538c472efad7ebfa7e8a7a40a2d30926464e16ceadbdec10c0a3e57779a5f8dc8b64452407a2985f37e029b15ec8ee03c463def
- SSDEEP 768:9stgWCIqz1pGT2LA9jhDfLP47+NioAO03jJq1nHUofxMnjC:9stxCb1pnM9jhTLP4qNiN89xB
- TLSH T1FA83C95131E87F5C150AA42FC971B488245F9CFD3E695663225C39BB3EE0D084BBF9A8
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/sk_SK/stringtable.xml
- SHA256 68a3f6bc39d442bee60aad8550de21fff8cf2d12e2f394163da426c5204db5c3
- MD5 978ed5bd665714453842e893ac77a1f3
- SHA1 9f361ff04f75d5d9c186fe79a1e1b0c8d80c592a
- SHA512 165776af5ea9b46aaf3c795376b34cf44c3e709ffc168ec18c85fe95077f12188b6a9bd3657d062232224cc3e79ed70d46993e91f7812019826b848f50adf6ba
- SSDEEP 768:hR6zFRnh+jGVNGZUzCTjzZH6BJaN+NioAOblg+HXWKL6njC:T6wC6xapNiQ3TLD
- TLSH T119539D9231B87F1C9846946F4AB230C4545F9CFC25B85462B69E727B3FA0E480BFF964
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/sl_SI/stringtable.xml
- SHA256 1655dfa926377c909881c02dfad29f2fda86b8797f6f68af53f92044bc10e472
- MD5 5e68b33d6561b38ca2910f37f9ce6edd
- SHA1 b7a814bac1491d41b8e1db7e18b3f10b9a8186dc
- SHA512 5c6f18e3373f217714872b6d5c00e3a1e01fca0cf8dac04cbba26750cee03d3e9470989bb8646095a744b8cae42058795770cdc8cdba919999e72c9f6d479787
- SSDEEP 384:CxvUPJPCJPRgWm/q/G6uAhTx+SU3NujjeoAGo4+fURolEGGn34BG9APDrgPWixBe:q/2WZEmeoa4+NioAO7gNFbCthnqnjC
- TLSH T14853AC6231B97F1C584AD57F5AB120C4504FDCFC25749462B29EB27B3EA0E880AFF964
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/sv_SE/stringtable.xml
- SHA256 19e13e24616f68c90371258e6ae63b46a0684e86e46319e81b9bcb97a8e8ccd0
- MD5 b5270c78689f79a07b0ec466d5da8ab6
- SHA1 395f048831b61b42bebaac3652ade24a11181b83
- SHA512 b1c4a23fb2573c6b203c34b3e7e67093c90e0cef3dcc9b66de313ac15abe5db2176951d7c01847b4a0b60c1ff5175c092b4e9a9c5ec8a82a98f4a2193b494f9e
- SSDEEP 768:Z1T0xZRKSVQeiD0UFIIJpEMv1+NioAOck2njC:Z1T0rRvVcD0SjJpEM8NiFkv
- TLSH T121539F5232A8BF1C6846957F4AB130D9401FECF835B46452B29D657B3FA0E880BFF964
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/tr_TR/stringtable.xml
- SHA256 e67f27ccee2ba9a0a06ce05718b01eaca50c6c22d60ca47b5c3149b574de95fd
- MD5 fa51eb06eb9866eb6d523589fe2b2f17
- SHA1 150ecdab55575158e4ccb03cedef9b9691e4b8de
- SHA512 a05db48fa465d8fe3d28946692c27ac2d51e525f2c751552c44bcc8e39fda935bd0b0ba5e1c319aad57bdf40dc6bdb341113b68f18abd6ba4a7178c435bd768c
- SSDEEP 768:W+TF0s5qzuex/JRYHGx3AuP69D+NioAOm6BqBZYA+Ia6yTRBnjC:W+aPR6G5Au5NiR/iM
- TLSH T13D53EC9131F87F1C5846997F9AF220C4904F9CF836746462B29DA67B3F90E440AFF968
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/uk_UA/stringtable.xml
- SHA256 fe4c5edd3926ec4ebea6330dc8c84d531c2d3c928305703a03fe575b511c63b7
- MD5 712f454ea129f2eff4aa069449a0fe17
- SHA1 6bd5d46d468f732a6eb9335b5f8ceb153cf761bb
- SHA512 dd52852eec2911683de251d473a2446d00ade38040af3f3e6a81d66f14e16d6dd732296bf25a534da49ed8d9ec6d7850810b266a57334625d4dde3c5ae6d45b3
- SSDEEP 384:KiW2ZFHysPG0FRnL8p0gUjsboLFekWfX0TmU8tmnIHOBa/g02D6wlfTvTTQfP18d:Py8SyVuFu6wPR+NioAOo1injC
- TLSH T12273B95135EC6F9D050AE42B99B4B0C8245F8CFD3AA55613329D397B3EE0C444FBEAA4
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/zh_CN/stringtable.xml
- SHA256 5b124a1f4974ab211fade349db211e176aa6f154a971534cffb917a727b2db50
- MD5 116264964652bbfcb8feb65cbcb9cdf1
- SHA1 ef7f4c1cf6152fbc9b21a82d4c0eddf2336ef9e4
- SHA512 9fd1c34e0052b9a9f5b67cd964141138777748d7707bf2113e65b9333b46f83074512a2334b01509a14cba62c98ee079a82853b189212121edb0a493445f8f5b
- SSDEEP 768:kl2NM+ahGOYjbR/1EUzL9he+NioAOW6W7u6Fd6oc/Zb7njC:g2IGOYjbR/1EUzL9bNihWC
- TLSH T173437B9232A87F2C5446997B4AB230D8500FECFC25B46463B25D657B3F90D880BBFD69
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/zh_TW/stringtable.xml
- SHA256 050cc2a93ddf9abe54a64f300445a2a56849bebbca6135f4292891dbc995a2bd
- MD5 18dd3140c4c143626aabe26d054bc73d
- SHA1 ed052f76942b59cac63cd3b3f0b28bbc13099153
- SHA512 f9525fc52d14bc7b5f60f699f5be6b60466b2abbc1d4f40041ace68225159eaaf8622858f19c4419f4495b07ea91497dffeaa5046ff4c6501f0f64add8e05e6f
- SSDEEP 768:aHmhn0PkcsMW+NioAOyH+NBYpVbvL662njC:esoNibTvL66v
- TLSH T1D553AB9631A87F2C544698BB5AB230D8401FECFC25B42863725E717B3F60D481AFF969
- MD5 SHA1 SHA512 SSDEEP TLSH
adobeIdManifest.xml
- SHA256 b8454875d59517fdfb8248abacda20bf34ee003255c81ad5e444d945f53b2de9
- MD5 161a971d515998f21aa0f978e330ecc2
- SHA1 8981e70a7dddcf51cb91fe065605f1295bd443d3
- SHA512 094feb3572ed49a7e2dc59acbde38dbfa00658684188c8f27182eb5c57e55f89cce07a49c93c1e3c8ae69610f2a88034b8757f7c4cf5fe44e52c3ea11630a1c1
- TLSH T1BEC080D271DDD91345509A254977C1047315964C0BB0888CD0D506F7564613C3E47006
- MD5 SHA1 SHA512 TLSH
adobe_caps.dll
- IMPHASH 5dc689234bd587c30d88fa8b0128a74a
- SHA256 ce49ebe5b6214f6b3312e599949a9715c797ff20ae741acc0f62f4d85373eda0
- MD5 663cb739df232d92203a0dc216ce62ea
- SHA1 aab3e44aa455b4bf3279e0335ad1ae934298bb80
- SHA512 76402710e02542815bfdcf5dda08f70858bf800e106492fc6395da2365caa02a665fb79df7dacc345019894c0e6a99d268c68768aef556adaa9287abecc0768b
- SSDEEP 6144:ctQdQg8MBJjapuDlkaQ/Vogw14h34OiaQv7MnoCllje4clVdO7g3m93/AfiPY:cK98MzDMNio4PMnoCre4OVdO7P3/fY
- TLSH T14D94AE12F1E1D032E4AA217045619F625EFDFC211977859BAED8388ADF70AD2E739313
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
81:ac:bc:69:4b:b7:0a:1e:74:ad:4d:7f:ee:a2:a2:c2:5e:a9:b0:16
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Chains
Sep 20, 2012
CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Subject
CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US
Serial Number
79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 1, 2012 - Dec 31, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Serial Number
68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 19, 2012 - Sep 19, 2013
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
1
Major OS version
5
Entry point
263722
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\Oberibsrel50\build\releases\public\caps\libraries\windows\Release\dynamic\adobe_caps.pdb
ole32
CoTaskMemFree
shlwapi
PathAppendW
PathRemoveBackslashW
PathStripPathW
PathFileExistsW
shell32
SHGetFolderLocation
SHGetPathFromIDListW
SHGetFolderPathW
SHCreateDirectoryExW
advapi32
AllocateAndInitializeSid
SetEntriesInAclW
SetNamedSecurityInfoW
FreeSid
GetNamedSecurityInfoW
kernel32
GetStringTypeW
GetConsoleMode
WriteConsoleW
GetProcessHeap
CompareStringW
SetEnvironmentVariableA
LCMapStringW
InitializeCriticalSection
WideCharToMultiByte
GetACP
MultiByteToWideChar
GetLastError
CloseHandle
LocalFree
GetCurrentProcess
SystemTimeToFileTime
GetFileAttributesExW
GetFileAttributesW
SetFileAttributesW
FlushFileBuffers
CreateFileW
CopyFileW
lstrlenW
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
GetVersionExA
AreFileApisANSI
Sleep
ReadFile
SetFilePointer
WriteFile
SetEndOfFile
GetFileSize
UnlockFile
LockFile
GetFileAttributesA
DeleteFileA
DeleteFileW
LoadLibraryA
LoadLibraryW
GetProcAddress
FreeLibrary
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTime
GetSystemTimeAsFileTime
DeleteCriticalSection
LockFileEx
InterlockedIncrement
GetTempPathA
GetTempPathW
FormatMessageA
GetFullPathNameA
GetFullPathNameW
GetDiskFreeSpaceA
GetDiskFreeSpaceW
CreateFileA
RaiseException
RtlUnwind
HeapFree
HeapAlloc
DecodePointer
GetCommandLineA
HeapReAlloc
IsProcessorFeaturePresent
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
InterlockedDecrement
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
HeapDestroy
ExitProcess
GetStdHandle
GetModuleFileNameW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTimeZoneInformation
HeapSize
GetCPInfo
GetOEMCP
IsValidCodePage
SetStdHandle
GetConsoleCP
GetSetupManifest
capsBackup
capsCloseSession
capsGetCollection
capsGetCollectionData
capsGetCollectionDataKeys
capsGetCollectionDataKeysAndValues
capsGetCollectionPayloads
capsGetCollections
capsGetInstallState
capsGetLastModTime
capsGetPayload
capsGetPayloadCollections
capsGetPayloadCollectionsAcrossUpgrades
capsGetPayloadConstraint
capsGetPayloadData
capsGetPayloadDataKeys
capsGetPayloadDataKeysAndValues
capsGetPayloads
capsGetUpgradedPayloadsKeysAndValues
capsOpenSession
capsOpenSessionNoCreate
capsRemoveCollectionData
capsRemoveCollectionDomainData
capsRemovePayloadData
capsRemovePayloadDomainData
capsSessionCommit
capsSessionRollback
capsSetCollectionData
capsSetPayloadData
mdbCloseSession
mdbGetBrandingData
mdbGetDependencyData
mdbGetDependencyDataEx
mdbGetEulaData
mdbGetEulaLanguageList
mdbGetPayload
mdbGetPayloadData
mdbGetProduct
mdbGetProductIDList
mdbGetProductPayloads
mdbOpenSession
mdbOpenSessionNoCreate
mdbOpenSessionWithPath
mdbSessionRollback
pcdCacheGetLastModTime
pcdCloseSession
pcdGetDomainData
pcdGetDomainDataKeys
pcdGetDomainDataSubdomains
pcdGetLastModTime
pcdOpenCacheSession
pcdOpenCacheSessionNoCreate
pcdOpenSession
pcdOpenSessionNoCreate
pcdRemoveDomainData
pcdSessionCommit
pcdSessionRollback
pcdSetDomainData
pdbCloseSession
pdbGetInstallState
pdbGetLastModTime
pdbGetPayload
pdbGetPayloadData
pdbGetPayloadDataKeys
pdbGetPayloadDataKeysAndValues
pdbGetPayloadDependency
pdbGetPayloadDependencyKeysAndValues
pdbGetPayloadDependencyReverse
pdbGetPayloads
pdbGetUpgradedPayloadsKeysAndValues
pdbGetUserAction
pdbOpenSession
pdbOpenSessionNoCreate
pdbSessionRollback
Name
.text
Size
307KB
Virtual Size
306KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
64KB
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
16KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
13KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=29, id=158, version=31118,
count=1, id=171, productName=VS2010 build 30319, version=30319,
count=11, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=125, id=1, productName=Unmarked objects,
count=131, id=170, version=31118,
count=54, id=171, version=31118,
count=1, id=155, version=31118,
count=1, id=154, version=31118,
count=1, id=157, version=31118,
adobe_licutil.exe
- IMPHASH c84c4d1fa763b03427be4ed7b5d2f070
- SHA256 8527c897b089cbeec68f8b62bd4e58a16f6c15e1810929db73341713344869b8
- MD5 1197275f64e8387e2eee7b65c8399efb
- SHA1 6132da6037abfd0970dc5e53eba5aa248710a884
- SHA512 f26c81428fce4cd04f03ad03ee1bfc83ea200c9902224da346bf3ca5ecc2168ae1050b107d04efb0bfdcdaa5fc31d2a51d3a0548826d35680ea63f712839100f
- SSDEEP 6144:t0CJKHVyhEWPfj/epbvs+gbLYwZxLlEPwOFT3/hF/iRtTDp4hw:t0CJKH4KWrkbQLYwj2wOFPhcRgu
- TLSH T156749E217705D032E8920071CBBA9B7F487EF9211B2664C7B3E8197E9E646D26B3135F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
fe:92:55:1f:30:3d:f2:5c:d2:98:1f:c5:98:b1:4d:ed:19:39:46:e1
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Chains
Sep 20, 2012
CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Subject
CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US
Serial Number
79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 1, 2012 - Dec 31, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Serial Number
68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 19, 2012 - Sep 19, 2013
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
1
Major OS version
5
Entry point
164456
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
none
winhttp
WinHttpConnect
WinHttpOpenRequest
WinHttpAddRequestHeaders
WinHttpSendRequest
WinHttpReadData
WinHttpQueryDataAvailable
WinHttpSetStatusCallback
WinHttpReceiveResponse
WinHttpGetIEProxyConfigForCurrentUser
WinHttpOpen
WinHttpGetProxyForUrl
WinHttpCloseHandle
kernel32
CompareStringW
GetProcessHeap
SetEndOfFile
WriteConsoleW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetStringTypeW
WideCharToMultiByte
GetModuleFileNameW
CloseHandle
GetLastError
CreateProcessW
SetEnvironmentVariableA
MultiByteToWideChar
CreateMutexW
GlobalFree
SetEvent
WaitForMultipleObjects
CreateEventW
GetTimeZoneInformation
GetVersionExW
GetComputerNameExW
IsDBCSLeadByteEx
GetCurrentDirectoryW
CreateFileW
QueryPerformanceCounter
GetTempPathW
OutputDebugStringA
LoadLibraryW
GetProcAddress
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
EncodePointer
DecodePointer
HeapFree
HeapAlloc
RaiseException
RtlUnwind
DeleteFileW
GetSystemTimeAsFileTime
HeapReAlloc
GetCurrentProcessId
GetCommandLineW
HeapSetInformation
GetDriveTypeW
GetFileAttributesW
CreateDirectoryW
GetFullPathNameW
LCMapStringW
GetCPInfo
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
HeapCreate
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
HeapSize
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ReadFile
SetFilePointer
GetACP
GetOEMCP
IsValidCodePage
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTickCount
GetLocaleInfoW
SetStdHandle
user32
MessageBoxW
shell32
SHGetFolderPathW
Name
.text
Size
253KB
Virtual Size
253KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
56KB
Virtual Size
55KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
10KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
20KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=152, version=20115,
count=25, id=158, version=31118,
count=11, id=171, productName=VS2010 build 30319, version=30319,
count=5, id=170, productName=VS2010 build 30319, version=30319,
count=11, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=131, id=1, productName=Unmarked objects,
count=185, id=170, version=31118,
count=103, id=171, version=31118,
count=1, id=154, version=31118,
count=1, id=157, version=31118,
adobe_oobelib.dll
- IMPHASH 58b7843a32cfed75be2a94f00ea746b5
- SHA256 2a4087cf11ba800b58141672c79fad00e72dea96b448380a90f617fbda8356bf
- MD5 782cc2384643508229f99fd8877c4f99
- SHA1 baca241192a2c04d05f334a3a73a69e995c176ed
- SHA512 ebf743bbb84aefeb1eb1ad478b2a6203006613aa1c2ad383d305bfbe95b6e969ecab831d7082393045295b28f8e7ca0ca097e7d74b6cd3a16477240baffae681
- SSDEEP 24576:2z4NSPsFuo65tFRNFf7dgw3bowuhqoxMKZbp7g7yoj+CZZsoOwOCyfcOQeYzvz0N:2z4NSPI65tFRNFf7dgw3Ewu3g7yoCCZW
- TLSH T19B15AEE26641C132E9DF01B19A3C676B087EB575172418C7E3C85DAD7DB89E2AA3031F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
41:c4:5b:66:fe:54:92:a2:c4:8a:ce:c3:80:31:81:8a:06:ed:b0:f6
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Chains
Sep 20, 2012
CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Subject
CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US
Serial Number
79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 1, 2012 - Dec 31, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Serial Number
68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 19, 2012 - Sep 19, 2013
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
1
Major OS version
5
Entry point
577668
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
winhttp
WinHttpCloseHandle
WinHttpConnect
WinHttpOpenRequest
WinHttpAddRequestHeaders
WinHttpSendRequest
WinHttpReadData
WinHttpQueryDataAvailable
WinHttpSetStatusCallback
WinHttpReceiveResponse
WinHttpGetIEProxyConfigForCurrentUser
WinHttpOpen
WinHttpGetProxyForUrl
kernel32
GetStartupInfoW
SetHandleCount
CreateSemaphoreW
SetEnvironmentVariableA
GetModuleFileNameA
CloseHandle
GetLastError
CreateProcessW
MultiByteToWideChar
InitializeCriticalSection
DeleteCriticalSection
ReleaseSemaphore
WaitForSingleObject
LeaveCriticalSection
EnterCriticalSection
GetVersionExW
CreateThread
GetComputerNameExW
SetEvent
OpenEventW
GlobalFree
WaitForMultipleObjects
CreateEventW
WideCharToMultiByte
GetExitCodeThread
TerminateThread
OutputDebugStringA
QueryPerformanceCounter
GetTempPathW
GetModuleFileNameW
LoadLibraryW
FreeLibrary
SetStdHandle
GetFileAttributesW
LocalFree
GetTimeZoneInformation
GetTickCount
GetUserDefaultLCID
WriteFile
Sleep
ReadFile
CreateFileW
FlushFileBuffers
FindClose
DeleteFileW
GetDateFormatW
SetFilePointer
CreateDirectoryW
GetTimeFormatW
GetLocalTime
lstrlenA
InterlockedIncrement
InterlockedDecrement
GetCurrentProcessId
GetCurrentDirectoryW
GetConsoleCP
GetConsoleMode
GetLocaleInfoW
FreeEnvironmentStringsW
GetEnvironmentStringsW
CreateFileA
GetFileAttributesA
GetProcAddress
GetFileType
PeekNamedPipe
GetFileInformationByHandle
TerminateProcess
InitializeCriticalSectionAndSpinCount
HeapSize
SetLastError
IsValidCodePage
CompareStringW
WriteConsoleW
GetProcessHeap
SetEndOfFile
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetStdHandle
ExitProcess
GetModuleHandleW
HeapDestroy
HeapCreate
IsProcessorFeaturePresent
GetOEMCP
GetACP
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStringTypeW
InterlockedCompareExchange
InterlockedExchange
EncodePointer
DecodePointer
HeapFree
HeapAlloc
RaiseException
RtlUnwind
GetSystemTimeAsFileTime
HeapReAlloc
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeW
FindFirstFileExW
GetCurrentThreadId
GetCommandLineA
GetTimeFormatA
GetDateFormatA
GetFullPathNameW
MoveFileA
LCMapStringW
GetCPInfo
GetCurrentProcess
user32
wsprintfW
advapi32
LookupAccountNameW
FreeSid
SetEntriesInAclW
AllocateAndInitializeSid
GetNamedSecurityInfoW
SetNamedSecurityInfoW
GetUserNameW
shell32
SHCreateDirectoryExW
SHGetSpecialFolderPathW
SHGetFolderPathW
ole32
CoInitializeSecurity
CoSetProxyBlanket
OleRun
CLSIDFromString
CLSIDFromProgID
CoInitialize
CoCreateInstance
CoUninitialize
CoInitializeEx
oleaut32
SysFreeString
VariantChangeType
VariantInit
VariantCopy
VariantClear
SysAllocString
GetErrorInfo
shlwapi
PathRemoveFileSpecW
PathFileExistsW
Adobe_OOBELib_BackDoorUpgradeCheck
Adobe_OOBELib_CalculateVC
Adobe_OOBELib_CheckSubscriptionMode
Adobe_OOBELib_CheckSubscriptionValidity
Adobe_OOBELib_CheckSubscriptionValidityOnline
Adobe_OOBELib_CheckWFType
Adobe_OOBELib_CheckforUpgrade
Adobe_OOBELib_CleanUpCachePCD
Adobe_OOBELib_CreateRef
Adobe_OOBELib_Deactivate
Adobe_OOBELib_DeactivateLicense
Adobe_OOBELib_DisAssociateAll
Adobe_OOBELib_EnumerateKeys
Adobe_OOBELib_GetAdobeId
Adobe_OOBELib_GetChallengeString_UpgradeCheck
Adobe_OOBELib_GetRefID
Adobe_OOBELib_GetSerialInfo
Adobe_OOBELib_GetServiceClaimData
Adobe_OOBELib_GetValueforKeyInSubDomain
Adobe_OOBELib_Getversion
Adobe_OOBELib_ISOTaggingAtInstall
Adobe_OOBELib_LaunchPurchaseWorkFlow
Adobe_OOBELib_LoadTrial
Adobe_OOBELib_Process_file
Adobe_OOBELib_ProtectedContentCheck
Adobe_OOBELib_QueryLicenses
Adobe_OOBELib_ReleaseRef
Adobe_OOBELib_RemoveKeyInSubDomainInCache
Adobe_OOBELib_Remove_payload
Adobe_OOBELib_Retrieve_SerialNumber
Adobe_OOBELib_Retryactivation
Adobe_OOBELib_SaveAdobeId
Adobe_OOBELib_SetAdobeId
Adobe_OOBELib_SetAdobeIdExtProfile
Adobe_OOBELib_SetAppXMLData
Adobe_OOBELib_SetClaimStatus
Adobe_OOBELib_SetClaimStatusEx
Adobe_OOBELib_SetCredentialsForProxy
Adobe_OOBELib_SetUniversalCookie
Adobe_OOBELib_SetValueforKeyInSubDomainInCache
Adobe_OOBELib_Set_Eula
Adobe_OOBELib_Set_InstallLocale
Adobe_OOBELib_Set_serialnumber
Adobe_OOBELib_SuppressRegistrationNag
Adobe_OOBELib_UpgradeCheck
Adobe_OOBELib_UpgradeDoneAtInstallTime
Adobe_OOBELib_Validate_SerialNumber
Name
.text
Size
717KB
Virtual Size
716KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
134KB
Virtual Size
133KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
15KB
Virtual Size
41KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
49KB
Virtual Size
48KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=152, version=20115,
count=29, id=158, version=31118,
count=15, id=171, productName=VS2010 build 30319, version=30319,
count=15, id=170, productName=VS2010 build 30319, version=30319,
count=2, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=17, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=196, id=1, productName=Unmarked objects,
count=27, id=175, version=31118,
count=195, id=170, version=31118,
count=114, id=171, version=31118,
count=1, id=155, version=31118,
count=1, id=154, version=31118,
count=1, id=157, version=31118,
adobe_upgrade.dll
- IMPHASH b8801d5281dc47eccdced0f96a88288c
- SHA256 e1498a472b2418f4651fc14d88f566382df5c2c4d436c59984b4fbc26051e5cf
- MD5 ffa09c5ee3f2def53f10987c710c8131
- SHA1 106f7bdc99c776946263e242a246ca8c9a774533
- SHA512 6cf88c93f5ecce9505bb73bea334a351153481c58b15342a8297a5c8820da1f8cacfb4716e49b51e1257eda3ec59a669acd2243eedce151bf702631ddbf7d5b5
- SSDEEP 12288:ofJZn3agJMCizZefBe+4Zcv5QPsaJQZXPq9ka:unqEMCKZefbspsaJC
- TLSH T133D4AF123740C2B5F0AE517A897E737D1A6E6D97072086D7B7E42B5E8C312C1CB3A35A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
68:59:5b:15:6c:e0:cb:7e:f6:0f:87:0e:a6:47:9d:71:d7:e5:3e:76
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Chains
Sep 20, 2012
CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Subject
CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US
Serial Number
79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 1, 2012 - Dec 31, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Serial Number
68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 19, 2012 - Sep 19, 2013
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
1
Major OS version
5
Entry point
318049
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
shlwapi
PathRemoveBackslashA
kernel32
OutputDebugStringA
LoadLibraryW
MultiByteToWideChar
WideCharToMultiByte
GetModuleFileNameW
GetCurrentProcess
CloseHandle
GetLastError
lstrcpyA
lstrcmpA
LoadLibraryA
GetProcAddress
FreeLibrary
GetEnvironmentVariableA
IsValidLocale
CompareStringW
InterlockedCompareExchange
QueryPerformanceCounter
EnumSystemLocalesA
GetLocaleInfoA
HeapFree
GetCurrentProcessId
RtlUnwind
RaiseException
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
EnterCriticalSection
LeaveCriticalSection
EncodePointer
DecodePointer
HeapAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
SetEnvironmentVariableA
GetDriveTypeW
GetCurrentThreadId
GetCommandLineA
GetFullPathNameW
InitializeCriticalSection
GetFileAttributesW
HeapReAlloc
HeapCreate
HeapDestroy
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
InterlockedDecrement
IsProcessorFeaturePresent
GetTimeZoneInformation
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
Sleep
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoW
ExitProcess
HeapSize
GetLocaleInfoW
ReadFile
SetFilePointer
GetCurrentDirectoryW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTickCount
CreateFileW
SetStdHandle
CreateFileA
LCMapStringW
GetStringTypeW
WriteConsoleW
InterlockedExchange
SetEndOfFile
GetProcessHeap
GetUserDefaultLCID
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
AULAcceptsChallengeResponse
AULCloseSession
AULGetChallengeString
AULGetQualifyingSerialNumbers
AULGetUpgradeStatus
AULIsQualifyingSerialNumberForAnyProduct
AULIsQualifyingSerialNumberForProduct
AULNeedsUpgradeCheck
AULNextProduct
AULOpenSession
AULSetQualifyingSerialNumbers
Name
.text
Size
462KB
Virtual Size
462KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
88KB
Virtual Size
88KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
31KB
Virtual Size
70KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
34KB
Virtual Size
34KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=171, productName=VS2010 build 30319, version=30319,
count=8, id=170, productName=VS2010 build 30319, version=30319,
count=1, id=152, version=20115,
count=33, id=158, version=31118,
count=129, id=109, productName=VS2005 build 50727, version=50727,
count=22, id=125, productName=VS2005 build 50727, version=50727,
count=13, id=175, version=31118,
count=9, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=134, id=1, productName=Unmarked objects,
count=191, id=170, version=31118,
count=91, id=171, version=31118,
count=1, id=155, version=31118,
count=1, id=154, version=31118,
count=1, id=157, version=31118,
amtservices.dll
- IMPHASH 51cac0aa2868e2c01592256457c39caf
- SHA256 23c42e4ff2752536add35a49873fc7cccacf7914ce2548d514b7620610087275
- MD5 911deb78000d4df3a21231de2b021c59
- SHA1 18361d39a454e001020bfa259e04d357f6eefef5
- SHA512 de36e61e2e80f36357ea5a95be191320507e4d3ba3d860f4e74695d9d5ed0ada4f63ffe40236f0accc4e133be7e53774561e26ec6bb3e42ab66d6dad5875b9bb
- SSDEEP 24576:vUN9dDS89wk7Tc7gCUQiJzpF56QEJAu5RJdv1Xx457Zv:w62TSPUPlF5bEf5J1Xx457R
- TLSH T1DC35A0223E41C231FDCF11F7D57EBBAE0C6CAA220B2494C7B2A919696D605C35B3535B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
67:29:a1:4c:85:a7:0f:b0:6b:36:f8:43:c9:9e:d8:c6:40:95:be:75
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Chains
Sep 20, 2012
CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Subject
CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US
Serial Number
79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 1, 2012 - Dec 31, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Serial Number
68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 19, 2012 - Sep 19, 2013
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
1
Major OS version
5
Entry point
315971
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
none
iphlpapi
GetIfTable
winhttp
WinHttpQueryDataAvailable
WinHttpCloseHandle
WinHttpOpen
WinHttpGetIEProxyConfigForCurrentUser
WinHttpReceiveResponse
WinHttpCrackUrl
WinHttpConnect
WinHttpOpenRequest
WinHttpAddRequestHeaders
WinHttpGetProxyForUrl
WinHttpSetStatusCallback
WinHttpQueryHeaders
WinHttpReadData
WinHttpSendRequest
WinHttpSetCredentials
setupapi
SetupDiGetDeviceRegistryPropertyW
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiGetClassDevsW
SetupDiGetDeviceInstanceIdW
CM_Get_DevNode_Status
kernel32
lstrlenW
LocalFree
lstrlenA
SetFileAttributesW
GetModuleFileNameW
LoadLibraryW
FreeLibrary
GetProcAddress
GetTempPathW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentVariableA
QueryPerformanceCounter
QueryPerformanceFrequency
OutputDebugStringA
InitializeCriticalSection
EnterCriticalSection
TryEnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
CreateEventW
CloseHandle
ResetEvent
WaitForMultipleObjects
SetEvent
SwitchToThread
ResumeThread
CreateThread
RaiseException
RtlUnwind
GetSystemTimeAsFileTime
GetLastError
HeapFree
EncodePointer
DecodePointer
GetCurrentThreadId
GetCommandLineA
GetFullPathNameW
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeW
FindFirstFileExW
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
GetFileAttributesW
DeleteFileW
CreateDirectoryW
GetCurrentProcessId
GetTimeFormatA
GetDateFormatA
HeapAlloc
IsProcessorFeaturePresent
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
InterlockedDecrement
GetCurrentThread
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
HeapDestroy
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
Sleep
HeapSize
ExitProcess
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
InitializeCriticalSectionAndSpinCount
FatalAppExitA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoW
GetLocaleInfoW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTickCount
GetCurrentDirectoryW
SetCurrentDirectoryW
GetFullPathNameA
GetFileInformationByHandle
PeekNamedPipe
CreateFileW
SetStdHandle
CreateFileA
GetFileAttributesA
SetFilePointer
ReadFile
GetTimeZoneInformation
LCMapStringW
GetStringTypeW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
HeapReAlloc
SetConsoleCtrlHandler
InterlockedExchange
WriteConsoleW
SetEndOfFile
GetProcessHeap
CompareStringW
SetEnvironmentVariableA
InterlockedCompareExchange
FindNextFileW
FindFirstFileW
GlobalFree
advapi32
RegCreateKeyExW
EqualSid
RegQueryValueExA
RegDeleteKeyA
RegOpenKeyA
RegCreateKeyA
SetSecurityInfo
RegOpenKeyExW
RegQueryValueExW
FreeSid
RegSetValueExW
RegCloseKey
RegDeleteKeyW
OpenThreadToken
OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
shell32
SHGetFolderPathW
ole32
CoInitializeSecurity
CoCreateInstance
CoSetProxyBlanket
CoUninitialize
CoInitializeEx
oleaut32
SysStringLen
SysFreeString
VariantClear
SysAllocStringByteLen
GetErrorInfo
VariantChangeType
CreateErrorInfo
SetErrorInfo
VariantInit
SysAllocString
C_AMTAUMServiceCreate
C_AMTAUMServiceGetLEIDXml
C_AMTAUMServiceGetLibVersion
C_AMTAUMServiceIsUpdaterEnabled
C_AMTAUMServiceNotificationsRelease
C_AMTConfigurationGetLoadTrial
C_AMTConfigurationGetRunningLocale
C_AMTConfigurationIsAppAllowedtobeRelaunched
C_AMTConfigurationIsGrowlSuppressed
C_AMTConfigurationIsRegistrationSuppressed
C_AMTConfigurationServiceAMTConfigInstallPath
C_AMTConfigurationServiceAMTConfigPath
C_AMTConfigurationServiceAMTConfigRelativePath
C_AMTConfigurationServiceAMTDirectoryPath
C_AMTConfigurationServiceAppLicensingCode
C_AMTConfigurationServiceAppPayloadCode
C_AMTConfigurationServiceApplicationDirectoryPath
C_AMTConfigurationServiceApplicationPath
C_AMTConfigurationServiceBaseConfigPath
C_AMTConfigurationServiceBridgeTalkCodeAtIndex
C_AMTConfigurationServiceBridgeTalkCodeCount
C_AMTConfigurationServiceCanonicalLEID
C_AMTConfigurationServiceCheckSerialNumber
C_AMTConfigurationServiceCreate
C_AMTConfigurationServiceCurrentLicense
C_AMTConfigurationServiceDominatingLEsForLEID
C_AMTConfigurationServiceDriverLicensingCode
C_AMTConfigurationServiceDriverPayloadCode
C_AMTConfigurationServiceInstallDate
C_AMTConfigurationServiceInstalledLocales
C_AMTConfigurationServiceIsInstalled
C_AMTConfigurationServiceIsSerialNumberRegisteredAsRejected
C_AMTConfigurationServiceIsSubscription
C_AMTConfigurationServiceLocale
C_AMTConfigurationServiceMapCLEToLEID
C_AMTConfigurationServiceMappedLEIDForCLE
C_AMTConfigurationServiceMediaTag
C_AMTConfigurationServicePathForLocalizedResource
C_AMTConfigurationServicePathForLocalizedResourceInDirectory
C_AMTConfigurationServicePathForResource
C_AMTConfigurationServicePathForResourceInDirectory
C_AMTConfigurationServicePrecedenceValueForEnigmaID
C_AMTConfigurationServiceProductName
C_AMTConfigurationServiceRegisterSerialNumberAsRejected
C_AMTConfigurationServiceRemoveKey
C_AMTConfigurationServiceRemoveKeyInLocale
C_AMTConfigurationServiceRemoveSerialNumber
C_AMTConfigurationServiceSerialNumber
C_AMTConfigurationServiceSetApplicationPath
C_AMTConfigurationServiceSetCurrentLicense
C_AMTConfigurationServiceSetDefaultConfigurationService
C_AMTConfigurationServiceSetInstalledLocales
C_AMTConfigurationServiceSetLocale
C_AMTConfigurationServiceSetSerialNumber
C_AMTConfigurationServiceSetValueForKey
C_AMTConfigurationServiceSetValueForKeyInLocale
C_AMTConfigurationServiceUpdaterCode
C_AMTConfigurationServiceValueForKey
C_AMTConfigurationServiceValueForKeyInLocale
C_AMTConfigurationShowEULAForPassive
C_AMTEnigmaServiceAllLocales
C_AMTEnigmaServiceCreate
C_AMTEnigmaServiceDecryptSerialNumber
C_AMTEnigmaServiceDefaultLocale
C_AMTEnigmaServiceEncryptSerialNumber
C_AMTEnigmaServiceExpirationDateData
C_AMTEnigmaServiceGetProductID
C_AMTEnigmaServiceGetProductInfo
C_AMTEnigmaServiceGetProductVersion
C_AMTEnigmaServiceGetProductVersionString
C_AMTEnigmaServiceGetScenarioKey
C_AMTEnigmaServiceGetUpgradeScenario
C_AMTEnigmaServiceIsEnigmaSerialNumber
C_AMTErrnoServiceALMErrno
C_AMTErrnoServiceCreate
C_AMTErrnoServiceErrno
C_AMTErrnoServiceSetALMErrno
C_AMTErrnoServiceSetErrno
C_AMTGetTypeID
C_AMTLog
C_AMTLogAll
C_AMTLoggerCreateFileLoggerWithFile
C_AMTLoggerCreateFileLoggerWithPath
C_AMTLoggerCreateFileLoggerWithPathAndSize
C_AMTLoggingServiceAddGroupLogger
C_AMTLoggingServiceAddLogger
C_AMTLoggingServiceCleanUpResource
C_AMTLoggingServiceCreateWithID
C_AMTLogv
C_AMTLogvAll
C_AMTPCDServiceAllKeysInSubDomain
C_AMTPCDServiceAllKeysInSubDomainForLocale
C_AMTPCDServiceAllSubDomains
C_AMTPCDServiceBeginTransaction
C_AMTPCDServiceCachePCDIsWritable
C_AMTPCDServiceCheckDatabase
C_AMTPCDServiceCreate
C_AMTPCDServiceEndTransaction
C_AMTPCDServiceInstallDateForAdobeCode
C_AMTPCDServiceLicensingCodeForAdobeCode
C_AMTPCDServiceMasterHiveExistsForSubDomain
C_AMTPCDServiceMasterPCDExists
C_AMTPCDServiceMasterPCDIsWritable
C_AMTPCDServiceOwnerAdobeCodeForAdobeCode
C_AMTPCDServicePopulatedLocalesForSubDomain
C_AMTPCDServicePrimarySubDomains
C_AMTPCDServiceRemoveAllKeysInSubDomain
C_AMTPCDServiceRemoveAllKeysInSubDomainForLocale
C_AMTPCDServiceRemoveKeyInSubDomain
C_AMTPCDServiceRemoveKeyInSubDomainForLocale
C_AMTPCDServiceRemoveKeyWithPropertyInSubDomain
C_AMTPCDServiceRemoveKeyWithPropertyInSubDomainForLocale
C_AMTPCDServiceSetMode
C_AMTPCDServiceSetValueForKeyInSubDomain
C_AMTPCDServiceSetValueForKeyInSubDomainForLocale
C_AMTPCDServiceSetValueForKeyWithPropertyInSubDomain
C_AMTPCDServiceSetValueForKeyWithPropertyInSubDomainForLocale
C_AMTPCDServiceSubDomainExists
C_AMTPCDServiceSubDomainForLocaleExists
C_AMTPCDServiceSubDomainsForPrimarySubDomain
C_AMTPCDServiceValueForKeyInSubDomain
C_AMTPCDServiceValueForKeyInSubDomainForLocale
C_AMTPCDServiceValueForKeyWithPropertyInSubDomain
C_AMTPCDServiceValueForKeyWithPropertyInSubDomainForLocale
C_AMTRegistrationServiceCreate
C_AMTRegistrationServiceHasDataToSend
C_AMTRegistrationServiceNeedsToShowRegistrationScreen
C_AMTRegistrationServiceSendData
C_AMTRegistrationServiceShowRegistrationDialog
C_AMTRelease
C_AMTRetain
C_AMTStringListAddString
C_AMTStringListCopyInto
C_AMTStringListCount
C_AMTStringListCreate
C_AMTStringListCreateWithConstStrings
C_AMTStringListCreateWithStrings
C_AMTStringListIndexOfString
C_AMTStringListNextString
C_AMTStringListRemoveAllStrings
C_AMTStringListRewind
C_AMTStringListStringAtIndex
C_AMTUISwitchIsUpdateAvailable
C_AMTUISwitchIsUpdateCheckEnabled
C_AMTUISwitchServiceCreate
C_AMTUISwitchServiceGetMode
C_AMTUISwitchServiceSetLaunchContext
C_AMTUISwitchServiceSetMode
C_AMTUISwitchServiceSetParentWindow
C_AMTUISwitchShowCreateAdobeID
C_AMTUISwitchShowEULA
C_AMTUISwitchShowProvisioningUI
C_AMTUISwitchShowRegistration
C_AMTUISwitchShowUpdatesUI
C_AMTUISwitchSuppressUpdates
C_AMTUISwitchTriggerUpdateCheck
C_AMTUpdaterNotificationsLaunchAAMNotifierOnQuitIfReqd
C_AMTUpgradeServiceAcceptsChallengeResponse
C_AMTUpgradeServiceCloseSession
C_AMTUpgradeServiceCreate
C_AMTUpgradeServiceGetChallengeString
C_AMTUpgradeServiceGetQualifyingSerialNumbers
C_AMTUpgradeServiceGetUpgradeStatus
C_AMTUpgradeServiceIsQualifyingSerialNumberForAnyProduct
C_AMTUpgradeServiceIsQualifyingSerialNumberForProduct
C_AMTUpgradeServiceNeedsUpgradeCheck
C_AMTUpgradeServiceNextProduct
C_AMTUpgradeServiceSetQualifyingSerialNumbers
C_EULAServiceCreate
C_EULA_GetEULAFolder
C_EULA_GetState
C_EULA_SetState
C_LC_GetCacheStatus
C_LC_LaunchTypeForCache
C_LC_SetCacheStatus
C_LaunchCacheServiceCreate
C_SLCoreServiceActivateLicense
C_SLCoreServiceCreate
C_SLCoreServiceCreateDictionary
C_SLCoreServiceDeactivateAllLicenses
C_SLCoreServiceDeactivateLicense
C_SLCoreServiceDeleteLicense
C_SLCoreServiceDestroy
C_SLCoreServiceDestroyDictionary
C_SLCoreServiceGetAllDictionaryKeysValues
C_SLCoreServiceGetAllLicenses
C_SLCoreServiceGetDictionaryValue
C_SLCoreServiceGetErrorString
C_SLCoreServiceGetFeatures
C_SLCoreServiceGetLicenseDurationFromProductConfig
C_SLCoreServiceGetLicenseInfo
C_SLCoreServiceGetLicenseServerData
C_SLCoreServiceGetLicenseUserData
C_SLCoreServiceGetLicensingEvents
C_SLCoreServiceGetMachineIDHash
C_SLCoreServiceGetMachineIDHashWOStorage
C_SLCoreServiceGetVersion
C_SLCoreServiceLoadLicenseExtension
C_SLCoreServiceLoadLicenseFromProductConfig
C_SLCoreServiceQueryFeatures
C_SLCoreServiceRefreshLicense
C_SLCoreServiceResetTrialLicense
C_SLCoreServiceSetDictionaryValue
C_SLCoreServiceSetLEID
C_SLCoreServiceSetLicenseUserData
C_SLCoreServiceSetProxySettings
C_SLCoreServiceSynchronize
Name
.text
Size
893KB
Virtual Size
892KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
139KB
Virtual Size
138KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
26KB
Virtual Size
46KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
35KB
Virtual Size
34KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=107, id=109, productName=VS2005 build 50727, version=50727,
count=17, id=125, productName=VS2005 build 50727, version=50727,
count=177, id=1, productName=Unmarked objects,
count=17, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=20, id=171, productName=VS2010 build 30319, version=30319,
count=12, id=170, productName=VS2010 build 30319, version=30319,
count=1, id=152, version=20115,
count=28, id=158, version=31118,
count=192, id=170, version=31118,
count=147, id=171, version=31118,
count=1, id=155, version=31118,
count=1, id=154, version=31118,
count=1, id=157, version=31118,
asneu.dll
- IMPHASH 785d273c7cac083d4d0a3beae368461e
- SHA256 da6e8fe51e32da9e0dc4b6ee34fab103bb2debe2b180574fdf36b483c82016df
- MD5 0b2cd277a96359780c4af2c26eeb9348
- SHA1 be59f9457b2e611aa6e02dd3442ee39b5badaa44
- SHA512 1772055543484f8069279335ab9763124bc75b3b1494c62c6c2ec6a4d688136dcc658b594590d8e4d22c9e46c201cd143fa8d3cf1ceede8d9c40aa6d3091f76e
- SSDEEP 1536:v9Ic3Ulv2cvAckh4kF4YYSLYWwPa+G56dg7ipxVm7RPl+EUYzK0yUbh1U5eWPBMM:FlGOh4gRYdPk5xipCUWK0Xbk5eWP
- TLSH T1F5E38C507586C473D54A163E4426C7714F3B79609FB8AAC3BB840BA98F253E1EF3634A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
22:e7:83:35:dd:e4:90:bf:3c:9d:42:0a:34:2d:1d:47:80:a9:cb:9b
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Chains
Sep 20, 2012
CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Subject
CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US
Serial Number
79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 1, 2012 - Dec 31, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Serial Number
68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 19, 2012 - Sep 19, 2013
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
0
Major OS version
5
Entry point
43092
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
c:\esg\asn\1.6\Asn\AsnEndUser\Release\asneu.pdb
kernel32
InterlockedIncrement
InterlockedDecrement
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
RaiseException
GetLastError
HeapFree
HeapAlloc
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentThreadId
GetCommandLineA
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetCPInfo
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapCreate
HeapDestroy
VirtualFree
VirtualAlloc
HeapReAlloc
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetFullPathNameA
GetCurrentDirectoryA
ReadFile
CloseHandle
SetFilePointer
SetHandleCount
GetFileType
GetStartupInfoA
GetConsoleCP
GetConsoleMode
FlushFileBuffers
HeapSize
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetTimeZoneInformation
SetStdHandle
CreateFileW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetLocaleInfoW
SetEndOfFile
GetProcessHeap
CreateFileA
CompareStringA
CompareStringW
SetEnvironmentVariableA
??0AsnDll@@QAE@XZ
??4AsnDll@@QAEAAV0@ABV0@@Z
?dllMain@AsnDll@@SAHPAXK0@Z
GetAsnVersion
_Java_com_adobe_asn_AsnEndUser_doDecrypt@20
_Java_com_adobe_asn_AsnEndUser_doEncrypt@20
_Java_com_adobe_asn_AsnEndUser_exit@16
_Java_com_adobe_asn_AsnEndUser_getAsnProductInfo@20
_Java_com_adobe_asn_AsnEndUser_getVersion@12
_Java_com_adobe_asn_AsnEndUser_init@16
_Java_com_adobe_asn_AsnEndUser_makeChecksum@12
_Java_com_adobe_asn_AsnEndUser_makePrivateEx@16
_Java_com_adobe_asn_AsnEndUser_verifyChecksum@12
asnInst_InstallerProductInfo_constructor
asnInst_getAsnProductInfo
asnInst_getAsnProductInfoInMem
asn_exit
asn_info
asn_init
asn_makeChecksum
asn_makePrivate
asn_makePrivateEx
asn_verifyChecksum
Name
.text
Size
104KB
Virtual Size
104KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
20KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
6KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=20, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=123, productName=VS2005 build 50727, version=50727,
count=97, id=1, productName=Unmarked objects,
count=129, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=69, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=146, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
assets/fonts_clean.swf
- SHA256 fa1d286881ff1d3afb60c1963f0f99aef962a351440c8f62269bbba6efa76b63
- MD5 3a212cda1c946bdbf9a820d660d35fb4
- SHA1 f617aa15014af4f4f5cb3f4b9f619307d17e7b30
- SHA512 c947f3ca8a35418afa7e6211dd730bd7aff6ec43be24b6536496b5a1b45eb5826c9fbf0f207b15c4800060a01cc607e5f74ad783baf61268b3179282cfc41852
- SSDEEP 12288:pVFcFmxcBBALEYy+5TGWZIku6UHIKBQCsKYDIA7UEciiC/6gYaTBExaB:pVFUBAQYV5THZI16VKyCs/Xc1GDBz
- TLSH T10EE423D88FE820E1427A4336BCE9AD02140C9B6BDE48DD95891D1A6DBDFAD32F4431F5
- MD5 SHA1 SHA512 SSDEEP TLSH
assets/fonts_system.swf
- SHA256 3720ce7f657d60c3d87646c9b975f0cbf099ccc522a573b9259a282fdc989af7
- MD5 bceeaa19bc4d2a9ca004a0ca3e8bac99
- SHA1 a315e724e834eabfb8811d5eddfed9e542f2eb9f
- SHA512 0dee909c4527239a8414c69a04d70bfa01d323540fa7403325e5cd04815301034de74d24f9e2ebc14e63fa42ecb0304079a7fe002059bc9f65fa4fa5981ef85f
- SSDEEP 6144:f9cMC/oWDvFzzuHJse27lg1Y+FUe7ZS5B8N92k0m1osajUq/0iWaiu/N:fz0otCekaY+37wT6d5eDzv
- TLSH T187642360D278E65B0177ED8CC4DFA687781AC70BD5C7F4C81D4902E96B8EEA1F093698
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe CC 2017/packages/LWA/LWA.pimx
- SHA256 9ac55f4c9b4056308ca171e496d7fcdc7527eed6637665376241b495e1ce1cf2
- MD5 84071b4404273adfc0532c1a87a56980
- SHA1 e6e1baf130fcfae253b8ee1ffd89b9c4c91edf61
- SHA512 ccde1a5128ec33702edf78740870959c03d8c79e8d942481a979a79b2df836d63c3e83333f679ce813332df128c15652dc510e1b1c78b6804e1b2833b6d945b6
- SSDEEP 384:gNCQsMCFwIY0VSsDHyMazFtAcWUVTp1JyUELxz9xtiWm7ImGnfAClVh4Oe+nraFV:gNC+ACresn5TyZBLtXNjn4inraYng
- TLSH T1982317AC01696BE1740BDE643C601E47694FB27EF67031F472984EB686D5A8F0E8B533
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe CC 2017/packages/LWA/LWA.sig
- SHA256 40894e5e4c6a2ccc0d37957f0dd537d28b70a3236be50397e389a2d4f36ce160
- MD5 5bcb9fe2759a4d353eae935ba912b880
- SHA1 79e0f1e3af8cddeac67198e7cf06527a26828eec
- SHA512 2aeea0701df16e1c2f644c465a6448b7dc8514e19d99a7437a788cd7e826969682ffdd91226c4d5eb1b986d56be5224490d5bad328e7fdacc3e93f92dfd1305f
- TLSH T1A1310996305DB051E6B75DE38A2429273740C4A76F2D414EB4E186AFFF6C86A1F130F4
- MD5 SHA1 SHA512 TLSH
Adobe CC 2017/packages/P6/P6.pima
- SHA256 97c6b4f22dbd20c069926fee6c62ef6baf2cb75aab2c9705a831a4707d351919
- MD5 a0eaad394b7c060bcf5a3b62fa28dd19
- SHA1 e473dcc25e70e3b547d50690017a5fdecc2384e7
- SHA512 03d09f4ef3cb2d425e4fd936a9f443d507ab83bfd968cf479527efd6ba2e75f5d5f3ddd68d23dfd7497ea54e9dee6cb2c3e96fa1e28c9d11769d11149dc71aab
- SSDEEP 196608:G8hE+2GVQtf73j+I8E5Ge9D2bPLKFNIrwa:Gr+6tHZ8Feq+Fawa
- TLSH T1E2663321FD45F016F666E33205502027F9004444191DF6BE0EA977B27E2ABD78FFBA9A
- MD5 SHA1 SHA512 SSDEEP TLSH
AAM Registration Notifier.exe
- IMPHASH ab5cbd58af43be8e1db35bb6c0a7177f
- SHA256 586df54f5c5dc1ec59b71984c6a94c74e37093337e0a512ed1898dbfd6cf775c
- MD5 d35cbec68691bb1c6bf193f4cd92f76b
- SHA1 48fdb04d1c97bd57f408af67155132d59eb5f15a
- SHA512 6344ffb73066106873a2db2fce3f552bdca4e30775db82e16711e7a6b21377c296b3b3e20600862f840d2ab038bb04aa8fa8465f6dda8ee2d1c3fb277f0fea72
- SSDEEP 6144:tKJFvFfgWZHHWVf9JSFPMVZF/CNQRJwELmPx:tKJFvyC259QMVZF/CNQLw/x
- TLSH T116546B20A6A0C037E4A31631CDBEA76A493ABC315F61D1CBFB943A2D5D707D19A3171B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
ca:04:86:e9:db:09:38:ae:08:ef:ba:6c:c9:63:75:ad:e9:9b:9f:2f
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Chains
Apr 22, 2014
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Serial Number
1d:37:83:b3:de:cd:5d:bb:16:e3:3c:d3:a6:b3:bf:db
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 20, 2014 - Feb 21, 2015
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
1
Major OS version
5
Entry point
90408
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\oobe\7.mbls\dev\aamcore\target\win\Release\AAMRegistrationNotifier.pdb
user32
DefWindowProcW
UpdateWindow
SendMessageW
CreateWindowExW
ShowWindow
LoadIconW
RegisterClassExW
LoadAcceleratorsW
wsprintfW
EndPaint
DestroyWindow
TranslateAcceleratorW
GetMessageW
PostQuitMessage
PostMessageW
LoadCursorW
BeginPaint
TranslateMessage
DispatchMessageW
ole32
CoCreateInstance
OleRun
CoInitialize
oleaut32
GetErrorInfo
SysFreeString
VariantClear
SysAllocString
shlwapi
PathRenameExtensionW
PathAppendW
PathAddExtensionW
PathIsFileSpecW
PathRemoveExtensionW
PathRemoveFileSpecW
PathIsDirectoryW
PathFileExistsW
kernel32
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
GetTickCount
SetEnvironmentVariableA
CompareStringW
GetProcessHeap
SetEndOfFile
CreateFileA
WriteConsoleW
SetStdHandle
HeapReAlloc
GetStringTypeW
IsValidLocale
QueryPerformanceCounter
HeapCreate
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
IsValidCodePage
GetOEMCP
GetACP
GetLocaleInfoW
GetConsoleMode
GetConsoleCP
GetCommandLineW
WaitForSingleObject
SetEvent
GetCurrentThreadId
CloseHandle
CreateThread
CreateMutexW
Sleep
ReleaseSemaphore
GetLastError
CreateSemaphoreW
LocalAlloc
OpenSemaphoreW
ReleaseMutex
GetCurrentProcessId
LocalFree
GetDateFormatW
CreateDirectoryW
WriteFile
GetTimeFormatW
CreateFileW
MultiByteToWideChar
GetTempPathW
GetLocalTime
FreeLibrary
LoadLibraryW
GetProcAddress
GetSystemDefaultLangID
WideCharToMultiByte
ReadFile
GetModuleFileNameW
FlushFileBuffers
SetLastError
CreateEventW
GetStdHandle
GetUserDefaultUILanguage
DeleteFileW
InterlockedIncrement
InterlockedDecrement
IsDBCSLeadByteEx
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
SetFilePointer
GetFileSizeEx
OpenMutexW
EncodePointer
DecodePointer
HeapSetInformation
GetStartupInfoW
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
RtlUnwind
RaiseException
MoveFileW
GetTimeZoneInformation
LCMapStringW
GetCPInfo
SetUnhandledExceptionFilter
GetModuleHandleW
ExitProcess
HeapSize
advapi32
SetSecurityDescriptorDacl
AllocateAndInitializeSid
SetEntriesInAclW
FreeSid
InitializeSecurityDescriptor
shell32
CommandLineToArgvW
SHCreateDirectoryExW
ShellExecuteW
Shell_NotifyIconW
Name
.text
Size
187KB
Virtual Size
187KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
45KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
7KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
28KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=152, version=20115,
count=24, id=158, productName=VS2010 build 30319, version=30319,
count=15, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=178, id=1, productName=Unmarked objects,
count=71, id=171, productName=VS2010 build 30319, version=30319,
count=170, id=170, productName=VS2010 build 30319, version=30319,
count=21, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=15, id=175, version=30319,
count=1, id=154, productName=VS2010 build 30319, version=30319,
count=1, id=157, productName=VS2010 build 30319, version=30319,
AXFB/AX_SLConfig.xml
- SHA256 e75ee110d3e95d99dcec280124b2b0b1fa5f118484d7dbb347ba2bf36ff3e3ba
- MD5 68943c19c380aaa4fe8b5c1f46ac71a3
- SHA1 c23d911f3fc66c02aa75a378b8870e7496da549e
- SHA512 7bb23b9b5dfca885574aeb0aa6480b3645698c03ef163766ad79be263612be2f5f1e76bb71c0f60a32cc80b30830eb27968b897638d7a3a476ca4575b0a4ddf4
- SSDEEP 384:Sq3vAbTPFIcB3aKO7dcB3aNJT6xc0aN5j6DvBxq3LXXkd6DvAtBxq3LXWB0:S/PPqwOB/JWxamzSkAktv0
- TLSH T13B62D84602D3312FBDF7732101A6BB1AFE54652311AD34CAF2EF94400F52626E6A7E1D
- MD5 SHA1 SHA512 SSDEEP TLSH
AXFB/AX_application.sif
- SHA256 0209f2f2a91e25851ada5341cb1126819c13cb348a7da0f87548032ef96ab003
- MD5 82aa00f13e438bb2f645f0153e1c5f90
- SHA1 ea90c49ca8825cbf37d358e9e3f64bb84b395411
- SHA512 1e9597ea22cede555b2efabeb88c5498f4675d64a7e3f0ddf51cee7573e0b952aaaea4643c0241fb8081f8ad279d06107139554e8cfa0268b849c90a590a4fb5
- TLSH T14B71E7A77748BC3DD6D123BD298D1F3973B6E0B02E8A8767115C1BAC1C132D01ED4958
- MD5 SHA1 SHA512 TLSH
AXFB/FB_SLConfig.xml
- SHA256 73693234072bd271cb9fc739e4274b15d79ba884155a66b858aa5ba262bb5f0f
- MD5 110849d681255b1bd72179feba8b582d
- SHA1 a26d2fa70af7313a6d00554bfe64eebba7964886
- SHA512 f0df68d1dc9b3e5cefcb0fa17eab457db8c2da66a2a9e145c2672b4ec77fa3eb19e1c5d820b62978be6ed3a3d6b97e5201da559a48d57d41b6559970d48e2ec8
- SSDEEP 384:2FV3z/owP9peEvXIrvD8yMvmV3zbvLzU0UprHuxziJwFvpFcX6BwdEw9c5kbTw6p:Eol81uQJN6B2bTPUjaZYab
- TLSH T1772394074EC73E2B63D6224200FE35C9DE5C5B67169A00D9BA9FF444972221EE5F3A6C
- MD5 SHA1 SHA512 SSDEEP TLSH
AXFB/FB_application.sif
- SHA256 6f79d2884730f71172a9266cb91fc790b82fa22805a9669d2b3f64d1b76ed0cd
- MD5 4d6d48d6c20cde87750b63c65e220e63
- SHA1 f6c85d4e67abaaf82cbac65edd3a1ff791b6ef4b
- SHA512 2e3dba8b235615405f97df23f392d397014bd29e080f736ca06eaed8a08a5b77e8399d2df617f751900adfed00e9a3e1acd76c60d4167b9ecdd0d59e5a7937af
- SSDEEP 96:r5GdaWk4ytu8V7TrzDIcIgcOsvx1U6jZ8EgJ4wDvk:r5AaWk4ytu8V7TrzDIcIgcOsZ1U6jZ8G
- TLSH T1EDB1DF9B7B14F921CA1624FC4D9E7FA8570AE4752C4E338BA44C5B4E3C670F50EA4D98
- MD5 SHA1 SHA512 SSDEEP TLSH
IMSLib.dll
- IMPHASH d2bd03e0f585d5b9428a537d680aff97
- SHA256 fb2dcadfa6957614689358cc15b7b1025b9fb4b0c464a37d25695e81ecf99242
- MD5 a929a601adf84d0aba2a17fec23bae3a
- SHA1 e399f8b24793de82ebea52b092af584702102330
- SHA512 083fe0aeb5d29f15a0a17337ad6bee366df1a2cff74e79626245aa33857ff29759378997e12cc68c5ce91011b22cb1aa4f8e32c65485f81c208d5aeb73527b4b
- SSDEEP 24576:UGV4WrZbdsahQc7FjWl1KM0G5MvIfBZRA3ACY1suRjtICNempl:SWZbfbjWY6UALofY1su4CImpl
- TLSH T160459D11ABE0C679F0EB12B59A3D5B2E1D3DB921172081CFB7C02D994E706D19E3A367
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
fd:e0:be:a3:c6:d2:42:84:33:42:ba:df:cd:2e:f3:c0:3e:3b:0b:d5
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Chains
Nov 5, 2013
CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Adobe Systems Incorporated,OU=AAM+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Serial Number
11:c9:54:ae:24:12:01:1c:f5:4a:7c:3c:b1:8d:75:1e
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 19, 2013 - Feb 20, 2014
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
1
Major OS version
5
Entry point
805051
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\oobe\7.0\dev\aamcore\target\win\Release\OOBECommon\IMSLib.pdb
winhttp
WinHttpConnect
WinHttpCloseHandle
WinHttpSendRequest
WinHttpGetIEProxyConfigForCurrentUser
WinHttpAddRequestHeaders
WinHttpQueryHeaders
WinHttpSetStatusCallback
WinHttpQueryDataAvailable
WinHttpOpen
WinHttpOpenRequest
WinHttpGetProxyForUrl
WinHttpCrackUrl
WinHttpReceiveResponse
WinHttpSetCredentials
WinHttpReadData
setupapi
SetupDiGetDeviceInstanceIdW
SetupDiGetDeviceRegistryPropertyW
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiGetClassDevsW
CM_Get_DevNode_Status
kernel32
GetEnvironmentStringsW
GetFileInformationByHandle
WaitForSingleObject
SetEvent
MultiByteToWideChar
GetLastError
GlobalFree
CreateEventW
WaitForMultipleObjects
CloseHandle
CreateThread
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetFileSize
CreateMutexW
SystemTimeToFileTime
GetCurrentProcess
GetModuleHandleW
WriteFile
WideCharToMultiByte
Sleep
GetVersionExW
GetFileAttributesW
ReadFile
GetModuleFileNameW
CreateFileW
FlushFileBuffers
GetTempPathW
SetLastError
GetProcAddress
FindClose
GetCurrentDirectoryW
ReleaseMutex
DeleteFileW
LocalFree
GetSystemTime
SetFileAttributesW
lstrlenA
InterlockedIncrement
InterlockedDecrement
ReleaseSemaphore
CreateSemaphoreW
GetCurrentProcessId
CreateDirectoryW
GetDateFormatW
GetTimeFormatW
GetLocalTime
QueryPerformanceCounter
SetFilePointer
GetFileSizeEx
GetCurrentThreadId
OpenMutexW
GetFullPathNameW
GetFullPathNameA
CreateFileA
SetEndOfFile
FreeLibrary
UnlockFile
LockFile
GetTickCount
GetSystemTimeAsFileTime
FormatMessageA
LoadLibraryW
GetFileAttributesA
LockFileEx
GetDiskFreeSpaceW
LoadLibraryA
GetDiskFreeSpaceA
GetTempPathA
AreFileApisANSI
DeleteFileA
FreeEnvironmentStringsW
GetModuleFileNameA
PeekNamedPipe
SetStdHandle
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetDriveTypeW
GetConsoleCP
GetConsoleMode
GetProcessHeap
WriteConsoleW
CompareStringW
SetEnvironmentVariableA
FindFirstFileExW
GetStartupInfoW
GetFileType
SetHandleCount
IsValidCodePage
GetOEMCP
GetACP
InitializeCriticalSectionAndSpinCount
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetLocaleInfoW
HeapSize
GetStdHandle
ExitProcess
HeapDestroy
HeapCreate
FileTimeToLocalFileTime
FileTimeToSystemTime
GetCommandLineA
HeapReAlloc
HeapAlloc
HeapFree
DecodePointer
EncodePointer
GetStringTypeW
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetCPInfo
LCMapStringW
RtlUnwind
RaiseException
GetTimeZoneInformation
MoveFileW
InterlockedCompareExchange
InterlockedExchange
user32
wsprintfW
advapi32
GetUserNameW
shell32
SHGetSpecialFolderPathW
SHGetFolderPathW
SHCreateDirectoryExW
ole32
CoInitializeEx
CoInitializeSecurity
CoSetProxyBlanket
CoInitialize
CoUninitialize
OleRun
CLSIDFromString
CLSIDFromProgID
CoCreateInstance
oleaut32
SysFreeString
VariantChangeType
VariantInit
SysAllocStringByteLen
VariantCopy
VariantClear
SysStringLen
SysAllocString
GetErrorInfo
shlwapi
PathFindFileNameW
PathRemoveFileSpecW
PathFileExistsW
PathRemoveExtensionW
PathIsFileSpecW
PathAddExtensionW
PathAppendW
PathRenameExtensionW
PathIsDirectoryW
IMS_EEPLogin
IMS_createRef
IMS_createRefEx
IMS_createRefForProductVersion
IMS_deregisterClientFromGroup
IMS_fetchAccessToken
IMS_fetchAccounts
IMS_fetchContinueToken
IMS_fetchDefaultUserInfoForClientId
IMS_fetchIDPResponseForKey
IMS_getDeviceID
IMS_getProxyCredentialsFromIMSLibSession
IMS_logOutUserForClient
IMS_registerClientToGroup
IMS_releaseData
IMS_releaseRef
IMS_revokeDeviceToken
IMS_setProxyCredentials
IMS_setProxyCredentialsInIMSLibSession
IMS_setUserAsDefaultForClientId
Name
.text
Size
938KB
Virtual Size
937KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
187KB
Virtual Size
187KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
31KB
Virtual Size
57KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
51KB
Virtual Size
51KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=3, id=152, version=20115,
count=31, id=158, productName=VS2010 build 30319, version=30319,
count=200, id=170, productName=VS2010 build 30319, version=30319,
count=1, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=85, id=171, productName=VS2010 build 30319, version=30319,
count=72, id=109, productName=VS2005 build 50727, version=50727,
count=15, id=125, productName=VS2005 build 50727, version=50727,
count=232, id=1, productName=Unmarked objects,
count=21, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=64, id=175, version=30319,
count=1, id=155, productName=VS2010 build 30319, version=30319,
count=1, id=154, productName=VS2010 build 30319, version=30319,
count=1, id=157, productName=VS2010 build 30319, version=30319,
OBLRes/ar_AE/ConnectionFAQ.html
- SHA256 d8b820365e17237d8e08b478c2637451097c8e84408d0dbd14ccfe3508086d3a
- MD5 e8d6ed9dfd168040856585c3e491920c
- SHA1 7267961d3e2906cf98a171c985373655dc77a6a1
- SHA512 39a6490ce66df765af731ca31bfaeb11590616b551efe79c320655171a1e69b9b316fef7505555781ac4f9a5c57e031f084db047c100607e9f3663416c3711a9
- SSDEEP 96:VJinKsPCBD0hdtHvFKR8n+x9LEZ6l9ucio5t2Tf4meO/jgRzeWjgRLYTWjgRLqSO:tBcE8n2l8o5CfzIKYdqSp82KzqEXEw
- TLSH T15B322F32EB18050AF0E655D971B222957458DB49A30354B6F077BE2ABCCB9F733C126A
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/ar_AE/LicenseFAQ.html
- SHA256 9409ea79c89cfc5c93896a0eff9214d12d4852330c5c07ad8384ba34876bab25
- MD5 c0e7bde62780c17aacc2dd7a364725e9
- SHA1 3452000e41b83b4a194f2e7e68fba36db8e6fb1e
- SHA512 8bd625c44518ff10b395e4f64e252dd315f7ac59eb99e1141c2c22366fe29844f39004924fca1f81d80b26a4bd592fbb4343111cd98547b1d53f1e63a5dc2125
- SSDEEP 192:tCcYB8n2l8o5UrPKpp828ZuU6/jxUoQgp5ojiebm:tCb8n2l8o5UrPKnVfjxNJJ+m
- TLSH T1BF82FF21EB281406B0F648D9B166129464A4EA4CA3165875F1777D7EBCCF8FB33D036E
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/ar_AE/Main.zdct
- SHA256 94aae88889376b4adc40a162963bdbd9588f09dd0952896a7d83da7beacb0df5
- MD5 28438a66a4336f13f0f9a56b502e1707
- SHA1 e8e39fa290bf567a608d577173c055459e631d0a
- SHA512 02a8ca8bb02a4b60628b8a68112e684833ef6a4f9641a7df737059224b55ac2fe09b91a944542a38628106bed95beffb1b5978f724d809a55521536500dadf0b
- TLSH T19D41F9819BDCEA3477B30A1CFD3EC81346EE76466ECD8A3D15B08C1D05E55609A1BAE3
- MD5 SHA1 SHA512 TLSH
OBLRes/bg_BG/ConnectionFAQ.html
- SHA256 6e067e7b49cfc00cbc022b224b66645c1e766d0f0030308a09ce7d38769bcf81
- MD5 c7a1c7ad22f55945883f6088598ddad2
- SHA1 03fdbe3f8a7b35f22647992e92cfd9dbfb040266
- SHA512 f4522246fea0ffce242be2ec4f415465d36741f7599a55f20a2cc8ec8d941c21d9c44212788bc628a784105929864a3040ec31f9e915ba2c501295d3509ae456
- SSDEEP 192:W9wq8Tll8o5CfzIKYdqVgWiaqTRFqGr9Fxt9cD+:WF8Tll8o5CfzIKYdagWnqtFqGrbxtCC
- TLSH T1AC424022E7181989F0F25AD5B0B216516474DB49E30364F6F0377E6BB8CB8B737C2266
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/bg_BG/LicenseFAQ.html
- SHA256 e1cc56aa044e6a17fed1b468bba2abbbd4be0be1e9757f1db3f1bb7d25443255
- MD5 015be0e6ecb2135ba75e4904b9dc15da
- SHA1 d015b1f200355d58f21d4a309236c7d19756c319
- SHA512 6702d60fc1a2e8d2d848674006a3a8ec9b2d65cfa9f23b7175f69324a5f0d15883882a6aee90c4ddff044eb4de9ec112220b15d63bab90f8038a31e66bd8b828
- SSDEEP 384:WN8Tll8o5UrPKygW7ombH4ocO05FgyL5APYX:WN8Rd5NiombH4o+XAI
- TLSH T1EB822022F7291489A0B54ED8B1A713546464DB48A306A8B4F03B7C7ABCCF4FB37D1369
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/bg_BG/Main.zdct
- SHA256 5bdac9b8b2ee3ab3a48ce6b6b39853f74bea0d85f56eb73a48f9d2a6f7bd47fc
- MD5 c193a187b9f3fd1838a346f72cd78ca0
- SHA1 b6dd938fee2b3fb518699e694d47e2bae3a83608
- SHA512 1d2cf10f581f077c247d751f2bea6caeeac5fea14c4f8b3c98ef83fda3770bc5e046ad63d94ba733369d9f14f19e7b3b9bf630ab844471570d309e8bd02f5551
- TLSH T11451994FE6FCA10172B6920C2F7A48E615EE7B052B1D898D556F7C9C50ECA3163263CB
- MD5 SHA1 SHA512 TLSH
OBLRes/bg_BG/oobe_launcher.zdct
- SHA256 b92878d7ea406dd54c8ebce2235520787e7d8439e470e86b4a3e7514beec2e05
- MD5 09b4e586f1641ad6eb6f34665ef1f8f1
- SHA1 3932bf40beadef80c74f0816e3e9233860f1ecee
- SHA512 21e08e756aa1ee306257b9bc5cb9c46b7e4efba2219c44fda97be3d7ada1d5d13236201ee366c2afbbdba347eaa71c29eedac44bd52edec66d8b9df41946f1a6
- TLSH T12CF0A7B9DA42A366578CA1FB70CEC4C6FDFCA2AC82F43C1502021285B59363921778A2
- MD5 SHA1 SHA512 TLSH
OBLRes/cs_CZ/ConnectionFAQ.html
- SHA256 706cea3ac5229ba42974a5dc2d98e1fcaf5984be605d3e52b26a1b5bad382d34
- MD5 bc21a0d2dd6bf447543cf973992774c5
- SHA1 9314e664da60951cd1f4ab4f81ceecb2f37d6ead
- SHA512 7b25620a07812100353d02ae481fbb942cb0ac83fbde39a2fe949e54e3e657da46f4baa66fffd0f0c96abb6e461999a578962da63a3b6aca144434ddcc186f02
- SSDEEP 96:VJinosPCvu6hatUvmFDn8T3I95Nh6l9ucio5t2Tf4meO/jgRzeWjgRLYTWjgRLqg:Xjq8Tll8o5CfzIKYdqVgW4dACQg6oJ
- TLSH T151324232E7090549F0F645D9B0B312517868D749934794B6F0777E6ABCCB8B723C22AA
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/cs_CZ/LicenseFAQ.html
- SHA256 441b86951a7169c29e02372bc48cf7c39dae7f8e43339ebb64e6bb0dc0fbac8c
- MD5 874e53d2bd349b1f98b08367b6dc8c3b
- SHA1 f2febec8fc4153c6335362ff93c2da30ec3c02af
- SHA512 c9819d64a1d2490db7b69eb0e6e29ce12f6b16a794ddafca8f3c681cd6615fed1da6b86c4f85e7c5023d7fbb7b4608d683b4ce054263e4b03348d864ae1e767b
- SSDEEP 192:XKUO8Tll8o5UrPKygW9B+CFzp5somVKBhNNntL:Xu8Tll8o5UrPKygW9B+CF7sotZlF
- TLSH T167824322FB280415B0F649C9B0A713946464EB4CA3569475F07B7D7ABCCA8BB33E1379
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/cs_CZ/Main.zdct
- SHA256 5d39922768ba901c5e81a6958daaeb44ef7808ea18f55e493c6b35971a597560
- MD5 dfb1416e0431ffd0a0d2b624dba53ff8
- SHA1 cb72fd99e86e8b36f13adcd0995e2cdb09873498
- SHA512 1f1664f41bb59400a8f91485558ce18aabf251dfcd65cc481a45ee9fc4c9aaf22a9273dc89231ae7635e5d5b8b9b7ffd82b67826d354add5c54ef620c421230a
- TLSH T14051AD9153FC2501B2F36F0CBE7815660DFF7996AE3DCA4E58A0094D05F5A80D9A2BA3
- MD5 SHA1 SHA512 TLSH
OBLRes/cs_CZ/oobe_launcher.zdct
- SHA256 64edf68f7bb764647801c17c687bf63864e60ebd0aa4cfd3434970993c2097e4
- MD5 e926887fcc71030d4ac6a332034fb74d
- SHA1 d94b86056405a234c07e646a656c605cfd5698e7
- SHA512 cb7677209c790f8b41e95998506fb88307c576537735806a40267943f546e9cc959bc42a288bbd81f90cfb60f1393f4309b89de4e844f1435b31301a9e1bf129
- SSDEEP 96:mtf7CIB7CWT7CGO7CAj7CTsWa7CbvC7CIsWa7CVxhDCHS7Cv:6bLcBbWc7GWce/Xo
- TLSH T15EA1391273F81654F6F37B0DAABA35A15E3F7D94B930C15E6128424C09BAE859CD0B33
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/da_DK/ConnectionFAQ.html
- SHA256 74542227a4d048728bacaa55f40ecf75a9f2bae2c1ece220e880173ad8d34e0d
- MD5 e5385a09f8b439becbeb8c4fe5b04092
- SHA1 9cd97ac38f39646e972d5835f6f57e469f24cc76
- SHA512 8bf27adbdc608497ac7aacc1ac6d1529fd3192c242d3cc4aa07b6c62f888862f551464a4843591697ee0353ac8f5e9a948e5ebb31324dc36341b95cad43baa18
- SSDEEP 96:VJin+sPCD6hatUvmFDn8T3I95Nh6l9ucio5t2Tf4meO/jgRzeWjgRLYTWjgRLqbE:dEq8Tll8o5CfzIKYdqVgW9oow
- TLSH T125424032E7190619F0F649D5B0B222956468D749D31354B6F0767E3BBCCB8B733C22AA
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/da_DK/LicenseFAQ.html
- SHA256 3fb08a864591f2b78ce205f340ee580f6a7c72725847870123413c7c13ccc5bb
- MD5 2470698e1ebe7b8966f420bdd23bad1b
- SHA1 f90f662a23c9f194d8ebf17472bc76b095d9fd0e
- SHA512 87223f5464a36d3e6cfbbd92bf68c66dd47f9ec6bd26a21b8df7001eade8dd1459d2e5c2643dc1960399b78cdeddafd507bfdc308c5e54b3e79cc537fa499119
- SSDEEP 192:d9UO8Tll8o5UrPKygWmlzBSkeHt9sUf49ZCEiY0MXHL:dL8Tll8o5UrPKygWml1yNfnYn
- TLSH T1A3823322EB280415B0F64AD5B16213A56498DB4CD31658B5F07ABC7AFCCF8BB33D1369
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/da_DK/Main.zdct
- SHA256 7b8cd3ef7c80b75e433025c7940c632af691b8b40830379c9df71ece94117a9f
- MD5 8623fca8be11700bfca129b992b88089
- SHA1 587ed7fb189f4c06de7424172507d3eee9a1ceae
- SHA512 463e3cc47abf64e1f153962a81e4f0e0c3e4ab33677211c001637c4ee2dbfca70d5825407450ede58516c47cf6379baa86742ddb2138c3f9114876afe80a8794
- TLSH T129514891A7EC6A09F6F31B1C7E7904510EEAFE866E3ECA0C2560594C08F5580D5B2B73
- MD5 SHA1 SHA512 TLSH
OBLRes/da_DK/oobe_launcher.zdct
- SHA256 df59239359e21d36b22478d7cbc580cb7daedc244d7e81100713fff68fcbc8e6
- MD5 b9beead31e264b57792738b1e76e0c99
- SHA1 31aae69552f004ee18c75c58b11cab017c6a2178
- SHA512 7c94ac56c52d173707829c01b1ee1a1ae128bafdbcbf5c42dd311a7fe4cd50c649fd05d9e7532f8e767eb54e64ae40106d63cd81ff4e9631aa3c26277f5e0fe2
- SSDEEP 96:p+1FCJ7FC3GFCXQFCB+FCSISFCKEFCb1ISFCrOfqtCJ+tCB:MQZ//vsa8h/i
- TLSH T1DEA1E52673F96608F5F7271DAABA70941F7EBDD4A939C26D2160410C0CBAF8589D0B33
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/de_DE/ConnectionFAQ.html
- SHA256 416d9d4c1cd083aaddc82060092a11a6545fa2f5cb9b70f7966c8b6ec623f4f6
- MD5 f5f4a59c696e5a77349fef6bb0400bbb
- SHA1 250fdb37f3ae90ef76159edd31da485f3c490c07
- SHA512 c7e5faaf781df7dc6106915ff5b0477745b3f6d1af24df94130c58603daf34e0135e65bcdd88a849415ed415e2aef295072bbebc2e4143673e14d6c79a08ceda
- SSDEEP 192:dF9q8Tll8o5CfzIKYdqVgWtL0QRp3oz7FljvKLvAoaZP:de8Tll8o5CfzIKYdagW5CnFsLm
- TLSH T11D427332E7090509B0F256D5B1B212A17468D759D31364B5F077AE3BFCCB8B727C226A
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/de_DE/LicenseFAQ.html
- SHA256 c430aacb3dce799d6df06e3ecaa471edae33c9826c8f1a7f7f65e1731b7d1fd5
- MD5 1eba6aeaec0e67abc3c9e6949a53c3ba
- SHA1 0f561fc5398f6dff6bdab69419ad29411d1df1f4
- SHA512 bf32936c27615caedccc66fd2161a0dbdb42f18c81ae32b3a2f89d84db9cac78ac060af7109fd3afc72c4e3623ea13da4891bc14792f4eb6638faf70f45df39f
- SSDEEP 192:dK9UO8Tll8o5UrPKygWw74ubGMC35mD1dPBz64+to5u6EXbErvO/vafufVFVVuUC:du8Tll8o5UrPKygWSbGMJQQjO3dfrxy
- TLSH T1ED824322EB190409B0F64AC5B16213A534A4D75DA3129874F07BBD7ABCCF4BB33D127A
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/de_DE/Main.zdct
- SHA256 f75df711de3885bdbe4504d0f7b9dd9c2aa931c96522d2faed65488368d46bab
- MD5 4c49c8d0dc821f2eb8a7023629c8f32d
- SHA1 5fe392352cdcc76ad26cf5e701829ac8229d6a3d
- SHA512 20fee89e5b46d1158906477c76cd6ce3fde5fff259b872154d72074c3b6d3a35652dcef8cf9d8219383164ed6e43f3b9093099102dd0754f7f1aa54748566bff
- TLSH T178515E5187E8A609F2F32B0CBE3C16551EBBBDC6BE39DA0C1660581D08F5A409962B73
- MD5 SHA1 SHA512 TLSH
OBLRes/de_DE/oobe_launcher.zdct
- SHA256 404189c9fc1e8ddb2c386ed1636b4cc2fa18bb0cb2d5cb1ea0b5a91022e818c6
- MD5 4b08bec1f13c87c1cb7472b2c869466a
- SHA1 7da9e0ca989449ff2f07b00c18131d8b2052e083
- SHA512 3f631922c24669e8b6e2cb02f9fc975459576ba7cc80da63e76ca5d45fb7275a9a2466eb7c58cc78a9ec1c3cf14f0521469513113421b46f0845b4b940d7715c
- SSDEEP 96:AjC10+Czx10+Cu10+C8E10+CGE10+CPk10eCtE10+CP10+CIX10+CAcn+C+:Dh4hrhyhYhBJbhyh3XhBN
- TLSH T13BB1F91263F9A748F2F33719AE7A72A01F7F7DD5A834E15D2260454C4CBAE4489A4B33
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/el_GR/ConnectionFAQ.html
- SHA256 5e853e130754976496ceb56b465cb8e908c0fcd7888da848f9fc1369f38430fb
- MD5 4c13864f285824753e0613422191d29b
- SHA1 37b50776bffbef13edbc64fbdadbf98621af4156
- SHA512 8aacf5494654d86dcf846085a733dbec5347378a36993edea33a6fb84bbacb2b3355921fb2e59991ed85117149c14f66804ad2ef975f3edf3cb74a6b38604a51
- SSDEEP 192:k8Aq8Tll8o5CfzIKYdqVgWT4ZBz/e/REKuX:kY8Tll8o5CfzIKYdagWKd/sk
- TLSH T1D7427531E7190509B0F25AD5B0B212517868C759D30395B5F07ABE6BBCCB8B737C22AB
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/el_GR/LicenseFAQ.html
- SHA256 f832c7f6360ca7498554f9dbc79354b491a1211cc7c388f65207929cccdffaef
- MD5 79c0e8623022b5f788df9d7d741c61e0
- SHA1 a46966a0a3a94d4f153f76ef3c9f7c3f37dbfed8
- SHA512 4068384c9b1911be337095a9fedb0783e43278d8b69541dc3d0d91d0e96e942dd7d47ca4c9d6528494f8b94a1b7d2a65f9d806566e0597dd915004785dff801a
- SSDEEP 192:kNAUO8Tll8o5UrPKygWukKjIiTZwAG4Akeeu2hunHgBhuMh2LeCCU:k+8Tll8o5UrPKygWu4cJe9p00
- TLSH T18B824312E7240409B0B64ED9B06612956454DB1CE3569875F07BBDABBCCFCBB33C13AA
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/el_GR/Main.zdct
- SHA256 2f850b23be8b90d3bb96c0f0fa33b29decc4b8ba7d703c59344d94dd82a31888
- MD5 4a396195a78f20e1a6cda0e540a471fd
- SHA1 9f5c7c099a6adb5905ff9cecd18ce053a44adad6
- SHA512 4db0a8c565dfeb48d045cfb3a6590d524ffd51d6a4790f07fe22865d89a98cf989eafa2ab39f28d74fbe519dcbf7711f4d8b5ea4fb5c6b6a257a6fcde2299dcb
- TLSH T12751E28D8AEF6A11FAB75AEC793B45424BDFF9461908CE1E35B0700DD8EC90049D3A53
- MD5 SHA1 SHA512 TLSH
OBLRes/en_AE/ConnectionFAQ.html
- SHA256 8ba72a16729211dae68bb3e093d43e54a29f99019cf9c612c5734d1e728503ef
- MD5 5ebcacb7f0e1422f0c3fa20bfaa29c3c
- SHA1 7fc7064e6e0bd5563078be36e1c3754991f9a865
- SHA512 7a2e015d8af095f04a2c7460e652a9ff15babd699bcd27f22b44b8f16225d9630d2ef51cff47824cb4cf1e9ab37219ef5da5ee814ddfb00f0f0c53789c12a9c4
- SSDEEP 192:BHe1a8XUVbQk10gVpfTY2di/nSWnG4obEz7qW:BT8X4bQk10gVpfTY2dsnZhoYn9
- TLSH T1F4426232E72A010591F746E5B1B21252F438E749931754B5F137BA7AACCB8F623C22B2
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/en_AE/LicenseFAQ.html
- SHA256 50ffa995427d576ac7a4c1d564788a6a552a8bcb4b7cf393c7d132a443f48cbf
- MD5 665e1985893f9e0701f79dfb1f99a4d7
- SHA1 b695b2c8f15852dd204edaad62254447606fa4f3
- SHA512 00a4fdb70d80d0881d1498139b177821c6be70e910d93eb5b32a9cdc57f9eed121656e975f8e86bbecf6039943e0c7ec2579e5d8e23f1553d92d0fe6ece3aa81
- SSDEEP 384:BE8X4bQkY3TYUnZwSrLGOJZn86JaichcJ:BE8iQkM0UnmSr0iJ
- TLSH T15C826522E7260014A1F60AE571A613D6A478E64DA3165470F13BBD7DACCF8FB33D22B5
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/en_AE/Main.zdct
- SHA256 b85ed26e8a037805183d7558943d9d02de007906b83453af54c3618dfae3ec16
- MD5 cf4d276079a857f528c6d6b5d3708408
- SHA1 b20ecdf34ea3aab0c8747378a6d686990ee6371b
- SHA512 ed45ba8fe41678ed413ed14cf86a514e8a70e2d69718e313ccd0e8b985190ef2cb06e7bd9435a2c25eeb0a227343db0d3ce8a5dfa3d321d6a634a75088880903
- TLSH T160516991A7EC6614B6F32F0CBD7915540EFEBD9AAE3DCA1C1160045E08F5A40C8A2B73
- MD5 SHA1 SHA512 TLSH
OBLRes/en_AE/oobe_launcher.zdct
- SHA256 5a8b648403ce7fc70ace2f22b76b360dbd6c588e1eadd9495fd7003fc8a0cbf4
- MD5 66177cb0198f74f0f4c8a7e49aa7d8a8
- SHA1 cd2d8022506740dd1d4898a22a421425398a0be8
- SHA512 6ec5da7cb79ec0334567ea94de2d9e92c26d4a4a8567454592e32cfb738593041fcc9811049ea44f253921d92a71524e1111c8e10dcd8f9434ab1c962403f502
- SSDEEP 96:pG+1sCWI1sCQJ1sCgI1sCex1sCdL1sClZ1sCE1L1sCSOv1sC+ci1sCM:Xi8iziyiticiei/iZGi9iT
- TLSH T11CA12B46B3F85608F6F32B1D5A7A74952F7FBD85A938C2AD2160454C4CBAF418CA0B33
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/en_GB/ConnectionFAQ.html
- SHA256 8ba72a16729211dae68bb3e093d43e54a29f99019cf9c612c5734d1e728503ef
- MD5 5ebcacb7f0e1422f0c3fa20bfaa29c3c
- SHA1 7fc7064e6e0bd5563078be36e1c3754991f9a865
- SHA512 7a2e015d8af095f04a2c7460e652a9ff15babd699bcd27f22b44b8f16225d9630d2ef51cff47824cb4cf1e9ab37219ef5da5ee814ddfb00f0f0c53789c12a9c4
- SSDEEP 192:BHe1a8XUVbQk10gVpfTY2di/nSWnG4obEz7qW:BT8X4bQk10gVpfTY2dsnZhoYn9
- TLSH T1F4426232E72A010591F746E5B1B21252F438E749931754B5F137BA7AACCB8F623C22B2
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/en_GB/LicenseFAQ.html
- SHA256 50ffa995427d576ac7a4c1d564788a6a552a8bcb4b7cf393c7d132a443f48cbf
- MD5 665e1985893f9e0701f79dfb1f99a4d7
- SHA1 b695b2c8f15852dd204edaad62254447606fa4f3
- SHA512 00a4fdb70d80d0881d1498139b177821c6be70e910d93eb5b32a9cdc57f9eed121656e975f8e86bbecf6039943e0c7ec2579e5d8e23f1553d92d0fe6ece3aa81
- SSDEEP 384:BE8X4bQkY3TYUnZwSrLGOJZn86JaichcJ:BE8iQkM0UnmSr0iJ
- TLSH T15C826522E7260014A1F60AE571A613D6A478E64DA3165470F13BBD7DACCF8FB33D22B5
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/en_GB/Main.zdct
- SHA256 b85ed26e8a037805183d7558943d9d02de007906b83453af54c3618dfae3ec16
- MD5 cf4d276079a857f528c6d6b5d3708408
- SHA1 b20ecdf34ea3aab0c8747378a6d686990ee6371b
- SHA512 ed45ba8fe41678ed413ed14cf86a514e8a70e2d69718e313ccd0e8b985190ef2cb06e7bd9435a2c25eeb0a227343db0d3ce8a5dfa3d321d6a634a75088880903
- TLSH T160516991A7EC6614B6F32F0CBD7915540EFEBD9AAE3DCA1C1160045E08F5A40C8A2B73
- MD5 SHA1 SHA512 TLSH
OBLRes/en_GB/oobe_launcher.zdct
- SHA256 45b28a7425a534d6f1e4f0692bc6558b5c049db2266ddb55f4e8b7f1215edd27
- MD5 111abbd6b05d13cc93558d77c4e4a2ea
- SHA1 e93923e3169553a2141ca087260afc9d981b33ac
- SHA512 7f3a886e94344868efdb94fbc3db2f1440cbf3c003647eb1f64d4137fe73c697ad8e9492b164b898ad32aa1c6d98442c73ad7aa6f79bdbde68ead0af07db6b0d
- SSDEEP 96:pG+1sCAI1sCWJ1sCGI1sCox1sCrL1sCzZ1sCS1L1sCwOv1sCYci1sCW:XiCi9iciTiCiwiBi3GiDiN
- TLSH T12FA1FB56B3F85608F6F32B1D5A7A74952F7FBD85A938C2AD2160414C4DBAF448CA0B33
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/en_IL/ConnectionFAQ.html
- SHA256 8ba72a16729211dae68bb3e093d43e54a29f99019cf9c612c5734d1e728503ef
- MD5 5ebcacb7f0e1422f0c3fa20bfaa29c3c
- SHA1 7fc7064e6e0bd5563078be36e1c3754991f9a865
- SHA512 7a2e015d8af095f04a2c7460e652a9ff15babd699bcd27f22b44b8f16225d9630d2ef51cff47824cb4cf1e9ab37219ef5da5ee814ddfb00f0f0c53789c12a9c4
- SSDEEP 192:BHe1a8XUVbQk10gVpfTY2di/nSWnG4obEz7qW:BT8X4bQk10gVpfTY2dsnZhoYn9
- TLSH T1F4426232E72A010591F746E5B1B21252F438E749931754B5F137BA7AACCB8F623C22B2
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/en_IL/LicenseFAQ.html
- SHA256 50ffa995427d576ac7a4c1d564788a6a552a8bcb4b7cf393c7d132a443f48cbf
- MD5 665e1985893f9e0701f79dfb1f99a4d7
- SHA1 b695b2c8f15852dd204edaad62254447606fa4f3
- SHA512 00a4fdb70d80d0881d1498139b177821c6be70e910d93eb5b32a9cdc57f9eed121656e975f8e86bbecf6039943e0c7ec2579e5d8e23f1553d92d0fe6ece3aa81
- SSDEEP 384:BE8X4bQkY3TYUnZwSrLGOJZn86JaichcJ:BE8iQkM0UnmSr0iJ
- TLSH T15C826522E7260014A1F60AE571A613D6A478E64DA3165470F13BBD7DACCF8FB33D22B5
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/en_IL/Main.zdct
- SHA256 b85ed26e8a037805183d7558943d9d02de007906b83453af54c3618dfae3ec16
- MD5 cf4d276079a857f528c6d6b5d3708408
- SHA1 b20ecdf34ea3aab0c8747378a6d686990ee6371b
- SHA512 ed45ba8fe41678ed413ed14cf86a514e8a70e2d69718e313ccd0e8b985190ef2cb06e7bd9435a2c25eeb0a227343db0d3ce8a5dfa3d321d6a634a75088880903
- TLSH T160516991A7EC6614B6F32F0CBD7915540EFEBD9AAE3DCA1C1160045E08F5A40C8A2B73
- MD5 SHA1 SHA512 TLSH
OBLRes/en_IL/oobe_launcher.zdct
- SHA256 0903e916bda98ae0d9dca64d33f7f45cafe712910935431e56a3a8826f7d53fe
- MD5 b6c389c5ca77a8b1924dd08c18a6f120
- SHA1 5b63f8c3da889fd23692e052fa8be620415b1bf1
- SHA512 518b4efe8df1e6143be184e3e6098149141d0c273376acf742cf41e7b9add1dd143f597c62d030138fb0f0d3b3c42f06eb59863934224a0630d249e9842c94b5
- SSDEEP 96:pG+1sCHI1sC5J1sCJI1sCPx1sCsL1sCUZ1sCV1L1sCVOv1sCnci1sCv:Xi1iCibi8i1ifiWiGGikiA
- TLSH T117A12D45B3F85608F6F32B1D6A7A74951F7FBD95A938C2AD2120454C4CBAF508CA0B33
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/en_MX/ConnectionFAQ.html
- SHA256 8ba72a16729211dae68bb3e093d43e54a29f99019cf9c612c5734d1e728503ef
- MD5 5ebcacb7f0e1422f0c3fa20bfaa29c3c
- SHA1 7fc7064e6e0bd5563078be36e1c3754991f9a865
- SHA512 7a2e015d8af095f04a2c7460e652a9ff15babd699bcd27f22b44b8f16225d9630d2ef51cff47824cb4cf1e9ab37219ef5da5ee814ddfb00f0f0c53789c12a9c4
- SSDEEP 192:BHe1a8XUVbQk10gVpfTY2di/nSWnG4obEz7qW:BT8X4bQk10gVpfTY2dsnZhoYn9
- TLSH T1F4426232E72A010591F746E5B1B21252F438E749931754B5F137BA7AACCB8F623C22B2
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/en_MX/LicenseFAQ.html
- SHA256 50ffa995427d576ac7a4c1d564788a6a552a8bcb4b7cf393c7d132a443f48cbf
- MD5 665e1985893f9e0701f79dfb1f99a4d7
- SHA1 b695b2c8f15852dd204edaad62254447606fa4f3
- SHA512 00a4fdb70d80d0881d1498139b177821c6be70e910d93eb5b32a9cdc57f9eed121656e975f8e86bbecf6039943e0c7ec2579e5d8e23f1553d92d0fe6ece3aa81
- SSDEEP 384:BE8X4bQkY3TYUnZwSrLGOJZn86JaichcJ:BE8iQkM0UnmSr0iJ
- TLSH T15C826522E7260014A1F60AE571A613D6A478E64DA3165470F13BBD7DACCF8FB33D22B5
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/en_MX/Main.zdct
- SHA256 b85ed26e8a037805183d7558943d9d02de007906b83453af54c3618dfae3ec16
- MD5 cf4d276079a857f528c6d6b5d3708408
- SHA1 b20ecdf34ea3aab0c8747378a6d686990ee6371b
- SHA512 ed45ba8fe41678ed413ed14cf86a514e8a70e2d69718e313ccd0e8b985190ef2cb06e7bd9435a2c25eeb0a227343db0d3ce8a5dfa3d321d6a634a75088880903
- TLSH T160516991A7EC6614B6F32F0CBD7915540EFEBD9AAE3DCA1C1160045E08F5A40C8A2B73
- MD5 SHA1 SHA512 TLSH
OBLRes/en_MX/oobe_launcher.zdct
- SHA256 b92878d7ea406dd54c8ebce2235520787e7d8439e470e86b4a3e7514beec2e05
- MD5 09b4e586f1641ad6eb6f34665ef1f8f1
- SHA1 3932bf40beadef80c74f0816e3e9233860f1ecee
- SHA512 21e08e756aa1ee306257b9bc5cb9c46b7e4efba2219c44fda97be3d7ada1d5d13236201ee366c2afbbdba347eaa71c29eedac44bd52edec66d8b9df41946f1a6
- TLSH T12CF0A7B9DA42A366578CA1FB70CEC4C6FDFCA2AC82F43C1502021285B59363921778A2
- MD5 SHA1 SHA512 TLSH
OBLRes/en_US/ConnectionFAQ.html
- SHA256 8ba72a16729211dae68bb3e093d43e54a29f99019cf9c612c5734d1e728503ef
- MD5 5ebcacb7f0e1422f0c3fa20bfaa29c3c
- SHA1 7fc7064e6e0bd5563078be36e1c3754991f9a865
- SHA512 7a2e015d8af095f04a2c7460e652a9ff15babd699bcd27f22b44b8f16225d9630d2ef51cff47824cb4cf1e9ab37219ef5da5ee814ddfb00f0f0c53789c12a9c4
- SSDEEP 192:BHe1a8XUVbQk10gVpfTY2di/nSWnG4obEz7qW:BT8X4bQk10gVpfTY2dsnZhoYn9
- TLSH T1F4426232E72A010591F746E5B1B21252F438E749931754B5F137BA7AACCB8F623C22B2
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/en_US/LicenseFAQ.html
- SHA256 50ffa995427d576ac7a4c1d564788a6a552a8bcb4b7cf393c7d132a443f48cbf
- MD5 665e1985893f9e0701f79dfb1f99a4d7
- SHA1 b695b2c8f15852dd204edaad62254447606fa4f3
- SHA512 00a4fdb70d80d0881d1498139b177821c6be70e910d93eb5b32a9cdc57f9eed121656e975f8e86bbecf6039943e0c7ec2579e5d8e23f1553d92d0fe6ece3aa81
- SSDEEP 384:BE8X4bQkY3TYUnZwSrLGOJZn86JaichcJ:BE8iQkM0UnmSr0iJ
- TLSH T15C826522E7260014A1F60AE571A613D6A478E64DA3165470F13BBD7DACCF8FB33D22B5
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/en_US/Main.zdct
- SHA256 b85ed26e8a037805183d7558943d9d02de007906b83453af54c3618dfae3ec16
- MD5 cf4d276079a857f528c6d6b5d3708408
- SHA1 b20ecdf34ea3aab0c8747378a6d686990ee6371b
- SHA512 ed45ba8fe41678ed413ed14cf86a514e8a70e2d69718e313ccd0e8b985190ef2cb06e7bd9435a2c25eeb0a227343db0d3ce8a5dfa3d321d6a634a75088880903
- TLSH T160516991A7EC6614B6F32F0CBD7915540EFEBD9AAE3DCA1C1160045E08F5A40C8A2B73
- MD5 SHA1 SHA512 TLSH
OBLRes/en_US/oobe_launcher.zdct
- SHA256 070727f6ca4d5b6ecde0216008b0bfd24a976b2a7af01080ea56b0d37d56eba7
- MD5 d4c8b6bead3259aafa92e87c3614d880
- SHA1 5a8a4c71217fed816f176fd7cb06099a3fd37643
- SHA512 080a87109aa535624976741327f7c6e69d8ea359c613623a0315d4b11540b7ae446a4e12cea5798ef36a2a2dfc4817e435bb9f337df8c1f8e900dfea1b01204d
- SSDEEP 96:pG+1sCJI1sC3J1sCXI1sCBx1sCSL1sCKZ1sCb1L1sCrOv1sCJci1sCB:Xirici1iSiLiBioiUGi6iK
- TLSH T13D910B56B3F85608F6F32B1D5A7A74952F7FBD95A938C2AD2120414C4DBAF448CA0B33
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/en_XM/ConnectionFAQ.html
- SHA256 8ba72a16729211dae68bb3e093d43e54a29f99019cf9c612c5734d1e728503ef
- MD5 5ebcacb7f0e1422f0c3fa20bfaa29c3c
- SHA1 7fc7064e6e0bd5563078be36e1c3754991f9a865
- SHA512 7a2e015d8af095f04a2c7460e652a9ff15babd699bcd27f22b44b8f16225d9630d2ef51cff47824cb4cf1e9ab37219ef5da5ee814ddfb00f0f0c53789c12a9c4
- SSDEEP 192:BHe1a8XUVbQk10gVpfTY2di/nSWnG4obEz7qW:BT8X4bQk10gVpfTY2dsnZhoYn9
- TLSH T1F4426232E72A010591F746E5B1B21252F438E749931754B5F137BA7AACCB8F623C22B2
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/en_XM/LicenseFAQ.html
- SHA256 50ffa995427d576ac7a4c1d564788a6a552a8bcb4b7cf393c7d132a443f48cbf
- MD5 665e1985893f9e0701f79dfb1f99a4d7
- SHA1 b695b2c8f15852dd204edaad62254447606fa4f3
- SHA512 00a4fdb70d80d0881d1498139b177821c6be70e910d93eb5b32a9cdc57f9eed121656e975f8e86bbecf6039943e0c7ec2579e5d8e23f1553d92d0fe6ece3aa81
- SSDEEP 384:BE8X4bQkY3TYUnZwSrLGOJZn86JaichcJ:BE8iQkM0UnmSr0iJ
- TLSH T15C826522E7260014A1F60AE571A613D6A478E64DA3165470F13BBD7DACCF8FB33D22B5
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/en_XM/Main.zdct
- SHA256 b85ed26e8a037805183d7558943d9d02de007906b83453af54c3618dfae3ec16
- MD5 cf4d276079a857f528c6d6b5d3708408
- SHA1 b20ecdf34ea3aab0c8747378a6d686990ee6371b
- SHA512 ed45ba8fe41678ed413ed14cf86a514e8a70e2d69718e313ccd0e8b985190ef2cb06e7bd9435a2c25eeb0a227343db0d3ce8a5dfa3d321d6a634a75088880903
- TLSH T160516991A7EC6614B6F32F0CBD7915540EFEBD9AAE3DCA1C1160045E08F5A40C8A2B73
- MD5 SHA1 SHA512 TLSH
OBLRes/en_XM/oobe_launcher.zdct
- SHA256 6f81ee86f3b9878e3f666132e98cdfcb10d71e8f6b393226e0f74c0101e17cd0
- MD5 40b5e5be66fcabdc4b162c723dbe8bbc
- SHA1 7f82b3c634e23ea4d04871415fadb0446ca69479
- SHA512 c8c77f46919b162b4ccdca245c7a59d539e1248de0071fe701405d499164d7b706a835e83c0c5c339647f2ffd5b8531d60d1679bc724fdd149a384a953ce0494
- SSDEEP 96:pG+1sCJI1sC3J1sCXI1sCBx1sCSL1sCKZ1sCb1L1sCrOv1sCJci1sCB:XiDiEitiaiDi5iAiMGiyiS
- TLSH T149A11B46B3F85608F6F32B1D5A7A74952F7FBD85A938C2AD2164414C4DBAF408CA0B33
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/es_ES/ConnectionFAQ.html
- SHA256 89ba48259ba1592389266c0c083d4a9410bfb33d5a1bb42cd7db9130cfc597bb
- MD5 28353436fc2a08ffd172e8e001c34dbc
- SHA1 0056e197d3eacd5f87e1e09e72272da52e9ab279
- SHA512 80efcf97e82863dad32af717516a9b4347720530d9689429b669dd9c368b7065a2ec13e6d34a1c68c571caf01d66a0a74bd956e44b0e34eda37f215253979050
- SSDEEP 384:+g8T3Qo/nfz5Dx63w9v7itRLYzWRglRTRE31oROJ8E1u2QEjE3Ct0EGhexH3sdr2:Z8H/n7596AVubk1lRTRE31oROJ8E1u29
- TLSH T171823122F10C0041B2F645D5B4BB39616014C78DE78B94F8B0777A1A78DF6BA2BC66B7
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/es_ES/LicenseFAQ.html
- SHA256 084ca6786e8da6e50df896f9a94738d7292371b385b08cf750252751c79e8262
- MD5 cd2ee54ef1b354ebb594683dac1df721
- SHA1 6630e2953186846971358a2c7fa41f4959a94149
- SHA512 68c4419bc6594529650cb33b1bb323c3070697ed49a9dadaf47832bb031d967a0b7707f2e365b5fb2d7da284380d08e7b0646ab008b5decbcf615713f6805d42
- SSDEEP 384:eg8T3Qo/sDxp3f9v7XtmLzzJDglR7EE3qTE1MzE9E32fbE3XVWE3GYE35ERE31TV:58H/s9pPVzIvClR7EE3qTE1MzE9E32fN
- TLSH T1B1B22222F00C0046A2F605C5B4A635716014E74ED78B94F8B06B7D5B7CDEABE2BC52BB
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/es_ES/Main.zdct
- SHA256 c8d371a54c27318a245e5db6d064e10d2fdd8cf4b29c6a10bb9c8648a0703cd9
- MD5 4628d8c3736290cc84f973f20de92509
- SHA1 f71b9e1e439c10c43634c7491a3b8d3b672af4f1
- SHA512 1658e48c7804ce8fa86513c57f3e6fc0bb751297a4d77a8fd191dd4f87a7d59a5da2fea3ecd0e086510fe3eadf819aa751a08f7a48c65de5097200134456e88f
- TLSH T1D351789197EC264AB2F33B0C7E3918554EBFBE96EE38DA0C1170581D09F4E4499A1B73
- MD5 SHA1 SHA512 TLSH
OBLRes/es_ES/oobe_launcher.zdct
- SHA256 5ad17ef0d4691403074842efdb07b924593dcc610be457bbb9f7a18a56f12e14
- MD5 2127f59084f6b076980cad818cef2e79
- SHA1 beec3f5cdce607c66d493d73dfb82e0d559cf83e
- SHA512 38ad6bcaa27bc096dd9580f88075b291a780fdce87e0df59b200ffab1596ae72536f223e8ba3e725f493cd1bc71c66507746096ec9aa8cbea8f09e80986780c3
- SSDEEP 96:p/xHCAHCuxHCA5CAHCAJ4HCAP+HCAsmHCAUHHCAV1mHCAVOZHCAnPHCAv:xh5hPyifkS/uFF
- TLSH T1E5919516A3F86748F6F33B1DAA7A74A45F7FBD959838816D2130850C4CBAE4489D0B33
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/es_LA/oobe_launcher.zdct
- SHA256 a3433c5a2142b326912459e81853e58b9696292a3cc434e179e827f201041bd5
- MD5 830405461cc864396ae8ef044841ca06
- SHA1 03e63d7673851dd7a7fb4797f7675c73a9f46d9f
- SHA512 bc056a2a5f0d2576df2e2b65d2deca2794a18a7ce5a732c95399ef74629ee383e08fa2fabd5101d1dab673453a2ca3799b9f72c628d17ad4860d832d001bd746
- SSDEEP 96:p/xHC7CuxHC1CAHC14HCT+HCgmHCYHHCp1mHChOZHCrPHCL:xhIhyvn69HCuEc
- TLSH T17E919616A3F86748F6F3371DAA7A74A49F7EBD959838816D2230450C4CBAE448DD0B33
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/es_MX/ConnectionFAQ.html
- SHA256 89ba48259ba1592389266c0c083d4a9410bfb33d5a1bb42cd7db9130cfc597bb
- MD5 28353436fc2a08ffd172e8e001c34dbc
- SHA1 0056e197d3eacd5f87e1e09e72272da52e9ab279
- SHA512 80efcf97e82863dad32af717516a9b4347720530d9689429b669dd9c368b7065a2ec13e6d34a1c68c571caf01d66a0a74bd956e44b0e34eda37f215253979050
- SSDEEP 384:+g8T3Qo/nfz5Dx63w9v7itRLYzWRglRTRE31oROJ8E1u2QEjE3Ct0EGhexH3sdr2:Z8H/n7596AVubk1lRTRE31oROJ8E1u29
- TLSH T171823122F10C0041B2F645D5B4BB39616014C78DE78B94F8B0777A1A78DF6BA2BC66B7
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/es_MX/LicenseFAQ.html
- SHA256 084ca6786e8da6e50df896f9a94738d7292371b385b08cf750252751c79e8262
- MD5 cd2ee54ef1b354ebb594683dac1df721
- SHA1 6630e2953186846971358a2c7fa41f4959a94149
- SHA512 68c4419bc6594529650cb33b1bb323c3070697ed49a9dadaf47832bb031d967a0b7707f2e365b5fb2d7da284380d08e7b0646ab008b5decbcf615713f6805d42
- SSDEEP 384:eg8T3Qo/sDxp3f9v7XtmLzzJDglR7EE3qTE1MzE9E32fbE3XVWE3GYE35ERE31TV:58H/s9pPVzIvClR7EE3qTE1MzE9E32fN
- TLSH T1B1B22222F00C0046A2F605C5B4A635716014E74ED78B94F8B06B7D5B7CDEABE2BC52BB
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/es_MX/Main.zdct
- SHA256 664ab9794c7739917c1460964b9dd1875ffae05ea88c9cb379cad33359c08f06
- MD5 2da81646d1fd6d0d480f1e37fb6cd708
- SHA1 a27668aa7eca7062fe3b64fd0d4ba79c10794f40
- SHA512 9afcf0a0cf9542fb71b34bea1957a35236d3526776f8a5eeb75e71631b05ac3804ed4899948906a546486320719052a2dc7b36a754865be8fdb18ae456ee474d
- TLSH T1CF51779197EC264AB2F33B0C7E3918554EBFBE96EE38DA0C1170581D09F4E4499A1B73
- MD5 SHA1 SHA512 TLSH
OBLRes/es_MX/oobe_launcher.zdct
- SHA256 a3433c5a2142b326912459e81853e58b9696292a3cc434e179e827f201041bd5
- MD5 830405461cc864396ae8ef044841ca06
- SHA1 03e63d7673851dd7a7fb4797f7675c73a9f46d9f
- SHA512 bc056a2a5f0d2576df2e2b65d2deca2794a18a7ce5a732c95399ef74629ee383e08fa2fabd5101d1dab673453a2ca3799b9f72c628d17ad4860d832d001bd746
- SSDEEP 96:p/xHC7CuxHC1CAHC14HCT+HCgmHCYHHCp1mHChOZHCrPHCL:xhIhyvn69HCuEc
- TLSH T17E919616A3F86748F6F3371DAA7A74A49F7EBD959838816D2230450C4CBAE448DD0B33
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/es_NA/oobe_launcher.zdct
- SHA256 a3433c5a2142b326912459e81853e58b9696292a3cc434e179e827f201041bd5
- MD5 830405461cc864396ae8ef044841ca06
- SHA1 03e63d7673851dd7a7fb4797f7675c73a9f46d9f
- SHA512 bc056a2a5f0d2576df2e2b65d2deca2794a18a7ce5a732c95399ef74629ee383e08fa2fabd5101d1dab673453a2ca3799b9f72c628d17ad4860d832d001bd746
- SSDEEP 96:p/xHC7CuxHC1CAHC14HCT+HCgmHCYHHCp1mHChOZHCrPHCL:xhIhyvn69HCuEc
- TLSH T17E919616A3F86748F6F3371DAA7A74A49F7EBD959838816D2230450C4CBAE448DD0B33
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/et_EE/ConnectionFAQ.html
- SHA256 2e28693c0bc432f53bae1fabaca11081f35d370347f010873e17b326e7d8f680
- MD5 90444962c73a0957c0b714160a68ef0c
- SHA1 9fd352601e4abe3b00033fc9f02d02bdc9203b11
- SHA512 79ad55a7b2007729f467107d8e1e98bd49df4adf49c709f03f3eb656ffa5bc36dd245831ca190237424af0149039b6f2479028d09a6db7c96ad9259efe7901b3
- SSDEEP 96:VJin7sPCay6hatUvmFDn8T3I95Nh6l9ucio5t2Tf4meO/jgRzeWjgRLYTWjgRLqe:4iq8Tll8o5CfzIKYdqVgWbUk8yAt
- TLSH T189326232E7190619B0B255D5B1B322917468D749930394B6F0767E2BFCCF9B733C22AA
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/et_EE/LicenseFAQ.html
- SHA256 34edeb82980cbf4993969a2c02d1dc46fa43814a4b74fda3bca50f8140f0155f
- MD5 d6ca6183cb0582c86169bd84d40bbeaf
- SHA1 31286e56421805875243035ceaea0f04bef6124d
- SHA512 c1c7eb94576fd9cd0bfc9c32a0b7eeac1795b5dc03ca1441b2894f60bc34f41507633b4d40ece3e947c5035c388ab985be3821536abf2e34aab839cf1463319b
- SSDEEP 192:4hUO8Tll8o5UrPKygWIOczHOnSSaCmj7S4jL:4H8Tll8o5UrPKygWIOcKHmXS4H
- TLSH T192823312E7281405B0B54AD9B1A313A164A4DB4DA31298B5F07B7C7ABCCF9FB33D1369
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/et_EE/Main.zdct
- SHA256 85d080c7fcab939843b5588b2bad44539cce7bbade40f1a40fef86ccb844a62d
- MD5 06a966b5be8c3d2858f9053d47ee5241
- SHA1 498261d1951deb81acb617b6ed15192e9181d962
- SHA512 f443a4447faf80eccf546260e96460047e1c8ebf81c0459e9a5a1f77145216f63b4f38809df1f25fbdfe73015f22cb974cee778d1006101331663d2566529fe9
- TLSH T124517A9187ECA605F3F33F0C7D7815510AEBBE8BAE3ACA4C1560585D08F9A90D572B63
- MD5 SHA1 SHA512 TLSH
OBLRes/et_EE/oobe_launcher.zdct
- SHA256 b92878d7ea406dd54c8ebce2235520787e7d8439e470e86b4a3e7514beec2e05
- MD5 09b4e586f1641ad6eb6f34665ef1f8f1
- SHA1 3932bf40beadef80c74f0816e3e9233860f1ecee
- SHA512 21e08e756aa1ee306257b9bc5cb9c46b7e4efba2219c44fda97be3d7ada1d5d13236201ee366c2afbbdba347eaa71c29eedac44bd52edec66d8b9df41946f1a6
- TLSH T12CF0A7B9DA42A366578CA1FB70CEC4C6FDFCA2AC82F43C1502021285B59363921778A2
- MD5 SHA1 SHA512 TLSH
OBLRes/fi_FI/ConnectionFAQ.html
- SHA256 6d7db75bda97b780aec89bbf5d57544c7a104f7e9497892e84e09aaa14f0a69d
- MD5 b667e13a527a46da3610a05d39950a7a
- SHA1 ec8c5480fa896ed6459b346095ab76a7d0b1f299
- SHA512 24a0a6448495fd96f6fe7c57b19ae5399d02d619c3208456e169c705059b6b3267688309923ab9a87877f499445e92716ecaa0aaf3e630ac25c3b793d940f579
- SSDEEP 384:fZzQohtfzsIwfDx63w9v7itRLYzWVggaaWa58XL1qLatEeHGe5SOLs5j+j582I/O:hht7sIwf96AVubkvgaaWa58XL0LatEe3
- TLSH T113822322E20D0052B1F785D6B4F625307010C749A78764B9F1A77A1AB8DB9FB2FC167B
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/fi_FI/LicenseFAQ.html
- SHA256 301303410b96d8da7be155f9bf5a34f9b819fe17e0b9de52734e1ef79033d47b
- MD5 a16d794dbcbc7fab6c3bce124d1aecf0
- SHA1 67463c51684f21e998b1d6068d8609037b32239d
- SHA512 6f851a16b04622b68d90ab8b0a528bf35b18c66188330012f3472bb602f01d423f531261c088fa57c57648c476cf7aaabac644d25eba6a103b4217fe566f0b49
- SSDEEP 384:4Zw5ohOIwfDx63w9v7itRLYzWpggacW55SvGiVq5RjFsuW7q5SP13q5SOIhq5SEU:ShOIwf96AVubkNgacW55SvG0q5RjFsu8
- TLSH T182A22223F1090452A1F644D5B8A926746000874DA746A8B8F2EB756BB8CA5FF3FC177B
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/fi_FI/Main.zdct
- SHA256 cc2bcbf02407888fccf9b5faf8c9027fde37049e1115abb831e2118e75353a19
- MD5 7b309421b02c3f806ae34a12c51a12fd
- SHA1 50286a420098a853f7e9aca92461313ba8d64584
- SHA512 5b678dadb14067815a0efc98c54465854a38ad292a1a6855dfb4b7194d66522fcf388700d1d6bbd0a70ac14e270972ee31ccd80491c93fe352a3417bc9ceaf48
- TLSH T16A51599593ECA628F3F35F1C7EB805110AAF7E876E7DDA0D0960581D09F55808972BB3
- MD5 SHA1 SHA512 TLSH
OBLRes/fi_FI/oobe_launcher.zdct
- SHA256 cc2e2bbef29ae80a5238aa7431e7bf829bff1b55a23292faa24e02e01daf1740
- MD5 0dd48e112d6e26e0da2e19a919fcced0
- SHA1 013f2e5dc81cd93162fa70691cb9fd2c7618c89a
- SHA512 3d74d204b7cdabe3a85b576eff9f3a1ebd5298b669f76a28264d1d22d90f62f1611753ca898ba4a2ca4df1a1639ac7d526502b24074f3f43f24d0e788721b7fa
- SSDEEP 96:pNTNC54TNCHQTNCnF6TNCxfTNCisTNC6cTNCr1sTNCbh73GT7C73M7CR:V/h4gImubshCxy
- TLSH T1B3A1E726B6F89618F3F36B1D967A70502F7FBED76834D16C1224451C4CBAA4188E0B3B
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/fr_CA/ConnectionFAQ.html
- SHA256 f033815a71c5b79dce7c4e5abaa03979549d05ebfe345b937510e8543ce442df
- MD5 126b927df1ddfc80574fe0eb1f64fb32
- SHA1 6cd7ba40c7c5bdac94bdc44b92c1eca8e33dac9a
- SHA512 02ff7f706d28264d3fea97151d23a8be88b3b22ba560b6585e6e2f158729303177b8659d97fd494fe23b79661b1d01f11bc7d0019924ddbbd47bd88868bbed5d
- SSDEEP 192:dyq8Tll8o5CfzIKYdqVgWEDmyjCXL/qnv:dh8Tll8o5CfzIKYdagWEDmyjCb/qnv
- TLSH T1CB423332E7190509F0F345E5B1B212516468DB49930394B5F07B7E7AF8CB8BB73C22AA
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/fr_CA/LicenseFAQ.html
- SHA256 1e5298bd3360af691a824f02b8cc00075d1cb5b82e5d7f182c297241286f8c57
- MD5 fe2b2e1beb6dcc9bafafe08e09402dba
- SHA1 8826b3701c770ffaf1a5c57a9b238248e0682327
- SHA512 774c089a01a8007cdd586b9a2c7583673ae09f87ceabd7c4f14d18640bada7175bc4cd0fe436bb08514c6f76a1320f6ac016d27e7b7ebce9374d937596a164f3
- SSDEEP 384:dX8Tll8o5UrPKygWrms7Os/p9xQagEO8hS:dX8Rd5NSms7O6p9xQag44
- TLSH T134823122E7281419B0F649D9B15213956468DB48A3469474F07BBD7ABCCF8FF33C13AA
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/fr_CA/Main.zdct
- SHA256 224514c655c81e0f8bb9554aed004ca8ae62f408eb4a073a104264f207d98dd9
- MD5 1a890b8bb04ef19681d7540dc273c0c6
- SHA1 ca3ff1fbaecc41186705d385295ff24c3de4ab37
- SHA512 3041c0ab921f64c999bb69fad7ed1082b71cadaf20a9702e7adf598e96c3e26c6f9876468597d72d6b82c520b0c11f10dde7a24a158d97d29e7ee95c678fd89e
- TLSH T1C8514A91A7EC6A06F2F33B0E7D7D04410EAF3D9AAE39C90C14A0594D0DF5A44D9B2763
- MD5 SHA1 SHA512 TLSH
OBLRes/fr_CA/oobe_launcher.zdct
- SHA256 73803a1863d5e3a5c91cb7f06ca6f055ecca1721d4e2f24b380e4f4882faa54a
- MD5 dd1de74f99a16d84a6f400520b6219bb
- SHA1 f5f0c47abf52af71063d4c4e613e1285c6d92301
- SHA512 0f49786d70d1f0cdddaa58b83e7bec16e83c4b4a2c1ae0a462062ccc73a7bb6d85bedefc7ac1eb51a0ed2d7f157ff476f18cc3d0a10dc5e4bc05a5f183c9d5b5
- SSDEEP 96:pBiSnaCP54iSnaCB53SnaCB+5SnaCndSnaCUfSnaCs4SnaCd1fSnaC9O2BiaC/Di:fa7afaGaNa8aDa/auOwxTaY
- TLSH T113B12716B3F85209F6F33B0AAA7A70551F3F7D9AE835C5AD2524414C0CAAE848DD0B33
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/fr_FR/ConnectionFAQ.html
- SHA256 f033815a71c5b79dce7c4e5abaa03979549d05ebfe345b937510e8543ce442df
- MD5 126b927df1ddfc80574fe0eb1f64fb32
- SHA1 6cd7ba40c7c5bdac94bdc44b92c1eca8e33dac9a
- SHA512 02ff7f706d28264d3fea97151d23a8be88b3b22ba560b6585e6e2f158729303177b8659d97fd494fe23b79661b1d01f11bc7d0019924ddbbd47bd88868bbed5d
- SSDEEP 192:dyq8Tll8o5CfzIKYdqVgWEDmyjCXL/qnv:dh8Tll8o5CfzIKYdagWEDmyjCb/qnv
- TLSH T1CB423332E7190509F0F345E5B1B212516468DB49930394B5F07B7E7AF8CB8BB73C22AA
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/fr_FR/LicenseFAQ.html
- SHA256 1e5298bd3360af691a824f02b8cc00075d1cb5b82e5d7f182c297241286f8c57
- MD5 fe2b2e1beb6dcc9bafafe08e09402dba
- SHA1 8826b3701c770ffaf1a5c57a9b238248e0682327
- SHA512 774c089a01a8007cdd586b9a2c7583673ae09f87ceabd7c4f14d18640bada7175bc4cd0fe436bb08514c6f76a1320f6ac016d27e7b7ebce9374d937596a164f3
- SSDEEP 384:dX8Tll8o5UrPKygWrms7Os/p9xQagEO8hS:dX8Rd5NSms7O6p9xQag44
- TLSH T134823122E7281419B0F649D9B15213956468DB48A3469474F07BBD7ABCCF8FF33C13AA
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/fr_FR/Main.zdct
- SHA256 4d42219489cec9cf274d3b9d09292cea6b702f45a9571635dc313aeaf320a405
- MD5 7a03c4c004b6107bdb33c8494b0244f3
- SHA1 1364d4eadcbe2df23c5bfd2c8a8849566d6e1dec
- SHA512 63a8bc23bf736094c0218fd0ac6d8da24b81a28f79cf21d3657fcdae916022aef57e4391aa70853aaed09feec92aaa9fd2217903c72b7fa370d9feaaa0b42795
- TLSH T1E6514A91A7EC6A06F2F33B0E7D7D04510EAF3D9AAE39C90C14A0594D0DF5A44D9B2763
- MD5 SHA1 SHA512 TLSH
OBLRes/fr_FR/oobe_launcher.zdct
- SHA256 6fc352616f4f38b5f535f38bfa614440a2a59b7d1281378b3ba7d430a9ecebbb
- MD5 8461258136ce26da98d754d4d4381321
- SHA1 0192624bed4f958e2ba7d6fc930c1f794c395804
- SHA512 3db64ba108ed791b14db5558b1a5ee75fa04d27ccd55ce1350f798a38a5ca70f09ec97da7e53946c9df7d73e9bbae1b62e586a54836356b485fe7e4bc8789a1b
- SSDEEP 96:pBiSnaCC54iSnaCE53SnaCU+5SnaCKdSnaCpfSnaCR4SnaCQ1fSnaC2O2BiaCqDZ:fauaKaTaoaxaGaya9OwxeaH
- TLSH T1B6B13916B3F85209F7F33B0AAA7A70551F3F7D9AE835C5AD2524414C0CAAE8489D0B33
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/fr_MA/ConnectionFAQ.html
- SHA256 f033815a71c5b79dce7c4e5abaa03979549d05ebfe345b937510e8543ce442df
- MD5 126b927df1ddfc80574fe0eb1f64fb32
- SHA1 6cd7ba40c7c5bdac94bdc44b92c1eca8e33dac9a
- SHA512 02ff7f706d28264d3fea97151d23a8be88b3b22ba560b6585e6e2f158729303177b8659d97fd494fe23b79661b1d01f11bc7d0019924ddbbd47bd88868bbed5d
- SSDEEP 192:dyq8Tll8o5CfzIKYdqVgWEDmyjCXL/qnv:dh8Tll8o5CfzIKYdagWEDmyjCb/qnv
- TLSH T1CB423332E7190509F0F345E5B1B212516468DB49930394B5F07B7E7AF8CB8BB73C22AA
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/fr_MA/LicenseFAQ.html
- SHA256 1e5298bd3360af691a824f02b8cc00075d1cb5b82e5d7f182c297241286f8c57
- MD5 fe2b2e1beb6dcc9bafafe08e09402dba
- SHA1 8826b3701c770ffaf1a5c57a9b238248e0682327
- SHA512 774c089a01a8007cdd586b9a2c7583673ae09f87ceabd7c4f14d18640bada7175bc4cd0fe436bb08514c6f76a1320f6ac016d27e7b7ebce9374d937596a164f3
- SSDEEP 384:dX8Tll8o5UrPKygWrms7Os/p9xQagEO8hS:dX8Rd5NSms7O6p9xQag44
- TLSH T134823122E7281419B0F649D9B15213956468DB48A3469474F07BBD7ABCCF8FF33C13AA
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/fr_MA/Main.zdct
- SHA256 224514c655c81e0f8bb9554aed004ca8ae62f408eb4a073a104264f207d98dd9
- MD5 1a890b8bb04ef19681d7540dc273c0c6
- SHA1 ca3ff1fbaecc41186705d385295ff24c3de4ab37
- SHA512 3041c0ab921f64c999bb69fad7ed1082b71cadaf20a9702e7adf598e96c3e26c6f9876468597d72d6b82c520b0c11f10dde7a24a158d97d29e7ee95c678fd89e
- TLSH T1C8514A91A7EC6A06F2F33B0E7D7D04410EAF3D9AAE39C90C14A0594D0DF5A44D9B2763
- MD5 SHA1 SHA512 TLSH
OBLRes/fr_MA/oobe_launcher.zdct
- SHA256 7f82d103dd66c583c857ccc83f5a82617b46932befb96f374d1ee275e398dc4a
- MD5 5799cc80dec1f3382c731249e37435f5
- SHA1 32cf52554f2ce26d4f0f3ba67dcce485a6faee90
- SHA512 ed34663597384d81796b044b497ceca4c9e63ca7d41c6aedb68f1f81a76264af49adc900a110aa542f06df1d7dab4d28b04e1e4fb2c7677d55c05e0df3815dd3
- SSDEEP 96:pBiSnaCB54iSnaCv53SnaCf+5SnaCpdSnaCqfSnaCy4SnaCT1fSnaCDO2BiaCxDY:fa1aRaoajayataxa8Owxtai
- TLSH T14DB12816B3F85209F6F33B0AAA7A70551F3F7D9AE835C5AD2524414C0CAAF8489D0B33
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/fr_MX/ConnectionFAQ.html
- SHA256 f033815a71c5b79dce7c4e5abaa03979549d05ebfe345b937510e8543ce442df
- MD5 126b927df1ddfc80574fe0eb1f64fb32
- SHA1 6cd7ba40c7c5bdac94bdc44b92c1eca8e33dac9a
- SHA512 02ff7f706d28264d3fea97151d23a8be88b3b22ba560b6585e6e2f158729303177b8659d97fd494fe23b79661b1d01f11bc7d0019924ddbbd47bd88868bbed5d
- SSDEEP 192:dyq8Tll8o5CfzIKYdqVgWEDmyjCXL/qnv:dh8Tll8o5CfzIKYdagWEDmyjCb/qnv
- TLSH T1CB423332E7190509F0F345E5B1B212516468DB49930394B5F07B7E7AF8CB8BB73C22AA
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/fr_MX/LicenseFAQ.html
- SHA256 1e5298bd3360af691a824f02b8cc00075d1cb5b82e5d7f182c297241286f8c57
- MD5 fe2b2e1beb6dcc9bafafe08e09402dba
- SHA1 8826b3701c770ffaf1a5c57a9b238248e0682327
- SHA512 774c089a01a8007cdd586b9a2c7583673ae09f87ceabd7c4f14d18640bada7175bc4cd0fe436bb08514c6f76a1320f6ac016d27e7b7ebce9374d937596a164f3
- SSDEEP 384:dX8Tll8o5UrPKygWrms7Os/p9xQagEO8hS:dX8Rd5NSms7O6p9xQag44
- TLSH T134823122E7281419B0F649D9B15213956468DB48A3469474F07BBD7ABCCF8FF33C13AA
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/fr_MX/Main.zdct
- SHA256 224514c655c81e0f8bb9554aed004ca8ae62f408eb4a073a104264f207d98dd9
- MD5 1a890b8bb04ef19681d7540dc273c0c6
- SHA1 ca3ff1fbaecc41186705d385295ff24c3de4ab37
- SHA512 3041c0ab921f64c999bb69fad7ed1082b71cadaf20a9702e7adf598e96c3e26c6f9876468597d72d6b82c520b0c11f10dde7a24a158d97d29e7ee95c678fd89e
- TLSH T1C8514A91A7EC6A06F2F33B0E7D7D04410EAF3D9AAE39C90C14A0594D0DF5A44D9B2763
- MD5 SHA1 SHA512 TLSH
OBLRes/fr_MX/oobe_launcher.zdct
- SHA256 6fc352616f4f38b5f535f38bfa614440a2a59b7d1281378b3ba7d430a9ecebbb
- MD5 8461258136ce26da98d754d4d4381321
- SHA1 0192624bed4f958e2ba7d6fc930c1f794c395804
- SHA512 3db64ba108ed791b14db5558b1a5ee75fa04d27ccd55ce1350f798a38a5ca70f09ec97da7e53946c9df7d73e9bbae1b62e586a54836356b485fe7e4bc8789a1b
- SSDEEP 96:pBiSnaCC54iSnaCE53SnaCU+5SnaCKdSnaCpfSnaCR4SnaCQ1fSnaC2O2BiaCqDZ:fauaKaTaoaxaGaya9OwxeaH
- TLSH T1B6B13916B3F85209F7F33B0AAA7A70551F3F7D9AE835C5AD2524414C0CAAE8489D0B33
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/fr_XM/ConnectionFAQ.html
- SHA256 f033815a71c5b79dce7c4e5abaa03979549d05ebfe345b937510e8543ce442df
- MD5 126b927df1ddfc80574fe0eb1f64fb32
- SHA1 6cd7ba40c7c5bdac94bdc44b92c1eca8e33dac9a
- SHA512 02ff7f706d28264d3fea97151d23a8be88b3b22ba560b6585e6e2f158729303177b8659d97fd494fe23b79661b1d01f11bc7d0019924ddbbd47bd88868bbed5d
- SSDEEP 192:dyq8Tll8o5CfzIKYdqVgWEDmyjCXL/qnv:dh8Tll8o5CfzIKYdagWEDmyjCb/qnv
- TLSH T1CB423332E7190509F0F345E5B1B212516468DB49930394B5F07B7E7AF8CB8BB73C22AA
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/fr_XM/LicenseFAQ.html
- SHA256 1e5298bd3360af691a824f02b8cc00075d1cb5b82e5d7f182c297241286f8c57
- MD5 fe2b2e1beb6dcc9bafafe08e09402dba
- SHA1 8826b3701c770ffaf1a5c57a9b238248e0682327
- SHA512 774c089a01a8007cdd586b9a2c7583673ae09f87ceabd7c4f14d18640bada7175bc4cd0fe436bb08514c6f76a1320f6ac016d27e7b7ebce9374d937596a164f3
- SSDEEP 384:dX8Tll8o5UrPKygWrms7Os/p9xQagEO8hS:dX8Rd5NSms7O6p9xQag44
- TLSH T134823122E7281419B0F649D9B15213956468DB48A3469474F07BBD7ABCCF8FF33C13AA
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/fr_XM/Main.zdct
- SHA256 224514c655c81e0f8bb9554aed004ca8ae62f408eb4a073a104264f207d98dd9
- MD5 1a890b8bb04ef19681d7540dc273c0c6
- SHA1 ca3ff1fbaecc41186705d385295ff24c3de4ab37
- SHA512 3041c0ab921f64c999bb69fad7ed1082b71cadaf20a9702e7adf598e96c3e26c6f9876468597d72d6b82c520b0c11f10dde7a24a158d97d29e7ee95c678fd89e
- TLSH T1C8514A91A7EC6A06F2F33B0E7D7D04410EAF3D9AAE39C90C14A0594D0DF5A44D9B2763
- MD5 SHA1 SHA512 TLSH
OBLRes/fr_XM/oobe_launcher.zdct
- SHA256 6fc352616f4f38b5f535f38bfa614440a2a59b7d1281378b3ba7d430a9ecebbb
- MD5 8461258136ce26da98d754d4d4381321
- SHA1 0192624bed4f958e2ba7d6fc930c1f794c395804
- SHA512 3db64ba108ed791b14db5558b1a5ee75fa04d27ccd55ce1350f798a38a5ca70f09ec97da7e53946c9df7d73e9bbae1b62e586a54836356b485fe7e4bc8789a1b
- SSDEEP 96:pBiSnaCC54iSnaCE53SnaCU+5SnaCKdSnaCpfSnaCR4SnaCQ1fSnaC2O2BiaCqDZ:fauaKaTaoaxaGaya9OwxeaH
- TLSH T1B6B13916B3F85209F7F33B0AAA7A70551F3F7D9AE835C5AD2524414C0CAAE8489D0B33
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/he_IL/ConnectionFAQ.html
- SHA256 4cba97114d3f129a24387e42437064a4cacb520559f5d192d5eaab47b798ad48
- MD5 3c07f4f478b0e8e0d2904b8eb9514d4e
- SHA1 bdc1a2cc919902fdec0a247f99cf7040beb9df7d
- SHA512 58f83c472fac8158fa978fe91fa1f2bdeeea1fbe364d4f6a6b7d4ebbf2142413da85887a04283bb65b0254e6cfc9cf76c4e6eb54f99410d60cad0a9e28d4b5be
- SSDEEP 192:myq8Tll8o5CfzIKYdqVgWOiJx9Dj8R2PKwL:mh8Tll8o5CfzIKYdagWOi3lc2rL
- TLSH T1F0321132E7080549B0F655E5B0B722617464CB59930364B6F0767E7BBCCA8B737C23AA
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/he_IL/LicenseFAQ.html
- SHA256 c3cac01f4efbd6ac73f3cf4118af6c3ed20f170953aea31a4a000d65f5545b01
- MD5 6f3ca96ac9753ca20a517dac144b7fcc
- SHA1 5296471337e2cc6e954fab10ef17c21dd05bebf8
- SHA512 f2e3517a5febd290c0bd5b23d61304ae45ff8de0abc99b94218f0813cd9fb984da3c9a92d15726f23f5a6c8acf80fc8cec11f92561235abd922ab400c60c122f
- SSDEEP 192:mnUO8Tll8o5UrPKygW2nawrpcOuf7U6pRBxNFEX2VNasNqPBWiMU:mR8Tll8o5UrPKygWQvujUYvNF0Zk6
- TLSH T179721112EB180805B0F64DD9B0A622A56464DA5CA3429475F03B7D7ABCDF8FB37C13AD
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/he_IL/Main.zdct
- SHA256 f58fb15bfff155283c16d36ec9aea908812ef26e048b7125f25e65818c67d22a
- MD5 8033aac0dd251f50364a148a76dec95a
- SHA1 076662c4f33bcc651bf8775d42aba5f2079489c4
- SHA512 37c94ecb31b24c4ddf3e1e6ae4ef58534e062a22f827d6003ef44b285c3cf7ab181e52b3529f4ac853ee617bd2cbd7b56826d4db72e9f9863680e193cac07ed7
- TLSH T176412A8053D8E6887AB3DF0FBA7D481D0ADDFB054A1DBE0F5478546904FE640812E77A
- MD5 SHA1 SHA512 TLSH
OBLRes/hr_HR/ConnectionFAQ.html
- SHA256 b8762e8fd6bac93775a7df71e8c09117004214e3adca7169be4ec0fa047a2135
- MD5 940dded14d40ee63d9884eb75ce9aaa8
- SHA1 986ead007cbc5cefcb120fee75665021d5df4a7a
- SHA512 69df4d2517f418e1c577a921c558e5abb02d8d693ea530171287600da5ba4b71206f5a763224c249e4e15d6f145b1a1619886b8ca91dabe6de4a0cd3fe3f846a
- SSDEEP 192:XV0q8Tll8o5CfzIKYdqVgWqbv8di0zq7x:Xl8Tll8o5CfzIKYdagWgD0Y
- TLSH T1B7324F32E7090905F1F655D5B1B312507468DB49930794B6F07B6E3ABCCB8B727C22AA
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/hr_HR/LicenseFAQ.html
- SHA256 0fbc0ce8d25ab52aaaa696af2f2163c3b75361f9eac305fbdb7151e0797fdced
- MD5 22ce1ef18129918d464ea8847dda1343
- SHA1 dd04e112c8dddba41eaf1a9aebfc6e694590ef9d
- SHA512 c2b4f0973efab4e52880f698878406f22e4a2db47cf7ae182bfa3075bed3fea797ceb92d92b64380ae022a6eb7b5da1a89de35790581d7dea610a2e579c364f4
- SSDEEP 384:Xt8Tll8o5UrPKygWq/ah8BfEa3rNsHcJrR:Xt8Rd5NNP51lR
- TLSH T10C822321EB250405B1F689D9B1A2135424A8DB4CE3169475F07BBD7ABCCB8BB33D1379
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/hr_HR/Main.zdct
- SHA256 8c9494a1413a627b52c9dce7360e2a63092b76751682a1ce4c64feeb5865b40c
- MD5 ecb37c825cc6ecbb6ec7ccbaa50129be
- SHA1 6df53ef13b6d6ea82efbc8c83a03c9ebbbf3e8ec
- SHA512 f6786c3a9d832eabbd7400eeef04a181d1033528a0270c33da092c8b8c3cf8b386aeaa0071b1b4c06d6f9f7d522dbe64714d4c5c5a2f3a644dd4eef1ed95c9be
- TLSH T125517F82A7EC2645F2F33F0CBA7806210EBF7E66BE39C64D1460594C05F5A80D5B2B63
- MD5 SHA1 SHA512 TLSH
OBLRes/hr_HR/oobe_launcher.zdct
- SHA256 f36280b2c74e0e962bf017a33614b629ffb8c0483b91acd40151ff8f5997bd69
- MD5 2eac328ee834546d410acd7b097d83cd
- SHA1 399b011402f0696927a1646a7e61000c18951335
- SHA512 84558b8a2c484dc484ec6eca75ea8f4ba1e72e2d14a1310d6f6f1c602fbd1fbcade2738005aea3ab7892ac63580a3e8589b0cb8d2b334b6796657827329e94d8
- SSDEEP 96:prl0Z5Ccrl0Z5CqrW0Z5CKJ0Z5C0GW0Z5CnStH0Z5C/V0Z5Cu1StH0Z5CUOH0Z5z:1u59u5Dj5a5Aj57tY5V5QtY5Dz59oK5p
- TLSH T142A11B5273F86618FAF3770D9A7A25A42F3FBDA5A438C16D2160458C097BE848DD1B33
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/hu_HU/ConnectionFAQ.html
- SHA256 db5e912f1dededf447b03544b157cac5cc006133a67fe1376b481bbdd5e44ce8
- MD5 8bb00c0444b907575fc0f951e703fa9f
- SHA1 7bda6adbe2e72f6440ef82eaa8ee4837b1e06b5e
- SHA512 6fbf51863bdb2605b9c109f2fd0678e91bf73913b6a85009bdc776e47b4308d420078a81baa74697b456c5a46fab0efd527aaeb7edb6951000ce88eca88d8e75
- SSDEEP 96:VJinosPCR6hatUvmFDn8T3I95Nh6l9ucio5t2Tf4meO/jgRzeWjgRLYTWjgRLqb4:XSq8Tll8o5CfzIKYdqVgW+/r3IHUCiaq
- TLSH T152425332E719091AF0F655D5B0B222512468D749A31394B6F07B6E3AF8CB8F737C126A
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/hu_HU/LicenseFAQ.html
- SHA256 67992b3a84054890ef76af319702e0cec112255b09e8480cf0bd0c94624b66ef
- MD5 1d12fdc7aeb40e6f9b1478a645f7d791
- SHA1 bcee76b19d72d03d57e281c5cce5dae9cf6690e2
- SHA512 97da9b8d6ccf23b226a8a76998c57d499ee902370c73766e680f32b37d1642dcb35bc3a46f5a3d00112477c9ad1cb51d90b3ec104c54c4d80810b4465320a50a
- SSDEEP 192:XDUO8Tll8o5UrPKygWXLJ9C7LeTsXeetEy8puBp90VaqL:XV8Tll8o5UrPKygW7JIHeT2eIEb4c
- TLSH T1E5822322E7240409B0FA4DD9B06212956458DB4CA35295B5F17B7C7EBCCB8FB37C12B9
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/hu_HU/Main.zdct
- SHA256 70065354d49f2b57a6bfb22d41c771b5ea311f11cf4ad49d28886d4b92883005
- MD5 46814264a6e8d36e0ecade0d3f880300
- SHA1 5fe936d35ce3e4858faad8ae9c67b16845c09996
- SHA512 fe16f69c6699fc8514c393e6643bb55529b3fb1f960ba3a63eedb524d95de55e926f9410c3081b16d4568ca8029604b17f020495b34d5fadac9b2d83e3f4b17a
- TLSH T18551E69593ED6A05F2F36F0C7D7846410EBE7E69AE3DCA0D44A0548C0CF5A80C972BA3
- MD5 SHA1 SHA512 TLSH
OBLRes/hu_HU/oobe_launcher.zdct
- SHA256 a92b45fce2c5b33c6165a56dddba8395cfc2920571a70cb651672b076c2bcb70
- MD5 a32abacb5918c1eea3ca2b40a0c401b8
- SHA1 dcfb0cff3c8af8b3e2756c7f4a4e94cd326003bc
- SHA512 8c04c4f728474e45649372e2eb45e78a2ef1e68969d483754ba667de22437b32ef5d793603bc1438ca4ce00909a2cbb815b6ab28c2b1891b46aea5536d42abcd
- SSDEEP 96:fs1GCVsNGCLsbGC7sxGCts6GCmsSuqGCesXGCVsSuqGCJQsv4GCQ0BJGCj:0wFIjKj89t8Su90WVSu9e5vn2BUo
- TLSH T1B8B11F5662FC2108F1F37B09BEB7B1502F3FBD98A839C19D65A0A14C4C66A44C8A0B77
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/it_IT/ConnectionFAQ.html
- SHA256 0d2624bcb23b8edcdbfdb6a3aad80598520b223de0873b8d354568361630a44e
- MD5 fc1836d3933acc4b6e9100a2d109d229
- SHA1 876f2188235eb03e80ef3add7d25e085bca3318d
- SHA512 3e3b4d33c69d512d3e2deb23b7e392a0b0d9f1789d7090bddc1fd8eef3c0bd2909dcd229e4f826ffcc5b9a7daee47f754d365270e97323e0b90eb26a79df53a0
- SSDEEP 192:df6q8Tll8o5CfzIKYdqVgWl68gEx918zY:dfp8Tll8o5CfzIKYdagW4gD8zY
- TLSH T1D9424332E7090509F0F245D5B0B222507468DB89E30364B5F1776E7BB8CB8B777D22AA
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/it_IT/LicenseFAQ.html
- SHA256 ee5c89d5fb87e27a46fc2ddf3a6139baf41e26b75b69d12abe8d5ba24a9da4b8
- MD5 e42d92bc44e149f957737a12f4eddbd4
- SHA1 965512ffeca6d89fd333219af8e4228453eb711f
- SHA512 a47cb64af1d1bea9c7e9ad72f1b3d278ec6c77fdaa0b0732f180fa587a5f6832cab9407d5f2e0319db6fa26d591d2deef0b7100d29bb9084587d9aab5086af7c
- SSDEEP 384:dge8Tll8o5UrPKygWy7fg2srbeRgzEhDt/hi:dh8Rd5NH7qeRgYhC
- TLSH T120822221E7140415B0F64AC9B1A322946468DB8CE3466475F17B7D7ABCCF8BB33E136A
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/it_IT/Main.zdct
- SHA256 2b67c55277265c98cecf4db5c5cba159f1e8d97c9d4091a08c081e27eefcdb5d
- MD5 40b2c367957a393c3602758067138be6
- SHA1 81ea097b56ce3860a942566c44b1e7d34e974d2f
- SHA512 aeffd60cf41fe6970720c7f5e78a17657cec4f74f964abd801e361e09c257ce4f14609e6552ba4abc1ad95e431695c9a0b8daaaf8d30339adf740ebad4def501
- TLSH T197515892A7EC6608F2F33B0C7E3D54150EBF7E96AE39CA0D0570585D05F2A54D4A2B63
- MD5 SHA1 SHA512 TLSH
OBLRes/it_IT/oobe_launcher.zdct
- SHA256 d884dd3c6148e4bc4c732dbe6730b7488e0ecce134400d69d614e364ca67aba7
- MD5 1cc0db38b0d09cd982d22f45243d8334
- SHA1 53613b0b01b51185ef75ed9324a66a90f2fab5ad
- SHA512 27842e000226147eed9f2b5a1074b492dd49fac8aa634655b43d4a90ea6149659bf122fd75ba79a62e685707301a6cead97f09f7c9c4d70d9d0c0cffdf3e199a
- SSDEEP 96:pIfNCz7NCtQNC9ZNC7CNC4HNCANNCh1HNC5OVDCCT0NDCCz:i1OF6hXdyqbW0
- TLSH T175A1C212B3F85748F6F377099A7A74915F7FBE95A838C2AD2220514C48AAE458DD0B33
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/ja_JP/ConnectionFAQ.html
- SHA256 955324169eb9af6f2c11496b0b8bbbd9400ca201f7a4160a6a91b9ea12a49883
- MD5 915889fb05c189e9322ab6b1912c2efe
- SHA1 1d6c585a606a09cfd8e5d3da45e88c23f45ad8f1
- SHA512 ea3e2c4f6dbc2bd1ff46ba94ed0e69be4f57f9ebdd2abe1550df1699a383cb32f784d66f21d9fa28e576d2ce10d2d842a7727c8956bf02d74777dd5a74f86ec4
- SSDEEP 96:VJinPsPC36hatUvmFDn8T3I95Nh6l9ucio5t2Tf4meO/jgRzeWjgRLYTWjgRLqbQ:2Iq8Tll8o5CfzIKYdqVgWGvzdkzAh
- TLSH T10E424231E7190506B0B685D671B322917468CB4A931364B6F077AE37FCCB9B737C229A
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/ja_JP/LicenseFAQ.html
- SHA256 309c380b73594871af579a27208b653dd524474064751d145f067da65acaf4df
- MD5 5672ca4f20b403ee1845a2511f946a84
- SHA1 36d1067390745ff2eba00d74a0fd1cf17d962a2a
- SHA512 64a36c6504da4b102067acaeff39902b30032d8d3e2ec684e5741d2d2f1331681c4481222c7561fe62ae6d8c3d1de34e900f4cd23af7dedb9f78de505fbc5d09
- SSDEEP 192:2VUO8Tll8o5UrPKygWG13vWwFg0cSROypsUU7wBJynWu4BJJhtuW:2z8Tll8o5UrPKygWG13pRzpsFBWV
- TLSH T134821031E7280405A0B68AD5B17623A06068DB5DA3129575F13B7D7ABCCF9FB37C02AD
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/ja_JP/Main.zdct
- SHA256 c161cb0a7638b8b8d307402b20f40d59dc4fda8b4d24b0a4bf440c05eacc2ae1
- MD5 e4a78e50834a9062eca70f762d0ca59d
- SHA1 e817a94a820f45410ecddb3f359af543f551b9d1
- SHA512 154680a48e74705f8ccf7dfffe4d2d139a69bca7f4b85a5f4d8e80e664e69733220e9dd6361b6062b35672acd2ea000616d4fdd8d77b8312b7db3f2aca3f7d3e
- TLSH T10C4126C4A7EC6909B2F31A5C7D3E59110AEFBB55AB8DCC4C14F4940E04E86809263BBB
- MD5 SHA1 SHA512 TLSH
OBLRes/ja_JP/oobe_launcher.zdct
- SHA256 fcb0cc42e7d413ae269d5ea9de5a79f923a09f995d4be2ae634a7a3ff755950d
- MD5 73c3adbe84a19cda22b18c2b70fab6ee
- SHA1 24cb1303b7a9f440072a262d1399a7e5c5be24f8
- SHA512 80b0bdb7e3a53044e301f58d1af4615978459cd2348c0fb838568f2f106e51f81b1589c72a336ba3574bff1ccbf18d04d500a1c62d69adddf79001d77c1189e5
- TLSH T19B81E68973F96648F5F3636D8E7B30922BBF7D94A465E0AC6130828C446EE0589C0B77
- MD5 SHA1 SHA512 TLSH
OBLRes/ko_KR/ConnectionFAQ.html
- SHA256 b1e1d990e2d77d438e758efe986478587c7bcd3ad43ec5fe7062be6a371705ac
- MD5 93a79c3cc6d0442edb81c3fe8d0053b3
- SHA1 a1426f047250ca2e0fe2b56cb6b561106e585fba
- SHA512 a0ac3294e7d03ff8d3d4817e82027ae3e5ddc08c3fe13451dbd49262411e6deeeb5197ce80cd41c5e6c7ab83774629acf9102822129e30c028daa5d4d5ee7f98
- SSDEEP 192:YMq8Tll8o5CfzIKYdqVgW6XDnrzkYN4VQ9U2:YD8Tll8o5CfzIKYdagWYvXx
- TLSH T16E322131E7180505F0A659D6B4B212517468DB49D34364BAF07B6E2BFCCB8B737C226A
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/ko_KR/LicenseFAQ.html
- SHA256 2475118bcf0b4e115484cebf7350d7261439a0825516bf74f7750c3a22ef0b4c
- MD5 399f2d999cc5589b18d6546801701e1b
- SHA1 2e4ac3cc7a04e32bbec094a69316e1c369f201b6
- SHA512 7d24280a8d40ac1fcf4ba63f6e380962dbe844bf57b154b38c54f201d21da492c6d0cbce57971a9cf1dcd0512c10b4ef2126a697b1136c6aec339e4ca1b908be
- SSDEEP 192:YvUO8Tll8o5UrPKygWY5DD1wvfF4Wr3ErM0en0DNt+L:YJ8Tll8o5UrPKygWKvSwda
- TLSH T14D821222EB280405B0BA49DAB06613946464DB4DB3526475F07B7D7AFCCE8BB33D13A9
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/ko_KR/Main.zdct
- SHA256 26a58b91604486ca16ab331c22e7cfb2b3b65898777292e48d5ca2b45a3731b8
- MD5 8345a703a82aba9a857beff8933d19c6
- SHA1 364f81cc19ae3a2d8a5885d911a9152ad3e17d00
- SHA512 9f9a53c52c8295ad3ec3b9f3fe83a7241fb59bd98de1c11c9fc233e7a2aa52935006b1d3643e4909dfe40432077d181a1e0705f4d7839da1a091118dcc0ca585
- TLSH T161415492A7DC7505BAF36B4D7E7D45920ADE3A45AE0EC80D2570981D04FAA90D2327E3
- MD5 SHA1 SHA512 TLSH
OBLRes/ko_KR/oobe_launcher.zdct
- SHA256 6d3acb85252ad9fd4a2085e74ca25a5f0b4caf8554e36b96790194c4302f65c2
- MD5 fdd95386e383be089a65966ca6ebb0d0
- SHA1 a0f01df29c0a5e5b235228cf44f9a72938dd64c3
- SHA512 11b788adbb03b732f4e18b69a0947374c425eef1d4354c3a05eae871015b359d80e2db46225cca51a2290e20173b75220acb3c72942ffe4ee2307dffd7598334
- TLSH T15871A016B3F96504F5F3A70D9ABB71A12B7F7EA49461C0AE6530014C4CABA84C8D1BB7
- MD5 SHA1 SHA512 TLSH
OBLRes/lt_LT/ConnectionFAQ.html
- SHA256 a2658f022c2eef1ad6d7d1834341b0d6327dfbc9042848285c46249d4c8a716d
- MD5 cdd3a8fabecf187f7946d128755bcffd
- SHA1 565963833fbd1310efc6579ea5244d9b0b85fcb3
- SHA512 0093532ab99b5ea1329d69f10f9ccffbd5126a8458866b5bd29c0e3def3756270d84e663227a94807f2891ab85d30cbe89316ad3e407a1144da88a791b0b28bf
- SSDEEP 96:VJin7sPCK6hatUvmFDn8T3I95Nh6l9ucio5t2Tf4meO/jgRzeWjgRLYTWjgRLqbT:43q8Tll8o5CfzIKYdqVgWO36y3izTZ
- TLSH T1D1424132E7180946B1F655D9B0B212506468D759A30354B6F077AE3BFCCB8BB37C13AA
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/lt_LT/LicenseFAQ.html
- SHA256 62618d9fcfe523b823f60bb193567cf29c1906551aedb9d7578c52c3407fd78b
- MD5 4d43c9b8381d4ad96d3d01c7055bf819
- SHA1 d52e9ea884559fb57c59379375f9226e658fdbb5
- SHA512 5aa487c1dda8ad320ff41bf9648ff41c8b9f46d82097aef1dc4bb358bf25850d2a406ce50152dae09a3f221e58a836329be5780c46aa0dc61d94920368529557
- SSDEEP 192:4KUO8Tll8o5UrPKygWZRdikEEO2eXLkhK3+L:4u8Tll8o5UrPKygWbI2eXOKK
- TLSH T1B5820022E729044571FA49D9B1A612A42458EA4CA3029875F07B7D7BFCCB5BB33D03BD
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/lt_LT/Main.zdct
- SHA256 b9a4121249ff28523fbbb5e3cb731ca26017e11d60bacda1f996e7a24fa88c79
- MD5 854aad3eabc37c906f839a08af885222
- SHA1 fef41049d986b8dbfcd5f0a6be47273e1b3e745f
- SHA512 8af302a9666e2081c7c324fd10449a9f8cef692bca75172006e90cc8f5071cd88d19e10478643c54280872f33d9d5da6f07352a6f2f43c7bc31f3261fa6b0581
- TLSH T1C751C0A0A7EC2609F2F31B1C69BD45160FEFBE66AE3DD60E1470548D05F0A81D4B2763
- MD5 SHA1 SHA512 TLSH
OBLRes/lt_LT/oobe_launcher.zdct
- SHA256 b92878d7ea406dd54c8ebce2235520787e7d8439e470e86b4a3e7514beec2e05
- MD5 09b4e586f1641ad6eb6f34665ef1f8f1
- SHA1 3932bf40beadef80c74f0816e3e9233860f1ecee
- SHA512 21e08e756aa1ee306257b9bc5cb9c46b7e4efba2219c44fda97be3d7ada1d5d13236201ee366c2afbbdba347eaa71c29eedac44bd52edec66d8b9df41946f1a6
- TLSH T12CF0A7B9DA42A366578CA1FB70CEC4C6FDFCA2AC82F43C1502021285B59363921778A2
- MD5 SHA1 SHA512 TLSH
OBLRes/lv_LV/ConnectionFAQ.html
- SHA256 b8b2be1ac57fd9dc11ca9a3563dcf3046351989be75697a0a03e32544f9380f9
- MD5 8c6123b5fdb96e1102c435809b80de93
- SHA1 595358eff9f1a2fe08260e2a70dbc9fa549eb952
- SHA512 2f1298c962d762b0d145453ebc126010e558e294e2f83f650a7bfa67bc11aaf5c0084596cbbb179d558d8049fb4002e1fdfef1ed6b415f7eb74786ccba9c4737
- SSDEEP 96:VJin7sPCXpLhatUvmFDn8T3I95Nh6l9ucio5t2Tf4meO/jgRzeWjgRLYTWjgRLqj:4pq8Tll8o5CfzIKYdqVgWrfaVx+6m
- TLSH T15B324032E7090A49F0F249D5B1B216516458DB49A31354B6F0777E7BB8CB8B733C23AA
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/lv_LV/LicenseFAQ.html
- SHA256 a6fbc003cc1c859b5cb10bd27d275e435ae53ac0f6d2c528cceff388a0e3f0bf
- MD5 eced45b77f778dab40b0b5f4a4e871e1
- SHA1 1a687385a1dcec1562f8a061a369b7c928afbc95
- SHA512 2e3c6ff70f9fdac8a3757259663628938d250c2a389f62e4e03e944377c876712632bb96a31a7f552beb404666cdb742876a8a142ec2d8acb3aaf39149b8b3e8
- SSDEEP 192:4MUO8Tll8o5UrPKygWBBlLniyXjynsqoL:4M8Tll8o5UrPKygWnlGyzys
- TLSH T1EF822221EB280415A0F649D8B1A213946498DB4CA31698B1F07B7D7BBCDE8BB33D1379
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/lv_LV/Main.zdct
- SHA256 02f837092168c13a95be9c0948305f7a9e609d413bfb20b664af136076b1f7c9
- MD5 9ff89ed016e263d3184d594c723c0801
- SHA1 7f5c5b46e5a88620117af6188addb431106f7027
- SHA512 c86f8c8b9ef23d2518e3f283c54f904d2d0d922c5ca8e438f6ea295feea360f8a957643e75209fd61f370a4441292f05eb321213d7db10d4b4963dfd4967d3cf
- TLSH T1FD51589193EC2619F3F31F0C7E7849561EBF7D97AE38D60E047058AD08F5A4098A2B63
- MD5 SHA1 SHA512 TLSH
OBLRes/lv_LV/oobe_launcher.zdct
- SHA256 b92878d7ea406dd54c8ebce2235520787e7d8439e470e86b4a3e7514beec2e05
- MD5 09b4e586f1641ad6eb6f34665ef1f8f1
- SHA1 3932bf40beadef80c74f0816e3e9233860f1ecee
- SHA512 21e08e756aa1ee306257b9bc5cb9c46b7e4efba2219c44fda97be3d7ada1d5d13236201ee366c2afbbdba347eaa71c29eedac44bd52edec66d8b9df41946f1a6
- TLSH T12CF0A7B9DA42A366578CA1FB70CEC4C6FDFCA2AC82F43C1502021285B59363921778A2
- MD5 SHA1 SHA512 TLSH
OBLRes/nb_NO/ConnectionFAQ.html
- SHA256 830e018d16105021f3cd102d0beb17113f4f96dc702c1437e214f0c85d8df8b9
- MD5 ef145fcb367ca77f1c7022881de8939b
- SHA1 bfe71b256c3b4ca808019b7588e9d184e7a700fb
- SHA512 acbada4581afc1164b6ae682b755901e0ecf728d6a652074e16fb06c6eff41f841e51e05c8ffa1f2a94a4aa0eff4e5054fd36b246f51a27c224e6bd3b9c6d698
- SSDEEP 192:dJq8Tll8o5CfzIKYdqVgWD+dUJYE9gMNekS:dk8Tll8o5CfzIKYdagWD+dUJYE9gMO
- TLSH T19D424332EB09055AB0F645D6B0B212556468CB49931354B6F0777E3BFCCB8B733C22AA
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/nb_NO/LicenseFAQ.html
- SHA256 40ba6635ac0cf8c8e1d6f408218a3931e4bac00c209783ffb6e17211e80b8b67
- MD5 5a4e7bf980fecdcf08ae666ea220022a
- SHA1 bce35add9edb60b74554e0636b96780333a4e932
- SHA512 b24a6b6064846fa661b0661152b74b7a5a7e996ee5efb92470ca5bfce86c7d88ec34ccd5e57d504d7749ac181439f4e0c518c39730c327f81d7078bcd659fedd
- SSDEEP 192:d+UO8Tll8o5UrPKygWu6FDnkGkmPoAldPD2TsyM3KUvL:da8Tll8o5UrPKygWu6BkGDoAnyTKr
- TLSH T1C0824412EB24041970FA49D5B06613952068EB4CE3269875F07ABC7AFCDF8BB33D1369
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/nb_NO/Main.zdct
- SHA256 fe123f704df7bfe1b0cbc5318fece6a124ab0f56a8e864e0ef545dbf7509ca19
- MD5 0983a00e718c5ac7714caf6402ad8ece
- SHA1 f388403ae16e3db16b8b798223e4cc32205b051e
- SHA512 f43710254b3d69a3fec5da0da9c18bfa92ac36f8f874766ba0b61dd96bcf779755fd159e6a096504f27ce1a13ee3fbec0bb20ff4a396f7abbba6789324902906
- TLSH T123514CA1A7EC6A19F2F31B0C7E7D04510AEEBE867E3DCA0C1560655C08F6690D5B2B73
- MD5 SHA1 SHA512 TLSH
OBLRes/nb_NO/oobe_launcher.zdct
- SHA256 14b94623c53315d3d459951c00fc054c2dcc51028e420ddad2cba7d00fe194b9
- MD5 c756d9e33309fb0cee3f225b99b0df88
- SHA1 a3cfb29af3e48af469ceeea4cb88d4ef21a2354f
- SHA512 c27016e01aa6d97e9cdaf085695901b39f13f2e565294f00a4b67e168e800fe18f708cb4cf89663d332fd79de9c22f9ab013ff5321e5364b4ee1f0747393b7f5
- SSDEEP 96:pnHEAMoOtCXnHboOtCpnHgoOtC5nHUoOtCfnHmoOtCcnHpioOtCknHIoOtCF1nHF:jiDiKiuiWiZixi4ieAiZio
- TLSH T111A10B26B3F95608F1F7671DADBA30942F3E7DD59938C26D2524510C0D7AA8488E0F33
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/nl_NL/ConnectionFAQ.html
- SHA256 316fd3a0adc8a9d9be36a70beb68dfcbb4c941082f69048c0105be354d66849d
- MD5 d3d443d5bc31b393c7783d0d6ec339d0
- SHA1 ff2364533fd81662027136cf4d4b9f3180412cde
- SHA512 951a00791712d7bf8403e95706d6980ed8aed616e96b0822e0e1c3f482708cc210e8df812cb4b230930d4e232bb8edc920aa39bb911a2a9303129baa871fd409
- SSDEEP 192:d6q8Tll8o5CfzIKYdqVgW5+T9dQZ5mKcXXXb:dp8Tll8o5CfzIKYdagW5+T9WrmKcXXXb
- TLSH T15D424132E7080519F0E245D5B1B222917558D749D34794F9F07AAE7AFCCB8B733C229A
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/nl_NL/LicenseFAQ.html
- SHA256 30fe7d08283d17153d4170bbef100f24c7105a691d5a0826fc64fa908c20449f
- MD5 7bce0fbfbc1f2f0b6bfe6102872b666b
- SHA1 20b0df5aa8dcb332c6f61e5d5481dc0633571fb6
- SHA512 36d4918a88330d054cb0387772632f7e3a180f1317bfe3d770a4ffc448d7b6fab7edacfab080169092ed25beb450057d2dea0a8ac262c379e7aab3ead6138824
- SSDEEP 192:dJUO8Tll8o5UrPKygWwf01djKQm8ost4iKM4SY1bL:df8Tll8o5UrPKygWwf0XjttfjC
- TLSH T1A3825412FB280419B0F64AC9B05212A57454D74DA35698B4F07EBD7AFCCB8FB33D12A9
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/nl_NL/Main.zdct
- SHA256 a4478e8237963c369e0f908840f81bdca86ec8df70aa570bbb1a84c46c3bec63
- MD5 108b9596a1e5a7204230ce84968dd5ac
- SHA1 5320ecb2681ab7e0d607fb25c0084f741ccfdb20
- SHA512 e63810710ab10ffaf13c2ec01a81e5068ba434d44c3e523fb3daee0fdb06ed4552cd62f2acdcb11d77f00b2da78c06b015bb958a4529cfcbd337c862d974303a
- TLSH T1FC513B9167ECAA18B2F32B1C7D7D54514EBEBD86AE39CA4C0670186C08F5A409962B73
- MD5 SHA1 SHA512 TLSH
OBLRes/nl_NL/oobe_launcher.zdct
- SHA256 7b68c388924c9029886d35c3189cc86ee29ea59abcfa15b53b669760710c2bd6
- MD5 6bc2c59d7b68b566b8ec94b0f6ffbc08
- SHA1 389c90cc2a60d2643cd6b7231d93d8a2535f35a3
- SHA512 e773ccda1fd97a711f3dceaa4b873ae749ae0b84de9456496172e77b35ca5fcd8c33de6813d59c35db309f07d9d76ac5c8c892883d50934e42e0476c7a6c5582
- SSDEEP 96:pBRml19CkSoml19CSKoml19CC2ml19CM1ml19CPvenml19CXqml19C21venml19K:IFmFwFRFKFSFYFJFbCzzzR
- TLSH T17AA1FA5673F89608F5F33B1DAA7B70942F7E7DA5A874C29C1664414C4CBAE1489E0B33
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/pl_PL/ConnectionFAQ.html
- SHA256 7035bdeec896dec02942fbb7724c5faddb06d0984e6c55911da3990df970158c
- MD5 da41e06fe286cc372dfa139d33dbe312
- SHA1 fdb27d4fa5d79ef23e2a0ce29612cb474dc7e12b
- SHA512 3e38444dbca2c3bb4e738404eb6bb54ab08475160fe612b313f18ea4c7138c32fe22cea2b60716f0c0a846976a3f2e9db182f0a2dacd522f36b21c36fd16df3e
- SSDEEP 192:Xqq0q8Tll8o5CfzIKYdqVgWvfSQTxGDb/:Xqo8Tll8o5CfzIKYdagWvfSaxGf
- TLSH T1EA422022E7180545F0F645E5B0B3165174A8DB49930354B6F07A6E3BFCCB8BB77C22AA
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/pl_PL/LicenseFAQ.html
- SHA256 4bf0f3d79ddfc288247c15477c75fe4d3e00cdae5d911ca5402f9af7e34c6af0
- MD5 38839b4b6a55f9afb0016b6d7a77c65e
- SHA1 2af2f178da04954d3e2603db84abebbd1a1fc70c
- SHA512 e23ef3079a865d627e308b474528a44fa8c6e206da32db23b7a77fe4bf019c6d30cab51992b2b71dc4049f4d9d738751df694865f64e0ca648631dd8101a1856
- SSDEEP 384:Xxz8Tll8o5UrPKygWk+15UqRUo0cAw1DkRl:Xxz8Rd5NN+fFUUwRl
- TLSH T109820F22E7280445A0F649D9B1A3139464A8DA48A3125875F17FBD7BFCCB8BB33D1379
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/pl_PL/Main.zdct
- SHA256 3e0fb1eea8e43e572b02974ead2429c842222a24a13f58422f5d3cfec89088ca
- MD5 041c99bcf05988d86b2ce02d890fc5eb
- SHA1 c38193f250dac18ef215c7593ec9045fd2616430
- SHA512 e94aaf8d747b643bae02f8ff06f7e4f41d3b0e1c8a62ada791fe8eef20cc17ff0fb79321350947fcdc727783cb22124d4761a5ebc0f7d51d0f576104740765f8
- TLSH T1E9517E81A3FC2A04B2FB5F0CBA7929914ABF7E12AF3DC58E2860654C09F4950D572773
- MD5 SHA1 SHA512 TLSH
OBLRes/pl_PL/oobe_launcher.zdct
- SHA256 cd97ee2db7088b359159e1ba5249b45a3dfe22ff2ee812d40a35100d7e121b06
- MD5 e13ba9b0e16de9065c8f3cee126a7086
- SHA1 86a11e96cfd6830c7b2cb16b5fdeb8d031122d75
- SHA512 cd68a5509d95020f9f433fffa16f0bb623bb802266f0122b76968dc6777741577997f5cb37f2a36eb59febc336519690400a408288f1d7ab34d08ab77dc32a3d
- SSDEEP 96:tR0i4CuAi4CIUi4CI+Uni4CmWi4C1ai4CN0i4Ceai4C+qPSi4CrEx1jxUDi4CI:DaKUE0MpjY148VR4P
- TLSH T1AEB1520273F85648F2F37B0C9A7E78945F3FBDA5A935C1AD2524424C1CBAA8489D1B33
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/pt_BR/ConnectionFAQ.html
- SHA256 c994c9521dc2f4386267dc95d3ded8488c2a263f9e894d710c7c0b038ecb73ea
- MD5 673c26ad693378ddad7bb28c589e4346
- SHA1 2c1d9f36956921ba5bb44d03a61a4b4021be35eb
- SHA512 0658491a5edc51975d7ec77d0351a2eb2c93fd6196f4fd3809aa4dce22b1c301e0b7799323439cd126cc14e3ec8c51865106704c0f78805a9c1f010c7247246e
- SSDEEP 96:VJin+sPCB6hatUvmFDn8T3I95Nh6l9ucio5t2Tf4meO/jgRzeWjgRLYTWjgRLqbR:diq8Tll8o5CfzIKYdqVgWtARQPwa
- TLSH T1A5423232E7090505F0F245D5B0B722527468D749930394B6F07B6E7AF8CB8B777C22AA
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/pt_BR/LicenseFAQ.html
- SHA256 3d731867d17d0b3b2052316e13db88b550a4898a3324b749d2dd457994f58a2c
- MD5 ca26d9580cdd693b678073ec6ceaa805
- SHA1 8cd5e2d874b1c560ca3137adf71f953d1156a153
- SHA512 f9f94f88b93aecd8e088f16c37228a99f3fad4e954bd08276b44bdf17bbcd86dea5f8a441d0b2a76d1cdaad925925000c74c586b17649c702dd05df4140968ed
- SSDEEP 96:VJin+sPCs6hatUGirFSLK8T3I95Nh6l9ucio5tkPlWjgRLPeWjgRL0RgN5+NNkT5:d5UO8Tll8o5UrPKygWqx3al/5kT2OnL
- TLSH T1E9825521EB180405B0F689C5B1A7139564A8DB48A3029875F07B7D7ABCCF8BB73D177A
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/pt_BR/Main.zdct
- SHA256 5c97fd98bf9c82d5e7b73485cd1f087fc08b2b781f91cf712800ac12c0c0ec37
- MD5 c2bb6ae120e8c3a95b617457336b9cb3
- SHA1 fedf4b10e99dfd342c39ce51a80451ce938e88bc
- SHA512 9f5d6684aeb9cdaa53c59e195915a8f29a9134557cffc4aaff78c7d710bf9df88bf4c9995974a860d14fd62d8f238c8fcee31c89253f64db13cb2fcccf67e42e
- TLSH T17F41199297FC2A08F6F33B0D7E3904510DBF7E96AE39DA4C1470584D0AF5A4099A6B73
- MD5 SHA1 SHA512 TLSH
OBLRes/pt_BR/oobe_launcher.zdct
- SHA256 1217cadda9832ad4e1d8b0e043f6aba936772177bd5c3ac55ef6e33ebd1a4fc1
- MD5 d4168878759283e1de25ff3763c528bf
- SHA1 d86889d9d7a70b5e41dc40a78033f6749339301f
- SHA512 5ed03476f6a07d57f92f639f32c1c3611077d1e77ecbad519026955994b1489cbb8bd3a1cec0bd898b25a364119c1d9463b014639bba5095ed4690adbc0769ec
- SSDEEP 96:mH/OCHZHyCOCHfHyGkOCHvHpYOCHRHnYOCHiHtOCHaHtkOCHpHtOCHCRXOCHRzeb:2GUMqXqhM/fQXx0QREHb
- TLSH T1A2A1F856B2FC1604F6F37B1A9A7A34952F3FBD95A839C26D1124464C0CAAF458CD0B33
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/ro_RO/ConnectionFAQ.html
- SHA256 8ee9d3adbcdf5bba14459c9f2193ea7d59a6b1577850bde26518d69adab71838
- MD5 26235f873952010dc67e9859e0ce8e61
- SHA1 da3af8dd0bd038ca6f1f663736edb10b235cc4aa
- SHA512 6a038d99e785859416443b4be7abf47343f32d18504dfa6766b65048856072c93c54bca6cc15b40f0160e0f12bba7f29ec0efacaca283084d76c228808f0722f
- SSDEEP 192:X4q8Tll8o5CfzIKYdqVgWj1EfQc0+ZggY:Xn8Tll8o5CfzIKYdagWZluBY
- TLSH T1E1423232E71C0505F1F245D9B0B222927464D789930394B5F17B6E7ABCCB8B733D269A
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/ro_RO/LicenseFAQ.html
- SHA256 85848b3e246036d098ed35008b8c04c6f3faeadcdd1edd2719d988b918ed4d92
- MD5 7c33746b871d8d8b435d72c5d357cc6e
- SHA1 de4a2af5eb7fc33b358c7da57ac99d9c3f887a11
- SHA512 bb0d438039d73b6188be11ffe8117db8dc5319d05751d94ce3ed045667debb9970df1a042102f4b097f88235441e5e4f55357364a96c8a50d858ea43a4548a9d
- SSDEEP 384:Xr8Tll8o5UrPKygWXIMfVvi9J3FIHxIfVr:Xr8Rd5NzMf1QJqKfVr
- TLSH T1F2825322F7281405B0F649D5B1561296A494EB4CA30298B5F07E7C7ABCCF4FB33E07A9
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/ro_RO/Main.zdct
- SHA256 27f07fce6090c105f3cb1998f6c0818954967b54aa2eafea5e4aaf13007a7f3d
- MD5 7d9bde1fd0f4e59d7ba6fe9006d3ee8c
- SHA1 5b37d3dfb60676677d1f67788e69442351db633f
- SHA512 5fc6f344b2257c5678d455d1ba3a625ce2abbd54ccb0ddfd96df51ac6e9b32bc77a0b99d0e3af7ad8669d45ac757b71150356df347c2c6f3aa4f6e8c52086a5a
- TLSH T157519A9197EC2605F3F32B1C7E3D04150EAF3E66AE3DCA0E1570594E08F6E8099A1B63
- MD5 SHA1 SHA512 TLSH
OBLRes/ro_RO/oobe_launcher.zdct
- SHA256 cdd86590eaf8d88b6088fa5eddf60cb2e0fa03a9871a086596a2e1b4f3778d74
- MD5 f90ee3e20e17abd3b503be78d0f96db5
- SHA1 093bcc810bdb7a85d45f3c34727db94d17a60f4a
- SHA512 089b2f0caa07f98f72171f8b3f65f37d223d28bea05b09a60e624f0a3433fdd27833785b4f98b0ea415cb126d4b6296eca21b9cc8661d00088267d245ea810c6
- SSDEEP 96:pA6CLY6ClS6ClT6Cj06CQKS6Cod6CZ1KS6CxO/6Cbul6C7:dgkH0gZCLZiRg8
- TLSH T139A10A5273F82204F2F33B1DAA7A74546E7F7D96A839C16E2120854D0CBAE84CC90B73
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/ru_RU/ConnectionFAQ.html
- SHA256 534ebb0da5742e8f3d4d6ac63e3a592a16b0be5cb9e176a76fef55390e497cdc
- MD5 cd1fc2b93dcacce724364856642f5dbd
- SHA1 45fa0751ca92997fbcb6c8756a5929765eaaf537
- SHA512 0fdc7398cf8bf03590e644f813dc6f89f235461a81ae8bcbc8f04e94323d942b5774fe8e286b137b23cdd49fe377ea8ab59fd05cff339c9f2905408dff383def
- SSDEEP 192:WUq8Tll8o5CfzIKYdqVgWT5OAUiqYQygUp:WL8Tll8o5CfzIKYdagWT5OA3qYQyg+
- TLSH T16F423332E7080949B0F649E5B0B716506464CB49D30754B5F07BAE7BBCCB8B737C22AA
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/ru_RU/LicenseFAQ.html
- SHA256 32f00c8bec1f23633257b4392005ba90a7e42b834a4df60fba608d9204bc3998
- MD5 18f37b95232087ef8c493db890833741
- SHA1 02af82aa9c96491031bb8cba98fa43ad1e333b31
- SHA512 949d5766da99b06eb36f2dc2362517761d1dec2fe073d16bf654cd8691d9d5dc8d45c1c93e497bed65cf37203fe6c6b52823a662fbcc8e2b06f345a50b9b0781
- SSDEEP 192:WvUO8Tll8o5UrPKygW2sQWld2IfaFuGGl3oUO0EiY4L:WJ8Tll8o5UrPKygW2sQWOIfaFuGGlXX
- TLSH T10E825122E7180459A0B54DE9B0A7139464A4DF4DA356A474F03BBC7ABCCF4BB37C13A9
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/ru_RU/Main.zdct
- SHA256 d0d848b664273e42c4d8bf362fdcc11d375cee095062f8810b93f0f978a93f79
- MD5 65940745f67d2dc0edb89cbb93e29153
- SHA1 a5bd88c6d4280e5063c987bb55ad7d77e0d52ed6
- SHA512 d59d8520abece2b3d7f8c48c55a1bf3a35567e5816c575125df73afc3bcfdcd61ba5aa76f5dd4d6d03d579c3d3652c1d58dab85f449d153f18b348ec3e3089de
- TLSH T10151CF4FEAECA40076B6921C2E3A48D215EE7B146B1DC58E55AF6C5D20FCA3073223D7
- MD5 SHA1 SHA512 TLSH
OBLRes/ru_RU/oobe_launcher.zdct
- SHA256 cc1260ddccaa193bd21471329aece2a4793532b314c4f06c539db088d8d04157
- MD5 47f61e60d941409c870e92324c71e019
- SHA1 65ed359c9e29435253fb1ff9d3fa68b33c9c64ab
- SHA512 48815110cb5f8da1531a7e22a3c86bc88f42245e9d8a704fefbb3e8e47ac29173569c2dce120d15a86c9fc1743a92ca16094b49212bffddf5351fec7367d11df
- SSDEEP 96:IcvMCg2MCmuNMC2vNMCoyNMC7wMCDRNMCgwMCjPwp8CRg8CJ:DkN3WFOjzEdYa
- TLSH T1EEA1AD0FF2FC9904F6B363094A7B34D1267EBF486720C19D216E9E0C446AB30AA95777
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/sk_SK/ConnectionFAQ.html
- SHA256 0b5997f50eb51c01088fc72d449d6c60951c2942d718402aa22f9850512a260b
- MD5 431690d1164c2933eab308c28f2d59d0
- SHA1 53995f6f5b235efd6a46dd4999527e6b504c922d
- SHA512 d781ac45b1af3d76d1a3c03c0a79e9d671cc051c1f75f15506dbc9612a546ac7954a00a4f6ea91013ab2edb538efe43e097c48bc8a931b33aa7821fc30b527d0
- SSDEEP 96:VJinosPCRu6hatUvmFDn8T3I95Nh6l9ucio5t2Tf4meO/jgRzeWjgRLYTWjgRLq3:XNq8Tll8o5CfzIKYdqVgWRUR5jx4X
- TLSH T1D7424132E7180909F0F745D9B0B212917568DB49934364B5F07BAE6BFCCB8B723C129A
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/sk_SK/LicenseFAQ.html
- SHA256 8bdbdfb093c0d54f4b036a52da581e65ad1ede4c6127ccee9cb32eb8d248b8b3
- MD5 f60036a731b0787cbc2ca1d57e0fd9e3
- SHA1 b50fc083f4c11968d9771775637d510853349e8c
- SHA512 5719e06e2a9e874c58df1c1b83e5990c433e519ebffbfa9d18ce7229b0e71667c67c643d3bf4d900c42fb7658e991db21f6e9054ce04b94c875fab111ee975cc
- SSDEEP 192:XQUO8Tll8o5UrPKygWOgn8R0OsIof9Yq1L:XY8Tll8o5UrPKygWJpOs119
- TLSH T135824422EB240815B0F649C9B1A312A56468EB4CA3429474F07B7D7ABCDB4FB33D176D
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/sk_SK/Main.zdct
- SHA256 1c3cb77a67e566b263af9b11f2e8c0998d9b89663c39cd6f79e35b4bde150fb2
- MD5 93fe1dceb3639f593d0528c2d1fb965f
- SHA1 aae33ec6daffc8c0fb937cc02217fa16ce962763
- SHA512 d641d9126f37804da552310d81f752db40972728d6abf76d9235915e0a6b0ca6b59afe3ffd5d30d5142a10e2a34ede399c42d04f05711c797a9ce299ae44f9db
- TLSH T11C51D592A3FC2542F6F36F0C7D7805660DFF799A6F3DC64E5960058C08F598099617A3
- MD5 SHA1 SHA512 TLSH
OBLRes/sk_SK/oobe_launcher.zdct
- SHA256 50f8a538f33a36884cb11edec74441ab28d08b5737df12817e106ab0ac384c9c
- MD5 9a18aaa2f8d808c003acc939607cb5d6
- SHA1 1882a844c4498737d3c9302e1c6bcd78c5df525b
- SHA512 0e56d95466be2dad5301dbd934399a2a8763d3d9333715ad842172dda3f9afd05b17ae0b2e68673bfae728bcc6d7817eefcebb1d8b08e0986fccbc09bdb618a5
- SSDEEP 96:n218w4Co218w4Cu21Fw4C+21Nw4Cg21kw4CT21RRw4Cr21pw4CE721RRw4CSQ215:nPNVPNbONbGN9/NeCRNGCN1CRNBQ9FFm
- TLSH T10DB1085272FC6649F6F3370DAAB625A49F7F7DA9B938C15D6020424C096BE818CD0B37
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/sl_SI/ConnectionFAQ.html
- SHA256 b6f7d4c1abdb4a30802b411778013fca5221d9ad4342c9c8f02aec0fd8636d10
- MD5 c40b83453a22bb28bcfd50f02af5707a
- SHA1 2a290991c02a7d9498f08792c9962c1f77d5f2e8
- SHA512 92b7dd6345f2bf0204c857933e1064a02e0ec53cd9092bea99af91db8e4c817dd3bff3e3e314f645c1226f1a09417570496cb9baec4dc1288aa52307905410dd
- SSDEEP 192:X60q8Tll8o5CfzIKYdqVgWlGXsk6b/qEjn:X48Tll8o5CfzIKYdagWlGXQb/Rjn
- TLSH T107424032E7090919B0F655D5B0B212507468DB49D30394B6F07A7E7BF8CB8BB77C12AA
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/sl_SI/LicenseFAQ.html
- SHA256 42d47d385651598302ec514164468dd3d1310077e3d12918ad51328cd17ef9c0
- MD5 c4ee287898074a6ef01003bdc4a83480
- SHA1 d6fd25b8d134f6fc9e938641d52fa8b7e7f6f05a
- SHA512 b028165388a88347551baf48756ef4c30d82586080551266f26c743565cbc0538d827e9c999d1957229ea373dcf501399384b12413125ec2fcc57115972471f5
- SSDEEP 192:XF0UO8Tll8o5UrPKygWE8i0iggILrmbCfKxYjJTEL:Xq8Tll8o5UrPKygWEFgUbsuYjJTk
- TLSH T18B822222E7190809B0F689D9B0A213546468DB4CA316D875F07B7D7BBCDE9BB33D0369
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/sl_SI/Main.zdct
- SHA256 eadadc1815f29ff218afcf61c4c0747be112057e1b70e461f049814507a81602
- MD5 23aee28f0e5bfa0f46b30261bcd3fd26
- SHA1 599e5b76f098d188f25c24ce8262ae8084a8f69c
- SHA512 45455e6494fa3213f05e339a43cf99659e83e188d594e9fc28d9ac0d0d7ebbf385ca7f6c3b858c14f49f3aa14a570aa30a7b4f29e3816cddff8c181865b03a32
- TLSH T1F3515C91A3FC6A09F2F33B0C7DB815610ABF7DA5BA3CC60D1574159C08F698195A2BB3
- MD5 SHA1 SHA512 TLSH
OBLRes/sl_SI/oobe_launcher.zdct
- SHA256 f5294523c04c366f94538e061d7c07d1d3a6def3b79ffec9763dcc950a3b4043
- MD5 caed7b6ca4a3133c4f774d0af82cf903
- SHA1 940affdc90b3d4f9c82accf2f53ed4620d6ac51d
- SHA512 d6312ca08be518d43ea6e0f899888da4ea5d5260329e14922c071bc2a67912f0f3b2d678cd5b75f80800e75d89e1c3d66a3dba826a6864b52036c017b2993a6d
- SSDEEP 96:pPCJJgJCJ3g0CJXZCJB5CJSBLCJKzCJb1BDCJrO5CJJsyCJB:hXJx0Y+/RaeKzyo
- TLSH T1EAB1FE45B3FC2608F9F73B099ABA71691E7FBDA4E935C15D2225458C08B7E8189D0B33
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/sv_SE/ConnectionFAQ.html
- SHA256 4d85b35a88d1c89e55bca62ed63f50321ffa3aa662dd64e1beaa4fcf54df81d0
- MD5 a25744a45c839944f15cde6b5a78eb27
- SHA1 cc8a0ee2db6234d6d116ecf9bd70efda578941d6
- SHA512 1d2ecf0a0fc842e39b5b8855d9eba81d19735d9414ac29da10cee16a0294e1035fb9540874bd36848b831fd618fcdc6013d69544fa7f2bbdc208506c50eff3d0
- SSDEEP 96:VJin+sPCb6hatUvmFDn8T3I95Nh6l9ucio5t2Tf4meO/jgRzeWjgRLYTWjgRLqbE:dsq8Tll8o5CfzIKYdqVgWYW3O3
- TLSH T160325132E7180959B0F245D9B1B212917868D749A31354B5F0766E3AFCCB8B733D22AB
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/sv_SE/LicenseFAQ.html
- SHA256 f6b4e30b83efb069d8f3521cf2aa418386b34d21baafe4d5909c571e07cd4bf9
- MD5 2a35f75ba35605e5e7498beed3f522c1
- SHA1 c793d9eee87d6cb146cc5992ef6732de87a213d3
- SHA512 4c70d75bf8387af5059f632dd9f5a75031aca393030940f4928b7d58ae8838b0786ce5ea61dd9cb63f4d8ec26e83ebc3dc035f284df77981fea7fe9443644136
- SSDEEP 192:dTUO8Tll8o5UrPKygW6pPz75H1QmnYLaFPtsCiKq6kSL:dl8Tll8o5UrPKygW6pPz7tCaPsC/
- TLSH T11B825612EB140855B0F649D9B16213D46498EB4CA3529874F07ABC7AFCDF8BB33D136A
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/sv_SE/Main.zdct
- SHA256 4f60e0b9e3ba6f53f04ba758f6605c256d489dfaf589a43685e00a0e29891d44
- MD5 8186572ade2b53e854b6c9029f7a9c7a
- SHA1 2300084baedab410f457785f81853d638f55cd98
- SHA512 18e2affd6443fd163de70b9d842321af00b1214311d0be03694fa99d2ea0e65f2baf9dbdb668896adcb40b1760f17a81dc99474555653f969228dd208cdfa97b
- TLSH T1CC519D91A7EC6A28F6F31B0C7E7905210EEEBD85AE3DEA0C1570285C04F594488B2B73
- MD5 SHA1 SHA512 TLSH
OBLRes/sv_SE/oobe_launcher.zdct
- SHA256 697d8b6e3d3ccd488b989fcb9a4955a0911a2dbf68a5f2ac91ebb8f2e4023816
- MD5 9112181a6c55f1973460cdc616bab6b6
- SHA1 5e88ecdd804a84e60542341d36f61e83270afed7
- SHA512 448b4584b5998315c013373a11620c16254fa960f2604172c6e4307a65b916511afa76a4c5802bb7891e7912e808616ae06bae3a1e0bfdc066340d20656a21a5
- SSDEEP 96:pdNOFCL8mOFCLK3OFCLqhOFCLUzOFCLH7OFCLfjOFCLO17OFCL0OFOPCLFEOPCLq:5asbaswasyaseasbasLas2as0qksaksq
- TLSH T1E6914E13B3F96208F5F32B0DAABE34901A7E7DC5A979D16D2624454C0C76E84C8E0B37
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/tr_TR/ConnectionFAQ.html
- SHA256 7feb4693d6e87e3debcea47c2a1cdb9c8997c4aefdda73704985f4e3e2b3ef56
- MD5 6ce2480836f738d53762df31b44656a6
- SHA1 1d83ade7b0a3910a5b9c5525a287362a7b910854
- SHA512 e3a0f75ded0e3d8ba8b87af53cd7e85f9f62f903b33e54f3162e24eeb43abc386d321aaffa428fcbed7ab44cea74d3be16b8a54884a9cf5a64cd009020819987
- SSDEEP 96:VJinMsPCH6hatUvmFDn8T3I95Nh6l9ucio5t2Tf4meO/jgRzeWjgRLYTWjgRLqbF:L4q8Tll8o5CfzIKYdqVgWbGx+3TOC
- TLSH T133323121E7190509F0B645DAB5F612617468CB49A30394B6F0767E3BFCCB8B733C226A
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/tr_TR/LicenseFAQ.html
- SHA256 fb323e39ea7472a648d00c1a7404a3afeb025411a14067b035ad8951ff349125
- MD5 83286e3c30b67bc883669f59541dbbc8
- SHA1 17c923ffa9061b7cb3b4da6b01f580c7a05b2474
- SHA512 7252eab032f5fa2d6a08c76443a9cc2938ce4ce1864345c4adc029a4ec29f7cc9d416edaea008f3bcb0ad64f56a6070b96af7e841ae6c1d922617b5db385dcd0
- SSDEEP 192:LTUO8Tll8o5UrPKygWNQYOug6icHFMz4/BBbtgQZeL:Ll8Tll8o5UrPKygWORuDicHGEBltgS6
- TLSH T188822111E7290409B0F64AD9B0A313A164A8DB59B3129475F03A7D7ABCCE4FB33C176D
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/tr_TR/Main.zdct
- SHA256 5ec02196ec262fee217cbfd4f73463fe6300903e6e26f6f6d6e3bda259c0274b
- MD5 ebc7fc8cf4ec4380176557573e55afe9
- SHA1 2482e707bb158196c896ad3cf80d3c20eb9f7358
- SHA512 80d23d769159dd0853b91e227b420be7836f1d6922a1f6b711df38cb37f259669c8a1f04a45cb316b6ea9ce99724bd52d4b564556c1878f1566e8cbbea1fb2bb
- TLSH T19D51A19197DC6A06F2F32F0C3D7955930BEE7EA5BE38D90D1571691C08F46809426BB3
- MD5 SHA1 SHA512 TLSH
OBLRes/tr_TR/oobe_launcher.zdct
- SHA256 af3ff664a06b316bfbb3dbc5ddf798f6b9f8328506adb8252cd4e0875f3d9e96
- MD5 22f6527fec49d01e20355b4809dcd593
- SHA1 905b6ccfc57cc2d9d64c6ce0e71883e73cc6c7b9
- SHA512 c7f293fe6bd9e4ce669141e47968922ca8d7f631dd9df36b5e2955f0567e96086805f5def50d86d0b328db82f9cf30a38d56b2428764b0207b5e6deea28f1b0f
- SSDEEP 96:E0eC77BX0eC77lX0eC7QXD0eC77l0eC77Q0eC77p0eC780eC77CW0eC77JhU0YC+:VeeBEeelEePXoeeKeeZee2eeeeCveero
- TLSH T1F1A1A01673F8A619F5F32B0D9ABB30551B7EBDE9B831816E2174524C0877E8488D1B73
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/uk_UA/ConnectionFAQ.html
- SHA256 03384fe14b474dca02cf473c356df433de5dbb895ec9f9b674c1cec2d6f802bc
- MD5 ce5f0c53eb33f88713b247e8177a2cca
- SHA1 7ff972f3f584e3efcdbe0f17d7e491b4b965aee1
- SHA512 e628681ce033901ecd2f5719aca90391accdbf2d1cb7652c60f087f824bf102676d283519f2ef2d5d895e572910ddc7bd4b06d3a514145e1575ba0788affeb39
- SSDEEP 384:Wh8Tll8o5CfzIKYdagW8kDHlH5RvvCJtc:Wh8Rd5C7EeDFLktc
- TLSH T199424332E7180949B0F649D570B612616464DB4A930364B5F037AE3BFCDF8B737C16AA
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/uk_UA/LicenseFAQ.html
- SHA256 6941ca5904160347834095432c7c54bcdf597fd10ed7a155d04a17a6871aa146
- MD5 36f5371c7c4380aaaa0f0d855269fe9d
- SHA1 f08e6f2b69b34d6f044292b7f703efd434faab9a
- SHA512 d270080aae9f9938ce0c8c271397f746765d10b4c12dd58fc8951065601cd3c37b889edb11aaef317133d0b1d0aae0afe66aacf590819ad5a9528245f6b4963e
- SSDEEP 192:W7UO8Tll8o5UrPKygWBvJPhVdeP9evFpiPfXRwzJra13eL:W98Tll8o5UrPKygW7hPQ9upiHWEA
- TLSH T1A6821322E7280449B0B54DD9B09613642494DF4DA35698B5F03BBD7AFCDE8BB33C06B9
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/uk_UA/Main.zdct
- SHA256 f45f4c84ea9a2668f7103eb1c23015f3ec60d25010a9eab9883b5fe97e0e3935
- MD5 9554a4e30e85dcf6281b407c70431ac3
- SHA1 a5618b7f67cf8a8f66d3ddb4ffe504601a48db01
- SHA512 8843dc82d116fab72008a2c28cf672b68e5e63c72a22f90c2ebba8cbc7aac0251fdec08f49fa1252446bf4c8be1c1c0871ff5576295e56c26dced17031ec7f20
- TLSH T10151914BEAFCA50076BA925C6E3988D705EE77042B9DC58C256F6C6810FDA3073226C7
- MD5 SHA1 SHA512 TLSH
OBLRes/uk_UA/oobe_launcher.zdct
- SHA256 2ef49c6a42a0f85e245bed56ac88b23939bf9bbe76f67eb31f679b7ea7edf577
- MD5 8577e11c969f8274f89c0ea651074bf8
- SHA1 7816aa768914c92a66110ad233739f6c4488eaff
- SHA512 9f9d93071dc839cf95060628d794143dadad9b1d47061a7b6a42174c72b01e73889d2f78927a69e12706a5230bd70786082366651531c3747f1ac67acdbdaf92
- SSDEEP 96:fu8YlNC0JYlNCKtlNCKGlNCc0lNCn40lNCvDlNCE40lNCuAvtbNCy3NCY:Wb2dEAnSEKSFYzN/
- TLSH T16CA1B20BB6F8A604F6F3630D493634D5167E7F885714C2DC216F650C086AA349BE5B77
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/zh_CN/ConnectionFAQ.html
- SHA256 0ad1c9866ce567352444b5afdcd8048ced98ef1384d3d30015dc167c63c3aa3a
- MD5 5c2740d52ee7cdc266065daa1ef0cf97
- SHA1 c590279852c23eb504c840c15717c3b9fe796b61
- SHA512 20cd4d1d0d5be53a14ad01feee69a89bc36e328b6787413357b00410a9ef936ffa30921b7ebe1c82fd6ee7b60e856753fe51a406d3d092c16523bed1daa73876
- SSDEEP 192:p5q8Tll8o5CfzIKYdqVgWe/D90td8hRLu:pU8Tll8o5CfzIKYdagWFD
- TLSH T1F9320032E7190519B0F695D5B0B312507458CB49A30364B6F077BE6BFCCB8B767C229A
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/zh_CN/LicenseFAQ.html
- SHA256 cbabc7c287a76be346a904c1cdb6612b80ecbd458df6bf183a1f8c4801b764ee
- MD5 8f843d8ee8bf8d6bc72fef59ac2c5783
- SHA1 73e7a5b8524d292d82fa52f3efa2c30fb76e4333
- SHA512 7d3ea32923c61f2d62eabfe7cc4a38da5d18d960ff451f6c8e3fbccf99e6a9fbda2ae11d9e94c3a62dc908f46af8f5e480aee4c9fbf61df562f20eb29a54025b
- SSDEEP 192:puUO8Tll8o5UrPKygWet0LHUWU7r/QX7tQv3uW:pK8Tll8o5UrPKygWe2LRLtc
- TLSH T198720F22EB290405B0FA49D9B0A612946454DB4CA3069475F13BBD7AFCCE8FB33D13AD
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/zh_CN/Main.zdct
- SHA256 1c91dbabac12372e6a1b096ab2af3a914eebe197be421cabc8b36ca891fc1027
- MD5 13fe11c3726818e25c1093efa681ffd3
- SHA1 f467a94ad192e2356d9ea7495fefab192eeacaed
- SHA512 9f5f364d7c729e20350f5111965c556733e4e8f1bec9c52b56d09e6ddebe0701ae982a59207df761f8c23d51f9f15ce11e7ebb223495f58fd8659810e13354ba
- TLSH T12331CEA0A7DD7810B3F31B1CBE3D44464AEFBA466E0CC80D68B4AC4C05F9A0192237E7
- MD5 SHA1 SHA512 TLSH
OBLRes/zh_CN/oobe_launcher.zdct
- SHA256 a6d338a5a8766bab3f5ef5157ac81f1453b77f5405ce540b4549217590bba64c
- MD5 43b01e27b63bd7c2be11dae36776f4e9
- SHA1 e8aa8c1b2b1f96a8ce41741f9cdb5098f75268f2
- SHA512 a4c0a981af65f0aa59622f5583678dae01b4c935c94aec46a90195d5cb91cd13121bea158e40a3d6c815e92b368d5488273f760541abcf8e016102cca6e3556e
- TLSH T108612F6672F86648F1F3770FAB7B74842F7EBD956420C2AE2570890C096BE058C91B37
- MD5 SHA1 SHA512 TLSH
OBLRes/zh_TW/ConnectionFAQ.html
- SHA256 93f8aa1c3d53257ab6eddeb543fba8b024f0a99078629905fda55f5e63b2dd1a
- MD5 988f358398bc118540499638ba979d62
- SHA1 2ac7f13cb613e715b8030f0b86257b03af86f55b
- SHA512 5408c53bfc985666373603e396d156d9b4807281c9712b132390b19494a02fc1fd1fa6043a85494301ea61dd98d9e36ee9c5423e12a00ceb84ed162031cce337
- SSDEEP 96:VJinpsPCP0hdtHvFKR8n+x9LEZ6l9ucio5t2Tf4meO/jgRzeWjgRLYTWjgRLqSBP:mAE8n2l8o5CfzIKYdqSp82eV/RJaF
- TLSH T1A7322031EB19050AF0E359D5B0B212616468D789930394BAF0777E7AFCCB9B733C126A
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/zh_TW/LicenseFAQ.html
- SHA256 83f30bb1a993fb070736b390c85f355af4f7d12e73ba489274bd6199f5a9fd8a
- MD5 522a9bd77691d5677fc3d41959404641
- SHA1 252f51c6ec3154cf62755c813741ecff54e8031c
- SHA512 18cd6b9f1bd4310cbbee20f600b62255a9ea33c15a63f2276130f48f0a9e0b211c16d1b81adfbafcf526e389f909a426f478aca7181c4a1f45b6ae6746e0f6bc
- SSDEEP 96:VJinpsPC+0hdtHcdFjjF8n+x9LEZ6l9ucio5tkPlWjgRLPeWjgRLpBv8Mr6RTNwm:mNYB8n2l8o5UrPKpp82cqGt/9oK
- TLSH T15672E122EB290405B0F649D9B1A212A46464EB4DE35254B5F07B7D7AFCDE8BB33C0269
- MD5 SHA1 SHA512 SSDEEP TLSH
OBLRes/zh_TW/Main.zdct
- SHA256 d87e6d594108bb951ccf86570444d4d90a677c9c195c254ed08f5f2d415f885b
- MD5 2906fc440428c755853ca93f1ded60c0
- SHA1 aff6c8766bbdd0594cc37671ab1d337b44fe736d
- SHA512 136bd86ad3c6d34e4f2c9c63bf579c62bdd8a5f359394d0f2541ae75461c53c67c26e7d069e0ba47114f6445043a4de3ca0b0fecba7cfcb337f5b5a37e7bff7a
- TLSH T11F31C591A3DC7A44B2F32B0C7E7E58520EEF7A466F8DCE0D28B4984D45F590085727A7
- MD5 SHA1 SHA512 TLSH
OBLRes/zh_TW/oobe_launcher.zdct
- SHA256 a54d5679cb9d87d22781e0a3123d8561ebc7ef246bc633263f2ad896e2f42c2c
- MD5 2bcc6f257c11585592673338a50e1dd6
- SHA1 84c8b16f864654558ce7ca5a250686e103af35fc
- SHA512 5e743b0a8fa92b659595823a6dc4b00268bc8db6dddf343272c283d19eef5e7789f9e9b2dbdf41b8c84bdb4185d5e18612e6ca223104454854ae088fe3c1da42
- TLSH T18B714D1A72FD6558F5F3631E9A7F70911F7EBDA85424C1FE2174860C08AAE0489D1B37
- MD5 SHA1 SHA512 TLSH
P6Flex.swf
- SHA256 f3cfa840cff9c905725008d71cce4af311da99c805ea4176cda333f234edfc92
- MD5 355cf0d9a324081c45cff7b33158a593
- SHA1 4ea8a49b5b1c5ecb7e09a9ac6df50aaec5f49cd9
- SHA512 e0110f2f26b9da46469fad1aa520e7b9e90d8fee04d3813f3cceab9627a091a59cc5338644d65664ed4370270d15f8f2cf2feb83aec5f56d9aeaf07ac8f66cd3
- SSDEEP 49152:HzRQLzNfo9FgZ8tF5wN7WhuCtRH6ROKv/MumN8o+3eC:TREzW9FgZzWECrH3KXmN8o+D
- TLSH T1EC8533CD1691158FE1449FE5CE2FB07B44D38020F57E5F6624E82E392FA11CE58B8AE6
- MD5 SHA1 SHA512 SSDEEP TLSH
P6Native.dll
- IMPHASH cd5c5071b012ca09c96c1d597830267e
- SHA256 1610423c08c170fb78ddf1f797ea1f788ddb7b4efd8f4175ed531b4a87d9691a
- MD5 42a8e780bf55dc398b389fd77a85b328
- SHA1 541320eae0986986e8d6100ef9e2520670740a82
- SHA512 8d251dff866b15bb93900a152990385d3a626d9b0883e2c3748c652e88d62e093bb14fd8fd2c62469d40efe466af0533e28c1e5b0ec8cb15173bea0832bc20cc
- SSDEEP 24576:YwS5WwyPk7jPzOYUAi4vWP2CPZd1W0/gTSstYt9eMfAx5x4AIw:YwS5gk7j7iOCPZd1W0F4Yt9eMAx5x4rw
- TLSH T18F357E2177E0C035F4FB26B19A392B694D3AF972273080CFB6D4195D9D706D2AA39327
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
40:9f:0e:86:f5:c8:4d:4a:b1:62:b4:bf:9b:92:f7:ea:2c:0f:c4:6c
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Chains
Apr 22, 2014
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Serial Number
1d:37:83:b3:de:cd:5d:bb:16:e3:3c:d3:a6:b3:bf:db
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 20, 2014 - Feb 21, 2015
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
1
Major OS version
5
Entry point
683198
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\oobe\7.mbls\dev\aamcore\target\win\Release\P6Native.pdb
netapi32
NetApiBufferFree
NetUserGetLocalGroups
secur32
GetUserNameExW
kernel32
CloseHandle
ReleaseMutex
CreateMutexW
SetLastError
FlushFileBuffers
CreateFileW
DeleteFileW
WriteFile
MultiByteToWideChar
ReadFile
GetFileSize
WideCharToMultiByte
WaitForSingleObject
CreateProcessW
GetModuleFileNameW
Sleep
GetTempPathW
RemoveDirectoryW
InterlockedIncrement
lstrlenA
CreateSemaphoreW
ReleaseSemaphore
GetCurrentProcessId
CreateDirectoryW
GetDateFormatW
GetTimeFormatW
GetLocalTime
FreeLibrary
GetProcAddress
LoadLibraryW
SetDllDirectoryW
LocalFree
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetCurrentThreadId
AreFileApisANSI
SetFilePointer
SetEndOfFile
UnlockFile
LockFile
GetFileAttributesA
DeleteFileA
GetFileAttributesW
LoadLibraryA
QueryPerformanceCounter
GetTickCount
GetSystemTime
GetSystemTimeAsFileTime
LockFileEx
GetTempPathA
FormatMessageA
GetFullPathNameA
GetFullPathNameW
GetDiskFreeSpaceA
GetDiskFreeSpaceW
CreateFileA
GetCurrentProcess
SetFileAttributesW
CopyFileW
lstrlenW
GetACP
GetFileSizeEx
OpenMutexW
IsDebuggerPresent
SetEnvironmentVariableA
WriteConsoleW
SetEnvironmentVariableW
FindFirstFileW
FindNextFileW
FindClose
GetVersionExW
GetSystemInfo
GetLastError
InterlockedDecrement
GetCurrentDirectoryW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
LeaveCriticalSection
CompareStringW
GetProcessHeap
SetStdHandle
GetFileType
GetStringTypeW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetConsoleMode
GetConsoleCP
HeapSize
GetModuleFileNameA
GetStartupInfoW
SetHandleCount
IsValidCodePage
GetOEMCP
GetLocaleInfoW
GetStdHandle
PeekNamedPipe
GetFileInformationByHandle
IsProcessorFeaturePresent
GetCPInfo
LCMapStringW
GetTimeZoneInformation
MoveFileW
GetCommandLineA
HeapReAlloc
HeapAlloc
InitializeCriticalSectionAndSpinCount
ExitProcess
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapDestroy
HeapCreate
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
EncodePointer
DecodePointer
RaiseException
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeW
FindFirstFileExW
RtlUnwind
HeapFree
user32
wsprintfW
GetSystemMetrics
advapi32
GetNamedSecurityInfoW
SetNamedSecurityInfoW
AllocateAndInitializeSid
SetEntriesInAclW
FreeSid
GetUserNameW
shell32
SHGetSpecialFolderPathW
SHGetFolderLocation
SHGetPathFromIDListW
SHGetFolderPathW
SHCreateDirectoryExW
ole32
StringFromGUID2
OleRun
CLSIDFromProgID
CoInitialize
CoTaskMemFree
CoInitializeEx
CoUninitialize
CoCreateInstance
CoSetProxyBlanket
CLSIDFromString
CoInitializeSecurity
CoCreateGuid
oleaut32
VariantInit
SysStringLen
VariantCopy
SysFreeString
SysAllocString
GetErrorInfo
VariantClear
shlwapi
PathRemoveFileSpecW
PathIsDirectoryW
PathStripPathW
StrToIntExA
PathRemoveBackslashW
PathAppendW
PathRemoveExtensionW
PathIsFileSpecW
PathAddExtensionW
PathRenameExtensionW
PathFileExistsW
finalizeApplet
freeMemory
initializeApplet
processMessage
Name
.text
Size
809KB
Virtual Size
809KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
199KB
Virtual Size
199KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
16KB
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
47KB
Virtual Size
46KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=152, version=20115,
count=31, id=158, productName=VS2010 build 30319, version=30319,
count=1, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=26, id=175, version=30319,
count=19, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=209, id=1, productName=Unmarked objects,
count=6, id=171, version=31118,
count=193, id=170, productName=VS2010 build 30319, version=30319,
count=95, id=171, productName=VS2010 build 30319, version=30319,
count=1, id=155, productName=VS2010 build 30319, version=30319,
count=1, id=154, productName=VS2010 build 30319, version=30319,
count=1, id=157, productName=VS2010 build 30319, version=30319,
RNResources/Dictionary/cs_CZ/stringTable.zdct
- SHA256 b1799d8e9b15f00521607336e68121d3e1151fd2c5f1ba39c84682ef769bf3bd
- MD5 9e3e9c56fccdf6bc3e33aedcafbfed1d
- SHA1 99b110bed7771bb401e7a8865e3fb9d5f6d15702
- SHA512 ff08ee8180d4c2984c8fec77a100acda23c70b6c8c4082203c2153e5c5ddb83b17959878af5a288487fd0f417d493dcc762e7ad6dd1b03f43ea9a7806c947468
- TLSH T15BE0E2021BF94A5BF2F22B08AABD1C281A7F78294E38D05E5154054D85F19C5D1A17AB
- MD5 SHA1 SHA512 TLSH
RNResources/Dictionary/da_DK/stringTable.zdct
- SHA256 50e29371c63e97bee61fe290add47363b4ffb2c5037f2fe904736c8b58b6d527
- MD5 da207d435420f251240e61fc08fdcf82
- SHA1 dfcf4c4e0d30c36f7d8238f676a1ea2312cbcf56
- SHA512 387848313392c5d758bc59a98b516b2c6fbd95c0f9fcef220638faac61f65b59574b73d4fc26ff00e9393de385ab9a50bdf19507b0628905099fc76de0ec5819
- TLSH T1F9E0C70207F04A1FF2F00B2079BC0C2C0ABFF844253CE48C0184010C8CB1794C0A07AB
- MD5 SHA1 SHA512 TLSH
RNResources/Dictionary/de_DE/stringTable.zdct
- SHA256 3bb580716833daa0e25ac676bd6de643e5b67658c3eaeba09fff18a3e0c35b6b
- MD5 55a7471952820f271e7f1ed6c6bf3872
- SHA1 59e4b1791bfcd7b154e5c314c1b42ef38e55f735
- SHA512 9b13d8d831ce57632005fef1f1881d8926807aad5014d272ece91ae1a585dcd524f7e73c2917b24b1390612f0c6be58433375fbecde492a3b7b737a489ad1c67
- TLSH T19BE08C020BF94A0EF2F12F107BBD5D5C0A7BBCC51A78E04E1240000D98F0A98E260B7B
- MD5 SHA1 SHA512 TLSH
RNResources/Dictionary/en_AE/stringTable.zdct
- SHA256 4991e8569026f5e05e0d55e0cb953ff88d08cae64dcb66553020ce7ae4fa0f94
- MD5 d0fb22a5bbb40dcd54fc4656bcd9a6a0
- SHA1 44185de6f032186f3f7d7ddfa510b59167c9296f
- SHA512 f9e9bb15555345911ce8b60027e6a48abefcf07792ec4fce6a0c989ac9d7ee1c0d4e19a26531a28b5707039e3202e23d0f25bf89074894cfda0944ee9118f090
- TLSH T131E05B1267F9551AF3F23F05AE7D5C28497F7CA54D3DD09D5151058F88F0A44D1503AB
- MD5 SHA1 SHA512 TLSH
RNResources/Dictionary/en_GB/stringTable.zdct
- SHA256 4991e8569026f5e05e0d55e0cb953ff88d08cae64dcb66553020ce7ae4fa0f94
- MD5 d0fb22a5bbb40dcd54fc4656bcd9a6a0
- SHA1 44185de6f032186f3f7d7ddfa510b59167c9296f
- SHA512 f9e9bb15555345911ce8b60027e6a48abefcf07792ec4fce6a0c989ac9d7ee1c0d4e19a26531a28b5707039e3202e23d0f25bf89074894cfda0944ee9118f090
- TLSH T131E05B1267F9551AF3F23F05AE7D5C28497F7CA54D3DD09D5151058F88F0A44D1503AB
- MD5 SHA1 SHA512 TLSH
RNResources/Dictionary/en_IL/stringTable.zdct
- SHA256 4991e8569026f5e05e0d55e0cb953ff88d08cae64dcb66553020ce7ae4fa0f94
- MD5 d0fb22a5bbb40dcd54fc4656bcd9a6a0
- SHA1 44185de6f032186f3f7d7ddfa510b59167c9296f
- SHA512 f9e9bb15555345911ce8b60027e6a48abefcf07792ec4fce6a0c989ac9d7ee1c0d4e19a26531a28b5707039e3202e23d0f25bf89074894cfda0944ee9118f090
- TLSH T131E05B1267F9551AF3F23F05AE7D5C28497F7CA54D3DD09D5151058F88F0A44D1503AB
- MD5 SHA1 SHA512 TLSH
RNResources/Dictionary/en_US/stringTable.zdct
- SHA256 4991e8569026f5e05e0d55e0cb953ff88d08cae64dcb66553020ce7ae4fa0f94
- MD5 d0fb22a5bbb40dcd54fc4656bcd9a6a0
- SHA1 44185de6f032186f3f7d7ddfa510b59167c9296f
- SHA512 f9e9bb15555345911ce8b60027e6a48abefcf07792ec4fce6a0c989ac9d7ee1c0d4e19a26531a28b5707039e3202e23d0f25bf89074894cfda0944ee9118f090
- TLSH T131E05B1267F9551AF3F23F05AE7D5C28497F7CA54D3DD09D5151058F88F0A44D1503AB
- MD5 SHA1 SHA512 TLSH
RNResources/Dictionary/es_ES/stringTable.zdct
- SHA256 469eefdead780e7c5267d627bf8c8044cdbc1cdbd9132cf9d8b79bc2c16d0dc1
- MD5 e21d967aceb7600084dc43f3e5dcf5ef
- SHA1 f472360d0cbfdd0b8a12dc171475d29b40bf5f45
- SHA512 2ae61e8bc40cf12069e3d2ddd7fd0c0136d911da16765ee54077db8396e9177fcd652bfee272bfce25410b948c5fc3a859213089ac0c1635cbcc53313e99f0ce
- TLSH T136E0EC0117F8462AF2F13F057E7E5C2C4EBFB4258D39E09E1155054E98F1A44D150797
- MD5 SHA1 SHA512 TLSH
RNResources/Dictionary/es_LA/stringTable.zdct
- SHA256 469eefdead780e7c5267d627bf8c8044cdbc1cdbd9132cf9d8b79bc2c16d0dc1
- MD5 e21d967aceb7600084dc43f3e5dcf5ef
- SHA1 f472360d0cbfdd0b8a12dc171475d29b40bf5f45
- SHA512 2ae61e8bc40cf12069e3d2ddd7fd0c0136d911da16765ee54077db8396e9177fcd652bfee272bfce25410b948c5fc3a859213089ac0c1635cbcc53313e99f0ce
- TLSH T136E0EC0117F8462AF2F13F057E7E5C2C4EBFB4258D39E09E1155054E98F1A44D150797
- MD5 SHA1 SHA512 TLSH
RNResources/Dictionary/es_MX/stringTable.zdct
- SHA256 469eefdead780e7c5267d627bf8c8044cdbc1cdbd9132cf9d8b79bc2c16d0dc1
- MD5 e21d967aceb7600084dc43f3e5dcf5ef
- SHA1 f472360d0cbfdd0b8a12dc171475d29b40bf5f45
- SHA512 2ae61e8bc40cf12069e3d2ddd7fd0c0136d911da16765ee54077db8396e9177fcd652bfee272bfce25410b948c5fc3a859213089ac0c1635cbcc53313e99f0ce
- TLSH T136E0EC0117F8462AF2F13F057E7E5C2C4EBFB4258D39E09E1155054E98F1A44D150797
- MD5 SHA1 SHA512 TLSH
RNResources/Dictionary/es_NA/stringTable.zdct
- SHA256 469eefdead780e7c5267d627bf8c8044cdbc1cdbd9132cf9d8b79bc2c16d0dc1
- MD5 e21d967aceb7600084dc43f3e5dcf5ef
- SHA1 f472360d0cbfdd0b8a12dc171475d29b40bf5f45
- SHA512 2ae61e8bc40cf12069e3d2ddd7fd0c0136d911da16765ee54077db8396e9177fcd652bfee272bfce25410b948c5fc3a859213089ac0c1635cbcc53313e99f0ce
- TLSH T136E0EC0117F8462AF2F13F057E7E5C2C4EBFB4258D39E09E1155054E98F1A44D150797
- MD5 SHA1 SHA512 TLSH
RNResources/Dictionary/fi_FI/stringTable.zdct
- SHA256 7967dd24e3046678203142fd45e3d84476b9c7f6358f2bda8dd8a9b4b532719c
- MD5 19064765bb2318b4ebd6805d52fd3e40
- SHA1 a31141b9731a8a7ceeec27468d681294b2740df2
- SHA512 dc7000ddf97b46977bbb552acc391c1d64ef51bdc3e247af40a6c5e04f01dfa157f0742550102dbc851ec21b2ef548baaccf36dad47672d554852e95c128f8ff
- TLSH T181E08C1207E8824AF2F16F242A796C5C1E7E79254D3BE06E1210048CD0B0A90E4A2B6B
- MD5 SHA1 SHA512 TLSH
RNResources/Dictionary/fr_CA/stringTable.zdct
- SHA256 f1dff8b2462f8399a6f4eb3de57f0b779a65e07578834e5c04fbe23729438d8a
- MD5 8011879d9b819ad015201d2a3e1f3c19
- SHA1 abe50561f0bdbc231cfd6afdbc21054ed6dab129
- SHA512 c587ab086af94c036dcb795bcb8438d806fa46a8713dccf645c4479ff2aee6de12732a651afb2d303d0c3f3387fab9d025b06aa7225d36953e68f46fa012ba81
- TLSH T128E0C21217FC011AF2E03B01AA7D1C1C8B7F7C188E38D06D0158014D98F2A80C99036B
- MD5 SHA1 SHA512 TLSH
RNResources/Dictionary/fr_FR/stringTable.zdct
- SHA256 f1dff8b2462f8399a6f4eb3de57f0b779a65e07578834e5c04fbe23729438d8a
- MD5 8011879d9b819ad015201d2a3e1f3c19
- SHA1 abe50561f0bdbc231cfd6afdbc21054ed6dab129
- SHA512 c587ab086af94c036dcb795bcb8438d806fa46a8713dccf645c4479ff2aee6de12732a651afb2d303d0c3f3387fab9d025b06aa7225d36953e68f46fa012ba81
- TLSH T128E0C21217FC011AF2E03B01AA7D1C1C8B7F7C188E38D06D0158014D98F2A80C99036B
- MD5 SHA1 SHA512 TLSH
RNResources/Dictionary/fr_MA/stringTable.zdct
- SHA256 f1dff8b2462f8399a6f4eb3de57f0b779a65e07578834e5c04fbe23729438d8a
- MD5 8011879d9b819ad015201d2a3e1f3c19
- SHA1 abe50561f0bdbc231cfd6afdbc21054ed6dab129
- SHA512 c587ab086af94c036dcb795bcb8438d806fa46a8713dccf645c4479ff2aee6de12732a651afb2d303d0c3f3387fab9d025b06aa7225d36953e68f46fa012ba81
- TLSH T128E0C21217FC011AF2E03B01AA7D1C1C8B7F7C188E38D06D0158014D98F2A80C99036B
- MD5 SHA1 SHA512 TLSH
RNResources/Dictionary/fr_XM/stringTable.zdct
- SHA256 f1dff8b2462f8399a6f4eb3de57f0b779a65e07578834e5c04fbe23729438d8a
- MD5 8011879d9b819ad015201d2a3e1f3c19
- SHA1 abe50561f0bdbc231cfd6afdbc21054ed6dab129
- SHA512 c587ab086af94c036dcb795bcb8438d806fa46a8713dccf645c4479ff2aee6de12732a651afb2d303d0c3f3387fab9d025b06aa7225d36953e68f46fa012ba81
- TLSH T128E0C21217FC011AF2E03B01AA7D1C1C8B7F7C188E38D06D0158014D98F2A80C99036B
- MD5 SHA1 SHA512 TLSH
RNResources/Dictionary/hr_HR/stringTable.zdct
- SHA256 21c60fec44aed34ea8b1b2f83c038ace32bbbfd311e548035e412077ed1aeb79
- MD5 20544bb67fe7b43a40f0bd20ec19af66
- SHA1 ff28369cf45665d70c64da8a20d435821a4d5565
- SHA512 37e90edb8324cc71a33ea1cfb24c8b8ec61e2f4d0b26e86a95d524dbaced5dfc48e176018f1bae7418f3d9004b905e3e26f530b4196c8e2b77f8c9dc30e06732
- TLSH T14FE0C2020BFC050AF1F23E08AB7C1D2C0A7F38B45E38C00D6041054D89F0E84D4E0397
- MD5 SHA1 SHA512 TLSH
RNResources/Dictionary/hu_HU/stringTable.zdct
- SHA256 fda9de8cf6f7398c7af789c34345845bb3f2fb340f226c2e04d1d35f428408fc
- MD5 5248363f8e11896ed6d4183a8de1da37
- SHA1 cf4c74ac4a8eac92eda28533b23fdacaf30c9f82
- SHA512 cb4369000c53f4c6d3160c50766ec866dfcc8a34d97fdee906949bd8bc0802267698e6a73513b87597f07e828872437d2a5550e1e1b38a87a3791ca7e54c8cdc
- TLSH T1CBE0868267F8014BF1F66F54A5BC9E5D0A7EB4285A3CE04D4454160E8CF0544C560B57
- MD5 SHA1 SHA512 TLSH
RNResources/Dictionary/it_IT/stringTable.zdct
- SHA256 22c30a52d8085ab590b0e62a69a02c4e56d5a61eabf6b21c3a46884c9bd1b3d3
- MD5 49ecc56ef15a47c27935b5737543c3ea
- SHA1 ec20f84e5fb2e73aea6bb8c5d1c089e23c99be30
- SHA512 d3e689359c1be2a4a9143323426cdfcb8b1ccac98adef01617ce04246b74c2b9689f47c7d1066d5b69c62b6d8e8943964dd5c827547d13d4c18d0446e7549732
- TLSH T178E0C2431BF9122AF2F33F00BE3E6C6C4A3FB8244D39D09C0141005E80F1554D0607AB
- MD5 SHA1 SHA512 TLSH
RNResources/Dictionary/ja_JP/stringTable.zdct
- SHA256 18f6880acde86cd84a8e7cc009e020b62434ea8a696e50c5959263ca92242100
- MD5 1f4775a0fc0f4c98d1acce5fecbf126d
- SHA1 36d7eda06ecc7da32c80454ebbd5f6978ae18421
- SHA512 c87cd3991d3d7fc51c6ea6acfbc80c3bc982850286e316505bbf75c40cf2579f63dda67c59aa1c67bdd214ece41e62784fcb50bb836d6a6fbe4a2fdb261600d8
- TLSH T1EED0A7520BE50815F1F13A0966BD5C2806BE74289728E0A95151050D80E064183907EF
- MD5 SHA1 SHA512 TLSH
RNResources/Dictionary/ko_KR/stringTable.zdct
- SHA256 9359902c513a2dc52127f486f94b6942240d3b24bedc840eb9b86ba747a963cd
- MD5 134e5a5eb62a71a0bf953cdac9ab74dd
- SHA1 ab506908816253e47f022967803289d12cc76b87
- SHA512 d18d78acb92e0698506017b56ca126c88e7726bf3b298c665c397bd042e721027a86e6b103afb6276cf39983da31bb618cacf315ef32d7b56d5a4f485a6979fb
- TLSH T1C9D05E821FFA040AF2E06A1853BD5CA822FEB598CA28804E9950050D85E05E091513DF
- MD5 SHA1 SHA512 TLSH
RNResources/Dictionary/nb_NO/stringTable.zdct
- SHA256 fb4fa3b0de77881fa0f8029f6fa9ae76957b7a28d13bb9914d9f6439ecaff48e
- MD5 7d7209238aede4d76aa0fb45c1bcd6db
- SHA1 6253a97394ce1ac44a5b54574fe36a4c2ead5824
- SHA512 faefb6ed8b02f1b382d18c1fc773d30f9fcbc409fbb33653d20cf6fefdf179bddaf8510d85e4332677a036e558245ed70a0053581369b5ad1b51b7e619a8ed70
- TLSH T1A2E0C70203F44A0FF2F10B107EBC4C2C0A7FFC95053AE04C1101010E80F2998C4907AB
- MD5 SHA1 SHA512 TLSH
RNResources/Dictionary/nl_NL/stringTable.zdct
- SHA256 66b399a93bd4a7ea622873ef636c9fe659249c7aa0626edd4bd46b018dac851f
- MD5 0d54b60ece6ac1d1c171c83ca10f33ee
- SHA1 5d12d51969382d6ab4347458c166c84dc17aaa31
- SHA512 ab657f1f32df2d3f03cb8dd917fe38916161e1624eff8dc310176fece24cd6c3691f95400e93f6aa8c8cd3d321f5608df13e7a4c1066128f3490188aa33b4de0
- TLSH T121E0C24317F4411AF2E15B106E7D2C180B3F7C8A0938D0CD0150010E84B1D44D55176B
- MD5 SHA1 SHA512 TLSH
RNResources/Dictionary/pl_PL/stringTable.zdct
- SHA256 24c39385265d99ffb3eca04e0a0c993b86d824478e7152af23c1a6c02b4e9806
- MD5 06978f93608c307b83426481a5b3af85
- SHA1 49991de967a1f9822ff52ffb3cf808c31d9573ac
- SHA512 3dd53eaf44a87a10a976537acde3e6d53de5a4e4d32a6e18eb5c2deaeb7dc62b09d95b182773c3e13b1bbc7c6c33a8bd60974deb135d7763fc08b5f4ac9fe0ea
- TLSH T110E012022BF50649F2F65A189ABD1D6C0A7F7839153CC04E85A5010D49F0ED4D160797
- MD5 SHA1 SHA512 TLSH
RNResources/Dictionary/pt_BR/stringTable.zdct
- SHA256 9f453a33b61289fba4a774a126dfdb17cf824a7fae56ec8cdb1b68d8d37e60b3
- MD5 24254bc53aab4a16244e7923c09b2a75
- SHA1 aaa7e47ecf728261078d63da79ea1fb583d4bfbd
- SHA512 f117a0453505c8a60a3ef1f1367b4778d07be7925e0bfb57cf72b9b6a07d3331baa1a33095e2486fc77a2bdca74789e6d37dd7517204462ede30577b2f10f88c
- TLSH T15AE0820207FD021AF2F23F00AA3D1C6C4EBFB8160E3CD08E0120090E99F2A80D5603AB
- MD5 SHA1 SHA512 TLSH
RNResources/Dictionary/ro_RO/stringTable.zdct
- SHA256 f9e63db65b04d9898ce46327f4e9e29b4ed627683182a72b0ba06b9c4309918d
- MD5 99a0e1f5221adf780adb3d4ff702edac
- SHA1 f6b1a7025110516444c7c492598275cc3d04b7dc
- SHA512 2fc32e07609833d85b7ab392e9ae5e2fecdb579e52ab11e56285d7c9707fb6a6da259887a36e3210d0e255c189e88b711c24e864241a63349f3f50650ebdb4bd
- TLSH T115E086425BF8102BF3F22F10BDBC1C1845BF78660E39E15E1154050E5CF0988D161767
- MD5 SHA1 SHA512 TLSH
RNResources/Dictionary/ru_RU/stringTable.zdct
- SHA256 f46dd69b9eed024924990b3f32d58bb0d9e26f7f46a7d997a45dd1365f12d583
- MD5 81de356cf5963d9263ba86fb4c75c971
- SHA1 46eba29187a6a4d7a1566f1dee6239e304b0a35d
- SHA512 6df95da627aafe13d6c40349ca3b669abc24f184c552bc8c0de87b5caea0f9147827c85c3e71c0d31b710a3b0eeed6a258b7958d84eca62b050d435dc70081b1
- TLSH T10DE0460B9BFC8455F2E1D6046FBD1CE912BF79281628908A441F0D1A40A4A71A3007DB
- MD5 SHA1 SHA512 TLSH
RNResources/Dictionary/sk_SK/stringTable.zdct
- SHA256 e972410c20796bbe8dc0a995f0f0972601b25c95c50c3679ac29fd3eecdff038
- MD5 9207ce53cde642eec8c4a2e3deaae171
- SHA1 45fd090522f0b316b92882fd618d518241b37483
- SHA512 9c0cbeeb16efcaa6585f3485bb4c9671a92288a8532f27dba7aa7a9a85efa5f4c45504905ece604e15820030d9d89945661540433b9bdf0303fd48b033e34199
- TLSH T103E0E20207F8499BF2F23E08AABD1E280ABF783A4E38D05E5154055D89F09D6D1A07AB
- MD5 SHA1 SHA512 TLSH
RNResources/Dictionary/sl_SI/stringTable.zdct
- SHA256 f1325ad2d655aeabdc8a8a5d1313a1458cc79c451aada38c55d44045cfbdd28e
- MD5 2847f9a7f7cf216a823c970d03f8a8b8
- SHA1 dfb21afb9f6b19f7cbdf001ecf9f865be96a38b9
- SHA512 fd381ae98ff996d71f6a209c1d038d7cbf84f9bed5100f8ba3e395a4e011aa4ae852ac5badb8d7c25cbb511af87c7e766dfec084e1510e4598e91517a0925fcf
- TLSH T1BAE0120347F9469FF1F33F045BBD1D280ABE78645E38D05EA154051D55F1D85D0607A7
- MD5 SHA1 SHA512 TLSH
RNResources/Dictionary/sv_SE/stringTable.zdct
- SHA256 2c4c744b3147a43dc030b02f86ff8c04ed99df3fb8d464e162db673ddcf40baf
- MD5 54106de7035467833fdd88fdaefe4195
- SHA1 ca85e60fcec26938b8abd94ccbd0ef0e405ba322
- SHA512 ee85bd5e2e1a8a6a7a79cacf6254e6e571f85dfdf8a0c9463f05d82392fab8272b925f4144d4519b0b0fcba94a8a9d8564e9d52445d1d9f7fed0a6b6fd54e4d6
- TLSH T177E0C21207F4450AF2F10B10797D0C1C0A7FBCC5153EE59E1184084C48B1E64C65036B
- MD5 SHA1 SHA512 TLSH
RNResources/Dictionary/tr_TR/stringTable.zdct
- SHA256 421e4b8336e1f6ee056b95480fbc6a435f230ae9cdfbc79429d55949f78fae38
- MD5 d44dc8522499fd0aa65465c540e8a5a2
- SHA1 d43c9e66678b96e9c115a3c533a0f2bdf455b3c3
- SHA512 3fe0a36c2cab435fe2fb4e87b8472a12c75509c3138f61ebf9acd40d6199411491538cea3ad4320bedc8d9ca3dcb1bc26e8160a9f1798be7361461fc986eeca5
- TLSH T15EE0C24207FC0486F1F32F08AA7E6C280BBF3C651E38E14F2151010C40F0AA4A1407EB
- MD5 SHA1 SHA512 TLSH
RNResources/Dictionary/uk_UA/stringTable.zdct
- SHA256 55fc49a0a98f14718e2573107af5c8667e306e70b05cd89a380b506233d446c7
- MD5 39852736a77486cf8f46d6f0d3fe6d16
- SHA1 583182ade3b99bf407f73e718d909cd9d2d6ff6e
- SHA512 c3120c9d654199caf1dc22f26d1c61b704a05f9ffb1d0fcb00ad4f8fad0d44bb36804904772e874e5bb38e3fd7f58a8b9d3972e93a2417d9ef9003c44507b319
- TLSH T14DE08C0B9BF44044F2E596146EBD5DEA02FDB91807A8C0C9242F512F40F0A71A340BDB
- MD5 SHA1 SHA512 TLSH
RNResources/Dictionary/zh_CN/stringTable.zdct
- SHA256 dc0033a53febe81152ac5c51b264087953f9930ea1f2664db43f5b1fcf538203
- MD5 f30625ce22a8ce02788fcf55d1515267
- SHA1 028bd5ea43f81b92d4ba10de01548688fcd602a9
- SHA512 c84d2890a2819a5ca0dcbd40bafcf434f36b0f2ec1121366fd119cc0bc5c0332081aa931d4613e187dccc7fba946b66154cd3ae31b204da20e9788c6a7f7a0b0
- TLSH T160D0A95107EE458EF2E02E08667E2C6D07FF3888192CC0AEA070460E95F098091A639F
- MD5 SHA1 SHA512 TLSH
RNResources/Dictionary/zh_TW/stringTable.zdct
- SHA256 954bce139c2369a612ef596f519dc8799e5f0755e59f39d0b002cfc6e1f39cad
- MD5 b84164419e9d6a134545506c85df69ed
- SHA1 43cbdfc9d9cf028c858238483a35df8607d50191
- SHA512 f9dbd4524768b790d5b3f1d279dc4b0adb603b8c63e9bd9d2c5cb0feb930620918dfdc4ba14cd3ec9d05c14c76609535a355ef78756d029312b646b691c4c039
- TLSH T131D0A9810BFA044BF2F52E08AA7DAC6D0AFF389C0618D04F44A2060D84E094081A039F
- MD5 SHA1 SHA512 TLSH
VulcanBridge.dll
- IMPHASH bef4ee6bcd0da427c42e6c5dcab96e32
- SHA256 8bc6861e2938c019e2c5cb9d9221a35ac62e53586cec2433e808a7e0140bef47
- MD5 705ffdafe2570437c7fd28aa3d7a2031
- SHA1 ba631b42fe47faf48881de6589329e7d903280d7
- SHA512 431224b499fa92f184958d7def1de529f46eae9b1c2a7eda95443ff80ea2b482ac3e3a37c2791512a97c9c66d5e6c14dc1f333d8462339a5ea290a5aeec8de64
- SSDEEP 3072:QrL8EN5AyHR0lOqbdF3Z6LSN8DpUN6uIr9O1Dt2cFqu+:QrL8E3AyxpwFpKSNTQuvnIt
- TLSH T142047D217290C033D2AB12349A76D7B65A3D78614BB8D1C7BBD84F3A5E647C1AB3530B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
c3:4a:c7:0d:00:34:53:2b:e1:b8:5d:5d:4f:dd:9d:86:c4:41:ef:b4
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Chains
Apr 22, 2014
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Serial Number
1d:37:83:b3:de:cd:5d:bb:16:e3:3c:d3:a6:b3:bf:db
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 20, 2014 - Feb 21, 2015
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
1
Major OS version
5
Entry point
47990
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\oobe\7.mbls\dev\aamcore\target\win\Release\VulcanBridge.pdb
vulcanmessage
??0SuiteMessage@api@vulcan@adobe@@QAE@PBD@Z
??1SuiteMessage@api@vulcan@adobe@@UAE@XZ
?SetPayload@SuiteMessage@api@vulcan@adobe@@QAEXPBD@Z
?TYPE_PREFIX@SuiteMessage@api@vulcan@adobe@@2QBDB
?Create@IVulcanMessageDispatcher@api@vulcan@adobe@@SAPAV1234@PBDPAVIVulcanMessageListener@234@1@Z
kernel32
CreateMutexW
WaitForSingleObject
Sleep
ReleaseSemaphore
GetLastError
CreateSemaphoreW
ReleaseMutex
CloseHandle
GetCurrentProcessId
GetDateFormatW
CreateDirectoryW
WriteFile
WriteConsoleW
CreateFileW
MultiByteToWideChar
GetTempPathW
GetLocalTime
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
SetFilePointer
GetFileSizeEx
WideCharToMultiByte
OpenMutexW
SetStdHandle
CreateFileA
SetEndOfFile
GetProcessHeap
CompareStringW
GetTimeFormatW
GetCurrentThreadId
LoadLibraryW
HeapReAlloc
GetStringTypeW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
IsValidCodePage
GetOEMCP
GetACP
InterlockedIncrement
InterlockedDecrement
EncodePointer
DecodePointer
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
SetEnvironmentVariableA
GetCommandLineA
MoveFileW
GetTimeZoneInformation
RaiseException
RtlUnwind
LCMapStringW
GetCPInfo
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
GetStdHandle
GetModuleFileNameW
GetLocaleInfoW
HeapCreate
HeapDestroy
GetProcAddress
GetModuleHandleW
ExitProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
HeapSize
ReadFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
user32
wsprintfW
shell32
SHCreateDirectoryExW
shlwapi
PathAppendW
PathAddExtensionW
PathRemoveFileSpecW
PathRenameExtensionW
PathIsDirectoryW
PathRemoveExtensionW
PathFileExistsW
PathIsFileSpecW
broadcastVulcanEvent
Name
.text
Size
121KB
Virtual Size
121KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
25KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=152, version=20115,
count=21, id=158, productName=VS2010 build 30319, version=30319,
count=59, id=171, productName=VS2010 build 30319, version=30319,
count=150, id=170, productName=VS2010 build 30319, version=30319,
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=156, productName=VS2010 SP1 build 40219, version=40219,
count=118, id=1, productName=Unmarked objects,
count=10, id=175, version=30319,
count=1, id=155, productName=VS2010 build 30319, version=30319,
count=1, id=154, productName=VS2010 build 30319, version=30319,
count=1, id=157, productName=VS2010 build 30319, version=30319,
VulcanMessage.dll
- IMPHASH 6bef78ab713ff794cd4a02c503ce8198
- SHA256 5a2c9b5da23181176443ac02898f3d362c716d8b54f7afdf9ae7a0dda775137a
- MD5 4b4ffa41cf13ac3ed21a0a221316cae1
- SHA1 318c0f06575a5d7397e1534c8bf5822b361ad7bb
- SHA512 d470c273ca1ff7c584600817b012b446fbdbb04b528c9afb6a688d0e36cc3a5e6365bfc8e087e30d5066cdfdb75fe2772557feb3e9c14450dff29108f2a8f0e3
- SSDEEP 1536:M+3FeLAiQsDQy/q88EfzsDPAwdqkj8cJSPxoragZNd+VodI9sUXZbdZUCMf5KFOc:11yTsFdXJ6ZbdZUC8KFOZJcKq5q
- TLSH T1ABF339333E018576E69F537DB4BE76994A1ED8438F2828C7B288564ADDB44D32E32317
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
8e:48:e1:49:73:b5:27:91:8f:ba:60:3e:c1:87:87:f2:71:30:2a:d7
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Adobe Systems Incorporated,OU=Information Systems+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Chains
Mar 10, 2012
CN=Adobe Systems Incorporated,OU=Information Systems+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=Adobe Systems Incorporated,OU=Information Systems+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Serial Number
15:e5:ac:0a:48:70:63:71:8e:39:da:52:30:1a:04:88
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 15, 2010 - Dec 14, 2012
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
1
Major OS version
5
Entry point
102000
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\sdkbuild\products\vulcan\CS6\perforce\vulcan\main\projects\native\VulcanMessageLib\Binaries\Win32\Release\VulcanMessage.pdb
kernel32
WideCharToMultiByte
LoadLibraryW
GetProcAddress
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
EncodePointer
GetSystemTimeAsFileTime
msvcp100
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?gcount@?$basic_istream@DU?$char_traits@D@std@@@std@@QBE_JXZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?good@ios_base@std@@QBE_NXZ
?rdstate@ios_base@std@@QBEHXZ
?_Swap_all@_Container_base0@std@@QAEXAAU12@@Z
?_Xinvalid_argument@std@@YAXPBD@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?_Xlength_error@std@@YAXPBD@Z
??0id@locale@std@@QAE@I@Z
?_Orphan_all@_Container_base0@std@@QAEXXZ
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
?_BADOFF@std@@3_JB
??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?_Xout_of_range@std@@YAXPBD@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD0@Z
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
msvcr100
_unlock
__dllonexit
_lock
_onexit
_malloc_crt
free
_encoded_null
_initterm
_initterm_e
_amsg_exit
__CppXcptFilter
_crt_debugger_hook
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
?terminate@@YAXXZ
memchr
??0exception@std@@QAE@XZ
_errno
_wstat64i32
_wgetenv
strstr
memmove
??2@YAPAXI@Z
??3@YAXPAX@Z
??_V@YAXPAX@Z
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
_purecall
?what@exception@std@@UBEPBDXZ
memcpy
_CxxThrowException
__CxxFrameHandler3
__RTDynamicCast
??0EndPoint@api@vulcan@adobe@@QAE@ABV0123@@Z
??0EndPoint@api@vulcan@adobe@@QAE@XZ
??0ErrorMessage@api@vulcan@adobe@@QAE@ABV0123@@Z
??0ErrorMessage@api@vulcan@adobe@@QAE@XZ
??0GetAppPathMessage@api@vulcan@adobe@@QAE@ABV0123@@Z
??0GetAppPathMessage@api@vulcan@adobe@@QAE@XZ
??0GetTargetSpecifiersMessage@api@vulcan@adobe@@QAE@ABV0123@@Z
??0GetTargetSpecifiersMessage@api@vulcan@adobe@@QAE@XZ
??0HostMessage@api@vulcan@adobe@@QAE@ABV0123@@Z
??0HostMessage@api@vulcan@adobe@@QAE@PBD@Z
??0IVulcanMessageDispatcher@api@vulcan@adobe@@QAE@ABV0123@@Z
??0IVulcanMessageDispatcher@api@vulcan@adobe@@QAE@XZ
??0IVulcanMessageListener@api@vulcan@adobe@@QAE@ABV0123@@Z
??0IVulcanMessageListener@api@vulcan@adobe@@QAE@XZ
??0IsAppInstalledMessage@api@vulcan@adobe@@QAE@ABV0123@@Z
??0IsAppInstalledMessage@api@vulcan@adobe@@QAE@XZ
??0IsAppRunningMessage@api@vulcan@adobe@@QAE@ABV0123@@Z
??0IsAppRunningMessage@api@vulcan@adobe@@QAE@XZ
??0LaunchAppMessage@api@vulcan@adobe@@QAE@ABV0123@@Z
??0LaunchAppMessage@api@vulcan@adobe@@QAE@XZ
??0SuiteMessage@api@vulcan@adobe@@QAE@ABV0123@@Z
??0SuiteMessage@api@vulcan@adobe@@QAE@PBD@Z
??0VulcanMessage@api@vulcan@adobe@@QAE@ABV0123@@Z
??0VulcanMessage@api@vulcan@adobe@@QAE@XZ
??1EndPoint@api@vulcan@adobe@@UAE@XZ
??1ErrorMessage@api@vulcan@adobe@@UAE@XZ
??1GetAppPathMessage@api@vulcan@adobe@@UAE@XZ
??1GetTargetSpecifiersMessage@api@vulcan@adobe@@UAE@XZ
??1HostMessage@api@vulcan@adobe@@UAE@XZ
??1IVulcanMessageDispatcher@api@vulcan@adobe@@UAE@XZ
??1IsAppInstalledMessage@api@vulcan@adobe@@UAE@XZ
??1IsAppRunningMessage@api@vulcan@adobe@@UAE@XZ
??1LaunchAppMessage@api@vulcan@adobe@@UAE@XZ
??1SuiteMessage@api@vulcan@adobe@@UAE@XZ
??1VulcanMessage@api@vulcan@adobe@@UAE@XZ
??4EndPoint@api@vulcan@adobe@@QAEAAV0123@ABV0123@@Z
??4ErrorMessage@api@vulcan@adobe@@QAEAAV0123@ABV0123@@Z
??4GetAppPathMessage@api@vulcan@adobe@@QAEAAV0123@ABV0123@@Z
??4GetTargetSpecifiersMessage@api@vulcan@adobe@@QAEAAV0123@ABV0123@@Z
??4HostMessage@api@vulcan@adobe@@QAEAAV0123@ABV0123@@Z
??4IVulcanMessageDispatcher@api@vulcan@adobe@@QAEAAV0123@ABV0123@@Z
??4IVulcanMessageListener@api@vulcan@adobe@@QAEAAV0123@ABV0123@@Z
??4IsAppInstalledMessage@api@vulcan@adobe@@QAEAAV0123@ABV0123@@Z
??4IsAppRunningMessage@api@vulcan@adobe@@QAEAAV0123@ABV0123@@Z
??4LaunchAppMessage@api@vulcan@adobe@@QAEAAV0123@ABV0123@@Z
??4MessageUtil@api@vulcan@adobe@@QAEAAV0123@ABV0123@@Z
??4SuiteMessage@api@vulcan@adobe@@QAEAAV0123@ABV0123@@Z
??4VulcanMessage@api@vulcan@adobe@@QAEAAV0123@ABV0123@@Z
??8EndPoint@api@vulcan@adobe@@QBE_NABV0123@@Z
??9EndPoint@api@vulcan@adobe@@QBE_NABV0123@@Z
??_7EndPoint@api@vulcan@adobe@@6B@
??_7ErrorMessage@api@vulcan@adobe@@6B@
??_7GetAppPathMessage@api@vulcan@adobe@@6B@
??_7GetTargetSpecifiersMessage@api@vulcan@adobe@@6B@
??_7HostMessage@api@vulcan@adobe@@6B@
??_7IVulcanMessageDispatcher@api@vulcan@adobe@@6B@
??_7IVulcanMessageListener@api@vulcan@adobe@@6B@
??_7IsAppInstalledMessage@api@vulcan@adobe@@6B@
??_7IsAppRunningMessage@api@vulcan@adobe@@6B@
??_7LaunchAppMessage@api@vulcan@adobe@@6B@
??_7SuiteMessage@api@vulcan@adobe@@6B@
??_7VulcanMessage@api@vulcan@adobe@@6B@
?Clone@ErrorMessage@api@vulcan@adobe@@UBEPAV1234@XZ
?Clone@GetAppPathMessage@api@vulcan@adobe@@UBEPAV1234@XZ
?Clone@GetTargetSpecifiersMessage@api@vulcan@adobe@@UBEPAV1234@XZ
?Clone@HostMessage@api@vulcan@adobe@@UBEPAV1234@XZ
?Clone@IsAppInstalledMessage@api@vulcan@adobe@@UBEPAV1234@XZ
?Clone@IsAppRunningMessage@api@vulcan@adobe@@UBEPAV1234@XZ
?Clone@LaunchAppMessage@api@vulcan@adobe@@UBEPAV1234@XZ
?Clone@SuiteMessage@api@vulcan@adobe@@UBEPAV1234@XZ
?Create@EndPoint@api@vulcan@adobe@@SA?AV1234@PBD@Z
?Create@IVulcanMessageDispatcher@api@vulcan@adobe@@SAPAV1234@PBDPAVIVulcanMessageListener@234@1@Z
?CreateMessage@MessageUtil@api@vulcan@adobe@@SAPAVVulcanMessage@234@PBD@Z
?CreateMessageByType@MessageUtil@api@vulcan@adobe@@SAPAVVulcanMessage@234@PBD@Z
?GetAppId@EndPoint@api@vulcan@adobe@@QBEXPAD@Z
?GetAppId@VulcanMessage@api@vulcan@adobe@@UBEXPAD@Z
?GetAppIdSize@EndPoint@api@vulcan@adobe@@QBEIXZ
?GetAppIdSize@VulcanMessage@api@vulcan@adobe@@QBEIXZ
?GetCmdLine@LaunchAppMessage@api@vulcan@adobe@@QBEXPAD@Z
?GetCmdLineSize@LaunchAppMessage@api@vulcan@adobe@@QBEIXZ
?GetData@ErrorMessage@api@vulcan@adobe@@UBEXPAD@Z
?GetData@GetAppPathMessage@api@vulcan@adobe@@UBEXPAD@Z
?GetData@GetTargetSpecifiersMessage@api@vulcan@adobe@@UBEXPAD@Z
?GetData@HostMessage@api@vulcan@adobe@@UBEXPAD@Z
?GetData@IsAppInstalledMessage@api@vulcan@adobe@@UBEXPAD@Z
?GetData@IsAppRunningMessage@api@vulcan@adobe@@UBEXPAD@Z
?GetData@LaunchAppMessage@api@vulcan@adobe@@UBEXPAD@Z
?GetData@SuiteMessage@api@vulcan@adobe@@UBEXPAD@Z
?GetDataSize@ErrorMessage@api@vulcan@adobe@@UBEIXZ
?GetDataSize@GetAppPathMessage@api@vulcan@adobe@@UBEIXZ
?GetDataSize@GetTargetSpecifiersMessage@api@vulcan@adobe@@UBEIXZ
?GetDataSize@HostMessage@api@vulcan@adobe@@UBEIXZ
?GetDataSize@IsAppInstalledMessage@api@vulcan@adobe@@UBEIXZ
?GetDataSize@IsAppRunningMessage@api@vulcan@adobe@@UBEIXZ
?GetDataSize@LaunchAppMessage@api@vulcan@adobe@@UBEIXZ
?GetDataSize@SuiteMessage@api@vulcan@adobe@@UBEIXZ
?GetDestinationCount@SuiteMessage@api@vulcan@adobe@@QBEIXZ
?GetDestinations@SuiteMessage@api@vulcan@adobe@@QBEXPAVEndPoint@234@@Z
?GetError@ErrorMessage@api@vulcan@adobe@@QBEXPAD@Z
?GetErrorSize@ErrorMessage@api@vulcan@adobe@@QBEIXZ
?GetFault@ErrorMessage@api@vulcan@adobe@@QBEXPAD@Z
?GetFaultSize@ErrorMessage@api@vulcan@adobe@@QBEIXZ
?GetFocus@LaunchAppMessage@api@vulcan@adobe@@QBE_NXZ
?GetId@EndPoint@api@vulcan@adobe@@QBEXPAD@Z
?GetIdSize@EndPoint@api@vulcan@adobe@@QBEIXZ
?GetPayload@HostMessage@api@vulcan@adobe@@QBEXPAD@Z
?GetPayload@SuiteMessage@api@vulcan@adobe@@QBEXPAD@Z
?GetPayloadSize@HostMessage@api@vulcan@adobe@@QBEIXZ
?GetPayloadSize@SuiteMessage@api@vulcan@adobe@@QBEIXZ
?GetResult@GetAppPathMessage@api@vulcan@adobe@@QBEXPAD@Z
?GetResult@GetTargetSpecifiersMessage@api@vulcan@adobe@@QBEXIPAD@Z
?GetResult@IsAppInstalledMessage@api@vulcan@adobe@@QBE_NXZ
?GetResult@IsAppRunningMessage@api@vulcan@adobe@@QBE_NXZ
?GetResult@LaunchAppMessage@api@vulcan@adobe@@QBE_NXZ
?GetResultCount@GetTargetSpecifiersMessage@api@vulcan@adobe@@QBEIXZ
?GetResultSize@GetAppPathMessage@api@vulcan@adobe@@QBEIXZ
?GetResultSize@GetTargetSpecifiersMessage@api@vulcan@adobe@@QBEII@Z
?GetScope@VulcanMessage@api@vulcan@adobe@@QBE?AW4MessageScope@234@XZ
?GetSource@SuiteMessage@api@vulcan@adobe@@QBE?AVEndPoint@234@XZ
?GetTargetSpecifier@GetAppPathMessage@api@vulcan@adobe@@QBEXPAD@Z
?GetTargetSpecifier@IsAppInstalledMessage@api@vulcan@adobe@@QBEXPAD@Z
?GetTargetSpecifier@IsAppRunningMessage@api@vulcan@adobe@@QBEXPAD@Z
?GetTargetSpecifier@LaunchAppMessage@api@vulcan@adobe@@QBEXPAD@Z
?GetTargetSpecifierSize@GetAppPathMessage@api@vulcan@adobe@@QBEIXZ
?GetTargetSpecifierSize@IsAppInstalledMessage@api@vulcan@adobe@@QBEIXZ
?GetTargetSpecifierSize@IsAppRunningMessage@api@vulcan@adobe@@QBEIXZ
?GetTargetSpecifierSize@LaunchAppMessage@api@vulcan@adobe@@QBEIXZ
?GetType@VulcanMessage@api@vulcan@adobe@@QBEXPAD@Z
?GetTypeSize@VulcanMessage@api@vulcan@adobe@@QBEIXZ
?GetXmlSize@EndPoint@api@vulcan@adobe@@QBEIXZ
?GetXmlSize@VulcanMessage@api@vulcan@adobe@@UBEIXZ
?INVALID_ENDPOINT@EndPoint@api@vulcan@adobe@@2V1234@B
?IsHostMessage@HostMessage@api@vulcan@adobe@@SA_NABVVulcanMessage@234@@Z
?IsSuiteMessage@SuiteMessage@api@vulcan@adobe@@SA_NABVVulcanMessage@234@@Z
?SetAppId@EndPoint@api@vulcan@adobe@@QAEXPBD@Z
?SetAppId@MessageUtil@api@vulcan@adobe@@SAXAAVVulcanMessage@234@PBD@Z
?SetCmdLine@LaunchAppMessage@api@vulcan@adobe@@QAEXPBD@Z
?SetData@ErrorMessage@api@vulcan@adobe@@UAEXPBD@Z
?SetData@GetAppPathMessage@api@vulcan@adobe@@UAEXPBD@Z
?SetData@GetTargetSpecifiersMessage@api@vulcan@adobe@@UAEXPBD@Z
?SetData@HostMessage@api@vulcan@adobe@@UAEXPBD@Z
?SetData@IsAppInstalledMessage@api@vulcan@adobe@@UAEXPBD@Z
?SetData@IsAppRunningMessage@api@vulcan@adobe@@UAEXPBD@Z
?SetData@LaunchAppMessage@api@vulcan@adobe@@UAEXPBD@Z
?SetData@SuiteMessage@api@vulcan@adobe@@UAEXPBD@Z
?SetDestination@SuiteMessage@api@vulcan@adobe@@QAEXABVEndPoint@234@@Z
?SetDestinations@SuiteMessage@api@vulcan@adobe@@QAEXPBVEndPoint@234@I@Z
?SetFocus@LaunchAppMessage@api@vulcan@adobe@@QAEX_N@Z
?SetId@EndPoint@api@vulcan@adobe@@QAEXPBD@Z
?SetPayload@HostMessage@api@vulcan@adobe@@QAEXPBD@Z
?SetPayload@HostMessage@api@vulcan@adobe@@QAEXPBDI@Z
?SetPayload@SuiteMessage@api@vulcan@adobe@@QAEXPBD@Z
?SetPayload@SuiteMessage@api@vulcan@adobe@@QAEXPBDI@Z
?SetSource@SuiteMessage@api@vulcan@adobe@@QAEXABVEndPoint@234@@Z
?SetTargetSpecifier@GetAppPathMessage@api@vulcan@adobe@@QAEXPBD@Z
?SetTargetSpecifier@IsAppInstalledMessage@api@vulcan@adobe@@QAEXPBD@Z
?SetTargetSpecifier@IsAppRunningMessage@api@vulcan@adobe@@QAEXPBD@Z
?SetTargetSpecifier@LaunchAppMessage@api@vulcan@adobe@@QAEXPBD@Z
?TYPE@ErrorMessage@api@vulcan@adobe@@2QBDB
?TYPE@GetAppPathMessage@api@vulcan@adobe@@2QBDB
?TYPE@GetTargetSpecifiersMessage@api@vulcan@adobe@@2QBDB
?TYPE@IsAppInstalledMessage@api@vulcan@adobe@@2QBDB
?TYPE@IsAppRunningMessage@api@vulcan@adobe@@2QBDB
?TYPE@LaunchAppMessage@api@vulcan@adobe@@2QBDB
?TYPE_PREFIX@HostMessage@api@vulcan@adobe@@2QBDB
?TYPE_PREFIX@SuiteMessage@api@vulcan@adobe@@2QBDB
?TYPE_PREFIX@VulcanMessage@api@vulcan@adobe@@2QBDB
?ToXml@EndPoint@api@vulcan@adobe@@QBEXPAD@Z
?ToXml@VulcanMessage@api@vulcan@adobe@@UBEXPAD@Z
Name
.text
Size
106KB
Virtual Size
106KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
34KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=152, version=20115,
count=2, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=12, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=4, id=156, productName=VS2010 SP1 build 40219, version=40219,
count=6, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=3, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=97, id=1, productName=Unmarked objects,
count=17, id=175, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
ZStringResources/FontCustomization.xml
- SHA256 b448a07030080d68615d7456d143d27cac5477c6832e1d6ab6ffbb30faef0fda
- MD5 39cc007b96744a32611e7157fb5c137a
- SHA1 4b4c05872967640681e97600e75942d6cee33596
- SHA512 0f26454ccc7fb6e4045d4de1e85e32dd00f1d0e3d4f5e15411c30ce384c566c7161a9331916638748dd480f15513d81174070c01a3a7050687add54fff0db547
- TLSH T17A317D9D3673276667D316EB23B958C03A2F691957574D2280622E3F05C307D7FE2A06
- MD5 SHA1 SHA512 TLSH
ZStringResources/cs_CZ/stringtable.xml
- SHA256 3c4839cfa3f3c5c997bf59e34e5c024c877e55bab9eb3719496f2b80db688a40
- MD5 54e6a5726f60e6bd0656ef5504e61b93
- SHA1 db246b0d7b2aae4cf2e31aa37b0f12b04bc82969
- SHA512 ebc8a888c2c21db0015aa285d5ba57f57cfc6671dea43bfda27956eb1fc944d6afcc4741f6c9e6cc375ec983a8aeae0ab539de5f001493193f65097866513721
- SSDEEP 768:3OWjdWViWVFWVbWVSWV8WjLKb7otc6IhmdVIIFV6R0iz+9M31CHHh:DMhiIJjIcI5UIR0iCM3g
- TLSH T12433AB5231AD7F2C6486946F5AB270C8400FDCF812B8945371AE76B73E91D884EFF964
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/da_DK/stringtable.xml
- SHA256 0cbc5dc812c7c4da82296322f9838da93b76ac865244621e611f023e49cde86b
- MD5 ae7e2ae74c953a2f2f89bd203b5c06e3
- SHA1 f530064842ea98b315f0d8352d90362332b1efbe
- SHA512 78e6a33c85a6537c22dc69287d69faedf64512a2ebc65d5d630b8fc026a19ba6136fa38e8261de4f45d4d85b6692a9a4b4319ed1e3a590a30c1a29df66ed32e4
- SSDEEP 768:4vGuJyzwx4fZR93lmUfUDniZnGFM/ZHHh:buR4fZ3
- TLSH T13233798271AC7F2C9486947F8A7160C9005FECBC15B46863B2ADB1773EA1D844BFF964
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/de_DE/stringtable.xml
- SHA256 c15bf282e4f008662877868e50152fae79d310cf1933a9e2d5031bd657772f64
- MD5 2a7e12e5397fff025973a62fff06c112
- SHA1 837ee5cf2b28991bef4375ed5d66314394d7e8a7
- SHA512 b22484e63dc0725f054aa05c7c48595d3a29e491c88b2da8df2295569bb4cea57ce919ed38eccfd587317347f5172301892f635cffdc423244b0f4c831ada57b
- SSDEEP 768:ILzopaKtaT70UmhsGE1drpMxrgdVa9G/HHh:yIaKtacUBRdrpAU
- TLSH T12E338B5235FC7F2C5486A5AF4A7124C9111FECFC22B86452B2ADA1773E60E840AFF974
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/en_AE/stringtable.xml
- SHA256 b86eec27e3aca09a9e9e9c3a8e1242fa219137e4c1cd4d92ed7c38223090c3be
- MD5 de14c9b26d03c9e9657a2520ea5624fe
- SHA1 e39849f01a945473ba424f6a1c4d2b4378f9af3b
- SHA512 311431d64a03e369bcafb9fb05757639260fabf4ba7cb2cc792622685b8580e2d18c28ec939e07a4820af95455913f10122ab3d4ffd49c096513763fc1124d23
- SSDEEP 768:BGoBvcZpFXXwYwRwIwnw+w1APIsghu+W5qujq0HHh:B+vg/W8ujx
- TLSH T1FB138A927698BF2C288750BF5C7530C5541FECF866A8641330AEB53B3751E844AF7EA8
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/en_GB/stringtable.xml
- SHA256 e8ea36aa07d55c44f753ab23b6b5b457e3ed7e3d3e75bc0b86e8580857d1e544
- MD5 dc0364f000574ff309b037d536d35e21
- SHA1 0d3c92ebaca60b7c4fa3ffb1e0dd7bc29a41e127
- SHA512 d10513df0d02bd1898ff535a4d4778f9db8ceeae6d87c60f6154f84efcde1c953f69a3f3926bccd0214d4dc7450e4d5d5de3b7fbfdd1e935a1358f763fa715b2
- SSDEEP 768:BCC2R1cZHrX/wYwRwIwnw+w1APIsGFuoW5aAjq+HHh:BPnGxW8AjX
- TLSH T15A138A927298BF2C288750BF5D7570C5541FECF866A8601330AEB53B3751E844AF7EA8
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/en_IL/stringtable.xml
- SHA256 c10d1917bbbeee0de7c31ac8e7312ef2a848ab825e0d464bfbe5fb4a03e231c2
- MD5 3e1d88551d7458bb04b9e4675cc43cfb
- SHA1 7f952840f0d204f563ba4948bbc118e4a5232df8
- SHA512 eaca01a9e479b2955dda3b026cadfb58101ef7120daac9bf41852fa91e892b0a6589bdfe53db71d0e7df5163fbc53db5d370d15bf4e712d3e7bf09c50c7ee5bb
- SSDEEP 768:BFfoqcZ1OX5wYwRwIwnw+w1APIstQuMW58hjqIHHh:BvJtUWOhj1
- TLSH T1E81379927298BF2C298740BF5C7570C5541FECF866A8605330AEB13B3751E845AF7EA8
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/en_US/stringtable.xml
- SHA256 678af225450b70aa02a768014d563b37ad7a8d8f5857c5e00feab72f837388cf
- MD5 0bb5dd704bbfd84b9861068df489191c
- SHA1 4171512b797e20c366fbcc9c71b1617385276a70
- SHA512 61e6adf3dd9ef1c18acddee1717efc5e7d307e8305864ad3a77fd2bd5e81bc34fb0e0a2a3a563960e9c8d8a87bc6774590f9ac179460265d3e2288d750d3e11d
- SSDEEP 768:BcgSccZxsXVwYwRwIwnw+w1APIsLWu0W5gfjqcHHh:BXFLGWCfjp
- TLSH T1001379927298BF2C288750BF5C7570C5541FECF866A8601330AEB53B3751E845AF7EA8
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/en_XM/stringtable.xml
- SHA256 d346453ee7e414b10cd51d8355b1f870154bd2f70faf83cd44700f0c4e1b3da1
- MD5 efbfeea60e45bd14ce7c761901a0b1e1
- SHA1 e2a8121ee06f4d1577d02888a32c188e3d1e7e2f
- SHA512 5782775f99418cfdd4b820b12176231dc6966fa78943ebb686059d8dafbb5934d71132af2af92bfeb56c2b336efdbfc85c1449f95cf7163c14db830df86f664a
- SSDEEP 768:BH4qM0cZRYXM8wYwRwIwnw+w1APIsT0usW581jq4HHh:BYu8WTIW+1jJ
- TLSH T1E6137B927298BF2C188740BF5C7570C5541FECF866A8601730AEB13B3B51E845AF7EA8
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/es_ES/stringtable.xml
- SHA256 241ef2beb4a580f81f709cf62b92745759249a549213f765ee6ec8a45678f59b
- MD5 3125c13cb3d3603d36f77e6cc1fbcbf2
- SHA1 bf92ba4cc3f1f67daff40233d3fa7d619dc9240f
- SHA512 bcf600024e9cd2975ca6a646a8ae92a30424ac4b24d542ff8764b633706478ee98451bdde241db24d08e6170924fb31b09d60cbae25fdb84d871de3b386315a1
- SSDEEP 384:DLWyCjx6+ZiTayuh4hPhIHnzFlMHBDuIZ7fIXrgF31K1mpzZbvi1B38186u1diO/:DSXx6uz+nOmCHHh
- TLSH T16B338D5131FC7F1C5482A46F8AB270D5504FDCF829A89462B1AD62B73E90E884BFFD64
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/es_LA/stringtable.xml
- SHA256 ca9b6e155bbd25e5e6cc25a8d4db78e70db27f126f9ca9a67d3a15ccb48b3f69
- MD5 d1c4efc21961a00da9185638539b769c
- SHA1 688601370a587b6d60bc8b7ed924f8d2b962d313
- SHA512 ef8b9be9f0aa88de6ba067321948fd58c303838ab895d5520e710f382b44591eb2ccf1aa1ce85d10ad70fbcc2899f88101657253106dc8d06c05bca6b22e31ad
- SSDEEP 384:DbWyNjx6qyzNayrh4hPhIHnzFlPH4DuIyOfIXrgF31K1mpzyWvi1338186Y1MiOd:Diux6jvGcOm8HHh
- TLSH T125339D5231FC7F1C5482946F8AB270D5504FDCF829A89462B1AD62B73E90E884BFFD64
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/es_MX/stringtable.xml
- SHA256 ca9b6e155bbd25e5e6cc25a8d4db78e70db27f126f9ca9a67d3a15ccb48b3f69
- MD5 d1c4efc21961a00da9185638539b769c
- SHA1 688601370a587b6d60bc8b7ed924f8d2b962d313
- SHA512 ef8b9be9f0aa88de6ba067321948fd58c303838ab895d5520e710f382b44591eb2ccf1aa1ce85d10ad70fbcc2899f88101657253106dc8d06c05bca6b22e31ad
- SSDEEP 384:DbWyNjx6qyzNayrh4hPhIHnzFlPH4DuIyOfIXrgF31K1mpzyWvi1338186Y1MiOd:Diux6jvGcOm8HHh
- TLSH T125339D5231FC7F1C5482946F8AB270D5504FDCF829A89462B1AD62B73E90E884BFFD64
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/es_NA/stringtable.xml
- SHA256 ca9b6e155bbd25e5e6cc25a8d4db78e70db27f126f9ca9a67d3a15ccb48b3f69
- MD5 d1c4efc21961a00da9185638539b769c
- SHA1 688601370a587b6d60bc8b7ed924f8d2b962d313
- SHA512 ef8b9be9f0aa88de6ba067321948fd58c303838ab895d5520e710f382b44591eb2ccf1aa1ce85d10ad70fbcc2899f88101657253106dc8d06c05bca6b22e31ad
- SSDEEP 384:DbWyNjx6qyzNayrh4hPhIHnzFlPH4DuIyOfIXrgF31K1mpzyWvi1338186Y1MiOd:Diux6jvGcOm8HHh
- TLSH T125339D5231FC7F1C5482946F8AB270D5504FDCF829A89462B1AD62B73E90E884BFFD64
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/fi_FI/stringtable.xml
- SHA256 7e752694cd6cd3a0f9c13926c6736aab0826d706bb15efcaaac59b3b3c9fbf02
- MD5 5b95a4ee34a0e3bae54fccd8b707c9a8
- SHA1 d25429f7182d8e0ec6eed294fdf39f561e228d49
- SHA512 244dc8643e8609395510a312e2988e990d664ae68150cd405919904d9bebcd2aa519ea05c4644900496569896441feab1d2676fb720ac8a6b54537f7c1d0c194
- SSDEEP 768:W/eX9qHuQja75/H/JtZXZ4baRh/RlkYsNhuHHh:W/Cfzt4axKNs
- TLSH T19D337B9132ACBF1C6485E47F49B170C9404FECFD25B85852B2AE62B73E91D440AFB978
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/fr_CA/stringtable.xml
- SHA256 24e7c8ef3025549909d04288a5f5b4772653a332fc640786a2bb5dce7e69a7c8
- MD5 f57e3d4275e933be642ecf4770f38e57
- SHA1 8c57baafbbb37879923ff724ea101f65b8eac50f
- SHA512 f80d278c183bc72e014dc4d996756af447f0a110ed2cb087cade57d47443bc5cc94fa000cbe0eecac9949de467674930ac441a984fa4e1d7d89f73e4e252452f
- SSDEEP 768:Rn8xdL9+aOnR1s6wQka2YGU7V/Ip3DLcXYA/MdD9vRLHHHh:Rn8/LgbdFTORRF
- TLSH T172338D4171AC7F2C6486947B4E7270C5401FDCF82578A492B2AE71773EA1D884BFFAA4
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/fr_FR/stringtable.xml
- SHA256 074cfb42df7a842fff50ce5b0d606de7faa129e413919a66ac6c402eec11cdcd
- MD5 79816800939431a4565c7337e7f7c584
- SHA1 f2c2526a175973da7ec9b25330e9c6998cfd3e96
- SHA512 7adbbc743fbc88a714d97fe7662e7d224e9c6a1719bd57f679024430696acb23e50f62b84c4ee22bb7791b13595264a833c8ce6264fd7f53a1639e5e77b349cc
- SSDEEP 768:ln8x/L9xaOKY1s6wQkc2YGU7V/Ip345cXY5oUdD9VeLNHHh:ln8JLnb3bvDvef
- TLSH T1E3338C4171AC7F1C6486946B4E7270C5401FDCF82578A492B2AE71773EA1D884BFFEA4
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/fr_MA/stringtable.xml
- SHA256 60e9ba3ce35d56ceb61d4a7e5a531f94f68ea21a4800a9a94cde517191dff4fe
- MD5 be8a56341c12fe90923c3c62a6b511f0
- SHA1 2de9106a1e9f11661a7e9fea9073022dfd7016e8
- SHA512 3370683b78320ace675f976c6141706b5b771d7cad1e59694a8da4e5f94de51b60eeb97dc9e8c6b21facd260994c9f4956150f26162889a43dbe9b9f1dac1ea8
- SSDEEP 768:7n8xRL9saOlb1s6wQk22YGU7V/Ip3ZHcXYmhkdD9XDL7HHh:7n8DLab5JTopDR
- TLSH T19E338C4171AC7F1C6486947B4A7270C5401FDCF82578A492B2AE71773EA1D884BFFEA8
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/fr_XM/stringtable.xml
- SHA256 074cfb42df7a842fff50ce5b0d606de7faa129e413919a66ac6c402eec11cdcd
- MD5 79816800939431a4565c7337e7f7c584
- SHA1 f2c2526a175973da7ec9b25330e9c6998cfd3e96
- SHA512 7adbbc743fbc88a714d97fe7662e7d224e9c6a1719bd57f679024430696acb23e50f62b84c4ee22bb7791b13595264a833c8ce6264fd7f53a1639e5e77b349cc
- SSDEEP 768:ln8x/L9xaOKY1s6wQkc2YGU7V/Ip345cXY5oUdD9VeLNHHh:ln8JLnb3bvDvef
- TLSH T1E3338C4171AC7F1C6486946B4E7270C5401FDCF82578A492B2AE71773EA1D884BFFEA4
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/hr_HR/stringtable.xml
- SHA256 da6450a3e3a84070cea20ed1401cdd8ab9be2fa48dfdfbcab0ee0bc7b8a7a9a6
- MD5 d8b1e8838cb9495ab93152ab09c3a3a2
- SHA1 656961b6777d7689951aaaa6930baad6daf5ba4d
- SHA512 3bc98853275f09204b78a7d41c230ca85ea2352c53283c5a2d99bd37e0f68f657f664f2a4a6cf0e64b524d53a90ce7b99f9c58e849f8e84c77e32514871c1398
- SSDEEP 384:ml88Rmk5S0505PbFRxzSQeQr/FKWZtkGeJUFu5bYjol6UebHmLk1tF26l7sUL2gh:Fc2ol6U7YRtMcHHh
- TLSH T1C423479231B8BF1C5446D46B8AB161C4005FDCFC25B89463B2AEA6773E91D440BFFE64
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/hu_HU/stringtable.xml
- SHA256 b8658ce775ff1c00b6f1aaf82e01f9a06a21cd00d501124b9d35cf64705fc02b
- MD5 b791d5125bb19b606411f1a91791d8ad
- SHA1 e16644a897e28d6c95bbae1ff2743f5f1e1d8ecd
- SHA512 7843f823a8962a94406f4cecc4bd0c263e621fb3bdb6906fc843f3a97fedec5603bf07218e412f00e991ab309e8c37a642cd144034b8be59dfaddaf0ef3af702
- SSDEEP 768:FyqtZJSz5CgpgRoudm9XQMGgp1ULMZt7q5dAjYC/g83X8nRjRH3HHh:xNgsZ5fx
- TLSH T117338F6232F8BF1CA856947B497130C5001FDCBC267854A372AEA5773E90E844EFBD69
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/it_IT/stringtable.xml
- SHA256 0f8c5401ed2b1686f75ced83b90baf6decb824d608fc73d539cd81c60045318e
- MD5 75d5546207b4ca517eb692f573c243ee
- SHA1 abd0805396a2eab0ff8acf7d7419df4ee4688606
- SHA512 3b563469e4ee0fa52cc050e32c3d17b887d2e26a242c12780ed4d74a923613a2349e50567a55a377abde7011b408b095ad0a61895b457001af698718b7b854a7
- SSDEEP 384:t9Bt3DKzNKRQF5f8lBeQn+NV/OYWKrMa3gltIRBbV19R1B88T3c4fl308W9C8w6M:t8EGWKrzbVzM4f385TkPrBHHh
- TLSH T107339D5271EC7F1C5846A46F4A7270C8405FECF826B42462B2AE627B3ED1D844AFFD64
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/ja_JP/stringtable.xml
- SHA256 2d3eb88bcba0f5b01d4f5d34cc7227d7727ffd9c3f887bb21fcaa97f69685193
- MD5 6e6663a84dffa827296c90b47c49693b
- SHA1 ea0b42d0ba207418db8a47023ba9072b5ec5b759
- SHA512 48af4f79cb4a7b99707334de168967d2816166ba74f1ad844f7c1d78f1590dfaea409aac4658c6781e48ae9987ca11e582725ae83ea707a7cc90426d01b69bd6
- SSDEEP 1536:3Wug7Zem2urlItrlZFqscljEAatQtOiX9Qc0Asfvfacs8IG5dG+tnAycUGyabOMd:HlhQ
- TLSH T1BE4397AE72AC7F2C5011A43B49B171C4001FECBDE9657462617EA0773E50E8CCABBA75
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/ko_KR/stringtable.xml
- SHA256 397925e8b7a9642f17bf30ac8817fc78d3ee3f8468bc767faa2410fccc0eae94
- MD5 c0a6eba2c81b379122051d6ecca916fe
- SHA1 5d835bb5c0bcc4c3da3968905751421d3d105ad5
- SHA512 220d3acccebd48f24e6fd2fea15b386b93e2de789d60e1d2e5d1478700dc030c27ef8cf4d660a56520d9ff6221849babae0c6deef55bf397d4fec81dd2d73917
- SSDEEP 768:9uohi/F/ykiROf4VpLrnJbsvbi5eCOd48m88CSfwzcCHHh:9yvDi53A
- TLSH T17633B99231BD7F1C6486986B8EF270C4410FDCB822751462B15DA97B7EA0D850AFFDB8
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/nb_NO/stringtable.xml
- SHA256 0258fff2598a5f47d4dc17cec5f9386b2d6681f9539c8ee88836be603ae612f1
- MD5 2663ef143bc1d1a865e2074ec75c48da
- SHA1 73306f1b930c4ac02d0d6cbf094b35082df51a13
- SHA512 7bc7d5e5eccbd0c87d5bdee2530653977854268f8b5ffccc1a69ee154769254238543de90b5f06cabe171847d4cbbf5a9a3ce4a3aea6d52ff2deee2e5f2000c5
- SSDEEP 384:ruHmeZwTHmrfefGoW/iitsY2n/pWtoa4Ixu2+d+MILZXiemFqXztqDj7L4OpMCja:rzHkaBrkvIe8PPE1YoyyxZ2ntNJg5HHh
- TLSH T103337D4272AC7F1CA846947F4A7131C9405FECBC16B858A272ADB1773EA1D840BFF964
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/nl_NL/stringtable.xml
- SHA256 716511191e09fac15e63da9c7a7981ab19e047825a7af18cebab52e8acbab693
- MD5 4dc554c0541c66519fa9b7c2a8155ecf
- SHA1 f223723c723ef68c7a9b79d6f3ad9d4cb0411c34
- SHA512 d5f27e35070d307316a64257e1f424d1b15edbd4bf5980154cd1014499a67470f507c48aeeea332a5f785c56a66710ce23bdd548f9256fb3c0c145d6073e3f3f
- SSDEEP 384:lR8SJSHvBMKtEK69vtPECkpDhq3aPVPp91+x7v0yMyXBHSsJBsSUivi1UIaxbVv7:lRPJSHZMKuKAHMyxNGU1qzOJ5HHh
- TLSH T1A2338C9235BC7F2C9486D4AF4A7130C9110FECFC52B46496B2ADA1773E91D840AFF964
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/pl_PL/stringtable.xml
- SHA256 266a7dd9f9124b3448d84c06b9ecf6b3ea05a9be11aec5e48d1dba5a24d8850b
- MD5 f583191fbb1fc074da3ecdeb405d3cca
- SHA1 936924bd3113b391777b7f344efa3c3bd540a666
- SHA512 8a3a7fe05527d4b961c750ac11f33c231a9b147c50cef8ced51751468b710f8cee84c21504d94809417eee417e1c919e7fd0aa4480622b6c492c7f279470c1c9
- SSDEEP 768:8fyoe7rqueYLJ4G0aTBvqPBfIM54gGlua8UHHh:8qoe7rqub4dIM54gGlzj
- TLSH T1C033795171FC7F1C9885946F8AB230C8045FDCF825B86456B1AEA5773E90E480BFF9A8
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/pt_BR/stringtable.xml
- SHA256 5df15fbb09fe2d4674893684877a9bb79c90ea3a96a35547b185c9243ce6f8a2
- MD5 97b692726d2780c30ccaece001d9c78f
- SHA1 a219269d613f50de2d322774a4358a69fb6d23ab
- SHA512 e8ecf0ab07000a8bb09f4a15eb2af39708fce88224ff6e6ffd2432628474ebc0978b541969ad3abf5437511b99b6a4c535642ad06f6bebfaf2be409097c2cb21
- SSDEEP 384:IHcUIUdePsfdogzP7tr/foiSD/npX16qvnCMFKVYmFrBibKghfjGXQxiS6HL7LUt:IHT0AiAXGBYcg2bKLQoPYURpUHHh
- TLSH T10F336A5132EC7F2C6446A57B4AB230C5404FECF8257894A272AE76773EE0D844BBBD64
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/ro_RO/stringtable.xml
- SHA256 4b9764d7b00de1da0ea1303d6fec80ef42d59b37de5f892f768bd33d9ffe1d60
- MD5 df9327dc77dc5d10f85cb76361808dbb
- SHA1 4b4e212c0306709292d51657f49104e854f1587c
- SHA512 b87ccb5bd81a6f780d28a5d158b450c9799ba9158c5fa3402b73775644d1e9c3ad4c12e8a02361e7c8ff0d9436280928b7643de6dc993ecbbc15f00fb378f097
- SSDEEP 384:mRxnycCy87mg8Hs3zM91hfdkrTmV9+UuQF269EKzeYUVnPxBx5nlsQXntHHh:macCy8x8nNfr99u4ZCr1z9HHh
- TLSH T1FD33AA4171EC7F2C6882957F4AB170C6404FDCF826646496B2AEA1773E90D884AFFDE4
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/ru_RU/stringtable.xml
- SHA256 e56083895129680f801b1dbe06fe02c745e8d87ae4713671088b33e47093ed71
- MD5 001fed11c0ef02479b4d4e1e7a48c186
- SHA1 ee70bdcd42722f380329d7dbe73282f377ee253d
- SHA512 171a6c8bb9af954fe74f7f67ab0fb7feaa369ec1a9363d455373045ecfaf6d41f65d49efcfdecc04dc45c9992b7d0d7a9614ce12cc44fc3b52a55491f47fbc10
- SSDEEP 768:Kgbo0Czopb2UisRbZHEUYkp2TCi1jCFHAZWHHh:KX0Cspb2UisgUiWeCFHSa
- TLSH T1A153465231EC7F5C1506A42FC934B489205FDCFD2EB96652216C39BB3EE1C444ABFA68
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/sk_SK/stringtable.xml
- SHA256 8f7da94a4991552fe2b040111928fff783af215166a24acbead6031742727295
- MD5 1c137db4685f84e04806920b9cd4bb28
- SHA1 246062ea6c3bd6d15edb8eb814f6a6520d51d4b7
- SHA512 4d82b3393b9f170a8509b8934b01643ae65f908dff22c9de2cffafc706cf4b9ed56dfc12cc6bd922782175a4c012772c22212744a9377b39ca0c3016561ba4d0
- SSDEEP 768:vbj1cGUUuXUuxUuhUuSUuLUn0Ki4/Vue4H81l8FXXdD7Cp3+27XdFkHHh:DO+RlpiZpVonq6
- TLSH T1AE33AB9271BC7F2C9486946B8AB270C8404FECFC11B8586271AD72773E91D884AFFD65
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/sl_SI/stringtable.xml
- SHA256 f019982fae3b2c1f3e214c3a73ba68f9c3f13623c12b21b4187c2e79b9194cc1
- MD5 a9161e2655465347dab974dc4c1fa0a9
- SHA1 ce63573a1cb66073cdf613e145be620a6547001c
- SHA512 2d740e58c30126a0e905864d0581ea28d2f5f824ad5af4f30778004e7f4d6ce6cbfed59785a0c9c6fce03a4b7738f91414b44b55064c1141d1b5b214c1d1d9ca
- SSDEEP 384:wLwEFlwFVW0YSkR2sHEx7dDYZJ5/mhKLN57dSPgN+epxukm3CkQ9cf+GNrTVfRoh:XOggN+epxNm5Q9+fb6iT0SaHHh
- TLSH T195335B6231BD7F1C5846E46F4A7260C5044FDCBC25B89462729EB2B73EA0E844AFFD64
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/sv_SE/stringtable.xml
- SHA256 593c1098ff42be8d67ba045d73dc14c16d4eec99165548d69bd24f58a2a60fc6
- MD5 3e5ffb3aac5267f11f7113a7bd01851b
- SHA1 208667a831e9c88675401ffaef0068ac703ccec4
- SHA512 ae034e5f42e162ef76502cb2c4d7ca6051d56cb4ef8cc018afe0201518b6dd1c04c6203591b4b6b6ad2c2b664a3259d966a413b9dbc5c9963e304f887eb1f72b
- SSDEEP 1536:GWD8c9FJJG1s0tnabKtHLCRyWhOSyYbMhTBJ:F+VLCRyWcSyjv
- TLSH T140336A4271BCBF1CA446A46F8A7120C9005FECFC26B46852B2AD657B7E90D440BFFA65
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/tr_TR/stringtable.xml
- SHA256 01bc313e79779d1426285259b535130cf7a0c1a409905455b870c1b9b1f29b20
- MD5 57e13a698d582104e37e498ee64fa99e
- SHA1 f6fd2790aaf821f6e8580fc68f8b86696c1cb377
- SHA512 ff0ed258ac6600606924a08c1f907573372f6c6e460128a9dbf7ebb656477dfa41575bc2b898d99d20056c51913d018f06ae87fbfbfe46af43acaa7169fdc2e0
- SSDEEP 768:et7SRRR8Km1C2fIh4SNKqi8YDz6SHCv07rb5HHh:exSRRR8SIR7
- TLSH T10A339B8131BC7F1C9846A87F99B121C8905FDCF82674B452B2ADB57B3E50D840AFF968
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/uk_UA/stringtable.xml
- SHA256 7004a7d9f3a1abed6d87b3248d7b06795ba535e9d54074248057e849036b4760
- MD5 9ac929bae447def18f6aa73e9c40c14a
- SHA1 3e4e385734d18a25fcfffe99810345b12dee05b1
- SHA512 ff5753abf6c45d5a35c05d786ccc3a33ce19594a05ad411b57f8c043ea57bce7d1b7d7619f952202f80215e61f88d68b6c4d04acc30c19f1bb8c004bc2af7c74
- SSDEEP 384:iVFnHTxdiaDyEQ6DXEwNzp6wFs/r3McopD73VUKR2jZFd6jnu5RY8rA502pMe36p:aBDzBXXYfHHh
- TLSH T1305354A271EC6F9D0506E42FD874B488145F8CFC3AB55B5331A9397B3DE0C444ABEA68
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/zh_CN/stringtable.xml
- SHA256 6d8c25adb479d48dffac9680c676f0fb668fdccded037d35656ac81aa84fb10c
- MD5 ff0018ab3cbd522e1aaad0c47aa9125a
- SHA1 a96104f13e3ea1ed9a291894fef4b391ccac87d5
- SHA512 5e93014e1b2a84f359b4add9bbb984c891de4085be697955bda0fe58f620b2327621f059de8c21620541310135700ab2de96b994211fedef2b44a5cf230ea8c1
- SSDEEP 384:dRX634nIu/rcPr4R4zqKV9Fbv4v8k69S99I/A4urIf66SeL0L66Sdbj1SzHHh:dRtyzZVm65X6AgmHbjOHHh
- TLSH T1FB23499132AC7F2C5446987F4AB270D4400FECFD25B859A2B1AD617B3E90D840EBFD69
- MD5 SHA1 SHA512 SSDEEP TLSH
ZStringResources/zh_TW/stringtable.xml
- SHA256 eb7674866b4c976a2410e157e41e0c100371db02851948f352383492f2277ead
- MD5 d74c8ad0d662c2415fd65e26bbbe1903
- SHA1 7aa2a3cebd94334048ff8ad84caa057084772089
- SHA512 878ccd85aa053f503cba3dfa751a330789d3d7fa3825a5a7a239a64ce4ee12b480d4d959888766c293ae62ea9a5c8ea48eb312f7f4cd5d272a0a998d53563fe0
- SSDEEP 768:URrPFVPGFRXFycKbfEOyQwaY4+4VDCqMBbjYHHh:Kbfqc
- TLSH T10823489231BC7F1C5446D86F5AB235D4001FECFC29B86863726E617B3E50D880EBB969
- MD5 SHA1 SHA512 SSDEEP TLSH
adobe_licutil.exe
- IMPHASH 41f7b4e000caae0168ab446a0178f167
- SHA256 cbeed53b5fb89420459355efc478e9cbb35bc996d24a6d06cb9d288aa0e8c6e4
- MD5 f9b89fbaab17b8d2e17be1b7bdd7164d
- SHA1 aa9a7f1b8e38c844b0fe572ea99898403bf7c311
- SHA512 31c41c73bf2113c87520c405da05255f39cb43b61dfe81df362d5600f041d4006c8df492e7971236a09272cba9519a6ccbd50fbe67a7be4cc2b4668808b3e27d
- SSDEEP 49152:AWZV6OzJeqzZkzUDFGh+zA2QPc//PSXHEWJb:AWZVZzJeqzZkzUDFlDQPc//dWl
- TLSH T1B4859D21BB42C136F4D312B2997D6B6F193CAA21071594D3F3D42E995E702E25B3E32B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
13:b4:4e:da:07:6c:00:65:d0:30:8b:49:7e:c6:4b:9d:cd:d2:38:40
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Chains
Apr 22, 2014
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Serial Number
1d:37:83:b3:de:cd:5d:bb:16:e3:3c:d3:a6:b3:bf:db
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 20, 2014 - Feb 21, 2015
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
1
Major OS version
5
Entry point
1147288
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
none
winhttp
WinHttpGetProxyForUrl
WinHttpSetOption
WinHttpGetIEProxyConfigForCurrentUser
WinHttpOpen
WinHttpReceiveResponse
WinHttpQueryDataAvailable
WinHttpSetStatusCallback
WinHttpQueryHeaders
WinHttpReadData
WinHttpCrackUrl
WinHttpCloseHandle
WinHttpConnect
WinHttpOpenRequest
WinHttpAddRequestHeaders
WinHttpSetCredentials
WinHttpSendRequest
setupapi
SetupDiGetDeviceInstanceIdW
SetupDiGetClassDevsW
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
kernel32
GetModuleFileNameW
GlobalFree
GetComputerNameExW
InterlockedIncrement
InterlockedDecrement
CloseHandle
CreateProcessW
SetEnvironmentVariableA
CreateMutexW
SetEvent
WaitForMultipleObjects
CreateEventW
GetTimeZoneInformation
GetVersionExW
UnlockFileEx
FlushFileBuffers
SetEndOfFile
WriteFile
SetFilePointer
LockFileEx
GetFileSize
CreateFileW
OutputDebugStringA
GetTempPathW
QueryPerformanceCounter
GetEnvironmentVariableA
QueryPerformanceFrequency
lstrlenA
LocalFree
GetCurrentProcess
GetCurrentThread
FindClose
FindNextFileW
FindFirstFileW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetFileAttributesW
LoadLibraryW
CreateDirectoryW
IsDBCSLeadByteEx
ReadFile
LocalAlloc
WaitForSingleObject
WideCharToMultiByte
SetLastError
DeleteFileW
GetDateFormatW
GetTimeFormatW
GetLocalTime
GetFullPathNameW
GetFullPathNameA
CreateFileA
UnlockFile
LockFile
GetTickCount
GetSystemTimeAsFileTime
FormatMessageA
GetFileAttributesA
GetDiskFreeSpaceW
LoadLibraryA
GetDiskFreeSpaceA
GetCurrentThreadId
GetCurrentProcessId
GetTempPathA
GetSystemTime
AreFileApisANSI
DeleteFileA
ReleaseSemaphore
CreateSemaphoreW
HeapSize
GetStdHandle
ExitProcess
GetProcAddress
GetLastError
FreeLibrary
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
CompareStringW
GetStartupInfoW
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsW
GetEnvironmentStringsW
Sleep
GetFileInformationByHandle
PeekNamedPipe
GetCurrentDirectoryW
SetStdHandle
GetLocaleInfoW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
MultiByteToWideChar
WriteConsoleW
GetProcessHeap
GetFileAttributesW
HeapCreate
IsValidCodePage
GetOEMCP
GetACP
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsProcessorFeaturePresent
GetCPInfo
LCMapStringW
MoveFileA
FindFirstFileExA
GetDriveTypeA
SystemTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
FindFirstFileExW
GetDriveTypeW
FileTimeToLocalFileTime
FileTimeToSystemTime
GetDateFormatA
GetTimeFormatA
HeapSetInformation
GetCommandLineW
InterlockedCompareExchange
InterlockedExchange
GetStringTypeW
EncodePointer
DecodePointer
RaiseException
RtlUnwind
HeapFree
HeapAlloc
HeapReAlloc
user32
wsprintfW
MessageBoxW
advapi32
OpenThreadToken
GetNamedSecurityInfoW
SetNamedSecurityInfoW
CryptDestroyKey
CryptGenKey
CryptReleaseContext
CryptAcquireContextW
CryptExportKey
SetEntriesInAclW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegQueryValueExA
RegDeleteKeyA
RegOpenKeyA
RegCreateKeyA
SetSecurityInfo
RegOpenKeyExW
RegQueryValueExW
RegCreateKeyExW
RegSetValueExW
RegCloseKey
RegDeleteKeyW
OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
EqualSid
FreeSid
GetUserNameW
shell32
SHCreateDirectoryExW
SHGetSpecialFolderPathW
SHGetFolderPathW
ole32
CoInitialize
CoInitializeEx
CoInitializeSecurity
CoCreateInstance
CoSetProxyBlanket
CoUninitialize
oleaut32
SysStringLen
SysAllocString
SysFreeString
VariantClear
SysAllocStringByteLen
shlwapi
PathRemoveFileSpecW
PathFileExistsW
GetAsnVersion
IAL_ActivateLicense
IAL_CloseSession
IAL_CreateSession
IAL_DeactivateLicense
IAL_GetAULData
IAL_GetEntitledSerialData
IAL_GetEntitlementsForLEIDS
IAL_GetSLConfigData
IAL_GetType2aOfflineException
IAL_GetVersion
IAL_ReloadLocalDispatchTable
IAL_SetLicensingLEID
IAL_SetLoggingMethod
IAL_SetProxyDetails
IAL_ValidateSerial
asnInst_InstallerProductInfo_constructor
asnInst_getAsnProductInfo
asnInst_getAsnProductInfoInMem
asn_exit
asn_info
asn_init
asn_makePrivate
asn_makePrivateEx
Name
.text
Size
1.3MB
Virtual Size
1.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
211KB
Virtual Size
211KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
76KB
Virtual Size
104KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
27KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
79KB
Virtual Size
79KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=3, id=152, version=20115,
count=32, id=158, productName=VS2010 build 30319, version=30319,
count=21, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=94, id=174, version=30319,
count=21, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=235, id=1, productName=Unmarked objects,
count=19, id=125, productName=VS2005 build 50727, version=50727,
count=132, id=109, productName=VS2005 build 50727, version=50727,
count=223, id=170, productName=VS2010 build 30319, version=30319,
count=168, id=171, productName=VS2010 build 30319, version=30319,
count=1, id=155, productName=VS2010 build 30319, version=30319,
count=1, id=154, productName=VS2010 build 30319, version=30319,
count=1, id=157, productName=VS2010 build 30319, version=30319,
adobe_oobelib.dll
- IMPHASH 5a599eb932a0034c415503b58c6c69af
- SHA256 604a00f760930dd4d210a9845143f0454d5b50142744c88562a2314c7ec2813b
- MD5 ea21b215d572082aa96062cbeb0701a9
- SHA1 0d2c223bb0d9b19ce5bb058ac41d896b0c9e0290
- SHA512 77c4502f86e916b3add397a7add9642e69498add2fd1a664220d1e1abe61d4de5bf974467a73409f99a1f7148f1b66671d561a14abd2f676dfcd41a2a9e97348
- SSDEEP 49152:qUxvSZr1O5bxxyLgDVGIk2CmWh9IkZK0An149J9AffUO+KDKHKhNy:JvSZr1O5bxxykBGIk22h9IkfAi9J9AV2
- TLSH T1C3B59D22BA41C136F5DB00B6A53C6B6F186DA635072898C3F3D06E9C79705E26B3971F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
c6:69:5b:23:f9:b4:4c:16:6f:f4:51:17:a7:bd:33:5b:62:95:78:95
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Chains
Apr 22, 2014
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Serial Number
1d:37:83:b3:de:cd:5d:bb:16:e3:3c:d3:a6:b3:bf:db
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 20, 2014 - Feb 21, 2015
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
1
Major OS version
5
Entry point
1655477
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
none
winhttp
WinHttpGetIEProxyConfigForCurrentUser
WinHttpGetProxyForUrl
WinHttpSetOption
WinHttpOpen
WinHttpReceiveResponse
WinHttpQueryDataAvailable
WinHttpSetStatusCallback
WinHttpQueryHeaders
WinHttpReadData
WinHttpSendRequest
WinHttpCrackUrl
WinHttpCloseHandle
WinHttpConnect
WinHttpOpenRequest
WinHttpAddRequestHeaders
WinHttpSetCredentials
iphlpapi
GetIfTable
setupapi
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceRegistryPropertyW
SetupDiGetDeviceInstanceIdW
CM_Get_DevNode_Status
SetupDiGetClassDevsW
kernel32
SetEndOfFile
WriteFile
SetFilePointer
LockFileEx
GetFileSize
CreateFileW
InitializeCriticalSection
DeleteCriticalSection
ReleaseSemaphore
WaitForSingleObject
LeaveCriticalSection
EnterCriticalSection
SwitchToThread
ResumeThread
CreateThread
FreeLibrary
GetProcAddress
LoadLibraryW
WideCharToMultiByte
GetModuleFileNameW
GlobalFree
GetComputerNameExW
InterlockedIncrement
InterlockedDecrement
GetVersionExW
SetEvent
OpenEventW
WaitForMultipleObjects
CreateEventW
GetExitCodeThread
TerminateThread
OutputDebugStringA
QueryPerformanceCounter
GetEnvironmentVariableA
QueryPerformanceFrequency
GetTempPathW
GetTimeZoneInformation
lstrlenA
LocalFree
lstrlenW
GetCurrentProcess
GetCurrentThread
FindClose
MultiByteToWideChar
FindFirstFileW
SetFileAttributesW
GetFileAttributesW
CreateDirectoryW
ReadFile
LocalAlloc
GetTickCount
GetLocalTime
FlushFileBuffers
Sleep
SetLastError
DeleteFileW
GetDateFormatW
GetTimeFormatW
GetFullPathNameW
GetFullPathNameA
CreateFileA
UnlockFile
LockFile
GetSystemTimeAsFileTime
FormatMessageA
GetFileAttributesA
GetDiskFreeSpaceW
LoadLibraryA
GetDiskFreeSpaceA
GetCurrentThreadId
GetCurrentProcessId
GetTempPathA
GetSystemTime
AreFileApisANSI
DeleteFileA
SystemTimeToFileTime
GetACP
GetFileType
PeekNamedPipe
CreateProcessW
GetLastError
CloseHandle
GetModuleFileNameA
CompareStringW
SetEnvironmentVariableA
CreateSemaphoreW
GetCurrentDirectoryW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetStartupInfoW
GetConsoleCP
GetConsoleMode
GetOEMCP
IsValidCodePage
HeapSize
SetStdHandle
GetLocaleInfoW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
UnlockFileEx
GetProcessHeap
WriteConsoleW
FindNextFileW
GetFileInformationByHandle
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetStdHandle
ExitProcess
GetModuleHandleW
HeapDestroy
HeapCreate
IsProcessorFeaturePresent
GetCPInfo
LCMapStringW
MoveFileA
LocalFileTimeToFileTime
SetFileTime
GetDateFormatA
GetTimeFormatA
GetCommandLineA
FindFirstFileExW
GetDriveTypeW
HeapReAlloc
FindFirstFileExA
GetDriveTypeA
FileTimeToLocalFileTime
FileTimeToSystemTime
RtlUnwind
RaiseException
HeapAlloc
HeapFree
DecodePointer
EncodePointer
InterlockedExchange
GetStringTypeW
InterlockedCompareExchange
user32
wsprintfW
advapi32
AllocateAndInitializeSid
CryptDestroyKey
CryptGenKey
CryptReleaseContext
CryptAcquireContextW
CryptExportKey
GetNamedSecurityInfoW
SetNamedSecurityInfoW
SetEntriesInAclW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegQueryValueExA
RegDeleteKeyA
RegOpenKeyA
RegCreateKeyA
SetSecurityInfo
RegOpenKeyExW
RegQueryValueExW
RegCreateKeyExW
RegSetValueExW
RegCloseKey
RegDeleteKeyW
OpenThreadToken
OpenProcessToken
GetTokenInformation
EqualSid
FreeSid
LookupAccountNameW
GetUserNameW
shell32
SHGetFolderLocation
SHCreateDirectoryExW
SHGetFolderPathW
SHGetSpecialFolderPathW
SHGetPathFromIDListW
ole32
CoTaskMemFree
CoInitialize
CoInitializeEx
CoInitializeSecurity
CoCreateInstance
CoSetProxyBlanket
CoUninitialize
oleaut32
SysStringLen
SysAllocString
SysFreeString
VariantClear
SysAllocStringByteLen
shlwapi
PathRemoveFileSpecW
PathFileExistsW
PathStripPathW
PathRemoveBackslashW
PathAppendW
Adobe_OOBELib_Activate
Adobe_OOBELib_BackDoorUpgradeCheck
Adobe_OOBELib_CalculateVC
Adobe_OOBELib_CheckForUpgradeOnline
Adobe_OOBELib_CheckSubscriptionMode
Adobe_OOBELib_CheckSubscriptionValidity
Adobe_OOBELib_CheckSubscriptionValidityOnline
Adobe_OOBELib_CheckWFType
Adobe_OOBELib_CheckforUpgrade
Adobe_OOBELib_CleanUpCachePCD
Adobe_OOBELib_CreateRef
Adobe_OOBELib_Deactivate
Adobe_OOBELib_DeactivateLicense
Adobe_OOBELib_DeactivateLicenseForSerial
Adobe_OOBELib_DisAssociateAll
Adobe_OOBELib_EnumerateKeys
Adobe_OOBELib_Generate_OffLineExcpType1_ReqCode
Adobe_OOBELib_GetAdobeId
Adobe_OOBELib_GetChallengeString_UpgradeCheck
Adobe_OOBELib_GetCredentialsForProxy
Adobe_OOBELib_GetCurrentLicenseState
Adobe_OOBELib_GetEntitlement
Adobe_OOBELib_GetLicenseStatus
Adobe_OOBELib_GetLicenseStatusEx
Adobe_OOBELib_GetRefID
Adobe_OOBELib_GetSerialInfo
Adobe_OOBELib_GetServiceClaimData
Adobe_OOBELib_GetValueforKeyInSubDomain
Adobe_OOBELib_Get_OffLineExcpType1_ReqCode
Adobe_OOBELib_Get_SeatID
Adobe_OOBELib_Getversion
Adobe_OOBELib_ISOTaggingAtInstall
Adobe_OOBELib_LaunchPurchaseWorkFlow
Adobe_OOBELib_LoadActivationGraceLicense
Adobe_OOBELib_LoadOfflineGraceLicense
Adobe_OOBELib_LoadOnlineTrial
Adobe_OOBELib_LoadTrial
Adobe_OOBELib_ProcessExceptionFile
Adobe_OOBELib_Process_file
Adobe_OOBELib_ProtectedContentCheck
Adobe_OOBELib_QueryLicenses
Adobe_OOBELib_ReleaseRef
Adobe_OOBELib_RememberAdobeID
Adobe_OOBELib_RemoveKeyInSubDomainInCache
Adobe_OOBELib_RemoveLastLoggedInUser
Adobe_OOBELib_Remove_payload
Adobe_OOBELib_Retrieve_SerialNumber
Adobe_OOBELib_Retrieve_SerialNumberEx
Adobe_OOBELib_Retryactivation
Adobe_OOBELib_SaveAdobeId
Adobe_OOBELib_SetAdobeId
Adobe_OOBELib_SetAdobeIdExtProfile
Adobe_OOBELib_SetAppXMLData
Adobe_OOBELib_SetClaimStatus
Adobe_OOBELib_SetClaimStatusEx
Adobe_OOBELib_SetCredentialsForProxy
Adobe_OOBELib_SetLEID
Adobe_OOBELib_SetUniversalCookie
Adobe_OOBELib_SetValueforKeyInSubDomainInCache
Adobe_OOBELib_Set_Eula
Adobe_OOBELib_Set_InstallLocale
Adobe_OOBELib_Set_serialnumber
Adobe_OOBELib_SuppressRegSerialNag
Adobe_OOBELib_SuppressRegistrationNag
Adobe_OOBELib_Suppress_Eula
Adobe_OOBELib_Suppress_Registration
Adobe_OOBELib_UpdateLastLoggedInUser
Adobe_OOBELib_UpgradeCheck
Adobe_OOBELib_UpgradeDoneAtInstallTime
Adobe_OOBELib_ValidateSerialOnline
Adobe_OOBELib_Validate_SerialNumber
Adobe_OOBELib_Verify_OffLineExcpType1_ServerResponseCode
GetAsnVersion
IAL_ActivateLicense
IAL_CloseSession
IAL_CreateSession
IAL_DeactivateLicense
IAL_GetAULData
IAL_GetEntitledSerialData
IAL_GetEntitlementsForLEIDS
IAL_GetSLConfigData
IAL_GetType2aOfflineException
IAL_GetVersion
IAL_ReloadLocalDispatchTable
IAL_SetLicensingLEID
IAL_SetLoggingMethod
IAL_SetProxyDetails
IAL_ValidateSerial
asnInst_InstallerProductInfo_constructor
asnInst_getAsnProductInfo
asnInst_getAsnProductInfoInMem
asn_exit
asn_info
asn_init
asn_makePrivate
asn_makePrivateEx
Name
.text
Size
1.8MB
Virtual Size
1.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
311KB
Virtual Size
310KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
76KB
Virtual Size
104KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
101KB
Virtual Size
100KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=3, id=152, version=20115,
count=33, id=158, productName=VS2010 build 30319, version=30319,
count=5, id=171, version=31118,
count=2, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=90, id=175, version=30319,
count=21, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=251, id=1, productName=Unmarked objects,
count=19, id=125, productName=VS2005 build 50727, version=50727,
count=132, id=109, productName=VS2005 build 50727, version=50727,
count=226, id=170, productName=VS2010 build 30319, version=30319,
count=201, id=171, productName=VS2010 build 30319, version=30319,
count=1, id=155, productName=VS2010 build 30319, version=30319,
count=1, id=154, productName=VS2010 build 30319, version=30319,
count=1, id=157, productName=VS2010 build 30319, version=30319,
adobe_upgrade.dll
- IMPHASH d8ab1023a8d497c22333105a507dd420
- SHA256 89182c32a746cd77a16bca84a86fbecc67d96cb0fceb157291deb627d90f4091
- MD5 f17e8af1449274c78606f173e4757e94
- SHA1 31461c85e17bc20cbc0742357d85e1885298bed0
- SHA512 276e05905cf4d7c1501edc003d4b20ec1cbe0098c97d6dd2f0ab0286d5faab9a6de8c94dddefa34ab7b35925ef4ae6ab6f38d3967910e311ebe83b5135756365
- SSDEEP 24576:rPTtYvfn1PFa64PN6DaI4G7zP38l3UBtgj:bJAxj7bY3UBCj
- TLSH T17735CF117A41C531F4AE21B54A39BB9E197DFAA20B2141C3F7E81E5D9D302C2EB3A357
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
30:46:07:54:22:5f:de:7a:e6:91:bc:f0:77:87:ae:a3:53:75:05:8b
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Chains
Apr 22, 2014
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Serial Number
1d:37:83:b3:de:cd:5d:bb:16:e3:3c:d3:a6:b3:bf:db
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 20, 2014 - Feb 21, 2015
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
1
Major OS version
5
Entry point
693646
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
setupapi
CM_Get_DevNode_Status
SetupDiGetClassDevsW
SetupDiEnumDeviceInfo
SetupDiGetDeviceInstanceIdW
SetupDiGetDeviceRegistryPropertyW
SetupDiDestroyDeviceInfoList
shlwapi
PathStripPathW
PathAppendW
PathFileExistsW
PathRemoveBackslashW
PathRemoveBackslashA
kernel32
WideCharToMultiByte
MultiByteToWideChar
OutputDebugStringA
LoadLibraryW
GetModuleFileNameW
GetTempPathW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
FindFirstFileW
CreateDirectoryW
GetFileAttributesW
FindClose
FindNextFileW
GetFileSize
SetFilePointer
SetEndOfFile
UnlockFileEx
WriteFile
ReadFile
CreateFileW
FlushFileBuffers
LockFileEx
LocalAlloc
LocalFree
GetCurrentProcess
InterlockedDecrement
lstrlenW
QueryPerformanceCounter
GetACP
GetCurrentThreadId
GetVersionExA
AreFileApisANSI
Sleep
UnlockFile
LockFile
GetFileAttributesA
DeleteFileA
DeleteFileW
GetTickCount
GetCurrentProcessId
GetSystemTime
GetSystemTimeAsFileTime
GetTempPathA
FormatMessageA
GetFullPathNameA
GetFullPathNameW
GetDiskFreeSpaceA
GetDiskFreeSpaceW
CreateFileA
CloseHandle
GetLastError
lstrcpyA
lstrcmpA
LoadLibraryA
GetProcAddress
FreeLibrary
GetEnvironmentVariableA
GetStringTypeW
WriteConsoleW
InterlockedExchange
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
InterlockedCompareExchange
IsValidLocale
GetProcessHeap
lstrlenA
CompareStringW
InterlockedIncrement
LCMapStringW
SetStdHandle
PeekNamedPipe
GetFileInformationByHandle
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetCurrentDirectoryW
GetLocaleInfoW
HeapSize
ExitProcess
GetStartupInfoW
GetFileType
GetStdHandle
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
IsValidCodePage
GetOEMCP
GetCPInfo
GetTimeZoneInformation
IsProcessorFeaturePresent
SetLastError
HeapFree
RtlUnwind
RaiseException
GetTimeFormatA
GetDateFormatA
EncodePointer
DecodePointer
HeapAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
SetEnvironmentVariableA
GetDriveTypeW
GetCommandLineA
HeapReAlloc
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileExA
HeapCreate
HeapDestroy
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
advapi32
SetEntriesInAclW
GetNamedSecurityInfoW
SetNamedSecurityInfoW
FreeSid
AllocateAndInitializeSid
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
shell32
SHCreateDirectoryExW
SHGetPathFromIDListW
SHGetFolderLocation
SHGetFolderPathW
ole32
CoSetProxyBlanket
CoInitializeSecurity
CoInitializeEx
CoTaskMemFree
CoCreateInstance
CoUninitialize
oleaut32
SysStringLen
SysFreeString
VariantClear
SysAllocStringByteLen
SysAllocString
AULAcceptsChallengeResponse
AULCloseSession
AULGetChallengeString
AULGetQualifyingSerialNumbers
AULGetUpgradeStatus
AULIsQualifyingSerialNumberForAnyProduct
AULIsQualifyingSerialNumberForProduct
AULNeedsUpgradeCheck
AULNextProduct
AULOpenSession
AULSetQualifyingSerialNumbers
AULSetUpgradeScenario
GetAsnVersion
asnInst_InstallerProductInfo_constructor
asnInst_getAsnProductInfo
asnInst_getAsnProductInfoInMem
asn_exit
asn_info
asn_init
asn_makePrivate
asn_makePrivateEx
Name
.text
Size
852KB
Virtual Size
852KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
157KB
Virtual Size
157KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
35KB
Virtual Size
75KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
51KB
Virtual Size
51KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=152, version=20115,
count=39, id=158, productName=VS2010 build 30319, version=30319,
count=1, id=170, version=31118,
count=5, id=171, version=31118,
count=1, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=17, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=197, id=1, productName=Unmarked objects,
count=129, id=109, productName=VS2005 build 50727, version=50727,
count=22, id=125, productName=VS2005 build 50727, version=50727,
count=54, id=175, version=30319,
count=211, id=170, productName=VS2010 build 30319, version=30319,
count=133, id=171, productName=VS2010 build 30319, version=30319,
count=1, id=155, productName=VS2010 build 30319, version=30319,
count=1, id=154, productName=VS2010 build 30319, version=30319,
count=1, id=157, productName=VS2010 build 30319, version=30319,
axlib.dll
- IMPHASH 78aeb6aa6ec1389415ef05f618cab8fb
- SHA256 00062fbe0ae2165aa0fbea76afe5d1ef0182e0698114762d422ca084344bb297
- MD5 cbad75f844e6cc771a27a9332369f91a
- SHA1 a149debba05fc3899f6b8ecd4e986088814d78c3
- SHA512 8f7c1777b110b35212e6e96b87c7baceefb074b62450a81462b20a67b774c60c2c4bb4d0892b9a5929353679253278008367f2b1fe02cc3ea39c51b3e36fecda
- SSDEEP 24576:bfh7426as2lgzYphBCCwfoLVuUx5t5gPcDksZl65G1gz0hPY:bfh74tfIhsCwfoLVZxyPckQY5G1gz0hw
- TLSH T1F625BF117A41C136F8EB00B1A9396B6E1D6DB9320B2180C3FBD47E989D315D2BB3A357
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
92:fa:e3:fc:4d:c2:ac:3b:43:9b:f9:09:27:ed:8c:c9:03:21:1d:d5
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Chains
Apr 22, 2014
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Serial Number
1d:37:83:b3:de:cd:5d:bb:16:e3:3c:d3:a6:b3:bf:db
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 20, 2014 - Feb 21, 2015
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
1
Major OS version
5
Entry point
668340
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\r2d2_7mbls\win32\r2d2\client\obj\output-dir\axlib\Win32-Release\axlib.pdb
setupapi
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceRegistryPropertyW
SetupDiGetDeviceInstanceIdW
CM_Get_DevNode_Status
SetupDiGetClassDevsW
kernel32
LocalFree
GetCurrentProcess
SystemTimeToFileTime
GetFileAttributesW
SetFileAttributesW
FlushFileBuffers
CreateFileW
lstrlenW
WideCharToMultiByte
GetACP
MultiByteToWideChar
GetCurrentThreadId
EnterCriticalSection
CloseHandle
GetVersionExA
AreFileApisANSI
Sleep
ReadFile
SetFilePointer
WriteFile
SetEndOfFile
GetFileSize
UnlockFile
LockFile
GetFileAttributesA
DeleteFileA
DeleteFileW
LoadLibraryA
LoadLibraryW
GetProcAddress
FreeLibrary
LeaveCriticalSection
GetTickCount
GetCurrentProcessId
GetSystemTime
GetSystemTimeAsFileTime
DeleteCriticalSection
LockFileEx
InterlockedIncrement
InitializeCriticalSection
GetTempPathA
GetTempPathW
FormatMessageA
GetFullPathNameA
GetFullPathNameW
GetDiskFreeSpaceA
GetDiskFreeSpaceW
CreateFileA
GetEnvironmentVariableA
QueryPerformanceFrequency
OutputDebugStringA
GetModuleFileNameW
GetCurrentThread
FindClose
FindNextFileW
FindFirstFileW
GetTimeZoneInformation
CreateDirectoryW
InterlockedDecrement
UnlockFileEx
LocalAlloc
lstrlenA
HeapDestroy
GetOEMCP
IsValidCodePage
GetConsoleCP
GetConsoleMode
GetLastError
GetFileInformationByHandle
PeekNamedPipe
GetCurrentDirectoryW
SetEnvironmentVariableA
SetStdHandle
GetLocaleInfoW
HeapSize
GetStringTypeW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
WriteConsoleW
GetProcessHeap
CompareStringW
QueryPerformanceCounter
HeapCreate
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetStartupInfoW
GetFileType
InitializeCriticalSectionAndSpinCount
GetStdHandle
SetHandleCount
ExitProcess
SetLastError
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetCPInfo
LCMapStringW
FindFirstFileExA
GetDriveTypeA
LocalFileTimeToFileTime
SetFileTime
FindFirstFileExW
InterlockedExchange
EncodePointer
DecodePointer
GetCommandLineA
RaiseException
RtlUnwind
HeapFree
HeapAlloc
HeapReAlloc
GetTimeFormatA
GetDateFormatA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeW
advapi32
OpenThreadToken
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegQueryValueExA
RegDeleteKeyA
RegOpenKeyA
RegCreateKeyA
SetSecurityInfo
RegOpenKeyExW
RegQueryValueExW
RegCreateKeyExW
RegSetValueExW
RegCloseKey
RegDeleteKeyW
GetTokenInformation
EqualSid
GetNamedSecurityInfoW
AllocateAndInitializeSid
SetEntriesInAclW
SetNamedSecurityInfoW
OpenProcessToken
FreeSid
shell32
SHGetFolderLocation
SHGetPathFromIDListW
SHGetFolderPathW
SHCreateDirectoryExW
ole32
CoInitializeEx
CoInitializeSecurity
CoCreateInstance
CoSetProxyBlanket
CoUninitialize
CoTaskMemFree
oleaut32
SysStringLen
SysAllocString
SysFreeString
VariantClear
SysAllocStringByteLen
shlwapi
PathRemoveBackslashW
PathAppendW
PathStripPathW
PathFileExistsW
AXLibCreateRef
AXLibReleaseRef
GetAsnVersion
IsProductAlreadyLicensed
IsProductWithLEIDLicensedByMagicSN
LoadLicenseForSuiteProducts
LoadLicenseForSuiteProductsForLEIDAndSN
RemoveAdobeIDEntriesForTrial
RemoveEULAEntriesForAXFB
RemoveLicenseForSuiteProducts
RemoveLicenseForSuiteProductsForLEIDAndSN
SetAdobeIDEntriesForTrial
SetEULAEntriesForAXFB
asnInst_InstallerProductInfo_constructor
asnInst_getAsnProductInfo
asnInst_getAsnProductInfoInMem
asn_exit
asn_info
asn_init
asn_makePrivate
asn_makePrivateEx
Name
.text
Size
800KB
Virtual Size
800KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
120KB
Virtual Size
119KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
28KB
Virtual Size
50KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
39KB
Virtual Size
39KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=152, version=20115,
count=33, id=158, productName=VS2010 build 30319, version=30319,
count=202, id=170, productName=VS2010 build 30319, version=30319,
count=1, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=19, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=208, id=1, productName=Unmarked objects,
count=17, id=125, productName=VS2005 build 50727, version=50727,
count=107, id=109, productName=VS2005 build 50727, version=50727,
count=128, id=171, productName=VS2010 build 30319, version=30319,
count=1, id=170, version=31118,
count=5, id=171, version=31118,
count=50, id=175, version=30319,
count=1, id=155, productName=VS2010 build 30319, version=30319,
count=1, id=154, productName=VS2010 build 30319, version=30319,
count=1, id=157, productName=VS2010 build 30319, version=30319,
dispatchtable.xml
- SHA256 28e633435fb67763c9bc6f50731821134fd6225dd52199d4e2915d77c3a56070
- MD5 809b07b9435d9f16a964bacaa482cfb5
- SHA1 f8757c367a4cd74eba45a9b010d81f92c341a581
- SHA512 3542f7d8ec7f7effa416a5914cd4d9838b159a1d2f1c12e29b434ed80b2e45305d2b6e90fd56929e0583ce2cf7d48ad7c378010b77ea6501fde95000cc5947de
- TLSH T1965159EB15B72597028B02F50DA2B82F5C3367AA44DCD05DF24FAD7323641A7869FB84
- MD5 SHA1 SHA512 TLSH
Adobe CC 2017/packages/P6/P6.pimx
- SHA256 c91fb2cf564355c4db075df73027f6ab9e7146d270a8671886c5535e2574ac8b
- MD5 6bb2e15f1d89ddb2746754b1fac46593
- SHA1 f931a793e0de15145ebb5db60ba7dbe32b0c1464
- SHA512 166e668790a016c6c445a94720dd1fbfd3e24eddd748cb55521b7a077b75d51cc28b9b8d0e0527622d7ad59e5160d6b4ba0325cc2954a976dbf03fe1381e2b82
- SSDEEP 768:CCxP86WNXqyiEIi9PFY7hF3LGi94VqICk3KKABh9gSlGFjShZGP5twRvaQ:CCxk6WNXqFK6htiqICkO9nhw0RvaQ
- TLSH T1266305AD11695BE1B407CE643C602E472A0FB17DF6B031F8B2984E7686D5A4F5D8B233
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe CC 2017/packages/P6/P6.sig
- SHA256 43a6860536f129e27f13e2d5e5e69c3cdd975ef8fdb7ccea31f7689f38019896
- MD5 180e14f2a493fb839b798089de0826f7
- SHA1 1c161b3503361264389d4835677c1359b8270896
- SHA512 050321d50e6dcf2f0bcb685b56df1e415c1abd635f2100230b14ac1261176ff56ac7120c290cc2b3453ff50c385f596a68caa0514036e171ac6dfee31bbb27f4
- TLSH T17031D91141A03B91D4740FB3E2A44A031D906B8C650B080878823C4F7F9F765AF4B4FA
- MD5 SHA1 SHA512 TLSH
Adobe CC 2017/packages/P7/P7.pima
- SHA256 42b61c467b289a0e56fce1bd34e01a3a5d267a616b095dbdc79cc4809515fc25
- MD5 e5c0dec28e36648e926f0d34d14b506b
- SHA1 1b5a5ed8eef44a8efee5f8509db64abb8f29b59a
- SHA512 6ddfe34cb6fa9a48b62c4b0a2008d8a681002755c8c4b4c9797869bcb186a635892ab0cfa102137226c9e60869256e8216e8280629ca65409e41d170584025ac
- SSDEEP 196608:1AqJvyQaGcmSYdaG1ddT631gK3y21h2RpmzBft6Tr8pCH3hAXADrWKP:1ZvsmSBG56J3F4pYI8AHKQDrH
- TLSH T172863316D54E8031E07FF7791EB206E3FCA4885A952134BB4876C0760EA36F91BD9F89
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe CC 2017/packages/P7/P7.pimx
- SHA256 1121e73bcafc4c8f3cf19e0cbf8674b278ed8e888cf13bf1387649869f40265f
- MD5 16d53c337e661fd91b304c4ac74a6347
- SHA1 aa6a9a836f7ebe5b85f7fef0704db7910b608396
- SHA512 bbbe0b9d2911718b2c6d51a2d59cf272ed6dfb1548d2da7ef759b70ca6a989b80b2101e8cede4724eff94820ce28a7be4b0cc73b39a579b85e856bfca1ec9ad1
- SSDEEP 768:iypb7yGLy9rRfe7vH58VJDJxIq1ssiC1aMhQ3:iM2+y9rWZqPssiC1aUQ3
- TLSH T1D843D2AC21691BE17407DE603D601E472A4FB17DF6B431F8B2984D7A86D9A8F4D8B133
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe CC 2017/packages/P7/P7.sig
- SHA256 62e5c7e276685b96d00780a5671f8a5c40d72678faa77170afa579935db2a8c3
- MD5 06ffccd59010e9c86d4deced3ebfad27
- SHA1 26741933baece126723f85ab665ada6edd34fa4c
- SHA512 24d8863cd893df637e2ef14d79b47ad8481bd8154d49a2b2f265f64ec15b407682ec5080017d29392b300216bec1faf5080cb0eef7f22ae3deb44e3b5f1104fd
- TLSH T1D931D774A0E139D0E23A0BF3B4194884EE54C58DA3BA5519B0E6084EED739904B137E8
- MD5 SHA1 SHA512 TLSH
Adobe CC 2017/packages/UWA/UWA.pima
- SHA256 9383ca11a8c52f54da1ce31a433db8040a738de2d221058cec9d66dca967ec36
- MD5 b8a0f783442ad1d5b63a738ab4bf9561
- SHA1 ad69bf2487783956c8c0704ae5dbd89ddd95b4a7
- SHA512 d70b991a5a9ccf0c9136ae236d3630664c9f73be9eb683cb0d1aee686355aaefff4ac5f99f71d826afab7ec767a5dd5c1a4b6e660c31941c69bfb5b4328c69db
- SSDEEP 98304:LJoAuGfaEp2QGkzoPytFET33OxOgk7hUCAgn/XzO+VeZDAeX+vLL8+aW5ZG7V4zf:LKApfaWzoP4FKn6OgkVUCAgvznVADOLZ
- TLSH T1D1563333A055DC13CD29ABB14721C0678635C08B52ABF8B66F65B28437FE14E4DFAE46
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe CC 2017/packages/UWA/UWA.pimx
- SHA256 a77603d92b12b533ef19a9721d2a98255d18b0a523bf8d8ed920d9cf3423f1e6
- MD5 f2e0f47abb2d05c407a4f6c8adc6b165
- SHA1 05105010fae570a57c2cd712c328375c4ef20d16
- SHA512 0df4004e41575977b6689623779651f4bb4da4c98946d7d6ab272ff3c27a4238f17ca31e3b5c591f51a8acbc90986e4838d90415926f2509015d8ad180e83322
- SSDEEP 1536:6a3JFK/q3RvA0VLd2gkeYxVkAj2IBLj7EJhliqH6akj6kVT:UwRzdkGjK/gJhcbzV
- TLSH T1C6C3E2AC11695BE17407DE603C605E472A0FB17DF6B031F8B2A84D7A86D9A4F4E8B533
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe CC 2017/packages/UWA/UWA.sig
- SHA256 7a228c82c76dd303dfa57327c00ed9701973f8e0bebb122f0b2652418e109fce
- MD5 618dd12ab8ff63769cc4958e1bd95dbc
- SHA1 47a492beb9bd36c4b396c199221ae39b0e6486d5
- SHA512 de10df1ed1d2a582df2edc2fbdfbcc2dd9f0e4888811c8e90b5dde870dec0c20d9032e70ae62c8b2c2d6c2e08e85991e37e125ada8285aa0ed7e3d4e1d0540f2
- TLSH T15231079991E86EB0D2709EA3543E4B42C6CDE5CE1B3944187DC3416F6F6E460A8F70FA
- MD5 SHA1 SHA512 TLSH
Adobe CC 2017/packages/core/PDApp.pima
- SHA256 03bf5557ee7761666f8443f3237063603f36aa7d7edb2ea79f5d68d00babf7a6
- MD5 ab24e3edaba13b5be01aa054a5aed5c1
- SHA1 94383311b1a2f103ac33d729d2d5b91c64f80dcf
- SHA512 1fbb2168245dc476a84295da4d3eb88a715a8b685eded077448e772ab558aece2bf6671dc860ac054214a96835196d23820b2912e009ef006937d6dc58dbecdd
- SSDEEP 196608:4NHW9bmUtsKSM31S6p9Q6ShLp7F/jtP1z65vJbIdQrfJHUehuKBbhO7xN3ezv6b5:qW9FlSVRhFJ/RVEvJMCjhxJU7TuuH
- TLSH T102D6337B6AC75762EC4ED73486D13A0ACCE12819D2D1BAF3C2D811E70DF6A6E1295C0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe CC 2017/packages/core/PDApp.pimx
- SHA256 0f5be120218281093702f31812523573fee56f110322abff48284001a6c2e664
- MD5 409004721e7faac6ea83309038613a4d
- SHA1 c7a922d32c81d0662d68cae85dc3247c0047a6ff
- SHA512 bc52d30ff11178fce754d91788bbf3482f7e1b8c2c5a9b3feb022f8cb429d29aab07ad44d08caedf7213cbfa25c9db0f382f8b62b9af410ab9ab23135966e84f
- SSDEEP 1536:NIPrpYW0cSPBH6hFge2bm2XR7LhUFUXjXM9kLB6+LvpPQRtJmneyN9SZz0oRRAu0:qicoHXe2rBxUFWvLvNQHJ3yNYZz0Yvah
- TLSH T1A504D2AC11295BE1B407DE653C605E472A0FB07EF6B031F872980EBA86D5A4F4D8B537
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe CC 2017/packages/core/PDApp.sig
- SHA256 c27eb7ef36091a37f8b54d3392a5d700824c8dd8c856ae150678bd280b1a451e
- MD5 f8cfde5026a1bb652b10ddcb8e940d67
- SHA1 5be1460731b45b7af04334fdc1d2de16d3cbeca8
- SHA512 55447272b8baf32181317eb787577f36040d1b893bc53d069cadce494436afc6a96da4880da89a09f86e419c8a9725e4d6b4c8dea9c92a5ec61b0ab91d2d2d71
- TLSH T1F931D7049AE986EF74392BF967079C834644E2BA664C1648BB81446DCFAA52D031B0EE
- MD5 SHA1 SHA512 TLSH
Adobe CC 2017/packages/install.sig
- SHA256 4a0c975271a1bc8bc1667e281942a5f961151c88207edd8fc7815b8d6ad9f003
- MD5 0b3195693d2fe8c04e10f3dd07245925
- SHA1 6ef8ba55205ce8291679c2b2c5a2dfedacc4f16e
- SHA512 7ef3964b479d515c78eed6e56af0b32215eef65ffedfc9d0a70fbe2ae0f57ef1dcc8c173f967c3abeb64be178510a4ac2398fbff02836988ad2ffc082419e34c
- SSDEEP 96:80Vtni2mFPCLTUmLLlBfXhdYKzKTyOMxd0YEmr:w/CDlZhuKPOMHCmr
- TLSH T19902D5C74B8963AD2AEE33FBA99DC4D65A774C0FD9E405247990D07EC62382E03DB524
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe CC 2017/packages/setup.exe
- IMPHASH 1d1577d864d2da06952f7affd8635371
- SHA256 c5fa5f1dea6cccb256bdb292ee949731f01c42cc11c92892c104b95580f311ca
- MD5 15ac0d62aa21a2bab12996781bdc0c50
- SHA1 aecb07ef8fae7df4a7bd7fcf9fe748be28c17dcc
- SHA512 4923d4cdf2b55fa712ba07643f0009d1ca20f5f31128f5ea83f02d5793409a27f99970fc9c364d403422f6f19903b7462541d799cfc32eef9fe4dd6931305bf6
- SSDEEP 3072:Cyg5QeNeW2MVhTB/3ilknk6M3BFSXkndowSmm6MyC/Isrz:Fg5RNDianZM3BFIkndNSmmByAz
- TLSH T141D38E5377D2C5F7D0E212B109912F9161B6FA3D071B4983B780790BBB729C8E63E686
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Minor OS version
0
Major OS version
4
Entry point
79935
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
comctl32
ord17
shell32
SHGetSpecialFolderPathW
ShellExecuteW
SHGetMalloc
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetFileInfoW
ShellExecuteExW
gdi32
CreateCompatibleDC
CreateFontIndirectW
DeleteObject
DeleteDC
GetCurrentObject
StretchBlt
GetDeviceCaps
CreateCompatibleBitmap
SelectObject
SetStretchBltMode
GetObjectW
advapi32
FreeSid
AllocateAndInitializeSid
CheckTokenMembership
user32
GetMenu
SetWindowPos
GetWindowDC
ReleaseDC
CopyImage
GetKeyState
GetWindowRect
ScreenToClient
GetWindowLongW
SetTimer
GetMessageW
DispatchMessageW
KillTimer
DestroyWindow
EndDialog
SendMessageW
wsprintfW
GetClassNameA
GetWindowTextW
GetWindowTextLengthW
GetSysColor
wsprintfA
SetWindowTextW
CreateWindowExW
GetDlgItem
GetClientRect
SetWindowLongW
UnhookWindowsHookEx
SetFocus
GetSystemMetrics
SystemParametersInfoW
ShowWindow
DrawTextW
GetDC
ClientToScreen
GetWindow
DialogBoxIndirectParamW
DrawIconEx
CallWindowProcW
DefWindowProcW
CallNextHookEx
PtInRect
SetWindowsHookExW
LoadImageW
LoadIconW
MessageBeep
EnableWindow
IsWindow
EnableMenuItem
GetSystemMenu
wvsprintfW
CharUpperW
MessageBoxA
GetParent
ole32
CreateStreamOnHGlobal
CoCreateInstance
CoInitialize
oleaut32
SysAllocString
VariantClear
OleLoadPicture
kernel32
SetFileTime
SetEndOfFile
EnterCriticalSection
DeleteCriticalSection
GetModuleHandleA
LeaveCriticalSection
WaitForMultipleObjects
ReadFile
SetFilePointer
GetFileSize
FormatMessageW
lstrcpyW
LocalFree
IsBadReadPtr
GetSystemDirectoryW
GetCurrentThreadId
SuspendThread
TerminateThread
InitializeCriticalSection
ResetEvent
SetEvent
CreateEventW
GetVersionExW
GetModuleFileNameW
GetCurrentProcess
SetProcessWorkingSetSize
SetCurrentDirectoryW
GetDriveTypeW
CreateFileW
GetCommandLineW
GetStartupInfoW
CreateProcessW
CreateJobObjectW
ResumeThread
AssignProcessToJobObject
CreateIoCompletionPort
SetInformationJobObject
GetQueuedCompletionStatus
GetExitCodeProcess
CloseHandle
SetEnvironmentVariableW
GetTempPathW
GetSystemTimeAsFileTime
lstrlenW
CompareFileTime
SetThreadLocale
FindFirstFileW
DeleteFileW
FindNextFileW
FindClose
RemoveDirectoryW
ExpandEnvironmentStringsW
WideCharToMultiByte
VirtualAlloc
GlobalMemoryStatusEx
lstrcmpW
GetEnvironmentVariableW
lstrcmpiW
lstrlenA
GetLocaleInfoW
MultiByteToWideChar
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetSystemDefaultLCID
lstrcmpiA
GlobalAlloc
GlobalFree
MulDiv
FindResourceExA
SizeofResource
LoadResource
LockResource
LoadLibraryA
ExitProcess
lstrcatW
GetDiskFreeSpaceExW
SetFileAttributesW
SetLastError
Sleep
GetExitCodeThread
WaitForSingleObject
CreateThread
GetLastError
SystemTimeToFileTime
GetLocalTime
GetFileAttributesW
CreateDirectoryW
WriteFile
GetStdHandle
VirtualFree
GetModuleHandleW
GetProcAddress
GetStartupInfoA
msvcrt
??3@YAXPAX@Z
??2@YAPAXI@Z
memcmp
free
memcpy
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
??1type_info@@UAE@XZ
_onexit
__dllonexit
_CxxThrowException
_beginthreadex
_EH_prolog
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
memset
_wcsnicmp
strncmp
wcsncmp
malloc
memmove
_wtol
_purecall
Name
.text
Size
76KB
Virtual Size
76KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
13KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
34KB
Virtual Size
34KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
Adobe CC 2017/packages/setup.xml
- SHA256 6e55e580c40e472b99b30e31506047e4e4f4a6c48a176ea2a81139744f2ce8d8
- MD5 153e81faaec182dfd137bcc313e3045e
- SHA1 b3199f8b361f3715ea142b4ae0dffd7329234ac5
- SHA512 e771891e89a4ef8d6017ebc05b0e05c8f5170a9d95803e77899c521ac3d23749a2464553958601baf7c9daae129e492627053c8f73e0001bbf62e1156fcac104
- TLSH T1CD21E1CA2A30D302564B287FEE7B3418AA2F66BFB639D091B505957B960136E360345D
- MD5 SHA1 SHA512 TLSH
Adobe CC 2017/payloads/AdobeAudition10-mul/Assets1_1.sig
- SHA256 22033dbb91e1852831a79bf7b08213a3630a0ae405736381b484e73686a2ab77
- MD5 32f9ce61066d822bf73ffd913ce782e9
- SHA1 18884f19d3c7e6f4de7555f6507a28cca9d7c42d
- SHA512 3bf3813a9a775e6e2554f51018c96df7b68aa141e62007f81ad94e3caf7280bbf3a3dd0dee65c9cef0d90a240d6e871dd405416a19a7bff49b7b1a89f3166b95
- TLSH T13621E77CD4A048C087AC3B752C44CC4266E0BBCBAE7E410618F201CFAB1A23ADC068E6
- MD5 SHA1 SHA512 TLSH
Adobe CC 2017/payloads/AdobeAudition10-mul/Assets1_1.zip
- SHA256 b0e9f755ed9c2f42f89221b325fb6b0c9ac90308551f8284e6952be70d3426a2
- MD5 a197491babad11852de30e0efb772486
- SHA1 3eb955b996c35bbb565d58d21a95169d1685b5e2
- SHA512 1dcdfdc4b5a2a6ce1f8544c485a4583559ba9b22cbaa892f7c406be4572984d5fdfd1bb06d3e6221b7d496a62b57a611eb973336d02d85f8046bcad44b002d2f
- SSDEEP 6291456:3Re3E11RLpGXHL9aCwLY1/1B4W3tSDHFkSypblLDrqLqL9TdVmfAfm:EcUXrwY5ZdsHFkFLD644Wm
- TLSH T14EC8335ECE11BAC5E62FB23B4A0A6F08ACB4604E64070826A7FC05757D853EF57DF921
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe CC 2017/payloads/AdobeAudition10-mul/Assets2_1.sig
- SHA256 586239b37fbf2c2bac2fbeb41f59427ce4e71c98046350a0d1164f82a72eb0dc
- MD5 22a5c39725d5e6940bd9bfb72d969789
- SHA1 f84a3e03a809356e2e71673123f32fe3bfc5b100
- SHA512 529d24c6a366f90267a23615f4620591d5b90f9acdf508ba8e6558f2ebc12f49340f8ebcfec96371ac9da8d676234df15472144a8bcb5174ada028478d4061ad
- TLSH T18221E77CD4A4588087AC37756C44C84266E0BBCBAD7F450218F2018F6B5A23ACC068E6
- MD5 SHA1 SHA512 TLSH
Adobe CC 2017/payloads/AdobeAudition10-mul/Assets2_1.zip
- SHA256 c512d8ff261f461ad922dbc702b3b78e69e9b7f67d52a846d6c29336fdb77eef
- MD5 02c9a8314eb2668701e9f194b0260adc
- SHA1 3d31b2ed93a60818956d333406f0edb0e92afdc1
- SHA512 8482bbf793ffd667c08332fbcadb3a6e178429f4956360a334c243f0e5e1d492b81de746f352d2628759e16ffa836b2c73815b2bac69825f1478ba6a8deecb11
- SSDEEP 768:W12t6i6zx195C7qyIVozfpOvLArRZZhuh12t6i6zx195C7qyIVozfpOvLArRZZhL:rt69j5Cfz4v0rRZZhuqt69j5Cfz4v0r7
- TLSH T12E13E0E5A675363BDEF0F2B80026DB98BDD50EE49A5B379609024C4A3B7C4438394ED1
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe CC 2017/payloads/AdobeAudition10-mul/Install.db
- SHA256 51a6ef962a96b89a6444e62f36e7f6f6e13f7bbea3b8db439e4cc33dc7d86fc9
- MD5 f8c70c6fdcf7fec14631fd99c0fa2f50
- SHA1 3462d6fa32fc726f6dc922f37962533d6893f005
- SHA512 e8df334ca09c871f1dc8d0cadbfec600f4d856de628cbb50a9edd522d147fdf2ea31dad301175869fb99ce5deb650b7bd1fab64032d5e0684b915765df8fca0c
- SSDEEP 3072:Vb71G+lnOsiIH1sQtSaivdeZSAiFuLYU4oG05Oc2AoXl:V78+pOshHeQUVlKOcm
- TLSH T1FD441F6710D79122F302A6B2BAF61E4F85B834654E45355127E1307B72F72A3FA31EE2
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe CC 2017/payloads/AdobeAudition10-mul/Install.sig
- SHA256 d89df20b253af3baf794b67b3a324041b7ab2777d3cdabfa3146bc82e0412639
- MD5 f42fa3729ce59fc29064676dd60d2708
- SHA1 8376dc2095b625b3f515baf616cbdadcaa9d1ebb
- SHA512 b99d0cc8d40ce6ff0c751933cda401b257378d7d74c1000331f4b8e2632154e86763dd3e7cf4e6d60a5f1340030ba1c6236cca86ca12df2ff3a4fce017ea9cf5
- TLSH T1292187A5A0915DB29970ABD11B781F0B10206BC64DE0D80CAD81ECC72B9681476467E1
- MD5 SHA1 SHA512 TLSH
Adobe CC 2017/payloads/AdobeAudition10-mul/Media_db.db
- SHA256 6a9d02e027c59b5b2ea175de0c2c75fce4ef8cd78e53de86f89a12382f9627bd
- MD5 a4ed567d817a3def9cb9b6a9591ad791
- SHA1 fc53ca640aac33c905a9c58e05222e454a1da365
- SHA512 8ed772f2279ed8d152efb64507be77f988fe1c8626a3156081a6aee2f0aee0c900013d78177aa78823d0653c9307db10f43bac89828f5a7143ab3d6b36dbd683
- SSDEEP 24576:xi9DJY+GgaXWnyOfYZSTuDosNSQt+EAgvP6+lEm9LVHXCMmRI1gVA:U9lYgaXWnyOfYZSTuDosNSDBMmRIj
- TLSH T17BB57D6975C43E7FD58343B6E6819B55FBADC038E262E25071DE80AF22C2D98C33E594
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe CC 2017/payloads/AdobeInstalledCodecs/Assets1_1.sig
- SHA256 cb489dcbd00f07cf08c082233e2fbcdb9c763f263a7b665b2ed00ca51b294abb
- MD5 5190c800ab4655cdeac57d86a6857e06
- SHA1 fea94a0f4140f2a09a9a993b83250b0bfc4efd03
- SHA512 f586fd965d2c43427d4160803aa87c522ff2a1a68e1c49ca3d9d6af0d76d1f20fe451c1a09517d31312878fe2c767091e31f0fe7bd52bb3d1b4d63a2e0308a09
- TLSH T12521DA6CD3D1B970E1A74FF66263CA012790DB084578290430FB590A5C4047233D35EC
- MD5 SHA1 SHA512 TLSH
Adobe CC 2017/payloads/AdobeInstalledCodecs/Assets1_1.zip
- SHA256 7e1fcec321f6b7a080190f5a148ff77297120fe2bf277a1c09707121b98b603c
- MD5 eb252f07268a9a5565671017c50f1f8d
- SHA1 e5c9f976d1bc4799f9e202c92f31178052e25487
- SHA512 d633f3e47ca467900cd138f1209466e83b72ba6d28c9031d62469cb8ad5c1a81e89bce0bc8b725935d2ba0fb7804ee33341a262374ee94c8881705b660aad603
- TLSH T152B0021DDD07D020E42002B3DD327B8A377572C70018854324B876FC4E8E7C0CCC0148
- MD5 SHA1 SHA512 TLSH
Adobe CC 2017/payloads/AdobeInstalledCodecs/Install.db
- SHA256 c124d851607e07996666fc40b8a7cf800d388095b65be4e38545c7dea16e4289
- MD5 670f758403d27a79ad3f5432d6f98a03
- SHA1 7ecc359a462eefce9a29922b2ac9244415aacda1
- SHA512 e6981d9a60cb8f86512e9943a90c3e211da064c7c374b72f1dc4c34707bbbf2f9fb89c77e6c637e3b5690e8065afe006cb75e96330cfc3c24c47393f1ddcf06f
- SSDEEP 768:phOhOUTPt1NQURZSxYGafUZOEAGpg6hRRdQdcqRVAOchKPB1FbvGtMzFV1ASj:W99Yw
- TLSH T16463ADCF5F5E3212C9E14131D9C203E35C3C565EA339BAE03AA251E2BEA24B765715F8
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe CC 2017/payloads/AdobeInstalledCodecs/Install.sig
- SHA256 ff50b44e1fb0b7c6f539982ce16418e88d8b41247edb8abbfd8b2a15598590e5
- MD5 df2a158b9c87961a8df3e20ff3c90620
- SHA1 05f0c48ba580d5c76d4108702da2cd3c9eb74078
- SHA512 d6fa97735036f6a9d8f45242ae3dbe70f5b27a2826ecfa5d27449076eb03a9d82ac6486fba74f71840104ea329a2090c997d97f2de77ff795440a091d23d34a7
- TLSH T178218428605958BAF6BE99E58BB3D9093B5912432D9E9A0835F7520F09CA0212107534
- MD5 SHA1 SHA512 TLSH
Adobe CC 2017/payloads/AdobeInstalledCodecs/Media_db.db
- SHA256 e2546ae58b2bd46164240f167375f3e614ac2b0dc6515a490e1085db05b4951d
- MD5 fe05da2c50942437dc6a9d8825d1d5f1
- SHA1 8ff0e1c55bccd6eaa4e8d7f787bf6f818bb8aba6
- SHA512 f681020c7decf1a90cff1a2780fa51fabf42cb587ff7afdde13e97e753973bac642017bb68d592c3d1e8700997f56bd47549a0ac27b6a2507c46a81a2bd66585
- SSDEEP 384:zpIN3QjEZ3Sertzgp1+U6ERMw96S2PhwcSeyuVgCtKqyQxW:9Gip1+U6+2PhwyKQxW
- TLSH T1141325FE8ED533F9C171963A06E1CE10F832A549BBA170D9A7AC46B2CB67428651F01D
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe CC 2017/payloads/Media_db.db
- SHA256 f0810d418da4a471ca3d7e59e4b0fd5f4f5023a0e680e45331c31e6e3ac1ca42
- MD5 385c98e676c2135161b9ae384e91bdfd
- SHA1 960e02ceacbbd1f4a205fce78da3f9841f085e97
- SHA512 68907012783139c2a1c7ae3b4a7a953777e3f174a955f0ecd3da15b6b988bd16afa12350ff8715cde5a1e920be0d6f17f95feae60b12665a44625a082ad0ee79
- SSDEEP 3072:XqEaYzd+djwLWn/Re13nxtUBH5g7QjhK0iFL1vpDIaN3JyJeXVdPDuZkjeV1j6qV:X5apdn/Re13nxtUBH5g7QjhK0iFL1vp6
- TLSH T16FD3B76D8FD0B7AED56557FA68E05E08FC34F28B36E019D456C6629A821F9C1C03F236
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe CC 2017/payloads/Media_db.sig
- SHA256 02625856c282f588078ec0c8c4888e51ce47e214837ca2b42038a81b49d05e2c
- MD5 305e891bc84829de9ba8245fcc23b64c
- SHA1 ae815928aa840db4328f7416552dd0064f2b15d1
- SHA512 265dcf6c8793e3972b2ddeb65fb5582aa2265a5aecc4b4aeaf22bcb1a26cf72ac53625f96e474d0d129e261d28584d24eed3190f901bc415a8f22bf5fb483cda
- TLSH T1A5210A1A3BC6DC3162B440A67BB1D004BAE08D370CA808E930740E2E6296051AB474F2
- MD5 SHA1 SHA512 TLSH
Adobe CC 2017/payloads/Microsoft VC 2005 Redist (x64)/Media_db.db
- SHA256 b5a79aa8051ed18b33d46ff4cf19cb5b98507b081f53a94d27c7d5a1ac689d9c
- MD5 3d4cfc8ad5532be7a2a42edfe8330ef0
- SHA1 6e8b1222b43982d2f2c420c79b8166d3919956eb
- SHA512 e86e47cf6a39452e6b2ce4df2b3c13f272136afc9f8831c0c56483cec450ab1a2f9cff7e98fbcf3caf9e6d2440e1fe48253a106ed9b448eb395436f4681dcffb
- SSDEEP 384:lbX63O+49AYggLXAl4XJLdcXUXiX4XfXj7XrNX37Xr:Y3O+izLd
- TLSH T1F6C2738DCE547764EAB0DAF0C1C0EE60AD0D5B5FAF9042D453D462F9D28B8C3A13A43A
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe CC 2017/payloads/Microsoft VC 2005 Redist (x64)/vcredist_x64.EXE
- IMPHASH 0ebb3c09b06b1666d307952e824c8697
- SHA256 0551a61c85b718e1fa015b0c3e3f4c4eea0637055536c00e7969286b4fa663e0
- MD5 56eaf4e1237c974f6984edc93972c123
- SHA1 ee916012783024dac67fc606457377932c826f05
- SHA512 f8e15363e34db5b5445c41eea4dd80b2f682642cb8f1046f30ea4fb5f4f51b0b604f7bcb3000a35a7d3ba1d1bcc07df9b25e4533170c65640b2d137c19916736
- SSDEEP 49152:+r67+stI6RWGTAdyvlADUrpTmcOgohwJpEM5grO3oc1OXZViFeRyDErkLUMHzkRN:AM9l8pUr9m30L5grOQXZKAsErkbQRN
- TLSH T17DE5331262D08137F6E3A7F11AEC9DB31631FE932AB2161A0212687F5CA73E4517C71E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
72:eb:ec:84:ec:eb:2c:99:f6:93:1a:22:55:c2:43:bc:37:c7:56:59
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 17, 2011
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:b2:9b:00:00:00:00:00:15
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 21, 2011 - May 21, 2012
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:06:94:2d:00:00:00:00:00:09
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
1
Major OS version
5
Entry point
25692
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
wextract.pdb
advapi32
FreeSid
AllocateAndInitializeSid
EqualSid
GetTokenInformation
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA
RegCloseKey
RegDeleteValueA
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegQueryInfoKeyA
kernel32
LocalFree
LocalAlloc
GetLastError
GetCurrentProcess
lstrlenA
GetModuleFileNameA
GetSystemDirectoryA
_lclose
_llseek
_lopen
WritePrivateProfileStringA
GetWindowsDirectoryA
CreateDirectoryA
GetFileAttributesA
ExpandEnvironmentStringsA
lstrcpyA
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
IsDBCSLeadByte
GetShortPathNameA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcmpiA
RemoveDirectoryA
FindClose
FindNextFileA
DeleteFileA
SetFileAttributesA
lstrcmpA
FindFirstFileA
FreeResource
GetProcAddress
LoadResource
SizeofResource
FindResourceA
lstrcatA
CloseHandle
WriteFile
SetFilePointer
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
SetCurrentDirectoryA
GetTempFileNameA
ExitProcess
CreateFileA
LoadLibraryExA
lstrcpynA
GetVolumeInformationA
FormatMessageA
GetCurrentDirectoryA
GetVersionExA
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetTempPathA
GetSystemInfo
CreateMutexA
SetEvent
CreateEventA
CreateThread
ResetEvent
TerminateThread
GetDriveTypeA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
ReadFile
LoadLibraryA
GetDiskFreeSpaceA
MulDiv
EnumResourceLanguagesA
FreeLibrary
LockResource
gdi32
GetDeviceCaps
user32
ExitWindowsEx
wsprintfA
CharNextA
CharUpperA
CharPrevA
SetWindowLongA
GetWindowLongA
CallWindowProcA
DispatchMessageA
MsgWaitForMultipleObjects
PeekMessageA
SendMessageA
SetWindowPos
ReleaseDC
GetDC
GetWindowRect
SendDlgItemMessageA
GetDlgItem
SetForegroundWindow
SetWindowTextA
MessageBoxA
DialogBoxIndirectParamA
ShowWindow
EnableWindow
GetDlgItemTextA
EndDialog
GetDesktopWindow
MessageBeep
SetDlgItemTextA
LoadStringA
GetSystemMetrics
comctl32
ord17
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
Name
.text
Size
38KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
3.0MB
Virtual Size
3.0MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=13, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=134, id=1, productName=Unmarked objects,
count=1, id=94, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=27, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=90, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
Adobe CC 2017/payloads/Microsoft VC 2005 Redist (x86)/Media_db.db
- SHA256 6dc7a478bad767664d70b4043d1a2d1bb5b11ca06e8a45dd1eb2c94a06ce3316
- MD5 f617e1366b12c24b244ef33c13caf567
- SHA1 da0bcc08177e9be9ef0f087c7efb1a7ef3f2ec17
- SHA512 ef82f6be86da3d13cba6d9d78a9fa30e9020fb13abd5685021a635fdc89d0f5a84f7542cf4ca2a041925ee97055490103f79153c875ea8a84c8e4e9b06aa4e6f
- SSDEEP 384:l4XF3O+49q0XdLXsl4XNzdcXQXWX0X7X37XJhNXb7XJh:o3O+ipzd
- TLSH T1DDC2958DCE547758EAB0DAF0C2C0DE50AD1D5F5FAFA052D453D462F9D28B883A13A43A
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe CC 2017/payloads/Microsoft VC 2005 Redist (x86)/vcredist_x86.exe
- IMPHASH 0ebb3c09b06b1666d307952e824c8697
- SHA256 4ee4da0fe62d5fa1b5e80c6e6d88a4a2f8b3b140c35da51053d0d7b72a381d29
- MD5 ce2922f83fb4b170affce0ea448b107b
- SHA1 b8fab0bb7f62a24ddfe77b19cd9a1451abd7b847
- SHA512 e94b077e054bd8992374d359f3adc4d1d78d42118d878556715d77182f7d03635850b2b2f06c012ccb7c410e2b3c124cf6508473efe150d3c51a51857ce1c6b0
- SSDEEP 49152:rqGRIgg2SirwkF9xdtb43lyGKCafpKkiwnaDahmPzpY4FPyaza:rxxLFfY/KCCpKk9aWMzZyau
- TLSH T1DDC5331259C4D23AE0A213F45DFD2A734B3D7CA8B72027AFB78250968D262D164357FE
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
5d:9a:9e:30:e8:b4:79:bd:b9:25:8e:b1:69:72:67:0f:90:ec:0f:7f
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 17, 2011
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:b2:9b:00:00:00:00:00:15
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 21, 2011 - May 21, 2012
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:06:94:2d:00:00:00:00:00:09
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
1
Major OS version
5
Entry point
25692
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
wextract.pdb
advapi32
FreeSid
AllocateAndInitializeSid
EqualSid
GetTokenInformation
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA
RegCloseKey
RegDeleteValueA
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegQueryInfoKeyA
kernel32
LocalFree
LocalAlloc
GetLastError
GetCurrentProcess
lstrlenA
GetModuleFileNameA
GetSystemDirectoryA
_lclose
_llseek
_lopen
WritePrivateProfileStringA
GetWindowsDirectoryA
CreateDirectoryA
GetFileAttributesA
ExpandEnvironmentStringsA
lstrcpyA
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
IsDBCSLeadByte
GetShortPathNameA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcmpiA
RemoveDirectoryA
FindClose
FindNextFileA
DeleteFileA
SetFileAttributesA
lstrcmpA
FindFirstFileA
FreeResource
GetProcAddress
LoadResource
SizeofResource
FindResourceA
lstrcatA
CloseHandle
WriteFile
SetFilePointer
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
SetCurrentDirectoryA
GetTempFileNameA
ExitProcess
CreateFileA
LoadLibraryExA
lstrcpynA
GetVolumeInformationA
FormatMessageA
GetCurrentDirectoryA
GetVersionExA
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetTempPathA
GetSystemInfo
CreateMutexA
SetEvent
CreateEventA
CreateThread
ResetEvent
TerminateThread
GetDriveTypeA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
ReadFile
LoadLibraryA
GetDiskFreeSpaceA
MulDiv
EnumResourceLanguagesA
FreeLibrary
LockResource
gdi32
GetDeviceCaps
user32
ExitWindowsEx
wsprintfA
CharNextA
CharUpperA
CharPrevA
SetWindowLongA
GetWindowLongA
CallWindowProcA
DispatchMessageA
MsgWaitForMultipleObjects
PeekMessageA
SendMessageA
SetWindowPos
ReleaseDC
GetDC
GetWindowRect
SendDlgItemMessageA
GetDlgItem
SetForegroundWindow
SetWindowTextA
MessageBoxA
DialogBoxIndirectParamA
ShowWindow
EnableWindow
GetDlgItemTextA
EndDialog
GetDesktopWindow
MessageBeep
SetDlgItemTextA
LoadStringA
GetSystemMetrics
comctl32
ord17
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
Name
.text
Size
38KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2.5MB
Virtual Size
2.5MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=13, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=134, id=1, productName=Unmarked objects,
count=1, id=94, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=27, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=90, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
Adobe CC 2017/payloads/Microsoft VC 2008 Redist (x64)/Media_db.db
- SHA256 84c68a394eecf4b7ca69e41ff0b311fb6ac8720395a99f100a28125c53c88e0c
- MD5 597853348778630d119a01c3373b6e71
- SHA1 227e1a12305996647f6c50c52a8b36939504822a
- SHA512 d4b59a92b3f823ab533da65b48e651092be84e35a19cfaddd2ff6da72816138b552043de0e9f75e995cd55164afb6352d4fb0130e5c47d8b293f253806e374b7
- SSDEEP 384:l/8q8O8q3O+49DTgLL8AG48Fh8gP8U8i848f8j78rN8378rR:53O+iH+
- TLSH T146C2768DCA647358EBB09AF5C190DD60AC0DAE5F6BA046E453E952F9D2CB4C3913F036
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe CC 2017/payloads/Microsoft VC 2008 Redist (x64)/vcredist_x64.exe
- IMPHASH 092eb6daba2f17cbda102fd1a32acd00
- SHA256 b811f2c047a3e828517c234bd4aa4883e1ec591d88fad21289ae68a6915a6665
- MD5 e2ada570911edaaae7d1b3c979345fce
- SHA1 a7c83077b8a28d409e36316d2d7321fa0ccdb7e8
- SHA512 b890d83d36f3681a690828d8926139b4f13f8d2fcd258581542cf2fb7dce5d7e7e477731c9545a54a476ed5c2aaac44ce12d2c3d9b99c2c1c04a5ab4ee20c4b8
- SSDEEP 98304:98I8/pCVmdbx2rU/xFnTBU8UeNeagEXtIgvjyGFDdo85qyKYr5NM62dNKViClWPg:9Avx2rw5Th8XeNyGtW0DJr5uDdQdWPet
- TLSH T10836337146138770D1E443B2789607CDFEA3ECA004226A7B9664FE2B5C05ABED59E70F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
8f:01:df:78:ce:80:39:28:c8:49:b3:c7:c4:01:28:81:cc:40:e4:47
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Apr 19, 2011
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:b2:9b:00:00:00:00:00:15
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 21, 2011 - May 21, 2012
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:06:94:2d:00:00:00:00:00:09
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
2
Major OS version
5
Entry point
22898
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
PDB paths
kernel32
GetDriveTypeA
HeapFree
FormatMessageA
LeaveCriticalSection
DeleteFileA
EnterCriticalSection
TerminateProcess
WaitForMultipleObjects
CreateEventW
SetEvent
Sleep
SetEnvironmentVariableA
GetEnvironmentVariableA
WideCharToMultiByte
HeapAlloc
SetLastError
WriteFile
MoveFileA
ExitProcess
DeleteCriticalSection
FlushFileBuffers
GetVersionExA
WaitForSingleObject
OpenEventA
GetCurrentProcess
GetFileAttributesA
GetCommandLineA
GetModuleFileNameA
CreateFileA
FindNextFileA
FindFirstFileA
CopyFileA
SetFileAttributesA
SystemTimeToFileTime
GetSystemTime
GetDiskFreeSpaceA
QueryDosDeviceA
GetCurrentDirectoryA
SetEndOfFile
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetExitCodeProcess
CreateProcessA
ExpandEnvironmentStringsA
GetFileSize
CreateThread
CreateEventA
GetProcessHeap
InitializeCriticalSectionAndSpinCount
GetModuleHandleA
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
CloseHandle
DeviceIoControl
GetSystemDirectoryA
LoadLibraryA
GetProcAddress
FreeLibrary
SetErrorMode
GetTickCount
CreateDirectoryA
GetLastError
RemoveDirectoryA
MoveFileExA
SetFilePointer
FindClose
ReadFile
msvcrt
strchr
_strnicmp
_stricmp
strrchr
_strlwr
strncpy
strstr
_snprintf
sprintf
advapi32
AllocateAndInitializeSid
GetTokenInformation
GetLengthSid
InitiateSystemShutdownA
CryptReleaseContext
CryptGenRandom
CryptAcquireContextA
SetSecurityDescriptorDacl
AddAccessAllowedAce
InitializeAcl
InitializeSecurityDescriptor
OpenProcessToken
user32
ShowWindow
SendDlgItemMessageA
SendMessageA
DialogBoxParamA
LoadStringA
EndDialog
SetParent
MessageBoxA
ntdll
NtShutdownSystem
NtAdjustPrivilegesToken
NtClose
NtOpenProcessToken
comctl32
ord17
shell32
SHBrowseForFolderA
SHGetPathFromIDListA
Name
.text
Size
30KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4.9MB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=15, id=93, version=2179,
count=107, id=1, productName=Unmarked objects,
count=20, id=95, version=2190,
count=1, id=94, version=2179,
count=1, id=90, version=2179,
Adobe CC 2017/payloads/Microsoft VC 2008 Redist (x86)/Media_db.db
- SHA256 8d046724514ee60af66105b216a1800ff73693180dab97c7bac07277db98131d
- MD5 58ca5bef1f662730d1bcad127a59a222
- SHA1 03962365728f3765042f4cb091c101660dc20f4d
- SHA512 31910b8b3ee36462927823952bfb32aaa1120556641d4d826d54fce68170f4b14c29df96d95055afa832f4370b6cb721da774c28e20f17c40c99c935596b4b3e
- SSDEEP 384:lt8w8M8M3O+49OTX9L8sG48dh80L8Q8W80878378JhN8b78JhR:R3O+i7a
- TLSH T1BAC274DDCA64B35CEEB0D9F0C1E0CE61AC0D6E4F5BA042D453D962F9D28B983913A036
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe CC 2017/payloads/Microsoft VC 2008 Redist (x86)/vcredist_x86.exe
- IMPHASH 092eb6daba2f17cbda102fd1a32acd00
- SHA256 6b3e4c51c6c0e5f68c8a72b497445af3dbf976394cbb62aa23569065c28deeb6
- MD5 35da2bf2befd998980a495b6f4f55e60
- SHA1 470640aa4bb7db8e69196b5edb0010933569e98d
- SHA512 bf630667c87b8f10ef85b61f2f379d7ce24124618b999babfec8e2df424eb494b8f1bf0977580810dff5124d4dbdec9539ff53e0dc14625c076fa34dfe44e3f2
- SSDEEP 98304:vT4tlQ0aeY51XNURYxaA6qjEb9tRuPmBmWBDLTMTtbslyzRt9cuISY6Qa:vKlhE9U6476itR+mLPw6lyZY61
- TLSH T1982633EE1E32462AD70B42B2E4352783D578F0A68C7B8DD79D93553EE1E3266FA10046
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
d0:b8:36:c9:ae:3b:cb:20:6d:59:26:4f:5f:9c:95:6f:4b:15:75:3a
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Apr 19, 2011
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:b2:9b:00:00:00:00:00:15
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 21, 2011 - May 21, 2012
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:a2:30:00:00:00:00:00:08
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
2
Major OS version
5
Entry point
22898
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
PDB paths
kernel32
GetDriveTypeA
HeapFree
FormatMessageA
LeaveCriticalSection
DeleteFileA
EnterCriticalSection
TerminateProcess
WaitForMultipleObjects
CreateEventW
SetEvent
Sleep
SetEnvironmentVariableA
GetEnvironmentVariableA
WideCharToMultiByte
HeapAlloc
SetLastError
WriteFile
MoveFileA
ExitProcess
DeleteCriticalSection
FlushFileBuffers
GetVersionExA
WaitForSingleObject
OpenEventA
GetCurrentProcess
GetFileAttributesA
GetCommandLineA
GetModuleFileNameA
CreateFileA
FindNextFileA
FindFirstFileA
CopyFileA
SetFileAttributesA
SystemTimeToFileTime
GetSystemTime
GetDiskFreeSpaceA
QueryDosDeviceA
GetCurrentDirectoryA
SetEndOfFile
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetExitCodeProcess
CreateProcessA
ExpandEnvironmentStringsA
GetFileSize
CreateThread
CreateEventA
GetProcessHeap
InitializeCriticalSectionAndSpinCount
GetModuleHandleA
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
CloseHandle
DeviceIoControl
GetSystemDirectoryA
LoadLibraryA
GetProcAddress
FreeLibrary
SetErrorMode
GetTickCount
CreateDirectoryA
GetLastError
RemoveDirectoryA
MoveFileExA
SetFilePointer
FindClose
ReadFile
msvcrt
strchr
_strnicmp
_stricmp
strrchr
_strlwr
strncpy
strstr
_snprintf
sprintf
advapi32
AllocateAndInitializeSid
GetTokenInformation
GetLengthSid
InitiateSystemShutdownA
CryptReleaseContext
CryptGenRandom
CryptAcquireContextA
SetSecurityDescriptorDacl
AddAccessAllowedAce
InitializeAcl
InitializeSecurityDescriptor
OpenProcessToken
user32
ShowWindow
SendDlgItemMessageA
SendMessageA
DialogBoxParamA
LoadStringA
EndDialog
SetParent
MessageBoxA
ntdll
NtShutdownSystem
NtAdjustPrivilegesToken
NtClose
NtOpenProcessToken
comctl32
ord17
shell32
SHBrowseForFolderA
SHGetPathFromIDListA
Name
.text
Size
30KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4.2MB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=15, id=93, version=2179,
count=107, id=1, productName=Unmarked objects,
count=20, id=95, version=2190,
count=1, id=94, version=2179,
count=1, id=90, version=2179,
Adobe CC 2017/payloads/Microsoft VC 2010 Redist (x64)/Media_db.db
- SHA256 861801b1fa1c5fba74bccf1803a112381bab42bdaae5d40d1e6eab21159d5151
- MD5 a0ffe6bc1bf86bf19fa0fdfa21eac2da
- SHA1 8c48f586f2b95bf43940cd3fc0be6f26aad8b3ed
- SHA512 1dc21bc3ce6b6fc1da5be7125e216cf2bf0dc4f18cbbcff22b9a0ea0a46e96e132daa0a7f948b18e01eb0ed257d314f8b16144af6e6b2b570bfb73681e746a5b
- SSDEEP 384:lBV5VPk3O+49E+g7VAQKDgROYKBjlrr3lr5:S3O+iYw
- TLSH T134C2749ECA547394DAB1D6F0C280CE60AD1D1B5F6BA042D453D852ECE18B6C3A53E435
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe CC 2017/payloads/Microsoft VC 2010 Redist (x64)/vcredist_x64.exe
- IMPHASH a1f6f100bff4507a3332f3f0cdfc24f5
- SHA256 cc7ec044218c72a9a15fca2363baed8fc51095ee3b2a7593476771f9eba3d223
- MD5 c9d9eebccef20d637f193490cec05e79
- SHA1 15d032d669078aa6f0f7fd1cbf4115a070bd034d
- SHA512 24b56b5d9b48d75baf53a98e007ace3e7d68fbd5fa55b75ae1a2c08dd466d20b13041f80e84fdb64b825f070843f9247daba681eff16baf99a4b14ea99f5cfd6
- SSDEEP 196608:n9A3D5MBD0vwqMKgL29M2JWMWiKV/nPlnqIaAAVINqsAsbPnpCxmz7dU8:23D5MBwZMd0b4oSQ7VSrAs1gEdU8
- TLSH T189A6332DD2128E2EFEDB3730E1EE94EAD064D244C25722C3F15BB186B6B768D171E641
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
3e:29:68:50:9f:c0:15:85:b2:43:f6:40:df:72:7e:8c:87:c3:b3:4f
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 29, 2011
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:b2:9b:00:00:00:00:00:15
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 21, 2011 - May 21, 2012
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:06:94:2d:00:00:00:00:00:09
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
2
Major OS version
5
Entry point
25599
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
PDB paths
sfxcab.pdb
msvcrt
__setusermatherr
_initterm
__getmainargs
__initenv
exit
_cexit
_adjust_fdiv
_exit
_c_exit
strncpy
strstr
_strlwr
strrchr
_stricmp
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_XcptFilter
_snprintf
sprintf
strchr
_strnicmp
_vsnprintf
advapi32
InitializeAcl
AddAccessAllowedAce
SetSecurityDescriptorDacl
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
AllocateAndInitializeSid
OpenProcessToken
GetTokenInformation
GetLengthSid
InitiateSystemShutdownA
InitializeSecurityDescriptor
kernel32
CreateThread
GetFileSize
ExpandEnvironmentStringsA
CreateProcessA
GetExitCodeProcess
InitializeCriticalSectionAndSpinCount
LocalFileTimeToFileTime
SetFileTime
SetEndOfFile
CreateEventA
QueryDosDeviceA
GetDiskFreeSpaceA
GetSystemTime
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentDirectoryA
GetProcessHeap
CopyFileA
SetFileAttributesA
DosDateTimeToFileTime
SetEvent
GetVersionExA
ReadFile
SetFilePointer
MoveFileExA
RemoveDirectoryA
GetLastError
CreateDirectoryA
GetTickCount
SetErrorMode
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
CloseHandle
DeviceIoControl
CreateFileA
GetDriveTypeA
HeapFree
FormatMessageA
LeaveCriticalSection
DeleteFileA
EnterCriticalSection
TerminateProcess
WaitForMultipleObjects
CreateEventW
FindFirstFileA
Sleep
SetEnvironmentVariableA
GetEnvironmentVariableA
WideCharToMultiByte
HeapAlloc
SetLastError
WriteFile
MoveFileA
ExitProcess
DeleteCriticalSection
FlushFileBuffers
WaitForSingleObject
OpenEventA
GetCurrentProcess
GetFileAttributesA
GetCommandLineA
GetModuleFileNameA
FindClose
FindNextFileA
SystemTimeToFileTime
user32
SendDlgItemMessageA
SendMessageA
DialogBoxParamA
MessageBoxA
SetParent
EndDialog
LoadStringA
ShowWindow
ntdll
NtOpenProcessToken
NtAdjustPrivilegesToken
NtClose
NtShutdownSystem
comctl32
ord17
shell32
SHBrowseForFolderA
SHGetPathFromIDListA
Name
.text
Size
33KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
9.8MB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=15, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=125, id=1, productName=Unmarked objects,
count=15, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=32, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=94, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=90, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
Adobe CC 2017/payloads/Microsoft VC 2010 Redist (x86)/Media_db.db
- SHA256 88ef667160b32dbf044b7d9009be6c884119afc91ee275e8ae06201745b769ee
- MD5 a3549c530dd28e9b249d98744089dc18
- SHA1 73993f1a91e1ab3221343cac600268bd08e4731a
- SHA512 6c1340fca5b47092b2a734962516529fea1302f2847346addc14d7d3ffedc1951f717df2a918eb4f4868bc6888cbcccbbdf9a9a93c6cb067219066ca473cf665
- SSDEEP 384:lcALc3O+49tyXnVsQKPVVSUul3lJhrblJh5:I3O+iDs
- TLSH T1CFC2839DCA647354DAB1A6F4C2C0CE60AC1D5E5F5FA002D853D952ECE28BEC3A43A035
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe CC 2017/payloads/Microsoft VC 2010 Redist (x86)/vcredist_x86.exe
- IMPHASH a1f6f100bff4507a3332f3f0cdfc24f5
- SHA256 67313b3d1bc86e83091e8de22981f14968f1a7fb12eb7ad467754c40cd94cc3d
- MD5 1801436936e64598bab5b87b37dc7f87
- SHA1 28c54491be70c38c97849c3d8cfbfdd0d3c515cb
- SHA512 0b8f20b0f171f49eb49367f1aafa7101e1575ef055d7007197c21ab8fe8d75a966569444449858c31bd147357d2bf5a5bd623fe6c4dbabdc7d16999b3256ab8c
- SSDEEP 196608:e9A3DAnfudQZKuNK0kMp2Wxw2tr3aA5Jegn9kaK6Hj0aaNz9ZBJ7C:t3DAnGKZKuNK0SvAn9kaK6gaaNRZbC
- TLSH T1789633D714300ADFFC07BB70F7568555D8E9496233A8D7EA4AC60CC89AEEAE4C0B6750
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
58:5d:c5:26:99:03:d9:98:d7:bd:f4:32:05:e3:4e:3b:e4:dd:15:47
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 29, 2011
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:b2:9b:00:00:00:00:00:15
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 21, 2011 - May 21, 2012
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:a2:30:00:00:00:00:00:08
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
2
Major OS version
5
Entry point
25599
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
PDB paths
sfxcab.pdb
msvcrt
__setusermatherr
_initterm
__getmainargs
__initenv
exit
_cexit
_adjust_fdiv
_exit
_c_exit
strncpy
strstr
_strlwr
strrchr
_stricmp
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_XcptFilter
_snprintf
sprintf
strchr
_strnicmp
_vsnprintf
advapi32
InitializeAcl
AddAccessAllowedAce
SetSecurityDescriptorDacl
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
AllocateAndInitializeSid
OpenProcessToken
GetTokenInformation
GetLengthSid
InitiateSystemShutdownA
InitializeSecurityDescriptor
kernel32
CreateThread
GetFileSize
ExpandEnvironmentStringsA
CreateProcessA
GetExitCodeProcess
InitializeCriticalSectionAndSpinCount
LocalFileTimeToFileTime
SetFileTime
SetEndOfFile
CreateEventA
QueryDosDeviceA
GetDiskFreeSpaceA
GetSystemTime
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentDirectoryA
GetProcessHeap
CopyFileA
SetFileAttributesA
DosDateTimeToFileTime
SetEvent
GetVersionExA
ReadFile
SetFilePointer
MoveFileExA
RemoveDirectoryA
GetLastError
CreateDirectoryA
GetTickCount
SetErrorMode
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
CloseHandle
DeviceIoControl
CreateFileA
GetDriveTypeA
HeapFree
FormatMessageA
LeaveCriticalSection
DeleteFileA
EnterCriticalSection
TerminateProcess
WaitForMultipleObjects
CreateEventW
FindFirstFileA
Sleep
SetEnvironmentVariableA
GetEnvironmentVariableA
WideCharToMultiByte
HeapAlloc
SetLastError
WriteFile
MoveFileA
ExitProcess
DeleteCriticalSection
FlushFileBuffers
WaitForSingleObject
OpenEventA
GetCurrentProcess
GetFileAttributesA
GetCommandLineA
GetModuleFileNameA
FindClose
FindNextFileA
SystemTimeToFileTime
user32
SendDlgItemMessageA
SendMessageA
DialogBoxParamA
MessageBoxA
SetParent
EndDialog
LoadStringA
ShowWindow
ntdll
NtOpenProcessToken
NtAdjustPrivilegesToken
NtClose
NtShutdownSystem
comctl32
ord17
shell32
SHBrowseForFolderA
SHGetPathFromIDListA
Name
.text
Size
33KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
8.5MB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=15, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=125, id=1, productName=Unmarked objects,
count=15, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=32, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=94, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=90, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
Adobe CC 2017/payloads/Microsoft VC 2012 Redist (x64)/Media_db.db
- SHA256 fb9dd730c6c2db8168c520d9f594f4c6eea2329988e9d82bbec793c919e498b3
- MD5 7959e05d30c8d095a74daad14049cbe8
- SHA1 d80d11b577bf3672e5bff4faf1e33a948db60b66
- SHA512 7807a12fcd51f8ad9e832c92c1305a112cdc97c1b05305db7720701085dadd4b427cfafa2fdf86c9e4a7b85d439253dc5a4b41bf472a63a6a253284b0932c5c3
- SSDEEP 192:T9UsgSnDAtIt9tYXF4NviK1+COLf+cKIvjTrd3TrlR:5UsgMDAtIreid1+C/cKIvjTrd3TrL
- TLSH T137D262DECA547728DAF096B0C280DD61AD1D5A4FAF9042D853D421FDE28B583A13F03A
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe CC 2017/payloads/Microsoft VC 2012 Redist (x64)/vcredist_x64.exe
- IMPHASH 33c6db41ca15b47cfcec52de6c2ab2b7
- SHA256 681be3e5ba9fd3da02c09d7e565adfa078640ed66a0d58583efad2c1e3cc4064
- MD5 3c03562b5af9ed347614053d459d7778
- SHA1 1a5d93dddbc431ab27b1da711cd3370891542797
- SHA512 6c2f4eeb38705c2dafc4d75d8de0036a0aed197f83e9cb261d255fe26e4391f24b0b156e9019c739dd99057041c2bb80f9ab80f56869bc1e01f0469a76f24f75
- SSDEEP 98304:vRWKtOl5CCGomEBkHUBmExJrIUg32t9RRyvo7VnOcyP24Vc35re94tb0eYbY1poo:v3tO3CCT/hBxtVtyUVnmSprzVIY7QKAk
- TLSH T1B876333286989427D1A32073F618D5217FBCB15C1F1048ABD3549A6D3B68AC6BEFB347
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Digest
f9:21:a8:7f:5a:3b:9a:0a:03:ac:c7:ff:64:14:0d:fb:d7:83:d6:35:6f:b3:45:b4:6a:5d:07:98:a0:f2:ce:30
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 30, 2013
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
fa:4d:cd:f6:4c:96:60:0c:ed:96:a4:ab:84:4d:56:72:9b:e5:6f:2f
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 30, 2013
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:C0F4-3086-DEF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:2b:39:32:48:c1:b2:c9:48:f3:00:00:00:00:00:2b
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 4, 2012 - Dec 4, 2013
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:b0:11:af:0a:8b:d0:3b:9f:dd:00:01:00:00:00:b0
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jan 24, 2013 - Apr 24, 2014
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:1a:77:bb:74:b3:07:d1:16:b8:00:00:00:00:00:1a
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 24, 2013 - Dec 24, 2014
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:BBEC-30CA-2DBE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:2c:d7:29:77:3b:67:cc:1b:c6:00:00:00:00:00:2c
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 27, 2013 - Jun 27, 2014
Minor OS version
1
Major OS version
5
Entry point
18251
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
PDB paths
E:\delivery\Dev\wix36_dev11\build\ship\x86\x86\burn.pdb
kernel32
CopyFileExW
MapViewOfFile
CreateFileMappingW
CreateMutexW
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
ResetEvent
SetEndOfFile
DeleteFileW
GetThreadLocale
UnmapViewOfFile
GetFullPathNameW
GetTempFileNameW
CreateDirectoryW
GetLocalTime
SetFilePointer
GetComputerNameW
CreateFileA
GetProcessHeap
GetModuleHandleA
CopyFileW
MoveFileExW
GlobalFree
GlobalAlloc
GetFileSizeEx
GetCurrentDirectoryW
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
RaiseException
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FormatMessageW
HeapSetInformation
GetStartupInfoW
SetUnhandledExceptionFilter
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
FreeLibrary
InterlockedExchange
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize
GetLocaleInfoA
WideCharToMultiByte
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
GetTimeZoneInformation
CompareStringW
InitializeCriticalSection
CloseHandle
LocalFree
ReleaseMutex
GetVersionExW
GetProcessId
ReadFile
CreateNamedPipeW
ConnectNamedPipe
SetNamedPipeHandleState
lstrlenW
WaitForSingleObject
OpenProcess
CreateFileW
SetFilePointerEx
lstrlenA
RemoveDirectoryW
GetFileAttributesW
ExpandEnvironmentStringsW
VerifyVersionInfoW
VerSetConditionMask
GetTempPathW
GetSystemDirectoryW
GetSystemWow64DirectoryW
GetVolumePathNameW
GetWindowsDirectoryW
GetSystemDefaultLangID
GetUserDefaultLangID
GetDateFormatW
GetSystemTime
LoadLibraryW
InterlockedCompareExchange
GetExitCodeThread
CreateThread
SetEvent
WaitForMultipleObjects
CreateEventW
ProcessIdToSessionId
SetFileAttributesW
FindClose
FindNextFileW
FindFirstFileW
CreateProcessW
GetExitCodeProcess
SetThreadExecutionState
FlushFileBuffers
msi
ord171
ord45
ord137
ord125
ord17
ord8
ord141
ord238
ord190
ord88
ord90
ord173
ord111
ord70
ord169
ord118
ord115
ord116
ord205
shell32
SHGetFolderPathW
ShellExecuteExW
CommandLineToArgvW
rpcrt4
UuidCreate
wininet
HttpQueryInfoW
InternetCrackUrlW
InternetSetOptionW
InternetConnectW
InternetCloseHandle
InternetOpenW
HttpAddRequestHeadersW
HttpOpenRequestW
InternetErrorDlg
InternetReadFile
HttpSendRequestW
wintrust
WinVerifyTrust
WTHelperGetProvSignerFromChain
WTHelperProvDataFromStateData
CryptCATAdminCalcHashFromFileHandle
crypt32
CertGetCertificateContextProperty
CryptHashPublicKeyInfo
gdi32
DeleteDC
DeleteObject
GetObjectW
CreateCompatibleDC
SelectObject
StretchBlt
cabinet
ord23
ord22
ord20
advapi32
CryptAcquireContextW
CryptCreateHash
CryptHashData
CryptGetHashParam
CryptDestroyHash
CryptReleaseContext
SetNamedSecurityInfoW
AllocateAndInitializeSid
CheckTokenMembership
RegDeleteKeyW
RegCreateKeyExW
RegEnumKeyExW
RegEnumValueW
RegQueryInfoKeyW
RegSetValueExW
InitializeSecurityDescriptor
SetEntriesInAclA
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
RegOpenKeyExW
GetTokenInformation
OpenSCManagerW
OpenServiceW
QueryServiceStatus
CloseServiceHandle
ChangeServiceConfigW
DecryptFileW
SetEntriesInAclW
InitializeAcl
CreateWellKnownSid
InitiateSystemShutdownExW
GetUserNameW
RegQueryValueExW
RegDeleteValueW
RegCloseKey
ConvertStringSecurityDescriptorToSecurityDescriptorW
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
QueryServiceConfigW
oleaut32
SysFreeString
SysAllocString
VariantInit
VariantClear
ole32
CLSIDFromProgID
CoInitializeSecurity
CoTaskMemFree
CoCreateInstance
CoInitialize
CoInitializeEx
CoUninitialize
StringFromGUID2
user32
LoadBitmapW
IsWindow
PostMessageW
PeekMessageW
GetMessageW
GetWindowLongW
SetWindowLongW
DefWindowProcW
UnregisterClassW
DispatchMessageW
TranslateMessage
IsDialogMessageW
CreateWindowExW
RegisterClassW
MsgWaitForMultipleObjects
LoadCursorW
PostQuitMessage
GetCursorPos
MonitorFromPoint
GetMonitorInfoW
PostThreadMessageW
MessageBoxW
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
Name
.text
Size
312KB
Virtual Size
312KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.wixburn
Size
512B
Virtual Size
56B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
16KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=41, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=19, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=117, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=31, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=326, id=1, productName=Unmarked objects,
count=67, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=151,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
Adobe CC 2017/payloads/Microsoft VC 2012 Redist (x86)/Media_db.db
- SHA256 586ad436b309ea80e68b290c67b8614d81a90eb10486c112f88f96fa100e080a
- MD5 086fcfb49f9423998cf91fcc0e3c5284
- SHA1 37b079a99097f31d366c290bfc2300e91cc1d6fd
- SHA512 b0f843163896543b33cd90adae98c696a955d692d7a5433ce9bf1e22d5794ddf0b74408bae7005e09fd69af712c4ea2f0bea2ef512dbe5d60ecde86aa6f016b0
- SSDEEP 192:YAXHDstIAYXnBPK1+CODf+Q28T3TJhdbTJhlR:YAXHDstI/n81+CDQ28T3TJhdbTJhL
- TLSH T1BED250CECE087728DAF092F4D2C0DD61AC1C5E5F9FA041D853D452E9E28B983A13B43A
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe CC 2017/payloads/Microsoft VC 2012 Redist (x86)/vcredist_x86.exe
- IMPHASH 33c6db41ca15b47cfcec52de6c2ab2b7
- SHA256 b924ad8062eaf4e70437c8be50fa612162795ff0839479546ce907ffa8d6e386
- MD5 7f52a19ecaf7db3c163dd164be3e592e
- SHA1 96b377a27ac5445328cbaae210fc4f0aaa750d3f
- SHA512 60220a7c9de72796bd0d6d44e2b82dbdd9c850cc611e505b7dc0213f745ff1f160b2d826eaf62fd6e07c1a31786a71d83dc6e94389690fd59b895e85aba7444b
- SSDEEP 196608:OwKjLs+UIkzHlAv4X6zQRgiwHLD2LQIX/:9KjaxFFP1iLD2LnP
- TLSH T149663333B9549032D26214B3E555D670BE3D70282F2048FB9794DB1A39B89C6BBFB247
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Digest
51:3c:0e:d0:e9:29:66:d4:05:e1:26:24:9d:da:d9:c0:63:79:c5:68:38:c7:69:c5:25:f3:62:ab:0e:b8:a4:f6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 30, 2013
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
8c:12:40:11:a9:d9:22:02:f1:9b:18:34:2a:70:2d:89:dc:3c:69:a5
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 30, 2013
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:C0F4-3086-DEF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:2b:39:32:48:c1:b2:c9:48:f3:00:00:00:00:00:2b
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 4, 2012 - Dec 4, 2013
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:b0:11:af:0a:8b:d0:3b:9f:dd:00:01:00:00:00:b0
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jan 24, 2013 - Apr 24, 2014
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:1a:77:bb:74:b3:07:d1:16:b8:00:00:00:00:00:1a
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 24, 2013 - Dec 24, 2014
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:BBEC-30CA-2DBE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:2c:d7:29:77:3b:67:cc:1b:c6:00:00:00:00:00:2c
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 27, 2013 - Jun 27, 2014
Minor OS version
1
Major OS version
5
Entry point
18251
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
PDB paths
E:\delivery\Dev\wix36_dev11\build\ship\x86\x86\burn.pdb
kernel32
CopyFileExW
MapViewOfFile
CreateFileMappingW
CreateMutexW
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
ResetEvent
SetEndOfFile
DeleteFileW
GetThreadLocale
UnmapViewOfFile
GetFullPathNameW
GetTempFileNameW
CreateDirectoryW
GetLocalTime
SetFilePointer
GetComputerNameW
CreateFileA
GetProcessHeap
GetModuleHandleA
CopyFileW
MoveFileExW
GlobalFree
GlobalAlloc
GetFileSizeEx
GetCurrentDirectoryW
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
RaiseException
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FormatMessageW
HeapSetInformation
GetStartupInfoW
SetUnhandledExceptionFilter
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
FreeLibrary
InterlockedExchange
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize
GetLocaleInfoA
WideCharToMultiByte
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
GetTimeZoneInformation
CompareStringW
InitializeCriticalSection
CloseHandle
LocalFree
ReleaseMutex
GetVersionExW
GetProcessId
ReadFile
CreateNamedPipeW
ConnectNamedPipe
SetNamedPipeHandleState
lstrlenW
WaitForSingleObject
OpenProcess
CreateFileW
SetFilePointerEx
lstrlenA
RemoveDirectoryW
GetFileAttributesW
ExpandEnvironmentStringsW
VerifyVersionInfoW
VerSetConditionMask
GetTempPathW
GetSystemDirectoryW
GetSystemWow64DirectoryW
GetVolumePathNameW
GetWindowsDirectoryW
GetSystemDefaultLangID
GetUserDefaultLangID
GetDateFormatW
GetSystemTime
LoadLibraryW
InterlockedCompareExchange
GetExitCodeThread
CreateThread
SetEvent
WaitForMultipleObjects
CreateEventW
ProcessIdToSessionId
SetFileAttributesW
FindClose
FindNextFileW
FindFirstFileW
CreateProcessW
GetExitCodeProcess
SetThreadExecutionState
FlushFileBuffers
msi
ord171
ord45
ord137
ord125
ord17
ord8
ord141
ord238
ord190
ord88
ord90
ord173
ord111
ord70
ord169
ord118
ord115
ord116
ord205
shell32
SHGetFolderPathW
ShellExecuteExW
CommandLineToArgvW
rpcrt4
UuidCreate
wininet
HttpQueryInfoW
InternetCrackUrlW
InternetSetOptionW
InternetConnectW
InternetCloseHandle
InternetOpenW
HttpAddRequestHeadersW
HttpOpenRequestW
InternetErrorDlg
InternetReadFile
HttpSendRequestW
wintrust
WinVerifyTrust
WTHelperGetProvSignerFromChain
WTHelperProvDataFromStateData
CryptCATAdminCalcHashFromFileHandle
crypt32
CertGetCertificateContextProperty
CryptHashPublicKeyInfo
gdi32
DeleteDC
DeleteObject
GetObjectW
CreateCompatibleDC
SelectObject
StretchBlt
cabinet
ord23
ord22
ord20
advapi32
CryptAcquireContextW
CryptCreateHash
CryptHashData
CryptGetHashParam
CryptDestroyHash
CryptReleaseContext
SetNamedSecurityInfoW
AllocateAndInitializeSid
CheckTokenMembership
RegDeleteKeyW
RegCreateKeyExW
RegEnumKeyExW
RegEnumValueW
RegQueryInfoKeyW
RegSetValueExW
InitializeSecurityDescriptor
SetEntriesInAclA
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
RegOpenKeyExW
GetTokenInformation
OpenSCManagerW
OpenServiceW
QueryServiceStatus
CloseServiceHandle
ChangeServiceConfigW
DecryptFileW
SetEntriesInAclW
InitializeAcl
CreateWellKnownSid
InitiateSystemShutdownExW
GetUserNameW
RegQueryValueExW
RegDeleteValueW
RegCloseKey
ConvertStringSecurityDescriptorToSecurityDescriptorW
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
QueryServiceConfigW
oleaut32
SysFreeString
SysAllocString
VariantInit
VariantClear
ole32
CLSIDFromProgID
CoInitializeSecurity
CoTaskMemFree
CoCreateInstance
CoInitialize
CoInitializeEx
CoUninitialize
StringFromGUID2
user32
LoadBitmapW
IsWindow
PostMessageW
PeekMessageW
GetMessageW
GetWindowLongW
SetWindowLongW
DefWindowProcW
UnregisterClassW
DispatchMessageW
TranslateMessage
IsDialogMessageW
CreateWindowExW
RegisterClassW
MsgWaitForMultipleObjects
LoadCursorW
PostQuitMessage
GetCursorPos
MonitorFromPoint
GetMonitorInfoW
PostThreadMessageW
MessageBoxW
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
Name
.text
Size
312KB
Virtual Size
312KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.wixburn
Size
512B
Virtual Size
56B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
16KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=41, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=19, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=117, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=31, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=326, id=1, productName=Unmarked objects,
count=67, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=151,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
Adobe CC 2017/payloads/Microsoft VC 2013 Redist (x64)/Media_db.db
- SHA256 c74ae7460dbdfcfb895ce94edb2fb2090a98f41a04a8b12cd31760017c053512
- MD5 0c2f24ba167cbd4400bc0889489531cf
- SHA1 640f0058a070ab3e9a16d5a82972fc4ee9fa912b
- SHA512 c92abc7c7978ab8d2da002bd82f5520ec5e4c6de43f67d335a8dc0ae7c62b7f6b8e1cd323cc8b8ca669a4952156d4318a5cc016f45d6f7c063480f9eb72fd2da
- SSDEEP 384:gz+8EzEkbgIMAFvtRyuVYTBvIjcrG3crL:gz+8EzENuVa
- TLSH T115D230DDCF147728DAF1E2B4D280DDA1AD592A1FAF9042D453E461F9E2C7583A13E03A
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe CC 2017/payloads/Microsoft VC 2013 Redist (x64)/vcredist_x64.exe
- IMPHASH dcbe94b8cc54b8e53867c61cc96811d6
- SHA256 e554425243e3e8ca1cd5fe550db41e6fa58a007c74fad400274b128452f38fb8
- MD5 96b61b8e069832e6b809f24ea74567ba
- SHA1 8bf41ba9eef02d30635a10433817dbb6886da5a2
- SHA512 3a55dce14bbd455808bd939a5008b67c9c7111cab61b1339528308022e587726954f8c55a597c6974dc543964bdb6532fe433556fbeeaf9f8cb4d95f2bbffc12
- SSDEEP 196608:19OaQ54oYY7jLwXjZ41OON2uk3bQWgtyccMEL:Gz5x7jLXkmkU4cFe
- TLSH T131763331E7B05023D6F201B2E411D528BD3DB2291F109CAAD794DD2D3AA9AD6E7F7213
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Digest
2b:f8:ab:c0:0e:bd:66:17:f3:88:d4:c2:ed:ee:9e:c8:b7:72:a3:88:31:d9:3b:3b:8f:74:9b:40:1e:cc:4a:48
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 1, 2014
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
9f:b7:ab:91:35:d2:5f:20:d4:e3:b8:4e:41:38:9b:0b:57:4d:91:b9
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 1, 2014
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:B8EC-30A4-7144,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:34:24:31:40:c9:a0:c1:79:8d:00:00:00:00:00:34
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 27, 2013 - Jun 27, 2014
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:ca:6c:d5:32:12:35:c4:e1:55:00:01:00:00:00:ca
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 22, 2014 - Jul 22, 2015
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:1a:77:bb:74:b3:07:d1:16:b8:00:00:00:00:00:1a
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 24, 2013 - Dec 24, 2014
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7D2E-3782-B0F7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:2d:25:81:14:5f:a2:d5:f2:d3:00:00:00:00:00:2d
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 27, 2013 - Jun 27, 2014
Minor OS version
1
Major OS version
5
Entry point
163358
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
E:\delivery\Dev\wix37\build\ship\x86\burn.pdb
advapi32
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegCloseKey
RegDeleteValueW
RegQueryValueExW
GetUserNameW
InitiateSystemShutdownExW
CreateWellKnownSid
InitializeAcl
SetEntriesInAclW
DecryptFileW
ChangeServiceConfigW
ControlService
CloseServiceHandle
QueryServiceStatus
OpenServiceW
OpenSCManagerW
CryptAcquireContextW
CryptCreateHash
CryptHashData
CryptGetHashParam
CryptDestroyHash
CryptReleaseContext
RegDeleteKeyW
RegCreateKeyExW
RegEnumKeyExW
RegEnumValueW
RegQueryInfoKeyW
RegSetValueExW
SetEntriesInAclA
SetSecurityDescriptorGroup
RegOpenKeyExW
GetTokenInformation
CheckTokenMembership
AllocateAndInitializeSid
FreeSid
LookupAccountNameW
SetNamedSecurityInfoW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
SetSecurityDescriptorOwner
QueryServiceConfigW
user32
GetMessageW
PeekMessageW
PostMessageW
PostThreadMessageW
PostQuitMessage
SetWindowLongW
DefWindowProcW
UnregisterClassW
DispatchMessageW
TranslateMessage
GetMonitorInfoW
IsDialogMessageW
MessageBoxW
GetWindowLongW
RegisterClassW
IsWindow
MsgWaitForMultipleObjects
WaitForInputIdle
LoadCursorW
LoadBitmapW
GetCursorPos
MonitorFromPoint
CreateWindowExW
oleaut32
SysFreeString
SysAllocString
VariantInit
VariantClear
gdi32
DeleteObject
GetObjectW
CreateCompatibleDC
SelectObject
DeleteDC
StretchBlt
shell32
ShellExecuteExW
SHGetFolderPathW
CommandLineToArgvW
ole32
CoTaskMemFree
CoInitializeSecurity
CLSIDFromProgID
CoCreateInstance
CoInitialize
StringFromGUID2
CoInitializeEx
CoUninitialize
kernel32
ReadFile
SetFilePointerEx
CreateFileW
GetCurrentProcessId
GetProcessId
WriteFile
ConnectNamedPipe
SetNamedPipeHandleState
lstrlenW
CompareStringW
LocalFree
CreateNamedPipeW
WaitForSingleObject
OpenProcess
lstrlenA
RemoveDirectoryW
GetFileAttributesW
ExpandEnvironmentStringsW
LeaveCriticalSection
EnterCriticalSection
FreeLibrary
GetProcAddress
VerifyVersionInfoW
VerSetConditionMask
GetComputerNameW
GetTempPathW
GetSystemDirectoryW
GetSystemWow64DirectoryW
GetVolumePathNameW
GetWindowsDirectoryW
GetSystemDefaultLangID
RtlUnwind
GetDateFormatW
GetSystemTime
InterlockedExchange
LoadLibraryW
InterlockedCompareExchange
GetExitCodeThread
CreateThread
SetEvent
WaitForMultipleObjects
CreateEventW
ProcessIdToSessionId
InterlockedIncrement
InterlockedDecrement
GetStringTypeW
GetModuleHandleW
FindClose
FindNextFileW
FindFirstFileW
CreateProcessW
SetCurrentDirectoryW
GetCurrentDirectoryW
GetExitCodeProcess
DuplicateHandle
SetThreadExecutionState
CopyFileExW
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
CreateMutexW
SetEndOfFile
ResetEvent
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
CreateFileA
CompareStringA
GetSystemTimeAsFileTime
VirtualFree
VirtualAlloc
DeleteFileW
GetThreadLocale
GetVersionExW
GetCurrentThreadId
TlsAlloc
TlsSetValue
ReleaseMutex
GetLastError
Sleep
TlsGetValue
CloseHandle
DeleteCriticalSection
GetTimeZoneInformation
GetACP
GetCPInfo
RaiseException
HeapAlloc
HeapFree
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
SystemTimeToTzSpecificLocalTime
SystemTimeToFileTime
GlobalAlloc
GlobalFree
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
TlsFree
InitializeCriticalSection
GetCurrentProcess
HeapSetInformation
GetOEMCP
SetFileAttributesW
IsValidCodePage
HeapSize
HeapReAlloc
LCMapStringW
MultiByteToWideChar
SetStdHandle
WriteConsoleW
FlushFileBuffers
GetLocalTime
FormatMessageW
GetTempFileNameW
GetFullPathNameW
CreateDirectoryW
GetProcessHeap
GetModuleHandleA
GetFileSizeEx
GetUserDefaultLangID
GetTickCount
QueryPerformanceCounter
HeapCreate
SetLastError
EncodePointer
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetEnvironmentStringsW
MoveFileExW
FreeEnvironmentStringsW
GetModuleFileNameW
GetStdHandle
DecodePointer
GetCommandLineW
GetStartupInfoW
SetUnhandledExceptionFilter
ExitProcess
CopyFileW
cabinet
ord23
ord22
ord20
crypt32
CryptHashPublicKeyInfo
CertGetCertificateContextProperty
msi
ord116
ord17
ord125
ord171
ord8
ord115
ord118
ord205
ord45
ord137
ord141
ord238
ord190
ord88
ord90
ord173
ord111
ord70
ord169
rpcrt4
UuidCreate
wininet
InternetCrackUrlW
HttpQueryInfoW
InternetCloseHandle
HttpAddRequestHeadersW
HttpOpenRequestW
InternetErrorDlg
InternetReadFile
HttpSendRequestW
InternetSetOptionW
InternetConnectW
InternetOpenW
wintrust
CryptCATAdminCalcHashFromFileHandle
WTHelperProvDataFromStateData
WTHelperGetProvSignerFromChain
WinVerifyTrust
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
Name
.text
Size
227KB
Virtual Size
226KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
103KB
Virtual Size
102KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.wixburn
Size
512B
Virtual Size
56B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
17KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=18, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=101, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=5, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=31, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=322, id=1, productName=Unmarked objects,
count=103, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=151,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
Adobe CC 2017/payloads/Microsoft VC 2013 Redist (x86)/Media_db.db
- SHA256 06e4a55f815349b9a55ab203bfd50f30a9830f08faf6938ac02a56dd6974188a
- MD5 90d57b1fb46e5bebb71600c2712c181a
- SHA1 da1307d5b4837ecb7175e46f33e750afd758535d
- SHA512 b0fca1a8c18b2b9fcf32ad8b4be48527ea051ef69422d63565565790bc52172298fd6c57c381f476492710807014a6cf9d9850a198f57df622fc592174dd1481
- SSDEEP 384:gz+8EzEtrXiMsFvVKuBM3Nzc3cJhGbcJhL:gz+8EzEjuBu
- TLSH T128D255DECE547718DAF1D2B4D2C0DD60AD192E5FAF9042D493E461E9E2C7983A13E03A
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe CC 2017/payloads/Microsoft VC 2013 Redist (x86)/vcredist_x86.exe
- IMPHASH dcbe94b8cc54b8e53867c61cc96811d6
- SHA256 a22895e55b26202eae166838edbe2ea6aad00d7ea600c11f8a31ede5cbce2048
- MD5 0fc525b6b7b96a87523daa7a0013c69d
- SHA1 df7f0a73bfa077e483e51bfb97f5e2eceedfb6a3
- SHA512 729251371ed208898430040fe48cabd286a5671bd7f472a30e9021b68f73b2d49d85a0879920232426b139520f7e21321ba92646985216bf2f733c64e014a71d
- SSDEEP 98304:hQEKzHx15bWUuBrNatjJh2eNUrzKRL/RaIswn7aBOC5qZxVqFb2iExMc7FvxwGvf:WRDnuBotjJh2emr8L/YIsG7MOgqHG64
- TLSH T13566233296642033D6F10873F469E2217E3E721C2F1188BAD294DC5D3EA95DAA7F7352
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Digest
3f:c4:25:81:d5:e9:9a:60:b6:34:e2:5c:4c:27:94:7c:7d:b2:b0:62:45:49:72:9f:27:6e:3a:f5:b9:e7:7f:bd
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 1, 2014
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
85:c8:56:1b:b1:ff:1a:0a:28:75:4d:7c:00:d4:94:b5:a4:ea:82:68
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 1, 2014
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:F528-3777-8A76,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:33:e5:27:86:a3:0e:4a:2a:80:00:00:00:00:00:33
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 27, 2013 - Jun 27, 2014
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:ca:6c:d5:32:12:35:c4:e1:55:00:01:00:00:00:ca
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 22, 2014 - Jul 22, 2015
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:1a:77:bb:74:b3:07:d1:16:b8:00:00:00:00:00:1a
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 24, 2013 - Dec 24, 2014
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:31C5-30BA-7C91,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:2b:72:aa:2e:f6:49:bb:ec:d7:00:00:00:00:00:2b
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 27, 2013 - Jun 27, 2014
Minor OS version
1
Major OS version
5
Entry point
163358
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
E:\delivery\Dev\wix37\build\ship\x86\burn.pdb
advapi32
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegCloseKey
RegDeleteValueW
RegQueryValueExW
GetUserNameW
InitiateSystemShutdownExW
CreateWellKnownSid
InitializeAcl
SetEntriesInAclW
DecryptFileW
ChangeServiceConfigW
ControlService
CloseServiceHandle
QueryServiceStatus
OpenServiceW
OpenSCManagerW
CryptAcquireContextW
CryptCreateHash
CryptHashData
CryptGetHashParam
CryptDestroyHash
CryptReleaseContext
RegDeleteKeyW
RegCreateKeyExW
RegEnumKeyExW
RegEnumValueW
RegQueryInfoKeyW
RegSetValueExW
SetEntriesInAclA
SetSecurityDescriptorGroup
RegOpenKeyExW
GetTokenInformation
CheckTokenMembership
AllocateAndInitializeSid
FreeSid
LookupAccountNameW
SetNamedSecurityInfoW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
SetSecurityDescriptorOwner
QueryServiceConfigW
user32
GetMessageW
PeekMessageW
PostMessageW
PostThreadMessageW
PostQuitMessage
SetWindowLongW
DefWindowProcW
UnregisterClassW
DispatchMessageW
TranslateMessage
GetMonitorInfoW
IsDialogMessageW
MessageBoxW
GetWindowLongW
RegisterClassW
IsWindow
MsgWaitForMultipleObjects
WaitForInputIdle
LoadCursorW
LoadBitmapW
GetCursorPos
MonitorFromPoint
CreateWindowExW
oleaut32
SysFreeString
SysAllocString
VariantInit
VariantClear
gdi32
DeleteObject
GetObjectW
CreateCompatibleDC
SelectObject
DeleteDC
StretchBlt
shell32
ShellExecuteExW
SHGetFolderPathW
CommandLineToArgvW
ole32
CoTaskMemFree
CoInitializeSecurity
CLSIDFromProgID
CoCreateInstance
CoInitialize
StringFromGUID2
CoInitializeEx
CoUninitialize
kernel32
ReadFile
SetFilePointerEx
CreateFileW
GetCurrentProcessId
GetProcessId
WriteFile
ConnectNamedPipe
SetNamedPipeHandleState
lstrlenW
CompareStringW
LocalFree
CreateNamedPipeW
WaitForSingleObject
OpenProcess
lstrlenA
RemoveDirectoryW
GetFileAttributesW
ExpandEnvironmentStringsW
LeaveCriticalSection
EnterCriticalSection
FreeLibrary
GetProcAddress
VerifyVersionInfoW
VerSetConditionMask
GetComputerNameW
GetTempPathW
GetSystemDirectoryW
GetSystemWow64DirectoryW
GetVolumePathNameW
GetWindowsDirectoryW
GetSystemDefaultLangID
RtlUnwind
GetDateFormatW
GetSystemTime
InterlockedExchange
LoadLibraryW
InterlockedCompareExchange
GetExitCodeThread
CreateThread
SetEvent
WaitForMultipleObjects
CreateEventW
ProcessIdToSessionId
InterlockedIncrement
InterlockedDecrement
GetStringTypeW
GetModuleHandleW
FindClose
FindNextFileW
FindFirstFileW
CreateProcessW
SetCurrentDirectoryW
GetCurrentDirectoryW
GetExitCodeProcess
DuplicateHandle
SetThreadExecutionState
CopyFileExW
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
CreateMutexW
SetEndOfFile
ResetEvent
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
CreateFileA
CompareStringA
GetSystemTimeAsFileTime
VirtualFree
VirtualAlloc
DeleteFileW
GetThreadLocale
GetVersionExW
GetCurrentThreadId
TlsAlloc
TlsSetValue
ReleaseMutex
GetLastError
Sleep
TlsGetValue
CloseHandle
DeleteCriticalSection
GetTimeZoneInformation
GetACP
GetCPInfo
RaiseException
HeapAlloc
HeapFree
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
SystemTimeToTzSpecificLocalTime
SystemTimeToFileTime
GlobalAlloc
GlobalFree
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
TlsFree
InitializeCriticalSection
GetCurrentProcess
HeapSetInformation
GetOEMCP
SetFileAttributesW
IsValidCodePage
HeapSize
HeapReAlloc
LCMapStringW
MultiByteToWideChar
SetStdHandle
WriteConsoleW
FlushFileBuffers
GetLocalTime
FormatMessageW
GetTempFileNameW
GetFullPathNameW
CreateDirectoryW
GetProcessHeap
GetModuleHandleA
GetFileSizeEx
GetUserDefaultLangID
GetTickCount
QueryPerformanceCounter
HeapCreate
SetLastError
EncodePointer
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetEnvironmentStringsW
MoveFileExW
FreeEnvironmentStringsW
GetModuleFileNameW
GetStdHandle
DecodePointer
GetCommandLineW
GetStartupInfoW
SetUnhandledExceptionFilter
ExitProcess
CopyFileW
cabinet
ord23
ord22
ord20
crypt32
CryptHashPublicKeyInfo
CertGetCertificateContextProperty
msi
ord116
ord17
ord125
ord171
ord8
ord115
ord118
ord205
ord45
ord137
ord141
ord238
ord190
ord88
ord90
ord173
ord111
ord70
ord169
rpcrt4
UuidCreate
wininet
InternetCrackUrlW
HttpQueryInfoW
InternetCloseHandle
HttpAddRequestHeadersW
HttpOpenRequestW
InternetErrorDlg
InternetReadFile
HttpSendRequestW
InternetSetOptionW
InternetConnectW
InternetOpenW
wintrust
CryptCATAdminCalcHashFromFileHandle
WTHelperProvDataFromStateData
WTHelperGetProvSignerFromChain
WinVerifyTrust
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
Name
.text
Size
227KB
Virtual Size
226KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
103KB
Virtual Size
102KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.wixburn
Size
512B
Virtual Size
56B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
17KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=18, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=101, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=5, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=31, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=322, id=1, productName=Unmarked objects,
count=103, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=151,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
Adobe CC 2017/payloads/Microsoft VC 2015 Redist (x64)/Media_db.db
- SHA256 2eb92f4657c56741d38e3e36b463fa4336d7da5b4943747e148c1775f7720d86
- MD5 ef013ba568ce6be0b3b4b99dafab6fa7
- SHA1 6c4fa74925677977989afa769dcb449b1da03199
- SHA512 0baa688cc2b63c1aec3a8e168eadfd67b2fa8b17dafd7faa00ada7a6edf8d5707b8f14be8df758859fc35cd3dbd299cb1656c6223459a2f574dd52b503d54474
- SSDEEP 384:ApS1Iercn+gpy1+89rB9PG/l8jrYTFTQRw1TR4OTVPtDxky7mS7Odj/9dKfQkqrX:4oes1+MVX
- TLSH T1DE03229E8EC1B39ECA71A6F990808E18FD38734E37D0AAD096D542D9D11B9C2D57F321
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe CC 2017/payloads/Microsoft VC 2015 Redist (x64)/vcredist_x64.exe
- IMPHASH 9c61e193ad83beb9c6707bb817822229
- SHA256 7ba670314e78037a1ea7bace8a8dd82a814f8760102bed26955140a7e1a067e4
- MD5 ab85db1a577cc93f8464fc117c914c5c
- SHA1 5a48855775f70c492fc663482b36f93e6b19982d
- SHA512 be2438cc56c0f6a1ff49d8b7a6245bbc68b8b8dc57aecb6d9003eb2660e024d27a61d3dbebc37f7c87ebeb4cbf02c31470885ba0b3238b36bf1eff8948ba2919
- SSDEEP 393216:j7Ulp+dkBSuF2SfUfn6VmyMj5zaTMOvf9e:wp+Ty2SfUfnWMFWoufY
- TLSH T1DBF63332B6DC813FC7960533A955FA647E7DA128231140F7E288ED5D1B792A393FB212
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Minor OS version
0
Major OS version
4
Entry point
88463
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
comctl32
ord17
shell32
SHGetSpecialFolderPathW
ShellExecuteW
SHGetMalloc
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetFileInfoW
ShellExecuteExW
gdi32
CreateCompatibleDC
CreateFontIndirectW
DeleteObject
DeleteDC
GetCurrentObject
StretchBlt
GetDeviceCaps
CreateCompatibleBitmap
SelectObject
SetStretchBltMode
GetObjectW
advapi32
FreeSid
AllocateAndInitializeSid
CheckTokenMembership
user32
CreateWindowExW
GetDesktopWindow
wsprintfA
SetWindowPos
SetTimer
GetMessageW
ScreenToClient
KillTimer
CharUpperW
SendMessageW
EndDialog
wsprintfW
MessageBoxW
GetParent
CopyImage
ReleaseDC
GetWindowDC
GetMenu
GetWindowLongW
DispatchMessageW
GetWindowTextW
GetWindowTextLengthW
SetWindowTextW
GetSysColor
DestroyWindow
MessageBoxA
BringWindowToTop
ShowWindow
GetKeyState
GetDlgItem
GetClientRect
SetWindowLongW
UnhookWindowsHookEx
SetFocus
GetSystemMetrics
SystemParametersInfoW
DrawTextW
GetDC
ClientToScreen
GetWindow
DialogBoxIndirectParamW
DrawIconEx
CallWindowProcW
DefWindowProcW
CallNextHookEx
PtInRect
SetWindowsHookExW
LoadImageW
LoadIconW
MessageBeep
EnableWindow
IsWindow
EnableMenuItem
GetSystemMenu
CreateWindowExA
wvsprintfW
GetClassNameA
GetWindowRect
ole32
CreateStreamOnHGlobal
CoCreateInstance
CoInitialize
oleaut32
SysAllocStringLen
VariantClear
SysFreeString
OleLoadPicture
SysAllocString
kernel32
SetFileTime
SetEndOfFile
GetFileInformationByHandle
VirtualFree
GetModuleHandleA
WaitForMultipleObjects
VirtualAlloc
ReadFile
SetFilePointer
GetFileSize
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
FormatMessageW
lstrcpyW
LocalFree
IsBadReadPtr
SuspendThread
TerminateThread
GetSystemDirectoryW
GetCurrentThreadId
InitializeCriticalSection
ResetEvent
SetEvent
CreateEventW
GetVersionExW
GetModuleFileNameW
GetCurrentProcess
SetProcessWorkingSetSize
GetDriveTypeW
CreateFileW
SetEnvironmentVariableW
GetTempPathW
GetCommandLineW
GetStartupInfoW
CreateProcessW
CreateJobObjectW
ResumeThread
AssignProcessToJobObject
CreateIoCompletionPort
SetInformationJobObject
GetQueuedCompletionStatus
GetExitCodeProcess
CloseHandle
LoadLibraryA
SetThreadLocale
lstrlenW
GetSystemTimeAsFileTime
ExpandEnvironmentStringsW
CompareFileTime
WideCharToMultiByte
FindFirstFileW
lstrcmpW
DeleteFileW
FindNextFileW
FindClose
SetCurrentDirectoryW
RemoveDirectoryW
GetEnvironmentVariableW
lstrcmpiW
GetLocaleInfoW
MultiByteToWideChar
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetSystemDefaultLCID
lstrcmpiA
GlobalAlloc
GlobalFree
MulDiv
FindResourceExA
SizeofResource
LoadResource
LockResource
GetProcAddress
GetModuleHandleW
GetStdHandle
ExitProcess
lstrcatW
GetDiskFreeSpaceExW
SetFileAttributesW
SetLastError
Sleep
GetExitCodeThread
WaitForSingleObject
CreateThread
GetLastError
SystemTimeToFileTime
GetLocalTime
GetFileAttributesW
CreateDirectoryW
lstrlenA
WriteFile
GetStartupInfoA
msvcrt
_purecall
memcmp
??2@YAPAXI@Z
memmove
memcpy
_wtol
strncpy
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
??1type_info@@UAE@XZ
_onexit
__dllonexit
malloc
free
wcsstr
_CxxThrowException
wcscmp
_beginthreadex
_EH_prolog
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
memset
_wcsnicmp
strncmp
wcsncmp
wcsncpy
??3@YAXPAX@Z
Name
.text
Size
85KB
Virtual Size
84KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
Adobe CC 2017/payloads/Microsoft VC 2015 Redist (x86)/Media_db.db
- SHA256 78179c037b1b0fe09e900d11106d6c5fda44b23f739e9cc74dfb1cf73daf87e4
- MD5 18e45b7d2b3e4fce24d5a011680da49a
- SHA1 14b0eea62683d944b4887163604834d36802f2e4
- SHA512 ac18843a56e152d3a57fd2216f5c125c132210d69d9b653a96f8137a751129ad21890be6871bfc4022dd605bbb204bae6cf0716e4698702a4a48b269b57140c6
- SSDEEP 768:/OL8o1+Mon/Re13wxtUBH5g7Qjhn0iFL1vpDIaNIJyJeXVdPDuZkYeV1j6qqi1nh:mLqn/Re13wxtUBH5g7Qjhn0iFL1vpDI3
- TLSH T1A003FF6D8EC1A39EC979A6F8A0C04E28FD38778E37D0A5D0929542E9D11BDC3D57F221
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe CC 2017/payloads/Microsoft VC 2015 Redist (x86)/vcredist_x86.exe
- IMPHASH 9c61e193ad83beb9c6707bb817822229
- SHA256 fb076333df3d242cfe0a490014d5c07297d994a407860d45d9e4acd2d3d33b28
- MD5 2fdc47706033900505d12c63aef97bfb
- SHA1 7f35d9236a794b3d4b454be519c21386c050bbca
- SHA512 22dfeb32c6adebf3bc333f0a0c3cd0da964f394cf0bf3fa2064b6eacd7954be05edb6fc038e019a4862862aab903856d382f78b06080ed67f044a38eb03c0ca2
- SSDEEP 393216:PJElp+dkBSuF2SfUfn6SdtZdffTMunioR2n:Sp+Ty2SfUfn3ZtdZA
- TLSH T122E63372BAD8803BCAE70473F854F9707E3A652C232045B7D3889D5D2A7529767FB212
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Minor OS version
0
Major OS version
4
Entry point
88463
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
comctl32
ord17
shell32
SHGetSpecialFolderPathW
ShellExecuteW
SHGetMalloc
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetFileInfoW
ShellExecuteExW
gdi32
CreateCompatibleDC
CreateFontIndirectW
DeleteObject
DeleteDC
GetCurrentObject
StretchBlt
GetDeviceCaps
CreateCompatibleBitmap
SelectObject
SetStretchBltMode
GetObjectW
advapi32
FreeSid
AllocateAndInitializeSid
CheckTokenMembership
user32
CreateWindowExW
GetDesktopWindow
wsprintfA
SetWindowPos
SetTimer
GetMessageW
ScreenToClient
KillTimer
CharUpperW
SendMessageW
EndDialog
wsprintfW
MessageBoxW
GetParent
CopyImage
ReleaseDC
GetWindowDC
GetMenu
GetWindowLongW
DispatchMessageW
GetWindowTextW
GetWindowTextLengthW
SetWindowTextW
GetSysColor
DestroyWindow
MessageBoxA
BringWindowToTop
ShowWindow
GetKeyState
GetDlgItem
GetClientRect
SetWindowLongW
UnhookWindowsHookEx
SetFocus
GetSystemMetrics
SystemParametersInfoW
DrawTextW
GetDC
ClientToScreen
GetWindow
DialogBoxIndirectParamW
DrawIconEx
CallWindowProcW
DefWindowProcW
CallNextHookEx
PtInRect
SetWindowsHookExW
LoadImageW
LoadIconW
MessageBeep
EnableWindow
IsWindow
EnableMenuItem
GetSystemMenu
CreateWindowExA
wvsprintfW
GetClassNameA
GetWindowRect
ole32
CreateStreamOnHGlobal
CoCreateInstance
CoInitialize
oleaut32
SysAllocStringLen
VariantClear
SysFreeString
OleLoadPicture
SysAllocString
kernel32
SetFileTime
SetEndOfFile
GetFileInformationByHandle
VirtualFree
GetModuleHandleA
WaitForMultipleObjects
VirtualAlloc
ReadFile
SetFilePointer
GetFileSize
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
FormatMessageW
lstrcpyW
LocalFree
IsBadReadPtr
SuspendThread
TerminateThread
GetSystemDirectoryW
GetCurrentThreadId
InitializeCriticalSection
ResetEvent
SetEvent
CreateEventW
GetVersionExW
GetModuleFileNameW
GetCurrentProcess
SetProcessWorkingSetSize
GetDriveTypeW
CreateFileW
SetEnvironmentVariableW
GetTempPathW
GetCommandLineW
GetStartupInfoW
CreateProcessW
CreateJobObjectW
ResumeThread
AssignProcessToJobObject
CreateIoCompletionPort
SetInformationJobObject
GetQueuedCompletionStatus
GetExitCodeProcess
CloseHandle
LoadLibraryA
SetThreadLocale
lstrlenW
GetSystemTimeAsFileTime
ExpandEnvironmentStringsW
CompareFileTime
WideCharToMultiByte
FindFirstFileW
lstrcmpW
DeleteFileW
FindNextFileW
FindClose
SetCurrentDirectoryW
RemoveDirectoryW
GetEnvironmentVariableW
lstrcmpiW
GetLocaleInfoW
MultiByteToWideChar
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetSystemDefaultLCID
lstrcmpiA
GlobalAlloc
GlobalFree
MulDiv
FindResourceExA
SizeofResource
LoadResource
LockResource
GetProcAddress
GetModuleHandleW
GetStdHandle
ExitProcess
lstrcatW
GetDiskFreeSpaceExW
SetFileAttributesW
SetLastError
Sleep
GetExitCodeThread
WaitForSingleObject
CreateThread
GetLastError
SystemTimeToFileTime
GetLocalTime
GetFileAttributesW
CreateDirectoryW
lstrlenA
WriteFile
GetStartupInfoA
msvcrt
_purecall
memcmp
??2@YAPAXI@Z
memmove
memcpy
_wtol
strncpy
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
??1type_info@@UAE@XZ
_onexit
__dllonexit
malloc
free
wcsstr
_CxxThrowException
wcscmp
_beginthreadex
_EH_prolog
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
memset
_wcsnicmp
strncmp
wcsncmp
wcsncpy
??3@YAXPAX@Z
Name
.text
Size
85KB
Virtual Size
84KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
Adobe CC 2017/payloads/Setup.xml
- SHA256 3d1af981edb7713e512d1db17d5c3d787329150274a7e50ce390d5b2d202b8e7
- MD5 d5fae5f02b0b5fb28e5f4b1b35e483ae
- SHA1 6971a2b76ef193e524c9e967f3589e8234ed608a
- SHA512 20a63da1361f86a3629fe5aa29779e3bd41dfc494591a3064d488f0209a12cbae5806ca056cfce4ef7b9a70b14f71a358cd88949ebd1a94342e4f6ff9381329f
- TLSH T12E31CD76A240D8BDBF1076FEA080CC88B69BBAB37D521D152A57388FF0C7690F140169
- MD5 SHA1 SHA512 TLSH
Adobe CC 2017/resources/AdobePIM.dll
- IMPHASH eb85531a0232873d71bb8c18b90e2c2e
- SHA256 e6e2d06d3079eb31699808cd146262c705d35c93b3b2785b9ca0025da98a5628
- MD5 d89cdbf1a64fbe024390bfebb21239dc
- SHA1 59dee85b8a5c54c2d3bf4b70d44b54a17a223355
- SHA512 98a13835845b04b4df3e0386b8931ae7690c62b1297f977e8c903b18b22b934957e52334994fe5f22cbfdf053318f9c3a2d0f7a7ea0f1e0a19afcc69ff27dd27
- SSDEEP 24576:OUNDH3N8P/R588WVBdysOFWO+5rLhRT7YDBTpjGp:DH3GMVG0JbYDBTVGp
- TLSH T156558D11B393C171E8EB11F01A7D7F9A193C6915072489DBE3D82C996D301D2BB3BBA6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Minor OS version
1
Major OS version
5
Entry point
790781
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\builds\AAM\8.0\source\dev\aamcore\target\win\Release\resources\AdobePIM.pdb
msi
ord147
ord74
ord145
kernel32
CreateDirectoryW
GetTempPathW
GetDateFormatW
GetTimeFormatW
GetLocalTime
OpenProcess
Process32FirstW
Process32NextW
CreateToolhelp32Snapshot
FindFirstFileW
CreateProcessW
MoveFileExW
SetEvent
CopyFileW
GetVersionExW
GetModuleFileNameW
FindClose
ResetEvent
CreateEventW
FindNextFileW
GetDiskFreeSpaceExW
SetFileAttributesW
GetFileSize
GetCurrentProcess
GetModuleHandleW
WriteFile
GetExitCodeProcess
GetFileAttributesW
ReadFile
CreateFileW
FlushFileBuffers
SetLastError
GetProcAddress
RemoveDirectoryW
lstrcmpiW
DeleteFileW
GetSystemTime
GetFullPathNameW
GetFullPathNameA
CreateFileA
SetFilePointer
SetEndOfFile
FreeLibrary
QueryPerformanceCounter
UnlockFile
LockFile
GetTickCount
GetSystemTimeAsFileTime
FormatMessageA
InitializeCriticalSection
LoadLibraryW
GetFileAttributesA
LeaveCriticalSection
LockFileEx
EnterCriticalSection
GetDiskFreeSpaceW
LoadLibraryA
GetDiskFreeSpaceA
DeleteCriticalSection
GetCurrentThreadId
MultiByteToWideChar
AreFileApisANSI
DeleteFileA
lstrlenW
GetACP
GetFileSizeEx
lstrlenA
DosDateTimeToFileTime
SetFileTime
lstrcatW
GetFileTime
LocalFileTimeToFileTime
OpenMutexW
WriteConsoleW
SetStdHandle
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
LocalFree
GetCurrentProcessId
CloseHandle
ReleaseMutex
HeapReAlloc
OpenSemaphoreW
LocalAlloc
CreateSemaphoreW
GetLastError
ReleaseSemaphore
Sleep
WaitForSingleObject
CreateMutexW
InitializeCriticalSectionAndSpinCount
SetEnvironmentVariableA
GetCommandLineA
OutputDebugStringW
LoadLibraryExW
GetConsoleCP
SetFilePointerEx
ReadConsoleW
GetConsoleMode
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetModuleFileNameA
GetFileType
GetOEMCP
IsValidCodePage
GetProcessHeap
GetStdHandle
HeapSize
GetModuleHandleExW
IsProcessorFeaturePresent
IsDebuggerPresent
HeapFree
HeapAlloc
DecodePointer
EncodePointer
GetStringTypeW
GetTimeZoneInformation
ExitProcess
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
RaiseException
GetTempPathA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCPInfo
RtlUnwind
user32
wsprintfW
advapi32
SetSecurityDescriptorDacl
CreateWellKnownSid
GetNamedSecurityInfoW
SetNamedSecurityInfoW
FreeSid
SetEntriesInAclW
AllocateAndInitializeSid
InitializeSecurityDescriptor
shell32
SHGetPathFromIDListW
SHGetFolderPathW
SHGetFolderLocation
SHGetSpecialFolderPathW
SHCreateDirectoryExW
ole32
CoCreateInstance
OleRun
CoUninitialize
CoInitialize
StringFromGUID2
CoCreateGuid
CLSIDFromProgID
CLSIDFromString
CoTaskMemFree
oleaut32
SysFreeString
VariantInit
VariantCopy
VariantClear
SysStringLen
SysAllocString
GetErrorInfo
shlwapi
PathRemoveExtensionW
PathRemoveBackslashW
PathIsFileSpecW
PathFindFileNameW
PathStripPathW
PathRenameExtensionW
PathRemoveFileSpecW
PathIsDirectoryW
PathFileExistsW
PathAddExtensionW
PathAppendW
AAMIU_Uninstall
AAMIU_getDeploymentValidationStatus
AAMIU_preInstallPropertySet
pim_copyPkgsFromACFToCFPath
pim_createLibraryRef
pim_createLibraryRefWithType
pim_createOrUpdateAAMInventory
pim_executeInstallModifersForInstalledPackages
pim_freeLiraryRef
pim_getAppletRegistrationInfo
pim_getCurrentPIMCFPath
pim_getCurrentPackagesVersion
pim_getCurrentPathType
pim_getInstalledPackagesInfo
pim_getPathOfType
pim_getStandardACFPath
pim_getStandardUSFPath
pim_getStandardUSFTempPath
pim_getUpdateStatusAtPath
pim_getUpdateStatusAtPathCInterface
pim_haveEnoughDiskSpaceIfACFLatest
pim_haveEnoughDiskSpaceToInstallPackages
pim_haveEnoughDiskSpaceToInstallPackagesCInterface
pim_installAdobeApplicationManager
pim_installPackage
pim_postInstallPackages
pim_registerProgressTicksCallback
pim_syncFromPathToACF
pim_syncFromPathToPath
pim_syncUSFToACF
pim_uninstallAAMFromAAMCleanerTool
pim_uninstallAAMUsingAAMCleanerTool
Name
.text
Size
936KB
Virtual Size
936KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
227KB
Virtual Size
226KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
18KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
115KB
Virtual Size
114KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=199, version=41118,
count=40, id=205, version=50929,
count=79, id=207, version=50929,
count=229, id=206, version=50929,
count=6, id=207, productName=VS2012 UPD4 build 61030, version=61030,
count=217, id=1, productName=Unmarked objects,
count=21, id=185, version=30716,
count=74, id=211, version=61030,
count=1, id=202, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=201, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=151,
count=1, id=204, productName=VS2012 UPD4 build 61030, version=61030,
Adobe CC 2017/resources/Dictionary/cs_CZ/stringTable.zdct
- SHA256 33f6b5780baa9cee821ca926414e0425652f6a2e7747f0a5ec2296d5a0ab5000
- MD5 eddc4cef125c3c07ee9951301f2a901b
- SHA1 ec16b1ae45a231f9abac862388b21846f8b81f66
- SHA512 42219d03b0e5750798a028ff3a51c2a26dd0f5784cada98dffb8fb2d718a6c0aadf46b4e021d65fad5a11077097062af015d3eb9b573dac8714eaf4ba0b26cab
- SSDEEP 96:Yad1hENbr+yb3uw8KSKANxJoIhWmZLnXDEr68eBRwgIUBn8piGweu:PpENbtbn8RKANDXK6pWoGw/
- TLSH T131C1C152B7F82154F5F33F49B9B81A624ABF7D55AD39C41E43510A4D08F2A80E8B0B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe CC 2017/resources/Dictionary/da_DK/stringTable.zdct
- SHA256 68b528670272f16ad6e56b695fb8731acbbda3f4089fa5b8e158e861ca387ed4
- MD5 76f5cea9f6b28065200cc434a640d8ca
- SHA1 ff15c56a462bd9e40c41ddb512164c6d36320146
- SHA512 c3f2d7a685dc32c0531953c523e98c166b899c9737df828097e6925829ae105f92069c47b435d886d8c3524619757c3427abaf77608f5f23408d13f8fe34f4b1
- SSDEEP 96:Ya/ycZOOnvHmG2IrhihsYUJxhgTopWJuYqNu5g+hq9nOi+zuAPDjojFe:Pl/XjPyuW0Nu5C2
- TLSH T19FC16E92A3F82218FAF32F44BDBD596119BEBD955D3AD92C1354184C0DF2A88D4B0B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe CC 2017/resources/Dictionary/de_DE/stringTable.zdct
- SHA256 77936d1edaf4e303a9f9b71a74455ce7f76d265a905c5127a9bb2fb45d58f809
- MD5 556eb18a9971e9f304540bc9e96364ad
- SHA1 f892331cbae7eac769b24ed34c32d683af5a9683
- SHA512 5b6b4382b01cdb4c2715f9b24deb53e1789bdd7bff552207264fd647955a53c8919fc4664e9653c0b0279c434fd84d5a0d13b862a952ef3690b96b6fb45f3289
- SSDEEP 96:YabIbMtTVG8fOAaIN0pO/JsiAcaWVosHsgNWD9uwnXnnEqidJpi2:PsoSo6pO/4WbHTNiQxR
- TLSH T158D15C62A3F46618F6F32F84BDBD6A611EBEBC996D3AD92D1350144C08F1A44D470B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe CC 2017/resources/Dictionary/en_AE/stringTable.zdct
- SHA256 005f99f69237cd437ae05bf93720c81e6cdfbd9e0d3153d84098640d333a2f15
- MD5 3997b6fd5325d3bb705e93071d4617c4
- SHA1 4fc4c5796649bc39f5813563f56412b79d2c3a5c
- SHA512 d51a50612f463309afc2573561da3a80c61ba2fb9da17a80f41748fcc7ad83208a15936b45325918f7a81ca34240a4f7b71155bdf6323ac503b63821b31f6e3a
- SSDEEP 96:x+C/QpXGbcd68A5nOQohpn1IFgjnEqizuG:x78WD8jRpnaF3zh
- TLSH T1FCB14A92A3F82218F6F73F48BDB968615EBE7C559D3AD52C1751080D09F2A44D8B0B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe CC 2017/resources/Dictionary/en_GB/stringTable.zdct
- SHA256 103abd70b4b5cdc76d740632362a5fd38c84a6a779980f4327d0b102238ff52d
- MD5 8107b8505631a3e6fe04252b37d65a89
- SHA1 6cb0bf5dbfae4d5e3963f0838e7604e3f73c201a
- SHA512 fd7f2ccfedcbef4f2608a047e1602bbcd97254e1432b5af89f17817ad9ccc1c95285ad6c96bf9aa753c44658e4f950bb6d88ca30e5e1a1236854cc128bdd5bcf
- SSDEEP 96:x+CQz6SGGsw6kA5nF/oZkS1IFgDnEqizq:xUz2rksykSaFXzq
- TLSH T143B13A91A3F82218F6F73F48BEB969615EBE7C569C36D52C1251080D09F2A44D8B0B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe CC 2017/resources/Dictionary/en_IL/stringTable.zdct
- SHA256 005f99f69237cd437ae05bf93720c81e6cdfbd9e0d3153d84098640d333a2f15
- MD5 3997b6fd5325d3bb705e93071d4617c4
- SHA1 4fc4c5796649bc39f5813563f56412b79d2c3a5c
- SHA512 d51a50612f463309afc2573561da3a80c61ba2fb9da17a80f41748fcc7ad83208a15936b45325918f7a81ca34240a4f7b71155bdf6323ac503b63821b31f6e3a
- SSDEEP 96:x+C/QpXGbcd68A5nOQohpn1IFgjnEqizuG:x78WD8jRpnaF3zh
- TLSH T1FCB14A92A3F82218F6F73F48BDB968615EBE7C559D3AD52C1751080D09F2A44D8B0B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe CC 2017/resources/Dictionary/en_US/stringTable.zdct
- SHA256 103abd70b4b5cdc76d740632362a5fd38c84a6a779980f4327d0b102238ff52d
- MD5 8107b8505631a3e6fe04252b37d65a89
- SHA1 6cb0bf5dbfae4d5e3963f0838e7604e3f73c201a
- SHA512 fd7f2ccfedcbef4f2608a047e1602bbcd97254e1432b5af89f17817ad9ccc1c95285ad6c96bf9aa753c44658e4f950bb6d88ca30e5e1a1236854cc128bdd5bcf
- SSDEEP 96:x+CQz6SGGsw6kA5nF/oZkS1IFgDnEqizq:xUz2rksykSaFXzq
- TLSH T143B13A91A3F82218F6F73F48BEB969615EBE7C569C36D52C1251080D09F2A44D8B0B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe CC 2017/resources/Dictionary/en_XM/stringTable.zdct
- SHA256 005f99f69237cd437ae05bf93720c81e6cdfbd9e0d3153d84098640d333a2f15
- MD5 3997b6fd5325d3bb705e93071d4617c4
- SHA1 4fc4c5796649bc39f5813563f56412b79d2c3a5c
- SHA512 d51a50612f463309afc2573561da3a80c61ba2fb9da17a80f41748fcc7ad83208a15936b45325918f7a81ca34240a4f7b71155bdf6323ac503b63821b31f6e3a
- SSDEEP 96:x+C/QpXGbcd68A5nOQohpn1IFgjnEqizuG:x78WD8jRpnaF3zh
- TLSH T1FCB14A92A3F82218F6F73F48BDB968615EBE7C559D3AD52C1751080D09F2A44D8B0B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe CC 2017/resources/Dictionary/es_ES/stringTable.zdct
- SHA256 011ab6d603284d098ebaf7959609343c09a8b9f558479aa9c903ab915643e75d
- MD5 2bb0b6e3ab7b645ebc0b3116bbcfbfc1
- SHA1 f278d1be7e11dc819be031413065b99e382a386f
- SHA512 c83fcec6b9d339703d1db8e8804341c96816cb7d6521d06505bccce2737f8945bdb3078207b1c6a80ae022bf55273a810fbd455d0870521eef328e0dc94461ab
- SSDEEP 96:YaB4F2T89SomrTaVMQGmBa4EDFY9upim4uVVgM6CSV0G2VuDYnEqin0HnkV:PJxpGwpOPnV
- TLSH T1D1C14352A7F86245FAF33F48A9B929614EBFBD919C3AC81D4320491D09F2E44D970B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe CC 2017/resources/Dictionary/es_LA/stringTable.zdct
- SHA256 565465d24b923dd78bb7f0f84a301217678220d61f98f129ecdc59fb15175345
- MD5 388ca3387c6632c101ceea71501c3ed4
- SHA1 313fc1165627c24d32497d9cfd297762d02c8297
- SHA512 bb06ffcebe7c9a530cee142414dfc788a26c8161778cbb78ff6b64ae9269ce20913ca1b35cde70a0208389587a3dc880a490f727f80520322b344a7867852cab
- SSDEEP 96:xB4F2T89SomrTaVMQGmBa4EDFY9upim4uVVgM6CSV0G2VuDYnEqin0HnkP:xJxpGwpOPnP
- TLSH T147C15352A7F86245FAF33F48A9B928614EBFBD919C3AC81D4320491D08F2E44D970B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe CC 2017/resources/Dictionary/es_MX/stringTable.zdct
- SHA256 011ab6d603284d098ebaf7959609343c09a8b9f558479aa9c903ab915643e75d
- MD5 2bb0b6e3ab7b645ebc0b3116bbcfbfc1
- SHA1 f278d1be7e11dc819be031413065b99e382a386f
- SHA512 c83fcec6b9d339703d1db8e8804341c96816cb7d6521d06505bccce2737f8945bdb3078207b1c6a80ae022bf55273a810fbd455d0870521eef328e0dc94461ab
- SSDEEP 96:YaB4F2T89SomrTaVMQGmBa4EDFY9upim4uVVgM6CSV0G2VuDYnEqin0HnkV:PJxpGwpOPnV
- TLSH T1D1C14352A7F86245FAF33F48A9B929614EBFBD919C3AC81D4320491D09F2E44D970B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe CC 2017/resources/Dictionary/es_NA/stringTable.zdct
- SHA256 565465d24b923dd78bb7f0f84a301217678220d61f98f129ecdc59fb15175345
- MD5 388ca3387c6632c101ceea71501c3ed4
- SHA1 313fc1165627c24d32497d9cfd297762d02c8297
- SHA512 bb06ffcebe7c9a530cee142414dfc788a26c8161778cbb78ff6b64ae9269ce20913ca1b35cde70a0208389587a3dc880a490f727f80520322b344a7867852cab
- SSDEEP 96:xB4F2T89SomrTaVMQGmBa4EDFY9upim4uVVgM6CSV0G2VuDYnEqin0HnkP:xJxpGwpOPnP
- TLSH T147C15352A7F86245FAF33F48A9B928614EBFBD919C3AC81D4320491D08F2E44D970B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe CC 2017/resources/Dictionary/fi_FI/stringTable.zdct
- SHA256 26c71513bff94dff5cb582aeddda26bd982404c5e55aef2f8c6acf35316ace72
- MD5 7d19f39c19321c78b41689e54440410b
- SHA1 bf2a60ed03b77def1f19ec545b0d0d1275b5c061
- SHA512 4fe2b2c750855c30031b53eab51854077dab1fe04128a21a6bbe326a1104b262e6f8fc4b4076a3b6e47e20be06159e33ee8988434097743bcb04d5a63ed0e2ae
- SSDEEP 96:Yacz7rardXTki7z1NXOpTHEWFnEqiF0S1:PKrCXTki/n+pTHdCF0o
- TLSH T1B5B16E92A7F96228F6F31F446DB85A110ABF7DA65DBAD42D0B54080C09F2684E871B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe CC 2017/resources/Dictionary/fr_CA/stringTable.zdct
- SHA256 b4d7350b5610c7d51025b7b3d6551e289e5c4dd026d5997cb40c93fa4be7a0b7
- MD5 ce5f1fe5353566f06fe3262f0adc7844
- SHA1 22318d4d3afbf12d184821cd069164df17706944
- SHA512 a0a6a7427bb6ba620cb9a175da8708330835fa7afb013f8629282825baf14485a626b1672b0cb0962ccd5b9812a88e63bb101a2cd8de886d7c35571386e636df
- SSDEEP 96:Yapiby3HX7E+GMx7JrMaK4y2b36Z47VyAY2nEqihtKs4P4:PYGIXw7JoaK72OC7rIhtK5g
- TLSH T1B2D11592A7F85214FAF33F48B9BA68651EBF7C8A9D35C42C1751584D08F2A44D8B0B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe CC 2017/resources/Dictionary/fr_FR/stringTable.zdct
- SHA256 b4d7350b5610c7d51025b7b3d6551e289e5c4dd026d5997cb40c93fa4be7a0b7
- MD5 ce5f1fe5353566f06fe3262f0adc7844
- SHA1 22318d4d3afbf12d184821cd069164df17706944
- SHA512 a0a6a7427bb6ba620cb9a175da8708330835fa7afb013f8629282825baf14485a626b1672b0cb0962ccd5b9812a88e63bb101a2cd8de886d7c35571386e636df
- SSDEEP 96:Yapiby3HX7E+GMx7JrMaK4y2b36Z47VyAY2nEqihtKs4P4:PYGIXw7JoaK72OC7rIhtK5g
- TLSH T1B2D11592A7F85214FAF33F48B9BA68651EBF7C8A9D35C42C1751584D08F2A44D8B0B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe CC 2017/resources/Dictionary/fr_MA/stringTable.zdct
- SHA256 6974f6143c2ff7593cb324a397e702b3a91091d50e8fef3e025838c0852adacd
- MD5 ce6bbaf57d946b2bebd4a1356e6ebf37
- SHA1 2b1d3cba5e4e0a377a4bdbf26cd83b173ea8a9d9
- SHA512 9b25ae66f7440f691a1c5bbe8ac031932bee67c69479ebbb5ad4a763006e8d9b13751e6ec47c4cbf2b02a103969c94e7373b92da23b527c2c4c639e8580b28cd
- SSDEEP 96:xpiby3HX7E+GMx7JrMaK4y2bXaZ47VyAY2nEqihtKs4Po:xYGIXw7JoaK72zaC7rIhtK5g
- TLSH T157D11692A7F86214FAF33F44B9BE58610EBF7D8A9D35C42C1751584D08F2A44D9B0B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe CC 2017/resources/Dictionary/fr_XM/stringTable.zdct
- SHA256 6974f6143c2ff7593cb324a397e702b3a91091d50e8fef3e025838c0852adacd
- MD5 ce6bbaf57d946b2bebd4a1356e6ebf37
- SHA1 2b1d3cba5e4e0a377a4bdbf26cd83b173ea8a9d9
- SHA512 9b25ae66f7440f691a1c5bbe8ac031932bee67c69479ebbb5ad4a763006e8d9b13751e6ec47c4cbf2b02a103969c94e7373b92da23b527c2c4c639e8580b28cd
- SSDEEP 96:xpiby3HX7E+GMx7JrMaK4y2bXaZ47VyAY2nEqihtKs4Po:xYGIXw7JoaK72zaC7rIhtK5g
- TLSH T157D11692A7F86214FAF33F44B9BE58610EBF7D8A9D35C42C1751584D08F2A44D9B0B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe CC 2017/resources/Dictionary/hu_HU/stringTable.zdct
- SHA256 7c4c397a70211fad006182002a965643ca1fb8cb0bff321f977b01744d02ce9d
- MD5 1dc80f50a4a3b65841c76e6e57bc50ad
- SHA1 4c059bdd51455472bae68fc6a22850c4d661323a
- SHA512 1910eceb2e1831acdee252cefd84ca898ab1c08daac1810a92dbca241671521bb636e18c2ae85745324bffec9e6587b5438e30c3a4d49ae15a4f6ef99e1fa7ad
- SSDEEP 96:YaTJtf2bsOtdLeYQkWdhz5r4T1YYEto7A33QuPa5y7nEqiGaegVb7:PlFSsKdpbo5rE2Zto7M3Q2gGw
- TLSH T137B19D52A2FC2105F9F35F497DFD69A10A7E7D24AE3EC52E8690554C0AF2980D870BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe CC 2017/resources/Dictionary/it_IT/stringTable.zdct
- SHA256 2158a339add7faf61dc40bd42cef0ed50363d5f39e076b560b4a3c51af62a726
- MD5 4d32ba27e1f59a41bec509b45aba43d5
- SHA1 0e6813ef4463c5a276b8e6cb35e984c81420479e
- SHA512 fd8d5fcfbc4fe8f90325a4782b2d3a359f10e7203d701926784b360069b107c56d2e37b528e22089f90d8a98b8e55463000216c66e0f44c07a3189f2d214e4c3
- SSDEEP 96:Yay9S833GeHdVNs4jN4OQwF4X8nEqi2dTn/7:PNT+dPs4uA4t4D
- TLSH T167C13652A3F82218F5F33B48BD7D59644EBFBE569D3AC42D0295085C09F2A54D8B0B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe CC 2017/resources/Dictionary/ja_JP/stringTable.zdct
- SHA256 647d60621036fb83f206ddf659a2d2a5e999f629206a753c1e7de56ed8ac3d24
- MD5 64aee8d767207f6eab4638a270ccb188
- SHA1 4378a01918f359ace6a60a533f1235ea3a8ffc14
- SHA512 204fc24bab342bebb169f6c4c16b3a36e42acd4e6a162ea18fbc8b032db34480922835541b32fbb21c31d455ac50919d577fb3fe5175774b5bbe547df88a0141
- TLSH T116814556B7F02609F8F30BC809BD7D3129BEBD141D17C86D5BA1880D48F2A49D6617B3
- MD5 SHA1 SHA512 TLSH
Adobe CC 2017/resources/Dictionary/ko_KR/stringTable.zdct
- SHA256 0e04223ed425182cc193b054799471189b82aa3dafad7ce8341222807f538b37
- MD5 def407d1dd772f6eecd0db26e5ab3bdb
- SHA1 a07e73d8e75e6df3e85556f439ee4cdcde817cf3
- SHA512 3a01d384b9adef8b9b1504c6ed92e5d29e38faea8d953795b6a962f36083cbb0720336cca128d99331738f2011b948aefc1363ef718cf4ba27235dd820ed8166
- TLSH T197715687E3F96310B4B36A8D65BD3D7116BF7A591D2BD82D0775082C0EF2A14D520BA3
- MD5 SHA1 SHA512 TLSH
Adobe CC 2017/resources/Dictionary/nb_NO/stringTable.zdct
- SHA256 0eb3a1a61d427bcbb31521aad789b5dc74cb54d4ddff9b048a6fe00bdc790c6e
- MD5 2c64d8595cd8675a93266586a4645b75
- SHA1 b8469dcd818bbdf909d80c7b7b82e3174fe3a74e
- SHA512 def019f213597e864296cf99acc1a6c70ebb8f2a08eea7bd5cc9b3a3abd92ac0034cfaaecf1f04f80ebf28137666df2d15fe146adfb09ec71f6f46ac195e2e24
- SSDEEP 96:YaLFGrFdWH8lHEGV788iFiCUTeZ2i4hbCo3Mz6O92F9FYnEqi+mg1QUvo:P8JdWShfal4Nqz6Pp
- TLSH T1EAB18EA2B3F92218F5F32F44BDBC596109BE7CA15D39D92C0314185D09F2A98E5B0B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe CC 2017/resources/Dictionary/nl_NL/stringTable.zdct
- SHA256 60e527b863fc57f322307150a3d516b19a7341c158ca798d27f2fcd8e3f2a6c3
- MD5 90190367bf4bb5113ab2b54800553dab
- SHA1 6faefa1c1ce9ec631f119c0c67a91c0a9ed00c7b
- SHA512 fd73237d8cf3f7d094b2288dabb7905763d1968ac44dc7de2ce72560103102a01cbdfdf55ef75ff60b5165a0030b90351e17317ac0869c9490fa766cff1f57bb
- SSDEEP 96:Yauk1JiONG88iOC4GnSjsviQlowtV4nrOT8ptncqiLBKUK1:P9w/UueFtorNys
- TLSH T1D4C18B52A3F86218FAF32B447DBD69215EBFBC956D36D52C0350089C09F2A44E8B0B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe CC 2017/resources/Dictionary/pl_PL/stringTable.zdct
- SHA256 f75a0c6018632db9d89ac54aa33fb8f9ca4c15a107a922f6daa6ae8b48ac404d
- MD5 6c969434bc227faa2b75ec150a22c0d3
- SHA1 fdea6a39fac8f279cea8081c3708b56bca5a1c7f
- SHA512 564a5ff39a28599eb8475371e7a399edb73e33e085ab9626d7d4fda7f97b739999b84664331222043192cf2922337290b93528f539a3294d6623a4820b26e545
- SSDEEP 96:YaRTadxZD+DFG9Bp+DD/8kjBCMUs38kIijnDi9sVxER:PVaD98BCMH239sVWR
- TLSH T112C1D012B3F81258F5F72F88A9B96A754EBFBC256E35C46E5361080D09F1A80D970B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe CC 2017/resources/Dictionary/pt_BR/stringTable.zdct
- SHA256 7835c6c2289d163a2d51869d9c4befd194063d52fa66f675cc9b853aa21bd601
- MD5 39441adea88bbc8ff72d6e5bf483042e
- SHA1 1515c75996692d14bc3dd022602407e515ee70dc
- SHA512 d5b9511f3d856c2a2d836eea3668720d3076c6c8e070489fcf45cfb38653a8decddab466e5c17dcbf4f2027b3817df008e7d8779820f60898a961ffde8631461
- SSDEEP 96:YaSurE4Ti3GJGFD3GL+Yx0FiXG0/79WW2ozznEqiiwLTLQ:PShxBMx5P9Wru
- TLSH T1BEB13452A7F82254FAF32F4A6AB829A14ABF7D51AC3AC41D4760095D0DF2F40D970B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe CC 2017/resources/Dictionary/ru_RU/stringTable.zdct
- SHA256 55b55ce9ea6153298ce6534d95a50d0c3663f0531048038402a788eee3c7c137
- MD5 5f3628802ea7bbafe91649404dc21db5
- SHA1 f71a4d76be98ead0daba147949bd24bc5ee5e9ca
- SHA512 d260e1133371406bef9a157b03c25a7d2781e67b07dcb5eb50172d34c35018099e76b8e6e7e02cd3312a7505a2699a2c136acd0f90c4e223b1c88adfb10292d2
- SSDEEP 96:YaFuXcQF1fdI56bD4z9R/0YTMOWPmT2NROnNiNcSbnd:PFuX7f5bD4z9R/0YTXWOTytbnd
- TLSH T139C1074AF7B86200F4B2E7881EBA5CE2116E7858191684DD76AC7C1C18F9B75B330BD7
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe CC 2017/resources/Dictionary/sv_SE/stringTable.zdct
- SHA256 529a4a632643d8bd96a2475865e044c1e379cf56b1e12038f24c1c5226925b5c
- MD5 acff47e5b85d8b3267971dc02a44a8a3
- SHA1 460db08bdf22369b83ca262f1423b2363e20a8c2
- SHA512 abe9d1ea016827c2ddccec30b2f4e4259b5f05c16c30254532491e519c0eb8946b1c68eb5f8b8c6358d18259aba8a41b505051c942febf50c5e855bab9408f11
- SSDEEP 96:YaDk0unF2bG84dAIxly3uRhayTo2lWM/zOQ1pnEqipr:PDk0ch06ly2v5lWM/zcpr
- TLSH T123B18F92A7F82218F9F35F88BDBD596119BEBC955D3AD82D1714085C08F2A88D4B0B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe CC 2017/resources/Dictionary/tr_TR/stringTable.zdct
- SHA256 ae99a9e5b896cf6f71cfba30ca8df3806709bad665d245ea2e9e69aaac97f54b
- MD5 63ca61e0c13de8970d647d8274bd8332
- SHA1 2b19ac91ecc15f321775b156424d2fcb760eee1d
- SHA512 c647ec9bf81fee80b567cf9167d771a96afbaa521eaf79186c5c3be2298cc9a0f8671fde40d29aa7dac49ef22468046edc4054f588c886df61b3c7975d4341c6
- SSDEEP 96:YaPZApg2pKGwmC65Zk3kCmKwCmRGInEqij0CsCd6:PGre65Zk0TQ+
- TLSH T195B1AA55A3F86209F5F32B496DFD68610BBE7D957D3AC42E0371181C09F2AC68460BB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe CC 2017/resources/Dictionary/uk_UA/stringTable.zdct
- SHA256 215a4ce4e46b87a226fb9915076b1d454fee78420ab60c8f7046e0d641b7c50d
- MD5 94ba672d44158f67c1442c0a8e361735
- SHA1 44207344fc8816b6ef7cb61805db58c7fa4d7a60
- SHA512 0b4e86c5f707494aef10febd4420983511ae710b5d484db12bc22ffb8c07fafa6b4cd8e1d0b4c5534a2c77b59386adf655098b9cafa05631c4870cadc72f16e6
- SSDEEP 96:YazpcuQ7J7TFYNqFwhC/tvnfibJmX9fCz:P0NTFY8uh1bYXFI
- TLSH T14AB12716F7B45204A4B297890ABF5CE3256EB8541857C4D977AD7C0C08FAA7AB2307D3
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe CC 2017/resources/Dictionary/zh_CN/stringTable.zdct
- SHA256 99af52bdb0e55127c0da7d0d5e36db1ce2e9c68c8bf1405bfeb6246aca899e83
- MD5 757849aa974338f56e01d206a82b0644
- SHA1 b15ed82eedf6e36b465956be47e5f39e9027b757
- SHA512 700ffee1ce4d3cc7b6bd178e1dee8b1be40ac0781c17a38f70bd285c6a073044cd9484680c58df83e01dede6956412fb93da05ab36bb65ebcff7635ca65c2906
- TLSH T10E610463F3F02104F9F32F8C5AFD6D325ABE7A545E26C43E87A5580D09F2A459460BA3
- MD5 SHA1 SHA512 TLSH
Adobe CC 2017/resources/Dictionary/zh_TW/stringTable.zdct
- SHA256 c92ba094b15ab4c70b6593ab5bea2b7fc7168a1ba092725a8b6fb39c8c3babb5
- MD5 6ad608ffc0cde5e564615200f42e3df8
- SHA1 815b6b037268241c783d9c9977b5293d5f1f0a46
- SHA512 40e25fe1f882ba673146bf67c1e550a6cd73c1f7df3dc99e2280218de6973cf889bb50277deabc12747f4eddd6d3c1931c8902d0c50d566aee66c766d7a8e903
- TLSH T10261F663B3F02601F4B32B8E5AFE2C735ABE7A141D26C87D57B5580D09F2A45D4607A3
- MD5 SHA1 SHA512 TLSH
Adobe CC 2017/resources/setup.xml
- SHA256 6e55e580c40e472b99b30e31506047e4e4f4a6c48a176ea2a81139744f2ce8d8
- MD5 153e81faaec182dfd137bcc313e3045e
- SHA1 b3199f8b361f3715ea142b4ae0dffd7329234ac5
- SHA512 e771891e89a4ef8d6017ebc05b0e05c8f5170a9d95803e77899c521ac3d23749a2464553958601baf7c9daae129e492627053c8f73e0001bbf62e1156fcac104
- TLSH T1CD21E1CA2A30D302564B287FEE7B3418AA2F66BFB639D091B505957B960136E360345D
- MD5 SHA1 SHA512 TLSH
Adobe CC 2017/resources/updaterinventory.dll
- IMPHASH d18b3d7f185c4671a86ee1d8769c65af
- SHA256 f33c4e3c40115b85cb7ca2819804a059ba386a10c9827d6b8923a8d2bb76b922
- MD5 9165642b427738f5787a752657bd32a2
- SHA1 5c9d4d7d1d210de5ffc00aee96ab320e3e2d614e
- SHA512 528c696525c87192940bda863292aaa1724033e1ec5828032695d9fbf12bf1a5a6d96ca2cb0c14e73d902e7c21021c81d75f47a1ce3098f588a3b74731028ee7
- SSDEEP 6144:LV0SIgsfpeunGrrednB7ZCn87L6B7FocK2Na7pxeW821+xSj:LV0SIzEwZU8/6B7yjyKpxeWp1aSj
- TLSH T1F8A4AD11B9C1C071E82E02B0712D9B2605BDBDB14B698AD7E7D8AD4F1F72AC15B32B17
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
06:bd:05:cd:e6:cb:c4:03:dc:ad:49:ee:00:be:58:53:f3:e5:39:61
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Chains
Feb 27, 2014
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Adobe Systems Incorporated,OU=AAM - Non - EV+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Serial Number
1d:37:83:b3:de:cd:5d:bb:16:e3:3c:d3:a6:b3:bf:db
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 20, 2014 - Feb 21, 2015
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
1
Major OS version
5
Entry point
109034
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\builds\Updater\8.0\source\build\updaterinventory\vc\outdir-Release\updaterinventory.pdb
kernel32
EncodePointer
DecodePointer
GetSystemTimeAsFileTime
GetCommandLineA
GetCurrentThreadId
IsDebuggerPresent
IsProcessorFeaturePresent
ExitProcess
GetModuleHandleExW
GetProcAddress
HeapSize
Sleep
GetStdHandle
WriteFile
GetModuleFileNameW
RaiseException
InterlockedIncrement
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetLastError
GetTimeZoneInformation
WideCharToMultiByte
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
EnterCriticalSection
LeaveCriticalSection
LoadLibraryExW
MultiByteToWideChar
HeapReAlloc
RtlUnwind
OutputDebugStringW
LoadLibraryW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetStringTypeW
GetConsoleCP
GetConsoleMode
SetFilePointerEx
SetStdHandle
WriteConsoleW
FlushFileBuffers
CreateFileW
SetEnvironmentVariableA
GetLongPathNameW
GetTempPathW
LocalFree
CreateDirectoryW
RemoveDirectoryW
SetFileAttributesW
DeleteFileW
CopyFileW
MoveFileW
GetVersionExW
SetFilePointer
ReadFile
SetEndOfFile
ReadConsoleW
LocalAlloc
GetLastError
GetProcessHeap
HeapFree
HeapAlloc
CreateThread
GetExitCodeThread
InitializeCriticalSectionAndSpinCount
TerminateThread
WaitForSingleObject
InterlockedDecrement
CloseHandle
FindNextFileW
FindClose
GetCurrentProcess
FindFirstFileW
advapi32
SetNamedSecurityInfoW
CreateWellKnownSid
GetSecurityDescriptorDacl
RegOpenKeyExW
RegSetKeySecurity
SetEntriesInAclW
RegDeleteValueW
RegGetKeySecurity
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegQueryValueExW
RegSetValueExW
RegCloseKey
RegCreateKeyExW
shell32
SHFileOperationW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetMalloc
ole32
CoInitializeSecurity
CoInitializeEx
CoTaskMemFree
CoInitialize
CoUninitialize
CoCreateInstance
oleaut32
VariantInit
VariantClear
SysAllocString
SysFreeString
shlwapi
PathIsDirectoryW
PathFileExistsW
PathIsFileSpecW
PathRemoveFileSpecW
UpdaterInventoryAddToMCL
UpdaterInventoryAddToMCLWithIcon
UpdaterInventoryGetLibVersion
UpdaterInventoryIsHigherUpdatePresent
UpdaterInventoryRelease
UpdaterInventoryRemoveFromMCL
UpdaterInventorySuppressUpdates
Name
.text
Size
300KB
Virtual Size
299KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
66KB
Virtual Size
65KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
9KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
73KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=19, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=186, id=1, productName=Unmarked objects,
count=3, id=206, productName=VS2012 UPD4 build 61030, version=61030,
count=11, id=207, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=199, version=41118,
count=75, id=207, version=50929,
count=29, id=205, version=50929,
count=214, id=206, version=50929,
count=17, id=211, version=61030,
count=1, id=202, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=201, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=151,
count=1, id=204, productName=VS2012 UPD4 build 61030, version=61030,
Adobe CC 2017/resources/version.txt
- SHA256 ae0d5dd4fb936d6fb26b9438bcf1f084ff1259486f4aff1bbf966287e29cba4d
- MD5 1ef429a593dea64c5e2ca12a9ff22dce
- SHA1 f23d5eba4482060d971ffce87b33dcb924e16baa
- SHA512 f8929fb9ff3255a50e69e27363c0d487f54242349636d28174947ff8079bcd9612c1f455e74ca35d0649b6f2e35287d2dbed90b07b5cc0ca6f77050fe0c7e848
- MD5 SHA1 SHA512
Autoplay/langdata/en_US/lang.dat
- SHA256 cd33d5025126f277075ed4e50de930b2ec08687b44114c95184e828ec0a54488
- MD5 6c66504e60d9e143ab4abc248bc4a301
- SHA1 6b49461f6280334af81427ea862d04e840d77410
- SHA512 43bf5d0d9b268329552a2ae82c961ffbac48f99b3e5c288dac3b90bd3cb190b03f1efbb3592870631ce1b3d343341f21d63d16883f41f0d8acab08ddc2bc455b
- SSDEEP 192:c8BIqbFNkeS7BdMk6SUhMcQ4LGmohbcQXA0C7hLcQHb3ZkhccQIcYUZh5cQFelDh:j9bFFS7BdpdQ3d6DucEM1P985gSD00bS
- TLSH T1A4229E2331E9246DB4677AD6EBE9C57EC396B4E8821B8D2E61D4030741DD8026F03EB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Autoplay/langdata/ru_RU/lang.dat
- SHA256 f675f2d4b8d61d857208de54376ab29e88c77ac7fbde8d15265861991605f35e
- MD5 00b090e7101ff47f0127a284eed46a82
- SHA1 8ba6519e9e46a8995808cae5d7168bb8b0de252c
- SHA512 1e5b0a6fd833ec984b1b3008621947ec59a8430cfc9dc3102a0fba9595f2a24e7038e004fff6d00b830114cde000619f9963e00419f779738d9d03bff4915ff0
- SSDEEP 192:c8BIqbFNkeY7Gdvtk6SUhMcQ4LGmohbcQXA0C7hLcQHb3ZkhccQIcYUZh5cQFel1:j9bFFY7GdQdQ3d6DgcEM1PO85gSD50bq
- TLSH T19C22AF1335E9246DB467BADADBE9C57EC396B5E4820B8D2E61D8030741DD8026F03EB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Autoplay/main.ini
- SHA256 ad301c3e6dc3322817396cd8ce218d0dabb80c5b7ca95c977c22c92e7761d47d
- MD5 66cd95cc123b318466c2d94105d2e7db
- SHA1 3caef02c0e6af224c507818298d599a34b8dc923
- SHA512 d90f71e0ccef78360d8de6f3292755e93a51867ca5882f0d68330d6b6a33a611a2c8e6245c152c7a75cfc2563ac339d52e41ef385006358d818f05f260ba0878
- SSDEEP 96:38ntBXF6AoxLPdLB3fdvuSEnQRkBaqp1Immor:38L16Aoxzd93fQSEnNow1Immor
- TLSH T1C791382266E92129F2A3B6D6DFDEC069C715F8F9515E8D6E20D6020B45DC9006E03EBB
- MD5 SHA1 SHA512 SSDEEP TLSH
Autoplay/resdata/AU_autoplay_bg.bmp
- SHA256 3d8579dd36d165e9ae486c6a9538cb2044b851675ec9e3c6774b6f0a711fbd70
- MD5 9a7de13a83d54f789a45bf8230ae7650
- SHA1 5771313edef54b4b308a6c2c23269744203a9b2a
- SHA512 7c49abfbaf622cec3c48bc36575f63beb6090847c0ec21f8c3426b35d7249d67db95b44837136270467301a5f2f741628fd6aa5636a41dc2c5404206f14c0011
- SSDEEP 384:mjyt5HhOQyU/1HK3QKiAZlOK1VXVK93SKU9o8KrqmyZhIHo:7t5E
- TLSH T1B7F4DAAF549D0BC83733FFDB6EF284070A509C9B905D26A283756B4D91BF4AA46B3341
- MD5 SHA1 SHA512 SSDEEP TLSH
Autoplay/resdata/Autoplay.ico
- SHA256 2726fcca406729a92b8add774d7527d1ce4f397adc05007ed0541148a14ba77a
- MD5 3a0ce7ecd30baa496a21ed2a08ce200d
- SHA1 c988c77d4031eb70752d645fc00e3361537ff7b8
- SHA512 5fb7c6835099a34168ba2c80b38c91125d663a80dcd42ed14eae5c8fb66b23a6ee7be106afa29c6d5bdf7ecc1ecbd2e3e4e9ebb96a12dfce031ef7a7cb3ea829
- SSDEEP 3072:IShIXslXlllllJlllllnllllUZZKAllmLA4:oXslXlllllJlllllnllllUSAllmLx
- TLSH T1B17489424EDFDCD5CBA1A17CA2CEE27DBA2CAEB4DAA75C8C939DD901C13590CBE15041
- MD5 SHA1 SHA512 SSDEEP TLSH
Autoplay/resdata/autoplay_blank_N.bmp
- SHA256 7edf78f2b852336be1d8bb096072858a99b0b5ab29d90214b2b36813ace4d912
- MD5 017d4839ed574e2394243eeb07e526e5
- SHA1 7a69da1ef4236ffe5b40210460c3211d5ef5fe46
- SHA512 1063d53fda432647dae1823509aca437a1bece82597a10b05958efdf3548a0edf49c4196264d9bfa1adff764af8af3f3a37ed77200e372eb8e0ae5879072c1e0
- SSDEEP 24:z/krucTiLkhpXtnpbFhhFpHtXpbVDVLHAqOzJEn:rkacTiopHATJO
- TLSH T12B6300E490386C63A63EE86BDC1C8D25FB201522FB7CD51695F1FC961A279ECC854B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Autoplay/resdata/autoplay_blank_R.bmp
- SHA256 3c6ef1b2998c7031542d819e00ba2433d148b27e400683fc12b2291bd8525281
- MD5 085b44ea973e1b8dbac298b8fc258948
- SHA1 fc03fd590219f14c78d143f6a5c72939100fd697
- SHA512 b5bd43f1848c0edc989fcb78c2769bf27adc3366493f1c2ba0a2754eb7ce5f9b93cb1e9835677b357fd17fc5c77f9ebe88854db3a5ee641aed7637d1dcbe7df7
- SSDEEP 12:oU/SK6y8ZqUqDhvhvlxr5P5P5XDVZpXpvimzrN1V7HaaogwAuQyfn76n:z/kgZDtDhhTVZ9QKVzaUlyfn76n
- TLSH T1456301E541387D13A2EAC593D949AC35EB254164FA2EA203F0E3FD863267EF8C510327
- MD5 SHA1 SHA512 SSDEEP TLSH
Autoplay/resdata/autoplay_blank_S.bmp
- SHA256 7edf78f2b852336be1d8bb096072858a99b0b5ab29d90214b2b36813ace4d912
- MD5 017d4839ed574e2394243eeb07e526e5
- SHA1 7a69da1ef4236ffe5b40210460c3211d5ef5fe46
- SHA512 1063d53fda432647dae1823509aca437a1bece82597a10b05958efdf3548a0edf49c4196264d9bfa1adff764af8af3f3a37ed77200e372eb8e0ae5879072c1e0
- SSDEEP 24:z/krucTiLkhpXtnpbFhhFpHtXpbVDVLHAqOzJEn:rkacTiopHATJO
- TLSH T12B6300E490386C63A63EE86BDC1C8D25FB201522FB7CD51695F1FC961A279ECC854B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Autoplay/resdata/autoplay_disc_N.ico
- SHA256 79239745e920ed908667cf2bd7bf60ded19a3564a89e09a3545fa38577b50951
- MD5 ee2010c43070d153c3ec2de7b9c8035a
- SHA1 30ac2c1b40acfa0b0c873c400fe41bf52a17a577
- SHA512 e430213794e202fc5026dfa6f382f1ca773d6fef9f08cc12ec15d69615205052ac4250bbc47c8f5c0797afc5b5ee100f39f670d91445942223aa2de8bf416543
- TLSH T1C631CCC7A45959B8EC5AD8BC06AFA9AAC141FD2AC2104861D0CA7C7ADD24925707E3D3
- MD5 SHA1 SHA512 TLSH
Autoplay/resdata/autoplay_disc_R.ico
- SHA256 79239745e920ed908667cf2bd7bf60ded19a3564a89e09a3545fa38577b50951
- MD5 ee2010c43070d153c3ec2de7b9c8035a
- SHA1 30ac2c1b40acfa0b0c873c400fe41bf52a17a577
- SHA512 e430213794e202fc5026dfa6f382f1ca773d6fef9f08cc12ec15d69615205052ac4250bbc47c8f5c0797afc5b5ee100f39f670d91445942223aa2de8bf416543
- TLSH T1C631CCC7A45959B8EC5AD8BC06AFA9AAC141FD2AC2104861D0CA7C7ADD24925707E3D3
- MD5 SHA1 SHA512 TLSH
Autoplay/resdata/autoplay_disc_S.ico
- SHA256 79239745e920ed908667cf2bd7bf60ded19a3564a89e09a3545fa38577b50951
- MD5 ee2010c43070d153c3ec2de7b9c8035a
- SHA1 30ac2c1b40acfa0b0c873c400fe41bf52a17a577
- SHA512 e430213794e202fc5026dfa6f382f1ca773d6fef9f08cc12ec15d69615205052ac4250bbc47c8f5c0797afc5b5ee100f39f670d91445942223aa2de8bf416543
- TLSH T1C631CCC7A45959B8EC5AD8BC06AFA9AAC141FD2AC2104861D0CA7C7ADD24925707E3D3
- MD5 SHA1 SHA512 TLSH
Autoplay/resdata/autoplay_generic_extras_N.ico
- SHA256 04a3b73acc78224ad8cec1f0537c8c2c5cd5451a21f0b75ca611ad27e532c849
- MD5 bf76dd9bc3c96ca56eaa44af01660e00
- SHA1 bf794e463ecb7aef9512249c5ffda150ab51fb82
- SHA512 ce7fb7f762f245e84a8f6ed575cd384879ffa5f8a81456d703a1460f44d8fe049469cb213e893f8d0e1f20b128a6f6ab2adb2e9f3f9234d6474b3fee29307668
- TLSH T1E131CBA6FB048149E9859F714C26C69B4D4DFD8D419112D03AF27C9B7FF27223699202
- MD5 SHA1 SHA512 TLSH
Autoplay/resdata/autoplay_generic_extras_R.ico
- SHA256 04a3b73acc78224ad8cec1f0537c8c2c5cd5451a21f0b75ca611ad27e532c849
- MD5 bf76dd9bc3c96ca56eaa44af01660e00
- SHA1 bf794e463ecb7aef9512249c5ffda150ab51fb82
- SHA512 ce7fb7f762f245e84a8f6ed575cd384879ffa5f8a81456d703a1460f44d8fe049469cb213e893f8d0e1f20b128a6f6ab2adb2e9f3f9234d6474b3fee29307668
- TLSH T1E131CBA6FB048149E9859F714C26C69B4D4DFD8D419112D03AF27C9B7FF27223699202
- MD5 SHA1 SHA512 TLSH
Autoplay/resdata/autoplay_generic_extras_S.ico
- SHA256 04a3b73acc78224ad8cec1f0537c8c2c5cd5451a21f0b75ca611ad27e532c849
- MD5 bf76dd9bc3c96ca56eaa44af01660e00
- SHA1 bf794e463ecb7aef9512249c5ffda150ab51fb82
- SHA512 ce7fb7f762f245e84a8f6ed575cd384879ffa5f8a81456d703a1460f44d8fe049469cb213e893f8d0e1f20b128a6f6ab2adb2e9f3f9234d6474b3fee29307668
- TLSH T1E131CBA6FB048149E9859F714C26C69B4D4DFD8D419112D03AF27C9B7FF27223699202
- MD5 SHA1 SHA512 TLSH
Autoplay/resdata/autoplay_readme_N.ico
- SHA256 0b2f889f153b5ce59e5876dd4bf88a901097951cca7b1c2a162a56fda569af15
- MD5 21ed7ff8c94d67276b650d15460f7644
- SHA1 c266d9ebde946163cc199f95ccc54ce215df168d
- SHA512 2d3611e1c7e0291bbcbb3eef22ab465ffe7bc2f828d0f3a4a2bdcecde9f34bb88d8968fac8bea16620f44b2864fd9a78f7866404ce35d5ab10472101f2980e0c
- TLSH T13831AA80E799C8E9E40210B66853FB411256F961F060DC2510FF752B95762C385B6E0F
- MD5 SHA1 SHA512 TLSH
Autoplay/resdata/autoplay_readme_R.ico
- SHA256 0b2f889f153b5ce59e5876dd4bf88a901097951cca7b1c2a162a56fda569af15
- MD5 21ed7ff8c94d67276b650d15460f7644
- SHA1 c266d9ebde946163cc199f95ccc54ce215df168d
- SHA512 2d3611e1c7e0291bbcbb3eef22ab465ffe7bc2f828d0f3a4a2bdcecde9f34bb88d8968fac8bea16620f44b2864fd9a78f7866404ce35d5ab10472101f2980e0c
- TLSH T13831AA80E799C8E9E40210B66853FB411256F961F060DC2510FF752B95762C385B6E0F
- MD5 SHA1 SHA512 TLSH
Autoplay/resdata/autoplay_readme_S.ico
- SHA256 0b2f889f153b5ce59e5876dd4bf88a901097951cca7b1c2a162a56fda569af15
- MD5 21ed7ff8c94d67276b650d15460f7644
- SHA1 c266d9ebde946163cc199f95ccc54ce215df168d
- SHA512 2d3611e1c7e0291bbcbb3eef22ab465ffe7bc2f828d0f3a4a2bdcecde9f34bb88d8968fac8bea16620f44b2864fd9a78f7866404ce35d5ab10472101f2980e0c
- TLSH T13831AA80E799C8E9E40210B66853FB411256F961F060DC2510FF752B95762C385B6E0F
- MD5 SHA1 SHA512 TLSH
Autoplay/resdata/autoplay_secondary-content_N.ico
- SHA256 3e4cc4fb430060b7c92453fa998fbd07e1069af3cbea963b6a046d6dbe7f62ab
- MD5 9372e30ee976922403f14fd34ca9fedc
- SHA1 a78d4ff97b64549d3dfce7bf7983ea98353b25de
- SHA512 5afc210b93b24f1dd3fdfee870f736d052a45a4d110b1eff93631155da6a9212e8e7b5555a49c947bf573e5174af65ead7d5d4aad67a08a06225b1b08340c893
- TLSH T19131A893AF0CC5CEC2509871380EDA427983F80A82919D0EB2D3BB7794A821F459ED0E
- MD5 SHA1 SHA512 TLSH
Autoplay/resdata/autoplay_secondary-content_R.ico
- SHA256 3e4cc4fb430060b7c92453fa998fbd07e1069af3cbea963b6a046d6dbe7f62ab
- MD5 9372e30ee976922403f14fd34ca9fedc
- SHA1 a78d4ff97b64549d3dfce7bf7983ea98353b25de
- SHA512 5afc210b93b24f1dd3fdfee870f736d052a45a4d110b1eff93631155da6a9212e8e7b5555a49c947bf573e5174af65ead7d5d4aad67a08a06225b1b08340c893
- TLSH T19131A893AF0CC5CEC2509871380EDA427983F80A82919D0EB2D3BB7794A821F459ED0E
- MD5 SHA1 SHA512 TLSH
Autoplay/resdata/autoplay_secondary-content_S.ico
- SHA256 3e4cc4fb430060b7c92453fa998fbd07e1069af3cbea963b6a046d6dbe7f62ab
- MD5 9372e30ee976922403f14fd34ca9fedc
- SHA1 a78d4ff97b64549d3dfce7bf7983ea98353b25de
- SHA512 5afc210b93b24f1dd3fdfee870f736d052a45a4d110b1eff93631155da6a9212e8e7b5555a49c947bf573e5174af65ead7d5d4aad67a08a06225b1b08340c893
- TLSH T19131A893AF0CC5CEC2509871380EDA427983F80A82919D0EB2D3BB7794A821F459ED0E
- MD5 SHA1 SHA512 TLSH
Autoplay/resdata/autoplay_secondarylink_rollover_LG_N.bmp
- SHA256 1e70f20a85184c1d9eec717b7cbec398f0e67fb047b4ad226355656c99b0d6cf
- MD5 4de472c2e4468cc13bf2738ebc8dda27
- SHA1 e7cac25da4ba6b8538b71189f93cee5f88383360
- SHA512 b17e69486c93a0aa850dcf9c96402efe8389d9c0b102a7ed2116ba934538b1bcc9f4de6e72e4c81abfa8514b42be6440001f9ecad06f3bab393527685ea5362e
- SSDEEP 6:uLato6yjna6pepuqFruq/c4uqpHuqBuqciZhuqT5uqT5uq3BuqlLuqvs4uqZhust:0atxyrP03bWiDHnbrxYReBGD3uJc8b
- TLSH T12C8211F490390C23863EE827AC6D4C05DB142523EA2DD811D5BAFE9304239FCD858B57
- MD5 SHA1 SHA512 SSDEEP TLSH
Autoplay/resdata/autoplay_secondarylink_rollover_LG_R.bmp
- SHA256 1e70f20a85184c1d9eec717b7cbec398f0e67fb047b4ad226355656c99b0d6cf
- MD5 4de472c2e4468cc13bf2738ebc8dda27
- SHA1 e7cac25da4ba6b8538b71189f93cee5f88383360
- SHA512 b17e69486c93a0aa850dcf9c96402efe8389d9c0b102a7ed2116ba934538b1bcc9f4de6e72e4c81abfa8514b42be6440001f9ecad06f3bab393527685ea5362e
- SSDEEP 6:uLato6yjna6pepuqFruq/c4uqpHuqBuqciZhuqT5uqT5uq3BuqlLuqvs4uqZhust:0atxyrP03bWiDHnbrxYReBGD3uJc8b
- TLSH T12C8211F490390C23863EE827AC6D4C05DB142523EA2DD811D5BAFE9304239FCD858B57
- MD5 SHA1 SHA512 SSDEEP TLSH
Autoplay/resdata/autoplay_secondarylink_rollover_LG_S.bmp
- SHA256 1e70f20a85184c1d9eec717b7cbec398f0e67fb047b4ad226355656c99b0d6cf
- MD5 4de472c2e4468cc13bf2738ebc8dda27
- SHA1 e7cac25da4ba6b8538b71189f93cee5f88383360
- SHA512 b17e69486c93a0aa850dcf9c96402efe8389d9c0b102a7ed2116ba934538b1bcc9f4de6e72e4c81abfa8514b42be6440001f9ecad06f3bab393527685ea5362e
- SSDEEP 6:uLato6yjna6pepuqFruq/c4uqpHuqBuqciZhuqT5uqT5uq3BuqlLuqvs4uqZhust:0atxyrP03bWiDHnbrxYReBGD3uJc8b
- TLSH T12C8211F490390C23863EE827AC6D4C05DB142523EA2DD811D5BAFE9304239FCD858B57
- MD5 SHA1 SHA512 SSDEEP TLSH
Autoplay/resdata/autoplay_secondarylink_rollover_N.bmp
- SHA256 f55d51e068e57040b2a1f3ef8477de0ed8c987db2e6cf5286d523531258d8f9e
- MD5 017a411e79605210fcd9503643c916f9
- SHA1 1e11abf11dd3d3be0d7c8e9eb431896a0815ec68
- SHA512 c26015a33d4e7b91ffe7cf26ccc68352aa880c3f761b85ddc629e72b617467dbeb6b1d0703e20b63d223c63e0c5f25bb5b6360ef6230a576acdf9f3d0a2ce170
- SSDEEP 6:22iY/6yjza6ZeZuqFXuq/c4uqpzuqhuqcGZhuqTtuqTtuq3xuqlnuqvM4uqZhuAX:6XyXPEbbKGrXr7nlYSWRzuJ8or
- TLSH T13B5212F490390863863EE827AC6D0C05DB142523FA2DD811D5BAFE9304139FCD848B12
- MD5 SHA1 SHA512 SSDEEP TLSH
Autoplay/resdata/autoplay_secondarylink_rollover_R.bmp
- SHA256 f55d51e068e57040b2a1f3ef8477de0ed8c987db2e6cf5286d523531258d8f9e
- MD5 017a411e79605210fcd9503643c916f9
- SHA1 1e11abf11dd3d3be0d7c8e9eb431896a0815ec68
- SHA512 c26015a33d4e7b91ffe7cf26ccc68352aa880c3f761b85ddc629e72b617467dbeb6b1d0703e20b63d223c63e0c5f25bb5b6360ef6230a576acdf9f3d0a2ce170
- SSDEEP 6:22iY/6yjza6ZeZuqFXuq/c4uqpzuqhuqcGZhuqTtuqTtuq3xuqlnuqvM4uqZhuAX:6XyXPEbbKGrXr7nlYSWRzuJ8or
- TLSH T13B5212F490390863863EE827AC6D0C05DB142523FA2DD811D5BAFE9304139FCD848B12
- MD5 SHA1 SHA512 SSDEEP TLSH
Autoplay/resdata/autoplay_secondarylink_rollover_S.bmp
- SHA256 f55d51e068e57040b2a1f3ef8477de0ed8c987db2e6cf5286d523531258d8f9e
- MD5 017a411e79605210fcd9503643c916f9
- SHA1 1e11abf11dd3d3be0d7c8e9eb431896a0815ec68
- SHA512 c26015a33d4e7b91ffe7cf26ccc68352aa880c3f761b85ddc629e72b617467dbeb6b1d0703e20b63d223c63e0c5f25bb5b6360ef6230a576acdf9f3d0a2ce170
- SSDEEP 6:22iY/6yjza6ZeZuqFXuq/c4uqpzuqhuqcGZhuqTtuqTtuq3xuqlnuqvM4uqZhuAX:6XyXPEbbKGrXr7nlYSWRzuJ8or
- TLSH T13B5212F490390863863EE827AC6D0C05DB142523FA2DD811D5BAFE9304139FCD848B12
- MD5 SHA1 SHA512 SSDEEP TLSH
Autoplay/resdata/button_M_N.bmp
- SHA256 fd6e5226ae1859fb518a5dc71b95d60ad78a8fce136046cca1ccbf46c2896d72
- MD5 e17950b90d1222b99252eb92a410b634
- SHA1 bd1a772f9ad7b1baa5931727924eebdbfcf0b7b0
- SHA512 1ca90136c7f75c133743adb1f669ec7c69fcd8863044e53b2b8fd6125832940b8980468084f787ad4b44271642e1f7912f470316d116785eb14361d6ea0ed56a
- SSDEEP 12:6XH1M57eVbagqD6DeqDK15NHvvHclObguM/:gs0bmDwNW1nn84bw/
- TLSH T16D5215D17185FE72CC018836B939C7CEB07022E0FE82A531623A3D2A45B93947B37362
- MD5 SHA1 SHA512 SSDEEP TLSH
Autoplay/resdata/button_M_R.bmp
- SHA256 fd6e5226ae1859fb518a5dc71b95d60ad78a8fce136046cca1ccbf46c2896d72
- MD5 e17950b90d1222b99252eb92a410b634
- SHA1 bd1a772f9ad7b1baa5931727924eebdbfcf0b7b0
- SHA512 1ca90136c7f75c133743adb1f669ec7c69fcd8863044e53b2b8fd6125832940b8980468084f787ad4b44271642e1f7912f470316d116785eb14361d6ea0ed56a
- SSDEEP 12:6XH1M57eVbagqD6DeqDK15NHvvHclObguM/:gs0bmDwNW1nn84bw/
- TLSH T16D5215D17185FE72CC018836B939C7CEB07022E0FE82A531623A3D2A45B93947B37362
- MD5 SHA1 SHA512 SSDEEP TLSH
Autoplay/resdata/button_M_S.bmp
- SHA256 fd6e5226ae1859fb518a5dc71b95d60ad78a8fce136046cca1ccbf46c2896d72
- MD5 e17950b90d1222b99252eb92a410b634
- SHA1 bd1a772f9ad7b1baa5931727924eebdbfcf0b7b0
- SHA512 1ca90136c7f75c133743adb1f669ec7c69fcd8863044e53b2b8fd6125832940b8980468084f787ad4b44271642e1f7912f470316d116785eb14361d6ea0ed56a
- SSDEEP 12:6XH1M57eVbagqD6DeqDK15NHvvHclObguM/:gs0bmDwNW1nn84bw/
- TLSH T16D5215D17185FE72CC018836B939C7CEB07022E0FE82A531623A3D2A45B93947B37362
- MD5 SHA1 SHA512 SSDEEP TLSH
Crack/Emul/amtemu.v0.9.2-painter.exe
- IMPHASH 0dd4c5c4026614be286972a515638ec5
- SHA256 cdc95d0113a2af05c2e70fab23f6c218ae583ebcb47077dd5b705a476f9d6b96
- MD5 8abdc20f619641e29aa9ad2b999a0dcc
- SHA1 caad125358d2ae6d217e74cfcd175ac81c43c729
- SHA512 90999eb0bcb76a3d21e63565e332f1ac8a6fbc1e3dfe147c4ba2b5f8c542e21da3a43df9f5074eb7f7107e0e66d48e21cedda568fa1960502645f1b358d1550e
- SSDEEP 49152:+kLvWlT+7CZ1k+1T0RSkXDE+QO6oP4DQ4E7U+:+kCZ1bad4+QOJgDQI
- TLSH T1F1C5D062F2818437C51729345D17D7A9A925BF201F285C877BF93E0CAF362D278396A3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
5
Entry point
2388543
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
kernel32
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
VirtualFree
VirtualAlloc
LocalFree
LocalAlloc
GetVersion
GetCurrentThreadId
InterlockedDecrement
InterlockedIncrement
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
lstrcpynA
LoadLibraryExA
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetCommandLineA
FreeLibrary
FindFirstFileA
FindClose
ExitProcess
ExitThread
CreateThread
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleA
lstrcpyA
lstrcmpA
lstrcatA
WriteProcessMemory
WritePrivateProfileStringA
WriteFile
WaitForSingleObject
VirtualQuery
VirtualFreeEx
VirtualAllocEx
VirtualAlloc
UnmapViewOfFile
SuspendThread
Sleep
SizeofResource
SetThreadPriority
SetThreadLocale
SetFilePointer
SetFileAttributesA
SetEvent
SetErrorMode
SetEndOfFile
ResumeThread
ResetEvent
ReadProcessMemory
ReadFile
OpenProcess
MultiByteToWideChar
MulDiv
MapViewOfFile
LockResource
LoadResource
LoadLibraryA
LeaveCriticalSection
InitializeCriticalSection
GlobalUnlock
GlobalReAlloc
GlobalHandle
GlobalLock
GlobalFree
GlobalFindAtomA
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomA
GetVersionExA
GetVersion
GetTickCount
GetThreadLocale
GetTempPathA
GetSystemInfo
GetSystemDefaultLCID
GetStringTypeExA
GetStdHandle
GetProcAddress
GetPrivateProfileStringA
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetLocalTime
GetLastError
GetFullPathNameA
GetFileSize
GetFileAttributesA
GetExitCodeThread
GetDiskFreeSpaceA
GetDateFormatA
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetCPInfo
GetACP
FreeResource
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
FreeLibrary
FormatMessageA
FindResourceA
FindNextFileA
FindFirstFileA
FindClose
FileTimeToLocalFileTime
FileTimeToDosDateTime
EnumCalendarInfoA
EnterCriticalSection
DeleteFileA
DeleteCriticalSection
CreateThread
CreateProcessA
CreateFileMappingA
CreateFileA
CreateEventA
CreateDirectoryA
CopyFileA
CompareStringA
CloseHandle
Sleep
LoadLibraryA
GetProcAddress
GetLastError
FreeLibrary
InitializeCriticalSection
GetModuleFileNameW
GetModuleHandleW
TerminateProcess
GetCurrentProcess
DeleteCriticalSection
LoadLibraryW
CreateEventW
CompareStringW
SetLastError
GetModuleHandleA
VirtualProtect
GetTickCount
EnterCriticalSection
LeaveCriticalSection
VirtualFree
VirtualAlloc
WriteProcessMemory
CreateToolhelp32Snapshot
GetCurrentProcessId
GetCurrentThreadId
Thread32First
OpenThread
Thread32Next
CloseHandle
SuspendThread
ResumeThread
GetSystemInfo
LoadResource
MultiByteToWideChar
WideCharToMultiByte
FindResourceExW
FindResourceExA
GetThreadLocale
GetUserDefaultLCID
GetSystemDefaultLCID
EnumResourceNamesA
EnumResourceNamesW
EnumResourceLanguagesA
EnumResourceLanguagesW
EnumResourceTypesA
EnumResourceTypesW
HeapAlloc
HeapFree
HeapDestroy
HeapCreate
GetSystemTime
GetLocalTime
SystemTimeToFileTime
CompareFileTime
GetCommandLineA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WriteFile
GetStdHandle
GetModuleFileNameA
RaiseException
Sleep
ExitProcess
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetSystemTimeAsFileTime
HeapReAlloc
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
RtlUnwind
HeapSize
SetFilePointer
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
FlushFileBuffers
VirtualQuery
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
GetKeyboardType
LoadStringA
MessageBoxA
CharNextA
CreateWindowExA
WindowFromPoint
WindowFromDC
WinHelpA
WaitMessage
WaitForInputIdle
UpdateWindow
UnregisterClassA
UnhookWindowsHookEx
TranslateMessage
TranslateMDISysAccel
TrackPopupMenu
SystemParametersInfoW
SystemParametersInfoA
ShowWindow
ShowScrollBar
ShowOwnedPopups
ShowCursor
SetWindowRgn
SetWindowsHookExA
SetWindowTextA
SetWindowPos
SetWindowPlacement
SetWindowLongA
SetTimer
SetScrollRange
SetScrollPos
SetScrollInfo
SetRect
SetPropA
SetParent
SetMenuItemInfoA
SetMenu
SetForegroundWindow
SetFocus
SetCursor
SetClipboardData
SetClassLongA
SetCapture
SetActiveWindow
SendMessageA
ScrollWindow
ScreenToClient
RemovePropA
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageA
RegisterClipboardFormatA
RegisterClassA
RedrawWindow
PtInRect
PostQuitMessage
PostMessageA
PeekMessageA
OpenClipboard
OffsetRect
OemToCharA
MsgWaitForMultipleObjects
MoveWindow
MessageBoxIndirectA
MessageBoxA
MessageBeep
MapWindowPoints
MapVirtualKeyA
LoadStringA
LoadKeyboardLayoutA
LoadIconA
LoadCursorA
LoadBitmapA
KillTimer
IsZoomed
IsWindowVisible
IsWindowEnabled
IsWindow
IsRectEmpty
IsIconic
IsDialogMessageA
IsChild
InvalidateRect
IntersectRect
InsertMenuItemA
InsertMenuA
InflateRect
GetWindowThreadProcessId
GetWindowTextLengthW
GetWindowTextLengthA
GetWindowTextW
GetWindowTextA
GetWindowRect
GetWindowPlacement
GetWindowLongA
GetWindowDC
GetTopWindow
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSysColor
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetPropA
GetParent
GetWindow
GetMessagePos
GetMenuStringA
GetMenuState
GetMenuItemRect
GetMenuItemInfoA
GetMenuItemID
GetMenuItemCount
GetMenu
GetLastActivePopup
GetKeyboardState
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyState
GetKeyNameTextA
GetIconInfo
GetForegroundWindow
GetFocus
GetDlgItem
GetDlgCtrlID
GetDesktopWindow
GetDCEx
GetDC
GetCursorPos
GetCursor
GetClipboardData
GetClientRect
GetClassNameA
GetClassLongA
GetClassInfoA
GetCapture
GetActiveWindow
FrameRect
FindWindowExA
FindWindowA
FillRect
EqualRect
EnumWindows
EnumThreadWindows
EnumChildWindows
EndPaint
EnableWindow
EnableScrollBar
EnableMenuItem
EmptyClipboard
DrawTextA
DrawMenuBar
DrawIconEx
DrawIcon
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageA
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DeleteMenu
DefWindowProcA
DefMDIChildProcA
DefFrameProcA
CreatePopupMenu
CreateMenu
CreateIconIndirect
CreateIcon
CopyRect
CopyImage
CopyIcon
CloseClipboard
ClientToScreen
CheckMenuItem
CallWindowProcA
CallNextHookEx
BeginPaint
CharNextA
CharLowerBuffA
CharLowerA
CharUpperBuffA
CharToOemA
AdjustWindowRectEx
ActivateKeyboardLayout
MessageBoxW
CharUpperBuffW
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
oleaut32
SysFreeString
SysReAllocStringLen
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopy
VariantClear
VariantInit
GetErrorInfo
SysFreeString
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
gdi32
UnrealizeObject
StretchBlt
SetWindowOrgEx
SetWinMetaFileBits
SetViewportOrgEx
SetTextColor
SetStretchBltMode
SetROP2
SetPixelV
SetPixel
SetEnhMetaFileBits
SetDIBColorTable
SetBrushOrgEx
SetBkMode
SetBkColor
SelectPalette
SelectObject
SaveDC
RoundRect
RestoreDC
Rectangle
RectVisible
RealizePalette
Polyline
Polygon
PlayEnhMetaFile
PatBlt
MoveToEx
MaskBlt
LineTo
IntersectClipRect
GetWindowOrgEx
GetWinMetaFileBits
GetViewportOrgEx
GetTextMetricsA
GetTextExtentPointA
GetTextExtentPoint32A
GetSystemPaletteEntries
GetStockObject
GetPixel
GetPaletteEntries
GetObjectA
GetEnhMetaFilePaletteEntries
GetEnhMetaFileHeader
GetEnhMetaFileBits
GetDeviceCaps
GetDIBits
GetDIBColorTable
GetDCOrgEx
GetCurrentPositionEx
GetClipBox
GetBrushOrgEx
GetBitmapDimensionEx
GetBitmapBits
GdiFlush
ExtTextOutA
ExcludeClipRect
DeleteObject
DeleteEnhMetaFile
DeleteDC
CreateSolidBrush
CreateRectRgn
CreatePenIndirect
CreatePen
CreatePalette
CreateHalftonePalette
CreateFontIndirectW
CreateFontIndirectA
CreateDIBitmap
CreateDIBSection
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
CopyEnhMetaFileA
CombineRgn
BitBlt
ole32
OleUninitialize
OleInitialize
CoUninitialize
CoInitialize
comctl32
ImageList_SetIconSize
ImageList_GetIconSize
ImageList_Write
ImageList_Read
ImageList_GetDragImage
ImageList_DragShowNolock
ImageList_SetDragCursorImage
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
ImageList_EndDrag
ImageList_BeginDrag
ImageList_GetIcon
ImageList_Remove
ImageList_DrawEx
ImageList_Replace
ImageList_Draw
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_ReplaceIcon
ImageList_Add
ImageList_SetImageCount
ImageList_GetImageCount
ImageList_Destroy
ImageList_Create
shell32
ShellExecuteA
SHGetFileInfoA
SHGetSpecialFolderPathA
SHGetSpecialFolderLocation
SHGetMalloc
SHGetDesktopFolder
comdlg32
GetOpenFileNameA
Name
CODE
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
DATA
Size
87KB
Virtual Size
86KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
BSS
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
Virtual Size
16B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pr0
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pr1
Size
59KB
Virtual Size
59KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
61KB
Virtual Size
61KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
24KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
Crack/Emul/painter.nfo
- SHA256 a7535173aa470b6784bf4806161be75aa601d152b86e64b48bc1877287a15cb2
- MD5 d5d7a0031c6a831809ea188eaa51a665
- SHA1 f30840afe860a9ba3963a0f46f024ad6f66d8304
- SHA512 30b1bb0a80cc06049967192822e029c98dc7066dce8e05babbf69307426daa87e61ecd1b3ce773e99bac63e81ec987c238fe81e3524b882c2dad018a80a570b3
- SSDEEP 768:ZlKRxBp24VU++NUS6aeYhwSqERcC24VU++NUwr:ZlKRxBaveYhwJEYr
- TLSH T14723DB1811FF39F83D60C9892983568CB627CD25A53D1BC2391FE7146B8B724A27B4DB
- MD5 SHA1 SHA512 SSDEEP TLSH
Crack/Keygen/Activation_Keygen.exe
- SHA256 c5d9c52583eefd03728ba877baf21725f9e2da4435e9433b87dc82b77b695edd
- MD5 8c03fbbef9db991bb02ab35bf0d2718e
- SHA1 d0caee799f530bdabeccdba7f329f6fbc027c395
- SHA512 ea05c4d9dad4087589cb39ea9421bf0215f6567ef7de3375b87eb9ce4953b812a01fa1b92514618a534f04c8fea1518a76307c10a2c914b345edb34122a721f1
- SSDEEP 3072:0H451OJpM1uOcIbqaORUF0/+8v51AwGoG94dF:l4pM1uLIbCKFq++RGT4dF
- TLSH T1F3B30296BE920C84C510BAFB6163E97A7C82EF13A9C52713CBEE7C5B79F0354254904E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
689088
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
UPX0
Size
Virtual Size
568KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
101KB
Virtual Size
104KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
6KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=26, id=225, productName=VS2013 build 21005, version=21005,
count=18, id=223, productName=VS2013 build 21005, version=21005,
count=103, id=224, productName=VS2013 build 21005, version=21005,
count=2, id=19, version=8034,
count=27, id=229, version=31101,
count=1, productName=Unmarked objects (old),
count=1, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=7, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=124, id=1, productName=Unmarked objects,
count=2, id=225, productName=VS2013 UPD4 build 31101, version=31101,
count=1, id=223, productName=VS2013 UPD4 build 31101, version=31101,
count=1, id=219, productName=VS2013 build 21005, version=21005,
count=1, id=222, productName=VS2013 UPD4 build 31101, version=31101,
Crack/Keygen/Check_Disable.cmd
- SHA256 6d12d961ac8e7ed617e8a46e837a4810baa124aa149e2ffbcd3511afbecf7e1b
- MD5 86e1d0c712554c1871a78f61b5d194e7
- SHA1 62c5a5d7c8873d33634f2e30dbcf43046badb74c
- SHA512 627e605f42e006dfca7b221a20fb73ad66fa86a489844fb013c1cb8c1113a72a9fdf47d20df893eaeb69239fe5bae920fee3fe35e4c72a12c9de707a80189ba6
- TLSH T10351680D1F48E92E44703134498B55BF2B2BF356EA9EE844352A9C47D322AED4539CFC
- MD5 SHA1 SHA512 TLSH
Crack/Keygen/x-force.nfo
- SHA256 240f9a67dae250410f0712fd5814b75c143c3456af802b58173e7784fa98a5c5
- MD5 c4e2c1a877004811048ae2e03debe7cd
- SHA1 5254c8af7a33d66aebd50a8d55c0fada35ebf9f5
- SHA512 9d65f0db5e74990a74eae7e0528d9a7900ecea0cfc860fac61a7a7743aee88467a5880b512eb8ce15e147397ea29e5a5007986281be8473b7de112fec4d58933
- SSDEEP 24:Su/7aY6p+Ncd/Bp0IOKLTm5mzb6+39Vd5mbBZGYvdzMyujDO0LRsuJ3U6SZLf/tu:SH+mPvC0bXd5CHVg5jas3+/tWk18
- TLSH T1B0B1B81ABFA662BEA320DF70D4425192F82D6C1FA25904A4304FE3F82F7B3361349235
- MD5 SHA1 SHA512 SSDEEP TLSH
Crack/Patch/adobe.snr.patch.v2.0-painter.exe
- IMPHASH 416af365bd0075002ad4b3999c9e9a47
- SHA256 256c2a409c97448d168f3eb1bfb89af3d259dfc05a510a3f464d8e4b348116d4
- MD5 b31679db7db878992b4553290a9e6c7c
- SHA1 7d0d2b434b51abe91e5b16e4c8dc8d26143b138c
- SHA512 a9c65a280c5bfcd9a221a47237e96f454c85cf0a2222cd0469d2326a03cfaaa5b69424c4963f128affc91c8861b9aac236289578a94629717d81a7e3b08a75f2
- SSDEEP 12288:0MNVzzbgNRk1Lq+TC0YPxfqswK/EH1WYEmMC+jsEdf8Zdq0Cxmj1A:dLE1+TYPljwK/oY9se8Zd8kJA
- TLSH T1A9D4120CB9D28207FB5395324BD7C717422CCE7A58A457232AA776B22DB0C547F92E62
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1725247
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
kernel32
GetModuleHandleA
GetProcAddress
user32
CharNextA
advapi32
RegCloseKey
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
SaveDC
ole32
CoInitialize
comctl32
ImageList_Add
shell32
SHGetFileInfoA
comdlg32
GetOpenFileNameA
Name
.MPRESS1
Size
556KB
Virtual Size
1.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.MPRESS2
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
27KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
Crack/Patch/painter.nfo
- SHA256 c67578b40ab730e7f6950ce8be64755251b948e7a3d4de5e6dedde77d5ed5984
- MD5 f52db05e737789cb5dde8e9707864f84
- SHA1 176dd860d02f4db65607ffc8a9a0d695182aa4bb
- SHA512 f765334a02cda6fdc7ad3bc792da749ca9f62f300d5bbf112c5db544b98f3348108559d953683e8fbf1a9cac3a46fc523e0014e792f008ff6f87d5a2e0c7f721
- SSDEEP 1536:v0iMTNJqu4poudnnV8YG0X51YuiUo4YvKiMTNJqu4poudnnS8YG0X51YuiUo4YgW:Ix
- TLSH T130539539B9FFFAB82D63C94D2693164C7133E92185B863D2342FD6081B8F725953A493
- MD5 SHA1 SHA512 SSDEEP TLSH
Crack/readme.txt
- SHA256 780bfac27dacf20bf2ba6258849c0cec73b42fc679eba662f53d929a7d3116dd
- MD5 473f1f709f728a89e740b567fbc2736d
- SHA1 aa1a987c52599503437f1f52c9fb8eaad38264a3
- SHA512 683957ad102678067317f71a28b3da208b319cc28817d8dab4fff8067dd6d96252dc158ceacf405b1ad234d2b64d5eeff8eacc313eb7e545b4382573dd086e8b
- SSDEEP 96:gK0U5/QGtcBQyHmhiUISprx8cOxLu8pE8bi0VMTXAc/RjCjKLuXIyqqE/3pgIpx2:gxG/QGtcBHKi+prO/0BVaWyIjUwRq
- TLSH T19C0238214A8B659F1211F14FD804BD09FE9A45FF3FAA976635A02D3D3BF2024823E359
- MD5 SHA1 SHA512 SSDEEP TLSH
autoplay.exe
- IMPHASH ec7603dfc11290c5ea59ede1b41eac50
- SHA256 3b9dabd99dc58a5242616cb6d1d876bca3046119a9b150c7d7868bf02202ea82
- MD5 76ef16e94f77454aaffdfa4c700be85f
- SHA1 9b45b3826706337a11e43248095fb2c62e42d14d
- SHA512 4185cf9393877fd6d80ecfb7290c10d40a62fc7013d175e5fc91df56870500ea33b518e4f55b4e7d8a7865d3f7707fb5f49f621d5d944bb1edffda4734f99d53
- SSDEEP 3072:fNCpBPbYsMn1mx6nWGdN6YROBxQo6PfSPgHvUJjX1qINSxT3OIpkApPxn:fNiGC6nWGdN6YO6Pf9vAjX1qINGLdRz
- TLSH T18F047B6232D050F3E49368B299999BB68776FC74433D85D3E3743D2A25222F27B38365
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
55:7e:59:12:c0:ed:63:3a:cb:5b:e7:da:2f:6c:23:99:5e:d6:5d:d2
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Information Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Chains
Aug 6, 2008
CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Information Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Information Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Serial Number
4b:ea:81:7c:ba:c7:c3:8a:ba:72:e7:be:6f:00:de:6d
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 7, 2007 - Dec 10, 2008
Minor OS version
0
Major OS version
4
Entry point
75130
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
comctl32
_TrackMouseEvent
ord17
msvfw32
MCIWndCreateW
MCIWndCreateA
winmm
waveOutSetVolume
waveOutGetVolume
PlaySoundA
waveOutGetNumDevs
shlwapi
PathRemoveFileSpecW
kernel32
InterlockedExchange
GetModuleHandleA
GetModuleFileNameA
GetWindowsDirectoryA
GetSystemDirectoryA
LoadLibraryA
SetLastError
GetOEMCP
GetACP
SetEndOfFile
CreateFileA
FlushFileBuffers
SetStdHandle
GetTimeZoneInformation
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
VirtualQuery
GetSystemInfo
VirtualProtect
GetLocaleInfoA
IsBadCodePtr
IsBadReadPtr
SetFilePointer
GetStringTypeA
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetCommandLineW
GetCommandLineA
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
CompareStringA
WaitForSingleObject
CloseHandle
DeviceIoControl
MulDiv
FreeLibrary
Sleep
ReleaseMutex
GetLastError
GetUserDefaultLCID
GetUserDefaultUILanguage
GetSystemDefaultLangID
WriteFile
ReadFile
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
SetUnhandledExceptionFilter
SetEnvironmentVariableA
HeapSize
HeapReAlloc
RtlUnwind
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FindFirstFileA
RaiseException
ExitProcess
TerminateProcess
GetCurrentProcess
GetVersionExA
HeapAlloc
HeapFree
LCMapStringA
user32
DestroyIcon
GetSystemMetrics
SetFocus
BeginPaint
FillRect
DrawEdge
keybd_event
SetForegroundWindow
UpdateWindow
TranslateMessage
ReleaseDC
GetAsyncKeyState
SetCursor
EndPaint
RedrawWindow
MoveWindow
GetIconInfo
CreateIconIndirect
GetClientRect
InvalidateRect
ShowWindow
PostQuitMessage
DrawIconEx
SetRect
GetDC
GetWindowRect
gdi32
CreateSolidBrush
GetStockObject
PatBlt
CreateCompatibleBitmap
CreateCompatibleDC
SetTextAlign
SetLayout
LineTo
SetBkMode
StretchBlt
BitBlt
SetTextColor
CreatePenIndirect
SelectObject
MoveToEx
Polyline
DeleteObject
DeleteDC
advapi32
RegQueryValueA
RegCloseKey
Name
.text
Size
116KB
Virtual Size
114KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
20KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
538KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
28KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=17, id=15, productName=VS2003 (.NET) build 3077, version=3077,
count=131, id=95, productName=VS2003 (.NET) build 3077, version=3077,
count=2, id=93, version=2067,
count=10, id=93, version=2179,
count=5, id=25, version=9210,
count=133, id=1, productName=Unmarked objects,
count=52, id=105, version=2067,
count=54, id=95, version=2179,
count=27, id=96, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=94, productName=VS2003 (.NET) build 3052, version=3052,
count=1, id=90, productName=VS2003 (.NET) build 3077, version=3077,
autorun.inf
- SHA256 f6e3c4549690718297924317757db3941e9f282c0534d9ae1d20132d4f8d6659
- MD5 95ce97cd76fb08e07e005f3a419757b1
- SHA1 4a5256ea0f40d31773072b7311afbd4cd5f50616
- SHA512 bfb56939d24cb3a13577df79238edb5d70f5c7d15b06ea188531265a49ce79b484232b19258f7b359fa888a87ce2028275bb8eb8d96d8064d416811979cb2261
- TLSH T194A002B7E98E246F6B1D6454F4E6143CE7FAE0A4190023DC2257079518D85492F39492
- MD5 SHA1 SHA512 TLSH
m0nkrus.nfo
- SHA256 e9ed7933753843c52d2d571098aac3d598d858f68d2dd00272a3d270b1ff2177
- MD5 a619d816080099aa5f2f4478b930525d
- SHA1 ba55ccb1ec09c972927870f4eebefef62ebd64fc
- SHA512 704ee1b4c86f9d67242e0902f3c95d4d042b27ce43f0e6273178081a4f4e1a9edea20d783e04632d8ac978fdb66996bc1fad87c3c972647ef240086a9800ed35
- TLSH T17331761B350722872E3D8E8567DC8D34DF424863871D28F1336DB7E8E7A2310616085C
- MD5 SHA1 SHA512 TLSH
unicows.dll
- IMPHASH 785d5607ed2f18f4ea0be5809350b169
- SHA256 22f23cc65698741184ec34f46e6f69717644e0b5aabf5d5bd015101f2d72e56e
- MD5 e1102cedf0c818984c2aca2a666d4c5f
- SHA1 d8d88ea7083aee9c40f6fdc6c56451a018d21a83
- SHA512 e58b35815801d6d3797f95c986834d2ca5450ccc3f1fa1d27d127a8d1d36f8e21279173715a00686c9c831d22d7c5b5b9cc5874170223a4d78f09c4eefa390a2
- SSDEEP 3072:fEWAQKw38JvCAib0uT++ICSQ6UOX/mQhYQXS0FsmaiUZZynGJ5x/59XH7PMYV1Nz:qwgvCAib0PAOOQhS0/s5x/R1PkOFB5
- TLSH T180344A19BCC05E43EF6733BEF9207B74D7DB8A241538AC8646CE5E0E25B1681133E5A6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
74:61:85:10:84:38:b9:d3:08:de:5e:77:88:9b:e4:51
Digest Algorithm
md5
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=Copyright (c) 2002 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 1, 0001
Subject
OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network
Serial Number
4a:19:d2:38:8c:82:59:1c:a5:5d:73:5f:15:5d:dc:a3
Issuer
OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network
Timespan
May 12, 1997 - Jan 7, 2004
Subject
CN=VeriSign Time Stamping Service,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)01,O=VeriSign\, Inc.
Serial Number
08:7a:6d:5c:6f:62:93:4f:ba:c4:fd:43:e1:14:18:9d
Issuer
OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Feb 28, 2001 - Jan 6, 2004
Subject
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Serial Number
c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Timespan
Jan 10, 1997 - Dec 31, 2020
Subject
CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:de:aa:11:d4:d8:40:9a:a8:be:e6
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Dec 10, 2000 - Nov 12, 2005
Subject
CN=Microsoft Corporation,OU=Copyright (c) 2002 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:11:43:00:00:00:00:00:34
Issuer
CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 25, 2002 - Nov 25, 2003
Minor OS version
0
Major OS version
6
Entry point
57683
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
unicows.pdb
kernel32
GetDiskFreeSpaceA
GetDiskFreeSpaceW
GetDriveTypeA
GetDriveTypeW
FreeEnvironmentStringsA
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetEnvironmentVariableW
FindClose
IsDBCSLeadByte
GetFullPathNameA
GetFullPathNameW
GetLocaleInfoW
GetLogicalDriveStringsA
GetLogicalDriveStringsW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleW
GetNamedPipeHandleStateA
GetNamedPipeHandleStateW
GetNumberFormatA
GetNumberFormatW
GetPrivateProfileIntA
GetPrivateProfileIntW
GetPrivateProfileSectionA
GetPrivateProfileSectionW
GetPrivateProfileSectionNamesA
GetPrivateProfileSectionNamesW
GetPrivateProfileStringA
GetPrivateProfileStringW
GetPrivateProfileStructA
GetPrivateProfileStructW
GetProfileIntA
GetProfileIntW
GetProfileSectionA
GetProfileSectionW
GetProfileStringA
GetProfileStringW
GetShortPathNameA
GetShortPathNameW
GetStartupInfoA
GetStartupInfoW
GetStringTypeExA
GetStringTypeExW
GetSystemDirectoryA
GetSystemDirectoryW
GetTempFileNameW
GetTempPathW
GetTimeFormatA
GetTimeFormatW
GetVersionExA
GetVersionExW
GetVolumeInformationA
GetVolumeInformationW
GetWindowsDirectoryA
GetWindowsDirectoryW
GlobalAddAtomW
GlobalFindAtomA
GlobalFindAtomW
GlobalGetAtomNameA
GlobalGetAtomNameW
IsBadStringPtrW
IsValidCodePage
LCMapStringA
LCMapStringW
LoadLibraryW
LoadLibraryExW
lstrcatW
lstrcmpW
lstrcmpiW
lstrcpyW
lstrcpynW
MoveFileW
OpenEventA
OpenEventW
GetDefaultCommConfigW
OpenFileMappingW
OpenMutexA
OpenMutexW
OpenSemaphoreA
OpenSemaphoreW
OutputDebugStringA
OutputDebugStringW
PeekConsoleInputA
PeekConsoleInputW
QueryDosDeviceA
QueryDosDeviceW
ReadConsoleA
ReadConsoleW
ReadConsoleInputA
ReadConsoleInputW
ReadConsoleOutputA
ReadConsoleOutputW
ReadConsoleOutputCharacterA
ReadConsoleOutputCharacterW
RemoveDirectoryA
RemoveDirectoryW
ScrollConsoleScreenBufferA
ScrollConsoleScreenBufferW
SearchPathA
SearchPathW
SetComputerNameA
SetComputerNameW
SetConsoleTitleA
SetConsoleTitleW
SetCurrentDirectoryA
SetCurrentDirectoryW
SetDefaultCommConfigA
SetDefaultCommConfigW
SetEnvironmentVariableA
SetEnvironmentVariableW
SetFileAttributesA
SetFileAttributesW
SetLocaleInfoA
SetLocaleInfoW
SetVolumeLabelA
SetVolumeLabelW
VerLanguageNameA
VerLanguageNameW
WaitNamedPipeA
WaitNamedPipeW
WriteConsoleA
WriteConsoleW
WriteConsoleInputA
WriteConsoleInputW
WriteConsoleOutputA
WriteConsoleOutputW
WriteConsoleOutputCharacterA
WriteConsoleOutputCharacterW
WritePrivateProfileSectionA
WritePrivateProfileSectionW
WritePrivateProfileStringA
WritePrivateProfileStringW
WritePrivateProfileStructA
WritePrivateProfileStructW
WriteProfileSectionA
WriteProfileSectionW
WriteProfileStringA
WriteProfileStringW
FindResourceA
lstrcpyA
IsBadWritePtr
SetErrorMode
GetStringTypeW
FindResourceW
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
GetDefaultCommConfigA
GetDateFormatW
GetDateFormatA
GetCurrentDirectoryA
GetCurrentDirectoryW
GetCurrencyFormatW
GetCurrencyFormatA
GetConsoleTitleW
GetConsoleTitleA
GetComputerNameW
GetComputerNameA
GetAtomNameW
GetAtomNameA
FormatMessageW
FormatMessageA
LocalFree
HeapReAlloc
LocalAlloc
FreeEnvironmentStringsW
FindNextFileW
FindNextFileA
FindFirstFileW
FindFirstFileA
FindFirstChangeNotificationW
FindFirstChangeNotificationA
FindAtomW
FindAtomA
FillConsoleOutputCharacterW
FillConsoleOutputCharacterA
FatalAppExitW
FatalAppExitA
ExpandEnvironmentStringsW
ExpandEnvironmentStringsA
EnumTimeFormatsW
EnumTimeFormatsA
EnumSystemLocalesW
EnumSystemLocalesA
EnumSystemCodePagesW
EnumDateFormatsW
EnumDateFormatsA
EnumCalendarInfoW
EnumCalendarInfoA
DeleteFileW
CreateSemaphoreW
CreateSemaphoreA
CreateProcessW
CreateProcessA
CreateNamedPipeW
CreateNamedPipeA
CreateMutexW
CreateMutexA
CreateMailslotW
CreateMailslotA
CreateFileMappingW
CreateFileMappingA
CreateFileW
CreateEventW
CreateEventA
CreateDirectoryExW
CreateDirectoryExA
CreateDirectoryW
CreateDirectoryA
CopyFileW
CopyFileA
CompareStringW
CommConfigDialogW
CommConfigDialogA
CallNamedPipeW
CallNamedPipeA
BuildCommDCBAndTimeoutsW
BuildCommDCBAndTimeoutsA
BuildCommDCBW
BuildCommDCBA
AddAtomW
AddAtomA
InitializeCriticalSection
GetACP
GetOEMCP
DeleteCriticalSection
GetFileAttributesA
LoadLibraryExA
EnumResourceTypesW
EnumResourceNamesW
EnumResourceLanguagesW
lstrlenW
FindResourceExW
SizeofResource
LoadResource
LockResource
FreeResource
GetTempFileNameA
GetTempPathA
DeleteFileA
MoveFileA
_lclose
_lread
_lwrite
_llseek
VirtualQuery
GetSystemInfo
VirtualFree
VirtualAlloc
VirtualProtect
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
GetCurrentProcessId
EnterCriticalSection
LeaveCriticalSection
CompareStringA
GlobalAddAtomA
AreFileApisANSI
GlobalLock
GlobalAlloc
GlobalUnlock
GlobalFree
GetCurrentThreadId
lstrcmpA
WideCharToMultiByte
lstrcmpiA
GetLocaleInfoA
CreateFileA
GetFileSize
CloseHandle
IsDBCSLeadByteEx
LoadLibraryA
InterlockedExchange
FreeLibrary
GetModuleHandleA
GetProcAddress
GetCPInfo
GetVersion
GetFileAttributesW
GetLastError
lstrlenA
GetProcessHeap
HeapAlloc
SetLastError
MultiByteToWideChar
OpenFileMappingA
HeapFree
RtlUnwind
user32
SystemParametersInfoW
TranslateAcceleratorW
TabbedTextOutA
TabbedTextOutW
UnregisterClassA
UnregisterClassW
VkKeyScanExA
VkKeyScanExW
WinHelpA
WinHelpW
wvsprintfW
EnumClipboardFormats
GetClipboardData
VkKeyScanW
wsprintfW
IsCharLowerW
IsCharAlphaNumericW
IsCharAlphaW
InsertMenuItemW
InsertMenuItemA
InsertMenuW
InsertMenuA
GrayStringW
GrayStringA
GetWindowTextLengthW
GetWindowTextLengthA
GetWindowTextW
GetWindowTextA
GetWindowLongW
GetTabbedTextExtentW
GetTabbedTextExtentA
GetPropW
GetMessageW
GetMenuStringW
GetMenuStringA
GetMenuItemInfoW
GetMenuItemInfoA
GetKeyNameTextW
GetKeyboardLayout
GetKeyNameTextA
GetKeyboardLayoutNameW
GetKeyboardLayoutNameA
GetDlgItemTextW
GetDlgItemTextA
GetClipboardFormatNameW
GetClipboardFormatNameA
GetClassNameW
GetClassLongW
GetClassLongA
GetClassInfoExW
GetClassInfoExA
GetClassInfoW
GetClassInfoA
FindWindowExW
FindWindowExA
FindWindowW
FindWindowA
EnableWindow
EnumPropsExW
EnumPropsExA
EnumPropsW
EnumPropsA
EnumDisplaySettingsW
EnumDisplaySettingsA
DrawTextExW
DrawTextExA
DrawTextW
DrawTextA
DrawStateW
DrawStateA
DlgDirSelectExW
DlgDirSelectExA
DlgDirSelectComboBoxExW
DlgDirSelectComboBoxExA
DlgDirListComboBoxW
DlgDirListComboBoxA
DlgDirListW
SystemParametersInfoA
DispatchMessageW
DialogBoxParamW
DialogBoxParamA
DialogBoxIndirectParamW
DialogBoxIndirectParamA
DefMDIChildProcW
DefFrameProcW
DefDlgProcW
DdeQueryStringW
DdeQueryStringA
DdeQueryConvInfo
DdeInitializeW
DdeInitializeA
DdeCreateStringHandleW
DdeCreateStringHandleA
DdeConnectList
DdeConnect
CharUpperBuffW
CharUpperW
CharToOemBuffW
CharToOemW
CharPrevW
CharNextW
CharLowerBuffW
CharLowerW
ChangeMenuW
SetWindowTextW
SetWindowTextA
SetWindowsHookExW
SetWindowsHookW
SetWindowsHookA
SetWindowLongW
SetPropW
SetMenuItemInfoW
SetMenuItemInfoA
SetDlgItemTextW
SetDlgItemTextA
SetClassLongW
SetClassLongA
SendNotifyMessageW
SendMessageTimeoutW
SendMessageCallbackW
SendMessageW
SendDlgItemMessageW
RemovePropW
RegisterWindowMessageW
RegisterClipboardFormatW
RegisterClipboardFormatA
RegisterClassExW
RegisterClassExA
RegisterClassW
RegisterClassA
PostThreadMessageW
PostMessageW
PeekMessageW
OemToCharBuffW
OemToCharW
ModifyMenuW
ModifyMenuA
MessageBoxIndirectW
MessageBoxIndirectA
MessageBoxExW
MessageBoxW
MapVirtualKeyExW
MapVirtualKeyExA
ChangeMenuA
ChangeDisplaySettingsW
ChangeDisplaySettingsA
CreateWindowExW
CreateWindowExA
CreateMDIWindowW
CreateMDIWindowA
CreateDialogParamW
CreateDialogParamA
CreateDialogIndirectParamW
CreateDialogIndirectParamA
CreateAcceleratorTableW
CreateAcceleratorTableA
CopyAcceleratorTableW
CopyAcceleratorTableA
CallWindowProcW
CallMsgFilterW
CallMsgFilterA
AppendMenuW
AppendMenuA
GetWindowThreadProcessId
SetWindowLongA
TranslateAcceleratorA
IsDialogMessageA
DispatchMessageA
PeekMessageA
GetMessageA
PostThreadMessageA
PostMessageA
SendNotifyMessageA
SendMessageTimeoutA
SendMessageCallbackA
SendMessageA
DefWindowProcA
CallWindowProcA
DefMDIChildProcA
DefFrameProcA
DefDlgProcA
GetWindowLongA
GetParent
GetDlgItem
SetPropA
RemovePropA
GetPropA
IsDlgButtonChecked
GetClassNameA
CharLowerA
CharUpperA
UnhookWindowsHookEx
SetWindowsHookExA
MapVirtualKeyW
CallNextHookEx
MapVirtualKeyA
LoadStringW
LoadMenuIndirectW
LoadMenuIndirectA
EnumChildWindows
RegisterWindowMessageA
LoadMenuW
LoadMenuA
LoadKeyboardLayoutW
LoadKeyboardLayoutA
LoadImageW
LoadImageA
LoadIconW
LoadIconA
LoadCursorFromFileW
LoadCursorFromFileA
LoadCursorW
LoadCursorA
LoadBitmapW
LoadBitmapA
LoadAcceleratorsW
LoadAcceleratorsA
IsWindowUnicode
IsWindow
IsDialogMessageW
DlgDirListA
IsClipboardFormatAvailable
IsCharUpperW
gdi32
GetEnhMetaFileDescriptionW
GetGlyphOutlineA
GetGlyphOutlineW
GetICMProfileA
GetICMProfileW
GetKerningPairsA
GetKerningPairsW
GetLogColorSpaceA
GetLogColorSpaceW
GetMetaFileA
GetMetaFileW
GetObjectA
GetObjectType
GetObjectW
GetOutlineTextMetricsA
GetOutlineTextMetricsW
GetTextExtentExPointA
GetTextExtentExPointW
GetTextExtentPointA
GetEnhMetaFileDescriptionA
GetTextExtentPoint32A
GetTextExtentPoint32W
GetTextFaceA
GetTextFaceW
GetTextMetricsA
GetTextMetricsW
PolyTextOutA
PolyTextOutW
RemoveFontResourceA
RemoveFontResourceW
ResetDCA
ResetDCW
SetICMProfileA
SetICMProfileW
StartDocA
StartDocW
TextOutW
UpdateICMRegKeyA
UpdateICMRegKeyW
GetEnhMetaFileW
GetEnhMetaFileA
GetCharacterPlacementW
GetCharacterPlacementA
GetCharWidthFloatW
GetCharWidthFloatA
GetCharWidth32W
GetCharWidthW
GetCharWidthA
GetCharABCWidthsFloatW
GetCharABCWidthsFloatA
GetCharABCWidthsW
GetCharABCWidthsA
ExtTextOutW
ExtTextOutA
EnumICMProfilesW
EnumICMProfilesA
EnumFontsW
EnumFontsA
EnumFontFamiliesExW
EnumFontFamiliesExA
EnumFontFamiliesW
EnumFontFamiliesA
CreateScalableFontResourceW
CreateScalableFontResourceA
CreateMetaFileW
CreateMetaFileA
CreateICW
CreateICA
CreateFontIndirectW
CreateFontIndirectA
CreateFontW
CreateFontA
CreateEnhMetaFileW
CreateEnhMetaFileA
CreateDCW
CreateDCA
CreateColorSpaceW
CreateColorSpaceA
CopyMetaFileW
CopyMetaFileA
CopyEnhMetaFileW
CopyEnhMetaFileA
AddFontResourceW
AddFontResourceA
GetFontData
GetTextExtentPointW
TranslateCharsetInfo
GetTextCharset
mpr
WNetGetUniversalNameW
MultinetGetConnectionPerformanceW
WNetAddConnectionA
WNetAddConnectionW
WNetAddConnection2A
WNetAddConnection2W
WNetAddConnection3A
WNetAddConnection3W
WNetCancelConnectionA
WNetCancelConnectionW
WNetCancelConnection2A
WNetCancelConnection2W
WNetConnectionDialog1A
WNetConnectionDialog1W
WNetDisconnectDialog1A
WNetDisconnectDialog1W
WNetEnumResourceA
WNetEnumResourceW
WNetGetConnectionA
WNetGetConnectionW
WNetGetLastErrorA
WNetGetLastErrorW
WNetGetNetworkInformationA
WNetGetNetworkInformationW
WNetGetProviderNameA
WNetUseConnectionW
WNetUseConnectionA
WNetOpenEnumW
WNetOpenEnumA
WNetGetUserW
WNetGetUserA
MultinetGetConnectionPerformanceA
WNetGetUniversalNameA
WNetGetResourceParentW
WNetGetResourceParentA
WNetGetResourceInformationW
WNetGetResourceInformationA
WNetGetProviderNameW
advapi32
RegOpenKeyA
RegEnumValueA
RegUnLoadKeyW
RegUnLoadKeyA
RegSetValueExW
RegSetValueExA
RegSetValueW
RegSetValueA
RegSaveKeyW
RegSaveKeyA
RegReplaceKeyW
RegReplaceKeyA
RegQueryValueExW
RegQueryValueExA
RegQueryValueW
RegQueryValueA
RegQueryMultipleValuesW
RegQueryMultipleValuesA
RegQueryInfoKeyW
RegQueryInfoKeyA
RegOpenKeyExW
RegOpenKeyW
RegCloseKey
RegLoadKeyW
RegLoadKeyA
RegEnumValueW
RegEnumKeyExW
RegEnumKeyExA
RegEnumKeyW
RegEnumKeyA
RegDeleteValueW
RegDeleteValueA
RegDeleteKeyW
RegDeleteKeyA
RegCreateKeyExW
RegCreateKeyExA
RegCreateKeyW
RegCreateKeyA
RegConnectRegistryW
RegConnectRegistryA
IsTextUnicode
GetUserNameW
GetUserNameA
RegOpenKeyExA
comdlg32
GetOpenFileNameW
GetFileTitleW
GetFileTitleA
FindTextW
ChooseFontW
ChooseFontA
ChooseColorW
ChooseColorA
ReplaceTextW
FindTextA
ReplaceTextA
GetOpenFileNameA
GetSaveFileNameA
PageSetupDlgA
PageSetupDlgW
PrintDlgA
PrintDlgW
GetSaveFileNameW
version
VerQueryValueW
VerQueryValueA
VerInstallFileW
VerInstallFileA
VerFindFileW
VerFindFileA
GetFileVersionInfoSizeW
GetFileVersionInfoSizeA
GetFileVersionInfoW
GetFileVersionInfoA
shell32
SHGetPathFromIDListA
ord180
ord179
SHGetFileInfoA
SHFileOperationA
SHChangeNotify
SHBrowseForFolderA
Shell_NotifyIconA
ShellExecuteExA
ShellExecuteW
ShellExecuteA
ShellAboutW
ShellAboutA
FindExecutableW
FindExecutableA
ExtractIconExA
DragQueryFileA
DragQueryFileW
ExtractIconW
ExtractIconA
winspool.drv
GetPrinterW
GetPrinterDataW
GetPrinterDriverW
GetPrinterDriverDirectoryA
GetPrinterDriverDirectoryW
GetPrintProcessorDirectoryA
GetPrintProcessorDirectoryW
GetJobW
OpenPrinterW
ResetPrinterA
ResetPrinterW
SetJobA
SetJobW
SetPrinterA
SetPrinterW
SetPrinterDataA
SetPrinterDataW
StartDocPrinterA
EnumPrintProcessorsW
EnumPrintProcessorDatatypesW
EnumPrintersW
EnumPrinterDriversW
EnumPortsW
EnumMonitorsW
DocumentPropertiesW
DocumentPropertiesA
DeviceCapabilitiesW
DeviceCapabilitiesA
DeletePrintProvidorW
DeletePrintProvidorA
DeletePrintProcessorW
DeletePrintProcessorA
DeletePrinterDriverW
DeletePrinterDriverA
DeletePortW
DeletePortA
DeleteMonitorW
DeleteMonitorA
ConfigurePortW
ConfigurePortA
AdvancedDocumentPropertiesW
AdvancedDocumentPropertiesA
AddPrintProvidorW
AddPrintProvidorA
AddPrintProcessorW
AddPrintProcessorA
AddPrinterDriverW
AddPrinterDriverA
AddPrinterW
AddPrinterA
AddPortW
AddPortA
AddMonitorW
AddMonitorA
AddJobW
AddJobA
OpenPrinterA
StartDocPrinterW
oledlg
OleUIUpdateLinksW
OleUIPromptUserW
OleUIPasteSpecialW
OleUIObjectPropertiesW
OleUIInsertObjectW
OleUIEditLinksW
OleUIConvertW
OleUIChangeSourceW
OleUIChangeIconW
OleUIBusyW
ord8
OleUIAddVerbMenuW
ord1
ord6
winmm
waveOutGetErrorTextW
waveOutGetErrorTextA
waveOutGetDevCapsW
waveOutGetDevCapsA
waveInGetErrorTextW
mixerGetControlDetailsW
midiOutGetErrorTextW
midiOutGetErrorTextA
midiOutGetDevCapsW
midiOutGetDevCapsA
midiInGetErrorTextW
midiInGetDevCapsW
midiInGetDevCapsA
mciSendStringW
mciSendStringA
mciSendCommandW
mciGetErrorStringW
mciGetErrorStringA
midiInGetErrorTextA
mciGetDeviceIDW
mciGetDeviceIDA
joyGetDevCapsW
joyGetDevCapsA
auxGetDevCapsW
auxGetDevCapsA
PlaySoundW
PlaySoundA
mixerGetDevCapsW
mixerGetLineControlsW
mixerGetLineInfoW
mmioInstallIOProcW
mmioOpenA
mmioOpenW
mmioRenameA
mmioRenameW
mmioStringToFOURCCA
mmioStringToFOURCCW
sndPlaySoundA
sndPlaySoundW
waveInGetDevCapsA
waveInGetDevCapsW
waveInGetErrorTextA
mixerGetDevCapsA
avicap32
capCreateCaptureWindowA
capGetDriverDescriptionA
msvfw32
MCIWndCreateW
MCIWndCreateA
GetSaveFileNamePreviewW
GetOpenFileNamePreviewW
imm32
ImmReleaseContext
ImmGetCompositionStringA
ImmGetContext
ImmGetCompositionStringW
AcquireCredentialsHandleW
AddAtomW
AddFontResourceW
AddJobW
AddMonitorW
AddPortW
AddPrintProcessorW
AddPrintProvidorW
AddPrinterDriverW
AddPrinterW
AdvancedDocumentPropertiesW
AppendMenuW
BeginUpdateResourceA
BeginUpdateResourceW
BroadcastSystemMessageW
BuildCommDCBAndTimeoutsW
BuildCommDCBW
CallMsgFilterW
CallNamedPipeW
CallWindowProcA
CallWindowProcW
ChangeDisplaySettingsExW
ChangeDisplaySettingsW
ChangeMenuW
CharLowerBuffW
CharLowerW
CharNextW
CharPrevW
CharToOemBuffW
CharToOemW
CharUpperBuffW
CharUpperW
ChooseColorW
ChooseFontW
CommConfigDialogW
CompareStringW
ConfigurePortW
CopyAcceleratorTableW
CopyEnhMetaFileW
CopyFileExW
CopyFileW
CopyMetaFileW
CreateAcceleratorTableW
CreateColorSpaceW
CreateDCW
CreateDialogIndirectParamW
CreateDialogParamW
CreateDirectoryExW
CreateDirectoryW
CreateEnhMetaFileW
CreateEventW
CreateFileMappingW
CreateFileW
CreateFontIndirectW
CreateFontW
CreateICW
CreateMDIWindowW
CreateMailslotW
CreateMetaFileW
CreateMutexW
CreateNamedPipeW
CreateProcessW
CreateScalableFontResourceW
CreateSemaphoreW
CreateStdAccessibleProxyW
CreateWaitableTimerW
CreateWindowExW
CryptAcquireContextW
CryptEnumProviderTypesW
CryptEnumProvidersW
CryptGetDefaultProviderW
CryptSetProviderExW
CryptSetProviderW
CryptSignHashW
CryptVerifySignatureW
DdeConnect
DdeConnectList
DdeCreateStringHandleW
DdeInitializeW
DdeQueryConvInfo
DdeQueryStringW
DefDlgProcW
DefFrameProcW
DefMDIChildProcW
DefWindowProcW
DeleteFileW
DeleteMonitorW
DeletePortW
DeletePrintProcessorW
DeletePrintProvidorW
DeletePrinterDriverW
DeviceCapabilitiesW
DialogBoxIndirectParamW
DialogBoxParamW
DispatchMessageW
DlgDirListComboBoxW
DlgDirListW
DlgDirSelectComboBoxExW
DlgDirSelectExW
DocumentPropertiesW
DragQueryFileW
DrawStateW
DrawTextExW
DrawTextW
EnableWindow
EndUpdateResourceA
EndUpdateResourceW
EnumCalendarInfoExW
EnumCalendarInfoW
EnumClipboardFormats
EnumDateFormatsExW
EnumDateFormatsW
EnumDisplayDevicesW
EnumDisplaySettingsExW
EnumDisplaySettingsW
EnumFontFamiliesExW
EnumFontFamiliesW
EnumFontsW
EnumICMProfilesW
EnumMonitorsW
EnumPortsW
EnumPrintProcessorDatatypesW
EnumPrintProcessorsW
EnumPrinterDriversW
EnumPrintersW
EnumPropsA
EnumPropsExA
EnumPropsExW
EnumPropsW
EnumSystemCodePagesW
EnumSystemLocalesW
EnumTimeFormatsW
EnumerateSecurityPackagesW
ExpandEnvironmentStringsW
ExtTextOutW
ExtractIconExW
ExtractIconW
FatalAppExitW
FillConsoleOutputCharacterW
FindAtomW
FindExecutableW
FindFirstChangeNotificationW
FindFirstFileW
FindNextFileW
FindResourceExW
FindResourceW
FindTextW
FindWindowExW
FindWindowW
FormatMessageW
FreeContextBuffer
FreeEnvironmentStringsW
GetAltTabInfoW
GetAtomNameW
GetCPInfo
GetCPInfoExW
GetCalendarInfoW
GetCharABCWidthsFloatW
GetCharABCWidthsW
GetCharWidth32W
GetCharWidthFloatW
GetCharWidthW
GetCharacterPlacementW
GetClassInfoExW
GetClassInfoW
GetClassLongW
GetClassNameW
GetClipboardData
GetClipboardFormatNameW
GetComputerNameW
GetConsoleTitleW
GetCurrencyFormatW
GetCurrentDirectoryW
GetCurrentHwProfileW
GetDateFormatW
GetDefaultCommConfigW
GetDiskFreeSpaceExW
GetDiskFreeSpaceW
GetDlgItemTextW
GetDriveTypeW
GetEnhMetaFileDescriptionW
GetEnhMetaFileW
GetEnvironmentStringsW
GetEnvironmentVariableW
GetFileAttributesExW
GetFileAttributesW
GetFileTitleW
GetFileVersionInfoSizeW
GetFileVersionInfoW
GetFullPathNameW
GetGlyphOutlineW
GetICMProfileW
GetJobW
GetKerningPairsW
GetKeyNameTextW
GetKeyboardLayoutNameW
GetLocaleInfoW
GetLogColorSpaceW
GetLogicalDriveStringsW
GetLongPathNameW
GetMenuItemInfoW
GetMenuStringW
GetMessageW
GetMetaFileW
GetModuleFileNameW
GetModuleHandleW
GetMonitorInfoW
GetNamedPipeHandleStateW
GetNumberFormatW
GetObjectW
GetOpenFileNamePreviewW
GetOpenFileNameW
GetOutlineTextMetricsW
GetPrintProcessorDirectoryW
GetPrinterDataW
GetPrinterDriverDirectoryW
GetPrinterDriverW
GetPrinterW
GetPrivateProfileIntW
GetPrivateProfileSectionNamesW
GetPrivateProfileSectionW
GetPrivateProfileStringW
GetPrivateProfileStructW
GetProcAddress
GetProfileIntW
GetProfileSectionW
GetProfileStringW
GetPropA
GetPropW
GetRoleTextW
GetSaveFileNamePreviewW
GetSaveFileNameW
GetShortPathNameW
GetStartupInfoW
GetStateTextW
GetStringTypeExW
GetStringTypeW
GetSystemDirectoryW
GetSystemWindowsDirectoryW
GetTabbedTextExtentW
GetTempFileNameW
GetTempPathW
GetTextExtentExPointW
GetTextExtentPoint32W
GetTextExtentPointW
GetTextFaceW
GetTextMetricsW
GetTimeFormatW
GetUserNameW
GetVersionExW
GetVolumeInformationW
GetWindowLongA
GetWindowLongW
GetWindowModuleFileNameW
GetWindowTextLengthW
GetWindowTextW
GetWindowsDirectoryW
GlobalAddAtomW
GlobalFindAtomW
GlobalGetAtomNameW
GrayStringW
InitSecurityInterfaceW
InitializeSecurityContextW
InsertMenuItemW
InsertMenuW
IsBadStringPtrW
IsCharAlphaNumericW
IsCharAlphaW
IsCharLowerW
IsCharUpperW
IsClipboardFormatAvailable
IsDestinationReachableW
IsDialogMessageW
IsTextUnicode
IsValidCodePage
IsWindowUnicode
LCMapStringW
LoadAcceleratorsW
LoadBitmapW
LoadCursorFromFileW
LoadCursorW
LoadIconW
LoadImageW
LoadKeyboardLayoutW
LoadLibraryExW
LoadLibraryW
LoadMenuIndirectW
LoadMenuW
LoadStringW
MCIWndCreateW
MapVirtualKeyExW
MapVirtualKeyW
MessageBoxExW
MessageBoxIndirectW
MessageBoxW
ModifyMenuW
MoveFileW
MultiByteToWideChar
MultinetGetConnectionPerformanceW
OemToCharBuffW
OemToCharW
OleUIAddVerbMenuW
OleUIBusyW
OleUIChangeIconW
OleUIChangeSourceW
OleUIConvertW
OleUIEditLinksW
OleUIInsertObjectW
OleUIObjectPropertiesW
OleUIPasteSpecialW
OleUIPromptUserW
OleUIUpdateLinksW
OpenEventW
OpenFileMappingW
OpenMutexW
OpenPrinterW
OpenSemaphoreW
OpenWaitableTimerW
OutputDebugStringW
PageSetupDlgW
PeekConsoleInputW
PeekMessageW
PlaySoundW
PolyTextOutW
PostMessageW
PostThreadMessageW
PrintDlgW
QueryContextAttributesW
QueryCredentialsAttributesW
QueryDosDeviceW
QuerySecurityPackageInfoW
RasConnectionNotificationW
RasCreatePhonebookEntryW
RasDeleteEntryW
RasDeleteSubEntryW
RasDialW
RasEditPhonebookEntryW
RasEnumConnectionsW
RasEnumDevicesW
RasEnumEntriesW
RasGetConnectStatusW
RasGetEntryDialParamsW
RasGetEntryPropertiesW
RasGetErrorStringW
RasGetProjectionInfoW
RasHangUpW
RasRenameEntryW
RasSetEntryDialParamsW
RasSetEntryPropertiesW
RasSetSubEntryPropertiesW
RasValidateEntryNameW
ReadConsoleInputW
ReadConsoleOutputCharacterW
ReadConsoleOutputW
ReadConsoleW
RegConnectRegistryW
RegCreateKeyExW
RegCreateKeyW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegEnumKeyW
RegEnumValueW
RegLoadKeyW
RegOpenKeyExW
RegOpenKeyW
RegQueryInfoKeyW
RegQueryMultipleValuesW
RegQueryValueExW
RegQueryValueW
RegReplaceKeyW
RegSaveKeyW
RegSetValueExW
RegSetValueW
RegUnLoadKeyW
RegisterClassExW
RegisterClassW
RegisterClipboardFormatW
RegisterDeviceNotificationW
RegisterWindowMessageW
RemoveDirectoryW
RemoveFontResourceW
RemovePropA
RemovePropW
ReplaceTextW
ResetDCW
ResetPrinterW
SHBrowseForFolderW
SHChangeNotify
SHFileOperationW
SHGetFileInfoW
SHGetNewLinkInfoW
SHGetPathFromIDListW
ScrollConsoleScreenBufferW
SearchPathW
SendDlgItemMessageW
SendMessageCallbackW
SendMessageTimeoutW
SendMessageW
SendNotifyMessageW
SetCalendarInfoW
SetClassLongW
SetComputerNameW
SetConsoleTitleW
SetCurrentDirectoryW
SetDefaultCommConfigW
SetDlgItemTextW
SetEnvironmentVariableW
SetFileAttributesW
SetICMProfileW
SetJobW
SetLocaleInfoW
SetMenuItemInfoW
SetPrinterDataW
SetPrinterW
SetPropA
SetPropW
SetVolumeLabelW
SetWindowLongA
SetWindowLongW
SetWindowTextW
SetWindowsHookExW
SetWindowsHookW
ShellAboutW
ShellExecuteExW
ShellExecuteW
Shell_NotifyIconW
StartDocPrinterW
StartDocW
SystemParametersInfoW
TabbedTextOutW
TextOutW
TranslateAcceleratorW
UnregisterClassW
UpdateICMRegKeyW
UpdateResourceA
UpdateResourceW
VerFindFileW
VerInstallFileW
VerLanguageNameW
VerQueryValueW
VkKeyScanExW
VkKeyScanW
WNetAddConnection2W
WNetAddConnection3W
WNetAddConnectionW
WNetCancelConnection2W
WNetCancelConnectionW
WNetConnectionDialog1W
WNetDisconnectDialog1W
WNetEnumResourceW
WNetGetConnectionW
WNetGetLastErrorW
WNetGetNetworkInformationW
WNetGetProviderNameW
WNetGetResourceInformationW
WNetGetResourceParentW
WNetGetUniversalNameW
WNetGetUserW
WNetOpenEnumW
WNetUseConnectionW
WaitNamedPipeW
WideCharToMultiByte
WinHelpW
WriteConsoleInputW
WriteConsoleOutputCharacterW
WriteConsoleOutputW
WriteConsoleW
WritePrivateProfileSectionW
WritePrivateProfileStringW
WritePrivateProfileStructW
WriteProfileSectionW
WriteProfileStringW
__FreeAllLibrariesInMsluDll
auxGetDevCapsW
capCreateCaptureWindowW
capGetDriverDescriptionW
joyGetDevCapsW
lstrcatW
lstrcmpW
lstrcmpiW
lstrcpyW
lstrcpynW
lstrlenW
mciGetDeviceIDW
mciGetErrorStringW
mciSendCommandW
mciSendStringW
midiInGetDevCapsW
midiInGetErrorTextW
midiOutGetDevCapsW
midiOutGetErrorTextW
mixerGetControlDetailsW
mixerGetDevCapsW
mixerGetLineControlsW
mixerGetLineInfoW
mmioInstallIOProcW
mmioOpenW
mmioRenameW
mmioStringToFOURCCW
sndPlaySoundW
waveInGetDevCapsW
waveInGetErrorTextW
waveOutGetDevCapsW
waveOutGetErrorTextW
wsprintfW
wvsprintfW
Name
.text
Size
216KB
Virtual Size
215KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=29, id=123, version=21213,
count=861, id=1, productName=Unmarked objects,
count=1, id=122, version=21213,
count=5, id=125, version=21213,
count=18, id=109, version=21213,
count=1, id=94, version=2179,
count=1, id=120, version=21213,